taste_tester 0.0.14 → 0.0.19

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: dbe88f9386cbb7c68b721ea057a30881dd98ba374a0e84528e43da739eb88d31
-  data.tar.gz: 642d43ce2aa006331680178e0ab15afba8d88323ab89d2e1cb0321f74c663b07
+  metadata.gz: a2fa17de1672814a680aa44b592bc649f3b3ec80b057a0199aed9b3ce13e1fe5
+  data.tar.gz: e9150bc89798e17651102239224763468ca8a65affb7706c4080a409577bf108
 SHA512:
-  metadata.gz: 3a256a6d7e67b346aad620a1782032394f68848ef9c085c24854b4d70ffdd718b64d4970c479b7080aba11b468423905759d0ae8f92d305aa38fe654187745b7
-  data.tar.gz: '048097e573d03b748a08d09438820d9ee144c90d0fb43e0375fbd91e1354215d7c82d8a0b39f97452b0752ab8dc79fe5b5863c9108727ba87fc2810271f27ee8'
+  metadata.gz: 12bf2e2e631987187b455b294bae9db28bd1f50c7aba35bbe9d04b3cbceabec3f65fd665f5ef5c70424bb296438742ebd0a918a5545480ec058ff760ac6f81fa
+  data.tar.gz: 4b6781fe213f7e9447077d6f629c3facc4f2fa596212b8a8f1f8cde40e1f1aba4c66542f1b939b587c87d4e05878320e410e2bd8b9bbec98a40ff97ac52c4806

data/README.md

@@ -1,7 +1,6 @@
 # Taste Tester
 
-[![TravisCI](https://travis-ci.org/facebook/taste-tester.svg)](http://travis-ci.org/facebook/taste-tester)
-[![CircleCI](https://circleci.com/gh/facebook/taste-tester.svg?style=svg)](https://circleci.com/gh/facebook/taste-tester)
+![Continuous Integration](https://github.com/facebook/taste-tester/workflows/Continuous%20Integration/badge.svg?event=push)
 
 ## Intro
 Ohai!
@@ -25,6 +24,7 @@ Typical usage is:
 
 ```text
 vi cookbooks/...             # Make your changes and commit locally
+taste-tester impact          # Check where your changes are used
 taste-tester test -s [host]  # Put host in Taste Tester mode
 ssh root@[host]              # Log in to host
   # Run chef and watch it break
@@ -62,6 +62,7 @@ you want to test on, i.e. SSH public/private keys, SSH certificates, Kerberos
 * Colorize
 * BetweenMeals
 * Minitar
+* Chef
 
 ## Automatic Untesting
 
@@ -91,7 +92,8 @@ All command-line options are available in the config file:
 * plugin_path (string, no default)
 * repo (string, default: `#{ENV['HOME']}/ops`)
 * testing_time (int, default: `3600`)
-* chef_client_command (strng, default: `chef-client`)
+* chef_client_command (string, default: `chef-client`)
+* json (bool, default: `false`)
 * skip_repo_checks (bool, default: `false`)
 * skip_pre_upload_hook (bool, default: `false`)
 * skip_post_upload_hook (bool, default: `false`)
@@ -103,7 +105,7 @@ The following options are also available:
 * base_dir - The directory in the repo under which to find chef configs.
   Default: `chef`
 * cookbook_dirs - An array of cookbook directories relative to base_dir.
-  Default: `['cookbooks']
+  Default: `['cookbooks']`
 * role_dir - A directory of roles, relative to base_dir. Default: `roles`
 * databag_dir - A directory of databags, relative to base_dir.
   Default: `databags`
@@ -112,9 +114,13 @@ The following options are also available:
 * checksum_dir - The checksum directory to put in knife.conf for users. Default:
   `#{ENV['HOME']}/.chef/checksums`
 * bundle - use a single tar.gz file for transporting cookbooks, roles and
-  databags to clients. Experimental.
+  databags to clients. Experimental. Value is tri-state:
+  * `false` - server uses knife upload, client uses `chef_server`
+  * `:compatible` - make server support both methods, client uses tar.gz
+  * `true` - server only creates tar.gz, client uses tar.gz
+  Default: false
+* impact - analyze local changes to determine which hosts/roles to test.
   Default: false
-
 
 ## Plugin
 
@@ -156,10 +162,28 @@ Stuff to do after putting all hosts in test mode.
 
 Additional checks you want to do on the repo as sanity checks.
 
-**Plugin example**
+* self.find_impact(changes)
+
+Custom implementation of impact analysis. Uses `knife deps` by default. May
+return any data structure, provided one or both of `self.post_impact` or
+`self.print_impact` are defined.
+
+* self.post_impact(basic_impact)
+
+Stuff to do after preliminary impact analysis. May be used to extend the
+information generated by `self.find_impact`, reformat the data structure, etc.
+
+* self.print_impact(final_impact)
+
+Custom output of calculated impact, useful if defining either of the other
+impact hooks. Must return a truthy value to prevent the default output from
+printing.
+
+## Plugin example
 
 This is an example `/etc/taste-tester-plugin.rb` to add a user-defined string
 to `client-taste-tester.rb` on the remote system:
+
 ```
 Hooks.class_eval do
   def self.test_remote_client_rb_extra_code(_hostname)
@@ -170,7 +194,8 @@ Hooks.class_eval do
   end
 end
 ```
-Be sure to pass this plugin file with `-p` on the command line or set it as 
+
+Be sure to pass this plugin file with `-p` on the command line or set it as
 `plugin_path` in your `taste-tester-config.rb` file.
 
 ## License

data/bin/taste-tester

@@ -41,7 +41,7 @@ module TasteTester
 
   # Do an initial read of the config file if it's in the default place, so
   # that if people override chef_client_command the help message is correct.
-  if File.exists?(File.expand_path(TasteTester::Config.config_file))
+  if File.exist?(File.expand_path(TasteTester::Config.config_file))
     TasteTester::Config.from_file(
       File.expand_path(TasteTester::Config.config_file),
     )
@@ -66,7 +66,8 @@ TLDR; Most common usage is:
   taste-tester untest -s [host] # Put host back in production
                                 #   (optional - will revert itself after 1 hour)
 
-And you're done! See the above wiki page for more details.
+And you're done!
+Note: There may be site specific testing instructions, see local documentation for details.
 
 MODES:
   test
@@ -135,7 +136,6 @@ MODES:
   end
 
   options = { :config_file => TasteTester::Config.config_file }
-  # rubocop:disable Metrics/BlockLength
   parser = OptionParser.new do |opts|
     opts.banner = description
 
@@ -143,7 +143,7 @@ MODES:
     opts.separator 'Global options:'.upcase
 
     opts.on('-c', '--config FILE', 'Config file') do |file|
-      unless File.exists?(File.expand_path(file))
+      unless File.exist?(File.expand_path(file))
         logger.error("Sorry, cannot find #{file}")
         exit(1)
       end
@@ -160,7 +160,7 @@ MODES:
     end
 
     opts.on('-p', '--plugin-path FILE', String, 'Plugin file') do |file|
-      unless File.exists?(File.expand_path(file))
+      unless File.exist?(File.expand_path(file))
         logger.error("Sorry, cannot find #{file}")
         exit(1)
       end
@@ -244,6 +244,7 @@ MODES:
       'Until when should the host remain in testing.' +
       ' Anything parsable is ok, such as "5/18 4:35" or "16/9/13".'
     ) do |time|
+      # can make this an implicit rescue after we drop ruby 2.4
       begin
         options[:testing_until] = Time.parse(time)
       rescue StandardError
@@ -305,6 +306,17 @@ MODES:
       options[:roles] = roles
     end
 
+    opts.on(
+      '-J', '--jumps JUMP',
+      'Uses ssh\'s `ProxyJump` support to ssh across bastion/jump hosts. ' +
+      'This is particularly useful in tunnel mode to test machines that ' +
+      'your workstatation doesn\'t have direct access to. The format is ' +
+      'the same as `ssh -J`: a comma-separated list of hosts to forward ' +
+      'through.'
+    ) do |jumps|
+      options[:jumps] = jumps
+    end
+
     opts.on('--really', 'Really do link-only. DANGEROUS!') do |r|
       options[:really] = r
     end
@@ -356,6 +368,15 @@ MODES:
       options[:json] = true
     end
 
+    opts.on(
+      '-w', '--windows-target',
+      'The target is a Windows machine. You will likely want to override ' +
+      '`test_timestamp` and `chef_config_path`, but *not* `config_file`. ' +
+      'Requires the target be running PowerShell >= 5.1 as the default shell.'
+    ) do
+      options[:windows_target] = true
+    end
+
     opts.separator ''
     opts.separator 'Control local hook behavior with these options:'
 
@@ -389,7 +410,6 @@ MODES:
       options[:skip_post_test_hook] = true
     end
   end
-  # rubocop:enable Metrics/BlockLength
 
   if mode == 'help'
     puts parser
@@ -398,7 +418,7 @@ MODES:
 
   parser.parse!
 
-  if File.exists?(File.expand_path(options[:config_file]))
+  if File.exist?(File.expand_path(options[:config_file]))
     TasteTester::Config.from_file(File.expand_path(options[:config_file]))
   end
   TasteTester::Config.merge!(options)
@@ -407,7 +427,7 @@ MODES:
 
   if TasteTester::Config.plugin_path
     path = File.expand_path(TasteTester::Config.plugin_path)
-    unless File.exists?(path)
+    unless File.exist?(path)
       logger.error("Plugin not found (#{path})")
       exit(1)
     end
@@ -447,5 +467,7 @@ MODES:
 end
 
 if $PROGRAM_NAME == __FILE__
-  include TasteTester
+  module TasteTester
+    include TasteTester
+  end
 end

data/lib/taste_tester/client.rb

@@ -20,6 +20,8 @@ require 'taste_tester/logging'
 require 'between_meals/repo'
 require 'between_meals/knife'
 require 'between_meals/changeset'
+require 'chef/log'
+require 'chef/cookbook/chefignore'
 
 module TasteTester
   # Client side upload functionality
@@ -130,46 +132,52 @@ module TasteTester
     def populate(stream, writer, path, destination)
       full_path = File.join(File.join(TasteTester::Config.repo, path))
       return unless File.directory?(full_path)
+      chefignores = Chef::Cookbook::Chefignore.new(full_path)
       # everything is relative to the repo dir. chdir makes handling all the
       # paths within this simpler
       Dir.chdir(full_path) do
-        Find.find('.') do |p|
-          # ignore current directory. The File.directory? would also skip it,
-          # but we need to do it early because the string is too short for the
-          # next statement.
-          next if p == '.'
-          # paths are enumerated as relative to the input path '.', so we get
-          # './dir/file'. Stripping off the first two characters gives us a
-          # a cleaner 'dir/file' path.
-          name = File.join(destination, p[2..-1])
-          if File.directory?(p)
-            # skip it. This also handles symlinks to directories which aren't
-            # useful either.
-          elsif File.symlink?(p)
-            # tar handling of filenames > 100 characters gets complex. We'd use
-            # split_name from Minitar, but it's a private method. It's
-            # reasonable to assume that all symlink names in the bundle are
-            # less than 100 characters long. Long term, the version of minitar
-            # in chefdk should be upgraded.
-            fail 'Add support for long symlink paths' if name.size > 100
-            # The version of Minitar included in chefdk does not support
-            # symlinks directly. Therefore we use direct writes to the
-            # underlying stream to reproduce the symlinks
-            symlink = {
-              :name => name,
-              :mode => 0644,
-              :typeflag => '2',
-              :size => 0,
-              :linkname => File.readlink(p),
-              :prefix => '',
-            }
-            stream.write(Minitar::PosixHeader.new(symlink))
-          else
-            File.open(p, 'rb') do |r|
-              writer.add_file_simple(
-                name, :mode => 0644, :size => File.size(r)
-              ) do |d, _opts|
-                IO.copy_stream(r, d)
+        look_at = ['']
+        while (prefix = look_at.pop)
+          Dir.glob(File.join("#{prefix}**", '*'), File::FNM_DOTMATCH) do |p|
+            minus_first = p.split(
+              File::SEPARATOR,
+            )[1..-1].join(File::SEPARATOR)
+            next if chefignores.ignored?(p) ||
+              chefignores.ignored?(minus_first)
+            name = File.join(destination, p)
+            if File.directory?(p)
+              # we don't store directories in the tar, but we do want to follow
+              # top level symlinked directories as they are used to share
+              # cookbooks between codebases.
+              if minus_first == '' && File.symlink?(p)
+                look_at.push("#{p}#{File::SEPARATOR}")
+              end
+            elsif File.symlink?(p)
+              # tar handling of filenames > 100 characters gets complex. We'd
+              # use split_name from Minitar, but it's a private method. It's
+              # reasonable to assume that all symlink names in the bundle are
+              # less than 100 characters long. Long term, the version of minitar
+              # in chefdk should be upgraded.
+              fail 'Add support for long symlink paths' if name.size > 100
+              # The version of Minitar included in chefdk does not support
+              # symlinks directly. Therefore we use direct writes to the
+              # underlying stream to reproduce the symlinks
+              symlink = {
+                :name => name,
+                :mode => 0644,
+                :typeflag => '2',
+                :size => 0,
+                :linkname => File.readlink(p),
+                :prefix => '',
+              }
+              stream.write(Minitar::PosixHeader.new(symlink))
+            else
+              File.open(p, 'rb') do |r|
+                writer.add_file_simple(
+                  name, :mode => 0644, :size => File.size(r)
+                ) do |d, _opts|
+                  IO.copy_stream(r, d)
+                end
               end
             end
           end
@@ -206,11 +214,12 @@ module TasteTester
     end
 
     def full
+      logger.warn('Doing full upload')
       if TasteTester::Config.bundle
         bundle_upload
-        return
+        # only leave early if true (strictly bundle mode only)
+        return if TasteTester::Config.bundle == true
       end
-      logger.warn('Doing full upload')
       @knife.cookbook_upload_all
       @knife.role_upload_all
       @knife.databag_upload_all
@@ -220,7 +229,7 @@ module TasteTester
       if TasteTester::Config.bundle
         logger.info('No partial support for bundle mode, doing full upload')
         bundle_upload
-        return
+        return if TasteTester::Config.bundle == true
       end
       logger.info('Doing differential upload from ' +
                    @server.latest_uploaded_ref)

data/lib/taste_tester/commands.rb

@@ -158,7 +158,7 @@ module TasteTester
       server = TasteTester::Server.new
       hosts.each do |hostname|
         host = TasteTester::Host.new(hostname, server)
-        host.run
+        host.runchef
       end
     end
 
@@ -226,16 +226,17 @@ module TasteTester
 
       changes = _find_changeset(repo)
 
-      # Use Knife (or custom logic) to check the dependencies of each role
-      # against the list of changes. `impacted_roles` will contian the set
-      # of roles with direct or indirect (dependency) modifications.
-      impacted_roles = TasteTester::Hooks.impact_find_roles(changes)
-      impacted_roles ||= _find_roles(changes)
+      # Perform preliminary impact analysis. By default, use Knife to find
+      # the roles dependent on modified cookbooks. Custom logic may provide
+      # additional information by defining the find_impact plugin method.
+      basic_impact = TasteTester::Hooks.find_impact(changes)
+      basic_impact ||= _find_roles(changes)
 
       # Do any post processing required on the list of impacted roles, such
-      # as looking up hostnames associated with each role.
-      final_impact = TasteTester::Hooks.post_impact(impacted_roles)
-      final_impact ||= impacted_roles
+      # as looking up hostnames associated with each role. By default, pass
+      # the preliminary results through unmodified.
+      final_impact = TasteTester::Hooks.post_impact(basic_impact)
+      final_impact ||= basic_impact
 
       # Print the calculated impact. If a print hook is defined that
       # returns true, then the default print function is skipped.
@@ -283,7 +284,7 @@ module TasteTester
       if TasteTester::Config.relative_cookbook_dirs.length > 1
         logger.error('Knife deps does not support multiple cookbook paths.')
         logger.error('Please flatten the cookbooks into a single directory' +
-                     ' or override the impact_find_roles function.')
+                     ' or define the find_impact method in a local plugin.')
         exit(1)
       end
 
@@ -292,7 +293,9 @@ module TasteTester
       databags = Set.new(changes.databags)
 
       if cookbooks.empty? && roles.empty?
-        logger.warn('No cookbooks or roles have been modified.')
+        unless TasteTester::Config.json
+          logger.warn('No cookbooks or roles have been modified.')
+        end
         return Set.new
       end
 

data/lib/taste_tester/config.rb

@@ -62,6 +62,8 @@ module TasteTester
     transport 'ssh'
     no_repo false
     json false
+    jumps nil
+    windows_target false
 
     # Start/End refs for calculating changes in the repo.
     #  - start_ref should be the "master" commit of the repository

data/lib/taste_tester/hooks.rb

@@ -51,22 +51,22 @@ module TasteTester
     # Find the set of roles dependent on the changed files.
     # If returning something other than a set of roles, post_impact and/or
     # print_impact should be specified to handle the output.
-    def self.impact_find_roles(_changes); end
+    def self.find_impact(_changes); end
 
     # Do stuff after we find impacted roles
-    # This should return a Set object with the final impact. To return more
-    # complex data, you must also provide a print_impact function which returns
-    # true to override the default output.
+    # This should return a JSON serializable object with the final impact
+    # assessment. You will probably also want to define a print_impact method
+    # which returns true to override the default output logic.
     def self.post_impact(_impacted_roles); end
 
-    # Customized the printed output of impact
+    # Customize the printed output of impact
     # If this method returns true, the default output will not be printed.
     def self.print_impact(_final_impact); end
 
     def self.get(file)
       path = File.expand_path(file)
-      logger.warn("Loading plugin at #{path}")
-      unless File.exists?(path)
+      logger.warn("Loading plugin at #{path}") unless TasteTester::Config.json
+      unless File.exist?(path)
         logger.error('Plugin file not found')
         exit(1)
       end

data/lib/taste_tester/host.rb

@@ -47,25 +47,11 @@ module TasteTester
     def runchef
       logger.warn("Running '#{TasteTester::Config.chef_client_command}' " +
                   "on #{@name}")
-      cmd = "#{TasteTester::Config.ssh_command} " +
-            "#{TasteTester::Config.user}@#{@name} "
-      if TasteTester::Config.user != 'root'
-        cc = Base64.encode64(cmds).delete("\n")
-        cmd += "\"echo '#{cc}' | base64 --decode | sudo bash -x\""
-      else
-        cmd += "\"#{cmds}\""
-      end
-      status = IO.popen(
-        cmd,
-      ) do |io|
-        # rubocop:disable AssignmentInCondition
-        while line = io.gets
-          puts line.chomp!
-        end
-        # rubocop:enable AssignmentInCondition
-        io.close
-        $CHILD_STATUS.to_i
-      end
+      transport = get_transport
+      transport << TasteTester::Config.chef_client_command
+
+      io = IO.new(1)
+      status, = transport.run(io)
       logger.warn("Finished #{TasteTester::Config.chef_client_command}" +
                   " on #{@name} with status #{status}")
       if status.zero?
@@ -106,34 +92,24 @@ module TasteTester
       # see if someone else is taste-testing
       transport << we_testing
 
-      transport << 'logger -t taste-tester Moving server into taste-tester' +
-        " for #{@user}"
-      transport << touchcmd
-      # shell redirection is also racy, so make a temporary file first
-      transport << "tmpconf=$(mktemp #{TasteTester::Config.chef_config_path}/" +
-        "#{TASTE_TESTER_CONFIG}.TMPXXXXXX)"
-      transport << "/bin/echo -n \"#{serialized_config}\" | base64 --decode" +
-        ' > "${tmpconf}"'
-      # then rename it to replace any existing file
-      transport << 'mv -f "${tmpconf}" ' +
-        "#{TasteTester::Config.chef_config_path}/#{TASTE_TESTER_CONFIG}"
-      transport << "( ln -vsf #{TasteTester::Config.chef_config_path}" +
-        "/#{TASTE_TESTER_CONFIG} #{TasteTester::Config.chef_config_path}/" +
-        "#{TasteTester::Config.chef_config}; true )"
+      if TasteTester::Config.windows_target
+        add_windows_test_cmds(transport, serialized_config)
+      else
+        add_sane_os_test_cmds(transport, serialized_config)
+      end
 
       # look again to see if someone else is taste-testing. This is where
       # we work out if we won or lost a race with another user.
       transport << we_testing
 
-      transport.run
+      status, output = transport.run
 
-      case transport.status
+      case status
       when 0
         # no problem, keep going.
         nil
       when 42
-        fail TasteTester::Exceptions::AlreadyTestingError,
-             transport.output.chomp
+        fail TasteTester::Exceptions::AlreadyTestingError, output.chomp
       else
         transport.error!
       end
@@ -157,18 +133,10 @@ module TasteTester
       if TasteTester::Config.use_ssh_tunnels
         TasteTester::Tunnel.kill(@name)
       end
-      config_prod = TasteTester::Config.chef_config.split('.').join('-prod.')
-      [
-        "ln -vsf #{TasteTester::Config.chef_config_path}/#{config_prod} " +
-          "#{TasteTester::Config.chef_config_path}/" +
-          TasteTester::Config.chef_config,
-        "ln -vsf #{TasteTester::Config.chef_config_path}/client-prod.pem " +
-          "#{TasteTester::Config.chef_config_path}/client.pem",
-        "rm -vf #{TasteTester::Config.chef_config_path}/#{TASTE_TESTER_CONFIG}",
-        "rm -vf #{TasteTester::Config.timestamp_file}",
-        'logger -t taste-tester Returning server to production',
-      ].each do |cmd|
-        transport << cmd
+      if TasteTester::Config.windows_target
+        add_windows_untest_cmds(transport)
+      else
+        add_sane_os_untest_cmds(transport)
       end
       transport.run!
     end
@@ -183,15 +151,30 @@ module TasteTester
       #    short circuits the test verb
       # This is written as a squiggly heredoc so the indentation of the awk is
       # preserved. Later we remove the newlines to make it a bit easier to read.
-      shellcode = <<~ENDOFSHELLCODE
-        awk "\\$0 ~ /^#{USER_PREAMBLE}/{
-          if (\\$NF != \\"#{@user}\\"){
-            print \\$NF;
-            exit 42
+      if TasteTester::Config.windows_target
+        shellcode = <<~ENDOFSHELLCODE
+          Get-Content #{config_file} | ForEach-Object {
+            if (\$_ -match "#{USER_PREAMBLE}" ) {
+              $user = \$_.Split()[-1]
+              if (\$user -ne "#{@user}") {
+                echo \$user
+                exit 42
+              }
+            }
           }
-        }" #{config_file}
-      ENDOFSHELLCODE
-      shellcode.delete("\n")
+        ENDOFSHELLCODE
+      else
+        shellcode = <<~ENDOFSHELLCODE
+          awk "\\$0 ~ /^#{USER_PREAMBLE}/{
+            if (\\$NF != \\"#{@user}\\"){
+              print \\$NF;
+              exit 42
+            }
+          }" #{config_file}
+        ENDOFSHELLCODE
+        shellcode.chomp!
+      end
+      shellcode
     end
 
     def keeptesting
@@ -210,15 +193,147 @@ module TasteTester
 
     private
 
+    # Sources must be 'registered' with the Eventlog, so check if we have
+    # registered and register if necessary
+    def create_eventlog_if_needed_cmd
+      get_src = 'Get-EventLog -LogName Application -source taste-tester 2>$null'
+      mk_src = 'New-EventLog -source "taste-tester" -LogName Application'
+      "if (-Not (#{get_src})) { #{mk_src} }"
+    end
+
+    # Remote testing commands for most OSes...
+    def add_sane_os_test_cmds(transport, serialized_config)
+      transport << 'logger -t taste-tester Moving server into taste-tester' +
+        " for #{@user}"
+      transport << touchcmd
+      # shell redirection is also racy, so make a temporary file first
+      transport << "tmpconf=$(mktemp #{TasteTester::Config.chef_config_path}/" +
+        "#{TASTE_TESTER_CONFIG}.TMPXXXXXX)"
+      transport << "/bin/echo -n \"#{serialized_config}\" | base64 --decode" +
+        ' > "${tmpconf}"'
+      # then rename it to replace any existing file
+      transport << 'mv -f "${tmpconf}" ' +
+        "#{TasteTester::Config.chef_config_path}/#{TASTE_TESTER_CONFIG}"
+      transport << "( ln -vsf #{TasteTester::Config.chef_config_path}" +
+        "/#{TASTE_TESTER_CONFIG} #{TasteTester::Config.chef_config_path}/" +
+        "#{TasteTester::Config.chef_config}; true )"
+    end
+
+    # Remote testing commands for Windows
+    def add_windows_test_cmds(transport, serialized_config)
+      # This is the closest equivalent to 'bash -x' - but if we put it on
+      # by default the way we do with linux it badly breaks our output. So only
+      # set it if we're in debug
+      #
+      # This isn't the most optimal place for this. It should be in ssh_util
+      # and we should jam this into the beggining of the cmds list we get,
+      # but this is early enough and good enough for now and we can think about
+      # that when we refactor tunnel.sh, ssh.sh and ssh_util.sh into one sane
+      # class.
+      if logger.level == Logger::DEBUG
+        transport << 'Set-PSDebug -trace 1'
+      end
+
+      ttconfig =
+        "#{TasteTester::Config.chef_config_path}/#{TASTE_TESTER_CONFIG}"
+      realconfig = "#{TasteTester::Config.chef_config_path}/" +
+        TasteTester::Config.chef_config
+      [
+        create_eventlog_if_needed_cmd,
+        'Write-EventLog -LogName "Application" -Source "taste-tester" ' +
+          '-EventID 1 -EntryType Information ' +
+          "-Message \"Moving server into taste-tester for #{@user}\"",
+        touchcmd,
+        "$b64 = \"#{serialized_config}\"",
+        "$ttconfig = \"#{ttconfig}\"",
+        "$realconfig = \"#{realconfig}\"",
+
+        '$tmp64 = (New-TemporaryFile).name',
+        '$tmp = (New-TemporaryFile).name',
+
+        '$b64 | Out-File -Encoding ASCII $tmp64 -Force',
+
+        # Remove our tmp file before we write to it or certutil crashes...
+        "#{win_rm_f} $tmp",
+        'certutil -decode $tmp64 $tmp',
+        'mv $tmp $ttconfig -Force',
+
+        'New-Item -ItemType SymbolicLink -Value $ttconfig $realconfig -Force',
+      ].each do |cmd|
+        transport << cmd
+      end
+    end
+
     def touchcmd
-      touch = Base64.encode64(
-        "if [ 'Darwin' = $(uname) ]; then touch -t \"$(date -r " +
-        "#{TasteTester::Config.testing_end_time.to_i} +'%Y%m%d%H%M.%S')\" " +
-        "#{TasteTester::Config.timestamp_file}; else touch --date \"$(date " +
-        "-d @#{TasteTester::Config.testing_end_time.to_i} +'%Y-%m-%d %T')\" " +
-        "#{TasteTester::Config.timestamp_file}; fi",
-      ).delete("\n")
-      "/bin/echo -n '#{touch}' | base64 --decode | bash"
+      if TasteTester::Config.windows_target
+        # There's no good touch equivalent in Windows. You can force
+        # creation of a new file, but that'll nuke it's contents, which if we're
+        # 'keeptesting'ing, then we'll loose the contents (PID and such).
+        # We can set the timestamp with Get-Item.creationtime, but it must exist
+        # if we're not gonna crash. So do both.
+        [
+          "$ts = \"#{TasteTester::Config.timestamp_file}\"",
+          'if (-Not (Test-Path $ts)) { New-Item -ItemType file $ts }',
+          '(Get-Item "$ts").LastWriteTime=("' +
+            "#{TasteTester::Config.testing_end_time}\")",
+        ].join(';')
+      else
+        touch = Base64.encode64(
+          "if [ 'Darwin' = $(uname) ]; then touch -t \"$(date -r " +
+          "#{TasteTester::Config.testing_end_time.to_i} +'%Y%m%d%H%M.%S')\" " +
+          "#{TasteTester::Config.timestamp_file}; else touch --date \"$(date " +
+          "-d @#{TasteTester::Config.testing_end_time.to_i} +'%Y-%m-%d %T')\"" +
+          " #{TasteTester::Config.timestamp_file}; fi",
+        ).delete("\n")
+        "/bin/echo -n '#{touch}' | base64 --decode | bash"
+      end
+    end
+
+    # Remote untesting commands for Windows
+    def add_windows_untest_cmds(transport)
+      config_prod = TasteTester::Config.chef_config.split('.').join('-prod.')
+      tt_config =
+        "#{TasteTester::Config.chef_config_path}/#{TASTE_TESTER_CONFIG}"
+      pem_file = "#{TasteTester::Config.chef_config_path}/client-prod.pem"
+      pem_link = "#{TasteTester::Config.chef_config_path}/client.pem"
+
+      [
+        'New-Item -ItemType SymbolicLink -Force -Value ' +
+          "#{TasteTester::Config.chef_config_path}/#{config_prod} " +
+          "#{TasteTester::Config.chef_config_path}/" +
+          TasteTester::Config.chef_config,
+        'New-Item -ItemType SymbolicLink -Force -Value ' +
+          "#{pem_file} #{pem_link}",
+        "#{win_rm_f} #{tt_config}",
+        "#{win_rm_f} #{TasteTester::Config.timestamp_file}",
+        create_eventlog_if_needed_cmd,
+        'Write-EventLog -LogName "Application" -Source "taste-tester" ' +
+          '-EventID 4 -EntryType Information -Message "Returning server ' +
+          'to production"',
+      ].each do |cmd|
+        transport << cmd
+      end
+    end
+
+    # Remote untesting commands for most OSes...
+    def add_sane_os_untest_cmds(transport)
+      config_prod = TasteTester::Config.chef_config.split('.').join('-prod.')
+      [
+        "ln -vsf #{TasteTester::Config.chef_config_path}/#{config_prod} " +
+          "#{TasteTester::Config.chef_config_path}/" +
+          TasteTester::Config.chef_config,
+        "ln -vsf #{TasteTester::Config.chef_config_path}/client-prod.pem " +
+          "#{TasteTester::Config.chef_config_path}/client.pem",
+        "rm -vf #{TasteTester::Config.chef_config_path}/#{TASTE_TESTER_CONFIG}",
+        "rm -vf #{TasteTester::Config.timestamp_file}",
+        'logger -t taste-tester Returning server to production',
+      ].each do |cmd|
+        transport << cmd
+      end
+    end
+
+    def win_rm_f
+      'Remove-Item -Force -ErrorAction SilentlyContinue'
     end
 
     def config
@@ -310,7 +425,7 @@ module TasteTester
           chef_repo_path taste_tester_dest
         ENDOFSCRIPT
       end
-      return ttconfig
+      ttconfig
     end
   end
 end