vagrant-clone 0.0.1 → 0.0.3

data/cookbooks/windows/resources/certificate_binding.rb

@@ -0,0 +1,128 @@
+#
+# Author:: Richard Lavey (richard.lavey@calastone.com)
+# Cookbook:: windows
+# Resource:: certificate_binding
+#
+# Copyright:: 2015-2017, Calastone Ltd.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+
+include Chef::Mixin::ShellOut
+include Chef::Mixin::PowershellOut
+include Windows::Helper
+
+property :cert_name, String, name_property: true, required: true
+property :name_kind, Symbol, equal_to: [:hash, :subject], default: :subject
+property :address, String, default: '0.0.0.0'
+property :port, Integer, default: 443
+property :app_id, String, default: '{4dc3e181-e14b-4a21-b022-59fc669b0914}'
+property :store_name, String, default: 'MY', regex: /^(?:MY|CA|ROOT)$/
+property :exists, [true, false], desired_state: true
+
+load_current_value do |desired|
+  cmd = shell_out("#{locate_sysnative_cmd('netsh.exe')} http show sslcert ipport=#{desired.address}:#{desired.port}")
+  Chef::Log.debug "netsh reports: #{cmd.stdout}"
+
+  address desired.address
+  port desired.port
+  store_name desired.store_name
+  app_id desired.app_id
+
+  if cmd.exitstatus == 0
+    m = cmd.stdout.scan(/Certificate Hash\s+:\s?([A-Fa-f0-9]{40})/)
+    raise "Failed to extract hash from command output #{cmd.stdout}" if m.empty?
+    cert_name m[0][0]
+    name_kind :hash
+    exists true
+  else
+    exists false
+  end
+end
+
+action :create do
+  hash = new_resource.name_kind == :subject ? hash_from_subject : new_resource.cert_name
+
+  if current_resource.exists
+    needs_change = (hash.casecmp(current_resource.cert_name) != 0)
+
+    if needs_change
+      converge_by("Changing #{current_resource.address}:#{current_resource.port}") do
+        delete_binding
+        add_binding hash
+      end
+    else
+      Chef::Log.debug("#{new_resource.address}:#{new_resource.port} already bound to #{hash} - nothing to do")
+    end
+  else
+    converge_by("Binding #{new_resource.address}:#{new_resource.port}") do
+      add_binding hash
+    end
+  end
+end
+
+action :delete do
+  if current_resource.exists
+    converge_by("Deleting #{current_resource.address}:#{current_resource.port}") do
+      delete_binding
+    end
+  else
+    Chef::Log.debug("#{current_resource.address}:#{current_resource.port} not bound - nothing to do")
+  end
+end
+
+action_class do
+  def netsh_command
+    locate_sysnative_cmd('netsh.exe')
+  end
+
+  def add_binding(hash)
+    cmd = "#{netsh_command} http add sslcert"
+    cmd << " ipport=#{current_resource.address}:#{current_resource.port}"
+    cmd << " certhash=#{hash}"
+    cmd << " appid=#{current_resource.app_id}"
+    cmd << " certstorename=#{current_resource.store_name}"
+    check_hash hash
+
+    shell_out!(cmd)
+  end
+
+  def delete_binding
+    shell_out!("#{netsh_command} http delete sslcert ipport=#{current_resource.address}:#{current_resource.port}")
+  end
+
+  def check_hash(hash)
+    p = powershell_out!("Test-Path \"cert:\\LocalMachine\\#{current_resource.store_name}\\#{hash}\"")
+
+    unless p.stderr.empty? && p.stdout =~ /True/i
+      raise "A Cert with hash of #{hash} doesn't exist in keystore LocalMachine\\#{current_resource.store_name}"
+    end
+    nil
+  end
+
+  def hash_from_subject
+    # escape wildcard subject name (*.acme.com)
+    subject = new_resource.cert_name.sub(/\*/, '`*')
+    ps_script = "& { gci cert:\\localmachine\\#{new_resource.store_name} | where { $_.subject -like '*#{subject}*' } | select -first 1 -expandproperty Thumbprint }"
+
+    Chef::Log.debug "Running PS script #{ps_script}"
+    p = powershell_out!(ps_script)
+
+    raise "#{ps_script} failed with #{p.stderr}" if !p.stderr.nil? && !p.stderr.empty?
+    raise "Couldn't find thumbprint for subject #{new_resource.cert_name}" if p.stdout.nil? || p.stdout.empty?
+
+    # seem to get a UTF-8 string with BOM returned sometimes! Strip any such BOM
+    hash = p.stdout.strip
+    hash[0].ord == 239 ? hash.force_encoding('UTF-8').delete!("\xEF\xBB\xBF".force_encoding('UTF-8')) : hash
+  end
+end

data/cookbooks/windows/resources/feature.rb

@@ -0,0 +1,82 @@
+#
+# Author:: Seth Chisamore (<schisamo@chef.io>)
+# Cookbook:: windows
+# Resource:: feature
+#
+# Copyright:: 2011-2017, Chef Software, Inc.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+
+property :feature_name, [Array, String], name_property: true
+property :source, String
+property :all, [true, false], default: false
+property :install_method, Symbol, equal_to: [:windows_feature_dism, :windows_feature_powershell, :windows_feature_servermanagercmd]
+
+include Windows::Helper
+
+def whyrun_supported?
+  true
+end
+
+action :install do
+  run_default_provider :install
+end
+
+action :remove do
+  run_default_provider :remove
+end
+
+action :delete do
+  run_default_provider :delete
+end
+
+action_class do
+  def locate_default_provider
+    if new_resource.install_method
+      new_resource.install_method
+    elsif ::File.exist?(locate_sysnative_cmd('dism.exe'))
+      :windows_feature_dism
+    elsif ::File.exist?(locate_sysnative_cmd('servermanagercmd.exe'))
+      :windows_feature_servermanagercmd
+    else
+      :windows_feature_powershell
+    end
+  end
+
+  def run_default_provider(desired_action)
+    case locate_default_provider
+    when :windows_feature_dism
+      windows_feature_dism new_resource.name do
+        action desired_action
+        feature_name new_resource.feature_name
+        source new_resource.source if new_resource.source
+        all new_resource.all
+      end
+    when :windows_feature_servermanagercmd
+      windows_feature_servermanagercmd new_resource.name do
+        action desired_action
+        feature_name new_resource.feature_name
+        source new_resource.source if new_resource.source
+        all new_resource.all
+      end
+    when :windows_feature_powershell
+      windows_feature_powershell new_resource.name do
+        action desired_action
+        feature_name new_resource.feature_name
+        source new_resource.source if new_resource.source
+        all new_resource.all
+      end
+    end
+  end
+end

data/cookbooks/windows/resources/feature_dism.rb

@@ -0,0 +1,108 @@
+#
+# Author:: Seth Chisamore (<schisamo@chef.io>)
+# Cookbook:: windows
+# Provider:: feature_dism
+#
+# Copyright:: 2011-2017, Chef Software, Inc.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+
+property :feature_name, [Array, String], name_property: true
+property :source, String
+property :all, [true, false], default: false
+
+include Chef::Mixin::ShellOut
+include Windows::Helper
+
+action :install do
+  Chef::Log.warn("Requested feature #{new_resource.feature_name} is not available on this system.") unless available?
+  unless !available? || installed?
+    converge_by("install Windows feature #{new_resource.feature_name}") do
+      addsource = new_resource.source ? "/LimitAccess /Source:\"#{new_resource.source}\"" : ''
+      addall = new_resource.all ? '/All' : ''
+      shell_out!("#{dism} /online /enable-feature #{to_array(new_resource.feature_name).map { |feature| "/featurename:#{feature}" }.join(' ')} /norestart #{addsource} #{addall}", returns: [0, 42, 127, 3010])
+      # Reload ohai data
+      reload_ohai_features_plugin(new_resource.action, new_resource.feature_name)
+    end
+  end
+end
+
+action :remove do
+  if installed?
+    converge_by("removing Windows feature #{new_resource.feature_name}") do
+      shell_out!("#{dism} /online /disable-feature #{to_array(new_resource.feature_name).map { |feature| "/featurename:#{feature}" }.join(' ')} /norestart", returns: [0, 42, 127, 3010])
+      # Reload ohai data
+      reload_ohai_features_plugin(new_resource.action, new_resource.feature_name)
+    end
+  end
+end
+
+action :delete do
+  raise Chef::Exceptions::UnsupportedAction, "#{self} :delete action not support on #{win_version.sku}" unless supports_feature_delete?
+  if available?
+    converge_by("deleting Windows feature #{new_resource.feature_name} from the image") do
+      shell_out!("#{dism} /online /disable-feature #{to_array(new_resource.feature_name).map { |feature| "/featurename:#{feature}" }.join(' ')} /Remove /norestart", returns: [0, 42, 127, 3010])
+      # Reload ohai data
+      reload_ohai_features_plugin(new_resource.action, new_resource.feature_name)
+    end
+  end
+end
+
+action_class do
+  def installed?
+    @installed ||= begin
+      install_ohai_plugin unless node['dism_features']
+
+      # Compare against ohai plugin instead of costly dism run
+      node['dism_features'].key?(new_resource.feature_name) && node['dism_features'][new_resource.feature_name] =~ /Enable/
+    end
+  end
+
+  def available?
+    @available ||= begin
+      install_ohai_plugin unless node['dism_features']
+
+      # Compare against ohai plugin instead of costly dism run
+      node['dism_features'].key?(new_resource.feature_name) && node['dism_features'][new_resource.feature_name] !~ /with payload removed/
+    end
+  end
+
+  def reload_ohai_features_plugin(take_action, feature_name)
+    ohai "Reloading Dism_Features Plugin - Action #{take_action} of feature #{feature_name}" do
+      action :reload
+      plugin 'dism_features'
+    end
+  end
+
+  def install_ohai_plugin
+    Chef::Log.info("node['dism_features'] data missing. Installing the dism_features Ohai plugin")
+
+    ohai_plugin 'dism_features' do
+      compile_time true
+      cookbook 'windows'
+    end
+  end
+
+  def supports_feature_delete?
+    win_version.major_version >= 6 && win_version.minor_version >= 2
+  end
+
+  # account for File System Redirector
+  # http://msdn.microsoft.com/en-us/library/aa384187(v=vs.85).aspx
+  def dism
+    @dism ||= begin
+      locate_sysnative_cmd('dism.exe')
+    end
+  end
+end

data/cookbooks/windows/resources/feature_powershell.rb

@@ -0,0 +1,70 @@
+#
+# Author:: Greg Zapp (<greg.zapp@gmail.com>)
+# Cookbook:: windows
+# Provider:: feature_powershell
+#
+
+property :feature_name, [Array, String], name_attribute: true
+property :source, String
+property :all, [true, false], default: false
+
+include Chef::Mixin::PowershellOut
+include Windows::Helper
+
+action :remove do
+  if installed?
+    converge_by("remove Windows feature #{new_resource.feature_name}") do
+      cmd = powershell_out!("#{remove_feature_cmdlet} #{to_array(new_resource.feature_name).join(',')}")
+      Chef::Log.info(cmd.stdout)
+    end
+  end
+end
+
+action :delete do
+  if available?
+    converge_by("delete Windows feature #{new_resource.feature_name} from the image") do
+      cmd = powershell_out!("Uninstall-WindowsFeature #{to_array(new_resource.feature_name).join(',')} -Remove")
+      Chef::Log.info(cmd.stdout)
+    end
+  end
+end
+
+action_class do
+  def install_feature_cmdlet
+    node['os_version'].to_f < 6.2 ? 'Import-Module ServerManager; Add-WindowsFeature' : 'Install-WindowsFeature'
+  end
+
+  def remove_feature_cmdlet
+    node['os_version'].to_f < 6.2 ? 'Import-Module ServerManager; Remove-WindowsFeature' : 'Uninstall-WindowsFeature'
+  end
+
+  def installed?
+    @installed ||= begin
+      cmd = powershell_out("(Get-WindowsFeature #{to_array(new_resource.feature_name).join(',')} | ?{$_.InstallState -ne \'Installed\'}).count")
+      cmd.stderr.empty? && cmd.stdout.chomp.to_i == 0
+    end
+  end
+
+  def available?
+    @available ||= begin
+      cmd = powershell_out("(Get-WindowsFeature #{to_array(new_resource.feature_name).join(',')} | ?{$_.InstallState -ne \'Removed\'}).count")
+      cmd.stderr.empty? && cmd.stdout.chomp.to_i > 0
+    end
+  end
+end
+
+action :install do
+  Chef::Log.warn("Requested feature #{new_resource.feature_name} is not available on this system.") unless available?
+  unless !available? || installed?
+    converge_by("install Windows feature #{new_resource.feature_name}") do
+      addsource = new_resource.source ? "-Source \"#{new_resource.source}\"" : ''
+      addall = new_resource.all ? '-IncludeAllSubFeature' : ''
+      cmd = if node['os_version'].to_f < 6.2
+              powershell_out!("#{install_feature_cmdlet} #{to_array(new_resource.feature_name).join(',')} #{addall}")
+            else
+              powershell_out!("#{install_feature_cmdlet} #{to_array(new_resource.feature_name).join(',')} #{addsource} #{addall}")
+            end
+      Chef::Log.info(cmd.stdout)
+    end
+  end
+end

data/cookbooks/windows/resources/feature_servermanagercmd.rb

@@ -0,0 +1,76 @@
+#
+# Author:: Seth Chisamore (<schisamo@chef.io>)
+# Cookbook:: windows
+# Provider:: feature_servermanagercmd
+#
+# Copyright:: 2011-2017, Chef Software, Inc.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+
+property :feature_name, [Array, String], name_attribute: true
+property :source, String
+property :all, [true, false], default: false
+
+include Chef::Mixin::ShellOut
+include Windows::Helper
+
+action :install do
+  unless installed?
+    converge_by("install Windows feature #{new_resource.feature_name}") do
+      check_reboot(shell_out("#{servermanagercmd} -install #{to_array(new_resource.feature_name).join(' ')}", returns: [0, 42, 127, 1003, 3010]), new_resource.feature_name)
+    end
+  end
+end
+
+action :remove do
+  if installed?
+    converge_by("removing Windows feature #{new_resource.feature_name}") do
+      check_reboot(shell_out("#{servermanagercmd} -remove #{to_array(new_resource.feature_name).join(' ')}", returns: [0, 42, 127, 1003, 3010]), new_resource.feature_name)
+    end
+  end
+end
+
+action :delete do
+  Chef::Log.warn('servermanagercmd does not support removing a feature from the image.')
+end
+
+# Exit codes are listed at http://technet.microsoft.com/en-us/library/cc749128(v=ws.10).aspx
+
+action_class do
+  def check_reboot(result, feature)
+    if result.exitstatus == 3010 # successful, but needs reboot
+      node.run_state['reboot_requested'] = true
+      Chef::Log.warn("Require reboot to install #{feature}")
+    elsif result.exitstatus == 1001 # failure, but needs reboot before we can do anything else
+      node.run_state['reboot_requested'] = true
+      Chef::Log.warn("Failed installing #{feature} and need to reboot")
+    end
+    result.error! # throw for any other bad results. The above results will also get raised, and should cause a reboot via the handler.
+  end
+
+  def installed?
+    @installed ||= begin
+      cmd = shell_out("#{servermanagercmd} -query", returns: [0, 42, 127, 1003])
+      cmd.stderr.empty? && (cmd.stdout =~ /^\s*?\[X\]\s.+?\s\[#{new_resource.feature_name}\]\s*$/i)
+    end
+  end
+
+  # account for File System Redirector
+  # http://msdn.microsoft.com/en-us/library/aa384187(v=vs.85).aspx
+  def servermanagercmd
+    @servermanagercmd ||= begin
+      locate_sysnative_cmd('servermanagercmd.exe')
+    end
+  end
+end

data/cookbooks/windows/resources/font.rb

@@ -0,0 +1,80 @@
+#
+# Author:: Sander Botman <sbotman@schubergphilis.com>
+# Cookbook:: windows
+# Resource:: font
+#
+# Copyright:: 2014-2017, Schuberg Philis BV.
+# Copyright:: 2017, Chef Software, Inc.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+
+property :name, String, name_property: true
+property :source, String, required: false
+
+include Windows::Helper
+
+action :install do
+  if font_exists?
+    Chef::Log.debug("Not installing font: #{new_resource.name}, font already installed.")
+  else
+    retrieve_cookbook_font
+    install_font
+    del_cookbook_font
+  end
+end
+
+action_class do
+  def retrieve_cookbook_font
+    font_file = new_resource.name
+    if new_resource.source
+      remote_file font_file do
+        action  :nothing
+        source  "file://#{new_resource.source}"
+        path    win_friendly_path(::File.join(ENV['TEMP'], font_file))
+      end.run_action(:create)
+    else
+      cookbook_file font_file do
+        action    :nothing
+        cookbook  cookbook_name.to_s unless cookbook_name.nil?
+        path      win_friendly_path(::File.join(ENV['TEMP'], font_file))
+      end.run_action(:create)
+    end
+  end
+
+  def del_cookbook_font
+    file ::File.join(ENV['TEMP'], new_resource.name) do
+      action :delete
+    end
+  end
+
+  def install_font
+    require 'win32ole' if RUBY_PLATFORM =~ /mswin|mingw32|windows/
+    fonts_dir = WIN32OLE.new('WScript.Shell').SpecialFolders('Fonts')
+    folder = WIN32OLE.new('Shell.Application').Namespace(fonts_dir)
+    converge_by("install font #{new_resource.name}") do
+      folder.CopyHere(win_friendly_path(::File.join(ENV['TEMP'], new_resource.name)))
+    end
+  end
+
+  # Check to see if the font is installed
+  #
+  # === Returns
+  # <true>:: If the font is installed
+  # <false>:: If the font is not instaled
+  def font_exists?
+    require 'win32ole' if RUBY_PLATFORM =~ /mswin|mingw32|windows/
+    fonts_dir = WIN32OLE.new('WScript.Shell').SpecialFolders('Fonts')
+    ::File.exist?(win_friendly_path(::File.join(fonts_dir, new_resource.name)))
+  end
+end

data/cookbooks/windows/resources/http_acl.rb

@@ -0,0 +1,110 @@
+#
+# Author:: Richard Lavey (richard.lavey@calastone.com)
+# Cookbook:: windows
+# Resource:: http_acl
+#
+# Copyright:: 2015-2017, Calastone Ltd.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+
+include Chef::Mixin::ShellOut
+include Windows::Helper
+
+property :url, String, name_property: true, required: true
+property :user, String
+property :sddl, String
+property :exists, [true, false], desired_state: true
+
+# See https://msdn.microsoft.com/en-us/library/windows/desktop/cc307236%28v=vs.85%29.aspx for netsh info
+
+load_current_value do |desired|
+  cmd_out = shell_out!("#{locate_sysnative_cmd('netsh.exe')} http show urlacl url=#{desired.url}").stdout
+  Chef::Log.debug "netsh reports: #{cmd_out}"
+
+  if cmd_out.include? desired.url
+    exists true
+    url desired.url
+    # Checks first for sddl, because it generates user(s)
+    sddl_match = cmd_out.match(/SDDL:\s*(?<sddl>.+)/)
+    if sddl_match
+      sddl sddl_match['sddl']
+    else
+      # if no sddl, tries to find a single user
+      user_match = cmd_out.match(/User:\s*(?<user>.+)/)
+      user user_match['user']
+    end
+  else
+    exists false
+  end
+end
+
+action :create do
+  raise '`user` xor `sddl` can\'t be used together' if new_resource.user && new_resource.sddl
+  raise 'When provided user property can\'t be empty' if new_resource.user && new_resource.user.empty?
+  raise 'When provided sddl property can\'t be empty' if new_resource.sddl && new_resource.sddl.empty?
+
+  if current_resource.exists
+    sddl_changed = (
+      new_resource.sddl &&
+      current_resource.sddl &&
+      current_resource.sddl.casecmp(new_resource.sddl) != 0
+    )
+    user_changed = (
+      new_resource.user &&
+      current_resource.user &&
+      current_resource.user.casecmp(new_resource.user) != 0
+    )
+
+    if sddl_changed || user_changed
+      converge_by("Changing #{new_resource.url}") do
+        delete_acl
+        apply_acl
+      end
+    else
+      Chef::Log.debug("#{new_resource.url} already set - nothing to do")
+    end
+  else
+    converge_by("Setting #{new_resource.url}") do
+      apply_acl
+    end
+  end
+end
+
+action :delete do
+  if current_resource.exists
+    converge_by("Deleting #{new_resource.url}") do
+      delete_acl
+    end
+  else
+    Chef::Log.debug("#{new_resource.url} does not exist - nothing to do")
+  end
+end
+
+action_class do
+  def netsh_command
+    locate_sysnative_cmd('netsh.exe')
+  end
+
+  def apply_acl
+    if current_resource.sddl
+      shell_out!("#{netsh_command} http add urlacl url=#{new_resource.url} sddl=\"#{new_resource.sddl}\"")
+    else
+      shell_out!("#{netsh_command} http add urlacl url=#{new_resource.url} user=\"#{new_resource.user}\"")
+    end
+  end
+
+  def delete_acl
+    shell_out!("#{netsh_command} http delete urlacl url=#{new_resource.url}")
+  end
+end