vagrant-openstack 0.0.4

data/cookbooks/apache2/attributes/default.rb

@@ -0,0 +1,153 @@
+#
+# Cookbook Name:: apache2
+# Attributes:: apache
+#
+# Copyright 2008-2009, Opscode, Inc.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+
+default['apache']['root_group']  = "root"
+
+# Where the various parts of apache are
+case platform
+when "redhat", "centos", "scientific", "fedora", "suse", "amazon", "oracle"
+  default['apache']['package'] = "httpd"
+  default['apache']['dir']     = "/etc/httpd"
+  default['apache']['log_dir'] = "/var/log/httpd"
+  default['apache']['error_log'] = "error.log"
+  default['apache']['user']    = "apache"
+  default['apache']['group']   = "apache"
+  default['apache']['binary']  = "/usr/sbin/httpd"
+  default['apache']['icondir'] = "/var/www/icons"
+  default['apache']['cache_dir'] = "/var/cache/httpd"
+  if node['platform_version'].to_f >= 6 then
+    default['apache']['pid_file'] = "/var/run/httpd/httpd.pid"
+  else
+    default['apache']['pid_file'] = "/var/run/httpd.pid"
+  end
+  default['apache']['lib_dir'] = node['kernel']['machine'] =~ /^i[36']86$/ ? "/usr/lib/httpd" : "/usr/lib64/httpd"
+  default['apache']['libexecdir'] = "#{node['apache']['lib_dir']}/modules"
+  default['apache']['default_site_enabled'] = false
+when "debian", "ubuntu"
+  default['apache']['package'] = "apache2"
+  default['apache']['dir']     = "/etc/apache2"
+  default['apache']['log_dir'] = "/var/log/apache2"
+  default['apache']['error_log'] = "error.log"
+  default['apache']['user']    = "www-data"
+  default['apache']['group']   = "www-data"
+  default['apache']['binary']  = "/usr/sbin/apache2"
+  default['apache']['icondir'] = "/usr/share/apache2/icons"
+  default['apache']['cache_dir'] = "/var/cache/apache2"
+  default['apache']['pid_file']  = "/var/run/apache2.pid"
+  default['apache']['lib_dir'] = "/usr/lib/apache2"
+  default['apache']['libexecdir'] = "#{node['apache']['lib_dir']}/modules"
+  default['apache']['default_site_enabled'] = false
+when "arch"
+  default['apache']['package'] = "apache"
+  default['apache']['dir']     = "/etc/httpd"
+  default['apache']['log_dir'] = "/var/log/httpd"
+  default['apache']['error_log'] = "error.log"
+  default['apache']['user']    = "http"
+  default['apache']['group']   = "http"
+  default['apache']['binary']  = "/usr/sbin/httpd"
+  default['apache']['icondir'] = "/usr/share/httpd/icons"
+  default['apache']['cache_dir'] = "/var/cache/httpd"
+  default['apache']['pid_file']  = "/var/run/httpd/httpd.pid"
+  default['apache']['lib_dir'] = "/usr/lib/httpd"
+  default['apache']['libexecdir'] = "#{node['apache']['lib_dir']}/modules"
+  default['apache']['default_site_enabled'] = false
+when "freebsd"
+  default['apache']['package'] = "apache22"
+  default['apache']['dir']     = "/usr/local/etc/apache22"
+  default['apache']['log_dir'] = "/var/log"
+  default['apache']['error_log'] = "httpd-error.log"
+  default['apache']['root_group'] = "wheel"
+  default['apache']['user']    = "www"
+  default['apache']['group']    = "www"
+  default['apache']['binary']  = "/usr/local/sbin/httpd"
+  default['apache']['icondir'] = "/usr/local/www/apache22/icons"
+  default['apache']['cache_dir'] = "/var/run/apache22"
+  default['apache']['pid_file']  = "/var/run/httpd.pid"
+  default['apache']['lib_dir'] = "/usr/local/libexec/apache22"
+  default['apache']['libexecdir'] = node['apache']['lib_dir']
+  default['apache']['default_site_enabled'] = false
+else
+  default['apache']['dir']     = "/etc/apache2"
+  default['apache']['log_dir'] = "/var/log/apache2"
+  default['apache']['error_log'] = "error.log"
+  default['apache']['user']    = "www-data"
+  default['apache']['group']   = "www-data"
+  default['apache']['binary']  = "/usr/sbin/apache2"
+  default['apache']['icondir'] = "/usr/share/apache2/icons"
+  default['apache']['cache_dir'] = "/var/cache/apache2"
+  default['apache']['pid_file']  = "logs/httpd.pid"
+  default['apache']['lib_dir'] = "/usr/lib/apache2"
+  default['apache']['libexecdir'] = "#{node['apache']['lib_dir']}/modules"
+  default['apache']['default_site_enabled'] = false
+end
+
+###
+# These settings need the unless, since we want them to be tunable,
+# and we don't want to override the tunings.
+###
+
+# General settings
+default['apache']['listen_ports'] = ["80"]
+default['apache']['contact'] = "ops@example.com"
+default['apache']['timeout'] = 300
+default['apache']['keepalive'] = "On"
+default['apache']['keepaliverequests'] = 100
+default['apache']['keepalivetimeout'] = 5
+
+# Security
+default['apache']['servertokens'] = "Prod"
+default['apache']['serversignature'] = "On"
+default['apache']['traceenable'] = "On"
+
+# mod_auth_openids
+default['apache']['allowed_openids'] = Array.new
+
+# mod_status Allow list, space seprated list of allowed entries.  
+default['apache']['status_allow_list'] = "localhost ip6-localhost"
+
+# mod_status ExtendedStatus, set to 'true' to enable
+default['apache']['ext_status'] = false
+
+# Prefork Attributes
+default['apache']['prefork']['startservers'] = 16
+default['apache']['prefork']['minspareservers'] = 16
+default['apache']['prefork']['maxspareservers'] = 32
+default['apache']['prefork']['serverlimit'] = 400
+default['apache']['prefork']['maxclients'] = 400
+default['apache']['prefork']['maxrequestsperchild'] = 10000
+
+# Worker Attributes
+default['apache']['worker']['startservers'] = 4
+default['apache']['worker']['serverlimit'] = 16
+default['apache']['worker']['maxclients'] = 1024
+default['apache']['worker']['minsparethreads'] = 64
+default['apache']['worker']['maxsparethreads'] = 192
+default['apache']['worker']['threadsperchild'] = 64
+default['apache']['worker']['maxrequestsperchild'] = 0
+
+# Default modules to enable via include_recipe
+
+default['apache']['default_modules'] = %w{
+  status alias auth_basic authn_file authz_default authz_groupfile authz_host authz_user autoindex
+  dir env mime negotiation setenvif
+}
+
+%w{ log_config logio }.each do |log_mod|
+  default['apache']['default_modules'] << log_mod if ["rhel", "fedora", "suse", "arch", "freebsd"].include?(node['platform_family'])
+end

data/cookbooks/apache2/attributes/mod_auth_cas.rb

@@ -0,0 +1,2 @@
+default['apache']['mod_auth_cas']['from_source'] = false
+default['apache']['mod_auth_cas']['source_revision'] = "v1.0.8.1"

data/cookbooks/apache2/attributes/mod_auth_openid.rb

@@ -0,0 +1,32 @@
+#
+# Author:: Joshua Timberman <joshua@opscode.com>
+# Copyright:: Copyright (c) 2011, Opscode, Inc.
+# License:: Apache License, Version 2.0
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#    http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+
+default['apache']['mod_auth_openid']['ref']  = "95043901eab868400937642d9bc55d17e9dd069f"
+default['apache']['mod_auth_openid']['source_url'] = "https://github.com/bmuller/mod_auth_openid/archive/#{node['apache']['mod_auth_openid']['ref']}.tar.gz"
+default['apache']['mod_auth_openid']['cache_dir']  = "/var/cache/mod_auth_openid"
+default['apache']['mod_auth_openid']['dblocation'] = "#{node['apache']['mod_auth_openid']['cache_dir']}/mod_auth_openid.db"
+
+case node['platform_family']
+when "freebsd"
+  default['apache']['mod_auth_openid']['configure_flags'] = [
+    "CPPFLAGS=-I/usr/local/include",
+    "LDFLAGS=-I/usr/local/lib -lsqlite3"
+  ]
+else
+  default['apache']['mod_auth_openid']['configure_flags'] = []
+end

data/cookbooks/apache2/attributes/mod_ssl.rb

@@ -0,0 +1,19 @@
+#
+# Author:: Nathan L Smith <nlloyds@gmail.com>
+# Copyright:: Copyright (c) 2012, Opscode, Inc.
+# License:: Apache License, Version 2.0
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#    http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+
+default['apache']['mod_ssl']['cipher_suite'] = 'RC4-SHA:HIGH:!ADH'

data/cookbooks/apache2/definitions/apache_conf.rb

@@ -0,0 +1,26 @@
+#
+# Cookbook Name:: apache2
+# Definition:: apache_conf
+#
+# Copyright 2008-2009, Opscode, Inc.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+
+define :apache_conf do
+  template "#{node['apache']['dir']}/mods-available/#{params[:name]}.conf" do
+    source "mods/#{params[:name]}.conf.erb"
+    notifies :restart, "service[apache2]"
+    mode 0644
+  end
+end

data/cookbooks/apache2/definitions/apache_module.rb

@@ -0,0 +1,53 @@
+#
+# Cookbook Name:: apache2
+# Definition:: apache_module
+#
+# Copyright 2008-2009, Opscode, Inc.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+
+define :apache_module, :enable => true, :conf => false do
+  include_recipe "apache2"
+
+  params[:filename] = params[:filename] || "mod_#{params[:name]}.so"
+  params[:module_path] = params[:module_path] || "#{node['apache']['libexecdir']}/#{params[:filename]}"
+
+  if params[:conf]
+    apache_conf params[:name]
+  end
+
+  if platform_family?("rhel", "fedora", "arch", "suse", "freebsd")
+    file "#{node['apache']['dir']}/mods-available/#{params[:name]}.load" do
+      content "LoadModule #{params[:name]}_module #{params[:module_path]}\n"
+      mode 0644
+    end
+  end
+
+  if params[:enable]
+    execute "a2enmod #{params[:name]}" do
+      command "/usr/sbin/a2enmod #{params[:name]}"
+      notifies :restart, resources(:service => "apache2")
+      not_if do (::File.symlink?("#{node['apache']['dir']}/mods-enabled/#{params[:name]}.load") and
+        ((::File.exists?("#{node['apache']['dir']}/mods-available/#{params[:name]}.conf"))?
+          (::File.symlink?("#{node['apache']['dir']}/mods-enabled/#{params[:name]}.conf")):(true)))
+      end
+    end
+  else
+    execute "a2dismod #{params[:name]}" do
+      command "/usr/sbin/a2dismod #{params[:name]}"
+      notifies :restart, resources(:service => "apache2")
+      only_if do ::File.symlink?("#{node['apache']['dir']}/mods-enabled/#{params[:name]}.load") end
+    end
+  end
+end

data/cookbooks/apache2/definitions/apache_site.rb

@@ -0,0 +1,43 @@
+#
+# Cookbook Name:: apache2
+# Definition:: apache_site
+#
+# Copyright 2008-2009, Opscode, Inc.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+
+define :apache_site, :enable => true do
+  include_recipe "apache2"
+
+  if params[:enable]
+    execute "a2ensite #{params[:name]}" do
+      command "/usr/sbin/a2ensite #{params[:name]}"
+      notifies :restart, resources(:service => "apache2")
+      not_if do
+        ::File.symlink?("#{node['apache']['dir']}/sites-enabled/#{params[:name]}") or
+        ::File.symlink?("#{node['apache']['dir']}/sites-enabled/000-#{params[:name]}")
+      end
+      only_if do ::File.exists?("#{node['apache']['dir']}/sites-available/#{params[:name]}") end
+    end
+  else
+    execute "a2dissite #{params[:name]}" do
+      command "/usr/sbin/a2dissite #{params[:name]}"
+      notifies :restart, resources(:service => "apache2")
+      only_if do
+        ::File.symlink?("#{node['apache']['dir']}/sites-enabled/#{params[:name]}") or
+        ::File.symlink?("#{node['apache']['dir']}/sites-enabled/000-#{params[:name]}")
+      end
+    end
+  end
+end

data/cookbooks/apache2/definitions/web_app.rb

@@ -0,0 +1,50 @@
+#
+# Cookbook Name:: apache2
+# Definition:: web_app
+#
+# Copyright 2008-2009, Opscode, Inc.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+
+define :web_app, :template => "web_app.conf.erb", :enable => true do
+
+  application_name = params[:name]
+
+  include_recipe "apache2"
+  include_recipe "apache2::mod_rewrite"
+  include_recipe "apache2::mod_deflate"
+  include_recipe "apache2::mod_headers"
+
+  template "#{node['apache']['dir']}/sites-available/#{application_name}.conf" do
+    source params[:template]
+    owner "root"
+    group node['apache']['root_group']
+    mode 0644
+    if params[:cookbook]
+      cookbook params[:cookbook]
+    end
+    variables(
+      :application_name => application_name,
+      :params => params
+    )
+    if ::File.exists?("#{node['apache']['dir']}/sites-enabled/#{application_name}.conf")
+      notifies :reload, resources(:service => "apache2"), :delayed
+    end
+  end
+
+  site_enabled = params[:enable]
+  apache_site "#{params[:name]}.conf" do
+    enable site_enabled
+  end
+end

data/cookbooks/apache2/files/default/apache2_module_conf_generate.pl

@@ -0,0 +1,41 @@
+#!/usr/bin/perl
+
+=begin
+
+Generates Ubuntu style module.load files.
+ 
+./apache2_module_conf_generate.pl /usr/lib64/httpd/modules /etc/httpd/mods-available
+
+ARGV[0] is the apache modules directory, ARGV[1] is where you want 'em.
+
+=cut
+
+use File::Find;
+
+use strict;
+use warnings;
+
+die "Must have '/path/to/modules' and '/path/to/modules.load'"
+  unless $ARGV[0] && $ARGV[1];
+
+find(
+  {
+    wanted => sub {
+      return 1 if $File::Find::name !~ /\.so$/;
+      my $modfile = $_;
+      $modfile =~ /(lib|mod_)(.+)\.so$/;
+      my $modname  = $2;
+      my $filename = "$ARGV[1]/$modname.load";
+      unless ( -f $filename ) {
+        open( FILE, ">", $filename ) or die "Cannot open $filename";
+        print FILE "LoadModule " . $modname . "_module $File::Find::name\n";
+        close(FILE);
+      }
+    },
+    follow => 1,
+  },
+  $ARGV[0]
+);
+
+exit 0;
+

data/cookbooks/apache2/files/default/tests/minitest/default_test.rb

@@ -0,0 +1,77 @@
+require File.expand_path('../support/helpers', __FILE__)
+
+describe 'apache2::default' do
+  include Helpers::Apache
+
+  it 'installs apache' do
+    package(node['apache']['package']).must_be_installed
+  end
+
+  it 'starts apache' do
+    apache_service.must_be_running
+  end
+
+  it 'enables apache' do
+    apache_service.must_be_enabled
+  end
+
+  it 'creates the conf.d directory' do
+    directory("#{node['apache']['dir']}/conf.d").must_exist.with(:mode, "755")
+  end
+
+  it 'creates the logs directory' do
+    directory(node['apache']['log_dir']).must_exist
+  end
+
+  it 'enables the default site unless it is disabled' do
+    skip unless node['apache']['default_site_enabled']
+    file("#{node['apache']['dir']}/sites-enabled/000-default").must_exist
+    file("#{node['apache']['dir']}/sites-available/default").must_exist
+  end
+
+  it 'ensures the debian-style apache module scripts are present' do
+    %w{a2ensite a2dissite a2enmod a2dismod}.each do |mod_script|
+      file("/usr/sbin/#{mod_script}").must_exist
+    end
+  end
+
+  it 'reports server name only, not detailed version info' do
+    assert_match(/^ServerTokens Prod *$/, File.read("#{node['apache']['dir']}/conf.d/security"))
+  end
+
+  it 'listens on port 80' do
+    apache_configured_ports.must_include(80)
+  end
+
+  it 'only listens on port 443 when SSL is enabled' do
+    unless ran_recipe?('apache2::mod_ssl')
+      apache_configured_ports.wont_include(443)
+    end
+  end
+
+  it 'reports server name only, not detailed version info' do
+    file("#{node['apache']['dir']}/conf.d/security").must_match(/^ServerTokens Prod *$/)
+  end
+
+  it "enables default_modules" do
+    node['apache']['default_modules'].each do |a2mod|
+      apache_enabled_modules.must_include "#{a2mod}_module"
+    end
+  end
+
+  describe 'centos' do
+    it 'ensures no modules are loaded in conf.d' do
+      Dir["#{node['apache']['dir']}/conf.d/*"].each do |f|
+        file(f).wont_include 'LoadModule'
+      end
+    end
+  end
+
+  describe 'configuration' do
+    it { config.must_include '# Generated by Chef' }
+    it { config.must_include %Q{ServerRoot "#{node['apache']['dir']}"} }
+    it { config.must_include "Include #{node['apache']['dir']}/conf.d/" }
+    it { apache_config_parses? }
+  end
+
+end