Your IP : 216.73.217.13
U
�Ad&7 �
@ s� U d Z ddlZddlZddlZddlmZ ddlmZ ddlm Z m
Z
m Z m Z m
Z
ddlmZ ddlmZ ddlmZmZ dd lmZ dd
lmZ d Zed d
ddddg�Zed g�Z dZ dZ dZ dZ dZ!dZ"ddde dde"ddd d dd � Z#e$d g�Z%e$d d!d"d#d$d%d&g�Z&e$e�'e#�(� e%e&d'd(d)d*d+g��Z)d,Z*d-Z+ed.d/d0d1d2g�Z,eZ-d3gZ.d4d5d6ed7�e.ed8�ge-d9gd:�Z/ee0d;< ee/�Z d<d=� Z1d>d?� Z2e3eeee4dd@�dAdB�Z5dCdD� Z6ee4dE�dFdG�Z7dRedH�dIdJ�Z8edK�dLdM�Z9dNdO� Z:dPdQ� Z;dS )Sz7Chef: module that configures, starts and installs chef.� N)�Logger)�dedent)�subp�
temp_utils� templater�
url_helper�util)�Cloud)�Config)�
MetaSchema� get_meta_doc)�Distro)�
PER_ALWAYS�1.8z /etc/chefz
/var/log/chefz
/var/lib/chefz/var/cache/chefz/var/backups/chefz
/var/run/chefz#https://www.chef.io/chef/install.sh� z/etc/chef/validation.pemz#/etc/chef/encrypted_data_bag_secret�_defaultz/etc/chef/firstboot.jsonz :verify_nonez:infoz/var/log/chef/client.logz/etc/chef/client.pemz/var/run/chef/client.pidT) Zssl_verify_modeZ log_level� log_location�validation_key�validation_cert�
client_key� json_attribs�file_cache_pathZfile_backup_path�pid_file� show_time�encrypted_data_bag_secretr r r r r r r r �
server_url� node_name� environment�validation_nameZ chef_licensez/etc/chef/client.rbz/usr/bin/chef-clientz-dz-iZ1800z-sZ20�allZcc_chefZChefz0module that configures, starts and installs chefa This module enables chef to be installed (from packages,
gems, or from omnibus). Before this occurs, chef configuration is
written to disk (validation.pem, client.pem, firstboot.json,
client.rb), and required directories are created (/etc/chef and
/var/log/chef and so-on). If configured, chef will be
installed and started in either daemon or non-daemon mode.
If run in non-daemon mode, post run actions are executed to do
finishing activities such as removing validation.pem.a�
chef:
directories:
- /etc/chef
- /var/log/chef
validation_cert: system
install_type: omnibus
initial_attributes:
apache:
prefork:
maxclients: 100
keepalive: off
run_list:
- recipe[apache2]
- role[db]
encrypted_data_bag_secret: /etc/chef/encrypted_data_bag_secret
environment: _default
log_level: :auto
omnibus_url_retries: 2
server_url: https://chef.yourorg.com:4000
ssl_verify_mode: :verify_peer
validation_name: yourorg-validator�chef)�id�name�titleZ description�distrosZexamples� frequencyZactivate_by_schema_keys�metac C s. t j| ddd�}|r*tj�t�r*t�t� d S )NZdelete_validation_post_execF��default)r �get_cfg_option_bool�os�path�isfile�CHEF_VALIDATION_PEM_PATH�unlink)�chef_cfg�logZ
delete_pem� r1 �:/usr/lib/python3/dist-packages/cloudinit/config/cc_chef.py�
post_run_chef� s �r3 c C s� t �� }|�� D ]Z\}}|tkr.|�d|� q|d kr@d ||< q|tkrZt�||�||< qt�||�||< q|� t�
� tj|d| d�tj|ddd�|d |d d�� |S ) Nz'Skipping unknown chef template key '%s'r r' r r r r )Z generated_byr r r r ) �CHEF_RB_TPL_DEFAULTS�copy�items�CHEF_RB_TPL_KEYS�debug�CHEF_RB_TPL_BOOL_KEYSr r) �get_cfg_option_str�updateZ make_header)�iidr/ r0 �params�k�vr1 r1 r2 �get_template_params� s6
� ���r@ )r" �cfg�cloudr0 �args�returnc C s d|kr|� d| � dS |d }t�|d�}|s8tt�}t�|t�D ]}t�|� qD|� dt
�}|� d�} | r�| dkr�t� || � nt j
�|�s�|�d|� |�d �}
|
�rt|j�� �} t| ||�} t� }
| �� D ]&\}}|tkr�|r�|
�t j
�|�� q�t�|
� t� |
t | � n |�d
t � tj |d t d �}|�sD|� d
� n^i }d|k�r^|d |d< d|k�r�|d }t|�!� �D ]}|| ||< �q|t� |t"�#|�� tj$|ddd �}t%�&t'�}|�r�|�r�t(|||�}n |�r�tj$|ddd �}nd}|�r t)||� t*||� dS )z'Handler method activated by cloud-init.r z8Skipping module named %s, no 'chef' key in configurationNZ directoriesr r �systemzWchef validation_cert provided as 'system', but validation_key path '%s' does not exist.zchef_client.rbz&No template found, not rendering to %sZfirstboot_pathr' z7First boot path empty, not writing first boot json fileZrun_list�initial_attributes�
force_installF�exec)+r8 r Zget_cfg_option_list�list� CHEF_DIRS� itertools�chain�REQUIRED_CHEF_DIRSZ
ensure_dir�getr- �
write_filer* r+ r, �warningZget_template_filename�strZ
datasourceZget_instance_idr@ �setr6 �CHEF_RB_TPL_PATH_KEYS�add�dirnameZ ensure_dirsr Zrender_to_file� CHEF_RB_PATHr: � CHEF_FB_PATH�info�keys�json�dumpsr) r Zis_exe�CHEF_EXEC_PATH� install_chef�run_chefr3 )r" rA rB r0 rC r/ Z chef_dirs�dZ vkey_pathZvcertZ template_fnr< r= Z param_pathsr> r? Z fb_filenameZ initial_jsonrF rG Z installed�runr1 r1 r2 �handle� s| �
�
�
�
ra c C s� |� d� tg}d| krl| d }t|ttf�r:|�|� qvt|t�rP|�|� qv|�dt |�� |�t
� n
|�t
� t j |dd� d S )NzRunning chef-clientZexec_argumentszRUnknown type %s provided for chef 'exec_arguments' expected list, tuple, or stringF��capture) r8 r\ �
isinstancerI �tuple�extendrQ �appendrP �type�CHEF_EXEC_DEF_ARGSr )r/ r0 �cmdZcmd_argsr1 r1 r2 r^ s
�
r^ )�distrorC c
K s| |� � }|�dd�}tj|�� dd��L}tj�||�}|�d|� t j
|| dd� t j f d|i|��W 5 Q R � S Q R X d S )
a Write blob to a tempfile, and call subp with args, kwargs. Then cleanup.
'basename' as a kwarg allows providing the basename for the file.
The 'args' argument to subp will be updated with the full path to the
filename as the first argument.
�basenameZ subp_blobT)�dirZ needs_exer i� )�moderC N) r5 �popr ZtempdirZget_tmp_exec_pathr* r+ �join�insertr rO r )�blobrk rC �kwargsrl ZtmpdZtmpfr1 r1 r2 �subp_blob_in_tempfile* s � rt )rk c C sP |dkr t }|dkrt}|dkr&g }nd|g}tj||d�j}t| ||ddd�S )ag Install an omnibus unified package from url.
@param url: URL where blob of chef content may be downloaded. Defaults to
OMNIBUS_URL.
@param retries: Number of retries to perform when attempting to read url.
Defaults to OMNIBUS_URL_RETRIES
@param omnibus_version: Optional version string to require for omnibus
install.
Nz-v)�url�retrieszchef-omnibus-installF)rk rr rC rl rc )� OMNIBUS_URL�OMNIBUS_URL_RETRIESr Zreadurl�contentsrt )rk ru rv �omnibus_versionrC Zcontentr1 r1 r2 �install_chef_from_omnibus= s �r{ )rB c C s� t �|dd�}t j|ddd�}|dkrbt �|dd �}t �|dt�}t||| j� t j|dd d�}n^|dkrx| j�d
� nH|d kr�t �|d �}t| jt �|d
�t �|d�|d� n|� d|� d}|S )N� install_typeZpackagesrH Fr' Zgems�version� ruby_versionT)r Zomnibusrz Z omnibus_urlZomnibus_url_retries)rk ru rv rz z Unknown chef install type '%s')
r r: r) �RUBY_VERSION_DEFAULT�install_chef_from_gemsrk �install_packagesr{ Zget_cfg_option_intrP )rB r/ r0 r| r` � chef_versionr~ rz r1 r1 r2 r] \ s8 � �
� r] c C s& d| d| g}| dkr"|� d� |S )Nzruby%sz
ruby%s-devr )zlibopenssl-ruby1.8z rubygems1.8)rf )r} Zpkgsr1 r1 r2 �get_ruby_packages} s
r� c
C s� |� t| �� tj�d�s*t�d| d� tj�d�sFt�d| d� |rptjdddd| dd d
d d g d
d� n tjddddd d
d d gd
d� d S )Nz /usr/bin/gemz/usr/bin/gem%sz
/usr/bin/rubyz/usr/bin/ruby%s�installr z-v %sz--no-riz --no-rdocz--bindirz/usr/binz-qFrb )r� r� r* r+ �existsr Zsym_linkr )r~ r� rk r1 r1 r2 r� � s> � ��
�r� )NNN)<�__doc__rK rZ r* Zloggingr �textwrapr Z cloudinitr r r r r Zcloudinit.cloudr Zcloudinit.configr
Zcloudinit.config.schemar r Zcloudinit.distrosr
Zcloudinit.settingsr r re rJ rM rw rx r- Z CHEF_ENCRYPTED_DATA_BAG_PATHZCHEF_ENVIRONMENTrW r4 � frozensetr9 rS rL rY r7 rV r\ ri r% r$ r& �__annotations__r3 r@ rQ rI ra r^ rt r{ r] r� r� r1 r1 r1 r2 �<module> s� ��
���
�� ���� ���.$ � T �� !