Respond with 429 to abusive "ping" requests

[chef.git] / cookbooks / apt / recipes / default.rb

diff --git a/cookbooks/apt/recipes/default.rb b/cookbooks/apt/recipes/default.rb
index 15cf58f9af929304423fc1dbc7b759c460857d3e..6ab6afb7ecaf793a2a64777e30ef812f71608e31 100644 (file)
--- a/cookbooks/apt/recipes/default.rb
+++ b/cookbooks/apt/recipes/default.rb
@@ -1,8 +1,8 @@
 #
 #

-# Cookbook Name:: apt
+# Cookbook:: apt

 # Recipe:: default
 #
 # Recipe:: default
 #

-# Copyright 2010, Tom Hughes
+# Copyright:: 2010, Tom Hughes

 #
 # Licensed under the Apache License, Version 2.0 (the "License");
 # you may not use this file except in compliance with the License.
 #
 # Licensed under the Apache License, Version 2.0 (the "License");
 # you may not use this file except in compliance with the License.


@@ -20,17 +20,21 @@
 package %w[
   apt
   apt-transport-https
 package %w[
   apt
   apt-transport-https

+  gnupg

   update-notifier-common
 ]
 
   update-notifier-common
 ]
 

-if node[:lsb][:release].to_f < 18.04
-  package "gnupg-curl"
-end
-

 file "/etc/motd.tail" do
   action :delete
 end
 
 file "/etc/motd.tail" do
   action :delete
 end
 

+template "/etc/apt/preferences.d/99-chef" do
+  source "preferences.erb"
+  owner "root"
+  group "root"
+  mode "644"
+end
+

 apt_update "/etc/apt/sources.list" do
   action :nothing
 end
 apt_update "/etc/apt/sources.list" do
   action :nothing
 end


@@ -45,7 +49,7 @@ template "/etc/apt/sources.list" do
   source "sources.list.erb"
   owner "root"
   group "root"
   source "sources.list.erb"
   owner "root"
   group "root"

-  mode 0o644
+  mode "644"

   variables :archive_host => archive_host, :codename => node[:lsb][:codename]
   notifies :update, "apt_update[/etc/apt/sources.list]", :immediately
 end
   variables :archive_host => archive_host, :codename => node[:lsb][:codename]
   notifies :update, "apt_update[/etc/apt/sources.list]", :immediately
 end


@@ -69,6 +73,16 @@ apt_repository "ubuntugis-unstable" do
   uri "ppa:ubuntugis/ubuntugis-unstable"
 end
 
   uri "ppa:ubuntugis/ubuntugis-unstable"
 end
 

+apt_repository "git-core" do
+  action repository_actions["git-core"]
+  uri "ppa:git-core/ppa"
+end
+
+apt_repository "maxmind" do
+  action repository_actions["maxmind"]
+  uri "ppa:maxmind/ppa"
+end
+

 apt_repository "openstreetmap" do
   action repository_actions["openstreetmap"]
   uri "ppa:osmadmins/ppa"
 apt_repository "openstreetmap" do
   action repository_actions["openstreetmap"]
   uri "ppa:osmadmins/ppa"


@@ -84,14 +98,15 @@ apt_repository "squid3" do
   uri "ppa:osmadmins/squid3"
 end
 
   uri "ppa:osmadmins/squid3"
 end
 

+apt_repository "squid4" do
+  action repository_actions["squid4"]
+  uri "ppa:osmadmins/squid4"
+end
+

 apt_repository "management-component-pack" do
   action repository_actions["management-component-pack"]
   uri "https://downloads.linux.hpe.com/SDR/repo/mcp"
 apt_repository "management-component-pack" do
   action repository_actions["management-component-pack"]
   uri "https://downloads.linux.hpe.com/SDR/repo/mcp"

-  if node[:lsb][:release].to_f >= 16.04
-    distribution "xenial/current"
-  else
-    distribution "#{node[:lsb][:codename]}/current"
-  end
+  distribution "bionic/current-gen9"

   components ["non-free"]
   key "C208ADDE26C2B797"
 end
   components ["non-free"]
   key "C208ADDE26C2B797"
 end


@@ -106,6 +121,7 @@ end
 
 apt_repository "nginx" do
   action repository_actions["nginx"]
 
 apt_repository "nginx" do
   action repository_actions["nginx"]

+  arch "amd64"

   uri "https://nginx.org/packages/ubuntu"
   components ["nginx"]
   key "ABF5BD827BD9BF62"
   uri "https://nginx.org/packages/ubuntu"
   components ["nginx"]
   key "ABF5BD827BD9BF62"


@@ -147,7 +163,28 @@ apt_repository "mediawiki" do
   uri "https://releases.wikimedia.org/debian"
   distribution "jessie-mediawiki"
   components ["main"]
   uri "https://releases.wikimedia.org/debian"
   distribution "jessie-mediawiki"
   components ["main"]

-  key "90E9F83F22250DD7"
+  key "AF380A3036A03444"
+end
+
+apt_repository "docker" do
+  action repository_actions["docker"]
+  uri "https://download.docker.com/linux/ubuntu"
+  arch "amd64"
+  components ["stable"]
+  key "https://download.docker.com/linux/ubuntu/gpg"
+end
+
+apt_repository "grafana" do
+  action repository_actions["grafana"]
+  uri "https://packages.grafana.com/enterprise/deb"
+  distribution "stable"
+  components ["main"]
+  key "https://packages.grafana.com/gpg.key"
+end
+
+apt_repository "timescaledb" do
+  action repository_actions["timescaledb"]
+  uri "ppa:timescale/timescaledb-ppa"

 end
 
 package "unattended-upgrades"
 end
 
 package "unattended-upgrades"


@@ -162,7 +199,7 @@ if Dir.exist?("/usr/share/unattended-upgrades")
   file "/etc/apt/apt.conf.d/20auto-upgrades" do
     user "root"
     group "root"
   file "/etc/apt/apt.conf.d/20auto-upgrades" do
     user "root"
     group "root"

-    mode 0o644
+    mode "644"

     content auto_upgrades
   end
 end
     content auto_upgrades
   end
 end


@@ -171,5 +208,5 @@ template "/etc/apt/apt.conf.d/60chef" do
   source "apt.conf.erb"
   owner "root"
   group "root"
   source "apt.conf.erb"
   owner "root"
   group "root"

-  mode 0o644
+  mode "644"

 end
 end