X-Git-Url: https://git.openstreetmap.org./chef.git/blobdiff_plain/7b9ec4b60ee39614d1d083d7220e76b07d2b275f..3e091ef3d515a094fd4493faacbc5c3ba266c2ad:/cookbooks/chef/recipes/default.rb?ds=sidebyside diff --git a/cookbooks/chef/recipes/default.rb b/cookbooks/chef/recipes/default.rb index bbd9750f5..35ed0d87e 100644 --- a/cookbooks/chef/recipes/default.rb +++ b/cookbooks/chef/recipes/default.rb @@ -17,88 +17,117 @@ # limitations under the License. # -chef_gem "pony" - -chef_package = "chef_#{node[:chef][:client][:version]}.ubuntu.11.04_amd64.deb" +chef_version = node[:chef][:client][:version] +chef_package = "chef_#{chef_version}-1_amd64.deb" directory "/var/cache/chef" do owner "root" group "root" - mode 0755 + mode 0o755 end -Dir.glob("/var/cache/chef/chef_*.ubuntu.11.04_amd64.deb").each do |deb| - if deb != "/var/cache/chef/#{chef_package}" - file deb do - action :delete - backup false - end +Dir.glob("/var/cache/chef/chef_*.deb").each do |deb| + next if deb == "/var/cache/chef/#{chef_package}" + + file deb do + action :delete + backup false end end remote_file "/var/cache/chef/#{chef_package}" do - action :create_if_missing - source "https://opscode-omnibus-packages.s3.amazonaws.com/ubuntu/11.04/x86_64/#{chef_package}" + source "https://packages.chef.io/files/stable/chef/#{chef_version}/ubuntu/16.04/#{chef_package}" owner "root" group "root" - mode 0644 + mode 0o644 backup false + ignore_failure true end dpkg_package "chef" do source "/var/cache/chef/#{chef_package}" - version node[:chef][:client][:version] + version "#{chef_version}-1" end -template "/etc/init/chef-client.conf" do - source "chef-client.conf.erb" +directory "/etc/chef" do owner "root" group "root" - mode 0644 + mode 0o755 end template "/etc/chef/client.rb" do source "client.rb.erb" owner "root" group "root" - mode 0640 + mode 0o640 end file "/etc/chef/client.pem" do owner "root" group "root" - mode 0400 + mode 0o400 end template "/etc/chef/report.rb" do source "report.rb.erb" owner "root" group "root" - mode 0644 + mode 0o644 end template "/etc/logrotate.d/chef" do source "logrotate.erb" owner "root" group "root" - mode 0644 + mode 0o644 +end + +directory "/etc/chef/trusted_certs" do + owner "root" + group "root" + mode 0o755 end -directory "/etc/chef/ohai" do +template "/etc/chef/trusted_certs/verisign.pem" do + source "verisign.pem.erb" owner "root" group "root" - mode 0755 + mode 0o644 +end + +directory node[:ohai][:plugin_dir] do + owner "root" + group "root" + mode 0o755 end directory "/var/log/chef" do owner "root" group "root" - mode 0755 + mode 0o755 +end + +if node[:lsb][:release].to_f >= 15.10 + systemd_service "chef-client" do + description "Chef client" + after "network.target" + exec_start "/usr/bin/chef-client -i 1800 -s 20" + restart "on-failure" + end +else + template "/etc/init/chef-client.conf" do + source "chef-client.conf.erb" + owner "root" + group "root" + mode 0o644 + end end service "chef-client" do - provider Chef::Provider::Service::Upstart - action [ :enable, :start ] + action [:enable, :start] + if node[:lsb][:release].to_f >= 15.10 + restart_command "systemctl kill --signal=TERM chef-client.service" + end supports :status => true, :restart => true, :reload => true subscribes :restart, "dpkg_package[chef]" subscribes :restart, "template[/etc/init/chef-client.conf]"