Vendor the external cookbooks
Knife-Zero doesn't include Berkshelf support, so vendoring everything in the repo is convenient again
This commit is contained in:
Greg Karékinian
30
cookbooks/ntp/recipes/apparmor.rb
Normal file
30
cookbooks/ntp/recipes/apparmor.rb
Normal file
@@ -0,0 +1,30 @@
|
||||
#
|
||||
# Cookbook:: ntp
|
||||
# Recipe:: apparmor
|
||||
# Author:: Scott Lampert (<scott@lampert.org>)
|
||||
#
|
||||
# Copyright:: 2013-2017, Scott Lampert
|
||||
#
|
||||
# Licensed under the Apache License, Version 2.0 (the "License");
|
||||
# you may not use this file except in compliance with the License.
|
||||
# You may obtain a copy of the License at
|
||||
#
|
||||
# http://www.apache.org/licenses/LICENSE-2.0
|
||||
#
|
||||
# Unless required by applicable law or agreed to in writing, software
|
||||
# distributed under the License is distributed on an "AS IS" BASIS,
|
||||
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||
# See the License for the specific language governing permissions and
|
||||
# limitations under the License.
|
||||
|
||||
service 'apparmor' do
|
||||
action :nothing
|
||||
end
|
||||
|
||||
cookbook_file '/etc/apparmor.d/usr.sbin.ntpd' do
|
||||
source 'usr.sbin.ntpd.apparmor'
|
||||
owner 'root'
|
||||
group 'root'
|
||||
mode '0644'
|
||||
notifies :restart, 'service[apparmor]'
|
||||
end
|
||||
129
cookbooks/ntp/recipes/default.rb
Normal file
129
cookbooks/ntp/recipes/default.rb
Normal file
@@ -0,0 +1,129 @@
|
||||
#
|
||||
# Cookbook:: ntp
|
||||
# Recipe:: default
|
||||
# Author:: Joshua Timberman (<joshua@chef.io>)
|
||||
# Author:: Tim Smith (<tsmith@chef.io>)
|
||||
#
|
||||
# Copyright:: 2009-2017, Chef Software, Inc.
|
||||
#
|
||||
# Licensed under the Apache License, Version 2.0 (the "License");
|
||||
# you may not use this file except in compliance with the License.
|
||||
# You may obtain a copy of the License at
|
||||
#
|
||||
# http://www.apache.org/licenses/LICENSE-2.0
|
||||
#
|
||||
# Unless required by applicable law or agreed to in writing, software
|
||||
# distributed under the License is distributed on an "AS IS" BASIS,
|
||||
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||
# See the License for the specific language governing permissions and
|
||||
# limitations under the License.
|
||||
|
||||
::Chef::Resource.send(:include, Opscode::Ntp::Helper)
|
||||
|
||||
case node['platform_family']
|
||||
when 'windows'
|
||||
include_recipe 'ntp::windows_client'
|
||||
when 'mac_os_x'
|
||||
include_recipe 'ntp::mac_os_x_client'
|
||||
# On OS X we only support simple client config and nothing more
|
||||
return 0
|
||||
else
|
||||
|
||||
node['ntp']['packages'].each do |ntppkg|
|
||||
package ntppkg
|
||||
end
|
||||
|
||||
package 'Remove ntpdate' do
|
||||
package_name 'ntpdate'
|
||||
action :remove
|
||||
only_if { node['platform_family'] == 'debian' && node['platform_version'].to_i >= 16 }
|
||||
end
|
||||
|
||||
[node['ntp']['varlibdir'], node['ntp']['statsdir']].each do |ntpdir|
|
||||
directory ntpdir do
|
||||
owner node['ntp']['var_owner']
|
||||
group node['ntp']['var_group']
|
||||
mode '0755'
|
||||
end
|
||||
end
|
||||
|
||||
cookbook_file node['ntp']['leapfile'] do
|
||||
owner node['ntp']['conf_owner']
|
||||
group node['ntp']['conf_group']
|
||||
mode '0644'
|
||||
source 'ntp.leapseconds'
|
||||
notifies :restart, "service[#{node['ntp']['service']}]"
|
||||
end
|
||||
|
||||
include_recipe 'ntp::apparmor' if node['ntp']['apparmor_enabled']
|
||||
end
|
||||
|
||||
if node['ntp']['servers'].empty?
|
||||
node.default['ntp']['servers'] = [
|
||||
'0.pool.ntp.org',
|
||||
'1.pool.ntp.org',
|
||||
'2.pool.ntp.org',
|
||||
'3.pool.ntp.org',
|
||||
]
|
||||
Chef::Log.debug 'No NTP servers specified, using default ntp.org server pools'
|
||||
end
|
||||
|
||||
if node['ntp']['listen'].nil? && !node['ntp']['listen_network'].nil?
|
||||
if node['ntp']['listen_network'] == 'primary'
|
||||
node.normal['ntp']['listen'] = node['ipaddress']
|
||||
else
|
||||
require 'ipaddr'
|
||||
net = IPAddr.new(node['ntp']['listen_network'])
|
||||
|
||||
node['network']['interfaces'].each do |_iface, addrs|
|
||||
addrs['addresses'].each do |ip, params|
|
||||
addr = IPAddr.new(ip) if params['family'].eql?('inet') || params['family'].eql?('inet6')
|
||||
node.normal['ntp']['listen'] = addr if net.include?(addr)
|
||||
end
|
||||
end
|
||||
end
|
||||
end
|
||||
|
||||
node.default['ntp']['tinker']['panic'] = 0 if node['virtualization'] &&
|
||||
node['virtualization']['role'] == 'guest' &&
|
||||
node['ntp']['disable_tinker_panic_on_virtualization_guest']
|
||||
|
||||
template node['ntp']['conffile'] do
|
||||
source 'ntp.conf.erb'
|
||||
owner node['ntp']['conf_owner']
|
||||
group node['ntp']['conf_group']
|
||||
mode '0644'
|
||||
notifies :restart, "service[#{node['ntp']['service']}]" unless node['ntp']['conf_restart_immediate']
|
||||
notifies :restart, "service[#{node['ntp']['service']}]", :immediately if node['ntp']['conf_restart_immediate']
|
||||
variables(
|
||||
lazy { { ntpd_supports_native_leapfiles: ntpd_supports_native_leapfiles } }
|
||||
)
|
||||
end
|
||||
|
||||
if node['ntp']['sync_clock'] && !platform_family?('windows')
|
||||
execute "Stop #{node['ntp']['service']} in preparation for ntpdate" do
|
||||
command node['platform_family'] == 'freebsd' ? '/usr/bin/true' : '/bin/true'
|
||||
action :run
|
||||
notifies :stop, "service[#{node['ntp']['service']}]", :immediately
|
||||
end
|
||||
|
||||
execute 'Force sync system clock with ntp server' do
|
||||
command node['platform_family'] == 'freebsd' ? 'ntpd -q' : "ntpd -q -u #{node['ntp']['var_owner']}"
|
||||
action :run
|
||||
notifies :start, "service[#{node['ntp']['service']}]"
|
||||
end
|
||||
end
|
||||
|
||||
execute 'Force sync hardware clock with system clock' do
|
||||
command 'hwclock --systohc'
|
||||
action :run
|
||||
only_if { node['ntp']['sync_hw_clock'] && !(platform_family?('windows') || platform_family?('freebsd')) }
|
||||
end
|
||||
|
||||
service node['ntp']['service'] do
|
||||
supports status: true, restart: true
|
||||
action [:enable, :start]
|
||||
timeout 120 if platform_family?('windows')
|
||||
retries 3
|
||||
retry_delay 5
|
||||
end
|
||||
32
cookbooks/ntp/recipes/mac_os_x_client.rb
Normal file
32
cookbooks/ntp/recipes/mac_os_x_client.rb
Normal file
@@ -0,0 +1,32 @@
|
||||
#
|
||||
# Cookbook:: ntp
|
||||
# Recipe:: mac_os_x_client
|
||||
# Author:: Antek S. Baranski (<antek.baranski@gmail.com>)
|
||||
#
|
||||
# Copyright:: 2016-2017, Roblox, Inc
|
||||
#
|
||||
# Licensed under the Apache License, Version 2.0 (the "License");
|
||||
# you may not use this file except in compliance with the License.
|
||||
# You may obtain a copy of the License at
|
||||
#
|
||||
# http://www.apache.org/licenses/LICENSE-2.0
|
||||
#
|
||||
# Unless required by applicable law or agreed to in writing, software
|
||||
# distributed under the License is distributed on an "AS IS" BASIS,
|
||||
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||
# See the License for the specific language governing permissions and
|
||||
# limitations under the License.
|
||||
|
||||
# Do not continue if trying to run the Mac OS X recipe on non-OS X platform
|
||||
return 'The ntp::mac_os_x_client recipe only supports Mac OS X' unless platform_family?('mac_os_x')
|
||||
|
||||
# Mac OS X 10.11+ does not allow for many NTP settings
|
||||
execute 'systemsetup -setnetworktimeserver' do
|
||||
command "systemsetup -setnetworktimeserver #{node['ntp']['servers'][0]}"
|
||||
not_if "systemsetup -getnetworktimeserver | grep -F #{node['ntp']['servers'][0]}"
|
||||
end
|
||||
|
||||
execute 'systemsetup -setusingnetworktime' do
|
||||
command 'systemsetup -setusingnetworktime on'
|
||||
not_if 'systemsetup -getusingnetworktime | grep On'
|
||||
end
|
||||
45
cookbooks/ntp/recipes/windows_client.rb
Normal file
45
cookbooks/ntp/recipes/windows_client.rb
Normal file
@@ -0,0 +1,45 @@
|
||||
#
|
||||
# Cookbook:: ntp
|
||||
# Recipe:: windows_client
|
||||
# Author:: Tim Smith (<tsmith@chef.io>)
|
||||
#
|
||||
# Copyright:: 2012-2017, Webtrends, Inc
|
||||
# Copyright:: 2013-2017, Limelight Networks, Inc
|
||||
#
|
||||
# Licensed under the Apache License, Version 2.0 (the "License");
|
||||
# you may not use this file except in compliance with the License.
|
||||
# You may obtain a copy of the License at
|
||||
#
|
||||
# http://www.apache.org/licenses/LICENSE-2.0
|
||||
#
|
||||
# Unless required by applicable law or agreed to in writing, software
|
||||
# distributed under the License is distributed on an "AS IS" BASIS,
|
||||
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||
# See the License for the specific language governing permissions and
|
||||
# limitations under the License.
|
||||
|
||||
# Do not continue if trying to run the Windows recipe on non-Windows platform
|
||||
return 'The ntp::windows_client recipe only supports Windows' unless platform_family?('windows')
|
||||
|
||||
directory 'C:/NTP/etc' do
|
||||
inherits true
|
||||
action :create
|
||||
recursive true
|
||||
end
|
||||
|
||||
cookbook_file 'C:/NTP/ntp.ini' do
|
||||
source 'ntp.ini'
|
||||
inherits true
|
||||
action :create
|
||||
end
|
||||
|
||||
unless File.exist?('C:/NTP/bin/ntpd.exe')
|
||||
remote_file "#{Chef::Config[:file_cache_path]}/ntpd.exe" do
|
||||
source node['ntp']['package_url']
|
||||
end
|
||||
|
||||
execute 'ntpd_install' do
|
||||
command "#{Chef::Config[:file_cache_path]}\\ntpd.exe /USEFILE=C:\\NTP\\ntp.ini"
|
||||
returns [0, 2]
|
||||
end
|
||||
end
|
||||
Reference in New Issue
Block a user