Merge branch 'master' into feature/ubuntu-16.04

site-cookbooks/kosmos-base/recipes/default.rb

@@ -7,19 +7,16 @@
 # All rights reserved - Do Not Redistribute
 #
 
+include_recipe 'apt'
 include_recipe 'timezone-ii'
 
-node.override['omnibus_updater']['version']              = '12.19.36'
-node.override['omnibus_updater']['kill_chef_on_upgrade'] = false
-include_recipe 'omnibus_updater'
+# Update chef to the chosen version
+chef_version = '12.19.36'
+chef_client_updater "Install #{chef_version}" do
+  version chef_version
+end
 
 package 'mailutils'
-node.override['unattended-upgrades']['admin_email'] = 'ops@5apps.com'
-include_recipe 'unattended-upgrades'
-
-package 'ruby2.1'
-package 'ruby2.1-dev'
-
 package 'mosh'
 
 # Searches data bag "users" for groups attribute "sysadmin".
@@ -29,6 +26,14 @@ users_manage 'sysadmin' do
   action [:remove, :create]
 end
 
+node.override['authorization']['sudo']['sudoers_defaults'] = [
+  # not default on Ubuntu, explicitely enable. Uses a minimal white list of
+  # environment variables
+  'env_reset',
+  # Send emails on unauthorized attempts
+  'mail_badpass',
+  'secure_path="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/bin"',
+]
 node.override['authorization']['sudo']['passwordless'] = true
 include_recipe 'sudo'