Vendor the external cookbooks

Knife-Zero doesn't include Berkshelf support, so vendoring everything in
the repo is convenient again

cookbooks/apt/recipes/cacher-client.rb

@@ -0,0 +1,52 @@
+#
+# Cookbook:: apt
+# Recipe:: cacher-client
+#
+# Copyright:: 2011-2017, Chef Software, Inc.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+
+# remove Acquire::http::Proxy lines from /etc/apt/apt.conf since we use 01proxy
+# these are leftover from preseed installs
+execute 'Remove proxy from /etc/apt/apt.conf' do
+  command "sed --in-place '/^Acquire::http::Proxy/d' /etc/apt/apt.conf"
+  only_if 'grep Acquire::http::Proxy /etc/apt/apt.conf'
+end
+
+if node['apt']['cacher_client']['cacher_server'].empty?
+  Chef::Log.warn("No cache server defined in node['apt']['cacher_client']['cacher_server']. Not setting up caching")
+  f = file '/etc/apt/apt.conf.d/01proxy' do
+    action(node['apt']['compiletime'] ? :nothing : :delete)
+  end
+  f.run_action(:delete) if node['apt']['compiletime']
+else
+  apt_update 'update for notification' do
+    action :nothing
+  end
+
+  t = template '/etc/apt/apt.conf.d/01proxy' do
+    source '01proxy.erb'
+    owner 'root'
+    group 'root'
+    mode '0644'
+    variables(
+      server: node['apt']['cacher_client']['cacher_server']
+    )
+    action(node['apt']['compiletime'] ? :nothing : :create)
+    notifies :update, 'apt_update[update for notification]', :immediately
+  end
+  t.run_action(:create) if node['apt']['compiletime']
+end
+
+include_recipe 'apt::default'

cookbooks/apt/recipes/cacher-ng.rb

@@ -0,0 +1,39 @@
+#
+# Cookbook:: apt
+# Recipe:: cacher-ng
+#
+# Copyright:: 2008-2017, Chef Software, Inc.
+#
+# Licensed under the Apache License, Version 2.0 (the 'License');
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an 'AS IS' BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+
+package 'apt-cacher-ng'
+
+directory node['apt']['cacher_dir'] do
+  owner 'apt-cacher-ng'
+  group 'apt-cacher-ng'
+  mode '0755'
+end
+
+template '/etc/apt-cacher-ng/acng.conf' do
+  source 'acng.conf.erb'
+  owner 'root'
+  group 'root'
+  mode '0644'
+  notifies :restart, 'service[apt-cacher-ng]', :immediately
+end
+
+service 'apt-cacher-ng' do
+  supports restart: true, status: false
+  action [:enable, :start]
+end

cookbooks/apt/recipes/default.rb

@@ -0,0 +1,98 @@
+#
+# Cookbook:: apt
+# Recipe:: default
+#
+# Copyright:: 2008-2017, Chef Software, Inc.
+# Copyright:: 2009-2017, Bryan McLellan <btm@loftninjas.org>
+#
+# Licensed under the Apache License, Version 2.0 (the 'License');
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an 'AS IS' BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+
+# On systems where apt is not installed, the resources in this recipe are not
+# executed. However, they _must_ still be present in the resource collection
+# or other cookbooks which notify these resources will fail on non-apt-enabled
+# systems.
+
+file '/var/lib/apt/periodic/update-success-stamp' do
+  owner 'root'
+  group 'root'
+  action :nothing
+end
+
+# If compile_time_update run apt-get update at compile time
+if node['apt']['compile_time_update'] && apt_installed?
+  apt_update('compile time') do
+    frequency node['apt']['periodic_update_min_delay']
+    ignore_failure true
+  end.run_action(:periodic)
+end
+
+apt_update 'periodic' do
+  frequency node['apt']['periodic_update_min_delay']
+end
+
+# For other recipes to call to force an update
+execute 'apt-get update' do
+  command 'apt-get update'
+  ignore_failure true
+  action :nothing
+  notifies :touch, 'file[/var/lib/apt/periodic/update-success-stamp]', :immediately
+  only_if { apt_installed? }
+end
+
+# Automatically remove packages that are no longer needed for dependencies
+execute 'apt-get autoremove' do
+  command 'apt-get -y autoremove'
+  environment(
+    'DEBIAN_FRONTEND' => 'noninteractive'
+  )
+  action :nothing
+  only_if { apt_installed? }
+end
+
+# Automatically remove .deb files for packages no longer on your system
+execute 'apt-get autoclean' do
+  command 'apt-get -y autoclean'
+  action :nothing
+  only_if { apt_installed? }
+end
+
+%w(/var/cache/local /var/cache/local/preseeding).each do |dirname|
+  directory dirname do
+    owner 'root'
+    group 'root'
+    mode '0755'
+    action :create
+    only_if { apt_installed? }
+  end
+end
+
+template '/etc/apt/apt.conf.d/10dpkg-options' do
+  owner 'root'
+  group 'root'
+  mode '0644'
+  source '10dpkg-options.erb'
+  only_if { apt_installed? }
+end
+
+template '/etc/apt/apt.conf.d/10recommends' do
+  owner 'root'
+  group 'root'
+  mode '0644'
+  source '10recommends.erb'
+  only_if { apt_installed? }
+end
+
+package 'apt-transport-https' do
+  only_if { apt_installed? }
+end

cookbooks/apt/recipes/unattended-upgrades.rb

@@ -0,0 +1,47 @@
+#
+# Cookbook:: apt
+# Recipe:: unattended-upgrades
+#
+# Copyright:: 2014-2017, Chef Software, Inc.
+#
+# Licensed under the Apache License, Version 2.0 (the 'License');
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an 'AS IS' BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+
+# On systems where apt is not installed, the resources in this recipe are not
+# executed. However, they _must_ still be present in the resource collection
+# or other cookbooks which notify these resources will fail on non-apt-enabled
+# systems.
+#
+
+package 'unattended-upgrades' do
+  response_file 'unattended-upgrades.seed.erb'
+  action :install
+end
+
+package 'bsd-mailx' do
+  not_if { node['apt']['unattended_upgrades']['mail'].nil? }
+end
+
+template '/etc/apt/apt.conf.d/20auto-upgrades' do
+  owner 'root'
+  group 'root'
+  mode '0644'
+  source '20auto-upgrades.erb'
+end
+
+template '/etc/apt/apt.conf.d/50unattended-upgrades' do
+  owner 'root'
+  group 'root'
+  mode '0644'
+  source '50unattended-upgrades.erb'
+end