blob: dac989cc8167134a0440e7674c1c7f18289f54d3 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
|
#
# Cookbook:: base
# Recipe:: default
#
# Copyright:: 2014-2017, Chef Software, Inc.
#
hostname "chef-travis-ci.chef.io"
apt_update
include_recipe "ubuntu" if platform?("ubuntu")
if platform_family?("rhel", "fedora", "amazon")
include_recipe "selinux::disabled"
end
yum_repository "epel" do
enabled true
description "Extra Packages for Enterprise Linux #{node['platform_version'].to_i} - $basearch"
failovermethod "priority"
gpgkey "https://dl.fedoraproject.org/pub/epel/RPM-GPG-KEY-EPEL-#{node['platform_version'].to_i}"
gpgcheck true
mirrorlist "https://mirrors.fedoraproject.org/metalink?repo=epel-#{node['platform_version'].to_i}&arch=$basearch"
only_if { platform_family?("rhel") }
end
build_essential "install compilation tools"
include_recipe "::packages"
include_recipe "ntp"
include_recipe "resolver"
users_manage "sysadmin" do
group_id 2300
action [:create]
end
sudo "sysadmins" do
group ["sysadmin", "%superadmin"]
nopasswd true
end
sudo "some_person" do
nopasswd true
user "some_person"
commands ["/opt/chef/bin/chef-client"]
env_keep_add %w{PATH RBENV_ROOT RBENV_VERSION}
end
include_recipe "chef-client::delete_validation"
include_recipe "chef-client::config"
include_recipe "chef-client"
include_recipe "openssh"
include_recipe "nscd"
include_recipe "logrotate"
include_recipe "cron"
include_recipe "git"
directory "/etc/ssl"
# Generate new key and certificate
openssl_dhparam "/etc/ssl/dhparam.pem" do
key_length 1024
action :create
end
# Generate new key with aes-128-cbc cipher
openssl_rsa_private_key "/etc/ssl/rsakey_aes128cbc.pem" do
key_length 1024
key_cipher "aes-128-cbc"
action :create
end
openssl_rsa_public_key "/etc/ssl/rsakey_aes128cbc.pub" do
private_key_path "/etc/ssl/rsakey_aes128cbc.pem"
action :create
end
include_recipe "::tests"
|
