1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
|
#
# Author:: Mike Dodge (<mikedodge04@gmail.com>)
# Copyright:: Copyright (c) 2015 Facebook, Inc.
# License:: Apache License, Version 2.0
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
#
require_relative "../provider"
require_relative "../resource/file"
require_relative "../resource/cookbook_file"
require_relative "../resource/macosx_service"
require "plist"
require "forwardable" unless defined?(Forwardable)
class Chef
class Provider
class Launchd < Chef::Provider
extend Forwardable
provides :launchd, os: "darwin"
def_delegators :new_resource, *%i{
backup
cookbook
group
label
mode
owner
path
source
session_type
type
}
def load_current_resource
current_resource = Chef::Resource::Launchd.new(new_resource.name)
@path = path ? path : gen_path_from_type
end
def gen_path_from_type
types = {
"daemon" => "/Library/LaunchDaemons/#{label}.plist",
"agent" => "/Library/LaunchAgents/#{label}.plist",
}
types[type]
end
action :create do
manage_plist(:create)
end
action :create_if_missing do
manage_plist(:create_if_missing)
end
action :delete do
# If you delete a service you want to make sure its not loaded or
# the service will be in memory and you wont be able to stop it.
if ::File.exists?(@path)
manage_service(:disable)
end
manage_plist(:delete)
end
action :enable do
if manage_plist(:create)
manage_service(:restart)
else
manage_service(:enable)
end
end
action :disable do
manage_service(:disable)
end
action :restart do
manage_service(:restart)
end
def manage_plist(action)
if source
cookbook_file @path do
cookbook_name = cookbook if cookbook
name(@path) if @path
backup(backup) if backup
group(group) if group
mode(mode) if mode
owner(owner) if owner
source(source) if source
action(action)
only_if { manage_agent?(action) }
end
else
file @path do
name(@path) if @path
backup(backup) if backup
content(content) if content?
group(group) if group
mode(mode) if mode
owner(owner) if owner
action(action)
only_if { manage_agent?(action) }
end
end
end
def manage_service(action)
macosx_service label do
name(label) if label
service_name(label) if label
plist(@path) if @path
session_type(session_type) if session_type
action(action)
only_if { manage_agent?(action) }
end
end
def manage_agent?(action)
# Gets UID of console_user and converts to string.
console_user = Etc.getpwuid(::File.stat("/dev/console").uid).name
root = console_user == "root"
agent = type == "agent"
invalid_action = %i{delete disable enable restart}.include?(action)
lltstype = ""
if new_resource.limit_load_to_session_type
lltstype = new_resource.limit_load_to_session_type
end
invalid_type = lltstype != "LoginWindow"
if root && agent && invalid_action && invalid_type
logger.trace("#{label}: Aqua LaunchAgents shouldn't be loaded as root")
return false
end
true
end
def define_resource_requirements
requirements.assert(
:create, :create_if_missing, :delete, :enable, :disable
) do |a|
type = new_resource.type
a.assertion { %w{daemon agent}.include?(type.to_s) }
error_msg = "type must be daemon or agent."
a.failure_message Chef::Exceptions::ValidationFailed, error_msg
end
end
def content?
!!content
end
def content
plist_hash = new_resource.plist_hash || gen_hash
Plist::Emit.dump(plist_hash) unless plist_hash.nil?
end
def gen_hash
return nil unless new_resource.program || new_resource.program_arguments
{
"label" => "Label",
"program" => "Program",
"program_arguments" => "ProgramArguments",
"abandon_process_group" => "AbandonProcessGroup",
"debug" => "Debug",
"disabled" => "Disabled",
"enable_globbing" => "EnableGlobbing",
"enable_transactions" => "EnableTransactions",
"environment_variables" => "EnvironmentVariables",
"exit_timeout" => "ExitTimeout",
"ld_group" => "GroupName",
"hard_resource_limits" => "HardResourceLimits",
"inetd_compatibility" => "inetdCompatibility",
"init_groups" => "InitGroups",
"keep_alive" => "KeepAlive",
"launch_events" => "LaunchEvents",
"launch_only_once" => "LaunchOnlyOnce",
"limit_load_from_hosts" => "LimitLoadFromHosts",
"limit_load_to_hosts" => "LimitLoadToHosts",
"limit_load_to_session_type" => "LimitLoadToSessionType",
"low_priority_io" => "LowPriorityIO",
"mach_services" => "MachServices",
"nice" => "Nice",
"on_demand" => "OnDemand",
"process_type" => "ProcessType",
"queue_directories" => "QueueDirectories",
"root_directory" => "RootDirectory",
"run_at_load" => "RunAtLoad",
"sockets" => "Sockets",
"soft_resource_limits" => "SoftResourceLimits",
"standard_error_path" => "StandardErrorPath",
"standard_in_path" => "StandardInPath",
"standard_out_path" => "StandardOutPath",
"start_calendar_interval" => "StartCalendarInterval",
"start_interval" => "StartInterval",
"start_on_mount" => "StartOnMount",
"throttle_interval" => "ThrottleInterval",
"time_out" => "TimeOut",
"umask" => "Umask",
"username" => "UserName",
"wait_for_debugger" => "WaitForDebugger",
"watch_paths" => "WatchPaths",
"working_directory" => "WorkingDirectory",
}.each_with_object({}) do |(key, val), memo|
memo[val] = new_resource.send(key) if new_resource.send(key)
end
end
end
end
end
|
