1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
|
#
# Author:: Mike Dodge (<mikedodge04@gmail.com>)
# Copyright:: Copyright (c) 2015 Facebook, Inc.
# License:: Apache License, Version 2.0
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
#
require_relative "../provider"
require_relative "../resource/file"
require_relative "../resource/cookbook_file"
require_relative "../resource/macosx_service"
autoload :Plist, "plist"
require "forwardable" unless defined?(Forwardable)
class Chef
class Provider
class Launchd < Chef::Provider
extend Forwardable
provides :launchd, os: "darwin"
def_delegators :new_resource, *%i{
backup
cookbook
group
label
mode
owner
source
session_type
type
}
def load_current_resource
current_resource = Chef::Resource::Launchd.new(new_resource.name)
end
def gen_path_from_type
types = {
"daemon" => "/Library/LaunchDaemons/#{label}.plist",
"agent" => "/Library/LaunchAgents/#{label}.plist",
}
types[type]
end
action :create do
manage_plist(:create)
end
action :create_if_missing do
manage_plist(:create_if_missing)
end
action :delete do
if ::File.exists?(path)
manage_service(:disable)
end
manage_plist(:delete)
end
action :enable do
manage_service(:nothing)
manage_plist(:create) do
notifies :restart, "macosx_service[#{label}]", :immediately
end
manage_service(:enable)
end
action :disable do
return unless ::File.exist?(path)
manage_service(:disable)
end
action :restart do
manage_service(:restart)
end
def manage_plist(action, &block)
if source
cookbook_file path do
cookbook_name = new_resource.cookbook if new_resource.cookbook
copy_properties_from(new_resource, :backup, :group, :mode, :owner, :source)
action(action)
only_if { manage_agent?(action) }
instance_eval(&block) if block_given?
end
else
file path do
copy_properties_from(new_resource, :backup, :group, :mode, :owner)
content(file_content) if file_content?
action(action)
only_if { manage_agent?(action) }
instance_eval(&block) if block_given?
end
end
end
def manage_service(action)
plist_path = path
macosx_service label do
service_name(new_resource.label) if new_resource.label
plist(plist_path) if plist_path
copy_properties_from(new_resource, :session_type)
action(action)
only_if { manage_agent?(action) }
end
end
def manage_agent?(action)
# Gets UID of console_user and converts to string.
console_user = Etc.getpwuid(::File.stat("/dev/console").uid).name
root = console_user == "root"
agent = type == "agent"
invalid_action = %i{delete disable enable restart}.include?(action)
lltstype = ""
if new_resource.limit_load_to_session_type
lltstype = new_resource.limit_load_to_session_type
end
invalid_type = lltstype != "LoginWindow"
if root && agent && invalid_action && invalid_type
logger.trace("#{label}: Aqua LaunchAgents shouldn't be loaded as root")
return false
end
true
end
def define_resource_requirements
requirements.assert(
:create, :create_if_missing, :delete, :enable, :disable
) do |a|
type = new_resource.type
a.assertion { %w{daemon agent}.include?(type.to_s) }
error_msg = "type must be daemon or agent."
a.failure_message Chef::Exceptions::ValidationFailed, error_msg
end
end
def file_content?
!!file_content
end
def file_content
plist_hash = new_resource.plist_hash || gen_hash
::Plist::Emit.dump(plist_hash) unless plist_hash.nil?
end
def gen_hash
return nil unless new_resource.program || new_resource.program_arguments
{
"label" => "Label",
"program" => "Program",
"program_arguments" => "ProgramArguments",
"abandon_process_group" => "AbandonProcessGroup",
"debug" => "Debug",
"disabled" => "Disabled",
"enable_globbing" => "EnableGlobbing",
"enable_transactions" => "EnableTransactions",
"environment_variables" => "EnvironmentVariables",
"exit_timeout" => "ExitTimeout",
"ld_group" => "GroupName",
"hard_resource_limits" => "HardResourceLimits",
"inetd_compatibility" => "inetdCompatibility",
"init_groups" => "InitGroups",
"keep_alive" => "KeepAlive",
"launch_events" => "LaunchEvents",
"launch_only_once" => "LaunchOnlyOnce",
"limit_load_from_hosts" => "LimitLoadFromHosts",
"limit_load_to_hosts" => "LimitLoadToHosts",
"limit_load_to_session_type" => "LimitLoadToSessionType",
"low_priority_io" => "LowPriorityIO",
"mach_services" => "MachServices",
"nice" => "Nice",
"on_demand" => "OnDemand",
"process_type" => "ProcessType",
"queue_directories" => "QueueDirectories",
"root_directory" => "RootDirectory",
"run_at_load" => "RunAtLoad",
"sockets" => "Sockets",
"soft_resource_limits" => "SoftResourceLimits",
"standard_error_path" => "StandardErrorPath",
"standard_in_path" => "StandardInPath",
"standard_out_path" => "StandardOutPath",
"start_calendar_interval" => "StartCalendarInterval",
"start_interval" => "StartInterval",
"start_on_mount" => "StartOnMount",
"throttle_interval" => "ThrottleInterval",
"time_out" => "TimeOut",
"umask" => "Umask",
"username" => "UserName",
"wait_for_debugger" => "WaitForDebugger",
"watch_paths" => "WatchPaths",
"working_directory" => "WorkingDirectory",
}.each_with_object({}) do |(key, val), memo|
memo[val] = new_resource.send(key) if new_resource.send(key)
end
end
# @api private
def path
@path ||= new_resource.path || gen_path_from_type
end
end
end
end
|
