summaryrefslogtreecommitdiff
path: root/lib/leap_cli/remote/tasks.rb
blob: ab60a516b954eb4723606b409afd1f39ea042746 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
#
# This file is evaluated just the same as a typical capistrano "deploy.rb"
# For DSL manual, see https://github.com/capistrano/capistrano/wiki
#

MAX_HOSTS = 10

task :install_authorized_keys, :max_hosts => MAX_HOSTS do
  leap.log :updating, "authorized_keys" do
    leap.mkdirs '/root/.ssh'
    upload LeapCli::Path.named_path(:authorized_keys), '/root/.ssh/authorized_keys', :mode => '600'
  end
end

#
# for vagrant nodes, we install insecure vagrant key to authorized_keys2, since deploy
# will overwrite authorized_keys.
#
# why force the insecure vagrant key?
#   if we don't do this, then first time initialization might fail if the user has many keys
#   (ssh will bomb out before it gets to the vagrant key).
#   and it really doesn't make sense to ask users to pin the insecure vagrant key in their
#   .ssh/config files.
#
task :install_insecure_vagrant_key, :max_hosts => MAX_HOSTS do
  leap.log :installing, "insecure vagrant key" do
    leap.mkdirs '/root/.ssh'
    key_file = File.expand_path('../../../vendor/vagrant_ssh_keys/vagrant.pub', File.dirname(__FILE__))
    upload key_file, '/root/.ssh/authorized_keys2', :mode => '600'
  end
end

BAD_APT_GET_UPDATE = /(BADSIG|NO_PUBKEY|KEYEXPIRED|REVKEYSIG|NODATA)/

task :install_prerequisites, :max_hosts => MAX_HOSTS do
  apt_get = "DEBIAN_FRONTEND=noninteractive apt-get -q -y -o DPkg::Options::=--force-confold"
  apt_get_update = "apt-get update -o Acquire::Languages=none"
  leap.mkdirs Leap::Platform.leap_dir
  run "echo 'en_US.UTF-8 UTF-8' > /etc/locale.gen"
  leap.log :updating, "package list" do
    run apt_get_update do |channel, stream, data|
      # sadly exitcode is unreliable measure if apt-get update hit a failure.
      if data =~ BAD_APT_GET_UPDATE
        LeapCli::Util.bail! do
          LeapCli::Util.log :fatal_error, "in `apt-get update`: #{data}", :host => channel[:host]
        end
      else
        logger.log(1, data, channel[:host])
      end
    end
  end
  leap.log :updating, "server time" do
    run "( test -f /etc/init.d/ntp && /etc/init.d/ntp stop ) || true"
    run "test -f /usr/sbin/ntpdate || #{apt_get} install ntpdate"
    leap.log :running, "ntpdate..." do
      run "test -f /usr/sbin/ntpdate && ntpdate 0.debian.pool.ntp.org 1.debian.pool.ntp.org 2.debian.pool.ntp.org 3.debian.pool.ntp.org"
    end
    run "( test -f /etc/init.d/ntp && /etc/init.d/ntp start ) || true"
  end
  leap.log :installing, "required packages" do
    run %[#{apt_get} install $( (grep -q wheezy /etc/debian_version && echo #{leap.required_wheezy_packages}) || echo #{leap.required_packages} )]
  end
  #run "locale-gen"
  leap.mkdirs("/etc/leap", "/srv/leap")
  leap.mark_initialized
end

#
# just dummies, used to capture task options
#

task :skip_errors_task, :on_error => :continue, :max_hosts => MAX_HOSTS do
end

task :standard_task, :max_hosts => MAX_HOSTS do
end