OSSのサーバ構築自動化ツール、4製品徹底検証 2016年版：実際に検証済み！OSS徹底比較（3）サーバ構築自動化【前編】（3/9 ページ）

#
# Cookbook Name:: wordpress_sample
# Parameter settings
hostname         = node['hostinfo']['hostname']
mysql_root_pass  = node['mariadb']['mysql_root_pass']
wordpress_latest = node['wordpress']['wordpress_latest']
wp_os_user       = node['wordpress']['wp_os_user']
wp_os_group      = node['wordpress']['wp_os_group']
wp_db_name       = node['wordpress']['wp_db_name']
wp_db_user       = node['wordpress']['wp_db_user']
wp_db_pass       = node['wordpress']['wp_db_pass']
wp_uniqe_phrse   = node['wordpress']['wp_uniqe_phrse']
# update packages
execute 'yum-update' do
  user 'root'
  command 'yum -y update'
  action :run
end
# install packages
yum_package [ 'mariadb-server', 'httpd', 'php', 'php-mysql' ] do 
  action :install
end
# start/enable mariadb
service 'mariadb' do
  supports :status => true, :restart => true, :reload => true
  action [:start, :enable]
end
# set mariadb root password + restart mariadb
execute 'set mariadb root password' do
  command <<-EOC
    /usr/bin/rm -f /root/.my.cnf
    mysql -u root -e "update mysql.user set password=password('#{mysql_root_pass}') where user = 'root'"
    systemctl restart mariadb
  EOC
  onlyvariables({
    :mysql_root_pass => mysql_root_pass
  })
  not_if { File.exists?('/root/.my.cnf') }
end
# mariadb logrotate setting
execute 'mariawp_db_logrotate' do
  command <<-EOC
    sed -i.bak -e '23,$ s/^#//' /etc/logrotate.d/mariadb
  EOC
  not_if { File.exists?('/etc/logrotate.d/mariadb.bak') }
end
# create wordpres db/user
bash 'create wordpres db/user' do
  exists = <<-EOH
    mysql -u root -p#{mysql_root_pass} -e 'show databases' | grep #{wp_db_name}
  EOH
  code <<-EOC
    mysql -vvv -u root -p#{mysql_root_pass} -e "create user '#{wp_db_user}'@'localhost' identified by '#{wp_db_pass}'"
    mysql -vvv -u root -p#{mysql_root_pass} -e "create database #{wp_db_name}"
    mysql -vvv -u root -p#{mysql_root_pass} -e "grant all privileges on #{wp_db_name}.* to '#{wp_db_user}'@'localhost'"
    mysql -vvv -u root -p#{mysql_root_pass} -e "flush privileges"
  EOC
  not_if exists
end
# install wordpress
execute 'install wordpress' do
  command <<-EOC
    curl #{wordpress_latest} | tar zx -C /var/www
  EOC
  not_if { File.exists?('/var/www/wordpress/index.php') }
end
# create wordpress config
bash 'create wordpress config' do
  code <<-EOC
    sed -e "s/\\(define.*'\\)database_name_here\\('.*\\)/\\1#{wp_db_name}\\2/" \
        -e "s/\\(define.*'\\)username_here\\('.*\\)/\\1#{wp_db_user}\\2/" \
        -e "s/\\(define.*'\\)password_here\\('.*\\)/\\1#{wp_db_pass}\\2/" \
        -e "s/\\(define.*'\\)put your unique phrase here\\('.*\\)/\\1#{wp_unique_phrase}\\2/" \
        /var/www/wordpress/wp-config-sample.php > /var/www/wordpress/wp-config.php
  EOC
  not_if { File.exists?('/var/www/wordpress/wp-config.php') }
end
# chown wordpress files
execute 'chown wordpress files' do
  command <<-EOC
    chown -R #{wp_os_user}:#{wp_os_group} /var/www/wordpress
  EOC
  not_if "test `find /var/www/wordpress -not -user #{wp_os_user} -or -not -group #{wp_os_group} | wc -l` == 0"
end
# create wordpres httpd config
template '/etc/httpd/conf.d/wordpress.conf' do
  owner 'root'
  group 'root'
  source 'wordpress.conf.erb'
  variables({
    :hostname => hostname
  })
  not_if { File.exists?('/etc/httpd/conf.d/wordpress.conf') }
end
# modify httpd config
execute 'httpd.conf' do
  command <<-EOC
    sed -i.bak -e 's/^#ServerName.*/ServerName #{hostname}/' /etc/httpd/conf/httpd.conf
  EOC
  not_if { File.exists?('/etc/httpd/conf/httpd.conf.bak') }
end
# start/enable httpd
service 'httpd' do
  supports :status => true, :restart => true, :reload => true
  action [:start, :enable]
end
# open httpd port in firewall
execute 'open httpd port in firewall' do
  command <<-EOC
    firewall-cmd --add-service=http --zone=public --permanent
    firewall-cmd --reload
  EOC
  only_if "test `firewall-cmd --list-service --zone=public | grep -c http` == 0"
end

# Paramaters default
default['hostinfo']['hostname']          = "localhost"
default['mariadb']['mysql_root_pass']    = "password"
default['wordpress']['wordpress_latest'] = "https://wordpress.org/latest.tar.gz"
default['wordpress']['wp_os_user']       = "root"
default['wordpress']['wp_os_group']      = "root"
default['wordpress']['wp_db_name']       = "wordpress"
default['wordpress']['wp_db_user']       = "wordpress"
default['wordpress']['wp_db_pass']       = "password"
default['wordpress']['wp_unique_phrase']  = "bMvc7W2eLuhKFewafVyirWJaXDhbSf"

<VirtualHost *:80>
  ServerName <%= @hostname %>;
  DocumentRoot /var/www/wordpress
  <Directory "/var/www/wordpress">
    AllowOverride All
    Options -Indexes
  </Directory>
  <Files wp-config.php>
    order allow,deny
    deny from all
  </Files>
</VirtualHost>

[client]
user = root
password = "<%= @mysql_root_pass %>"
[mysqladmin]
user = root
password = "<%= @mysql_root_pass %>"

{
  "run_list": [
    "wordpress_sample"
  ],
  "mariadb" : {
    "mysql_root_pass" : "FM11AD2+"
  },
  "wordpress" : {
    "wordpress_latest" : "https://ja.wordpress.org/latest-ja.tar.gz",
    "wp_os_user"       : "root",
    "wp_os_group"      : "root",
    "wp_db_name"       : "WordPress",
    "wp_db_user"       : "wp_admin",
    "wp_db_pass"       : "HB-F1XDJ",
    "wp_unique_phrase"  : "FX702PFX801PPB100FX860PPB700PB500PB750PAI1000"
  },
  "hostinfo" : {
    "hostname" : "tissvv096"
  },
  "automatic": {
    "ipaddress": "10.255.202.96"
  }
}

Running Chef on tissvv096...
Checking Chef version...
Uploading the kitchen...
Generating solo config...
Running Chef: sudo chef-solo -c ~/chef-solo/solo.rb -j ~/chef-solo/dna.json
Starting Chef Client, version 12.9.38
Installing Cookbook Gems:
Compiling Cookbooks...
Converging 14 resources
Recipe: wordpress_sample::default
  * execute[yum-update] action run
    - execute yum -y update
  * yum_package[mariadb-server, httpd, php, php-mysql] action install
    - install version 5.5.47-1.el7_2 of package mariadb-server
    - install version 2.4.6-40.el7.centos of package httpd
    - install version 5.4.16-36.el7_1 of package php
    - install version 5.4.16-36.el7_1 of package php-mysql
  * service[mariadb] action start
    - start service service[mariadb]
  * service[mariadb] action enable
    - enable service service[mariadb]
  * execute[set mariadb root password] action run
    - execute     /usr/bin/rm -f /root/.my.cnf
        mysql -u root -e "update mysql.user set password=password('FM11AD2+') where user = 'root'"
        systemctl restart mariadb
  
  * template[/root/.my.cnf] action create
    - create new file /root/.my.cnf
    - update content in file /root/.my.cnf from none to 8b2970
    --- /root/.my.cnf	2016-05-07 13:30:05.447532208 +0900
    +++ /root/.chef-.my.cnf20160507-2763-pjob7n	2016-05-07 13:30:05.447532208 +0900
    @@ -1 +1,8 @@
    +[client]
    +user = root
    +password = "FM11AD2+"
    +
    +[mysqladmin]
    +user = root
    +password = "FM11AD2+"
    - change mode from '' to '0600'
    - change owner from '' to 'root'
    - change group from '' to 'root'
  * execute[mariawp_db_logrotate] action run
    - execute     sed -i.bak -e '23,$ s/^#//' /etc/logrotate.d/mariadb
  
  * bash[create wordpres db/user] action run
    - execute "bash"  "/tmp/chef-script20160507-2763-1df3arv"
  * execute[install wordpress] action run
    - execute     curl https://ja.wordpress.org/latest-ja.tar.gz | tar zx -C /var/www
  
  * bash[create wordpress config] action run
    - execute "bash"  "/tmp/chef-script20160507-2763-kw4xvg"
  * execute[chown wordpress files] action run
    - execute     chown -R root:root /var/www/wordpress
  
  * template[/etc/httpd/conf.d/wordpress.conf] action create
    - create new file /etc/httpd/conf.d/wordpress.conf
    - update content in file /etc/httpd/conf.d/wordpress.conf from none to 127163
    --- /etc/httpd/conf.d/wordpress.conf	2016-05-07 13:30:08.358562342 +0900
    +++ /etc/httpd/conf.d/.chef-wordpress.conf20160507-2763-1p7qqgk	2016-05-07 13:30:08.358562342 +0900
    @@ -1 +1,14 @@
    +<VirtualHost *:80>
    +  ServerName tissvv096;
    +  DocumentRoot /var/www/wordpress
    +  <Directory "/var/www/wordpress">
    +    AllowOverride All
    +    Options -Indexes
    +  </Directory>
    +
    +  <Files wp-config.php>
    +    order allow,deny
    +    deny from all
    +  </Files>
    +</VirtualHost>
    - change owner from '' to 'root'
    - change group from '' to 'root'
  * execute[httpd.conf] action run
    - execute     sed -i.bak -e 's/^#ServerName.*/ServerName tissvv096/' /etc/httpd/conf/httpd.conf
  
  * service[httpd] action start
    - start service service[httpd]
  * service[httpd] action enable
    - enable service service[httpd]
  * execute[open httpd port in firewall] action run
    - execute     firewall-cmd --add-service=http --zone=public --permanent
        firewall-cmd --reload
  
Running handlers:
Running handlers complete
Chef Client finished, 16/16 resources updated in 26 seconds

Running Chef on tissvv096...
Checking Chef version...
Uploading the kitchen...
Generating solo config...
Running Chef: sudo chef-solo -c ~/chef-solo/solo.rb -j ~/chef-solo/dna.json
Starting Chef Client, version 12.9.38
Installing Cookbook Gems:
Compiling Cookbooks...
Converging 14 resources
Recipe: wordpress_sample::default
  * execute[yum-update] action run
    - execute yum -y update
  * yum_package[mariadb-server, httpd, php, php-mysql] action install (up to date)
  * service[mariadb] action start (up to date)
  * service[mariadb] action enable (up to date)
  * execute[set mariadb root password] action run (skipped due to only_if)
  * template[/root/.my.cnf] action create (skipped due to not_if)
  * execute[mariawp_db_logrotate] action run (skipped due to not_if)
  * bash[create wordpres db/user] action run (skipped due to not_if)
  * execute[install wordpress] action run (skipped due to not_if)
  * bash[create wordpress config] action run (skipped due to not_if)
  * execute[chown wordpress files] action run (skipped due to not_if)
  * template[/etc/httpd/conf.d/wordpress.conf] action create (skipped due to not_if)
  * execute[httpd.conf] action run (skipped due to not_if)
  * service[httpd] action start (up to date)
  * service[httpd] action enable (up to date)
  * execute[open httpd port in firewall] action run (skipped due to only_if)
Running handlers:
Running handlers complete
Chef Client finished, 1/16 resources updated in 07 seconds