Commit graph

123 commits

Author SHA1 Message Date
Tim Smith
78b3020d12 Don't build packages for EOL Debian 8
Debian 8 is out of support and we shouldn't produce packages for it anymore.

Signed-off-by: Tim Smith <tsmith@chef.io>
2020-08-13 13:48:41 -07:00
Tim Smith
75b61a08c2 Ensure Darwin is always detected in the install scripts
This is more reliable if the output changes

Signed-off-by: Tim Smith <tsmith@chef.io>
2020-07-30 16:57:18 -07:00
James Stocks
8ee28c1211 Change ffi pinning
ffi 1.13.1 reverts the breaking change in 1.13.0
We can now use any version other than specifically 1.13.0.

Signed-off-by: James Stocks <jstocks@chef.io>
2020-06-10 12:18:23 +01:00
James Stocks
f24f751fb7 Update installer license text
Copied the correct license text over from chef/chef and updated latest date to May 14 2019

Fixes #5066

Signed-off-by: James Stocks <jstocks@chef.io>
2020-06-05 16:38:08 +01:00
James Stocks
9fb151e8d8 Pin ffi in omnibus/Gemfile
Signed-off-by: James Stocks <jstocks@chef.io>
2020-06-03 11:11:29 +01:00
tyler-ball
0dd05af06e No longer need to include rubygems or bundler software dep
Recent versions of Ruby have included Rubygems and Bundler, which they
did not always do. We also recently fixed some issues in Appbundler so
these software dependencies are no longer needed.

Signed-off-by: tyler-ball <tball@chef.io>
2020-05-08 16:40:51 -07:00
Christopher A. Snapp
62547195be
Modify omnibus-test.ps1 to use embedded Ruby
Signed-off-by: Christopher A. Snapp <csnapp@chef.io>
2020-04-06 14:06:33 -06:00
James Stocks
f7d1f75f15 Change S3 URL for fetching ruby+devkit
The S3 bucket URL (https://public-cd-buildkite-cache.s3-us-west-2.amazonaws.com/rubyinstaller-devkit-2.6.5-1-x64.exe) no longer works.

Signed-off-by: James Stocks <jstocks@chef.io>
2020-04-02 17:19:16 +01:00
Tim Smith
8198746e90 Cleanup ruby before fixing gem permissions
This should prevent failures

Signed-off-by: Tim Smith <tsmith@chef.io>
2020-02-12 12:54:48 -08:00
Tim Smith
70723000a8 Pull Ruby installer for windows from S3 not GitHub
This should prevent failures when we get throttled pulling it from GitHub.

Signed-off-by: Tim Smith <tsmith@chef.io>
2020-02-05 10:26:24 -08:00
Ryan Davis
46207b4082 I _think_ this should fix omnibus.
Debugging via CI is fun!

Signed-off-by: Ryan Davis <zenspider@chef.io>
2020-01-31 13:34:32 -08:00
Jon Morrow
14dd7bde64 Fixes all notarization issues
This changes makes the neccessary changes to enable the pkg to pass apples notarization requirements.

1. Drop 'Developer ID Installer:' from signing key. This lets sigining pick up the correct key for what is being signed.
2. Update inspec software definition to delete test dir from rubyzip gem because its fixtures contain zip files that the notarization service cannot inspect.

Signed-off-by: Jon Morrow <jmorrow@chef.io>
2020-01-24 13:46:41 -08:00
Miah Johnson
45070c15c0 Fixup tests
Signed-off-by: Miah Johnson <miah@chia-pet.org>
2019-11-21 17:01:10 -08:00
Seth Chisamore
9907a4ee4a
Begin signing MSI's with renewed Windows Signing Cert
Signed-off-by: Seth Chisamore <schisamo@chef.io>
2019-08-13 11:15:28 -04:00
Jeremiah Snapp
d9e0f8cb15 Add artifactory to omnibus/Gemfile
The artifactory gem is required for the publish part of
the build stage.

Signed-off-by: Jeremiah Snapp <jeremiah@chef.io>
2019-08-02 17:27:01 -04:00
Jaymala Sinha
1278635245 Accept license for omnibus tests
Signed-off-by: Jaymala Sinha <jsinha@chef.io>
2019-07-16 12:24:36 -04:00
Miah Johnson
de8f361942 omnibus test will now run more than inspec version
Signed-off-by: Miah Johnson <miah@chia-pet.org>
2019-07-09 19:09:29 -07:00
Jeremiah Snapp
a42b51895b Use new omnibus-toolchain scripts in omnibus-test.* scripts
Signed-off-by: Jeremiah Snapp <jeremiah@chef.io>
2019-06-20 01:09:12 -04:00
Clinton Wolfe
860498b838 Remove clean-static-libs from omnibus build
Signed-off-by: Clinton Wolfe <clintoncwolfe@gmail.com>
2019-06-17 12:54:57 -04:00
Ryan Davis
a5309ea392 blindly applied chefstyle -a
Signed-off-by: Ryan Davis <zenspider@chef.io>
2019-06-11 18:52:03 -07:00
Miah Johnson
2a1b1d8e88 Remove all leading newlines.
Signed-off-by: Miah Johnson <miah@chia-pet.org>
2019-05-31 11:43:44 -07:00
Jeremiah Snapp
4fcdc95b92 Minor changes to omnibus-test scripts
Signed-off-by: Jeremiah Snapp <jeremiah@chef.io>
2019-05-29 16:45:54 -04:00
Bryan McLellan
90d4012f0a
Merge pull request #4045 from inspec/btm/omnibus-license
Convert Chef EULA to a local file
2019-05-08 16:24:39 -04:00
Bryan McLellan
0539e9afe8 Convert Chef EULA to a local file
Signed-off-by: Bryan McLellan <btm@loftninjas.org>
2019-05-08 16:24:08 -04:00
Miah Johnson
11b8da3283
Merge branch 'master' into mj/encoding 2019-05-08 12:59:55 -07:00
Bryan McLellan
241c1e7dfd Update the omnibus build license to the Chef EULA
The resulting distribuions are licensed under the Chef EULA.

Signed-off-by: Bryan McLellan <btm@loftninjas.org>
2019-05-08 11:12:45 -04:00
Miah Johnson
659b4b373a Remove # encoding: utf8 magic comments
Signed-off-by: Miah Johnson <miah@chia-pet.org>
2019-05-07 16:06:23 -07:00
Clinton Wolfe
b5373dafd2
Update to Ruby 2.6.2 and Rubygems 3.0.3 (#3994)
Update to Ruby 2.6.2 and Rubygems 3.0.3
2019-04-29 20:43:16 -04:00
Tim Smith
45eadb69df Use File instead of IO
Signed-off-by: Tim Smith <tsmith@chef.io>
2019-04-29 17:09:48 -07:00
Clinton Wolfe
cfda9ea5ca Wrap appbundler block to force lazy evaluation
Signed-off-by: Clinton Wolfe <clintoncwolfe@gmail.com>
2019-04-29 15:47:26 -06:00
Clinton Wolfe
d043dab94b linting
Signed-off-by: Clinton Wolfe <clintoncwolfe@gmail.com>
2019-04-29 15:47:26 -06:00
Jaymala Sinha
2a4f3a168d Build inspec-bin gem too
Signed-off-by: Jaymala Sinha <jsinha@chef.io>
2019-04-29 15:47:26 -06:00
Tim Smith
65f27bf31b More omnibus def updates from Chef
Getting the file path right should fix the build failures

Signed-off-by: Tim Smith <tsmith@chef.io>
2019-04-29 10:26:54 -07:00
Tim Smith
366245b398 Update to Ruby 2.6.2 and Rubygems 3.0.3
We thought we were riding the latest, but actually the overrides file wasn't wired up the same way it is in Chef. This properly sources that file and does a few other syncs from the chef config so we can diff things more easily.

Signed-off-by: Tim Smith <tsmith@chef.io>
2019-04-29 10:06:36 -07:00
Tim Smith
6c3abc36ef Use the upstream unf_ext again
The new version was released that includes our Solaris patch as well as Ruby 2.6 support.

Signed-off-by: Tim Smith <tsmith@chef.io>
2019-04-19 20:18:11 -07:00
Jeremiah Snapp
265ce834ad Do not add inspec's bin path to the PATH env var
By not adding inspec's bin path to the PATH env var
we can properly test that inspec's install scripts
created the appropriate symlinks.

Signed-off-by: Jeremiah Snapp <jeremiah@chef.io>
2019-04-15 17:04:30 -04:00
Jeremiah Snapp
8533998fb8 Reload Env:PATH to get changes from inspec installation
Reloading Env:PATH does a better job of testing if
the installation properly configured the system's
PATH.

Signed-off-by: Jeremiah Snapp <jeremiah@chef.io>
2019-04-15 17:02:34 -04:00
Jeremiah Snapp
d7b671e395 Fix PATH env var in new omnibus test scripts
Signed-off-by: Jeremiah Snapp <jeremiah@chef.io>
2019-04-05 11:57:47 -04:00
Jeremiah Snapp
e27b38fbb7 Create omnibus buildkite pipelines
Signed-off-by: Jeremiah Snapp <jeremiah@chef.io>
2019-04-04 12:29:01 -04:00
Clinton Wolfe
b40a0a1d35 Linting, a great use of time
Signed-off-by: Clinton Wolfe <clintoncwolfe@gmail.com>
2019-03-22 01:00:47 -04:00
Clinton Wolfe
08aea07c71 Re-add a bespoke unf_ext to our omnibus build
Signed-off-by: Clinton Wolfe <clintoncwolfe@gmail.com>
2019-03-22 00:22:06 -04:00
Lamont Granquist
e16206f1d0 Move all gem installation to Gemfile/bundle install
Do not use omnibus-software gem definitions for installing gems,
and use the Gemfile in the inspec project as the source of truth.

Signed-off-by: Lamont Granquist <lamont@scriptkiddie.org>
2019-03-01 17:45:37 -08:00
Tim Smith
b5ff949059 Update Ruby versions used for testing; fix Travis CI issues (#3678)
Signed-off-by: Tim Smith <tsmith@chef.io>
Signed-off-by: Clinton Wolfe <clintoncwolfe@gmail.com>
2018-12-20 22:17:07 -05:00
Tim Smith
71c7bf1c03 Remove FreeBSD cookbook from omnibus (#3676)
Signed-off-by: Tim Smith <tsmith@chef.io>
2018-12-20 14:41:31 -05:00
Tim Smith
559d6d3178 Modernize omnibus config and reduce omnibus package size (#3543)
* Modernize the kitchen config

This is basically the same one we use in chef/chef

* Modernize the omnibus deps
* Remove cookbook constraints
* Avoid security warnings when bundle installing
* Use the ruby-cleanup project to slim the omnibus package

We're using this in chef and DK to greatly reduce our artifact size. It's just a set of cleanup steps that are the same for all ruby omnibus projects.

Signed-off-by: Tim Smith <tsmith@chef.io>
2018-10-29 16:01:45 -04:00
Tim Smith
8468c0ebba Enable compression for deb/rpm packages (#3472)
* Enable compression for deb/rpm packages

In Chef we've seen this shrink package sizes by 22%. Should save us some sweet $$$ on the CDN costs.

* Maintain support for RHEL 5

Signed-off-by: Tim Smith <tsmith@chef.io>
2018-10-10 08:17:10 -04:00
Jared Quick
bd96af1fa2
Bump omnibus ruby to 2.5.1 (#3390)
Signed-off-by: Jared Quick <jquick@chef.io>
2018-09-13 13:28:01 -04:00
Jared Quick
40e7c1b23f
Add train GCP transport. (#3046)
Signed-off-by: Jared Quick <jquick@chef.io>
2018-05-16 15:04:23 -04:00
Miah Johnson
afbb366e16 Update to newer sha for our forked unf_ext to resolve AIX builds. (#2870)
Signed-off-by: Miah Johnson <miah@chia-pet.org>
2018-03-23 10:18:06 -04:00
Miah Johnson
c3c2e8d244 Add unf_ext configuration to omnibus to allow building against our (#2854)
Add unf_ext configuration to omnibus to allow building against our forked unf_ext.

Signed-off-by: Miah Johnson <miah@chia-pet.org>
2018-03-21 13:17:34 -04:00
Miah Johnson
112f12da61 Updated omnibus postinst script to symlink to appbundle created binstubs (#2732)
* Updated `postinst` script to symlink to appbundle created binstubs
rather than rubygems binstubs in embedded directory.

The rubygems binstubs do not account for GEM_HOME or GEM_PATHS existing
in the invoking shell. This creates problems on systems with multiple
ruby versions. If GEM_HOME or GEM_PATH is set the rubygems embedded
binstubs will attempt to use this external gem source which will
generally result in errors for the user.

Signed-off-by: Miah Johnson <miah@chia-pet.org>
2018-02-28 13:47:08 -05:00
Tom Duffield
f6d57ed80f Use the version of LicenseScout that comes with the Omnibus gem. (#2554)
LicenseScout is being refactored. We have released a 1.x version that
is pinned within the Omnibus gem.

Signed-off-by: Tom Duffield <tom@chef.io>
2018-02-08 17:04:48 -05:00
Adam Leff
c1f57d9875 Bump Omnibus Ruby (and Travis Rubies) to 2.4.3 (#2452)
Addresses CVE-2017-17405.

Signed-off-by: Adam Leff <adam@leff.co>
2018-01-16 14:28:19 -08:00
Adam Leff
4b9acb4800 Bump Rubocop to 0.49.1 (#2323)
* Bump Rubocop to 0.49.1

This change bumps Rubocop to 0.49.1. There have been a lot of changes
since 0.39.0 and this PR is hopefully a nice compromise of turning off
certain cops and updating our codebase to take advantage of new Ruby
2.3 methods and operators.

Signed-off-by: Adam Leff <adam@leff.co>

* Set end-of-line format to line-feed only, avoid Windows-related CRLF issues

Signed-off-by: Adam Leff <adam@leff.co>
2017-11-21 08:49:41 +01:00
Adam Leff
06a3a6e95b Bump Omnibus ruby to 2.4.2 (#2294)
Signed-off-by: Adam Leff <adam@leff.co>
2017-11-09 11:09:54 +01:00
Adam Leff
7616597b7f
Pin RubyGems to 2.6.14 (#2287)
* Pin RubyGems to 2.6.14

2.7.0 seems to have introduced an issue causing bundler to fail to
install in our Jenkins pipeline.

Signed-off-by: Adam Leff <adam@leff.co>

* Added comment explaining the pin

Signed-off-by: Adam Leff <adam@leff.co>
2017-11-03 16:23:56 -04:00
Adam Leff
2c37d1a578 Bump Ruby to 2.3.5 (#2149)
https://www.ruby-lang.org/en/news/2017/09/14/ruby-2-3-5-released/

Signed-off-by: Adam Leff <adam@leff.co>
2017-09-14 13:08:55 -04:00
Seth Chisamore
c857898091 Update SHA1 fingerprint for MSI signing cert (#2031)
The cert has been updated as the old one expires on 2017-07-25.

Signed-off-by: Seth Chisamore <schisamo@chef.io>
2017-07-24 16:02:43 -04:00
Seth Chisamore
a081b343e0 Revert "Update SHA1 fingerprint for MSI signing cert (#2013)" (#2014)
This reverts commit b803194abd.

Reverting this as we are investigating using an EV cert which has
instant reputation with Microsoft Smartscreen filter.

Signed-off-by: Seth Chisamore <schisamo@chef.io>
2017-07-12 17:26:09 -04:00
Seth Chisamore
b803194abd Update SHA1 fingerprint for MSI signing cert (#2013)
The cert has been updated as the old one expires on 2017-07-25.

Signed-off-by: Seth Chisamore <schisamo@chef.io>
2017-07-12 15:24:14 -04:00
Adam Leff
73d46f9c49
Replace Nokogiri with REXML in the JUnit formatter
In #1454, we welcomed a newly-revamped JUnit formatter which has
a dependency on Nokogiri. Unfortunately, this had led us to problems
getting InSpec included in Chef omnibus builds (see chef/chef#5937)
because Chef is using Ruby 2.4.1 and the Nokogiri maintainers have
not yet released a windows binary gem that supports Ruby 2.4.x.
This has led to breaking builds in Chef's CI platform and would
block the acceptance of chef/chef#5937.

This change replaces Nokogiri use with REXML instead. While REXML
can be slower than Nokogiri, it does not require native extensions
and is supported on all Chef platforms.

Signed-off-by: Adam Leff <adam@leff.co>
2017-04-03 14:51:48 -04:00
Adam Leff
199cb160ea Move simulator gems to www
The simulator gems are not necessary for building InSpec, only the website.
This is currently causing issues in the Jenkins infrastructure due to
a downstream dependency of github-markup.

Signed-off-by: Adam Leff <adam@leff.co>
2017-03-21 16:11:56 -04:00
Adam Leff
a49467e779 Fix omnibus configuration
The latest omnibus master expects certain settings to be enabled for
S3 caching to work, and our omnibus.rb wasn't set up properly. Also
aligning some of our settings to chef/chef's settings which we know
to work properly.

Signed-off-by: Adam Leff <adam@leff.co>
2017-03-20 17:50:16 -04:00
Adam Leff
9581fda2d8 Fix omnibus build after new JUnit formatter
The new JUnit formatter requires nokogiri, so we need
to build nokogiri via omnibus to ensure liblzma, etc.
is built as part of the omnibus package instead of
`gem` picking up a system liblzma, such as on Mac OS X.

Also bumping ruby to 2.3.1 to match ChefDK.

Signed-off-by: Adam Leff <adam@leff.co>
2017-03-06 11:25:20 -07:00
Christoph Hartmann
59c44f86cd update omnibus images 2016-09-26 15:29:27 +02:00
Scott Hain
9d9137f0c8 Update branches to enable windows and nix builds 2016-09-23 15:25:39 -07:00
Scott Hain
3538e7029d Add environment to appbundle so required tools are added to the path 2016-09-23 15:24:50 -07:00
Yvonne Lam
6481c0a7a1 Use the gem version for the omnibus package version. 2016-09-22 10:24:58 +02:00
Yvonne Lam
df56fced00 Build with master of omnibus to enable package builds on linux and OS X. 2016-09-19 21:39:18 +02:00
Christoph Hartmann
016e970bb9 add description for windows builds 2016-08-10 22:31:58 +02:00
Kartik Null Cating-Subramanian
ce2b0949ac Improve windows support of omnibus installer - fix #889 2016-08-10 22:31:58 +02:00
Steven Danna
07f7485423 [omnibus] Appbundle inspec and cleanup style issues
- Removes resource files which matched the default implementations
  contained in omnibus.

- Removes software definition for train which will be installed via the
  gem dependecies in the inspec defintion.

- Appbundle inspec to match our other ruby-based projects

- Update rubocop style violations

- Update copyright notices

Signed-off-by: Steven Danna <steve@chef.io>
2016-08-08 13:34:33 +02:00
Christoph Hartmann
5a8ee8c896 add omnibus for inspec 2016-08-08 13:34:33 +02:00