Commit graph

60 commits

Author SHA1 Message Date
Seth Chisamore
9907a4ee4a
Begin signing MSI's with renewed Windows Signing Cert
Signed-off-by: Seth Chisamore <schisamo@chef.io>
2019-08-13 11:15:28 -04:00
Jeremiah Snapp
d9e0f8cb15 Add artifactory to omnibus/Gemfile
The artifactory gem is required for the publish part of
the build stage.

Signed-off-by: Jeremiah Snapp <jeremiah@chef.io>
2019-08-02 17:27:01 -04:00
Jaymala Sinha
1278635245 Accept license for omnibus tests
Signed-off-by: Jaymala Sinha <jsinha@chef.io>
2019-07-16 12:24:36 -04:00
Miah Johnson
de8f361942 omnibus test will now run more than inspec version
Signed-off-by: Miah Johnson <miah@chia-pet.org>
2019-07-09 19:09:29 -07:00
Jeremiah Snapp
a42b51895b Use new omnibus-toolchain scripts in omnibus-test.* scripts
Signed-off-by: Jeremiah Snapp <jeremiah@chef.io>
2019-06-20 01:09:12 -04:00
Clinton Wolfe
860498b838 Remove clean-static-libs from omnibus build
Signed-off-by: Clinton Wolfe <clintoncwolfe@gmail.com>
2019-06-17 12:54:57 -04:00
Ryan Davis
a5309ea392 blindly applied chefstyle -a
Signed-off-by: Ryan Davis <zenspider@chef.io>
2019-06-11 18:52:03 -07:00
Miah Johnson
2a1b1d8e88 Remove all leading newlines.
Signed-off-by: Miah Johnson <miah@chia-pet.org>
2019-05-31 11:43:44 -07:00
Jeremiah Snapp
4fcdc95b92 Minor changes to omnibus-test scripts
Signed-off-by: Jeremiah Snapp <jeremiah@chef.io>
2019-05-29 16:45:54 -04:00
Bryan McLellan
90d4012f0a
Merge pull request #4045 from inspec/btm/omnibus-license
Convert Chef EULA to a local file
2019-05-08 16:24:39 -04:00
Bryan McLellan
0539e9afe8 Convert Chef EULA to a local file
Signed-off-by: Bryan McLellan <btm@loftninjas.org>
2019-05-08 16:24:08 -04:00
Miah Johnson
11b8da3283
Merge branch 'master' into mj/encoding 2019-05-08 12:59:55 -07:00
Bryan McLellan
241c1e7dfd Update the omnibus build license to the Chef EULA
The resulting distribuions are licensed under the Chef EULA.

Signed-off-by: Bryan McLellan <btm@loftninjas.org>
2019-05-08 11:12:45 -04:00
Miah Johnson
659b4b373a Remove # encoding: utf8 magic comments
Signed-off-by: Miah Johnson <miah@chia-pet.org>
2019-05-07 16:06:23 -07:00
Clinton Wolfe
b5373dafd2
Update to Ruby 2.6.2 and Rubygems 3.0.3 (#3994)
Update to Ruby 2.6.2 and Rubygems 3.0.3
2019-04-29 20:43:16 -04:00
Tim Smith
45eadb69df Use File instead of IO
Signed-off-by: Tim Smith <tsmith@chef.io>
2019-04-29 17:09:48 -07:00
Clinton Wolfe
cfda9ea5ca Wrap appbundler block to force lazy evaluation
Signed-off-by: Clinton Wolfe <clintoncwolfe@gmail.com>
2019-04-29 15:47:26 -06:00
Clinton Wolfe
d043dab94b linting
Signed-off-by: Clinton Wolfe <clintoncwolfe@gmail.com>
2019-04-29 15:47:26 -06:00
Jaymala Sinha
2a4f3a168d Build inspec-bin gem too
Signed-off-by: Jaymala Sinha <jsinha@chef.io>
2019-04-29 15:47:26 -06:00
Tim Smith
65f27bf31b More omnibus def updates from Chef
Getting the file path right should fix the build failures

Signed-off-by: Tim Smith <tsmith@chef.io>
2019-04-29 10:26:54 -07:00
Tim Smith
366245b398 Update to Ruby 2.6.2 and Rubygems 3.0.3
We thought we were riding the latest, but actually the overrides file wasn't wired up the same way it is in Chef. This properly sources that file and does a few other syncs from the chef config so we can diff things more easily.

Signed-off-by: Tim Smith <tsmith@chef.io>
2019-04-29 10:06:36 -07:00
Tim Smith
6c3abc36ef Use the upstream unf_ext again
The new version was released that includes our Solaris patch as well as Ruby 2.6 support.

Signed-off-by: Tim Smith <tsmith@chef.io>
2019-04-19 20:18:11 -07:00
Jeremiah Snapp
265ce834ad Do not add inspec's bin path to the PATH env var
By not adding inspec's bin path to the PATH env var
we can properly test that inspec's install scripts
created the appropriate symlinks.

Signed-off-by: Jeremiah Snapp <jeremiah@chef.io>
2019-04-15 17:04:30 -04:00
Jeremiah Snapp
8533998fb8 Reload Env:PATH to get changes from inspec installation
Reloading Env:PATH does a better job of testing if
the installation properly configured the system's
PATH.

Signed-off-by: Jeremiah Snapp <jeremiah@chef.io>
2019-04-15 17:02:34 -04:00
Jeremiah Snapp
d7b671e395 Fix PATH env var in new omnibus test scripts
Signed-off-by: Jeremiah Snapp <jeremiah@chef.io>
2019-04-05 11:57:47 -04:00
Jeremiah Snapp
e27b38fbb7 Create omnibus buildkite pipelines
Signed-off-by: Jeremiah Snapp <jeremiah@chef.io>
2019-04-04 12:29:01 -04:00
Clinton Wolfe
b40a0a1d35 Linting, a great use of time
Signed-off-by: Clinton Wolfe <clintoncwolfe@gmail.com>
2019-03-22 01:00:47 -04:00
Clinton Wolfe
08aea07c71 Re-add a bespoke unf_ext to our omnibus build
Signed-off-by: Clinton Wolfe <clintoncwolfe@gmail.com>
2019-03-22 00:22:06 -04:00
Lamont Granquist
e16206f1d0 Move all gem installation to Gemfile/bundle install
Do not use omnibus-software gem definitions for installing gems,
and use the Gemfile in the inspec project as the source of truth.

Signed-off-by: Lamont Granquist <lamont@scriptkiddie.org>
2019-03-01 17:45:37 -08:00
Tim Smith
b5ff949059 Update Ruby versions used for testing; fix Travis CI issues (#3678)
Signed-off-by: Tim Smith <tsmith@chef.io>
Signed-off-by: Clinton Wolfe <clintoncwolfe@gmail.com>
2018-12-20 22:17:07 -05:00
Tim Smith
71c7bf1c03 Remove FreeBSD cookbook from omnibus (#3676)
Signed-off-by: Tim Smith <tsmith@chef.io>
2018-12-20 14:41:31 -05:00
Tim Smith
559d6d3178 Modernize omnibus config and reduce omnibus package size (#3543)
* Modernize the kitchen config

This is basically the same one we use in chef/chef

* Modernize the omnibus deps
* Remove cookbook constraints
* Avoid security warnings when bundle installing
* Use the ruby-cleanup project to slim the omnibus package

We're using this in chef and DK to greatly reduce our artifact size. It's just a set of cleanup steps that are the same for all ruby omnibus projects.

Signed-off-by: Tim Smith <tsmith@chef.io>
2018-10-29 16:01:45 -04:00
Tim Smith
8468c0ebba Enable compression for deb/rpm packages (#3472)
* Enable compression for deb/rpm packages

In Chef we've seen this shrink package sizes by 22%. Should save us some sweet $$$ on the CDN costs.

* Maintain support for RHEL 5

Signed-off-by: Tim Smith <tsmith@chef.io>
2018-10-10 08:17:10 -04:00
Jared Quick
bd96af1fa2
Bump omnibus ruby to 2.5.1 (#3390)
Signed-off-by: Jared Quick <jquick@chef.io>
2018-09-13 13:28:01 -04:00
Jared Quick
40e7c1b23f
Add train GCP transport. (#3046)
Signed-off-by: Jared Quick <jquick@chef.io>
2018-05-16 15:04:23 -04:00
Miah Johnson
afbb366e16 Update to newer sha for our forked unf_ext to resolve AIX builds. (#2870)
Signed-off-by: Miah Johnson <miah@chia-pet.org>
2018-03-23 10:18:06 -04:00
Miah Johnson
c3c2e8d244 Add unf_ext configuration to omnibus to allow building against our (#2854)
Add unf_ext configuration to omnibus to allow building against our forked unf_ext.

Signed-off-by: Miah Johnson <miah@chia-pet.org>
2018-03-21 13:17:34 -04:00
Miah Johnson
112f12da61 Updated omnibus postinst script to symlink to appbundle created binstubs (#2732)
* Updated `postinst` script to symlink to appbundle created binstubs
rather than rubygems binstubs in embedded directory.

The rubygems binstubs do not account for GEM_HOME or GEM_PATHS existing
in the invoking shell. This creates problems on systems with multiple
ruby versions. If GEM_HOME or GEM_PATH is set the rubygems embedded
binstubs will attempt to use this external gem source which will
generally result in errors for the user.

Signed-off-by: Miah Johnson <miah@chia-pet.org>
2018-02-28 13:47:08 -05:00
Tom Duffield
f6d57ed80f Use the version of LicenseScout that comes with the Omnibus gem. (#2554)
LicenseScout is being refactored. We have released a 1.x version that
is pinned within the Omnibus gem.

Signed-off-by: Tom Duffield <tom@chef.io>
2018-02-08 17:04:48 -05:00
Adam Leff
c1f57d9875 Bump Omnibus Ruby (and Travis Rubies) to 2.4.3 (#2452)
Addresses CVE-2017-17405.

Signed-off-by: Adam Leff <adam@leff.co>
2018-01-16 14:28:19 -08:00
Adam Leff
4b9acb4800 Bump Rubocop to 0.49.1 (#2323)
* Bump Rubocop to 0.49.1

This change bumps Rubocop to 0.49.1. There have been a lot of changes
since 0.39.0 and this PR is hopefully a nice compromise of turning off
certain cops and updating our codebase to take advantage of new Ruby
2.3 methods and operators.

Signed-off-by: Adam Leff <adam@leff.co>

* Set end-of-line format to line-feed only, avoid Windows-related CRLF issues

Signed-off-by: Adam Leff <adam@leff.co>
2017-11-21 08:49:41 +01:00
Adam Leff
06a3a6e95b Bump Omnibus ruby to 2.4.2 (#2294)
Signed-off-by: Adam Leff <adam@leff.co>
2017-11-09 11:09:54 +01:00
Adam Leff
7616597b7f
Pin RubyGems to 2.6.14 (#2287)
* Pin RubyGems to 2.6.14

2.7.0 seems to have introduced an issue causing bundler to fail to
install in our Jenkins pipeline.

Signed-off-by: Adam Leff <adam@leff.co>

* Added comment explaining the pin

Signed-off-by: Adam Leff <adam@leff.co>
2017-11-03 16:23:56 -04:00
Adam Leff
2c37d1a578 Bump Ruby to 2.3.5 (#2149)
https://www.ruby-lang.org/en/news/2017/09/14/ruby-2-3-5-released/

Signed-off-by: Adam Leff <adam@leff.co>
2017-09-14 13:08:55 -04:00
Seth Chisamore
c857898091 Update SHA1 fingerprint for MSI signing cert (#2031)
The cert has been updated as the old one expires on 2017-07-25.

Signed-off-by: Seth Chisamore <schisamo@chef.io>
2017-07-24 16:02:43 -04:00
Seth Chisamore
a081b343e0 Revert "Update SHA1 fingerprint for MSI signing cert (#2013)" (#2014)
This reverts commit b803194abd.

Reverting this as we are investigating using an EV cert which has
instant reputation with Microsoft Smartscreen filter.

Signed-off-by: Seth Chisamore <schisamo@chef.io>
2017-07-12 17:26:09 -04:00
Seth Chisamore
b803194abd Update SHA1 fingerprint for MSI signing cert (#2013)
The cert has been updated as the old one expires on 2017-07-25.

Signed-off-by: Seth Chisamore <schisamo@chef.io>
2017-07-12 15:24:14 -04:00
Adam Leff
73d46f9c49
Replace Nokogiri with REXML in the JUnit formatter
In #1454, we welcomed a newly-revamped JUnit formatter which has
a dependency on Nokogiri. Unfortunately, this had led us to problems
getting InSpec included in Chef omnibus builds (see chef/chef#5937)
because Chef is using Ruby 2.4.1 and the Nokogiri maintainers have
not yet released a windows binary gem that supports Ruby 2.4.x.
This has led to breaking builds in Chef's CI platform and would
block the acceptance of chef/chef#5937.

This change replaces Nokogiri use with REXML instead. While REXML
can be slower than Nokogiri, it does not require native extensions
and is supported on all Chef platforms.

Signed-off-by: Adam Leff <adam@leff.co>
2017-04-03 14:51:48 -04:00
Adam Leff
199cb160ea Move simulator gems to www
The simulator gems are not necessary for building InSpec, only the website.
This is currently causing issues in the Jenkins infrastructure due to
a downstream dependency of github-markup.

Signed-off-by: Adam Leff <adam@leff.co>
2017-03-21 16:11:56 -04:00
Adam Leff
a49467e779 Fix omnibus configuration
The latest omnibus master expects certain settings to be enabled for
S3 caching to work, and our omnibus.rb wasn't set up properly. Also
aligning some of our settings to chef/chef's settings which we know
to work properly.

Signed-off-by: Adam Leff <adam@leff.co>
2017-03-20 17:50:16 -04:00