5d0ae06a01
* Sync up the default branch as main (#6239) Signed-off-by: Takuya Noguchi <takninnovationresearch@gmail.com> Signed-off-by: Takuya Noguchi <takninnovationresearch@gmail.com> * Bump version to 5.20.2 by Chef Expeditor Obvious fix; these changes are the result of automation not creative thinking. * resolves inspec/inspec#6042 (#6043) Signed-off-by: Marijus Ravickas <marijus.ravickas@gmail.com> Signed-off-by: Marijus Ravickas <marijus.ravickas@gmail.com> * Enhance `lxc` resource to test properties (#6243) * ENHANCE: Extend lxc resource to test the properties Signed-off-by: Sonu Saha <sonu.saha@progress.com> * TEST: Extend test for introduced properties Signed-off-by: Sonu Saha <sonu.saha@progress.com> * DOCS: Extend test for introduced properties Signed-off-by: Sonu Saha <sonu.saha@progress.com> * FIX: Correct exception class to handle bad yaml Signed-off-by: Sonu Saha <sonu.saha@progress.com> * Doc Review Signed-off-by: Deepa Kumaraswamy <dkumaras@progress.com> * FIX: Handle specific exception to handle bad yaml Signed-off-by: Sonu Saha <sonu.saha@progress.com> Signed-off-by: Sonu Saha <sonu.saha@progress.com> Signed-off-by: Deepa Kumaraswamy <dkumaras@progress.com> Co-authored-by: Deepa Kumaraswamy <dkumaras@progress.com> * Bump version to 5.20.3 by Chef Expeditor Obvious fix; these changes are the result of automation not creative thinking. * CFINSPEC-462: Fixes inspec sign breaks when there is period or dot in the profile name (#6261) Signed-off-by: Vasu1105 <vasundhara.jagdale@chef.io> Signed-off-by: Vasu1105 <vasundhara.jagdale@chef.io> * Bump version to 5.20.4 by Chef Expeditor Obvious fix; these changes are the result of automation not creative thinking. * CFINSPEC-374 DSL keyword `only_applicable_if` added (#6229) * Not applicable if logic addition Signed-off-by: Nikita Mathur <nikita.mathur@chef.io> * Changes from not applicable if to only applicable if Signed-off-by: Nikita Mathur <nikita.mathur@chef.io> * Fix to enable placing only_applicable_if at any position in control and for keeping impact zero intact Signed-off-by: Nikita Mathur <nikita.mathur@chef.io> * Doc change added for only_applicable_if Signed-off-by: Nikita Mathur <nikita.mathur@chef.io> * Doc Review Signed-off-by: Deepa Kumaraswamy <dkumaras@progress.com> * Added generic examples that supports cross platform for testing Signed-off-by: Nikita Mathur <nikita.mathur@chef.io> * Yet another build fix due to changes in test Signed-off-by: Nikita Mathur <nikita.mathur@chef.io> Signed-off-by: Nikita Mathur <nikita.mathur@chef.io> Signed-off-by: Deepa Kumaraswamy <dkumaras@progress.com> Co-authored-by: Deepa Kumaraswamy <dkumaras@progress.com> * Bump version to 5.21.0 by Chef Expeditor Obvious fix; these changes are the result of automation not creative thinking. * CFINSPEC-458 Oracle DB session resource compatibility with AIX-C shell (#6257) * Oracle DB session resource compatibility with AIX-Cshell Signed-off-by: Nikita Mathur <nikita.mathur@chef.io> * Fixes in oracledb session unit test using oracle_query_string Signed-off-by: Nikita Mathur <nikita.mathur@chef.io> Signed-off-by: Nikita Mathur <nikita.mathur@chef.io> * Bump version to 5.21.1 by Chef Expeditor Obvious fix; these changes are the result of automation not creative thinking. * Replace faraday_middleware with faraday-follow_redirects (#6238) faraday_middleware was already DEPRECATED in 2022-01. Only FaradayMiddleware::FollowRedirects from faraday_middleware has been used, and so we can replace it with faraday-follow_redirects. faraday-follow_redirects 0.3.0 requires faraday ~> 1.0, which is as same as "faraday_middleware 1.0.0 or higher. Signed-off-by: Takuya Noguchi <takninnovationresearch@gmail.com> Signed-off-by: Takuya Noguchi <takninnovationresearch@gmail.com> * Bump version to 5.21.2 by Chef Expeditor Obvious fix; these changes are the result of automation not creative thinking. * Update Faraday gem (#6267) Signed-off-by: Vasu1105 <vasundhara.jagdale@chef.io> Signed-off-by: Vasu1105 <vasundhara.jagdale@chef.io> * Bump version to 5.21.3 by Chef Expeditor Obvious fix; these changes are the result of automation not creative thinking. * Bump test-kitchen from 3.3.1 to 3.3.2 in /omnibus (#6227) Bumps [test-kitchen](https://github.com/test-kitchen/test-kitchen) from 3.3.1 to 3.3.2. - [Release notes](https://github.com/test-kitchen/test-kitchen/releases) - [Changelog](https://github.com/test-kitchen/test-kitchen/blob/main/CHANGELOG.md) - [Commits](https://github.com/test-kitchen/test-kitchen/commits) --- updated-dependencies: - dependency-name: test-kitchen dependency-type: direct:development update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * Bump version to 5.21.4 by Chef Expeditor Obvious fix; these changes are the result of automation not creative thinking. * Bump omnibus-software from `1d540dc` to `7d0e0fe` in /omnibus (#6274) Bumps [omnibus-software](https://github.com/chef/omnibus-software) from `1d540dc` to `7d0e0fe`. - [Release notes](https://github.com/chef/omnibus-software/releases) - [Commits]( |
||
---|---|---|
.. | ||
config | ||
files/openssl-customization/windows | ||
package-scripts/inspec | ||
resources/inspec | ||
.gitignore | ||
Berksfile | ||
CHEF-EULA.md | ||
Gemfile | ||
Gemfile.lock | ||
kitchen.yml | ||
omnibus-test.ps1 | ||
omnibus-test.sh | ||
omnibus.rb | ||
README.md |
InSpec Omnibus project
This project creates full-stack platform-specific packages for
inspec
!
Installation
You must have a sane Ruby 2.0.0+ environment with Bundler installed. Ensure all the required gems are installed:
$ bundle install --binstubs
Usage
Build
You create a platform-specific package using the build project
command:
$ bundle exec omnibus build inspec
The platform/architecture type of the package created will match the platform
where the build project
command is invoked. For example, running this command
on a MacBook Pro will generate a Mac OS X package. After the build completes
packages will be available in the pkg/
folder.
Clean
You can clean up all temporary files generated during the build process with
the clean
command:
$ bundle exec omnibus clean inspec
Adding the `--purge` purge option removes __ALL__ files generated during the
build including the project install directory (`/opt/inspec`) and
the package cache directory (`/var/cache/omnibus/pkg`):
```shell
$ bundle exec omnibus clean inspec --purge
Publish
Omnibus has a built-in mechanism for releasing to a variety of "backends", such as Amazon S3 and Artifactory. You must set the proper credentials in your omnibus.rb
config file or specify them via the command line.
$ bundle exec omnibus publish path/to/*.deb --backend s3
Help
Full help for the Omnibus command line interface can be accessed with the help
command:
$ bundle exec omnibus help
Version Manifest
Git-based software definitions may specify branches as their
default_version. In this case, the exact git revision to use will be
determined at build-time unless a project override (see below) or
external version manifest is used. To generate a version manifest use
the omnibus manifest
command:
omnibus manifest PROJECT -l warn
This will output a JSON-formatted manifest containing the resolved version of every software definition.
Kitchen-based Build Environment
Every Omnibus project ships will a project-specific
Berksfile that will allow you to build your omnibus projects on all of the projects listed
in the .kitchen.yml
. You can add/remove additional platforms as needed by
changing the list found in the .kitchen.yml
platforms
YAML stanza.
This build environment is designed to get you up-and-running quickly. However, there is nothing that restricts you to building on other platforms. Simply use the omnibus cookbook to setup your desired platform and execute the build steps listed above.
The default build environment requires Test Kitchen and VirtualBox for local development. Test Kitchen also exposes the ability to provision instances using various cloud providers like AWS, DigitalOcean, or OpenStack. For more information, please see the Test Kitchen documentation.
Once you have tweaked your .kitchen.yml
(or .kitchen.local.yml
) to your
liking, you can bring up an individual build environment using the kitchen
command.
$ bin/kitchen converge ubuntu-1204
Then login to the instance and build the project as described in the Usage section:
$ bundle exec kitchen login ubuntu-1204
# Now inside the kitchen vm
$ sudo -i
$ export PATH=/opt/omnibus-toolchain/bin:/opt/omnibus-toolchain/embedded/bin:$PATH
$ cd /home/vagrant/inspec/omnibus
$ bundle install
$ bundle exec omnibus build inspec
If you are building for Windows, follow these steps:
$ bundle exec kitchen converge i386```
# Now inside the kitchen vm, open a cmd/ps shell
$ C:\vagrant\load-omnibus-toolchain.ps1 # (or .bar if you're on cmd)
$ cd C:\vagrant\code\inspec\omnibus
$ bundle config set --local without development
$ bundle install
$ bundle exec omnibus build inspec -l debug
# If you get a 'can't sign this msi because I don't have a key to do so' error
# at the end of it, you have succeeded. Look for you unsigned MSI in C:\omnibus-ruby\pkg