inspec/omnibus
Sonu Saha ec9724ed1b
ci: update digi cert token for windows platforms (#7180)
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
2024-09-30 16:14:47 +05:30
..
config ci: update digi cert token for windows platforms (#7180) 2024-09-30 16:14:47 +05:30
files/openssl-customization/windows blindly applied chefstyle -a 2019-06-11 18:52:03 -07:00
package-scripts/inspec Ensure Darwin is always detected in the install scripts 2020-07-30 16:57:18 -07:00
resources/inspec Update EULA for windows to fix formattings 2023-10-16 12:05:00 +05:30
.gitignore More omnibus def updates from Chef 2019-04-29 10:26:54 -07:00
Berksfile blindly applied chefstyle -a 2019-06-11 18:52:03 -07:00
CHEF-EULA.md EULA: Update latest EULA - 31AUG2023 (#6654) 2023-09-25 18:42:33 -04:00
Gemfile Bump ffi-yajl from 2.4.0 to 2.6.0 in /omnibus (#6648) 2024-06-14 17:21:28 +05:30
Gemfile.lock Bump rexml from 3.3.2 to 3.3.3 in /omnibus (#7116) 2024-08-02 14:48:25 +05:30
kitchen.yml Enable repeatable builds by bundling Gemfile.lock 2021-10-02 16:52:40 -07:00
omnibus-test.ps1 Fix omnibus-test.ps1 2022-05-16 16:55:16 -04:00
omnibus-test.sh Remove pipeline-specific logic from test scripts 2021-04-23 16:06:05 -05:00
omnibus.rb Disable git caching per build svcs (#6584) 2023-07-25 10:13:00 -04:00
README.md Replace deprecated --without flag with bundle config 2021-09-02 16:17:15 +05:30

InSpec Omnibus project

This project creates full-stack platform-specific packages for inspec!

Installation

You must have a sane Ruby 2.0.0+ environment with Bundler installed. Ensure all the required gems are installed:

$ bundle install --binstubs

Usage

Build

You create a platform-specific package using the build project command:

$ bundle exec omnibus build inspec

The platform/architecture type of the package created will match the platform where the build project command is invoked. For example, running this command on a MacBook Pro will generate a Mac OS X package. After the build completes packages will be available in the pkg/ folder.

Clean

You can clean up all temporary files generated during the build process with the clean command:

$ bundle exec omnibus clean inspec

Adding the `--purge` purge option removes __ALL__ files generated during the
build including the project install directory (`/opt/inspec`) and
the package cache directory (`/var/cache/omnibus/pkg`):

```shell
$ bundle exec omnibus clean inspec --purge

Publish

Omnibus has a built-in mechanism for releasing to a variety of "backends", such as Amazon S3 and Artifactory. You must set the proper credentials in your omnibus.rb config file or specify them via the command line.

$ bundle exec omnibus publish path/to/*.deb --backend s3

Help

Full help for the Omnibus command line interface can be accessed with the help command:

$ bundle exec omnibus help

Version Manifest

Git-based software definitions may specify branches as their default_version. In this case, the exact git revision to use will be determined at build-time unless a project override (see below) or external version manifest is used. To generate a version manifest use the omnibus manifest command:

omnibus manifest PROJECT -l warn

This will output a JSON-formatted manifest containing the resolved version of every software definition.

Kitchen-based Build Environment

Every Omnibus project ships will a project-specific Berksfile that will allow you to build your omnibus projects on all of the projects listed in the .kitchen.yml. You can add/remove additional platforms as needed by changing the list found in the .kitchen.yml platforms YAML stanza.

This build environment is designed to get you up-and-running quickly. However, there is nothing that restricts you to building on other platforms. Simply use the omnibus cookbook to setup your desired platform and execute the build steps listed above.

The default build environment requires Test Kitchen and VirtualBox for local development. Test Kitchen also exposes the ability to provision instances using various cloud providers like AWS, DigitalOcean, or OpenStack. For more information, please see the Test Kitchen documentation.

Once you have tweaked your .kitchen.yml (or .kitchen.local.yml) to your liking, you can bring up an individual build environment using the kitchen command.

$ bin/kitchen converge ubuntu-1204

Then login to the instance and build the project as described in the Usage section:

$ bundle exec kitchen login ubuntu-1204
# Now inside the kitchen vm
$ sudo -i
$ export PATH=/opt/omnibus-toolchain/bin:/opt/omnibus-toolchain/embedded/bin:$PATH
$ cd /home/vagrant/inspec/omnibus
$ bundle install
$ bundle exec omnibus build inspec

If you are building for Windows, follow these steps:

$ bundle exec kitchen converge i386```
# Now inside the kitchen vm, open a cmd/ps shell
$ C:\vagrant\load-omnibus-toolchain.ps1 # (or .bar if you're on cmd)
$ cd C:\vagrant\code\inspec\omnibus
$ bundle config set --local without development
$ bundle install
$ bundle exec omnibus build inspec -l debug

# If you get a 'can't sign this msi because I don't have a key to do so' error
# at the end of it, you have succeeded.  Look for you unsigned MSI in C:\omnibus-ruby\pkg