Adoptable Cookbooks List

Looking for a cookbook to adopt? You can now see a list of cookbooks available for adoption!
List of Adoptable Cookbooks

Supermarket Belongs to the Community

Supermarket belongs to the community. While Chef has the responsibility to keep it running and be stewards of its functionality, what it does and how it works is driven by the community. The chef/supermarket repository will continue to be where development of the Supermarket application takes place. Come be part of shaping the direction of Supermarket by opening issues and pull requests or by joining us on the Chef Mailing List.

Select Badges

Select Supported Platforms

Select Status

RSS

autopatch_ii (16) Versions 1.0.0

Installs/Configures autopatch_ii

Policyfile
Berkshelf
Knife
cookbook 'autopatch_ii', '= 1.0.0', :supermarket
cookbook 'autopatch_ii', '= 1.0.0'
knife supermarket install autopatch_ii
knife supermarket download autopatch_ii
README
Dependencies
Changelog
Quality 71%

autopatch_ii

Description

Chef Cookbook for automatically patching nodes on a specific schedule (weekday,
hour, and minute). Handles weekly or monthly patching routines with or without
node splay for large environments. Can automatically prepare node for true patch
window by cleaning and pre-downloading packages, which speeds up patch process
and can help guarantee meeting patching timeframes.

If you're looking for daily upgrades on Ubuntu, check out the
unattended-upgrades package
and a corresponding cookbook.
(/ht @hectcastro for this information).

Requirements

Platforms

  • RedHat 6.3 (Santiago)
  • Ubuntu 12.04 (Precise)

Cookbooks

  • cron

Attributes

  • node["autopatch_ii"]["disable"] - defaults to false
  • node["autopatch_ii"]["hour"] - defaults to 3
  • node["autopatch_ii"]["minute"] - defaults to 0
  • node["autopatch_ii"]["monthly"] - auto patching occurs once a month on the corresponding textual week number ("first","second",etc) and weekday ("monday","tuesday",etc), overridden by node["autopatch_ii"]["weekly"], defaults to "first sunday"
  • node["autopatch_ii"]["reboot"] - reboot automatically after patching, defaults to true
  • node["autopatch_ii"]["splay"] - seconds of random delay before beginning, defaults to 0
  • node["autopatch_ii"]["weekly"] - auto patching occurs once a week on the corresponding textual weekday ("monday","tuesday",etc), overrides node["autopatch_ii"]["monthly"], defaults to nil

Patch Preparation

  • node["autopatch_ii"]["prep"]["clean"] - cleans updater cache files, defaults to true
  • node["autopatch_ii"]["prep"]["disable"] - defaults to true
  • node["autopatch_ii"]["prep"]["hour"] - defaults to 2
  • node["autopatch_ii"]["prep"]["minute"] - defaults to 0
  • node["autopatch_ii"]["prep"]["monthly"] - auto patching prep occurs once a month on the corresponding textual week number ("first","second",etc) and weekday ("monday","tuesday",etc), overridden by node["autopatch_ii"]["prep"]["weekly"], defaults to "first sunday"
  • node["autopatch_ii"]["prep"]["splay"] - seconds of random delay before beginning, defaults to 1800
  • node["autopatch_ii"]["prep"]["weekly"] - auto patching prep occurs once a week on the corresponding textual weekday ("monday","tuesday",etc), overrides node["autopatch_ii"]["prep"]["monthly"], defaults to nil
  • node["autopatch_ii"]["prep"]["update_updater"] - updates apt or yum before actual patching occurs, defaults to true

Recipes

  • recipe[autopatch_ii] configures automatic patching

Usage

  • Change any attributes to fit your patching cycle
  • If using auto patch preparation, ensure it starts before auto patch (remember any splay!)
  • Add recipe[autopatch_ii] to your node's run list

Weekly automatic patching

Just use the node["autopatch_ii"]["weekly"] attribute to override the monthly
setting. Don't forget to add appropriate node["autopatch_ii"]["prep"]["weekly"]
if you're using automatic patch preparation.

Automatic patching of large numbers of nodes

If you're auto patching many nodes at once, you have two attributes you can
optionally add to prevent denial of service against your network, update
server(s), and resources:
* Adding node["autopatch_ii"]["splay"]
* Setting node["autopatch_ii"]["prep"]["disable"] to false (along with setting
associated prep attributes to meet your patch cycle)

Using roles to specify auto patching groups

If you'd like to specify groups of nodes for auto patching, you can setup roles.

Say you want to auto patch some nodes at 8am and some at 10pm on your monthly
"patch day" of the fourth Wednesday every month.

If you have a base role (you do, right?), you can save duplicating attributes
and specify some base information first:

"autopatch_ii" => {
  "monthly" => "fourth wednesday",
  "prep" => {
    "disable" => false,
    "hour" => 7,
    "monthly" => "fourth wednesday"
  }
}

Example role that then could be added to 8am nodes:

name "autopatch-0800"
description "Role for automatically patching nodes at 8am on patch day."
default_attributes(
  "autopatch_ii" => {
    "hour" => 8
  }
)
run_list(
  "recipe[autopatch_ii]"
)

Example role that then could be added to 10pm nodes:

name "autopatch-2200"
description "Role for automatically patching nodes at 10pm on patch day."
default_attributes(
  "autopatch_ii" => {
    "hour" => 22
  }
)
run_list(
  "recipe[autopatch_ii]"
)

Disabling automatic patching

  • Specify node["autopatch_ii"]["disable"] to true
  • If necessary, specify node["autopatch_ii"]["prep"]["disable"] to true
  • Run chef-client on your node

Testing and Development

Here's how you can quickly get testing or developing against the cookbook thanks to Vagrant and Berkshelf.

vagrant plugin install vagrant-berkshelf
vagrant plugin install vagrant-cachier
vagrant plugin install vagrant-omnibus
git clone git://github.com/bflad/chef-autopatch_ii.git
cd chef-autopatch_ii
vagrant up BOX # BOX being centos5, centos6, debian7, fedora18, fedora19, fedora20, freebsd9, ubuntu1204, ubuntu1210, ubuntu1304, or ubuntu1310

You can then SSH into the running VM using the vagrant ssh BOX # BOX being centos6 or ubuntu1204 command.
The VM can easily be stopped and deleted with the vagrant destroy
command. Please see the official Vagrant documentation
for a more in depth explanation of available commands.

Contributing

Please use standard Github issues/pull requests.

License and Author

Author:: Brian Flad (bflad417@gmail.com)

Copyright:: 2012-2013

Licensed under the Apache License, Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at

http://www.apache.org/licenses/LICENSE-2.0

Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.

Dependent cookbooks

cron >= 0.0.0
logrotate >= 0.0.0

Contingent cookbooks

There are no cookbooks that are contingent upon this one.

CHANGELOG for timezone_ii

2.0.0 (4/19/2017)

  • [Corey Hemminger] - changed hash rockets to new hash style

1.0.1 (4/18/2017)

  • [Corey Hemminger] - fixed windows idempotency

1.0.0 (4/18/2017)

  • [Corey Hemminger] - Initial commit

Collaborator Number Metric
            

1.0.0 failed this metric

Failure: Cookbook has 0 collaborators. A cookbook must have at least 2 collaborators to pass this metric.

Contributing File Metric
            

1.0.0 passed this metric

Foodcritic Metric
            

1.0.0 passed this metric

License Metric
            

1.0.0 passed this metric

No Binaries Metric
            

1.0.0 passed this metric

Testing File Metric
            

1.0.0 passed this metric

Version Tag Metric
            

1.0.0 failed this metric

Failure: To pass this metric, your cookbook metadata must include a source url, the source url must be in the form of https://github.com/user/repo, and your repo must include a tag that matches this cookbook version number