$home = "/home/centos"
$user = "centos"
# ChefClientがEC2内でsudoを使えるようする。
if $user == "centos" || $user == "ec2-user"
file "/etc/sudoers" do
_file = Chef::Util::FileEdit.new(path)
_file.search_file_replace(/^Defaults *requiretty/, "#Defaults requiretty\n")
_file.search_file_replace(/^Defaults *!visiblepw/, "Defaults visiblepw\n")
content _file.send(:editor).lines.join
end
end
#selinuxの無効化
reboot 'now' do
action :nothing
reason 'Cannot continue Chef run without a reboot.'
end
file "/etc/selinux/config" do
_file = Chef::Util::FileEdit.new(path)
_file.search_file_replace(/SELINUX=enforcing/, "#SELINUX=enforcing\nSELINUX=Disabled")
content _file.send(:editor).lines.join
not_if "grep '#SELINUX=enforcing' /etc/selinux/config"
#notifies :request_reboot, 'reboot[now]', :immediately
end
bash "change selinux to permissive mode" do
code "sudo setenforce 0"
not_if "sudo getenforce | grep -e 'Permissive' -e 'Disabled'"
end
# ec2-userの作成
user "ec2-user" do
home "/home/ec2-user"
username "ec2-user"
end
bash "ssh conf new" do
code <<-EOH
sudo mkdir /home/ec2-user
sudo mkdir /home/ec2-user/.ssh
sudo cp #{$home}/.ssh/* /home/ec2-user/.ssh/
sudo cp #{$home}/.bashrc /home/ec2-user/.bashrc
sudo cp #{$home}/.bash_profile /home/ec2-user/.bash_profile
sudo chown -R ec2-user:ec2-user /home/ec2-user
EOH
not_if { File.exists?("/home/ec2-user/.ssh")}
end
group "wheel" do
action [:modify]
members ["ec2-user"]
append true
end
execute "/etc/sudoers edit" do
command "echo '%wheel ALL=(ALL) NOPASSWD: ALL\n' | sudo tee -a /etc/sudoers"
not_if "sudo grep '%wheel ALL=(ALL) NOPASSWD: ALL' /etc/sudoers"
end
#sshd の認証設定変更
bash "edit sshd" do
code <<-EOH
echo -e '\nPermitRootLogin no\nPubkeyAuthentication yes\nPasswordAuthentication no\n' | sudo tee -a /etc/ssh/sshd_config
sudo systemctl restart sshd
EOH
not_if "grep '^PermitRootLogin no' /etc/ssh/sshd_config"
#notifies :reboot_now, 'reboot[now]', :immediately
end
# 基本的なパッケージのインストール。ほかに欲しいものがあったらここに追加してね
%w{ git screen htop vim }.each do |p|
package p do
action :install
end
end
# install rbenv
%w{ bzip2 }.each do |p|
package p do
action :install
end
end
include_recipe "rbenv::default"
#rubyのインストール
ruby_v = "2.2.3" # <= インストールしたいバージョンがあればここを変更してね
include_recipe "rbenv::ruby_build"
rbenv_ruby ruby_v do
global true
end
rbenv_gem "bundler" do
ruby_version ruby_v
end
bash "settings ruby -v ruby_v" do
code <<-EOH
echo 'export PATH="/opt/rbenv/bin:$PATH"' | sudo tee -a #{$home}/.bash_profile
echo 'eval "$(rbenv init -)"' | sudo tee -a #{$home}/.bash_profile
source #{$home}/.bash_profile
rbenv rehash
rbenv global #{ruby_v}
EOH
not_if "grep 'rbenv init' #{$home}/.bash_profile || [ -e '/etc/profile.d/rbenv.sh' ]"
end
