################################################################################
#
#      Author: Zachary Patten <zachary@jovelabs.com>
#   Copyright: Copyright (c) 2011-2012 Atalanta Systems Ltd
#     License: Apache License, Version 2.0
#
#   Licensed under the Apache License, Version 2.0 (the "License");
#   you may not use this file except in compliance with the License.
#   You may obtain a copy of the License at
#
#       http://www.apache.org/licenses/LICENSE-2.0
#
#   Unless required by applicable law or agreed to in writing, software
#   distributed under the License is distributed on an "AS IS" BASIS,
#   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
#   See the License for the specific language governing permissions and
#   limitations under the License.
#
################################################################################


%w( lxc bridge-utils debootstrap yum isc-dhcp-server bind9 ntpdate ntp ).each do |p|
  package p
end


################################################################################
# APPARMOR
################################################################################
service "apparmor"

bash "configure apparmor so dhcp3 can read /etc/bind" do
  code <<-EOH
cat <<EOF >> /etc/apparmor.d/local/usr.sbin.dhcpd
/etc/bind/ r,
/etc/bind/** r,
EOF
  EOH

  notifies :restart, "service[apparmor]"

  not_if do
    %x( cat /etc/apparmor.d/local/usr.sbin.dhcpd3 | grep "\/etc\/bind\/" )
    ($? == 0)
  end
end


################################################################################
# NETWORKING
################################################################################
service "networking"

execute "add local bind to dhclient" do
  command "sed -i \"s/#prepend domain-name-servers 127.0.0.1;/prepend domain-name-servers 127.0.0.1;\\nsupersede domain-name \\\"test-lab\\\";\\nsupersede domain-search \\\"test-lab\\\";/\" /etc/dhcp/dhclient.conf"

  notifies :restart, "service[networking]"

  only_if do
    %x( cat /etc/dhcp/dhclient.conf | grep "#prepend domain-name-servers 127.0.0.1;" )
    ($? == 0)
  end
end

bash "configure bridge interface" do
  code <<-EOH
cat <<EOF >> /etc/network/interfaces

# The bridge network interface
auto br0
iface br0 inet static
address 192.168.255.254
netmask 255.255.0.0
pre-up brctl addbr br0
post-down brctl delbr br0
EOF
  EOH

  notifies :restart, "service[networking]"

  not_if do
    %x( cat /etc/network/interfaces | grep "iface br0 inet static" )
    ($? == 0)
  end
end

execute "enable ipv4 packet forwarding" do
  command "sysctl -w net.ipv4.ip_forward=1"

  notifies :restart, "service[networking]"

  not_if do
    %x( sysctl net.ipv4.ip_forward | grep "net.ipv4.ip_forward = 1" )
    ($? == 0)
  end
end

execute "enable nat for outbound traffic" do
  command "iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE"

  notifies :restart, "service[networking]"

  not_if do
    %x( iptables -t nat --list | grep "MASQUERADE" )
    ($? == 0)
  end
end


################################################################################
# BIND9
################################################################################
service "bind9"

file "make mode on rndc.key o+r" do
  path "/etc/bind/rndc.key"
  mode 0644

  notifies :restart, "service[bind9]"

  not_if { ("%o" % File.stat("/etc/bind/rndc.key").mode) == "100644" }
end

template "setup our bind9 zone and controls configuration" do
  path "/etc/bind/named.conf.test-lab"
  source "named-conf-local.erb"
  owner "root"
  group "bind"
  mode "0644"

  notifies :restart, "service[bind9]"

  not_if { File.exists?("/etc/bind/named.conf.test-lab") }
end

bash "inject test-lab bind9 configuration" do
  code <<-EOH
cat <<EOF >> /etc/bind/named.conf
include "/etc/bind/named.conf.test-lab";
EOF
  EOH

  notifies :restart, "service[bind9]"

  not_if do
    %x( cat /etc/bind/named.conf | grep "\/etc\/bind\/named\.conf\.test-lab" )
    ($? == 0)
  end
end

template "create test-lab zone file" do
  path "/var/lib/bind/db.test-lab"
  source "db-test-lab.erb"
  owner "root"
  group "bind"
  mode "0644"

  notifies :restart, "service[bind9]"

  not_if { File.exists?("/var/lib/bind/db.test-lab") }
end

template "create 168.192 zone file" do
  path "/var/lib/bind/db.168.192"
  source "db-168-192.erb"
  owner "root"
  group "bind"
  mode "0644"

  notifies :restart, "service[bind9]"

  not_if { File.exists?("/var/lib/bind/db.168.192") }
end


################################################################################
# ISC-DHCP-SERVER
################################################################################
service "isc-dhcp-server"

file "touch our dhcp3 include file" do
  path "/etc/dhcp/test-lab.conf"
  action :touch

  notifies :restart, "service[isc-dhcp-server]"

  not_if { File.exists?("/etc/dhcp/test-lab.conf") }
end

template "configure isc-dhcp-server for test-lab" do
  path "/etc/dhcp/dhcpd.conf"
  source "dhcpd-conf.erb"
  owner "root"
  group "root"
  mode "0644"

  notifies :restart, "service[isc-dhcp-server]"

  not_if do
    %x( cat /etc/dhcp/dhcpd.conf | grep "\/etc\/dhcp\/test-lab\.conf" )
    ($? == 0)
  end
end

execute "configure isc-dhcp-server listener interface" do
  command "sed -i \"s/INTERFACES=\\\"\\\"/INTERFACES=\\\"br0\\\"/\" /etc/default/isc-dhcp-server"

  notifies :restart, "service[isc-dhcp-server]"

  not_if do
    %x( cat /etc/default/isc-dhcp-server | grep "INTERFACES=\\\"br0\\\"" )
    ($? == 0)
  end
end


################################################################################
# LXC
################################################################################
service "lxc-net"
service "lxc"

#directory "create cgroup mount point" do
#  path "/cgroup"
#
#  not_if { File.exists?("/cgroup") && File.directory?("/cgroup") }
#end

#mount "mount cgroup device" do
#  mount_point "/cgroup"
#  device "cgroup"
#  fstype "cgroup"
#  pass 0
#  action [:mount, :enable]

#  not_if do
#    %x( mount | grep "cgroup" )
#    ($? == 0)
#  end
#end

execute "set LXC_AUTO to false" do
  command "sed -i \"s/LXC_AUTO=\\\"true\\\"/LXC_AUTO=\\\"false\\\"/\" /etc/default/lxc"

  notifies :stop, "service[lxc-net]"

  only_if do
    %x( cat /etc/default/lxc | grep "LXC_AUTO=\\\"true\\\"" )
    ($? == 0)
  end
end

execute "set USE_LXC_BRIDGE to false" do
  command "sed -i \"s/USE_LXC_BRIDGE=\\\"true\\\"/USE_LXC_BRIDGE=\\\"false\\\"/\" /etc/default/lxc"

  notifies :stop, "service[lxc-net]"

  only_if do
    %x( cat /etc/default/lxc | grep "USE_LXC_BRIDGE=\\\"true\\\"" )
    ($? == 0)
  end
end

directory "create lxc configuration directory" do
  path "/etc/lxc"

  not_if { File.exists?("/etc/lxc") && File.directory?("/etc/lxc") }
end

=begin
# load the chef client into our distro lxc cache
install_chef_sh = "/tmp/install-chef.sh"
distros = { "ubuntu" => [ "lucid", "maverick", "natty", "oneiric", "precise" ] }
arch = (%x( arch ).include?("i686") ? "i386" : "amd64")

template "create lxc initializer container configuration" do
  path "/etc/lxc/initializer"
  source "lxc-initializer-config.erb"

  not_if { File.exists?("/etc/lxc/initializer") }
end

distros.each do |distro, releases|
  releases.each do |release|
    cache_rootfs = File.join("/", "var", "cache", "lxc", release, "rootfs-#{arch}")
    initializer_rootfs = File.join("/", "var", "lib", "lxc", "initializer", "rootfs")

    execute "create the lxc initializer container for #{distro}/#{release}" do
      command "lxc-create -n initializer -f /etc/lxc/initializer -t #{distro} -- -r #{release}"

      not_if { File.exists?(cache_rootfs) && File.directory?(cache_rootfs) }
    end

    execute "destroy the lxc initializer container for #{distro}/#{release}" do
      command "lxc-destroy -n initializer"

      only_if { File.exists?(initializer_rootfs) && File.directory?(initializer_rootfs) }
    end

    template "create opscode omnibus installer in lxc container cache for #{distro}/#{release}" do
      path "#{cache_rootfs}#{install_chef_sh}"
      source "lxc-install-chef.erb"
      mode "0755"

      not_if { File.exists?(File.join(cache_rootfs, install_chef_sh)) }
    end

    execute "install chef-client using omnibus in lxc container cache for #{distro}/#{release}" do
      command "chroot #{cache_rootfs} /bin/bash -c '#{install_chef_sh}'"

      not_if { File.exists?(File.join(cache_rootfs, "opt", "opscode", "bin", "chef-client")) }
    end
  end
end
=end