Chef-magento - Installs and Configures a Magento project

Inviqa

Last update: Jun 30, 2020

Related tags

Miscellaneous chef-magento

Overview

Description

Requirements

Chef 0.10.0 or higher required (for Chef environment use).

Platform

Debian, Ubuntu
CentOS, Red Hat, Fedora

Your basebox must have the mysql gem installed.

Cookbooks

The following Opscode cookbooks are dependencies:

php
mysql
database
apache2
memcached

Attributes

node["xhprof"]["db"]["database"] = The name of the database used to store profiling data, defaults to xhprof.

Recipes

apache

Installs and Configures apache vhosts for your Magento project

config_local

Creates a local.xml configuration file that connects Magento to the correct database of caching server.

crontab

Creates and installs a crontab entry to configure the correct execution of Magento cron tasks

default

Runs the following recipes:

chef-magento::apache
chef-magento::php

Usage

License and Author

Author:: Alistair Stead ([email protected]) Author:: Rupert Jones ([email protected])

Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License. You may obtain a copy of the License at

http://www.apache.org/licenses/LICENSE-2.0

Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License.

Comments

Change Magento cronjob to run every minute

Magento EE Support have advised the Magento cronjob should run every minute: "Current versions of Magento are designed around the cron running every minute. If the cron is running less frequently you may see some undesirable behavior. We do not recommend that cron every five minutes."

opened by ramsaybell 4
Disable cron

Add an option to disable the magento cron job. Default behaviour is to create the cron job to preserve BC, but optionally a config flag can delete an existing cron job, which is useful for switching which server will run the cron in a multi-server environment.

opened by shanethehat 3
Feature/add geoip recipe

Add geoip recipe that adds the geoip cookie to the list of allowed cookies for varnish. Remove the geoip cookie from the list of default allowed cookies.

opened by mlopes 2
Make Magento usable on uncommon ports

The secure/unsecure port can be given for apache configuration, but Magento is initialized with just the hostname on the default ports. This pull request fixes this issue by using the standard library to generate URLs with the right ports while installing.

opened by MRudolph 2
amend varnish vcl_fetch not to process the response on non GET

If the request is made using post, the headers should be passed to the client. One common use case is the login functionality, where Magento will change the session cookie.

Another option would be to make POST requests to be piped instead of passed. While it would not require checking the fetched response, it would change the statistics and would also bypass the varnish timeout (error) handling mechanism.

opened by svalaskevicius 2
Bump rack from 2.0.4 to 2.0.8
Bumps rack from 2.0.4 to 2.0.8.

Changelog

Sourced from rack's changelog.

Changelog

All notable changes to this project will be documented in this file. For info on how to format all future additions to this file please reference Keep A Changelog.

Unreleased

Note: There are many unreleased changes in Rack (master is around 300 commits ahead of 2-0-stable), and below is not an exhaustive list. If you would like to help out and document some of the unreleased changes, PRs are welcome.

Added

Changed

Use Time#httpdate format for Expires, as proposed by RFC 7231. (@nanaya)

Make Utils.status_code raise an error when the status symbol is invalid instead of 500.

Rename Request::SCHEME_WHITELIST to Request::ALLOWED_SCHEMES.

Make Multipart::Parser.get_filename accept files with + in their name.

Add Falcon to the default handler fallbacks. (@ioquatix)

Update codebase to avoid string mutations in preparation for frozen_string_literals. (@pat)

Change MockRequest#env_for to rely on the input optionally responding to #size instead of #length. (@janko)

Rename Rack::File -> Rack::Files and add deprecation notice. (@postmodern).

Removed

Documentation

Update broken example in Session::Abstract::ID documentation. (tonytonyjan)

Add Padrino to the list of frameworks implmenting Rack. (@wikimatze)

Remove Mongrel from the suggested server options in the help output. (@tricknotes)

Replace HISTORY.md and NEWS.md with CHANGELOG.md. (@twitnithegirl)

Backfill CHANGELOG.md from 2.0.1 to 2.0.7 releases. (@drenmi)

[2.0.7] - 2019-04-02

Fixed

Remove calls to #eof? on Rack input in Multipart::Parser, as this breaks the specification. (@matthewd)

Preserve forwarded IP addresses for trusted proxy chains. (@SamSaffron)

[2.0.6] - 2018-11-05

Fixed

[CVE-2018-16470] Reduce buffer size of Multipart::Parser to avoid pathological parsing. (@tenderlove)

Fix a call to a non-existing method #accepts_html in the ShowExceptions middleware. (@tomelm)

[CVE-2018-16471] Whitelist HTTP and HTTPS schemes in Request#scheme to prevent a possible XSS attack. (@PatrickTulskie)

[2.0.5] - 2018-04-23

Fixed
... (truncated)

Commits

e7ee459 Bumping version

f1a79b2 Introduce a new base class to avoid breaking when upgrading

5b1cab6 Add a version prefix to the private id to make easier to migrate old values

1e96e0f Fallback to the public id when reading the session in the pool adapter

3ba123d Also drop the session with the public id when destroying sessions

6a04bbf Fallback to the legacy id when the new id is not found

dc45a06 Add the private id

73a5f79 revert conditionals to master

4e32262 remove NullSession

1c7e3b2 remove || raise and get closer to master

Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot ignore this [patch|minor|major] version will close this PR and stop Dependabot creating any more for this minor/major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot use these labels will set the current labels as the default for future PRs for this repo and language

@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language

@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language

@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

dependencies
opened by dependabot[bot] 1
Bump nokogiri from 1.8.2 to 1.10.4
Bumps nokogiri from 1.8.2 to 1.10.4.

Release notes

Sourced from nokogiri's releases.

1.10.4 / 2019-08-11

Security

Address CVE-2019-5477 (#1915)

A command injection vulnerability in Nokogiri v1.10.3 and earlier allows commands to be executed in a subprocess by Ruby's Kernel.open method. Processes are vulnerable only if the undocumented method Nokogiri::CSS::Tokenizer#load_file is being passed untrusted user input.

This vulnerability appears in code generated by the Rexical gem versions v1.0.6 and earlier. Rexical is used by Nokogiri to generate lexical scanner code for parsing CSS queries. The underlying vulnerability was addressed in Rexical v1.0.7 and Nokogiri upgraded to this version of Rexical in Nokogiri v1.10.4.

This CVE's public notice is #1915

1.10.3 / 2019-04-22

Security Notes

[MRI] Pulled in upstream patch from libxslt that addresses CVE-2019-11068. Full details are available in #1892. Note that this patch is not yet (as of 2019-04-22) in an upstream release of libxslt.

1.10.2 / 2019-03-24

Security

[MRI] Remove support from vendored libxml2 for future script macros. #1871

[MRI] Remove support from vendored libxml2 for server-side includes within attributes. #1877

Bug fixes

[JRuby] Fix node ownership in duplicated documents. #1060

[JRuby] Rethrow exceptions caught by Java SAX handler. [#1847, #1872] (Thanks, @adjam!)

1.10.1 / 2019-01-13

Features

[MRI] During installation, handle Xcode 10's new library pathOS. [#1801, #1851] (Thanks, @mlj and @deepj!)

Avoid unnecessary creation of Procs in many methods. #1776 (Thanks, @chopraanmol1!)

Bug fixes

CSS selector :has() now correctly matches against any descendant. Previously this selector matched against only direct children). #350 (Thanks, @Phrogz!)

NodeSet#attr now returns nil if it's empty. Previously this raised a NoMethodError.

[MRI] XPath errors are no longer suppressed during XSLT::Stylesheet#transform. Previously these errors were suppressed which led to silent failures and a subsequent segfault. #1802

... (truncated)

Changelog

Sourced from nokogiri's changelog.

1.10.4 / 2019-08-11

Security

Address CVE-2019-5477 (#1915)

A command injection vulnerability in Nokogiri v1.10.3 and earlier allows commands to be executed in a subprocess by Ruby's Kernel.open method. Processes are vulnerable only if the undocumented method Nokogiri::CSS::Tokenizer#load_file is being passed untrusted user input.

This vulnerability appears in code generated by the Rexical gem versions v1.0.6 and earlier. Rexical is used by Nokogiri to generate lexical scanner code for parsing CSS queries. The underlying vulnerability was addressed in Rexical v1.0.7 and Nokogiri upgraded to this version of Rexical in Nokogiri v1.10.4.

This CVE's public notice is #1915

1.10.3 / 2019-04-22

Security Notes

[MRI] Pulled in upstream patch from libxslt that addresses CVE-2019-11068. Full details are available in #1892. Note that this patch is not yet (as of 2019-04-22) in an upstream release of libxslt.

1.10.2 / 2019-03-24

Security

[MRI] Remove support from vendored libxml2 for future script macros. #1871

[MRI] Remove support from vendored libxml2 for server-side includes within attributes. #1877

Bug fixes

[JRuby] Fix node ownership in duplicated documents. #1060

[JRuby] Rethrow exceptions caught by Java SAX handler. [#1847, #1872] (Thanks, @adjam!)

1.10.1 / 2019-01-13

Features

[MRI] During installation, handle Xcode 10's new library path. [#1801, #1851] (Thanks, @mlj and @deepj!)

Avoid unnecessary creation of Procs in many methods. #1776 (Thanks, @chopraanmol1!)

Bug fixes

CSS selector :has() now correctly matches against any descendant. Previously this selector matched against only direct children). #350 (Thanks, @Phrogz!)

NodeSet#attr now returns nil if it's empty. Previously this raised a NoMethodError.

[MRI] XPath errors are no longer suppressed during XSLT::Stylesheet#transform. Previously these errors were suppressed which led to silent failures and a subsequent segfault. #1802

1.10.0 / 2019-01-04
... (truncated)

Commits

beb832e version bump to v1.10.4

5d30128 Merge branch '1915-css-tokenizer-load-file-vulnerability_v1.10.x' into v1.10.x

c86b5fc update CHANGELOG

5fe449f regenerate lexical scanner using rexical 1.0.7

6777008 eliminate eval from Builder#initialize

47a7bc7 rufo formatting

094ecb1 rubocop security scan is run as part of the test rake target

d068cd4 add rubocop as a dev dependency

45ee92b adding a temporary pipeline for v1.10.x

8e24af5 version bump to v1.10.3

Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot ignore this [patch|minor|major] version will close this PR and stop Dependabot creating any more for this minor/major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot use these labels will set the current labels as the default for future PRs for this repo and language

@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language

@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language

@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

dependencies
opened by dependabot[bot] 1
Change SSL protocol list to string

Having the protocol list as an array makes it more difficult to change in roles etc because Chef will try to merge arrays together. This results in changes to the protocol list being forced into the override attributes. Using a string instead of an array allows easier overrides within the default attribute space.

opened by shanethehat 1
Create default ssl.conf so that all vhosts are POODLE safe by default

In master of the apache2 cookbook, you can override the default SSLProtocols to make Apache by default PCI compliant. However, until that gets merged, we should have this handled by chef-magento

opened by shrikeh 1
Fix typo in default backend cache name.

Default backend cache is "file", but in local.xml it should be written with uppercase "F". It is fixing this typo.

Without this fix Magento 1.13.0.2 throws an error during every page open request and halts the execution. It also writes warnings in the system.log: Warning: include(File.php): failed to open stream: No such file or directory in /mnt/project/public/lib/Varien/Autoload.php on line 93 Warning: include(): Failed opening 'File.php' for inclusion (include_path='/mnt/project/public/app/code/local:/mnt/project/public/app/code/community:/mnt/project/public/app/code/core:/mnt/project/public/lib:.:/usr/share/pear:/usr/share/php') in /mnt/project/public/lib/Varien/Autoload.php on line 93

opened by elvetemedve 1
Override template from original chef-varnish recipe rather than replacing it

Instead of having the chef-magento:varnish recipe copying a template to the host, override the chef-varnish template . This will allow --why-run to report the correct set of changes on the vcl since it won't be replaced by the default one on every run.

This pull request replaces the previous one that contained code not related with this specific feature.

opened by mlopes 1
Recipe depends on magento having been deployed

The config_local.rb recipe depends on the magento installation having been deployed to the server already. That's not necessarily always going to be true when first building the server. Deployment depends on git having been installed, so chef is logically the first thing that's run on a new environment.

opened by blongden 0
Duplicate Allow, Order directives

The second Directory directive (pointing to magento public directory) in the apache vhost template contains duplicate Allow and Order directives:

https://github.com/inviqa/chef-magento/blob/master/templates/default/apache-vhost.conf.erb#L46 https://github.com/inviqa/chef-magento/blob/master/templates/default/apache-vhost.conf.erb#L255

opened by nnevala 0

Releases(1.2.0)

1.2.0(Sep 7, 2015)
IMPROVEMENTS:

Magento cron changed to default to running every minute based on Magento Inc's advisement

Source code(tar.gz)
Source code(zip)
1.1.0(Jul 8, 2015)

Adds option to disable the Magento cron Foodcritic fixes
Source code(tar.gz)
Source code(zip)