apache_conf resource seems to be using incorrect paths to amalgamate apache config (only Centos/RHEL?)

[davidcpell]

Description

The Compliance tests I'm writing make heavy use of the apache_conf resource to validate httpd configuration. As I understand it, the resource builds a hash accessible via apache_conf.params by gathering all .conf and .load files in the files in apache/httpd config directory and combining them.

The problem is that the resource seems to be using incorrect paths and is therefore failing to find anything but my standard /etc/httpd/conf/httpd.conf file.

Here is an example of a simple test:

control 'WA000-WWA022' do
  impact 0.2 # review
  title 'The KeepAlive directive must be enabled.' 

  describe apache_conf do 
    its('KeepAlive') { should cmp 'On' }
  end
end

When I run $ chef exec kitchen verify, I can see this output in stdout:

find_files(): exit 1 from `find /etc/httpd/conf/etc/httpd/mods-enabled/*.load -maxdepth 1 -type f`
find_files(): exit 1 from `find /etc/httpd/conf/etc/httpd/mods-enabled/*.conf -maxdepth 1 -type f`
find_files(): exit 1 from `find /etc/httpd/conf/etc/httpd/ports.conf -maxdepth 1 -type f`
find_files(): exit 1 from `find /etc/httpd/conf/etc/httpd/conf-enabled/*.conf -maxdepth 1 -type f`
find_files(): exit 1 from `find /etc/httpd/conf/etc/httpd/sites-enabled/*.conf -maxdepth 1 -type f`
find_files(): exit 1 from `find /etc/httpd/conf/etc/httpd/mods-enabled/*.load -maxdepth 1 -type f`
find_files(): exit 1 from `find /etc/httpd/conf/etc/httpd/mods-enabled/*.conf -maxdepth 1 -type f`
find_files(): exit 1 from `find /etc/httpd/conf/etc/httpd/ports.conf -maxdepth 1 -type f`
find_files(): exit 1 from `find /etc/httpd/conf/etc/httpd/conf-enabled/*.conf -maxdepth 1 -type f`
find_files(): exit 1 from `find /etc/httpd/conf/etc/httpd/sites-enabled/*.conf -maxdepth 1 -type f`
find_files(): exit 1 from `find /etc/httpd/conf/etc/httpd/mods-enabled/*.load -maxdepth 1 -type f`
find_files(): exit 1 from `find /etc/httpd/conf/etc/httpd/mods-enabled/*.conf -maxdepth 1 -type f`
find_files(): exit 1 from `find /etc/httpd/conf/etc/httpd/ports.conf -maxdepth 1 -type f`
find_files(): exit 1 from `find /etc/httpd/conf/etc/httpd/conf-enabled/*.conf -maxdepth 1 -type f`
find_files(): exit 1 from `find /etc/httpd/conf/etc/httpd/sites-enabled/*.conf -maxdepth 1 -type f`
find_files(): exit 1 from `find /etc/httpd/conf/etc/httpd/mods-enabled/*.load -maxdepth 1 -type f`
find_files(): exit 1 from `find /etc/httpd/conf/etc/httpd/mods-enabled/*.conf -maxdepth 1 -type f`
find_files(): exit 1 from `find /etc/httpd/conf/etc/httpd/ports.conf -maxdepth 1 -type f`
find_files(): exit 1 from `find /etc/httpd/conf/etc/httpd/conf-enabled/*.conf -maxdepth 1 -type f`
find_files(): exit 1 from `find /etc/httpd/conf/etc/httpd/sites-enabled/*.conf -maxdepth 1 -type f`

As you can see, it's failing to find any files, and the find path looks odd: /etc/httpd/conf/etc/httpd/sites-enabled. The standard path to sites-enabled is /etc/httpd/sites-enabled, same with mods-enabled etc.

Perplexed, I generated a new dummy cookbook to start from scratch and use Centos 7.2 for good measure. All I changed was installing Apache via package 'httpd' in the default recipe, which will grab version 2.4 for Centos 7. Added a similar test using apache_conf and got the following output:

find_files(): exit 1 from `find /etc/httpd/conf/conf.modules.d/*.conf -maxdepth 1 -type f`
find_files(): exit 1 from `find /etc/httpd/conf/conf.d/*.conf -maxdepth 1 -type f`

Something seems off, as my default conf.d and conf.modules.d are in /etc/httpd, not /etc/httpd/conf.

Still curious, I added Ubuntu 14.04 to the platforms in my dummy cookbook's kitchen config, installed apache2 and didn't get any failure outputs when running the test.

InSpec and Platform Version

Tested on:
Windows 7 Enterprise, SP1
ChefDK 0.17.17
kitchen 1.11.1
apache 2.2 installed with community/supermarket apache2 cookbook
Virtual Box + Centos 6.7 for running tests

Replication Case

1. $ chef generate cookbook test
2. Add package 'httpd' to default recipe
3. Use centos-6.7 and/or centos-7.2 as platforms in kitchen.yml
4. Add a test to test/recipes/default_test.rb that uses apache_conf
5. $ kitchen verify

Stacktrace

See stdout content pasted above.

[davidcpell]

@chris-rock @jeremymv2 I just upgraded to 0.33.0 but am still having this issue with the apache_conf resource:

$ chef exec gem list inspec
inspec (0.33.0)

$ chef exec inspec version
0.33.0

$ chef exec kitchen verify apache-centos-67
-----> Starting Kitchen (v1.11.1)
-----> Verifying <apache-centos-67>...
       Use `C:/Users/c5249136/code/chef/cookbooks/stig/test/recipes/apache` for testing
find_files(): exit 1 from `find /etc/httpd/etc/httpd/mods-enabled/*.load -maxdepth 1 -type f`
find_files(): exit 1 from `find /etc/httpd/etc/httpd/mods-enabled/*.conf -maxdepth 1 -type f`
find_files(): exit 1 from `find /etc/httpd/etc/httpd/ports.conf -maxdepth 1 -type f`
find_files(): exit 1 from `find /etc/httpd/etc/httpd/conf-enabled/*.conf -maxdepth 1 -type f`
find_files(): exit 1 from `find /etc/httpd/etc/httpd/sites-enabled/*.conf -maxdepth 1 -type f`
find_files(): exit 1 from `find /etc/httpd/etc/httpd/mods-enabled/*.load -maxdepth 1 -type f`
find_files(): exit 1 from `find /etc/httpd/etc/httpd/mods-enabled/*.conf -maxdepth 1 -type f`
find_files(): exit 1 from `find /etc/httpd/etc/httpd/ports.conf -maxdepth 1 -type f`
find_files(): exit 1 from `find /etc/httpd/etc/httpd/conf-enabled/*.conf -maxdepth 1 -type f`
find_files(): exit 1 from `find /etc/httpd/etc/httpd/sites-enabled/*.conf -maxdepth 1 -type f`
find_files(): exit 1 from `find /etc/httpd/etc/httpd/mods-enabled/*.load -maxdepth 1 -type f`
find_files(): exit 1 from `find /etc/httpd/etc/httpd/mods-enabled/*.conf -maxdepth 1 -type f`
find_files(): exit 1 from `find /etc/httpd/etc/httpd/ports.conf -maxdepth 1 -type f`
find_files(): exit 1 from `find /etc/httpd/etc/httpd/conf-enabled/*.conf -maxdepth 1 -type f`
find_files(): exit 1 from `find /etc/httpd/etc/httpd/sites-enabled/*.conf -maxdepth 1 -type f`
find_files(): exit 1 from `find /etc/httpd/etc/httpd/mods-enabled/*.load -maxdepth 1 -type f`
find_files(): exit 1 from `find /etc/httpd/etc/httpd/mods-enabled/*.conf -maxdepth 1 -type f`
find_files(): exit 1 from `find /etc/httpd/etc/httpd/ports.conf -maxdepth 1 -type f`
find_files(): exit 1 from `find /etc/httpd/etc/httpd/conf-enabled/*.conf -maxdepth 1 -type f`
find_files(): exit 1 from `find /etc/httpd/etc/httpd/sites-enabled/*.conf -maxdepth 1 -type f`

This was after uninstalling 0.29.0 with the following command:

$ chef exec gem uninstall -i C:/opscode/chefdk/embedded/lib/ruby/gems/2.1.0 inspec --version 0.29.0

It looks like the conf part of the lookup path is gone but /etc/httpd is still doubled.

[monoranjang]

Is this issue resolved

[davidcpell]

Yes, a PR was merged to address it on Sep 9, 2016.