cookbook for update glibc. CVE-2015-0235(GHOST)
update glibc by Chef Solo.
-
Attention. this cookbook need to reboot.
-
Platform is Ubuntu and CentOS.
- cookbook 'build-essential'
- cookbook 'apt'
- cookbook 'yum-epal'
- Ruby 2.1.5 or later
- gem install bundler
- bundle install
bundle install
- set node
{
"run_list": [
"recipe[security_check_glibc]", # set exploit code and compile
"recipe[security_update_glibc]" # node reboot after glibc update
]
}
- set test(default webapp)
$ mv spec/webapp spec/YourServer
- test
$ rake spec LOGIN_USER=loginuser PASS=userpassword
- provision server
$ bundle exec knife solo bootstrap YourServer
-
install virtualbox
-
install vagrant
-
bootstrapping
vagrant up
- add ssh config
vagrant ssh-config >> ~/.ssh/config
- chanage Host
$ vim ~/.ssh/config
- Host default
+ Host webapp
- test
$ rake spec LOGIN_USER=vagrant PASS=vagrant
- provision server
$ bundle exec knife solo bootstrap webapp
- This Vagrant has been correspondence is complete.(glibc-2.12-1.149.el6_6.5.x86_64)
- Fork the this repository on GitHub
- Create a named feature branch (like add_component_x)
- Write your change
- If at all possible, write serverspec tests for your change and ensure they all pass
- Submit a pull request using GitHub