Habitat Cookbook

Description

This cookbook provides resources for working with Habitat. It is intended that these resources will be included in core Chef at some point in the future, so it is important to note:

APIs are subject to change
Habitat is a rapidly changing product, and this cookbook may change rapidly as well

TODOS

Remove reliance on toml-rb gem.

License Note

Habitat requires acceptance of a license before any habitat commands can be run. To accept the Habitat license using this cookbook, the license parameter can be set to accept for either the hab_install or hab_sup resources as shown in the below examples:

hab_install 'install habitat' do
  license 'accept'
end

hab_sup 'default' do
  license 'accept'
end

PLEASE NOTE: Without performing one of the above license acceptance steps, all other resources in the habitat cookbook will fail with an error prompting that the license must be accepted.

Requirements

Platforms

RHEL 6+
Ubuntu 16.04+
Debian 9+
Windows 2016+

Habitat

Habitat version: 1.5.86

This cookbook is developed lockstep with the latest release of Habitat to ensure compatibility, going forward from 0.33.0 of the cookbook and 0.33.2 of Habitat itself. When new versions of Habitat are released, the version should be updated in these files:

README.md: note required version in this file
resources/install.rb: set the default to the new version
test/integration/install/default_spec.rb: to match the version from the resource

Additionally, new versions must be tested that all behavior in the cookbook still works, otherwise the cookbook must be updated to match the behavior in the new version of Habitat.

Users who wish to install a specific version of Habitat should use an older (0.28 or earlier) release of this cookbook, but note that is unsupported and they are advised to upgrade ASAP.

Chef

Chef 12.20.3+

Cookbooks

None

Resources

hab_install

Installs Habitat on the system using the install script.

Actions

install: Installs Habitat. Does nothing if the hab binary is found in the default location for the system (/bin/hab on Linux, /usr/local/bin/hab on macOS, C:/habitat/hab.exe on Windows)
upgrade: Installs the latest version of Habitat, does not check if the binary exists

Properties

install_url: URL to the install script, default is from the habitat repo
bldr_url: Optional URL to an alternate Builder (defaults to the public Builder)
create_user: Creates the hab system user (defaults to true)
tmp_dir: Sets TMPDIR environment variable for location to place temp files. (required if /tmp and /var/tmp are mounted noexec)
license: Specifies acceptance of habitat license when set to accept (defaults to empty string).
hab_version: Specify the version of Habitat you would like to install (defaults to latest)

Examples

# Nameless Installation
hab_install

# Instalaltion specifying a bldr URL
hab_install 'install habitat' do
  bldr_url 'http://localhost'
end

# Installtation specifying version and bldr URL
hab_install 'install habitat' do
  bldr_url 'http://localhost'
  hab_version '1.5.50'
end

hab_package

Install the specified Habitat package from builder. Requires that Habitat is installed

actions

install: installs the specified package
upgrade: installs the specified package. If a newer version is available in the configured channel, upgrades to that version
remove: Will remove packages no longer wanted.

Properties

package_name: A Habitat package name, must include the origin and package name separated by /, for example, core/redis
version: A Habitat version which contains the version and optionally a release separated by /, for example, 3.2.3 or 3.2.3/20160920131015
bldr_url: The habitat builder url where packages will be downloaded from (defaults to public habitat builder)
channel: The release channel to install from (defaults to stable)
auth_token: Auth token for installing a package from a private organization on builder
binlink: If habitat should attempt to binlink the package. Acceptable values: true, false, :force. Will faill on binlinking if set to true and binary or binlink exists.
options: Pass any additional parameters to the habitat install command.
keep_latest: Ability to uninstall while retaining a specified version (Default is not set. This feature only works in Habitat 1.5.86+)
no_deps: Remove package but retain dependencies (Default is false)

While it is valid to pass the version and release with a Habitat package as a fully qualified package identifier when using the hab CLI, they must be specified using the version property when using this resource. See the examples below.

Examples

hab_package 'core/redis'

hab_package 'core/redis' do
  version '3.2.3'
  channel 'unstable'
end

hab_package 'core/redis' do
  version '3.2.3/20160920131015'
end

hab_package 'core/nginx' do
  binlink :force
end

hab_package 'core/nginx' do
  options '--binlink'
end

# Remove all
hab_package 'core/nginx'
  action :remove
end

# Remove specified
hab_package 'core/nginx/3.2.3'
  action :remove
end

# Remove but retain some versions (only available as of Habitat 1.5.86)
hab_package 'core/nginx'
  keep_latest '2'
  action :remove
end

# Renove but keep dependencies
hab_package 'core/nginx'
  no_deps false
  action :remove
end

hab_service

Manages a Habitat application service using hab sup/hab service. This requires that core/hab-sup be running as a service. See the hab_sup resource documentation below for more information about how to set that up with this cookbook.

Note: Applications may run as a specific user. Often with Habitat, the default is hab, or root. If the application requires another user, then it should be created with Chef's user resource.

Actions

:load: (default action) runs hab service load to load and start the specified application service
:unload: runs hab service unload to unload and stop the specified application service
:reload: runs the :unload and then :load actions
:start: runs hab service start to start the specified application service
:stop: runs hab service stop to stop the specified application service
:restart: runs the :stop and then :start actions

Properties

The remote_sup property is valid for all actions.

remote_sup: Address to a remote Supervisor's Control Gateway [default: 127.0.0.1:9632]
remote_sup_http: Address for remote supervisor http port. Used to pull existing configuration data. If this is invalid, config will be applied on every Chef run.
gateway_auth_token: Auth token for accessing the remote supervisor's http port.

The follow properties are valid for the load action.

service_name: name property, the name of the service, must be in the form of origin/name
loaded: state property indicating whether the service is loaded in the supervisor
running: state property indicating whether the service is running in the supervisor
strategy: Passes --strategy with the specified update strategy to the hab command. Defaults to :none. Other options are :'at-once' and :rolling
update_condition: Passes --update-condition dictating when this service should updated. Defaults to latest. Options are latest or track-channel Note: This requires a minimum habitat version of 1.5.71
- latest: Runs the latest package that can be found in the configured channel and local packages.
- track-channel: Always run what is at the head of a given channel. This enables service rollback where demoting a package from a channel will cause the package to rollback to an older version of the package. A ramification of enabling this condition is packages newer than the package at the head of the channel will be automatically uninstalled during a service rollback.
topology: Passes --topology with the specified service topology to the hab command
bldr_url: Passes --url with the specified Builder URL to the hab command.
channel: Passes --channel with the specified channel to the hab command
bind: Passes --bind with the specified services to bind to the hab command. If an array of multiple service binds are specified then a --bind flag is added for each.
binding_mode: Passes --binding-mode with the specified binding mode. Defaults to :strict. Options are :strict or :relaxed
service_group: Passes --group with the specified service group to the hab command

Examples

# install and load nginx
hab_package 'core/nginx'
hab_service 'core/nginx'

hab_service 'core/nginx unload' do
  service_name 'core/nginx'
  action :unload
end

# pass the strategy and topology options to hab service commands (load by default)
hab_service 'core/redis' do
  strategy 'rolling'
  topology 'standalone'
end

# Using update_condition
hab_service 'core/redis' do
  strategy 'rolling'
  update_condition 'track-channel'
  topology 'standalone'
end

If the service has it's own user specified that is not the hab user, don't create the hab user on install, and instead create the application user with Chef's user resource

hab_install 'install habitat' do
  create_user false
end

user 'acme-apps' do
  system true
end

hab_service 'acme/apps'

hab_sup

Runs a Habitat Supervisor for one or more Habitat Services. It is used in conjunction with hab_service which will manage the services loaded and started within the supervisor.

The run action handles installing Habitat using the hab_install resource, ensures that the appropriate versions of the core/hab-sup and core/hab-launcher packages are installed using hab_package, and then drops off the appropriate init system definitions and manages the service.

All event_stream_* properties are optional, and allow the Habitat Supervisor to display details about it's status and running services via the Chef Automate Applications Dashboard. Note: Automate has TLS on by default. You will need to follow these instructions to make sure habitat has the proper certificates for event_stram_* Share the TLS Certificate with Chef Habitat

Actions

run: starts the hab-sup service

Properties

bldr_url: The Builder URL for the hab_package resource, if needed
permanent_peer: Only valid for :run action, passes --permanent-peer to the hab command
listen_ctl: Only valid for :run action, passes --listen-ctl with the specified address and port, e.g., 0.0.0.0:9632, to the hab command
listen_gossip: Only valid for :run action, passes --listen-gossip with the specified address and port, e.g., 0.0.0.0:9638, to the hab command
listen_http: Only valid for :run action, passes --listen-http with the specified address and port, e.g., 0.0.0.0:9631, to the hab command
org: Only valid for :run action, passes --org with the specified org name to the hab command
peer: Only valid for :run action, passes --peer with the specified initial peer to the hab command
ring: Only valid for :run action, passes --ring with the specified ring key name to the hab command
auto_update: Passes --auto-update. This will set the Habitat supervisor to automatically update itself any time a stable version has been released
update_condition: Passes --update-condition dictating when this service should updated. Defaults to latest. Options are latest or track-channel Note: This requires a minimum habitat version of 1.5.71
- latest: Runs the latest package that can be found in the configured channel and local packages.
- track-channel: Always run what is at the head of a given channel. This enables service rollback where demoting a package from a channel will cause the package to rollback to an older version of the package. A ramification of enabling this condition is packages newer than the package at the head of the channel will be automatically uninstalled during a service rollback.
hab_channel: The channel to install Habitat from. Defaults to stable
auth_token: Auth token for accessing a private organization on bldr. This value is templated into the appropriate service file.
gateway_auth_token: Auth token for accessing the supervisor's HTTP gateway. This value is templated into the appropriate service file.
license: Specifies acceptance of habitat license when set to accept (defaults to empty string).
health_check_interval: The interval (seconds) on which to run health checks (defaults to 30).
event_stream_application: The name of your application that will be displayed in the Chef Automate Applications Dashboard
event_stream_environment: The application environment for the supervisor, this is for grouping in the Applications Dashboard
event_stream_site: Application Dashboard label for the "site" of the application - can be filtered in the dashboard
event_stream_url: AUTOMATE_HOSTNAME:4222 - the Chef Automate URL with port 4222 specified (can be changed if needed)
event_stream_token: Chef Automate token for sending application event stream data
event_stream_certificate: With Intermediary Certificates or, Automate 2 being set to use TLS with a valid cert, you will need to provide Habitat with your certificate for communication with Automate to work. Follow these steps!
sup_verstion: Allows you to choose which version of supervisor you would like to install. Defaults to latest. (If a version is provided, it will also install that version of habitat if not previously installed)
launcher_version: Allows you to choose which version of launcher to install. Defaults to latest
service_version: Allows you to choose which version of the Windows Service to install. Defaults to latest
keep_latest: Automatically cleans up old packages. If this flag is enabled, service startup will initiate an uninstall of all previous versions of the associated package. This also applies when a service is restarted due to an update. If a number is passed to this argument, that number of latest versions will be kept. The same logic applies to the Supervisor packag env:HAB_KEEP_LATEST_PACKAGES=1 (This requires Habitat version 1.5.86+)

Examples

# set up with just the defaults
hab_sup 'default'

hab_sup 'test-options' do
  listen_http '0.0.0.0:9999'
  listen_gossip '0.0.0.0:9998'
end

# Use with an on-prem Builder
# Access to public builder may not be available
hab_sup 'default' do
  bldr_url 'https://bldr.private.net'
end

# Using update_condition
hab_sup 'default' do
  bldr_url 'https://bldr.private.net'
  hab_channel 'dev'
  update_condition 'track-channel'
end

# Provide event_stream_* information
hab_sup 'default' do
  license 'accept'
  event_stream_application 'myapp'
  event_stream_environment 'production'
  event_stream_site 'MySite'
  event_stream_url 'automate.private.net:4222'
  event_stream_token 'myawesomea2clitoken='
  event_stream_certificate '/hab/cache/ssl/mycert.crt'
end

# Provide specific versions
hab_sup 'default' do
  bldr_url 'https://bldr.private.net'
  sup_version '1.5.50'
  launcher_version '13458'
  service_version '0.6.0' # WINDOWS ONLY
end

# Set latest version of packages to retain
hab_sup 'default' do
  bldr_url 'https://bldr.private.net'
  sup_version '1.5.86'
  launcher_version '13458'
  service_version '0.6.0' # WINDOWS ONLY
  keep_latest '2'
end

hab_config

Applies a given configuration to a habitat service using hab config apply.

Actions

apply: (default action) apply the given configuration

Properties

service_group: The service group to apply the configuration to, for example, nginx.default
config: The configuration to apply as a ruby hash, for example, { worker_count: 2, http: { keepalive_timeout: 120 } }
remote_sup: Address to a remote Supervisor's Control Gateway [default: 127.0.0.1:9632]
remote_sup_http: Address for remote supervisor http port. Used to pull existing configuration data. If this is invalid, config will be applied on every Chef run.
gateway_auth_token: Auth token for accessing the remote supervisor's http port.
user: Name of user key to use for encryption. Passes --user to hab config apply

Notes

The version number of the configuration is automatically generated and will be the current timestamp in seconds since 1970-01-01 00:00:00 UTC.

Examples

hab_config 'nginx.default' do
  config({
    worker_count: 2,
    http: {
      keepalive_timeout: 120
    }
  })
end

hab_user_toml

Templates a user.toml for the specified service. This is written to /hab/user/<service_name>/config/user.toml. User.toml can be used to set configuration overriding the default.toml for a given package as an alternative to applying service group level configuration.

Actions

create: (default action) Create the user.toml from the specified config.
delete: Delete the user.toml

Properties

service_name: The service group to apply the configuration to, for example, nginx.default
config: Only valid for :create action. The configuration to apply as a ruby hash, for example, { worker_count: 2, http: { keepalive_timeout: 120 } }

Examples

hab_user_toml 'nginx' do
  config({
    worker_count: 2,
    http: {
      keepalive_timeout: 120
    }
  })
end

Maintainers

This cookbook is maintained by the following maintainers:

Jon Cowie jcowie@chef.io
Jeff Brimager jbrimager@chef.io
Collin Mcneese cmcneese@chef.io

The goal of the Community Cookbook Engineering team is to improve cookbook quality and to aid the community in contributing to cookbooks. To learn more about our team, process, and design goals see our team documentation. To learn more about contributing to cookbooks like this see our contributing documentation, or if you have general questions about this cookbook come chat with us in #cookbok-engineering on the Chef Community Slack

License

Licensed under the Apache License, Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at

    http://www.apache.org/licenses/LICENSE-2.0

Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.

Name		Name	Last commit message	Last commit date
Latest commit History 633 Commits
.delivery		.delivery
.expeditor		.expeditor
.github		.github
libraries		libraries
resources		resources
spec		spec
templates		templates
test		test
.editorconfig		.editorconfig
.gitattributes		.gitattributes
.gitignore		.gitignore
Berksfile		Berksfile
CHANGELOG.md		CHANGELOG.md
CODE_OF_CONDUCT.md		CODE_OF_CONDUCT.md
CONTRIBUTING.md		CONTRIBUTING.md
Gemfile		Gemfile
LICENSE		LICENSE
README.md		README.md
TESTING.md		TESTING.md
VERSION		VERSION
chefignore		chefignore
kitchen.dokken.yml		kitchen.dokken.yml
kitchen.yml		kitchen.yml
metadata.rb		metadata.rb

License

sam1el/habitat

Folders and files

Latest commit

History

Repository files navigation

Habitat Cookbook

Description

TODOS

License Note

Requirements

Platforms

Habitat

Chef

Cookbooks

Resources

hab_install

Actions

Properties

Examples

hab_package

actions

Properties

Examples

hab_service

Actions

Properties

Examples

hab_sup

Actions

Properties

Examples

hab_config

Actions

Properties

Notes

Examples

hab_user_toml

Actions

Properties

Examples

Maintainers

License

About

Resources

License

Code of conduct

Stars

Watchers

Forks

Releases

Packages 0

Languages

Packages