diff options
| author | mo khan <mo@mokhan.ca> | 2015-10-04 11:43:28 -0600 |
|---|---|---|
| committer | mo khan <mo@mokhan.ca> | 2015-10-04 11:43:28 -0600 |
| commit | f6a4605c5d5c260685398aafbc6e88bf74f1df44 (patch) | |
| tree | c93c6cfd8b42bee500df8f921f2095cc477a8f80 | |
| parent | 45422149b3447acea4deccea35f5f4d3c29d923d (diff) | |
install and upgrade ca-certificates.
centos 6 needs to have it's ca-certificates package upgraded so that it
can pull the epel/metalink from the epel repo that gets added from the
epel-release package. the epel-release package uses https in the
/etc/yum.repos.d/epel.repo. without updating the ca-certificates
packages we cannot negotiate an trusted ssl connection to the epel
remote repositories and therefore are not able to install the nginx
package.
| -rw-r--r-- | attributes/default.rb | 1 | ||||
| -rw-r--r-- | recipes/default.rb | 2 | ||||
| -rw-r--r-- | recipes/nginx.rb | 10 |
3 files changed, 6 insertions, 7 deletions
diff --git a/attributes/default.rb b/attributes/default.rb index 62bfe5f..b2f459c 100644 --- a/attributes/default.rb +++ b/attributes/default.rb @@ -7,6 +7,7 @@ if node.platform_family == "rhel" automake bison bzip2 + ca-certificates gcc-c++ git libffi-devel diff --git a/recipes/default.rb b/recipes/default.rb index 273193e..41f31a6 100644 --- a/recipes/default.rb +++ b/recipes/default.rb @@ -1,5 +1,5 @@ package node['chef-talk']['packages'] include_recipe "chef-talk::ntpd" +include_recipe "chef-talk::nginx" include_recipe "chef-talk::ruby" include_recipe "chef-talk::foreman" -include_recipe "chef-talk::nginx" diff --git a/recipes/nginx.rb b/recipes/nginx.rb index 0a02d97..90eba4a 100644 --- a/recipes/nginx.rb +++ b/recipes/nginx.rb @@ -1,10 +1,8 @@ -#resource -#- type -#- name -#- attributes -#- action +if redhat? + execute "yum upgrade -y ca-certificates" + package "epel-release" +end -package "epel-release" if redhat? package "nginx" user "nginx" |