New drupal charm submission.
Bug #1290636 reported by
Darryl Weaver
This bug affects 1 person
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
Juju Charms Collection |
Incomplete
|
Undecided
|
Darryl Weaver |
Bug Description
I have written a new drupal charm for submission to the charm store.
It includes a new icon, configuration settings for the site_name and the admin user password.
There are relationships for the database and the website that allows a typical 3 tier deployment.
Related branches
Changed in charms: | |
assignee: | nobody → Matt Bruzek (mbruzek) |
assignee: | Matt Bruzek (mbruzek) → nobody |
assignee: | nobody → Darryl Weaver (dweaver) |
To post a comment you must log in.
Greetings Darryl,
Thank you for your submission of the Drupal Charm! I've taken some time to review your work and have the following comments:
#Proof
There was no output from charm proof! Excellent! moving on to the next phase.
# Metadata
In metadata.yaml, you provide a default administrative password. While this is fine for personal charms, its store policy that passwords not be set to a default value, that persist in the deployment, as this opens an attack vector on services deployed with Juju. We recommend that you set the value to an empty string or None, and handle the action accordingly in the charm (in other use-case examples, the application refuses to deploy without a password, and returns 0)
hooks/install appears to have some idempotency issues. On a fresh deployment, the hook errored, and when attempting to resolve by attaching to debug-hooks and re-running juju resolved -r drupal/0 - i was prompted to overwrite a directory that was already created:
Install location /var/www/drupal already exists. Do you want to overwrite it? (y/n):
which then further rolled into Apache returning Drupal does not exist
Site default already disabled
ERROR: Site drupal does not exist!
Using Drush as a delivery mechanism is a great addition, and using it to power most of the site maintenance i see is an upstream accepted tool - however for inclusion to the charm store, all downloads need to be cryptographically verified. A simple fix for this would be to use Drush's git based checkout system instead of using the latest HEAD package that Drush fetches by default.
This is an excellent first round submission, and barring some modifications will be ready for further review for the charm store. Thank you for putting in the excellent work that has gone into this charm, and I look forward to the next iteration of the Drupal charm.
I'm going to place the status of this bug as incomplete. When you are ready for an additional review, please set the bug status to "Fix Comitted" or "new" and someone will be along shortly to review your work.
All the best!