diff -r a2342f26c9de -r b0b56e0f8c7f dev/provisioning/modules/archive/manifests/download.pp
--- /dev/null	Thu Jan 01 00:00:00 1970 +0000
+++ b/dev/provisioning/modules/archive/manifests/download.pp	Fri Jan 15 15:35:00 2016 +0100
@@ -0,0 +1,190 @@
+# == Definition: archive::download
+#
+# Archive downloader with integrity verification.
+#
+# Parameters:
+#
+# - *$url:
+# - *$digest_url:
+# - *$digest_string: Default value undef
+# - *$digest_type: Default value "md5".
+# - *$timeout: Default value 120.
+# - *$src_target: Default value "/usr/src".
+# - *$allow_insecure: Default value false.
+# - *$follow_redirects: Default value false.
+# - *$verbose: Default value true.
+# - *$proxy_server: Default value undef.
+# - *$user: The user used to download the archive
+#
+# Example usage:
+#
+#  archive::download {"apache-tomcat-6.0.26.tar.gz":
+#    ensure => present,
+#    url    => "http://archive.apache.org/dist/tomcat/tomcat-6/v6.0.26/bin/apache-tomcat-6.0.26.tar.gz",
+#  }
+#
+#  archive::download {"apache-tomcat-6.0.26.tar.gz":
+#    ensure        => present,
+#    digest_string => "f9eafa9bfd620324d1270ae8f09a8c89",
+#    url           => "http://archive.apache.org/dist/tomcat/tomcat-6/v6.0.26/bin/apache-tomcat-6.0.26.tar.gz",
+#  }
+#
+define archive::download (
+  $url,
+  $ensure=present,
+  $checksum=true,
+  $digest_url=undef,
+  $digest_string=undef,
+  $digest_type='md5',
+  $timeout=120,
+  $src_target='/usr/src',
+  $allow_insecure=false,
+  $follow_redirects=false,
+  $verbose=true,
+  $path=$::path,
+  $proxy_server=undef,
+  $user=undef,
+) {
+
+  $insecure_arg = $allow_insecure ? {
+    true    => '-k',
+    default => '',
+  }
+
+  $redirect_arg = $follow_redirects ? {
+    true    => '-L',
+    default => '',
+  }
+
+  if !defined(Package['curl']) {
+    package{'curl':
+      ensure => present,
+    }
+  }
+
+  if $proxy_server {
+    $proxy_option = "--proxy ${proxy_server}"
+  } else {
+    $proxy_option = undef
+  }
+
+  case $checksum {
+    true : {
+      case $digest_type {
+        'md5','sha1','sha224','sha256','sha384','sha512' : {
+          $checksum_cmd = "${digest_type}sum -c ${name}.${digest_type}"
+        }
+        default: { fail 'Unimplemented digest type' }
+      }
+
+      if $digest_url and $digest_string {
+        fail 'digest_url and digest_string should not be used together !'
+      }
+
+      if $digest_string {
+        case $ensure {
+          'present': {
+            file {"${src_target}/${name}.${digest_type}":
+              ensure  => $ensure,
+              content => "${digest_string} *${name}",
+              owner   => $user,
+              notify  => Exec["download archive ${name} and check sum"],
+            }
+          }
+          'absent': {
+            file {"${src_target}/${name}.${digest_type}":
+              ensure => absent,
+              purge  => true,
+              owner  => $user,
+              force  => true,
+            }
+          }
+          default: {
+            fail('$ensure can only be present or absent.')
+          }
+        }
+      } else {
+        case $ensure {
+          'present': {
+
+            if !$digest_url {
+              $digest_src = "${url}.${digest_type}"
+            } else {
+              $digest_src = $digest_url
+            }
+
+
+            exec {"download digest of archive ${name}":
+              command => "curl ${proxy_option} -s -S ${insecure_arg} ${redirect_arg} -o ${src_target}/${name}.${digest_type} '${digest_src}'",
+              creates => "${src_target}/${name}.${digest_type}",
+              timeout => $timeout,
+              path    => $path,
+              notify  => Exec["download archive ${name} and check sum"],
+              user    => $user,
+              require => Package['curl'],
+            }
+
+          }
+          'absent': {
+            file{"${src_target}/${name}.${digest_type}":
+              ensure => absent,
+              purge  => true,
+              owner  => $user,
+              force  => true,
+            }
+          }
+          default: {
+            fail('$ensure can only be present or absent.')
+          }
+        }
+      }
+    }
+    false :  {
+      $checksum_cmd = undef # Fix for strict_variables
+      if $verbose {
+        notice 'No checksum for this archive'
+      }
+    }
+    default: { fail ( "Unknown checksum value: '${checksum}'" ) }
+  }
+
+  case $ensure {
+    'present': {
+      $_notify     = $checksum ? {
+        true    => Exec["rm-on-error-${name}"],
+        default => undef,
+      }
+      $refreshonly = $checksum ? {
+        true    => true,
+        default => undef,
+      }
+      exec {"download archive ${name} and check sum":
+        command     => "curl ${proxy_option} -s -S ${insecure_arg} ${redirect_arg} -o ${src_target}/${name} '${url}'",
+        creates     => "${src_target}/${name}",
+        logoutput   => true,
+        timeout     => $timeout,
+        path        => $path,
+        require     => Package['curl'],
+        notify      => $_notify,
+        user        => $user,
+        refreshonly => $refreshonly,
+      }
+
+      exec {"rm-on-error-${name}":
+        command     => "rm -f ${src_target}/${name} ${src_target}/${name}.${digest_type} && exit 1",
+        unless      => $checksum_cmd,
+        cwd         => $src_target,
+        path        => $path,
+        refreshonly => true,
+      }
+    }
+    'absent': {
+      file {"${src_target}/${name}":
+        ensure => absent,
+        purge  => true,
+        force  => true,
+      }
+    }
+    default: { fail ( "Unknown ensure value: '${ensure}'" ) }
+  }
+}