관리-도구
편집 파일: rpm_key.cpython-39.pyc
a �)g�! � @ s� d dl mZmZmZ eZdZdZdZd dl Z d dl Z d dl Z d dl mZ d dlmZ d dlmZ d d � ZG d d � d e�Zd d� Zedkr�e� dS )� )�absolute_import�division�print_functiona --- module: rpm_key author: - Hector Acosta (@hacosta) <hector.acosta@gazzang.com> short_description: Adds or removes a gpg key from the rpm db description: - Adds or removes (rpm --import) a gpg key to your rpm database. version_added: "1.3" options: key: description: - Key that will be modified. Can be a url, a file on the managed node, or a keyid if the key already exists in the database. type: str required: true state: description: - If the key will be imported or removed from the rpm db. type: str default: present choices: [ absent, present ] validate_certs: description: - If C(false) and the C(key) is a url starting with https, SSL certificates will not be validated. - This should only be used on personally controlled sites using self-signed certificates. type: bool default: 'yes' fingerprint: description: - The long-form fingerprint of the key being imported. - This will be used to verify the specified key. type: str version_added: 2.9 extends_documentation_fragment: - action_common_attributes attributes: check_mode: support: full diff_mode: support: none platform: platforms: rhel a - name: Import a key from a url ansible.builtin.rpm_key: state: present key: http://apt.sw.be/RPM-GPG-KEY.dag.txt - name: Import a key from a file ansible.builtin.rpm_key: state: present key: /path/to/key.gpg - name: Ensure a key is not present in the db ansible.builtin.rpm_key: state: absent key: DEADB33F - name: Verify the key, using a fingerprint, before import ansible.builtin.rpm_key: key: /path/to/RPM-GPG-KEY.dag.txt fingerprint: EBC6 E12C 62B1 C734 026B 2122 A20E 5214 6B8D 79E6 �#N)� AnsibleModule)� fetch_url)� to_nativec C s d}t t�|t| dd�tj��S )z Verifies if string is a pubkeyzP.*?(-----BEGIN PGP PUBLIC KEY BLOCK-----.*?-----END PGP PUBLIC KEY BLOCK-----).*Zsurrogate_or_strict)�errors)�bool�re�matchr �DOTALL)�stringZ pgp_regex� r �;/usr/lib/python3.9/site-packages/ansible/modules/rpm_key.py� is_pubkey[ s r c @ s\ e Zd Zdd� Zdd� Zdd� Zdd� Zd d � Zd d � Zd d� Z dd� Z dd� Z dd� Z dS )�RpmKeyc C s� d }d}|| _ | j �dd�| _|jd }|jd }|jd }|rP|�dd��� }| j �d �| _| jsv| j jd dd �| _d |v r�| �|�}| �|�}d}n>| � |�r�|}n.t j � |�r�|}| �|�}n| j j d | d� | �|�}|dk�rr| �|��r|jdd� nl|�s| j j dd� |�rH| �|�}||k�rH| j j d||f d� | �|� |�rd| j �|� |jdd� n0| �|��r�| �|� |jdd� n |jdd� d S )NF�rpmT�state�key� fingerprint� � �gpgZgpg2)�requiredz://zNot a valid key %s��msg�present)Zchangedz0When importing a key, a valid file must be givenzHThe specified fingerprint, '%s', does not match the key fingerprint '%s')�moduleZ get_bin_pathr �params�replace�upperr � fetch_key�getkeyid�is_keyid�os�path�isfile� fail_json�normalize_keyid�is_key_importedZ exit_json�getfingerprint� import_keyZcleanup�drop_key) �selfr �keyfileZshould_cleanup_keyfiler r r �keyidZhas_fingerprintr r r �__init__c sT � zRpmKey.__init__c C s� t | j|�\}}|d dkr6| jjd||d f d� |�� }t|�sX| jjd| d� t�� \}}| j�|� t� |d�}|� |� |� � |S )z;Downloads a key from url, returns a valid path to a gpg key�status�� z)failed to fetch key at %s , error was: %sr r zNot a public key: %szw+b) r r r( �readr �tempfileZmkstempZadd_cleanup_filer% �fdopen�write�close)r. �urlZrsp�infor ZtmpfdZtmpnameZtmpfiler r r r" � s zRpmKey.fetch_keyc C s@ |� � �� }|�d�r"|dd� S |�d�r8|dd� S |S dS )zhEnsure a keyid doesn't have a leading 0x, has leading or trailing whitespace, and make sure is uppercase�0x� NZ0X)�stripr! � startswith)r. r0 �retr r r r) � s zRpmKey.normalize_keyidc C s` | � | jdddd|g�\}}|�� D ](}|�� }|�d�r$|�d�d S q$| jjdd � d S ) N�--no-tty�--batch� --with-colons�--fixed-list-modezpub:�:� �Unexpected gpg outputr ��execute_commandr � splitlinesr= r> �splitr r( �r. r/ �stdout�stderr�liner r r r# � s zRpmKey.getkeyidc C sb | � | jddddd|g�\}}|�� D ](}|�� }|�d�r&|�d�d S q&| jjd d � d S ) Nr@ rA rB rC z--with-fingerprintzfpr:rD � rF r rG rK r r r r+ � s � zRpmKey.getfingerprintc C s t jd|t jd�S )z5Verifies if a key, as provided by the user is a keyidz(0x)?[0-9a-f]{8})�flags)r r � IGNORECASE)r. Zkeystrr r r r$ � s zRpmKey.is_keyidc C s4 | j j|dd�\}}}|dkr,| j j|d� ||fS )NT)Zuse_unsafe_shellr r )r � run_commandr( )r. �cmd�rcrL rM r r r rH � s zRpmKey.execute_commandc C sr | j d }| j�|�\}}}|dkr(dS |d| j d 7 }| �|�\}}|�� D ] }||�d�d v rP dS qPdS ) Nz -q gpg-pubkeyr Fz --qf "%{description}" | z3 --no-tty --batch --with-colons --fixed-list-mode -rD rE T)r r rR r rH rI rJ )r. r0 rS rT rL rM rN r r r r* � s zRpmKey.is_key_importedc C s | j js| �| jd|g� d S )Nz--import)r � check_moderH r )r. r/ r r r r, � s zRpmKey.import_keyc C s0 | j js,| �| jddd|dd � �� g� d S )Nz--erasez --allmatchesz gpg-pubkey-%si����)r rU rH r �lower)r. r0 r r r r- � s zRpmKey.drop_keyN) �__name__� __module__� __qualname__r1 r" r) r# r+ r$ rH r* r, r- r r r r r a s 5 r c C sJ t ttddddgd�tdddd�tdd�td dd �d �dd �} t| � d S ) N�strr Zabsent)�type�default�choicesTF)r[ r Zno_log)r[ r )r[ r\ )r r r Zvalidate_certs)Z argument_specZsupports_check_mode)r �dictr )r r r r �main� s �� r_ �__main__)Z __future__r r r r[ Z __metaclass__Z DOCUMENTATIONZEXAMPLESZRETURNr Zos.pathr% r5 Zansible.module_utils.basicr Zansible.module_utils.urlsr Zansible.module_utils._textr r �objectr r_ rW r r r r �<module> s -