Current File : //lib/python3.9/site-packages/ansible/modules/__pycache__/rpm_key.cpython-39.opt-1.pyc
a
�)g�! � @ s� d dl mZmZmZ eZdZdZdZd dl Z d dl
Z d dl Z d dl
mZ d dlmZ d dlmZ d d
� ZG d d � d e�Zd
d� Zedkr�e� dS )� )�absolute_import�division�print_functiona
---
module: rpm_key
author:
- Hector Acosta (@hacosta) <hector.acosta@gazzang.com>
short_description: Adds or removes a gpg key from the rpm db
description:
- Adds or removes (rpm --import) a gpg key to your rpm database.
version_added: "1.3"
options:
key:
description:
- Key that will be modified. Can be a url, a file on the managed node, or a keyid if the key
already exists in the database.
type: str
required: true
state:
description:
- If the key will be imported or removed from the rpm db.
type: str
default: present
choices: [ absent, present ]
validate_certs:
description:
- If C(false) and the C(key) is a url starting with https, SSL certificates will not be validated.
- This should only be used on personally controlled sites using self-signed certificates.
type: bool
default: 'yes'
fingerprint:
description:
- The long-form fingerprint of the key being imported.
- This will be used to verify the specified key.
type: str
version_added: 2.9
extends_documentation_fragment:
- action_common_attributes
attributes:
check_mode:
support: full
diff_mode:
support: none
platform:
platforms: rhel
a
- name: Import a key from a url
ansible.builtin.rpm_key:
state: present
key: http://apt.sw.be/RPM-GPG-KEY.dag.txt
- name: Import a key from a file
ansible.builtin.rpm_key:
state: present
key: /path/to/key.gpg
- name: Ensure a key is not present in the db
ansible.builtin.rpm_key:
state: absent
key: DEADB33F
- name: Verify the key, using a fingerprint, before import
ansible.builtin.rpm_key:
key: /path/to/RPM-GPG-KEY.dag.txt
fingerprint: EBC6 E12C 62B1 C734 026B 2122 A20E 5214 6B8D 79E6
�#N)�
AnsibleModule)� fetch_url)� to_nativec C s d}t t�|t| dd�tj��S )z Verifies if string is a pubkeyzP.*?(-----BEGIN PGP PUBLIC KEY BLOCK-----.*?-----END PGP PUBLIC KEY BLOCK-----).*Zsurrogate_or_strict)�errors)�bool�re�matchr �DOTALL)�stringZ pgp_regex� r �;/usr/lib/python3.9/site-packages/ansible/modules/rpm_key.py� is_pubkey[ s r c @ s\ e Zd Zdd� Zdd� Zdd� Zdd� Zd d
� Zd d � Zd
d� Z dd� Z
dd� Z dd� Z dS )�RpmKeyc C s� d }d}|| _ | j �dd�| _|jd }|jd }|jd }|rP|�dd��� }| j �d �| _| jsv| j jd
dd �| _d |v r�| �|�}| �|�}d}n>| � |�r�|}n.t
j � |�r�|}| �|�}n| j j
d
| d� | �|�}|dk�rr| �|��r|jdd� nl|�s| j j
dd� |�rH| �|�}||k�rH| j j
d||f d� | �|� |�rd| j �|� |jdd� n0| �|��r�| �|� |jdd� n |jdd� d S )NF�rpmT�state�key� fingerprint� � �gpgZgpg2)�requiredz://zNot a valid key %s��msg�present)Zchangedz0When importing a key, a valid file must be givenzHThe specified fingerprint, '%s', does not match the key fingerprint '%s')�moduleZ get_bin_pathr �params�replace�upperr � fetch_key�getkeyid�is_keyid�os�path�isfile� fail_json�normalize_keyid�is_key_importedZ exit_json�getfingerprint�
import_keyZcleanup�drop_key) �selfr �keyfileZshould_cleanup_keyfiler r r �keyidZhas_fingerprintr r r �__init__c sT
�
zRpmKey.__init__c C s� t | j|�\}}|d dkr6| jjd||d f d� |�� }t|�sX| jjd| d� t�� \}}| j�|� t� |d�}|�
|� |� � |S )z;Downloads a key from url, returns a valid path to a gpg key�status�� z)failed to fetch key at %s , error was: %sr r zNot a public key: %szw+b) r r r( �readr �tempfileZmkstempZadd_cleanup_filer% �fdopen�write�close)r. �urlZrsp�infor ZtmpfdZtmpnameZtmpfiler r r r" � s
zRpmKey.fetch_keyc C s@ |� � �� }|�d�r"|dd� S |�d�r8|dd� S |S dS )zhEnsure a keyid doesn't have a leading 0x, has leading or trailing whitespace, and make sure is uppercase�0x� NZ0X)�stripr! �
startswith)r. r0 �retr r r r) � s
zRpmKey.normalize_keyidc C s` | � | jdddd|g�\}}|�� D ](}|�� }|�d�r$|�d�d S q$| jjdd � d S )
N�--no-tty�--batch�
--with-colons�--fixed-list-modezpub:�:� �Unexpected gpg outputr ��execute_commandr �
splitlinesr= r> �splitr r( �r. r/ �stdout�stderr�liner r r r# � s
zRpmKey.getkeyidc C sb | � | jddddd|g�\}}|�� D ](}|�� }|�d�r&|�d�d S q&| jjd d
� d S ) Nr@ rA rB rC z--with-fingerprintzfpr:rD � rF r rG rK r r r r+ � s
�
zRpmKey.getfingerprintc C s t jd|t jd�S )z5Verifies if a key, as provided by the user is a keyidz(0x)?[0-9a-f]{8})�flags)r r �
IGNORECASE)r. Zkeystrr r r r$ � s zRpmKey.is_keyidc C s4 | j j|dd�\}}}|dkr,| j j|d� ||fS )NT)Zuse_unsafe_shellr r )r � run_commandr( )r. �cmd�rcrL rM r r r rH � s zRpmKey.execute_commandc C sr | j d }| j�|�\}}}|dkr(dS |d| j d 7 }| �|�\}}|�� D ] }||�d�d v rP dS qPdS ) Nz -q gpg-pubkeyr Fz --qf "%{description}" | z3 --no-tty --batch --with-colons --fixed-list-mode -rD rE T)r r rR r rH rI rJ )r. r0 rS rT rL rM rN r r r r* � s
zRpmKey.is_key_importedc C s | j js| �| jd|g� d S )Nz--import)r �
check_moderH r )r. r/ r r r r, � s zRpmKey.import_keyc C s0 | j js,| �| jddd|dd � �� g� d S )Nz--erasez --allmatchesz
gpg-pubkey-%si����)r rU rH r �lower)r. r0 r r r r- � s zRpmKey.drop_keyN)
�__name__�
__module__� __qualname__r1 r" r) r# r+ r$ rH r* r, r- r r r r r a s 5
r c C sJ t ttddddgd�tdddd�tdd�td dd
�d �dd �} t| � d S )
N�strr Zabsent)�type�default�choicesTF)r[ r Zno_log)r[ r
)r[ r\ )r r r Zvalidate_certs)Z
argument_specZsupports_check_mode)r �dictr )r r r r �main� s
��
r_ �__main__)Z
__future__r r r r[ Z
__metaclass__Z
DOCUMENTATIONZEXAMPLESZRETURNr Zos.pathr% r5 Zansible.module_utils.basicr Zansible.module_utils.urlsr Zansible.module_utils._textr r �objectr r_ rW r r r r �<module> s -
Mini Shell