ExternalMirrors
/
linux-formula
mirror of https://github.com/salt-formulas/salt-formula-linux
Watch 1
Star 0
Fork 1
Code Issues 0 Releases 8 Wiki Activity
Saltstack Official Linux Formula
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
613 Commits
26 Branches
Branch: fix-curl-behind-proxy
Branches Tags
${ item.name }
Create branch ${ searchTerm }
from 'fix-curl-behind-proxy'
${ noResults }
linux-formula/linux/system/repo.sls

253 lines
7.3KB
Raw Permalink Blame History 

  1. {%- from "linux/map.jinja" import system with context %}

  2. {%- if system.enabled %}

  3. 

  4. linux_repo_prereq_pkgs:

  5.   pkg.installed:

  6.   - pkgs: {{ system.pkgs }}

  7. 

  8. # global proxy setup

  9. {%- if system.proxy.get('pkg', {}).get('enabled', False) %}

  10. {%- if grains.os_family == 'Debian' %}

  11. 

  12. /etc/apt/apt.conf.d/99proxies-salt:

  13.   file.managed:

  14.   - template: jinja

  15.   - source: salt://linux/files/apt.conf.d_proxies

  16.   - defaults:

  17.       external_host: False

  18.       https: {{ system.proxy.get('pkg', {}).get('https', None) | default(system.proxy.get('https', None), true) }}

  19.       http: {{ system.proxy.get('pkg', {}).get('http', None) | default(system.proxy.get('http', None), true) }}

  20.       ftp: {{ system.proxy.get('pkg', {}).get('ftp', None) | default(system.proxy.get('ftp', None), true) }}

  21. 

  22. {%- else %}

  23. 

  24. /etc/apt/apt.conf.d/99proxies-salt:

  25.   file.absent

  26. 

  27. {%- endif %}

  28. {%- endif %}

  29. 

  30. {% set default_repos = {} %}

  31. 

  32. {%- if system.purge_repos|default(False) %}

  33. 

  34. purge_sources_list_d_repos:

  35.    file.directory:

  36.    - name: /etc/apt/sources.list.d/

  37.    - clean: True

  38. 

  39. {%- endif %}

  40. 

  41. {%- for name, repo in system.repo.items() %}

  42. {%- set name=repo.get('name', name) %}

  43. {%- if grains.os_family == 'Debian' %}

  44. 

  45. # per repository proxy setup

  46. {%- if repo.get('proxy', {}).get('enabled', False) %}

  47. {%- set external_host = repo.proxy.get('host', None) or repo.source.split('/')[2] %}

  48. /etc/apt/apt.conf.d/99proxies-salt-{{ name }}:

  49.   file.managed:

  50.   - template: jinja

  51.   - source: salt://linux/files/apt.conf.d_proxies

  52.   - defaults:

  53.       external_host: {{ external_host }}

  54.       https: {{ repo.proxy.get('https', None) or system.proxy.get('pkg', {}).get('https', None) | default(system.proxy.get('https', None), True) }}

  55.       http: {{ repo.proxy.get('http', None) or system.proxy.get('pkg', {}).get('http', None) | default(system.proxy.get('http', None), True) }}

  56.       ftp: {{ repo.proxy.get('ftp', None) or system.proxy.get('pkg', {}).get('ftp', None) | default(system.proxy.get('ftp', None), True) }}

  57. {%- else %}

  58. /etc/apt/apt.conf.d/99proxies-salt-{{ name }}:

  59.   file.absent

  60. {%- endif %}

  61. 

  62. {%- if repo.pin is defined %}

  63. 

  64. linux_repo_{{ name }}_pin:

  65.   file.managed:

  66.     - name: /etc/apt/preferences.d/{{ name }}

  67.     - source: salt://linux/files/preferences_repo

  68.     - template: jinja

  69.     - defaults:

  70.         repo_name: {{ name }}

  71. 

  72. {%- else %}

  73. 

  74. linux_repo_{{ name }}_pin:

  75.   file.absent:

  76.     - name: /etc/apt/preferences.d/{{ name }}

  77. 

  78. {%- endif %}

  79. 

  80. {%- if repo.get('key') %} {# 2 #}

  81. 

  82. linux_repo_{{ name }}_key:

  83.   cmd.run:

  84.     - name: |

  85.             echo "{{ repo.key | indent(12) }}" | apt-key add -

  86.     - unless: |

  87.             apt-key finger --with-colons | grep -qF $(echo "{{ repo.key| indent(12) }}" | gpg --with-fingerprint --with-colons | grep -E '^fpr')

  88.     - require_in:

  89.     {%- if repo.get('default', False) %}

  90.       - file: default_repo_list

  91.     {% else %}

  92.       - pkgrepo: linux_repo_{{ name }}

  93.     {% endif %}

  94. 

  95. {# key_url fetch by curl when salt <2017.7, higher version of salt has fixed bug for using a proxy_host/port specified at minion.conf #}

  96. {#

  97.    NOTE: curl/cmd.run usage to fetch gpg key has limited functionality behind proxy. Environments with salt >= 2017.7 shoul use

  98.          key_url specified at pkgrepo.manage state (which uses properly configured http_host at minion.conf). Older versions of

  99.          salt require to have proxy set at ENV and curl way to fetch gpg key here can have a sense for backward compatibility.

  100. #}

  101. {%- if grains['saltversioninfo'] < [2017, 7] %}

  102. {%- elif repo.key_url|default(False) and not repo.key_url.startswith('salt://') %}

  103. 

  104. linux_repo_{{ name }}_key:

  105.   cmd.run:

  106.     - name: "curl -sL {{ repo.key_url }} | apt-key add -"

  107.     - unless: "apt-key finger --with-colons | grep -qF $(curl -sL {{ repo.key_url }} | gpg --with-fingerprint --with-colons | grep -E '^fpr')"

  108.     - require_in:

  109.     {%- if repo.get('default', False) %}

  110.       - file: default_repo_list

  111.     {% else %}

  112.       - pkgrepo: linux_repo_{{ name }}

  113.     {% endif %}

  114. {%- endif %} {# key_url fetch by curl when salt <2017.7 #}

  115. 

  116. {%- endif %} {# 2 #}

  117. 

  118. {%- if repo.get('default', False) %}   {# 1 #}

  119.   {%- do default_repos.update({name: repo}) %}  {# for 'default' repos #}

  120. 

  121. {%- else %} {# for all others repos #}

  122. 

  123. {%- if repo.get('enabled', True) %}

  124. 

  125. linux_repo_{{ name }}:

  126.   pkgrepo.managed:

  127.   {%- if repo.ppa is defined %}

  128.   - ppa: {{ repo.ppa }}

  129.   {%- else %}

  130.   - humanname: {{ name }}

  131.   - name: {{ repo.source }}

  132.   {%- if repo.architectures is defined %}

  133.   - architectures: {{ repo.architectures }}

  134.   {%- endif %}

  135.   - file: /etc/apt/sources.list.d/{{ name }}.list

  136.   - clean_file: {{ repo.clean|default(True) }}

  137.   {%- if repo.key_id is defined %}

  138.   - keyid: {{ repo.key_id }}

  139.   {%- endif %}

  140.   {%- if repo.key_server is defined %}

  141.   - keyserver: {{ repo.key_server }}

  142.   {%- endif %}

  143.   {%- if repo.key_url is defined and grains['saltversioninfo'] >= [2017, 7] %}

  144.   - key_url: {{ repo.key_url }}

  145.   {%- endif %}

  146.   - consolidate: {{ repo.get('consolidate', False) }}

  147.   - clean_file: {{ repo.get('clean_file', False) }}

  148.   - refresh_db: {{ repo.get('refresh_db', True) }}

  149.   - require:

  150.     - pkg: linux_repo_prereq_pkgs

  151.   {%- if repo.get('proxy', {}).get('enabled', False) %}

  152.     - file: /etc/apt/apt.conf.d/99proxies-salt-{{ name }}

  153.   {%- endif %}

  154.   {%- if system.proxy.get('pkg', {}).get('enabled', False) %}

  155.     - file: /etc/apt/apt.conf.d/99proxies-salt

  156.   {%- endif %}

  157.   {%- if system.purge_repos|default(False) %}

  158.     - file: purge_sources_list_d_repos

  159.   {%- endif %}

  160.   {%- endif %}

  161. 

  162. {%- else %}

  163. 

  164. linux_repo_{{ name }}_absent:

  165.   pkgrepo.absent:

  166.     {%- if repo.ppa is defined %}

  167.     - ppa: {{ repo.ppa }}

  168.     {%- if repo.key_id is defined %}

  169.     - keyid_ppa: {{ repo.keyid_ppa }}

  170.     {%- endif %}

  171.     {%- else %}

  172.     - file: /etc/apt/sources.list.d/{{ name }}.list

  173.     {%- if repo.key_id is defined %}

  174.     - keyid: {{ repo.key_id }}

  175.     {%- endif %}

  176.     {%- endif %}

  177.   file.absent:

  178.     - name: /etc/apt/sources.list.d/{{ name }}.list

  179. 

  180. {%- endif %}

  181. 

  182. {%- endif %} {# 1 #}

  183. 

  184. {#- os_family Debian #}

  185. {%- endif %}

  186. 

  187. {%- if grains.os_family == "RedHat" %}

  188. 

  189. {%- if repo.get('enabled', True) %}

  190. 

  191. {%- if repo.get('proxy', {}).get('enabled', False) %}

  192. # PLACEHOLDER

  193. # TODO, implement per proxy configuration for Yum

  194. {%- endif %}

  195. 

  196. {%- if not repo.get('default', False) %}

  197. linux_repo_{{ name }}:

  198.   pkgrepo.managed:

  199.   - name: {{ name }}

  200.   - humanname: {{ repo.get('humanname', name) }}

  201.   {%- if repo.mirrorlist is defined %}

  202.   - mirrorlist: {{ repo.mirrorlist }}

  203.   {%- else %}

  204.   - baseurl: {{ repo.source }}

  205.   {%- endif %}

  206.   - gpgcheck: {% if repo.get('gpgcheck', False) %}1{% else %}0{% endif %}

  207.   {%- if repo.gpgkey is defined %}

  208.   - gpgkey: {{ repo.gpgkey }}

  209.   {%- endif %}

  210.   - require:

  211.     - pkg: linux_repo_prereq_pkgs

  212. {%- endif %}

  213. 

  214. {#- repo.enabled is false #}

  215. {%- else %}

  216.   pkgrepo.absent:

  217.     - name: {{ repo.source }}

  218. {%- endif %}

  219. 

  220. {#- os_family Redhat #}

  221. {%- endif %}

  222. 

  223. {#- repo.items() loop #}

  224. {%- endfor %}

  225. 

  226. {%- if default_repos|length > 0 and grains.os_family == 'Debian' %}

  227. 

  228. default_repo_list:

  229.   file.managed:

  230.     - name: /etc/apt/sources.list

  231.     - source: salt://linux/files/sources.list

  232.     - template: jinja

  233.     - user: root

  234.     - group: root

  235.     - mode: 0644

  236. {%- if system.purge_repos|default(False) %}

  237.     - replace: True

  238. {%- endif %}

  239.     - defaults:

  240.         default_repos: {{ default_repos }}

  241.     - require:

  242.       - pkg: linux_repo_prereq_pkgs

  243. 

  244. refresh_default_repo:

  245.   module.wait:

  246.     - name: pkg.refresh_db

  247.     - watch:

  248.       - file: default_repo_list

  249. 

  250. {%- endif %}

  251. 

  252. {%- endif %}