ExternalMirrors
/
linux-formula
镜像自地址 https://github.com/salt-formulas/salt-formula-linux
关注 1
点赞 0
派生 1
代码 工单 0 版本发布 8 百科 动态
Saltstack Official Linux Formula
您最多选择25个主题 主题必须以字母或数字开头，可以包含连字符 (-)，并且长度不得超过35个字符
778 提交
26 分支
分支: master
分支列表 标签列表
${ item.name }
创建分支 ${ searchTerm }
从 'master'
${ noResults }
linux-formula/linux/system/repo.sls

251 行
8.2KB
原始文件 永久链接 Blame 文件历史 

  1. {%- from "linux/map.jinja" import system with context %}

  2. {%- if system.enabled %}

  3. 

  4.   {% if system.pkgs %}

  5. linux_repo_prereq_pkgs:

  6.   pkg.installed:

  7.   - pkgs: {{ system.pkgs | json }}

  8.   {%- endif %}

  9. 

  10.   # global proxy setup

  11.   {%- if grains.os_family == 'Debian' %}

  12.     {%- if system.proxy.get('pkg', {}).get('enabled', False) %}

  13. /etc/apt/apt.conf.d/99proxies-salt:

  14.   file.managed:

  15.   - template: jinja

  16.   - source: salt://linux/files/apt.conf.d_proxies

  17.   - defaults:

  18.       external_host: False

  19.       https: {{ system.proxy.get('pkg', {}).get('https', None) | default(system.proxy.get('https', None), true) }}

  20.       http: {{ system.proxy.get('pkg', {}).get('http', None) | default(system.proxy.get('http', None), true) }}

  21.       ftp: {{ system.proxy.get('pkg', {}).get('ftp', None) | default(system.proxy.get('ftp', None), true) }}

  22.     {%- else %}

  23. /etc/apt/apt.conf.d/99proxies-salt:

  24.   file.absent

  25.     {%- endif %}

  26.   {%- else %}

  27.   # Implement grobal proxy configiration for non-debian OS.

  28.   {%- endif %}

  29. 

  30.   {% set default_repos = {} %}

  31. 

  32.   {%- if system.purge_repos|default(False) %}

  33. purge_sources_list_d_repos:

  34.   file.directory:

  35.   - name: /etc/apt/sources.list.d/

  36.   - clean: True

  37.   {%- endif %}

  38. 

  39.   {%- for name, repo in system.repo.items() | sort %}

  40.     {%- set name=repo.get('name', name) %}

  41.     {%- if grains.os_family == 'Debian' %}

  42. 

  43. # per repository proxy setup

  44.       {%- if repo.get('proxy', {}).get('enabled', False) %}

  45.         {%- set external_host = repo.proxy.get('host', None) or repo.source.split('/')[2] %}

  46. /etc/apt/apt.conf.d/99proxies-salt-{{ name }}:

  47.   file.managed:

  48.   - template: jinja

  49.   - source: salt://linux/files/apt.conf.d_proxies

  50.   - defaults:

  51.       external_host: {{ external_host }}

  52.       https: {{ repo.proxy.get('https', None) or system.proxy.get('pkg', {}).get('https', None) | default(system.proxy.get('https', None), True) }}

  53.       http: {{ repo.proxy.get('http', None) or system.proxy.get('pkg', {}).get('http', None) | default(system.proxy.get('http', None), True) }}

  54.       ftp: {{ repo.proxy.get('ftp', None) or system.proxy.get('pkg', {}).get('ftp', None) | default(system.proxy.get('ftp', None), True) }}

  55.       {%- else %}

  56. /etc/apt/apt.conf.d/99proxies-salt-{{ name }}:

  57.   file.absent

  58.       {%- endif %}

  59. 

  60.       {%- if repo.pin is defined or repo.pinning is defined %}

  61. linux_repo_{{ name }}_pin:

  62.   file.managed:

  63.     - name: /etc/apt/preferences.d/{{ name }}

  64.     - source: salt://linux/files/preferences_repo

  65.     - template: jinja

  66.     - defaults:

  67.         repo_name: {{ name }}

  68.       {%- else %}

  69. linux_repo_{{ name }}_pin:

  70.   file.absent:

  71.     - name: /etc/apt/preferences.d/{{ name }}

  72.       {%- endif %}

  73. 

  74.       {%- if repo.get('key') %}

  75. linux_repo_{{ name }}_key:

  76.         {% set repo_key = salt['hashutil.base64_b64encode'](repo.key) %}

  77.   cmd.run:

  78.     - name: "echo '{{ repo_key }}' | base64 -d | apt-key add -"

  79.     - require_in:

  80.         {%- if repo.get('default', False) %}

  81.       - file: default_repo_list

  82.         {% else %}

  83.       - pkgrepo: linux_repo_{{ name }}

  84.         {% endif %}

  85. 

  86. {# key_url fetch by curl when salt <2017.7, higher version of salt has

  87.    fixed bug for using a proxy_host/port specified at minion.conf

  88. 

  89.    NOTE: curl/cmd.run usage to fetch gpg key has limited functionality behind proxy.

  90.          Environments with salt >= 2017.7 should use key_url specified at

  91.          pkgrepo.manage state (which uses properly configured http_host at

  92.          minion.conf). Older versions of salt require to have proxy set at

  93.          ENV and curl way to fetch gpg key here can have a sense for backward

  94.          compatibility. Be aware that as of salt 2018.3 no_proxy option is

  95.          not implemented at all.

  96. #}

  97.       {%- elif repo.key_url|default(False) and grains['saltversioninfo'] < [2017, 7] and not repo.key_url.startswith('salt://') %}

  98. linux_repo_{{ name }}_key:

  99.   cmd.run:

  100.     - name: "curl -sL {{ repo.key_url }} | apt-key add -"

  101.     - require_in:

  102.         {%- if repo.get('default', False) %}

  103.       - file: default_repo_list

  104.         {% else %}

  105.       - pkgrepo: linux_repo_{{ name }}

  106.         {% endif %}

  107.       {%- endif %}

  108. 

  109.       {%- if repo.get('default', False) %}

  110.         {%- do default_repos.update({name: repo}) %}

  111.       {%- else %}

  112. 

  113.         {%- if repo.get('enabled', True) %}

  114. linux_repo_{{ name }}:

  115.   pkgrepo.managed:

  116.   - refresh_db: False

  117.   - require_in:

  118.     - refresh_db

  119.           {%- if repo.ppa is defined %}

  120.   - ppa: {{ repo.ppa }}

  121.           {%- else %}

  122.   - humanname: {{ name }}

  123.   - name: {{ repo.source }}

  124.             {%- if repo.architectures is defined %}

  125.   - architectures: {{ repo.architectures }}

  126.             {%- endif %}

  127.   - file: /etc/apt/sources.list.d/{{ name }}.list

  128.   - clean_file: {{ repo.get('clean_file', True) }}

  129.             {%- if repo.key_id is defined %}

  130.   - keyid: {{ repo.key_id }}

  131.             {%- endif %}

  132.             {%- if repo.key_server is defined %}

  133.   - keyserver: {{ repo.key_server }}

  134.             {%- endif %}

  135.             {%- if repo.key_url is defined and (grains['saltversioninfo'] >= [2017, 7] or repo.key_url.startswith('salt://')) %}

  136.   - key_url: {{ repo.key_url }}

  137.             {%- endif %}

  138. {#

  139.     Disable apt-key usage when salt version is at least 3005, and the user provides

  140.     'signed-by=' in their source, and we're on a newer version of Debian or Ubuntu.

  141.     apt-key is deprecated, see the following for more context:

  142.     https://docs.saltproject.io/en/latest/ref/states/all/salt.states.pkgrepo.html#apt-key-deprecated

  143. #}

  144.             {%- if grains['saltversioninfo'] >= [3005, 0] and

  145.               'signed-by=' in repo.source and

  146.               (

  147.                 (grains['os'] == 'Debian' and grains['osrelease_info'] >= (11,)) or

  148.                 (grains['os'] == 'Ubuntu' and grains['osrelease_info'] >= (22, 4))

  149.               )

  150.             %}

  151.   - aptkey: False

  152.             {%- endif %}

  153.   - consolidate: {{ repo.get('consolidate', False) }}

  154.   - require:

  155.     - file: /etc/apt/apt.conf.d/99proxies-salt-{{ name }}

  156.     - file: /etc/apt/apt.conf.d/99proxies-salt

  157.             {%- if system.purge_repos|default(False) %}

  158.     - file: purge_sources_list_d_repos

  159.             {%- endif %}

  160.           {%- endif %}

  161.         {%- else %}

  162. linux_repo_{{ name }}:

  163.   pkgrepo.absent:

  164.     - refresh_db: False

  165.     - require:

  166.       - file: /etc/apt/apt.conf.d/99proxies-salt-{{ name }}

  167.     - require_in:

  168.       - refresh_db

  169.           {%- if repo.ppa is defined %}

  170.     - ppa: {{ repo.ppa }}

  171.             {%- if repo.key_id is defined %}

  172.     - keyid_ppa: {{ repo.keyid_ppa }}

  173.             {%- endif %}

  174.           {%- else %}

  175.     - file: /etc/apt/sources.list.d/{{ name }}.list

  176.             {%- if repo.key_id is defined %}

  177.     - keyid: {{ repo.key_id }}

  178.             {%- endif %}

  179.           {%- endif %}

  180.         {%- endif %}

  181.       {%- endif %}

  182.     {%- endif %}

  183. 

  184.     {%- if grains.os_family == "RedHat" %}

  185. 

  186.       {%- if repo.get('enabled', True) %}

  187.         {%- if repo.get('proxy', {}).get('enabled', False) %}

  188. # PLACEHOLDER

  189. # TODO, implement per proxy configuration for Yum

  190.         {%- endif %}

  191. 

  192.         {%- if not repo.get('default', False) %}

  193. linux_repo_{{ name }}:

  194.   pkgrepo.managed:

  195.   - refresh_db: False

  196.   - require_in:

  197.     - refresh_db

  198.   - name: {{ name }}

  199.   - humanname: {{ repo.get('humanname', name) }}

  200.           {%- if repo.mirrorlist is defined %}

  201.   - mirrorlist: {{ repo.mirrorlist }}

  202.           {%- else %}

  203.   - baseurl: {{ repo.source }}

  204.           {%- endif %}

  205.   - gpgcheck: {% if repo.get('gpgcheck', False) %}1{% else %}0{% endif %}

  206.           {%- if repo.gpgkey is defined %}

  207.   - gpgkey: {{ repo.gpgkey }}

  208.           {%- endif %}

  209.         {%- endif %}

  210.       {%- else %}

  211.   pkgrepo.absent:

  212.     - refresh_db: False

  213.     - require_in:

  214.       - refresh_db

  215.     - name: {{ repo.source }}

  216.       {%- endif %}

  217.     {%- endif %}

  218.   {%- endfor %}

  219. 

  220.   {%- if default_repos|length > 0 and grains.os_family == 'Debian' %}

  221. 

  222. default_repo_list:

  223.   file.managed:

  224.     - name: /etc/apt/sources.list

  225.     - source: salt://linux/files/sources.list

  226.     - template: jinja

  227.     - user: root

  228.     - group: root

  229.     - mode: 0644

  230.     {%- if system.purge_repos|default(False) %}

  231.     - replace: True

  232.     {%- endif %}

  233.     - defaults:

  234.         default_repos: {{ default_repos }}

  235. 

  236.   {%- endif %}

  237. 

  238. refresh_db:

  239.   {%- if system.get('refresh_repos_meta', True) %}

  240.   module.run:

  241.     {%- if 'module.run' in salt['config.get']('use_superseded', default=[]) %}

  242.     - pkg.refresh_db: []

  243.     {%- else %}

  244.     - name: pkg.refresh_db

  245.     {% endif %}

  246.   {%- else %}

  247.   test.succeed_without_changes

  248.   {%- endif %}

  249. 

  250. {%- endif %}