ExternalMirrors
/
linux-formula
mirror of https://github.com/salt-formulas/salt-formula-linux
Watch 1
Star 0
Fork 1
Code Issues 0 Releases 8 Wiki Activity
Saltstack Official Linux Formula
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
769 Commits
26 Branches
Tree: 16a8cb567b
Branches Tags
${ item.name }
Create branch ${ searchTerm }
from '16a8cb567b'
${ noResults }
linux-formula/linux/system/repo.sls

236 lines
7.6KB
Raw Blame History 

  1. {%- from "linux/map.jinja" import system with context %}

  2. {%- if system.enabled %}

  3. 

  4.   {% if system.pkgs %}

  5. linux_repo_prereq_pkgs:

  6.   pkg.installed:

  7.   - pkgs: {{ system.pkgs | json }}

  8.   {%- endif %}

  9. 

  10.   # global proxy setup

  11.   {%- if grains.os_family == 'Debian' %}

  12.     {%- if system.proxy.get('pkg', {}).get('enabled', False) %}

  13. /etc/apt/apt.conf.d/99proxies-salt:

  14.   file.managed:

  15.   - template: jinja

  16.   - source: salt://linux/files/apt.conf.d_proxies

  17.   - defaults:

  18.       external_host: False

  19.       https: {{ system.proxy.get('pkg', {}).get('https', None) | default(system.proxy.get('https', None), true) }}

  20.       http: {{ system.proxy.get('pkg', {}).get('http', None) | default(system.proxy.get('http', None), true) }}

  21.       ftp: {{ system.proxy.get('pkg', {}).get('ftp', None) | default(system.proxy.get('ftp', None), true) }}

  22.     {%- else %}

  23. /etc/apt/apt.conf.d/99proxies-salt:

  24.   file.absent

  25.     {%- endif %}

  26.   {%- else %}

  27.   # Implement grobal proxy configiration for non-debian OS.

  28.   {%- endif %}

  29. 

  30.   {% set default_repos = {} %}

  31. 

  32.   {%- if system.purge_repos|default(False) %}

  33. purge_sources_list_d_repos:

  34.   file.directory:

  35.   - name: /etc/apt/sources.list.d/

  36.   - clean: True

  37.   {%- endif %}

  38. 

  39.   {%- for name, repo in system.repo.items() | sort %}

  40.     {%- set name=repo.get('name', name) %}

  41.     {%- if grains.os_family == 'Debian' %}

  42. 

  43. # per repository proxy setup

  44.       {%- if repo.get('proxy', {}).get('enabled', False) %}

  45.         {%- set external_host = repo.proxy.get('host', None) or repo.source.split('/')[2] %}

  46. /etc/apt/apt.conf.d/99proxies-salt-{{ name }}:

  47.   file.managed:

  48.   - template: jinja

  49.   - source: salt://linux/files/apt.conf.d_proxies

  50.   - defaults:

  51.       external_host: {{ external_host }}

  52.       https: {{ repo.proxy.get('https', None) or system.proxy.get('pkg', {}).get('https', None) | default(system.proxy.get('https', None), True) }}

  53.       http: {{ repo.proxy.get('http', None) or system.proxy.get('pkg', {}).get('http', None) | default(system.proxy.get('http', None), True) }}

  54.       ftp: {{ repo.proxy.get('ftp', None) or system.proxy.get('pkg', {}).get('ftp', None) | default(system.proxy.get('ftp', None), True) }}

  55.       {%- else %}

  56. /etc/apt/apt.conf.d/99proxies-salt-{{ name }}:

  57.   file.absent

  58.       {%- endif %}

  59. 

  60.       {%- if repo.pin is defined or repo.pinning is defined %}

  61. linux_repo_{{ name }}_pin:

  62.   file.managed:

  63.     - name: /etc/apt/preferences.d/{{ name }}

  64.     - source: salt://linux/files/preferences_repo

  65.     - template: jinja

  66.     - defaults:

  67.         repo_name: {{ name }}

  68.       {%- else %}

  69. linux_repo_{{ name }}_pin:

  70.   file.absent:

  71.     - name: /etc/apt/preferences.d/{{ name }}

  72.       {%- endif %}

  73. 

  74.       {%- if repo.get('key') %}

  75. linux_repo_{{ name }}_key:

  76.         {% set repo_key = salt['hashutil.base64_b64encode'](repo.key) %}

  77.   cmd.run:

  78.     - name: "echo '{{ repo_key }}' | base64 -d | apt-key add -"

  79.     - require_in:

  80.         {%- if repo.get('default', False) %}

  81.       - file: default_repo_list

  82.         {% else %}

  83.       - pkgrepo: linux_repo_{{ name }}

  84.         {% endif %}

  85. 

  86. {# key_url fetch by curl when salt <2017.7, higher version of salt has

  87.    fixed bug for using a proxy_host/port specified at minion.conf

  88. 

  89.    NOTE: curl/cmd.run usage to fetch gpg key has limited functionality behind proxy.

  90.          Environments with salt >= 2017.7 should use key_url specified at

  91.          pkgrepo.manage state (which uses properly configured http_host at

  92.          minion.conf). Older versions of salt require to have proxy set at

  93.          ENV and curl way to fetch gpg key here can have a sense for backward

  94.          compatibility. Be aware that as of salt 2018.3 no_proxy option is

  95.          not implemented at all.

  96. #}

  97.       {%- elif repo.key_url|default(False) and grains['saltversioninfo'] < [2017, 7] and not repo.key_url.startswith('salt://') %}

  98. linux_repo_{{ name }}_key:

  99.   cmd.run:

  100.     - name: "curl -sL {{ repo.key_url }} | apt-key add -"

  101.     - require_in:

  102.         {%- if repo.get('default', False) %}

  103.       - file: default_repo_list

  104.         {% else %}

  105.       - pkgrepo: linux_repo_{{ name }}

  106.         {% endif %}

  107.       {%- endif %}

  108. 

  109.       {%- if repo.get('default', False) %}

  110.         {%- do default_repos.update({name: repo}) %}

  111.       {%- else %}

  112. 

  113.         {%- if repo.get('enabled', True) %}

  114. linux_repo_{{ name }}:

  115.   pkgrepo.managed:

  116.   - refresh_db: False

  117.   - require_in:

  118.     - refresh_db

  119.           {%- if repo.ppa is defined %}

  120.   - ppa: {{ repo.ppa }}

  121.           {%- else %}

  122.   - humanname: {{ name }}

  123.   - name: {{ repo.source }}

  124.             {%- if repo.architectures is defined %}

  125.   - architectures: {{ repo.architectures }}

  126.             {%- endif %}

  127.   - file: /etc/apt/sources.list.d/{{ name }}.list

  128.   - clean_file: {{ repo.get('clean_file', True) }}

  129.             {%- if repo.key_id is defined %}

  130.   - keyid: {{ repo.key_id }}

  131.             {%- endif %}

  132.             {%- if repo.key_server is defined %}

  133.   - keyserver: {{ repo.key_server }}

  134.             {%- endif %}

  135.             {%- if repo.key_url is defined and (grains['saltversioninfo'] >= [2017, 7] or repo.key_url.startswith('salt://')) %}

  136.   - key_url: {{ repo.key_url }}

  137.             {%- endif %}

  138.   - consolidate: {{ repo.get('consolidate', False) }}

  139.   - require:

  140.     - file: /etc/apt/apt.conf.d/99proxies-salt-{{ name }}

  141.     - file: /etc/apt/apt.conf.d/99proxies-salt

  142.             {%- if system.purge_repos|default(False) %}

  143.     - file: purge_sources_list_d_repos

  144.             {%- endif %}

  145.           {%- endif %}

  146.         {%- else %}

  147. linux_repo_{{ name }}:

  148.   pkgrepo.absent:

  149.     - refresh_db: False

  150.     - require:

  151.       - file: /etc/apt/apt.conf.d/99proxies-salt-{{ name }}

  152.     - require_in:

  153.       - refresh_db

  154.           {%- if repo.ppa is defined %}

  155.     - ppa: {{ repo.ppa }}

  156.             {%- if repo.key_id is defined %}

  157.     - keyid_ppa: {{ repo.keyid_ppa }}

  158.             {%- endif %}

  159.           {%- else %}

  160.     - file: /etc/apt/sources.list.d/{{ name }}.list

  161.             {%- if repo.key_id is defined %}

  162.     - keyid: {{ repo.key_id }}

  163.             {%- endif %}

  164.           {%- endif %}

  165.         {%- endif %}

  166.       {%- endif %}

  167.     {%- endif %}

  168. 

  169.     {%- if grains.os_family == "RedHat" %}

  170. 

  171.       {%- if repo.get('enabled', True) %}

  172.         {%- if repo.get('proxy', {}).get('enabled', False) %}

  173. # PLACEHOLDER

  174. # TODO, implement per proxy configuration for Yum

  175.         {%- endif %}

  176. 

  177.         {%- if not repo.get('default', False) %}

  178. linux_repo_{{ name }}:

  179.   pkgrepo.managed:

  180.   - refresh_db: False

  181.   - require_in:

  182.     - refresh_db

  183.   - name: {{ name }}

  184.   - humanname: {{ repo.get('humanname', name) }}

  185.           {%- if repo.mirrorlist is defined %}

  186.   - mirrorlist: {{ repo.mirrorlist }}

  187.           {%- else %}

  188.   - baseurl: {{ repo.source }}

  189.           {%- endif %}

  190.   - gpgcheck: {% if repo.get('gpgcheck', False) %}1{% else %}0{% endif %}

  191.           {%- if repo.gpgkey is defined %}

  192.   - gpgkey: {{ repo.gpgkey }}

  193.           {%- endif %}

  194.         {%- endif %}

  195.       {%- else %}

  196.   pkgrepo.absent:

  197.     - refresh_db: False

  198.     - require_in:

  199.       - refresh_db

  200.     - name: {{ repo.source }}

  201.       {%- endif %}

  202.     {%- endif %}

  203.   {%- endfor %}

  204. 

  205.   {%- if default_repos|length > 0 and grains.os_family == 'Debian' %}

  206. 

  207. default_repo_list:

  208.   file.managed:

  209.     - name: /etc/apt/sources.list

  210.     - source: salt://linux/files/sources.list

  211.     - template: jinja

  212.     - user: root

  213.     - group: root

  214.     - mode: 0644

  215.     {%- if system.purge_repos|default(False) %}

  216.     - replace: True

  217.     {%- endif %}

  218.     - defaults:

  219.         default_repos: {{ default_repos }}

  220. 

  221.   {%- endif %}

  222. 

  223. refresh_db:

  224.   {%- if system.get('refresh_repos_meta', True) %}

  225.   module.run:

  226.     {%- if 'module.run' in salt['config.get']('use_superseded', default=[]) %}

  227.     - pkg.refresh_db: []

  228.     {%- else %}

  229.     - name: pkg.refresh_db

  230.     {% endif %}

  231.   {%- else %}

  232.   test.succeed_without_changes

  233.   {%- endif %}

  234. 

  235. {%- endif %}