ExternalMirrors
/
linux-formula
mirror of https://github.com/salt-formulas/salt-formula-linux
Watch 1
Star 0
Fork 1
Code Issues 0 Releases 8 Wiki Activity
Saltstack Official Linux Formula
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
615 Commits
26 Branches
Tree: 453ac048dd
Branches Tags
${ item.name }
Create branch ${ searchTerm }
from '453ac048dd'
${ noResults }
linux-formula/linux/system/repo.sls

251 lines
7.2KB
Raw Blame History 

  1. {%- from "linux/map.jinja" import system with context %}

  2. {%- if system.enabled %}

  3. 

  4. linux_repo_prereq_pkgs:

  5.   pkg.installed:

  6.   - pkgs: {{ system.pkgs }}

  7. 

  8. # global proxy setup

  9. {%- if system.proxy.get('pkg', {}).get('enabled', False) %}

  10. {%- if grains.os_family == 'Debian' %}

  11. 

  12. /etc/apt/apt.conf.d/99proxies-salt:

  13.   file.managed:

  14.   - template: jinja

  15.   - source: salt://linux/files/apt.conf.d_proxies

  16.   - defaults:

  17.       external_host: False

  18.       https: {{ system.proxy.get('pkg', {}).get('https', None) | default(system.proxy.get('https', None), true) }}

  19.       http: {{ system.proxy.get('pkg', {}).get('http', None) | default(system.proxy.get('http', None), true) }}

  20.       ftp: {{ system.proxy.get('pkg', {}).get('ftp', None) | default(system.proxy.get('ftp', None), true) }}

  21. 

  22. {%- else %}

  23. 

  24. /etc/apt/apt.conf.d/99proxies-salt:

  25.   file.absent

  26. 

  27. {%- endif %}

  28. {%- endif %}

  29. 

  30. {% set default_repos = {} %}

  31. 

  32. {%- if system.purge_repos|default(False) %}

  33. 

  34. purge_sources_list_d_repos:

  35.    file.directory:

  36.    - name: /etc/apt/sources.list.d/

  37.    - clean: True

  38. 

  39. {%- endif %}

  40. 

  41. {%- for name, repo in system.repo.items() %}

  42. {%- set name=repo.get('name', name) %}

  43. {%- if grains.os_family == 'Debian' %}

  44. 

  45. # per repository proxy setup

  46. {%- if repo.get('proxy', {}).get('enabled', False) %}

  47. {%- set external_host = repo.proxy.get('host', None) or repo.source.split('/')[2] %}

  48. /etc/apt/apt.conf.d/99proxies-salt-{{ name }}:

  49.   file.managed:

  50.   - template: jinja

  51.   - source: salt://linux/files/apt.conf.d_proxies

  52.   - defaults:

  53.       external_host: {{ external_host }}

  54.       https: {{ repo.proxy.get('https', None) or system.proxy.get('pkg', {}).get('https', None) | default(system.proxy.get('https', None), True) }}

  55.       http: {{ repo.proxy.get('http', None) or system.proxy.get('pkg', {}).get('http', None) | default(system.proxy.get('http', None), True) }}

  56.       ftp: {{ repo.proxy.get('ftp', None) or system.proxy.get('pkg', {}).get('ftp', None) | default(system.proxy.get('ftp', None), True) }}

  57. {%- else %}

  58. /etc/apt/apt.conf.d/99proxies-salt-{{ name }}:

  59.   file.absent

  60. {%- endif %}

  61. 

  62. {%- if repo.pin is defined %}

  63. 

  64. linux_repo_{{ name }}_pin:

  65.   file.managed:

  66.     - name: /etc/apt/preferences.d/{{ name }}

  67.     - source: salt://linux/files/preferences_repo

  68.     - template: jinja

  69.     - defaults:

  70.         repo_name: {{ name }}

  71. 

  72. {%- else %}

  73. 

  74. linux_repo_{{ name }}_pin:

  75.   file.absent:

  76.     - name: /etc/apt/preferences.d/{{ name }}

  77. 

  78. {%- endif %}

  79. 

  80. {%- if repo.get('key') %} {# 2 #}

  81. 

  82. linux_repo_{{ name }}_key:

  83.   cmd.run:

  84.     - name: |

  85.             echo "{{ repo.key | indent(12) }}" | apt-key add -

  86.     - require_in:

  87.     {%- if repo.get('default', False) %}

  88.       - file: default_repo_list

  89.     {% else %}

  90.       - pkgrepo: linux_repo_{{ name }}

  91.     {% endif %}

  92. 

  93. {# key_url fetch by curl when salt <2017.7, higher version of salt has fixed bug for using a proxy_host/port specified at minion.conf #}

  94. {#

  95.    NOTE: curl/cmd.run usage to fetch gpg key has limited functionality behind proxy. Environments with salt >= 2017.7 should use

  96.          key_url specified at pkgrepo.manage state (which uses properly configured http_host at minion.conf). Older versions of

  97.          salt require to have proxy set at ENV and curl way to fetch gpg key here can have a sense for backward compatibility.

  98. 

  99.          Be aware that as of salt 2018.3 no_proxy option is not implemented at all.

  100. #}

  101. {%- elif repo.key_url|default(False) and grains['saltversioninfo'] < [2017, 7] and not repo.key_url.startswith('salt://') %}

  102. 

  103. 

  104. linux_repo_{{ name }}_key:

  105.   cmd.run:

  106.     - name: "no_proxy=${no_proxy:-{{ system.proxy.get('noproxy', []) |join(',') }}} http_proxy=${http_proxy:-{{ system.proxy.get('http', '') }}} https_proxy=${https_proxy:-{{ system.proxy.get('https', '') }}} curl -sL {{ repo.key_url }} | apt-key add -"

  107.     - require_in:

  108.     {%- if repo.get('default', False) %}

  109.       - file: default_repo_list

  110.     {% else %}

  111.       - pkgrepo: linux_repo_{{ name }}

  112.     {% endif %}

  113. 

  114. {%- endif %} {# 2 #}

  115. 

  116. {%- if repo.get('default', False) %}   {# 1 #}

  117.   {%- do default_repos.update({name: repo}) %}  {# for 'default' repos #}

  118. 

  119. {%- else %} {# for all others repos #}

  120. 

  121. {%- if repo.get('enabled', True) %}

  122. 

  123. linux_repo_{{ name }}:

  124.   pkgrepo.managed:

  125.   {%- if repo.ppa is defined %}

  126.   - ppa: {{ repo.ppa }}

  127.   {%- else %}

  128.   - humanname: {{ name }}

  129.   - name: {{ repo.source }}

  130.   {%- if repo.architectures is defined %}

  131.   - architectures: {{ repo.architectures }}

  132.   {%- endif %}

  133.   - file: /etc/apt/sources.list.d/{{ name }}.list

  134.   - clean_file: {{ repo.clean|default(True) }}

  135.   {%- if repo.key_id is defined %}

  136.   - keyid: {{ repo.key_id }}

  137.   {%- endif %}

  138.   {%- if repo.key_server is defined %}

  139.   - keyserver: {{ repo.key_server }}

  140.   {%- endif %}

  141.   {%- if repo.key_url is defined and (grains['saltversioninfo'] >= [2017, 7] or repo.key_url.startswith('salt://')) %}

  142.   - key_url: {{ repo.key_url }}

  143.   {%- endif %}

  144.   - consolidate: {{ repo.get('consolidate', False) }}

  145.   - clean_file: {{ repo.get('clean_file', False) }}

  146.   - refresh_db: {{ repo.get('refresh_db', True) }}

  147.   - require:

  148.     - pkg: linux_repo_prereq_pkgs

  149.   {%- if repo.get('proxy', {}).get('enabled', False) %}

  150.     - file: /etc/apt/apt.conf.d/99proxies-salt-{{ name }}

  151.   {%- endif %}

  152.   {%- if system.proxy.get('pkg', {}).get('enabled', False) %}

  153.     - file: /etc/apt/apt.conf.d/99proxies-salt

  154.   {%- endif %}

  155.   {%- if system.purge_repos|default(False) %}

  156.     - file: purge_sources_list_d_repos

  157.   {%- endif %}

  158.   {%- endif %}

  159. 

  160. {%- else %}

  161. 

  162. linux_repo_{{ name }}_absent:

  163.   pkgrepo.absent:

  164.     {%- if repo.ppa is defined %}

  165.     - ppa: {{ repo.ppa }}

  166.     {%- if repo.key_id is defined %}

  167.     - keyid_ppa: {{ repo.keyid_ppa }}

  168.     {%- endif %}

  169.     {%- else %}

  170.     - file: /etc/apt/sources.list.d/{{ name }}.list

  171.     {%- if repo.key_id is defined %}

  172.     - keyid: {{ repo.key_id }}

  173.     {%- endif %}

  174.     {%- endif %}

  175.   file.absent:

  176.     - name: /etc/apt/sources.list.d/{{ name }}.list

  177. 

  178. {%- endif %}

  179. 

  180. {%- endif %} {# 1 #}

  181. 

  182. {#- os_family Debian #}

  183. {%- endif %}

  184. 

  185. {%- if grains.os_family == "RedHat" %}

  186. 

  187. {%- if repo.get('enabled', True) %}

  188. 

  189. {%- if repo.get('proxy', {}).get('enabled', False) %}

  190. # PLACEHOLDER

  191. # TODO, implement per proxy configuration for Yum

  192. {%- endif %}

  193. 

  194. {%- if not repo.get('default', False) %}

  195. linux_repo_{{ name }}:

  196.   pkgrepo.managed:

  197.   - name: {{ name }}

  198.   - humanname: {{ repo.get('humanname', name) }}

  199.   {%- if repo.mirrorlist is defined %}

  200.   - mirrorlist: {{ repo.mirrorlist }}

  201.   {%- else %}

  202.   - baseurl: {{ repo.source }}

  203.   {%- endif %}

  204.   - gpgcheck: {% if repo.get('gpgcheck', False) %}1{% else %}0{% endif %}

  205.   {%- if repo.gpgkey is defined %}

  206.   - gpgkey: {{ repo.gpgkey }}

  207.   {%- endif %}

  208.   - require:

  209.     - pkg: linux_repo_prereq_pkgs

  210. {%- endif %}

  211. 

  212. {#- repo.enabled is false #}

  213. {%- else %}

  214.   pkgrepo.absent:

  215.     - name: {{ repo.source }}

  216. {%- endif %}

  217. 

  218. {#- os_family Redhat #}

  219. {%- endif %}

  220. 

  221. {#- repo.items() loop #}

  222. {%- endfor %}

  223. 

  224. {%- if default_repos|length > 0 and grains.os_family == 'Debian' %}

  225. 

  226. default_repo_list:

  227.   file.managed:

  228.     - name: /etc/apt/sources.list

  229.     - source: salt://linux/files/sources.list

  230.     - template: jinja

  231.     - user: root

  232.     - group: root

  233.     - mode: 0644

  234. {%- if system.purge_repos|default(False) %}

  235.     - replace: True

  236. {%- endif %}

  237.     - defaults:

  238.         default_repos: {{ default_repos }}

  239.     - require:

  240.       - pkg: linux_repo_prereq_pkgs

  241. 

  242. refresh_default_repo:

  243.   module.wait:

  244.     - name: pkg.refresh_db

  245.     - watch:

  246.       - file: default_repo_list

  247. 

  248. {%- endif %}

  249. 

  250. {%- endif %}