File manager - Edit - /opt/saltstack/salt/lib/python3.10/site-packages/salt/modules/__pycache__/rpmbuild_pkgbuild.cpython-310.pyc
Back
o ;j�a � @ sX d Z ddlZddlZddlZddlZddlZddlZddlZddlZddl Z ddl Z ddl Z ddlZ ddlZ ddlZ ddlmZmZ dZz ddlZddlZ dZW n eyY Y nw e�e�ZdZdd� Z d(d d �Z d(d d �Z d)dd�Z d*dd�Z dd� Z!d)dd�Z"dd� Z#dd� Z$dd � Z%d d � Z& d+d d �Z' !d,d"d#�Z( $ %d-d&d'�Z)dS ).z� RPM Package builder system .. versionadded:: 2015.8.0 This system allows for all of the components to build rpms safely in chrooted environments. This also provides a function to generate yum repositories This module implements the pkgbuild interface � N)�CommandExecutionError�SaltInvocationErrorFTZpkgbuildc C sP d} g d�}|D ] }t jj�|�sd} nqtr&| s&t�dd�dv r$tS dS dS )zR Confirm this module is on a RPM based system, and has required utilities F)Zgpg�rpm�rpmbuild�mockZ createrepoT� os_family)�RedHatZSuser )Fz�The rpmbuild module could not be loaded: requires python-gnupg, gpg, rpm, rpmbuild, mock and createrepo utilities to be installed)�salt�utils�path�which�HAS_LIBS� __grains__�get�__virtualname__)Z missing_utilZ utils_reqdZ named_util� r �R/opt/saltstack/salt/lib/python3.10/site-packages/salt/modules/rpmbuild_pkgbuild.py� __virtual__- s �r �rootc C s� t j�d| �}t j�|d�}t j�|�s td || dd� t j�|d�}t j�|�s4td || dd� t j�|d�}tjj� |d��+}|� tjj � d|� d ��� |� d � |� d � |� d � |� d � W d � dS 1 sqw Y dS )z= Create the .rpmmacros file in user's home directory �~r �file.makedirs_permsr ��name�user�group� .rpmmacros�wz %_topdir � z%signature gpg z %_source_filedigest_algorithm 8 z %_binary_filedigest_algorithm 8 z#%_gpg_name packaging@saltstack.com N) �osr � expanduser�join�isdir�__salt__r r �filesZfopen�writeZ stringutilsZto_str)�runas�homeZ rpmbuilddirZmockdir� rpmmacrosZafiler r r �_create_rpmmacrosF s "�r( c C s> t �� }g d�}|D ]}tj�||�}td || dd� q |S )z# Create the rpm build tree )ZBUILDZRPMS�SOURCES�SPECS�SRPMSr r r )�tempfile�mkdtempr r r r" )r% Zbasedir�pathsr �fullr r r �_mk_tree\ s r0 �basec C s. t j�|�}t j�| d|�}td |||d�S )z9 Get the spec file and place it in the SPECS dir r* � cp.get_url��saltenv)r r �basenamer r" )� tree_base�spec�templater4 Zspec_tgt�destr r r � _get_spech s r: c C sd t j�|�}tj�|�}tj�| d|�}|jr!td |||d�}nt � ||� td ||dd� dS )zA Get the named sources and place them into the tree_base r) r2 r3 � file.chownr �r r r N) �urllib�parse�urlparser r r5 r �schemer" �shutil�copy)r6 �sourcer4 r% �parsedZsbaser9 Zlsrcr r r �_get_srcq s rE c C sR | � d�}|d dkrd|d � d�}|S |d dv r%d|d � d�}|S d }|S ) zD Get the distribution string for use with rpmbuild and mock �-r Zamzn2z--define "dist .�"� )�6�7�8z--define "dist .el� )�split)�tgtZtgtattrs�distsetr r r � _get_distset s ��rP c C s� d}| du r|S t | t�std��| D ]/}tj�|�}tj�|�}tj� ||�}|j r5t d |||d� nt � ||� |d|� �7 }q|S )zH Get include string for list of dependent rpms to build package rL Nz6'deps' must be a Python list or comma-separated stringr2 r3 � )� isinstance�listr r= r> r? r r r5 r r@ r" rA rB )�depsr6 r4 � deps_listZdeprpmrD Zdepbaser9 r r r � _get_deps� s � rV c C s$ d} t d | �r dS td| � d���)zC Check for /usr/libexec/gpg-preset-passphrase is installed z"/usr/libexec/gpg-preset-passphrasezfile.file_existsTz utility 'z' needs to be installed)r" r )Z util_namer r r � _check_repo_gpg_phrase_utils� s rW c C s� d}d}d}d}d} d} d} d} t �d�dkr t �d�dkr d } | du�r<d �|td d d��} d �|td d d��}| du sC|du rGtd��ztd || |d� td |||d� W n tyi td�| ���w td ||d�}|D ] }| |d dd� kr�|d }|d }| r�|d }|d } nqt| r�d}td |||d�}t|�� �}z)|D ]$}|�d�r�t|�� � � � }||kr�t|�� d�}|d � � � � } nq�W n t y� td �||���w |du r�td �| |���|�rtd d �} | �rt � d �| |�}td! |||d�} | dk�rtd"�| ���|�r!d#�|d �} d$| � �}td! ||d d%�} | dk�r<td&�| | ���| || | fS )'a Obtain gpg key resource infomation to sign repo files with keyid Optional Key ID to use in signing packages and repository. Utilizes Public and Private keys associated with keyid which have been loaded into the minion's Pillar data. env A dictionary of environment variables to be utilized in creating the repository. use_passphrase : False Use a passphrase with the signing key presented in ``keyid``. Passphrase is received from Pillar data which could be passed on the command line with ``pillar`` parameter. gnupghome : /etc/salt/gpgkeys Location where GPG related files are stored, used with ``keyid``. runas : root User to create the repository as, and optionally sign packages. .. note:: Ensure the user has correct permissions to any files and directories which are to be utilized. Returns: tuple use_gpg_agent True | False, Redhat 8 now makes use of a gpg-agent similar ot Debian local_keyid key id to use in signing define_gpg_name string containing definition to use with addsign (use_gpg_agent False) phrase pass phrase (may not be used) NrL r Fr r Zosmajorrelease� Tz{}/{}z pillar.getZgpg_pkg_pub_keynameZgpg_pkg_priv_keynamezJPillar data should contain Public and Private keys associated with 'keyid'zgpg.import_key)r �filename� gnupghomezZPublic and Private key files associated with Pillar data and 'keyid' {} could not be foundz gpg.list_keys)r rZ �keyidZuidsZ fingerprintz%gpg --with-keygrip --list-secret-keyszcmd.run)r% �envZsec�=rH zFunable to find keygrip associated with fingerprint '{}' for keyid '{}'z6The key ID '{}' was not found in GnuPG keyring at '{}'Zgpg_passphrasezJ/usr/libexec/gpg-preset-passphrase --verbose --preset --passphrase "{}" {}� cmd.retcodezFFailed to preset passphrase, error {1}, check logs for further detailsz3--define='%_signature gpg' --define='%_gpg_name {}'z rpm --import )r% �use_vtz]Failed to import public key from file {} with return error {}, check logs for further details)r r �formatr" r �iter� splitlines� startswith�next�lstrip�rstriprM � StopIterationrW )r[ r\ �use_passphraserZ r% Zlocal_keygrip_to_useZlocal_key_fingerprint� local_keyidZ local_uids�define_gpg_name�phrase�retrc� use_gpg_agentZpkg_pub_key_fileZpkg_priv_key_fileZ local_keysZgpg_key�cmdZlocal_keys2_keygripZ local_keys2�lineZline_fingerprintZlkeygripr r r �_get_gpg_key_resources� s� + ���� � ��� � ���� � ��� �� rp c C sn t �dt j�}d}|| }d}d|� �} d|� d|� �} t�tjjj| d�} z�zSd\} } tjj j | d | d d d �}|j rj|� � \} } | rN|� | �rN|�|� n|d 7 }||krbtd �|t|| ����t�|� |j s;|j}|dkrytd �||���W n tjj jy� } zt�� }t�| ||� W Y d}~nd}~ww W |jd d d� dS W |jd d d� dS |jd d d� w )z4 Sign file with provided key and definition zEnter pass phrase: g �?r zFailed to sign file zrpm � --addsign N)NNT)�shell� preexec_fnZ stream_stdoutZ stream_stderrrH z<Attemping to sign file {} failed, timed out after {} secondsz*Signing file {} failed with proc.status {})� terminate�kill)�re�compile�M� functools�partialr r r Zchugid_and_umaskZvtZTerminalZhas_unread_data�recv�searchZsendliner r` �int�time�sleepZ exitstatusZTerminalException� traceback� format_exc�log�error�close)r% rj rk �abs_file�timeoutZSIGN_PROMPT_RE�intervalZnumber_retriesZ times_loopedZ error_msgrn rs �stdout�stderr�procZproc_exitstatus�errZtracer r r � _sign_fileS s\ � �� ������� �"r� c C sB d|� d|� �}t d || |d|d�}|dkr td�||���dS ) z9 Sign file with provided key utilizing gpg-agent z rpmsign --verbose --key-id=rq r^ T)r% �cwdr_ r\ r z\Signing encountered errors for command '{}', return error {}, check logs for further detailsN)r" r r` )r% ri r� �repodirr\ r� rn rl r r r �_sign_files_with_gpg_agent� s ��r� c C s t |� t|�}t||||�}td ||dd� td ||dd� t|t�r+|�d�}|D ] } t|| ||� q-d�||�} td | |d�} | dkrSt d �| ||| ���t j � |d �} g } t j � | �sktd | |dd � t �| �D ]}t j � | |�}t j � | |�}t�||� | �|� qp| S ) a� Create a source rpm from the given spec file and sources CLI Example: .. code-block:: bash salt '*' pkgbuild.make_src_pkg /var/www/html/ https://raw.githubusercontent.com/saltstack/libnacl/master/pkg/rpm/python-libnacl.spec https://pypi.python.org/packages/source/l/libnacl/libnacl-1.3.5.tar.gz This example command should build the libnacl SOURCE package and place it in /var/www/html/ on the minion .. versionchanged:: 2017.7.0 dest_dir The directory on the minion to place the built package(s) spec The location of the spec file (used for rpms) sources The list of package sources env A dictionary of environment variables to be set prior to execution. template Run the spec file through a templating engine Optional argument, allows for no templating engine used to be if none is desired. saltenv The saltenv to use for files downloaded from the salt filesever runas The user to run the build process as .. versionadded:: 2018.3.3 .. note:: using SHA256 as digest and minimum level dist el6 r; r r< �,zDrpmbuild --verbose --define "_topdir {}" -bs --define "dist .el6" {}r^ �r% r z�Make source package for destination directory {}, spec {}, sources {}, failed with return error {}, check logs for further detailsr+ r r )r( r0 r: r" rR �strrM rE r` r r r r r! �listdirrA rB �append)�dest_dirr7 �sourcesr\ r8 r4 r% r6 Z spec_path�srcrn rl �srpms�retZfn_r/ rN r r r � make_src_pkg� s< 2 ��� r� �/var/log/salt/pkgbuildc C s� i } z t d || dd� W n ty& } z | jtjkr � W Y d} ~ nd} ~ ww tj�|d�} t�� } z t | |||||| �}W n t y\ } zt � | � t �d� | W Y d} ~ S d} ~ ww t|�}d}t�� }t|||�}d}|D �]K}tj�|�}t�� }�z8�zt d || dd� t d || dd� d |� d |� d �}|t d || d �O }|r�|�� s�d�||||�}|t d || d �O }|d7 }d�|||||�}|t d || d �O }ddd| � d�|g}t d |dd�}t�|�D ]�}tj�||�}|�d��r:tj�| |�} z t d | | dd� W n t�y) } z| jtjk�r � W Y d} ~ nd} ~ ww t �|| � | �dg ��| � q�|�d ��rWtj�||�} t �|| � | �d g ��| � q�tj�||�} z t d || dd� W n t�y� } z| jtjk�rz� W Y d} ~ nd} ~ ww t �|| � | �d g ��| � q�W n t �y� } z t �d || � W Y d} ~ nd} ~ ww W t � |� qqt � |� w |dk�r�td �||||���t � |� t � | � | S )!aU Given the package destination directory, the spec file source and package sources, use mock to safely build the rpm defined in the spec file CLI Example: .. code-block:: bash salt '*' pkgbuild.build mock epel-7-x86_64 /var/www/html https://raw.githubusercontent.com/saltstack/libnacl/master/pkg/rpm/python-libnacl.spec https://pypi.python.org/packages/source/l/libnacl/libnacl-1.3.5.tar.gz This example command should build the libnacl package for rhel 7 using user mock and place it in /var/www/html/ on the minion r; r r< Nr+ zFailed to make src packagerL r z mock --root=z --resultdir=z --initr^ r� z-mock --root={} --resultdir={} --install {} {}z --no-cleanz&mock --root={} --resultdir={} {} {} {}r z-qpz --queryformatz /%{name}/%{version}-%{release}zcmd.run_stdoutF)Z python_shellzsrc.rpmr r zSource Packages�.rpmZPackagesz Log FileszError building from %s: %sz�Building packages for destination directory {}, spec {}, sources {}, failed with return error {}, check logs for further details)r" �OSError�errnoZEEXISTr r r r, r- r� � ExceptionrA �rmtreer� r� rP rV �dirname�isspacer` r� �endswithrB � setdefaultr� r ) r% rN r� r7 r� rT r\ r8 r4 Zlog_dirr� �excZsrpm_dirZsrpm_build_dirr� rO ZnocleanZdeps_dirrU rl ZsrpmZdbaseZ results_dirrn ZcmdlistZlog_destrY r/ ZsdestZbdistZlog_filer r r �build� s� ���� �� � �� � ��� � ��� � ��� �� r� �/etc/salt/gpgkeys� .@c C s� t j�d| �}t j�|d�}t j�|�st|� |r%|du r%i }||d< t|||||�\} } } } t �| �D ]"} | �d�rXt j�| | �}| rPt || || ||� q6t || | ||� q6d| � �}t d ||d�}|S ) a Make a package repository and optionally sign packages present Given the repodir, create a ``yum`` repository out of the rpms therein and optionally sign it and packages present, the name is directory to turn into a repo. This state is best used with onchanges linked to your package building states. repodir The directory to find packages that will be in the repository. keyid .. versionchanged:: 2016.3.0 Optional Key ID to use in signing packages and repository. Utilizes Public and Private keys associated with keyid which have been loaded into the minion's Pillar data. For example, contents from a Pillar data file with named Public and Private keys as follows: .. code-block:: yaml gpg_pkg_priv_key: | -----BEGIN PGP PRIVATE KEY BLOCK----- Version: GnuPG v1 lQO+BFciIfQBCADAPCtzx7I5Rl32escCMZsPzaEKWe7bIX1em4KCKkBoX47IG54b w82PCE8Y1jF/9Uk2m3RKVWp3YcLlc7Ap3gj6VO4ysvVz28UbnhPxsIkOlf2cq8qc . . Ebe+8JCQTwqSXPRTzXmy/b5WXDeM79CkLWvuGpXFor76D+ECMRPv/rawukEcNptn R5OmgHqvydEnO4pWbn8JzQO9YX/Us0SMHBVzLC8eIi5ZIopzalvX =JvW8 -----END PGP PRIVATE KEY BLOCK----- gpg_pkg_priv_keyname: gpg_pkg_key.pem gpg_pkg_pub_key: | -----BEGIN PGP PUBLIC KEY BLOCK----- Version: GnuPG v1 mQENBFciIfQBCADAPCtzx7I5Rl32escCMZsPzaEKWe7bIX1em4KCKkBoX47IG54b w82PCE8Y1jF/9Uk2m3RKVWp3YcLlc7Ap3gj6VO4ysvVz28UbnhPxsIkOlf2cq8qc . . bYP7t5iwJmQzRMyFInYRt77wkJBPCpJc9FPNebL9vlZcN4zv0KQta+4alcWivvoP 4QIxE+/+trC6QRw2m2dHk6aAeq/J0Sc7ilZufwnNA71hf9SzRIwcFXMsLx4iLlki inNqW9c= =s1CX -----END PGP PUBLIC KEY BLOCK----- gpg_pkg_pub_keyname: gpg_pkg_key.pub env .. versionchanged:: 2016.3.0 A dictionary of environment variables to be utilized in creating the repository. .. note:: This parameter is not used for making ``yum`` repositories. use_passphrase : False .. versionadded:: 2016.3.0 Use a passphrase with the signing key presented in ``keyid``. Passphrase is received from Pillar data which could be passed on the command line with ``pillar`` parameter. .. code-block:: bash pillar='{ "gpg_passphrase" : "my_passphrase" }' .. versionadded:: 3001.1 RHEL 8 and above leverages gpg-agent and gpg-preset-passphrase for caching keys, etc. gnupghome : /etc/salt/gpgkeys .. versionadded:: 2016.3.0 Location where GPG related files are stored, used with ``keyid``. runas : root .. versionadded:: 2016.3.0 User to create the repository as, and optionally sign packages. .. note:: Ensure the user has correct permissions to any files and directories which are to be utilized. timeout : 15.0 .. versionadded:: 2016.3.4 Timeout in seconds to wait for the prompt for inputting the passphrase. CLI Example: .. code-block:: bash salt '*' pkgbuild.make_repo /var/www/html/ r r NZ GNUPGHOMEr� zcreaterepo --update z cmd.run_allr� ) r r r r �existsr( rp r� r� r� r� r" )r� r[ r\ rh rZ r% r� r& r' rm ri rj rk Zfileusedr� rn rl r r r � make_repoe s, t � �� r� )r )r1 )r1 r )NNr1 r )r1 r� )NNFr� r r� )*�__doc__r� ry �loggingr rv rA r, r~ r� � urllib.parser= Zsalt.utils.filesr Zsalt.utils.pathZsalt.utils.userZ salt.utils.vtZsalt.exceptionsr r r ZgnupgZsalt.modules.gpg� ImportError� getLogger�__name__r� r r r( r0 r: rE rP rV rW rp r� r� r� r� r� r r r r �<module> sd � 5 �_ �|�
| ver. 1.4 |
Github
|
.
| PHP 8.2.30 | Generation time: 0 |
proxy
|
phpinfo
|
Settings