X-Git-Url: https://review.fuel-infra.org/gitweb?a=blobdiff_plain;f=lib%2Fpuppet%2Fprovider%2Fapt_key%2Fapt_key.rb;h=2bcaf8d32ec87589e222da7356e1d49f18fad36c;hb=c84e842467742f31fba17f243d4c75f9edbc14a9;hp=2646422a581d4e1bd3ae7f79a33f464f37978ab6;hpb=7a52dc6237285c6d9d5e39a6f3f50ee8cba437b7;p=puppet-modules%2Fpuppetlabs-apt.git diff --git a/lib/puppet/provider/apt_key/apt_key.rb b/lib/puppet/provider/apt_key/apt_key.rb index 2646422..2bcaf8d 100644 --- a/lib/puppet/provider/apt_key/apt_key.rb +++ b/lib/puppet/provider/apt_key/apt_key.rb @@ -19,7 +19,7 @@ Puppet::Type.type(:apt_key).provide(:apt_key) do commands gpg: '/usr/bin/gpg' def self.instances - cli_args = ['adv', '--list-keys', '--with-colons', '--fingerprint', '--fixed-list-mode'] + cli_args = ['adv', '--no-tty', '--list-keys', '--with-colons', '--fingerprint', '--fixed-list-mode'] key_output = apt_key(cli_args).encode('UTF-8', 'binary', invalid: :replace, undef: :replace, replace: '') @@ -160,7 +160,7 @@ Puppet::Type.type(:apt_key).provide(:apt_key) do # confirm that the fingerprint from the file, matches the long key that is in the manifest if name.size == 40 if File.executable? command(:gpg) - extracted_key = execute(["#{command(:gpg)} --with-fingerprint --with-colons #{file.path} | awk -F: '/^fpr:/ { print $10 }'"], failonfail: false) + extracted_key = execute(["#{command(:gpg)} --no-tty --with-fingerprint --with-colons #{file.path} | awk -F: '/^fpr:/ { print $10 }'"], failonfail: false) extracted_key = extracted_key.chomp found_match = false @@ -179,8 +179,31 @@ Puppet::Type.type(:apt_key).provide(:apt_key) do file end + # Update a key if it is expired + def update_expired_key + # Return without doing anything if refresh or expired is false + return unless resource[:refresh] == true && resource[:expired] == true + + # Execute command to update key + command = [] + + unless resource[:source].nil? && resource[:content].nil? + raise(_('an unexpected condition occurred while trying to add the key: %{_resource}') % { _resource: resource[:id] }) + end + + # Breaking up the command like this is needed because it blows up + # if --recv-keys isn't the last argument. + command.push('adv', '--no-tty', '--keyserver', resource[:server]) + unless resource[:options].nil? + command.push('--keyserver-options', resource[:options]) + end + command.push('--recv-keys', resource[:id]) + end + def exists? - @property_hash[:ensure] == :present + update_expired_key + # report expired keys as non-existing when refresh => true + @property_hash[:ensure] == :present && !(resource[:refresh] && @property_hash[:expired]) end def create @@ -188,7 +211,7 @@ Puppet::Type.type(:apt_key).provide(:apt_key) do if resource[:source].nil? && resource[:content].nil? # Breaking up the command like this is needed because it blows up # if --recv-keys isn't the last argument. - command.push('adv', '--keyserver', resource[:server]) + command.push('adv', '--no-tty', '--keyserver', resource[:server]) unless resource[:options].nil? command.push('--keyserver-options', resource[:options]) end