X-Git-Url: http://git.onelab.eu/?a=blobdiff_plain;f=NodeUpdate.py;h=28e635a9c0f4eaf0578590fad399e1dc3edad59d;hb=455647fc0794fbab68738c26ceecd483f77f865b;hp=e3f890a49e5bfa3cd7f52ac0fa876492efb33098;hpb=c2bea61a8fab54280e75251b2a4faab3478d7e5d;p=nodeupdate.git diff --git a/NodeUpdate.py b/NodeUpdate.py index e3f890a..28e635a 100644 --- a/NodeUpdate.py +++ b/NodeUpdate.py @@ -1,61 +1,13 @@ #!/usr/bin/python2 -# Copyright (c) 2003 Intel Corporation -# All rights reserved. - -# Redistribution and use in source and binary forms, with or without -# modification, are permitted provided that the following conditions are -# met: - -# * Redistributions of source code must retain the above copyright -# notice, this list of conditions and the following disclaimer. - -# * Redistributions in binary form must reproduce the above -# copyright notice, this list of conditions and the following -# disclaimer in the documentation and/or other materials provided -# with the distribution. - -# * Neither the name of the Intel Corporation nor the names of its -# contributors may be used to endorse or promote products derived -# from this software without specific prior written permission. - -# THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS -# "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT -# LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR -# A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE INTEL OR -# CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, -# EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, -# PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR -# PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF -# LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING -# NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS -# SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. - -# EXPORT LAWS: THIS LICENSE ADDS NO RESTRICTIONS TO THE EXPORT LAWS OF -# YOUR JURISDICTION. It is licensee's responsibility to comply with any -# export regulations applicable in licensee's jurisdiction. Under -# CURRENT (May 2000) U.S. export regulations this software is eligible -# for export from the U.S. and can be downloaded by or otherwise -# exported or reexported worldwide EXCEPT to U.S. embargoed destinations -# which include Cuba, Iraq, Libya, North Korea, Iran, Syria, Sudan, -# Afghanistan and any other country to which the U.S. has embargoed -# goods and services. - - import sys, os from random import Random import string -# not needed now -#PLANETLAB_BIN = "/usr/local/planetlab/bin/" -#sys.path.append(PLANETLAB_BIN) -#import BootServerRequest - - NODEUPDATE_PID_FILE= "/var/run/NodeUpdate.pid" # variables for cron file creation -TARGET_SCRIPT = '(echo && date && echo && /usr/local/planetlab/bin/NodeUpdate.py start) >>/var/log/NodeUpdate.log 2>&1' +TARGET_SCRIPT = '(echo && date && echo && /usr/bin/NodeUpdate.py start) >>/var/log/NodeUpdate.log 2>&1' TARGET_DESC = 'Update node RPMs periodically' TARGET_USER = 'root' TARGET_SHELL = '/bin/bash' @@ -65,6 +17,8 @@ YUM_PATH = "/usr/bin/yum" RPM_PATH = "/bin/rpm" +RPM_GPG_PATH = "/etc/pki/rpm-gpg" + # location of file containing http/https proxy info, if needed PROXY_FILE = '/etc/planetlab/http_proxy' @@ -154,6 +108,14 @@ class NodeUpdate: return 0 + def InstallKeys( self ): + Message( "\nRemoving any existing GPG signing keys from the RPM database" ) + os.system( "%s --allmatches -e gpg-pubkey" % RPM_PATH ) + + Message( "\nInstalling all GPG signing keys in %s" % RPM_GPG_PATH ) + os.system( "%s --import %s/*" % (RPM_PATH, RPM_GPG_PATH) ) + + def ClearRebootFlag( self ): os.system( "/bin/rm -rf %s" % REBOOT_FLAG ) @@ -165,14 +127,22 @@ class NodeUpdate: if self.doReboot == 0: Message( "\nIgnoring any reboot flags set by RPMs" ); + + Message( "\nChecking if yum supports SSL certificate checks" ) + if os.system( "%s --help | grep -q sslcertdir" % YUM_PATH ) == 0: + Message( "Yes, using --sslcertdir option" ) + sslcertdir = "--sslcertdir=" + SSL_CERT_DIR + else: + Message( "No, not using --sslcertdir option" ) + sslcertdir = "" Message( "\nUpdating PlanetLab group" ) - os.system( "%s --sslcertdir=%s -y groupupdate \"PlanetLab\"" % - (YUM_PATH,SSL_CERT_DIR) ) + os.system( "%s %s -y groupupdate \"PlanetLab\"" % + (YUM_PATH, sslcertdir) ) Message( "\nUpdating rest of system" ) - os.system( "%s --sslcertdir=%s -y update" % - (YUM_PATH,SSL_CERT_DIR) ) + os.system( "%s %s -y update" % + (YUM_PATH, sslcertdir) ) Message( "\nChecking for extra groups to update" ) if os.access(EXTRA_GROUPS_FILE, os.R_OK) and \ @@ -184,8 +154,8 @@ class NodeUpdate: else: for group in string.split(extra_groups_contents,"\n"): Message( "\nUpdating %s group" % group ) - os.system( "%s --sslcertdir=%s -y groupupdate \"%s\"" % - (YUM_PATH,SSL_CERT_DIR,group) ) + os.system( "%s %s -y groupupdate \"%s\"" % + (YUM_PATH, sslcertdir, group) ) else: Message( "No extra groups file found" ) @@ -194,7 +164,13 @@ class NodeUpdate: self.ClearRebootFlag() os.system( "/sbin/shutdown -r now" ) - + def RebuildRPMdb( self ): + Message( "\nRebuilding RPM Database." ) + try: os.system( "rm /var/lib/rpm/__db.*" ) + except Exception, err: print "RebuildRPMdb: %s" % err + try: os.system( "%s --rebuilddb" % RPM_PATH ) + except Exception, err: print "RebuildRPMdb: %s" % err + def RemoveRPMS( self ): Message( "\nLooking for RPMs to be deleted." ) @@ -277,7 +253,9 @@ if __name__ == "__main__": if not nodeupdate: Error( "Unable to initialize." ) else: + nodeupdate.RebuildRPMdb() nodeupdate.RemoveRPMS() + nodeupdate.InstallKeys() nodeupdate.CheckForUpdates() Message( "\nUpdate complete." )