From: Thierry Parmentelat <thierry.parmentelat@sophia.inria.fr>
Date: Wed, 27 Jan 2010 21:41:40 +0000 (+0000)
Subject: plc.d/packages part of nodeyum
X-Git-Tag: nodeconfig-5.0-1^2~3
X-Git-Url: http://git.onelab.eu/?p=nodeconfig.git;a=commitdiff_plain;h=a01bdfc9dd97fd0d95db8befe614f0aef61146ff

plc.d/packages part of nodeyum
---

diff --git a/plc.d/packages b/plc.d/packages
new file mode 100755
index 0000000..e932eb0
--- /dev/null
+++ b/plc.d/packages
@@ -0,0 +1,131 @@
+#!/bin/bash
+# $Id$
+# $URL$
+#
+# priority: 1200
+#
+# Update node package repository metadata and sign packages
+#
+# Mark Huang <mlhuang@cs.princeton.edu>
+# Copyright (C) 2006 The Trustees of Princeton University
+#
+
+# Source function library and configuration
+. /etc/plc.d/functions
+. /etc/planetlab/plc_config
+
+# Be verbose
+set -x
+
+case "$1" in
+    start)
+	if [ "$PLC_BOOT_ENABLED" != "1" ] ; then
+	    exit 0
+	fi
+
+	MESSAGE=$"Signing and indexing node packages"
+	dialog "$MESSAGE"
+
+	shopt -s nullglob
+
+	shift
+	if [[ -z "$@" ]] ; then
+	    # use all subdirs in install-rpms by default
+	    repositories=/var/www/html/install-rpms/*
+	else
+	    # else use argv
+	    repositories="$@"
+	fi
+
+	### availability of repo indexing tools
+	# old one - might be needed for old-style nodes
+	type -p yum-arch > /dev/null && have_yum_arch="true"
+	# new one
+	type -p createrepo > /dev/null && have_createrepo="true"
+
+	for repository in $repositories ; do
+	    # the rpms that need signing
+	    new_rpms=
+	    # and the corresponding stamps
+	    new_stamps=
+	    # is there a need to refresh yum metadata
+	    need_yum_arch=
+	    need_createrepo=
+
+	    # right after installation, no package is present
+	    # but we still need to create index 
+	    [ -n "$have_yum_arch" -a ! -f $repository/headers/header.info ] && need_yum_arch=true
+	    [ -n "$have_createrepo" -a ! -f $repository/repodata/repomd.xml ] && need_createrepo=true
+	    
+	    for package in $(find $repository/ -name '*.rpm') ; do
+	        stamp=$repository/signed-stamps/$(basename $package).signed
+		# If package is newer than signature stamp
+		if [ $package -nt $stamp ] ; then
+		    new_rpms="$new_rpms $package"
+		    new_stamps="$new_stamps $stamp"
+		fi
+		# Or than yum-arch headers
+		[ -n "$have_yum_arch" ] && [ $package -nt $repository/headers/header.info ] && need_yum_arch=true
+		# Or than createrepo database
+		[ -n "$have_createrepo" ] && [ $package -nt $repository/repodata/repomd.xml ] && need_createrepo=true
+	    done
+
+	    if [ -n "$new_rpms" ] ; then
+		# Create a stamp once the package gets signed
+		mkdir $repository/signed-stamps 2> /dev/null
+
+		# Sign RPMS. setsid detaches rpm from the terminal,
+                # allowing the (hopefully blank) GPG password to be
+                # entered from stdin instead of /dev/tty.
+		echo | setsid rpm \
+		    --define "_signature gpg" \
+		    --define "_gpg_path /etc/planetlab" \
+		    --define "_gpg_name $PLC_MAIL_SUPPORT_ADDRESS" \
+		    --resign $new_rpms && touch $new_stamps
+		check
+	    fi
+
+	    # Update repository index / yum metadata. 
+
+	    if [ -n "$need_yum_arch" ] ; then
+		# yum-arch sometimes leaves behind
+		# .oldheaders and .olddata directories accidentally.
+		rm -rf $repository/{.oldheaders,.olddata}
+		yum-arch $repository 
+		check
+	    fi
+
+	    if [ -n "$need_createrepo" ] ; then
+		if [ -f $repository/yumgroups.xml ] ; then
+		    createrepo --quiet -g yumgroups.xml $repository 
+		else
+		    createrepo --quiet $repository
+		fi
+		check
+	    fi
+	done
+
+	result "$MESSAGE"
+	;;
+    clean)
+	shift
+	if [[ -z "$@" ]] ; then
+	    # use all subdirs in install-rpms by default
+	    repositories=/var/www/html/install-rpms/*
+	else
+	    # else use argv
+	    repositories=$@
+	fi
+
+	for repository in $repositories ; do
+	    rm -rf $repository/signed-stamps
+	    rm -rf $repository/repodata
+	    rm -rf $repository/headers
+	done
+	;;
+    *)
+        echo "Usage: $0 start|clean [repo ..]"
+	;;
+esac
+
+exit $ERRORS