plc.d/packages

   1 #!/bin/bash
   2 # $Id$
   3 # $URL$
   4 #
   5 # priority: 1200
   6 #
   7 # Update node package repository metadata and sign packages
   8 #
   9 # Mark Huang <mlhuang@cs.princeton.edu>
  10 # Copyright (C) 2006 The Trustees of Princeton University
  11 #
  12
  13 # Source function library and configuration
  14 . /etc/plc.d/functions
  15 . /etc/planetlab/plc_config
  16
  17 # Be verbose
  18 set -x
  19
  20 case "$1" in
  21     start)
  22         if [ "$PLC_BOOT_ENABLED" != "1" ] ; then
  23             exit 0
  24         fi
  25
  26         MESSAGE=$"Signing and indexing node packages"
  27         dialog "$MESSAGE"
  28
  29         shopt -s nullglob
  30
  31         shift
  32         if [[ -z "$@" ]] ; then
  33             # use all subdirs in install-rpms by default
  34             repositories=/var/www/html/install-rpms/*
  35         else
  36             # else use argv
  37             repositories="$@"
  38         fi
  39
  40         ### availability of repo indexing tools
  41         # old one - might be needed for old-style nodes
  42         type -p yum-arch > /dev/null && have_yum_arch="true"
  43         # new one
  44         type -p createrepo > /dev/null && have_createrepo="true"
  45
  46
  47         ### symlink vserver-PLDISTRO* and vserver-systemslices-PLDISTRO*
  48         ### packages to each repository to be able to create different
  49         ### flavours of vservers on nodes
  50         for repository1 in $repositories; do
  51             DISTRO=${PLC_FLAVOUR_SLICE_PLDISTRO}
  52             VSERVER_PKG=vserver-$(basename $repository1)
  53             VSERVER_SYS_SLICES_PKG=vserver-systemslices-$(basename $repository1)
  54             for repository2 in $repositories; do
  55                 if [[ $(basename $repository1) == ${DISTRO}* ]]  \
  56                     && [[ $(basename $repository2) == ${DISTRO}* ]] \
  57                     && [[ $repository1 != $repository2 ]] ; then
  58                         rm -rf $repository2/${VSERVER_PKG}*
  59                         rm -rf $repository2/${VSERVER_SYS_SLICES_PKG}*
  60
  61                         ln -s $repository1/${VSERVER_PKG}* $repository2
  62                         ln -s $repository1/${VSERVER_SYS_SLICES_PKG}* $repository2
  63                 fi
  64             done
  65         done
  66
  67         for repository in $repositories ; do
  68             # the rpms that need signing
  69             new_rpms=
  70             # and the corresponding stamps
  71             new_stamps=
  72             # is there a need to refresh yum metadata
  73             need_yum_arch=
  74             need_createrepo=true # always run createrepo as links may change for vserver packages
  75
  76             # right after installation, no package is present
  77             # but we still need to create index
  78             [ -n "$have_yum_arch" -a ! -f $repository/headers/header.info ] && need_yum_arch=true
  79             [ -n "$have_createrepo" -a ! -f $repository/repodata/repomd.xml ] && need_createrepo=true
  80
  81             for package in $(find $repository/ -name '*.rpm') ; do
  82                 stamp=$repository/signed-stamps/$(basename $package).signed
  83                 # If package is newer than signature stamp
  84                 if [ $package -nt $stamp ] ; then
  85                     new_rpms="$new_rpms $package"
  86                     new_stamps="$new_stamps $stamp"
  87                 fi
  88                 # Or than yum-arch headers
  89                 [ -n "$have_yum_arch" ] && [ $package -nt $repository/headers/header.info ] && need_yum_arch=true
  90                 # Or than createrepo database
  91                 [ -n "$have_createrepo" ] && [ $package -nt $repository/repodata/repomd.xml ] && need_createrepo=true
  92             done
  93
  94             if [ -n "$new_rpms" ] ; then
  95                 # Create a stamp once the package gets signed
  96                 mkdir $repository/signed-stamps 2> /dev/null
  97
  98                 # Sign RPMS. setsid detaches rpm from the terminal,
  99                 # allowing the (hopefully blank) GPG password to be
 100                 # entered from stdin instead of /dev/tty.
 101                 echo | setsid rpm \
 102                     --define "_signature gpg" \
 103                     --define "_gpg_path /etc/planetlab" \
 104                     --define "_gpg_name $PLC_MAIL_SUPPORT_ADDRESS" \
 105                     --resign $new_rpms && touch $new_stamps
 106                 check
 107             fi
 108
 109             # Update repository index / yum metadata.
 110
 111             if [ -n "$need_yum_arch" ] ; then
 112                 # yum-arch sometimes leaves behind
 113                 # .oldheaders and .olddata directories accidentally.
 114                 rm -rf $repository/{.oldheaders,.olddata}
 115                 yum-arch $repository
 116                 check
 117             fi
 118
 119             if [ -n "$need_createrepo" ] ; then
 120                 if [ -f $repository/yumgroups.xml ] ; then
 121                     createrepo --quiet -g yumgroups.xml $repository
 122                 else
 123                     createrepo --quiet $repository
 124                 fi
 125                 check
 126             fi
 127         done
 128
 129         result "$MESSAGE"
 130         ;;
 131     clean)
 132         shift
 133         if [[ -z "$@" ]] ; then
 134             # use all subdirs in install-rpms by default
 135             repositories=/var/www/html/install-rpms/*
 136         else
 137             # else use argv
 138             repositories=$@
 139         fi
 140
 141         for repository in $repositories ; do
 142             rm -rf $repository/signed-stamps
 143             rm -rf $repository/repodata
 144             rm -rf $repository/headers
 145         done
 146         ;;
 147     *)
 148         echo "Usage: $0 start|clean [repo ..]"
 149         ;;
 150 esac
 151
 152 exit $ERRORS