8891256526
a. This allows us to not have to add a fake section in b. It will also preserver the files initial comments 2. Adjust how the new sections are being added and values are being written due to this change
92 lines
4.0 KiB
Python
92 lines
4.0 KiB
Python
# vi: ts=4 expandtab
|
|
#
|
|
# Copyright (C) 2009-2011 Canonical Ltd.
|
|
# Copyright (C) 2012 Hewlett-Packard Development Company, L.P.
|
|
#
|
|
# Author: Marc Cluet <marc.cluet@canonical.com>
|
|
# Based on code by Scott Moser <scott.moser@canonical.com>
|
|
# Author: Juerg Haefliger <juerg.haefliger@hp.com>
|
|
#
|
|
# This program is free software: you can redistribute it and/or modify
|
|
# it under the terms of the GNU General Public License version 3, as
|
|
# published by the Free Software Foundation.
|
|
#
|
|
# This program is distributed in the hope that it will be useful,
|
|
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
# GNU General Public License for more details.
|
|
#
|
|
# You should have received a copy of the GNU General Public License
|
|
# along with this program. If not, see <http://www.gnu.org/licenses/>.
|
|
|
|
from StringIO import StringIO
|
|
|
|
# Used since this can maintain comments
|
|
# and doesn't need a top level section
|
|
from configobj import ConfigObj
|
|
|
|
from cloudinit import util
|
|
|
|
PUBCERT_FILE = "/etc/mcollective/ssl/server-public.pem"
|
|
PRICERT_FILE = "/etc/mcollective/ssl/server-private.pem"
|
|
|
|
|
|
def handle(name, cfg, cloud, log, _args):
|
|
|
|
# If there isn't a mcollective key in the configuration don't do anything
|
|
if 'mcollective' not in cfg:
|
|
log.debug(("Skipping module named %s, "
|
|
"no 'mcollective' key in configuration"), name)
|
|
return
|
|
|
|
mcollective_cfg = cfg['mcollective']
|
|
|
|
# Start by installing the mcollective package ...
|
|
cloud.distro.install_packages(("mcollective",))
|
|
|
|
# ... and then update the mcollective configuration
|
|
if 'conf' in mcollective_cfg:
|
|
# Read server.cfg values from the
|
|
# original file in order to be able to mix the rest up
|
|
server_cfg_fn = cloud.paths.join(True, '/etc/mcollective/server.cfg')
|
|
mcollective_config = ConfigObj(server_cfg_fn)
|
|
# See: http://tiny.cc/jh9agw
|
|
for (cfg_name, cfg) in mcollective_cfg['conf'].iteritems():
|
|
if cfg_name == 'public-cert':
|
|
pubcert_fn = cloud.paths.join(True, PUBCERT_FILE)
|
|
util.write_file(pubcert_fn, cfg, mode=0644)
|
|
mcollective_config['plugin.ssl_server_public'] = pubcert_fn
|
|
mcollective_config['securityprovider'] = 'ssl'
|
|
elif cfg_name == 'private-cert':
|
|
pricert_fn = cloud.paths.join(True, PRICERT_FILE)
|
|
util.write_file(pricert_fn, cfg, mode=0600)
|
|
mcollective_config['plugin.ssl_server_private'] = pricert_fn
|
|
mcollective_config['securityprovider'] = 'ssl'
|
|
else:
|
|
if isinstance(cfg, (basestring, str)):
|
|
# Just set it in the 'main' section
|
|
mcollective_config[cfg_name] = cfg
|
|
elif isinstance(cfg, (dict)):
|
|
# Iterate throug the config items, create a section
|
|
# if it is needed and then add/or create items as needed
|
|
if cfg_name not in mcollective_config.sections:
|
|
mcollective_config[cfg_name] = {}
|
|
for (o, v) in cfg.iteritems():
|
|
mcollective_config[cfg_name][o] = v
|
|
else:
|
|
# Otherwise just try to convert it to a string
|
|
mcollective_config[cfg_name] = str(cfg)
|
|
# We got all our config as wanted we'll rename
|
|
# the previous server.cfg and create our new one
|
|
old_fn = cloud.paths.join(False, '/etc/mcollective/server.cfg.old')
|
|
util.rename(server_cfg_fn, old_fn)
|
|
# Now we got the whole file, write to disk...
|
|
contents = StringIO()
|
|
mcollective_config.write(contents)
|
|
contents = contents.getvalue()
|
|
server_cfg_rw = cloud.paths.join(False, '/etc/mcollective/server.cfg')
|
|
util.write_file(server_cfg_rw, contents, mode=0644)
|
|
|
|
# Start mcollective
|
|
util.subp(['service', 'mcollective', 'start'], capture=False)
|