mirror of
https://github.com/arcan1s/ahriman.git
synced 2025-04-28 09:17:17 +00:00
Evgeniy Alekseev
74a244f06c
* add models tests (#1) also replace single quote to double one to confort PEP docstring + move _check_output to class properties to make it available for mocking * alpm tests implementation * try to replace os with pathlib * update tests for pathlib * fix includes glob and trim version from dependencies * build_tools package tests * repository component tests * add sign tests * complete status tests * handle exceptions in actual_version calls * complete core tests * move configuration to root conftest * application tests * complete application tests * change copyright to more generic one * base web tests * complete web tests * complete testkit also add argument parsers test
109 lines
3.9 KiB
Python
109 lines
3.9 KiB
Python
#
|
|
# Copyright (c) 2021 ahriman team.
|
|
#
|
|
# This file is part of ahriman
|
|
# (see https://github.com/arcan1s/ahriman).
|
|
#
|
|
# This program is free software: you can redistribute it and/or modify
|
|
# it under the terms of the GNU General Public License as published by
|
|
# the Free Software Foundation, either version 3 of the License, or
|
|
# (at your option) any later version.
|
|
#
|
|
# This program is distributed in the hope that it will be useful,
|
|
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
# GNU General Public License for more details.
|
|
#
|
|
# You should have received a copy of the GNU General Public License
|
|
# along with this program. If not, see <http://www.gnu.org/licenses/>.
|
|
#
|
|
import logging
|
|
|
|
from pathlib import Path
|
|
from typing import List
|
|
|
|
from ahriman.core.configuration import Configuration
|
|
from ahriman.core.exceptions import BuildFailed
|
|
from ahriman.core.util import check_output
|
|
from ahriman.models.sign_settings import SignSettings
|
|
|
|
|
|
class GPG:
|
|
"""
|
|
gnupg wrapper
|
|
:ivar architecture: repository architecture
|
|
:ivar config: configuration instance
|
|
:ivar default_key: default PGP key ID to use
|
|
:ivar logger: class logger
|
|
:ivar target: list of targets to sign (repository, package etc)
|
|
"""
|
|
|
|
_check_output = check_output
|
|
|
|
def __init__(self, architecture: str, config: Configuration) -> None:
|
|
"""
|
|
default constructor
|
|
:param architecture: repository architecture
|
|
:param config: configuration instance
|
|
"""
|
|
self.logger = logging.getLogger("build_details")
|
|
self.config = config
|
|
self.section = config.get_section_name("sign", architecture)
|
|
self.target = {SignSettings.from_option(opt) for opt in config.getlist(self.section, "target")}
|
|
self.default_key = config.get(self.section, "key") if self.target else ""
|
|
|
|
@property
|
|
def repository_sign_args(self) -> List[str]:
|
|
"""
|
|
:return: command line arguments for repo-add command to sign database
|
|
"""
|
|
if SignSettings.SignRepository not in self.target:
|
|
return []
|
|
return ["--sign", "--key", self.default_key]
|
|
|
|
@staticmethod
|
|
def sign_cmd(path: Path, key: str) -> List[str]:
|
|
"""
|
|
gpg command to run
|
|
:param path: path to file to sign
|
|
:param key: PGP key ID
|
|
:return: gpg command with all required arguments
|
|
"""
|
|
return ["gpg", "-u", key, "-b", str(path)]
|
|
|
|
def process(self, path: Path, key: str) -> List[Path]:
|
|
"""
|
|
gpg command wrapper
|
|
:param path: path to file to sign
|
|
:param key: PGP key ID
|
|
:return: list of generated files including original file
|
|
"""
|
|
GPG._check_output(
|
|
*GPG.sign_cmd(path, key),
|
|
exception=BuildFailed(path.name),
|
|
logger=self.logger)
|
|
return [path, path.parent / f"{path.name}.sig"]
|
|
|
|
def sign_package(self, path: Path, base: str) -> List[Path]:
|
|
"""
|
|
sign package if required by configuration
|
|
:param path: path to file to sign
|
|
:param base: package base required to check for key overrides
|
|
:return: list of generated files including original file
|
|
"""
|
|
if SignSettings.SignPackages not in self.target:
|
|
return [path]
|
|
key = self.config.get(self.section, f"key_{base}", fallback=self.default_key)
|
|
return self.process(path, key)
|
|
|
|
def sign_repository(self, path: Path) -> List[Path]:
|
|
"""
|
|
sign repository if required by configuration
|
|
:note: more likely you just want to pass `repository_sign_args` to repo wrapper
|
|
:param path: path to repository database
|
|
:return: list of generated files including original file
|
|
"""
|
|
if SignSettings.SignRepository not in self.target:
|
|
return [path]
|
|
return self.process(path, self.default_key)
|