]>
git.proxmox.com Git - pve-manager.git/blob - PVE/APLInfo.pm
7 use POSIX
qw(strftime);
9 my $logfile = "/var/log/pveam.log";
10 my $aplinfodir = "/var/lib/pve-manager/apl-info";
12 # Default list of GPG keys allowed to sign aplinfo
14 #pub 1024D/5CAC72FE 2004-06-24
15 # Key fingerprint = 9ABD 7E02 AD24 3AD3 C2FB BCCC B0C1 CC22 5CAC 72FE
16 #uid Proxmox Support Team <support@proxmox.com>
17 #pub 2048R/A16EB94D 2008-08-15 [expires: 2023-08-12]
18 # Key fingerprint = 694C FF26 795A 29BA E07B 4EB5 85C2 5E95 A16E B94D
19 #uid Turnkey Linux Release Key <release@turnkeylinux.com>
22 '9ABD7E02AD243AD3C2FBBCCCB0C1CC225CAC72FE' => 1, # fingerprint support@proxmox.com
23 '25CAC72FE' => 1, # keyid support@proxmox.com
24 '694CFF26795A29BAE07B4EB585C25E95A16EB94D' => 1, # fingerprint release@turnkeylinux.com
25 'A16EB94D' => 1, # keyid release@turnkeylinux.com
30 my @keyfiles = ('support@proxmox.com.pubkey', 'release@turnkeylinux.com.pubkey');
32 foreach my $key (@keyfiles) {
33 my $fn = "/usr/share/doc/pve-manager/$key";
34 system ("/usr/bin/gpg --batch --no-tty --status-fd=1 -q " .
35 "--logger-fd=1 --import $fn >>$logfile");
40 my ($logfd, $msg) = @_;
44 my $tstr = strftime
("%b %d %H:%M:%S", localtime);
46 foreach my $line (split (/\n/, $msg)) {
47 print $logfd "$tstr $line\n";
51 sub read_aplinfo_from_fh
{
52 my ($fh, $list, $source, $update) = @_;
56 while (my $rec = <$fh>) {
63 if ($rec =~ s/^Description:\s*([^\n]*)(\n\s+.*)*$//si) {
64 $res->{headline
} = $1;
69 $res->{description
} = $long;
70 } elsif ($rec =~ s/^Version:\s*(.*\S)\s*\n//i) {
72 if ($version =~ m/^(\d[a-zA-Z0-9\.\+\-\:\~]*)-(\d+)$/) {
73 $res->{version
} = $version;
75 my $msg = "unable to parse appliance record: version = '$version'\n";
76 $update ?
die $msg : warn $msg;
78 } elsif ($rec =~ s/^Type:\s*(.*\S)\s*\n//i) {
80 if ($type =~ m/^(openvz|lxc)$/) {
83 my $msg = "unable to parse appliance record: unknown type '$type'\n";
84 $update ?
die $msg : warn $msg;
86 } elsif ($rec =~ s/^([^:]+):\s*(.*\S)\s*\n//) {
89 my $msg = "unable to parse appliance record: $rec\n";
90 $update ?
die $msg : warn $msg;
96 if ($res->{'package'} eq 'pve-web-news' && $res->{description
}) {
97 $list->{'all'}->{$res->{'package'}} = $res;
101 $res->{section
} = 'unknown' if !$res->{section
};
103 if ($res->{'package'} && $res->{type
} && $res->{os
} && $res->{version
} &&
106 if ($res->{location
}) {
107 $template = $res->{location
};
108 $template =~ s
|.*/([^/]+.tar
.gz
)|$1|;
110 my $arch = $res->{architecture
} || 'i386';
111 $template = "$res->{os}-$res->{package}_$res->{version}_$arch.tar.gz";
112 $template =~ s/$res->{os}-$res->{os}-/$res->{os}-/;
114 $res->{source
} = $source;
115 $res->{template
} = $template;
116 $list->{$res->{section
}}->{$template} = $res;
117 $list->{'all'}->{$template} = $res;
119 my $msg = "found incomplete appliance records\n";
120 $update ?
die $msg : warn $msg;
126 my ($filename, $list, $source, $update) = @_;
128 my $fh = IO
::File-
>new("<$filename") ||
129 die "unable to open file '$filename' - $!\n";
131 eval { read_aplinfo_from_fh
($fh, $list, $source, $update); };
142 my ($ua, $url, $file, $logfh) = @_;
144 my $req = HTTP
::Request-
>new(GET
=> $url);
146 logmsg
($logfh, "start download $url");
147 my $res = $ua->request($req, $file);
149 if ($res->is_success) {
150 logmsg
($logfh, "download finished: " . $res->status_line);
154 logmsg
($logfh, "download failed: " . $res->status_line);
159 sub download_aplinfo
{
160 my ($ua, $aplurl, $host, $logfd) = @_;
162 my $aplsrcurl = "$aplurl/aplinfo.dat.gz";
163 my $aplsigurl = "$aplurl/aplinfo.dat.asc";
165 my $tmp = "$aplinfodir/pveam-${host}.tmp.$$";
166 my $tmpgz = "$tmp.gz";
167 my $sigfn = "$tmp.asc";
171 if (url_get
($ua, $aplsigurl, $sigfn, $logfd) != 0) {
172 die "update failed - no signature file '$sigfn'\n";
175 if (url_get
($ua, $aplsrcurl, $tmpgz, $logfd) != 0) {
176 die "update failed - no data file '$aplsrcurl'\n";
179 if (system("zcat -f $tmpgz >$tmp 2>/dev/null") != 0) {
180 die "update failed: unable to unpack '$tmpgz'\n";
185 my $cmd = "/usr/bin/gpg --verify --trust-model always --batch --no-tty --status-fd=1 -q " .
186 "--logger-fd=1 $sigfn $tmp";
188 open(CMD
, "$cmd|") ||
189 die "unable to execute '$cmd': $!\n";
193 while (defined($line = <CMD
>)) {
195 logmsg
($logfd, $line);
197 # code borrowed from SA
198 next if $line !~ /^\Q[GNUPG:]\E (?:VALID|GOOD)SIG (\S{8,40})/;
201 # we want either a keyid (8) or a fingerprint (40)
202 if (length $key > 8 && length $key < 40) {
203 substr($key, 8) = '';
205 # use the longest match we can find
206 $signer = $key if (length $key > length $signer) && $valid_keys->{$key};
211 die "unable to verify signature\n" if !$signer;
213 logmsg
($logfd, "signature valid: $signer");
217 my $fh = IO
::File-
>new("<$tmp") ||
218 die "unable to open file '$tmp' - $!\n";
219 read_aplinfo
($tmp, {}, $aplurl, 1);
222 die "update failed: $@" if $@;
224 if (system("mv $tmp $aplinfodir/$host 2>/dev/null") != 0) {
225 die "update failed: unable to store data\n";
228 logmsg
($logfd, "update sucessful");
240 sub get_apl_sources
{
243 push @$urls, "http://download.proxmox.com/appliances";
244 push @$urls, "http://releases.turnkeylinux.org/pve";
253 if (($size = (-s
$logfile) || 0) > (1024*50)) {
254 system ("mv $logfile $logfile.0");
256 my $logfd = IO
::File-
>new (">>$logfile");
257 logmsg
($logfd, "starting update");
261 # this code works for ftp and http
262 # always use passive ftp
263 local $ENV{FTP_PASSIVE
} = 1;
264 my $ua = LWP
::UserAgent-
>new;
265 $ua->agent("PVE/1.0");
268 $ua->proxy(['http'], $proxy);
273 my $urls = get_apl_sources
();
278 foreach my $aplurl (@$urls) {
280 my $uri = URI-
>new($aplurl);
281 my $host = $uri->host();
282 download_aplinfo
($ua, $aplurl, $host, $logfd);
285 logmsg
($logfd, $err);
286 push @dlerr, $aplurl;
292 return 0 if scalar(@dlerr);
299 my $urls = get_apl_sources
();
303 foreach my $aplurl (@$urls) {
307 my $uri = URI-
>new($aplurl);
308 my $host = $uri->host();
309 read_aplinfo
("$aplinfodir/$host", $list, $aplurl);