1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
|
#!/usr//bin/python
# This program is free software; you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation; either version 2 of the License, or
# (at your option) any later version.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
# GNU Library General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program; if not, write to the Free Software
# Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
# 2008 Adrian Likins <alikins@redhat.com>
# script to migrate pre func/certmaster 0.17 to the split func/certmaster
# locations and formats from 0.17 and later versions
import os
import subprocess
import ConfigParser
from func import commonconfig
from func import config
from certmaster import commonconfig as cm_commonconfig
from certmaster import config as cm_config
# files that have moved
#
# minion certs moved from /etc/pki/func to /etc/pki/certmaster
# overlord certs moved /var/lib/func/certmaster to /var/lib/certmaster/certmaster
#
# /etc/func/minion.conf still exists, but parts of config moved to /etc/certmaster/minion.conf
FUNC_MINION_CONF="/etc/func/minion.conf"
CERTMASTER_MINION_CONF="/etc/certmaster/minion.conf"
FUNC_MINION_CERT_DIR="/etc/pki/func/"
CERTMASTER_MINION_CERT_DIR="/etc/pki/certmaster/"
CERTMASTER_CONF="/etc/certmaster/certmaster.conf"
FUNC_CERTMASTER_CERT_DIR="/var/lib/func/certmaster/"
CERTMASTER_CERT_DIR="/var/lib/certmaster/"
def list_files(files):
for filename in files:
if os.access(filename, os.R_OK):
print filename, os.stat(filename)
else:
print "%s not found" % filename
list_files([FUNC_MINION_CONF, CERTMASTER_MINION_CONF, FUNC_MINION_CERT_DIR,
CERTMASTER_MINION_CERT_DIR, FUNC_CERTMASTER_CERT_DIR,CERTMASTER_CERT_DIR])
def func_minion_has_cert_info(fmc_content):
for line in fmc_content:
match = line.find("cert_dir")
if match != -1 and match == 0:
return True
return False
def certmaster_minion_has_cert_info(cmc_content):
for line in cmc_content:
match = line.find("cert_dir")
if match != -1 and match == 0:
return True
return False
# dumb
def read_config(config_file, key):
cfg = ConfigParser.SafeConfigParser()
cfg.read(config_file)
try:
return cfg.get("main", key)
except ConfigParser.NoOptionError:
return None
def migrate_minion_conf_settings():
# ugh, do I really want to parse these files?
# guess I kind of have to...
print "migrating settings"
# see if we have edited this file before
fc_f = open(FUNC_MINION_CONF, "r")
# we can't rely on the new config class to read the old config
# files, so we do it the old fashioned way
migrated = False
if read_config(FUNC_MINION_CONF, "migrated"):
migrated = True
if migrated == True:
return
cmc = cm_config.read_config(CERTMASTER_CONF, cm_commonconfig.CMConfig)
cm_mc = cm_config.read_config(CERTMASTER_MINION_CONF, cm_commonconfig.MinionConfig)
cert_master = read_config(FUNC_MINION_CONF, "certmaster")
if cert_master:
cmc.certmaster = cert_master
cm_mc.certmaster = cert_master
# also, the config class we current use config.py:BaseConfig kind of sucks
# for migration stuff. Basically, we can't read values that aren't defined,
# we can't right stuff that isnt define, etc.
# there doesnt' seem to be an obvious way to
# add something to a config obj/file without
# changing the corresponding config class,
# so this is a kluge
fc_f = open(FUNC_MINION_CONF, "a+")
fc_f.write("migrated = 1\n")
fc_f.close()
cmc.write(open(CERTMASTER_CONF, 'w'))
cm_mc.write(open(CERTMASTER_MINION_CONF, 'w'))
if os.access(FUNC_MINION_CONF, os.R_OK):
if os.access(CERTMASTER_MINION_CONF, os.R_OK):
fmc_content = open(FUNC_MINION_CONF, 'r').readlines()
cmc_content = open(CERTMASTER_MINION_CONF, 'r').readlines()
# if func_minion_has_cert_info(fmc_content) and not certmaster_minion_has_cert_info(cmc_content):
if func_minion_has_cert_info(fmc_content):
migrate_minion_conf_settings()
# if we've configure a non default cert dir, migrate it to the new default location
# note that we do no migrate the old config settings. basically, everyone gets moved to
# the new default cert dir.
cert_dir = read_config(FUNC_MINION_CONF, "cert_dir")
if cert_dir:
FUNC_MINION_CERT_DIR = cert_dir
if os.access(FUNC_MINION_CERT_DIR, os.R_OK):
print "copying files from %s/* to %s" % (FUNC_MINION_CERT_DIR, CERTMASTER_MINION_CERT_DIR)
# output = subprocess.Popen(["cp", "-var", "%s/*" % FUNC_MINION_CERT_DIR, CERTMASTER_MINION_CERT_DIR], stdout=subprocess.PIPE).communicate()[0]
output = subprocess.Popen("cp -var %s/* %s" % (FUNC_MINION_CERT_DIR, CERTMASTER_MINION_CERT_DIR), shell=True, stdout=subprocess.PIPE).communicate()[0]
print "foo", output
if os.access(CERTMASTER_CERT_DIR, os.R_OK):
print "copyying files from %s to %s" % (FUNC_CERTMASTER_CERT_DIR, CERTMASTER_CERT_DIR)
output = subprocess.Popen(["cp", "-var", FUNC_CERTMASTER_CERT_DIR, CERTMASTER_CERT_DIR], stdout=subprocess.PIPE).communicate()[0]
print output
|
