PKI Deployment Scriptlets

* Introduced concept of "admin-domain" originally as a
  separate folder, and later incorporated this concept
  into an optional instance prefix
* Revised definition of <pki_instance_id> to be identified
  as "[<pki_admin_domain_name>-]<pki_instance_name>
* Changed NSS security database model from one shared
  database by BOTH a single Tomcat AND single Apache instance
  into one per Tomcat instance (shared by CA/KRA/OCSP/TKS) and
  one per Apache instance (shared by RA/TPS)
* Altered Configuration 'scriptlet' to invoke Jython for
  access to new Java configuration servlet
* Renamed various "scriptlets" to comply with this new layout
* Re-aligned code to account for revised layout documented at
  http://pki.fedoraproject.org/wiki/PKI_Instance_Deployment

1 files changed, 102 insertions, 0 deletions

diff --git a/base/deploy/src/scriptlets/infrastructure_layout.py b/base/deploy/src/scriptlets/infrastructure_layout.py
new file mode 100644
index 000000000..fd94de512
--- /dev/null
+++ b/base/deploy/src/scriptlets/infrastructure_layout.py
@@ -0,0 +1,102 @@
+#!/usr/bin/python -t
+# Authors:
+#     Matthew Harmsen <mharmsen@redhat.com>
+#
+# This program is free software; you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation; version 2 of the License.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License along
+# with this program; if not, write to the Free Software Foundation, Inc.,
+# 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
+#
+# Copyright (C) 2012 Red Hat, Inc.
+# All rights reserved.
+#
+
+# PKI Deployment Imports
+import pkiconfig as config
+from pkiconfig import pki_master_dict as master
+import pkihelper as util
+import pkimessages as log
+import pkiscriptlet
+
+
+# PKI Deployment Top-Level Infrastructure Layout Scriptlet
+class PkiScriptlet(pkiscriptlet.AbstractBasePkiScriptlet):
+    rv = 0
+
+    def spawn(self):
+        config.pki_log.info(log.ADMIN_DOMAIN_SPAWN_1, __name__,
+                            extra=config.PKI_INDENTATION_LEVEL_1)
+        # establish top-level infrastructure base
+        util.directory.create(master['pki_path'])
+        # establish top-level infrastructure logs
+        util.directory.create(master['pki_log_path'])
+        # establish top-level infrastructure configuration
+        if master['pki_configuration_path'] !=\
+           config.PKI_DEPLOYMENT_CONFIGURATION_ROOT:
+            util.directory.create(master['pki_configuration_path'])
+        # establish top-level infrastructure registry
+        util.directory.create(master['pki_registry_path'])
+        return self.rv
+
+    def respawn(self):
+        config.pki_log.info(log.ADMIN_DOMAIN_RESPAWN_1, __name__,
+                            extra=config.PKI_INDENTATION_LEVEL_1)
+        # update top-level infrastructure base
+        util.directory.modify(master['pki_path'])
+        # update top-level infrastructure logs
+        util.directory.modify(master['pki_log_path'])
+        # update top-level infrastructure configuration
+        if master['pki_configuration_path'] !=\
+           config.PKI_DEPLOYMENT_CONFIGURATION_ROOT:
+            util.directory.modify(master['pki_configuration_path'])
+        # update top-level infrastructure registry
+        util.directory.modify(master['pki_registry_path'])
+        return self.rv
+
+    def destroy(self):
+        config.pki_log.info(log.ADMIN_DOMAIN_DESTROY_1, __name__,
+                            extra=config.PKI_INDENTATION_LEVEL_1)
+        # remove top-level infrastructure base
+        if not config.pki_dry_run_flag:
+            if master['pki_subsystem'] in config.PKI_SUBSYSTEMS and\
+               util.instance.pki_subsystem_instances() == 0:
+                # remove top-level infrastructure base
+                util.directory.delete(master['pki_path'])
+                # remove top-level infrastructure logs
+                util.directory.delete(master['pki_log_path'])
+                # remove top-level infrastructure configuration
+                if util.directory.is_empty(master['pki_configuration_path'])\
+                   and master['pki_configuration_path'] !=\
+                   config.PKI_DEPLOYMENT_CONFIGURATION_ROOT:
+                    util.directory.delete(master['pki_configuration_path'])
+                # remove top-level infrastructure registry
+                util.directory.delete(master['pki_registry_path'])
+                if master['pki_subsystem'] in config.PKI_TOMCAT_SUBSYSTEMS:
+                    util.file.delete(master['pki_target_tomcat_conf'])
+
+        else:
+            # ALWAYS display correct information (even during dry_run)
+            if master['pki_subsystem'] in config.PKI_SUBSYSTEMS and\
+               util.instance.pki_subsystem_instances() == 1:
+                # remove top-level infrastructure base
+                util.directory.delete(master['pki_path'])
+                # remove top-level infrastructure logs
+                util.directory.delete(master['pki_log_path'])
+                # remove top-level infrastructure configuration
+                if util.directory.is_empty(master['pki_configuration_path'])\
+                   and master['pki_configuration_path'] !=\
+                   config.PKI_DEPLOYMENT_CONFIGURATION_ROOT:
+                    util.directory.delete(master['pki_configuration_path'])
+                # remove top-level infrastructure registry
+                util.directory.delete(master['pki_registry_path'])
+                if master['pki_subsystem'] in config.PKI_TOMCAT_SUBSYSTEMS:
+                    util.file.delete(master['pki_target_tomcat_conf'])
+        return self.rv