ó
oBú]c @ so d Z d d l m Z d d l m Z d d l Z e j e ƒ Z d „ Z d d „ Z
d „ Z d d
„ Z d S( s0 gpg.py - Collection of gpg key related functionsiÿÿÿÿ( t log( t utilNc C sa y+ t j d d d | g d t ƒ\ } } Wn/ t j k
r\ } t j d | | ƒ d } n X| S( s* Export gpg key, armoured key gets returnedt gpgs --exports --armourt captures& Failed to export armoured key "%s": %sN( R t subpt Truet ProcessExecutionErrort LOGt debugt None( t keyt armourt _t error( ( s1 /usr/lib/python2.7/site-packages/cloudinit/gpg.pyt
export_armour s
i c C s$ t j d | | ƒ d d | d | g } | d k r> g } n d } d } t | ƒ } xÇ t r | d 7} y1 t j | d t ƒt j d | | | ƒ d SWn t j k
r¸ } | } n Xy3 t | ƒ } t j d
| j | ƒ t
j | ƒ WqY t k
rt
d | | | | f ƒ ‚ qY XqY Wd S( sÁ Receive gpg key from the specified keyserver.
Retries are done by default because keyservers can be unreliable.
Additionally, there is no way to determine the difference between
a non-existant key and a failure. In both cases gpg (at least 2.2.4)
exits with status 2 and stderr: "keyserver receive failed: No data"
It is assumed that a key provided to cloud-init exists on the keyserver
so re-trying makes better sense than failing.
@param key: a string key fingerprint (as passed to gpg --recv-keys).
@param keyserver: the keyserver to request keys from.
@param retries: an iterable of sleep lengths for retries.
Use None to indicate no retries.s& Importing key '%s' from keyserver '%s'R s --keyserver=%ss --recv-keysi i R s/ Imported key '%s' from keyserver '%s' on try %dNs6 Import failed with exit code %d, will try again in %sss@ Failed to import key '%s' from keyserver '%s' after %d tries: %s( R R R t iterR R R R t nextt exit_codet timet sleept
StopIterationt
ValueError( R
t keyservert retriest cmdt trynumR
t sleepst et naplen( ( s1 /usr/lib/python2.7/site-packages/cloudinit/gpg.pyt recv_key s4
c C sV y& t j d d d d | g d t ƒWn) t j k
rQ } t j d | | ƒ n Xd S( s0 Delete the specified key from the local gpg ringR s --batchs --yess
--delete-keysR s Failed delete key "%s": %sN( R R R R R t warning( R
R
( ( s1 /usr/lib/python2.7/site-packages/cloudinit/gpg.pyt
delete_keyH s
s keyserver.ubuntu.comc C sr t | ƒ } | sn zK y t | d | ƒt | ƒ } Wn$ t k
r[ t j d | ƒ ‚ n XWd t | ƒ Xn | S( s get gpg keyid from keyserverR s Failed to obtain gpg key %sN( R R R R t exceptionR ( t keyidR R ( ( s1 /usr/lib/python2.7/site-packages/cloudinit/gpg.pyt
getkeybyidQ s
( i i (
t __doc__t cloudinitR t loggingR R t getLoggert __name__R R R R R" ( ( ( s1 /usr/lib/python2.7/site-packages/cloudinit/gpg.pyt <module> s *