From 6064710c90a17a6d44d952343041d3e969b0ed13 Mon Sep 17 00:00:00 2001 From: Heinrich Reinking Date: Thu, 1 Jul 2021 14:17:13 -0400 Subject: [PATCH 1/4] create gpgkey --- site/profile/manifests/ts/nexusctio.pp | 61 ++++++++++++++++++++++++++ 1 file changed, 61 insertions(+) diff --git a/site/profile/manifests/ts/nexusctio.pp b/site/profile/manifests/ts/nexusctio.pp index 9d735ea728..5bd8ac61e8 100644 --- a/site/profile/manifests/ts/nexusctio.pp +++ b/site/profile/manifests/ts/nexusctio.pp @@ -4,4 +4,65 @@ unless (empty($repos)) { create_resources('yumrepo', $repos) } + $gpg_key = @(GPG/L) + -----BEGIN PGP PUBLIC KEY BLOCK----- + Version: GnuPG v2.0.22 (GNU/Linux) + + mQINBGC3zR8BEACw7AKpnTXmhvjHU5hfdBfbbdOx8azUtW3Oogr6zUcAMd0meTfj + 4msB71LePoMX6WskN9RckoIJvxlIjcVPlbCe7euBDLiQL1KhuQXWK5veYIlsBYMx + agL8CA/rHEk1yfvuk9pxS7CqziRQ4laxJPnYbrOaRZevYlumyusDfGQ17x3EbM1D + N3UYvnzhla0lq/YmGSLVNgmqMV8PJSzv+iQku5MbI4ahxSCnVedOvepXdcePQPwf + /IZc/4IwquKjTNXCs+WhlMbM7T/0M1WeYm7h52UwUOlWB2pgN1ryW+iSbLCu0rBd + XJtPw4iERbhKpZmkmZJ6vrpCA+E2OFW2LIFve0N5mAUY0JkliFE34kG+FY6ZtD7z + vlF4U0AxzAOvo4zoIJcxRHjt7u4UsOIpMbBvm+B1rtbX3ZGGiZecpFhe5GONrh++ + jvT4kcpKjADY4rSq583iDZ/mWF+XUozyTmqbuHxFVTjAKCNvQE0WyL9+5g9zCH1a + 7AtIOSrfVP5YBHfLMiPOXpep8Pf7CaNAbSQb5JxFABYSRsLM6v2+Y3zm61dSIfeU + ZTRIFAsWG0Db5VdtdznBZnZRa5Avs6AUN9KOiVWi/D1KofZeeHU6DSfW+4Wq8vr4 + Ekm8YUfQuPP6Fvre5qvytBf17MGg0vKZ7Z/ipdhs2StxFnoO+3yK2BfoKwARAQAB + tF9HUEcgTVNPIChHUEcgTVNPIHNpZ25hdHVyZSBmb3Igc3RhYmxlIHJwbSBmaWxl + cyBpbiBOZXh1czMgcmVwb3NpdG9yeSkgPGRpZWdvLmdvbWV6QG5vaXJsYWIuZWR1 + PokCOQQTAQIAIwUCYLfNHwIbAwcLCQgHAwIBBhUIAgkKCwQWAgMBAh4BAheAAAoJ + EM5tAOEzBhcslQgP/2uGa/PZwVSo9/PHvnr7sD6/QT4hM0/Z2ngCGo0xOTTLm89C + K0DxkU21L9m2/BUZPJp4krB5p5GOUjiRdpouiPElnULBaBB8eZIVQWK3ifenqVq6 + FqxNqFDBKcKQ9ZVgvz88GYHLDSYTvv2QtTozCVhjcSWCPorYRuLbliOc4k7jqmjk + 5xUlCLcaGyHYZNXcLwDztgioF4AXyL3NUq2wySLfukJ0VxZ4z5jBfx5u47jUzvOV + j/t/OHZTwL4UGziEXgTb0j8ZRt2QciA5Sh0oXGUIlqZhWY88TBeG9xKUcsxB6TpV + NUSLOFt7Vq1Gxi9Eg8TWHvHyRRG/pfWIQyJdX5dKcAzsZMmB3jsx5TypnbxwM5dQ + k+IRCCLQQeLgBupBRKlF4PLns7R/CzouFIo9J/pVcxsZS2r2+t/S2i1N6/ApuqGR + Zo1QcKP8LGklwzcM6WQUHNlFJMzudULxAPt3ZNgKtktxEzfF44u9jWediWCHZv8N + /QgfxfaHMt4cQG2FCfZbISeBibo2YpRzPxMmuuTrS9tUEQ9VLiy59keZtu9hzD8R + AQ1p+6x1aGwGUTi8F/zdEv7PdCfsAMtZep/BkW2nnVoTJ886kJO2psm59Xw8rnRw + sX7IJd/rq/hw9ZyYRL1uU6CzHmSPR1Jwd2GOxxRS+OjutDMOWVe539KZP+mouQIN + BGC3zR8BEADBDUUBkVHRc/39iZYKFrmYVNoKPHdcIwrxwv9jt+2siBRFEKBix7Ji + pX+mvS8nu0tKCY0pASZZs5bi7M1Vc6w6I4x3Loam0d3oRwgQUzov0Hsmu9Qe8l6o + EaUdZbZn/V/V6ca5y3PFJRUOKeAvJC8lA4etgc4Gu7G8uy8QbpsfMrwV7DwW0C7U + p+rPjqtFs8tHm+IGuNaLnlIjCA7svSe/fcNuowj1S3WpWIVIGTq72ceGYhRhOxZ7 + gkeZRYfe6mz2c+BYoSCbjrBg9E46gWIGfI43WTWEOMfAO4rvJvrLxKiIM+/Z34JE + M81Gwatyvq1ZxJOxlD2RiM/Hn9ErbuB9Y7h9et4bi9VwkDcHasbtJwaH18M2DN/D + OkKnsI0Zl9jRlSeAxBJYXZOLQSZekeNl6VGcbNwz8iq6M/ahnRy3AXEWiA7GGxVR + Lq2xGj9Dszy9lMdQRW7vyNN3+HwV8AQ8W0UgVQKAARDpMjhkVA61NJEk66tsobQE + CcAmbcedQT9bhHQaQc7rqO6By9REghpNt9OfO+57RKJhtZcPKKPaMsFBMGRpFm5x + /HZEkc9PDMpVwn2w8O2dO6veBoWqPxDfdBtnWiPcOQiXvc9qBQwmaLIFfJYQ0Ixm + Bt3DXes1dIw1bZI3oMOcNXBCt4UzsKJ2qaznlpzc50sc6OR6seOrEwARAQABiQIf + BBgBAgAJBQJgt80fAhsMAAoJEM5tAOEzBhcs8CgP/iod3QiQCP8IaHxT7pNmJ95M + tFSzoWRNvC/oSyD4pjt7zSEVv00Ztr9TaDNVvkImgeJEi2SrGyU1D4vUovbhftny + /2mHLBnu/N9tBGwBwhrv3C7Rn3K2AsRVcEQ2MMzfyvSDzrSicfjAlgblCGB0seuN + jCeAZOfjE/V9ZC+m1JkpnAs7T9ohM/q7HuYjzQIXFJVFz7tmfPUcg8OAm5VxqfVV + 57ub2L8VgFR7slja0VIPnEG38VieSRmx02Inc8fEAAw/ah+EZXEvKap4O2laGY4y + VZVguIMRVVHAOTu0iUTwPlfPNI/jjn2J8ULisIfbuTKd0Vn30kaahBFY4E/R3h9C + geZo96fkKa4JwN7hKtZZv8uzwUWuFGuDlU1tQ2VkNUgj8ksfaagXE0G/L27iKeZN + mGwfdNWtlEnjiolxK2xNmzwotDqnneRZLz8uoCG3fogcJi28YqtHddCQdRNLxScx + DfJsUyrAgCt9bXnnJtKi5Kv6gAtkP02Qz7Kez8gh0W6VYQcRYOxLnmISaWf3woGx + 05/9YPDdeXVApp8JHlmgLKM1nm2a2A8JsIaZpLGhBcawo1xicnU2yMSTvpgouopT + GtqYBCi14V6IEZbVzYeIz1EkT12RP7CtnWYbJN/zyenK3LMowkPigythoAY8tRzL + eO+RKR5uzsEbWmMvQkTP + =vYiw + -----END PGP PUBLIC KEY BLOCK----- + | GPG + + file { '/etc/pki/rpm-gpg/RPM-GPG-KEY-MSO': + ensure => present, + content => $gpg_key, + mode => '0644' + } } From aa711b027fe894026f2e2294f5745d9dd46b2630 Mon Sep 17 00:00:00 2001 From: Heinrich Reinking Date: Thu, 1 Jul 2021 14:23:37 -0400 Subject: [PATCH 2/4] add gpg repos --- site/profile/data/org/lsst.yaml | 24 ++++++++++++++++++++++++ 1 file changed, 24 insertions(+) diff --git a/site/profile/data/org/lsst.yaml b/site/profile/data/org/lsst.yaml index d5e3e47e27..e9db03530b 100644 --- a/site/profile/data/org/lsst.yaml +++ b/site/profile/data/org/lsst.yaml @@ -30,3 +30,27 @@ profile::ts::nexusctio::repos: baseurl: "http://cagvm3.ctio.noao.edu/nexus/repository/labview-rpm/rubin/" gpgcheck: false target: "/etc/yum.repos.d/nexus-ctio.repo" + "gpgrubin": + ensure: "present" + descr: "Nexus GPG Rubin Repository" + enabled: true + baseurl: "http://cagvm3.ctio.noao.edu/nexus/repository/gpg-rpm/rubin/" + gpgcheck: true + gpgkey: "file:///etc/pki/rpm-gpg/RPM-GPG-KEY-MSO" + target: "/etc/yum.repos.d/gpgrubin.repo" + "gpgmso": + ensure: "present" + descr: "Nexus GPG MSO Repository" + enabled: true + baseurl: "http://cagvm3.ctio.noao.edu/nexus/repository/gpg-rpm/MSO/" + gpgcheck: true + gpgkey: "file:///etc/pki/rpm-gpg/RPM-GPG-KEY-MSO" + target: "/etc/yum.repos.d/gpgmsoo.repo" + "gpgother": + ensure: "present" + descr: "Nexus GPG Other Repository" + enabled: true + baseurl: "http://cagvm3.ctio.noao.edu/nexus/repository/gpg-rpm/other/" + gpgcheck: true + gpgkey: "file:///etc/pki/rpm-gpg/RPM-GPG-KEY-MSO" + target: "/etc/yum.repos.d/gpgother.repo" From 0280e106416ec1bb48b6da02cfafc3e89d8d6d62 Mon Sep 17 00:00:00 2001 From: Heinrich Reinking Date: Mon, 5 Jul 2021 10:21:01 -0400 Subject: [PATCH 3/4] comment pgpother --- site/profile/data/org/lsst.yaml | 16 ++++++++-------- 1 file changed, 8 insertions(+), 8 deletions(-) diff --git a/site/profile/data/org/lsst.yaml b/site/profile/data/org/lsst.yaml index e9db03530b..6e1d682385 100644 --- a/site/profile/data/org/lsst.yaml +++ b/site/profile/data/org/lsst.yaml @@ -46,11 +46,11 @@ profile::ts::nexusctio::repos: gpgcheck: true gpgkey: "file:///etc/pki/rpm-gpg/RPM-GPG-KEY-MSO" target: "/etc/yum.repos.d/gpgmsoo.repo" - "gpgother": - ensure: "present" - descr: "Nexus GPG Other Repository" - enabled: true - baseurl: "http://cagvm3.ctio.noao.edu/nexus/repository/gpg-rpm/other/" - gpgcheck: true - gpgkey: "file:///etc/pki/rpm-gpg/RPM-GPG-KEY-MSO" - target: "/etc/yum.repos.d/gpgother.repo" + # "gpgother": + # ensure: "present" + # descr: "Nexus GPG Other Repository" + # enabled: true + # baseurl: "http://cagvm3.ctio.noao.edu/nexus/repository/gpg-rpm/other/" + # gpgcheck: true + # gpgkey: "file:///etc/pki/rpm-gpg/RPM-GPG-KEY-MSO" + # target: "/etc/yum.repos.d/gpgother.repo" From 71ec598b7047b5671956739da3e87ae47a03d165 Mon Sep 17 00:00:00 2001 From: Heinrich Reinking Date: Mon, 5 Jul 2021 10:58:02 -0400 Subject: [PATCH 4/4] removing not existing repo other --- site/profile/data/org/lsst.yaml | 8 -------- 1 file changed, 8 deletions(-) diff --git a/site/profile/data/org/lsst.yaml b/site/profile/data/org/lsst.yaml index 6e1d682385..bec8c246ea 100644 --- a/site/profile/data/org/lsst.yaml +++ b/site/profile/data/org/lsst.yaml @@ -46,11 +46,3 @@ profile::ts::nexusctio::repos: gpgcheck: true gpgkey: "file:///etc/pki/rpm-gpg/RPM-GPG-KEY-MSO" target: "/etc/yum.repos.d/gpgmsoo.repo" - # "gpgother": - # ensure: "present" - # descr: "Nexus GPG Other Repository" - # enabled: true - # baseurl: "http://cagvm3.ctio.noao.edu/nexus/repository/gpg-rpm/other/" - # gpgcheck: true - # gpgkey: "file:///etc/pki/rpm-gpg/RPM-GPG-KEY-MSO" - # target: "/etc/yum.repos.d/gpgother.repo"