foreman_maintain 1.3.5 → 1.4.1

data/definitions/checks/original_assets.rb

@@ -1,23 +0,0 @@
-class Checks::OriginalAssets < ForemanMaintain::Check
-  metadata do
-    description 'Check if only installed assets are present on the system'
-    tags :post_upgrade
-    for_feature :foreman_server
-  end
-
-  ASSETS_DIR = '/var/lib/foreman/public/assets'.freeze
-
-  def run
-    custom_assets = []
-    product_name = feature(:instance).product_name
-    with_spinner('Checking for presence of non-original assets...') do
-      custom_assets = package_manager.files_not_owned_by_package(ASSETS_DIR)
-      logger.info("Non-original assets detected:\n" + custom_assets.join("\n"))
-    end
-    remove_files = Procedures::Files::Remove.new(:files => custom_assets, :assumeyes => true)
-    assert(custom_assets.empty?,
-      "Some assets not owned by #{product_name} were detected on the system.\n" \
-        'Possible conflicting versions can affect operation of the Web UI.',
-      :next_steps => remove_files)
-  end
-end

data/definitions/procedures/foreman/apipie_cache.rb

@@ -1,12 +0,0 @@
-module Procedures::Foreman
-  class ApipieCache < ForemanMaintain::Procedure
-    metadata do
-      advanced_run false
-      description 'Regenerate Apipie cache'
-    end
-
-    def run
-      execute!('FOREMAN_APIPIE_LANGS=en foreman-rake apipie:cache')
-    end
-  end
-end

data/definitions/procedures/foreman_docker/remove_foreman_docker.rb

@@ -1,16 +0,0 @@
-module Procedures::ForemanDocker
-  class RemoveForemanDocker < ForemanMaintain::Procedure
-    metadata do
-      advanced_run false
-      description 'Drop foreman_docker plugin'
-      confine do
-        find_package(foreman_plugin_name('foreman_docker'))
-      end
-    end
-
-    def run
-      execute!('foreman-rake foreman_docker:cleanup')
-      packages_action(:remove, foreman_plugin_name('foreman_docker'), :assumeyes => true)
-    end
-  end
-end

data/extras/foreman_protector/yum/foreman-protector.py

@@ -1,86 +0,0 @@
-from yum.plugins import PluginYumExit
-from yum.plugins import TYPE_CORE
-from rpmUtils.miscutils import splitFilename
-from yum.packageSack import packagesNewestByName
-
-import urlgrabber
-import urlgrabber.grabber
-
-import os
-import fnmatch
-import tempfile
-import time
-
-requires_api_version = '2.1'
-plugin_type = (TYPE_CORE,)
-
-_package_whitelist = set()
-fileurl = None
-
-def _load_whitelist():
-    try:
-      if fileurl:
-        llfile = urlgrabber.urlopen(fileurl)
-        for line in llfile.readlines():
-            if line.startswith('#') or line.strip() == '':
-                continue
-            _package_whitelist.add(line.rstrip().lower())
-        llfile.close()
-    except urlgrabber.grabber.URLGrabError as e:
-        raise PluginYumExit('Unable to read Foreman protector"s configuration: %s' % e)
-
-def _add_obsoletes(conduit):
-    if _package_whitelist:
-        #  If anything obsoletes something that we have whitelisted ... then
-        # whitelist that too.
-        for (pkgtup, instTup) in conduit._base.up.getObsoletesTuples():
-            if instTup[0] not in _package_whitelist:
-                continue
-            _package_whitelist.add(pkgtup[0].lower())
-
-def _get_updates(base):
-    updates = {}
-
-    for p in base.pkgSack.returnNewestByName():
-        if p.name in _package_whitelist:
-            # This one is whitelisted, skip
-            continue
-        updates[p.name] = p
-
-    return updates
-
-def config_hook(conduit):
-    global fileurl
-
-    fileurl = conduit.confString('main', 'whitelist')
-
-def _add_package_whitelist_excluders(conduit):
-    if hasattr(conduit, 'registerPackageName'):
-        conduit.registerPackageName("yum-plugin-foreman-protector")
-    ape = conduit._base.pkgSack.addPackageExcluder
-    exid = 'foreman-protector.W.'
-    ape(None, exid + str(1), 'mark.washed')
-    ape(None, exid + str(2), 'wash.name.in', _package_whitelist)
-    ape(None, exid + str(3), 'exclude.marked')
-
-def exclude_hook(conduit):
-    conduit.info(3, 'Reading Foreman protector configuration')
-
-    _load_whitelist()
-    _add_obsoletes(conduit)
-
-    total = len(_get_updates(conduit._base))
-    conduit.info(3, '*** Excluded total: %s' % total)
-    if total:
-        if total > 1:
-            suffix = 's'
-        else:
-            suffix = ''
-        conduit.info(1, '\n'
-                        'WARNING: Excluding %d package%s due to foreman-protector. \n'
-                        'Use foreman-maintain packages install/update <package> \n'
-                        'to safely install packages without restrictions.\n'
-                        'Use foreman-maintain upgrade run for full upgrade.\n'
-                        % (total, suffix))
-
-    _add_package_whitelist_excluders(conduit)

data/lib/foreman_maintain/package_manager/yum.rb

@@ -1,142 +0,0 @@
-module ForemanMaintain::PackageManager
-  class Yum < Base
-    PROTECTOR_CONFIG_FILE = '/etc/yum/pluginconf.d/foreman-protector.conf'.freeze
-    PROTECTOR_WHITELIST_FILE = '/etc/yum/pluginconf.d/foreman-protector.whitelist'.freeze
-
-    def self.parse_envra(envra)
-      # envra format: 0:foreman-1.20.1.10-1.el7sat.noarch
-      parsed = envra.match(/\d*:?(?<name>.*)-[^-]+-[^-]+\.[^.]+/)
-      parsed ? Hash[parsed.names.map(&:to_sym).zip(parsed.captures)].merge(:envra => envra) : nil
-    end
-
-    def lock_versions
-      enable_protector
-    end
-
-    def unlock_versions
-      disable_protector
-    end
-
-    def versions_locked?
-      !!(protector_config =~ /^\s*enabled\s*=\s*1/) &&
-        protector_whitelist_file_nonzero?
-    end
-
-    def protector_whitelist_file_nonzero?
-      File.exist?(PROTECTOR_WHITELIST_FILE) &&
-        !File.zero?(PROTECTOR_WHITELIST_FILE)
-    end
-
-    def version_locking_supported?
-      true
-    end
-
-    def installed?(packages)
-      packages_list = [packages].flatten(1).map { |pkg| "'#{pkg}'" }.join(' ')
-      sys.execute?(%(rpm -q #{packages_list}))
-    end
-
-    def find_installed_package(name, queryformat = '')
-      rpm_cmd = "rpm -q '#{name}'"
-      unless queryformat.empty?
-        rpm_cmd += " --qf '#{queryformat}'"
-      end
-      status, result = sys.execute_with_status(rpm_cmd)
-      if status == 0
-        result
-      end
-    end
-
-    def install(packages, assumeyes: false)
-      yum_action('install', packages, :assumeyes => assumeyes)
-    end
-
-    def reinstall(packages, assumeyes: false)
-      yum_action('reinstall', packages, :assumeyes => assumeyes)
-    end
-
-    def remove(packages, assumeyes: false)
-      yum_action('remove', packages, :assumeyes => assumeyes)
-    end
-
-    def update(packages = [], assumeyes: false, yum_options: [])
-      yum_action('update', packages, :assumeyes => assumeyes, :yum_options => yum_options)
-    end
-
-    def clean_cache(assumeyes: false)
-      yum_action('clean', 'all', :assumeyes => assumeyes)
-    end
-
-    def check_update(packages: nil, with_status: false)
-      yum_action('check-update', packages, :assumeyes => true, :valid_exit_statuses => [0, 100],
-                                           :with_status => with_status)
-    end
-
-    def update_available?(package)
-      cmd_output = yum_action('check-update -q', package, :with_status => true, :assumeyes => false)
-      cmd_output[0] == 100
-    end
-
-    def files_not_owned_by_package(directory)
-      find_cmd = "find #{directory} -exec /bin/sh -c 'rpm -qf {} &> /dev/null || echo {}' \\;"
-      sys.execute(find_cmd).split("\n")
-    end
-
-    def list_installed_packages(queryformat = '%{NAME}-%{VERSION}-%{RELEASE}.%{ARCH}\n')
-      # The queryformat should only include valid tag(s) as per `rpm --querytags` list.
-      # If any special formatting is required with querytag then it should be provided with tag i.e,
-      # "--%{VENDOR}"
-      # The queryformat string must end with '\n'
-      sys.execute!("rpm -qa --qf '#{queryformat}'").split("\n")
-    end
-
-    private
-
-    def protector_config
-      File.exist?(protector_config_file) ? File.read(protector_config_file) : ''
-    end
-
-    def protector_config_file
-      PROTECTOR_CONFIG_FILE
-    end
-
-    def enable_protector
-      setup_protector(true)
-    end
-
-    def disable_protector
-      setup_protector(false)
-    end
-
-    def setup_protector(enabled)
-      config = protector_config
-      config += "\n" unless config[-1] == "\n"
-      enabled_re = /^\s*enabled\s*=.*$/
-      if enabled_re.match(config)
-        config = config.gsub(enabled_re, "enabled = #{enabled ? '1' : '0'}")
-      else
-        config += "enabled = #{enabled ? '1' : '0'}\n"
-      end
-      File.open(protector_config_file, 'w') { |file| file.puts config }
-    end
-
-    def yum_action(action, packages, options)
-      with_status = options.fetch(:with_status, false)
-      assumeyes = options.fetch(:assumeyes, false)
-      valid_exit_statuses = options.fetch(:valid_exit_statuses, [0])
-      yum_options = options.fetch(:yum_options, [])
-      packages = [packages].flatten(1)
-      yum_options << '-y' if assumeyes
-      yum_options << '--disableplugin=foreman-protector'
-      yum_options_s = yum_options.empty? ? '' : ' ' + yum_options.join(' ')
-      packages_s = packages.empty? ? '' : ' ' + packages.join(' ')
-      if with_status
-        sys.execute_with_status("yum#{yum_options_s} #{action}#{packages_s}",
-          :interactive => !assumeyes)
-      else
-        sys.execute!("yum#{yum_options_s} #{action}#{packages_s}",
-          :interactive => !assumeyes, :valid_exit_statuses => valid_exit_statuses)
-      end
-    end
-  end
-end