Your IP : 216.73.216.31
U
�AdH � @ sv d Z ddlZddlmZ ddlmZ e�e�Zddddd gZ d
d � Z
d d
� Z ddd�Z ddd�Z
dd� Zddd�ZdS ) z0gpg.py - Collection of gpg key related functions� N)�log)�subp�gpgz--with-fingerprintz--no-default-keyringz --list-keysz --keyringc
C sZ z t j ddd| gdd�\}}W n6 t jk
rT } zt�d| |� d}W 5 d}~X Y nX |S )z*Export gpg key, armoured key gets returnedr z--exportz--armourT�Zcapture�&Failed to export armoured key "%s": %sN)r �ProcessExecutionError�LOG�debug)�key�armour�_�error� r �//usr/lib/python3/dist-packages/cloudinit/gpg.py�
export_armour s
�r c C s t j ddg| dd�jS )z~Dearmor gpg key, dearmored key gets returned
note: man gpg(1) makes no mention of an --armour spelling, only --armor
r z --dearmorF)�data�decode)r �stdout)r
r r r �dearmor' s r Fc C sN g }|� t� |s |�d� |�| � tj|dd�\}}|rJt�d| |� |S )z�List keys from a keyring with fingerprints. Default to a stable machine
parseable format.
@param key_file: a string containing a filepath to a key
@param human_output: return output intended for human parsing
z
--with-colonsTr r )�extend�GPG_LIST�appendr r �warning)Zkey_fileZ human_output�cmdr �stderrr r r �list/ s
r �� r c
C s� t �d| |� ddd| d| g}|dkr,g }d}d}t|�}|d7 }z$tj|d d
� t �d | ||� W dS tjk
r� } z|}W 5 d}~X Y nX z&t|�}t �d |j|� t�|� W q< t k
r� } zt
d
| |||f �|�W 5 d}~X Y q<X q<dS )a� Receive gpg key from the specified keyserver.
Retries are done by default because keyservers can be unreliable.
Additionally, there is no way to determine the difference between
a non-existant key and a failure. In both cases gpg (at least 2.2.4)
exits with status 2 and stderr: "keyserver receive failed: No data"
It is assumed that a key provided to cloud-init exists on the keyserver
so re-trying makes better sense than failing.
@param key: a string key fingerprint (as passed to gpg --recv-keys).
@param keyserver: the keyserver to request keys from.
@param retries: an iterable of sleep lengths for retries.
Use None to indicate no retries.z&Importing key '%s' from keyserver '%s'r z--no-ttyz--keyserver=%sz --recv-keysNr r Tr z/Imported key '%s' from keyserver '%s' on try %dz6Import failed with exit code %d, will try again in %ssz@Failed to import key '%s' from keyserver '%s' after %d tries: %s) r r �iterr r �nextZ exit_code�time�sleep�
StopIteration�
ValueError) r
� keyserverZretriesr Ztrynumr
Zsleeps�eZnaplenr r r �recv_keyB sF ��
���r& c
C sT z t j dddd| gdd� W n2 t jk
rN } zt�d| |� W 5 d}~X Y nX dS ) z0Delete the specified key from the local gpg ringr z--batchz--yesz
--delete-keysTr zFailed delete key "%s": %sN)r r r r )r
r
r r r �
delete_keys s �
r' �keyserver.ubuntu.comc C s\ t | �}|sXz@zt| |d� t | �}W n" tk
rH t�d| � � Y nX W 5 t| � X |S )z get gpg keyid from keyserver)r$ zFailed to obtain gpg key %s)r r' r& r# r Z exception)Zkeyidr$ r r r r �
getkeybyid} s
r) )F)r )r( )�__doc__r Z cloudinitr Zloggingr Z getLogger�__name__r r r r r r& r' r) r r r r �<module> s
�
1