Initial version of sks module
This commit is contained in:
Ossi Salmi
parent
74b91b8380
commit
bda0cb174a
3 changed files with 167 additions and 0 deletions
95
sks/manifests/init.pp
Normal file
95
sks/manifests/init.pp
Normal file
|
|
@ -0,0 +1,95 @@
|
|||
# Install and configure SKS keyserver.
|
||||
#
|
||||
class sks($datadir=undef) {
|
||||
|
||||
case $::operatingsystem {
|
||||
"ubuntu": {
|
||||
$user = "debian-sks"
|
||||
$group = "debian-sks"
|
||||
$config = "/etc/sks/sksconf"
|
||||
}
|
||||
default: {
|
||||
fail("sks not supported on ${::operatingsystem}")
|
||||
}
|
||||
}
|
||||
|
||||
package { "sks":
|
||||
ensure => installed,
|
||||
}
|
||||
|
||||
if $datadir {
|
||||
file { $datadir:
|
||||
ensure => directory,
|
||||
mode => "0700",
|
||||
owner => $user,
|
||||
group => $group,
|
||||
require => Package["sks"],
|
||||
}
|
||||
file { "/var/lib/sks":
|
||||
ensure => link,
|
||||
target => $datadir,
|
||||
force => true,
|
||||
require => File[$datadir],
|
||||
}
|
||||
} else {
|
||||
file { "/var/lib/sks":
|
||||
ensure => directory,
|
||||
mode => "0700",
|
||||
owner => $user,
|
||||
group => $group,
|
||||
require => Package["sks"],
|
||||
}
|
||||
}
|
||||
|
||||
exec { "sks build":
|
||||
path => "/bin:/usr/bin:/sbin:/usr/sbin",
|
||||
user => $user,
|
||||
creates => "/var/lib/sks/DB",
|
||||
require => File["/var/lib/sks"],
|
||||
before => Service["sks"],
|
||||
}
|
||||
|
||||
file { $config:
|
||||
ensure => present,
|
||||
mode => "0644",
|
||||
owner => "root",
|
||||
group => "root",
|
||||
content => template("sks/sksconf.erb"),
|
||||
require => Package["sks"],
|
||||
notify => Service["sks"],
|
||||
}
|
||||
|
||||
case $::operatingsystem {
|
||||
"debian","ubuntu": {
|
||||
augeas { "enable-sks":
|
||||
context => "/files/etc/default/sks",
|
||||
changes => "set initstart yes",
|
||||
require => Package["sks"],
|
||||
notify => Service["sks"],
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
file { "/var/lib/sks/www":
|
||||
ensure => directory,
|
||||
mode => "0700",
|
||||
owner => $user,
|
||||
group => $group,
|
||||
}
|
||||
|
||||
file { "/var/lib/sks/www/index.html":
|
||||
ensure => present,
|
||||
mode => "0600",
|
||||
owner => $user,
|
||||
group => $group,
|
||||
content => template("sks/index.html.erb"),
|
||||
before => Service["sks"],
|
||||
}
|
||||
|
||||
service { "sks":
|
||||
ensure => running,
|
||||
enable => true,
|
||||
status => "pgrep -f /usr/sbin/sks",
|
||||
}
|
||||
|
||||
}
|
||||
40
sks/templates/index.html.erb
Normal file
40
sks/templates/index.html.erb
Normal file
|
|
@ -0,0 +1,40 @@
|
|||
<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
|
||||
<html>
|
||||
<head>
|
||||
<title>SKS Search Page</title>
|
||||
<meta http-equiv="content-type" content="text/html; charset=ISO-8859-1">
|
||||
</head>
|
||||
<body>
|
||||
<h1>SKS OpenPGP Keyserver</h1>
|
||||
<h3>Extract a key</h3>
|
||||
You can extract a key by typing in some words that appear in the userid
|
||||
of the key you're looking for, or by typing in the keyid in hex format ("0x...")
|
||||
<p>
|
||||
<form action="/pks/lookup" method="get">
|
||||
Search String: <input name="search" size="40"> <br>
|
||||
Show PGP "fingerprints" for keys
|
||||
<input type="checkbox" name="fingerprint"> <br>
|
||||
Show SKS full-key hashes
|
||||
<input type="checkbox" name="hash"> <br>
|
||||
Search for keys: <br>
|
||||
<input type="radio" name="op" value="index"> get regular index of matching keys
|
||||
<br>
|
||||
<input type="radio" name="op" value="vindex" CHECKED> get <b>verbose</b>
|
||||
index of matching keys <br>
|
||||
<input type="radio" name="op" value="get"> retrieve ascii-armored keys <br>
|
||||
<input type="radio" name="op" value="hget"> retrieve keys by full-key hash
|
||||
<br>
|
||||
<input type="reset" value="Reset">
|
||||
<input type="submit">
|
||||
</form>
|
||||
<br>
|
||||
<h3>Submit a key</h3>
|
||||
You can submit a key by simply pasting in the ASCII-armored version
|
||||
of your key and clicking on submit.
|
||||
<form action="/pks/add" method="post">
|
||||
<textarea name="keytext" rows="20" cols="66"></textarea> <br>
|
||||
<input type="reset" value="Reset">
|
||||
<input type="submit" value="Submit this key to the keyserver!">
|
||||
</form>
|
||||
<br>
|
||||
<br>
|
||||
32
sks/templates/sksconf.erb
Normal file
32
sks/templates/sksconf.erb
Normal file
|
|
@ -0,0 +1,32 @@
|
|||
# /etc/sks/sksconf
|
||||
#
|
||||
# The configuration file for your SKS server.
|
||||
# You can find more options in sks(8) manpage.
|
||||
|
||||
# Set server hostname
|
||||
hostname: <%= @fqdn %>
|
||||
|
||||
# Set recon binding address
|
||||
recon_address: <%= @ipaddress %>
|
||||
|
||||
# Set recon port number
|
||||
#recon_port: 11370
|
||||
|
||||
# Set hkp binding address
|
||||
hkp_address: <%= @ipaddress %>
|
||||
|
||||
# Set hkp port number
|
||||
#hkp_port: 11371
|
||||
|
||||
# Have the HKP interface listen on port 80, as well as the hkp_port
|
||||
#use_port_80:
|
||||
|
||||
# From address used in synchronization emails used to communicate with PKS
|
||||
#from_addr: "PGP Key Server Administrator <pgp-public-keys@this.server.fdqn>"
|
||||
|
||||
# Command used for sending mail (you can use -f option to specify the
|
||||
# envelope sender address, if your MTA trusts the sks user)
|
||||
#sendmail_cmd: /usr/lib/sendmail -t -oi
|
||||
|
||||
# Runs database statistics calculation on boot (time and cpu expensive)
|
||||
#initial_stat:
|
||||
Loading…
Add table
Reference in a new issue