#!/usr/bin/env python3 """ Write out a puppet cosmos-modules.conf """ import hashlib import os import os.path import platform import sys from debian import debian_support try: from configobj import ConfigObj OS_INFO = ConfigObj("/etc/os-release") except (IOError, ModuleNotFoundError): OS_INFO = None try: fqdn = socket.getfqdn() hostname = fqdn.split('.')[0] except OSError: host_info = None else: domainname = '.'.join(fqdn.split(".")[1:]) environ = "beta" if (domainname.find("test") != -1) else "prod" print(domainname.find("thiss")) host_info = { "domainname": domainname, "environment": environ, "fqdn": fqdn, "hostname": hostname, } def get_file_hash(modulesfile): """ Based on https://github.com/python/cpython/pull/31930: should use hashlib.file_digest() but it is only available in python 3.11 """ try: with open(modulesfile, "rb") as fileobj: digestobj = hashlib.sha256() _bufsize = 2**18 buf = bytearray(_bufsize) # Reusable buffer to reduce allocations. view = memoryview(buf) while True: size = fileobj.readinto(buf) if size == 0: break # EOF digestobj.update(view[:size]) except FileNotFoundError: return "" return digestobj.hexdigest() def get_list_hash(file_lines): """Get hash of list contents""" file_lines_hash = hashlib.sha256() for line in file_lines: file_lines_hash.update(line) return file_lines_hash.hexdigest() def create_file_content(modules): """ Write out the expected file contents to a list so we can check the expected checksum before writing anything """ file_lines = [] file_lines.append( "# Generated by {}\n".format( # pylint: disable=consider-using-f-string os.path.basename(sys.argv[0]) ).encode("utf-8") ) for key in modules: file_lines.append( "{0:11} {1} {2} {3}\n".format( # pylint: disable=consider-using-f-string key, modules[key]["repo"], modules[key]["upgrade"], modules[key]["tag"], ).encode("utf-8") ) return file_lines def main(): """Starting point of the program""" modulesfile: str = "/etc/puppet/cosmos-modules.conf" modulesfile_tmp: str = modulesfile + ".tmp" modules: dict = { "sunet": { "repo": "https://github.com/SUNET/puppet-sunet.git", "upgrade": "yes", "tag": "stable-2023v1-2*", }, } if OS_INFO: # Make test machines use special test branch of puppet-sunet: if OS_INFO["ID"] == "ubuntu": nodename = platform.node() name_parts = nodename.split("-") if len(name_parts) > 1: if name_parts[1] == "test": modules["sunet"]["tag"] = "testing-2*" if host_info: if host_info["fqdn"] == "metrics-cd-test-1.sunet.se": modules["apt"]["tag"] = "pahol-influx*" # Build list of expected file content file_lines = create_file_content(modules) # Get hash of the list list_hash = get_list_hash(file_lines) # Get hash of the existing file on disk file_hash = get_file_hash(modulesfile) # Update the file if necessary if list_hash != file_hash: # Since we are reading the file with 'rb' when computing our hash use 'wb' when # writing so we dont end up creating a file that does not match the # expected hash with open(modulesfile_tmp, "wb") as fileobj: for line in file_lines: fileobj.write(line) # Rename it in place so the update is atomic for anything else trying to # read the file os.rename(modulesfile_tmp, modulesfile) if __name__ == "__main__": main()