diff options
Diffstat (limited to 'modules/gnupg/manifests/init.pp')
| -rw-r--r-- | modules/gnupg/manifests/init.pp | 57 |
1 files changed, 1 insertions, 56 deletions
diff --git a/modules/gnupg/manifests/init.pp b/modules/gnupg/manifests/init.pp index 0c183c56..d6ae319d 100644 --- a/modules/gnupg/manifests/init.pp +++ b/modules/gnupg/manifests/init.pp @@ -1,56 +1 @@ -class gnupg { - class client { - package { ["gnupg","rng-utils"]: - ensure => present, - } - - file { "/usr/local/bin/create_gnupg_keys.sh": - ensure => present, - owner => root, - group => root, - mode => 755, - content => template('gnupg/create_gnupg_keys.sh') - } - } - - # debian recommend SHA2, with 4096 - # http://wiki.debian.org/Keysigning - # as they are heavy users of gpg, I will tend - # to follow them - # however, for testing purpose, 4096 is too strong, - # this empty the entropy of my vm - define keys( $email, - $key_name, - $key_type = 'RSA', - $key_length = '4096', - $expire_date = '400d', - $login = 'signbot', - $batchdir = '/var/lib/signbot/batches', - $keydir = '/var/lib/signbot/keys' - ) { - - include gnupg::client - file { "$name.batch": - ensure => present, - path => "$batchdir/$name.batch", - content => template("gnupg/batch") - } - - file { "$keydir": - ensure => directory, - owner => $login, - mode => 700, - } - - file { "$batchdir": - ensure => directory, - owner => $login, - } - - exec { "/usr/local/bin/create_gnupg_keys.sh $batchdir/$name.batch $keydir $batchdir/$name.done": - user => $login, - creates => "$batchdir/$name.done", - require => [File["$keydir"], File["$batchdir/$name.batch"], Package["rng-utils"]], - } - } -} +class gnupg { } |
