-
Notifications
You must be signed in to change notification settings - Fork 150
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Generalize check of the third party RPMs
This is initial draft to generalize current check of installed third party RPMs that are not part of the installed system distribution. Original actor has been written only for RHEL systems and expected that the only vendor as such is Red Hat. However, in case of other distributions it's not true. So such a report could be confusing for users and could set wrong expectations. List of changes: * Rename and move redhatsignedrpmcheck actor to <NEW_NAME> * Update docstrings * Update the report, respecting name of the installed system * ...
- Loading branch information
Showing
4 changed files
with
41 additions
and
27 deletions.
There are no files selected for viewing
36 changes: 36 additions & 0 deletions
36
repos/system_upgrade/common/actors/distributionsignedrpmcheck/actor.py
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,36 @@ | ||
from leapp.actors import Actor | ||
from leapp.libraries.actor.distributionsignedrpmcheck import check_unsigned_packages | ||
from leapp.models import InstalledUnsignedRPM | ||
from leapp.reporting import Report | ||
from leapp.tags import ChecksPhaseTag, IPUWorkflowTag | ||
|
||
|
||
class DistributionSignedRpmCheck(Actor): | ||
""" | ||
Check if there are any packages that are not signed by distribution GPG keys. | ||
We are recognizing two (three) types of packages: | ||
* RPMs that are part of the system distribution (RHEL, Centos Stream, | ||
Fedora, ...) - which are recognized based on the signature by known GPG | ||
keys for the particular distribution. | ||
* RPMs that are not signed by such GPG keys - including RPMs not signed | ||
at all. Such RPMs are considered in general as third party content. | ||
( | ||
* some packages are known to not be signed as they are created by | ||
delivered product (which can be part of the distribution). This includes | ||
e.g. katello RPMs created in a Satellite server. We do not report | ||
such packages known to us. | ||
) | ||
If any such non-distribution installed RPMs are detected, report it | ||
to inform that user needs to take care about them before/during/after | ||
the upgrade. | ||
""" | ||
|
||
name = 'distribution_signed_rpm_check' | ||
consumes = (InstalledUnsignedRPM,) | ||
produces = (Report,) | ||
tags = (IPUWorkflowTag, ChecksPhaseTag) | ||
|
||
def process(self): | ||
check_unsigned_packages() |
File renamed without changes.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
22 changes: 0 additions & 22 deletions
22
repos/system_upgrade/common/actors/redhatsignedrpmcheck/actor.py
This file was deleted.
Oops, something went wrong.