|
Lines 5-10
Link Here
|
| 5 |
# Author: Karl Trygve Kalleberg <karltk@gentoo.org> |
5 |
# Author: Karl Trygve Kalleberg <karltk@gentoo.org> |
| 6 |
# Rewritten from the old, Perl-based emerge-webrsync script |
6 |
# Rewritten from the old, Perl-based emerge-webrsync script |
| 7 |
|
7 |
|
|
|
8 |
# |
| 9 |
# gpg key import |
| 10 |
# KEY_ID=0x7DDAD20D |
| 11 |
# gpg --homedir /etc/portage/gnupg --keyserver subkeys.pgp.net --recv-keys $KEY_ID |
| 12 |
# gpg --homedir /etc/portage/gnupg --edit-key $KEY_ID trust |
| 13 |
|
| 8 |
# If PORTAGE_NICENESS is overriden via the env then it will |
14 |
# If PORTAGE_NICENESS is overriden via the env then it will |
| 9 |
# still pass through the portageq call and override properly. |
15 |
# still pass through the portageq call and override properly. |
| 10 |
PORTAGE_NICENESS="$(/usr/lib/portage/bin/portageq envvar PORTAGE_NICENESS)" |
16 |
PORTAGE_NICENESS="$(/usr/lib/portage/bin/portageq envvar PORTAGE_NICENESS)" |
|
Lines 21-26
USERLAND="$(/usr/lib/portage/bin/portage
Link Here
|
| 21 |
DISTDIR="$(/usr/lib/portage/bin/portageq envvar PORTAGE_TMPDIR)/emerge-webrsync" |
27 |
DISTDIR="$(/usr/lib/portage/bin/portageq envvar PORTAGE_TMPDIR)/emerge-webrsync" |
| 22 |
PORTAGE_INST_UID="$(/usr/lib/portage/bin/portageq envvar PORTAGE_INST_UID)" |
28 |
PORTAGE_INST_UID="$(/usr/lib/portage/bin/portageq envvar PORTAGE_INST_UID)" |
| 23 |
PORTAGE_INST_GID="$(/usr/lib/portage/bin/portageq envvar PORTAGE_INST_GID)" |
29 |
PORTAGE_INST_GID="$(/usr/lib/portage/bin/portageq envvar PORTAGE_INST_GID)" |
|
|
30 |
WEBSYNC_VERIFY_SIGNATURE="$(/usr/lib/portage/bin/portageq envvar WEBSYNC_VERIFY_SIGNATURE)" |
| 31 |
PORTAGE_GPG_HOME="$(/usr/lib/portage/bin/portageq envvar PORTAGE_GPG_HOME)" |
| 32 |
|
| 33 |
if [ -z "$WEBSYNC_VERIFY_SIGNATURE" ]; then |
| 34 |
WEBSYNC_VERIFY_SIGNATURE=0 |
| 35 |
fi |
| 36 |
|
| 24 |
if [ ! -d $DISTDIR ] ; then |
37 |
if [ ! -d $DISTDIR ] ; then |
| 25 |
mkdir -p $DISTDIR |
38 |
mkdir -p $DISTDIR |
| 26 |
fi |
39 |
fi |
|
Lines 50-55
else
Link Here
|
| 50 |
md5_com='true' |
63 |
md5_com='true' |
| 51 |
fi |
64 |
fi |
| 52 |
|
65 |
|
|
|
66 |
if [ $WEBSYNC_VERIFY_SIGNATURE != 0 ]; then |
| 67 |
if type -p gpg > /dev/null; then |
| 68 |
gpg_com='gpg --homedir "${PORTAGE_GPG_HOME}" --verify ${FILE}.gpgsig ${FILE}' |
| 69 |
else |
| 70 |
echo "Cannot find gpg" |
| 71 |
exit 1 |
| 72 |
fi |
| 73 |
else |
| 74 |
gpg_com='true' |
| 75 |
fi |
| 76 |
|
| 53 |
sync_local() { |
77 |
sync_local() { |
| 54 |
echo Syncing local tree... |
78 |
echo Syncing local tree... |
| 55 |
if type -p tarsync &> /dev/null; then |
79 |
if type -p tarsync &> /dev/null; then |
|
Lines 123-129
while (( $attempts < 40 )) ; do
Link Here
|
| 123 |
echo " --- No md5sum present on the mirror. (Not yet available.)" |
147 |
echo " --- No md5sum present on the mirror. (Not yet available.)" |
| 124 |
continue |
148 |
continue |
| 125 |
elif [ -s "${FILE}" ]; then |
149 |
elif [ -s "${FILE}" ]; then |
| 126 |
if eval "$md5_com"; then |
150 |
if eval "$md5_com" && eval "$gpg_com"; then |
| 127 |
echo " === snapshot $FILE is correct, using it" |
151 |
echo " === snapshot $FILE is correct, using it" |
| 128 |
sync_local |
152 |
sync_local |
| 129 |
echo |
153 |
echo |
|
Lines 139-148
while (( $attempts < 40 )) ; do
Link Here
|
| 139 |
URI="${i}/snapshots/$FILE" |
163 |
URI="${i}/snapshots/$FILE" |
| 140 |
rm -f "$FILE" |
164 |
rm -f "$FILE" |
| 141 |
if (eval "$FETCHCOMMAND $wgetops") && [ -s "$FILE" ]; then |
165 |
if (eval "$FETCHCOMMAND $wgetops") && [ -s "$FILE" ]; then |
|
|
166 |
URI="${i}/snapshots/$FILE.gpgsig" |
| 167 |
rm -f "$FILE.gpgsig" |
| 168 |
|
| 169 |
if [ $WEBSYNC_VERIFY_SIGNATURE != 0 ]; then |
| 170 |
if ! (eval "$FETCHCOMMAND $wgetops") || ! [ -s "$FILE.gpgsig" ]; then |
| 171 |
echo "Cannot download signature for $FILE" |
| 172 |
continue |
| 173 |
fi |
| 174 |
fi |
| 175 |
|
| 142 |
if ! eval "$md5_com"; then |
176 |
if ! eval "$md5_com"; then |
| 143 |
echo "md5 failed on $FILE" |
177 |
echo "md5 failed on $FILE" |
| 144 |
rm ${FILE} |
178 |
rm ${FILE} |
| 145 |
continue |
179 |
continue |
|
|
180 |
elif ! eval "$gpg_com"; then |
| 181 |
echo "Signature validation failed on $FILE" |
| 182 |
rm ${FILE} |
| 183 |
continue |
| 146 |
else |
184 |
else |
| 147 |
sync_local |
185 |
sync_local |
| 148 |
echo |
186 |
echo |
