cookbook 'bsw_gpg', '= 0.1.3'
bsw_gpg (12) Versions 0.1.3 Follow2
Installs/Configures gpg using an LWRP based approach
cookbook 'bsw_gpg', '= 0.1.3', :supermarket
knife supermarket install bsw_gpg
knife supermarket download bsw_gpg
gpg Cookbook
LWRP focused cookbook that helps load public or private keys into your GPG keyring from either a string, a cookbook file, or a Chef vault item. The cookbook will check to see if the key fingerprint and user name already exist in the key ring before converging. The resources automatically choose secret vs. public keyrings based on the header of the base64 key contents.
Requirements
Ubuntu 14.04
Attributes
None, LWRP focused
Usage
Include the bsw_gpg::default recipe in your cookbook, which will install the gnupg2 package
Install from a string
bsw_gpg_load_key_from_string 'a string key' do key_contents '-----BEGIN PGP PUBLIC KEY BLOCK----- (rest of key here' for_user 'joe' # The user you want to install the key to end
Install from a cookbook file
public_key_in_base_64 = cookbook_file_contents 'something.pub','mycookbookname' bsw_gpg_load_key_from_string 'a cookbook key' do key_contents public_key_in_base_64 for_user 'joe' # The user you want to install the key to end
Install from a Chef vault item
bsw_gpg_load_key_from_chef_vault 'a chef vault key' do data_bag 'thedatabag' item 'the_item' json_key 'json_key' # Expects to find a hash key with the base64 key contents in it for_user 'joe' # The user you want to install the key to end
Install from a key server
bsw_gpg_load_key_from_key_server 'some key' do key_server 'keyserver.ubuntu.com' key_id '561F9B9CAC40B2F7' for_user 'root' end
Use a non-default keyring
You can use this on any of the resources
bsw_gpg_load_key_from_key_server 'some key' do key_server 'keyserver.ubuntu.com' key_id '561F9B9CAC40B2F7' for_user 'root' keyring_file 'stuff_secret.gpg' end
Ignore the trust-db rebuild
You can use this on any of the resources. Effectively adds --no-auto-check-trustdb to all gpg keyring commands
bsw_gpg_load_key_from_key_server 'some key' do key_server 'keyserver.ubuntu.com' key_id '561F9B9CAC40B2F7' for_user 'root' suppress_trust_db_check true end
Force trusting (or not) of newly imported keys
By default, after importing the key, if a private key is being imported into the default keyring, these LWRPs runs the equivalent of echo "<keyFingerprint>:6:\n" | gpg2 --import-ownertrust. If you wish to force the trust to be imported (or not imported) regardless of the default, you can do something like this.
bsw_gpg_load_key_from_chef_vault 'a chef vault key' do data_bag 'thedatabag' item 'the_item' json_key 'json_key' # Expects to find a hash key with the base64 key contents in it for_user 'joe' # The user you want to install the key to force_import_owner_trust false # Will prevent an import that otherwise would have occurred end bsw_gpg_load_key_from_chef_vault 'a chef vault key' do data_bag 'thedatabag' item 'the_item' json_key 'json_key' # Expects to find a hash key with the base64 key contents in it for_user 'joe' # The user you want to install the key to keyring_file 'stuff_secret.gpg' force_import_owner_trust true # Will force an import that otherwise would NOT have occurred end
Contributing
- Fork the repository on Github
- Create a named feature branch (like
add_component_x
) - Write your change
- Write tests for your change (if applicable)
- Run the tests, ensuring they all pass
- Submit a Pull Request using Github
License and Authors
Authors: Brady Wied
Copyright (c) 2014, BSW Technology Consulting LLC
All rights reserved.
Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met:
- Redistributions of source code must retain the above copyright notice, this list of conditions and the following disclaimer.
- Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following disclaimer in the documentation and/or other materials provided with the distribution.
THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
Dependent cookbooks
This cookbook has no specified dependencies.
Contingent cookbooks
gpg CHANGELOG
This file is used to list changes made in each version of the gpg cookbook.
0.1.0
- [your_name] - Initial release of gpg
Check the Markdown Syntax Guide for help with Markdown.
The Github Flavored Markdown page describes the differences between markdown on github and standard markdown.