Skip to content

Commit 916cac2

Browse files
authored
Remove old 4172a230 GPG key (#78)
1 parent 8683a0b commit 916cac2

2 files changed

Lines changed: 19 additions & 6 deletions

File tree

datadog/install.sls

Lines changed: 5 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -116,14 +116,15 @@ datadog-repo:
116116
- name: datadog
117117
- baseurl: https://yum.datadoghq.com/{{ path }}/{{ grains['cpuarch'] }}
118118
- gpgcheck: '1'
119-
{%- if latest_agent_version or parsed_version[1] == '7' %}
120119
- gpgkey: https://keys.datadoghq.com/DATADOG_RPM_KEY_CURRENT.public https://keys.datadoghq.com/DATADOG_RPM_KEY_FD4BF915.public https://keys.datadoghq.com/DATADOG_RPM_KEY_E09422B3.public
121-
{%- else %}
122-
- gpgkey: https://keys.datadoghq.com/DATADOG_RPM_KEY_CURRENT.public https://keys.datadoghq.com/DATADOG_RPM_KEY_FD4BF915.public https://keys.datadoghq.com/DATADOG_RPM_KEY_E09422B3.public https://keys.datadoghq.com/DATADOG_RPM_KEY.public
123-
{%- endif %}
124120
- sslverify: '1'
125121
{%- endif %}
126122
123+
key-4172a230-removal:
124+
cmd.run:
125+
- name: rpm --erase gpg-pubkey-4172a230-55dd14f6
126+
- onlyif: rpm -q gpg-pubkey-4172a230-55dd14f6
127+
127128
datadog-pkg:
128129
pkg.installed:
129130
- name: datadog-agent

test/utils/check_yum_install.py

Lines changed: 14 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,20 +1,27 @@
11
#!/usr/bin/env python
22

3+
import subprocess
34
import yum, sys
45
from helpers import get_options, check_major_version, check_install_info
56

67
def get_yum_package_version(package_name):
78
yb = yum.YumBase()
89
try:
910
# Use next to stop at the first match
10-
pkg = next(p for p in yb.rpmdb.returnPackages() if p.name == "datadog-agent")
11+
pkg = next(p for p in yb.rpmdb.returnPackages() if p.name == package_name)
1112
installed_version = pkg.version
1213
except StopIteration:
1314
# datadog-agent is not in the list of installed packages
1415
installed_version = None
1516

1617
return installed_version
1718

19+
def is_rpm_package_installed(package_name):
20+
try:
21+
subprocess.check_output(["rpm", "-q", package_name])
22+
return True
23+
except subprocess.CalledProcessError as e:
24+
return False
1825

1926
def main(argv):
2027
expected_major_version = get_options(argv[1:])
@@ -40,8 +47,13 @@ def main(argv):
4047
else:
4148
print("Skipping install_info check.")
4249

43-
sys.exit()
50+
if is_rpm_package_installed("gpg-pubkey-4172a230-55dd14f6"):
51+
print("GPG key 4172a230 is installed, but shouldn't.")
52+
sys.exit(1)
53+
else:
54+
print("GPG key 4172a230 is not installed.")
4455

56+
sys.exit()
4557

4658
if __name__ == "__main__":
4759
main(sys.argv)

0 commit comments

Comments
 (0)