Defined Type: apt::repository

Defined in:
puppet/modules/apt/manifests/repository.pp

Overview

Define: apt::repository

Add an apt repository via an /etc/apt/sources.list.d/ config file.

Based on Wikimedia's apt::repository

Note: if you try to use apt::repository and require_package() in the same manifest you will ends up making a circular dep on Exec['apt-get update']. The fix for this is to separate them into independent classes (like X::repo and X::packages).

Parameters

uri

URI to repo

dist

Distribution

components

Components to install from this repo

source

Add deb-src line? Default true.

keyfile

GPG key used to sign packages in this repo. Default undef.

can_trust

Should this repo be trusted for installing unsinged packages? Default false.

comment_old

Comment out matching lines in /etc/apt/sources.list. Default false.

ensure

Ensure present/absent. Default present.

Parameters:

  • uri (Any)
  • dist (Any)
  • components (Any)
  • source (Any) (defaults to: true)
  • keyfile (Any) (defaults to: undef)
  • can_trust (Any) (defaults to: false)
  • comment_old (Any) (defaults to: false)
  • ensure (Any) (defaults to: 'present') 


39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
 
# File 'puppet/modules/apt/manifests/repository.pp', line 39

define apt::repository (
    $uri,
    $dist,
    $components,
    $source      = true,
    $keyfile     = undef,
    $can_trust   = false,
    $comment_old = false,
    $ensure      = 'present',
) {
    $trust = $can_trust ? {
        true    => '[trusted=yes] ',
        default => '',
    }

    $binline = "deb ${trust}${uri} ${dist} ${components}\n"
    $srcline = $source ? {
        true    => "deb-src ${uri} ${dist} ${components}\n",
        default => '',
    }

    if $keyfile {
        file { "/var/lib/apt/keys/${name}.gpg":
            ensure => present,
            owner  => 'root',
            group  => 'root',
            mode   => '0400',
            source => $keyfile,
            before => File["/etc/apt/sources.list.d/${name}.list"],
        }

        exec { "/usr/bin/apt-key add /var/lib/apt/keys/${name}.gpg":
            subscribe   => File["/var/lib/apt/keys/${name}.gpg"],
            refreshonly => true,
        }
    }

    file { "/etc/apt/sources.list.d/${name}.list":
        ensure  => $ensure,
        owner   => 'root',
        group   => 'root',
        mode    => '0444',
        content => "${binline}${srcline}",
        notify  => Exec['apt-get update'],
    }

    if $comment_old {
        $escuri = regsubst(regsubst($uri, '/', '\/', 'G'), '\.', '\.', 'G')
        $binre = "deb(-src)?\s+${escuri}\s+${dist}\s+${components}"

        # comment out the old entries in /etc/apt/sources.list
        exec { "apt-${name}-sources":
            command => "/bin/sed -ri '/${binre}/s/^deb/#deb/' /etc/apt/sources.list",
            creates => "/etc/apt/sources.list.d/${name}.list",
            before  => File["/etc/apt/sources.list.d/${name}.list"],
        }
    }
}