playbook: add re6stnet-upgrader playbook

playbook/re6stnet-upgrade.yml

+- name: a play that runs entirely on the ansible host
+  hosts: 127.0.0.1
+  connection: local
+
+  vars:
+    - computer_name: noname
+    - slapostoken: notoken
+
+  vars_files:
+    - settings/vifib.yml
+
+  roles:
+    - {role: re6stnet-upgrader}

playbook/roles/re6stnet-upgrader/files/key_1A716324.gpg

+-----BEGIN PGP PUBLIC KEY BLOCK-----
+Version: GnuPG v1
+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+=RT2A
+-----END PGP PUBLIC KEY BLOCK-----

playbook/roles/re6stnet-upgrader/files/key_2EB4D2F994A63987.gpg

+-----BEGIN PGP PUBLIC KEY BLOCK-----
+Version: GnuPG v1.4.5 (GNU/Linux)
+
+mQGiBE9rM7ARBACILnCus7kJJtRKskvLcQVl1/cIF241w1XSeK23HHn/lpKjNmQ8
+C6Uaqe4RI6aBMtJq7/9pcoq165Cz+fjW5xJYRdOTCJV+8gVCeXeJ1juAxZ2cU5NB
+uAJ/7rG9mu2WgtSO8s5O8Hihpmn8Z/xEnYn+Fh45lG3u9+Lkum/WMSJ+mwCg1Jw3
+P2T+dffvvWrZgvfacWz0uEMD/2M+2B9XJ0Ga4Z+yVuU57CvsaHJMGnPVnwsgCu8u
+KIvkawiOg/HzNgIj88yETu0Q8HhuwfbdusRfv22MGmxvqvLGDGUSkkzQ/bev2vSc
+fQAerKe2+BAV3QdPWhsVh2OTLEgDn7j+qewxih2+l6ASATs++6VX3JPuISKi5XMV
+1aAvA/4vyG9evJ6DlAxfd235t3LUsYSmzKa5/1Wv4bVfAQXism4oGS4vygaTFqs7
+tsBitWSmp+Jo7Fc7a5QRX/yL3uyDkXBB7NLPmYitFT5OvcdKg4U0fHigWxhzl8Xs
+GMQZrlokbwJ/JxLlB1xYmdotfEYCwMJYc9momYg21FvMPfFu9rRCaG9tZTpWSUZJ
+Qm5leGVkaSBPQlMgUHJvamVjdCA8aG9tZTpWSUZJQm5leGVkaUBidWlsZC5vcGVu
+c3VzZS5vcmc+iGYEExECACYFAlOMizICGwMFCQhAB4IGCwkIBwMCBBUCCAMEFgID
+AQIeAQIXgAAKCRAutNL5lKY5h3y4AJ4qgG9vVq7jPWW+oiFlO+xW9X7YrgCgs/oW
+2c0IgUcwyXKNlbSYqGyu0l2IRgQTEQIABgUCT2szsAAKCRA7MBG3a51lI7sdAJ9q
+/+6D3FndEZieHpJw/kG1eZLu/ACeKk0hcqg9zrFwj21oBr96kOBXCTs=
+=8ciq
+-----END PGP PUBLIC KEY BLOCK-----

playbook/roles/re6stnet-upgrader/files/re6st_db_create.sql

+PRAGMA foreign_keys=OFF;
+BEGIN TRANSACTION;
+CREATE TABLE peer (
+  prefix TEXT PRIMARY KEY NOT NULL,
+  address TEXT NOT NULL);
+CREATE TABLE config (
+  name TEXT PRIMARY KEY NOT NULL,
+  value);
+COMMIT;

playbook/roles/re6stnet-upgrader/files/vifib_centos6.repo

+[home_VIFIBnexedi]
+name=SlapOS-Node (CentOS_CentOS-6)
+type=rpm-md
+baseurl=http://download.opensuse.org/repositories/home:/VIFIBnexedi/CentOS_CentOS-6/
+gpgcheck=1
+gpgkey=http://download.opensuse.org/repositories/home:/VIFIBnexedi/CentOS_CentOS-6//repodata/repomd.xml.key
+enabled=1

playbook/roles/re6stnet-upgrader/files/vifib_centos7.repo

+[home_VIFIBnexedi]
+name=SlapOS-Node (CentOS_7)
+type=rpm-md
+baseurl=http://download.opensuse.org/repositories/home:/VIFIBnexedi/CentOS_7/
+gpgcheck=1
+gpgkey=http://download.opensuse.org/repositories/home:/VIFIBnexedi/CentOS_7//repodata/repomd.xml.key
+enabled=1

playbook/roles/re6stnet-upgrader/files/vifib_fedora20.repo

+[home_VIFIBnexedi]
+name=SlapOS-Node (Fedora_20)
+type=rpm-md
+baseurl=http://download.opensuse.org/repositories/home:/VIFIBnexedi/Fedora_20/
+gpgcheck=1
+gpgkey=http://download.opensuse.org/repositories/home:/VIFIBnexedi/Fedora_20//repodata/repomd.xml.key
+enabled=1

playbook/roles/re6stnet-upgrader/files/vifib_fedora21.repo

+[home_VIFIBnexedi]
+name=SlapOS-Node (Fedora_21)
+type=rpm-md
+baseurl=http://download.opensuse.org/repositories/home:/VIFIBnexedi/Fedora_21/
+gpgcheck=1
+gpgkey=http://download.opensuse.org/repositories/home:/VIFIBnexedi/Fedora_21//repodata/repomd.xml.key
+enabled=1

playbook/roles/re6stnet-upgrader/tasks/debian.yml

+---
+    - name: Install vifib package repository
+      apt_repository:
+            repo: "deb http://download.opensuse.org/repositories/home:/VIFIBnexedi/Debian_{{ ansible_distribution_major_version }}.0 ./"
+            state: present
+            update_cache: yes
+
+    - apt_key:
+            data: "{{ lookup('file', 'key_1A716324.gpg') }}"
+
+    - apt_key:
+            data: "{{ lookup('file', 'key_2EB4D2F994A63987.gpg') }}"
+
+    - name: Purge old re6stnet package
+      apt: name=re6stnet state=absent purge=yes
+
+    - name: Install re6st-node package
+      apt: name=re6st-node update_cache=yes state=latest

playbook/roles/re6stnet-upgrader/tasks/main.yml

+---
+    - command: mktemp
+      register: export_csv
+
+    - name: Backup re6st certificates
+      command: cp -r /etc/re6stnet /etc/re6stnet.back creates=/etc/re6stnet.back removes=/etc/re6stnet
+
+    - apt: name=sqlite3 state=present update_cache=yes
+      when: ansible_os_family == "Debian"
+
+    - yum: name=sqlite state=present update_cache=yes
+      when: ansible_os_family == "Centos" or ansible_os_family == "RedHat"
+
+    - name: Dump cache
+      shell: sqlite3 -noheader -csv /var/lib/re6stnet/peers.db "select * from peer;" > {{ export_csv.stdout }} removes=/var/lib/re6stnet/peers.db 
+
+    - include: debian.yml
+      when: ansible_os_family == "Debian"
+
+    - include: rhel.yml
+      when: ansible_os_family == "Centos" or ansible_os_family == "RedHat"
+
+    - file: path=/var/lib/re6stnet owner=root group=root mode=0755 state=directory
+
+    - copy: 
+        src: re6st_db_create.sql
+        dest: /tmp/
+        owner: root
+        group: root
+        mode: 0644
+
+    - name: Create new cache
+      shell: sqlite3 /var/lib/re6stnet/cache.db < /tmp/re6st_db_create.sql && rm /tmp/re6st_db_create.sql
+
+    - name: Fill new cache
+      command: sqlite3 -noheader -csv /var/lib/re6stnet/cache.db ".import {{ export_csv.stdout }} peer" 
+
+    - name: Restart re6stnet service
+      service: name=re6stnet enabled=yes state=restarted
+
+    - command: rm {{ export_csv.stdout }}

playbook/roles/re6stnet-upgrader/tasks/rhel.yml

+---
+    - name: Install vifib package repository
+      copy: 
+        src: vifib_{{ ansible_distribution|lower }}{{ ansible_distribution_major_version }}.repo
+        dest: /etc/yum.repos.d/
+        owner: root
+        group: root
+        mode: 0644
+
+    - name: Purge old re6stnet package
+      yum: name=re6stnet state=absent
+
+    - name: Install re6st-node package
+      yum: name=re6st-node update_cache=yes state=latest