Устанока Крипто про 5

[Костюков Владимир]

Задание автоматизации.

{% set ver = salt['pillar.get']("ver") %}
{% set uninst_cpro = salt['pillar.get']("uninst_cpro") %}
{% set src_path = salt['pillar.get']("src_path") %}
{% set ifc_cfg = salt['pillar.get']("ifc_cfg") %}

{% if uninst_cpro is defined %}
uninstall_cpro:
  file.managed:
    - name: /usr/local/bin/cpro_uninstall.sh
    - source: {{ src_path }}
    - skip_verify: True
    - user: root
    - group: root
    - mode: 744
  cmd.run:
    - name: /usr/local/bin/cpro_uninstall.sh
{% endif %}

{% if ver == '4' %}
  {% set repo_add = 'cpro4' %}
  {% set repo_rm1 = 'cpro' %}
  {% set repo_rm2 = 'cproc' %}
{% elif ver == '5' %}
  {% set repo_add = 'cpro' %}
  {% set repo_rm1 = 'cpro4' %}
  {% set repo_rm2 = 'cproc' %}
{% else %}
  {% set repo_add = 'cproc' %}
  {% set repo_rm1 = 'cpro' %}
  {% set repo_rm2 = 'cpro4' %}
{% endif %}

repo_add:
  pkgrepo.managed:
    - name: deb [trusted=yes] http://repo.nii.test/repos/{{ repo_add }} {{ repo_add }} main
    - file: /etc/apt/sources.list.d/{{ repo_add }}.list

repo_rm1:
  pkgrepo.absent:
    - name: deb [trusted=yes] http://repo.nii.test/repos/{{ repo_rm1 }} {{ repo_rm1 }} main
repo_rm2:
  pkgrepo.absent:
    - name: deb [trusted=yes] http://repo.nii.test/repos/{{ repo_rm2 }} {{ repo_rm2 }} main
inst_cpro:
  pkg.installed:
    - refresh: True
    - pkgs:
{% if ver == '4' %}
      - cprocsp-cpopenssl-64
      - cprocsp-cpopenssl-base
      - cprocsp-cpopenssl-gost-64
      - cprocsp-curl-64
      - cprocsp-rdr-emv-64
      - cprocsp-rdr-gui-gtk-64
      - cprocsp-rdr-inpaspot-64
      - cprocsp-rdr-mskey-64
      - cprocsp-rdr-novacard-64
      - cprocsp-rdr-pcsc-64
      - cprocsp-rdr-rutoken-64
      - cprocsp-stunnel-64
      - lsb-cprocsp-base
      - lsb-cprocsp-ca-certs
      - lsb-cprocsp-capilite-64
      - lsb-cprocsp-kc1-64
      - lsb-cprocsp-pkcs11-64
      - lsb-cprocsp-rdr-64
      - cprocsp-pki-cades
      - cprocsp-pki-plugin
      - ifcplugin
{% else %}
      - librtpkcs11ecp
      - cprocsp-cptools-gtk-64
      - cprocsp-curl-64
      - cprocsp-rdr-cloud-64
      - cprocsp-rdr-cpfkc-64
      - cprocsp-rdr-emv-64
      - cprocsp-rdr-gui-gtk-64
      - cprocsp-rdr-infocrypt-64
      - cprocsp-rdr-inpaspot-64
      - cprocsp-rdr-kst-64
      - cprocsp-rdr-mskey-64
      - cprocsp-rdr-novacard-64
      - cprocsp-rdr-pcsc-64
      - cprocsp-rdr-rosan-64
      - cprocsp-rdr-rutoken-64
      - cprocsp-stunnel-64
      - lsb-cprocsp-base
      - lsb-cprocsp-ca-certs
      - lsb-cprocsp-capilite-64
      - lsb-cprocsp-kc1-64
      - lsb-cprocsp-pkcs11-64
      - lsb-cprocsp-rdr-64
      - cprocsp-pki-cades-64
      - cprocsp-pki-plugin-64
      - ifcplugin
{% endif %}
    - require:
      - pkgrepo: repo_add

ifc_cfg:
  file.managed:
    - name: /etc/ifc.cfg
    - source: {{ ifc_cfg }}
    - skip_verify: True
    - user: root
    - group: root
    - mode: 644

tune_firefox:
  file.symlink:
    - name: /usr/lib/mozilla/plugins/lib/libcppkcs11.so
{% if ver == '4' %}
    - target: /opt/cprocsp/lib/amd64/libcppkcs11.so.4.0.4
{% else %}
    - target: /opt/cprocsp/lib/amd64/libcppkcs11.so.4.0.5
{% endif %}

librtpkcs11ecp_2.14.1.0-1_amd64.deb скачивается тут
repo.nii.test меняете на свой адрес репозитория
uninstall и ifc.conf положить на web server.
аттрибут ver может иметь значение 4 5 и 5c
ifc_cfg = путь через http:/fqdn/ifc.cfg
src_path = путь через http:/fqdn/uninstall.sh (можно взять из архива)

Задание автоматизации на регистрацию ключа

{% set license = salt['pillar.get']("license") %}
# активация лицензии командой /opt/cprocsp/sbin/<arch>/cpconfig -license -set <license>

cpconfig-license:
  cmd.run:
    - name: /opt/cprocsp/sbin/amd64/cpconfig -license -set {{ license }}

Атрибут задания license

 

[Костюков Владимир]

В ТГ можно получить образ по запросу