gpgfs/gpgstore.py

import os
import gnupg
from binascii import hexlify
import errno
import logging

log = logging.getLogger('gpgfs')

FMT_GPG = 0

class GpgStore(object):
    def __init__(self, encroot, keyid):
        self.encroot = encroot
        self.keyid = keyid
        self.gpg = gnupg.GPG()

    def put(self, data, path=None, format=FMT_GPG):
        assert format == FMT_GPG
        if not path:
            path = hexlify(os.urandom(20)).decode('utf-8')
            path = path[:2] + '/' + path[2:]
            encdir = self.encroot + '/' + path[:2]
            if not os.path.exists(encdir):
                os.mkdir(encdir, 0o755)
        res = self.gpg.encrypt(data, self.keyid, armor=False)
        if not res.ok:
            log.error("encryption failed (keyid %s), %s: %s",
                      self.keyid, res.status, path)
            raise OSError(errno.EIO)
        try:
            with open(self.encroot + '/' + path + '.tmp', 'wb') as fd:
                fd.write(res.data)
            os.rename(self.encroot + '/' + path + '.tmp',
                      self.encroot + '/' + path)
        except IOError as err:
            log.error("write failed: %s: %s", path, str(err))
            raise OSError(err.errno)
        finally:
            try: os.remove(self.encroot + '/' + path + '.tmp')
            except: pass
        log.debug('encrypted %s' % path)
        return path

    def get(self, path, format=FMT_GPG):
        assert format == FMT_GPG
        try:
            data = open(self.encroot + '/' + path, 'rb').read()
        except OSError as err:
            log.error("read failed: %s: %s", path, str(err))
            raise
        if not data:
            return data
        res = self.gpg.decrypt(data)
        if not res.ok:
            log.error("decryption failed, %s: %s", res.status, path)
            raise OSError(errno.EIO)
        log.debug('decrypted %s' % path)
        return res.data

    def delete(self, path):
        os.remove(self.encroot + '/' + path)
        if len(path) >= 3 and path[2] == '/':
            try:
                os.rmdir(self.encroot + '/' + path[:2])
            except OSError:
                pass
        log.debug('deleted %s' % path)

    def exists(self, path):
        return os.path.exists(self.encroot + '/' + path)