From 13179ee96b344cf055b6249c64733fc502c014f4 Mon Sep 17 00:00:00 2001
From: Ricky Elrod <codeblock@fedoraproject.org>
Date: Mon, 5 Dec 2016 18:35:13 +0000
Subject: [PATCH] add script + playbook for modernpaste paste deactivation

Signed-off-by: Ricky Elrod <codeblock@fedoraproject.org>
---
 playbooks/deactivate_modernpaste_paste.yml  | 11 +++++++++++
 roles/modernpaste/files/deactivate-paste.py |  7 +++++++
 roles/modernpaste/tasks/main.yml            |  5 +++++
 3 files changed, 23 insertions(+)
 create mode 100644 playbooks/deactivate_modernpaste_paste.yml
 create mode 100644 roles/modernpaste/files/deactivate-paste.py

diff --git a/playbooks/deactivate_modernpaste_paste.yml b/playbooks/deactivate_modernpaste_paste.yml
new file mode 100644
index 0000000000..8cf28eb87e
--- /dev/null
+++ b/playbooks/deactivate_modernpaste_paste.yml
@@ -0,0 +1,11 @@
+# requires --extra-vars="target='modernpaste01.phx2.fedoraprjoect.org' paste='WMk4~kSfeW1OUNsLjF8hlMnRi-rYnlYzizqToCmG3BY='"
+# where target is the box to run it on (usually modernpaste01.phx2 or modernpaste01.stg.phx2)
+# and where paste is the encrypted paste ID of the paste.
+
+- name: Deactivates a modern-paste paste
+  hosts: "{{ target }}"
+  user: root
+
+  tasks:
+      - name: Run deactivate-paste.py
+        command: "python /usr/local/bin/deactivate-paste.py {{paste}}"
diff --git a/roles/modernpaste/files/deactivate-paste.py b/roles/modernpaste/files/deactivate-paste.py
new file mode 100644
index 0000000000..445cc5ec8e
--- /dev/null
+++ b/roles/modernpaste/files/deactivate-paste.py
@@ -0,0 +1,7 @@
+#!/usr/bin/env python
+import sys
+sys.path.append('/usr/share/modern-paste/app')
+from util.cryptography import get_decid
+from database.paste import deactivate_paste
+
+print(deactivate_paste(get_decid(sys.argv[1])))
diff --git a/roles/modernpaste/tasks/main.yml b/roles/modernpaste/tasks/main.yml
index a9a235094d..f174356787 100644
--- a/roles/modernpaste/tasks/main.yml
+++ b/roles/modernpaste/tasks/main.yml
@@ -39,6 +39,11 @@
   - modernpaste
   notify: reload httpd
 
+- name: Script for manual paste deactivation
+  copy: src=deactivate-paste.py dest=/usr/local/bin/deactivate-paste.py owner=root group=root mode=755
+  tags:
+  - modernpaste
+
 - name: set sebooleans so paste can talk to the db
   seboolean: name=httpd_can_network_connect_db state=true persistent=true
   tags: