inspect flake before configure VM

This commit is contained in:
Johannes Kirschbauer
2023-09-23 13:20:25 +02:00
parent f66d961b61
commit 211ce3e8c5
9 changed files with 307 additions and 166 deletions

View File

@@ -0,0 +1,50 @@
import asyncio
import json
from fastapi import APIRouter, HTTPException, status
from pathlib import Path
from clan_cli.webui.schemas import FlakeAction, FlakeResponse
from ...nix import nix_build, nix_eval, nix_command
router = APIRouter()
@router.get("/api/flake")
async def inspect_flake(
url: str,
) -> FlakeResponse:
actions = []
# Extract the flake from the given URL
# We do this by running 'nix flake prefetch {url} --json'
cmd = nix_command([
"flake",
"prefetch",
url,
"--json"
])
proc = await asyncio.create_subprocess_exec(
cmd[0],
*cmd[1:],
stdout=asyncio.subprocess.PIPE,
stderr=asyncio.subprocess.PIPE,
)
stdout, stderr = await proc.communicate()
if proc.returncode != 0:
raise HTTPException(status_code=status.HTTP_400_BAD_REQUEST,detail=str(stderr))
data: dict[str,str] = json.loads(stdout)
if data.get("storePath") is None:
raise HTTPException(status_code=500,detail="Could not load flake")
content: str
with open(Path(data.get("storePath", "")) / Path("flake.nix")) as f:
content = f.read()
# TODO: Figure out some measure when it is insecure to inspect or create a VM
actions.append(FlakeAction(id="vms/inspect", uri = f"api/vms/inspect"))
actions.append(FlakeAction(id="vms/create", uri = f"api/vms/create"))
return FlakeResponse(content=content, actions=actions )