lassulus
1b9445b71f
clan-cli secrets: generate secrets inside bubblewrap
2024-01-24 19:20:07 +01:00
lassulus
bdd1f9be6d
machines.Machine: refactor flake_dir -> flake; use Machine class in vm
2024-01-24 15:49:12 +01:00
lassulus
1d4e533438
move secret stores into clan_cli codebase
2024-01-24 15:49:12 +01:00
lassulus
ed6eb50f7d
WIP: clan-cli secrets: add secret_store as python class
2024-01-23 15:04:40 +01:00
Qubasa
38e2c29f08
cmd.py refactor part 6
2024-01-12 17:02:56 +01:00
Qubasa
6b39ea5592
cmd.py refactor part 5
2024-01-12 16:52:34 +01:00
Qubasa
c56e1d1684
cmd.py: Fix deadlock because of incorrect select usage
2024-01-11 23:03:14 +01:00
Qubasa
2c6c4bacce
Identified deadlocking funciton
2024-01-11 22:28:35 +01:00
Qubasa
3ed58de082
Fixed missing log.BOTH and error_msg at prev refactors
2024-01-11 21:11:49 +01:00
Qubasa
13ba1440bd
cmd.py refactor part 4
2024-01-11 21:11:49 +01:00
Jörg Thalheim
0e91f8721f
prefix nixpkgs# explicitly in nix_shell
...
This makes the function usage less confusing (you can now tell from the call side what are flags and what is passed to nix-shell) and allows to use different flakes to download packages.
2023-12-08 15:14:14 +01:00
Jörg Thalheim
f208bc0f22
add option to extend path for generator
2023-11-30 14:15:40 +01:00
Jörg Thalheim
ed472a6425
error if age key cannot be decoded
2023-11-30 10:57:58 +01:00
Jörg Thalheim
6f0722c692
modernisation for python 3.11
2023-11-29 13:29:45 +00:00
Jörg Thalheim
7d755beca6
enable more linting
2023-11-29 13:29:45 +00:00
Jörg Thalheim
39617bbf03
run_upload_secrets: don't swallow stdout output
2023-11-29 11:38:01 +01:00
Jörg Thalheim
5e7d7c251e
add sops command to sync keys with secrets
2023-11-29 11:34:19 +01:00
Jörg Thalheim
44fa268205
secrets/generate-private-key: just create parent opportunistically
2023-11-16 13:19:12 +01:00
kenji
f88a17ad34
clan_cli: create key directory
2023-11-15 23:15:12 +01:00
Jörg Thalheim
4514b09f81
also regenerate secrets if a fact is missing
2023-11-14 17:07:58 +01:00
lassulus
efafe6f0e3
clan-cli secrets: flake_name -> flake_dir
2023-11-05 16:58:48 +01:00
Qubasa
0be3dac289
nix fmt
2023-10-27 19:21:50 +02:00
Qubasa
8ff80b025c
Fixing a multitude of tests
2023-10-27 19:21:50 +02:00
Qubasa
adffdc14f6
Added repro_env_break debugging command. This spawn a terminal inside the temp home folder with the same environment as the python test
2023-10-27 19:20:17 +02:00
Qubasa
9c8829c32f
nix fmt
2023-10-27 19:19:45 +02:00
Qubasa
6d0deefa6b
Added ipdb as breakpoint console. Improved logging.
2023-10-27 19:19:45 +02:00
Qubasa
d96ea61243
Secrets tests passing. nix fmt doesn't complain
2023-10-27 19:18:45 +02:00
Qubasa
7bbadaa60f
Fixed cyclic dependencie AND swapped pytest-parallel for pytest-xdist to fix deadlock in tests
2023-10-27 19:18:45 +02:00
Qubasa
ecdd4949b7
Added new type FlakeName
2023-10-27 19:18:45 +02:00
Qubasa
f976121fa6
Added flake_name:str argument everywhere, nix fmt doesn't complain anymore
2023-10-27 19:15:40 +02:00
Qubasa
b09448ab6b
Updated to main
2023-10-27 19:15:11 +02:00
DavHau
9e4c5cadf1
zerotier: fix: find free port without collissions
2023-10-05 17:03:01 +02:00
lassulus
528d0ee45a
secrets upload: skip on exit 23, cleanup
2023-10-04 21:29:19 +02:00
lassulus
01087e2da8
clan_cli: refactor secrets code into Machine class
2023-10-04 16:41:16 +02:00
lassulus
1b9ea830c9
clan-cli: add machines install
2023-10-04 16:34:37 +02:00
Jörg Thalheim
c5b0787034
also test that updating a group works
2023-10-03 16:15:36 +00:00
lassulus
251a67ae9e
clan_cli.secrets.groups: update keys if members are added/removed
2023-10-03 16:15:36 +00:00
Qubasa
6de1aeebb9
nix fmt
2023-10-03 15:22:41 +02:00
Qubasa
abd78293fc
Fixed upload_secrets_test
2023-10-03 15:14:50 +02:00
Qubasa
d60205ea56
Fixed upload_secrets_test
2023-10-03 15:10:22 +02:00
Qubasa
5628475345
Fixing PYTHONPATH in secrets/generate test
2023-10-03 15:01:13 +02:00
Qubasa
f5bead7403
API: Added test for inspect_flake
2023-10-03 13:19:20 +02:00
lassulus
0db337d57e
clan-cli secrets upload: secrets are populated into tmpdir
2023-09-29 20:05:35 +02:00
lassulus
79be9078dc
restore clanInternals with valid nixos config
2023-09-29 19:39:35 +02:00
Jörg Thalheim
9a518cd816
also encrypt secret for the machine itself
2023-09-28 17:51:37 +02:00
Jörg Thalheim
82bf417e17
add toplevel machines-json that can deploy all hosts
2023-09-28 15:23:25 +02:00
Jörg Thalheim
b3f24cf815
clanInternals.machines: invert system and machine name
2023-09-27 17:26:44 +02:00
DavHau
9825c179a8
impure-tests: migrate bash to pytest and fix stuff
2023-09-22 18:32:28 +02:00
lassulus
17520e2553
fix impure tests
2023-09-21 18:29:18 +02:00
lassulus
aeed648bd0
secrets: use clanInternal for crosscompiling, move sops generators to new file
2023-09-21 17:25:32 +02:00
