lassulus
09887037f5
WIP: clan-cli secrets: add secret_store as python class
2024-01-23 15:04:40 +01:00
Qubasa
1a6983e031
cmd.py refactor part 6
2024-01-12 17:02:56 +01:00
Qubasa
ca5cc389ac
cmd.py refactor part 5
2024-01-12 16:52:34 +01:00
Qubasa
0941367bb3
cmd.py: Fix deadlock because of incorrect select usage
2024-01-11 23:03:14 +01:00
Qubasa
d1ca0eaf80
Identified deadlocking funciton
2024-01-11 22:28:35 +01:00
Qubasa
0133ccd5f7
Fixed missing log.BOTH and error_msg at prev refactors
2024-01-11 21:11:49 +01:00
Qubasa
2ae439ec52
cmd.py refactor part 4
2024-01-11 21:11:49 +01:00
Jörg Thalheim
1496f45fe2
prefix nixpkgs# explicitly in nix_shell
...
This makes the function usage less confusing (you can now tell from the call side what are flags and what is passed to nix-shell) and allows to use different flakes to download packages.
2023-12-08 15:14:14 +01:00
Jörg Thalheim
373fc83160
add option to extend path for generator
2023-11-30 14:15:40 +01:00
Jörg Thalheim
d0362bb757
error if age key cannot be decoded
2023-11-30 10:57:58 +01:00
Jörg Thalheim
f1b223d0a1
modernisation for python 3.11
2023-11-29 13:29:45 +00:00
Jörg Thalheim
26e3e3872c
enable more linting
2023-11-29 13:29:45 +00:00
Jörg Thalheim
f3b3aba6c5
run_upload_secrets: don't swallow stdout output
2023-11-29 11:38:01 +01:00
Jörg Thalheim
179d1ed2c6
add sops command to sync keys with secrets
2023-11-29 11:34:19 +01:00
Jörg Thalheim
978d9efd7e
secrets/generate-private-key: just create parent opportunistically
2023-11-16 13:19:12 +01:00
kenji
12930b4057
clan_cli: create key directory
2023-11-15 23:15:12 +01:00
Jörg Thalheim
6cb41cb006
also regenerate secrets if a fact is missing
2023-11-14 17:07:58 +01:00
lassulus
7b3d3e20b4
clan-cli secrets: flake_name -> flake_dir
2023-11-05 16:58:48 +01:00
Qubasa
c1b4fa6d55
nix fmt
2023-10-27 19:21:50 +02:00
Qubasa
3581e0c9a8
Fixing a multitude of tests
2023-10-27 19:21:50 +02:00
Qubasa
d1c35301e3
Added repro_env_break debugging command. This spawn a terminal inside the temp home folder with the same environment as the python test
2023-10-27 19:20:17 +02:00
Qubasa
d02acbe04b
nix fmt
2023-10-27 19:19:45 +02:00
Qubasa
9f464dd14e
Added ipdb as breakpoint console. Improved logging.
2023-10-27 19:19:45 +02:00
Qubasa
8482bc79f6
Secrets tests passing. nix fmt doesn't complain
2023-10-27 19:18:45 +02:00
Qubasa
8cc1c2c4bd
Fixed cyclic dependencie AND swapped pytest-parallel for pytest-xdist to fix deadlock in tests
2023-10-27 19:18:45 +02:00
Qubasa
2ca54afe7f
Added new type FlakeName
2023-10-27 19:18:45 +02:00
Qubasa
32e60f5adc
Added flake_name:str argument everywhere, nix fmt doesn't complain anymore
2023-10-27 19:15:40 +02:00
Qubasa
fdcd7ad1d9
Updated to main
2023-10-27 19:15:11 +02:00
DavHau
dbf80595fd
zerotier: fix: find free port without collissions
2023-10-05 17:03:01 +02:00
lassulus
3fb36b3ac1
secrets upload: skip on exit 23, cleanup
2023-10-04 21:29:19 +02:00
lassulus
b25af9f0f4
clan_cli: refactor secrets code into Machine class
2023-10-04 16:41:16 +02:00
lassulus
ffb7c63640
clan-cli: add machines install
2023-10-04 16:34:37 +02:00
Jörg Thalheim
b2ef8bf1a3
also test that updating a group works
2023-10-03 16:15:36 +00:00
lassulus
6f7109dab6
clan_cli.secrets.groups: update keys if members are added/removed
2023-10-03 16:15:36 +00:00
Qubasa
dbe289f702
nix fmt
2023-10-03 15:22:41 +02:00
Qubasa
8fa241a36b
Fixed upload_secrets_test
2023-10-03 15:14:50 +02:00
Qubasa
7dde66c0df
Fixed upload_secrets_test
2023-10-03 15:10:22 +02:00
Qubasa
be9d3d43bf
Fixing PYTHONPATH in secrets/generate test
2023-10-03 15:01:13 +02:00
Qubasa
da72ec18ad
API: Added test for inspect_flake
2023-10-03 13:19:20 +02:00
lassulus
89b7ffce6c
clan-cli secrets upload: secrets are populated into tmpdir
2023-09-29 20:05:35 +02:00
lassulus
7ca9c49163
restore clanInternals with valid nixos config
2023-09-29 19:39:35 +02:00
Jörg Thalheim
0c91bb90ab
also encrypt secret for the machine itself
2023-09-28 17:51:37 +02:00
Jörg Thalheim
16b33eb0a8
add toplevel machines-json that can deploy all hosts
2023-09-28 15:23:25 +02:00
Jörg Thalheim
756820e4ca
clanInternals.machines: invert system and machine name
2023-09-27 17:26:44 +02:00
DavHau
9825c179a8
impure-tests: migrate bash to pytest and fix stuff
2023-09-22 18:32:28 +02:00
lassulus
17520e2553
fix impure tests
2023-09-21 18:29:18 +02:00
lassulus
aeed648bd0
secrets: use clanInternal for crosscompiling, move sops generators to new file
2023-09-21 17:25:32 +02:00
Jörg Thalheim
0314132a1a
rewrite sops backend for secret generation and add tests
2023-09-21 17:22:20 +02:00
Jörg Thalheim
ead5c6e6a8
secrets: add has_machine and has_secret function
2023-09-21 17:22:20 +02:00
Jörg Thalheim
486ff4e7f4
age: generate private and public key in one go
2023-09-21 17:22:20 +02:00
