Jörg Thalheim
79e956b5c3
Also commit files when adding machines/users or removing secrets
2024-02-22 16:12:11 +01:00
Jörg Thalheim
52d357ee42
secrets: commit when renaming secrets
2024-02-22 15:59:12 +01:00
Jörg Thalheim
dd98cac94e
secret cli: accept a pattern in secrets list
2024-02-22 14:21:53 +01:00
Jörg Thalheim
a214677da0
secret_store: drop update_check and generate_hash as abstract methods
...
Only password implements those just now
2024-02-20 18:58:38 +01:00
Jörg Thalheim
38e5e4f12c
secrets: add git support when updating secrets
2024-02-20 12:41:52 +01:00
Jörg Thalheim
43a8da1485
sops: unbreak edit flags
2024-02-20 11:07:00 +01:00
Jörg Thalheim
1d1358cdc9
improve error message if group does not exists
2024-02-16 17:26:20 +01:00
Jörg Thalheim
023b9f4257
add option to set defaultGroups for secrets
2024-02-16 17:26:20 +01:00
Jörg Thalheim
052f040017
upload_secrets: call update_check directly without introspection
2024-02-16 14:57:01 +01:00
Jörg Thalheim
8eac6992c7
split of generate_secrets method into smaller functions
2024-02-16 14:48:46 +01:00
Jörg Thalheim
587812ebc9
make secrets stores inherit from an interface
2024-02-16 14:47:28 +01:00
lassulus
5ed4881687
vms: use vm fact/secret-store
2024-02-15 10:41:25 +01:00
lassulus
e3627c12f7
add factsStore modules
2024-02-15 10:41:25 +01:00
Jörg Thalheim
5e5077c31c
rename machine.host to machine.target_host
2024-02-06 17:21:42 +01:00
lassulus
9585883e80
clan-cli secrets: commit facts/secrets after generating them
2024-02-05 10:03:10 +01:00
lassulus
e94983be21
clan-cli secrets: remove debug output
2024-02-05 10:03:10 +01:00
lassulus
8cbedfd3b8
clan-cli password-store: remove debug print
2024-02-02 17:40:19 +01:00
lassulus
ece289d0cc
clan-cli secrets: add check command
2024-02-02 17:40:19 +01:00
lassulus
59c09a114c
secrets modules: pass secrets as bytes
2024-01-30 12:11:05 +01:00
lassulus
140973270a
secrets: add sandbox user
2024-01-30 12:11:05 +01:00
lassulus
1b9445b71f
clan-cli secrets: generate secrets inside bubblewrap
2024-01-24 19:20:07 +01:00
lassulus
bdd1f9be6d
machines.Machine: refactor flake_dir -> flake; use Machine class in vm
2024-01-24 15:49:12 +01:00
lassulus
1d4e533438
move secret stores into clan_cli codebase
2024-01-24 15:49:12 +01:00
lassulus
ed6eb50f7d
WIP: clan-cli secrets: add secret_store as python class
2024-01-23 15:04:40 +01:00
Qubasa
38e2c29f08
cmd.py refactor part 6
2024-01-12 17:02:56 +01:00
Qubasa
6b39ea5592
cmd.py refactor part 5
2024-01-12 16:52:34 +01:00
Qubasa
c56e1d1684
cmd.py: Fix deadlock because of incorrect select usage
2024-01-11 23:03:14 +01:00
Qubasa
2c6c4bacce
Identified deadlocking funciton
2024-01-11 22:28:35 +01:00
Qubasa
3ed58de082
Fixed missing log.BOTH and error_msg at prev refactors
2024-01-11 21:11:49 +01:00
Qubasa
13ba1440bd
cmd.py refactor part 4
2024-01-11 21:11:49 +01:00
Jörg Thalheim
0e91f8721f
prefix nixpkgs# explicitly in nix_shell
...
This makes the function usage less confusing (you can now tell from the call side what are flags and what is passed to nix-shell) and allows to use different flakes to download packages.
2023-12-08 15:14:14 +01:00
Jörg Thalheim
f208bc0f22
add option to extend path for generator
2023-11-30 14:15:40 +01:00
Jörg Thalheim
ed472a6425
error if age key cannot be decoded
2023-11-30 10:57:58 +01:00
Jörg Thalheim
6f0722c692
modernisation for python 3.11
2023-11-29 13:29:45 +00:00
Jörg Thalheim
7d755beca6
enable more linting
2023-11-29 13:29:45 +00:00
Jörg Thalheim
39617bbf03
run_upload_secrets: don't swallow stdout output
2023-11-29 11:38:01 +01:00
Jörg Thalheim
5e7d7c251e
add sops command to sync keys with secrets
2023-11-29 11:34:19 +01:00
Jörg Thalheim
44fa268205
secrets/generate-private-key: just create parent opportunistically
2023-11-16 13:19:12 +01:00
kenji
f88a17ad34
clan_cli: create key directory
2023-11-15 23:15:12 +01:00
Jörg Thalheim
4514b09f81
also regenerate secrets if a fact is missing
2023-11-14 17:07:58 +01:00
lassulus
efafe6f0e3
clan-cli secrets: flake_name -> flake_dir
2023-11-05 16:58:48 +01:00
Qubasa
0be3dac289
nix fmt
2023-10-27 19:21:50 +02:00
Qubasa
8ff80b025c
Fixing a multitude of tests
2023-10-27 19:21:50 +02:00
Qubasa
adffdc14f6
Added repro_env_break debugging command. This spawn a terminal inside the temp home folder with the same environment as the python test
2023-10-27 19:20:17 +02:00
Qubasa
9c8829c32f
nix fmt
2023-10-27 19:19:45 +02:00
Qubasa
6d0deefa6b
Added ipdb as breakpoint console. Improved logging.
2023-10-27 19:19:45 +02:00
Qubasa
d96ea61243
Secrets tests passing. nix fmt doesn't complain
2023-10-27 19:18:45 +02:00
Qubasa
7bbadaa60f
Fixed cyclic dependencie AND swapped pytest-parallel for pytest-xdist to fix deadlock in tests
2023-10-27 19:18:45 +02:00
Qubasa
ecdd4949b7
Added new type FlakeName
2023-10-27 19:18:45 +02:00
Qubasa
f976121fa6
Added flake_name:str argument everywhere, nix fmt doesn't complain anymore
2023-10-27 19:15:40 +02:00
