119 lines
3.4 KiB
Python
119 lines
3.4 KiB
Python
import argparse
|
|
import json
|
|
import logging
|
|
import os
|
|
import shlex
|
|
import subprocess
|
|
from pathlib import Path
|
|
from tempfile import TemporaryDirectory
|
|
|
|
from ..dirs import get_clan_flake_toplevel, module_root
|
|
from ..errors import ClanError
|
|
from ..nix import nix_build, nix_config, nix_shell
|
|
from ..ssh import parse_deployment_address
|
|
|
|
log = logging.getLogger(__name__)
|
|
|
|
|
|
def build_upload_script(machine: str, clan_dir: Path) -> str:
|
|
config = nix_config()
|
|
system = config["system"]
|
|
|
|
cmd = nix_build(
|
|
[
|
|
f'{clan_dir}#clanInternals.machines."{system}"."{machine}".config.system.clan.uploadSecrets'
|
|
]
|
|
)
|
|
proc = subprocess.run(cmd, stdout=subprocess.PIPE, text=True)
|
|
if proc.returncode != 0:
|
|
raise ClanError(
|
|
f"failed to upload secrets:\n{shlex.join(cmd)}\nexited with {proc.returncode}"
|
|
)
|
|
|
|
return proc.stdout.strip()
|
|
|
|
|
|
def get_deployment_info(machine: str, clan_dir: Path) -> dict:
|
|
config = nix_config()
|
|
system = config["system"]
|
|
|
|
cmd = nix_build(
|
|
[
|
|
f'{clan_dir}#clanInternals.machines."{system}"."{machine}".config.system.clan.deployment.file'
|
|
]
|
|
)
|
|
proc = subprocess.run(cmd, stdout=subprocess.PIPE, text=True)
|
|
if proc.returncode != 0:
|
|
raise ClanError(
|
|
f"failed to get deploymentAddress:\n{shlex.join(cmd)}\nexited with {proc.returncode}"
|
|
)
|
|
|
|
return json.load(open(proc.stdout.strip()))
|
|
|
|
|
|
def run_upload_secrets(
|
|
flake_attr: str, clan_dir: Path, target: str, target_directory: str
|
|
) -> None:
|
|
env = os.environ.copy()
|
|
env["CLAN_DIR"] = str(clan_dir)
|
|
env["PYTHONPATH"] = str(module_root().parent) # TODO do this in the clanCore module
|
|
print(f"uploading secrets... {flake_attr}")
|
|
with TemporaryDirectory() as tempdir_:
|
|
tempdir = Path(tempdir_)
|
|
env["SECRETS_DIR"] = str(tempdir)
|
|
proc = subprocess.run(
|
|
[flake_attr],
|
|
env=env,
|
|
check=True,
|
|
stdout=subprocess.PIPE,
|
|
text=True,
|
|
)
|
|
|
|
if proc.returncode != 0:
|
|
log.error("Stdout: %s", proc.stdout)
|
|
log.error("Stderr: %s", proc.stderr)
|
|
raise ClanError("failed to upload secrets")
|
|
|
|
h = parse_deployment_address(flake_attr, target)
|
|
ssh_cmd = h.ssh_cmd()
|
|
subprocess.run(
|
|
nix_shell(
|
|
["rsync"],
|
|
[
|
|
"rsync",
|
|
"-e",
|
|
" ".join(["ssh"] + ssh_cmd[2:]),
|
|
"-az",
|
|
"--delete",
|
|
f"{str(tempdir)}/",
|
|
f"{h.user}@{h.host}:{target_directory}/",
|
|
],
|
|
),
|
|
check=True,
|
|
)
|
|
|
|
|
|
def upload_secrets(machine: str) -> None:
|
|
clan_dir = get_clan_flake_toplevel()
|
|
deployment_info = get_deployment_info(machine, clan_dir)
|
|
address = deployment_info.get("deploymentAddress", "")
|
|
secrets_upload_directory = deployment_info.get("secretsUploadDirectory", "")
|
|
run_upload_secrets(
|
|
build_upload_script(machine, clan_dir),
|
|
clan_dir,
|
|
address,
|
|
secrets_upload_directory,
|
|
)
|
|
|
|
|
|
def upload_command(args: argparse.Namespace) -> None:
|
|
upload_secrets(args.machine)
|
|
|
|
|
|
def register_upload_parser(parser: argparse.ArgumentParser) -> None:
|
|
parser.add_argument(
|
|
"machine",
|
|
help="The machine to upload secrets to",
|
|
)
|
|
parser.set_defaults(func=upload_command)
|