61 lines
1.8 KiB
Python
61 lines
1.8 KiB
Python
import argparse
|
|
import importlib
|
|
import logging
|
|
from pathlib import Path
|
|
from tempfile import TemporaryDirectory
|
|
|
|
from clan_cli.cmd import Log, run
|
|
from clan_cli.completions import add_dynamic_completer, complete_machines
|
|
from clan_cli.machines.machines import Machine
|
|
from clan_cli.nix import nix_shell
|
|
|
|
log = logging.getLogger(__name__)
|
|
|
|
|
|
def upload_secrets(machine: Machine) -> None:
|
|
secret_facts_module = importlib.import_module(machine.secret_facts_module)
|
|
secret_facts_store = secret_facts_module.SecretStore(machine=machine)
|
|
|
|
if not secret_facts_store.needs_upload():
|
|
log.info("Secrets already uploaded")
|
|
return
|
|
with TemporaryDirectory(prefix="facts-upload-") as tempdir:
|
|
secret_facts_store.upload(Path(tempdir))
|
|
host = machine.target_host
|
|
|
|
run(
|
|
nix_shell(
|
|
["nixpkgs#rsync"],
|
|
[
|
|
"rsync",
|
|
"-e",
|
|
" ".join(["ssh", *host.ssh_cmd_opts()]),
|
|
"--recursive",
|
|
"--links",
|
|
"--times",
|
|
"--compress",
|
|
"--delete",
|
|
"--chmod=D700,F600",
|
|
f"{tempdir!s}/",
|
|
f"{host.target_for_rsync}:{machine.secrets_upload_directory}/",
|
|
],
|
|
),
|
|
log=Log.BOTH,
|
|
needs_user_terminal=True,
|
|
)
|
|
|
|
|
|
def upload_command(args: argparse.Namespace) -> None:
|
|
machine = Machine(name=args.machine, flake=args.flake)
|
|
upload_secrets(machine)
|
|
|
|
|
|
def register_upload_parser(parser: argparse.ArgumentParser) -> None:
|
|
machines_parser = parser.add_argument(
|
|
"machine",
|
|
help="The machine to upload secrets to",
|
|
)
|
|
add_dynamic_completer(machines_parser, complete_machines)
|
|
|
|
parser.set_defaults(func=upload_command)
|