2 set -e -f ${DRY_RUN:+-n} -u
6 test ! "$(hostname --fqdn)" = "$vm_fqdn"
7 test ! "$(hostname --fqdn)" = "$vm_host"
11 DESCRIPTION: ce script regroupe des fonctions utilitaires
12 pour gérer la VM _depuis_ une machine distante ;
13 il sert à la fois d'outil et de documentation.
14 Voir \`$tool/vm_host' pour les utilitaires côté machine hôte.
15 Voir \`$tool/vm_hosted' pour les utilitaires côté VM hébergée.
16 SYNTAX: $0 \$RULE \${RULE}_SYNTAX
18 $(sed -ne 's/^rule_\([^_][^ ]*\) () {\( *#.*\|\)/\t\1\2/p' "$tool"/vm.sh "$0")
20 TRACE # affiche les commandes avant leur exécution
21 $(sed -ne 's/^readonly \([^ ][^ =]*\).*}\( *#.*\|\)$/\t$\1\2/p' "$tool"/vm.sh "$0")
28 git config remote.
host.url
>/dev
/null ||
29 git remote add
host $vm_host:tool
/vm
30 git config
--replace remote.
host HEAD
:refs
/heads
/origin
31 git config remote.
$vm.url
>/dev
/null ||
32 git remote add vm root@
$vm_fqdn:tool
/vm
33 git config
--replace remote.
$vm HEAD
:refs
/heads
/origin
36 rule_git_push
() { # SYNTAX: $remote $options
37 local remote
=${1#remote=}; shift
39 git commit
-a -C HEAD
"$@" &&
40 local pwd=$
(cd "$tool" && cd -)
41 GIT_SSH
=.
/vm_ssh git push
-v -f "$remote"
45 "$tool"/vm_ssh
$vm_fqdn "$@"
47 rule__ssh_known_hosts_update
() {
48 "$tool"/vm_ssh
$vm_fqdn "$@" \
49 -o StrictHostKeyChecking
=no \
51 -o HashKnownHosts
=no \
54 rule_disk_key_send
() {
55 gpg
--decrypt key
/secret
/$vm_fqdn.disk.gpg |
56 ssh "$@" root@
$vm_fqdn \
58 -o HostKeyAlias
=init.
$vm_fqdn \
59 -o StrictHostKeyChecking
=yes \
60 -o UserKnownHostsFile
="$tool"/key
/ssh.known_hosts \
61 tee /lib
/cryptsetup
/passfifo \
>/dev
/null
63 rule_disk_key_backup
() {
64 for part
in root swap var home
66 rule_ssh sudo cryptsetup luksHeaderBackup
/dev
/$vm_lvm_vg/${vm_lvm_lv}_
${part} |
67 gpg
--encrypt --recipient $USER@
-o key
/secret
/${vm_lvm_lv}_
${part}.luks.gpg
70 rule_disk_key_restore
() {
71 for part
in root swap var home
73 gpg
--decrypt ${vm_lvm_lv}_
${part}.luks |
74 rule_ssh sudo cryptsetup luksHeaderRestore
/dev
/$vm_lvm_vg/${vm_lvm_lv}_
${part}