vm_remote

   1 #!/bin/sh
   2 set -e -f ${DRY_RUN:+-n} -u
   3 tool=${0%/*}
   4 . "$tool"/lib/functions.sh
   5 . "$tool"/etc/vm.sh
   6
   7 rule_help () {
   8         cat >&2 <<-EOF
   9                 DESCRIPTION: ce script regroupe des fonctions utilitaires
  10                              pour gérer la VM _depuis_ une machine distante ;
  11                              il sert à la fois d'outil et de documentation.
  12                              Voir \`$tool/vm_host'   pour les utilitaires côté machine hôte.
  13                              Voir \`$tool/vm_hosted' pour les utilitaires côté VM hébergée.
  14                 SYNTAX: $0 \$RULE \${RULE}_SYNTAX
  15                 RULES:
  16                 $(sed -ne 's/^rule_\([^_][^ ]*\) () {\( *#.*\|\)/\t\1\2/p' "$tool"/etc/vm.sh "$0")
  17                 ENVIRONMENT:
  18                   TRACE # affiche les commandes avant leur exécution
  19                 $(sed -ne 's/^readonly \([^ ][^ =]*\).*}\( *#.*\|\)$/\t$\1\2/p' "$tool"/etc/vm.sh "$0")
  20                 EOF
  21  }
  22
  23 rule_git_config () {
  24         (
  25         cd "$tool"
  26         git config remote.host.url >/dev/null ||
  27         git remote add host $vm_host:tool/vm
  28         git config --replace remote.host HEAD:refs/heads/origin
  29         git config remote.vm.url >/dev/null ||
  30         git remote add vm root@$vm_fqdn:tool/vm
  31         git config --replace remote.$vm HEAD:refs/heads/origin
  32         )
  33  }
  34 rule_git_push () { # SYNTAX: {host|vm} $git_commit_options
  35         local remote=${1#remote=}; shift
  36         GIT_SSH=./vm_ssh git push -v -f "$remote"
  37  }
  38
  39 rule_ssh () {
  40         "$tool"/vm_ssh $vm_fqdn "$@"
  41  }
  42 rule__ssh_known_hosts_update () {
  43         "$tool"/vm_ssh $vm_fqdn "$@" \
  44          -o StrictHostKeyChecking=no \
  45          -o CheckHostIP=no \
  46          -o HashKnownHosts=no \
  47          whoami
  48  }
  49 rule_disk_key_send () {
  50         gpg --decrypt var/lib/luks/$vm_fqdn.key.gpg |
  51         "$tool"/vm_ssh root@$vm_fqdn "$@" \
  52          -o CheckHostIP=no \
  53          -o HostKeyAlias=init.$vm_fqdn \
  54          tee /lib/cryptsetup/passfifo \>/dev/null
  55  }
  56 rule_disk_key_backup () {
  57         for part in root var home
  58          do
  59                 mkdir -p var/lib/luks
  60                 rule ssh -l root ' \
  61                         tmp=$(mktemp)
  62                         cryptsetup luksHeaderBackup \
  63                          /dev/$vm_lvm_vg/${vm_lvm_lv}_${part} \
  64                          --header-backup-file "$tmp" \
  65                         cat "$tmp"
  66                         shred --remove "$tmp"
  67                  ' |
  68                 gpg --encrypt --recipient $USER@ \
  69                  -o var/lib/luks/${vm_lvm_lv}_${part}.luks.gpg
  70          done
  71  }
  72
  73 rule=${1:-help}
  74 ${1+shift}
  75 case $rule in
  76  (help);;
  77  (*)
  78         assert 'test ! "$(hostname --fqdn)" = "$vm_fqdn"' vm_fqdn
  79         assert 'test ! "$(hostname --fqdn)" = "$vm_host"' vm_host
  80         ;;
  81  esac
  82 rule $rule "$@"