vm_remote

   1 #!/bin/sh
   2 set -e -f ${DRY_RUN:+-n} -u
   3 tool=${0%/*}
   4 . "$tool"/lib/functions.sh
   5 . "$tool"/etc/vm.sh
   6 test ! "$(hostname --fqdn)" = "$vm_fqdn"
   7 test ! "$(hostname --fqdn)" = "$vm_host"
   8
   9 rule_help () {
  10         cat >&2 <<-EOF
  11                 DESCRIPTION: ce script regroupe des fonctions utilitaires
  12                              pour gérer la VM _depuis_ une machine distante ;
  13                              il sert à la fois d'outil et de documentation.
  14                              Voir \`$tool/vm_host'   pour les utilitaires côté machine hôte.
  15                              Voir \`$tool/vm_hosted' pour les utilitaires côté VM hébergée.
  16                 SYNTAX: $0 \$RULE \${RULE}_SYNTAX
  17                 RULES:
  18                 $(sed -ne 's/^rule_\([^_][^ ]*\) () {\( *#.*\|\)/\t\1\2/p' "$tool"/vm.sh "$0")
  19                 ENVIRONMENT:
  20                   TRACE # affiche les commandes avant leur exécution
  21                 $(sed -ne 's/^readonly \([^ ][^ =]*\).*}\( *#.*\|\)$/\t$\1\2/p' "$tool"/vm.sh "$0")
  22                 EOF
  23  }
  24
  25 rule_git_config () {
  26         (
  27         cd "$tool"
  28         git config remote.host.url >/dev/null ||
  29         git remote add host $vm_host:tool/vm
  30         git config --replace remote.host HEAD:refs/heads/origin
  31         git config remote.$vm.url >/dev/null ||
  32         git remote add vm root@$vm_fqdn:tool/vm
  33         git config --replace remote.$vm HEAD:refs/heads/origin
  34         )
  35  }
  36 rule_git_push () { # SYNTAX: $remote $options
  37         local remote=${1#remote=}; shift
  38         git add . &&
  39         git commit -a -C HEAD "$@" &&
  40         GIT_SSH=./vm_ssh git push -v -f "$remote"
  41  }
  42
  43 rule_ssh () {
  44         "$tool"/vm_ssh $vm_fqdn "$@"
  45  }
  46 rule__ssh_known_hosts_update () {
  47         "$tool"/vm_ssh $vm_fqdn "$@" \
  48          -o StrictHostKeyChecking=no \
  49          -o CheckHostIP=no \
  50          -o HashKnownHosts=no \
  51          whoami
  52  }
  53 rule_disk_key_send () {
  54         gpg --decrypt var/lib/luks/$vm_fqdn.key.gpg |
  55         "$tool"/vm_ssh root@$vm_fqdn "$@" \
  56          -o CheckHostIP=no \
  57          -o HostKeyAlias=init.$vm_fqdn \
  58          tee /lib/cryptsetup/passfifo \>/dev/null
  59  }
  60 rule_disk_key_backup () {
  61         for part in root swap var home
  62          do
  63                 mkdir -p var/lib/luks
  64                 rule_ssh -l root ' \
  65                         tmp=$(mktemp)
  66                         cryptsetup luksHeaderBackup \
  67                          /dev/$vm_lvm_vg/${vm_lvm_lv}_${part} \
  68                          --header-backup-file "$tmp" \
  69                         cat "$tmp"
  70                         shred --remove "$tmp"
  71                  ' |
  72                 gpg --encrypt --recipient $USER@ \
  73                  -o var/lib/luks/${vm_lvm_lv}_${part}.luks.gpg
  74          done
  75  }
  76
  77 rule=${1:-help}
  78 ${1+shift}
  79 set "${TRACE:+-x}"
  80 rule_$rule "$@"