vm_remote

   1 #!/bin/sh
   2 set -e -f ${DRY_RUN:+-n} -u
   3 tool=${0%/*}
   4 . "$tool"/lib/functions.sh
   5 . "$tool"/etc/vm.sh
   6
   7 rule_help () {
   8         cat >&2 <<-EOF
   9                 DESCRIPTION: ce script regroupe des fonctions utilitaires
  10                              pour gérer la VM _depuis_ une machine distante ;
  11                              il sert à la fois d'outil et de documentation.
  12                              Voir \`$tool/vm_host'   pour les utilitaires côté machine hôte.
  13                              Voir \`$tool/vm_hosted' pour les utilitaires côté VM hébergée.
  14                 SYNTAX: $0 \$RULE \${RULE}_SYNTAX
  15                 RULES:
  16                 $(sed -ne 's/^rule_\([^_][^ ]*\) () {\( *#.*\|\)/\t\1\2/p' "$tool"/vm.sh "$0")
  17                 ENVIRONMENT:
  18                   TRACE # affiche les commandes avant leur exécution
  19                 $(sed -ne 's/^readonly \([^ ][^ =]*\).*}\( *#.*\|\)$/\t$\1\2/p' "$tool"/vm.sh "$0")
  20                 EOF
  21  }
  22
  23 rule_git_config () {
  24         (
  25         cd "$tool"
  26         git config remote.host.url >/dev/null ||
  27         git remote add host $vm_host:tool/vm
  28         git config --replace remote.host HEAD:refs/heads/origin
  29         git config remote.$vm.url >/dev/null ||
  30         git remote add vm root@$vm_fqdn:tool/vm
  31         git config --replace remote.$vm HEAD:refs/heads/origin
  32         )
  33  }
  34 rule_git_push () { # SYNTAX: $remote $options
  35         local remote=${1#remote=}; shift
  36         git add . &&
  37         git commit -a -C HEAD "$@" &&
  38         GIT_SSH=./vm_ssh git push -v -f "$remote"
  39  }
  40
  41 rule_ssh () {
  42         "$tool"/vm_ssh $vm_fqdn "$@"
  43  }
  44 rule__ssh_known_hosts_update () {
  45         "$tool"/vm_ssh $vm_fqdn "$@" \
  46          -o StrictHostKeyChecking=no \
  47          -o CheckHostIP=no \
  48          -o HashKnownHosts=no \
  49          whoami
  50  }
  51 rule_disk_key_send () {
  52         gpg --decrypt var/lib/luks/$vm_fqdn.key.gpg |
  53         "$tool"/vm_ssh root@$vm_fqdn "$@" \
  54          -o CheckHostIP=no \
  55          -o HostKeyAlias=init.$vm_fqdn \
  56          tee /lib/cryptsetup/passfifo \>/dev/null
  57  }
  58 rule_disk_key_backup () {
  59         for part in root swap var home
  60          do
  61                 mkdir -p var/lib/luks
  62                 rule_ssh -l root ' \
  63                         tmp=$(mktemp)
  64                         cryptsetup luksHeaderBackup \
  65                          /dev/$vm_lvm_vg/${vm_lvm_lv}_${part} \
  66                          --header-backup-file "$tmp" \
  67                         cat "$tmp"
  68                         shred --remove "$tmp"
  69                  ' |
  70                 gpg --encrypt --recipient $USER@ \
  71                  -o var/lib/luks/${vm_lvm_lv}_${part}.luks.gpg
  72          done
  73  }
  74
  75 rule=${1:-help}
  76 ${1+shift}
  77 case $rule in
  78  (help);;
  79  (*)
  80         test ! "$(hostname --fqdn)" = "$vm_fqdn"
  81         test ! "$(hostname --fqdn)" = "$vm_host"
  82         set "${TRACE:+-x}"
  83         ;;
  84  esac
  85 rule_$rule "$@"