vm_remote

   1 #!/bin/sh
   2 set -e -f ${DRY_RUN:+-n} -u
   3 tool=${0%/*}
   4 . "$tool"/functions.sh
   5 . "$tool"/vm.sh
   6 test ! "$(hostname --fqdn)" = "$vm_fqdn"
   7 test ! "$(hostname --fqdn)" = "$vm_host"
   8
   9 rule_help () {
  10         cat >&2 <<-EOF
  11                 DESCRIPTION: ce script regroupe des fonctions utilitaires
  12                              pour gérer la VM _depuis_ une machine distante ;
  13                              il sert à la fois d'outil et de documentation.
  14                              Voir \`$tool/vm_host'   pour les utilitaires côté machine hôte.
  15                              Voir \`$tool/vm_hosted' pour les utilitaires côté VM hébergée.
  16                 SYNTAX: $0 \$RULE \${RULE}_SYNTAX
  17                 RULES:
  18                 $(sed -ne 's/^rule_\([^_][^ ]*\) () {\( *#.*\|\)/\t\1\2/p' "$tool"/vm.sh "$0")
  19                 ENVIRONMENT:
  20                   TRACE # affiche les commandes avant leur exécution
  21                 $(sed -ne 's/^readonly \([^ ][^ =]*\).*}\( *#.*\|\)$/\t$\1\2/p' "$tool"/vm.sh "$0")
  22                 EOF
  23  }
  24
  25 rule_git_config () {
  26         (
  27         cd "$tool"
  28         git config remote.host.url >/dev/null ||
  29         git remote add host $vm_host:tool/vm
  30         git config --replace remote.host HEAD:refs/heads/origin
  31         git config remote.$vm.url >/dev/null ||
  32         git remote add vm root@$vm_fqdn:tool/vm
  33         git config --replace remote.$vm HEAD:refs/heads/origin
  34         )
  35  }
  36 rule_git_push () { # SYNTAX: $remote $options
  37         local remote=${1#remote=}; shift
  38         git add . &&
  39         git commit -a -C HEAD "$@" &&
  40         local pwd=$(cd "$tool" && cd -)
  41         GIT_SSH=./vm_ssh git push -v -f "$remote"
  42  }
  43
  44 rule_ssh () {
  45         "$tool"/vm_ssh $vm_fqdn "$@"
  46  }
  47 rule__ssh_known_hosts_update () {
  48         "$tool"/vm_ssh $vm_fqdn "$@" \
  49          -o StrictHostKeyChecking=no \
  50          -o CheckHostIP=no \
  51          -o HashKnownHosts=no \
  52          whoami
  53  }
  54 rule_disk_key_send () {
  55         gpg --decrypt key/secret/$vm_fqdn.disk.gpg |
  56         ssh "$@" root@$vm_fqdn \
  57          -o CheckHostIP=no \
  58          -o HostKeyAlias=init.$vm_fqdn \
  59          -o StrictHostKeyChecking=yes \
  60          -o UserKnownHostsFile="$tool"/key/ssh.known_hosts \
  61          tee /lib/cryptsetup/passfifo \>/dev/null
  62  }
  63 rule_disk_key_backup () {
  64         for part in root swap var home
  65          do
  66                 rule_ssh sudo cryptsetup luksHeaderBackup /dev/$vm_lvm_vg/${vm_lvm_lv}_${part} |
  67                 gpg --encrypt --recipient $USER@ -o key/secret/${vm_lvm_lv}_${part}.luks.gpg
  68          done
  69  }
  70 rule_disk_key_restore () {
  71         for part in root swap var home
  72          do
  73                 gpg --decrypt ${vm_lvm_lv}_${part}.luks |
  74                 rule_ssh sudo cryptsetup luksHeaderRestore /dev/$vm_lvm_vg/${vm_lvm_lv}_${part}
  75          done
  76  }
  77
  78 rule=${1:-help}
  79 ${1+shift}
  80 set "${TRACE:+-x}"
  81 rule_$rule "$@"