vm_remote

   1 #!/bin/sh
   2 set -e -f ${DRY_RUN:+-n} -u
   3 tool=${0%/*}
   4 . "$tool"/lib/functions.sh
   5 . "$tool"/etc/vm.sh
   6
   7 rule_help () { # SYNTAX: [--hidden]
   8         local hidden; [ ${1:+set} ] || hidden=set
   9         cat >&2 <<-EOF
  10                 DESCRIPTION:
  11                   ce script regroupe des règles pour administrer la VM ($vm_fqdn)
  12                   _depuis_ une machine distante ;
  13                   il sert à la fois d'outil et de documentation.
  14                   Voir \`$tool/vm_host'   pour les règles côté machine hôte ($vm_host).
  15                   Voir \`$tool/vm_hosted' pour les règles côté VM hébergée ($vm_fqdn).
  16                 SYNTAX: $0 \$RULE \${RULE}_SYNTAX
  17                 RULES:
  18                 $(sed -ne "s/^rule_\(${hidden:+[^_]}[^ ]*\) () {\( *#.*\|\)/  \1\2/p" "$tool"/etc/vm.sh "$0")
  19                 ENVIRONMENT:
  20                   TRACE # affiche les commandes avant leur exécution
  21                 $(sed -ne 's/^readonly \([^ ][^ =]*\).*}\( *#.*\|\)$/\t$\1\2/p' "$tool"/etc/vm.sh "$0")
  22                 EOF
  23  }
  24
  25 rule_git_config () { # DESCRIPTION: configure le .git local pour bien pousser
  26         (
  27         cd "$tool"
  28         git remote rm host || true
  29         git remote add host $vm_host:tool/vm
  30         git config --replace remote.host.push HEAD:refs/heads/origin
  31         git remote rm hosted || true
  32         git remote add hosted root@$vm_fqdn:tool/vm
  33         git config --replace remote.hosted.push HEAD:refs/heads/origin
  34         )
  35  }
  36 rule_git_push () { # SYNTAX: {host|hosted} $git_push_options
  37         local remote=${1#remote=}; shift
  38         GIT_SSH=./vm_ssh git push -v "$remote" "$@"
  39  }
  40
  41 rule_ssh () {
  42         "$tool"/vm_ssh $vm_fqdn "$@"
  43  }
  44 rule__ssh_known_hosts_update () {
  45         rule ssh \
  46          -o StrictHostKeyChecking=no \
  47          -o CheckHostIP=no \
  48          -o HashKnownHosts=no \
  49          whoami
  50  }
  51 rule_key_disk_send () {
  52         gpg --decrypt var/lib/luks/$vm_fqdn.key.gpg |
  53         "$tool"/vm_ssh root@$vm_fqdn "$@" \
  54          -o CheckHostIP=no \
  55          -o HostKeyAlias=init.$vm_fqdn \
  56          tee /lib/cryptsetup/passfifo \>/dev/null
  57  }
  58 rule_key_disk_backup () {
  59         for part in root var home
  60          do
  61                 mkdir -p var/lib/luks
  62                 rule ssh -l root ' \
  63                         tmp=$(mktemp)
  64                         cryptsetup luksHeaderBackup \
  65                          /dev/$vm_lvm_vg/${vm_lvm_lv}_${part} \
  66                          --header-backup-file "$tmp" \
  67                         cat "$tmp"
  68                         shred --remove "$tmp"
  69                  ' |
  70                 gpg --encrypt --recipient $USER@ \
  71                  -o var/lib/luks/${vm_lvm_lv}_${part}.luks.gpg
  72          done
  73  }
  74
  75 rule=${1:-help}
  76 ${1+shift}
  77 case $rule in
  78  (help);;
  79  (*)
  80         assert 'test ! "$(hostname --fqdn)" = "$vm_fqdn"' vm_fqdn
  81         assert 'test ! "$(hostname --fqdn)" = "$vm_host"' vm_host
  82         ;;
  83  esac
  84 rule $rule "$@"