X-Git-Url: https://iankelling.org/git/?a=blobdiff_plain;f=conflink;h=38aacf02ac885a8a8c2ff0da27043c007373f457;hb=866a0cbd9127386520def96ff49bdc8424df8112;hp=a4a32da01c1b92c51f2da5ba3bf1d22fa843965b;hpb=c3d64f08e46e975422a787b74262abcafe1d45e6;p=distro-setup diff --git a/conflink b/conflink index a4a32da..38aacf0 100755 --- a/conflink +++ b/conflink @@ -1,29 +1,33 @@ -#!/bin/bash -l +#!/bin/bash -set -eE -o pipefail -trap 'echo "$0:$LINENO:error: \"$BASH_COMMAND\" returned $?"' ERR +source /a/bin/errhandle/errcatch-function +source /a/bin/errhandle/bash-trace-function +errcatch -sysv() { - e "$@" +m() { + echo "$*" "$@" } +s() { sudo "$@"; } +lnf() { /a/exe/lnf "$@"; } shopt -s nullglob -shopt -s extglob +shopt -s extglob # note, already set with bash -l -# if we make a link back to the root, traversing the subdirs stops. -# This makes it so we can do subdir directories. Must call with absolute -# paths. +# If we make a link back to the root, we stop going deeper into subdir_files. +# This makes it so we can do subdir directories. +# +# Also note, under filesystem/, symlinks are expanded. subdir-link-r() { local root="$1" local targets=() if [[ $2 ]]; then - targets=( "$2"/!(.git) ) + targets=( "$2"/!(.git|..|.) ) else - for f in "$1"/!(.git); do + for f in "$1"/!(.git|..|.); do [[ -d $f ]] && targets+=("$f") ||: done fi @@ -32,41 +36,70 @@ subdir-link-r() { local fullpath="$(readlink -f "$path")" #e $fullpath $below # debug if [[ -f $path || $(dirname $(readlink -f "$fullpath")) == "$below" ]]; then - sysv lnf -T "$path" "$HOME/${path#$root/}" + m lnf -T "$path" "$HOME/${path#$root/}" elif [[ -d "$path" ]]; then subdir-link-r "$root" "$path" fi done } + + common-file-setup() { - if [[ -e $1/subdir_files ]]; then - subdir-link-r $1/subdir_files - fi - local x=( $1/!(subdir_files|filesystem) ) - (( ${#x[@]} >= 1 )) || return 0 - sysv lnf ${x[@]} ~ - # as of this writing, it doesn't exist in /a/c, but I've used it in the past. - if [[ -e $1/filesystem && $USER == ian ]]; then - sysv s cp -R $1/filesystem/* / - fi + local dir fs x bdir f dst + for dir in "$@"; do + fs=$dir/filesystem + if [[ -e $fs && $USER =~ ^iank?$ ]]; then + # note, symlinks get resolved, not copied. + s tar --mode=g-s --owner=0 --group=0 -cz -C $fs . | s tar -xz -C / + fi + + if [[ -e $dir/subdir_files ]]; then + m subdir-link-r $dir/subdir_files + fi + local x=( $dir/!(binds|subdir_files|filesystem|machine_specific|..|.) ) + (( ${#x[@]} >= 1 )) || continue + m lnf ${x[@]} ~ + done } +all_dirs=({/a/c,/p/c}{,/machine_specific/$HOSTNAME}) +# note, we assume a group of hosts does not have the +# same name as a single host, which is no problem on our scale. +for x in /p/c/machine_specific/*.hosts; do + if grep -qxF $HOSTNAME $x; then all_dirs+=( ${x%.hosts} ); fi +done + +c_dirs=(/a/c{,/machine_specific/$HOSTNAME}) case $USER in - ian) + ian|iank) # p needs to go first so .ssh link is created, then config link inside it - for dir in {/a/c,/p/c}{,/machine_specific/$HOSTNAME}; do - common-file-setup $dir - done - sudo -u traci "$BASH_SOURCE" + m common-file-setup ${all_dirs[@]} + + #### begin special extra stuff #### + install -d -m700 ~/gpg-agent-socket + if [[ -d /etc/bind/bind-writable ]]; then + # need bind writable dir for nsupdate, or else we get + # named[20823]: /etc/bind/db.iank.pw.jnl: create: permission denied + m s chgrp bind /etc/bind/bind-writable + fi + files=(/etc/bind/[Kk]*) + if [[ -e $files ]]; then + m s chgrp bind ${files[@]} + fi + if [[ -e /etc/davpass ]] && getent group www-data &>/dev/null; then + s chgrp www-data /etc/davpass + fi + ##### end special extra stuff ##### + + + + m sudo -H -u traci "$BASH_SOURCE" ;; traci) - for dir in /a/c{,/machine_specific/$HOSTNAME}; do - common-file-setup $dir - done + m common-file-setup ${c_dirs[@]} ;; *) - echo "$0: error: run as ian or traci" - exit 1 + echo "$0: error: unexpected user"; exit 1 ;; esac