X-Git-Url: https://iankelling.org/git/?a=blobdiff_plain;f=fai-redep;h=b90b30a285ca5d6654d8191428ec79d97c6f8392;hb=HEAD;hp=97302608703b55acb479795740e663e12e3a79de;hpb=afabe0c27af744200aa6b6e05c5b2ab7d7518c1e;p=automated-distro-installer diff --git a/fai-redep b/fai-redep index 9730260..250b458 100755 --- a/fai-redep +++ b/fai-redep @@ -1,53 +1,150 @@ -#!/bin/bash -l -set -x +#!/bin/bash +# This file is part of Ian Kelling's automated-distro-installer +# Copyright (C) 2024 Ian Kelling -# Deploy fai configuration to faiserver, -# then start a virtual machine to test the config. +# This program is free software; you can redistribute it and/or +# modify it under the terms of the GNU General Public License +# as published by the Free Software Foundation; either version 2 +# of the License, or (at your option) any later version. + +# This program is distributed in the hope that it will be useful, +# but WITHOUT ANY WARRANTY; without even the implied warranty of +# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the +# GNU General Public License for more details. + +# You should have received a copy of the GNU General Public License +# along with this program; if not, write to the Free Software +# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA. + + +[[ $EUID == 0 ]] || exec sudo -E "${BASH_SOURCE[0]}" "$@" set -eE -o pipefail trap 'echo "$0:$LINENO:error: \"$BASH_COMMAND\" returned $?" >&2' ERR -cd $(dirname $(readlink -f "$BASH_SOURCE")) +this_file="$(readlink -f -- "${BASH_SOURCE[0]}")" +readonly this_file this_dir="${this_file%/*}" +cd "$this_dir" + + +usage() { + cat <<'EOF' +usage: fai-redep [OPTIONS] [HOST] +Deploy fai config (the one in nfs) to HOST or default faiserver + +Note, for booting from fai-cd, this needs to be called from myfai-chboot or that via pxe-server, +due to setting +echo FAI_ACTION=$fai_action >> /srv/fai/config/class/LAST.var +note FAI_ACTION might be able to be set elsewhere, like in grub for this case + +-d DISTRO DISTRO for setting up fai class DESKTOP packages, for preinstalling stuff. +-t TARGET_HOST Copy only secrets for TARGET_HOST into the config space. Useful for virtual server + on hardware we don't control. +-h|--help Print help and exit + +Note: uses paths specific to authors machine. +EOF + exit $1 +} + +##### begin command line parsing ######## + +# ensure we can handle args with spaces or empty. +ret=0; getopt -T || ret=$? +[[ $ret == 4 ]] || { echo "Install util-linux for enhanced getopt" >&2; exit 1; } + +temp=$(getopt -l help hd:t: "$@") || usage 1 +eval set -- "$temp" +while true; do + case $1 in + -d) distro=$2; shift ;; + -t) target=$2; shift ;; + -h|--help) usage 0 ;; + --) shift; break ;; + *) echo "$0: unexpected args: $*" >&2 ; usage 1 ;; + esac + shift +done +host=${1:-faiserver.b8.nz} + +readonly host distro target + +##### end command line parsing ######## +m() { printf "fai-redep: %s\n" "$*"; "$@"; } # i use faiserver as a dns alias, but ssh key is associated with # a canonical hostname and we will have ssh warning spam unless we -# use it, so look it up. -faiserver_host=$(chost faiserver) || faiserver_host=faiserver +# use it, so look it up just to avoid the warning spam. +faiserver_host=$(/a/exe/chost $host) +# faiserver_host=$host +faiserver_addr=$(host $host | sed -rn 's/^\S+ has address //p;T;q' ||:) -ssh root@$faiserver_host rm -rf /srv/fai/config -scp -r fai/config root@$faiserver_host:/srv/fai -# fai example pass: fai -#ROOTPW='$1$kBnWcO.E$djxB128U7dMkrltJHPf6d1' +rsrv() { + local -a opts + while [[ $2 ]]; do + opts+=("$1") + shift + done + m rsync "${ropts[@]}" "${opts[@]}" "$rpath$1" +} +rpath=/srv +if ! ip a | grep "^ *inet.\? $faiserver_addr" &>/dev/null; then + ropts=(-e "ssh -F $HOME/.ssh/confighome") + rpath="root@$faiserver_host:/srv" + faiserver_shell="ssh -F $HOME/.ssh/confighome root@$faiserver_host" +fi -# generating a hashed password: -# under debian, you can do -# echo "yoursecrectpassword" | mkpasswd -m sha-512 -s -# On arch, best seems to be copy your shadow file to a temp location, -# then passwd, get out the new pass, then copy the shadow file back. +# these are gitignored. +rsync -atL /home/iank/.ssh/authorized_keys fai/config/files/root/.ssh/authorized_keys/STANDARD +# we hssh and ssh_filter_btrbk for the initial btrbk (alternatively, I could open up the +# permissions in authorized_keys, but that just seems lazy) +install --owner=iank --group=iank -d fai/config/files/usr/local/bin/hssh +install --owner=iank --group=iank -d fai/config/files/usr/local/bin/ssh_filter_btrbk.sh +rsync -atL /a/opt/btrbk/ssh_filter_btrbk.sh fai/config/files/usr/local/bin/ssh_filter_btrbk.sh/STANDARD +rsrv -rlpt --delete --relative --exclude /fai/config/basefiles/ fai/config / -f=/q/root/shadow/standard -if s test -e $f; then - ssh root@$faiserver_host tee -a /srv/fai/config/class/DEFAULT.var <