X-Git-Url: https://iankelling.org/git/?p=distro-setup;a=blobdiff_plain;f=conflink;h=30d868e4dae606d244bc2decb19126fda8d70799;hp=32459f4f2853f866d2723b3b949022f55400c9c0;hb=7e4f3d0a6130b69b7f76a3ff13e510ffbeb1484b;hpb=b6cd53c3e82e030422a22872a7889a2359752795

diff --git a/conflink b/conflink
index 32459f4..30d868e 100755
--- a/conflink
+++ b/conflink
@@ -1,86 +1,148 @@
-#!/bin/bash -l
+#!/bin/bash
+
+source /a/bin/errhandle/err
+_errcatch_cleanup() {
+  echo 1 >~/.local/conflink
+}
 
-set -eE -o pipefail
-trap 'echo "$0:$LINENO:error: \"$BASH_COMMAND\" returned $?"' ERR
 
+usage() {
+  cat <<EOF
+Usage: ${0##*/} [OPTIONS]
+Link or otherwise install configuration files.
 
-sysv() {
-    e "$@"
-    "$@"
+-f   For fast. Dont use lnf, use ln -sf. Good for updating existing files.
+EOF
+  exit $1
 }
 
 
-#
-if [[ -e /root/.unison && ! -L /root/.unison ]]; then
-    d=/q/p/c/machine_specific/$host/.unison
-    mkdir -p $d
-    mv -f /root/.unison/* $d
-fi
+m() {
+  echo "$*"
+  "$@"
+}
+s() { sudo "$@"; }
 
+lnf() { /a/exe/lnf "$@"; }
+if [[ $1 == -f ]]; then
+  lnf() { ln -sf "$@"; }
+fi
 
 shopt -s nullglob
 shopt -s extglob
+shopt -s dotglob
 
-# if we make a link back to the root, traversing the subdirs stops.
-# This makes it so we can do subdir directories. Must call with absolute
-# paths.
+# If we make a link back to the root, we stop going deeper into subdir_files.
+# This makes it so we can do subdir directories.
+#
+# Also note, under filesystem/, symlinks are expanded.
 
 subdir-link-r() {
-    local root="$1"
-    local targets=()
-    if [[ $2 ]]; then
-        targets=( "$2"/!(.git) )
-    else
-        for f in "$1"/!(.git); do
-            [[ -d $f ]] && targets+=("$f") ||:
-        done
-    fi
-    local below="$( readlink -f "$root/..")"
-    for path in "${targets[@]}"; do
-        local fullpath="$(readlink -f "$path")"
-        #e $fullpath $below # debug
-        if [[ -f $path || $(dirname $(readlink -f "$fullpath")) == "$below" ]]; then
-            sysv lnf -T "$path" "$HOME/${path#$root/}"
-        elif [[ -d "$path" ]]; then
-            subdir-link-r "$root" "$path"
-        fi
+  local root="$1"
+  local targets=()
+  if [[ $2 ]]; then
+    targets=( "$2"/!(.git|..|.) )
+  else
+    for f in "$1"/!(.git|..|.); do
+      if [[ -d $f ]]; then targets+=("$f"); fi
     done
+  fi
+  local below
+  below="$( readlink -f "$root/..")"
+  for path in "${targets[@]}"; do
+    local fullpath
+    fullpath="$(readlink -f "$path")"
+    #e $fullpath $below # debug
+    if [[ -f $path || $(dirname $(readlink -f "$fullpath")) == "$below" ]]; then
+      m lnf -T "$path" "$HOME/${path#$root/}"
+    elif [[ -d "$path" ]]; then
+      subdir-link-r "$root" "$path"
+    fi
+  done
 }
 
+
+
 common-file-setup() {
-    for dir in "$@"; do
-        if [[ -e $dir/subdir_files ]]; then
-            subdir-link-r $dir/subdir_files
-        fi
-        local x=( $dir/!(subdir_files|filesystem) )
-        (( ${#x[@]} >= 1 )) || return 0
-        sysv lnf ${x[@]} ~
-        # as of this writing, it doesn't exist in /a/c, but I've used it in the past.
-        if [[ -e $dir/filesystem && $USER == ian ]]; then
-            sysv s cp -R $dir/filesystem/* /
-        fi
-    done
-}
+  local dir fs x f
+  for dir in "$@"; do
+    fs=$dir/filesystem
+    if [[ -e $fs && $user =~ ^iank?$ ]]; then
+      # note, symlinks get resolved, not copied.
+      s tar --mode=g-s --owner=0 --group=0 -cz -C $fs . | s tar -xz -C /
+    fi
 
-link-dirs() {
-    for dir in "$@"; do
-        common-file-setup $dir
-        common-file-setup $dir/machine_specific/$HOSTNAME
-    done
+    if [[ -e $dir/subdir_files ]]; then
+      m subdir-link-r $dir/subdir_files
+    fi
+    local x=( $dir/!(binds|subdir_files|filesystem|machine_specific|..|.) )
+    (( ${#x[@]} >= 1 )) || continue
+    m lnf ${x[@]} ~
+  done
 }
 
-all_dirs=({/a/c,/p/c}{,/machine_specific/$HOSTNAME})
+user=$(id -un)
+all_dirs=({/a/bin/ds,/p/c}{,/machine_specific/$HOSTNAME})
+# note, we assume a group of hosts does not have the
+# same name as a single host, which is no problem on our scale.
+for x in /p/c/machine_specific/*.hosts /a/bin/ds/machine_specific/*.hosts; do
+  if grep -qxF $HOSTNAME $x; then all_dirs+=( ${x%.hosts} ); fi
+done
+
 c_dirs=(/a/c{,/machine_specific/$HOSTNAME})
-case $USER in
-    ian)
-        # p needs to go first so .ssh link is created, then config link inside it
-        common-file-setup $dir ${all_dirs[@]}
-        sudo -u traci "$BASH_SOURCE"
-        ;;
-    traci)
-        common-file-setup ${c_dirs[@]}
-        ;;
-    *)
-        echo "$0: error: unexpected user"; exit 1
-        ;;
+case $user in
+  iank)
+    files=(/p/c/machine_specific/*/filesystem/etc/ssh/*_key
+           /p/c/filesystem/etc/openvpn/client/*.key
+           /p/c/filesystem/etc/openvpn/easy-rsa/keys/*.key
+           /p/c/machine_specific/kw/filesystem/etc/openvpn/client/*.key
+          )
+    if [[ -e ${files[0]} ]]; then
+      chmod 600 ${files[@]}
+    fi
+    # p needs to go first so .ssh link is created, then config link inside it
+    m common-file-setup ${all_dirs[@]}
+
+    #### begin special extra stuff ####
+    install -d -m700 ~/gpg-agent-socket
+
+    f=/var/lib/bind
+    if [[ -e $f ]]; then
+      # reset to the original permissions.
+      m s chgrp -R bind $f
+      m s chmod g+w $f
+    fi
+    sudo bash -c 'shopt -s nullglob; for f in /etc/bind/*.key /etc/bind/*.private /etc/bind/key.*; do chgrp bind $f; done'
+    if [[ -e /etc/davpass ]] && getent group www-data &>/dev/null; then
+      s chgrp www-data /etc/davpass
+    fi
+    if [[ -e /var/lib/znc ]] && getent group znc; then
+      s chown -R znc:znc /var/lib/znc
+    fi
+    /a/exe/lnf -T /p/arbtt-capture.log ~/.arbtt/capture.log
+    f=/etc/prometheus-htpasswd
+    if [[ -e $f ]]; then
+      s chmod 640 $f /etc/prometheus-pass
+      s chown root:www-data $f
+      if getent passwd prometheus; then
+        s chown root:prometheus /etc/prometheus-pass
+      fi
+    fi
+
+    ##### end special extra stuff #####
+
+    if [[ -e /etc/openvpn ]]; then
+      sudo bash -c 'shopt -s nullglob && cd /etc/openvpn && for f in client/* server/*; do ln -sf $f .; done'
+    fi
+
+    m sudo -H -u user2 "${BASH_SOURCE[0]}"
+    ;;
+  user2)
+    m common-file-setup ${c_dirs[@]}
+    ;;
+  *)
+    echo "$0: error: unexpected user"; exit 1
+    ;;
 esac
+
+echo 0 >~/.local/conflink