add bash ceru tool
This commit is contained in:
parent
cf5a6bbc00
commit
c52ea75e20
4 changed files with 283 additions and 0 deletions
44
ceru/ceru
Executable file
44
ceru/ceru
Executable file
|
|
@ -0,0 +1,44 @@
|
|||
#!/usr/bin/env bash
|
||||
set -euo pipefail
|
||||
|
||||
# ======== CONFIGURATION ========
|
||||
CERU_USE_NIX3=true
|
||||
# ======== CONFIGURATION ========
|
||||
|
||||
# libceru env vars
|
||||
THIS=$(basename "$0")
|
||||
source libceru.sh
|
||||
|
||||
USAGE="${BOLD}${UNDERLINE}${RED}Usage${RESET}
|
||||
${BOLD}${GREEN}$THIS [option...] subcommand${RESET}
|
||||
|
||||
${BOLD}${UNDERLINE}${RED}Options${RESET}
|
||||
${BOLD}${MAGENTA}-h, --help${RESET} Show this message (^_^)
|
||||
|
||||
${BOLD}${UNDERLINE}${RED}Subcommands${RESET}
|
||||
${BOLD}${CYAN}deploy${RESET} Deploy your Cerulean network
|
||||
${BOLD}${CYAN}new${RESET} Init new instances of various components (see ${BOLD}${GREEN}\`$THIS new --help\`${RESET})"
|
||||
|
||||
# parse all args
|
||||
SUBCMD=false # whether a subcommand was specified
|
||||
while [[ $# -gt 0 ]]; do
|
||||
ARG=$1
|
||||
case $ARG in
|
||||
-h|--help)
|
||||
throw-usage 0 ;;
|
||||
-*)
|
||||
echo "[!] Unknown option \"$ARG\""
|
||||
exit 1 ;;
|
||||
*)
|
||||
SUBCMD=true
|
||||
break ;;
|
||||
esac
|
||||
done; unset -v ARG
|
||||
|
||||
# invalid usage occurs if no args or subcommand given
|
||||
if [[ $# = 0 || "$SUBCMD" = false ]]; then
|
||||
throw-usage 1
|
||||
fi; unset -v SUBCMD
|
||||
|
||||
# run provided subcommand
|
||||
run-subcmd "$@"
|
||||
105
ceru/libceru.sh
Executable file
105
ceru/libceru.sh
Executable file
|
|
@ -0,0 +1,105 @@
|
|||
#!/usr/bin/env bash
|
||||
|
||||
# libceru relies on the script that sources
|
||||
# it to set the following environment variables:
|
||||
# CMD_NAME USAGE
|
||||
set -u
|
||||
|
||||
# ======== INTERNAL STATE ========
|
||||
SUBCMDS="$PWD/subcmds" # XXX: TODO: don't hardcode as relative
|
||||
CMD_ABS="$SUBCMDS" # (initial value) CMD_ABS stores the current cmd's absolute path
|
||||
CMD_MAJ="$THIS" # (initial value) CMD_MAJ stores the current cmd's parent's name
|
||||
CMD_MIN="" # (initial value) CMD_MIN stores the current cmd's name
|
||||
# ======== INTERNAL STATE ========
|
||||
|
||||
# ANSI Coloring
|
||||
BLACK='\033[30m'
|
||||
RED='\033[31m'
|
||||
GREEN='\033[32m'
|
||||
YELLOW='\033[33m'
|
||||
BLUE='\033[34m'
|
||||
MAGENTA='\033[35m'
|
||||
CYAN='\033[36m'
|
||||
WHITE='\033[37m'
|
||||
DEFCOL='\033[39m' # default colour
|
||||
|
||||
# ANSI Styling
|
||||
RESET='\033[0m'
|
||||
BOLD='\033[1m'
|
||||
DIM='\033[2m'
|
||||
ITALIC='\033[3m'
|
||||
UNDERLINE='\033[4m'
|
||||
BLINKSLOW='\033[5m'
|
||||
BLINKFAST='\033[6m'
|
||||
REVERSE='\033[7m'
|
||||
INVISIBLE='\033[8m'
|
||||
|
||||
# Error Messages
|
||||
function perr { echo -e "${BOLD}${RED}error:${RESET} $@\nTry ${BOLD}${GREEN}'--help'${RESET} for more information." >&2; }
|
||||
function perr-usage { echo -e "$USAGE" >&2; }
|
||||
function perr-badflag { perr "unrecognised flag ${BOLD}${MAGENTA}'$1'${RESET}"; }
|
||||
function perr-noflagval { perr "flag ${BOLD}${MAGENTA}'$1'${RESET} requires ${BOLD}${MAGENTA}${2}${RESET} argument(s), but only ${BOLD}${MAGENTA}${3}${RESET} were given"; }
|
||||
function perr-badarg { perr "unrecognised arg ${BOLD}${MAGENTA}'$1'${RESET}"; }
|
||||
function perr-noarg { perr "required argument ${BOLD}${MAGENTA}'$1'${RESET} is missing"; }
|
||||
# Failures
|
||||
function throw { echo -e "${@:2}" >&2; if [[ "$1" -ge 0 ]]; then exit "$1"; fi; }
|
||||
function throw-usage { throw "$1" "$(perr-usage 2>&1)"; }
|
||||
function throw-badflag { throw "$1" "$(perr-badflag "${@:2}" 2>&1)"; }
|
||||
function throw-noflagval { throw "$1" "$(perr-noflagval "${@:2}" 2>&1)"; }
|
||||
function throw-badarg { throw "$1" "$(perr-badarg "${@:2}" 2>&1)"; }
|
||||
function throw-noarg { throw "$1" "$(perr-noarg "${@:2}" 2>&1)"; }
|
||||
# Parsing/Validation
|
||||
function required { [[ -n "$1" ]] || throw-noarg 1 "${@:2}"; }
|
||||
|
||||
# Other
|
||||
function confirm-action {
|
||||
local CHAR
|
||||
while :; do
|
||||
echo -e "$1"
|
||||
read -n1 CHAR
|
||||
case $CHAR in
|
||||
[yY])
|
||||
return 0 ;;
|
||||
[nN])
|
||||
return 1 ;;
|
||||
esac
|
||||
done
|
||||
}
|
||||
function confirm { confirm-action ":: Proceed? [Y/n] "; }
|
||||
|
||||
function confirm-file-overwrite {
|
||||
echo -e "${BOLD}${UNDERLINE}${BLINKFAST}${RED}WARNING!${RESET} ${YELLOW}The following files will be overwritten:${RESET}"
|
||||
local ARG=""
|
||||
for ARG in "$@"; do
|
||||
echo -e "${BOLD} • ${GREEN}${ARG}${RESET}"
|
||||
done
|
||||
confirm
|
||||
}
|
||||
|
||||
# ====== Core ======
|
||||
function run-subcmd {
|
||||
# if CMD_MIN is empty, then CMD_MAJ is the root cmd (ie ceru)
|
||||
# and hence CMD_MAJ shouldn't yet be overridden
|
||||
if [[ ! "$CMD_MIN" = "" ]]; then
|
||||
CMD_MAJ="$CMD_MIN" # swapsies!
|
||||
fi
|
||||
# we shift here so $@ is passed correctly when we `source "$TARGET"`
|
||||
CMD_MIN="$1"; shift
|
||||
|
||||
# ensure the current command can take subcommands
|
||||
if [[ -f "$CMD_ABS" ]]; then
|
||||
# XXX: INTERNAL ERROR
|
||||
throw 2 "Subcommand \"$CMD_MIN\" cannot exist, as $CMD_MAJ has no subcommands!"
|
||||
fi
|
||||
|
||||
CMD_ABS="$CMD_ABS/$CMD_MIN"
|
||||
|
||||
# attempt to find the script corresponding to CMD_ABS
|
||||
TARGET="$CMD_ABS"
|
||||
if [[ -d "$CMD_ABS" ]]; then
|
||||
TARGET="$TARGET/default.sh"
|
||||
elif [[ ! -f "$CMD_ABS" ]]; then
|
||||
throw 1 "Command \"$CMD_MAJ\" does not provide subcommand \"$CMD_MIN\"!"
|
||||
fi
|
||||
source "$TARGET"
|
||||
}
|
||||
34
ceru/subcmds/new/default.sh
Executable file
34
ceru/subcmds/new/default.sh
Executable file
|
|
@ -0,0 +1,34 @@
|
|||
#!/usr/bin/env bash
|
||||
set -euo pipefail
|
||||
USAGE="${BOLD}${UNDERLINE}${RED}Usage${RESET}
|
||||
${BOLD}${GREEN}$THIS new [option...] subcommand${RESET}
|
||||
|
||||
${BOLD}${UNDERLINE}${RED}Options${RESET}
|
||||
${BOLD}${MAGENTA}-h, --help${RESET} Show this message (^_^)
|
||||
|
||||
${BOLD}${UNDERLINE}${RED}Subcommands${RESET}
|
||||
${BOLD}${CYAN}key${RESET} Generate a new binary-cache signing keypair"
|
||||
|
||||
# parse all args
|
||||
SUBCMD=false # where a subcommand was specified
|
||||
while [[ $# -gt 0 ]]; do
|
||||
ARG=$1
|
||||
case $ARG in
|
||||
-h|--help)
|
||||
throw-usage 0 ;;
|
||||
-*)
|
||||
echo "[!] Unknown option \"$ARG\""
|
||||
exit 1 ;;
|
||||
*)
|
||||
SUBCMD=true
|
||||
break ;;
|
||||
esac
|
||||
done; unset -v ARG
|
||||
|
||||
# invalid usage occurs if no args or subcommand given
|
||||
if [[ $# = 0 || "$SUBCMD" = false ]]; then
|
||||
throw-usage 1
|
||||
fi; unset -v SUBCMD
|
||||
|
||||
# run provided subcommand
|
||||
run-subcmd "$@"
|
||||
100
ceru/subcmds/new/key
Executable file
100
ceru/subcmds/new/key
Executable file
|
|
@ -0,0 +1,100 @@
|
|||
#!/usr/bin/env bash
|
||||
set -euo pipefail
|
||||
USAGE="${BOLD}${UNDERLINE}${RED}Usage${RESET}
|
||||
${BOLD}${GREEN}$THIS new key [option...]${RESET}
|
||||
|
||||
${BOLD}${UNDERLINE}${RED}Options${RESET}
|
||||
${BOLD}${MAGENTA}-h, --help${RESET} Show this message (^_^)
|
||||
${BOLD}${MAGENTA}-f, --force${RESET} Ignores all warnings!!
|
||||
${BOLD}${MAGENTA}-j, --json${RESET} Output in JSON format
|
||||
${BOLD}${MAGENTA}-n, --name${RESET} Identifier of the key (e.g. ${BOLD}${MAGENTA}cache.example.org-1${RESET})
|
||||
${BOLD}${MAGENTA}-o, --out${RESET} Private key file name to write to (the public key is named identically but ends with ${BOLD}${MAGENTA}.pub${RESET})
|
||||
${BOLD}${MAGENTA}-P, --private-only${RESET} Only generate the private key, not the entire keypair"
|
||||
|
||||
# ==== Argument Values ====
|
||||
FORCE=false
|
||||
PRIV_ONLY=false
|
||||
JSON=false
|
||||
NAME=""
|
||||
SINK=""
|
||||
# ==== Argument Values ====
|
||||
|
||||
# parse all args
|
||||
while [[ $# -gt 0 ]]; do
|
||||
ARG="$1"
|
||||
case "$ARG" in
|
||||
-h|--help)
|
||||
throw-usage 0
|
||||
;;
|
||||
-n|--name)
|
||||
shift
|
||||
# XXX: NOTE: do I need to safe shift (shift || true) since -e is set?
|
||||
NAME="$1"; shift
|
||||
;;
|
||||
-P|--private-only)
|
||||
shift
|
||||
PRIV_ONLY=true
|
||||
;;
|
||||
-o|--out)
|
||||
shift
|
||||
# XXX: NOTE: do I need to safe shift (shift || true) since -e is set?
|
||||
SINK="$1"; shift
|
||||
;;
|
||||
-j|--json)
|
||||
shift
|
||||
JSON=true
|
||||
;;
|
||||
-f|--force)
|
||||
shift
|
||||
FORCE=true
|
||||
;;
|
||||
|
||||
-*)
|
||||
throw-badflag 1 "$ARG"
|
||||
;;
|
||||
*)
|
||||
throw-badarg 1 "$ARG"
|
||||
;;
|
||||
esac
|
||||
done; unset -v ARG
|
||||
|
||||
# fail if NAME not provided
|
||||
required "$NAME" --name
|
||||
|
||||
|
||||
# generate our keypair
|
||||
PRIV_KEY=$(nix key generate-secret --key-name "$NAME")
|
||||
PUB_KEY=$(nix key convert-secret-to-public <<<"$PRIV_KEY")
|
||||
|
||||
# result defaults to unset (only stays unset if we intend on writing to a file)
|
||||
RESULT=""
|
||||
# JSON formatting
|
||||
if [[ "$JSON" = true ]]; then
|
||||
RESULT="{
|
||||
\"privateKey\": \"${PRIV_KEY}\"$(
|
||||
[[ "$PRIV_ONLY" = true ]] \
|
||||
|| echo ",\n \"publicKey\": \"${PUB_KEY}\"")
|
||||
}"
|
||||
if [[ -n "$SINK" ]]; then
|
||||
# confirm the user understands files will be overwritten
|
||||
[[ "$FORCE" = true ]] || confirm-file-overwrite "$SINK" || exit 0
|
||||
echo -e "$RESULT" > "$SINK"
|
||||
else
|
||||
echo -e "$RESULT"
|
||||
fi
|
||||
# standard formatting (stdout)
|
||||
elif [[ -z "$SINK" ]]; then
|
||||
echo -e "${BOLD}${UNDERLINE}${RED}Private Key${RESET}
|
||||
${BOLD}${GREEN}${PRIV_KEY}${RESET}$(
|
||||
[[ "$PRIV_ONLY" = true ]] \
|
||||
|| echo "\n${BOLD}${UNDERLINE}${RED}Public Key${RESET}\n ${BOLD}${GREEN}${PUB_KEY}${RESET}")"
|
||||
# standard formatting (files)
|
||||
else
|
||||
PRIV_SINK="$SINK"
|
||||
PUB_SINK="$SINK.pub"
|
||||
# confirm the user understands files will be overwritten
|
||||
[[ "$FORCE" = true ]] || confirm-file-overwrite "$PRIV_SINK" "$PUB_SINK" || exit 0
|
||||
echo "$PRIV_KEY" > "$PRIV_SINK"
|
||||
echo "$PUB_KEY" > "$PUB_SINK"
|
||||
fi;
|
||||
unset -v PRIV_SINK PUB_SINK PRIV_KEY PUB_KEY RESULT
|
||||
Loading…
Add table
Add a link
Reference in a new issue