0k-charms/sftp/hooks/init

#!/bin/bash

## Init is run on host
## For now it is run every time the script is launched, but
## it should be launched only once after build.

## Accessible variables are:
## - SERVICE_NAME        Name of current service
## - DOCKER_BASE_IMAGE   Base image from which this service might be built if any
## - SERVICE_DATASTORE           Location on host of the DATASTORE of this service
## - SERVICE_CONFIGSTORE         Location on host of the CONFIGSTORE of this service


set -e

service_def=$(get_compose_service_def "$SERVICE_NAME")

users_def=$(echo "$service_def" | shyaml get-value options.users 2>/dev/null) || true

users_file="$SERVICE_CONFIGSTORE/etc/sftp-users.conf"
echo | file_put "$users_file"

rm -f "$SERVICE_DATASTORE/home/"*"/.ssh/authorized_keys"

[ "$users_def" ] || exit 0

rm -f "$users_file"

volume_keys=()
while read-0 login user_def; do
    key_nb=0
    local_path_key="/home/$login/.ssh/keys"
    host_path_key="$SERVICE_CONFIGSTORE${local_path_key}"
    while read-0 key; do
        debug "Creating login key ${key_nb} for '$login'" || true
        echo "$key" | file_put "$host_path_key/key_${key_nb}.pub"
        ((key_nb++)) || true
    done < <(echo "$user_def" | shyaml get-values-0 keys)
    volume_keys+=("$host_path_key:$local_path_key:ro")
    gids=()
    while read-0 group; do
        if ! group_ent=$(getent group "$group"); then
            debug groupadd  -K GID_MIN=3000 -K GID_MAX=4000 "$group"
            groupadd  -K GID_MIN=3000 -K GID_MAX=4000 "$group"
            group_ent=$(getent group "$group")
        fi
        gids+=("$(echo "$group_ent" | cut -f3 -d:)")
    done < <(echo "$user_def" | shyaml get-values-0 groups 2>/dev/null)
    password=$(echo "$user_def" | shyaml get-value password 2>/dev/null) ||
        password=$(gen_password 14)
    line="$login:$password::$(echo "${gids[@]}" | tr " " ",")"
    debug "Adding line: $line"
    echo "$line" >> "$users_file"
done < <(echo "$users_def" | shyaml key-values-0)

init-config-add "\
$SERVICE_NAME:
  volumes:
$(for volume in "${volume_keys[@]}"; do
      echo "    - $volume"
  done)
"