0k-charms/rsync-backup-target/resources/bin/compose-add-rsync-key

#!/bin/bash


. /etc/shlib

[[ "${BASH_SOURCE[0]}" != "${0}" ]] && SOURCED=true

include common
include pretty
include cmdline

desc='Adds YAML key quite crudely in given compose.yml.'
help="\

$WHITE$exname$NORMAL will find a add or replace SSH key to
given identifier for rsync-backup-target charm.

For now, it only use detection of '## INSERTION-POINT' to manage
edition of 'compose.yml', and verification it didn't break anything
before overwriting.

"


[ "$SOURCED" ] && return 0

##
## Command line processing
##


# remove all lines from regex to regex (not included).
remove_lines_from_to() {
    local from="$1" to="$2"
    sed -r "/$from/,/$to/{/$to/"'!'"d};/$from/d"
}

check_valid_yaml() {
    shyaml get-value >/dev/null 2>&1;
}


cmdline.spec.gnu
cmdline.spec.reporting



cmdline.spec::cmd:__main__:run() {

    : :posarg: DOMAIN           'domain identifier'
    : :posarg: SSH_PUBLIC_KEY   'ssh public key'

    : :optfla: --no-reload,-R   'Prevent reloading archiving server'

    : :optval: --service-name,-s   "YAML service name in compose
                                    file to check for existence of key.
                                    Defaults to 'rsync-backup-target'"
    : :optval: --compose-file,-f   "Compose file location. Defaults to
                                    '/etc/compose/compose.yml'"

    local service_name compose_file
    service_name=${opt_service_name:-rsync-backup-target}
    compose_file=${opt_compose_file:-/etc/compose/compose.yml}
    if ! existing_domains=$(shyaml keys "${service_name//./\\.}.options.keys" < "$compose_file"); then
        err "Couldn't query file '$compose_file' for keys of" \
            "service ${DARKYELLOW}${service_name}${NORMAL}."
        exit 1
    fi

    content=$(cat "$compose_file")
    if echo "$existing_domains" | grep "^${DOMAIN}$" >/dev/null 2>&1; then

        if ! prev_key=$(shyaml get-value "${service_name//./\\.}.options.keys.${DOMAIN//./\\.}" \
                        < "$compose_file"); then
            err "Couldn't query file '$compose_file' for key of domain '$DOMAIN'."
            exit 1
        fi

        if [ "${prev_key}" == "$SSH_PUBLIC_KEY" ]; then
            info "Key is already setup correctly."
            exit 0
        fi

        content=$(echo "$content" | remove_lines_from_to '^      '"${DOMAIN//./\\.}"': ".*\\$' \
                                                         '^      ([A-Za-z0-9.-]+: "|## END MARKER)')

        if [ -z "$content" ]; then
            err "Didn't manage to remove key to compose file '$DOMAIN' in '$compose_file'."
            exit 1
        fi

        if [ "$content" == "$(cat "$compose_file")" ]; then
            err "Couldn't remove previous key for '$DOMAIN' in '$compose_file'."
            exit 1
        fi
        ## check we didn't break yaml
        if ! echo "$content" | check_valid_yaml; then
            err "Couldn't safely remove previous key for '$DOMAIN' in '$compose_file'."
            exit 1
        fi
    fi

    excerpt=$(cat <<EOF
      $DOMAIN: "$(
    echo "$SSH_PUBLIC_KEY" |
        fold -w 67 | sed -r 's/$/\\/g;2,$ s/^/        /g;$,$ s/\\$//g')"

EOF
           )
    excerpt="${excerpt//\\/\\\\\\}"
    content="$(echo "$content" | sed -r '/^      ## INSERTION-POINT/a\'"${excerpt}")"

    if [ -z "$content" ]; then
        err "Didn't manage to add key to compose file '$DOMAIN' in '$compose_file'."
        exit 1
    fi

    if ! echo "$content" | check_valid_yaml; then
        err "Couldn't safely add key to compose file '$DOMAIN' in '$compose_file'."
        exit 1
    fi

    if diff=$(diff -u "$compose_file" <(echo "$content")); then
        err "No difference, this is not expected, and something went wrong."
        exit 1
    fi
    echo "${WHITE}Applying these changes:${NORMAL}"
    if type -p colordiff >/dev/null; then
        colordiff -u "$compose_file" <(echo "$content")
    else
        echo "$diff"
    fi | egrep -v "^[^ ]*(---|\+\+\+)"
    cp "$compose_file" "${compose_file}.old"
    echo "$content" > "$compose_file"

    if [ -z "$opt_no_reload" ]; then
        ## reloading (could be much faster)
        compose --debug down && compose --debug up
        if [ "$?" == 0 ]; then
            info "Added key, and restarted service ${DARKYELLOW}$service_name${NORMAL}."
        else
            err "something went wrong ! Should check the state of '$DOMAIN' !!"
            exit 1
        fi
    else
        info "Added key, you'll need to restart service ${DARKYELLOW}$service_name${NORMAL}."
    fi
}


cmdline::parse "$@"