blob: b7d6b69ace51e3961ef694a32b9f63bd08725038 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
|
#!/usr/bin/env bash
set -eu
FORCE=
BRANCH=master
REMOTE_LOGIN=root
REMOTE_HOST=localhost
REMOTE_PORT=22
TUNNEL_PORT=2269
function usage {
echo "Usage: $0 [OPTIONS] COMMAND [ARGS]
COMMANDS :
init : init the remote host testing environment
exec : update remote host and run cf-agent -K [ARGS]
clean : cleans the remote host testing environment
Options :
-b <branch> : the git branch you are testing (default master)
-l <remote_login> : the login to ssh with (default root)
-h <remote_host> : the host to test your policies onto (default localhost)
-p <remote_port> : the port to ssh to (default 22)
-t <tunnel_port> : the port with which to establish the reverse tunnel to your machine
-f : override remote lock" >&2
exit 1
}
function cleanup {
echo "Unknown error, rerun with bash -x for further information" }
}
trap cleanup ERR
function run_ssh {
local CMD=$1
local RETURN=${2:-}
coproc ssh -o ForwardAgent=yes \
-R 127.0.0.1:${TUNNEL_PORT}:127.0.0.1:22 \
-p ${REMOTE_PORT} \
${REMOTE_LOGIN}@${REMOTE_HOST} \
${CMD} 2>&1
exec 3>&${COPROC[0]}
wait $COPROC_PID
local code=$?
[[ -n $RETURN ]] && eval $RETURN="'$(cat <&3)'"
return $code
}
function run_ssh_interactive {
local CMD=$1
local code=0
ssh -o ForwardAgent=yes \
-R 127.0.0.1:${TUNNEL_PORT}:127.0.0.1:22 \
-p ${REMOTE_PORT} \
${REMOTE_LOGIN}@${REMOTE_HOST} \
${CMD} || code=$?
return $code
}
function lock {
run_ssh 'mkdir /srv/cfengine-lock' || {
run_ssh "cat /srv/cfengine-lock/lock" owner
if [ "${owner}" != "${USER}" -a -z "${FORCE}" ]; then
echo ${REMOTE_HOST} is locked by ${USER}, use -f to override.
fi
}
run_ssh "echo $USER > /srv/cfengine-lock/lock"
}
function unlock {
run_ssh 'rm -rf /srv/cfengine-lock'
}
while getopts ":b:l:h:p:t:f" o; do
case "${o}" in
b) BRANCH=${OPTARG} ;;
l) REMOTE_LOGIN=${OPTARG} ;;
h) REMOTE_HOST=${OPTARG} ;;
p) REMOTE_PORT=${OPTARG} ;;
t) TUNNEL_PORT=${OPTARG} ;;
f) FORCE=1 ;;
*) usage ;;
esac
done
shift $((OPTIND-1))
case "${1:-}" in
init)
lock
run_ssh 'test -d /srv/cfengine' && {
echo "/srv/cfengine already exists on ${REMOTE_HOST}"
exit 1
}
run_ssh "git clone -b ${BRANCH} ssh://localhost:${TUNNEL_PORT}/home/${USER}/cfengine /srv/cfengine"
run_ssh "cp /srv/cfengine/masterfiles/{failsafe.cf,update.cf} /var/cfengine/inputs"
;;
exec)
lock
run_ssh 'test -d /srv/cfengine' || {
echo "/srv/cfengine doesn't exist on ${REMOTE_HOST}, did you forget to run init?"
exit 1
}
run_ssh_interactive "cd /srv/cfengine &&
git remote update &&
git reset --hard origin/${BRANCH} &&
cd /srv/cfengine/masterfiles &&
cf-agent -D policy_servers -Kb update -f failsafe.cf"
shift
run_ssh_interactive "cf-agent -D policy_servers -K $*"
;;
clean)
lock
run_ssh 'test -d /srv/cfengine' && {
run_ssh "rm -rf /srv/cfengine"
}
unlock
;;
*) usage ;;
esac
|
