Thales Maciel
59e48e830b
Move the supported systemd path to two services: an owner-user bangerd for orchestration and a narrow root helper for bridge/tap, NAT/resolver, dm/loop, and Firecracker ownership. This removes repeated sudo from daily vm and image flows without leaving the general daemon running as root. Add install metadata, system install/status/restart/uninstall commands, and a system-owned runtime layout. Keep user SSH/config material in the owner home, lock file_sync to the owner home, and move daemon known_hosts handling out of the old root-owned control path. Route privileged lifecycle steps through typed privilegedOps calls, harden the two systemd units, and rewrite smoke plus docs around the supported service model. Verified with make build, make test, make lint, and make smoke on the supported systemd host path.
93 lines
3 KiB
Go
93 lines
3 KiB
Go
package cli
|
|
|
|
import (
|
|
"fmt"
|
|
|
|
"banger/internal/config"
|
|
"banger/internal/daemon"
|
|
"banger/internal/paths"
|
|
|
|
"github.com/spf13/cobra"
|
|
)
|
|
|
|
// newSSHConfigCommand exposes the opt-in ergonomics for `ssh <name>.vm`.
|
|
// Default mode prints current status + the exact Include line the user
|
|
// can paste into ~/.ssh/config themselves. --install does the include
|
|
// for them inside a marker-fenced block; --uninstall reverses it.
|
|
func newSSHConfigCommand() *cobra.Command {
|
|
var (
|
|
install bool
|
|
uninstall bool
|
|
)
|
|
cmd := &cobra.Command{
|
|
Use: "ssh-config",
|
|
Short: "Manage the optional `ssh <name>.vm` shortcut",
|
|
Long: `Banger keeps a self-contained SSH client config under its own config
|
|
directory (never touching ~/.ssh/config on its own). Opt in to the
|
|
convenience shortcut that lets you run 'ssh <name>.vm' from any
|
|
terminal, bypassing 'banger vm ssh':
|
|
|
|
banger ssh-config # print status + copy-paste snippet
|
|
banger ssh-config --install # add an Include line to ~/.ssh/config
|
|
banger ssh-config --uninstall # remove banger's Include from ~/.ssh/config
|
|
`,
|
|
Args: noArgsUsage("usage: banger ssh-config [--install|--uninstall]"),
|
|
RunE: func(cmd *cobra.Command, args []string) error {
|
|
if install && uninstall {
|
|
return fmt.Errorf("use only one of --install or --uninstall")
|
|
}
|
|
layout, err := paths.Resolve()
|
|
if err != nil {
|
|
return err
|
|
}
|
|
cfg, err := config.Load(layout)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
if err := daemon.SyncVMSSHClientConfig(layout, cfg.SSHKeyPath); err != nil {
|
|
return err
|
|
}
|
|
bangerConfig := daemon.BangerSSHConfigPath(layout)
|
|
switch {
|
|
case install:
|
|
if err := daemon.InstallUserSSHInclude(layout); err != nil {
|
|
return err
|
|
}
|
|
_, err = fmt.Fprintf(cmd.OutOrStdout(),
|
|
"added Include %s to ~/.ssh/config — `ssh <name>.vm` will now route through banger\n",
|
|
bangerConfig,
|
|
)
|
|
return err
|
|
case uninstall:
|
|
if err := daemon.UninstallUserSSHInclude(); err != nil {
|
|
return err
|
|
}
|
|
_, err = fmt.Fprintln(cmd.OutOrStdout(), "removed banger's entries from ~/.ssh/config")
|
|
return err
|
|
default:
|
|
installed, err := daemon.UserSSHIncludeInstalled()
|
|
if err != nil {
|
|
return err
|
|
}
|
|
out := cmd.OutOrStdout()
|
|
fmt.Fprintf(out, "banger ssh_config: %s\n", bangerConfig)
|
|
if installed {
|
|
fmt.Fprintln(out, "status: included from ~/.ssh/config")
|
|
fmt.Fprintln(out, "")
|
|
fmt.Fprintln(out, "`ssh <name>.vm` is enabled. Run `banger ssh-config --uninstall` to revert.")
|
|
} else {
|
|
fmt.Fprintln(out, "status: not included (opt-in)")
|
|
fmt.Fprintln(out, "")
|
|
fmt.Fprintln(out, "Enable `ssh <name>.vm` in two ways:")
|
|
fmt.Fprintln(out, " banger ssh-config --install")
|
|
fmt.Fprintln(out, "or add this line to ~/.ssh/config yourself:")
|
|
fmt.Fprintf(out, " Include %s\n", bangerConfig)
|
|
}
|
|
return nil
|
|
}
|
|
},
|
|
}
|
|
cmd.Flags().BoolVar(&install, "install", false, "add an Include line to ~/.ssh/config")
|
|
cmd.Flags().BoolVar(&uninstall, "uninstall", false, "remove banger's Include from ~/.ssh/config")
|
|
return cmd
|
|
}
|