assay-cli 3.10.2

CLI for Assay
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78

use std::path::PathBuf;

#[derive(Debug, Clone)]
pub enum SetupAction {
    Mkdir {
        path: PathBuf,
        mode: u32,
        owner: String,
        group: String,
    },
    InstallBinary {
        from: PathBuf,
        to: PathBuf,
        mode: u32,
    },
    SetCaps {
        path: PathBuf,
        caps: Vec<String>,
    },
    Verify {
        description: String,
    },
}

#[derive(Debug, Default)]
pub struct SetupPlan {
    pub actions: Vec<SetupAction>,
    pub requires_sudo: bool,
}

use crate::cli::args::SetupArgs;

pub fn generate_plan(args: &SetupArgs) -> SetupPlan {
    let mut plan = SetupPlan::default();

    // We reuse probing logic (from diagnostics or just simple checks)
    // Here we can be idempotent: check if target state exists.

    // 1. Runtime Dir
    if !args.runtime_dir.exists() {
        plan.actions.push(SetupAction::Mkdir {
            path: args.runtime_dir.clone(),
            mode: 0o770,
            owner: "root".into(),
            group: "assay".into(), // ideally we create this group too, but for v0.1 keep simple
        });
        plan.requires_sudo = true;
    }

    // 2. Install Helper
    if let Some(src) = &args.helper_from {
        let dest = args.prefix.join("assay-bpf");

        // Idempotency: only install if missing or different?
        // For security binaries, "always overwrite on request" is safer to ensure version match.
        // User explicitly asked for install via flags.

        plan.actions.push(SetupAction::InstallBinary {
            from: src.clone(),
            to: dest.clone(),
            mode: 0o755,
        });

        if cfg!(target_os = "linux") {
            plan.actions.push(SetupAction::SetCaps {
                path: dest,
                caps: vec![
                    "cap_bpf".to_string(),
                    "cap_perfmon".to_string(),
                    "cap_sys_resource".to_string(),
                ],
            });
        }
        plan.requires_sudo = true;
    }

    plan
}