bestool 1.21.2

BES Deployment tooling
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61

use std::path::PathBuf;

use algae_cli::passphrases::PassphraseArgs;
use bestool_canopy::registration;
use clap::Parser;
use miette::{Result, WrapErr as _};

use crate::actions::Context;

/// Import a canopy registration exported from another machine.
///
/// Decrypts the export blob with its passphrase and re-stores it under this
/// machine's identity, so the registration is bound to this host going forward.
#[derive(Debug, Clone, Parser)]
pub struct ImportArgs {
	/// Base64 export blob. Read from stdin if omitted.
	pub blob: Option<String>,

	/// Directory to write the encrypted canopy registration to.
	///
	/// Defaults to the platform's machine-global config directory
	/// (`/etc/bestool`, or `%ProgramData%\bestool` on Windows).
	#[arg(long, value_name = "DIR")]
	pub config: Option<PathBuf>,

	#[command(flatten)]
	#[allow(missing_docs, reason = "don't interfere with clap")]
	pub passphrase: PassphraseArgs,
}

pub async fn run(args: ImportArgs, _ctx: Context) -> Result<()> {
	let ImportArgs {
		blob,
		config,
		passphrase,
	} = args;

	let blob_b64 = match blob {
		Some(b) => b,
		None => super::read_stdin("export blob")?,
	};
	let bytes = super::decode_base64(blob_b64.trim())?;

	let pass = passphrase.require().await?;
	let reg = registration::decrypt_with_passphrase(&bytes, pass)
		.wrap_err("decrypting export (wrong passphrase?)")?;

	let dir = config.unwrap_or_else(registration::default_dir);
	registration::store_in(&dir, &reg)
		.await
		.wrap_err("storing canopy registration")?;

	println!("Imported canopy registration.");
	if let Some(id) = &reg.server_id {
		println!("  server id: {id}");
	}
	if let Some(id) = &reg.device_id {
		println!("  device id: {id}");
	}
	Ok(())
}