libside 0.3.0

a library for building configuration management tools
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137

use serde::{de::DeserializeOwned, Serialize};
use std::{
    collections::{HashMap, HashSet},
    path::Path,
};

use crate::system::System;

pub mod keys;
pub mod password;

#[derive(Clone, Debug, PartialEq, Eq, Hash)]
pub struct SecretId {
    package: String,
    name: String,
}

impl SecretId {
    pub fn new(package: String, name: String) -> SecretId {
        SecretId { package, name }
    }
}

#[derive(Clone, Debug, PartialEq, Eq, Hash)]
struct InternalSecretId {
    id: SecretId,
    kind: String,
}

impl std::fmt::Display for InternalSecretId {
    fn fmt(&self, f: &mut std::fmt::Formatter<'_>) -> std::fmt::Result {
        write!(f, "{}:{}:{}", self.id.package, self.id.name, self.kind)
    }
}

pub struct SecretData(Vec<u8>);

pub struct Secrets {
    secrets: HashMap<InternalSecretId, SecretData>,
    new_secrets: HashSet<InternalSecretId>,
}

pub trait Secret: Serialize + DeserializeOwned + Clone {
    const KIND: &'static str;

    fn generate_new() -> Self;
}

impl Secrets {
    pub fn load<S: System>(path: &Path, system: &mut S) -> Result<Secrets, S::Error> {
        let mut result = Secrets {
            secrets: HashMap::new(),
            new_secrets: HashSet::new(),
        };

        for package_dir in system.read_dir(path)? {
            let package_dir = path.join(package_dir);

            for kind_dir in system.read_dir(&package_dir)? {
                let kind_dir = package_dir.join(&kind_dir);

                for entry_dir in system.read_dir(&kind_dir)? {
                    let entry_path = kind_dir.join(&entry_dir);

                    let package = package_dir
                        .file_name()
                        .unwrap()
                        .to_str()
                        .unwrap()
                        .to_string();
                    let kind = kind_dir.file_name().unwrap().to_str().unwrap().to_string();
                    let name = entry_path
                        .file_name()
                        .unwrap()
                        .to_str()
                        .unwrap()
                        .to_string();

                    let internal_id = InternalSecretId {
                        id: SecretId::new(package, name),
                        kind,
                    };

                    println!("  secret loaded: {}", internal_id);

                    result
                        .secrets
                        .insert(internal_id, SecretData(system.file_contents(&entry_path)?));
                }
            }
        }

        Ok(result)
    }

    pub fn save<S: System>(&mut self, path: &Path, system: &mut S) -> Result<(), S::Error> {
        for item in self.new_secrets.iter() {
            let dir = path.join(&item.id.package).join(&item.kind);

            system.make_dir_all(&dir)?;
            system.chmod(&dir, 0o700)?;

            let file = dir.join(&item.id.name);
            system.put_file_contents(&file, &self.secrets.get(item).unwrap().0)?;
            system.chmod(&file, 0o600)?;
        }

        self.new_secrets.clear();

        Ok(())
    }

    pub fn get_or_create<S: Secret + std::fmt::Debug>(
        &mut self,
        id: SecretId,
    ) -> Result<S, serde_json::Error> {
        let internal_id = InternalSecretId {
            id,
            kind: S::KIND.to_owned(),
        };

        if let Some(s) = self.secrets.get(&internal_id) {
            Ok(serde_json::from_slice(&s.0)?)
        } else {
            let new_secret = S::generate_new();
            self.secrets.insert(
                internal_id.clone(),
                SecretData(serde_json::to_vec(&new_secret.clone())?),
            );
            self.new_secrets.insert(internal_id.clone());

            println!("  secret generated: {} = {:?}", internal_id, new_secret);

            Ok(new_secret)
        }
    }
}