teamy-mft 0.7.1

TeamDman's Master File Table CLI and library for NTFS.
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107

use crate::machine::config::DEFAULT_SERVICE_NAME;
use crate::machine::config::MachineConfig;
use crate::machine::config::machine_config_path;
use crate::machine::config::machine_root_dir;
use crate::machine::config::save_machine_config;
use crate::machine::security::allow_machine_config_reads;
use crate::machine::security::current_user_sid_string;
use crate::machine::security::restrict_path_to_owner;
use crate::machine::service::WindowsServiceState;
use crate::machine::service::install_windows_service;
use crate::machine::service::query_service_state;
use crate::machine::service::uninstall_windows_service;
use crate::windows_utils::elevation::ensure_elevated;
use arbitrary::Arbitrary;
use facet::Facet;
use figue::{self as args};
use tracing::info;

#[derive(Facet, Arbitrary, PartialEq, Debug, Default)]
pub struct ServiceInstallArgs {
    /// Machine-wide cache directory (defaults to `ProgramData`)
    #[facet(args::named)]
    pub sync_dir: Option<String>,

    /// Reinstall by removing any existing service registration first
    #[facet(args::named, default)]
    pub force: bool,
}

impl ServiceInstallArgs {
    /// # Errors
    ///
    /// Returns an error if elevation, service registration, or machine config setup fails.
    pub fn invoke(self) -> eyre::Result<()> {
        let config = install_machine_config(self.sync_dir)?;
        install_machine_daemon_service(&config, self.force)
    }
}

/// # Errors
///
/// Returns an error if elevation, directory creation, ACL changes, or machine config setup fails.
pub fn install_machine_config(sync_dir: Option<String>) -> eyre::Result<MachineConfig> {
    ensure_elevated()?;
    let owner_sid = current_user_sid_string()?;
    let sync_dir = sync_dir.map(resolve_sync_dir).transpose()?;
    let config = MachineConfig::new(owner_sid.clone(), sync_dir);
    let machine_root = machine_root_dir();
    std::fs::create_dir_all(&machine_root)?;
    std::fs::create_dir_all(&config.sync_dir)?;
    restrict_path_to_owner(&machine_root, &owner_sid)?;
    restrict_path_to_owner(&config.sync_dir, &owner_sid)?;
    save_machine_config(&config)?;
    allow_machine_config_reads(&machine_root, &machine_config_path())?;
    Ok(config)
}

/// # Errors
///
/// Returns an error if elevation, service registration, or development-target validation fails.
pub fn install_machine_daemon_service(config: &MachineConfig, force: bool) -> eyre::Result<()> {
    match query_service_state(DEFAULT_SERVICE_NAME)? {
        WindowsServiceState::Missing => {}
        _ if force => {
            ensure_elevated()?;
            let current_exe = std::env::current_exe()?;
            reject_development_target_exe(&current_exe)?;
            uninstall_windows_service(&config.service_name)?;
        }
        _ => {
            eyre::bail!(
                "Service {} is already installed. Re-run with --force or run `teamy-mft service uninstall` first.",
                DEFAULT_SERVICE_NAME
            );
        }
    }

    let current_exe = std::env::current_exe()?;
    reject_development_target_exe(&current_exe)?;
    install_windows_service(&current_exe, config)?;
    info!("Installed machine daemon at {}", config.sync_dir.display());
    println!(
        "Installed machine daemon cache at {}",
        config.sync_dir.display()
    );
    println!("Run `teamy-mft sync` to publish initial machine-managed snapshots.");
    Ok(())
}

fn resolve_sync_dir(path: String) -> eyre::Result<std::path::PathBuf> {
    let path = std::path::PathBuf::from(path);
    if path.is_absolute() {
        return Ok(path);
    }
    Ok(std::env::current_dir()?.join(path))
}

fn reject_development_target_exe(path: &std::path::Path) -> eyre::Result<()> {
    if crate::machine::service::is_development_target_exe(path) {
        eyre::bail!(
            "Refusing to install the machine service from a Cargo build output path: {}. \
Build and invoke the real binary instead, for example via the repo's install.ps1 workflow.",
            path.display()
        );
    }
    Ok(())
}