clan-core

Author	SHA1	Message	Date
lassulus	6b004fca6f	machines.Machine: refactor flake_dir -> flake; use Machine class in vm	2024-01-24 15:49:12 +01:00
lassulus	aee0ee4d5e	move secret stores into clan_cli codebase	2024-01-24 15:49:12 +01:00
lassulus	09887037f5	WIP: clan-cli secrets: add secret_store as python class	2024-01-23 15:04:40 +01:00
Qubasa	1a6983e031	cmd.py refactor part 6	2024-01-12 17:02:56 +01:00
Qubasa	ca5cc389ac	cmd.py refactor part 5 All checks were successful checks-impure / test (pull_request) Successful in 1m29s Details checks / test (pull_request) Successful in 2m49s Details	2024-01-12 16:52:34 +01:00
Qubasa	0941367bb3	cmd.py: Fix deadlock because of incorrect select usage All checks were successful checks-impure / test (pull_request) Successful in 1m20s Details checks / test (pull_request) Successful in 2m53s Details	2024-01-11 23:03:14 +01:00
Qubasa	d1ca0eaf80	Identified deadlocking funciton All checks were successful checks-impure / test (pull_request) Successful in 1m22s Details checks / test (pull_request) Successful in 2m54s Details	2024-01-11 22:28:35 +01:00
Qubasa	0133ccd5f7	Fixed missing log.BOTH and error_msg at prev refactors	2024-01-11 21:11:49 +01:00
Qubasa	2ae439ec52	cmd.py refactor part 4	2024-01-11 21:11:49 +01:00
Jörg Thalheim	1496f45fe2	prefix nixpkgs# explicitly in nix_shell All checks were successful checks-impure / test (pull_request) Successful in 1m27s Details checks / test (pull_request) Successful in 2m3s Details This makes the function usage less confusing (you can now tell from the call side what are flags and what is passed to nix-shell) and allows to use different flakes to download packages.	2023-12-08 15:14:14 +01:00
Jörg Thalheim	373fc83160	add option to extend path for generator All checks were successful checks-impure / test (pull_request) Successful in 1m9s Details checks / test (pull_request) Successful in 2m6s Details	2023-11-30 14:15:40 +01:00
Jörg Thalheim	d0362bb757	error if age key cannot be decoded	2023-11-30 10:57:58 +01:00
Jörg Thalheim	f1b223d0a1	modernisation for python 3.11	2023-11-29 13:29:45 +00:00
Jörg Thalheim	26e3e3872c	enable more linting	2023-11-29 13:29:45 +00:00
Jörg Thalheim	f3b3aba6c5	run_upload_secrets: don't swallow stdout output All checks were successful checks-impure / test (pull_request) Successful in 1m13s Details checks / test (pull_request) Successful in 2m12s Details	2023-11-29 11:38:01 +01:00
Jörg Thalheim	179d1ed2c6	add sops command to sync keys with secrets	2023-11-29 11:34:19 +01:00
Jörg Thalheim	978d9efd7e	secrets/generate-private-key: just create parent opportunistically All checks were successful checks-impure / test (pull_request) Successful in 1m30s Details checks / test (pull_request) Successful in 2m2s Details	2023-11-16 13:19:12 +01:00
kenji	12930b4057	clan_cli: create key directory All checks were successful checks / test (pull_request) Successful in 1m3s Details checks-impure / test (pull_request) Successful in 1m50s Details	2023-11-15 23:15:12 +01:00
Jörg Thalheim	6cb41cb006	also regenerate secrets if a fact is missing All checks were successful checks-impure / test (pull_request) Successful in 1m36s Details checks / test (pull_request) Successful in 2m48s Details	2023-11-14 17:07:58 +01:00
lassulus	7b3d3e20b4	clan-cli secrets: flake_name -> flake_dir All checks were successful checks / test (pull_request) Successful in 46s Details checks-impure / test (pull_request) Successful in 1m26s Details	2023-11-05 16:58:48 +01:00
Qubasa	c1b4fa6d55	nix fmt	2023-10-27 19:21:50 +02:00
Qubasa	3581e0c9a8	Fixing a multitude of tests	2023-10-27 19:21:50 +02:00
Qubasa	d1c35301e3	Added repro_env_break debugging command. This spawn a terminal inside the temp home folder with the same environment as the python test	2023-10-27 19:20:17 +02:00
Qubasa	d02acbe04b	nix fmt	2023-10-27 19:19:45 +02:00
Qubasa	9f464dd14e	Added ipdb as breakpoint console. Improved logging.	2023-10-27 19:19:45 +02:00
Qubasa	8482bc79f6	Secrets tests passing. nix fmt doesn't complain	2023-10-27 19:18:45 +02:00
Qubasa	8cc1c2c4bd	Fixed cyclic dependencie AND swapped pytest-parallel for pytest-xdist to fix deadlock in tests	2023-10-27 19:18:45 +02:00
Qubasa	2ca54afe7f	Added new type FlakeName	2023-10-27 19:18:45 +02:00
Qubasa	32e60f5adc	Added flake_name:str argument everywhere, nix fmt doesn't complain anymore	2023-10-27 19:15:40 +02:00
Qubasa	fdcd7ad1d9	Updated to main	2023-10-27 19:15:11 +02:00
DavHau	dbf80595fd	zerotier: fix: find free port without collissions All checks were successful checks-impure / test (pull_request) Successful in 55s Details checks / test (pull_request) Successful in 2m0s Details	2023-10-05 17:03:01 +02:00
lassulus	3fb36b3ac1	secrets upload: skip on exit 23, cleanup All checks were successful checks-impure / test (pull_request) Successful in 33s Details checks / test (pull_request) Successful in 1m32s Details	2023-10-04 21:29:19 +02:00
lassulus	b25af9f0f4	clan_cli: refactor secrets code into Machine class All checks were successful checks-impure / test (pull_request) Successful in 19s Details checks / test (pull_request) Successful in 1m27s Details	2023-10-04 16:41:16 +02:00
lassulus	ffb7c63640	clan-cli: add machines install	2023-10-04 16:34:37 +02:00
Jörg Thalheim	b2ef8bf1a3	also test that updating a group works	2023-10-03 16:15:36 +00:00
lassulus	6f7109dab6	clan_cli.secrets.groups: update keys if members are added/removed	2023-10-03 16:15:36 +00:00
Qubasa	dbe289f702	nix fmt All checks were successful checks-impure / test (pull_request) Successful in 13s Details checks / test (pull_request) Successful in 1m22s Details	2023-10-03 15:22:41 +02:00
Qubasa	8fa241a36b	Fixed upload_secrets_test Some checks failed checks-impure / test (pull_request) Successful in 13s Details checks / test (pull_request) Failing after 1m23s Details	2023-10-03 15:14:50 +02:00
Qubasa	7dde66c0df	Fixed upload_secrets_test Some checks failed checks-impure / test (pull_request) Failing after 12s Details checks / test (pull_request) Failing after 1m22s Details	2023-10-03 15:10:22 +02:00
Qubasa	be9d3d43bf	Fixing PYTHONPATH in secrets/generate test Some checks failed checks-impure / test (pull_request) Failing after 12s Details checks / test (pull_request) Failing after 1m23s Details	2023-10-03 15:01:13 +02:00
Qubasa	da72ec18ad	API: Added test for inspect_flake	2023-10-03 13:19:20 +02:00
lassulus	89b7ffce6c	clan-cli secrets upload: secrets are populated into tmpdir	2023-09-29 20:05:35 +02:00
lassulus	7ca9c49163	restore clanInternals with valid nixos config	2023-09-29 19:39:35 +02:00
Jörg Thalheim	0c91bb90ab	also encrypt secret for the machine itself	2023-09-28 17:51:37 +02:00
Jörg Thalheim	16b33eb0a8	add toplevel machines-json that can deploy all hosts	2023-09-28 15:23:25 +02:00
Jörg Thalheim	756820e4ca	clanInternals.machines: invert system and machine name All checks were successful checks-impure / test (pull_request) Successful in 8s Details checks / test (pull_request) Successful in 24s Details	2023-09-27 17:26:44 +02:00
DavHau	9825c179a8	impure-tests: migrate bash to pytest and fix stuff All checks were successful checks-impure / test (pull_request) Successful in 7s Details checks / test (pull_request) Successful in 23s Details	2023-09-22 18:32:28 +02:00
lassulus	17520e2553	fix impure tests	2023-09-21 18:29:18 +02:00
lassulus	aeed648bd0	secrets: use clanInternal for crosscompiling, move sops generators to new file	2023-09-21 17:25:32 +02:00
Jörg Thalheim	0314132a1a	rewrite sops backend for secret generation and add tests	2023-09-21 17:22:20 +02:00
Jörg Thalheim	ead5c6e6a8	secrets: add has_machine and has_secret function	2023-09-21 17:22:20 +02:00
Jörg Thalheim	486ff4e7f4	age: generate private and public key in one go	2023-09-21 17:22:20 +02:00
lassulus	8d29d0e69c	clan-cli: get deploymentAddress from clan.networking	2023-09-15 12:17:07 +00:00
lassulus	0132abc547	secrets: use CLAN_DIR instead of clanCore.clanDir for fact storage	2023-09-15 12:17:07 +00:00
lassulus	c5786614bf	clan-cli secrets: deploy -> upload	2023-09-15 12:17:07 +00:00
lassulus	23c979f8db	secrets deploy/generate: use nix_build_machine	2023-09-15 12:17:07 +00:00
lassulus	ac13c5b76b	clan-cli secrets: add deploy subcommand	2023-09-15 12:17:07 +00:00
lassulus	798e85ee8a	clan secrets generate: use get_clan_flake_toplevel	2023-09-15 12:17:07 +00:00
Jörg Thalheim	17af763ad1	add edit flag to secret cli All checks were successful checks-impure / test (pull_request) Successful in 6s Details checks / test (pull_request) Successful in 51s Details	2023-09-13 10:52:03 +02:00
Jörg Thalheim	62e5c66867	secrets cli: hint that group/user/machine flags can be repeated All checks were successful checks-impure / test (pull_request) Successful in 6s Details checks / test (pull_request) Successful in 2m57s Details	2023-09-07 13:06:31 +02:00
Jörg Thalheim	c3ccf68007	only list valid secrets/users/machines All checks were successful checks-impure / test (pull_request) Successful in 6s Details checks / test (pull_request) Successful in 58s Details Git often leaves empty directories behind	2023-09-07 12:48:34 +02:00
Jörg Thalheim	ae3283a762	clan/secrets: fix if user/machine directory does not contain a key.json	2023-09-07 12:30:29 +02:00
Jörg Thalheim	e6762d8b3f	sops: add explicit commands to generate secrets All checks were successful checks-impure / test (pull_request) Successful in 6s Details checks / test (pull_request) Successful in 49s Details	2023-09-07 11:41:20 +02:00
Jörg Thalheim	949b72bd0b	actual implement secret rename function All checks were successful checks-impure / test (pull_request) Successful in 13s Details checks / test (pull_request) Successful in 24s Details	2023-09-03 11:03:14 +02:00
Jörg Thalheim	6c7c9b9540	secrets/sops-import: check correct secret for conflicts All checks were successful checks-impure / test (pull_request) Successful in 11s Details checks / test (pull_request) Successful in 19s Details	2023-09-03 08:43:40 +02:00
Jörg Thalheim	e079627f0f	secrets/sops-import: check for key.json to exist All checks were successful checks-impure / test (pull_request) Successful in 4s Details checks / test (pull_request) Successful in 20s Details	2023-09-03 08:37:56 +02:00
Jörg Thalheim	10e4db7c19	clan-cli: fix error message	2023-08-30 16:40:42 +02:00
DavHau	4afd9910e9	Revert "rename clanCore to clan.core" This reverts commit `fef796fa6e`.	2023-08-30 15:24:33 +02:00
Jörg Thalheim	fef796fa6e	rename clanCore to clan.core	2023-08-30 12:46:49 +00:00
Jörg Thalheim	af38408a3e	secret cli: add get command that returns the key of users/machines All checks were successful checks-impure / test (pull_request) Successful in 3s Details checks / test (pull_request) Successful in 3s Details	2023-08-30 11:30:57 +02:00
clan-bot	691d3bec41	Merge pull request 'secrets generator + zerotier module' (#188 ) from secrets-module into main All checks were successful checks-impure / test (push) Successful in 3s Details checks / test (push) Successful in 2s Details	2023-08-29 15:43:15 +00:00
lassulus	9fca1e7f43	move clanCore into nixosModules, add secrets generate command All checks were successful checks-impure / test (pull_request) Successful in 2s Details checks / test (pull_request) Successful in 2s Details	2023-08-29 16:28:50 +02:00
Jörg Thalheim	9b3bfd6950	secrets: improve error messages All checks were successful checks-impure / test (pull_request) Successful in 3s Details checks / test (pull_request) Successful in 19s Details	2023-08-29 16:20:39 +02:00
Jörg Thalheim	c5b16124ef	add machine subcommand	2023-08-24 16:58:22 +02:00
Jörg Thalheim	79c61f61c7	drop black/ruff from dependency list those are used implictly by treefmt already	2023-08-23 16:03:56 +02:00
Jörg Thalheim	63bb9395fd	automatically import secrets into nixos	2023-08-23 13:59:43 +02:00
Jörg Thalheim	c2ff6acef4	sops: pass empty manifest when decrypting All checks were successful build / test (pull_request) Successful in 28s Details	2023-08-10 12:08:17 +02:00
Jörg Thalheim	1f79a610d4	groups: add more api All checks were successful build / test (pull_request) Successful in 20s Details	2023-08-09 15:30:50 +02:00
Jörg Thalheim	e103a4186c	add api for secret groups and decrypting secrets Some checks failed build / test (pull_request) Failing after 23s Details	2023-08-09 15:17:43 +02:00
Jörg Thalheim	6c169b0bed	print nothing if secret collections are empty All checks were successful build / test (pull_request) Successful in 29s Details	2023-08-09 14:50:04 +02:00
Jörg Thalheim	c535cf78a1	add secret api for machines/users/secrets Some checks failed build / test (pull_request) Failing after 21s Details	2023-08-09 14:10:04 +02:00
Jörg Thalheim	2483e29819	users: seperate cli from library All checks were successful build / test (pull_request) Successful in 20s Details	2023-08-09 13:56:24 +02:00
Jörg Thalheim	9189c31def	improve error message if users don't exist Some checks failed build / test (pull_request) Failing after 17s Details	2023-08-09 10:33:54 +02:00
Jörg Thalheim	3d5a37ad03	check for breakpoint() function in code Some checks failed build / test (pull_request) Failing after 25s Details	2023-08-09 10:21:59 +02:00
Jörg Thalheim	68905fc233	don't add user to a secret if they already can access the secret Some checks failed build / test (pull_request) Failing after 21s Details If the user is part of a group we don't need to add them explicitly	2023-08-09 10:17:30 +02:00
Jörg Thalheim	2988532909	allow to set groups/admins/users when setting secrets All checks were successful build / test (pull_request) Successful in 20s Details	2023-08-08 19:40:35 +02:00
Jörg Thalheim	5ee620b77b	only print names when listing existing users All checks were successful build / test (pull_request) Successful in 16s Details	2023-08-08 19:07:38 +02:00
Jörg Thalheim	504adb4f6d	make error message nicer when members are not found All checks were successful build / test (pull_request) Successful in 21s Details	2023-08-08 19:05:32 +02:00
Jörg Thalheim	6f9aaef56a	add option to import sops secrets with groups,users,machines,prefixes All checks were successful build / test (pull_request) Successful in 25s Details	2023-08-08 18:46:37 +02:00
Jörg Thalheim	efa0546da5	sops: make symlinks relative All checks were successful build / test (pull_request) Successful in 21s Details	2023-08-08 17:24:40 +02:00
Jörg Thalheim	35f2d6a76e	add dummy sops manifest All checks were successful build / test (pull_request) Successful in 20s Details	2023-08-08 16:40:32 +02:00
Jörg Thalheim	d8c2df2e72	add test for import-sops command All checks were successful build / test (pull_request) Successful in 24s Details	2023-08-08 16:28:38 +02:00
Jörg Thalheim	1d1452ddd5	add import-sops command to secrets All checks were successful build / test (pull_request) Successful in 21s Details	2023-08-08 15:48:19 +02:00
Jörg Thalheim	0533948085	fix rotating keys with sops All checks were successful build / test (push) Successful in 8s Details	2023-08-08 13:44:15 +02:00
Jörg Thalheim	ae4f36ecf9	clan-cli/sops: rename add_key to write_key All checks were successful build / test (push) Successful in 12s Details	2023-08-03 14:58:51 +02:00
Jörg Thalheim	54e9d4427c	fix cirular import	2023-08-03 11:07:17 +02:00
Jörg Thalheim	dab483339a	test list/remove secret	2023-08-02 12:00:32 +00:00
Jörg Thalheim	658c76336f	add secrets integration clan-cli: also depend on age for secrets	2023-08-02 09:19:14 +00:00

1 2 3

148 Commits