36 lines
1.0 KiB
Bash
Executable File
36 lines
1.0 KiB
Bash
Executable File
#!/bin/sh
|
|
|
|
: "${HOSTNAME:=$(hostname -f || uname -n)}"
|
|
: "${DESTDIR=/host}"
|
|
: "${KEYSERV_URL:=https://keyserv.pyrocufflink.blue}"
|
|
: "${SSH_CERT:=${DESTDIR}/etc/ssh/ssh_host_ed25519_key-cert.pub}"
|
|
: "${SSH_KEY:=${SSH_CERT%-cert.pub}}"
|
|
: "${GIT_URL:=https://git.pyrocufflink.net/infra/cfg.git}"
|
|
: "${GIT_BRANCH:=master}"
|
|
|
|
printf 'Applying configuration policy for %s ...\n' "${HOSTNAME}"
|
|
|
|
cd "$(mktemp -d)" || exit
|
|
|
|
git clone --depth 1 "${GIT_URL}" -b "${GIT_BRANCH}" . || exit
|
|
|
|
if [ -f host/"${HOSTNAME}".pre.sh ]; then
|
|
. host/"${HOSTNAME}".pre.sh
|
|
fi
|
|
|
|
curl -fsSL \
|
|
"${KEYSERV_URL}"/keys \
|
|
-H "Authorization: $(cat "${SSH_CERT}")" \
|
|
-o keys.age
|
|
age -d -i "${SSH_KEY}" -o keys.txt keys.age
|
|
|
|
if [ -f host/"${HOSTNAME}".k ] && [ -f host/"${HOSTNAME}".yaml ]; then
|
|
kcl run host/"${HOSTNAME}".k -o instructions.yaml || exit
|
|
kcl run -Y host/"${HOSTNAME}".yaml -o values.yaml || exit
|
|
tmpl instructions.yaml values.yaml -d "${DESTDIR}" || exit
|
|
fi
|
|
|
|
if [ -f host/"${HOSTNAME}".post.sh ]; then
|
|
. host/"${HOSTNAME}".post.sh
|
|
fi
|