Oskar Kapala
931fd46e62
DRY_RUN now uses 1/0 instead of "true"/"false" across all onboard scripts.
common.sh: add run() — wraps mutations; prints "[dry-run] would: ..." when
DRY_RUN=1. Exported via `export -f run` so child bash processes inherit it.
onboard.sh: remove the `--dry-run → dryrun "Would execute" → continue` bypass.
Steps now always execute; DRY_RUN=1 is exported so each step's own run()
calls handle simulation. The orchestrator no longer needs to know step internals.
remote.sh: update DRY_RUN checks to [ "${DRY_RUN:-0}" = 1 ] for consistency.
00-access.sh: remove all if/else DRY_RUN blocks; replace with:
- Mutations (ssh-copy-id, curl install, tailscale up) wrapped in run()
- Probes (SSH BatchMode test, command -v, _ts_state) run unconditionally
so dry-run reports real current state ("key present → skip" vs "would: ...")
- Stage 3 verify runs always; SSH failure is die in live mode, warn in
dry-run (Tailscale not yet joined is expected on a fresh node)
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
78 lines
3.7 KiB
Bash
78 lines
3.7 KiB
Bash
#!/usr/bin/env bash
|
|
# scripts/onboard/lib/common.sh — shared helpers for the onboarding tool
|
|
|
|
set -euo pipefail
|
|
|
|
# ── colour codes (disabled when not a tty) ──────────────────────────────────
|
|
if [[ -t 1 ]]; then
|
|
_C_RESET='\033[0m'
|
|
_C_GREEN='\033[0;32m'
|
|
_C_YELLOW='\033[1;33m'
|
|
_C_RED='\033[0;31m'
|
|
_C_CYAN='\033[0;36m'
|
|
_C_BOLD='\033[1m'
|
|
else
|
|
_C_RESET='' _C_GREEN='' _C_YELLOW='' _C_RED='' _C_CYAN='' _C_BOLD=''
|
|
fi
|
|
|
|
# ── logging ──────────────────────────────────────────────────────────────────
|
|
log() { echo -e "${_C_GREEN}[onboard]${_C_RESET} $(date +'%H:%M:%S') ${*}"; }
|
|
warn() { echo -e "${_C_YELLOW}[WARN]${_C_RESET} $(date +'%H:%M:%S') ${*}" >&2; }
|
|
die() { echo -e "${_C_RED}[ERROR]${_C_RESET} $(date +'%H:%M:%S') ${*}" >&2; exit 1; }
|
|
step() { echo -e "${_C_CYAN}${_C_BOLD}==> ${*}${_C_RESET}"; }
|
|
dryrun() { echo -e "${_C_YELLOW}[dry-run]${_C_RESET} ${*}"; }
|
|
|
|
# ── command detection ─────────────────────────────────────────────────────────
|
|
have_cmd() { command -v "$1" >/dev/null 2>&1; }
|
|
|
|
# ── dry-run execution wrapper ─────────────────────────────────────────────────
|
|
# run CMD [ARGS…] — executes CMD in live mode; prints intent in dry-run.
|
|
# Wrap MUTATIONS with this. Read-only probes (SSH BatchMode tests, status
|
|
# queries, command -v checks) must run unconditionally — never wrap them.
|
|
run() {
|
|
if [ "${DRY_RUN:-0}" = 1 ]; then
|
|
echo "[dry-run] would: $*"
|
|
else
|
|
"$@"
|
|
fi
|
|
}
|
|
export -f run
|
|
|
|
# ── file helpers ──────────────────────────────────────────────────────────────
|
|
# ensure_line FILE LINE — appends LINE to FILE if it is not already present (idempotent)
|
|
ensure_line() {
|
|
local file="$1" line="$2"
|
|
[[ -f "$file" ]] || touch "$file"
|
|
grep -qxF "$line" "$file" || echo "$line" >> "$file"
|
|
}
|
|
|
|
# ── node.yaml parsing ─────────────────────────────────────────────────────────
|
|
# require_node_yaml NODE — sets NODE_YAML; exits if not found
|
|
require_node_yaml() {
|
|
local node="$1"
|
|
NODE_YAML="${REPO_ROOT}/hosts/${node,,}/node.yaml"
|
|
[[ -f "$NODE_YAML" ]] || die "node.yaml not found: $NODE_YAML"
|
|
export NODE_YAML
|
|
}
|
|
|
|
# yaml_get NODE_YAML KEY — read a scalar value from a YAML file
|
|
# Uses yq when available; falls back to grep/sed for simple key: value pairs.
|
|
# Supports dot-separated paths (e.g. tailscale.hostname) only in yq mode;
|
|
# the grep fallback handles only the last path component.
|
|
yaml_get() {
|
|
local file="$1" key="$2"
|
|
if have_cmd yq; then
|
|
yq -r ".${key} // empty" "$file" 2>/dev/null
|
|
else
|
|
# fallback: extract last segment of key, match " key: value"
|
|
local leaf="${key##*.}"
|
|
grep -E "^\s*${leaf}:" "$file" | head -1 | sed 's/.*: *//' | tr -d '"' | tr -d "'"
|
|
fi
|
|
}
|
|
|
|
# ── git wrapper ────────────────────────────────────────────────────────────────
|
|
# All git calls from onboarding scripts must go through this so --no-pager is
|
|
# always set and there is no interactive output.
|
|
git() { command git --no-pager "$@"; }
|
|
export -f git
|