Mitchell-JohnsonandClaude Fable 5.1
488d929733
- hamlab install / uninstall (internal/setup): systemd or OpenRC, elevates through sudo or doas, runs as the invoking user, sets or generates the password, names only journal groups that exist, waits for /healthz, reports an active firewalld/ufw. --purge and the data chown never touch a directory that isn't Ham Lab's alone. - install.sh: curl-able bootstrap (arch detection, SHA256SUMS, offline beside the binaries, noexec /tmp fallback). make release builds dist/ for amd64, arm64, arm (ARMv6), 386, riscv64. Every build is CGO_ENABLED=0; the native one used to link glibc. - internal/priv replaces every literal `sudo -n`: uid 0, sudo or doas. - Updates acts on dnf, zypper, pacman and apk as well as apt; dnf shows installed versions. - Services falls back to the plain systemctl table before systemd 246 and says so on hosts without systemd. Disks falls back to /sys/block without lsblk. - Listener binds with IP_FREEBIND, so a LAN address that isn't up at boot is no failure. - Self-update: the new build must pass `check` against the live config, is put in place by atomic rename, and the daemon re-execs itself (same under any supervisor). - State and config writes are fsynced; a corrupt state.json is set aside, not fatal. - Terminal shutdown no longer empties the saved list, so names come back after a restart by design rather than by winning a race. - Config default is ~/.config/hamlab; an existing ~/apps/hamlab is still found. Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
118 lines
2.9 KiB
Go
118 lines
2.9 KiB
Go
// Package config loads and saves hamlab's JSON config file.
|
|
package config
|
|
|
|
import (
|
|
"encoding/json"
|
|
"errors"
|
|
"fmt"
|
|
"os"
|
|
"path/filepath"
|
|
"sync"
|
|
"time"
|
|
|
|
"hamlab/internal/store"
|
|
)
|
|
|
|
// Token is an API token another Ham Lab (a hub) uses to manage this host. Only the
|
|
// SHA-256 of the token is kept.
|
|
type Token struct {
|
|
Name string `json:"name"`
|
|
Hash string `json:"hash"`
|
|
Created time.Time `json:"created"`
|
|
}
|
|
|
|
// Node is a remote Ham Lab this host (as hub) manages. The token is the one that
|
|
// node issued to us; the fingerprint pins its self-signed certificate.
|
|
type Node struct {
|
|
Name string `json:"name"`
|
|
URL string `json:"url"`
|
|
Fingerprint string `json:"fingerprint,omitempty"`
|
|
Token string `json:"token"`
|
|
Added time.Time `json:"added"`
|
|
}
|
|
|
|
type Config struct {
|
|
Listen string `json:"listen"`
|
|
PasswordHash string `json:"password_hash"`
|
|
TLS string `json:"tls,omitempty"` // "auto" → self-signed cert in the data dir; "" → plain HTTP
|
|
Tokens []Token `json:"tokens,omitempty"`
|
|
Nodes []Node `json:"nodes,omitempty"`
|
|
|
|
path string
|
|
mu sync.Mutex
|
|
}
|
|
|
|
// Candidates lists where config.json may live under a home directory, preferred first:
|
|
// the XDG location, then ~/apps/hamlab, which installs before v0.2 used.
|
|
func Candidates(home string) []string {
|
|
return []string{filepath.Join(home, ".config", "hamlab", "config.json"), filepath.Join(home, "apps", "hamlab", "config.json")}
|
|
}
|
|
|
|
// DefaultPath is the config used when neither -config nor $HAMLAB_CONFIG says otherwise:
|
|
// whichever candidate exists, else the preferred one.
|
|
func DefaultPath() string {
|
|
home, _ := os.UserHomeDir()
|
|
c := Candidates(home)
|
|
for _, p := range c {
|
|
if _, err := os.Stat(p); err == nil {
|
|
return p
|
|
}
|
|
}
|
|
return c[0]
|
|
}
|
|
|
|
func Default(path string) *Config {
|
|
return &Config{Listen: "127.0.0.1:8100", path: path}
|
|
}
|
|
|
|
// Load reads the config at path. A missing file yields the defaults.
|
|
func Load(path string) (*Config, error) {
|
|
c := Default(path)
|
|
b, err := os.ReadFile(path)
|
|
if errors.Is(err, os.ErrNotExist) {
|
|
return c, nil
|
|
}
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
if err := json.Unmarshal(b, c); err != nil {
|
|
return nil, fmt.Errorf("parse %s: %w", path, err)
|
|
}
|
|
return c, nil
|
|
}
|
|
|
|
func (c *Config) Path() string { return c.path }
|
|
func (c *Config) DataDir() string { return filepath.Dir(c.path) }
|
|
|
|
func (c *Config) Save() error {
|
|
c.mu.Lock()
|
|
defer c.mu.Unlock()
|
|
return c.save()
|
|
}
|
|
|
|
func (c *Config) save() error {
|
|
if err := os.MkdirAll(c.DataDir(), 0o700); err != nil {
|
|
return err
|
|
}
|
|
b, err := json.MarshalIndent(c, "", " ")
|
|
if err != nil {
|
|
return err
|
|
}
|
|
return store.WriteFileAtomic(c.path, append(b, '\n'), 0o600)
|
|
}
|
|
|
|
// Update applies fn under the lock and saves.
|
|
func (c *Config) Update(fn func(*Config)) error {
|
|
c.mu.Lock()
|
|
defer c.mu.Unlock()
|
|
fn(c)
|
|
return c.save()
|
|
}
|
|
|
|
// View reads under the lock.
|
|
func (c *Config) View(fn func(*Config)) {
|
|
c.mu.Lock()
|
|
defer c.mu.Unlock()
|
|
fn(c)
|
|
}
|