mirror of
https://github.com/kevinveenbirkenbach/computer-playbook.git
synced 2025-11-08 06:08:05 +00:00
Kevin Veen-Birkenbach
05d7ddc491
- Replace Bash pull-specific-host.sh with Python pull-specific-host.py (argparse, identical logic) - Update role vars and runner template to call python script - Add __init__.py files for test discovery/imports - Add unittest: tests/unit/roles/svc-bkp-rmt-2-loc/files/test_pull_specific_host.py (mocks subprocess/os/time; covers success, no types, find-fail, retry-exhaustion) - Backup provider SSH wrapper: align allowed ls path (backup-docker-to-local) - Split user role tasks: 01_core (sudoers), 02_permissions_ssh (SSH keys + wrapper), 03_permissions_folders (ownership + default ACLs + depth-limited chown/chmod) - Ensure default ACLs grant rwx to 'backup' and none to group/other; keep sudo rsync working Ref: ChatGPT discussion (2025-10-14) — https://chatgpt.com/share/68ee920a-9b98-800f-8806-ddcfe0255149
39 lines
1.1 KiB
Bash
39 lines
1.1 KiB
Bash
#!/bin/sh
|
|
|
|
# log command
|
|
if [ -n "$SSH_ORIGINAL_COMMAND" ]
|
|
then
|
|
echo "`/bin/date`: $SSH_ORIGINAL_COMMAND" | systemd-cat -t "ssh-wrapper.sh"
|
|
fi
|
|
|
|
# define executable commands
|
|
get_hashed_machine_id="sha256sum /etc/machine-id";
|
|
hashed_machine_id="$($get_hashed_machine_id | head -c 64)"
|
|
get_backup_types="find /Backups/$hashed_machine_id/ -maxdepth 1 -type d -execdir basename {} ;";
|
|
|
|
|
|
# @todo This configuration is not scalable yet. If other backup services then sys-ctl-bkp-docker-2-loc are integrated, this logic needs to be optimized
|
|
get_version_directories="ls -d /Backups/$hashed_machine_id/backup-docker-to-local/*"
|
|
last_version_directory="$($get_version_directories | tail -1)"
|
|
rsync_command="sudo rsync --server --sender -blogDtpre.iLsfxCIvu . $last_version_directory/"
|
|
|
|
# filter commands
|
|
case "$SSH_ORIGINAL_COMMAND" in
|
|
"$get_hashed_machine_id")
|
|
$get_hashed_machine_id
|
|
;;
|
|
"$get_version_directories")
|
|
$get_version_directories
|
|
;;
|
|
"$get_backup_types")
|
|
$get_backup_types
|
|
;;
|
|
"$rsync_command")
|
|
$rsync_command
|
|
;;
|
|
*)
|
|
echo "This command is not supported."
|
|
exit 1
|
|
;;
|
|
esac
|