From: Matt Turner <mattst88@gentoo.org>
To: gentoo-catalyst@lists.gentoo.org
Cc: Patrice Clement <monsieurp@gentoo.org>
Subject: [gentoo-catalyst] [PATCH 1/3] catalyst: support 3 new options
Date: Sun, 27 Mar 2022 16:37:10 -0700 [thread overview]
Message-ID: <20220327233712.1282001-1-mattst88@gentoo.org> (raw)
From: Patrice Clement <monsieurp@gentoo.org>
* stage4/groups: create a a list of groups.
* stage4/users: create a list of users. users can also be added to
groups using the "foo.bar=wheel,audio,baz" format.
* stage4/ssh_public_keys: copy an SSH public key into the stage4 user's home
(.ssh/authorized_keys) and set the file permission to 0644.
Bug: https://bugs.gentoo.org/236905
Signed-off-by: Patrice Clement <monsieurp@gentoo.org>
---
catalyst/base/stagebase.py | 70 ++++++++++++++++++++++++++++++++++++++
1 file changed, 70 insertions(+)
diff --git a/catalyst/base/stagebase.py b/catalyst/base/stagebase.py
index de1e30ef..76feb5f0 100644
--- a/catalyst/base/stagebase.py
+++ b/catalyst/base/stagebase.py
@@ -201,6 +201,9 @@ class StageBase(TargetBase, ClearBase, GenBase):
self.set_packages()
self.set_rm()
self.set_linuxrc()
+ self.set_groups()
+ self.set_users()
+ self.set_ssh_public_keys()
self.set_busybox_config()
self.set_overlay()
self.set_repos()
@@ -583,6 +586,39 @@ class StageBase(TargetBase, ClearBase, GenBase):
self.settings[self.settings["spec_prefix"] + "/linuxrc"]
del self.settings[self.settings["spec_prefix"] + "/linuxrc"]
+ def set_groups(self):
+ groups = self.settings["spec_prefix"] + "/groups"
+ if groups in self.settings:
+ if isinstance(self.settings[groups], str):
+ self.settings["groups"] = self.settings[groups].split(",")
+ self.settings["groups"] = self.settings[groups]
+ del self.settings[groups]
+ else:
+ self.settings["groups"] = []
+ log.info('groups to create: %s' % self.settings["groups"])
+
+ def set_users(self):
+ users = self.settings["spec_prefix"] + "/users"
+ if users in self.settings:
+ if isinstance(self.settings[users], str):
+ self.settings["users"] = self.settings[users].split(",")
+ self.settings["users"] = self.settings[users]
+ del self.settings[users]
+ else:
+ self.settings["users"] = []
+ log.info('users to create: %s' % self.settings["users"])
+
+ def set_ssh_public_keys(self):
+ ssh_public_keys = self.settings["spec_prefix"] + "/ssh_public_keys"
+ if ssh_public_keys in self.settings:
+ if isinstance(self.settings[ssh_public_keys], str):
+ self.settings["ssh_public_keys"] = self.settings[ssh_public_keys].split(",")
+ self.settings["ssh_public_keys"] = self.settings[ssh_public_keys]
+ del self.settings[ssh_public_keys]
+ else:
+ self.settings["ssh_public_keys"] = []
+ log.info('ssh public keys to copy: %s' % self.settings["ssh_public_keys"])
+
def set_busybox_config(self):
if self.settings["spec_prefix"] + "/busybox_config" in self.settings:
if isinstance(self.settings[self.settings['spec_prefix'] + '/busybox_config'], str):
@@ -894,6 +930,40 @@ class StageBase(TargetBase, ClearBase, GenBase):
cmd(['rsync', '-a', x + '/', self.settings['stage_path']],
env=self.env)
+ def groups(self):
+ for x in self.settings["groups"].split():
+ log.notice("Creating group: '%s'", x)
+ cmd(["groupadd", "-R", self.settings['chroot_path'], x], env=self.env)
+
+ def users(self):
+ for x in self.settings["users"]:
+ usr, grp = '', ''
+ try:
+ usr, grp = x.split("=")
+ except ValueError:
+ usr = x
+ log.debug("users: '=' separator not found on line " + x)
+ log.debug("users: missing separator means no groups found")
+ uacmd = ["useradd", "-R", self.settings['chroot_path'], "-m", x]
+ if grp != '':
+ uacmd = ["useradd", "-R", self.settings['chroot_path'], "-m", "-G", grp, usr]
+ log.notice("Creating user: '%s'", f"{usr}={grp}")
+ cmd(uacmd, env=self.env)
+
+ def ssh_public_keys(self):
+ for x in self.settings["ssh_public_keys"]:
+ usr, pub_key_src = '', ''
+ try:
+ usr, pub_key_src = x.split("=")
+ except ValueError:
+ raise CatalystError(f"ssh_public_keys: '=' separator not found on line {x}")
+ log.notice("Copying SSH public key for user: '%s'", usr)
+ pub_key_dest = self.settings['chroot_path'] + f"/home/{usr}/.ssh/authorized_keys"
+ cpcmd = ["cp", "-av", pub_key_src, pub_key_dest]
+ cmd(cpcmd, env=self.env)
+ chcmd = ["chmod", "0644", pub_key_dest]
+ cmd(chcmd, env=self.env)
+
def bind(self):
for x in [x for x in self.mount if self.mount[x]['enable']]:
if str(self.mount[x]['source']) == 'config':
--
2.34.1
next reply other threads:[~2022-03-27 23:37 UTC|newest]
Thread overview: 16+ messages / expand[flat|nested] mbox.gz Atom feed top
2022-03-27 23:37 Matt Turner [this message]
2022-03-27 23:37 ` [gentoo-catalyst] [PATCH 2/3] catalyst: add new options to stage4 step list Matt Turner
2022-03-27 23:37 ` [gentoo-catalyst] [PATCH 3/3] example: document new options Matt Turner
2022-04-19 14:17 ` [gentoo-catalyst] [PATCH 1/3] catalyst: support 3 " Daniel Cordero
2022-04-20 23:25 ` Matt Turner
2022-04-19 15:23 ` Daniel Cordero
2022-04-20 23:26 ` Matt Turner
2022-04-21 7:08 ` [gentoo-catalyst] [PATCH 1/4] stage4: fix handling of groups, users and keys Daniel Cordero
2022-04-21 7:08 ` [gentoo-catalyst] [PATCH 2/4] stage4/groups: don't run split on a list Daniel Cordero
2022-04-21 7:08 ` [gentoo-catalyst] [PATCH 3/4] stage4/users: don't split a single entry Daniel Cordero
2022-04-21 7:08 ` [gentoo-catalyst] [PATCH 4/4] stage4/groups: improve log message Daniel Cordero
2022-04-21 21:01 ` Daniel Cordero
2022-05-09 11:20 ` [gentoo-catalyst] [PATCH v2 4/4] stage4/users: " Daniel Cordero
2022-05-09 17:06 ` [gentoo-catalyst] [PATCH 1/4] stage4: fix handling of groups, users and keys Matt Turner
2022-05-12 10:09 ` Daniel Cordero
2022-05-13 17:45 ` Matt Turner
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20220327233712.1282001-1-mattst88@gentoo.org \
--to=mattst88@gentoo.org \
--cc=gentoo-catalyst@lists.gentoo.org \
--cc=monsieurp@gentoo.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox