chat over e-mail |
team@social.meissa-gmbh.de | Website & Blog
This crate is part of dda-pallet.
dda-pallet is compatible to the following versions
This crate provisions over ssh or locally users to an existing- or cloud-targets. One shoot provisioning is supported but also continuous configuration application is possible.
This crate installs and configures software on your virtual machine. You can provision pre-created virtual machines (see paragraph "Prepare vm" below) or cloud instances.
curl -L -o dda-user.jar https://github.com/DomainDrivenArchitecture/dda-user-crate/releases/download/1.0.4/dda-user-crate-1.0.4-standalone.jar
)user.edn
(Domain-Schema for your desktop) and target.edn
(Schema for Targets to be provisioned) according to the reference and our example configurations. Please create them in the same folder where you've saved the jar-file. For more information about these files refer to the corresponding information below.java -jar dda-user.jar --targets targets.edn user.edn
If you want to install users on your localhost you don't need a target config.
java -jar dda-user.jar user.edn
The configuration consists of two files defining both WHERE to install the software and WHAT to install.
targets.edn
: describes on which target system(s) the software will be installeduser.edn
: describes which software/packages will be installedYou can download examples of these configuration files from https://github.com/DomainDrivenArchitecture/dda-user-crate/blob/master/targets.edn and https://github.com/DomainDrivenArchitecture/dda-user-crate/blob/master/user.edn respectively.
Example content of the file, targets.edn
:
{:existing [{:node-name "target1" ; semantic name (keep the default or use a name that suits you)
:node-ip "192.168.56.104"}] ; the ip4 address of the machine to be provisioned
{:node-name "target2" ; semantic name (keep the default or use a name that suits you)
:node-ip "192.168.56.105"}] ; the ip4 address of the machine to be provisioned
:provisioning-user {:login "initial" ; user on the target machine, must have sudo rights
:password {:plain "secure1234"}}} ; password can be ommited, if a ssh key is authorized
Example content of the file, user.edn
:
{:test-user1 ; the user-name, root also works.
{:clear-password {:plain "xxx"} ; the users password
:ssh-authorized-keys [{:plain "ssh-rsa AAAA...LL comment"}] ; the authorized ssh keys containig "ssh-rsa" "the key" "a comment"
:ssh-key {:public-key {:plain "ssh-rsa AAAA...LL comment"} ; ssh public KEY
:private-key {:plain "SOME_PRIVATE_SSH_KEY"}}}} ; ssh privarte key
The user config defines the software/packages and user credentials of the newly created user to be installed.
In case of problems you may want to have a look at the log-file:
less logs/pallet.log
Some details about the architecture: We provide two levels of API. domain is a high-level API with many build in conventions. If this conventions don't fit your needs, you can use our low-level infra API and realize your own conventions.
The schema for the targets config is:
(def ExistingNode
"Represents a target node with ip and its name."
{:node-name s/Str ; semantic name (keep the default or use a name that suits you)
:node-ip s/Str}) ; the ip4 address of the machine to be provisioned
(def ExistingNodes
"A sequence of ExistingNodes."
{s/Keyword [ExistingNode]})
(def ProvisioningUser
"User used for provisioning."
{:login s/Str ; user on the target machine, must have sudo rights
(s/optional-key :password) secret/Secret}) ; password can be ommited, if a ssh key is authorized
(def Targets
"Targets to be used during provisioning."
{:existing [ExistingNode] ; one ore more target nodes.
(s/optional-key :provisioning-user) ProvisioningUser}) ; user can be ommited to execute on localhost with current user.
The "targets.edn" uses this schema.
The schema for the user configuration is:
(def Secret
(either
{:plain Str} ; as plain text
{:password-store-single Str} ; as password store key wo linebreaks & whitespaces
{:password-store-record ; as password store entry containing login (record :login)
{:path Str, ; and password (no field or :password)
:element (enum :password :login)}}
{:password-store-multi Str} ; as password store key with linebreaks
{:pallet-secret {:key-id Str,
:service-path [Keyword],
:record-element (enum :secret :account)}})
(def GpgKey {:public-key secret/Secret ; the gpg public key - has to be a valid gpg key.
(s/optional-key :passphrase) secret/Secret ; gpg keys passphrase
(s/optional-key :private-key) secret/Secret}) ; the gpg private key - has to be a valid gpg key.
(def Gpg
{(s/optional-key :gpg) {:trusted-key GpgKey}}) ; at the moment only a ultimately trusted key can be configured.
(def SshSimpleKeyPair
{:public-key secret/Secret ; public key in format "ssh-rsa the-key the-comment"
:private-key secret/Secret}) ; ssh private key
(def SshAuthorizedKeys [secret/Secret]) ; a sequence of authorized keys.
(def Ssh
{(s/optional-key :ssh-authorized-keys) [secret/Secret]
(s/optional-key :ssh-key) SshSimpleKeyPair})
(def Settings {(s/optional-key :settings)
(hash-set (s/enum :sudo :bashrc-d))}) ; sudo means user is part of sudoers group
; bashrc-d will create a basrc.d wich contents are executed on bash start.
(def User
(s/either
(merge {:hashed-password secret/Secret} ; hashed passwords are written directly to /etc/shadow
Gpg
Ssh
Settings)
(merge {:clear-password secret/Secret} ; clear passwords are hashed before writing them to /etc/shadow
Gpg
Ssh
Settings)))
The Infra configuration is a configuration on the infrastructure level of a crate. It contains the complete configuration options that are possible with the crate functions.
For installation & configuration with the dda-user-crate the schema is:
(def GpgKey {:public-key s/Str
(s/optional-key :passphrase) s/Str
(s/optional-key :private-key) s/Str})
(def Gpg
{(s/optional-key :gpg) {:trusted-key GpgKey}})
(def PublicSshKey
{:type s/Str
:public-key s/Str
:comment s/Str})
(def PrivateSshKey s/Str)
(def SshKeyPair
{:public-key PublicSshKey
:private-key PrivateSshKey})
(def Ssh
{(s/optional-key :ssh-authorized-keys) [ssh-key/PublicSshKey]
(s/optional-key :ssh-key) ssh-key/SshKeyPair})
(def Settings {(s/optional-key :settings)
(hash-set (s/enum :sudo :bashrc-d))})
(def User
(s/either
(merge {:hashed-password s/Str}
Gpg Ssh Settings)
(merge {:clear-password s/Str}
Gpg Ssh Settings)))
(def UserCrateConfig
{s/Keyword User})
Copyright © 2015, 2016, 2017, 2018 meissa GmbH Licensed under the Apache License, Version 2.0 (the "License") Pls. find licenses of our subcomponents here
Can you improve this documentation? These fine people already did:
Michael Jerger, jem, Jan Krebs & M.JergerEdit on GitHub
cljdoc is a website building & hosting documentation for Clojure/Script libraries
× close