Daniel Barlow
32bf80c6fa
devout: unlink socket pathname before binding
2024-09-05 10:05:13 +01:00
Daniel Barlow
12275f6896
add more test for table=
2024-09-04 21:21:30 +01:00
Daniel Barlow
a60c2539a6
remove luaposix ref in write-fennel
2024-09-04 21:21:02 +01:00
Daniel Barlow
146a2d9ac0
fix startup race/fencepost in watch-ssh-keys
...
if it starts _after_ the outputs are populated, it should
write the first lot of outputs without waiting for a change
2024-09-04 21:19:51 +01:00
Daniel Barlow
0c0d0eed8a
make watch-ssh-keys robust against missing key
2024-09-03 22:51:29 +01:00
Daniel Barlow
699cf97206
improve tangc http error messages
2024-09-03 22:50:55 +01:00
Daniel Barlow
034d6aacc4
tangc handle non-zero exit from jwe dec
...
Sometimes it exits non-zero but decrypts the file *anyway*. It only
does this on the device and I haven't been able to reproduce on build,
so this is a workaround until we find the root cause
2024-09-01 09:57:38 +01:00
Daniel Barlow
6287b92000
fix bugs handling base64 padding
2024-08-31 22:43:25 +01:00
Daniel Barlow
d2215d3e56
tangc popen retry on short read
2024-08-31 22:18:23 +01:00
Daniel Barlow
3cf2308bee
tangc: stop printing unexpected blank lines
2024-08-31 15:29:10 +01:00
Daniel Barlow
3913989be3
provide string to perform-encryption
...
instead of letting it read stdin, which I think may have been read
by a subprocess already sometimes?
2024-08-31 15:27:54 +01:00
Daniel Barlow
43e5e6876e
improve tangc error messages
2024-08-31 15:22:26 +01:00
Daniel Barlow
7d6c80570c
refactor all writeFennelScript calls to use writeFennel directly
2024-08-30 20:57:42 +01:00
Daniel Barlow
0df2c83382
tighten perms on service state directory
2024-08-29 23:56:43 +01:00
Daniel Barlow
283c3154a7
missing file in s6-rc-up-tree test fixture
2024-08-28 21:18:54 +01:00
Daniel Barlow
34f37d60d9
missed adding this
2024-08-28 20:56:52 +01:00
Daniel Barlow
b56f121e04
fetch lua glue: handle missing content-length
2024-08-28 19:52:00 +01:00
Daniel Barlow
d5d621f310
rename http-fstree => json-to-fstree
...
it works for file urls as well, not just http
2024-08-28 16:36:49 +01:00
Daniel Barlow
da95a9fa62
tangc support encryption
2024-08-28 18:55:20 +01:00
Daniel Barlow
85071c88e7
remove argv0 from calls to jose
2024-08-28 11:16:43 +01:00
Daniel Barlow
74093b7ee3
josep! runs jose without json parsing the output
2024-08-28 08:13:50 +01:00
Daniel Barlow
41733e58d6
remove unused code, tidy string parsing
2024-08-28 07:20:07 +01:00
Daniel Barlow
9041d5d63a
add jose! fn to reduce error-checking boilerplate
2024-08-28 07:10:47 +01:00
Daniel Barlow
001ebdc601
remove unused requires
2024-08-28 06:52:04 +01:00
Daniel Barlow
1f97409474
add popen2 to anoia.fs
2024-08-28 06:49:43 +01:00
Daniel Barlow
a41839f3d1
clevis-decrypt-tang in fennel
...
needs a lot of tidying up, but works on my test file
2024-08-28 01:37:44 +01:00
Daniel Barlow
ff76d854fc
extend libfetch lua glue to other HTTP methods
2024-08-28 01:37:02 +01:00
Daniel Barlow
81a6480a4f
anoia add base64 deode
2024-08-27 22:42:03 +01:00
Daniel Barlow
83ca86fe42
keys in service output tree are strings
2024-08-25 15:59:24 +01:00
Daniel Barlow
9828b007ae
watch-ssh-keys turns secrets-service into authorized_keys files
2024-08-24 23:25:32 +01:00
Daniel Barlow
f34abc85ae
add macros param to write-fennel
2024-08-24 23:19:46 +01:00
Daniel Barlow
b475a680fb
define-tests macro, evals body only when inside fennelrepl --test
2024-08-24 22:26:25 +01:00
Daniel Barlow
43612af71a
anoia: %% is alias for string.formt
2024-08-24 13:56:54 +01:00
Daniel Barlow
5695c47496
add dig to anoia
2024-08-23 23:27:29 +01:00
Daniel Barlow
9c30b6f882
change output references from attrset to lambda
...
this is so that we can distinguish a ref from a literal parameter that
might be a attrset
2024-08-23 22:25:57 +01:00
Daniel Barlow
e835473945
patch dropbear to add -U option
2024-08-23 19:58:05 +01:00
Daniel Barlow
ff38bcacbb
improve devout error reporting
2024-08-21 23:24:13 +01:00
Daniel Barlow
4cc82e1502
liminix.types.replacable is a string or ref to an output
2024-08-21 00:16:14 +01:00
Daniel Barlow
e2c883356c
add secrets-subscriber service, make hostapd use it
2024-08-15 23:00:41 +01:00
Daniel Barlow
d79a941504
new package watch-outputs and example of its use
2024-08-14 22:58:17 +01:00
Daniel Barlow
310ac30f24
http-fstree needs to write state and .lock for anoia.svc
2024-08-14 22:39:41 +01:00
Daniel Barlow
45a7f96bd4
anoia table= compares tables
2024-08-14 22:36:28 +01:00
Daniel Barlow
79445fd962
support multi-arg assoc
2024-08-14 22:34:37 +01:00
Daniel Barlow
ff3a1905a5
pass service to `output` fn in output-template
...
instead of on command line
2024-08-12 22:53:07 +01:00
Daniel Barlow
3c353e4aff
support json quoting in output-template
2024-08-10 23:42:08 +01:00
Daniel Barlow
ba21384fde
new: output-template interpolates output values into config file
2024-08-10 23:06:47 +01:00
Daniel Barlow
2480fdef5b
set up nginx on bordervm for testing outboard secrets
2024-08-10 23:05:50 +01:00
Daniel Barlow
d760c2d27b
http-fstree downloads a json file and converts to service outputs
2024-08-08 15:35:11 +01:00
Daniel Barlow
a1ff07b063
add rxi/json lua module
2024-08-08 15:05:26 +01:00
Daniel Barlow
9550772cec
add lua binding to fetch-freebsd
2024-08-08 15:05:03 +01:00
Daniel Barlow