c5c586ff71
since `.dagger` directories have a special meaning now because of gitflow, it's better not to have a `~/.dagger` since it's not a workspace and it confuses dagger (e.g. `dagger new` from $HOME). We don't store state there anymore, just keys and the last version check, so it's okay to be in ~/.config IMO Looking at my system, in ~/.config there's `gcloud`, `gatsby`, `gh`, `yarn`, and others so it seems like a pretty common location. Signed-off-by: Andrea Luzzardi <aluzzardi@gmail.com>
119 lines
2.6 KiB
Go
119 lines
2.6 KiB
Go
package keychain
|
|
|
|
import (
|
|
"context"
|
|
"errors"
|
|
"fmt"
|
|
"os"
|
|
"path/filepath"
|
|
"time"
|
|
|
|
"filippo.io/age"
|
|
"github.com/mitchellh/go-homedir"
|
|
"github.com/rs/zerolog/log"
|
|
)
|
|
|
|
func Path() (string, error) {
|
|
keysFile, err := homedir.Expand("~/.config/dagger/keys.txt")
|
|
if err != nil {
|
|
return "", err
|
|
}
|
|
|
|
// if the keys file doesn't exist, attempt a migration
|
|
if _, err := os.Stat(keysFile); errors.Is(err, os.ErrNotExist) {
|
|
migrateKeys(keysFile)
|
|
}
|
|
|
|
return keysFile, nil
|
|
}
|
|
|
|
// migrateKeys attempts a migration from `~/.dagger/keys.txt` to `~/.config/dagger/keys.txt`
|
|
func migrateKeys(keysFile string) error {
|
|
oldKeysFile, err := homedir.Expand("~/.dagger/keys.txt")
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
if _, err := os.Stat(oldKeysFile); err != nil {
|
|
return err
|
|
}
|
|
|
|
if err := os.MkdirAll(filepath.Dir(keysFile), 0700); err != nil {
|
|
return err
|
|
}
|
|
|
|
return os.Rename(oldKeysFile, keysFile)
|
|
}
|
|
|
|
func Default(ctx context.Context) (string, error) {
|
|
keys, err := List(ctx)
|
|
if err != nil {
|
|
if errors.Is(err, os.ErrNotExist) {
|
|
return Generate(ctx)
|
|
}
|
|
return "", err
|
|
}
|
|
if len(keys) == 0 {
|
|
return "", errors.New("no identities found in the keys file")
|
|
}
|
|
|
|
return keys[0].Recipient().String(), nil
|
|
}
|
|
|
|
func Generate(ctx context.Context) (string, error) {
|
|
keysFile, err := Path()
|
|
if err != nil {
|
|
return "", err
|
|
}
|
|
|
|
k, err := age.GenerateX25519Identity()
|
|
if err != nil {
|
|
return "", fmt.Errorf("internal error: %v", err)
|
|
}
|
|
|
|
if err := os.MkdirAll(filepath.Dir(keysFile), 0700); err != nil {
|
|
return "", err
|
|
}
|
|
f, err := os.OpenFile(keysFile, os.O_WRONLY|os.O_CREATE|os.O_EXCL, 0600)
|
|
if err != nil {
|
|
return "", fmt.Errorf("failed to open keys file %q: %v", keysFile, err)
|
|
}
|
|
defer f.Close()
|
|
fmt.Fprintf(f, "# created: %s\n", time.Now().Format(time.RFC3339))
|
|
fmt.Fprintf(f, "# public key: %s\n", k.Recipient())
|
|
fmt.Fprintf(f, "%s\n", k)
|
|
|
|
pubkey := k.Recipient().String()
|
|
|
|
log.Ctx(ctx).Debug().Str("publicKey", pubkey).Msg("generating keypair")
|
|
|
|
return pubkey, nil
|
|
}
|
|
|
|
func List(ctx context.Context) ([]*age.X25519Identity, error) {
|
|
keysFile, err := Path()
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
|
|
f, err := os.Open(keysFile)
|
|
if err != nil {
|
|
return nil, fmt.Errorf("failed to open keys file file %q: %w", keysFile, err)
|
|
}
|
|
ids, err := age.ParseIdentities(f)
|
|
if err != nil {
|
|
return nil, fmt.Errorf("failed to parse input: %w", err)
|
|
}
|
|
|
|
keys := make([]*age.X25519Identity, 0, len(ids))
|
|
for _, id := range ids {
|
|
key, ok := ids[0].(*age.X25519Identity)
|
|
if !ok {
|
|
return nil, fmt.Errorf("internal error: unexpected identity type: %T", id)
|
|
}
|
|
keys = append(keys, key)
|
|
}
|
|
|
|
return keys, nil
|
|
}
|