;;; GNU Guix --- Functional package management for GNU ;;; Copyright © 2019 Jakob L. Kreuze ;;; Copyright © 2020-2022 Ludovic Courtès ;;; ;;; This file is part of GNU Guix. ;;; ;;; GNU Guix is free software; you can redistribute it and/or modify it ;;; under the terms of the GNU General Public License as published by ;;; the Free Software Foundation; either version 3 of the License, or (at ;;; your option) any later version. ;;; ;;; GNU Guix is distributed in the hope that it will be useful, but ;;; WITHOUT ANY WARRANTY; without even the implied warranty of ;;; MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the ;;; GNU General Public License for more details. ;;; ;;; You should have received a copy of the GNU General Public License ;;; along with GNU Guix. If not, see . (define-module (gnu machine ssh) #:use-module (gnu bootloader) #:use-module (gnu machine) #:autoload (gnu packages gnupg) (guile-gcrypt) #:use-module (gnu system) #:use-module (gnu system file-syst
aboutsummaryrefslogtreecommitdiff
blob: 3ce32f80c0841908b936d07cedc83a9ff9342a5f (about) (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
;;; GNU Guix --- Functional package management for GNU
;;; Copyright © 2021 Xinglu Chen <public@yoctocell.xyz>
;;; Copyright © 2021 Andrew Tropin <andrew@trop.in>
;;;
;;; This file is part of GNU Guix.
;;;
;;; GNU Guix is free software; you can redistribute it and/or modify it
;;; under the terms of the GNU General Public License as published by
;;; the Free Software Foundation; either version 3 of the License, or (at
;;; your option) any later version.
;;;
;;; GNU Guix is distributed in the hope that it will be useful, but
;;; WITHOUT ANY WARRANTY; without even the implied warranty of
;;; MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
;;; GNU General Public License for more details.
;;;
;;; You should have received a copy of the GNU General Public License
;;; along with GNU Guix.  If not, see <http://www.gnu.org/licenses/>.

(define-module (gnu home services utils)
  #:use-module (ice-9 string-fun)
  #:use-module (srfi srfi-1)
  #:use-module (srfi srfi-26)

  #:export (maybe-object->string
            object->snake-case-string
            object->camel-case-string
            list->human-readable-list))

(define (maybe-object->string object)
  "Like @code{object->string} but don't do anything if OBJECT already is
a string."
  (if (string? object)
      object
      (object->string object)))

;; Snake case: <https://en.wikipedia.org/wiki/Snake_case>
(define* (object->snake-case-string object #:optional (style 'lower))
  "Convert the object OBJECT to the equivalent string in ``snake
case''.  STYLE can be three `@code{lower}', `@code{upper}', or
`@code{capitalize}', defaults to `@code{lower}'.

@example
(object->snake-case-string 'variable-name 'upper)
@result{} \"VARIABLE_NAME\" @end example"
  (if (not (member style '(lower upper capitalize)))
      (error 'invalid-style (format #f "~a is not a valid style" style))
      (let ((stringified (maybe-object->string object)))
        (string-replace-substring
         (cond
          ((equal? style 'lower) stringified)
          ((equal? style 'upper) (string-upcase stringified))
          (else (string-capitalize stringified)))
         "-" "_"))))

(define* (object->camel-case-string object #:optional (style 'lower))
  "Convert the object OBJECT to the equivalent string in ``camel case''.
STYLE can be three `@code{lower}', `@code{upper}', defaults to
`@code{lower}'.

@example
(object->camel-case-string 'variable-name 'upper)
@result{} \"VariableName\"
@end example"
  (if (not (member style '(lower upper)))
      (error 'invalid-style (format #f "~a is not a valid style" style))
      (let ((stringified (maybe-object->string object)))
        (cond
         ((eq? style 'upper)
          (string-concatenate
           (map string-capitalize
                (string-split stringified (cut eqv? <> #\-)))))
         ((eq? style 'lower)
          (let ((splitted-string (string-split stringified (cut eqv? <> #\-))))
            (string-concatenate
             (cons (first splitted-string)
                   (map string-capitalize
                        (cdr splitted-string))))))))))

(define* (list->human-readable-list lst
                                    #:key
                                    (cumulative? #f)
                                    (proc identity))
  "Turn a list LST into a sequence of terms readable by humans.
If CUMULATIVE? is @code{#t}, use ``and'', otherwise use ``or'' before
the last term.

PROC is a procedure to apply to each of the elements of a list before
turning them into a single human readable string.

@example
(list->human-readable-list '(1 4 9) #:cumulative? #t #:proc sqrt)
@result{} \"1, 2, and 3\"
@end example

yields:"
  (let* ((word (if cumulative? "and " "or "))
         (init (append (drop-right lst 1))))
    (format #f "~a" (string-append
                     (string-join
                      (map (compose maybe-object->string proc) init)
                      ", " 'suffix)
                     word
                     (maybe-object->string (proc (last lst)))))))

dition if any of the modules needed by 'needed-for-boot' file systems in MACHINE are not available in the initrd." (define file-systems (filter file-system-needed-for-boot? (operating-system-file-systems (machine-operating-system machine)))) (define (missing-modules fs) (define remote-exp (let ((device (file-system-device fs))) (with-imported-modules (source-module-closure '((gnu build file-systems) (gnu build linux-modules) (gnu system uuid))) #~(begin (use-modules (gnu build file-systems) (gnu build linux-modules) (gnu system uuid)) (define dev #$(cond ((string? device) device) ((uuid? device) #~(find-partition-by-uuid (string->uuid #$(uuid->string device)))) ((file-system-label? device) #~(find-partition-by-label #$(file-system-label->string device))))) (missing-modules dev '#$(operating-system-initrd-modules (machine-operating-system machine))))))) (remote-let ((missing remote-exp)) (unless (null? missing) (raise (formatted-message (G_ "missing modules for ~a:~{ ~a~}~%") (file-system-device fs) missing))))) (if (machine-ssh-configuration-safety-checks? (machine-configuration machine)) (map missing-modules file-systems) '())) (define* (machine-check-forward-update machine) "Check whether we are making a forward update for MACHINE. Depending on its 'allow-upgrades?' field, raise an error or display a warning if we are potentially downgrading it." (define config (machine-configuration machine)) (define validate-reconfigure (if (machine-ssh-configuration-allow-downgrades? config) warn-about-backward-reconfigure ensure-forward-reconfigure)) (remote-let ((provenance #~(call-with-input-file "/run/current-system/provenance" read))) (define channels (sexp->system-provenance provenance)) (check-forward-update validate-reconfigure #:current-channels channels))) (define (machine-check-building-for-appropriate-system machine) "Raise a '&message' error condition if MACHINE is configured to be built locally and the 'system' field does not match the '%current-system' reported by MACHINE." (let ((config (machine-configuration machine)) (system (remote-system (machine-ssh-session machine)))) (when (and (machine-ssh-configuration-build-locally? config) (not (string= system (machine-ssh-configuration-system config)))) (raise (formatted-message (G_ "incorrect target system\ ('~a' was given, while the system reports that it is '~a')~%") (machine-ssh-configuration-system config) system))))) (define (check-deployment-sanity machine) "Raise a '&message' error condition if it is clear that deploying MACHINE's 'system' declaration would fail." (define assertions (append (machine-check-file-system-availability machine) (machine-check-initrd-modules machine) (list (machine-check-forward-update machine)))) (define aggregate-exp ;; Gather all the expressions so that a single round-trip is enough to ;; evaluate all the ASSERTIONS remotely. #~(map (lambda (file) (false-if-exception (primitive-load file))) '#$(map (lambda (assertion) (scheme-file "remote-assertion.scm" (remote-assertion-expression assertion))) assertions))) ;; First check MACHINE's system type--an incorrect value for 'system' would ;; cause subsequent invocations of 'remote-eval' to fail. (machine-check-building-for-appropriate-system machine) (mlet %store-monad ((values (machine-remote-eval machine aggregate-exp))) (for-each (lambda (proc value) (proc value)) (map remote-assertion-procedure assertions) values) (return #t))) ;;; ;;; System deployment. ;;; (define not-config? ;; Select (guix …) and (gnu …) modules, except (guix config). (match-lambda (('guix 'config) #f) (('guix _ ...) #t) (('gnu _ ...) #t) (_ #f))) (define (machine-boot-parameters machine) "Monadic procedure returning a list of 'boot-parameters' for the generations of MACHINE's system profile, ordered from most recent to oldest." (define bootable-kernel-arguments (@@ (gnu system) bootable-kernel-arguments)) (define remote-exp (with-extensions (list guile-gcrypt) (with-imported-modules `(((guix config) => ,(make-config.scm)) ,@(source-module-closure '((guix profiles)) #:select? not-config?)) #~(begin (use-modules (guix config) (guix profiles) (ice-9 textual-ports)) (define %system-profile (string-append %state-directory "/profiles/system")) (define (read-file path) (call-with-input-file path (lambda (port) (get-string-all port)))) (map (lambda (generation) (let* ((system-path (generation-file-name %system-profile generation)) (boot-parameters-path (string-append system-path "/parameters")) (time (stat:mtime (lstat system-path)))) (list generation system-path time (read-file boot-parameters-path)))) (reverse (generation-numbers %system-profile))))))) (mlet* %store-monad ((generations (machine-remote-eval machine remote-exp))) (return (map (lambda (generation) (match generation ((generation system-path time serialized-params) (let* ((params (call-with-input-string serialized-params read-boot-parameters)) (root (boot-parameters-root-device params)) (label (boot-parameters-label params))) (boot-parameters (inherit params) (label (string-append label " (#" (number->string generation) ", " (let ((time (make-time time-utc 0 time))) (date->string (time-utc->date time) "~Y-~m-~d ~H:~M")) ")")) (kernel-arguments (append (bootable-kernel-arguments system-path root) (boot-parameters-kernel-arguments params)))))))) generations)))) (define-syntax-rule (with-roll-back should-roll-back? mbody ...) "Catch exceptions that arise when binding MBODY, a monadic expression in %STORE-MONAD, and collect their arguments in a &deploy-error condition, with the 'should-roll-back' field set to SHOULD-ROLL-BACK?" (catch #t (lambda () mbody ...) (lambda args (raise (condition (&deploy-error (should-roll-back should-roll-back?) (captured-args args))))))) (define (deploy-managed-host machine) "Internal implementation of 'deploy-machine' for MACHINE instances with an environment type of 'managed-host." (maybe-raise-unsupported-configuration-error machine) (when (machine-ssh-configuration-authorize? (machine-configuration machine)) (unless (file-exists? %public-key-file) (raise (formatted-message (G_ "no signing key '~a'. \ have you run 'guix archive --generate-key?'") %public-key-file))) (remote-authorize-signing-key (call-with-input-file %public-key-file (lambda (port) (string->canonical-sexp (get-string-all port)))) (machine-ssh-session machine) (machine-become-command machine))) (mlet %store-monad ((_ (check-deployment-sanity machine)) (boot-parameters (machine-boot-parameters machine))) (let* ((os (machine-operating-system machine)) (host (machine-ssh-configuration-host-name (machine-configuration machine))) (eval (cut machine-remote-eval machine <>)) (menu-entries (map boot-parameters->menu-entry boot-parameters)) (bootloader-configuration (operating-system-bootloader os)) (bootcfg (operating-system-bootcfg os menu-entries))) (define-syntax-rule (eval/error-handling condition handler ...) ;; Return a wrapper around EVAL such that HANDLER is evaluated if an ;; exception is raised. (lambda (exp) (lambda (store) (guard (condition ((inferior-exception? condition) (values (begin handler ...) store))) (values (run-with-store store (eval exp)) store))))) (mbegin %store-monad (with-roll-back #f (switch-to-system (eval/error-handling c (raise (formatted-message (G_ "\ failed to switch systems while deploying '~a':~%~{~s ~}") host (inferior-exception-arguments c)))) os)) (with-roll-back #t (mbegin %store-monad (upgrade-shepherd-services (eval/error-handling c (warning (G_ "\ an error occurred while upgrading services on '~a':~%~{~s ~}~%") host (inferior-exception-arguments c))) os) (install-bootloader (eval/error-handling c (raise (formatted-message (G_ "\ failed to install bootloader on '~a':~%~{~s ~}~%") host (inferior-exception-arguments c)))) bootloader-configuration bootcfg))))))) ;;; ;;; Roll-back. ;;; (define (roll-back-managed-host machine) "Internal implementation of 'roll-back-machine' for MACHINE instances with an environment type of 'managed-host." (define remote-exp (with-extensions (list guile-gcrypt) (with-imported-modules (source-module-closure '((guix config) (guix profiles))) #~(begin (use-modules (guix config) (guix profiles)) (define %system-profile (string-append %state-directory "/profiles/system")) (define target-generation (relative-generation %system-profile -1)) (if target-generation (switch-to-generation %system-profile target-generation) 'error))))) (define roll-back-failure (condition (&message (message (G_ "could not roll-back machine"))))) (mlet* %store-monad ((boot-parameters (machine-boot-parameters machine)) (_ -> (if (< (length boot-parameters) 2) (raise roll-back-failure))) (entries -> (map boot-parameters->menu-entry (list (second boot-parameters)))) (locale -> (boot-parameters-locale (second boot-parameters))) (crypto-dev -> (boot-parameters-store-crypto-devices (second boot-parameters))) (store-dir -> (boot-parameters-store-directory-prefix (second boot-parameters))) (old-entries -> (map boot-parameters->menu-entry (drop boot-parameters 2))) (bootloader -> (operating-system-bootloader (machine-operating-system machine))) (bootcfg (lower-object ((bootloader-configuration-file-generator (bootloader-configuration-bootloader bootloader)) bootloader entries #:locale locale #:store-crypto-devices crypto-dev #:store-directory-prefix store-dir #:old-entries old-entries))) (remote-result (machine-remote-eval machine remote-exp))) (when (eqv? 'error remote-result) (raise roll-back-failure)))) ;;; ;;; Environment type. ;;; (define managed-host-environment-type (environment-type (machine-remote-eval managed-host-remote-eval) (deploy-machine deploy-managed-host) (roll-back-machine roll-back-managed-host) (name 'managed-host-environment-type) (description "Provisioning for machines that are accessible over SSH and have a known host-name. This entails little more than maintaining an SSH connection to the host."))) (define (maybe-raise-unsupported-configuration-error machine) "Raise an error if MACHINE's configuration is not an instance of ." (let ((config (machine-configuration machine)) (environment (environment-type-name (machine-environment machine)))) (unless (and config (machine-ssh-configuration? config)) (raise (formatted-message (G_ "unsupported machine configuration '~a' for environment of type '~a'") config environment))))) ;; Local Variables: ;; eval: (put 'remote-let 'scheme-indent-function 1) ;; eval: (put 'with-roll-back 'scheme-indent-function 1) ;; eval: (put 'eval/error-handling 'scheme-indent-function 1) ;; End: