X-Git-Url: https://ruderich.org/simon/gitweb/?a=blobdiff_plain;f=cmd%2Fsafcm%2Fconfig%2Ffiles.go;fp=cmd%2Fsafcm%2Fconfig%2Ffiles.go;h=08b2dbf28d28ab7758f313b8f29931a3e72eb463;hb=f2f2bc47e8729548f3c10117f7f008b547c4afc5;hp=0000000000000000000000000000000000000000;hpb=dc0d431a778a50e6732b9eb91384a07a207b772d;p=safcm%2Fsafcm.git

diff --git a/cmd/safcm/config/files.go b/cmd/safcm/config/files.go
new file mode 100644
index 0000000..08b2dbf
--- /dev/null
+++ b/cmd/safcm/config/files.go
@@ -0,0 +1,108 @@
+// Config: load files/ directory tree
+
+// Copyright (C) 2021  Simon Ruderich
+//
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU General Public License as published by
+// the Free Software Foundation, either version 3 of the License, or
+// (at your option) any later version.
+//
+// This program is distributed in the hope that it will be useful,
+// but WITHOUT ANY WARRANTY; without even the implied warranty of
+// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+// GNU General Public License for more details.
+//
+// You should have received a copy of the GNU General Public License
+// along with this program.  If not, see <http://www.gnu.org/licenses/>.
+
+package config
+
+import (
+	"fmt"
+	"io/fs"
+	"os"
+	"path/filepath"
+
+	"ruderich.org/simon/safcm"
+)
+
+func LoadFiles(group string) (map[string]*safcm.File, error) {
+	basePath := filepath.Join(group, "files")
+
+	const errMsg = `
+The actual permissions and user/group of files and directories are not used
+(except for +x on files). 0644/0755 and current remote user/group is used per
+default. Apply different file permissions via permissions.yaml. To prevent
+confusion files must be manually chmodded 0644/0755 and directories 0755 or
+via "safcm fixperms".
+`
+
+	files := make(map[string]*safcm.File)
+	err := filepath.WalkDir(basePath, func(path string, d fs.DirEntry,
+		err error) error {
+
+		if err != nil {
+			return err
+		}
+
+		info, err := d.Info()
+		if err != nil {
+			return err
+		}
+		typ := info.Mode().Type()
+		perm := FileModeToFullPerm(info.Mode())
+
+		var data []byte
+		// See errMsg above. If a user stores a file with stricter
+		// permissions they could assume that these permissions are
+		// respected. This is not the case.
+		if typ == 0 /* regular file */ {
+			if perm != 0644 && perm != 0755 {
+				return fmt.Errorf(
+					"%q: invalid permissions %#o%s",
+					path, perm, errMsg)
+			}
+			data, err = os.ReadFile(path)
+			if err != nil {
+				return err
+			}
+		} else if typ == fs.ModeDir {
+			if perm != 0755 {
+				return fmt.Errorf(
+					"%q: invalid permissions %#o%s",
+					path, perm, errMsg)
+			}
+		} else if typ == fs.ModeSymlink {
+			x, err := os.Readlink(path)
+			if err != nil {
+				return err
+			}
+			data = []byte(x)
+		} else {
+			return fmt.Errorf("%q: file type not supported", path)
+		}
+
+		// Convert to absolute path as used on the target host
+		x, err := filepath.Rel(basePath, path)
+		if err != nil {
+			return err
+		}
+		x = filepath.Join("/", x)
+
+		files[x] = &safcm.File{
+			Path: x,
+			Mode: typ | (fs.FileMode(perm) & fs.ModePerm),
+			Uid:  -1,
+			Gid:  -1,
+			Data: data,
+		}
+		return nil
+	})
+	if err != nil {
+		if os.IsNotExist(err) {
+			return nil, nil
+		}
+		return nil, fmt.Errorf("%s: %v", group, err)
+	}
+	return files, nil
+}