98 lines
2.6 KiB
Bash
Executable File
98 lines
2.6 KiB
Bash
Executable File
#!/bin/sh -e
|
|
#
|
|
# 2020 Dennis Camera (dennis.camera at ssrq-sds-fds.ch)
|
|
#
|
|
# This file is part of cdist.
|
|
#
|
|
# cdist is free software: you can redistribute it and/or modify
|
|
# it under the terms of the GNU General Public License as published by
|
|
# the Free Software Foundation, either version 3 of the License, or
|
|
# (at your option) any later version.
|
|
#
|
|
# cdist is distributed in the hope that it will be useful,
|
|
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
# GNU General Public License for more details.
|
|
#
|
|
# You should have received a copy of the GNU General Public License
|
|
# along with cdist. If not, see <http://www.gnu.org/licenses/>.
|
|
#
|
|
|
|
joinlines() { sed -n -e H -e "\${x;s/^\\n//;s/\\n/${1:?}/g;p;}"; }
|
|
|
|
state_is=$(cat "${__object:?}/explorer/state")
|
|
state_should=$(cat "${__object:?}/parameter/state")
|
|
|
|
if test "${state_is}" = "${state_should}" -o "${state_is}" = 'default'
|
|
then
|
|
# nothing to do (if the value is the default, ignore its state)
|
|
exit 0
|
|
fi
|
|
|
|
case ${state_should}
|
|
in
|
|
(present)
|
|
mode='set'
|
|
;;
|
|
(absent)
|
|
mode='unset'
|
|
;;
|
|
(*)
|
|
printf 'Invalid --state: %s\n' "${state_should}" >&2
|
|
exit 1
|
|
;;
|
|
esac
|
|
|
|
sshd_config_file=$(cat "${__object:?}/parameter/file")
|
|
|
|
quote() { printf "'%s'" "$(printf '%s' "$*" | sed -e "s/'/'\\\\''/g")"; }
|
|
drop_awk_comments() { quote "$(sed '/^[[:blank:]]*#.*$/d;/^$/d' "$@")"; }
|
|
|
|
# Ensure the sshd_config file is there
|
|
cat <<EOF
|
|
test -e $(quote "${sshd_config_file}") || {
|
|
: >$(quote "${sshd_config_file}")
|
|
chown 0:0 $(quote "${sshd_config_file}")
|
|
chmod 0644 $(quote "${sshd_config_file}")
|
|
}
|
|
|
|
EOF
|
|
|
|
match_only=
|
|
if test -s "${__object:?}/parameter/match"
|
|
then
|
|
match_only=$(joinlines ' ' <"${__object:?}/parameter/match")
|
|
fi
|
|
|
|
if test -s "${__object:?}/parameter/option"
|
|
then
|
|
option_line=$(cat "${__object:?}/parameter/option")
|
|
else
|
|
option_line=${__object_id:?}
|
|
fi
|
|
|
|
if test -s "${__object:?}/parameter/value"
|
|
then
|
|
option_line="${option_line} $(cat "${__object:?}/parameter/value")"
|
|
fi
|
|
|
|
# Send message on config update
|
|
printf '%s%s %s\n' "${mode}" "${match_only:+ [${match_only}]}" \
|
|
"${option_line}" >>"${__messages_out:?}"
|
|
|
|
# Update sshd_config (remote code)
|
|
cat <<EOF
|
|
awk $(drop_awk_comments "${__type:?}/files/update_sshd_config.awk") \\
|
|
-o ${mode} \\
|
|
-m $(quote "${match_only}") \\
|
|
-l $(quote "${option_line}") \\
|
|
$(quote "${sshd_config_file}") >$(quote "${sshd_config_file}.tmp") \\
|
|
|| exit
|
|
|
|
cmp -s $(quote "${sshd_config_file}") $(quote "${sshd_config_file}.tmp") || {
|
|
sshd -t -f $(quote "${sshd_config_file}.tmp") \\
|
|
&& cat $(quote "${sshd_config_file}.tmp") >$(quote "${sshd_config_file}")
|
|
}
|
|
rm -f $(quote "${sshd_config_file}.tmp")
|
|
EOF
|