Class: DanarchyDeploy::Users

Inherits:
Object
  • Object
show all
Defined in:
lib/danarchy_deploy/users.rb

Class Method Summary collapse

Class Method Details

.authorized_keys(user) ⇒ Object 



105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
 
# File 'lib/danarchy_deploy/users.rb', line 105

def self.authorized_keys(user)
  ssh_path = user[:home] + '/.ssh'
  authkeys = ssh_path + '/authorized_keys'

  Dir.exist?(ssh_path) || Dir.mkdir(ssh_path, 0700)
  File.chown(user[:uid], user[:gid], ssh_path)
  File.open(authkeys, 'a+') do |f|
    user[:authorized_keys].each do |authkey|
      if !f.read.include?(authkey)
        puts "   + Adding authorized_key: #{authkey}"
        f.puts authkey
      else
        puts '   - No change needed'
      end
    end

    f.chown(user[:uid], user[:gid])
    f.close
  end
end

.checkgroups(usercheck_result, user, options) ⇒ Object 



88
89
90
91
92
93
 
# File 'lib/danarchy_deploy/users.rb', line 88

def self.checkgroups(usercheck_result, user, options)
  return nil if !usercheck_result[:stdout]
  livegroups = usercheck_result[:stdout].split(/\s+/).last.split('=').last.gsub(/\(([^)]*)\)/, '').split(',').map(&:to_i)
  livegroups.delete(user[:gid])
  livegroups.sort == user[:groups].sort
end

.new(deployment, options) ⇒ Object 



4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
 
# File 'lib/danarchy_deploy/users.rb', line 4

def self.new(deployment, options)
  puts "\n" + self.name
  (useradd_result, userdel_result, archives_result) = nil

  deployment[:users].each do |user|
    puts " > Checking if user '#{user[:username]}' already exists."
    usercheck_result = usercheck(user, options)

    if usercheck_result[:stdout]
      puts "   - User: #{user[:username]} already exists!"
    else
      group = { groupname: user[:username] }
      group[:gid] = user[:gid] ? user[:gid] : nil
      group[:system] = user[:system] ? user[:system] : nil

      groupcheck_result = DanarchyDeploy::Groups.groupcheck(group, options)
      if !groupcheck_result[:stdout] && group[:gid]
        puts "   |+ Adding group: #{group[:groupname]}"
        DanarchyDeploy::Groups.groupadd(group, options)
      end

      puts "   |+ Adding user: #{user[:username]}"
      useradd_result = useradd(user, options)
    end

    if !options[:pretend]
      puts "\n > Checking groups for user: #{user[:username]}"
      if user[:groups] && checkgroups(usercheck_result, user, options) == false
        updategroups(user, options)
        puts "   |+ Updated groups: #{user[:groups].join(',')}"
      else
        puts "   - No change to groups needed."
      end

      if user[:authorized_keys]
        puts "\n > Checking on #{user[:authorized_keys].count} authorized_keys for user: #{user[:username]}"
        authorized_keys(user)
      end
      
      if user[:sudoer]
        puts "\n > Checking sudo rules for user: #{user[:username]}"
        sudoer(user)
      end
    end

    if user[:archives] && !user[:archives].empty?
      puts " > Deploying archives for #{user[:username]}"
      DanarchyDeploy::Archiver.new(user[:archives], options)
    end
  end

  # [useradd_result, userdel_result]
  deployment
end

.sudoer(user) ⇒ Object 



126
127
128
129
130
131
132
133
134
135
136
137
138
 
# File 'lib/danarchy_deploy/users.rb', line 126

def self.sudoer(user)
  sudoer_file = '/etc/sudoers.d/danarchy_deploy-' + user[:username]
  File.open(sudoer_file, 'a+') do |f|
    if !f.read.include?(user[:sudoer])
      puts "   |+ Added: '#{user[:sudoer]}'"
      f.puts user[:sudoer]
    else
      puts '   - No change needed'
    end

    f.close
  end
end

.updategroups(user, options) ⇒ Object 



95
96
97
98
99
100
101
102
103
 
# File 'lib/danarchy_deploy/users.rb', line 95

def self.updategroups(user, options)
  groups = user[:groups].join(',')
  groupupdate_cmd = "usermod #{user[:username]} --groups #{groups}"
  if options[:pretend]
    puts "\tFake run: #{groupupdate_cmd}"
  else
    DanarchyDeploy::Helpers.run_command(groupupdate_cmd, options)
  end
end

.useradd(user, options) ⇒ Object 



60
61
62
63
64
65
66
67
68
69
70
71
72
73
 
# File 'lib/danarchy_deploy/users.rb', line 60

def self.useradd(user, options)
  useradd_cmd  = "useradd #{user[:username]} "
  useradd_cmd += "--home-dir #{user[:home]} " if user[:home]
  useradd_cmd += "--uid #{user[:uid]} " if user[:uid]
  useradd_cmd += "--gid #{user[:gid]} " if user[:gid]
  useradd_cmd += "--groups #{user[:groups].join(',')} " if user[:groups]
  useradd_cmd += "--shell /sbin/nologin " if user[:nologin]
  useradd_cmd += "--system " if user[:system]
  if options[:pretend]
    puts "\tFake run: #{useradd_cmd}"
  else
    DanarchyDeploy::Helpers.run_command(useradd_cmd, options)
  end
end

.usercheck(user, options) ⇒ Object 



84
85
86
 
# File 'lib/danarchy_deploy/users.rb', line 84

def self.usercheck(user, options)
  DanarchyDeploy::Helpers.run_command("id #{user[:username]}", options)
end

.userdel(user, options) ⇒ Object 



75
76
77
78
79
80
81
82
 
# File 'lib/danarchy_deploy/users.rb', line 75

def self.userdel(user, options)
  userdel_cmd  = "userdel --remove #{user[:username]}"
  if options[:pretend]
    puts "\tFake run: #{userdel_cmd}"
  else
    DanarchyDeploy::Helpers.run_command(userdel_cmd, options)
  end
end