#!/bin/bash
#
# Import keys into nodes.
#
# This program is free software: you can redistribute it and/or modify
# it under the terms of the GNU Affero General Public License as
# published by the Free Software Foundation, either version 3 of the
# License, or (at your option) any later version.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
# GNU Affero General Public License for more details.
#
# You should have received a copy of the GNU Affero General Public
# License along with this program.  If not, see
# <http://www.gnu.org/licenses/>.

# Load
source $APP_BASE/lib/hydra/functions || exit 1
hydra_config_load

# Import OpenPGP keypair
function hydra_import_keys_openpgp {
  key="$(keyringer $HYDRA decrypt nodes/$hostname/gpg/key 2> /dev/null | sed -ne '1,$p')"
  pubkey="$(keyringer $HYDRA decrypt nodes/$hostname/gpg/key.pub 2> /dev/null | sed -ne '1,$p')"
  key_id="$(echo "$pubkey" | gpg --with-colons | grep pub | cut -d : -f 5)"

  if [ -z "$key" ]; then
    echo "Could not find key for $node, skipping."
    continue
  fi

  if [ "`facter fqdn`" != "$hostname" ]; then
    $HYDRA_CONNECT $hostname <<EOF
    ##### BEGIN REMOTE SCRIPT #####
    echo ""
    echo "-----------------------------"
    echo "Importing gpg key to $node..."
    echo "-----------------------------"
    echo ""
    echo "$key" | sudo gpg --homedir /root/.gnupg --import

    echo ""
    echo "Trusting key $key_id at $node..."
    echo ""
    printf "trust\n5\ny\nsave\n" | sudo gpg --homedir /root/.gnupg --no-tty --status-fd=2 --command-fd=0 --edit-key $key_id

    echo ""
    echo "Verifying..."
    echo ""
    sudo gpg --homedir /root/.gnupg --list-keys
    ##### END REMOTE SCRIPT #######
EOF
  else
    echo ""
    echo "-----------------------------"
    echo "Importing gpg key to $node..."
    echo "-----------------------------"
    echo ""
    echo "$key" | sudo gpg --homedir /root/.gnupg --import

    echo ""
    echo "Trusting key $key_id at $node..."
    echo ""
    printf "trust\n5\ny\nsave\n" | sudo gpg --homedir /root/.gnupg --no-tty --status-fd=2 --command-fd=0 --edit-key $key_id

    echo ""
    echo "Verifying..."
    echo ""
    sudo gpg --homedir /root/.gnupg --list-keys
  fi
}

# Import OpenSSH keypair
function hydra_import_keys_openssh {
  if [ "`facter fqdn`" != "$hostname" ]; then
    echo "-----------------------------------------------------"
    echo "Importing keypair at $hostname:/root/.ssh..."
    echo "-----------------------------------------------------"

    echo "Creating folder structure at $hostname:/root/.ssh..."
    $HYDRA_CONNECT $hostname <<EOF
    sudo mkdir -p        /root/.ssh
    sudo chown root.root /root/.ssh
    sudo chmod 700       /root/.ssh
    sudo touch           /root/.ssh/id_rsa
    sudo touch           /root/.ssh/id_rsa.pub
    sudo chmod 600       /root/.ssh/id_rsa
    sudo chmod 600       /root/.ssh/id_rsa.pub
EOF

    echo "Importing public key from keyringer to $hostname:/root/.ssh..."
    keyringer $HYDRA decrypt nodes/$hostname/ssh/id_rsa.pub | \
      $HYDRA_CONNECT $hostname "cat - | sudo tee /root/.ssh/id_rsa.pub > /dev/null"

    echo "Importing private key from keyringer to $hostname:/root/.ssh..."
    keyringer $HYDRA decrypt nodes/$hostname/ssh/id_rsa | \
      $HYDRA_CONNECT $hostname "cat - | sudo tee /root/.ssh/id_rsa > /dev/null"
  else
    echo "-----------------------------------------------------"
    echo "Importing keypair at $hostname:/root/.ssh..."
    echo "-----------------------------------------------------"

    echo "Creating folder structure at $hostname:/root/.ssh..."
    sudo mkdir -p        /root/.ssh
    sudo chown root.root /root/.ssh
    sudo chmod 700       /root/.ssh
    sudo touch           /root/.ssh/id_rsa
    sudo touch           /root/.ssh/id_rsa.pub
    sudo chmod 600       /root/.ssh/id_rsa
    sudo chmod 600       /root/.ssh/id_rsa.pub

    echo "Importing public key from keyringer to $hostname:/root/.ssh..."
    keyringer $HYDRA decrypt nodes/$hostname/ssh/id_rsa.pub | sudo tee /root/.ssh/id_rsa.pub > /dev/null

    echo "Importing private key from keyringer to $hostname:/root/.ssh..."
    keyringer $HYDRA decrypt nodes/$hostname/ssh/id_rsa | sudo tee /root/.ssh/id_rsa > /dev/null
  fi
}

# Command line arguments
NODES="$*"

# Build node list
if [ -z "$NODES" ]; then
  NODES="`hydra $HYDRA nodes`"
fi

# Deploy
for node in $NODES; do
  hostname="`hydra_get_fqdn_from_nodename $node`"

  # Import OpenPGP keypair
  hydra_import_keys_openpgp

  # Import OpenSSH keypair
  hydra_import_keys_openssh
done