Compare commits

..

6 Commits

Author SHA1 Message Date
bluepython508
3c779e8fe2 Update dependencies 2024-11-01 16:31:00 +00:00
bluepython508
bdacd9905e Rename Peer to 'Backing Agent' 2024-09-26 13:10:33 +01:00
bluepython508
85bf788307 Deduplicate returned identities 2024-09-26 12:58:46 +01:00
bluepython508
6944ff05e0 Use portable hostname - macos doesn't have /etc/hostname 2024-09-26 12:23:45 +01:00
bluepython508
b0643a760e Add darwin hash for deps 2024-09-26 12:03:07 +01:00
bluepython508
44fa3976ad Fix launchd config: envvars must be strings, not drvs 2024-09-26 11:21:53 +01:00
8 changed files with 59 additions and 52 deletions

2
.envrc
View File

@@ -1,5 +1,5 @@
use flake
export RELEASE_NODE=frajtano-test@$(cat /etc/hostname)
export RELEASE_NODE=frajtano-test@$(hostname -s)
export FRAJTANO_DIR=$PWD/.frajtano_state
export FRAJTANO_CONFIG=$PWD/config/config.exs

View File

@@ -1,4 +1,4 @@
import Config
config :frajtano,
initial_peers: []
initial_backing_agents: []

View File

@@ -23,7 +23,10 @@
deps = fetchMixDeps {
pname = "mix-deps-${pname}";
inherit version src;
sha256 = "sha256-/9Ushiv0z1wJL9FwebUF4gem8IOwlUPnQuDBiXV0Ib8=";
sha256 = {
"x86_64-linux" = "sha256-/9Ushiv0z1wJL9FwebUF4gem8IOwlUPnQuDBiXV0Ib8=";
"aarch64-darwin" = "sha256-8gFgTV1qYrC3iw5/AyeEOMAYtcEK7wTXie+Z9RDrqUI=";
}.${pkgs.system};
};
hash = builtins.substring 11 32 "${./mix.lock}";
in
@@ -38,7 +41,7 @@
file="$FRAJTANO_DIR/cookie"
(umask 077; [ -f "$file" ] || ${pkgs.coreutils}/bin/head -c 128 /dev/urandom | ${pkgs.coreutils}/bin/base64 -w0 > "$file")
export RELEASE_COOKIE=$(${pkgs.coreutils}/bin/cat "$file")
[ -z $RELEASE_NODE ] && export RELEASE_NODE="frajtano-$(${pkgs.coreutils}/bin/whoami)@$(${pkgs.coreutils}/bin/cat /etc/hostname)"
[ -z $RELEASE_NODE ] && export RELEASE_NODE="frajtano-$(${pkgs.coreutils}/bin/whoami)@$(${pkgs.toybox}/bin/hostname -s)"
run() {
exec ${lib.getExe pkg} "$@"
}
@@ -55,7 +58,7 @@
;;
spawn)
shift
run rpc ":ok = Frajtano.Agent.spawn_peer({\"/usr/bin/env\", [$(list "$@")]})"
run rpc ":ok = Frajtano.Agent.spawn_backing_agent({\"/usr/bin/env\", [$(list "$@")]})"
;;
socket)
echo $FRAJTANO_DIR/agent.sock

17
flake.lock generated
View File

@@ -2,15 +2,18 @@
"nodes": {
"nixpkgs": {
"locked": {
"lastModified": 1721924956,
"narHash": "sha256-Sb1jlyRO+N8jBXEX9Pg9Z1Qb8Bw9QyOgLDNMEpmjZ2M=",
"path": "/nix/store/xblysc3prg1zqsi59fr36nj6wdiqryzp-source",
"rev": "5ad6a14c6bf098e98800b091668718c336effc95",
"type": "path"
"lastModified": 1730272153,
"narHash": "sha256-B5WRZYsRlJgwVHIV6DvidFN7VX7Fg9uuwkRW9Ha8z+w=",
"owner": "NixOS",
"repo": "nixpkgs",
"rev": "2d2a9ddbe3f2c00747398f3dc9b05f7f2ebb0f53",
"type": "github"
},
"original": {
"id": "nixpkgs",
"type": "indirect"
"owner": "NixOS",
"ref": "nixpkgs-unstable",
"repo": "nixpkgs",
"type": "github"
}
},
"root": {

View File

@@ -1,5 +1,6 @@
{
description = "frajtano: an ssh agent multiplexer";
inputs.nixpkgs.url = "github:NixOS/nixpkgs/nixpkgs-unstable";
outputs = {
self,
@@ -42,18 +43,18 @@
default = "${config.home.homeDirectory}/.ssh/frajtano";
type = lib.types.path;
};
initialPeers = lib.mkOption {
description = "initially spawned peers - will be passed to /usr/bin/env";
initialBackingAgents = lib.mkOption {
description = "initially spawned backing_agents - will be passed to /usr/bin/env";
type = with lib.types; listOf (listOf str);
default = [];
};
};
config = let
peers = lib.strings.concatMapStringsSep ", " (args: ''{:spawn, {"${pkgs.coreutils}/bin/env", [${lib.concatMapStringsSep ", " (s: ''~S{${s}}'') args}]}}'') cfg.initialPeers;
backing_agents = lib.strings.concatMapStringsSep ", " (args: ''{:spawn, {"${pkgs.coreutils}/bin/env", [${lib.concatMapStringsSep ", " (s: ''~S{${s}}'') args}]}}'') cfg.initialBackingAgents;
configFile = pkgs.writeText "config.exs" ''
import Config
config :frajtano, initial_peers: [${peers}]
config :frajtano, initial_backing_agents: [${backing_agents}]
'';
in lib.mkIf cfg.enable {
home.sessionVariables.FRAJTANO_DIR = cfg.dir;
@@ -73,8 +74,8 @@
enable = true;
config = {
EnvironmentVariables = {
FRAJTANO_DIR = cfg.dir;
FRAJTANO_CONFIG = configFile;
FRAJTANO_DIR = "${cfg.dir}";
FRAJTANO_CONFIG = "${configFile}";
};
ProgramArguments = ["${self.packages.${pkgs.system}.default}/bin/frajtano" "start"];
RunAtLoad = true;

View File

@@ -1,5 +1,5 @@
defmodule Frajtano.Agent do
alias Frajtano.Peer
alias Frajtano.BackingAgent
use GenServer
require Logger
@@ -15,49 +15,49 @@ defmodule Frajtano.Agent do
}
end
def initial_peers() do
initial_peers = Application.fetch_env!(:frajtano, :initial_peers)
|> Enum.map(&GenServer.call(__MODULE__, {:add_peer, &1}))
Logger.info("Started initial peers: #{inspect initial_peers}")
def initial_backing_agents() do
initial_backing_agents = Application.fetch_env!(:frajtano, :initial_backing_agents)
|> Enum.map(&GenServer.call(__MODULE__, {:add_backing_agent, &1}))
Logger.info("Started initial backing_agents: #{inspect initial_backing_agents}")
end
# select: list of specs, where specs are a tuple of match, guards, and outputs
# match is {key, pid, value}, :"$1" is a match variable
def peer_paths() do
Registry.select(Frajtano.Peers, [{{:"$1", :_, :_}, [], [:"$1"]}])
def backing_agent_paths() do
Registry.select(Frajtano.BackingAgents, [{{:"$1", :_, :_}, [], [:"$1"]}])
end
def peer_pids() do
Registry.select(Frajtano.Peers, [{{:_, :"$1", :_}, [], [:"$1"]}])
def backing_agent_pids() do
Registry.select(Frajtano.BackingAgents, [{{:_, :"$1", :_}, [], [:"$1"]}])
end
@impl true
def handle_call({:identities}, _from, _state) do
idents =
Task.async_stream(
peer_pids(),
&{&1, Peer.identities(&1)},
backing_agent_pids(),
&{&1, BackingAgent.identities(&1)},
ordered: false,
on_timeout: :kill_task
)
idents = for {:ok, {peer, {:ok, idents}}} <- idents, do: {idents, peer}
idents = for {:ok, {backing_agent, {:ok, idents}}} <- idents, do: {idents, backing_agent}
{
:reply,
{:ok, Enum.flat_map(idents, &elem(&1, 0))},
for({idents, peer} <- idents, {key, _comment} <- idents, into: %{}, do: {key, peer})
{:ok, idents |> Enum.flat_map(&elem(&1, 0)) |> Enum.uniq},
for({idents, backing_agent} <- idents, {key, _comment} <- idents, into: %{}, do: {key, backing_agent})
}
end
@impl true
def handle_call({:sign, {key, _, _} = req}, _from, state) do
{:reply, Peer.sign(state[key], req), state}
{:reply, BackingAgent.sign(state[key], req), state}
end
@impl true
def handle_call({:add_peer, spec}, _from, state) do
case Peer.start(spec) do
def handle_call({:add_backing_agent, spec}, _from, state) do
case BackingAgent.start(spec) do
{:ok, _} -> {:reply, :ok, state}
{:error, error} -> {:reply, {:error, error}, state}
end
@@ -73,10 +73,10 @@ defmodule Frajtano.Agent do
end
def assimilate(path) do
GenServer.call(__MODULE__, {:add_peer, {:socket, path}})
GenServer.call(__MODULE__, {:add_backing_agent, {:socket, path}})
end
def spawn_peer(spec) do
GenServer.call(__MODULE__, {:add_peer, {:spawn, spec}})
def spawn_backing_agent(spec) do
GenServer.call(__MODULE__, {:add_backing_agent, {:spawn, spec}})
end
end

View File

@@ -17,12 +17,12 @@ defmodule Frajtano.Supervisor do
@impl true
def init(:ok) do
children = [
{DynamicSupervisor, name: Frajtano.PeerSupervisor},
{Registry, keys: :unique, name: Frajtano.Peers},
{DynamicSupervisor, name: Frajtano.BackingAgentSupervisor},
{Registry, keys: :unique, name: Frajtano.BackingAgents},
Frajtano.Agent,
{Task.Supervisor, name: Frajtano.ClientSupervisor},
{Frajtano.Listener, [Application.fetch_env!(:frajtano, :listen_path)]},
{Task, &Frajtano.Agent.initial_peers/0},
{Task, &Frajtano.Agent.initial_backing_agents/0},
:systemd.ready(),
]

View File

@@ -1,4 +1,4 @@
defmodule Frajtano.Peer do
defmodule Frajtano.BackingAgent do
alias Frajtano.Proto
require Logger
use GenServer, restart: :temporary
@@ -17,7 +17,7 @@ defmodule Frajtano.Peer do
children = [
Supervisor.child_spec({MuonTrap.Daemon, [executable, args ++ [path]]}, restart: :temporary, significant: true),
Supervisor.child_spec({Frajtano.Peer, {path, :spawned, {executable, args}}}, restart: :permanent)
Supervisor.child_spec({Frajtano.BackingAgent, {path, :spawned, {executable, args}}}, restart: :permanent)
]
Supervisor.init(children, strategy: :one_for_all, auto_shutdown: :any_significant)
@@ -25,19 +25,19 @@ defmodule Frajtano.Peer do
end
def start({:socket, path}) do
DynamicSupervisor.start_child(Frajtano.PeerSupervisor, {__MODULE__, {path}})
DynamicSupervisor.start_child(Frajtano.BackingAgentSupervisor, {__MODULE__, {path}})
end
def start({:spawn, spec}) do
Logger.info("Spawning #{inspect spec}")
DynamicSupervisor.start_child(Frajtano.PeerSupervisor, {Spawner, spec})
DynamicSupervisor.start_child(Frajtano.BackingAgentSupervisor, {Spawner, spec})
end
def start_link({path}) do
GenServer.start_link(__MODULE__, {path}, name: {:via, Registry, {Frajtano.Peers, path}})
GenServer.start_link(__MODULE__, {path}, name: {:via, Registry, {Frajtano.BackingAgents, path}})
end
def start_link({_, _, _} = spec) do
GenServer.start_link(__MODULE__, spec, name: {:via, Registry, {Frajtano.Peers, spec}})
GenServer.start_link(__MODULE__, spec, name: {:via, Registry, {Frajtano.BackingAgents, spec}})
end
@impl true
@@ -112,12 +112,12 @@ defmodule Frajtano.Peer do
{:stop, {:error, e}, %{}}
end
def identities(peer) do
def identities(backing_agent) do
ref = make_ref()
send(peer, {:send, {:agentc_request_identities, nil}, {self(), ref}})
send(backing_agent, {:send, {:agentc_request_identities, nil}, {self(), ref}})
# Needs to be less than the timeout in Frajtano.Agent.identities on the Task.async_stream call
# That's 5000 by default
timer = Process.send_after(peer, :timeout, 4500)
timer = Process.send_after(backing_agent, :timeout, 4500)
receive do
{^ref, msg} ->
@@ -132,13 +132,13 @@ defmodule Frajtano.Peer do
end
end
def sign(peer, request) do
def sign(backing_agent, request) do
# Signing may take some time, as a password may need to be entered or similar
# There is therefore no timeout
# If something requests identities afterwards, it will timeout, which also kills this signature request
# The SSH agent protocol strict ordering leaves fun problems with timeouts, as it turns out
ref = make_ref()
send(peer, {:send, {:agentc_sign_request, request}, {self(), ref}})
send(backing_agent, {:send, {:agentc_sign_request, request}, {self(), ref}})
receive do
{^ref, msg} -> msg