Compare commits

...

4 Commits

Author SHA1 Message Date
amery f7da9519fa zones: allow iterators to terminate
Signed-off-by: Alejandro Mery <amery@jpi.io>
2023-08-22 20:12:05 +00:00
amery 589fb2f0e1 zones: set zoneID based on wireguard config files
Signed-off-by: Alejandro Mery <amery@jpi.io>
2023-08-22 19:39:30 +00:00
amery f5ee63e5aa wireguard: cleanup Config parser using BinaryKey
Signed-off-by: Alejandro Mery <amery@jpi.io>
2023-08-22 19:39:28 +00:00
amery 0de2e3f4d9 wireguard: introduce BinaryKey.Equal()
Signed-off-by: Alejandro Mery <amery@jpi.io>
2023-08-22 19:39:26 +00:00
6 changed files with 97 additions and 16 deletions
+6 -8
View File
@@ -1,7 +1,6 @@
package wireguard package wireguard
import ( import (
"encoding/base64"
"errors" "errors"
"fmt" "fmt"
"io" "io"
@@ -32,13 +31,13 @@ func (f *Config) Peers() int {
// InterfaceConfig represents the [Interface] section // InterfaceConfig represents the [Interface] section
type InterfaceConfig struct { type InterfaceConfig struct {
Address netip.Addr Address netip.Addr
PrivateKey []byte PrivateKey BinaryKey
ListenPort uint16 ListenPort uint16
} }
// PeerConfig represents a [Peer] section // PeerConfig represents a [Peer] section
type PeerConfig struct { type PeerConfig struct {
PublicKey []byte PublicKey BinaryKey
Endpoint EndpointAddress Endpoint EndpointAddress
AllowedIPs []netip.Prefix AllowedIPs []netip.Prefix
} }
@@ -129,19 +128,19 @@ type interfaceConfig struct {
} }
func (p interfaceConfig) Export() (InterfaceConfig, error) { func (p interfaceConfig) Export() (InterfaceConfig, error) {
var err error
out := InterfaceConfig{ out := InterfaceConfig{
Address: p.Address, Address: p.Address,
ListenPort: p.ListenPort, ListenPort: p.ListenPort,
} }
b, err := base64.StdEncoding.DecodeString(p.PrivateKey) out.PrivateKey, err = BinaryKeyFromBase64(p.PrivateKey)
if err != nil { if err != nil {
err = core.Wrap(err, "PrivateKey") err = core.Wrap(err, "PrivateKey")
return InterfaceConfig{}, err return InterfaceConfig{}, err
} }
out.PrivateKey = b
return out, nil return out, nil
} }
@@ -163,8 +162,7 @@ func (v *intermediateConfig) ExportPeer(i int) (PeerConfig, error) {
} }
// PublicKey // PublicKey
s = v.Peer.PublicKey[i] out.PublicKey, err = BinaryKeyFromBase64(v.Peer.PublicKey[i])
out.PublicKey, err = base64.StdEncoding.DecodeString(s)
if err != nil { if err != nil {
err = core.Wrap(err, "PublicKey") err = core.Wrap(err, "PublicKey")
return out, err return out, err
+6
View File
@@ -1,6 +1,7 @@
package wireguard package wireguard
import ( import (
"bytes"
"encoding/base64" "encoding/base64"
) )
@@ -16,6 +17,11 @@ func (k BinaryKey) IsZero() bool {
return len(k) == 0 return len(k) == 0
} }
// Equal checks if two keys are identical
func (k BinaryKey) Equal(alter BinaryKey) bool {
return bytes.Equal(k, alter)
}
// BinaryKeyFromBase64 decodes a base64-based string into // BinaryKeyFromBase64 decodes a base64-based string into
// a [BinaryKey] // a [BinaryKey]
func BinaryKeyFromBase64(data string) (BinaryKey, error) { func BinaryKeyFromBase64(data string) (BinaryKey, error) {
+66
View File
@@ -0,0 +1,66 @@
package zones
import (
"bytes"
"fmt"
"os"
"darvaza.org/core"
"git.jpi.io/amery/jpictl/pkg/wireguard"
)
// GetWireguardConfig reads a wgN.conf file
func (m *Machine) GetWireguardConfig(ring int) (*wireguard.Config, error) {
data, err := m.ReadFile("wg%v.conf", ring)
if err != nil {
return nil, err
}
r := bytes.NewReader(data)
return wireguard.NewConfigFromReader(r)
}
func (m *Machine) tryApplyWireguardConfig(ring int) error {
wg, err := m.GetWireguardConfig(ring)
switch {
case os.IsNotExist(err):
return nil
case err != nil:
return err
default:
return m.applyWireguardConfig(ring, wg)
}
}
func (m *Machine) applyWireguardConfig(ring int, wg *wireguard.Config) error {
addr := wg.GetAddress()
zoneID, nodeID, ok := Rings[ring].Decode(addr)
if !ok {
return fmt.Errorf("%s: invalid wg%v address: %s", m.Name, ring, addr)
}
if err := m.applyZoneNodeID(zoneID, nodeID); err != nil {
err = core.Wrapf(err, "%s: wg%v:%s", m.Name, ring, addr)
return err
}
return nil
}
func (m *Machine) applyZoneNodeID(zoneID, nodeID int) error {
switch {
case zoneID == 0:
return fmt.Errorf("invalid %s", "zoneID")
case nodeID == 0:
return fmt.Errorf("invalid %s", "nodeID")
case m.ID() != nodeID:
return fmt.Errorf("invalid %s: %v ≠ %v", "zoneID", m.ID(), nodeID)
case m.zone.ID != 0 && m.zone.ID != zoneID:
return fmt.Errorf("invalid %s: %v ≠ %v", "zoneID", m.zone.ID, zoneID)
case m.zone.ID == 0:
m.zone.ID = zoneID
}
return nil
}
+6
View File
@@ -26,5 +26,11 @@ func (m *Machine) updatePublicAddresses() error {
} }
func (m *Machine) scan() error { func (m *Machine) scan() error {
for i := 0; i < RingsCount; i++ {
if err := m.tryApplyWireguardConfig(i); err != nil {
return err
}
}
return m.updatePublicAddresses() return m.updatePublicAddresses()
} }
+3 -4
View File
@@ -31,10 +31,9 @@ func (m *Zones) scan() error {
func (m *Zones) scanMachines() error { func (m *Zones) scanMachines() error {
var err error var err error
m.ForEachMachine(func(p *Machine) { m.ForEachMachine(func(p *Machine) bool {
if err == nil { err = p.scan()
err = p.scan() return err != nil
}
}) })
return err return err
} }
+10 -4
View File
@@ -32,18 +32,24 @@ type Zones struct {
} }
// ForEachMachine calls a function for each Machine in the cluster // ForEachMachine calls a function for each Machine in the cluster
func (m *Zones) ForEachMachine(fn func(*Machine)) { func (m *Zones) ForEachMachine(fn func(*Machine) bool) {
for _, z := range m.Zones { for _, z := range m.Zones {
for _, p := range z.Machines { for _, p := range z.Machines {
fn(p) if fn(p) {
// terminate
return
}
} }
} }
} }
// ForEachZone calls a function for each Zone in the cluster // ForEachZone calls a function for each Zone in the cluster
func (m *Zones) ForEachZone(fn func(*Zone)) { func (m *Zones) ForEachZone(fn func(*Zone) bool) {
for _, p := range m.Zones { for _, p := range m.Zones {
fn(p) if fn(p) {
// terminate
return
}
} }
} }