boring_services 0.8.1 → 0.9.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: d26c6e6770c20727d68f773f48f1505b9eaeedef20b72d73cd9af76668773bc4
-  data.tar.gz: b6d7d7ca8c099f958c51f542ff0f7eb64d6b23ae1241ca62e27041c044867f1b
+  metadata.gz: e67745f3e72ccf6dce8646fc1606dda6f080f7634f58e5e614e21d732a24baef
+  data.tar.gz: 6d16d20e74f47f17c855d217ceb59799a4c67e390f695050dd73ba09f949befd
 SHA512:
-  metadata.gz: eab7cdbc819793e3f49ebb6a2212f37cd5d4c2019d8d96b15e70ca9431732a823ec51a689c450a9f8fd9b2fa8e3e7db849d716428044c988e697701bb36b45f6
-  data.tar.gz: 23d2c7f46e5e6a14a1f6adf143771a1869e5dbb66401f7ac175ba70797b0c70ba0a4b114ac5cede972f2dd68c6ace88a46ecd2258033a1226533c0579b461519
+  metadata.gz: 1201bdcc2598275c86c3ceceae12193c398c4135e6e8cbe675b6f5dce5fa2896b1b27fd776ecfc5fd34c2af8456a092ca968734e52d6ceac58c46c7f055c454d
+  data.tar.gz: 9bc9c48947ffe1805a73accab2fa699c8c007d744722d785fe51b5cd555595bd14eb4ee33c0deb0ad6ce982c6c7d6b5e8d18c9f61127a7f45d5c2dbb4cb927bf

data/CHANGELOG.md

@@ -7,6 +7,18 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.9.0] - 2026-10-02
+
+### Changed
+
+- Update development dependencies.
+- Link gem source metadata to the matching release tag.
+
+### Added
+
+- Per-host jump routing, strict known-hosts configuration, and a targeted
+  `install --host LABEL` path for safely adding services to a new origin.
+
 ## [0.8.1] - 2026-08-20
 
 ### Changed

data/lib/boring_services/cli.rb

@@ -25,8 +25,10 @@ module BoringServices
     end
 
     desc 'install [SERVICE]', 'Install service(s) - all services or specific service'
+    option :host, type: :string, desc: 'Install only the host matching this label or address'
     def install(service_name = nil)
       config = Configuration.load(options[:config], options[:environment])
+      config.only_host!(options[:host]) if options[:host]
       installer = Installer.new(config)
       service_name ? installer.install_service(service_name) : installer.install_all
     rescue Error => e

data/lib/boring_services/configuration.rb

@@ -14,6 +14,7 @@ module BoringServices
       @config_path = config_path
       @environment = environment.to_s
       @config = load_config
+      @all_hosts = host_entries
     end
 
     def service_config(service_name)
@@ -42,6 +43,54 @@ module BoringServices
       @config['ssh_key'] || '~/.ssh/id_rsa'
     end
 
+    def ssh_known_hosts_file
+      path = @config['ssh_known_hosts_file']
+      File.expand_path(path) if path
+    end
+
+    def verify_host_key_mode
+      case @config.fetch('verify_host_key', true)
+      when true, 'always', :always then :always
+      when 'accept_new', :accept_new then :accept_new
+      when false, 'never', :never then :never
+      else :always
+      end
+    end
+
+    def host_config(reference)
+      reference = reference.to_s
+      @all_hosts.find do |host|
+        next unless host.is_a?(Hash)
+
+        host['host'].to_s == reference ||
+          host['label'].to_s.casecmp?(reference) ||
+          host['name'].to_s.casecmp?(reference)
+      end
+    end
+
+    def jump_host_config(host)
+      return unless host.is_a?(Hash)
+
+      reference = host['jump_host'] || host[:jump_host]
+      return unless reference
+
+      host_config(reference) || raise(Error, "Jump host not found: #{reference}")
+    end
+
+    def only_host!(reference)
+      selected = host_config(reference)
+      raise Error, "Host not found: #{reference}" unless selected
+
+      @config['services'] = services.filter_map do |service|
+        hosts = Array(service['hosts'] || service['host']).compact
+        matches = hosts.select { |host| same_host?(host, selected) }
+        next if matches.empty?
+
+        service.merge('hosts' => matches).tap { |entry| entry.delete('host') }
+      end
+      self
+    end
+
     def forward_agent
       return @config['forward_agent'] unless @config['forward_agent'].nil?
 
@@ -64,6 +113,16 @@ module BoringServices
 
     private
 
+    def host_entries
+      services.flat_map { |service| Array(service['hosts'] || service['host']).compact }
+    end
+
+    def same_host?(candidate, selected)
+      return candidate.to_s == selected['host'].to_s unless candidate.is_a?(Hash)
+
+      candidate['host'].to_s == selected['host'].to_s
+    end
+
     def load_config
       raise Error, "Config file not found: #{@config_path}" unless File.exist?(@config_path)
 

data/lib/boring_services/services/haproxy.rb

@@ -124,7 +124,7 @@ module BoringServices
         end
       end
 
-      # rubocop:disable Metrics/AbcSize, Metrics/CyclomaticComplexity, Metrics/MethodLength, Metrics/PerceivedComplexity
+      # rubocop:disable-next Metrics/AbcSize, Metrics/CyclomaticComplexity, Metrics/MethodLength, Metrics/PerceivedComplexity
       def configure_haproxy
         # Check if custom config template is provided
         if service_config['custom_config_template'] && File.exist?(service_config['custom_config_template'])
@@ -239,7 +239,6 @@ module BoringServices
         execute :sudo, :chown, 'root:root', '/etc/haproxy/haproxy.cfg'
         execute :sudo, :chmod, '644', '/etc/haproxy/haproxy.cfg'
       end
-      # rubocop:enable Metrics/AbcSize, Metrics/CyclomaticComplexity, Metrics/MethodLength, Metrics/PerceivedComplexity
 
       def verify_listening_ports
         puts '    Verifying HAProxy is listening on ports...'

data/lib/boring_services/ssh_executor.rb

@@ -2,6 +2,8 @@
 
 require 'sshkit'
 require 'sshkit/dsl'
+require 'net/ssh/proxy/command'
+require 'shellwords'
 
 module BoringServices
   class SSHExecutor
@@ -174,8 +176,10 @@ module BoringServices
           forward_agent: config.forward_agent,
           auth_methods: config.ssh_auth_methods,
           keys_only: !config.use_ssh_agent,
-          use_agent: config.use_ssh_agent
+          use_agent: config.use_ssh_agent,
+          verify_host_key: config.verify_host_key_mode
         }
+        ssh.ssh_options[:user_known_hosts_file] = [config.ssh_known_hosts_file] if config.ssh_known_hosts_file
       end
     end
 
@@ -185,19 +189,48 @@ module BoringServices
         target_host = host['host'] || host[:host]
         raise Error, 'Host entry missing host field' unless target_host
 
-        build_sshkit_host(target_host, host['user'] || host[:user])
+        build_sshkit_host(target_host, host['user'] || host[:user], host)
       else
         host_string = host.to_s
         return SSHKit::Host.new(host_string) if host_string.include?('@')
 
-        build_sshkit_host(host_string, nil)
+        build_sshkit_host(host_string, nil, nil)
       end
     end
 
-    def build_sshkit_host(hostname, user)
+    def build_sshkit_host(hostname, user, host_config)
       sshkit_host = SSHKit::Host.new(hostname)
       sshkit_host.user = user || config.user
+      options = { verify_host_key: config.verify_host_key_mode }
+      options[:user_known_hosts_file] = [config.ssh_known_hosts_file] if config.ssh_known_hosts_file
+      if (jump_host = config.jump_host_config(host_config))
+        options[:proxy] = jump_proxy(jump_host)
+      end
+      sshkit_host.ssh_options = options
       sshkit_host
     end
+
+    def jump_proxy(jump_host)
+      user = jump_host['user'] || config.user
+      command = [
+        'ssh', '-F', '/dev/null',
+        '-o', 'BatchMode=yes',
+        '-o', 'ForwardAgent=no',
+        '-o', "StrictHostKeyChecking=#{open_ssh_host_key_mode}"
+      ]
+      command.push('-o', "UserKnownHostsFile=#{config.ssh_known_hosts_file}") if config.ssh_known_hosts_file
+      command.push('-i', File.expand_path(config.ssh_key), '-o', 'IdentitiesOnly=yes')
+      command.push('-W', '%h:%p', "#{user}@#{jump_host.fetch('host')}")
+      command_line = Shellwords.join(command).gsub('\\%h', '%h').gsub('\\%p', '%p')
+      Net::SSH::Proxy::Command.new(command_line)
+    end
+
+    def open_ssh_host_key_mode
+      case config.verify_host_key_mode
+      when :accept_new then 'accept-new'
+      when :never then 'no'
+      else 'yes'
+      end
+    end
   end
 end

data/lib/boring_services/version.rb

@@ -1,3 +1,3 @@
 module BoringServices
-  VERSION = '0.8.1'.freeze
+  VERSION = '0.9.0'.freeze
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: boring_services
 version: !ruby/object:Gem::Version
-  version: 0.8.1
+  version: 0.9.0
 platform: ruby
 authors:
 - BoringCache
@@ -100,7 +100,7 @@ homepage: https://github.com/boringcache/services
 licenses:
 - MIT
 metadata:
-  source_code_uri: https://github.com/boringcache/services
+  source_code_uri: https://github.com/boringcache/services/tree/v0.9.0
   documentation_uri: https://github.com/boringcache/services/blob/main/README.md
   changelog_uri: https://github.com/boringcache/services/blob/main/CHANGELOG.md
   bug_tracker_uri: https://github.com/boringcache/services/issues