cifrado 0.1

data/lib/cifrado/cli/list.rb

@@ -0,0 +1,64 @@
+module Cifrado
+  class CLI
+  # @returns [Array] a list of Fog::OpenStack::File or
+    # Fog::OpenStack::Directory
+    #
+    desc "list [CONTAINER]", "List containers and objects"
+    option :list_segments, :type => :boolean
+    option :decrypt_filenames, :type => :boolean
+    option :display_hash, :type => :boolean
+    def list(container = nil)
+      client = client_instance
+      list = []
+      if container
+        dir = client.service.directories.get container
+        if dir
+          Log.info "Listing objects in '#{container}'"
+          files = dir.files
+          files.each do |f|
+            fname = f.key
+            unless options[:decrypt_filenames]
+              list << fname
+              Log.info fname
+              next
+            end
+            # Skip segments
+            next if fname =~ /\/segments\/\d+\.\d{2}\/\d+\/\d+/ and \
+                    not options[:list_segments]
+
+            # Raises exception if the object is a
+            # manifest but there are no segments available
+            begin 
+              metadata = f.metadata
+            rescue Fog::Storage::OpenStack::NotFound
+              Log.warn "The file #{fname} is an object manifest, but there are no segments"
+              Log.warn "available. I won't be able to decrypt the filename."
+              Log.info fname
+              list << fname
+              next
+            end
+            if metadata[:encrypted_name] 
+              fname = decrypt_filename metadata[:encrypted_name], 
+                                       @config[:password] + @config[:secure_random]
+              Log.info "#{fname.ljust(55)} #{set_color("[encrypted]",:red, :bold)}"
+              Log.info "  hash: #{f.key}" if options[:display_hash]
+            else
+              Log.info fname.ljust(55)
+            end
+            list << fname
+          end 
+          list
+        else
+          raise "Container '#{container}' not found"
+        end
+      else
+        Log.info "Listing containers"
+        directories = client.service.directories
+        directories = directories.map { |d| Log.info d.key; d.key }
+        directories
+      end
+    end
+  end
+end
+
+

data/lib/cifrado/cli/post.rb

@@ -0,0 +1,10 @@
+module Cifrado
+  class CLI
+    desc "post CONTAINER [DESCRIPTION]", "Create a container"
+    def post(container, description = '')
+      client = client_instance
+      client.service.directories.create :key => container, 
+                                        :description => description
+    end
+  end
+end

data/lib/cifrado/cli/progressbar.rb

@@ -0,0 +1,86 @@
+module Cifrado
+  class Progressbar
+    include Cifrado::Utils
+
+    def initialize(segments, current_segment, options = {})
+      @style = (options[:style] || :fancy).to_sym
+      @segments = segments
+      @current_segment = current_segment
+    end
+
+    def block
+      if @style == :fancy
+        fancy 
+      elsif @style == :fast
+        fast
+      elsif @style == :infinite
+        infinite
+      else
+        nil
+      end
+    end
+    
+    private
+    def fancy
+      require 'ruby-progressbar'
+      title = (@segments == 1 ? \
+               'Progress' : "Segment [#{@current_segment}/#{@segments}]")
+      progressbar = ProgressBar.create :title => title, :total => 100,
+                                       :format => '%t: |%B| %p%% [%E ]'
+      read = 0
+      percentage = 0
+      time = Time.now.to_f
+      last_time = Time.now.to_f
+      Proc.new do |total, bytes| 
+        next if total == 0
+        read += bytes
+        newt = Time.now.to_f 
+        if newt - last_time > 1
+          last_time = newt
+          percentage = (read*100/total)
+          kbs = "%0.2f" % (read*8/((Time.now.to_f - time)*1024*1024))
+          progressbar.title = " [#{kbs} Mb/s] #{title}"
+          progressbar.progress = percentage unless percentage > 100
+        end
+        progressbar.finish if (progressbar.progress < 100) and \
+          read >= total
+      end
+    end
+
+    def infinite
+      read = 0
+      time = Time.now.to_f
+      Proc.new do |tbytes, bytes| 
+        read += bytes
+        kbs = "%0.2f" % (read*8/((Time.now.to_f - time)*1024*1024))
+        print "Progress (unknown total size): #{humanize_bytes(read).ljust(10)} read (#{kbs} Mb/s)".ljust(60)
+        print "\r"
+      end
+    end
+
+    def fast
+      title = (@segments == 1) ? ' ' : \
+              " [#{@current_segment}/#{@segments}]"
+
+      read = 0
+      progressbar_finished = false
+      time = Time.now.to_f
+      Proc.new do |tbytes, bytes| 
+        read += bytes
+        percentage = ((read*100.0/tbytes))
+        kbs = "%0.2f" % (read*8/((Time.now.to_f - time)*1024*1024))
+        print "\r"
+        print "Progress (#{percentage.round}%) #{kbs} Mb/s#{title}: "
+        print "#{humanize_bytes(read)} read"
+        if (read + bytes) >= tbytes and !progressbar_finished
+          progressbar_finished = true
+          percentage = 100
+          print "\r"
+          print "Progress (#{percentage.round}%) #{title}: "
+          puts
+        end
+      end
+    end
+
+  end
+end

data/lib/cifrado/cli/saio.rb

@@ -0,0 +1,11 @@
+require 'cifrado/cli/saio/base'
+
+module Cifrado
+  class CLI
+    desc "saio SUBCOMMAND ...ARGS", "Bootstrap a Swift installation"
+    subcommand "saio", Saio
+  end
+end
+
+require 'cifrado/cli/saio/bootstrap'
+require 'cifrado/cli/saio/destroy'

data/lib/cifrado/cli/saio/base.rb

@@ -0,0 +1,20 @@
+module Cifrado
+  class Saio < Thor
+    include Cifrado::Utils
+
+    class_option :provider,     :type => :string
+    class_option :api_key,      :type => :string, :required => true
+    class_option :client_id,    :type => :string, :required => true
+    
+    private
+    def service
+      return @service if @service
+      client_id = options[:client_id]
+      api_key   = options[:api_key]
+      @service = Fog::Compute.new :provider => 'DigitalOcean',
+                                  :digitalocean_api_key   => api_key,
+                                  :digitalocean_client_id => client_id
+    end
+
+  end
+end

data/lib/cifrado/cli/saio/bootstrap.rb

@@ -0,0 +1,118 @@
+module Cifrado
+  class Saio < Thor
+    
+    desc 'bootstrap', 'Bootstrap a Swift All-In-One installation'
+    option :server_name,    :type => :string, :default => 'cifrado-saio'
+    option :ssh_key_name,   :type => :string, :required => true
+    option :save_settings,  :type => :boolean
+    option :bootstrap_debug, :type => :boolean
+    def bootstrap
+      require 'shexy'
+
+      Log.level = Logger::DEBUG if options[:bootstrap_debug]
+
+      begin
+        available_keys = service.list_ssh_keys.body['ssh_keys']
+        key = available_keys.find { |k| k['name'] == options[:ssh_key_name] }
+        unless key 
+          raise "SSH key #{options[:ssh_key_name]} not available."
+        end
+
+        server_name = options[:server_name]
+        server = service.servers.find { |s| s.name == server_name }
+        if server
+          raise "Server #{server_name} is currently running."
+        end
+
+        flavor = service.flavors.find { |f| f.name == '512MB' }
+        image = service.images.find { |i| i.name == 'Ubuntu 12.04 x64 Server' }
+        region = service.regions.first
+        Log.info "Creating server #{server_name}..."
+        server = service.servers.create :name        => options[:server_name],
+                                        :image_id    => image.id,
+                                        :flavor_id   => flavor.id,
+                                        :region_id   => region.id,
+                                        :ssh_key_ids => key['id']
+        Log.info "Server provisioned, waiting for IP..."
+        server.wait_for(120) { ip_address }
+        Log.info "Server IP: #{server.ip_address}"
+
+        #
+        # Copy the provisioning script to the server
+        #
+        Shexy.host = server.ip_address
+        Shexy.user = 'root'
+        Shexy.flags = { :paranoid => false }
+        Log.info 'Waiting for SSH...'
+        Shexy.wait_for_ssh(90)
+        Log.info 'Bootstraping Swift All-In-One (this may take a while)...'
+
+        if RUBY_VERSION >= '1.9'
+          secure_random = SecureRandom.hex.encode('UTF-8')
+          user_password = SecureRandom.hex.encode('UTF-8')
+        else
+          user_password = SecureRandom.hex
+          secure_random = SecureRandom.hex
+        end
+      
+        script = bootstrap_script(user_password)
+        Shexy.copy_to script, '/root/saio.sh'
+
+        # Provision Swift+Keystone
+        Shexy.exe '/bin/bash /root/saio.sh' do |out, err|
+          out.each_line { |l| Log.debug l } 
+        end
+
+        config = {
+          :auth_url => "https://#{server.ip_address}:5000/v2.0/tokens",
+          :username => 'admin',
+          :tenant   => 'admin',
+          :password => user_password,
+          :secure_random => secure_random
+        }
+
+        # Provisioning finished, print details
+        Log.info
+        Log.info 'Swift is ready. Login details:'
+        Log.info
+        Log.info "auth_url:      https://#{server.ip_address}:5000/v2.0/tokens"
+        Log.info "username:      admin"
+        Log.info "tenant:        admin"
+        Log.info "password:      #{user_password}"
+        Log.info "secure_random: #{secure_random}"
+        Log.info
+
+        save_settings(config) if options[:save_settings]
+      rescue Excon::Errors::Found => e
+        raise "Authentication failed"
+      end
+    end
+
+    private
+    def save_settings(config)
+      config_file = File.join(ENV['HOME'], '.config/cifrado/cifradorc')
+      FileUtils.mkdir_p File.join(ENV['HOME'], '.config/cifrado')
+      if File.exist?(config_file)
+        raise 'Cifrado config file exists. Refusing to overwrite.'
+      else
+        Log.info "Saving settings to #{config_file} as requested."
+        File.open config_file, 'w' do |f|
+          f.puts config.to_yaml
+        end
+      end
+    end
+
+    def bootstrap_script(password)
+      require 'erb'
+      template = File.join(File.dirname(__FILE__), 'scripts/saio.sh.erb')
+      result = ERB.new(File.read(template)).result(binding)
+      tmpfile = "/tmp/#{SecureRandom.hex}"
+      File.open tmpfile, 'w' do |f|
+        f.puts result
+      end
+      tmpfile
+    end
+
+  end
+end
+

data/lib/cifrado/cli/saio/destroy.rb

@@ -0,0 +1,16 @@
+module Cifrado
+  class Saio < Thor
+
+    desc 'destroy', 'Destroy bootstrapped server'
+    option :server_name,  :type => :string, :default => 'cifrado-saio'
+    def destroy
+      s = service.servers.find {|s| s.name == options[:server_name] }
+      if s
+        Log.info "Destroying server #{options[:server_name]}."
+        s.destroy 
+      end
+    end
+
+  end
+end
+

data/lib/cifrado/cli/saio/scripts/saio.sh.erb

@@ -0,0 +1,445 @@
+#!/bin/bash
+set -e
+
+#
+# SETUP VARIABLES
+# 
+# In GB
+SWIFT_DISK_SIZE=15
+# keystone variables
+PASSWORD=<%= password %>
+KROLE=admin
+# user password
+ADMIN_USER=admin
+
+# Capture ID when creating stuff
+function get_id () {
+    echo `"$@" | awk '/ id / { print $4 }'`
+}
+
+echo deb http://ubuntu-cloud.archive.canonical.com/ubuntu precise-updates/folsom main > /etc/apt/sources.list.d/folsom.list
+apt-get update
+apt-get install -y ubuntu-cloud-keyring
+apt-get update
+apt-get install -y keystone python-software-properties telnet xfsprogs pwgen ssl-cert curl wget ca-certificates tcpflow
+add-apt-repository -y ppa:bvox/ppa
+apt-get update
+apt-get install -y swift swift-account swift-object swift-container swift-proxy pwgen ssl-cert curl wget ca-certificates rsync memcached python-keystone stud
+
+
+export SERVICE_ENDPOINT=http://127.0.0.1:35357/v2.0
+export SERVICE_TOKEN=$(pwgen -s 18 1)
+
+
+cat > /etc/keystone/keystone.conf << EOF
+[DEFAULT]
+admin_token = $SERVICE_TOKEN
+bind_host = 127.0.0.1
+log_file = keystone.log
+log_dir = /var/log/keystone
+# Use syslog for logging.
+use_syslog = True
+log_config = /etc/keystone/logging.conf
+
+[sql]
+connection = sqlite:////var/lib/keystone/keystone.db
+
+[identity]
+driver = keystone.identity.backends.sql.Identity
+
+[catalog]
+driver = keystone.catalog.backends.sql.Catalog
+
+[token]
+driver = keystone.token.backends.sql.Token
+
+[policy]
+driver = keystone.policy.backends.rules.Policy
+
+[ec2]
+driver = keystone.contrib.ec2.backends.sql.Ec2
+
+[ssl]
+
+[signing]
+
+[ldap]
+
+[filter:debug]
+paste.filter_factory = keystone.common.wsgi:Debug.factory
+
+[filter:token_auth]
+paste.filter_factory = keystone.middleware:TokenAuthMiddleware.factory
+
+[filter:admin_token_auth]
+paste.filter_factory = keystone.middleware:AdminTokenAuthMiddleware.factory
+
+[filter:xml_body]
+paste.filter_factory = keystone.middleware:XmlBodyMiddleware.factory
+
+[filter:json_body]
+paste.filter_factory = keystone.middleware:JsonBodyMiddleware.factory
+
+[filter:user_crud_extension]
+paste.filter_factory = keystone.contrib.user_crud:CrudExtension.factory
+
+[filter:crud_extension]
+paste.filter_factory = keystone.contrib.admin_crud:CrudExtension.factory
+
+[filter:ec2_extension]
+paste.filter_factory = keystone.contrib.ec2:Ec2Extension.factory
+
+[filter:s3_extension]
+paste.filter_factory = keystone.contrib.s3:S3Extension.factory
+
+[filter:url_normalize]
+paste.filter_factory = keystone.middleware:NormalizingFilter.factory
+
+[filter:stats_monitoring]
+paste.filter_factory = keystone.contrib.stats:StatsMiddleware.factory
+
+[filter:stats_reporting]
+paste.filter_factory = keystone.contrib.stats:StatsExtension.factory
+
+[app:public_service]
+paste.app_factory = keystone.service:public_app_factory
+
+[app:admin_service]
+paste.app_factory = keystone.service:admin_app_factory
+
+[pipeline:public_api]
+pipeline = stats_monitoring url_normalize token_auth admin_token_auth xml_body json_body debug ec2_extension user_crud_extension public_service
+
+[pipeline:admin_api]
+pipeline = stats_monitoring url_normalize token_auth admin_token_auth xml_body json_body debug stats_reporting ec2_extension s3_extension crud_extension admin_service
+
+[app:public_version_service]
+paste.app_factory = keystone.service:public_version_app_factory
+
+[app:admin_version_service]
+paste.app_factory = keystone.service:admin_version_app_factory
+
+[pipeline:public_version_api]
+pipeline = stats_monitoring url_normalize xml_body public_version_service
+
+[pipeline:admin_version_api]
+pipeline = stats_monitoring url_normalize xml_body admin_version_service
+
+[composite:main]
+use = egg:Paste#urlmap
+/v2.0 = public_api
+/ = public_version_api
+
+[composite:admin]
+use = egg:Paste#urlmap
+/v2.0 = admin_api
+/ = admin_version_api
+EOF
+
+service keystone restart
+# Wait for the dust to settle
+sleep 5
+
+#
+# setup keystone user
+#
+IPADDR=$(/sbin/ifconfig eth0 | grep 'inet addr:' | cut -d: -f2 | awk '{ print $1}')
+ADMIN_ROLE=$(get_id keystone role-create --name=admin)
+TENANT=$(get_id keystone tenant-create --name=$ADMIN_USER)
+KUSER=$(get_id keystone user-create --name=$ADMIN_USER \
+                                    --email=none@devnull.lan \
+                                    --pass=$PASSWORD \
+                                    --tenant_id=$TENANT)
+keystone user-role-add --tenant_id=$TENANT --user-id=$KUSER --role-id=$ADMIN_ROLE
+KSERVICE=$(get_id keystone service-create --name=keystone \
+                                          --type=identity \
+                                          --description="OpenStack Identity")
+keystone endpoint-create --region region1 \
+                         --service_id $KSERVICE \
+                         --publicurl "http://$IPADDR:5000/v2.0" \
+                         --adminurl "http://127.0.0.1:35357/v2.0" \
+                         --internalurl "http://127.0.0.1:5000/v2.0"
+
+##
+## Swift service stuff
+##
+# The password here goes to the Swift proxy server
+# configuration
+# [filter:authtoken]
+# paste.filter_factory = keystone.middleware.auth_token:filter_factory
+# signing_dir = /etc/swift
+# auth_host = keystone
+# auth_port = 35357
+# auth_protocol = http
+# auth_uri = http://keystone:5000
+# admin_tenant_name = service
+# admin_user = swift
+# admin_password = secret
+# delay_auth_decision = 1
+PASSWORD=$(pwgen -s 18 1)
+TENANT=$(get_id keystone tenant-create --name=swift)
+ROLE=$(get_id keystone role-create --name=swiftoperator)
+KUSER=$(get_id keystone user-create --name=swift \
+                                    --pass=$PASSWORD \
+                                    --tenant_id=$TENANT)
+keystone user-role-add --tenant_id=$TENANT --user-id=$KUSER --role-id=$ADMIN_ROLE
+KSERVICE=$(get_id keystone service-create --name=swift \
+                                          --type=object-store \
+                                          --description="Swift Object-store Service")
+keystone endpoint-create --region region1 \
+                         --service_id $KSERVICE \
+                         --publicurl "https://$IPADDR/v1/AUTH_\$(tenant_id)s" \
+                         --adminurl "http://127.0.0.1:8080" \
+                         --internalurl 'http://127.0.0.1:8080/v1/AUTH_$(tenant_id)s'
+
+cat > keystone-env.sh << EOF
+export SERVICE_ENDPOINT=http://127.0.0.1:35357/v2.0
+export SERVICE_TOKEN=$SERVICE_TOKEN
+EOF
+
+##
+## SWIFT SETUP
+##
+
+IPADDR=$(/sbin/ifconfig eth0 | grep 'inet addr:' | cut -d: -f2 | awk '{ print $1}')
+SWIFT_HASH=`pwgen -s 18 1`
+mkdir -p /var/cache/swift
+mkdir -p /srv/node/disk1
+truncate -s ${SWIFT_DISK_SIZE}GB /srv/swift-disk
+mkfs.xfs -i size=1024 /srv/swift-disk
+
+cat > /etc/rsyncd.conf << EOF
+pid file = /var/run/rsyncd.pid
+uid = swift
+gid = swift
+syslog facility = local3
+address = 127.0.0.1
+reverse lookup = no
+
+[ account ]
+path            = /srv/node
+read only       = false
+max connections = 25
+lock file =     /var/lock/account.lock
+
+[ container ]
+path            = /srv/node
+read only       = false
+max connections = 25
+lock file =     /var/lock/container.lock
+
+# This file is being maintained by Puppet.
+# DO NOT EDIT
+
+[ object ]
+path            = /srv/node
+read only       = false
+max connections = 25
+lock file =     /var/lock/object.lock
+EOF
+
+cat > /etc/default/rsync << EOF
+RSYNC_ENABLE=true
+RSYNC_NICE=''
+RSYNC_OPTS=''
+EOF
+
+service rsync start
+
+cat > /etc/swift/swift.conf << EOF
+[swift-hash]
+swift_hash_path_suffix = $SWIFT_HASH
+EOF
+
+
+cat > /etc/swift/account-server.conf << EOF
+[DEFAULT]
+devices = /srv/node
+bind_ip = 127.0.0.1
+bind_port = 6002
+mount_check = false
+user = swift
+log_facility = LOG_LOCAL2
+workers = 1
+db_preallocation = on
+
+[pipeline:main]
+pipeline = recon account-server
+
+[app:account-server]
+use = egg:swift#account
+
+[account-replicator]
+concurrency = 1
+
+[account-auditor]
+
+[account-reaper]
+concurrency = 1
+[filter:recon]
+use = egg:swift#recon
+recon_cache_path = /var/cache/swift
+EOF
+
+cat > /etc/swift/object-server.conf << EOF
+[DEFAULT]
+devices = /srv/node
+bind_ip = 127.0.0.1
+bind_port = 6000
+mount_check = false
+user = swift
+log_facility = LOG_LOCAL2
+workers = 1
+
+[pipeline:main]
+pipeline = recon object-server
+
+[app:object-server]
+use = egg:swift#object
+
+[object-replicator]
+concurrency = 1
+
+[object-updater]
+concurrency = 1
+
+[object-auditor]
+[filter:recon]
+use = egg:swift#recon
+recon_cache_path = /var/cache/swift
+EOF
+
+cat > /etc/swift/container-server.conf << EOF
+[DEFAULT]
+devices = /srv/node
+bind_ip = 127.0.0.1
+bind_port = 6001
+mount_check = false
+user = swift
+log_facility = LOG_LOCAL2
+workers = 1
+db_preallocation = on
+
+[pipeline:main]
+pipeline = recon container-server
+
+[app:container-server]
+use = egg:swift#container
+
+[container-replicator]
+concurrency = 1
+
+[container-updater]
+concurrency = 1
+
+[container-auditor]
+
+[container-sync]
+[filter:recon]
+use = egg:swift#recon
+recon_cache_path = /var/cache/swift
+EOF
+
+cat > /etc/swift/proxy-server.conf << EOF
+[DEFAULT]
+bind_port = 8080
+bind_ip = 127.0.0.1
+workers = 1
+user = swift
+set log_level = INFO
+log_facility = LOG_LOCAL2
+
+[pipeline:main]
+pipeline = catch_errors healthcheck cache ratelimit authtoken keystone proxy-logging proxy-server
+
+[app:proxy-server]
+use = egg:swift#proxy
+allow_account_management = true
+account_autocreate = true
+
+[filter:authtoken]
+paste.filter_factory = keystone.middleware.auth_token:filter_factory
+signing_dir = /etc/swift
+auth_host = localhost
+auth_port = 35357
+auth_protocol = http
+auth_uri = http://localhost:5000
+admin_tenant_name = swift
+admin_user = swift
+admin_password = $PASSWORD
+delay_auth_decision = 1
+
+[filter:cache]
+use = egg:swift#memcache
+memcache_servers = 127.0.0.1
+
+[filter:catch_errors]
+use = egg:swift#catch_errors
+
+
+[filter:healthcheck]
+use = egg:swift#healthcheck
+
+[filter:ratelimit]
+use = egg:swift#ratelimit
+clock_accuracy = 1000
+max_sleep_time_seconds = 60
+log_sleep_time_seconds = 0
+rate_buffer_seconds = 5
+account_ratelimit = 0
+
+[filter:proxy-logging]
+use = egg:swift#proxy_logging
+
+
+[filter:keystone]
+paste.filter_factory = keystone.middleware.swift_auth:filter_factory
+operator_roles = admin, SwiftOperator
+is_admin = true
+cache = swift.cache
+EOF
+
+for t in object container account; do
+  swift-ring-builder /etc/swift/$t.builder create 18 1 1
+  swift-ring-builder /etc/swift/$t.builder write_ring
+done
+  
+swift-ring-builder /etc/swift/object.builder add z1-127.0.0.1:6000/disk1 $SWIFT_DISK_SIZE
+swift-ring-builder /etc/swift/container.builder add z1-127.0.0.1:6001/disk1 $SWIFT_DISK_SIZE
+swift-ring-builder /etc/swift/account.builder add z1-127.0.0.1:6002/disk1 $SWIFT_DISK_SIZE
+
+for t in object container account; do
+  swift-ring-builder /etc/swift/$t.builder rebalance
+done
+
+cat > /etc/rc.local << EOF
+mount -t xfs -o noatime,nodiratime,nobarrier,logbufs=8 /srv/swift-disk /srv/node/disk1
+exit 0
+EOF
+
+mount -t xfs -o noatime,nodiratime,nobarrier,logbufs=8 /srv/swift-disk /srv/node/disk1
+echo '/srv/swift-disk    /srv/node/disk1 xfs     noatime,nodiratime,nobarrier,logbufs=8 0 1' >> /etc/fstab
+chown swift:swift -R /etc/swift
+chown swift:swift /var/cache/swift
+chown -R swift:swift /srv/node/*
+swift-init all start
+
+#
+# stud setup
+#
+cp /etc/ssl/certs/ssl-cert-snakeoil.pem /etc/stud/cert.pem
+cat /etc/ssl/private/ssl-cert-snakeoil.key >> /etc/stud/cert.pem
+openssl dhparam -rand - 1024 >> /etc/stud/cert.pem
+cat > /etc/stud/keystone.conf << EOF
+OPTIONS="-s -f $IPADDR,5000 -b 127.0.0.1,5000 --ssl -n 1 "
+CERT="/etc/stud/cert.pem"
+EOF
+
+cat > /etc/stud/swift.conf << EOF
+OPTIONS="-s -f $IPADDR,443 -b 127.0.0.1,8080 --ssl -n 1 "
+CERT="/etc/stud/cert.pem"
+EOF
+
+service stud start
+# stud init script braindamage
+service stud restart