exos 0.0.1

checksums.yaml

@@ -0,0 +1,7 @@
+---
+SHA1:
+  metadata.gz: 93d4886d90a636e12a7970c05205cfaa113c8106
+  data.tar.gz: 5a53724348f649687a9fdecbe883474485f141f0
+SHA512:
+  metadata.gz: 3534cc7a278bf63ba52fb85049b62793dfc73b88a3dbd5dff9961a9d39f2aac775c27a816399b0028b411e9ba90dd136b0e442d8dce854fb5c410080c6097375
+  data.tar.gz: a7ff4bc512cedd2d29f4b8b1efb48fd93c2508b6c2eca4d6997b9351c0288bc9750cca67c017f0c760b30297bf41a4c794b7a9bfb046f8d6c99aec1f33693e14

data/.gitignore

@@ -0,0 +1,22 @@
+*.gem
+*.rbc
+.bundle
+.config
+.yardoc
+Gemfile.lock
+InstalledFiles
+_yardoc
+coverage
+doc/
+lib/bundler/man
+pkg
+rdoc
+spec/reports
+test/tmp
+test/version_tmp
+tmp
+*.bundle
+*.so
+*.o
+*.a
+mkmf.log

data/Gemfile

@@ -0,0 +1,4 @@
+source 'https://rubygems.org'
+
+# Specify your gem's dependencies in exos.gemspec
+gemspec

data/LICENSE.txt

@@ -0,0 +1,22 @@
+Copyright (c) 2014 Piers Mainwaring
+
+MIT License
+
+Permission is hereby granted, free of charge, to any person obtaining
+a copy of this software and associated documentation files (the
+"Software"), to deal in the Software without restriction, including
+without limitation the rights to use, copy, modify, merge, publish,
+distribute, sublicense, and/or sell copies of the Software, and to
+permit persons to whom the Software is furnished to do so, subject to
+the following conditions:
+
+The above copyright notice and this permission notice shall be
+included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
+NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE
+LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION
+OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
+WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

data/Makefile

@@ -0,0 +1,22 @@
+VERSION=$(shell cat VERSION)
+
+.PHONY: default all clean install
+default: clean all
+all: build install alias
+
+build: lib/exos/version.rb
+	gem build exos.gemspec
+
+lib/exos/version.rb:
+	mkdir -p $(@D)
+	@echo 'module Exos\n	VERSION = "$(VERSION)"\nend' > $@
+
+install:
+	gem install exos-$(VERSION).gem --no-rdoc --no-ri
+	rbenv rehash
+
+alias:
+	alias exos=/Users/piers/.rbenv/shims/exos
+
+clean:
+	rm -rf lib/exos/version.rb

data/README.md

@@ -0,0 +1,29 @@
+# Exos
+
+TODO: Write a gem description
+
+## Installation
+
+Add this line to your application's Gemfile:
+
+    gem 'exos'
+
+And then execute:
+
+    $ bundle
+
+Or install it yourself as:
+
+    $ gem install exos
+
+## Usage
+
+TODO: Write usage instructions here
+
+## Contributing
+
+1. Fork it ( https://github.com/[my-github-username]/exos/fork )
+2. Create your feature branch (`git checkout -b my-new-feature`)
+3. Commit your changes (`git commit -am 'Add some feature'`)
+4. Push to the branch (`git push origin my-new-feature`)
+5. Create a new Pull Request

data/Rakefile

@@ -0,0 +1,2 @@
+require "bundler/gem_tasks"
+

data/VERSION

@@ -0,0 +1 @@
+0.0.1

data/bin/exos

@@ -0,0 +1,5 @@
+#!/usr/bin/env ruby
+$:.unshift File.expand_path('../../lib', __FILE__)
+
+require "exos"
+::Exos::Application.new.run if $0 == __FILE__

data/exos.gemspec

@@ -0,0 +1,29 @@
+# coding: utf-8
+lib = File.expand_path('../lib', __FILE__)
+$LOAD_PATH.unshift(lib) unless $LOAD_PATH.include?(lib)
+require 'exos/version'
+
+Gem::Specification.new do |spec|
+  spec.name          = "exos"
+  spec.version       = Exos::VERSION
+  spec.authors       = ["Piers Mainwaring"]
+  spec.email         = ["piers@impossibly.org"]
+  spec.summary       = %q{Write a short summary. Required.}
+  spec.description   = %q{Write a longer description. Optional.}
+  spec.homepage      = ""
+  spec.license       = "MIT"
+
+  spec.files         = `git ls-files -z`.split("\x0")
+  spec.executables   = spec.files.grep(%r{^bin/}) { |f| File.basename(f) }
+  spec.test_files    = spec.files.grep(%r{^(test|spec|features)/})
+  spec.require_paths = ["lib"]
+
+  spec.add_runtime_dependency 'commander',      '~> 4.2'
+  spec.add_runtime_dependency 'terminal-table', '~> 1.4'
+  spec.add_runtime_dependency 'fog',            '~> 1.23'
+  spec.add_runtime_dependency 'mina',           '~> 0.3'
+  spec.add_runtime_dependency 'colorize',       '~> 0.7'
+
+  spec.add_development_dependency "bundler", "~> 1.6"
+  spec.add_development_dependency "rake",    "~> 10.1"
+end

data/lib/exos.rb

@@ -0,0 +1,25 @@
+require "commander"
+require "terminal-table"
+require "colorize"
+require "fog"
+
+require "exos/version"
+
+require "exos/commands"
+require "exos/commands/status"
+require "exos/commands/ssh"
+require "exos/commands/keys"
+
+module Exos
+  class Application
+    include ::Commander::Methods
+
+    def run
+      program :name, "Exos"
+      program :version, ::Exos::VERSION
+      program :description, "Exos controller."
+
+      run!
+    end
+  end
+end

data/lib/exos/commands.rb

@@ -0,0 +1,31 @@
+module Exos
+  module Commands
+    class Command
+
+      class << self
+        include ::Commander::Methods
+      end
+
+      attr_reader :args, :options
+
+      def initialize(args, options)
+        @args = args
+        @options = options
+      end
+
+      private
+
+        def ec2
+          @ec2 ||= ::Fog::Compute::AWS.new
+        end
+
+        def elb
+          @elb ||= ::Fog::AWS::ELB.new
+        end
+
+        def self.humanize(str)
+          str.gsub("_", " ").gsub(/\b(?<!['’`])[a-z]/) { $&.capitalize }
+        end
+    end
+  end
+end

data/lib/exos/commands/keys.rb

@@ -0,0 +1,288 @@
+require 'json'
+
+module Exos
+  module Commands
+    class Keys < Command
+
+      command :keys do |c|
+        c.syntax = "exos keys [--grant email_address] [--revoke email_address [--delete]] [--role bastion_role]"
+
+        c.option "--grant email_address", String, "Add access for user with email_address."
+        c.option "--revoke email_address", String, "Revoke access for user with email_address."
+        c.option "--delete", "Delete key entry permanently. Defaults to false (comments-out instead)."
+        c.option "--role bastion_role", String, "Value of 'Role' tag for bastion hosts. Defaults to 'ssh'."
+        c.option "--list", "Default action. Lists email addresses and public keys of users with access."
+
+        c.description = "Adds or removes access by email address and public key on bastion servers."
+        c.action do |args, options|
+          options.default role: "ssh", delete: false
+          new(args, options).run
+        end
+      end
+
+      PATTERN_KEY_LINE   = /ssh-rsa/
+      PATTERN_ATTRS_LINE = /\A### exos-key (.*)/
+
+      LOCKFILE_NAME = "exos.keys.lock"
+
+      def run
+        authorized_keys.backup!
+        Bastions.role = options.role
+
+        if email = options.grant
+          add_key(email)
+        elsif email = options.revoke
+          remove_key(email, options.delete)
+        else
+          print_keys_list
+        end
+      end
+
+      private
+
+        def authorized_keys
+          @authorized_keys ||= AuthorizedKeys.new
+        end
+
+        def print_keys_list
+          table = ::Terminal::Table.new({
+            title: "Users with access",
+            headings: ["Email address", "Status", "Created at", "Updated at", "Public key"]
+          })
+
+          authorized_keys.each do |_, auth_key|
+            # Allow administrative keys to be hidden.
+            next if auth_key.status == "IGNORE"
+
+            cells = [
+              auth_key.email,
+              auth_key.status,
+              auth_key.created_at,
+              auth_key.updated_at,
+              auth_key.key_fragment
+            ].map do |cell|
+              cell.to_s.send( auth_key.active? ? :green : :red )
+            end
+
+            table << cells
+          end
+
+          puts table
+        end
+
+        def add_key(email)
+          if found_key = authorized_keys[email]
+            found_key.activate
+          else
+            key_text = ask("Enter public key:")
+            authorized_keys.add( Key.new(email: email, key: key_text) )
+          end
+
+          authorized_keys.persist!
+
+          print_keys_list
+        end
+
+        def remove_key(email, delete)
+          if found_key = authorized_keys[email]
+            if delete
+              authorized_keys.remove(found_key)
+            else
+              found_key.deactivate
+            end
+
+            authorized_keys.persist!
+          else
+            abort "No key found."
+          end
+
+          print_keys_list
+        end
+
+
+        class AuthorizedKeys < Hash
+            def add(key)
+              self[key.email] = key
+            end
+
+            def remove(key)
+              delete(key.email)
+            end
+
+            def to_s
+              reduce("") do |out, (_, key)|
+                out << key.to_s
+              end
+            end
+
+            def persist!
+              Bastions.exec("echo '#{to_s}' > ~/.ssh/authorized_keys")
+            end
+
+            def backup!
+              File.open( File.expand_path("~/.exos-keys"), "w" ) { |file| file << raw_keys }
+            end
+
+            def initialize(*)
+              super
+
+              lines = raw_keys.lines.map(&:chomp).reject(&:empty?)
+
+              idx = 0
+              while idx < lines.count
+                attrs_line = lines[idx]
+
+                unless attrs_line.match(/\A### exos-key/)
+                  idx += 1
+                  next
+                end
+
+                key_line = lines[idx + 1]
+                add( Key.parse(attrs_line, key_line) )
+                idx += 2
+              end
+            end
+
+            private
+
+              def raw_keys
+                @raw_keys ||= Bastions.exec("cat ~/.ssh/authorized_keys").stdout
+              end
+
+              def reset!
+                @raw_keys = nil
+                @all = nil
+              end
+        end
+
+
+        class Key
+          attr_accessor :email, :key, :created_at, :updated_at, :status
+
+          def self.parse(attrs_line, key_line)
+            if attrs_line.match(PATTERN_ATTRS_LINE)
+              attrs = JSON.parse($1)
+
+              new_key = new(
+                email:      attrs["email"],
+                status:     attrs["status"],
+                created_at: attrs["created_at"],
+                updated_at: attrs["updated_at"]
+              )
+
+              if key_line.match(PATTERN_KEY_LINE)
+                new_key.key = key_line.chomp
+              end
+
+              new_key
+            end
+          end
+
+          def initialize(attrs = {})
+            self.email      = attrs.fetch(:email)
+            self.key        = attrs.fetch(:key, nil)
+            self.status     = attrs.fetch(:status, "active")
+            self.created_at = attrs.fetch(:created_at, Time.now)
+            self.updated_at = attrs.fetch(:updated_at, Time.now)
+          end
+
+          def key=(text)
+            if text && !text.match(/\A(# )?ssh-rsa .+/)
+              abort "Invalid key."
+            end
+
+            @key = text
+          end
+
+          def key_fragment
+            "..." + uncomment(self.key).split[1][-20..-1] if self.key
+          end
+
+          def attributes
+            {
+              email:      self.email,
+              status:     self.status,
+              created_at: self.created_at,
+              updated_at: self.updated_at
+            }
+          end
+
+          def touch
+            self.updated_at = Time.now
+          end
+
+          def valid?
+            !!self.email && !!self.key
+          end
+
+          def active?
+            self.status == "active"
+          end
+
+          def activate
+            self.status = "active"
+            self.key = uncomment(self.key)
+          end
+
+          def deactivate
+            self.status = "inactive"
+            self.key = comment(self.key)
+          end
+
+          def comment(key); "# #{key}"; end
+          def uncomment(key); self.key.sub(/\A# /, ""); end
+
+          def to_s
+            escape( ["", "### exos-key #{ JSON.dump(attributes) }", self.key, ""].join("\n") )
+          end
+
+          def escape(text)
+            text.gsub("'", "\'")
+          end
+        end
+
+
+        class Bastions
+          class << self
+            attr_accessor :role
+
+            def all
+              @all ||= begin
+                bastions = ec2.servers.all("tag:Role" => role).map do |bastion|
+                  bastion.username = "deploy"
+                  bastion
+                end
+
+                abort "No bastions found with role '#{ options.role }'." unless bastions.any?
+                bastions
+              end
+            end
+
+            def exec(*cmds)
+              results = []
+
+              all.each do |bastion|
+                if bastion.ssh("ls #{ LOCKFILE_NAME }").first.status == 0
+                  abort "Another `exos keys` operation is in progress."
+                end
+
+                commands = ["touch #{ LOCKFILE_NAME }", *cmds, "rm #{ LOCKFILE_NAME }"]
+                results << bastion.ssh(commands)
+              end
+
+              results.last[-2]
+            # Ensure to handle Fog::SSH raising on SSH connection errors.
+            ensure
+              all.each { |b| b.ssh("rm #{ LOCKFILE_NAME }") }
+            end
+
+            def ec2
+              @ec2 ||= ::Fog::Compute::AWS.new
+            end
+
+          end
+        end
+
+    end
+  end
+end

data/lib/exos/commands/logs.rb

@@ -0,0 +1,21 @@
+module Exos
+  module Commands
+    class Logs < Command
+
+      command :logs do |c|
+        c.syntax = "exos logs [--tail]"
+
+        c.option "-t", "--tail", "Stream logs."
+
+        c.description = "."
+        c.action do |args, options|
+          new(args, options).run
+        end
+      end
+
+      def run
+      end
+
+    end
+  end
+end

data/lib/exos/commands/ssh.rb

@@ -0,0 +1,64 @@
+module Exos
+  module Commands
+    class SSH < Command
+
+      command :ssh do |c|
+        c.syntax = "exos ssh [-i instance_id] [-n instance_name] [-r instance_role] [-u user] [username@instance_name|instance_id]"
+
+        c.option "-i", "--id instance_id", String, "Connects to the instance with this ID."
+        c.option "-n", "--name instance_name", String, "Connects to the instance with this 'Name' tag."
+        c.option "-r", "--role instance_role", String, "Connects to an instance with this 'Role' tag. Default is 'ssh'."
+        c.option "-u", "--user username", String, "Remote username to connect with."
+        c.option "-p", "--proto protocol", String, "Forces protocol to either 'mosh' or 'ssh'."
+
+        c.description = "Connects to the the specified instance. Tries to connect with mosh, then SSH."
+        c.action do |args, options|
+          options.default role: "ssh"
+          new(args, options).run
+        end
+      end
+
+      PROTOCOLS = %w(mosh ssh).freeze
+
+      def run
+        # Handle "connection string" style parameter.
+        if conn = args.first
+          user, str = conn.split("@")
+
+          abort "Malformed parameter: user@[instance-name|instance-id]." if str.nil?
+
+          str.match(/i-[0-9a-f]+/i) ? options.id = str : options.name = str
+        else
+          user = options.user
+        end
+
+        abort "Must specify username with -u or 'user@instance-name' parameter." if user.nil?
+
+        if options.id
+          instance = ec2.servers.all("instance-id" => options.id).first
+        elsif options.name
+          instance = ec2.servers.all("tag:Name" => options.name).first
+        else
+          instance = ec2.servers.all("tag:Role" => options.role).first
+        end
+
+        abort "No instance found. Exiting." if instance.nil?
+
+        puts "Connecting to instance #{ instance.id }..."
+        host = "#{ user }@#{ instance.dns_name }"
+
+        if options.proto
+          abort "Unknown protocol '#{ options.proto }'." unless PROTOCOLS.include?(options.proto)
+          exec "#{ options.proto } #{ host }"
+        else
+          begin
+            exec "mosh #{ host }"
+          rescue Errno::ENOENT
+            exec "ssh #{ host }"
+          end
+        end
+      end
+
+    end
+  end
+end

data/lib/exos/commands/status.rb

@@ -0,0 +1,99 @@
+module Exos
+  module Commands
+    class Status < Command
+
+      command :status do |c|
+        c.syntax = "exos status"
+        c.description = "Prints the current status of configured VPCs, subnets, and EC2 instances."
+        c.action do |args, options|
+          new(args, options).run
+        end
+      end
+
+      def run
+        @vpcs    = ec2.vpcs
+        @subnets = ec2.subnets
+        @servers = ec2.servers
+        @elbs    = elb.load_balancers
+
+        print_vpc_tables
+        print_servers_table
+      end
+
+      def print_vpc_tables
+        @vpcs.each do |vpc|
+          table = ::Terminal::Table.new(title: "VPC Status")
+
+          add_section_headers(table, ["VPC ID", "Name", "State", "CIDR Block", "Tenancy"])
+          color = vpc.state == "available" ? :green : :light_red
+          add_row(table, color, [
+            vpc.id,
+            vpc.tags["Name"] || vpc.tags["name"],
+            vpc.state,
+            vpc.cidr_block,
+            vpc.tenancy
+          ])
+
+          subnets = @subnets.select do |subnet|
+            subnet.vpc_id == vpc.id
+          end
+
+          return unless subnets.any?
+
+          add_section_headers(table, ["Subnet ID", "Name", "State", "CIDR Block", "Availability Zone"])
+          subnets.each do |subnet|
+            color = subnet.ready? ? :green : :light_red
+            add_row(table, color, [
+              subnet.subnet_id,
+              subnet.tag_set["Name"] || subnet.tag_set["name"],
+              subnet.state,
+              subnet.cidr_block,
+              subnet.availability_zone
+            ])
+          end
+
+          puts table
+        end
+      end
+
+      def print_servers_table
+        table  = ::Terminal::Table.new(title: "Instances")
+        groups = @servers.group_by(&:subnet_id)
+
+        add_section_headers(table, ["ID", "Name", "Type", "State", "Public IP", "Private IP", "Subnet Name"])
+
+        groups.each_pair do |subnet_id, servers|
+          servers.each do |server|
+            color = server.ready? ? :green : :light_red
+            subnet = @subnets.find { |s| s.subnet_id == subnet_id }
+            subnet_name = subnet.tag_set["Name"] || subnet.tag_set["name"] if subnet
+
+            add_row(table, color, [
+              server.id,
+              server.tags["Name"] || server.tags["name"],
+              server.flavor_id,
+              server.state,
+              server.public_ip_address,
+              server.private_ip_address,
+              subnet_name
+            ])
+          end
+        end
+
+        puts table
+      end
+
+      private
+
+        def add_row(table, color_method, values)
+          table << values.map { |v| (v || "").send(color_method) }
+        end
+
+        def add_section_headers(table, headers)
+          table.add_separator if table.number_of_columns > 0
+          table << headers
+          table.add_separator
+        end
+    end
+  end
+end

data/lib/exos/version.rb

@@ -0,0 +1,3 @@
+module Exos
+	VERSION = "0.0.1"
+end

metadata

@@ -0,0 +1,160 @@
+--- !ruby/object:Gem::Specification
+name: exos
+version: !ruby/object:Gem::Version
+  version: 0.0.1
+platform: ruby
+authors:
+- Piers Mainwaring
+autorequire: 
+bindir: bin
+cert_chain: []
+date: 2014-10-13 00:00:00.000000000 Z
+dependencies:
+- !ruby/object:Gem::Dependency
+  name: commander
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '4.2'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '4.2'
+- !ruby/object:Gem::Dependency
+  name: terminal-table
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.4'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.4'
+- !ruby/object:Gem::Dependency
+  name: fog
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.23'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.23'
+- !ruby/object:Gem::Dependency
+  name: mina
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '0.3'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '0.3'
+- !ruby/object:Gem::Dependency
+  name: colorize
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '0.7'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '0.7'
+- !ruby/object:Gem::Dependency
+  name: bundler
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.6'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.6'
+- !ruby/object:Gem::Dependency
+  name: rake
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '10.1'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '10.1'
+description: Write a longer description. Optional.
+email:
+- piers@impossibly.org
+executables:
+- exos
+extensions: []
+extra_rdoc_files: []
+files:
+- ".gitignore"
+- Gemfile
+- LICENSE.txt
+- Makefile
+- README.md
+- Rakefile
+- VERSION
+- bin/exos
+- exos.gemspec
+- lib/exos.rb
+- lib/exos/commands.rb
+- lib/exos/commands/env.rb
+- lib/exos/commands/keys.rb
+- lib/exos/commands/logs.rb
+- lib/exos/commands/ssh.rb
+- lib/exos/commands/status.rb
+- lib/exos/version.rb
+homepage: ''
+licenses:
+- MIT
+metadata: {}
+post_install_message: 
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+required_rubygems_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+requirements: []
+rubyforge_project: 
+rubygems_version: 2.2.2
+signing_key: 
+specification_version: 4
+summary: Write a short summary. Required.
+test_files: []