mac_setup 0.5.0 → 0.6.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 8b4164b88ee595b2b679633fbe490f8a05ebfc2c
-  data.tar.gz: e6f32f9da703b75ab5fe49749395f82d5bf57a7b
+  metadata.gz: e838d025ff3bddf2160c37b063735b85094e7ff5
+  data.tar.gz: 6c7d1722bbc01b83955fd73dd040e2b292460b1d
 SHA512:
-  metadata.gz: 213cef3713f6220d48b83de0fe1e79fd4a841087bdb4a9e09b4d72b1f7d476096085e1a585e75b127f77bc350e14286a628a688458ad743a4a96c91220f3bbee
-  data.tar.gz: d355fc2de21d560a8b536b0407e18002726e56aca2edcb6a2cbb1ccc3ec3f85e35c0a7e524fbda47fce45aa34dad696690b36dfd7facd3eb6da6116dc6b87f87
+  metadata.gz: 4792d51c9b5840513664182570c7de79c667641afba9aa0ac389db988a183705d129146f589214049c2d61a813a666ce5c2abe6322346011b7c51c526ff3f495
+  data.tar.gz: 8708caa2c2c09d0fa8d3be474d9083a616174e93b404d5622418fe7e83b34704a0e79935d928528fec639d9d21fd2d388d67d8c6505d4eadc2da4d51f6caaa20

data/exe/mac_setup

@@ -18,6 +18,8 @@ when "install"
   else
     puts "You must specify a path to config file or create one at #{DEFAULT_CONFIG_PATH}"
   end
+when "encrypt"
+  MacSetup.encrypt
 else
   puts "Unknown command: #{command}"
 end

data/lib/mac_setup/brewfile_installer.rb

@@ -19,6 +19,7 @@ module MacSetup
       tap_bundle
       sign_in_to_mas
       install_brewfile
+      install_openssl
     end
 
     private
@@ -39,6 +40,11 @@ module MacSetup
       Shell.run("brew bundle --global")
     end
 
+    def install_openssl
+      # Needed for encrypted files
+      Shell.run("brew install openssl")
+    end
+
     def bundle_already_tapped?
       status.installed_taps.include?(BUNDLE_TAP)
     end

data/lib/mac_setup/secrets.rb

@@ -0,0 +1,73 @@
+module MacSetup
+  class Secrets
+    CIPHER = "aes-256-cbc"
+    PLAINTEXT_EXT = "priv"
+    CIPHERTEXT_EXT = "crypt"
+
+    attr_reader :dir
+
+    def self.encrypt(dir)
+      new(dir).encrypt
+    end
+
+    def self.decrypt(dir)
+      new(dir).decrypt
+    end
+
+    def self.encrypted?(file)
+      file.to_s.end_with?(CIPHERTEXT_EXT)
+    end
+
+    def self.strip_extension(file)
+      return file unless file.to_s.end_with?(PLAINTEXT_EXT)
+
+      file.sub(/#{PLAINTEXT_EXT}$/, "")
+    end
+
+    def initialize(dir)
+      @dir = File.expand_path(dir)
+    end
+
+    def encrypt
+      puts "Encrypting files:"
+      files = Dir.glob("#{dir}/**/*.#{PLAINTEXT_EXT}")
+      do_crypt(files, from: PLAINTEXT_EXT, to: CIPHERTEXT_EXT, overwrite: true)
+    end
+
+    def decrypt
+      puts "Decrypting files:"
+      files = Dir.glob("#{dir}/**/*.#{CIPHERTEXT_EXT}")
+
+      do_crypt(files, from: CIPHERTEXT_EXT, to: PLAINTEXT_EXT, args: "-d") do |command|
+        unless Shell.success?(command + %W(-in #{files.first}))
+          puts "Wrong password!"
+          exit 1
+        end
+      end
+    end
+
+    private
+
+    def do_crypt(files, options)
+      old_ext = options.fetch(:from)
+      new_ext = options.fetch(:to)
+      overwrite = options.fetch(:overwrite, false)
+      args = Array(options.fetch(:args, []))
+
+      files.each { |file| puts " - #{file}" }
+      command = base_command(Shell.password) + args
+
+      yield command if block_given?
+
+      files.each do |file|
+        target_path = file.sub(/#{old_ext}$/, new_ext)
+        next if !overwrite && File.exist?(target_path)
+        Shell.run(command + %W(-in #{file} -out #{target_path}))
+      end
+    end
+
+    def base_command(password)
+      %W(openssl enc -#{CIPHER} -k #{password})
+    end
+  end
+end

data/lib/mac_setup/shell.rb

@@ -1,12 +1,32 @@
+require "shellwords"
+require "io/console"
+
 module MacSetup
   class Shell
     def self.run(command)
-      `#{command}`
+      `#{sanitize_command(command)}`
     end
 
     def self.ask(question)
       puts question
       gets.strip
     end
+
+    def self.password
+      puts "Enter Password"
+      STDIN.noecho(&:gets).strip
+    end
+
+    def self.success?(command)
+      system(sanitize_command(command))
+    end
+
+    def self.sanitize_command(command)
+      if command.respond_to?(:each)
+        Shellwords.join(command)
+      else
+        command
+      end
+    end
   end
 end

data/lib/mac_setup/symlink_installer.rb

@@ -3,10 +3,12 @@ module MacSetup
     def initialize(options)
       @source_path = options[:source_path]
       @file_name = options[:name]
-      @target_path = options[:target_path]
+      @target_path = sanitize_target(options[:target_path])
     end
 
     def link
+      return if Secrets.encrypted?(source_path)
+
       short_sorce_path = MacSetup.shorten_path(source_path)
       short_target_path = MacSetup.shorten_path(target_path)
       puts "Linking #{short_sorce_path} to #{short_target_path}..."
@@ -31,16 +33,12 @@ module MacSetup
       File.exist?(target_path)
     end
 
-    def target
-      @target ||= SymlinkTarget.new(target_path)
-    end
-
     def source_path
       @source_path ||= File.expand_path(file_name, DOTFILES_PATH)
     end
 
     def target_path
-      @target_path ||= File.join(ENV["HOME"], ".#{file_name}")
+      @target_path ||= File.join(ENV["HOME"], ".#{sanitize_target(file_name)}")
     end
 
     def file_name
@@ -85,6 +83,10 @@ module MacSetup
     def children
       Dir.entries(source_path).reject { |entry| entry.start_with?(".") }
     end
+
+    def sanitize_target(file)
+      Secrets.strip_extension(file)
+    end
   end
 
   class SymlinkInstaller

data/lib/mac_setup/version.rb

@@ -1,3 +1,3 @@
 module MacSetup
-  VERSION = "0.5.0"
+  VERSION = "0.6.0"
 end

data/lib/mac_setup.rb

@@ -1,6 +1,7 @@
 require "mac_setup/version"
 require "mac_setup/configuration"
 require "mac_setup/system_status"
+require "mac_setup/secrets"
 require "mac_setup/command_line_tools_installer"
 require "mac_setup/homebrew_installer"
 require "mac_setup/git_repo_installer"
@@ -13,16 +14,17 @@ module MacSetup
   DOTFILES_PATH = File.expand_path("~/.dotfiles")
 
   INSTALLERS = [
-    SymlinkInstaller,
+    GitRepoInstaller,
     BrewfileInstaller,
     ServicesInstaller,
-    GitRepoInstaller,
+    SymlinkInstaller,
     ScriptInstaller
   ]
 
   def self.install(config_path, _options)
     config = Configuration.new(File.expand_path(config_path))
     status = SystemStatus.new
+    Secrets.decrypt(DOTFILES_PATH)
 
     INSTALLERS.each { |installer| installer.run(config, status) }
   end
@@ -30,10 +32,13 @@ module MacSetup
   def self.bootstrap(dotfiles_repo)
     CommandLineToolsInstaller.run
     GitRepoInstaller.install_repo(dotfiles_repo, DOTFILES_PATH)
-    SymlinkInstaller.install_dotfile("mac_setup")
     HomebrewInstaller.run
   end
 
+  def self.encrypt
+    Secrets.encrypt(DOTFILES_PATH)
+  end
+
   def self.shorten_path(path)
     path.sub(/#{ENV['HOME']}/, "~")
   end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: mac_setup
 version: !ruby/object:Gem::Version
-  version: 0.5.0
+  version: 0.6.0
 platform: ruby
 authors:
 - Matt Wean
 autorequire: 
 bindir: exe
 cert_chain: []
-date: 2017-01-03 00:00:00.000000000 Z
+date: 2017-01-10 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: bundler
@@ -109,6 +109,7 @@ files:
 - lib/mac_setup/git_repo_installer.rb
 - lib/mac_setup/homebrew_installer.rb
 - lib/mac_setup/script_installer.rb
+- lib/mac_setup/secrets.rb
 - lib/mac_setup/services_installer.rb
 - lib/mac_setup/shell.rb
 - lib/mac_setup/symlink_installer.rb