oxidized 0.29.1 → 0.37.0

data/lib/oxidized/model/arubainstant.rb

@@ -0,0 +1,93 @@
+class ArubaInstant < Oxidized::Model
+  using Refinements
+
+  # Aruba IAP, Instant Controller
+
+  comment '# '
+  prompt(/^ ?[\w:.@-]+[#>] $/)
+
+  cmd :all do |cfg|
+    # Remove command echo and prompt
+    cfg.cut_both
+  end
+
+  cmd :secret do |cfg|
+    cfg.gsub!(/ipsec (\S+)$/, 'ipsec <secret removed>')
+    cfg.gsub!(/community (\S+)$/, 'community <secret removed>')
+    cfg.gsub!(/^(snmp-server host [\d.]+ version 2c) \S+ (.*)$/, '\1 <secret removed> \2')
+    # MAS format: mgmt-user <username> <accesslevel> <password hash>
+    # IAP format (root user): mgmt-user <username> <password hash>
+    # IAP format: mgmt-user <username> <password hash> <access level>
+    cfg.gsub!(/mgmt-user (\S+) (root|guest-provisioning|network-operations|read-only|location-api-mgmt) (\S+)$/, 'mgmt-user \1 \2 <secret removed>') # MAS & Wireless Controler
+    cfg.gsub!(/mgmt-user (\S+) (\S+)( (read-only|guest-mgmt))?$/, 'mgmt-user \1 <secret removed> \3') # IAP
+    cfg.gsub!(/key (\S+)$/, 'key <secret removed>')
+    cfg.gsub!(/wpa-passphrase (\S+)$/, 'wpa-passphrase <secret removed>')
+    cfg.gsub!(/bkup-passwords (\S+)$/, 'bkup-passwords <secret removed>')
+    cfg.gsub!(/user (\S+) (\S+) (\S+)$/, 'user \1 <secret removed> \3')
+    cfg.gsub!(/virtual-controller-key (\S+)$/, 'virtual-controller-key <secret removed>')
+    cfg.gsub!(/^(hash-mgmt-user .* password \S+) \S+( usertype .*)?$/, '\1 <secret removed>\2')
+    cfg
+  end
+
+  # get software version
+  cmd 'show version' do |cfg|
+    cfg = cfg.reject_lines [
+      /^(Switch|AP) uptime is /,
+      /^Reboot Time and Cause/
+    ]
+    comment cfg
+  end
+
+  # Get serial number
+  cmd 'show activate status' do |cfg|
+    cfg = cfg.reject_lines [
+      /^Activate /,
+      /^Provision interval/,
+      /^Cloud Activation Key/
+    ]
+    comment cfg + "\n"
+  end
+
+  # Get controlled WLAN-AP
+  cmd 'show aps' do |cfg|
+    out = ''
+    cfg.each_line do |line|
+      out += line.sub(
+        /^(?'Name'(?:.+?|-{2,})\s{2,})  # \s{2,} = separator between columns
+          (?'IPv4'(?:
+            IP\ Address|-{2,}|          # Header
+            (?:\d+\.){3}\S+             # Match an IPv4 to catch AP-Names with two spaces
+          )\s{2,})
+          (?:(?:.+?|-{2,})\s{2,}){3}    # Ignore Mode, Spectrum, Clients
+          (?'Type'(?:.+?|-{2,})\s{2,})
+          (?'IPv6'(?:.+?|-{2,})\s{2,})
+          (?:(?:.+?|-{2,})\s{2,})       # Ignore Mesh Role
+          (?'Zone'(?:.+?|-{2,})\s{2,})
+          (?'Serial'(?:.+?|-{2,}))
+          \s{2,}                        # Last separator
+          .*$                           # Ignore the rest
+          /x,
+        '\k<Name>\k<IPv4>\k<Type>\k<IPv6>\k<Zone>\k<Serial>'
+      )
+    end
+    comment out + "\n"
+  end
+
+  cmd 'show running-config no-encrypt'
+
+  cfg :telnet do
+    username(/^User:\s*/)
+    password(/^Password:\s*/)
+  end
+
+  cfg :telnet, :ssh do
+    if vars :enable
+      post_login do
+        cmd "enable", /^[pP]assword:/
+        cmd vars(:enable)
+      end
+    end
+    pre_logout 'exit' if vars :enable
+    pre_logout 'exit'
+  end
+end

data/lib/oxidized/model/asa.rb

@@ -15,9 +15,8 @@ class ASA < Oxidized::Model
     cfg.gsub! /enable password (\S+) (.*)/, 'enable password <secret hidden> \2'
     cfg.gsub! /^passwd (\S+) (.*)/, 'passwd <secret hidden> \2'
     cfg.gsub! /username (\S+) password (\S+) (.*)/, 'username \1 password <secret hidden> \3'
-    cfg.gsub! /(ikev[12] ((remote|local)-authentication )?pre-shared-key) (\S+)/, '\1 <secret hidden>'
-    cfg.gsub! /^(aaa-server TACACS\+? \(\S+\) host[^\n]*\n(\s+[^\n]+\n)*\skey) \S+$/mi, '\1 <secret hidden>'
-    cfg.gsub! /^(aaa-server \S+ \(\S+\) host[^\n]*\n(\s+[^\n]+\n)*\s+key) \S+$/mi, '\1 <secret hidden>'
+    cfg.gsub! /(ikev[12] ((remote|local)-authentication )?pre-shared-key( hex)?) (\S+)/, '\1 <secret hidden>'
+    cfg.gsub! /^(aaa-server \S+(?: \(\S+\))? host \S+\n(?: [^\n]+\n)* +key) \S+$/mi, '\1 <secret hidden>'
     cfg.gsub! /ldap-login-password (\S+)/, 'ldap-login-password <secret hidden>'
     cfg.gsub! /^snmp-server host (.*) community (\S+)/, 'snmp-server host \1 community <secret hidden>'
     cfg.gsub! /^(failover key) .+/, '\1 <secret hidden>'
@@ -33,12 +32,13 @@ class ASA < Oxidized::Model
   end
 
   cmd 'show version' do |cfg|
-    # avoid commits due to uptime / ixo-router01 up 2 mins 28 secs / ixo-router01 up 1 days 2 hours
-    cfg = cfg.each_line.reject { |line| line.match /(\s+up\s+\d+\s+)|(.*days.*)/ }
-    cfg = cfg.join
-    cfg.gsub! /^Configuration has not been modified since last system restart.*\n/, ''
-    cfg.gsub! /^Configuration last modified by.*\n/, ''
-    comment cfg
+    comment cfg.reject_lines [
+      # avoid commits due to uptime / ixo-router01 up 2 mins 28 secs / ixo-router01 up 1 days 2 hours
+      /(\s+up\s+\d+\s+)|(.*days.*)/,
+      /^Configuration has not been modified since last system restart.*/,
+      /^Configuration last modified by.*/,
+      /^Start-up time.*/
+    ]
   end
 
   cmd 'show inventory' do |cfg|
@@ -96,7 +96,8 @@ class ASA < Oxidized::Model
         contexts = systemcfg.scan(/^context (\S+)$/)
         files = systemcfg.scan(/config-url (\S+)$/)
         contexts.each_with_index do |cont, i|
-          allcfg = allcfg + "\n\n----------========== [ CONTEXT " + cont.join(" ") + " FILE " + files[i].join(" ") + " ] ==========----------\n\n"
+          allcfg = allcfg + "\n\n----------========== [ CONTEXT " + cont.join(" ") +
+                   " FILE " + files[i].join(" ") + " ] ==========----------\n\n"
           cmd "more " + files[i].join(" ") do |cfgcontext|
             allcfg = allcfg + "\n\n" + cfgcontext
           end

data/lib/oxidized/model/asternos.rb

@@ -0,0 +1,22 @@
+class AsterNOS < Oxidized::Model
+  using Refinements
+
+  prompt /^[^$]+\$/
+  comment '# '
+
+  cmd :all do |cfg|
+    cfg.each_line.to_a[1..-2].join
+  end
+
+  cmd 'show version' do |cfg|
+    # @model = Regexp.last_match(1) if cfg =~ /^Model: (\S+)/
+    comment cfg
+  end
+
+  cmd "show runningconfiguration all"
+
+  cfg :ssh do
+    # exec true
+    pre_logout 'exit'
+  end
+end

data/lib/oxidized/model/asyncos.rb

@@ -2,7 +2,7 @@ class AsyncOS < Oxidized::Model
   using Refinements
 
   # ESA prompt "(mail.example.com)> " or "mail.example.com> "
-  prompt /^\r*([(]?[\w. ]+[)]?[#>]\s+)$/
+  prompt /^\r*\(?[\w.\- ]+\)?[#>]\s+$/
   comment '! '
 
   # Select passphrase display option
@@ -25,9 +25,9 @@ class AsyncOS < Oxidized::Model
     # Delete hour and date which change each run
     # cfg.gsub! /\sCurrent Time: \S+\s\S+\s+\S+\s\S+\s\S+/, ' Current Time:'
     # Delete select passphrase display option
-    cfg.gsub! /Choose the passphrase option:/, ''
+    cfg.gsub! "Choose the passphrase option:", ''
     cfg.gsub! /1. Mask passphrases \(Files with masked passphrases cannot be loaded using/, ''
-    cfg.gsub! /loadconfig command\)/, ''
+    cfg.gsub! "loadconfig command)", ''
     cfg.gsub! /2. Encrypt passphrases/, ''
     cfg.gsub! /3. Plain passphrases/, ''
     cfg.gsub! /^3$/, ''

data/lib/oxidized/model/audiocodes.rb

@@ -12,14 +12,14 @@ class AudioCodes < Oxidized::Model
     data.sub re, ''
   end
 
-  cmd 'show running-config' do |cfg|
+  cmd "show running-config\r\n" do |cfg|
     cfg
   end
 
   cfg :ssh do
     username /^login as:\s$/
     password /^.+password:\s$/
-    pre_logout 'exit'
+    pre_logout "exit\r\n"
   end
 
   cfg :telnet do

data/lib/oxidized/model/awplus.rb

@@ -15,8 +15,8 @@ class AWPlus < Oxidized::Model
 
   # Removes gibberish pager output e.g. VT100 escape codes
   cmd :all do |cfg|
-    cfg.gsub! /\e\[K/, ''         # example how to handle pager - cleareol EL0
-    cfg.gsub! /\e\[7m\e\[m/, ''   # example how to handle pager - Reverse SGR7
+    cfg.gsub! "\e[K", '' # example how to handle pager - cleareol EL0
+    cfg.gsub! "\e[7m\e[m", '' # example how to handle pager - Reverse SGR7
     cfg.delete! "\r" # Filters rogue ^M - see issue #415
     cfg.cut_both
   end
@@ -61,25 +61,28 @@ class AWPlus < Oxidized::Model
     cfg
   end
 
-  # Config required for telnet to detect username prompt
+  # Config required for telnet to detect username & password prompt.
   cfg :telnet do
     username /login:\s/
+    password /^Password:\s/
   end
 
-  # Main login config
+  # Config required for ssh to specify newline characters.
   cfg :telnet, :ssh do
+    newline "\r\n"
+
     post_login do
-      if vars :enable
-        send "enable\n"
-        expect /^Password:\s/
-        cmd vars(:enable) + "\r\n"
-      else
-        cmd 'enable' # Required for Priv-Exec users without enable PW to be put into "enable mode".
+      if vars(:enable) == true
+        cmd "enable"
+      elsif vars(:enable)
+        cmd "enable", /^[pP]assword:/
+        cmd vars(:enable)
       end
-      #      cmd 'terminal length 0' #set so the entire config is output without intervention.
+      # cmd 'terminal length 0' # set so the entire config is output without intervention.
     end
+
     pre_logout do
-      #      cmd 'terminal no length' #Sets term length back to default on exit.
+      # cmd 'terminal no length' # sets term length back to default on exit.
       send "exit\r\n"
     end
   end

data/lib/oxidized/model/axos.rb

@@ -1,7 +1,7 @@
 class AxOS < Oxidized::Model
   using Refinements
 
-  prompt /(\x1b\[\?7h)?([\w.@()-]+[#]\s?)$/
+  prompt /(\x1b\[\?7h)?([\w.@()-]+\#\s?)$/
   comment '! '
 
   cmd 'show running-config | nomore' do |cfg|

data/lib/oxidized/model/bdcom.rb

@@ -47,5 +47,6 @@ class BDCOM < Oxidized::Model
 
     post_login 'terminal length 0'
     pre_logout 'exit'
+    pre_logout 'exit'
   end
 end

data/lib/oxidized/model/c4cmts.rb

@@ -18,8 +18,7 @@ class C4CMTS < Oxidized::Model
     cfg
   end
 
-  cmd 'show environment' do |cfg|
-    cfg.gsub! /\s+[\-\d]+\s+C\s+[(\s\d]+\s+F\)/, '' # remove temperature readings
+  cmd 'show factory-eeprom' do |cfg|
     comment cfg.cut_both
   end
 

data/lib/oxidized/model/ciscosma.rb

@@ -25,7 +25,7 @@ class CiscoSMA < Oxidized::Model
     # Delete hour and date which change each run
     # cfg.gsub! /\sCurrent Time: \S+\s\S+\s+\S+\s\S+\s\S+/, ' Current Time:'
     # Delete select passphrase display option
-    cfg.gsub! /Do you want to mask the password\? Files with masked passwords cannot be loaded/, ''
+    cfg.gsub! "Do you want to mask the password? Files with masked passwords cannot be loaded", ''
     cfg.gsub! /^\s+y/, ''
     # Delete space
     cfg.gsub! /\n\s{25}/, ''

data/lib/oxidized/model/ciscosmb.rb

@@ -5,7 +5,12 @@ class CiscoSMB < Oxidized::Model
   # http://www.cisco.com/c/en/us/support/switches/small-business-300-series-managed-switches/products-release-notes-list.html
 
   prompt /^\r?([\w.@()-]+[#>]\s?)$/
-  comment  '! '
+  comment '! '
+
+  expect '^.*Your password has exceeded the maximum lifetime.*$' do
+    send 'N'
+    ""
+  end
 
   cmd :all do |cfg|
     lines = cfg.each_line.to_a[1..-2]

data/lib/oxidized/model/cnos.rb

@@ -4,18 +4,20 @@ class CNOS < Oxidized::Model
 
   comment '! '
 
-  cmd :all do |cfg|
-    cfg.each_line.to_a[0..-2].join
+  cmd :secret do |cfg|
+    cfg.gsub! /^(snmp-server community).*/, '\\1 <configuration removed>'
+    cfg.gsub! /^(username .+ (password|secret) \d) .+/, '\\1 <secret hidden>'
+    cfg.gsub! /^(enable (password|secret)( level \d+)?( \d)?) .+/, '\\1 <secret hidden>'
+    cfg
   end
 
-  cmd 'show running-config' do |cfg|
-    cfg.gsub!(/(snmp-server community )(\S+)/, '\1<hidden>')
-    cfg.gsub!(/key type private.+key string end/m, '<private key hidden>')
-    cfg
+  cmd :all do |cfg|
+    cfg = cfg.delete("\r")
+    cfg.cut_both
   end
 
   cmd 'show version' do |cfg|
-    cfg.gsub! /^(.* uptime is ).*\n/, '\1'
+    cfg = cfg.each_line.reject { |line| line.match /\ uptime\ is\ / }.join
     comment cfg
   end
 
@@ -23,9 +25,10 @@ class CNOS < Oxidized::Model
     comment cfg
   end
 
-  cfg :telnet do
-    username /^Username:/
-    password /^Password:/
+  cmd 'show running-config' do |cfg|
+    # remove empty lines
+    cfg = cfg.each_line.reject { |line| line.match /^[\r\n\s\u0000#]+$/ }.join
+    cfg
   end
 
   cfg :telnet, :ssh do

data/lib/oxidized/model/comtrol.rb

@@ -35,7 +35,7 @@ class Comtrol < Oxidized::Model
           expect /[pP]assword:\s?$/
           send vars(:enable) + "\n"
         end
-        expect /^.+[#]\s?$/
+        expect /^.+\#\s?$/
       end
     end
     pre_logout 'exit'

data/lib/oxidized/model/comware.rb

@@ -21,13 +21,15 @@ class Comware < Oxidized::Model
 
   cmd :secret do |cfg|
     cfg.gsub! /^( snmp-agent community).*/, '\\1 <configuration removed>'
-    cfg.gsub! /^( password hash).*/, '\\1 <configuration removed>'
+    cfg.gsub! /(password hash).*/, '\\1 <configuration removed>'
     cfg.gsub! /^( password cipher).*/, '\\1 <configuration removed>'
+    cfg.gsub! /(key (authentication )?cipher) \S+/, '\\1 <configuration removed>'
+    cfg.gsub! /(cipher authentication-mode (md5|sha)).\S+ (privacy-mode (des56|3des|aes\d{0,3})) .\S+/, '\\1 <auth-pass> \\3 <priv-pass>'
     cfg
   end
 
   cfg :telnet do
-    username /^(Username|login):/
+    username /^(Username|[Ll]ogin):/
     password /^Password:/
   end
 
@@ -37,7 +39,7 @@ class Comware < Oxidized::Model
       if vars(:enable) == true
         cmd "super"
       elsif vars(:enable)
-        cmd "super", /^ [pP]assword:/
+        cmd "super", /^\s?[pP]assword:/
         cmd vars(:enable)
       end
     end

data/lib/oxidized/model/cumulus.rb

@@ -1,7 +1,14 @@
 class Cumulus < Oxidized::Model
   using Refinements
 
-  prompt /^((\w*)@(.*)):/
+  # Regular expression explanation:
+  # ^                 : match begin of line, to have the most specific prompt
+  # [\w.-]+@[\w.-]+   : user@hostname
+  # (:mgmt)?          : optional when logged in out of band
+  # :?~[#$] ?$        : end of prompt, containing the linux path,
+  #                     which is always "~" in our context.
+  prompt /^[\w.-]+@[\w.-]+(:mgmt)?:?~[#$] ?$/
+  clean :escape_codes
   comment '# '
 
   # add a comment in the final conf
@@ -21,9 +28,12 @@ class Cumulus < Oxidized::Model
   # show the persistent configuration
   pre do
     use_nclu = vars(:cumulus_use_nclu) || false
+    use_nvue = vars(:cumulus_use_nvue) || false
 
     if use_nclu
       cfg = cmd 'net show configuration commands'
+    elsif use_nvue
+      cfg = cmd 'nv config show --color off'
     else
       # Set FRR or Quagga in config
       routing_daemon = vars(:cumulus_routing_daemon) ? vars(:cumulus_routing_daemon).downcase : 'quagga'
@@ -76,7 +86,9 @@ class Cumulus < Oxidized::Model
       cfg += cmd 'cat /etc/cumulus/switchd.conf'
 
       cfg += add_comment 'PORTS'
-      cfg += cmd 'cat /etc/cumulus/ports.conf'
+      # in some configurations, ports.conf has no trailing Line Feed,
+      # which breaks the prompt, so we add one
+      cfg += cmd "cat /etc/cumulus/ports.conf; echo"
 
       cfg += add_comment 'TRAFFIC'
       cfg += cmd 'cat /etc/cumulus/datapath/traffic.conf'

data/lib/oxidized/model/defacto.rb

@@ -0,0 +1,26 @@
+class Defacto < Oxidized::Model
+  prompt /^(\r*[\w.:@()\/_-]+[#>]\s?)$/
+  comment '! '
+
+  clean :cut
+
+  post do
+    cmd "show running-config" do |cfg|
+      process_config cfg
+    end
+  end
+
+  cfg :telnet do
+    username /^(user ?name|login|user)/i
+    password /^password/i
+  end
+
+  cfg :telnet, :ssh do
+    post_login 'terminal length 0'
+    post_login 'terminal width 0'
+    pre_logout 'exit'
+    pre_logout 'logout'
+  end
+
+  def process_config(cfg) = cfg
+end

data/lib/oxidized/model/dellx.rb

@@ -7,7 +7,7 @@ class DellX < Oxidized::Model
 
   comment '! '
 
-  expect /(^.*)?+[mM]ore\:+.*$/ do |data, re|
+  expect /(^.*)?+[mM]ore:+.*$/ do |data, re|
     send ' '
     data.sub re, ''
   end

data/lib/oxidized/model/dlink.rb

@@ -2,9 +2,8 @@ class Dlink < Oxidized::Model
   using Refinements
 
   # D-LINK Switches
-  # Add support dgs 1100 series (tested only with dgs-1100-10/me)
 
-  prompt /^(\r*[\w\s.@()\/:-]+[#>]\s?)$/
+  prompt /[\w.@()\/:-]+[#>]\s?$/
   comment '# '
 
   cmd :secret do |cfg|
@@ -19,6 +18,9 @@ class Dlink < Oxidized::Model
 
   cmd 'show switch' do |cfg|
     cfg.gsub! /^System Uptime\s.+/, '' # Omit constantly changing uptime info
+    cfg.gsub! /^System up time\s.+/, '' # Omit constantly changing uptime info
+    cfg.gsub! /^System Time\s.+/, '' # Omit constantly changing uptime info
+    cfg.gsub! /^RTC Time\s.+/, '' # Omit constantly changing uptime info
     comment cfg
   end
 
@@ -35,6 +37,7 @@ class Dlink < Oxidized::Model
 
   cfg :telnet, :ssh do
     post_login 'disable clipaging'
+    post_login 'enable admin' if vars(:enable) == true
     pre_logout 'logout'
   end
 end

data/lib/oxidized/model/dlinknextgen.rb

@@ -0,0 +1,55 @@
+class DlinkNextGen < Oxidized::Model
+  using Refinements
+
+  # D-LINK next generation cli Switches
+  # Add support DXS-1210-12SC
+
+  prompt /[\w.@()\/-]+[#>]\s?$/
+  comment '# '
+
+  cmd :all do |cfg|
+    cfg.gsub!("\0", "") # Remove NULL bytes that cause Git to detect the file as binary
+    cfg.each_line.to_a[2..-2].map { |line| line.delete("\r").rstrip }.join("\n") + "\n"
+  end
+
+  cmd :secret do |cfg|
+    cfg.gsub! /(password) (\S+).*/, '\\1 <secret hidden>'
+    cfg.gsub! /(snmp-server group) (\S+) (v.*)/, '\\1 <secret hidden> \\3'
+    cfg.gsub! /(snmp-server community) (\S+) (v.*)/, '\\1 <secret hidden> \\3'
+    cfg
+  end
+
+  # "show switch" doesn't exist on DXS-1210-28T rev A1 Firmware: Build 1.00.024; not figured out how to run "show version" so running both
+  cmd 'show switch' do |cfg|
+    cfg.gsub! /^\s+System Time\s.+/, '' # Omit constantly changing uptime info
+    comment cfg
+  end
+
+  cmd 'show version' do |cfg|
+    comment cfg
+  end
+
+  cmd 'show vlan' do |cfg|
+    comment cfg
+  end
+
+  cmd 'show running-config' do |cfg|
+    cfg.gsub! /^(snmp-server community ["\w]+) \S+/, '\\1 <removed>'
+    cfg.gsub! /^(username [\w.@-]+ privilege \d{1,2} password \d{1,2}) \S+/, '\\1 <removed>'
+    cfg.gsub! /^(!System Up Time).*/, '\\1 <removed>'
+    cfg.gsub! /^(!Current SNTP Synchronized Time:).*/, '\\1 <removed>'
+    cfg.gsub! /^(\s+ppp (chap|pap) password \d) .+/, '\\1 <secret hidden>'
+    cfg
+  end
+
+  cfg :telnet do
+    username /\r*([\w\s.@()\/:-]+)?([Uu]ser[Nn]ame|[Ll]ogin):/
+    password /\r*[Pp]ass[Ww]ord:/
+  end
+
+  cfg :telnet, :ssh do
+    post_login 'terminal length 0'
+    post_login 'terminal width 255'
+    pre_logout 'logout'
+  end
+end

data/lib/oxidized/model/dnos.rb

@@ -16,6 +16,9 @@ class DNOS < Oxidized::Model
     cfg.gsub! /secret (\d+) (\S+).*/, '<secret hidden>'
     cfg.gsub! /password (\d+) (\S+).*/, '<secret hidden>'
     cfg.gsub! /^(tacacs-server key \d+) (\S+).*/, '\\1 <secret hidden>'
+    cfg.gsub! /(ip ospf message-digest-key \d \S+ \d).*/, '\\1 <secret hidden>'
+    cfg.gsub! /(authentication-type).*/, '\\1 <secret hidden>'
+    cfg.gsub! /^(bsd-username \S+ secret).*/, '\\1 <secret hidden>'
     cfg
   end
 

data/lib/oxidized/model/dslcommands.rb

@@ -0,0 +1,93 @@
+module Oxidized
+  class Model
+    # Domain Specific Language for model commands
+    module DSLCommands
+      # Store a command to be run against the device
+      # cmd_arg can be:
+      #  - a string (the command to be run)
+      #  - a symbol:
+      #    - :all    - run the block against each command output
+      #    - :secret - run the block against each command output when
+      #                vars :remove_secret is true
+      #    - :significant_changes - use the block to remove unsignificant
+      #                changes
+      # Optional arguments (**args):
+      # - clear: true
+      #       replace all the stored blocks for this command (monkey patching)
+      # - prepend: true
+      #       prepend the block to the stored blocks for this command (monkey
+      #       patching)
+      # - if: lambda
+      #       run the command only if the lambda evaluates to true
+      # - input: symbol or array of symbols
+      #       for the inputs this command is to run against (default - run
+      #       every command)
+      def cmd(cmd_arg = nil, **args, &block)
+        if cmd_arg.instance_of?(Symbol)
+          process_args_block(@cmd[cmd_arg], args, block)
+        else
+          return unless valid_cmd_args?(cmd_arg, args)
+
+          # Always use an array for :input
+          args[:input] = Array(args[:input]) if args.include?(:input)
+          process_args_block(@cmd[:cmd], args,
+                             { cmd: cmd_arg, args: args, block: block })
+        end
+        logger.debug "Added #{cmd_arg} to the commands list"
+      end
+
+      def cmds
+        @cmd
+      end
+
+      # calls the block at the end of the model, prepending the output of the
+      # block to the output string
+      def pre(**args, &block)
+        process_args_block(@procs[:pre], args, block)
+      end
+
+      # calls the block at the end of the model, adding the output of the block
+      # to the output string
+      def post(**args, &block)
+        process_args_block(@procs[:post], args, block)
+      end
+
+      # @procs is a hash of procs (:pre+:post) to be prepended/postfixed to
+      # output
+      attr_reader :procs
+
+      private
+
+      def process_args_block(target, args, block)
+        if args[:clear]
+          if block.instance_of?(Array)
+            target.reject! { |k, _| k == block[0] }
+            target.push(block)
+          elsif block.instance_of?(Hash)
+            target.reject! { |item| item[:cmd] == block[:cmd] }
+            target.push(block)
+          else
+            target.replace([block])
+          end
+        else
+          method = args[:prepend] ? :unshift : :push
+          target.send(method, block)
+        end
+      end
+
+      def valid_cmd_args?(cmd_arg, args)
+        if args.include?(:if) && !(args[:if].is_a?(Proc) && args[:if].lambda?)
+          logger.error "cmd #{cmd_arg.dump}: if must be a lambda"
+          return false
+        end
+
+        if args.include?(:input) && ![Symbol, Array].include?(args[:input].class)
+          logger.error "cmd #{cmd_arg.dump}: input must be a symbol or an array of symbols"
+          return false
+        end
+
+        true
+      end
+    end
+  end
+end