vagrant-docker-certificates-manager 0.2.0

data/lib/vagrant-docker-certificates-manager/helpers.rb

@@ -0,0 +1,179 @@
+# frozen_string_literal: true
+
+require "i18n"
+require "yaml"
+
+module VagrantDockerCertificatesManager
+  module UiHelpers
+    class MissingTranslationError < StandardError; end
+    class UnsupportedLocaleError   < StandardError; end
+
+    SUPPORTED  = [:en, :fr].freeze
+    NAMESPACE  = "vdcm".freeze
+    OUR_SPACES = %w[messages. errors. usage. help. prompts. log. emoji. cli. add. remove. list. install.
+                    uninstall.].freeze
+
+    EMOJI = {
+      success:  "✅",
+      info:     "🔍",
+      ongoing:  "🔁",
+      warning:  "⚠️",
+      error:    "❌",
+      version:  "💾",
+      broom:    "🧹",
+      question: "❓"
+    }.freeze
+
+    module_function
+
+    def setup_i18n!
+      return if defined?(@i18n_setup) && @i18n_setup
+      ::I18n.enforce_available_locales = false
+      base  = File.expand_path("../../locales", __dir__)
+      ::I18n.load_path |= Dir[File.join(base, "*.yml")]
+      ::I18n.available_locales = SUPPORTED
+      default = ((ENV["VDCM_LANG"] || ENV["LANG"] || "en")[0,2] rescue "en").to_sym
+      ::I18n.default_locale = SUPPORTED.include?(default) ? default : :en
+      ::I18n.backend.load_translations
+      @i18n_setup = true
+    end
+
+    def set_locale!(lang, strict: false)
+        setup_i18n!
+
+        raw = (lang || ENV["VDCM_LANG"] || ENV["LANG"] || "en").to_s
+        sym = raw[0, 2].to_s.downcase.to_sym
+        sym = :en if sym.nil? || sym == :""
+
+        unless SUPPORTED.include?(sym)
+            if strict
+            raise UnsupportedLocaleError,
+                    "#{e(:error)} Unsupported language: #{sym}. Available: #{SUPPORTED.join(', ')}"
+            else
+            sym = :en
+            end
+        end
+
+    ::I18n.locale = sym
+    ::I18n.backend.load_translations
+    sym
+    end
+
+    def e(key, no_emoji: false)
+      return "" if no_emoji || ENV["VDCM_NO_EMOJI"] == "1"
+      EMOJI[key] || ""
+    end
+
+    def ns_key(key)
+      k = key.to_s
+      k.start_with?("#{NAMESPACE}.") ? k : "#{NAMESPACE}.#{k}"
+    end
+
+    def t(key, **opts)
+      setup_i18n!
+      ::I18n.t(ns_key(key), **opts)
+    end
+
+    def t!(key, **opts)
+      setup_i18n!
+      k = ns_key(key)
+      if our_key?(k) && !::I18n.exists?(k, ::I18n.locale)
+        raise MissingTranslationError, "#{e(:error)} [#{::I18n.locale}] Missing translation for key: #{k}"
+      end
+      ::I18n.t(k, **opts)
+    end
+
+    def t_hash(key)
+      v = t(key, default: {})
+      v.is_a?(Hash) ? v : {}
+    end
+
+    def level_to_emoji(level)
+      case level
+      when :success then :success
+      when :warn    then :warning
+      when :error   then :error
+      else               :info
+      end
+    end
+
+    def say(env_or_ui, level, key = nil, raw: nil, no_emoji: false, **kv)
+      setup_i18n!
+      ui = (env_or_ui.respond_to?(:[]) ? (env_or_ui[:ui] || env_or_ui[:machine]&.ui) : env_or_ui)
+      msg = raw || (key ? t(key, **kv) : nil)
+      return if ui.nil? || msg.nil?
+
+      prefix = e(level_to_emoji(level), no_emoji: no_emoji)
+      line   = prefix.empty? ? msg : "#{prefix} #{msg}"
+
+      case level
+      when :warn  then ui.warn(line)
+      when :error then ui.error(line)
+      else             ui.info(line)
+      end
+    end
+
+    def debug(env_or_ui, msg)
+      return unless ENV["VDCM_DEBUG"].to_s == "1"
+      say(env_or_ui, :info, nil, raw: "#{e(:question)} #{msg}")
+    end
+
+    def print_general_help(no_emoji: false, ui: nil)
+      setup_i18n!
+      lines = []
+      lines << "#{e(:info, no_emoji: no_emoji)} #{t('help.general_title')}"
+      lines << "  #{t('cli.usage')}"
+      t_hash("help.commands").each_value { |line| lines << "  #{line}" }
+
+      if ui
+        lines.each { |ln| ui.info(ln) }
+      else
+        lines.each { |ln| puts ln }
+      end
+    end
+
+    def print_topic_help(topic, no_emoji: false, ui: nil)
+      setup_i18n!
+      topic = (topic || "").to_s.strip.downcase
+      return print_general_help(no_emoji: no_emoji, ui: ui) if topic.empty?
+
+      base  = "help.topic.#{topic}"
+      title = t("#{base}.title",       default: nil)
+      usage = t("#{base}.usage",       default: nil)
+      desc  = t("#{base}.description", default: nil)
+      opts  = t_hash("#{base}.options")
+      exs   = ::I18n.t("#{base}.examples", default: [])
+
+      if title.nil? && usage.nil? && desc.nil? && opts.empty? && exs.empty?
+        return print_general_help(no_emoji: no_emoji, ui: ui)
+      end
+
+      lines = []
+      lines << "#{e(:info, no_emoji: no_emoji)} #{title || t('help.topic_fallback_title', topic: topic)}"
+      lines << "  #{t('help.usage_label')}"
+      lines << "    #{usage || 'vagrant certs help'}"
+      if desc && !desc.strip.empty?
+        lines << "  #{t('help.description_label')}"
+        lines << "    #{desc}"
+      end
+      unless opts.empty?
+        lines << "  #{t('help.options_label')}"
+        opts.each_value { |line| lines << "    #{line}" }
+      end
+      if exs.is_a?(Array) && !exs.empty?
+        lines << "  #{t('help.examples_label')}"
+        exs.each { |ex| lines << "    #{ex}" }
+      end
+
+      if ui
+        lines.each { |ln| ui.info(ln) }
+      else
+        lines.each { |ln| puts ln }
+      end
+    end
+
+    def our_key?(k)
+      OUR_SPACES.any? { |ns| k.start_with?("#{NAMESPACE}.#{ns}") || k.start_with?(ns) }
+    end
+  end
+end

data/lib/vagrant-docker-certificates-manager/plugin.rb

@@ -0,0 +1,32 @@
+# frozen_string_literal: true
+
+require "vagrant"
+require_relative "version"
+require_relative "config"
+require_relative "command"
+require_relative "helpers"
+
+module VagrantDockerCertificatesManager
+  class Plugin < Vagrant.plugin("2")
+    name "docker_certificates"
+
+    UiHelpers.setup_i18n!
+
+    config(:docker_certificates) do
+      require_relative "config"
+      VagrantDockerCertificatesManager::Config
+    end
+
+    command("certs") { Command }
+
+    action_hook(:install_cert_on_up, :machine_action_up) do |hook|
+      require_relative "actions/install"
+      hook.after Vagrant::Action::Builtin::Provision, Actions::Install
+    end
+
+    action_hook(:uninstall_cert_on_destroy, :machine_action_destroy) do |hook|
+      require_relative "actions/uninstall"
+      hook.before Vagrant::Action::Builtin::GracefulHalt, Actions::Uninstall
+    end
+  end
+end

data/lib/vagrant-docker-certificates-manager/util/cert.rb

@@ -0,0 +1,35 @@
+# frozen_string_literal: true
+
+require "openssl"
+
+module VagrantDockerCertificatesManager
+  module Cert
+    MARKER = "VDCM"
+
+    module_function
+
+    def read_cert(path)
+      OpenSSL::X509::Certificate.new(File.read(path))
+    end
+
+    def sha1(path)
+      cert = read_cert(path)
+      OpenSSL::Digest::SHA1.hexdigest(cert.to_der).upcase
+    end
+
+    def subject_cn(path)
+      cert = read_cert(path)
+      pair = cert.subject.to_a.find { |(k, _v, _t)| k == "CN" }
+      pair ? pair[1].to_s : nil
+    end
+
+    def default_name_from(path)
+      base = File.basename(path).sub(/\.(pem|crt|cer)$/i, "")
+      base.empty? ? "local.dev" : base
+    end
+
+    def nickname_for(name)
+      "#{MARKER}:#{name}"
+    end
+  end
+end

data/lib/vagrant-docker-certificates-manager/util/os.rb

@@ -0,0 +1,132 @@
+# frozen_string_literal: true
+
+require "open3"
+require_relative "cert"
+
+module VagrantDockerCertificatesManager
+  module OS
+    module_function
+
+    def detect
+      if defined?(Vagrant) && Vagrant.const_defined?(:Util) && Vagrant::Util.const_defined?(:Platform)
+        return :mac if Vagrant::Util::Platform.darwin?
+        return :windows if Vagrant::Util::Platform.windows?
+        return :linux if Vagrant::Util::Platform.linux?
+      else
+        plat = RbConfig::CONFIG["host_os"].downcase
+        return :mac if plat.include?("darwin")
+        return :windows if plat =~ /mswin|mingw|windows/
+        return :linux if plat.include?("linux")
+      end
+      :unknown
+    end
+
+    def run(cmd)
+      out, err, st = Open3.capture3(cmd)
+      [st.success?, out, err]
+    end
+
+    def mac_add_trusted_cert(path, name)
+      ok, *_ = run(%(sudo security add-trusted-cert -d -r trustRoot -k /Library/Keychains/System.keychain "#{path}"))
+      ok
+    end
+
+    def mac_has_cert_fingerprint?(fp)
+      ok, out, _ = run(%(security find-certificate -a -Z /Library/Keychains/System.keychain 2>/dev/null))
+      return false unless ok
+      out.include?(fp)
+    end
+
+    def mac_remove_by_fp(fp)
+      ok, out, _ = run(%(security find-certificate -a -Z /Library/Keychains/System.keychain 2>/dev/null))
+      return true unless ok
+      hash = out.lines.find { |l| l =~ /SHA-1 hash:\s*#{fp}/i } ? fp : nil
+      return true unless hash
+      run(%(sudo security delete-certificate -Z #{hash} /Library/Keychains/System.keychain)).first
+    end
+
+    def linux_install_cert(path, name, nss: true, firefox: false)
+      dest = "/usr/local/share/ca-certificates/#{Cert::MARKER.downcase}-#{name}.crt"
+      ok1, = run(%(sudo cp "#{path}" "#{dest}"))
+      ok2, = run("sudo update-ca-certificates")
+      okn = true
+      okn &&= linux_nss_install(path, name) if nss
+      okf = true
+      okf &&= linux_firefox_install(path, name) if firefox
+      ok1 && ok2 && okn && okf
+    end
+
+    def linux_has_cert_file?(name)
+      File.exist?("/usr/local/share/ca-certificates/#{Cert::MARKER.downcase}-#{name}.crt")
+    end
+
+    def linux_uninstall_cert(name, nss: true, firefox: false)
+      dest = "/usr/local/share/ca-certificates/#{Cert::MARKER.downcase}-#{name}.crt"
+      run(%(sudo rm -f "#{dest}"))
+      run("sudo update-ca-certificates")
+      linux_nss_uninstall(name) if nss
+      linux_firefox_uninstall(name) if firefox
+      true
+    end
+
+    def linux_nss_install(path, name)
+      db = %(sql:"$HOME/.pki/nssdb")
+      run(%(certutil -d #{db} -A -t "C,," -n "#{Cert.nickname_for(name)}" -i "#{path}")).first
+    end
+
+    def linux_nss_uninstall(name)
+      db = %(sql:"$HOME/.pki/nssdb")
+      run(%(certutil -d #{db} -D -n "#{Cert.nickname_for(name)}"))
+      true
+    end
+
+    def linux_firefox_profiles
+      home = ENV["HOME"]
+      [
+        "#{home}/.mozilla/firefox",
+        "#{home}/.var/app/org.mozilla.firefox/.mozilla/firefox",
+        "#{home}/snap/firefox/common/.mozilla/firefox"
+      ].select { |d| File.directory?(d) }.flat_map { |base| Dir.glob(File.join(base, "*.default*")) }
+    end
+
+    def linux_firefox_install(path, name)
+      profiles = linux_firefox_profiles
+      profiles.all? do |profile|
+        run(%(certutil -A -n "#{Cert.nickname_for(name)}" -t "C,," -i "#{path}" -d "sql:#{profile}")).first
+      end
+    end
+
+    def linux_firefox_uninstall(name)
+      linux_firefox_profiles.each do |profile|
+        run(%(certutil -D -n "#{Cert.nickname_for(name)}" -d "sql:#{profile}"))
+      end
+      true
+    end
+
+    def win_install_cert(path, name)
+      ok, out, err = run(%(certutil -addstore -f "ROOT" "#{path}"))
+      return false unless ok
+      fp = Cert.sha1(path)
+      ps = %(
+        $cert = Get-ChildItem Cert:\\LocalMachine\\Root | Where-Object { $_.Thumbprint -eq "#{fp}" };
+        if ($cert) { $cert.FriendlyName = "#{Cert.nickname_for(name)}"; }
+      ).strip
+      run(%(powershell -NoProfile -NonInteractive -Command "#{ps}"))
+      true
+    end
+
+    def win_has_cert_fingerprint?(fp)
+        ps = %q{
+            $c = Get-ChildItem Cert:\LocalMachine\Root | Where-Object { $_.Thumbprint -eq "__FP__" };
+            if ($c) { "YES" } else { "NO" }
+        }.strip.gsub("__FP__", fp.to_s)
+
+        ok, out, _ = run(%(powershell -NoProfile -NonInteractive -Command "#{ps}"))
+        ok && out.to_s.strip == "YES"
+    end
+
+    def win_remove_by_fp(fp)
+      run(%(certutil -delstore "ROOT" #{fp})).first
+    end
+  end
+end

data/lib/vagrant-docker-certificates-manager/util/registry.rb

@@ -0,0 +1,53 @@
+# frozen_string_literal: true
+
+require "json"
+require "fileutils"
+
+module VagrantDockerCertificatesManager
+  module Registry
+    module_function
+
+    def db_path
+      File.join(Dir.home, ".vagrant.d", "vdcm", "certs.json")
+    end
+
+    def ensure_dir!
+      FileUtils.mkdir_p(File.dirname(db_path))
+    end
+
+    def load
+      ensure_dir!
+      return {} unless File.exist?(db_path)
+      JSON.parse(File.read(db_path))
+    rescue
+      {}
+    end
+
+    def save(data)
+      ensure_dir!
+      File.write(db_path, JSON.pretty_generate(data))
+    end
+
+    def track(fp, attrs)
+      data = load
+      data[fp] = attrs
+      save(data)
+    end
+
+    def untrack(fp)
+      data = load
+      removed = !data.delete(fp).nil?
+      save(data)
+      removed
+    end
+
+    def find_by_path(path)
+      data = load
+      data.find { |_fp, v| File.expand_path(v["path"]) == File.expand_path(path) }
+    end
+
+    def all
+      load
+    end
+  end
+end

data/lib/vagrant-docker-certificates-manager/util/ui.rb

@@ -0,0 +1,31 @@
+# frozen_string_literal: true
+
+require "json"
+require_relative "../helpers"
+
+module VagrantDockerCertificatesManager
+  module Ui
+    module_function
+
+    def say(env, level, key = nil, raw: nil, **kv)
+      UiHelpers.say(env, level, key, raw: raw, **kv)
+    end
+
+    def emit(json, action, result)
+      if json
+        puts JSON.dump(result.merge(action: action))
+        return
+      end
+      no_emoji = ENV["VDCM_NO_EMOJI"].to_s == "1"
+      ok_mark  = no_emoji ? "[OK]"  : UiHelpers.e(:success)
+      ko_mark  = no_emoji ? "[ERR]" : UiHelpers.e(:error)
+
+      status = result[:status] || result[:state]
+      if status == "success" || status == "ok"
+        puts "#{ok_mark} #{action}"
+      else
+        puts "#{ko_mark} #{action}: #{result[:error] || 'error'}"
+      end
+    end
+  end
+end

data/lib/vagrant-docker-certificates-manager/version.rb

@@ -0,0 +1,10 @@
+# frozen_string_literal: true
+
+module VagrantDockerCertificatesManager
+  VERSION = begin
+    path = File.expand_path("VERSION", __dir__)
+    File.exist?(path) ? File.read(path).strip : "0.1.0"
+  rescue
+    "0.1.0"
+  end
+end

data/lib/vagrant-docker-certificates-manager.rb

@@ -0,0 +1,3 @@
+# frozen_string_literal: true
+
+require_relative "vagrant-docker-certificates-manager/plugin"

data/locales/en.yml

@@ -0,0 +1,93 @@
+en:
+  vdcm:
+    cli:
+      title: "Vagrant Docker Certificates Manager"
+      usage: "Usage: vagrant certs <add|remove|list|version|help> [options]"
+      opt_lang: "Force language (en|fr)"
+      opt_no_emoji: "Disable emoji in CLI output"
+      opt_help: "Show help and exit"
+
+    help:
+      general_title: "Vagrant Docker Certificates Manager — Commands:"
+      topic_header: "Help: vagrant certs %{topic}"
+      usage_label: "Usage:"
+      description_label: "Description:"
+      options_label: "Options:"
+      examples_label: "Examples:"
+      commands:
+        add:     "vagrant certs add [PATH]        # Install the certificate"
+        remove:  "vagrant certs remove [PATH]     # Uninstall the certificate"
+        list:    "vagrant certs list              # Show tracked certificates"
+        version: "vagrant certs version           # Print plugin version"
+        help:    "vagrant certs help [TOPIC]      # This help"
+      topic:
+        add:
+          usage: "vagrant certs add <PATH_CERT_FILE> [--lang en|fr] [--no-emoji]"
+          description: "Install the given Root CA into the system trust store. Fails if already present."
+          options:
+            lang: "--lang <en|fr>    Force language"
+            noemoji: "--no-emoji        Disable emoji in output"
+          examples:
+            - "vagrant certs add ./certs/rootca.pem"
+        remove:
+          usage: "vagrant certs remove <PATH_CERT_FILE> [--lang en|fr] [--no-emoji]"
+          description: "Remove a certificate previously installed by this plugin using its path (or tracked entry)."
+          options:
+            lang: "--lang <en|fr>    Force language"
+            noemoji: "--no-emoji        Disable emoji in output"
+          examples:
+            - "vagrant certs remove ./certs/rootca.pem"
+        list:
+          usage: "vagrant certs list [--lang en|fr] [--no-emoji]"
+          description: "Show certificates tracked by this plugin."
+          options:
+            lang: "--lang <en|fr>    Force language"
+            noemoji: "--no-emoji        Disable emoji in output"
+
+    messages:
+      version_line: "v%{v}."
+
+    errors:
+      invalid_path: "Invalid certificate path: %{path}"
+      missing_path_remove: "You must provide a path for removal."
+      not_found_for_remove: "No tracked certificate found for path: %{path}"
+      already_present: "The certificate %{name} already exists."
+      install_failed: "Certificate installation failed."
+      uninstall_failed: "Certificate removal failed."
+      remove_failed: "Remove failed."
+      cert_not_found: "Certificate file not found: %{path}"
+      os_unsupported: "Unsupported OS for this action."
+      unknown_command: "Unknown command: %{cmd}"
+
+    add:
+      success: "Certificate %{name} installed."
+
+    remove:
+      success: "Certificate removed."
+
+    list:
+      header: "Certificates installed by this plugin:"
+      empty: "No certificate tracked by this plugin."
+
+    install:
+      start: "Installing certificate %{name} from %{path}..."
+      success: "Certificate %{name} installed."
+      fail: "Failed to install certificate %{name}."
+      skip: "Install on up disabled; skipping."
+
+    uninstall:
+      start: "Uninstalling certificate %{name}..."
+      success: "Certificate %{name} removed."
+      fail: "Failed to remove certificate %{name}."
+      skip: "Remove on destroy disabled; skipping."
+
+    errors:
+      invalid_path: "Invalid certificate path: %{path}"
+      missing_path_remove: "You must provide a path for removal."
+      not_found_for_remove: "No tracked certificate found for path: %{path}"
+      already_present: "The certificate %{name} already exists."
+      install_failed: "Certificate installation failed."
+      uninstall_failed: "Certificate removal failed."
+      remove_failed: "Remove failed."
+      os_unsupported: "Unsupported OS for this action."
+      unknown_command: "Unknown command: %{cmd}"

data/locales/fr.yml

@@ -0,0 +1,93 @@
+fr:
+  vdcm:
+    cli:
+      title: "Gestionnaire de certificats Docker pour Vagrant"
+      usage: "Utilisation : vagrant certs <add|remove|list|version|help> [options]"
+      opt_lang: "Forcer la langue (en|fr)"
+      opt_no_emoji: "Désactiver les émojis dans la sortie"
+      opt_help: "Afficher l'aide et quitter"
+
+    help:
+      general_title: "Gestionnaire de certificats — Commandes :"
+      topic_header: "Aide : vagrant certs %{topic}"
+      usage_label: "Utilisation :"
+      description_label: "Description :"
+      options_label: "Options :"
+      examples_label: "Exemples :"
+      commands:
+        add:     "vagrant certs add [CHEMIN]        # Installer le certificat"
+        remove:  "vagrant certs remove [CHEMIN]     # Désinstaller le certificat"
+        list:    "vagrant certs list                # Afficher les certificats suivis"
+        version: "vagrant certs version             # Afficher la version du plugin"
+        help:    "vagrant certs help [SUJET]        # Cette aide"
+      topic:
+        add:
+          usage: "vagrant certs add <CHEMIN_CERT> [--lang en|fr] [--no-emoji]"
+          description: "Installe la CA fournie dans le trousseau système. Échoue si elle existe déjà."
+          options:
+            lang: "--lang <en|fr>    Forcer la langue"
+            noemoji: "--no-emoji        Désactiver les émojis"
+          examples:
+            - "vagrant certs add ./certs/rootca.pem"
+        remove:
+          usage: "vagrant certs remove <CHEMIN_CERT> [--lang en|fr] [--no-emoji]"
+          description: "Supprime un certificat installé par ce plugin à partir de son chemin (ou de l'entrée suivie)."
+          options:
+            lang: "--lang <en|fr>    Forcer la langue"
+            noemoji: "--no-emoji        Désactiver les émojis"
+          examples:
+            - "vagrant certs remove ./certs/rootca.pem"
+        list:
+          usage: "vagrant certs list [--lang en|fr] [--no-emoji]"
+          description: "Affiche les certificats suivis par ce plugin."
+          options:
+            lang: "--lang <en|fr>    Forcer la langue"
+            noemoji: "--no-emoji        Désactiver les émojis"
+
+    messages:
+      version_line: "v%{v}."
+
+    errors:
+      invalid_path: "Chemin de certificat invalide : %{path}"
+      missing_path_remove: "Vous devez fournir un chemin pour la suppression."
+      not_found_for_remove: "Aucun certificat suivi pour le chemin : %{path}"
+      already_present: "Le certificat %{name} existe déjà."
+      install_failed: "Échec de l'installation du certificat."
+      uninstall_failed: "Échec de la suppression du certificat."
+      remove_failed: "Échec de la suppression."
+      cert_not_found: "Fichier certificat introuvable : %{path}"
+      os_unsupported: "Système non pris en charge pour cette action."
+      unknown_command: "Commande inconnue : %{cmd}"
+
+    add:
+      success: "Certificat %{name} installé."
+
+    remove:
+      success: "Certificat supprimé."
+
+    list:
+      header: "Certificats installés par ce plugin :"
+      empty: "Aucun certificat suivi par ce plugin."
+
+    install:
+      start: "Installation du certificat %{name} depuis %{path}…"
+      success: "Certificat %{name} installé."
+      fail: "Échec de l'installation du certificat %{name}."
+      skip: "Installation à l'up désactivée ; on ignore."
+
+    uninstall:
+      start: "Désinstallation du certificat %{name}…"
+      success: "Certificat %{name} supprimé."
+      fail: "Échec de la suppression du certificat %{name}."
+      skip: "Suppression à la destruction désactivée ; on ignore."
+
+    errors:
+      invalid_path: "Chemin de certificat invalide : %{path}"
+      missing_path_remove: "Vous devez fournir un chemin à supprimer."
+      not_found_for_remove: "Aucun certificat suivi pour le chemin : %{path}"
+      already_present: "Le certificat %{name} existe déjà."
+      install_failed: "Échec de l'installation du certificat."
+      uninstall_failed: "Échec de la suppression du certificat."
+      remove_failed: "Échec de la suppression."
+      os_unsupported: "Système non pris en charge pour cette action."
+      unknown_command: "Commande inconnue : %{cmd}"