onedeploy-cli 0.1.0

package/dist/index.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/index.js

@@ -0,0 +1,175 @@
+import { execFile, spawn } from "node:child_process";
+import { randomUUID } from "node:crypto";
+import { chmod, mkdir, readFile, rm, writeFile } from "node:fs/promises";
+import { homedir } from "node:os";
+import { Readable } from "node:stream";
+import { promisify } from "node:util";
+import prompts from "prompts";
+import { y } from "yedra";
+const nebulaUrl = `https://github.com/slackhq/nebula/releases/download/v1.9.6/nebula-linux-amd64.tar.gz`;
+const configDir = `${homedir()}/.config/onedeploy`;
+const tmpDir = `/tmp/onedeploy-${randomUUID()}`;
+await mkdir(configDir, { recursive: true });
+await mkdir(tmpDir, { recursive: true });
+const Instance = y.object({
+    url: y.string(),
+    apiKey: y.string(),
+});
+const Config = y.object({
+    instances: Instance.array(),
+});
+const installNebula = async () => {
+    console.log("Downloading Nebula...");
+    const file = await fetch(nebulaUrl);
+    if (file.body === null) {
+        throw new Error("Could not download Nebula executable.");
+    }
+    await writeFile(`${tmpDir}/nebula.tar.gz`, Readable.from(file.body));
+    console.log("Extracting Nebula...");
+    await promisify(execFile)("tar", [
+        "-xf",
+        `${tmpDir}/nebula.tar.gz`,
+        "-C",
+        tmpDir,
+    ]);
+};
+const loadConfig = async () => {
+    try {
+        const result = await readFile(`${configDir}/config.json`, "utf-8");
+        const config = JSON.parse(result);
+        return Config.parse(config);
+    }
+    catch (_error) {
+        // no config yet
+        return { instances: [] };
+    }
+};
+const saveConfig = async () => {
+    await writeFile(`${configDir}/config.json`, JSON.stringify(config, null, 2));
+    await chmod(`${configDir}/config.json`, 0o600);
+};
+const getNebulaCert = async (instance) => {
+    const response = await fetch(`${instance.url}/api/nebula/cert`, {
+        headers: {
+            authorization: `Bearer ${instance.apiKey}`,
+        },
+    });
+    if (!response.ok) {
+        throw new Error(`Failed to fetch Nebula certificate: ${response.status}`);
+    }
+    const { nebulaConfig } = await response.json();
+    await writeFile(`${tmpDir}/nebula.yml`, nebulaConfig);
+    await chmod(`${tmpDir}/nebula.yml`, 0o600);
+};
+const connectNebula = async (instance) => {
+    await getNebulaCert(instance);
+    const nebula = spawn("sudo", [`${tmpDir}/nebula`, "-config", `${tmpDir}/nebula.yml`], {
+        stdio: "inherit",
+    });
+    const interval = setInterval(async () => {
+        // refresh Nebula cert every 10 minutes (lifetime is 15 minutes)
+        await getNebulaCert(instance);
+        nebula.kill("SIGHUP");
+    }, 10 * 60 * 1000);
+    await new Promise((resolve) => nebula.on("exit", resolve));
+    clearInterval(interval);
+};
+const setupConnection = async () => {
+    const result = await prompts([
+        {
+            type: "text",
+            name: "url",
+            message: "Enter OneDeploy URL",
+        },
+        {
+            type: "password",
+            name: "apiKey",
+            message: "Enter OneDeploy API key",
+        },
+    ]);
+    if (result.apiKey === undefined || result.url === undefined) {
+        return;
+    }
+    config.instances.push({ url: result.url, apiKey: result.apiKey });
+    await saveConfig();
+};
+const removeConnection = async () => {
+    const { connection } = await prompts([
+        {
+            type: "select",
+            name: "connection",
+            message: "Select connection to remove",
+            choices: config.instances.map((instance, index) => ({
+                title: instance.url,
+                value: index,
+            })),
+        },
+    ]);
+    if (connection === undefined) {
+        return;
+    }
+    const { confirm } = await prompts([
+        {
+            type: "confirm",
+            name: "confirm",
+            message: `Are you sure you want to remove connection to ${config.instances[connection].url}?`,
+            initial: false,
+        },
+    ]);
+    if (confirm === true) {
+        config.instances.splice(connection, 1);
+        await saveConfig();
+    }
+};
+await installNebula();
+const config = await loadConfig();
+while (true) {
+    const { action } = await prompts([
+        {
+            type: "select",
+            name: "action",
+            message: "What do you want to do?",
+            choices: [
+                {
+                    title: "Connect",
+                    value: "connect",
+                    disabled: config.instances.length === 0,
+                },
+                {
+                    title: "Setup new connection",
+                    value: "setup",
+                },
+                {
+                    title: "Remove connection",
+                    value: "remove",
+                },
+            ],
+        },
+    ]);
+    if (action === "connect") {
+        const result = await prompts([
+            {
+                type: "select",
+                name: "connection",
+                message: "Select OneDeploy instance",
+                choices: config.instances.map((instance) => ({
+                    title: instance.url,
+                    value: instance,
+                })),
+            },
+        ]);
+        if (result.connection !== undefined) {
+            await connectNebula(result.connection);
+        }
+    }
+    else if (action === "setup") {
+        await setupConnection();
+    }
+    else if (action === "remove") {
+        await removeConnection();
+    }
+    else {
+        break;
+    }
+}
+await rm(tmpDir, { recursive: true, force: true });

package/package.json

@@ -0,0 +1,44 @@
+{
+	"name": "onedeploy-cli",
+	"version": "0.1.0",
+	"description": "CLI tool for connecting to OneDeploy via Nebula",
+	"keywords": [
+		"onedeploy",
+		"nebula"
+	],
+	"homepage": "https://github.com/0codekit/onedeploy-cli#readme",
+	"bugs": {
+		"url": "https://github.com/0codekit/onedeploy-cli/issues"
+	},
+	"repository": {
+		"type": "git",
+		"url": "git+https://github.com/0codekit/onedeploy-cli.git"
+	},
+	"license": "MIT",
+	"files": [
+		"./dist/**"
+	],
+	"authors": [
+		"Justus Zorn <justus.zorn@relyon.de>"
+	],
+	"type": "module",
+	"main": "src/index.ts",
+	"bin": {
+		"onedeploy": "./dist/index.js"
+	},
+	"scripts": {
+		"build": "tsc",
+		"check": "biome check src/*",
+		"fix": "biome check src/* --fix"
+	},
+	"devDependencies": {
+		"@biomejs/biome": "^2.2.3",
+		"@types/node": "^24.3.1",
+		"@types/prompts": "^2.4.9",
+		"typescript": "^5.9.2"
+	},
+	"dependencies": {
+		"prompts": "^2.4.2",
+		"yedra": "^0.17.9"
+	}
+}

package/src/index.ts

@@ -0,0 +1,196 @@
+import { execFile, spawn } from "node:child_process";
+import { randomUUID } from "node:crypto";
+import { chmod, mkdir, readFile, rm, writeFile } from "node:fs/promises";
+import { homedir } from "node:os";
+import { Readable } from "node:stream";
+import { promisify } from "node:util";
+import prompts from "prompts";
+import { y } from "yedra";
+
+const nebulaUrl = `https://github.com/slackhq/nebula/releases/download/v1.9.6/nebula-linux-amd64.tar.gz`;
+const configDir = `${homedir()}/.config/onedeploy`;
+const tmpDir = `/tmp/onedeploy-${randomUUID()}`;
+await mkdir(configDir, { recursive: true });
+await mkdir(tmpDir, { recursive: true });
+
+const Instance = y.object({
+	url: y.string(),
+	apiKey: y.string(),
+});
+
+const Config = y.object({
+	instances: Instance.array(),
+});
+
+type Instance = y.Typeof<typeof Instance>;
+type Config = y.Typeof<typeof Config>;
+
+const installNebula = async (): Promise<void> => {
+	console.log("Downloading Nebula...");
+	const file = await fetch(nebulaUrl);
+	if (file.body === null) {
+		throw new Error("Could not download Nebula executable.");
+	}
+	await writeFile(`${tmpDir}/nebula.tar.gz`, Readable.from(file.body));
+	console.log("Extracting Nebula...");
+	await promisify(execFile)("tar", [
+		"-xf",
+		`${tmpDir}/nebula.tar.gz`,
+		"-C",
+		tmpDir,
+	]);
+};
+
+const loadConfig = async (): Promise<Config> => {
+	try {
+		const result = await readFile(`${configDir}/config.json`, "utf-8");
+		const config = JSON.parse(result);
+		return Config.parse(config);
+	} catch (_error) {
+		// no config yet
+		return { instances: [] };
+	}
+};
+
+const saveConfig = async (): Promise<void> => {
+	await writeFile(`${configDir}/config.json`, JSON.stringify(config, null, 2));
+	await chmod(`${configDir}/config.json`, 0o600);
+};
+
+const getNebulaCert = async (instance: Instance) => {
+	const response = await fetch(`${instance.url}/api/nebula/cert`, {
+		headers: {
+			authorization: `Bearer ${instance.apiKey}`,
+		},
+	});
+	if (!response.ok) {
+		throw new Error(`Failed to fetch Nebula certificate: ${response.status}`);
+	}
+	const { nebulaConfig } = (await response.json()) as { nebulaConfig: string };
+	await writeFile(`${tmpDir}/nebula.yml`, nebulaConfig);
+	await chmod(`${tmpDir}/nebula.yml`, 0o600);
+};
+
+const connectNebula = async (instance: {
+	url: string;
+	apiKey: string;
+}): Promise<void> => {
+	await getNebulaCert(instance);
+	const nebula = spawn(
+		"sudo",
+		[`${tmpDir}/nebula`, "-config", `${tmpDir}/nebula.yml`],
+		{
+			stdio: "inherit",
+		},
+	);
+	const interval = setInterval(
+		async () => {
+			// refresh Nebula cert every 10 minutes (lifetime is 15 minutes)
+			await getNebulaCert(instance);
+			nebula.kill("SIGHUP");
+		},
+		10 * 60 * 1000,
+	);
+	await new Promise((resolve) => nebula.on("exit", resolve));
+	clearInterval(interval);
+};
+
+const setupConnection = async () => {
+	const result = await prompts([
+		{
+			type: "text",
+			name: "url",
+			message: "Enter OneDeploy URL",
+		},
+		{
+			type: "password",
+			name: "apiKey",
+			message: "Enter OneDeploy API key",
+		},
+	]);
+	if (result.apiKey === undefined || result.url === undefined) {
+		return;
+	}
+	config.instances.push({ url: result.url, apiKey: result.apiKey });
+	await saveConfig();
+};
+
+const removeConnection = async () => {
+	const { connection } = await prompts([
+		{
+			type: "select",
+			name: "connection",
+			message: "Select connection to remove",
+			choices: config.instances.map((instance, index) => ({
+				title: instance.url,
+				value: index,
+			})),
+		},
+	]);
+	if (connection === undefined) {
+		return;
+	}
+	const { confirm } = await prompts([
+		{
+			type: "confirm",
+			name: "confirm",
+			message: `Are you sure you want to remove connection to ${config.instances[connection].url}?`,
+			initial: false,
+		},
+	]);
+	if (confirm === true) {
+		config.instances.splice(connection, 1);
+		await saveConfig();
+	}
+};
+
+await installNebula();
+const config = await loadConfig();
+while (true) {
+	const { action } = await prompts([
+		{
+			type: "select",
+			name: "action",
+			message: "What do you want to do?",
+			choices: [
+				{
+					title: "Connect",
+					value: "connect",
+					disabled: config.instances.length === 0,
+				},
+				{
+					title: "Setup new connection",
+					value: "setup",
+				},
+				{
+					title: "Remove connection",
+					value: "remove",
+				},
+			],
+		},
+	]);
+	if (action === "connect") {
+		const result = await prompts([
+			{
+				type: "select",
+				name: "connection",
+				message: "Select OneDeploy instance",
+				choices: config.instances.map((instance) => ({
+					title: instance.url,
+					value: instance,
+				})),
+			},
+		]);
+		if (result.connection !== undefined) {
+			await connectNebula(result.connection);
+		}
+	} else if (action === "setup") {
+		await setupConnection();
+	} else if (action === "remove") {
+		await removeConnection();
+	} else {
+		break;
+	}
+}
+
+await rm(tmpDir, { recursive: true, force: true });