make-azure 0.4.0__tar.gz

make_azure-0.4.0/.gitignore

@@ -0,0 +1,19 @@
+__pycache__/
+*.py[cod]
+.venv/
+.pytest_cache/
+.ruff_cache/
+dist/
+build/
+*.egg-info/
+.env
+
+# wrangler caches its Pages upload state here (site/ is deployed by direct upload).
+.wrangler/
+
+# The VS Code extension in editors/vscode: `dist/` is above, and these two are what
+# building a .vsix leaves behind. `npm install` is never run there -- the extension has
+# no runtime dependency and both CLIs come from `npx --yes` -- so node_modules/ is
+# listed to catch the day somebody tries.
+node_modules/
+*.vsix

make_azure-0.4.0/PKG-INFO

@@ -0,0 +1,77 @@
+Metadata-Version: 2.5
+Name: make-azure
+Version: 0.4.0
+Summary: A free-tier Azure VM for mkrun -- nearest region, DuckDNS name, nothing billed left behind; no az CLI.
+Project-URL: Homepage, https://make.optersoft.com
+Project-URL: Documentation, https://academy.optersoft.com/cloud/azure/virtual-machine
+Author-email: "Optersoft, S.L." <david@optersoft.com>
+License-Expression: MIT OR Apache-2.0
+Keywords: azure,duckdns,free tier,mk,mkrun,virtual machine
+Requires-Python: >=3.11
+Requires-Dist: azure-identity>=1.19
+Requires-Dist: mkrun>=0.4.3
+Description-Content-Type: text/markdown
+
+# make-azure
+
+A **free-tier Azure virtual machine** for [mkrun](https://pypi.org/project/mkrun/): created in
+the nearest region that will build it, optionally given a DuckDNS name, and deleted with
+everything it made, so nothing is left billing.
+
+Sign-in is Microsoft's `azure-identity`: a browser, MFA up front, tokens in the encrypted
+system keychain. Everything else is plain Resource Manager HTTPS. There's no `az` CLI and
+no `azure-mgmt-*` SDK.
+
+**Documentation:** [Virtual machine — Optersoft Academy](https://academy.optersoft.com/cloud/azure/virtual-machine)
+
+## From any shell
+
+```console
+$ uv tool install mkrun
+$ mk --install azure                 # make-azure, beside mk
+$ mk azure.login --tenant <tenant>   # once; a browser opens
+$ mk azure.account                   # which subscription, and is it a free one
+$ mk azure.region                    # the nearest regions, and the one azure.vm uses
+$ mk azure.vm box                    # Ubuntu 24.04, SSH open
+$ mk azure.vm box --duckdns mybox    # ...and mybox.duckdns.org points at it
+$ mk azure.vm box --no-public-ip     # private network only; avoids the billed IPv4
+$ mk azure.vms
+$ mk azure.dns box mybox
+$ mk azure.delete box
+$ mk --dry-run azure.vm box          # the plan; no sign-in, nothing sent
+```
+
+With no task file in the directory, `mk` runs the tasks of the packages installed with
+`mk --install`. Inside a project that has a `Makefile.py`, the file decides what is loaded;
+use `mk --global azure.vm box` there.
+
+## In a task file
+
+```python
+# /// script
+# dependencies = ["make-azure"]
+# ///
+from make_azure import azure
+```
+
+## What is free
+
+The free account (and Azure for Students) covers 750 hours a month of `Standard_B2ats_v2`
+(the default), `Standard_B2pts_v2` or `Standard_B1s`, and a 64 GiB P6 disk, for its first 12
+months. A Standard public IPv4 is **billed**, about $3.65 a month: `--no-public-ip` leaves it
+out. A subscription without free services is refused unless `--paid-ok` is given.
+
+## Settings
+
+| variable | what |
+|---|---|
+| `DUCKDNS_TOKEN` | for `--duckdns` / `azure.dns`; a credential, so it's withheld and redacted |
+| `SSH_PUBLIC_KEY` | the key itself (CI); else `~/.ssh/id_ed25519.pub` or `id_rsa.pub` |
+| `AZURE_CLIENT_ID` + `AZURE_TENANT_ID` | sign in as an app, with `AZURE_FEDERATED_TOKEN` (CI OIDC), `AZURE_FEDERATED_TOKEN_FILE` or `AZURE_CLIENT_SECRET` |
+
+They come from the environment or `~/.make/secrets.env`. The sign-in is remembered in
+`~/.make/azure/login.json`; that file holds no secret.
+
+## Licence
+
+MIT OR Apache-2.0.

make_azure-0.4.0/README.md

@@ -0,0 +1,63 @@
+# make-azure
+
+A **free-tier Azure virtual machine** for [mkrun](https://pypi.org/project/mkrun/): created in
+the nearest region that will build it, optionally given a DuckDNS name, and deleted with
+everything it made, so nothing is left billing.
+
+Sign-in is Microsoft's `azure-identity`: a browser, MFA up front, tokens in the encrypted
+system keychain. Everything else is plain Resource Manager HTTPS. There's no `az` CLI and
+no `azure-mgmt-*` SDK.
+
+**Documentation:** [Virtual machine — Optersoft Academy](https://academy.optersoft.com/cloud/azure/virtual-machine)
+
+## From any shell
+
+```console
+$ uv tool install mkrun
+$ mk --install azure                 # make-azure, beside mk
+$ mk azure.login --tenant <tenant>   # once; a browser opens
+$ mk azure.account                   # which subscription, and is it a free one
+$ mk azure.region                    # the nearest regions, and the one azure.vm uses
+$ mk azure.vm box                    # Ubuntu 24.04, SSH open
+$ mk azure.vm box --duckdns mybox    # ...and mybox.duckdns.org points at it
+$ mk azure.vm box --no-public-ip     # private network only; avoids the billed IPv4
+$ mk azure.vms
+$ mk azure.dns box mybox
+$ mk azure.delete box
+$ mk --dry-run azure.vm box          # the plan; no sign-in, nothing sent
+```
+
+With no task file in the directory, `mk` runs the tasks of the packages installed with
+`mk --install`. Inside a project that has a `Makefile.py`, the file decides what is loaded;
+use `mk --global azure.vm box` there.
+
+## In a task file
+
+```python
+# /// script
+# dependencies = ["make-azure"]
+# ///
+from make_azure import azure
+```
+
+## What is free
+
+The free account (and Azure for Students) covers 750 hours a month of `Standard_B2ats_v2`
+(the default), `Standard_B2pts_v2` or `Standard_B1s`, and a 64 GiB P6 disk, for its first 12
+months. A Standard public IPv4 is **billed**, about $3.65 a month: `--no-public-ip` leaves it
+out. A subscription without free services is refused unless `--paid-ok` is given.
+
+## Settings
+
+| variable | what |
+|---|---|
+| `DUCKDNS_TOKEN` | for `--duckdns` / `azure.dns`; a credential, so it's withheld and redacted |
+| `SSH_PUBLIC_KEY` | the key itself (CI); else `~/.ssh/id_ed25519.pub` or `id_rsa.pub` |
+| `AZURE_CLIENT_ID` + `AZURE_TENANT_ID` | sign in as an app, with `AZURE_FEDERATED_TOKEN` (CI OIDC), `AZURE_FEDERATED_TOKEN_FILE` or `AZURE_CLIENT_SECRET` |
+
+They come from the environment or `~/.make/secrets.env`. The sign-in is remembered in
+`~/.make/azure/login.json`; that file holds no secret.
+
+## Licence
+
+MIT OR Apache-2.0.

make_azure-0.4.0/pyproject.toml

@@ -0,0 +1,47 @@
+[project]
+name = "make-azure"
+# 0.4.0, not 0.1.0: 0.1-0.3 were published and then deleted, and PyPI never
+# lets a filename be used twice.
+version = "0.4.0"
+description = "A free-tier Azure VM for mkrun -- nearest region, DuckDNS name, nothing billed left behind; no az CLI."
+readme = "README.md"
+requires-python = ">=3.11"
+# Same dual licence as mkrun. The implementation came from optersoft's
+# azure-virtual-machine (AGPL-3.0, Optersoft its only author), relicensed here.
+license = "MIT OR Apache-2.0"
+authors = [{ name = "Optersoft, S.L.", email = "david@optersoft.com" }]
+keywords = ["azure", "virtual machine", "free tier", "duckdns", "mk", "mkrun"]
+# azure-identity owns the sign-in (MSAL, the encrypted token cache) and nothing
+# else: the API calls are plain REST through `make.http`. Not the azure-mgmt-*
+# SDKs -- more packages and a slow import to wrap a handful of URLs. It is
+# imported lazily, so `mk --list` never pays for it. mkrun 0.4.3 is the first
+# that loads `mkrun.groups` entry points with no task file.
+dependencies = ["mkrun>=0.4.3", "azure-identity>=1.19"]
+
+# What lets `mk azure.vm` run with no task file, once `mk --install azure`
+# has put this package beside mk. The value is the module that registers the group.
+[project.entry-points."mkrun.groups"]
+azure = "make_azure.azure"
+
+[build-system]
+requires = ["hatchling"]
+build-backend = "hatchling.build"
+
+[tool.hatch.build.targets.wheel]
+packages = ["src/make_azure"]
+
+[project.urls]
+Homepage = "https://make.optersoft.com"
+Documentation = "https://academy.optersoft.com/cloud/azure/virtual-machine"
+
+[tool.uv.sources]
+mkrun = { workspace = true }
+
+[dependency-groups]
+dev = ["pytest>=8", "ruff>=0.6"]
+
+[tool.pytest.ini_options]
+testpaths = ["tests"]
+addopts = "-q"
+
+# No [tool.ruff] here on purpose: every member shares the root config.

make_azure-0.4.0/src/make_azure/__init__.py

@@ -0,0 +1,36 @@
+"""Azure tasks for mkrun -- the `azure` group.
+
+One thing: a virtual machine on Azure's free tier, in the nearest region that
+will build it, optionally with a DuckDNS name, and removed with everything it
+made. Sign-in is azure-identity (a browser, MFA up front, an encrypted token
+cache); the rest is plain Resource Manager REST through `make.http`.
+
+From any shell, with no task file:
+
+    uv tool install mkrun
+    mk --install azure
+    mk azure.vm box
+
+Or in a task file, where importing is what registers it:
+
+    # Makefile.py
+    from make_azure import azure
+
+The group merges with a repo's own `azure.*` tasks -- groups are namespaces,
+and this package claims only its seven names.
+"""
+
+from __future__ import annotations
+
+__version__ = "0.4.0"
+
+__all__ = ["azure", "vm"]
+
+
+def __getattr__(name: str):
+    """Import on first access, keeping module scope import-free -- startup is a feature."""
+    if name in __all__:
+        import importlib
+
+        return importlib.import_module(f".{name}", __name__)
+    raise AttributeError(f"module {__name__!r} has no attribute {name!r}")

make_azure-0.4.0/src/make_azure/azure.py

@@ -0,0 +1,113 @@
+"""The `azure` group: a free-tier virtual machine, made and removed.
+
+    mk azure.login --tenant T        sign in once (a browser opens)
+    mk azure.account                 which subscription, and whether it is free
+    mk azure.region                  the nearest regions, and the one azure.vm uses
+    mk azure.vm box                  Ubuntu 24.04, SSH open, in the nearest region
+    mk azure.vm box --duckdns mybox  ...and mybox.duckdns.org points at it
+    mk azure.vms                     what the subscription has
+    mk azure.dns box mybox           point mybox.duckdns.org at an existing VM
+    mk azure.delete box              the VM and everything it made
+    mk --dry-run azure.vm box        the plan; nothing is sent, no sign-in
+
+The work is in `make_azure.vm`, imported inside each task so `mk --list` never
+loads azure-identity. No `az` CLI is involved.
+"""
+
+from __future__ import annotations
+
+from typing import Annotated
+
+from make import arg, group
+
+__all__ = ["azure"]
+
+azure = group("azure")
+
+Subscription = Annotated[str, arg(help="subscription id or name, if the sign-in reaches several")]
+Size = Annotated[str, arg(help="Standard_B2ats_v2 (default), Standard_B2pts_v2 or Standard_B1s")]
+Origin = Annotated[str | None, arg(help="your position, LAT,LON; default: from the time zone")]
+
+
+@azure.task(name="login")
+def login(
+    *,
+    tenant: Annotated[str, arg(help="tenant id or domain; needed for a personal account")] = "organizations",
+) -> None:
+    """Sign in with a browser, MFA included; tokens go in the encrypted cache."""
+    from . import vm
+
+    vm.login(tenant)
+
+
+@azure.task(name="account")
+def account(*, subscription: Subscription = "") -> None:
+    """The subscription this sign-in acts in, and whether its offer carries free services."""
+    from . import vm
+
+    vm.account(subscription_name=subscription)
+
+
+@azure.task(name="region")
+def region(
+    *, size: Size = "Standard_B2ats_v2", origin: Origin = None, subscription: Subscription = ""
+) -> None:
+    """The regions nearest to you, and the first that sells the size."""
+    from . import vm
+
+    vm.region(size=size, origin=origin, subscription_name=subscription)
+
+
+@azure.task(name="vm", dangerous=True)
+def create(
+    name: Annotated[str, arg(help="the VM's name; its resource group is NAME-rg")],
+    *,
+    size: Size = "Standard_B2ats_v2",
+    origin: Origin = None,
+    location: Annotated[str | None, arg(help="skip the search and use this region")] = None,
+    duckdns: Annotated[
+        str | None, arg(help="point SUBDOMAIN.duckdns.org at it (needs DUCKDNS_TOKEN)")
+    ] = None,
+    user: Annotated[str, arg(help="the login user on the VM")] = "azureuser",
+    no_public_ip: Annotated[bool, arg(help="private network only; avoids the billed IPv4")] = False,
+    paid_ok: Annotated[bool, arg(help="allow a subscription without free services")] = False,
+    subscription: Subscription = "",
+) -> None:
+    """Create a free-tier Ubuntu VM in the nearest region that will build it."""
+    from . import vm
+
+    vm.create(
+        name,
+        size=size,
+        origin=origin,
+        location=location,
+        duckdns=duckdns,
+        user=user,
+        paid_ok=paid_ok,
+        public_ip=not no_public_ip,
+        subscription_name=subscription,
+    )
+
+
+@azure.task(name="vms")
+def vms(*, subscription: Subscription = "") -> None:
+    """The subscription's VMs: region, size, power state, address."""
+    from . import vm
+
+    vm.vms(subscription_name=subscription)
+
+
+@azure.task(name="dns")
+def dns(name: str, subdomain: str, *, subscription: Subscription = "") -> None:
+    """Point SUBDOMAIN.duckdns.org at an existing VM (needs DUCKDNS_TOKEN)."""
+    from . import vm
+
+    vm.dns(name, subdomain, subscription_name=subscription)
+
+
+@azure.task(name="delete", dangerous=True)
+def delete(name: str, *, subscription: Subscription = "") -> None:
+    """Delete a VM's resource group: the VM, its disk, network and IP, all at once."""
+    from . import vm
+
+    vm.delete(name, subscription_name=subscription)