Greg Hellings
0b1aa9c3b7
When vox was activated after apipenv, then opening a new shell in a folder with a Pipfile resulted in calls to vox before the xontrib had been loaded. This resulted in improper error messages about missing the vox program and meant the Pipenv was not auto-loading in that folder. By moving activation of vox before these other xontribs, those xontribs can make use of vox internally
136 lines
4.0 KiB
Plaintext
136 lines
4.0 KiB
Plaintext
# vim: set ft=xonsh :
|
|
|
|
from tempfile import NamedTemporaryFile, TemporaryDirectory
|
|
|
|
def bw_unlock():
|
|
"""Unlocks the BitWarden CLI and adds the resulting session code to the
|
|
current environment variables. Also returns the code for them."""
|
|
if "BW_SESSION" in ${...}:
|
|
return $BW_SESSION
|
|
result = $(bw unlock)
|
|
while "BW_SESSION" not in result:
|
|
result = $(bw unlock)
|
|
lines = result.split("\n")
|
|
l = [k for k in lines if 'BW_SESSION="' in k][0]
|
|
left, right = l.split("=", 1)
|
|
token = right[1:-1]
|
|
$BW_SESSION = token
|
|
return token
|
|
|
|
def vpn(con, bwname):
|
|
nmcli c down @(con)
|
|
bw_unlock()
|
|
base=$(bw get password @(bwname))
|
|
secret=$(bw get totp @(bwname))
|
|
#echo vpn.secrets.password:${base}$(oathtool -b -d "${digits}" -s "${period}" --totp "${secret}") > "${f}"
|
|
|
|
with NamedTemporaryFile(delete_on_close=False) as fp:
|
|
secret = f"vpn.secrets.password:{base}{secret}"
|
|
fp.write(secret.encode("utf-8"))
|
|
fp.close()
|
|
nmcli c up @(con) passwd-file @(fp.name)
|
|
|
|
def _unlock(args):
|
|
bw_unlock()
|
|
aliases['unlock'] = _unlock
|
|
|
|
def _ivr(args):
|
|
vpn("350Main", "IVR Technology")
|
|
aliases['ivr'] = _ivr
|
|
|
|
def _ivr2(args):
|
|
vpn("gregory_hellings@ra.ivrtechnology.com", "IVR Technology")
|
|
aliases['ivr2'] = _ivr2
|
|
|
|
def _glrestart(args):
|
|
sudo nixos-container run gitlab -- systemctl restart gitlab
|
|
sudo nixos-container run gitlab -- systemctl restart nginx
|
|
aliases['glrestart'] = _glrestart
|
|
|
|
def _aws_creds(args):
|
|
$AWS_ACCESS_KEY_ID=$(bw get username "AWS Access Key")
|
|
$AWS_SECRET_ACCESS_KEY=$(bw get password "AWS Access Key")
|
|
aliases['aws_creds'] = _aws_creds
|
|
|
|
def _rebuild(args):
|
|
system = uname()
|
|
hostname = system.nodename
|
|
if system.sysname == 'Darwin':
|
|
darwin-rebuild --flake ~/.config/darwin switch
|
|
else:
|
|
with TemporaryDirectory() as td:
|
|
pushd @(td)
|
|
nom build f"/etc/nixos#nixosConfigurations.{hostname}.config.system.build.toplevel"
|
|
if g`result`:
|
|
nvd diff /run/current-system result
|
|
sudo nixos-rebuild switch
|
|
popd
|
|
aliases['rebuild'] = _rebuild
|
|
|
|
def _yaml2json(args, stdin=None, stdout=None):
|
|
import sys, yaml, json
|
|
from yaml import CLoader
|
|
json.dump(yaml.load(stdin, Loader=CLoader), stdout, indent=4)
|
|
aliases['yaml2json'] = _yaml2json
|
|
|
|
def _py2env(args):
|
|
vox new @(args[0]) -p /usr/bin/python2
|
|
aliases['py2env'] = _py2env
|
|
|
|
def _py3env(args):
|
|
vox new @(args[0])
|
|
aliases['py3env'] = _py3env
|
|
|
|
def _rundock(args):
|
|
if Path('/usr/bin/podman').exists():
|
|
e = 'podman'
|
|
else:
|
|
e = 'docker'
|
|
@(e) exec -ti @(args[0]) /bin/bash
|
|
aliases['rundock'] = _rundock
|
|
|
|
def _pip_extras(args):
|
|
import importlib_metadata
|
|
print(importlib_metadata.metadata(args[0]).get_all('Provides-Extra'))
|
|
aliases['pip_extras'] = _pip_extras
|
|
|
|
# Container stuff
|
|
def _newdock(args):
|
|
if Path('/usr/bin/podman').exists():
|
|
e = 'podman'
|
|
else:
|
|
e = 'docker'
|
|
@(e) run -P --privileged=true -e DISPLAY=$DISPLAY -v /tmp/.X11-unix:/tmp/.X11-unix -v @(getcwd()):/dmnt -v /etc/pki:/etc/pki:ro -d --name @(args[1]) @(args[0]) /sbin/init
|
|
rundock @(args[1])
|
|
aliases['newdock'] = _newdock
|
|
|
|
def _unknown_host(args):
|
|
sed -i -e @(args[0])d ~/.ssh/known_hosts
|
|
aliases['unknown_host'] = _unknown_host
|
|
|
|
def _bake(args):
|
|
from pathlib import Path
|
|
templates = Path("~/.copier-templates/").expanduser()
|
|
if not templates.exists():
|
|
git clone src:greg/copier-templates.git ~/.copier-templates
|
|
copier copy @(str(templates / args[0])) .
|
|
aliases['bake'] = _bake
|
|
|
|
def _cleanup(args):
|
|
sudo nix profile wipe-history --profile ~/.local/state/nix/profiles/home-manager --older-than '30d'
|
|
sudo nix-collect-garbage --delete-older-than 30d
|
|
sudo nix store optimise
|
|
aliases['cleanup'] = _cleanup
|
|
|
|
###
|
|
#
|
|
# Other random nice-to-have things
|
|
#
|
|
###
|
|
|
|
# Allows identifying JSON as if it was Python by adding some new builtins to the language
|
|
import builtins
|
|
builtins.true = True
|
|
builtins.false = False
|
|
builtins.null = None
|