Download gnupghome.tar when net-booting

This contains a keyring that is generated on the server for each client
that netboots.

2 files changed, 71 insertions, 1 deletions

diff --git a/src/dnsmasq-dhcp-script.sh b/src/dnsmasq-dhcp-script.sh
new file mode 100644
index 0000000..167d229
--- /dev/null
+++ b/src/dnsmasq-dhcp-script.sh
@@ -0,0 +1,64 @@
+#!/bin/sh
+. samizdat-paths.sh
+TFTP_ROOT=${samizdat_isolinux_dir}
+[ "$1 $4" = "tftp ${TFTP_ROOT}/linux/vmlinuz" ] || exit
+# $2 is the length of the file
+CLIENT_IP=$3
+
+# dnsmasq clears the environment.  kiki needs at least $HOME
+export USER=root
+export MAIL=/var/mail/root
+export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
+export LANG=en_US.UTF-8
+export HOME=/root
+export LANGUAGE=en_US:en
+export LOGNAME=root
+
+debug()
+{
+    LOGDIR=/var/log/dnsmasq-dhcp-script
+    mkdir -p "$LOGDIR"
+    exec > "$LOGDIR/$$.log" 2>&1
+    set -x
+}
+
+new_child()
+{
+    child_dir=$samizdat_child_dir/child.$$
+    if [ -d "$child_dir" ]; then
+        rmdir "$child_dir" || exit 1
+    fi
+
+    sh -x "$(which keygen.sh)" "$child_dir" || return
+    tar --exclude '*~' -zcf "$child_dir"/gnupghome.tar -C "$child_dir"/root/.gnupg . || return
+
+    tftp_dir="${TFTP_ROOT}"/"$CLIENT_IP"
+    if [ ! -d "$tftp_dir" ]; then
+        ATOMIC=y
+        dest_dir="$tftp_dir"~
+
+        # DNSMASQ DOCUMENTATION IS WRONG OMFG
+        # Otherwise this symlink farm would be unnecessary
+
+        mkdir -p "$dest_dir"
+        (cd "$dest_dir" && ln -sf ../* . && rm "$CLIENT_IP"~) || return
+    else
+        dest_dir="$tftp_dir"
+    fi
+
+    chown dnsmasq "$child_dir" "$child_dir"/gnupghome.tar
+    ln -sf "$child_dir"/gnupghome.tar "$dest_dir"/
+
+    if [ "$ATOMIC" ]; then
+        mv -T "$dest_dir" "$tftp_dir"
+    fi
+}
+
+cleanup_after_fail()
+{
+    umount "$child_dir"
+    rmdir "$child_dir"
+}
+
+debug
+(new_child || cleanup_after_fail) &
diff --git a/src/keygen.sh b/src/keygen.sh
index 4c13e67..5b48512 100755
--- a/src/keygen.sh
+++ b/src/keygen.sh
@@ -60,13 +60,19 @@ doublecheck()
 
 silent()
 {
+    case "$-" in
+        *x*) return ;;
+    esac
+    SILENT=y
     exec 3>&1 4>&2
     exec >/dev/null 2>&1
 }
 
 noisy()
 {
-    exec >&3 2>&1
+    if [ "$SILENT" ]; then
+        exec >&3 2>&1
+    fi
 }
 
 new_child()