Files
urapt/cli/commands/repos.go
T
owen 981587e83d Initial release: self-hostable APT repository server and CLI
urapt is a self-hostable APT repository server with a companion CLI for
pushing and managing Debian .deb packages.

Server (urapt-server):
- REST API + APT endpoint, SQLite storage (pure-Go modernc driver, no CGO)
- .deb files stored content-addressed on disk, reference-counted for dedup
- Server-managed RSA-4096 OpenPGP signing key (ProtonMail/go-crypto)
- APT indices (Release/InRelease/Packages[.gz/.xz]) generated on demand
  from the DB, cached in memory, signed with the server key
- Full APT model: repositories -> distributions -> components -> architectures
- Bearer-token auth for REST; HTTP Basic auth for private-repo APT reads
- First registrant becomes admin; repo-scoped permissions
  (read/write/read-write/admin) plus owner and server-admin roles
- Multipart package push with control-field extraction, list/show/delete,
  pool serving, blob ref-count cleanup
- Audit log

CLI (urapt):
- register/login/logout/whoami, token management
- repo/distro/component/arch CRUD, member management
- push/pull/ls/show/rm for packages
- apt-config helper that emits apt setup commands (key, sources.list,
  auth.conf for private repos)

Packaging & docs:
- Dockerfile (multi-stage distroless), docker-compose.yml, sample config
- README quick start, architecture overview, config reference, security notes
- PLAN.md design blueprint, CHANGELOG.md, GPL-3.0 LICENSE
- GitHub Actions CI (test, lint, cross-build for linux/darwin amd64/arm64)
- Makefile release target producing static binaries + tarballs + checksums

Tests cover the data-access layer, auth/permission checks, APT index
generation, .deb parsing, GPG signing, the REST API, and the typed API
client. Verified end-to-end on a Raspberry Pi (arm64) pushing and installing
a real package.
2026-06-28 16:57:34 -05:00

321 lines
7.4 KiB
Go

package commands
import (
"fmt"
"os"
"github.com/spf13/cobra"
"urapt/cli/output"
)
func (r *Root) repoCmd() *cobra.Command {
cmd := &cobra.Command{
Use: "repo",
Short: "Manage repositories",
}
cmd.AddCommand(
r.repoCreateCmd(),
r.repoListCmd(),
r.repoInfoCmd(),
r.repoSetVisibilityCmd(),
r.repoDeleteCmd(),
r.repoPubkeyCmd(),
r.repoMembersCmd(),
)
return cmd
}
func (r *Root) repoCreateCmd() *cobra.Command {
var visibility, description string
var public, private bool
cmd := &cobra.Command{
Use: "create <name>",
Short: "Create a new repository",
Args: cobra.ExactArgs(1),
RunE: func(cmd *cobra.Command, args []string) error {
vis := visibility
if public {
vis = "public"
} else if private {
vis = "private"
}
if vis == "" {
vis = "private"
}
c, err := r.client()
if err != nil {
return err
}
repo, err := c.CreateRepository(args[0], vis, description)
if err != nil {
return err
}
if r.flagJSON {
output.JSON(repo)
} else {
fmt.Printf("Created repository %s (%s)\n", repo.Name, repo.Visibility)
}
return nil
},
}
cmd.Flags().StringVar(&visibility, "visibility", "", "public or private")
cmd.Flags().BoolVar(&public, "public", false, "shorthand for --visibility=public")
cmd.Flags().BoolVar(&private, "private", false, "shorthand for --visibility=private")
cmd.Flags().StringVarP(&description, "description", "d", "", "repository description")
return cmd
}
func (r *Root) repoListCmd() *cobra.Command {
return &cobra.Command{
Use: "list",
Short: "List repositories visible to you",
RunE: func(cmd *cobra.Command, args []string) error {
c, err := r.client()
if err != nil {
return err
}
repos, err := c.ListRepositories()
if err != nil {
return err
}
if r.flagJSON {
output.JSON(repos)
return nil
}
if len(repos) == 0 {
fmt.Println("No repositories.")
return nil
}
fmt.Printf("%-20s %-10s %s\n", "NAME", "VISIBILITY", "DESCRIPTION")
for _, repo := range repos {
fmt.Printf("%-20s %-10s %s\n", repo.Name, repo.Visibility, repo.Description)
}
return nil
},
}
}
func (r *Root) repoInfoCmd() *cobra.Command {
return &cobra.Command{
Use: "info <name>",
Short: "Show details of a repository",
Args: cobra.ExactArgs(1),
RunE: func(cmd *cobra.Command, args []string) error {
c, err := r.client()
if err != nil {
return err
}
repo, err := c.GetRepository(args[0])
if err != nil {
return err
}
if r.flagJSON {
output.JSON(repo)
return nil
}
fmt.Printf("name: %s\n", repo.Name)
fmt.Printf("visibility: %s\n", repo.Visibility)
fmt.Printf("description: %s\n", repo.Description)
fmt.Printf("created: %s\n", repo.CreatedAt)
return nil
},
}
}
func (r *Root) repoSetVisibilityCmd() *cobra.Command {
var public, private bool
cmd := &cobra.Command{
Use: "set-visibility <name>",
Short: "Change a repository's visibility",
Args: cobra.ExactArgs(1),
RunE: func(cmd *cobra.Command, args []string) error {
vis := ""
if public {
vis = "public"
} else if private {
vis = "private"
}
if vis == "" {
return fmt.Errorf("pass --public or --private")
}
c, err := r.client()
if err != nil {
return err
}
repo, err := c.UpdateRepository(args[0], nil, &vis, nil)
if err != nil {
return err
}
if r.flagJSON {
output.JSON(repo)
} else {
fmt.Printf("Updated %s: visibility=%s\n", repo.Name, repo.Visibility)
}
return nil
},
}
cmd.Flags().BoolVar(&public, "public", false, "make public")
cmd.Flags().BoolVar(&private, "private", false, "make private")
return cmd
}
func (r *Root) repoDeleteCmd() *cobra.Command {
return &cobra.Command{
Use: "delete <name>",
Short: "Delete a repository and all its packages",
Args: cobra.ExactArgs(1),
RunE: func(cmd *cobra.Command, args []string) error {
c, err := r.client()
if err != nil {
return err
}
if err := c.DeleteRepository(args[0]); err != nil {
return err
}
fmt.Printf("Deleted repository %s\n", args[0])
return nil
},
}
}
func (r *Root) repoPubkeyCmd() *cobra.Command {
var outFile string
cmd := &cobra.Command{
Use: "pubkey <name>",
Short: "Print the server's armored public key for a repository",
Args: cobra.ExactArgs(1),
RunE: func(cmd *cobra.Command, args []string) error {
c, err := r.client()
if err != nil {
return err
}
pub, err := c.RepositoryPubkey(args[0])
if err != nil {
return err
}
if outFile != "" {
return os.WriteFile(outFile, []byte(pub), 0o644)
}
fmt.Print(pub)
return nil
},
}
cmd.Flags().StringVarP(&outFile, "out", "o", "", "write to file instead of stdout")
return cmd
}
func (r *Root) repoMembersCmd() *cobra.Command {
cmd := &cobra.Command{
Use: "members",
Short: "Manage repository members",
}
cmd.AddCommand(
r.repoMembersListCmd(),
r.repoMembersAddCmd(),
r.repoMembersUpdateCmd(),
r.repoMembersRemoveCmd(),
)
return cmd
}
func (r *Root) repoMembersListCmd() *cobra.Command {
return &cobra.Command{
Use: "list <repo>",
Short: "List members of a repository",
Args: cobra.ExactArgs(1),
RunE: func(cmd *cobra.Command, args []string) error {
c, err := r.client()
if err != nil {
return err
}
members, err := c.ListMembers(args[0])
if err != nil {
return err
}
if r.flagJSON {
output.JSON(members)
return nil
}
fmt.Printf("%-20s %s\n", "USER", "ACCESS")
for _, m := range members {
fmt.Printf("%-20s %s\n", m.User.Username, m.Access)
}
return nil
},
}
}
func (r *Root) repoMembersAddCmd() *cobra.Command {
var access string
cmd := &cobra.Command{
Use: "add <repo> <username>",
Short: "Grant a user access to a repository",
Args: cobra.ExactArgs(2),
RunE: func(cmd *cobra.Command, args []string) error {
c, err := r.client()
if err != nil {
return err
}
m, err := c.AddMember(args[0], args[1], access)
if err != nil {
return err
}
if r.flagJSON {
output.JSON(m)
} else {
fmt.Printf("Granted %s access=%s on %s\n", m.User.Username, m.Access, args[0])
}
return nil
},
}
cmd.Flags().StringVarP(&access, "access", "a", "read", "read, write, read-write, or admin")
return cmd
}
func (r *Root) repoMembersUpdateCmd() *cobra.Command {
var access string
cmd := &cobra.Command{
Use: "update <repo> <username>",
Short: "Change a member's access level",
Args: cobra.ExactArgs(2),
RunE: func(cmd *cobra.Command, args []string) error {
c, err := r.client()
if err != nil {
return err
}
m, err := c.UpdateMember(args[0], args[1], access)
if err != nil {
return err
}
if r.flagJSON {
output.JSON(m)
} else {
fmt.Printf("Updated %s access=%s on %s\n", m.User.Username, m.Access, args[0])
}
return nil
},
}
cmd.Flags().StringVarP(&access, "access", "a", "", "read, write, read-write, or admin")
return cmd
}
func (r *Root) repoMembersRemoveCmd() *cobra.Command {
return &cobra.Command{
Use: "remove <repo> <username>",
Short: "Revoke a user's access to a repository",
Args: cobra.ExactArgs(2),
RunE: func(cmd *cobra.Command, args []string) error {
c, err := r.client()
if err != nil {
return err
}
if err := c.RemoveMember(args[0], args[1]); err != nil {
return err
}
fmt.Printf("Removed %s from %s\n", args[1], args[0])
return nil
},
}
}