owen
981587e83d
urapt is a self-hostable APT repository server with a companion CLI for pushing and managing Debian .deb packages. Server (urapt-server): - REST API + APT endpoint, SQLite storage (pure-Go modernc driver, no CGO) - .deb files stored content-addressed on disk, reference-counted for dedup - Server-managed RSA-4096 OpenPGP signing key (ProtonMail/go-crypto) - APT indices (Release/InRelease/Packages[.gz/.xz]) generated on demand from the DB, cached in memory, signed with the server key - Full APT model: repositories -> distributions -> components -> architectures - Bearer-token auth for REST; HTTP Basic auth for private-repo APT reads - First registrant becomes admin; repo-scoped permissions (read/write/read-write/admin) plus owner and server-admin roles - Multipart package push with control-field extraction, list/show/delete, pool serving, blob ref-count cleanup - Audit log CLI (urapt): - register/login/logout/whoami, token management - repo/distro/component/arch CRUD, member management - push/pull/ls/show/rm for packages - apt-config helper that emits apt setup commands (key, sources.list, auth.conf for private repos) Packaging & docs: - Dockerfile (multi-stage distroless), docker-compose.yml, sample config - README quick start, architecture overview, config reference, security notes - PLAN.md design blueprint, CHANGELOG.md, GPL-3.0 LICENSE - GitHub Actions CI (test, lint, cross-build for linux/darwin amd64/arm64) - Makefile release target producing static binaries + tarballs + checksums Tests cover the data-access layer, auth/permission checks, APT index generation, .deb parsing, GPG signing, the REST API, and the typed API client. Verified end-to-end on a Raspberry Pi (arm64) pushing and installing a real package.
76 lines
1.8 KiB
Go
76 lines
1.8 KiB
Go
// Package config manages the urapt CLI's local configuration: the server URL,
|
|
// username, and API token stored in ~/.config/urapt/config.toml (perm 0600).
|
|
package config
|
|
|
|
import (
|
|
"fmt"
|
|
"os"
|
|
"path/filepath"
|
|
"strings"
|
|
|
|
"github.com/BurntSushi/toml"
|
|
)
|
|
|
|
// File is the on-disk CLI config shape.
|
|
type File struct {
|
|
Default Profile `toml:"default"`
|
|
}
|
|
|
|
// Profile is the active connection profile.
|
|
type Profile struct {
|
|
Server string `toml:"server"`
|
|
User string `toml:"user"`
|
|
Token string `toml:"token"`
|
|
}
|
|
|
|
// configPath returns the path to the CLI config file.
|
|
func configPath() (string, error) {
|
|
dir, err := os.UserConfigDir()
|
|
if err != nil {
|
|
dir = os.Getenv("HOME")
|
|
dir = filepath.Join(dir, ".config")
|
|
}
|
|
return filepath.Join(dir, "urapt", "config.toml"), nil
|
|
}
|
|
|
|
// Load reads the CLI config, returning an empty config if none exists.
|
|
func Load() (*File, error) {
|
|
path, err := configPath()
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
data, err := os.ReadFile(path)
|
|
if err != nil {
|
|
if os.IsNotExist(err) {
|
|
return &File{}, nil
|
|
}
|
|
return nil, fmt.Errorf("read config: %w", err)
|
|
}
|
|
var f File
|
|
if err := toml.Unmarshal(data, &f); err != nil {
|
|
return nil, fmt.Errorf("parse config: %w", err)
|
|
}
|
|
f.Default.Server = strings.TrimRight(f.Default.Server, "/")
|
|
return &f, nil
|
|
}
|
|
|
|
// Save writes the CLI config with 0600 permissions.
|
|
func Save(f *File) error {
|
|
path, err := configPath()
|
|
if err != nil {
|
|
return err
|
|
}
|
|
if err := os.MkdirAll(filepath.Dir(path), 0o700); err != nil {
|
|
return fmt.Errorf("create config dir: %w", err)
|
|
}
|
|
var buf strings.Builder
|
|
enc := toml.NewEncoder(&buf)
|
|
if err := enc.Encode(f); err != nil {
|
|
return fmt.Errorf("encode config: %w", err)
|
|
}
|
|
return os.WriteFile(path, []byte(buf.String()), 0o600)
|
|
}
|
|
|
|
// Path returns the config file path (for display).
|
|
func Path() (string, error) { return configPath() }
|