source: branches/confman-1.9/confaudit.in @ 568

#!@BASH@
#
# Copyright (c) 2008, Christopher Cowart and contributors
# All rights reserved.
# 
# Redistribution and use in source and binary forms, with or without
# modification, are permitted provided that the following conditions 
# are met:
# * Redistributions of source code must retain the above copyright 
#   notice, this list of conditions and the following disclaimer.
# * Redistributions in binary form must reproduce the above copyright 
#   notice, this list of conditions and the following disclaimer in the 
#   documentation and/or other materials provided with the distribution.
# 
# THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS 
# "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT 
# LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR 
# A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT 
# OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, 
# SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED 
# TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR 
# PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF 
# LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING 
# NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS 
# SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
#
# $Id$


if [ -r @pkgdatadir@/confmancommon.sh ] ; then
    . @pkgdatadir@/confmancommon.sh
else
    echo "Can't find confmancommon.sh. Exiting." >&2
    exit 17
fi

function print_help {
    echo "usage: $0 [-s] [-q] [-d]" >&4
    echo "Type '$0 -h' to display this help and exit." >&4
    conf_cleanExit ${1:-0}
}

quiet=false
sleep_mode=false
while getopts "sqdh" opt 2>&4 ; do
    case $opt in 
        s) sleep_mode=true ;;
        q) quiet=true ;;
        d) DEBUG=true ;;
        h) print_help 0 ;;
        *) print_help 1 ;;
    esac
done

# If we're in debug mode, we should log stderr messages to the logger
# as well. Otherwise, we send them to the bit bucket.
if $DEBUG ; then
    exec 1>&2
else
    exec 1>/dev/null
fi

system_lock=$(conf_lock_system)

conf_require_recipe

if $sleep_mode; then
    if [ -n "${CONF_AUDIT_SLEEP}" ] && [ ${CONF_AUDIT_SLEEP} -ge 0 ]; then
        echo "Sleeping ${CONF_AUDIT_SLEEP} seconds..."
        sleep ${CONF_AUDIT_SLEEP}
    else
        echo "Invalid sleep value: ${CONF_AUDIT_SLEEP}" >&2
        exit 1
    fi
fi

# Set up our "Working Copy"
tmpdir=$(conf_tmp_dir)
WORK_PATH="$tmpdir"

tarpath=$(conf_fetch)
if ! [ -s $tarpath ] ; then
    echo "Could not fetch the export." >&2
    exit 1
fi

case ${CONF_EXPORT_STYLE} in
    repository|recipe)
        tar -xzf $tarpath -C $tmpdir
        ;;
    module)
        for layer in $(conf_get_recipe); do
            tarfile="$tarpath/$layer.tgz"
            if ! [ -s $tarfile ]; then
                echo "Could not fetch the export." >&2
                exit 1
            fi
            tar -xzf $tarfile -C $tmpdir
        done
        ;;
    *)
        echo "Unsupported export style." >&2
        exit 1
        ;;
esac

rm -rf $tarpath

tmproot=$(conf_tmp_dir)
live_root="${LIVE_ROOT}"
statefile=$(conf_tmp_file)

# Override LIVE_ROOT to commit into our temporary directory.
LIVE_ROOT="$tmproot"

echo "Audit operation started" | conf_logger
for layer in $(conf_get_reverse_recipe) ; do
    echo "Rolling on $layer..."
    conf_rollout $layer $statefile || conf_cleanExit
done
for file in $SINGULARITIES ; do
    conf_assemble_sing $file || conf_cleanExit
done
rm -rf $tmpdir

if $quiet; then
    diff -ruq ${live_root}/ $tmproot | grep -v "^Only in" >&2
else
    diff -ru ${live_root}/ $tmproot | grep -v "^Only in" >&2
fi
echo "Audit operation finished successfully" | conf_logger

conf_unlock_system $system_lock

rm -rf $tmproot

conf_cleanExit 0