Mercurial > code > home > repos > infra
annotate dns.py @ 94:122ba5444176
dhcp,dns to pipe
| author | drewp@bigasterisk.com |
|---|---|
| date | Fri, 15 Jul 2022 14:32:10 -0700 |
| parents | dae714e8f620 |
| children | 9ec487a381e2 |
| rev | line source |
|---|---|
| 38 | 1 import subprocess |
| 2 import tempfile | |
| 3 | |
| 4 import requests | |
|
34
d4fb38f13c79
refactor dns and some other non-net setup
drewp@bigasterisk.com
parents:
diff
changeset
|
5 from pyinfra import host |
|
d4fb38f13c79
refactor dns and some other non-net setup
drewp@bigasterisk.com
parents:
diff
changeset
|
6 from pyinfra.operations import apt, files, server, systemd |
|
d4fb38f13c79
refactor dns and some other non-net setup
drewp@bigasterisk.com
parents:
diff
changeset
|
7 |
| 38 | 8 |
| 9 def prepare_dhcp_hosts(): | |
|
88
dae714e8f620
reactor and temporarily cut dep on lanscape
drewp@bigasterisk.com
parents:
81
diff
changeset
|
10 empty = tempfile.NamedTemporaryFile(mode='wt') |
|
dae714e8f620
reactor and temporarily cut dep on lanscape
drewp@bigasterisk.com
parents:
81
diff
changeset
|
11 return empty |
| 38 | 12 lanscape_ip = subprocess.check_output([ |
| 13 'kubectl', | |
| 14 'get', | |
| 15 'svc', | |
| 79 | 16 'lanscape', |
| 17 "-o=jsonpath={.spec.clusterIP}", | |
| 38 | 18 ], |
| 19 encoding='ascii') | |
| 20 url = f'http://{lanscape_ip}/dnsConfig' | |
| 21 resp = requests.get(url) | |
| 22 resp.raise_for_status() | |
| 23 lanscape_config = resp.json() | |
| 24 | |
| 25 dhcp_hosts = tempfile.NamedTemporaryFile(mode='wt', encoding='ascii') | |
| 26 dhcp_hosts.write("# written by pyinfra\n\n") | |
| 27 for row in lanscape_config['dhcp_table']: | |
|
65
49a69852a4f4
let's get in less trouble by using dhcp more universally
drewp@bigasterisk.com
parents:
61
diff
changeset
|
28 dhcp_hosts.write(f'{row["mac"]},{row["hostname"]},{row["ip"]},24h\n') |
| 38 | 29 dhcp_hosts.flush() |
| 30 return dhcp_hosts | |
| 31 | |
| 94 | 32 |
| 81 | 33 def resolv_conf_use_systemd_networkd(): |
| 34 files.link(path='/etc/resolv.conf', target='/run/systemd/resolve/resolv.conf', force=True) | |
| 94 | 35 |
| 36 | |
| 81 | 37 def resolv_conf_static_file(): |
| 38 files.file(path='/etc/resolv.conf', present=False, force=True) | |
| 94 | 39 files.template( |
| 40 src='templates/resolv.conf.j2', | |
| 41 dest='/etc/resolv.conf', | |
| 42 # review this- it's probably a bad dep on bang. maybe both 10.5.0.1 and a public ns would be ok | |
| 43 ns='10.5.0.1' if host.name in ['prime', 'plus'] else '10.2.0.3', | |
| 44 force=True) | |
| 45 | |
| 70 | 46 |
| 94 | 47 def dnsmasq_instance(net_name, house_iface, dhcp_range, router): |
|
88
dae714e8f620
reactor and temporarily cut dep on lanscape
drewp@bigasterisk.com
parents:
81
diff
changeset
|
48 files.directory(path=f'/opt/dnsmasq/{net_name}') |
| 94 | 49 files.template( |
| 50 src='templates/dnsmasq/dnsmasq.conf.j2', | |
| 51 dest=f'/opt/dnsmasq/{net_name}/dnsmasq.conf', | |
| 52 net=net_name, | |
| 53 house_iface=house_iface, | |
| 54 dhcp_range=dhcp_range, | |
| 55 router=router, | |
| 56 dhcp_enabled=net_name == '10.2' and host.name in [ | |
| 57 #'bang', | |
| 58 'pipe', | |
| 59 ]) | |
|
88
dae714e8f620
reactor and temporarily cut dep on lanscape
drewp@bigasterisk.com
parents:
81
diff
changeset
|
60 files.template(src='templates/dnsmasq/hosts.j2', dest=f'/opt/dnsmasq/{net_name}/hosts', net=net_name) |
| 94 | 61 files.template(src='/dev/null', dest=f'/opt/dnsmasq/{net_name}/dhcp_hosts', net=net_name) |
|
88
dae714e8f620
reactor and temporarily cut dep on lanscape
drewp@bigasterisk.com
parents:
81
diff
changeset
|
62 |
|
dae714e8f620
reactor and temporarily cut dep on lanscape
drewp@bigasterisk.com
parents:
81
diff
changeset
|
63 files.template(src='templates/dnsmasq/dnsmasq.service.j2', |
|
dae714e8f620
reactor and temporarily cut dep on lanscape
drewp@bigasterisk.com
parents:
81
diff
changeset
|
64 dest=f'/etc/systemd/system/dnsmasq_{net_name}.service', |
|
dae714e8f620
reactor and temporarily cut dep on lanscape
drewp@bigasterisk.com
parents:
81
diff
changeset
|
65 net=net_name) |
|
dae714e8f620
reactor and temporarily cut dep on lanscape
drewp@bigasterisk.com
parents:
81
diff
changeset
|
66 if net_name == '10.2': |
|
dae714e8f620
reactor and temporarily cut dep on lanscape
drewp@bigasterisk.com
parents:
81
diff
changeset
|
67 systemd.service(service=f'dnsmasq_{net_name}', enabled=True, restarted=True, daemon_reload=True) |
|
dae714e8f620
reactor and temporarily cut dep on lanscape
drewp@bigasterisk.com
parents:
81
diff
changeset
|
68 # 10.5 is after wireguard setup |
| 94 | 69 |
| 70 | |
| 71 files.template(src='templates/hosts.j2', dest='/etc/hosts') | |
| 72 resolv_conf_use_systemd_networkd() | |
| 73 files.template(src='templates/resolved.conf.j2', dest='/etc/systemd/resolved.conf') | |
| 74 systemd.service(service='systemd-resolved.service', running=True, restarted=True) | |
| 75 | |
|
34
d4fb38f13c79
refactor dns and some other non-net setup
drewp@bigasterisk.com
parents:
diff
changeset
|
76 if host.name == 'bang': |
|
d4fb38f13c79
refactor dns and some other non-net setup
drewp@bigasterisk.com
parents:
diff
changeset
|
77 apt.packages(packages=['dnsmasq']) |
|
d4fb38f13c79
refactor dns and some other non-net setup
drewp@bigasterisk.com
parents:
diff
changeset
|
78 systemd.service(service='dnsmasq', enabled=False, running=False) |
|
d4fb38f13c79
refactor dns and some other non-net setup
drewp@bigasterisk.com
parents:
diff
changeset
|
79 files.directory(path='/opt/dnsmasq') |
|
d4fb38f13c79
refactor dns and some other non-net setup
drewp@bigasterisk.com
parents:
diff
changeset
|
80 |
| 94 | 81 #dhcp_hosts = prepare_dhcp_hosts() |
| 38 | 82 |
| 94 | 83 # dnsmasq_instance('10.2', house_iface='ens5', dhcp_range='unused', router='unused') |
| 84 dnsmasq_instance('10.5', house_iface='unused', dhcp_range='unused', router='unused') # only works after wireguard is up | |
|
34
d4fb38f13c79
refactor dns and some other non-net setup
drewp@bigasterisk.com
parents:
diff
changeset
|
85 |
| 94 | 86 elif host.name == 'pipe': |
| 87 apt.packages(packages=['dnsmasq']) | |
| 88 systemd.service(service='dnsmasq', enabled=False, running=False) | |
| 89 files.directory(path='/opt/dnsmasq') | |
| 90 dnsmasq_instance('10.2', house_iface='eth1', dhcp_range='10.2.0.20,10.2.0.120', router='10.2.0.3') | |
| 91 | |
| 92 else: | |
| 93 pass |