mirror of
https://github.com/kuhyx/utils.git
synced 2026-11-10 21:07:15 +01:00
Krzysztof kuhy Rudnicki
c99cb8373e
Extracts the chattr+bind-mount+systemd-watcher file-locking pattern (and a new pacman PreTransaction package-block primitive) out of screen-locker and steam-backlog-enforcer into a standalone, config-driven library so both projects (and steam-backlog-enforcer's new block-gaming feature) can share one implementation instead of maintaining parallel copies. - guardctl: CLI entry point (file-guard, package-block subcommands) - lib/file_guard.sh: chattr +i / bind-mount / systemd-path-watcher / pacman hook enforcement for a single target file, keyed by /etc/guard-lib/targets config; includes `sync` (adopt current content as canonical - for a caller's own legitimate edit) distinct from `pacman-relock` (revert drift) - lib/package_block.sh: time-locked pacman PreTransaction hook that refuses to (re)install a given package while a lock file's `until` timestamp is in the future; supports --bind-mount to compose with file-guard on the same lock file - pacman-hooks/: the installed hook scripts + .hook definitions - systemd/: guard-file@.path/.service watcher units, guard-bind-mount@.service Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01AFNiYQQgSLAkiBXswyimPq
60 lines
1.6 KiB
Bash
Executable File
60 lines
1.6 KiB
Bash
Executable File
#!/bin/bash
|
|
# guardctl - unified CLI for guard-lib's file-guard and package-block primitives.
|
|
set -euo pipefail
|
|
|
|
GUARD_LIB_ROOT="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
|
|
# When installed to /usr/local/bin, lib/ lives alongside it at
|
|
# /usr/local/lib/guard-lib; fall back to the repo layout for local runs.
|
|
if [[ -d "$GUARD_LIB_ROOT/lib" ]]; then
|
|
LIB_DIR="$GUARD_LIB_ROOT/lib"
|
|
elif [[ -d "/usr/local/lib/guard-lib" ]]; then
|
|
LIB_DIR="/usr/local/lib/guard-lib"
|
|
else
|
|
echo "guardctl: error: cannot locate lib/ directory" >&2
|
|
exit 1
|
|
fi
|
|
|
|
# shellcheck source=lib/common.sh
|
|
source "$LIB_DIR/common.sh"
|
|
# shellcheck source=lib/file_guard.sh
|
|
source "$LIB_DIR/file_guard.sh"
|
|
# shellcheck source=lib/package_block.sh
|
|
source "$LIB_DIR/package_block.sh"
|
|
|
|
usage() {
|
|
cat <<'EOF'
|
|
Usage: guardctl <primitive> <subcommand> [args...]
|
|
|
|
Primitives:
|
|
file-guard install <name> --target <path> [--canonical <path>] [--bind-mount] [--plugin <script>] [--also-watch <path>]...
|
|
file-guard enforce <name>
|
|
file-guard unlock <name>
|
|
file-guard uninstall <name> [--keep-canonical]
|
|
file-guard status <name>
|
|
file-guard canonical-path <name>
|
|
file-guard bind-mount <name>
|
|
|
|
package-block start <name> --package <pkg> --lock-file <path> --days <N>
|
|
package-block check <name>
|
|
package-block status <name>
|
|
package-block end <name>
|
|
EOF
|
|
}
|
|
|
|
main() {
|
|
if [[ $# -lt 1 ]]; then
|
|
usage
|
|
exit 1
|
|
fi
|
|
local primitive="$1"
|
|
shift
|
|
case "$primitive" in
|
|
file-guard) file_guard_main "$@" ;;
|
|
package-block) package_block_main "$@" ;;
|
|
-h|--help) usage ;;
|
|
*) usage; die "unknown primitive '$primitive'" ;;
|
|
esac
|
|
}
|
|
|
|
main "$@"
|