mirror of
https://github.com/borgmatic-collective/borgmatic.git
synced 2026-07-31 21:53:01 +02:00
69 lines
2.5 KiB
Python
69 lines
2.5 KiB
Python
import json
|
|
import os
|
|
import shutil
|
|
import subprocess
|
|
import sys
|
|
import tempfile
|
|
|
|
|
|
def generate_configuration(config_path, repository_path, secrets_directory):
|
|
'''
|
|
Generate borgmatic configuration into a file at the config path, and update the defaults so as
|
|
to work for testing, including updating the source directories, injecting the given repository
|
|
path, and tacking on an encryption passphrase loaded from container secrets in the given secrets
|
|
directory.
|
|
'''
|
|
subprocess.check_call(f'borgmatic config generate --destination {config_path}'.split(' '))
|
|
config = (
|
|
open(config_path)
|
|
.read()
|
|
.replace('ssh://user@backupserver/./sourcehostname.borg', repository_path)
|
|
.replace('- path: /mnt/backup', '')
|
|
.replace('label: local', '')
|
|
.replace('- /home/user/path with spaces', '')
|
|
.replace('- /home', f'- {config_path}')
|
|
.replace('- /etc', '')
|
|
.replace('- /var/log/syslog*', '')
|
|
+ '\nencryption_passphrase: "{credential container mysecret}"'
|
|
+ f'\ncontainer:\n secrets_directory: {secrets_directory}'
|
|
)
|
|
config_file = open(config_path, 'w')
|
|
config_file.write(config)
|
|
config_file.close()
|
|
|
|
|
|
def test_container_secret():
|
|
# Create a Borg repository.
|
|
temporary_directory = tempfile.mkdtemp()
|
|
repository_path = os.path.join(temporary_directory, 'test.borg')
|
|
|
|
original_working_directory = os.getcwd()
|
|
os.chdir(temporary_directory)
|
|
|
|
try:
|
|
config_path = os.path.join(temporary_directory, 'test.yaml')
|
|
generate_configuration(config_path, repository_path, secrets_directory=temporary_directory)
|
|
|
|
secret_path = os.path.join(temporary_directory, 'mysecret')
|
|
with open(secret_path, 'w') as secret_file:
|
|
secret_file.write('test')
|
|
|
|
subprocess.check_call(
|
|
f'borgmatic -v 2 --config {config_path} repo-create --encryption repokey'.split(' '),
|
|
)
|
|
|
|
# Run borgmatic to generate a backup archive, and then list it to make sure it exists.
|
|
subprocess.check_call(
|
|
f'borgmatic --config {config_path}'.split(' '),
|
|
)
|
|
output = subprocess.check_output(
|
|
f'borgmatic --config {config_path} list --json'.split(' '),
|
|
).decode(sys.stdout.encoding)
|
|
parsed_output = json.loads(output)
|
|
|
|
assert len(parsed_output) == 1
|
|
assert len(parsed_output[0]['archives']) == 1
|
|
finally:
|
|
os.chdir(original_working_directory)
|
|
shutil.rmtree(temporary_directory)
|