util

Documentation

Index

• Constants
• Variables
• func AbsolutePathFromConfigPath(path string) string
• func CheckForFQDNRules(name string) error
• func DecodeAndUnmarshalNaCl(msg []byte, output interface{}, pubKey *key.MachinePublic, ...) error
• func GenerateMagicDNSRootDomains(ipPrefixes []netip.Prefix) []dnsname.FQDN
• func GenerateRandomBytes(n int) ([]byte, error)
• func GenerateRandomStringDNSSafe(size int) (string, error)
• func GenerateRandomStringURLSafe(n int) (string, error)
• func GetFileMode(key string) fs.FileMode
• func GetIPPrefixEndpoints(na netip.Prefix) (netip.Addr, netip.Addr)
• func GrpcSocketDialer(ctx context.Context, addr string) (net.Conn, error)
• func IsStringInSlice(slice []string, str string) bool
• func LogErr(err error, msg string)
• func NormalizeToFQDNRules(name string, stripEmailDomain bool) (string, error)
• func NormalizeToFQDNRulesConfigFromViper(name string) (string, error)
• func ParseIPSet(arg string, bits *int) (*netipx.IPSet, error)
• func StringOrPrefixListContains[T string | netip.Prefix](ts []T, t T) bool
• func StringToIPPrefix(prefixes []string) ([]netip.Prefix, error)
• func TSLogfWrapper() logger.Logf
• func TailMapResponseToString(resp tailcfg.MapResponse) string
• func TailNodesToString(nodes []*tailcfg.Node) string

Constants

const (
	RegisterMethodAuthKey = "authkey"
	RegisterMethodOIDC    = "oidc"
	RegisterMethodCLI     = "cli"
)

const (
	ByteSize = 8

	// value related to RFC 1123 and 952.
	LabelHostnameLength = 63
)

const (
	Base8              = 8
	Base10             = 10
	BitSize16          = 16
	BitSize32          = 32
	BitSize64          = 64
	PermissionFallback = 0o700
)

Variables

var (
	NodePublicKeyRegex       = regexp.MustCompile("nodekey:[a-fA-F0-9]+")
	ErrCannotDecryptResponse = errors.New("cannot decrypt response")
	ZstdCompression          = "zstd"
)

var Comparers []cmp.Option = []cmp.Option{
	IPComparer, PrefixComparer, MkeyComparer, NkeyComparer, DkeyComparer,
}

var DkeyComparer = cmp.Comparer(func(x, y key.DiscoPublic) bool {
	return x.String() == y.String()
})

var ErrInvalidUserName = errors.New("invalid user name")

var IPComparer = cmp.Comparer(func(x, y netip.Addr) bool {
	return x.Compare(y) == 0
})

var MkeyComparer = cmp.Comparer(func(x, y key.MachinePublic) bool {
	return x.String() == y.String()
})

var NkeyComparer = cmp.Comparer(func(x, y key.NodePublic) bool {
	return x.String() == y.String()
})

var PrefixComparer = cmp.Comparer(func(x, y netip.Prefix) bool {
	return x == y
})

Functions

func AbsolutePathFromConfigPath

func AbsolutePathFromConfigPath(path string) string

func CheckForFQDNRules

func CheckForFQDNRules(name string) error

func DecodeAndUnmarshalNaCl

func DecodeAndUnmarshalNaCl(
	msg []byte,
	output interface{},
	pubKey *key.MachinePublic,
	privKey *key.MachinePrivate,
) error

func GenerateMagicDNSRootDomains

func GenerateMagicDNSRootDomains(ipPrefixes []netip.Prefix) []dnsname.FQDN

From the netmask we can find out the wildcard bits (the bits that are not set in the netmask). This allows us to then calculate the subnets included in the subsequent class block and generate the entries.

func GenerateRandomBytes

func GenerateRandomBytes(n int) ([]byte, error)

GenerateRandomBytes returns securely generated random bytes. It will return an error if the system's secure random number generator fails to function correctly, in which case the caller should not continue.

func GenerateRandomStringDNSSafe

func GenerateRandomStringDNSSafe(size int) (string, error)

GenerateRandomStringDNSSafe returns a DNS-safe securely generated random string. It will return an error if the system's secure random number generator fails to function correctly, in which case the caller should not continue.

func GenerateRandomStringURLSafe

func GenerateRandomStringURLSafe(n int) (string, error)

GenerateRandomStringURLSafe returns a URL-safe, base64 encoded securely generated random string. It will return an error if the system's secure random number generator fails to function correctly, in which case the caller should not continue.

func GetFileMode

func GetFileMode(key string) fs.FileMode

func GetIPPrefixEndpoints

func GetIPPrefixEndpoints(na netip.Prefix) (netip.Addr, netip.Addr)

func GrpcSocketDialer

func GrpcSocketDialer(ctx context.Context, addr string) (net.Conn, error)

func IsStringInSlice

func IsStringInSlice(slice []string, str string) bool

func LogErr

func LogErr(err error, msg string)

func NormalizeToFQDNRules

func NormalizeToFQDNRules(name string, stripEmailDomain bool) (string, error)

NormalizeToFQDNRules will replace forbidden chars in user it can also return an error if the user doesn't respect RFC 952 and 1123.

func NormalizeToFQDNRulesConfigFromViper

func NormalizeToFQDNRulesConfigFromViper(name string) (string, error)

func ParseIPSet

func ParseIPSet(arg string, bits *int) (*netipx.IPSet, error)

parseIPSet parses arg as one:

• an IP address (IPv4 or IPv6)
• the string "*" to match everything (both IPv4 & IPv6)
• a CIDR (e.g. "192.168.0.0/16")
• a range of two IPs, inclusive, separated by hyphen ("2eff::1-2eff::0800")

bits, if non-nil, is the legacy SrcBits CIDR length to make a IP address (without a slash) treated as a CIDR of *bits length. nolint

func StringOrPrefixListContains

func StringOrPrefixListContains[T string | netip.Prefix](ts []T, t T) bool

func StringToIPPrefix

func StringToIPPrefix(prefixes []string) ([]netip.Prefix, error)

func TSLogfWrapper

func TSLogfWrapper() logger.Logf

func TailMapResponseToString

func TailMapResponseToString(resp tailcfg.MapResponse) string

func TailNodesToString

func TailNodesToString(nodes []*tailcfg.Node) string