package remoteexec import ( "bytes" "context" "fmt" "io" "io/ioutil" "log" "os" "time" "github.com/hashicorp/terraform/communicator" "github.com/hashicorp/terraform/communicator/remote" "github.com/hashicorp/terraform/helper/schema" "github.com/hashicorp/terraform/terraform" "github.com/mitchellh/go-linereader" ) func Provisioner() terraform.ResourceProvisioner { return &schema.Provisioner{ Schema: map[string]*schema.Schema{ "inline": &schema.Schema{ Type: schema.TypeList, Elem: &schema.Schema{Type: schema.TypeString}, Optional: true, ConflictsWith: []string{"script", "scripts"}, }, "script": &schema.Schema{ Type: schema.TypeString, Optional: true, ConflictsWith: []string{"inline", "scripts"}, }, "scripts": &schema.Schema{ Type: schema.TypeList, Elem: &schema.Schema{Type: schema.TypeString}, Optional: true, ConflictsWith: []string{"script", "inline"}, }, }, ApplyFunc: applyFn, } } // Apply executes the remote exec provisioner func applyFn(ctx context.Context) error { connState := ctx.Value(schema.ProvRawStateKey).(*terraform.InstanceState) data := ctx.Value(schema.ProvConfigDataKey).(*schema.ResourceData) o := ctx.Value(schema.ProvOutputKey).(terraform.UIOutput) // Get a new communicator comm, err := communicator.New(connState) if err != nil { return err } // Collect the scripts scripts, err := collectScripts(data) if err != nil { return err } for _, s := range scripts { defer s.Close() } // Copy and execute each script if err := runScripts(o, comm, scripts); err != nil { return err } return nil } // generateScripts takes the configuration and creates a script from each inline config func generateScripts(d *schema.ResourceData) ([]string, error) { var scripts []string for _, l := range d.Get("inline").([]interface{}) { scripts = append(scripts, l.(string)) } return scripts, nil } // collectScripts is used to collect all the scripts we need // to execute in preparation for copying them. func collectScripts(d *schema.ResourceData) ([]io.ReadCloser, error) { // Check if inline if _, ok := d.GetOk("inline"); ok { scripts, err := generateScripts(d) if err != nil { return nil, err } var r []io.ReadCloser for _, script := range scripts { r = append(r, ioutil.NopCloser(bytes.NewReader([]byte(script)))) } return r, nil } // Collect scripts var scripts []string if script, ok := d.GetOk("script"); ok { scripts = append(scripts, script.(string)) } if scriptList, ok := d.GetOk("scripts"); ok { for _, script := range scriptList.([]interface{}) { scripts = append(scripts, script.(string)) } } // Open all the scripts var fhs []io.ReadCloser for _, s := range scripts { fh, err := os.Open(s) if err != nil { for _, fh := range fhs { fh.Close() } return nil, fmt.Errorf("Failed to open script '%s': %v", s, err) } fhs = append(fhs, fh) } // Done, return the file handles return fhs, nil } // runScripts is used to copy and execute a set of scripts func runScripts( o terraform.UIOutput, comm communicator.Communicator, scripts []io.ReadCloser) error { // Wait and retry until we establish the connection err := retryFunc(comm.Timeout(), func() error { err := comm.Connect(o) return err }) if err != nil { return err } defer comm.Disconnect() for _, script := range scripts { var cmd *remote.Cmd outR, outW := io.Pipe() errR, errW := io.Pipe() outDoneCh := make(chan struct{}) errDoneCh := make(chan struct{}) go copyOutput(o, outR, outDoneCh) go copyOutput(o, errR, errDoneCh) remotePath := comm.ScriptPath() err = retryFunc(comm.Timeout(), func() error { if err := comm.UploadScript(remotePath, script); err != nil { return fmt.Errorf("Failed to upload script: %v", err) } cmd = &remote.Cmd{ Command: remotePath, Stdout: outW, Stderr: errW, } if err := comm.Start(cmd); err != nil { return fmt.Errorf("Error starting script: %v", err) } return nil }) if err == nil { cmd.Wait() if cmd.ExitStatus != 0 { err = fmt.Errorf("Script exited with non-zero exit status: %d", cmd.ExitStatus) } } // Wait for output to clean up outW.Close() errW.Close() <-outDoneCh <-errDoneCh // Upload a blank follow up file in the same path to prevent residual // script contents from remaining on remote machine empty := bytes.NewReader([]byte("")) if err := comm.Upload(remotePath, empty); err != nil { // This feature is best-effort. log.Printf("[WARN] Failed to upload empty follow up script: %v", err) } // If we have an error, return it out now that we've cleaned up if err != nil { return err } } return nil } func copyOutput( o terraform.UIOutput, r io.Reader, doneCh chan<- struct{}) { defer close(doneCh) lr := linereader.New(r) for line := range lr.Ch { o.Output(line) } } // retryFunc is used to retry a function for a given duration func retryFunc(timeout time.Duration, f func() error) error { finish := time.After(timeout) for { err := f() if err == nil { return nil } log.Printf("Retryable error: %v", err) select { case <-finish: return err case <-time.After(3 * time.Second): } } }