#!/usr/bin/perl

# Author: Vyatta <eng@vyatta.com>
# Date: 2007
# Description: script to save the configuration

# **** License ****
# This program is free software; you can redistribute it and/or modify
# it under the terms of the GNU General Public License version 2 as
# published by the Free Software Foundation.
# 
# This program is distributed in the hope that it will be useful, but
# WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
# General Public License for more details.
# 
# This code was originally developed by Vyatta, Inc.
# Portions created by Vyatta are Copyright (C) 2006, 2007, 2008 Vyatta, Inc.
# All Rights Reserved.
# **** End License ****

use strict;
use lib "/opt/vyatta/share/perl5";
use Vyatta::ConfigOutput;
use File::Sync qw(fsync);
use FileHandle;
use IO::Prompt;
use Vyatta::Misc qw(get_short_config_path);

my $etcdir = "/opt/vyatta/etc";
my $bootpath = $etcdir . "/config";
my $save_file = $bootpath . "/config.boot";
my $url_tmp_file = $bootpath . "/config.boot.$$";

my $show_default = 1;
if ($#ARGV > 1) {
  print "Usage: save [config_file_name] --no-defaults\n";
  exit 1;
}


if (defined($ARGV[0])) {
    if ($ARGV[0] ne '--no-defaults') {
	$save_file = $ARGV[0];
    }
    else {
	$show_default = 0;
    }

    if (defined($ARGV[1]) && $ARGV[1] eq '--no-defaults') {
	$show_default = 0;
    }
}


my $mode = 'local';
my $proto;

if ($save_file =~ /^[^\/]\w+:\//) {
  if ($save_file =~ /^(\w+):\/\/\w/) {
    $mode = 'url';
    $proto = lc($1);
    if ($proto eq 'tftp') {
    } elsif ($proto eq 'ftp') {
    } elsif ($proto eq 'scp') {
    } else {
      print "Invalid url protocol [$proto]\n";
      exit 1;
    }
  } else {
    print "Invalid url [$save_file]\n";
    exit 1;
  }
}

if ($mode eq 'local' and !($save_file =~ /^\//)) {
  # relative path
  $save_file = "$bootpath/$save_file";
}

my $version_str = `/opt/vyatta/sbin/vyatta_current_conf_ver.pl`;
# when presenting to users, show shortened /config path
my $shortened_save_file = get_short_config_path($save_file);
print "Saving configuration to '$shortened_save_file'...\n";

my $save;
if ($mode eq 'local') {
    # first check if this file exists, and if so ensure this is a config file.
    if (-e $save_file) {
	my $result = `grep ' === vyatta-config-version:' $save_file`;
	if (!defined $result || length($result) == 0) {
	    print "File exists and is not a Vyatta configuration file, aborting save!\n";
	    exit 1;
	}
    }

    # this overwrites the file if it exists. we could create a backup first.
    open $save, '>', $save_file
	or die "Can not open file '$save_file': $!\n";
} elsif ($mode eq 'url') {
    die "Package [curl] not installed\n" unless ( -f '/usr/bin/curl');

    open $save, '>', $url_tmp_file
	or die "Cannot open file '$url_tmp_file': $!\n";
}

select $save;
my $show_cmd = 'cli-shell-api showConfig --show-active-only --show-ignore-edit';
if ($show_default) {
  $show_cmd .= ' --show-show-defaults';
}
open(my $show_fd, '-|', $show_cmd) or die 'Cannot execute config output';
while (<$show_fd>) {
  print;
}
close($show_fd);
print $version_str;
select STDOUT;

fsync $save;
close $save;

if ($mode eq 'url') {
  my $rc = system("curl -# -T $url_tmp_file $save_file");
  if ($proto eq 'scp' && ($rc >> 8) == 51){
      $save_file =~ m/scp:\/\/(.*?)\//;
      my $host = $1;
      if ($host =~ m/.*@(.*)/) {
        $host = $1;
      }
      my $rsa_key = `ssh-keyscan -t rsa $host 2>/dev/null`;
      print "The authenticity of host '$host' can't be established.\n";
      my $fingerprint = `ssh-keygen -lf /dev/stdin <<< \"$rsa_key\" | awk {' print \$2 '}`;
      chomp $fingerprint;
      print "RSA key fingerprint is $fingerprint.\n";
      if (prompt("Are you sure you want to continue connecting (yes/no) [Yes]? ", -tynd=>"y")) {
          mkdir "~/.ssh/";
          open(my $known_hosts, ">>", "$ENV{HOME}/.ssh/known_hosts") 
            or die "Cannot open known_hosts: $!";
          print $known_hosts "$rsa_key\n";
          close($known_hosts);
          $rc = system("curl -# -T $url_tmp_file $save_file");
          print "\n";
      }
  }
  system("rm -f $url_tmp_file");
  if ($rc) {
    print "Error saving $save_file\n";
    exit 1;
  }
}

print "Done\n";
exit 0;