fabaccess-bffh/src/db.rs

use std::sync::Arc;
use std::path::PathBuf;
use std::str::FromStr;

use slog::Logger;

use crate::error::Result;
use crate::config::Settings;

/// (Hashed) password database
pub mod pass;

/// User storage
pub mod user;

/// Access control storage
///
/// Stores&Retrieves Permissions and Roles
pub mod access;

/// Machine storage
///
/// Stores&Retrieves Machines
pub mod machine;

#[derive(Clone)]
pub struct Databases {
    pub access: Arc<access::AccessControl>,
    pub machine: Arc<machine::MachineDB>,
    pub passdb: Arc<pass::PassDB>,
}

const LMDB_MAX_DB: u32 = 16;

impl Databases {
    pub fn new(log: &Logger, config: &Settings) -> Result<Self> {

        // Initialize the LMDB environment. This blocks until the mmap() finishes
        info!(log, "LMDB env");
        let env = lmdb::Environment::new()
            .set_flags(lmdb::EnvironmentFlags::MAP_ASYNC | lmdb::EnvironmentFlags::NO_SUB_DIR)
            .set_max_dbs(LMDB_MAX_DB as libc::c_uint)
            .open(&PathBuf::from_str("/tmp/a.db").unwrap())?;

        // Start loading the machine database, authentication system and permission system
        // All of those get a custom logger so the source of a log message can be better traced and
        // filtered
        let env = Arc::new(env);
        let mdb = machine::init(log.new(o!("system" => "machines")), &config, env.clone())?;

        // Error out if any of the subsystems failed to start.
        let defs = crate::machine::MachineDescription::load_file(&config.machines)?;
        let machdb = machine::MachineDB::new(mdb, defs);


        let mut ac = access::AccessControl::new();

        let permdb = access::init(log.new(o!("system" => "permissions")), &config, env.clone())?;
        ac.add_source_unchecked("Internal".to_string(), Box::new(permdb));

        let passdb = pass::PassDB::init(log.new(o!("system" => "passwords")), env.clone()).unwrap();

        Ok(Self {
            access: Arc::new(ac),
            machine: Arc::new(machdb),
            passdb: Arc::new(passdb),
        })
    }
}