mirror of
				https://github.com/tailscale/tailscale.git
				synced 2025-10-31 08:11:32 +01:00 
			
		
		
		
	Add a new `--encrypt-state` flag to `cmd/tailscaled`. Based on that flag, migrate the existing state file to/from encrypted format if needed. Updates #15830 Signed-off-by: Andrew Lytvynov <awly@tailscale.com>
		
			
				
	
	
		
			57 lines
		
	
	
		
			1.6 KiB
		
	
	
	
		
			Go
		
	
	
	
	
	
			
		
		
	
	
			57 lines
		
	
	
		
			1.6 KiB
		
	
	
	
		
			Go
		
	
	
	
	
	
| // Copyright (c) Tailscale Inc & AUTHORS
 | |
| // SPDX-License-Identifier: BSD-3-Clause
 | |
| 
 | |
| // Package atomicfile contains code related to writing to filesystems
 | |
| // atomically.
 | |
| //
 | |
| // This package should be considered internal; its API is not stable.
 | |
| package atomicfile // import "tailscale.com/atomicfile"
 | |
| 
 | |
| import (
 | |
| 	"fmt"
 | |
| 	"os"
 | |
| 	"path/filepath"
 | |
| 	"runtime"
 | |
| )
 | |
| 
 | |
| // WriteFile writes data to filename+some suffix, then renames it into filename.
 | |
| // The perm argument is ignored on Windows, but if the target filename already
 | |
| // exists then the target file's attributes and ACLs are preserved. If the target
 | |
| // filename already exists but is not a regular file, WriteFile returns an error.
 | |
| func WriteFile(filename string, data []byte, perm os.FileMode) (err error) {
 | |
| 	fi, err := os.Stat(filename)
 | |
| 	if err == nil && !fi.Mode().IsRegular() {
 | |
| 		return fmt.Errorf("%s already exists and is not a regular file", filename)
 | |
| 	}
 | |
| 	f, err := os.CreateTemp(filepath.Dir(filename), filepath.Base(filename)+".tmp")
 | |
| 	if err != nil {
 | |
| 		return err
 | |
| 	}
 | |
| 	tmpName := f.Name()
 | |
| 	defer func() {
 | |
| 		if err != nil {
 | |
| 			f.Close()
 | |
| 			os.Remove(tmpName)
 | |
| 		}
 | |
| 	}()
 | |
| 	if _, err := f.Write(data); err != nil {
 | |
| 		return err
 | |
| 	}
 | |
| 	if runtime.GOOS != "windows" {
 | |
| 		if err := f.Chmod(perm); err != nil {
 | |
| 			return err
 | |
| 		}
 | |
| 	}
 | |
| 	if err := f.Sync(); err != nil {
 | |
| 		return err
 | |
| 	}
 | |
| 	if err := f.Close(); err != nil {
 | |
| 		return err
 | |
| 	}
 | |
| 	return Rename(tmpName, filename)
 | |
| }
 | |
| 
 | |
| // Rename srcFile to dstFile, similar to [os.Rename] but preserving file
 | |
| // attributes and ACLs on Windows.
 | |
| func Rename(srcFile, dstFile string) error { return rename(srcFile, dstFile) }
 |