From 82c1aff8fbedbc0a215c6ffab5de7619f46ca4be Mon Sep 17 00:00:00 2001
From: ish <ish@innogrid.com>
Date: Wed, 4 Dec 2024 15:12:23 +0900
Subject: [PATCH] server: Generate SSH keys if not exist

---
 server/cmd/cm-honeybee/main.go |  8 +++-
 server/lib/ssh/ssh.go          | 79 ++++++++++++++++++++++++++++++++--
 2 files changed, 83 insertions(+), 4 deletions(-)

diff --git a/server/cmd/cm-honeybee/main.go b/server/cmd/cm-honeybee/main.go
index d3c6910..e4bc9b1 100644
--- a/server/cmd/cm-honeybee/main.go
+++ b/server/cmd/cm-honeybee/main.go
@@ -6,6 +6,7 @@ import (
 	"github.com/cloud-barista/cm-honeybee/server/db"
 	"github.com/cloud-barista/cm-honeybee/server/lib/config"
 	"github.com/cloud-barista/cm-honeybee/server/lib/rsautil"
+	"github.com/cloud-barista/cm-honeybee/server/lib/ssh"
 	"github.com/cloud-barista/cm-honeybee/server/pkg/api/rest/controller"
 	"github.com/cloud-barista/cm-honeybee/server/pkg/api/rest/server"
 	"github.com/jollaman999/utils/fileutil"
@@ -47,7 +48,12 @@ func init() {
 
 	err = config.PrepareConfigs()
 	if err != nil {
-		logger.Println(logger.ERROR, false, err.Error())
+		logger.Panicln(logger.ERROR, false, err.Error())
+	}
+
+	err = ssh.GenerateSSHIdentityFile()
+	if err != nil {
+		logger.Panicln(logger.ERROR, false, err.Error())
 	}
 
 	controller.OkMessage.Message = "API server is not ready"
diff --git a/server/lib/ssh/ssh.go b/server/lib/ssh/ssh.go
index d354d9c..dc16003 100644
--- a/server/lib/ssh/ssh.go
+++ b/server/lib/ssh/ssh.go
@@ -2,8 +2,12 @@ package ssh
 
 import (
 	"bytes"
+	"crypto/rand"
+	"crypto/rsa"
+	"crypto/x509"
 	"embed"
 	"encoding/json"
+	"encoding/pem"
 	"errors"
 	"fmt"
 	"github.com/cloud-barista/cm-honeybee/server/lib/config"
@@ -47,11 +51,80 @@ type Options struct {
 //go:embed sourceFiles/*
 var sourceFiles embed.FS
 
-func DefaultSSHOptions() Options {
-	homeDir, err := os.UserHomeDir()
+var homeDir string
+
+func GenerateSSHIdentityFile() error {
+	var err error
+
+	homeDir, err = os.UserHomeDir()
 	if err != nil {
-		fmt.Printf("failed to determine user home directory: %v\n", err)
+		return fmt.Errorf("failed to determine user home directory: %v", err)
+	}
+	sshDir := filepath.Join(homeDir, ".ssh")
+	privateKeyPath := filepath.Join(sshDir, "id_rsa")
+	publicKeyPath := filepath.Join(sshDir, "id_rsa.pub")
+
+	_, err = os.Stat(privateKeyPath)
+	if err == nil {
+		return nil
 	}
+
+	err = os.MkdirAll(sshDir, 0700)
+	if err != nil {
+		return err
+	}
+
+	privateKey, err := rsa.GenerateKey(rand.Reader, 2048)
+	if err != nil {
+		return fmt.Errorf("failed to generate ssh private key file: %v", err)
+	}
+
+	privateKeyPEM := &pem.Block{
+		Type:  "RSA PRIVATE KEY",
+		Bytes: x509.MarshalPKCS1PrivateKey(privateKey),
+	}
+
+	privateKeyFile, err := os.OpenFile(privateKeyPath, os.O_WRONLY|os.O_CREATE|os.O_TRUNC, 0600)
+	if err != nil {
+		return fmt.Errorf("failed to generate ssh private key file: %v", err)
+	}
+	defer func() {
+		_ = privateKeyFile.Close()
+	}()
+
+	err = pem.Encode(privateKeyFile, privateKeyPEM)
+	if err != nil {
+		return fmt.Errorf("failed to store ssh private key file: %v", err)
+	}
+
+	publicKey := &privateKey.PublicKey
+	publicKeyBytes, err := x509.MarshalPKIXPublicKey(publicKey)
+	if err != nil {
+		return fmt.Errorf("failed to generate ssh public key file: %v", err)
+	}
+
+	publicKeyPEM := &pem.Block{
+		Type:  "RSA PUBLIC KEY",
+		Bytes: publicKeyBytes,
+	}
+
+	publicKeyFile, err := os.OpenFile(publicKeyPath, os.O_WRONLY|os.O_CREATE|os.O_TRUNC, 0644)
+	if err != nil {
+		return fmt.Errorf("failed to generate ssh public key file: %v", err)
+	}
+	defer func() {
+		_ = publicKeyFile.Close()
+	}()
+
+	err = pem.Encode(publicKeyFile, publicKeyPEM)
+	if err != nil {
+		return fmt.Errorf("failed to store ssh public key file: %v", err)
+	}
+
+	return nil
+}
+
+func DefaultSSHOptions() Options {
 	return Options{
 		SSHPort:                  22,
 		SSHUsername:              defaultUsername(),