Jarl keeps a BIND 9.20 server's whole configuration (views, ACLs, TSIG keys, zones of every type, records, named.conf options) in SQLite and renders named.conf, keys.conf and zone files from it. Every change goes through one changeset pipeline: whole-configuration validation, named-checkconf -z and named-checkzone in a staging directory, atomic install, rndc reconfig/reload, serial verification with rndc zonestatus, and rollback if named does not load the change. Changes apply one at a time by default or are bundled and applied together. Applied changesets can be reverted. - jarld: the daemon with the REST API and an embedded web UI, plus import, adopt, check, resync, backup and local user recovery commands - jarl: the CLI, including ACME DNS-01 hooks for certbot and acme.sh - users with argon2id passwords and CSRF-protected sessions; hashed API tokens with granular grants and roles; an audit log - systemd unit, sysusers.d/tmpfiles.d files, Makefile - unit tests, integration tests against a real named, scripts/e2e.sh - docs/ guides, README and CHANGELOG Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
113 lines
6.3 KiB
JavaScript
113 lines
6.3 KiB
JavaScript
import { h, mount, table, input, toast, errorBox, confirmDialog, diffView, problemsList, checkList, time, plural, badge } from "../ui.js";
|
|
import { api, get, state, useDraft, refreshDraft } from "../api.js";
|
|
import { rerender } from "../app.js";
|
|
|
|
export async function render(el) {
|
|
await refreshDraft();
|
|
const open = await get("/changesets", { status: "open", mine: 1, limit: 50 });
|
|
const d = state.draft;
|
|
const parts = [h("div", { class: "page-head" },
|
|
h("div", { class: "grow" }, h("h1", null, "Pending changes"),
|
|
h("div", { class: "muted" }, "Edits are collected in a changeset. Nothing reaches named until you apply it; then the whole changeset is checked by Jarl and named-checkconf, written, and loaded together.")))];
|
|
if (!d || !(d.ops || []).length) {
|
|
parts.push(h("div", { class: "panel" }, h("div", { class: "empty" }, "No pending changes. Edit zones, records or options and they will show up here.")));
|
|
} else {
|
|
parts.push(await draftPanel(d));
|
|
}
|
|
const others = open.filter((c) => !d || c.id !== d.id);
|
|
if (others.length) {
|
|
parts.push(h("div", { class: "panel" }, h("h2", null, "Other open changesets"),
|
|
h("p", { class: "muted small" }, "Created through the API or CLI, or earlier in the web UI. Switch to one to review and apply it here."),
|
|
table([
|
|
{ label: "#", render: (c) => String(c.id) },
|
|
{ label: "Description", render: (c) => c.description || h("span", { class: "muted" }, "(none)") },
|
|
{ label: "Operations", render: (c) => String((c.ops || []).length) },
|
|
{ label: "Via", render: (c) => c.via },
|
|
{ label: "Created", render: (c) => time(c.created_at) },
|
|
{ label: "", render: (c) => h("span", null,
|
|
h("button", { class: "small", onclick: () => { useDraft(c); rerender(); } }, "Switch to"), " ",
|
|
h("button", { class: "small danger", onclick: async () => {
|
|
if (!(await confirmDialog("Discard", "Discard changeset #" + c.id + "?", "Discard", "danger"))) return;
|
|
await api("POST", "/changesets/" + c.id + "/discard");
|
|
rerender();
|
|
} }, "Discard")), tdClass: "actions-cell" },
|
|
], others)));
|
|
}
|
|
mount(el, parts);
|
|
}
|
|
|
|
async function draftPanel(d) {
|
|
const desc = input({ value: d.description || "", placeholder: "Describe this change (shown in the history)", style: { width: "100%" } });
|
|
const preview = h("div", { class: "muted" }, "Checking…");
|
|
const result = h("div");
|
|
let valid = false;
|
|
const applyBtn = h("button", { class: "primary", disabled: true }, "Apply changes");
|
|
const forceBox = h("label", { class: "check small hidden" }, h("input", { type: "checkbox" }), "Overwrite files changed outside Jarl");
|
|
const ops = d.ops || [];
|
|
const opsTable = table([
|
|
{ label: "#", render: (o) => String(o.seq) },
|
|
{ label: "Change", render: (o) => o.summary || o.op, tdClass: "mono small" },
|
|
{ label: "Added", render: (o) => time(o.added_at) },
|
|
{ label: "", render: (o) => h("button", { class: "small", title: "Remove this operation from the changeset", onclick: async () => {
|
|
try {
|
|
const cs = await api("DELETE", "/changesets/" + d.id + "/ops/" + o.seq);
|
|
useDraft(cs);
|
|
rerender();
|
|
} catch (e) { toast(e.message, "err", 8000); }
|
|
} }, "Remove"), tdClass: "actions-cell" },
|
|
], ops);
|
|
const runPreview = async () => {
|
|
try {
|
|
const p = await get("/changesets/" + d.id + "/preview");
|
|
valid = p.valid && !p.error;
|
|
applyBtn.disabled = !valid;
|
|
const drift = (p.drift || []);
|
|
forceBox.classList.toggle("hidden", drift.length === 0);
|
|
mount(preview,
|
|
p.error ? errorBox({ message: p.error.message, details: p.error }) : null,
|
|
valid ? h("div", { class: "msg ok" }, "Valid. named-checkconf accepts the new configuration.", (p.serials || []).length ? " Serials: " + p.serials.map((s) => s.zone.replace(/\.$/, "") + " " + s.old + "→" + s.new).join(", ") : "") : null,
|
|
!p.error && !valid ? h("div", { class: "msg err" }, "This changeset can't be applied yet:") : null,
|
|
problemsList(p.problems),
|
|
checkList(p.check),
|
|
drift.length ? h("div", { class: "msg warn" }, "Files changed outside Jarl: ", drift.map((x) => x.path + " (" + x.reason + ")").join(", ")) : null,
|
|
(p.warnings || []).length ? h("div", { class: "msg warn" }, h("ul", null, p.warnings.map((w) => h("li", null, w)))) : null,
|
|
(p.existing_problems || []).filter((x) => x.severity !== "info").length ? h("details", null, h("summary", { class: "muted" }, "Existing problems (not caused by this changeset)"), problemsList(p.existing_problems.filter((x) => x.severity !== "info"))) : null,
|
|
h("h3", null, "Changes to BIND's files" + ((p.files_changed || []).length ? " (" + plural(p.files_changed.length, "file") + ")" : "")),
|
|
diffView(p.diff));
|
|
} catch (e) { mount(preview, errorBox(e)); }
|
|
};
|
|
applyBtn.addEventListener("click", async () => {
|
|
applyBtn.disabled = true;
|
|
mount(result, h("div", { class: "muted" }, "Applying…"));
|
|
try {
|
|
if (desc.value !== (d.description || "")) await api("PATCH", "/changesets/" + d.id, { body: { description: desc.value } });
|
|
const force = forceBox.querySelector("input").checked;
|
|
const r = await api("POST", "/changesets/" + d.id + "/apply", { body: { force } });
|
|
const res = r.result || {};
|
|
toast("Applied changeset #" + d.id + (res.reloaded && res.reloaded.length ? " — named reloaded" : ""));
|
|
(r.warnings || []).forEach((w) => toast(w, "warn", 10000));
|
|
useDraft(null);
|
|
location.hash = "#/history/" + d.id;
|
|
} catch (e) {
|
|
mount(result, errorBox(e));
|
|
applyBtn.disabled = false;
|
|
}
|
|
});
|
|
const discard = h("button", { class: "danger", onclick: async () => {
|
|
if (!(await confirmDialog("Discard changes", "Throw away all " + ops.length + " pending changes?", "Discard", "danger"))) return;
|
|
await api("POST", "/changesets/" + d.id + "/discard");
|
|
useDraft(null);
|
|
rerender();
|
|
} }, "Discard all");
|
|
const panel = h("div", null,
|
|
h("div", { class: "panel" },
|
|
h("h2", null, "Changeset #" + d.id + " ", badge(plural(ops.length, "operation"), "warn")),
|
|
desc,
|
|
h("div", { style: { marginTop: "10px" } }, opsTable),
|
|
h("div", { class: "actions", style: { marginTop: "12px" } }, applyBtn, discard, forceBox),
|
|
result),
|
|
h("div", { class: "panel" }, h("h2", null, "Review"), preview));
|
|
runPreview();
|
|
return panel;
|
|
}
|