rash

Declarative shell scripting using Rust native bindings inspired in Ansible

Getting Started & Documentation

For installation and usage, see our Documentation.

Why Rash

Manage your docker entrypoints in a declarative style.

If you:

• think that long bash scripts are difficult to maintain
• love Ansible syntax to setup your environments

Then keep on reading.

Here is Rash!

Declarative vs imperative

Imperative:

entrypoint.sh

#!/bin/bash
set -e

REQUIRED_PARAMS="
VAULT_URL
VAULT_ROLE_ID
VAULT_SECRET_ID
VAULT_SECRET_PATH
"
for required in $REQUIRED_PARAMS ; do
  [[ -z "${!required}" ]] && echo "$required IS NOT DEFINED" && exit 1
done
echo "[$0] Logging into Vault..."
VAULT_TOKEN=$(curl -s $VAULT_URL/v1/auth/approle/login 
--data '{"role_id": "'$VAULT_ROLE_ID'","secret_id": "'$VAULT_SECRET_ID'"}' 
| jq -r .auth.client_token)
echo "[$0] Getting Samuel API key from Vault..."
export APP1_API_KEY=$(curl -s -H "X-Vault-Token: $VAULT_TOKEN" 
$VAULT_URL/v1/$VAULT_SECRET_PATH | jq -r .data.api_key)
exec "[email protected]"

Declarative:

entrypoint.rh

#!/bin/rash


name: Verify input parameters
assert:
  that:
- env.VAULT_URL is defined
- env.VAULT_ROLE_ID is defined
- env.VAULT_SECRET_ID is defined
- env.VAULT_SECRET_PATH is defined

name: launch docker CMD
command: {{ rash.argv }}
transfer_pid_1: yes
env:
  APP1_API_KEY: "{{ lookup('vault', env.VAULT_SECRET_PATH ) }}"

Lightness

All you need to run Rash is a Linux kernel!

You can use it in your favorite IoT chips running Linux or in containers from scratch!

Status

Currently, Under heavy development.

Who is using

rash

• A production ready php-fpm docker image
• hs110 prometheus exporter