device-management-toolkit · nbmaiti · May 7, 2026
diff --git a/.devcontainer/Dockerfile b/.devcontainer/Dockerfile
@@ -0,0 +1,23 @@
+FROM mcr.microsoft.com/devcontainers/base:ubuntu-24.04
+
+# 1. Define the arguments to accept them from devcontainer.json
+ARG HTTP_PROXY
+ARG HTTPS_PROXY
+ARG NO_PROXY
+ARG http_proxy
+ARG https_proxy
+ARG no_proxy
+
+# 2. Export them as environment variables
+ENV HTTP_PROXY=$HTTP_PROXY
+ENV HTTPS_PROXY=$HTTPS_PROXY
+ENV NO_PROXY=$NO_PROXY
+ENV http_proxy=$http_proxy
+ENV https_proxy=$https_proxy
+ENV no_proxy=$no_proxy
+
+# 3. Ensure sudo keeps these variables (crucial for features that use sudo)
+RUN echo 'Defaults env_keep += "HTTP_PROXY HTTPS_PROXY NO_PROXY http_proxy https_proxy no_proxy"' >> /etc/sudoers
+
+# 4. Prime the apt cache with proxy settings active
+RUN apt-get update
diff --git a/.devcontainer/devcontainer-lock.json b/.devcontainer/devcontainer-lock.json
@@ -0,0 +1,24 @@
+{
+  "features": {
+    "ghcr.io/devcontainers/features/common-utils:2": {
+      "version": "2.5.9",
+      "resolved": "ghcr.io/devcontainers/features/common-utils@sha256:cb0c4d3c276f157eed17935747e364178d75fee17f55c4e129966f64633deb3a",
+      "integrity": "sha256:cb0c4d3c276f157eed17935747e364178d75fee17f55c4e129966f64633deb3a"
+    },
+    "ghcr.io/devcontainers/features/docker-outside-of-docker:1": {
+      "version": "1.10.0",
+      "resolved": "ghcr.io/devcontainers/features/docker-outside-of-docker@sha256:c2c2cf829505ead8e4892c88c31b6594ae94a2bbb209e16e1fac456c1a3a624e",
+      "integrity": "sha256:c2c2cf829505ead8e4892c88c31b6594ae94a2bbb209e16e1fac456c1a3a624e"
+    },
+    "ghcr.io/devcontainers/features/go:1": {
+      "version": "1.3.4",
+      "resolved": "ghcr.io/devcontainers/features/go@sha256:d85e921f91b41340055bb12b325d9d551170ed04b3b832e33530bf42f167c032",
+      "integrity": "sha256:d85e921f91b41340055bb12b325d9d551170ed04b3b832e33530bf42f167c032"
+    },
+    "ghcr.io/devcontainers/features/node:2": {
+      "version": "2.1.0",
+      "resolved": "ghcr.io/devcontainers/features/node@sha256:586c9a6f7dd40bd3ba2cd41e7f2f88dcc31fbe5d1442afcbf07ffbc66b686857",
+      "integrity": "sha256:586c9a6f7dd40bd3ba2cd41e7f2f88dcc31fbe5d1442afcbf07ffbc66b686857"
+    }
+  }
+}
diff --git a/.devcontainer/devcontainer.json b/.devcontainer/devcontainer.json
@@ -0,0 +1,64 @@
+{
+    "name": "Cloud Deployment Dev Container",
+    "build": {
+        "dockerfile": "Dockerfile",
+        "args": {
+            "HTTP_PROXY": "${localEnv:HTTP_PROXY:}",
+            "HTTPS_PROXY": "${localEnv:HTTPS_PROXY:}",
+            "NO_PROXY": "${localEnv:NO_PROXY:}",
+            "http_proxy": "${localEnv:http_proxy:}",
+            "https_proxy": "${localEnv:https_proxy:}",
+            "no_proxy": "${localEnv:no_proxy:}"
+        }
+    },
+    "features": {
+        "ghcr.io/devcontainers/features/docker-outside-of-docker:1": {
+            "version": "latest",
+            "enableNonRootDocker": "true",
+            "moby": "true"
+        },
+        "ghcr.io/devcontainers/features/node:2": {
+            "version": "lts"
+        },
+        "ghcr.io/devcontainers/features/go:1": {
+            "version": "latest"
+        },
+        "ghcr.io/devcontainers/features/common-utils:2": {
+            "installZsh": true,
+            "configureZshAsDefaultShell": true,
+            "installOhMyZsh": true,
+            "upgradePackages": true
+        }
+    },
+    "containerEnv": {
+        "LOCAL_WORKSPACE_FOLDER": "${localWorkspaceFolder}",
+        "HTTP_PROXY": "${localEnv:HTTP_PROXY:}",
+        "HTTPS_PROXY": "${localEnv:HTTPS_PROXY:}",
+        "NO_PROXY": "${localEnv:NO_PROXY:}",
+        "http_proxy": "${localEnv:http_proxy:}",
+        "https_proxy": "${localEnv:https_proxy:}",
+        "no_proxy": "${localEnv:no_proxy:}"
+    },
+    "forwardPorts": [
+        4200,
+        3000,
+        8081,
+        8003
+    ],
+    "customizations": {
+        "vscode": {
+            "extensions": [
+                "ms-azuretools.vscode-docker",
+                "dbaeumer.vscode-eslint",
+                "golang.go",
+                "ms-vscode.cpptools",
+                "ryu1kn.text-marker",
+                "shd101wyy.markdown-preview-enhanced",
+                "shardulm94.trailing-spaces",
+                "waderyan.gitblame",
+                "esbenp.prettier-vscode"
+            ]
+        }
+    },
+    "postCreateCommand": "sed -i 's/\\r$//' .devcontainer/post-create.sh && /bin/bash .devcontainer/post-create.sh"
+}
diff --git a/.devcontainer/post-create.sh b/.devcontainer/post-create.sh
@@ -0,0 +1,200 @@
+#!/bin/bash
+set -e
+
+echo "Starting DevContainer post-create setup..."
+
+# Get workspace root (volume mounted from host)
+WORKSPACE_ROOT="${PWD}"
+TEMPLATE_FILE="$WORKSPACE_ROOT/.env.template"
+OUTPUT_FILE="$WORKSPACE_ROOT/.env"
+KONG_FILE="$WORKSPACE_ROOT/kong.yaml"
+CYPRESS_CONFIG="$WORKSPACE_ROOT/sample-web-ui/cypress.config.ts"
+DOCKER_COMPOSE_FILE="$WORKSPACE_ROOT/docker-compose.yml"
+README_FILE="$WORKSPACE_ROOT/Readme.md"
+
+# Function to check if setup is already done
+is_setup_complete() {
+    if [ -f "$OUTPUT_FILE" ] && grep -qE "^MPS_JWT_SECRET=.+$" "$OUTPUT_FILE"; then
+        return 0  # Setup is complete
+    fi
+    return 1  # Setup needed
+}
+
+# Function to generate random 32-character string (cross-platform)
+generate_random_string() {
+    if command -v openssl &> /dev/null; then
+        openssl rand -base64 32 | tr -dc 'a-zA-Z0-9' | cut -c1-32
+    elif [[ -c /dev/urandom ]]; then
+        tr -dc 'a-zA-Z0-9' < /dev/urandom | head -c 32
+    elif command -v python3 &> /dev/null; then
+        python3 -c "import random; import string; print(''.join(random.choices(string.ascii_letters + string.digits, k=32)))"
+    else
+        # Fallback: use timestamp
+        date +%s%N | sha256sum | tr -dc 'a-zA-Z0-9' | head -c 32
+    fi
+}
+
+# Function to get the host IP address
+get_host_ip() {
+    if command -v hostname &> /dev/null; then
+        local ip=$(hostname -I 2>/dev/null | awk '{print $1}')
+        if [ -n "$ip" ]; then
+            echo "$ip"
+            return 0
+        fi
+    fi
+    echo "localhost"
+}
+
+# Cross-platform sed replacement
+sed_replace() {
+    local file="$1"
+    local pattern="$2"
+    local replacement="$3"
+
+    if [[ "$OSTYPE" == "darwin"* ]]; then
+        sed -i '' "s|$pattern|$replacement|g" "$file"
+    else
+        sed -i "s|$pattern|$replacement|g" "$file"
+    fi
+}
+
+# Function to validate repository
+validate_repository() {
+    if [ -f "$README_FILE" ] && grep -q "Device Management Toolkit (formerly known as Open AMT Cloud Toolkit)" "$README_FILE"; then
+        echo "✓ Detected: Device Management Toolkit repository"
+        return 0
+    fi
+    echo "✗ Error: Unrecognized repository"
+    exit 1
+}
+
+# Function to generate default values for DMT
+generate_defaults() {
+    DEFAULT_MPS_COMMON_NAME=$(get_host_ip)
+    DEFAULT_MPS_WEB_ADMIN_USER="hspeoob"
+    DEFAULT_MPS_WEB_ADMIN_PASSWORD="Apple-1234"
+    DEFAULT_MPS_JWT_SECRET=$(generate_random_string)
+    DEFAULT_MPS_JWT_ISSUER=$(generate_random_string)
+    DEFAULT_POSTGRES_PASSWORD="Apple-1234"
+    DEFAULT_VAULT_TOKEN=$(generate_random_string)
+}
+
+# Function to populate .env file
+populate_env_file() {
+    echo "Creating and populating .env file..."
+    cp "$TEMPLATE_FILE" "$OUTPUT_FILE"
+
+    sed_replace "$OUTPUT_FILE" "^MPS_COMMON_NAME=.*" "MPS_COMMON_NAME=$DEFAULT_MPS_COMMON_NAME"
+    sed_replace "$OUTPUT_FILE" "^MPS_WEB_ADMIN_USER=.*" "MPS_WEB_ADMIN_USER=$DEFAULT_MPS_WEB_ADMIN_USER"
+    sed_replace "$OUTPUT_FILE" "^MPS_WEB_ADMIN_PASSWORD=.*" "MPS_WEB_ADMIN_PASSWORD=$DEFAULT_MPS_WEB_ADMIN_PASSWORD"
+    sed_replace "$OUTPUT_FILE" "^MPS_JWT_SECRET=.*" "MPS_JWT_SECRET=$DEFAULT_MPS_JWT_SECRET"
+    sed_replace "$OUTPUT_FILE" "^MPS_JWT_ISSUER=.*" "MPS_JWT_ISSUER=$DEFAULT_MPS_JWT_ISSUER"
+    sed_replace "$OUTPUT_FILE" "^POSTGRES_PASSWORD=.*" "POSTGRES_PASSWORD=$DEFAULT_POSTGRES_PASSWORD"
+    sed_replace "$OUTPUT_FILE" "^VAULT_TOKEN=.*" "VAULT_TOKEN=$DEFAULT_VAULT_TOKEN"
+
+    echo "✓ .env file has been created and populated"
+}
+
+# Function to update kong.yaml
+update_kong_config() {
+    if [ -f "$KONG_FILE" ]; then
+        echo "Updating kong.yaml with JWT secrets..."
+        ACTUAL_JWT_SECRET=$(grep "^MPS_JWT_SECRET=" "$OUTPUT_FILE" | cut -d'=' -f2)
+        ACTUAL_JWT_ISSUER=$(grep "^MPS_JWT_ISSUER=" "$OUTPUT_FILE" | cut -d'=' -f2)
+
+        sed_replace "$KONG_FILE" "key: [a-zA-Z0-9]* #sample key" "key: $ACTUAL_JWT_ISSUER #sample key"
+        sed_replace "$KONG_FILE" "secret:.*" "secret: \"$ACTUAL_JWT_SECRET\""
+        echo "✓ kong.yaml has been updated"
+    else
+        echo "⚠ Warning: kong.yaml not found"
+    fi
+}
+
+# Function to update cypress.config.ts
+update_cypress_config() {
+    if [ -f "$CYPRESS_CONFIG" ]; then
+        echo "Updating cypress.config.ts with credentials..."
+        sed_replace "$CYPRESS_CONFIG" "MPS_USERNAME: '.*'" "MPS_USERNAME: '$DEFAULT_MPS_WEB_ADMIN_USER'"
+        sed_replace "$CYPRESS_CONFIG" "MPS_PASSWORD: '.*'" "MPS_PASSWORD: '$DEFAULT_MPS_WEB_ADMIN_PASSWORD'"
+        sed_replace "$CYPRESS_CONFIG" "VAULT_TOKEN: '.*'" "VAULT_TOKEN: '$DEFAULT_VAULT_TOKEN'"
+        echo "✓ cypress.config.ts has been updated"
+    else
+        echo "⚠ Warning: cypress.config.ts not found"
+    fi
+}
+
+# Function to update docker-compose.yml
+update_docker_compose() {
+    if [ -f "$DOCKER_COMPOSE_FILE" ]; then
+        echo "Updating docker-compose.yml with workspace folder variable..."
+        sed_replace "$DOCKER_COMPOSE_FILE" "- \\./nginx\\.conf:" "- \${LOCAL_WORKSPACE_FOLDER:-.}/nginx.conf:"
+        sed_replace "$DOCKER_COMPOSE_FILE" "- \\./data:" "- \${LOCAL_WORKSPACE_FOLDER:-.}/data:"
+        sed_replace "$DOCKER_COMPOSE_FILE" "- \\./kong\\.yaml:" "- \${LOCAL_WORKSPACE_FOLDER:-.}/kong.yaml:"
+        sed_replace "$DOCKER_COMPOSE_FILE" "- \\./mosquitto\\.conf:" "- \${LOCAL_WORKSPACE_FOLDER:-.}/mosquitto.conf:"
+        echo "✓ docker-compose.yml has been updated"
+    else
+        echo "⚠ Warning: docker-compose.yml not found"
+    fi
+}
+
+# Main execution
+main() {
+    validate_repository
+
+    # Check if setup is already done
+    if is_setup_complete; then
+        echo "✓ Setup already completed. Skipping configuration..."
+    else
+        echo "Configuration setup required..."
+        echo "=========================================="
+        echo "Environment Configuration Setup"
+        echo "=========================================="
+
+        generate_defaults
+        populate_env_file
+        update_kong_config
+        update_cypress_config
+        update_docker_compose
+
+        echo "=========================================="
+        echo "Configuration complete!"
+        echo "=========================================="
+    fi
+}
+
+# Configure apt proxy if needed
+for var in HTTP_PROXY HTTPS_PROXY NO_PROXY http_proxy https_proxy no_proxy; do
+  eval v="\${$var}"
+  if [ -z "$v" ]; then unset $var; fi
+done
+
+strip_trailing_slash() {
+  local url="$1"
+  echo "$url" | sed 's%[\\/]*$%%'
+}
+
+if [ -n "$HTTP_PROXY" ] || [ -n "$http_proxy" ] || [ -n "$HTTPS_PROXY" ] || [ -n "$https_proxy" ]; then
+  echo "Configuring apt to use proxy..."
+  sudo mkdir -p /etc/apt/apt.conf.d
+  apt_http_proxy="$(strip_trailing_slash "${HTTP_PROXY:-${http_proxy:-}}")"
+  apt_https_proxy="$(strip_trailing_slash "${HTTPS_PROXY:-${https_proxy:-}}")"
+  sudo tee /etc/apt/apt.conf.d/99proxy > /dev/null <<EOF
+Acquire::http::Proxy "$apt_http_proxy";
+Acquire::https::Proxy "$apt_https_proxy";
+EOF
+fi
+
+# Run configuration setup
+main
+
+# Install build tools and Go tools
+echo "Installing build tools..."
+sudo apt-get update && sudo apt-get install -y build-essential cmake
+
+echo "Installing Go tools..."
+go install github.com/air-verse/air@latest
+go install github.com/go-delve/delve/cmd/dlv@latest
+go install github.com/google/go-licenses@latest
+
+echo "✓ Post-create setup completed successfully"
diff --git a/.devcontainer/pre-create.sh b/.devcontainer/pre-create.sh
@@ -0,0 +1,13 @@
+#!/bin/bash
+
+# This script is no longer used by the devcontainer.
+# All setup logic has been moved to post-create.sh which runs inside the container.
+# 
+# The post-create.sh script:
+# - Checks if configuration is already complete
+# - Only runs setup if needed (no .env file or incomplete)
+# - Runs with all necessary tools available inside the container
+# - Modifies host files through volume mounts
+
+echo "Note: Setup logic has been moved to post-create.sh"
+exit 0
diff --git a/.vscode/launch.json b/.vscode/launch.json
@@ -0,0 +1,57 @@
+{
+    "version": "0.2.0",
+    "configurations": [
+        {
+            "type": "pwa-node",
+            "request": "launch",
+            "name": "Debug MPS (Node.js)",
+            "program": "${workspaceFolder}/mps/dist/index.js",
+            "cwd": "${workspaceFolder}/mps",
+            "envFile": "${workspaceFolder}/.env",
+            "sourceMaps": true,
+            "outFiles": [
+                "${workspaceFolder}/mps/dist/**/*.js"
+            ],
+            "skipFiles": [
+                "<node_internals>/**"
+            ]
+        },
+        {
+            "type": "pwa-node",
+            "request": "launch",
+            "name": "Debug RPS (Node.js)",
+            "program": "${workspaceFolder}/rps/dist/Index.js",
+            "cwd": "${workspaceFolder}/rps",
+            "envFile": "${workspaceFolder}/.env",
+            "sourceMaps": true,
+            "outFiles": [
+                "${workspaceFolder}/rps/dist/**/*.js"
+            ],
+            "skipFiles": [
+                "<node_internals>/**"
+            ]
+        },
+        {
+            "name": "Debug MPS Router (Go)",
+            "type": "go",
+            "request": "launch",
+            "mode": "auto",
+            "program": "${workspaceFolder}/mps-router/cmd/main.go",
+            "cwd": "${workspaceFolder}/mps-router",
+            "envFile": "${workspaceFolder}/.env"
+        },
+        {
+            "name": "Debug Web UI (Chrome)",
+            "type": "pwa-chrome",
+            "request": "launch",
+            "url": "http://localhost:4200",
+            "webRoot": "${workspaceFolder}/sample-web-ui"
+        }
+    ],
+    "compounds": [
+        {
+            "name": "Debug All Services",
+            "configurations": ["Debug MPS (Node.js)", "Debug RPS (Node.js)", "Debug MPS Router (Go)", "Debug Web UI (Chrome)"]
+        }
+    ]
+}