run

#!/bin/bash

set -eu
set -o pipefail

if [ $# -eq 1 ] && [[ "$1" == "system" ]]; then
  pushd "$(dirname "$0")" &>/dev/null
  if [ ! -f /usr/local/bin/run-chef ]; then
    echo >&2 "/usr/local/bin/run-chef not present, cannot do a system run"
    exit 1
  fi
  hostname="$(hostname -s)"
  secrets="secrets/${hostname}.json"
  chefrepo_secrets="/usr/local/src/chefrepo/secrets/${hostname}.json"
  sudo mkdir -p /usr/local/src/chefrepo
  if  [[ "$secrets" -nt "${chefrepo_secrets}" ]]; then
    if ! jq -re '""' < "$secrets" &>/dev/null; then
      echo >&2 "Cannot parse secrets file at $secrets"
      jq < "$secrets" .
      exit 5
    fi
    echo >&2 "Copying secrets to $chefrepo_secrets"
    sudo cp "$secrets" "$chefrepo_secrets"
    sudo chmod 400 "$chefrepo_secrets"
  fi
  set -x
  if [ ! -f .Berksfile.vendored ] || [ .Berksfile.vendored -ot Berksfile.lock ]; then
    cinc exec berks vendor --delete >/dev/null
    touch .Berksfile.vendored
  else
    echo "Vendor is skipped as it's up to date"
  fi
  sudo rsync --verbose --delete --exclude "data" --exclude butane --exclude "boostrap" --exclude "local-mode-cache" --exclude ".git" --exclude "nodes" --exclude "secrets" --exclude "ohai/plugins" --exclude ".gnupg" --exclude ".cache" -pthrvz -q  ./ /usr/local/src/chefrepo/
  sudo /usr/local/bin/run-chef
else
  uv run fab run "$@"
fi