Self contained signal cmd build (#82)

* Moved Signal CMD to Signal directory

* Removed config dir and fixed a parameter typo

* removed attempt to create ssl directory

* Update Signal build configuration

* move Signal documentation to its directory

* removed unused variables

* test build management and signal

* User run as subcommand to execute the signal daemon

signal/Dockerfile

@@ -1,3 +1,3 @@
 FROM gcr.io/distroless/base:debug
-ENTRYPOINT [ "/go/bin/wiretrustee","signal" ]
-COPY wiretrustee /go/bin/wiretrustee
+ENTRYPOINT [ "/go/bin/wiretrustee-signal","run" ]
+COPY wiretrustee-signal /go/bin/wiretrustee-signal

signal/README.md

@@ -2,6 +2,55 @@
 
 This is a Wiretrustee signal-exchange server and client library to exchange connection information between Wiretrustee peers
 
+## Command Options
+The CLI accepts the command **management** with the following options:
+```shell
+start Wiretrustee Signal Server daemon
+
+Usage:
+  wiretrustee-signal run [flags]
+
+Flags:
+  -h, --help                        help for run
+      --letsencrypt-domain string   a domain to issue Let's Encrypt certificate for. Enables TLS using Let's Encrypt. Will fetch and renew certificate, and run the server with TLS
+      --port int                    Server port to listen on (e.g. 10000) (default 10000)
+      --ssl-dir string              server ssl directory location. *Required only for Let's Encrypt certificates. (default "/var/lib/wiretrustee/")
+
+Global Flags:
+      --log-level string    (default "info")
+```
+## Running the Signal service (Docker)
+
+We have packed the Signal server into docker image. You can pull the image from Docker Hub and execute it with the following commands:
+````shell
+docker pull wiretrustee/signal:latest
+docker run -d --name wiretrustee-signal -p 10000:10000 wiretrustee/signal:latest
+````
+The default log-level is set to INFO, if you need you can change it using by updating the docker cmd as followed:
+````shell
+docker run -d --name wiretrustee-signal -p 10000:10000 wiretrustee/signal:latest --log-level DEBUG
+````
+### Run with TLS (Let's Encrypt).
+By specifying the **--letsencrypt-domain** the daemon will handle SSL certificate request and configuration.
+
+In the following example ```10000``` is the signal service **default** port, and ```443``` will be used as port for Let's Encrypt challenge and HTTP API.
+> The server where you are running a container has to have a public IP (for Let's Encrypt certificate challenge).
+
+Replace <YOUR-DOMAIN> with your server's public domain (e.g. mydomain.com or subdomain sub.mydomain.com).
+
+```bash
+# create a volume
+docker volume create wiretrustee-signal
+# run the docker container
+docker run -d --name wiretrustee-management \
+-p 10000:10000  \
+-p 443:443  \
+-v wiretrustee-signal:/var/lib/wiretrustee  \
+wiretrustee/signal:latest \
+--letsencrypt-domain <YOUR-DOMAIN>
+```
+## For development purposes:
+
 The project uses gRpc library and defines service in protobuf file located in:
  ```proto/signalexchange.proto```
 

signal/cmd/root.go

@@ -0,0 +1,62 @@
+package cmd
+
+import (
+	"fmt"
+	log "github.com/sirupsen/logrus"
+	"github.com/spf13/cobra"
+	"os"
+	"os/signal"
+)
+
+const (
+	// ExitSetupFailed defines exit code
+	ExitSetupFailed = 1
+)
+
+var (
+	logLevel string
+
+	rootCmd = &cobra.Command{
+		Use:   "wiretrustee-signal",
+		Short: "",
+		Long:  "",
+	}
+
+	// Execution control channel for stopCh signal
+	stopCh chan int
+)
+
+// Execute executes the root command.
+func Execute() error {
+	return rootCmd.Execute()
+}
+func init() {
+
+	stopCh = make(chan int)
+
+	rootCmd.PersistentFlags().StringVar(&logLevel, "log-level", "info", "")
+	rootCmd.AddCommand(runCmd)
+	InitLog(logLevel)
+}
+
+// SetupCloseHandler handles SIGTERM signal and exits with success
+func SetupCloseHandler() {
+	c := make(chan os.Signal, 1)
+	signal.Notify(c, os.Interrupt)
+	go func() {
+		for range c {
+			fmt.Println("\r- Ctrl+C pressed in Terminal")
+			stopCh <- 0
+		}
+	}()
+}
+
+// InitLog parses and sets log-level input
+func InitLog(logLevel string) {
+	level, err := log.ParseLevel(logLevel)
+	if err != nil {
+		log.Errorf("Failed parsing log-level %s: %s", logLevel, err)
+		os.Exit(ExitSetupFailed)
+	}
+	log.SetLevel(level)
+}

signal/cmd/run.go

@@ -0,0 +1,84 @@
+package cmd
+
+import (
+	"flag"
+	"fmt"
+	log "github.com/sirupsen/logrus"
+	"github.com/spf13/cobra"
+	"github.com/wiretrustee/wiretrustee/encryption"
+	"github.com/wiretrustee/wiretrustee/signal/proto"
+	"github.com/wiretrustee/wiretrustee/signal/server"
+	"google.golang.org/grpc"
+	"google.golang.org/grpc/credentials"
+	"google.golang.org/grpc/keepalive"
+	"net"
+	"os"
+	"time"
+)
+
+var (
+	signalPort              int
+	signalLetsencryptDomain string
+	signalSSLDir            string
+
+	signalKaep = grpc.KeepaliveEnforcementPolicy(keepalive.EnforcementPolicy{
+		MinTime:             5 * time.Second,
+		PermitWithoutStream: true,
+	})
+
+	signalKasp = grpc.KeepaliveParams(keepalive.ServerParameters{
+		MaxConnectionIdle:     15 * time.Second,
+		MaxConnectionAgeGrace: 5 * time.Second,
+		Time:                  5 * time.Second,
+		Timeout:               2 * time.Second,
+	})
+
+	runCmd = &cobra.Command{
+		Use:   "run",
+		Short: "start Wiretrustee Signal Server daemon",
+		Run: func(cmd *cobra.Command, args []string) {
+			flag.Parse()
+
+			var opts []grpc.ServerOption
+			if signalLetsencryptDomain != "" {
+				if _, err := os.Stat(signalSSLDir); os.IsNotExist(err) {
+					err = os.MkdirAll(signalSSLDir, os.ModeDir)
+					if err != nil {
+						log.Fatalf("failed creating datadir: %s: %v", signalSSLDir, err)
+					}
+				}
+				certManager := encryption.CreateCertManager(signalSSLDir, signalLetsencryptDomain)
+				transportCredentials := credentials.NewTLS(certManager.TLSConfig())
+				opts = append(opts, grpc.Creds(transportCredentials))
+			}
+
+			opts = append(opts, signalKaep, signalKasp)
+			grpcServer := grpc.NewServer(opts...)
+
+			lis, err := net.Listen("tcp", fmt.Sprintf(":%d", signalPort))
+			if err != nil {
+				log.Fatalf("failed to listen: %v", err)
+			}
+
+			if err != nil {
+				log.Fatalf("failed to listen: %v", err)
+			}
+
+			proto.RegisterSignalExchangeServer(grpcServer, server.NewServer())
+			log.Printf("started server: localhost:%v", signalPort)
+			if err := grpcServer.Serve(lis); err != nil {
+				log.Fatalf("failed to serve: %v", err)
+			}
+
+			SetupCloseHandler()
+			<-stopCh
+			log.Println("Receive signal to stop running the Signal server")
+		},
+	}
+)
+
+func init() {
+	runCmd.PersistentFlags().IntVar(&signalPort, "port", 10000, "Server port to listen on (e.g. 10000)")
+	runCmd.Flags().StringVar(&signalSSLDir, "ssl-dir", "/var/lib/wiretrustee/", "server ssl directory location. *Required only for Let's Encrypt certificates.")
+	runCmd.Flags().StringVar(&signalLetsencryptDomain, "letsencrypt-domain", "", "a domain to issue Let's Encrypt certificate for. Enables TLS using Let's Encrypt. Will fetch and renew certificate, and run the server with TLS")
+}

signal/main.go

@@ -0,0 +1,12 @@
+package main
+
+import (
+	"github.com/wiretrustee/wiretrustee/signal/cmd"
+	"os"
+)
+
+func main() {
+	if err := cmd.Execute(); err != nil {
+		os.Exit(1)
+	}
+}