types

type AllPhases interface {
	Phase
	ProcessFlagsPhase
}

type Ansible struct {
	Version      string `yaml:"version,omitempty"`
	Workspace    string `yaml:"workspace,omitempty"`
	PlaybookPath string `yaml:"playbookPath,omitempty"`
	Playbook     string `yaml:"playbook,omitempty"`
}

type Applier interface {
	Apply(ctx SystemContext)
}

type Certificate string

type Command struct {
	Cmd   string
	Flags []Flag
}

type CommandMatcher struct {
	Expected   interface{}
	Commands   []Command
	Filesystem Filesystem
	Err        error
}

type Commands struct {
	// contains filtered or unexported fields
}

type Config struct {
	AppliedFiles    Filesystem `yaml:"-"`
	AppliedCommands []Command  `yaml:"-"`

	PreCommands  []Command  `yaml:"pre_commands,omitempty"`
	Commands     []Command  `yaml:"commands,omitempty"`
	PostCommands []Command  `yaml:"post_commands,omitempty"`
	Filesystem   Filesystem `yaml:"filesystem,omitempty"`

	//Files is a map of destination path to lookup file path
	// The lookup path is relative to where konfigadm is run from, not relative to the config file
	// The content and permissions of the file will be compiled into primitive Filesystem elements, user and group ownership is ignored
	// Both the destination and lookup path can be expressions
	Files map[string]string `yaml:"files,omitempty"`

	//Templates is a map of destination path to template lookup path
	// The lookup path is relative to where konfigadm is run from, not relative to the config file
	// Templates are compiled via a Jinja (Ansible-like) rendered into primitive filesystem objects
	// Both the destination and lookup path can be expressions
	Templates        map[string]string    `yaml:"templates,omitempty"`
	Sysctls          map[string]string    `yaml:"sysctls,omitempty"`
	Packages         *[]Package           `yaml:"packages,omitempty"`
	TarPackages      []TarPackage         `yaml:"tar_packages,omitempty"`
	PackageRepos     *[]PackageRepo       `yaml:"package_repos,omitempty"`
	Images           []string             `yaml:"images,omitempty"`
	Kernel           *[]KernelInput       `yaml:"kernel,omitempty"`
	Containers       []Container          `yaml:"containers,omitempty"`
	ContainerRuntime ContainerRuntime     `yaml:"container_runtime,omitempty"`
	Kubernetes       *KubernetesSpec      `yaml:"kubernetes,omitempty"`
	Environment      map[string]string    `yaml:"environment,omitempty"`
	Ansible          []Ansible            `yaml:"ansible,omitempty"`
	Timezone         string               `yaml:"timezone,omitempty"`
	NTP              []string             `yaml:"ntp,omitempty"`
	DNS              []string             `yaml:"dns,omitempty"`
	Limits           []string             `yaml:"limits,omitempty"`
	TrustedCA        []Certificate        `yaml:"ca,omitempty"`
	Partitions       []string             `yaml:"partitions,omitempty"`
	Extra            *cloudinit.CloudInit `yaml:"extra,omitempty"`
	Services         map[string]Service   `yaml:"services,omitempty"`
	Users            []User               `yaml:"users,omitempty"`
	Cleanup          *bool                `yaml:"cleanup,omitempty"`
	Context          *SystemContext       `yaml:"-"`
}

type ConfigBuilder struct {
	// contains filtered or unexported fields
}

type Container struct {
	//The name of the service (e.g systemd unit name or deployment name)
	Service string `yaml:"service,omitempty"`

	Image string `yaml:"image"`

	//A map of environment variables to pass through
	Env map[string]string `yaml:"env,omitempty"`

	//A map of labels to add to the container
	Labels map[string]string `yaml:"labels,omitempty"`

	//Additional arguments to the docker run command e.g. -p 8080:8080
	DockerOpts string `yaml:"docker_opts,omitempty"`

	//Additional options to the docker client e.g. -H unix:///tmp/var/run/docker.sock
	DockerClientArgs string `yaml:"docker_client_args,omitempty"`

	//Additional arguments to the container
	Args string `yaml:"args,omitempty"`

	Ports []Port `yaml:"ports,omitempty"`

	Commands []string `yaml:"commands,omitempty"`

	//Map of files to mount into the container
	Files map[string]string `yaml:"files,omitempty"`

	//Map of templates to mount into the container
	Templates map[string]string `yaml:"templates,omitempty"`

	//TODO:
	Volumes []string `yaml:"volumes,omitempty"`

	//CPU limit in cores (Defaults to 1 )
	CPU int `yaml:"cpu,omitempty" validate:"min=0,max=32"`

	//	Memory Limit in MB. (Defaults to 1024)
	Mem int `yaml:"mem,omitempty" validate:"min=0,max=1048576"`

	//default:	user-bridge	 only
	Network string `yaml:"network,omitempty"`

	// default: 1
	Replicas int `yaml:"replicas,omitempty"`
}

type ContainerRuntime struct {
	Type    string `yaml:"type,omitempty"`
	Arg     string `yaml:"arg,omitempty"`
	Options string `yaml:"options,omitempty"`
	Version string `yaml:"version,omitempty"`
	//Images is a list of container images to pre-pull
	Images []string `yaml:"images,omitempty"`
}

type File struct {
	Content        string `yaml:"content,omitempty"`
	ContentFromURL string `yaml:"content_from_url,omitempty"`
	Unarchive      bool   `yaml:"unarchive,omitempty"`
	Permissions    string `yaml:"permissions,omitempty"`
	Owner          string `yaml:"owner,omitempty"`
	Flags          []Flag `yaml:"tags,omitempty"`
}

type Filesystem map[string]File

type Fixture struct {
	// contains filtered or unexported fields
}

type Flag struct {
	Name    string
	Negates []Flag
}

type FlagProcessor func(cfg *Config, flags ...Flag)

type KernelInput struct {
	Version string
	Flags   []Flag
}

type KubernetesSpec struct {
	Version      string `yaml:"version,omitempty"`
	DownloadPath string `yaml:"download_path,omitempty"`
	ImagePrefix  string `yaml:"image_prefix,omitempty"`
}

type Package struct {
	Name      string
	Version   string
	Mark      bool
	Uninstall bool
	Flags     []Flag
}

type PackageManager interface {
	Install(pkg ...string) Commands
	Uninstall(pkg ...string) Commands
	Mark(pkg ...string) Commands
	AddRepo(url string, channel string, versionCodeName string, name string, gpgKey string, extraArgs map[string]string) Commands
	GetInstalledVersion(pkg string) string
	CleanupCaches() Commands
	Update() Commands
	GetKernelPackageNames(version string) (string, string)
}

type PackageMatcher struct {
	// contains filtered or unexported fields
}

type PackageRepo struct {
	Name            string            `yaml:"name,omitempty"`
	URL             string            `yaml:"url,omitempty"`
	GPGKey          string            `yaml:"gpgKey,omitempty"`
	Channel         string            `yaml:"channel,omitempty"`
	VersionCodeName string            `yaml:"versionCodeName,omitempty"`
	Flags           []Flag            `yaml:"tags,omitempty"`
	ExtraArgs       map[string]string `yaml:"extraArgs,omitempty"`
}

type Phase interface {
	ApplyPhase(cfg *Config, ctx *SystemContext) (commands []Command, files Filesystem, err error)
}

type Port struct {
	Port   int `yaml:"port,omitempty"  validate:"min=1,max=65536"`
	Target int `yaml:"target,omitempty"  validate:"min=1,max=65536"`
}

type ProcessFlagsPhase interface {
	ProcessFlags(cfg *Config, flags ...Flag)
}

type Service struct {
	Name        string            `yaml:"name,omitempty"`
	ExecStart   string            `yaml:"exec_start,omitempty"`
	Environment map[string]string `yaml:"environment,omitempty"`
	Extra       SystemD           `yaml:"extra,omitempty"`
}

type SystemContext struct {
	Vars        map[string]interface{}
	Flags       []Flag
	Name        string
	CaptureLogs string
}

type SystemD struct {
	Install SystemdInstall
	Service SystemdService
	Unit    SystemdUnit
}

type SystemdInstall struct {
	WantedBy        string `yaml:"wanted_by,omitempty"`
	RequiredBy      string `yaml:"required_by,omitempty"`
	DefaultInstance string `yaml:"default_instance,omitempty"`
	Also            string `yaml:"also,omitempty"`
	Alias           string `yaml:"alias,omitempty"`
}

type SystemdService struct {
	AmbientCapabilities      string      `yaml:"ambient_capabilities,omitempty"`
	AppArmorProfile          string      `yaml:"app_armor_profile,omitempty"`
	CapabilityBoundingSet    string      `yaml:"capability_bounding_set,omitempty"`
	CPUAffinity              string      `yaml:"cpu_affinity,omitempty"`
	CPUSchedulingPolicy      string      `yaml:"cpu_scheduling_policy,omitempty"`
	CPUSchedulingPriority    string      `yaml:"cpu_scheduling_priority,omitempty"`
	CPUSchedulingResetOnFork interface{} `validate:"bool" yaml:"cpu_scheduling_reset_on_fork,omitempty"`
	DynamicUser              string      `yaml:"dynamic_user,omitempty"`
	Environment              string      `yaml:"environment,omitempty"`
	EnvironmentFile          string      `yaml:"environment_file,omitempty"`
	Group                    string      `yaml:"group,omitempty"`
	IgnoreSIGPIPE            interface{} `validate:"bool" yaml:"ignore_sigpipe,omitempty"`
	InaccessiblePaths        string      `yaml:"inaccessible_paths,omitempty"`
	IOSchedulingClass        string      `yaml:"io_scheduling_class,omitempty"`
	IOSchedulingPriority     string      `yaml:"io_scheduling_priority,omitempty"`
	LimitAS                  string      `yaml:"limit_as,omitempty"`
	LimitCORE                string      `yaml:"limit_core,omitempty"`
	LimitCPU                 string      `yaml:"limit_cpu,omitempty"`
	LimitDATA                string      `yaml:"limit_data,omitempty"`
	LimitFSIZE               string      `yaml:"limit_fsize,omitempty"`
	LimitLOCKS               string      `yaml:"limit_locks,omitempty"`
	LimitMEMLOCK             string      `yaml:"limit_memlock,omitempty"`
	LimitMSGQUEUE            string      `yaml:"limit_msgqueue,omitempty"`
	LimitNICE                string      `yaml:"limit_nice,omitempty"`
	LimitNOFILE              string      `yaml:"limit_nofile,omitempty"`
	LimitNPROC               string      `yaml:"limit_nproc,omitempty"`
	LimitRSS                 string      `yaml:"limit_rss,omitempty"`
	LimitRTPRIO              string      `yaml:"limit_rtprio,omitempty"`
	LimitRTTIME              string      `yaml:"limit_rttime,omitempty"`
	LimitSIGPENDING          string      `yaml:"limit_sigpending,omitempty"`
	LimitSTACK               string      `yaml:"limit_stack,omitempty"`
	MemoryDenyWriteExecute   interface{} `validate:"bool" yaml:"memory_deny_write_execute,omitempty"`
	MountFlags               string      `yaml:"mount_flags,omitempty"`
	Nice                     string      `yaml:"nice,omitempty"`
	NoNewPrivileges          interface{} `validate:"bool" yaml:"no_new_privileges,omitempty"`
	OOMScoreAdjust           string      `yaml:"oom_score_adjust,omitempty"`
	PAMName                  string      `yaml:"pam_name,omitempty"`
	PassEnvironment          string      `yaml:"pass_environment,omitempty"`
	Personality              string      `yaml:"personality,omitempty"`
	PrivateDevices           interface{} `validate:"bool" yaml:"private_devices,omitempty"`
	PrivateNetwork           interface{} `validate:"bool" yaml:"private_network,omitempty"`
	PrivateTmp               interface{} `validate:"bool" yaml:"private_tmp,omitempty"`
	PrivateUsers             interface{} `validate:"bool" yaml:"private_users,omitempty"`
	ProtectControlGroups     interface{} `validate:"bool" yaml:"protect_control_groups,omitempty"`
	ProtectHome              interface{} `validate:"bool" yaml:"protect_home,omitempty"`
	ProtectKernelModules     string      `yaml:"protect_kernel_modules,omitempty"`
	ProtectKernelTunables    interface{} `validate:"bool" yaml:"protect_kernel_tunables,omitempty"`
	ProtectSystem            interface{} `validate:"bool" yaml:"protect_system,omitempty"`
	ReadOnlyPaths            string      `yaml:"read_only_paths,omitempty"`
	ReadWritePaths           string      `yaml:"read_write_paths,omitempty"`
	RemoveIPC                interface{} `validate:"bool" yaml:"remove_ipc,omitempty"`
	RestrictAddressFamilies  string      `yaml:"restrict_address_families,omitempty"`
	RestrictNamespaces       interface{} `validate:"bool" yaml:"restrict_namespaces,omitempty"`
	RestrictRealtime         interface{} `validate:"bool" yaml:"restrict_realtime,omitempty"`
	RootDirectory            string      `yaml:"root_directory,omitempty"`
	RuntimeDirectory         string      `yaml:"runtime_directory,omitempty"`
	RuntimeDirectoryMode     string      `yaml:"runtime_directory_mode,omitempty"`
	SecureBits               string      `yaml:"secure_bits,omitempty"`
	SELinuxContext           string      `yaml:"se_linux_context,omitempty"`
	SmackProcessLabel        string      `yaml:"smack_process_label,omitempty"`
	StandardError            string      `yaml:"standard_error,omitempty"`
	StandardInput            string      `yaml:"standard_input,omitempty"`
	StandardOutput           string      `yaml:"standard_output,omitempty"`
	SupplementaryGroups      string      `yaml:"supplementary_groups,omitempty"`
	SyslogFacility           string      `yaml:"syslog_facility,omitempty"`
	SyslogIdentifier         string      `yaml:"syslog_identifier,omitempty"`
	SyslogLevel              string      `yaml:"syslog_level,omitempty"`
	SyslogLevelPrefix        interface{} `validate:"bool" yaml:"syslog_level_prefix,omitempty"`
	SystemCallArchitectures  string      `yaml:"system_call_architectures,omitempty"`
	SystemCallErrorNumber    string      `yaml:"system_call_error_number,omitempty"`
	SystemCallFilter         string      `yaml:"system_call_filter,omitempty"`
	TimerSlackNSec           string      `yaml:"timer_slack_n_sec,omitempty"`
	TTYPath                  string      `yaml:"tty_path,omitempty"`
	TTYReset                 string      `yaml:"tty_reset,omitempty"`
	TTYVHangup               string      `yaml:"ttyv_hangup,omitempty"`
	TTYVTDisallocate         string      `yaml:"ttyvt_disallocate,omitempty"`
	Umask                    string      `yaml:"umask,omitempty"`
	User                     string      `yaml:"user,omitempty"`
	UtmpIdentifier           string      `yaml:"utmp_identifier,omitempty"`
	UtmpMode                 string      `yaml:"utmp_mode,omitempty"`
	WorkingDirectory         string      `yaml:"working_directory,omitempty"` //Takes a D-Bus bus name that this service is reachable as. This option is mandatory for services where Type= is set to dbus.
	BusName                  string      `yaml:"bus_name,omitempty"`
	ExecReload               string      `yaml:"exec_reload,omitempty"`
	ExecStart                string      `yaml:"exec_start,omitempty"`
	ExecStartPost            string      `yaml:"exec_start_post,omitempty"`
	ExecStartPre             string      `yaml:"exec_start_pre,omitempty"`
	ExecStop                 string      `yaml:"exec_stop,omitempty"`
	ExecStopPost             string      `yaml:"exec_stop_post,omitempty"`
	FailureAction            string      `yaml:"failure_action,omitempty"`
	FileDescriptorStoreMax   interface{} `validate:"int" yaml:"file_descriptor_store_max,omitempty"`
	GuessMainPID             interface{} `validate:"bool" yaml:"guess_main_pid,omitempty"`
	NonBlocking              interface{} `validate:"bool" yaml:"non_blocking,omitempty"`
	NotifyAccess             string      `yaml:"notify_access,omitempty"`
	PermissionsStartOnly     interface{} `validate:"int" yaml:"permissions_start_only,omitempty"`
	PIDFile                  string      `yaml:"pid_file,omitempty"`
	RemainAfterExit          interface{} `validate:"bool" yaml:"remain_after_exit,omitempty"`
	//	always,	on-success,	on-failure,	on-abnormal,	on-abort,	on-watchdog
	Restart                  string      `yaml:"restart,omitempty"`
	RestartForceExitStatus   interface{} `validate:"int" yaml:"restart_force_exit_status,omitempty"`
	RestartPreventExitStatus interface{} `validate:"int" yaml:"restart_prevent_exit_status,omitempty"`
	//Configures the time to sleep before restarting a service (as configured with Restart=). Takes a unit-less value in seconds, or a time span value such as "5min 20s". Defaults to 100ms.
	RestartSec             string      `yaml:"restart_sec,omitempty"`
	RootDirectoryStartOnly interface{} `validate:"int" yaml:"root_directory_start_only,omitempty"`
	RuntimeMaxSec          string      `yaml:"runtime_max_sec,omitempty"`
	SuccessExitStatus      interface{} `validate:"int" yaml:"success_exit_status,omitempty"`
	TimeoutSec             string      `yaml:"timeout_sec,omitempty"`
	TimeoutStartSec        string      `yaml:"timeout_start_sec,omitempty"`
	TimeoutStopSec         string      `yaml:"timeout_stop_sec,omitempty"`
	//simple, forking, oneshot, dbus, notify or idle
	Type        string `yaml:"type,omitempty"`
	WatchdogSec string `yaml:"watchdog_sec,omitempty"`
}

type SystemdUnit struct {
	After                       string      `yaml:"after,omitempty"`
	AllowIsolate                interface{} `validate:"bool" yaml:"allow_isolate,omitempty"`
	AssertACPower               string      `yaml:"assert_ac_power,omitempty"`
	AssertArchitecture          string      `yaml:"assert_architecture,omitempty"`
	AssertCapability            string      `yaml:"assert_capability,omitempty"`
	AssertDirectoryNotEmpty     string      `yaml:"assert_directory_not_empty,omitempty"`
	AssertFileIsExecutable      string      `yaml:"assert_file_is_executable,omitempty"`
	AssertFileNotEmpty          string      `yaml:"assert_file_not_empty,omitempty"`
	AssertFirstBoot             string      `yaml:"assert_first_boot,omitempty"`
	AssertHost                  string      `yaml:"assert_host,omitempty"`
	AssertKernelCommandLine     string      `yaml:"assert_kernel_command_line,omitempty"`
	AssertNeedsUpdate           string      `yaml:"assert_needs_update,omitempty"`
	AssertPathExists            string      `yaml:"assert_path_exists,omitempty"`
	AssertPathExistsGlob        string      `yaml:"assert_path_exists_glob,omitempty"`
	AssertPathIsDirectory       string      `yaml:"assert_path_is_directory,omitempty"`
	AssertPathIsMountPoint      string      `yaml:"assert_path_is_mount_point,omitempty"`
	AssertPathIsReadWrite       string      `yaml:"assert_path_is_read_write,omitempty"`
	AssertPathIsSymbolicLink    string      `yaml:"assert_path_is_symbolic_link,omitempty"`
	AssertSecurity              string      `yaml:"assert_security,omitempty"`
	AssertVirtualization        string      `yaml:"assert_virtualization,omitempty"`
	Before                      string      `yaml:"before,omitempty"`
	BindsTo                     string      `yaml:"binds_to,omitempty"`
	ConditionACPower            string      `yaml:"condition_ac_power,omitempty"`
	ConditionArchitecture       string      `yaml:"condition_architecture,omitempty"`
	ConditionCapability         string      `yaml:"condition_capability,omitempty"`
	ConditionDirectoryNotEmpty  string      `yaml:"condition_directory_not_empty,omitempty"`
	ConditionFileIsExecutable   string      `yaml:"condition_file_is_executable,omitempty"`
	ConditionFileNotEmpty       string      `yaml:"condition_file_not_empty,omitempty"`
	ConditionFirstBoot          string      `yaml:"condition_first_boot,omitempty"`
	ConditionHost               string      `yaml:"condition_host,omitempty"`
	ConditionKernelCommandLine  string      `yaml:"condition_kernel_command_line,omitempty"`
	ConditionPathExists         string      `yaml:"condition_path_exists,omitempty"`
	ConditionPathExistsGlob     string      `yaml:"condition_path_exists_glob,omitempty"`
	ConditionPathIsDirectory    string      `yaml:"condition_path_is_directory,omitempty"`
	ConditionPathIsMountPoint   string      `yaml:"condition_path_is_mount_point,omitempty"`
	ConditionPathIsReadWrite    string      `yaml:"condition_path_is_read_write,omitempty"`
	ConditionPathIsSymbolicLink string      `yaml:"condition_path_is_symbolic_link,omitempty"`
	ConditionSecurity           string      `yaml:"condition_security,omitempty"`
	ConditionVirtualization     string      `yaml:"condition_virtualization,omitempty"`
	Conflicts                   string      `yaml:"conflicts,omitempty"`
	DefaultDependencies         interface{} `validate:"bool" yaml:"default_dependencies,omitempty"`
	Description                 string      `yaml:"description,omitempty"`
	Documentation               string      `yaml:"documentation,omitempty"`
	IgnoreOnIsolate             interface{} `validate:"bool" yaml:"ignore_on_isolate,omitempty"`
	JobTimeoutAction            string      `yaml:"job_timeout_action,omitempty"`
	JobTimeoutRebootArgument    string      `yaml:"job_timeout_reboot_argument,omitempty"`
	ConditionNeedsUpdate        string      `yaml:"condition_needs_update,omitempty"`
	JobTimeoutSec               string      `yaml:"job_timeout_sec,omitempty"`
	JoinsNamespaceOf            string      `yaml:"joins_namespace_of,omitempty"`
	//reboot-immediate, poweroff, poweroff-force or poweroff-immediates
	OnFailure             string      `yaml:"on_failure,omitempty"`
	OnFailureJobMode      string      `yaml:"on_failure_job_mode,omitempty"`
	PartOf                string      `yaml:"part_of,omitempty"`
	PropagatesReloadTo    string      `yaml:"propagates_reload_to,omitempty"`
	RebootArgument        string      `yaml:"reboot_argument,omitempty"`
	RefuseManualStart     interface{} `validate:"bool" yaml:"refuse_manual_start,omitempty"`
	RefuseManualStop      interface{} `validate:"bool" yaml:"refuse_manual_stop,omitempty"`
	ReloadPropagatedFrom  string      `yaml:"reload_propagated_from,omitempty"`
	Requires              string      `yaml:"requires,omitempty"`
	RequiresMountsFor     string      `yaml:"requires_mounts_for,omitempty"`
	Requisite             string      `yaml:"requisite,omitempty"`
	SourcePath            string      `yaml:"source_path,omitempty"`
	StartLimitAction      string      `yaml:"start_limit_action,omitempty"`
	StartLimitBurst       string      `yaml:"start_limit_burst,omitempty"`
	StartLimitIntervalSec string      `yaml:"start_limit_interval_sec,omitempty"`
	StopWhenUnneeded      interface{} `validate:"bool" yaml:"stop_when_unneeded,omitempty"`
	Wants                 string      `yaml:"wants,omitempty"`
}

type TarPackage struct {
	URL          string `yaml:"url,omitempty"`
	Checksum     string `yaml:"checksum,omitempty"`
	ChecksumType string `yaml:"checksum_type,omitempty"`
	Binary       string `yaml:"binary,omitempty"`
	Destination  string `yaml:"destination,omitempty"`
	Flags        []Flag `yaml:"flags,omitempty"`
}

type Transformer func(cfg *Config, ctx *SystemContext) (commands []Command, files Filesystem, err error)

type User struct {
	// The user's login name
	Name string `yaml:"name,omitempty"`
	//The user name's real name, i.e. "Bob B. Smith"
	Gecos string `yaml:"gecos,omitempty"`
	//	Optional. The SELinux user for the user's login, such as
	//          "staff_u". When this is omitted the system will select the default
	//           SELinux user.
	SeLinuxUser string `yaml:"selinux_user,omitempty"`
	ExpireDate  string `yaml:"expiredate,omitempty"`
	//	Defaults to none. Accepts a sudo rule string, a list of sudo rule
	//         strings or False to explicitly deny sudo usage. Examples:
	//
	//         Allow a user unrestricted sudo access.
	//             sudo:  ALL=(ALL) NOPASSWD:ALL
	//
	//         Adding multiple sudo rule strings.
	//             sudo:
	//               - ALL=(ALL) NOPASSWD:/bin/mysql
	//               - ALL=(ALL) ALL
	//
	//         Prevent sudo access for a user.
	//             sudo: False
	//
	//         Note: Please double check your syntax and make sure it is valid.
	//               cloud-init does not parse/check the syntax of the sudo
	//               directive.
	Sudo string `yaml:"sudo,omitempty"`
	//	The hash -- not the password itself -- of the password you want
	//           to use for this user. You can generate a safe hash via:
	//               mkpasswd --method=SHA-512 --rounds=4096
	//           (the above command would create from stdin an SHA-512 password hash
	//           with 4096 salt rounds)
	//
	//           Please note: while the use of a hashed password is better than
	//               plain text, the use of this feature is not ideal. Also,
	//               using a high number of salting rounds will help, but it should
	//               not be relied upon.
	//
	//               To highlight this risk, running John the Ripper against the
	//               example hash above, with a readily available wordlist, revealed
	//               the true password in 12 seconds on a i7-2620QM.
	//
	//               In other words, this feature is a potential security risk and is
	//               provided for your convenience only. If you do not fully trust the
	//               medium over which your cloud-config will be transmitted, then you
	//               should use SSH authentication only.
	//
	//               You have thus been warned.
	Passwd string `yaml:"passwd,omitempty"`
	// define the primary group. Defaults to a new group created named after the user.
	PrimaryGroup string `yaml:"primary_group,omitempty"`
	Groups       string `yaml:"groups,omitempty"`
	// Optional. Import SSH ids
	SSHImportID string `yaml:"ssh_import_id,omitempty"`
	//Defaults to true. Lock the password to disable password login
	LockPasswd bool `yaml:"lock_passwd,omitempty"`
	//When set to true, do not create home directory
	NoCreateHome bool `yaml:"no_create_home,omitempty"`
	//When set to true, do not create a group named after the user.
	NoUserGroup bool `yaml:"no_user_group,omitempty"`
	//When set to true, do not initialize lastlog and faillog database.
	NoLogInit bool `yaml:"no_log_init,omitempty"`
	//Add keys to user's authorized keys file
	SSHAuthorizedKeys []string `yaml:"ssh_authorized_keys,omitempty"`
	//Create the user as inactive
	Inactive bool `yaml:"inactive,omitempty"`
	// Create the user as a system user. This means no home directory.
	System bool `yaml:"system,omitempty"`
	//Create a Snappy (Ubuntu-Core) user via the snap create-user
	//             command available on Ubuntu systems.  If the user has an account
	//             on the Ubuntu SSO, specifying the email will allow snap to
	//             request a username and any public ssh keys and will import
	//             these into the system with username specified by SSO account./
	//             If 'username' is not set in SSO, then username will be the
	//             shortname before the email domain.
	Snapuser string `yaml:"snapuser,omitempty"`
	//	Set true to block ssh logins for cloud
	//      ssh public keys and emit a message redirecting logins to
	//      use <default_username> instead. This option only disables cloud
	//      provided public-keys. An error will be raised if ssh_authorized_keys
	//      or ssh_import_id is provided for the same user.
	SSHRedirectUser bool   `yaml:"ssh_redirect_user,omitempty"`
	Shell           string `yaml:"shell,omitempty"`
	UID             string `yaml:"uid,omitempty"`
}

type VerifyPhase interface {
	Verify(cfg *Config, results *VerifyResults, flags ...Flag) bool
}

type VerifyResults struct {
	PassCount int
	FailCount int
	SkipCount int
}