Private networks and WireGuard

export ORNN_API_URL='https://api.ornn.com'
umask 077
wg genkey > wg-private.key
wg pubkey < wg-private.key > wg-public.key

jq -n --arg key "$(cat wg-public.key)" '{public_key: $key}' > peer-request.json
curl --fail-with-body -X POST "$ORNN_API_URL/v1/orchestrator/networks/shared/peers" \
  -H "Authorization: Bearer $ORNN_API_KEY" \
  -H 'Content-Type: application/json' \
  --data-binary @peer-request.json > peer.json

jq -er '.peer.status, .peer.assigned_ip' peer.json
jq -er '.config' peer.json \
  | sed "s|<your-wireguard-private-key>|$(cat wg-private.key)|" > ornn-wg0.conf
rm peer.json
sudo wg-quick up ./ornn-wg0.conf

import os
import subprocess

import requests

API = "https://api.ornn.com"
headers = {"Authorization": f"Bearer {os.environ['ORNN_API_KEY']}"}

private_key = subprocess.run(
    ["wg", "genkey"], capture_output=True, text=True, check=True
).stdout.strip()
public_key = subprocess.run(
    ["wg", "pubkey"], input=private_key, capture_output=True, text=True, check=True
).stdout.strip()

response = requests.post(
    f"{API}/v1/orchestrator/networks/shared/peers",
    headers=headers,
    json={"public_key": public_key},
    timeout=30,
)
response.raise_for_status()
payload = response.json()
print(payload["peer"]["status"], payload["peer"]["assigned_ip"])

config = payload["config"].replace("<your-wireguard-private-key>", private_key)
fd = os.open("ornn-wg0.conf", os.O_WRONLY | os.O_CREAT | os.O_TRUNC, 0o600)
os.fchmod(fd, 0o600)  # also tightens a file that already existed
with os.fdopen(fd, "w") as handle:
    handle.write(config)

curl --fail-with-body -X POST "$ORNN_API_URL/v1/orchestrator/networks" \
  -H "Authorization: Bearer $ORNN_API_KEY" \
  -H 'Content-Type: application/json' \
  -d '{"name": "research", "cidr": "10.20.0.0/16"}' > network.json
export NETWORK_ID="$(jq -er '.network.id' network.json)"

status=""
for attempt in $(seq 1 60); do
  status="$(curl --fail-with-body --silent \
    "$ORNN_API_URL/v1/orchestrator/networks/$NETWORK_ID" \
    -H "Authorization: Bearer $ORNN_API_KEY" | jq -er '.status')"
  echo "network status: $status"
  case "$status" in
    active) break ;;
    degraded) echo "network provisioning failed" >&2; exit 1 ;;
  esac
  sleep 10
done
[ "$status" = active ] || { echo "network not active after 10 minutes" >&2; exit 1; }

import os
import time

import requests

API = "https://api.ornn.com"
session = requests.Session()
session.headers["Authorization"] = f"Bearer {os.environ['ORNN_API_KEY']}"

created = session.post(
    f"{API}/v1/orchestrator/networks",
    json={"name": "research", "cidr": "10.20.0.0/16"},
    timeout=30,
)
created.raise_for_status()
network_id = created.json()["network"]["id"]

deadline = time.monotonic() + 600
while True:
    network = session.get(f"{API}/v1/orchestrator/networks/{network_id}", timeout=30)
    network.raise_for_status()
    status = network.json()["status"]
    if status == "active":
        break
    if status == "degraded":
        raise RuntimeError(f"network {network_id} failed to provision")
    if time.monotonic() > deadline:
        raise TimeoutError(f"network still {status}")
    time.sleep(10)
print(network_id, status)