home.switch-rack: use password for authentication

nodes.py

@@ -15,3 +15,6 @@ for node in Path(join(repo_path, "nodes")).rglob("*.py"):
 for name, data in nodes.items():
     data.setdefault('hostname', '.'.join(reversed(name.split('.'))) + '.kunbox.net')
     data.setdefault('metadata', {}).setdefault('hostname', '.'.join(reversed(name.split('.'))) + '.kunbox.net')
+
+    if 'password' in data:
+        data['password'] = vault.decrypt(data['password'])

nodes/home.switch-rack.toml

@@ -1,5 +1,6 @@
 bundles = ["routeros"]
 hostname = "172.19.138.4"
+locking_node = "home.router"
 os = "routeros"
+password = "encrypt$gAAAAABkI1Eqsust7XuYFK2-FaRzXWM5fOXumhdi5fWNokLtM0CBAqVqc5zcg37XH_JIZvkhp3buKvswcvd_znaV3Rb8kKeJTs4_VJo6OsvbiWkujfT50HspoUXER0JSZSmeZts8a_2i"
 username = "admin"
-# TODO password

scripts/passwords-for

@@ -2,6 +2,7 @@
 from os import environ
 from sys import argv
 
+from bundlewrap.metagen import NodeMetadataProxy
 from bundlewrap.exceptions import FaultUnavailable
 from bundlewrap.repo import Repository
 from bundlewrap.utils import Fault
@@ -19,13 +20,17 @@ def print_faults(dictionary, keypath=[]):
             else:
                 if '\n' not in resolved_fault:
                     print('{}/{}: {}'.format('/'.join(keypath), key, value))
-        elif isinstance(value, dict):
+        elif isinstance(value, (list, set, tuple)):
+            print_faults(dict(enumerate(value)), keypath=keypath+[key])
+        elif isinstance(value, (dict, NodeMetadataProxy)):
             print_faults(value, keypath=keypath+[key])
 
-
 if len(argv) == 1:
     print('node name missing')
     exit(1)
 
 node = repo.get_node(argv[1])
-print_faults(node.metadata)
+print_faults({
+    'password': node.password,
+    'metadata': node.metadata,
+})