CasperSecurity
o
쑛h�6 � @ s d dl Z d dlZd dlZd dlmZ d dlmZmZmZm Z m
Z
d dl m Z d dl
mZmZ d dlmZ d dlmZ d dlmZ e�e�Zd Zd
eiZd Zd Z d
diZ dZ G dd� d�Z G dd� dej �Z!G dd� de!�Z"dd� Z#dd� Z$d7dd�Z%d8d d �Z&d d � Z'e"ej(ffe!ej(ej)ffgZ*d!d"� Z+ed#k�rd dl,Z,d dl-Z-d d$lm.Z. e,j/d%d&�Z0e0j1d'd(d)ed*� e0j1d+d,d-d.d d/� e0�2� Z3e&e3j4e3j5d0�Z6d1e6v r�z
e6d1 �7� e6d1< W n e8y� e-j9�:d2� e6d1= e.e6d1 ��7� e6d3< Y nw e;ej<e6d4d d5d6�� dS dS )9� N)� b64decode)�dmi�net�sources�
url_helper�util)�ug_util)�
EventScope� EventType)�NoDHCPLeaseError)�EphemeralDHCPv4)�DataSourceHostnamez3http://metadata.google.internal/computeMetadata/v1/� metadata_urlzLhttp://metadata.google.internal/computeMetadata/v1/instance/guest-attributes�hostkeyszMetadata-Flavor�Google�ens4c @ s e Zd Zdd� Zddd�ZdS )�GoogleMetadataFetcherc C s || _ || _|| _d S �N)�metadata_address� num_retries�sec_between_retries)�selfr r r � r �A/usr/lib/python3/dist-packages/cloudinit/sources/DataSourceGCE.py�__init__ s
z GoogleMetadataFetcher.__init__Fc
C s� d }z| j | }|r|d7 }tj|t| j| jd�}W n tjy7 } zd}t�|||� W Y d }~|S d }~ww |j dkrO|rGt
� |j �}|S |j �
d�}|S t�d||j � |S )Nz/?recursive=True)�url�headers�retries� sec_betweenzurl %s raised exception %s�� �utf-8zurl %s returned code %s)r r �readurl�HEADERSr r �UrlError�LOG�debug�coder �
decode_binary�contents�decode) r �path�is_text� is_recursive�valuer �resp�exc�msgr r r � get_value$ s2
� ��
��z GoogleMetadataFetcher.get_valueN)F)�__name__�
__module__� __qualname__r r1 r r r r r s r c @ s| e Zd ZdZdZejejej hiZ
dd� Z dd� Z e
dd� �Zd d
� Zd d � Zd
d� Zddd�Ze
dd� �Ze
dd� �ZdS )�
DataSourceGCE�GCEFc C sr t j�| |||� d | _|r t�||�\}}t�|�\| _}t� | _t �
t � |ddgi �t g�| _
| j
d | _d S )N�
datasourcer6 r )r �
DataSourcer � default_userr �normalize_users_groups�extract_default�dict�metadatar �
mergemanydict�get_cfg_by_path�BUILTIN_DS_CONFIG�ds_cfgr )r �sys_cfg�distro�paths�users�_groups� _user_configr r r r I s ��zDataSourceGCE.__init__c C s� | � � }i }| jr�t�� }t|v r |�t� |�dt� t�d|� t |�dks,J d��|D ]g}t
| j |d�}z>|�2 z t | j
|d�}W n tyd } zt�d||� W Y d }~W d � W q.d }~ww W d � n1 sow Y W n ty� t�d|� Y q.w |d r�|| j _t�d
|� nq.| j jd u r�t�d | j� nt | j
|d�}|�d �s�|�d �r�t�|�d
�� dS t�|�d
�� dS |�d�| _|�d�| _dS )Nr z"Looking for the primary NIC in: %s� z3The instance has to have at least one candidate NIC)�iface)�address�
url_paramsz,Error fetching IMD with candidate NIC %s: %sz$Unable to obtain a DHCP lease for %s�successzPrimary NIC found: %s.z(Did not find a fallback interface on %s.�platform_reports_gce�reasonF� meta-data� user-dataT)�get_url_params�perform_dhcp_setupr �find_candidate_nics�DEFAULT_PRIMARY_INTERFACE�remove�insertr$ r% �lenr rC �read_mdr � Exceptionr �fallback_interface�warning�
cloud_name�getr= � userdata_raw)r rK �ret�candidate_nics�
candidate_nic�network_context�er r r � _get_dataX s|
��
��
��� ��
�� � ��
� zDataSourceGCE._get_datac C s d S r r �r r r r � launch_index� s zDataSourceGCE.launch_indexc C �
| j d S )N� instance-id�r= re r r r �get_instance_id� s
z DataSourceGCE.get_instance_idc C s | j d }t|| j�S )N�public-keys-data)r= �_parse_public_keysr9 )r �public_keys_datar r r �get_public_ssh_keys� s
z!DataSourceGCE.get_public_ssh_keysc C s |D ]}t |� qd S r )�#_write_host_key_to_guest_attributes)r r �keyr r r �publish_host_keys� s
�z DataSourceGCE.publish_host_keysc C s t | jd �d�d d�S )N�local-hostname�.r F)r
r= �split)r �fqdn�
resolve_ip�
metadata_onlyr r r � get_hostname� s �zDataSourceGCE.get_hostnamec C rg )N�availability-zoneri re r r r �availability_zone� s
z DataSourceGCE.availability_zonec C s | j �dd�d S )N�-rH r )rz �rsplitre r r r �region� s zDataSourceGCE.regionN)FFF)r2 r3 r4 �dsnamerR r �NETWORKr
�BOOT_NEW_INSTANCE�BOOT�default_update_eventsr rd �propertyrf rj rn rq rx rz r} r r r r r5 > s( ��9
r5 c @ s e Zd ZdZdS )�DataSourceGCELocalTN)r2 r3 r4 rR r r r r r� � s r� c C sT dt t| f }|�d�}tj||tddd�}|�� r"t�d| � d S t�d| � d S )Nz%s/%s/%sr �PUTF)r �datar �request_method� check_statusz&Wrote %s host key to guest attributes.z0Unable to write %s host key to guest attributes.) �GUEST_ATTRIBUTES_URL�HOSTKEY_NAMESPACE�encoder r! r" �okr$ r% )�key_type� key_valuer r. r r r ro � s
�ro c C s� z| � d d�dd � \}}W n ttfy Y dS w |dkr!dS zt�|�}W n
ty2 Y dS w d|vr9dS |d }d}z tj�||�}W n
tyR Y dS w tj�tjj �|kS )N� � Fz
google-ssh�expireOnz%Y-%m-%dT%H:%M:%S%z)
rt �
ValueError�AttributeError�json�loads�datetime�strptime�now�timezone�utc)�
public_key�schema�json_str�json_obj�
expire_str�
format_str� expire_timer r r � _has_expired� s, � � �r� c C sr g }| s|S | D ].}|rt dd� |D ��sq|�dd�}t|�dkr#q|\}}|d|fv r6t|�s6|�|� q|S )Nc s s � | ] }t |�d k V qdS )� N)�ord)�.0�cr r r � <genexpr>� s � z%_parse_public_keys.<locals>.<genexpr>�:rH r� � cloudinit)�allrt rW r� �append)rm r9 � public_keysr� �split_public_key�userrp r r r rl � s
�rl Tc C s | d u rt } d d dd d�}t� |d< |r |d s d|d< |S t�| �s1t�d| � d| |d< |S g d�}t| |j|j�}i }|D ]1\}}} }
} d } |D ]}
|� |
|
| �}|d ur[|} qL| rn| d u rnd }|| |d< | S | ||< qAt
� |d
pzd �}t
� |d p�d �}|� d
�|� d�g}|� dd��
� }|dkr�|� d
�s�|�|� d�� |�|� d
�� d�dd� |D ��}|�� |d< |d r�|d �d�d |d< d|v r�|d �d�}|� d�}|d kr�t|�}n|r�t�d |� ||d< ||d
< ||d < ||d < d |d < |S )!NF)rO rP rL rN rM zNot running on GCE.rN z%s is not resolvablez address "%s" is not resolvable))rh )z instance/idTTF)ry )z
instance/zoneTTF)rr )zinstance/hostnameTTF)�
instance-data)zinstance/attributesFFT)� project-data)zproject/attributesFFTz)required key %s returned nothing. not GCEr� z{}r� �sshKeyszssh-keyszblock-project-ssh-keys� �true�
c S s g | ]}|r|�qS r r )r� rp r r r �
<listcomp>1 s zread_md.<locals>.<listcomp>rk ry �/���rP r zuser-data-encoding�base64z(unknown user-data-encoding: %s, ignoringrO TrL )� MD_V1_URLrM r �is_resolvable_urlr$ r% r r r r1 r� r� r] �lowerr� �join�
splitlinesrt r� r r[ )rJ rK �platform_checkr_ �url_map�metadata_fetcher�md�mkeyrD �requiredr+ r, r- r* � new_valuer0 �
instance_data� project_data�
valid_keys�
block_projectrm �ud�encodingr r r rX � sp �
��
rX c C sP t �d�pd} | dks| dkrdS t �d�pd}|�d�r dS t�d| |� d S )
Nzsystem-product-namezN/AzGoogle Compute Enginer Tzsystem-serial-numberz GoogleCloud-z6Not running on google cloud. product-name=%s serial=%sF)r �
read_dmi_data�
startswithr$ r% )�pname�serialr r r rM M s
�rM c C s t �| t�S r )r �list_from_depends� datasources)�dependsr r r �get_datasource_liste s r� �__main__)� b64encodezQuery GCE Metadata Service)� descriptionz
--endpoint�URLz The url of the metadata service.)�metavar�help�defaultz--no-platform-checkr� z Ignore smbios platform check� store_false)�destr� �actionr� )rJ r� rP z/User-data cannot be decoded. Writing as base64
z
user-data-b64rH )�,z: )�indent� sort_keys�
separatorsr )NNT)=r� r� �loggingr� r r� r r r r r �cloudinit.distrosr �cloudinit.eventr r
�cloudinit.net.dhcpr �cloudinit.net.ephemeralr �cloudinit.sourcesr
� getLoggerr2 r$ r� r@ r� r� r" rT r r8 r5 r� ro r� rl rX rM �DEP_FILESYSTEM� DEP_NETWORKr� r� �argparse�sysr� �ArgumentParser�parser� add_argument�
parse_args�args�endpointr� r� r) �UnicodeDecodeError�stderr�write�print�dumpsr r r r �<module> s|
� r
"
S
�
�� ���