CasperSecurity
o
쑛h�: � @ s. d dl Z d dlZd dlZd dlZd dlZd dlmZ d dlZd dlm Z d dl
m Z d dl m
Z
d dlmZmZmZmZmZ d dlmZmZ d dlmZ d d lmZmZ d d
l m Z d d l m Z e� e!�Z"d d
gZ#dZ$dZ%dZ&G dd� dej'j(�Z)dd� Z*dd� Z+G dd� dej,�Z-e-ej.ffgZ/dd� Z0dS )� N)�urlparse)�ConnectionError)�HTTPConnection)� PoolManager)�dmi� performance�sources�
url_helper�util)�
EventScope� EventType)�NoDHCPLeaseError)�EphemeralDHCPv4�EphemeralIPv6Network)�DataSourceHostname)�ProcessExecutionErrorzhttp://169.254.42.42zhttp://[fd00:42::42]� � �
c s* e Zd ZdZ� fdd�Zddd�Z� ZS )�SourceAddressAdapterzF
Adapter for requests to choose the local address to bind to.
c s || _ tt| �jdi |�� d S )N� )�source_address�superr �__init__)�selfr �kwargs�� __class__r �F/usr/lib/python3/dist-packages/cloudinit/sources/DataSourceScaleway.pyr + s z SourceAddressAdapter.__init__Fc C s0 t jtjtjdfg }t|||| j|d�| _d S )N� )� num_pools�maxsize�blockr �socket_options)r �default_socket_options�socket�
SOL_SOCKET� SO_REUSEPORTr r � poolmanager)r � connectionsr! r" r# r r r �init_poolmanager/ s � �z%SourceAddressAdapter.init_poolmanager)F)�__name__�
__module__� __qualname__�__doc__r r* �
__classcell__r r r r r & s r c
C s^ zt j| d|d|dd� d�}t�|j�W S t jy. } z
|jdkr)W Y d}~dS � d}~ww )aQ
Retrieve user data or vendor data.
Scaleway user/vendor data API returns HTTP/404 if user/vendor data is not
set.
This function calls `url_helper.readurl` but instead of considering
HTTP/404 as an error that requires a retry, it considers it as empty
user/vendor data.
Also, be aware the user data/vendor API requires the source port to be
below 1024 to ensure the client is root (since non-root users can't bind
ports below 1024). If requests raises ConnectionError (EADDRINUSE), the
caller should retry to call this function on an other port.
Nr c S s | j dko
t| jtjj� S )N� )�code�
isinstance�cause�requests�
exceptionsr )�excr r r �<lambda>W s
z%query_data_api_once.<locals>.<lambda>)�data�timeout�retries�session� exception_cbr0 )r �readurlr
�
decode_binary�contents�UrlErrorr1 )� api_addressr9 �requests_session�respr6 r r r �query_data_api_once< s �
��rD c
C s t dt|d��D ]�}z]t�d| |� t�� }d}z)t|�j}|}|d dkr,|dd� }tj |dtj
d �d d } | tj kr@d
}W n t yJ Y nw |�
d t||fd �� t|||d
�}
t�d| � |
W S tjy� } zt�d| | � t�d� | } W Y d} ~ qd} ~ ww | �)a/ Get user or vendor data.
Handle the retrying logic in case the source port is used.
Scaleway metadata service requires the source port of the client to
be a privileged port (<1024). This is done to ensure that only a
privileged user on the system can access the metadata service.
r r z*Trying to get %s data (bind on port %d)...z0.0.0.0r �[���N)�protoz0::zhttp://)r )r9 rB z%s-data downloadedz%Error while trying to get %s data: %s� )�range�max�LOG�debugr4 �Sessionr �netlocr% � getaddrinfo� IPPROTO_TCP�AF_INET6�
ValueError�mountr rD r r@ �warning�time�sleep)
�api_typerA r: r9 �portrB � localhost� url_address�address�
addr_protor8 r6 �last_excr r r �query_data_apid sT �
���
� � ��
��r^ c s� e Zd ZdZejejejej hiZ
� fdd�Z de ddf� fdd� Z
d d
� Zd d � Zed
d� �Zdd� Zedd� �Zedd� �Zdd� Zdd� Zd dd�Zed d � �Zed d � �Z� ZS )!�DataSourceScaleway�Scalewayc s� t t| ��|||� t�t�|ddgi �g�| _t| j�dt ��| _
t| j�dt ��| _ t| j�dt
��| _tj| _t| _d | _d | _d | _d | _d| _d| j�� v r_| j| jd 7 _d S d S )N�
datasourcer` r: r9 �max_waitT�
metadata_urls)r r_ r r
�
mergemanydict�get_cfg_by_path�ds_cfg�int�get�DEF_MD_RETRIESr: �DEF_MD_TIMEOUTr9 �DEF_MD_MAX_WAITrb r �UNSET�_network_config� DS_BASE_URLSrc � metadata_url� userdata_url�vendordata_url�ephemeral_fixed_address�has_ipv4�keys)r �sys_cfg�distro�pathsr r r r � s$ ���zDataSourceScaleway.__init__�ci_pkl_version�returnNc sF t � �|� d dttd d d�}|D ]}t| |�s t| ||| � qd S )NT)rr rs rb rc rp rq )r � _unpicklerk rn �hasattr�setattr)r rx �
attr_defaults�attrr r r rz � s �
��z DataSourceScaleway._unpicklec C sx t �� }tj|| j| jdd�\}}|r-t�d|� |� d�| _|� d�| _ |� d�| _
dS t�d|t t �� | �� t �) zO
Define metadata_url based upon api-metadata URL availability.
F)�urlsrb r9 �connect_synchronouslyz%s is reachablez/conf?format=jsonz/user_data/cloud-initz/vendor_data/cloud-initNz3Unable to reach api-metadata at %s after %s seconds)
rU � monotonicr � wait_for_urlrb r9 rK rL ro rp rq rg r )r r �
start_time� avail_url�_r r r �_set_metadata_url� s&
� �z$DataSourceScaleway._set_metadata_urlc C sZ t j| j| j| jd�}t�t�|j ��| _
t d| j | j| j�| _
t d| j| j| j�| _d S )N)r9 r: z user-dataz vendor-data)r r= ro r9 r: �json�loadsr
r> r? �metadatar^ rp � userdata_rawrq �vendordata_raw)r rC r r r �_crawl_metadata� s ��
�z"DataSourceScaleway._crawl_metadatac C s> t �d�} | dkr dS tj�d�rdS t�� }d|v r dS dS )a
There are three ways to detect if you are on Scaleway:
* check DMI data: not yet implemented by Scaleway, but the check is
made to be future-proof.
* the initrd created the file /var/run/scaleway.
* "scaleway" is in the kernel cmdline.
zsystem-manufacturerr` Tz/var/run/scaleway�scalewayN)r �
read_dmi_data�os�path�existsr
� get_cmdline)� vendor_name�cmdliner r r � ds_detect� s
�z DataSourceScaleway.ds_detectc
C sp | j rgzCt| j| jj��1}t�d�� | �| j� W d � n1 s#w Y | �� |d | _ d| j
d< W d � n1 s@w Y W n t t t
fyf } zt�tt|�� d| _ W Y d }~nd }~ww | j s�zAt| j| jj��. t�d�� | �| j� W d � n1 s�w Y | �� d| j
d< W d � W dS 1 s�w Y W dS t y� Y dS w dS ) Nz7Setting api-metadata URL depending on IPv4 availabilityz
fixed-address�ipv4�
net_in_useFz7Setting api-metadata URL depending on IPv6 availability�ipv6T)rs r rv �fallback_interfacer �Timedr� rc r� rr r� r
r r r
�logexcrK �strr )r r� �er r r � _get_data s^ �� �
�� ��� �� � �
�
��z DataSourceScaleway._get_datac C s� | j du rt�dtj� tj| _ | j tjkr| j S | jd du r�i }i }| jd D ]r}|d | jkrRd|d< ddd d
�}d |�� v rL|d |g7 < q)|g|d < q)d |�� v rk|d |d � d
|d � �f7 < n|d � d
|d � �f|d < |d dkr�|d dd�}d |�� v r�|d |g7 < q)|g|d < q)||| jj < d|d�| _ nBdd| jj d�}ddig}| jd r�|dd| jd d d| jd d d d d| jd d d �gd �g7 }||d < d!|gd"�| _ t�
d#| j � | j S )$z`
Configure networking according to data received from the
metadata API.
Nz5Found None as cached _network_config. Resetting to %s�
private_ip�
public_ipsr[ T�dhcp4z169.254.42.42/32z
62.210.0.1)zon-link�to�via�routes� addresses�/�netmask�family�inet6�gatewayz::/0)r� r� r )�version� ethernets�physicalz%s)�type�namer� r� �staticz::�0)�network�prefixr� )r� r[ r� r� �subnetsr )r� �configznetwork_config : %s) rm rK rT r rl r� rr rt rv r� rL )r �netcfg�ip_cfg�ip�router� r r r �network_config4 sr
� �
��
�
�
�����z!DataSourceScaleway.network_configc C � d S �Nr �r r r r � launch_index� � z DataSourceScaleway.launch_indexc C s
| j d S )N�id)r� r� r r r �get_instance_id� s
z"DataSourceScaleway.get_instance_idc C s^ dd� | j d D �}d}t|�}| j �dg �D ]}|�|�s q|�||d � �dd�� q|S )Nc S s g | ]}|d �qS )�keyr )�.0r� r r r �
<listcomp>� s z:DataSourceScaleway.get_public_ssh_keys.<locals>.<listcomp>�ssh_public_keyszAUTHORIZED_KEY=�tagsr� � )r� �lenrh �
startswith�append�replace)r �ssh_keys�akeypre�plen�tagr r r �get_public_ssh_keys� s
z&DataSourceScaleway.get_public_ssh_keysFc C s t | jd d�S )N�hostnameF)r r� )r �fqdn�
resolve_ip�
metadata_onlyr r r � get_hostname� s z DataSourceScaleway.get_hostnamec C r� r� r r� r r r �availability_zone� r� z$DataSourceScaleway.availability_zonec C r� r� r r� r r r �region� r� zDataSourceScaleway.region)FFF) r+ r, r- �dsnamer �NETWORKr �BOOT_NEW_INSTANCE�BOOT� BOOT_LEGACY�default_update_eventsr rg rz r� r� � staticmethodr� r� �propertyr� r� r� r� r� r� r� r/ r r r r r_ � s4 ��
2
O
r_ c C s t �| t�S r� )r �list_from_depends� datasources)�dependsr r r �get_datasource_list� s r� )1r� �loggingr� r% rU � urllib.parser r4 �requests.exceptionsr �urllib3.connectionr �urllib3.poolmanagerr � cloudinitr r r r r
�cloudinit.eventr r �cloudinit.net.dhcpr
�cloudinit.net.ephemeralr r �cloudinit.sourcesr �cloudinit.subpr � getLoggerr+ rK rn ri rk rj �adapters� HTTPAdapterr rD r^ �
DataSourcer_ �DEP_FILESYSTEMr� r� r r r r �<module> s<
(4
�