CasperSecurity
o
쑛hk, � @ s� d Z ddlZddlZddlZddlZddlmZ ddlmZm Z ddl
m Z ddl m
Z
mZmZ ddlmZ ddlmZ d Ze�e�Zd d
d �Zd d
� Zdefdd�Zdedede de fdd�Z dd� Z dd� Z edkrqe � dS dS ) aT Query standardized instance metadata provided to machine, returning a JSON
structure.
Some instance-data values may be binary on some platforms, such as userdata and
vendordata. Attempt to decompress and decode UTF-8 any binary values.
Any binary values in the instance metadata will be base64-encoded and prefixed
with "ci-b64:" in the output. userdata and, where applicable, vendordata may
be provided to the machine gzip-compressed (and therefore as binary data).
query will attempt to decompress these to a string before emitting the JSON
output; if this fails, they are treated as binary.
� N)�EACCES)�
atomic_helper�util)�read_cfg_paths)�convert_jinja_instance_data�get_jinja_variable_alias�render_jinja_payload)�REDACT_SENSITIVE_VALUE)�JinjaSyntaxParsingException�queryc C s� | s t jttd�} | jdddddd� | jdd td
t� �d �� �d � | jd
ddddd� | jddtdd � | jddtdd � | jdtddd� | jddddd d d � | jd d td!d"d#� | S )$a# Build or extend an arg parser for query utility.
@param parser: Optional existing ArgumentParser instance representing the
query subcommand which will be extended to support the args of
this utility.
@returns: ArgumentParser with proper argument configuration.
)�prog� descriptionz-dz--debug�
store_trueFz+Add verbose messages during template render)�action�default�helpz-iz--instance-dataz,Path to instance-data.json file. Default is �
instance_data)�typer z-lz --list-keyszBList query keys available at the provided instance-data <varname>.z-uz --user-datazHPath to user-data file. Default is /var/lib/cloud/instance/user-data.txtz-vz
--vendor-datazLPath to vendor-data file. Default is /var/lib/cloud/instance/vendor-data.txt�varname�?z�A dot-delimited specific variable to query from instance-data. For example: v1.local_hostname. If the value is not JSON serializable, it will be base64-encoded and will contain the prefix "ci-b64:". )r �nargsr z-az--all�dump_allz Dump all available instance-data)r r �destr z-fz--format�formatz�Optionally specify a custom output format string. Any instance-data variable can be specified between double-curly braces. For example -f "{{ v2.cloud_name }}")r r r )�argparse�ArgumentParser�NAME�__doc__� add_argument�strr � get_runpath��parser� r# �5/usr/lib/python3/dist-packages/cloudinit/cmd/query.py�
get_parser& st �
�� �
� � � �� r% c C s> t j| dd�}z|�d�W S ty t j|ddd� Y S w )z�Attempt to return a string of user-data from ud_file_path
Attempt to decode or decompress if needed.
If unable to decode the content, raw bytes will be returned.
@returns: String of uncompressed userdata if possible, otherwise bytes.
T)�quietzutf-8F)r& �decode)r �load_binary_filer' �UnicodeDecodeError� decomp_gzip)� ud_file_path�bdatar# r# r$ �
load_userdata~ s �r- �returnc
C s� t �� }t� }| r | }n#|�d�}|dkr-|�d�}t j�|�r#|}n t�d||� |}n|}|r4|}nt j�|j d�}|rA|} nt j�|j d�} |�d�}
zt
� |�} W n! t t
fyv } z| jtkrkt�d|� � t�d |� � d
} ~ ww t
�| �} z
t
�t
� |
��}
W n
t t
fy� d
}
Y nw |dkr�d t|f | d < d t| f | d
< d t|
f | d< | S t|�| d < t| �| d
< |
| d< | S )a� Return a dict of merged instance-data, vendordata and userdata.
The dict will contain supplemental userdata and vendordata keys sourced
from default user-data and vendor-data files.
Non-root users will have redacted INSTANCE_JSON_FILE content and redacted
vendordata and userdata values.
:raise: IOError/OSError on absence of instance-data.json file or invalid
access perms.
r r �instance_data_sensitivez4Missing root-readable %s. Using redacted %s instead.z
user-data.txtzvendor-data.txt�combined_cloud_configz$No read permission on '%s'. Try sudoz Missing instance-data file: %sNz <%s> file:%s�userdata�
vendordata)�os�getuidr r �path�exists�LOG�warning�join�
instance_linkr �load_text_file�IOError�OSError�errnor �error� load_jsonr r- )r � user_data� vendor_data�uid�paths�instance_data_fn�redacted_data_fn�sensitive_data_fn� user_data_fn�vendor_data_fn�combined_cloud_config_fn�
instance_json�er0 r# r# r$ �_read_instance_data� sv
�
���
��
�
�
� � rM �jinja_vars_without_aliases�jinja_vars_with_aliasesr � list_keysc
C s� d}| }|� d�D ]M}z|| }W n ty1 } z|r#dj||d�}nd�|�}t|�|�d}~ww ||v r;|| }n|D ]} t| �|krK|| } nq=|rR|d7 }||7 }q |S )a� Return the value of the dot-delimited varname path in instance-data
Split a dot-delimited jinja variable name path into components, walk the
path components into the instance_data and look up a matching jinja
variable name or cloud-init's underscore-delimited key aliases.
:raises: ValueError when varname represents an invalid key name or path or
if list-keys is provided by varname isn't a dict object.
� �.z*instance-data '{key_path}' has no '{leaf}')�leaf�key_pathz Undefined instance-data key '{}'N)�split�KeyErrorr �
ValueErrorr )
rN rO r rP �walked_key_path�response�
key_path_partrL �msg�keyr# r# r$ �(_find_instance_data_leaf_by_varname_path� s2 �
��
�
r] c
C s� t |j|j|j|jg�st�d� t� �� dS z t |j
|j |j �}W n t
tfy/ Y dS w |jrodj|jd�}zt|d||jrDdndd�}W n tyd } zt�d t|�� W Y d
}~dS d
}~ww |rmt|� d S dS t|�}|jr�t|dd �}z t|||j|jd
�}W n ttfy� } z t�|� W Y d
}~dS d
}~ww |jr�t|t�s�t�d|j� dS d�t|� � ��}t|t�s�t � |�}t|� d S )z3Handle calls to 'cloud-init query' as a subcommand.zDExpected one of the options: --all, --format, --list-keys or varname� z## template: jinja
{fmt})�fmtzquery command lineTF)�payload�
payload_fnr �debugz#Failed to render templated data. %sNr )�include_key_aliases)rN rO r rP z+--list-keys provided but '%s' is not a dict�
) �anyrP r r r r7 r? r% �
print_helprM r rA rB r< r= r rb r
r �printr r] rV rW �
isinstance�dictr9 �sorted�keysr �
json_dumps)�name�argsr r` �rendered_payloadrL rY rO r# r# r$ � handle_args s| �
��
�����
�
��
�
rp c C s t � } t�tt| �� �� dS )z,Tool to query specific instance-data values.N)r% �sys�exitrp r �
parse_argsr! r# r# r$ �mainK s rt �__main__)N)!r r �loggingr3 rq r> r � cloudinitr r �cloudinit.cmd.develr �!cloudinit.handlers.jinja_templater r r �cloudinit.sourcesr �cloudinit.templaterr
r � getLogger�__name__r7 r% r- ri rM r �boolr] rp rt r# r# r# r$ �<module> s<
XP���
�+C
�