shell bypass 403
a
'�Dg�5 � @ s� U d Z ddlZddlZddlmZmZ ddlZddlmZm Z ddl
m Z ddl m
Z
ddlmZ ddlmZ e�e�Zd Zd
d ged gd
�Zeed< dd� Zdd� Zee
e edd�dd�Z dd� Z dd� Z dd� Z d#d d �Z e!eee d �d!d"�Z"dS )$z>LXD: configure lxd with ``lxd init`` and optionally lxd-bridge� N)�List�Tuple)�subp�util)�Cloud)�Config)�
MetaSchema)� PER_INSTANCEZlxdbr0Zcc_lxdZubuntu�lxd)�idZdistrosZ frequencyZactivate_by_schema_keys�metac C s� g }t | t�s&|�dt| �j� d�� t |t�sH|�dt|�j� d�� t |t�sj|�dt|�j� d�� |r�| sv|r�| r�dgng }||r�dgng 7 }|�dd�|�� �� |r�td �|���d
S ) z�Validate user-provided lxd network and bridge config option values.
@raises: ValueError describing invalid values provided.
z/lxd.init config must be a dictionary. found a '�'z1lxd.bridge config must be a dictionary. found a 'z.lxd.preseed config must be a string. found a 'zlxd.initz
lxd.bridgezMUnable to configure LXD. lxd.preseed config can not be provided with key(s): z, z. N)�
isinstance�dict�append�type�__name__�str�join�
ValueError)�init_cfg�
bridge_cfg� preseed_str�errorsZ incompat_cfg� r �;/usr/lib/python3.9/site-packages/cloudinit/config/cc_lxd.py� supplemental_schema_validation! s:
��
��
�� ��r c C s� d}g d�}|D ]2}| � |�r|�d|�dd�t| | �f g� qzt�|� W nR tjy� | d dkrp� t�d� t�g d �� d
d � |D �}t�|� Y n0 d S )
z�Set up lxd if init config is given.
:param init_cfg: dict of lxd init configuration options to provide
to `lxd init --auto`
)�network_addressZ network_port�storage_backendZstorage_create_deviceZstorage_create_loop� storage_poolZtrust_password)r
�initz--autoz--%s=%s�_�-r �lvmzqCloud-init doesn't use thinpool by default on Ubuntu due to LP #1982780. This behavior will change in the future.)�lxcZstorage�create�defaultr# zlvm.use_thinpool=falsec S s g | ]}|� d �s|�qS )z--storage-backend)�
startswith)�.0�xr r r �
<listcomp>q � z#handle_init_cfg.<locals>.<listcomp>N)�get�extend�replacer r �ProcessExecutionError�LOG�info)r Z init_keys�cmd�kZnew_cmdr r r �handle_init_cfgD s$
& ��r4 )�name�cfg�cloud�args�returnc
C s� |� d�}|s t�d| � d S t|t�s>tdt|�j� d���t� |� |� di �}|� dd�}|� di �}t
|||� t � d�s�zt � g d �� W n4 t j
y� } ztd
| �|�W Y d }~n
d }~0 0 t||�} t| ��r(z|j�| � W n8 t j
�y& }
z t�d | |
� W Y d }
~
d S d }
~
0 0 t � g d �� |�rRt j g d
�|d� d S |�r`t|� d} |�r�|� dt�} tj�d��r t � | ��r t|�}
z<t�d| � d�dd� |
�� D ��d }t j dg|d� W n$ t �y� t� td| � Y n0 t� d� t�d� t � g d�� nht |�\}}t | t!|�t!|�t!|�d� |�rft�dd�|�� t"|� |�r�t�d d�|�� t"|� n|�r�td | ��d S ) Nr
z8Skipping module named %s, not present or disabled by cfgz*lxd config must be a dictionary. found a 'r
r Zpreseed� Zbridge)Zsnap�installr
z#Failed to install lxd from snap: %sz!failed to install packages %s: %s)r
Z waitreadyz
--timeout=300)r
r z --preseed)�datazdebconf-communicater5 z/etc/default/lxd-bridgezSetting lxd debconf via %s�
c S s g | ]\}}d ||f �qS )z set %s %sr )r( r3 �vr r r r* � r+ zhandle.<locals>.<listcomp>z Failed to run '%s' for lxd withz Running dpkg-reconfigure for lxd)zdpkg-reconfigurer
z--frontend=noninteractive)�net_name�did_initr% �attachzCreating lxd bridge: %s� z!Setting up default lxd bridge: %sz*Unable to configure lxd bridge without %s.)#r, r0 �debugr r r r r r Zwait_for_snap_seededr r �whichr/ � RuntimeError�get_required_packages�lenZdistroZinstall_packages�warningr4 �_DEFAULT_NETWORK_NAME�os�path�exists�bridge_to_debconfr �items� ExceptionZlogexcZdel_file�
bridge_to_cmd�maybe_cleanup_default�bool�_lxc)r5 r6 r7 r8 Zlxd_cfgr r r �e�packages�excZ
dconf_commr? �debconfr< �
cmd_create�
cmd_attachr r r �handlex s�
�
��
��
� ����
�
�
�rZ c C s` i }| � d�dkr&d|d< d|d< �n6| � d�dkrVd|d< d|d < | � d
�|d< �n| � d�d k�rJd|d< | � d
�r�| � d
�|d< | � d �r�d|d
< | � d �|d< | � d�|d< | � d�|d< | � d�|d< | � d�|d< | � dd�|d< | � d��r.d|d< | � d�|d< | � d �|d < | � d d�|d < | � d ��r\| � d �|d!< ntd"| � d� ��|S )#N�mode�noneZfalsezlxd/setup-bridger: zlxd/bridge-name�existing�truezlxd/use-existing-bridger5 �new� ipv4_addresszlxd/bridge-ipv4zlxd/bridge-ipv4-address� ipv4_netmaskzlxd/bridge-ipv4-netmask�ipv4_dhcp_firstzlxd/bridge-ipv4-dhcp-first�ipv4_dhcp_lastzlxd/bridge-ipv4-dhcp-lastZipv4_dhcp_leaseszlxd/bridge-ipv4-dhcp-leases�ipv4_natzlxd/bridge-ipv4-nat� ipv6_addresszlxd/bridge-ipv6zlxd/bridge-ipv6-address� ipv6_netmaskzlxd/bridge-ipv6-netmask�ipv6_natzlxd/bridge-ipv6-nat�domainzlxd/bridge-domain�invalid bridge mode "%s")r, rE )r rW r r r rM � sJ
��� � rM c C s� | � d�dkrdS | � dt�}g }dd|ddg}| � d�d krFd |fS | � d�d
krftd | � d� ��dd |g}| � d
�r�| � d�r�|�d| � d
�| � d�f � | � dd�dkr�|�d� | � d�r�| � d�r�d| � d�| � d�f }|�d| � n
|�d� | � d��rT| � d��rT|�d| � d�| � d�f � | � d�dk�r^|�d � n
|�d � | � d ��r~|�d | � d � � | � d d!�}|d!k�r�|�d"|� �� ||fS )#Nr[ r\ )NNr5 �networkzattach-profiler& �eth0r] r_ ri r% r` ra zipv4.address=%s/%srd r^ z
ipv4.nat=truerb rc z%s-%szipv4.dhcp.ranges=%szipv4.address=nonere rf zipv6.address=%s/%srg z
ipv6.nat=truezipv6.address=nonerh z
dns.domain=%s�mtu���z bridge.mtu=)r, rI rE r )r Z bridge_namerX rY Z
dhcp_rangerl r r r rP sT
��
��
��
rP c C sB dt j�dd�t j�dd�d�}tjdgt| � dg |d � d S )
N�C�HOMEz/root�USER�root)�LC_ALLro rp r$ z
--force-local)Z
update_env)rJ �environr, r �list)r2 �envr r r rS J s
�rS r& rk c
C s& | t ks |sdS d}d}|r�d}z$tdd| |g� t�|| ||� W nD tjy� } z*| jdkrd| �t�|| ||� W Y d} ~ n*d} ~ 0 0 d}tdd | g� t�|| |� |�r"d
}z&td d d
||g� t�||||� W nF tj�y } z*| jdkr�| �t�||||� W Y d} ~ n
d} ~ 0 0 dS )a Newer versions of lxc (3.0.1+) create a lxdbr0 network when
'lxd init --auto' is run. Older versions did not.
By removing any that lxd-init created, we simply leave the add/attach
code intact.
https://github.com/canonical/lxd/issues/4649Nz"failed. Assuming it did not exist.z
succeeded.z/Detach of lxd network '%s' from profile '%s' %srj zdetach-profile� z Deletion of lxd network '%s' %s�deletez+Removal of device '%s' from profile '%s' %s�profileZdevice�remove)rI rS r0 rC r r/ Z exit_code)
r? r@ r% rA rx Znic_nameZfail_assume_enoentZ succeeded�msgrT r r r rQ S s2
&
rQ )r r r9 c
C s� g }g }i }d| v r"|� | d � |rbd|v rbzt�|�}W n$ tjttfy` t�d� Y n0 |�dg �D ] }|�d�rn|� |d � qnd|v r�t �
d�s�|� d� d|v r�t �
d�s�|� d � d
|v r�t �
d �s�|� d � |S )
z&identify required packages for installr Z
storage_poolsz|lxd.preseed string value is not YAML. Unable to determine required storage driver packages to support storage_pools config.ZdriverZzfszzfsutils-linuxr# ZlvcreateZlvm2Zbtrfsz
mkfs.btrfsz btrfs-progs) r �yamlZ safe_loadZ YAMLError� TypeErrorr r0 rH r, r rD )r r rU Zstorage_driversZ preseed_cfgr r r r rF { s, �
rF )r& rk )#�__doc__ZloggingrJ �typingr r r{ Z cloudinitr r Zcloudinit.cloudr Zcloudinit.configr Zcloudinit.config.schemar Zcloudinit.settingsr Z getLoggerr r0 rI r �__annotations__r r4 r rt rZ rM rP rS rQ r rF r r r r �<module> s2
�#4e1<
�
(