shell bypass 403
a
'�Dgda � @ s� d dl Z d dlZd dlZd dlZd dlmZ d dlmZmZmZ d dl m
Z
m Z m Z m
Z
mZ d dlmZ d dlmZmZ e �e�ZdZG dd � d e
j�ZdS )
� N)�datetime)�Any�Dict�Optional)�distros�helpers� lifecycle�subp�util)� HostnameConf)�
PER_ALWAYS� PER_INSTANCEa7 # This file is generated from information provided by the datasource. Changes
# to it will not persist across an instance reboot. To disable cloud-init's
# network configuration capabilities, write a file
# /etc/cloud/cloud.cfg.d/99-disable-network-config.cfg with the following:
# network: {config: disabled}
c sb e Zd ZdZdZdZdZdZdeed�iZ dZ
d Z d
d � Z d d
� Z
dDdd�Zejd�dd�Zdd� Zdd� Zdd� ZdEdd�Zd d � Zeeeed �d d �Zd!d"� ZdFd#d$�Zd%d&�d'd(�Ze d)d*� �Z e d+�� fd,d-� Z � fd.d/�Z ed0�� fd1d2� Z!� fd3d4�Z"dG� fd5d6� Z#dHd9d:�Z$e%d;d<� �Z&e'dd=�eeed>�d?d@��Z(e%ee)e dA�dBdC��Z*� Z+S )I�Distrozpy3-pipz/usr/share/bkeymaps/z&/etc/profile.d/50-cloud-init-locale.shz/etc/network/interfacesz /etc/shadowZeni)Zeni_pathZ
eni_headerz
/var/lib/dhcpzdhclient\.leasesc C s6 t j�| |||� t�|�| _d| _d| _d|d< d S )NzC.UTF-8ZalpineZsshdZ ssh_svcname)r r �__init__r ZRunners�_runner�default_localeZosfamily)�self�nameZcfg�paths� r �</usr/lib/python3.9/site-packages/cloudinit/distros/alpine.pyr . s
zDistro.__init__c C s | j S )zgThe default locale for Alpine Linux is different than
cloud-init's DataSource default.
)r �r r r r �
get_locale8 s zDistro.get_localeNc C sB |s
| j }|s| j}ddddd| ddg}t�|d�|�d� d S ) N�#z?# This file is created by cloud-init once per new instance bootzexport CHARSET=UTF-8zexport LANG=%szexport LC_COLLATE=C� �
� )r �locale_conf_fnr
�
write_file�join)r �localeZout_fn�linesr r r � apply_locale> s � zDistro.apply_locale)�pkglistc C s | � � | jd|d� d S )N�add)�pkgs)�update_package_sources�package_command)r r# r r r �install_packagesQ s zDistro.install_packagesc C sx d }z| � |�}W n8 tyJ t�| jdd�}|r6nt�d� Y d S Y n0 |sXtd�}|�|� t� |t
|�d� d S )N�create_hostname_fileTz8create_hostname_file is False; hostname file not createdr r ) �_read_hostname_conf�IOErrorr
Zget_cfg_option_boolZ_cfg�LOG�infor Z set_hostnamer �str)r �hostname�filename�confr) r r r �_write_hostnameU s" ��
zDistro._write_hostnamec C s | � | j�}| j|fS �N)�_read_hostnameZhostname_conf_fn)r Z sys_hostnamer r r �_read_system_hostnamek s z Distro._read_system_hostnamec C s t t�|��}|�� |S r3 )r r
�load_text_file�parse)r r0 r1 r r r r* o s zDistro._read_hostname_confc C s8 d }z| � |�}|j}W n ty* Y n0 |s4|S |S r3 )r* r/ r+ )r r0 �defaultr/ r1 r r r r4 t s
zDistro._read_hostnamec C s dS )Nz 127.0.1.1r r r r r �_get_localhost_ip s zDistro._get_localhost_ip)�layout�model�variant�optionsc C s� |sd}t �|� t|��tj�| j|�}tj�|�sPd| }t �|� t|��|sjd}t �|� t|��tj�|d| �}tj�|�s�d| }t �|� t|��|r�t � d� |r�t � d� t
�
d||g� d S ) Nz Keyboard layout not specified.z,Keyboard layout directory %s does not exist.z Keyboard variant not specified.z
%s.bmap.gzz(Keyboard variant file %s does not exist.z+Keyboard model is ignored for Alpine Linux.z.Keyboard options are ignored for Alpine Linux.z setup-keymap) r, �error� RuntimeError�os�pathr � keymap_path�isdir�isfile�warningr )r r: r; r< r= �msgZkeymap_layout_pathZkeymap_variant_pathr r r �
set_keymap� s>
��
� ��
zDistro.set_keymapc C s t j|| �|�d� d S )N)�tzZtz_file)r Zset_etc_timezoneZ
_find_tz_file)r rH r r r � set_timezone� s zDistro.set_timezonec C s� |d u r g }dg}|� d� |r6t|t�r6|� |� n|rNt|t�rN|�|� |r\|� |� |dkrr|�ddg� t�d|�}|�|� tj|dd� d S ) NZapkz--quietZupgradez--update-cachez --availablez%s-%sF)�capture)�append�
isinstancer. �list�extendr
Zexpand_package_listr )r �command�argsr% �cmdr# r r r r' � s
zDistro.package_commandF)�forcec C s$ | j jd| jdg|rtntd� d S )Nzupdate-sources�update)Zfreq)r �runr' r r
)r rR r r r r& � s
�z Distro.update_package_sourcesc C s | j sddg| _ | j S )z7Allow distro to determine the preferred ntp client listZchronyZntp)Z_preferred_ntp_clientsr r r r �preferred_ntp_clients� s
z Distro.preferred_ntp_clients)�returnc s� t �|�rt�d|� dS d|v r2t�d� |d= t�d�rPt� j|fi |��S |� dd�}dd g}d
d d d
dd�}ddi}|�
d�}|r�t |t �r�|�
d�}n"t |t�r�tjd|� d�ddd� dd� |D �}d�|�|d< |�
d�r�|�|d � |�r2|�r2|D ]*}t �|��s| �|� t�d ||� �qd |v �rLt |d �|d < g d d d d �} t|�� �D ]�\}
} |
|v �r�| �r�t | t ��r�|�||
| g� n^|
| v �r�| �r�t | t ��r�|
dk�r�| �
d�| |
< n| | |
< n |
|v �rf| �rf|�||
� �qf|�
d ��s|�
d��r"|�d!� |�|� t�d"|� zt�|� W n8 tj�y~ } z t�d#|� | �W Y d } ~ n
d } ~ 0 0 | d D ]d}
t�d$|
� zt�d%||
g� W n< tj�y� } z t �td&||
� | �W Y d } ~ n
d } ~ 0 0 �q�| d' �rt� j|| d' dd(� | d) }| d* }d }| j }zt � |�}W n6 t �yl } z t�d+|� | �W Y d } ~ n
d } ~ 0 0 d }|� � D ](}|�
d,�}|d- |k�rz|} �q��qz|�r�d.}d.|d/< d.|d0< d.|d1< d2}|d u�rt �!|�t �!d3� j"}t |�|d4< |d.k�r|d5 }|d6 }|d u�r<||d7< |d.k�r4|d5 }|d8 }|�#|d,�|��}t�d9||� zt j$||d:dd;� W n8 t%�y� } z t �td<|� | �W Y d } ~ n
d } ~ 0 0 nt �td=||� dS )>z�
Add a user to the system using standard tools
On Alpine this may use either 'useradd' or 'adduser' depending
on whether the 'shadow' package is installed.
Returns False if user already exists, otherwise True.
z!User %s already exists, skipping.FZ selinux_userz0Ignoring selinux_user parameter for Alpine LinuxZuseradd�
create_groupsTZadduserz-Dz-gz-hz-Gz-s�-u)Zgecos�homedir�
primary_group�shell�uid�systemz-S�groups�,z The user z) has a 'groups' config value of type dictz22.3z=Use a comma-delimited string or array instead: group1,group2.)Z
deprecatedZdeprecated_versionZ
extra_messagec S s g | ] }|� � �qS r )�strip)�.0�gr r r �
<listcomp> � z#Distro.add_user.<locals>.<listcomp>rZ z created group '%s' for user '%s'r\ N)r^ �
expiredate�inactive�passwdZno_create_homez-HzAdding user %szFailed to create user %szAdding user to group %s�addgroupz!Failed to add user %s to group %srg )Zhashedre rf �&Failed to read %s file, file not found�:r r � � � zpassword agingz
1970-01-01� z & zacct expiration date� zinactivity periodzUpdating %s for user %s�w�ZomodeZ
preserve_mode�Failed to update %s filez Failed to update %s for user %s)&r
�is_userr, r- rE r �which�super�add_user�pop�getrL r. �split�dictr Z deprecater rK �is_group� create_group�debug�sorted�itemsrN �ProcessExecutionError�logexcZ
set_passwd� shadow_fnr6 �FileNotFoundError�
splitlinesr Z
fromisoformat�days�replacer r+ )r r �kwargsrW Z adduser_cmdZ adduser_optsZ
adduser_flagsr^ �groupZunsupported_busybox_values�key�val�eZ
addn_groupre rf �shadow_contents� shadow_file�
original_line�line�new_line_partsZ update_typer� �� __class__r r rv � s
�
�
� ���
� �
�
��
��
�zDistro.add_userc
s� t j�d�rdt �d�vr&t� �|�S dd|g}z,tj|ddgd�\}}t�d|�rZW d S W n8 tj y� } z t
� t d
|� |�W Y d }~n
d }~0 0 d S ) zL
Lock the password of a user, i.e., disable password logins
�/usr/bin/passwd�bbsuidrg z-lr � ��rcszis already lockedTz&Failed to disable password for user %sN)
r@ rA �islink�readlinkru � lock_passwdr �re�searchr� r
r� r, )r r rQ Z_out�errr� r� r r r� � s � �
zDistro.lock_passwd)r c
s� t j�d�rdt �d�vr&t� �|�S dd|g}z,tj|ddgd�\}}t�d|�rZW d S W n8 tj y� } z t
� t d
|� |�W Y d }~n
d }~0 0 d S ) zM
Unlock the password of a user, i.e., enable password logins
r� r� rg rX r r� r� zis already unlockedTz%Failed to unlock password for user %sN)
r@ rA r� r� ru �
unlock_passwdr r� r� r� r
r� r, )r r rQ �_r� r� r� r r r� � s � �
zDistro.unlock_passwdc
s^ t j�d�rdt �d�vr&t� �|�S d }| j}zt�|�}W n4 t yr } z t
� d|� |�W Y d }~n
d }~0 0 d }|� � D ].}|�
d�}|d |kr�t
�d|� |} q�q�|�rL|d dk�r>d|d< |�|d�|�d �}t
�d
|� ztj||d d d
� W n8 t�y: } z t�t
d|� |�W Y d }~n
d }~0 0 n t
�d|� nt�t
d|� d S )Nr� r� ri rj r z'Found /etc/shadow line matching user %s� �0r� z Expiring password for user %srp Trq rr z'Password for user %s is already expiredz Failed to set 'expire' for %s)r@ rA r� r� ru �
expire_passwdr� r
r6 r� r, rE r� ry r} r� r r r+ r� )r �userr� r� r� r� r� r� r� r r r� � sN � �
� �
zDistro.expire_passwdc s� t �d�rt� �||�S d|g}|s(g }t�|�r@t�d|� n>zt � |� t�d|� W n" t j y| t�
td|� Y n0 t |�dkr�|D ]<}t� |�s�t�d||� q�t � d||g� t�d||� q�d S ) NZgroupaddrh z(Skipping creation of existing group '%s'zCreated new group %szFailed to create group %sr zCUnable to add group member '%s' to group '%s'; user does not exist.z Added user '%s' to group '%s')
r rt ru r| r
r{ r, rE r- r� r� �lenrs )r r �membersZ
group_add_cmd�memberr� r r r| s.
�zDistro.create_group�poweroff�nowc
C sp |dg}|dkr |dg7 }nPz|� tt|�d �� W n4 tyj } z td|f �|�W Y d }~n
d }~0 0 |S )Nz-dr� r� �< z?power_state[delay] must be 'now' or '+m' (minutes). found '%s'.)rK r. �int�
ValueError� TypeError)r �modeZdelay�messagerO r� r r r �shutdown_command@ s ���zDistro.shutdown_commandc C s dS )z1
Alpine uses OpenRC, not systemd
Fr r r r r � uses_systemdZ s zDistro.uses_systemdr� )�action�service�
extra_argsc
G s� ddg}ddg}t |�|dg t |�|dg t |�d|g t |�d|g t |�|dg t |�|dg t |�|dg t |�|d g d
�}t || �}tj|d |d �S )
a<
Perform the requested action on a service. This handles OpenRC
specific implementation details.
OpenRC has two distinct commands relating to services,
'rc-service' and 'rc-update' and the order of their argument
lists differ.
May raise ProcessExecutionError
z
rc-servicez --nocolorz rc-update�stop�start�delr$ �restart�status)r� r� �disable�enabler� �reloadz
try-reloadr� T)rJ r� )rM r ) r r� r� r� r� Zinit_cmdZ
update_cmdZcmdsrQ r r r �manage_servicea s
�
zDistro.manage_service)�blockdevrV c C s� t j�| �}| �d�r�t �t �| �j�}t �t �| �j�}t �d���}|D ]j}|j �d�rJt �
|j�}t� |j �rJt �t �|j�j�|krJt �t �|j�j�|krJt j�|j�} q�qJW d � n1 s�0 Y |�d�r�t
�d| |� |S dS )a Returns underlying block device for a mapped device.
If it is mapped, blockdev will usually take the form of
/dev/mapper/some_name
If blockdev is a symlink pointing to a /dev/dm-* device, return
the device pointed to. Otherwise, return None.
z /dev/mapperz/dev/zdm-Nz/dev/dm-z$%s is a mapped device pointing to %s)r@ rA �realpath�
startswith�major�stat�st_rdev�minor�scandirr �lstat�S_ISBLK�st_moder, r} )r� r� r� r� �itZdeventry�resr r r �get_mapped_device} s2
����$
�zDistro.get_mapped_device)N)N)NN)N)r� r� N),�__name__�
__module__� __qualname__Zpip_package_namerB r Znetwork_conf_fnr� �NETWORK_FILE_HEADERZrenderer_configsZdhclient_lease_directoryZdhclient_lease_file_regexr r r" r Z PackageListr( r2 r5 r* r4 r9 r. rG rI r' r& �propertyrU �boolrv r� r� r� r| r� � staticmethodr� � classmethodr� r r� �
__classcell__r r r� r r sP
�
"
[ 9#
��r )Zloggingr@ r� r� r �typingr r r Z cloudinitr r r r r
Z"cloudinit.distros.parsers.hostnamer Zcloudinit.settingsr r
Z getLoggerr� r, r� r r r r r �<module> s