shell bypass 403
a
'�Dg�, � @ s� d dl Z d dlZd dlZd dlmZ d dlmZmZmZ d dl m
Z
d dl m Z m
Z
d dl mZ d dl mZ d dlmZ d d lmZ e �e�ZG d
d � d �ZG d d
� d
e j�Zdd� Zdd� Z dd� Z ee j e j ffgZ dd� Z!dS )� N)�suppress)�gaierror� getaddrinfo� inet_ntoa)�pack)�sources�subp)�
url_helper)�util)�dhcp)�ec2c @ s( e Zd ZdZdd� Zdd� Zdd� ZdS ) � CloudStackPasswordServerClienta�
Implements password fetching from the CloudStack password server.
http://cloudstack-administration.readthedocs.org/
en/latest/templates.html#adding-password-management-to-your-templates
has documentation about the system. This implementation is following that
found at
https://github.com/shankerbalan/cloudstack-scripts/
blob/master/cloud-set-guest-password-debian
c C s
|| _ d S �N)�virtual_router_address)�selfr � r �J/usr/lib/python3.9/site-packages/cloudinit/sources/DataSourceCloudStack.py�__init__+ s z'CloudStackPasswordServerClient.__init__c C s: t � ddddddddd d
�|�d �| j�g �\}}|�� S ) NZwgetz--quietz--tries�3z --timeoutZ20z--output-document�-z--headerzDomU_Request: {0}z{0}:8080)r �formatr �strip)r Z domu_request�output�_r r r � _do_request. s
��z*CloudStackPasswordServerClient._do_requestc C s4 | � d�}|dv rd S |dkr&td��| � d� |S )NZsend_my_password)� �saved_passwordZ bad_requestz-Error when attempting to fetch root password.r )r � RuntimeError)r �passwordr r r � get_passwordC s
z+CloudStackPasswordServerClient.get_passwordN)�__name__�
__module__� __qualname__�__doc__r r r r r r r r
s r
c sf e Zd ZdZdZdZdd� Zdd� Zd� fd d
� Zd d � Z d
d� Z
dd� Z dd� Z e
dd� �Z� ZS )�DataSourceCloudStackZ
CloudStack�x �2 c C sd t j�| |||� tj�|jd�| _d| _|| _t | j�| _
| j
sJt d��d| j
� d�| _ i | _
d S )N�csZlatestzNo virtual router found!zhttp://�/)r �
DataSourcer �os�path�join�seed_dir�api_ver�distro�get_vr_address�vr_addrr �metadata_address�cfg)r Zsys_cfgr/ �pathsr r r r U s z DataSourceCloudStack.__init__c C s� t �d� t�d�}|r |S t �d� ttj��8 t�� �| jd�}|rZ|W d � S W d � n1 sn0 Y t �d| jj j
� tt ��4 | jj � | jj
�}|�d�p�d}|W d � S 1 s�0 Y t �d� dS )z�
Try obtaining a "domain-name" DHCP lease parameter:
- From systemd-networkd lease
- From dhclient lease
z.Try obtaining domain name from networkd leasesZ
DOMAINNAMEzHCould not obtain FQDN from networkd leases. Falling back to ISC dhclientz domain-nameNzBCould not obtain FQDN from ISC dhclient leases. Falling back to %szNo dhcp leases found)�LOG�debugr � networkd_get_option_from_leasesr � NoDHCPLeaseMissingDhclientError� IscDhclient�get_key_from_latest_leaser/ � dhcp_client� client_name�FileNotFoundError�get_newest_leaseZfallback_interface�get)r �
domainnameZ domain_name� latest_leaser r r �_get_domainnamec s2
� �0�
�"
z$DataSourceCloudStack._get_domainnameFc sn t � �|||�}|rjd|jvrjt�d� | �� }|r^|j� d|� �}t�d|� t�||j�S t�d|� |S )z�
Returns instance's hostname / fqdn
First probes the parent class method.
If fqdn is requested, and the parent method didn't return it,
then attach the domain-name from DHCP response.
�.zFQDN requestedz Obtained the following FQDN: %szNCould not determine domain name for FQDN. Fall back to hostname as an FQDN: %s) �super� get_hostname�hostnamer5 r6 rB r ZDataSourceHostnameZ
is_default)r ZfqdnZ
resolve_ipZ
metadata_onlyrF r@ �� __class__r r rE � s
�z!DataSourceCloudStack.get_hostnamec C s~ | � � }|jdkrdS t�| jd�g}t�� }tj||j|jt j
d�\}}|r\t � d|� nt � d|t
t�� | �� t|�S )Nr Fz latest/meta-data/instance-id)�urlsZmax_wait�timeoutZ status_cbzUsing metadata source: '%s'z>Giving up on waiting for the metadata from %s after %s seconds)Zget_url_paramsZmax_wait_seconds�uhelpZ combine_urlr2 �time� monotonicZ wait_for_urlZtimeout_secondsr5 Zwarningr6 Zcritical�int�bool)r Z
url_paramsrI �
start_time�urlZ _responser r r �wait_for_metadata_service� s,
���
�z.DataSourceCloudStack.wait_for_metadata_servicec C s | j S r )r3 �r r r r �get_config_obj� s z#DataSourceCloudStack.get_config_objc C s i }t j|| jd d�r>|d | _|d | _t�d| j� dS z�| �� sNW dS t� � }t
� | j | j
�| _t
�| j | j
�| _t�dtt� � | �� t| j�}z |�� }W n" ty� t �td | j� Y n0 |r�d|d
did �| _W dS t�y t �td | j
� Y dS 0 d S )
Nr( )�basez user-dataz meta-dataz%Using seeded cloudstack data from: %sTFz)Crawl of metadata service took %s secondsz/Failed to fetch password from virtual router %sZexpire)Z
ssh_pwauthr Zchpasswdz(Failed fetching from metadata service %s)r
Zread_optional_seedr- Z userdata_raw�metadatar5 r6 rR rL rM r Zget_instance_userdatar. r2 Zget_instance_metadatarN r
r1 r � ExceptionZlogexcr3 )r Zseed_retrP Zpassword_clientZ set_passwordr r r � _get_data� sV
���
�
���z DataSourceCloudStack._get_datac C s
| j d S )Nz instance-id�rV rS r r r �get_instance_id� s z$DataSourceCloudStack.get_instance_idc C s
| j d S )Nzavailability-zonerY rS r r r �availability_zone� s z&DataSourceCloudStack.availability_zone)FFF)r r! r" ZdsnameZ url_max_waitZ url_timeoutr rB rE rR rT rX rZ �propertyr[ �
__classcell__r r rG r r$ M s , � 0r$ c C sB zt dd�} W n ty, t�d� Y d S 0 | d d d S d S )Nz data-server�P z DNS Entry data-server not foundr � )r r r5 r6 )Zaddrinfor r r �get_data_server s
r` c C s^ t �d��� } | D ]F}|�d�}|d dkrttdt|d d���}t�d|� | S qd S ) Nz/proc/net/route� � Z00000000z<L� � z"Found default route, gateway is %s) r
Zload_text_file�
splitlines�splitr r rN r5 r6 )�lines�line�itemsZgwr r r �get_default_gateway s
rj c C s t � }|rt�d|� |S t�d�}|r8t�d|� |S ttj��B t�� �| d�}|rvt�d|� |W d � S W d � n1 s�0 Y tt ��D | j
� | �}|r�t�d|| j
j � |W d � S W d � n1 s�0 Y t�d� t
� S )Nz4Found metadata server '%s' via data-server DNS entryZSERVER_ADDRESSz-Found SERVER_ADDRESS '%s' via networkd_leaseszdhcp-server-identifierz&Found SERVER_ADDRESS '%s' via dhclientz1Found SERVER_ADDRESS '%s' via ephemeral %s lease z$No DHCP found, using default gateway)r` r5 r6 r r7 r r8 r9 r: r= r; r> r< rj )r/ Zlatest_addressrA r r r r0 s> �
� � 0
�0
r0 c C s t �| t�S r )r Zlist_from_depends� datasources)Zdependsr r r �get_datasource_listR s rl )"Zloggingr* rL �
contextlibr Zsocketr r r �structr Z cloudinitr r r rK r
Z
cloudinit.netr Zcloudinit.sources.helpersr Z getLoggerr r5 r
r) r$ r` rj r0 ZDEP_FILESYSTEMZ DEP_NETWORKrk rl r r r r �<module> s(
. 7
2�