shell bypass 403
a
'�DgLT � @ s d Z ddlZddlZddlZddlZddlZddlmZmZm Z m
Z
m Z m Z ddl
mZmZmZmZmZ ddlmZ ddlmZmZmZmZ ddlmZ e� e �Z dd iZ d
Z d Z!d Z"e!d
Z#e"d
Z$ddiZ%dZ&G dd� de
�Z'G dd� dej(�Z)edd�dd�Z*G dd� dej+�Z,G dd� de,�Z-e.d �d d �Z/e e. d �d d!�Z0e1d �d"d#�Z2e.e3d$�d%d&�Z4e.e ee.e.f d$�d'd(�Z5e.e.d$�d)d*�Z6d e,j7e,j8e#gd+�e1e e. e e' d,�d-d.�Z9e,ej:ffe-ej:ej;ffgZ<d/d0� Z=e d1k�rd2Z>e?e�@e9e$e#gd3�e2� d4��� dS )5a3 Datasource for Oracle (OCI/Oracle Cloud Infrastructure)
Notes:
* This datasource does not support OCI Classic. OCI Classic provides an EC2
lookalike metadata service.
* The UUID provided in DMI data is not the same as the meta-data provided
instance-id, but has an equivalent lifespan.
* We do need to support upgrade from an instance that cloud-init
identified as OpenStack.
* Bare metal instances use iSCSI root, virtual machine instances do not.
* Both bare metal and virtual machine instances provide a chassis-asset-tag of
OracleCloud.com.
� N)�Any�Dict�List�
NamedTuple�Optional�Tuple)�
atomic_helper�dmi�net�sources�util)�
NetworkConfig)�cmdline� ephemeral�get_interfaces_by_mac�is_netfail_master)� wait_for_url�configure_secondary_nicsFzOracleCloud.comz&http://169.254.169.254/opc/v{version}/z+http://[fd00:c1::a9fe:a9fe]/opc/v{version}/z{path}/Z
Authorizationz
Bearer Oraclei(# c @ sB e Zd ZU eed< eeef ed< eeeef ed< eed< dS )�ReadOpcMetadataResponse�version�
instance_data�
vnics_data�
imds_url_usedN) �__name__�
__module__� __qualname__�int�__annotations__r �strr r � r r �F/usr/lib/python3.9/site-packages/cloudinit/sources/DataSourceOracle.pyr 4 s
r c @ s e Zd ZdZed�dd�ZdS )� KlibcOracleNetworkConfigSourcez�Override super class to lower the applicability conditions.
If any `/run/net-*.cfg` files exist, then it is applicable. Even if
`/run/initramfs/open-iscsi.interface` does not exist.
��returnc C s
t | j�S )zOverride is_applicable)�bool�_files��selfr r r �
is_applicableB s z,KlibcOracleNetworkConfigSource.is_applicableN)r r r �__doc__r$ r( r r r r r! ; s r! )�network_configr# c C s d| vr dS | d dvr,t �d| d � dS t� }| d dkr�dd� | d D �D ]@}|d d
krPd |v rP|d }|�|�}|s�qPqPt|�rP|d = qPn|| d d k�r| �d
i ��� D ]\\}}d|v r�|�di ��d�}|r�|�|�}|s�q�q�t|�r�|d d= |d= ||d d< q�dS )aP
Search network config physical interfaces to see if any of them are
a netfailover master. If found, we prevent matching by MAC as the other
failover devices have the same MAC but need to be ignored.
Note: we rely on cloudinit.net changes which prevent netfailover devices
from being present in the provided network config. For more details about
netfailover devices, refer to cloudinit.net module.
:param network_config
A v1 or v2 network config dict with the primary NIC, and possibly
secondary nic configured. This dict will be mutated.
r N)� � z+Ignoring unknown network config version: %sr+ c S s g | ]}d |v r|�qS )�typer )�.0�cr r r �
<listcomp>c � z,_ensure_netfailover_safe.<locals>.<listcomp>�configr- �physical� mac_addressr, � ethernets�match�
macaddresszset-name�name)�LOG�debugr �getr �items)r* Z mac_to_nameZcfgZmacZcur_name�_Zmacaddrr r r �_ensure_netfailover_safeG s> �
r> c s� e Zd ZU dZdZejjejjejj ejj
fZ e ejdf e
d< dZdZdZ� fdd �Zedd
�� fd d � Zed
�dd�Zeed
�dd��Zdd� Zed
�dd�Zdd� Zed
�dd�Ze d
�dd�Z e d d � �Z d"ed �d d!�Z � Z!S )#�DataSourceOracleZOracleN.�network_config_sourcesT� � c st t t| �j|g|�R i |�� d | _t�t�|d| jgi �tg�| _ t
� | _ g dd�| _ | �
� }|j| _|j| _d S )NZ
datasourcer+ �r2 r )�superr? �__init__� _vnics_datar Z
mergemanydictZget_cfg_by_path�dsname�BUILTIN_DS_CONFIG�ds_cfgr! �_network_config_source�_network_configZget_url_paramsZmax_wait_seconds� url_max_waitZtimeout_seconds� url_timeout)r' �sys_cfg�args�kwargsZ
url_params�� __class__r r rE � s �� zDataSourceOracle.__init__)�ci_pkl_versionr# c sT t � �|� t| d�s"t| dd � t| d�s:t| dt� � t| d�sPg dd�| _d S )NrF rJ rK r+ rC )rD � _unpickle�hasattr�setattrr! rK )r' rS rQ r r rT � s
�
zDataSourceOracle._unpickler" c C s t | j�dg ��S )Nr2 )r$ rK r; r& r r r �_has_network_config� s z$DataSourceOracle._has_network_configc C s t � S )z@Check platform environment to report if this datasource may run.)�_is_platform_viabler r r r � ds_detect� s zDataSourceOracle.ds_detectc C sh t � | _tjddd�td�dtjddd�itjddd�td�dtjddd�if}| jrvt�� }t j
| j |dd|d�}nt �
� }| �� }| j�d td �}|�, t|p�|| j| jttgd
�}W d � n1 s�0 Y |s�d S t|jd �| _|j }| _|j| _|d
|d d|d |d d�| _ d|v �rd|d �d�}|�rPt � |�| _ |d �d�| j d< dS )Nr, �instance�r �path)�urlZheadersr] r+ T)�distroZ interfaceZipv6Zipv4�connectivity_urls_datar ��fetch_vnics_data�max_wait�timeout�metadata_patternsF�r] Z ociAdName�idr �hostnameZ displayName)zavailability-zonez instance-idz launch-indexzlocal-hostnamer8 �metadata� user_dataZssh_authorized_keys� public_keys) �_read_system_uuid� system_uuid�IPV4_METADATA_PATTERN�format�
V2_HEADERS�IPV6_METADATA_PATTERN�perform_dhcp_setupr
Zfind_fallback_nicr ZEphemeralIPNetworkr^ r � nullcontext�_is_iscsi_rootrI r; rH �read_opc_metadatarL rM � _get_versioned_metadata_base_urlr �metadata_addressr Z_crawled_metadatar rF rh �base64Z b64decodeZ userdata_raw) r' r_ Znic_nameZnetwork_contextZfetch_primary_nicZfetch_secondary_nicsZfetched_metadata�datari r r r � _get_data� s� ����������
���$
� �
�
zDataSourceOracle._get_datac C s t �| j�S )z�quickly check (local only) if self.instance_id is still valid
On Oracle, the dmi-provided system uuid differs from the instance-id
but has the same life-span.)r Z instance_id_matches_system_uuidrl )r' rN r r r �check_instance_id s z"DataSourceOracle.check_instance_idc C s t �| j�d��S )Nrj )r Znormalize_pubkey_datarh r; r& r r r �get_public_ssh_keys s z$DataSourceOracle.get_public_ssh_keysc C s
| j �� S )z)Return whether we are on a iscsi machine.)rJ r( r& r r r rs s z DataSourceOracle._is_iscsi_rootc C s
| j �� S �N)rJ Z
render_configr& r r r �_get_iscsi_config s z"DataSourceOracle._get_iscsi_configc C s� | � � r| jS d}| �� r$| �� | _| � � s:t�d� d}| j�dtd �}|sT|r�z| � |� W n t
y� t � td� Y n0 t
| j� | jS )z�Network config is read from initramfs provided files
Priority for primary network_config selection:
- iscsi
- imds
If none is present, then we fall back to fallback configuration.
FzLCould not obtain network configuration from initramfs. Falling back to IMDS.Tr z+Failed to parse IMDS network configuration!)rW rK rs r} r9 �warningrI r; rH �!_add_network_config_from_opc_imds� Exceptionr Zlogexcr> )r' � set_primaryZ
set_secondaryr r r r* s0
�� �
z DataSourceOracle.network_configF)r� c
C sV | j du rt�d� dS |s8d| j d v r8t�d� dS t� }|rH| j n | j dd� }t|�D �]�\}}|or|dk}|d �� }|�dd �o�|�d
d � }||vr�t�d |� q^|| } |r�t�|d d �}
nt�|d
�}
| j d dk�r�|�r|�rddig} n
ddig} n`g } |�d
��rB| �
d|d
� d|
j � �d�� |�d ��rr| �
d|d d � d|
j � �d�� | d|t | d�} | j d �
| � q^| j d dkr^t d|id�} | | j d | < |�o�|| d< |�o�| | d < |�sBg | d < |�d
��r| d �
|d
� d|
j � �� |�d ��rB| d �
|d d � d|
j � �� | | j d | < q^dS ) a� Generate primary and/or secondary NIC config from IMDS and merge it.
It will mutate the network config to include the secondary VNICs.
:param set_primary: If True set primary interface.
:raises:
Exceptions are not handled within this function. Likely
exceptions are KeyError/IndexError
(if the IMDS returns valid JSON with unexpected contents).
Nz#NIC data is UNSET but should not beZnicIndexr z\VNIC metadata indicates this is a bare metal machine; skipping secondary VNIC configuration.r+ ZmacAddrZipv6SubnetCidrBlockFZ privateIpz)Interface with MAC %s not found; skippingZ
ipv6AddressesZsubnetCidrBlockr r- Zdhcp6ZdhcpZstatic�/)r- �addressr3 )r8 r- r4 �mtu�subnetsr2 r, r7 )r� r6 r5 Zdhcp4� addresses)
rF r9 r~ r � enumerate�lowerr; � ipaddress�
ip_networkrK �append� prefixlen�MTU)
r' r� Zinterfaces_by_macr �indexZ vnic_dictZ
is_primaryr4 Z is_ipv6_onlyr8 �networkr� Zinterface_configr r r r H s�
� � ��
�
��� ���
�� � ��z2DataSourceOracle._add_network_config_from_opc_imds)F)"r r r rG rl r ZNetworkConfigSourceZCMD_LINEZ
SYSTEM_CFGZDSZ INITRAMFSr@ r r rq rL rM rE r rT r$ rW � staticmethodrY ry rz r{ rs �dictr} �propertyr* r �
__classcell__r r rQ r r? { s.
�
V
-r? c @ s e Zd ZdZdS )�DataSourceOracleNetFN)r r r rq r r r r r� � s r� �rv c C s | sdS | � t�d�d �S )NFZopcr )�
startswith�IPV4_METADATA_ROOT�splitr� r r r �_is_ipv4_metadata_url� s r� r" c C s t �d�} | d u rd S | �� S )Nz system-uuid)r �
read_dmi_datar� )Zsys_uuidr r r rk � s
rk c C s t �d�} | tkS )Nzchassis-asset-tag)r r� �CHASSIS_ASSET_TAG)Z asset_tagr r r rX � s
rX )r] r# c C s d| v r dS dS )Nz/opc/v2/r, r+ r re r r r � _url_version� s r� c C s t | �dkrtS d S )Nr, )r� ro re r r r � _headers_cb� s r� c C sL | s| S d| v r"| � d�d d S d| v r<| � d�d d S td| ��dS )zQ
Remove everything following the version number in the metadata address.
Zv2r zv2/Zv1zv1/zInvalid metadata address: N)r� �
ValueErrorre r r r ru � s ru r` )ra rd r# c
s� � fdd�dD �}t �d|� t�� }t|||tddd�\}}|sXt �dd �|�� d
S t �d |� t� |�
d ��}t |�} d
}
| r�t|� d
d�g|t�� | |tddd�\} } | r�t� | �
d ��}
t �d| � n
t �d� t
| ||
|�S )a�
Fetch metadata from the /opc/ routes from the IMDS.
Returns:
Optional[ReadOpcMetadataResponse]: If fetching metadata fails, None.
If fetching metadata succeeds, a namedtuple containing:
- The metadata version as an integer
- The JSON-decoded value of the instance data from the IMDS
- The JSON-decoded value of the vnics data from the IMDS if
`fetch_vnics_data` is True, else None. Alternatively,
None if fetching metadata failed
- The url that was used to fetch the metadata.
This allows for later determining if v1 or v2 endppoint was
used and whether the IMDS was reached via IPv4 or IPv6.
c s$ g | ] }� D ]}|j |d d��q qS )rZ r[ )rn )r. r Zmetadata_pattern�rd r r r0 � s �z%read_opc_metadata.<locals>.<listcomp>)r, r+ z*Attempting to fetch IMDS metadata from: %sg�������?T)�urlsrb rc Z
headers_cbZ
sleep_timeZconnect_synchronouslyz-Failed to fetch IMDS metadata from any of: %sz, Nz7Successfully fetched instance metadata from IMDS at: %szutf-8rZ Zvnicsz4Successfully fetched vnics metadata from IMDS at: %sz+Failed to fetch IMDS network configuration!)r9 r: �time� monotonicr r� r~ �join�json�loads�decoder� �replacer )
ra rb rc rd r� Z
start_timeZurl_that_workedZinstance_responser Zmetadata_versionr Z vnics_urlZvnics_responser r� r rt � s`
� �
�� �
�
�rt c C s t �| t�S r| )r Zlist_from_depends� datasources)Zdependsr r r �get_datasource_listG s r� �__main__z�
Query Oracle Cloud metadata and emit a JSON object with two keys:
`read_opc_metadata` and `_is_platform_viable`. The values of each are
the return values of the corresponding functions defined in
DataSourceOracle.py.r� )rt rX )Ar) rw r� r� Zloggingr� �typingr r r r r r Z cloudinitr r r
r r Z cloudinit.distros.networkingr
Z
cloudinit.netr r r r Zcloudinit.url_helperr Z getLoggerr r9 rH r� r� ZIPV6_METADATA_ROOTrm rp ro r� r ZKlibcNetworkConfigSourcer! r> Z
DataSourcer? r� r r� rk r$ rX r r� r� ru rL rM rt ZDEP_FILESYSTEMZ DEP_NETWORKr� r� � description�printZ
json_dumpsr r r r �<module> sz
� 4 C �� U
���
����