shell bypass 403
a
'�Dg�: � @ s. d dl Z d dlZd dlZd dlZd dlZd dlmZ d dlZd dlm Z d dl
m Z d dl m
Z
d dlmZmZmZmZmZ d dlmZmZ d dlmZ d d lmZmZ d d
l m Z d d l m Z e� e!�Z"d d
gZ#dZ$dZ%dZ&G dd� dej'j(�Z)dd� Z*dd� Z+G dd� dej,�Z-e-ej.ffgZ/dd� Z0dS )� N)�urlparse)�ConnectionError)�HTTPConnection)� PoolManager)�dmi� performance�sources�
url_helper�util)�
EventScope� EventType)�NoDHCPLeaseError)�EphemeralDHCPv4�EphemeralIPv6Network)�DataSourceHostname)�ProcessExecutionErrorzhttp://169.254.42.42zhttp://[fd00:42::42]� � �
c s* e Zd ZdZ� fdd�Zddd�Z� ZS )�SourceAddressAdapterzF
Adapter for requests to choose the local address to bind to.
c s || _ tt| �jf i |�� d S �N)�source_address�superr �__init__)�selfr �kwargs�� __class__� �H/usr/lib/python3.9/site-packages/cloudinit/sources/DataSourceScaleway.pyr + s z SourceAddressAdapter.__init__Fc C s0 t jtjtjdfg }t|||| j|d�| _d S )N� )Z num_pools�maxsize�blockr �socket_options)r Zdefault_socket_options�socketZ
SOL_SOCKETZ SO_REUSEPORTr r Z poolmanager)r Z connectionsr! r" r# r r r �init_poolmanager/ s ��z%SourceAddressAdapter.init_poolmanager)F)�__name__�
__module__� __qualname__�__doc__r r% �
__classcell__r r r r r & s r c
C sn z(t j| d|d|dd� d�}t�|j�W S t jyh } z&|jdkrRW Y d}~dS � W Y d}~n
d}~0 0 dS )aQ
Retrieve user data or vendor data.
Scaleway user/vendor data API returns HTTP/404 if user/vendor data is not
set.
This function calls `url_helper.readurl` but instead of considering
HTTP/404 as an error that requires a retry, it considers it as empty
user/vendor data.
Also, be aware the user data/vendor API requires the source port to be
below 1024 to ensure the client is root (since non-root users can't bind
ports below 1024). If requests raises ConnectionError (EADDRINUSE), the
caller should retry to call this function on an other port.
Nr c S s |j dkot|jtjj� S )N� )�code�
isinstance�cause�requests�
exceptionsr )�_�excr r r �<lambda>W s
z%query_data_api_once.<locals>.<lambda>)�data�timeout�retriesZsessionZ exception_cbr+ )r �readurlr
�
decode_binary�contents�UrlErrorr, )� api_addressr5 �requests_session�respr2 r r r �query_data_api_once< s �
r> c
C s, t dt|d��D �]}z�t�d| |� t�� }d}zRt|�j}|}|d dkrZ|dd� }tj |dtj
d �d d } | tj kr�d
}W n t y� Y n0 |�
d t||fd �� t|||d
�}
t�d| � |
W S tj�y } z4t�d| | � t�d� | } W Y d} ~ qW Y d} ~ qd} ~ 0 0 q| �dS )a/ Get user or vendor data.
Handle the retrying logic in case the source port is used.
Scaleway metadata service requires the source port of the client to
be a privileged port (<1024). This is done to ensure that only a
privileged user on the system can access the metadata service.
r r z*Trying to get %s data (bind on port %d)...z0.0.0.0r �[���N)�protoz0::zhttp://)r )r5 r< z%s-data downloadedz%Error while trying to get %s data: %s� )�range�max�LOG�debugr/ ZSessionr �netlocr$ Z getaddrinfoZ IPPROTO_TCPZAF_INET6�
ValueErrorZmountr r> r r: �warning�time�sleep)
Zapi_typer; r6 r5 �portr< Z localhostZ url_address�addressZ
addr_protor4 r2 �last_excr r r �query_data_apid sL �
���
��
$rO c s� e Zd ZdZejejejej hiZ
� fdd�Z e dd�� fdd� Z
dd � Zd
d � Zed d
� �Zdd� Zedd� �Zedd� �Zdd� Zdd� Zd dd�Zedd � �Zed d � �Z� ZS ) �DataSourceScaleway�Scalewayc s� t t| ��|||� t�t�|ddgi �g�| _t| j�dt ��| _
t| j�dt ��| _ t| j�dt
��| _tj| _t| _d | _d | _d | _d | _d| _d| j�� v r�| j| jd 7 _d S )NZ
datasourcerQ r6 r5 �max_waitT�
metadata_urls)r rP r r
Z
mergemanydictZget_cfg_by_pathZds_cfg�int�get�DEF_MD_RETRIESr6 �DEF_MD_TIMEOUTr5 �DEF_MD_MAX_WAITrR r �UNSET�_network_config� DS_BASE_URLSrS � metadata_url� userdata_url�vendordata_url�ephemeral_fixed_address�has_ipv4�keys)r Zsys_cfg�distro�pathsr r r r � s" ��zDataSourceScaleway.__init__N)�ci_pkl_version�returnc sF t � �|� d dttd d d�}|D ] }t| |�s"t| ||| � q"d S )NT)r_ r` rR rS r] r^ )r � _unpicklerX r[ �hasattr�setattr)r rd Z
attr_defaults�attrr r r rf � s �
z DataSourceScaleway._unpicklec C s| t �� }tj|| j| jdd�\}}|rZt�d|� |� d�| _|� d�| _ |� d�| _
dS t�d|t t �� | �� t �dS ) zO
Define metadata_url based upon api-metadata URL availability.
F)�urlsrR r5 Zconnect_synchronouslyz%s is reachablez/conf?format=jsonz/user_data/cloud-initz/vendor_data/cloud-initNz3Unable to reach api-metadata at %s after %s seconds)
rJ � monotonicr Z wait_for_urlrR r5 rE rF r\ r] r^ rT r )r rj Z
start_timeZ avail_urlr1 r r r �_set_metadata_url� s& �
�z$DataSourceScaleway._set_metadata_urlc C sZ t j| j| j| jd�}t�t�|j ��| _
t d| j | j| j�| _
t d| j| j| j�| _d S )N)r5 r6 z user-dataz vendor-data)r r7 r\ r5 r6 �json�loadsr
r8 r9 �metadatarO r] Z userdata_rawr^ Zvendordata_raw)r r= r r r �_crawl_metadata� s ���z"DataSourceScaleway._crawl_metadatac C s> t �d�} | dkrdS tj�d�r&dS t�� }d|v r:dS dS )a
There are three ways to detect if you are on Scaleway:
* check DMI data: not yet implemented by Scaleway, but the check is
made to be future-proof.
* the initrd created the file /var/run/scaleway.
* "scaleway" is in the kernel cmdline.
zsystem-manufacturerrQ Tz/var/run/scalewayZscalewayN)r Z
read_dmi_data�os�path�existsr
Z get_cmdline)Z vendor_nameZcmdliner r r � ds_detect� s
z DataSourceScaleway.ds_detectc
C sr | j r�z�t| j| jj��b}t�d�� | �| j� W d � n1 sF0 Y | �� |d | _ d| j
d< W d � n1 s�0 Y W n@ t t t
fy� } z"t�tt|�� d| _ W Y d }~n
d }~0 0 | j �snz�t| j| jj��Z t�d�� | �| j� W d � n1 �s0 Y | �� d| j
d< W d � n1 �sJ0 Y W n t �yl Y dS 0 dS ) Nz7Setting api-metadata URL depending on IPv4 availabilityz
fixed-address�ipv4Z
net_in_useFz7Setting api-metadata URL depending on IPv6 availability�ipv6T)r` r rb �fallback_interfacer ZTimedrl rS rp r_ ro r
r r r
ZlogexcrE �strr )r ru �er r r � _get_data sH ��*
,� ��,.z DataSourceScaleway._get_datac C s� | j du r t�dtj� tj| _ | j tjkr2| j S | jd du �rVi }i }| jd D ]�}|d | jkr�d|d< ddd d
�}d |�� v r�|d |g7 < n
|g|d < qTd |�� v r�|d |d � d
|d � �f7 < n |d � d
|d � �f|d < |d dkrT|d dd�}d |�� v �r0|d |g7 < qT|g|d < qT||| jj < d|d�| _ n�dd| jj d�}ddig}| jd �r�|dd| jd d d| jd d d d d| jd d d �gd �g7 }||d < d!|gd"�| _ t�
d#| j � | j S )$z`
Configure networking according to data received from the
metadata API.
Nz5Found None as cached _network_config. Resetting to %sZ
private_ipZ
public_ipsrM TZdhcp4z169.254.42.42/32z
62.210.0.1)zon-link�to�via�routes� addresses�/�netmaskZfamilyZinet6�gatewayz::/0)r| r{ r )�versionZ ethernetsZphysicalz%s)�type�namer� rv Zstaticz::�0)�network�prefixr� )r� rM r� r} �subnetsr )r� Zconfigznetwork_config : %s) rZ rE rI r rY ro r_ ra rb rw rF )r ZnetcfgZip_cfg�ipZrouter� r r r �network_config4 sp
� � �
�
�
�����z!DataSourceScaleway.network_configc C s d S r r �r r r r � launch_index� s z DataSourceScaleway.launch_indexc C s
| j d S )N�id)ro r� r r r �get_instance_id� s z"DataSourceScaleway.get_instance_idc C s^ dd� | j d D �}d}t|�}| j �dg �D ]*}|�|�s>q.|�||d � �dd�� q.|S )Nc S s g | ] }|d �qS )�keyr )�.0r� r r r �
<listcomp>� � z:DataSourceScaleway.get_public_ssh_keys.<locals>.<listcomp>Zssh_public_keyszAUTHORIZED_KEY=�tagsr1 � )ro �lenrU �
startswith�append�replace)r Zssh_keysZakeypre�plen�tagr r r �get_public_ssh_keys� s
z&DataSourceScaleway.get_public_ssh_keysFc C s t | jd d�S )N�hostnameF)r ro )r ZfqdnZ
resolve_ipZ
metadata_onlyr r r � get_hostname� s z DataSourceScaleway.get_hostnamec C s d S r r r� r r r �availability_zone� s z$DataSourceScaleway.availability_zonec C s d S r r r� r r r �region� s zDataSourceScaleway.region)FFF) r& r' r( Zdsnamer ZNETWORKr ZBOOT_NEW_INSTANCEZBOOTZ BOOT_LEGACYZdefault_update_eventsr rT rf rl rp � staticmethodrt rz �propertyr� r� r� r� r� r� r� r* r r r r rP � s2 ��
2
O
rP c C s t �| t�S r )r Zlist_from_depends� datasources)Zdependsr r r �get_datasource_list� s r� )1rm Zloggingrq r$ rJ � urllib.parser r/ Zrequests.exceptionsr Zurllib3.connectionr Zurllib3.poolmanagerr Z cloudinitr r r r r
Zcloudinit.eventr r Zcloudinit.net.dhcpr
Zcloudinit.net.ephemeralr r Zcloudinit.sourcesr Zcloudinit.subpr Z getLoggerr& rE r[ rV rX rW ZadaptersZ HTTPAdapterr r> rO Z
DataSourcerP ZDEP_FILESYSTEMr� r� r r r r �<module> s:
(4
�