shell bypass 403
a
'�Dg� � @ sV U d dl Z d dlZd dlZd dlZd dlmZ d dlmZmZ d dl m
Z
d dl m Z m
Z
d dlmZ d dlmZ d dlmZmZmZmZ d d lmZmZ ee ed
< z d d l m Z d d l m Z W n e!y� eZ e�"d
�Z Y n0 e�#e$�Z%G dd� de�Z&G dd� de�Z'G dd� de
j(�Z)d!dd�Z*d"dd�Z+e,ee, d�dd�Z-d#d d �Z.dS )$� N)�EACCES)�Optional�Type)�handlers)�b64d�
json_dumps)�Paths)�
PER_ALWAYS)�MISSING_JINJA_PREFIX�JinjaSyntaxParsingException�detect_template�
render_string)� load_json�load_text_file�JUndefinedError)�UndefinedError)� operator_rez[-.]c @ s e Zd ZdS )�JinjaLoadErrorN��__name__�
__module__� __qualname__� r r �E/usr/lib/python3.9/site-packages/cloudinit/handlers/jinja_template.pyr " s r c @ s e Zd ZdS )�
NotJinjaErrorNr r r r r r & s r c @ s( e Zd ZdgZed�dd�Zdd� ZdS )�JinjaTemplatePartHandlerz## template: jinja)�pathsc K sL t jj| tdd� || _i | _|�dg �D ] }|�� D ]}|| j|< q6q*d S )N� )�version� sub_handlers)r �Handler�__init__r r r �getZ
list_types)�selfr �_kwargsZhandler�ctyper r r r! . s z!JinjaTemplatePartHandler.__init__c
C s� |t jv rd S | j�d�}zt|||�}W n8 tyb } z t�d|t| �� W Y d } ~ d S d } ~ 0 0 |sld S t � |�}
| j
� |
�} | s�t�d||
� d S | j dkr�| �
||||||� n | j dkr�| �
|||||� d S )NZinstance_data_sensitivez=Ignoring jinja template for %s. Failed to render template. %szPIgnoring jinja template for %s. Could not find supported sub-handler for type %sr � )r ZCONTENT_SIGNALSr Z get_runpath� render_jinja_payload_from_filer �LOG�warning�strZtype_from_starts_withr r" Zhandler_version� handle_part) r# �datar% �filename�payloadZ frequencyZheadersZjinja_json_file�rendered_payload�eZsubtypeZ sub_handlerr r r r+ 6 sB
��
�
�
�z$JinjaTemplatePartHandler.handle_partN)r r r �prefixesr r! r+ r r r r r * s r Fc
C s� t | �d dkrtd��i }d}tj�|�s8td| ��ztt|��}W nR ty� } z:d}t |t
t f�r||j t
kr|d| }t|�|�W Y d}~n
d}~0 0 t| |||�}|s�dS |S )aK Render a jinja template sourcing variables from jinja_vars_path.
@param payload: String of jinja template content. Should begin with
## template: jinja\n.
@param payload_fn: String representing the filename from which the payload
was read used in error reporting. Generally in part-handling this is
'part-##'.
@param instance_data_file: A path to a json file containing variables that
will be used as jinja template variables.
@return: A string of jinja-rendered content with the jinja header removed.
Returns None on error.
r Zjinjaz Payload is not a jinja templateNzFCannot render jinja template vars. Instance data not yet present at %sz"Loading Jinja instance data failedzGCannot render jinja template vars. No read permission on '%s'. Try sudo)r r �os�path�existsr r r � Exception�
isinstance�IOError�OSError�errnor �render_jinja_payload)r. �
payload_fnZinstance_data_file�debug�
instance_datar/ r0 �msgr r r r' ] s6 ��
�� �r' c
C s� t ||�dg �dd�}|r*t�dt|�� zt| |�}W n< ttfyt } z t�d|t |�� W Y d }~d S d }~0 0 dd� t
� dt |�D �}|r�t�d |d
�
|�� |S ) Nzbase64-encoded-keysT)� decode_paths�include_key_aliasesz Converted jinja variables
%sz"Ignoring jinja template for %s: %sc S s g | ]}d |� td� �qS )z'%s'� )�replacer
)�.0�varr r r �
<listcomp>� s �z(render_jinja_payload.<locals>.<listcomp>z%s[^\s]+z:Could not render jinja template variables in file '%s': %sz, )�convert_jinja_instance_datar" r( r< r r
� TypeErrorr r) r* �re�findallr
�join)r. r; r= r< Zinstance_jinja_varsr/ r0 �warningsr r r r: � s4
�����r: )� orig_name�returnc C s t �td| �}|| kr|S dS )a� Return a jinja variable alias, replacing any operators with underscores.
Provide underscore-delimited key aliases to simplify dot-notation
attribute references for keys which contain operators "." or "-".
This provides for simpler short-hand jinja attribute notation
allowing one to avoid quoting keys which contain operators.
{{ ds.v1_0.config.user_network_config }} instead of
{{ ds['v1.0'].config["user.network-config"] }}.
:param orig_name: String representing a jinja variable name to scrub/alias.
:return: A string with any jinja operators replaced if needed. Otherwise,
none if no alias required.
�_N)rH �subr )rL �
alias_namer r r �get_jinja_variable_alias� s rQ rA �/r c C s� i }dd� |D �}t | �� �D ]�\}}|r8d�|||�n|}||v rLt|�}t|t�r�t|||||d�||< t�d|�r�|| �� D ]\} }
t �
|
�|| < q�n|||< |r t |�} | r t �
|| �|| < q |S )z�Process instance-data.json dict for use in jinja templates.
Replace hyphens with underscores for jinja templates and decode any
base64_encoded_keys.
c S s g | ]}|� d d��qS )�-rN )rB )rC r3 r r r rE � � z/convert_jinja_instance_data.<locals>.<listcomp>z {0}{1}{2})�sepr? r@ zv\d+$) �sorted�items�formatr r6 �dictrF rH �match�copy�deepcopyrQ ) r, �prefixrU r? r@ �result�key�valueZkey_pathZsubkeyZsubvaluerP r r r rF � s.
�
rF )F)F)rA rR r F)/r[ Zloggingr2 rH r9 r �typingr r Z cloudinitr Zcloudinit.atomic_helperr r Zcloudinit.helpersr Zcloudinit.settingsr Zcloudinit.templaterr
r r r
Zcloudinit.utilr r r5 �__annotations__Zjinja2.exceptionsr r Z jinja2.lexerr � ImportError�compileZ getLoggerr r( r r r r r' r: r* rQ rF r r r r �<module> s8
4 �
-
�