shell bypass 403
a
'�Dg�b � @ s� d dl Z d dlZd dlZd dlZd dlZd dlZd dlmZmZ d dl m
Z
m Z d dl m
Z
mZmZmZ d dlmZ d dlmZ dZdZd Zd
Ze�e�ZG d d � d �Z G d
d� dej �Z ddd�Z ddd�Z dd� Z ddd�Z!d dd�Z"dS ) � N)�List�Optional)�subp�util)�is_ipv6_address�is_ipv6_network�renderer�subnet_is_ipv6)� NetworkState)�available_nm_ifcfg_rhz/etc/NetworkManagerz/usr/lib/NetworkManagerz /etc/sysconfig/network-scriptsz�# This is generated by cloud-init. Do not edit.
#
[.config]
enable=nm-version-min:1.40
[connection.30-cloud-init-ip6-addr-gen-mode]
# Select EUI64 to be used if the profile does not specify it.
ipv6.addr-gen-mode=0
c @ s� e Zd ZdZdd� Zdd� Zdd� Zdd � Zd
d � Zd d
� Z dd� Z
e d�dd�Z dd� Z
dd� Zdd� Zdd� Zdd � Ze d d �d d �Zee d d!�d"d#�Zd$d%� Zd&d'� Zed(d)� �Zd*d+� Zd,d-� Zd S ).� NMConnectionz/Represents a NetworkManager connection profile.c C sR t �d�}t�� | _t| j_d|� �tt �||��dd�| jd< ddi| jd< d S )
z�
Initializes the connection with some very basic properties,
notably the UUID so that the connection can be referred to.
z$a3924cb8-09e0-43e9-890b-77972a800108z cloud-init Z120)�id�uuidzautoconnect-priority�
connectionz%org.freedesktop.NetworkManager.originz
cloud-init�userN)r ZUUID� configparserZ ConfigParser�config�strZ optionxformZuuid5)�self�con_idZ
CI_NM_UUID� r �A/usr/lib/python3.9/site-packages/cloudinit/net/network_manager.py�__init__- s
� �zNMConnection.__init__c C s6 | j �|�si | j |< | j �||�s2|| j | |< dS )z_
Sets a property unless it's already set, ensuring the section
exists.
N�r � has_section�
has_option�r �section�option�valuer r r � _set_defaultE s
zNMConnection._set_defaultc C s | j �|�o| j �||�S )zf
Checks if a config option is set. Returns True if it is,
else returns False.
r �r r r r r r �_config_option_is_setP s �z"NMConnection._config_option_is_setc C s" | � ||�r| j| | S dS dS )z]
Returns the value of a config option if its set,
else returns None.
N�r" r r! r r r �_get_config_optionY s z NMConnection._get_config_optionc C s | � ||�r|| j| |< dS )z�
Overrides the value of a config option if its already set.
Else, if the config option is not set, it does nothing.
Nr# r r r r �_change_set_config_optionc s z&NMConnection._change_set_config_optionc C sR dD ]0}| � |d�dkr dS | � |d�dvr dS qdD ]}| �|dd� q:dS )zt
If for both ipv4 and ipv6, 'may-fail' is set to be False,
set it to True for both of them.
��ipv4�ipv6�may-fail�falseN�method)�dhcp�auto�true)r$ r% )r �familyr r r �$_set_mayfail_true_if_both_false_dhcpk s z1NMConnection._set_mayfail_true_if_both_false_dhcpc C s� ddddddddd�}d}| � |d|� z|r6|| }W n$ ty\ d}d| j| d< Y n0 | j| d dkrtd S | j| d dkr�|dkr�d S |d
v r�| � d dd� || j| d< | � |dd � d S )
z}
Ensures there's appropriate [ipv4]/[ipv6] for given family
appropriate for given configuration type
Zmanualr- r, )ZstaticZstatic6Zdhcp6�
ipv6_slaac�ipv6_dhcpv6-stateless�ipv6_dhcpv6-statefulZdhcp4r, �disabledr+ r. r) N)r3 r2 r1 r' r* )r �KeyErrorr )r r/ Z subnet_typeZ
method_mapr+ r r r �_set_ip_method� s2 � zNMConnection._set_ip_method)�returnc C sL | j �|�si | j |< t�d�D ]&}|� |� �}| j �||�s | S q dS )N� Z not_possible)r r � itertools�countr )r r �
key_prefix�index�keyr r r �_get_next_numbered_section� s
z'NMConnection._get_next_numbered_sectionc C s | � ||�}|| j| |< dS )z�
Adds a numbered property, such as address<n> or route<n>, ensuring
the appropriate value gets used for <n>.
N)r> r )r r r; r r= r r r �
_add_numbered� s zNMConnection._add_numberedc C sN |� d�}| j | �|�}|r2|� d|� d|� �n |� d|� �| j | |< dS )a: Add route options to a given route
Example:
Given:
section: ipv4
route: route0
key: mtu
value: 500
Create line under [ipv4] section:
route0_options=mtu=500
If the line already exists, then append the new key/value pair
Z_options�,�=N)r �get)r r �router= r Z numbered_keyZ
route_optionsr r r �_add_route_options� s
� �z NMConnection._add_route_optionsc C s* |d d t |d � }| �|d|� dS )z5
Adds an ipv[46]address<n> property.
�address�/�prefixN)r r? )r r/ �subnetr r r r � _add_address� s zNMConnection._add_addressc C s d}|d dko|d |v S )N)z::z0.0.0.0rG r �networkr )r rC Z default_netsr r r �_is_default_route� s z NMConnection._is_default_routec C s� t |d �rdnd}|d � d|d � �}d|v rD|d|d � �7 }d|v r~| �|�rl|d � | j| d < n|d|d � �7 }| �|d
�}|| j| |< d |v r�| �||d |d � d S )
z!Adds a ipv[46].route<n> property.rJ r( r' rF rG �gatewayr@ Zmetricz route-metricrC �mtuN)r rK r r> rD )r rC r/ r Z route_keyr r r �
_add_route� s
zNMConnection._add_routeN)�dnsr7 c C s^ t |�r dnd}| j�|�rZ| �|d�dkrZ| �|dd� | j| d | d | j| d< dS ) zF
Extends the ipv[46].dns property with a name server.
r( r' r+ r4 rO � �;N)r r r r$ r )r rO r/ r r r �_add_nameserver s
��z NMConnection._add_nameserver)�
dns_searchr7 c C s^ dD ]T}| j �|�r| �|d�dkr| �|dd� | j | d d�|� d | j | d< qdS )zM
Extends the ipv[46].dns-search property with a name server.
r& r+ r4 z
dns-searchrP rQ N)r r r$ r �join)r rS r/ r r r �_add_dns_search s
�� ���z NMConnection._add_dns_searchc C s | j d d S )z-
Returns the connection UUID
r r )r �r r r r �con_uuid" s zNMConnection.con_uuidc C s | j �dd�S )zN
Can this be serialized into a meaningful connection profile?
r �type)r r rV r r r �valid( s zNMConnection.validc C s | � dd��� S )z)
Sanitize a MAC address.
�-�:)�replace�upper)�addrr r r �mac_addr. s zNMConnection.mac_addrc s� ddddddd�}||d }|du r*dS d |v r8d}nd}|| j d
d< |dur||| j d
d < |�||d �| j d
d
< i | j |< ddddddddddddddd d d d d d!d"d#d$d%d&d'd(d)d*� d+d,d-�d.d/ii i d0�}|d1 }d} g �g � |dk�r|d2 �sd3D ]}
| �|
d� �q|d2 D ]�} t| ��r4d4nd5}
| �|
| d � d6| v �r^| �|
| � d7| v �rz| d7 | j |
d7< | d8 D ]} | �| � �q�d9| v �r���| d9 � d:| v �rĈ �| d: � |
d5k�r"d1| v �r"| d1 } �q"d;|v �r*��fd<d=�|d; d> D �7 �� � fd?d=�|d; d@ D �7 � ��s>|j�r>|j�� �sR|j�rR|j� �D ]}
| � |
� �qV� �rx| �
� � | � � | du �r�|} | |k�s�t �
dA|dB || � || �� D ]n\}}||v�rΐq�|| du �r�q�t|| t��r|| �r�dCndD| j | |< nt|| �| j | |< �q�|dk�r�|dE dFu �rRtdG�| j d dH< | du�rnt| �| j d d1< |dI du�r�| �|dI �| j d dJ< |dk�r�dK|v �r�|�|dK �| j d dL< |dk�r�| du�r�d| j v�r�i | j d< t| �| j d d1< |dk�rf|dM D ]0}|�|�}|�d
d d� |�d
d
| �� � �q|dI du�rf| �|dI �| j d dJ< |dk�r�| du�r�dN| j d dO< t| �| j d d1< |dI du�r�| �|dI �| j d dJ< |dk�s�| j �|dJ��s�|dB | j d
dP< dS )Qz�
Integrate information from network state interface information
into the connection. Most of the work is done here.
�ethernet�vlan�bond�bridge�
infinibandN)Zphysicalra rb rc rd ZloopbackrX z bond-masterr z
slave-typez-masterZmasterz bond-modez bond-miimonzbond-xmit_hash_policyzbond-num_grat_arpzbond-downdelayz bond-updelayzbond-fail_over_maczbond-primary_reselectz bond-primaryzbond-active_slavezbond-ad_actor_sys_priozbond-ad_actor_systemzbond-ad_selectzbond-ad_user_port_keyzbond-all_slaves_activezbond-arp_all_targetszbond-arp_intervalzbond-arp_ip_targetzbond-arp_validatezbond-lacp_ratezbond-lp_intervalzbond-min_linkszbond-num_unsol_nazbond-packets_per_slavezbond-peer_notif_delayzbond-resend_igmpzbond-tlb_dynamic_lbzbond-use_carrier) �modeZmiimonZxmit_hash_policyZ num_grat_arpZ downdelayZupdelayZ
fail_over_macZprimary_reselectZprimaryZ active_slaveZad_actor_sys_prioZad_actor_systemZ ad_selectZad_user_port_keyZall_slaves_activeZarp_all_targetsZ arp_intervalZ
arp_ip_targetZ arp_validateZ lacp_rateZ lp_intervalZ min_linksZ num_unsol_naZpackets_per_slaveZpeer_notif_delayZ resend_igmpZtlb_dynamic_lbZ use_carrierZ
bridge_stpZbridge_bridgeprio)Zstp�priorityr
Zvlan_id)rb rc ra r` rd rM �subnetsr& r( r' rE rL Zroutes�dns_nameserversrS rO c s g | ]}|� vr|�qS r r )�.0rO )�found_nameserversr r �
<listcomp>� s �z1NMConnection.render_interface.<locals>.<listcomp>Z nameserversc s g | ]}|� vr|�qS r r )ri �search)�found_dns_searchr r rk � s �rl zZNetwork config: ignoring %s device-level mtu:%s because ipv4 subnet-level mtu:%s provided.�namer. r* Z wakeonlanT�@ z wake-on-lanZ mac_addressz mac-addresszvlan-raw-device�parentZ bridge_portsZdatagramztransport-modezinterface-name)r �con_refr6 r rI rN �extendrh Zdns_searchdomainsrR rU r0 �LOGZwarning�items�
isinstance�boolr r_ �get_connr rW r )r �iface�
network_stater Z _type_mapZif_typeZ
slave_typeZ _prop_mapZ
device_mtuZipv4_mtur/ rH rC Z
nameserverZnm_propr= �portr )rm rj r �render_interface5 s, �
�
�0���;
�
�
�
�
��
���z NMConnection.render_interfacec C s( t �� }| jj|dd� d}||�� S )z
Stringify.
F)Zspace_around_delimitersz2# Generated by cloud-init. Changes will be lost.
)�io�StringIOr �write�getvalue)r �buf�headerr r r �dump" s zNMConnection.dump)�__name__�
__module__� __qualname__�__doc__r r r" r$ r% r0 r6 r r> r? rD rI rK rN rR r rU rW rY � staticmethodr_ r{ r� r r r r r * s.
=
nr c @ sB e Zd ZdZd dd�Zdd� Zdd� Zd
eee dd �d
d �Z
dS )�Rendererz�Renders network information in a NetworkManager keyfile format.
See https://networkmanager.dev/docs/api/latest/nm-settings-keyfile.html
Nc C s i | _ || _d S �N)� connectionsr )r r r r r r 3 s zRenderer.__init__c C s
| j | S r� )r� �r r r r r rw 7 s zRenderer.get_connc C s || j v r| j | �� S |S d S r� )r� rW r� r r r rq : s
zRenderer.con_ref)ry � templatesr7 c C s� |� � D ](}|�d�p |d }t|d �| j|< q|� � D ].}|�d�pN|d }| j| }|�||| � q:| j�� D ].\}}|�� s�qtt||�}t� ||�
� d� qtt� t |�t d� d S )NZ config_idrn i� )
Ziter_interfacesrB r r� r{ rt rY �nm_conn_filenamer Z
write_filer� �cloud_init_nm_conf_filename�NM_IPV6_ADDR_GEN_CONF) r ry r� �targetrx Zconn_keyZconnr rn r r r �render_network_stateA s
�z Renderer.render_network_state)N)NN) r� r� r� r� r rw rq r
r �dictr� r r r r r� - s
��r� c C s& t �|t�}d| � d�}|� d|� �S )Nz cloud-init-z
.nmconnectionz/system-connections/�r � target_path�
NM_RUN_DIR)r r� �target_con_dir�con_filer r r r� b s r� c C s$ t �|t�}d| � �}|� d|� �S )Nzifcfg-rF )r r� �IFCFG_CFG_FILE)�devnamer� r� r� r r r �sysconfig_conn_filenameh s
r� c C s6 t | �}tj�|�s"t� r"t| �}tj�|�r2|S dS )a�
This function returns the name of the interface config file.
It first checks for presence of network manager connection file.
If absent and ifcfg-rh plugin for network manager is available,
it returns the name of the ifcfg file if it is present. If the
plugin is not present or the plugin is present but ifcfg file is
not, it returns None.
This function is called from NetworkManagerActivator class in
activators.py.
N)r� �os�path�isfiler r� )r� Z conn_filer r r �
conn_filenamen s r� c C s t �| t�}d}|� d|� �S )Nz$30-cloud-init-ip6-addr-gen-mode.confz/conf.d/r� )r� r� Z conf_filer r r r� � s r� c C s\ ddl m} tjd| d�}d}|� rPzt�g d�� W n tjyN d}Y n0 t|�oZ|S )Nr )� uses_systemdZnmcli)r� T)Z systemctlz
is-enabledzNetworkManager.serviceF)Zcloudinit.distrosr� r �whichZProcessExecutionErrorrv )r� r� Z
nmcli_presentZservice_activer r r � available� s
r� )N)N)N)N)#r r| r9 Zloggingr� r �typingr r Z cloudinitr r Z
cloudinit.netr r r r Zcloudinit.net.network_stater
Zcloudinit.net.sysconfigr r� Z
NM_LIB_DIRr� r� Z getLoggerr� rs r r� r� r� r� r� r� r r r r �<module> s4
5