관리-도구
편집 파일: beiboot.cpython-39.opt-1.pyc
a ��g�X � @ sj d dl Z d dlZd dlZd dlZd dlZd dlZd dlZd dlZd dl Z d dl Z d dl m Z d dl mZmZmZmZmZ d dlmZ d dlmZ d dlmZ d dlmZ d dlm Z m Z d d l m Z d d l m!Z! d d l"m#Z#m$Z$ d d l%m&Z& d d l'm(Z(m)Z)m*Z* d dl+m,Z, d dl-m.Z.m/Z/ d dl0m1Z1m2Z2 d dl3m4Z4 e�5d�Z6e d�dd�Z7ee8 d�dd�Z9G dd� de)�Z:ddd d �ej;�Z;G d d � d e2�Z<G d d!� d!ej=�Z>e8e?ee8 ee8 f d"�d#d$�Z@ee8 e8e e8e?ee8 ee8 f d%�d&d'�ZAee8 ee8 e?ee8 ee8 f d(�d)d*�ZBG d+d,� d,e,�ZCG d-d.� d.e1�ZDdd�d/d0�ZEdd�d1d2�ZFeGd3k�rfeF� dS )4� N)�Path)�Dict�Iterable�Literal�Optional�Sequence)� polyfills)�ferny)� bootloader)�BridgeBeibootHelper)�parse_os_release� setup_logging)�ChannelRoutingRule)�PackagesChannel)� JsonObject�get_str)�supported_oses)�Packages�PackagesLoader�patch_libexecdir)�Peer)�CockpitProblem�CockpitProtocolError)�Router� RoutingRule)�StdioTransportzcockpit.beiboot��returnc C s� t j�tj�d } | �� }tj�d�}|du r:tj � d�}tj |dd� t |d�}t �d|� z:|�� |krzt �d � t�|�� jd @ s�t �d � t�W n4 ttfy� t �d � |�|� |�d � Y n0 |S )z�Create askpass executable We need this for the flatpak: ssh and thus the askpass program run on the host (via flatpak-spawn), not the flatpak. Thus we cannot use the shipped cockpit-askpass program. zinteraction_client.pyZXDG_CACHE_HOMENz~/.cacheT)�exist_okzcockpit-client-askpasszChecking if %s exists...z. ... it exists but is not the same version...�@ z; ... it has the correct contents, but is not executable...z ... writing contents.i� )� importlibZ resources�filesr �__name__� read_bytes�os�environ�get�path� expanduser�makedirsr �logger�debug� ValueError�stat�st_mode�FileNotFoundError� write_bytes�chmod)Zsrc_pathZsrc_dataZxdg_cache_homeZ dest_path� r2 �3/usr/lib/python3.9/site-packages/cockpit/beiboot.py�ensure_ferny_askpass1 s( r4 c c s< t �� D ].} | jD ]"}|jdv rt|jt�r|jV qqd S )N)� path-exists�path-not-exists)r Zload_manifestsZ conditions�name� isinstance�value�str)Zmanifest� conditionr2 r2 r3 �get_interesting_filesS s r< c @ sF e Zd ZU eeef ed< eeed�dd�Zeeef d�dd�Z dS ) �ProxyPackagesLoader� file_status)r; r9 r c C s. |dkr| j | S |dkr&| j | S t�d S )Nr5 r6 )r> �KeyError)�selfr; r9 r2 r2 r3 �check_condition] s z#ProxyPackagesLoader.check_condition�r> c C s || _ d S �NrB )r@ r> r2 r2 r3 �__init__h s z ProxyPackagesLoader.__init__N) r" � __module__� __qualname__r r: �bool�__annotations__�objectrA rD r2 r2 r2 r3 r= Z s r= z� import os def report_exists(files): command('cockpit.report-exists', {name: os.path.exists(name) for name in files}) z� import os def check_os_release(_argv): try: with open('/etc/os-release') as f: command('cockpit.check-os-release', f.read()) except OSError: command('cockpit.check-os-release', "") z� import os def force_exec(argv): try: os.execvp(argv[0], argv) except OSError as e: command('cockpit.fail-no-cockpit', str(e)) )� report_exists�check_os_release� force_execc sJ e Zd ZU ded< ed�� fdd� Zedd�dd�Zd d �d d �Z� Z S ) �DefaultRoutingRulez Peer | None�peer)�routerc s t � �|� d S rC )�superrD )r@ rO �� __class__r2 r3 rD � s zDefaultRoutingRule.__init__)�optionsr c C s | j S rC )rN )r@ rS r2 r2 r3 � apply_rule� s z DefaultRoutingRule.apply_ruleNr c C s | j d ur| j �� d S rC )rN �close�r@ r2 r2 r3 �shutdown� s zDefaultRoutingRule.shutdown) r" rE rF rH r rD r rT rW � __classcell__r2 r2 rQ r3 rM � s rM c @ s` e Zd ZU dZeed< eee d�dd�Zeeeee d�dd�Z ee e e ed d �d d �Z d S ) �AuthorizeResponder)z ferny.askpass�cockpit.report-exists�cockpit.fail-no-cockpit�cockpit.check-os-releaserO )rO �basic_passwordc C s || _ || _|d u| _d S rC )rO r] �have_basic_password)r@ rO r] r2 r2 r3 rD � s zAuthorizeResponder.__init__)�messages�prompt�hintr c � sv t �d|||� | jrHd|�� v rH| jd urHt �d|� | j}d | _|S |dkrTd S t�d|�}t�d|�}i }|r�|r�|�d�}|dkr�t �d |� d S |� d |�d�� d �|d < |�d�|d< t� � � dt � � � �} d| � �} | d t � |� � ��� } | jj| fd |||dd�|��I d H } | �| ��sBtd| � d| � ���| �| ��� } t �| � � ��� } t �dt| �� | S )Nz3AuthorizeResponder: prompt %r, messages %r, hint %rz password:z=AuthorizeResponder: sending Basic auth password for prompt %rZnonez$\n(\w+) key fingerprint is ([^.]+)\.z authenticity of host '([^ ]+) � z 127.0.0.1z,auto-accepting fingerprint for 127.0.0.1: %sZyes� z login-datazhost-key� �default�-zX-Conversation F)�timeoutr_ r` ra Zechoz AuthorizeResponder: response z does not match challenge z Returning a %d chars response)r* r+ r^ �lowerr] �re�search�groupr$ �getpid�time�base64Z b64encode�encode�decoderO Zrequest_authorization� startswithr � removeprefix�strip� b64decode�len)r@ r_ r` ra ZreplyZfp_matchZ host_match�args�hostnameZ challenge_idZchallenge_prefix� challenge�responseZb64r2 r2 r3 � do_askpass� sN �� �z AuthorizeResponder.do_askpassN)�commandrv �fds�stderrr c � s� t �d|||� |dkrJ|\}tt|�d�| j_| jj�dt| jt g�� |dkrbt d|d d��|dk�r�t |d �� t �d � � t �d t � t D ]0}t � fd d �|�� D ��r�t �d |� d S q�t �d� � z8td�� }t |�� �}W d � n1 s�0 Y W n4 t�y> } zt �d| � W Y d } ~ d S d } ~ 0 0 � �d�|�d�k�r|� �d�|�d�k�r|t �d|� d S � �d� �dd��� d� �dd�� �} t d| d��d S )NzGot ferny command %s %s %srZ )�loaderr r[ z no-cockpit)�messager\ z'cockpit.check-os-release: remote OS: %rz,cockpit.check-os-release: supported OSes: %rc 3 s | ]\}}� � |�|kV qd S rC )r& )�.0�k�v�Z remote_osr2 r3 � <genexpr>� � z7AuthorizeResponder.do_custom_command.<locals>.<genexpr>z8cockpit.check-os-release: remote matches supported OS %rz$cockpit.check-os-release: remote: %rz/etc/os-releasezIfailed to read local /etc/os-release, skipping OS compatibility check: %sZIDZ VERSION_IDz7cockpit.check-os-release: remote OS matches local OS %r�NAME�?rc � )� unsupported)r* r+ r r= rO �packagesZ routing_rules�insertr r r r r �all�items�open�read�OSErrorZwarningr& ) r@ r{ rv r| r} r> Zosinfo�fZthis_os�er� r2 r� r3 �do_custom_command� s6 . , &z$AuthorizeResponder.do_custom_command)r" rE rF Zcommandsr rH r r: rD rz �tuple�list�intr� r2 r2 r2 r3 rY � s DrY )�commentr c C s ddd| � �fdfS )NZpython3z-icz# r2 r2 )r� r2 r2 r3 �python_interpreter s r� )�cmd�dest� ssh_askpass�ssh_optsr c G s~ |� d�\}}}|�� rN|�d�sN|�d�rB|�d�rB|dd� }d||g}n|g}dg|�|�t�| ��R d|��d d ffS ) N�:�[�]rb ���z-pZsshz SSH_ASKPASS=z DISPLAY=xzSSH_ASKPASS_REQUIRE=force)� rpartition�isdigit�endswithrq �shlex�join)r� r� r� r� �host�_�port� destinationr2 r2 r3 �via_ssh s& ������r� �r� �envr c C s ddgdd� |D ��| �R dfS )Nz flatpak-spawnz--hostc s s | ]}d |� �V qdS )z--env=Nr2 )r� Zkvr2 r2 r3 r� ' r� z flatpak_spawn.<locals>.<genexpr>r2 r2 )r� r� r2 r2 r3 � flatpak_spawn$ s � ���r� c s� e Zd ZU ded< eeejd�� fdd� Zdd�dd �Z dd�d d �Z dd�d d �Z e e e e dd�dd�Z dd�dd�Zedd�dd�Z� ZS )�SshPeerzMLiteral["always"] | Literal["never"] | Literal["supported"] | Literal["auto"]�mode)rO r� rv c s@ || _ |j| _t�� | _t| jj�d | _d | _t � � |� d S )Nzuser-known-hosts) r� � remote_bridge�tempfileZTemporaryDirectoryZtmpdirr r7 �known_hosts_filer] rP rD )r@ rO r� rv rQ r2 r3 rD 0 s zSshPeer.__init__Nr c � s. t j�d�r | �� I d H n| �� I d H d S )Nz/.flatpak-info)r$ r' �exists�connect_from_flatpak�connect_from_bastion_hostrV r2 r2 r3 �do_connect_transport8 s z SshPeer.do_connect_transportc � sN t d�\}}| jdkr*t|| jt� �\}}t||�\}}| �||�I d H d S )N�cockpit-bridgeZ localhost)r� r� r� r4 r� �boot)r@ r� r� r2 r2 r3 r� ? s z SshPeer.connect_from_flatpakc � sJ d }ddg}| j �d�I d H }t|d�}|�d�r�t�|dd � ��� }|�d�\}}}|�d�\}}| _|r�t � d |� |d |g7 }| jd u r�|dd g7 }t d �\} } t d �} t | �} | �� s�t �d| � t�d�} | d ur�|dd| � �g7 }|d u�r| j�|� |dd| j��g7 }t| | j| g|�R � \} } | �| | �I d H d S )Nz-ozNumberOfPasswordPrompts=1�*ry zBasic � � r� z,got username %s and password from Basic authz-lzPasswordAuthentication=nor� z ${libexecdir}/cockpit-askpassz+Could not find cockpit-askpass helper at %rZ COCKPIT_SSH_KNOWN_HOSTS_FILEzGlobalKnownHostsFile=zUserKnownHostsfile=)rO Z request_authorization_objectr rq rn rt rp � partitionr] r* r+ r� r r r� �errorr$ �getenvr� � write_textr� r� r� )r@ � known_hostsrv Zauthry ZdecodedZ user_passwordr� �userr� r� Zaskpassr� Zenv_known_hostsr2 r2 r3 r� L s4 z!SshPeer.connect_from_bastion_hostr� c � s� t | �}t�t| j| j�|g�}t�d||� | j|||dd�I d H }| j dkr`ddgffg}n@| j dkrzddgffg}n&| j d kr�ddgffd g ffg}ng }t j g |�d t t � �gf�|j�td �}|�|�� � |�� I d H d S ) Nz Launching command: cmd=%s env=%sT)r} Zstart_new_session�autoZtry_execr� �alwaysrL � supportedrK rJ )Zgadgets)r r ZInteractionAgentrY rO r] r* r+ Zspawnr� r Zmake_bootloaderr� r< Zsteps�BEIBOOT_GADGETS�writero � communicate)r@ r� r� Zbeiboot_helperZagentZ transportZexec_cockpit_bridge_stepsZstage1r2 r2 r3 r� u s, ����z SshPeer.bootc C s d | _ d S rC )r] rV r2 r2 r3 �do_superuser_init_done� s z SshPeer.do_superuser_init_done)r r c C s| t �d|| jd u� t|d��d�r^t|d�}| jd ur^t �d� | jd|| jd� d | _d S t �d� | jd|d d � d S ) Nz*SshPeer.do_authorize: %r; have password %srx zplain1:�cookiez-SshPeer.do_authorize: responded with password� authorize)r{ r� ry z0SshPeer.do_authorize: authentication-unavailablezauthentication-unavailable)r{ r� �problem)r* r+ r] r rq � write_control)r@ r r� r2 r2 r3 � do_authorize� s zSshPeer.do_authorize)r" rE rF rH r r: �argparse� NamespacerD r� r� r� r r� r� r r� rX r2 r2 rQ r3 r� - s ) r� c s\ e Zd ZU dZee ed< eed< ej d�� fdd� Z dd� Z d d � Z dd �d d �Z � ZS )� SshBridgeNr� �ssh_peer)rv c s2 t | �}t� �|g� t| |j|�| _| j|_d S rC )rM rP rD r� r� r� rN )r@ rv ZrulerQ r2 r3 rD � s zSshBridge.__init__c C s d S rC r2 rV r2 r2 r3 � do_send_init� s zSshBridge.do_send_initc C s t �d|� | j�|� d S )NzSshBridge.do_init: %r)r* r+ r� r� )r@ r r2 r2 r3 �do_init� s zSshBridge.do_initr c C s | j �| j� d S rC )r� Zadd_done_callbackrU rV r2 r2 r3 � setup_session� s zSshBridge.setup_session)r" rE rF r� r r rH r� r� r� rD r� r� r� rX r2 r2 rQ r3 r� � s r� c � sV t �d� t| �}tt�� |� z�t|j�� I d H �}|jj � � r`|j dddd|jj � � id� |� di �}t|t�s�|j dd d d � W d S d |d < |jr�t�|jj�|d< |� |� |j�� W �nR tj�y� } z�tj�t|��}t �d||� t|tj��r d}nRt|tj��r d}n>t|tj��r2d}n*t|t��rDd}nt|tj��rXd}nd}|jj � � �r�|j d|t|�|jj � � d� n|j d|t|�d � W Y d }~d S d }~0 t �y� } z*t �d|� |j |j dd� W Y d }~d S d }~0 tj �y t �d� Y d S 0 t �d� |� � z|� � I d H W n t!�yP Y n0 d S )NzHi. How are you today?r� z x-login-datarf z known-hosts)r{ rx r� Z login_data� capabilities�initzprotocol-errorzcapabilities must be a dict)r{ r� r Tzexplicit-superuserr� z.ferny.InteractionError: %s, interpreted as: %rzauthentication-failedzinvalid-hostkeyzunknown-hostkeyz unknown-hostzinternal-error)r{ r� r r� zCockpitProblem: %s)r{ z"Peer bridge got cancelled, exitingz/Startup done. Looping until connection closes.)"r* r+ r� r �asyncioZget_running_loop�dictr� �startr� r� r� � read_text� setdefaultr8 r� �fromkeysZ thaw_endpointr ZInteractionErrorZ ssh_errorsZ get_exception_for_ssh_stderrr: ZSshAuthenticationErrorZSshChangedHostKeyErrorZSshHostKeyErrorr� ZSshErrorr �attrsZCancelledErrorr� r� �BrokenPipeError)rv Zbridger r� �excr� r� r2 r2 r3 �run� sj �� � r� c C sr t �� tjdd�} | jdg d�ddd� | jdd d � | jd d d � | �� }t|jd� tj t |�|jd� d S )Nz@cockpit-bridge is run automatically inside of a Cockpit session.)� descriptionz--remote-bridge)r� �neverr� r� r� z�How to run cockpit-bridge from the remote host: auto: if installed (default), never: always copy the local one; supported: if not installed, copy local one for compatible OSes, fail otherwise; always: fail if not installed)�choicesre �helpz--debug� store_true)�actionr� z5Name of the remote host to connect to, or 'localhost')r� )r+ ) r �installr� �ArgumentParser� add_argument� parse_argsr r+ r� r� )�parserrv r2 r2 r3 �main s � r� �__main__)Hr� r� rn Zimportlib.resourcesr Zloggingr$ ri r� r� rm �pathlibr �typingr r r r r Zcockpitr Zcockpit._vendorr Zcockpit._vendor.beir Zcockpit.beipackr Zcockpit.bridger r Zcockpit.channelr Zcockpit.channelsr Zcockpit.jsonutilr r Zcockpit.osinfor Zcockpit.packagesr r r Z cockpit.peerr Zcockpit.protocolr r Zcockpit.routerr r Zcockpit.transportsr Z getLoggerr* r4 r: r< r= r� rM ZAskpassHandlerrY r� r� r� r� r� r� r� r� r" r2 r2 r2 r3 �<module> s\ " ��u ** v G