관리-도구
편집 파일: ovirt.cpython-39.opt-1.pyc
a -�_g�% � @ sN d dl Z d dlZd dlZd dlmZmZmZ d dlmZ G dd� dee�Z dS )� N)�Plugin�RedHatPlugin� PluginOpt)� is_executablec @ sh e Zd ZdZdZdZdZejej dd�Z dZedd d d�eded d�edddd�gZ dd� Zdd� ZdS )�OvirtzoVirt EngineZovirt)Zvirt) �ovirt-enginezovirt-engine-dwhzovirt-engine-reportszovirt-engine-metricszovirt-engine-setupzovirt-vmconsolezovirt-scheduler-proxyZrhevmz rhevm-dwhz rhevm-reportsz}^/etc/ (rhevm|ovirt-engine|ovirt-engine-dwh)/ (engine.conf|ovirt-engine-dwhd.conf) (\.d/.+.conf.*?)?$)�flags�patternzcENGINE_DB_PASSWORD:ENGINE_PKI_TRUST_STORE_PASSWORD:ENGINE_PKI_ENGINE_STORE_PASSWORD:DWH_DB_PASSWORD� jbosstraceTz0Enable oVirt Engine JBoss stack trace collection)�defaultZdesc�sensitive-keysz.Sensitive keys to be masked in post-processing�heapdumpFz3Collect heap dumps from /var/log/ovirt-engine/dump/c s� | � d�r�| �d�r�d}d|� d�}| �|�}dd� |d �� D �}|s^| j�d � | �d � |D ]<}zt�|t j � W qb ty� | j�d |� �� Y qb0 qb| �ddg� | � d �s�| �d� | � d� g d�}ddg}| �ddg� | �dd� |D �� | �dd� |D �� d}d} d� t|��r8| �|� d�� t| ��rR| �| � d�� td��r|g d�} | �� fdd�| D �� | �g d�� | �dd d!d"�� | �d#d$g� | �d%d&g� d S )'Nr r z)^ovirt-engine\ -server.*jboss-modules.jarz pgrep -f '�'c S s g | ]}t |��qS � )�int��.0�xr r �</usr/lib/python3.9/site-packages/sos/report/plugins/ovirt.py� <listcomp>G � zOvirt.setup.<locals>.<listcomp>�outputzUnable to get ovirt-engine pidzUnable to send signal to z/etc/ovirt-engine/.pgpassz/etc/rhevm/.pgpassr z/var/log/ovirt-engine/dumpz/var/log/ovirt-engine/dump/)z/etc/pki/ovirt-engine/ca.pemz#/etc/pki/ovirt-engine/apache-ca.pemz&/etc/pki/ovirt-engine/certs/engine.cerz&/etc/pki/ovirt-engine/certs/apache.cerz//etc/pki/ovirt-engine/certs/websocket-proxy.cerz%/etc/pki/ovirt-engine/certs/jboss.cerz-/etc/pki/ovirt-engine/certs/imageio-proxy.cerz2/etc/pki/ovirt-engine/certs/ovirt-provider-ovn.cer)Zmypass�!/etc/pki/ovirt-engine/.truststore)Zchangeit�)/var/lib/ovirt-engine/external_truststorezengine-config --allzengine-config -dc S s g | ]}d |� d��qS )zopenssl x509 -in z -text -nooutr )r �cr r r r r s c S s g | ]\}}d |� d|� ��qS )zkeytool -list -storepass z -rfc -keystore r )r �pr r r r r w s �zengine-manage-domainszovirt-engine-extensions-toolzovirt-aaa-jdbc-toolz listz info list-extensions)zquery --what=userzquery --what=groupz settings showc s g | ]}� � d |� ��qS )� r )r Zsc�Z jdbc_toolr r r � r )�/etc/ovirt-enginez/etc/rhevm/z/etc/ovirt-engine-dwhz/etc/ovirt-engine-reportsz/etc/ovirt-engine-metricsz/etc/ovirt-engine-setupz/etc/ovirt-vmconsolez/var/log/ovirt-enginez/var/log/ovirt-engine-dwhz/var/log/ovirt-engine-reportsz/var/log/ovirt-scheduler-proxyz/var/log/rhevmz/etc/sysconfig/ovirt-enginez/usr/share/ovirt-engine/confz/var/log/ovirt-guest-agentz'/var/lib/ovirt-engine/setup-history.txtz#/var/lib/ovirt-engine/setup/answersr z/var/tmp/ovirt-engine/configz*/var/lib/ovirt-engine/jboss_runtime/configz2/var/lib/ovirt-engine-reports/jboss_runtime/configZovirt_engine_confdZovirt_engine_boot_logZovirt_engine_console_log)z"/etc/ovirt-engine/engine.conf.d/.*z/var/log/ovirt-engine/boot.logz!/var/log/ovirt-engine/console.logz/etc/pki/ovirt-engine/keysz/etc/pki/ovirt-engine/privatez/etc/pki/ovirt-engine/r )� get_optionZis_installedZexec_cmd� splitlinesZsoslog�errorZ add_alert�os�kill�signal�SIGQUIT�OSErrorZadd_forbidden_pathZadd_dir_listingZadd_cmd_outputr Z add_copy_specZ add_file_tags)�selfZengine_patternZpgrep�resZengine_pids�pidZcertificatesZ keystoresZmanage_domainsZextensions_toolZsubcmdsr r r �setupB st � �� � � � ��zOvirt.setupc C s dD ]}| � |dd� qd}|D ]}| � d|� �dd� q | � dd d� g d �}|D ]}| �d|�}| � |dd� qT| j}| �d �}|r�|dur�|}dd� |�d�D �} | �| jdd�| �� d�d� dD ]} | �dd| � d�d� q�g d�}dd�|�� d�}| �d|d� dS ) z+ Obfuscate sensitive keys. )z8/etc/ovirt-engine/engine-config/engine-config.propertiesz//etc/rhevm/rhevm-config/rhevm-config.propertiesz(Password.type)=(.*)z\1=********)zovirt-engine.xmlz0ovirt-engine_history/current/ovirt-engine.v1.xmlz*ovirt-engine_history/ovirt-engine.boot.xmlz-ovirt-engine_history/ovirt-engine.initial.xmlz*ovirt-engine_history/ovirt-engine.last.xmlz/var/tmp/ovirt-engine/config/z(<password>)(.*)(</password>)z\1********\3z*/etc/ovirt-engine/redhatsupportplugin.confz(proxyPassword)=(.*))zlogcollector.confzimageuploader.confzisouploader.confr z(passwd|pg-pass)=(.*)r Tc S s g | ]}|r|�qS r r r r r r r � r z"Ovirt.postproc.<locals>.<listcomp>�:�(�|z)=(.*))�passwordZOVESETUP_CONFIG_ADMIN_SETUPz&/var/lib/ovirt-engine/setup/answers/.*z (?P<key>[^=]*z [^=]*)=.*z\g<key>=********)z vars.passwordz!pool.default.auth.simple.passwordz$pool.default.ssl.truststore.passwordzconfig.datasource.dbpasswordz(^\s*#*(z )\s*=\s*)(.*)z$/etc/ovirt-engine/aaa/.*\.propertiesz\1*********N)Zdo_file_subZ path_join�DEFAULT_SENSITIVE_KEYSr �splitZdo_path_regex_sub� DB_PASS_FILES�join) r'