1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
|
#!/usr/bin/perl
#
# **** License ****
# This program is free software; you can redistribute it and/or modify
# it under the terms of the GNU General Public License version 2 as
# published by the Free Software Foundation.
#
# This program is distributed in the hope that it will be useful, but
# WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
# General Public License for more details.
#
# A copy of the GNU General Public License is available as
# `/usr/share/common-licenses/GPL' in the Debian GNU/Linux distribution
# or on the World Wide Web at `http://www.gnu.org/copyleft/gpl.html'.
# You can also obtain it by writing to the Free Software Foundation,
# Free Software Foundation, Inc., 51 Franklin St, Fifth Floor, Boston,
# MA 02110-1301, USA.
#
# This code was originally developed by Vyatta, Inc.
# Portions created by Vyatta are Copyright (C) 2010 Vyatta, Inc.
# All Rights Reserved.
#
# Author: Stig Thormodsrud
# Date: October 2010
# Description: Script to push cofig.boot to one or more URIs
#
# **** End License ****
#
use strict;
use warnings;
use lib '/opt/vyatta/share/perl5/';
use Vyatta::Config;
use Vyatta::ConfigMgmt;
use POSIX;
use File::Compare;
use File::Copy;
use URI;
use Sys::Hostname;
use IO::Prompt;
my $debug = 0;
my $config = new Vyatta::Config;
$config->setLevel('system config-management commit-archive');
my @uris = $config->returnOrigValues('location');
if (scalar(@uris) < 1) {
print "No URI's configured\n";
exit 0;
}
my $last_push_file = cm_get_last_push_file();
my $tmp_push_file = "/tmp/config.boot.$$";
my $cmd = 'cli-shell-api showCfg --show-active-only';
system("$cmd > $tmp_push_file");
if (-e $last_push_file and compare($last_push_file, $tmp_push_file) == 0) {
exit 0;
}
my $timestamp = strftime(".%Y%m%d_%H%M%S", localtime);
my $hostname = hostname();
$hostname = 'vyos' if ! defined $hostname;
my $save_file = "config.boot-$hostname" . $timestamp;
print "Archiving config...\n";
foreach my $uri (@uris) {
my $u = URI->new($uri);
my $scheme = $u->scheme();
my $auth = $u->authority();
my $path = $u->path();
my ($host, $remote, $cmd) = ('', '', '');
if (defined $auth and $auth =~ /.*\@(.*)/) {
$host = $1;
} else {
$host = $auth if defined $auth;
}
$remote .= "$scheme://$host";
$remote .= "$path" if defined $path;
print " $remote ";
my $rc = 0;
if ($scheme =~ /^(scp|sftp)$/ ){
$cmd = "curl -g -s -S -T $tmp_push_file $uri/$save_file";
$rc = system($cmd);
if( $rc >> 8 == 51 ){
my $rsa_key = `ssh-keyscan -t rsa $host 2>/dev/null`;
print "The authenticity of host '$host' can't be established.\n";
my $fingerprint = `ssh-keygen -lf /dev/stdin <<< \"$rsa_key\" | awk {' print \$2 '}`;
chomp $fingerprint;
print "RSA key fingerprint is $fingerprint.\n";
if (prompt("Are you sure you want to continue connecting (yes/no) [Yes]? ", -tynd=>"y")) {
mkdir "$ENV{HOME}/.ssh/",0700 unless -d "$ENV{HOME}/.ssh";
open(my $known_hosts, ">>", "$ENV{HOME}/.ssh/known_hosts")
or die "Cannot open known_hosts: $!";
print $known_hosts "$rsa_key\n";
close($known_hosts);
$cmd = "curl -g -s -S -T $tmp_push_file $uri/$save_file";
$rc = system($cmd);
print "\n";
}
}
} else {
$cmd = "curl -s -T $tmp_push_file $uri/$save_file";
$rc = system($cmd);
}
print "cmd [$cmd]\n" if $debug;
if ($rc eq 0) {
print " OK\n";
} else {
print " Failed!\n";
}
}
move($tmp_push_file, $last_push_file);
exit 0;
|
