From 0bbe8d655df4bc50d70aeef2d3199a73e0af9f03 Mon Sep 17 00:00:00 2001
From: Viacheslav Hletenko <v.gletenko@vyos.io>
Date: Sat, 28 May 2022 18:41:21 +0000
Subject: event-handler: T3083: Add simple event-handler

Event-handler allows executing a custom script when in logs it
detects configured "pattern"
A simple implemenation

set system event-handler first pattern '.*ssh2.*'
set system event-handler first script '/config/scripts/hello.sh'
---
 src/conf_mode/system_event_handler.py | 87 +++++++++++++++++++++++++++++++++++
 1 file changed, 87 insertions(+)
 create mode 100755 src/conf_mode/system_event_handler.py

(limited to 'src/conf_mode')

diff --git a/src/conf_mode/system_event_handler.py b/src/conf_mode/system_event_handler.py
new file mode 100755
index 000000000..8efc816cb
--- /dev/null
+++ b/src/conf_mode/system_event_handler.py
@@ -0,0 +1,87 @@
+#!/usr/bin/env python3
+#
+# Copyright (C) 2022 VyOS maintainers and contributors
+#
+# This program is free software; you can redistribute it and/or modify
+# it under the terms of the GNU General Public License version 2 or later as
+# published by the Free Software Foundation.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program.  If not, see <http://www.gnu.org/licenses/>.
+
+import json
+import os
+
+from vyos.config import Config
+from vyos.configdict import node_changed
+from vyos.util import cmd
+from vyos.util import call
+from vyos.template import render
+from vyos import ConfigError
+from vyos import airbag
+airbag.enable()
+
+
+systemd_dir = '/etc/systemd/system'
+systemd_service = 'vyos-event-handler'
+service_path = f'{systemd_dir}/{systemd_service}.service'
+event_conf = '/run/vyos-event-handler.conf'
+
+
+def get_config(config=None):
+    if config:
+        conf = config
+    else:
+        conf = Config()
+
+    base = ['system', 'event-handler']
+    event = conf.get_config_dict(base, get_first_key=True, no_tag_node_value_mangle=True)
+
+    return event
+
+def verify(event):
+    # bail out early - looks like removal from running config
+    if not event:
+        return None
+
+    for name, event_config in event.items():
+        if 'pattern' not in event_config or 'script' not in event_config:
+            raise ConfigError(f'Event-handler "pattern and script" are mandatory!')
+
+def generate(event):
+    if not event:
+        return None
+
+    conf_json = json.dumps(event, indent = 4)
+    with open(event_conf, 'w') as f:
+        f.write(conf_json)
+
+    render(service_path, 'event-handler/systemd_event_handler_service.j2', event)
+
+    return None
+
+def apply(event):
+    call('systemctl daemon-reload')
+    if event:
+        call(f'systemctl restart {systemd_service}.service')
+    else:
+        call(f'systemctl stop {systemd_service}.service')
+
+        for f in [service_path, event_conf]:
+            if os.path.isfile(f):
+                os.unlink(f)
+
+if __name__ == '__main__':
+    try:
+        c = get_config()
+        verify(c)
+        generate(c)
+        apply(c)
+    except ConfigError as e:
+        print(e)
+        exit(1)
-- 
cgit v1.2.3


From 74454c341a57aab66151b9ef2488eb72a306c002 Mon Sep 17 00:00:00 2001
From: zsdc <taras@vyos.io>
Date: Mon, 6 Jun 2022 21:33:17 +0300
Subject: event-handler: T3083: Optimized event-handler

* Removed dynamic generating for systemd unit
* Optimized configuration file deleting process
* Added exceptions handlers to event-handler script to protect service
from most obvious potential troubles
* Improved logging
* Moved pattern compilation outside a messages loop to avoid extra operations
* Added signal handlers for proper systemd integration
---
 .../event-handler/systemd_event_handler_service.j2 |  11 --
 src/conf_mode/system_event_handler.py              |  57 +++++-----
 src/helpers/vyos-event-handler.py                  |  55 ----------
 src/system/vyos-event-handler.py                   | 120 +++++++++++++++++++++
 src/systemd/vyos-event-handler.service             |  11 ++
 5 files changed, 158 insertions(+), 96 deletions(-)
 delete mode 100644 data/templates/event-handler/systemd_event_handler_service.j2
 delete mode 100755 src/helpers/vyos-event-handler.py
 create mode 100755 src/system/vyos-event-handler.py
 create mode 100644 src/systemd/vyos-event-handler.service

(limited to 'src/conf_mode')

diff --git a/data/templates/event-handler/systemd_event_handler_service.j2 b/data/templates/event-handler/systemd_event_handler_service.j2
deleted file mode 100644
index da35a51c4..000000000
--- a/data/templates/event-handler/systemd_event_handler_service.j2
+++ /dev/null
@@ -1,11 +0,0 @@
-[Unit]
-Description=Event handler
-After=network.target
-
-[Service]
-Type=simple
-Restart=always
-ExecStart=/usr/bin/python3 /usr/libexec/vyos/vyos-event-handler.py --config /run/vyos-event-handler.conf
-
-[Install]
-WantedBy=multi-user.target
diff --git a/src/conf_mode/system_event_handler.py b/src/conf_mode/system_event_handler.py
index 8efc816cb..9f91e99fc 100755
--- a/src/conf_mode/system_event_handler.py
+++ b/src/conf_mode/system_event_handler.py
@@ -15,22 +15,17 @@
 # along with this program.  If not, see <http://www.gnu.org/licenses/>.
 
 import json
-import os
+from pathlib import Path
 
 from vyos.config import Config
-from vyos.configdict import node_changed
-from vyos.util import cmd
 from vyos.util import call
-from vyos.template import render
 from vyos import ConfigError
 from vyos import airbag
-airbag.enable()
 
+airbag.enable()
 
-systemd_dir = '/etc/systemd/system'
-systemd_service = 'vyos-event-handler'
-service_path = f'{systemd_dir}/{systemd_service}.service'
-event_conf = '/run/vyos-event-handler.conf'
+service_name = 'vyos-event-handler'
+service_conf = Path(f'/run/{service_name}.conf')
 
 
 def get_config(config=None):
@@ -40,41 +35,43 @@ def get_config(config=None):
         conf = Config()
 
     base = ['system', 'event-handler']
-    event = conf.get_config_dict(base, get_first_key=True, no_tag_node_value_mangle=True)
+    config = conf.get_config_dict(base,
+                                  get_first_key=True,
+                                  no_tag_node_value_mangle=True)
 
-    return event
+    return config
 
-def verify(event):
+
+def verify(config):
     # bail out early - looks like removal from running config
-    if not event:
+    if not config:
         return None
 
-    for name, event_config in event.items():
+    for name, event_config in config.items():
         if 'pattern' not in event_config or 'script' not in event_config:
-            raise ConfigError(f'Event-handler "pattern and script" are mandatory!')
+            raise ConfigError(
+                'Event-handler: both pattern and script items are mandatory!')
 
-def generate(event):
-    if not event:
-        return None
 
-    conf_json = json.dumps(event, indent = 4)
-    with open(event_conf, 'w') as f:
-        f.write(conf_json)
+def generate(config):
+    if not config:
+        # Remove old config and return
+        service_conf.unlink(missing_ok=True)
+        return None
 
-    render(service_path, 'event-handler/systemd_event_handler_service.j2', event)
+    # Write configuration file
+    conf_json = json.dumps(config, indent=4)
+    service_conf.write_text(conf_json)
 
     return None
 
-def apply(event):
-    call('systemctl daemon-reload')
-    if event:
-        call(f'systemctl restart {systemd_service}.service')
+
+def apply(config):
+    if config:
+        call(f'systemctl restart {service_name}.service')
     else:
-        call(f'systemctl stop {systemd_service}.service')
+        call(f'systemctl stop {service_name}.service')
 
-        for f in [service_path, event_conf]:
-            if os.path.isfile(f):
-                os.unlink(f)
 
 if __name__ == '__main__':
     try:
diff --git a/src/helpers/vyos-event-handler.py b/src/helpers/vyos-event-handler.py
deleted file mode 100755
index 018a752f4..000000000
--- a/src/helpers/vyos-event-handler.py
+++ /dev/null
@@ -1,55 +0,0 @@
-#!/usr/bin/env python3
-#
-# Copyright (C) 2022 VyOS maintainers and contributors
-#
-# This program is free software; you can redistribute it and/or modify
-# it under the terms of the GNU General Public License version 2 or later as
-# published by the Free Software Foundation.
-#
-# This program is distributed in the hope that it will be useful,
-# but WITHOUT ANY WARRANTY; without even the implied warranty of
-# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
-# GNU General Public License for more details.
-#
-# You should have received a copy of the GNU General Public License
-# along with this program.  If not, see <http://www.gnu.org/licenses/>.
-
-import argparse
-import select
-import re
-import json
-
-from sys import argv
-from os import getpid
-from systemd import journal
-from vyos.util import call
-
-
-parser = argparse.ArgumentParser()
-parser.add_argument("-c", "--config", action="store", help="Path to even-handler configuration", required=True)
-
-args = parser.parse_args()
-config = args.config
-data = journal.Reader()
-data.seek_tail()
-data.get_previous()
-p = select.poll()
-p.register(data, data.get_events())
-my_pid = getpid()
-
-with open(config, 'r') as f:
-    config = json.load(f)
-
-
-if __name__ == '__main__':
-    while p.poll():
-        if data.process() != journal.APPEND:
-            continue
-        for entry in data:
-            message = entry['MESSAGE']
-            for name, event_config in config.items():
-                pattern = re.compile(rf'{event_config["pattern"]}')
-                script = event_config['script']
-                if message != "" and entry['_PID'] != my_pid and pattern.match(message):
-                    call(script)
-                    journal.send(f'Pattern found: {event_config["pattern"]}, script executed: {script}')
diff --git a/src/system/vyos-event-handler.py b/src/system/vyos-event-handler.py
new file mode 100755
index 000000000..f4b793dbe
--- /dev/null
+++ b/src/system/vyos-event-handler.py
@@ -0,0 +1,120 @@
+#!/usr/bin/env python3
+#
+# Copyright (C) 2022 VyOS maintainers and contributors
+#
+# This program is free software; you can redistribute it and/or modify
+# it under the terms of the GNU General Public License version 2 or later as
+# published by the Free Software Foundation.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program.  If not, see <http://www.gnu.org/licenses/>.
+
+import argparse
+import select
+import re
+import json
+from os import getpid
+from pathlib import Path
+from signal import signal, SIGTERM, SIGINT
+from systemd import journal
+from sys import exit
+from vyos.util import call
+
+# Identify this script
+my_pid = getpid()
+my_name = Path(__file__).stem
+
+
+# handle termination signal
+def handle_signal(signal_type, frame):
+    if signal_type == SIGTERM:
+        journal.send('Received SIGTERM signal, stopping normally',
+                     SYSLOG_IDENTIFIER=my_name)
+    if signal_type == SIGINT:
+        journal.send('Received SIGINT signal, stopping normally',
+                     SYSLOG_IDENTIFIER=my_name)
+    exit(0)
+
+
+# Execute script safely
+def script_run(pattern: str, script_path: str) -> None:
+    try:
+        call(script_path)
+        journal.send(
+            f'Pattern found: "{pattern}", script executed: "{script_path}"',
+            SYSLOG_IDENTIFIER=my_name)
+    except Exception as err:
+        journal.send(
+            f'Pattern found: "{pattern}", failed to execute script "{script_path}": {err}',
+            SYSLOG_IDENTIFIER=my_name)
+
+
+# iterate trough regexp items
+def analyze_message(message: str, regex_patterns: dict) -> None:
+    for pattern_compiled, pattern_config in regex_patterns.items():
+        if pattern_compiled.match(message):
+            script_run(pattern_config['pattern_raw'],
+                       pattern_config['pattern_script'])
+
+
+if __name__ == '__main__':
+    # Parse command arguments and get config
+    parser = argparse.ArgumentParser()
+    parser.add_argument('-c',
+                        '--config',
+                        action='store',
+                        help='Path to even-handler configuration',
+                        required=True,
+                        type=Path)
+
+    args = parser.parse_args()
+    try:
+        config_path = Path(args.config)
+        config = json.loads(config_path.read_text())
+    except Exception as err:
+        print(
+            f'Configuration file "{config_path}" does not exist or malformed: {err}'
+        )
+        exit(1)
+
+    # Prepare for proper exitting
+    signal(SIGTERM, handle_signal)
+    signal(SIGINT, handle_signal)
+
+    # Set up journal connection
+    data = journal.Reader()
+    data.seek_tail()
+    data.get_previous()
+    p = select.poll()
+    p.register(data, data.get_events())
+
+    # Prepare compiled regex objects
+    patterns = {}
+    for name, event_config in config.items():
+        pattern_raw = f'{event_config["pattern"]}'
+        pattern_compiled = re.compile(rf'{event_config["pattern"]}')
+        pattern_config = {
+            pattern_compiled: {
+                'pattern_raw': pattern_raw,
+                'pattern_script': event_config['script']
+            }
+        }
+        patterns.update(pattern_config)
+
+    journal.send(f'Started with configuration: {config}',
+                 SYSLOG_IDENTIFIER=my_name)
+
+    while p.poll():
+        if data.process() != journal.APPEND:
+            continue
+        for entry in data:
+            message = entry['MESSAGE']
+            pid = entry['_PID']
+            # Skip empty messages and messages from this process
+            if message and pid != my_pid:
+                analyze_message(message, patterns)
diff --git a/src/systemd/vyos-event-handler.service b/src/systemd/vyos-event-handler.service
new file mode 100644
index 000000000..6afe4f95b
--- /dev/null
+++ b/src/systemd/vyos-event-handler.service
@@ -0,0 +1,11 @@
+[Unit]
+Description=VyOS event handler
+After=network.target vyos-router.service
+
+[Service]
+Type=simple
+Restart=always
+ExecStart=/usr/bin/python3 /usr/libexec/vyos/system/vyos-event-handler.py --config /run/vyos-event-handler.conf
+
+[Install]
+WantedBy=multi-user.target
-- 
cgit v1.2.3


From d542bf338aa1638b082a141163db5437ce7a33a9 Mon Sep 17 00:00:00 2001
From: Viacheslav Hletenko <v.gletenko@vyos.io>
Date: Tue, 7 Jun 2022 06:54:39 +0000
Subject: event-handler: T3083: Move system to service event-handler

Move 'system event-handler' to 'service event-handler'
---
 interface-definitions/service-event-handler.xml.in | 27 +++++++
 interface-definitions/system-event-handler.xml.in  | 27 -------
 src/conf_mode/service_event_handler.py             | 84 ++++++++++++++++++++++
 src/conf_mode/system_event_handler.py              | 84 ----------------------
 4 files changed, 111 insertions(+), 111 deletions(-)
 create mode 100644 interface-definitions/service-event-handler.xml.in
 delete mode 100644 interface-definitions/system-event-handler.xml.in
 create mode 100755 src/conf_mode/service_event_handler.py
 delete mode 100755 src/conf_mode/system_event_handler.py

(limited to 'src/conf_mode')

diff --git a/interface-definitions/service-event-handler.xml.in b/interface-definitions/service-event-handler.xml.in
new file mode 100644
index 000000000..0ed26b213
--- /dev/null
+++ b/interface-definitions/service-event-handler.xml.in
@@ -0,0 +1,27 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<interfaceDefinition>
+  <node name="service">
+    <children>
+      <tagNode name="event-handler" owner="${vyos_conf_scripts_dir}/service_event_handler.py">
+        <properties>
+          <help>Event handler name</help>
+        </properties>
+        <children>
+          <leafNode name="pattern">
+            <properties>
+              <help>Match pattern (regex)</help>
+            </properties>
+          </leafNode>
+          <leafNode name="script">
+            <properties>
+              <help>Event handler script file</help>
+              <constraint>
+                <validator name="script"/>
+              </constraint>
+            </properties>
+          </leafNode>
+        </children>
+      </tagNode>
+    </children>
+  </node>
+</interfaceDefinition>
diff --git a/interface-definitions/system-event-handler.xml.in b/interface-definitions/system-event-handler.xml.in
deleted file mode 100644
index f5d8afabd..000000000
--- a/interface-definitions/system-event-handler.xml.in
+++ /dev/null
@@ -1,27 +0,0 @@
-<?xml version="1.0" encoding="UTF-8"?>
-<interfaceDefinition>
-  <node name="system">
-    <children>
-      <tagNode name="event-handler" owner="${vyos_conf_scripts_dir}/system_event_handler.py">
-        <properties>
-          <help>Event handler name</help>
-        </properties>
-        <children>
-          <leafNode name="pattern">
-            <properties>
-              <help>Match pattern (regex)</help>
-            </properties>
-          </leafNode>
-          <leafNode name="script">
-            <properties>
-              <help>Event handler script file</help>
-              <constraint>
-                <validator name="script"/>
-              </constraint>
-            </properties>
-          </leafNode>
-        </children>
-      </tagNode>
-    </children>
-  </node>
-</interfaceDefinition>
diff --git a/src/conf_mode/service_event_handler.py b/src/conf_mode/service_event_handler.py
new file mode 100755
index 000000000..cf4aba49b
--- /dev/null
+++ b/src/conf_mode/service_event_handler.py
@@ -0,0 +1,84 @@
+#!/usr/bin/env python3
+#
+# Copyright (C) 2022 VyOS maintainers and contributors
+#
+# This program is free software; you can redistribute it and/or modify
+# it under the terms of the GNU General Public License version 2 or later as
+# published by the Free Software Foundation.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program.  If not, see <http://www.gnu.org/licenses/>.
+
+import json
+from pathlib import Path
+
+from vyos.config import Config
+from vyos.util import call
+from vyos import ConfigError
+from vyos import airbag
+
+airbag.enable()
+
+service_name = 'vyos-event-handler'
+service_conf = Path(f'/run/{service_name}.conf')
+
+
+def get_config(config=None):
+    if config:
+        conf = config
+    else:
+        conf = Config()
+
+    base = ['service', 'event-handler']
+    config = conf.get_config_dict(base,
+                                  get_first_key=True,
+                                  no_tag_node_value_mangle=True)
+
+    return config
+
+
+def verify(config):
+    # bail out early - looks like removal from running config
+    if not config:
+        return None
+
+    for name, event_config in config.items():
+        if 'pattern' not in event_config or 'script' not in event_config:
+            raise ConfigError(
+                'Event-handler: both pattern and script items are mandatory!')
+
+
+def generate(config):
+    if not config:
+        # Remove old config and return
+        service_conf.unlink(missing_ok=True)
+        return None
+
+    # Write configuration file
+    conf_json = json.dumps(config, indent=4)
+    service_conf.write_text(conf_json)
+
+    return None
+
+
+def apply(config):
+    if config:
+        call(f'systemctl restart {service_name}.service')
+    else:
+        call(f'systemctl stop {service_name}.service')
+
+
+if __name__ == '__main__':
+    try:
+        c = get_config()
+        verify(c)
+        generate(c)
+        apply(c)
+    except ConfigError as e:
+        print(e)
+        exit(1)
diff --git a/src/conf_mode/system_event_handler.py b/src/conf_mode/system_event_handler.py
deleted file mode 100755
index 9f91e99fc..000000000
--- a/src/conf_mode/system_event_handler.py
+++ /dev/null
@@ -1,84 +0,0 @@
-#!/usr/bin/env python3
-#
-# Copyright (C) 2022 VyOS maintainers and contributors
-#
-# This program is free software; you can redistribute it and/or modify
-# it under the terms of the GNU General Public License version 2 or later as
-# published by the Free Software Foundation.
-#
-# This program is distributed in the hope that it will be useful,
-# but WITHOUT ANY WARRANTY; without even the implied warranty of
-# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
-# GNU General Public License for more details.
-#
-# You should have received a copy of the GNU General Public License
-# along with this program.  If not, see <http://www.gnu.org/licenses/>.
-
-import json
-from pathlib import Path
-
-from vyos.config import Config
-from vyos.util import call
-from vyos import ConfigError
-from vyos import airbag
-
-airbag.enable()
-
-service_name = 'vyos-event-handler'
-service_conf = Path(f'/run/{service_name}.conf')
-
-
-def get_config(config=None):
-    if config:
-        conf = config
-    else:
-        conf = Config()
-
-    base = ['system', 'event-handler']
-    config = conf.get_config_dict(base,
-                                  get_first_key=True,
-                                  no_tag_node_value_mangle=True)
-
-    return config
-
-
-def verify(config):
-    # bail out early - looks like removal from running config
-    if not config:
-        return None
-
-    for name, event_config in config.items():
-        if 'pattern' not in event_config or 'script' not in event_config:
-            raise ConfigError(
-                'Event-handler: both pattern and script items are mandatory!')
-
-
-def generate(config):
-    if not config:
-        # Remove old config and return
-        service_conf.unlink(missing_ok=True)
-        return None
-
-    # Write configuration file
-    conf_json = json.dumps(config, indent=4)
-    service_conf.write_text(conf_json)
-
-    return None
-
-
-def apply(config):
-    if config:
-        call(f'systemctl restart {service_name}.service')
-    else:
-        call(f'systemctl stop {service_name}.service')
-
-
-if __name__ == '__main__':
-    try:
-        c = get_config()
-        verify(c)
-        generate(c)
-        apply(c)
-    except ConfigError as e:
-        print(e)
-        exit(1)
-- 
cgit v1.2.3


From 06c0d2f2f9f4b9c97eb9868df166d787ca367ee7 Mon Sep 17 00:00:00 2001
From: zsdc <taras@vyos.io>
Date: Tue, 7 Jun 2022 14:34:49 +0300
Subject: event-handler: T3083: Extended event-handler features

* Added the ability to filter by a syslog identifier
* Added the ability to pass arguments to a script
* Added the ability to pass preconfigured environment variables to a script
* A message that triggered a script is now passed in the `message` variable and
can be used in a script
* Replaced `call()` to `run()`, since stdout are not need to be printed
---
 interface-definitions/service-event-handler.xml.in |  18 +++-
 src/conf_mode/service_event_handler.py             |  13 ++-
 src/system/vyos-event-handler.py                   | 110 ++++++++++++++-------
 3 files changed, 100 insertions(+), 41 deletions(-)

(limited to 'src/conf_mode')

diff --git a/interface-definitions/service-event-handler.xml.in b/interface-definitions/service-event-handler.xml.in
index 3e96013c7..ed6d41d1b 100644
--- a/interface-definitions/service-event-handler.xml.in
+++ b/interface-definitions/service-event-handler.xml.in
@@ -7,11 +7,23 @@
           <help>Event handler name</help>
         </properties>
         <children>
-          <leafNode name="pattern">
+          <node name="filter">
             <properties>
-              <help>Match pattern (regex)</help>
+              <help>Logs filter settings</help>
             </properties>
-          </leafNode>
+            <children>
+              <leafNode name="pattern">
+                <properties>
+                  <help>Match pattern (regex)</help>
+                </properties>
+              </leafNode>
+              <leafNode name="syslog-identifier">
+                <properties>
+                  <help>Identifier of a process in syslog (string)</help>
+                </properties>
+              </leafNode>
+            </children>
+          </node>
           <node name="script">
             <properties>
               <help>Event handler script file</help>
diff --git a/src/conf_mode/service_event_handler.py b/src/conf_mode/service_event_handler.py
index cf4aba49b..bb12da11d 100755
--- a/src/conf_mode/service_event_handler.py
+++ b/src/conf_mode/service_event_handler.py
@@ -18,7 +18,7 @@ import json
 from pathlib import Path
 
 from vyos.config import Config
-from vyos.util import call
+from vyos.util import call, dict_search
 from vyos import ConfigError
 from vyos import airbag
 
@@ -48,9 +48,16 @@ def verify(config):
         return None
 
     for name, event_config in config.items():
-        if 'pattern' not in event_config or 'script' not in event_config:
+        if not dict_search('filter.pattern', event_config) or not dict_search(
+                'script.path', event_config):
             raise ConfigError(
-                'Event-handler: both pattern and script items are mandatory!')
+                'Event-handler: both pattern and script path items are mandatory'
+            )
+
+        if dict_search('script.environment.message', event_config):
+            raise ConfigError(
+                'Event-handler: "message" environment variable is reserved for log message text'
+            )
 
 
 def generate(config):
diff --git a/src/system/vyos-event-handler.py b/src/system/vyos-event-handler.py
index f4b793dbe..691f674b2 100755
--- a/src/system/vyos-event-handler.py
+++ b/src/system/vyos-event-handler.py
@@ -18,12 +18,12 @@ import argparse
 import select
 import re
 import json
-from os import getpid
+from os import getpid, environ
 from pathlib import Path
 from signal import signal, SIGTERM, SIGINT
 from systemd import journal
 from sys import exit
-from vyos.util import call
+from vyos.util import run, dict_search
 
 # Identify this script
 my_pid = getpid()
@@ -41,25 +41,72 @@ def handle_signal(signal_type, frame):
     exit(0)
 
 
-# Execute script safely
-def script_run(pattern: str, script_path: str) -> None:
-    try:
-        call(script_path)
-        journal.send(
-            f'Pattern found: "{pattern}", script executed: "{script_path}"',
-            SYSLOG_IDENTIFIER=my_name)
-    except Exception as err:
-        journal.send(
-            f'Pattern found: "{pattern}", failed to execute script "{script_path}": {err}',
-            SYSLOG_IDENTIFIER=my_name)
-
-
-# iterate trough regexp items
-def analyze_message(message: str, regex_patterns: dict) -> None:
-    for pattern_compiled, pattern_config in regex_patterns.items():
-        if pattern_compiled.match(message):
-            script_run(pattern_config['pattern_raw'],
-                       pattern_config['pattern_script'])
+# Class for analyzing and process messages
+class Analyzer:
+    # Initialize settings
+    def __init__(self, config: dict) -> None:
+        self.config = {}
+        # Prepare compiled regex objects
+        for event_id, event_config in config.items():
+            script = dict_search('script.path', event_config)
+            # Check for arguments
+            if dict_search('script.arguments', event_config):
+                script_arguments = dict_search('script.arguments', event_config)
+                script = f'{script} {script_arguments}'
+            # Prepare environment
+            environment = environ
+            # Check for additional environment options
+            if dict_search('script.environment', event_config):
+                for env_variable, env_value in dict_search(
+                        'script.environment', event_config).items():
+                    environment[env_variable] = env_value.get('value')
+            # Create final config dictionary
+            pattern_raw = event_config['filter']['pattern']
+            pattern_compiled = re.compile(
+                rf'{event_config["filter"]["pattern"]}')
+            pattern_config = {
+                pattern_compiled: {
+                    'pattern_raw':
+                        pattern_raw,
+                    'syslog_id':
+                        dict_search('filter.syslog_identifier', event_config),
+                    'pattern_script': {
+                        'path': script,
+                        'environment': environment
+                    }
+                }
+            }
+            self.config.update(pattern_config)
+
+    # Execute script safely
+    def script_run(self, pattern: str, script_path: str,
+                   script_env: dict) -> None:
+        try:
+            run(script_path, env=script_env)
+            journal.send(
+                f'Pattern found: "{pattern}", script executed: "{script_path}"',
+                SYSLOG_IDENTIFIER=my_name)
+        except Exception as err:
+            journal.send(
+                f'Pattern found: "{pattern}", failed to execute script "{script_path}": {err}',
+                SYSLOG_IDENTIFIER=my_name)
+
+    # Analyze a message
+    def process_message(self, message: dict) -> None:
+        for pattern_compiled, pattern_config in self.config.items():
+            # Check if syslog id is presented in config and matches
+            syslog_id = pattern_config.get('syslog_id')
+            if syslog_id and message['SYSLOG_IDENTIFIER'] != syslog_id:
+                continue
+            if pattern_compiled.fullmatch(message['MESSAGE']):
+                # Add message to environment variables
+                pattern_config['pattern_script']['environment'][
+                    'message'] = message['MESSAGE']
+                # Run script
+                self.script_run(
+                    pattern=pattern_config['pattern_raw'],
+                    script_path=pattern_config['pattern_script']['path'],
+                    script_env=pattern_config['pattern_script']['environment'])
 
 
 if __name__ == '__main__':
@@ -76,6 +123,8 @@ if __name__ == '__main__':
     try:
         config_path = Path(args.config)
         config = json.loads(config_path.read_text())
+        # Create an object for analazyng messages
+        analyzer = Analyzer(config)
     except Exception as err:
         print(
             f'Configuration file "{config_path}" does not exist or malformed: {err}'
@@ -93,19 +142,6 @@ if __name__ == '__main__':
     p = select.poll()
     p.register(data, data.get_events())
 
-    # Prepare compiled regex objects
-    patterns = {}
-    for name, event_config in config.items():
-        pattern_raw = f'{event_config["pattern"]}'
-        pattern_compiled = re.compile(rf'{event_config["pattern"]}')
-        pattern_config = {
-            pattern_compiled: {
-                'pattern_raw': pattern_raw,
-                'pattern_script': event_config['script']
-            }
-        }
-        patterns.update(pattern_config)
-
     journal.send(f'Started with configuration: {config}',
                  SYSLOG_IDENTIFIER=my_name)
 
@@ -117,4 +153,8 @@ if __name__ == '__main__':
             pid = entry['_PID']
             # Skip empty messages and messages from this process
             if message and pid != my_pid:
-                analyze_message(message, patterns)
+                try:
+                    analyzer.process_message(entry)
+                except Exception as err:
+                    journal.send(f'Unable to process message: {err}',
+                                 SYSLOG_IDENTIFIER=my_name)
-- 
cgit v1.2.3


From 5f9d0ad5b258258654a9a897f35a6da8d9447670 Mon Sep 17 00:00:00 2001
From: Viacheslav Hletenko <v.gletenko@vyos.io>
Date: Wed, 8 Jun 2022 10:12:47 +0000
Subject: event-handler: Change tagNode event-handler to node

Before:
set service event-handler Foo
After:
set service event-handler event Foo
---
 interface-definitions/service-event-handler.xml.in | 85 ++++++++++++----------
 src/conf_mode/service_event_handler.py             |  2 +-
 2 files changed, 47 insertions(+), 40 deletions(-)

(limited to 'src/conf_mode')

diff --git a/interface-definitions/service-event-handler.xml.in b/interface-definitions/service-event-handler.xml.in
index ed6d41d1b..aef6bc1bc 100644
--- a/interface-definitions/service-event-handler.xml.in
+++ b/interface-definitions/service-event-handler.xml.in
@@ -2,62 +2,69 @@
 <interfaceDefinition>
   <node name="service">
     <children>
-      <tagNode name="event-handler" owner="${vyos_conf_scripts_dir}/service_event_handler.py">
+      <node name="event-handler" owner="${vyos_conf_scripts_dir}/service_event_handler.py">
         <properties>
-          <help>Event handler name</help>
+          <help>Service event handler</help>
         </properties>
         <children>
-          <node name="filter">
+          <tagNode name="event">
             <properties>
-              <help>Logs filter settings</help>
+              <help>Event handler name</help>
             </properties>
             <children>
-              <leafNode name="pattern">
+              <node name="filter">
                 <properties>
-                  <help>Match pattern (regex)</help>
-                </properties>
-              </leafNode>
-              <leafNode name="syslog-identifier">
-                <properties>
-                  <help>Identifier of a process in syslog (string)</help>
-                </properties>
-              </leafNode>
-            </children>
-          </node>
-          <node name="script">
-            <properties>
-              <help>Event handler script file</help>
-            </properties>
-            <children>
-              <leafNode name="arguments">
-                <properties>
-                  <help>Script arguments</help>
-                </properties>
-              </leafNode>
-              <tagNode name="environment">
-                <properties>
-                  <help>Script environment arguments</help>
+                  <help>Logs filter settings</help>
                 </properties>
                 <children>
-                  <leafNode name="value">
+                  <leafNode name="pattern">
                     <properties>
-                      <help>Environment value</help>
+                      <help>Match pattern (regex)</help>
+                    </properties>
+                  </leafNode>
+                  <leafNode name="syslog-identifier">
+                    <properties>
+                      <help>Identifier of a process in syslog (string)</help>
                     </properties>
                   </leafNode>
                 </children>
-              </tagNode>
-              <leafNode name="path">
+              </node>
+              <node name="script">
                 <properties>
-                  <help>Path to the script</help>
-                  <constraint>
-                    <validator name="script"/>
-                  </constraint>
+                  <help>Event handler script file</help>
                 </properties>
-              </leafNode>
+                <children>
+                  <leafNode name="arguments">
+                    <properties>
+                      <help>Script arguments</help>
+                    </properties>
+                  </leafNode>
+                  <tagNode name="environment">
+                    <properties>
+                      <help>Script environment arguments</help>
+                    </properties>
+                    <children>
+                      <leafNode name="value">
+                        <properties>
+                          <help>Environment value</help>
+                        </properties>
+                      </leafNode>
+                    </children>
+                  </tagNode>
+                  <leafNode name="path">
+                    <properties>
+                      <help>Path to the script</help>
+                      <constraint>
+                        <validator name="script"/>
+                      </constraint>
+                    </properties>
+                  </leafNode>
+                </children>
+              </node>
             </children>
-          </node>
+          </tagNode>
         </children>
-      </tagNode>
+      </node>
     </children>
   </node>
 </interfaceDefinition>
diff --git a/src/conf_mode/service_event_handler.py b/src/conf_mode/service_event_handler.py
index bb12da11d..5440d1056 100755
--- a/src/conf_mode/service_event_handler.py
+++ b/src/conf_mode/service_event_handler.py
@@ -34,7 +34,7 @@ def get_config(config=None):
     else:
         conf = Config()
 
-    base = ['service', 'event-handler']
+    base = ['service', 'event-handler', 'event']
     config = conf.get_config_dict(base,
                                   get_first_key=True,
                                   no_tag_node_value_mangle=True)
-- 
cgit v1.2.3