add vyos cloud-init config module

1 files changed, 145 insertions, 0 deletions

diff --git a/cloudinit/config/cc_vyos.py b/cloudinit/config/cc_vyos.py
new file mode 100644
index 00000000..1ea9fadb
--- /dev/null
+++ b/cloudinit/config/cc_vyos.py
@@ -0,0 +1,145 @@
+# vi: ts=4 expandtab
+#
+#    Copyright (C) 2009-2010 Canonical Ltd.
+#    Copyright (C) 2012 Hewlett-Packard Development Company, L.P.
+#
+#    Author: Scott Moser <scott.moser@canonical.com>
+#    Author: Juerg Haefliger <juerg.haefliger@hp.com>
+#
+#    This program is free software: you can redistribute it and/or modify
+#    it under the terms of the GNU General Public License version 3, as
+#    published by the Free Software Foundation.
+#
+#    This program is distributed in the hope that it will be useful,
+#    but WITHOUT ANY WARRANTY; without even the implied warranty of
+#    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+#    GNU General Public License for more details.
+#
+#    You should have received a copy of the GNU General Public License
+#    along with this program.  If not, see <http://www.gnu.org/licenses/>.
+
+import os
+import sys
+import base64
+import ast
+
+from cloudinit import util
+
+from cloudinit.distros import ug_util
+from cloudinit.settings import PER_INSTANCE
+
+from vyos.configtree import ConfigTree
+
+frequency = PER_INSTANCE
+
+class VyosError(Exception):
+    """Raised when the distro runs into an exception when setting vyos config.
+    This may happen when the ssh pub key format is wrong.
+    """
+    pass
+
+def set_pass_login(config, user, password, encrypted_pass):
+    if encrypted_pass:
+        config.set(['system', 'login', 'user', user, 'authentication', 'encrypted-password'], value=password, replace=True)
+    else:
+        config.set(['system', 'login', 'user', user, 'authentication', 'plaintext-password'], value=password, replace=True)
+
+    config.set(['system', 'login', 'user', user, 'level'], value='admin', replace=True)
+
+
+def set_ssh_login(config, user, key_string, key_x):
+    key_type = None
+    key_data = None
+    key_name = None
+
+    key_parts = key_string.split(None)
+
+    for key in key_parts:
+        if 'ssh-dss' in key or 'ssh-rsa' in key:
+            key_type = key
+        try:
+            if base64.b64decode(key):
+                key_data = key
+        except:
+            pass
+
+    if not key_type:
+        util.logexc(log, 'Key type not defined, wrong ssh key format.')
+        raise VyosError('Key type not defined, wrong ssh key format.')
+
+    if not key_data:
+        util.logexc(log, 'Key base64 not defined, wrong ssh key format.')
+        raise VyosError('Key base64 not defined, wrong ssh key format.')
+
+    if len(key_parts) > 2:
+        if key_parts[2] != key_type or key_parts[2] != key_data:
+            key_name = key_parts[2]
+        else:
+            key_name = "cloud-init-%s" % key_x
+    else:
+        key_name = "cloud-init-%s" % key_x
+
+    config.set(['system', 'login', 'user', user, 'authentication', 'public-keys', key_name , 'key'], value=key_data, replace=True)
+    config.set(['system', 'login', 'user', user, 'authentication', 'public-keys', key_name , 'type'], value=key_type, replace=True)
+    config.set_tag(['system', 'login', 'user'])
+    config.set_tag(['system', 'login', 'user', user, 'authentication', 'public-keys'])
+    config.set(['system', 'login', 'user', user, 'level'], value='admin', replace=True)  
+
+
+def handle(name, cfg, cloud, log, _args):
+    cfg_file_name = '/opt/vyatta/etc/config/config.boot'
+    bak_file_name = '/opt/vyatta/etc/config.boot.default'
+    metadata = cloud.datasource.metadata
+    (users, groups) = ug_util.normalize_users_groups(cfg, cloud.distro)
+    (hostname, fqdn) = util.get_hostname_fqdn(cfg, cloud)
+    encrypted_pass = False
+    key_x = 1
+
+    if not os.path.exists(cfg_file_name):
+        file_name = bak_file_name
+    else:
+        file_name = cfg_file_name
+
+    with open(file_name, 'r') as f:
+        config_file = f.read()
+    config = ConfigTree(config_file)
+
+    if 'DataSourceAzure' in str(cloud.datasource):
+        encrypted_pass = True
+        for key, val in users.items():
+            user = key
+            if 'passwd' in val:
+                password = val.get('passwd')
+                set_pass_login(config, user, password, encrypted_pass)
+
+            vyos_keys = metadata['public-keys']
+            for ssh_key in vyos_keys:
+                set_ssh_login(config, user, ssh_key, key_x)
+                key_x = key_x + 1
+    else:        
+        for user in users:
+            password = util.get_cfg_option_str(cfg, "passwd", None)
+            if password:
+                set_pass_login(config, user, password, encrypted_pass)
+
+            vyos_keys = cloud.get_public_ssh_keys() or []
+            if "ssh_authorized_keys" in cfg:
+                cfgkeys = cfg["ssh_authorized_keys"]
+                vyos_keys.extend(cfgkeys)
+
+            for ssh_key in vyos_keys:
+                set_ssh_login(config, user, ssh_key, key_x)
+                key_x = key_x + 1
+
+    config.set(['service', 'ssh'], replace=True)
+    config.set(['service', 'ssh', 'port'], value='22', replace=True)
+    config.set(['service', 'ssh', 'client-keepalive-interval'], value='180', replace=True)
+    config.set(['interfaces', 'ethernet', 'eth0', 'address'], value='dhcp', replace=True)
+    config.set_tag(['interfaces', 'ethernet'])
+    config.set(['system', 'host-name'], value=hostname, replace=True)
+
+    try:
+        with open(cfg_file_name, 'w') as f:
+            f.write(config.to_string())
+    except:
+        util.logexc(log, "Failed to write configs into file %s", file_name)