summaryrefslogtreecommitdiff
path: root/cloudinit/CloudConfig/cc_keys_to_console.py
blob: d462a0a855b00e11daf0b893bc77731e152ffc7e (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
# vi: ts=4 expandtab
#
#    Copyright (C) 2011 Canonical Ltd.
#
#    Author: Scott Moser <scott.moser@canonical.com>
#
#    This program is free software: you can redistribute it and/or modify
#    it under the terms of the GNU General Public License version 3, as
#    published by the Free Software Foundation.
#
#    This program is distributed in the hope that it will be useful,
#    but WITHOUT ANY WARRANTY; without even the implied warranty of
#    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
#    GNU General Public License for more details.
#
#    You should have received a copy of the GNU General Public License
#    along with this program.  If not, see <http://www.gnu.org/licenses/>.
from cloudinit.CloudConfig import per_instance
import cloudinit.util as util
import subprocess

frequency = per_instance

def handle(_name, cfg, _cloud, log, _args):
    cmd = [ '/usr/lib/cloud-init/write-ssh-key-fingerprints' ]
    fp_blacklist = util.get_cfg_option_list_or_str(cfg,
        "ssh_fp_console_blacklist", [])
    key_blacklist = util.get_cfg_option_list_or_str(cfg,
        "ssh_key_console_blacklist", ["ssh-dss"])
    try:
        confp = open('/dev/console', "wb")
        cmd.append(','.join(fp_blacklist))
        cmd.append(','.join(key_blacklist))
        subprocess.call(cmd, stdout=confp)
        confp.close()
    except:
        log.warn("writing keys to console value")
        raise