1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
|
#
# Copyright 2017 Check Point Software Technologies
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
#
# Requires Python 2.4+ and Openssl 1.0+
#
import base64
import socket
import struct
import time
import azurelinuxagent.common.conf as conf
from azurelinuxagent.common.exception import OSUtilError
from azurelinuxagent.common.future import ustr, bytebuffer
import azurelinuxagent.common.logger as logger
from azurelinuxagent.common.osutil.default import DefaultOSUtil
from azurelinuxagent.common.utils.cryptutil import CryptUtil
import azurelinuxagent.common.utils.fileutil as fileutil
import azurelinuxagent.common.utils.shellutil as shellutil
import azurelinuxagent.common.utils.textutil as textutil
class GaiaOSUtil(DefaultOSUtil):
def __init__(self):
super(GaiaOSUtil, self).__init__()
def _run_clish(self, cmd, log_cmd=True):
for i in xrange(10):
ret, out = shellutil.run_get_output(
"/bin/clish -s -c '" + cmd + "'", log_cmd=log_cmd)
if not ret:
break
if 'NMSHST0025' in out: # Entry for [hostname] already present
ret = 0
break
time.sleep(2)
return ret, out
def useradd(self, username, expiration=None):
logger.warn('useradd is not supported on GAiA')
def chpasswd(self, username, password, crypt_id=6, salt_len=10):
logger.info('chpasswd')
passwd_hash = textutil.gen_password_hash(password, crypt_id, salt_len)
ret, out = self._run_clish(
'set user admin password-hash ' + passwd_hash, log_cmd=False)
if ret != 0:
raise OSUtilError(("Failed to set password for {0}: {1}"
"").format('admin', out))
def conf_sudoer(self, username, nopasswd=False, remove=False):
logger.info('conf_sudoer is not supported on GAiA')
def del_root_password(self):
logger.info('del_root_password')
ret, out = self._run_clish('set user admin password-hash *LOCK*')
if ret != 0:
raise OSUtilError("Failed to delete root password")
def _replace_user(self, path, username):
if path.startswith('$HOME'):
path = '/home' + path[5:]
parts = path.split('/')
parts[2] = username
return '/'.join(parts)
def deploy_ssh_keypair(self, username, keypair):
logger.info('deploy_ssh_keypair')
username = 'admin'
path, thumbprint = keypair
path = self._replace_user(path, username)
super(GaiaOSUtil, self).deploy_ssh_keypair(
username, (path, thumbprint))
def openssl_to_openssh(self, input_file, output_file):
cryptutil = CryptUtil(conf.get_openssl_cmd())
ret, out = shellutil.run_get_output(
conf.get_openssl_cmd() +
" rsa -pubin -noout -text -in '" + input_file + "'")
if ret != 0:
raise OSUtilError('openssl failed with {0}'.format(ret))
modulus = []
exponent = []
buf = None
for line in out.split('\n'):
if line.startswith('Modulus:'):
buf = modulus
buf.append(line)
continue
if line.startswith('Exponent:'):
buf = exponent
buf.append(line)
continue
if buf and line:
buf.append(line.strip().replace(':', ''))
def text_to_num(buf):
if len(buf) == 1:
return int(buf[0].split()[1])
return long(''.join(buf[1:]), 16)
n = text_to_num(modulus)
e = text_to_num(exponent)
keydata = bytearray()
keydata.extend(struct.pack('>I', len('ssh-rsa')))
keydata.extend(b'ssh-rsa')
keydata.extend(struct.pack('>I', len(cryptutil.num_to_bytes(e))))
keydata.extend(cryptutil.num_to_bytes(e))
keydata.extend(struct.pack('>I', len(cryptutil.num_to_bytes(n)) + 1))
keydata.extend(b'\0')
keydata.extend(cryptutil.num_to_bytes(n))
keydata_base64 = base64.b64encode(bytebuffer(keydata))
fileutil.write_file(output_file,
ustr(b'ssh-rsa ' + keydata_base64 + b'\n',
encoding='utf-8'))
def deploy_ssh_pubkey(self, username, pubkey):
logger.info('deploy_ssh_pubkey')
username = 'admin'
path, thumbprint, value = pubkey
path = self._replace_user(path, username)
super(GaiaOSUtil, self).deploy_ssh_pubkey(
username, (path, thumbprint, value))
def eject_dvd(self, chk_err=True):
logger.warn('eject is not supported on GAiA')
def mount(self, dvd, mount_point, option="", chk_err=True):
logger.info('mount {0} {1} {2}', dvd, mount_point, option)
if 'udf,iso9660' in option:
ret, out = super(GaiaOSUtil, self).mount(
dvd, mount_point, option=option.replace('udf,iso9660', 'udf'),
chk_err=chk_err)
if not ret:
return ret, out
return super(GaiaOSUtil, self).mount(
dvd, mount_point, option=option, chk_err=chk_err)
def allow_dhcp_broadcast(self):
logger.info('allow_dhcp_broadcast is ignored on GAiA')
def remove_rules_files(self, rules_files=''):
pass
def restore_rules_files(self, rules_files=''):
logger.info('restore_rules_files is ignored on GAiA')
def restart_ssh_service(self):
return shellutil.run('/sbin/service sshd condrestart', chk_err=False)
def _address_to_string(self, addr):
return socket.inet_ntoa(struct.pack("!I", addr))
def _get_prefix(self, mask):
return str(sum([bin(int(x)).count('1') for x in mask.split('.')]))
def route_add(self, net, mask, gateway):
logger.info('route_add {0} {1} {2}', net, mask, gateway)
if net == 0 and mask == 0:
cidr = 'default'
else:
cidr = self._address_to_string(net) + '/' + self._get_prefix(
self._address_to_string(mask))
ret, out = self._run_clish(
'set static-route ' + cidr +
' nexthop gateway address ' +
self._address_to_string(gateway) + ' on')
return ret
def set_hostname(self, hostname):
logger.warn('set_hostname is ignored on GAiA')
def set_dhcp_hostname(self, hostname):
logger.warn('set_dhcp_hostname is ignored on GAiA')
def publish_hostname(self, hostname):
logger.warn('publish_hostname is ignored on GAiA')
def del_account(self, username):
logger.warn('del_account is ignored on GAiA')
|
