File manager - Edit - /usr/lib/python3/dist-packages/cloudinit/sources/helpers/__pycache__/azure.cpython-310.pyc
Back
o �Ad(� � @ s� d dl Z d dlZd dlZd dlZd dlZd dlZd dlZd dlZd dlZd dl Z d dl m Z d dl m Z d dl mZ d dlmZmZ d dlmZmZmZmZmZ d dlmZ d dlmZ d d lm Z m Z m Z m Z m Z m!Z!m"Z" d d l#m$Z$ d d l%m&Z& e�'e(�Z)d Z*d Z+dZ,dZ-dZ.dZ/dZ0e$j1dddd�Z2dZ3ed�Z4dede4f dede4f fd d �Z5d d � Z6e5d d!� �Z7e5d"d#� �Z8dd$�d%e9de$j:fd&d'�Z;d(d)� Z<e5e&d* fd+d,��Z=e5d-d.� �Z>e d/d0� �Z?d1d2� Z@e5dd3d4d5�d6e9d7eAd8eeB d9eCd:eCde jDf d;d<��ZEd=e9d>e9d?e9deBfd@dA�ZFG dBdC� dC�ZGG dDdE� dEeH�ZIG dFdG� dG�ZJG dHdI� dI�ZKG dJdK� dK�ZLG dLdM� dM�ZMe5 d_dNe9dOeee9 dPee9 fdQdR��ZNe5dNe9fdSdT��ZOdUdV� ZPG dWdX� dXeH�ZQG dYdZ� dZeH�ZRG d[d\� d\ejS�ZTG d]d^� d^�ZUdS )`� N)�contextmanager)�datetime)�ENOENT)�sleep�time)�Callable�List�Optional�TypeVar�Union)� ElementTree)�escape)�distros�dmi�subp� temp_utils� url_helper�util�version)�events)� CFG_BUILTINz 168.63.129.16�boot-telemetryz system-info� diagnostic� compressedi � z'/run/cloud-init/log_pushed_to_kvp_indexzazure-dsz initialize reporter for azure dsT)�name� description�reporting_enabledz�The VM encountered an error during deployment. Please visit https://aka.ms/linuxprovisioningerror for more information on remediation.�T�func.�returnc s � fdd�}|S )Nc sF t j� j� jtd�� � | i |��W d � S 1 s w Y d S )N�r r �parent)r �ReportEventStack�__name__�azure_ds_reporter)�args�kwargs�r � �A/usr/lib/python3/dist-packages/cloudinit/sources/helpers/azure.py�impl9 s � $�z)azure_ds_telemetry_reporter.<locals>.implr( )r r* r( r' r) �azure_ds_telemetry_reporter8 s r+ c C s\ | |krdS d dd�}|� d�}d�||d �||d �||d �|d |d g�}| |kS ) z� Azure stores the instance ID with an incorrect byte ordering for the first parts. This corrects the byte order such that it is consistent with that returned by the metadata service. F� c S s( dd� t �| d�D �}|�� d�|�S )Nc S s g | ]}|�qS r( r( )�.0�byter( r( r) � <listcomp>N s z<is_byte_swapped.<locals>.swap_bytestring.<locals>.<listcomp>r, � )�textwrap�wrap�reverse�join)�s�width�ddr( r( r) �swap_bytestringM s z(is_byte_swapped.<locals>.swap_bytestring�-r � � � N)r, )�splitr4 )� previous_id� current_idr8 �parts� swapped_idr( r( r) �is_byte_swappedD s �� rB c C s� t �� std��t�d� z tt� �tt�� � } W n t y+ } ztd�|�d}~ww z*t j g d�dd�\}}d}|rGd|v rG|� d�d }|sMtd ��| t|�d }W n& t j yj } ztd | �|�d}~w t y| } ztd | �|�d}~ww z*t j g d�dd�\}}d}|r�d|v r�|� d�d }|s�td��| t|�d }W n& t j y� } ztd| �|�d}~w t y� } ztd| �|�d}~ww t �tddt�| ��� d t�|��� d t�|��� d f t j�}t �|� |S )z[Report timestamps related to kernel initialization and systemd activation of cloud-initz1distro not using systemd, skipping boot telemetryzCollecting boot telemetryz*Failed to determine kernel start timestampN)� systemctl�show�-p�UserspaceTimestampMonotonicT)�capture�=r: z8Failed to parse UserspaceTimestampMonotonic from systemdi@B z-Failed to get UserspaceTimestampMonotonic: %sz<Failed to parse UserspaceTimestampMonotonic from systemd: %s)rC rD zcloud-init-localrE � InactiveExitTimestampMonotonicz;Failed to parse InactiveExitTimestampMonotonic from systemdz0Failed to get InactiveExitTimestampMonotonic: %sz?Failed to parse InactiveExitTimestampMonotonic from systemd: %sr z5kernel_start=%s user_start=%s cloudinit_activation=%s�Z)r � uses_systemd� RuntimeError�LOG�debug�floatr r �uptime� ValueErrorr r= �ProcessExecutionErrorr �ReportingEvent�BOOT_EVENT_TYPEr �utcfromtimestamp� isoformat�DEFAULT_EVENT_ORIGIN� report_event)� kernel_start�e�out�_�tsm� user_start�cloudinit_activation�evtr( r( r) �get_boot_telemetry` s� �� � �������� � ������������ ra c C sb t �� } t�tddt�� | d | d | d d | d d | d d | d f tj�}t�|� |S ) z%Collect and report system informationzsystem informationztcloudinit_version=%s, kernel_version=%s, variant=%s, distro_name=%s, distro_version=%s, flavor=%s, python_version=%s�release�variant�distr r: r, �python) r � system_infor rS �SYSTEMINFO_EVENT_TYPEr �version_stringrW rX )�infor` r( r( r) �get_system_info� s$ �� � rj �� logger_func�msgc C s6 t |�r|| � t�td| tj�}tj|dhd� |S )zReport a diagnostic eventzdiagnostic message�log��excluded_handler_types)�callabler rS �DIAGNOSTIC_EVENT_TYPErW rX )rm rl r` r( r( r) �report_diagnostic_event� s �rs c C sN t �t�|��}d|�d�d�}t�t| t� |�tj �}tj |h d�d� |S )zReport a compressed eventzgz+b64�ascii)�encoding�data> rn �print�webhookro ) �base64� encodebytes�zlib�compress�decoder rS �COMPRESSED_EVENT_TYPE�json�dumpsrW rX )� event_name� event_content�compressed_data� event_datar` r( r( r) �report_compressed_event� s ���r� � def_log_filec C sV t � }t�d� zNt| d��?}|�dtj� t|�� t |�}t d� |�� | |�tjd� |�|tj � t d|�� � t�tt|�� �� W d � n1 sPw Y W n tys } zt dt|� tjd� W Y d}~nd}~ww t�d � ztjd gd d d �\}}t d |� W dS ty� } zt dt|� tjd� W Y d}~dS d}~ww )az Push a portion of cloud-init.log file or the whole file to KVP based on the file size. The first time this function is called after VM boot, It will push the last n bytes of the log file such that n < MAX_LOG_TO_KVP_LENGTH If called again on the same boot, it continues from where it left off. In addition to cloud-init.log, dmesg log will also be collected.z"Dumping cloud-init.log file to KVP�rbr zMDumping last {0} bytes of cloud-init.log file to KVP starting from index: {1}rk zcloud-init.logNz#Exception when dumping log file: %szDumping dmesg log to KVP�dmesgFT)r} rG z$Exception when dumping dmesg log: %s)�%get_last_log_byte_pushed_to_kvp_indexrM rN �open�seek�os�SEEK_END�max�tell�MAX_LOG_TO_KVP_LENGTHrs �format�SEEK_SETr� �readr � write_file� LOG_PUSHED_TO_KVP_INDEX_FILE�str� Exception�repr�warningr )� file_name� start_index�f� seek_index�exr[ r\ r( r( r) �push_log_to_kvp� sD � �� ��� ���r� c C s z t td��} t| �� �W d � W S 1 sw Y W dS tyI } z |jtkr>tdt|� t j d� W Y d }~dS W Y d }~dS d }~w t yf } ztdt|� t j d� W Y d }~dS d }~w t y� } ztdt|� t j d� W Y d }~dS d }~ww )N�rz0Reading LOG_PUSHED_TO_KVP_INDEX_FILE failed: %s.rk z2Invalid value in LOG_PUSHED_TO_KVP_INDEX_FILE: %s.z2Failed to get the last log byte pushed to KVP: %s.r ) r� r� �intr� �IOError�errnor rs r� rM r� rQ r� )r� rZ r( r( r) r� s< $�� � ��� � �� ���r� c c s@ � t �� }t �t j�| �� z d V W t �|� d S t �|� w �N)r� �getcwd�chdir�path� expanduser)�newdir�prevdirr( r( r) �cd7 s �r� c C sx | � dd�}t|�dkr2d}|�d�D ]}t|�dkr d| }||7 }qt�dt|� dd�d��}n|�d �}t�|�S ) N�\r0 r< �:r: �0z>L� �utf-8) �replace�lenr= �struct�packr� �encode�socket� inet_ntoa)�fallback_lease_value�unescaped_value� hex_string�hex_pair� packed_bytesr( r( r) �get_ip_from_lease_valueA s r� � � )rv � retry_sleep�timeout_minutes�url�headersrv r� r� c C s� |d t � }d}d}|sT|d7 }z tj| ||dd�}W n7 tjyM } z$td| |||j|jf tjd� t � | |ksBd t |�v rC� W Y d}~nd}~ww t |� |r td | |f tjd� |S ) z�Readurl wrapper for querying wireserver. :param retry_sleep: Time to sleep before retrying. :param timeout_minutes: Retry up to specified number of minutes. :raises UrlError: on error fetching data. �< r Nr: )r� r� )r� rv �timeoutzdFailed HTTP request with Azure endpoint %s during attempt %d with exception: %s (code=%r headers=%r)rk zNetwork is unreachablez@Successful HTTP request with Azure endpoint %s after %d attempts) r r �readurl�UrlErrorrs �coder� rM rN r� r ) r� r� rv r� r� r� �attempt�responserZ r( r( r) �http_with_retriesO s@ ��� ���� ��r� �username�hostname� disableSshPwdc C s$ t �d�}|j| ||d�}|�d�S )Na. <ns0:Environment xmlns:ns0="http://schemas.dmtf.org/ovf/environment/1" xmlns:ns1="http://schemas.microsoft.com/windowsazure" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"> <ns1:ProvisioningSection> <ns1:Version>1.0</ns1:Version> <ns1:LinuxProvisioningConfigurationSet> <ns1:ConfigurationSetType>LinuxProvisioningConfiguration </ns1:ConfigurationSetType> <ns1:UserName>{username}</ns1:UserName> <ns1:DisableSshPasswordAuthentication>{disableSshPwd} </ns1:DisableSshPasswordAuthentication> <ns1:HostName>{hostname}</ns1:HostName> </ns1:LinuxProvisioningConfigurationSet> </ns1:ProvisioningSection> <ns1:PlatformSettingsSection> <ns1:Version>1.0</ns1:Version> <ns1:PlatformSettings> <ns1:ProvisionGuestAgent>true</ns1:ProvisionGuestAgent> </ns1:PlatformSettings> </ns1:PlatformSettingsSection> </ns0:Environment> )r� r� r� r� )r1 �dedentr� r� )r� r� r� �OVF_ENV_TEMPLATE�retr( r( r) �build_minimal_ovf� s �� r� c @ sL e Zd Zddd�Zdd� Zddejfdd �Z dd ee dejfd d �Z d S )�AzureEndpointHttpClient� WALinuxAgentz 2012-11-30)zx-ms-agent-namez x-ms-versionc C s d|d�| _ d S )N� DES_EDE3_CBC)zx-ms-cipher-namez!x-ms-guest-agent-public-x509-cert)�extra_secure_headers)�self� certificater( r( r) �__init__� s �z AzureEndpointHttpClient.__init__Fr c C s, | j }|r| j �� }|�| j� t||d�S )N)r� )r� �copy�updater� r� )r� r� �securer� r( r( r) �get� s zAzureEndpointHttpClient.getNrv c C s0 | j }|d ur| j �� }|�|� t|||d�S )N)rv r� )r� r� r� r� )r� r� rv � extra_headersr� r( r( r) �post� s z AzureEndpointHttpClient.post)F�NN) r# � __module__� __qualname__r� r� r � UrlResponser� r �bytesr� r( r( r( r) r� � s ����r� c @ s e Zd ZdZdS )� InvalidGoalStateXMLExceptionz9Raised when GoalState XML is invalid or has missing data.N)r# r� r� �__doc__r( r( r( r) r� � s r� c @ s: e Zd Z d deeef dededdfdd�Zd d � Z dS ) � GoalStateT� unparsed_xml�azure_endpoint_client�need_certificater Nc C s || _ zt�|�| _W n tjy" } z td| tjd� � d}~ww | �d�| _ | �d�| _ | �d�| _ dD ]}t | |�du rOd| }t|tjd� t |��q7d| _| �d �}|dur�|r�tjd d td �� | j j|d d�j| _| jdu rzt d��W d � dS 1 s�w Y dS dS dS )ah Parses a GoalState XML string and returns a GoalState object. @param unparsed_xml: string representing a GoalState XML. @param azure_endpoint_client: instance of AzureEndpointHttpClient. @param need_certificate: switch to know if certificates is needed. @return: GoalState object representing the GoalState XML string. z!Failed to parse GoalState XML: %srk Nz./Container/ContainerIdz4./Container/RoleInstanceList/RoleInstance/InstanceIdz ./Incarnation)� container_id� instance_id� incarnationzMissing %s in GoalState XMLzD./Container/RoleInstanceList/RoleInstance/Configuration/Certificateszget-certificates-xmlzget certificates xmlr T)r� z/Azure endpoint returned empty certificates xml.)r� r � fromstring�root� ParseErrorrs rM r� �_text_from_xpathr� r� r� �getattrr� �certificates_xmlr r" r$ r� �contents)r� r� r� r� rZ �attrrm r� r( r( r) r� � sX ��� � �� ��� ��"��zGoalState.__init__c C s | j �|�}|d ur |jS d S r� )r� �find�text)r� �xpath�elementr( r( r) r� s zGoalState._text_from_xpath)T) r# r� r� r r� r� r� �boolr� r� r( r( r( r) r� � s � ��� � 7r� c @ s� e Zd Zddd�Zdd� Zdd� Zedd � �Zejd d � �Ze d d � �Z e e d d� ��Z e dd� �Z e dd� �Ze dd� �Ze dd� �ZdS )�OpenSSLManagerzTransportPrivate.pemzTransportCert.pem)� private_keyr� c C s t �� | _d | _| �� d S r� )r �mkdtemp�tmpdir� _certificate�generate_certificate�r� r( r( r) r� s zOpenSSLManager.__init__c C s t �| j� d S r� )r �del_dirr� r r( r( r) �clean_up s zOpenSSLManager.clean_upc C s | j S r� �r� r r( r( r) r� s zOpenSSLManager.certificatec C s || _ d S r� r )r� �valuer( r( r) r� s c C s� t �d� | jd urt �d� d S t| j��: t�ddddddd d d d d | jd d| jd g� d}t| jd �D ] }d|vrE||�� 7 }q9|| _W d � n1 sSw Y t �d� d S )Nz7Generating certificate for communication with fabric...z Certificate already generated.�openssl�reqz-x509z-nodesz-subjz/CN=LinuxTransportz-days�32768z-newkeyzrsa:2048z-keyoutr� z-outr� r0 � CERTIFICATEzNew certificate generated.) rM rN r� r� r� r �certificate_namesr� �rstrip)r� r� �liner( r( r) r s< �� � �z#OpenSSLManager.generate_certificatec C s" ddd| g}t j ||d�\}}|S )Nr �x509z-noout�rv )r )�action�cert�cmd�resultr\ r( r( r) �_run_x509_action@ s z OpenSSLManager._run_x509_actionc C s* | � d|�}g d�}tj||d�\}}|S )Nz-pubkey)z ssh-keygenz-iz-m�PKCS8z-fz /dev/stdinr )r r )r� r� �pub_key� keygen_cmd�ssh_keyr\ r( r( r) �_get_ssh_key_from_certG s z%OpenSSLManager._get_ssh_key_from_certc C s6 | � d|�}|�d�}||d d� �d�}d�|�S )a openssl x509 formats fingerprints as so: 'SHA1 Fingerprint=07:3E:19:D1:4D:1C:79:92:24:C6:A0:FD:8D:DA: B6:A8:BF:27:D4:73 ' Azure control plane passes that fingerprint as so: '073E19D14D1C799224C6A0FD8DDAB6A8BF27D473' z -fingerprintrH r: ���r� r0 )r r� r= r4 )r� r� �raw_fp�eq�octetsr( r( r) �_get_fingerprint_from_certN s z)OpenSSLManager._get_fingerprint_from_certc C s� t �|��d�}|j}ddddd|�d�g}t| j�� tjdjd i | j ��d d � |�d �\}}W d � |S 1 s;w Y |S )z�Decrypt the certificates XML document using the our private key; return the list of certs and private keys contained in the doc. z.//Datas MIME-Version: 1.0s< Content-Disposition: attachment; filename="Certificates.p7m"s? Content-Type: application/x-pkcs7-mime; name="Certificates.p7m"s! Content-Transfer-Encoding: base64� r� zuopenssl cms -decrypt -in /dev/stdin -inkey {private_key} -recip {certificate} | openssl pkcs12 -nodes -password pass:T� )�shellrv Nr( ) r r� r� r� r� r� r� r r� r r4 )r� r� �tag�certificates_content�linesr[ r\ r( r( r) �_decrypt_certs_from_xml\ s. � �� � ��z&OpenSSLManager._decrypt_certs_from_xmlc C sv | � |�}g }i }|�� D ]+}|�|� t�d|�r g }q t�d|�r8d�|�}| �|�}| �|�}|||< g }q |S )z�Given the Certificates XML document, return a dictionary of fingerprints and associated SSH keys derived from the certs.z[-]+END .*?KEY[-]+$z[-]+END .*?CERTIFICATE[-]+$� )r$ � splitlines�append�re�matchr4 r r ) r� r� r[ �current�keysr r� r � fingerprintr( r( r) �parse_certificatesu s �z!OpenSSLManager.parse_certificatesN)r# r� r� r r� r �propertyr� �setterr+ r � staticmethodr r r r$ r- r( r( r( r) r� s. � r� c @ s� e Zd Ze�d�Ze�d�ZdZdZdZ dZ de de d e d d fd d �Zed dd��Zede d d fdd��Z d de de de de d ef dd�Zeded d fdd��Zd S ) �GoalStateHealthReportera� <?xml version="1.0" encoding="utf-8"?> <Health xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema"> <GoalStateIncarnation>{incarnation}</GoalStateIncarnation> <Container> <ContainerId>{container_id}</ContainerId> <RoleInstanceList> <Role> <InstanceId>{instance_id}</InstanceId> <Health> <State>{health_status}</State> {health_detail_subsection} </Health> </Role> </RoleInstanceList> </Container> </Health> z� <Details> <SubStatus>{health_substatus}</SubStatus> <Description>{health_description}</Description> </Details> �Ready�NotReady�ProvisioningFailedi � goal_stater� �endpointr Nc C s || _ || _|| _dS )a? Creates instance that will report provisioning status to an endpoint @param goal_state: An instance of class GoalState that contains goal state info such as incarnation, container id, and instance id. These 3 values are needed when reporting the provisioning status to Azure @param azure_endpoint_client: Instance of class AzureEndpointHttpClient @param endpoint: Endpoint (string) where the provisioning status report will be sent to @return: Instance of class GoalStateHealthReporter N)� _goal_state�_azure_endpoint_client� _endpoint)r� r5 r� r6 r( r( r) r� � s z GoalStateHealthReporter.__init__c C sv | j | jj| jj| jj| jd�}t�d� z| j|d� W n t y3 } z t d| tj d� � d }~ww t� d� d S )N)r� r� r� �statusz Reporting ready to Azure fabric.��documentz#exception while reporting ready: %srk z Reported ready to Azure fabric.) � build_reportr7 r� r� r� �PROVISIONING_SUCCESS_STATUSrM rN �_post_health_reportr� rs �errorri )r� r< rZ r( r( r) �send_ready_signal� s$ � ���z)GoalStateHealthReporter.send_ready_signalr c C sv | j | jj| jj| jj| j| j|d�}z| j|d� W n ty3 } z d| }t |t j d� � d }~ww t � d� d S )N)r� r� r� r: � substatusr r; z%exception while reporting failure: %srk z!Reported failure to Azure fabric.) r= r7 r� r� r� � PROVISIONING_NOT_READY_STATUS� PROVISIONING_FAILURE_SUBSTATUSr? r� rs rM r@ r� )r� r r< rZ rm r( r( r) �send_failure_signal� s" ���z+GoalStateHealthReporter.send_failure_signalr� r� r� r: c C sb d}|d ur| j jt|�t|d | j� �d�}| jjtt|��t|�t|�t|�|d�}|�d�S )Nr0 )�health_substatus�health_description)r� r� r� � health_status�health_detail_subsectionr� )�%HEALTH_DETAIL_SUBSECTION_XML_TEMPLATEr� r �"HEALTH_REPORT_DESCRIPTION_TRIM_LEN�HEALTH_REPORT_XML_TEMPLATEr� r� ) r� r� r� r� r: rB r � health_detail� health_reportr( r( r) r= � s �� � z$GoalStateHealthReporter.build_reportr< c C sH t � td� t�d� d�| j�}| jj||ddid� t�d� d S )Nr z&Sending health report to Azure fabric.z http://{}/machine?comp=healthz Content-Typeztext/xml; charset=utf-8)rv r� z/Successfully sent health report to Azure fabric)r� r rM rN r� r9 r8 r� )r� r< r� r( r( r) r? s �z+GoalStateHealthReporter._post_health_report�r Nr� )r# r� r� r1 r� rL rJ r> rC rD rK r� r� r� r� r+ rA rE r� r= r? r( r( r( r) r1 � sN �� ��� � ����� � r1 c @ s� e Zd Zdefdd�Zdd� Zed dd ��Ze d dee e fd d ��Z ed eddfd d��Z ede de fdd��Zedefdd��Zedeeef de de fdd��Zede dedefdd��Zedededefd d ��ZdS ) �WALinuxAgentShimr6 c C s || _ d | _d | _d S r� )r6 �openssl_managerr� )r� r6 r( r( r) r� , s zWALinuxAgentShim.__init__c C s | j d ur | j �� d S d S r� )rQ r r r( r( r) r 1 s �zWALinuxAgentShim.clean_upr Nc C sX zt �d� t�d|g� W d S ty+ } ztd| t jd� W Y d }~d S d }~ww )Nz Ejecting the provisioning iso�ejectz(Failed ejecting the provisioning iso: %srk )rM rN r r� rs )r� �iso_devrZ r( r( r) � eject_iso5 s ���zWALinuxAgentShim.eject_isoc C s� d}| j du r|durt� | _ | j j}| jdu r t|�| _| j|dud�}d}|dur1| �||�}t|| j| j�}|durB| � |� |� � |S )a� Gets the VM's GoalState from Azure, uses the GoalState information to report ready/send the ready signal/provisioning complete signal to Azure, and then uses pubkey_info to filter and obtain the user's pubkeys from the GoalState. @param pubkey_info: List of pubkey values and fingerprints which are used to filter and obtain the user's pubkey values from the GoalState. @return: The list of user's authorized pubkey values. N�r� ) rQ r� r� r� r� � _fetch_goal_state_from_azure�_get_user_pubkeysr1 r6 rT rA )r� � pubkey_inforS �http_client_certificater5 �ssh_keys�health_reporterr( r( r) �"register_with_azure_and_fetch_data@ s* �� � z3WALinuxAgentShim.register_with_azure_and_fetch_datar c C s@ | j du r td�| _ | jdd�}t|| j | j�}|j|d� dS )z�Gets the VM's GoalState from Azure, uses the GoalState information to report failure/send provisioning failure signal to Azure. @param: user visible error description of provisioning failure. NFrU �r )r� r� rV r1 r6 rE )r� r r5 r[ r( r( r) �®ister_with_azure_and_report_failuref s �z7WALinuxAgentShim.register_with_azure_and_report_failurer� c C s | � � }| �||�S )a Fetches the GoalState XML from the Azure endpoint, parses the XML, and returns a GoalState object. @param need_certificate: switch to know if certificates is needed. @return: GoalState object representing the GoalState XML )�"_get_raw_goal_state_xml_from_azure�_parse_raw_goal_state_xml)r� r� �unparsed_goal_state_xmlr( r( r) rV u s �z-WALinuxAgentShim._fetch_goal_state_from_azurec C s� t �d� d�| j�}z tjddtd�� | j�|�}W d � n1 s%w Y W n t yA } z t d| t j d� � d}~ww t � d � |j S ) z�Fetches the GoalState XML from the Azure endpoint and returns the XML as a string. @return: GoalState XML string zRegistering with Azure...z!http://{}/machine/?comp=goalstatezgoalstate-retrievalzretrieve goalstater Nz9failed to register with Azure and fetch GoalState XML: %srk z#Successfully fetched GoalState XML.)rM ri r� r6 r r" r$ r� r� r� rs r� rN r� )r� r� r� rZ r( r( r) r_ � s. � ������ z3WALinuxAgentShim._get_raw_goal_state_xml_from_azurera c C st z t || j|�}W n ty } z td| tjd� � d}~ww d�d|j d|j d|j g�}t|tj d� |S )a Parses a GoalState XML string and returns a GoalState object. @param unparsed_goal_state_xml: GoalState XML string @param need_certificate: switch to know if certificates is needed. @return: GoalState object representing the GoalState XML z"Error processing GoalState XML: %srk Nz, z GoalState XML container id: %sz GoalState XML instance id: %sz GoalState XML incarnation: %s) r� r� r� rs rM r� r4 r� r� r� rN )r� ra r� r5 rZ rm r( r( r) r` � s, ������z*WALinuxAgentShim._parse_raw_goal_state_xmlr5 rX c C sH g }|j dur"|dur"| jdur"t�d� | j�|j �}| �||�}|S )a� Gets and filters the VM admin user's authorized pubkeys. The admin user in this case is the username specified as "admin" when deploying VMs on Azure. See https://docs.microsoft.com/en-us/cli/azure/vm#az-vm-create. cloud-init expects a straightforward array of keys to be dropped into the admin user's authorized_keys file. Azure control plane exposes multiple public keys to the VM via wireserver. Select just the admin user's key(s) and return them, ignoring any other certs. @param goal_state: GoalState object. The GoalState object contains a certificate XML, which contains both the VM user's authorized pubkeys and other non-user pubkeys, which are used for MSI and protected extension handling. @param pubkey_info: List of VM user pubkey dicts that were previously obtained from provisioning data. Each pubkey dict in this list can either have the format pubkey['value'] or pubkey['fingerprint']. Each pubkey['fingerprint'] in the list is used to filter and obtain the actual pubkey value from the GoalState certificates XML. Each pubkey['value'] requires no further processing and is immediately added to the return list. @return: A list of the VM user's authorized pubkey values. Nz/Certificate XML found; parsing out public keys.)r� rQ rM rN r- �_filter_pubkeys)r� r5 rX rZ �keys_by_fingerprintr( r( r) rW � s � z"WALinuxAgentShim._get_user_pubkeysrc c C s| g }|D ]7}d|v r|d r|� |d � qd|v r5|d r5|d }|| v r.|� | | � qt�d|� qt�d|� q|S )a8 Filter and return only the user's actual pubkeys. @param keys_by_fingerprint: pubkey fingerprint -> pubkey value dict that was obtained from GoalState Certificates XML. May contain non-user pubkeys. @param pubkey_info: List of VM user pubkeys. Pubkey values are added to the return list without further processing. Pubkey fingerprints are used to filter and obtain the actual pubkey values from keys_by_fingerprint. @return: A list of the VM user's authorized pubkey values. r r, zIovf-env.xml specified PublicKey fingerprint %s not found in goalstate XMLzFovf-env.xml specified PublicKey with neither value nor fingerprint: %s)r' rM r� )rc rX r+ �pubkeyr, r( r( r) rb � s" ��z WALinuxAgentShim._filter_pubkeysrO r� )r# r� r� r� r� r r+ rT r r r\ r^ r� r� rV r� r_ r r` �listrW r0 �dictrb r( r( r( r) rP + sL � �%� � �� �!�� �) rP r6 rX rS c C s. t | d�}z |j||d�W |�� S |�� w )N�r6 )rX rS )rP r\ r )r6 rX rS �shimr( r( r) �get_metadata_from_fabric s �ri c C s4 t | d�}t}z |j|d� W |�� d S |�� w )Nrg r] )rP �+DEFAULT_REPORT_FAILURE_USER_VISIBLE_MESSAGEr^ r )r6 rh r r( r( r) �report_failure_to_fabric s rk c C s( t d| tjd� t d| tjd� d S )Nzdhclient output stream: %srk zdhclient error stream: %s)rs rM rN )r[ �errr( r( r) � dhcp_log_cb) s � �rm c @ � e Zd ZdS )�BrokenAzureDataSourceN�r# r� r� r( r( r( r) ro 2 � ro c @ rn )�NonAzureDataSourceNrp r( r( r( r) rr 6 rq rr c @ s& e Zd ZdZeded fdd��ZdS )�ChassisAssetTagz 7783-7084-3265-9085-8269-3286-77r c C sZ t �d�}z| |�}W n ty td| tjd� Y dS w td||jf tjd� |S )z�Check platform environment to report if this datasource may run. :returns: ChassisAssetTag if matching tag found, else None. zchassis-asset-tagz Non-Azure chassis asset tag: %rrk Nz Azure chassis asset tag: %r (%s))r � read_dmi_datarQ rs rM rN r )�cls� asset_tagr! r( r( r) � query_system= s �� �z ChassisAssetTag.query_systemN)r# r� r� � AZURE_CLOUD� classmethodr rw r( r( r( r) rs : s rs c @ s� e Zd Zddd�Zddddddddd�dee dee d ee d ee d ee d eee d edee ddfdd�Z defdd�Z e dedd fdd��Z d'dededefdd �Z d(deded ed efd d �Zd!d"� Zd#d$� Zd%d&� ZdS ))� OvfEnvXmlz)http://schemas.dmtf.org/ovf/environment/1z)http://schemas.microsoft.com/windowsazure)�ovf�waNF�r� �passwordr� � custom_data�disable_ssh_password_auth� public_keys�preprovisioned_vm�preprovisioned_vm_typer� r~ r� r r� r� r� r� r c C s8 || _ || _|| _|| _|| _|pg | _|| _|| _d S r� r} ) r� r� r~ r� r r� r� r� r� r( r( r) r� Z s zOvfEnvXml.__init__c C s | j |j kS r� )�__dict__)r� �otherr( r( r) �__eq__o s zOvfEnvXml.__eq__� ovf_env_xmlc C sp zt �|�}W n t jy } z d| }t|�|�d}~ww |�d| j�s)td��t� }|�|� |� |� |S )z�Parser for ovf-env.xml data. :raises NonAzureDataSource: if XML is not in Azure's format. :raises BrokenAzureDataSource: if XML is unparseable or invalid. zInvalid ovf-env.xml: %sNz./wa:ProvisioningSectionz=Ignoring non-Azure ovf-env.xml: ProvisioningSection not found) r r� r� ro r� � NAMESPACESrr rz �&_parse_linux_configuration_set_section� _parse_platform_settings_section)ru r� r� rZ � error_str�instancer( r( r) � parse_textr s ��� zOvfEnvXml.parse_textr| r �required� namespacec C sl |� d||f tj�}t|�dkr"d| }t�|� |r t|��d S t|�dkr2td|t|�f ��|d S )Nz./%s:%sr �#No ovf-env.xml configuration for %rr: �:Multiple configuration matches in ovf-exml.xml for %r (%d))�findallrz r� r� rM rN ro )r� �noder r� r� �matchesrm r( r( r) �_find� s � ��zOvfEnvXml._find� decode_base64� parse_boolc C s� |� d| tj�}t|�dkr d| }t�|� |r t|��|S t|�dkr0td|t|�f ��|d j} | d u r;|} |rK| d urKt� d� | � � ��} |rRt � | �} | S )Nz./wa:r r� r: r� r0 )r� rz r� r� rM rN ro r� ry � b64decoder4 r= r �translate_bool) r� r� r r� r� r� �defaultr� rm r r( r( r) �_parse_property� s* �� zOvfEnvXml._parse_propertyc C s� | j |ddd�}| j |ddd�}| j|dddd�| _| j|ddd�| _| j|d dd�| _| j|d dd�| _| j|d ddd �| _| �|� d S ) N�ProvisioningSectionT�r� �!LinuxProvisioningConfigurationSet� CustomDataF)r� r� �UserName� UserPassword�HostName� DisableSshPasswordAuthentication)r� r� )r� r� r r� r~ r� r� �_parse_ssh_section)r� r� �provisioning_section� config_setr( r( r) r� � s< �������z0OvfEnvXml._parse_linux_configuration_set_sectionc C sL | j |ddd�}| j |ddd�}| j|ddddd�| _| j|ddd�| _d S ) N�PlatformSettingsSectionTr� �PlatformSettings�PreprovisionedVmF)r� r� r� �PreprovisionedVMType)r� r� r� r� )r� r� �platform_settings_section�platform_settingsr( r( r) r� � s$ ��� �z*OvfEnvXml._parse_platform_settings_sectionc C s� g | _ | j|ddd�}|d u rd S | j|ddd�}|d u r d S |�dtj�D ]'}| j|ddd�}| j|ddd�}| j|dd dd �}|||d �}| j �|� q&d S ) N�SSHFr� � PublicKeysz./wa:PublicKey� Fingerprint�Path�Valuer0 )r� r� )r, r� r )r� r� r� rz r� r� r' ) r� r� � ssh_section�public_keys_section� public_keyr, r� r r r( r( r) r� � s2 ������z OvfEnvXml._parse_ssh_section)r| )FFN)r# r� r� r� r r� r� r� r rf r� r� ry r� r� r� r� r� r� r( r( r( r) rz T sr ������� � � � � ��� � ���� �$" rz r� )Vry �enumr �loggingr� r( r� r� r1 r{ � contextlibr r r� r r r �typingr r r r r � xml.etreer �xml.sax.saxutilsr � cloudinitr r r r r r r �cloudinit.reportingr �cloudinit.settingsr � getLoggerr# rM �DEFAULT_WIRESERVER_ENDPOINTrT rg rr r~ r� r� r" r$ rj r r+ rB ra rj r� rS rs r� r� r� r� r� rf r� r� r� r� r� r� r� r� r� r� r1 rP ri rk rm ro rr �Enumrs rz r( r( r( r) �<module> s� $ ��" S �� �( ������ �6��� �" ? " f�� � �
| ver. 1.4 |
Github
|
.
| PHP 8.2.28 | Generation time: 0.02 |
proxy
|
phpinfo
|
Settings