File: //usr/lib/python3/dist-packages/cloudinit/__pycache__/ssh_util.cpython-39.pyc
a
��`{5 � @ s� d dl Z d dlZd dlmZ d dlmZ e�e�ZdZ dZ
dZ de e � d Z
G d d
� d
e�ZG d d � d e�Zd
d� Zdd� Zdd� Zdd� Ze fdd�Zd%dd�ZG dd� de�Zdd � Zd d � Zd d � Ze fd!d"�Zd#d$� Z dS )&� N)�log)�utilz/etc/ssh/sshd_config)Zdsa�rsaZecdsaZed25519z(ecdsa-sha2-nistp256-cert-v01@openssh.comzecdsa-sha2-nistp256z(ecdsa-sha2-nistp384-cert-v01@openssh.comzecdsa-sha2-nistp384z(ecdsa-sha2-nistp521-cert-v01@openssh.comzecdsa-sha2-nistp521z+sk-ecdsa-sha2-nistp256-cert-v01@openssh.comz"sk-ecdsa-sha2-nistp256@openssh.comz#sk-ssh-ed25519-cert-v01@openssh.comzsk-ssh-ed25519@openssh.comz ssh-dss-cert-v01@openssh.comzssh-dssz ssh-ed25519-cert-v01@openssh.comz ssh-ed25519z ssh-rsa-cert-v01@openssh.comzssh-rsaz ssh-xmss-cert-v01@openssh.comzssh-xmss@openssh.com� z�no-port-forwarding,no-agent-forwarding,no-X11-forwarding,command="echo 'Please login as the user \"$USER\" rather than the user \"$DISABLE_USER\".';echo;sleep 10;exit �"c @ s& e Zd Zddd�Zdd� Zdd� ZdS ) � AuthKeyLineNc C s" || _ || _|| _|| _|| _d S �N)�base64�comment�options�keytype�source)�selfr
r r r
r � r �4/usr/lib/python3/dist-packages/cloudinit/ssh_util.py�__init__E s
zAuthKeyLine.__init__c C s | j o
| jS r )r r �r r r r �validM s zAuthKeyLine.validc C sd g }| j r|�| j � | jr(|�| j� | jr:|�| j� | jrL|�| j� |sV| jS d�|�S d S �N� )r �appendr r r
r
�join)r �toksr r r �__str__P s zAuthKeyLine.__str__)NNNN)�__name__�
__module__� __qualname__r r r r r r r r D s
�
r c @ s" e Zd ZdZdd� Zddd�ZdS )�AuthKeyLineParsera�
AUTHORIZED_KEYS FILE FORMAT
AuthorizedKeysFile specifies the file containing public keys for public
key authentication; if none is specified, the default is
~/.ssh/authorized_keys. Each line of the file contains one key (empty
(because of the size of the public key encoding) up to a limit of 8 kilo-
bytes, which permits DSA keys up to 8 kilobits and RSA keys up to 16
kilobits. You don't want to type them in; instead, copy the
identity.pub, id_dsa.pub, or the id_rsa.pub file and edit it.
sshd enforces a minimum RSA key modulus size for protocol 1 and protocol
2 keys of 768 bits.
The options (if present) consist of comma-separated option specifica-
tions. No spaces are permitted, except within double quotes. The fol-
lowing option specifications are supported (note that option keywords are
case-insensitive):
c C s� d}d}|t |�k r�|s$|| dvr�|| }|d t |�krF|d }q�||d }|dkrl|dkrl|d }n|dkrz| }|d }q|d|� }||d� �� }||fS )z�
The options (if present) consist of comma-separated option specifica-
tions. No spaces are permitted, except within double quotes.
Note that option keywords are case-insensitive.
Fr )r � � �\r N)�len�lstrip)r �ent�quoted�iZcurcZnextcr �remainr r r �_extract_optionst s( �
�
z"AuthKeyLineParser._extract_optionsNc C s� |� d�}|�d�s |�� dkr(t|�S dd� }|�� }z||�\}}}W n^ ty� | �|�\} }
|d u rr| }z||
�\}}}W n ty� t|� Y Y S 0 Y n0 t|||||d�S )Nz
�#� c S s^ | � d d�}t|�dk r(tdt|� ��|d tvrDtd|d ��t|�dkrZ|�d� |S )N� zTo few fields: %sr zInvalid keytype %sr) )�splitr! � TypeError�VALID_KEY_TYPESr )r# r r r r �
parse_ssh_key� s
z.AuthKeyLineParser.parse.<locals>.parse_ssh_key)r r r
r )�rstrip�
startswith�stripr r, r' ) r Zsrc_liner �liner. r# r r r
Zkeyoptsr& r r r �parse� s$
�zAuthKeyLineParser.parse)N)r r r �__doc__r' r3 r r r r r ` s r c
C sz g }t � }g }| D ]b}z8tj�|�rLt�|��� }|D ]}|�|�|�� q6W q t t
fyr t� t d|� Y q0 q|S )NzError reading lines from %s)
r �os�path�isfiler � load_file�
splitlinesr r3 �IOError�OSError�logexc�LOG)�fnames�lines�parser�contents�fnamer2 r r r �parse_authorized_keys� s rC c C s� t dd� |D ��}tdt| ��D ]J}| | }|�� s6q |D ]&}|j|jkr:|}||v r:|�|� q:|| |< q |D ]}| �|� qpdd� | D �}|�d� d�|�S )Nc S s g | ]}|� � r|�qS r )r ��.0�kr r r �
<listcomp>� � z*update_authorized_keys.<locals>.<listcomp>r c S s g | ] }t |��qS r ��str)rE �br r r rG � rH r) �
)�list�ranger! r r �remover r )Z old_entries�keysZto_addr% r# rF �keyr? r r r �update_authorized_keys� s
rR c C s4 t �| �}|r|js td| ��tj�|jd�|fS )Nz"Unable to get SSH info for user %rz.ssh)�pwd�getpwnam�pw_dir� RuntimeErrorr5 r6 r )�username�pw_entr r r �users_ssh_info� s
rY c C sp d|fd|fdf}| sd} | � � }g }|D ]@}|D ]\}}|�||�}q2|�d�s`tj�||�}|�|� q*|S )Nz%hz%u)z%%�%�%h/.ssh/authorized_keys�/)r+ �replacer0 r5 r6 r r ) �value�homedirrW Zmacros�paths�renderedr6 �macro�fieldr r r � render_authorizedkeysfile_paths� s
rd c C s� t | �\}}tj�|d�}g }tj|dd��f z"t|�}t|�dd�|j | �}W n2 t
t fy� ||d< t� t
dt|d � Y n0 W d � n1 s�0 Y |t|�fS )NZauthorized_keysT�� recursiveZauthorizedkeysfiler[ r zhFailed extracting 'AuthorizedKeysFile' in SSH config from %r, using 'AuthorizedKeysFile' file %r instead)rY r5 r6 r r � SeLinuxGuard�parse_ssh_config_maprd �getrU r: r; r< r= � DEF_SSHD_CFGrC )rW Z
sshd_cfg_file�ssh_dirrX Zdefault_authorizedkeys_fileZ auth_key_fnsZssh_cfgr r r �extract_authorized_keys� s
��(rl c C s� t |�\}}tj�|�s8tj|dd� t�||j|j� t � }g }| D ] }|�
|j t |�|d�� qFt
|�\}} tj|dd��R t| |�}
tjtj�|�dd� tj||
dd� t�||j|j� W d � n1 s�0 Y d S )Ni� )�mode)r Tre i� )rY r5 r6 �isdirr �
ensure_dir� chownbyid�pw_uid�pw_gidr r r3 rJ rl rg rR �dirname�
write_file) rP rW r rk �pwentr@ Z key_entriesrF Z auth_key_fnZauth_key_entries�contentr r r �setup_user_keys s
rw c @ s* e Zd Zddd�Zedd� �Zdd� ZdS ) �SshdConfigLineNc C s || _ || _|| _d S r )r2 �_keyr^ )r r2 rF �vr r r r ) s zSshdConfigLine.__init__c C s | j d u rd S | j �� S r )ry �lowerr r r r rQ . s
zSshdConfigLine.keyc C s> | j d u rt| j�S t| j �}| jr6|dt| j� 7 }|S d S r )ry rJ r2 r^ )r rz r r r r 5 s
zSshdConfigLine.__str__)NN)r r r r �propertyrQ r r r r r rx ( s
rx c C s" t j�| �sg S tt�| ��� �S r )r5 r6 r7 �parse_ssh_config_linesr r8 r9 )rB r r r �parse_ssh_config? s r~ c C s� g }| D ]t}|� � }|r"|�d�r2|�t|�� qz|�d d�\}}W n" tyh |�dd�\}}Y n0 |�t|||�� q|S )Nr( r �=)r1 r0 r rx r+ �
ValueError)r? �retr2 rQ �valr r r r} E s r} c C s6 t | �}|si S i }|D ]}|js$q|j||j< q|S r )r~ rQ r^ )rB r? r� r2 r r r rh X s rh c C sH t |�}t|| d�}|r<tj|d�dd� |D ��d dd� t|�dkS )z�Read fname, and update if changes are necessary.
@param updates: dictionary of desired values {Option: value}
@return: boolean indicating if an update was done.)r? �updatesrL c S s g | ] }t |��qS r rI )rE r2 r r r rG n rH z%update_ssh_config.<locals>.<listcomp>T)�
preserve_moder )r~ �update_ssh_config_linesr rt r r! )r� rB r? �changedr r r �update_ssh_configd s ���r� c C s t � }g }tdd� |�� D ��}t| dd�D ]v\}}|js<q,|j|v r,||j }|| }|�|� |j|kr~t�d|||� q,|� |� t�d|||j|� ||_q,t
|�t
|�k�r|� � D ]B\}}||v r�q�|� |� | � t d||�� t�dt
| �||� q�|S ) z�Update the SSH config lines per updates.
@param lines: array of SshdConfigLine. This array is updated in place.
@param updates: dictionary of desired values {Option: value}
@return: A list of keys in updates that were changed.c S s g | ]}|� � |f�qS r )r{ rD r r r rG } rH z+update_ssh_config_lines.<locals>.<listcomp>r )�startz$line %d: option %s already set to %sz#line %d: option %s updated %s -> %sr) z line %d: option %s added with %s)
�set�dictrP � enumeraterQ �addr^ r= �debugr r! �itemsrx ) r? r� �foundr� Zcasemapr% r2 rQ r^ r r r r� s s:
�
�
�r� )N) r5 rS � cloudinitr �loggingr � getLoggerr r= rj r- Z_DISABLE_USER_SSH_EXITrJ �DISABLE_USER_OPTS�objectr r rC rR rY rd rl rw rx r~ r} rh r� r� r r r r �<module> s6
��� U