| Current File : //usr/lib/python2.7/site-packages/cloudinit/sources/helpers/azure.pyo |
�
oB�]c @ s@ d d l Z d d l Z d d l Z d d l Z d d l Z d d l Z d d l Z d d l Z d d l m Z d d l
m Z d d l
m Z d d l
m Z d d l m Z d d l
m Z d d l
m Z d d l
m Z d d
l
m Z d d l m Z d d l m Z d d
l m Z e j e � Z d Z d Z d Z d Z e j! d d d d d e" � Z# d � Z$ d � Z% e$ d � � Z& e$ d � � Z' d � Z( e d � � Z) d � Z* d e+ f d � � YZ, d e+ f d! � � YZ- d" e+ f d# � � YZ. d$ e+ f d% � � YZ/ e$ d d d d& � � Z1 d' e+ f d( � � YZ2 d S() i����N( t dhcp( t stages( t
temp_utils( t contextmanager( t ElementTree( t
url_helper( t util( t version( t distros( t events( t EphemeralDHCPv4( t datetimes a8:3f:81:10s boot-telemetrys system-infot
diagnostict names azure-dst descriptions initialize reporter for azure dst reporting_enabledc s � f d � } | S( Nc s< t j d � j d � j d t � � � | | � SWd QXd S( NR
R t parent( R t ReportEventStackt __name__t azure_ds_reporter( t argst kwargs( t func( sC /usr/lib/python2.7/site-packages/cloudinit/sources/helpers/azure.pyt impl+ s
( ( R R ( ( R sC /usr/lib/python2.7/site-packages/cloudinit/sources/helpers/azure.pyt azure_ds_telemetry_reporter* s c C sy | | k r t Sd d � } | j d � } d j | | d � | | d � | | d � | d | d g � } | | k S( s�
Azure stores the instance ID with an incorrect byte ordering for the
first parts. This corrects the byte order such that it is consistent with
that returned by the metadata service.
i c S s< g t j | d � D] } | ^ q } | j � d j | � S( Ni t ( t textwrapt wrapt reverset join( t st widtht bytet dd( ( sC /usr/lib/python2.7/site-packages/cloudinit/sources/helpers/azure.pyt swap_bytestring= s %
t -i i i i ( t Falset splitR ( t previous_idt
current_idR" t partst
swapped_id( ( sC /usr/lib/python2.7/site-packages/cloudinit/sources/helpers/azure.pyt is_byte_swapped4 s
c
C s} t j � s t d � � n t j d � y& t t j � � t t j � � } Wn t k
rm t d � � n Xy� t j
d d d d g d t �\ } } d } | r� d | k r� | j
d � d
} n | s� t d � � n | t | � d } WnH t j k
r} t d
| � � n# t k
r:} t d | � � n Xy� t j
d d d d d g d t �\ } } d } | r�d | k r�| j
d � d
} n | s�t d � � n | t | � d } WnH t j k
r�} t d | � � n# t k
r
} t d | � � n Xt j t d d t j | � j � d t j | � j � d t j | � j � d f t j � } t j | � | S( s^ Report timestamps related to kernel initialization and systemd
activation of cloud-inits1 distro not using systemd, skipping boot telemetrys Collecting boot telemetrys* Failed to determine kernel start timestamps /bin/systemctlt shows -pt UserspaceTimestampMonotonict capturet =i s8 Failed to parse UserspaceTimestampMonotonic from systemdi@B s- Failed to get UserspaceTimestampMonotonic: %ss< Failed to parse UserspaceTimestampMonotonic from systemd: %ss cloud-init-localt InactiveExitTimestampMonotonics; Failed to parse InactiveExitTimestampMonotonic from systemds0 Failed to get InactiveExitTimestampMonotonic: %ss? Failed to parse InactiveExitTimestampMonotonic from systemd: %ss boot-telemetrys5 kernel_start=%s user_start=%s cloudinit_activation=%st ZN( R t uses_systemdt RuntimeErrort LOGt debugt floatt timeR t uptimet
ValueErrort subpt Truet NoneR% t ProcessExecutionErrorR t ReportingEventt BOOT_EVENT_TYPER t utcfromtimestampt isoformatt DEFAULT_EVENT_ORIGINt report_event( t kernel_startt outt _t tsmt
user_startt et cloudinit_activationt evt( ( sC /usr/lib/python2.7/site-packages/cloudinit/sources/helpers/azure.pyt get_boot_telemetryN sf
&
c C s{ t j � } t j t d d t j � | d | d | d d | d d | d d | d f t j � } t j | � | S(
s% Collect and report system informations system informationst cloudinit_version=%s, kernel_version=%s, variant=%s, distro_name=%s, distro_version=%s, flavor=%s, python_version=%st releaset variantt disti i i t python( R t system_infoR R= t SYSTEMINFO_EVENT_TYPER t version_stringRA RB ( t infoRJ ( ( sC /usr/lib/python2.7/site-packages/cloudinit/sources/helpers/azure.pyt get_system_info� s !
c C s, t j t d | t j � } t j | � | S( s Report a diagnostic events diagnostic message( R R= t DIAGNOSTIC_EVENT_TYPERA RB ( t strRJ ( ( sC /usr/lib/python2.7/site-packages/cloudinit/sources/helpers/azure.pyt report_diagnostic_event� s
c c sC t j � } t j t j j | � � z d VWd t j | � Xd S( N( t ost getcwdt chdirt patht
expanduser( t newdirt prevdir( ( sC /usr/lib/python2.7/site-packages/cloudinit/sources/helpers/azure.pyt cd� s
c C s t j � r d } n d } | S( Ns
option-245s unknown-245( R t
is_FreeBSD( t azure_endpoint( ( sC /usr/lib/python2.7/site-packages/cloudinit/sources/helpers/azure.pyt _get_dhcp_endpoint_option_name� s t AzureEndpointHttpClientc B s@ e Z i d d 6d d 6Z d � Z e d � Z d d d � Z RS( t WALinuxAgents x-ms-agent-names
2012-11-30s x-ms-versionc C s i d d 6| d 6| _ d S( Nt DES_EDE3_CBCs x-ms-cipher-names! x-ms-guest-agent-public-x509-cert( t extra_secure_headers( t selft certificate( ( sC /usr/lib/python2.7/site-packages/cloudinit/sources/helpers/azure.pyt __init__� s c C sP | j } | r1 | j j � } | j | j � n t j | d | d d d d �S( Nt headerst timeouti t retriesi
( Rj t copyt updateRf R t read_file_or_url( Rg t urlt secureRj ( ( sC /usr/lib/python2.7/site-packages/cloudinit/sources/helpers/azure.pyt get� s c
C sY | j } | d k r4 | j j � } | j | � n t j | d | d | d d d d �S( Nt dataRj Rk i Rl i
( Rj R; Rm Rn R Ro ( Rg Rp Rs t
extra_headersRj ( ( sC /usr/lib/python2.7/site-packages/cloudinit/sources/helpers/azure.pyt post� s N( R t
__module__Rj Ri R$ Rr R; Ru ( ( ( sC /usr/lib/python2.7/site-packages/cloudinit/sources/helpers/azure.pyRc � s
t GoalStatec B sV e Z d � Z d � Z e d � � Z e d � � Z e d � � Z e d � � Z RS( c C s( | | _ t j | � | _ d | _ d S( N( t http_clientR t
fromstringt rootR; t _certificates_xml( Rg t xmlRx ( ( sC /usr/lib/python2.7/site-packages/cloudinit/sources/helpers/azure.pyRi � s c C s) | j j | � } | d k r% | j Sd S( N( Rz t findR; t text( Rg t xpatht element( ( sC /usr/lib/python2.7/site-packages/cloudinit/sources/helpers/azure.pyt _text_from_xpath� s c C s
| j d � S( Ns ./Container/ContainerId( R� ( Rg ( ( sC /usr/lib/python2.7/site-packages/cloudinit/sources/helpers/azure.pyt container_id� s c C s
| j d � S( Ns
./Incarnation( R� ( Rg ( ( sC /usr/lib/python2.7/site-packages/cloudinit/sources/helpers/azure.pyt incarnation� s c C s
| j d � S( Ns4 ./Container/RoleInstanceList/RoleInstance/InstanceId( R� ( Rg ( ( sC /usr/lib/python2.7/site-packages/cloudinit/sources/helpers/azure.pyt instance_id� s c C sU | j d k rN | j d � } | d k rN | j j | d t �j | _ qN n | j S( NsD ./Container/RoleInstanceList/RoleInstance/Configuration/CertificatesRq ( R{ R; R� Rx Rr R: t contents( Rg Rp ( ( sC /usr/lib/python2.7/site-packages/cloudinit/sources/helpers/azure.pyt certificates_xml� s ( R Rv Ri R� t propertyR� R� R� R� ( ( ( sC /usr/lib/python2.7/site-packages/cloudinit/sources/helpers/azure.pyRw � s t OpenSSLManagerc B s� e Z i d d 6d d 6Z d � Z d � Z e d � � Z e e d � � � Z e d � � Z e d � � Z
e d
� � Z e d � � Z RS( s TransportPrivate.pemt private_keys TransportCert.pemRh c C s& t j � | _ d | _ | j � d S( N( R t mkdtempt tmpdirR; Rh t generate_certificate( Rg ( ( sC /usr/lib/python2.7/site-packages/cloudinit/sources/helpers/azure.pyRi s c C s t j | j � d S( N( R t del_dirR� ( Rg ( ( sC /usr/lib/python2.7/site-packages/cloudinit/sources/helpers/azure.pyt clean_up s c C s� t j d � | j d k r- t j d � d St | j � �� t j d d d d d d d d
d d d
| j d d | j d g � d } x: t | j d � D]% } d | k r� | | j
� 7} q� q� W| | _ Wd QXt j d � d S( Ns7 Generating certificate for communication with fabric...s Certificate already generated.t opensslt reqs -x509s -nodess -subjs /CN=LinuxTransports -dayst 32768s -newkeys rsa:2048s -keyoutR� s -outRh R t CERTIFICATEs New certificate generated.( R3 R4 Rh R; R_ R� R R9 t certificate_namest opent rstrip( Rg Rh t line( ( sC /usr/lib/python2.7/site-packages/cloudinit/sources/helpers/azure.pyR� s
c C s1 d d d | g } t j | d | �\ } } | S( NR� t x509s -nooutRs ( R R9 ( t actiont certt cmdt resultRE ( ( sC /usr/lib/python2.7/site-packages/cloudinit/sources/helpers/azure.pyt _run_x509_action* s c C sI | j d | � } d d d d d d g } t j | d | �\ } } | S( Ns -pubkeys
ssh-keygens -is -mt PKCS8s -fs
/dev/stdinRs ( R� R R9 ( Rg Rh t pub_keyt
keygen_cmdt ssh_keyRE ( ( sC /usr/lib/python2.7/site-packages/cloudinit/sources/helpers/azure.pyt _get_ssh_key_from_cert1 s c C sH | j d | � } | j d � } | | d d !j d � } d j | � S( s openssl x509 formats fingerprints as so:
'SHA1 Fingerprint=07:3E:19:D1:4D:1C:79:92:24:C6:A0:FD:8D:DA: B6:A8:BF:27:D4:73
'
Azure control plane passes that fingerprint as so:
'073E19D14D1C799224C6A0FD8DDAB6A8BF27D473'
s -fingerprintR. i i����t :R ( R� R} R% R ( Rg Rh t raw_fpt eqt octets( ( sC /usr/lib/python2.7/site-packages/cloudinit/sources/helpers/azure.pyt _get_fingerprint_from_cert8 s c C s� t j | � j d � } | j } d d d d d | j d � g } t | j � �; t j d j | j
� d t d
d j | � �\ } } Wd QX| S(
s� Decrypt the certificates XML document using the our private key;
return the list of certs and private keys contained in the doc.
s .//Datas MIME-Version: 1.0s< Content-Disposition: attachment; filename="Certificates.p7m"s? Content-Type: application/x-pkcs7-mime; name="Certificates.p7m"s! Content-Transfer-Encoding: base64R s utf-8su openssl cms -decrypt -in /dev/stdin -inkey {private_key} -recip {certificate} | openssl pkcs12 -nodes -password pass:t shellRs s
N(
R Ry R} R~ t encodeR_ R� R R9 t formatR� R: R ( Rg R� t tagt certificates_contentt linesRD RE ( ( sC /usr/lib/python2.7/site-packages/cloudinit/sources/helpers/azure.pyt _decrypt_certs_from_xmlF s $c C s� | j | � } g } i } x� | j � D]� } | j | � t j d | � rV g } q( t j d | � r( d j | � } | j | � } | j | � } | | | <g } q( q( W| S( s� Given the Certificates XML document, return a dictionary of
fingerprints and associated SSH keys derived from the certs.s [-]+END .*?KEY[-]+$s [-]+END .*?CERTIFICATE[-]+$s
( R� t
splitlinest appendt ret matchR R� R� ( Rg R� RD t currentt keysR� Rh R� t fingerprint( ( sC /usr/lib/python2.7/site-packages/cloudinit/sources/helpers/azure.pyt parse_certificates] s
(
R Rv R� Ri R� R R� t staticmethodR� R� R� R� R� ( ( ( sC /usr/lib/python2.7/site-packages/cloudinit/sources/helpers/azure.pyR� s
t WALinuxAgentShimc B s% e Z d j d d d d d d d d d d
d d d
d d g � Z d d d � Z d � Z e d � � Z e d � � Z
e d � � Z e e d d � � � Z
e e d � � � Z e e d � � � Z e e d � � � Z e e d d d � � � Z e d d � � Z d � Z e d � � Z RS( s
s& <?xml version="1.0" encoding="utf-8"?>sk <Health xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema">s< <GoalStateIncarnation>{incarnation}</GoalStateIncarnation>s
<Container>s- <ContainerId>{container_id}</ContainerId>s <RoleInstanceList>s <Role>s. <InstanceId>{instance_id}</InstanceId>s <Health>s <State>Ready</State>s </Health>s
</Role>s </RoleInstanceList>s </Container>s </Health>c C s8 t j d | � | | _ d | _ d | _ | | _ d S( Ns5 WALinuxAgentShim instantiated, fallback_lease_file=%s( R3 R4 t dhcpoptionsR; t _endpointt openssl_managert
lease_file( Rg t fallback_lease_filet dhcp_options( ( sC /usr/lib/python2.7/site-packages/cloudinit/sources/helpers/azure.pyRi � s c C s# | j d k r | j j � n d S( N( R� R; R� ( Rg ( ( sC /usr/lib/python2.7/site-packages/cloudinit/sources/helpers/azure.pyR� � s c C s( t j � } t j j | j j � d � S( Ns dhclient.hooks( R t InitRX R[ R t pathst get_runpath( t _paths( ( sC /usr/lib/python2.7/site-packages/cloudinit/sources/helpers/azure.pyt _get_hooks_dir� s c C s4 | j d k r- | j | j | j � | _ n | j S( N( R� R; t
find_endpointR� R� ( Rg ( ( sC /usr/lib/python2.7/site-packages/cloudinit/sources/helpers/azure.pyt endpoint� s c C s� | j d d � } t | � d k r� d } x@ | j d � D]/ } t | � d k r_ d | } n | | 7} q: Wt j d t | j d d � d � � } n | j d � } t j | � S(
Ns \R i R� i t 0s >Li s utf-8( t replacet lenR% t structt packt intR� t sockett inet_ntoa( t fallback_lease_valuet unescaped_valuet
hex_stringt hex_pairt packed_bytes( ( sC /usr/lib/python2.7/site-packages/cloudinit/sources/helpers/azure.pyt get_ip_from_lease_value� s
$c C s t j d d | �S( Nt
OPTION_245t leases_d( R t networkd_get_option_from_leases( R� ( ( sC /usr/lib/python2.7/site-packages/cloudinit/sources/helpers/azure.pyt _networkd_get_value_from_leases� s c C s� g } y t j | � } Wn' t k
rB } t j d | | � d SXt j d | � t � } xR | j � D]D } | | k ri | j | j
d � j d d � d j
d � � qi qi Wt | � d k r� d S| d Sd S( Ns Failed to read %s: %ss
content is %st i i����s ;
"i (
R t load_filet IOErrorR3 t errorR; R4 Rb R� R� t stripR% R� ( R� t leasest contentt ext option_nameR� ( ( sC /usr/lib/python2.7/site-packages/cloudinit/sources/helpers/azure.pyt _get_value_from_leases_file� s 6c C s� i } t j � } t j j | � s8 t j d | � d Sg t j | � D] } t j j | | � ^ qH } xx | D]p } y> t j j
| � j d d � } t j
t j | � � | | <Wqp t k
r� t d j d | � � � qp Xqp W| S( Ns
%s not found.s .jsonR s {_file} is not valid JSON datat _file( R� R� RX R[ t existsR3 R4 R; t listdirR t basenameR� t jsont loadsR R� R8 R� ( R� t hooks_dirt xt
hook_filest hook_fileR
( ( sC /usr/lib/python2.7/site-packages/cloudinit/sources/helpers/azure.pyt _load_dhclient_json� s .
c C s^ | d k r d Sd } xA | D]9 } | | j d d � } | d k r t j d � Pq q W| S( Nt unknown_245s) Endpoint server found in dhclient options( R; Rr R3 R4 ( R� t _valuet interface( ( sC /usr/lib/python2.7/site-packages/cloudinit/sources/helpers/azure.pyt _get_value_from_dhcpoptions� s
c C sh d } | d k r( | } t j d � n | d k rZ t d � t j d � t j � } n | d k r� t d � t j d � t j � } t j | � } n | d k rt d � t j d � | d k r� t j d � d } qt j d | � t j | � } n | d k r4d
} t | � t j | � t
} n t j | � } d | } t | � t j | � | S( Ns& Using Azure Endpoint from dhcp optionss# No Azure endpoint from dhcp optionss' Finding Azure endpoint from networkd...s No Azure endpoint from networkds( Finding Azure endpoint from hook json...s$ No Azure endpoint from dhclient logssL Unable to find endpoint in dhclient logs. Falling back to check lease filess% No fallback lease file was specified.s% Looking for endpoint in lease file %ss& No lease found; using default endpoints Azure endpoint found at %s( R; R3 R4 RW R� R� R� R� t warningR� t DEFAULT_WIRESERVER_ENDPOINTR� ( R� t dhcp245t valueR� t msgt endpoint_ip_address( ( sC /usr/lib/python2.7/site-packages/cloudinit/sources/helpers/azure.pyR� � sB
c C sd | j d k r t � | _ n t | j j � } t j d � d } x{ t r� y | j d j | j
� � } WnD t k
r� } | d k r� t j
| d � q� t d | � � n XP| d 7} qF Wt j d � t | j | � } t d | j � g } | j d k rI| d k rIt j d � | j j | j � } | j | | � } n | j | | � i | d
6S( Ns Registering with Azure...i s" http://{0}/machine/?comp=goalstatei
i s! failed to register with Azure: %ss# Successfully fetched GoalState XML.s container_id %ss/ Certificate XML found; parsing out public keys.s public-keys( R� R; R� Rc Rh R3 RS R: Rr R� R� t ExceptionR6 t sleepRW R4 Rw R� R� R� R� t _filter_pubkeyst
_report_ready( Rg t pubkey_infoRx t attemptst responseRH t
goal_statet ssh_keyst keys_by_fingerprint( ( sC /usr/lib/python2.7/site-packages/cloudinit/sources/helpers/azure.pyt" register_with_azure_and_fetch_data s8
c C s� g } x� | D]� } d | k r= | d r= | j | d � q
d | k r� | d r� | d } | | k r} | j | | � q� t j d | � q
t j d | � q
W| S( s$ cloud-init expects a straightforward array of keys to be dropped
into the user's authorized_keys file. Azure control plane exposes
multiple public keys to the VM via wireserver. Select just the
user's key(s) and return them, ignoring any other certs.
R� R� sI ovf-env.xml specified PublicKey fingerprint %s not found in goalstate XMLsF ovf-env.xml specified PublicKey with neither value nor fingerprint: %s( R� R3 R� ( Rg R� R� R� t pubkeyR� ( ( sC /usr/lib/python2.7/site-packages/cloudinit/sources/helpers/azure.pyR� 7 s
c C s� t j d � | j j d | j d | j d | j � } t j d � y0 | j d j | j
� d | d i d d
6�Wn$ t k
r� } t d | � � n Xt j
d � d S(
Ns Reporting ready to Azure fabric.R� R� R� i s http://{0}/machine?comp=healthRs Rt s text/xml; charset=utf-8s Content-Types# exception while reporting ready: %ss Reported ready to Azure fabric.( R3 R4 t REPORT_READY_XML_TEMPLATER� R� R� R� R6 R� Ru R� R� RW RS ( Rg R� Rx t documentRH ( ( sC /usr/lib/python2.7/site-packages/cloudinit/sources/helpers/azure.pyR� N s
N( R Rv R R R; Ri R� R� R� R� R� R� R R� R� R� R� R� R R� R� ( ( ( sC /usr/lib/python2.7/site-packages/cloudinit/sources/helpers/azure.pyR� r sJ
) c C s; t d | d | � } z | j d | � SWd | j � Xd S( NR� R� R� ( R� R R� ( R� t dhcp_optsR� t shim( ( sC /usr/lib/python2.7/site-packages/cloudinit/sources/helpers/azure.pyt get_metadata_from_fabricg s
t EphemeralDHCPv4WithReportingc B s& e Z d d � Z d � Z d � Z RS( c C s | | _ t d | � | _ d S( Nt iface( t reporterR
t ephemeralDHCPv4( Rg R t nic( ( sC /usr/lib/python2.7/site-packages/cloudinit/sources/helpers/azure.pyRi s s c C s9 t j d d d d d | j � � | j j � SWd QXd S( NR
s obtain-dhcp-leaseR s obtain dhcp leaseR ( R R R R
t __enter__( Rg ( ( sC /usr/lib/python2.7/site-packages/cloudinit/sources/helpers/azure.pyR w s
c C s | j j | | | � d S( N( R
t __exit__( Rg t excp_typet
excp_valuet excp_traceback( ( sC /usr/lib/python2.7/site-packages/cloudinit/sources/helpers/azure.pyR
~ s N( R Rv R; Ri R R
( ( ( sC /usr/lib/python2.7/site-packages/cloudinit/sources/helpers/azure.pyR r s (3 R� t loggingRX R� R� R� R6 R t
cloudinit.netR t cloudinitR R t
contextlibR t xml.etreeR R R R R t cloudinit.reportingR t cloudinit.net.dhcpR
R t getLoggerR R3 R� R> RQ RU R R: R R R* RK RT RW R_ Rb t objectRc Rw R� R� R; R R ( ( ( sC /usr/lib/python2.7/site-packages/cloudinit/sources/helpers/azure.pyt <module> sV
F
&k�