File: //usr/lib/python3.9/site-packages/cockpit/__pycache__/beiboot.cpython-39.pyc
a
�/�h�X � @ sj d dl Z d dlZd dlZd dlZd dlZd dlZd dlZd dlZd dl Z d dl
Z
d dl m Z d dl
mZmZmZmZmZ d dlmZ d dlmZ d dlmZ d dlmZ d dlm Z m Z d d l m Z d d
l m!Z! d d l"m#Z#m$Z$ d d l%m&Z& d d
l'm(Z(m)Z)m*Z* d dl+m,Z, d dl-m.Z.m/Z/ d dl0m1Z1m2Z2 d dl3m4Z4 e�5d�Z6e d�dd�Z7ee8 d�dd�Z9G dd� de)�Z:ddd d �ej;�Z;G d d � d e2�Z<G d d!� d!ej=�Z>e8e?ee8 ee8 f d"�d#d$�Z@ee8 e8e e8e?ee8 ee8 f d%�d&d'�ZAee8 ee8 e?ee8 ee8 f d(�d)d*�ZBG d+d,� d,e,�ZCG d-d.� d.e1�ZDdd�d/d0�ZEdd�d1d2�ZFeGd3k�rfeF� dS )4� N)�Path)�Dict�Iterable�Literal�Optional�Sequence)� polyfills)�ferny)�
bootloader)�BridgeBeibootHelper)�parse_os_release�
setup_logging)�ChannelRoutingRule)�PackagesChannel)�
JsonObject�get_str)�supported_oses)�Packages�PackagesLoader�patch_libexecdir)�Peer)�CockpitProblem�CockpitProtocolError)�Router� RoutingRule)�StdioTransportzcockpit.beiboot��returnc C s� t j�tj�d } | �� }tj�d�}|du r:tj �
d�}tj |dd� t |d�}t
�d|� z:|�� |krzt
�d � t�|�� jd
@ s�t
�d � t�W n4 ttfy� t
�d � |�|� |�d
� Y n0 |S )z�Create askpass executable
We need this for the flatpak: ssh and thus the askpass program run on the host (via flatpak-spawn),
not the flatpak. Thus we cannot use the shipped cockpit-askpass program.
zinteraction_client.pyZXDG_CACHE_HOMENz~/.cacheT)�exist_okzcockpit-client-askpasszChecking if %s exists...z. ... it exists but is not the same version...�@ z; ... it has the correct contents, but is not executable...z ... writing contents.i� )� importlibZ resources�filesr �__name__�
read_bytes�os�environ�get�path�
expanduser�makedirsr �logger�debug�
ValueError�stat�st_mode�FileNotFoundError� write_bytes�chmod)Zsrc_pathZsrc_dataZxdg_cache_homeZ dest_path� r2 �3/usr/lib/python3.9/site-packages/cockpit/beiboot.py�ensure_ferny_askpass1 s(
r4 c c s< t �� D ].} | jD ]"}|jdv rt|jt�r|jV qqd S )N)� path-exists�path-not-exists)r Zload_manifestsZ
conditions�name�
isinstance�value�str)Zmanifest� conditionr2 r2 r3 �get_interesting_filesS s
r< c @ sF e Zd ZU eeef ed< eeed�dd�Zeeef d�dd�Z dS ) �ProxyPackagesLoader� file_status)r; r9 r c C sJ t |t�sJ �|| jv s J �|dkr.| j| S |dkrB| j| S t�d S )Nr5 r6 )r8 r: r> �KeyError)�selfr; r9 r2 r2 r3 �check_condition] s
z#ProxyPackagesLoader.check_condition�r> c C s
|| _ d S �NrB )r@ r> r2 r2 r3 �__init__h s z ProxyPackagesLoader.__init__N)
r" �
__module__� __qualname__r r: �bool�__annotations__�objectrA rD r2 r2 r2 r3 r= Z s
r= z�
import os
def report_exists(files):
command('cockpit.report-exists', {name: os.path.exists(name) for name in files})
z�
import os
def check_os_release(_argv):
try:
with open('/etc/os-release') as f:
command('cockpit.check-os-release', f.read())
except OSError:
command('cockpit.check-os-release', "")
z�
import os
def force_exec(argv):
try:
os.execvp(argv[0], argv)
except OSError as e:
command('cockpit.fail-no-cockpit', str(e))
)�
report_exists�check_os_release�
force_execc sJ e Zd ZU ded< ed�� fdd� Zedd�dd�Zd d
�d d �Z� Z S )
�DefaultRoutingRulez Peer | None�peer)�routerc s t � �|� d S rC )�superrD )r@ rO �� __class__r2 r3 rD � s zDefaultRoutingRule.__init__)�optionsr c C s | j S rC )rN )r@ rS r2 r2 r3 �
apply_rule� s z DefaultRoutingRule.apply_ruleNr c C s | j d ur| j �� d S rC )rN �close�r@ r2 r2 r3 �shutdown� s
zDefaultRoutingRule.shutdown)
r" rE rF rH r rD r rT rW �
__classcell__r2 r2 rQ r3 rM � s
rM c @ s` e Zd ZU dZeed< eee d�dd�Zeeeee d�dd�Z ee
e e ed d
�d d �Z
d S )
�AuthorizeResponder)z
ferny.askpass�cockpit.report-exists�cockpit.fail-no-cockpit�cockpit.check-os-releaserO )rO �basic_passwordc C s || _ || _|d u| _d S rC )rO r] �have_basic_password)r@ rO r] r2 r2 r3 rD � s zAuthorizeResponder.__init__)�messages�prompt�hintr c � sv t �d|||� | jrHd|�� v rH| jd urHt �d|� | j}d | _|S |dkrTd S t�d|�}t�d|�}i }|r�|r�|�d�}|dkr�t �d |� d
S |� d |�d�� d �|d
< |�d�|d< t� � � dt
�
� � �} d| � �}
|
d t � |�
� ��� } | jj| fd |||dd�|��I d H } | �|
��sBtd| � d|
� ���| �|
��� }
t �|
�
� ��� } t �dt| �� | S )Nz3AuthorizeResponder: prompt %r, messages %r, hint %rz password:z=AuthorizeResponder: sending Basic auth password for prompt %rZnonez$\n(\w+) key fingerprint is ([^.]+)\.z authenticity of host '([^ ]+) � z 127.0.0.1z,auto-accepting fingerprint for 127.0.0.1: %sZyes� z login-datazhost-key� �default�-zX-Conversation F)�timeoutr_ r` ra Zechoz AuthorizeResponder: response z does not match challenge z Returning a %d chars response)r* r+ r^ �lowerr] �re�search�groupr$ �getpid�time�base64Z b64encode�encode�decoderO Zrequest_authorization�
startswithr � removeprefix�strip� b64decode�len)r@ r_ r` ra ZreplyZfp_matchZ
host_match�args�hostnameZ challenge_idZchallenge_prefix� challenge�responseZb64r2 r2 r3 �
do_askpass� sN
�� �z AuthorizeResponder.do_askpassN)�commandrv �fds�stderrr c
� s� t �d|||� |dkrJ|\}tt|�d�| j_| jj�dt| jt g�� |dkrbt
d|d d��|dk�r�t |d �� t �d � � t �d
t � t D ]0}t
� fd d �|�� D ��r�t �d
|� d S q�t �d� � z8td�� }t |�� �}W d � n1 s�0 Y W n4 t�y> } zt �d| � W Y d } ~ d S d } ~ 0 0 � �d�|�d�k�r|� �d�|�d�k�r|t �d|� d S � �d� �dd��� d� �dd�� �}
t
d|
d��d S )NzGot ferny command %s %s %srZ )�loaderr r[ z
no-cockpit)�messager\ z'cockpit.check-os-release: remote OS: %rz,cockpit.check-os-release: supported OSes: %rc 3 s | ]\}}� � |�|kV qd S rC )r& )�.0�k�v�Z remote_osr2 r3 � <genexpr>� � z7AuthorizeResponder.do_custom_command.<locals>.<genexpr>z8cockpit.check-os-release: remote matches supported OS %rz$cockpit.check-os-release: remote: %rz/etc/os-releasezIfailed to read local /etc/os-release, skipping OS compatibility check: %sZIDZ
VERSION_IDz7cockpit.check-os-release: remote OS matches local OS %r�NAME�?rc � )� unsupported)r* r+ r r= rO �packagesZ
routing_rules�insertr r r r r �all�items�open�read�OSErrorZwarningr& ) r@ r{ rv r| r} r> Zosinfo�fZthis_os�er� r2 r� r3 �do_custom_command� s6
. , &z$AuthorizeResponder.do_custom_command)r" rE rF Zcommandsr rH r r: rD rz �tuple�list�intr� r2 r2 r2 r3 rY � s
DrY )�commentr c C s ddd| � �fdfS )NZpython3z-icz# r2 r2 )r� r2 r2 r3 �python_interpreter
s r� )�cmd�dest� ssh_askpass�ssh_optsr c G s~ |� d�\}}}|�� rN|�d�sN|�d�rB|�d�rB|dd� }d||g}n|g}dg|�|�t�| ��R d|��d d
ffS ) N�:�[�]rb ���z-pZsshz SSH_ASKPASS=z DISPLAY=xzSSH_ASKPASS_REQUIRE=force)�
rpartition�isdigit�endswithrq �shlex�join)r� r� r� r� �host�_�port� destinationr2 r2 r3 �via_ssh s& ������r� �r� �envr c C s ddgdd� |D ��| �R dfS )Nz
flatpak-spawnz--hostc s s | ]}d |� �V qdS )z--env=Nr2 )r� Zkvr2 r2 r3 r� ' r� z flatpak_spawn.<locals>.<genexpr>r2 r2 )r� r� r2 r2 r3 �
flatpak_spawn$ s � ���r� c s� e Zd ZU ded< eeejd�� fdd� Zdd�dd �Z dd�d
d �Z
dd�d d
�Z e e e e dd�dd�Z
dd�dd�Zedd�dd�Z� ZS )�SshPeerzMLiteral["always"] | Literal["never"] | Literal["supported"] | Literal["auto"]�mode)rO r� rv c s@ || _ |j| _t�� | _t| jj�d | _d | _t � �
|� d S )Nzuser-known-hosts) r� �
remote_bridge�tempfileZTemporaryDirectoryZtmpdirr r7 �known_hosts_filer] rP rD )r@ rO r� rv rQ r2 r3 rD 0 s
zSshPeer.__init__Nr c � s. t j�d�r | �� I d H n| �� I d H d S )Nz/.flatpak-info)r$ r' �exists�connect_from_flatpak�connect_from_bastion_hostrV r2 r2 r3 �do_connect_transport8 s z SshPeer.do_connect_transportc � sN t d�\}}| jdkr*t|| jt� �\}}t||�\}}| �||�I d H d S )N�cockpit-bridgeZ localhost)r� r� r� r4 r� �boot)r@ r� r� r2 r2 r3 r� ? s
z SshPeer.connect_from_flatpakc � sX d }ddg}| j �d�I d H }t|d�}|�d�r�t�|dd � ��� }|�d�\}}}|�d�\}}| _|r�t �
d |� |d
|g7 }| jd u r�|dd g7 }t d �\} }
t d
�} t
| t�s�J �t| �} | �� s�t �d| � t�d�}
|
d ur�|dd|
� �g7 }|d u�r(| j�|� |dd| j��g7 }t| | j| g|�R � \} }
| �| |
�I d H d S )Nz-ozNumberOfPasswordPrompts=1�*ry zBasic � � r� z,got username %s and password from Basic authz-lzPasswordAuthentication=nor� z ${libexecdir}/cockpit-askpassz+Could not find cockpit-askpass helper at %rZ COCKPIT_SSH_KNOWN_HOSTS_FILEzGlobalKnownHostsFile=zUserKnownHostsfile=)rO Z request_authorization_objectr rq rn rt rp � partitionr] r* r+ r� r r8 r: r r� �errorr$ �getenvr� �
write_textr� r� r� )r@ � known_hostsrv Zauthry ZdecodedZ
user_passwordr� �userr� r� Zaskpassr� Zenv_known_hostsr2 r2 r3 r� L s6
z!SshPeer.connect_from_bastion_hostr� c � s� t | �}t�t| j| j�|g�}t�d||� | j|||dd�I d H }| j dkr`ddgffg}nN| j dkrzddgffg}n4| j d kr�ddgffd
g ffg}n| j d ks�J �g }t
j g |�d t t
� �gf�|j�td
�}|�|�� � |�� I d H d S )Nz Launching command: cmd=%s env=%sT)r} Zstart_new_session�autoZtry_execr� �alwaysrL � supportedrK �neverrJ )Zgadgets)r r ZInteractionAgentrY rO r] r* r+ Zspawnr� r
Zmake_bootloaderr� r< Zsteps�BEIBOOT_GADGETS�writero � communicate)r@ r� r� Zbeiboot_helperZagentZ transportZexec_cockpit_bridge_stepsZstage1r2 r2 r3 r� u s.
����z SshPeer.bootc C s
d | _ d S rC )r] rV r2 r2 r3 �do_superuser_init_done� s z SshPeer.do_superuser_init_done)r r c C s| t �d|| jd u� t|d��d�r^t|d�}| jd ur^t �d� | jd|| jd� d | _d S t �d� | jd|d d
� d S ) Nz*SshPeer.do_authorize: %r; have password %srx zplain1:�cookiez-SshPeer.do_authorize: responded with password� authorize)r{ r� ry z0SshPeer.do_authorize: authentication-unavailablezauthentication-unavailable)r{ r� �problem)r* r+ r] r rq �
write_control)r@ r r� r2 r2 r3 � do_authorize� s
zSshPeer.do_authorize)r" rE rF rH r r: �argparse� NamespacerD r� r� r� r r� r� r r� rX r2 r2 rQ r3 r� - s
) r� c s\ e Zd ZU dZee ed< eed< ej d�� fdd� Z
dd� Z d d
� Z dd �d d
�Z
� ZS )� SshBridgeNr� �ssh_peer)rv c s2 t | �}t� �|g� t| |j|�| _| j|_d S rC )rM rP rD r� r� r� rN )r@ rv ZrulerQ r2 r3 rD � s zSshBridge.__init__c C s d S rC r2 rV r2 r2 r3 � do_send_init� s zSshBridge.do_send_initc C s t �d|� | j�|� d S )NzSshBridge.do_init: %r)r* r+ r� r� )r@ r r2 r2 r3 �do_init� s zSshBridge.do_initr c C s | j �| j� d S rC )r� Zadd_done_callbackrU rV r2 r2 r3 �
setup_session� s zSshBridge.setup_session)r" rE rF r� r r rH r� r� r� rD r� r� r� rX r2 r2 rQ r3 r� � s
r� c
� sd t �d� t| �}tt�� |� z�t|j�� I d H �}|jj �
� r`|j dddd|jj � � id� |�
di �}t|t�s�|j dd d
d � W d S t|t�s�J �d |d
< |jr�t�|jj�|d< |� |� |j�� W �nR tj�y� } z�tj�t|��}t �d||� t|tj��rd}nRt|tj��r,d}n>t|tj��r@d}n*t|t��rRd}nt|tj��rfd}nd}|jj �
� �r�|j d|t|�|jj � � d� n|j d|t|�d � W Y d }~d S d }~0 t �y } z*t �d|� |j |j dd� W Y d }~d S d }~0 tj �y$ t �d� Y d S 0 t �d� |� � z|� � I d H W n t!�y^ Y n0 d S )NzHi. How are you today?r� z x-login-datarf z known-hosts)r{ rx r� Z
login_data� capabilities�initzprotocol-errorzcapabilities must be a dict)r{ r� r Tzexplicit-superuserr� z.ferny.InteractionError: %s, interpreted as: %rzauthentication-failedzinvalid-hostkeyzunknown-hostkeyz unknown-hostzinternal-error)r{ r� r r� zCockpitProblem: %s)r{ z"Peer bridge got cancelled, exitingz/Startup done. Looping until connection closes.)"r* r+ r� r �asyncioZget_running_loop�dictr� �startr� r� r� � read_text�
setdefaultr8 r� �fromkeysZ
thaw_endpointr ZInteractionErrorZ
ssh_errorsZ get_exception_for_ssh_stderrr: ZSshAuthenticationErrorZSshChangedHostKeyErrorZSshHostKeyErrorr� ZSshErrorr �attrsZCancelledErrorr� r� �BrokenPipeError)rv Zbridger r� �excr� r� r2 r2 r3 �run� sl
��
�
r� c C sr t �� tjdd�} | jdg d�ddd� | jdd d
� | jd d d
� | �� }t|jd� tj t |�|jd� d S )Nz@cockpit-bridge is run automatically inside of a Cockpit session.)� descriptionz--remote-bridge)r� r� r� r� r� z�How to run cockpit-bridge from the remote host: auto: if installed (default), never: always copy the local one; supported: if not installed, copy local one for compatible OSes, fail otherwise; always: fail if not installed)�choicesre �helpz--debug�
store_true)�actionr� z5Name of the remote host to connect to, or 'localhost')r� )r+ )
r �installr� �ArgumentParser� add_argument�
parse_argsr
r+ r� r� )�parserrv r2 r2 r3 �main s � r� �__main__)Hr� r� rn Zimportlib.resourcesr Zloggingr$ ri r� r� rm �pathlibr �typingr r r r r Zcockpitr Zcockpit._vendorr Zcockpit._vendor.beir
Zcockpit.beipackr Zcockpit.bridger r
Zcockpit.channelr Zcockpit.channelsr Zcockpit.jsonutilr r Zcockpit.osinfor Zcockpit.packagesr r r Z cockpit.peerr Zcockpit.protocolr r Zcockpit.routerr r Zcockpit.transportsr Z getLoggerr* r4 r: r< r= r� rM ZAskpassHandlerrY r� r� r� r� r� r� r� r� r" r2 r2 r2 r3 �<module> s\
" ��u ** v G