File: //opt/saltstack/salt/lib/python3.10/site-packages/salt/client/ssh/__pycache__/shell.cpython-310.pyc
o
�N�g�@ � @ s d Z ddlZddlZddlZddlZddlZddlZddlZddlZ ddl
Z ddl Z ddl Z ddl
Z e�e�Ze�dej�Ze�d�Ze�dej�ZdZe�dej�ZdZe�d e d
�Ze jj� d �pfd Z e jj� d �pod Z e jj� d
�pxd
Z dd� Z dd� Z!G dd� d�Z"dS )z#
Manage transport commands via ssh
� Nz"(?:.*)[Pp]assword(?: for .*)?:\s*$z.*\(yes\/no\).*zEnter passphrase for keyzS[salt:sudo:d11bd4221135c33324a6bdc09674146fbfdf519989847491e34a689369bbce23]passwd:zU\[salt:sudo:d11bd4221135c33324a6bdc09674146fbfdf519989847491e34a689369bbce23\]passwd:ZA_edbc7885e4f9aac9b83b35999b68d015148caf467b78fa39c05f669c0ff89878z (?:^|\r?\n)z (?:\r?\n|$)z
ssh-keygen�sshZscpc C sP t ddd| dddg}tj�| �}|r!tj�|�s!t�tj�| �� t�|� dS )z.
Generate a key for use with salt-ssh
z-P� z-fz-t�rsaz-qN)�SSH_KEYGEN_PATH�os�path�dirname�isdir�makedirs�
subprocess�call)r �cmdr � r �I/opt/saltstack/salt/lib/python3.10/site-packages/salt/client/ssh/shell.py�gen_key* s
r c K sl |d r,zddl }|j| fi |��}W |S ty+ t�d� t�tjj j
� Y |S w t| fi |��}|S )zB
Return the correct shell interface for the target system
�winrmr Nz)The saltwinshell library is not available) � saltwinshell�Shell� ImportError�log�error�sys�exit�salt�defaults� exitcodesZ
EX_GENERIC)�opts�kwargsr �shellr r r � gen_shell5 s �
�r c @ s� e Zd ZdZ d%dd�Zdd� Zdd � Zd
d � Zd d
� Zdd� Z dd� Z
dd� Z e fdd�Z
dd� Zdd� Zdd� Zd&d d �Zd d � Zd d!� Zd'd#d$�ZdS )(r zH
Create a shell connection object to encapsulate ssh executions
NFc C s| || _ |�d�| _|| _|| _|rt|�n|| _|| _|| _|| _ | | _
|
| _ | | _ | | _
|| _|d u r9d| _d S || _d S )Nz[]r )r �strip�host�user�port�str�passwd�priv� priv_passwd�timeout�sudo�tty�mods�identities_only�remote_port_forwards� ssh_options)�selfr r! r" r# r% r& r' r( r) r* r+ r, Z sudo_userr- r r. r r r �__init__K s zShell.__init__c C sB |� d�D ]}|�d�r| S |�d�rqd|v rq| S |S )zG
Parse out an error and return a targeted error string
�
zssh:zPseudo-terminalzto the list of known hosts.)�split�
startswith)r/ Zerrstr�liner r r � get_errorn s
zShell.get_errorc C s8 dg}| j r |�d� n|�d� | j�dd�dkr |�d� |�d| j� �� | j�d �r3|�d
� | j�d �r@|�d
d g� | j�d
�}|rVtj�|�rV|�d|� �� | j rb|�d| j � �� | j
rs| j
dkrs|�d| j
� �� | j r|�d| j � �� | j r�|�d� g }|D ] }|�d|� d�� q�d�
|�S )zJ
Return options for the ssh command base for Salt to call
� KbdInteractiveAuthentication=no�PasswordAuthentication=yes�PasswordAuthentication=no� _ssh_version)r �� � �GSSAPIAuthentication=no�ConnectTimeout=�ignore_host_keys�StrictHostKeyChecking=no� no_host_keys� UserKnownHostsFile=/dev/nullZknown_hosts_filezUserKnownHostsFile=�Port=zagent-forwardingz
IdentityFile=�User=�IdentitiesOnly=yes�-o � r )r% �appendr �getr( �extendr r �isfiler# r& r" r, �join)r/ �optionsZ known_hosts�ret�optionr r r � _key_opts| s6 �
zShell._key_optsc C s� ddg}| j d dkr|�d� |�d| j� �� | j �d�r$|�d� | j �d�r1|�dd g� | jr<|�d
d g� n|�g d �� | jrO|�d
| j� �� | jr[|�d| j� �� | jrc|�d� g }|D ] }|�d|� d�� qgd� |�S )z/
Return options to pass to ssh
zControlMaster=autor@ r9 r: r= r> r? rA rB r7 �PubkeyAuthentication=yes)r8 rQ r6 z"ChallengeResponseAuthentication=noz
BatchMode=yesrC rD rE rF rG r )
r rH r( rI rJ r% r# r" r, rL )r/ rM rN rO r r r � _passwd_opts� s2 �
�
zShell._passwd_optsc C s d� dd� | jD ��S )NrG c S � g | ]}d |� ��qS )rF r )�.0�optr r r �
<listcomp>� � z#Shell._ssh_opts.<locals>.<listcomp>)rL r. �r/ r r r � _ssh_opts� s zShell._ssh_optsc C �8 | j rd�dd| j� d�| �� | j| �� | j| j�S dS )z:
Return the string to execute ssh-copy-id
z{} {} '{} -p {} {} {}@{}'� ssh-copy-id�-i �.pubN�r% �formatr& rR r# rY r" r! rX r r r �_copy_id_str_old� s � zShell._copy_id_str_oldc C rZ )zq
Since newer ssh-copy-id commands ingest option differently we need to
have two commands
z{} {} {} -p {} {} {}@{}r[ r\ r] Nr^ rX r r r �_copy_id_str_new� s � zShell._copy_id_str_newc C sH | � | �� �\}}}tjjj|kr d|v r | � | �� �\}}}|||fS )zH
Execute ssh-copy-id to plant the id file on the target
ZUsage)�_run_cmdr` r r r �EX_OKra )r/ �stdout�stderr�retcoder r r �copy_id� s
z
Shell.copy_idc C s� |g}|t kr
|�| j� | jr|tkr|�d� | js | jr-|�| jr(| �� p+| �� � |t krE| j rE|�d�
dd� | j � d�D ��� | j rO|�| �
� � |�|� d�
|�S )z2
Return the cmd string to execute
z-t -trG c S rS )z-R r )rT �itemr r r rV
rW z"Shell._cmd_str.<locals>.<listcomp>�,)�SCP_PATHrH r! r* �SSH_PATHr% r& rP rR r- rL r2 r. rY )r/ r
r Zcommandr r r �_cmd_str� s"
��
zShell._cmd_strc c s� � z9t jjj| �|�tjtjd�} t�d� |� � }|�
� }|j }|du r-|du r-W dS |r4| � |�}|||fV q t
yG dV Y dS w )z
cmd iterator
)re rd Tg�������?N)r z
Unknown ErrorN)r �utilsZnb_popenZNonBlockingPopen�
_split_cmdr �PIPE�time�sleep�recvZrecv_err�
returncoder5 � Exception)r/ r
�proc�out�err�rcoder r r � _run_nb_cmd s* ��
�
�zShell._run_nb_cmdc c s� � g }g }d}| � |�}d|� �}| jr|�| jd�}t�|� | �|�D ]\}}}|dur3|�|� |dur<|�|� dV q%d�|�d�|�|fV dS )z/
Yield None until cmd finished
Nz Executing non-blocking command: �******)NNNr )rl r% �replacer �debugry rH rL )r/ r
Zr_outZr_errrx �logmsgrv rw r r r � exec_nb_cmd. s �
zShell.exec_nb_cmdc C sf | � |�}d|� �}| jr|�| jd�}d|v s d|v r't�d� t�|� nt�|� | �|�}|S )z*
Execute a remote command
�Executing command: rz zdecode("base64")zbase64.b64decode(z.Executed SHIM command. Command logged to TRACE)rl r% r{ r r| �tracerb )r/ r
r} rN r r r �exec_cmdD s
zShell.exec_cmdc C s� |r| � dtj�|�� �� | j}d|v rd|� d�}|� d|� d|� �}| j|td�}d|� �}| jr;|�| jd�}t �
|� | � |�S ) z8
scp a file or files to a remote system
z mkdir -p �:�[�]rG )r r rz ) r� r r r r! rl rj r% r{ r r| rb )r/ �localZremoter
r! r
r} r r r �sendV s
z
Shell.sendc C sP z |� d�\}}W n ty t� |�}Y |S w t� |�}|�d|� �� |S )z�
Split a command string so that it is suitable to pass to Popen without
shell=True. This prevents shell injection attacks in the options passed
to ssh or some other command.
z/bin/shz/bin/sh )r2 �
ValueError�shlexrH )r/ r
Zssh_partZcmd_partZcmd_lstr r r rn l s �
zShell._split_cmdc C s( |s|S d}t �dt �|� d ||�S )z1Remove all occurrences of sanitize_text from textrz z\b)�re�sub�escape)r/ �textZ
sanitize_textZ replace_strr r r �
_sanitize_str{ s zShell._sanitize_str� c
C s� |sdS d}| j r | j }tjjj| �|�dddd|ddd�}d}d}d}d} d}
z�|j�r|�� \} } | r>|| 7 }|
| }
n| }
| rF| | 7 } |
rOt� |
�rOd}|
rjt
� |
�rj| j scW |j ddd � d
S |�
| j � q)|
r�t� |
�r�|r�| j s�W |j ddd � d S ||k r�|�
| j � |d 7 }q)W |j ddd � d
S |
r�t� |
�r�|r�|�
d� q)|�
d� d| �| | j �� �}|ddfW |j ddd � S |
r�t� |
�r�| j s�W |j ddd � dS |�
| j � q)|
r�|
�d�r�tjjj| jdd�d }|�
|� | r�| }
t�d� |js-W |j ddd � n|j ddd � w |j}|du �r-|jdu�r(d|j }nt�d� | �|| j �}| �| | j �} || |fS )zl
Execute a shell command via VT. This is blocking and assumes that ssh
is being run
)r zNo command or passphrase� NTr� F)Z
log_stdoutZlog_stdout_levelZ
log_stderrZlog_stderr_level� log_sanitizeZ
stream_stdoutZ
stream_stderrr r )� terminate�kill)r z Private key file need passphrase� )r z0Permission denied, no authentication informationr� � )r z Password authentication failedr� Zyes�nozQThe host key needs to be accepted, to auto accept run salt-ssh with the -i flag:
r� )r z*Sudo password is required but not providedr� z_||ext_mods||_)ri r� )�
separatorsz|_E|0|g{�G�z�?� zKVT reported both exitstatus and signalstatus as None. This is likely a bug.) r% r rm ZvtZTerminalrn Zhas_unread_datarr �RSTR_RE�search�"SSH_PRIVATE_KEY_PASSWORD_PROMPT_REr' �closeZsendline�SSH_PASSWORD_PROMPT_RE� KEY_VALID_REr� �SUDO_PROMPT_RE�endswith�json�dumpsr+ rp rq Z
exitstatusZ signalstatusr �warning)r/ r
Z
key_acceptZpasswd_retriesr� ZtermZ sent_passwdZ
send_passwordZ
ret_stdoutZ
ret_stderrZ
old_stdoutrd re ZbuffZmods_rawZ
ret_statusr r r rb � s� �
- �(� �
��
� ���
�� ;
�
zShell._run_cmd)NNNNNNFFNFNNFN)F)Fr� )�__name__�
__module__� __qualname__�__doc__r0 r5 rP rR rY r` ra rg rk rl ry r~ r� r� rn r� rb r r r r r F s@
�##+
r )#r� �loggingr r� r� r r rp Zsalt.defaults.exitcodesr Zsalt.utils.jsonZsalt.utils.nb_popenZsalt.utils.pathZ
salt.utils.vt� getLoggerr� r �compile�Mr� r� r� Z SUDO_PROMPTr� ZRSTRr� rm r �whichr rk rj r r r r r r r �<module> s<
�