mirror of
https://github.com/clearlinux/WALinuxAgent.git
synced 2026-08-28 03:27:42 +00:00
Yoon Hong
191 lines
7.4 KiB
Python
191 lines
7.4 KiB
Python
# Copyright 2014 Microsoft Corporation
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
|
# you may not use this file except in compliance with the License.
|
|
# You may obtain a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
# See the License for the specific language governing permissions and
|
|
# limitations under the License.
|
|
#
|
|
# Requires Python 2.4+ and Openssl 1.0+
|
|
#
|
|
|
|
"""
|
|
Provision handler
|
|
"""
|
|
|
|
import os
|
|
import azurelinuxagent.common.logger as logger
|
|
from azurelinuxagent.common.future import ustr
|
|
import azurelinuxagent.common.conf as conf
|
|
from azurelinuxagent.common.event import add_event, WALAEventOperation
|
|
from azurelinuxagent.common.exception import ProvisionError, ProtocolError, \
|
|
OSUtilError
|
|
from azurelinuxagent.common.protocol.restapi import ProvisionStatus
|
|
import azurelinuxagent.common.utils.shellutil as shellutil
|
|
import azurelinuxagent.common.utils.fileutil as fileutil
|
|
from azurelinuxagent.common.osutil import get_osutil
|
|
from azurelinuxagent.common.protocol import get_protocol_util
|
|
|
|
CUSTOM_DATA_FILE = "CustomData"
|
|
|
|
|
|
class ProvisionHandler(object):
|
|
def __init__(self):
|
|
self.osutil = get_osutil()
|
|
self.protocol_util = get_protocol_util()
|
|
|
|
def run(self):
|
|
# if provisioning is already done, return
|
|
provisioned = os.path.join(conf.get_lib_dir(), "provisioned")
|
|
if os.path.isfile(provisioned):
|
|
logger.info("Provisioning already completed, skipping.")
|
|
return
|
|
|
|
thumbprint = None
|
|
# If provision is not enabled, report ready and then return
|
|
if not conf.get_provision_enabled():
|
|
logger.info("Provisioning is disabled, skipping.")
|
|
else:
|
|
logger.info("Running provisioning handler")
|
|
try:
|
|
logger.info("Copying ovf-env.xml")
|
|
ovf_env = self.protocol_util.copy_ovf_env()
|
|
self.protocol_util.get_protocol_by_file()
|
|
self.report_not_ready("Provisioning", "Starting")
|
|
logger.info("Starting provisioning")
|
|
self.provision(ovf_env)
|
|
thumbprint = self.reg_ssh_host_key()
|
|
self.osutil.restart_ssh_service()
|
|
self.report_event("Provision succeed", is_success=True)
|
|
except ProtocolError as e:
|
|
logger.error("[ProtocolError] Provisioning failed: {0}", e)
|
|
self.report_not_ready("ProvisioningFailed", ustr(e))
|
|
self.report_event("Failed to copy ovf-env.xml: {0}".format(e))
|
|
return
|
|
except ProvisionError as e:
|
|
logger.error("[ProvisionError] Provisioning failed: {0}", e)
|
|
self.report_not_ready("ProvisioningFailed", ustr(e))
|
|
self.report_event(ustr(e))
|
|
return
|
|
# write out provisioned file and report Ready
|
|
fileutil.write_file(provisioned, "")
|
|
self.report_ready(thumbprint)
|
|
logger.info("Provisioning complete")
|
|
|
|
def reg_ssh_host_key(self):
|
|
keypair_type = conf.get_ssh_host_keypair_type()
|
|
if conf.get_regenerate_ssh_host_key():
|
|
fileutil.rm_files("/etc/ssh/ssh_host_*key*")
|
|
keygen_cmd = "ssh-keygen -N '' -t {0} -f /etc/ssh/ssh_host_{1}_key"
|
|
shellutil.run(keygen_cmd.format(keypair_type, keypair_type))
|
|
thumbprint = self.get_ssh_host_key_thumbprint(keypair_type)
|
|
return thumbprint
|
|
|
|
def get_ssh_host_key_thumbprint(self, keypair_type):
|
|
cmd = "ssh-keygen -lf /etc/ssh/ssh_host_{0}_key.pub".format(
|
|
keypair_type)
|
|
ret = shellutil.run_get_output(cmd)
|
|
if ret[0] == 0:
|
|
return ret[1].rstrip().split()[1].replace(':', '')
|
|
else:
|
|
raise ProvisionError(("Failed to generate ssh host key: "
|
|
"ret={0}, out= {1}").format(ret[0], ret[1]))
|
|
|
|
def provision(self, ovfenv):
|
|
logger.info("Handle ovf-env.xml.")
|
|
try:
|
|
logger.info("Set host name.")
|
|
self.osutil.set_hostname(ovfenv.hostname)
|
|
|
|
logger.info("Publish host name.")
|
|
self.osutil.publish_hostname(ovfenv.hostname)
|
|
|
|
self.config_user_account(ovfenv)
|
|
|
|
self.save_customdata(ovfenv)
|
|
|
|
if conf.get_delete_root_password():
|
|
self.osutil.del_root_password()
|
|
|
|
except OSUtilError as e:
|
|
raise ProvisionError("Failed to handle ovf-env.xml: {0}".format(e))
|
|
|
|
def config_user_account(self, ovfenv):
|
|
logger.info("Create user account if not exists")
|
|
self.osutil.useradd(ovfenv.username)
|
|
|
|
if ovfenv.user_password is not None:
|
|
logger.info("Set user password.")
|
|
crypt_id = conf.get_password_cryptid()
|
|
salt_len = conf.get_password_crypt_salt_len()
|
|
self.osutil.chpasswd(ovfenv.username, ovfenv.user_password,
|
|
crypt_id=crypt_id, salt_len=salt_len)
|
|
|
|
logger.info("Configure sudoer")
|
|
self.osutil.conf_sudoer(ovfenv.username,
|
|
nopasswd=ovfenv.user_password is None)
|
|
|
|
logger.info("Configure sshd")
|
|
self.osutil.conf_sshd(ovfenv.disable_ssh_password_auth)
|
|
|
|
self.deploy_ssh_pubkeys(ovfenv)
|
|
self.deploy_ssh_keypairs(ovfenv)
|
|
|
|
def save_customdata(self, ovfenv):
|
|
customdata = ovfenv.customdata
|
|
if customdata is None:
|
|
return
|
|
|
|
logger.info("Save custom data")
|
|
lib_dir = conf.get_lib_dir()
|
|
if conf.get_decode_customdata():
|
|
customdata = self.osutil.decode_customdata(customdata)
|
|
|
|
customdata_file = os.path.join(lib_dir, CUSTOM_DATA_FILE)
|
|
fileutil.write_file(customdata_file, customdata)
|
|
|
|
if conf.get_execute_customdata():
|
|
logger.info("Execute custom data")
|
|
os.chmod(customdata_file, 0o700)
|
|
shellutil.run(customdata_file)
|
|
|
|
def deploy_ssh_pubkeys(self, ovfenv):
|
|
for pubkey in ovfenv.ssh_pubkeys:
|
|
logger.info("Deploy ssh public key.")
|
|
self.osutil.deploy_ssh_pubkey(ovfenv.username, pubkey)
|
|
|
|
def deploy_ssh_keypairs(self, ovfenv):
|
|
for keypair in ovfenv.ssh_keypairs:
|
|
logger.info("Deploy ssh key pairs.")
|
|
self.osutil.deploy_ssh_keypair(ovfenv.username, keypair)
|
|
|
|
def report_event(self, message, is_success=False):
|
|
add_event(name="WALA", message=message, is_success=is_success,
|
|
op=WALAEventOperation.Provision)
|
|
|
|
def report_not_ready(self, sub_status, description):
|
|
status = ProvisionStatus(status="NotReady", subStatus=sub_status,
|
|
description=description)
|
|
try:
|
|
protocol = self.protocol_util.get_protocol()
|
|
protocol.report_provision_status(status)
|
|
except ProtocolError as e:
|
|
logger.error("Reporting NotReady failed: {0}", e)
|
|
self.report_event(ustr(e))
|
|
|
|
def report_ready(self, thumbprint=None):
|
|
status = ProvisionStatus(status="Ready")
|
|
status.properties.certificateThumbprint = thumbprint
|
|
try:
|
|
protocol = self.protocol_util.get_protocol()
|
|
protocol.report_provision_status(status)
|
|
except ProtocolError as e:
|
|
logger.error("Reporting Ready failed: {0}", e)
|
|
self.report_event(ustr(e))
|