CasperSecurity
o
쑛hyI �
@ s8 U d Z ddlZddlZddlZddlZddlZddlZddlZddlZddl m
Z
m Z ddl m
Z
ddlmZ ddlmZmZ ddlmZmZmZmZmZ ddlmZ dd lm Z dd
l m Z dd l m Z m!Z! dd l"m#Z# e#Z$d
e ge$g d�Z%e e&d< ddgdd�Z'ed�Z(G dd� d�Z)e�*e+�Z,G dd� de-�Z.G dd� de
�Z/G dd � d e/�Z0G d d � d e/�Z1G d d � d e/�Z2d!e3d"e!d#e4d$e/fd%d&�Z5d$ee6 fd'd(�Z7d$ee6 fd)d*�Z8d+d,� Z9d$e:fd-d.�Z;d/d0� Z<d$ee3e3f fd1d2�Z=d3d4� Z>d5e/d"e!fd6d7�Z?d8e3d9e d:ed;e4d$df
d<d=�Z@d>e0fd?e1fd@e2ffZAdS )AzGrowpart: Grow partitions� N)�ABC�abstractmethod)�suppress)�Path)�Optional�Tuple)� lifecycle� performance�subp�
temp_utils�util)�Cloud)�Config)�
MetaSchema)� ALL_DISTROS�Distro)�
PER_ALWAYS� cc_growpart)�id�distros� frequency�activate_by_schema_keys�meta�auto�/F)�mode�devices�ignore_growroot_disabledz/cc_growpart_keydatac @ s e Zd ZdZdZdZdZdS )�RESIZE�SKIPPED�CHANGED�NOCHANGE�FAILEDN)�__name__�
__module__� __qualname__r r r! r" � r& r& �>/usr/lib/python3/dist-packages/cloudinit/config/cc_growpart.pyr / s
r c @ s e Zd ZdS )�ResizeFailedExceptionN)r# r$ r% r& r& r& r' r( 9 s r( c @ s< e Zd Zdefdd�Zededefdd��Zedd � �Z d
S ) �Resizer�distroc C s
|| _ d S �N)�_distro)�selfr* r& r& r' �__init__> s
zResizer.__init__r �returnc C � d S r+ r& �r- r r& r& r' � availableA � zResizer.availablec C r0 r+ r& )r- �diskdev�partnum�partdev�fsr& r& r' �resizeD r3 zResizer.resizeN)
r# r$ r% r r. r �list�boolr2 r8 r& r& r& r' r) = s r) c @ �" e Zd Zdefdd�Zdd� ZdS )�ResizeGrowPartr c C sH zt j ddgddid�j}t�d|�rW dS W dS t jy# Y dS w ) N�growpartz--help�LANG�C��
update_envz --update\s+TF)r
�stdout�re�search�ProcessExecutionError)r- r �outr& r& r' r2 I s �� ���zResizeGrowPart.availablec C sJ t ||�}| j�� }tj|dd���}tj�|d�}d|d�} tj�|�s*t� |d� z
t
j
dd||g| d� W n0 t
j yg }
z#|
j d krRt
�td
||� t|
�|
�||fW Y d }
~
W d � S d }
~
ww z t
j
d||g| d� W n t
j y� }
z
t
�td ||� t|
�|
�d }
~
ww W d � n1 s�w Y |t ||�fS ) NT)�dir� needs_exer= r? )r> �TMPDIRi� z --dry-runr@ � z&Failed growpart --dry-run for (%s, %s)zFailed: growpart %s %s)�get_sizer, �get_tmp_exec_pathr �tempdir�os�path�join�exists�mkdirr
rE � exit_coder �logexc�LOGr( ) r- r4 r5 r6 r7 �before�tmp_dir�tmpd� growpart_tmp�my_env�er& r& r' r8 U sF
�
�
��
��� �zResizeGrowPart.resizeN�r# r$ r% r9 r2 r8 r& r& r& r' r< H � r< c @ s& e Zd ZdZdefdd�Zdd� ZdS )� ResizeGrowFSa�
Use FreeBSD ``growfs`` service to grow root partition to fill available
space, optionally adding a swap partition at the end.
Note that the service file warns us that it uses ``awk(1)``, and as
such requires ``/usr`` to be present. However, cloud-init is installed
into ``/usr/local``, so we should be fine.
We invoke the ``growfs`` with ``service growfs onestart``, so it
doesn't need to be enabled in ``rc.conf``.
r c C s t j�d�o
|dgkS )z'growfs only works on the root partitionz/etc/rc.d/growfsr )rN rO �isfiler1 r& r& r' r2 � s zResizeGrowFS.availablec
C s^ t ||�}z
| jjddd� W n tjy' } z t�td� t|�|�d }~ww |t ||�fS )N�onestart�growfs)�action�servicez Failed: service growfs onestart) rK r, �manage_servicer
rE r rT rU r( )r- r4 r5 r6 r7 rV r[ r& r& r' r8 � s
��zResizeGrowFS.resizeN)r# r$ r% �__doc__r9 r2 r8 r& r& r& r' r^ y s r^ c @ r; )� ResizeGpartr c C sN zt j ddgddiddgd�j}t�d|�rW d S W d
S t jy& Y d
S w ) N�gpart�helpr> r? r rJ )rA �rcszgpart recover TF)r
�stderrrC rD rE )r- r �errr& r& r' r2 � s �� ���zResizeGpart.availablec
C s� z
t � dd|g� W n$ t jy. } z|jdkr$t�td|� t|�|�W Y d}~nd}~ww t||�}z t � ddd||g� W n t jyZ } z
t�td||� t|�|�d}~ww |t||�fS ) a9
GPT disks store metadata at the beginning (primary) and at the
end (secondary) of the disk. When launching an image with a
larger disk compared to the original image, the secondary copy
is lost. Thus, the metadata will be marked CORRUPT, and need to
be recovered.
rg �recoverr zFailed: gpart recover %sNr8 z-iz Failed: gpart resize -i %s %s)r
rE rS r rT rU r( rK )r- r4 r5 r6 r7 r[ rV r& r& r' r8 � s$
���
��zResizeGpart.resizeNr\ r& r& r& r' rf � r] rf r r* r r/ c C s� d }| dkr#t D ]\}}||�}|j|d�r|} nq|s!td��|S i }t D ]\}} | ||< q'| |vr:td| ��|| |�}
|
j|d�rH|
}|sPtd| ��|S )Nr )r zNo resizers availablezunknown resize mode %szmode %s not available)�RESIZERSr2 �
ValueError� TypeError) r r* r � resize_class�_name�resizer�cur�mmap�k�v�mclassr& r& r' �resizer_factory� s, ��
rx c C s� d }zAzt �| t j�}t �|dt j�W W |r t �|� S S tyC |dkr6t| � Y W |r5t �|� S S Y W |rAt �|� d S d S w |rLt �|� w w )Nr �zfs)rN �open�O_RDONLY�lseek�SEEK_END�close�FileNotFoundError� get_zfs_size)�filenamer7 �fdr& r& r' rK � s* � � ���� �rK c
C sn | � d�d }zt�dddd|g�\}}W n tjy0 } zt�d||� W Y d }~d S d }~ww t|�� �S )Nr r �zpool�getz -Hpovalue�sizez Failed: zpool get size %s: %s)�splitr
rE rU �debug�int�strip)�datasetr� r� �_r[ r& r& r' r� � s �� r� c C s� | � d�r | d fS t�| �}|std��|d }|d }t�� }|dkr?|s?t�t�� �}|d u r?tj� |�r;|d fS td��||fS )N�/dev/z,Could not determine device of '%s' % dev_entr rJ z /dev/rootz!Unable to find device '/dev/root')
�
startswithr �get_mount_inforn � is_container�rootdev_from_cmdline� get_cmdlinerN rO rQ )�devent�result�devr7 � containerr& r& r' �
devent2dev� s
r� c
C s� t �d�s t�d� dS z
t � dd| g� W n' t jy= } z|jdkr+t�d| � nt�d|j� W Y d}~dS d}~ww tt j�� t � dd |g� t�d
| � W d � d S 1 s^w Y dS ) z�
Check if a device is an encrypted device. blockdev should have
a /dev/dm-* path whereas partition is something like /dev/sda1.
�
cryptsetupz6cryptsetup not found. Assuming no encrypted partitionsF�status� z#Determined that %s is not encryptedzZReceived unexpected exit code %s from cryptsetup status. Assuming no encrypted partitions.N�isLuksz Determined that %s is encryptedT)r
�whichrU r� rE rS �warningr )�blockdev� partitionr[ r& r& r' � is_encrypted s*
���
�r� c
C s� ddd| g}t � |�d }|�d�std|� ���zd|�d�d �d
�d � �W S tyA } z td |� d |� d
��|�d }~ww )N�dmsetup�depsz--options=devnamer z1 dependz5Expecting '1 dependencies' from 'dmsetup'. Received: r� z: (rJ �)zRan `z$`, but received unexpected stdout: `�`)r
r� � RuntimeErrorr� �
IndexError)r� �command�depr[ r& r& r' �get_underlying_partition$ s
� ����r� c C s� t �� s tjdfS z@t�dt � ���! t �� �
}t�|�}W d � n1 s'w Y W d � n1 s6w Y |d }t �
|�}|d }W n t yZ } zt d�|�d}~ww zKt
j
ddd d
| g|d � W zt
�
dd d
|t|�g� W n t
jy� } z t�d|� W Y d}~nd}~ww zt �� W nM t y� t�td� Y n?w zt
�
dd d
|t|�g� W n t
jy� } z t�d|� W Y d}~nd}~ww zt �� W w t y� t�td� Y w w tjd| � d�fS )z�Use 'cryptsetup resize' to resize LUKS volume.
The loaded keyfile is json formatted with 'key' and 'slot' keys.
key is base64 encoded. Example:
{"key":"XFmCwX2FHIQp0LBWaLEMiHIyfxt1SGm16VvUAVledlY=","slot":5}
zNo encryption keyfile foundzReading N�key�slotzZCould not load encryption key. This is expected if the volume has been previously resized.r� z
--key-file�-r8 )�data� luksKillSlotz --batch-modez<Failed to kill luks slot after resizing encrypted volume: %sz8Failed to remove keyfile after resizing encrypted volumez'Successfully resized encrypted volume '�')� KEYDATA_PATHrQ r r r �Timedrz �json�load�base64� b64decode� Exceptionr� r
�strrE rU r� �unlinkr rT r )r� r� �f�keydatar� � decoded_keyr� r[ r& r& r' �resize_encrypted5 s�
�� ��
���� ��� ��� ����� ��� ��
�r� c C s" g }zm| � ||||�\}}||kr!|�|tjd||f f� W |S |d u s)|d u rJd} |d ur:|d u r:d||f } nd| } |�|tj| f� W |S d} |d ur]|d u r]d||||f } nd|||f } |�|tj| f� W |S ty� }
z|�|tjd|||
f f� W Y d }
~
|S d }
~
ww )Nz no change necessary (%s, %s)� z*changed (%s, %s) size, new size is unknownz&changed (%s) size, new size is unknownz changed (%s, %s) from %s to %szchanged (%s) from %s to %sz'failed to resize: disk=%s, ptnum=%s: %s)r8 �appendr r! r r( r" ) rr r� �disk�ptnumr� r7 �info�old�new�msgr[ r& r& r' �
_call_resizern sT
��&����
� ����r� rr c C sn t � |�}g }|�r5|�d�}d }d }zt|�\}}W n ty8 } z|�|tjd| f� W Y d } ~ qd } ~ ww t�d|� |dkrTt | t
�rT|t | |||||�7 }qzt �
|�}
W n tyz } z|�|tjd|| f f� W Y d } ~ qd } ~ ww t
�|
j�s�t
�|
j�s�|�|tjd| f� q|�|�} | r�z?t|�} t| | �r�| dd� |D �vr�|�d|� |�d| � W qt|| �\}
}|�||
|f� n
|�|tjd |� d
�f� W n! ty� } z|�|tjd |� d | � �f� W Y d } ~ nd } ~ ww qz |�|�\}}W n" ttf�y' } z|�|tjd
|| f f� W Y d } ~ qd } ~ ww |t | |||||�7 }|s
|S )Nr z unable to convert to device: %szgrowpart found fs=%sry zstat of '%s' failed: %sz device '%s' not a block devicec S s g | ]}|d �qS )r r& )�.0�xr& r& r' �
<listcomp>� s z"resize_devices.<locals>.<listcomp>zResizing mapped device (z!) skipped as it is not encrypted.zResizing encrypted device (z
) failed: z device_part_info(%s) failed: %s)�copy�popr� rn r� r r rU r� �
isinstancer^ r� rN �stat�OSError�S_ISBLK�st_mode�S_ISCHR�get_mapped_devicer� r� �insertr� r� r" �device_part_inforo )rr r r* r� r� r� r� r� r7 r[ �statret�underlying_blockdevr� r� �messager& r& r' �resize_devices� s�
�� ��
�� ��
���
��
�������
�� ��
�lr� �name�cfg�cloud�argsc
C s� d|vrt �dt� t|d< |�d�}t|t�s t �d� d S |�dd�}t�|�rB|dkr:t j
d|� d�d d
d � t �d |� d S t�|�d
d��r]t j �
d�r]t �d� t �d� d S t�|ddg�}t|�spt �d� d S z
t||j|d�}W n" ttfy� } zt �d||� |dkr�|�W Y d }~d S d }~ww t�d�� t|||j�} W d � n1 s�w Y | D ]\}
} } | tjkr�t �d|
| � q�t �d|
| | � q�d S )Nr= z.No 'growpart' entry in cfg. Using default: %sz#'growpart' in config was not a dictr r �offz"Growpart's 'mode' key with value 'r� z22.2zUse 'off' instead.)�
deprecated�deprecated_version�
extra_messagezgrowpart disabled: mode=%sr Fz/etc/growroot-disabledz0growpart disabled: /etc/growroot-disabled existsz&use ignore_growroot_disabled to ignorer r zgrowpart: empty device list)r* r z,growpart unable to find resizer for '%s': %szResizing devicesz'%s' resized: %sz '%s' %s: %s)rU r� �DEFAULT_CONFIGr� r� �dictr� r �is_falser � deprecaterN rO r_ �get_cfg_option_list�lenrx r* rn ro r r� r� r r r� )
r� r� r� r� �mycfgr r rr r[ �resized�entryrb r� r& r& r' �handle sZ �
�
�� �
�r� r= ra rg )Bre r� r� r� �loggingrN �os.pathrC r� �abcr r �
contextlibr �pathlibr �typingr r � cloudinitr r r
r r �cloudinit.cloudr
�cloudinit.configr �cloudinit.config.schemar �cloudinit.distrosr r �cloudinit.settingsr r r �__annotations__r� r� r � getLoggerr# rU r� r( r) r< r^ rf r� r9 rx r� rK r� r� r: r� r� r� r� r� r� rm r& r& r& r' �<module> sf ��
1 &
9. t4�