Current File : //usr/lib/python3/dist-packages/cloudinit/distros/freebsd.py
# Copyright (C) 2014 Harm Weites
#
# Author: Harm Weites <harm@weites.com>
#
# This file is part of cloud-init. See LICENSE file for license information.
import logging
import os
import re
from io import StringIO
import cloudinit.distros.bsd
from cloudinit import subp, util
from cloudinit.distros.networking import FreeBSDNetworking
from cloudinit.settings import PER_ALWAYS, PER_INSTANCE
LOG = logging.getLogger(__name__)
class Distro(cloudinit.distros.bsd.BSD):
"""
Distro subclass for FreeBSD.
(N.B. DragonFlyBSD inherits from this class.)
"""
networking_cls = FreeBSDNetworking
usr_lib_exec = "/usr/local/lib"
login_conf_fn = "/etc/login.conf"
login_conf_fn_bak = "/etc/login.conf.orig"
ci_sudoers_fn = "/usr/local/etc/sudoers.d/90-cloud-init-users"
group_add_cmd_prefix = ["pw", "group", "add"]
pkg_cmd_install_prefix = ["pkg", "install"]
pkg_cmd_remove_prefix = ["pkg", "remove"]
pkg_cmd_update_prefix = ["pkg", "update"]
pkg_cmd_upgrade_prefix = ["pkg", "upgrade"]
prefer_fqdn = True # See rc.conf(5) in FreeBSD
home_dir = "/usr/home"
# FreeBSD has the following dhclient lease path:
# /var/db/dhclient.leases.<iface_name>
dhclient_lease_directory = "/var/db"
dhclient_lease_file_regex = r"dhclient.leases.\w+"
# /etc/shadow match patterns indicating empty passwords
# For FreeBSD (from https://man.freebsd.org/cgi/man.cgi?passwd(5)) a
# password field of "" indicates no password, and a password
# field value of either "*" or "*LOCKED*" indicate differing forms of
# "locked" but with no password defined.
shadow_empty_locked_passwd_patterns = [
r"^{username}::",
r"^{username}:\*:",
r"^{username}:\*LOCKED\*:",
]
@classmethod
def reload_init(cls, rcs=None):
"""
Tell rc to reload its configuration
Note that this only works while we're still in the process of booting.
May raise ProcessExecutionError
"""
rc_pid = os.environ.get("RC_PID")
if rc_pid is None:
LOG.warning("Unable to reload rc(8): no RC_PID in Environment")
return
return subp.subp(["kill", "-SIGALRM", rc_pid], capture=True, rcs=rcs)
@classmethod
def manage_service(
cls, action: str, service: str, *extra_args: str, rcs=None
):
"""
Perform the requested action on a service. This handles FreeBSD's
'service' case. The FreeBSD 'service' is closer in features to
'systemctl' than SysV init's 'service', so we override it.
May raise ProcessExecutionError
"""
init_cmd = cls.init_cmd
cmds = {
"stop": [service, "stop"],
"start": [service, "start"],
"enable": [service, "enable"],
"enabled": [service, "enabled"],
"disable": [service, "disable"],
"onestart": [service, "onestart"],
"onestop": [service, "onestop"],
"restart": [service, "restart"],
"reload": [service, "restart"],
"try-reload": [service, "restart"],
"status": [service, "status"],
"onestatus": [service, "onestatus"],
}
cmd = init_cmd + cmds[action] + list(extra_args)
return subp.subp(cmd, capture=True, rcs=rcs)
def _get_add_member_to_group_cmd(self, member_name, group_name):
return ["pw", "usermod", "-n", member_name, "-G", group_name]
def add_user(self, name, **kwargs) -> bool:
"""
Add a user to the system using standard tools
Returns False if user already exists, otherwise True.
"""
if util.is_user(name):
LOG.info("User %s already exists, skipping.", name)
return False
pw_useradd_cmd = ["pw", "useradd", "-n", name]
log_pw_useradd_cmd = ["pw", "useradd", "-n", name]
pw_useradd_opts = {
"homedir": "-d",
"gecos": "-c",
"primary_group": "-g",
"groups": "-G",
"shell": "-s",
"inactive": "-E",
"uid": "-u",
}
pw_useradd_flags = {
"no_user_group": "--no-user-group",
"system": "--system",
"no_log_init": "--no-log-init",
}
for key, val in kwargs.items():
if key in pw_useradd_opts and val and isinstance(val, (str, int)):
pw_useradd_cmd.extend([pw_useradd_opts[key], str(val)])
elif key in pw_useradd_flags and val:
pw_useradd_cmd.append(pw_useradd_flags[key])
log_pw_useradd_cmd.append(pw_useradd_flags[key])
if "no_create_home" in kwargs or "system" in kwargs:
pw_useradd_cmd.append("-d/nonexistent")
log_pw_useradd_cmd.append("-d/nonexistent")
else:
homedir = kwargs.get("homedir", f"{self.home_dir}/{name}")
pw_useradd_cmd.append("-d" + homedir)
pw_useradd_cmd.append("-m")
log_pw_useradd_cmd.append("-d" + homedir)
log_pw_useradd_cmd.append("-m")
# Run the command
LOG.info("Adding user %s", name)
try:
subp.subp(pw_useradd_cmd, logstring=log_pw_useradd_cmd)
except Exception:
util.logexc(LOG, "Failed to create user %s", name)
raise
# Set the password if it is provided
# For security consideration, only hashed passwd is assumed
passwd_val = kwargs.get("passwd", None)
if passwd_val is not None:
self.set_passwd(name, passwd_val, hashed=True)
# Indicate that a new user was created
return True
def expire_passwd(self, user):
try:
subp.subp(["pw", "usermod", user, "-p", "01-Jan-1970"])
except Exception:
util.logexc(LOG, "Failed to set pw expiration for %s", user)
raise
def set_passwd(self, user, passwd, hashed=False):
if hashed:
hash_opt = "-H"
else:
hash_opt = "-h"
try:
subp.subp(
["pw", "usermod", user, hash_opt, "0"],
data=passwd,
logstring="chpasswd for %s" % user,
)
except Exception:
util.logexc(LOG, "Failed to set password for %s", user)
raise
def lock_passwd(self, name):
try:
subp.subp(["pw", "usermod", name, "-w", "no"])
except Exception:
util.logexc(LOG, "Failed to lock password login for user %s", name)
raise
def unlock_passwd(self, name):
LOG.debug(
"Dragonfly BSD/FreeBSD password lock is not reversible, "
"ignoring unlock for user %s",
name,
)
def apply_locale(self, locale, out_fn=None):
# Adjust the locales value to the new value
newconf = StringIO()
for line in util.load_text_file(self.login_conf_fn).splitlines():
newconf.write(
re.sub(r"^default:", r"default:lang=%s:" % locale, line)
)
newconf.write("\n")
# Make a backup of login.conf.
util.copy(self.login_conf_fn, self.login_conf_fn_bak)
# And write the new login.conf.
util.write_file(self.login_conf_fn, newconf.getvalue())
try:
LOG.debug("Running cap_mkdb for %s", locale)
subp.subp(["cap_mkdb", self.login_conf_fn])
except subp.ProcessExecutionError:
# cap_mkdb failed, so restore the backup.
util.logexc(LOG, "Failed to apply locale %s", locale)
try:
util.copy(self.login_conf_fn_bak, self.login_conf_fn)
except IOError:
util.logexc(
LOG, "Failed to restore %s backup", self.login_conf_fn
)
def _get_pkg_cmd_environ(self):
"""Return environment vars used in FreeBSD package_command
operations"""
return {"ASSUME_ALWAYS_YES": "YES"}
def update_package_sources(self, *, force=False):
self._runner.run(
"update-sources",
self.package_command,
["update"],
freq=PER_ALWAYS if force else PER_INSTANCE,
)
@staticmethod
def build_dhclient_cmd(
path: str,
lease_file: str,
pid_file: str,
interface: str,
config_file: str,
) -> list:
return [path, "-l", lease_file, "-p", pid_file] + (
["-c", config_file, interface] if config_file else [interface]
)
@staticmethod
def eject_media(device: str) -> None:
subp.subp(["camcontrol", "eject", device])
Mini Shell