Viewing: cryptdev.cpython-36.pyc
3 �N�bS( � @ s� d Z ddlZddlZddlZddlZddlZddlZddlm Z ej e �Z dZ dd� ZG dd� d�Zd d � Zdd d �Zddd�Zd dd�Zdd� Zdd� ZdS ) z^ Salt module to manage Unix cryptsetup jobs and the crypttab file .. versionadded:: 2018.3.0 � N)�CommandExecutionErrorZcryptdevc C s t jjj� rdS dS )z) Only load on POSIX-like systems F�=The cryptdev module cannot be loaded: not a POSIX-like systemT)Fr )�salt�utils�platformZ is_windows� r r � /usr/lib/python3.6/cryptdev.py� __virtual__ s r c @ s� e Zd ZdZG dd� de�Zd ZdZeefd d ��Z ed d � �Z ed d� �Z dd� Z dd� Z dd� Zdd� Zedd� �Zdd� ZdS ) �_crypttab_entryz� Utility class for manipulating crypttab entries. Primarily we're parsing, formatting, and comparing lines. Parsing emits dicts expected from crypttab() or raises a ValueError. c @ s e Zd ZdZdS )z_crypttab_entry.ParseErrorz;Error raised when a line isn't parsible as a crypttab entryN)�__name__� __module__� __qualname__�__doc__r r r r � ParseError+ s r �name�device�password�optionsz4{name: <12} {device: <44} {password: <22} {options} c C sp t |�dkrtdj|���|jd�r.| jd��|j� }t |�dkrL|dg7 }t |�dkrb| jd��tt||��S )N� zInvalid key array: {}�#zComment!� � zInvalid Entry!)�len� ValueError�format� startswithr �split�dict�zip)�cls�line�keys�compsr r r �dict_from_line1 s z _crypttab_entry.dict_from_linec O s | f | j ||��S )N)r# )r �args�kwargsr r r � from_lineB s z_crypttab_entry.from_linec C s | j jf |�S )N)�crypttab_formatr )r �entryr r r � dict_to_lineF s z _crypttab_entry.dict_to_linec C s | j | j�S )z&String value, only works for full repr)r) �criteria)�selfr r r �__str__J s z_crypttab_entry.__str__c C s t | j�S )z Always works)�reprr* )r+ r r r �__repr__N s z_crypttab_entry.__repr__c s � fdd�|D �}� j f |�S )z(Returns an instance with just those keysc s i | ]}� j | |�qS r )r* )�.0�key)r+ r r � <dictcomp>T s z(_crypttab_entry.pick.<locals>.<dictcomp>)� __class__)r+ r! Zsubsetr )r+ r �pickR s z_crypttab_entry.pickc K s dd� |j � D �| _dS )z1Store non-empty, non-null values to use as filterc S s( i | ] \}}|d k rt jjj|�|�qS )N)r r � stringutils� to_unicode)r/ r0 �valuer r r r1 Y s z,_crypttab_entry.__init__.<locals>.<dictcomp>N)�itemsr* )r+ r* r r r �__init__W s z_crypttab_entry.__init__c C s t jjt jj| ��S )z%Resolve equivalent paths equivalently)�os�path�normcase�normpath)r: r r r � norm_path_ s z_crypttab_entry.norm_pathc C s6 | j |�}x&| jj� D ]\}}|| |krdS qW dS )z<Compare potentially partial criteria against a complete lineFT)r# r* r7 )r+ r r( r0 r6 r r r �matchd s z_crypttab_entry.matchN)r r r r )r r r r r r � crypttab_keysr' � classmethodr# r& r) r, r. r3 r8 � staticmethodr= r> r r r r r $ s r c C sj i } t d d�}tjd�}tj|� x@|jd�D ]2}|j|�}|rX|j� }|| |d < q0tjd� q0W | S )z5 List existing device-mapper device details. zcmd.run_stdoutzdmsetup ls --target cryptz5(?P<devname>\w+)\W+\((?P<major>\d+), (?P<minor>\d+)\)� Zdevnamez-dmsetup output does not match expected format) �__salt__�re�compile�log�debugr r> � groupdictZwarning)�retZdevicesZ out_regexr r> Zdev_infor r r �activem s rJ � /etc/crypttabc C s� i }t jj| �s|S tjjj| ���}x�|D ]�}tjjj|�j d�}yPt j |�}|d j d�|d< x |d |kr�|d d7 < qbW |||j d�< W q* t jk r� Y q*X q*W W dQ R X |S )z{ List the contents of the crypttab CLI Example: .. code-block:: bash salt '*' cryptdev.crypttab rB r �,r �_N)r9 r: �isfiler r �files�fopenr4 r5 �rstripr r# r �popr )�configrI �ifiler r( r r r �crypttab� s rU c C sH d}t | d�}g }y|tjjj|d��b}xZ|D ]R}tjjj|�}y |j|�rPd}n |j|� W q, t j k r| |j|� Y q,X q,W W dQ R X W n6 t k r� } zd}t |j ||���W Y dd}~X nX |�r:y4tjjj|d��} | j dd � |D �� W dQ R X W n8 t k �r8 } zd }t |j ||���W Y dd}~X nX |�rDd S d S ) a2 Remove the named mapping from the crypttab. If the described entry does not exist, nothing is changed, but the command succeeds by returning ``'absent'``. If a line is removed, it returns ``'change'``. CLI Example: .. code-block:: bash salt '*' cryptdev.rm_crypttab foo F)r �rTNz Could not read from {0}: {1}zw+c s s | ]}t jjj|�V qd S )N)r r r4 �to_str)r/ r r r r � <genexpr>� s z rm_crypttab.<locals>.<genexpr>zCould not write to {0}: {1}�changeZabsent)r r r rO rP r4 r5 r> �appendr �OSErrorr r � writelines) r rS Zmodifiedr* �linesrT r �exc�msg�ofiler r r � rm_crypttab� s0 """"ra �noner Fr c & C sh |dkrd}n.t |t�rn"t |t�r0dj|�}n d}t|��| ||dk rL|nd|d�}g } d} t |t�rjn t |t�s�d}t|��n|g}tf |�} y| j|�} W n8 tk r� dd � } t| |�}d j |�}t|��Y nX t j j |�s�td j |���y�t jjj|d ���}x�|D ]�}t jjj|�}yJ| j|��r^d } | j|��rJ| j|� nd} | jt| �� n | j|� W n" tjk �r� | j|� Y nX �qW W dQ R X W n8 tk �r� } zd}t|j ||���W Y dd}~X nX | dk�r�| jt| �� d} | d k�rd|�sdy4t jjj|d��}|jdd� | D �� W dQ R X W n( tk �rb d}t|j |���Y nX | S )a Verify that this device is represented in the crypttab, change the device to match the name passed, or add the name if it is not present. CLI Example: .. code-block:: bash salt '*' cryptdev.set_crypttab foo /dev/sdz1 mypassword swap,size=256 Nr rL z+options must be a string or list of stringsrb )r r r r z,match_on must be a string or list of stringsc S s | t jkS )N)r r? )r0 r r r �<lambda> s z set_crypttab.<locals>.<lambda>z#Unrecognized keys in match_on: "{}"zBad config file "{}"rV ZpresentrY zCouldn't read from {0}: {1}�newzw+c s s | ]}t jjj|�V qd S )N)r r r4 rW )r/ r r r r rX 7 s z set_crypttab.<locals>.<genexpr>zFile not writable {0})� isinstance�str�list�joinr r r3 �KeyError�filterr r9 r: rN r r rO rP r4 r5 r> rZ r r[ r\ )r r r r rS ZtestZmatch_onr_ Z entry_argsr] rI r( r* ZfilterFnZ invalid_keysrT r r^ r` r r r � set_crypttab� sx $" rk c C s> |dks|dks|dkr t d��td dj||| ��}|dkS )a$ Open a crypt device using ``cryptsetup``. The ``keyfile`` must not be ``None`` or ``'none'``, because ``cryptsetup`` will otherwise ask for the password interactively. CLI Example: .. code-block:: bash salt '*' cryptdev.open foo /dev/sdz1 /path/to/keyfile Nrb �-z<For immediate crypt device mapping, keyfile must not be nonez cmd.retcodez#cryptsetup open --key-file {} {} {}r )r rC r )r r Zkeyfile�coder r r �open@ s rn c C s t d dj| ��}|dkS )z� Close a crypt device using ``cryptsetup``. CLI Example: .. code-block:: bash salt '*' cryptdev.close foo z cmd.retcodezcryptsetup close {}r )rC r )r rm r r r �closeW s ro )rK )rK )rb r rK Fr )r Zloggingr9 rD Zsalt.utils.filesr Zsalt.utils.platformZsalt.utils.stringutilsZsalt.exceptionsr Z getLoggerr rF Z__virtualname__r r rJ rU ra rk rn ro r r r r �<module> s* I 2 h
Return