One Hat Cyber Team
Your IP :
216.73.216.64
Server IP :
162.240.179.46
Server :
Linux vps-14493116.nutrivittasaude.com.br 5.14.0-687.17.1.el9_8.x86_64 #1 SMP PREEMPT_DYNAMIC Mon Jun 22 07:21:26 EDT 2026 x86_64
Server Software :
Apache
PHP Version :
8.2.31
Buat File
|
Buat Folder
Eksekusi
Dir :
~
/
lib
/
python3.9
/
site-packages
/
cockpit
/
__pycache__
/
View File Name :
beiboot.cpython-39.opt-1.pyc
a ��j�T � @ sT d dl Z d dlZd dlZd dlZd dlZd dlZd dlZd dlZd dl Z d dl Z d dl m Z d dl mZmZmZmZ d dlmZ d dlmZ d dlmZ d dlmZ d dlmZm Z d d l m Z d d l m Z d d l!m"Z"m#Z# d d l$m%Z% d d l&m'Z'm(Z(m)Z) d dl*m+Z+ d dl,m-Z-m.Z. d dl/m0Z0m1Z1 d dl2m3Z3 e�4d�Z5e d�dd�Z6G dd� de(�Z7dddd�ej8�Z8G d d � d e1�Z9G d d � d ej:�Z;e<e=ee< ee< f d �d!d"�Z>ee< e<e e<e=ee< ee< f d#�d$d%�Z?ee< ee< e=ee< ee< f d&�d'd(�Z@G d)d*� d*e+�ZAG d+d,� d,e0�ZBdd�d-d.�ZCdd�d/d0�ZDeEd1k�rPeD� dS )2� N)�Path)�Dict�Literal�Optional�Sequence)� polyfills)�ferny)� bootloader)�BridgeBeibootHelper)�parse_os_release� setup_logging)�ChannelRoutingRule)�PackagesChannel)� JsonObject�get_str)�supported_oses)�Packages�PackagesLoader�patch_libexecdir)�Peer)�CockpitProblem�CockpitProtocolError)�Router� RoutingRule)�StdioTransportzcockpit.beiboot��returnc C s� t j�tj�d } | �� }tj�d�}|du r:tj � d�}tj |dd� t |d�}t �d|� z:|�� |krzt �d � t�|�� jd @ s�t �d � t�W n4 ttfy� t �d � |�|� |�d � Y n0 |S )z�Create askpass executable We need this for the flatpak: ssh and thus the askpass program run on the host (via flatpak-spawn), not the flatpak. Thus we cannot use the shipped cockpit-askpass program. zinteraction_client.pyZXDG_CACHE_HOMENz~/.cacheT)�exist_okzcockpit-client-askpasszChecking if %s exists...z. ... it exists but is not the same version...�@ z; ... it has the correct contents, but is not executable...z ... writing contents.i� )� importlibZ resources�filesr �__name__� read_bytes�os�environ�get�path� expanduser�makedirsr �logger�debug� ValueError�stat�st_mode�FileNotFoundError� write_bytes�chmod)Zsrc_pathZsrc_dataZxdg_cache_homeZ dest_path� r1 �3/usr/lib/python3.9/site-packages/cockpit/beiboot.py�ensure_ferny_askpass% s( r3 c @ sD e Zd ZU eeef ed< eeef d�dd�Zeed�dd�ZdS ) �ProxyPackagesLoader� file_status�r5 c C s || _ d S �Nr6 )�selfr5 r1 r1 r2 �__init__J s z ProxyPackagesLoader.__init__)r& r c C s | j �|d�S )NF)r5 r% )r8 r& r1 r1 r2 � path_existsM s z ProxyPackagesLoader.path_existsN) r! � __module__� __qualname__r �str�bool�__annotations__r9 r: r1 r1 r1 r2 r4 G s r4 z� import os def report_exists(files): command('cockpit.report-exists', {name: os.path.exists(name) for name in files}) z� import os def check_os_release(_argv): try: with open('/etc/os-release') as f: command('cockpit.check-os-release', f.read()) except OSError: command('cockpit.check-os-release', "") z� import os def force_exec(argv): try: os.execvp(argv[0], argv) except OSError as e: command('cockpit.fail-no-cockpit', str(e)) )� report_exists�check_os_release� force_execc sJ e Zd ZU ded< ed�� fdd� Zedd�dd�Zd d �d d �Z� Z S ) �DefaultRoutingRulez Peer | None�peer)�routerc s t � �|� d S r7 )�superr9 )r8 rE �� __class__r1 r2 r9 o s zDefaultRoutingRule.__init__)�optionsr c C s | j S r7 )rD )r8 rI r1 r1 r2 � apply_ruler s z DefaultRoutingRule.apply_ruleNr c C s | j d ur| j �� d S r7 )rD �close�r8 r1 r1 r2 �shutdownu s zDefaultRoutingRule.shutdown) r! r; r< r? r r9 r rJ rM � __classcell__r1 r1 rG r2 rC l s rC c @ s` e Zd ZU dZeed< eee d�dd�Zeeeee d�dd�Z ee e e ed d �d d �Z d S ) �AuthorizeResponder)z ferny.askpass�cockpit.report-exists�cockpit.fail-no-cockpit�cockpit.check-os-releaserE )rE �basic_passwordc C s || _ || _|d u| _d S r7 )rE rS �have_basic_password)r8 rE rS r1 r1 r2 r9 ~ s zAuthorizeResponder.__init__)�messages�prompt�hintr c � sv t �d|||� | jrHd|�� v rH| jd urHt �d|� | j}d | _|S |dkrTd S t�d|�}t�d|�}i }|r�|r�|�d�}|dkr�t �d |� d S |� d |�d�� d �|d < |�d�|d< t� � � dt � � � �} d| � �} | d t � |� � ��� } | jj| fd |||dd�|��I d H } | �| ��sBtd| � d| � ���| �| ��� } t �| � � ��� } t �dt| �� | S )Nz3AuthorizeResponder: prompt %r, messages %r, hint %rz password:z=AuthorizeResponder: sending Basic auth password for prompt %rZnonez&\n(\w+) key fingerprint is:? ([^.\n]+)z authenticity of host '([^ ]+) � z 127.0.0.1z,auto-accepting fingerprint for 127.0.0.1: %sZyes� z login-datazhost-key� �default�-zX-Conversation F)�timeoutrU rV rW Zechoz AuthorizeResponder: response z does not match challenge z Returning a %d chars response)r) r* rT �lowerrS �re�search�groupr# �getpid�time�base64Z b64encode�encode�decoderE Zrequest_authorization� startswithr � removeprefix�strip� b64decode�len)r8 rU rV rW ZreplyZfp_matchZ host_match�args�hostnameZ challenge_idZchallenge_prefix� challenge�responseZb64r1 r1 r2 � do_askpass� sN �� �z AuthorizeResponder.do_askpassN)�commandrl �fds�stderrr c � s� t �d|||� |dkrJ|\}tt|�d�| j_| jj�dt| jt g�� |dkrbt d|d d��|dk�r�t |d �� t �d � � t �d t � t D ]0}t � fd d �|�� D ��r�t �d |� d S q�t �d� � z8td�� }t |�� �}W d � n1 s�0 Y W n4 t�y> } zt �d| � W Y d } ~ d S d } ~ 0 0 � �d�|�d�k�r|� �d�|�d�k�r|t �d|� d S � �d� �dd��� d� �dd�� �} t d| d��d S )NzGot ferny command %s %s %srP )�loaderr rQ z no-cockpit)�messagerR z'cockpit.check-os-release: remote OS: %rz,cockpit.check-os-release: supported OSes: %rc 3 s | ]\}}� � |�|kV qd S r7 )r% )�.0�k�v�Z remote_osr1 r2 � <genexpr>� � z7AuthorizeResponder.do_custom_command.<locals>.<genexpr>z8cockpit.check-os-release: remote matches supported OS %rz$cockpit.check-os-release: remote: %rz/etc/os-releasezIfailed to read local /etc/os-release, skipping OS compatibility check: %sZIDZ VERSION_IDz7cockpit.check-os-release: remote OS matches local OS %r�NAME�?rY � )� unsupported)r) r* r r4 rE �packagesZ routing_rules�insertr r r r r �all�items�open�read�OSErrorZwarningr% ) r8 rq rl rr rs r5 Zosinfo�fZthis_os�er r1 ry r2 �do_custom_command� s6 . , &z$AuthorizeResponder.do_custom_command)r! r; r< Zcommandsr r? r r= r9 rp �tuple�list�intr� r1 r1 r1 r2 rO z s GrO )�commentr c C s ddd| � �fdfS )NZpython3z-icz# r1 r1 )r� r1 r1 r2 �python_interpreter� s r� )�cmd�dest� ssh_askpass�ssh_optsr c G s� |� d�\}}}|�� rP|�d�sP|�d�rB|�d�rB|dd� }d|d|g}nd|g}dg|�|�t�| ��R d |��d d ffS ) N�:�[�]rX ���z-pz--Zsshz SSH_ASKPASS=z DISPLAY=xzSSH_ASKPASS_REQUIRE=force)� rpartition�isdigit�endswithrg �shlex�join)r� r� r� r� �host�_�port� destinationr1 r1 r2 �via_ssh� s& ������r� �r� �envr c C s ddgdd� |D ��| �R dfS )Nz flatpak-spawnz--hostc s s | ]}d |� �V qdS )z--env=Nr1 )rv Zkvr1 r1 r2 rz r{ z flatpak_spawn.<locals>.<genexpr>r1 r1 )r� r� r1 r1 r2 � flatpak_spawn s � ���r� c s� e Zd ZU ded< eeejd�� fdd� Zdd�dd �Z dd�d d �Z dd�d d �Z e e e e dd�dd�Z dd�dd�Zedd�dd�Z� ZS )�SshPeerzMLiteral["always"] | Literal["never"] | Literal["supported"] | Literal["auto"]�mode)rE r� rl c s@ || _ |j| _t�� | _t| jj�d | _d | _t � � |� d S )Nzuser-known-hosts) r� � remote_bridge�tempfileZTemporaryDirectoryZtmpdirr �name�known_hosts_filerS rF r9 )r8 rE r� rl rG r1 r2 r9 s zSshPeer.__init__Nr c � s. t j�d�r | �� I d H n| �� I d H d S )Nz/.flatpak-info)r# r& �exists�connect_from_flatpak�connect_from_bastion_hostrL r1 r1 r2 �do_connect_transport s z SshPeer.do_connect_transportc � sN t d�\}}| jdkr*t|| jt� �\}}t||�\}}| �||�I d H d S )N�cockpit-bridgeZ localhost)r� r� r� r3 r� �boot)r8 r� r� r1 r1 r2 r� ' s z SshPeer.connect_from_flatpakc � sJ d }ddg}| j �d�I d H }t|d�}|�d�r�t�|dd � ��� }|�d�\}}}|�d�\}}| _|r�t � d |� |d |g7 }| jd u r�|dd g7 }t d �\} } t d �} t | �} | �� s�t �d| � t�d�} | d ur�|dd| � �g7 }|d u�r| j�|� |dd| j��g7 }t| | j| g|�R � \} } | �| | �I d H d S )Nz-ozNumberOfPasswordPrompts=1�*ro zBasic � � r� z,got username %s and password from Basic authz-lzPasswordAuthentication=nor� z ${libexecdir}/cockpit-askpassz+Could not find cockpit-askpass helper at %rZ COCKPIT_SSH_KNOWN_HOSTS_FILEzGlobalKnownHostsFile=zUserKnownHostsfile=)rE Z request_authorization_objectr rg rd rj rf � partitionrS r) r* r� r r r� �errorr# �getenvr� � write_textr� r� r� )r8 � known_hostsrl Zauthro ZdecodedZ user_passwordr� �userr� r� Zaskpassr� Zenv_known_hostsr1 r1 r2 r� 4 s4 z!SshPeer.connect_from_bastion_hostr� c � s� t | �}t�t| j| j�|g�}t�d||� | j|||dd�I d H }| j dkr`ddgffg}n@| j dkrzddgffg}n&| j d kr�ddgffd g ffg}ng }t j g |�d t t �� �gf�|j�td �}|�|�� � |�� I d H d S ) Nz Launching command: cmd=%s env=%sT)rs Zstart_new_session�autoZtry_execr� �alwaysrB � supportedrA r@ )Zgadgets)r r ZInteractionAgentrO rE rS r) r* Zspawnr� r Zmake_bootloaderr� r Zget_condition_filesZsteps�BEIBOOT_GADGETS�writere � communicate)r8 r� r� Zbeiboot_helperZagentZ transportZexec_cockpit_bridge_stepsZstage1r1 r1 r2 r� ] s, ����z SshPeer.bootc C s d | _ d S r7 )rS rL r1 r1 r2 �do_superuser_init_donez s z SshPeer.do_superuser_init_done)ru r c C s| t �d|| jd u� t|d��d�r^t|d�}| jd ur^t �d� | jd|| jd� d | _d S t �d� | jd|d d � d S ) Nz*SshPeer.do_authorize: %r; have password %srn zplain1:�cookiez-SshPeer.do_authorize: responded with password� authorize)rq r� ro z0SshPeer.do_authorize: authentication-unavailablezauthentication-unavailable)rq r� �problem)r) r* rS r rg � write_control)r8 ru r� r1 r1 r2 � do_authorize} s zSshPeer.do_authorize)r! r; r< r? r r= �argparse� Namespacer9 r� r� r� r r� r� r r� rN r1 r1 rG r2 r� s ) r� c sb e Zd ZU dZee ed< eed< ej d�� fdd� Z dd�dd �Z d d � Z dd�d d �Z � ZS )� SshBridgeNr� �ssh_peer)rl c s2 t | �}t� �|g� t| |j|�| _| j|_d S r7 )rC rF r9 r� r� r� rD )r8 rl ZrulerG r1 r2 r9 � s zSshBridge.__init__r c C s d S r7 r1 rL r1 r1 r2 � do_send_init� s zSshBridge.do_send_initc C s t �d|� | j�|� d S )NzSshBridge.do_init: %r)r) r* r� r� )r8 ru r1 r1 r2 �do_init� s zSshBridge.do_initc C s | j �| j� d S r7 )r� Zadd_done_callbackrK rL r1 r1 r2 � setup_session� s zSshBridge.setup_session)r! r; r< r� r r r? r� r� r� r9 r� r� r� rN r1 r1 rG r2 r� � s r� c � sV t �d� t| �}tt�� |� z�t|j�� I d H �}|jj � � r`|j dddd|jj � � id� |� di �}t|t�s�|j dd d d � W d S d |d < |jr�t�|jj�|d< |� |� |j�� W �nR tj�y� } z�tj�t|��}t �d||� t|tj��r d}nRt|tj��r d}n>t|tj��r2d}n*t|t��rDd}nt|tj��rXd}nd}|jj � � �r�|j d|t|�|jj � � d� n|j d|t|�d � W Y d }~d S d }~0 t �y� } z*t �d|� |j |j dd� W Y d }~d S d }~0 tj �y t �d� Y d S 0 t �d� |� � z|� � I d H W n t!�yP Y n0 d S )NzHi. How are you today?r� z x-login-datar\ z known-hosts)rq rn r� Z login_data� capabilities�initzprotocol-errorzcapabilities must be a dict)rq r� ru Tzexplicit-superuserr� z.ferny.InteractionError: %s, interpreted as: %rzauthentication-failedzinvalid-hostkeyzunknown-hostkeyz unknown-hostzinternal-error)rq r� ru r� zCockpitProblem: %s)rq z"Peer bridge got cancelled, exitingz/Startup done. Looping until connection closes.)"r) r* r� r �asyncioZget_running_loop�dictr� �startr� r� r� � read_text� setdefault� isinstancer� �fromkeysZ thaw_endpointr ZInteractionErrorZ ssh_errorsZ get_exception_for_ssh_stderrr= ZSshAuthenticationErrorZSshChangedHostKeyErrorZSshHostKeyErrorr� ZSshErrorr �attrsZCancelledErrorr� r� �BrokenPipeError)rl Zbridgeru r� �excr� r� r1 r1 r2 �run� sj �� � r� c C sr t �� tjdd�} | jdg d�ddd� | jdd d � | jd d d � | �� }t|jd� tj t |�|jd� d S )Nz@cockpit-bridge is run automatically inside of a Cockpit session.)� descriptionz--remote-bridge)r� �neverr� r� r� z�How to run cockpit-bridge from the remote host: auto: if installed (default), never: always copy the local one; supported: if not installed, copy local one for compatible OSes, fail otherwise; always: fail if not installed)�choicesr[ �helpz--debug� store_true)�actionr� z5Name of the remote host to connect to, or 'localhost')r� )r* ) r �installr� �ArgumentParser� add_argument� parse_argsr r* r� r� )�parserrl r1 r1 r2 �main� s � r� �__main__)Fr� r� rd Zimportlib.resourcesr Zloggingr# r_ r� r� rc �pathlibr �typingr r r r Zcockpitr Zcockpit._vendorr Zcockpit._vendor.beir Zcockpit.beipackr Zcockpit.bridger r Zcockpit.channelr Zcockpit.channels.packagesr Zcockpit.jsonutilr r Zcockpit.osinfor Zcockpit.packagesr r r Z cockpit.peerr Zcockpit.protocolr r Zcockpit.routerr r Zcockpit.transportsr Z getLoggerr) r3 r4 r� rC ZAskpassHandlerrO r= r� r� r� r� r� r� r� r� r! r1 r1 r1 r2 �<module> sZ " ��x ** v G