3
\me @ s U d Z ddlZddlZddlZddlmZmZ ddlmZ ddl m
Z
ddl m Z m
Z
ddlmZmZ ddlmZ dd lmZ d
Zd d d
eegeddgg dZe e
eZ ejeZdd Zd ddZdd Z d ddZ e e
ee ddd d Z dS ) z;SSH AuthKey Fingerprints: Log fingerprints of user SSH keys N)ssh_utilutil)Cloud)Config)
MetaSchema get_meta_doc) ALL_DISTROSug_util) PER_INSTANCE) SimpleTablezWrite fingerprints of authorized keys for each user to log. This is enabled by
default, but can be disabled using ``no_ssh_fingerprints``. The hash type for
the keys can be specified, but defaults to ``sha256``.
Zcc_ssh_authkey_fingerprintszSSH AuthKey Fingerprintsz!Log fingerprints of user SSH keyszno_ssh_fingerprints: truezauthkey_hash: sha512)idnametitle descriptionZdistrosZ frequencyZexamplesZactivate_by_schema_keysc C s8 g }x.t dt| dD ]}|j| ||d qW |S )Nr )rangelenappend)Zbin_hashZsplit_upi r 1/usr/lib/python3.6/cc_ssh_authkey_fingerprints.py _split_hash, s r sha256c C sR | sdS y,t j|}|jtj| djt|j S tt fk
rL dS X d S )N :?)
hashlibnewupdatebase64Z b64decodejoinr Z hexdigest TypeError
ValueError)Zb64_text hash_methZhasherr r r _gen_fingerprint3 s
r$ c C s: t | j| j| j| jgr6| jr6| jj j tjkr6dS dS )NTF) anykeytyper commentoptionslowerstripr ZVALID_KEY_TYPES)entryr r r _is_printable_keyB s
r, ci-info: c C s |s$d|| f }t j|ddd d S dd| ddg}t|}xH|D ]@}t|rB|jpVd t|j|pdd |jpld |jptd g} |j | qBW |j
}
|
j } t t
| t d
} t jd || f d | g}
|
j| x$|
D ] }t jd
||f ddd qW d S )Nz9%sno authorized SSH keys fingerprints found for user %s.
TF)consolestderrZKeytypezFingerprint (%s)ZOptionsComment-)keyz#Authorized keys from %s for user %s+z%s%s
)textr/ r. )r Z multi_logr r, r& r$ r r( r' Zadd_rowZ
get_string
splitlinesr maxcenterextend)userkey_fn key_entriesr# prefixmessageZ
tbl_fieldsZtblr+ rowZ authtbl_sZ
authtbl_linesZmax_lenlinesliner r r _pprint_key_entriesL s8
rA )r
cfgcloudargsreturnc C s t j|jddr"tjd| d S t j|dd}tj||j\}}xR|j D ]F\}}|jdsh|jdrvtjd| qLt
j |\} }
t || |
| qLW d S ) NZno_ssh_fingerprintsFz>Skipping module named %s, logging of SSH fingerprints disabledZ authkey_hashr Zno_create_homesystemzXSkipping printing of ssh fingerprints for user '%s' because no home directory is created)
r Zis_truegetLOGdebugZget_cfg_option_strr Znormalize_users_groupsZdistroitemsr Zextract_authorized_keysrA ) r
rB rC rD r# ZusersZ_groupsZ user_nameZ_cfgr: r; r r r handlew s rK )r )r r- )!__doc__r r ZloggingZ cloudinitr r Zcloudinit.cloudr Zcloudinit.configr Zcloudinit.config.schemar r Zcloudinit.distrosr r Zcloudinit.settingsr
Zcloudinit.simpletabler ZMODULE_DESCRIPTIONmetaZ getLogger__name__rH r r$ r, rA strlistrK r r r r s6
*