3
\me @ s U d Z ddlZddlZddlZddlmZ ddlmZ ddlm Z m
Z
ddl m Z ddl
mZ ddlmZmZ dd lmZ dd
lmZ ejeZd Zd d
deegeededgg dZeeeZ dddZdddZ e ee e ddddZ dS )z%Seed Random: Provide random seed data N)BytesIO)dedent)subputil)Cloud)Config)
MetaSchema get_meta_doc) ALL_DISTROS) PER_INSTANCEaP All cloud instances started from the same image will produce very similar
data when they are first booted as they are all starting with the same seed
for the kernel's entropy keyring. To avoid this, random seed data can be
provided to the instance either as a string or by specifying a command to run
to generate the data.
Configuration for this module is under the ``random_seed`` config key. If
the cloud provides its own random seed data, it will be appended to ``data``
before it is written to ``file``.
If the ``command`` key is specified, the given command will be executed. This
will happen after ``file`` has been populated. That command's environment will
contain the value of the ``file`` key as ``RANDOM_SEED_FILE``. If a command is
specified that cannot be run, no error will be reported unless
``command_required`` is set to true.
Zcc_seed_randomz Seed RandomzProvide random seed dataz random_seed:
file: /dev/urandom
data: my random string
encoding: raw
command: ['sh', '-c', 'dd if=/dev/urandom of=$RANDOM_SEED_FILE']
command_required: true
a_ # To use 'pollinate' to gather data from a remote entropy
# server and write it to '/dev/urandom', the following
# could be used:
random_seed:
file: /dev/urandom
command: ["pollinate", "--server=http://local.polinate.server"]
command_required: true
)idnametitle descriptionZdistrosZ frequencyZexamplesZactivate_by_schema_keysc C sf | sdS | s|j d
kr$tj| S |j d kr:tj| S |j d krVtj| dd dS td | d S )
N rawbase64b64gzipgzF)quietdecodez Unknown random_seed encoding: %s)r )r r )r r )lowerr encode_textr Z b64decodeZ decomp_gzipIOError)dataencoding r $/usr/lib/python3.6/cc_seed_random.py_decodeP s
r c C sr | r|rt dn| s&tjd d S | d }tj|s^|rNt dj|dntjd| d S tj| |dd d S ) Nz"no command found but required=truezno command providedr z+command '{cmd}' not found but required=true)cmdz'command '%s' not found for seed_commandF)envZcapture)
ValueErrorLOGdebugr Zwhichformat)commandrequiredr! r r r r handle_random_seed_command] s
r( )r
cfgcloudargsreturnc
C s |j di }|j dd}|j dd}t }|rF|jt||j dd |jj}|rnd|krn|jtj|d |j }t |rt
j d| t || tj || |j d d } |j d
d }
y$t
jj } || d < t| |
| d
W n6 tk
r } zt
jd| | | W Y d d } ~ X nX d S )NZ random_seedfilez /dev/urandomr r r )r z0%s: adding %s bytes of random seed entropy to %sr& Zcommand_requiredFZRANDOM_SEED_FILE)r& r' r! z'handling random command [%s] failed: %s)getr writer Z
datasourcemetadatar r getvaluelenr# r$ Z append_fileosenvironcopyr( r" Zwarning)
r
r) r* r+ ZmycfgZ seed_pathZ seed_dataZseed_bufr0 r& Zreqr! er r r handlep s4
r7 )N)N) __doc__r Zloggingr3 ior textwrapr Z cloudinitr r Zcloudinit.cloudr Zcloudinit.configr Zcloudinit.config.schemar r Zcloudinit.distrosr
Zcloudinit.settingsr Z getLogger__name__r# ZMODULE_DESCRIPTIONmetar r( strlistr7 r r r r s8