3
ܓi% @ sN d dl Z d dlZd dlZd dlmZmZmZ d dlmZ G dd deeZ dS ) N)Plugin RedHatPlugin PluginOpt)
is_executablec
@ sh e Zd ZdZdZd Zd Zejej ddZ
dZ e dddde de dde ddddgZ
dd Zd d Zd S )!Ovirtz oVirt EngineZovirtvirt ovirt-engineovirt-engine-dwhovirt-engine-reportsovirt-engine-metricsovirt-engine-setupovirt-vmconsoleovirt-scheduler-proxyrhevm rhevm-dwh
rhevm-reportsz}^/etc/
(rhevm|ovirt-engine|ovirt-engine-dwh)/
(engine.conf|ovirt-engine-dwhd.conf)
(\.d/.+.conf.*?)?$)flagspatternzcENGINE_DB_PASSWORD:ENGINE_PKI_TRUST_STORE_PASSWORD:ENGINE_PKI_ENGINE_STORE_PASSWORD:DWH_DB_PASSWORD
jbosstraceTz0Enable oVirt Engine JBoss stack trace collection)defaultZdesczsensitive-keysz.Sensitive keys to be masked in post-processingheapdumpFz3Collect heap dumps from /var/log/ovirt-engine/dump/c s | j dr| jdrd}d| d}| j|}dd |d j D }|s^| jjd | jd xF|D ]>}ytj|t j
W qd t k
r | jjd
| Y qdX qdW | j d d g | j d
s| j d | j
d ddddddddg}dDdEg}| jd d g | jd d |D | jd d |D d }d!} d" t|rJ| j| d# t| rd| j| d$ td"rd%d&d'g}
| j fd(d|
D | jd)d*d+d,d-d.d/d0d1d2d3d4d5d6d7d8d9dd:d;dd?d@ | j dAdBg | jdCdg d S )FNr z ovirt-enginez)^ovirt-engine\ -server.*jboss-modules.jarz
pgrep -f ''c S s g | ] }t |qS )int).0xr r /usr/lib/python3.6/ovirt.py
G s z Ovirt.setup..outputz Unable to get ovirt-engine pidzUnable to send signal to z/etc/ovirt-engine/.pgpassz/etc/rhevm/.pgpassr z/var/log/ovirt-engine/dumpz/var/log/ovirt-engine/dump/z /etc/pki/ovirt-engine/ca.pemz#/etc/pki/ovirt-engine/apache-ca.pemz&/etc/pki/ovirt-engine/certs/engine.cerz&/etc/pki/ovirt-engine/certs/apache.cerz//etc/pki/ovirt-engine/certs/websocket-proxy.cerz%/etc/pki/ovirt-engine/certs/jboss.cerz-/etc/pki/ovirt-engine/certs/imageio-proxy.cerz2/etc/pki/ovirt-engine/certs/ovirt-provider-ovn.cermypass!/etc/pki/ovirt-engine/.truststorechangeit)/var/lib/ovirt-engine/external_truststorezengine-config --allzengine-config -dc S s g | ]}d | dqS )zopenssl x509 -in z
-text -nooutr )r cr r r r t s c S s g | ]\}}d | d| qS )zkeytool -list -storepass z -rfc -keystore r )r pr# r r r r y s zengine-manage-domainsz ovirt-engine-extensions-toolzovirt-aaa-jdbc-toolz listz info list-extensionszquery --what=userzquery --what=groupz
settings showc s g | ]} d | qS ) r )r Zsc) jdbc_toolr r r s z/etc/ovirt-enginez /etc/rhevm/z/etc/ovirt-engine-dwhz/etc/ovirt-engine-reportsz/etc/ovirt-engine-metricsz/etc/ovirt-engine-setupz/etc/ovirt-vmconsolez/var/log/ovirt-enginez/var/log/ovirt-engine-dwhz /var/log/ovirt-engine-reportsz /var/log/ovirt-scheduler-proxyz/var/log/rhevmz/etc/sysconfig/ovirt-enginez /usr/share/ovirt-engine/confz/var/log/ovirt-guest-agentz'/var/lib/ovirt-engine/setup-history.txtz#/var/lib/ovirt-engine/setup/answersz /var/tmp/ovirt-engine/configz*/var/lib/ovirt-engine/jboss_runtime/configz2/var/lib/ovirt-engine-reports/jboss_runtime/configZovirt_engine_confdZovirt_engine_boot_logZovirt_engine_console_log)z"/etc/ovirt-engine/engine.conf.d/.*z /var/log/ovirt-engine/boot.logz!/var/log/ovirt-engine/console.logz/etc/pki/ovirt-engine/keysz /etc/pki/ovirt-engine/privatez/etc/pki/ovirt-engine/)r r )r! r" )
get_optionZ is_installedZexec_cmd
splitlinesZsoslogerrorZ add_alertoskillsignalSIGQUITOSErrorZadd_forbidden_pathZadd_dir_listingZadd_cmd_outputr Z
add_copy_specZ
add_file_tags) selfZengine_patternZpgrepresZ engine_pidspidZ certificatesZ keystoresZmanage_domainsZextensions_toolZsubcmdsr )r& r setupB s
z Ovirt.setupc
C s( xd+D ]}| j |dd qW d,}x |D ]}| j d
| d d q&W | j d
dd dddg}x&|D ] }| jd|}| j |dd q`W | j}| jd}|r|dk r|}dd |jdD } | j| jddj| dd x"d-D ]}
| jd d |
d d! qW d"d#d$d%g} d&dj| d'} | jd(| d) d*S ).z+
Obfuscate sensitive keys.
8/etc/ovirt-engine/engine-config/engine-config.properties//etc/rhevm/rhevm-config/rhevm-config.propertiesz(Password.type)=(.*)z \1=********ovirt-engine.xml0ovirt-engine_history/current/ovirt-engine.v1.xml*ovirt-engine_history/ovirt-engine.boot.xml-ovirt-engine_history/ovirt-engine.initial.xml*ovirt-engine_history/ovirt-engine.last.xmlz /var/tmp/ovirt-engine/config/z ()(.*)()z \1********\3z*/etc/ovirt-engine/redhatsupportplugin.confz(proxyPassword)=(.*)zlogcollector.confzimageuploader.confzisouploader.confz/etc/ovirt-enginez(passwd|pg-pass)=(.*)zsensitive-keysTc S s g | ] }|r|qS r r )r r r r r r s z"Ovirt.postproc..:(|z)=(.*)passwordOVESETUP_CONFIG_ADMIN_SETUPz&/var/lib/ovirt-engine/setup/answers/.*z
(?P[^=]*z [^=]*)=.*z\g=********z
vars.passwordz!pool.default.auth.simple.passwordz$pool.default.ssl.truststore.passwordz config.datasource.dbpasswordz(^\s*#*(z
)\s*=\s*)(.*)z$/etc/ovirt-engine/aaa/.*\.propertiesz \1*********N)r3 r4 )r5 r6 r7 r8 r9 )r= r> )Z do_file_subZ path_joinDEFAULT_SENSITIVE_KEYSr' splitZdo_path_regex_sub
DB_PASS_FILESjoin)
r/ ZproZ engine_filesfilenameZ passwd_filesZ conf_fileZ conf_pathZsensitive_keysZkeys_optZkey_listitemZ protect_keysZregexpr r r postproc sh
zOvirt.postprocN)r )
r r r
r r r
r r r r )__name__
__module__ __qualname__Z
short_descZ plugin_nameZprofilesZpackagesrecompileVERBOSErA r? r Z option_listr2 rE r r r r r s2
yr )
r* rI r, Zsos.report.pluginsr r r Z
sos.utilitiesr r r r r r s