Current File : //lib/python2.7/site-packages/salt/modules/cryptdev.pyo
�
���^c @@ s
d Z d d l m Z m Z m Z d d l Z d d l Z d d l Z d d l Z d d l
Z d d l Z d d l m
Z
d d l m Z e j e � Z d Z d � Z d e f d � � YZ d
� Z d d � Z d d
� Z d d d e d d � Z d � Z d � Z d S( u^
Salt module to manage Unix cryptsetup jobs and the crypttab file
.. versionadded:: 2018.3.0
i ( t absolute_importt print_functiont unicode_literalsN( t CommandExecutionError( t sixu cryptdevc C@ s t j j j � r t d f St S( u)
Only load on POSIX-like systems
u= The cryptdev module cannot be loaded: not a POSIX-like system( t saltt utilst platformt
is_windowst Falset True( ( ( s9 /usr/lib/python2.7/site-packages/salt/modules/cryptdev.pyt __virtual__ s
t _crypttab_entryc B@ s� e Z d Z d e f d � � YZ d Z d Z e e d � � Z e d � � Z e d
� � Z
d � Z d � Z d
� Z
d � Z e d � � Z d � Z RS( u�
Utility class for manipulating crypttab entries. Primarily we're parsing,
formatting, and comparing lines. Parsing emits dicts expected from
crypttab() or raises a ValueError.
t
ParseErrorc B@ s e Z d Z RS( u; Error raised when a line isn't parsible as a crypttab entry( t __name__t
__module__t __doc__( ( ( s9 /usr/lib/python2.7/site-packages/salt/modules/cryptdev.pyR
/ s u nameu deviceu passwordu optionsu4 {name: <12} {device: <44} {password: <22} {options}
c C@ s� t | � d k r* t d j | � � � n | j d � rK | j d � � n | j � } t | � d k ry | d g 7} n t | � d k r� | j d � � n t t j j | | � � S( Ni u Invalid key array: {0}u #u Comment!i u u Invalid Entry!(
t lent
ValueErrort formatt
startswithR
t splitt dictR t movest zip( t clst linet keyst comps( ( s9 /usr/lib/python2.7/site-packages/salt/modules/cryptdev.pyt dict_from_line5 s c O@ s | | j | | � � S( N( R ( R t argst kwargs( ( s9 /usr/lib/python2.7/site-packages/salt/modules/cryptdev.pyt from_lineF s c C@ s | j j | � S( N( t crypttab_formatR ( R t entry( ( s9 /usr/lib/python2.7/site-packages/salt/modules/cryptdev.pyt dict_to_lineJ s c C@ s | j | j � S( u& String value, only works for full repr( R# t criteria( t self( ( s9 /usr/lib/python2.7/site-packages/salt/modules/cryptdev.pyt __str__N s c C@ s
t | j � S( u Always works( t reprR$ ( R% ( ( s9 /usr/lib/python2.7/site-packages/salt/modules/cryptdev.pyt __repr__R s c C@ s9 t g | D] } | | j | f ^ q
� } | j | � S( u( Returns an instance with just those keys( R R$ t __class__( R% R t keyt subset( ( s9 /usr/lib/python2.7/site-packages/salt/modules/cryptdev.pyt pickV s ,c K@ s d � t j | � D� | _ d S( u1 Store non-empty, non-null values to use as filterc S@ s: i | ]0 \ } } | d k r t j j j | � | � q S( N( t NoneR R t stringutilst
to_unicode( t .0R* t value( ( s9 /usr/lib/python2.7/site-packages/salt/modules/cryptdev.pys
<dictcomp>] s N( R t iteritemsR$ ( R% R$ ( ( s9 /usr/lib/python2.7/site-packages/salt/modules/cryptdev.pyt __init__[ s c C@ s t j j t j j | � � S( u% Resolve equivalent paths equivalently( t ost patht normcaset normpath( R5 ( ( s9 /usr/lib/python2.7/site-packages/salt/modules/cryptdev.pyt norm_patha s c C@ sJ | j | � } x4 t j | j � D] \ } } | | | k r" t Sq" Wt S( u< Compare potentially partial criteria against a complete line( R R R2 R$ R R
( R% R R" R* R1 ( ( s9 /usr/lib/python2.7/site-packages/salt/modules/cryptdev.pyt matchf s
( u nameu deviceu passwordu options( R R R R R
t
crypttab_keysR! t classmethodR R R# R& R( R, R3 t staticmethodR8 R9 ( ( ( s9 /usr/lib/python2.7/site-packages/salt/modules/cryptdev.pyR ( s c C@ s� i } t d d � } t j d � } t j | � xV | j d � D]E } | j | � } | rz | j � } | | | d <qB t j d � qB W| S( u5
List existing device-mapper device details.
u cmd.run_stdoutu dmsetup ls --target cryptu5 (?P<devname>\w+)\W+\((?P<major>\d+), (?P<minor>\d+)\)u
u devnameu- dmsetup output does not match expected format( t __salt__t ret compilet logt debugR R9 t groupdictt warning( t rett devicest out_regexR R9 t dev_info( ( s9 /usr/lib/python2.7/site-packages/salt/modules/cryptdev.pyt activeo s
u
/etc/crypttabc
C@ s� i } t j j | � s | St j j j | � �� } x� | D]� } t j j j | � j d � } yd t
j | � } | d j d � | d <x$ | d | k r� | d c d 7<q� W| | | j
d � <Wq; t
j k
r� q; Xq; WWd QX| S( u{
List the contents of the crypttab
CLI Example:
.. code-block:: bash
salt '*' cryptdev.crypttab
u
u optionsu ,u nameu _N( R4 R5 t isfileR R t filest fopenR. R/ t rstripR R R t popR
( t configRD t ifileR R" ( ( s9 /usr/lib/python2.7/site-packages/salt/modules/cryptdev.pyt crypttab� s
c
C@ sz t } t d | � } g } y� t j j j | d � �z } xp | D]h } t j j j | � } y) | j | � rv t } n
| j
| � Wq@ t j k
r� | j
| � q@ Xq@ WWd QXWn7 t t
f k
r� } d } t | j | | � � � n X| rly< t j j j | d � � } | j d � | D� � Wd QXWqlt t
f k
rh} d } t | j | | � � � qlXn | rvd Sd S(
u2
Remove the named mapping from the crypttab. If the described entry does not
exist, nothing is changed, but the command succeeds by returning
``'absent'``. If a line is removed, it returns ``'change'``.
CLI Example:
.. code-block:: bash
salt '*' cryptdev.rm_crypttab foo
t nameu rNu Could not read from {0}: {1}u w+c s@ s$ | ] } t j j j | � Vq d S( N( R R R. t to_str( R0 R ( ( s9 /usr/lib/python2.7/site-packages/salt/modules/cryptdev.pys <genexpr>� s u Could not write to {0}: {1}u changeu absent( R R R R RJ RK R. R/ R9 R
t appendR
t IOErrort OSErrorR R t
writelines(
RQ RN t modifiedR$ t linesRO R t exct msgt ofile( ( s9 /usr/lib/python2.7/site-packages/salt/modules/cryptdev.pyt rm_crypttab� s0
! u noneu u namec
C@ s: | d k r d } nH t | t j � r* n3 t | t � rK d j | � } n d } t | � � i | d 6| d 6| d k r� | n d d 6| d 6} g } d }
t | t � r� n0 t | t j � s� d } t | � � n | g } t | � } y | j | � } WnJ t k
rJd
� }
t j
j |
| � } d j | � } t | � � n Xt
j j | � sut d j | � � � n y� t j j j | d
� �� } x� | D]� } t j j j | � } yd | j | � r d }
| j | � r�| j | � qd }
| j t j | � � n
| j | � Wq�t j k
r<| j | � q�Xq�WWd QXWn7 t t f k
r�} d } t | j | | � � � n X|
d k r�| j t j | � � d }
n |
d k r6| s6y< t j j j | d � � } | j d � | D� � Wd QXWq3t t f k
r/d } t | j | � � � q3Xq6n |
S( u
Verify that this device is represented in the crypttab, change the device to
match the name passed, or add the name if it is not present.
CLI Example:
.. code-block:: bash
salt '*' cryptdev.set_crypttab foo /dev/sdz1 mypassword swap,size=256
u u ,u+ options must be a string or list of stringsu nameu deviceu noneu passwordu optionsu, match_on must be a string or list of stringsc S@ s
| t j k S( N( R R: ( R* ( ( s9 /usr/lib/python2.7/site-packages/salt/modules/cryptdev.pyt <lambda> s u$ Unrecognized keys in match_on: "{0}"u Bad config file "{0}"u ru presentu changeNu Couldn't read from {0}: {1}u newu w+c s@ s$ | ] } t j j j | � Vq d S( N( R R R. RR ( R0 R ( ( s9 /usr/lib/python2.7/site-packages/salt/modules/cryptdev.pys <genexpr>7 s u File not writable {0}( R- t
isinstanceR t string_typest listt joinR R R, t KeyErrorR t filterR R4 R5 RI R R RJ RK R. R/ R9 RS t text_typeR
RT RU RV ( RQ t devicet passwordt optionsRN t testt match_onRZ t
entry_argsRX RD R" R$ t filterFnt invalid_keysRO R RY R[ ( ( s9 /usr/lib/python2.7/site-packages/salt/modules/cryptdev.pyt set_crypttab� sx
! c C@ s\ | d k s$ | d k s$ | d k r3 t d � � n t d d j | | | � � } | d k S( u$
Open a crypt device using ``cryptsetup``. The ``keyfile`` must not be
``None`` or ``'none'``, because ``cryptsetup`` will otherwise ask for the
password interactively.
CLI Example:
.. code-block:: bash
salt '*' cryptdev.open foo /dev/sdz1 /path/to/keyfile
u noneu -u< For immediate crypt device mapping, keyfile must not be noneu cmd.retcodeu& cryptsetup open --key-file {0} {1} {2}i N( R- R R= R ( RQ Re t keyfilet code( ( s9 /usr/lib/python2.7/site-packages/salt/modules/cryptdev.pyt open? s
$
c C@ s# t d d j | � � } | d k S( u�
Close a crypt device using ``cryptsetup``.
CLI Example:
.. code-block:: bash
salt '*' cryptdev.close foo
u cmd.retcodeu cryptsetup close {0}i ( R= R ( RQ Ro ( ( s9 /usr/lib/python2.7/site-packages/salt/modules/cryptdev.pyt closeS s
( R t
__future__R R R t loggingR4 R> t salt.utils.filesR t salt.utils.platformt salt.utils.stringutilst salt.exceptionsR t salt.extR t getLoggerR R@ t __virtualname__R t objectR RH RP R\ R Rm Rp Rq ( ( ( s9 /usr/lib/python2.7/site-packages/salt/modules/cryptdev.pyt <module> s.
G 2 e
Mini Shell