| Server IP : 77.50.203.18 / Your IP : 192.168.0.10 Web Server : Apache/2.4.62 (CentOS Stream) OpenSSL/3.5.7 mpm-itk/2.4.7-04 PHP/8.4.23 System : Linux web2 5.14.0-722.el9.x86_64 #1 SMP PREEMPT_DYNAMIC Mon Jul 6 09:07:51 UTC 2026 x86_64 User : warsnews.ru ( 1001) PHP Version : 8.4.23 Disable Function : NONE MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : OFF | Sudo : ON | Pkexec : ON Directory : /usr/lib/python3.9/site-packages/cockpit/__pycache__/ |
Upload File : |
a
7(=j�T � @ sT d dl Z d dlZd dlZd dlZd dlZd dlZd dlZd dlZd dl Z d dl
Z
d dl m Z d dl
mZmZmZmZ d dlmZ d dlmZ d dlmZ d dlmZ d dlmZm Z d d l m Z d d
l m Z d d l!m"Z"m#Z# d d l$m%Z% d d
l&m'Z'm(Z(m)Z) d dl*m+Z+ d dl,m-Z-m.Z. d dl/m0Z0m1Z1 d dl2m3Z3 e�4d�Z5e d�dd�Z6G dd� de(�Z7dddd�ej8�Z8G d d � d e1�Z9G d d � d ej:�Z;e<e=ee< ee< f d �d!d"�Z>ee< e<e e<e=ee< ee< f d#�d$d%�Z?ee< ee< e=ee< ee< f d&�d'd(�Z@G d)d*� d*e+�ZAG d+d,� d,e0�ZBdd�d-d.�ZCdd�d/d0�ZDeEd1k�rPeD� dS )2� N)�Path)�Dict�Literal�Optional�Sequence)� polyfills)�ferny)�
bootloader)�BridgeBeibootHelper)�parse_os_release�
setup_logging)�ChannelRoutingRule)�PackagesChannel)�
JsonObject�get_str)�supported_oses)�Packages�PackagesLoader�patch_libexecdir)�Peer)�CockpitProblem�CockpitProtocolError)�Router� RoutingRule)�StdioTransportzcockpit.beiboot��returnc C s� t j�tj�d } | �� }tj�d�}|du r:tj �
d�}tj |dd� t |d�}t
�d|� z:|�� |krzt
�d � t�|�� jd
@ s�t
�d � t�W n4 ttfy� t
�d � |�|� |�d
� Y n0 |S )z�Create askpass executable
We need this for the flatpak: ssh and thus the askpass program run on the host (via flatpak-spawn),
not the flatpak. Thus we cannot use the shipped cockpit-askpass program.
zinteraction_client.pyZXDG_CACHE_HOMENz~/.cacheT)�exist_okzcockpit-client-askpasszChecking if %s exists...z. ... it exists but is not the same version...�@ z; ... it has the correct contents, but is not executable...z ... writing contents.i� )� importlibZ resources�filesr �__name__�
read_bytes�os�environ�get�path�
expanduser�makedirsr �logger�debug�
ValueError�stat�st_mode�FileNotFoundError� write_bytes�chmod)Zsrc_pathZsrc_dataZxdg_cache_homeZ dest_path� r1 �3/usr/lib/python3.9/site-packages/cockpit/beiboot.py�ensure_ferny_askpass% s(
r3 c @ sD e Zd ZU eeef ed< eeef d�dd�Zeed�dd�ZdS ) �ProxyPackagesLoader� file_status�r5 c C s
|| _ d S �Nr6 )�selfr5 r1 r1 r2 �__init__J s z ProxyPackagesLoader.__init__)r& r c C s | j �|d�S )NF)r5 r% )r8 r& r1 r1 r2 � path_existsM s z ProxyPackagesLoader.path_existsN) r! �
__module__� __qualname__r �str�bool�__annotations__r9 r: r1 r1 r1 r2 r4 G s
r4 z�
import os
def report_exists(files):
command('cockpit.report-exists', {name: os.path.exists(name) for name in files})
z�
import os
def check_os_release(_argv):
try:
with open('/etc/os-release') as f:
command('cockpit.check-os-release', f.read())
except OSError:
command('cockpit.check-os-release', "")
z�
import os
def force_exec(argv):
try:
os.execvp(argv[0], argv)
except OSError as e:
command('cockpit.fail-no-cockpit', str(e))
)�
report_exists�check_os_release�
force_execc sJ e Zd ZU ded< ed�� fdd� Zedd�dd�Zd d
�d d �Z� Z S )
�DefaultRoutingRulez Peer | None�peer)�routerc s t � �|� d S r7 )�superr9 )r8 rE �� __class__r1 r2 r9 o s zDefaultRoutingRule.__init__)�optionsr c C s | j S r7 )rD )r8 rI r1 r1 r2 �
apply_ruler s z DefaultRoutingRule.apply_ruleNr c C s | j d ur| j �� d S r7 )rD �close�r8 r1 r1 r2 �shutdownu s
zDefaultRoutingRule.shutdown)
r! r; r< r? r r9 r rJ rM �
__classcell__r1 r1 rG r2 rC l s
rC c @ s` e Zd ZU dZeed< eee d�dd�Zeeeee d�dd�Z ee
e e ed d
�d d �Z
d S )
�AuthorizeResponder)z
ferny.askpass�cockpit.report-exists�cockpit.fail-no-cockpit�cockpit.check-os-releaserE )rE �basic_passwordc C s || _ || _|d u| _d S r7 )rE rS �have_basic_password)r8 rE rS r1 r1 r2 r9 ~ s zAuthorizeResponder.__init__)�messages�prompt�hintr c � sv t �d|||� | jrHd|�� v rH| jd urHt �d|� | j}d | _|S |dkrTd S t�d|�}t�d|�}i }|r�|r�|�d�}|dkr�t �d |� d
S |� d |�d�� d �|d
< |�d�|d< t� � � dt
�
� � �} d| � �}
|
d t � |�
� ��� } | jj| fd |||dd�|��I d H } | �|
��sBtd| � d|
� ���| �|
��� }
t �|
�
� ��� } t �dt| �� | S )Nz3AuthorizeResponder: prompt %r, messages %r, hint %rz password:z=AuthorizeResponder: sending Basic auth password for prompt %rZnonez&\n(\w+) key fingerprint is:? ([^.\n]+)z authenticity of host '([^ ]+) � z 127.0.0.1z,auto-accepting fingerprint for 127.0.0.1: %sZyes� z login-datazhost-key� �default�-zX-Conversation F)�timeoutrU rV rW Zechoz AuthorizeResponder: response z does not match challenge z Returning a %d chars response)r) r* rT �lowerrS �re�search�groupr# �getpid�time�base64Z b64encode�encode�decoderE Zrequest_authorization�
startswithr � removeprefix�strip� b64decode�len)r8 rU rV rW ZreplyZfp_matchZ
host_match�args�hostnameZ challenge_idZchallenge_prefix� challenge�responseZb64r1 r1 r2 �
do_askpass� sN
�� �z AuthorizeResponder.do_askpassN)�commandrl �fds�stderrr c
� s� t �d|||� |dkrJ|\}tt|�d�| j_| jj�dt| jt g�� |dkrbt
d|d d��|dk�r�t |d �� t �d � � t �d
t � t D ]0}t
� fd d �|�� D ��r�t �d
|� d S q�t �d� � z8td�� }t |�� �}W d � n1 s�0 Y W n4 t�y> } zt �d| � W Y d } ~ d S d } ~ 0 0 � �d�|�d�k�r|� �d�|�d�k�r|t �d|� d S � �d� �dd��� d� �dd�� �}
t
d|
d��d S )NzGot ferny command %s %s %srP )�loaderr rQ z
no-cockpit)�messagerR z'cockpit.check-os-release: remote OS: %rz,cockpit.check-os-release: supported OSes: %rc 3 s | ]\}}� � |�|kV qd S r7 )r% )�.0�k�v�Z remote_osr1 r2 � <genexpr>� � z7AuthorizeResponder.do_custom_command.<locals>.<genexpr>z8cockpit.check-os-release: remote matches supported OS %rz$cockpit.check-os-release: remote: %rz/etc/os-releasezIfailed to read local /etc/os-release, skipping OS compatibility check: %sZIDZ
VERSION_IDz7cockpit.check-os-release: remote OS matches local OS %r�NAME�?rY � )� unsupported)r) r* r r4 rE �packagesZ
routing_rules�insertr
r r r r �all�items�open�read�OSErrorZwarningr% ) r8 rq rl rr rs r5 Zosinfo�fZthis_os�er r1 ry r2 �do_custom_command� s6
. , &z$AuthorizeResponder.do_custom_command)r! r; r< Zcommandsr r? r r= r9 rp �tuple�list�intr� r1 r1 r1 r2 rO z s
GrO )�commentr c C s ddd| � �fdfS )NZpython3z-icz# r1 r1 )r� r1 r1 r2 �python_interpreter� s r� )�cmd�dest� ssh_askpass�ssh_optsr c G s� |� d�\}}}|�� rP|�d�sP|�d�rB|�d�rB|dd� }d|d|g}nd|g}dg|�|�t�| ��R d |��d
d ffS ) N�:�[�]rX ���z-pz--Zsshz SSH_ASKPASS=z DISPLAY=xzSSH_ASKPASS_REQUIRE=force)�
rpartition�isdigit�endswithrg �shlex�join)r� r� r� r� �host�_�port� destinationr1 r1 r2 �via_ssh� s& ������r� �r� �envr c C s ddgdd� |D ��| �R dfS )Nz
flatpak-spawnz--hostc s s | ]}d |� �V qdS )z--env=Nr1 )rv Zkvr1 r1 r2 rz r{ z flatpak_spawn.<locals>.<genexpr>r1 r1 )r� r� r1 r1 r2 �
flatpak_spawn s � ���r� c s� e Zd ZU ded< eeejd�� fdd� Zdd�dd �Z dd�d
d �Z
dd�d d
�Z e e e e dd�dd�Z
dd�dd�Zedd�dd�Z� ZS )�SshPeerzMLiteral["always"] | Literal["never"] | Literal["supported"] | Literal["auto"]�mode)rE r� rl c s@ || _ |j| _t�� | _t| jj�d | _d | _t � �
|� d S )Nzuser-known-hosts) r� �
remote_bridge�tempfileZTemporaryDirectoryZtmpdirr �name�known_hosts_filerS rF r9 )r8 rE r� rl rG r1 r2 r9 s
zSshPeer.__init__Nr c � s. t j�d�r | �� I d H n| �� I d H d S )Nz/.flatpak-info)r# r& �exists�connect_from_flatpak�connect_from_bastion_hostrL r1 r1 r2 �do_connect_transport s z SshPeer.do_connect_transportc � sN t d�\}}| jdkr*t|| jt� �\}}t||�\}}| �||�I d H d S )N�cockpit-bridgeZ localhost)r� r� r� r3 r� �boot)r8 r� r� r1 r1 r2 r� ' s
z SshPeer.connect_from_flatpakc � sX d }ddg}| j �d�I d H }t|d�}|�d�r�t�|dd � ��� }|�d�\}}}|�d�\}}| _|r�t �
d |� |d
|g7 }| jd u r�|dd g7 }t d �\} }
t d
�} t
| t�s�J �t| �} | �� s�t �d| � t�d�}
|
d ur�|dd|
� �g7 }|d u�r(| j�|� |dd| j��g7 }t| | j| g|�R � \} }
| �| |
�I d H d S )Nz-ozNumberOfPasswordPrompts=1�*ro zBasic � � r� z,got username %s and password from Basic authz-lzPasswordAuthentication=nor� z ${libexecdir}/cockpit-askpassz+Could not find cockpit-askpass helper at %rZ COCKPIT_SSH_KNOWN_HOSTS_FILEzGlobalKnownHostsFile=zUserKnownHostsfile=)rE Z request_authorization_objectr rg rd rj rf � partitionrS r) r* r� r �
isinstancer= r r� �errorr# �getenvr� �
write_textr� r� r� )r8 � known_hostsrl Zauthro ZdecodedZ
user_passwordr� �userr� r� Zaskpassr� Zenv_known_hostsr1 r1 r2 r� 4 s6
z!SshPeer.connect_from_bastion_hostr� c � s� t | �}t�t| j| j�|g�}t�d||� | j|||dd�I d H }| j dkr`ddgffg}nN| j dkrzddgffg}n4| j d kr�ddgffd
g ffg}n| j d ks�J �g }t
j g |�d t t
�� �gf�|j�td
�}|�|�� � |�� I d H d S )Nz Launching command: cmd=%s env=%sT)rs Zstart_new_session�autoZtry_execr� �alwaysrB � supportedrA �neverr@ )Zgadgets)r
r ZInteractionAgentrO rE rS r) r* Zspawnr� r Zmake_bootloaderr� r Zget_condition_filesZsteps�BEIBOOT_GADGETS�writere � communicate)r8 r� r� Zbeiboot_helperZagentZ transportZexec_cockpit_bridge_stepsZstage1r1 r1 r2 r� ] s.
����z SshPeer.bootc C s
d | _ d S r7 )rS rL r1 r1 r2 �do_superuser_init_donez s z SshPeer.do_superuser_init_done)ru r c C s| t �d|| jd u� t|d��d�r^t|d�}| jd ur^t �d� | jd|| jd� d | _d S t �d� | jd|d d
� d S ) Nz*SshPeer.do_authorize: %r; have password %srn zplain1:�cookiez-SshPeer.do_authorize: responded with password� authorize)rq r� ro z0SshPeer.do_authorize: authentication-unavailablezauthentication-unavailable)rq r� �problem)r) r* rS r rg �
write_control)r8 ru r� r1 r1 r2 � do_authorize} s
zSshPeer.do_authorize)r! r; r< r? r r= �argparse� Namespacer9 r� r� r� r r� r� r r� rN r1 r1 rG r2 r� s
) r� c sb e Zd ZU dZee ed< eed< ej d�� fdd� Z
dd�dd �Z d
d � Z dd�d d
�Z
� ZS )� SshBridgeNr� �ssh_peer)rl c s2 t | �}t� �|g� t| |j|�| _| j|_d S r7 )rC rF r9 r� r� r� rD )r8 rl ZrulerG r1 r2 r9 � s zSshBridge.__init__r c C s d S r7 r1 rL r1 r1 r2 � do_send_init� s zSshBridge.do_send_initc C s t �d|� | j�|� d S )NzSshBridge.do_init: %r)r) r* r� r� )r8 ru r1 r1 r2 �do_init� s zSshBridge.do_initc C s | j �| j� d S r7 )r� Zadd_done_callbackrK rL r1 r1 r2 �
setup_session� s zSshBridge.setup_session)r! r; r< r� r r r? r� r� r� r9 r� r� r� rN r1 r1 rG r2 r� � s
r� c
� sd t �d� t| �}tt�� |� z�t|j�� I d H �}|jj �
� r`|j dddd|jj � � id� |�
di �}t|t�s�|j dd d
d � W d S t|t�s�J �d |d
< |jr�t�|jj�|d< |� |� |j�� W �nR tj�y� } z�tj�t|��}t �d||� t|tj��rd}nRt|tj��r,d}n>t|tj��r@d}n*t|t��rRd}nt|tj��rfd}nd}|jj �
� �r�|j d|t|�|jj � � d� n|j d|t|�d � W Y d }~d S d }~0 t �y } z*t �d|� |j |j dd� W Y d }~d S d }~0 tj �y$ t �d� Y d S 0 t �d� |� � z|� � I d H W n t!�y^ Y n0 d S )NzHi. How are you today?r� z x-login-datar\ z known-hosts)rq rn r� Z
login_data� capabilities�initzprotocol-errorzcapabilities must be a dict)rq r� ru Tzexplicit-superuserr� z.ferny.InteractionError: %s, interpreted as: %rzauthentication-failedzinvalid-hostkeyzunknown-hostkeyz unknown-hostzinternal-error)rq r� ru r� zCockpitProblem: %s)rq z"Peer bridge got cancelled, exitingz/Startup done. Looping until connection closes.)"r) r* r� r �asyncioZget_running_loop�dictr� �startr� r� r� � read_text�
setdefaultr� r� �fromkeysZ
thaw_endpointr ZInteractionErrorZ
ssh_errorsZ get_exception_for_ssh_stderrr= ZSshAuthenticationErrorZSshChangedHostKeyErrorZSshHostKeyErrorr� ZSshErrorr �attrsZCancelledErrorr� r� �BrokenPipeError)rl Zbridgeru r� �excr� r� r1 r1 r2 �run� sl
��
�
r� c C sr t �� tjdd�} | jdg d�ddd� | jdd d
� | jd d d
� | �� }t|jd� tj t |�|jd� d S )Nz@cockpit-bridge is run automatically inside of a Cockpit session.)� descriptionz--remote-bridge)r� r� r� r� r� z�How to run cockpit-bridge from the remote host: auto: if installed (default), never: always copy the local one; supported: if not installed, copy local one for compatible OSes, fail otherwise; always: fail if not installed)�choicesr[ �helpz--debug�
store_true)�actionr� z5Name of the remote host to connect to, or 'localhost')r� )r* )
r �installr� �ArgumentParser� add_argument�
parse_argsr r* r� r� )�parserrl r1 r1 r2 �main� s � r� �__main__)Fr� r� rd Zimportlib.resourcesr Zloggingr# r_ r� r� rc �pathlibr �typingr r r r Zcockpitr Zcockpit._vendorr Zcockpit._vendor.beir Zcockpit.beipackr
Zcockpit.bridger r Zcockpit.channelr
Zcockpit.channels.packagesr Zcockpit.jsonutilr r Zcockpit.osinfor Zcockpit.packagesr r r Z cockpit.peerr Zcockpit.protocolr r Zcockpit.routerr r Zcockpit.transportsr Z getLoggerr) r3 r4 r� rC ZAskpassHandlerrO r= r� r� r� r� r� r� r� r� r! r1 r1 r1 r2 �<module> sZ
" ��x ** v G