golden hour
/opt/saltstack/salt/lib/python3.10/site-packages/salt/channel/__pycache__
⬆️ Go Up
Upload
File/Folder
Size
Actions
__init__.cpython-310.pyc
166 B
Del
OK
client.cpython-310.pyc
16.46 KB
Del
OK
server.cpython-310.pyc
20.28 KB
Del
OK
Edit: client.cpython-310.pyc
o �xeRS � @ st d Z ddlZddlZddlZddlZddlZddlZddlZddl Zddl Zddl Zddl Zddl ZddlZddlZddlZddlmZ z ddlmZ dZW n/ ey} dZzddlmZ W n eyz zddlmZ W n eyw Y nw Y nw Y nw e�e�Z dZ d Z G d d � d �Z G d d � d �Z G dd� d�Z!G dd� d�Z"G dd� d�Z#G dd� d�Z$G dd� d�Z%dS )z� Encapsulate the different transports available to Salt. This includes client side transport, for the ReqServer and the Publisher � N)� SyncWrapper)�RSATF)� PKCS1_OAEP�< � c @ � e Zd ZdZedd� �ZdS )� ReqChannelz� Factory class to create a sychronous communication channels to the master's ReqServer. ReqChannels use transports to connect to the ReqServer. c K � t tj| f|dd�S �N�io_loop)Z loop_kwarg)r �AsyncReqChannel�factory��opts�kwargs� r �G/opt/saltstack/salt/lib/python3.10/site-packages/salt/channel/client.pyr 5 � �zReqChannel.factoryN��__name__� __module__� __qualname__�__doc__� staticmethodr r r r r r / s r c @ r )� PushChannelzM Factory class to create Sync channel for push side of push/pull IPC c K r r )r �AsyncPushChannelr r r r r r D r zPushChannel.factoryNr r r r r r ? � r c @ r )� PullChannelzM Factory class to create Sync channel for pull side of push/pull IPC c K r r )r �AsyncPullChannelr r r r r r S r zPullChannel.factoryNr r r r r r N r r c @ s� e Zd ZdZg d�ZdgZedd� �Zee fdd�Z e dd � �Z e d d � �Z d d � Zejjjjdd� �Zejjjj d$dd��Zdd� Zejjjjd%dd��Zejjjjdd� �Zejjjjdd� �Zejjjjd&d d ��Zd d � Zd d!� Z d"d#� Z dS )'r z� Factory class to create a asynchronous communication channels to the master's ReqServer. ReqChannels connect to the master's ReqServerChannel. )�!crypted_transfer_decode_dictentry�_crypted_transfer�_uncrypted_transfer�send�connect�closec K s� d}d|v r |d }nd|� di �� di �v r |d d d }d|vr-d|v r-|d |d< |� d�}|d u r>tjjjj�� }|� dt�}|� dt�}|� d d �}|d kr]tj j ||d �}nd }tj j ||d �} | || |||d �S )N�zeromq� transport�pillar�master� master_urir Zrequest_channel_timeoutZrequest_channel_tries�crypt�aes�clear�r )�tries�timeout) �get�salt�ext�tornado�ioloop�IOLoop�current�REQUEST_CHANNEL_TIMEOUT�REQUEST_CHANNEL_TRIESr* � AsyncAuthr& Zrequest_client) �clsr r �ttyper r/ r. r* �authr& r r r r n s$ zAsyncReqChannel.factoryc K sR t |�| _|| _|| _d | _| jr tj�| jd | jj�| _d| _ || _ || _ d S )N�pki_dirF) �dictr r& r< �master_pubkey_path�os�path�join�mpub�_closingr/ r. )�selfr r& r< r/ r. r r r r �__init__� s zAsyncReqChannel.__init__c C � | j rdS dS �Nr+ r, �r< �rE r r r r* � s zAsyncReqChannel.cryptc C s | j jS �N)r& r; rJ r r r r; � s zAsyncReqChannel.ttypec C � | j |dd�S �N� )�enc�load�version�r* �rE rP r r r � _package_load� � �z AsyncReqChannel._package_loadc c sr � d} z | j j||d�V }W n! ty0 } zt�d|� ||kr"� |d7 }W Y d }~qd }~ww tjjj� |��)N� T�r/ �Failed to send msg %r) r& r" � Exception�log�tracer1 r2 r3 �gen�Return)rE rP r. r/ �_try�ret�excr r r �_send_with_retry� s$ �� ��z AsyncReqChannel._send_with_retryNc c sh � |d u r| j }|d u r| j}t�� j}||d< | jjs"| j�� V | �| � | jj � |��||�V }| j� � }d|vrQ| j�� V | �| � | jj � |��||�V }t r]|�|d tj�}n t�|�} | �|d �}tj�| j|�} | �|| �} | �| d | d �s�tj�d��tj�| d �} | d |d kr�tj�d��| d |kr�tj�d��tj j j � | d ��) N�nonce�key�data�sigz,Pillar payload signature failed to validate.zKey verification failed.z!Pillar nonce verification failed.r' ) r/ r. �uuid�uuid4�hexr< � authenticated� authenticatera rT � crypticle�dumpsZget_keys�HAS_M2Zprivate_decryptr Zpkcs1_oaep_paddingr �newZdecryptr1 r* Z Crypticler �loads�verify_signature�AuthenticationError�payloadr2 r3 r\ r] ) rE rP Zdictkeyr/ r. rb r_ rc r+ �cipherZpcryptZ signed_msgrd r r r r � sL � � � � z1AsyncReqChannel.crypted_transfer_decode_dictentryc C s t j�| j||�S rK )r1 r* rp r? )rE rd re r r r rp � s z AsyncReqChannel.verify_signatureFc # s� � t �� j�� rt� t�r�� d< tjjjj � ����fdd��}�j j s+�j � � V z|� V }W n tj jyF �j � � V |� V }Y nw tjjj�|��)a� Send a load across the wire, with encryption In case of authentication errors, try to renegotiate authentication and retry the method. Indeed, we can fail too early in case of a master restart during a minion state execution call :param dict load: A load to send across the wire :param int timeout: The number of seconds on a response before failing rb c 3 sh � �j j���jj�� ���d�V } | r �jjj| ��d�} �r%�jdkr,tj j � | �} tj j j �| ��)NrW )rb Ztcp)r& r" rT r< rk rl ro r; r1 �frameZdecode_embedded_strsr2 r3 r\ r] )rd �rP rb �rawrE r/ r r � _do_transfer s ��z7AsyncReqChannel._crypted_transfer.<locals>._do_transfer)rf rg rh � isinstancer> r1 r2 r3 r\ � coroutiner< ri rj r* rq r] )rE rP r/ rv rw r_ r ru r r � s � �z!AsyncReqChannel._crypted_transferc c s* � | j j| �|�|d�V }tjjj�|��)z� Send a load across the wire in cleartext :param dict load: A load to send across the wire :param int timeout: The number of seconds on a response before failing rW )r& r" rT r1 r2 r3 r\ r] )rE rP r/ r_ r r r r! - s ��z#AsyncReqChannel._uncrypted_transferc c s � | j �� V d S rK )r& r# rJ r r r r# < s �zAsyncReqChannel.connectc c s� � |du r| j }|du r| j}d} z%| jdkr't�d|� | j||d�V }nt�d|� | j|||d�V }W n! tyX } zt�d |� ||krJ� |d7 }W Y d}~qd}~ww tj j j � |��) a, Send a request, return a future which will complete when we send the message :param dict load: A load to send across the wire :param int tries: The number of times to make before failure :param int timeout: The number of seconds on a response before failing NrV Tr, z ReqChannel send clear load=%rrW z ReqChannel send crypt load=%r)r/ rv rX ) r/ r. r* rZ r[ r! r rY r1 r2 r3 r\ r] )rE rP r. r/ rv r^ r_ r` r r r r" @ s. � ��zAsyncReqChannel.sendc C s. | j rdS t�d| jj� d| _ | j�� dS )z� Since the message_client creates sockets and assigns them to the IOLoop we have to specifically destroy them, since we aren't the only ones with references to the FDs NzClosing %s instanceT)rD rZ �debug� __class__r r& r$ rJ r r r r$ ` s zAsyncReqChannel.closec C � | S rK r rJ r r r � __enter__k � zAsyncReqChannel.__enter__c G � | � � d S rK �r$ �rE �argsr r r �__exit__n � zAsyncReqChannel.__exit__)NNN)F)NNF) r r r r � async_methods� close_methods� classmethodr r7 r8 rF �propertyr* r; rT r1 r2 r3 r\ ry ra r rp r r! r# r" r$ r} r� r r r r r ] sD � " � �7 . r c @ s� e Zd ZdZddgZdgZedd� �Zd"dd �Ze d d � �Z e j j jjd d � �Zdd� Zd"dd�Zdd� Ze j j jjdd� �Ze j j jjdd� �Zdd� Zdd� Ze j j jjd d � �Zd d � Zd d!� ZdS )#�AsyncPubChannelzQ Factory class to create subscription channels to the master's Publisher r# �_decode_messagesr$ c K s� d}d|v r |d }nd|� di �� di �v r |d d d }d|vr-d|v r-|d |d< |dkr;d|d< t�d |� |� d �}|d u rLtjjjj�� }tj j ||d �}tj � ||�}| ||||�S ) Nr% r& r' r( r) ZdetectTZ detect_modez$Transport is set to detect; using %sr r- ) r0 rZ �infor1 r2 r3 r4 r5 r6 r* r9 r& Zpublish_client)r: r r r; r r< r& r r r r s zAsyncPubChannel.factoryNc C sh || _ || _|| _| j�d�| _|| _d| _d| _tj j j d| j dd�| _ t j �| j d | jj�| _d S )Ns saltF�minion)r �listenr= )r r r< Z gen_token�tokenr& rD � _reconnectedr1 �utils�eventZ get_eventr@ rA rB rC r? )rE r r& r< r r r r rF � s zAsyncPubChannel.__init__c C rG rH rI rJ r r r r* � s zAsyncPubChannel.cryptc c s� � z0| j js | j �� V t| j�dd��dkr | j�d�}n| j jd }| j�|| j | j �V W dS t y9 � t yZ } zdt |�vrOtj�d�|���W Y d}~dS d}~ww )zX Return a future which completes when connected to the remote publisher � publish_porti� z -|RETRY|-z Unable to sign_in to master: {}N)r< ri rj �intr r0 Zcredsr& r# �connect_callback�disconnect_callback�KeyboardInterruptrY �strr1 � exceptions�SaltClientError�format)rE r� r` r r r r# � s( � � ����zAsyncPubChannel.connectc C s, | j �� | jdur| j�� d| _dS dS )z# Close the channel N)r& r$ r� ZdestroyrJ r r r r$ � s �zAsyncPubChannel.closec s: � du r �j �d�S tjjjj� �fdd��}�j �|�S )zH When jobs are received pass them (decoded) to callback Nc 3 s@ � �j �| �V }��|�V }t�d|� |d ur � |� d S d S )NzPubChannel received: %r)r& r� �_decode_payloadrZ rz )�messagesrr �decoded��callbackrE r r � wrap_callback� s � �z.AsyncPubChannel.on_recv.<locals>.wrap_callback)r& �on_recvr1 r2 r3 r\ ry )rE r� r� r r� r r� � s zAsyncPubChannel.on_recvc C rL rM rR rS r r r rT � rU z AsyncPubChannel._package_loadc # s � �j d |d�� tjjjj� �fdd��}|s �jjs`d}|�j d ks,�j d dk r`z�j�� V W n+ tj j yQ } zt � |� |d7 }W Y d}~nd}~ww |�j d ks,�j d dk s,z |� V }tjjj� |�� tjjy� �j�� V |� V }tjjj� |��w ) z� Send the minion id to the master so that the master may better track the connection state of the minion. In case of authentication errors, try to renegotiate authentication and retry the method. �id)r� �tokc 3 sF � �� �jj�� ��} tjjj| d d�}�j�|�V tj j j � d��)N)�headerT) rT r< rk rl r1 r& rt Z frame_msgr" r2 r3 r\ r] )�msg�package�rP rE r r rw � s �z-AsyncPubChannel.send_id.<locals>._do_transferr Ztcp_authentication_retriesrV N)r r1 r2 r3 r\ ry r< ri rj r� r� rZ rz r] r* rq )rE r� Z force_authrw �countr` r_ r r� r �send_id� s4 � ��� �zAsyncPubChannel.send_idc c s� � | j rd S z�| �| j| j�V d| _| j�d| jd id� | jr�| j�d�dkrCd� | jd t � � �}t j j�| jd dgd�}nd � | jd t � � �}t j j�| jd dgd �}| jd d d | j||d �}t�| j��2}z |j|d d�V W n t jjy� t�d� Y n ty� tjddd� Y nw W d � n 1 s�w Y W d S W d S d| _W d S ty� } ztjd|dd� W Y d }~d S d }~ww )NTr( Z__master_connectedZ__roleZsyndiczSyndic {} started at {}r� �startzMinion {} started at {}r� Z _minion_event)r� �cmdZpretagr� rd �tagr rW zEfire_master failed: master could not be contacted. Request timed out.zfire_master failed)�exc_infoz2Caught exception in PubChannel connect callback %r)rD r� r� r� � connectedr� � fire_eventr r0 r� �time�asctimer1 r� Ztagifyr r r" r� ZSaltReqTimeoutErrorrZ r� rY �error)rE �resultrd r� rP Zchannelr` r r r r� sV �� ��� ��(� ���z AsyncPubChannel.connect_callbackc C s, | j rd S d| _| j�d| jd id� d S )NFr( Z__master_disconnected)rD r� r� r� r rJ r r r r� < s z#AsyncPubChannel.disconnect_callbackc C sT | j �d�r&|�dd�stj�d��tj�| j|d |�d��s(tj�d��d S d S )NZsign_pub_messagesre Fz<Message signing is enabled but the payload has no signature.rP z%Message signature failed to validate.)r r0 r1 r* rq rp r? �rE rr r r r �_verify_master_signatureB s ����z(AsyncPubChannel._verify_master_signaturec c s� � t �d|� |d dkr<| �|� z | jj�|d �|d< W n tjjy; | j� � V | jj�|d �|d< Y nw tj j j � |��)NzDecoding payload: %srO r+ rP )rZ r[ r� r< rk ro r1 r* rq rj r2 r3 r\ r] r� r r r r� Q s � �z AsyncPubChannel._decode_payloadc C r| rK r rJ r r r r} _ r~ zAsyncPubChannel.__enter__c G r rK r� r� r r r r� b r� zAsyncPubChannel.__exit__rK )r r r r r� r� r� r rF r� r* r1 r2 r3 r\ ry r# r$ r� rT r� r� r� r� r� r} r� r r r r r� r s6 �� % / r� c @ r )r z3 Factory class to create IPC Push channels c K � ddl }|jjj| fi |��S )z\ If we have additional IPC transports other than UxD and TCP, add them here r N)�salt.transport.ipcr& �ipcZIPCMessageClient�r r r1 r r r r k s zAsyncPushChannel.factoryNr r r r r r f r r c @ r )r z3 Factory class to create IPC pull channels c K r� )z\ If we have additional IPC transports other than UXD and TCP, add them here r N)r� r& r� ZIPCMessageServerr� r r r r | s zAsyncPullChannel.factoryNr r r r r r w r r )&r Zloggingr@ r� rf Z salt.cryptr1 Zsalt.exceptionsZsalt.ext.tornado.genZsalt.ext.tornado.ioloopZ salt.payloadZsalt.transport.frameZsalt.utils.eventZsalt.utils.filesZsalt.utils.minionsZsalt.utils.stringutilsZsalt.utils.verifyZsalt.utils.asynchronousr ZM2Cryptor rm � ImportErrorZCryptodome.Cipherr Z Crypto.CipherZ getLoggerr rZ r7 r8 r r r r r� r r r r r r �<module> s^ ����� u
Save