shell bypass 403
UnknownSec Shell
:
/
snap
/
core22
/
current
/
lib
/
python3
/
dist-packages
/
cloudinit
/
net
/
__pycache__
/ [
drwxr-xr-x
]
upload
mass deface
mass delete
console
info server
name :
netplan.cpython-310.pyc
o 쑛h�[ � @ s@ d dl Z d dlZd dlZd dlZd dlZd dlZd dlmZ d dlm Z m Z m Z d dl m Z mZmZmZ d dlmZmZmZmZmZmZ d dlmZmZ dZdZ e� e �Z d d � Z d e!d e!d e fdd�Z"dd� Z#d$dd�Z$de%de&fdd�Z'de%fdd�Z(de%de%de&fd d �Z)de%de%fd d �Z*G d d!� d!ej+�Z+d"d#� Z,dS )%� N)�SpooledTemporaryFile)�Callable�List�Optional)�features�safeyaml�subp�util)�IPV6_DYNAMIC_TYPES� SYS_CLASS_NET�get_devicelist�renderer� should_add_gateway_onlink_flag�subnet_is_ipv6)�NET_CONFIG_TO_V2� NetworkStatez /etc/netplan/50-cloud-init.yamls4 # This is the initial network config. # It can be overwritten by cloud-init or console-conf. network: version: 2 ethernets: all-en: match: name: "en*" dhcp4: true all-eth: match: name: "eth*" dhcp4: true c s t � fdd�| �� D ��S )Nc 3 s& � | ]\}}|� � �r||fV qd S �N)� startswith)�.0�key�value��match� �7/usr/lib/python3/dist-packages/cloudinit/net/netplan.py� <genexpr>- s � � �z,_get_params_dict_by_match.<locals>.<genexpr>)�dict�items)�configr r r r �_get_params_dict_by_match, s �r r �entryr c C s� d&dd�}g }g }g }g }| � dg �} | du rg } | D �]} | � d�} | � d�} | �d�rW| dkr5| d 7 } |�| d i� | durV| � d �} |� | i �}| |d < |�| |i� q| tv rx|�d d i� | durw|� di �}| |d < |�d|i� q| dv �r5d| � d� }d| v r�|d| � d� 7 }| � d�r�| � d�dd�}t| d |�r�t�d| d |� d |d< | dur�| |d< |�|� d| v r�||| � dg ��7 }d| v r�||| � dg ��7 }d| v r�d}t| �r�d |� v r�d }|�|| � d�i� | � d g �D ]3}d |� d �|� d�f }|� d�|d�}|� d�}|du�r!||d< n | du�r*| |d< |�|� q�|�|� qd| v �r[|� d�}|�rU| d |k�rUt� d || d |� n| d |d< t |�d!k�ri|�d"|i� t |�d!k�rw|�d |i� t |�d!k�r�d"|i}|�d#|i� t |�d!k�r�|� d#i �}|�d$|i� |�d#|i� d%| v �r�| d% du�r�|�d%t � | � d%��i� dS dS dS )'a� This method parse a cloudinit.net.network_state dictionary (config) and maps netstate keys/values into a dictionary (entry) to represent netplan yaml. (config v1 -> netplan) An example config dictionary might look like: {'mac_address': '52:54:00:12:34:00', 'name': 'interface0', 'subnets': [ {'address': '192.168.1.2/24', 'mtu': 1501, 'type': 'static'}, {'address': '2001:4800:78ff:1b:be76:4eff:fe06:1000", 'mtu': 1480, 'netmask': 64, 'type': 'static'}], 'type: physical', 'accept-ra': 'true' } An entry dictionary looks like: {'set-name': 'interface0', 'match': {'macaddress': '52:54:00:12:34:00'}, 'mtu': 1501} After modification returns {'set-name': 'interface0', 'match': {'macaddress': '52:54:00:12:34:00'}, 'mtu': 1501, 'address': ['192.168.1.2/24', '2001:4800:78ff:1b:be76:4eff:fe06:1000"], 'ipv6-mtu': 1480} � c S s* | rt | t�s | S || v r| �|�S | gS )zT Helper to convert strings to list of strings, handle single string )� isinstance�str�split)�obj�tokenr r r �_listifyY s �z$_extract_addresses.<locals>._listify�subnetsN�type�metric�dhcp�4Tz -overridesz route-metric�dhcp6zdhcp6-overrides)�static�static6z%s�address�prefixz/%d�gateway�default)�via�tozAGateway %s is not contained within subnet %s, adding on-link flagzon-link�dns_nameservers� dns_search�mtuzipv6-mtu�routesz%s/%s�networkzZNetwork config: ignoring %s device-level mtu:%s because ipv4 subnet-level mtu:%s provided.r � addresses� nameservers�searchz accept-ra)r! ) �getr �updater r �LOG�debug�appendr �warning�lenr �is_true)r r �ifnamer r' r; r9 r< � searchdomainsr( �subnet�sn_type� sn_metric�dhcp_override_key� dhcp_override�addr� new_route�mtukey�route�to_net� route_metric� entry_mtu�nsr r r �_extract_addresses4 s� % � � �� � � � �rU c s< t � fdd�| �� D ��}t|�dkr |�d|i� d S d S )Nc s$ g | ]\}}|� d d�� kr|�qS )z bond-masterN)r> )r �name�cfg�� bond_masterr r � <listcomp>� s �z0_extract_bond_slaves_by_name.<locals>.<listcomp>r � interfaces)�sortedr rD r? )r[ r rY �bond_slave_namesr rX r � _extract_bond_slaves_by_name� s �� �r^ c s~ t �� d�}tj�|�sd S t�|�}|tkrd S � fdd�dD �}dd� |D �}t� d||� |g| D ]}t� |� q5d S )Nz etc/netplan/00-snapd-config.yamlc s g | ]}t �� |��qS r )r � target_path�r �f��targetr r rZ � s ��z"_clean_default.<locals>.<listcomp>)z-run/systemd/network/10-netplan-all-en.networkz.run/systemd/network/10-netplan-all-eth.networkz#run/systemd/generator/netplan.stampc S s g | ] }t j�|�r|�qS r )�os�path�isfiler` r r r rZ � s z9removing known config '%s' and derived existing files: %s) r r_ rd re rf r �load_binary_file�KNOWN_SNAPD_CONFIGr@ rA �unlink)rc �tpath�content�derived�existingra r rb r �_clean_default� s$ �� �rn �net_config_content�returnc C s zddl m} ddlm} W n ty t�dt� Y dS w t| �} z@t dd��1}|� | � |� � |� dt j� |� }|�|� |� }|�|� |�tj�t�� W d � n1 s]w Y W n ty} } zt�d t|� W Y d}~dS d}~ww t�d � d S ) ad Use netplan.State._write_yaml_file to write netplan config Where netplan python API exists, prefer to use of the private _write_yaml_file to ensure proper permissions and file locations are chosen by the netplan python bindings in the environment. By calling the netplan API, allow netplan versions to change behavior related to file permissions and treatment of sensitive configuration under the API call to _write_yaml_file. In future netplan releases, security-sensitive config may be written to separate file or directory paths than world-readable configuration parts. r )�Parser)�Statez.No netplan python module. Fallback to write %sF�w��modeNzUUnable to render network config using netplan python module. Fallback to write %s. %sz0Rendered netplan config using netplan python APIT)�netplan.parserrq � netplan.staterr � ImportErrorr@ rA �CLOUDINIT_NETPLAN_FILE�_maybe_strip_invalid_mtur �write�flush�seek�io�SEEK_SET� load_yaml�import_parser_results�_write_yaml_filerd re �basename� ExceptionrC )ro rq rr ra �parser�state_output_file�er r r �netplan_api_write_yaml_file� sH �� � ����� r� c C s t jr tjdd| tjd�} | S )a Strip invalid MTU from the netplan config. This is a fix for https://github.com/canonical/cloud-init/issues/6239 A 0 MTU value is NOT valid, but cloud-init accepted it prior to 24.2, so rejecting it after c465de8 is a breaking change for existing releases. z^\s*mtu:\s*0\s*\n� )�flags)r �STRIP_INVALID_MTU�re�sub� MULTILINE)ro r r r rz + s �rz �cfg_filerk c C s. t j�| �sdS t�t�| ��}|t�|�kS )z<Return True when new netplan config has changed vs previous.T)rd re �existsr r� �load_text_file)r� rk � prior_cfgr r r �has_netplan_config_changedB s r� c C sH t jrdnd}tj�| �rt�| �}||@ |kr|}tj| ||d� dS )zDWrite netplan config to cfg_file because python API was unavailable.i� i� rt N)r � NETPLAN_CONFIG_ROOT_READ_ONLYrd re r� r �get_permissions� write_file)r� rk ru � current_moder r r �fallback_write_netplan_yamlL s r� c @ s� e Zd ZdZddgZddgZddd�Zdee fd d �Z dd e d e e ddfd d�Z dedefdd�Zddd�Zd e defdd�ZdS )�RendererzBRenders network information in a /etc/netplan/network.yaml format.�netplan�generate�infoNc C sT |si }|� dt�| _|� dd �| _|� dd�| _|� dd�| _|� d�p&g | _d S )N� netplan_path�netplan_header�postcmdsF� clean_defaultTr )r> ry r� r� � _postcmdsr� � _features)�selfr r r r �__init__] s zRenderer.__init__rp c C s� | j sEztj| jdd�\}}t�|�}|d d | _ W | j S tjy) Y | j S ttfyD } zt� d|� W Y d }~| j S d }~ww | j S )NT��capturez netplan.ior z-Failed to list features from netplan info: %s) r� r � NETPLAN_INFOr r� �ProcessExecutionError� TypeError�KeyErrorr@ rA )r� � info_blob�_errr� r� r r r r f s ����zRenderer.features� network_state� templatesc C s� t j�t�|�| j�}t�t j�|�� | � |�}| j r | j nd}|� d�s*|d7 }|| }t ||�}t |�s<t||� | jrDt|d� | j| j|d� | j| jd� d S )Nr� � rb )�run�config_changed)r� )rd re �joinr r_ r� r � ensure_dir�dirname�_render_contentr� �endswithr� r� r� r� rn �_netplan_generater� �_net_setup_link)r� r� r� rc �fpnplanrk �header�netplan_config_changedr r r �render_network_statet s �z Renderer.render_network_stater� r� c C s8 |s t �d� d S |st �d� d S tj| jdd� d S )Nz"netplan generate postcmds disabledzEskipping call to `netplan generate`. reason: identical netplan configTr� )r@ rA r �NETPLAN_GENERATE)r� r� r� r r r r� � s �zRenderer._netplan_generateFc C s� |s t �d� dS dt�� v rt �d� dS g d�}td�D ]5}z t� D ]}tj�t | �r:t j |t | g dd� q$W dS t j yS } z|}W Y d}~q d}~ww t d �|�) z�To ensure device link properties are applied, we poke udev to re-evaluate networkd .link files and call the setup_link udev builtin command z'netplan net_setup_link postcmd disabledNz net.ifnames=0z%Predictable interface names disabled.)�udevadmz test-builtin�net_setup_link� Tr� zQ'udevadm test-builtin net_setup_link' unable to run successfully for all devices.) r@ rA r � get_cmdline�ranger rd re �islinkr r r� � RuntimeError)r� r� � setup_lnk�_�ifacer� �last_exceptionr r r r� � s2 ������zRenderer._net_setup_linkc + C sZ |j dkrt�d� tjd|jiddd�S i }i }i }i }i }g }|j�dg �}|j} |j } |� � D �]�} | �d�} t t dd � | � � ��} | �d �}|d kr�| | �d d �d �}d| v ra| d |d< |d d u r�| �dd �}|d urzd|�� i|d < n|d = |d= t| || | j� |�| |i� q2|dkr�i }i }td }dD ]%}t| |�}|� � D ]\}}|�|�dd��}|d u r�q�|�||i� q�q�t|�dkr�|�d|i� | �d�r�| d �� |d< | �d�}|dkr�t||| � t| || | j� |�| |i� q2|dk�r�| �d �}|d u �rt�d d | � d �� q2tt�|��}d|i} d } t| | �} i } td } | � � D ]8\}}| �|�}|d u �rC�q3| �||i� |d!v �rji }!|D ]}"|"�� \}#}$t|$�|!|#< �qS| �||!i� �q3t| �dk�rz| �d| i� | �d��r�| d �� | d< t| | | | j� |�| | i� q2|d"k�r�| �d#�| �d$�d%�}%| �dd �}|d u�r�|�� |%d< t| |%| | j� |�| |%i� q2| �s�| �r�| | d&�}&|||||fD ] }'|'� � D ]\}(})d'|)v �s�d(|)v�r�q�|)�d'|&i� �q�q�d)d*� }*|� d+� ||*d,|�7 }||*d-|�7 }||*d.|�7 }||*d/|�7 }||*d0|�7 }d1� |�S )2N� zV2 to V2 passthroughr: F)�explicit_start� explicit_endr[ rV c S s | d d uS )N� r )�itr r r �<lambda>� s z*Renderer._render_content.<locals>.<lambda>r) �physicalr )�set-namer �keep_configuration�critical� mac_address� macaddressr� �bond)�bond_zbond-r� �-r � parametersz bond-slaves�none�bridge� bridge_portszInvalid config. The keyz 'bridge_ports' is required in �.�bridge_)z path-costz port-priority�vlan�vlan_idzvlan-raw-device)�id�link)r; r= r< r; c S s0 |rt j| |idddd�}t�|d�}|gS g S )NFT)r� r� �noaliasz )r �dumps�textwrap�indent)rV �section�dump�txtr r r �_render_sectionN s � z1Renderer._render_content.<locals>._render_sectionznetwork: version: 2 � ethernets�wifis�bonds�bridges�vlansr� ) �versionr@ rA r r� r �_network_stater> r6 �dns_searchdomains�iter_interfacesr �filterr �lowerrU r r? r r �replacerD r^ rC r\ �copyr$ �intrB r� )+r� r� r� r� r� r� r� rk r[ r< rG r rF �ifcfg�if_type�eth�macaddrr� � bond_config� v2_bond_mapr � bond_params�paramr �newname�slave_interfacesr� �portsr� � match_prefix�params� br_config� v2_bridge_map�newvalue�val�port�portvalr� �nscfgr� �_namerW r� r r r r� � s� � � � �� � � � � zRenderer._render_contentr )NN)F)�__name__� __module__� __qualname__�__doc__r� r� r� r r# r r r r r� �boolr� r� r� r r r r r� W s$ ��� �! !r� c C s0 dg} ddg}| D ] }t j||d�s dS q dS )Nr� z /usr/sbinz/sbin)r= FT)r �which)�expectedr= �pr r r � availabled s �r r )-r� r~ �loggingrd r� r� �tempfiler �typingr r r � cloudinitr r r r � cloudinit.netr r r r r r �cloudinit.net.network_stater r ry rh � getLoggerr r@ r r rU r^ rn r# r r� rz r� r� r� r r r r r �<module> s6 5
© 2026 UnknownSec