Файловый менеджер - Редактировать - /home/freeclou/app.optimyar.com/front-web/build/assets/styles/ferny.tar
Назад
__pycache__/__init__.cpython-39.opt-1.pyc 0000644 00000002217 15111634750 0014110 0 ustar 00 a �/�h\ � @ s� d dl mZmZmZmZmZmZmZmZ d dl m Z d dl m Z m Z mZmZmZmZmZmZ d dlmZmZmZmZmZ d dlmZm Z g d�Z dZ dS ) � )�BEIBOOT_GADGETS�COMMAND_TEMPLATE�AskpassHandler�InteractionAgent�InteractionError�InteractionHandler�temporary_askpass�write_askpass_to_tmpdir)�Session)� AskpassPrompt�SshAskpassResponder�SshFIDOPINPrompt�SshFIDOUserPresencePrompt�SshHostKeyPrompt�SshPassphrasePrompt�SshPasswordPrompt�SshPKCS11PINPrompt)�SshAuthenticationError�SshChangedHostKeyError�SshError�SshHostKeyError�SshUnknownHostKeyError)�FernyTransport�SubprocessError)r r ZAuthenticationErrorr r ZChangedHostKeyErrorr Z HostKeyErrorr r r r r r r r r r r r r r r r r r r �0N) Zinteraction_agentr r r r r r r r Zsessionr Z ssh_askpassr r r r r r r r Z ssh_errorsr r r r r Z transportr r �__all__� __version__� r r �B/usr/lib/python3.9/site-packages/cockpit/_vendor/ferny/__init__.py�<module> s ( ( __pycache__/__init__.cpython-39.pyc 0000644 00000002217 15111634750 0013151 0 ustar 00 a �/�h\ � @ s� d dl mZmZmZmZmZmZmZmZ d dl m Z d dl m Z m Z mZmZmZmZmZmZ d dlmZmZmZmZmZ d dlmZm Z g d�Z dZ dS ) � )�BEIBOOT_GADGETS�COMMAND_TEMPLATE�AskpassHandler�InteractionAgent�InteractionError�InteractionHandler�temporary_askpass�write_askpass_to_tmpdir)�Session)� AskpassPrompt�SshAskpassResponder�SshFIDOPINPrompt�SshFIDOUserPresencePrompt�SshHostKeyPrompt�SshPassphrasePrompt�SshPasswordPrompt�SshPKCS11PINPrompt)�SshAuthenticationError�SshChangedHostKeyError�SshError�SshHostKeyError�SshUnknownHostKeyError)�FernyTransport�SubprocessError)r r ZAuthenticationErrorr r ZChangedHostKeyErrorr Z HostKeyErrorr r r r r r r r r r r r r r r r r r r �0N) Zinteraction_agentr r r r r r r r Zsessionr Z ssh_askpassr r r r r r r r Z ssh_errorsr r r r r Z transportr r �__all__� __version__� r r �B/usr/lib/python3.9/site-packages/cockpit/_vendor/ferny/__init__.py�<module> s ( ( __pycache__/askpass.cpython-39.opt-1.pyc 0000644 00000000361 15111634750 0014014 0 ustar 00 a �/�hL � @ s d dl mZ edkre� dS )� )�main�__main__N)Zinteraction_clientr �__name__� r r �A/usr/lib/python3.9/site-packages/cockpit/_vendor/ferny/askpass.py�<module> s __pycache__/askpass.cpython-39.pyc 0000644 00000000361 15111634750 0013055 0 ustar 00 a �/�hL � @ s d dl mZ edkre� dS )� )�main�__main__N)Zinteraction_clientr �__name__� r r �A/usr/lib/python3.9/site-packages/cockpit/_vendor/ferny/askpass.py�<module> s __pycache__/interaction_agent.cpython-39.opt-1.pyc 0000644 00000032013 15111634750 0016043 0 ustar 00 a �/�h�= � @ sR d dl Z d dlZd dlZd dlZd dlZd dlZd dlZd dlZd dlZd dl m Z m Z m Z m Z mZ ddlmZ e�e�Ze�d�ZdZde�d�d d �ZG d d � d e�Zz ejZW n, ey� d eje e e d d�dd�ZY n0 ej d�dd�Z G dd� d�Z G dd� de �Z G dd� d�Z!e"e"d�dd �Z#ej$e e e"ddf d �d d ��Z%dS )!� N)�Any�Callable�ClassVar� Generator�Sequence� )�interaction_clients ferny ([^ ]*) z ferny {(command, args)!r} zW import sys def command(command, *args): sys.stderr.write(fz%) sys.stderr.flush() z9 def end(): command('ferny.end') )�command�endc @ s e Zd ZdS )�InteractionErrorN)�__name__� __module__� __qualname__� r r �K/usr/lib/python3.9/site-packages/cockpit/_vendor/ferny/interaction_agent.pyr 3 s r z"tuple[bytes, list[int], int, None])�sock�bufsize�maxfds�flags�returnc C s� t � d�}| �|t�||j ��\}}}}|D ]B\}} } |tjkr.| tjkr.|�| d t| �t| �|j � � q.|t |�||fS )N�i) �arrayZrecvmsg�socketZCMSG_LEN�itemsizeZ SOL_SOCKETZ SCM_RIGHTSZ frombytes�len�list) r r r r �fds�msgZancdata�addrZ cmsg_levelZ cmsg_typeZ cmsg_datar r r �recv_fds< s &r �r c C s* z t �� W S ty$ t �� Y S 0 d S �N)�asyncio�get_running_loop�AttributeErrorZget_event_loopr r r r r# G s r# c @ s4 e Zd ZU eee ed< eddedd�dd�ZdS )�InteractionHandler�commands�tuple[object, ...]� list[int]N�r �argsr �stderrr c � s t �d S r! )�NotImplementedError��selfr r* r r+ r r r � run_commandR s z InteractionHandler.run_command)r r r r r �str�__annotations__r/ r r r r r% O s r% c @ s� e Zd ZU dZeee ed< eeedd�dd�Zeeeeee d�dd �Z ed d ed d �dd�Z d d ed d�dd�Z ed d ed d �dd�Z d S )�AskpassHandler)� ferny.askpassr& z str | None)�messages�prompt�hintr c � s dS )a+ Prompt the user for an authentication or confirmation interaction. 'messages' is data that was sent to stderr before the interaction was requested. 'prompt' is the interaction prompt. The expected response type depends on hint: - "confirm": ask for permission, returning "yes" if accepted - example: authorizing agent operation - "none": show a request without need for a response - example: please touch your authentication token - otherwise: return a password or other form of text token - examples: enter password, unlock private key In any case, the function should properly handle cancellation. For the "none" case, this will be the normal way to dismiss the dialog. Nr )r. r4 r5 r6 r r r � do_askpassY s zAskpassHandler.do_askpass)�reason�host� algorithm�key� fingerprintr c � s dS )a� Prompt the user for a decision regarding acceptance of a host key. The "reason" will be either "HOSTNAME" or "ADDRESS" (if `CheckHostIP` is enabled). The host, algorithm, and key parameters are the values in the form that they would appear one a single line in the known hosts file. The fingerprint is the key fingerprint in the format that ssh would normally present it to the user. In case the host key should be accepted, this function needs to return True. Returning False means that ssh implements its default logic. To interrupt the connection, raise an exception. Fr )r. r8 r9 r: r; r< r r r � do_hostkeyo s zAskpassHandler.do_hostkeyr' r( Nr) c � s dS )z�Handle a custom command. The command name, its arguments, the passed fds, and the stderr leading up to the command invocation are all provided. See doc/interaction-protocol.md Nr r- r r r �do_custom_command s z AskpassHandler.do_custom_command)r* r r+ r c � s& t �d|||� z |\}}W n< tttfyX } z t �d|||� W Y d }~d S d }~0 0 t|�d�d����}t|�d�d���p}�zPt� } z t � � } W n t y� t j � � } Y n0 | � || j� t|�dk�r:|d } |�dd�} t �d || | � | �|| | �I d H } t �d | � | d u�r�t| |d � td|d � n�t|�d k�r�|\}}}}}}|d v �r�t �d|||||� | �|||||�I d H �r�t||||d � n t �d|� td|d � n t �d|� W | �|� n | �|� 0 W d � n1 �s�0 Y W d � n1 �s0 Y d S )Nz _askpass_command(%s, %s, %s)z4Invalid arguments to askpass interaction: %s, %s: %sr �w� r ZSSH_ASKPASS_PROMPT� zdo_askpass(%r, %r, %r)zdo_askpass answer %r)�file� )ZADDRESSZHOSTNAMEz do_hostkey(%r, %r, %r, %r, %r)z$ignoring KnownHostsCommand reason %rz?Incorrect number of command-line arguments to ferny-askpass: %s)�logger�debug� ValueError� TypeError�AssertionError�error�open�popr# r" Z current_taskr$ �Task� add_reader�cancelr �getr7 �printr= � remove_reader)r. r* r r+ �argv�env�exc�status�stdout�loop�taskr5 r6 ZanswerZargv0r8 r9 r: r; r< r r r �_askpass_command� sD ( z AskpassHandler._askpass_commandc � sJ t �d||||� |dkr0| �|||�I d H n| �||||�I d H d S )Nzrun_command(%s, %s, %s, %s)r3 )rD rE rY r> r- r r r r/ � s zAskpassHandler.run_command)r r r r& r r r0 r1 r7 �boolr= r> rY r/ r r r r r2 V s � 3r2 c @ s e Zd ZU ded< ejed< ded< eed< ejed< ejed< d ed < d Zd ed < dZ e ed< d d�dd�Z dd d�dd�Z e e dd d�dd�Ze dd d�d d �Zd d�d d �Zd-ee d d!d d"�d#d$�Zed�d%d&�Zd d�d'd(�Zd d�d)d*�Zd d�d+d,�Zd S ).�InteractionAgentz dict[str, InteractionHandler]� _handlers�_loopzset[asyncio.Task]�_tasks�_buffer�_ours�_theirszasyncio.Future[str]�_completion_futureNzNone | str | Exception�_pending_resultF�_endr c C s� t �d| � | jd u s | jr(t �d� nX| j�� r>t �d� nBt| jt�rht �d| j� | j�| j� nt �d� | j� | j� d S )Nz_consider_completion(%r)z but not ready yetz but already completez- submitting stderr (%r) to completion_futurez0 submitting exception (%r) to completion_future) rD rE rc r^ rb Zdone� isinstancer0 Z set_resultZ set_exception�r. r r r �_consider_completion� s z%InteractionAgent._consider_completionzstr | Exception)�resultr c C s� t �d| |� | jd u r || _| j�� dkrLt �d| j� | j�| j�� � | jD ]}t �d|� |�� qRt �d� | j � � | j� � | � � d S )Nz_result(%r, %r)���z remove_reader(%r)z cancel(%r)z closing sockets) rD rE rc r` �filenor] rQ r^ rN ra �closerg )r. rh rX r r r �_result� s zInteractionAgent._resultr( )r+ � command_blobr r c s< t �d|||� z2t�|�� �\}}t|t�r8t|t�s@td��W n< t t t tfy~ } z t � d||� W Y d }~d S d }~0 0 |dkr�d�_ ���jjdd�� d S z�j| � W n ty� t � d|� Y d S 0 t|���j�� �||�|�� ���tjd d �� ���fd d � }��|� �j��� g |d d �< d S ) Nz_invoke_command(%r, %r, %r)zInvalid argument typesz&Received invalid ferny command: %s: %sz ferny.endT�replace��errorsz$Received unhandled ferny command: %s)�completed_taskr c s� �rt ���� � q �j��� z��� t�d� � W nZ tj yX t�d� � Y n< t y� } z$t�d� |� �� |� W Y d }~n d }~0 0 �� � d S )Nz%r completed cleanlyz%r was cancelledz %r raised %r) �osrk rK r^ �removerh rD rE r" ZCancelledError� Exceptionrl rg )rq rT ��handlerr. rX Ztask_fdsr r � bottom_half s z5InteractionAgent._invoke_command.<locals>.bottom_half)rD rE �astZ literal_eval�decodere r0 �tuplerG �UnicodeDecodeError� SyntaxErrorrF rI rd rl r_ r\ �KeyErrorr r] Z create_taskr/ r" rL �add_done_callbackr^ �add)r. r+ rm r r r* rT rw r ru r �_invoke_command� s. z InteractionAgent._invoke_command)�datar r c C s� t �d||� |dkr.| �| jjdd�� d S | j�|� t�| j�}t|� � �| _t |�dkr�| � |d |d g � |dd � }qT|r�| jd d� }td�| _t |� d�d ��}|� � }W d � n1 s�0 Y | � |||� d S ) Nz_got_data(%r, %r)� rn ro r r r@ ri �rb)rD rE rl r_ ry �extend� COMMAND_RE�split� bytearrayrK r r� rJ �read)r. r� r �chunksr+ Zcommand_channelr r r r � _got_data) s &zInteractionAgent._got_datac C s� z�z t | jddtjd�\}}}}W nV tyL Y W |rHt�|�� � q4d S tyx } z| � |� W Y d }~nd }~0 0 | � ||� W |r�t�|�� � q�n|r�t�|�� � q�0 d S )N� � )r ) r r` r � MSG_DONTWAIT�BlockingIOErrorrr rk rK �OSErrorrl r� )r. r� r Z_flagsZ_addrrT r r r � _read_readyB s � �z InteractionAgent._read_readyz asyncio.AbstractEventLoop | Nonez,Callable[[asyncio.Future[str]], None] | None)�handlersrW � done_callbackr c C s~ |pt � | _| j�� | _t� | _i | _|D ]}|jD ]}|| j|< q4q*|d urZ| j�|� t � t j t j �\| _ | _t� | _d S r! )r# r] Z create_futurerb �setr^ r\ r& r~ r Z socketpairZAF_UNIXZ SOCK_STREAMra r` r� r_ )r. r� rW r� rv r r r r �__init__O s zInteractionAgent.__init__c C s | j �� S r! )ra rj rf r r r rj d s zInteractionAgent.filenoc C sf t �d| � | j�� dkr@t �d| j� | j�| j�� | j� n t �d� t �d| j� | j�� d S )Nz start(%r)ri z add_reader(%r)z# ...but agent is already finished.z close(%r)) rD rE r` rj r] rM r� ra rk rf r r r �startg s zInteractionAgent.startc C s� t �d| � zz| j�� dkr�t �d� t�t��D | j�dtj �}t �dt |�� |sXqf| j � |� q2W d � n1 sz0 Y W n. t y� } z| �|� W Y d }~n d }~0 0 | �| j jdd�� d S )Nzforce_completion(%r)ri z- draining pending stderr data (non-blocking)r� z got %d bytesrn ro )rD rE r` rj � contextlib�suppressr� Zrecvr r� r r_ r� r� rl ry )r. r� rT r r r �force_completionr s 0 z!InteractionAgent.force_completionc � s� t �d| � z>| �� t�| j�I d H }t �d| |� W t �d� | �� nt �d� | �� 0 | js|t �d� t|� � ��d S )Nz_communicate(%r)z$_communicate(%r) stderr result is %rz,_communicate finished. Ensuring completion.z<_communicate never saw ferny.end. raising InteractionError.) rD rE r� r" Zshieldrb r� rd r �strip)r. r+ r r r � communicate� s � z InteractionAgent.communicate)NN)r r r r1 r" �AbstractEventLoopr� r rc rd rZ rg rl �bytesr� r� r� r r% r� �intrj r� r� r� r r r r r[ � s4 0 �� r[ )�tmpdirr c C sj t j�| d�}t �|t jt jB t jB t jB t jB d�}z"t � |t � t j �� W t �|� n t �|� 0 |S )Nz ferny-askpassi� )rr �path�joinrJ �O_CREAT�O_WRONLY� O_CLOEXEC�O_EXCL� O_NOFOLLOW�write� __loader__�get_datar �__file__rk )r� Z askpass_path�fdr r r �write_askpass_to_tmpdir� s (r� )�kwargsr c k s> t jf i | ���}t|�V W d � n1 s00 Y d S r! )�tempfileZTemporaryDirectoryr� )r� Z directoryr r r �temporary_askpass� s r� )r )&r rx r" r� Zloggingrr �rer r� �typingr r r r r rA r Z getLoggerr rD �compiler� ZCOMMAND_TEMPLATEZBEIBOOT_GADGETSrt r r r$ r� r� r# r% r2 r[ r0 r� �contextmanagerr� r r r r �<module> sF �� � � o T __pycache__/interaction_agent.cpython-39.pyc 0000644 00000032770 15111634750 0015116 0 ustar 00 a �/�h�= � @ sR d dl Z d dlZd dlZd dlZd dlZd dlZd dlZd dlZd dlZd dl m Z m Z m Z m Z mZ ddlmZ e�e�Ze�d�ZdZde�d�d d �ZG d d � d e�Zz ejZW n, ey� d eje e e d d�dd�ZY n0 ej d�dd�Z G dd� d�Z G dd� de �Z G dd� d�Z!e"e"d�dd �Z#ej$e e e"ddf d �d d ��Z%dS )!� N)�Any�Callable�ClassVar� Generator�Sequence� )�interaction_clients ferny ([^ ]*) z ferny {(command, args)!r} zW import sys def command(command, *args): sys.stderr.write(fz%) sys.stderr.flush() z9 def end(): command('ferny.end') )�command�endc @ s e Zd ZdS )�InteractionErrorN)�__name__� __module__� __qualname__� r r �K/usr/lib/python3.9/site-packages/cockpit/_vendor/ferny/interaction_agent.pyr 3 s r z"tuple[bytes, list[int], int, None])�sock�bufsize�maxfds�flags�returnc C s� t � d�}| �|t�||j ��\}}}}|D ]B\}} } |tjkr.| tjkr.|�| d t| �t| �|j � � q.|t |�||fS )N�i) �arrayZrecvmsg�socketZCMSG_LEN�itemsizeZ SOL_SOCKETZ SCM_RIGHTSZ frombytes�len�list) r r r r �fds�msgZancdata�addrZ cmsg_levelZ cmsg_typeZ cmsg_datar r r �recv_fds< s &r �r c C s* z t �� W S ty$ t �� Y S 0 d S �N)�asyncio�get_running_loop�AttributeErrorZget_event_loopr r r r r# G s r# c @ s4 e Zd ZU eee ed< eddedd�dd�ZdS )�InteractionHandler�commands�tuple[object, ...]� list[int]N�r �argsr �stderrr c � s t �d S r! )�NotImplementedError��selfr r* r r+ r r r � run_commandR s z InteractionHandler.run_command)r r r r r �str�__annotations__r/ r r r r r% O s r% c @ s� e Zd ZU dZeee ed< eeedd�dd�Zeeeeee d�dd �Z ed d ed d �dd�Z d d ed d�dd�Z ed d ed d �dd�Z d S )�AskpassHandler)� ferny.askpassr& z str | None)�messages�prompt�hintr c � s dS )a+ Prompt the user for an authentication or confirmation interaction. 'messages' is data that was sent to stderr before the interaction was requested. 'prompt' is the interaction prompt. The expected response type depends on hint: - "confirm": ask for permission, returning "yes" if accepted - example: authorizing agent operation - "none": show a request without need for a response - example: please touch your authentication token - otherwise: return a password or other form of text token - examples: enter password, unlock private key In any case, the function should properly handle cancellation. For the "none" case, this will be the normal way to dismiss the dialog. Nr )r. r4 r5 r6 r r r � do_askpassY s zAskpassHandler.do_askpass)�reason�host� algorithm�key� fingerprintr c � s dS )a� Prompt the user for a decision regarding acceptance of a host key. The "reason" will be either "HOSTNAME" or "ADDRESS" (if `CheckHostIP` is enabled). The host, algorithm, and key parameters are the values in the form that they would appear one a single line in the known hosts file. The fingerprint is the key fingerprint in the format that ssh would normally present it to the user. In case the host key should be accepted, this function needs to return True. Returning False means that ssh implements its default logic. To interrupt the connection, raise an exception. Fr )r. r8 r9 r: r; r< r r r � do_hostkeyo s zAskpassHandler.do_hostkeyr' r( Nr) c � s dS )z�Handle a custom command. The command name, its arguments, the passed fds, and the stderr leading up to the command invocation are all provided. See doc/interaction-protocol.md Nr r- r r r �do_custom_command s z AskpassHandler.do_custom_command)r* r r+ r c � s� t �d|||� zh|\}}t|t�s(J �tdd� |D ��s>J �t|t�sLJ �tdd� |�� D ��sfJ �t|�dksvJ �W n< tt t fy� } z t � d|||� W Y d }~d S d }~0 0 t |� d�d����}t |� d�d����}�z`t� } z t�� } W n t�y tj�� } Y n0 | d u�s"J �| �|| j� t|�dk�r�|d } |�d d �} t �d || | � | �|| | �I d H } t �d | � | d u�r4t| |d� td|d� n�t|�dk�r(|\}}}}}}|dv �rt �d|||||� | �|||||�I d H �rt||||d� n t �d|� td|d� n t � d|� W | �|� n | �|� 0 W d � n1 �sd0 Y W d � n1 �s�0 Y d S )Nz _askpass_command(%s, %s, %s)c s s | ]}t |t�V qd S r! �� isinstancer0 )�.0�argr r r � <genexpr>� � z2AskpassHandler._askpass_command.<locals>.<genexpr>c s s& | ] \}}t |t�o t |t�V qd S r! r? )rA r; �valr r r rC � rD � z4Invalid arguments to askpass interaction: %s, %s: %sr �wr ZSSH_ASKPASS_PROMPT� zdo_askpass(%r, %r, %r)zdo_askpass answer %r)�file� )ZADDRESSZHOSTNAMEz do_hostkey(%r, %r, %r, %r, %r)z$ignoring KnownHostsCommand reason %rz?Incorrect number of command-line arguments to ferny-askpass: %s)�logger�debugr@ r �all�dict�itemsr � ValueError� TypeError�AssertionError�error�open�popr# r" Z current_taskr$ �Task� add_reader�cancel�getr7 �printr= � remove_reader)r. r* r r+ �argv�env�exc�status�stdout�loop�taskr5 r6 ZanswerZargv0r8 r9 r: r; r< r r r �_askpass_command� sN ( z AskpassHandler._askpass_commandc � sJ t �d||||� |dkr0| �|||�I d H n| �||||�I d H d S )Nzrun_command(%s, %s, %s, %s)r3 )rK rL rc r> r- r r r r/ � s zAskpassHandler.run_command)r r r r& r r r0 r1 r7 �boolr= r> rc r/ r r r r r2 V s � 3r2 c @ s e Zd ZU ded< ejed< ded< eed< ejed< ejed< d ed < d Zd ed < dZ e ed< d d�dd�Z dd d�dd�Z e e dd d�dd�Ze dd d�d d �Zd d�d d �Zd-ee d d!d d"�d#d$�Zed�d%d&�Zd d�d'd(�Zd d�d)d*�Zd d�d+d,�Zd S ).�InteractionAgentz dict[str, InteractionHandler]� _handlers�_loopzset[asyncio.Task]�_tasks�_buffer�_ours�_theirszasyncio.Future[str]�_completion_futureNzNone | str | Exception�_pending_resultF�_endr c C s� t �d| � | jd u s | jr(t �d� nX| j�� r>t �d� nBt| jt�rht �d| j� | j�| j� nt �d� | j� | j� d S )Nz_consider_completion(%r)z but not ready yetz but already completez- submitting stderr (%r) to completion_futurez0 submitting exception (%r) to completion_future) rK rL rm rh rl Zdoner@ r0 Z set_resultZ set_exception�r. r r r �_consider_completion� s z%InteractionAgent._consider_completionzstr | Exception)�resultr c C s� t �d| |� | jd u r || _| j�� dkrLt �d| j� | j�| j�� � | jD ]}t �d|� |�� qRt �d� | j � � | j� � | � � d S )Nz_result(%r, %r)���z remove_reader(%r)z cancel(%r)z closing sockets) rK rL rm rj �filenorg r[ rh rX rk �closerp )r. rq rb r r r �_result� s zInteractionAgent._resultr( )r+ � command_blobr r c s< t �d|||� z2t�|�� �\}}t|t�r8t|t�s@td��W n< t t t tfy~ } z t � d||� W Y d }~d S d }~0 0 |dkr�d�_ ���jjdd�� d S z�j| � W n ty� t � d|� Y d S 0 t|���j�� �||�|�� ���tjd d �� ���fd d � }��|� �j��� g |d d �< d S ) Nz_invoke_command(%r, %r, %r)zInvalid argument typesz&Received invalid ferny command: %s: %sz ferny.endT�replace��errorsz$Received unhandled ferny command: %s)�completed_taskr c s� | �u s J ��r t ���� � q �j��� z��� t�d� � W nZ tj yd t�d� � Y n< t y� } z$t�d� |� �� |� W Y d }~n d }~0 0 �� � d S )Nz%r completed cleanlyz%r was cancelledz %r raised %r) �osrt rU rh �removerq rK rL r" ZCancelledError� Exceptionru rp )rz r^ ��handlerr. rb Ztask_fdsr r � bottom_half s z5InteractionAgent._invoke_command.<locals>.bottom_half)rK rL �astZ literal_eval�decoder@ r0 �tuplerQ �UnicodeDecodeError� SyntaxErrorrP rS rn ru ri rf �KeyErrorr rg Z create_taskr/ r" rV �add_done_callbackrh �add)r. r+ rv r r r* r^ r� r r~ r �_invoke_command� s. z InteractionAgent._invoke_command)�datar r c C s t �d||� |dkr.| �| jjdd�� d S | j�|� t�| j�}t|� � �| _t |�dkr�| � |d |d g � |dd � }qT|r�| j� d�s�J | j��| jd d � }td�| _t |� d�d ��}|�� }W d � n1 s�0 Y | � |||� d S ) Nz_got_data(%r, %r)rD rw rx r r rF � rr �rb)rK rL ru ri r� �extend� COMMAND_RE�split� bytearrayrU r r� �endswithrT �read)r. r� r �chunksr+ Zcommand_channelr r r r � _got_data) s" &zInteractionAgent._got_datac C s� z�z t | jddtjd�\}}}}W nV tyL Y W |rHt�|�� � q4d S tyx } z| � |� W Y d }~nd }~0 0 | � ||� W |r�t�|�� � q�n|r�t�|�� � q�0 d S )N� � )r ) r rj r � MSG_DONTWAIT�BlockingIOErrorr{ rt rU �OSErrorru r� )r. r� r Z_flagsZ_addrr^ r r r � _read_readyB s � �z InteractionAgent._read_readyz asyncio.AbstractEventLoop | Nonez,Callable[[asyncio.Future[str]], None] | None)�handlersra � done_callbackr c C s~ |pt � | _| j�� | _t� | _i | _|D ]}|jD ]}|| j|< q4q*|d urZ| j�|� t � t j t j �\| _ | _t� | _d S r! )r# rg Z create_futurerl �setrh rf r& r� r Z socketpairZAF_UNIXZ SOCK_STREAMrk rj r� ri )r. r� ra r� r r r r r �__init__O s zInteractionAgent.__init__c C s | j �� S r! )rk rs ro r r r rs d s zInteractionAgent.filenoc C sf t �d| � | j�� dkr@t �d| j� | j�| j�� | j� n t �d� t �d| j� | j�� d S )Nz start(%r)rr z add_reader(%r)z# ...but agent is already finished.z close(%r)) rK rL rj rs rg rW r� rk rt ro r r r �startg s zInteractionAgent.startc C s� t �d| � zz| j�� dkr�t �d� t�t��D | j�dtj �}t �dt |�� |sXqf| j � |� q2W d � n1 sz0 Y W n. t y� } z| �|� W Y d }~n d }~0 0 | �| j jdd�� d S )Nzforce_completion(%r)rr z- draining pending stderr data (non-blocking)r� z got %d bytesrw rx )rK rL rj rs � contextlib�suppressr� Zrecvr r� r ri r� r� ru r� )r. r� r^ r r r �force_completionr s 0 z!InteractionAgent.force_completionc � s� t �d| � z>| �� t�| j�I d H }t �d| |� W t �d� | �� nt �d� | �� 0 | js|t �d� t|� � ��d S )Nz_communicate(%r)z$_communicate(%r) stderr result is %rz,_communicate finished. Ensuring completion.z<_communicate never saw ferny.end. raising InteractionError.) rK rL r� r" Zshieldrl r� rn r �strip)r. r+ r r r � communicate� s � z InteractionAgent.communicate)NN)r r r r1 r" �AbstractEventLoopr� r rm rn rd rp ru �bytesr� r� r� r r% r� �intrs r� r� r� r r r r re � s4 0 �� re )�tmpdirr c C sj t j�| d�}t �|t jt jB t jB t jB t jB d�}z"t � |t � t j �� W t �|� n t �|� 0 |S )Nz ferny-askpassi� )r{ �path�joinrT �O_CREAT�O_WRONLY� O_CLOEXEC�O_EXCL� O_NOFOLLOW�write� __loader__�get_datar �__file__rt )r� Z askpass_path�fdr r r �write_askpass_to_tmpdir� s (r� )�kwargsr c k s> t jf i | ���}t|�V W d � n1 s00 Y d S r! )�tempfileZTemporaryDirectoryr� )r� Z directoryr r r �temporary_askpass� s r� )r )&r r� r" r� Zloggingr{ �rer r� �typingr r r r r rH r Z getLoggerr rK �compiler� ZCOMMAND_TEMPLATEZBEIBOOT_GADGETSr} r r r$ r� r� r# r% r2 re r0 r� �contextmanagerr� r r r r �<module> sF �� � � o T __pycache__/interaction_client.cpython-39.opt-1.pyc 0000644 00000003264 15111634750 0016231 0 ustar 00 a �/�hT � @ s� d dl Z d dlZd dlZd dlZd dlZd dlmZ dd�eee ee dd�dd�Z eedd ed �d d �Z dd �dd�Z e dkr�e � dS )� N)�Sequence� ��fds)� stderr_fd�command�argsr �returnc G s� dd� t t�� d�D �\}}|�� |�t t�| tjtj��B}t�d|�� g|�R �}|� dgtj tj |fg� W d � n1 s�0 Y W d � n1 s�0 Y |� t ||f�� W d � n1 s�0 Y d S )Nc S s g | ]}t j|� �qS r )�io�open)�.0�endr r �L/usr/lib/python3.9/site-packages/cockpit/_vendor/ferny/interaction_client.py� <listcomp> � zcommand.<locals>.<listcomp>�rw�i� )�zip�os�pipe�socketZfromfdZAF_UNIXZ SOCK_STREAM�array�filenoZsendmsgZ SOL_SOCKETZ SCM_RIGHTS�write�repr)r r r r Zcmd_readZ cmd_writeZsockZfd_arrayr r r r s Vr z list[str]zdict[str, str])r � stdout_fdr �envr c C s� t �� \}}|�* t| d|||�� |fd� W d � n1 s@0 Y |�" t|�d�p^d�W d � S 1 sv0 Y d S )Nz ferny.askpassr � � 1)r Z socketpairr r �intZrecv)r r r r ZoursZtheirsr r r �askpass s 8r! )r c C s< t tj�dkr tddg � n t�tddtjttj��� d S )N� � z ferny.end) �len�sys�argvr �exitr! �dictr �environr r r r �main! s r* �__main__)r r r r r% �typingr r �str�objectr r! r* �__name__r r r r �<module> s __pycache__/interaction_client.cpython-39.pyc 0000644 00000003264 15111634750 0015272 0 ustar 00 a �/�hT � @ s� d dl Z d dlZd dlZd dlZd dlZd dlmZ dd�eee ee dd�dd�Z eedd ed �d d �Z dd �dd�Z e dkr�e � dS )� N)�Sequence� ��fds)� stderr_fd�command�argsr �returnc G s� dd� t t�� d�D �\}}|�� |�t t�| tjtj��B}t�d|�� g|�R �}|� dgtj tj |fg� W d � n1 s�0 Y W d � n1 s�0 Y |� t ||f�� W d � n1 s�0 Y d S )Nc S s g | ]}t j|� �qS r )�io�open)�.0�endr r �L/usr/lib/python3.9/site-packages/cockpit/_vendor/ferny/interaction_client.py� <listcomp> � zcommand.<locals>.<listcomp>�rw�i� )�zip�os�pipe�socketZfromfdZAF_UNIXZ SOCK_STREAM�array�filenoZsendmsgZ SOL_SOCKETZ SCM_RIGHTS�write�repr)r r r r Zcmd_readZ cmd_writeZsockZfd_arrayr r r r s Vr z list[str]zdict[str, str])r � stdout_fdr �envr c C s� t �� \}}|�* t| d|||�� |fd� W d � n1 s@0 Y |�" t|�d�p^d�W d � S 1 sv0 Y d S )Nz ferny.askpassr � � 1)r Z socketpairr r �intZrecv)r r r r ZoursZtheirsr r r �askpass s 8r! )r c C s< t tj�dkr tddg � n t�tddtjttj��� d S )N� � z ferny.end) �len�sys�argvr �exitr! �dictr �environr r r r �main! s r* �__main__)r r r r r% �typingr r �str�objectr r! r* �__name__r r r r �<module> s __pycache__/session.cpython-39.opt-1.pyc 0000644 00000012516 15111634750 0014037 0 ustar 00 a �/�h� � @ s� d dl Z d dlZd dlZd dlZd dlZd dlZd dlZd dlZd dlZd dl m Z m Z ddl m Z ddlmZmZmZmZ e�d�jZe�e�ZdZe�� deeed�dd ��Z G d d � d �Z G d d � d e e�Z dS )� N)�Mapping�Sequence� )� ssh_errors)�InteractionAgent�InteractionError�InteractionHandler�write_askpass_to_tmpdir�x)�feature�teststr�returnc C sF z*t jdd| � d|� �ddgt jd� W dS t jy@ Y dS 0 d S ) N�ssh�-o� z-GZ nonexisting)�stderrTF)� subprocessZ check_output�DEVNULLZCalledProcessError)r r � r �A/usr/lib/python3.9/site-packages/cockpit/_vendor/ferny/session.py� has_feature% s $r c @ sD e Zd Zee ee d�dd�Zeeef eeef d�dd�ZdS )�SubprocessContext��argsr c C s |S )a� Return the args required to launch a process in the given context. For example, this might return a vector with ["sudo"] or ["flatpak-spawn", "--host"] prepended. It is also possible that more substantial changes may be performed. This function is not permitted to modify its argument, although it may (optionally) return it unmodified, if no changes are required. r ��selfr r r r �wrap_subprocess_args/ s z&SubprocessContext.wrap_subprocess_args)�envr c C s |S )aj Return the envp required to launch a process in the given context. For example, this might set the "SUDO_ASKPASS" environment variable, if needed. As with wrap_subprocess_args(), this function is not permitted to modify its argument, although it may (optionally) return it unmodified if no changes are required. r )r r r r r �wrap_subprocess_env? s z%SubprocessContext.wrap_subprocess_envN)�__name__� __module__� __qualname__r �strr r r r r r r r . s r c @ s� e Zd ZU dZded< dZded< dZded< deedddd dd d dd � d d�Z ed�dd�Z dd�dd�Z dd�dd�Z dd�dd�Z ee ee d�dd�ZdS ) �SessionNz"tempfile.TemporaryDirectory | None� _controldirz str | None� _controlsockz!asyncio.subprocess.Process | None�_processFzMapping[str, str] | Nonez int | NonezInteractionHandler | None) � destination�handle_host_key� configfile� identity_file� login_name�options�pkcs11�port�interaction_responderr c � sX t j�t j�dd�d�} t j| dd� tj| d�| _| jj � d�| _ t | jj �} t t j�} | | d< d | d < d | d < d dd| j dddd| � �g} |d ur�| � d|� �� |d ur�| � d|� �� |d ur�|D ] }| � d|� d|| � �� q�|d u�r| � d|� �� |d u�r | � d|� �� |d u�r8| � d|� �� |�rbtd��rb| �dd| � d�dd g� t| d u�rt| gng �}tjd g| �|�R | dtjjtjj|d d � d ��I d H }z|�� I d H || _W n� t�y } z*|�� I d H t�t|��d �W Y d }~nNd }~0 t �yR z |� � W n t �y< Y n0 |�� I d H � Y n0 d S )!NZXDG_RUNTIME_DIRz/runZfernyT)�exist_ok)�dirz/socketZ SSH_ASKPASS�forceZSSH_ASKPASS_REQUIRE�-ZDISPLAYz-Mz-N�-Sr zPermitLocalCommand=yesz LocalCommand=z-Fz-ir z-Iz-pz-lZKnownHostsCommandzKnownHostsCommand=z %I %H %t %K %fzStrictHostKeyChecking=yesz /usr/bin/sshc S s t ttj�S �N)�prctl�PR_SET_PDEATHSIG�signal�SIGKILLr r r r �<lambda>� � z!Session.connect.<locals>.<lambda>)r Zstart_new_session�stdin�stdoutr Z preexec_fn) �os�path�join�environ�get�makedirs�tempfileZTemporaryDirectoryr$ �namer% r �dict�appendr �extendr �asyncioZcreate_subprocess_execr r Z communicater& r �waitr Z get_exception_for_ssh_stderrr" � BaseException�kill�ProcessLookupError)r r' r( r) r* r+ r, r- r. r/ ZrundirZ askpass_pathr r �keyZagentZprocess�excr r r �connectT sj � �� $ zSession.connect)r c C s | j d uS r5 )r& �r r r r � is_connected� s zSession.is_connectedc � s | j �� I d H d S r5 )r& rJ rQ r r r rJ � s z Session.waitc C s | j �� d S r5 )r& Z terminaterQ r r r �exit� s z Session.exitc � s | � � | �� I d H d S r5 )rS rJ rQ r r r � disconnect� s zSession.disconnectr c C s dd| j dgttj|��R S )Nr r4 � )r% �map�shlex�quoter r r r r � s z Session.wrap_subprocess_args)FNNNNNNN)r r r! r$ �__annotations__r% r& r" �boolrP rR rJ rS rT r r r r r r r# L s6 �� Zr# )r ) rI Zctypes� functoolsZloggingr> rW r8 r rD �typingr r rU r Zinteraction_agentr r r r ZCDLLr6 Z getLoggerr �loggerr7 � lru_cacher" rZ r r r# r r r r �<module> s$ __pycache__/session.cpython-39.pyc 0000644 00000012634 15111634750 0013101 0 ustar 00 a �/�h� � @ s� d dl Z d dlZd dlZd dlZd dlZd dlZd dlZd dlZd dlZd dl m Z m Z ddl m Z ddlmZmZmZmZ e�d�jZe�e�ZdZe�� deeed�dd ��Z G d d � d �Z G d d � d e e�Z dS )� N)�Mapping�Sequence� )� ssh_errors)�InteractionAgent�InteractionError�InteractionHandler�write_askpass_to_tmpdir�x)�feature�teststr�returnc C sF z*t jdd| � d|� �ddgt jd� W dS t jy@ Y dS 0 d S ) N�ssh�-o� z-GZ nonexisting)�stderrTF)� subprocessZ check_output�DEVNULLZCalledProcessError)r r � r �A/usr/lib/python3.9/site-packages/cockpit/_vendor/ferny/session.py� has_feature% s $r c @ sD e Zd Zee ee d�dd�Zeeef eeef d�dd�ZdS )�SubprocessContext��argsr c C s |S )a� Return the args required to launch a process in the given context. For example, this might return a vector with ["sudo"] or ["flatpak-spawn", "--host"] prepended. It is also possible that more substantial changes may be performed. This function is not permitted to modify its argument, although it may (optionally) return it unmodified, if no changes are required. r ��selfr r r r �wrap_subprocess_args/ s z&SubprocessContext.wrap_subprocess_args)�envr c C s |S )aj Return the envp required to launch a process in the given context. For example, this might set the "SUDO_ASKPASS" environment variable, if needed. As with wrap_subprocess_args(), this function is not permitted to modify its argument, although it may (optionally) return it unmodified if no changes are required. r )r r r r r �wrap_subprocess_env? s z%SubprocessContext.wrap_subprocess_envN)�__name__� __module__� __qualname__r �strr r r r r r r r . s r c @ s� e Zd ZU dZded< dZded< dZded< deedddd dd d dd � d d�Z ed�dd�Z dd�dd�Z dd�dd�Z dd�dd�Z ee ee d�dd�ZdS ) �SessionNz"tempfile.TemporaryDirectory | None� _controldirz str | None� _controlsockz!asyncio.subprocess.Process | None�_processFzMapping[str, str] | Nonez int | NonezInteractionHandler | None) � destination�handle_host_key� configfile� identity_file� login_name�options�pkcs11�port�interaction_responderr c � sl t j�t j�dd�d�} t j| dd� tj| d�| _| jj � d�| _ t | jj �} t t j�} | | d< d | d < d | d < d dd| j dddd| � �g} |d ur�| � d|� �� |d ur�| � d|� �� |d ur�|D ] }| � d|� d|| � �� q�|d u�r| � d|� �� |d u�r | � d|� �� |d u�r8| � d|� �� |�rbtd��rb| �dd| � d�dd g� t| d u�rt| gng �}tjd g| �|�R | dtjjtjj|d d � d ��I d H }z,|�� I d H t j�| j ��s�J �|| _W n� t�y" } z*|�� I d H t�t |��d �W Y d }~nNd }~0 t �yf z |� � W n t �yP Y n0 |�� I d H � Y n0 d S )!NZXDG_RUNTIME_DIRz/runZfernyT)�exist_ok)�dirz/socketZ SSH_ASKPASS�forceZSSH_ASKPASS_REQUIRE�-ZDISPLAYz-Mz-N�-Sr zPermitLocalCommand=yesz LocalCommand=z-Fz-ir z-Iz-pz-lZKnownHostsCommandzKnownHostsCommand=z %I %H %t %K %fzStrictHostKeyChecking=yesz /usr/bin/sshc S s t ttj�S �N)�prctl�PR_SET_PDEATHSIG�signal�SIGKILLr r r r �<lambda>� � z!Session.connect.<locals>.<lambda>)r Zstart_new_session�stdin�stdoutr Z preexec_fn) �os�path�join�environ�get�makedirs�tempfileZTemporaryDirectoryr$ �namer% r �dict�appendr �extendr �asyncioZcreate_subprocess_execr r Z communicate�existsr& r �waitr Z get_exception_for_ssh_stderrr" � BaseException�kill�ProcessLookupError)r r' r( r) r* r+ r, r- r. r/ ZrundirZ askpass_pathr r �keyZagentZprocess�excr r r �connectT sl � �� $ zSession.connect)r c C s | j d uS r5 )r& �r r r r � is_connected� s zSession.is_connectedc � s" | j d usJ �| j �� I d H d S r5 )r& rK rR r r r rK � s z Session.waitc C s | j d usJ �| j �� d S r5 )r& Z terminaterR r r r �exit� s z Session.exitc � s | � � | �� I d H d S r5 )rT rK rR r r r � disconnect� s zSession.disconnectr c C s* | j d usJ �dd| j dgttj|��R S )Nr r4 � )r% �map�shlex�quoter r r r r � s z Session.wrap_subprocess_args)FNNNNNNN)r r r! r$ �__annotations__r% r& r" �boolrQ rS rK rT rU r r r r r r r# L s6 �� Zr# )r ) rI Zctypes� functoolsZloggingr> rX r8 r rD �typingr r rV r Zinteraction_agentr r r r ZCDLLr6 Z getLoggerr �loggerr7 � lru_cacher" r[ r r r# r r r r �<module> s$ __pycache__/ssh_askpass.cpython-39.opt-1.pyc 0000644 00000017203 15111634750 0014674 0 ustar 00 a �/�h� � @ s d dl Z d dlZd dlmZmZmZ ddlmZ e �e �Z G dd� d�Z G dd� de �Z d d d d d dd�Z G dd� de �ZG dd� de �ZG dd� de �ZG dd� de �ZG dd� de �ZG dd� de �Zeed �d d �Zeee d �d d!�ZG d"d#� d#e�ZdS )$� N)�ClassVar�Match�Sequence� )�AskpassHandlerc @ s| e Zd ZU dZeed< eed< eed< eeedd�dd�Zedd �d d �Zdd �d d�Zddd�dd�Z ddd�dd�Z dS )� AskpassPrompta� An askpass prompt resulting from a call to ferny-askpass. stderr: the contents of stderr from before ferny-askpass was called. Likely related to previous failed operations. messages: all but the last line of the prompt as handed to ferny-askpass. Usually contains context about the question. prompt: the last line handed to ferny-askpass. The prompt itself. �stderr�messages�promptN)r r r �returnc C s || _ || _|| _d S �N)r r r )�selfr r r � r �E/usr/lib/python3.9/site-packages/cockpit/_vendor/ferny/ssh_askpass.py�__init__ s zAskpassPrompt.__init__)�responser c C s d S r r )r r r r r �reply s zAskpassPrompt.reply)r c C s d S r r )r r r r �close s zAskpassPrompt.close�SshAskpassResponder�� responderr c � s> z.| � |�I d H }|d ur$| �|� W | �� n | �� 0 d S r )�dispatchr r )r r r r r r � handle_via" s zAskpassPrompt.handle_via� str | Nonec � s |� | �I d H S r �� do_prompt�r r r r r r * s zAskpassPrompt.dispatch) �__name__� __module__� __qualname__�__doc__�str�__annotations__r r r r r r r r r r s r c sX e Zd ZU dZded< ee ed< dZeee ed< eeee dd�� fdd � Z � Z S ) �SSHAskpassPromptNz ClassVar[Sequence[str] | None]�answers�_patternr �_extra_patterns)r r r �matchr c s\ t � �|||� | j�|�� � | jD ]0}t�t|�|tj �}|d ur&| j�|�� � q&d S r ) �superr �__dict__�update� groupdictr& �re�search� with_helpers�M)r r r r r' �patternZ extra_match�� __class__r r r : s zSSHAskpassPrompt.__init__) r r r r$ r" r r! r& r r r � __classcell__r r r1 r r# . s r# z(?P<algorithm>\b[-\w]+\b)z(?P<filename>.+)z)(?P<fingerprint>SHA256:[0-9A-Za-z+/]{43})z(?P<hostname>[^ @']+)z(?P<pkcs11_id>.+)z(?P<username>[^ @']+))z %{algorithm}z %{filename}z%{fingerprint}z %{hostname}z %{pkcs11_id}z %{username}c @ s: e Zd ZU dZdZded< dZded< ddd�dd �ZdS ) �SshPasswordPromptz$%{username}@%{hostname}'s password: Nr �username�hostnamer r c � s |� | �I d H S r )�do_password_promptr r r r r T s zSshPasswordPrompt.dispatch)r r r r% r5 r" r6 r r r r r r4 O s r4 c @ s* e Zd ZU dZeed< ddd�dd�ZdS ) �SshPassphrasePromptz(Enter passphrase for key '%{filename}': �filenamer r r c � s |� | �I d H S r )�do_passphrase_promptr r r r r \ s z SshPassphrasePrompt.dispatchN�r r r r% r! r" r r r r r r8 X s r8 c @ s2 e Zd ZU dZeed< eed< ddd�dd�Zd S ) �SshFIDOPINPromptz,Enter PIN for %{algorithm} key %{filename}: � algorithmr9 r z str | Noner c � s |� | �I d H S r )�do_fido_pin_promptr r r r r e s zSshFIDOPINPrompt.dispatchNr; r r r r r< ` s r< c @ s6 e Zd ZU dZdZeed< eed< ddd�dd �Zd S ) �SshFIDOUserPresencePromptz9Confirm user presence for key %{algorithm} %{fingerprint}r r= � fingerprintr r r c � s |� | �I d H S r )� do_fido_user_presence_promptr r r r r o s z"SshFIDOUserPresencePrompt.dispatchN)r r r r% r$ r! r" r r r r r r? i s r? c @ s* e Zd ZU dZeed< ddd�dd�ZdS ) �SshPKCS11PINPromptz Enter PIN for '%{pkcs11_id}': Z pkcs11_idr r r c � s |� | �I d H S r )�do_pkcs11_pin_promptr r r r r w s zSshPKCS11PINPrompt.dispatchNr; r r r r rB s s rB c @ s> e Zd ZU dZg d�ZdZeed< eed< ddd�d d �Zd S ) �SshHostKeyPromptzMAre you sure you want to continue connecting \(yes/no(/\[fingerprint\])?\)\? )z%{fingerprint}[.]$z ^%{algorithm} key fingerprint iszE^The fingerprint for the %{algorithm} key sent by the remote host is$)Zyes�nor= r@ r r r c � s |� | �I d H S r )�do_host_key_promptr r r r r � s zSshHostKeyPrompt.dispatchN) r r r r% r& r$ r! r" r r r r r rD { s rD )r0 r c C s" t �� D ]\}}| �||�} q| S r )�HELPERS�items�replace)r0 �name�helperr r r r. � s r. )�stringr r c C s� t tttttg}| �ddd�}|dkrH| |d d � }| d |d � }n| }d}|D ]4}t|j�}t � ||�}|d urT|||||� S qTt |||�S )N� r ���r � ) r< r? rD rB r8 r4 �rfindr. r% r, � fullmatchr ) rL r �classesZsecond_last_newline� last_line�extras�clsr0 r' r r r �categorize_ssh_prompt� s& � rV c @ s� e Zd Zeeedd�dd�Zedd�dd�Zedd�dd �Ze dd�d d �Z e dd�d d �Z e dd�dd�Zedd�dd�Zedd�dd�ZdS )r r )r r �hintr c � s t ||��| �I d H S r )rV r )r r r rW r r r � do_askpass� s z SshAskpassResponder.do_askpass)r r c � s d S r r �r r r r r r � s z SshAskpassResponder.do_promptc � s | � |�I d H S r r rY r r r r> � s z&SshAskpassResponder.do_fido_pin_promptc � s | � |�I d H S r r rY r r r rA � s z0SshAskpassResponder.do_fido_user_presence_promptc � s | � |�I d H S r r rY r r r rF � s z&SshAskpassResponder.do_host_key_promptc � s | � |�I d H S r r rY r r r rC � s z(SshAskpassResponder.do_pkcs11_pin_promptc � s | � |�I d H S r r rY r r r r: � s z(SshAskpassResponder.do_passphrase_promptc � s | � |�I d H S r r rY r r r r7 � s z&SshAskpassResponder.do_password_promptN)r r r r! rX r r r< r> r? rA rD rF rB rC r8 r: r4 r7 r r r r r � s r )Zloggingr, �typingr r r Zinteraction_agentr Z getLoggerr �loggerr r# rG r4 r8 r< r? rB rD r! r. rV r r r r r �<module> s, $� __pycache__/ssh_askpass.cpython-39.pyc 0000644 00000017223 15111634750 0013737 0 ustar 00 a �/�h� � @ s d dl Z d dlZd dlmZmZmZ ddlmZ e �e �Z G dd� d�Z G dd� de �Z d d d d d dd�Z G dd� de �ZG dd� de �ZG dd� de �ZG dd� de �ZG dd� de �ZG dd� de �Zeed �d d �Zeee d �d d!�ZG d"d#� d#e�ZdS )$� N)�ClassVar�Match�Sequence� )�AskpassHandlerc @ s| e Zd ZU dZeed< eed< eed< eeedd�dd�Zedd �d d �Zdd �d d�Zddd�dd�Z ddd�dd�Z dS )� AskpassPrompta� An askpass prompt resulting from a call to ferny-askpass. stderr: the contents of stderr from before ferny-askpass was called. Likely related to previous failed operations. messages: all but the last line of the prompt as handed to ferny-askpass. Usually contains context about the question. prompt: the last line handed to ferny-askpass. The prompt itself. �stderr�messages�promptN)r r r �returnc C s || _ || _|| _d S �N)r r r )�selfr r r � r �E/usr/lib/python3.9/site-packages/cockpit/_vendor/ferny/ssh_askpass.py�__init__ s zAskpassPrompt.__init__)�responser c C s d S r r )r r r r r �reply s zAskpassPrompt.reply)r c C s d S r r )r r r r �close s zAskpassPrompt.close�SshAskpassResponder�� responderr c � s> z.| � |�I d H }|d ur$| �|� W | �� n | �� 0 d S r )�dispatchr r )r r r r r r � handle_via" s zAskpassPrompt.handle_via� str | Nonec � s |� | �I d H S r �� do_prompt�r r r r r r * s zAskpassPrompt.dispatch) �__name__� __module__� __qualname__�__doc__�str�__annotations__r r r r r r r r r r s r c sX e Zd ZU dZded< ee ed< dZeee ed< eeee dd�� fdd � Z � Z S ) �SSHAskpassPromptNz ClassVar[Sequence[str] | None]�answers�_patternr �_extra_patterns)r r r �matchr c s\ t � �|||� | j�|�� � | jD ]0}t�t|�|tj �}|d ur&| j�|�� � q&d S r ) �superr �__dict__�update� groupdictr& �re�search� with_helpers�M)r r r r r' �patternZ extra_match�� __class__r r r : s zSSHAskpassPrompt.__init__) r r r r$ r" r r! r& r r r � __classcell__r r r1 r r# . s r# z(?P<algorithm>\b[-\w]+\b)z(?P<filename>.+)z)(?P<fingerprint>SHA256:[0-9A-Za-z+/]{43})z(?P<hostname>[^ @']+)z(?P<pkcs11_id>.+)z(?P<username>[^ @']+))z %{algorithm}z %{filename}z%{fingerprint}z %{hostname}z %{pkcs11_id}z %{username}c @ s: e Zd ZU dZdZded< dZded< ddd�dd �ZdS ) �SshPasswordPromptz$%{username}@%{hostname}'s password: Nr �username�hostnamer r c � s |� | �I d H S r )�do_password_promptr r r r r T s zSshPasswordPrompt.dispatch)r r r r% r5 r" r6 r r r r r r4 O s r4 c @ s* e Zd ZU dZeed< ddd�dd�ZdS ) �SshPassphrasePromptz(Enter passphrase for key '%{filename}': �filenamer r r c � s |� | �I d H S r )�do_passphrase_promptr r r r r \ s z SshPassphrasePrompt.dispatchN�r r r r% r! r" r r r r r r8 X s r8 c @ s2 e Zd ZU dZeed< eed< ddd�dd�Zd S ) �SshFIDOPINPromptz,Enter PIN for %{algorithm} key %{filename}: � algorithmr9 r z str | Noner c � s |� | �I d H S r )�do_fido_pin_promptr r r r r e s zSshFIDOPINPrompt.dispatchNr; r r r r r< ` s r< c @ s6 e Zd ZU dZdZeed< eed< ddd�dd �Zd S ) �SshFIDOUserPresencePromptz9Confirm user presence for key %{algorithm} %{fingerprint}r r= � fingerprintr r r c � s |� | �I d H S r )� do_fido_user_presence_promptr r r r r o s z"SshFIDOUserPresencePrompt.dispatchN)r r r r% r$ r! r" r r r r r r? i s r? c @ s* e Zd ZU dZeed< ddd�dd�ZdS ) �SshPKCS11PINPromptz Enter PIN for '%{pkcs11_id}': Z pkcs11_idr r r c � s |� | �I d H S r )�do_pkcs11_pin_promptr r r r r w s zSshPKCS11PINPrompt.dispatchNr; r r r r rB s s rB c @ s> e Zd ZU dZg d�ZdZeed< eed< ddd�d d �Zd S ) �SshHostKeyPromptzMAre you sure you want to continue connecting \(yes/no(/\[fingerprint\])?\)\? )z%{fingerprint}[.]$z ^%{algorithm} key fingerprint iszE^The fingerprint for the %{algorithm} key sent by the remote host is$)Zyes�nor= r@ r r r c � s |� | �I d H S r )�do_host_key_promptr r r r r � s zSshHostKeyPrompt.dispatchN) r r r r% r& r$ r! r" r r r r r rD { s rD )r0 r c C s. t �� D ]\}}| �||�} qd| vs*J �| S )Nz%{)�HELPERS�items�replace)r0 �name�helperr r r r. � s r. )�stringr r c C s� t tttttg}| �ddd�}|dkrH| |d d � }| d |d � }n| }d}|D ]4}t|j�}t � ||�}|d urT|||||� S qTt |||�S )N� r ���r � ) r< r? rD rB r8 r4 �rfindr. r% r, � fullmatchr ) rL r �classesZsecond_last_newline� last_line�extras�clsr0 r' r r r �categorize_ssh_prompt� s& � rV c @ s� e Zd Zeeedd�dd�Zedd�dd�Zedd�dd �Ze dd�d d �Z e dd�d d �Z e dd�dd�Zedd�dd�Zedd�dd�ZdS )r r )r r �hintr c � s t ||��| �I d H S r )rV r )r r r rW r r r � do_askpass� s z SshAskpassResponder.do_askpass)r r c � s d S r r �r r r r r r � s z SshAskpassResponder.do_promptc � s | � |�I d H S r r rY r r r r> � s z&SshAskpassResponder.do_fido_pin_promptc � s | � |�I d H S r r rY r r r rA � s z0SshAskpassResponder.do_fido_user_presence_promptc � s | � |�I d H S r r rY r r r rF � s z&SshAskpassResponder.do_host_key_promptc � s | � |�I d H S r r rY r r r rC � s z(SshAskpassResponder.do_pkcs11_pin_promptc � s | � |�I d H S r r rY r r r r: � s z(SshAskpassResponder.do_passphrase_promptc � s | � |�I d H S r r rY r r r r7 � s z&SshAskpassResponder.do_password_promptN)r r r r! rX r r r< r> r? rA rD rF rB rC r8 r: r4 r7 r r r r r � s r )Zloggingr, �typingr r r Zinteraction_agentr Z getLoggerr �loggerr r# rG r4 r8 r< r? rB rD r! r. rV r r r r r �<module> s, $� __pycache__/ssh_errors.cpython-39.opt-1.pyc 0000644 00000007646 15111634750 0014555 0 ustar 00 a �/�h� � @ sv d dl Z d dlZd dlZd dlZd dlZd dlmZmZmZm Z G dd� de �Z G dd� de �Z G dd� de �Z G d d � d e �ZG d d � d e�ZG d d� de�Zdd�dd�Zee� �Zedd� eejfeejfeejfeejfeejfeejfe ej fe ej fe ej!fe"ej#fe$ej%fe&ej'fe(ej)fe*ej+fe,ej-fe.ej/fe.ej0fe1ej2fe3ej4ffD ��Z5e6e d�dd�Z7dS )� N)�ClassVar�Iterable�Match�Patternc s4 e Zd ZU ee ed< dedd�� fdd� Z� ZS )�SshError�PATTERNz Match | NoneN��match�stderr�returnc s( t � �|d ur|�d�n|� || _d S )Nr )�super�__init__�groupr ��selfr r �� __class__� �D/usr/lib/python3.9/site-packages/cockpit/_vendor/ferny/ssh_errors.pyr s zSshError.__init__) �__name__� __module__� __qualname__r r �__annotations__�strr � __classcell__r r r r r s r c s4 e Zd Ze�dej�Zeedd�� fdd� Z � Z S )�SshAuthenticationErrorz+^([^:]+): Permission denied \(([^()]+)\)\.$Nr c s< t � �||� |�d�| _|�d��d�| _|�d�| _d S )N� � �,r )r r r Z destination�split�methods�messager r r r r % s z SshAuthenticationError.__init__) r r r �re�compile�Mr r r r r r r r r r " s r c @ s e Zd Ze�dej�ZdS )�SshInvalidHostnameErrorz%^hostname contains invalid charactersN�r r r r" r# �Ir r r r r r% , s r% c @ s e Zd Ze�dej�ZdS )�SshHostKeyErrorz ^Host key verification failed.$N)r r r r" r# r$ r r r r r r( 1 s r( c @ s e Zd Ze�dejejB �ZdS )�SshUnknownHostKeyErrorz8^No .* host key is known.*Host key verification failed.$N)r r r r" r# �Sr$ r r r r r r) 6 s r) c @ s e Zd Ze�dej�ZdS )�SshChangedHostKeyErrorz/warning.*remote host identification has changedNr& r r r r r+ : s r+ zIterable[tuple[str, int]])r c c sP t �d �} t j| j_tt�D ].}|�d�r tt|�}| �|�� d�|fV q d S )NZEAI_zutf-8) �ctypesZCDLLZc_char_pZ gai_strerrorZrestype�dir�socket� startswith�getattr�decode)Zlibc�key�errnumr r r �make_gaierror_map@ s r4 c c s | ]\}}||fV qd S )Nr )�.0�clsr3 r r r � <genexpr>S � r7 )r r c C s� | � dd�} tttttfD ]&}|j�| �}|d ur||| � S q| �d�\}}}|r�|r�|� � }|t v r~t | }t � || �S t jD ],}t�|�|kr�t�|t�}||| � S q�td | �S )Nz � �:)�replacer% r r+ r) r( r �search� rpartition�strip� gaierror_mapr. Zgaierror�errno� errorcode�os�strerror�oserror_subclass_map�get�OSErrorr ) r Zssh_clsr �before�colonZafterZpotential_strerrorr3 Zos_clsr r r � get_exception_for_ssh_stderrj s$ � rI )8r, r@ rB r" r. �typingr r r r � Exceptionr r r% r( r) r+ r4 �dictr? �BlockingIOErrorZEAGAINZEALREADYZ EINPROGRESSZ EWOULDBLOCK�BrokenPipeErrorZEPIPEZ ESHUTDOWN�ChildProcessErrorZECHILD�ConnectionAbortedErrorZ ECONNABORTED�ConnectionRefusedErrorZ ECONNREFUSED�ConnectionResetErrorZ ECONNRESET�FileExistsErrorZEEXIST�FileNotFoundError�ENOENT�IsADirectoryErrorZEISDIR�NotADirectoryError�ENOTDIR�InterruptedErrorZEINTR�PermissionErrorZEACCES�EPERM�ProcessLookupErrorZESRCH� TimeoutErrorZ ETIMEDOUTrD r rI r r r r �<module> sF � __pycache__/ssh_errors.cpython-39.pyc 0000644 00000007646 15111634750 0013616 0 ustar 00 a �/�h� � @ sv d dl Z d dlZd dlZd dlZd dlZd dlmZmZmZm Z G dd� de �Z G dd� de �Z G dd� de �Z G d d � d e �ZG d d � d e�ZG d d� de�Zdd�dd�Zee� �Zedd� eejfeejfeejfeejfeejfeejfe ej fe ej fe ej!fe"ej#fe$ej%fe&ej'fe(ej)fe*ej+fe,ej-fe.ej/fe.ej0fe1ej2fe3ej4ffD ��Z5e6e d�dd�Z7dS )� N)�ClassVar�Iterable�Match�Patternc s4 e Zd ZU ee ed< dedd�� fdd� Z� ZS )�SshError�PATTERNz Match | NoneN��match�stderr�returnc s( t � �|d ur|�d�n|� || _d S )Nr )�super�__init__�groupr ��selfr r �� __class__� �D/usr/lib/python3.9/site-packages/cockpit/_vendor/ferny/ssh_errors.pyr s zSshError.__init__) �__name__� __module__� __qualname__r r �__annotations__�strr � __classcell__r r r r r s r c s4 e Zd Ze�dej�Zeedd�� fdd� Z � Z S )�SshAuthenticationErrorz+^([^:]+): Permission denied \(([^()]+)\)\.$Nr c s< t � �||� |�d�| _|�d��d�| _|�d�| _d S )N� � �,r )r r r Z destination�split�methods�messager r r r r % s z SshAuthenticationError.__init__) r r r �re�compile�Mr r r r r r r r r r " s r c @ s e Zd Ze�dej�ZdS )�SshInvalidHostnameErrorz%^hostname contains invalid charactersN�r r r r" r# �Ir r r r r r% , s r% c @ s e Zd Ze�dej�ZdS )�SshHostKeyErrorz ^Host key verification failed.$N)r r r r" r# r$ r r r r r r( 1 s r( c @ s e Zd Ze�dejejB �ZdS )�SshUnknownHostKeyErrorz8^No .* host key is known.*Host key verification failed.$N)r r r r" r# �Sr$ r r r r r r) 6 s r) c @ s e Zd Ze�dej�ZdS )�SshChangedHostKeyErrorz/warning.*remote host identification has changedNr& r r r r r+ : s r+ zIterable[tuple[str, int]])r c c sP t �d �} t j| j_tt�D ].}|�d�r tt|�}| �|�� d�|fV q d S )NZEAI_zutf-8) �ctypesZCDLLZc_char_pZ gai_strerrorZrestype�dir�socket� startswith�getattr�decode)Zlibc�key�errnumr r r �make_gaierror_map@ s r4 c c s | ]\}}||fV qd S )Nr )�.0�clsr3 r r r � <genexpr>S � r7 )r r c C s� | � dd�} tttttfD ]&}|j�| �}|d ur||| � S q| �d�\}}}|r�|r�|� � }|t v r~t | }t � || �S t jD ],}t�|�|kr�t�|t�}||| � S q�td | �S )Nz � �:)�replacer% r r+ r) r( r �search� rpartition�strip� gaierror_mapr. Zgaierror�errno� errorcode�os�strerror�oserror_subclass_map�get�OSErrorr ) r Zssh_clsr �before�colonZafterZpotential_strerrorr3 Zos_clsr r r � get_exception_for_ssh_stderrj s$ � rI )8r, r@ rB r" r. �typingr r r r � Exceptionr r r% r( r) r+ r4 �dictr? �BlockingIOErrorZEAGAINZEALREADYZ EINPROGRESSZ EWOULDBLOCK�BrokenPipeErrorZEPIPEZ ESHUTDOWN�ChildProcessErrorZECHILD�ConnectionAbortedErrorZ ECONNABORTED�ConnectionRefusedErrorZ ECONNREFUSED�ConnectionResetErrorZ ECONNRESET�FileExistsErrorZEEXIST�FileNotFoundError�ENOENT�IsADirectoryErrorZEISDIR�NotADirectoryError�ENOTDIR�InterruptedErrorZEINTR�PermissionErrorZEACCES�EPERM�ProcessLookupErrorZESRCH� TimeoutErrorZ ETIMEDOUTrD r rI r r r r �<module> sF � __pycache__/transport.cpython-39.opt-1.pyc 0000644 00000031412 15111634750 0014404 0 ustar 00 a �/�hB � @ s� d dl Z d dlZd dlZd dlZd dlmZmZmZmZmZ ddl m Z m Z m Z ddl mZ e�e�Zede jd�ZG dd � d e�ZG d d � d e je j�ZdS ) � N)�Any�Callable�Iterable�Sequence�TypeVar� )�InteractionAgent�InteractionHandler�get_running_loop)� get_exception_for_ssh_stderr�P)�boundc s8 e Zd ZU eed< eed< eedd�� fdd� Z� ZS )�SubprocessError� returncode�stderrN)r r �returnc s t � �||� || _|| _d S �N)�super�__init__r r )�selfr r �� __class__� �C/usr/lib/python3.9/site-packages/cockpit/_vendor/ferny/transport.pyr $ s zSubprocessError.__init__)�__name__� __module__� __qualname__�int�__annotations__�strr � __classcell__r r r r r s r c @ s� e Zd ZU eed< ded< eed< ejed< dZeed< dZ d ed < dZ d ed < dZ d ed< dZ ded< dZ ded< dZded< dZeed< dZeed< edkdeg ef ee dee eedd �d d ��Zejdd �d d!�Zdd"�d#d$�Zd%dd&�d'd(�Zej dd)�d*d+�Z ddd,�d-d.�Z e e dd/�d0d1�Z!e ddd2�d3d4�Z"dd"�d5d6�Z#dd"�d7d8�Z$dd"�d9d:�Z%dlddd,�d;d<�Z&ed"�d=d>�Z'dmee(e(d?�d@dA�Z)ej*dd �dBdC�Z+ejd"�dDdE�Z,ed"�dFdG�Z-dd"�dHdI�Z.dd"�dJdK�Z/dd"�dLdM�Z0ed"�dNdO�Z1e d"�dPdQ�Z2dRd"�dSdT�Z3dnddddU�dVdW�Z4e ddX�dYdZ�Z5e6e dd[�d\d]�Z7dd"�d^d_�Z8e d"�d`da�Z9dd"�dbdc�Z:dd"�ddde�Z;e ddf�dgdh�Z<dd"�didj�Z=dS )o�FernyTransport�_agentz@asyncio.Task[tuple[asyncio.SubprocessTransport, FernyTransport]]� _exec_task�_is_ssh� _protocolF�_protocol_disconnectedNz"asyncio.SubprocessTransport | None�_subprocess_transportz asyncio.WriteTransport | None�_stdin_transportz asyncio.ReadTransport | None�_stdout_transportzException | None� _exceptionz str | None�_stderr_outputz int | None� _returncode�_transport_disconnected�_closedr Tztype[typing.Self]z asyncio.AbstractEventLoop | Noneztuple[typing.Self, P])�cls�protocol_factory�args�loop�interaction_handlers�is_ssh�kwargsr c s� t �d| ||� |� }| |�� |� _|du r2t� }t||� j�� _|�d� j�� � |� |j � fdd�g|�R i |���� _ t j dd�� fdd� }� j �|� � |fS ) a� Connects a FernyTransport to a protocol, using the given command. This spawns an external command and connects the stdin and stdout of the command to the protocol returned by the factory. An instance of ferny.InteractionAgent is created and attached to the stderr of the spawned process, using the provided handlers. It is the responsibility of the caller to ensure that: - a `ferny-askpass` client program is installed somewhere; and - any relevant command-line arguments or environment variables are passed correctly to the program to be spawned This function returns immediately and never raises exceptions, assuming all preconditions are met. If spawning the process fails then connection_lost() will be called with the relevant OSError, even before connection_made() is called. This is somewhat non-standard behaviour, but is the easiest way to report these errors without making this function async. Once the process is successfully executed, connection_made() will be called and the transport can be used as normal. connection_lost() will be called if the process exits or another error occurs. The return value of this function is the transport, but it exists in a semi-initialized state. You can call .close() on it, but nothing else. Once .connection_made() is called, you can call all the other functions. After you call this function, `.connection_lost()` will be called on your Protocol, exactly once, no matter what. Until that happens, you are responsible for holding a reference to the returned transport. :param args: the full argv of the command to spawn :param loop: the event loop to use. If none is provided, we use the one which is (read: must be) currently running. :param interaction_handlers: the handlers passed to the InteractionAgent :param is_ssh: whether we should attempt to interpret stderr as ssh error messages :param kwargs: anything else is passed through to `subprocess_exec()` :returns: the usual `(Transport, Protocol)` pair zspawn(%r, %r, %r)Nr c s � S r r r �r r r �<lambda>� � z&FernyTransport.spawn.<locals>.<lambda>)�taskr c s� t �d� | � z| �� \}}t �d� W nP tjy> Y d S tyx } z$t �d|� � �|� W Y d }~d S d }~0 0 � j�� d S )Nzexec_completed(%r, %r)z success.z OSError %r) �logger�debug�result�asyncioZCancelledError�OSError�closer" �start)r9 � transport�me�excr6 r r �exec_completed� s z,FernyTransport.spawn.<locals>.exec_completed)r: r; r$ r r �_interaction_completedr" � setdefault�filenoZ create_taskZsubprocess_execr# r= ZTaskZadd_done_callback) r/ r0 r1 r2 r3 r4 r5 �protocolrD r r6 r �spawn@ s 5( zFernyTransport.spawn)rH r c C s || _ d S r �r% �r rH r r r r � s zFernyTransport.__init__)r c C s* t �d| � | j�� s(t �d| j� d S | jd urJ| jsJt �d| j� d S | jd u rbt �d� d S | jrvt �d� d S d| _| jd ur�t �d| j� | j � | j� n�| j dks�| j r�t �d � | j � d � nZ| j r�| j d kr�t �d | j� | j � t| j�� n(t �d | j | j� | j � t| j | j�� d S ) Nz_consider_disconnect(%r)z exec_task still running %rz transport still connected %rz agent still runningz already disconnectedTz disconnect with exception %rr z clean disconnect� z disconnect with ssh error %rz) disconnect with exit code %r, stderr %r)r: r; r# �doner' r- r+ r& r* r% �connection_lostr, r. r$ r r r6 r r r �_consider_disconnect� s2 z#FernyTransport._consider_disconnectzasyncio.Future[str])�futurer c C sx t �d| |� z |�� | _t �d| j� W n@ tyj } z(t �d|� d| _| �|� W Y d }~n d }~0 0 | �� d S )Nz _interaction_completed(%r, %r)z stderr: %rz exception: %r� )r: r; r< r+ � Exceptionr? rO )r rP rC r r r rE � s z%FernyTransport._interaction_completed)rA r c C s^ t �d| |� || _|�d�}|| _|�d�}|| _|�d�}t �d| | j� | j�| � d S )Nzconnection_made(%r, %r)r r � z calling connection_made(%r, %r))r: r; r' Zget_pipe_transportr( r) r% �connection_made)r rA Zstdin_transportZstdout_transportZstderr_transportr r r rT � s z FernyTransport.connection_made)rC r c C s0 t �d| |� | jd u r || _d| _| �� d S )Nzconnection_lost(%r, %r)T)r: r; r* r- rO �r rC r r r rN � s z FernyTransport.connection_lost)�fd�datar c C s$ t �d| |t|�� | j�|� d S )Nz pipe_data_received(%r, %r, %r))r: r; �lenr% Z data_received)r rV rW r r r �pipe_data_received� s z!FernyTransport.pipe_data_received)rV rC r c C sV t �d| ||� t|t�r d }|d ur2| �|� n |dkrR| jsR| j�� sR| �� d S )Nz pipe_connection_lost(%r, %r, %r)r )r: r; � isinstance�BrokenPipeErrorr? r. r% Z eof_received)r rV rC r r r �pipe_connection_lost s z#FernyTransport.pipe_connection_lostc C s4 t �d| � | j�� | _t �d| j� | j�� d S )Nzprocess_exited(%r)z ._returncode = %r)r: r; r' �get_returncoder, r" �force_completionr6 r r r �process_exited s z FernyTransport.process_exitedc C s t �d| � | j�� d S )Nzpause_writing(%r))r: r; r% � pause_writingr6 r r r r` s z FernyTransport.pause_writingc C s t �d| � | j�� d S )Nzresume_writing(%r))r: r; r% �resume_writingr6 r r r ra s z FernyTransport.resume_writingc C s� t �d| |� d| _| jd u r0t �d|� || _| j�� sNt �d� | j�� | jd ur�t �d� t� t �� | j� � W d � n1 s�0 Y | j � � d S )Nz close(%r, %r)Tz setting exception %rz cancelling _exec_taskz closing _subprocess_transport)r: r; r. r* r# rM �cancelr' � contextlib�suppress�PermissionErrorr? r" r^ rU r r r r? s (zFernyTransport.closec C s | j �� S r )r' � is_closingr6 r r r rf 0 s zFernyTransport.is_closing)�name�defaultr c C s | j �||�S r )r' �get_extra_info)r rg rh r r r ri 4 s z FernyTransport.get_extra_infoc C s || _ d S r rJ rK r r r � set_protocol8 s zFernyTransport.set_protocolc C s | j S r rJ r6 r r r � get_protocol< s zFernyTransport.get_protocolc C sv z | j �� W S ty( | j j Y S typ z | j jj}|�| j j� W Y dS t yj Y Y dS 0 Y n0 d S )NTF) r) � is_reading�NotImplementedErrorZ_paused�AttributeErrorZ_loopZ _selectorZget_keyZ_fileno�KeyError)r �selectorr r r rl ? s zFernyTransport.is_readingc C s | j �� d S r )r) � pause_readingr6 r r r rq O s z FernyTransport.pause_readingc C s | j �� d S r )r) �resume_readingr6 r r r rr S s z FernyTransport.resume_readingc C s | j �� | j�� d S r )r( �abortr' �killr6 r r r rs W s zFernyTransport.abortc C s | j �� S r )r( � can_write_eofr6 r r r ru ] s z FernyTransport.can_write_eofc C s | j �� S r )r( �get_write_buffer_sizer6 r r r rv a s z$FernyTransport.get_write_buffer_sizeztuple[int, int]c C s | j �� S r )r( �get_write_buffer_limitsr6 r r r rw e s z&FernyTransport.get_write_buffer_limits)�high�lowr c C s | j �||�S r )r( �set_write_buffer_limits)r rx ry r r r rz i s z&FernyTransport.set_write_buffer_limits)rW r c C s | j �|�S r )r( �write)r rW r r r r{ m s zFernyTransport.write)� list_of_datar c C s | j �|�S r )r( � writelines)r r| r r r r} q s zFernyTransport.writelinesc C s | j �� S r )r( � write_eofr6 r r r r~ u s zFernyTransport.write_eofc C s | j �� S r )r' �get_pidr6 r r r r { s zFernyTransport.get_pidc C s | j S r )r, r6 r r r r] s z FernyTransport.get_returncodec C s | j �� d S r )r' rt r6 r r r rt � s zFernyTransport.kill)�numberr c C s | j �|� d S r )r' � send_signal)r r� r r r r� � s zFernyTransport.send_signalc C s | j �� d S r )r' � terminater6 r r r r� � s zFernyTransport.terminate)Nr T)N)N)NN)>r r r r r �boolr= �Protocolr& r' r( r) r* r+ r, r- r. � classmethodr r r r r r rI r rO rE Z BaseTransportrT rN r �bytesrY r\ r_ r` ra r? rf �objectri Z BaseProtocolrj rk rl rq rr rs ru rv rw rz r{ r r} r~ r r] rt r� r� r r r r r! * st � �c, r! )r= rc Zlogging�typingr r r r r Zinteraction_agentr r r Z ssh_errorsr Z getLoggerr r: r� r rR r Z TransportZSubprocessProtocolr! r r r r �<module> s __pycache__/transport.cpython-39.pyc 0000644 00000032600 15111634750 0013445 0 ustar 00 a �/�hB � @ s� d dl Z d dlZd dlZd dlZd dlmZmZmZmZmZ ddl m Z m Z m Z ddl mZ e�e�Zede jd�ZG dd � d e�ZG d d � d e je j�ZdS ) � N)�Any�Callable�Iterable�Sequence�TypeVar� )�InteractionAgent�InteractionHandler�get_running_loop)� get_exception_for_ssh_stderr�P)�boundc s8 e Zd ZU eed< eed< eedd�� fdd� Z� ZS )�SubprocessError� returncode�stderrN)r r �returnc s t � �||� || _|| _d S �N)�super�__init__r r )�selfr r �� __class__� �C/usr/lib/python3.9/site-packages/cockpit/_vendor/ferny/transport.pyr $ s zSubprocessError.__init__)�__name__� __module__� __qualname__�int�__annotations__�strr � __classcell__r r r r r s r c @ s� e Zd ZU eed< ded< eed< ejed< dZeed< dZ d ed < dZ d ed < dZ d ed< dZ ded< dZ ded< dZded< dZeed< dZeed< edkdeg ef ee dee eedd �d d ��Zejdd �d d!�Zdd"�d#d$�Zd%dd&�d'd(�Zej dd)�d*d+�Z ddd,�d-d.�Z e e dd/�d0d1�Z!e ddd2�d3d4�Z"dd"�d5d6�Z#dd"�d7d8�Z$dd"�d9d:�Z%dlddd,�d;d<�Z&ed"�d=d>�Z'dmee(e(d?�d@dA�Z)ej*dd �dBdC�Z+ejd"�dDdE�Z,ed"�dFdG�Z-dd"�dHdI�Z.dd"�dJdK�Z/dd"�dLdM�Z0ed"�dNdO�Z1e d"�dPdQ�Z2dRd"�dSdT�Z3dnddddU�dVdW�Z4e ddX�dYdZ�Z5e6e dd[�d\d]�Z7dd"�d^d_�Z8e d"�d`da�Z9dd"�dbdc�Z:dd"�ddde�Z;e ddf�dgdh�Z<dd"�didj�Z=dS )o�FernyTransport�_agentz@asyncio.Task[tuple[asyncio.SubprocessTransport, FernyTransport]]� _exec_task�_is_ssh� _protocolF�_protocol_disconnectedNz"asyncio.SubprocessTransport | None�_subprocess_transportz asyncio.WriteTransport | None�_stdin_transportz asyncio.ReadTransport | None�_stdout_transportzException | None� _exceptionz str | None�_stderr_outputz int | None� _returncode�_transport_disconnected�_closedr Tztype[typing.Self]z asyncio.AbstractEventLoop | Noneztuple[typing.Self, P])�cls�protocol_factory�args�loop�interaction_handlers�is_ssh�kwargsr c s� t �d| ||� |� }| |�� |� _|du r2t� }t||� j�� _|�d� j�� � |� |j � fdd�g|�R i |���� _ t j dd�� fdd� }� j �|� � |fS ) a� Connects a FernyTransport to a protocol, using the given command. This spawns an external command and connects the stdin and stdout of the command to the protocol returned by the factory. An instance of ferny.InteractionAgent is created and attached to the stderr of the spawned process, using the provided handlers. It is the responsibility of the caller to ensure that: - a `ferny-askpass` client program is installed somewhere; and - any relevant command-line arguments or environment variables are passed correctly to the program to be spawned This function returns immediately and never raises exceptions, assuming all preconditions are met. If spawning the process fails then connection_lost() will be called with the relevant OSError, even before connection_made() is called. This is somewhat non-standard behaviour, but is the easiest way to report these errors without making this function async. Once the process is successfully executed, connection_made() will be called and the transport can be used as normal. connection_lost() will be called if the process exits or another error occurs. The return value of this function is the transport, but it exists in a semi-initialized state. You can call .close() on it, but nothing else. Once .connection_made() is called, you can call all the other functions. After you call this function, `.connection_lost()` will be called on your Protocol, exactly once, no matter what. Until that happens, you are responsible for holding a reference to the returned transport. :param args: the full argv of the command to spawn :param loop: the event loop to use. If none is provided, we use the one which is (read: must be) currently running. :param interaction_handlers: the handlers passed to the InteractionAgent :param is_ssh: whether we should attempt to interpret stderr as ssh error messages :param kwargs: anything else is passed through to `subprocess_exec()` :returns: the usual `(Transport, Protocol)` pair zspawn(%r, %r, %r)Nr c s � S r r r �r r r �<lambda>� � z&FernyTransport.spawn.<locals>.<lambda>)�taskr c s� t �d� | � | � ju s J �z&| �� \}}|� u s6J �t �d� W nP tjyX Y d S ty� } z$t �d|� � �|� W Y d }~d S d }~0 0 � j|u s�J �� j d us�J �� j d us�J �� j � � d S )Nzexec_completed(%r, %r)z success.z OSError %r) �logger�debugr# �result�asyncioZCancelledError�OSError�closer' r( r) r" �start)r9 � transport�me�excr6 r r �exec_completed� s z,FernyTransport.spawn.<locals>.exec_completed)r: r; r$ r r �_interaction_completedr" � setdefault�filenoZ create_taskZsubprocess_execr# r= ZTaskZadd_done_callback) r/ r0 r1 r2 r3 r4 r5 �protocolrD r r6 r �spawn@ s 5( zFernyTransport.spawn)rH r c C s || _ d S r �r% �r rH r r r r � s zFernyTransport.__init__)r c C s: t �d| � | j�� s(t �d| j� d S | jd urJ| jsJt �d| j� d S | jd u rbt �d� d S | jrvt �d� d S d| _| jd ur�t �d| j� | j � | j� n�| j dks�| j r�t �d � | j � d � nj| j r�| j d kr�t �d | j� | j � t| j�� n8t �d | j | j� | j d u�s J �| j � t| j | j�� d S ) Nz_consider_disconnect(%r)z exec_task still running %rz transport still connected %rz agent still runningz already disconnectedTz disconnect with exception %rr z clean disconnect� z disconnect with ssh error %rz) disconnect with exit code %r, stderr %r)r: r; r# �doner' r- r+ r& r* r% �connection_lostr, r. r$ r r r6 r r r �_consider_disconnect� s4 z#FernyTransport._consider_disconnectzasyncio.Future[str])�futurer c C sx t �d| |� z |�� | _t �d| j� W n@ tyj } z(t �d|� d| _| �|� W Y d }~n d }~0 0 | �� d S )Nz _interaction_completed(%r, %r)z stderr: %rz exception: %r� )r: r; r< r+ � Exceptionr? rO )r rP rC r r r rE � s z%FernyTransport._interaction_completed)rA r c C s� t �d| |� t|tj�s J �|| _|�d�}t|tj�s>J �|| _|�d�}t|tj �s^J �|| _ |�d�}|d u szJ �t �d| | j � | j � | � d S )Nzconnection_made(%r, %r)r r � z calling connection_made(%r, %r)) r: r; � isinstancer= ZSubprocessTransportr' Zget_pipe_transportZWriteTransportr( Z ReadTransportr) r% �connection_made)r rA Zstdin_transportZstdout_transportZstderr_transportr r r rU � s z FernyTransport.connection_made)rC r c C s0 t �d| |� | jd u r || _d| _| �� d S )Nzconnection_lost(%r, %r)T)r: r; r* r- rO �r rC r r r rN � s z FernyTransport.connection_lost)�fd�datar c C s0 t �d| |t|�� |dks J �| j�|� d S )Nz pipe_data_received(%r, %r, %r)r )r: r; �lenr% Z data_received)r rW rX r r r �pipe_data_received� s z!FernyTransport.pipe_data_received)rW rC r c C sb t �d| ||� |dv s J �t|t�r*d }|d ur>| �|� n |dkr^| js^| j�� s^| �� d S )Nz pipe_connection_lost(%r, %r, %r))r r r )r: r; rT �BrokenPipeErrorr? r. r% Z eof_received)r rW rC r r r �pipe_connection_lost s z#FernyTransport.pipe_connection_lostc C sB t �d| � | jd usJ �| j�� | _t �d| j� | j�� d S )Nzprocess_exited(%r)z ._returncode = %r)r: r; r' �get_returncoder, r" �force_completionr6 r r r �process_exited s z FernyTransport.process_exitedc C s t �d| � | j�� d S )Nzpause_writing(%r))r: r; r% � pause_writingr6 r r r r` s z FernyTransport.pause_writingc C s t �d| � | j�� d S )Nzresume_writing(%r))r: r; r% �resume_writingr6 r r r ra s z FernyTransport.resume_writingc C s� t �d| |� d| _| jd u r0t �d|� || _| j�� sNt �d� | j�� | jd ur�t �d� t� t �� | j� � W d � n1 s�0 Y | j � � d S )Nz close(%r, %r)Tz setting exception %rz cancelling _exec_taskz closing _subprocess_transport)r: r; r. r* r# rM �cancelr' � contextlib�suppress�PermissionErrorr? r" r^ rV r r r r? s (zFernyTransport.closec C s | j d usJ �| j �� S r )r' � is_closingr6 r r r rf 0 s zFernyTransport.is_closing)�name�defaultr c C s | j d usJ �| j �||�S r )r' �get_extra_info)r rg rh r r r ri 4 s z FernyTransport.get_extra_infoc C s t |tj�sJ �|| _d S r )rT r= �Protocolr% rK r r r � set_protocol8 s zFernyTransport.set_protocolc C s | j S r rJ r6 r r r � get_protocol< s zFernyTransport.get_protocolc C s� | j d usJ �z | j �� W S ty6 | j j Y S ty~ z | j jj}|�| j j� W Y dS t yx Y Y dS 0 Y n0 d S )NTF) r) � is_reading�NotImplementedErrorZ_paused�AttributeErrorZ_loopZ _selectorZget_keyZ_fileno�KeyError)r �selectorr r r rm ? s zFernyTransport.is_readingc C s | j d usJ �| j �� d S r )r) � pause_readingr6 r r r rr O s z FernyTransport.pause_readingc C s | j d usJ �| j �� d S r )r) �resume_readingr6 r r r rs S s z FernyTransport.resume_readingc C s4 | j d usJ �| jd us J �| j �� | j�� d S r )r( r' �abort�killr6 r r r rt W s zFernyTransport.abortc C s | j d usJ �| j �� S r )r( � can_write_eofr6 r r r rv ] s z FernyTransport.can_write_eofc C s | j d usJ �| j �� S r )r( �get_write_buffer_sizer6 r r r rw a s z$FernyTransport.get_write_buffer_sizeztuple[int, int]c C s | j d usJ �| j �� S r )r( �get_write_buffer_limitsr6 r r r rx e s z&FernyTransport.get_write_buffer_limits)�high�lowr c C s | j d usJ �| j �||�S r )r( �set_write_buffer_limits)r ry rz r r r r{ i s z&FernyTransport.set_write_buffer_limits)rX r c C s | j d usJ �| j �|�S r )r( �write)r rX r r r r| m s zFernyTransport.write)� list_of_datar c C s | j d usJ �| j �|�S r )r( � writelines)r r} r r r r~ q s zFernyTransport.writelinesc C s | j d usJ �| j �� S r )r( � write_eofr6 r r r r u s zFernyTransport.write_eofc C s | j d usJ �| j �� S r )r' �get_pidr6 r r r r� { s zFernyTransport.get_pidc C s | j S r )r, r6 r r r r] s z FernyTransport.get_returncodec C s | j d usJ �| j �� d S r )r' ru r6 r r r ru � s zFernyTransport.kill)�numberr c C s | j d usJ �| j �|� d S r )r' � send_signal)r r� r r r r� � s zFernyTransport.send_signalc C s | j d usJ �| j �� d S r )r' � terminater6 r r r r� � s zFernyTransport.terminate)Nr T)N)N)NN)>r r r r r �boolr= rj r& r' r( r) r* r+ r, r- r. � classmethodr r r r r r rI r rO rE Z BaseTransportrU rN r �bytesrZ r\ r_ r` ra r? rf �objectri Z BaseProtocolrk rl rm rr rs rt rv rw rx r{ r| r r~ r r� r] ru r� r� r r r r r! * st � �c, r! )r= rc Zlogging�typingr r r r r Zinteraction_agentr r r Z ssh_errorsr Z getLoggerr r: rj r rR r Z TransportZSubprocessProtocolr! r r r r �<module> s __init__.py 0000644 00000002534 15111634750 0006664 0 ustar 00 from .interaction_agent import ( BEIBOOT_GADGETS, COMMAND_TEMPLATE, AskpassHandler, InteractionAgent, InteractionError, InteractionHandler, temporary_askpass, write_askpass_to_tmpdir, ) from .session import Session from .ssh_askpass import ( AskpassPrompt, SshAskpassResponder, SshFIDOPINPrompt, SshFIDOUserPresencePrompt, SshHostKeyPrompt, SshPassphrasePrompt, SshPasswordPrompt, SshPKCS11PINPrompt, ) from .ssh_errors import ( SshAuthenticationError, SshChangedHostKeyError, SshError, SshHostKeyError, SshUnknownHostKeyError, ) from .transport import FernyTransport, SubprocessError __all__ = [ 'AskpassHandler', 'AskpassPrompt', 'AuthenticationError', 'BEIBOOT_GADGETS', 'COMMAND_TEMPLATE', 'ChangedHostKeyError', 'FernyTransport', 'HostKeyError', 'InteractionAgent', 'InteractionError', 'InteractionHandler', 'Session', 'SshAskpassResponder', 'SshAuthenticationError', 'SshChangedHostKeyError', 'SshError', 'SshFIDOPINPrompt', 'SshFIDOUserPresencePrompt', 'SshHostKeyError', 'SshHostKeyPrompt', 'SshPKCS11PINPrompt', 'SshPassphrasePrompt', 'SshPasswordPrompt', 'SshUnknownHostKeyError', 'SubprocessError', 'temporary_askpass', 'write_askpass_to_tmpdir', ] __version__ = '0' askpass.py 0000644 00000000114 15111634750 0006562 0 ustar 00 from .interaction_client import main if __name__ == '__main__': main() interaction_agent.py 0000644 00000036671 15111634750 0010633 0 ustar 00 # ferny - asyncio SSH client library, using ssh(1) # # Copyright (C) 2023 Allison Karlitskaya <allison.karlitskaya@redhat.com> # # This program is free software: you can redistribute it and/or modify # it under the terms of the GNU General Public License as published by # the Free Software Foundation, either version 3 of the License, or # (at your option) any later version. # # This program is distributed in the hope that it will be useful, # but WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # GNU General Public License for more details. # # You should have received a copy of the GNU General Public License # along with this program. If not, see <http://www.gnu.org/licenses/>. import array import ast import asyncio import contextlib import logging import os import re import socket import tempfile from typing import Any, Callable, ClassVar, Generator, Sequence from . import interaction_client logger = logging.getLogger(__name__) COMMAND_RE = re.compile(b'\0ferny\0([^\n]*)\0\0\n') COMMAND_TEMPLATE = '\0ferny\0{(command, args)!r}\0\0\n' BEIBOOT_GADGETS = { "command": fr""" import sys def command(command, *args): sys.stderr.write(f{COMMAND_TEMPLATE!r}) sys.stderr.flush() """, "end": r""" def end(): command('ferny.end') """, } class InteractionError(Exception): pass try: recv_fds = socket.recv_fds except AttributeError: # Python < 3.9 def recv_fds( sock: socket.socket, bufsize: int, maxfds: int, flags: int = 0 ) -> 'tuple[bytes, list[int], int, None]': fds = array.array("i") msg, ancdata, flags, addr = sock.recvmsg(bufsize, socket.CMSG_LEN(maxfds * fds.itemsize)) for cmsg_level, cmsg_type, cmsg_data in ancdata: if (cmsg_level == socket.SOL_SOCKET and cmsg_type == socket.SCM_RIGHTS): fds.frombytes(cmsg_data[:len(cmsg_data) - (len(cmsg_data) % fds.itemsize)]) return msg, list(fds), flags, addr def get_running_loop() -> asyncio.AbstractEventLoop: try: return asyncio.get_running_loop() except AttributeError: # Python 3.6 return asyncio.get_event_loop() class InteractionHandler: commands: ClassVar[Sequence[str]] async def run_command(self, command: str, args: 'tuple[object, ...]', fds: 'list[int]', stderr: str) -> None: raise NotImplementedError class AskpassHandler(InteractionHandler): commands: ClassVar[Sequence[str]] = ('ferny.askpass',) async def do_askpass(self, messages: str, prompt: str, hint: str) -> 'str | None': """Prompt the user for an authentication or confirmation interaction. 'messages' is data that was sent to stderr before the interaction was requested. 'prompt' is the interaction prompt. The expected response type depends on hint: - "confirm": ask for permission, returning "yes" if accepted - example: authorizing agent operation - "none": show a request without need for a response - example: please touch your authentication token - otherwise: return a password or other form of text token - examples: enter password, unlock private key In any case, the function should properly handle cancellation. For the "none" case, this will be the normal way to dismiss the dialog. """ return None async def do_hostkey(self, reason: str, host: str, algorithm: str, key: str, fingerprint: str) -> bool: """Prompt the user for a decision regarding acceptance of a host key. The "reason" will be either "HOSTNAME" or "ADDRESS" (if `CheckHostIP` is enabled). The host, algorithm, and key parameters are the values in the form that they would appear one a single line in the known hosts file. The fingerprint is the key fingerprint in the format that ssh would normally present it to the user. In case the host key should be accepted, this function needs to return True. Returning False means that ssh implements its default logic. To interrupt the connection, raise an exception. """ return False async def do_custom_command( self, command: str, args: 'tuple[object, ...]', fds: 'list[int]', stderr: str ) -> None: """Handle a custom command. The command name, its arguments, the passed fds, and the stderr leading up to the command invocation are all provided. See doc/interaction-protocol.md """ async def _askpass_command(self, args: 'tuple[object, ...]', fds: 'list[int]', stderr: str) -> None: logger.debug('_askpass_command(%s, %s, %s)', args, fds, stderr) try: argv, env = args assert isinstance(argv, list) assert all(isinstance(arg, str) for arg in argv) assert isinstance(env, dict) assert all(isinstance(key, str) and isinstance(val, str) for key, val in env.items()) assert len(fds) == 2 except (ValueError, TypeError, AssertionError) as exc: logger.error('Invalid arguments to askpass interaction: %s, %s: %s', args, fds, exc) return with open(fds.pop(0), 'w') as status, open(fds.pop(0), 'w') as stdout: try: loop = get_running_loop() try: task = asyncio.current_task() except AttributeError: task = asyncio.Task.current_task() # type:ignore[attr-defined] # (Python 3.6) assert task is not None loop.add_reader(status, task.cancel) if len(argv) == 2: # normal askpass prompt = argv[1] hint = env.get('SSH_ASKPASS_PROMPT', '') logger.debug('do_askpass(%r, %r, %r)', stderr, prompt, hint) answer = await self.do_askpass(stderr, prompt, hint) logger.debug('do_askpass answer %r', answer) if answer is not None: print(answer, file=stdout) print(0, file=status) elif len(argv) == 6: # KnownHostsCommand argv0, reason, host, algorithm, key, fingerprint = argv if reason in ['ADDRESS', 'HOSTNAME']: logger.debug('do_hostkey(%r, %r, %r, %r, %r)', reason, host, algorithm, key, fingerprint) if await self.do_hostkey(reason, host, algorithm, key, fingerprint): print(host, algorithm, key, file=stdout) else: logger.debug('ignoring KnownHostsCommand reason %r', reason) print(0, file=status) else: logger.error('Incorrect number of command-line arguments to ferny-askpass: %s', argv) finally: loop.remove_reader(status) async def run_command(self, command: str, args: 'tuple[object, ...]', fds: 'list[int]', stderr: str) -> None: logger.debug('run_command(%s, %s, %s, %s)', command, args, fds, stderr) if command == 'ferny.askpass': await self._askpass_command(args, fds, stderr) else: await self.do_custom_command(command, args, fds, stderr) class InteractionAgent: _handlers: 'dict[str, InteractionHandler]' _loop: asyncio.AbstractEventLoop _tasks: 'set[asyncio.Task]' _buffer: bytearray _ours: socket.socket _theirs: socket.socket _completion_future: 'asyncio.Future[str]' _pending_result: 'None | str | Exception' = None _end: bool = False def _consider_completion(self) -> None: logger.debug('_consider_completion(%r)', self) if self._pending_result is None or self._tasks: logger.debug(' but not ready yet') elif self._completion_future.done(): logger.debug(' but already complete') elif isinstance(self._pending_result, str): logger.debug(' submitting stderr (%r) to completion_future', self._pending_result) self._completion_future.set_result(self._pending_result) else: logger.debug(' submitting exception (%r) to completion_future') self._completion_future.set_exception(self._pending_result) def _result(self, result: 'str | Exception') -> None: logger.debug('_result(%r, %r)', self, result) if self._pending_result is None: self._pending_result = result if self._ours.fileno() != -1: logger.debug(' remove_reader(%r)', self._ours) self._loop.remove_reader(self._ours.fileno()) for task in self._tasks: logger.debug(' cancel(%r)', task) task.cancel() logger.debug(' closing sockets') self._theirs.close() # idempotent self._ours.close() self._consider_completion() def _invoke_command(self, stderr: bytes, command_blob: bytes, fds: 'list[int]') -> None: logger.debug('_invoke_command(%r, %r, %r)', stderr, command_blob, fds) try: command, args = ast.literal_eval(command_blob.decode()) if not isinstance(command, str) or not isinstance(args, tuple): raise TypeError('Invalid argument types') except (UnicodeDecodeError, SyntaxError, ValueError, TypeError) as exc: logger.error('Received invalid ferny command: %s: %s', command_blob, exc) return if command == 'ferny.end': self._end = True self._result(self._buffer.decode(errors='replace')) return try: handler = self._handlers[command] except KeyError: logger.error('Received unhandled ferny command: %s', command) return # The task is responsible for the list of fds and removing itself # from the set. task_fds = list(fds) task = self._loop.create_task(handler.run_command(command, args, task_fds, stderr.decode())) def bottom_half(completed_task: asyncio.Task) -> None: assert completed_task is task while task_fds: os.close(task_fds.pop()) self._tasks.remove(task) try: task.result() logger.debug('%r completed cleanly', handler) except asyncio.CancelledError: # this is not an error — it just means ferny-askpass exited via signal logger.debug('%r was cancelled', handler) except Exception as exc: logger.debug('%r raised %r', handler, exc) self._result(exc) self._consider_completion() task.add_done_callback(bottom_half) self._tasks.add(task) fds[:] = [] def _got_data(self, data: bytes, fds: 'list[int]') -> None: logger.debug('_got_data(%r, %r)', data, fds) if data == b'': self._result(self._buffer.decode(errors='replace')) return self._buffer.extend(data) # Read zero or more "remote" messages chunks = COMMAND_RE.split(self._buffer) self._buffer = bytearray(chunks.pop()) while len(chunks) > 1: self._invoke_command(chunks[0], chunks[1], []) chunks = chunks[2:] # Maybe read one "local" message if fds: assert self._buffer.endswith(b'\0'), self._buffer stderr = self._buffer[:-1] self._buffer = bytearray(b'') with open(fds.pop(0), 'rb') as command_channel: command = command_channel.read() self._invoke_command(stderr, command, fds) def _read_ready(self) -> None: try: data, fds, _flags, _addr = recv_fds(self._ours, 4096, 10, flags=socket.MSG_DONTWAIT) except BlockingIOError: return except OSError as exc: self._result(exc) else: self._got_data(data, fds) finally: while fds: os.close(fds.pop()) def __init__( self, handlers: Sequence[InteractionHandler], loop: 'asyncio.AbstractEventLoop | None' = None, done_callback: 'Callable[[asyncio.Future[str]], None] | None' = None, ) -> None: self._loop = loop or get_running_loop() self._completion_future = self._loop.create_future() self._tasks = set() self._handlers = {} for handler in handlers: for command in handler.commands: self._handlers[command] = handler if done_callback is not None: self._completion_future.add_done_callback(done_callback) self._theirs, self._ours = socket.socketpair(socket.AF_UNIX, socket.SOCK_STREAM) self._buffer = bytearray() def fileno(self) -> int: return self._theirs.fileno() def start(self) -> None: logger.debug('start(%r)', self) if self._ours.fileno() != -1: logger.debug(' add_reader(%r)', self._ours) self._loop.add_reader(self._ours.fileno(), self._read_ready) else: logger.debug(' ...but agent is already finished.') logger.debug(' close(%r)', self._theirs) self._theirs.close() def force_completion(self) -> None: logger.debug('force_completion(%r)', self) # read any residual data on stderr, but don't process commands, and # don't block try: if self._ours.fileno() != -1: logger.debug(' draining pending stderr data (non-blocking)') with contextlib.suppress(BlockingIOError): while True: data = self._ours.recv(4096, socket.MSG_DONTWAIT) logger.debug(' got %d bytes', len(data)) if not data: break self._buffer.extend(data) except OSError as exc: self._result(exc) else: self._result(self._buffer.decode(errors='replace')) async def communicate(self) -> None: logger.debug('_communicate(%r)', self) try: self.start() # We assume that we are the only ones to write to # self._completion_future. If we directly await it, though, it can # also have a asyncio.CancelledError posted to it from outside. # Shield it to prevent that from happening. stderr = await asyncio.shield(self._completion_future) logger.debug('_communicate(%r) stderr result is %r', self, stderr) finally: logger.debug('_communicate finished. Ensuring completion.') self.force_completion() if not self._end: logger.debug('_communicate never saw ferny.end. raising InteractionError.') raise InteractionError(stderr.strip()) def write_askpass_to_tmpdir(tmpdir: str) -> str: askpass_path = os.path.join(tmpdir, 'ferny-askpass') fd = os.open(askpass_path, os.O_CREAT | os.O_WRONLY | os.O_CLOEXEC | os.O_EXCL | os.O_NOFOLLOW, 0o777) try: os.write(fd, __loader__.get_data(interaction_client.__file__)) # type: ignore finally: os.close(fd) return askpass_path @contextlib.contextmanager def temporary_askpass(**kwargs: Any) -> Generator[str, None, None]: with tempfile.TemporaryDirectory(**kwargs) as directory: yield write_askpass_to_tmpdir(directory) interaction_client.py 0000644 00000002124 15111634750 0010775 0 ustar 00 #!/usr/bin/python3 import array import io import os import socket import sys from typing import Sequence def command(stderr_fd: int, command: str, *args: object, fds: Sequence[int] = ()) -> None: cmd_read, cmd_write = [io.open(*end) for end in zip(os.pipe(), 'rw')] with cmd_write: with cmd_read: with socket.fromfd(stderr_fd, socket.AF_UNIX, socket.SOCK_STREAM) as sock: fd_array = array.array('i', (cmd_read.fileno(), *fds)) sock.sendmsg([b'\0'], [(socket.SOL_SOCKET, socket.SCM_RIGHTS, fd_array)]) cmd_write.write(repr((command, args))) def askpass(stderr_fd: int, stdout_fd: int, args: 'list[str]', env: 'dict[str, str]') -> int: ours, theirs = socket.socketpair() with theirs: command(stderr_fd, 'ferny.askpass', args, env, fds=(theirs.fileno(), stdout_fd)) with ours: return int(ours.recv(16) or b'1') def main() -> None: if len(sys.argv) == 1: command(2, 'ferny.end', []) else: sys.exit(askpass(2, 1, sys.argv, dict(os.environ))) if __name__ == '__main__': main() py.typed 0000644 00000000000 15111634750 0006234 0 ustar 00 session.py 0000644 00000016743 15111634750 0006617 0 ustar 00 # ferny - asyncio SSH client library, using ssh(1) # # Copyright (C) 2022 Allison Karlitskaya <allison.karlitskaya@redhat.com> # # This program is free software: you can redistribute it and/or modify # it under the terms of the GNU General Public License as published by # the Free Software Foundation, either version 3 of the License, or # (at your option) any later version. # # This program is distributed in the hope that it will be useful, # but WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # GNU General Public License for more details. # # You should have received a copy of the GNU General Public License # along with this program. If not, see <http://www.gnu.org/licenses/>. import asyncio import ctypes import functools import logging import os import shlex import signal import subprocess import tempfile from typing import Mapping, Sequence from . import ssh_errors from .interaction_agent import InteractionAgent, InteractionError, InteractionHandler, write_askpass_to_tmpdir prctl = ctypes.CDLL(None).prctl logger = logging.getLogger(__name__) PR_SET_PDEATHSIG = 1 @functools.lru_cache() def has_feature(feature: str, teststr: str = 'x') -> bool: try: subprocess.check_output(['ssh', f'-o{feature} {teststr}', '-G', 'nonexisting'], stderr=subprocess.DEVNULL) return True except subprocess.CalledProcessError: return False class SubprocessContext: def wrap_subprocess_args(self, args: Sequence[str]) -> Sequence[str]: """Return the args required to launch a process in the given context. For example, this might return a vector with ["sudo"] or ["flatpak-spawn", "--host"] prepended. It is also possible that more substantial changes may be performed. This function is not permitted to modify its argument, although it may (optionally) return it unmodified, if no changes are required. """ return args def wrap_subprocess_env(self, env: Mapping[str, str]) -> Mapping[str, str]: """Return the envp required to launch a process in the given context. For example, this might set the "SUDO_ASKPASS" environment variable, if needed. As with wrap_subprocess_args(), this function is not permitted to modify its argument, although it may (optionally) return it unmodified if no changes are required. """ return env class Session(SubprocessContext, InteractionHandler): # Set after .connect() called, even if failed _controldir: 'tempfile.TemporaryDirectory | None' = None _controlsock: 'str | None' = None # Set if connected, else None _process: 'asyncio.subprocess.Process | None' = None async def connect(self, destination: str, handle_host_key: bool = False, configfile: 'str | None' = None, identity_file: 'str | None' = None, login_name: 'str | None' = None, options: 'Mapping[str, str] | None' = None, pkcs11: 'str | None' = None, port: 'int | None' = None, interaction_responder: 'InteractionHandler | None' = None) -> None: rundir = os.path.join(os.environ.get('XDG_RUNTIME_DIR', '/run'), 'ferny') os.makedirs(rundir, exist_ok=True) self._controldir = tempfile.TemporaryDirectory(dir=rundir) self._controlsock = f'{self._controldir.name}/socket' # In general, we can't guarantee an accessible and executable version # of this file, but since it's small and we're making a temporary # directory anyway, let's just copy it into place and use it from # there. askpass_path = write_askpass_to_tmpdir(self._controldir.name) env = dict(os.environ) env['SSH_ASKPASS'] = askpass_path env['SSH_ASKPASS_REQUIRE'] = 'force' # old SSH doesn't understand SSH_ASKPASS_REQUIRE and guesses based on DISPLAY instead env['DISPLAY'] = '-' args = [ '-M', '-N', '-S', self._controlsock, '-o', 'PermitLocalCommand=yes', '-o', f'LocalCommand={askpass_path}', ] if configfile is not None: args.append(f'-F{configfile}') if identity_file is not None: args.append(f'-i{identity_file}') if options is not None: for key in options: # Note: Mapping may not have .items() args.append(f'-o{key} {options[key]}') if pkcs11 is not None: args.append(f'-I{pkcs11}') if port is not None: args.append(f'-p{port}') if login_name is not None: args.append(f'-l{login_name}') if handle_host_key and has_feature('KnownHostsCommand'): args.extend([ '-o', f'KnownHostsCommand={askpass_path} %I %H %t %K %f', '-o', 'StrictHostKeyChecking=yes', ]) agent = InteractionAgent([interaction_responder] if interaction_responder is not None else []) # SSH_ASKPASS_REQUIRE is not generally available, so use setsid process = await asyncio.create_subprocess_exec( *('/usr/bin/ssh', *args, destination), env=env, start_new_session=True, stdin=asyncio.subprocess.DEVNULL, stdout=asyncio.subprocess.DEVNULL, stderr=agent, # type: ignore preexec_fn=lambda: prctl(PR_SET_PDEATHSIG, signal.SIGKILL)) # This is tricky: we need to clean up the subprocess, but only in case # if failure. Otherwise, we keep it around. try: await agent.communicate() assert os.path.exists(self._controlsock) self._process = process except InteractionError as exc: await process.wait() raise ssh_errors.get_exception_for_ssh_stderr(str(exc)) from None except BaseException: # If we get here because the InteractionHandler raised an # exception then SSH might still be running, and may even attempt # further interactions (ie: 2nd attempt for password). We already # have our exception and don't need any more info. Kill it. try: process.kill() except ProcessLookupError: pass # already exited? good. await process.wait() raise def is_connected(self) -> bool: return self._process is not None async def wait(self) -> None: assert self._process is not None await self._process.wait() def exit(self) -> None: assert self._process is not None self._process.terminate() async def disconnect(self) -> None: self.exit() await self.wait() # Launching of processes def wrap_subprocess_args(self, args: Sequence[str]) -> Sequence[str]: assert self._controlsock is not None # 1. We specify the hostname as the empty string: it will be ignored # when ssh is trying to use the control socket, but in case the # socket has stopped working, ssh will try to fall back to directly # connecting, in which case an empty hostname will prevent that. # 2. We need to quote the arguments — ssh will paste them together # using only spaces, executing the result using the user's shell. return ('ssh', '-S', self._controlsock, '', *map(shlex.quote, args)) ssh_askpass.py 0000644 00000015315 15111634750 0007450 0 ustar 00 import logging import re from typing import ClassVar, Match, Sequence from .interaction_agent import AskpassHandler logger = logging.getLogger(__name__) class AskpassPrompt: """An askpass prompt resulting from a call to ferny-askpass. stderr: the contents of stderr from before ferny-askpass was called. Likely related to previous failed operations. messages: all but the last line of the prompt as handed to ferny-askpass. Usually contains context about the question. prompt: the last line handed to ferny-askpass. The prompt itself. """ stderr: str messages: str prompt: str def __init__(self, prompt: str, messages: str, stderr: str) -> None: self.stderr = stderr self.messages = messages self.prompt = prompt def reply(self, response: str) -> None: pass def close(self) -> None: pass async def handle_via(self, responder: 'SshAskpassResponder') -> None: try: response = await self.dispatch(responder) if response is not None: self.reply(response) finally: self.close() async def dispatch(self, responder: 'SshAskpassResponder') -> 'str | None': return await responder.do_prompt(self) class SSHAskpassPrompt(AskpassPrompt): # The valid answers to prompts of this type. If this is None then any # answer is permitted. If it's a sequence then only answers from the # sequence are permitted. If it's an empty sequence, then no answer is # permitted (ie: the askpass callback should never return). answers: 'ClassVar[Sequence[str] | None]' = None # Patterns to capture. `_pattern` *must* match. _pattern: ClassVar[str] # `_extra_patterns` can fill in extra class attributes if they match. _extra_patterns: ClassVar[Sequence[str]] = () def __init__(self, prompt: str, messages: str, stderr: str, match: Match) -> None: super().__init__(prompt, messages, stderr) self.__dict__.update(match.groupdict()) for pattern in self._extra_patterns: extra_match = re.search(with_helpers(pattern), messages, re.M) if extra_match is not None: self.__dict__.update(extra_match.groupdict()) # Specific prompts HELPERS = { "%{algorithm}": r"(?P<algorithm>\b[-\w]+\b)", "%{filename}": r"(?P<filename>.+)", "%{fingerprint}": r"(?P<fingerprint>SHA256:[0-9A-Za-z+/]{43})", "%{hostname}": r"(?P<hostname>[^ @']+)", "%{pkcs11_id}": r"(?P<pkcs11_id>.+)", "%{username}": r"(?P<username>[^ @']+)", } class SshPasswordPrompt(SSHAskpassPrompt): _pattern = r"%{username}@%{hostname}'s password: " username: 'str | None' = None hostname: 'str | None' = None async def dispatch(self, responder: 'SshAskpassResponder') -> 'str | None': return await responder.do_password_prompt(self) class SshPassphrasePrompt(SSHAskpassPrompt): _pattern = r"Enter passphrase for key '%{filename}': " filename: str async def dispatch(self, responder: 'SshAskpassResponder') -> 'str | None': return await responder.do_passphrase_prompt(self) class SshFIDOPINPrompt(SSHAskpassPrompt): _pattern = r"Enter PIN for %{algorithm} key %{filename}: " algorithm: str filename: str async def dispatch(self, responder: 'SshAskpassResponder') -> 'str | None': return await responder.do_fido_pin_prompt(self) class SshFIDOUserPresencePrompt(SSHAskpassPrompt): _pattern = r"Confirm user presence for key %{algorithm} %{fingerprint}" answers = () algorithm: str fingerprint: str async def dispatch(self, responder: 'SshAskpassResponder') -> 'str | None': return await responder.do_fido_user_presence_prompt(self) class SshPKCS11PINPrompt(SSHAskpassPrompt): _pattern = r"Enter PIN for '%{pkcs11_id}': " pkcs11_id: str async def dispatch(self, responder: 'SshAskpassResponder') -> 'str | None': return await responder.do_pkcs11_pin_prompt(self) class SshHostKeyPrompt(SSHAskpassPrompt): _pattern = r"Are you sure you want to continue connecting \(yes/no(/\[fingerprint\])?\)\? " _extra_patterns = [ r"%{fingerprint}[.]$", r"^%{algorithm} key fingerprint is", r"^The fingerprint for the %{algorithm} key sent by the remote host is$" ] answers = ('yes', 'no') algorithm: str fingerprint: str async def dispatch(self, responder: 'SshAskpassResponder') -> 'str | None': return await responder.do_host_key_prompt(self) def with_helpers(pattern: str) -> str: for name, helper in HELPERS.items(): pattern = pattern.replace(name, helper) assert '%{' not in pattern return pattern def categorize_ssh_prompt(string: str, stderr: str) -> AskpassPrompt: classes = [ SshFIDOPINPrompt, SshFIDOUserPresencePrompt, SshHostKeyPrompt, SshPKCS11PINPrompt, SshPassphrasePrompt, SshPasswordPrompt, ] # The last line is the line after the last newline character, excluding the # optional final newline character. eg: "x\ny\nLAST\n" or "x\ny\nLAST" second_last_newline = string.rfind('\n', 0, -1) if second_last_newline >= 0: last_line = string[second_last_newline + 1:] extras = string[:second_last_newline + 1] else: last_line = string extras = '' for cls in classes: pattern = with_helpers(cls._pattern) match = re.fullmatch(pattern, last_line) if match is not None: return cls(last_line, extras, stderr, match) return AskpassPrompt(last_line, extras, stderr) class SshAskpassResponder(AskpassHandler): async def do_askpass(self, stderr: str, prompt: str, hint: str) -> 'str | None': return await categorize_ssh_prompt(prompt, stderr).dispatch(self) async def do_prompt(self, prompt: AskpassPrompt) -> 'str | None': # Default fallback for unrecognised message types: unimplemented return None async def do_fido_pin_prompt(self, prompt: SshFIDOPINPrompt) -> 'str | None': return await self.do_prompt(prompt) async def do_fido_user_presence_prompt(self, prompt: SshFIDOUserPresencePrompt) -> 'str | None': return await self.do_prompt(prompt) async def do_host_key_prompt(self, prompt: SshHostKeyPrompt) -> 'str | None': return await self.do_prompt(prompt) async def do_pkcs11_pin_prompt(self, prompt: SshPKCS11PINPrompt) -> 'str | None': return await self.do_prompt(prompt) async def do_passphrase_prompt(self, prompt: SshPassphrasePrompt) -> 'str | None': return await self.do_prompt(prompt) async def do_password_prompt(self, prompt: SshPasswordPrompt) -> 'str | None': return await self.do_prompt(prompt) ssh_errors.py 0000644 00000011357 15111634750 0007321 0 ustar 00 # ferny - asyncio SSH client library, using ssh(1) # # Copyright (C) 2023 Allison Karlitskaya <allison.karlitskaya@redhat.com> # # This program is free software: you can redistribute it and/or modify # it under the terms of the GNU General Public License as published by # the Free Software Foundation, either version 3 of the License, or # (at your option) any later version. # # This program is distributed in the hope that it will be useful, # but WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # GNU General Public License for more details. # # You should have received a copy of the GNU General Public License # along with this program. If not, see <http://www.gnu.org/licenses/>. import ctypes import errno import os import re import socket from typing import ClassVar, Iterable, Match, Pattern class SshError(Exception): PATTERN: ClassVar[Pattern] def __init__(self, match: 'Match | None', stderr: str) -> None: super().__init__(match.group(0) if match is not None else stderr) self.stderr = stderr class SshAuthenticationError(SshError): PATTERN = re.compile(r'^([^:]+): Permission denied \(([^()]+)\)\.$', re.M) def __init__(self, match: Match, stderr: str) -> None: super().__init__(match, stderr) self.destination = match.group(1) self.methods = match.group(2).split(',') self.message = match.group(0) class SshInvalidHostnameError(SshError): PATTERN = re.compile(r'^hostname contains invalid characters', re.I) # generic host key error for OSes without KnownHostsCommand support class SshHostKeyError(SshError): PATTERN = re.compile(r'^Host key verification failed.$', re.M) # specific errors for OSes with KnownHostsCommand class SshUnknownHostKeyError(SshHostKeyError): PATTERN = re.compile(r'^No .* host key is known.*Host key verification failed.$', re.S | re.M) class SshChangedHostKeyError(SshHostKeyError): PATTERN = re.compile(r'warning.*remote host identification has changed', re.I) # Functionality for mapping getaddrinfo()-family error messages to their # equivalent Python exceptions. def make_gaierror_map() -> 'Iterable[tuple[str, int]]': libc = ctypes.CDLL(None) libc.gai_strerror.restype = ctypes.c_char_p for key in dir(socket): if key.startswith('EAI_'): errnum = getattr(socket, key) yield libc.gai_strerror(errnum).decode('utf-8'), errnum gaierror_map = dict(make_gaierror_map()) # Functionality for passing strerror() error messages to their equivalent # Python exceptions. # There doesn't seem to be an official API for turning an errno into the # correct subtype of OSError, and the list that cpython uses is hidden fairly # deeply inside of the implementation. This is basically copied from the # ADD_ERRNO() lines in _PyExc_InitState in cpython/Objects/exceptions.c oserror_subclass_map = dict((errnum, cls) for cls, errnum in [ (BlockingIOError, errno.EAGAIN), (BlockingIOError, errno.EALREADY), (BlockingIOError, errno.EINPROGRESS), (BlockingIOError, errno.EWOULDBLOCK), (BrokenPipeError, errno.EPIPE), (BrokenPipeError, errno.ESHUTDOWN), (ChildProcessError, errno.ECHILD), (ConnectionAbortedError, errno.ECONNABORTED), (ConnectionRefusedError, errno.ECONNREFUSED), (ConnectionResetError, errno.ECONNRESET), (FileExistsError, errno.EEXIST), (FileNotFoundError, errno.ENOENT), (IsADirectoryError, errno.EISDIR), (NotADirectoryError, errno.ENOTDIR), (InterruptedError, errno.EINTR), (PermissionError, errno.EACCES), (PermissionError, errno.EPERM), (ProcessLookupError, errno.ESRCH), (TimeoutError, errno.ETIMEDOUT), ]) def get_exception_for_ssh_stderr(stderr: str) -> Exception: stderr = stderr.replace('\r\n', '\n') # fix line separators # check for the specific error messages first, then for generic SshHostKeyError for ssh_cls in [SshInvalidHostnameError, SshAuthenticationError, SshChangedHostKeyError, SshUnknownHostKeyError, SshHostKeyError]: match = ssh_cls.PATTERN.search(stderr) if match is not None: return ssh_cls(match, stderr) before, colon, after = stderr.rpartition(':') if colon and after: potential_strerror = after.strip() # DNS lookup errors if potential_strerror in gaierror_map: errnum = gaierror_map[potential_strerror] return socket.gaierror(errnum, stderr) # Network connect errors for errnum in errno.errorcode: if os.strerror(errnum) == potential_strerror: os_cls = oserror_subclass_map.get(errnum, OSError) return os_cls(errnum, stderr) # No match? Generic. return SshError(None, stderr) transport.py 0000644 00000041017 15111634750 0007160 0 ustar 00 # ferny - asyncio SSH client library, using ssh(1) # # Copyright (C) 2023 Allison Karlitskaya <allison.karlitskaya@redhat.com> # # This program is free software: you can redistribute it and/or modify # it under the terms of the GNU General Public License as published by # the Free Software Foundation, either version 3 of the License, or # (at your option) any later version. # # This program is distributed in the hope that it will be useful, # but WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # GNU General Public License for more details. # # You should have received a copy of the GNU General Public License # along with this program. If not, see <http://www.gnu.org/licenses/>. import asyncio import contextlib import logging import typing from typing import Any, Callable, Iterable, Sequence, TypeVar from .interaction_agent import InteractionAgent, InteractionHandler, get_running_loop from .ssh_errors import get_exception_for_ssh_stderr logger = logging.getLogger(__name__) P = TypeVar('P', bound=asyncio.Protocol) class SubprocessError(Exception): returncode: int stderr: str def __init__(self, returncode: int, stderr: str) -> None: super().__init__(returncode, stderr) self.returncode = returncode self.stderr = stderr class FernyTransport(asyncio.Transport, asyncio.SubprocessProtocol): _agent: InteractionAgent _exec_task: 'asyncio.Task[tuple[asyncio.SubprocessTransport, FernyTransport]]' _is_ssh: bool _protocol: asyncio.Protocol _protocol_disconnected: bool = False # These get initialized in connection_made() and once set, never get unset. _subprocess_transport: 'asyncio.SubprocessTransport | None' = None _stdin_transport: 'asyncio.WriteTransport | None' = None _stdout_transport: 'asyncio.ReadTransport | None' = None # We record events that might build towards a connection termination here # and consider them from _consider_disconnect() in order to try to get the # best possible Exception for the protocol, rather than just taking the # first one (which is likely to be somewhat random). _exception: 'Exception | None' = None _stderr_output: 'str | None' = None _returncode: 'int | None' = None _transport_disconnected: bool = False _closed: bool = False @classmethod def spawn( cls: 'type[typing.Self]', protocol_factory: Callable[[], P], args: Sequence[str], loop: 'asyncio.AbstractEventLoop | None' = None, interaction_handlers: Sequence[InteractionHandler] = (), is_ssh: bool = True, **kwargs: Any ) -> 'tuple[typing.Self, P]': """Connects a FernyTransport to a protocol, using the given command. This spawns an external command and connects the stdin and stdout of the command to the protocol returned by the factory. An instance of ferny.InteractionAgent is created and attached to the stderr of the spawned process, using the provided handlers. It is the responsibility of the caller to ensure that: - a `ferny-askpass` client program is installed somewhere; and - any relevant command-line arguments or environment variables are passed correctly to the program to be spawned This function returns immediately and never raises exceptions, assuming all preconditions are met. If spawning the process fails then connection_lost() will be called with the relevant OSError, even before connection_made() is called. This is somewhat non-standard behaviour, but is the easiest way to report these errors without making this function async. Once the process is successfully executed, connection_made() will be called and the transport can be used as normal. connection_lost() will be called if the process exits or another error occurs. The return value of this function is the transport, but it exists in a semi-initialized state. You can call .close() on it, but nothing else. Once .connection_made() is called, you can call all the other functions. After you call this function, `.connection_lost()` will be called on your Protocol, exactly once, no matter what. Until that happens, you are responsible for holding a reference to the returned transport. :param args: the full argv of the command to spawn :param loop: the event loop to use. If none is provided, we use the one which is (read: must be) currently running. :param interaction_handlers: the handlers passed to the InteractionAgent :param is_ssh: whether we should attempt to interpret stderr as ssh error messages :param kwargs: anything else is passed through to `subprocess_exec()` :returns: the usual `(Transport, Protocol)` pair """ logger.debug('spawn(%r, %r, %r)', cls, protocol_factory, args) protocol = protocol_factory() self = cls(protocol) self._is_ssh = is_ssh if loop is None: loop = get_running_loop() self._agent = InteractionAgent(interaction_handlers, loop, self._interaction_completed) kwargs.setdefault('stderr', self._agent.fileno()) # As of Python 3.12 this isn't really asynchronous (since it uses the # subprocess module, which blocks while waiting for the exec() to # complete in the child), but we have to deal with the complication of # the async interface anyway. Since we, ourselves, want to export a # non-async interface, that means that we need a task here and a # bottom-half handler below. self._exec_task = loop.create_task(loop.subprocess_exec(lambda: self, *args, **kwargs)) def exec_completed(task: asyncio.Task) -> None: logger.debug('exec_completed(%r, %r)', self, task) assert task is self._exec_task try: transport, me = task.result() assert me is self logger.debug(' success.') except asyncio.CancelledError: return # in that case, do nothing except OSError as exc: logger.debug(' OSError %r', exc) self.close(exc) return # Our own .connection_made() handler should have gotten called by # now. Make sure everything got filled in properly. assert self._subprocess_transport is transport assert self._stdin_transport is not None assert self._stdout_transport is not None # Ask the InteractionAgent to start processing stderr. self._agent.start() self._exec_task.add_done_callback(exec_completed) return self, protocol def __init__(self, protocol: asyncio.Protocol) -> None: self._protocol = protocol def _consider_disconnect(self) -> None: logger.debug('_consider_disconnect(%r)', self) # We cannot disconnect as long as any of these three things are happening if not self._exec_task.done(): logger.debug(' exec_task still running %r', self._exec_task) return if self._subprocess_transport is not None and not self._transport_disconnected: logger.debug(' transport still connected %r', self._subprocess_transport) return if self._stderr_output is None: logger.debug(' agent still running') return # All conditions for disconnection are satisfied. if self._protocol_disconnected: logger.debug(' already disconnected') return self._protocol_disconnected = True # Now we just need to determine what we report to the protocol... if self._exception is not None: # If we got an exception reported, that's our reason for closing. logger.debug(' disconnect with exception %r', self._exception) self._protocol.connection_lost(self._exception) elif self._returncode == 0 or self._closed: # If we called close() or have a zero return status, that's a clean # exit, regardless of noise that might have landed in stderr. logger.debug(' clean disconnect') self._protocol.connection_lost(None) elif self._is_ssh and self._returncode == 255: # This is an error code due to an SSH failure. Try to interpret it. logger.debug(' disconnect with ssh error %r', self._stderr_output) self._protocol.connection_lost(get_exception_for_ssh_stderr(self._stderr_output)) else: # Otherwise, report the stderr text and return code. logger.debug(' disconnect with exit code %r, stderr %r', self._returncode, self._stderr_output) # We surely have _returncode set here, since otherwise: # - exec_task failed with an exception (which we handle above); or # - we're still connected... assert self._returncode is not None self._protocol.connection_lost(SubprocessError(self._returncode, self._stderr_output)) def _interaction_completed(self, future: 'asyncio.Future[str]') -> None: logger.debug('_interaction_completed(%r, %r)', self, future) try: self._stderr_output = future.result() logger.debug(' stderr: %r', self._stderr_output) except Exception as exc: logger.debug(' exception: %r', exc) self._stderr_output = '' # we need to set this in order to complete self.close(exc) self._consider_disconnect() # BaseProtocol implementation def connection_made(self, transport: asyncio.BaseTransport) -> None: logger.debug('connection_made(%r, %r)', self, transport) assert isinstance(transport, asyncio.SubprocessTransport) self._subprocess_transport = transport stdin_transport = transport.get_pipe_transport(0) assert isinstance(stdin_transport, asyncio.WriteTransport) self._stdin_transport = stdin_transport stdout_transport = transport.get_pipe_transport(1) assert isinstance(stdout_transport, asyncio.ReadTransport) self._stdout_transport = stdout_transport stderr_transport = transport.get_pipe_transport(2) assert stderr_transport is None logger.debug('calling connection_made(%r, %r)', self, self._protocol) self._protocol.connection_made(self) def connection_lost(self, exc: 'Exception | None') -> None: logger.debug('connection_lost(%r, %r)', self, exc) if self._exception is None: self._exception = exc self._transport_disconnected = True self._consider_disconnect() # SubprocessProtocol implementation def pipe_data_received(self, fd: int, data: bytes) -> None: logger.debug('pipe_data_received(%r, %r, %r)', self, fd, len(data)) assert fd == 1 # stderr is handled separately self._protocol.data_received(data) def pipe_connection_lost(self, fd: int, exc: 'Exception | None') -> None: logger.debug('pipe_connection_lost(%r, %r, %r)', self, fd, exc) assert fd in (0, 1) # stderr is handled separately # We treat this as a clean close if isinstance(exc, BrokenPipeError): exc = None # Record serious errors to propagate them to the protocol # If this is a clean exit on stdout, report an EOF if exc is not None: self.close(exc) elif fd == 1 and not self._closed: if not self._protocol.eof_received(): self.close() def process_exited(self) -> None: logger.debug('process_exited(%r)', self) assert self._subprocess_transport is not None self._returncode = self._subprocess_transport.get_returncode() logger.debug(' ._returncode = %r', self._returncode) self._agent.force_completion() def pause_writing(self) -> None: logger.debug('pause_writing(%r)', self) self._protocol.pause_writing() def resume_writing(self) -> None: logger.debug('resume_writing(%r)', self) self._protocol.resume_writing() # Transport implementation. Most of this is straight delegation. def close(self, exc: 'Exception | None' = None) -> None: logger.debug('close(%r, %r)', self, exc) self._closed = True if self._exception is None: logger.debug(' setting exception %r', exc) self._exception = exc if not self._exec_task.done(): logger.debug(' cancelling _exec_task') self._exec_task.cancel() if self._subprocess_transport is not None: logger.debug(' closing _subprocess_transport') # https://github.com/python/cpython/issues/112800 with contextlib.suppress(PermissionError): self._subprocess_transport.close() self._agent.force_completion() def is_closing(self) -> bool: assert self._subprocess_transport is not None return self._subprocess_transport.is_closing() def get_extra_info(self, name: str, default: object = None) -> object: assert self._subprocess_transport is not None return self._subprocess_transport.get_extra_info(name, default) def set_protocol(self, protocol: asyncio.BaseProtocol) -> None: assert isinstance(protocol, asyncio.Protocol) self._protocol = protocol def get_protocol(self) -> asyncio.Protocol: return self._protocol def is_reading(self) -> bool: assert self._stdout_transport is not None try: return self._stdout_transport.is_reading() except NotImplementedError: # This is (incorrectly) unimplemented before Python 3.11 return not self._stdout_transport._paused # type:ignore[attr-defined] except AttributeError: # ...and in Python 3.6 it's even worse try: selector = self._stdout_transport._loop._selector # type:ignore[attr-defined] selector.get_key(self._stdout_transport._fileno) # type:ignore[attr-defined] return True except KeyError: return False def pause_reading(self) -> None: assert self._stdout_transport is not None self._stdout_transport.pause_reading() def resume_reading(self) -> None: assert self._stdout_transport is not None self._stdout_transport.resume_reading() def abort(self) -> None: assert self._stdin_transport is not None assert self._subprocess_transport is not None self._stdin_transport.abort() self._subprocess_transport.kill() def can_write_eof(self) -> bool: assert self._stdin_transport is not None return self._stdin_transport.can_write_eof() # will always be True def get_write_buffer_size(self) -> int: assert self._stdin_transport is not None return self._stdin_transport.get_write_buffer_size() def get_write_buffer_limits(self) -> 'tuple[int, int]': assert self._stdin_transport is not None return self._stdin_transport.get_write_buffer_limits() def set_write_buffer_limits(self, high: 'int | None' = None, low: 'int | None' = None) -> None: assert self._stdin_transport is not None return self._stdin_transport.set_write_buffer_limits(high, low) def write(self, data: bytes) -> None: assert self._stdin_transport is not None return self._stdin_transport.write(data) def writelines(self, list_of_data: Iterable[bytes]) -> None: assert self._stdin_transport is not None return self._stdin_transport.writelines(list_of_data) def write_eof(self) -> None: assert self._stdin_transport is not None return self._stdin_transport.write_eof() # We don't really implement SubprocessTransport, but provide these as # "extras" to our user. def get_pid(self) -> int: assert self._subprocess_transport is not None return self._subprocess_transport.get_pid() def get_returncode(self) -> 'int | None': return self._returncode def kill(self) -> None: assert self._subprocess_transport is not None self._subprocess_transport.kill() def send_signal(self, number: int) -> None: assert self._subprocess_transport is not None self._subprocess_transport.send_signal(number) def terminate(self) -> None: assert self._subprocess_transport is not None self._subprocess_transport.terminate()
| ver. 1.4 |
Github
|
.
| PHP 8.1.33 | Генерация страницы: 0.01 |
proxy
|
phpinfo
|
Настройка