File manager - Edit - /opt/saltstack/salt/lib/python3.10/site-packages/salt/channel/__pycache__/client.cpython-310.pyc
Back
o ;j<b � @ s d Z ddlZddlZddlZddlZddlZddlZddlZddl Zddl Zddl Zddl Zddl ZddlZddlZddlZddlZddlmZ e�e�ZdZdZG dd� d�ZG dd � d �ZG d d � d �ZG d d � d �Z G dd� d�Z G dd� d�Z G dd� d�Z dS )z� Encapsulate the different transports available to Salt. This includes client side transport, for the ReqServer and the Publisher � N)� SyncWrapper�< � c @ � e Zd ZdZedd� �ZdS )� ReqChannelz� Factory class to create a sychronous communication channels to the master's ReqServer. ReqChannels use transports to connect to the ReqServer. c K � t tj| f|dd�S �N�io_loop)Z loop_kwarg)r �AsyncReqChannel�factory��opts�kwargs� r �G/opt/saltstack/salt/lib/python3.10/site-packages/salt/channel/client.pyr & � �zReqChannel.factoryN��__name__� __module__� __qualname__�__doc__� staticmethodr r r r r r s r c @ r )� PushChannelzM Factory class to create Sync channel for push side of push/pull IPC c K r r )r �AsyncPushChannelr r r r r r 5 r zPushChannel.factoryNr r r r r r 0 � r c @ r )� PullChannelzM Factory class to create Sync channel for pull side of push/pull IPC c K r r )r �AsyncPullChannelr r r r r r D r zPullChannel.factoryNr r r r r r ? r r c @ s e Zd ZdZg d�ZdgZedd� �Zee fdd�Z e dd � �Z e d d � �Z d&d d�Zejjjjdd� �Zejjjj d'dd��Zdd� Zejjjjd(dd��Zejjjjdd� �Zejjjjdd� �Zejjjjd)d d ��Zejjjjd d � �Zd d!� Z d"d#� Z d$d%� Z d S )*r z� Factory class to create a asynchronous communication channels to the master's ReqServer. ReqChannels connect to the master's ReqServerChannel. )�!crypted_transfer_decode_dictentry�_crypted_transfer�_uncrypted_transfer�send�connect� close_async�closec K s� d}d|v r |d }nd|� di �� di �v r |d d d }d|vr-d|v r-|d |d< |� d�}|d u r>tjjjj�� }|� dt�}|� dt�}|� d d �}|d kr]tj j ||d �}nd }tj j ||d �} | || |||d �S )N�zeromq� transport�pillar�master� master_urir Zrequest_channel_timeoutZrequest_channel_tries�crypt�aes�clear�r )�tries�timeout) �get�salt�ext�tornado�ioloop�IOLoop�current�REQUEST_CHANNEL_TIMEOUT�REQUEST_CHANNEL_TRIESr) � AsyncAuthr% Zrequest_client) �clsr r �ttyper r. r- r) �authr% r r r r ` s$ zAsyncReqChannel.factoryc K sR t |�| _|| _|| _d | _| jr tj�| jd | jj�| _d| _ || _ || _ d S )N�pki_dirF) �dictr r% r; �master_pubkey_path�os�path�join�mpub�_closingr. r- )�selfr r% r; r. r- r r r r �__init__~ s zAsyncReqChannel.__init__c C � | j rdS dS �Nr* r+ �r; �rD r r r r) � s zAsyncReqChannel.cryptc C s | j jS �N)r% r: rI r r r r: � s zAsyncReqChannel.ttypeNc C s" | j dkrn|du rt�� j}zG||d< tt�� �|d< | j�d�|d< | jd |d< | j� d�rTd d � |� � D �}t j j t j�| jd d �t jj�|�| jd d�|d< W n tyf t�dt|�� Y nw | jj�|�}| j |dd�}| j dkr�| jd |d< | jd |d< | jd |d< |S )as Prepare the load to be sent over the wire. For aes channels add a nonce, timestamp and signed token to the load before encrypting it using our aes session key. Then wrap the encrypted load with some meta data. For 'clear' encryption, no extra feilds are added to the load. The unencyrpted load is wrapped with meta data. r* N�nonce�ts� salt�tok�idZminion_sign_messagesc S s i | ] \}}|d vr||�qS ))rK rN r )�.0�k�vr r r � <dictcomp>� s z1AsyncReqChannel._package_load.<locals>.<dictcomp>r< z minion.pem�signing_algorithm�� algorithm�sigzBInvalid load passed to request channel. Type is %s should be dict.r ��enc�load�version�encryption_algorithmZenc_algo�sig_algo)r) �uuid�uuid4�hex�int�timer; � gen_tokenr r/ �itemsr0 Z sign_messager? r@ rA Z serializersZmsgpackZ serialize� TypeError�log�warning�type�session_crypticle�dumps)rD rZ rK Zto_sign�retr r r � _package_load� sD � �� ��� z AsyncReqChannel._package_loadc c sr � d} z | j j||d�V }W n! ty0 } zt�d|� ||kr"� |d7 }W Y d }~qd }~ww tjjj� |��)N� T�r. �Failed to send msg %r) r% r � Exceptionrf �tracer0 r1 r2 �gen�Return)rD rZ r- r. �_tryrk �excr r r �_send_with_retry� s$ �� ��z AsyncReqChannel._send_with_retryc c s� � |d u r| j }|d u r| j}| jjs| j�� V t�� j}| �| � ||�||�V }| j� � }d|vrE| j�� V | �| � ||�||�V }t |t �rNd|vrdt j�dt |t �r`|�d�r`d ��d ��|�|d | jd �}t j�| j|�} | �|| �} | �| d | d �s�| j�� V | �| d | d �s�t j�d ��t j�| d �} | d |d kr�t j�d ��| d |kr�t j�d ��t jjj�| d ��)N�keyz6Master did not return a session key for pillar requestZ cluster_retryz (cluster not ready)� r\ �datarW z,Pillar payload signature failed to validate.zKey verification failed.rK z!Pillar nonce verification failed.r& )r. r- r; � authenticated� authenticater^ r_ r` rv rl Zget_keys� isinstancer= r0 r) �AuthenticationErrorr/ Zdecryptr Z Crypticle�loads�verify_signature�payloadr1 r2 rr rs ) rD rZ Zdictkeyr. r- rK rk rw r* ZpcryptZ signed_msgry r r r r � s` � � ������� � z1AsyncReqChannel.crypted_transfer_decode_dictentryc C s t j�| j��||| jd �S )NrT )r0 r) Z PublicKeyr> Zverifyr )rD ry rW r r r r ' s �z AsyncReqChannel.verify_signatureFc # s| � t jjjj� ���fdd��}�jjs�j�� V z|� V }W n t jj y5 �j�� V |� V }Y nw t jjj� |��)a� Send a load across the wire, with encryption In case of authentication errors, try to renegotiate authentication and retry the method. Indeed, we can fail too early in case of a master restart during a minion state execution call :param dict load: A load to send across the wire :param int timeout: The number of seconds on a response before failing c 3 sj � t �� j} �jj��� | ��d�V }|r �jjj|�| d�}�r&�j dkr-t jj � |�}t j jj�|��)Nrn )rK Ztcp)r^ r_ r` r% r rl r; ri r~ r: r0 �frameZdecode_embedded_strsr1 r2 rr rs )rK ry �rZ �rawrD r. r r � _do_transfer; s � �z7AsyncReqChannel._crypted_transfer.<locals>._do_transfer) r0 r1 r2 rr � coroutiner; rz r{ r) r} rs )rD rZ r. r� r� rk r r� r r , s � �z!AsyncReqChannel._crypted_transferc c s* � | j j| �|�|d�V }tjjj�|��)z� Send a load across the wire in cleartext :param dict load: A load to send across the wire :param int timeout: The number of seconds on a response before failing rn )r% r rl r0 r1 r2 rr rs )rD rZ r. rk r r r r Z s �z#AsyncReqChannel._uncrypted_transferc c s � | j �� V d S rJ )r% r! rI r r r r! f s �zAsyncReqChannel.connectc c s� � |du r| j }|du r| j}d} z%| jdkr't�d|� | j||d�V }nt�d|� | j|||d�V }W n! tyX } zt�d |� ||krJ� |d7 }W Y d}~qd}~ww tj j j � |��) a, Send a request, return a future which will complete when we send the message :param dict load: A load to send across the wire :param int tries: The number of times to make before failure :param int timeout: The number of seconds on a response before failing Nrm Tr+ z ReqChannel send clear load=%rrn z ReqChannel send crypt load=%r)r. r� ro ) r. r- r) rf rq r r rp r0 r1 r2 rr rs )rD rZ r- r. r� rt rk ru r r r r j s. � ��zAsyncReqChannel.sendc c s. � | j st�d| jj� d| _ | j�� V dS )u, Close the REQ channel and yield until teardown finishes on the owning I/O loop. Call this from coroutines before allocating a replacement channel on the same loop—``close()`` schedules transport teardown asynchronously and may return before FDs disappear. �Closing %s instanceTN)rC rf �debug� __class__r r% Z close_futurerI r r r r" � s � zAsyncReqChannel.close_asyncc C s. | j rdS t�d| jj� d| _ | j�� dS )z� Since the message_client creates sockets and assigns them to the IOLoop we have to specifically destroy them, since we aren't the only ones with references to the FDs Nr� T)rC rf r� r� r r% r# rI r r r r# � s zAsyncReqChannel.closec C � | S rJ r rI r r r � __enter__� � zAsyncReqChannel.__enter__c G � | � � d S rJ �r# �rD �argsr r r �__exit__� � zAsyncReqChannel.__exit__rJ )NNN)F)NNF) r r r r � async_methods� close_methods� classmethodr r6 r7 rE �propertyr) r: rl r0 r1 r2 rr r� rv r r r r r! r r" r# r� r� r r r r r N sH � " � 4 �D - r c @ s� e Zd ZdZddgZdgZedd� �Zd"dd �Ze d d � �Z e j j jjd d � �Zdd� Zd"dd�Zdd� Ze j j jjdd� �Ze j j jjdd� �Zdd� Zdd� Ze j j jjd d � �Zd d � Zd d!� ZdS )#�AsyncPubChannelzQ Factory class to create subscription channels to the master's Publisher r! �_decode_payloadr# c K s� d}d|v r |d }nd|� di �� di �v r |d d d }d|vr-d|v r-|d |d< |dkr;d|d< t�d |� |� d �}|d u rLtjjjj�� }tj j ||d �}tj � ||�}| ||||�S ) Nr$ r% r& r' r( ZdetectTZ detect_modez$Transport is set to detect; using %sr r, ) r/ rf �infor0 r1 r2 r3 r4 r5 r) r8 r% Zpublish_client)r9 r r r: r r; r% r r r r � s zAsyncPubChannel.factoryNc C s� || _ || _|| _z | j�d�| _W n tjjy( } ztj�t |���d }~ww || _ d| _ d| _ tj jjd| j d| jd�| _tj�| j d | jj�| _d S )NrM F�minion)r �listenr r< )r r r; rc �tokenr0 � exceptionsZInvalidKeyError�SaltClientError�strr% rC � _reconnected�utils�eventZ get_eventr? r@ rA rB r> )rD r r% r; r ru r r r rE � s �� � zAsyncPubChannel.__init__c C rF rG rH rI r r r r) � s zAsyncPubChannel.cryptc c s� � z0| j js | j �� V t| j�dd��dkr | j�d�}n| j jd }| j�|| j | j �V W dS t y9 � t y^ } z| � � dt|�vrStj�d|� ���W Y d}~dS d}~ww )zX Return a future which completes when connected to the remote publisher � publish_porti� z -|RETRY|-z Unable to sign_in to master: N)r; rz r{ ra r r/ Zcredsr% r! �connect_callback�disconnect_callback�KeyboardInterruptrp r# r� r0 r� r� )rD r� ru r r r r! � s* � � ����zAsyncPubChannel.connectc C s, | j �� | jdur| j�� d| _dS dS )z# Close the channel N)r% r# r� ZdestroyrI r r r r# s �zAsyncPubChannel.closec s: � du r �j �d�S tjjjj� �fdd��}�j �|�S )zH When jobs are received pass them (decoded) to callback Nc 3 s@ � �j �| �V }��|�V }t�d|� |d ur � |� d S d S )NzPubChannel received: %r)r% Z_decode_messagesr� rf r� )�messagesr� �decoded��callbackrD r r � wrap_callback s � �z.AsyncPubChannel.on_recv.<locals>.wrap_callback)r% �on_recvr0 r1 r2 rr r� )rD r� r� r r� r r� s zAsyncPubChannel.on_recvc C s | j |dd�S )Nr rX )r) )rD rZ r r r rl s �z AsyncPubChannel._package_loadc # s � �j d |d�� tjjjj� �fdd��}|s �jjs`d}|�j d ks,�j d dk r`z�j�� V W n+ tj j yQ } zt � |� |d7 }W Y d}~nd}~ww |�j d ks,�j d dk s,z |� V }tjjj� |�� tjjy� �j�� V |� V }tjjj� |��w ) z� Send the minion id to the master so that the master may better track the connection state of the minion. In case of authentication errors, try to renegotiate authentication and retry the method. rO )rO rN c 3 sF � �� �jj�� ��} tjjj| d d�}�j�|�V tj j j � d��)N)�headerT) rl r; � crypticlerj r0 r% r� Z frame_msgr r1 r2 rr rs )�msg�package�rZ rD r r r� / s �z-AsyncPubChannel.send_id.<locals>._do_transferr Ztcp_authentication_retriesrm N)r r0 r1 r2 rr r� r; rz r{ r� r� rf r� rs r) r} )rD rN Z force_authr� �countru rk r r� r �send_id% s4 � ��� �zAsyncPubChannel.send_idc c s� � | j rd S z�| �| j| j�V d| _| j�d| jd id� | jr�| j�d�dkrCd� | jd t � � �}t j j�| jd dgd�}nd � | jd t � � �}t j j�| jd dgd �}| jd d d | j||d �}t�| j��2}z |j|d d�V W n t jjy� t�d� Y n ty� tjddd� Y nw W d � n 1 s�w Y W d S W d S d| _W d S ty� } ztjd|dd� W Y d }~d S d }~ww )NTr' Z__master_connectedZ__roleZsyndiczSyndic {} started at {}rO �startzMinion {} started at {}r� Z _minion_event)rO �cmdZpretagrN ry �tagr rn zEfire_master failed: master could not be contacted. Request timed out.zfire_master failed)�exc_infoz2Caught exception in PubChannel connect callback %r)rC r� r� r� � connectedr� � fire_eventr r/ �formatrb �asctimer0 r� Ztagifyr r r r� ZSaltReqTimeoutErrorrf r� rp �error)rD �resultry r� rZ Zchannelru r r r r� K sV �� ��� ��(� ���z AsyncPubChannel.connect_callbackc C s, | j rd S d| _| j�d| jd id� d S )NFr' Z__master_disconnected)rC r� r� r� r rI r r r r� { s z#AsyncPubChannel.disconnect_callbackc C s\ | j �d�r*|�dd�stj�d��tjj| j|d |�d�|d d�s,tj�d��d S d S ) NZsign_pub_messagesrW Fz<Message signing is enabled but the payload has no signature.rZ r] rU z%Message signature failed to validate.)r r/ r0 r) r} r r> )rD r� r r r �_verify_master_signature� s ����z(AsyncPubChannel._verify_master_signaturec c s� � t �d|� d}|d dkrY| �|� z | jj�|d �|d< W n tjjy. d}Y nw |rYz| j� � V | jj�|d �|d< W n tjjyX t � d| j d � Y nw tj j j�|��) NzDecoding payload: %sFrY r* rZ TzEPayload decryption failed even after re-authenticating with master %sZ master_ip)rf rq r� r; r� r~ r0 r) r} r{ r� r r1 r2 rr rs )rD r� Zreauthr r r r� � s* � � ��z AsyncPubChannel._decode_payloadc C r� rJ r rI r r r r� � r� zAsyncPubChannel.__enter__c G r� rJ r� r� r r r r� � r� zAsyncPubChannel.__exit__rJ )r r r r r� r� r� r rE r� r) r0 r1 r2 rr r� r! r# r� rl r� r� r� r� r� r� r� r r r r r� � s6 �� % / r� c @ r )r z3 Factory class to create IPC Push channels c K � ddl }|jjj| fi |��S )z\ If we have additional IPC transports other than UxD and TCP, add them here r N)�salt.transport.ipcr% �ipcZIPCMessageClient�r r r0 r r r r � s zAsyncPushChannel.factoryNr r r r r r � r r c @ r )r z3 Factory class to create IPC pull channels c K r� )z\ If we have additional IPC transports other than UXD and TCP, add them here r N)r� r% r� ZIPCMessageServerr� r r r r � s zAsyncPullChannel.factoryNr r r r r r � r r ) r �loggingr? rb r^ Z salt.cryptr0 Zsalt.exceptionsZsalt.ext.tornado.genZsalt.ext.tornado.ioloopZ salt.payloadZsalt.serializers.msgpackZsalt.transport.frameZsalt.utils.eventZsalt.utils.filesZsalt.utils.minionsZsalt.utils.stringutilsZsalt.utils.verifyZsalt.utils.asynchronousr � getLoggerr rf r6 r7 r r r r r� r r r r r r �<module> s@ ^
| ver. 1.4 |
Github
|
.
| PHP 8.2.30 | Generation time: 0 |
proxy
|
phpinfo
|
Settings