o
    x[hÅR  ã                   @   s,  d dl Z d dlZd dlZd dlZd dlZd dlmZ d dlmZm	Z	m
Z
 d dlmZmZmZmZ d dlmZmZmZmZmZmZ d dlmZmZ dZdZe e¡Zd	d
„ Zde de defdd„Z!dd„ Z"d"dd„Z#de$de%fdd„Z&de$de$de%fdd„Z'de$de$fdd„Z(G dd„ dej)ƒZ)d"d d!„Z*dS )#é    N)ÚSpooledTemporaryFile)ÚCallableÚListÚOptional)ÚfeaturesÚsafeyamlÚsubpÚutil)ÚIPV6_DYNAMIC_TYPESÚSYS_CLASS_NETÚget_devicelistÚrendererÚshould_add_gateway_onlink_flagÚsubnet_is_ipv6)ÚNET_CONFIG_TO_V2ÚNetworkStatez/etc/netplan/50-cloud-init.yamls4  # This is the initial network config.
# It can be overwritten by cloud-init or console-conf.
network:
    version: 2
    ethernets:
        all-en:
            match:
                name: "en*"
            dhcp4: true
        all-eth:
            match:
                name: "eth*"
            dhcp4: true
c                    s   t ‡ fdd„|  ¡ D ƒƒS )Nc                 3   s&   � | ]\}}|  ˆ ¡r||fV  qd S ©N)Ú
startswith)Ú.0ÚkeyÚvalue©Úmatch© ú7/usr/lib/python3/dist-packages/cloudinit/net/netplan.pyÚ	<genexpr>,   s   € ý
ÿz,_get_params_dict_by_match.<locals>.<genexpr>)ÚdictÚitems)Úconfigr   r   r   r   Ú_get_params_dict_by_match+   s   þr   r   Úentryr   c              	   C   sø  d$dd„}g }g }g }g }|   dg ¡}	|	du rg }	|	D ]Ó}
|
  d¡}| d¡r7|dkr/|d7 }| |d	i¡ q|tv rC| d
d	i¡ q|dv rîd|
  d¡ }d|
v r[|d|
  d¡ 7 }|
  d¡r�|
  d¡ddœ}t|
d |ƒr|t d|
d |¡ d	|d< | |¡ d|
v r�|||
  dg ¡ƒ7 }d|
v r�|||
  dg ¡ƒ7 }d|
v r¸d}t|
ƒr®d|ƒ v r®d}| ||
  d¡i¡ |
  dg ¡D ]*}d|  d¡|  d¡f }|  d¡|dœ}d|v rã| d|  dd¡i¡ | |¡ q¾| |¡ qd| v �r|  d¡}|�r| d |k�rt 	d|| d |¡ n| d |d< t
|ƒdk�r"| d |i¡ t
|ƒdk�r0| d|i¡ t
|ƒdk�rBd |i}| d!|i¡ t
|ƒdk�r]|  d!i ¡}| d"|i¡ | d!|i¡ d#| v �rx| d# du�rz| d#t |   d#¡¡i¡ dS dS dS )%aÖ  This method parse a cloudinit.net.network_state dictionary (config) and
       maps netstate keys/values into a dictionary (entry) to represent
       netplan yaml. (config v1 -> netplan)

    An example config dictionary might look like:

    {'mac_address': '52:54:00:12:34:00',
     'name': 'interface0',
     'subnets': [
        {'address': '192.168.1.2/24',
         'mtu': 1501,
         'type': 'static'},
        {'address': '2001:4800:78ff:1b:be76:4eff:fe06:1000",
         'mtu': 1480,
         'netmask': 64,
         'type': 'static'}],
      'type: physical',
      'accept-ra': 'true'
    }

    An entry dictionary looks like:

    {'set-name': 'interface0',
     'match': {'macaddress': '52:54:00:12:34:00'},
     'mtu': 1501}

    After modification returns

    {'set-name': 'interface0',
     'match': {'macaddress': '52:54:00:12:34:00'},
     'mtu': 1501,
     'address': ['192.168.1.2/24', '2001:4800:78ff:1b:be76:4eff:fe06:1000"],
     'ipv6-mtu': 1480}

    ú c                 S   s*   | rt | tƒs	| S || v r|  |¡S | gS )zT
        Helper to convert strings to list of strings, handle single string
        )Ú
isinstanceÚstrÚsplit)ÚobjÚtokenr   r   r   Ú_listifyX   s   
ÿz$_extract_addresses.<locals>._listifyÚsubnetsNÚtypeÚdhcpÚ4TÚdhcp6)ÚstaticÚstatic6z%sÚaddressÚprefixz/%dÚgatewayÚdefault)ÚviaÚtozAGateway %s is not contained within subnet %s, adding on-link flagzon-linkÚdns_nameserversÚ
dns_searchÚmtuzipv6-mtuÚroutesz%s/%sÚnetworkÚmetricéd   zZNetwork config: ignoring %s device-level mtu:%s because ipv4 subnet-level mtu:%s provided.r   Ú	addressesÚnameserversÚsearchz	accept-ra)r!   )Úgetr   Úupdater
   r   ÚLOGÚdebugÚappendr   ÚwarningÚlenr	   Úis_true)r   r    Úifnamer   r'   r<   r8   r=   Úsearchdomainsr(   ÚsubnetÚsn_typeÚaddrÚ	new_routeÚmtukeyÚrouteÚto_netÚ	entry_mtuÚnsr   r   r   Ú_extract_addresses3   s–   
%


þü
þ
€

ûÿrR   c                    s<   t ‡ fdd„|  ¡ D ƒƒ}t|ƒdkr| d|i¡ d S d S )Nc                    s$   g | ]\}}|  d d¡ˆ kr|‘qS )zbond-masterN)r?   )r   ÚnameÚcfg©Úbond_masterr   r   Ú
<listcomp>»   s
    þz0_extract_bond_slaves_by_name.<locals>.<listcomp>r   Ú
interfaces)Úsortedr   rE   r@   )rX   r    rV   Úbond_slave_namesr   rU   r   Ú_extract_bond_slaves_by_name¹   s   
þÿÿr[   c                    s~   t  ˆ d¡}tj |¡sd S t |¡}|tkrd S ‡ fdd„dD ƒ}dd„ |D ƒ}t 	d||¡ |g| D ]}t 
|¡ q5d S )Nz etc/netplan/00-snapd-config.yamlc                    s   g | ]}t  ˆ |¡‘qS r   )r   Útarget_path©r   Úf©Útargetr   r   rW   Ï   s    
ÿÿz"_clean_default.<locals>.<listcomp>)z-run/systemd/network/10-netplan-all-en.networkz.run/systemd/network/10-netplan-all-eth.networkz#run/systemd/generator/netplan.stampc                 S   s   g | ]
}t j |¡r|‘qS r   )ÚosÚpathÚisfiler]   r   r   r   rW   ×   s    z9removing known config '%s' and derived existing files: %s)r   r\   ra   rb   rc   r	   Úload_binary_fileÚKNOWN_SNAPD_CONFIGrA   rB   Úunlink)r`   ÚtpathÚcontentÚderivedÚexistingr^   r   r_   r   Ú_clean_defaultÅ   s$   

þýÿrk   Únet_config_contentÚreturnc              
   C   s  zddl m} ddlm} W n ty   t dt¡ Y dS w z@tdd��1}| 	| ¡ | 
¡  | dtj¡ |ƒ }| |¡ |ƒ }| |¡ | tj t¡¡ W d  ƒ n1 sYw   Y  W n tyy } zt d	t|¡ W Y d}~dS d}~ww t d
¡ dS )ad  Use netplan.State._write_yaml_file to write netplan config

    Where netplan python API exists, prefer to use of the private
    _write_yaml_file to ensure proper permissions and file locations
    are chosen by the netplan python bindings in the environment.

    By calling the netplan API, allow netplan versions to change behavior
    related to file permissions and treatment of sensitive configuration
    under the API call to _write_yaml_file.

    In future netplan releases, security-sensitive config may be written to
    separate file or directory paths than world-readable configuration parts.
    r   )ÚParser)ÚStatez.No netplan python module. Fallback to write %sFÚw©ÚmodeNzUUnable to render network config using netplan python module. Fallback to write %s. %sz0Rendered netplan config using netplan python APIT)Únetplan.parserrn   Únetplan.statero   ÚImportErrorrA   rB   ÚCLOUDINIT_NETPLAN_FILEr   ÚwriteÚflushÚseekÚioÚSEEK_SETÚ	load_yamlÚimport_parser_resultsÚ_write_yaml_filera   rb   ÚbasenameÚ	ExceptionrD   )rl   rn   ro   r^   ÚparserÚstate_output_fileÚer   r   r   Únetplan_api_write_yaml_fileâ   sF   þû



ÿó€ü€ù
r„   Úcfg_filerh   c                 C   s.   t j | ¡sdS t t | ¡¡}|t |¡kS )z<Return True when new netplan config has changed vs previous.T)ra   rb   Úexistsr	   r|   Úload_text_file)r…   rh   Ú	prior_cfgr   r   r   Úhas_netplan_config_changed  s   r‰   c                 C   sH   t jrdnd}tj | ¡rt | ¡}||@ |kr|}tj| ||d� dS )zDWrite netplan config to cfg_file because python API was unavailable.i€  i¤  rq   N)r   ÚNETPLAN_CONFIG_ROOT_READ_ONLYra   rb   r†   r	   Úget_permissionsÚ
write_file)r…   rh   rr   Úcurrent_moder   r   r   Úfallback_write_netplan_yaml   s   
rŽ   c                   @   sŠ   e Zd ZdZddgZddgZddd„Zdee fd	d
„Z			dde
dee ddfdd„Zdedefdd„Zddd„Zde
defdd„ZdS )ÚRendererzBRenders network information in a /etc/netplan/network.yaml format.ÚnetplanÚgenerateÚinfoNc                 C   sT   |si }|  dt¡| _|  dd ¡| _|  dd¡| _|  dd¡| _|  d¡p&g | _d S )NÚnetplan_pathÚnetplan_headerÚpostcmdsFÚclean_defaultTr   )r?   rv   r“   r”   Ú	_postcmdsr–   Ú	_features)Úselfr   r   r   r   Ú__init__1  s   zRenderer.__init__rm   c              
   C   s�   | j sEztj| jdd�\}}t |¡}|d d | _ W | j S  tjy)   Y | j S  ttfyD } zt 	d|¡ W Y d }~| j S d }~ww | j S )NT©Úcapturez
netplan.ior   z-Failed to list features from netplan info: %s)
r˜   r   ÚNETPLAN_INFOr	   r|   ÚProcessExecutionErrorÚ	TypeErrorÚKeyErrorrA   rB   )r™   Ú	info_blobÚ_errr’   rƒ   r   r   r   r   :  s   
úþ€þzRenderer.featuresÚnetwork_stateÚ	templatesc                 C   sª   t j t |¡| j¡}t t j |¡¡ |  	|¡}| j
r| j
nd}| d¡s*|d7 }|| }t||ƒ}t|ƒs<t||ƒ | jrDt|d� | j| j|d� | j| jd� d S )NÚ Ú
r_   )ÚrunÚconfig_changed)r§   )ra   rb   Újoinr   r\   r“   r	   Ú
ensure_dirÚdirnameÚ_render_contentr”   Úendswithr‰   r„   rŽ   r–   rk   Ú_netplan_generater—   Ú_net_setup_link)r™   r£   r¤   r`   Úfpnplanrh   ÚheaderÚnetplan_config_changedr   r   r   Úrender_network_stateH  s    	




ÿzRenderer.render_network_stater§   r¨   c                 C   s8   |s	t  d¡ d S |st  d¡ d S tj| jdd� d S )Nz"netplan generate postcmds disabledzEskipping call to `netplan generate`. reason: identical netplan configTr›   )rA   rB   r   ÚNETPLAN_GENERATE)r™   r§   r¨   r   r   r   r®   i  s   
ÿzRenderer._netplan_generateFc                 C   s²   |s	t  d¡ dS dt ¡ v rt  d¡ dS g d¢}tdƒD ]5}ztƒ D ]}tj t	| ¡r:t
j
|t	| g dd� q$W  dS  t
jyS } z|}W Y d}~qd}~ww td	ƒ|‚)
z¤To ensure device link properties are applied, we poke
        udev to re-evaluate networkd .link files and call
        the setup_link udev builtin command
        z'netplan net_setup_link postcmd disabledNznet.ifnames=0z%Predictable interface names disabled.)Úudevadmztest-builtinÚnet_setup_linké   Tr›   zQ'udevadm test-builtin net_setup_link' unable to run successfully for all devices.)rA   rB   r	   Úget_cmdlineÚranger   ra   rb   Úislinkr   r   rž   ÚRuntimeError)r™   r§   Ú	setup_lnkÚ_Úifacerƒ   Úlast_exceptionr   r   r   r¯   u  s2   


ÿ€€ÿÿýzRenderer._net_setup_linkc           +   	   C   sF  |j dkrt d¡ tjd|jiddd�S i }i }i }i }i }g }|j dg ¡}|j}	|j	}
| 
¡ D �]‹}| d¡}ttdd	„ | ¡ ƒƒ}| d
¡}|dkr†|| dd ¡dœ}|d d u rv| dd ¡}|d urpd| ¡ i|d< n|d= |d= t|||| jƒ | ||i¡ q2|dkrói }i }td }dD ]%}t||ƒ}| ¡ D ]\}}| | dd¡¡}|d u r±qŸ| ||i¡ qŸq”t|ƒdkrÇ| d|i¡ | d¡rÔ|d  ¡ |d< | d¡}|dkrãt|||ƒ t|||| jƒ | ||i¡ q2|dk�rŽ| d¡}|d u �rt dd|› d�¡ q2tt |¡ƒ}d|i}d}t||ƒ}i }td } | ¡ D ]8\}}|  |¡}|d u �r9�q)| ||i¡ |dv �r`i }!|D ]}"|" ¡ \}#}$t|$ƒ|!|#< �qI| ||!i¡ �q)t|ƒdk�rp| d|i¡ | d¡�r~|d  ¡ |d< t|||| jƒ | ||i¡ q2|d k�r¾| d!¡| d"¡d#œ}%| dd ¡}|d u�r¯| ¡ |%d< t||%|| jƒ | ||%i¡ q2|	�sÅ|
�rò|	|
d$œ}&|||||fD ] }'|' ¡ D ]\}(})d%|)v �såd&|)v�rç�q×|) d%|&i¡ �q×�qÑd'd(„ }*| d)¡ ||*d*|ƒ7 }||*d+|ƒ7 }||*d,|ƒ7 }||*d-|ƒ7 }||*d.|ƒ7 }d/ |¡S )0Né   zV2 to V2 passthroughr9   F)Úexplicit_startÚexplicit_endrX   rS   c                 S   s   | d d uS )Né   r   )Úitr   r   r   Ú<lambda>¯  s    z*Renderer._render_content.<locals>.<lambda>r)   Úphysicalr   )úset-namer   Úmac_addressÚ
macaddressrÇ   Úbond)Úbond_zbond-r½   ú-r   Ú
parameterszbond-slavesÚnoneÚbridgeÚbridge_portszInvalid config. The keyz'bridge_ports' is required in Ú.Úbridge_)z	path-costzport-priorityÚvlanÚvlan_idzvlan-raw-device)ÚidÚlink)r<   r>   r=   r<   c                 S   s0   |rt j| |idddd�}t |d¡}|gS g S )NFT)rÁ   rÂ   Únoaliasz    )r   ÚdumpsÚtextwrapÚindent)rS   ÚsectionÚdumpÚtxtr   r   r   Ú_render_section   s   üz1Renderer._render_content.<locals>._render_sectionznetwork:
    version: 2
Ú	ethernetsÚwifisÚbondsÚbridgesÚvlansr¥   )ÚversionrA   rB   r   rØ   r   Ú_network_stater?   r5   Údns_searchdomainsÚiter_interfacesr   Úfilterr   ÚlowerrR   r   r@   r   r   ÚreplacerE   r[   rD   rY   Úcopyr$   ÚintrC   r©   )+r™   r£   rß   rà   râ   rá   rã   rh   rX   r=   rH   r   rG   ÚifcfgÚif_typeÚethÚmacaddrrÊ   Úbond_configÚv2_bond_mapr   Úbond_paramsÚparamr   ÚnewnameÚslave_interfacesrÐ   ÚportsrÏ   Úmatch_prefixÚparamsÚ	br_configÚv2_bridge_mapÚnewvalueÚvalÚportÚportvalrÓ   ÚnscfgrÛ   Ú_namerT   rÞ   r   r   r   r¬   –  sà   

ý


þ
ü





þÿ



€
þ
€
ý

zRenderer._render_contentr   )NN)F)Ú__name__Ú
__module__Ú__qualname__Ú__doc__r´   r�   rš   r   r#   r   r   r   r   r³   Úboolr®   r¯   r¬   r   r   r   r   r�   +  s$    
	üþý
û!
!r�   c                 C   s2   dg}ddg}|D ]}t j||| d�s dS q	dS )Nr�   z	/usr/sbinz/sbin)r>   r`   FT)r   Úwhich)r`   Úexpectedr>   Úpr   r   r   Ú	available6  s   ÿr
  r   )+rë   rz   Úloggingra   rÙ   Útempfiler   Útypingr   r   r   Ú	cloudinitr   r   r   r	   Úcloudinit.netr
   r   r   r   r   r   Úcloudinit.net.network_stater   r   rv   re   Ú	getLoggerr  rA   r   r   rR   r[   rk   r#   r  r„   r‰   rŽ   r�   r
  r   r   r   r   Ú<module>   s2    
 
4
  