OXIESEC PANEL

Name	Size	Modified	Perms
📁 ..	-	02/18/2024 07:58:21 PM	rwxr-xr-x
📄 __init__.py	1.4 KB	03/19/2021 02:37:22 PM	rw-r--r--
📁 __pycache__	-	02/18/2024 07:58:21 PM	rwxr-xr-x
📄 cc_apk_configure.py	9.35 KB	03/19/2021 02:37:22 PM	rw-r--r--
📄 cc_apt_configure.py	39.92 KB	03/19/2021 02:37:22 PM	rw-r--r--
📄 cc_apt_pipelining.py	2.44 KB	03/19/2021 02:37:22 PM	rw-r--r--
📄 cc_bootcmd.py	3.53 KB	03/19/2021 02:37:22 PM	rw-r--r--
📄 cc_byobu.py	3.13 KB	03/19/2021 02:37:22 PM	rw-r--r--
📄 cc_ca_certs.py	6.37 KB	03/19/2021 02:37:22 PM	rw-r--r--
📄 cc_chef.py	23.6 KB	03/19/2021 02:37:22 PM	rw-r--r--
📄 cc_debug.py	3.08 KB	03/19/2021 02:37:22 PM	rw-r--r--
📄 cc_disable_ec2_metadata.py	1.59 KB	03/19/2021 02:37:22 PM	rw-r--r--
📄 cc_disk_setup.py	33.08 KB	03/19/2021 02:37:22 PM	rw-r--r--
📄 cc_emit_upstart.py	2 KB	03/19/2021 02:37:22 PM	rw-r--r--
📄 cc_fan.py	2.85 KB	03/19/2021 02:37:22 PM	rw-r--r--
📄 cc_final_message.py	2.37 KB	03/19/2021 02:37:22 PM	rw-r--r--
📄 cc_foo.py	2.07 KB	03/19/2021 02:37:22 PM	rw-r--r--
📄 cc_growpart.py	11.63 KB	03/19/2021 02:37:22 PM	rw-r--r--
📄 cc_grub_dpkg.py	4.94 KB	03/19/2021 02:37:22 PM	rw-r--r--
📄 cc_keys_to_console.py	2.79 KB	03/19/2021 02:37:22 PM	rw-r--r--
📄 cc_landscape.py	3.96 KB	03/19/2021 02:37:22 PM	rw-r--r--
📄 cc_locale.py	2.22 KB	03/19/2021 02:37:22 PM	rw-r--r--
📄 cc_lxd.py	10.51 KB	03/19/2021 02:37:22 PM	rw-r--r--
📄 cc_mcollective.py	5.08 KB	03/19/2021 02:37:22 PM	rw-r--r--
📄 cc_migrator.py	3.07 KB	03/19/2021 02:37:22 PM	rw-r--r--
📄 cc_mounts.py	17.75 KB	03/19/2021 02:37:22 PM	rw-r--r--
📄 cc_ntp.py	21.59 KB	03/19/2021 02:37:22 PM	rw-r--r--
📄 cc_package_update_upgrade_install.py	4.14 KB	03/19/2021 02:37:22 PM	rw-r--r--
📄 cc_phone_home.py	4.03 KB	03/19/2021 02:37:22 PM	rw-r--r--
📄 cc_power_state_change.py	7.48 KB	03/19/2021 02:37:22 PM	rw-r--r--
📄 cc_puppet.py	8.86 KB	03/19/2021 02:37:22 PM	rw-r--r--
📄 cc_refresh_rmc_and_interface.py	5.07 KB	03/19/2021 02:37:22 PM	rw-r--r--
📄 cc_reset_rmc.py	4.15 KB	03/19/2021 02:37:22 PM	rw-r--r--
📄 cc_resizefs.py	9.73 KB	03/19/2021 02:37:22 PM	rw-r--r--
📄 cc_resolv_conf.py	3.45 KB	03/19/2021 02:37:22 PM	rw-r--r--
📄 cc_rh_subscription.py	15.68 KB	03/19/2021 02:37:22 PM	rw-r--r--
📄 cc_rightscale_userdata.py	3.75 KB	03/19/2021 02:37:22 PM	rw-r--r--
📄 cc_rsyslog.py	14.12 KB	03/19/2021 02:37:22 PM	rw-r--r--
📄 cc_runcmd.py	3.11 KB	03/19/2021 02:37:22 PM	rw-r--r--
📄 cc_salt_minion.py	4.75 KB	03/19/2021 02:37:22 PM	rw-r--r--
📄 cc_scripts_per_boot.py	1.2 KB	03/19/2021 02:37:22 PM	rw-r--r--
📄 cc_scripts_per_instance.py	1.38 KB	03/19/2021 02:37:22 PM	rw-r--r--
📄 cc_scripts_per_once.py	1.31 KB	03/19/2021 02:37:22 PM	rw-r--r--
📄 cc_scripts_user.py	1.42 KB	03/19/2021 02:37:22 PM	rw-r--r--
📄 cc_scripts_vendor.py	1.41 KB	03/19/2021 02:37:22 PM	rw-r--r--
📄 cc_seed_random.py	4.57 KB	03/19/2021 02:37:22 PM	rw-r--r--
📄 cc_set_hostname.py	3.39 KB	03/19/2021 02:37:22 PM	rw-r--r--
📄 cc_set_passwords.py	8.53 KB	03/19/2021 02:37:22 PM	rw-r--r--
📄 cc_snap.py	8.68 KB	03/19/2021 02:37:22 PM	rw-r--r--
📄 cc_spacewalk.py	2.89 KB	03/19/2021 02:37:22 PM	rw-r--r--
📄 cc_ssh.py	12.76 KB	03/19/2021 02:37:22 PM	rw-r--r--
📄 cc_ssh_authkey_fingerprints.py	3.44 KB	03/19/2021 02:37:22 PM	rw-r--r--
📄 cc_ssh_import_id.py	2.91 KB	03/19/2021 02:37:22 PM	rw-r--r--
📄 cc_timezone.py	1.15 KB	03/19/2021 02:37:22 PM	rw-r--r--
📄 cc_ubuntu_advantage.py	6.08 KB	04/25/2023 09:28:10 PM	rw-r--r--
📄 cc_ubuntu_drivers.py	5.69 KB	03/19/2021 02:37:22 PM	rw-r--r--
📄 cc_update_etc_hosts.py	3.33 KB	03/19/2021 02:37:22 PM	rw-r--r--
📄 cc_update_hostname.py	1.58 KB	03/19/2021 02:37:22 PM	rw-r--r--
📄 cc_users_groups.py	7.44 KB	03/19/2021 02:37:22 PM	rw-r--r--
📄 cc_write_files.py	8.83 KB	03/19/2021 02:37:22 PM	rw-r--r--
📄 cc_yum_add_repo.py	4.21 KB	03/19/2021 02:37:22 PM	rw-r--r--
📄 cc_zypper_add_repo.py	7.58 KB	03/19/2021 02:37:22 PM	rw-r--r--
📄 schema.py	19.05 KB	03/19/2021 02:37:22 PM	rw-r--r--

Editing: cc_mcollective.py

# Copyright (C) 2009-2011 Canonical Ltd.
# Copyright (C) 2012 Hewlett-Packard Development Company, L.P.
#
# Author: Marc Cluet <marc.cluet@canonical.com>
# Based on code by Scott Moser <scott.moser@canonical.com>
# Author: Juerg Haefliger <juerg.haefliger@hp.com>
#
# This file is part of cloud-init. See LICENSE file for license information.

"""
Mcollective
-----------
**Summary:** install, configure and start mcollective

This module installs, configures and starts mcollective. If the ``mcollective``
key is present in config, then mcollective will be installed and started.

Configuration for ``mcollective`` can be specified in the ``conf`` key under
``mcollective``. Each config value consists of a key value pair and will be
written to ``/etc/mcollective/server.cfg``. The ``public-cert`` and
``private-cert`` keys, if present in conf may be used to specify the public and
private certificates for mcollective. Their values will be written to
``/etc/mcollective/ssl/server-public.pem`` and
``/etc/mcollective/ssl/server-private.pem``.

.. note::
    The ec2 metadata service is readable by non-root users.
    If security is a concern, use include-once and ssl urls.

**Internal name:** ``cc_mcollective``

**Module frequency:** per instance

**Supported distros:** all

**Config keys**::

mcollective:
        conf:
            <key>: <value>
            public-cert: |
                -------BEGIN CERTIFICATE--------
                <cert data>
                -------END CERTIFICATE--------
            private-cert: |
                -------BEGIN CERTIFICATE--------
                <cert data>
                -------END CERTIFICATE--------
"""

import errno
import io

# Used since this can maintain comments
# and doesn't need a top level section
from configobj import ConfigObj

from cloudinit import log as logging
from cloudinit import subp
from cloudinit import util

PUBCERT_FILE = "/etc/mcollective/ssl/server-public.pem"
PRICERT_FILE = "/etc/mcollective/ssl/server-private.pem"
SERVER_CFG = '/etc/mcollective/server.cfg'

LOG = logging.getLogger(__name__)

def configure(config, server_cfg=SERVER_CFG,
              pubcert_file=PUBCERT_FILE, pricert_file=PRICERT_FILE):
    # Read server.cfg (if it exists) values from the
    # original file in order to be able to mix the rest up.
    try:
        old_contents = util.load_file(server_cfg, quiet=False, decode=False)
        mcollective_config = ConfigObj(io.BytesIO(old_contents))
    except IOError as e:
        if e.errno != errno.ENOENT:
            raise
        else:
            LOG.debug("Did not find file %s (starting with an empty"
                      " config)", server_cfg)
            mcollective_config = ConfigObj()
    for (cfg_name, cfg) in config.items():
        if cfg_name == 'public-cert':
            util.write_file(pubcert_file, cfg, mode=0o644)
            mcollective_config[
                'plugin.ssl_server_public'] = pubcert_file
            mcollective_config['securityprovider'] = 'ssl'
        elif cfg_name == 'private-cert':
            util.write_file(pricert_file, cfg, mode=0o600)
            mcollective_config[
                'plugin.ssl_server_private'] = pricert_file
            mcollective_config['securityprovider'] = 'ssl'
        else:
            if isinstance(cfg, str):
                # Just set it in the 'main' section
                mcollective_config[cfg_name] = cfg
            elif isinstance(cfg, (dict)):
                # Iterate through the config items, create a section if
                # it is needed and then add/or create items as needed
                if cfg_name not in mcollective_config.sections:
                    mcollective_config[cfg_name] = {}
                for (o, v) in cfg.items():
                    mcollective_config[cfg_name][o] = v
            else:
                # Otherwise just try to convert it to a string
                mcollective_config[cfg_name] = str(cfg)

try:
        # We got all our config as wanted we'll copy
        # the previous server.cfg and overwrite the old with our new one
        util.copy(server_cfg, "%s.old" % (server_cfg))
    except IOError as e:
        if e.errno == errno.ENOENT:
            # Doesn't exist to copy...
            pass
        else:
            raise

# Now we got the whole (new) file, write to disk...
    contents = io.BytesIO()
    mcollective_config.write(contents)
    util.write_file(server_cfg, contents.getvalue(), mode=0o644)

def handle(name, cfg, cloud, log, _args):

# If there isn't a mcollective key in the configuration don't do anything
    if 'mcollective' not in cfg:
        log.debug(("Skipping module named %s, "
                   "no 'mcollective' key in configuration"), name)
        return

mcollective_cfg = cfg['mcollective']

# Start by installing the mcollective package ...
    cloud.distro.install_packages(("mcollective",))

# ... and then update the mcollective configuration
    if 'conf' in mcollective_cfg:
        configure(config=mcollective_cfg['conf'])

# restart mcollective to handle updated config
    subp.subp(['service', 'mcollective', 'restart'], capture=False)

# vi: ts=4 expandtab