⚝
One Hat Cyber Team
⚝
Your IP:
216.73.216.144
Server IP:
157.245.143.252
Server:
Linux www 6.11.0-9-generic #9-Ubuntu SMP PREEMPT_DYNAMIC Mon Oct 14 13:19:59 UTC 2024 x86_64
Server Software:
nginx/1.26.0
PHP Version:
8.3.11
Buat File
|
Buat Folder
Eksekusi
Dir :
~
/
lib
/
python3
/
dist-packages
/
cloudinit
/
__pycache__
/
View File Name :
gpg.cpython-312.pyc
f d Z ddlZddlZddlZddlZddlZddlmZ ddlm Z m Z ddl m Z ej e ZdZ G d d Zy) z0gpg.py - Collection of gpg key related functions N)TemporaryDirectory)DictOptional)subp GNUPGHOMEc e Zd Zd Zd Zedeeef fd Zd Z ddZ dede e fd Z dedefd Z dd edefd Zdded eddfdZdeddfdZ dded ede e fdZddZy)GPGc > d| _ i | _ t | _ y )NF) gpg_started_envr temp_dirselfs //usr/lib/python3/dist-packages/cloudinit/gpg.py__init__z GPG.__init__ s *, c | S N r s r __enter__z GPG.__enter__ s r returnc | j r | j S d| _ t | j j i| _ | j S )a when this env property gets invoked, set up our temporary directory, and also set gpg_started to tell the cleanup() method whether or not why put this here and not in __init__? pytest seems unhappy and it's not obvious how to work around it T)r r HOMEr namer s r envzGPG.env" s= 9999 4==--. yyr c $ | j y r )cleanup)r exc_typ exc_value tracebacks r __exit__z GPG.__exit__1 s r Nc | j | j rOt j j | j j r| j j yyy)z0cleanup the gpg temporary directory and kill gpgN)kill_gpgr ospathisdirr r r s r r z GPG.cleanup4 sB ==RWW]]4==+=+= > MM ! ! # ?=r keyc t j ddd|gd| j j S # t j $ r!}t j d|| Y d}~yd}~ww xY w)z*Export gpg key, armoured key gets returnedgpgz--exportz--armourTcapture update_env&Failed to export armoured key "%s": %sN)r r stdoutProcessExecutionErrorLOGdebugr r' errors r export_armourzGPG.export_armour: sg L99 J4 88 f )) L II>U K K Ls /2 A&A!!A&c ` t j ddg|d| j j S )zDearmor gpg key, dearmored key gets returned note: man gpg(1) makes no mention of an --armour spelling, only --armor r) z --dearmorF)datadecoder, )r r r. )r r' s r dearmorz GPG.dearmorG s, yy K s5TXX & r key_filec g d}|s|j d |j | t j || j d \ }}|rt j d|| |S )zList keys from a keyring with fingerprints. Default to a stable machine parseable format. @param key_file: a string containing a filepath to a key @param human_output: return output intended for human parsing )r) z --no-optionsz--with-fingerprintz--no-default-keyringz --list-keysz --keyringz --with-colonsT)r, r+ r- )appendr r r0 warning)r r9 human_outputcmdr. stderrs r list_keysz GPG.list_keysP s] JJ ' 8 3488TJ KK8(F r keyserverc t j d|| d}d}t |xs g } |dz } t j ddd|z d |gd| j t j d ||| y# t j $ r }|}Y d}~nd}~ww xY w t | }t j d |j | t j | n$# t $ r}t d ||||fz |d}~ww xY w)a Receive gpg key from the specified keyserver. Retries are done by default because keyservers can be unreliable. Additionally, there is no way to determine the difference between a non-existent key and a failure. In both cases gpg (at least 2.2.4) exits with status 2 and stderr: "keyserver receive failed: No data" It is assumed that a key provided to cloud-init exists on the keyserver so re-trying makes better sense than failing. @param key: a string key fingerprint (as passed to gpg --recv-keys). @param keyserver: the keyserver to request keys from. @param retries: an iterable of sleep lengths for retries. Use None to indicate no retries.z&Importing key '%s' from keyserver '%s'r NT r) z--no-ttyz--keyserver=%sz --recv-keysr* z/Imported key '%s' from keyserver '%s' on try %dz6Import failed with exit code %d, will try again in %ssz@Failed to import key '%s' from keyserver '%s' after %d tries: %s) r0 r1 iterr r r/ next exit_codetimesleep StopIteration ValueError) r r' rA retriestrynumr3 sleepsenaplens r recv_keyz GPG.recv_keyj s :CKgm$ aKF "(94% ! #xx E -- f LOO 6" ),/FE+JK ? s1 AA5 5BBBAC C;#C66C;c t j dddd|gd| j y# t j $ r!}t j d|| Y d}~yd}~ww xY w) z0Delete the specified key from the local gpg ringr) z--batchz--yesz --delete-keysTr* zFailed delete key "%s": %sN)r r r/ r0 r< r2 s r delete_keyzGPG.delete_key sZ B II 7OSA 88 )) B KK4c5 A A Bs '* A AA keyidc | j | }|s9 | j || | j | } | j | |S |S # t $ r t j d| w xY w# | j | w xY w)z get gpg keyid from keyserver)rA zFailed to obtain gpg key %s)r4 rP rJ r0 exceptionrR )r rS rA armours r getkeybyidzGPG.getkeybyid s ##E* ' ey 9 ++E2 & v ;UC &s $A !A00A3 3Bc d | j syt j d r/t j g dd| j j }yt j g ddddg j }t j d | }|D cg c] }|d d k( s t |d }}|rt j d | |D ]& }t j |t j ( yc c}w # t j $ r }t j d | Y d}~yd}~ww xY w)a killing with gpgconf is best practice, but when it isn't available failover is possible GH: 4344 - stop gpg-agent/dirmgr daemons spawned by gpg key imports. Daemons spawned by cloud-config.service on systemd v253 report (running) Ngpgconf)rY z--killallTr* ) psz-ozppid,pid-Ckeyboxdr\ dirmngrr\ z gpg-agentr rC )r+ rcsz (?P<ppid>\d+)\s+(?P<pid>\d+)1z&Killing gpg-agent and dirmngr pids: %sz"Failed to clean up gpg process: %s)r r whichr r. refindallintr0 r1 r$ killsignalSIGKILLr/ r< )r gpg_process_outgpg_pidspid root_gpg_pidsgpg_pidrN s r r# z GPG.kill_gpg s & A##zz)$"&))0 #xx# & #')) !A# & ::3_ ,4!+3Cs1v}CAK8 ! !II@- -GGGGV^^4 -! )) A KK<a @ @ As= C< AC< A C< C7!C71AC< 7C< <D/D**D/)r N)F))rC rC )zkeyserver.ubuntu.com)__name__ __module__ __qualname__r r propertyr strr r! r r r4 r8 r@ rP rR rW r# r r r r r s - T#s(^ $ # 3 3 # c 45C 5C 5D 5n Bc Bd B ,B%( # $.Ar r )__doc__loggingr$ rb rf rG tempfiler typingr r cloudinitr getLoggerrm r0 r r r r r <module>rx sG 7 ' ! g!SA SAr