Admin

name	type	size	perms	modified	actions
[parent directory]
__pycache__/	dir	-	0755	2024-04-23 15:28:55
schemas/	dir	-	0755	2024-04-23 15:28:55
__init__.py	file	14 B	0644	2024-03-27 13:14:04	edit
cc_ansible.py	file	8,895 B	0644	2024-03-27 13:14:04	edit
cc_apk_configure.py	file	5,792 B	0644	2024-03-27 13:14:04	edit
cc_apt_configure.py	file	43,745 B	0644	2024-03-27 13:14:04	edit
cc_apt_pipelining.py	file	2,768 B	0644	2024-03-27 13:14:04	edit
cc_bootcmd.py	file	2,853 B	0644	2024-03-27 13:14:04	edit
cc_byobu.py	file	3,738 B	0644	2024-03-27 13:14:04	edit
cc_ca_certs.py	file	9,511 B	0644	2024-03-27 13:14:04	edit
cc_chef.py	file	14,102 B	0644	2024-03-27 13:14:04	edit
cc_disable_ec2_metadata.py	file	2,074 B	0644	2024-03-27 13:14:04	edit
cc_disk_setup.py	file	33,139 B	0644	2024-03-27 13:14:04	edit
cc_fan.py	file	3,093 B	0644	2024-03-27 13:14:04	edit
cc_final_message.py	file	3,629 B	0644	2024-03-27 13:14:04	edit
cc_growpart.py	file	23,148 B	0644	2024-03-27 13:14:04	edit
cc_grub_dpkg.py	file	6,812 B	0644	2024-03-27 13:14:04	edit
cc_install_hotplug.py	file	4,521 B	0644	2024-03-27 13:14:04	edit
cc_keyboard.py	file	2,439 B	0644	2024-03-27 13:14:04	edit
cc_keys_to_console.py	file	3,673 B	0644	2024-03-27 13:14:04	edit
cc_landscape.py	file	5,433 B	0644	2024-03-27 13:14:04	edit
cc_locale.py	file	1,903 B	0644	2024-03-27 13:14:04	edit
cc_lxd.py	file	18,608 B	0644	2024-03-27 13:14:04	edit
cc_mcollective.py	file	6,244 B	0644	2024-03-27 13:14:04	edit
cc_mounts.py	file	20,203 B	0644	2024-03-27 13:14:04	edit
cc_ntp.py	file	21,221 B	0644	2024-03-27 13:14:04	edit
cc_package_update_upgrade_install.py	file	4,818 B	0644	2024-03-27 13:14:04	edit
cc_phone_home.py	file	5,451 B	0644	2024-03-27 13:14:04	edit
cc_power_state_change.py	file	7,596 B	0644	2024-03-27 13:14:04	edit
cc_puppet.py	file	14,441 B	0644	2024-03-27 13:14:04	edit
cc_reset_rmc.py	file	4,580 B	0644	2024-03-27 13:14:04	edit
cc_resizefs.py	file	12,097 B	0644	2024-03-27 13:14:04	edit
cc_resolv_conf.py	file	5,060 B	0644	2024-03-27 13:14:04	edit
cc_rh_subscription.py	file	17,379 B	0644	2024-03-27 13:14:04	edit
cc_rsyslog.py	file	13,800 B	0644	2024-03-27 13:14:04	edit
cc_runcmd.py	file	2,974 B	0644	2024-03-27 13:14:04	edit
cc_salt_minion.py	file	6,022 B	0644	2024-03-27 13:14:04	edit
cc_scripts_per_boot.py	file	1,697 B	0644	2024-03-27 13:14:04	edit
cc_scripts_per_instance.py	file	1,852 B	0644	2024-03-27 13:14:04	edit
cc_scripts_per_once.py	file	1,803 B	0644	2024-03-27 13:14:04	edit
cc_scripts_user.py	file	1,893 B	0644	2024-03-27 13:14:04	edit
cc_scripts_vendor.py	file	2,347 B	0644	2024-03-27 13:14:04	edit
cc_seed_random.py	file	4,849 B	0644	2024-03-27 13:14:04	edit
cc_set_hostname.py	file	5,589 B	0644	2024-03-27 13:14:04	edit
cc_set_passwords.py	file	11,234 B	0644	2024-03-27 13:14:04	edit
cc_snap.py	file	6,445 B	0644	2024-03-27 13:14:04	edit
cc_spacewalk.py	file	3,514 B	0644	2024-03-27 13:14:04	edit
cc_ssh.py	file	14,673 B	0644	2024-03-27 13:14:04	edit
cc_ssh_authkey_fingerprints.py	file	4,318 B	0644	2024-03-27 13:14:04	edit
cc_ssh_import_id.py	file	6,264 B	0644	2024-03-27 13:14:04	edit
cc_timezone.py	file	1,492 B	0644	2024-03-27 13:14:04	edit
cc_ubuntu_autoinstall.py	file	4,668 B	0644	2024-03-27 13:14:04	edit
cc_ubuntu_drivers.py	file	4,668 B	0644	2024-03-27 13:14:04	edit
cc_ubuntu_pro.py	file	17,701 B	0644	2024-03-27 13:14:04	edit
cc_update_etc_hosts.py	file	5,283 B	0644	2024-03-27 13:14:04	edit
cc_update_hostname.py	file	4,269 B	0644	2024-03-27 13:14:04	edit
cc_users_groups.py	file	8,777 B	0644	2024-03-27 13:14:04	edit
cc_wireguard.py	file	9,439 B	0644	2024-03-27 13:14:04	edit
cc_write_files.py	file	6,821 B	0644	2024-03-27 13:14:04	edit
cc_write_files_deferred.py	file	1,721 B	0644	2024-03-27 13:14:04	edit
cc_yum_add_repo.py	file	7,633 B	0644	2024-03-27 13:14:04	edit
cc_zypper_add_repo.py	file	6,754 B	0644	2024-03-27 13:14:04	edit
modules.py	file	13,270 B	0644	2024-03-27 13:14:04	edit
schema.py	file	65,117 B	0644	2024-03-27 13:14:04	edit

editing: cc_mcollective.py

# Copyright (C) 2009-2011 Canonical Ltd.
# Copyright (C) 2012 Hewlett-Packard Development Company, L.P.
#
# Author: Marc Cluet <marc.cluet@canonical.com>
# Based on code by Scott Moser <scott.moser@canonical.com>
# Author: Juerg Haefliger <juerg.haefliger@hp.com>
#
# This file is part of cloud-init. See LICENSE file for license information.

""" Mcollective: Install, configure and start mcollective"""

import errno
import io
import logging
from textwrap import dedent

# Used since this can maintain comments
# and doesn't need a top level section
from configobj import ConfigObj

from cloudinit import subp, util
from cloudinit.cloud import Cloud
from cloudinit.config import Config
from cloudinit.config.schema import MetaSchema, get_meta_doc
from cloudinit.settings import PER_INSTANCE

PUBCERT_FILE = "/etc/mcollective/ssl/server-public.pem"
PRICERT_FILE = "/etc/mcollective/ssl/server-private.pem"
SERVER_CFG = "/etc/mcollective/server.cfg"

MODULE_DESCRIPTION = """\
This module installs, configures and starts mcollective. If the ``mcollective``
key is present in config, then mcollective will be installed and started.

Configuration for ``mcollective`` can be specified in the ``conf`` key under
``mcollective``. Each config value consists of a key value pair and will be
written to ``/etc/mcollective/server.cfg``. The ``public-cert`` and
``private-cert`` keys, if present in conf may be used to specify the public and
private certificates for mcollective. Their values will be written to
``/etc/mcollective/ssl/server-public.pem`` and
``/etc/mcollective/ssl/server-private.pem``.

.. note::
    The ec2 metadata service is readable by non-root users.
    If security is a concern, use include-once and ssl urls.
"""

distros = ["all"]

meta: MetaSchema = {
    "id": "cc_mcollective",
    "name": "Mcollective",
    "title": "Install, configure and start mcollective",
    "description": MODULE_DESCRIPTION,
    "distros": distros,
    "examples": [
        dedent(
            """\
            # Provide server private and public key and provide the following
            # config settings in /etc/mcollective/server.cfg:
            # loglevel: debug
            # plugin.stomp.host: dbhost

# WARNING WARNING WARNING
            # The ec2 metadata service is a network service, and thus is
            # readable by non-root users on the system
            # (ie: 'ec2metadata --user-data')
            # If you want security for this, please use include-once + SSL urls
            mcollective:
              conf:
                loglevel: debug
                plugin.stomp.host: dbhost
                public-cert: |
                    -------BEGIN CERTIFICATE--------
                    <cert data>
                    -------END CERTIFICATE--------
                private-cert: |
                    -------BEGIN CERTIFICATE--------
                    <cert data>
                    -------END CERTIFICATE--------
            """
        ),
    ],
    "frequency": PER_INSTANCE,
    "activate_by_schema_keys": ["mcollective"],
}

__doc__ = get_meta_doc(meta)
LOG = logging.getLogger(__name__)

def configure(
    config,
    server_cfg=SERVER_CFG,
    pubcert_file=PUBCERT_FILE,
    pricert_file=PRICERT_FILE,
):
    # Read server.cfg (if it exists) values from the
    # original file in order to be able to mix the rest up.
    try:
        old_contents = util.load_binary_file(server_cfg, quiet=False)
        mcollective_config = ConfigObj(io.BytesIO(old_contents))
    except IOError as e:
        if e.errno != errno.ENOENT:
            raise
        else:
            LOG.debug(
                "Did not find file %s (starting with an empty config)",
                server_cfg,
            )
            mcollective_config = ConfigObj()
    for cfg_name, cfg in config.items():
        if cfg_name == "public-cert":
            util.write_file(pubcert_file, cfg, mode=0o644)
            mcollective_config["plugin.ssl_server_public"] = pubcert_file
            mcollective_config["securityprovider"] = "ssl"
        elif cfg_name == "private-cert":
            util.write_file(pricert_file, cfg, mode=0o600)
            mcollective_config["plugin.ssl_server_private"] = pricert_file
            mcollective_config["securityprovider"] = "ssl"
        else:
            if isinstance(cfg, str):
                # Just set it in the 'main' section
                mcollective_config[cfg_name] = cfg
            elif isinstance(cfg, (dict)):
                # Iterate through the config items, create a section if
                # it is needed and then add/or create items as needed
                if cfg_name not in mcollective_config.sections:
                    mcollective_config[cfg_name] = {}
                for o, v in cfg.items():
                    mcollective_config[cfg_name][o] = v
            else:
                # Otherwise just try to convert it to a string
                mcollective_config[cfg_name] = str(cfg)

try:
        # We got all our config as wanted we'll copy
        # the previous server.cfg and overwrite the old with our new one
        util.copy(server_cfg, "%s.old" % (server_cfg))
    except IOError as e:
        if e.errno == errno.ENOENT:
            # Doesn't exist to copy...
            pass
        else:
            raise

# Now we got the whole (new) file, write to disk...
    contents = io.BytesIO()
    mcollective_config.write(contents)
    util.write_file(server_cfg, contents.getvalue(), mode=0o644)

def handle(name: str, cfg: Config, cloud: Cloud, args: list) -> None:
    # If there isn't a mcollective key in the configuration don't do anything
    if "mcollective" not in cfg:
        LOG.debug(
            "Skipping module named %s, no 'mcollective' key in configuration",
            name,
        )
        return

mcollective_cfg = cfg["mcollective"]

# Start by installing the mcollective package ...
    cloud.distro.install_packages(["mcollective"])

# ... and then update the mcollective configuration
    if "conf" in mcollective_cfg:
        configure(config=mcollective_cfg["conf"])

# restart mcollective to handle updated config
    subp.subp(["service", "mcollective", "restart"], capture=False)

cancel