File manager - Edit - /usr/lib/python3/dist-packages/cloudinit/config/__pycache__/cc_wireguard.cpython-310.pyc
Back
o o@�d�$ � @ sF U d Z ddlZddlmZ ddlmZ ddlmZmZ ddl m Z ddl m Z ddl mZmZ dd lmZ ed �Zd d d ed gedged�gd�Zeed< ee�Z e�e�Zeg d��ZdZdZdZ de fdd�Z de fdd�Z de de fd d �Z d e!fd d �Z"d e!fd!d"�Z#de fd#d$�Z$d%d&� Z%d'e&d(e de d)e!d*df d+d,�Z'dS )-� Wireguard� N)�dedent)�log)�subp�util)�Cloud)�Config)� MetaSchema� get_meta_doc)� PER_INSTANCEaI Wireguard module provides a dynamic interface for configuring Wireguard (as a peer or server) in an easy way. This module takes care of: - writing interface configuration files - enabling and starting interfaces - installing wireguard-tools package - loading wireguard kernel module - executing readiness probes What's a readiness probe? The idea behind readiness probes is to ensure Wireguard connectivity before continuing the cloud-init process. This could be useful if you need access to specific services like an internal APT Repository Server (e.g Landscape) to install/update packages. Example: An edge device can't access the internet but uses cloud-init modules which will install packages (e.g landscape, packages, ubuntu_advantage). Those modules will fail due to missing internet connection. The "wireguard" module fixes that problem as it waits until all readinessprobes (which can be arbitrary commands - e.g. checking if a proxy server is reachable over Wireguard network) are finished before continuing the cloud-init "config" stage. .. note:: In order to use DNS with Wireguard you have to install ``resolvconf`` package or symlink it to systemd's ``resolvectl``, otherwise ``wg-quick`` commands will throw an error message that executable ``resolvconf`` is missing which leads wireguard module to fail. � cc_wireguardz$Module to configure Wireguard tunnel�ubuntu� wireguarda� # Configure one or more WG interfaces and provide optional readinessprobes wireguard: interfaces: - name: wg0 config_path: /etc/wireguard/wg0.conf content: | [Interface] PrivateKey = <private_key> Address = <address> [Peer] PublicKey = <public_key> Endpoint = <endpoint_ip>:<endpoint_ip_port> AllowedIPs = <allowedip1>, <allowedip2>, ... - name: wg1 config_path: /etc/wireguard/wg1.conf content: | [Interface] PrivateKey = <private_key> Address = <address> [Peer] PublicKey = <public_key> Endpoint = <endpoint_ip>:<endpoint_ip_port> AllowedIPs = <allowedip1> readinessprobe: - 'systemctl restart service' - 'curl https://webhook.endpoint/example' - 'nc -zv some-service-fqdn 443' )�id�name�title� description�distros� frequency�activate_by_schema_keys�examples�meta)r � config_path�contenti� � )� � �wg_intc C s� g }t �t| �� ��}|r d�t|��}|�d|� �� t| �� �D ] \}}|dks2|dks2|dkrBt|t �sB|�d|� d|� �� q"|rQt dt � t �|�� ���d S ) aR Validate user-provided wg:interfaces option values. This function supplements flexible jsonschema validation with specific value checks to aid in triage of invalid user-provided configuration. @param wg_int: Dict of configuration value under 'wg:interfaces'. @raises: ValueError describing invalid values provided. z, z%Missing required wg:interfaces keys: r r r z$Expected a string for wg:interfaces:�. Found z*Invalid wireguard interface configuration:N) �REQUIRED_WG_INT_KEYS� difference�set�keys�join�sorted�append�items� isinstance�str� ValueError�NL)r �errors�missingr" �key�value� r/ �?/usr/lib/python3/dist-packages/cloudinit/config/cc_wireguard.py� supplemental_schema_validationh s" ����r1 c C sz t �d| d � zt �d| d � tj| d | d td� W d S ty< } ztd| d � dt� t|�� ��|�d }~ww ) z�Writing user-provided configuration into Wireguard interface configuration file. @param wg_int: Dict of configuration value under 'wg:interfaces'. @raises: RuntimeError for issues writing of configuration file. z"Configuring Wireguard interface %sr z#Writing wireguard config to file %sr r )�modez-Failure writing Wireguard configuration file �:N) �LOG�debugr � write_file�WG_CONFIG_FILE_MODE� Exception� RuntimeErrorr* r( )r �er/ r/ r0 � write_config� s( ��������r; �cloudc C s� z+t �d| d � |j�dd| d � �� t �d| d � |j�dd| d � �� W dS tjyD } z tdt� t|�� ��|�d}~ww ) z�Enable and start Wireguard interface @param wg_int: Dict of configuration value under 'wg:interfaces'. @raises: RuntimeError for issues enabling WG interface. z Enabling wg-quick@%s at bootr �enablez wg-quick@z!Bringing up interface wg-quick@%s�restartz0Failed enabling/starting Wireguard interface(s):N) r4 r5 �distro�manage_servicer �ProcessExecutionErrorr9 r* r( )r r< r: r/ r/ r0 � enable_wg� s ����rB �wg_readinessprobesc C sZ g }d}| D ]}t |t�s |�d|� d|� �� |d7 }q|r+tdt� t�|�� ���dS )z�Basic validation of user-provided probes @param wg_readinessprobes: List of readinessprobe probe(s). @raises: ValueError of wrong datatype provided for probes. r z(Expected a string for readinessprobe at r � z Invalid readinessProbe commands:N)r' r( r% r) r* r# )rC r+ �pos�cr/ r/ r0 �!readinessprobe_command_validation� s ����rG c C s� g }| D ]1}zt �dt|�� tj|ddd� W q tjy5 } z|�|� d|� �� W Y d}~qd}~ww |rDtdt� t�|�� ���dS )z�Execute provided readiness probe(s) @param wg_readinessprobes: List of readinessprobe probe(s). @raises: ProcessExecutionError for issues during execution of probes. z Running readinessprobe: '%s'T��capture�shellz: Nz&Failed running readinessprobe command:) r4 r5 r( r rA r% r9 r* r# )rC r+ rF r: r/ r/ r0 �readinessprobe� s ����rK c C s� dg}t �d�r dS t�� tk r|�d� z| j�� W n ty* t� t d� � w z | j� |� W dS tyB t� t d� � w )z�Install wireguard packages and tools @param cloud: Cloud object @raises: Exception for issues during package installation. zwireguard-tools�wgNr zPackage update failedz!Failed to install wireguard-tools) r �whichr �kernel_version�MIN_KERNEL_VERSIONr% r? �update_package_sourcesr8 �logexcr4 �install_packages)r< �packagesr/ r/ r0 � maybe_install_wireguard_packages� s" � �rT c C s� z$t j dddd�} t�d| j�� �s"t�d� t j dddd� W dS W dS t jy? } zt� tdt � t |�� �� � d}~ww ) zYLoad wireguard kernel module @raises: ProcessExecutionError for issues modprobe �lsmodTrH r z Loading wireguard kernel modulezmodprobe wireguardz Could not load wireguard module:N) r �re�search�stdout�stripr4 r5 rA r rQ r* r( )�outr: r/ r/ r0 � load_wireguard_kernel_module� s ���r[ r �cfg�args�returnc C s� d }d|v rt �d� |d }nt �d| � d S t|� t� |d D ]}t|� t|� t||� q#d|v rK|d d urK|d }t|� t|� d S t �d� d S )Nr z!Found Wireguard section in configz<Skipping module named %s, no 'wireguard' configuration found� interfacesrK z+Skipping readinessprobe - no checks defined) r4 r5 rT r[ r1 r; rB rG rK )r r\ r< r] � wg_sectionr rC r/ r/ r0 �handle s* � ra )(�__doc__rV �textwrapr � cloudinitr �loggingr r �cloudinit.cloudr �cloudinit.configr �cloudinit.config.schemar r �cloudinit.settingsr �MODULE_DESCRIPTIONr �__annotations__� getLogger�__name__r4 � frozensetr r7 r* rO �dictr1 r; rB �listrG rK rT r[ r( ra r/ r/ r/ r0 �<module> sL �$���+ "
| ver. 1.4 |
Github
|
.
| PHP 8.2.9 | Generation time: 0.1 |
proxy
|
phpinfo
|
Settings