f UdZddlZddlZddlZddlmZmZddlmZddl m Z ddl m Z m Z ddlmZmZddlmZdd lmZd Zd d d eegeddggdZe ed<e eZej0eZdZddZdZ ddZdede dede ddf dZ!y)z;SSH AuthKey Fingerprints: Log fingerprints of user SSH keysN)ssh_utilutil)Cloud)Config) MetaSchema get_meta_doc) ALL_DISTROSug_util) PER_INSTANCE) SimpleTablezWrite fingerprints of authorized keys for each user to log. This is enabled by default, but can be disabled using ``no_ssh_fingerprints``. The hash type for the keys can be specified, but defaults to ``sha256``. cc_ssh_authkey_fingerprintszSSH AuthKey Fingerprintsz!Log fingerprints of user SSH keyszno_ssh_fingerprints: truezauthkey_hash: sha512)idnametitle descriptiondistros frequencyexamplesactivate_by_schema_keysmetacng}tdt|dD]}|j|||dz|S)Nr)rangelenappend)bin_hashsplit_upis N/usr/lib/python3/dist-packages/cloudinit/config/cc_ssh_authkey_fingerprints.py _split_hashr ,s?H 1c(mQ '-QU+,- Oc|sy tj|}|jtj|dj t |jS#ttf$rYywxYw)N:?) hashlibnewupdatebase64 b64decodejoinr hexdigest TypeError ValueError)b64_text hash_methhashers r_gen_fingerprintr23sh Y' f&&x01xx F$4$4$6788 z " sA A&&A87A8ct|j|j|j|jgrE|jr9|jj j tjvryy)NTF) anykeytyper)commentoptionslowerstriprVALID_KEY_TYPES)entrys r_is_printable_keyr<BsT EMM5<< FG MM ##%++-1I1II r!cd|s!|d|d}tj|ddydd|zdd g}t|}|D]g}t|s|jxsd t |j |xsd |jxsd |jxsd g} |j| i|j} | j} tt| t } tjd |d |d| g} | j| | D]}tj||ddd!y)Nz3no authorized SSH keys fingerprints found for user z. TF)consolestderrKeytypezFingerprint (%s)OptionsComment-)keyzAuthorized keys from z for user + )textr?r>)r multi_logr r<r5r2r)r7r6add_row get_string splitlinesrmaxcenterextend)userkey_fn key_entriesr0prefixmessage tbl_fieldstblr;row authtbl_s authtbl_linesmax_lenlineslines r_pprint_key_entriesr\Ls7 t   wU;i( J j !C U # $ y9@S $ $ C KK  I((*M#m-.G 5;T B    E LL  #T*5$  r!rcfgcloudargsreturnctj|jddrtj d|ytj |dd}t j||j\}}|jD]d\}}|jds|jdrtj d|?tj|\} } t|| | |fy) Nno_ssh_fingerprintsFz>Skipping module named %s, logging of SSH fingerprints disabled authkey_hashsha256no_create_homesystemzXSkipping printing of ssh fingerprints for user '%s' because no home directory is created) ris_truegetLOGdebugget_cfg_option_strr normalize_users_groupsdistroitemsrextract_authorized_keysr\) rr]r^r_r0users_groups user_name_cfgrPrQs rhandlertws ||CGG159: L   ''^XFI55c5<<HUG"[[] GD 88$ %(); II/   ( @ @ KIv{IF Gr!)rd)rdz ci-info: )"__doc__r)r&logging cloudinitrrcloudinit.cloudrcloudinit.configrcloudinit.config.schemarrcloudinit.distrosr r cloudinit.settingsr cloudinit.simpletabler MODULE_DESCRIPTIONr__annotations__ getLogger__name__rir r2r<r\strlistrtr!rrs B $!#<2+- ( & 0%}# " j  t g! ;F( VGG6G%GtGGr!