* Got the node/dr host initialization form to the point where it can test access and decide if it should show the Red Hat account form. Decided that for M3, node/dr host setup will now be a four-stage process; initial install (over PXE), initialization (install the proper anvil-{node,dr} RPM and connect to the database), setup/map the network, and then add to an Anvil! pair.
* Updated striker to no longer try to SSH to a remote machine. To enable this, we'd have to give apache a shell and an SSH key, which is dumb and dangerous when considered. * Created tools/striker-get-peer-data which is meant to be invoked as the 'admin' user (via a setuid c-wrapper). It collects basic data about a target machine and reports what it finds on STDOUT. It gets the password for the target via the database. * Updated anvil-daemon to check/create/update setuid c-wrapper(s), which for now is limited to call_striker-initialize-host. * Created Anvil/Tools/Striker.pm to store Striker web-specific methods, including get_peer_data() which calls tools/striker-initialize-host via the setuid admin call_striker-initialize-host c-wrapper. * In order to allow striker via apache to read a peer's anvil.version, which it can no longer do over SSH, any connection to a peer where the anvil.version is read is cached as /etc/anvil/anvil.<peer>.version. When Get->anvil_version is called as 'apache', this file is read instead. * Updated Database->resync_databases() and ->_find_behind_databases() to ignore the 'states' table. * Created tools/striker-initialize-host which will be called as a job to initialize a node/dr host. Signed-off-by: Digimer <digimer@alteeve.ca>main
Digimer
5 years ago
parent
6f74ca376b
commit
badaa39b7a
17 changed files with 827 additions and 125 deletions
@ -0,0 +1,210 @@ |
|||||||
|
package Anvil::Tools::Striker; |
||||||
|
# |
||||||
|
# This module contains methods used to handle common Striker (webUI) tasks. |
||||||
|
# |
||||||
|
|
||||||
|
use strict; |
||||||
|
use warnings; |
||||||
|
use Data::Dumper; |
||||||
|
use Scalar::Util qw(weaken isweak); |
||||||
|
|
||||||
|
our $VERSION = "3.0.0"; |
||||||
|
my $THIS_FILE = "Striker.pm"; |
||||||
|
|
||||||
|
### Methods; |
||||||
|
# |
||||||
|
|
||||||
|
=pod |
||||||
|
|
||||||
|
=encoding utf8 |
||||||
|
|
||||||
|
=head1 NAME |
||||||
|
|
||||||
|
Anvil::Tools::Striker |
||||||
|
|
||||||
|
Provides all methods related to the Striker WebUI. |
||||||
|
|
||||||
|
=head1 SYNOPSIS |
||||||
|
|
||||||
|
use Anvil::Tools; |
||||||
|
|
||||||
|
# Get a common object handle on all Anvil::Tools modules. |
||||||
|
my $anvil = Anvil::Tools->new(); |
||||||
|
|
||||||
|
# Access to methods using '$anvil->Striker->X'. |
||||||
|
# |
||||||
|
# Example using 'system_call()'; |
||||||
|
|
||||||
|
|
||||||
|
=head1 METHODS |
||||||
|
|
||||||
|
Methods in this module; |
||||||
|
|
||||||
|
=cut |
||||||
|
sub new |
||||||
|
{ |
||||||
|
my $class = shift; |
||||||
|
my $self = {}; |
||||||
|
|
||||||
|
bless $self, $class; |
||||||
|
|
||||||
|
return ($self); |
||||||
|
} |
||||||
|
|
||||||
|
# Get a handle on the Anvil::Tools object. I know that technically that is a sibling module, but it makes more |
||||||
|
# sense in this case to think of it as a parent. |
||||||
|
sub parent |
||||||
|
{ |
||||||
|
my $self = shift; |
||||||
|
my $parent = shift; |
||||||
|
|
||||||
|
$self->{HANDLE}{TOOLS} = $parent if $parent; |
||||||
|
|
||||||
|
# Defend against memory leads. See Scalar::Util'. |
||||||
|
if (not isweak($self->{HANDLE}{TOOLS})) |
||||||
|
{ |
||||||
|
weaken($self->{HANDLE}{TOOLS}); |
||||||
|
} |
||||||
|
|
||||||
|
return ($self->{HANDLE}{TOOLS}); |
||||||
|
} |
||||||
|
|
||||||
|
|
||||||
|
############################################################################################################# |
||||||
|
# Public methods # |
||||||
|
############################################################################################################# |
||||||
|
|
||||||
|
=head2 get_peer_data |
||||||
|
|
||||||
|
This calls the C<< call_striker-get-peer-data >> program to try to connect to the target (as C<< root >>). If successful, it will return the target's host UUID (either by reading C<< /etc/anvil/host.uuid >> if it exists, or using C<< dmidecode >> if not). |
||||||
|
|
||||||
|
This method will return a string variable with C<< 1 >> if the peer was reached, or C<< 0 >> if it was not. It will also return a hash reference containing the collected data. |
||||||
|
|
||||||
|
my ($connected, $data) = $anvil->Striker->get_peer_data({target => 10.255.1.218, password => "Initial1"}); |
||||||
|
if ($connected) |
||||||
|
{ |
||||||
|
print "Hostname: [".$data->{host_name}."], host UUID: [".$data->{host_uuid}."]\n"; |
||||||
|
} |
||||||
|
|
||||||
|
Parameters; |
||||||
|
|
||||||
|
=head3 password (required) |
||||||
|
|
||||||
|
This is the target machine's C<< root >> password. |
||||||
|
|
||||||
|
=head3 port (optional, default 22) |
||||||
|
|
||||||
|
This is the TCP port to use when connecting to the target |
||||||
|
|
||||||
|
=head3 target (required, IPv4 address) |
||||||
|
|
||||||
|
This is the current IP address of the target machine. |
||||||
|
|
||||||
|
=cut |
||||||
|
sub get_peer_data |
||||||
|
{ |
||||||
|
my $self = shift; |
||||||
|
my $parameter = shift; |
||||||
|
my $anvil = $self->parent; |
||||||
|
my $debug = defined $parameter->{debug} ? $parameter->{debug} : 3; |
||||||
|
$anvil->Log->entry({source => $THIS_FILE, line => __LINE__, level => $debug, key => "log_0125", variables => { method => "Striker->get_peer_data()" }}); |
||||||
|
|
||||||
|
my $target = defined $parameter->{target} ? $parameter->{target} : ""; |
||||||
|
my $password = defined $parameter->{password} ? $parameter->{password} : ""; |
||||||
|
my $port = defined $parameter->{port} ? $parameter->{port} : 22; |
||||||
|
$anvil->Log->variables({source => $THIS_FILE, line => __LINE__, level => $debug, list => { |
||||||
|
target => $target, |
||||||
|
password => $anvil->Log->is_secure($password), |
||||||
|
port => $port, |
||||||
|
}}); |
||||||
|
|
||||||
|
# Store the password. |
||||||
|
my $connected = 0; |
||||||
|
my $data = { |
||||||
|
host_uuid => "", |
||||||
|
host_name => "", |
||||||
|
host_os => "", |
||||||
|
os_registered => "", |
||||||
|
}; |
||||||
|
|
||||||
|
if (not $target) |
||||||
|
{ |
||||||
|
# No target... |
||||||
|
$anvil->Log->entry({source => $THIS_FILE, line => __LINE__, level => 0, priority => "err", key => "log_0020", variables => { method => "Striker->get_peer_data()", parameter => "target" }}); |
||||||
|
return($connected, $data); |
||||||
|
} |
||||||
|
|
||||||
|
my $state_uuid = $anvil->Database->insert_or_update_states({ |
||||||
|
debug => $debug, |
||||||
|
file => $THIS_FILE, |
||||||
|
line => __LINE__, |
||||||
|
state_name => "peer::".$target."::password", |
||||||
|
state_note => $password, |
||||||
|
uuid => $anvil->data->{sys}{host_uuid}, # Only write to our DB, no reason to store elsewhere |
||||||
|
}); |
||||||
|
$anvil->Log->variables({source => $THIS_FILE, line => __LINE__, level => $debug, list => { state_uuid => $state_uuid }}); |
||||||
|
my ($output, $error, $return_code) = $anvil->System->call({ |
||||||
|
debug => $debug, |
||||||
|
shell_call => $anvil->data->{path}{exe}{'call_striker-get-peer-data'}." --target root\@".$target.":".$port." --state-uuid ".$state_uuid, |
||||||
|
}); |
||||||
|
$anvil->Log->variables({source => $THIS_FILE, line => __LINE__, level => 2, list => { |
||||||
|
output => $output, |
||||||
|
error => $error, |
||||||
|
return_code => $return_code, |
||||||
|
}}); |
||||||
|
|
||||||
|
# Pull out the details |
||||||
|
foreach my $line (split/\n/, $output) |
||||||
|
{ |
||||||
|
$anvil->Log->variables({source => $THIS_FILE, line => __LINE__, level => 2, list => { line => $line }}); |
||||||
|
if ($line =~ /connected=(.*)$/) |
||||||
|
{ |
||||||
|
# We collect this, but apparently not for any real reason... |
||||||
|
$connected = $1; |
||||||
|
$anvil->Log->variables({source => $THIS_FILE, line => __LINE__, level => 2, list => { connected => $connected }}); |
||||||
|
} |
||||||
|
if ($line =~ /host_name=(.*)$/) |
||||||
|
{ |
||||||
|
# We collect this, but apparently not for any real reason... |
||||||
|
$data->{host_name} = $1; |
||||||
|
$anvil->Log->variables({source => $THIS_FILE, line => __LINE__, level => 2, list => { 'data->{host_name}' => $data->{host_name} }}); |
||||||
|
} |
||||||
|
if ($line =~ /host_uuid=(.*)$/) |
||||||
|
{ |
||||||
|
$data->{host_uuid} = $1; |
||||||
|
$anvil->Log->variables({source => $THIS_FILE, line => __LINE__, level => 2, list => { 'data->{host_uuid}' => $data->{host_uuid} }}); |
||||||
|
} |
||||||
|
if ($line =~ /host_os=(.*)$/) |
||||||
|
{ |
||||||
|
$data->{host_os} = $1; |
||||||
|
$anvil->Log->variables({source => $THIS_FILE, line => __LINE__, level => 2, list => { 'data->{host_os}' => $data->{host_os} }}); |
||||||
|
} |
||||||
|
if ($line =~ /os_registered=(.*)$/) |
||||||
|
{ |
||||||
|
$data->{os_registered} = $1; |
||||||
|
$anvil->Log->variables({source => $THIS_FILE, line => __LINE__, level => 2, list => { 'data->{os_registered}' => $data->{os_registered} }}); |
||||||
|
} |
||||||
|
} |
||||||
|
$anvil->Log->variables({source => $THIS_FILE, line => __LINE__, level => 2, list => { |
||||||
|
connected => $connected, |
||||||
|
'data->{host_name}' => $data->{host_name}, |
||||||
|
'data->{host_uuid}' => $data->{host_uuid}, |
||||||
|
'data->{host_os}' => $data->{host_os}, |
||||||
|
'data->{os_registered}' => $data->{os_registered}, |
||||||
|
}}); |
||||||
|
|
||||||
|
# Make sure the database entry is gone (striker-get-peer-data should have removed it, but lets be safe). |
||||||
|
my $query = "DELETE FROM states WHERE state_name = ".$anvil->Database->quote("peer::".$target."::password").";"; |
||||||
|
$anvil->Database->write({uuid => $anvil->data->{sys}{host_uuid}, debug => 3, query => $query, source => $THIS_FILE, line => __LINE__}); |
||||||
|
|
||||||
|
if (not $anvil->Validate->is_uuid({uuid => $data->{host_uuid}})) |
||||||
|
{ |
||||||
|
$data->{host_uuid} = ""; |
||||||
|
} |
||||||
|
|
||||||
|
return($connected, $data); |
||||||
|
} |
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
1; |
||||||
|
After Width: | Height: | Size: 25 KiB |
@ -0,0 +1,51 @@ |
|||||||
|
#!/usr/bin/perl |
||||||
|
# |
||||||
|
# This program is setuid 'admin' and calls a (new) peer to read its hostname and system UUID. It takes the |
||||||
|
# target's password in via a file. |
||||||
|
# |
||||||
|
# Exit codes; |
||||||
|
# 0 = Normal exit. |
||||||
|
# 1 = No database connection. |
||||||
|
# 2 = Password not found in the database. |
||||||
|
# 3 = Peer not accessible |
||||||
|
# 4 = Unable to find the peer's host UUID |
||||||
|
# 5 = |
||||||
|
# |
||||||
|
|
||||||
|
use strict; |
||||||
|
use warnings; |
||||||
|
use Anvil::Tools; |
||||||
|
|
||||||
|
my $THIS_FILE = ($0 =~ /^.*\/(.*)$/)[0]; |
||||||
|
my $running_directory = ($0 =~ /^(.*?)\/$THIS_FILE$/)[0]; |
||||||
|
if (($running_directory =~ /^\./) && ($ENV{PWD})) |
||||||
|
{ |
||||||
|
$running_directory =~ s/^\./$ENV{PWD}/; |
||||||
|
} |
||||||
|
|
||||||
|
# Turn off buffering so that the pinwheel will display while waiting for the SSH call(s) to complete. |
||||||
|
$| = 1; |
||||||
|
|
||||||
|
my $anvil = Anvil::Tools->new(); |
||||||
|
$anvil->Log->level({set => 2}); |
||||||
|
$anvil->Log->secure({set => 1}); |
||||||
|
$anvil->Log->entry({source => $THIS_FILE, line => __LINE__, level => 2, secure => 0, key => "log_0115", variables => { program => $THIS_FILE }}); |
||||||
|
|
||||||
|
# Read switches (target ([user@]host[:port]) and the file with the target's password. |
||||||
|
$anvil->data->{switches}{target} = ""; |
||||||
|
$anvil->data->{switches}{'state-uuid'} = ""; |
||||||
|
$anvil->Get->switches; |
||||||
|
$anvil->Log->variables({source => $THIS_FILE, line => __LINE__, level => 2, list => { |
||||||
|
'switches::target' => $anvil->data->{switches}{target}, |
||||||
|
'switches::state-uuid' => $anvil->data->{switches}{'state-uuid'}, |
||||||
|
}}); |
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
$anvil->nice_exit({code => 0}); |
||||||
|
|
||||||
|
|
||||||
|
############################################################################################################# |
||||||
|
# Functions # |
||||||
|
############################################################################################################# |
||||||
Loading…
Reference in new issue