sshpublickeys.py

# Copyright 2012 Cloudbase Solutions Srl
#
#    Licensed under the Apache License, Version 2.0 (the "License"); you may
#    not use this file except in compliance with the License. You may obtain
#    a copy of the License at
#
#         http://www.apache.org/licenses/LICENSE-2.0
#
#    Unless required by applicable law or agreed to in writing, software
#    distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
#    WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
#    License for the specific language governing permissions and limitations
#    under the License.

import os

from oslo_log import log as oslo_logging

from cloudbaseinit import conf as cloudbaseinit_conf
from cloudbaseinit import exception
from cloudbaseinit.osutils import factory as osutils_factory
from cloudbaseinit.plugins.common import base


CONF = cloudbaseinit_conf.CONF
LOG = oslo_logging.getLogger(__name__)

# The default Win32-OpenSSH config assumes that the built-in Administrators
# group with SID S-1-5-32-544 does not have an internationalized name.
ADMINISTRATORS = "Administrators"


class SetUserSSHPublicKeysPlugin(base.BasePlugin):

    def execute(self, service, shared_data):
        public_keys = service.get_public_keys()
        if not public_keys:
            LOG.debug('Public keys not found in metadata')
            return base.PLUGIN_EXECUTION_DONE, False

        username = service.get_admin_username() or CONF.username

        osutils = osutils_factory.get_os_utils()
        user_home = osutils.get_user_home(username)

        if not user_home:
            raise exception.CloudbaseInitException("User profile not found!")

        LOG.debug("User home: %s" % user_home)

        user_ssh_dir = os.path.join(user_home, '.ssh')
        if not os.path.exists(user_ssh_dir):
            os.makedirs(user_ssh_dir)

        authorized_keys_path = os.path.join(user_ssh_dir, "authorized_keys")
        authorized_keys_files = [authorized_keys_path]

        admin_membership_conditions = (
            osutils.group_exists(ADMINISTRATORS),
            ADMINISTRATORS in CONF.groups
        )

        if all(admin_membership_conditions):
            program_data_dir = os.getenv("PROGRAMDATA", "C:\ProgramData")
            LOG.debug("Program Data: %s" % program_data_dir)

            program_data_ssh_dir = os.path.join(program_data_dir, "ssh")
            if not os.path.exists(program_data_ssh_dir):
                os.makedirs(program_data_ssh_dir)

            administrators_authorized_keys_path = os.path.join(
                program_data_ssh_dir, "administrators_authorized_keys"
            )
            authorized_keys_files.append(administrators_authorized_keys_path)

        for filepath in authorized_keys_files:
            LOG.info("Writing SSH public keys in: %s" % filepath)
            with open(filepath, 'w') as f:
                for public_key in public_keys:
                    # All public keys are space-stripped.
                    f.write(public_key + "\n")

        return base.PLUGIN_EXECUTION_DONE, False