
    x[h              
       (   U d Z ddlZddlZddlmZmZ ddlmZ ddlm	Z	 ddl
mZ ddlmZ dd	ged
gdZeed<    ej                   e      Z eg d      ZdZdZdZdefdZdefdZdedefdZdefdZdefdZdefdZd Z de!de	dededdf
dZ"y) 	Wireguard    N)subputil)Cloud)Config)
MetaSchema)PER_INSTANCEcc_wireguardubuntu	wireguard)iddistros	frequencyactivate_by_schema_keysmeta)nameconfig_pathcontenti  
)      wg_intc                    g }t         j                  t        | j                                     }|r.dj	                  t        |            }|j                  d|        t        | j                               D ]=  \  }}|dk(  s|dk(  s|dk(  st        |t              r'|j                  d| d|        ? |r't        dt         t        j	                  |             y	)
aR  Validate user-provided wg:interfaces option values.

    This function supplements flexible jsonschema validation with specific
    value checks to aid in triage of invalid user-provided configuration.

    @param wg_int: Dict of configuration value under 'wg:interfaces'.

    @raises: ValueError describing invalid values provided.
    z, z%Missing required wg:interfaces keys: r   r   r   z$Expected a string for wg:interfaces:. Found z*Invalid wireguard interface configuration:N)REQUIRED_WG_INT_KEYS
differencesetkeysjoinsortedappenditems
isinstancestr
ValueErrorNL)r   errorsmissingr   keyvalues         ?/usr/lib/python3/dist-packages/cloudinit/config/cc_wireguard.pysupplemental_schema_validationr,      s     F"--c&++-.@AGyy)=dVDEV\\^, 
U&=C=0C94DeS):3%xwO 8RWWV_<MN
 	
     c           
         t         j                  d| d          	 t         j                  d| d          t        j                  | d   | d   t               y	# t
        $ r)}t        d| d    dt         t        |             |d	}~ww xY w)
zWriting user-provided configuration into Wireguard
    interface configuration file.

    @param wg_int: Dict of configuration value under 'wg:interfaces'.

    @raises: RuntimeError for issues writing of configuration file.
    z"Configuring Wireguard interface %sr   z#Writing wireguard config to file %sr   r   )modez-Failure writing Wireguard configuration file :N)	LOGdebugr   
write_fileWG_CONFIG_FILE_MODE	ExceptionRuntimeErrorr&   r$   )r   es     r+   write_configr8   ;   s     II2F6NC			79NO=!6)#4;N	
  }%&atCF85
 	s   ;A 	B	 $BB	cloudc                 d   	 t         j                  d| d          |j                  j                  dd| d           t         j                  d| d          |j                  j                  dd| d           y# t        j
                  $ r#}t        dt         t        |             |d}~ww xY w)	zEnable and start Wireguard interface

    @param wg_int: Dict of configuration value under 'wg:interfaces'.

    @raises: RuntimeError for issues enabling WG interface.
    zEnabling wg-quick@%s at bootr   enablez	wg-quick@z!Bringing up interface wg-quick@%srestartz0Failed enabling/starting Wireguard interface(s):N)	r1   r2   distromanage_servicer   ProcessExecutionErrorr6   r&   r$   )r   r9   r7   s      r+   	enable_wgr@   P   s    		0&.A##H	&.9I.JK		5vf~F##I6&>:J/KL%% >rd3q6(K
	s   A6A9 9B/B**B/wg_readinessprobesc                     g }d}| D ]/  }t        |t              r|j                  d| d|        |dz  }1 |r't        dt         t        j                  |             y)zBasic validation of user-provided probes

    @param wg_readinessprobes: List of readinessprobe probe(s).

    @raises: ValueError of wrong datatype provided for probes.
    r   z(Expected a string for readinessprobe at r      z Invalid readinessProbe commands:N)r#   r$   r!   r%   r&   r   )rA   r'   poscs       r+   !readinessprobe_command_validationrF   b   s|     F
C !S!MM:3%xsK 1HC .rd2776?2CD
 	
 r-   c                 D   g }| D ]:  }	 t         j                  dt        |             t        j                  |dd       < |r't        dt         t        j                  |             y# t        j                  $ r }|j                  | d|        Y d}~d}~ww xY w)zExecute provided readiness probe(s)

    @param wg_readinessprobes: List of readinessprobe probe(s).

    @raises: ProcessExecutionError for issues during execution of probes.
    zRunning readinessprobe: '%s'Tcaptureshellz: Nz&Failed running readinessprobe command:)	r1   r2   r$   r   r?   r!   r6   r&   r   )rA   r'   rE   r7   s       r+   readinessproberK   x   s     F '	'II4c!f=IIaT2' 4RD8IJ
 	
  )) 	'MMQCr!+&&	's   7A,,B?BBc                    dg}t        j                  d      ryt        j                         t        k  r|j                  d       	 | j                  j                          	 | j                  j                  |       y# t        $ r t        j                  t        d        w xY w# t        $ r t        j                  t        d        w xY w)zInstall wireguard packages and tools

    @param cloud: Cloud object

    @raises: Exception for issues during package
    installation.
    zwireguard-toolswgNr   zPackage update failedz!Failed to install wireguard-tools)r   whichr   kernel_versionMIN_KERNEL_VERSIONr!   r=   update_package_sourcesr5   logexcr1   install_packages)r9   packagess     r+    maybe_install_wireguard_packagesrU      s     ""Hzz$ 11$++-%%h/	  C01
  C<=s   A> "B& >%B#&%Cc            	      ~   	 t        j                   ddd      } t        j                  d| j                  j	                               s.t
        j                  d       t        j                   ddd       yy# t         j                  $ r2}t        j                  t
        dt         t        |               d}~ww xY w)	zYLoad wireguard kernel module

    @raises: ProcessExecutionError for issues modprobe
    lsmodTrH   r   zLoading wireguard kernel modulezmodprobe wireguardz Could not load wireguard module:N)r   researchstdoutstripr1   r2   r?   r   rR   r&   r$   )outr7   s     r+   load_wireguard_kernel_moduler]      s    
iiT:yycjj&6&6&89II78II*DE : %% C;B4AxHIs   A3A7 7B<
-B77B<r   cfgargsreturnc                 j   d }d|v rt         j                  d       |d   }nt         j                  d|        y t        |       t                |d   D ]$  }t	        |       t        |       t        ||       & d|v r!|d   |d   }t        |       t        |       y t         j                  d       y )Nr   z!Found Wireguard section in configz<Skipping module named %s, no 'wireguard' configuration found
interfacesrK   z+Skipping readinessprobe - no checks defined)	r1   r2   rU   r]   r,   r8   r@   rF   rK   )r   r^   r9   r_   
wg_sectionr   rA   s          r+   handlerd      s    Jc		56%
		J	
 	 %U+ "\* !&v. 	V 	&% ! 	J&'(4'(89)*<=)*		?@r-   )#__doc__loggingrX   	cloudinitr   r   cloudinit.cloudr   cloudinit.configr   cloudinit.config.schemar   cloudinit.settingsr	   r   __annotations__	getLogger__name__r1   	frozensetr   r4   r&   rP   dictr,   r8   r@   listrF   rK   rU   r]   r$   rd    r-   r+   <module>rs      s      	   ! # . + z +}	j  g! !CD  	 
4 
: *d 5 $
$ 
,
t 
*E <$A $A6 $A% $At $A $Ar-   