o

-�_g�%�@sNdd
lZdd
l
Z
dd
lZddlmZmZmZ
ddlmZ
Gdd�dee�Z	d
S)�N)�Plugin�RedHatPlugin�	PluginOpt)
�
is_executablec@sheZ
dZd
ZdZdZdZejej	dd�Z
dZedd	d
d�eded
d�edddd�gZ
dd�Zdd�ZdS)�OvirtzoVirt Engine�ovirt)
�virt)
�ovirt-enginezovirt-engine-dwhzovirt-engine-reportszovirt-engine-metricszovirt-engine-setupzovirt-vmconsolezovirt-scheduler-proxy�rhevmz	rhevm-dwhz
rhevm-reportsz}^/etc/
        (rhevm|ovirt-engine|ovirt-engine-dwh)/
        (engine.conf|ovirt-engine-dwhd.conf)
        (\.d/.+.conf.*?)?$)�flags�patternzcENGINE_DB_PASSWORD:ENGINE_PKI_TRUST_STORE_PASSWORD:ENGINE_PKI_ENGINE_STORE_PASSWORD:DWH_DB_PASSWORD�
jbosstraceTz0Enable oVirt Engine JBoss stack trace collection)�default�desc�sensitive-keysz.Sensitive keys to be masked in post-processing�heapdumpFz3Collect heap dumps from /var/log/ovirt-engine/dump/c
	s�
|�d
�
rO|�
d�
rOd}
d|
�d�}|�|�
}dd�|d��D�
}|s/|j�d	�

|�d	�

|D]}z	t�|t	j
�
Wq1tyN


|j�d
|���

Yq1w|�ddg�

|�d
�
se|�d�

|�
d�

gd�
}ddg}|�ddg�

|�dd�|D�
�

|�dd�|D�
�

d}d}	d�t|�
r�|�|�d��

t|	�
r�|�|	�d��

td�
r�gd�
}
|��f
dd�|
D�
�

|�gd�
�

|�dd d!d"��

|�d#d$g�

|�d%d&g�

dS)'Nr
r	z)^ovirt-engine\ -server.*jboss-modules.jarz
pgrep -f '�
'c
Ssg|]}
t|
�
�qS�)
�int��.0�
xrr�:/usr/lib/python3/dist-packages/sos/report/plugins/ovirt.py�
<listcomp>G�zOvirt.setup.<locals>.<listcomp>�outputzUnable to get ovirt-engine pidzUnable to send signal to z/etc/ovirt-engine/.pgpassz/etc/rhevm/.pgpassrz/var/log/ovirt-engine/dumpz/var/log/ovirt-engine/dump/)z/etc/pki/ovirt-engine/ca.pemz#/etc/pki/ovirt-engine/apache-ca.pemz&/etc/pki/ovirt-engine/certs/engine.cerz&/etc/pki/ovirt-engine/certs/apache.cerz//etc/pki/ovirt-engine/certs/websocket-proxy.cerz%/etc/pki/ovirt-engine/certs/jboss.cerz-/etc/pki/ovirt-engine/certs/imageio-proxy.cerz2/etc/pki/ovirt-engine/certs/ovirt-provider-ovn.cer)�mypass�!/etc/pki/ovirt-engine/.truststore)�changeit�)/var/lib/ovirt-engine/external_truststorezengine-config --allzengine-config -dc
Ssg|]}
d|
�d
��qS)zopenssl x509 -in z
 -text -nooutr)r�
crrrrrs�c
Ss g|]\}
}d|
�d
|���qS)zkeytool -list -storepass z -rfc -keystore r)r�
pr rrrrws��zengine-manage-domainszovirt-engine-extensions-toolzovirt-aaa-jdbc-toolz listz info list-extensions)zquery --what=userzquery --what=groupz
settings showc
sg|]	}
��d|
���qS)
�
 r)r�sc�
�	jdbc_toolrrr�s)�/etc/ovirt-enginez/etc/rhevm/z/etc/ovirt-engine-dwhz/etc/ovirt-engine-reportsz/etc/ovirt-engine-metricsz/etc/ovirt-engine-setupz/etc/ovirt-vmconsolez/var/log/ovirt-enginez/var/log/ovirt-engine-dwhz/var/log/ovirt-engine-reportsz/var/log/ovirt-scheduler-proxyz/var/log/rhevmz/etc/sysconfig/ovirt-enginez/usr/share/ovirt-engine/confz/var/log/ovirt-guest-agentz'/var/lib/ovirt-engine/setup-history.txtz#/var/lib/ovirt-engine/setup/answersrz/var/tmp/ovirt-engine/configz*/var/lib/ovirt-engine/jboss_runtime/configz2/var/lib/ovirt-engine-reports/jboss_runtime/config�ovirt_engine_confd�ovirt_engine_boot_log�ovirt_engine_console_log)z"/etc/ovirt-engine/engine.conf.d/.*z/var/log/ovirt-engine/boot.logz!/var/log/ovirt-engine/console.logz/etc/pki/ovirt-engine/keysz/etc/pki/ovirt-engine/privatez/etc/pki/ovirt-engine/r)�
get_option�is_installed�exec_cmd�
splitlines�soslog�error�	add_alert�os�kill�signal�SIGQUIT�OSError�add_forbidden_path�add_dir_listing�add_cmd_outputr�
add_copy_spec�
add_file_tags)�self�engine_pattern�pgrep�res�engine_pids�pid�certificates�	keystores�manage_domains�extensions_tool�subcmdsrr$r�setupBsv













�

�





��
�
�






�


�


�zOvirt.setupc

Cs
d
D]	}
|�|
dd�
qd}|D]}|�d|��dd�
q|�dd	d�
gd
�
}|D]}|�
d|�}|�|dd�
q*|j}|�d
�
}|rJ|du
rJ|}dd�|�d�
D�
}	|�|jdd�|	�
�d�d�
dD]
}
|�dd|
�d�d�
qegd�
}dd�|�
�d�}|�d|d�
dS) z+
        Obfuscate sensitive keys.
        )z8/etc/ovirt-engine/engine-config/engine-config.propertiesz//etc/rhevm/rhevm-config/rhevm-config.propertiesz(Password.type)=(.*)z\1=********)zovirt-engine.xmlz0ovirt-engine_history/current/ovirt-engine.v1.xmlz*ovirt-engine_history/ovirt-engine.boot.xmlz-ovirt-engine_history/ovirt-engine.initial.xmlz*ovirt-engine_history/ovirt-engine.last.xmlz/var/tmp/ovirt-engine/config/z(<password>)(.*)(</password>)z\1********\3z*/etc/ovirt-engine/redhatsupportplugin.confz(proxyPassword)=(.*))zlogcollector.confzimageuploader.confzisouploader.confr&z(passwd|pg-pass)=(.*)rTc
Ssg|]}
|
r|
�qSrrrrrrr�rz"Ovirt.postproc.<locals>.<listcomp>�
:�
(�
|z)=(.*))�password�OVESETUP_CONFIG_ADMIN_SETUPz&/var/lib/ovirt-engine/setup/answers/.*z
(?P<key>[^=]*z	[^=]*)=.*z\g<key>=********)z
vars.passwordz!pool.default.auth.simple.passwordz$pool.default.ssl.truststore.passwordzconfig.datasource.dbpasswordz(^\s*#*(z
)\s*=\s*)(.*)z$/etc/ovirt-engine/aaa/.*\.propertiesz\1*********N)�do_file_sub�	path_join�DEFAULT_SENSITIVE_KEYSr*�split�do_path_regex_sub�
DB_PASS_FILES�join)
r;�pro�engine_files�filename�passwd_files�	conf_file�	conf_path�sensitive_keys�keys_opt�key_list�item�protect_keys�regexprrr�postproc�s^


�



�


�




�







�



�
�zOvirt.postprocN)�__name__�
__module__�__qualname__�
short_desc�plugin_name�profiles�packages�re�compile�VERBOSErQrNr�option_listrFr_rrrrrs.



�	�
�
�
��	yr)
r1rgr3�sos.report.pluginsrrr�
sos.utilitiesrrrrrr�<module>
s