| #!/bin/bash |
| # |
| # Init file for Password Download Client |
| # |
| # chkconfig: 345 98 02 |
| # description: Password Download Client |
| |
| # Licensed to the Apache Software Foundation (ASF) under one |
| # or more contributor license agreements. See the NOTICE file |
| # distributed with this work for additional information |
| # regarding copyright ownership. The ASF licenses this file |
| # to you under the Apache License, Version 2.0 (the |
| # "License"); you may not use this file except in compliance |
| # with the License. You may obtain a copy of the License at |
| # |
| # http://www.apache.org/licenses/LICENSE-2.0 |
| # |
| # Unless required by applicable law or agreed to in writing, |
| # software distributed under the License is distributed on an |
| # "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY |
| # KIND, either express or implied. See the License for the |
| # specific language governing permissions and limitations |
| # under the License. |
| |
| |
| # Modify this line to specify the user (default is root) |
| user=root |
| |
| mountdir=$(mktemp -d) |
| |
| # If lable name is other than config, please change the below line as required |
| DefaultDisk=/dev/disk/by-label/config-2 |
| |
| |
| Password_File=$mountdir/cloudstack/password/vm_password.txt |
| password_received=0 |
| |
| function prepare_mount |
| { |
| if [ ! -e $mountdir ]; then |
| mkdir $mountdir |
| chmod 700 $mountdir |
| fi |
| |
| if [ -e $DefaultDisk ]; then |
| Disk=$DefaultDisk |
| else |
| BLOCK_DEVICE=$(blkid -t LABEL='config' /dev/hd? /dev/sd? /dev/xvd? /dev/vd? -o device) |
| if [ -n $BLOCK_DEVICE ]; then |
| Disk=$BLOCK_DEVICE |
| else |
| logger -t "cloud" "Unable to set password to VM: Config drive not found" |
| exit 1 |
| fi |
| fi |
| |
| mount -r $Disk $mountdir |
| if [ $? -ne 0 ]; then |
| echo "Failed mounting $Disk to /mnt/configdrive" |
| exit 1 |
| fi |
| } |
| |
| function remove_mount |
| { |
| umount $mountdir |
| } |
| |
| prepare_mount |
| |
| |
| if [ -f $Password_File ] |
| then |
| password=$(cat $Password_File) |
| password=$(echo $password | tr -d '\r') |
| remove_mount |
| |
| case $password in |
| |
| "") logger -t "cloud" "Config drive did not have any password for the VM" |
| exit 0 |
| ;; |
| |
| "saved_password") logger -t "cloud" "VM has already saved a password" |
| exit 0 |
| ;; |
| |
| *) logger -t "cloud" "VM got a valid password" |
| password_received=1 |
| ;; |
| esac |
| else |
| remove_mount |
| logger -t "cloud" "Password set failed on VM: password file not found in config drive" |
| exit 0 |
| fi |
| |
| if [ "$password_received" = "1" ]; then |
| |
| newmd5sum=$(echo $password | md5sum | awk '{print $1}') |
| if [ -f /var/vmpasswordmd5sum ] |
| then |
| oldsum=$(cat /var/vmpasswordmd5sum) |
| |
| if [ "$newmd5sum" == "$oldsum" ] |
| then |
| logger -t "cloud" "There is no update of VM password from cloudstack, returning true" |
| exit 0 |
| fi |
| fi |
| |
| logger -t "cloud" "Changing password ..." |
| echo $user:$password | chpasswd |
| |
| if [ $? -gt 0 ] |
| then |
| usermod -p `mkpasswd -m SHA-512 $password` $user |
| |
| if [ $? -gt 0 ] |
| then |
| logger -t "cloud" "Failed to change password for user $user" |
| exit 1 |
| else |
| logger -t "cloud" "Successfully changed password for user $user" |
| fi |
| fi |
| fi |
| |
| echo $newmd5sum > /var/vmpasswordmd5sum |
| exit 0 |