scripts/vm/systemvm/injectkeys.py

#!/bin/bash
# Licensed to the Apache Software Foundation (ASF) under one
# or more contributor license agreements.  See the NOTICE file
# distributed with this work for additional information
# regarding copyright ownership.  The ASF licenses this file
# to you under the Apache License, Version 2.0 (the
# "License"); you may not use this file except in compliance
# with the License.  You may obtain a copy of the License at
#
#   http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing,
# software distributed under the License is distributed on an
# "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
# KIND, either express or implied.  See the License for the
# specific language governing permissions and limitations
# under the License.


# Copies keys that enable SSH communication with system vms
# $1 = new public key
# $2 = new private key
'''
All imports go here...
'''
import os
import shutil
import os.path
import sys
import subprocess
import commands
import traceback
import filecmp
import tempfile

pathSep=os.sep
TMP=tempfile.gettempdir() + os.sep + "tmp"	#Get Home Directory
print("Temp Directory is : %s" % TMP)
MOUNTPATH=TMP + pathSep + "systemvm_mnt"
TMPDIR=TMP + pathSep + "cloud" + pathSep + "systemvm"
osType=os.name

os.makedirs(TMP)
os.makedirs(MOUNTPATH)
os.makedirs(TMPDIR)

def clean_up():
	shutil.rmtree(TMP)
	#$SUDO umount $MOUNTPATH

def inject_into_iso(pubKey,systemiso):
	isofile=systemvmpath
	newpubkey=pubKey
	backup=isofile + ".bak"
	tmpiso=TMP + pathSep + systemiso
	if not os.path.exists(isofile):
		print("Could not open %s" % isofile)
		clean_up()
		sys.exit(IOError)
	command = "7z x -y " + isofile + " -o" + MOUNTPATH
	status = os.system(command)
	if status != 0:
		print ("Failed to mount original iso %" % isofile)
		clean_up()
		sys.exit(status)
	pubKeyFileOld=open(MOUNTPATH + pathSep + "authorized_keys", 'r')
	pubKeyFileNew=open(newpubkey, 'r')
	for line1 in pubKeyFileOld:
		for line2 in pubKeyFileNew:
			if line1 == line2:
				pubKeyFileOld.close()
				pubKeyFileNew.close()
				return 0
	pubKeyFileOld.close()
	pubKeyFileNew.close()
	try:
		shutil.copy(isofile, backup)
	except:
		print("Failed to backup original iso %" % isofile)
		clean_up()
		sys.exit(IOError)
	shutil.rmtree(TMPDIR)
	try :
		shutil.copytree(MOUNTPATH, TMPDIR)
	except :
		print ("Failed to copy from original iso %s to %s" % (MOUNTPATH, TMPDIR))
		clean_up()
		sys.exit(IOError)
	try :
		shutil.copyfile(newpubkey, TMPDIR + pathSep + "authorized_keys")
	except :
		print ("Failed to copy key %s from original iso to new iso" % newpubkey)
		traceback.print_exc(file=sys.stdout)
		clean_up()
		sys.exit(IOError)
	command = "mkisofs -quiet -r -o " + tmpiso + " " + TMPDIR
	try :
		status = os.system(command)
	except :
		print("Failed to create new iso %s from %s" % (tmpiso, TMPDIR))
		clean_up()
		sys.exit(IOError)
	shutil.rmtree(MOUNTPATH)
	try :
		shutil.copyfile(tmpiso, isofile)
	except :
		print ("Failed to overwrite old iso %s with %s" % (isofile,tmpiso))
		traceback.print_exc(file=sys.stdout)
		clean_up()
		sys.exit(IOError)
	shutil.rmtree(TMPDIR)

def copy_priv_key(newKey):
	currDir = os.path.dirname(os.path.abspath(__file__))
	if filecmp.cmp(currDir + pathSep + "id_rsa.cloud", newKey):
		return 0
	print ("Copying new private key file as it is not matching with old file")
	shutil.copyfile(newKey, currDir + pathSep + "id_rsa.cloud")
	os.chmod(currDir + pathSep + "id_rsa.cloud", 0644)
	return 0

if len(sys.argv) != 4:
	print("Usage: injectkeys.py <new public key file> <new private key file> <systemvm iso path>")
	clean_up()
	sys.exit(None)
newpubkey=sys.argv[1]
newprivkey=sys.argv[2]
systemvmpath=sys.argv[3]

if not os.path.exists(newpubkey):
	print("Could not open %s" % newpubkey)
	clean_up()
	sys.exit(IOError)
if not os.path.exists(newprivkey):
	print("Could not open %s" % newprivkey)
	clean_up()
	sys.exit(IOError)
#Verify all needed commands exists before calling
inject_into_iso(newpubkey,"systemvm.iso")

copy_priv_key(newprivkey)

clean_up()
#exit $?