a

^��cr'�@sNdd
lZdd
l
Z
dd
lZddlmZmZmZ
ddlmZ
Gdd�dee�Z	d
S)�N)�Plugin�RedHatPlugin�	PluginOpt)
�
is_executablec@sheZ
dZd
ZdZdZdZejej	dd�Z
dZedd	d
d�eded
d�edddd�gZ
dd�Zdd�ZdS)�OvirtzoVirt EngineZovirt)
Zvirt)
�ovirt-enginezovirt-engine-dwhzovirt-engine-reportszovirt-engine-metricszovirt-engine-setupzovirt-vmconsolezovirt-scheduler-proxyZrhevmz	rhevm-dwhz
rhevm-reportsz}^/etc/
        (rhevm|ovirt-engine|ovirt-engine-dwh)/
        (engine.conf|ovirt-engine-dwhd.conf)
        (\.d/.+.conf.*?)?$)�flags�patternzcENGINE_DB_PASSWORD:ENGINE_PKI_TRUST_STORE_PASSWORD:ENGINE_PKI_ENGINE_STORE_PASSWORD:DWH_DB_PASSWORD�
jbosstraceTz0Enable oVirt Engine JBoss stack trace collection)�defaultZdesc�sensitive_keysz.Sensitive keys to be masked in post-processing�heapdumpFz3Collect heap dumps from /var/log/ovirt-engine/dump/c
s�
|�d
�
r�|�
d�
r�d}
d|
}|�|�
}dd�|d��D�
}|sZ|j�d�

|�d�

|D]N}zt�|t	j
�
Wq^ty�
}
z|j�d	||�
WYd}~q^d}~00q^|�d
dg�

|�d�
s�|�d
�

|�
d�

gd�
}ddg}|�
ddg�

|�
dd�|D�
�

|�
dd�|D�
�

d}	d}
d�t|	�
�
rD|�
d|	�

t|
�
�
r\|�
d|
�

td�
�
r�gd�
}|�
�f
dd�|D�
�

|�gd�
�

|�ddd d!��

|�d"d#g�

|�d$d%g�

dS)&Nr
rz)^ovirt-engine\ -server.*jboss-modules.jarz
pgrep -f '%s'c
Ssg|]}
t|
�
�qS�)
�int��.0�
xrr�</usr/lib/python3.9/site-packages/sos/report/plugins/ovirt.py�
<listcomp>G�zOvirt.setup.<locals>.<listcomp>�outputzUnable to get ovirt-engine pidzUnable to send signal to %dz/etc/ovirt-engine/.pgpassz/etc/rhevm/.pgpassr
z/var/log/ovirt-engine/dumpz!ls -l /var/log/ovirt-engine/dump/)z/etc/pki/ovirt-engine/ca.pemz#/etc/pki/ovirt-engine/apache-ca.pemz&/etc/pki/ovirt-engine/certs/engine.cerz&/etc/pki/ovirt-engine/certs/apache.cerz//etc/pki/ovirt-engine/certs/websocket-proxy.cerz%/etc/pki/ovirt-engine/certs/jboss.cerz-/etc/pki/ovirt-engine/certs/imageio-proxy.cerz2/etc/pki/ovirt-engine/certs/ovirt-provider-ovn.cer)Zmypass�!/etc/pki/ovirt-engine/.truststore)Zchangeit�)/var/lib/ovirt-engine/external_truststorezengine-config --allzengine-config -dc
Ssg|]}
d|
�qS)
z openssl x509 -in %s -text -nooutr)r�
crrrrrsc
Ssg|]\}
}d|
|f�qS)
z-keytool -list -storepass %s -rfc -keystore %sr)r�
prrrrrws�
�zengine-manage-domainszovirt-engine-extensions-toolzovirt-aaa-jdbc-toolz%s listz%s info list-extensions)zquery --what=userzquery --what=groupz
settings showc
sg|]}
d�|
f�qS)
z%s %sr)rZsc�
Z	jdbc_toolrrr�r)�/etc/ovirt-enginez/etc/rhevm/z/etc/ovirt-engine-dwhz/etc/ovirt-engine-reportsz/etc/ovirt-engine-metricsz/etc/ovirt-engine-setupz/etc/ovirt-vmconsolez/var/log/ovirt-enginez/var/log/ovirt-engine-dwhz/var/log/ovirt-engine-reportsz/var/log/ovirt-scheduler-proxyz/var/log/rhevmz/etc/sysconfig/ovirt-enginez/usr/share/ovirt-engine/confz/var/log/ovirt-guest-agentz'/var/lib/ovirt-engine/setup-history.txtz#/var/lib/ovirt-engine/setup/answersrz/var/tmp/ovirt-engine/configz*/var/lib/ovirt-engine/jboss_runtime/configz2/var/lib/ovirt-engine-reports/jboss_runtime/configZovirt_engine_confdZovirt_engine_boot_logZovirt_engine_console_log)z"/etc/ovirt-engine/engine.conf.d/.*z/var/log/ovirt-engine/boot.logz!/var/log/ovirt-engine/console.logz/etc/pki/ovirt-engine/keysz/etc/pki/ovirt-engine/privatez/etc/pki/ovirt-engine/r)�
get_optionZis_installedZexec_cmd�
splitlinesZsoslog�errorZ	add_alert�os�kill�signal�SIGQUIT�OSErrorZadd_forbidden_pathZadd_cmd_outputrZ
add_copy_specZ
add_file_tags)�selfZengine_patternZpgrep�
rZengine_pids�pid�
eZcertificatesZ	keystoresZmanage_domainsZextensions_toolZsubcmdsrrr�setupBst













*

�





��
�
�









�


�

�zOvirt.setupc

Cs6
|�d
dd�
|�ddd�
d}
|
D]}|�d|dd�
q$|�d	d
d�
gd�
}|D],}|�
d
|�}|�|dd�
|�|dd�
qV|j}|�d�
}|r�|du
r�|}dd�|�d�
D�
}|D]$}	|�|jdj|	d�
dj|	d�
�
q�dD]&}
|�dtj	dj|
d�
tj
d�d�
q�gd �
}d!d"�|�
}|�d#|d$�
d%S)&z+
        Obfuscate sensitive keys.
        z8/etc/ovirt-engine/engine-config/engine-config.propertieszPassword.type=(.*)zPassword.type=********z//etc/rhevm/rhevm-config/rhevm-config.properties)zovirt-engine.xmlz0ovirt-engine_history/current/ovirt-engine.v1.xmlz*ovirt-engine_history/ovirt-engine.boot.xmlz-ovirt-engine_history/ovirt-engine.initial.xmlz*ovirt-engine_history/ovirt-engine.last.xmlz/var/tmp/ovirt-engine/config/%sz<password>(.*)</password>z<password>********</password>z*/etc/ovirt-engine/redhatsupportplugin.confzproxyPassword=(.*)zproxyPassword=********)zlogcollector.confzimageuploader.confzisouploader.confrzpasswd=(.*)zpasswd=********zpg-pass=(.*)zpg-pass=********rTc
Ssg|]}
|
r|
�qSrrrrrrr�rz"Ovirt.postproc.<locals>.<listcomp>�
:z
{key}=(.*))
�keyz{key}=********)�passwordZOVESETUP_CONFIG_ADMIN_SETUPz&/var/lib/ovirt-engine/setup/answers/.*z(?P<key>[^=]*{item}[^=]*)=.*)
�item)
rz\g<key>=********)z
vars.passwordz!pool.default.auth.simple.passwordz$pool.default.ssl.truststore.passwordzconfig.datasource.dbpasswordz((?m)^\s*#*(%s)\s*=\s*)(.*)�
|z$/etc/ovirt-engine/aaa/.*\.propertiesz\1*********N)Zdo_file_subZ	path_join�DEFAULT_SENSITIVE_KEYSr�splitZdo_path_regex_sub�
DB_PASS_FILES�format�re�compile�
IGNORECASE�join)
r%Zengine_files�filenameZpasswd_filesZ	conf_fileZ	conf_pathrZkeys_optZkey_listr+r-Zprotect_keysZregexprrr�postproc�sx


�


�



�


�




�


�










�




��

�zOvirt.postprocN)�__name__�
__module__�__qualname__Z
short_descZplugin_nameZprofilesZpackagesr3r4�VERBOSEr1r/rZoption_listr)r8rrrrrs,



�	�
�
�
��	yr)
r r3r"Zsos.report.pluginsrrrZ
sos.utilitiesrrrrrr�<module>s