Skip to content

Commit

Permalink
software: Implement of copying certificate/key files
Browse files Browse the repository at this point in the history
  • Loading branch information
@ish-hcc
ish-hcc committed Nov 8, 2024
1 parent c6a07a0 commit 3d7fe12
Show file tree
Hide file tree
Showing 2 changed files with 152 additions and 57 deletions.
204 changes: 147 additions & 57 deletions lib/software/configCopier.go
View file
Original file line number Diff line number Diff line change
Expand Up @@ -4,6 +4,8 @@ import (
"fmt"
"github.com/cloud-barista/cm-grasshopper/lib/ssh"
"github.com/jollaman999/utils/logger"
"path/filepath"
"regexp"
"strings"
)

Expand All @@ -16,29 +18,84 @@ func sudoWrapper(cmd string, password string) string {
return fmt.Sprintf("echo '%s' | sudo -S sh -c '%s'", password, strings.Replace(cmd, "'", "'\"'\"'", -1))
}

func copyConfigFiles(sourceClient *ssh.Client, targetClient *ssh.Client, configs []ConfigFile) error {
for _, config := range configs {
if config.Status == "" {
func findCertKeyPaths(client *ssh.Client, filePath string) ([]string, error) {
cmd := fmt.Sprintf(`
grep -i -E '(ssl|tls)_(certificate|key|trusted_certificate|client_certificate|dhparam)|key_file|cert_file|ca_file|private_key|public_key|certificate|keyfile|certfile|cafile' '%s' 2>/dev/null || true
`, filePath)

session, err := client.NewSession()
if err != nil {
return nil, err
}
defer func() {
_ = session.Close()
}()
output, err := session.CombinedOutput(sudoWrapper(cmd, client.SSHTarget.Password))
if err != nil {
return nil, err
}

paths := make([]string, 0)
seen := make(map[string]bool)

patterns := []*regexp.Regexp{
regexp.MustCompile(`(?mi)(?:ssl_certificate|tls_certificate|cert_file|certfile|certificate|cert)\s*(?:=|:|\s)\s*["']?(\/[^"'\s;]+|[^"'\s;]+)["']?`),
regexp.MustCompile(`(?mi)(?:ssl_certificate_key|tls_key|key_file|keyfile|private_key|key)\s*(?:=|:|\s)\s*["']?(\/[^"'\s;]+|[^"'\s;]+)["']?`),
regexp.MustCompile(`(?mi)(?:ssl_trusted_certificate|ssl_client_certificate|ca_file|cafile)\s*(?:=|:|\s)\s*["']?(\/[^"'\s;]+|[^"'\s;]+)["']?`),
regexp.MustCompile(`(?mi)(?:ssl_dhparam|dhparam)\s*(?:=|:|\s)\s*["']?(\/[^"'\s;]+|[^"'\s;]+)["']?`),
}

for _, line := range strings.Split(string(output), "\n") {
line = strings.TrimSpace(line)
if line == "" || strings.HasPrefix(line, "#") {
continue
}

err := copyFile(sourceClient, targetClient, config.Path)
for _, pattern := range patterns {
matches := pattern.FindStringSubmatch(line)
if len(matches) > 1 {
path := matches[1]

if !strings.HasPrefix(path, "/") {
baseDir := filepath.Dir(filePath)
path = filepath.Join(baseDir, path)
}

if !seen[path] {
seen[path] = true
paths = append(paths, path)
}
}
}
}

var validPaths []string
for _, path := range paths {
var targetExists bool

checkCmd := fmt.Sprintf("test -f '%s'", path)

session, err := client.NewSession()
if err != nil {
return fmt.Errorf("failed to copy file %s: %v", config.Path, err)
return nil, err
}
defer func() {
_ = session.Close()
}()
_, err = session.CombinedOutput(sudoWrapper(checkCmd, client.SSHTarget.Password))
targetExists = err == nil

if targetExists {
validPaths = append(validPaths, path)
} else {
logger.Println(logger.WARN, true, fmt.Sprintf("Certificate/key file not found: %s", path))
}
}
return nil

return validPaths, nil
}

func copyFile(sourceClient *ssh.Client, targetClient *ssh.Client, filePath string) error {
session, err := sourceClient.NewSession()
if err != nil {
return err
}
defer func() {
_ = session.Close()
}()

sourcePassword := sourceClient.SSHTarget.Password
targetPassword := targetClient.SSHTarget.Password

Expand All @@ -54,7 +111,14 @@ func copyFile(sourceClient *ssh.Client, targetClient *ssh.Client, filePath strin
fi
`, filePath, filePath, filePath, filePath, filePath)

output, err := session.CombinedOutput(sudoWrapper(cmd, sourcePassword))
sourceSession, err := sourceClient.NewSession()
if err != nil {
return err
}
defer func() {
_ = sourceSession.Close()
}()
output, err := sourceSession.CombinedOutput(sudoWrapper(cmd, sourcePassword))
if err != nil {
return fmt.Errorf("failed to get file info: %s", string(output))
}
Expand All @@ -70,45 +134,37 @@ func copyFile(sourceClient *ssh.Client, targetClient *ssh.Client, filePath strin
symlinkTarget = strings.TrimSpace(lines[1])
fileContent = strings.Join(lines[3:], "\n")
} else {
session, err = sourceClient.NewSession()
catCmd := fmt.Sprintf("cat '%s'", filePath)

sourceSession, err := sourceClient.NewSession()
if err != nil {
return err
}
defer func() {
_ = session.Close()
_ = sourceSession.Close()
}()

catCmd := fmt.Sprintf("cat '%s'", filePath)
content, err := session.CombinedOutput(sudoWrapper(catCmd, sourcePassword))
content, err := sourceSession.CombinedOutput(sudoWrapper(catCmd, sourcePassword))
if err != nil {
return fmt.Errorf("failed to read file content: %v", string(content))
return fmt.Errorf("failed to read file content: %s", string(content))
}
fileContent = string(content)
}

var targetExists bool
if isSymlink {
session, err = targetClient.NewSession()
checkCmd := fmt.Sprintf("test -f '%s'", symlinkTarget)

targetSession, err := targetClient.NewSession()
if err != nil {
return err
}
defer func() {
_ = session.Close()
_ = targetSession.Close()
}()

checkCmd := fmt.Sprintf("test -f '%s'", symlinkTarget)
_, err = session.CombinedOutput(sudoWrapper(checkCmd, targetPassword))
_, err = targetSession.CombinedOutput(sudoWrapper(checkCmd, targetPassword))
targetExists = err == nil
}

session, err = targetClient.NewSession()
if err != nil {
return err
}
defer func() {
_ = session.Close()
}()

var copyCmd string
if isSymlink && targetExists {
copyCmd = fmt.Sprintf(`
Expand Down Expand Up @@ -137,27 +193,26 @@ EOL
fileInfo[0], filePath)

if isSymlink {
logger.Println(logger.WARN, true, fmt.Sprintf("Symlink target '%s' not found on target system. Created regular file at '%s' instead.\n",
logger.Println(logger.WARN, true, fmt.Sprintf("Symlink target '%s' not found on target system. Created regular file at '%s' instead.",
symlinkTarget, filePath))
}
}

if output, err := session.CombinedOutput(sudoWrapper(copyCmd, targetPassword)); err != nil {
targetSession, err := targetClient.NewSession()
if err != nil {
return err
}
defer func() {
_ = targetSession.Close()
}()
if output, err = targetSession.CombinedOutput(sudoWrapper(copyCmd, targetPassword)); err != nil {
return fmt.Errorf("failed to copy file: %s", string(output))
}

return nil
}

func findConfigs(client *ssh.Client, packageName string) ([]string, error) {
session, err := client.NewSession()
if err != nil {
return nil, fmt.Errorf("failed to create session: %v", err)
}
defer func() {
_ = session.Close()
}()

cmd := `#!/bin/sh
pkg="%s"
Expand Down Expand Up @@ -293,6 +348,13 @@ done
rm -f "$tmp_result"`

password := client.SSHTarget.Password
session, err := client.NewSession()
if err != nil {
return nil, fmt.Errorf("failed to create session: %v", err)
}
defer func() {
_ = session.Close()
}()
output, err := session.CombinedOutput(sudoWrapper(fmt.Sprintf(cmd, packageName), password))
if err != nil {
if len(output) == 0 {
Expand All @@ -313,6 +375,47 @@ rm -f "$tmp_result"`
return results, nil
}

func parseConfigLine(line string) ConfigFile {
parts := strings.SplitN(line, " [", 2)
config := ConfigFile{
Path: strings.TrimSpace(parts[0]),
}

if len(parts) > 1 {
config.Status = strings.TrimSuffix(parts[1], "]")
}

return config
}

func copyConfigFiles(sourceClient *ssh.Client, targetClient *ssh.Client, configs []ConfigFile) error {
for _, config := range configs {
if config.Status == "" {
continue
}

err := copyFile(sourceClient, targetClient, config.Path)
if err != nil {
return fmt.Errorf("failed to copy file %s: %v", config.Path, err)
}

certKeyPaths, err := findCertKeyPaths(sourceClient, config.Path)
if err != nil {
continue
}

for _, path := range certKeyPaths {
logger.Println(logger.INFO, true, "Copying certificate/key file: %s", path)
err := copyFile(sourceClient, targetClient, path)
if err != nil {
logger.Println(logger.WARN, true, "Failed to copy cert/key file %s: %v", path, err)
continue
}
}
}
return nil
}

func configCopier(sourceClient *ssh.Client, targetClient *ssh.Client, packageName string) error {
configs, err := findConfigs(sourceClient, packageName)
if err != nil {
Expand All @@ -330,16 +433,3 @@ func configCopier(sourceClient *ssh.Client, targetClient *ssh.Client, packageNam

return nil
}

func parseConfigLine(line string) ConfigFile {
parts := strings.SplitN(line, " [", 2)
config := ConfigFile{
Path: strings.TrimSpace(parts[0]),
}

if len(parts) > 1 {
config.Status = strings.TrimSuffix(parts[1], "]")
}

return config
}
5 changes: 5 additions & 0 deletions lib/software/install.go
View file
Original file line number Diff line number Diff line change
Expand Up @@ -20,6 +20,8 @@ func MigrateSoftware(executionID string, executionList *[]model.Execution,

targetClient, err := ssh.NewSSHClient(ssh.ConnectionTypeTarget, target.VMID, target.NamespaceID, target.MCIID)
if err != nil {
_ = sourceClient.Close()

return fmt.Errorf("failed to connect to target host: %v", err)
}

Expand All @@ -42,6 +44,9 @@ func MigrateSoftware(executionID string, executionList *[]model.Execution,
ExecutionStatus: executionStatusList,
})
if err != nil {
_ = sourceClient.Close()
_ = targetClient.Close()

return err
}

Expand Down

0 comments on commit 3d7fe12

Please sign in to comment.