linux_admin 0.17.0 → 0.18.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 6162494c6bbe50d72eb1ba5f6102b51ad3fef53d
-  data.tar.gz: 4a33bb3aa96008c3ca5b21f70456215d368077ed
+  metadata.gz: a90ef3973da3f00152bf552f74cab0baa544af95
+  data.tar.gz: f296bf3c99266062abc2cc1f67d987aa0e974ec2
 SHA512:
-  metadata.gz: b318a87324409d59dd08155db3bff3e4c076fc1ea289f21e8b449c3c670f1a96466d3d4d62003eeec33d8889c6b257080db0ceb64bfba2ed7c62f3a703235246
-  data.tar.gz: ac2029fe7890c370a2c30d2a5b46cfafb94bb5aa55838d9798632c870d20d42d3e2835ac25c3d9d4edef533bc65090447fe112fa983e8707f9348d777bd2e217
+  metadata.gz: c010a5739c54682ca620bfb4b0851d28e785e063225230c0e848472dfb1359876e27ea7880881838e6c93cf1de30a31a470e4b605e301e8af3c642023e9e953b
+  data.tar.gz: f1f10c4d2bb146033cb405a35b7f510618b7c6cde0d5226b81ea4daa52d6bd44c6a40642ed504f427cebf655ee6784aa4752304c7fed5ed773420a5002c6c942

data/README.md

@@ -5,6 +5,8 @@
 [![Code Climate](http://img.shields.io/codeclimate/github/ManageIQ/linux_admin.svg)](https://codeclimate.com/github/ManageIQ/linux_admin)
 [![Coverage Status](http://img.shields.io/coveralls/ManageIQ/linux_admin.svg)](https://coveralls.io/r/ManageIQ/linux_admin)
 [![Dependency Status](https://gemnasium.com/ManageIQ/linux_admin.svg)](https://gemnasium.com/ManageIQ/linux_admin)
+[![Security](https://hakiri.io/github/ManageIQ/linux_admin/master.svg)](https://hakiri.io/github/ManageIQ/linux_admin/master)
+
 
 LinuxAdmin is a module to simplify management of linux systems.
 It should be a single place to manage various system level configurations,

data/lib/linux_admin.rb

@@ -11,7 +11,8 @@ require 'linux_admin/rpm'
 require 'linux_admin/deb'
 require 'linux_admin/version'
 require 'linux_admin/yum'
-
+require 'linux_admin/ssh'
+require 'linux_admin/ssh_agent'
 require 'linux_admin/service'
 require 'linux_admin/mountable'
 require 'linux_admin/disk'

data/lib/linux_admin/ssh.rb

@@ -0,0 +1,88 @@
+module LinuxAdmin
+  class SSH
+    attr_reader :ip
+    attr_reader :username
+    attr_reader :private_key
+    attr_reader :agent
+
+    def initialize(ip, username, private_key = nil, password = nil)
+      @ip = ip
+      @private_key = private_key
+      @username = username
+      @password = password
+    end
+
+    def perform_commands(commands = [], agent_socket = nil, stdin = nil)
+      require 'net/ssh'
+      if block_given?
+        execute_commands(commands, agent_socket, stdin, &Proc.new)
+      else
+        execute_commands(commands, agent_socket, stdin)
+      end
+    end
+
+    private
+
+    def execute_commands(commands, agent_socket, stdin)
+      result = nil
+      args = {:paranoid => false}
+      if agent_socket
+        args.merge!(:forward_agent              => true,
+                    :number_of_password_prompts => 0,
+                    :agent_socket_factory       => -> { UNIXSocket.open(agent_socket) })
+      elsif @private_key
+        args[:key_data] = [@private_key]
+      elsif @password
+        args[:password] = @password
+      end
+      Net::SSH.start(@ip, @username, args) do |ssh|
+        if block_given?
+          result = yield ssh
+        else
+          commands.each do |cmd|
+            result = ssh_exec!(ssh, cmd, stdin)
+            result[:last_command] = cmd
+            break if result[:exit_status] != 0
+          end
+        end
+      end
+      result
+    end
+
+    def ssh_exec!(ssh, command, stdin)
+      stdout_data = ''
+      stderr_data = ''
+      exit_status = nil
+      exit_signal = nil
+
+      ssh.open_channel do |channel|
+        channel.request_pty unless stdin
+        channel.exec(command) do |_, success|
+          channel.send_data(stdin) if stdin
+          channel.eof!
+          raise StandardError, "Command \"#{command}\" was unable to execute" unless success
+          channel.on_data do |_, data|
+            stdout_data << data
+          end
+          channel.on_extended_data do |_, _, data|
+            stderr_data << data
+          end
+          channel.on_request('exit-status') do |_, data|
+            exit_status = data.read_long
+          end
+
+          channel.on_request('exit-signal') do |_, data|
+            exit_signal = data.read_long
+          end
+        end
+      end
+      ssh.loop
+      {
+        :stdout      => stdout_data,
+        :stderr      => stderr_data,
+        :exit_status => exit_status,
+        :exit_signal => exit_signal
+      }
+    end
+  end
+end

data/lib/linux_admin/ssh_agent.rb

@@ -0,0 +1,61 @@
+require 'fileutils'
+module LinuxAdmin
+  class SSHAgent
+    attr_accessor :pid
+    attr_reader :socket
+
+    def initialize(ssh_private_key, agent_socket = nil)
+      @socket = agent_socket
+      @private_key = ssh_private_key
+    end
+
+    def start
+      if @socket
+        FileUtils.mkdir_p(File.dirname(@socket))
+        agent_details = `ssh-agent -a #{@socket}`
+      else
+        agent_details = `ssh-agent`
+        @socket = parse_ssh_agent_socket(agent_details)
+      end
+      @pid = parse_ssh_agent_pid(agent_details)
+      IO.popen({'SSH_AUTH_SOCK' => @socket, 'SSH_AGENT_PID' => @pid}, ['ssh-add', '-'], :mode => 'w') do |f|
+        f.puts(@private_key)
+      end
+      raise StandardError, "Couldn't add key to agent" if $CHILD_STATUS.to_i != 0
+    end
+
+    def with_service
+      start
+      yield @socket
+    ensure
+      stop
+    end
+
+    def stop
+      system({'SSH_AGENT_PID' => @pid}, '(ssh-agent -k) &> /dev/null') if process_exists?(@pid)
+      File.delete(@socket) if File.exist?(@socket)
+      @socket = nil
+      @pid = nil
+    end
+
+    private
+
+    def process_exists?(process_pid)
+      Process.kill(0, process_pid) == 1
+    rescue
+      false
+    end
+
+    def parse_ssh_agent_socket(output)
+      parse_ssh_agent_output(output, 1)
+    end
+
+    def parse_ssh_agent_pid(output)
+      parse_ssh_agent_output(output, 2)
+    end
+
+    def parse_ssh_agent_output(output, index)
+      output.split('=')[index].split(' ')[0].chop
+    end
+  end
+end

data/lib/linux_admin/version.rb

@@ -1,3 +1,3 @@
 module LinuxAdmin
-  VERSION = "0.17.0"
+  VERSION = "0.18.0"
 end

data/spec/ssh_spec.rb

@@ -0,0 +1,53 @@
+describe LinuxAdmin::SSH do
+  before(:each) do
+    require 'net/ssh'
+    @example_ssh_key = <<-eos
+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----
+    eos
+  end
+
+  it "should create a call using agent" do
+    expect(Net::SSH).to receive(:start).with("127.0.0.1", "root", :paranoid => false, :forward_agent => true, :number_of_password_prompts => 0, :agent_socket_factory => Proc).and_return(true)
+    ssh_agent = LinuxAdmin::SSHAgent.new(@example_ssh_key)
+    ssh_agent.with_service do |socket|
+      ssh = LinuxAdmin::SSH.new("127.0.0.1", "root")
+      ssh.perform_commands(%w("ls", "pwd"), socket)
+    end
+  end
+
+  it "should preform command using private key" do
+    expect(Net::SSH).to receive(:start).with("127.0.0.1", "root", :paranoid => false, :key_data => [@example_ssh_key]).and_return(true)
+    LinuxAdmin::SSH.new("127.0.0.1", "root", @example_ssh_key).perform_commands(%w("ls", "pwd"))
+  end
+
+  it "should preform command using password" do
+    expect(Net::SSH).to receive(:start).with("127.0.0.1", "root", :paranoid => false, :password => "password").and_return(true)
+    LinuxAdmin::SSH.new("127.0.0.1", "root", nil, "password").perform_commands(%w("ls", "pwd"))
+  end
+end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: linux_admin
 version: !ruby/object:Gem::Version
-  version: 0.17.0
+  version: 0.18.0
 platform: ruby
 authors:
 - Brandon Dunne
@@ -13,10 +13,12 @@ authors:
 - Nick Carboni
 - Martin Hradil
 - Yuri Rudman
+- Oleg Barenboim
+- Alon Goldboim
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2016-07-08 00:00:00.000000000 Z
+date: 2016-07-25 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: bundler
@@ -158,6 +160,20 @@ dependencies:
     - - ">="
       - !ruby/object:Gem::Version
         version: '0'
+- !ruby/object:Gem::Dependency
+  name: net-ssh
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 3.2.0
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 3.2.0
 description: |2
 
   LinuxAdmin is a module to simplify management of linux systems.
@@ -173,6 +189,8 @@ email:
 - ncarboni@redhat.com
 - mhradil@redhat.com
 - yrudman@redhat.com
+- chessbyte@gmail.com
+- alongoldboim@gmail.com
 executables: []
 extensions: []
 extra_rdoc_files: []
@@ -210,6 +228,8 @@ files:
 - lib/linux_admin/service.rb
 - lib/linux_admin/service/sys_v_init_service.rb
 - lib/linux_admin/service/systemd_service.rb
+- lib/linux_admin/ssh.rb
+- lib/linux_admin/ssh_agent.rb
 - lib/linux_admin/system.rb
 - lib/linux_admin/time_date.rb
 - lib/linux_admin/version.rb
@@ -261,6 +281,7 @@ files:
 - spec/service/systemd_service_spec.rb
 - spec/service_spec.rb
 - spec/spec_helper.rb
+- spec/ssh_spec.rb
 - spec/subscription_manager_spec.rb
 - spec/system_spec.rb
 - spec/time_date_spec.rb
@@ -286,7 +307,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
       version: '0'
 requirements: []
 rubyforge_project: 
-rubygems_version: 2.6.3
+rubygems_version: 2.5.1
 signing_key: 
 specification_version: 4
 summary: LinuxAdmin is a module to simplify management of linux systems.
@@ -335,6 +356,7 @@ test_files:
 - spec/service/systemd_service_spec.rb
 - spec/service_spec.rb
 - spec/spec_helper.rb
+- spec/ssh_spec.rb
 - spec/subscription_manager_spec.rb
 - spec/system_spec.rb
 - spec/time_date_spec.rb