devstack-cli 11.0.83__py3-none-any.whl → 11.0.85__py3-none-any.whl

cli.py

@@ -10,6 +10,7 @@ import json
 import logging
 import os
 import pathlib
+import re
 import readline
 import shlex
 import shutil
@@ -1002,10 +1003,11 @@ class Cli:
         logger.info('Connecting to CDE')
         known_hosts = await self._get_known_hosts()
         if known_hosts is None:
+            logger.error('Cannot connect to CDE. Host-key not found.')
             return
         self.known_hosts_file = await _create_temp_file(exit_stack=self.exit_stack, content=known_hosts)
         self.ssh_client = paramiko.SSHClient()
-        self.ssh_client.set_missing_host_key_policy(paramiko.AutoAddPolicy())
+        self.ssh_client.load_host_keys(self.known_hosts_file.name)
         try:
             self.ssh_client.connect(
                 hostname=self.hostname,
@@ -1022,34 +1024,18 @@ class Cli:
         logger.info('Connected to CDE')
 
     async def _get_known_hosts(self: 'Cli') -> typing.Optional[str]:
-        if self.cde['value']['hostkey']:
-            if self.cde['value']['hostkey'].startswith(self.cde['value']['hostname']):
-                return self.cde['value']['hostkey']
-            return f"{self.cde['value']['hostname']} {self.cde['value']['hostkey']}"
         if not self.cde:
             logger.error('No CDE is selected. Cannot fetch host-key.')
             return None
         if not self.is_cde_running:
             logger.error('CDE is not running. Cannot fetch host-key.')
             return None
-        logger.debug('Scanning hostkeys of "%s"', self.hostname)
-        try:
-            stdout, stderr = await run_subprocess(
-                'ssh-keyscan',
-                [
-                    self.hostname,
-                ],
-                name='ssh-keyscan',
-                print_stdout=False,
-                print_stderr=False,
-            )
-        except SubprocessError as ex:
-            logger.error('%s Failed to fetch hostkeys. Is you CDE running?', ex)  # noqa: TRY400
-            sys.exit(1)
-        known_hosts = stdout
-        with contextlib.suppress(FileNotFoundError):
-            known_hosts += pathlib.Path(os.path.expandvars('$HOME/.ssh/known_hosts')).read_bytes()
-        return known_hosts
+        if not self.cde['value']['hostkey']:
+            logger.error('CDE record does not contain a hostkey.')
+            return None
+        if self.cde['value']['hostkey'].startswith(self.cde['value']['hostname']):
+            return self.cde['value']['hostkey']
+        return f"{self.cde['value']['hostname']} {self.cde['value']['hostkey']}"
 
     async def _disconnect_cde(self: 'Cli') -> None:
         logger.info('Disconnecting from CDE')
@@ -1237,6 +1223,12 @@ class Cli:
         self.port_forwarding_task = None
 
     async def _bg_port_forwarding(self: 'Cli') -> None:
+        remote_username = self.cde_type['value']['remote-username']
+        if re.match(r'[^a-zA-Z0-9]', remote_username):
+            raise Exception(f'Invalid remote username: "{remote_username}". Only alphanumeric characters are allowed.')
+        hostname = self.hostname
+        if re.match(r'[^a-zA-Z0-9]', hostname):
+            raise Exception(f'Invalid hostname: "{hostname}". Only alphanumeric characters are allowed.')
         service_ports = self.cde_type['value'].get('service-ports')
         if service_ports is None:
             service_ports = [
@@ -1253,6 +1245,11 @@ class Cli:
             for port
             in service_ports
         ]
+        for port in service_ports:
+            if port[0] < 1 or port[0] > 65535:
+                raise Exception(f'Invalid port: "{port[0]}". Only numbers between 1 and 65535 are allowed.')
+            if port[1] < 1 or port[1] > 65535:
+                raise Exception(f'Invalid port: "{port[1]}". Only numbers between 1 and 65535 are allowed.')
         while True:
             logger.info('Starting port forwarding of %s', ', '.join(str(port[0]) for port in service_ports))
             try:
@@ -1262,7 +1259,7 @@ class Cli:
                         '-o', 'ConnectTimeout=10',
                         '-o', f'UserKnownHostsFile={self.known_hosts_file.name}',
                         '-NT',
-                        f"{self.cde_type['value']['remote-username']}@{self.hostname}",
+                        f'{remote_username}@{hostname}',
                         *itertools.chain.from_iterable([
                             ('-L', f'{port[0]}:localhost:{port[1]}')
                             for port
@@ -1442,13 +1439,22 @@ class Cli:
         return await self._process_remote_item_copy_file(file_info.filename)
 
     async def _process_remote_item_copy_dir(self: 'Cli', filename: str) -> str:
+        remote_username = self.cde_type['value']['remote-username']
+        if re.match(r'[^a-zA-Z0-9]', remote_username):
+            raise Exception(f'Invalid remote username: "{remote_username}". Only alphanumeric characters are allowed.')
+        hostname = self.hostname
+        if re.match(r'[^a-zA-Z0-9]', hostname):
+            raise Exception(f'Invalid hostname: "{hostname}". Only alphanumeric characters are allowed.')
+        remote_source_directory = self.cde_type['value']['remote-source-directory']
+        if re.match(r'[^a-zA-Z0-9/_.-]', remote_source_directory):
+            raise Exception(f'Invalid remote source directory: "{remote_source_directory}". Only alphanumeric characters, slashes, underscores, dots and hyphens are allowed.')
         await run_subprocess(
             'rsync',
             [
                 '-e', f'ssh -o ConnectTimeout=10 -o UserKnownHostsFile={self.known_hosts_file.name}',
                 '--archive',
                 '--checksum',
-                f"{self.cde_type['value']['remote-username']}@{self.hostname}:{self.cde_type['value']['remote-source-directory']}/{filename}/",
+                f'{remote_username}@{hostname}:{remote_source_directory}/{filename}/',
                 str(self.local_source_directory / filename),
             ],
             name='Copy remote directory',
@@ -1456,23 +1462,35 @@ class Cli:
         return f'Copied directory "{filename}"'
 
     async def _process_remote_item_copy_file(self: 'Cli', filename: str) -> str:
+        remote_source_directory = self.cde_type['value']['remote-source-directory']
+        if re.match(r'[^a-zA-Z0-9/_.-]', remote_source_directory):
+            raise Exception(f'Invalid remote source directory: "{remote_source_directory}". Only alphanumeric characters, slashes, underscores, dots and hyphens are allowed.')
         await self.loop.run_in_executor(
             executor=None,
             func=functools.partial(
                 self.sftp_client.get,
-                remotepath=f"{self.cde_type['value']['remote-source-directory']}/{filename}",
+                remotepath=f'{remote_source_directory}/{filename}',
                 localpath=str(self.local_source_directory / filename),
             ),
         )
         return f'Copied file "{filename}"'
 
     async def _process_remote_item_clone(self: 'Cli', filename: str) -> str:
+        remote_username = self.cde_type['value']['remote-username']
+        if re.match(r'[^a-zA-Z0-9]', remote_username):
+            raise Exception(f'Invalid remote username: "{remote_username}". Only alphanumeric characters are allowed.')
+        hostname = self.hostname
+        if re.match(r'[^a-zA-Z0-9]', hostname):
+            raise Exception(f'Invalid hostname: "{hostname}". Only alphanumeric characters are allowed.')
+        remote_source_directory = self.cde_type['value']['remote-source-directory']
+        if re.match(r'[^a-zA-Z0-9/_.-]', remote_source_directory):
+            raise Exception(f'Invalid remote source directory: "{remote_source_directory}". Only alphanumeric characters, slashes, underscores, dots and hyphens are allowed.')
         await run_subprocess(
             'git',
             [
                 'clone',
                 '-q',
-                f"{self.cde_type['value']['remote-username']}@{self.hostname}:{self.cde_type['value']['remote-source-directory']}/{filename}",
+                f'{remote_username}@{hostname}:{remote_source_directory}/{filename}',
             ],
             name='Git clone',
             cwd=self.local_source_directory,
@@ -1487,7 +1505,7 @@ class Cli:
                 shlex.join([
                     'git',
                     '-C',
-                    f"{self.cde_type['value']['remote-source-directory']}/{filename}",
+                    f'{remote_source_directory}/{filename}',
                     'config',
                     '--get',
                     'remote.origin.url',
@@ -1512,10 +1530,19 @@ class Cli:
         return f'Cloned repository "{filename}"'
 
     async def _background_sync(self: 'Cli') -> None:
+        remote_username = self.cde_type['value']['remote-username']
+        if re.match(r'[^a-zA-Z0-9]', remote_username):
+            raise Exception(f'Invalid remote username: "{remote_username}". Only alphanumeric characters are allowed.')
+        hostname = self.hostname
+        if re.match(r'[^a-zA-Z0-9]', hostname):
+            raise Exception(f'Invalid hostname: "{hostname}". Only alphanumeric characters are allowed.')
+        remote_source_directory = self.cde_type['value']['remote-source-directory']
+        if re.match(r'[^a-zA-Z0-9/_.-]', remote_source_directory):
+            raise Exception(f'Invalid remote source directory: "{remote_source_directory}". Only alphanumeric characters, slashes, underscores, dots and hyphens are allowed.')
         logger.debug('Starting background sync')
         self.local_source_directory.mkdir(parents=True, exist_ok=True)
         with contextlib.suppress(OSError):
-            self.sftp_client.mkdir(self.cde_type['value']['remote-source-directory'])
+            self.sftp_client.mkdir(remote_source_directory)
         file_sync_exclusions = self.cde_type['value'].get('file-sync-exclusions')
         if file_sync_exclusions is None:
             file_sync_exclusions = [
@@ -1563,7 +1590,7 @@ class Cli:
                     '--human-readable',
                     '--verbose',
                     f'{self.local_source_directory}/',
-                    f"{self.cde_type['value']['remote-username']}@{self.hostname}:{self.cde_type['value']['remote-source-directory']}",
+                    f'{remote_username}@{hostname}:{remote_source_directory}',
                 ],
                 name='Background sync',
                 print_to_debug_log=True,
@@ -1579,19 +1606,31 @@ class Cli:
             logger.info('Background sync done')
 
     async def _reverse_background_sync(self: 'Cli') -> None:
+        remote_username = self.cde_type['value']['remote-username']
+        if re.match(r'[^a-zA-Z0-9]', remote_username):
+            raise Exception(f'Invalid remote username: "{remote_username}". Only alphanumeric characters are allowed.')
+        hostname = self.hostname
+        if re.match(r'[^a-zA-Z0-9]', hostname):
+            raise Exception(f'Invalid hostname: "{hostname}". Only alphanumeric characters are allowed.')
+        remote_source_directory = self.cde_type['value']['remote-source-directory']
+        if re.match(r'[^a-zA-Z0-9/_.-]', remote_source_directory):
+            raise Exception(f'Invalid remote source directory: "{remote_source_directory}". Only alphanumeric characters, slashes, underscores, dots and hyphens are allowed.')
         logger.debug('Starting reverse background sync')
+        remote_output_directory = self.cde_type['value']['remote-output-directory']
+        if re.match(r'[^a-zA-Z0-9/_.-]', remote_output_directory):
+            raise Exception(f'Invalid remote output directory: "{remote_output_directory}". Only alphanumeric characters, slashes, underscores, dots and hyphens are allowed.')
         with contextlib.suppress(OSError):
-            self.sftp_client.mkdir(self.cde_type['value']['remote-output-directory'])
+            self.sftp_client.mkdir(remote_output_directory)
         self.local_output_directory.mkdir(parents=True, exist_ok=True)
         try:
-            stdout, stderr = await run_subprocess(
+            await run_subprocess(
                 'rsync',
                 [
                     '-e', f'ssh -o ConnectTimeout=10 -o UserKnownHostsFile={self.known_hosts_file.name}',
                     '--archive',
                     '--exclude', '__pycache__',
                     '--human-readable',
-                    f"{self.cde_type['value']['remote-username']}@{self.hostname}:{self.cde_type['value']['remote-output-directory']}/",
+                    f'{remote_username}@{hostname}:{remote_output_directory}/',
                     str(self.local_output_directory),
                 ],
                 name='Reverse background sync',

{devstack_cli-11.0.83.dist-info → devstack_cli-11.0.85.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.2
 Name: devstack-cli
-Version: 11.0.83
+Version: 11.0.85
 Summary: Command-line access to Cloud Development Environments (CDEs) created by Cloudomation DevStack
 Author-email: Stefan Mückstein <stefan@cloudomation.com>
 Project-URL: Homepage, https://cloudomation.com/

devstack_cli-11.0.85.dist-info/RECORD

@@ -0,0 +1,9 @@
+__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
+cli.py,sha256=MB5BGbhMwEs1icEsDpheBQDrNk1ck9QeDV2vTzYU82s,83037
+version.py,sha256=r-2CoTcqkWFSEi8k9zvRHtIGDang9cMMzAHm1742Mw4,180
+devstack_cli-11.0.85.dist-info/LICENSE,sha256=OBXZbEUMtIHIzyISkJ9fJlf_imds3rcKqeQu9yiyUJI,1055
+devstack_cli-11.0.85.dist-info/METADATA,sha256=mlxRxtkfa4SrPGytNn8P3B7Y41avi75e92NBxBZHtKw,4287
+devstack_cli-11.0.85.dist-info/WHEEL,sha256=In9FTNxeP60KnTkGw7wk6mJPYd_dQSjEZmXdBdMCI-8,91
+devstack_cli-11.0.85.dist-info/entry_points.txt,sha256=f0xb4DIk0a7E5kyZ7YpoLhtjoagQj5VQpeBbW9a8A9Y,42
+devstack_cli-11.0.85.dist-info/top_level.txt,sha256=lP8zvU46Am_G0MPcNmCI6f0sMfwpDUWpTROaPs-IEPk,21
+devstack_cli-11.0.85.dist-info/RECORD,,

version.py

@@ -4,6 +4,6 @@ constants, set by build
 
 MAJOR = '11'
 BRANCH_NAME = 'release-11'
-BUILD_DATE = '2025-02-10-044518'
-SHORT_SHA = 'b8aa0c3'
-VERSION = '11+release-11.2025-02-10-044518.b8aa0c3'
+BUILD_DATE = '2025-02-10-115139'
+SHORT_SHA = 'f9e1188'
+VERSION = '11+release-11.2025-02-10-115139.f9e1188'

devstack_cli-11.0.83.dist-info/RECORD

@@ -1,9 +0,0 @@
-__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
-cli.py,sha256=_k9ZnI2n6T9tPqBasTj5c0EECaHJvWRFwTcoxPRik2o,79526
-version.py,sha256=oQplPMp28xVgc4xkJB2_VKADgQ7VfXmif3LaFfGYAj8,180
-devstack_cli-11.0.83.dist-info/LICENSE,sha256=OBXZbEUMtIHIzyISkJ9fJlf_imds3rcKqeQu9yiyUJI,1055
-devstack_cli-11.0.83.dist-info/METADATA,sha256=UsbgvY8Vrs2AErciQXxOz5kk0fzVmC1FO684cq1QuVk,4287
-devstack_cli-11.0.83.dist-info/WHEEL,sha256=In9FTNxeP60KnTkGw7wk6mJPYd_dQSjEZmXdBdMCI-8,91
-devstack_cli-11.0.83.dist-info/entry_points.txt,sha256=f0xb4DIk0a7E5kyZ7YpoLhtjoagQj5VQpeBbW9a8A9Y,42
-devstack_cli-11.0.83.dist-info/top_level.txt,sha256=lP8zvU46Am_G0MPcNmCI6f0sMfwpDUWpTROaPs-IEPk,21
-devstack_cli-11.0.83.dist-info/RECORD,,