You cannot select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
83 lines
2.0 KiB
Python
83 lines
2.0 KiB
Python
#!/usr/bin/env python
|
|
|
|
import optparse
|
|
import os
|
|
import shlex
|
|
import subprocess
|
|
import sys
|
|
|
|
|
|
HOST_KEY_ASK_MSG = """
|
|
The authenticity of host '[91.121.165.123]:9122 ([91.121.165.123]:9122)' can't be established.
|
|
ECDSA key fingerprint is SHA256:JvfPvazZzQ9/CUdKN7tiYlNZtDRdEgDsYVIzOgPrsR4.
|
|
Are you sure you want to continue connecting (yes/no)?
|
|
""".strip('\n')
|
|
|
|
HOST_KEY_STRICT_MSG = """Host key verification failed.\n"""
|
|
|
|
PERMDENIED_CLASSIC_MSG = 'Permission denied (publickey,password)\n'
|
|
PERMDENIED_75_MSG = 'chicken@nandos.com: permission denied (publickey,password)\n'
|
|
|
|
|
|
def tty(msg):
|
|
fp = open('/dev/tty', 'wb', 0)
|
|
fp.write(msg.encode())
|
|
fp.close()
|
|
|
|
|
|
def stderr(msg):
|
|
fp = open('/dev/stderr', 'wb', 0)
|
|
fp.write(msg.encode())
|
|
fp.close()
|
|
|
|
|
|
def confirm(msg):
|
|
tty(msg)
|
|
fp = open('/dev/tty', 'rb', 0)
|
|
try:
|
|
return fp.readline().decode()
|
|
finally:
|
|
fp.close()
|
|
|
|
|
|
mode = os.getenv('STUBSSH_MODE')
|
|
|
|
if mode == 'ask':
|
|
assert 'yes\n' == confirm(HOST_KEY_ASK_MSG)
|
|
|
|
elif mode == 'strict':
|
|
stderr(HOST_KEY_STRICT_MSG)
|
|
sys.exit(255)
|
|
|
|
elif mode == 'permdenied_classic':
|
|
stderr(PERMDENIED_CLASSIC_MSG)
|
|
sys.exit(255)
|
|
|
|
elif mode == 'permdenied_75':
|
|
stderr(PERMDENIED_75_MSG)
|
|
sys.exit(255)
|
|
|
|
|
|
#
|
|
# Set an env var if stderr was a TTY to make ssh_test tests easier to write.
|
|
#
|
|
if os.isatty(2):
|
|
os.environ['STDERR_WAS_TTY'] = '1'
|
|
|
|
|
|
parser = optparse.OptionParser()
|
|
parser.add_option('--user', '-l', action='store')
|
|
parser.add_option('-o', dest='options', action='append')
|
|
parser.disable_interspersed_args()
|
|
|
|
opts, args = parser.parse_args(sys.argv[1:])
|
|
args.pop(0) # hostname
|
|
|
|
# On Linux the TTY layer appears to begin tearing down a PTY after the last FD
|
|
# for it is closed, causing SIGHUP to be sent to its foreground group. Since
|
|
# the bootstrap overwrites the last such fd (stderr), we can't just exec it
|
|
# directly, we must hold it open just like real SSH would. So use
|
|
# subprocess.call() rather than os.execve() here.
|
|
args = [''.join(shlex.split(s)) for s in args]
|
|
sys.exit(subprocess.call(args))
|