mirror of
https://github.com/yunionio/cloudpods.git
synced 2026-09-24 16:03:43 +08:00
region: guests: add GET /servers/<guest-id>/sshable
This commit is contained in:
Yousong Zhou
@@ -0,0 +1,38 @@
|
||||
// Copyright 2019 Yunion
|
||||
//
|
||||
// Licensed under the Apache License, Version 2.0 (the "License");
|
||||
// you may not use this file except in compliance with the License.
|
||||
// You may obtain a copy of the License at
|
||||
//
|
||||
// http://www.apache.org/licenses/LICENSE-2.0
|
||||
//
|
||||
// Unless required by applicable law or agreed to in writing, software
|
||||
// distributed under the License is distributed on an "AS IS" BASIS,
|
||||
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||
// See the License for the specific language governing permissions and
|
||||
// limitations under the License.
|
||||
|
||||
package compute
|
||||
|
||||
const (
|
||||
MethodDirect = "direct"
|
||||
MethodEIP = "eip"
|
||||
MethodDNAT = "dnat"
|
||||
MethodProxyForward = "proxy_forward"
|
||||
)
|
||||
|
||||
type GuestSshableMethodData struct {
|
||||
Method string
|
||||
Host string
|
||||
Port int
|
||||
|
||||
Sshable bool
|
||||
Reason string
|
||||
}
|
||||
|
||||
type GuestSshableOutput struct {
|
||||
User string
|
||||
PublicKey string
|
||||
|
||||
MethodTried []GuestSshableMethodData
|
||||
}
|
||||
@@ -0,0 +1,299 @@
|
||||
// Copyright 2019 Yunion
|
||||
//
|
||||
// Licensed under the Apache License, Version 2.0 (the "License");
|
||||
// you may not use this file except in compliance with the License.
|
||||
// You may obtain a copy of the License at
|
||||
//
|
||||
// http://www.apache.org/licenses/LICENSE-2.0
|
||||
//
|
||||
// Unless required by applicable law or agreed to in writing, software
|
||||
// distributed under the License is distributed on an "AS IS" BASIS,
|
||||
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||
// See the License for the specific language governing permissions and
|
||||
// limitations under the License.
|
||||
|
||||
package models
|
||||
|
||||
import (
|
||||
"context"
|
||||
"time"
|
||||
|
||||
"yunion.io/x/jsonutils"
|
||||
"yunion.io/x/log"
|
||||
"yunion.io/x/sqlchemy"
|
||||
|
||||
cloudproxy_api "yunion.io/x/onecloud/pkg/apis/cloudproxy"
|
||||
compute_api "yunion.io/x/onecloud/pkg/apis/compute"
|
||||
"yunion.io/x/onecloud/pkg/cloudcommon/db"
|
||||
"yunion.io/x/onecloud/pkg/compute/sshkeys"
|
||||
"yunion.io/x/onecloud/pkg/httperrors"
|
||||
"yunion.io/x/onecloud/pkg/mcclient"
|
||||
"yunion.io/x/onecloud/pkg/mcclient/auth"
|
||||
cloudproxy_module "yunion.io/x/onecloud/pkg/mcclient/modules/cloudproxy"
|
||||
ssh_util "yunion.io/x/onecloud/pkg/util/ssh"
|
||||
)
|
||||
|
||||
type GuestSshableTryData struct {
|
||||
User string
|
||||
Host string
|
||||
Port int
|
||||
PrivateKey string
|
||||
PublicKey string
|
||||
|
||||
MethodTried []compute_api.GuestSshableMethodData
|
||||
}
|
||||
|
||||
func (tryData *GuestSshableTryData) AddMethodTried(tryMethodData compute_api.GuestSshableMethodData) {
|
||||
tryData.MethodTried = append(tryData.MethodTried, tryMethodData)
|
||||
}
|
||||
|
||||
func (tryData *GuestSshableTryData) outputJSON() jsonutils.JSONObject {
|
||||
out := compute_api.GuestSshableOutput{
|
||||
User: tryData.User,
|
||||
PublicKey: tryData.PublicKey,
|
||||
|
||||
MethodTried: tryData.MethodTried,
|
||||
}
|
||||
outJSON := jsonutils.Marshal(out)
|
||||
return outJSON
|
||||
}
|
||||
|
||||
func (guest *SGuest) AllowGetDetailsSshable(
|
||||
ctx context.Context,
|
||||
userCred mcclient.TokenCredential,
|
||||
query jsonutils.JSONObject,
|
||||
) bool {
|
||||
return db.IsProjectAllowGetSpec(userCred, guest, "sshable")
|
||||
}
|
||||
|
||||
func (guest *SGuest) GetDetailsSshable(
|
||||
ctx context.Context,
|
||||
userCred mcclient.TokenCredential,
|
||||
query jsonutils.JSONObject,
|
||||
) (jsonutils.JSONObject, error) {
|
||||
tryData := &GuestSshableTryData{
|
||||
User: "cloudroot",
|
||||
}
|
||||
|
||||
// - get admin key
|
||||
privateKey, publicKey, err := sshkeys.GetSshAdminKeypair(ctx)
|
||||
if err != nil {
|
||||
return nil, httperrors.NewInternalServerError("fetch ssh private key: %v", err)
|
||||
}
|
||||
tryData.PrivateKey = privateKey
|
||||
tryData.PublicKey = publicKey
|
||||
|
||||
gns, err := guest.GetNetworks("")
|
||||
if err != nil {
|
||||
return nil, httperrors.NewInternalServerError("fetch network interface information: %v", err)
|
||||
}
|
||||
type gnInfo struct {
|
||||
guestNetwork *SGuestnetwork
|
||||
network *SNetwork
|
||||
vpc *SVpc
|
||||
}
|
||||
var gnInfos []gnInfo
|
||||
for i := range gns {
|
||||
gn := &gns[i]
|
||||
network := gn.GetNetwork()
|
||||
if network == nil {
|
||||
continue
|
||||
}
|
||||
vpc := network.GetVpc()
|
||||
if vpc == nil {
|
||||
continue
|
||||
}
|
||||
if vpc.Id == compute_api.DEFAULT_VPC_ID {
|
||||
// - vpc_id == "default"
|
||||
if ok := guest.sshableTryDefaultVPC(ctx, tryData, gn); ok {
|
||||
return tryData.outputJSON(), nil
|
||||
}
|
||||
} else {
|
||||
gnInfos = append(gnInfos, gnInfo{
|
||||
guestNetwork: gn,
|
||||
network: network,
|
||||
vpc: vpc,
|
||||
})
|
||||
}
|
||||
}
|
||||
|
||||
// - check eip
|
||||
if eip, err := guest.GetEipOrPublicIp(); err == nil && eip != nil {
|
||||
if ok := guest.sshableTryEip(ctx, tryData, eip); ok {
|
||||
return tryData.outputJSON(), nil
|
||||
}
|
||||
}
|
||||
|
||||
sess := auth.GetSession(ctx, userCred, "", "")
|
||||
// - check existing proxy forward
|
||||
proxyforwardTried := false
|
||||
for i := range gnInfos {
|
||||
gnInfo := &gnInfos[i]
|
||||
gn := gnInfo.guestNetwork
|
||||
port := 22
|
||||
input := &cloudproxy_api.ForwardListInput{
|
||||
Type: cloudproxy_api.FORWARD_TYPE_LOCAL,
|
||||
RemoteAddr: gn.IpAddr,
|
||||
RemotePort: &port,
|
||||
Opaque: guest.Id,
|
||||
}
|
||||
params := jsonutils.Marshal(input).(*jsonutils.JSONDict)
|
||||
params.Set("details", jsonutils.JSONTrue)
|
||||
res, err := cloudproxy_module.Forwards.List(sess, params)
|
||||
if err != nil {
|
||||
log.Warningf("list cloudproxy forwards: %v", err)
|
||||
continue
|
||||
}
|
||||
proxyforwardTried = len(res.Data) != 0
|
||||
for _, data := range res.Data {
|
||||
var fwd cloudproxy_api.ForwardDetails
|
||||
if err := data.Unmarshal(&fwd); err != nil {
|
||||
log.Warningf("unmarshal cloudproxy forward list data: %v", err)
|
||||
continue
|
||||
}
|
||||
if ok := guest.sshableTryForward(ctx, tryData, &fwd); ok {
|
||||
return tryData.outputJSON(), nil
|
||||
}
|
||||
}
|
||||
}
|
||||
if !proxyforwardTried {
|
||||
// - create and use new proxy forward
|
||||
fwdCreateInput := cloudproxy_api.ForwardCreateFromServerInput{
|
||||
ServerId: guest.Id,
|
||||
Type: cloudproxy_api.FORWARD_TYPE_LOCAL,
|
||||
RemotePort: 22,
|
||||
}
|
||||
fwdCreateParams := jsonutils.Marshal(fwdCreateInput)
|
||||
res, err := cloudproxy_module.Forwards.PerformClassAction(sess, "create-from-server", fwdCreateParams)
|
||||
if err == nil {
|
||||
var fwd cloudproxy_api.ForwardDetails
|
||||
if err := res.Unmarshal(&fwd); err == nil {
|
||||
if ok := guest.sshableTryForward(ctx, tryData, &fwd); ok {
|
||||
return tryData.outputJSON(), nil
|
||||
}
|
||||
}
|
||||
} else {
|
||||
tryData.AddMethodTried(compute_api.GuestSshableMethodData{
|
||||
Method: compute_api.MethodProxyForward,
|
||||
Reason: err.Error(),
|
||||
})
|
||||
}
|
||||
}
|
||||
|
||||
// - existing dnat rule
|
||||
for i := range gnInfos {
|
||||
gnInfo := &gnInfos[i]
|
||||
gn := gnInfo.guestNetwork
|
||||
vpc := gnInfo.vpc
|
||||
|
||||
natgwq := NatGatewayManager.Query().SubQuery()
|
||||
q := NatDEntryManager.Query().
|
||||
Equals("internal_ip", gn.IpAddr).
|
||||
Equals("internal_port", 22).
|
||||
Equals("ip_protocol", "tcp")
|
||||
q = q.Join(natgwq, sqlchemy.AND(
|
||||
sqlchemy.In(natgwq.Field("vpc_id"), vpc.Id),
|
||||
sqlchemy.Equals(natgwq.Field("id"), q.Field("natgateway_id")),
|
||||
))
|
||||
|
||||
var dnats []SNatDEntry
|
||||
if err := db.FetchModelObjects(NatDEntryManager, q, &dnats); err != nil {
|
||||
log.Warningf("query dnat to ssh service: %v", err)
|
||||
continue
|
||||
}
|
||||
for j := range dnats {
|
||||
dnat := &dnats[j]
|
||||
if ok := guest.sshableTryDnat(ctx, tryData, dnat); ok {
|
||||
return tryData.outputJSON(), nil
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
return tryData.outputJSON(), nil
|
||||
}
|
||||
|
||||
func (guest *SGuest) sshableTryDnat(
|
||||
ctx context.Context,
|
||||
tryData *GuestSshableTryData,
|
||||
dnat *SNatDEntry,
|
||||
) bool {
|
||||
methodData := compute_api.GuestSshableMethodData{
|
||||
Method: compute_api.MethodDNAT,
|
||||
Host: dnat.ExternalIP,
|
||||
Port: dnat.ExternalPort,
|
||||
}
|
||||
return guest.sshableTry(
|
||||
ctx, tryData, methodData,
|
||||
)
|
||||
}
|
||||
|
||||
func (guest *SGuest) sshableTryForward(
|
||||
ctx context.Context,
|
||||
tryData *GuestSshableTryData,
|
||||
fwd *cloudproxy_api.ForwardDetails,
|
||||
) bool {
|
||||
if fwd.BindAddr != "" && fwd.BindPort > 0 {
|
||||
methodData := compute_api.GuestSshableMethodData{
|
||||
Method: compute_api.MethodProxyForward,
|
||||
Host: fwd.BindAddr,
|
||||
Port: fwd.BindPort,
|
||||
}
|
||||
return guest.sshableTry(
|
||||
ctx, tryData, methodData,
|
||||
)
|
||||
}
|
||||
return false
|
||||
}
|
||||
|
||||
func (guest *SGuest) sshableTryEip(
|
||||
ctx context.Context,
|
||||
tryData *GuestSshableTryData,
|
||||
eip *SElasticip,
|
||||
) bool {
|
||||
methodData := compute_api.GuestSshableMethodData{
|
||||
Method: compute_api.MethodEIP,
|
||||
Host: eip.IpAddr,
|
||||
Port: 22,
|
||||
}
|
||||
return guest.sshableTry(
|
||||
ctx, tryData, methodData,
|
||||
)
|
||||
}
|
||||
|
||||
func (guest *SGuest) sshableTryDefaultVPC(
|
||||
ctx context.Context,
|
||||
tryData *GuestSshableTryData,
|
||||
gn *SGuestnetwork,
|
||||
) bool {
|
||||
methodData := compute_api.GuestSshableMethodData{
|
||||
Method: compute_api.MethodDirect,
|
||||
Host: gn.IpAddr,
|
||||
Port: 22,
|
||||
}
|
||||
return guest.sshableTry(
|
||||
ctx, tryData, methodData,
|
||||
)
|
||||
}
|
||||
|
||||
func (guest *SGuest) sshableTry(
|
||||
ctx context.Context,
|
||||
tryData *GuestSshableTryData,
|
||||
methodData compute_api.GuestSshableMethodData,
|
||||
) bool {
|
||||
ctx, _ = context.WithTimeout(ctx, 7*time.Second)
|
||||
conf := ssh_util.ClientConfig{
|
||||
Username: tryData.User,
|
||||
Host: methodData.Host,
|
||||
Port: methodData.Port,
|
||||
PrivateKey: tryData.PrivateKey,
|
||||
}
|
||||
ok := false
|
||||
if client, err := conf.ConnectContext(ctx); err == nil {
|
||||
defer client.Close()
|
||||
methodData.Sshable = true
|
||||
} else {
|
||||
methodData.Reason = err.Error()
|
||||
}
|
||||
tryData.AddMethodTried(methodData)
|
||||
return ok
|
||||
}
|
||||
Reference in New Issue
Block a user