U Ad( @sddlZddlZddlZddlZddlZddlZddlZddlZddlZddl Z ddl m Z ddl m Z ddl mZddlmZmZddlmZmZmZmZmZddlmZddlmZdd lmZmZmZmZm Z m!Z!m"Z"dd l#m$Z$dd l%m&Z&e'e(Z)d Z*d Z+dZ,dZ-dZ.dZ/dZ0e$j1ddddZ2dZ3edZ4ede4fede4fdddZ5ddZ6e5dd Z7e5d!d"Z8dd#e9e$j:d$d%d&Z;d'd(Ze d.d/Z?d0d1Z@e5dd2d3d4e9eAeeBeCeCe jDd5d6d7ZEe9e9e9eBd8d9d:ZFGd;d<d<ZGGd=d>d>eHZIGd?d@d@ZJGdAdBdBZKGdCdDdDZLGdEdFdFZMe5dWe9eee9ee9dGdHdIZNe5e9dJdKdLZOdMdNZPGdOdPdPeHZQGdQdRdReHZRGdSdTdTejSZTGdUdVdVZUdS)XN)contextmanager)datetime)ENOENT)sleeptime)CallableListOptionalTypeVarUnion) ElementTree)escape)distrosdmisubp temp_utils url_helperutilversion)events) CFG_BUILTINz 168.63.129.16boot-telemetryz system-infoZ diagnosticZ compressediz'/run/cloud-init/log_pushed_to_kvp_indexzazure-dsz initialize reporter for azure dsT)name descriptionZreporting_enabledzThe VM encountered an error during deployment. Please visit https://aka.ms/linuxprovisioningerror for more information on remediation.T.)funcreturncsfdd}|S)Nc s6tjjjtd||W5QRSQRXdS)Nrrparent)rReportEventStack__name__azure_ds_reporter)argskwargsrA/usr/lib/python3/dist-packages/cloudinit/sources/helpers/azure.pyimpl9s z)azure_ds_telemetry_reporter..implr%)rr'r%r$r&azure_ds_telemetry_reporter8s r(cCs\||kr dSd dd}|d}d||d||d||d|d|d g}||kS) z Azure stores the instance ID with an incorrect byte ordering for the first parts. This corrects the byte order such that it is consistent with that returned by the metadata service. FcSs(ddt|dD}|d|S)NcSsg|]}|qSr%r%).0Zbyter%r%r& Nsz.swap_bytestring..r))textwrapZwrapreversejoin)swidthZddr%r%r&swap_bytestringMsz(is_byte_swapped..swap_bytestring-r)r))splitr/)Z previous_idZ current_idr2partsZ swapped_idr%r%r&is_byte_swappedDs      r9c Cs8tstdtdztttt}Wn,t k r`}ztd|W5d}~XYnXzXt j ddddgd d \}}d}|rd |kr| d d }|std |t|d}Wnbt j k r}ztd||W5d}~XYn2t k r}ztd||W5d}~XYnXz`t j dddddgd d \}}d}|r^d |kr^| d d }|sltd|t|d}Wndt j k r}ztd||W5d}~XYn2t k r}ztd||W5d}~XYnXt tddt|dt|dt|dft j}t ||S)z[Report timestamps related to kernel initialization and systemd activation of cloud-initz1distro not using systemd, skipping boot telemetryzCollecting boot telemetryz*Failed to determine kernel start timestampNZ systemctlZshowz-pZUserspaceTimestampMonotonicT)capture=r4z8Failed to parse UserspaceTimestampMonotonic from systemdi@Bz-Failed to get UserspaceTimestampMonotonic: %szr?openseekosSEEK_ENDmaxtellMAX_LOG_TO_KVP_LENGTHrWformatSEEK_SETrcreadrZ write_fileLOG_PUSHED_TO_KVP_INDEX_FILEstr Exceptionreprwarningr) file_nameZ start_indexfZ seek_indexexrGrHr%r%r&push_log_to_kvps<    "   rxc Csz0ttd}t|W5QRWSQRXWntk rr}z$|jtkrbtdt|t j dW5d}~XYnnt k r}ztdt|t j dW5d}~XYn8t k r}ztdt|t j dW5d}~XYnXdS)Nrz0Reading LOG_PUSHED_TO_KVP_INDEX_FILE failed: %s.rPz2Invalid value in LOG_PUSHED_TO_KVP_INDEX_FILE: %s.z2Failed to get the last log byte pushed to KVP: %s.r) rfrpintroIOErrorerrnorrWrsr>rtrArr)rvrFr%r%r&res( $    rec cs6t}ttj|z dVW5t|XdSN)rhgetcwdchdirpath expanduser)ZnewdirZprevdirr%r%r&cd7s  rcCsx|dd}t|dkrdd}|dD] }t|dkr>d|}||7}q&tdt|ddd}n |d }t|S) N\r,r6:r40z>Lutf-8) replacelenr7structZpackrzencodesocketZ inet_ntoa)Zfallback_lease_valueZunescaped_valueZ hex_stringZhex_pairZ packed_bytesr%r%r&get_ip_from_lease_valueAs     r)rZ retry_sleeptimeout_minutes)urlheadersrZrrrc Cs|dt}d}d}|s|d7}ztj|||dd}WqWn`tjk r}z@td||||j|jftjdt||ksd t |krW5d}~XYnXt |qtd ||ftjd|S) zReadurl wrapper for querying wireserver. :param retry_sleep: Time to sleep before retrying. :param timeout_minutes: Retry up to specified number of minutes. :raises UrlError: on error fetching data. <rNr4)rr)rrZtimeoutzdFailed HTTP request with Azure endpoint %s during attempt %d with exception: %s (code=%r headers=%r)rPzNetwork is unreachablez@Successful HTTP request with Azure endpoint %s after %d attempts) rrZreadurlZUrlErrorrWcoderr>r?rqr) rrrZrrrZattemptresponserFr%r%r&http_with_retriesOsB   r)usernamehostname disableSshPwdrcCs$td}|j|||d}|dS)Na. 1.0 LinuxProvisioningConfiguration {username} {disableSshPwd} {hostname} 1.0 true )rrrr)r-dedentrmr)rrrZOVF_ENV_TEMPLATEZretr%r%r&build_minimal_ovfsrc@sHeZdZdddZddZdejddd Zdee ejd d d Z d S)AzureEndpointHttpClientZ WALinuxAgentz 2012-11-30)zx-ms-agent-namez x-ms-versioncCsd|d|_dS)NZ DES_EDE3_CBC)zx-ms-cipher-namez!x-ms-guest-agent-public-x509-cert)extra_secure_headers)self certificater%r%r&__init__sz AzureEndpointHttpClient.__init__FrcCs,|j}|r |j}||jt||dS)N)r)rcopyupdaterr)rrsecurerr%r%r&gets   zAzureEndpointHttpClient.getN)rZrcCs0|j}|dk r"|j}||t|||dS)N)rZr)rrrr)rrrZ extra_headersrr%r%r&posts   zAzureEndpointHttpClient.post)F)NN) r __module__ __qualname__rrr UrlResponserr bytesrr%r%r%r&rsrc@seZdZdZdS)InvalidGoalStateXMLExceptionz9Raised when GoalState XML is invalid or has missing data.N)r rr__doc__r%r%r%r&rsrc@s2eZdZdeeefeeddddZddZ dS) GoalStateTN) unparsed_xmlazure_endpoint_clientneed_certificaterc Cs||_zt||_Wn8tjk rN}ztd|tjdW5d}~XYnX|d|_ |d|_ |d|_ dD]0}t ||dkrxd|}t|tjdt |qxd|_|d }|dk r|rtjd d td .|jj|d dj|_|jdkrt dW5QRXdS)ahParses a GoalState XML string and returns a GoalState object. @param unparsed_xml: string representing a GoalState XML. @param azure_endpoint_client: instance of AzureEndpointHttpClient. @param need_certificate: switch to know if certificates is needed. @return: GoalState object representing the GoalState XML string. z!Failed to parse GoalState XML: %srPNz./Container/ContainerIdz4./Container/RoleInstanceList/RoleInstance/InstanceIdz ./Incarnation) container_id instance_id incarnationzMissing %s in GoalState XMLzD./Container/RoleInstanceList/RoleInstance/Configuration/Certificateszget-certificates-xmlzget certificates xmlrT)rz/Azure endpoint returned empty certificates xml.)rr fromstringroot ParseErrorrWr>rt_text_from_xpathrrrgetattrrcertificates_xmlrrr!rcontents)rrrrrFattrrRrr%r%r&rsJ      zGoalState.__init__cCs|j|}|dk r|jSdSr})rfindtext)rZxpathelementr%r%r&rs zGoalState._text_from_xpath)T) r rrr rqrrboolrrr%r%r%r&rs  7rc@seZdZdddZddZddZedd Zejd d Ze d d Z e e d dZ e ddZ e ddZe ddZe ddZdS)OpenSSLManagerzTransportPrivate.pemzTransportCert.pem) private_keyrcCst|_d|_|dSr})rZmkdtemptmpdir _certificategenerate_certificaterr%r%r&rs zOpenSSLManager.__init__cCst|jdSr})rZdel_dirrrr%r%r&clean_upszOpenSSLManager.clean_upcCs|jSr}rrr%r%r&rszOpenSSLManager.certificatecCs ||_dSr}r)rvaluer%r%r&rscCstd|jdk r"tddSt|jjtddddddd d d d d |jdd|jdgd}t|jdD]}d|krr||7}qr||_W5QRXtddS)Nz7Generating certificate for communication with fabric...zCertificate already generated.opensslZreqz-x509z-nodesz-subjz/CN=LinuxTransportz-daysZ32768z-newkeyzrsa:2048z-keyoutrz-outrr,Z CERTIFICATEzNew certificate generated.) r>r?rrrrcertificate_namesrfrstrip)rrliner%r%r&r s8    z#OpenSSLManager.generate_certificatecCs"ddd|g}tj||d\}}|S)NrZx509z-nooutrZ)r)actionZcertcmdresultrHr%r%r&_run_x509_action@s zOpenSSLManager._run_x509_actioncCs2|d|}ddddddg}tj||d\}}|S) Nz-pubkeyz ssh-keygenz-iz-mZPKCS8z-fz /dev/stdinr)rr)rrZpub_keyZ keygen_cmdssh_keyrHr%r%r&_get_ssh_key_from_certGs z%OpenSSLManager._get_ssh_key_from_certcCs6|d|}|d}||ddd}d|S)aopenssl x509 formats fingerprints as so: 'SHA1 Fingerprint=07:3E:19:D1:4D:1C:79:92:24:C6:A0:FD:8D:DA: B6:A8:BF:27:D4:73 ' Azure control plane passes that fingerprint as so: '073E19D14D1C799224C6A0FD8DDAB6A8BF27D473' z -fingerprintr;r4rr,)rrr7r/)rrZraw_fpeqZoctetsr%r%r&_get_fingerprint_from_certNs  z)OpenSSLManager._get_fingerprint_from_certc Csjt|d}|j}ddddd|dg}t|j*tjdjf|j d d |d \}}W5QRX|S) zDecrypt the certificates XML document using the our private key; return the list of certs and private keys contained in the doc. z.//DatasMIME-Version: 1.0s<Content-Disposition: attachment; filename="Certificates.p7m"s?Content-Type: application/x-pkcs7-mime; name="Certificates.p7m"s!Content-Transfer-Encoding: base64rzuopenssl cms -decrypt -in /dev/stdin -inkey {private_key} -recip {certificate} | openssl pkcs12 -nodes -password pass:T )shellrZ) r rrrrrrrrmrr/)rrtagZcertificates_contentlinesrGrHr%r%r&_decrypt_certs_from_xml\s$ z&OpenSSLManager._decrypt_certs_from_xmlc Csv||}g}i}|D]V}||td|r:g}qtd|rd|}||}||}|||<g}q|S)zGiven the Certificates XML document, return a dictionary of fingerprints and associated SSH keys derived from the certs.z[-]+END .*?KEY[-]+$z[-]+END .*?CERTIFICATE[-]+$ )r splitlinesappendrematchr/rr) rrrGZcurrentkeysrrr fingerprintr%r%r&parse_certificatesus        z!OpenSSLManager.parse_certificatesN)r rrrrrpropertyrsetterr(r staticmethodrrrrrr%r%r%r&r s,       rc@seZdZedZedZdZdZdZ dZ e e e ddd d Zedd d d Zee ddddZde e e e edddZeeddddZdS)GoalStateHealthReportera {incarnation} {container_id} {instance_id} {health_status} {health_detail_subsection} z
{health_substatus} {health_description}
ZReadyZNotReadyZProvisioningFailediN) goal_staterendpointrcCs||_||_||_dS)a?Creates instance that will report provisioning status to an endpoint @param goal_state: An instance of class GoalState that contains goal state info such as incarnation, container id, and instance id. These 3 values are needed when reporting the provisioning status to Azure @param azure_endpoint_client: Instance of class AzureEndpointHttpClient @param endpoint: Endpoint (string) where the provisioning status report will be sent to @return: Instance of class GoalStateHealthReporter N) _goal_state_azure_endpoint_client _endpoint)rrrrr%r%r&rsz GoalStateHealthReporter.__init__rc Cs|j|jj|jj|jj|jd}tdz|j|dWn6t k rp}zt d|tj dW5d}~XYnXt ddS)N)rrrstatusz Reporting ready to Azure fabric.documentz#exception while reporting ready: %srPzReported ready to Azure fabric.) build_reportrrrrPROVISIONING_SUCCESS_STATUSr>r?_post_health_reportrrrWerrorrN)rrrFr%r%r&send_ready_signals  z)GoalStateHealthReporter.send_ready_signalrrc Cs|j|jj|jj|jj|j|j|d}z|j|dWn:tk rp}zd|}t |t j dW5d}~XYnXt ddS)N)rrrr substatusrrz%exception while reporting failure: %srPz!Reported failure to Azure fabric.) rrrrrPROVISIONING_NOT_READY_STATUSPROVISIONING_FAILURE_SUBSTATUSrrrrWr>rrt)rrrrFrRr%r%r&send_failure_signalsz+GoalStateHealthReporter.send_failure_signal)rrrrrc Csbd}|dk r.|jjt|t|d|jd}|jjtt|t|t|t||d}|dS)Nr,)Zhealth_substatusZhealth_description)rrrZ health_statusZhealth_detail_subsectionr)%HEALTH_DETAIL_SUBSECTION_XML_TEMPLATErmr "HEALTH_REPORT_DESCRIPTION_TRIM_LENHEALTH_REPORT_XML_TEMPLATErqr) rrrrrrrZ health_detailZ health_reportr%r%r&rs   z$GoalStateHealthReporter.build_report)rrcCsHttdtdd|j}|jj||ddidtddS)Nrz&Sending health report to Azure fabric.zhttp://{}/machine?comp=healthz Content-Typeztext/xml; charset=utf-8)rZrz/Successfully sent health report to Azure fabric)rxrr>r?rmrrr)rrrr%r%r&r s  z+GoalStateHealthReporter._post_health_report)NN)r rrr-rrrrrrrrrrqrr(rrrrrr%r%r%r&rs<   rc@seZdZedddZddZedddd Zedee edd d Z eedd d dZ ee e dddZeedddZeeeefe e dddZee eedddZeeeedddZdS)WALinuxAgentShimrcCs||_d|_d|_dSr})ropenssl_managerr)rrr%r%r&r,szWALinuxAgentShim.__init__cCs|jdk r|jdSr})rrrr%r%r&r1s zWALinuxAgentShim.clean_upNrc CsVztdtd|gWn4tk rP}ztd|tjdW5d}~XYnXdS)NzEjecting the provisioning isoZejectz(Failed ejecting the provisioning iso: %srP)r>r?rrrrW)riso_devrFr%r%r& eject_iso5s zWALinuxAgentShim.eject_isocCsd}|jdkr&|dk r&t|_|jj}|jdkr:t||_|j|dk d}d}|dk rb|||}t||j|j}|dk r| || |S)aGets the VM's GoalState from Azure, uses the GoalState information to report ready/send the ready signal/provisioning complete signal to Azure, and then uses pubkey_info to filter and obtain the user's pubkeys from the GoalState. @param pubkey_info: List of pubkey values and fingerprints which are used to filter and obtain the user's pubkey values from the GoalState. @return: The list of user's authorized pubkey values. Nr) rrrrr_fetch_goal_state_from_azure_get_user_pubkeysrrrr)r pubkey_inforZhttp_client_certificaterssh_keyshealth_reporterr%r%r&"register_with_azure_and_fetch_data@s.   z3WALinuxAgentShim.register_with_azure_and_fetch_datarcCs@|jdkrtd|_|jdd}t||j|j}|j|ddS)zGets the VM's GoalState from Azure, uses the GoalState information to report failure/send provisioning failure signal to Azure. @param: user visible error description of provisioning failure. NFrr)rrrrrr)rrrr r%r%r&®ister_with_azure_and_report_failurefs   z7WALinuxAgentShim.register_with_azure_and_report_failure)rrcCs|}|||S)aFetches the GoalState XML from the Azure endpoint, parses the XML, and returns a GoalState object. @param need_certificate: switch to know if certificates is needed. @return: GoalState object representing the GoalState XML )"_get_raw_goal_state_xml_from_azure_parse_raw_goal_state_xml)rrunparsed_goal_state_xmlr%r%r&rus z-WALinuxAgentShim._fetch_goal_state_from_azurec Cstdd|j}z,tjddtd|j|}W5QRXWn6t k rx}zt d|tj dW5d}~XYnXt d |j S) zFetches the GoalState XML from the Azure endpoint and returns the XML as a string. @return: GoalState XML string zRegistering with Azure...z!http://{}/machine/?comp=goalstatezgoalstate-retrievalzretrieve goalstaterz9failed to register with Azure and fetch GoalState XML: %srPNz#Successfully fetched GoalState XML.)r>rNrmrrrr!rrrrrWrtr?r)rrrrFr%r%r&rs&   z3WALinuxAgentShim._get_raw_goal_state_xml_from_azure)rrrc Cs~zt||j|}Wn6tk rH}ztd|tjdW5d}~XYnXdd|jd|jd|j g}t|tj d|S)aParses a GoalState XML string and returns a GoalState object. @param unparsed_goal_state_xml: GoalState XML string @param need_certificate: switch to know if certificates is needed. @return: GoalState object representing the GoalState XML z"Error processing GoalState XML: %srPNz, zGoalState XML container id: %szGoalState XML instance id: %szGoalState XML incarnation: %s) rrrrrWr>rtr/rrrr?)rrrrrFrRr%r%r&rs( z*WALinuxAgentShim._parse_raw_goal_state_xml)rr rcCsHg}|jdk rD|dk rD|jdk rDtd|j|j}|||}|S)aGets and filters the VM admin user's authorized pubkeys. The admin user in this case is the username specified as "admin" when deploying VMs on Azure. See https://docs.microsoft.com/en-us/cli/azure/vm#az-vm-create. cloud-init expects a straightforward array of keys to be dropped into the admin user's authorized_keys file. Azure control plane exposes multiple public keys to the VM via wireserver. Select just the admin user's key(s) and return them, ignoring any other certs. @param goal_state: GoalState object. The GoalState object contains a certificate XML, which contains both the VM user's authorized pubkeys and other non-user pubkeys, which are used for MSI and protected extension handling. @param pubkey_info: List of VM user pubkey dicts that were previously obtained from provisioning data. Each pubkey dict in this list can either have the format pubkey['value'] or pubkey['fingerprint']. Each pubkey['fingerprint'] in the list is used to filter and obtain the actual pubkey value from the GoalState certificates XML. Each pubkey['value'] requires no further processing and is immediately added to the return list. @return: A list of the VM user's authorized pubkey values. Nz/Certificate XML found; parsing out public keys.)rrr>r?r_filter_pubkeys)rrr r keys_by_fingerprintr%r%r&rs  z"WALinuxAgentShim._get_user_pubkeys)rr rcCs|g}|D]n}d|kr,|dr,||dqd|krj|drj|d}||kr\|||qvtd|qtd|q|S)a8Filter and return only the user's actual pubkeys. @param keys_by_fingerprint: pubkey fingerprint -> pubkey value dict that was obtained from GoalState Certificates XML. May contain non-user pubkeys. @param pubkey_info: List of VM user pubkeys. Pubkey values are added to the return list without further processing. Pubkey fingerprints are used to filter and obtain the actual pubkey values from keys_by_fingerprint. @return: A list of the VM user's authorized pubkey values. rrzIovf-env.xml specified PublicKey fingerprint %s not found in goalstate XMLzFovf-env.xml specified PublicKey with neither value nor fingerprint: %s)rr>rt)rr rZpubkeyrr%r%r&rs" z WALinuxAgentShim._filter_pubkeys)NN)r rrrqrrr(rr rr rrrrrrr rlistrrdictrr%r%r%r&r+s<  % !)r)rr rcCs,t|d}z|j||dWS|XdS)Nr)r r)rrr )rr rshimr%r%r&get_metadata_from_fabrics  rrcCs.t|d}t}z|j|dW5|XdS)Nrr )r+DEFAULT_REPORT_FAILURE_USER_VISIBLE_MESSAGErr)rrrr%r%r&report_failure_to_fabrics  rcCs(td|tjdtd|tjddS)Nzdhclient output stream: %srPzdhclient error stream: %s)rWr>r?)rGerrr%r%r& dhcp_log_cb)src@s eZdZdS)BrokenAzureDataSourceNr rrr%r%r%r&r2src@s eZdZdS)NonAzureDataSourceNrr%r%r%r&r6src@s&eZdZdZeeddddZdS)ChassisAssetTagz 7783-7084-3265-9085-8269-3286-77rcCs\td}z ||}Wn(tk r>td|tjdYdSXtd||jftjd|S)zCheck platform environment to report if this datasource may run. :returns: ChassisAssetTag if matching tag found, else None. zchassis-asset-tagzNon-Azure chassis asset tag: %rrPNz Azure chassis asset tag: %r (%s))rZ read_dmi_datarArWr>r?r)clsZ asset_tagrr%r%r& query_system=s   zChassisAssetTag.query_systemN)r rrZ AZURE_CLOUD classmethodr r!r%r%r%r&r:src @seZdZdddZdddddddddeeeeeeeeeeeee eeedd dd Z ed d d Z e edd ddZ deeedddZdeeeedddZddZddZddZdS) OvfEnvXmlz)http://schemas.dmtf.org/ovf/environment/1z)http://schemas.microsoft.com/windowsazure)ZovfwaNFrpasswordr custom_datadisable_ssh_password_auth public_keyspreprovisioned_vmpreprovisioned_vm_type) rr&rr'r(r)r*r+rc Cs8||_||_||_||_||_|p$g|_||_||_dSr}r%) rrr&rr'r(r)r*r+r%r%r&rZs  zOvfEnvXml.__init__rcCs |j|jkSr})__dict__)rotherr%r%r&__eq__oszOvfEnvXml.__eq__) ovf_env_xmlrc Cszzt|}Wn6tjk rD}zd|}t||W5d}~XYnX|d|js\tdt}||| ||S)zParser for ovf-env.xml data. :raises NonAzureDataSource: if XML is not in Azure's format. :raises BrokenAzureDataSource: if XML is unparseable or invalid. zInvalid ovf-env.xml: %sNz./wa:ProvisioningSectionz=Ignoring non-Azure ovf-env.xml: ProvisioningSection not found) r rrrr NAMESPACESrr#&_parse_linux_configuration_set_section _parse_platform_settings_section)r r/rrFZ error_strinstancer%r%r& parse_textrs  zOvfEnvXml.parse_textr$)rrequired namespacecCsl|d||ftj}t|dkrDd|}t||r@t|dSt|dkrdtd|t|f|dS)Nz./%s:%sr#No ovf-env.xml configuration for %rr4:Multiple configuration matches in ovf-exml.xml for %r (%d))findallr#r0rr>r?r)rnoderr5r6matchesrRr%r%r&_finds"     zOvfEnvXml._find)rr5 decode_base64 parse_boolc Cs|d|tj}t|dkr@d|}t||rr?rrr\Z b64decoder/r7rZtranslate_bool) rr:rr5r=r>defaultr;rRrr%r%r&_parse_propertys*        zOvfEnvXml._parse_propertycCs|j|ddd}|j|ddd}|j|dddd|_|j|ddd|_|j|d dd|_|j|d dd|_|j|d ddd |_||dS) NZProvisioningSectionTr5Z!LinuxProvisioningConfigurationSetZ CustomDataF)r=r5ZUserNameZ UserPasswordZHostNameZ DisableSshPasswordAuthentication)r>r5)r<r@r'rr&rr(_parse_ssh_section)rrZprovisioning_section config_setr%r%r&r1sLz0OvfEnvXml._parse_linux_configuration_set_sectioncCsL|j|ddd}|j|ddd}|j|ddddd|_|j|ddd|_dS) NZPlatformSettingsSectionTrAZPlatformSettingsZPreprovisionedVmF)r>r?r5ZPreprovisionedVMType)r<r@r*r+)rrZplatform_settings_sectionZplatform_settingsr%r%r&r2s,z*OvfEnvXml._parse_platform_settings_sectionc Csg|_|j|ddd}|dkr"dS|j|ddd}|dkr>dS|dtjD]N}|j|ddd}|j|ddd}|j|dd dd }|||d }|j|qLdS) NZSSHFrAZ PublicKeysz./wa:PublicKeyZ FingerprintPathZValuer,)r?r5)rrr)r)r<r9r#r0r@r) rrCZ ssh_sectionZpublic_keys_sectionZ public_keyrrrrr%r%r&rBs@zOvfEnvXml._parse_ssh_section)r$)FFN)r rrr0r rqrrrrrr.r"r4r<r@r1r2rBr%r%r%r&r#TsV    $"r#)NN)Vr\enumraZloggingrhrrrr-r] contextlibrrr|rrrtypingrrr r r Z xml.etreer Zxml.sax.saxutilsr Z cloudinitrrrrrrrZcloudinit.reportingrZcloudinit.settingsrZ getLoggerr r>ZDEFAULT_WIRESERVER_ENDPOINTrCrMrVr`rlrprr!rrr(r9rJrOrqrBrWrcrxrerrrrrzrrrrrrrrrrrrrrrrEnumrr#r%r%r%r&s     $     S  (  7 "?"f