Class: Teleport::Infer

Inherits:
Object
  • Object
show all
Includes:
Util
Defined in:
lib/teleport/infer.rb

Defined Under Namespace

Classes: Apt

Constant Summary collapse

MD5SUMS =

Copyright 2011 DevStructure. All rights reserved.

Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met:

1.  Redistributions of source code must retain the above copyright
    notice, this list of conditions and the following disclaimer.

2.  Redistributions in binary form must reproduce the above
    copyright notice, this list of conditions and the following
    disclaimer in the documentation and/or other materials provided
    with the distribution.

THIS SOFTWARE IS PROVIDED BY DEVSTRUCTURE “AS IS” AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL DEVSTRUCTURE OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.

The views and conclusions contained in the software and documentation are those of the authors and should not be interpreted as representing official policies, either expressed or implied, of DevStructure.

(for MD5SUMS)

{
  '/etc/adduser.conf' => ['/usr/share/adduser/adduser.conf'],
  '/etc/apparmor.d/tunables/home.d/ubuntu' =>
  ['2a88811f7b763daa96c20b20269294a4'],
  '/etc/apt/apt.conf.d/00CDMountPoint' =>
  ['cb46a4e03f8c592ee9f56c948c14ea4e'],
  '/etc/apt/apt.conf.d/00trustcdrom' =>
  ['a8df82e6e6774f817b500ee10202a968'],
  '/etc/chatscripts/provider' => ['/usr/share/ppp/provider.chatscript'],
  '/etc/default/console-setup' =>
  ['0fb6cec686d0410993bdf17192bee7d6',
   'b684fd43b74ac60c6bdafafda8236ed3',
   '/usr/share/console-setup/console-setup'],
  '/etc/default/grub' => ['ee9df6805efb2a7d1ba3f8016754a119',
                          'ad9283019e54cedfc1f58bcc5e615dce'],
  '/etc/default/irqbalance' => ['7e10d364b9f72b11d7bf7bd1cfaeb0ff'],
  '/etc/default/keyboard' => ['06d66484edaa2fbf89aa0c1ec4989857'],
  '/etc/default/locale' => ['164aba1ef1298affaa58761647f2ceba',
                            '7c32189e775ac93487aa4a01dffbbf76'],
  '/etc/default/rcS' => ['/usr/share/initscripts/default.rcS'],
  '/etc/environment' => ['44ad415fac749e0c39d6302a751db3f2'],
  '/etc/hosts.allow' => ['8c44735847c4f69fb9e1f0d7a32e94c1'],
  '/etc/hosts.deny' => ['92a0a19db9dc99488f00ac9e7b28eb3d'],
  '/etc/initramfs-tools/modules' =>
  ['/usr/share/initramfs-tools/modules'],
  '/etc/inputrc' => ['/usr/share/readline/inputrc'],
  '/etc/iscsi/iscsid.conf' => ['6c6fd718faae84a4ab1b276e78fea471'],
  '/etc/kernel-img.conf' => ['f1ed9c3e91816337aa7351bdf558a442'],
  '/etc/ld.so.conf' => ['4317c6de8564b68d628c21efa96b37e4'],
  '/etc/networks' => ['/usr/share/base-files/networks'],
  '/etc/nsswitch.conf' => ['/usr/share/base-files/nsswitch.conf'],
  '/etc/pam.d/common-account' => ['9d50c7dda6ba8b6a8422fd4453722324'],
  '/etc/pam.d/common-auth' => ['a326c972f4f3d20e5f9e1b06eef4d620'],
  '/etc/pam.d/common-password' => ['9f2fbf01b1a36a017b16ea62c7ff4c22'],
  '/etc/pam.d/common-session' => ['e2b72dd3efb2d6b29698f944d8723ab1'],
  '/etc/pam.d/common-session-noninteractive' =>
  ['508d44b6daafbc3d6bd587e357a6ff5b'],
  '/etc/ppp/chap-secrets' => ['faac59e116399eadbb37644de6494cc4'],
  '/etc/ppp/pap-secrets' => ['698c4d412deedc43dde8641f84e8b2fd'],
  '/etc/ppp/peers/provider' => ['/usr/share/ppp/provider.peer'],
  '/etc/profile' => ['/usr/share/base-files/profile'],
  '/etc/python/debian_config' => ['7f4739eb8858d231601a5ed144099ac8'],
  '/etc/rc.local' => ['10fd9f051accb6fd1f753f2d48371890'],
  '/etc/rsyslog.d/50-default.conf' =>
  ['/usr/share/rsyslog/50-default.conf'],
  '/etc/security/opasswd' => ['d41d8cd98f00b204e9800998ecf8427e'],
  '/etc/sgml/xml-core.cat' => ['bcd454c9bf55a3816a134f9766f5928f'],
  '/etc/shells' => ['0e85c87e09d716ecb03624ccff511760'],
  '/etc/ssh/sshd_config' => ['e24f749808133a27d94fda84a89bb27b',
                             '8caefdd9e251b7cc1baa37874149a870'],
  '/etc/sudoers' => ['02f74ccbec48997f402a063a172abb48'],
  '/etc/ufw/after.rules' => ['/usr/share/ufw/after.rules'],
  '/etc/ufw/after6.rules' => ['/usr/share/ufw/after6.rules'],
  '/etc/ufw/before.rules' => ['/usr/share/ufw/before.rules'],
  '/etc/ufw/before6.rules' => ['/usr/share/ufw/before6.rules'],
  '/etc/ufw/ufw.conf' => ['/usr/share/ufw/ufw.conf']
}
NEW_FILES_WITHIN = 
%w(cron.d logrotate.d rsyslog.d init)
CHECKSUM_FILES = 
%w(bash.bashrc environment inputrc rc.local ssh/ssh_config ssh/sshd_config)

Constants included from Util

Util::BLUE, Util::CYAN, Util::GREEN, Util::MAGENTA, Util::RED, Util::RESET, Util::YELLOW

Instance Method Summary collapse

Methods included from Util

#banner, #chmod, #chown, #copy_metadata, #copy_perms, #cp, #cp_if_necessary, #cp_with_mkdir, #different?, #fails?, #fatal, #gem_if_necessary, #gem_version, #ln, #ln_if_necessary, #md5sum, #mkdir, #mkdir_if_necessary, #mv, #mv_with_mkdir, #package_if_necessary, #package_is_installed?, #process_by_pid?, #rm, #rm_and_mkdir, #rm_if_necessary, #run, #run_capture, #run_capture_lines, #run_quietly, #run_verbose!, #shell, #shell_escape, #succeeds?, #warning, #whoami

Constructor Details

#initialize ⇒ Infer

Returns a new instance of Infer.



103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
 
# File 'lib/teleport/infer.rb', line 103

def initialize
  @telfile = []

  if fails?("grep -q Ubuntu /etc/lsb-release")
    fatal "Sorry, --infer can only run on an Ubuntu machine."
  end

  append "#" * 72
  append "# Telfile inferred from #{`hostname`.strip} at #{Time.now}"
  append "#" * 72
  append

  user
  ruby
  apt
  packages
  files

  banner "Done!"
  $stderr.puts
  @telfile.each { |i| puts i }
end

Instance Method Details

#append(s = nil) ⇒ Object 



126
127
128
 
# File 'lib/teleport/infer.rb', line 126

def append(s = nil)
  @telfile << (s || "")
end

#apt ⇒ Object 



146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
 
# File 'lib/teleport/infer.rb', line 146

def apt
  banner "Calculating apt sources and keys..."
  list = Dir["/etc/apt/sources.list.d/*.list"].sort
  list = run_capture_lines("cat /etc/apt/sources.list #{list.join(" ")}")
  list = list.grep(/^deb /).sort
  list.each do |line|
    if line =~ /^deb http:\/\/(\S+)\s+(\S+)/
      source, dist = $1, $2
      file = source.chomp("/").gsub(/[^a-z0-9.-]/, "_")
      file = "/var/lib/apt/lists/#{file}_dists_#{dist}_Release"
      next if !File.exists?(file)

      verify = run_capture("gpgv --keyring /etc/apt/trusted.gpg #{file}.gpg #{file} 2>&1")
      key = verify[/key ID ([A-Z0-9]{8})$/, 1]
      next if key == "437D05B5" # canonical key
      append "apt #{line.inspect}, :key => #{key.inspect}"
    end
  end
end

#files ⇒ Object 



178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
 
# File 'lib/teleport/infer.rb', line 178

def files
  banner "Looking for interesting files..."
  files = []

  # read checksums from dpkg status
  conf = { }
  File.readlines("/var/lib/dpkg/status").each do |line|
    if line =~ /^ (\S+) ([0-9a-f]{32})/
      conf[$1] = $2
    end
  end

  # look for changed conf files
  $stderr.puts "  scanning conf files from interesting packages..."
  @packages.each do |pkg|
    list = run_capture_lines("dpkg -L #{pkg}")
    list = list.select { |i| i =~ /^\/etc/ }.sort
    list = list.select { |i| File.file?(i) }
    list = list.select { |i| conf[i] && conf[i] != md5sum(i) }
    files += list
  end

  # look for new files in NEW_FILES_WITHIN
  dirs = NEW_FILES_WITHIN.map { |i| "/etc/#{i}" }
  dirs.sort.each do |dir|
    $stderr.puts "  scanning #{dir} for new files..."
    list = Dir["#{dir}/*"].sort
    list = list.select { |i| !MD5SUMS[i] }
    list = list.select { |i| fails?("dpkg -S #{i}") }
    files += list
  end

  # now look for changed files from CHECKSUM_FILES
  scan = CHECKSUM_FILES.map { |i| "/etc/#{i}" }
  scan = scan.select { |i| File.file?(i) }
  scan.each do |i|
    new_sum = md5sum(i)
    if old_sum = MD5SUMS[i]
      match = old_sum.any? do |sum|
        sum = md5sum(sum) if sum =~ /^\//
        new_sum == sum
      end
      files << i if !match
    elsif old_sum = conf[i]
      files << i if new_sum != old_sum
    end
  end
  files = files.sort

  if !files.empty?
    append
    append "#" * 72
    append "# Also, I think these should be included in files/"
    append "#" * 72
    append
    files.each { |i| append "# #{i}" }
    append
    append "# You can do that with this magical command:"
    append "#"
    append "# mkdir files && cd files && tar cf - #{files.join(" ")} | tar xf -"
  end
end

#packages ⇒ Object 



166
167
168
169
170
171
172
173
174
175
176
 
# File 'lib/teleport/infer.rb', line 166

def packages
  banner "Looking for interesting packages..."
  @packages = Apt.new.added
  if !@packages.empty?
    append
    append "# Note: You should read this package list very carefully and remove"
    append "# packages that you don't want on your server."
    append
    append "packages %w(#{@packages.join(" ")})"
  end
end

#ruby ⇒ Object 



134
135
136
137
138
139
140
141
142
143
144
 
# File 'lib/teleport/infer.rb', line 134

def ruby
  version = `ruby --version`
  ruby = nil
  case version
  when /Ruby Enterprise Edition/ then ruby = "REE"
  when /1\.8\.7/ then ruby = "1.8.7"
  when /1\.9\.2/ then ruby = "1.9.2"
  when /1\.9\.3/ then ruby = "1.9.3"
  end
  append "ruby #{ruby.inspect}" if ruby
end

#user ⇒ Object 



130
131
132
 
# File 'lib/teleport/infer.rb', line 130

def user
  append "user #{`whoami`.strip.inspect}"
end