Current File : //usr/lib/python3.9/site-packages/cloudinit/sources/__pycache__/DataSourceEc2.cpython-39.pyc
a
��h � � @ s
d dl Z d dlZd dlZd dlZd dlZd dlmZ d dlmZm Z d dl
m Z m Z m
Z
d dl
mZ d dl
mZmZ d dlmZ d dlmZmZ d d lmZ d d
lmZ d d lm Z d d l m Z d d
l m Z e�!e"�Z#dZ$dZ%G dd� d�Z&dd� Z'e&j(gZ)dZ*G dd� de
j+�Z,G dd� de,�Z-dd� Z.dd � Z/d d � Z0d d � Z1d!d"� Z2d#d$� Z3d%d&� Z4d'd(� Z5d)d*� Z6d+d,� Z7e j8fee9ef ee9e9f e ee9e:f d-�d.d/�Z;e<e9e<ee=e:dd0�d1d2�Z>ddd3e j8fd4d5�Z?d6d7� Z@d8d9� ZAe-e
jBffe,e
jBe
jCffgZDd:d;� ZEdS )<� N)�suppress)�Dict�List)�dmi�net�sources)�
url_helper)�util�warnings)�Distro)�
EventScope� EventType)�netplan)�NoDHCPLeaseError)�EphemeralIPNetwork)�NicOrder)�ec2)Z
datasource�Ec2Z strict_id�warnc @ s( e Zd ZdZdZdZdZdZdZdZ dS ) �
CloudNamesZawsZ brightboxZzstack�e24cloudZoutscale�unknownzno-ec2-metadataN)
�__name__�
__module__� __qualname__�AWS� BRIGHTBOX�ZSTACK�E24CLOUD�OUTSCALE�UNKNOWN�NO_EC2_METADATA� r" r" �C/usr/lib/python3.9/site-packages/cloudinit/sources/DataSourceEc2.pyr $ s r c C s | j dkod| jv S )N� zmeta-data/tags/)�code�url)� exceptionr" r" r# �skip_404_tag_errors3 s r( zS
ENV{ID_NET_DRIVER}=="vif|ena|ixgbevf", GOTO="cloudinit_hook"
GOTO="cloudinit_end"
c s� e Zd ZU dZg d�ZdZg d�Zee e d< dZ
dZ dZ e
jZd ZejejejejejhiZejejejhiZeZ� fd
d �Z e dd �� fd
d� Z dd� Z dd� Z dd� Z!e"dd� �Z#e"dd� �Z$e"dd� �Z%e"dd � �Z&e"d d � �Z'e"d d � �Z(e"d!d"� �Z)d#d$� Z*d%d&� Z+d'd(� Z,d)d*� Z-d+d,� Z.e"d-d.� �Z/e"d/d0� �Z0d1d2� Z1e"d3d4� �Z2d5d6� Z3dBd7d8�Z4d9d:� Z5d;d<� Z6dCd=d>�Z7dDd@dA�Z8� Z9S )E�
DataSourceEc2r )zhttp://169.254.169.254zhttp://[fd00:ec2::254]zhttp://instance-data.:8773z
2009-04-04)z
2021-03-23z
2018-09-24z
2016-09-02�extended_metadata_versions�� �2 NFc s, t t| ��|||� d | _d | _tj| _d S �N)�superr) �__init__�metadata_address�identityr �MAC�_fallback_nic_order)�self�sys_cfg�distro�paths�� __class__r" r# r/ u s zDataSourceEc2.__init__)�ci_pkl_version�returnc s t � �|� t| _tj| _d S r- )r. � _unpickle�_EXTRA_HOTPLUG_UDEV_RULES�extra_hotplug_udev_rulesr r2 r3 )r4 r: r8 r" r# r< { s zDataSourceEc2._unpicklec C s t � S )z5Return the cloud name as identified during _get_data.)�identify_platform�r4 r" r" r# �_get_cloud_name� s z DataSourceEc2._get_cloud_namec C sF t t�| jtt�d�\}}t�d|| j| j � |dkrF| jt
j krFdS | jt
j krVdS | j
r�t�� rrt�d� dS zbt| j| jjddd��8}| �� | _t�d|jr�d |j� �nd
� W d � n1 s�0 Y W q� ty� Y dS 0 n
| �� | _| j�sdS | j�d d �| _| j�d d �| _| j�d
i ��di ��di �| _dS )N)r Nz0strict_mode: %s, cloud_name=%s cloud_platform=%s�trueFz1FreeBSD doesn't support running dhclient with -sfT)�ipv4�ipv6zCrawled metadata service%s� � � meta-data� user-data�dynamic�instance-identity�document)�read_strict_moder �get_cfg_by_pathr5 �STRICT_ID_PATH�STRICT_ID_DEFAULT�LOG�debug�
cloud_name�platformr r r! �perform_dhcp_setupZ
is_FreeBSDr r6 �fallback_interface�crawl_metadataZ_crawled_metadataZ state_msgr �get�metadataZ userdata_rawr1 )r4 Z strict_modeZ_sleepZnetwr" r" r# � _get_data� s^ ���
�
�&
���zDataSourceEc2._get_datac C sL | j s
dS | j �di ��di �}|�di ��� D ]\}}d|v r0 dS q0dS )z6Report if this instance type is Ec2 Classic (non-vpc).F�network�
interfaces�macszvpc-idT)rX rW �items)r4 Z ifaces_mdZ_macZmac_datar" r" r# �is_classic_instance� s z!DataSourceEc2.is_classic_instancec C s | j s
d S | j �d�S )Nzami-launch-index)rX rW r@ r" r" r# � launch_index� s zDataSourceEc2.launch_indexc C s | j stj�� | _ | j S r- )Z_platform_typer) �dsname�lowerr@ r" r" r# rS � s zDataSourceEc2.platformc C s dS )Nzlatest/api/tokenr" r@ r" r" r# �api_token_route� s z DataSourceEc2.api_token_routec C s dS )NZ21600r" r@ r" r" r# �imdsv2_token_ttl_seconds� s z&DataSourceEc2.imdsv2_token_ttl_secondsc C s dS )NzX-aws-ec2-metadata-tokenr" r@ r" r" r# �imdsv2_token_put_header� s z%DataSourceEc2.imdsv2_token_put_headerc C s
| j d S )Nz -ttl-seconds)rd r@ r" r" r# �imdsv2_token_req_header� s z%DataSourceEc2.imdsv2_token_req_headerc C s | j | jgS r- )rd re r@ r" r" r# �imdsv2_token_redact� s z!DataSourceEc2.imdsv2_token_redactc C s� d}| � � }| jD ]�}|�| j|�}ztj||| jd�}W n4 tjyn } zt� d||� W Y d}~qd}~0 0 |j
dkr�t� d|� | S |j
dkrd}t� |||j � q| j S ) aE Get the best supported api version from the metadata service.
Loop through all extended support metadata versions in order and
return the most-fully featured metadata api version discovered.
If extended_metadata_versions aren't present, return the datasource's
min_metadata_version.
z {0}/{1}/meta-data/instance-id)r& �headers�headers_redactzurl %s raised exception %sN�� z#Found preferred metadata version %sr$ z0Metadata api version %s not present. Headers: %s)
� _get_headersr* �formatr0 �uhelp�readurlrf �UrlErrorrP rQ r% rg �min_metadata_version)r4 Zurl_tmplrg Zapi_verr& Zresp�e�msgr" r" r# �get_metadata_api_version� s&
�
$
z&DataSourceEc2.get_metadata_api_versionc C sh | j tjkrZt| dd �sF| �� }tj|| j| j| j | j
d�� di �| _ | j � d| j
d �S | j
d S d S )Nr1 ��
headers_cbrh � exception_cbrK Z
instanceIdz instance-id)rR r r �getattrrr r �get_instance_identityr0 rj rf �_refresh_stale_aws_token_cbrW r1 rX )r4 � api_versionr" r" r# �get_instance_id s ��
�z DataSourceEc2.get_instance_idc
C s� | j tvrdS g }i }| j}d}|D ]"}d�||�}|�|� |||< q$t�d� d}d}| �� } z0tj || j
| j tj | j
| j|| jdd� \}}W n tjy� Y n0 |r�|r�|| _|| S dS )a Get an API token for EC2 Instance Metadata Service.
On EC2. IMDS will always answer an API token, unless
the instance owner has disabled the IMDS HTTP endpoint or
the network topology conflicts with the configured hop-limit.
N�PUT�{0}/{1}z Fetching Ec2 IMDSv2 API TokenF) �urls�max_wait�timeout� status_cbrt ru �request_methodrh Zconnect_synchronously)rR � IDMSV2_SUPPORTED_CLOUD_PLATFORMSrb rk �appendrP rQ �get_url_paramsrl � wait_for_url�max_wait_seconds�timeout_seconds�warningrj �_imds_exception_cbrf rn �
_api_token)
r4 �mdurlsr} �url2base�url_pathr� r& �cur�response�
url_paramsr" r" r# �_maybe_fetch_api_token s@
� z$DataSourceEc2._maybe_fetch_api_tokenc C sv g }d}| j }| �� }|jdkr$dS |�d| j�}dd� |D �}t|�t|�krlt�dtt|�t|� �� t |�rz|}nt�
d� | j}| � |�}|�s | j t
v�r i }dj| jd �} d
}
|D ]"} d �| | �} |�| � | || < q�t�� }tj||j|jtj
| j| j|
d �\} }
| �r || }|�r<|| _t�d
| j� n2| j t
v �rTt�
d� nt�d|tt�� | �� t|�S )Nr F�
metadata_urlsc S s g | ]}t �|�r|�qS r" )r Zis_resolvable_url)�.0�xr" r" r# �
<listcomp>U � z;DataSourceEc2.wait_for_metadata_service.<locals>.<listcomp>z,Removed the following from metadata urls: %sz+Empty metadata url list! using default listz{ver}/meta-data/instance-id)ZverZGETr| )r} r~ r r� rh rt r� zUsing metadata source: '%s'z)IMDS's HTTP endpoint is probably disabledz(Giving up on md from %s after %s seconds) �ds_cfgr� r� rW r� �setrP rQ �list�lenr� r� rR r� rk ro r� �time� monotonicrl r� r� rf rj r0 Zcritical�int�bool)r4 r} Z
start_timeZmcfgr� r� Zfilteredr0 r� r� r� r& r� �_r" r" r# �wait_for_metadata_serviceJ sl
�
���
�
�z'DataSourceEc2.wait_for_metadata_servicec C s� d| j vrd S d }| j d }t|t�s6t�d|� d S |�� D ],\}}||krV|} ql|dkr>|dkr>|}q>|d u r�t�d|� d S |}|�d�s�d| }tj� |�r�|S | �
tj� |��}|r�t�d||� |S |dkr�d S |S ) Nzblock-device-mappingz+block-device-mapping not a dictionary: '%s'Z ephemeralZ
ephemeral0z Unable to convert %s to a device�/z/dev/%sz Remapped device name %s => %s) rX �
isinstance�dictrP rQ r] �
startswith�os�path�existsZ
_remap_device�basename)r4 �name�foundZbdmZentnameZdeviceZofoundZremappedr" r" r# �device_name_to_device� s8
z#DataSourceEc2.device_name_to_devicec C sT z:| j tjkr(| j�d| jd d �W S | jd d W S W n tyN Y d S 0 d S )NZavailabilityZoneZ placementzavailability-zone)rR r r r1 rW rX �KeyErrorr@ r" r" r# �availability_zone� s � z DataSourceEc2.availability_zonec C sR | j tjkr4| j�d�}| jr0|s0| jd d� }|S | j}|d urN|d d� S d S )N�region���)rR r r r1 rW r� )r4 r� �azr" r" r# r� � s
zDataSourceEc2.regionc C s, |sd S | j tjkr(tt�|tt�|� d S r- )rR r r �warn_if_necessaryr rM rN rO )r4 �cfgZis_new_instancer" r" r# �activate� s �zDataSourceEc2.activatec C s� | j tjkr| j S | jdu r*t�d� dS d}| jj}| j�d�}t |t
�r�t || j|t �
| jdd�| jd�}| �� r�t�| j�| _| jtj �tj� | jtj �tj� n t�d|� || _ | j S )z@Return a network config dict for rendering ENI or netplan files.Nz8Unexpected call to network_config when metadata is None.rZ Z apply_full_imds_network_configT)� fallback_nic�full_network_config�fallback_nic_orderz%Metadata 'network' key not valid: %s.)�_network_configr �UNSETrX rP r� r6 rU rW r� r� �#convert_ec2_metadata_network_configr Zget_cfg_option_boolr� r3 r^ �copy�deepcopy�default_update_eventsr �NETWORK�addr
�BOOT� BOOT_LEGACY)r4 �resultZifaceZnet_mdr" r" r# �network_config� sB
�
�� � � � z DataSourceEc2.network_configc C s | � � s i S | �� }| j}i }| jtv r:| j}| j}d}n&| jtjkrTd }}t }n d } }}zxt
j || j | j
||d�}t�|�|d< t
j|| j | j
|||d�|d< | jtjkr�t
j|| j | j
||d�}d|i|d< W n( t�y t�td| j � i Y S 0 ||d < |S )
z�Crawl metadata service when available.
@returns: Dictionary of crawled metadata content containing the keys:
meta-data, user-data and dynamic.
Nrs rH )rt rh ru Z retrieval_exception_ignore_cbrG rJ rI z'Failed reading from metadata address %sZ_metadata_api_version)r� rr rf rR r� rx �#_skip_or_refresh_stale_aws_token_cbr r r( r Zget_instance_userdatar0 rj r Zmaybe_b64decodeZget_instance_metadatar rw � ExceptionZlogexcrP ) r4 ry ZredactZcrawled_metadataZexc_cbZ exc_cb_udZskip_cbZ raw_userdatar1 r" r" r# rV s`
��
��
z DataSourceEc2.crawl_metadatac
C s� | j tvrdS |du r | j}t�d� | j|i}d�| j| j�}zt j
||| j dd�}W n6 t j y� } z t�
d||� W Y d}~dS d}~0 0 |jS )z�Request new metadata API token.
@param seconds: The lifetime of the token in seconds
@return: The API token or None if unavailable.
Nz!Refreshing Ec2 metadata API tokenz{}/{}r{ )rg rh r� z/Unable to get API token: %s raised exception %s)rR r� rc rP rQ re rk r0 rb rl rm rf rn r� �contents)r4 ZsecondsZrequest_headerZ token_urlr� rp r" r" r# �_refresh_api_tokenS s(
�
�z DataSourceEc2._refresh_api_tokenc C s$ t �t j||�}|sdS | �||�S )zSCallback will not retry on SKIP_USERDATA_CODES or if no token
is available.F)r Zskip_retry_on_codesZSKIP_USERDATA_CODESrx )r4 rq r' Zretryr" r" r# r� p s �z1DataSourceEc2._skip_or_refresh_stale_aws_token_cbc C s* t |tj�r&|jdkr&t�d� d| _dS )z=Exception handler for Ec2 to refresh token if token is stale.i� z+Clearing cached Ec2 API token due to expiryNT)r� rl rn r% rP rQ r� �r4 rq r' r" r" r# rx z s
z)DataSourceEc2._refresh_stale_aws_token_cbc C sD t |tj�r@|jr@|jdkr@|jdkr2t�d� n
t�d� |�dS )a2 Fail quickly on proper AWS if IMDSv2 rejects API token request
Guidance from Amazon is that if IMDSv2 had disabled token requests
by returning a 403, or cloud-init malformed requests resulting in
other 40X errors, we want the datasource detection to fail quickly
without retries as those symptoms will likely not be resolved by
retries.
Exceptions such as requests.ConnectionError due to IMDS being
temporarily unroutable or unavailable will still retry due to the
callsite wait_for_url.
i� i� zLEc2 IMDS endpoint returned a 403 error. HTTP endpoint is disabled. Aborting.z2Fatal error while requesting Ec2 IMDSv2 API tokensN)r� rl rn r% rP r� r� r" r" r# r� � s
��z DataSourceEc2._imds_exception_cbrF c C sN | j tvri S | j| ji}| j|v r(|S | jsB| �� | _| jsBi S | j| jiS )z�Return a dict of headers for accessing a url.
If _api_token is unset on AWS, attempt to refresh the token via a PUT
and then return the updated token header.
)rR r� re rc rb r� r� rd )r4 r& Zrequest_token_headerr" r" r# rj � s
�
zDataSourceEc2._get_headers)N)N)rF ):r r r r` r� ro r* r �str�__annotations__Z url_max_waitZ url_timeoutr� r r� r� rT r r� r
ZBOOT_NEW_INSTANCEr� r� ZHOTPLUGZsupported_update_eventsr� r= r> r/ r� r< rA rY r^ �propertyr_ rS rb rc rd re rf rr rz r� r� r� r� r� r� r� rV r� r� rx r� rj �
__classcell__r" r" r8 r# r) B sv
��
�� 3
2J3
/8
r) c s$ e Zd ZdZdZ� fdd�Z� ZS )�DataSourceEc2Localay Datasource run at init-local which sets up network to query metadata.
In init-local, no network is available. This subclass sets up minimal
networking with dhclient on a viable nic so that it can talk to the
metadata service. If the metadata service provides network configuration
then render the network configuration for that instance based on metadata.
Tc s8 t jt jf}| j|vr*t�d|| j� dS tt| ��� S )Nz+Local Ec2 mode only supported on %s, not %sF) r r r rR rP rQ r. r� �get_data)r4 Zsupported_platformsr8 r" r# r� � s
�zDataSourceEc2Local.get_data)r r r �__doc__rT r� r� r" r" r8 r# r� � s r� c
C sB z
t | �W S ty< } zt�|� |W Y d }~S d }~0 0 d S r- )�parse_strict_mode�
ValueErrorrP r� )�cfgval�defaultrp r" r" r# rL � s
rL c
C s� | du r dS | du rdS | s dS | � d�\}}}|dvrHtd|| f ��|r�z t|�}W q� ty� } z td || f �|�W Y d }~q�d }~0 0 nd }||fS )
NT)rB NF)�falseN)r r �,)rB r� r zUInvalid mode '%s' in strict_id setting '%s': Expected one of 'true', 'false', 'warn'.z<Invalid sleep '%s' in strict_id setting '%s': not an integer)� partitionr� r� )r� �moder� �sleeprp r" r" r# r� � s4 �� ���r� c
C sd zt | �\}}W n0 ty@ } zt�|� W Y d }~d S d }~0 0 |dkrNd S tjd|d|d� d S )Nr� Z
non_ec2_mdT)r� r� )r� r� rP r� r
Z show_warning)r� r� r� r� rp r" r" r# r� � s
r� c C sn | d }|� d�rtjS tt��: t�|�j�� � d�rLtjW d � S W d � n1 s`0 Y d S )N�uuidr ) r� r r r r� r� ZUUIDZbytes_le�hex)�dataZuuid_strr" r" r# � identify_aws s
2r� c C s | d � d�rtjS d S )N�serialz.brightbox.com)�endswithr r �r� r" r" r# �identify_brightbox s r� c C s | d � d�rtjS d S )N� asset_tagz
.zstack.io)r� r r r� r" r" r# �identify_zstack s r� c C s | d dkrt jS d S )N�vendorr )r r r� r" r" r# �identify_e24cloud s r� c C s* | d d� � kr&| d d� � kr&tjS d S )N� product_namez3DS Outscale VMr� z 3DS Outscale)ra r r r� r" r" r# �identify_outscale! s
��r� c C sx t � } tttttdd� f}|D ]T}z|| �}|r:|W S W q typ } z t�d|| |� W Y d }~q d }~0 0 q d S )Nc S s t jS r- )r r )r� r" r" r# �<lambda>2 r� z#identify_platform.<locals>.<lambda>z'calling %s with %s raised exception: %s) �_collect_platform_datar� r� r� r� r� r� rP r� )r� ZchecksZcheckerr� rp r" r" r# r? ) s" ��r? c C s� d} t tt�� t�d��� } W d � n1 s20 Y | pLt�d�pLd} t�d�pZd}t�d�phd}t�d�pvd}t�d�p�d}| �� |�� |�� |�� |�� d �S )
aF Returns a dictionary of platform info from dmi or /sys/hypervisor.
Keys in the dictionary are as follows:
uuid: system-uuid from dmi or /sys/hypervisor
serial: dmi 'system-serial-number' (/sys/.../product_serial)
asset_tag: 'dmidecode -s chassis-asset-tag'
vendor: dmi 'system-manufacturer' (/sys/.../sys_vendor)
product_name: dmi 'system-product-name' (/sys/.../system-manufacturer)
On Ec2 instances experimentation is that product_serial is upper case,
and product_uuid is lower case. This returns lower case values for both.
Nz/sys/hypervisor/uuidz system-uuidrF zsystem-serial-numberzchassis-asset-tagzsystem-manufacturerzsystem-product-name�r� r� r� r� r� ) r �OSError�UnicodeDecodeErrorr Zload_text_file�stripr Z
read_dmi_datara r� r" r" r# r� ? s
,�r� )�
macs_metadata� macs_to_nicsr� r; c sn i }t ��dks t ��dkr |S tdd� t��fdd���� ��}dd� � dd� tt|� �fd d�d
��D �S ) aI
Builds a dictionary containing macs as keys and nic orders as values,
taking into account `network-card` and `device-number` if present.
Note that the first NIC will be the primary NIC as it will be the one with
[network-card] == 0 and device-number == 0 if present.
@param macs_metadata: dictionary with mac address as key and contents like:
{"device-number": "0", "interface-id": "...", "local-ipv4s": ...}
@macs_to_nics: dictionary with mac address as key and nic name as value
@return: Dictionary with macs as keys and nic orders as values.
r c S s | d d uS )N� r" �Zmmdr" r" r# r� w r� z"_build_nic_order.<locals>.<lambda>c s | � � | ��| fS r- )rW )�mac)r� r� r" r# r� z r� c S s | � |d �}|d ur t|�S |S r- )rW r� )Zdikt�keyZ alt_value�valuer" r" r# �_get_key_as_int_or s z,_build_nic_order.<locals>._get_key_as_int_orc S s i | ]\}\}}}||�qS r" r" )r� �ir� Z
_mac_metadataZ _nic_namer" r" r# �
<dictcomp>� s �z$_build_nic_order.<locals>.<dictcomp>c s@ � | d dt d��� | d dt d���tjkr6| d n| d fS )Nr� z network-cardZinfinity�
device-number� r )�floatr ZNIC_NAMEr� )r� r� r" r# r� � s ���
�)r� )r� �filter�map�keys� enumerate�sorted)r� r� r� � nic_orderZvalid_macs_metadatar" )r� r� r� r� r# �_build_nic_order_ s& ��
���r� )�
dev_config�nic_name� nic_metadatar6 �is_ipv4�tabler; c
C sJ |r|� d�}|� d�}n|� d�}|� d�}|r6|sNt�d|rDdnd� dS | � d �s`g | d < |r�z |jj||d
�}|d } W n2 ty� }
zt�d ||
� W Y d}
~
n d}
~
0 0 | d �d
| |d�� t|t �r�|gn|}|D ]} | d �| |d�� q�| � d��sg | d< t|t ��r"|gn|}|D ]} | d �| |d�� �q*dS )a�
Configure policy-based routing on secondary NICs / secondary IPs to
ensure outgoing packets are routed via the correct interface.
@param: dev_config: network cfg v2 to be updated inplace.
@param: nic_name: nic name. Only used if ipv4.
@param: nic_metadata: nic metadata from IMDS.
@param: distro: Instance of Distro. Only used if ipv4.
@param: is_ipv4: Boolean indicating if we are acting over ipv4 or not.
@param: table: Routing table id.
�subnet-ipv4-cidr-block� local-ipv4szsubnet-ipv6-cidr-blocks�ipv6szANot enough IMDS information to configure policy routing for IPv%s�4�6N�routes)r6 ZrouterszoCould not perform dhcp discovery on %s to find its gateway. Not adding default route via the gateway. Error: %sz 0.0.0.0/0)�toZviar )r r �routing-policy)�fromr )
rW rP rQ Z dhcp_clientZdhcp_discoveryr r� r� r� r� )
r r r r6 r r Zsubnet_prefix_routes�ipsZleaseZgatewayrp Z prefix_route�ipr" r" r# �_configure_policy_routing� s`
�
� ��
���� ��r Tc C s2 di d�}|st �� }| d d }|s�|�� D ]\}} | |kr. qDq.ddd|�� i| d�}
|�|�} | �d �rvd|
d
< |
|d | < |S t|jtj�} t |||�}
t
|� � �}|D �]}|| } |�|�} | s�q�|
| }|d k}d
|d d i}d|dd|�� i| d�}
d| }| �rB| �d��rB|�sBd|d< t |
|| | d|d� | �d ��r�d|
d
< ||
d< | �r�| �d��r�|�s�t |
|| | d|d� t
| |�|
d< |
d �s�|
�d� |
|d | < q�t|d �dk�r.|d � � D ]T} |d | �d� |d | �dd� |d | �dd� |d | �dd� �q�|S )a8 Convert ec2 metadata to network config version 2 data dict.
@param: network_md: 'network' portion of EC2 metadata.
generally formed as {"interfaces": {"macs": {}} where
'macs' is a dictionary with mac address as key and contents like:
{"device-number": "0", "interface-id": "...", "local-ipv4s": ...}
@param: distro: instance of Distro.
@param: macs_to_nics: Optional dict of mac addresses and nic names. If
not provided, get_interfaces_by_mac is called to get it from the OS.
@param: fallback_nic: Optionally provide the primary nic interface name.
This nic will be guaranteed to minimally have a dhcp4 configuration.
@param: full_network_config: Boolean set True to configure all networking
presented by IMDS. This includes rendering secondary IPv4 and IPv6
addresses on all NICs and rendering network config on secondary NICs.
If False, only the primary nic will be configured and only with dhcp
(IPv4/IPv6).
@return A dict of network config version 2 based on the metadata and macs.
r� )�version� ethernetsr[ r\ TFZ
macaddress)�dhcp4�dhcp6�match�set-namer r r r z route-metricr� �d )r �dhcp4-overridesr r r r� z
use-routes)r6 r r r r zdhcp6-overrides� addressesr Nr
r )r Zget_interfaces_by_macr] ra rW r� Znetwork_rendererr ZRendererr� r� r� r �get_secondary_addresses�popr� )Z
network_mdr6 r� r� r� r� Znetcfgr� r� r r r Z
is_netplanr� r\ Znic_idxZis_primary_nicZ
dhcp_overrider r" r" r# r� � s�
�
�
����� ����
r� c C s� | � d�}| � d�}g }tt|t�o.t|�dk�rH|�t| d||d�� tt|t�o^t|�dk�rx|�t| d||d�� t|�S )z�Parse interface-specific nic metadata and return any secondary IPs
:return: List of secondary IPv4 or IPv6 addresses to configure on the
interface
r r r� r Z24zsubnet-ipv6-cidr-blockZ128)rW r� r� r� r� �extend�_get_secondary_addressesr� )r r� Zipv4sr r r" r" r# r s s
��
��r c
C s� g }| � |�}|}|r(t|�d��dkrNd|v r4dnd}t�d|||||� n|�d�d }|dd� D ]} |�dj| |d �� qh|S )
z�Return list of IP addresses as CIDRs for secondary IPs
The CIDR prefix will be default_prefix if cidr_key is absent or not
parseable in nic_metadata.
r� r� rC rD zJCould not parse %s %s for mac %s. %s network config prefix defaults to /%sr� Nz
{ip}/{prefix})r �prefix)rW r� �splitrP r� r� rk )
r Zcidr_keyr� r �default_prefixr Zcidrr Zip_typer r" r" r# r � s"
�
r c C s t �| t�S r- )r Zlist_from_depends� datasources)Zdependsr" r" r# �get_datasource_list� s r" )Fr� Zloggingr� r� r� �
contextlibr �typingr r Z cloudinitr r r r rl r r
Zcloudinit.distrosr Zcloudinit.eventr r
Z
cloudinit.netr Zcloudinit.net.dhcpr Zcloudinit.net.ephemeralr Zcloudinit.sourcesr Zcloudinit.sources.helpersr Z getLoggerr rP rN rO r r( r r� r= Z
DataSourcer) r� rL r� r� r� r� r� r� r� r? r� r2 r� r� r� r� r� r r� r r ZDEP_FILESYSTEMZ DEP_NETWORKr! r" r" r" r" r# �<module> s�
w!
#�
� D� X�
|
�
Mini Shell