# Temporary fix before Highline 1.5.1 is release. This fixes # a the issue with Ruby 1.9 that causes the prompts to hang. $:.unshift File.join(File.dirname(__FILE__), '..', 'vendor', 'highline-1.5.1', 'lib') require 'logger' require 'thread' require 'base64' require 'net/ssh' require 'net/scp' require 'openssl' require 'tempfile' require 'highline' require 'storable' require 'sysinfo' require 'esc' # = Rye # # Safely run remote commands via SSH in Ruby. # # Rye is similar to Rush[http://rush.heroku.com] but everything # happens over SSH (no HTTP daemon) and the default settings are # less dangerous (for safety). For example, file globs and the # "rm" command are disabled so unless otherwise specified, you # can't do this: rbox.rm('/etc/**/*'). # # However, you can do this: # # rset = Rye::Set.new("dev-machines") # rset.add_boxes('host1', 'host2', 'host3', 'host4') # rset.ps('aux') # # * See +bin/try+ for a bunch of working examples. # * See Rye::Box#initialize for info about disabling safe-mode. # #-- # The following posts were really helpful when I first wrote Rye: # http://www.nofluffjuststuff.com/blog/david_bock/2008/10/ruby_s_closure_cleanup_idiom_and_net_ssh.html # http://groups.google.com/group/ruby-talk-google/browse_thread/thread/674a6f6de15ceb49?pli=1 # http://paste.lisp.org/display/6912 #++ module Rye extend self unless defined?(SYSINFO) VERSION = 0.7.freeze SYSINFO = SysInfo.new.freeze end @@agent_env = Hash.new # holds ssh-agent env vars @@mutex = Mutex.new # for synchronizing threads # Accessor for an instance of SystemInfo def Rye.sysinfo; SYSINFO; end # Accessor for an instance of SystemInfo def sysinfo; SYSINFO; end class NoBoxes < RuntimeError; end class NoHost < RuntimeError; end class NotConnected < RuntimeError; end class CommandNotFound < RuntimeError; end class NoPty < RuntimeError def message; "Could not obtain pty (i.e. an interactive ssh session)"; end end class CommandError < RuntimeError attr_reader :rap # * +rap+ a Rye::Rap object def initialize(rap) @rap = rap end def message "(code: %s) %s" % [@rap.exit_code, @rap.stderr.join($/)] end def stderr; @rap.stderr if @rap; end def stdout; @rap.stdout if @rap; end def exit_code; @rap.exit_code if @rap; end end # Reload Rye dynamically. Useful with irb. # NOTE: does not reload rye.rb. def reload pat = File.join(File.dirname(__FILE__), 'rye') %w{key rap cmd box set}.each {|lib| load File.join(pat, "#{lib}.rb") } end def mutex @@mutex end # Looks for private keys in +path+ and returns and Array of paths # to the files it fines. Raises an Exception if path does not exist. # If path is a file rather than a directory, it will check whether # that single file is a private key. def find_private_keys(path) raise "#{path} does not exist" unless File.exists?(path || '') if File.directory?(path) files = Dir.entries(path).collect { |file| File.join(path, file) } else files = [path] end files = files.select do |file| next if File.directory?(file) pk = nil begin tmp = Rye::Key.from_file(file) pk = tmp if tmp.private? rescue OpenSSL::PKey::PKeyError end !pk.nil? end files || [] end # Add one or more private keys to the SSH Agent. # * +keys+ one or more file paths to private keys used for passwordless logins. def add_keys(*keys) keys = keys.flatten.compact || [] return if keys.empty? Rye.shell("ssh-add", keys) end # Returns an Array of info about the currently available # SSH keys, as provided by the SSH Agent. See # Rye.start_sshagent_environment # # Returns: [[bits, finger-print, file-path], ...] # def keys # 2048 76:cb:d7:82:90:92:ad:75:3d:68:6c:a9:21:ca:7b:7f /Users/rye/.ssh/id_rsa (RSA) # 2048 7b:a6:ba:55:b1:10:1d:91:9f:73:3a:aa:0c:d4:88:0e /Users/rye/.ssh/id_dsa (DSA) keystr = Rye.shell("ssh-add", '-l') return nil unless keystr keystr.collect do |key| key.split(/\s+/) end end def remote_host_keys(*hostnames) hostnames = hostnames.flatten.compact || [] return if hostnames.empty? Rye.shell("ssh-keyscan", hostnames) end # Takes a command with arguments and returns it in a # single String with escaped args and some other stuff. # # * +cmd+ The shell command name or absolute path. # * +args+ an Array of command arguments. # # The command is searched for in the local PATH (where # Rye is running). An exception is raised if it's not # found. NOTE: Because this happens locally, you won't # want to use this method if the environment is quite # different from the remote machine it will be executed # on. # # The command arguments are passed through Escape.shell_command # (that means you can't use environment variables or asterisks). # def prepare_command(cmd, *args) args &&= [args].flatten.compact cmd = Rye.which(cmd) raise CommandNotFound.new(cmd || 'nil') unless cmd # Symbols to switches. :l -> -l, :help -> --help args.collect! do |a| a = "-#{a}" if a.is_a?(Symbol) && a.to_s.size == 1 a = "--#{a}" if a.is_a?(Symbol) a end Rye.escape(@safe, cmd, *args) end # An all ruby implementation of unix "which" command. # # * +executable+ the name of the executable # # Returns the absolute path if found in PATH otherwise nil. def which(executable) return unless executable.is_a?(String) #return executable if File.exists?(executable) # SHOULD WORK, MUST TEST shortname = File.basename(executable) dir = Rye.sysinfo.paths.select do |path| # dir contains all of the next unless File.exists? path # occurrences of shortname Dir.new(path).entries.member?(shortname) # found in the paths. end File.join(dir.first, shortname) unless dir.empty? # Return just the first end # Execute a local system command (via the shell, not SSH) # # * +cmd+ the executable path (relative or absolute) # * +args+ Array of arguments to be sent to the command. Each element # is one argument:. i.e. ['-l', 'some/path'] # # NOTE: shell is a bit paranoid so it escapes every argument. This means # you can only use literal values. That means no asterisks too. # # Returns a Rye::Rap object containing the def shell(cmd, *args) args = args.flatten.compact cmd = cmd.to_s if cmd.is_a?(Symbol) # TODO: allow stdin to be sent to the cmd tf = Tempfile.new(cmd) cmd = Rye.prepare_command(cmd, args) cmd << " 2>#{tf.path}" # Redirect STDERR to file. Works in DOS too. # Deal with STDOUT handle = IO.popen(cmd, "r") stdout = handle.read.chomp handle.close # Then STDERR stderr = File.exists?(tf.path) ? File.read(tf.path) : '' tf.delete # Create the response object rap = Rye::Rap.new(self) rap.add_stdout(stdout || '') rap.add_stderr(stderr || '') rap.add_exit_code($?) rap end # Creates a string from +cmd+ and +args+. If +safe+ is true # it will send them through Escape.shell_command otherwise # it will return them joined by a space character. def escape(safe, cmd, *args) args = args.flatten.compact || [] safe ? Escape.shell_command(cmd, *args).to_s : [cmd, args].flatten.compact.join(' ') end def sshagent_info @@agent_env end # Returns +str+ with the leading indentation removed. # Stolen from http://github.com/mynyml/unindent/ because it was better. def without_indent(str) indent = str.split($/).each {|line| !line.strip.empty? }.map {|line| line.index(/[^\s]/) }.compact.min str.gsub(/^[[:blank:]]{#{indent}}/, '') end # # Generates a string of random alphanumeric characters. # * +len+ is the length, an Integer. Default: 8 # * +safe+ in safe-mode, ambiguous characters are removed (default: true): # i l o 1 0 def strand( len=8, safe=true ) chars = ("a".."z").to_a + ("0".."9").to_a chars.delete_if { |v| %w(i l o 1 0).member?(v) } if safe str = "" 1.upto(len) { |i| str << chars[rand(chars.size-1)] } str end private # Start the SSH Agent locally. This is important # primarily because Rye relies on it for SSH key # management. If the agent doesn't start then # passwordless logins won't work. # # This method starts an instances of ssh-agent # and sets the appropriate environment so all # local commands run by Rye will have access be aware # of this instance of the agent too. # # The equivalent commands on the shell are: # # $ ssh-agent -s # SSH_AUTH_SOCK=/tmp/ssh-tGvaOXIXSr/agent.12951; export SSH_AUTH_SOCK; # SSH_AGENT_PID=12952; export SSH_AGENT_PID; # $ SSH_AUTH_SOCK=/tmp/ssh-tGvaOXIXSr/agent.12951; export SSH_AUTH_SOCK; # $ SSH_AGENT_PID=12952; export SSH_AGENT_PID; # # NOTE: The OpenSSL library (The C one, not the Ruby one) # must be installed for this to work. # def start_sshagent_environment return if @@agent_env["SSH_AGENT_PID"] lines = Rye.shell("ssh-agent", '-s') || [] lines.each do |line| next unless line.index("echo").nil? line = line.slice(0..(line.index(';')-1)) key, value = line.chomp.split( /=/ ) @@agent_env[key] = value end ENV["SSH_AUTH_SOCK"] = @@agent_env["SSH_AUTH_SOCK"] ENV["SSH_AGENT_PID"] = @@agent_env["SSH_AGENT_PID"] Rye.shell("ssh-add") # Add the user's default keys nil end # Kill the local instance of the SSH Agent we started. # # Calls this command via the local shell: # # $ ssh-agent -k # # which uses the SSH_AUTH_SOCK and SSH_AGENT_PID environment variables # to determine which ssh-agent to kill. # def end_sshagent_environment pid = @@agent_env["SSH_AGENT_PID"] Rye.shell("ssh-agent", '-k') || [] #Rye.shell("kill", ['-9', pid]) if pid @@agent_env.clear nil end Rye.reload begin @@mutex.synchronize { # One thread only start_sshagent_environment # Run this now at_exit { end_sshagent_environment } # Run this before Ruby exits } rescue => ex STDERR.puts "Error initializing the SSH Agent (is OpenSSL installed?):" STDERR.puts ex.message STDERR.puts ex.backtrace exit 1 end end