2
0
Fork 0
mirror of https://github.com/inspec/inspec synced 2024-12-21 10:33:23 +00:00
inspec/lib/vulcano/backend/ssh.rb

96 lines
2.4 KiB
Ruby
Raw Normal View History

# encoding: utf-8
module Vulcano::Backends
class SSH < Vulcano.backend(1)
name 'ssh'
def initialize(conf)
@conf = conf
@files = {}
@conf['host'] ||
fail('You must specify a SSH host.')
@ssh = start_ssh
end
def file(path)
@files[path] ||= LinuxFile.new(self, path)
end
def run_command(cmd)
stdout = stderr = ''
exit_status = nil
cmd.force_encoding('binary') if cmd.respond_to?(:force_encoding)
@ssh.open_channel do |channel|
channel.request_pty do |_, success|
abort 'Could not obtain pty on SSH channel ' if !success
end
channel.exec(cmd) do |_, success|
unless success
abort 'Couldn\'t execute command on SSH.'
end
channel.on_data do |_, data|
stdout += data
end
channel.on_extended_data do |_, _type, data|
stderr += data
end
channel.on_request('exit-status') do |_, data|
exit_status = data.read_long
end
channel.on_request('exit-signal') do |_, data|
exit_status = data.read_long
end
end
end
@ssh.loop
CommandResult.new(stdout, stderr, exit_status)
end
private
def validate_options(options)
if options[:keys].empty? and options[:password].nil?
fail 'You must configure at least one authentication method for SSH:'\
' Password or key.'
end
unless options[:keys].empty?
options[:auth_methods].push('publickey')
options[:keys_only] = true if options[:password].nil?
end
# rubocop:disable Style/GuardClause
unless options[:password].nil?
options[:auth_methods].push('password')
end
# rubocop:enable Style/GuardClause
end
def start_ssh
host = @conf['host']
ssh_config = Net::SSH.configuration_for(host)
user = @conf['user'] || ssh_config[:user]
keys = [@conf['key_file'], ssh_config[:keys]].flatten.compact
options = {
port: @conf['port'] || ssh_config[:port] || 22,
auth_methods: ['none'],
user_known_hosts_file: '/dev/null',
global_known_hosts_file: '/dev/null',
number_of_password_prompts: 0,
password: @conf['password'] || ssh_config[:password],
keys: keys,
}
validate_options(options)
Net::SSH.start(host, user, options)
end
end
end