22

✏️ Editing: openbsd_sysctl.py

"""
Module for viewing and modifying OpenBSD sysctl parameters
"""

import os
import re

import salt.utils.data
import salt.utils.files
import salt.utils.stringutils
from salt.exceptions import CommandExecutionError

# Define the module's virtual name
__virtualname__ = "sysctl"

def __virtual__():
    """
    Only run on OpenBSD systems
    """
    if __grains__["os"] == "OpenBSD":
        return __virtualname__
    return (
        False,
        "The openbsd_sysctl execution module cannot be loaded: "
        "only available on OpenBSD systems.",
    )

def show(config_file=False):
    """
    Return a list of sysctl parameters for this minion

config: Pull the data from the system configuration file
        instead of the live data.

CLI Example:

.. code-block:: bash

salt '*' sysctl.show
    """
    cmd = "sysctl"
    ret = {}
    out = __salt__["cmd.run_stdout"](cmd, output_loglevel="trace")
    for line in out.splitlines():
        if not line or "=" not in line:
            continue
        comps = line.split("=", 1)
        ret[comps[0]] = comps[1]
    return ret

def get(name):
    """
    Return a single sysctl parameter for this minion

CLI Example:

.. code-block:: bash

salt '*' sysctl.get hw.physmem
    """
    cmd = f"sysctl -n {name}"
    out = __salt__["cmd.run"](cmd)
    return out

def assign(name, value):
    """
    Assign a single sysctl parameter for this minion

CLI Example:

.. code-block:: bash

salt '*' sysctl.assign net.inet.ip.forwarding 1
    """
    ret = {}
    cmd = f'sysctl {name}="{value}"'
    data = __salt__["cmd.run_all"](cmd)

# Certain values cannot be set from this console, at the current
    # securelevel or there are other restrictions that prevent us
    # from applying the setting rightaway.
    if (
        re.match(r"^sysctl:.*: Operation not permitted$", data["stderr"])
        or data["retcode"] != 0
    ):
        raise CommandExecutionError("sysctl failed: {}".format(data["stderr"]))
    new_name, new_value = data["stdout"].split(":", 1)
    ret[new_name] = new_value.split(" -> ")[-1]
    return ret

def persist(name, value, config="/etc/sysctl.conf"):
    """
    Assign and persist a simple sysctl parameter for this minion

CLI Example:

.. code-block:: bash

salt '*' sysctl.persist net.inet.ip.forwarding 1
    """
    nlines = []
    edited = False
    value = str(value)

# create /etc/sysctl.conf if not present
    if not os.path.isfile(config):
        try:
            with salt.utils.files.fopen(config, "w+"):
                pass
        except OSError:
            msg = "Could not create {0}"
            raise CommandExecutionError(msg.format(config))

with salt.utils.files.fopen(config, "r") as ifile:
        for line in ifile:
            line = salt.utils.stringutils.to_unicode(line)
            if not line.startswith(f"{name}="):
                nlines.append(line)
                continue
            else:
                key, rest = line.split("=", 1)
                if rest.startswith('"'):
                    _, rest_v, rest = rest.split('"', 2)
                elif rest.startswith("'"):
                    _, rest_v, rest = rest.split("'", 2)
                else:
                    rest_v = rest.split()[0]
                    rest = rest[len(rest_v) :]
                if rest_v == value:
                    return "Already set"
                new_line = f"{key}={value}{rest}"
                nlines.append(new_line)
                edited = True
    if not edited:
        nlines.append(f"{name}={value}\n")
    with salt.utils.files.fopen(config, "wb") as ofile:
        ofile.writelines(salt.utils.data.encode(nlines))

assign(name, value)
    return "Updated"

MR SKB