mirror of
https://github.com/kairos-io/kairos-agent.git
synced 2025-06-03 01:44:53 +00:00
137 lines
3.1 KiB
Go
137 lines
3.1 KiB
Go
package agent
|
|
|
|
import (
|
|
"context"
|
|
"fmt"
|
|
"io"
|
|
"os/exec"
|
|
"time"
|
|
|
|
"github.com/c3os-io/c3os/internal/cmd"
|
|
config "github.com/c3os-io/c3os/pkg/config"
|
|
"github.com/c3os-io/c3os/pkg/utils"
|
|
"github.com/ipfs/go-log"
|
|
|
|
machine "github.com/c3os-io/c3os/pkg/machine"
|
|
"github.com/creack/pty"
|
|
"github.com/gliderlabs/ssh"
|
|
"github.com/mudler/edgevpn/pkg/logger"
|
|
"github.com/mudler/edgevpn/pkg/node"
|
|
"github.com/mudler/edgevpn/pkg/services"
|
|
nodepair "github.com/mudler/go-nodepair"
|
|
qr "github.com/mudler/go-nodepair/qrcode"
|
|
"github.com/pterm/pterm"
|
|
)
|
|
|
|
const recoveryAddr = "127.0.0.1:2222"
|
|
|
|
func startRecoveryService(ctx context.Context, token, name, address, loglevel string) error {
|
|
|
|
nc := config.Network(token, "", loglevel, "c3osrecovery0")
|
|
|
|
lvl, err := log.LevelFromString(loglevel)
|
|
if err != nil {
|
|
lvl = log.LevelError
|
|
}
|
|
llger := logger.New(lvl)
|
|
|
|
o, _, err := nc.ToOpts(llger)
|
|
if err != nil {
|
|
llger.Fatal(err.Error())
|
|
}
|
|
|
|
o = append(o,
|
|
services.Alive(
|
|
time.Duration(20)*time.Second,
|
|
time.Duration(10)*time.Second,
|
|
time.Duration(10)*time.Second)...)
|
|
|
|
// opts, err := vpn.Register(vpnOpts...)
|
|
// if err != nil {
|
|
// return err
|
|
// }
|
|
o = append(o, services.RegisterService(llger, time.Duration(5*time.Second), name, address)...)
|
|
|
|
e, err := node.New(o...)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
return e.Start(ctx)
|
|
}
|
|
|
|
func Recovery() error {
|
|
|
|
cmd.PrintBranding(DefaultBanner)
|
|
|
|
agentConfig, err := LoadConfig()
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
tk := nodepair.GenerateToken()
|
|
ctx, cancel := context.WithCancel(context.Background())
|
|
defer cancel()
|
|
|
|
serviceUUID := utils.RandStringRunes(10)
|
|
generatedPassword := utils.RandStringRunes(7)
|
|
|
|
if err := startRecoveryService(ctx, tk, serviceUUID, recoveryAddr, "fatal"); err != nil {
|
|
return err
|
|
}
|
|
|
|
cmd.PrintText(agentConfig.Branding.Recovery, "Recovery")
|
|
|
|
time.Sleep(5 * time.Second)
|
|
|
|
pterm.Info.Printfln(
|
|
"starting ssh server on '%s', password: '%s' service: '%s' ", recoveryAddr, generatedPassword, serviceUUID)
|
|
|
|
qr.Print(utils.EncodeRecoveryToken(tk, serviceUUID, generatedPassword))
|
|
|
|
go sshServer(recoveryAddr, generatedPassword)
|
|
|
|
// Wait for user input and go back to shell
|
|
utils.Prompt("") //nolint:errcheck
|
|
cancel()
|
|
// give tty1 back
|
|
svc, err := machine.Getty(1)
|
|
if err == nil {
|
|
svc.Start() //nolint:errcheck
|
|
}
|
|
|
|
return nil
|
|
}
|
|
|
|
func sshServer(listenAdddr, password string) {
|
|
ssh.Handle(func(s ssh.Session) {
|
|
cmd := exec.Command("bash")
|
|
ptyReq, winCh, isPty := s.Pty()
|
|
if isPty {
|
|
cmd.Env = append(cmd.Env, fmt.Sprintf("TERM=%s", ptyReq.Term))
|
|
f, err := pty.Start(cmd)
|
|
if err != nil {
|
|
pterm.Warning.Println("Failed reserving tty")
|
|
}
|
|
go func() {
|
|
for win := range winCh {
|
|
setWinsize(f, win.Width, win.Height)
|
|
}
|
|
}()
|
|
go func() {
|
|
io.Copy(f, s) //nolint:errcheck
|
|
}()
|
|
io.Copy(s, f) //nolint:errcheck
|
|
cmd.Wait() //nolint:errcheck
|
|
} else {
|
|
io.WriteString(s, "No PTY requested.\n") //nolint:errcheck
|
|
s.Exit(1) //nolint:errcheck
|
|
}
|
|
})
|
|
|
|
pterm.Info.Println(ssh.ListenAndServe(listenAdddr, nil, ssh.PasswordAuth(func(ctx ssh.Context, pass string) bool {
|
|
return pass == password
|
|
}),
|
|
))
|
|
}
|