diff options
Diffstat (limited to 'modules-available/rebootcontrol/inc/rebootcontrol.inc.php')
-rw-r--r-- | modules-available/rebootcontrol/inc/rebootcontrol.inc.php | 487 |
1 files changed, 258 insertions, 229 deletions
diff --git a/modules-available/rebootcontrol/inc/rebootcontrol.inc.php b/modules-available/rebootcontrol/inc/rebootcontrol.inc.php index f287e728..107c2a50 100644 --- a/modules-available/rebootcontrol/inc/rebootcontrol.inc.php +++ b/modules-available/rebootcontrol/inc/rebootcontrol.inc.php @@ -7,6 +7,12 @@ class RebootControl const KEY_AUTOSCAN_DISABLED = 'rebootcontrol.disable.scan'; + const KEY_SCAN_CLIENT_TO_CLIENT = 'rebootcontrol.scan.c2c'; + + const KEY_UDP_PORT = 'rebootcontrol.port'; + + const KEY_BROADCAST_ADDRESS = 'rebootcontrol.broadcast-addr'; + const REBOOT = 'REBOOT'; const KEXEC_REBOOT = 'KEXEC_REBOOT'; const SHUTDOWN = 'SHUTDOWN'; @@ -19,7 +25,7 @@ class RebootControl * @param bool $kexec whether to trigger kexec-reboot instead of full BIOS cycle * @return false|array task struct for the reboot job */ - public static function reboot($uuids, $kexec = false) + public static function reboot(array $uuids, bool $kexec = false) { $list = RebootUtils::getMachinesByUuid($uuids); if (empty($list)) @@ -31,10 +37,9 @@ class RebootControl * @param array $list list of clients containing each keys 'machineuuid', 'clientip' and 'locationid' * @param string $mode reboot mode: RebootControl::REBOOT ::KEXEC_REBOOT or ::SHUTDOWN * @param int $minutes delay in minutes for action - * @param int $locationId meta data only: locationId of clients * @return array|false the task, or false if it could not be started */ - public static function execute($list, $mode, $minutes) + public static function execute(array $list, string $mode, int $minutes) { $task = Taskmanager::submit("RemoteReboot", array( "clients" => $list, @@ -44,45 +49,20 @@ class RebootControl "port" => 9922, // Hard-coded, must match mgmt-sshd module )); if (!Taskmanager::isFailed($task)) { - self::addTask($task['id'], self::TASK_REBOOTCTL, $list, $task['id'], ['action' => $mode]); - } - return $task; - } - - private static function extractLocationIds($from, &$to) - { - if (is_numeric($from)) { - $to[$from] = true; - return; - } - if (!is_array($from)) - return; - $allnum = true; - foreach ($from as $k => $v) { - if (is_numeric($k) && is_numeric($v)) - continue; - $allnum = false; - if (is_numeric($k) && is_array($v)) { - self::extractLocationIds($v, $to); - } else { - $k = strtolower($k); - if ($k === 'locationid' || $k === 'locationids' || $k === 'location' || $k === 'locations' || $k === 'lid' || $k === 'lids') { - self::extractLocationIds($v, $to); - } elseif ($k === 'client' || $k === 'clients' || $k === 'machine' || $k === 'machines') { - if (is_array($v)) { - self::extractLocationIds($v, $to); - } - } - } - } - if ($allnum) { - foreach ($from as $v) { - $to[$v] = true; + self::addTask($task['id'], self::TASK_REBOOTCTL, $list, ['action' => $mode]); + foreach ($list as $client) { + $client['mode'] = $mode; + $client['minutes'] = $minutes; + EventLog::applyFilterRules('#action-power', $client); } } + return $task; } - private static function addTask($id, $type, $clients, $taskIds, $other = false) + /** + * Add wake task metadata to database, so we can display job details on the summary page. + */ + private static function addTask(string $taskId, string $type, array $clients, array $other = null): void { $lids = ArrayUtil::flattenByKey($clients, 'locationid'); $lids = array_unique($lids); @@ -94,15 +74,13 @@ class RebootControl } $newClients[] = $d; } - if (!is_array($taskIds)) { - $taskIds = [$taskIds]; - } $data = [ - 'id' => $id, + 'id' => $taskId, 'type' => $type, 'locations' => $lids, 'clients' => $newClients, - 'tasks' => $taskIds, + 'tasks' => [$taskId], // This did hold multiple tasks in the past; keep it in case we need this again + 'timestamp' => time(), ]; if (is_array($other)) { $data += $other; @@ -112,19 +90,20 @@ class RebootControl /** * @param int[]|null $locations filter by these locations + * @param ?string $id only with this TaskID * @return array|false list of active tasks for reboots/shutdowns. */ - public static function getActiveTasks($locations = null, $id = null) + public static function getActiveTasks(array $locations = null, string $id = null) { if (is_array($locations) && in_array(0, $locations)) { $locations = null; } $list = Property::getList(RebootControl::KEY_TASKLIST); $return = []; - foreach ($list as $entry) { + foreach ($list as $subkey => $entry) { $p = json_decode($entry, true); if (!is_array($p) || !isset($p['id'])) { - Property::removeFromList(RebootControl::KEY_TASKLIST, $entry); + Property::removeFromListByKey(RebootControl::KEY_TASKLIST, $subkey); continue; } if (is_array($locations) && is_array($p['locations']) && array_diff($p['locations'], $locations) !== []) @@ -147,7 +126,7 @@ class RebootControl } } if (!$valid) { - Property::removeFromList(RebootControl::KEY_TASKLIST, $entry); + Property::removeFromListByKey(RebootControl::KEY_TASKLIST, $subkey); continue; } $return[] = $p; @@ -167,18 +146,18 @@ class RebootControl * @param string $command Command or script to execute on client * @param int $timeout in seconds * @param string|false $privkey SSH private key to use to connect - * @return array|false + * @return array|false task struct, false on error */ - public static function runScript($clients, $command, $timeout = 5, $privkey = false) + public static function runScript(array $clients, string $command, int $timeout = 5, $privkey = false) { $task = self::runScriptInternal($clients, $command, $timeout, $privkey); if (!Taskmanager::isFailed($task)) { - self::addTask($task['id'], self::TASK_EXEC, $clients, $task['id']); + self::addTask($task['id'], self::TASK_EXEC, $clients); } return $task; } - private static function runScriptInternal(&$clients, $command, $timeout = 5, $privkey = false) + private static function runScriptInternal(array &$clients, string $command, int $timeout = 5, $privkey = false) { $valid = []; $invalid = []; @@ -196,7 +175,7 @@ class RebootControl if (!empty($invalid)) { $res = Database::simpleQuery('SELECT machineuuid, clientip, locationid FROM machine WHERE machineuuid IN (:uuids)', ['uuids' => array_keys($invalid)]); - while ($row = $res->fetch(PDO::FETCH_ASSOC)) { + foreach ($res as $row) { if (isset($invalid[$row['machineuuid']])) { $valid[] = $row + $invalid[$row['machineuuid']]; } else { @@ -236,49 +215,74 @@ class RebootControl } /** - * @param array $sourceMachines list of source machines. array of [clientip, machineuuid] entries - * @param string $bcast directed broadcast address to send to - * @param string|string[] $macaddr destination mac address(es) - * @param string $passwd optional WOL password, mac address or ipv4 notation - * @return array|false task struct, false on error + * Wake clients given by MAC address(es) via jawol util. + * Multiple MAC addresses can be passed as a space separated list. */ - public static function wakeViaClient($sourceMachines, $macaddr, $bcast = false, $passwd = false) + private static function buildClientWakeCommand(string $macs, string $bcast = null, string $passwd = null): string { $command = 'jawol'; if (!empty($bcast)) { $command .= " -d '$bcast'"; + } else { + $command .= ' -i br0'; } if (!empty($passwd)) { $command .= " -p '$passwd'"; } - if (is_array($macaddr)) { - $macaddr = implode("' '", $macaddr); - } - $command .= " '$macaddr'"; - // Yes there is one zero missing from the usleep -- that's the whole point: we prefer 100ms sleeps + $command .= " $macs"; + return $command; + } + + /** + * @param array $sourceMachines list of source machines. array of [clientip, machineuuid] entries + * @param string $macaddr destination mac address(es) + * @param string $bcast directed broadcast address to send to + * @param string $passwd optional WOL password, mac address or ipv4 notation + * @return array|false task struct, false on error + */ + public static function wakeViaClient(array $sourceMachines, string $macaddr, string $bcast = null, string $passwd = null) + { + $command = self::buildClientWakeCommand($macaddr, $bcast, $passwd); + // Yes there is one zero "missing" from the usleep -- that's the whole point: we prefer 100ms sleeps return self::runScriptInternal($sourceMachines, "for i in 1 1 0; do $command; usleep \${i}00000 2> /dev/null || sleep \$i; done"); } /** * @param string|string[] $macaddr destination mac address(es) - * @param string $bcast directed broadcast address to send to - * @param string $passwd optional WOL password, mac address or ipv4 notation + * @param ?string $bcast directed broadcast address to send to + * @param ?string $passwd optional WOL password; mac address or ipv4 notation * @return array|false task struct, false on error */ - public static function wakeDirectly($macaddr, $bcast = false, $passwd = false) + public static function wakeDirectly($macaddr, string $bcast = null, string $passwd = null) { if (!is_array($macaddr)) { $macaddr = [$macaddr]; } - return Taskmanager::submit('WakeOnLan', [ - 'ip' => $bcast, - 'password' => $passwd, - 'macs' => $macaddr, - ]); + $port = (int)Property::get(RebootControl::KEY_UDP_PORT); + if ($port < 1 || $port > 65535) { + $port = 9; + } + $arg = []; + foreach ($macaddr as $mac) { + $arg[] = [ + 'ip' => $bcast, + 'mac' => $mac, + 'methods' => ['DIRECT'], + 'password' => $passwd, + ]; + } + return Taskmanager::submit('WakeOnLan', ['clients' => $arg]); } - public static function wakeViaJumpHost($jumphost, $bcast, $clients) + /** + * Explicitly wake given clients via jumphost + * @param array $jumphost the according row from the database, representing the desired jumphost + * @param string $bcast (directed) broadcast address for WOL packet, %IP% in command template + * @param array $clients list of clients, must contain at least key 'macaddr' for every client + * @return array|false task struct on successful submission to TM, false on error + */ + public static function wakeViaJumpHost(array $jumphost, string $bcast, array $clients) { $hostid = $jumphost['hostid']; $macs = ArrayUtil::flattenByKey($clients, 'macaddr'); @@ -289,11 +293,12 @@ class RebootControl $macs = "'" . implode("' '", $macs) . "'"; $macs = str_replace('-', ':', $macs); $script = str_replace(['%IP%', '%MACS%'], [$bcast, $macs], $jumphost['script']); - $task = RebootControl::runScriptInternal($_ = [[ + $arg = [[ 'clientip' => $jumphost['host'], 'port' => $jumphost['port'], 'username' => $jumphost['username'], - ]], $script, 6, $jumphost['sshkey']); + ]]; + $task = RebootControl::runScriptInternal($arg, $script, 6, $jumphost['sshkey']); if ($task !== false && isset($task['id'])) { TaskmanagerCallback::addCallback($task, 'rbcConnCheck', $hostid); } @@ -301,59 +306,42 @@ class RebootControl } /** - * @param array $list list of clients containing each keys 'macaddr' and 'clientip' - * @return string id of this job + * @param array $clientList list of clients containing each keys 'macaddr' and 'clientip', optionally 'locationid' + * @param ?array $failed list of failed clients from $clientList + * @return ?string taskid of this job */ - public static function wakeMachines($list) + public static function wakeMachines(array $clientList, array &$failed = null): ?string { - /* TODO: Refactor mom's spaghetti - * Now that I figured out what I want, do something like this: - * 1) Group clients by subnet - * 2) Only after step 1, start to collect possible ways to wake up clients for each subnet that's not empty - * 3) Habe some priority list for the methods, extend Taskmanager to have "negative dependency" - * i.e. submit task B with task A as parent task, but only launch task B if task A failed. - * If task A succeeded, mark task B as FINISHED immediately without actually running it. - * (or introduce new statusCode for this?) - */ $errors = ''; - $tasks = []; - $bad = $unknown = []; + $sent = $unknown = $unreachable = $failed = []; + // For event filtering by rule // Need all subnets... + /* subnetid => [ + * subnetid => 1234, + * start => 1234, (ip2long) + * end => 5678, (ip2long) + * jumphosts => [id1, id2, ...], + */ $subnets = []; $res = Database::simpleQuery('SELECT subnetid, start, end, isdirect FROM reboot_subnet'); - while ($row = $res->fetch(PDO::FETCH_ASSOC)) { + foreach ($res as $row) { $row += [ - 'jumphosts' => [], - 'direct' => [], - 'indirect' => [], + 'djumphosts' => [], + 'ijumphosts' => [], ]; $subnets[$row['subnetid']] = $row; } // Get all jump hosts - $jumphosts = []; - $res = Database::simpleQuery('SELECT jh.hostid, host, port, username, sshkey, script, jh.reachable, - Group_Concat(jxs.subnetid) AS subnets1, Group_Concat(sxs.dstid) AS subnets2 - FROM reboot_jumphost jh - LEFT JOIN reboot_jumphost_x_subnet jxs ON (jh.hostid = jxs.hostid) - LEFT JOIN reboot_subnet s ON (INET_ATON(jh.host) BETWEEN s.start AND s.end) - LEFT JOIN reboot_subnet_x_subnet sxs ON (sxs.srcid = s.subnetid AND sxs.reachable <> 0) - GROUP BY jh.hostid'); - while ($row = $res->fetch(PDO::FETCH_ASSOC)) { - if ($row['subnets1'] === null && $row['subnets2'] === null) - continue; - $nets = explode(',', $row['subnets1'] . ',' . $row['subnets2']); - foreach ($nets as $net) { - if (empty($net) || !isset($subnets[$net])) - continue; - $subnets[$net]['jumphosts'][$row['hostid']] = $row['hostid']; - } - $row['jobs'] = []; - $jumphosts[] = $row; - } - // Group by subnet - foreach ($list as $client) { - $ip = sprintf('%u', ip2long($client['clientip'])); - //$client['numip'] = $ip; + self::addJumphostsToSubnets($subnets); + // Determine method for all clients + $taskClients = []; // array of arrays with keys [ip, mac, methods] + $taskSsh = []; // SSH configs for task, array of arrays with keys [username, sshkey, ip, port, command] + $overrideBroadcast = Property::get(self::KEY_BROADCAST_ADDRESS); + if (empty($overrideBroadcast)) { + $overrideBroadcast = false; + } + foreach ($clientList as $dbClient) { + $ip = sprintf('%u', ip2long($dbClient['clientip'])); // 32Bit snprintf unset($subnet); $subnet = false; foreach ($subnets as &$sn) { @@ -362,139 +350,96 @@ class RebootControl break; } } - $ok = false; - if (!$ok && $subnet === false) { - $unknown[] = $client; - $ok = true; - } - if (!$ok && $subnet['isdirect']) { - // Directly reachable - $subnet['direct'][] = $client; - $ok = true; - } - if (!$ok && !empty($subnet['jumphosts'])) { - foreach ($subnet['jumphosts'] as $hostid) { - if ($jumphosts[$hostid]['reachable'] != 0) { - $jumphosts[$hostid]['jobs'][$subnet['end']][] = $client; - $ok = true; - break; - } - } + if ($subnet === false) { + $unknown[] = $dbClient; + continue; } - if (!$ok) { - // find clients in same subnet, or reachable ones - self::findMachinesForSubnet($subnet); - if (empty($subnet['dclients']) && empty($subnet['iclients'])) { - // Nothing found -- cannot wake this host - $bad[] = $client; - } else { - // Found suitable indirect host - $subnet['indirect'][] = $client; - } + $taskClient = [ + 'ip' => long2ip($subnet['end']), + 'mac' => $dbClient['macaddr'], + 'methods' => [], + ]; + // If we have an override broadcast address, unconditionally add this as the + // first method + if ($overrideBroadcast !== false) { + $taskClient['ip'] = $overrideBroadcast; + $taskClient['methods'][] = 'DIRECT'; } - } - unset($subnet); - // Batch process - // First, via jump host - foreach ($jumphosts as $jh) { - foreach ($jh['jobs'] as $bcast => $clients) { - $errors .= 'Via jumphost ' . $jh['host'] . ': ' . implode(', ', ArrayUtil::flattenByKey($clients, 'clientip')) . "\n"; - $task = self::wakeViaJumpHost($jh, $bcast, $clients); - if (Taskmanager::isFailed($task)) { - // TODO: Figure out $subnet from $bcast and queue as indirect - // (rather, overhaul this whole spaghetti code) - $errors .= ".... FAILED TO LAUNCH TASK ON JUMPHOST!\n"; - } + self::findMachinesForSubnet($subnet); + // Highest priority - clients in same subnet, no directed broadcast + // required, should be most reliable + self::addSshMethodUsingClient($subnet['dclients'], $taskClient['methods'], $taskSsh); + // Jumphost - usually in same subnet + self::addSshMethodUsingJumphost($subnet['djumphosts'], true, $taskClient['methods'], $taskSsh); + // Jumphosts in other subnets, determined to be able to reach destination subnet + self::addSshMethodUsingJumphost($subnet['ijumphosts'], true, $taskClient['methods'], $taskSsh); + // If directly reachable from server, prefer this now over the questionable approaches below, + // but only if we didn't already add this above because of override + if ($overrideBroadcast === false && $subnet['isdirect']) { + $taskClient['methods'][] = 'DIRECT'; } - } - // Server or client - foreach ($subnets as $subnet) { - if (!empty($subnet['direct'])) { - // Can wake directly - if (!self::wakeGroup('From server', $tasks, $errors, null, $subnet['direct'], $subnet['end'])) { - if (!empty($subnet['dclients']) || !empty($subnet['iclients'])) { - $errors .= "Re-queueing clients for indirect wakeup\n"; - $subnet['indirect'] = array_merge($subnet['indirect'], $subnet['direct']); - } - } + // Use clients in other subnets, known to be able to reach the destination net + self::addSshMethodUsingClient($subnet['iclients'], $taskClient['methods'], $taskSsh); + // Add warning if nothing works + if (empty($taskClient['methods'])) { + $unreachable[] = $dbClient; + } else { + // TODO: Remember WOL was attempted } - if (!empty($subnet['indirect'])) { - // Can wake indirectly - $ok = false; - if (!empty($subnet['dclients'])) { - $ok = true; - if (!self::wakeGroup('in same subnet', $tasks, $errors, $subnet['dclients'], $subnet['indirect'])) { - if (!empty($subnet['iclients'])) { - $errors .= "Re-re-queueing clients for indirect wakeup\n"; - $ok = false; - } - } - } - if (!$ok && !empty($subnet['iclients'])) { - $ok = self::wakeGroup('across subnets', $tasks, $errors, $subnet['dclients'], $subnet['indirect'], $subnet['end']); - } - if (!$ok) { - $errors .= "I'm all out of ideas.\n"; - } + // "Questionable approaches": + // Last fallback is jumphosts that were not reachable when last checked, this is really a last resort + self::addSshMethodUsingJumphost($subnet['djumphosts'], false, $taskClient['methods'], $taskSsh); + self::addSshMethodUsingJumphost($subnet['ijumphosts'], false, $taskClient['methods'], $taskSsh); + + if (!empty($taskClient['methods'])) { + $taskClients[] = $taskClient; + $sent[] = $dbClient; } } - if (!empty($bad)) { - $ips = ArrayUtil::flattenByKey($bad, 'clientip'); - $errors .= "**** WARNING ****\nNo way to send WOL packets to the following machines:\n" . implode("\n", $ips) . "\n"; - } + unset($subnet); + if (!empty($unknown)) { $ips = ArrayUtil::flattenByKey($unknown, 'clientip'); $errors .= "**** WARNING ****\nThe following clients do not belong to a known subnet (bug?)\n" . implode("\n", $ips) . "\n"; + foreach ($unknown as $val) { + $failed[$val['clientip']] = $val; + } } - $id = Util::randomUuid(); - self::addTask($id, self::TASK_WOL, $list, $tasks, ['log' => $errors]); - return $id; - } - - private static function wakeGroup($type, &$tasks, &$errors, $via, $clients, $bcast = false) - { - $macs = ArrayUtil::flattenByKey($clients, 'macaddr'); - $ips = ArrayUtil::flattenByKey($clients, 'clientip'); - if ($via !== null) { - $srcips = ArrayUtil::flattenByKey($via, 'clientip'); - $errors .= 'Via ' . implode(', ', $srcips) . ' '; - } - $errors .= $type . ': ' . implode(', ', $ips); - if ($bcast !== false) { - $errors .= ' (UDP to ' . long2ip($bcast) . ')'; - } - $errors .= "\n"; - if ($via === null) { - $task = self::wakeDirectly($macs, $bcast); - } else { - $task = self::wakeViaClient($via, $macs, $bcast); - } - if ($task !== false && isset($task['id'])) { - $tasks[] = $task['id']; + if (!empty($unreachable)) { + $ips = ArrayUtil::flattenByKey($unreachable, 'clientip'); + $errors .= "**** WARNING ****\nThe following clients are not reachable with any method\n" . implode("\n", $ips) . "\n"; + foreach ($unreachable as $val) { + $failed[$val['clientip']] = $val; + } } - if (Taskmanager::isFailed($task)) { - $errors .= ".... FAILED TO START ACCORDING TASK!\n"; - return false; + $task = Taskmanager::submit('WakeOnLan', [ + 'clients' => $taskClients, + 'ssh' => $taskSsh, + ]); + if (isset($task['id'])) { + $id = $task['id']; + self::addTask($id, self::TASK_WOL, $clientList, ['log' => $errors]); + foreach ($sent as $dbClient) { + EventLog::applyFilterRules('#action-wol', $dbClient); + } + return $id; } - return true; + return null; } private static function findMachinesForSubnet(&$subnet) { if (isset($subnet['dclients'])) return; - $cutoff = time() - 302; + $cutoff = time() - 320; // Get clients from same subnet first - $subnet['dclients'] = Database::queryAll("SELECT machineuuid, clientip FROM machine + $subnet['dclients'] = Database::queryColumnArray("SELECT clientip FROM machine WHERE state IN ('IDLE', 'OCCUPIED') AND INET_ATON(clientip) BETWEEN :start AND :end AND lastseen > :cutoff LIMIT 3", ['start' => $subnet['start'], 'end' => $subnet['end'], 'cutoff' => $cutoff]); - $subnet['iclients'] = []; - if (!empty($subnet['dclients'])) - return; // If none, get clients from other subnets known to be able to reach this one - $subnet['iclients'] = Database::queryAll("SELECT m.machineuuid, m.clientip FROM reboot_subnet_x_subnet sxs - INNER JOIN reboot_subnet s ON (s.subnetid = sxs.srcid AND sxs.dstid = :subnetid) + $subnet['iclients'] = Database::queryColumnArray("SELECT m.clientip FROM reboot_subnet_x_subnet sxs + INNER JOIN reboot_subnet s ON (s.subnetid = sxs.srcid AND sxs.dstid = :subnetid AND sxs.reachable = 1) INNER JOIN machine m ON (INET_ATON(m.clientip) BETWEEN s.start AND s.end AND state IN ('IDLE', 'OCCUPIED') AND m.lastseen > :cutoff) LIMIT 20", ['subnetid' => $subnet['subnetid'], 'cutoff' => $cutoff]); shuffle($subnet['iclients']); @@ -503,15 +448,99 @@ class RebootControl public static function prepareExec() { - User::assertPermission('action.exec'); + User::assertPermission('.rebootcontrol.action.exec'); $uuids = array_values(Request::post('uuid', Request::REQUIRED, 'array')); - $machines = RebootUtils::getFilteredMachineList($uuids, 'action.exec'); + $machines = RebootUtils::getFilteredMachineList($uuids, '.rebootcontrol.action.exec'); if ($machines === false) return; $id = mt_rand(); Session::set('exec-' . $id, $machines, 60); - Session::save(); Util::redirect('?do=rebootcontrol&show=exec&what=prepare&id=' . $id); } + /** + * Append a "wake via client" WOL method for the given client. Append at least one, but stop + * if there are at least two methods already. + * + * @param array $sshClients [in] list of online clients to use for waking + * @param array $c [out] The client's methods array + * @param array $taskSsh [out] add according task struct to this array, if not already exists + * @return void + */ + private static function addSshMethodUsingClient(array $sshClients, array &$methods, array &$taskSsh) + { + foreach ($sshClients as $host) { + if (!isset($taskSsh[$host])) { + $taskSsh[$host] = [ + 'username' => 'root', + 'sshkey' => SSHKey::getPrivateKey(), + 'ip' => $host, + 'port' => 9922, + 'command' => self::buildClientWakeCommand('%MACS%', '%IP%'), + ]; + } + $methods[] = $host; + if (count($methods) >= 2) + break; + } + } + + private static function addSshMethodUsingJumphost(array $jumpHosts, bool $reachable, array &$methods, array &$taskSsh) + { + // If it's the fallback to apparently unreachable jump-hosts, ignore if we already have two methods + if (!$reachable && count($methods) >= 2) + return; + // host, port, username, sshkey, script, jh.reachable + foreach ($jumpHosts as $jh) { + if ($reachable !== (bool)$jh['reachable']) + continue; + $key = substr(md5($jh['host'] . ':' . $jh['port'] . ':' . $jh['username']), 0, 10); + if (!isset($taskSsh[$key])) { + $taskSsh[$key] = [ + 'username' => $jh['username'], + 'sshkey' => $jh['sshkey'], + 'ip' => $jh['host'], + 'port' => $jh['port'], + 'command' => $jh['script'], + ]; + } + $methods[] = $key; + if (count($methods) >= 2) + break; + } + } + + /** + * Load all jumphosts from DB, sort into passed $subnets. Also split up + * by directly assigned subnets, and indirectly dtermined, reachable subnets. + * @param array $subnets [in] + * @return void + */ + private static function addJumphostsToSubnets(array &$subnets) + { + $res = Database::simpleQuery('SELECT host, port, username, sshkey, script, jh.reachable, + Group_Concat(jxs.subnetid) AS dsubnets, Group_Concat(sxs.dstid) AS isubnets + FROM reboot_jumphost jh + LEFT JOIN reboot_jumphost_x_subnet jxs ON (jh.hostid = jxs.hostid) + LEFT JOIN reboot_subnet s ON (INET_ATON(jh.host) BETWEEN s.start AND s.end) + LEFT JOIN reboot_subnet_x_subnet sxs ON (sxs.srcid = s.subnetid AND sxs.reachable <> 0) + GROUP BY jh.hostid'); + foreach ($res as $row) { + $dnets = empty($row['dsubnets']) ? [] : explode(',', $row['dsubnets']); + $inets = empty($row['isubnets']) ? [] : explode(',', $row['isubnets']); + $inets = array_diff($inets, $dnets); // There might be duplicates if both joins match + foreach ($dnets as $net) { + if (empty($net) || !isset($subnets[$net])) + continue; + $subnets[$net]['djumphosts'][] =& $row; + } + foreach ($inets as $net) { + if (empty($net) || !isset($subnets[$net])) + continue; + $subnets[$net]['ijumphosts'][] =& $row; + } + unset($row); + } + } + } |