One Hat Cyber Team
Your IP :
216.73.216.109
Server IP :
178.162.244.166
Server :
Linux flexi.hostpinnacleservers.com 5.14.0-611.30.1.el9_7.x86_64 #1 SMP PREEMPT_DYNAMIC Wed Feb 11 06:42:00 EST 2026 x86_64
Server Software :
Apache
PHP Version :
8.1.34
Buat File
|
Buat Folder
Eksekusi
Dir :
~
/
lib
/
python3.9
/
site-packages
/
sos
/
report
/
plugins
/
Edit File:
aap_controller.py
# Copyright (c) 2024 Pavel Moravec <pmoravec@redhat.com> # Copyright (c) 2024 Lucas Benedito <lbenedit@redhat.com> # This file is part of the sos project: https://github.com/sosreport/sos # # This copyrighted material is made available to anyone wishing to use, # modify, copy, or redistribute it subject to the terms and conditions of # version 2 of the GNU General Public License. # # See the LICENSE file in the source distribution for further information. from sos.report.plugins import Plugin, RedHatPlugin from sos.utilities import sos_parse_version class AAPControllerPlugin(Plugin, RedHatPlugin): short_desc = 'AAP Automation Controller plugin' plugin_name = 'aap_controller' profiles = ('sysmgmt', 'ansible',) packages = ('automation-controller-venv-tower', 'automation-controller-server', 'automation-controller-ui', 'automation-controller') commands = ('awx-manage',) def setup(self): self.add_copy_spec([ "/etc/tower/", "/etc/supervisord.conf", "/etc/supervisord.d/*", "/var/log/tower", "/var/log/nginx/automationcontroller.access.log*", "/var/log/nginx/automationcontroller.error.log*", "/var/log/supervisor", "/var/log/unattended-upgrades", ]) self.add_forbidden_path([ "/etc/tower/SECRET_KEY", "/etc/tower/*.key", "/etc/tower/*.cert", "/var/log/tower/profile", ]) self.add_cmd_output([ "automation-controller-service status", "awx-manage showmigrations", "awx-manage list_instances", "awx-manage run_dispatcher --status", "awx-manage run_callback_receiver --status", "awx-manage check_license --data", "supervisorctl status", "/var/lib/awx/venv/awx/bin/pip freeze", "/var/lib/awx/venv/awx/bin/pip freeze -l", "/var/lib/awx/venv/ansible/bin/pip freeze", "/var/lib/awx/venv/ansible/bin/pip freeze -l", "umask -p", ]) # run_wsbroadcast is replaced with run_wsrelay in AAP 2.4 and above awx_version = self.collect_cmd_output('awx-manage --version') if awx_version['status'] == 0: if ( sos_parse_version(awx_version['output'].strip()) > sos_parse_version('4.4.99') ): self.add_cmd_output("awx-manage run_wsrelay --status") else: self.add_cmd_output("awx-manage run_wsbroadcast --status") self.add_dir_listing([ '/var/lib/awx', '/var/lib/awx/venv', '/etc/tower', ]) self.add_dir_listing('/var/lib/awx', tree=True) def postproc(self): # remove database password jreg = r"(\s*'PASSWORD'\s*:\s*)('.*')" repl = r"\1********" self.do_path_regex_sub("/etc/tower/conf.d/postgres.py", jreg, repl) # remove email password jreg = r"(EMAIL_HOST_PASSWORD\s*=\s*)\'(.+)\'" repl = r"\1********" self.do_path_regex_sub("/etc/tower/settings.py", jreg, repl) # remove email password (if customized) jreg = r"(EMAIL_HOST_PASSWORD\s*=\s*)\'(.+)\'" repl = r"\1********" self.do_path_regex_sub("/etc/tower/conf.d/custom.py", jreg, repl) # remove websocket secret jreg = r"(BROADCAST_WEBSOCKET_SECRET\s*=\s*)\"(.+)\"" repl = r"\1********" self.do_path_regex_sub("/etc/tower/conf.d/channels.py", jreg, repl) # remove secret key jreg = r"(\s*'SECRET_KEY'\s*:\s*)(\".*\")" repl = r"\1********" self.do_path_regex_sub("/etc/tower/conf.d/gateway.py", jreg, repl) # vim: set et ts=4 sw=4 :
Simpan