# ~*~ coding: utf-8 ~*~ import json import re import os from celery import shared_task from ops.celery import app as celery_app from django.core.cache import cache from django.utils.translation import ugettext as _ from common.utils import capacity_convert, \ sum_capacity, encrypt_password, get_logger from ops.celery.utils import register_as_period_task, after_app_shutdown_clean, \ after_app_ready_start from orgs.utils import set_to_root_org from .models import SystemUser, AdminUser, Asset from . import const FORKS = 10 TIMEOUT = 60 logger = get_logger(__file__) CACHE_MAX_TIME = 60*60*2 disk_pattern = re.compile(r'^hd|sd|xvd|vd') PERIOD_TASK = os.environ.get("PERIOD_TASK", "off") @shared_task def set_assets_hardware_info(assets, result, **kwargs): """ Using ops task run result, to update asset info @shared_task must be exit, because we using it as a task callback, is must be a celery task also :param assets: :param result: :param kwargs: {task_name: ""} :return: """ result_raw = result[0] assets_updated = [] success_result = result_raw.get('ok', {}) for asset in assets: hostname = asset.hostname info = success_result.get(hostname, {}) info = info.get('setup', {}).get('ansible_facts', {}) if not info: logger.error(_("Get asset info failed: {}").format(hostname)) continue ___vendor = info.get('ansible_system_vendor', 'Unknown') ___model = info.get('ansible_product_name', 'Unknown') ___sn = info.get('ansible_product_serial', 'Unknown') for ___cpu_model in info.get('ansible_processor', []): if ___cpu_model.endswith('GHz') or ___cpu_model.startswith("Intel"): break else: ___cpu_model = 'Unknown' ___cpu_model = ___cpu_model[:64] ___cpu_count = info.get('ansible_processor_count', 0) ___cpu_cores = info.get('ansible_processor_cores', None) or len(info.get('ansible_processor', [])) ___cpu_vcpus = info.get('ansible_processor_vcpus', 0) ___memory = '%s %s' % capacity_convert('{} MB'.format(info.get('ansible_memtotal_mb'))) disk_info = {} for dev, dev_info in info.get('ansible_devices', {}).items(): if disk_pattern.match(dev) and dev_info['removable'] == '0': disk_info[dev] = dev_info['size'] ___disk_total = '%s %s' % sum_capacity(disk_info.values()) ___disk_info = json.dumps(disk_info) ___platform = info.get('ansible_system', 'Unknown') ___os = info.get('ansible_distribution', 'Unknown') ___os_version = info.get('ansible_distribution_version', 'Unknown') ___os_arch = info.get('ansible_architecture', 'Unknown') ___hostname_raw = info.get('ansible_hostname', 'Unknown') for k, v in locals().items(): if k.startswith('___'): setattr(asset, k.strip('_'), v) asset.save() assets_updated.append(asset) return assets_updated @shared_task def update_assets_hardware_info_util(assets, task_name=None): """ Using ansible api to update asset hardware info :param assets: asset seq :param task_name: task_name running :return: result summary ['contacted': {}, 'dark': {}] """ from ops.utils import update_or_create_ansible_task if task_name is None: task_name = _("Update some assets hardware info") tasks = const.UPDATE_ASSETS_HARDWARE_TASKS hosts = [] for asset in assets: if not asset.is_active: msg = _("Asset has been disabled, skipped: {}").format(asset) logger.info(msg) continue if not asset.support_ansible(): msg = _("Asset may not be support ansible, skipped: {}").format(asset) logger.info(msg) continue hosts.append(asset) if not hosts: logger.info(_("No assets matched, stop task")) return {} created_by = str(assets[0].org_id) task, created = update_or_create_ansible_task( task_name, hosts=hosts, tasks=tasks, created_by=created_by, pattern='all', options=const.TASK_OPTIONS, run_as_admin=True, ) result = task.run() # Todo: may be somewhere using # Manual run callback function set_assets_hardware_info(assets, result) return result @shared_task def update_asset_hardware_info_manual(asset): task_name = _("Update asset hardware info: {}").format(asset.hostname) # task_name = _("更新资产硬件信息") return update_assets_hardware_info_util( [asset], task_name=task_name ) @shared_task def update_assets_hardware_info_period(): """ Update asset hardware period task :return: """ if PERIOD_TASK != "on": logger.debug("Period task disabled, update assets hardware info pass") return # from ops.utils import update_or_create_ansible_task # from orgs.models import Organization # orgs = Organization.objects.all().values_list('id', flat=True) # orgs.append('') # task_name = _("Update assets hardware info period") # for org_id in orgs: # org_id = str(org_id) # hostname_list = [ # asset for asset in Asset.objects.all() # if asset.is_active and asset.is_unixlike() # ] # tasks = const.UPDATE_ASSETS_HARDWARE_TASKS # # # Only create, schedule by celery beat # update_or_create_ansible_task( # task_name, hosts=hostname_list, tasks=tasks, pattern='all', # options=const.TASK_OPTIONS, run_as_admin=True, created_by='System', # interval=60*60*24, is_periodic=True, callback=set_assets_hardware_info.name, # ) ## ADMIN USER CONNECTIVE ## def set_admin_user_connectability_info(result, **kwargs): admin_user = kwargs.get("admin_user") task_name = kwargs.get("task_name") if admin_user is None and task_name is not None: admin_user = task_name.split(":")[-1] raw, summary = result cache_key = const.ADMIN_USER_CONN_CACHE_KEY.format(admin_user) cache.set(cache_key, summary, CACHE_MAX_TIME) for i in summary.get('contacted', []): asset_conn_cache_key = const.ASSET_ADMIN_CONN_CACHE_KEY.format(i) cache.set(asset_conn_cache_key, 1, CACHE_MAX_TIME) for i, msg in summary.get('dark', {}).items(): asset_conn_cache_key = const.ASSET_ADMIN_CONN_CACHE_KEY.format(i) cache.set(asset_conn_cache_key, 0, CACHE_MAX_TIME) logger.error(msg) @shared_task def test_admin_user_connectability_util(admin_user, task_name): """ Test asset admin user can connect or not. Using ansible api do that :param admin_user: :param task_name: :return: """ from ops.utils import update_or_create_ansible_task assets = admin_user.get_related_assets() hosts = [] for asset in assets: if not asset.is_active: msg = _("Asset has been disabled, skipped: {}").format(asset) logger.info(msg) continue if not asset.support_ansible(): msg = _("Asset may not be support ansible, skipped: {}").format(asset) logger.info(msg) continue hosts.append(asset) if not hosts: logger.info(_("No assets matched, stop task")) return {} tasks = const.TEST_ADMIN_USER_CONN_TASKS task, created = update_or_create_ansible_task( task_name=task_name, hosts=hosts, tasks=tasks, pattern='all', options=const.TASK_OPTIONS, run_as_admin=True, created_by=admin_user.org_id, ) result = task.run() set_admin_user_connectability_info(result, admin_user=admin_user.name) return result @shared_task @register_as_period_task(interval=3600) def test_admin_user_connectability_period(): """ A period task that update the ansible task period """ admin_users = AdminUser.objects.all() for admin_user in admin_users: task_name = _("Test admin user connectability period: {}").format(admin_user.name) test_admin_user_connectability_util(admin_user, task_name) @shared_task def test_admin_user_connectability_manual(admin_user): task_name = _("Test admin user connectability: {}").format(admin_user.name) # task_name = _("测试管理行号可连接性: {}").format(admin_user.name) return test_admin_user_connectability_util(admin_user, task_name) @shared_task def test_asset_connectability_util(assets, task_name=None): from ops.utils import update_or_create_ansible_task if task_name is None: task_name = _("Test assets connectability") # task_name = _("测试资产可连接性") hosts = [] for asset in assets: if not asset.is_active: msg = _("Asset has been disabled, skip: {}").format(asset) logger.info(msg) continue if not asset.support_ansible(): msg = _("Asset may not be support ansible, skip: {}").format(asset) logger.info(msg) continue hosts.append(asset) if not hosts: logger.info(_("No assets, task stop")) return {} tasks = const.TEST_ADMIN_USER_CONN_TASKS created_by = assets[0].org_id task, created = update_or_create_ansible_task( task_name=task_name, hosts=hosts, tasks=tasks, pattern='all', options=const.TASK_OPTIONS, run_as_admin=True, created_by=created_by, ) result = task.run() summary = result[1] for k in summary.get('dark'): cache.set(const.ASSET_ADMIN_CONN_CACHE_KEY.format(k), 0, CACHE_MAX_TIME) for k in summary.get('contacted'): cache.set(const.ASSET_ADMIN_CONN_CACHE_KEY.format(k), 1, CACHE_MAX_TIME) return summary @shared_task def test_asset_connectability_manual(asset): task_name = _("Test assets connectability: {}").format(asset) summary = test_asset_connectability_util([asset], task_name=task_name) if summary.get('dark'): return False, summary['dark'] else: return True, "" ## System user connective ## @shared_task def set_system_user_connectablity_info(result, **kwargs): summary = result[1] task_name = kwargs.get("task_name") system_user = kwargs.get("system_user") if system_user is None: system_user = task_name.split(":")[-1] cache_key = const.SYSTEM_USER_CONN_CACHE_KEY.format(str(system_user.id)) cache.set(cache_key, summary, CACHE_MAX_TIME) @shared_task def test_system_user_connectability_util(system_user, assets, task_name): """ Test system cant connect his assets or not. :param system_user: :param assets: :param task_name: :return: """ from ops.utils import update_or_create_ansible_task hosts = [] tasks = const.TEST_SYSTEM_USER_CONN_TASKS for asset in assets: if not asset.is_active: msg = _("Asset has been disabled, skip: {}").format(asset) logger.info(msg) continue if not asset.support_ansible(): msg = _("Asset may not be support ansible, skip: {}").format(asset) logger.info(msg) continue hosts.append(asset) if not hosts: logger.info(_("No assets matched, stop task")) return {} task, created = update_or_create_ansible_task( task_name, hosts=hosts, tasks=tasks, pattern='all', options=const.TASK_OPTIONS, run_as=system_user, created_by=system_user.org_id, ) result = task.run() set_system_user_connectablity_info(result, system_user=system_user) return result @shared_task def test_system_user_connectability_manual(system_user): task_name = _("Test system user connectability: {}").format(system_user) assets = system_user.get_assets() return test_system_user_connectability_util(system_user, assets, task_name) @shared_task def test_system_user_connectability_a_asset(system_user, asset): task_name = _("Test system user connectability: {} => {}").format( system_user, asset ) return test_system_user_connectability_util(system_user, [asset], task_name) @shared_task def test_system_user_connectability_period(): if PERIOD_TASK != "on": logger.debug("Period task disabled, test system user connectability pass") return # Todo: 暂时禁用定期测试 # system_users = SystemUser.objects.all() # for system_user in system_users: # task_name = _("Test system user connectability period: {}").format(system_user) # # task_name = _("定期测试系统用户可连接性: {}".format(system_user)) # test_system_user_connectability_util(system_user, task_name) #### Push system user tasks #### def get_push_system_user_tasks(system_user): # Set root as system user is dangerous if system_user.username == "root": return [] tasks = [] if system_user.password: tasks.append({ 'name': 'Add user {}'.format(system_user.username), 'action': { 'module': 'user', 'args': 'name={} shell={} state=present password={}'.format( system_user.username, system_user.shell, encrypt_password(system_user.password, salt="K3mIlKK"), ), } }) if system_user.public_key: tasks.append({ 'name': 'Set {} authorized key'.format(system_user.username), 'action': { 'module': 'authorized_key', 'args': "user={} state=present key='{}'".format( system_user.username, system_user.public_key ) } }) if system_user.sudo: tasks.append({ 'name': 'Set {} sudo setting'.format(system_user.username), 'action': { 'module': 'lineinfile', 'args': "dest=/etc/sudoers state=present regexp='^{0} ALL=' " "line='{0} ALL=(ALL) NOPASSWD: {1}' " "validate='visudo -cf %s'".format( system_user.username, system_user.sudo, ) } }) return tasks @shared_task def push_system_user_util(system_user, assets, task_name): from ops.utils import update_or_create_ansible_task if not system_user.is_need_push(): msg = _("Push system user task skip, auto push not enable or " "protocol is not ssh: {}").format(system_user.name) logger.info(msg) return tasks = get_push_system_user_tasks(system_user) hosts = [] for asset in assets: if not asset.is_active: msg = _("Asset has been disabled, skip: {}").format(asset) logger.info(msg) continue if not asset.support_ansible(): msg = _("Asset may not be support ansible, skip: {}").format(asset) logger.info(msg) continue hosts.append(asset) if not hosts: logger.info(_("No assets matched, stop task")) return {} task, created = update_or_create_ansible_task( task_name=task_name, hosts=hosts, tasks=tasks, pattern='all', options=const.TASK_OPTIONS, run_as_admin=True, created_by=system_user.org_id, ) return task.run() @shared_task def push_system_user_to_assets_manual(system_user): assets = system_user.get_assets() task_name = _("Push system users to assets: {}").format(system_user.name) return push_system_user_util(system_user, assets, task_name=task_name) @shared_task def push_system_user_a_asset_manual(system_user, asset): task_name = _("Push system users to asset: {} => {}").format( system_user.name, asset ) return push_system_user_util(system_user, [asset], task_name=task_name) @shared_task def push_system_user_to_assets(system_user, assets): task_name = _("Push system users to assets: {}").format(system_user.name) return push_system_user_util(system_user, assets, task_name) # @shared_task # @register_as_period_task(interval=3600) # @after_app_ready_start # # @after_app_shutdown_clean # def push_system_user_period(): # for system_user in SystemUser.objects.all(): # push_system_user_related_nodes(system_user)