Viewing file:  129_fixed_cagefs_unmount.py (1.36 KB) -rw-r--r--
Select action/file-type:
 (+) |  (+) |  (+) | Code (+) | Session (+) |  (+) | SDB (+) |  (+) |  (+) |  (+) |  (+) |  (+) |
import subprocess
import time
import os
from functools import lru_cache
from defence360agent.utils import retry_on, run_with_umask
_SERVICE_NAME = "cagefs"
_COMMAND = "restart"
_CAGEFSCTL_TOOL = "/usr/sbin/cagefsctl"
_WAIT_LOCK = "--wait-lock"
@lru_cache(1)
def systemctl_present(paths=["/usr/bin", "/bin"]):
"""Return whether we can find systemctl in given *paths*."""
return any(os.path.isfile(os.path.join(p, "systemctl")) for p in paths)
def _restart_cagefs(exc, i):
if systemctl_present():
cmd = ["systemctl", _COMMAND, _SERVICE_NAME]
else:
cmd = ["service", _SERVICE_NAME, _COMMAND]
try:
subprocess.check_call(cmd)
except Exception:
pass
time.sleep(5)
@retry_on(
subprocess.CalledProcessError,
max_tries=3,
on_error=_restart_cagefs,
silent=True,
)
def _execute_command(cmd):
subprocess.check_output(cmd, shell=False, stderr=subprocess.STDOUT)
def migrate(migrator, database, fake=False, umask=0o022, **kwargs):
if fake:
return
cmd_list = [
[_CAGEFSCTL_TOOL, _WAIT_LOCK, "--force-update-etc"],
[_CAGEFSCTL_TOOL, _WAIT_LOCK, "--remount-all"],
]
with run_with_umask(umask):
if os.path.exists(_CAGEFSCTL_TOOL):
for cmd in cmd_list:
_execute_command(cmd)
def rollback(migrator, database, fake=False, **kwargs):
pass
|