blob: 5460b7e98ad2328f4b331cf682dd4af61012412d (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
|
#!/bin/sh
# shellcheck disable=SC2119,SC2120
# shellcheck source=../lib/load-configuration
. "${0%/*}/../lib/load-configuration"
if [ "x${SSH_ORIGINAL_COMMAND%% *}" = 'xget-assignment' ] || \
[ "x${SSH_ORIGINAL_COMMAND%% *}" = 'xreturn-assignment' ] || \
[ "x${SSH_ORIGINAL_COMMAND%% *}" = 'xping-from-slave' ]; then
# small check to prevent some shell-injections
if printf '%s\n' "${SSH_ORIGINAL_COMMAND}" | \
grep -q '[^-a-zA-Z0-9.+_ ]'; then
>&2 printf 'Invalid command: "%s".\n' "${SSH_ORIGINAL_COMMAND}"
exit 42
fi
# shellcheck disable=SC2016
infos=$(
{
printf 'SELECT'
printf ' `build_slaves`.`id`,'
printf ' `persons`.`name`'
printf ' FROM `build_slaves`'
mysql_join_build_slaves_ssh_keys
mysql_join_ssh_keys_persons
printf ' WHERE `build_slaves`.`name`=from_base64("%s")' \
"$(
printf '%s' "$1" | \
base64 -w0
)"
printf ' AND `build_slaves`.`access_allowed`;\n'
} | \
mysql_run_query | \
tr '\t' ' '
)
if [ -z "${infos}" ]; then
>&2 printf 'Build slave "%s" is unnknown to the database.\n' "$1"
exit 42
fi
slave_id="${infos%% *}"
operator="${infos#* }"
# shellcheck disable=SC2016
{
printf 'INSERT IGNORE INTO `ssh_log` (`build_slave`,`action`,`parameters`)'
printf ' VALUES (%s' \
"${slave_id}"
printf ',from_base64("%s")' \
"$(
printf '%s' "${SSH_ORIGINAL_COMMAND%% *}" | \
base64 -w0
)" \
"$(
printf '%s' "${SSH_ORIGINAL_COMMAND#* }" | \
base64 -w0
)"
printf ');\n'
} | \
mysql_run_query 'unimportant'
slave="$1" slave_id="${slave_id}" operator="${operator}" SKIP_COMMAND_LOG=1 /bin/sh -c "${base_dir}/bin/${SSH_ORIGINAL_COMMAND}"
else
>&2 printf 'Invalid command: "%s".\n' "${SSH_ORIGINAL_COMMAND}"
exit 42
fi
|
