OXIESEC PANEL

Name	Size	Modified	Perms
📁 ..	-	10/14/2020 08:39:36 AM	rwxr-xr-x
📄 __init__.py	630 bytes	11/07/2019 12:36:56 AM	rw-r--r--
📁 __pycache__	-	10/14/2020 08:39:36 AM	rwxr-xr-x
📄 cgroup.py	8.6 KB	11/07/2019 12:36:56 AM	rw-r--r--
📄 cgroupapi.py	25.69 KB	11/07/2019 12:36:56 AM	rw-r--r--
📄 cgroupconfigurator.py	9.27 KB	11/07/2019 12:36:56 AM	rw-r--r--
📄 cgroupstelemetry.py	7.47 KB	11/07/2019 12:36:56 AM	rw-r--r--
📄 conf.py	11.08 KB	11/07/2019 12:36:56 AM	rw-r--r--
📄 datacontract.py	2.6 KB	11/07/2019 12:36:56 AM	rw-r--r--
📄 dhcp.py	14.58 KB	11/07/2019 12:36:56 AM	rw-r--r--
📄 errorstate.py	1.12 KB	11/07/2019 12:36:56 AM	rw-r--r--
📄 event.py	19.03 KB	11/07/2019 12:36:56 AM	rw-r--r--
📄 exception.py	6.38 KB	11/07/2019 12:36:56 AM	rw-r--r--
📄 future.py	3.08 KB	11/07/2019 12:36:56 AM	rw-r--r--
📄 logger.py	7.64 KB	11/07/2019 12:36:56 AM	rw-r--r--
📁 osutil	-	10/14/2020 08:39:36 AM	rwxr-xr-x
📁 protocol	-	10/14/2020 08:39:36 AM	rwxr-xr-x
📄 rdma.py	16.13 KB	11/07/2019 12:36:56 AM	rw-r--r--
📄 telemetryevent.py	1.52 KB	11/07/2019 12:36:56 AM	rw-r--r--
📁 utils	-	10/14/2020 08:39:36 AM	rwxr-xr-x
📄 version.py	7.36 KB	11/07/2019 12:36:56 AM	rw-r--r--

Editing: cgroupconfigurator.py

# Copyright 2018 Microsoft Corporation
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
#     http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
#
# Requires Python 2.6+ and Openssl 1.0+

import os
import subprocess

from azurelinuxagent.common import logger
from azurelinuxagent.common.cgroupapi import CGroupsApi
from azurelinuxagent.common.cgroupstelemetry import CGroupsTelemetry
from azurelinuxagent.common.exception import CGroupsException, ExtensionErrorCodes
from azurelinuxagent.common.future import ustr
from azurelinuxagent.common.osutil import get_osutil
from azurelinuxagent.common.utils.extensionprocessutil import handle_process_completion
from azurelinuxagent.common.version import AGENT_NAME, CURRENT_VERSION
from azurelinuxagent.common.event import add_event, WALAEventOperation

class CGroupConfigurator(object):
    """
    This class implements the high-level operations on CGroups (e.g. initialization, creation, etc)

NOTE: with the exception of start_extension_command, none of the methods in this class raise exceptions (cgroup operations should not block extensions)
    """
    class __impl(object):
        def __init__(self):
            """
            Ensures the cgroups file system is mounted and selects the correct API to interact with it
            """
            osutil = get_osutil()

self._cgroups_supported = osutil.is_cgroups_supported()

if self._cgroups_supported:
                self._enabled = True
                try:
                    osutil.mount_cgroups()
                    self._cgroups_api = CGroupsApi.create()
                    status = "The cgroup filesystem is ready to use"
                except Exception as e:
                    status = ustr(e)
                    self._enabled = False
            else:
                self._enabled = False
                self._cgroups_api = None
                status = "Cgroups are not supported by the platform"

logger.info("CGroups Status: {0}".format(status))

add_event(
                AGENT_NAME,
                version=CURRENT_VERSION,
                op=WALAEventOperation.InitializeCGroups,
                is_success=self._enabled,
                message=status,
                log_event=False)

def enabled(self):
            return self._enabled

def enable(self):
            if not self._cgroups_supported:
                raise CGroupsException("cgroups are not supported on the current platform")

self._enabled = True

def disable(self):
            self._enabled = False

def _invoke_cgroup_operation(self, operation, error_message, on_error=None):
            """
            Ensures the given operation is invoked only if cgroups are enabled and traps any errors on the operation.
            """
            if not self.enabled():
                return

try:
                return operation()
            except Exception as e:
                logger.warn("{0} Error: {1}".format(error_message, ustr(e)))
                if on_error is not None:
                    try:
                        on_error(e)
                    except Exception as ex:
                        logger.warn("CGroupConfigurator._invoke_cgroup_operation: {0}".format(ustr(e)))

def create_agent_cgroups(self, track_cgroups):
            """
            Creates and returns the cgroups needed to track the VM Agent
            """
            def __impl():
                cgroups = self._cgroups_api.create_agent_cgroups()

if track_cgroups:
                    for cgroup in cgroups:
                        CGroupsTelemetry.track_cgroup(cgroup)

return cgroups

self._invoke_cgroup_operation(__impl, "Failed to create a cgroup for the VM Agent; resource usage for the Agent will not be tracked.")

def cleanup_legacy_cgroups(self):
            def __impl():
                self._cgroups_api.cleanup_legacy_cgroups()

message = 'Failed to process legacy cgroups. Collection of resource usage data will be disabled.'

def disable_cgroups(exception):
                self.disable()
                CGroupsTelemetry.reset()
                add_event(
                    AGENT_NAME,
                    version=CURRENT_VERSION,
                    op=WALAEventOperation.CGroupsCleanUp,
                    is_success=False,
                    log_event=False,
                    message='{0} {1}'.format(message, ustr(exception)))

self._invoke_cgroup_operation(__impl, message, on_error=disable_cgroups)

def create_extension_cgroups_root(self):
            """
            Creates the container (directory/cgroup) that includes the cgroups for all extensions (/sys/fs/cgroup/*/walinuxagent.extensions)
            """
            def __impl():
                self._cgroups_api.create_extension_cgroups_root()

self._invoke_cgroup_operation(__impl, "Failed to create a root cgroup for extensions; resource usage for extensions will not be tracked.")

def create_extension_cgroups(self, name):
            """
            Creates and returns the cgroups for the given extension
            """
            def __impl():
                return self._cgroups_api.create_extension_cgroups(name)

return self._invoke_cgroup_operation(__impl, "Failed to create a cgroup for extension '{0}'; resource usage will not be tracked.".format(name))

def remove_extension_cgroups(self, name):
            """
            Deletes the cgroup for the given extension
            """
            def __impl():
                cgroups = self._cgroups_api.remove_extension_cgroups(name)
                return cgroups

self._invoke_cgroup_operation(__impl, "Failed to delete cgroups for extension '{0}'.".format(name))

def start_extension_command(self, extension_name, command, timeout, shell, cwd, env, stdout, stderr,
                                    error_code=ExtensionErrorCodes.PluginUnknownFailure):
            """
            Starts a command (install/enable/etc) for an extension and adds the command's PID to the extension's cgroup
            :param extension_name: The extension executing the command
            :param command: The command to invoke
            :param timeout: Number of seconds to wait for command completion
            :param cwd: The working directory for the command
            :param env:  The environment to pass to the command's process
            :param stdout: File object to redirect stdout to
            :param stderr: File object to redirect stderr to
            :param stderr: File object to redirect stderr to
            :param error_code: Extension error code to raise in case of error
            """
            if not self.enabled():
                process = subprocess.Popen(command,
                                           shell=shell,
                                           cwd=cwd,
                                           env=env,
                                           stdout=stdout,
                                           stderr=stderr,
                                           preexec_fn=os.setsid)

process_output = handle_process_completion(process=process,
                                                           command=command,
                                                           timeout=timeout,
                                                           stdout=stdout,
                                                           stderr=stderr,
                                                           error_code=error_code)
            else:
                extension_cgroups, process_output = self._cgroups_api.start_extension_command(extension_name,
                                                                                              command,
                                                                                              timeout,
                                                                                              shell=shell,
                                                                                              cwd=cwd,
                                                                                              env=env,
                                                                                              stdout=stdout,
                                                                                              stderr=stderr,
                                                                                              error_code=error_code)

return process_output

# unique instance for the singleton (TODO: find a better pattern for a singleton)
    _instance = None

@staticmethod
    def get_instance():
        if CGroupConfigurator._instance is None:
            CGroupConfigurator._instance = CGroupConfigurator.__impl()
        return CGroupConfigurator._instance