ssh.py RawHistoryFolder

1#!/usr/bin/env python3
2"""Fixture-only SSH wrapper: pin SSH and rewrite only QUIC readiness port."""
3import json
4import os
5import socket
6import subprocess
7import sys
8
9
10def control(request):
11    with socket.socket(socket.AF_UNIX) as conn:
12        conn.settimeout(2)
13        conn.connect(os.environ.get("RESILIENCE_CONTROL", "/home/demo/relay/control.sock"))
14        conn.sendall(json.dumps(request).encode() + b"\n")
15        reply = json.loads(conn.makefile("rb").readline(4096))
16        if "error" in reply:
17            raise RuntimeError(reply["error"])
18        return reply["result"]
19
20
21def main():
22    args = sys.argv[1:]
23    command = ["/usr/bin/ssh-real", "-p", "2222", "-o", "HostKeyAlias=remote"] + args
24    if not any("_broker-mux-quic-bootstrap" in arg for arg in args):
25        os.execv(command[0], command)
26    process = subprocess.Popen(command, stdin=sys.stdin.buffer, stdout=subprocess.PIPE)
27    try:
28        line = process.stdout.readline(4097)
29        if len(line) > 4096 or not line.endswith(b"\n"):
30            raise RuntimeError("invalid bounded bootstrap readiness")
31        readiness = json.loads(line)
32        port = readiness.get("port")
33        if not isinstance(port, int) or not 0 < port <= 65535:
34            raise RuntimeError("invalid bootstrap port")
35        readiness["port"] = control({"id": 1, "op": "udp", "port": port})
36        sys.stdout.buffer.write(json.dumps(readiness, separators=(",", ":")).encode() + b"\n")
37        sys.stdout.buffer.flush()
38        # No readiness or encrypted payload is recorded in artifacts.
39        while chunk := process.stdout.read1(32768):
40            sys.stdout.buffer.write(chunk)
41            sys.stdout.buffer.flush()
42        return process.wait()
43    finally:
44        if process.poll() is None:
45            process.terminate()
46            try:
47                process.wait(timeout=2)
48            except subprocess.TimeoutExpired:
49                process.kill()
50                process.wait()
51
52
53if __name__ == "__main__":
54    try:
55        sys.exit(main())
56    except (OSError, ValueError, RuntimeError):
57        print("resilience SSH fixture failed", file=sys.stderr)
58        sys.exit(1)