mirror of
https://github.com/saphid/frame-control.git
synced 2026-10-06 04:04:21 +02:00
Tests against a fake Frame, and a headset smoke test
tests/fakeframe: a container that stands in for the Frame (Arch Linux, or Arch Linux ARM on arm64) with sshd, rsync, Valve's steamos-devkit-service and hooks (vendored unmodified), a fake Steam client for the devkit pipe and the DevTools port (the app's JavaScript runs in Node against stand-in SteamClient/appStore objects), stubs for steam, wpctl, flatpak, podman, Lepton and friends, battery and thermal files under /sys, and fault switches (fakeframe-ctl): pairing mode, approve/deny/timeout, Steam not running, headset asleep, sshd off, disk full, runtimes missing. A second container is the computer running Frame Control. tests/e2e: 29 tests driving the real ui/server.py, frame_connect.py and frame_titles.py against it; skipped unless FRAME_E2E=1. scripts/e2e.sh builds, runs and tears down; CI runs it on ubuntu-24.04-arm. tests/smoke + scripts/frame-smoke.sh: the core cases against a real Frame, recorded with its BUILD_ID, cleaning up after itself; --pair to pair a throwaway key. docs/testing.md describes the layers. Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
This commit is contained in:
1 parent
ca2a991f03
commit
0181071b83
43 files changed
+4747
No files matched your search
@@ -0,0 +1,504 @@
|
||||
GNU LESSER GENERAL PUBLIC LICENSE
|
||||
Version 2.1, February 1999
|
||||
|
||||
Copyright (C) 1991, 1999 Free Software Foundation, Inc.
|
||||
51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA
|
||||
Everyone is permitted to copy and distribute verbatim copies
|
||||
of this license document, but changing it is not allowed.
|
||||
|
||||
[This is the first released version of the Lesser GPL. It also counts
|
||||
as the successor of the GNU Library Public License, version 2, hence
|
||||
the version number 2.1.]
|
||||
|
||||
Preamble
|
||||
|
||||
The licenses for most software are designed to take away your
|
||||
freedom to share and change it. By contrast, the GNU General Public
|
||||
Licenses are intended to guarantee your freedom to share and change
|
||||
free software--to make sure the software is free for all its users.
|
||||
|
||||
This license, the Lesser General Public License, applies to some
|
||||
specially designated software packages--typically libraries--of the
|
||||
Free Software Foundation and other authors who decide to use it. You
|
||||
can use it too, but we suggest you first think carefully about whether
|
||||
this license or the ordinary General Public License is the better
|
||||
strategy to use in any particular case, based on the explanations below.
|
||||
|
||||
When we speak of free software, we are referring to freedom of use,
|
||||
not price. Our General Public Licenses are designed to make sure that
|
||||
you have the freedom to distribute copies of free software (and charge
|
||||
for this service if you wish); that you receive source code or can get
|
||||
it if you want it; that you can change the software and use pieces of
|
||||
it in new free programs; and that you are informed that you can do
|
||||
these things.
|
||||
|
||||
To protect your rights, we need to make restrictions that forbid
|
||||
distributors to deny you these rights or to ask you to surrender these
|
||||
rights. These restrictions translate to certain responsibilities for
|
||||
you if you distribute copies of the library or if you modify it.
|
||||
|
||||
For example, if you distribute copies of the library, whether gratis
|
||||
or for a fee, you must give the recipients all the rights that we gave
|
||||
you. You must make sure that they, too, receive or can get the source
|
||||
code. If you link other code with the library, you must provide
|
||||
complete object files to the recipients, so that they can relink them
|
||||
with the library after making changes to the library and recompiling
|
||||
it. And you must show them these terms so they know their rights.
|
||||
|
||||
We protect your rights with a two-step method: (1) we copyright the
|
||||
library, and (2) we offer you this license, which gives you legal
|
||||
permission to copy, distribute and/or modify the library.
|
||||
|
||||
To protect each distributor, we want to make it very clear that
|
||||
there is no warranty for the free library. Also, if the library is
|
||||
modified by someone else and passed on, the recipients should know
|
||||
that what they have is not the original version, so that the original
|
||||
author's reputation will not be affected by problems that might be
|
||||
introduced by others.
|
||||
|
||||
Finally, software patents pose a constant threat to the existence of
|
||||
any free program. We wish to make sure that a company cannot
|
||||
effectively restrict the users of a free program by obtaining a
|
||||
restrictive license from a patent holder. Therefore, we insist that
|
||||
any patent license obtained for a version of the library must be
|
||||
consistent with the full freedom of use specified in this license.
|
||||
|
||||
Most GNU software, including some libraries, is covered by the
|
||||
ordinary GNU General Public License. This license, the GNU Lesser
|
||||
General Public License, applies to certain designated libraries, and
|
||||
is quite different from the ordinary General Public License. We use
|
||||
this license for certain libraries in order to permit linking those
|
||||
libraries into non-free programs.
|
||||
|
||||
When a program is linked with a library, whether statically or using
|
||||
a shared library, the combination of the two is legally speaking a
|
||||
combined work, a derivative of the original library. The ordinary
|
||||
General Public License therefore permits such linking only if the
|
||||
entire combination fits its criteria of freedom. The Lesser General
|
||||
Public License permits more lax criteria for linking other code with
|
||||
the library.
|
||||
|
||||
We call this license the "Lesser" General Public License because it
|
||||
does Less to protect the user's freedom than the ordinary General
|
||||
Public License. It also provides other free software developers Less
|
||||
of an advantage over competing non-free programs. These disadvantages
|
||||
are the reason we use the ordinary General Public License for many
|
||||
libraries. However, the Lesser license provides advantages in certain
|
||||
special circumstances.
|
||||
|
||||
For example, on rare occasions, there may be a special need to
|
||||
encourage the widest possible use of a certain library, so that it becomes
|
||||
a de-facto standard. To achieve this, non-free programs must be
|
||||
allowed to use the library. A more frequent case is that a free
|
||||
library does the same job as widely used non-free libraries. In this
|
||||
case, there is little to gain by limiting the free library to free
|
||||
software only, so we use the Lesser General Public License.
|
||||
|
||||
In other cases, permission to use a particular library in non-free
|
||||
programs enables a greater number of people to use a large body of
|
||||
free software. For example, permission to use the GNU C Library in
|
||||
non-free programs enables many more people to use the whole GNU
|
||||
operating system, as well as its variant, the GNU/Linux operating
|
||||
system.
|
||||
|
||||
Although the Lesser General Public License is Less protective of the
|
||||
users' freedom, it does ensure that the user of a program that is
|
||||
linked with the Library has the freedom and the wherewithal to run
|
||||
that program using a modified version of the Library.
|
||||
|
||||
The precise terms and conditions for copying, distribution and
|
||||
modification follow. Pay close attention to the difference between a
|
||||
"work based on the library" and a "work that uses the library". The
|
||||
former contains code derived from the library, whereas the latter must
|
||||
be combined with the library in order to run.
|
||||
|
||||
GNU LESSER GENERAL PUBLIC LICENSE
|
||||
TERMS AND CONDITIONS FOR COPYING, DISTRIBUTION AND MODIFICATION
|
||||
|
||||
0. This License Agreement applies to any software library or other
|
||||
program which contains a notice placed by the copyright holder or
|
||||
other authorized party saying it may be distributed under the terms of
|
||||
this Lesser General Public License (also called "this License").
|
||||
Each licensee is addressed as "you".
|
||||
|
||||
A "library" means a collection of software functions and/or data
|
||||
prepared so as to be conveniently linked with application programs
|
||||
(which use some of those functions and data) to form executables.
|
||||
|
||||
The "Library", below, refers to any such software library or work
|
||||
which has been distributed under these terms. A "work based on the
|
||||
Library" means either the Library or any derivative work under
|
||||
copyright law: that is to say, a work containing the Library or a
|
||||
portion of it, either verbatim or with modifications and/or translated
|
||||
straightforwardly into another language. (Hereinafter, translation is
|
||||
included without limitation in the term "modification".)
|
||||
|
||||
"Source code" for a work means the preferred form of the work for
|
||||
making modifications to it. For a library, complete source code means
|
||||
all the source code for all modules it contains, plus any associated
|
||||
interface definition files, plus the scripts used to control compilation
|
||||
and installation of the library.
|
||||
|
||||
Activities other than copying, distribution and modification are not
|
||||
covered by this License; they are outside its scope. The act of
|
||||
running a program using the Library is not restricted, and output from
|
||||
such a program is covered only if its contents constitute a work based
|
||||
on the Library (independent of the use of the Library in a tool for
|
||||
writing it). Whether that is true depends on what the Library does
|
||||
and what the program that uses the Library does.
|
||||
|
||||
1. You may copy and distribute verbatim copies of the Library's
|
||||
complete source code as you receive it, in any medium, provided that
|
||||
you conspicuously and appropriately publish on each copy an
|
||||
appropriate copyright notice and disclaimer of warranty; keep intact
|
||||
all the notices that refer to this License and to the absence of any
|
||||
warranty; and distribute a copy of this License along with the
|
||||
Library.
|
||||
|
||||
You may charge a fee for the physical act of transferring a copy,
|
||||
and you may at your option offer warranty protection in exchange for a
|
||||
fee.
|
||||
|
||||
2. You may modify your copy or copies of the Library or any portion
|
||||
of it, thus forming a work based on the Library, and copy and
|
||||
distribute such modifications or work under the terms of Section 1
|
||||
above, provided that you also meet all of these conditions:
|
||||
|
||||
a) The modified work must itself be a software library.
|
||||
|
||||
b) You must cause the files modified to carry prominent notices
|
||||
stating that you changed the files and the date of any change.
|
||||
|
||||
c) You must cause the whole of the work to be licensed at no
|
||||
charge to all third parties under the terms of this License.
|
||||
|
||||
d) If a facility in the modified Library refers to a function or a
|
||||
table of data to be supplied by an application program that uses
|
||||
the facility, other than as an argument passed when the facility
|
||||
is invoked, then you must make a good faith effort to ensure that,
|
||||
in the event an application does not supply such function or
|
||||
table, the facility still operates, and performs whatever part of
|
||||
its purpose remains meaningful.
|
||||
|
||||
(For example, a function in a library to compute square roots has
|
||||
a purpose that is entirely well-defined independent of the
|
||||
application. Therefore, Subsection 2d requires that any
|
||||
application-supplied function or table used by this function must
|
||||
be optional: if the application does not supply it, the square
|
||||
root function must still compute square roots.)
|
||||
|
||||
These requirements apply to the modified work as a whole. If
|
||||
identifiable sections of that work are not derived from the Library,
|
||||
and can be reasonably considered independent and separate works in
|
||||
themselves, then this License, and its terms, do not apply to those
|
||||
sections when you distribute them as separate works. But when you
|
||||
distribute the same sections as part of a whole which is a work based
|
||||
on the Library, the distribution of the whole must be on the terms of
|
||||
this License, whose permissions for other licensees extend to the
|
||||
entire whole, and thus to each and every part regardless of who wrote
|
||||
it.
|
||||
|
||||
Thus, it is not the intent of this section to claim rights or contest
|
||||
your rights to work written entirely by you; rather, the intent is to
|
||||
exercise the right to control the distribution of derivative or
|
||||
collective works based on the Library.
|
||||
|
||||
In addition, mere aggregation of another work not based on the Library
|
||||
with the Library (or with a work based on the Library) on a volume of
|
||||
a storage or distribution medium does not bring the other work under
|
||||
the scope of this License.
|
||||
|
||||
3. You may opt to apply the terms of the ordinary GNU General Public
|
||||
License instead of this License to a given copy of the Library. To do
|
||||
this, you must alter all the notices that refer to this License, so
|
||||
that they refer to the ordinary GNU General Public License, version 2,
|
||||
instead of to this License. (If a newer version than version 2 of the
|
||||
ordinary GNU General Public License has appeared, then you can specify
|
||||
that version instead if you wish.) Do not make any other change in
|
||||
these notices.
|
||||
|
||||
Once this change is made in a given copy, it is irreversible for
|
||||
that copy, so the ordinary GNU General Public License applies to all
|
||||
subsequent copies and derivative works made from that copy.
|
||||
|
||||
This option is useful when you wish to copy part of the code of
|
||||
the Library into a program that is not a library.
|
||||
|
||||
4. You may copy and distribute the Library (or a portion or
|
||||
derivative of it, under Section 2) in object code or executable form
|
||||
under the terms of Sections 1 and 2 above provided that you accompany
|
||||
it with the complete corresponding machine-readable source code, which
|
||||
must be distributed under the terms of Sections 1 and 2 above on a
|
||||
medium customarily used for software interchange.
|
||||
|
||||
If distribution of object code is made by offering access to copy
|
||||
from a designated place, then offering equivalent access to copy the
|
||||
source code from the same place satisfies the requirement to
|
||||
distribute the source code, even though third parties are not
|
||||
compelled to copy the source along with the object code.
|
||||
|
||||
5. A program that contains no derivative of any portion of the
|
||||
Library, but is designed to work with the Library by being compiled or
|
||||
linked with it, is called a "work that uses the Library". Such a
|
||||
work, in isolation, is not a derivative work of the Library, and
|
||||
therefore falls outside the scope of this License.
|
||||
|
||||
However, linking a "work that uses the Library" with the Library
|
||||
creates an executable that is a derivative of the Library (because it
|
||||
contains portions of the Library), rather than a "work that uses the
|
||||
library". The executable is therefore covered by this License.
|
||||
Section 6 states terms for distribution of such executables.
|
||||
|
||||
When a "work that uses the Library" uses material from a header file
|
||||
that is part of the Library, the object code for the work may be a
|
||||
derivative work of the Library even though the source code is not.
|
||||
Whether this is true is especially significant if the work can be
|
||||
linked without the Library, or if the work is itself a library. The
|
||||
threshold for this to be true is not precisely defined by law.
|
||||
|
||||
If such an object file uses only numerical parameters, data
|
||||
structure layouts and accessors, and small macros and small inline
|
||||
functions (ten lines or less in length), then the use of the object
|
||||
file is unrestricted, regardless of whether it is legally a derivative
|
||||
work. (Executables containing this object code plus portions of the
|
||||
Library will still fall under Section 6.)
|
||||
|
||||
Otherwise, if the work is a derivative of the Library, you may
|
||||
distribute the object code for the work under the terms of Section 6.
|
||||
Any executables containing that work also fall under Section 6,
|
||||
whether or not they are linked directly with the Library itself.
|
||||
|
||||
6. As an exception to the Sections above, you may also combine or
|
||||
link a "work that uses the Library" with the Library to produce a
|
||||
work containing portions of the Library, and distribute that work
|
||||
under terms of your choice, provided that the terms permit
|
||||
modification of the work for the customer's own use and reverse
|
||||
engineering for debugging such modifications.
|
||||
|
||||
You must give prominent notice with each copy of the work that the
|
||||
Library is used in it and that the Library and its use are covered by
|
||||
this License. You must supply a copy of this License. If the work
|
||||
during execution displays copyright notices, you must include the
|
||||
copyright notice for the Library among them, as well as a reference
|
||||
directing the user to the copy of this License. Also, you must do one
|
||||
of these things:
|
||||
|
||||
a) Accompany the work with the complete corresponding
|
||||
machine-readable source code for the Library including whatever
|
||||
changes were used in the work (which must be distributed under
|
||||
Sections 1 and 2 above); and, if the work is an executable linked
|
||||
with the Library, with the complete machine-readable "work that
|
||||
uses the Library", as object code and/or source code, so that the
|
||||
user can modify the Library and then relink to produce a modified
|
||||
executable containing the modified Library. (It is understood
|
||||
that the user who changes the contents of definitions files in the
|
||||
Library will not necessarily be able to recompile the application
|
||||
to use the modified definitions.)
|
||||
|
||||
b) Use a suitable shared library mechanism for linking with the
|
||||
Library. A suitable mechanism is one that (1) uses at run time a
|
||||
copy of the library already present on the user's computer system,
|
||||
rather than copying library functions into the executable, and (2)
|
||||
will operate properly with a modified version of the library, if
|
||||
the user installs one, as long as the modified version is
|
||||
interface-compatible with the version that the work was made with.
|
||||
|
||||
c) Accompany the work with a written offer, valid for at
|
||||
least three years, to give the same user the materials
|
||||
specified in Subsection 6a, above, for a charge no more
|
||||
than the cost of performing this distribution.
|
||||
|
||||
d) If distribution of the work is made by offering access to copy
|
||||
from a designated place, offer equivalent access to copy the above
|
||||
specified materials from the same place.
|
||||
|
||||
e) Verify that the user has already received a copy of these
|
||||
materials or that you have already sent this user a copy.
|
||||
|
||||
For an executable, the required form of the "work that uses the
|
||||
Library" must include any data and utility programs needed for
|
||||
reproducing the executable from it. However, as a special exception,
|
||||
the materials to be distributed need not include anything that is
|
||||
normally distributed (in either source or binary form) with the major
|
||||
components (compiler, kernel, and so on) of the operating system on
|
||||
which the executable runs, unless that component itself accompanies
|
||||
the executable.
|
||||
|
||||
It may happen that this requirement contradicts the license
|
||||
restrictions of other proprietary libraries that do not normally
|
||||
accompany the operating system. Such a contradiction means you cannot
|
||||
use both them and the Library together in an executable that you
|
||||
distribute.
|
||||
|
||||
7. You may place library facilities that are a work based on the
|
||||
Library side-by-side in a single library together with other library
|
||||
facilities not covered by this License, and distribute such a combined
|
||||
library, provided that the separate distribution of the work based on
|
||||
the Library and of the other library facilities is otherwise
|
||||
permitted, and provided that you do these two things:
|
||||
|
||||
a) Accompany the combined library with a copy of the same work
|
||||
based on the Library, uncombined with any other library
|
||||
facilities. This must be distributed under the terms of the
|
||||
Sections above.
|
||||
|
||||
b) Give prominent notice with the combined library of the fact
|
||||
that part of it is a work based on the Library, and explaining
|
||||
where to find the accompanying uncombined form of the same work.
|
||||
|
||||
8. You may not copy, modify, sublicense, link with, or distribute
|
||||
the Library except as expressly provided under this License. Any
|
||||
attempt otherwise to copy, modify, sublicense, link with, or
|
||||
distribute the Library is void, and will automatically terminate your
|
||||
rights under this License. However, parties who have received copies,
|
||||
or rights, from you under this License will not have their licenses
|
||||
terminated so long as such parties remain in full compliance.
|
||||
|
||||
9. You are not required to accept this License, since you have not
|
||||
signed it. However, nothing else grants you permission to modify or
|
||||
distribute the Library or its derivative works. These actions are
|
||||
prohibited by law if you do not accept this License. Therefore, by
|
||||
modifying or distributing the Library (or any work based on the
|
||||
Library), you indicate your acceptance of this License to do so, and
|
||||
all its terms and conditions for copying, distributing or modifying
|
||||
the Library or works based on it.
|
||||
|
||||
10. Each time you redistribute the Library (or any work based on the
|
||||
Library), the recipient automatically receives a license from the
|
||||
original licensor to copy, distribute, link with or modify the Library
|
||||
subject to these terms and conditions. You may not impose any further
|
||||
restrictions on the recipients' exercise of the rights granted herein.
|
||||
You are not responsible for enforcing compliance by third parties with
|
||||
this License.
|
||||
|
||||
11. If, as a consequence of a court judgment or allegation of patent
|
||||
infringement or for any other reason (not limited to patent issues),
|
||||
conditions are imposed on you (whether by court order, agreement or
|
||||
otherwise) that contradict the conditions of this License, they do not
|
||||
excuse you from the conditions of this License. If you cannot
|
||||
distribute so as to satisfy simultaneously your obligations under this
|
||||
License and any other pertinent obligations, then as a consequence you
|
||||
may not distribute the Library at all. For example, if a patent
|
||||
license would not permit royalty-free redistribution of the Library by
|
||||
all those who receive copies directly or indirectly through you, then
|
||||
the only way you could satisfy both it and this License would be to
|
||||
refrain entirely from distribution of the Library.
|
||||
|
||||
If any portion of this section is held invalid or unenforceable under any
|
||||
particular circumstance, the balance of the section is intended to apply,
|
||||
and the section as a whole is intended to apply in other circumstances.
|
||||
|
||||
It is not the purpose of this section to induce you to infringe any
|
||||
patents or other property right claims or to contest validity of any
|
||||
such claims; this section has the sole purpose of protecting the
|
||||
integrity of the free software distribution system which is
|
||||
implemented by public license practices. Many people have made
|
||||
generous contributions to the wide range of software distributed
|
||||
through that system in reliance on consistent application of that
|
||||
system; it is up to the author/donor to decide if he or she is willing
|
||||
to distribute software through any other system and a licensee cannot
|
||||
impose that choice.
|
||||
|
||||
This section is intended to make thoroughly clear what is believed to
|
||||
be a consequence of the rest of this License.
|
||||
|
||||
12. If the distribution and/or use of the Library is restricted in
|
||||
certain countries either by patents or by copyrighted interfaces, the
|
||||
original copyright holder who places the Library under this License may add
|
||||
an explicit geographical distribution limitation excluding those countries,
|
||||
so that distribution is permitted only in or among countries not thus
|
||||
excluded. In such case, this License incorporates the limitation as if
|
||||
written in the body of this License.
|
||||
|
||||
13. The Free Software Foundation may publish revised and/or new
|
||||
versions of the Lesser General Public License from time to time.
|
||||
Such new versions will be similar in spirit to the present version,
|
||||
but may differ in detail to address new problems or concerns.
|
||||
|
||||
Each version is given a distinguishing version number. If the Library
|
||||
specifies a version number of this License which applies to it and
|
||||
"any later version", you have the option of following the terms and
|
||||
conditions either of that version or of any later version published by
|
||||
the Free Software Foundation. If the Library does not specify a
|
||||
license version number, you may choose any version ever published by
|
||||
the Free Software Foundation.
|
||||
|
||||
14. If you wish to incorporate parts of the Library into other free
|
||||
programs whose distribution conditions are incompatible with these,
|
||||
write to the author to ask for permission. For software which is
|
||||
copyrighted by the Free Software Foundation, write to the Free
|
||||
Software Foundation; we sometimes make exceptions for this. Our
|
||||
decision will be guided by the two goals of preserving the free status
|
||||
of all derivatives of our free software and of promoting the sharing
|
||||
and reuse of software generally.
|
||||
|
||||
NO WARRANTY
|
||||
|
||||
15. BECAUSE THE LIBRARY IS LICENSED FREE OF CHARGE, THERE IS NO
|
||||
WARRANTY FOR THE LIBRARY, TO THE EXTENT PERMITTED BY APPLICABLE LAW.
|
||||
EXCEPT WHEN OTHERWISE STATED IN WRITING THE COPYRIGHT HOLDERS AND/OR
|
||||
OTHER PARTIES PROVIDE THE LIBRARY "AS IS" WITHOUT WARRANTY OF ANY
|
||||
KIND, EITHER EXPRESSED OR IMPLIED, INCLUDING, BUT NOT LIMITED TO, THE
|
||||
IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
|
||||
PURPOSE. THE ENTIRE RISK AS TO THE QUALITY AND PERFORMANCE OF THE
|
||||
LIBRARY IS WITH YOU. SHOULD THE LIBRARY PROVE DEFECTIVE, YOU ASSUME
|
||||
THE COST OF ALL NECESSARY SERVICING, REPAIR OR CORRECTION.
|
||||
|
||||
16. IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN
|
||||
WRITING WILL ANY COPYRIGHT HOLDER, OR ANY OTHER PARTY WHO MAY MODIFY
|
||||
AND/OR REDISTRIBUTE THE LIBRARY AS PERMITTED ABOVE, BE LIABLE TO YOU
|
||||
FOR DAMAGES, INCLUDING ANY GENERAL, SPECIAL, INCIDENTAL OR
|
||||
CONSEQUENTIAL DAMAGES ARISING OUT OF THE USE OR INABILITY TO USE THE
|
||||
LIBRARY (INCLUDING BUT NOT LIMITED TO LOSS OF DATA OR DATA BEING
|
||||
RENDERED INACCURATE OR LOSSES SUSTAINED BY YOU OR THIRD PARTIES OR A
|
||||
FAILURE OF THE LIBRARY TO OPERATE WITH ANY OTHER SOFTWARE), EVEN IF
|
||||
SUCH HOLDER OR OTHER PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH
|
||||
DAMAGES.
|
||||
|
||||
END OF TERMS AND CONDITIONS
|
||||
|
||||
How to Apply These Terms to Your New Libraries
|
||||
|
||||
If you develop a new library, and you want it to be of the greatest
|
||||
possible use to the public, we recommend making it free software that
|
||||
everyone can redistribute and change. You can do so by permitting
|
||||
redistribution under these terms (or, alternatively, under the terms of the
|
||||
ordinary General Public License).
|
||||
|
||||
To apply these terms, attach the following notices to the library. It is
|
||||
safest to attach them to the start of each source file to most effectively
|
||||
convey the exclusion of warranty; and each file should have at least the
|
||||
"copyright" line and a pointer to where the full notice is found.
|
||||
|
||||
SteamOS Devkit Service
|
||||
Copyright (C) 2022 Valve Software inc.
|
||||
|
||||
This library is free software; you can redistribute it and/or
|
||||
modify it under the terms of the GNU Lesser General Public
|
||||
License as published by the Free Software Foundation; either
|
||||
version 2.1 of the License, or (at your option) any later version.
|
||||
|
||||
This library is distributed in the hope that it will be useful,
|
||||
but WITHOUT ANY WARRANTY; without even the implied warranty of
|
||||
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
|
||||
Lesser General Public License for more details.
|
||||
|
||||
You should have received a copy of the GNU Lesser General Public
|
||||
License along with this library; if not, write to the Free Software
|
||||
Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301
|
||||
USA
|
||||
|
||||
Also add information on how to contact you by electronic and paper mail.
|
||||
|
||||
You should also get your employer (if you work as a programmer) or your
|
||||
school, if any, to sign a "copyright disclaimer" for the library, if
|
||||
necessary. Here is a sample; alter the names:
|
||||
|
||||
Yoyodyne, Inc., hereby disclaims all copyright interest in the
|
||||
library `Frob' (a library for tweaking knobs) written by James Random
|
||||
Hacker.
|
||||
|
||||
<signature of Ty Coon>, 1 April 1990
|
||||
Ty Coon, President of Vice
|
||||
|
||||
That's all there is to it!
|
||||
@@ -0,0 +1,21 @@
|
||||
# Valve's steamos-devkit-service (vendored, for the fake Frame only)
|
||||
|
||||
Unmodified copy of [steamos-devkit-service](https://gitlab.steamos.cloud/devkit/steamos-devkit-service):
|
||||
the HTTP service on port 32000 (`src/`) and its hooks (`hooks/`), which the
|
||||
fake Frame image installs at `/usr/lib/steamos-devkit/` and
|
||||
`/usr/share/steamos-devkit/hooks/`, where the service looks for them.
|
||||
|
||||
- Source: commit `74cf8fe` (2025-09-16, tag `v0.20250916.0`).
|
||||
- Licence: the repository's `LICENSE` is the LGPL 2.1 (copied here).
|
||||
`src/steamos-devkit-service.py` itself carries an MIT header, and
|
||||
`hooks/devkit-1-identify` and `hooks/install-ssh-key` carry LGPL-2.1+
|
||||
headers. Nothing here ships in Frame Control; it's only built into the
|
||||
test image.
|
||||
|
||||
The service imports `dbus` to advertise itself over mDNS through
|
||||
systemd-resolved, which a container doesn't have. The image puts a small
|
||||
stand-in `dbus` module on its `PYTHONPATH` (`rootfs/usr/local/lib/fakeframe/pystubs`)
|
||||
that records the registration instead. Everything else runs as Valve wrote it.
|
||||
|
||||
To update: copy `src/`, `hooks/` and `LICENSE` from a newer checkout and update
|
||||
the commit line above.
|
||||
@@ -0,0 +1,71 @@
|
||||
#!/usr/bin/env python3
|
||||
|
||||
import sys
|
||||
import os
|
||||
import logging
|
||||
import tempfile
|
||||
from urllib.parse import quote_plus as urllib_quote_plus
|
||||
import subprocess
|
||||
import json
|
||||
|
||||
ENABLE_SSHD = '/usr/bin/steamos-polkit-helpers/steamos-enable-sshd'
|
||||
|
||||
logger = logging.getLogger(os.path.realpath(__file__))
|
||||
|
||||
import devkit_utils
|
||||
|
||||
if __name__ == '__main__':
|
||||
logger.setLevel(logging.INFO)
|
||||
ch = logging.StreamHandler()
|
||||
ch.setLevel(logging.INFO)
|
||||
ch.setFormatter(logging.Formatter('%(name)s:%(message)s'))
|
||||
logger.addHandler(ch)
|
||||
|
||||
request = open(sys.argv[1], 'rt').read()
|
||||
requestIP = 'Unknown'
|
||||
try:
|
||||
requestIP = sys.argv[2]
|
||||
except NameError:
|
||||
logger.warning('request IP not given as argument to hook')
|
||||
pass
|
||||
|
||||
key_identifier = request.split(' ')[2]
|
||||
request = f'Development host at IP {requestIP} key: {key_identifier!r}'
|
||||
|
||||
ret = {}
|
||||
|
||||
try:
|
||||
devkit_utils.validate_steam_client()
|
||||
except devkit_utils.SteamClientNotRunningException as e:
|
||||
msg = 'Steam is not running'
|
||||
logger.warning(msg)
|
||||
ret['error'] = msg
|
||||
else:
|
||||
with tempfile.TemporaryDirectory(prefix='approve-ssh-key') as tempdir:
|
||||
logger.info('Sending pairing request to Steam')
|
||||
response = os.path.join(tempdir, 'response')
|
||||
cmd = 'approve-ssh-key?response={}&request={}'.format(
|
||||
urllib_quote_plus(response),
|
||||
urllib_quote_plus(request),
|
||||
)
|
||||
devkit_utils.execute_steam_client_command(cmd)
|
||||
try:
|
||||
with devkit_utils.wait_on_file_response(response, timeout=30) as f:
|
||||
logger.debug('Got response from Steam client')
|
||||
# Make sure sshd is enabled to support development features
|
||||
if os.path.exists(ENABLE_SSHD):
|
||||
subprocess.check_call(ENABLE_SSHD)
|
||||
else:
|
||||
subprocess.check_call('sudo systemctl enable --now sshd', shell=True)
|
||||
except devkit_utils.SteamResponse_Timeout:
|
||||
ret['error'] = 'timeout - Steam did not respond to the pairing request'
|
||||
except devkit_utils.SteamResponse_Error as e:
|
||||
ret['error'] = e.error_response
|
||||
|
||||
# json dictionary response gets written to stdout
|
||||
# NOTE: the devkit service unfortunately smashes stdout/stderr all together in a text response, but we can still work with that
|
||||
sys.stdout.flush()
|
||||
sys.stderr.flush()
|
||||
print(json.dumps(ret))
|
||||
retcode = 1 if 'error' in ret else 0
|
||||
sys.exit(retcode)
|
||||
@@ -0,0 +1,151 @@
|
||||
#!/usr/bin/env python3
|
||||
# encoding: utf-8
|
||||
|
||||
# This file is part of steamos-devkit
|
||||
# SPDX-License-Identifier: LGPL-2.1+
|
||||
#
|
||||
# Copyright 2017-2018 Collabora Ltd
|
||||
#
|
||||
# This package is free software; you can redistribute it and/or
|
||||
# modify it under the terms of the GNU Lesser General Public
|
||||
# License as published by the Free Software Foundation; either
|
||||
# version 2.1 of the License, or (at your option) any later version.
|
||||
#
|
||||
# This package is distributed in the hope that it will be useful,
|
||||
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
||||
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
|
||||
# Lesser General Public License for more details.
|
||||
#
|
||||
# You should have received a copy of the GNU Lesser General Public
|
||||
# License along with this package. If not, see
|
||||
# <http://www.gnu.org/licenses/>.
|
||||
|
||||
# Sample script run to identify the machine we are running on. This
|
||||
# is used by the devkit daemon to choose an identity for the machine,
|
||||
# and can also be run directly.
|
||||
#
|
||||
# A script or binary (written in any language) named devkit-1-identify
|
||||
# can be placed in the same directory as this sample, and it will be
|
||||
# used preferentially.
|
||||
#
|
||||
# Execution environment:
|
||||
# - Runs as root, or as an ordinary user who can run games
|
||||
# - Part of a non-interactive secure shell session
|
||||
# Input:
|
||||
# - None
|
||||
# Output:
|
||||
# - Exit 0 on success or nonzero on error
|
||||
# - On success, must print JSON to stdout containing one object with
|
||||
# the following keys and string values, all of which are optional:
|
||||
# - "machine_id": The hexadecimal systemd/D-Bus machine-id(5)
|
||||
# (in the case of a conflict between systemd's /etc/machine-id and
|
||||
# D-Bus' traditional /var/lib/dbus/machine-id, the systemd version
|
||||
# should be preferred)
|
||||
# - "hostname": The machine-readable hostname as set by sethostname(2)
|
||||
# - "pretty_hostname": A human-friendly version of the hostname as
|
||||
# found in systemd's machine-info(5)
|
||||
# - "product_family", "product_name", "product_serial", "product_uuid",
|
||||
# "sys_vendor": as for /sys/devices/virtual/dmi/id
|
||||
# - "product": The best human-friendly description of the machine
|
||||
# hardware we can devise, for example "Alienware ASM100"
|
||||
# - "serial": The best hardware serial number we can devise
|
||||
# - "machine_name": The best unique name for the machine that we can
|
||||
# devise
|
||||
# - Any diagnostic messages must be printed to stderr only
|
||||
|
||||
import json
|
||||
import os
|
||||
import re
|
||||
import socket
|
||||
import subprocess
|
||||
import sys
|
||||
|
||||
_MACHINE_ID_RE = re.compile(r'^[0-9A-Fa-f]{32,32}$')
|
||||
_USELESS_HOSTNAMES = frozenset((
|
||||
'debian',
|
||||
'host',
|
||||
'localhost',
|
||||
'steamos',
|
||||
'ubuntu',
|
||||
))
|
||||
# The case combination sometimes varies, so this is lowercased and we
|
||||
# use lower() to compare.
|
||||
_USELESS_DMI_NAMES = frozenset((
|
||||
'to be filled by o.e.m.',
|
||||
))
|
||||
|
||||
if __name__ == '__main__':
|
||||
|
||||
info = {}
|
||||
steam_serialnumber = None
|
||||
|
||||
for k in ('product_family', 'product_name', 'product_serial',
|
||||
'product_uuid', 'sys_vendor'):
|
||||
try:
|
||||
with open('/sys/devices/virtual/dmi/id/{}'.format(k)) as reader:
|
||||
v = reader.read().strip()
|
||||
|
||||
if v and v.lower() not in _USELESS_DMI_NAMES:
|
||||
info[k] = v
|
||||
except (IOError, OSError, UnicodeError):
|
||||
pass
|
||||
|
||||
try:
|
||||
for f in ('/etc/machine-id', '/var/lib/dbus/machine-id'):
|
||||
with open(f) as reader:
|
||||
v = reader.read().strip()
|
||||
|
||||
if _MACHINE_ID_RE.match(v):
|
||||
info['machine_id'] = v
|
||||
except (IOError, OSError, UnicodeError):
|
||||
pass
|
||||
|
||||
if 'product_family' in info and 'sys_vendor' in info:
|
||||
info['product'] = '{sys_vendor} {product_family}'.format(**info)
|
||||
elif 'product_name' in info and 'sys_vendor' in info:
|
||||
info['product'] = '{sys_vendor} {product_name}'.format(**info)
|
||||
elif 'product_family' in info:
|
||||
info['product'] = info['product_family']
|
||||
elif 'product_name' in info:
|
||||
info['product'] = info['product_name']
|
||||
|
||||
if os.access('/usr/bin/hostnamectl', os.X_OK):
|
||||
try:
|
||||
v = subprocess.check_output([
|
||||
'hostnamectl', '--pretty',
|
||||
]).decode('utf-8').strip()
|
||||
except (subprocess.CalledProcessError, UnicodeError):
|
||||
pass
|
||||
else:
|
||||
if v:
|
||||
info['pretty_hostname'] = v
|
||||
|
||||
v = subprocess.check_output([
|
||||
'hostnamectl', '--static',
|
||||
]).decode('utf-8').strip()
|
||||
|
||||
if v:
|
||||
info['hostname'] = v
|
||||
|
||||
if 'hostname' not in info:
|
||||
try:
|
||||
info['hostname'] = socket.gethostname()
|
||||
except (IOError, OSError, UnicodeError):
|
||||
pass
|
||||
|
||||
if steam_serialnumber:
|
||||
info['serial'] = steam_serialnumber
|
||||
elif 'product_serial' in info:
|
||||
info['serial'] = info['product_serial']
|
||||
|
||||
if 'product' in info:
|
||||
info['machine_name'] = info['product']
|
||||
|
||||
if 'hostname' in info and info['hostname'] not in _USELESS_HOSTNAMES:
|
||||
info['machine_name'] = info['hostname']
|
||||
|
||||
if 'pretty_hostname' in info:
|
||||
info['machine_name'] = info['pretty_hostname']
|
||||
|
||||
json.dump(info, sys.stdout, indent=4, sort_keys=True)
|
||||
print()
|
||||
@@ -0,0 +1,265 @@
|
||||
#!/usr/bin/env python
|
||||
# encoding: utf-8
|
||||
"""Utility functions for the Steam client hook scripts"""
|
||||
|
||||
import sys
|
||||
import os
|
||||
import traceback
|
||||
import tempfile
|
||||
import json
|
||||
import logging
|
||||
import fcntl
|
||||
import errno
|
||||
import contextlib
|
||||
import time
|
||||
import fcntl
|
||||
|
||||
|
||||
import logging as logging_module
|
||||
logger = logging_module.getLogger(__name__)
|
||||
|
||||
|
||||
@contextlib.contextmanager
|
||||
def wrap_outputs(stderr_prefix):
|
||||
# capture stderr to file to support debugging
|
||||
stderr_fd = sys.stderr.fileno()
|
||||
tf = tempfile.NamedTemporaryFile(
|
||||
mode='w+',
|
||||
prefix=stderr_prefix,
|
||||
delete=True)
|
||||
if sys.version_info >= (3, 4):
|
||||
# this API in the os module is only available for python3
|
||||
# but it does not seem to work with subprocess anyway
|
||||
os.set_inheritable(tf.file.fileno(), True)
|
||||
assert os.get_inheritable(tf.file.fileno())
|
||||
sys.stderr = tf.file
|
||||
|
||||
# we can only write out a json response to stdout,
|
||||
# so redirect stdout to stderr,
|
||||
# and keep a handle on the original stdout for the response
|
||||
stdout_fd = os.dup(sys.stdout.fileno())
|
||||
os.dup2(sys.stderr.fileno(), sys.stdout.fileno())
|
||||
|
||||
ctx = {}
|
||||
try:
|
||||
yield ctx
|
||||
except:
|
||||
logger.error(traceback.format_exc())
|
||||
finally:
|
||||
tf.flush()
|
||||
tf.seek(0)
|
||||
os.write(stderr_fd, tf.read().encode('utf-8'))
|
||||
if 'ret' in ctx:
|
||||
os.write(stdout_fd, json.dumps(ctx['ret']).encode('utf-8'))
|
||||
|
||||
|
||||
class SteamClientNotRunningException(Exception):
|
||||
def __init__(self, error_message):
|
||||
self.error_message = error_message
|
||||
|
||||
def __str__(self):
|
||||
return self.error_message
|
||||
|
||||
|
||||
def validate_steam_client():
|
||||
"""Verify that the steam client is running, and permissions are adequate"""
|
||||
pid_path = os.path.normpath(
|
||||
os.path.realpath(
|
||||
os.path.expanduser('~/.steam/steam.pid')))
|
||||
if not os.path.exists(pid_path):
|
||||
raise SteamClientNotRunningException('{0} does not exist'.format(pid_path))
|
||||
try:
|
||||
pid = int(open(pid_path, 'rt').read())
|
||||
except Exception:
|
||||
raise SteamClientNotRunningException('{0} is invalid'.format(pid_path))
|
||||
try:
|
||||
os.kill(pid, 0)
|
||||
except OSError:
|
||||
raise SteamClientNotRunningException('{0} does not refer to a valid process'.format(pid_path))
|
||||
logger.info('Found steam client pid %s', pid)
|
||||
|
||||
|
||||
def execute_steam_client_command(cmd):
|
||||
"""Send a command to the steam client over the IPC pipe"""
|
||||
pipe_path = os.path.normpath(
|
||||
os.path.realpath(
|
||||
os.path.expanduser('~/.steam/steam.pipe')))
|
||||
try:
|
||||
pipe = open(pipe_path, 'wb+', 0)
|
||||
except IOError:
|
||||
raise Exception('cannot open steam client pipe')
|
||||
session_token = open(os.path.expanduser('~/.steam/steam.token')).read()
|
||||
pipe_cmd = 'devkit-1 steam://devkit-1/{0}/{1}'.format(
|
||||
session_token,
|
||||
cmd
|
||||
)
|
||||
logger.debug('Sending command line:')
|
||||
logger.debug(pipe_cmd)
|
||||
pipe.write('{0}\n'.format(pipe_cmd).encode('utf-8'))
|
||||
pipe.close()
|
||||
|
||||
|
||||
def save_argv(gameid, argv):
|
||||
"""Save command line and arguments if provided"""
|
||||
|
||||
if argv is None:
|
||||
return
|
||||
|
||||
argvfile = os.path.join(os.getenv("HOME"), "devkit-game",
|
||||
gameid + "-argv.json")
|
||||
try:
|
||||
with open(argvfile, "w") as argvf:
|
||||
fcntl.flock(argvf, fcntl.LOCK_EX)
|
||||
json.dump(argv, argvf)
|
||||
fcntl.flock(argvf, fcntl.LOCK_UN)
|
||||
except IOError:
|
||||
raise Exception(
|
||||
"Unable to open argv file for writing: {0}".format(argvfile))
|
||||
|
||||
|
||||
def obtain_argv(gameid, argv):
|
||||
"""Obtain command line with arguments"""
|
||||
|
||||
# If present and not None or [], just return the local arguments
|
||||
if argv:
|
||||
return argv
|
||||
|
||||
# From here, expect arguments to have been saved previously
|
||||
argvfile = os.path.join(os.getenv("HOME"), "devkit-game",
|
||||
gameid + "-argv.json")
|
||||
try:
|
||||
with open(argvfile, "r") as argvf:
|
||||
fcntl.flock(argvf, fcntl.LOCK_EX)
|
||||
argv = json.load(argvf)
|
||||
fcntl.flock(argvf, fcntl.LOCK_UN)
|
||||
except IOError:
|
||||
raise Exception(
|
||||
"Unable to open argv file for reading: {0}".format(argvfile))
|
||||
return argv
|
||||
|
||||
|
||||
def save_settings(gameid, data):
|
||||
"""Save settings"""
|
||||
settingsfile = os.path.join(os.getenv("HOME"), "devkit-game",
|
||||
gameid + "-settings.json")
|
||||
settings = dict()
|
||||
|
||||
if data.get('clear_settings', False):
|
||||
settings = {}
|
||||
else:
|
||||
try:
|
||||
with open(settingsfile, "r") as f:
|
||||
fcntl.flock(f, fcntl.LOCK_EX)
|
||||
settings = json.load(f)
|
||||
fcntl.flock(f, fcntl.LOCK_UN)
|
||||
except IOError as e:
|
||||
if (e.errno != errno.ENOENT):
|
||||
raise
|
||||
|
||||
# Merge settings from new json
|
||||
if 'settings' in data:
|
||||
settings.update(data['settings'])
|
||||
|
||||
try:
|
||||
with open(settingsfile, "w") as f:
|
||||
fcntl.flock(f, fcntl.LOCK_EX)
|
||||
json.dump(settings, f)
|
||||
fcntl.flock(f, fcntl.LOCK_UN)
|
||||
except (IOError):
|
||||
raise Exception(
|
||||
"Unable to open settings file for writing: {0}".format(
|
||||
settingsfile
|
||||
))
|
||||
|
||||
return settings
|
||||
|
||||
|
||||
def load_settings(gameid):
|
||||
settingsfile = os.path.join(os.getenv("HOME"), "devkit-game", gameid + '-settings.json')
|
||||
|
||||
if not os.path.isfile(settingsfile):
|
||||
return None
|
||||
|
||||
with open(settingsfile, "r") as f:
|
||||
fcntl.flock(f, fcntl.LOCK_EX)
|
||||
settings = json.load(f)
|
||||
fcntl.flock(f, fcntl.LOCK_UN)
|
||||
|
||||
return settings
|
||||
|
||||
|
||||
class SteamResponse_Timeout(Exception):
|
||||
pass
|
||||
|
||||
|
||||
class SteamResponse_Error(Exception):
|
||||
def __init__(self, error_response):
|
||||
self.error_response = error_response
|
||||
|
||||
def __str__(self):
|
||||
return self.error_response
|
||||
|
||||
|
||||
@contextlib.contextmanager
|
||||
def wait_on_file_response(path, timeout=5):
|
||||
"""
|
||||
The pipe to the Steam Client is one way.
|
||||
Responses from the Steam Client are written to filesystem.
|
||||
Protocol is as follows:
|
||||
- Steam Client creates a 'path.lock' file
|
||||
- Steam Client writes either 'path' or 'path.error' to indicate a problem
|
||||
- Steam Client deletes 'path.lock'
|
||||
- Caller (us) can then read the response
|
||||
|
||||
NOTE 1: this function is used as a context manager and will block until a response comes in or timeout.
|
||||
|
||||
NOTE 2: the files are created by Steam when responding to a command. If the files already exist the response protocol will break.
|
||||
"""
|
||||
lock_path = '{0}.lock'.format(path)
|
||||
error_path = '{0}.error'.format(path)
|
||||
max_count = timeout
|
||||
while True:
|
||||
time.sleep(1)
|
||||
if os.path.exists(error_path) or os.path.exists(path) and not os.path.exists(lock_path):
|
||||
if os.path.exists(error_path):
|
||||
with open(error_path, 'r') as f:
|
||||
fcntl.flock(f, fcntl.LOCK_EX)
|
||||
error_response = f.read()
|
||||
fcntl.flock(f, fcntl.LOCK_UN)
|
||||
raise SteamResponse_Error(error_response)
|
||||
with open(path, 'r') as f:
|
||||
fcntl.flock(f, fcntl.LOCK_EX)
|
||||
success_response = f.read()
|
||||
yield success_response
|
||||
fcntl.flock(f, fcntl.LOCK_UN)
|
||||
return
|
||||
max_count -= 1
|
||||
if max_count > 0:
|
||||
continue
|
||||
raise SteamResponse_Timeout()
|
||||
|
||||
|
||||
# Setting up as a context manager so we never miss the deletion
|
||||
# Creating a temporary .lock file to guard the create operation
|
||||
@contextlib.contextmanager
|
||||
def create_pid(pid_path):
|
||||
os.makedirs(os.path.dirname(pid_path), exist_ok=True)
|
||||
lock_path = '{0}.lock'.format(pid_path)
|
||||
try:
|
||||
lock_file = os.open(lock_path, os.O_CREAT | os.O_EXCL)
|
||||
except IOError as e:
|
||||
logger.error('cannot create lock file %s for pid file %s', lock_path, pid_path)
|
||||
logger.error('remove the lock file manually and run again if you are confident no other instance is active')
|
||||
raise
|
||||
|
||||
pid_file = open(pid_path,'w')
|
||||
pid_file.write(str(os.getpid()))
|
||||
pid_file.flush()
|
||||
os.close(lock_file)
|
||||
os.unlink(lock_path)
|
||||
try:
|
||||
yield pid_file
|
||||
finally:
|
||||
pid_file.close()
|
||||
# Assume that's atomic and all is well, no need for another .lock
|
||||
os.unlink(pid_path)
|
||||
@@ -0,0 +1,74 @@
|
||||
#!/bin/sh
|
||||
#
|
||||
# This file is part of steamos-devkit
|
||||
# SPDX-License-Identifier: LGPL-2.1+
|
||||
#
|
||||
# Copyright © 2017-2018 Collabora Ltd
|
||||
#
|
||||
# This package is free software; you can redistribute it and/or
|
||||
# modify it under the terms of the GNU Lesser General Public
|
||||
# License as published by the Free Software Foundation; either
|
||||
# version 2.1 of the License, or (at your option) any later version.
|
||||
#
|
||||
# This package is distributed in the hope that it will be useful,
|
||||
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
||||
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
|
||||
# Lesser General Public License for more details.
|
||||
#
|
||||
# You should have received a copy of the GNU Lesser General Public
|
||||
# License along with this package. If not, see
|
||||
# <http://www.gnu.org/licenses/>.
|
||||
|
||||
# Sample script to install ssh keys that were approved by the
|
||||
# approve-ssh-key script.
|
||||
#
|
||||
# A script or binary (written in any language) named install-ssh-key
|
||||
# can be placed in the same directory as this sample, and it will be
|
||||
# used preferentially.
|
||||
#
|
||||
# Execution environment:
|
||||
# - Runs as root
|
||||
# Input:
|
||||
# - The public key is in a temporary file accessible via argv[1], in
|
||||
# OpenSSH format
|
||||
# - argv[2], ... are the users to which we should grant access
|
||||
# Output:
|
||||
# - Exit 0 to accept the key, or nonzero to reject or on error
|
||||
#
|
||||
# This sample implementation should be suitable for any machine that
|
||||
# has the specified users. A production implementation would be similar
|
||||
# or even identical.
|
||||
|
||||
set -e
|
||||
|
||||
public_key="$1"
|
||||
shift
|
||||
|
||||
echo "Installing public key '$public_key' for users: $*"
|
||||
|
||||
for user in "$@"
|
||||
do
|
||||
if pwent="$(getent passwd "$user")"
|
||||
then
|
||||
home="$(echo "$pwent" | cut -d: -f6)"
|
||||
group="$(id -gn "$user")"
|
||||
install -d -m 0755 -o "$user" -g "$group" "$home/.ssh"
|
||||
if ! [ -e "$home/.ssh/authorized_keys" ]
|
||||
then
|
||||
install -m 0600 -o "$user" -g "$group" "$public_key" "$home/.ssh/authorized_keys"
|
||||
else
|
||||
if ! ( grep -v '^#' "$home/.ssh/authorized_keys" | grep -qF "$(cut -d " " -f2 "$public_key")" )
|
||||
then
|
||||
if [ -n "$(tail -1c "$home/.ssh/authorized_keys")" ]
|
||||
then
|
||||
echo >> "$home/.ssh/authorized_keys"
|
||||
fi
|
||||
cat "$public_key" >> "$home/.ssh/authorized_keys"
|
||||
fi
|
||||
fi
|
||||
fi
|
||||
done
|
||||
|
||||
echo "Public key installed"
|
||||
|
||||
exit 0
|
||||
@@ -0,0 +1,522 @@
|
||||
#!/usr/bin/env python3
|
||||
# -*- coding: utf-8 -*-
|
||||
|
||||
# MIT License
|
||||
#
|
||||
# Copyright (c) 2022 Valve Software inc., Collabora Ltd
|
||||
#
|
||||
# Permission is hereby granted, free of charge, to any person obtaining a copy
|
||||
# of this software and associated documentation files (the "Software"), to deal
|
||||
# in the Software without restriction, including without limitation the rights
|
||||
# to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
|
||||
# copies of the Software, and to permit persons to whom the Software is
|
||||
# furnished to do so, subject to the following conditions:
|
||||
#
|
||||
# The above copyright notice and this permission notice shall be included in all
|
||||
# copies or substantial portions of the Software.
|
||||
#
|
||||
# THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
|
||||
# IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
|
||||
# FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
|
||||
# AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
|
||||
# LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
|
||||
# OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
|
||||
# SOFTWARE.
|
||||
|
||||
from http.server import BaseHTTPRequestHandler
|
||||
import configparser
|
||||
import getpass
|
||||
import json
|
||||
import os
|
||||
import platform
|
||||
import socketserver
|
||||
import subprocess
|
||||
import tempfile
|
||||
import urllib.parse
|
||||
import argparse
|
||||
import threading
|
||||
import sys
|
||||
import builtins
|
||||
import signal
|
||||
|
||||
import dbus
|
||||
|
||||
# Print to stderr, which is unbuffered and easier to read in journalctl
|
||||
STDOUT_PRINT = builtins.print
|
||||
def stderr_print(*args, **kwargs):
|
||||
if 'file' not in kwargs:
|
||||
kwargs['file'] = sys.stderr
|
||||
global STDOUT_PRINT
|
||||
return STDOUT_PRINT(*args, **kwargs)
|
||||
builtins.print = stderr_print
|
||||
|
||||
# Expect a SIGUSR1 signal to exit
|
||||
# Could come at any time so we keep a global flag, but also support a callback
|
||||
SHOULD_EXIT = False
|
||||
EXIT_CALLBACK = None
|
||||
def handle_sigusr1(signum, frame):
|
||||
""" Handle SIGUSR1 signal
|
||||
"""
|
||||
global SHOULD_EXIT
|
||||
global EXIT_CALLBACK
|
||||
print("Received SIGUSR1, exiting.")
|
||||
SHOULD_EXIT = True
|
||||
if EXIT_CALLBACK:
|
||||
EXIT_CALLBACK()
|
||||
def set_exit_callback(callback):
|
||||
""" Set a callback to be called when we receive a SIGUSR1 signal
|
||||
"""
|
||||
global SHOULD_EXIT
|
||||
global EXIT_CALLBACK
|
||||
EXIT_CALLBACK = callback
|
||||
#print(f'Exit callback set to {EXIT_CALLBACK}')
|
||||
if SHOULD_EXIT and EXIT_CALLBACK:
|
||||
EXIT_CALLBACK()
|
||||
signal.signal(signal.SIGUSR1, handle_sigusr1)
|
||||
|
||||
SERVICE_PORT = 32000
|
||||
PACKAGE = "steamos-devkit-service"
|
||||
DEVKIT_HOOKS_DIR = "/usr/share/steamos-devkit/hooks"
|
||||
CURRENT_TXTVERS = '1'
|
||||
|
||||
ENTRY_POINT = "devkit-1"
|
||||
# root until config is loaded and told otherwise, etc.
|
||||
ENTRY_POINT_USER = "root"
|
||||
DEVICE_USERS = []
|
||||
PROPERTIES = {"txtvers": 1,
|
||||
"login": ENTRY_POINT_USER,
|
||||
"settings": "",
|
||||
"devkit1": [
|
||||
ENTRY_POINT
|
||||
]}
|
||||
|
||||
# Forced mDNS republish currently disabled, was causing a bad interaction with org.freedesktop.resolve1
|
||||
FORCE_PUBLISH_INTERVAL = 0
|
||||
|
||||
def write_file(data: bytes) -> str:
|
||||
""" Write given bytes to a temporary file and return the filename
|
||||
|
||||
Return the empty string if unable to open temp file for some reason
|
||||
"""
|
||||
|
||||
with tempfile.NamedTemporaryFile(mode='w', prefix='devkit-1', encoding='utf-8',
|
||||
delete=False) as file:
|
||||
file.write(data.decode())
|
||||
|
||||
return file.name
|
||||
|
||||
return ''
|
||||
|
||||
|
||||
def write_key(post_body: bytes) -> str:
|
||||
""" Write key to temp file and return filename if valid
|
||||
|
||||
Return the empty string if invalid
|
||||
"""
|
||||
length = len(post_body)
|
||||
found_name = False
|
||||
|
||||
if length >= 64 * 1024:
|
||||
print("Key length too long")
|
||||
return ''
|
||||
if not post_body.decode().startswith('ssh-rsa '):
|
||||
print("Key doesn't start with ssh-rsa ")
|
||||
return ''
|
||||
|
||||
# Get to the base64 bits
|
||||
index = 8
|
||||
while index < length and post_body[index] == ' ':
|
||||
index = index + 1
|
||||
|
||||
# Make sure key is base64
|
||||
body_decoded = post_body.decode()
|
||||
while index < length:
|
||||
if ((body_decoded[index] == '+') or (body_decoded[index] == '/') or
|
||||
(body_decoded[index].isdigit()) or
|
||||
(body_decoded[index].isalpha())):
|
||||
index = index + 1
|
||||
continue
|
||||
if body_decoded[index] == '=':
|
||||
index = index + 1
|
||||
if (index < length) and (body_decoded[index] == ' '):
|
||||
break
|
||||
if (index < length) and (body_decoded[index] == '='):
|
||||
index = index + 1
|
||||
if (index < length) and (body_decoded[index] == ' '):
|
||||
break
|
||||
print("Found = but no space or = next, invalid key")
|
||||
return ''
|
||||
if body_decoded[index] == ' ':
|
||||
break
|
||||
|
||||
print("Found invalid data, invalid key at "
|
||||
f"index: {index} data: {body_decoded[index]}")
|
||||
return ''
|
||||
|
||||
print(f"Key is valid base64, writing to temp file index: {index}")
|
||||
while index < length:
|
||||
if body_decoded[index] == ' ':
|
||||
# it's a space, the rest is name or magic phrase, don't write to disk
|
||||
if found_name:
|
||||
print(f"Found name ending at index {index}")
|
||||
length = index
|
||||
else:
|
||||
print(f"Found name ending index {index}")
|
||||
found_name = True
|
||||
if body_decoded[index] == '\0':
|
||||
print("Found null terminator before expected")
|
||||
return ''
|
||||
if body_decoded[index] == '\n' and index != length - 1:
|
||||
print("Found newline before expected")
|
||||
return ''
|
||||
index = index + 1
|
||||
|
||||
# write data to the file
|
||||
data = body_decoded[:length]
|
||||
filename = write_file(data.encode())
|
||||
|
||||
if filename:
|
||||
print(f"Filename key written to: {filename}")
|
||||
|
||||
return filename
|
||||
|
||||
|
||||
def find_hook(name: str) -> str:
|
||||
""" Find a hook with the given name
|
||||
|
||||
Return the path to the hook if found. '' if not found
|
||||
"""
|
||||
test_path = f"{DEVKIT_HOOKS_DIR}/{name}"
|
||||
if os.path.exists(test_path) and os.access(test_path, os.X_OK):
|
||||
return test_path
|
||||
|
||||
print(f"Error:: Unable to find hook for {name}")
|
||||
return ''
|
||||
|
||||
|
||||
def get_machine_name() -> str:
|
||||
""" Get the machine name and return it in a string
|
||||
|
||||
Use identify hook first, and if that fails just get the hostname.
|
||||
"""
|
||||
machine_name = ''
|
||||
# Run devkit-1-identify hook to get hostname, otherwise use default platform.node()
|
||||
identify_hook = find_hook("devkit-1-identify")
|
||||
if identify_hook:
|
||||
# Run hook and parse machine_name out
|
||||
process = subprocess.Popen(identify_hook, shell=False, stdout=subprocess.PIPE)
|
||||
output = ''
|
||||
for line in process.stdout:
|
||||
textline = line.decode(encoding='utf-8', errors="ignore")
|
||||
output += textline
|
||||
process.wait()
|
||||
output_object = json.loads(output)
|
||||
if 'machine_name' in output_object:
|
||||
machine_name = output_object["machine_name"]
|
||||
|
||||
if not machine_name:
|
||||
machine_name = platform.node()
|
||||
|
||||
return machine_name
|
||||
|
||||
|
||||
class DevkitHandler(BaseHTTPRequestHandler):
|
||||
""" Class to handle http requests on selected port for registration, getting properties.
|
||||
"""
|
||||
def _send_headers(self, code, content_type):
|
||||
self.send_response(code)
|
||||
self.send_header("Content-type", content_type)
|
||||
self.end_headers()
|
||||
|
||||
def do_GET(self):
|
||||
""" Handle GET requests
|
||||
"""
|
||||
print(f"GET request to path {self.path} from {self.client_address[0]}")
|
||||
|
||||
if self.path == "/login-name":
|
||||
self._send_headers(200, "text/plain")
|
||||
self.wfile.write(ENTRY_POINT_USER.encode())
|
||||
return
|
||||
|
||||
if self.path == "/properties.json":
|
||||
self._send_headers(200, "application/json")
|
||||
self.wfile.write(json.dumps(PROPERTIES, indent=2).encode())
|
||||
return
|
||||
|
||||
query = urllib.parse.parse_qs(self.path[2:])
|
||||
print(f"query is {query}")
|
||||
|
||||
if len(query) > 0 and query["command"]:
|
||||
command = query["command"][0]
|
||||
|
||||
if command == "ping":
|
||||
self._send_headers(200, "text/plain")
|
||||
self.wfile.write("pong\n".encode())
|
||||
return
|
||||
|
||||
self._send_headers(404, "")
|
||||
return
|
||||
|
||||
self._send_headers(404, "")
|
||||
self.wfile.write("Unknown request\n".encode())
|
||||
|
||||
def do_POST(self):
|
||||
""" Handle POST requests
|
||||
"""
|
||||
if self.path == "/register":
|
||||
from_ip = self.client_address[0]
|
||||
content_len = int(self.headers.get('Content-Length'))
|
||||
post_body = self.rfile.read(content_len)
|
||||
print(f"register request from {from_ip}")
|
||||
filename = write_key(post_body)
|
||||
|
||||
if not filename:
|
||||
self._send_headers(403, "text/plain")
|
||||
self.wfile.write(json.dumps({'error':'Failed to write the ssh key'}).encode())
|
||||
return
|
||||
|
||||
# Run approve script
|
||||
approve_hook = find_hook("approve-ssh-key")
|
||||
if not approve_hook:
|
||||
self._send_headers(403, "text/plain")
|
||||
self.wfile.write(json.dumps({'error':'Failed to find approve hook'}).encode())
|
||||
os.unlink(filename)
|
||||
return
|
||||
|
||||
# Run hook and parse output
|
||||
approve_process = subprocess.Popen([approve_hook, filename, from_ip],
|
||||
shell=False,
|
||||
stdout=subprocess.PIPE)
|
||||
approve_output = ''
|
||||
for approve_line in approve_process.stdout:
|
||||
approve_textline = approve_line.decode(encoding='utf-8', errors="ignore")
|
||||
approve_output += approve_textline
|
||||
|
||||
approve_process.wait()
|
||||
approve_object = json.loads(approve_output)
|
||||
if "error" in approve_object:
|
||||
self._send_headers(403, "text/plain")
|
||||
self.wfile.write(approve_output.encode()) # is already a json {'error':} response
|
||||
os.unlink(filename)
|
||||
return
|
||||
|
||||
# Otherwise, assume it passed
|
||||
install_hook = find_hook("install-ssh-key")
|
||||
if not install_hook:
|
||||
self._send_headers(403, "text-plain")
|
||||
self.wfile.write(json.dumps({'error':'Failed to find install-ssh-key hook'}).encode())
|
||||
os.unlink(filename)
|
||||
return
|
||||
|
||||
command = [install_hook, filename]
|
||||
# Append each user to command as separate arguments
|
||||
for user in DEVICE_USERS:
|
||||
command.append(user)
|
||||
|
||||
install_process = subprocess.Popen(command, shell=False, stdout=subprocess.PIPE)
|
||||
install_output = ''
|
||||
for install_line in install_process.stdout:
|
||||
install_textline = install_line.decode(encoding='utf-8', errors="ignore")
|
||||
install_output += install_textline
|
||||
install_process.wait()
|
||||
|
||||
exit_code = install_process.returncode
|
||||
if exit_code != 0:
|
||||
self._send_headers(500, "text/plain")
|
||||
self.wfile.write("install-ssh-key:\n".encode())
|
||||
self.wfile.write(install_output.encode())
|
||||
os.unlink(filename)
|
||||
return
|
||||
|
||||
self._send_headers(200, "text/plain")
|
||||
self.wfile.write("Registered\n".encode())
|
||||
os.unlink(filename)
|
||||
|
||||
|
||||
class DevkitService:
|
||||
""" Class to run as service.
|
||||
|
||||
Parses configuration, creates handler, registers an entry in dynamic DNS, etc.
|
||||
"""
|
||||
def __init__(self):
|
||||
global ENTRY_POINT_USER
|
||||
global DEVICE_USERS
|
||||
|
||||
self.port = SERVICE_PORT
|
||||
self.name = get_machine_name()
|
||||
self.stype = "_steamos-devkit._tcp"
|
||||
|
||||
self.service_path = None
|
||||
|
||||
config = configparser.ConfigParser()
|
||||
# Use str form to preserve case
|
||||
config.optionxform = str
|
||||
config.read(["/etc/steamos-devkit/steamos-devkit.conf",
|
||||
"/usr/share/steamos-devkit/steamos-devkit.conf",
|
||||
os.path.join(os.path.expanduser('~'), '.config', PACKAGE, PACKAGE + '.conf')])
|
||||
|
||||
self.settings = {}
|
||||
if 'Settings' in config:
|
||||
settings = config["Settings"]
|
||||
self.settings = dict(settings)
|
||||
if 'Port' in settings:
|
||||
self.port = int(settings["Port"])
|
||||
|
||||
PROPERTIES["settings"] = json.dumps(self.settings)
|
||||
|
||||
# Parse users from configs
|
||||
if os.geteuid() == 0:
|
||||
# Running as root, maybe warn?
|
||||
print("Running as root, Probably shouldn't be\n")
|
||||
if 'Users' in config:
|
||||
users = config["Users"]
|
||||
if 'ShellUsers' in users:
|
||||
DEVICE_USERS = users["ShellUsers"]
|
||||
else:
|
||||
if 'Users' in config:
|
||||
users = config["Users"]
|
||||
if 'ShellUsers' in users:
|
||||
DEVICE_USERS = users["ShellUsers"]
|
||||
else:
|
||||
username = getpass.getuser()
|
||||
print(f'Username: {username}')
|
||||
DEVICE_USERS = []
|
||||
DEVICE_USERS.append(username)
|
||||
|
||||
# If only one user, that's the entry point user
|
||||
# Otherwise entry_point_user needs to be root to be able to switch between users
|
||||
if len(DEVICE_USERS) == 1:
|
||||
ENTRY_POINT_USER = DEVICE_USERS[0]
|
||||
PROPERTIES["login"] = ENTRY_POINT_USER
|
||||
|
||||
# "an array of dictionaries mapping strings to byte arrays" .. biggest eyeroll
|
||||
py_dict = {}
|
||||
for key, value in [
|
||||
('txtvers', CURRENT_TXTVERS),
|
||||
('settings', json.dumps(self.settings)),
|
||||
('login', ENTRY_POINT_USER),
|
||||
('devkit1', ENTRY_POINT)
|
||||
]:
|
||||
py_dict[key] = dbus.Array([ord(c) for c in value], signature='y')
|
||||
self.txt_records = dbus.Array( [dbus.Dictionary(py_dict, signature='say' )], signature='a{say}' )
|
||||
|
||||
self.dbus_bus = dbus.SystemBus()
|
||||
self.resolve1_register = self.dbus_bus.get_object(
|
||||
'org.freedesktop.resolve1',
|
||||
'/org/freedesktop/resolve1'
|
||||
).get_dbus_method(
|
||||
'RegisterService',
|
||||
'org.freedesktop.resolve1.Manager'
|
||||
)
|
||||
self.resolve1_unregister = self.dbus_bus.get_object(
|
||||
'org.freedesktop.resolve1',
|
||||
'/org/freedesktop/resolve1'
|
||||
).get_dbus_method(
|
||||
'UnregisterService',
|
||||
'org.freedesktop.resolve1.Manager'
|
||||
)
|
||||
|
||||
self.httpd = socketserver.TCPServer(("", self.port), DevkitHandler, bind_and_activate=False)
|
||||
print(f"serving at port: {self.port}")
|
||||
print(f"machine name: {self.name}")
|
||||
self.httpd.allow_reuse_address = True
|
||||
self.httpd.server_bind()
|
||||
self.httpd.server_activate()
|
||||
|
||||
def publish(self, recursed=False, silent=False):
|
||||
""" Publish ourselves on mdns as an available devkit device.
|
||||
"""
|
||||
# https://www.freedesktop.org/software/systemd/man/latest/org.freedesktop.resolve1.html
|
||||
|
||||
if not silent:
|
||||
print(f'RegisterService {self.name} {self.stype} {self.port}')
|
||||
self.unpublish(silent)
|
||||
|
||||
try:
|
||||
self.service_path = self.resolve1_register(
|
||||
# Passing '%H' should amount to the same thing
|
||||
# (is expanded based on specifiers, see https://www.man7.org/linux/man-pages/man5/systemd.dnssd.5.html)
|
||||
self.name,
|
||||
# 'name_template' .. what is this?
|
||||
# also referred to as 'service instance name' in the implementation
|
||||
# can't be an empty string, gets expanded with the same specifier rules as name,
|
||||
# gets random numbers appended to it for a new instance name in case of service collisions?
|
||||
self.name,
|
||||
self.stype,
|
||||
dbus.UInt16(int(self.port)),
|
||||
dbus.UInt16(10), # priority (see https://en.wikipedia.org/wiki/SRV_record)
|
||||
dbus.UInt16(0), # weight
|
||||
self.txt_records,
|
||||
)
|
||||
except dbus.exceptions.DBusException as e:
|
||||
# services will persist, it's bad if we didn't properly unregister, but we can recover this
|
||||
if not recursed and e.get_dbus_name() == 'org.freedesktop.resolve1.DnssdServiceExists':
|
||||
print('Service is already registered! Trying to recover')
|
||||
self.service_path = f'/org/freedesktop/resolve1/dnssd/{self.name}'
|
||||
self.unpublish()
|
||||
self.publish(True)
|
||||
else:
|
||||
raise e
|
||||
|
||||
def unpublish(self, silent=False):
|
||||
""" Remove publishing of ourselves as devkit device since we are quitting.
|
||||
"""
|
||||
if self.service_path:
|
||||
if not silent:
|
||||
print(f'UnregisterService {self.service_path}')
|
||||
self.resolve1_unregister(self.service_path)
|
||||
self.service_path = None
|
||||
|
||||
def force_publish(self, exit_event):
|
||||
while True:
|
||||
exit_event.wait(timeout=FORCE_PUBLISH_INTERVAL)
|
||||
if exit_event.is_set():
|
||||
break
|
||||
self.publish(False, True)
|
||||
|
||||
def on_signal_shutdown(self):
|
||||
print('Shutting down the httpd server')
|
||||
# This is blocking and needs to run in a thread, otherwise we'll deadlock
|
||||
threading.Thread(target=self.httpd.shutdown, daemon=True).start()
|
||||
|
||||
def run_server(self):
|
||||
""" Run server until keyboard interrupt or we are killed
|
||||
"""
|
||||
|
||||
thread = None
|
||||
exit_event = None
|
||||
global FORCE_PUBLISH_INTERVAL
|
||||
if 'ForcePublishInterval' in self.settings:
|
||||
FORCE_PUBLISH_INTERVAL = int(self.settings['ForcePublishInterval'])
|
||||
if FORCE_PUBLISH_INTERVAL != 0:
|
||||
exit_event = threading.Event()
|
||||
thread = threading.Thread(target=self.force_publish, args=[exit_event,], daemon=True).start()
|
||||
|
||||
set_exit_callback(self.on_signal_shutdown)
|
||||
try:
|
||||
self.httpd.serve_forever()
|
||||
except KeyboardInterrupt:
|
||||
pass
|
||||
set_exit_callback(None)
|
||||
|
||||
if thread:
|
||||
exit_event.set()
|
||||
thread.join()
|
||||
|
||||
self.httpd.server_close()
|
||||
print(f"done serving at port: {self.port}")
|
||||
|
||||
|
||||
if __name__ == "__main__":
|
||||
parser = argparse.ArgumentParser()
|
||||
parser.add_argument('--hooks', required=False, action='store', help='hooks directory')
|
||||
conf = parser.parse_args()
|
||||
|
||||
if conf.hooks is not None:
|
||||
DEVKIT_HOOKS_DIR = conf.hooks
|
||||
|
||||
service = DevkitService()
|
||||
|
||||
service.publish()
|
||||
service.run_server()
|
||||
service.unpublish()
|
||||
Reference in new issue
Block a user