#!/usr/local/cpanel/3rdparty/bin/perl # cpanel - scripts/sshcontrol Copyright 2022 cPanel, L.L.C. # All rights reserved. # copyright@cpanel.net http://cpanel.net # This code is subject to the cPanel license. Unauthorized copying is prohibited #---------------------------------------------------------------------- # This script controls a Net::OpenSSH session. # #It can authenticate a connection via password or SSH private key. # #It can connect via: # 1) root login # 2) user login, then su to root # 3) user login, then sudo to root # #Additionally, existing connections may persist and be reused. # #Once connected, it can: # 1) copy a file from/to local/remote # 2) AS ROOT: execute an arbitrary command on the remote server # #Inputs: # key/value are read from STDIN as a hash, # serialized with Cpanel::AdminBin::Serializer::Dump() # # # Required arguments: # authuser The user as which to identify during the SSH login. # # host The remote host. # # ctl "ssh" or (usually "scp", but anything defined will do) # # # Additional, optional arguments: # external_master ctl_pass parameter for Net::OpenSSH # Required if die_on_pid is not given. # # die_on_pid ID of a specific process for the SSH control process # to watch and self-destruct upon the end of that # process. Defaults to the script's process ID. # # port passed to Net::OpenSSH # # root_pass If authuser is "root", used to login; # otherwise, used to escalate privileges via su. # (Don’t submit if you mean to do sudo.) # # ssh_private_key_password passphrase for sshkey # # sshkey filename under $HOME/.ssh/ # # stay_alive boolean; whether to keep the SSH control # process around and pass back its PID and # path in the response # # wheel_pass Used to login as a non-root user. # If there is no root_pass, also used to escalate # privileges via sudo. # # # Additional arguments when ctl is "ssh": # cmd if ctl is "ssh", executed AS ROOT on the remote server # # # Additional arguments when ctl is "scp": # destfile if ctl ne "ssh", passed to Cpanel::SSHControl::scp # NOTE: If ".", value is read from the last node in the # path from srcfile # # direction if ctl ne "ssh", passed to Cpanel::SSHControl::scp # # srcfile if ctl ne "ssh", passed to Cpanel::SSHControl::scp # # #Output: # This speaks the "protocol" that Whostmgr/Remote/Parser.pm understands. # Note that this prints even error statuses to STDOUT. # #---------------------------------------------------------------------- package Script::SSHControl; use strict; use warnings; use IO::Pipe (); use Cpanel::AdminBin::Serializer (); use Cpanel::ForkAsync (); use Cpanel::SSHControl (); use Cpanel::Locale::Lazy 'lh'; use Cpanel::TimeHiRes (); use Cpanel::Exception (); use Cpanel::Sys::Setsid::Fast (); use Cpanel::BinCheck::Lite (); my $ONEDAY = (86400); my @REQUIRED_ARGS = qw( authuser host ctl ); Cpanel::BinCheck::Lite::check_argv(); my $debug = 0; __PACKAGE__->script() unless caller(); sub script { ## no critic qw(Subroutines::ProhibitExcessComplexity) my ($class) = @_; local $| = 1; local $ENV{'TERM'} = 'dumb'; my $self = {}; bless $self, $class; my $parsed_args = Cpanel::AdminBin::Serializer::SafeLoadFile( \*STDIN ); my @missing = grep { !length $parsed_args->{$_} } @REQUIRED_ARGS; if (@missing) { _leave( lh()->maketext( 'Specify the [list_and_quoted,_1] [numerate,_2,parameter,parameters].', \@missing, ( scalar @missing ) ) ); } my $escalation_method; if ( $parsed_args->{'root_escalation_method'} && $parsed_args->{'root_escalation_method'} eq 'none' ) { $escalation_method = 'none'; } else { # NB: Avoid length() here because we want to interpret # root_pass==0 as no root password. my $gave_root_pass = !!$parsed_args->{'root_pass'}; if ( length $parsed_args->{'wheel_pass'} ) { if ( $parsed_args->{'authuser'} eq 'root' ) { _leave( lh()->maketext( 'If “[_1]” is “[_2]”, you cannot specify “[_3]”.', qw(authuser root wheel_pass) ) ); } # Just a wheel/sudo password? Gotta be sudo. if ( !$gave_root_pass ) { $escalation_method = 'sudo'; } } # Root password + non-root = su if ($gave_root_pass) { if ( $parsed_args->{'authuser'} ne 'root' ) { $escalation_method = 'su'; } } } my $cmd = $parsed_args->{'cmd'}; my $ssh_key = $parsed_args->{'sshkey'} ? ( ( getpwuid($>) )[7] . "/.ssh/" . $parsed_args->{sshkey} ) : undef; my $ssh_username = $parsed_args->{'authuser'}; $parsed_args->{'die_on_pid'} ||= $$; my $auth_info = { 'ssh_username' => $ssh_username, 'ssh_ip' => $parsed_args->{'host'}, 'ssh_port' => $parsed_args->{'port'}, 'root_pass' => $parsed_args->{'root_pass'} || ( $ssh_username eq 'root' ? $parsed_args->{'wheel_pass'} : undef ), 'wheel_pass' => $parsed_args->{'wheel_pass'}, 'ssh_private_key_password' => $parsed_args->{'ssh_private_key_password'}, 'root_escalation_method' => $escalation_method, 'ssh_private_key' => $ssh_key, 'key_or_pass' => ( $ssh_key ? 1 : 0 ), }; my ( $status, $master_pid, $data ); my $ssh_obj; if ( $parsed_args->{'external_master'} ) { $0 = "sshcontrol parent: $auth_info->{'ssh_ip'} - external master"; $ssh_obj = Net::OpenSSH->new( 'child', external_master => 1, ctl_path => $parsed_args->{'external_master'} ); } else { $0 = "sshcontrol parent: $auth_info->{'ssh_ip'} - create connection"; } my $keep_ssh_master = $parsed_args->{'stay_alive'} ? 1 : 0; if ( $ssh_obj && $ssh_obj->check_master() ) { print "Reused existing connection.\n"; $0 = "sshcontrol parent: $auth_info->{'ssh_ip'} - reused external master"; } else { $0 = "sshcontrol parent: $auth_info->{'ssh_ip'} - creating connection"; if ( $parsed_args->{'external_master'} ) { $keep_ssh_master = 1; } ( $status, $master_pid, $data ) = $self->_create_ssh_master_connection( $auth_info, $parsed_args->{'die_on_pid'} ); if ( !$status ) { _ssh_error_to_whm_remote_error_and_leave($data); } $ssh_obj = Net::OpenSSH->new( 'child', external_master => 1, ctl_path => $data ); } if ( $ssh_obj->error() ) { my $ssh_error = $ssh_obj->error(); _ssh_error_to_whm_remote_error_and_leave($ssh_error); } $0 = "sshcontrol parent: $auth_info->{'ssh_ip'} - attaching to external"; my $ssh_control = Cpanel::SSHControl->new_from_external( 'debug' => 0, 'quiet' => 0, 'verbose' => 0, 'auth_info' => $auth_info, 'ssh' => $ssh_obj ); $0 = "sshcontrol parent: $auth_info->{'ssh_ip'} - attached to external"; $SIG{'TERM'} = sub { $ssh_control->disconnect(); }; if ( $parsed_args->{ctl} eq 'ssh' ) { $0 = "sshcontrol parent: $auth_info->{'ssh_ip'} - ssh"; my ( $status, $msg ) = $ssh_control->exec_as_root($cmd); if ( !$status ) { _ssh_error_to_whm_remote_error_and_leave($msg); } } elsif ( $parsed_args->{'ctl'} eq 'scp' ) { $0 = "sshcontrol parent: $auth_info->{'ssh_ip'} - scp"; my $destfile = $parsed_args->{'destfile'} eq '.' ? ( split( m{/+}, $parsed_args->{'srcfile'} ) )[-1] : $parsed_args->{'destfile'}; my ( $status, $msg ) = $ssh_control->scp( 'direction' => $parsed_args->{'direction'}, 'srcfile' => $parsed_args->{'srcfile'}, 'destfile' => $destfile, ); if ( !$status ) { _ssh_error_to_whm_remote_error_and_leave($msg); } elsif ( $parsed_args->{'direction'} eq 'download' && !-e $destfile ) { _ssh_error_to_whm_remote_error_and_leave("The destination file: “$destfile” failed to download."); } } else { die "Invalid “ctl”: [$parsed_args->{'ctl'}]"; } $self->_write_sshcontrol_info( $master_pid, $ssh_obj ); if ( !$keep_ssh_master || !$master_pid ) { $ssh_control->disconnect_master(); } undef $ssh_obj; return $self; } sub _write_sshcontrol_info { my ( $self, $master_pid, $ssh_obj ) = @_; if ($master_pid) { print "\n==sshcontrolpid=$master_pid==\n"; } print "\n==sshcontrolpath=" . $ssh_obj->get_ctl_path() . "==\n"; return; } sub _leave { my @args = @_; print @args; die "\n"; } sub _create_ssh_master_connection { my ( $self, $auth_info, $die_on_pid ) = @_; my $ssh_pipe = IO::Pipe->new(); my $child_result; my $sshcontrol_pid = Cpanel::ForkAsync::do_in_child( sub { $ssh_pipe->writer(); open( STDOUT, '>&=' . fileno($ssh_pipe) ); ## no critic qw(RequireCheckedOpen) if ($die_on_pid) { $0 = "sshcontrol child: $auth_info->{'ssh_ip'} - waiting on pid $die_on_pid"; } else { $0 = "sshcontrol child: $auth_info->{'ssh_ip'}"; } my $ssh_control = Cpanel::SSHControl->new( 'debug' => 0, 'quiet' => 0, 'verbose' => 0, 'auth_info' => $auth_info ); { local $@; eval { $ssh_control->connect() }; if ($@) { my $error_as_string = Cpanel::Exception::get_string_no_id($@); $error_as_string =~ s/\n/ /g; # This is going to the parent print "\nsshcontrol:0:" . $error_as_string . "\n"; exit(1); } } my $master_pid = $ssh_control->{'ssh'}->get_master_pid(); if ( !$master_pid ) { print "\nsshcontrol:0:failed to create sshcontrol master\n"; exit(1); } $SIG{'HUP'} = 'IGNORE'; $SIG{'ALRM'} = $SIG{'TERM'} = sub { $ssh_control->disconnect_master(); exit(0); }; # This is going to the parent print "\nsshcontrol:1:" . $ssh_control->{'ssh'}->get_ctl_path() . "\n"; Cpanel::Sys::Setsid::Fast::fast_setsid(); open( STDIN, '<', '/dev/null' ); ## no critic qw(RequireCheckedOpen) open( STDOUT, '>', '/dev/null' ); ## no critic qw(RequireCheckedOpen) open( STDERR, '>', '/dev/null' ); ## no critic qw(RequireCheckedOpen) alarm($ONEDAY); # If something gets killed off expire in one day while ( waitpid( $master_pid, 1 ) != -1 && kill( 0, $die_on_pid ) ) { Cpanel::TimeHiRes::sleep(0.1); } $ssh_control->disconnect_master(); waitpid( $master_pid, 0 ); exit(0); } ); $ssh_pipe->reader(); while ( readline($ssh_pipe) ) { if (m{^sshcontrol:}) { $child_result = $_; last; } print; } chomp($child_result); my ( $sshcontrol_tag, $status, $data ) = split( m{:}, $child_result, 3 ); return ( $status, $sshcontrol_pid, $data ); } my @SSH_ERRORS; sub _ssh_error_to_whm_remote_error_and_leave { my ($ssh_error) = @_; if ( !@SSH_ERRORS ) { @SSH_ERRORS = ( [ qr{master process exited unexpectedly:\s+([^:]+).*?No such file or directory} => 'RemoteSSHMissing' ], [ qr{No such file or directory} => 'RemoteSSHMissing' ], [ qr{normalize shell} => 'RemoteSSHMissing' ], [ qr{Name or service not known} => 'RemoteSSHHostNotFound' ], [ qr{Connection timed out} => 'RemoteSSHTimeout' ], [ qr{(scp failed)} => 'RemoteSCPError' ], [ qr{(^scp:.*)} => 'RemoteSCPError' ], [ qr{(Connection (?:to [^ ]+? )?closed)} => 'RemoteSSHConnectionFailed' ], [ qr{(No route to host)} => 'RemoteSSHConnectionFailed' ], [ qr{(Connection refused)} => 'RemoteSSHConnectionFailed' ], [ qr{(lost connection)} => 'RemoteSSHConnectionFailed' ], [ qr{(Failed to escalate to root)}i => 'RemoteSSHRootEscalationFailed' ], [ qr{(timeout)}i => 'RemoteSSHTimeout' ], [ qr{master process exited unexpectedly:\s+(.*)} => 'RemoteSSHAccessDenied' ], #A catch-all, must be last. [ qr<> => 'RemoteSSHAccessDenied' ], ); } for my $re_code (@SSH_ERRORS) { if ( $ssh_error =~ $re_code->[0] ) { my $raw_error = $1 || $ssh_error; $raw_error =~ s/=//g; $raw_error =~ s/\r*\n/ /g; _leave("\n==sshcontrol_error=$re_code->[1]=$raw_error==\n"); } } # If we did not parse the error, we need to show it # but only if we haven't already to avoid showing it twice print $ssh_error . "\n"; #This error is meant to look a bit more "professional" than #"Oops! We should never get here!". :) die "Misdirected execution flow!"; } 1;

RE-INVENTING THE TELEVISION NEWS BUSINESS*

A revolution in video storytelling

Creating entirely new & cost-effective production methods

From the world leaders in video production training and the creators of Character Driven Storytelling™

*and every other business that uses video

WHAT WE DO

Over the past 35 years, we have designed, built or restructured some of the most powerful news and journalism companies in the world.

We replace the traditional TV news ‘crew’ with one highly trained journalist, working alone with nothing but an iPhone.

No more TV news ‘crews’, no editors and no field producers.

This is television news done the way newspaper journalism is done – one reporter with their electronic pad and pencil.

In doing this, we can cut the cost of production by as much as 75% while increasing ratings and audience engagement.

In the place of conventional TV news ‘packages’ – ie, reporter stand up, interview, b-roll, man on the street, we marry great journalism with Netflix and Hollywood storytelling.

It’s a combination that works.

We have taken most of our clients to #1 in their respective markets.

And it’s not just for news. Any company, any profit, any NGO and anyone else who is online needs to tell their story in compelling yet cost-effective video. We can teach you to do that. Either in person or virtually.

EXAMPLES OF WHAT WE CAN TEACH YOUR STAFF TO PRODUCE

ITAY HOD

Itay Hod, MMJ with KPIX/CBS in San Francisco, took the 5-Day Intensive Video Storytelling Bootcamp in 2018.

Because he works alone, with only an iPhone, he was able to embed himself with a homeless family.

Here’s the story he produced in a one-day turn.

KIET DO

Kiet Do, an MMJ with KPIX/CBS in San Francisco, took the 5-Day Intensive Video Storytelling Bootcamp in 2021.

Here is a story he produced, all on his own, with only an iPhone and in a one-day turn.

TAYLOR SCHAUB

Taylor Schaub, an MMJ with Spectrum News 1 in LA, took the 5-Day Intensive Video Storytelling Bootcamp in 2023.

Here is a story he turned in only one day, using only an iPhone. It was the first video story he ever did and it was nominated for an Emmy.

THE BOOTCAMP

How do we convert stations and whole networks to working in this way?

Since 1988, we have run intensive 5-Day Video Storytelling Bootcamps

We have done these all over the world.

These are hands-on bootcamps, and participants learn an entirely new way of creating TV news stories.

-We shoot at a 3:1 ratio or lower, so turnaround times are fast.

-We go directly from camera to timelilne and edit – no written scripts. We work in the medium of pictures and sound.

-We are entirely character-driven.

-We are driven by pictures and real events.

-We are focused almost entirely on ’the viewer experience’.

Since 1988, more than 70,000 journalists around the world have taken our bootcamps, either in person on virtualy.

Case Studies

CBS News

We have started to work with CBS News, bringing our ideas of character-driven storytelling to one of the most successful and biggest networks in the United States. Since beginning to work with them ratings have climbed and more importantly, audience engagement is through the ceiling.

Learn More

New York Times Television

We started New York Times Television in 1990 and it was the first paper to be brought into the world of TV. It quickly became one of the most successful non-fiction production companies in the United States. The series and documentaries we produced won many awards including multiple Emmys.

Learn More

The BBC

We have been working with the BBC since the year 2000 helping to convert their national news network to our visual storytelling technique. Most recently we have trained teams from their sports, documentaries, and comedy divisions to make character-driven stories using only smartphones.

Learn More

Spectrum News

For the past five years we have worked with Spectrum News to introduce and train their journalists on visual, character driven storytelling using smartphones helping to create a different kind of local news for their network of 24-Hour News Stations across the United States.

Learn More

The United Nations

In 2006, we were approached by the United Nations. Rather than rely on news outlets, it would be much easier to train the field operatives to produce their own stories. We spent two years working with the UN, training more than 100 of their staff in bootcamps in Geneva and Nairobi.

Learn More

The Newark Star-Ledger

We trained 50 print reporters at the paper to shoot and tell their own stories, in conjunction with their print work. We built a TV newsroom in their existing print newsroom – you could not ask for a better set and they began to live stream their stories in conjunction with their print work.

Learn More

Mcgraw Hill

We spent two years with McGraw Hill, training more than 150 of their staffers, making them completely video literate. McGraw/Hill media properties we transit included Business Week, Aviation Week, (what was the name of the architecture magazine), and JD Power and Associates.

Learn More

Voice of America

In 1990, we were approached by The Voice of America, the official broadcasting agency for the United States Government. When we met with VOA, they were only a short wave radio broadcaster, but working with them, we took them into television, launching VOA-TV.

Learn More

Oyster Yachts

British based Oyster Yachts makes some of the finest yachts in the world. Like every other company, they had to find a way to feed the never-ending video demands of social media – sites like Instagram and TikTok. We trained the Oyster staff to tell their own stories, using only iPhones.

Learn More

Scottish Environmental Protection Agency

We were approached by SEPA, the Scottish Environmental Protection Agency because they had to continually find a way to ‘feed the media beast’. The result was that SEPA was able to tell their own stories, whenever they wanted, and at almost no additional cost.

Learn More

Michael on Media

Michael Rosenblum has been writing about the media since 1988. His work and ideas have appeared in The Guardian, The Huffington Post, Ilkeston Life and many other publications.

He has been blogging regularly for the past 35 years on this subject. Having taught media studies at Columbia University, NYU and now the University of Oxford, he is considered an expert on this subject.

Continue reading this post or look back at previous posts.

Do You Have Questions About Learning Video Skills?

If you would like to know more about our courses contact us and one of our training advisors will be happy to call you.

Your IP : 216.73.216.209

RE-INVENTING THE TELEVISION NEWS BUSINESS*

A revolution in video storytelling

Creating entirely new & cost-effective production methods

From the world leaders in video production training and the creators of Character Driven Storytelling™

*and every other business that uses video

WHAT WE DO

Over the past 35 years, we have designed, built or restructured some of the most powerful news and journalism companies in the world.

We replace the traditional TV news ‘crew’ with one highly trained journalist, working alone with nothing but an iPhone.

No more TV news ‘crews’, no editors and no field producers.

This is television news done the way newspaper journalism is done – one reporter with their electronic pad and pencil.

In doing this, we can cut the cost of production by as much as 75% while increasing ratings and audience engagement.

In the place of conventional TV news ‘packages’ – ie, reporter stand up, interview, b-roll, man on the street, we marry great journalism with Netflix and Hollywood storytelling.

It’s a combination that works.

We have taken most of our clients to #1 in their respective markets.

And it’s not just for news. Any company, any profit, any NGO and anyone else who is online needs to tell their story in compelling yet cost-effective video. We can teach you to do that. Either in person or virtually.

EXAMPLES OF WHAT WE CAN TEACH YOUR STAFF TO PRODUCE

ITAY HOD

Itay Hod, MMJ with KPIX/CBS in San Francisco, took the 5-Day Intensive Video Storytelling Bootcamp in 2018.

Because he works alone, with only an iPhone, he was able to embed himself with a homeless family.

Here’s the story he produced in a one-day turn.

KIET DO

Kiet Do, an MMJ with KPIX/CBS in San Francisco, took the 5-Day Intensive Video Storytelling Bootcamp in 2021.

Here is a story he produced, all on his own, with only an iPhone and in a one-day turn.

TAYLOR SCHAUB

Taylor Schaub, an MMJ with Spectrum News 1 in LA, took the 5-Day Intensive Video Storytelling Bootcamp in 2023.

Here is a story he turned in only one day, using only an iPhone. It was the first video story he ever did and it was nominated for an Emmy.

THE BOOTCAMP

How do we convert stations and whole networks to working in this way?

Since 1988, we have run intensive 5-Day Video Storytelling Bootcamps

We have done these all over the world.

These are hands-on bootcamps, and participants learn an entirely new way of creating TV news stories.

-We shoot at a 3:1 ratio or lower, so turnaround times are fast.

-We go directly from camera to timelilne and edit – no written scripts. We work in the medium of pictures and sound.

-We are entirely character-driven.

-We are driven by pictures and real events.

-We are focused almost entirely on ’the viewer experience’.

Since 1988, more than 70,000 journalists around the world have taken our bootcamps, either in person on virtualy.

Case Studies

CBS News

New York Times Television

The BBC

Spectrum News

The United Nations

The Newark Star-Ledger

Mcgraw Hill

Voice of America

Oyster Yachts

Scottish Environmental Protection Agency

Michael on Media