From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from firstgate.proxmox.com (firstgate.proxmox.com [IPv6:2a01:7e0:0:424::9]) by lore.proxmox.com (Postfix) with ESMTPS id 80F9E1FF17A for ; Tue, 11 Nov 2025 09:29:08 +0100 (CET) Received: from firstgate.proxmox.com (localhost [127.0.0.1]) by firstgate.proxmox.com (Proxmox) with ESMTP id B02CDE29; Tue, 11 Nov 2025 09:29:54 +0100 (CET) From: =?UTF-8?q?Fabian=20Gr=C3=BCnbichler?= To: pdm-devel@lists.proxmox.com Date: Tue, 11 Nov 2025 09:29:19 +0100 Message-ID: <20251111082938.221008-13-f.gruenbichler@proxmox.com> X-Mailer: git-send-email 2.47.3 In-Reply-To: <20251111082938.221008-1-f.gruenbichler@proxmox.com> References: <20251111082938.221008-1-f.gruenbichler@proxmox.com> MIME-Version: 1.0 X-Bm-Milter-Handled: 55990f41-d878-4baa-be0a-ee34c49e34d2 X-Bm-Transport-Timestamp: 1762849768479 X-SPAM-LEVEL: Spam detection results: 0 AWL 0.047 Adjusted score from AWL reputation of From: address BAYES_00 -1.9 Bayes spam probability is 0 to 1% DMARC_MISSING 0.1 Missing DMARC policy KAM_DMARC_STATUS 0.01 Test Rule for DKIM or SPF Failure with Strict Alignment SPF_HELO_NONE 0.001 SPF: HELO does not publish an SPF Record SPF_PASS -0.001 SPF: sender matches SPF record Subject: [pdm-devel] [PATCH proxmox-backup 3/4] api: node shell: allow access for tokens X-BeenThere: pdm-devel@lists.proxmox.com X-Mailman-Version: 2.1.29 Precedence: list List-Id: Proxmox Datacenter Manager development discussion List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: Proxmox Datacenter Manager development discussion Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Errors-To: pdm-devel-bounces@lists.proxmox.com Sender: "pdm-devel" bmVlZGVkIGZvciBQRE0sIGJ1dCBiYWNrd2FyZHMgY29tcGF0aWJsZSBmb3IgZXhpc3RpbmcgdXNl ci1iYXNlZCB1c2FnZS4KClNpZ25lZC1vZmYtYnk6IEZhYmlhbiBHcsO8bmJpY2hsZXIgPGYuZ3J1 ZW5iaWNobGVyQHByb3htb3guY29tPgotLS0KCk5vdGVzOgogICAgbmV3IGluIHYxLCByZXF1aXJl cyBidW1wZWQgdGVybXByb3h5Cgogc3JjL2FwaTIvbm9kZS9tb2QucnMgfCAyOCArKysrKysrKy0t LS0tLS0tLS0tLS0tLS0tLS0tCiBzcmMvYXV0aC5ycyAgICAgICAgICB8ICA1ICsrLS0tCiBzcmMv dG9vbHMvdGlja2V0LnJzICB8ICA2ICsrKy0tLQogMyBmaWxlcyBjaGFuZ2VkLCAxMyBpbnNlcnRp b25zKCspLCAyNiBkZWxldGlvbnMoLSkKCmRpZmYgLS1naXQgYS9zcmMvYXBpMi9ub2RlL21vZC5y cyBiL3NyYy9hcGkyL25vZGUvbW9kLnJzCmluZGV4IDcyZGY5ZWE3Mi4uYTVlYzkwM2E3IDEwMDY0 NAotLS0gYS9zcmMvYXBpMi9ub2RlL21vZC5ycworKysgYi9zcmMvYXBpMi9ub2RlL21vZC5ycwpA QCAtOTgsNyArOTgsNyBAQCBwdWIgY29uc3QgU0hFTExfQ01EX1NDSEVNQTogU2NoZW1hID0gU3Ry aW5nU2NoZW1hOjpuZXcoIlRoZSBjb21tYW5kIHRvIHJ1bi4iKQogKV0KIC8vLyBDYWxsIHRlcm1w cm94eSBhbmQgcmV0dXJuIHNoZWxsIHRpY2tldAogYXN5bmMgZm4gdGVybXByb3h5KGNtZDogT3B0 aW9uPFN0cmluZz4sIHJwY2VudjogJm11dCBkeW4gUnBjRW52aXJvbm1lbnQpIC0+IFJlc3VsdDxW YWx1ZSwgRXJyb3I+IHsKLSAgICBsZXQgcm9vdF91c2VyID0gVXNlcmlkOjpyb290X3VzZXJpZCgp OworICAgIGxldCByb290X2F1dGhfaWQgPSBBdXRoaWQ6OnJvb3RfYXV0aF9pZCgpOwogCiAgICAg Ly8gaW50ZW50aW9uYWxseSB1c2VyIG9ubHkgZm9yIG5vdwogICAgIGxldCBhdXRoX2lkOiBBdXRo aWQgPSBycGNlbnYKQEAgLTEwNiwxMiArMTA2LDYgQEAgYXN5bmMgZm4gdGVybXByb3h5KGNtZDog T3B0aW9uPFN0cmluZz4sIHJwY2VudjogJm11dCBkeW4gUnBjRW52aXJvbm1lbnQpIC0+IFJlc3UK ICAgICAgICAgLm9rX29yX2Vsc2UofHwgZm9ybWF0X2VyciEoIm5vIGF1dGhpZCBhdmFpbGFibGUi KSk/CiAgICAgICAgIC5wYXJzZSgpPzsKIAotICAgIGlmIGF1dGhfaWQuaXNfdG9rZW4oKSB7Ci0g ICAgICAgIGJhaWwhKCJBUEkgdG9rZW5zIGNhbm5vdCBhY2Nlc3MgdGhpcyBBUEkgZW5kcG9pbnQi KTsKLSAgICB9Ci0KLSAgICBsZXQgdXNlcmlkID0gYXV0aF9pZC51c2VyKCk7Ci0KICAgICBsZXQg cGF0aCA9ICIvc3lzdGVtIjsKIAogICAgIC8vIHVzZSBwb3J0IDAgYW5kIGxldCB0aGUga2VybmVs IGRlY2lkZSB3aGljaCBwb3J0IGlzIGZyZWUKQEAgLTEyMCwyMSArMTE0LDIxIEBAIGFzeW5jIGZu IHRlcm1wcm94eShjbWQ6IE9wdGlvbjxTdHJpbmc+LCBycGNlbnY6ICZtdXQgZHluIFJwY0Vudmly b25tZW50KSAtPiBSZXN1CiAKICAgICBsZXQgdGlja2V0ID0gVGlja2V0OjpuZXcoY3JhdGU6OmF1 dGg6OlRFUk1fUFJFRklYLCAmRW1wdHkpPy5zaWduKAogICAgICAgICBwcml2YXRlX2F1dGhfa2V5 cmluZygpLAotICAgICAgICBTb21lKCZ0b29sczo6dGlja2V0Ojp0ZXJtX2FhZCh1c2VyaWQsIHBh dGgsIHBvcnQpKSwKKyAgICAgICAgU29tZSgmdG9vbHM6OnRpY2tldDo6dGVybV9hYWQoJmF1dGhf aWQsIHBhdGgsIHBvcnQpKSwKICAgICApPzsKIAogICAgIGxldCBtdXQgY29tbWFuZCA9IFZlYzo6 bmV3KCk7CiAgICAgbWF0Y2ggY21kLmFzX2RlcmVmKCkgewogICAgICAgICBTb21lKCJsb2dpbiIp IHwgTm9uZSA9PiB7CiAgICAgICAgICAgICBjb21tYW5kLnB1c2goImxvZ2luIik7Ci0gICAgICAg ICAgICBpZiB1c2VyaWQgPT0gcm9vdF91c2VyIHsKKyAgICAgICAgICAgIGlmIGF1dGhfaWQgPT0g KnJvb3RfYXV0aF9pZCB7CiAgICAgICAgICAgICAgICAgY29tbWFuZC5wdXNoKCItZiIpOwogICAg ICAgICAgICAgICAgIGNvbW1hbmQucHVzaCgicm9vdCIpOwogICAgICAgICAgICAgfQogICAgICAg ICB9CiAgICAgICAgIFNvbWUoInVwZ3JhZGUiKSA9PiB7Ci0gICAgICAgICAgICBpZiB1c2VyaWQg IT0gcm9vdF91c2VyIHsKLSAgICAgICAgICAgICAgICBiYWlsISgib25seSB7cm9vdF91c2VyfSBj YW4gdXBncmFkZSIpOworICAgICAgICAgICAgaWYgYXV0aF9pZCAhPSAqcm9vdF9hdXRoX2lkIHsK KyAgICAgICAgICAgICAgICBiYWlsISgib25seSB7cm9vdF9hdXRoX2lkfSBjYW4gdXBncmFkZSIp OwogICAgICAgICAgICAgfQogICAgICAgICAgICAgLy8gVE9ETzogYWRkIG5pY2VyL3NhZmVyIHdy YXBwZXIgbGlrZSBpbiBQVkUgaW5zdGVhZAogICAgICAgICAgICAgY29tbWFuZC5wdXNoKCJzaCIp OwpAQCAtMTQ0LDcgKzEzOCw2IEBAIGFzeW5jIGZuIHRlcm1wcm94eShjbWQ6IE9wdGlvbjxTdHJp bmc+LCBycGNlbnY6ICZtdXQgZHluIFJwY0Vudmlyb25tZW50KSAtPiBSZXN1CiAgICAgICAgIF8g PT4gYmFpbCEoImludmFsaWQgY29tbWFuZCIpLAogICAgIH07CiAKLSAgICBsZXQgdXNlcm5hbWUg PSB1c2VyaWQubmFtZSgpLnRvX293bmVkKCk7CiAgICAgbGV0IHVwaWQgPSBXb3JrZXJUYXNrOjpz cGF3bigKICAgICAgICAgInRlcm1wcm94eSIsCiAgICAgICAgIE5vbmUsCkBAIC0xNjYsNiArMTU5 LDcgQEAgYXN5bmMgZm4gdGVybXByb3h5KGNtZDogT3B0aW9uPFN0cmluZz4sIHJwY2VudjogJm11 dCBkeW4gUnBjRW52aXJvbm1lbnQpIC0+IFJlc3UKICAgICAgICAgICAgICAgICAiLS1hdXRocG9y dCIsCiAgICAgICAgICAgICAgICAgIjgyIiwKICAgICAgICAgICAgICAgICAiLS1wb3J0LWFzLWZk IiwKKyAgICAgICAgICAgICAgICAiLS12bmN0aWNrZXQtZW5kcG9pbnQiLAogICAgICAgICAgICAg ICAgICItLSIsCiAgICAgICAgICAgICBdKTsKICAgICAgICAgICAgIGFyZ3VtZW50cy5leHRlbmRf ZnJvbV9zbGljZSgmY29tbWFuZCk7CkBAIC0yMzQsOSArMjI4LDggQEAgYXN5bmMgZm4gdGVybXBy b3h5KGNtZDogT3B0aW9uPFN0cmluZz4sIHJwY2VudjogJm11dCBkeW4gUnBjRW52aXJvbm1lbnQp IC0+IFJlc3UKICAgICAgICAgfSwKICAgICApPzsKIAotICAgIC8vIEZJWE1FOiBXZSdyZSByZXR1 cm5pbmcgdGhlIHVzZXIgTkFNRSBvbmx5PwogICAgIE9rKGpzb24hKHsKLSAgICAgICAgInVzZXIi OiB1c2VybmFtZSwKKyAgICAgICAgInVzZXIiOiBhdXRoX2lkLAogICAgICAgICAidGlja2V0Ijog dGlja2V0LAogICAgICAgICAicG9ydCI6IHBvcnQsCiAgICAgICAgICJ1cGlkIjogdXBpZCwKQEAg LTI3OCwxMSArMjcxLDYgQEAgZm4gdXBncmFkZV90b193ZWJzb2NrZXQoCiAgICAgICAgICAgICAu b2tfb3JfZWxzZSh8fCBmb3JtYXRfZXJyISgibm8gYXV0aGlkIGF2YWlsYWJsZSIpKT8KICAgICAg ICAgICAgIC5wYXJzZSgpPzsKIAotICAgICAgICBpZiBhdXRoX2lkLmlzX3Rva2VuKCkgewotICAg ICAgICAgICAgYmFpbCEoIkFQSSB0b2tlbnMgY2Fubm90IGFjY2VzcyB0aGlzIEFQSSBlbmRwb2lu dCIpOwotICAgICAgICB9Ci0KLSAgICAgICAgbGV0IHVzZXJpZCA9IGF1dGhfaWQudXNlcigpOwog ICAgICAgICBsZXQgdGlja2V0ID0gcGJzX3Rvb2xzOjpqc29uOjpyZXF1aXJlZF9zdHJpbmdfcGFy YW0oJnBhcmFtLCAidm5jdGlja2V0Iik/OwogICAgICAgICBsZXQgcG9ydDogdTE2ID0gcGJzX3Rv b2xzOjpqc29uOjpyZXF1aXJlZF9pbnRlZ2VyX3BhcmFtKCZwYXJhbSwgInBvcnQiKT8gYXMgdTE2 OwogCkBAIC0yOTAsNyArMjc4LDcgQEAgZm4gdXBncmFkZV90b193ZWJzb2NrZXQoCiAgICAgICAg IFRpY2tldDo6PEVtcHR5Pjo6cGFyc2UodGlja2V0KT8udmVyaWZ5KAogICAgICAgICAgICAgcHVi bGljX2F1dGhfa2V5cmluZygpLAogICAgICAgICAgICAgY3JhdGU6OmF1dGg6OlRFUk1fUFJFRklY LAotICAgICAgICAgICAgU29tZSgmdG9vbHM6OnRpY2tldDo6dGVybV9hYWQodXNlcmlkLCAiL3N5 c3RlbSIsIHBvcnQpKSwKKyAgICAgICAgICAgIFNvbWUoJnRvb2xzOjp0aWNrZXQ6OnRlcm1fYWFk KCZhdXRoX2lkLCAiL3N5c3RlbSIsIHBvcnQpKSwKICAgICAgICAgKT87CiAKICAgICAgICAgbGV0 ICh3cywgcmVzcG9uc2UpID0gV2ViU29ja2V0OjpuZXcocGFydHMuaGVhZGVycy5jbG9uZSgpKT87 CmRpZmYgLS1naXQgYS9zcmMvYXV0aC5ycyBiL3NyYy9hdXRoLnJzCmluZGV4IGFjMjRjOGNhYy4u YTkzMGQ4Y2Q5IDEwMDY0NAotLS0gYS9zcmMvYXV0aC5ycworKysgYi9zcmMvYXV0aC5ycwpAQCAt NDQ5LDcgKzQ0OSw3IEBAIGltcGwgcHJveG1veF9hdXRoX2FwaTo6YXBpOjpBdXRoQ29udGV4dCBm b3IgUGJzQXV0aENvbnRleHQgewogICAgIC8vLyBDaGVjayBwYXRoIGJhc2VkIHRpY2tldHMuIChV c2VkIGZvciB0ZXJtaW5hbCB0aWNrZXRzKS4KICAgICBmbiBjaGVja19wYXRoX3RpY2tldCgKICAg ICAgICAgJnNlbGYsCi0gICAgICAgIHVzZXJpZDogJlVzZXJpZCwKKyAgICAgICAgYXV0aF9pZDog JkF1dGhpZCwKICAgICAgICAgcGFzc3dvcmQ6ICZzdHIsCiAgICAgICAgIHBhdGg6IFN0cmluZywK ICAgICAgICAgcHJpdnM6IFN0cmluZywKQEAgLTQ2MywxMSArNDYzLDEwIEBAIGltcGwgcHJveG1v eF9hdXRoX2FwaTo6YXBpOjpBdXRoQ29udGV4dCBmb3IgUGJzQXV0aENvbnRleHQgewogICAgICAg ICAgICAgdGlja2V0LnZlcmlmeSgKICAgICAgICAgICAgICAgICBzZWxmLmtleXJpbmcsCiAgICAg ICAgICAgICAgICAgVEVSTV9QUkVGSVgsCi0gICAgICAgICAgICAgICAgU29tZSgmY3JhdGU6OnRv b2xzOjp0aWNrZXQ6OnRlcm1fYWFkKHVzZXJpZCwgJnBhdGgsIHBvcnQpKSwKKyAgICAgICAgICAg ICAgICBTb21lKCZjcmF0ZTo6dG9vbHM6OnRpY2tldDo6dGVybV9hYWQoYXV0aF9pZCwgJnBhdGgs IHBvcnQpKSwKICAgICAgICAgICAgICkKICAgICAgICAgfSkgewogICAgICAgICAgICAgbGV0IHVz ZXJfaW5mbyA9IHBic19jb25maWc6OkNhY2hlZFVzZXJJbmZvOjpuZXcoKT87Ci0gICAgICAgICAg ICBsZXQgYXV0aF9pZCA9IEF1dGhpZDo6ZnJvbSh1c2VyaWQuY2xvbmUoKSk7CiAgICAgICAgICAg ICBmb3IgKG5hbWUsIHByaXZpbGVnZSkgaW4gcGJzX2FwaV90eXBlczo6UFJJVklMRUdFUyB7CiAg ICAgICAgICAgICAgICAgaWYgKm5hbWUgPT0gcHJpdnMgewogICAgICAgICAgICAgICAgICAgICBs ZXQgbXV0IHBhdGhfdmVjID0gVmVjOjpuZXcoKTsKZGlmZiAtLWdpdCBhL3NyYy90b29scy90aWNr ZXQucnMgYi9zcmMvdG9vbHMvdGlja2V0LnJzCmluZGV4IDhkZDNjOTY4YS4uZjA4NmQyZDgyIDEw MDY0NAotLS0gYS9zcmMvdG9vbHMvdGlja2V0LnJzCisrKyBiL3NyYy90b29scy90aWNrZXQucnMK QEAgLTEsNSArMSw1IEBACi11c2UgcGJzX2FwaV90eXBlczo6VXNlcmlkOwordXNlIHBic19hcGlf dHlwZXM6OkF1dGhpZDsKIAotcHViIGZuIHRlcm1fYWFkKHVzZXJpZDogJlVzZXJpZCwgcGF0aDog JnN0ciwgcG9ydDogdTE2KSAtPiBTdHJpbmcgewotICAgIGZvcm1hdCEoInt1c2VyaWR9e3BhdGh9 e3BvcnR9IikKK3B1YiBmbiB0ZXJtX2FhZChhdXRoX2lkOiAmQXV0aGlkLCBwYXRoOiAmc3RyLCBw b3J0OiB1MTYpIC0+IFN0cmluZyB7CisgICAgZm9ybWF0ISgie2F1dGhfaWR9e3BhdGh9e3BvcnR9 IikKIH0KLS0gCjIuNDcuMwoKCgpfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fXwpwZG0tZGV2ZWwgbWFpbGluZyBsaXN0CnBkbS1kZXZlbEBsaXN0cy5wcm94bW94 LmNvbQpodHRwczovL2xpc3RzLnByb3htb3guY29tL2NnaS1iaW4vbWFpbG1hbi9saXN0aW5mby9w ZG0tZGV2ZWwK