Moving munki_preflight back to script

Differential Revision: D51272570

fbshipit-source-id: 57dcdddee5663c2f63afbe2ab210a69254ee19e8

itchef/cookbooks/cpe_munki/files/default/munki_preflight.py

@@ -0,0 +1,87 @@
+#!/usr/local/munki/Python.framework/Versions/Current/bin/python3
+# (c) Meta Platforms, Inc. and affiliates. Confidential and proprietary.
+
+"""Munki preflight to configure Munki run settings."""
+
+import os
+import subprocess
+import sys
+import time
+from pathlib import Path
+
+MUNKI_PAUSE_TRIGGER = "/Users/Shared/.pause_munki"
+MUNKI_PAUSE_RECEIPT = "/Library/CPE/tags/.munki_has_been_paused"
+
+
+def check_munki_pause() -> None:
+    # If the trigger is present, pause Munki for 24 hours
+    if os.path.isfile(MUNKI_PAUSE_TRIGGER):
+        # pyre-fixme[16]: `stat_result` has no attribute `st_birthtime`.
+        creation_time = os.stat(MUNKI_PAUSE_TRIGGER).st_birthtime
+        if int(time.time()) - int(creation_time) >= 86400:
+            # If the pause file is older than 24 hours, kill it
+            try:
+                os.unlink(MUNKI_PAUSE_TRIGGER)
+                print("Munki pause file is older than 24 hours, removing...")
+                # Leave a receipt in the tags folder indicating pause was used
+                Path(MUNKI_PAUSE_RECEIPT).touch()
+            except Exception as e:
+                print(f"Unable to unpause Munki: {e}")
+        else:
+            # Unload the force helper launchd
+            unload_cmd = [
+                "/bin/launchctl",
+                "unload",
+                "/Library/LaunchDaemons/com.googlecode.munki.logouthelper" + ".plist",
+            ]
+            results = subprocess.run(unload_cmd, capture_output=True)
+            if results.returncode != 0:
+                print(f"Unable to unload logouthelper: {results.stderr}")
+            print("MSC is paused. Check the f-Menu to unpause.")
+            sys.exit(1)
+
+    # Clean up the pause receipt after 3 days
+    if os.path.isfile(MUNKI_PAUSE_RECEIPT):
+        creation_time = os.stat(MUNKI_PAUSE_RECEIPT).st_birthtime
+        if int(time.time()) - int(creation_time) >= 259200:
+            # If the pause receipt is older than 3 days, kill it
+            try:
+                os.unlink(MUNKI_PAUSE_RECEIPT)
+                print("Cleaning up old pause receipt...")
+            except Exception as e:
+                print(f"Unable to clear pause receipt: {e}")
+
+
+def get_airport_info() -> str:
+    """Get the SSID of the connected WiFi network."""
+    cmd = [
+        "/System/Library/PrivateFrameworks/Apple80211.framework/Versions/A/Resources/airport",  # NOQA
+        "-I",
+    ]
+    proc = subprocess.run(cmd, stdout=subprocess.PIPE)
+    output = proc.stdout.decode("utf-8").split("\n")
+    ssid_line: str = list(filter(lambda x: x.strip().startswith("SSID:"), output))
+    return ssid_line[0].replace("   SSID:", "").strip()
+
+
+def exit_if_on_wifi_shuttle() -> None:
+    wireless_ssid = get_airport_info()
+    if wireless_ssid == "fbshuttle" or wireless_ssid == 'RIDEwifi':
+        print("MSC will not run on shuttle wifi.")
+        sys.exit(1)
+
+
+def main() -> None:
+    print("Gathering run data...")
+    # Verify munki pause
+    check_munki_pause()
+
+    runtype: str = sys.argv[1]
+    if runtype == "auto":
+        exit_if_on_wifi_shuttle()
+
+    print("Preflight completed successfully.")
+
+
+if __name__ == "__main__":
+    main()

itchef/cookbooks/cpe_munki/recipes/default.rb

@@ -21,3 +21,12 @@
 cpe_munki_local 'Manage Local Munki Manifest'
 cpe_munki_defaults_config 'Manage Defaults Preferences'
 cpe_munki_config 'Manage Munki Settings'
+
+return unless node.gk?('cpe') # rubocop:disable Chef/Meta/AvoidGKUse
+cookbook_file 'munki_preflight.py' do
+  mode '0755'
+  owner node.root_user
+  group node.root_group
+  path '/usr/local/munki/preflight'
+  action :create
+end