1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 | #!/usr/bin/env python3 """ Script to test that the system PXE-booted, if run in EFI mode Copyright (c) 2016 Canonical Ltd. Authors Rod Smith <rod.smith@canonical.com> This program is free software: you can redistribute it and/or modify it under the terms of the GNU General Public License version 3, as published by the Free Software Foundation. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program. If not, see <http://www.gnu.org/licenses/>. The purpose of this script is to identify whether an EFI-based system booted from the network (test passes) or from a local disk (test fails). Usage: efi-pxeboot """ import os import shlex import shutil import sys from subprocess import Popen, PIPE def discover_data(): """Extract boot entry and boot order information. :returns: boot_entries, boot_order, boot_current """ command = "efibootmgr -v" bootinfo_bytes = (Popen(shlex.split(command), stdout=PIPE) .communicate()[0]) bootinfo = (bootinfo_bytes.decode(encoding="utf-8", errors="ignore") .splitlines()) boot_entries = {} boot_order = [] boot_current = "" if len(bootinfo) > 1: for s in bootinfo: if "BootOrder" in s: try: boot_order = s.split(":")[1].replace(" ", "").split(",") except IndexError: pass elif "BootCurrent" in s: try: boot_current = s.split(":")[1].strip() except IndexError: pass else: # On Boot#### lines, #### is characters 4-8.... hex_value = s[4:8] # ....and the description starts at character 10 name = s[10:] try: # In normal efibootmgr output, only Boot#### entries # have characters 4-8 that can be interpreted as # hex values, so this will harmlessly error out on all # but Boot#### entries.... int(hex_value, 16) boot_entries[hex_value] = name except ValueError: pass return boot_entries, boot_order, boot_current def is_pxe_booted(boot_entries, boot_order, boot_current): retval = 0 desc = boot_entries[boot_current] print("The current boot item is {}".format(boot_current)) print("The first BootOrder item is {}".format(boot_order[0])) print("The description of Boot{} is '{}'".format(boot_current, desc)) if boot_current != boot_order[0]: # If the BootCurrent entry isn't the same as the first of the # BootOrder entries, then something is causing the first boot entry # to fail or be bypassed. This could be a Secure Boot failure, manual # intervention, a bad boot entry, etc. This is not necessarily a # problem, but warn of it anyhow.... desc2 = boot_entries[boot_order[0]] print("The description of Boot{} is '{}'".format(boot_order[0], desc2)) print("WARNING: The system is booted using Boot{}, but the first". format(boot_current)) print("boot item is Boot{}!".format(boot_order[0])) if "Network" in desc or "PXE" in desc or "NIC" in desc \ or "Ethernet" in desc or "IP4" in desc or "IP6" in desc: # These strings are present in network-boot descriptions. print("The system seems to have PXE-booted; all OK.") elif "ubuntu" in desc or "grub" in desc or "shim" in desc or "rEFInd" \ or "refind_" in desc: # This string indicates a boot directly from the normal Ubuntu GRUB # or rEFInd installation on the hard disk. print("FAIL: The system has booted directly from the hard disk!") retval = 1 elif "SATA" in desc or "Sata" in desc or "Hard Drive" in desc: # These strings indicate booting with a "generic" disk entry (one # that uses the fallback filename, EFI/BOOT/bootx64.efi or similar). print("The system seems to have booted from a disk with the fallback " "boot loader!") retval = 1 else: # Probably a rare description. Call it an error so we can flag it and # improve this script. print("Unable to identify boot path.") retval = 1 return retval def main(): """Check to see if the system PXE-booted.""" if shutil.which("efibootmgr") is None: print("The efibootmgr utility is not installed; exiting!") return(4) if not os.geteuid() == 0: print("This program must be run as root (or via sudo); exiting!") return(4) retval = 0 boot_entries, boot_order, boot_current = discover_data() if boot_entries == {}: print("No EFI boot entries are available. This may indicate a " "firmware problem.") retval = 2 if boot_order == []: print("The EFI BootOrder variable is not available. This may " "indicate a firmware") print("problem.") retval = 3 if (retval == 0): retval = is_pxe_booted(boot_entries, boot_order, boot_current) return(retval) if __name__ == '__main__': sys.exit(main())
|
