3 Commits

Include renames

Author	SHA1	Message	Date
Christian Manivong	38391891ec	style: ruff format and the lint rules of the driver standard ... Mechanical: ruff format, and ruff check --fix with the rule set every NAPALM driver uses (E, F, I, UP, B at line length 100, Python 3.10). What ruff cannot fix comes in the next commit.	2026-10-22 19:09:42 +02:00
christianmanivong	350e3a6d6e	fix: adapt to napalm-device-types 4.7 ... napalm-device-types 4.7 changed three things this driver depends on: - parse_dnf_security needs the "__DNF_RC=<status>" line that DNF_SECURITY_COMMAND prints and raises ValueError without it or when dnf failed. The yum security query had no such line, so listing updates on any yum host raised. _YUM_SECURITY_COMMAND now prints the marker the same way ("{ ...; echo __DNF_RC=$?; } | cat"). _rpm_security_names checks __DNF_RC itself and turns a failed query, or output cut short before the marker, into None (security unknown) rather than "no advisories" or an exception. - OSDriver.get_users was renamed to get_os_users, since NAPALM's own get_users has another shape. LinuxDriver.get_users is now get_os_users with the same return value. - run_on_transport reads an exec channel to EOF after its exit status arrives; the tests' fake channels gain recv/recv_stderr for that. Require napalm-device-types>=4.7.1 and bump the version to 0.6.0.	2026-10-13 06:25:17 +00:00
Christian Manivong	cf8ee38a90	fix: run privileged commands on the exec channel, never typed into the shell ... _sudo typed `echo '<password>' | sudo -S -p "" <command>` into netmiko's interactive shell. bash kept it in its history, so every poll wrote the sudo password into the login user's ~/.bash_history, and while the command ran it was in the process list for every local user (NetOrk/netork#1039). _sudo, _sudo_status and _run_privileged with a password now run on an exec channel like run_command(privileged=True): the password reaches sudo -S on stdin, there is no PTY to echo it, and the script starts with `exec </dev/null` so a non-prompting sudo leaves it unread. The whole command runs as root in one sh -c - before, only the part up to the first `;`, `&&` or `|` did. The exit status comes from the channel. The interactive session switches its history off before its first command. get_vpn_tunnels with a password reads `wg show all dump` from the exec channel instead of a temp file that held the private keys.	2026-10-12 22:51:07 +02:00