`nx_aw_sftp.nx` source

↩ module page · 194 lines · 10509 B
1// nx_aw_sftp.nx -- the SOVEREIGN file WRITE rung (operator: "nishi ecosystem from the hardware rung up, each
2// rung; build if we are missing capabilities"). nx_aw_push/nx_put stream bytes over our own SSH but land them
3// with a remote `cat > file && mv` shell -- a coreutils dependency on the deploy path. This organ closes that
4// rung properly: it writes the file over the SSH **sftp subsystem** (SSH_FXP_OPEN/WRITE/CLOSE), so NOTHING on
5// the remote side is a shell -- the sftp-server is a protocol endpoint, not /bin/sh. No cat/mv/tee/dd, no
6// nascmd/.src/.dst spec files, argv-driven. Built on nx_ssh_lib's channel primitives (ssh_enc_send/recv,
7// ssh_put_*). Deploy-time only: a failed write leaves the running site untouched, so it cannot add flakiness.
8//   nx_aw_sftp <local-src-path> <remote-dest-path>
9// license_tier: ORIGINAL   (vault+SSH spine from nx_aw_send; the sftp layer is new)
10import "nx_syscalls.nx"
11import "nx_ssh_lib.nx"
12const FT_MAGIC_1000000: i64 = 1000000
13const FT_MAGIC_65536: i64 = 65536
14const FT_MAGIC_1048576: i64 = 1048576
15const FT_MAGIC_16384: i64 = 16384
16
17const FT_SECRET_OUT: *u8 = "/tmp/nxsecret.out" as *u8
18const FT_VAULT_NV:   *u8 = "/home/elderwesto/.nishi/secrets/nas.nv" as *u8
19
20func ft_slen(s: *u8) -> i64 { var n: i64=0; while s[n]!=(0 as u8){n=n+1} return n }
21func ft_num(v: i64) -> i64 { let bb: *u8=sys_mmap(28); var m: i64=v; if m<0{m=0-m;sys_write(1,"-" as *u8,1)}; let t: *u8=sys_mmap(28); var k: i64=0; if m==0{t[0]=(48 as u8);k=1}; while m>0{t[k]=((48+(m%10)) as u8);m=m/10;k=k+1}; var i: i64=0; while i<k{bb[i]=t[k-1-i];i=i+1}; sys_write(1,bb,k); return 0 }
22func ft_run(path: *u8, a1: *u8, a2: *u8) -> i64 {
  let pid: i64 = sys_fork()
  if pid == 0 {
      let argv: *i64 = sys_mmap(64) as *i64
      argv[0] = path as i64
      var ai: i64 = 1
      if (a1 as i64) != 0 { argv[ai] = a1 as i64; ai = ai + 1 }
      if (a2 as i64) != 0 { argv[ai] = a2 as i64; ai = ai + 1 }
      argv[ai] = 0
      let envp: *i64 = sys_mmap(16) as *i64
      envp[0] = "PATH=/usr/bin:/bin" as *u8 as i64; envp[1] = 0
      sys_execve(path, argv, envp)
      sys_exit(127)
  }
  let st: *i64 = sys_mmap(16) as *i64
  sys_wait4(pid, st, 0)
  return (st[0] >> 8) & 0xff
39}
40func ft_unlink(path: *u8) -> i64 { __syscall(263, AT_FDCWD, path, 0, 0, 0, 0) return 0 }
41func ft_napms(ms: i64) -> i64 { let ts: *i64 = sys_mmap(16) as *i64; ts[0] = 0; ts[1] = ms * FT_MAGIC_1000000; __syscall(35, ts as i64, 0, 0, 0, 0, 0); return 0 }
42
43// wrap an SFTP packet (pkt[0..plen], already [u32 len][type][body]) in an SSH CHANNEL_DATA (94) and send it.
44func sftp_send(st: *SshState, rcid: i64, pkt: *u8, plen: i64) -> i64 {
  let cd: *u8 = sys_mmap(plen + 32); var c: i64 = 0
  c = ssh_put_byte(cd, c, 94); c = ssh_put_u32(cd, c, rcid); c = ssh_put_u32(cd, c, plen)
  ssh_put_bytes(cd, c, pkt, plen); c = c + plen
  ssh_enc_send(st, cd, c)
  return 0
50}
51// read packets until a CHANNEL_DATA (94) arrives; return the FXP type byte (rep[13]); skip WINDOW_ADJUST etc.
52func sftp_reply(st: *SshState, rep: *u8) -> i64 {
  var guard: i64 = 0
  while guard < 128 {
      let rl: i64 = ssh_enc_recv(st, rep)
      if rl < 0 { return 0 - 1 }
      if rep[0] == 94 as u8 { return rep[13] as i64 }    // FXP type sits at +13 (after 94|rcid:4|dlen:4|sftplen:4)
      guard = guard + 1
  }
  return 0 - 2
61}
62// wait for CHANNEL_SUCCESS(99)/FAILURE(100) after the subsystem request.
63func sftp_chan_ok(st: *SshState, rep: *u8) -> i64 {
  var guard: i64 = 0
  while guard < 32 {
      let rl: i64 = ssh_enc_recv(st, rep)
      if rl < 0 { return 0 - 1 }
      if rep[0] == 99 as u8 { return 1 }
      if rep[0] == 100 as u8 { return 0 }
      guard = guard + 1
  }
  return 0 - 2
73}
74
75func main(argc: i64, argv: *i64) -> i64 {
  if argc < 3 { ssh_puts("usage: nx_aw_sftp <local-src-path> <remote-dest-path>\n" as *u8); return 2 }
  let srcp: *u8 = argv[1] as *u8
  let dest: *u8 = argv[2] as *u8
  let dlen: i64 = ft_slen(dest)
80
  // ---- sovereign credential retrieval, retry-tolerant (WSL /tmp churns mid-op) ----
  let pwbox: *i64 = sys_mmap(16) as *i64
  var pw: *u8 = 0 as *u8
  var att: i64 = 0
  while att < 12 {
      if ft_run("_offc/nx_machine_key.elf" as *u8, 0 as *u8, 0 as *u8) == 0 {
          if ft_run("_offc/nx_vault.elf" as *u8, "open" as *u8, FT_VAULT_NV) == 0 {
              pw = sys_read_file(FT_SECRET_OUT, pwbox)
              if (pw as i64) != 0 { att = 1000 }
          }
      }
      if att < 1000 { att = att + 1; ft_napms(150) }
  }
  ft_unlink("/tmp/nxpass" as *u8)
  if (pw as i64) == 0 { ssh_puts("nx_aw_sftp: secret derivation FAIL after 12 retries\n" as *u8); return 3 }
  var pwlen: i64 = pwbox[0]
  while pwlen > 0 { if pw[pwlen-1] == 10 as u8 { pwlen = pwlen - 1 } else { if pw[pwlen-1] == 13 as u8 { pwlen = pwlen - 1 } else { break } } }
98
  let fbox: *i64 = sys_mmap(16) as *i64
  let payload: *u8 = sys_read_file(srcp, fbox)
  if (payload as i64) == 0 { ssh_puts("nx_aw_sftp: cannot read local src file\n" as *u8); ft_unlink(FT_SECRET_OUT); return 5 }
  let plen: i64 = fbox[0]
103
  let st: *SshState = sys_mmap(SSH_STATE_BYTES) as *SshState
  if ssh_open_session(st, (192 << 24) | (168 << 16) | (8 << 8) | 227) != 0 { ssh_puts("nx_aw_sftp: SSH session FAIL\n" as *u8); ft_unlink(FT_SECRET_OUT); return 7 }
  if ssh_userauth_password(st, "elderwesto" as *u8, 10, pw, pwlen) != 1 { ssh_puts("nx_aw_sftp: SSH auth FAIL\n" as *u8); sys_close(st.fd); ft_unlink(FT_SECRET_OUT); return 8 }
  ft_unlink(FT_SECRET_OUT)
108
  // ---- open a session channel ----
  let rep: *u8 = sys_mmap(FT_MAGIC_65536)
  let co: *u8 = sys_mmap(64); var c: i64 = 0
  c = ssh_put_byte(co, c, 90); c = ssh_put_str(co, c, "session" as *u8, 7)
  c = ssh_put_u32(co, c, 0); c = ssh_put_u32(co, c, FT_MAGIC_1048576); c = ssh_put_u32(co, c, FT_MAGIC_16384)
  ssh_enc_send(st, co, c)
  var rcid: i64 = 0 - 1; var guard: i64 = 0
  while rcid < 0 {
      if guard > 16 { ssh_puts("nx_aw_sftp: channel open FAIL\n" as *u8); sys_close(st.fd); return 9 }
      let rl: i64 = ssh_enc_recv(st, rep); if rl < 0 { sys_close(st.fd); return 9 }
      if rep[0] == 91 as u8 { rcid = ssh_u32be(rep, 5) }
      if rep[0] == 92 as u8 { ssh_puts("nx_aw_sftp: channel open REJECTED\n" as *u8); sys_close(st.fd); return 9 }
      guard = guard + 1
  }
123
  // ---- request the sftp subsystem ----
  let sr: *u8 = sys_mmap(64); var q: i64 = 0
  q = ssh_put_byte(sr, q, 98); q = ssh_put_u32(sr, q, rcid); q = ssh_put_str(sr, q, "subsystem" as *u8, 9)
  q = ssh_put_byte(sr, q, 1); q = ssh_put_str(sr, q, "sftp" as *u8, 4)
  ssh_enc_send(st, sr, q)
  if sftp_chan_ok(st, rep) != 1 { ssh_puts("nx_aw_sftp: sftp subsystem REFUSED\n" as *u8); sys_close(st.fd); return 10 }
130
  // ---- FXP_INIT (version 3) ----
  let initp: *u8 = sys_mmap(32); var ip: i64 = 0
  ip = ssh_put_u32(initp, ip, 5); ip = ssh_put_byte(initp, ip, 1); ip = ssh_put_u32(initp, ip, 3)
  sftp_send(st, rcid, initp, ip)
  if sftp_reply(st, rep) != 2 { ssh_puts("nx_aw_sftp: no FXP_VERSION\n" as *u8); sys_close(st.fd); return 11 }
136
  // ---- FXP_OPEN dest, flags=WRITE|CREAT|TRUNC (0x1A), attrs=perms 0755 ----
  let ob: *u8 = sys_mmap(dlen + 64); var b: i64 = 0
  b = ssh_put_byte(ob, b, 3)               // FXP_OPEN
  b = ssh_put_u32(ob, b, 1)                // request id 1
  b = ssh_put_str(ob, b, dest, dlen)
  b = ssh_put_u32(ob, b, 0x1a)             // SSH_FXF_WRITE|CREAT|TRUNC
  b = ssh_put_u32(ob, b, 0x04)             // ATTR flags = PERMISSIONS
  b = ssh_put_u32(ob, b, 0x1ed)            // 0755
  let op: *u8 = sys_mmap(dlen + 80); var on: i64 = 0
  on = ssh_put_u32(op, on, b); ssh_put_bytes(op, on, ob, b); on = on + b
  sftp_send(st, rcid, op, on)
  let ot: i64 = sftp_reply(st, rep)
  if ot != 102 {
      ssh_puts("nx_aw_sftp: FXP_OPEN failed -- reply_type=" as *u8); ft_num(ot)
      if ot == 101 { ssh_puts(" fx_status=" as *u8); ft_num(ssh_u32be(rep, 18)) }
      ssh_puts(" (fx: 1=EOF 2=NOFILE 3=PERMDENIED 4=FAILURE 5=BADMSG)\n" as *u8)
      sys_close(st.fd); return 12
  }
  let hlen: i64 = ssh_u32be(rep, 18)        // handle string length (rep: ..|sftplen:4|type:1|reqid:4|hlen:4|handle)
  let handle: *u8 = sys_mmap(hlen + 8)
  ssh_put_bytes(handle, 0, (rep + 22) as *u8, hlen)
158
  // ---- stream FXP_WRITE chunks (<=16KB), each acked by FXP_STATUS(101) status==0 ----
  var off: i64 = 0; var rid: i64 = 2
  while off < plen {
      var nn: i64 = plen - off; if nn > FT_MAGIC_16384 { nn = FT_MAGIC_16384 }
      let wb: *u8 = sys_mmap(nn + hlen + 64); var w: i64 = 0
      w = ssh_put_byte(wb, w, 6)            // FXP_WRITE
      w = ssh_put_u32(wb, w, rid)
      w = ssh_put_str(wb, w, handle, hlen)
      w = ssh_put_u32(wb, w, 0)            // offset high 32 bits (file < 4GB)
      w = ssh_put_u32(wb, w, off)         // offset low 32 bits
      w = ssh_put_u32(wb, w, nn)          // data string length
      var i: i64 = 0; while i < nn { wb[w + i] = payload[off + i]; i = i + 1 } w = w + nn
      let wp: *u8 = sys_mmap(w + 8); var wn: i64 = 0
      wn = ssh_put_u32(wp, wn, w); ssh_put_bytes(wp, wn, wb, w); wn = wn + w
      sftp_send(st, rcid, wp, wn)
      let rt: i64 = sftp_reply(st, rep)
      if rt != 101 { ssh_puts("nx_aw_sftp: write reply not STATUS\n" as *u8); sys_close(st.fd); return 13 }
      let status: i64 = ssh_u32be(rep, 18)
      if status != 0 { ssh_puts("nx_aw_sftp: FXP_WRITE STATUS error\n" as *u8); sys_close(st.fd); return 14 }
      off = off + nn; rid = rid + 1
  }
180
  // ---- FXP_CLOSE ----
  let cb: *u8 = sys_mmap(hlen + 32); var cbn: i64 = 0
  cbn = ssh_put_byte(cb, cbn, 4); cbn = ssh_put_u32(cb, cbn, rid); cbn = ssh_put_str(cb, cbn, handle, hlen)
  let cp: *u8 = sys_mmap(hlen + 48); var cpn: i64 = 0
  cpn = ssh_put_u32(cp, cpn, cbn); ssh_put_bytes(cp, cpn, cb, cbn); cpn = cpn + cbn
  sftp_send(st, rcid, cp, cpn)
  sftp_reply(st, rep)   // final STATUS (best-effort)
188
  ssh_puts("nx_aw_sftp: WROTE bytes=" as *u8)
  let nbuf: *u8 = sys_mmap(28); var mm: i64=plen; let tb: *u8=sys_mmap(28); var kk: i64=0; if mm==0{tb[0]=48 as u8;kk=1}; while mm>0{tb[kk]=(48+(mm%10)) as u8;mm=mm/10;kk=kk+1}; var jj: i64=0; while jj<kk{nbuf[jj]=tb[kk-1-jj];jj=jj+1}; sys_write(1,nbuf,kk)
  ssh_puts(" -> " as *u8); ssh_puts(dest); ssh_puts(" (sovereign sftp, no shell)\n" as *u8)
  sys_close(st.fd)
  return 0
194}
nx_aw_sftp.nx source

`nx_aw_sftp.nx` source
