Follow-Up Tip: Running the Python SELinux Validation Across All Nodes

				
					#!/usr/bin/env bash
set -euo pipefail

NODES_FILE="${1:-nodes.txt}"
shift || true

SSH_USER="${SSH_USER:-yugabyte}"
CONNECT_TIMEOUT="${CONNECT_TIMEOUT:-6}"
OUTFILE_JSON="${OUTFILE_JSON:-yb_selinux_results.json}"
OUTFILE_SUMMARY="${OUTFILE_SUMMARY:-yb_selinux_summary.tsv}"

PARALLEL=10
STRICT_MODE=false
BATCH_MODE=true   # default = non-interactive (best for scale)

while [[ $# -gt 0 ]]; do
  case "$1" in
    --parallel)   PARALLEL="${2:-10}"; shift 2 ;;
    --strict)     STRICT_MODE=true; shift ;;
    --batch)      BATCH_MODE=true; shift ;;
    --no-batch)   BATCH_MODE=false; shift ;;
    *) echo "Unknown arg: $1" >&2; exit 2 ;;
  esac
done

if [[ ! -f "$NODES_FILE" ]]; then
  echo "ERROR: nodes file not found: $NODES_FILE" >&2
  exit 2
fi
if [[ ! -f "./yb_python_selinux_check.sh" ]]; then
  echo "ERROR: ./yb_python_selinux_check.sh not found in current directory" >&2
  exit 2
fi

mapfile -t NODES < <(grep -vE '^\s*(#|$)' "$NODES_FILE")
[[ "${#NODES[@]}" -eq 0 ]] && { echo "ERROR: no nodes found"; exit 2; }

TMPDIR="$(mktemp -d)"
trap 'rm -rf "$TMPDIR"' EXIT

json_escape() {
  local s="${1:-}"
  s="${s//\\/\\\\}"
  s="${s//\"/\\\"}"
  s="${s//$'\n'/\\n}"
  printf '%s' "$s"
}

make_target() {
  [[ "$1" == *@* ]] && printf "%s" "$1" || printf "%s@%s" "$SSH_USER" "$1"
}

worker() {
  local entry="$1"
  local target ts raw rc payload
  local out_json out_tsv

  target="$(make_target "$entry")"
  ts="$(date -Iseconds)"
  out_json="$TMPDIR/$(echo "$target" | tr '/:@' '___').json"
  out_tsv="$TMPDIR/$(echo "$target" | tr '/:@' '___').tsv"

  local ssh_opts=(
    -o ConnectTimeout="$CONNECT_TIMEOUT"
    -o StrictHostKeyChecking=accept-new
  )
  $BATCH_MODE && ssh_opts+=(-o BatchMode=yes) || ssh_opts+=(-o BatchMode=no)

  local remote_args=(--json)
  $STRICT_MODE && remote_args+=(--strict)

  set +e
  raw="$(ssh "${ssh_opts[@]}" "$target" "bash -s -- ${remote_args[*]}" < ./yb_python_selinux_check.sh 2>&1)"
  rc=$?
  set -e

  if [[ $rc -eq 0 || $rc -eq 1 ]] && [[ "$raw" == \{* ]]; then
    payload="$raw"
  else
    payload="{\"status\":\"error\",\"exit_code\":$rc,\"reason\":\"ssh_failed\",\"raw\":\"$(json_escape "$raw")\"}"
  fi

  printf '{"target":"%s","timestamp":"%s","result":%s}\n' \
    "$(json_escape "$target")" "$(json_escape "$ts")" "$payload" > "$out_json"

  printf "%s\t%s\t%s\t%s\t%s\n" \
    "$target" \
    "$(echo "$payload" | sed -n 's/.*"id":"\([^"]*\)".*/\1/p')" \
    "$(echo "$payload" | sed -n 's/.*"version_id":"\([^"]*\)".*/\1/p')" \
    "$(echo "$payload" | sed -n 's/.*"version":"Python \([^"]*\)".*/\1/p')" \
    "$(echo "$payload" | sed -n 's/.*"status":"\([^"]*\)".*/\1/p')" \
    > "$out_tsv"
}

export -f worker make_target json_escape
export SSH_USER CONNECT_TIMEOUT STRICT_MODE BATCH_MODE TMPDIR

printf "%s\n" "${NODES[@]}" | xargs -P "$PARALLEL" -I{} bash -lc 'worker "$@"' _ {}

{
  echo -e "target\tos_id\tos_version_id\tpython_version\tstatus"
  cat "$TMPDIR"/*.tsv | sort
} > "$OUTFILE_SUMMARY"

{
  echo "["
  paste -sd, "$TMPDIR"/*.json
  echo "]"
} > "$OUTFILE_JSON"

echo
printf "%-36s %-18s %-10s %-18s %-6s\n" "TARGET" "OS" "VER" "PYTHON" "STATUS"
printf "%-36s %-18s %-10s %-18s %-6s\n" "------------------------------------" "------------------" "----------" "------------------" "------"

any_bad=0
while IFS=$'\t' read -r target os_id os_ver py_ver status; do
  [[ "$target" == "target" ]] && continue
  [[ "$status" != "pass" ]] && any_bad=1
  printf "%-36s %-18s %-10s %-18s %-6s\n" \
    "$target" "${os_id:-unknown}" "${os_ver:-unknown}" "${py_ver:-unknown}" "${status^^}"
done < "$OUTFILE_SUMMARY"

echo
echo "Wrote:"
echo "  - $OUTFILE_JSON"
echo "  - $OUTFILE_SUMMARY"

exit $any_bad