File: //lib/python3/dist-packages/uaclient/entitlements/__pycache__/repo.cpython-38.pyc
U
��Jh�i � @ s� d dl Z d dlZd dlZd dlZd dlmZ d dlmZmZm Z m
Z
m Z m Z d dl
mZmZmZmZmZmZmZmZmZmZ d dlmZ d dlmZm Z m Z d dl m Z e� � Z!e�"e�#e$��Z%dZ&G d d
� d
ej'�Z(dS ) � N)�exists)�Any�Dict�List�Optional�Tuple�Union)
�api�apt�contract� event_logger�
exceptions�http�messages�secret_manager�system�util)�base)�ApplicationStatus�CanDisableFailure�CanDisableFailureReason)�status_cache_filez<^linux-image-([\d]+[.-][\d]+[.-][\d]+-[\d]+-[A-Za-z0-9_-]+)$c s8 e Zd ZdZdZdZdZdZdZdZ dZ
e e e
edf d�dd ��Ze ed�d
d ��Ze ed�d d
��Ze ee d�dd��Ze ee d�dd��Ze ee d�dd��Ze ee d�dd��Zed�dd�Zed�dd�Ze ej ed�dd���Z dCee eee f d �� fd d �
Z e
d�d d �Z!e"j#ed!�d"d#�Z$e
d�d$d%�Z%e"j#d&�d'd(�Z&e"j#d&�d)d*�Z'e"j#d&�d+d,�Z(d-d.� Z)d/d0� Z*e e+ee,j- f d�d1d2�Z.d3d4� Z/dDe0ee1f e0ee1f eed5�� fd6d7�
Z2dEe"j#eee edd8�d9d:�Z3e"j#dd!�d;d<�Z4dFeee d=�d>d?�Z5dGe"j#ed@�dAdB�Z6� Z7S )H�RepoEntitlementz1/etc/apt/sources.list.d/ubuntu-{name}.{extension}z$/etc/apt/preferences.d/ubuntu-{name}z {}/ubuntuNFT)�returnc C s d S �N� ��selfr r �</usr/lib/python3/dist-packages/uaclient/entitlements/repo.py�repo_pin_priority; s z!RepoEntitlement.repo_pin_priorityc C s. d}t �� j}|tjkr d}| jj| j|d�S )NZsources�list)�name� extension)r �get_release_info�seriesr
ZSERIES_NOT_USING_DEB822�repo_file_tmpl�formatr! )r r" r$ r r r � repo_file? s
zRepoEntitlement.repo_filec C s
| j d S )Nz {})�
repo_url_tmplr r r r �repo_policy_check_tmplG s z&RepoEntitlement.repo_policy_check_tmplc C s< g }| j �di �}|r8|�di �}t�|�dg ��}|}|S )z debs to install on enablement� entitlement�
directives�additionalPackages)�entitlement_cfg�get�copy)r �packagesr* r+ Zadditional_packagesr r r r0 K s
�zRepoEntitlement.packagesc C s | j �di ��di ��d�S )Nr* r+ �aptURL�r- r. r r r r �apt_url\ s ���zRepoEntitlement.apt_urlc C s | j �di ��di ��dg �S )Nr* r+ ZaptSnapshotURLsr2 r r r r �
snapshot_urlsd s � ��z RepoEntitlement.snapshot_urlsc C s | j �di ��di ��d�S )Nr* r+ �suitesr2 r r r r �
apt_suitesl s ���zRepoEntitlement.apt_suitesc C sz | j �d�}|sv| jjd }| j d �di �}|�d�s`t�| j�}|�|| j�}|r`|�d�}|sv|}t �
d| j � |S )NZ
resourceTokenZ machineTokenr* � obligationsZenableByDefaultzWNo resourceToken present in contract for service %s. Using machine token as credentials) r- r. �machine_token_file�
machine_tokenr ZUAContractClient�cfgZget_resource_machine_accessr! �LOGZwarning�title)r �tokenr9 r7 ZclientZmachine_accessr r r �get_resource_tokent s0 �
�
�
�z"RepoEntitlement.get_resource_tokenc C s t jt| j�d�}t�|� |S )z%Check if system needs to be rebooted.)Zinstalled_pkgs)r Z
should_reboot�setr0 �eventZ needs_reboot)r Zreboot_requiredr r r �_check_for_reboot� s
�
z!RepoEntitlement._check_for_rebootc C s d S r r r r r r �
repo_key_file� s z RepoEntitlement.repo_key_file)�ignore_dependent_servicesr c sV t � j|d�\}}|dkr"||fS | jsN| jrNdttjtjj | j
| j
d��fS ||fS )N)rC F��entitlement_namer< ) �super� can_disable�origin�purger r ZNO_PURGE_WITHOUT_ORIGINr ZREPO_PURGE_FAIL_NO_ORIGINr& r< )r rC �result�reason�� __class__r r rG � s �
���
zRepoEntitlement.can_disablec C s. | j d k ot| j �dk}| js"|s&dS dS d S )Nr � � )r0 �len� access_only)r Z will_installr r r � enable_steps� s
z RepoEntitlement.enable_steps)�progressr c C sh |� tjj| jd�� | �|� | jrZ| jrZt| j �dkrd|�
dtj jd� | j �d�� n
| �
|� dS )z�Enable specific entitlement.
@return: True on success, False otherwise.
@raises: UbuntuProError on failure to install suggested packages
��servicer �info� �r0 T)rS r ZCONFIGURING_APT_ACCESSr& r< �setup_apt_configZsupports_access_onlyrQ rP r0 �emitZ SKIPPING_INSTALLING_PACKAGES�join�install_packages)r rS r r r �_perform_enable� s �
��
z RepoEntitlement._perform_enablec C s | j s
dS dS d S )NrN rO )rI r r r r �
disable_steps� s z RepoEntitlement.disable_steps)rS c C s� | j r�| jr�|�dtj� |�dd� t�| j�}| �||�sBdS g }g }|D ]6}tj|| jd�}|rz|� |t
|�f� qN|� |� qN| � |||�s�dS t | d�r�| �
� | �|� | j r�| jr�|�tjj| jd�� | �|� | �|� dS )NrV � F)Zexclude_origin�remove_packages�r< T)rI rH rZ r ZPURGE_EXPERIMENTALr
Z get_installed_packages_by_origin�purge_kernel_checkZ get_remote_versions_for_package�append�max�prompt_for_purge�hasattrr` �remove_apt_configrS ZPURGING_PACKAGESr& r< �execute_reinstall�execute_removal)r rS Zrepo_origin_packages�packages_to_reinstall�packages_to_remove�packageZ alternativesr r r �_perform_disable� sH � �
� �
�
z RepoEntitlement._perform_disablec s� g � |D ]&}t �t|j�}|r� �|�d�� q� r�|�� sDt�� �|� dt
j j | j
d�� |� dd�� �� t�� j}|� dt
jj |d�� t�� }� fdd�|D �}|s�|� dt
j� dS |� d tjd
t
jifg� d S ) a*
Checks if the purge operation involves a kernel.
When package called 'linux-image-*' is in the package list, warn the
user that a kernel is being removed. Then, show the user what the
current kernel is.
If the current kernel is to be removed, and there are no other valid
Ubuntu Kernels installed in the system, return False to abort the
operation.
If there is another Ubuntu kernel - besides the one installed - then
prompt the user for confirmation before proceeding.
� rV rT rW )Zkernel_versionc s g | ]}|� kr|�qS r r )�.0�version�Zlinux_image_versionsr r �
<listcomp>4 s �z6RepoEntitlement.purge_kernel_check.<locals>.<listcomp>F�message_operation�msgT)�re�search�
RE_KERNEL_PKGr! rc �groupZis_interactiver
Z#NonInteractiveKernelPurgeDisallowedrZ r ZPURGE_KERNEL_REMOVALr& r< r[ r Zget_kernel_infoZ
uname_releaseZPURGE_CURRENT_KERNELZ get_installed_ubuntu_kernelsZPURGE_NO_ALTERNATIVE_KERNELr �prompt_for_confirmationZPURGE_KERNEL_CONFIRMATION)r � package_listrS rl �mZcurrent_kernelZinstalled_kernelsZalternative_kernelsr rq r rb sF �
��
����
z"RepoEntitlement.purge_kernel_checkc C s� d}|r6|� dtj� |� dt�dd� |D ��� d}|rh|� dtj� |� dt�dd� |D ��� d}|r�|� dtjdtjifg� dS ) NFrV c S s g | ]
}|j �qS r �r! �ro rl r r r rr V s z4RepoEntitlement.prompt_for_purge.<locals>.<listcomp>Tc S s g | ]\}}|j �qS r r| )ro rl �_r r r rr ` s rs rt )rZ r ZWARN_PACKAGES_REMOVALr Zcreate_package_list_strZWARN_PACKAGES_REINSTALLry ZPROCEED_YES_NO)r rk rj rS �promptr r r re J s8 �� ����� z RepoEntitlement.prompt_for_purgec s8 t �� � � fdd�|D �}|r4t �|tjj|d�� d S )Nc s g | ]}|j � kr|j �qS r r| r} �Zinstalled_packagesr r rr w s
�z3RepoEntitlement.execute_removal.<locals>.<listcomp>rX )r
� get_installed_packages_namesZpurge_packagesr Z UNINSTALLING_PACKAGES_FAILEDr& )r rk Z to_remover r� r ri q s
���z RepoEntitlement.execute_removalc s, t �� � � fdd�|D �}|r(t �|� d S )Nc s* g | ]"\}}|j � krd �|j |j��qS )z{}={})r! r& Zver_str)ro rl rp r� r r rr � s
�z5RepoEntitlement.execute_reinstall.<locals>.<listcomp>)r
r� Zreinstall_packages)r rj Z to_reinstallr r� r rh � s
�z!RepoEntitlement.execute_reinstallc
C s t jtjj| jd�f}| j}|�di ��di �}|�d�}|sTt jtjj| jd�fS |�d�}|sxt jtj j| jd�fS t
j tj d�}|D ]8}t
�| j�||�|�}|r�t jtjj| jd�f} q�q�| jr�| jD ]*} t
�| �s�t jtjj| j| d�f S q�|S )Nra r* r+ r1 r5 )Z error_msg)rU rl )r �DISABLEDr ZSERVICE_NOT_CONFIGUREDr& r< r- r. ZNO_APT_URL_FOR_SERVICEZNO_SUITES_FOR_SERVICEr
Zget_apt_cache_policyZAPT_POLICY_FAILEDru rv r) ZENABLEDZSERVICE_IS_ACTIVE� check_packages_are_installedr0 Z is_installedZ SERVICE_DISABLED_MISSING_PACKAGEr! )
r Zcurrent_statusr- r+ �repo_url� repo_suitesZpolicyZsuiteZ
service_matchrl r r r �application_status� sN � �
�
� ��
��
z"RepoEntitlement.application_statusc C sF | j }tdd� t�|��� �d�D ��r,dS |s4dS t|t�|�k�S )z�Check if apt url delta should be applied.
:param apt_url: string containing the apt url to be used.
:return: False if apt url is already found on the source file.
True otherwise.
c s s | ]}|� d �V qdS )�#N)�
startswith)ro �liner r r � <genexpr>� s �z<RepoEntitlement._check_apt_url_is_applied.<locals>.<genexpr>�
FT)r' �allr Z load_file�strip�split�bool)r r3 Zapt_filer r r �_check_apt_url_is_applied� s �z)RepoEntitlement._check_apt_url_is_applied)� orig_access�deltas� allow_enabler c
s6 t � �|||�rdS |�di �}|�di �}|�d�}|�d�}t�� }|rZ|rZ| �� } n | �� \} }
| tjkrtdS | � |�s�t
� d| j |� t
� tjj| j d�� |�di �} | �di ��d�} | r�t�| j| | j� | �t�� � | �t�� � |�r2t
� d |� t
� tjjd
�|�d �� | jt�� |d � dS )
a1 Process any contract access deltas for this entitlement.
:param orig_access: Dictionary containing the original
resourceEntitlement access details.
:param deltas: Dictionary which contains only the changed access keys
and values.
:param allow_enable: Boolean set True if allowed to perform the enable
operation. When False, a message will be logged to inform the user
about the recommended enabled service.
:return: True when delta operations are processed; False when noop.
Tr* r+ r1 r, Fz.New aptURL, updating %s apt sources list to %srT z%New additionalPackages, installing %r�, rX )rz ) rF �process_contract_deltasr. r �readZ"_check_application_status_on_cacher� r r� r� r; rV r! r@ r ZREPO_UPDATING_APT_SOURCESr& r
�remove_auth_apt_repor' r4 rg r �ProgressWrapperrY Z REPO_REFRESH_INSTALLING_PACKAGESr[ r\ )
r r� r� r� Zdelta_entitlementZdelta_directivesZ
delta_apt_urlZdelta_packagesZ status_cacher� r~ Zorig_entitlementZold_urlrL r r r� � sV
�� � �� �z'RepoEntitlement.process_contract_deltas)rS rz �cleanup_on_failurer c C s� |s
| j }|sdS |�d| j�d�� z| �|� W n* tjk
r^ |rX| �t� � � � Y nX |�
t j j
| jd�� | jr�ddi}ddd g}nd}g }ztj|||d
� W n< tjk
r� |r�t�d �
| j�� | �t� � � � Y nX dS ) z�Install contract recommended packages for the entitlement.
:param package_list: Optional package list to use instead of
self.packages.
:param cleanup_on_failure: Cleanup apt files if apt install fails.
Nrs Z pre_installra ZDEBIAN_FRONTENDZnoninteractivez--allow-downgradesz$-o Dpkg::Options::="--force-confdef"z$-o Dpkg::Options::="--force-confold")r0 � apt_options�override_env_varsz.Apt install failed, removing apt config for {})r0 rZ Z messagingr. Z_update_sources_listr
�UbuntuProErrorrg r r� rS r ZINSTALLING_SERVICE_PACKAGESr& r< �apt_noninteractiver
�run_apt_install_commandr; rV r! )r rS rz r� r� r� r r r r\ ! sJ
���
��z RepoEntitlement.install_packagesc C sd d}d}d}| j js | j jrNt�d| j jtj�}t�d| j jtj�}tjj }n@| j j
s^| j j r�t�d| j j
tj�}t�d| j j tj�}tjj }tj
|||d� | j}| j}|d �di �}| �� }|�d�} | s�tj| jd��|�d �}
|
s�tj| jd��|�d
�} | �stj| jd��| j�r^| j�s:tj| j| jd ��| jj | jd �} t� | |
| j| j� g }
t tj ��sx|
� d
� t tj!��s�|
� d� |
�r�|�"dt#j$j d�%|
�d�� ztj&|
d� W n( tj'k
�r� | �(t)�*� � � Y nX t�+|| j,� |
�|| | j-| j.| j/� |�0t#j1j | jd �� zt�2|� W n, tj'k
�r^ | j(t)�*� dd� � Y nX dS )z�Setup apt config based on the resourceToken and directives.
Also sets up apt proxy if necessary.
:raise UbuntuProError: on failure to setup any aspect of this apt
configuration
Nr Zhttps)�
http_proxy� https_proxyZ proxy_scoper* r+ �aptKey�rE r1 r5 rD r| zapt-transport-httpszca-certificatesrV r� rX F)�run_apt_update)3r: Zglobal_apt_http_proxyZglobal_apt_https_proxyr Zvalidate_proxyZ PROXY_VALIDATION_APT_HTTP_URLZ PROXY_VALIDATION_APT_HTTPS_URLr
Z
AptProxyScopeZGLOBALZua_apt_http_proxyZua_apt_https_proxyZUACLIENTZsetup_apt_proxyr' r- r. r> r
Z RepoNoAptKeyr! �MissingAptURLDirectiveZ RepoNoSuitesr rH ZRepoPinFailNoOriginr< �repo_pref_file_tmplr& Zadd_ppa_pinningr ZAPT_METHOD_HTTPS_FILErc ZCA_CERTIFICATES_FILErZ r ZINSTALLING_PACKAGESr[ r� r� rg r r� Zadd_auth_apt_repor( rB r4 �check_updates_pocketrS ZAPT_UPDATING_LISTZupdate_sources_list)r rS r� r� Zscope�
repo_filenameZ resource_cfgr+ r= r� r� r� �repo_pref_fileZprerequisite_pkgsr r r rY \ s� ��
�� �
��
��
�
z RepoEntitlement.setup_apt_config)�override_snapshot_urlsc C s� |d k r|}n| j }| �� }| j�di ��di ��d�}| j�|�}z|�d�\}}W n tk
rr d}|}Y nX tj �
|� |g| D ]}|r�t � |||� q�d S )Nr* r+ r1 �:Zbearer)
r4 r> r- r. r( r& r� �
ValueErrorr ZsecretsZ
add_secretr
Zadd_apt_auth_conf_entry)r r� r4 Z credentialsr� ZusernameZpasswordZurlr r r �update_apt_auth� s* ���
z RepoEntitlement.update_apt_auth)rS r� c C s� t �� j}| j}| j�� | j �di �}|�di �}|�d�}|sPtj | jd��| j
� |�}|� t
jj | jd�� t�||| j| j� t�||� | jr�| jj | jd�}t �|� |r�|� t
j� t�� dS )z�Remove any repository apt configuration files.
:param run_apt_update: If after removing the apt update
command after removing the apt files.
r* r+ r1 r� ra r| N)r r# r$ r' r8 Z entitlementsr! r. r
r� r( r& rS r ZREMOVING_APT_CONFIGURATIONr< r
r� r4 rB Zremove_apt_list_filesr r� Zensure_file_absentZAPT_UPDATING_LISTSZrun_apt_update_command) r rS r� r$ r� r* Zaccess_directivesr� r� r r r rg � s6
�
� �
z!RepoEntitlement.remove_apt_config)F)F)NT)N)T)8�__name__�
__module__� __qualname__r% r� r( rH r� r� Zsupports_purger� �propertyr �int�strr r' r) r r0 r r3 r4 r6 r> r� rA �abc�abstractmethodrB r r rG rR r r� r] r^ rm rb re ri rh r r Z NamedMessager� r� r r r� r\ rY r� rg �
__classcell__r r rL r r $ s� ��
,E� '� 1 �
�H �
� ;h �
� ��r ))r� r/ Zloggingru �os.pathr �typingr r r r r r Zuaclientr r
r r r
r r r r r Zuaclient.entitlementsr Z(uaclient.entitlements.entitlement_statusr r r Zuaclient.files.state_filesr Zget_event_loggerr@ Z getLoggerZ replace_top_level_logger_namer� r; rw Z
UAEntitlementr r r r r �<module> s 0