File: //usr/lib/python3/dist-packages/uaclient/entitlements/__pycache__/base.cpython-310.pyc
o
nHJe/� � @ s d dl Z d dlZd dlZd dlZd dlmZ d dlmZmZmZm Z m
Z
m Z m Z m
Z
d dlmZmZmZmZmZmZmZmZmZmZ d dlmZ d dlm Z m Z m Z m Z m Z m!Z!m"Z"m#Z# d dl$m%Z%m&Z& d dl'm(Z( e�)� Z*e�+e�,e-��Z.G d d
� d
�Z/G d d � d e j0d
�Z1dS )� N)�datetime)�Any�Dict�List�Optional�Set�Tuple�Type�Union)
�apt�config�contract� event_logger�
exceptions�http�messages�snap�system�util)� _is_attached)�ApplicabilityStatus�ApplicationStatus�CanDisableFailure�CanDisableFailureReason�CanEnableFailure�CanEnableFailureReason�ContractStatus�UserFacingStatus)�MessagingOperationsDict�StaticAffordance)�is_config_value_truec @ s$ e Zd Zded dejfdd�ZdS )�IncompatibleService� entitlement�
UAEntitlement� named_msgc C s || _ || _d S �N)r" r$ )�selfr" r$ � r' �</usr/lib/python3/dist-packages/uaclient/entitlements/base.py�__init__' s
z IncompatibleService.__init__N)�__name__�
__module__� __qualname__r r � NamedMessager) r' r' r' r( r! & s ��r! c @ s$ e Zd ZdZdZdZdZdZdZdZ dZ
dZ dZ dZ
dZdZdZeejdefdd���Zedefd d
��Zedee fd d ��Zeejdefd
d���Zeejdefdd���Zedefdd��Zde ee f de e e e!j" f fdd�Z#edefdd��Z$ede e%df fdd��Z&ede e'df fdd ��Z(ede e)d df fd d ��Z*ede e)d df fd d ��Z+de ee)d f fd!d"�Z,de-e fd#d$�Z.de ee)d f fd%d&�Z/ede ee)d f fd'd(��Z0ede ee)d f fd)d*��Z1ede d fd+d,��Z2ede3fd-d.��Z4 d�d/e e5j6 d0e d1e d2ed3e d4e d5e ee ddfd6d7�Z7ed8d9� �Z8d:d;� Z9ed<d=� �Z:de e e e; f fd>d?�Z< d�d@e de e e=de;f f fdAdB�Z>de fdCdD�Z?de fdEdF�Z@de fdGdH�ZAejd�d@e de fdIdJ��ZBde fdKdL�ZCdMdN� ZDdee' fdOdP�ZEde fdQdR�ZFde e e e!j" f fdSdT�ZGde e e e!j" f fdUdV�ZH d�dWe de e e eI f fdXdY�ZJ d�d@e de e e eI f fdZd[�ZKejd�d@e de fd\d]��ZLd@e de e e e!j" f fd^d_�ZMde fd`da�ZN d�dbed@e ddfdcdd�ZOde ePe e!j" f fdedf�ZQdeRfdgdh�ZSde eTe e!j" f fdidj�ZUejde eVe e!j" f fdkdl��ZWde e e e!j" f fdmdn�ZXde e fdodp�ZYde fdqdr�ZZdeVfdsdt�Z[due ee f dve e de fdwdx�Z\ d�dye ee f dze ee f d{e de fd|d}�Z]d~d� Z^dS )�r# NF� r' T�returnc C � dS )z&The lowercase name of this entitlementNr' �r& r' r' r( �nameT � zUAEntitlement.namec C r0 )z?The lowercase name of this entitlement, in case it is a variantr. r' r1 r' r' r( � variant_nameZ � zUAEntitlement.variant_namec C s$ | j g}| j| j kr|�| j� |S )z1The list of names this entitlement may be called.)r2 �presentation_name�append)r& � valid_namesr' r' r( r8 _ s zUAEntitlement.valid_namesc C r0 )z,The human readable title of this entitlementNr' r1 r' r' r( �titleg r3 zUAEntitlement.titlec C r0 )z&A sentence describing this entitlementNr' r1 r' r' r( � descriptionm r3 zUAEntitlement.descriptionc C s< | j r| jS | jjjr| j�di ��di ��d| j�S | jS )z/The user-facing name shown for this entitlementr" � affordances� presentedAs)�
is_variantr4 �cfg�machine_token_file�
is_present�entitlement_cfg�getr2 r1 r' r' r( r6 s s
�z UAEntitlement.presentation_name�platform_checkc C r0 )z�Verify specific platform checks for a service.
This should only be used if the service requires custom platform checks
to check if it is available or not in the machine.
�TNr' )r& rC r' r' r( �verify_platform_checks� s z$UAEntitlement.verify_platform_checksc C sF | j }| jr!dd� | j�� D �}d�dtj d g| �}||7 }|S )z$Help information for the entitlementc S s g | ] \}}d � ||j��qS )z
* {}: {})�formatr: )�.0r4 � variant_clsr' r' r( �
<listcomp>� s ��z+UAEntitlement.help_info.<locals>.<listcomp>�
z
)� help_text�variants�items�joinr �CLI_HELP_VARIANTS_HEADER)r& rK �
variant_items� variant_textr' r' r( � help_info� s ���zUAEntitlement.help_info.c C r0 )Nr' r' r1 r' r' r( �static_affordances� � z UAEntitlement.static_affordancesc C � | j S )a
Return a list of packages that aren't compatible with the entitlement.
When we are enabling the entitlement we can directly ask the user
if those entitlements can be disabled before proceding.
Overridden in livepatch and fips
)�_incompatible_servicesr1 r' r' r( �incompatible_services� � z#UAEntitlement.incompatible_servicesc C rU )a
Return a list of packages that must be active before enabling this
service. When we are enabling the entitlement we can directly ask
the user if those entitlements can be enabled before proceding.
Overridden in ros and ros-updates.
)�_required_servicesr1 r' r' r( �required_services� rX z UAEntitlement.required_servicesc C rU )a
Return a list of packages that depend on this service.
We will use that list during disable operations, where
a disable operation will also disable all of the services
required by the original service
Overriden in esm-apps and esm-infra
)�_dependent_servicesr1 r' r' r( �dependent_services� s z UAEntitlement.dependent_servicesc C � i S r% r' r1 r' r' r( �
_get_variants� s zUAEntitlement._get_variantsc C sP t � }| �� }|�di ��dg �}|D ]}|�di ��d�}|r%|�|� q|S )zV
Fetch all available variants defined in the Contract Server response
r" � overrides�selector�variant)�set�_base_entitlement_cfgrB �add)r& �valid_variantsrA r_ �overridera r' r' r( �_get_contract_variants� s
�z$UAEntitlement._get_contract_variantsc C s` | � � }| �� }d|v rd|d i}ni }t|�D ] }||v r%|| ||< qt|�dkr.|S i S )N�generic� )r^ rg �sorted�len)r& �service_variants�contract_variantsre ra r' r' r( �_get_valid_variants� s �z!UAEntitlement._get_valid_variantsc C s | j ri S | �� S )zf
Return a list of services that are considered a variant
of the main service.
)r= rn r1 r' r' r( rL � s zUAEntitlement.variantsc s$ � j si S � fdd�� �� �� D �S )zw
On a variant, return the other variants of the main service.
On a non-variant, returns empty.
c s i | ] \}}|� j kr||�qS r' )r4 )rG r2 �clsr1 r' r( �
<dictcomp>� s
�z0UAEntitlement.other_variants.<locals>.<dictcomp>)r= rn rM r1 r' r1 r( �other_variants� s
�z UAEntitlement.other_variantsc C sZ | j �� D ]%}|jdkr
q|| j| j| j| j| jd�}|�� \}}|t j
kr*| S qdS )z�
On an enabled service class, return the variant that is enabled.
Return None if no variants exist or none are enabled (e.g. access-only)
rh )r> �
assume_yes�
allow_beta� called_name� access_onlyN) rL �valuesr4 r> rr rs � _called_nameru �application_statusr �ENABLED)r& rH ra �status�_r' r' r( �enabled_variant� s
�
�z UAEntitlement.enabled_variantc C r] r% r' r1 r' r' r( � messaging rT zUAEntitlement.messagingr> rr rs rt ru �purge�
extra_argsc C sV |st �� }|| _|| _|| _|| _|| _|dur || _ng | _|| _d| _ d| _
dS )z]Setup UAEntitlement instance
@param config: Parsed configuration dictionary
NF) r �UAConfigr> rr rs ru r~ r rw �_valid_service�_is_sources_list_updated)r& r> rr rs rt ru r~ r r' r' r( r) s
zUAEntitlement.__init__c C s. | j du r| j p| jpt| jjd�| _ | j S )z2Check if the service is marked as valid (non-beta)Nzfeatures.allow_beta)r� �is_betars r r> r1 r' r' r( �
valid_service5 s
� �zUAEntitlement.valid_servicec C s t �| jjj�| ji ��S r% )�copy�deepcopyr> r? � entitlementsrB r2 r1 r' r' r( rc A s �z#UAEntitlement._base_entitlement_cfgc C s* | � � }| jr |s |S tj|| jd� |S )N)� orig_accessra )rc r= r
�apply_contract_overridesr4 �r& rA r' r' r( rA F s
�z UAEntitlement.entitlement_cfgc C s" | � � rt�d| j� t�| j� | �� tj ks'dt
t j t
jj| jd�d�fS | �� \}}|tjkrAdt
t jt
jj| jd�d�fS | jsKdt
t j�fS | �� \}}|tjkr_dt
t j|d�fS | jrm| �� rmdt
t j �fS | j r{| � � s{dt
t j �fS | j s�| j!r�dt
t j"t
j#j| jd��fS dS )z�
Report whether or not enabling is possible for the entitlement.
:return:
(True, None) if can enable
(False, CanEnableFailure) if can't enable
z(Updating contract on service '%s' expiryF�r9 ��messagerD )$�is_access_expired�LOG�debugr2 r
�refreshr> �contract_statusr �ENTITLEDr r � NOT_ENTITLEDr �
UNENTITLEDrF r9 rx r �DISABLED�ALREADY_ENABLEDr� �IS_BETA�applicability_statusr � INAPPLICABLErW � detect_incompatible_services�INCOMPATIBLE_SERVICErZ � check_required_services_active�INACTIVE_REQUIRED_SERVICES�supports_access_onlyru �ACCESS_ONLY_NOT_SUPPORTED� ENABLE_ACCESS_ONLY_NOT_SUPPORTED)r& rx r{ r� �detailsr' r' r( �
can_enableS sf ��
��
������ ���
zUAEntitlement.can_enable�silentc C s | j �dg �}t�|�sdS | �� \}}|sL|du r dS |jtjkr2| �� \}}|s1||_ d|fS n|jtj
krH| � � \}}|sG||_ d|fS nd|fS | j �dg �}t�|�sZdS | j si| �
� scdS | �� sidS | j|d�}|ssdS | j �dg �}t�|�s�dS dS ) aN Enable specific entitlement.
@return: tuple of (success, optional reason)
(True, None) on success.
(False, reason) otherwise. reason is only non-None if it is a
populated CanEnableFailure reason. This may expand to
include other types of reasons in the future.
�pre_can_enable�FNNF�
pre_enable�r� � post_enablerD )r} rB r �handle_message_operationsr� �reasonr r� � handle_incompatible_servicesr� r� �_enable_required_servicesru �handle_required_snaps�handle_required_packages�_perform_enable) r& r� �msg_opsr� �fail� incompat_ret�error�req_ret�retr' r' r( �enable� sJ
�� �
zUAEntitlement.enablec
C s� | j �di ��di ��d�}|du rdS t�� s&t�tjjdd�� t� � t�
� s`t�tjjdd�� zt� d� W n$ t j
y_ } ztjd |d
� t�tjjd d �� W Y d}~nd}~ww t�� t�d
| jjtj�}t�d| jjtj�}tj||tjd� |r�t�tj� t |dd� d�D ]4}|d }zt� |� W q� t j y� |�dd�}|�d�}t�tj j|d�� tj |||d� Y q�w dS )z. "install snaps necessary to enable a service.r" �
directives�
requiredSnapsNT�snapd��packagesz
snapd snapz!Failed to install snapd as a snap)�exc_infozsnap install snapd)�commandr �https)�
http_proxy� https_proxy� retry_sleepsc S s
| � d�S )Nr2 �rB )�xr' r' r( �<lambda> s
z5UAEntitlement.handle_required_snaps.<locals>.<lambda>)�keyr2 �classicConfinementSupportF�channel)r )r� �classic_confinement_support) rA rB r �is_snapd_installed�event�infor �INSTALLING_PACKAGESrF �
install_snapd� is_snapd_installed_as_a_snap� install_snapr �ProcessExecutionErrorr� �warning�EXECUTING_COMMAND_FAILED�run_snapd_wait_cmdr �validate_proxyr> r� � PROXY_VALIDATION_SNAP_HTTP_URLr� � PROXY_VALIDATION_SNAP_HTTPS_URL�configure_snap_proxy�SNAP_INSTALL_RETRIES�INSTALLING_REQUIRED_SNAPSrj �
get_snap_info�SnapNotInstalledError� INSTALLING_REQUIRED_SNAP_PACKAGE) r& �required_snaps�er� r� �snap_pkg� snap_namer� r� r' r' r( r� � sv � ����� � �� �
��
��z#UAEntitlement.handle_required_snapsc C sn | j �di ��di ��d�}|sdS | �� dd� |D �}t�d|� t�tjj d�
|�d �� t � |� dS )
�/install packages necessary to enable a service.r" r� �requiredPackagesTc S s g | ]}|d �qS �r2 r' �rG �packager' r' r( rI 8 s z:UAEntitlement.handle_required_packages.<locals>.<listcomp>zInstalling packages %r� r� )
rA rB �_update_sources_listr� r� r� r� r r� rF rN r �run_apt_install_command)r& �required_packages�
package_namesr' r' r( r� ) s � ��
z&UAEntitlement.handle_required_packagesc C sv | j �di ��di ��d�}|sdS dd� |D �}t�d|� d�|�}t�tjj |d �� t
� |tj j |d �� dS )
r� r" r� r� Tc S s g | ] }|� d d�r|d �qS )�removeOnDisableFr2 r� r� r' r' r( rI P s
��zCUAEntitlement.handle_removing_required_packages.<locals>.<listcomp>zUninstalling packages %rr� r� )
rA rB r� r� rN r� r� r �UNINSTALLING_PACKAGESrF r �remove_packages� UNINSTALLING_PACKAGES_FAILED)r& r� r� �package_names_strr' r' r( �!handle_removing_required_packagesC s* ��
���z/UAEntitlement.handle_removing_required_packagesc C r0 )a
Enable specific entitlement. This should be implemented by subclasses.
This method does the actual enablement, and does not check can_enable
or handle pre_enable or post_enable messaging.
@return: True on success, False otherwise.
Nr' �r& r� r' r' r( r� c s z UAEntitlement._perform_enablec C s2 | j D ]}|| j��� \}}|tjkr dS qdS )z�
Check for depedent services.
:return:
True if there are dependent services enabled
False if there are no dependent services enabled
TF)r\ r> rx r ry )r& �dependent_service_cls�
ent_statusr{ r' r' r( �detect_dependent_servicesn s
��
�z'UAEntitlement.detect_dependent_servicesc C s2 | j D ]}|| j��� \}}|tjkr dS qdS )z�
Check if all required services are active
:return:
True if all required services are active
False is at least one of the required services is disabled
FT)rZ r> rx r ry )r& �required_service_clsr� r{ r' r' r( r� s
�z,UAEntitlement.check_required_services_activec C s< g }| j D ]}|�| j��� \}}|tjkr|�|� q|S )zI
:return: List of incompatible services that are enabled
)rW r" r> rx r ry r7 )r& r� �servicer� r{ r' r' r( � blocking_incompatible_services� s
�z,UAEntitlement.blocking_incompatible_servicesc C s t | �� �dkS )z�
Check for incompatible services.
:return:
True if there are incompatible services enabled
False if there are no incompatible services enabled
r )rk r� r1 r' r' r( r� � s z*UAEntitlement.detect_incompatible_servicesc C s� t j| jjdd�}| �� D ]M}|j| jdd�}tjj| j|jd�}tj j| j|jd�}|r3d|f S t j
|| j d�sAd|f S t �
tjj|jd�� |jdd �}|sZ|d
f S q
d S ) a)
Prompt user when incompatible services are found during enable.
When enabling a service, we may find that there is an incompatible
service already enable. In that situation, we can ask the user
if the incompatible service should be disabled before proceeding.
There are also different ways to configure that behavior:
We can disable removing incompatible service during enable by
adding the following lines into uaclient.conf:
features:
block_disable_on_enable: true
z features.block_disable_on_enable)r �
path_to_valueT)rr )�service_being_enabled�incompatible_serviceF��msgrr �r� r� NrD )r r r> r� r" r r� rF r9 �!INCOMPATIBLE_SERVICE_STOPS_ENABLE�prompt_for_confirmationrr r� r� � DISABLING_INCOMPATIBLE_SERVICE�disable)r& �cfg_block_disable_on_enabler� �ent�user_msg�e_msgr� r' r' r( r� � s< � �� � �� �z*UAEntitlement.handle_incompatible_servicesc
C s� | j D ]k}|| jdd�}|�� d tjk}|rntjj| j|jd�}tj j| j|jd�}t
j || j d�s9d|f S t
�tjj|jd�� |jdd�\}}|snd }|r_|jr_|jjr_d
|jj }tjj||jd �} || f S qd S )
a,
Prompt user when required services are found during enable.
When enabling a service, we may find that there are required services
that must be enabled first. In that situation, we can ask the user
if the required service should be enabled before proceeding.
T)rs r )r� �required_servicer� Fr� r� r. rJ )r� r� rD )rZ r> rx r r� r �REQUIRED_SERVICErF r9 � REQUIRED_SERVICE_STOPS_ENABLEr r rr r� r� �ENABLING_REQUIRED_SERVICEr� r� r� � ERROR_ENABLING_REQUIRED_SERVICE)
r& r� r �is_service_disabledr r r� r� � error_msgr� r' r' r( r� � sB
���� �� � �z'UAEntitlement._enable_required_services�ignore_dependent_servicesc C s� | � � \}}|tjkrdttjtjj| jd�d�fS | j r*|s*| �
� r*dttj �fS | j s>| j
r>dttjtjj| jd��fS dS )z�Report whether or not disabling is possible for the entitlement.
:return:
(True, None) if can disable
(False, CanDisableFailure) if can't disable
Fr� r� rD )rx r r� r r �ALREADY_DISABLEDr rF r9 r\ r� �ACTIVE_DEPENDENT_SERVICES�supports_purger~ �PURGE_NOT_SUPPORTED�DISABLE_PURGE_NOT_SUPPORTED)r& r rx r{ r' r' r( � can_disable
s2
��
�� ���
zUAEntitlement.can_disablec C s� | j �dg �}t�|�sdS | �� \}}|s8|du r dS |jtjkr4| j|d�\}}|s3||_ d|fS nd|fS | j
|d�s@dS | � � sFdS | j �dg �}t�|�sTdS | j d|d� d S )
a� Disable specific entitlement
@param silent: Boolean set True to silence print/log of messages
@return: tuple of (success, optional reason)
(True, None) on success.
(False, reason) otherwise. reason is only non-None if it is a
populated CanDisableFailure reason. This may expand to
include other types of reasons in the future.
� pre_disabler� Nr� F� post_disablezdisable operation)� operationr� rD )
r} rB r r� r r� r r �_disable_dependent_servicesr� �_perform_disabler� �_check_for_reboot_msg)r& r� r� r r� r� r� r' r' r( r 7 s6
��
�zUAEntitlement.disablec C r0 )a\
Disable specific entitlement. This should be implemented by subclasses.
This method does the actual disable, and does not check can_disable
or handle pre_disable or post_disable messaging.
@param silent: Boolean set True to silence print/log of messages
@return: True on success, False otherwise.
Nr' r� r' r' r( r h s z UAEntitlement._perform_disablec C s� | j D ]m}|| jdd�}|�� d tjk}|rptjj|j| jd�}tj j| j|jd�}t
j || j d�s9d|f S |sFt
�tjj|jd�� |jdd �\}}|spd
} |ra|jra|jjrad |jj } tjj| |jd �}
d|
f S qd
S )ay
Disable dependent services
When performing a disable operation, we might have
other services that depend on the original services.
If that is true, we will alert the user about this
and prompt for confirmation to disable these services
as well.
@param silent: Boolean set True to silence print/log of messages
T)r> rr r )�dependent_service�service_being_disabled)r r r� F)r r� r. rJ )r� r rD )r\ r> rx r ry r �DEPENDENT_SERVICErF r9 � DEPENDENT_SERVICE_STOPS_DISABLEr r rr r� r� �DISABLING_DEPENDENT_SERVICEr r� r� �"FAILED_DISABLING_DEPENDENT_SERVICE) r& r� r� r �is_service_enabledr r r� r� r
r� r' r' r( r u sD
���� �� � �z)UAEntitlement._disable_dependent_servicesc C s t �� S )z%Check if system needs to be rebooted.)r �
should_rebootr1 r' r' r( �_check_for_reboot� s z UAEntitlement._check_for_rebootr c C s, | � � r|st�tjj|d�� dS dS dS )z�Check if user should be alerted that a reboot must be performed.
@param operation: The operation being executed.
@param silent: Boolean set True to silence print/log of messages
)r N)r# r� r� r �ENABLE_REBOOT_REQUIRED_TMPLrF )r& r r� r' r' r( r � s ���z#UAEntitlement._check_for_reboot_msgc C s* | j }|s tjtjfS | jD ]\}}}|� |kr tj|f S q|d �di �}|�dd�}| jrR|durRt �
� |vrRt � |�}tjtj
j| jt �
� d�|�d�fS |�dd�}| jru|durut �� j|vrutjtjj| jt �� jd�fS t �� } |�d d�}
|�d
d�} | jr�|
dur�| j|
vr�tjtjj| j| jd�|
�d �fS | jr�| r�| j dur�| j dur�tj j| j| j| d �} z| � d
�\}
}t |
�}t |�}W n t!y� t"�#d| � tj| f Y S w | j |k r�tj| fS | j |kr�| j |k r�tj| fS |�di �}| �$|�\}}|�stj|fS tjdfS )a� Check all contract affordances to vet current platform
Affordances are a list of support constraints for the entitlement.
Examples include a list of supported series, architectures for kernel
revisions.
:return:
tuple of (ApplicabilityStatus, NamedMessage). APPLICABLE if
platform passes all defined affordances, INAPPLICABLE if it doesn't
meet all of the provided constraints.
r" r; �
architecturesNz, )r9 �arch�supported_arches�series)r9 r( �
kernelFlavors�minKernelVersion)r9 �kernel�supported_kernels)r9 r+ �
min_kernel�.z$Could not parse minKernelVersion: %s�platformChecks)%rA r �
APPLICABLEr �"NO_ENTITLEMENT_AFFORDANCES_CHECKEDrS r� rB �affordance_check_archr �
get_dpkg_archr �deduplicate_arches�INAPPLICABLE_ARCHrF r9 rN �affordance_check_series�get_release_infor( �INAPPLICABLE_SERIES�pretty_version�get_kernel_info� affordance_check_kernel_flavor�flavor�INAPPLICABLE_KERNEL�
uname_release�#affordance_check_kernel_min_version�major�minor�INAPPLICABLE_KERNEL_VER�split�int�
ValueErrorr� r� rE )r& rA �
error_message�functor�expected_resultr; �affordance_arches�deduplicated_arches�affordance_series� kernel_info�affordance_kernels�affordance_min_kernel� invalid_msg� kernel_major� kernel_minor�min_kern_major�min_kern_minor�affordances_platform_checkr� r� r' r' r( r� � s� �
� �
�� ��� �
�� ��
� ��
z"UAEntitlement.applicability_statusc C s6 t | j�js tjS | j}|r|d �d�rtjS tjS )z=Return whether the user is entitled to the entitlement or notr" �entitled)r r> � is_attachedr r� rA rB r� r� r' r' r( r� * s z UAEntitlement.contract_statusc C s� | � � \}}|tjkrtj|fS | j}|s tjtjj | j
d�fS |d � dd�du r5tjtjj | j
d�fS | � � \}}|t
jkrEtj|fS | �� \}}|rRtj|fS tj|fS )z4Return (user-facing status, details) for entitlementr� r" rU F)r� r r0 r r� rA � UNAVAILABLEr �SERVICE_NOT_ENTITLEDrF r9 rB rx r r� �INACTIVE�enabled_warning_status�WARNING�ACTIVE)r& �
applicabilityr� rA rx � explanationr� �warn_msgr' r' r( �user_facing_status3 s&
��
z UAEntitlement.user_facing_statusc C r0 )z�
The current status of application of this entitlement
:return:
A tuple of (ApplicationStatus, human-friendly reason)
Nr' r1 r' r' r( rx R �
z UAEntitlement.application_statusc C r0 )z�
If the entitlment is enabled, are there any warnings?
The message is displayed as a Warning Notice in status output
:return:
A tuple of (warning bool, human-friendly reason)
r� r' r1 r' r' r( rZ ^ ra z$UAEntitlement.enabled_warning_statusc C s d S r% r' r1 r' r' r( �status_description_overridej r5 z)UAEntitlement.status_description_overridec C s4 | j �d�}|s
dS t�|d�}|t�� krdS dS )z<Return entitlement access info as stale and needing refresh.�expiresFz%Y-%m-%dT%H:%M:%S.%fZT)rA rB r �strptime�utcnow)r& �
expire_str�expiryr' r' r( r� o s z UAEntitlement.is_access_expiredc C sl | j �d�}|du r
tjS |�dg �}|D ] }|�d�| jkr2|�d�}|dkr-tj S tj S qtjS )z6Check on the state of application on the status cache.� status-cacheN�servicesr2 rz �enabled)r> �
read_cacher r� rB r2 ry )r& � status_cache�services_status_listr� �service_statusr' r' r( �"_check_application_status_on_cachez s
�z0UAEntitlement._check_application_status_on_cache� obligations�
resourceTokenc C s t |�d�o|�S )N�enableByDefault)�boolrB )r& rp rq r' r' r( �_should_enable_by_default� s z'UAEntitlement._should_enable_by_defaultr� �deltas� allow_enablec C s� |sdS |� di �}|� di �}| j�d�}t|tjk�}|s9|r*t�|� |d }|r9d|v r9|d dtjfv }|r�|rD|rD| �� }n| � � \}} |t
j kr~| � � rnt
�d� | �� d�| j�}
t�tjj| jd �� nt
�d
� t�tjj| jd �� | j�d �| j�� dS |� d �} | s�|� d �} |� d
i �} | �| | �}
|
r�d| _| �� \}} |r�|
r�|r�tjj| jd�}
tj|
t j d� | � � dS tj j| jd�}
tj|
t j d� dS dS )au Process any contract access deltas for this entitlement.
:param orig_access: Dictionary containing the original
resourceEntitlement access details.
:param deltas: Dictionary which contains only the changed access keys
and values.
:param allow_enable: Boolean set True if allowed to perform the enable
operation. When False, a message will be logged to inform the user
about the recommended enabled service.
:return: True when delta operations are processed; False when noop.
:raise: UbuntuProError when auto-enable fails unexpectedly.
Tr" r� rh rU Fz3Disabling %s after refresh transition to unentitledz.Due to contract refresh, '{}' is now disabled.r� z8Cannot disable %s after refresh transition to unentitledzmachine-access-{}rq rp r� )� file_type) rB r> rk rs r � DROPPED_KEYr
r� ro rx r r� r r� r� r rF r2 r� r � DISABLE_DURING_CONTRACT_REFRESHr� �)UNABLE_TO_DISABLE_DURING_CONTRACT_REFRESH�delete_cache_keyrt rs r� �ENABLE_BY_DEFAULT_TMPL�sys�stderrr� � ENABLE_BY_DEFAULT_MANUAL_TMPL)r& r� ru rv �delta_entitlement�delta_directivesrl �transition_to_unentitledrx r{ r� rq �delta_obligations�enable_by_defaultr� r' r' r( �process_contract_deltas� s�
�
�������
� ��z%UAEntitlement.process_contract_deltasc C s2 | j rd S t�tjjdd�� t�d� d| _ d S )Nzstandard Ubuntur� z/etc/apt/sources.listT)r� r� r� r �APT_UPDATING_LISTrF r �update_sources_listr1 r' r' r( r� � s
z"UAEntitlement._update_sources_list)NFFr. FFN)F)_r* r+ r, � help_doc_urlrr r� r� r rK rV rY r[ r2 r6 r? r; r= �property�abc�abstractmethod�strr2 r4 r r8 r9 r: r6 r r r rs r r r- rE rR r rS r! rW r rZ r\ r^ r rg rn rL rq r| r r} r r� r) r� rc rA r r� r
r� r� r� r� r� r� r� r� r� r� r� r r r r r r# r r r� r r� r r` r rx rZ rb r� ro rt r� r� r' r' r' r( r# 0 sX
�
�
�������
�
�
O��
�AH
�6
�4��
�+��
�1 �
�9���
�
�i
� �
�
�
��
� �
�
��
� cr# )� metaclass)2r� r� �loggingr} r �typingr r r r r r r r
�uaclientr r r
r r r r r r r �(uaclient.api.u.pro.status.is_attached.v1r �(uaclient.entitlements.entitlement_statusr r r r r r r r �uaclient.typesr r �
uaclient.utilr �get_event_loggerr� � getLogger� replace_top_level_logger_namer* r� r! �ABCMetar# r' r' r' r( �<module> s (0 (