File: //usr/lib/python3/dist-packages/uaclient/entitlements/__pycache__/repo.cpython-310.pyc
o
nHJeeW � @ s� d dl Z d dlZd dlZd dlZd dlmZ d dlmZmZm Z m
Z
m Z m Z d dl
mZmZmZmZmZmZmZmZ d dlmZ d dlmZmZmZ e� � Z e� e� e ��Z!dZ"G dd � d ej#�Z$dS )
� N)�exists)�Any�Dict�List�Optional�Tuple�Union)�apt�contract� event_logger�
exceptions�http�messages�system�util)�base)�ApplicationStatus�CanDisableFailure�CanDisableFailureReasonz<^linux-image-([\d]+[.-][\d]+[.-][\d]+-[\d]+-[A-Za-z0-9_-]+)$c s� e Zd ZdZdZdZdZdZdZdZ e
de e e
df fdd ��Ze
dee
fd
d ��Zdefd d
�Ze
ejde
fdd���Z d3dedeeee f f� fdd�
Zd3dedefdd�Zd3dd�Zdd� Z dd� Z d d � Z d d � Z dee ee!j" f fd d!�Z#d"d#� Z$ d3d$e%e
e&f d%e%e
e&f d&edef� fd'd(�
Z' d4d)eee
d*ed+eddfd,d-�Z(d3deddfd.d/�Z) d5d0edefd1d2�Z*� Z+S )6�RepoEntitlementz*/etc/apt/sources.list.d/ubuntu-{name}.listz$/etc/apt/preferences.d/ubuntu-{name}z {}/ubuntuNFT�returnc C � d S �N� ��selfr r �</usr/lib/python3/dist-packages/uaclient/entitlements/repo.py�repo_pin_priority4 s z!RepoEntitlement.repo_pin_priorityc C s< g }| j �di �}|r |�di �}t�|�dg ��}|}|S )z debs to install on enablement� entitlement�
directives�additionalPackages)�entitlement_cfg�get�copy)r �packagesr r �additional_packagesr r r r$ 8 s
�zRepoEntitlement.packagesc C s t jt| j�d�}t�|� |S )z%Check if system needs to be rebooted.)�installed_pkgs)r �
should_reboot�setr$ �event� needs_reboot)r �reboot_requiredr r r �_check_for_rebootI s
�
z!RepoEntitlement._check_for_rebootc C r r r r r r r �
repo_key_fileQ s z RepoEntitlement.repo_key_file�ignore_dependent_servicesc sV t � j|d�\}}|du r||fS | js'| jr'dttjtjj | j
| j
d��fS ||fS )N)r. F��entitlement_name�title) �super� can_disable�origin�purger r �NO_PURGE_WITHOUT_ORIGINr �REPO_PURGE_FAIL_NO_ORIGIN�formatr1 )r r. �result�reason�� __class__r r r3 V s
� ���
zRepoEntitlement.can_disable�silentc C s� | j |d� | jr.| jr.t| j�dkr!t�tjj d�
| j�d�� t�tj j | j d�� dS | �
� t�tjj | j d�� | jdd� dS ) z�Enable specific entitlement.
@return: True on success, False otherwise.
@raises: UbuntuProError on failure to install suggested packages
�r= r � �r$ �r1 �install)� operationT)�setup_apt_config�supports_access_only� access_only�lenr$ r) �infor � SKIPPING_INSTALLING_PACKAGESr8 �join�ACCESS_ENABLED_TMPLr1 �install_packages� ENABLED_TMPL�_check_for_reboot_msg)r r= r r r �_perform_enablel s
��� z RepoEntitlement._perform_enablec C s� | j rE| jrEttj� t� t�| j�}| �|�sdS g }g }|D ]}tj|| jd�}|r7|� |t
|�f� q!|� |� q!| � ||�sEdS t | d�rN| �
� | j|d� | j rd| jrd| �|� | �|� dS )NF)�exclude_origin�remove_packagesr> T)r5 r4 �printr �PURGE_EXPERIMENTALr � get_installed_packages_by_origin�purge_kernel_check� get_remote_versions_for_package�append�max�prompt_for_purge�hasattrrQ �remove_apt_config�execute_reinstall�execute_removal)r r= �repo_origin_packages�packages_to_reinstall�packages_to_remove�package� alternativesr r r �_perform_disable� s<
�
�
� �
z RepoEntitlement._perform_disablec s� g � |D ]}t �t|j�}|r� �|�d�� q� rWttjj | j
d�� td� � �� t �
� j}ttjj |d�� t �� }� fdd�|D �}|sOttj� dS t�tj�sWdS dS ) a*
Checks if the purge operation involves a kernel.
When package called 'linux-image-*' is in the package list, warn the
user that a kernel is being removed. Then, show the user what the
current kernel is.
If the current kernel is to be removed, and there are no other valid
Ubuntu Kernels installed in the system, return False to abort the
operation.
If there is another Ubuntu kernel - besides the one installed - then
prompt the user for confirmation before proceeding.
� ��servicer? )�kernel_versionc s g | ]}|� vr|�qS r r )�.0�version��linux_image_versionsr r �
<listcomp>� s
�z6RepoEntitlement.purge_kernel_check.<locals>.<listcomp>FT)�re�search�
RE_KERNEL_PKG�namerW �grouprR r �PURGE_KERNEL_REMOVALr8 r1 rJ r �get_kernel_info�
uname_release�PURGE_CURRENT_KERNEL� get_installed_ubuntu_kernels�PURGE_NO_ALTERNATIVE_KERNELr �prompt_for_confirmation�PURGE_KERNEL_CONFIRMATION)r � package_listra �m�current_kernel�installed_kernels�alternative_kernelsr rj r rU � s6 �
��
�
�z"RepoEntitlement.purge_kernel_checkc C sd d}|rt tj� t�dd� |D �� d}|r(t tj� t�dd� |D �� d}|r0t�tj�S dS )NFc S s g | ]}|j �qS r �rp �rh ra r r r rl � s z4RepoEntitlement.prompt_for_purge.<locals>.<listcomp>Tc S s g | ]\}}|j �qS r r )rh ra �_r r r rl � s )rR r �WARN_PACKAGES_REMOVALr �print_package_list�WARN_PACKAGES_REINSTALLrx �PROCEED_YES_NO)r r` r_ �promptr r r rY � s
�
� z RepoEntitlement.prompt_for_purgec s< t �� � � fdd�|D �}|r t �|tjj|d�� d S d S )Nc s g | ]
}|j � v r|j �qS r r r� ��installed_packagesr r rl � s
�z3RepoEntitlement.execute_removal.<locals>.<listcomp>r@ )r � get_installed_packages_names�purge_packagesr � UNINSTALLING_PACKAGES_FAILEDr8 )r r` � to_remover r� r r] � s
����z RepoEntitlement.execute_removalc s0 t �� � � fdd�|D �}|rt �|� d S d S )Nc s* g | ]\}}|j � v rd �|j |j��qS )z{}={})rp r8 �ver_str)rh ra ri r� r r rl s
�z5RepoEntitlement.execute_reinstall.<locals>.<listcomp>)r r� �reinstall_packages)r r_ � to_reinstallr r� r r\ s
��z!RepoEntitlement.execute_reinstallc C s� t jtjj| jd�f}| j}|�di ��di �}|�d�}|s*t jtjj| jd�fS t j
tj d�}t �
| j�|�|�}|rHt jtjj| jd�f}| jrd| jD ]}t �|�sct jtjj| j|d�f S qN|S )NrA r r �aptURL)� error_msg)rf ra )r �DISABLEDr �SERVICE_NOT_CONFIGUREDr8 r1 r! r" �NO_APT_URL_FOR_SERVICEr �get_apt_cache_policy�APT_POLICY_FAILEDrm rn �
repo_url_tmpl�ENABLED�SERVICE_IS_ACTIVE� check_packages_are_installedr$ � is_installed� SERVICE_DISABLED_MISSING_PACKAGErp )r �current_statusr! r �repo_url�policy�matchra r r r �application_status s8 � �
��
���z"RepoEntitlement.application_statusc C sP | j j| jd�}tdd� t�|��� �d�D ��rdS |s dS t|t�|�v �S )z�Check if apt url delta should be applied.
:param apt_url: string containing the apt url to be used.
:return: False if apt url is already found on the source file.
True otherwise.
r c s s � | ]}|� d �V qdS )�#N)�
startswith)rh �liner r r � <genexpr>B s
� �
�z<RepoEntitlement._check_apt_url_is_applied.<locals>.<genexpr>�
FT) �repo_list_file_tmplr8 rp �allr � load_file�strip�split�bool)r �apt_url�apt_filer r r �_check_apt_url_is_applied7 s �z)RepoEntitlement._check_apt_url_is_applied� orig_access�deltas� allow_enablec s0 t � �|||�r
dS |�di �}|�di �}|�d�}|�d�}| j�d�}|r/|r/| �� } n| �� \} }
| tjkr<dS | � |�s{t
� d| j |� t
� tjj| j d �� |�di �} | �di ��d�} | rs| jj| j d
�}
t�|
| � | �� | �� |r�t
� d |� t
� tjjd �|�d
�� | j|d� dS )a1 Process any contract access deltas for this entitlement.
:param orig_access: Dictionary containing the original
resourceEntitlement access details.
:param deltas: Dictionary which contains only the changed access keys
and values.
:param allow_enable: Boolean set True if allowed to perform the enable
operation. When False, a message will be logged to inform the user
about the recommended enabled service.
:return: True when delta operations are processed; False when noop.
Tr r r� r z status-cacheFz.New aptURL, updating %s apt sources list to %sre r z%New additionalPackages, installing %r�, r@ )rz )r2 �process_contract_deltasr" �cfg�
read_cache�"_check_application_status_on_cacher� r r� r� �LOGrH rp r) r �REPO_UPDATING_APT_SOURCESr8 r� r �remove_auth_apt_repor[ rD � REPO_REFRESH_INSTALLING_PACKAGESrJ rL )r r� r� r� �delta_entitlement�delta_directives�
delta_apt_url�delta_packages� status_cacher� r� �orig_entitlement�old_url�
repo_filenamer; r r r� Q sJ
�� �� z'RepoEntitlement.process_contract_deltasrz �cleanup_on_failure�verbosec C s� |s| j }|s dS | j�dg �}t�|�sdS z| �� W n tjy, |r+| �� � w |r:t �
t j j
| jd�� | jrFddi}g d�}nd}g }z tj|||d� W dS tjyo t �
t jj
| jd�� |rn| �� � w )a) Install contract recommended packages for the entitlement.
:param package_list: Optional package list to use instead of
self.packages.
:param cleanup_on_failure: Cleanup apt files if apt install fails.
:param verbose: If true, print messages to stdout
N� pre_installrA �DEBIAN_FRONTEND�noninteractive)z--allow-downgradesz$-o Dpkg::Options::="--force-confdef"z$-o Dpkg::Options::="--force-confold")r$ � apt_options�override_env_vars)r$ � messagingr" r �handle_message_operations�_update_sources_listr �UbuntuProErrorr[ r) rH r �INSTALLING_SERVICE_PACKAGESr8 r1 �apt_noninteractiver �run_apt_install_command�
ENABLE_FAILED)r rz r� r� �msg_opsr� r� r r r rL � sF
��
��z RepoEntitlement.install_packagesc C s� d}d}d}| j js| j jr't�d| j jtj�}t�d| j jtj�}tjj }n | j j
s/| j j rGt�d| j j
tj�}t�d| j j tj�}tjj }tj
|||d� | jj| jd�}| j}|d �di �}|d �di �}|�d �} | s�| j jd
}
|�d �s�t�| j �} | �|
| j�} | r�| �d �} | s�|
} t�d | j� |�d
�}
|
s�tj| jd��|�d�}|s�tj | jd��|�d�}|s�tj | jd��| j r�| j s�tj | j| jd��| j!j| jd�}t�"||| j | j � g }t#tj$�s�|�%d� t#tj&�s�|�%d� |�r&|�st'�(t)j*jd�+|�d�� ztj,|d� W n tj-�y% | �.� � w t�/|| j0�|�| || j1� |�sBt'�(t)j2j| jd�� zt�3|� W dS tj-�yZ | j.dd� � w )z�Setup apt config based on the resourceToken and directives.
Also sets up apt proxy if necessary.
:raise UbuntuProError: on failure to setup any aspect of this apt
configuration
Nr
�https)�
http_proxy� https_proxy� proxy_scoper r r � obligations�
resourceToken� machineToken�enableByDefaultzWNo resourceToken present in contract for service %s. Using machine token as credentials�aptKey�r0 r� �suitesr/ zapt-transport-httpszca-certificatesr� r@ F)�run_apt_update)4r� �global_apt_http_proxy�global_apt_https_proxyr
�validate_proxy� PROXY_VALIDATION_APT_HTTP_URL� PROXY_VALIDATION_APT_HTTPS_URLr �
AptProxyScope�GLOBAL�ua_apt_http_proxy�ua_apt_https_proxy�UACLIENT�setup_apt_proxyr� r8 rp r! r" �
machine_tokenr
�UAContractClient�get_resource_machine_accessr� �warningr1 r � RepoNoAptKey�MissingAptURLDirective� RepoNoSuitesr r4 �RepoPinFailNoOrigin�repo_pref_file_tmpl�add_ppa_pinningr �APT_METHOD_HTTPS_FILErW �CA_CERTIFICATES_FILEr) rH r �INSTALLING_PACKAGESrJ r� r� r[ �add_auth_apt_repor� r- �APT_UPDATING_LIST�update_sources_list)r r= r� r� �scoper� � resource_cfgr r� �tokenr� �client�machine_accessr� r� � repo_suites�repo_pref_file�prerequisite_pkgsr r r rD � s� ��
���
�
�
��
���
� �z RepoEntitlement.setup_apt_configr� c C s� t �� j}| jj| jd�}| jjj| j � di �}|� di �}|� d�}|s-t
j | jd��t �
||| j� t �||� | jrK| jj| jd�}t �|� |r[|sUt�tj� t �� dS dS )z�Remove any repository apt configuration files.
:param run_apt_update: If after removing the apt update
command after removing the apt files.
r r r r� r� N)r �get_release_info�seriesr� r8 rp r� �machine_token_file� entitlementsr" r r� r r� r- �remove_apt_list_filesr r� �ensure_file_absentr) rH r �APT_UPDATING_LISTS�run_apt_update_command) r r� r= r r� r �access_directivesr� r r r r r[ H s&
�
�z!RepoEntitlement.remove_apt_config)F)NTT)TF),�__name__�
__module__� __qualname__r� r� r� r4 r� r� �supports_purge�propertyr �int�strr r r$ r� r, �abc�abstractmethodr- r r r r3 rO rc rU rY r] r\ r r � NamedMessager� r� r r r� rL rD r[ �
__classcell__r r r; r r ! sz ���
)2
�& �
�
���D�
���
�;{���r )%r r# �loggingrm �os.pathr �typingr r r r r r �uaclientr r
r r r
r r r �uaclient.entitlementsr �(uaclient.entitlements.entitlement_statusr r r �get_event_loggerr) � getLogger� replace_top_level_logger_namer r� ro �
UAEntitlementr r r r r �<module> s (