File: //lib/python3/dist-packages/uaclient/__pycache__/actions.cpython-310.pyc
o
�P�f�8 � @ sP d dl Z d dlZd dlZd dlZd dlZd dlZd dlZd dlmZm Z d dl
m Z m Z m
Z
mZmZmZmZmZ d dl
mZ d dl
mZmZ d dl
mZ d dl
mZmZmZ d dl m Z m Z m Z m Z d d l!m"Z"m#Z# d d
l$m%Z%m&Z&m'Z'm(Z( e�)� Z*e�+e�,e-��Z.d Z/d Z0d
e
j1dej2de j fdd�Z3 d8d
e
j1deej4 dej2de j de5f
dd�Z6 d8d
e
j1de7de5de5ddf
dd�Z8 d9d
e
j1d e j9ddfd d �Z:dd ddd!�d
e
j1d"e7d#e5d$e7de5d%e ee7 f d&d'�Z;ddd(�d
e
j1d)e e7 d*e5fd+d,�Zd-e7ddfd.d/�Z< d:d-e7d0e ee= ddfd1d2�Z>d
e
j1fd3d4�Z?d
e
j1d5e7fd6d7�Z@dS );� N)�List�Optional)�api�clouds�config�contract� entitlements� event_logger�
exceptions� livepatch)�log)�messages�secret_manager)�status)�system�timer�util)�APPARMOR_PROFILES�CLOUD_BUILD_INFO�DEFAULT_CONFIG_FILE�DEFAULT_LOG_PREFIX)�
machine_token�notices)�AttachmentData�attachment_data_file�machine_id_file�timer_jobs_state_file)zapt-news.servicezesm-cache.servicezua-timer.servicezua-timer.timerzua-auto-attach.pathzua-auto-attach.servicezua-reboot-cmds.servicezubuntu-advantage.service�
�cfg�contract_client� attached_atc C s< ddl m} t�t|d�� tj| d� || � |�� d S )Nr ��update_motd_messages�r �r )� uaclient.timer.update_messagingr" r �writer � ua_statusr �update_activity_token)r r r r" � r) �2/usr/lib/python3/dist-packages/uaclient/actions.py�_handle_partial_attach8 s
r+ F�services_to_be_enabled�silentc
C sD d}g }g }z'|D ]"}t | |j|j|d�\} }
|| M }| s$|�|j� q tj|jd� q W nJ tjyH } zt�|j� t | ||� | �d } ~ w tj
yY |�|j� d}Y n t yw } zd}|�|j� |�| � W Y d } ~ nd } ~ ww |s�t | ||� t� |� |r�tj
dd� t||�D �d��tjdd� |D �d��d S ) NT)r �name�variantr- )�serviceFc S s, g | ]\}}|t jjt|�t�� d �f�qS ))� error_msg�log_path)r
�UNEXPECTED_ERROR�format�str�pro_log� get_user_or_root_log_file_path)�.0r. � exceptionr) r) r* �
<listcomp>q s ����z,_enable_default_services.<locals>.<listcomp>)�failed_servicesc S s g | ]}|t jf�qS r) )r
�!E_ATTACH_FAILURE_DEFAULT_SERVICES)r8 r. r) r) r* r: � s ��)�enable_entitlement_by_namer. r/ �append�event�service_processedr
�ConnectivityError�service_failedr+ �UbuntuProError� Exception�services_failed�AttachFailureUnknownError�zip� AttachFailureDefaultServices)
r r, r r r- �retr; �unexpected_errors�enable_by_default_service�ent_ret�reason�exc�er) r) r* �_enable_default_servicesE s^
��
� ��
������rP �token� allow_enable�returnc
C s� ddl m} ddlm} tj�|� t�| �}t �
| �}t j j t j
jd�}|j||d�} t�� j}
| �di ��di �} tdd � | �d
g �D ��} | �d i ��d i ��d
d�}
|
rvt�|
�}|
|
krjtj|j|jd��tjtj j |j|jd� |� | � z|| � W n tj y� } z|� � |�d}~ww tj!�"� | �di ��dt�!| ��}t#� |� |r�t �$| |�%� �}t&| ||||d� t'� t(|d�� || � t)�*� dS )aC
Common functionality to take a token and attach via contract backend
:raise ConnectivityError: On unexpected connectivity issues to contract
server or inability to access identity doc from metadata service.
:raise ContractAPIError: On unexpected errors when talking to the contract
server.
r )�+check_entitlement_apt_directives_are_uniquer! )�tz)�contract_token�
attachment_dt�machineTokenInfo� contractInfoc s s, � | ]}|� d �dkr|� d �|fV qdS )�type�supportN)�get)r8 rO r) r) r* � <genexpr>� s � ��z$attach_with_token.<locals>.<genexpr>�resourceEntitlementsr[ � affordances�
onlySeriesN)�release�series_codename� machineId)r r, r r r- r# )+�uaclient.entitlementsrT r% r" r �secrets�
add_secretr �get_machine_token_filer �UAContractClient�datetime�now�timezone�utc�add_contract_machiner �get_release_info�seriesr\ �dict�get_distro_infor
� AttachFailureRestrictedReleasera rb r �add�Notice�LIMITED_TO_RELEASEr& �%EntitlementsAPTDirectivesAreNotUnique�delete�get_machine_id� cache_clearr � get_enabled_by_default_servicesr rP r r r �start)r rQ rR r- rT r" �machine_token_filer r �new_machine_token�current_seriesrY �support_resource� only_series�allowed_releaserO �
machine_idr, r) r) r* �attach_with_token� sv
�
�
�
�
��
��
�
�� r� T�cloudc C s0 t �| �}|j|d�}|d }t| ||d� dS )a\
:raise ConnectivityError: On unexpected connectivity issues to contract
server or inability to access identity doc from metadata service.
:raise ContractAPIError: On unexpected errors when talking to the contract
server.
:raise NonAutoAttachImageError: If this cloud type does not have
auto-attach support.
)�instance�
contractToken)rQ rR N)r rh �%get_contract_token_for_cloud_instancer� )r r� rR r �
tokenResponserQ r) r) r* � auto_attach� s
�r� � )� access_onlyr/ r- �
extra_argsr. r� r/ r� c C sf t j| ||||d�}|st�tjj|jd�� |�t �
� �\}}|r/|s/t�tj j|jd�� ||fS )z�
Constructs an entitlement based on the name provided. Passes kwargs onto
the entitlement constructor.
:raise EntitlementNotFoundError: If no entitlement with the given name is
found, then raises this error.
)r r. r/ r� r� )�title) r �entitlement_factoryr? �infor
�
ENABLING_TMPLr4 r� �enabler �ProgressWrapper� ENABLED_TMPL) r r. r� r/ r- r� � entitlementrL rM r) r) r* r= � s �r= )�simulate_with_token�show_allr� r� c C s: |rt j| ||d�\}}||fS t j| |d�}d}||fS )z6
Construct the current Pro status dictionary.
)r rQ r� �r r� r )r' �simulate_statusr )r r� r� r rI r) r) r* r s
� �r �filenamec
C s� g d�}d}d}z t �|�\}}W n' tjy8 } zt�dt|�� t �d�| �t|�� W Y d}~dS d}~ww |r[g }|� d�D ]
}t
� ||�rO|� |� qBt �| d�
|�� dS dS )z�
Helper which gets ubuntu_pro apparmor logs from the kernel from the last
day and writes them to the specified filename.
)�
journalctlz-bz-kz--since=1 day agoz7apparmor=\".*(profile=\"ubuntu_pro_|name=\"ubuntu_pro_)Nz!Failed to collect kernel logs:
%s�{}-error�
)r �subpr
�ProcessExecutionError�LOG�warningr5 �
write_filer4 �split�re�searchr> �join)r� �cmd� apparmor_re� kernel_logs�_rO �
apparmor_logs� kernel_liner) r) r* � _write_apparmor_logs_to_file) s$ $��
��r� � return_codesc
C sr z
t j| �� |d�\}}W n tjy, } zt �d�|�t|�� W Y d}~dS d}~ww t �|d�||�� dS )zCHelper which runs a command and writes output or error to filename.)�rcsr� Nzstdout:
{}
stderr:
{})r r� r� r
r� r� r4 r5 )r� r� r� �out�errrO r) r) r* � _write_command_output_to_fileB s $�� �r� c s, � j pt� jtjjtg� fdd�tjD ��S )Nc 3 s( � | ]}t |tjj�r|� �jV qd S �N)�
issubclassr �repo�RepoEntitlement� repo_file)r8 �entitlement_clsr$ r) r* r] W s � �
�z#_get_state_files.<locals>.<genexpr>) �cfg_pathr �log_filer �ua_file�pathr r �ENTITLEMENT_CLASSESr$ r) r$ r* �_get_state_filesP s �
��r� �
output_dirc
C s� t dd�|�� t d�tj�d�|�� t dd�|�� t dd�|�� t d �d
�d d � tD ���d
�|�� tD ]}t d�|�d�||�ddgd� q9t| dd�\}}t�d�|�t j
|t j d�� t �
� }t�d�|�t �
|�� t| �}t �� r�t�� dt� nt�� g}t|�D ]7\}} zt �t�| ��}
t�tj�|d�|��|
� W q� ty� } zt�d| t | �� W Y d} ~ q�d} ~ ww |t � t d � D ]K} tj� | ��rzt�| �}
W n ty� } zt�d | t | �� W Y d} ~ q�d} ~ ww t �|
�}
t �� �r t�| |
� t�tj�|tj� | ��|
� q�t!d �|�� t"D ]1} tj� | ��rRz t#�$| |� W �q" t�yQ } zt�d | t | �� W Y d} ~ �q"d} ~ ww �q"dS ) zG
Write all relevant Ubuntu Pro logs to the specified directory
zcloud-idz{}/cloud-id.txtz {} statusz{}/livepatch-status.txtzsystemctl list-timers --allz{}/systemd-timers.txtzujournalctl --boot=0 -o short-precise -u cloud-init-local.service -u cloud-init-config.service -u cloud-config.servicez{}/cloud-init-journal.txtz journalctl -o short-precise {}� c S s g | ] }d |v rd� |��qS )z.servicez-u {})r4 )r8 �sr) r) r* r: z s z collect_logs.<locals>.<listcomp>z{}/pro-journal.txtzsystemctl status {}z {}/{}.txtr � )r� Fr� z{}/pro-status.json)�clsz{}/environment_vars.jsonNz
user{}.logz&Failed to collect user log file: %s
%s�*zFailed to load file: %s
%sz{}/apparmor_logs.txtzFailed to copy file: %s
%s)%r� r4 r �
LIVEPATCH_CMDr� � UA_SERVICESr r r� �json�dumpsr �DatetimeAwareJSONEncoder�get_pro_environmentr� �we_are_currently_rootr6 �get_all_user_log_files�USER_LOG_COLLECTED_LIMIT�get_user_log_file� enumerate�redact_sensitive_logs� load_file�osr� rD r� r� r5 �globr �isfile�basenamer� r �shutil�copy)
r r� r0 �
pro_statusr� �env_vars� state_files�user_log_files� log_file_idxr� �contentrO �fr) r) r* � collect_logs_ s�
�
��� ���
������
��� ��
������r� )F)Tr� )Ari r� r� �loggingr� r� r� �typingr r �uaclientr r r r r r r
r r r6 r
r r r' r r r �uaclient.defaultsr r r r �uaclient.filesr r �uaclient.files.state_filesr r r r �get_event_loggerr? � getLogger� replace_top_level_logger_name�__name__r� r� r� �UAConfigrh r+ �EnableByDefaultService�boolrP r5 r� �AutoAttachCloudInstancer� r= r� �intr� r� r� r) r) r) r* �<module> s� (
��
������
�F�����
�V���
�������
�%���
���
�
�