Server : Apache/2.4.52 (Ubuntu) System : Linux webserver 6.8.0-49-generic #49~22.04.1-Ubuntu SMP PREEMPT_DYNAMIC Wed Nov 6 17:42:15 UTC 2 x86_64 User : www-data ( 33) PHP Version : 8.1.2-1ubuntu2.21 Disable Function : NONE Directory : /lib/python3/dist-packages/uaclient/__pycache__/ |
o
���f 9 � @ s\ d dl Z d dlZd dlZd dlZd dlZd dlZd dlZd dlmZm Z d dl
m Z m Z m
Z
mZmZmZmZmZ d dl
mZ d dl
mZmZ d dl
mZ d dl
mZmZmZ d dl m Z d d l m Z m Z m!Z!m"Z" d d
l#m$Z$m%Z% d d l&m'Z'm(Z(m)Z)m*Z* e�+� Z,e�-e�.e/��Z0d Z1d
Z2de
j3dej4de j fdd�Z5 d9de
j3deej6 dej4de j de7f
dd�Z8 d9de
j3de9de7de7ddf
dd �Z: d:de
j3d e j ddfd d �Z;dd!ddd"�de
j3d#e9d$e7d%e9de7d&e ee9 f d'd(�Z<ddd)�de
j3d*e e9 d+e7fd,d-�Zd.e9ddfd/d0�Z= d;d.e9d1e ee> ddfd2d3�Z?de
j3fd4d5�Z@de
j3d6e9fd7d8�ZAdS )<� N)�List�Optional)�api�clouds�config�contract� entitlements� event_logger�
exceptions� livepatch)�log)�messages�secret_manager)�status)�system�timer�util)�AutoAttachCloudInstance)�APPARMOR_PROFILES�CLOUD_BUILD_INFO�DEFAULT_CONFIG_FILE�DEFAULT_LOG_PREFIX)�
machine_token�notices)�AttachmentData�attachment_data_file�machine_id_file�timer_jobs_state_file)zapt-news.servicezesm-cache.servicezua-timer.servicezua-timer.timerzua-auto-attach.pathzua-auto-attach.servicezua-reboot-cmds.servicezubuntu-advantage.service�
�cfg�contract_client� attached_atc C s< ddl m} t�t|d�� tj| d� || � |�� d S )Nr ��update_motd_messages�r! �r )� uaclient.timer.update_messagingr# r �writer � ua_statusr �update_activity_token)r r r! r# � r* �2/usr/lib/python3/dist-packages/uaclient/actions.py�_handle_partial_attach9 s
r, F�services_to_be_enabled�silentc
C sD d}g }g }z'|D ]"}t | |j|j|d�\} }
|| M }| s$|�|j� q tj|jd� q W nJ tjyH } zt�|j� t | ||� | �d } ~ w tj
yY |�|j� d}Y n t yw } zd}|�|j� |�| � W Y d } ~ nd } ~ ww |s�t | ||� t� |� |r�tj
dd� t||�D �d��tjdd� |D �d��d S ) NT)r �name�variantr. )�serviceFc S s, g | ]\}}|t jjt|�t�� d �f�qS ))� error_msg�log_path)r
�UNEXPECTED_ERROR�format�str�pro_log� get_user_or_root_log_file_path)�.0r/ � exceptionr* r* r+ �
<listcomp>r s ����z,_enable_default_services.<locals>.<listcomp>)�failed_servicesc S s g | ]}|t jf�qS r* )r
�!E_ATTACH_FAILURE_DEFAULT_SERVICES)r9 r/ r* r* r+ r; � s ��)�enable_entitlement_by_namer/ r0 �append�event�service_processedr
�ConnectivityError�service_failedr, �UbuntuProError� Exception�services_failed�AttachFailureUnknownError�zip� AttachFailureDefaultServices)
r r- r r! r. �retr< �unexpected_errors�enable_by_default_service�ent_ret�reason�exc�er* r* r+ �_enable_default_servicesF s^
��
� ��
������rQ �token� allow_enable�returnc
C s� ddl m} ddlm} tj�|� t�| �}t �
| �}t j j t j
jd�}|j||d�} t�� j}
| �di ��di �} tdd � | �d
g �D ��} | �d i ��d i ��d
d�}
|
rvt�|
�}|
|
krjtj|j|jd��tjtj j |j|jd� |� | � z|| � W n tj y� } z|� � |�d}~ww tj!�"� | �di ��dt�!| ��}t#� |� |r�t �$| |�%� �}t&| ||||d� t'� t(|d�� || � t)�*� dS )aC
Common functionality to take a token and attach via contract backend
:raise ConnectivityError: On unexpected connectivity issues to contract
server or inability to access identity doc from metadata service.
:raise ContractAPIError: On unexpected errors when talking to the contract
server.
r )�+check_entitlement_apt_directives_are_uniquer" )�tz)�contract_token�
attachment_dt�machineTokenInfo� contractInfoc s s, � | ]}|� d �dkr|� d �|fV qdS )�type�supportN)�get)r9 rP r* r* r+ � <genexpr>� s � ��z$attach_with_token.<locals>.<genexpr>�resourceEntitlementsr\ � affordances�
onlySeriesN)�release�series_codename� machineId)r r- r r! r. r$ )+�uaclient.entitlementsrU r& r# r �secrets�
add_secretr �get_machine_token_filer �UAContractClient�datetime�now�timezone�utc�add_contract_machiner �get_release_info�seriesr] �dict�get_distro_infor
� AttachFailureRestrictedReleaserb rc r �add�Notice�LIMITED_TO_RELEASEr' �%EntitlementsAPTDirectivesAreNotUnique�delete�get_machine_id� cache_clearr � get_enabled_by_default_servicesr rQ r r r �start)r rR rS r. rU r# �machine_token_filer r! �new_machine_token�current_seriesrZ �support_resource� only_series�allowed_releaserP �
machine_idr- r* r* r+ �attach_with_token� sv
�
�
�
�
��
��
�
�� r� T�cloudc C s0 t �| �}|j|d�}|d }t| ||d� dS )a\
:raise ConnectivityError: On unexpected connectivity issues to contract
server or inability to access identity doc from metadata service.
:raise ContractAPIError: On unexpected errors when talking to the contract
server.
:raise NonAutoAttachImageError: If this cloud type does not have
auto-attach support.
)�instance�
contractToken)rR rS N)r ri �%get_contract_token_for_cloud_instancer� )r r� rS r �
tokenResponserR r* r* r+ � auto_attach� s
�r� � )� access_onlyr0 r. �
extra_argsr/ r� r0 r� c C sf t j| ||||d�}|st�tjj|jd�� |�t �
� �\}}|r/|s/t�tj j|jd�� ||fS )z�
Constructs an entitlement based on the name provided. Passes kwargs onto
the entitlement constructor.
:raise EntitlementNotFoundError: If no entitlement with the given name is
found, then raises this error.
)r r/ r0 r� r� )�title) r �entitlement_factoryr@ �infor
�
ENABLING_TMPLr5 r� �enabler �ProgressWrapper� ENABLED_TMPL) r r/ r� r0 r. r� � entitlementrM rN r* r* r+ r> � s �r> )�simulate_with_token�show_allr� r� c C s: |rt j| ||d�\}}||fS t j| |d�}d}||fS )z6
Construct the current Pro status dictionary.
)r rR r� �r r� r )r( �simulate_statusr )r r� r� r rJ r* r* r+ r s
� �r �filenamec
C s� g d�}d}d}z t �|�\}}W n' tjy8 } zt�dt|�� t �d�| �t|�� W Y d}~dS d}~ww |r[g }|� d�D ]
}t
� ||�rO|� |� qBt �| d�
|�� dS dS )z�
Helper which gets ubuntu_pro apparmor logs from the kernel from the last
day and writes them to the specified filename.
)�
journalctlz-bz-kz--since=1 day agoz7apparmor=\".*(profile=\"ubuntu_pro_|name=\"ubuntu_pro_)Nz!Failed to collect kernel logs:
%s�{}-error�
)r �subpr
�ProcessExecutionError�LOG�warningr6 �
write_filer5 �split�re�searchr? �join)r� �cmd� apparmor_re� kernel_logs�_rP �
apparmor_logs� kernel_liner* r* r+ � _write_apparmor_logs_to_file* s$ $��
��r� � return_codesc
C sj z
t j| �� |d�\}}W n tjy, } zt �d�|�t|�� W Y d}~dS d}~ww t �||� dS )zCHelper which runs a command and writes output or error to filename.)�rcsr� N)r r� r� r
r� r� r5 r6 )r� r� r� �outr� rP r* r* r+ � _write_command_output_to_fileC s $��r� c s, � j pt� jtjjtg� fdd�tjD ��S )Nc 3 s( � | ]}t |tjj�r|� �jV qd S �N)�
issubclassr �repo�RepoEntitlement� repo_file)r9 �entitlement_clsr% r* r+ r^ V s � �
�z#_get_state_files.<locals>.<genexpr>) �cfg_pathr �log_filer �ua_file�pathr r �ENTITLEMENT_CLASSESr% r* r% r+ �_get_state_filesO s �
��r� �
output_dirc
C s� t dd�|�� t d�tj�d�|�� t dd�|�� t dd�|�� t d �d
�d d � tD ���d
�|�� tD ]}t d�|�d�||�ddgd� q9t| dd�\}}t�d�|�t j
|t j d�� t �
� }t�d�|�t �
|�� t| �}t �� r�t�� dt� nt�� g}t|�D ]7\}} zt �t�| ��}
t�tj�|d�|��|
� W q� ty� } zt�d| t | �� W Y d} ~ q�d} ~ ww |t � t d � D ]K} tj� | ��rzt�| �}
W n ty� } zt�d | t | �� W Y d} ~ q�d} ~ ww t �|
�}
t �� �r t�| |
� t�tj�|tj� | ��|
� q�t!d �|�� t"D ]1} tj� | ��rRz t#�$| |� W �q" t�yQ } zt�d | t | �� W Y d} ~ �q"d} ~ ww �q"dS ) zG
Write all relevant Ubuntu Pro logs to the specified directory
zcloud-idz{}/cloud-id.txtz {} statusz{}/livepatch-status.txtzsystemctl list-timers --allz{}/systemd-timers.txtzujournalctl --boot=0 -o short-precise -u cloud-init-local.service -u cloud-init-config.service -u cloud-config.servicez{}/cloud-init-journal.txtz journalctl -o short-precise {}� c S s g | ] }d |v rd� |��qS )z.servicez-u {})r5 )r9 �sr* r* r+ r; y s z collect_logs.<locals>.<listcomp>z{}/pro-journal.txtzsystemctl status {}z {}/{}.txtr � )r� Fr� z{}/pro-status.json)�clsz{}/environment_vars.jsonNz
user{}.logz&Failed to collect user log file: %s
%s�*zFailed to load file: %s
%sz{}/apparmor_logs.txtzFailed to copy file: %s
%s)%r� r5 r �
LIVEPATCH_CMDr� � UA_SERVICESr r r� �json�dumpsr �DatetimeAwareJSONEncoder�get_pro_environmentr� �we_are_currently_rootr7 �get_all_user_log_files�USER_LOG_COLLECTED_LIMIT�get_user_log_file� enumerate�redact_sensitive_logs� load_file�osr� rE r� r� r6 �globr �isfile�basenamer� r �shutil�copy)
r r� r1 �
pro_statusr� �env_vars� state_files�user_log_files� log_file_idxr� �contentrP �fr* r* r+ � collect_logs^ s�
�
��� ���
������
��� ��
������r� )F)Tr� )Brj r� r� �loggingr� r� r� �typingr r �uaclientr r r r r r r
r r r7 r
r r r( r r r �uaclient.cloudsr �uaclient.defaultsr r r r �uaclient.filesr r �uaclient.files.state_filesr r r r �get_event_loggerr@ � getLogger� replace_top_level_logger_name�__name__r� r� r� �UAConfigri r, �EnableByDefaultService�boolrQ r6 r� r� r> r� �intr� r� r� r* r* r* r+ �<module> s� (
��
������
�F�����
�V���
�������
�%���
���
�
�