o
    ÙKÕi�j  ã                   @   sÚ   d dl Z d dlZd dlZd dlZd dlmZ d dlmZmZm	Z	m
Z
mZmZ d dlmZmZmZmZmZmZmZmZmZmZ d dlmZ d dlmZmZmZ d dlmZ e  ¡ Z!e "e #e$¡¡Z%dZ&G d	d
„ d
ej'ƒZ(dS )é    N)Úexists)ÚAnyÚDictÚListÚOptionalÚTupleÚUnion)
ÚapiÚaptÚcontractÚevent_loggerÚ
exceptionsÚhttpÚmessagesÚsecret_managerÚsystemÚutil)Úbase)ÚApplicationStatusÚCanDisableFailureÚCanDisableFailureReason)Ústatus_cache_filez<^linux-image-([\d]+[.-][\d]+[.-][\d]+-[\d]+-[A-Za-z0-9_-]+)$c                       s^  e Zd ZdZdZdZdZdZdZdZ	dZ
edeeedf fdd	„ƒZedefd
d„ƒZedefdd„ƒZedee fdd„ƒZedee fdd„ƒZedee fdd„ƒZedee fdd„ƒZdefdd„Zdefdd„Zeejdefdd„ƒƒZ	dFdedeeee f f‡ fdd„Z defdd „Z!d!e"j#defd"d#„Z$defd$d%„Z%d!e"j#fd&d'„Z&d!e"j#fd(d)„Z'd!e"j#fd*d+„Z(d,d-„ Z)d.d/„ Z*dee+ee,j- f fd0d1„Z.d2d3„ Z/		dGd4e0ee1f d5e0ee1f d6ed7edef
‡ fd8d9„Z2		dHd!e"j#d:eee  d;eddfd<d=„Z3d!e"j#ddfd>d?„Z4	dId@eee  fdAdB„Z5	dJd!e"j#dCefdDdE„Z6‡  Z7S )KÚRepoEntitlementz1/etc/apt/sources.list.d/ubuntu-{name}.{extension}z$/etc/apt/preferences.d/ubuntu-{name}z	{}/ubuntuNFTÚreturnc                 C   ó   d S ©N© ©Úselfr   r   ú</usr/lib/python3/dist-packages/uaclient/entitlements/repo.pyÚrepo_pin_priority;   s   z!RepoEntitlement.repo_pin_priorityc                 C   s.   d}t  ¡ j}|tjv rd}| jj| j|d�S )NÚsourcesÚlist)ÚnameÚ	extension)r   Úget_release_infoÚseriesr
   ÚSERIES_NOT_USING_DEB822Úrepo_file_tmplÚformatr#   )r   r$   r&   r   r   r   Ú	repo_file?   s
   

zRepoEntitlement.repo_filec                 C   s
   | j d S )Nz {})Úrepo_url_tmplr   r   r   r   Úrepo_policy_check_tmplG   s   
z&RepoEntitlement.repo_policy_check_tmplc                 C   s<   g }| j  di ¡}|r| di ¡}t | dg ¡¡}|}|S )zdebs to install on enablementÚentitlementÚ
directivesÚadditionalPackages)Úentitlement_cfgÚgetÚcopy)r   Úpackagesr-   r.   Úadditional_packagesr   r   r   r3   K   s   
ÿzRepoEntitlement.packagesc                 C   ó   | j  di ¡ di ¡ d¡S )Nr-   r.   ÚaptURL©r0   r1   r   r   r   r   Úapt_url\   ó   ýzRepoEntitlement.apt_urlc                 C   s   | j  di ¡ di ¡ dg ¡S )Nr-   r.   ÚaptSnapshotURLsr7   r   r   r   r   Úsnapshot_urlsd   s   ýzRepoEntitlement.snapshot_urlsc                 C   r5   )Nr-   r.   Úsuitesr7   r   r   r   r   Ú
apt_suitesl   r9   zRepoEntitlement.apt_suitesc                 C   sz   | j  d¡}|s;| jjd }| j d  di ¡}| d¡s0t | j¡}| || j¡}|r0| d¡}|s;|}t	 
d| j¡ |S )NÚresourceTokenÚmachineTokenr-   ÚobligationsÚenableByDefaultzWNo resourceToken present in contract for service %s. Using machine token as credentials)r0   r1   Úmachine_token_fileÚmachine_tokenr   ÚUAContractClientÚcfgÚget_resource_machine_accessr#   ÚLOGÚwarningÚtitle)r   ÚtokenrC   r@   ÚclientÚmachine_accessr   r   r   Úget_resource_tokent   s,   ÿ
ÿ
ÿ
ýz"RepoEntitlement.get_resource_tokenc                 C   s    t jt| jƒd�}t |¡ |S )z%Check if system needs to be rebooted.)Úinstalled_pkgs)r   Úshould_rebootÚsetr3   ÚeventÚneeds_reboot)r   Úreboot_requiredr   r   r   Ú_check_for_reboot�   s
   ÿ
z!RepoEntitlement._check_for_rebootc                 C   r   r   r   r   r   r   r   Úrepo_key_file˜   s   zRepoEntitlement.repo_key_fileÚignore_dependent_servicesc                    sV   t ƒ j|d�\}}|du r||fS | js'| jr'dttjtjj	| j
| j
d�ƒfS ||fS )N)rV   F©Úentitlement_namerI   )ÚsuperÚcan_disableÚoriginÚpurger   r   ÚNO_PURGE_WITHOUT_ORIGINr   ÚREPO_PURGE_FAIL_NO_ORIGINr)   rI   )r   rV   ÚresultÚreason©Ú	__class__r   r   rZ   �   s   
ÿÿþþ
zRepoEntitlement.can_disablec                 C   s*   | j d uot| j ƒdk}| js|sdS dS )Nr   é   é   )r3   ÚlenÚaccess_only)r   Úwill_installr   r   r   Úenable_steps³   s   
zRepoEntitlement.enable_stepsÚprogressc                 C   sj   |  tjj| jd�¡ |  |¡ | jr.| jr.t| j	ƒdkr,| 
dtjjd | j	¡d�¡ dS |  |¡ dS )z¢Enable specific entitlement.

        @return: True on success, False otherwise.
        @raises: UbuntuProError on failure to install suggested packages
        ©Úservicer   Úinfoú ©r3   T)ri   r   ÚCONFIGURING_APT_ACCESSr)   rI   Úsetup_apt_configÚsupports_access_onlyrf   re   r3   ÚemitÚSKIPPING_INSTALLING_PACKAGESÚjoinÚinstall_packages)r   ri   r   r   r   Ú_perform_enable½   s   ÿ

ÿþ
ÿzRepoEntitlement._perform_enablec                 C   s   | j sdS dS )Nrc   rd   )r\   r   r   r   r   Údisable_stepsÔ   s   zRepoEntitlement.disable_stepsc                 C   sî   | j rL| jrL| dtj¡ | dd¡ t | j¡}|  ||¡s!dS g }g }|D ]}tj|| jd�}|r=| 	|t
|ƒf¡ q'| 	|¡ q'|  |||¡sLdS t| dƒrU|  ¡  |  |¡ | j ru| jru| tjj| jd�¡ |  |¡ |  |¡ dS )Nrl   Ú F)Úexclude_originÚremove_packages©rI   T)r\   r[   rr   r   ÚPURGE_EXPERIMENTALr
   Ú get_installed_packages_by_originÚpurge_kernel_checkÚget_remote_versions_for_packageÚappendÚmaxÚprompt_for_purgeÚhasattrrz   Úremove_apt_configri   ÚPURGING_PACKAGESr)   rI   Úexecute_reinstallÚexecute_removal)r   ri   Úrepo_origin_packagesÚpackages_to_reinstallÚpackages_to_removeÚpackageÚalternativesr   r   r   Ú_perform_disableÝ   sB   ÿÿ
ÿÿ

ÿ

z RepoEntitlement._perform_disablec                    sÜ   g ‰ |D ]}t  t|j¡}|rˆ  | d¡¡ qˆ rl| ¡ s"t ¡ ‚| 	dt
jj| jd�¡ | 	dd ˆ ¡¡ t ¡ j}| 	dt
jj|d�¡ t ¡ }‡ fdd„|D ƒ}|s_| 	dt
j¡ dS | 	d	tjd
t
jifg¡ dS )a*  
        Checks if the purge operation involves a kernel.

        When package called 'linux-image-*' is in the package list, warn the
        user that a kernel is being removed. Then, show the user what the
        current kernel is.

        If the current kernel is to be removed, and there are no other valid
        Ubuntu Kernels installed in the system, return False to abort the
        operation.

        If there is another Ubuntu kernel - besides the one installed - then
        prompt the user for confirmation before proceeding.
        é   rl   rj   rm   )Úkernel_versionc                    s   g | ]}|ˆ vr|‘qS r   r   )Ú.0Úversion©Úlinux_image_versionsr   r   Ú
<listcomp>4  s
    þz6RepoEntitlement.purge_kernel_check.<locals>.<listcomp>FÚmessage_operationÚmsgT)ÚreÚsearchÚRE_KERNEL_PKGr#   r€   ÚgroupÚis_interactiver   Ú#NonInteractiveKernelPurgeDisallowedrr   r   ÚPURGE_KERNEL_REMOVALr)   rI   rt   r   Úget_kernel_infoÚuname_releaseÚPURGE_CURRENT_KERNELÚget_installed_ubuntu_kernelsÚPURGE_NO_ALTERNATIVE_KERNELr   Úprompt_for_confirmationÚPURGE_KERNEL_CONFIRMATION)r   Úpackage_listri   r‹   ÚmÚcurrent_kernelÚinstalled_kernelsÚalternative_kernelsr   r’   r   r~   	  sH   €þ
ÿþ
þþÿþ
z"RepoEntitlement.purge_kernel_checkc                 C   sŠ   d}|r|  dtj¡ |  dt dd„ |D ƒ¡¡ d}|r4|  dtj¡ |  dt dd„ |D ƒ¡¡ d}|rC|  dtjdtjifg¡ dS )	NFrl   c                 S   s   g | ]}|j ‘qS r   ©r#   ©r�   r‹   r   r   r   r”   V  s    z4RepoEntitlement.prompt_for_purge.<locals>.<listcomp>Tc                 S   s   g | ]\}}|j ‘qS r   rª   )r�   r‹   Ú_r   r   r   r”   `  s    r•   r–   )rr   r   ÚWARN_PACKAGES_REMOVALr   Úcreate_package_list_strÚWARN_PACKAGES_REINSTALLr£   ÚPROCEED_YES_NO)r   rŠ   r‰   ri   Úpromptr   r   r   r‚   J  s8   ÿþÿþþÿþ	z RepoEntitlement.prompt_for_purgec                    s<   t  ¡ ‰ ‡ fdd„|D ƒ}|rt  |tjj|d�¡ d S d S )Nc                    s   g | ]
}|j ˆ v r|j ‘qS r   rª   r«   ©Úinstalled_packagesr   r   r”   w  s
    
þz3RepoEntitlement.execute_removal.<locals>.<listcomp>rn   )r
   Úget_installed_packages_namesÚpurge_packagesr   ÚUNINSTALLING_PACKAGES_FAILEDr)   )r   rŠ   Ú	to_remover   r²   r   r‡   q  s   
þÿþÿzRepoEntitlement.execute_removalc                    s0   t  ¡ ‰ ‡ fdd„|D ƒ}|rt  |¡ d S d S )Nc                    s*   g | ]\}}|j ˆ v rd  |j |j¡‘qS )z{}={})r#   r)   Úver_str)r�   r‹   r‘   r²   r   r   r”   ‰  s
    
þz5RepoEntitlement.execute_reinstall.<locals>.<listcomp>)r
   r´   Úreinstall_packages)r   r‰   Úto_reinstallr   r²   r   r†   „  s   
þÿz!RepoEntitlement.execute_reinstallc           
      C   s   t jtjj| jd�f}| j}| di ¡ di ¡}| d¡}|s*t jtjj| jd�fS | d¡}|s<t jtj	j| jd�fS t
jtjd�}|D ]}t | j ||¡|¡}|rat jtjj| jd�f} nqE| jr~| jD ]}	t
 |	¡s}t jtjj| j|	d�f  S qh|S )Nr{   r-   r.   r6   r<   )Ú	error_msg)rk   r‹   )r   ÚDISABLEDr   ÚSERVICE_NOT_CONFIGUREDr)   rI   r0   r1   ÚNO_APT_URL_FOR_SERVICEÚNO_SUITES_FOR_SERVICEr
   Úget_apt_cache_policyÚAPT_POLICY_FAILEDr—   r˜   r,   ÚENABLEDÚSERVICE_IS_ACTIVEÚcheck_packages_are_installedr3   Úis_installedÚ SERVICE_DISABLED_MISSING_PACKAGEr#   )
r   Úcurrent_statusr0   r.   Úrepo_urlÚrepo_suitesÚpolicyÚsuiteÚservice_matchr‹   r   r   r   Úapplication_status‘  sL   þÿ
þ
þÿþû

ÿþÿz"RepoEntitlement.application_statusc                 C   sF   | j }tdd„ t |¡ ¡  d¡D ƒƒrdS |sdS t|t |¡v ƒS )zÞCheck if apt url delta should be applied.

        :param apt_url: string containing the apt url to be used.

        :return: False if apt url is already found on the source file.
                 True otherwise.
        c                 s   s   � | ]}|  d ¡V  qdS )ú#N)Ú
startswith)r�   Úliner   r   r   Ú	<genexpr>Í  s
   € ÿ
ÿz<RepoEntitlement._check_apt_url_is_applied.<locals>.<genexpr>Ú
FT)r*   Úallr   Ú	load_fileÚstripÚsplitÚbool)r   r8   Úapt_filer   r   r   Ú_check_apt_url_is_appliedÂ  s   þz)RepoEntitlement._check_apt_url_is_appliedÚorig_accessÚdeltasÚallow_enableÚverbosec                    s@  t ƒ j||||d�rdS | di ¡}| di ¡}| d¡}| d¡}t ¡ }	|r/|	r/|  ¡ }
n|  ¡ \}
}|
tjkr<dS |  	|¡s~t
 d| j|¡ |rVt tjj| jd	�¡ | di ¡}| di ¡ d¡}|rpt | j|| j¡ |  t ¡ ¡ |  t ¡ ¡ |ržt
 d
|¡ |r•t tjjd |¡d�¡ | jt ¡ |d� dS )ak  Process any contract access deltas for this entitlement.

        :param orig_access: Dictionary containing the original
            resourceEntitlement access details.
        :param deltas: Dictionary which contains only the changed access keys
        and values.
        :param allow_enable: Boolean set True if allowed to perform the enable
            operation. When False, a message will be logged to inform the user
            about the recommended enabled service.
        :param verbose: If True, display output to stdout

        :return: True when delta operations are processed; False when noop.
        )rÝ   Tr-   r.   r6   r/   Fz.New aptURL, updating %s apt sources list to %srj   z%New additionalPackages, installing %rú, rn   )r¥   )rY   Úprocess_contract_deltasr1   r   ÚreadÚ"_check_application_status_on_cacherÍ   r   r¼   rÙ   rG   rl   r#   rQ   r   ÚREPO_UPDATING_APT_SOURCESr)   r
   Úremove_auth_apt_repor*   r;   r„   r	   ÚProgressWrapperrp   Ú REPO_REFRESH_INSTALLING_PACKAGESrt   ru   )r   rÚ   rÛ   rÜ   rÝ   Údelta_entitlementÚdelta_directivesÚdelta_apt_urlÚdelta_packagesÚstatus_cacherÍ   r¬   Úorig_entitlementÚold_urlra   r   r   rß   Ü  s\   ÿ




ýÿÿ
ÿÿÿÿz'RepoEntitlement.process_contract_deltasr¥   Úcleanup_on_failurec                 C   sÞ   |s| j }|s	dS | d| j d¡¡ z|  |¡ W n tjy,   |r+|  t 	¡ ¡ ‚ w | 
tjj| jd�¡ | jrDddi}g d¢}nd}g }ztj|||d� W dS  tjyn   |rmt d	 | j¡¡ |  t 	¡ ¡ ‚ w )
zïInstall contract recommended packages for the entitlement.

        :param package_list: Optional package list to use instead of
            self.packages.
        :param cleanup_on_failure: Cleanup apt files if apt install fails.
        Nr•   Úpre_installr{   ÚDEBIAN_FRONTENDÚnoninteractive)z--allow-downgradesz$-o Dpkg::Options::="--force-confdef"z$-o Dpkg::Options::="--force-confold")r3   Úapt_optionsÚoverride_env_varsz.Apt install failed, removing apt config for {})r3   rr   Ú	messagingr1   Ú_update_sources_listr   ÚUbuntuProErrorr„   r	   rä   ri   r   ÚINSTALLING_SERVICE_PACKAGESr)   rI   Úapt_noninteractiver
   Úrun_apt_install_commandrG   rl   r#   )r   ri   r¥   rí   rò   rñ   r   r   r   ru   +  sH   ýÿ
ýÿÿøz RepoEntitlement.install_packagesc              	   C   sH  d}d}d}| j js| j jr't d| j jtj¡}t d| j jtj¡}tjj	}n | j j
s/| j jrGt d| j j
tj¡}t d| j jtj¡}tjj}tj|||d� | j}| j}|d  di ¡}|  ¡ }| d¡}	|	sotj| jd�‚| d	¡}
|
s}tj| jd�‚| d
¡}|s‹tj| jd�‚| jr¬| jsštj| j| jd�‚| jj| jd�}t ||
| j| j¡ g }ttjƒs¸|  d¡ ttj!ƒsÂ|  d¡ |rë| "dt#j$jd %|¡d�¡ ztj&|d� W n tj'yê   |  (t) *¡ ¡ ‚ w t +|| j, |
¡||| j-| j.| j/¡ | 0t#j1j| jd�¡ zt 2|¡ W dS  tj'�y#   | j(t) *¡ dd� ‚ w )zÕSetup apt config based on the resourceToken and directives.
        Also sets up apt proxy if necessary.

        :raise UbuntuProError: on failure to setup any aspect of this apt
           configuration
        Nr   Úhttps)Ú
http_proxyÚhttps_proxyÚproxy_scoper-   r.   ÚaptKey©rX   r6   r<   rW   rª   zapt-transport-httpszca-certificatesrl   rÞ   rn   F)Úrun_apt_update)3rE   Úglobal_apt_http_proxyÚglobal_apt_https_proxyr   Úvalidate_proxyÚPROXY_VALIDATION_APT_HTTP_URLÚPROXY_VALIDATION_APT_HTTPS_URLr
   ÚAptProxyScopeÚGLOBALÚua_apt_http_proxyÚua_apt_https_proxyÚUACLIENTÚsetup_apt_proxyr*   r0   r1   rM   r   ÚRepoNoAptKeyr#   ÚMissingAptURLDirectiveÚRepoNoSuitesr    r[   ÚRepoPinFailNoOriginrI   Úrepo_pref_file_tmplr)   Úadd_ppa_pinningr   ÚAPT_METHOD_HTTPS_FILEr€   ÚCA_CERTIFICATES_FILErr   r   ÚINSTALLING_PACKAGESrt   rø   rõ   r„   r	   rä   Úadd_auth_apt_repor+   rU   r;   Úcheck_updates_pocketri   ÚAPT_UPDATING_LISTÚupdate_sources_list)r   ri   rú   rû   ÚscopeÚrepo_filenameÚresource_cfgr.   rJ   rý   rÈ   rÉ   Úrepo_pref_fileÚprerequisite_pkgsr   r   r   rp   f  s´   ýý
ýýÿ


þü



ÿþþ
ùþz RepoEntitlement.setup_apt_configÚoverride_snapshot_urlsc                 C   s¤   |d ur|}n| j }|  ¡ }| j di ¡ di ¡ d¡}| j |¡}z	| d¡\}}W n ty8   d}|}Y nw tj	 
|¡ |g| D ]}|rOt |||¡ qDd S )Nr-   r.   r6   ú:Úbearer)r;   rM   r0   r1   r+   r)   rÖ   Ú
ValueErrorr   ÚsecretsÚ
add_secretr
   Úadd_apt_auth_conf_entry)r   r  r;   ÚcredentialsrÈ   ÚusernameÚpasswordÚurlr   r   r   Úupdate_apt_authÍ  s*   ýþ€þzRepoEntitlement.update_apt_authrÿ   c           	      C   sÒ   t  ¡ j}| j}| j ¡ | j  di ¡}| di ¡}| d¡}|s(tj	| jd�‚| j
 |¡}| tjj| jd�¡ t ||| j| j¡ t ||¡ | jrY| jj| jd�}t  |¡ |rg| tj¡ t ¡  dS dS )zªRemove any repository apt configuration files.

        :param run_apt_update: If after removing the apt update
            command after removing the apt files.
        r-   r.   r6   rþ   r{   rª   N)r   r%   r&   r*   rB   Úentitlementsr#   r1   r   r  r+   r)   ri   r   ÚREMOVING_APT_CONFIGURATIONrI   r
   rã   r;   rU   Úremove_apt_list_filesr    r  Úensure_file_absentÚAPT_UPDATING_LISTSÚrun_apt_update_command)	r   ri   rÿ   r&   r  r-   Úaccess_directivesrÈ   r  r   r   r   r„   å  s0   

ÿ
ÿÿ
þz!RepoEntitlement.remove_apt_config)F)FT)NTr   )T)8Ú__name__Ú
__module__Ú__qualname__r(   r  r+   r[   r÷   rÄ   Úsupports_purger  Úpropertyr   ÚintÚstrr    r*   r,   r   r3   r   r8   r;   r=   rM   r×   rT   ÚabcÚabstractmethodrU   r   r   rZ   rh   r	   rä   rv   rw   r�   r~   r‚   r‡   r†   r   r   ÚNamedMessagerÍ   rÙ   r   r   rß   ru   rp   r(  r„   Ú__classcell__r   r   ra   r   r   $   s¦    ÿÿþ
	,A
ü'
þ1û
þ
ýüûúRüþ
ýü
û;hÿ

ÿýþýr   ))r7  r2   Úloggingr—   Úos.pathr   Útypingr   r   r   r   r   r   Úuaclientr	   r
   r   r   r   r   r   r   r   r   Úuaclient.entitlementsr   Ú(uaclient.entitlements.entitlement_statusr   r   r   Úuaclient.files.state_filesr   Úget_event_loggerrQ   Ú	getLoggerÚreplace_top_level_logger_namer0  rG   r™   ÚUAEntitlementr   r   r   r   r   Ú<module>   s     0