o Kil@s'ddlZddlmZmZddlmZmZmZddlm Z ej j dus*dej j vr.eZ nedddd Z Gd d d ZeZGd d d Ze dZe dZejdejZejdejZejdejZe dZe dZe dZe dZe dZe dZe dZ e dZ!e dZ"e dZ#e dZ$e dZ%e dZ&e d Z'e d!Z(e d"Z)d#ee d$Z*e d%Z+e d&Z,e d'Z-e d(Z.e d)Z/e d*Z0e d+Z1e d,Z2e d-Z3e d.Z4e d/Z5e d0Z6e d1Z7e d2Z8e d3Z9e d4Z:e d5Z;e d6Ze d9Z?ed:d;Z@edjCe jDd?ZEe d@ZFe dAjCe jGd?ZHe dBZIe dCZJe dDZKe dEZLe dFZMe dGZNe dHZOe dIZPe dJZQe dKZRe dLZSe dMZTe dNZUe dOZVe dPZWe dQZXe dRZYe dSjCe jZej[ejdTZ\e dUZ]e dVZ^edWd;Z_e dXZ`e dYZae dZZbe d[Zce d\Zde d]Zee d^Zfe d_Zge d`Zhe daZie dbZje dcZke ddZle deZme dfZne dgZoe dhZpe diZqe djZre dkZse dlZte dmZue dnZve doZwe dpZxe dqeZye drZze dsZ{e dtZ|e duZ}e dvZ~e dwZe dxZe dyZe dzZe d{Ze d|Ze d}Ze d~Ze djCe jd?Ze dZe djCe jDd?Ze dZe dZe dZe dZe dZe dZe dZe dZe dZee dZee dZee dZee dZee dZee dZedd;Zedd;Ze dZe dZee dZe djCej[ejdZe djCej[ejdZe djCej[ejdZe djCej[ejdZe dZe dZe dZe dZe dZe dZe dZe dZe dZe dZe dZe dZe dZe dZe dZe dZe dZe dZe dZe djCe jd?Ze dZe dZe dZe dZe djCe jDd?Ze dZe dZedd;Zedd;Zedd;Ze dZe dZe deZe deZe dZe dZe dZe dZe dZe d¡Ze dáZe dġZedd;Ze dơZedd;Ze dȡZe dɡjCe jd?Ze dʡZe dˡZe d̡Ze d͡Ze dΡZe dϡZe dСZe dѡZe dҡZe dӡZe dԡZe dաZe d֡Ze dסZe dءZe d١Ze dڡZe dۡZeZeZe dܡZe dݡZe dޡZdZe dZe dZe dZe dZe dZe dZe dZe dZe dZe dZe dZe dZe dZe dZe dZe dZe dZe dZe dZe dZe dZe dZe dZe dZe dZe dZe dZe dZe djCe jd?Z e dZ e dZ e dZ e dZ e dZe dZe dZe dZe dZe dZe dZe dZe d Ze d Ze d jCe jDd?Ze d Ze d Ze dZe dZe dZe dZe dZe dZ e djCej[ejdZ!e dZ"e dZ#e dZ$e dZ%e dZ&e dZ'e dZ(e dZ)e dZ*e dZ+e dZ,e d Z-e d!Z.e d"Z/e d#Z0e d$Z1e d%Z2e d&Z3e d'Z4e d(Z5e d)Z6e d*Z7e d+Z8e d,Z9e d-Z:e d.Z;e d/Ze d2Z?e d3Z@e d4ZAe d5ZBe d6ZCe d7ZDe d8ZEe d9ZFe d:ZGe d;ZHe d<ZIe d=ZJe d>ZKe d?ZLe d@ZMe dAZNe dBZOe dCZPe dDZQe dEZRe dFZSe dGZTe dHZUe dIZVe dJZWe dKZXe dLZYe dMZZe dNZ[e dOZ\e dPZ]e dQZ^e dRjCe j_d?Z`e dSjCe jad?Zbe dTZce dUZde dVZee dWZfe dXZge dYZhe dZZie d[Zje d\jCe jkd?Zle d]jCe jmd?Zne d^jCe jkd?Zoe d_jCe jkd?Zpe dZqe d`Zre dajCe jsd?Zte dbZue dcZve ddZwe dZxe deZye dfjCe jsd?Zze dgZ{e dhZ|e diZ}e djZ~e dkZe dljCe jd?Ze dmZe dnjCe jd?Ze doZe dpeZe dqeZe dreZe dseZe dtZe duZe dvZe dwZe dxZe dyZe dzZe d{Ze d|d#eZe d}Ze d~Ze djCe jd?Ze dZe dZe dZe deZe dZe dZe djCe je je jdZe dZe dZe dZe djCe jd?Ze dZe djCe jd?Ze dZe dZe dZe dZe dZe dZe dZe dZe dZe dZe dZe dZe dZe dZe dZe dZe dZe djCej[ejdZe dZe dZe dZe djCe jd?Ze dZe dZe djCe jd?ZGdddZGdddZÐeddZĐeÐde dZŐeÐde dZƐeÐde dZǐeÐde dZȐeÐde ddZɐeÐde ddZʐeÐde ddZːeÐde ddZ̐eÐde dZ͐eÐde dd#eoZΐeÐde d¡ZϐeÐde dġZАeÐde dơZѐeÐde dȡZҐeÐde dʡZӐeÐde d̡ZԐeÐde dΡZՐeÐde dСZ֐eÐde dҡZאeÐde dԡZؐeÐde d֡jCe jDd?ZِeÐde dءZڐeÐde dڡZېeÐde dܡZܐeÐde dޡZݐeÐde dZސeÐde dZߐeÐde dZede djCe jd?Zede dZeÐde djCe jd?Zede dwZeÐde dZeÐde dZeÐde dZede dZede dZeÐde dZede dZede dZede dZede ddZeÐde djCe jd?dZeÐde djCe jd?dZede dZeÐde dZede d Zed e d Zed e d ZeÐde dZede dZede dZede dZede dZeÐde dZeÐde dZede dZede dZed e d!ZeÐd"e d#Zed$e+Zed%e d&ZeÐd'e d(Zed)e;d*ejZeÐd+e;d,ZeÐd-e;d.Z ed/e<d*ejZ eÐd0e<d1Z eÐd2e d3Z eÐd4e d5Z eÐd6e d7ZeÐd8e d9ZeÐd:e d;ZeÐde d?Zed@e dAZeÐdBe dCZeÐdDe dEZeÐdFe dGZedHe dIZeÐdJe dKZedLe dMZeÐdNe dOZeÐdPe dQZeÐdRe dSZeÐdTe dUdZedVe dWjCe jDd?ZeÐdXe dYZedZe d[jCe jDd?Z eÐd\e d]jCe jDd?Z!eÐd^e d_jCe jDd?Z"eÐd`e dajCe jDd?Z#edbe dcjCe jDd?Z$edde deZ%edfe dgZ&edhe diZ'eÐdje dkZ(eÐdle dmZ)edne dojCe jd?Z*eÐdpe dqjCe jd?Z+eÐdrej,d#e+j,Z-eÐdse dtZ.edue dvZ/eÐdwe dxZ0eÐdye dzZ1ed{e d|Z2ed}e d~Z3eÐde dZ4eÐde dZ5eÐde dd#eeZ6eÐde dZ7eÐde dZ8eÐde dZ9eÐde dZ:eÐde ddZ;eÐde dZ<eÐde djCe j=d?Z>eÐde dZ?ede dZ@ede djCe jd?ZAeÐde djCe jd?ZBede dZCede dZDeÐde ddZEeÐde ddZFeÐde dZGeÐde dZHeÐde dZIeÐde dZJeÐde dZKeÐde dZLeÐde dZMeÐde dZNede dZOede dZPeÐde dZQeÐde dZReÐde dZSeÐde dZTeÐde dZUeÐdd#e d¡ZVeÐde dġZWeÐdd#e dơZXede dȡZYede dʡZZede d̡Z[ede dΡZ\ede dСZ]ede dҡZ^ede dԡZ_eÐde d֡eZ`ede dءZaeÐde dڡd#eZbeÐde dܡZceÐde dޡZdeÐde ddZeeÐde ddZfeÐde ddZgeÐde dZheÐde ddZieÐde dZjede dZkeÐde dZleÐde dZmeÐde dZneÐde dZoeÐde dZpeÐde dZqeddZreÐde dZseÐde dZtede dZuede dZvede dZwedeEZxeÐde dZyeÐde d ZzeÐd e d Z{eÐd e d Z|eÐde dZ}eÐde dZ~eÐde dZede dZede dZdS(N)NullTranslations translation)CallableDictOptional)urlszUTF-8z ubuntu-proz/usr/share/localeT)fallbackc@s,eZdZdefddZdedefddZdS) PluralizableString pluralize_fncCs ||_dSNr )selfr rSuccessfully updated Ubuntu Pro related APT and MOTD messages.zEFailed running reboot_cmds script. See: /var/log/ubuntu-advantage.logz:Waiting for APT lock to start the Ubuntu Pro configurationz)Could not find past release for {release}z4Starting upgrade of Ubuntu Pro service configurationz4Finished upgrade of Ubuntu Pro service configurationzDetaching Ubuntu Pro. Previously attached subscription was only valid for releases prior to Ubuntu {release} ({series_codename}).zCouldn't import the YAML module. Make sure the 'python3-yaml' package is installed correctly and /usr/lib/python3/dist-packages is in your PYTHONPATH.z@Error while trying to parse a yaml file using 'yaml' from {path}zsnapd does not have a wait command. Enabling Livepatch can fail under this scenario. Please, upgrade snapd if Livepatch enable fails and try again. z A new version is available: {version} Please run: sudo apt install ubuntu-pro-client to get the latest bug fixes and new features.zan unknown errorzExecuting `{command}`zExecuting `{command}` failed.z"Invalid command specified '{cmd}'.zEFailed running command '{cmd}' [exit({exit_code})]. Message: {stderr}zInstalling {packages}zInstalling {title} packageszInstalling required snapsz Installing required snap: {snap}z(Skipping installing packages: {packages}zUninstalling {packages}z$Failure when uninstalling {packages}z2Cannot install package {package} version {version}zFailure checking APT policy.zUpdating package listszUpdating {name} package listszAPT update failed.zAPT install failed.z!Backing up {original} as {backup}z)The following package(s) will be REMOVED:z>The following package(s) will be reinstalled from the archive:cCtdd|jtjdS)Nz*Your Ubuntu Pro subscription has EXPIRED* {{pkg_num}} additional security update requires Ubuntu Pro with '{{service}}' enabled. Renew your subscription at {url}z*Your Ubuntu Pro subscription has EXPIRED* {{pkg_num}} additional security updates require Ubuntu Pro with '{{service}}' enabled. Renew your subscription at {url}urltngettextformatr PRO_DASHBOARDrrrr r/cCr&)NzCAUTION: Your Ubuntu Pro subscription will expire in {{remaining_days}} day. Renew your subscription at {url} to ensure continued security coverage for your applications.zCAUTION: Your Ubuntu Pro subscription will expire in {{remaining_days}} days. Renew your subscription at {url} to ensure continued security coverage for your applications.r'r)r.rrrr/r0cCr&)NzCAUTION: Your Ubuntu Pro subscription expired on {{expired_date}}. Renew your subscription at {url} to ensure continued security coverage for your applications. Your grace period will expire in {{remaining_days}} day.zCAUTION: Your Ubuntu Pro subscription expired on {{expired_date}}. Renew your subscription at {url} to ensure continued security coverage for your applications. Your grace period will expire in {{remaining_days}} days.r'r)r.rrrr/s zK*Your Ubuntu Pro subscription has EXPIRED* Renew your subscription at {url}r'zSetting {service} proxyzNo proxy set in config; however, proxy is configured for: {{services}}. See {url} for more information on pro proxy configuration. zSetting {scope} APT proxyzo Error: Setting global apt proxy and pro scoped apt proxy at the same time is unsupported. No apt proxy is set.z)Warning: {old} has been renamed to {new}.zvWarning: Setting the {current_proxy} proxy will overwrite the {previous_proxy} proxy previously set via `pro config`. zGUsing deprecated "{old}" config field. Please migrate to using "{new}" z-Migrating /etc/ubuntu-advantage/uaclient.confzWarning: Failed to load /etc/ubuntu-advantage/uaclient.conf.preinst-backup No automatic migration will occur. You may need to use "pro config set" to re-set your settings.zWarning: Failed to migrate user_config from /etc/ubuntu-advantage/uaclient.conf Please run the following to keep your custom settings:zWarning: Failed to migrate /etc/ubuntu-advantage/uaclient.conf Please add following to uaclient.conf to keep your config:zcWarning: lxd_guest_attach is set to "on" or "available", but the machine is not attached. Ignoring.zWCurrently attempting to automatically attach this machine to an Ubuntu Pro subscriptionz2This machine is now attached to '{contract_name}' z+This machine is now successfully attached' zEnabling default service {name}zEService {name} is recommended by default. Run: sudo pro enable {name}zInitiating attach operation...zFailed to perform attach...z{Please sign in to your Ubuntu Pro account at this link: {url} And provide the following code: {bold}{{user_code}}{end_bold})r(boldend_boldzAttaching the machine...zFLimited to Ubuntu {release} ({series_codename}) and previous releases.cCtdd|S)Nz*Detach will disable the following service:z+Detach will disable the following services:r*r+r.rrrr/C zThis machine is now detached.z,One moment, checking your subscription firstzEnabling {title}z{title} enabledz{title} access enabledzCould not enable {title}.z{service_being_enabled} cannot be enabled with {incompatible_service}. Disable {incompatible_service} and proceed to enable {service_being_enabled}? (y/N) z)Disabling incompatible service: {service}z{service_being_enabled} cannot be enabled with {required_service} disabled. Enable {required_service} and proceed to enable {service_being_enabled}? (y/N) z$Enabling required service: {service}z-A reboot is required to complete {operation}.z#Configuring APT access to {service}zuNo variant specified. To specify a variant, use the variant option. Auto-selecting {variant} variant. Proceed? (y/N) z(All default services are already enabledzRemoving APT access to {title}zCould not disable {title}.z{dependent_service} depends on {service_being_disabled}. Disable {dependent_service} and proceed to disable {service_being_disabled}? (y/N) z/Disabling dependent service: {required_service}z$Removing apt source file: {filename}z)Removing apt preferences file: {filename}z0Uninstalling all packages installed from {title}z;(The --purge flag is still experimental - use with caution)zGPurging the {service} packages would uninstall the following kernel(s):z/{kernel_version} is the current running kernel.zNo other valid Ubuntu kernel was found in the system. Removing the package would potentially make the system unbootable. Aborting. zIf you cannot guarantee that other kernels in this system are bootable and working properly, *do not proceed*. You may end up with an unbootable system. zFailed to automatically attach to an Ubuntu Pro subscription {num_attempts} time(s). The failure was due to: {reason}. The next attempt is scheduled for {next_run_datestring}. You can try manually with `sudo pro auto-attach`.aFailed to automatically attach to an Ubuntu Pro subscription {num_attempts} time(s). The most recent failure was due to: {reason}. Try re-launching the instance or report this issue by running `ubuntu-bug ubuntu-advantage-tools` You can try manually with `sudo pro auto-attach`.zJCanonical servers did not recognize this machine as Ubuntu Pro: "{detail}"zdo not prompt for confirmation before performing the {command}zCalls the Client API endpoints. For a list of all of the supported endpoints and their structure, please refer to the Pro Client API reference guide: {url}zAPI endpoint to callzcFor endpoints that support progress updates, show each progress update on a new line in JSON formatz;Options to pass to the API endpoint, formatted as key=valuez,arguments in JSON format to the API endpointz5Automatically attach on an Ubuntu Pro cloud instance.z~Collect logs and relevant system information into a tarball. This information can be later used for triaging/debugging issues.zGtarball where the logs will be stored. (Defaults to ./pro_logs.tar.gz).z)Show customizable configuration settings.z6Optional key or key(s) to show configuration settings.z0Set and apply Ubuntu Pro configuration settings.zRkey=value pair to configure for Ubuntu Pro services. Key must be one of: {options}zGUnset an Ubuntu Pro configuration setting, restoring the default value.zFconfiguration key to unset from Ubuntu Pro services. One of: {options}z7Manage Ubuntu Pro Client configuration on this machine.aAttach this machine to an Ubuntu Pro subscription with a token obtained from: {url} When running this command without a token, it will generate a short code and prompt you to attach the machine to your Ubuntu Pro account using a web browser. The "attach-config" option can be used to provide a file with the token and optionally, a list of services to enable after attaching. To know more, visit: https://canonical-ubuntu-pro-client.readthedocs-hosted.com/en/latest/howtoguides/how_to_attach_with_config_file/ The exit code will be: * 0: on successful attach * 1: in case of any error while trying to attach * 2: if the machine is already attachedz,token obtained for Ubuntu Pro authenticationz4do not enable any recommended services automaticallyzKuse the provided attach config file instead of passing the token on the cliaAInspect and resolve Common Vulnerabilities and Exposures (CVEs) and Ubuntu Security Notices (USNs) on this machine. The exit code will be: * 0: the fix was successfully applied or the system is not affected * 1: the fix cannot be applied * 2: the fix was applied but requires a reboot before it takes effectzwSecurity vulnerability ID to inspect and resolve on this system. Format: CVE-yyyy-nnnn, CVE-yyyy-nnnnnnn or USN-nnnn-ddzrIf used, fix will not actually run but will display everything that will happen on the machine during the command.z`If used, when fixing a USN, the command will not try to also fix related USNs to the target USN.zLWARNING: Failed to update ESM cache - package availability may be inaccuratez{bold}WARNING: Unable to update ESM cache when running as non-root, please run sudo apt update and try again if packages cannot be found.{end_bold}a Show security updates for packages in the system, including all available Expanded Security Maintenance (ESM) related content. Shows counts of how many packages are supported for security updates in the system. If the format is set to JSON or YAML it shows a summary of the installed packages based on the origin: - main/restricted/universe/multiverse: Packages from the Ubuntu archive. - esm-infra/esm-apps: Packages from the ESM archive. - third-party: Packages installed from non-Ubuntu sources. - unknown: Packages which don't have an installation source (like local deb packages or packages for which the source was removed). The output contains basic information about Ubuntu Pro. For a complete status on Ubuntu Pro services, run 'pro status'. z7List and present information about third-party packagesz7List and present information about unavailable packagesz5List and present information about esm-infra packagesz4List and present information about esm-apps packagesaRefresh three distinct Ubuntu Pro related artifacts in the system: * contract: Update contract details from the server. * config: Reload the config file. * messages: Update APT and MOTD messages related to Pro. You can individually target any of the three specific actions, by passing the target name to the command. If no target is specified, all targets are refreshed. zTarget to refresh.z4Detach this machine from an Ubuntu Pro subscription.z7Provide detailed information about Ubuntu Pro services.z4a service to view help output for. One of: {options}zInclude beta serviceszPActivate and configure this machine's access to one or more Ubuntu Pro services.zCthe name(s) of the Ubuntu Pro services to enable. One of: {options}zHdo not auto-install packages. Valid for cc-eal, cis and realtime-kernel.z allow beta service to be enabledz8The name of the variant to use when enabling the servicezenable all default servicesz(Disable one or more Ubuntu Pro services.zDthe name(s) of the Ubuntu Pro services to disable. One of: {options}zHdisable the service and remove/downgrade related packages (experimental)z5Output system-related information about Pro services.z#does the system need to be rebooteda2Report the current reboot-required status for the machine. This command will output one of the three following states for the machine regarding reboot: * no: The machine doesn't require a reboot. * yes: The machine requires a reboot. * yes-kernel-livepatches-applied: There are only kernel-related packages that require a reboot, but Livepatch has already provided patches for the current running kernel. The machine still needs a reboot, but you can assess if the reboot can be performed in the nearest maintenance window. aReport current status of Ubuntu Pro services on system. This shows whether this machine is attached to an Ubuntu Pro support contract. When attached, the report includes the specific support contract details including contract name, expiry dates, and the status of each service on this system. The attached status output has four columns: * SERVICE: Name of the service. * ENTITLED: Whether the contract to which this machine is attached entitles use of this service. Possible values are: yes or no. * STATUS: Whether the service is enabled on this machine. Possible values are: enabled, disabled, n/a (if your contract entitles you to the service, but it isn't available for this machine) or - (if you aren't entitled to this service). * DESCRIPTION: A brief description of the service. The unattached status output instead has three columns. SERVICE and DESCRIPTION are the same as above, and there is the addition of: * AVAILABLE: Whether this service would be available if this machine were attached. The possible values are yes or no. If "simulate-with-token" is used, then the output has five columns. SERVICE, AVAILABLE, ENTITLED and DESCRIPTION are the same as mentioned above, and AUTO_ENABLED shows whether the service is set to be enabled when that token is attached. If the "all" flag is set, beta and unavailable services are also listed in the output. z Block waiting on pro to completez1simulate the output status using a provided tokenz%Include unavailable and beta servicesz&show all debug log messages to consolezshow version of {name}z1attach this machine to an Ubuntu Pro subscriptionzCalls the Client API endpoints.z+automatically attach on supported platformsz&collect Pro logs and debug informationz/manage Ubuntu Pro configuration on this machinez3remove this machine from an Ubuntu Pro subscriptionz5disable a specific Ubuntu Pro service on this machinez4enable a specific Ubuntu Pro service on this machinez=check for and mitigate the impact of a CVE/USN on this systemz.list available security updates for the systemz3show detailed information about Ubuntu Pro serviceszrefresh Ubuntu Pro servicesz)current status of all Ubuntu Pro servicesz/show system information related to Pro servicesz-show information about system vulnerabilitieszAllow users to better visualize the vulnerability issues that affects the system. By default, this command will execute pro vulnerability listzThe vulnerabilities data used in the system is outdated by {t_diff} days/hours To update the data please run with --update: $ {cmd} --update zshow information about a CVEz2Show all available information about a given CVE. zECVE to display information. Format: CVE-yyyy-nnnn or CVE-yyyy-nnnnnnnzK{issue} doesn't affect Ubuntu {release}. For more information, visit: {url}z/list the vulnerabilities that affect the systemz5List the CVE vulnerabilities that affects the system.z Processing vulnerability data...z1List only vulnerabilities without a fix availablez.List only vulnerabilities with a fix availablez/No unfixable CVES found that affect this systemz-No fixable CVES found that affect this systemz%No CVES found that affect this systemzWARNING: this output is intended to be human readable, and subject to change. In scripts, prefer using machine readable data from the `pro api` command, or use `pro {command} --format json`. z Anbox CloudzScalable Android in the cloudaAnbox Cloud lets you stream mobile apps securely, at any scale, to any device, letting you focus on your apps. Run Android in system containers on public or private clouds with ultra low streaming latency. When the anbox-cloud service is enabled, by default, the Appliance variant is enabled. Enabling this service allows orchestration to provision a PPA with the Anbox Cloud resources. This step also configures the Anbox Management Service (AMS) with the necessary image server credentials. To learn more about Anbox Cloud, see {url}amTo finish setting up the Anbox Cloud Appliance, run the following commands sequentially: The `prepare-node-script` command lets you preview a script that installs some additional packages, kernel modules and GPU driver packages, if a GPU is available: $ anbox-cloud-appliance prepare-node-script > prepare.sh Preview the script and when ready, apply it to complete the installation: $ sudo bash -ex prepare.sh Once installed, to initialize Anbox Cloud, run: $ sudo anbox-cloud-appliance init You can accept the default answers if you do not have any specific configuration changes. For more information, see {url} zCC EAL2z*Common Criteria EAL2 Provisioning PackagesaCommon Criteria is an Information Technology Security Evaluation standard (ISO/IEC IS 15408) for computer security certification. Ubuntu 16.04 has been evaluated to assurance level EAL2 through CSEC. The evaluation was performed on Intel x86_64, IBM Power8 and IBM Z hardware platforms.zH(This will download more than 500MB of packages, so may take some time.)z:Please follow instructions in {filename} to configure EAL2z CIS AuditzUbuntu Security Guidez#Security compliance and audit toolszUbuntu Security Guide is a tool for hardening and auditing and allows for environment-specific customizations. It enables compliance with profiles such as DISA-STIG and the CIS benchmarks. Find out more at {url}z#Visit {url} to learn how to use CISzVisit {url} for the next stepszoFrom Ubuntu 20.04 onward 'pro enable cis' has been replaced by 'pro enable usg'. See more information at: {url}z.Expanded Security Maintenance for ApplicationsamExpanded Security Maintenance for Applications is enabled by default on entitled workloads. It provides access to a private PPA which includes available high and critical CVE fixes for Ubuntu LTS packages in the Ubuntu Main and Ubuntu Universe repositories from the Ubuntu LTS release date until its end of life. You can find out more about the esm service at {url}zUbuntu Pro: ESM Apps (Legacy)zBExpanded Security Maintenance for Applications on Legacy Instancesa(Expanded Security Maintenance (ESM) for Applications on Legacy Instances provides access to a service which includes available high and critical vulnerability fixes for Ubuntu LTS packages in the Ubuntu Main and Ubuntu Universe repositories from the Ubuntu LTS release date until its end of life.z0Expanded Security Maintenance for InfrastructurealExpanded Security Maintenance for Infrastructure provides access to a private PPA which includes available high and critical CVE fixes for Ubuntu LTS packages in the Ubuntu Main repository between the end of the standard Ubuntu LTS security maintenance and its end of life. It is enabled by default with Ubuntu Pro. You can find out more about the service at {url}zUbuntu Pro: ESM Infra (Legacy)zDExpanded Security Maintenance for Infrastructure on Legacy InstanceszExpanded Security Maintenance (ESM) for Infrastructure on Legacy Instances provides access to a service which includes available high and critical vulnerability fixes for Ubuntu LTS packages in the Ubuntu Main repository after its end of life.FIPSz#NIST-certified FIPS crypto packagesa%Installs FIPS 140 crypto packages for FedRAMP, FISMA and compliance use cases. Note that "fips" does not provide security patching. For FIPS certified modules with security patches please see "fips-updates". If you are unsure, choose "fips-updates" for maximum security. Find out more at {url}z>Could not determine cloud, defaulting to generic FIPS package.zTFIPS kernel is running in a disabled state. To manually remove fips kernel: {url} zWarning: FIPS kernel is not optimized for your specific cloud. To fix it, run the following commands: 1. sudo pro disable fips 2. sudo apt remove ubuntu-fips 3. sudo pro enable fips --assume-yes 4. sudo reboot zThis will install the FIPS packages. The Livepatch service will be unavailable. Warning: This action can take some time and cannot be undone. z~This will install the FIPS packages including security updates. Warning: This action can take some time and cannot be undone. aWarning: Enabling {title} in a container. This will install the FIPS packages but not the kernel. This container must run on a host with {title} enabled to be compliant. Warning: This action can take some time and cannot be undone. zZThis will disable the {title} entitlement but the {title} packages will remain installed. zThis will downgrade the kernel from {current_version} to {new_version}. Warning: Downgrading the kernel may cause hardware failures. Please ensure the hardware is compatible with the new kernel version before proceeding. aThe "{variant}" variant of {service} is based on the "{base_flavor}" Ubuntu kernel but this machine is running the "{current_flavor}" kernel. The "{current_flavor}" kernel may have significant hardware support differences from "{variant}" {service}. Warning: Installing {variant} {service} may result in lost hardware support and may prevent the system from booting. Do you accept the risk and wish to continue? (y/N) z>FIPS support requires system reboot to complete configuration.zReboot to FIPS kernel requiredz;This FIPS install is out of date, run: sudo pro enable fipsz for interval must be a positive integer.zinvalid-url-config-valuez%Invalid url in config. {key}: {value}z!invalid-feature-yaml-config-valuez$Could not find yaml file: {filepath}z invalid-proxy-combination-configzError: Setting global apt proxy and pro scoped apt proxy at the same time is unsupported. Cancelling config process operation. zmissing-distro-info-filez$Can't load the distro-info database.z"missing-series-in-distro-info-filez7Can't find series {series} in the distro-info database.zinvalid-option-combinationz4Error: Cannot use {option1} together with {option2}.zdependent-optionz7Error: {option1} depends on {option2} to work properly.zno-help-contentzNo help available for '{name}'z invalid-security-issue-id-formatzbError: issue "{issue}" is not recognized. Usage: "pro {cmd} CVE-yyyy-nnnn" or "pro {cmd} USN-nnnn"zinvalid-arg-choicez{arg} must be one of: {choices}z empty-valuezEmpty value provided for {arg}.zgeneric-invalid-formatz'Expected {expected} but found: {actual}zrefresh-config-failurezUnable to process uaclient.confzrefresh-contract-failurez#Unable to refresh your subscriptionzrefresh-messages-failurez:Unable to update Ubuntu Pro related APT and MOTD messages.zjson-format-require-assume-yesz3json formatted response requires --assume-yes flag.zattach-token-xor-configzuDo not pass the TOKEN arg if you are using --attach-config. Include the token in the attach-config file instead. z api-error-args-and-data-togetherz6Cannot provide both --args and --data at the same timez prompt-deniedzOperation cancelled by userzlock-held-errorz#Unable to perform: {lock_request}. z nonroot-userz2This command must be run as root (try using sudo).zsecurity-api-invalid-metadataz4Metadata for {issue} is invalid. Error: {error_msg}.zsecurity-fix-not-found-issuezError: {issue_id} not found.zgpg-key-not-foundzGPG key '{keyfile}' not found.zapi-invalid-endpointz$'{endpoint}' is not a valid endpointzapi-missing-argumentz0Missing argument '{arg}' for endpoint {endpoint}zapi-no-argument-for-endpointz{endpoint} accepts no argumentszapi-json-data-format-errorz-Error parsing API json data parameter: {data}zapi-args-wrong-formatz''{arg}' is not formatted as 'key=value'zunable-to-determine-versionz(Unable to determine version: {error_msg}zauto-attach-disabledz*features.disable_auto_attach set in configz-unable-to-determine-unattended-upgrade-statusz;Unable to determine unattended-upgrades status: {error_msg}zincorrect-typezAExpected value with type {expected_type} but got type: {got_type}zincorrect-list-element-typezsF                                                                                                    $