Your IP : 216.73.216.14
U
8�-d� � @ sP d Z ddlZddlZddlZddlZddlZddlZddlZddlZddl Z ddl
Z
ddl m Z ddl
mZmZmZ ddlmZmZmZmZmZmZmZmZmZmZm Z ddlm Z ddlm Z m Z m!Z! ddlm"Z# dd lm$Z$m%Z% dd
l&m'Z' dd l(m)Z)m*Z* dd l+m,Z, dd
l-m.Z.m/Z/ ddl0m1Z1m2Z2 ddl3m4Z4 ddl5m6Z6m7Z7 ddl8m9Z9m:Z: ddl;m<Z< ddl=m>Z>m?Z?m@Z@ ddlAmBZBmCZCmDZDmEZE ddlFmGZGmHZH ddlImJZJ ddlKmLZLmMZM ddlNmOZO ddlPmQZQmRZR dZSdZTd ZUd ZVd ZWd ZXd d!d"gZYd#ZZd$e j[ d% Z\e�]� Z^G d&d'� d'ej_�Z`d�d(d)�Zad*d+� Zbd,d-� Zcd�d.d/�Zdd0d1� Zed2d3� Zfd4d5� Zgd6d7� Zheid8�d9d:�Zjeid8�d;d<�Zkeid8�d=d>�Zld?d@� ZmdAdB� ZndCdD� ZodEdF� ZpdGdH� ZqdIdJ� ZrdKdL� ZsdMdN� ZtejudO�dPdQ�ZvejudO�dRdS�ZwejudO�dTdU�ZxdVdW� ZydXdY� ZzdZd[� Z{ejueieid\�d]d^�Z|d_d`�dadb�Z}dcdd� Z~dedf� Zebdgdh� �Z�ebdidj� �Z�dkdl� Z�ecebede��eadm�dndo� ����Z�ecebede��eadp�dqdr� ����Z�ecebed� eads�e�dt�dudv�����Z�ejue�e�dw�dxdy�Z�ejuddz�d{d|�Z�d}d~� Z�ebejue�dz�dd���Z�d�d�� Z�eeebead��d�d�� ���Z�ejudO�d�d��Z�ejudO�d�d��Z�ejudO�d�d��Z�d�d�� Z�ejudO�d�d��Z�d�d�d��Z�ejudO�d�d��Z�ed� ejudO�d�d���Z�ejudO�d�d��Z�ebead��ejudO�d�d����Z�ejue6eieei dd��d�d��Z�d�d�� Z�d�ddt�d�d��Z�d�d�d��Z�d�d�� Z�d�d�� Z�e�d�d�d���Z�e�d�k�rLe��e�� � dS )�z2Client to manage Ubuntu Pro services on a machine.� N��wraps)�List�Optional�Tuple) �actions�apt�apt_news�config�contract�daemon�defaults� entitlements� event_logger�
exceptions�lock)�log)�messages�security�security_status)�status)�util�version)�call_api)�FullAutoAttachOptions�_full_auto_attach)� _initiate)�MagicAttachRevokeOptions�_revoke)�MagicAttachWaitOptions�_wait)�_reboot_required)�
AptProxyScope�setup_apt_proxy)�AttachActionsConfigFile�IncorrectTypeError)�PRINT_WRAP_WIDTH)�,create_enable_entitlements_not_found_message�entitlements_disable_order�get_valid_entitlement_names)�ApplicationStatus�CanDisableFailure�CanEnableFailure�CanEnableFailureReason)�notices� state_files)�Notice)� refresh_motd�update_motd_messages)�JsonArrayFormatter)� safe_dump� safe_load�proz{name} {command} [flags]zAUse {name} {command} --help for more information about a command.z&Try 'pro --help' for more information.z}Account: {account}
Subscription: {subscription}
Valid until: {contract_expiry}
Technical support level: {tech_support_level}
z$https://auth.contracts.canonical.comZtabular�json�yamlzua_logs.tar.gz�
z� A new version is available: {version}
Please run:
sudo apt-get install ubuntu-advantage-tools
to get the latest version with new features and bug fixes.c sl e Zd Zdddejdfee d�� fdd�
Zdd� Zd
� fdd � Z e
e e e e e f d
�d d ��Z
� ZS )�UAArgumentParserN)� base_descc s t � j||||d� || _d S )N)�prog�usage�epilog�formatter_class)�super�__init__r; )�selfr< r= r> r? r; �� __class__� �./usr/lib/python3/dist-packages/uaclient/cli.pyrA h s �zUAArgumentParser.__init__c C s, | � tj� |dkrt}| �d|d � d S )Nz&the following arguments are required: � r9 )� print_usage�sys�stderr�TRY_HELP�exit)rB �messagerE rE rF �errory s zUAArgumentParser.errorFc sP | j r>t�� \}}t|�}|r*t|| �}d�| j g| �| _t� j|d� d S )Nr9 ��file)r; r: �_get_service_descriptions�sorted�join� descriptionr@ �
print_help)rB rP �show_all�non_beta_services_desc�beta_services_descZservice_descriptionsrC rE rF rU � s ��
�zUAArgumentParser.print_help��returnc
C s� t �� } d}g }g }t�t �� �}|D ]�}ztj| |d d�}W n tjk
rZ Y q&Y nX |�d|d �}|j r�d�
|j �}nd}t j |j
||j
|d�tdd d d
�} |jr�|�| � q&|�| � q&||fS ) Nz - {name}: {description}{url}�name��cfgr[ Z presentedAsz ({})� )r[ rT �urlz F)�width�subsequent_indent�break_long_words�break_on_hyphens)r
�UAConfigr Zget_available_resourcesr �entitlement_factoryr �EntitlementNotFoundError�getZ help_doc_url�format�textwrap�fillrT r& Zis_beta�append)
r] Zservice_info_tmplrW rX Z resources�resource�ent_clsZpresentation_namer_ Z service_inforE rE rF rQ � s@ �
�� z*UAArgumentParser._get_service_descriptions)NF)�__name__�
__module__� __qualname__�argparseZ
HelpFormatterr �strrA rN rU � staticmethodr r rQ �
__classcell__rE rE rC rF r: g s ��r: c s � fdd�}|S )z1Decorator asserting exclusive access to lock filec s t � �� �fdd��}|S )Nc s0 t j| �d�� � |d| i|��}W 5 Q R X |S )N)r] � lock_holderr] )r ZSingleAttemptLock)r] �args�kwargsZretval)�fru rE rF �new_f� s z0assert_lock_file.<locals>.wrapper.<locals>.new_fr �rx ry �ru �rx rF �wrapper� s z!assert_lock_file.<locals>.wrapperrE )ru r} rE r{ rF �assert_lock_file� s r~ c s t � �� fdd��}|S )z Decorator asserting root userc s t �� st�� �n
� | |�S d S �N)r �we_are_currently_rootr ZNonRootUserError)rv rw r| rE rF ry � s
zassert_root.<locals>.new_fr rz rE r| rF � assert_root� s r� c s t � �� fdd��}|S )z>Decorator to verify if correct params are used for json formatc sR | s� | f|�|�S | j dkr>| js>tj}tj|j|jd��n� | f|�|�S d S )Nr7 ��msg�msg_code)rh �
assume_yesr Z JSON_FORMAT_REQUIRE_ASSUME_YESr �UserFacingErrorr� r[ )�cmd_argsrv rw r� r| rE rF ry � s z&verify_json_format_args.<locals>.new_fr rz rE r| rF �verify_json_format_args� s
r� c s � fdd�}|S )z�Decorator asserting attached config.
:param msg_function: Optional function to generate a custom message
if raising an UnattachedError
c s t � �� �fdd��}|S )Nc s\ |j sH�r<t| dd�}t| dd�}�|||d�}t�|�}nt�� }|�� | fd|i|��S )N�commandr^ �service)r� �
service_namesr] r] )� is_attached�getattrr ZUnattachedError)rv r] rw r� r� r� � exception)rx � msg_functionrE rF ry � s � z/assert_attached.<locals>.wrapper.<locals>.new_fr rz �r� r| rF r} � s z assert_attached.<locals>.wrapperrE )r� r} rE r� rF �assert_attached� s r� c s t � �� fdd��}|S )z&Decorator asserting unattached config.c s( |j r t�|jj�dd���� | |d�S )Nr[ r^ �r] )r� r ZAlreadyAttachedError�machine_token_fileZaccountrg �rv r] r| rE rF ry
s
�z"assert_not_attached.<locals>.new_fr rz rE r| rF �assert_not_attached
s r� c C s4 d| _ d| _| jdddd� | jddg d d
d � | S ) z5Build or extend an arg parser for the api subcommand.�api� Calls the Client API endpoints.�
endpoint_pathZendpointzAPI endpoint to call)�metavar�helpz--args�options�*z;Options to pass to the API endpoint, formatted as key=value)�dest�default�nargsr� )r< rT � add_argument��parserrE rE rF �
api_parser s ��r� c C s* d| _ d| _tjt| j d�| _d| j_| S )z9Build or extend an arg parser for auto-attach subcommand.� auto-attachz5Automatically attach on an Ubuntu Pro cloud instance.�r[ r� �Flags)r< rT �
USAGE_TMPLrh �NAMEr= �
_optionals�titler� rE rE rF �auto_attach_parser) s �r� c C s2 d| _ d| _tjt| j d�| _| jdddd� | S )z<Build or extend an arg parser for 'collect-logs' subcommand.� collect-logsz<Collect logs and relevant system information into a tarball.r� z-oz--outputzEtarball where the logs will be stored. (Defaults to ./ua_logs.tar.gz)�r� )r< rT r� rh r� r= r� r� rE rE rF �collect_logs_parser4 s ��r� ��parent_commandc C s6 t jtd�|�d�| _d| _d| _| jdddd� | S ) z;Build or extend an arg parser for 'config show' subcommand.z
{} show [key]r� �showz(Show customisable configuration settings�key�?z6Optional key or key(s) to show configuration settings.�r� r� )r� rh r� r= r< rT r� �r� r� rE rE rF �config_show_parserF s ��r� c C sJ t jtd�|�d�| _d| _d| _d| j_| jdd�d� t
j ��d � | S )
z:Build or extend an arg parser for 'config set' subcommand.z{} set <key>=<value>r� Zasetz/Set and apply Ubuntu Pro configuration settingsr� �key_value_pairzKkey=value pair to configure for Ubuntu Pro services. Key must be one of: {}�, r� ) r� rh r� r= r< rT r� r� r� rS r
�UA_CONFIGURABLE_KEYSr� rE rE rF �config_set_parserU s �
�� r� c C sL t jtd�|�d�| _d| _d| _| jdd�d�tj ��dd� d | j
_ | S )
z<Build or extend an arg parser for 'config unset' subcommand.z{} unset <key>r� �unsetz&Unset Ubuntu Pro configuration settingr� z?configuration key to unset from Ubuntu Pro services. One of: {}r� )r� r� r� ) r� rh r� r= r< rT r� rS r
r� r� r� r� rE rE rF �config_unset_parseri s �
��r� c C s� d}t jtd�|�d�| _|| _d| _d| j_| jdddd �}|j d
d d �}|j
t d
� t ||d� |j ddd �}|j
t
d
� t||d� |j ddd �}|j
td
� t||d� | S )z4Build or extend an arg parser for config subcommand.r
z {} <command>r� z Manage Ubuntu Pro configurationr� �Available Commandsr� r^ �r� r� r� r� z,show all Ubuntu Pro configuration setting(s)r� ��actionr� �setz$set Ubuntu Pro configuration settingr� z&unset Ubuntu Pro configuration setting)r� rh r� r= r< rT r� r� �add_subparsers�
add_parser� set_defaults�action_config_showr� �action_config_setr� �action_config_unsetr� )r� r� �
subparsersZ parser_showZ
parser_setZ parser_unsetrE rE rF �
config_parser| s@ � � � � � r� c C s� t jtdd�| _tj| _d| _d�tj �}|d d | _
d| j _ | j
dd d
�t�d � | j
d d
ddd� | j
dt�d�dd� | j
ddddgddd� | S )z4Build or extend an arg parser for attach subcommand.zattach <token>r� �attachz@Attach this machine to Ubuntu Pro with a token obtained from:
{}z
z�When running this command without a token, it will generate a short code
and prompt you to attach the machine to your Ubuntu Pro account using
a web browser.r� �tokenr� z0token obtained for Ubuntu Pro authentication: {}r� z--no-auto-enableZ store_false� auto_enablez4do not enable any recommended services automatically)r� r� r� z--attach-config�rzKuse the provided attach config file instead of passing the token on the cli)�typer� �--format�store�clir7 �4output enable in the specified format (default: cli)�r� �choicesr� r� )r� rh r� r= rq �RawDescriptionHelpFormatterr? r< r
� BASE_UA_URLrT r� r� r� �UA_AUTH_TOKEN_URLZFileType)r� r; rE rE rF �
attach_parser� sP ����� �����r� c C sF t jtdd�| _d| _d| _d| j_| jddd� | jd d
d d � | S )
z1Build or extend an arg parser for fix subcommand.z"fix <CVE-yyyy-nnnn+>|<USN-nnnn-d+>r� �fixzLInspect and resolve CVEs and USNs (Ubuntu Security Notices) on this machine.r� �security_issuezwSecurity vulnerability ID to inspect and resolve on this system. Format: CVE-yyyy-nnnn, CVE-yyyy-nnnnnnn or USN-nnnn-ddr� z --dry-run�
store_truezrIf used, fix will not actually run but will display everything that will happen on the machine during the command.�r� r� � r� rh r� r= r< rT r� r� r� r� rE rE rF �
fix_parser� s$ ����
r� c C sx d| _ tj| _t�d�| _| jddddd� | �� }|jdd d
d � |jd d
d
d � |jddd
d � |jddd
d � | S )z=Build or extend an arg parser for security-status subcommand.�security-statusa] Show security updates for packages in the system, including all
available Expanded Security Maintenance (ESM) related content.
Shows counts of how many packages are supported for security updates
in the system.
If called with --format json|yaml it shows a summary of the
installed packages based on the origin:
- main/restricted/universe/multiverse: packages from the Ubuntu archive
- esm-infra/esm-apps: packages from the ESM archive
- third-party: packages installed from non-Ubuntu sources
- unknown: packages which don't have an installation source (like local
deb packages or packages for which the source was removed)
The output contains basic information about Ubuntu Pro. For a
complete status on Ubuntu Pro services, run 'pro status'.
r� zFormat for the output)r7 r8 �textr� )r� r� r� z --thirdpartyz7List and present information about third-party packagesr� )r� r� z
--unavailablez7List and present information about unavailable packagesz --esm-infraz5List and present information about esm-infra packagesz
--esm-appsz4List and present information about esm-apps packages) r< rq r� r? ri �dedentrT r� Z add_mutually_exclusive_group)r� �grouprE rE rF �security_status_parser� sB ������r� c C sV d| _ d| _tjtdd�| _d| j_tj | _
t � d�| _| j
ddd d
gd d d
d� | S )z5Build or extend an arg parser for refresh subcommand.�refreshz9Refresh existing Ubuntu Pro contract and update services.z"refresh [contract|config|messages]r� r� a� Refresh three distinct Ubuntu Pro related artifacts in the system:
* contract: Update contract details from the server.
* config: Reload the config file.
* messages: Update APT and MOTD messages related to UA.
You can individually target any of the three specific actions,
by passing it's target to nome to the command. If no `target`
is specified, all targets are refreshed.
�targetr r
r r� NzTarget to refresh.)r� r� r� r� )r< rT r� rh r� r= r� r� rq r� r? ri r� r� r� rE rE rF �refresh_parser& s( � ��
�r� c K s� | j dkrZ| jrt�� q�| jr*t�� q�| jr<t�|� q�| jrNt� |� q�t�|� n>| j dkr�t
t j t�
|�dtjd�� nt
tt�
|�dd�� dS )Nr� r7 T)Z sort_keys�clsF)Zdefault_flow_styler )rh Z
thirdpartyr Zlist_third_party_packagesZ unavailableZlist_unavailable_packagesZ esm_infraZlist_esm_infra_packagesZesm_appsZlist_esm_apps_packages�printr7 �dumpsZsecurity_status_dictr ZDatetimeAwareJSONEncoderr4 �rv r] rw rE rE rF �action_security_statusI s2
����r� c K s@ t �tj| j�s&d�| j�}t�|��tj|| j| j d�}|j
S )NzYError: issue "{}" is not recognized.
Usage: "pro fix CVE-yyyy-nnnn" or "pro fix USN-nnnn")r] Zissue_id�dry_run) �re�matchr ZCVE_OR_USN_REGEXr� rh r r� Zfix_security_issue_idr� �value)rv r] rw r� Z
fix_statusrE rE rF �
action_fixg s ��
�r� c C sT t jtdd�}|| _d| _d| _d| j_| jdddd� | jd d
d d gd d
d� | S )z4Build or extend an arg parser for detach subcommand.�detachr� z-Detach this machine from Ubuntu Pro services.r� � --assume-yesr� z;do not prompt for confirmation before performing the detachr� r� r� r� r7 r� r� r� �r� r= rE rE rF �
detach_parserw s$ ��r� r� c C s� t jtdd�}|| _d| _d| _d| j_| jdddd �d
� t
j |d ���d � | jd
dt t d d�t d �d� | jdddd� | S )z2Build or extend an arg parser for help subcommand.zhelp [service]r� r� z7Provide detailed information about Ubuntu Pro services.� Argumentsr� r� r� z-a service to view help output for. One of: {}r� r� �r� r� r� r� r z1output help in the specified format (default: {})r� �--allr� �(Allow the visualization of beta servicesr� )
r� rh r� r= r< rT � _positionalsr� r� rS r �valid_services�STATUS_FORMATS�r� r] r= rE rE rF � help_parser� s: ��� �� �r� c C s� t jtdd�}d| _|| _d| _d| j_d| j_| j ddd d
�d �
t j |d ���d
� | j dddd� | j dddd� | j dddd� | j ddddgddd� | S )z4Build or extend an arg parser for enable subcommand.z enable <service> [<service>]r� z Enable an Ubuntu Pro service.�enabler� r� r� r� �+z<the name(s) of the Ubuntu Pro services to enable. One of: {}r� r� r� r� r� z;do not prompt for confirmation before performing the enabler� z
--access-onlyzHdo not auto-install packages. Valid for cc-eal, cis and realtime-kernel.z--betaz allow beta service to be enabledr� r� r7 r� r� �
r� rh r� rT r= r< r� r� r� r� rS r r� r� rE rE rF �
enable_parser� sP ��� �� ��r c C s� t jtdd�}d| _|| _d| _d| j_d| j_| j ddd d
�d �
t j |d ���d
� | j dddd� | j ddddgddd� | S )z5Build or extend an arg parser for disable subcommand.z disable <service> [<service>]r� z Disable an Ubuntu Pro service.�disabler� r� r� r� r� z=the name(s) of the Ubuntu Pro services to disable. One of: {}r� r� r� r� r� z<do not prompt for confirmation before performing the disabler� r� r� r7 z5output disable in the specified format (default: cli)r� r r� rE rE rF �disable_parser� s< ��� ��r c C sZ t jtdd�| _d| _d| _d| j_| jdddd �}|j d
d d �}|j
t d
� t |� | S )z4Build or extend an arg parser for system subcommand.zsystem <command>r� z9Output system related information related to Pro services�systemr� r� r� r^ r� �reboot-requiredz#does the system need to be rebootedr� r� )
r� rh r� r= rT r< r� r� r� r� r� � action_system_reboot_required�reboot_required_parser)r� r� Zparser_reboot_requiredrE rE rF �
system_parser s" � � � r c C s. t jtdd�| _d| _tj| _t� d�| _
| S )Nzsystem reboot-requiredr� r al Report the current reboot-required status for the machine.
This command will output one of the three following states
for the machine regarding reboot:
* no: The machine doesn't require a reboot
* yes: The machine requires a reboot
* yes-kernel-livepatches-applied: There are only kernel related
packages that require a reboot, but Livepatch has already provided
patches for the current running kernel. The machine still needs a
reboot, but you can assess if the reboot can be performed in the
nearest maintenance window.
) r� rh r� r= r6 rq r� r? ri r� rT r� rE rE rF r s ��r c C s� t jtdd�}|| _d| _d| _tj| _t �
d�| _| j ddddd � | j d
d t t d d
�t d �d� | j ddd dd� | j dddd� d| j
_| S )z4Build or extend an arg parser for status subcommand.r r� z6Output the status information for Ubuntu Pro services.u; Report current status of Ubuntu Pro services on system.
This shows whether this machine is attached to an Ubuntu Advantage
support contract. When attached, the report includes the specific
support contract details including contract name, expiry dates, and the
status of each service on this system.
The attached status output has four columns:
* SERVICE: name of the service
* ENTITLED: whether the contract to which this machine is attached
entitles use of this service. Possible values are: yes or no
* STATUS: whether the service is enabled on this machine. Possible
values are: enabled, disabled, n/a (if your contract entitles
you to the service, but it isn't available for this machine) or — (if
you aren't entitled to this service)
* DESCRIPTION: a brief description of the service
The unattached status output instead has three columns. SERVICE
and DESCRIPTION are the same as above, and there is the addition
of:
* AVAILABLE: whether this service would be available if this machine
were attached. The possible values are yes or no.
If --simulate-with-token is used, then the output has five
columns. SERVICE, AVAILABLE, ENTITLED and DESCRIPTION are the same
as mentioned above, and AUTO_ENABLED shows whether the service is set
to be enabled when that token is attached.
If the --all flag is set, beta and unavailable services are also
listed in the output.
z--waitr� Fz Block waiting on pro to complete)r� r� r� r� r� r z3output status in the specified format (default: {})r� z--simulate-with-tokenZTOKENz1simulate the output status using a provided token)r� r� r� r� r� r� r� )r� rh r� r= rT r< rq r� r? ri r� r� r� r� r� r� rE rE rF �
status_parser5 sJ ��%��� ��r )r] �cmd_name� subcmd_namec C sf t | d�}|�� d j| }|�� d j�� }||krb|�� d j| �� t�d�d�|����d S )Nr� r z
<command> must be one of: {}r� ) �
get_parser�_get_positional_actionsr� �keysrU r r� rh rS )r] r
r r� � subparserZ
valid_choicesrE rE rF �_print_help_for_subcommand� s
�r T)�
update_statusc C s� | � � \}}|sbt�| j� |dk rnt|t�rn|jdk rnt�|jj� tj |jj|jj| jd� n t�
| j� |r~t j |d� |S )a= Perform the disable action on a named entitlement.
:param entitlement_name: the name of the entitlement to enable
:param cfg: the UAConfig to pass to the entitlement
:param assume_yes:
Assume a yes response for any prompts during service enable
@return: True on success, False otherwise
N�� error_msg�
error_coder� r� )
r �event�service_failedr[ �
isinstancer+ rM �infor� rN �service_processed� ua_statusr )� entitlementr] r� r �ret�reasonrE rE rF �_perform_disable� s
� r c K s t |d| jd� dS )zGPerform the config action.
:return: 0 on success, 1 otherwise
r
�r
r r �r r� r� rE rE rF �
action_config� s �r! c K s� | j rr| j tjkrPd�| j d�tj��}|�d�d }t�tj |t
d| d���t dj| j t || j d�d �� d
S t
td d � tjD ��d
�}d| d }tjD ] }t |j|t ||d�d �� q�|js�|jr�|js�|jr�t d� dS )z�Perform the 'config show' action optionally limit output to a single key
:return: 0 on success
:raise UserFacingError: on invalid keys
z
'{}' must be one of: {}r� �:rG � )r` ra z
{key} {value}N)r� r� r c S s g | ] }t |��qS rE )�len)�.0�xrE rE rF �
<listcomp>� s z&action_config_show.<locals>.<listcomp>� z{key: <z } {value}zo
Error: Setting global apt proxy and pro scoped apt proxy at the same time is unsupported. No apt proxy is set.)r� r
r� rh rS �findr r� ri rj r& r� r� rr �max�global_apt_http_proxy�global_apt_https_proxy�ua_apt_http_proxy�ua_apt_https_proxy)rv r] rw r� Zindent_positionZ col_widthZrow_tmplr� rE rE rF r� � sB
��� ��
���r� c K s& ddl m} ddlm} t|d�}|�� d jd }|�� d jd }z| j�d�\}} W n. t k
r� |�
� t � d�
| j���Y nX |tjkr�|�
� t � d �
d
�tj����|d k�r4|�d �d }
|
d
kr�tj} ntj} t�|
| | � || i}|f |� tj�|�} | �� \}
}|
tjk�r|f |� �n�||jk�r�|�d �d }
|
d
k�r`tj } ntj } t�|
| | � t |j �p�|j �}|�r�t!t"j#j
ddd�� t$|t%j&|| � d|_ d|_ �nV||j'|j( k�rzd|k�r�dnd
}
|
d
k�r�tj } ntj } ||j'k�r"t!t"j)j
|
d�� d| }t�|
| | � t |j*�p>|j+�}|�r\t!t"j#j
ddd�� t$|t%j,|| � d|_*d|_+n�|dk�r�z$t-| �} | dk �r�t d�
|���W n8 t k
�r� |�
� t!d� t � d�
|| ���Y nX n2|dk�r| �.� dk} | �r t/�0|� n
t1j2�3� t4||| � dS ) zMPerform the 'config set' action.
@return: 0 on success, 1 otherwise
r )�configure_livepatch_proxy)�configure_snap_proxyr� r
r� �=z%
Expected <key>=<value> but found: {}�
<key> must be one of: {}r� ��
http_proxy� https_proxy�_�httprG zpro scoped aptz
global apt)Z
current_proxyZprevious_proxyN�https��
protocol_type�global_)Zupdate_messaging_timerZmetering_timerzInvalid interval for {}r^ zECannot set {} to {}: <value> for interval must be a positive integer.r �true)5�uaclient.livepatchr/ �
uaclient.snapr0 r r
r� r� �split�
ValueErrorrU r r� rh r
r� rS r Z PROXY_VALIDATION_SNAP_HTTP_URLZ PROXY_VALIDATION_SNAP_HTTPS_URLZvalidate_proxyr � livepatch�LivepatchEntitlement�application_statusr* �ENABLED�ua_scoped_proxy_optionsZ PROXY_VALIDATION_APT_HTTP_URLZ PROXY_VALIDATION_APT_HTTPS_URL�boolr+ r, r� r ZWARNING_APT_PROXY_OVERWRITE�configure_apt_proxyr" �UACLIENT�&deprecated_global_scoped_proxy_options�global_scoped_proxy_options�WARNING_APT_PROXY_SETUPr- r. �GLOBAL�int�lowerr �update_apt_newsr/ Zapt_news_contents_file�delete�setattr)rv r] rw r/ r0 r� r� r �set_key� set_valuer: Z validate_urlr �livepatch_statusr6 Z
unset_currentrE rE rF r� � s�
��
��
� ��
��
�� ��
� ��
r� c
K sj ddl m} ddlm} ddlm} | jtjkr~t |d�}|�
� d j d }|�
� d j d }|� � t
�d�d �tj����| jd
kr�| j�d �d } || d � tj�|�}
|
�� \} } | tjkr�|| d � n�| j|jkr�t||j| jd
� nh| j|j|j k�rX| j|jk�rFd| jk�r"dnd} t � t j j| d �� d| j | _t||j!| jd
� t"|| jd
� dS )zOPerform the 'config unset' action.
@return: 0 on success, 1 otherwise
r )r" )�unconfigure_livepatch_proxy)�unconfigure_snap_proxyr� r
r� r2 r� r3 r6 r9 Nr8 r7 r; )#� uaclient.aptr" r= rU r> rV r� r
r� r r
r� rU r r� rh rS r? r rA rB rC r* rD rE rG rH rI rJ r r r rK rL rQ )
rv r] rw r" rU rV r� r� r r: r rT r6 rE rE rF r� c sL
��
���� r� c C s| t ||d�\}}|r>|r>tj}|jd�|�| d�|�dd�}n:|rXtjjd�|�d�}n tjj| d�|�d�tj�d�}|S )z�Generates a custom message for enable/disable commands when unattached.
Takes into consideration if the services exist or not, and notify the user
accordingly.)�namesr] r� r^ )�
valid_service� operation�invalid_service� service_msg)rY zSee {}�rZ r[ r\ ) r) r Z!MIXED_SERVICES_FAILURE_UNATTACHEDrh rS Z VALID_SERVICE_FAILURE_UNATTACHEDZINVALID_SERVICE_OP_FAILUREr
r� )r� r� r] �entitlements_found�entitlements_not_foundr� rE rE rF �%_create_enable_disable_unattached_msg� s, �
��
�r` z pro disablec K s� t | dg �}t||�\}}d}|D ]4}tj||d�}||| jd�} |t| || jd�M }q"|r�dd�tj|dd�� d }
d �tj |
d
d d d ��} t
j d
d�|�| d��t �
� |r�dS dS )zbPerform the disable action on a list of entitlements.
@return: 0 on success, 1 otherwise
r� Tr\ �r� zTry r� �r] �
allow_beta�.r9 �P F)r` rb rc r r] r r( )r� r) r re r� r rS r� ri Zwrapr Z InvalidServiceToDisableErrorr �process_events) rv r] rw rX r^ r_ r �ent_namerm �entZ valid_namesr\ rE rE rF �action_disable� s@ �������ri z
pro enablec K s� t �tj� zt�|� W n: tjtjfk
rT t j
tj dd� t j tj d� Y nX t
| dg �}t||�\}}d}|D �] }z�tj||| j| j| jd�\}} tj|d� |�s| dk �rt| t��r| jdk r�t �| jj� t j| jj| jj|d� | j t j k�r@|� |� n0|�r$t j |d � n |�s@| dk�r@t j!|d � ||M }W qx tjk
�r� }
z(t �|
j� t j|
j|
j"|d� d
}W 5 d}
~
X Y qxX qx|�r�t#||| jd �} t �$|� tj| j| jd ��t �%� |�r�d
S dS )z^Perform the enable action on a named entitlement.
@return: 0 on success, 1 otherwise
T)�exc_info)Z warning_msgr� )r� rc � access_onlyr� Nr )r� Frb r� r r( )&r r r ZREFRESH_CONTRACT_ENABLEr �request_updated_contractr �UrlErrorr� �logging�debug�REFRESH_CONTRACT_FAILURE�warningr� r) r �enable_entitlement_by_namer� Zbetark r r r r, rM r� rN r[ r r- ZIS_BETArk r r r� r' Zservices_failedrf ) rv r] rw rX r^ r_ r rg �ent_retr �er� rE rE rF �
action_enable� sx �
�
���
� � �
ru z
pro detachrY c C s* t || jd�}|dkr t�� t�� |S )zXPerform the detach action for this machine.
@return: 0 on success, 1 otherwise
ra r )�_detachr� r �startr rf )rv r] r rE rE rF �
action_detach& s
rx )r] r� rZ c C s g }t | �D ]\}ztj| |d�}W n tjk
r< Y q Y nX || |d�}|jdd�\}}|r |�|� q |r�t|�dkr~dnd}t� d�
|�� |D ]}t� d �
|j �� q�t j
|d
�s�dS |D ]}t|| |d d � q�| �� | j�� t| � t� tj� d
S )a7 Detach the machine from the active Ubuntu Pro subscription,
:param cfg: a ``config.UAConfig`` instance
:param assume_yes: Assume a yes answer to any prompts requested.
In this case, it means automatically disable any service during
detach.
@return: 0 on success, 1 otherwise
r\ )r] r� T)Zignore_dependent_servicesr( �sr^ z,Detach will disable the following service{}:z {}ra F)r� r r )r( r re r rf Z can_disablerk r$ r r rh r[ r Zprompt_for_confirmationr Z delete_cacher� rP r2 r ZDETACH_SUCCESS) r] r� Z
to_disablerg rm rh r r6 �suffixrE rE rF rv 6 s4
�
rv )r] rZ c C s� d }| j r&| j �di ��di ��d�}|r@t�tjj|d�� n t�tj� t� � t�
| � t � | �\}}t
�|�}t�t�|�� t�� d S )NZmachineTokenInfoZ contractInfor[ )�
contract_name)Z
machine_tokenrg r r r ZATTACH_SUCCESS_TMPLrh Z ATTACH_SUCCESS_NO_CONTRACT_NAMEr �stopZcleanupr r r �format_tabularr �handle_unicode_charactersrf )r] r{ r Z_ret�outputrE rE rF �_post_cli_attachb s( ��� �
r� c C s. t | j| j|�}t|�� � |jdkr*dS dS )NZsuccessr r( )r r� r� r� Zto_json�result�rv r] r� rE rE rF �
action_api| s r� c C sP zt t� |tjjd� W n& tjk
r> t�t j
j � Y dS X t |� dS d S )N)r] �moder( r )
r r r �EventLoggerModeZCLIr rm r r r ZATTACH_FAILUREr� r� r� rE rE rF �action_auto_attach� s �
r� c
K s� | j dkrtjd| j d��t�tj� t|d�}t�dtjj |j d� � t
|j d�}zt ||d�}W nL tj
k
r� } z,t�tj� t|j d�}t||d� |�W 5 d }~X Y nX t�dtj � |jS ) Nr7 r� )Zparamr� r� r9 )� user_code)Z magic_token)r� r] )rh r ZMagicAttachInvalidParamr r r ZCLI_MAGIC_ATTACH_INITr ZCLI_MAGIC_ATTACH_SIGN_INr� r r� r ZMagicAttachTokenErrorZCLI_MAGIC_ATTACH_FAILEDr r ZCLI_MAGIC_ATTACH_PROCESSINGZcontract_token)rv r] rw Z
initiate_respZ wait_optionsZ wait_resprt Zrevoke_optionsrE rE rF �
_magic_attach� s4
�
��� � r� z
pro attachc
C s� | j r$| jr$tjtjjtjjd��n�| j sB| jsBt| |d�}d }nj| j rT| j }d }nXzt �
t | j��}W n6 t k
r� } ztj
| jj|jd��W 5 d }~X Y nX |j }|j}| jo�|d k}ztj|||d� W n tjk
r� t�� �Y n�X d}|d k �r�| j�r�t||�\}} |D ]z}
tj||
ddd�\} } | �s�d}| d k �r�t| t��r�| jd k �r�t�| jj� tj| jj| jj|
d � n
t� |
� �q| �r�t | |dd
�}
tj|
jt j d � tj|
j|
jd � d}t |� |S d S )
Nr� r� )Z config_namerN )r� � allow_enabler T)r� rc r( r rb )� file_type�r r )!r� �
attach_configr r� r ZATTACH_TOKEN_ARG_XOR_CONFIGr� r[ r� r$ Z from_dictr5 r% Z AttachInvalidConfigFileErrorZenable_servicesr� r Zattach_with_tokenrm Z AttachErrorr) rr r r, rM r r rN r r' rI rJ r� )rv r] r� Zenable_services_overrider� rt r� r �foundZ not_foundr[ rs r r� rE rE rF �
action_attach� s� � � � � �
���� �r� c C s� | j pt}t�� �z}t�||� z*t�|d��}|j|dd� W 5 Q R X W n< t k
r� } z t
� |� W Y �W 5 Q R � dS d }~X Y nX W 5 Q R X dS )Nzw:gzzlogs/)Zarcnamer( r ) r �UA_COLLECT_LOGS_FILE�tempfileZTemporaryDirectoryr Z collect_logs�tarfile�open�add�PermissionErrorrn rN )rv r] Z output_fileZ
output_dirZresultsrt rE rE rF �action_collect_logs� s
,r� c C s� t }tttjtjtdd�tjtdd�|d�}|jdddd� |jdd t �
� d
�t�d � d |j _ |j
d
ddd�}d|_|jddd�}t|� |jtd� |jddd�}t|� |jtd� |jddd�}t|� |jtd� |jddd�}t|� |jtd� |jd d d�}t|� |jtd� |jd d d�} t| � | jt d� |jd d!d�}
t |
| d"� |
jt d� |jd#d$d�} t | | d"� | jt d� |jd%d&d�} | jt!d� t"| � |jd'd(d�}
t#|
� |
jt$d� |jd)d*d�}t%|| d"� |jt&d� |jd+d,d�}|jt'd� t(|� |jd-d.d�}|jt)d� t*|� |jd d
�t�d�}|jt+d� |jd/d0d�}|jt,d� t-|� |S )1Nz <command>r� )r< r? r= r> r; z--debugr� z&show all debug log messages to consoler� z --versionr zshow version of {})r� r r� r� r� r� r^ r� Tr� z1attach this machine to an Ubuntu Pro subscriptionr� r� r� r� r� z+automatically attach on supported platformsr� z&collect Pro logs and debug informationr
z/manage Ubuntu Pro configuration on this machiner� z3remove this machine from an Ubuntu Pro subscriptionr z5disable a specific Ubuntu Pro service on this machiner� r� z4enable a specific Ubuntu Pro service on this machiner� z=check for and mitigate the impact of a CVE/USN on this systemr� z.list available security updates for the systemr� z3show detailed information about Ubuntu Pro servicesr� zrefresh Ubuntu Pro servicesr z)current status of all Ubuntu Pro servicesr z/show system information related to Pro services).�__doc__r: r� rq r� r� rh � EPILOG_TMPLr� r � get_versionr� r� r� Zrequiredr� r� r� r� r� r� r� r� r� r� r� r! r� rx r ri r ru r� r� r� r� r� � action_help�action_refreshr� �
action_statusr �
print_version�
action_systemr )r] r; r� r� Z
parser_attachZ
parser_apiZparser_auto_attachZparser_collect_logsZ
parser_configZ
parser_detachZparser_disableZ
parser_enableZ
parser_fixZparser_security_statusZ parser_helpZparser_refreshZ
parser_statusZparser_versionZ
parser_systemrE rE rF r s� ��� �� � � � � � � � � � � � � � � r c C s� |s t �� }| r| jnd}| r$| jnd }tjjj}tj |||d�\}}t
|d |k�}| r�| j r�|r�|d |kr�t j
ddd� t�d� tj |||d�\}}qdt �
d� t �|� t�|�}t �
t�|�� t �� |S )NF)�simulate_with_tokenrV Zexecution_statusrd r^ )�endr( )r
rd �allr� r ZUserFacingConfigStatusZACTIVEr� r r rF �waitr r �time�sleepZset_output_contentr} r r~ rf ) rv r] rV r� Z active_valuer r Z
config_activer rE rE rF r� � s4
�
�
r� c K s t |d| jd� dS )zGPerform the system action.
:return: 0 on success, 1 otherwise
r r r r r� rE rE rF r� � s �r� c C s t |�}t�|j� dS )Nr )r! r r Zreboot_requiredr� rE rE rF r � s r c C s t t�� � d S r )r� r r� )�_argsr] rE rE rF r� � s r� c C sh z |� � W nL tk
rX } z.t�� � t�|� W 5 Q R X t�tj ��W 5 d }~X Y nX t
tj � d S r ) Zprocess_config� RuntimeErrorr �disable_log_to_consolern r� r r� r ZREFRESH_CONFIG_FAILUREr� ZREFRESH_CONFIG_SUCCESS)rv r] �excrE rE rF �_action_refresh_config� s
r� c C sl zt �|� W nN tjk
r\ } z.t�� � t�|� W 5 Q R X t�t j
��W 5 d }~X Y nX t t j � d S r )
r rl r rm r r� rn r� r� r rp r� ZREFRESH_CONTRACT_SUCCESS�r� r] r� rE rE rF �_action_refresh_contract� s
r� c C s~ z"t |� t� |jr t�|� W nL tk
rn } z.t�� � t�|� W 5 Q R X t �
t j ��W 5 d }~X Y n X t
t j� d S r )r2 r1 r rO � Exceptionr r� rn r� r r� r ZREFRESH_MESSAGES_FAILUREr� ZREFRESH_MESSAGES_SUCCESSr� rE rE rF �_action_refresh_messages� s
r� z pro refreshc C sj | j d ks| j dkr t| |� | j d ks2| j dkrHt| |� t�tj� | j d ks\| j dkrft| |� dS )Nr
r r r )r� r� r� r. �remover0 ZCONTRACT_REFRESH_WARNINGr� r� rE rE rF r� � s
r� )r] �scoperR rS rZ c C sR |t jkr| j}| j}n|t jkr.| j}| j}d|kr<|}n|}t|||d� dS )zS
Handles setting part the apt proxies - global and uaclient scoped proxies
r8 )r4 r5 Z proxy_scopeN)r" rL r+ r, rH r- r. r# )r] r� rR rS r4 r5 rE rE rF rG � s
�rG c C s� | j }| j}|s&t|d�j|d� dS |s2t�� }t�||�}| jdkrXt t
� |�� n&|� � D ] \}}t d�|�
� |�� q`dS )Nr� )rV r r7 z{}:
{}
)r� r� r rU r
rd r r� rh r� r7 r� �itemsr� )rv r] r� rV Z
help_responser� r� rE rE rF r� s
r� c C sD | r| j dks t| dd�dkr"d S t�� }|r@t�tj|d�� d S )Nr� rh r^ )r7 r8 )r )r� r� r Zcheck_for_new_versionrn rq �NEW_VERSION_NOTICErh )r� Z new_versionrE rE rF �_warn_about_new_version s ���r� c C s� |dkrt �� }|j}t�� }|dkr.t�� }|�|� |�t �
� � g |_ t� t
j�}|�|� |�| � |�d� |�|� t�� r�t�|�}|�� s�|�� |�d� t�|�}|�t� � |�|� |�d� |�|� dS )z3Setup console logging and debug logging to log_fileNz
ua-consolei� zua-file)r
rd �log_filer Z LogFormatterrn Z getLoggerZsetLevelZ addFilter�pro_logZRedactionFilterZhandlersZ
StreamHandlerrI rJ Z setFormatterZset_nameZ
addHandlerr� �pathlib�Path�existsZtouch�chmodZ FileHandlerr3 ) �
console_level� log_levelr� Zloggerr] Zconsole_formatterZconsole_handlerZ
log_file_pathZ file_handlerrE rE rF �
setup_logging* s0
r� c C sT | j dkrPt�| j � t| d�rP| jdkr8t�tjj� | jdkrPt�tjj � dS )z3Set the right event mode based on the args provided)r� r� r� r r rh r7 r8 N)
r� r Z set_command�hasattrrh �set_event_moder r� ZJSONZYAML)r� rE rE rF r� P s
r� c s � fdd�}|S )Nc s� z � | |�W S t k
r` t�� � t�d� W 5 Q R X tdtjd� t� � t�
d� Y �n> t j k
�rl } z�dt
|�kr�tj}t�d�r�tj}|j|jd�}tj|j|jd� tj|jtjd � npt�� �8 |j|d
�}|jr�tj}ntj}t�|jf |�� W 5 Q R X tj }tj|j|jd� tj|jtjd � t� � t� � t � t�
d� W 5 d }~X Y �n2 t j k
�r } z�t�� � t�|j� W 5 Q R X tj|j|j |j!d � tjd �|j�tjd � t"|t j#��s�t� � t� � t � t�
|j$� W 5 d }~X Y n� t%k
�r� } zpt�� � t�d
� W 5 Q R X t� � tjtj&jtjd � tjt'|dt
|��dd� t� � t � t�
d� W 5 d }~X Y nX d S )N�KeyboardInterruptz Interrupt received; exiting.rO r( ZCERTIFICATE_VERIFY_FAILEDzca-certificates)r_ r� )Zinfo_msgr� )r_ rN )r r �additional_infoz{}z&Unhandled exception, please file a bugr� r� )r Z
error_type)(r� r r� rn rN r� rI rJ r Zclear_lock_file_if_presentrL r rm rr r Z&SSL_VERIFICATION_ERROR_CA_CERTIFICATESr Z is_installedZ%SSL_VERIFICATION_ERROR_OPENSSL_CONFIGrh r_ r r� r[ r Z$LOG_CONNECTIVITY_ERROR_WITH_URL_TMPLZLOG_CONNECTIVITY_ERROR_TMPLr� ZCONNECTIVITY_ERRORrf r� r� r� r� r Z
LockHeldErrorZ exit_coder� ZUNEXPECTED_ERRORr� )rv rw r� Ztmplr� Zmsg_argsZmsg_tmplrt ��funcrE rF r} \ sv
�
�
� �z#main_error_handler.<locals>.wrapperrE )r� r} rE r� rF �main_error_handler[ s Hr� c C s
| s
t j} t�� }t|d�}| dd � }|sF|�� tt� t �d� |j |d�}t
|� |j }|j }t
j||d� |j}|jr�tjntj}t|||j� t�d| � t
�� � |�� W 5 Q R X dd� tt
�� �� �D �} | r�t�d| � |j||d�}
t |� |
S ) Nr� r( )rv r3 zExecuted with sys.argv: %rc S s g | ]\}}d � ||��qS )z{}={})rh )r% �k�vrE rE rF r' � s �zmain.<locals>.<listcomp>z'Executed with environment variables: %r) rI �argvr
rd r rH r� rK rL �
parse_argsr� r4 r5 r Zconfigure_web_proxyr� ro rn �DEBUG�INFOr� r� r� Zwarn_about_invalid_keysrR Zget_pro_environmentr� r� r� ) Zsys_argvr] r� Z
cli_argumentsrv r4 r5 r� r� Zpro_environmentZ return_valuerE rE rF �main� s<
��r� �__main__)N)N)NN)N)NN)N)�r� rq r7 rn r� r� rI r� r� ri r� � functoolsr �typingr r r Zuaclientr r r r
r r r
r r r r r r� r r r r r r r Zuaclient.api.apir Z2uaclient.api.u.pro.attach.auto.full_auto_attach.v1r r Z+uaclient.api.u.pro.attach.magic.initiate.v1r Z)uaclient.api.u.pro.attach.magic.revoke.v1r r Z'uaclient.api.u.pro.attach.magic.wait.v1r r Z5uaclient.api.u.pro.security.status.reboot_required.v1r! rW r" r# Zuaclient.data_typesr$ r% Zuaclient.defaultsr& Zuaclient.entitlementsr' r( r) Z(uaclient.entitlements.entitlement_statusr* r+ r, r- Zuaclient.filesr. r/ Zuaclient.files.noticesr0 Z uaclient.jobs.update_messagingr1 r2 Z uaclient.logr3 Z
uaclient.yamlr4 r5 r� r� r� rK ZSTATUS_HEADER_TMPLr� r� r� Z BLUE_INFOr� Zget_event_loggerr �ArgumentParserr: r~ r� r� r� r� r� r� r� rr r� r� r� r� r� r� r� r� r� r� r� rd r� r r r r r r r r! r� r� r� r` ri ru rM rx rF rv r� r� r� r� r� r� r r� r� r r� r� r� r� r� rG r� r� r� r� r� r� rn rL rE rE rE rF �<module> s 4
�
���
[
2 9# '/$P �
)
}
/ )E ,!D
}
�
& L )