File: //lib/python3/dist-packages/uaclient/__pycache__/apt.cpython-310.pyc
o
V$�c V � @ sv d dl Z d dlZd dlZd dlZd dlZd dlZd dlZd dlZd dlZd dl m
Z
d dl m Z m
Z
mZmZ d dlmZmZmZmZmZ d dlmZ dZdZdZd Zd
Z d Z d Z d
Z dZ dZ!dZ"dZ#dZ$dZ%dZ&dZ'g d�Z(e�)� Z*ej+G dd� dej,��Z-edde.fde.fd e.fg�Z/d d � Z0d e.d eej1 fd!d"�Z2di fd#e
e. d$ee. d%ee e.e.f d e.fd&d'�Z3e
dd(�di fd$ee. d%ee e.e.f d e.fd)d*��Z4di fd+e.d$ee. d%ee e.e.f d e.fd,d-�Z5i fd%ee e.e.f d e.fd.d/�Z6ddi fd0e
e. d1ee
e. d$ee. d%ee e.e.f d e.f
d2d3�Z7d4e.d5e.d6e.d7e
e. d8e.d df d9d:�Z8d;d<� Z9d=d>� Z: ded4e.d5e.d8ee. d dfd?d@�Z;dAdB� Z<dCdD� Z=dEdF� Z>dGdH� Z?ddI�dJdK�Z@dLe.d eAfdMdN�ZBd e
e/ fdOdP�ZCdfdReAd e
e. fdSdT�ZDdde-jEfdUee. dVee. dWee- d dfdXdY�ZFdZe.d[e.d\e.d eAfd]d^�ZGd eeH fd_d`�ZId ee j fdadb�ZJdgdcdd�ZKdS )h� N)� lru_cache)�Dict�List�
NamedTuple�Optional)� event_logger�
exceptions�gpg�messages�system)�ESM_APT_ROOTDIRg N@z # ubuntu-advantage-toolszDir::Etc::netrc/zDir::Etc::netrcparts/zDir::State::lists/z$Acquire::http::Proxy "{proxy_url}";
z%Acquire::https::Proxy "{proxy_url}";
z4Acquire::http::Proxy::esm.ubuntu.com "{proxy_url}";
z5Acquire::https::Proxy::esm.ubuntu.com "{proxy_url}";
z/etc/apt/trusted.gpg.d/z/usr/share/keyringsz/usr/lib/apt/methods/httpsz /usr/sbin/update-ca-certificatesz//etc/apt/apt.conf.d/90ubuntu-advantage-aptproxyz*/var/lib/apt/periodic/update-success-stampaL # Written by ubuntu-advantage-tools
deb https://esm.ubuntu.com/{name}/ubuntu {series}-{name}-security main
# deb-src https://esm.ubuntu.com/{name}/ubuntu {series}-{name}-security main
deb https://esm.ubuntu.com/{name}/ubuntu {series}-{name}-updates main
# deb-src https://esm.ubuntu.com/{name}/ubuntu {series}-{name}-updates main
)g �?g @g $@c @ s e Zd Ze� Ze� ZdS )�
AptProxyScopeN)�__name__�
__module__� __qualname__�object�GLOBAL�UACLIENT� r r �./usr/lib/python3/dist-packages/uaclient/apt.pyr
9 s
r
�InstalledAptPackages�name�version�archc
C s | � d�\}}tj�d�sdS z0t�� �!}tjddd�||||�tj� |d�gt
t d� W d � W dS 1 s8w Y W dS t j
yy } z-|jdkrpt|j��� }t�d |�rbt �d
�| ���t�d |�rpt �d �| ���t �d
��d}~w tjy� t �d�t
|���w )a Validate apt credentials for a PPA.
@param repo_url: private-ppa url path
@param username: PPA login username.
@param password: PPA login password or resource token.
@raises: UserFacingError for invalid credentials, timeout or unexpected
errors.
�://z/usr/lib/apt/apt-helperNz
download-filez{}://{}:{}@{}/ubuntu/pool/zapt-helper-output)�timeout� retry_sleeps�d z 401\s+unauthorized|httperror401z'Invalid APT credentials provided for {}zconnection timed outz-Timeout trying to access APT repository at {}z7Unexpected APT error. See /var/log/ubuntu-advantage.logzVCannot validate credentials for APT repo. Timeout after {} seconds trying to reach {}.)�split�os�path�exists�tempfile�TemporaryDirectoryr �subp�format�join�APT_HELPER_TIMEOUT� APT_RETRIESr �ProcessExecutionError� exit_code�str�stderr�lower�re�search�UserFacingError�
subprocess�TimeoutExpired)�repo_url�username�password�protocol� repo_path�tmpd�er, r r r � assert_valid_apt_credentialsD sT
� ��&�
� �������r: � apt_error�returnc C s� d}t � }| �� �d�D ] }|r*t�d|�}|r*d|�� d �d�d }|�|� q |rBtjj t
|�dkr8d nd
d� t |��d �}|S ) aA Parse apt update errors for invalid apt config in user machine.
This functions parses apt update errors regarding the presence of
invalid apt config in the system, for example, a ppa that cannot be
reached, for example.
In that scenario, apt will output a message in the following formats:
The repository 'ppa 404 Release' ...
Failed to fetch ppa 404 ...
On some releases, both of these errors will be present in the apt error
message.
:param apt_error: The apt error string
:return: a NamedMessage containing the error message
N�
z2(Failed to fetch |The repository .)(?P<url>[^\s]+)z- �urlz/distsr � �s� )�plural� failed_repos)
�set�stripr r. r/ � groupdict�addr
� APT_UPDATE_INVALID_URL_CONFIGr% �lenr& �sorted)r; � error_msgrC �line�
pattern_match�repo_url_matchr r r �(_parse_apt_update_for_invalid_apt_configx s$ ��
� �rO �cmdrK �envc
C s� zt j| dt|d�\}}W |S tjyB } z'dt|j�v r"t�� � t|j�}|r1tj |j
d��|r5|nt|�}t� |��d}~ww )a� Run an apt command, retrying upon failure APT_RETRIES times.
:param cmd: List containing the apt command to run, passed to subp.
:param error_msg: The string to raise as UserFacingError when all retries
are exhausted in failure.
:param env: Optional dictionary of environment variables to pass to subp.
:return: stdout from successful run of the apt command.
:raise UserFacingError: on issues running apt-cache policy.
T)�capturer rQ z%Could not get lock /var/lib/dpkg/lock)rK N) r r$ r( r r) r+ r, �APTProcessConflictErrorrO �APTInvalidRepoError�msgr0 )rP rK rQ �out�_errr9 �repo_error_msgrU r r r �run_apt_command� s$ ��
�
��rY )�maxsizec C s t ddg| |d�S �N� apt-cache�policy�rP rK rQ �rY )rK rQ r r r �get_apt_cache_policy� s
�r` �packagec C s t dd| g||d�S r[ r_ )ra rK rQ r r r � get_apt_cache_policy_for_package� s �rb c
C s� zMz
t ddg| d�}W n; tjy t�� � tjy* } ztj|jd��d }~w tjyF } ztjtj jd |j tj j
d��d }~ww W t � � |S t � � w )N�apt-get�update)rP rQ )�repo_msgr= )rU �msg_code)
rY r rS � APTUpdateProcessConflictErrorrT �APTUpdateInvalidRepoErrorrU r0 r
�APT_UPDATE_FAILEDr r` � cache_clear)rQ rV r9 r r r �run_apt_update_command� s$ �����
�rk �packages� apt_optionsc
C sr |d u rg }zt g d�| | ||d�}W |S tjy$ tj|d�� tjy8 } ztj|j|d��d }~ww )N)rc �installz --assume-yesr^ )�
header_msg)re ro )rY r rS � APTInstallProcessConflictErrorrT �APTInstallInvalidRepoErrorrU )rl rm rK rQ rV r9 r r r �run_apt_install_command� s* ���� ���rr �
repo_filenamer3 � credentials�suites� keyring_filec C s0 z |� d�\}}W n
ty d}|}Y nw t�� d }|�d�r(|dd� }t|||� d}tdd gtjj �} | �
� D ]}
d
� |�|
vrGq=d |
vrLq=d } d
} |D ]"} || vrZqSd
}
d| v rk|skt �
d| |� d}
| dj |
|| d�7 } qSt�| | � t|||� tj�t|�}tj�t|�}t�||� dS )z�Add an authenticated apt repo and credentials to the system.
@raises: InvalidAPTCredentialsError when the token provided can't access
the repo PPA.
�:�bearer�series�/N���Fr\ r] z a={}-updatesz o=Ubuntu,TrA z-updatesz?Not enabling apt suite "%s" because "%s-updates" is not enabledz# zQ{maybe_comment}deb {url}/ubuntu {suite} main
# deb-src {url}/ubuntu {suite} main
)�
maybe_commentr> �suite)r �
ValueErrorr �get_platform_info�endswithr: rY r
�APT_POLICY_FAILEDrU �
splitlinesr% �logging�debug�
write_file�add_apt_auth_conf_entryr r r& � KEYRINGS_DIR� APT_KEYS_DIRr �export_gpg_key)rs r3 rt ru rv r4 r5 ry �updates_enabledr] rL �contentr} r| �source_keyring_file�destination_keyring_filer r r �add_auth_apt_repo sX �
� ��� r� c
C s� t � }| �d�\}}|�d�s|d7 }tj�|�r t�|�}nd}dj|||t d�}d}g } |�
� D ].}
|s[|
�� } t | �dkr[| d } | |krP| � |� d }q2| |v r[| � |� d }| � |
� q2|sh| � |� | � d� tj
|d
�| �d d � d
S )zBAdd or replace an apt auth line in apt's auth.conf file or conf.d.r rz rA z:machine {repo_path} login {login} password {password}{cmt})r7 �loginr5 �cmtF� r? Tr= � ��modeN)�!get_apt_auth_file_from_apt_configr r� r r r! r � load_filer% �APT_AUTH_COMMENTr� rI �appendr� r& )
r3 r� r5 �
apt_auth_file� _protocolr7 � orig_content�repo_auth_line�added_new_auth� new_linesrL �
split_line�curr_line_repor r r r� O sD
��
r� c s� | � d�\}}|�d�r|dd� }t� }tj�|�rGt�|�}dj|d�� d� � fdd �|�
� D ��}|s=t� |� dS tj ||d
d � dS dS ) z+Remove a repo from the shared apt auth filer rz Nr{ zmachine {repo_path}/ login)r7 r= c s g | ]}� |vr|�qS r r )�.0rL �� auth_prefixr r �
<listcomp>� s z2remove_repo_from_apt_auth_file.<locals>.<listcomp>r� r� )
r r� r� r r r! r r� r% r& r� �ensure_file_absentr� )r3 r� r7 r� �apt_authr� r r� r � remove_repo_from_apt_auth_filez s
��r� c C s2 t �| � |rtj�t|�}t �|� t|� dS )z>Remove an authenticated apt repo and credentials to the systemN)r r� r r r& r� r� )rs r3 rv r r r �remove_auth_apt_repo� s
r� c C sB |� d�\}}|�d�r|dd� }dj||d�}t�| |� dS )z.Add an apt preferences file and pin for a PPA.r rz Nr{ z<Package: *
Pin: release o={origin}
Pin-Priority: {priority}
)�origin�priority)r r� r% r r� )�apt_preference_filer3 r� r� r� r7 r� r r r �add_ppa_pinning� s
��r� c C sV t �dddtg�\} }| r| �d�d d S t �dddtg�\} }| �d�d �d�S )z7Return to patch to the system configured APT auth file.�
apt-config�shell�key�'r? z90ubuntu-advantagerz )r r$ �APT_CONFIG_AUTH_PARTS_DIRr �APT_CONFIG_AUTH_FILE�rstrip)rV rW r r r r� � s
�
�r� c
C s~ | � d�\}}|�d�r|dd� }d}t�dddtg�\}}|r(|� d �d
}|�dd �}tt�tj �
||d � |� ���S )
zEList any apt files in APT_CONFIG_LISTS_DIR given repo_url and series.r rz Nr{ z/var/lib/apt/listsr� r� r� r� r? �_z
_dists_{}*) r r� r r$ �APT_CONFIG_LISTS_DIR�replacerJ �globr r r& r% )r3 ry r� r7 � lists_dirrV rW �aptlist_filenamer r r �find_apt_list_files� s"
� ���r� c C s t | |�D ]}t�|� qdS )z?Remove any apt list files present for this repo_url and series.N)r� r r� )r3 ry r r r r �remove_apt_list_files� s �r� )�
_entitlementsc C s� ddl m} | du rddlm} |} | jD ]D}t||�s q|jj|jd�}|j j|jd�}t
j � |�rCt
jd�|�tjd� t�|� t
j � |�rYt
jd�|�tjd� t�|� qdS ) a
Clean apt files written by uaclient
:param _entitlements:
The uaclient.entitlements module to use, defaults to
uaclient.entitlements. (This is only present for testing, because the
import happens within the function to avoid circular imports.)
r )�RepoEntitlementN)� entitlements�r z Removing apt source file: {})� file_typez!Removing apt preferences file: {})�uaclient.entitlements.repor� �uaclientr� �ENTITLEMENT_CLASSES�
issubclass�repo_list_file_tmplr% r �repo_pref_file_tmplr r r! �event�info�sysr, r r� )r� r� �__entitlements�ent_cls� repo_file� pref_filer r r �clean_apt_files� s.
�
�
��r� �pkgc C s
| t � v S �N)� get_installed_packages_names)r� r r r � is_installed� s
r� c C s0 t �g d��\} }| �� dd � }dd� |D �S )N)�apt�listz --installedr? c S s8 g | ]}t |�d �d |�d�d |�d�d d��qS )rz r � r? r� )r r r )r r )r� �entryr r r r� � s � ��z*get_installed_packages.<locals>.<listcomp>)r r$ r� )rV r� � package_listr r r �get_installed_packages� s
�r� F�include_versionsc C s t � }dd� |D �}|S )Nc S s g | ]}|j �qS r r� )r� r� r r r r� s z0get_installed_packages_names.<locals>.<listcomp>)r� )r� r� � pkg_namesr r r r� s r� �
http_proxy� https_proxy� proxy_scopec C s� | s|r!|r!d}|t jkrd}n|t jkrd}t�tjj|d�� d}| r@|t jkr3|tj| d�7 }n
|t jkr@|t j| d�7 }|r]|t jkrP|t
j|d�7 }n
|t jkr]|t j|d�7 }|dkrftj | }|dkrqt
�t� dS t
�t|� dS )a�
Writes an apt conf file that configures apt to use the proxies provided as
args.
If both args are None, then no apt conf file is written. If this function
previously wrote a conf file, and was run again with both args as None,
the existing file is removed.
:param http_proxy: the url of the http proxy apt should use, or None
:param https_proxy: the url of the https proxy apt should use, or None
:return: None
rA z UA-scoped�global)�scope)� proxy_urlN)r
r r r� r� r
�SETTING_SERVICE_PROXY_SCOPEr% �APT_CONFIG_UA_PROXY_HTTP� APT_CONFIG_GLOBAL_PROXY_HTTP�APT_CONFIG_UA_PROXY_HTTPS� APT_CONFIG_GLOBAL_PROXY_HTTPS�APT_PROXY_CONFIG_HEADERr r� �APT_PROXY_CONF_FILEr� )r� r� r� �message�apt_proxy_configr r r �setup_apt_proxy sD
�
�
�
�
�
r� �version1�version2�relationc C s2 z
t �dd| ||g� W dS tjy Y dS w )zCReturn True comparing version1 to version2 with the given relation.�dpkgz--compare-versionsTF)r r$ r r) )r� r� r� r r r �compare_versions@ s ��r� c C s d } t j�t�rt �t�j} | S r� )r r r! � APT_UPDATE_SUCCESS_STAMP_PATH�stat�st_mtime��
cache_timer r r �get_apt_cache_timeK s r� c C s$ t � } | d u r d S tj�| tjj�S r� )r� �datetime�
fromtimestamp�timezone�utcr� r r r �get_apt_cache_datetimeR s r� c
C s� t �� sd S dd l}dd l}ddlm} ddlm}m} || �}|� � d |j
kr-|� � t � � rB|| �}|� � d |j
krB|� � |j
�� D ] }d|vrS|j
�|� qG|j
�dt� |�� |jtd�} z| �� W d S |jjy} t�d� Y d S w )Nr )�ApplicationStatus)�ESMAppsEntitlement�ESMInfraEntitlement�Acquire�Dir)�rootdirz!Failed to fetch the ESM Apt Cache)r �is_current_series_ltsr� �apt_pkg�(uaclient.entitlements.entitlement_statusr� �uaclient.entitlements.esmr� r� �application_status�DISABLED�setup_local_esm_repo� is_current_series_active_esm�config�keys�clearrD r � init_config�Cacherd �cache�FetchFailedExceptionr� �warning)
�cfgr� r r� r� r� �apps�infrar� r r r r �update_esm_cachesY s2 � �r r� )F)r< N)Lr� �enumr� r� r r. r1 r� r" � functoolsr �typingr r r r r� r r r r
r �uaclient.defaultsr r' r� r� r� r� r� r� r� r� r� r� �APT_METHOD_HTTPS_FILE�CA_CERTIFICATES_FILEr� r� �ESM_REPO_FILE_CONTENTr( �get_event_loggerr� �unique�Enumr
r+ r r: � NamedMessagerO rY r` rb rk rr r� r� r� r� r� r� r� r� r� �boolr� r� r� r r� r� �floatr� r� r r r r r �<module> s ���4�
�/����
�'��� � ����
�"
��
���
������
�?+����
�
#
����
�8