File: //lib/python3/dist-packages/uaclient/__pycache__/cli.cpython-310.pyc
o
S��cL �
@ s d Z ddlZddlZddlZddlZddlZddlZddlZddlZddl Z ddl
Z
ddl Z ddl m
Z
ddlmZmZmZ ddlZddlmZmZmZmZmZmZmZmZm Z m Z m Z m Z m Z m!Z! ddlm"Z# ddlm$Z$m%Z% ddl&m'Z' dd l(m)Z)m*Z* dd
l+m,Z, dd l-m.Z.m/Z/ dd l0m1Z1m2Z2 dd
l3m4Z4 ddl5m6Z6m7Z7 ddl8m9Z9m:Z: ddl;m<Z<m=Z= ddl>m?Z?m@Z@mAZA ddlBmCZCmDZDmEZEmFZF ddlGmHZH ddlImJZJmKZK dZLdZMdZNdZOdZPdZQg d�ZRd ZSd e jT d ZUe �V� ZWG d d � d ejX�ZYd�d!d"�ZZd#d$� Z[d%d&� Z\d�d'd(�Z]d)d*� Z^d+d,� Z_d-d.� Z`d/d0� Zad1d2� Zbd3d4� Zcd5d6� Zdd7d8� Zed9d:� Zfd;d<� Zgd=d>� Zhd?d@� ZidAdB� ZjdCdD� ZkdEdF� ZldGejmfdHdI�ZndGejmfdJdK�ZodGejmfdLdM�ZpdNdO� ZqdPdQ� ZrdRdS� ZsdGejmdTetdUetfdVdW�ZudXdY�dZd[�Zvd\d]� Zwd^d_� Zxe[d`da� �Zye[dbdc� �Zzddde� Z{e\e[e]e{�eZdf�dgdh� ����Z|e\e[e]e{�eZdi�djdk� ����Z}e\e[e]� eZdl�dme~fdndo�����ZdGejmdpe�dme~fdqdr�Z�dGejmdmdfdsdt�Z�dudv� Z�e[dGejmdme~fdwdx��Z�dydz� Z�e^e[eZd{�d|d}� ���Z�dGejmfd~d�Z�dGejmfd�d��Z�d�d�� Z�d�d�� Z�dGejmfd�d��Z�d�d�d��Z�dGejmfd�d��Z�e]� dGejmfd�d���Z�dGejmfd�d��Z�e[eZd��dGejmfd�d����Z�dGejmd�e6d�etd�eet dmdf
d�d��Z�d�d�� Z�d�d�d�d��Z�d�d�d��Z�d�d�� Z�d�d�� Z�e�d�d�d���Z�e�d�k�r�e��e�� � dS dS )�z2Client to manage Ubuntu Pro services on a machine.� N��wraps)�List�Optional�Tuple)�actions�apt�apt_news�config�contract�daemon�defaults� entitlements� event_logger�
exceptions�lock�messages�security�security_status)�status)�util�version)�call_api)�FullAutoAttachOptions�_full_auto_attach)� _initiate)�MagicAttachRevokeOptions�_revoke)�MagicAttachWaitOptions�_wait)�_reboot_required)�
AptProxyScope�setup_apt_proxy)�AttachActionsConfigFile�IncorrectTypeError)�DEFAULT_LOG_FORMAT�PRINT_WRAP_WIDTH)�,create_enable_entitlements_not_found_message�entitlements_disable_order�get_valid_entitlement_names)�ApplicationStatus�CanDisableFailure�CanEnableFailure�CanEnableFailureReason)� state_files)� refresh_motd� update_apt_and_motd_messages�proz{name} {command} [flags]zAUse {name} {command} --help for more information about a command.z&Try 'pro --help' for more information.z}Account: {account}
Subscription: {subscription}
Valid until: {contract_expiry}
Technical support level: {tech_support_level}
z$https://auth.contracts.canonical.com)�tabular�json�yamlzua_logs.tar.gz�
z� A new version is available: {version}
Please run:
sudo apt-get install ubuntu-advantage-tools
to get the latest version with new features and bug fixes.c sl e Zd Zdddejdfdee f� fdd�
Zdd� Zd
� fdd � Z e
d
e e e e e f fd d ��Z
� ZS )�UAArgumentParserN� base_descc s t � j||||d� || _d S )N)�prog�usage�epilog�formatter_class)�super�__init__r7 )�selfr8 r9 r: r; r7 �� __class__� �./usr/lib/python3/dist-packages/uaclient/cli.pyr= l s �
zUAArgumentParser.__init__c C s, | � tj� |dkr t}| �d|d � d S )Nz&the following arguments are required: � r5 )� print_usage�sys�stderr�TRY_HELP�exit)r> �messagerA rA rB �error} s zUAArgumentParser.errorFc sP | j r t�� \}}t|�}|rt|| �}d�| j g| �| _t� j|d� d S )Nr5 ��file)r7 r6 �_get_service_descriptions�sorted�join� descriptionr< �
print_help)r> rL �show_all�non_beta_services_desc�beta_services_desc�service_descriptionsr? rA rB rQ � s ��
�zUAArgumentParser.print_help�returnc C s� t �� dk} tj| d�}d}g }g }t�t�� �}|D ]K}z tj||d d�}W n
tj y2 Y qw |�
d|d �}|j rEd� |j �} nd} t
j|j ||j| d �td
d d d �}
|jra|�|
� q|�|
� q||fS )
Nr �� root_modez - {name}: {description}{url}�name��cfgrY � presentedAsz ({})� )rY rP �urlz F)�width�subsequent_indent�break_long_words�break_on_hyphens)�os�getuidr
�UAConfigr �get_available_resourcesr �entitlement_factoryr �EntitlementNotFoundError�get� help_doc_url�format�textwrap�fillrP r& �is_beta�append) rX r[ �service_info_tmplrS rT � resources�resource�ent_cls�presentation_namer^ � service_inforA rA rB rM � sB
���� z*UAArgumentParser._get_service_descriptions)NF)�__name__�
__module__� __qualname__�argparse�
HelpFormatterr �strr= rJ rQ � staticmethodr r rM �
__classcell__rA rA r? rB r6 k s ��(r6 c � � fdd�}|S )z1Decorator asserting exclusive access to lock filec � t � �� �fdd��}|S )Nc sF t j| �d�� � |d| i|��}W d � |S 1 s w Y |S )N)r[ � lock_holderr[ )r �SingleAttemptLock)r[ �args�kwargs�retval)�fr� rA rB �new_f� s
��z0assert_lock_file.<locals>.wrapper.<locals>.new_fr �r� r� �r� �r� rB �wrapper� s z!assert_lock_file.<locals>.wrapperrA )r� r� rA r� rB �assert_lock_file� s r� c � t � �� fdd��}|S )z Decorator asserting root userc s" t �� dkr
t�� �� | i |��S �Nr )rc rd r �NonRootUserError)r� r� r� rA rB r� � s zassert_root.<locals>.new_fr r� rA r� rB � assert_root� s r� c r� )z>Decorator to verify if correct params are used for json formatc sX | s
� | g|�R i |��S | j dkr!| js!tj}tj|j|jd��� | g|�R i |��S )Nr3 ��msg�msg_code)rk �
assume_yesr � JSON_FORMAT_REQUIRE_ASSUME_YESr �UserFacingErrorr� rY )�cmd_argsr� r� r� r� rA rB r� � s z&verify_json_format_args.<locals>.new_fr r� rA r� rB �verify_json_format_args� s
r� c r~ )z�Decorator asserting attached config.
:param msg_function: Optional function to generate a custom message
if raising an UnattachedError
c r )Nc s^ |j s%�r t| dd�}t| dd�}�|||d�}t�|�}|�t�� }|�� | fd|i|��S )N�commandr] �service)r� �
service_namesr[ r[ )� is_attached�getattrr �UnattachedError)r� r[ r� r� r� r� � exception)r� � msg_functionrA rB r� � s �
�z/assert_attached.<locals>.wrapper.<locals>.new_fr r� �r� r� rB r� � s z assert_attached.<locals>.wrapperrA )r� r� rA r� rB �assert_attached� s r� c r� )z&Decorator asserting unattached config.c s( |j rt�|jj�dd���� | |d�S )NrY r] �r[ )r� r �AlreadyAttachedError�machine_token_file�accountri �r� r[ r� rA rB r� s
� z"assert_not_attached.<locals>.new_fr r� rA r� rB �assert_not_attached s r� c C s4 d| _ d| _| jdddd� | jddg d d
d � | S ) z5Build or extend an arg parser for the api subcommand.�api� Calls the Client API endpoints.�
endpoint_path�endpointzAPI endpoint to call)�metavar�helpz--args�options�*z;Options to pass to the API endpoint, formatted as key=value)�dest�default�nargsr� )r8 rP � add_argument��parserrA rA rB �
api_parser s ��r� c C s* d| _ d| _tjt| j d�| _d| j_| S )z9Build or extend an arg parser for auto-attach subcommand.� auto-attachz5Automatically attach on an Ubuntu Pro cloud instance.�rY r� �Flags)r8 rP �
USAGE_TMPLrk �NAMEr9 �
_optionals�titler� rA rA rB �auto_attach_parser. s �r� c C s2 d| _ d| _tjt| j d�| _| jdddd� | S )z<Build or extend an arg parser for 'collect-logs' subcommand.� collect-logsz<Collect logs and relevant system information into a tarball.r� z-oz--outputzEtarball where the logs will be stored. (Defaults to ./ua_logs.tar.gz)�r� )r8 rP r� rk r� r9 r� r� rA rA rB �collect_logs_parser9 s ��r� c C s0 t jtdd�| _d| _d| _| jdddd� | S ) z;Build or extend an arg parser for 'config show' subcommand.z
show [key]r� �showz(Show customisable configuration settings�key�?z6Optional key or key(s) to show configuration settings.�r� r� )r� rk r� r9 r8 rP r� r� rA rA rB �config_show_parserK s �r� c C sD t jtdd�| _d| _d| _d| j_| jdd�d� t
j ��d � | S )
z:Build or extend an arg parser for 'config set' subcommand.zset <key>=<value>r� �setz/Set and apply Ubuntu Pro configuration settingsr� �key_value_pairzKkey=value pair to configure for Ubuntu Pro services. Key must be one of: {}�, r� ) r� rk r� r9 r8 rP r� r� r� rO r
�UA_CONFIGURABLE_KEYSr� rA rA rB �config_set_parserX s
�� r� c C sF t jtdd�| _d| _d| _| jdd�d�tj ��dd� d | j
_ | S )
z<Build or extend an arg parser for 'config unset' subcommand.z unset <key>r� �unsetz&Unset Ubuntu Pro configuration settingr� z?configuration key to unset from Ubuntu Pro services. One of: {}r� )r� r� r� ) r� rk r� r9 r8 rP r� rO r
r� r� r� r� rA rA rB �config_unset_parserj s �r� c C s� t jtdd�| _d| _d| _d| j_| jdddd �}|j d
d d �}|j
t d
� t |� |j ddd �}|j
t
d
� t|� |j ddd �}|j
td
� t|� | S )z4Build or extend an arg parser for config subcommand.zconfig <command>r� r
z Manage Ubuntu Pro configurationr� �Available Commandsr� r] �r� r� r� r� z,show all Ubuntu Pro configuration setting(s)r� ��actionr� z$set Ubuntu Pro configuration settingr� z&unset Ubuntu Pro configuration setting)r� rk r� r9 r8 rP r� r� �add_subparsers�
add_parser� set_defaults�action_config_showr� �action_config_setr� �action_config_unsetr� )r� �
subparsers� parser_show�
parser_set� parser_unsetrA rA rB �
config_parser{ s. �� � � r� c C s� t jtdd�| _tj| _d| _d�tj �}|d d | _
d| j _ | j
dd d
�t�d � | j
d d
ddd� | j
dt�d�dd� | j
ddddgddd� | S )z4Build or extend an arg parser for attach subcommand.zattach <token>r� �attachz@Attach this machine to Ubuntu Pro with a token obtained from:
{}z
z�When running this command without a token, it will generate a short code
and prompt you to attach the machine to your Ubuntu Pro account using
a web browser.r� �tokenr� z0token obtained for Ubuntu Pro authentication: {}r� z--no-auto-enable� store_false� auto_enablez4do not enable any recommended services automatically)r� r� r� z--attach-config�rzKuse the provided attach config file instead of passing the token on the cli)�typer� �--format�store�clir3 �4output enable in the specified format (default: cli)�r� �choicesr� r� )r� rk r� r9 ry �RawDescriptionHelpFormatterr; r8 r
� BASE_UA_URLrP r� r� r� �UA_AUTH_TOKEN_URL�FileType)r� r7 rA rA rB �
attach_parser� sN ���� �����r� c C sF t jtdd�| _d| _d| _d| j_| jddd� | jd d
d d � | S )
z1Build or extend an arg parser for fix subcommand.z"fix <CVE-yyyy-nnnn+>|<USN-nnnn-d+>r� �fixzLInspect and resolve CVEs and USNs (Ubuntu Security Notices) on this machine.r� �security_issuezwSecurity vulnerability ID to inspect and resolve on this system. Format: CVE-yyyy-nnnn, CVE-yyyy-nnnnnnn or USN-nnnn-ddr� z --dry-run�
store_truezrIf used, fix will not actually run but will display everything that will happen on the machine during the command.�r� r� � r� rk r� r9 r8 rP r� r� r� r� rA rA rB �
fix_parser� s" ����
r� c C sx d| _ tj| _t�d�| _| jddddd� | �� }|jdd d
d � |jd d
d
d � |jddd
d � |jddd
d � | S )z=Build or extend an arg parser for security-status subcommand.�security-statusa] Show security updates for packages in the system, including all
available Expanded Security Maintenance (ESM) related content.
Shows counts of how many packages are supported for security updates
in the system.
If called with --format json|yaml it shows a summary of the
installed packages based on the origin:
- main/restricted/universe/multiverse: packages from the Ubuntu archive
- esm-infra/esm-apps: packages from the ESM archive
- third-party: packages installed from non-Ubuntu sources
- unknown: packages which don't have an installation source (like local
deb packages or packages for which the source was removed)
The output contains basic information about Ubuntu Pro. For a
complete status on Ubuntu Pro services, run 'pro status'.
r� zFormat for the output)r3 r4 �textr� )r� r� r� z --thirdpartyz7List and present information about third-party packagesr� )r� r� z
--unavailablez7List and present information about unavailable packagesz --esm-infraz5List and present information about esm-infra packagesz
--esm-appsz4List and present information about esm-apps packages) r8 ry r� r; rl �dedentrP r� � add_mutually_exclusive_group)r� �grouprA rA rB �security_status_parser� sB ������r� c C sT d| _ d| _tjtdd�| _d| j_tj | _
t � d�| _| j
dg d�d d
d d � | S )
z5Build or extend an arg parser for refresh subcommand.�refreshz9Refresh existing Ubuntu Pro contract and update services.z"refresh [contract|config|messages]r� r� a� Refresh three distinct Ubuntu Pro related artifacts in the system:
* contract: Update contract details from the server.
* config: Reload the config file.
* messages: Update APT and MOTD messages related to UA.
You can individually target any of the three specific actions,
by passing it's target to nome to the command. If no `target`
is specified, all targets are refreshed.
�target)r r
r r� NzTarget to refresh.)r� r� r� r� )r8 rP r� rk r� r9 r� r� ry r� r; rl r� r� r� rA rA rB �refresh_parser" s& ���
�r� c K s� | j dkr2| jrt�� dS | jrt�� dS | jr!t�|� dS | jr+t� |� dS t�|� dS | j dkrGt
t j t�
|�dtjd�� dS t
tjt�
|�dd�� dS )Nr� r3 T)� sort_keys�clsF)�default_flow_styler )rk �
thirdpartyr �list_third_party_packages� unavailable�list_unavailable_packages� esm_infra�list_esm_infra_packages�esm_apps�list_esm_apps_packages�printr3 �dumps�security_status_dictr �DatetimeAwareJSONEncoderr4 � safe_dump�r� r[ r� rA rA rB �action_security_statusE s>
��
�
�
������r c K s@ t �tj| j�sd�| j�}t�|��tj|| j| j d�}|j
S )NzYError: issue "{}" is not recognized.
Usage: "pro fix CVE-yyyy-nnnn" or "pro fix USN-nnnn")r[ �issue_id�dry_run) �re�matchr �CVE_OR_USN_REGEXr� rk r r� �fix_security_issue_idr �value)r� r[ r� r� �
fix_statusrA rA rB �
action_fixc s �
�r c C sT t jtdd�}|| _d| _d| _d| j_| jdddd� | jd d
d d gd d
d� | S )z4Build or extend an arg parser for detach subcommand.�detachr� z-Detach this machine from Ubuntu Pro services.r� � --assume-yesr� z;do not prompt for confirmation before performing the detachr� r� r� r� r3 r� r� r� �r� r9 rA rA rB �
detach_parsers s$ ��r r[ c C s� t jtdd�}|| _d| _d| _d| j_| jdddd �d
� t
j |d ���d � | jd
dt t d d�t d �d� | jdddd� | S )z2Build or extend an arg parser for help subcommand.zhelp [service]r� r� z7Provide detailed information about Ubuntu Pro services.� Argumentsr� r� r� z-a service to view help output for. One of: {}r� r� �r� r� r� r� r z1output help in the specified format (default: {})r� �--allr� �(Allow the visualization of beta servicesr� )
r� rk r� r9 r8 rP � _positionalsr� r� rO r �valid_services�STATUS_FORMATS�r� r[ r9 rA rA rB � help_parser� s: ��� �� �r$ c C s� t jtdd�}d| _|| _d| _d| j_d| j_| j ddd d
�d �
t j |d ���d
� | j dddd� | j dddd� | j dddd� | j ddddgddd� | S )z4Build or extend an arg parser for enable subcommand.z enable <service> [<service>]r� z Enable an Ubuntu Pro service.�enabler r� r� r� �+z<the name(s) of the Ubuntu Pro services to enable. One of: {}r� r� r r r� z;do not prompt for confirmation before performing the enabler� z
--access-onlyzHdo not auto-install packages. Valid for cc-eal, cis and realtime-kernel.z--betaz allow beta service to be enabledr� r� r3 r� r� �
r� rk r� rP r9 r8 r r� r� r� rO r r! r# rA rA rB �
enable_parser� sL ��� ����r( c C s� t jtdd�}d| _|| _d| _d| j_d| j_| j ddd d
�d �
t j |d ���d
� | j dddd� | j ddddgddd� | S )z5Build or extend an arg parser for disable subcommand.z disable <service> [<service>]r� z Disable an Ubuntu Pro service.�disabler r� r� r� r& z=the name(s) of the Ubuntu Pro services to disable. One of: {}r� r� r r r� z<do not prompt for confirmation before performing the disabler� r� r� r3 z5output disable in the specified format (default: cli)r� r' r# rA rA rB �disable_parser� s< ��� ��r* c C sZ t jtdd�| _d| _d| _d| j_| jdddd �}|j d
d d �}|j
t d
� t |� | S )z4Build or extend an arg parser for system subcommand.zsystem <command>r� z9Output system related information related to Pro services�systemr� r� r� r] r� �reboot-requiredz#does the system need to be rebootedr� r� )
r� rk r� r9 rP r8 r� r� r� r� r� � action_system_reboot_required�reboot_required_parser)r� r� �parser_reboot_requiredrA rA rB �
system_parser s ��� r0 c C s. t jtdd�| _d| _tj| _t� d�| _
| S )Nzsystem reboot-requiredr� r, al Report the current reboot-required status for the machine.
This command will output one of the three following states
for the machine regarding reboot:
* no: The machine doesn't require a reboot
* yes: The machine requires a reboot
* yes-kernel-livepatches-applied: There are only kernel related
packages that require a reboot, but Livepatch has already provided
patches for the current running kernel. The machine still needs a
reboot, but you can assess if the reboot can be performed in the
nearest maintenance window.
) r� rk r� r9 r1 ry r� r; rl r� rP r� rA rA rB r. s ��r. c C s� t jtdd�}|| _d| _d| _tj| _t �
d�| _| j ddddd � | j d
d t t d d
�t d �d� | j ddd dd� | j dddd� d| j
_| S )z4Build or extend an arg parser for status subcommand.r r� z6Output the status information for Ubuntu Pro services.u; Report current status of Ubuntu Pro services on system.
This shows whether this machine is attached to an Ubuntu Advantage
support contract. When attached, the report includes the specific
support contract details including contract name, expiry dates, and the
status of each service on this system.
The attached status output has four columns:
* SERVICE: name of the service
* ENTITLED: whether the contract to which this machine is attached
entitles use of this service. Possible values are: yes or no
* STATUS: whether the service is enabled on this machine. Possible
values are: enabled, disabled, n/a (if your contract entitles
you to the service, but it isn't available for this machine) or — (if
you aren't entitled to this service)
* DESCRIPTION: a brief description of the service
The unattached status output instead has three columns. SERVICE
and DESCRIPTION are the same as above, and there is the addition
of:
* AVAILABLE: whether this service would be available if this machine
were attached. The possible values are yes or no.
If --simulate-with-token is used, then the output has five
columns. SERVICE, AVAILABLE, ENTITLED and DESCRIPTION are the same
as mentioned above, and AUTO_ENABLED shows whether the service is set
to be enabled when that token is attached.
If the --all flag is set, beta and unavailable services are also
listed in the output.
z--waitr� Fz Block waiting on pro to complete)r� r� r� r� r� r z3output status in the specified format (default: {})r� z--simulate-with-token�TOKENz1simulate the output status using a provided token)r� r� r� r r r� r� )r� rk r� r9 rP r8 ry r� r; rl r� r� r" r� r� r rA rA rB �
status_parser1 sJ ��%��� ��r2 �cmd_name� subcmd_namec C sf t | d�}|�� d j| }|�� d j�� }||vr1|�� d j| �� t�d�d�|����d S )Nr� r z
<command> must be one of: {}r� ) �
get_parser�_get_positional_actionsr� �keysrQ r r� rk rO )r[ r3 r4 r� � subparser�
valid_choicesrA rA rB �_print_help_for_subcommand� s
��r: T)�
update_statusc C s� | � � \}}|s1t�| j� |dur0t|t�r0|jdur0t�|jj� tj |jj|jj| jd� nt�
| j� |r?t j |d� |S )a= Perform the disable action on a named entitlement.
:param entitlement_name: the name of the entitlement to enable
:param cfg: the UAConfig to pass to the entitlement
:param assume_yes:
Assume a yes response for any prompts during service enable
@return: True on success, False otherwise
N�� error_msg�
error_coder� r� )
r) �event�service_failedrY �
isinstancer+ rI �infor� rJ �service_processed� ua_statusr )� entitlementr[ r� r; �ret�reasonrA rA rB �_perform_disable� s
�� rH c K � t |d| jd� dS )zGPerform the config action.
:return: 0 on success, 1 otherwise
r
�r3 r4 r �r: r� r
rA rA rB �
action_config� � �rL c K s� | j r9| j tjvr(d�| j d�tj��}|�d�d }t�tj |t
d| d���t dj| j t || j d�d �� d
S t
td d � tjD ��d
�}d| d }tjD ]}t |j|t ||d�d �� qP|jsf|jrr|jsl|jrtt d� dS dS dS )z�Perform the 'config show' action optionally limit output to a single key
:return: 0 on success
:raise UserFacingError: on invalid keys
z
'{}' must be one of: {}r� �:rC � )r_ r` z
{key} {value}N)r� r r c S s g | ]}t |��qS rA )�len)�.0�xrA rA rB �
<listcomp>� s z&action_config_show.<locals>.<listcomp>� z{key: <z } {value}zo
Error: Setting global apt proxy and pro scoped apt proxy at the same time is unsupported. No apt proxy is set.)r� r
r� rk rO �findr r� rl rm r& r r� r{ �max�global_apt_http_proxy�global_apt_https_proxy�ua_apt_http_proxy�ua_apt_https_proxy)r� r[ r� r� �indent_position� col_width�row_tmplr� rA rA rB r� � s@ �����
����r� c K s ddl m} ddlm} t|d�}|�� d jd }|�� d jd }z
| j�d�\}} W n t yA |�
� t � d�
| j���w |tjvrW|�
� t � d �
d
�tj����|d v r�|�d �d }
|
d
krjtj} ntj} t�|
| | � || i}|d i |�� tj�|�} | �� \}
}|
tjkr�|d i |�� n�||jv r�|�d �d }
|
d
kr�tj } ntj } t�|
| | � t |j p�|j �}|r�t!t"j#j
ddd�� t$|t%j&|| � d|_ d|_ n�||j'|j( v �r4d|v r�dnd
}
|
d
kr�tj } ntj } ||j'v �rt!t"j)j
|
d�� d| }t�|
| | � t |j*�p|j+�}|�r%t!t"j#j
ddd�� t$|t%j,|| � d|_*d|_+nJ|dv �rezt-| �} | dk �rJt d�
|���W n2 t �yd |�
� t!d� t � d�
|| ���w |dk�r~| �.� dk} | �ryt/�0|� nt1j2�3� t4||| � dS ) zMPerform the 'config set' action.
@return: 0 on success, 1 otherwise
r )�configure_livepatch_proxy)�configure_snap_proxyr� r
r� �=z%
Expected <key>=<value> but found: {}�
<key> must be one of: {}r� ��
http_proxy� https_proxy�_�httprC zpro scoped aptz
global apt)�
current_proxy�previous_proxyN�https��
protocol_type�global_)�update_messaging_timer�metering_timerzInvalid interval for {}r] zECannot set {} to {}: <value> for interval must be a positive integer.r �truerA )5� uaclient.entitlements.livepatchr^ �
uaclient.snapr_ r5 r6 r� r� �split�
ValueErrorrQ r r� rk r
r� rO r � PROXY_VALIDATION_SNAP_HTTP_URL� PROXY_VALIDATION_SNAP_HTTPS_URL�validate_proxyr � livepatch�LivepatchEntitlement�application_statusr* �ENABLED�ua_scoped_proxy_options� PROXY_VALIDATION_APT_HTTP_URL� PROXY_VALIDATION_APT_HTTPS_URL�boolrW rX r r �WARNING_APT_PROXY_OVERWRITE�configure_apt_proxyr! �UACLIENT�&deprecated_global_scoped_proxy_options�global_scoped_proxy_options�WARNING_APT_PROXY_SETUPrY rZ �GLOBAL�int�lowerr �update_apt_newsr. �apt_news_contents_file�delete�setattr)r� r[ r� r^ r_ r� r� r8 �set_key� set_valuerk � validate_urlrE �livepatch_statusre �
unset_currentrA rA rB r� � s�
���
��
�
����� ����
���
r� c
K sd ddl m} ddlm} ddlm} | jtjvr?t |d�}|�
� d j d }|�
� d j d }|� � t
�d�d �tj����| jd
v rh| j�d �d } || d � tj�|�}
|
�� \} } | tjkrg|| d � nA| j|jv rxt||j| jd
� n1| j|j|j v r�| j|jv r�d| jv r�dnd} t � t j j| d �� d| j | _t||j!| jd
� t"|| jd
� dS )zOPerform the 'config unset' action.
@return: 0 on success, 1 otherwise
r )r! )�unconfigure_livepatch_proxy)�unconfigure_snap_proxyr� r
r� ra r� rb re rj Nri rf rl )#� uaclient.aptr! rp r� rq r� r� r
r� r5 r6 r� rQ r r� rk rO rr r rw rx ry r* rz r{ r� r� r� r� r? rB r r� r� r� )
r� r[ r� r! r� r� r� r� r8 rk rE r� re rA rA rB r� _ sN
��
� �� �� r� c C s� t ||d�\}}|r |r tj}|jd�|�| d�|�dd�}|S |r.tjjd�|�d�}|S tjj| d�|�d�tj�d�}|S )z�Generates a custom message for enable/disable commands when unattached.
Takes into consideration if the services exist or not, and notify the user
accordingly.)�namesr[ r� r] )�
valid_service� operation�invalid_service� service_msg)r� zSee {}�r� r� r� ) r) r �!MIXED_SERVICES_FAILURE_UNATTACHEDrk rO � VALID_SERVICE_FAILURE_UNATTACHED�INVALID_SERVICE_OP_FAILUREr
r� )r� r� r[ �entitlements_found�entitlements_not_foundr� rA rA rB �%_create_enable_disable_unattached_msg� s.
���� �
�r� z pro disablec K s� t | dg �}t||�\}}d}|D ]}tj||d�}||| jd�} |t| || jd�M }q|rSdd�tj|dd�� d }
d �tj |
d
d d d ��} t
j d
d�|�| d��t �
� |r[dS dS )zbPerform the disable action on a list of entitlements.
@return: 0 on success, 1 otherwise
r� TrZ �r� zTry r� �r[ �
allow_beta�.r5 �P F)r_ ra rb r) r� r rT )r� r) r rg r� rH rO r! rl �wrapr � InvalidServiceToDisableErrorr? �process_events) r� r[ r� r� r� r� rF �ent_namers �ent� valid_namesr� rA rA rB �action_disable� s> ������� r� z
pro enablec K s� t �tj� zt�|� W n tjtjfy) t j
tj dd� t j tj d� Y nw t
| dg �}t||�\}}d}|D ]�}z_tj||| j| j| jd�\}} tj|d� |s�| dur�t| t�r�| jdurvt �| jj� t j| jj| jj|d� | j t j kr�|� |� n|r�t j |d � n |s�| du r�t j!|d � ||M }W q; tjy� }
zt �|
j� t j|
j|
j"|d� d
}W Y d}
~
q;d}
~
ww |r�t#||| jd �} t �$|� tj| j| jd ��t �%� |r�d
S dS )z^Perform the enable action on a named entitlement.
@return: 0 on success, 1 otherwise
T)�exc_info)� warning_msgr� )r� r� � access_onlyr� Nr< )r� Fr� r� r rT )&r? rB r �REFRESH_CONTRACT_ENABLEr �request_updated_contractr �UrlErrorr� �logging�debug�REFRESH_CONTRACT_FAILURE�warningr� r) r �enable_entitlement_by_namer� �betar� rD r rA r, rI r� rJ rY rG r- �IS_BETAro rC r@ r� r' �services_failedr� ) r� r[ r� r� r� r� rF r� �ent_retrG �er� rA rA rB �
action_enable� sv � �
� ���
�
�
����
r� z
pro detachrV c C s* t || jd�}|dkrt�� t�� |S )zXPerform the detach action for this machine.
@return: 0 on success, 1 otherwise
r� r )�_detachr� r �startr? r� )r� r[ rF rA rA rB �
action_detach" s
r� r� c C s� g }t | �D ]+}z tj| |d�}W n
tjy Y qw || |d�}|jdd�\}}|r1|�|� q|rTt|�dkr<dnd}t� d�
|�� |D ] }t� d �
|j �� qHt j
|d
�s\dS |D ]
}t|| |d d � q^| �� | j�� t| � t� tj� d
S )a7 Detach the machine from the active Ubuntu Pro subscription,
:param cfg: a ``config.UAConfig`` instance
:param assume_yes: Assume a yes answer to any prompts requested.
In this case, it means automatically disable any service during
detach.
@return: 0 on success, 1 otherwise
rZ )r[ r� T)�ignore_dependent_servicesrT �sr] z,Detach will disable the following service{}:z {}r� F)r� r; r )r( r rg r rh � can_disablero rP r? rB rk rY r �prompt_for_confirmationrH � delete_cacher� r� r0 r �DETACH_SUCCESS) r[ r� �
to_disabler� rs r� rF re �suffixrA rA rB r� 2 s8
�
��
r� c C s� d }| j r| j �di ��di ��d�}|r t�tjj|d�� nt�tj� t� � t�
| � t � | �\}}t
�|�}t�t�|�� t�� d S )N�machineTokenInfo� contractInforY )�
contract_name)�
machine_tokenri r? rB r �ATTACH_SUCCESS_TMPLrk � ATTACH_SUCCESS_NO_CONTRACT_NAMEr �stop�cleanupr r rD �format_tabularr �handle_unicode_charactersr� )r[ r� r �_ret�outputrA rA rB �_post_cli_attach^ s" � �
r� c C s. t | j| j|�}t|�� � |jdkrdS dS )N�successr rT )r r� r� r �to_json�result�r� r[ r� rA rA rB �
action_apix s r� c C sJ z t t� |tjjd� W n tjy t�t j
j � Y dS w t |� dS )N)r[ �moderT r )
r r r �EventLoggerMode�CLIr r� r? rB r �ATTACH_FAILUREr� r� r� rA rA rB �action_auto_attach~ s
��r� c
K s� | j dkr
tjd| j d��t�d� t|d�}t�d� t�d� t�d� tjj|j tjj
�� t |j d �}zt
||d
�}W n tjy^ } zt�d � t|j d �}t||d
� |�d }~ww t�d � |jS )
Nr3 r� )�paramr z Initiating attach operation...r� z8
Please sign in to your Ubuntu Pro account at this link:z https://ubuntu.com/pro/attachz&And provide the following code: {}{}{})� magic_token)r� r[ z Failed to perform magic-attachz
Attaching the machine...)rk r �MagicAttachInvalidParamr? rB r r �TxtColor�BOLD� user_code�ENDCr r� r �MagicAttachTokenErrorr r �contract_token)r� r[ r� �
initiate_resp� wait_options� wait_respr� �revoke_optionsrA rA rB �
_magic_attach� s<
�
��
� ��
r� z
pro attachc
C s� | j r| jrtjtjjtjjd��| j s | js t| |d�}d }n1| j r)| j }d }n(z t �
t � | j��}W n t
yJ } z
tj| jj|jd��d }~ww |j }|j}| joW|d u }z
tj|||d� W n tjyn t�� �w d}|d ur�| jr�t||�\}} |D ]8}
tj||
ddd�\} } | s�d}| d ur�t| t�r�| jd ur�t�| jj� tj | jj| jj|
d � q�t� |
� q�| r�t | |dd
�}
tj|
jt j d � tj |
j|
jd � d}t!|� |S )
Nr� r� )� config_namerJ )r� � allow_enabler T)r� r� rT r< r� )� file_type�r= r> )"r� �
attach_configr r� r �ATTACH_TOKEN_ARG_XOR_CONFIGr� rY r� r# � from_dictr4 � safe_loadr$ � AttachInvalidConfigFileError�enable_servicesr� r �attach_with_tokenr� � AttachErrorr) r� rA r, rI r? rB rJ rC r' rE rF r� )r� r[ r� �enable_services_overrider� r� r� rF �found� not_foundrY r� rG r� rA rA rB �
action_attach� s~ �
�
�����
������ �r� c C s� | j pt}t�� �M}t�||� z t�|d��}|j|dd� W d � n1 s)w Y W n t yM } zt
� |� W Y d }~W d � dS d }~ww W d � dS 1 sYw Y dS )Nzw:gzzlogs/)�arcnamerT r ) r� �UA_COLLECT_LOGS_FILE�tempfile�TemporaryDirectoryr � collect_logs�tarfile�open�add�PermissionErrorr� rJ )r� r[ � output_file�
output_dir�resultsr� rA rA rB �action_collect_logs� s&
��
���
��r c C s� t }tttjtjtdd�tjtdd�|d�}|jdddd� |jdd t �
� d
�t�d � d |j _ |j
d
ddd�}d|_|jddd�}t|� |jtd� |jddd�}t|� |jtd� |jddd�}t|� |jtd� |jddd�}t|� |jtd� |jd d d�}t|� |jtd� |jd d d�} t| � | jt d� |jd d!d�}
t |
| d"� |
jt d� |jd#d$d�} t | | d"� | jt d� |jd%d&d�} | jt!d� t"| � |jd'd(d�}
t#|
� |
jt$d� |jd)d*d�}t%|| d"� |jt&d� |jd+d,d�}|jt'd� t(|� |jd-d.d�}|jt)d� t*|� |jd d
�t�d�}|jt+d� |jd/d0d�}|jt,d� t-|� |S )1Nz <command>r� )r8 r; r9 r: r7 z--debugr� z&show all debug log messages to consoler� z --versionr zshow version of {})r� r r� r� r� r� r] r� Tr� z1attach this machine to an Ubuntu Pro subscriptionr� r� r� r� r� z+automatically attach on supported platformsr� z&collect Pro logs and debug informationr
z/manage Ubuntu Pro configuration on this machiner z3remove this machine from an Ubuntu Pro subscriptionr) z5disable a specific Ubuntu Pro service on this machiner� r% z4enable a specific Ubuntu Pro service on this machiner� z=check for and mitigate the impact of a CVE/USN on this systemr� z.list available security updates for the systemr� z3show detailed information about Ubuntu Pro servicesr� zrefresh Ubuntu Pro servicesr z)current status of all Ubuntu Pro servicesr+ z/show system information related to Pro services).�__doc__r6 r� ry r� r� rk � EPILOG_TMPLr� r � get_versionr� r� r� �requiredr� r� r� r� r� r� r� r� r� r r� rL r r� r* r� r( r� r r� r� r r$ � action_help�action_refreshr� �
action_statusr2 �
print_version�
action_systemr0 )r[ r7 r� r� �
parser_attach�
parser_api�parser_auto_attach�parser_collect_logs�
parser_config�
parser_detach�parser_disable�
parser_enable�
parser_fix�parser_security_status� parser_help�parser_refresh�
parser_status�parser_version�
parser_systemrA rA rB r5 s� ����� � � � � � � � � � � � �
� � r5 c C s� |st �� }| r | jnd}| r| jnd }tjjj}|jrnzt �
|�r+|j � dt
j� n|j �dt
j� W n9 tym } z-t�� � t
jjt|�d�}t�|� t�|� W d � n1 s^w Y W Y d }~nd }~ww tj|||d�\}}t|d |k�} | r�| j r�| r�|d |kr�tj ddd� t � d� tj|||d�\}}|d |ks�t� d� t� |� t�!|�}
t� t�"|
�� t�#� |S ) NFr] )rG )�simulate_with_tokenrR �execution_statusr� )�endrT )$r
re �allr" rD �UserFacingConfigStatus�ACTIVEr r� r �is_contract_changed� notice_file�try_addr � NOTICE_REFRESH_CONTRACT_WARNING�
try_remove� Exceptionr �disable_log_to_console� UPDATE_CHECK_CONTRACT_FAILURErk r{ r� r� r? r r r~ �waitrB �time�sleep�set_output_contentr� r� r� ) r� r[ rR r� � active_valuer� �err_msgr rF �
config_activer� rA rA rB r � sZ
���
�
���
�
� �
r c K rI )zGPerform the system action.
:return: 0 on success, 1 otherwise
r+ rJ r rK r
rA rA rB r � rM r c C s t |�}t�|j� dS r� )r r? rB �reboot_requiredr� rA rA rB r- � s r- c C s t t�� � d S �N)r r r )�_argsr[ rA rA rB r � s r c C sr z|� � W n+ ty1 } z t�� �
t�|� W d � n1 s"w Y t�tj ��d }~ww t
tj � d S r8 ) �process_config� RuntimeErrorr r. r� r� r r� r �REFRESH_CONFIG_FAILUREr �REFRESH_CONFIG_SUCCESS)r� r[ �excrA rA rB �_action_refresh_config� s
� ��r? c C sv zt �|� W n, tjy3 } z t�� �
t�|� W d � n1 s$w Y t�t j
��d }~ww t t j � d S r8 )
r r� r r� r r. r� r� r� r r� r �REFRESH_CONTRACT_SUCCESS�r9 r[ r> rA rA rB �_action_refresh_contract� s
� ��rB c C s� zt |� t� |jrt�|� W n+ ty< } z t�� �
t�|� W d � n1 s-w Y t �
t j ��d }~ww t
t j� d S r8 )r0 r/ r r� r- r r. r� r� r r� r �REFRESH_MESSAGES_FAILUREr �REFRESH_MESSAGES_SUCCESSrA rA rA rB �_action_refresh_messages� s
�
� ��rE z pro refreshc C sn | j d u s
| j dkrt| |� | j d u s| j dkr&t| |� |j�dtj� | j d u s0| j dkr5t| |� dS )Nr
r r] r r )r� r? rB r) �remover r+ rE r� rA rA rB r � s
r �scoper� r� c C sR |t jkr | j}| j}n |t jkr| j}| j}d|v r |}n|}t|||d� dS )zS
Handles setting part the apt proxies - global and uaclient scoped proxies
ri )rc rd � proxy_scopeN)r! r� rW rX r� rY rZ r" )r[ rG r� r� rc rd rA rA rB r� � s
�r� c C s� | j }| j}|st|d�j|d� dS |st�� }t�||�}| jdkr-t t
� |�� dS |� � D ]\}}t d�|�
� |�� q1dS )Nr� )rR r r3 z{}:
{}
)r� r% r5 rQ r
re rD r� rk r r3 r �itemsr� )r� r[ r� rR �
help_responser� r rA rA rB r s
�r c C sH | r| j dkst| dd�dv rd S t�� }|r"t�tj|d�� d S d S )Nr� rk r] )r3 r4 )r )r� r� r �check_for_new_versionr� r� �NEW_VERSION_NOTICErk )r� � new_versionrA rA rB �_warn_about_new_version+ s ����rN c
C s� |du r t �� }|j}t�� }t�t�}|du r t�� }|� |� g |_
t� t j
�}|�|� |� | � |�d� |�|� t�� dkrqt�|�}|�� sV|�� |�d� t�|�} | � |� | �|� | �d� |�| � dS dS )z3Setup console logging and debug logging to log_fileNz
ua-consoler i� zua-file)r
re �log_filer � LogFormatterr� � Formatterr% � getLogger�setLevel�handlers�
StreamHandlerrE rF � setFormatter�set_name�
addHandlerrc rd �pathlib�Path�exists�touch�chmod� FileHandler)
�
console_level� log_levelrO �loggerr[ �console_formatter�
log_formatter�console_handler�
log_file_path� file_handlerrA rA rB �
setup_logging; s2
�rg c C s` | j dv r*t�| j � t| d�r,| jdkr t�tjj� | jdkr.t�tjj � dS dS dS dS )z3Set the right event mode based on the args provided)r� r r% r) r rk r3 r4 N)
r� r? � set_command�hasattrrk �set_event_moder r� �JSON�YAML)r� rA rA rB rj a s
�rj c r~ )Nc s� z� | i |��W S t y; t�� �
t�d� W d � n1 s#w Y tdtjd� t� � t�
d� Y d S t j y� } z�dt
|�v rntj}t�d�rTtj}|j|jd�}tj|j|jd� tj|jtjd � nDt�� �# |j|d
�}|jr�tj}ntj}t�|jdi |��� W d � n1 s�w Y tj }tj|j|jd� tj|jtjd � t� � t� � t � t�
d� W Y d }~d S d }~w t j �y* } zPt�� � t�|j� W d � n1 s�w Y tj|j|j |j!d � tjd �|j�tjd � t"|t j#��st� � t� � t � t�
|j$� W Y d }~d S d }~w t%�y~ } zHt�� �
t�d
� W d � n 1 �sGw Y t� � tjtj&jtjd � tjt'|dt
|��dd� t� � t � t�
d� W Y d }~d S d }~ww )N�KeyboardInterruptz Interrupt received; exiting.rK rT �CERTIFICATE_VERIFY_FAILEDzca-certificates)r^ r� )�info_msgr� )r^ rJ )r= r> �additional_infoz{}z&Unhandled exception, please file a bugr� r� )r= �
error_typerA )(rm r r. r� rJ r rE rF r �clear_lock_file_if_presentrH r r� r{ r �&SSL_VERIFICATION_ERROR_CA_CERTIFICATESr � is_installed�%SSL_VERIFICATION_ERROR_OPENSSL_CONFIGrk r^ r? r� rY rB �$LOG_CONNECTIVITY_ERROR_WITH_URL_TMPL�LOG_CONNECTIVITY_ERROR_TMPLr� �CONNECTIVITY_ERRORr� rN r� r� rp rA �
LockHeldError� exit_coder- �UNEXPECTED_ERRORr� )r� r� r> �tmplr� �msg_args�msg_tmplr� ��funcrA rB r� m s�
�
� �
�
���
�
����z#main_error_handler.<locals>.wrapperrA )r� r� rA r rB �main_error_handlerl s Hr� c C s: | st j} t�� dk}tj|d�}t|d�}| dd � }|s+|�� tt � t �
d� |j |d�}t |� |j
}|j}tj||d� |j}|jrKtjntj} t| ||j� t�t�d| �� t�� � |�� W d � n1 srw Y dd � tt� � � � �D �}
|
r�t�t�d
|
�� |j ||d�} t |� | S ) Nr rW r� rT )r� rb zExecuted with sys.argv: %rc S s g | ]
\}}d � ||��qS )z{}={})rk )rQ �k�vrA rA rB rS � s
��zmain.<locals>.<listcomp>z'Executed with environment variables: %r) rE �argvrc rd r
re r5 rD r rG rH �
parse_argsrj rc rd r �configure_web_proxyr` r� r� �DEBUG�INFOrg rO �redact_sensitive_logsr. �warn_about_invalid_keysrN �get_pro_environmentrI r� rN ) �sys_argv�is_rootr[ r� �
cli_argumentsr� rc rd r` r_ �pro_environment� return_valuerA rA rB �main� sH
�
����r� �__main__r8 )NN)rV N)�r
ry r3 r� rc rY r rE r r� rl r1 � functoolsr �typingr r r r4 �uaclientr r r r
r r r
r r r r r r r r rD r r �uaclient.api.apir �2uaclient.api.u.pro.attach.auto.full_auto_attach.v1r r �+uaclient.api.u.pro.attach.magic.initiate.v1r �)uaclient.api.u.pro.attach.magic.revoke.v1r r �'uaclient.api.u.pro.attach.magic.wait.v1r r �5uaclient.api.u.pro.security.status.reboot_required.v1r r� r! r" �uaclient.data_typesr# r$ �uaclient.defaultsr% r& �uaclient.entitlementsr' r( r) �(uaclient.entitlements.entitlement_statusr* r+ r, r- �uaclient.filesr. � uaclient.jobs.update_messagingr/ r0 r� r� r rG �STATUS_HEADER_TMPLr� r" r� � BLUE_INFOrL �get_event_loggerr? �ArgumentParserr6 r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r r r re r$ r( r* r0 r. r2 r{ r: rH rL r� r� r� r� r� r� r� r� r~ r� r� r� r� r� r� r r5 r r r- r r? rB rE r r� r rN rg rj r� r� rv rH rA rA rA rB �<module> s& @ ����
\
2 9# '/$O��
�
)
}
/ )E ,%D
}.
����
�
& L
.�