OwlCyberSecurity - MANAGER
Edit File: livepatch.cpython-38.pyc
U Uٵgh3 � @ s. d dl Z d dlZd dlZd dlZd dlZd dlmZ d dlmZm Z m Z d dl m Z m Z mZmZmZ d dlmZmZmZmZmZmZ d dlmZ d dlmZ dZ d Z d Z d Z e � � Z!e�"e�#e$��Z%ej&G d d � d ej'��Z(G dd� de�Z)G dd� de�Z*G dd� de�Z+G dd� de�Z,e e+ d�dd�Z-e e. e e( d�dd�Z/G d d � d ej0�Z1e e( d�d d �Z2e.e.e.e.e e3e e3 f d �d!d"�Z4e.e.e.e.e e j e e( d#�d$d%�Z5edd&�e(d�d'd(��Z6d4e.e ee7 dd)�d*d+�Z8d5e e. e e. e ee7 dd,�d-d.�Z9e.e e. d/�d0d1�Z:e3d�d2d3�Z;dS )6� N)� lru_cache)�List�Optional�Tuple)� event_logger� exceptions�messages�system�util)� BoolDataValue� DataObject�Field�IncorrectTypeError�StringDataValue� data_list)� state_files)� serviceclientz http-proxyz https-proxyz /snap/bin/canonical-livepatchz/v1/api/kernels/supportedc @ s* e Zd Ze� Ze� Ze� Ze� Ze� ZdS )�LivepatchSupportN) �__name__� __module__� __qualname__�object� SUPPORTED�KERNEL_UPGRADE_REQUIRED� KERNEL_EOL� UNSUPPORTED�UNKNOWN� r r �4/usr/lib/python3/dist-packages/uaclient/livepatch.pyr s r c @ sD e Zd Zededdd�ededdd�gZee ee d�dd �Z d S ) �LivepatchPatchFixStatus�nameF�Name�ZrequiredZdict_key�patchedZPatched�r r# c C s || _ || _d S �Nr$ )�selfr r# r r r �__init__/ s z LivepatchPatchFixStatus.__init__N) r r r r r r �fieldsr �str�boolr' r r r r r ) s ��r c @ s` e Zd Zededdd�edee�ddd�ededdd�gZee ee e ee d �d d �Z d S ) �LivepatchPatchStatus�stateF�Stater" �fixesZFixes�versionZVersion�r, r. r/ c C s || _ || _|| _d S r% r0 )r& r, r. r/ r r r r' D s z LivepatchPatchStatus.__init__N) r r r r r r r r( r r) r r' r r r r r+ 8 s �� �r+ c @ sX e Zd Zededdd�ededdd�ededdd�gZee ee ee d �d d �Z d S ) �LivepatchStatusStatus�kernelFZKernelr" � livepatchZ Livepatch� supported� Supported�r2 r3 r4 c C s || _ || _|| _d S r% r6 )r& r2 r3 r4 r r r r' ` s z LivepatchStatusStatus.__init__N) r r r r r r+ r( r r) r' r r r r r1 O s$ ����r1 c @ s8 e Zd Zedee�ddd�gZeee d�dd�Z dS ) �LivepatchStatus�statusFZStatusr" �r8 c C s || _ d S r% r9 )r& r8 r r r r' u s zLivepatchStatus.__init__N) r r r r r r1 r( r r r' r r r r r7 k s �� �r7 )�returnc C s: t � st�d� d S z t�tddddg�\} }W nV tjk r� } z6d|jkrdt� |j� W Y �d S tj d|d� |�W 5 d }~X Y nX zt � | �}W n: t j k r� } ztj d | |d� W Y �d S d }~X Y nX zt �|�}W n$ tk �r t� d | � Y d S X |jd k�s"t|j�d k �r0t�d � d S |jd S )Nz$canonical-livepatch is not installedr8 z --verbosez--format�jsonzMachine is not enabledz;canonical-livepatch returned error when checking status: %s)�exc_infozPJSONDecodeError while parsing livepatch status, returning None. output was: "%s"z<canonical-livepatch status returned unexpected structure: %s� z!canonical-livepatch has no statusr )�is_livepatch_installed�LOG�debugr �subp� LIVEPATCH_CMDr �ProcessExecutionError�stderr�warningr; �loadsZJSONDecodeErrorr7 Z from_dictr r8 �len)�out�_�eZ status_jsonZ status_rootr r r r8 | sJ � ��� r8 )� status_strr: c C sJ | dkrt jS | dkr t jS | dkr*t jS | dkr8t jS | dkrFt jS d S )Nr4 zkernel-upgrade-requiredzkernel-end-of-lifeZ unsupported�unknown)r r r r r r )rK r r r �(_convert_str_to_livepatch_support_status� s rM c @ s2 e Zd ZdZeeeeeej ee d�dd�ZdS )�UALivepatchClientZ livepatch_url�r/ �flavor�arch�codename� build_dater: c C s� |||||d k r|� � ndd�}| �� }z| jt||d�}W n< tk rx } z t�d� t�| � W Y �d S d } ~ X Y nX |jdkr�t�d� t�|j� d S |j � d�} | d ks�t | t �r�| r�t jS t jS t| �S )NrL )zkernel-versionZflavourZ architecturerR z build-date)� query_params�headersz4error while checking livepatch supported kernels API�� z0livepatch supported kernels API was unsuccessfulr5 )Z isoformatrU Z request_url�"LIVEPATCH_API_V1_KERNELS_SUPPORTED� Exceptionr? rE �codeZbodyZ json_dict�get� isinstancer* r r r rM ) r& r/ rP rQ rR rS rT rU ZresponserJ Zapi_supported_valr r r �is_kernel_supported� s6 � � z%UALivepatchClient.is_kernel_supportedN) r r r Zcfg_url_base_attrr) r �datetimer r\ r r r r rN � s �rN c C s: z t � } W n tjk r" Y d S X | d kr0d S t| j�S r% )r8 r rC rM r4 )Z lp_statusr r r �_on_supported_kernel_cli� s r^ )r/ rP rQ rR r: c C s� zt j�� }W n tk r& d}Y nX |dk r�tj�tjj�tjdd� }t |j |k|j | k|j |k|j |k|j|kg�r�|jdkr�t�d� d|jfS dS )zOCheck local cache of kernel support :return: (is_cache_valid, result) N� )Zdaysz-livepatch kernel support cache has None valueT)FN)r �livepatch_support_cache�readrX r] �now�timezone�utcZ timedelta�all� cached_atr/ rP rQ rR r4 r? rE )r/ rP rQ rR Z cache_dataZ one_week_agor r r �_on_supported_kernel_cache� s, � ��� rg rO c C sx t � j| ||||d�}d }|tjkr*d}n|tjkr8d}tj�tj| ||||t j � t j j �d�� |d krtt �d� |S )N)r/ rP rQ rR rS TF)r/ rP rQ rR r4 rf z3livepatch kernel support API response was ambiguous)rN r\ r r r r r` �writeZLivepatchSupportCacheDatar] rb rc rd r? rE )r/ rP rQ rR rS r4 Zcache_supportedr r r �_on_supported_kernel_api s2 � �� ri )�maxsizec C s� t � } | dk r t�d� | S t�� }|jdksB|jdksB|jdkrRt�d� t j S t � |j �}t�� j}dj|j|jd�}t||j||�\}}|r�t�d� |dkr�t j S |r�t jS |s�t jS t�d� t||j|||j�}|dkr�t j S |S )z� Checks CLI, local cache, and API in that order for kernel support If all checks fail to return an authoritative answer, we return None Nz using livepatch cli for supportzHunable to determine enough kernel information to check livepatch supportz{major}.{minor})�major�minorz using livepatch support cachezusing livepatch support api)r^ r? r@ r Zget_kernel_inforP rk rl rE r r r Zstandardize_arch_nameZuname_machine_archZget_release_infoZseries�formatrg r r ri rS )Zcli_saysZ kernel_inforQ rR Zlp_api_kernel_verZis_cache_validZ cache_saysZapi_saysr r r �on_supported_kernel: s\ ���� � � �rn )� protocol_type� retry_sleepsr: c C s( t � s dS tjtdd�| �g|d� dS )a� Unset livepatch configuration settings for http and https proxies. :param protocol_type: String either http or https :param retry_sleeps: Optional list of sleep lengths to apply between retries. Specifying a list of [0.5, 1] tells subp to retry twice on failure; sleeping half a second before the first retry and 1 second before the second retry. N�configz {}-proxy=�rp )r> r rA rB rm )ro rp r r r �unconfigure_livepatch_proxyv s �rs )� http_proxy� https_proxyrp r: c C sj ddl m} | s|r*t�tjj|jd�� | rHtj t dd�| �g|d� |rftj t dd�|�g|d� dS ) a� Configure livepatch to use http and https proxies. :param http_proxy: http proxy to be used by livepatch. If None, it will not be configured :param https_proxy: https proxy to be used by livepatch. If None, it will not be configured :@param retry_sleeps: Optional list of sleep lengths to apply between snap calls r )�LivepatchEntitlement)Zservicerq z http-proxy={}rr zhttps-proxy={}N) Zuaclient.entitlementsrv �event�infor ZSETTING_SERVICE_PROXYrm �titler rA rB )rt ru rp rv r r r �configure_livepatch_proxy� s" ����rz )�keyr: c C s\ t �tdg�\}}t�d�| �|tj�}|r6|�d�nd}|rLt�dd|�}|rX|� � S dS )z� Gets the config value from livepatch. :param key: can be any valid livepatch config option :return: the value of the livepatch config option, or None if not set rq z ^{}: (.*)$r= Nz\"(.*)\"z\g<1>) r rA rB �re�searchrm � MULTILINE�group�sub�strip)r{ rH rI �match�valuer r r �get_config_option_value� s r� c C s t �t�d k S r% )r ZwhichrB r r r r r> � s r> )N)NNN)<r] �enumr; Zloggingr| � functoolsr �typingr r r Zuaclientr r r r r Zuaclient.data_typesr r r r r r Zuaclient.filesr Z uaclient.httpr ZHTTP_PROXY_OPTIONZHTTPS_PROXY_OPTIONrB rW Zget_event_loggerrw Z getLoggerZ replace_top_level_logger_namer r? �unique�Enumr r r+ r1 r7 r8 r) rM ZUAServiceClientrN r^ r* rg ri rn �floatrs rz r� r> r r r r �<module> sx 1� / � � %< � � � � %