CasperSecurity
o
��Jh r � @ s: d dl Z d dlZd dlZd dlZd dlmZ d dlmZmZ d dlm Z d dl
m Z m Z m
Z
mZmZ d dlmZmZmZmZmZmZmZ d dlmZ d dlmZm Z d d l m Z m Z d d
l m!Z!m"Z" d d l#m$Z$ d d l%m&Z&m'Z'm(Z(m)Z) d d
l*m+Z+m,Z,m-Z-m.Z. d dl/m0Z0 d dl1m2Z2 e�3� Z4e�5e�6e7��Z8dZ9dZ:dZ;e)j<j=e2j>ej? e2j@ e)jAj=e2jBejC e2j@ e)jDj=e2jEejF e2j@ e)jGj=e2jEejH e2j@ e)jIj=e2jJejK e2j@ e&jLj=e2j>ejM e2j@ e&jNj=e2jEejO e2j@ e9e2j>ejP e2j@ e:e2j>ejQ e2j@ e;e2j>ejR e2j@ i
ZSdZTdZUdjVejWejXejYejZd�Z[dZ\dZ]i dd�dd �d e�^� �d d�d d �d!d�d"d�d#d�d$g �d%e(jAj=�d&ej_�d'i �d(g �d)d*d*d*g e)jDj=d+��d,d*d*d*g d-��d.d �Z`d/d0� Zad1e ebe f fd2d3�Zcd4e d1e ebe f fd5d6�Zdd4e d1e ebe f fd7d8�Zed1e ebe f fd9d:�ZfdUd4e d;egd1e ebe f fd<d=�Zhd>e
e ebe f d?ebd1e ebe f fd@dA�Zi dUdBebd;egd1ee ebe f ejf fdCdD�ZkdEebd1ebfdFdG�ZldHe
e
eb d1ebfdIdJ�Zm dVdKe
eebebf dLeeb d1e
eb fdMdN�Znd"ee d1ebfdOdP�ZodUd=e ebe f d;egd1ebfdQdR�ZpdSdT� ZqdS )W� N)� OrderedDict)�datetime�timezone)�Enum)�Any�Dict�List�Optional�Tuple)� event_logger�
exceptions� livepatch�lock�messages�util�version)� _is_attached)�UA_CONFIGURABLE_KEYS�UAConfig)�get_available_resources�get_contract_information)�ATTACH_FAIL_DATE_FORMAT�PRINT_WRAP_WIDTH)�entitlement_factory)�ContractStatus�UserFacingAvailability�UserFacingConfigStatus�UserFacingStatus)�
machine_token�notices� state_files�user_config_file)�Notice)�TxtColor� essential�standard�advancedz({name: <17}{available: <11}{description}zJ{name: <17}{available: <11}{entitled: <11}{auto_enabled: <16}{description}z4{name: <17}{entitled: <10}{status: <13}{description}��name�entitled�status� descriptionz4{name: <17}{entitled: <19}{status: <22}{description}z={marker} {name: <15}{entitled: <19}{status: <22}{description}�_doczUContent provided in json response is currently considered Experimental and may change�_schema_versionz0.1r �
machine_id�attachedF� effective�expires�origin�services�execution_status�execution_details�featuresr �contract� ��idr( �
created_at�products�tech_support_level�account�r( r: r; �external_account_ids� simulatedc C s dd� | � � D �S )Nc S s4 g | ]}|j js |j jn|j j|jj|jjd ��qS ))r( � reason_code�reason)� entitlement�
is_variantr( � variant_name� named_msg�msg��.0�service� rL �1/usr/lib/python3/dist-packages/uaclient/status.py�
<listcomp>� s
�
���z,_get_blocked_by_services.<locals>.<listcomp>)� blocking_incompatible_services)�entrL rL rM �_get_blocked_by_services� s
�rQ �returnc
s� d }d}| � � }| �� }| j�v rdnd}i }|tjkr tj} n=| j�v r.tj} �| j }n/| �� \} }
| tj krA|
j|
j
d�}n|
rF|
j
}| tjkrMd}| j r]� �fdd�| j � � D �}t
| �} | j| j|j| j|||| |d� } | jsx|| d< | S ) Nr8 �no�yes)�code�messagec s$ i | ]\}}|t |� d ��� ��qS ))�cfg)�_attached_service_status)rJ rF � variant_cls�rW �inapplicable_resourcesrL rM �
<dictcomp>� s ���z,_attached_service_status.<locals>.<dictcomp>) r( r+ r) r* �status_details�description_override� available�
blocked_by�warning�variants)�status_description_override�contract_statusr( r �
UNENTITLEDr � UNAVAILABLE� INAPPLICABLE�user_facing_status�WARNINGrH rb �itemsrQ �presentation_namer+ �valuerE )
rP r[ rW ra r] r^ rd r_ rb �
ent_status�detailsr` �service_statusrL rZ rM rX � sL
�
� � rX rW c C s� t �tj� t �tj� t| �jrt �tj� t� t
�}t � | �}|j d }|d }t
jj}|�|d d|�d�t �� p=g |d |d |�dd �|�d
g �|d �|jd |jd |j�dd �|j�d g �d
�d�� |�d�rt|j|d< |�d�r|d |d< |j �d�}|s�t| �}dd� t|dd� d�D �}|D ]$}z t| |�dd �d�} W n
tjy� Y q�w |d �t| || �� q�|d j dd� d� |� � �d i ��d �}
|
r�|
�d i ��d �} | r�| |d d!< |S )"z8Return configuration of attached status as a dictionary.�machineTokenInfo� contractInfo� machineIdTr2 r: r( � createdAtr8 r< r9 �externalAccountIDsr? )r. r/ r2 r r7 r> � effectiveTor1 �
effectiveFromr0 �availableResourcesc S s& i | ]}|� d �s|d |� d��qS )r_ r( r+ ��get�rJ �resourcerL rL rM r\ s ��z$_attached_status.<locals>.<dictcomp>c S � | � dd�S �Nr( r8 rx ��xrL rL rM �<lambda> � z"_attached_status.<locals>.<lambda>��key�rW r( r3 c S r| r} rx r~ rL rL rM r� r� �supportrD � affordances� supportLevelr7 r= ) r �remover" � AUTO_ATTACH_RETRY_FULL_NOTICE� AUTO_ATTACH_RETRY_TOTAL_FAILUREr � is_attached_and_contract_valid�CONTRACT_EXPIRED�copy�deepcopy�DEFAULT_STATUSr �get_machine_token_filer rg rl �updatery �listr> �contract_expiry_datetimer �sortedr r �EntitlementNotFoundError�appendrX �sort� entitlements) rW �response�machine_token_filerp rq r= � resourcesr[ r{ rP r� r� rL rL rM �_attached_status� sp
� ����
��
�� r� c C s� t �t�}t| �}|D ]X}|�d�rtjj}ntjj}z t | |�dd�d�}W n t
j y; t �
d|�dd�� Y q w |jdkrNt�� tjjkrN|�� }nd}|d �|�d
|d �|j||d �� q |d jd d
� d� |S )z#Return unattached status as a dict.r_ r( r8 r� z@Ignoring availability of unknown service %s from contract serverzwithout a 'name' keyr
Nr3 � presentedAs)r( r+ r^ r_ c S r| r} rx r~ rL rL rM r� G r� z$_unattached_status.<locals>.<lambda>r� )r� r� r� r ry r � AVAILABLErl rf r r r� �LOG�debugr( r
�on_supported_kernel�LivepatchSupport� UNSUPPORTEDrc r� r+ r� )rW r� r� r{ r_ rP �descr_overriderL rL rM �_unattached_status s<
��
�
��r� c C s� t }|jj}tj}t�� \}}t�� pg }|dkr&|j j}tj
j ||d�}nt j
jr7|jj}d}tjj |d�}|||| j| j| jd�}tjj�� } tD ] }
t| |
�ri| |
du rit| |
�} t| t �re| j} | | |
< qK| |d d< |S ) aG Return a dict with execution_status, execution_details and notices.
Values for execution_status will be one of UserFacingConfigStatus
enum:
inactive, active, reboot-required
execution_details will provide more details about that state.
notices is a list of tuples with label and description items.
r )�pid� lock_holderzconfiguration changes)� operation)r4 r5 r � config_path�configr6 Nr� � ua_config) r �INACTIVErl r �NO_ACTIVE_OPERATIONSr �check_lock_infor r� �ACTIVE� LOCK_HELD�formatr �reboot_cmd_marker_file�
is_present�REBOOTREQUIRED�ENABLE_REBOOT_REQUIRED_TMPL�cfg_pathrW r6 r! � user_config�
public_config�to_dictr �hasattr�getattr�
isinstancer ) rW �
userStatus�
status_val� status_desc�lock_pidr� � notices_listr� �retr� r� �valrL rL rM �_get_config_statusL sB ���
� r� �show_allc C sd t | �jr
t| �}nt| �}|�t| �� t�� r tj �
|� |s0dd� |� dg �D �}||d< |S )a Return status as a dict, using a cache for non-root users
When unattached, get available resources from the contract service
to report detailed availability of different resources for this
machine.
Write the status-cache when called by root.
c S � g | ] }|� d d�dkr|�qS �r_ rT rx rI rL rL rM rN � �
�zstatus.<locals>.<listcomp>r3 ) r � is_attachedr� r� r� r� r �we_are_currently_rootr �status_cache_file�writery )rW r� r� �available_servicesrL rL rM r* { s
�r* r� �entitlement_namec C s` | D ]'}|� d�|kr)|� d�rdnd|� di �� d�r dnd|� di �d� S qddi d�S ) z0Extract information from the entitlements array.�typer) rT rS � obligations�enableByDefaultr� )r) � auto_enabledr� rx )r� r� rD rL rL rM � _get_entitlement_information� s ��
�� r� �tokenc
C s d}t �t�}zt| |�}W n tjy+ } zt|d�r%|jdkr%t�� �|�d}~ww |� di �}|� di �}|�
|� dd�|� d d�|� d
d�|� d g �d �|� d d�|� d�|� d
d�|� d
g �d�dd�� t � t
j�} |� d�r�|� d�|d< |d }
|
| } | �� dkr�tjj|d d |
�t�d�} tj| j| jd� t�tjd | j d � d}|� d�r�|� d�|d< |d }
| |
} | �� dkr�tjj|d d |
�t�d�} tj| j| jd� t�tjd | j d � d}t | �}dd� t |d d � d �D �}|� d g �}|D ]B}|� d d�}zt | |d �}W n tj �y' Y �q w t ||�}|d! �!|� d"|j�|j"|d# |d$ |j|v�rGd%nd&d'�� �q |d! j#d(d � d � t |d)�}|d# �rr|d* � d+�}|�rr||d d,< |�
t$| �� |�s�d-d� |� d!g �D �}||d!< ||fS ).z�Get a status dictionary based on a token.
Returns a tuple with the status dictionary and an integer value - 0 for
success, 1 for failure
r rU i� Nrq � accountInfor: r8 r( rs r< )r: r( r; r< rt r? T)r7 r> rA ru r1 r7 )� contract_id�date)� error_msg�
error_code�
� rv r0 c S s g | ]
}|d s|d �qS )r_ r( rL rz rL rL rM rN � s ��z#simulate_status.<locals>.<listcomp>c S s | d S )Nr( rL r~ rL rL rM r� � s z!simulate_status.<locals>.<lambda>r� �resourceEntitlementsr� r3 r� r) r� rT rS )r( r+ r) r� r_ c S r| r} rx r~ rL rL rM r� r� r� r� r� r= c S r� r� rx rI rL rL rM rN r� )%r� r� r� r r �ContractAPIErrorr� rU �AttachInvalidTokenErrorry r� r �nowr �utc�
total_secondsr �E_ATTACH_FORBIDDEN_EXPIREDr� �strftimer �event�errorrH r( �info�STATUS_TOKEN_NOT_VALID�E_ATTACH_FORBIDDEN_NOT_YETr r� r r� r� r� r+ r� r� )rW r� r� r� r� �contract_information�e�
contract_info� account_infor� �expiration_datetime�deltarV �effective_datetimer� r[ r� r{ r� rP �entitlement_informationr� r� r� rL rL rM �simulate_status� s�
��
�
����
��
��� �� ��
�r� �stringc C s t j�� r t�| | �S | S )z=Return colorized string if using a tty, else original string.)�sys�stdout�isatty�STATUS_HUMANIZE_COLORIZEry )r� rL rL rM �for_human_colorized% s
���r� �commandsc C st d}| D ]}|r |d7 }|d� |�7 }qd� tj|td dd��}d|v r*d }d
}nd }d }d
jtj|||tjd�S )Nr8 z && � z \
� z )�width�subsequent_indentr� z{
z
}z{ z }z%{color}{prefix}{content}{suffix}{end})�color�prefix�content�suffix�end)�join�textwrap�wrapr r� r# � DISABLEGREY�ENDC)r� r� �cmd�wrapped_contentr� r rL rL rM �colorize_commands. s,
���r � column_data�headerc sj g }|r |� |� tdd� | D ��}|dkr)d�|�� |�� fdd�| D �� |S |�dd� | D �� |S )z�Return a list of content lines to print to console for a section
Content lines will be center-aligned based on max value length of first
column.
c S s g | ]}t |d ��qS )r )�len�rJ �pairrL rL rM rN U s z.get_section_column_content.<locals>.<listcomp>r z{{:>{}}}: {{}}c s g | ]}� j |� �qS rL )r� r
��templaterL rM rN X s c S s g | ]}|d �qS )r� rL r
rL rL rM rN [ s )r� �maxr� �extend)r
r r� �template_lengthrL r rM �get_section_column_contentJ s
�r c C s8 | d u rt jS z| �� } W n ty Y nw | �d�S )Nz%c %Z)r � STATUS_CONTRACT_EXPIRES_UNKNOWN�
astimezone� Exceptionr� )r1 rL rL rM �format_expires_ s �
r c
C s4 | � d�s�| � d�r<| � dd�stjS tjtjtjtjtjtj d�g}| � dg �D ]
}|�
tjd)i |��� q)d� |�S | � dd�sGtjg}n@t jtjtjtj d�g}| � dg �D ]-}|� d�}|rd|n|� d d
�}|� d �d krttj
ntj}|�
t j|� d
d
�||d�� qY| � d�}|r�|�
tj� |�|� | � d�r�|�
dtj � t| � di ��� �D ]
\}} |�
d�|| �� q�|s�|�d
tjg� |�d
tjjg� t�� tjjkr�|�d
tjg� d� |�S g }
d} | � dd�s�tjg}n�t g}| � dg �D ]�} | � dd
�}
| � d�}|�r|n| � d d
�}| � d
d
�t |
�t | � dd
��|d�}| � dd�}|du�rD|� dd�}|du�rD|
�
|� | � d�}|�rZ|�sZd} d�|d
�|d
< |�
t jd)i |��� |�r�|�r�t |�� �D ]4\}\}}|t |�d k�r�dnd }|�
t!j||� d
�t |� dd
��t |� dd
��|� d d
�d �� �qqq�| �r�|�
d
� |�
tj"� | � d��s�t |
�d k�r�|�
d
� |�
tj� | � d�}|�r�|�|� t |
�d k�r�|�|
� | � d��r
|�
dtj � t| � di ��� �D ]\}} |�
d�|| �� �q�|�
d
� |�s%| �r |�
tj#� n|�
tj� |�
tj$jd d �� g }| � d!i �� d
d"�}|�rF|�
tj%|f� | � d#i �� d
d"�}|�r[|�
tj&|f� | � d$d�d%k�r�|�
tj't(| � d&��f� | � d#i �� d'd"�}|�
tj)t |�f� |�r�|�
d
� |�t*|d(�� d� |�S )*z&Format status dict for tabular output.r/ rA r3 N)r( r_ r) r� r+ r� )r( r_ r+ r^ r+ r8 r_ rT r( r r6 z{}: {}Fr) r* r' ra rV rb Tz{}*r� u ├u └)�markerr( r) r* r+ r zpro enable <service>)�commandr> �unknownr7 r2 �freer1 r= )r
rL )+ry r � STATUS_NO_SERVICES_AVAILABLE�STATUS_SIMULATED_TMPLr� �STATUS_SERVICE�STATUS_AVAILABLE�STATUS_ENTITLED�STATUS_AUTO_ENABLED�STATUS_DESCRIPTIONr� r �STATUS_UNATTACHED_TMPL�STANDALONE_YES�
STANDALONE_NO�STATUS_NOTICESr �STATUS_FEATURESr� rj �STATUS_ALL_HINT� E_UNATTACHEDrH r
r� r� r� �)LIVEPATCH_KERNEL_NOT_SUPPORTED_UNATTACHED�
STATUS_HEADERr� � STATUS_TMPL� enumerater �VARIANT_STATUS_TMPL�STATUS_SERVICE_HAS_VARIANTS� STATUS_ALL_HINT_WITH_VARIANTS�"STATUS_FOOTER_ENABLE_SERVICES_WITH�STATUS_FOOTER_ACCOUNT�STATUS_FOOTER_SUBSCRIPTION�STATUS_FOOTER_VALID_UNTILr �STATUS_FOOTER_SUPPORT_LEVELr )r* r� r� rK r� r+ r_ r r� rl �service_warnings� has_variantsro r) �fmt_argsra �warning_messagerb �idx�_�variantr �pairs� account_name�
contract_namer= rL rL rM �format_tabulari s4
��
��
�
���
��
��
�
�
��
�
�
���
�� �� ���
rA c
C s� t | �}d}t� }||d< |D ](}|d |ks |�d�|kr7z
t| |d d�}W n
tjy2 Y qw |} nq|du rBtj|d��t| �jr\t |i | �}|d }|d |d< ||d< n|d ret
j j } nt
j
j } | |d< |j|d < |S )
z�Return help information from an uaclient service as a dict
:param name: Name of the service for which to return help data.
:raises: UbuntuProError when no help is available.
Nr( r� r� )r( r* r) r_ �help)r r ry r r r� �
NoHelpContentr r� rX r r� rl rf � help_info)
rW r( r� �
help_resource�
response_dictr{ �help_entro �
status_msgr_ rL rL rM rB % s6 ��
rB )F)N)rr� �loggingr� r � collectionsr r r �enumr �typingr r r r r
�uaclientr r r
r r r r �(uaclient.api.u.pro.status.is_attached.v1r �uaclient.configr r �uaclient.contractr r �uaclient.defaultsr r �uaclient.entitlementsr �(uaclient.entitlements.entitlement_statusr r r r �uaclient.filesr r r r! �uaclient.files.noticesr" �uaclient.messagesr# �get_event_loggerr� � getLogger� replace_top_level_logger_name�__name__r� � ESSENTIAL�STANDARD�ADVANCEDr� rl �OKGREEN�STATUS_STATUS_ENABLEDr r� �FAIL�STATUS_STATUS_DISABLEDrg r �STATUS_STATUS_INAPPLICABLErf �STATUS_STATUS_UNAVAILABLEri �
WARNINGYELLOW�STATUS_STATUS_WARNING�ENTITLED�STATUS_ENTITLED_ENTITLEDre �STATUS_ENTITLED_UNENTITLED�STATUS_SUPPORT_ESSENTIAL�STATUS_SUPPORT_STANDARD�STATUS_SUPPORT_ADVANCEDr� r$ r r� r r! �
STATUS_STATUSr# r, r- r/ � get_versionr� r� rQ �strrX r� r� r� �boolr* r� �intr� r� r r r rA rB rL rL rL rM �<module> s: $ �������������(�
�������� �
� � �
������ �
�;G. / ��
����
�x ���
�
=