OwlCyberSecurity - MANAGER
Edit File: actions.cpython-38.pyc
U ���h�: � @ s d dl Z d dlZd dlZd dlZd dlZd dlZd dlZd dlmZm Z d dl m Z m Z m Z mZmZmZmZmZ d dl mZ d dl mZmZ d dl mZ d dl mZmZmZ d dl m Z m Z m Z m Z d d l!m"Z"m#Z# d d l$m%Z%m&Z&m'Z'm(Z(m)Z) e�*� Z+e�,e�-e.��Z/d Z0d Z1e j2ej3e j d �dd�Z4d0e j2eej5 ej3e j e6d�dd�Z7d1e j2e8e6e6dd�dd�Z9d2e j2e j:dd�dd�Z;ddddd �e j2e8e6e8e6e ee8 d �d d �Z<ddd �e j2e e8 e6d!�d"d#�Ze8dd$�d%d&�Z=d3e8e ee> dd'�d(d)�Z?e j2d*�d+d,�Z@e j2e8d-�d.d/�ZAdS )4� N)�List�Optional)�api�clouds�config�contract� entitlements� event_logger� exceptions� livepatch)�log)�messages�secret_manager)�status)�system�timer�util)�APPARMOR_PROFILES�CLOUD_BUILD_INFO�DEFAULT_CONFIG_FILE�DEFAULT_LOG_PREFIX)� machine_token�notices)�AttachmentData�attachment_data_file�machine_id_file� only_series_check_marker_file�timer_jobs_state_file)zapt-news.servicezesm-cache.servicezua-timer.servicezua-timer.timerzua-auto-attach.pathzua-auto-attach.servicezua-reboot-cmds.servicezubuntu-advantage.service� )�cfg�contract_client� attached_atc C s< ddl m} t�t|d�� tj| d� || � |�� d S )Nr ��update_motd_messages�r! �r )� uaclient.timer.update_messagingr# r �writer � ua_statusr Zupdate_activity_token)r r r! r# � r) �2/usr/lib/python3/dist-packages/uaclient/actions.py�_handle_partial_attach9 s r+ F�r �services_to_be_enabledr r! �silentc C sT d}g }g }zN|D ]D}t | |j|j|d�\} } || M }| sH|�|j� qtj|jd� qW n� tjk r� } z t�|j� t | ||� | �W 5 d } ~ X Y n` tj k r� |�|j� d}Y n< t k r� } z d}|�|j� |�| � W 5 d } ~ X Y nX |�sPt | ||� t� |� |�r:tj dd� t||�D �d��ntjdd� |D �d��d S ) NT)r �name�variantr. )�serviceFc S s, g | ]$\}}|t jjt|�t�� d �f�qS ))Z error_msgZlog_path)r ZUNEXPECTED_ERROR�format�str�pro_logZ get_user_or_root_log_file_path)�.0r/ Z exceptionr) r) r* � <listcomp>r s ���z,_enable_default_services.<locals>.<listcomp>)�failed_servicesc S s g | ]}|t jf�qS r) )r Z!E_ATTACH_FAILURE_DEFAULT_SERVICES)r5 r/ r) r) r* r6 � s �)�enable_entitlement_by_namer/ r0 �append�eventZservice_processedr ZConnectivityErrorZservice_failedr+ ZUbuntuProError� ExceptionZservices_failedZAttachFailureUnknownError�zipZ AttachFailureDefaultServices) r r- r r! r. �retr7 Zunexpected_errorsZenable_by_default_service�ent_ret�reason�exc�er) r) r* �_enable_default_servicesF sV � �����rB )r �token� allow_enabler. �returnc C s� ddl m} ddlm} tj�|� t�| �}t � | �}t j j t j jd�}|j||d�} t�� j} | �di ��di �} tdd � | �d g �D ��} | �d i ��d i ��d d�} | �r$zt�| �}W n tjk r� Y nNX t�| �}|j|jk�rtj|j|jd��t j t j j |j|jd� t �!| � |�!| � z || � W n2 tj"k �rl } z|�#� |�W 5 d}~X Y nX tj$�%� | �di ��dt�$| ��}t&�!|� |�r�t �'| |�(� �}t)| ||||d� t*�!t+|d�� || � t,�-� dS )aC Common functionality to take a token and attach via contract backend :raise ConnectivityError: On unexpected connectivity issues to contract server or inability to access identity doc from metadata service. :raise ContractAPIError: On unexpected errors when talking to the contract server. r )�+check_entitlement_apt_directives_are_uniquer" )Ztz)Zcontract_tokenZ attachment_dtZmachineTokenInfo� contractInfoc s s* | ]"}|� d �dkr|� d �|fV qdS )�type�supportN)�get)r5 rA r) r) r* � <genexpr>� s �z$attach_with_token.<locals>.<genexpr>ZresourceEntitlementsrI Z affordancesZ onlySeriesN)�release�series_codenameZ machineIdr, r$ ).Zuaclient.entitlementsrF r& r# r ZsecretsZ add_secretr Zget_machine_token_filer �UAContractClient�datetimeZnow�timezoneZutcZadd_contract_machiner Zget_release_infoZseriesrJ �dictZget_distro_infor Z MissingSeriesInDistroInfoFileZeolZ AttachFailureRestrictedReleaserL rM r �addZNoticeZLIMITED_TO_RELEASEr r' Z%EntitlementsAPTDirectivesAreNotUnique�deleteZget_machine_id� cache_clearr Z get_enabled_by_default_servicesr rB r r r �start)r rC rD r. rF r# Zmachine_token_filer r! Znew_machine_tokenZcurrent_seriesrG Zsupport_resourceZ only_seriesZallowed_releaseZcurrent_releaserA Z machine_idr- r) r) r* �attach_with_token� s� � � � � �� �� � ��rV T)r �cloudrE c C s |� | �}t| ||d� dS )a\ :raise ConnectivityError: On unexpected connectivity issues to contract server or inability to access identity doc from metadata service. :raise ContractAPIError: On unexpected errors when talking to the contract server. :raise NonAutoAttachImageError: If this cloud type does not have auto-attach support. )rC rD N)Zacquire_pro_tokenrV )r rW rD rC r) r) r* � auto_attach� s rX � )� access_onlyr0 r. � extra_args)r r/ rZ r0 r. r[ c C sf t j| ||||d�}|s.t�tjj|jd�� |�t � � �\}}|r^|s^t�tj j|jd�� ||fS )z� Constructs an entitlement based on the name provided. Passes kwargs onto the entitlement constructor. :raise EntitlementNotFoundError: If no entitlement with the given name is found, then raises this error. )r r/ r0 rZ r[ )�title) r Zentitlement_factoryr: �infor Z ENABLING_TMPLr2 r\ �enabler ZProgressWrapperZ ENABLED_TMPL) r r/ rZ r0 r. r[ Z entitlementr> r? r) r) r* r8 � s �r8 )�simulate_with_token�show_all)r r_ r` c C s4 |rt j| ||d�\}}nt j| |d�}d}||fS )z6 Construct the current Pro status dictionary. )r rC r` �r r` r )r( Zsimulate_statusr )r r_ r` r r= r) r) r* r s � r )�filenamerE c C s� ddddg}d}d}zt �|�\}}W nJ tjk rp } z*t�dt|�� t �d�| �t|�� W 5 d}~X Y nBX |r�g }|� d �D ]}t � ||�r�|� |� q�t �| d � |�� dS ) z� Helper which gets ubuntu_pro apparmor logs from the kernel from the last day and writes them to the specified filename. Z journalctlz-bz-kz--since=1 day agoz7apparmor=\".*(profile=\"ubuntu_pro_|name=\"ubuntu_pro_)Nz!Failed to collect kernel logs: %s�{}-error� )r �subpr �ProcessExecutionError�LOG�warningr3 � write_filer2 �split�re�searchr9 �join)rb �cmdZ apparmor_reZ kernel_logs�_rA Z apparmor_logsZ kernel_liner) r) r* � _write_apparmor_logs_to_file0 s ( rp )rb � return_codesrE c C sn zt j| �� |d�\}}W n: tjk rT } zt �d�|�t|�� W 5 d}~X Y nX t �|d�||�� dS )zCHelper which runs a command and writes output or error to filename.)Zrcsrc Nzstdout: {} stderr: {})r re rj r rf ri r2 r3 )rn rb rq �out�errrA r) r) r* � _write_command_output_to_fileI s ( �rt r% c s, � j pt� jtjjtf� fdd�tjD ��S )Nc 3 s& | ] }t |tjj�r|� �jV qd S )N)� issubclassr ZrepoZRepoEntitlementZ repo_file)r5 Zentitlement_clsr% r) r* rK ^ s �z#_get_state_files.<locals>.<genexpr>) Zcfg_pathr �log_filer Zua_file�pathr r ZENTITLEMENT_CLASSESr% r) r% r* �_get_state_filesW s � ��rx )r � output_dirc C s� t dd�|�� t d�tj�d�|�� t dd�|�� t dd�|�� t d �d �d d � tD ���d �|�� tD ]$}t d�|�d�||�ddgd� qrt| dd�\}}t�d�|�t j |t j d�� t � � }t�d�|�t � |�� t| �}t �� �rt�� dt� nt�� g}t|�D ]r\}} z0t �t�| ��} t�tj�|d�|��| � W n6 tk �r� } zt�d| t | �� W 5 d} ~ X Y nX �q|t � t d � D ]�} tj� | ��r�zt�| �} W n@ tk �r } z t�d | t | �� W Y ��q�W 5 d} ~ X Y nX t �| �} t �� �r"t�| | � t�tj�|tj� | ��| � �q�t!d �|�� t"D ]f} tj� | ��rVzt#�$| |� W n@ tk �r� } z t�d | t | �� W Y ��qVW 5 d} ~ X Y nX �qVdS ) zG Write all relevant Ubuntu Pro logs to the specified directory zcloud-idz{}/cloud-id.txtz {} statusz{}/livepatch-status.txtzsystemctl list-timers --allz{}/systemd-timers.txtzujournalctl --boot=0 -o short-precise -u cloud-init-local.service -u cloud-init-config.service -u cloud-config.servicez{}/cloud-init-journal.txtz journalctl -o short-precise {}� c S s g | ]}d |krd� |��qS )z.servicez-u {})r2 )r5 �sr) r) r* r6 � s z collect_logs.<locals>.<listcomp>z{}/pro-journal.txtzsystemctl status {}z {}/{}.txtr � )rq Fra z{}/pro-status.json)�clsz{}/environment_vars.jsonNz user{}.logz&Failed to collect user log file: %s %s�*zFailed to load file: %s %sz{}/apparmor_logs.txtzFailed to copy file: %s %s)%rt r2 r Z LIVEPATCH_CMDrm � UA_SERVICESr r ri �json�dumpsr ZDatetimeAwareJSONEncoderZget_pro_environmentrx Zwe_are_currently_rootr4 Zget_all_user_log_files�USER_LOG_COLLECTED_LIMITZget_user_log_file� enumerateZredact_sensitive_logsZ load_file�osrw r; rg rh r3 �globr �isfile�basenamerp r �shutil�copy) r ry r1 Z pro_statusro Zenv_varsZ state_filesZuser_log_filesZ log_file_idxrv ZcontentrA �fr) r) r* � collect_logsf s� � ��� ��� ������ � �r� )F)F)T)N)BrO r� r� Zloggingr� rk r� �typingr r Zuaclientr r r r r r r r r r4 r r r r( r r r Zuaclient.defaultsr r r r Zuaclient.filesr r Zuaclient.files.state_filesr r r r r Zget_event_loggerr: Z getLoggerZ replace_top_level_logger_name�__name__rg r r� ZUAConfigrN r+ ZEnableByDefaultService�boolrB r3 rV ZAutoAttachInstancerX r8 rp �intrt rx r� r) r) r) r* �<module> s� ( � �� F �� b �� � � %�� � �