⚝
One Hat Cyber Team
⚝
Your IP:
216.73.216.74
Server IP:
104.21.80.1
Server:
Linux vmi2315822.contaboserver.net 5.15.0-134-generic #145-Ubuntu SMP Wed Feb 12 20:08:39 UTC 2025 x86_64
Server Software:
LiteSpeed
PHP Version:
8.3.21
Buat File
|
Buat Folder
Eksekusi
Dir :
~
/
lib
/
python3
/
dist-packages
/
uaclient
/
__pycache__
/
View File Name :
actions.cpython-310.pyc
o ��g�8 � @ sT d dl Z d dlZd dlZd dlZd dlZd dlZd dlZd dlmZm Z d dl m Z m Z m Z mZmZmZmZmZ d dl mZ d dl mZmZ d dl mZ d dl mZmZmZ d dl m Z m Z m Z m Z d d l!m"Z"m#Z# d d l$m%Z%m&Z&m'Z'm(Z(m)Z) e�*� Z+e�,e�-e.��Z/d Z0d Z1d e j2dej3de j fdd�Z4 d8d e j2deej5 dej3de j de6f dd�Z7 d8d e j2de8de6de6ddf dd�Z9 d9d e j2d e j:ddfd d �Z;dd ddd!�d e j2d"e8d#e6d$e8de6d%e ee8 f d&d'�Z<ddd(�d e j2d)e e8 d*e6fd+d,�Zd-e8ddfd.d/�Z= d:d-e8d0e ee> ddfd1d2�Z?d e j2fd3d4�Z@d e j2d5e8fd6d7�ZAdS );� N)�List�Optional)�api�clouds�config�contract� entitlements� event_logger� exceptions� livepatch)�log)�messages�secret_manager)�status)�system�timer�util)�APPARMOR_PROFILES�CLOUD_BUILD_INFO�DEFAULT_CONFIG_FILE�DEFAULT_LOG_PREFIX)� machine_token�notices)�AttachmentData�attachment_data_file�machine_id_file� only_series_check_marker_file�timer_jobs_state_file)zapt-news.servicezesm-cache.servicezua-timer.servicezua-timer.timerzua-auto-attach.pathzua-auto-attach.servicezua-reboot-cmds.servicezubuntu-advantage.service� �cfg�contract_client� attached_atc C s< ddl m} t�t|d�� tj| d� || � |�� d S )Nr ��update_motd_messages�r! �r )� uaclient.timer.update_messagingr# r �writer � ua_statusr �update_activity_token)r r r! r# � r* �2/usr/lib/python3/dist-packages/uaclient/actions.py�_handle_partial_attach9 s r, F�services_to_be_enabled�silentc C sD d}g }g }z'|D ]"}t | |j|j|d�\} } || M }| s$|�|j� q tj|jd� q W nJ tjyH } zt�|j� t | ||� | �d } ~ w tj yY |�|j� d}Y n t yw } zd}|�|j� |�| � W Y d } ~ nd } ~ ww |s�t | ||� t� |� |r�tj dd� t||�D �d��tjdd� |D �d��d S ) NT)r �name�variantr. )�serviceFc S s, g | ]\}}|t jjt|�t�� d �f�qS ))� error_msg�log_path)r �UNEXPECTED_ERROR�format�str�pro_log� get_user_or_root_log_file_path)�.0r/ � exceptionr* r* r+ � <listcomp>r s ����z,_enable_default_services.<locals>.<listcomp>)�failed_servicesc S s g | ]}|t jf�qS r* )r �!E_ATTACH_FAILURE_DEFAULT_SERVICES)r9 r/ r* r* r+ r; � s ��)�enable_entitlement_by_namer/ r0 �append�event�service_processedr �ConnectivityError�service_failedr, �UbuntuProError� Exception�services_failed�AttachFailureUnknownError�zip� AttachFailureDefaultServices) r r- r r! r. �retr< �unexpected_errors�enable_by_default_service�ent_ret�reason�exc�er* r* r+ �_enable_default_servicesF s^ �� � �� ������rQ �token� allow_enable�returnc C s� ddl m} ddlm} tj�|� t�| �}t � | �}t j j t j jd�}|j||d�} t�� j} | �di ��di �} tdd � | �d g �D ��} | �d i ��d i ��d d�} | r{t�| �}| | krjtj|j|jd��tjtj j |j|jd� t � | � |� | � z|| � W n tj y� } z|�!� |�d}~ww tj"�#� | �di ��dt�"| ��}t$� |� |r�t �%| |�&� �}t'| ||||d� t(� t)|d�� || � t*�+� dS )aC Common functionality to take a token and attach via contract backend :raise ConnectivityError: On unexpected connectivity issues to contract server or inability to access identity doc from metadata service. :raise ContractAPIError: On unexpected errors when talking to the contract server. r )�+check_entitlement_apt_directives_are_uniquer" )�tz)�contract_token� attachment_dt�machineTokenInfo� contractInfoc s s, � | ]}|� d �dkr|� d �|fV qdS )�type�supportN)�get)r9 rP r* r* r+ � <genexpr>� s � ��z$attach_with_token.<locals>.<genexpr>�resourceEntitlementsr\ � affordances� onlySeriesN)�release�series_codename� machineId)r r- r r! r. r$ ),�uaclient.entitlementsrU r& r# r �secrets� add_secretr �get_machine_token_filer �UAContractClient�datetime�now�timezone�utc�add_contract_machiner �get_release_info�seriesr] �dict�get_distro_infor � AttachFailureRestrictedReleaserb rc r �add�Notice�LIMITED_TO_RELEASEr r' �%EntitlementsAPTDirectivesAreNotUnique�delete�get_machine_id� cache_clearr � get_enabled_by_default_servicesr rQ r r r �start)r rR rS r. rU r# �machine_token_filer r! �new_machine_token�current_seriesrZ �support_resource� only_series�allowed_releaserP � machine_idr- r* r* r+ �attach_with_token� sx � � � � �� �� � �� r� T�cloudc C s |� | �}t| ||d� dS )a\ :raise ConnectivityError: On unexpected connectivity issues to contract server or inability to access identity doc from metadata service. :raise ContractAPIError: On unexpected errors when talking to the contract server. :raise NonAutoAttachImageError: If this cloud type does not have auto-attach support. )rR rS N)�acquire_pro_tokenr� )r r� rS rR r* r* r+ � auto_attach� s r� � )� access_onlyr0 r. � extra_argsr/ r� r0 r� c C sf t j| ||||d�}|st�tjj|jd�� |�t � � �\}}|r/|s/t�tj j|jd�� ||fS )z� Constructs an entitlement based on the name provided. Passes kwargs onto the entitlement constructor. :raise EntitlementNotFoundError: If no entitlement with the given name is found, then raises this error. )r r/ r0 r� r� )�title) r �entitlement_factoryr@ �infor � ENABLING_TMPLr5 r� �enabler �ProgressWrapper� ENABLED_TMPL) r r/ r� r0 r. r� � entitlementrM rN r* r* r+ r> � s �r> )�simulate_with_token�show_allr� r� c C s: |rt j| ||d�\}}||fS t j| |d�}d}||fS )z6 Construct the current Pro status dictionary. )r rR r� �r r� r )r( �simulate_statusr )r r� r� r rJ r* r* r+ r s � �r �filenamec C s� g d�}d}d}z t �|�\}}W n' tjy8 } zt�dt|�� t �d�| �t|�� W Y d}~dS d}~ww |r[g }|� d�D ] }t � ||�rO|� |� qBt �| d� |�� dS dS )z� Helper which gets ubuntu_pro apparmor logs from the kernel from the last day and writes them to the specified filename. )� journalctlz-bz-kz--since=1 day agoz7apparmor=\".*(profile=\"ubuntu_pro_|name=\"ubuntu_pro_)Nz!Failed to collect kernel logs: %s�{}-error� )r �subpr �ProcessExecutionError�LOG�warningr6 � write_filer5 �split�re�searchr? �join)r� �cmd� apparmor_re� kernel_logs�_rP � apparmor_logs� kernel_liner* r* r+ � _write_apparmor_logs_to_file% s$ $�� ��r� � return_codesc C sr z t j| �� |d�\}}W n tjy, } zt �d�|�t|�� W Y d}~dS d}~ww t �|d�||�� dS )zCHelper which runs a command and writes output or error to filename.)�rcsr� Nzstdout: {} stderr: {})r r� r� r r� r� r5 r6 )r� r� r� �out�errrP r* r* r+ � _write_command_output_to_file> s $�� �r� c s, � j pt� jtjjtg� fdd�tjD ��S )Nc 3 s( � | ]}t |tjj�r|� �jV qd S �N)� issubclassr �repo�RepoEntitlement� repo_file)r9 �entitlement_clsr% r* r+ r^ S s � � �z#_get_state_files.<locals>.<genexpr>) �cfg_pathr �log_filer �ua_file�pathr r �ENTITLEMENT_CLASSESr% r* r% r+ �_get_state_filesL s � ��r� � output_dirc C s� t dd�|�� t d�tj�d�|�� t dd�|�� t dd�|�� t d �d �d d � tD ���d �|�� tD ]}t d�|�d�||�ddgd� q9t| dd�\}}t�d�|�t j |t j d�� t � � }t�d�|�t � |�� t| �}t �� r�t�� dt� nt�� g}t|�D ]7\}} zt �t�| ��} t�tj�|d�|��| � W q� ty� } zt�d| t | �� W Y d} ~ q�d} ~ ww |t � t d � D ]K} tj� | ��rzt�| �} W n ty� } zt�d | t | �� W Y d} ~ q�d} ~ ww t �| �} t �� �r t�| | � t�tj�|tj� | ��| � q�t!d �|�� t"D ]1} tj� | ��rRz t#�$| |� W �q" t�yQ } zt�d | t | �� W Y d} ~ �q"d} ~ ww �q"dS ) zG Write all relevant Ubuntu Pro logs to the specified directory zcloud-idz{}/cloud-id.txtz {} statusz{}/livepatch-status.txtzsystemctl list-timers --allz{}/systemd-timers.txtzujournalctl --boot=0 -o short-precise -u cloud-init-local.service -u cloud-init-config.service -u cloud-config.servicez{}/cloud-init-journal.txtz journalctl -o short-precise {}� c S s g | ] }d |v rd� |��qS )z.servicez-u {})r5 )r9 �sr* r* r+ r; v s z collect_logs.<locals>.<listcomp>z{}/pro-journal.txtzsystemctl status {}z {}/{}.txtr � )r� Fr� z{}/pro-status.json)�clsz{}/environment_vars.jsonNz user{}.logz&Failed to collect user log file: %s %s�*zFailed to load file: %s %sz{}/apparmor_logs.txtzFailed to copy file: %s %s)%r� r5 r � LIVEPATCH_CMDr� � UA_SERVICESr r r� �json�dumpsr �DatetimeAwareJSONEncoder�get_pro_environmentr� �we_are_currently_rootr7 �get_all_user_log_files�USER_LOG_COLLECTED_LIMIT�get_user_log_file� enumerate�redact_sensitive_logs� load_file�osr� rE r� r� r6 �globr �isfile�basenamer� r �shutil�copy) r r� r1 � pro_statusr� �env_vars� state_files�user_log_files� log_file_idxr� �contentrP �fr* r* r+ � collect_logs[ s� � ��� ��� ������ ��� �� ������r� )F)Tr� )Brj r� r� �loggingr� r� r� �typingr r �uaclientr r r r r r r r r r7 r r r r( r r r �uaclient.defaultsr r r r �uaclient.filesr r �uaclient.files.state_filesr r r r r �get_event_loggerr@ � getLogger� replace_top_level_logger_name�__name__r� r� r� �UAConfigri r, �EnableByDefaultService�boolrQ r6 r� �AutoAttachInstancer� r> r� �intr� r� r� r* r* r* r+ �<module> s� ( �� ������ �F����� �W��� ������� �%��� ��� � �