Linux lhjmq-records 5.15.0-118-generic #128-Ubuntu SMP Fri Jul 5 09:28:59 UTC 2024 x86_64
Your IP : 3.139.72.210
import os
from typing import Tuple, Type, Union
from uaclient import gpg, system
from uaclient.apt import APT_KEYS_DIR, ESM_REPO_FILE_CONTENT, KEYRINGS_DIR
from uaclient.defaults import ESM_APT_ROOTDIR
from uaclient.entitlements import repo
from uaclient.entitlements.base import UAEntitlement
from uaclient.entitlements.entitlement_status import CanDisableFailure
class ESMBaseEntitlement(repo.RepoEntitlement):
help_doc_url = "https://ubuntu.com/security/esm"
@property
def dependent_services(self) -> Tuple[Type[UAEntitlement], ...]:
from uaclient.entitlements.ros import (
ROSEntitlement,
ROSUpdatesEntitlement,
)
return (ROSEntitlement, ROSUpdatesEntitlement)
def _perform_enable(self, silent: bool = False) -> bool:
from uaclient.jobs.update_messaging import update_apt_and_motd_messages
enable_performed = super()._perform_enable(silent=silent)
if enable_performed:
update_apt_and_motd_messages(self.cfg)
self.disable_local_esm_repo()
return enable_performed
def setup_local_esm_repo(self) -> None:
series = system.get_platform_info()["series"]
# Ugly? Yes, but so is python < 3.8 without removeprefix
assert self.name.startswith("esm-")
esm_name = self.name[len("esm-") :]
repo_filename = os.path.normpath(
ESM_APT_ROOTDIR + self.repo_list_file_tmpl.format(name=self.name),
)
keyring_file = self.repo_key_file
# No need to create if already present
if os.path.exists(repo_filename):
return
system.write_file(
repo_filename,
ESM_REPO_FILE_CONTENT.format(name=esm_name, series=series),
)
# Set up GPG key
source_keyring_file = os.path.join(KEYRINGS_DIR, keyring_file)
destination_keyring_file = os.path.normpath(
ESM_APT_ROOTDIR + APT_KEYS_DIR + keyring_file
)
os.makedirs(os.path.dirname(destination_keyring_file), exist_ok=True)
gpg.export_gpg_key(source_keyring_file, destination_keyring_file)
def disable_local_esm_repo(self) -> None:
keyring_file = os.path.normpath(
ESM_APT_ROOTDIR + APT_KEYS_DIR + self.repo_key_file
)
repo_filename = os.path.normpath(
ESM_APT_ROOTDIR + self.repo_list_file_tmpl.format(name=self.name),
)
system.ensure_file_absent(repo_filename)
system.ensure_file_absent(keyring_file)
class ESMAppsEntitlement(ESMBaseEntitlement):
origin = "UbuntuESMApps"
name = "esm-apps"
title = "Ubuntu Pro: ESM Apps"
description = "Expanded Security Maintenance for Applications"
repo_key_file = "ubuntu-advantage-esm-apps.gpg"
def disable(
self, silent=False
) -> Tuple[bool, Union[None, CanDisableFailure]]:
from uaclient.jobs.update_messaging import update_apt_and_motd_messages
disable_performed, fail = super().disable(silent=silent)
if disable_performed:
update_apt_and_motd_messages(self.cfg)
if system.is_current_series_lts():
self.setup_local_esm_repo()
return disable_performed, fail
class ESMInfraEntitlement(ESMBaseEntitlement):
name = "esm-infra"
origin = "UbuntuESM"
title = "Ubuntu Pro: ESM Infra"
description = "Expanded Security Maintenance for Infrastructure"
repo_key_file = "ubuntu-advantage-esm-infra-trusty.gpg"
def disable(
self, silent=False
) -> Tuple[bool, Union[None, CanDisableFailure]]:
from uaclient.jobs.update_messaging import update_apt_and_motd_messages
disable_performed, fail = super().disable(silent=silent)
if disable_performed:
update_apt_and_motd_messages(self.cfg)
if system.is_current_series_active_esm():
self.setup_local_esm_repo()
return disable_performed, fail
|