Linux lhjmq-records 5.15.0-118-generic #128-Ubuntu SMP Fri Jul 5 09:28:59 UTC 2024 x86_64
Your IP : 18.119.19.251
import copy
import json
import logging
import os
from collections import namedtuple
from functools import lru_cache, wraps
from typing import Any, Callable, Dict, Optional, Tuple, TypeVar
import yaml
from uaclient import (
apt,
event_logger,
exceptions,
files,
messages,
snap,
system,
util,
)
from uaclient.defaults import (
APT_NEWS_URL,
BASE_CONTRACT_URL,
BASE_SECURITY_URL,
CONFIG_DEFAULTS,
CONFIG_FIELD_ENVVAR_ALLOWLIST,
DEFAULT_CONFIG_FILE,
)
from uaclient.files import NoticeFile
LOG = logging.getLogger(__name__)
PRIVATE_SUBDIR = "private"
MERGE_ID_KEY_MAP = {
"availableResources": "name",
"resourceEntitlements": "type",
}
UNSET_SETTINGS_OVERRIDE_KEY = "_unset"
# Keys visible and configurable using `pro config set|unset|show` subcommands
UA_CONFIGURABLE_KEYS = (
"http_proxy",
"https_proxy",
"apt_http_proxy",
"apt_https_proxy",
"ua_apt_http_proxy",
"ua_apt_https_proxy",
"global_apt_http_proxy",
"global_apt_https_proxy",
"update_messaging_timer",
"metering_timer",
"apt_news",
"apt_news_url",
)
# Basic schema validation top-level keys for parse_config handling
VALID_UA_CONFIG_KEYS = (
"contract_url",
"data_dir",
"features",
"log_file",
"log_level",
"security_url",
"settings_overrides",
"timer_log_file",
"daemon_log_file",
"ua_config",
)
# A data path is a filename, an attribute ("private") indicating whether it
# should only be readable by root, and an attribute ("permanent") indicating
# whether it should stick around even when detached.
DataPath = namedtuple("DataPath", ("filename", "private", "permanent"))
event = event_logger.get_event_logger()
# needed for solving mypy errors dealing with _lru_cache_wrapper
# Found at https://github.com/python/mypy/issues/5858#issuecomment-454144705
S = TypeVar("S", bound=str)
def str_cache(func: Callable[..., S]) -> S:
return lru_cache()(func) # type: ignore
class UAConfig:
data_paths = {
"instance-id": DataPath("instance-id", True, False),
"machine-access-cis": DataPath("machine-access-cis.json", True, False),
"lock": DataPath("lock", False, False),
"status-cache": DataPath("status.json", False, False),
"notices": DataPath("notices.json", False, False),
"marker-reboot-cmds": DataPath(
"marker-reboot-cmds-required", False, False
),
} # type: Dict[str, DataPath]
ua_scoped_proxy_options = ("ua_apt_http_proxy", "ua_apt_https_proxy")
global_scoped_proxy_options = (
"global_apt_http_proxy",
"global_apt_https_proxy",
)
deprecated_global_scoped_proxy_options = (
"apt_http_proxy",
"apt_https_proxy",
)
def __init__(
self,
cfg: Optional[Dict[str, Any]] = None,
series: Optional[str] = None,
root_mode: bool = False,
) -> None:
""""""
if cfg:
self.cfg_path = None
self.cfg = cfg
self.invalid_keys = None
else:
self.cfg_path = get_config_path()
self.cfg, self.invalid_keys = parse_config(self.cfg_path)
self.series = series
self.root_mode = root_mode
self._machine_token_file = (
None
) # type: Optional[files.MachineTokenFile]
self._notice_file = None # type: Optional[NoticeFile]
@property
def machine_token_file(self):
if not self._machine_token_file:
self._machine_token_file = files.MachineTokenFile(
self.data_dir,
self.root_mode,
self.features.get("machine_token_overlay"),
)
return self._machine_token_file
@property
def notice_file(self):
if not self._notice_file:
self._notice_file = NoticeFile(self.data_dir, self.root_mode)
return self._notice_file
@property
def contract_url(self) -> str:
return self.cfg.get("contract_url", BASE_CONTRACT_URL)
@property
def security_url(self) -> str:
return self.cfg.get("security_url", BASE_SECURITY_URL)
@property
def http_proxy(self) -> Optional[str]:
return self.cfg.get("ua_config", {}).get("http_proxy")
@http_proxy.setter
def http_proxy(self, value: str):
if "ua_config" not in self.cfg:
self.cfg["ua_config"] = {}
self.cfg["ua_config"]["http_proxy"] = value
self.write_cfg()
@property
def https_proxy(self) -> Optional[str]:
return self.cfg.get("ua_config", {}).get("https_proxy")
@https_proxy.setter
def https_proxy(self, value: str):
if "ua_config" not in self.cfg:
self.cfg["ua_config"] = {}
self.cfg["ua_config"]["https_proxy"] = value
self.write_cfg()
@property
def ua_apt_https_proxy(self) -> Optional[str]:
return self.cfg.get("ua_config", {}).get("ua_apt_https_proxy")
@ua_apt_https_proxy.setter
def ua_apt_https_proxy(self, value: str):
if "ua_config" not in self.cfg:
self.cfg["ua_config"] = {}
self.cfg["ua_config"]["ua_apt_https_proxy"] = value
self.write_cfg()
@property
def ua_apt_http_proxy(self) -> Optional[str]:
return self.cfg.get("ua_config", {}).get("ua_apt_http_proxy")
@ua_apt_http_proxy.setter
def ua_apt_http_proxy(self, value: str):
if "ua_config" not in self.cfg:
self.cfg["ua_config"] = {}
self.cfg["ua_config"]["ua_apt_http_proxy"] = value
self.write_cfg()
@property # type: ignore
@str_cache
def global_apt_http_proxy(self) -> Optional[str]:
global_val = self.cfg.get("ua_config", {}).get("global_apt_http_proxy")
if global_val:
return global_val
old_apt_val = self.cfg.get("ua_config", {}).get("apt_http_proxy")
if old_apt_val:
event.info(messages.WARNING_DEPRECATED_APT_HTTP)
return old_apt_val
return None
@global_apt_http_proxy.setter
def global_apt_http_proxy(self, value: str):
if "ua_config" not in self.cfg:
self.cfg["ua_config"] = {}
self.cfg["ua_config"]["global_apt_http_proxy"] = value
self.cfg["ua_config"]["apt_http_proxy"] = None
UAConfig.global_apt_http_proxy.fget.cache_clear() # type: ignore
self.write_cfg()
@property # type: ignore
@str_cache
def global_apt_https_proxy(self) -> Optional[str]:
global_val = self.cfg.get("ua_config", {}).get(
"global_apt_https_proxy"
)
if global_val:
return global_val
old_apt_val = self.cfg.get("ua_config", {}).get("apt_https_proxy")
if old_apt_val:
event.info(messages.WARNING_DEPRECATED_APT_HTTPS)
return old_apt_val
return None
@global_apt_https_proxy.setter
def global_apt_https_proxy(self, value: str):
if "ua_config" not in self.cfg:
self.cfg["ua_config"] = {}
self.cfg["ua_config"]["global_apt_https_proxy"] = value
self.cfg["ua_config"]["apt_https_proxy"] = None
UAConfig.global_apt_https_proxy.fget.cache_clear() # type: ignore
self.write_cfg()
@property
def update_messaging_timer(self) -> Optional[int]:
return self.cfg.get("ua_config", {}).get("update_messaging_timer")
@update_messaging_timer.setter
def update_messaging_timer(self, value: int):
if "ua_config" not in self.cfg:
self.cfg["ua_config"] = {}
self.cfg["ua_config"]["update_messaging_timer"] = value
self.write_cfg()
@property
def metering_timer(self) -> "Optional[int]":
return self.cfg.get("ua_config", {}).get("metering_timer")
@metering_timer.setter
def metering_timer(self, value: int):
if "ua_config" not in self.cfg:
self.cfg["ua_config"] = {}
self.cfg["ua_config"]["metering_timer"] = value
self.write_cfg()
@property
def poll_for_pro_license(self) -> bool:
# TODO: when polling is supported
# 1. change default here to True
# 2. add this field to UA_CONFIGURABLE_KEYS
return self.cfg.get("ua_config", {}).get("poll_for_pro_license", False)
@poll_for_pro_license.setter
def poll_for_pro_license(self, value: bool):
if "ua_config" not in self.cfg:
self.cfg["ua_config"] = {}
self.cfg["ua_config"]["poll_for_pro_license"] = value
self.write_cfg()
@property
def polling_error_retry_delay(self) -> int:
# TODO: when polling is supported
# 1. add this field to UA_CONFIGURABLE_KEYS
return self.cfg.get("ua_config", {}).get(
"polling_error_retry_delay", 600
)
@polling_error_retry_delay.setter
def polling_error_retry_delay(self, value: int):
if "ua_config" not in self.cfg:
self.cfg["ua_config"] = {}
self.cfg["ua_config"]["polling_error_retry_delay"] = value
self.write_cfg()
@property
def apt_news(self) -> bool:
return self.cfg.get("ua_config", {}).get("apt_news", True)
@apt_news.setter
def apt_news(self, value: bool):
if "ua_config" not in self.cfg:
self.cfg["ua_config"] = {}
self.cfg["ua_config"]["apt_news"] = value
self.write_cfg()
@property
def apt_news_url(self) -> str:
return self.cfg.get("ua_config", {}).get("apt_news_url", APT_NEWS_URL)
@apt_news_url.setter
def apt_news_url(self, value: str):
if "ua_config" not in self.cfg:
self.cfg["ua_config"] = {}
self.cfg["ua_config"]["apt_news_url"] = value
self.write_cfg()
def check_lock_info(self) -> Tuple[int, str]:
"""Return lock info if config lock file is present the lock is active.
If process claiming the lock is no longer present, remove the lock file
and log a warning.
:param lock_path: Full path to the lock file.
:return: A tuple (pid, string describing lock holder)
If no active lock, pid will be -1.
"""
lock_path = self.data_path("lock")
no_lock = (-1, "")
if not os.path.exists(lock_path):
return no_lock
lock_content = system.load_file(lock_path)
[lock_pid, lock_holder] = lock_content.split(":")
try:
system.subp(["ps", lock_pid])
return (int(lock_pid), lock_holder)
except exceptions.ProcessExecutionError:
if os.getuid() != 0:
logging.debug(
"Found stale lock file previously held by %s:%s",
lock_pid,
lock_holder,
)
return (int(lock_pid), lock_holder)
logging.warning(
"Removing stale lock file previously held by %s:%s",
lock_pid,
lock_holder,
)
system.ensure_file_absent(lock_path)
return no_lock
@property
def data_dir(self):
return self.cfg["data_dir"]
@property
def log_level(self):
log_level = self.cfg.get("log_level", "DEBUG")
try:
return getattr(logging, log_level.upper())
except AttributeError:
return getattr(logging, CONFIG_DEFAULTS["log_level"])
@property
def log_file(self) -> str:
return self.cfg.get("log_file", CONFIG_DEFAULTS["log_file"])
@property
def timer_log_file(self) -> str:
return self.cfg.get(
"timer_log_file", CONFIG_DEFAULTS["timer_log_file"]
)
@property
def daemon_log_file(self):
return self.cfg.get(
"daemon_log_file", CONFIG_DEFAULTS["daemon_log_file"]
)
@property
def is_attached(self):
"""Report whether this machine configuration is attached to UA."""
return bool(self.machine_token) # machine_token is removed on detach
@property
def features(self):
"""Return a dictionary of any features provided in uaclient.conf."""
features = self.cfg.get("features")
if features:
if isinstance(features, dict):
return features
else:
logging.warning(
"Unexpected uaclient.conf features value."
" Expected dict, but found %s",
features,
)
return {}
@property
def machine_token(self):
"""Return the machine-token if cached in the machine token response."""
return self.machine_token_file.machine_token
def data_path(self, key: Optional[str] = None) -> str:
"""Return the file path in the data directory represented by the key"""
data_dir = self.cfg["data_dir"]
if not key:
return os.path.join(data_dir, PRIVATE_SUBDIR)
if key in self.data_paths:
data_path = self.data_paths[key]
if data_path.private:
return os.path.join(
data_dir, PRIVATE_SUBDIR, data_path.filename
)
return os.path.join(data_dir, data_path.filename)
return os.path.join(data_dir, PRIVATE_SUBDIR, key)
def cache_key_exists(self, key: str) -> bool:
cache_path = self.data_path(key)
return os.path.exists(cache_path)
def _perform_delete(self, cache_path: str) -> None:
"""Delete the given cache_path if it exists.
(This is a separate method to allow easier disabling of deletion during
tests.)
"""
system.ensure_file_absent(cache_path)
def delete_cache_key(self, key: str) -> None:
"""Remove specific cache file."""
if not key:
raise RuntimeError(
"Invalid or empty key provided to delete_cache_key"
)
if key.startswith("machine-access"):
self._machine_token_file = None
elif key == "lock":
self.notice_file.remove("", "Operation in progress.*")
cache_path = self.data_path(key)
self._perform_delete(cache_path)
def delete_cache(self, delete_permanent: bool = False):
"""
Remove configuration cached response files class attributes.
:param delete_permanent: even delete the "permanent" files
"""
for path_key in self.data_paths.keys():
if delete_permanent or not self.data_paths[path_key].permanent:
self.delete_cache_key(path_key)
def read_cache(self, key: str, silent: bool = False) -> Optional[Any]:
cache_path = self.data_path(key)
try:
content = system.load_file(cache_path)
except Exception:
if not os.path.exists(cache_path) and not silent:
logging.debug("File does not exist: %s", cache_path)
return None
try:
return json.loads(content, cls=util.DatetimeAwareJSONDecoder)
except ValueError:
return content
def write_cache(self, key: str, content: Any) -> None:
filepath = self.data_path(key)
data_dir = os.path.dirname(filepath)
if not os.path.exists(data_dir):
os.makedirs(data_dir, exist_ok=True)
if os.path.basename(data_dir) == PRIVATE_SUBDIR:
os.chmod(data_dir, 0o700)
if key.startswith("machine-access"):
self._machine_token_file = None
elif key == "lock":
if ":" in content:
self.notice_file.add(
"",
"Operation in progress: {}".format(content.split(":")[1]),
)
if not isinstance(content, str):
content = json.dumps(content, cls=util.DatetimeAwareJSONEncoder)
mode = 0o600
if key in self.data_paths:
if not self.data_paths[key].private:
mode = 0o644
system.write_file(filepath, content, mode=mode)
def process_config(self):
for prop in (
"update_messaging_timer",
"metering_timer",
):
value = getattr(self, prop)
if value is None:
logging.debug(
"No config set for {}, default value will be used."
)
elif not isinstance(value, int) or value < 0:
error_msg = (
"Value for the {} interval must be a positive integer. "
"Default value will be used."
).format(prop)
raise exceptions.UserFacingError(error_msg)
if (self.global_apt_http_proxy or self.global_apt_https_proxy) and (
self.ua_apt_http_proxy or self.ua_apt_https_proxy
):
# Should we unset the config values?
raise exceptions.UserFacingError(
messages.ERROR_PROXY_CONFIGURATION
)
util.validate_proxy(
"http",
self.global_apt_http_proxy,
util.PROXY_VALIDATION_APT_HTTP_URL,
)
util.validate_proxy(
"https",
self.global_apt_https_proxy,
util.PROXY_VALIDATION_APT_HTTPS_URL,
)
util.validate_proxy(
"http", self.ua_apt_http_proxy, util.PROXY_VALIDATION_APT_HTTP_URL
)
util.validate_proxy(
"https",
self.ua_apt_https_proxy,
util.PROXY_VALIDATION_APT_HTTPS_URL,
)
util.validate_proxy(
"http", self.http_proxy, util.PROXY_VALIDATION_SNAP_HTTP_URL
)
util.validate_proxy(
"https", self.https_proxy, util.PROXY_VALIDATION_SNAP_HTTPS_URL
)
if self.global_apt_http_proxy or self.global_apt_https_proxy:
apt.setup_apt_proxy(
self.global_apt_http_proxy,
self.global_apt_https_proxy,
apt.AptProxyScope.GLOBAL,
)
elif self.ua_apt_http_proxy or self.ua_apt_https_proxy:
apt.setup_apt_proxy(
self.ua_apt_http_proxy,
self.ua_apt_https_proxy,
apt.AptProxyScope.UACLIENT,
)
services_with_proxies = []
if snap.is_installed():
snap.configure_snap_proxy(self.http_proxy, self.https_proxy)
if (
not self.http_proxy
and snap.get_config_option_value(snap.HTTP_PROXY_OPTION)
) or (
not self.https_proxy
and snap.get_config_option_value(snap.HTTPS_PROXY_OPTION)
):
services_with_proxies.append("snap")
from uaclient.entitlements import livepatch
from uaclient.entitlements.entitlement_status import ApplicationStatus
livepatch_ent = livepatch.LivepatchEntitlement()
livepatch_status, _ = livepatch_ent.application_status()
if livepatch_status == ApplicationStatus.ENABLED:
livepatch.configure_livepatch_proxy(
self.http_proxy, self.https_proxy
)
if (
not self.http_proxy
and livepatch.get_config_option_value(
livepatch.HTTP_PROXY_OPTION
)
) or (
not self.https_proxy
and livepatch.get_config_option_value(
livepatch.HTTPS_PROXY_OPTION
)
):
services_with_proxies.append("livepatch")
if len(services_with_proxies) > 0:
services = ", ".join(services_with_proxies)
print(
messages.PROXY_DETECTED_BUT_NOT_CONFIGURED.format(
services=services
)
)
def write_cfg(self, config_path=None):
"""Write config values back to config_path or DEFAULT_CONFIG_FILE."""
if not config_path:
config_path = DEFAULT_CONFIG_FILE
content = messages.UACLIENT_CONF_HEADER
cfg_dict = copy.deepcopy(self.cfg)
if "log_level" not in cfg_dict:
cfg_dict["log_level"] = CONFIG_DEFAULTS["log_level"]
# Ensure defaults are present in uaclient.conf if absent
for attr in (
"contract_url",
"security_url",
"data_dir",
"log_file",
"timer_log_file",
"daemon_log_file",
):
cfg_dict[attr] = getattr(self, attr)
# Each UA_CONFIGURABLE_KEY needs to have a property on UAConfig
# which reads the proper key value or returns a default
cfg_dict["ua_config"] = {
key: getattr(self, key, None) for key in UA_CONFIGURABLE_KEYS
}
content += yaml.dump(cfg_dict, default_flow_style=False)
system.write_file(config_path, content)
def warn_about_invalid_keys(self):
if self.invalid_keys is not None:
for invalid_key in sorted(self.invalid_keys):
logging.warning(
"Ignoring invalid uaclient.conf key: %s", invalid_key
)
def get_config_path() -> str:
"""Get config path to be used when loading config dict."""
config_file = os.environ.get("UA_CONFIG_FILE")
if config_file:
return config_file
local_cfg = os.path.join(
os.getcwd(), os.path.basename(DEFAULT_CONFIG_FILE)
)
if os.path.exists(local_cfg):
return local_cfg
return DEFAULT_CONFIG_FILE
def parse_config(config_path=None):
"""Parse known Pro config file
Attempt to find configuration in cwd and fallback to DEFAULT_CONFIG_FILE.
Any missing configuration keys will be set to CONFIG_DEFAULTS.
Values are overridden by any environment variable with prefix 'UA_'.
@param config_path: Fullpath to pro configfile. If unspecified, use
DEFAULT_CONFIG_FILE.
@return: Dict of configuration values.
"""
cfg = copy.copy(CONFIG_DEFAULTS) # type: Dict[str, Any]
if not config_path:
config_path = get_config_path()
LOG.debug("Using client configuration file at %s", config_path)
if os.path.exists(config_path):
cfg.update(yaml.safe_load(system.load_file(config_path)))
env_keys = {}
for key, value in os.environ.items():
key = key.lower()
if key.startswith("ua_"):
# Strip leading UA_
field_name = key[3:]
if field_name.startswith("features_"):
# Strip leading UA_FEATURES_
feature_field_name = field_name[9:]
# Users can provide a yaml file to override
# config behavor. If they do, we are going
# to load that yaml and update the config
# with it
if value.endswith("yaml"):
if os.path.exists(value):
value = yaml.safe_load(system.load_file(value))
else:
raise exceptions.UserFacingError(
"Could not find yaml file: {}".format(value)
)
if "features" not in cfg:
cfg["features"] = {feature_field_name: value}
else:
cfg["features"][feature_field_name] = value
elif key in CONFIG_FIELD_ENVVAR_ALLOWLIST:
env_keys[field_name] = value
cfg.update(env_keys)
cfg["data_dir"] = os.path.expanduser(cfg["data_dir"])
for key in ("contract_url", "security_url"):
if not util.is_service_url(cfg[key]):
raise exceptions.UserFacingError(
"Invalid url in config. {}: {}".format(key, cfg[key])
)
invalid_keys = set(cfg.keys()).difference(VALID_UA_CONFIG_KEYS)
for invalid_key in invalid_keys:
cfg.pop(invalid_key)
return cfg, invalid_keys
def apply_config_settings_override(override_key: str):
"""Decorator used to override function return by config settings.
To identify if we should override the function return, we check
if the config object has the expected override key, we use it
has, we will use the key value as the function return. Otherwise
we will call the function normally.
@param override_key: key to be looked for in the settings_override
entry in the config dict. If that key is present, we will return
its value as the function return.
"""
def wrapper(f):
@wraps(f)
def new_f():
cfg, _ = parse_config()
value_override = cfg.get("settings_overrides", {}).get(
override_key, UNSET_SETTINGS_OVERRIDE_KEY
)
if value_override != UNSET_SETTINGS_OVERRIDE_KEY:
if override_key == "cloud_type":
return (value_override, None)
return value_override
return f()
return new_f
return wrapper
|