U lHJeb @sddlZddlZddlZddlZddlZddlZddlZddlZddlZddl Z ddl Z ddl m Z ddl mZddlmZmZmZmZmZmZmZddlmZmZmZdZdZdZd Zd Zd d iZ e!e"e#Z$d Z%dZ&eddej'fdej'fgZ(edde)fde)fdeejfdee)fdee*fdee*fdee*fdee)fdee)fg Z+edde)fde)fde)fd e)fgZ,ed!d"e)fd#ee*fd$ee*fgZ-ed%d&eee)fd'eee)fgZ.d(Z/ej0eejd)d*d+Z1ej0eejd)d,d-Z2e dd.e+d/d0d1Z3d2d3Z4e dd.e)d/d4d5Z5e dd.e)d/d6d7Z6e dd.e-d/d8d9Z7e dd.e)d/d:d;Z8e dd.e,d/dd?d@Z;e dd.e:d/dAdBZdCdDZ=e dd.e)e:d>dEdFZ>e dd.e:d/dGdHZ?e dd.d{e)e:dJdKdLZ@e dd.e:d/dMdNZAe dd.ee)e)fd/dOdPZBe dd.e)e(d>dQdRZCe)ee)dSdTdUZDd|eee)eee)e:dVdWdXZEe)e:dYdZd[ZFd}e)e:e)d]d^d_ZGd~e)e*ddadbdcZHde)e)ee*ddddedfZIe)ddgdhdiZJdee)eee*e:eeKeee)e)fe:ee)e)fdkdldmZLdee)eee*e:eeKeeeKeee)e)fe:ee)e)fdndodpZMe)ddqdrdsZNe)e:dtdudvZOe)d/dwdxZPee.d/dydzZQdS)N) lru_cache)rmtree)DictList NamedTupleOptionalSequenceSetTuple)defaults exceptionsutilz/var/run/reboot-requiredz/var/run/reboot-required.pkgsz/etc/machine-idz/var/lib/dbus/machine-idz!/usr/share/distro-info/ubuntu.csvZ GenuineIntelZintelz5(?P\d+\.\d+) (LTS\s*)?(\((?P\w+))?.*zd^(?P[\d]+)[.-](?P[\d]+)[.-](?P[\d]+)-(?P[\d]+)-(?P[A-Za-z0-9_-]+)$ DistroInfoeoleol_esm KernelInfouname_machine_arch uname_release build_dateproc_version_signature_versionmajorminorpatchabiflavor ReleaseInfo distributionreleaseseriespretty_versionCpuInfo vendor_idmodelsteppingRebootRequiredPkgsstandard_packageskernel_packagesz(Mon|Tue|Wed|Thu|Fri|Sat|Sun).*)unamereturncCsltrtddStdz(td|j}tj|j tj j WSt k rftdYdSXdS)NzPNot attempting to use timestamp of kernel changelog because we're in a containerz3Falling back to using timestamp of kernel changelogz1/usr/share/doc/linux-image-{}/changelog.Debian.gzzUnable to stat kernel changelog) is_containerLOGwarningosstatformatrdatetimeZ fromtimestampst_mtimetimezoneutc Exception)r' stat_resultr51/usr/lib/python3/dist-packages/uaclient/system.py_get_kernel_changelog_timestamp_s&  r7cCstt|j}|dkr(tdt|S|d}ztj |d}Wn&t k rjtdt|YSX|j dkr|j tj jd}|S)Nz*Unable to find build date in uname versionrz%a %b %d %H:%M:%S %Z %Yz-Unable to parse build date from uname version)tzinfo)researchRE_KERNEL_EXTRACT_BUILD_DATEversionr*r+r7groupr/strptime ValueErrorr8replacer1r2)r'Z date_matchZdate_strZdtr5r5r6_get_kernel_build_datexs    rA)maxsize)r(c Csd}ztd}|d}Wntk r:tdYnXt}|j}t |}|j }t t |}|dkrtd|t||||dddddd St||||t|dt|dt|d|d |d d SdS) Nz/proc/version_signaturez*failed to process /proc/version_signature.zFailed to parse kernel: %s) rrrrrrrrrrrrrr) load_filesplitr3r*r+r,r'machinestriprArr9matchRE_KERNEL_UNAMErintr=)rZproc_version_signature_fullr'rrrZ uname_matchr5r5r6get_kernel_infosF        rKcsnddlm}tstddd|D}ddtdD}dd|Dd d|D}fd d|DS) Nr)get_installed_packages_namesz9get_installed_ubuntu_kernels needs to be executed as rootcSsg|]}d|kr|qS) linux-image-r5).0packager5r5r6 sz0get_installed_ubuntu_kernels..cSs$g|]}dtd|gdkr|qS)z Linux kernelfilersubp)rNrQr5r5r6rPsz/boot/vmlinu[x|z]-*cSsg|]}|tddqS)rMNlen)rNZ package_namer5r5r6rPscSsg|]}|tddqS)z/boot/vmlinu?-NrT)rN file_namer5r5r6rPscsg|]}|kr|qSr5r5)rNr<Zlinux_image_versionsr5r6rPs)Z uaclient.aptrLr we_are_currently_root RuntimeErrorglob)rLZ linux_imageZvmlinux_kernel_filesZvmlinuz_versionsr5rWr6get_installed_ubuntu_kernelss(  r[cCstddg\}}|S)NZdpkgz--print-architecture)rSrG)out_errr5r5r6 get_dpkg_archsr^c Csztdg\}}|WStjk rz\w*)infor!r`r"r#) rDr9r:r. MULTILINEr=getr CPU_VENDOR_MAPrJ)Zcpu_info_contentZcpu_info_valuesZfieldZ cpu_matchvalueZvendor_id_baser"r#r5r5r6 get_cpu_infos&      ricCs~|jr"|jdid}|r"|S|d}tt|fD]*}tj|r6t| d}|r6|Sq6t t }| d||S)z Get system's unique machine-id or create our own in data_dir. We first check for the machine-id in machine-token.json before looking at the system file. ZmachineTokenInfoZ machineIdz machine-id )Z machine_tokenrfZ data_pathETC_MACHINE_IDDBUS_MACHINE_IDr,pathexistsrDrstripstruuidZuuid4Z write_cache)ZcfgZcfg_machine_idZfallback_machine_id_filermcontentZ machine_idr5r5r6get_machine_ids     rscCst}|dd}tdd|dd}|dd}|dd}|rH|stt|}|sntj|dd|d |}|p|d d}|stj |d |p|d d}t ||| |d S)NNAMEZUNKNOWNz\.\d LTSz LTSZVERSIONr`ZVERSION_CODENAMEZ VERSION_ID)Zorig_verZmod_verr)r<r)rrrr) _parse_os_releaserfr9subrHREGEX_OS_RELEASE_VERSIONr ZParsingErrorOnOSReleaseFile groupdictZMissingSeriesOnOSReleaseFilerlower)Z os_releaserrrrrHZ match_dictr5r5r6get_release_info)s2     rz)rr(cCstddg\}}||kS)N/usr/bin/ubuntu-distro-infoz--supported-esmrRrr\r]r5r5r6is_ltsIsr}cCs ttjSN)r}rzrr5r5r5r6is_current_series_ltsOsrcCstddg\}}||kS)Nr{z --supportedrRr|r5r5r6 is_supportedTsrcCs,t|s dStdd|dg\}}t|dkS)zCReturn True when Ubuntu series supports ESM and is actively in ESM.Fr{z--seriesz-yeolr)r}rSrJr|r5r5r6 is_active_esmZs  rcCs ttjSr~)rrzrr5r5r5r6is_current_series_active_esmesr/run)run_pathr(c CsztdgWdStjk r&YnXztdddgWdSttfk rTYnXdD]$}tj||}tj|rZdSqZdS)z>Checks to see if this code running in a container of some sortZischrootFr_--quietz --containerT)Zcontainer_typezsystemd/container) rSr raIOErrorOSErrorr,rmjoinrn)rfilenamermr5r5r6r)js  r)cCs.ddlm}|D]}d|jkrdSqdS)zReturns True if any package installed has "ubuntu-desktop" in the name. This includes ubuntu-desktop, ubuntu-desktop-minimal, kubuntu-desktop, etc. r)aptzubuntu-desktopTF)uaclientrZget_installed_packagesname)rrOr5r5r6 is_desktops    rcCsfz td}Wntk r(td}YnXi}|D]*}|dd\}}|r6|d||<q6|S)Nz/etc/os-releasez/usr/lib/os-release=rC")rDFileNotFoundError splitlinesrErG)Z file_contentsdatalinekeyrhr5r5r6rus  rucCsztt}Wntk r,tYnX|D]t}|d}|d|kr2|dkrZd}nd|dkrn|dn|d}ttj |dd  tj |d  d Sq2tj |d dS) N,Zxenialz 2026-04-23ZLTSrz%Y-%m-%d)rr)r) rDDISTRO_INFO_CSVrrr ZMissingDistroInfoFilerErr/r>dateZMissingSeriesInDistroInfoFile)rlinesrvaluesrr5r5r6get_distro_infos   r)programr(cCsrtjj|krt|r|SddtjddtjD}dd|D}|D]"}tj||}t|rJ|SqJdS)z;Find whether the provided program is executable in our PATHcSsg|]}|dqS)r)rGrNpr5r5r6rPszwhich..PATHr`cSsg|]}tj|qSr5)r,rmabspathrr5r5r6rPsN) r,rmsepis_exeenvironrfrEpathsepr)rpathsZnormalized_pathsrmZ program_pathr5r5r6whichs  r)installed_pkgsinstalled_pkgs_regexr(cCstjtsdS|dkr$|dkr$dSztttd}Wntk rPYdSX|dk rpt | |dkrpdS|dk r|D]"}|D]}t ||rdSqq|dS)aCheck if the system needs to be rebooted. :param installed_pkgs: If provided, verify if the any packages in the list are present on /var/run/reboot-required.pkgs. If that param is provided, we will only return true if we have the reboot-required marker file and any package in reboot-required.pkgs file. When both installed_pkgs and installed_pkgs_regex are provided, they act as an OR, so only one of the two lists must have a match to return True. :param installed_pkgs_regex: If provided, verify if the any regex in the list matches any line in /var/run/reboot-required.pkgs. If that param is provided, we will only return true if we have the reboot-required marker file and any match in reboot-required.pkgs file. When both installed_pkgs and installed_pkgs_regex are provided, they act as an OR, so only one of the two lists must have a match to return True. FNTrjr) r,rmrnREBOOT_FILE_CHECK_PATHsetrDREBOOT_PKGS_FILE_PATHrErrU intersectionr9r:)rrZreboot_required_pkgspkg_nameZ pkg_regexr5r5r6 should_reboots&    r)rmr(cCstj|ot|tjSr~)r,rmisfileaccessX_OK)rmr5r5r6rsrT)rdecoder(c Cs4t|d}td||}W5QRX|dS)z!Read filename and decode content.rbzReading file: %sutf-8)openr*debugreadr)rrstreamrrr5r5r6rDs  rD)rmoder(cCs@td|tjtj|ddt|t ||dS)NzCreating file: %sTexist_ok) r*rr,makedirsrmdirnamepathlibPathZtouchchmod)rrr5r5r6 create_file s r)rrrrr(c Cs"d}tj|}|rtk r}z|dk rt|j|W5d}~XYnXdS) a_Write content to the provided filename encoding it if necessary. We preserve the file ownership and permissions if the file is present and no mode argument is provided. @param filename: The full path of the file to write. @param content: The content to write to the file. @param mode: The filesystem mode to set on the file. NrTrwbF)rdeletedirz*Writing file %s atomically via tempfile %sr)r,rmrrrr-S_IMODEst_moderrtempfileZNamedTemporaryFiler*rrwriteencodeflushcloserchownst_uidst_gidrenamer3unlink)rrrrZtmpfZis_file_presentZ file_statZf_modeer5r5r6 write_files@      r) file_pathr(cCs@zt|td|Wn tk r:td|YnXdS)z.Nr )stdoutstderrenv)rrr`)cmdZ exit_coderr)rzRan cmd: %s, rc: %s stderr: %s) subprocessPIPEr,rr Zredact_sensitive_logsrPopenZ communicaterrr ra returncodeUnboundLocalErrorr*r)rrrrrrZ bytes_argsrrZ merged_envZ redacted_cmdprocr\errZ out_resultZ err_resultr5r5r6_subpEsf   r)rrrr retry_sleepsrrr(c Cs|dk r|nd}z t||||||d\}}WqWqtjk r} z\|rltt| td| j| j |srtt| tdt |t | dW5d} ~ XYqXq||fS)aRun a command and return a tuple of decoded stdout, stderr. @param subp: A list of arguments to feed to subprocess.Popen @param rcs: A list of allowed return_codes. If returncode not in rcs raise a ProcessExecutionError. @param capture: Boolean set True to log the command and response. @param timeout: Optional float indicating number of seconds to wait for a subp call to return. @param retry_sleeps: Optional list of sleep lengths to apply between retries. Specifying a list of [0.5, 1] instructs subp to retry twice on failure; sleeping half a second before the first retry and 1 second before the next retry. @param override_env_vars: Optional dictionary of environment variables. If None, the current os.environ is used for the subprocess. If defined, these env vars get merged with the current process' os.environ for the subprocess, overriding any values that already existed in os.environ. @return: Tuple of utf-8 decoded stdout, stderr @raises ProcessExecutionError on invalid command or returncode not in rcs. @raises subprocess.TimeoutError when timeout specified and the command exceeds that number of seconds. N)rrzStderr: %s Stdout: %szRetrying %d more times.r)copyrr rar*rrpr+rrrUtimesleeppop) rrrrrrrr\rrr5r5r6rSs*  $rS) folder_pathr(cCs>zt|td|Wn tk r8td|YnXdS)NzRemoved folder: %sz,Tried to remove %s but folder does not exist)rr*rr)rr5r5r6ensure_folder_absents r) service_namer(cCs2ztddd|gWntjk r,YdSXdS)a^ Get if the systemd job is active in the system. Note that any status different from "active" will make this function return False. Additionally, if the system doesn't exist we will also return False here. @param service_name: Name of the systemd job to look at @return: A Boolean specifying if the job is active or not Z systemctlz is-activerFT)rSr ra)rr5r5r6is_systemd_unit_actives rcCsBtrtjStjd}|r,|dtjStj ddtjS)NZXDG_CACHE_HOME/~z/.cache/) r rXr Z UAC_RUN_PATHr,rrfZUSER_CACHE_SUBDIRrm expanduser)Zxdg_cache_homer5r5r6get_user_cache_dirs  rcCstz tt}Wntk r"YdSXg}g}d}|D]&}t||rT||q8||q8tt|t|dS)Nz^(linux-image|linux-base).*)r%r&) rDrrrEr9rHappendr$sorted)Z pkg_list_strr%r&Z kernel_regexpkgr5r5r6get_reboot_required_pkgss     r)r)NN)T)r)N)NFNNT)NFNNNT)Rr/rZZloggingr,rr9r-rrrrq functoolsrZshutilrtypingrrrrrr r rr r r rrrkrlrrgZ getLoggerZreplace_top_level_logger_name__name__r*rwrIrrrprJrrr r$r; uname_resultr7rArKr[r^rcrirsrzboolr}rrrrr)rrurrrrrDrrrfloatrrSrrrrr5r5r5r6s4  $              +#      6 +   Y   8