HEX

File: //usr/lib/python3.6/site-packages/sos/policies/distros/__pycache__/__init__.cpython-36.pyc
3

-�_g;��@s(ddlZddlZddlmZddlmZddlmZddlm	Z	ddl
mZddlm
Z
ddlmZdd	lmZdd
lmZddlmZmZmZmZmZyddlZdZWnek
r�d
ZYnXyddlZddlmZ dZ!Wnek
r�d
Z!YnXdZ"dZ#dZ$Gdd�de�Z%Gdd�de%�Z&dS)�N)�getpass)�_sos)�Policy)�
InitSystem)�SystemdInit)�CrioContainerRuntime)�PodmanContainerRuntime)�DockerContainerRuntime)�LxdContainerRuntime)�	shell_out�
is_executable�bold�sos_get_command_output�TIMEOUT_DEFAULTTF)�Configz/etc/os-releaseZ	containerZHOSTcs^eZdZdZdZdZdZdZdZdZ	dZ
dZdZdZ
dZdZdZdZdZdZdZdZdZdZdZdZdZdZdZdZdZdZd	Z dZ!dZ"dZ#d
Z$dZ%dZ&dZ'dq�fd
d�	Z(e)dd��Z*e)drdd��Z+dd�Z,dd�Z-dd�Z.dd�Z/dd�Z0dd�Z1e)dd ��Z2e)d!d"��Z3e)d#d$��Z4d%d&�Z5d'd(�Z6d)d*�Z7d+d,�Z8d-d.�Z9d/d0�Z:d1d2�Z;d3d4�Z<d5d6�Z=d7d8�Z>d9d:�Z?d;d<�Z@d=d>�ZAdsd?d@�ZBdAdB�ZCdCdD�ZDdEdF�ZEdGdH�ZFdIdJ�ZGdKdL�ZHdMdN�ZIdOdP�ZJdQdR�ZKdSdT�ZLdUdV�ZMdtdWdX�ZNdYdZ�ZOdud[d\�ZPd]d^�ZQdvd_d`�ZRdadb�ZSdwdcdd�ZTdxdedf�ZUdgdh�ZVdidj�ZWdydkdl�ZXdmdn�ZYdodp�ZZ�Z[S)z�LinuxPolicyzfThis policy is meant to be an abc class that provides common
    implementations used in Linux distros�Nonez/bin:/sbin:/usr/bin:/usr/sbinN��/zhttps://s3.amazonaws.com�dockerFz/usr/binzsos-collector-tmpTcs"t�j|||d�|r||_n|j�p(d|_|j�|dk	rD||_n$tjjd�r`t	|jd�|_nt
�|_i|_|j�rt
|d�t|d�t|d�t|d�g}xN|D]F}|j�r�||j|j<|j|jkr�|j|j|jd<|j|jj�q�W|jo�d|jk�rt|jj��}|j|d|jd<dS)N)�sysroot�
probe_runtime�remote_execrz/run/systemd/system/)�chroot)Zpolicy�defaultr)�super�__init__r�_container_init�init_kernel_modulesZinit_system�os�path�isdirrrZruntimesrrr	rr
Zcheck_is_active�name�default_container_runtimeZload_container_info�list�keys)�selfr�initrrZ_crunZruntime�idx)�	__class__��/usr/lib/python3.6/__init__.pyrcs6
zLinuxPolicy.__init__cCsddgS)Nz/etc/passwdz/etc/shadowr*)�clsr*r*r+�set_forbidden_paths�szLinuxPolicy.set_forbidden_pathsc	st�fdd�}|r||�Stjj�j�rNtjj�j�tjjtjj�j��krNdSttddd��}||j��SQRXdS)z|
        This function is responsible for determining if the underlying system
        is supported by this policy.
        csb�jg}�jr|j�j�xB|j�D]6}|jd	�r$|jd�dd�djd�}||kr$dSq$WdS)
N�NAME=�ID=�=�rz"'TF)r.r/)�os_release_name�
os_release_id�append�
splitlines�
startswith�split�strip)ZcontentZ_matches�lineZ_distro)r,r*r+�_check_release�s
z)LinuxPolicy.check.<locals>._check_releaseT�rzutf-8)�encodingN)	rr �isfile�os_release_file�basename�realpath�open�
OS_RELEASE�read)r,�remoter:�fr*)r,r+�check�szLinuxPolicy.checkcCs|jS)N)�release)r&r*r*r+�kernel_version�szLinuxPolicy.kernel_versioncCs|jS)N)Zhostname)r&r*r*r+�	host_name�szLinuxPolicy.host_namecCs|jS)N)Zsmp)r&r*r*r+�
is_kernel_smp�szLinuxPolicy.is_kernel_smpcCs|jS)N)�machine)r&r*r*r+�get_arch�szLinuxPolicy.get_archcCs|j�S)z)Returns the name usd in the pre_work step)rI)r&r*r*r+�get_local_name�szLinuxPolicy.get_local_namecCstjdd|�S)Nz[^-a-z,A-Z.0-9]r)�re�sub)r&r"r*r*r+�sanitize_filename�szLinuxPolicy.sanitize_filenamecCs4|tkr|j|�n|j|j�d��|j|�dS)Nz Distribution Policy)r�display_self_help�	set_titler2�display_distro_help)r,�sectionr*r*r+�display_help�szLinuxPolicy.display_helpcCs|jd�|jd�dS)NzSoS Distribution Policiesz�Distributions supported by SoS will each have a specific policy defined for them, to ensure proper operation of SoS on those systems.)rR�add_text)r,rTr*r*r+rQ�s
zLinuxPolicy.display_self_helpc	Cs>|jr |jtjk	r |j|j�n
|jd�|ddd�}|jd|j���|jd|j��dd�|jd|j��dd�|jd�}x6|jD],}|jdd	�|d
d�|dd
��dd�q�W|jd�}|jtdd	�dd�dd�dd���dd�xN|j	j
�D]@\}}dj|jj
��}|jdd	�|d�|jd�|d��dd�q�WdS)Nz;
Detailed help information for this policy is not availableFzDefault --upload location: zDefault container runtime: )�newlinez $PATH used when running report: zReference URLs� z>8rz<30r1z<40z#Presets Available With This Policy
zPreset Namez<20ZDescriptionz<45zEnabled Options)�__doc__rrV�_upload_urlr#�PATHZadd_section�vendor_urlsr
Zpresets�items�joinZoptsZto_argsZdesc)	r,rTZ_polZrefsec�urlZpresecZpreset�valueZ_optsr*r*r+rS�s4


,
zLinuxPolicy.display_distro_helpcCs^ttjkrZtjtdkrZd|_ttjkrZtjts6dStjjtjt|j�|_tjtSdS)z�Check if sos is running in a container and perform container
        specific initialisation based on ENV_HOST_SYSROOT.
        r�oci�podmanTN)rrarb)�
ENV_CONTAINERr�environZ
_in_container�ENV_HOST_SYSROOTr �abspathZ_tmp_dir)r&r*r*r+r�s



zLinuxPolicy._container_initcCs�g|_tj�j}tdd|jd�j�}|jjdd�|dd�D��|jd|�d	��}yPt	|d
dd��8}x0|D](}|j
d
�dj
d�d}|jj|�qlWWdQRXWn4tk
r�}z|j
jd|���WYdd}~XnXddd�}d|��d|�d�f}	x<|	D]$}
|j|
�}
tjj|
��r|
}P�qW|j
jd�dSg}	yLt	|d
dd��4}x,|D]$}d|k�rT|	j|j
d�d��qTWWdQRXWn6tk
�r�}z|j
jd|���WYdd}~XnXx,|j�D] \}
}||	k�r�|jj|
��q�WdS)zxObtain a list of loaded kernel modules to reference later for plugin
        enablement and SoSPredicate checks
        Zlsmodr)�timeoutrcSsg|]}|j�dj��qS)r)r7r8)�.0r9r*r*r+�
<listcomp>sz3LinuxPolicy.init_kernel_modules.<locals>.<listcomp>r1Nz/usr/lib/modules/z/modules.builtinr;zutf-8)r<rz.koz Unable to read kernel builtins: ZCONFIG_NET_DEVLINKZCONFIG_BLK_DEV_DM)ZdevlinkZdm_modz
/boot/config-z
/lib/modules/z/configz#Unable to find booted kernel configz=yz%Unable to read booted kernel config: ���)Zkernel_modsr�unamerGrrr5�extend�join_sysrootrAr7r4�IOError�soslog�warningr �existsr])r&rG�lines�builtinsZmfiler9Zkmod�errZconfig_stringsZkconfigsZkconfigZ
booted_configZkfileZbuiltinr`r*r*r+rsH

$



($
zLinuxPolicy.init_kernel_modulescCs*|jr&|jdkr&tjj|j|jd��}|S)Nr)rrr r^�lstrip)r&r r*r*r+rmKszLinuxPolicy.join_sysrootcCsB|jd}|jr|jnd}|jr(|j�|j|_|j|_|j|_|j|_d|_	|j
|_
|j|_|j|_|j
|_
|j|_|j|_|jr�|jr�|r�||jd_nttd�|�|jd_|jr�|j|_|jo�|j�r>|jo�|j�o�|jdk�r|j�|j�n,|jdk�r2|j�|j�|j�|j�|jjd�dS)N�cmdlineoptsrzSOptionally, please enter the case id that you are generating this report for [%s]: �s3)�commonsZcase_idZlow_priority�_configure_low_priority�
upload_url�upload_user�upload_directoryZupload_pass�upload_password�upload_archive_name�upload_s3_endpoint�upload_s3_region�upload_s3_access_key�upload_s3_bucket�upload_s3_object_prefix�upload_s3_secret_keyZbatch�quiet�input�_Zupload�get_upload_url�upload_protocol�prompt_for_upload_user�prompt_for_upload_password�prompt_for_upload_s3_bucket�prompt_for_upload_s3_endpoint�prompt_for_upload_s3_access_key�prompt_for_upload_s3_secret_key�ui_log�info)r&Zcmdline_optsZcaseidr*r*r+�pre_workPsH


zLinuxPolicy.pre_workcCs�tj�}td�rdtd|��dd�}|ddkr<|jjd�qpd|d	�d
|d�d�}|jj|�n|jjd�ytj	d
�|jjd�Wn4t
k
r�}z|jjd|���WYdd}~XnXdS)ayUsed to constrain sos to a 'low priority' execution, potentially
        letting individual policies set their own definition of what that is.

        By default, this will attempt to assign sos to an idle io class via
        ionice if available. We will also renice our own pid to 19 in order to
        not cause competition with other host processes for CPU time.
        Zionicezionice -c3 -p �)rgZstatusrzSet IO class to idlez Error setting IO class to idle: �outputz (exit code �)zNWarning: unable to constrain report to idle IO class: ionice is not available.�zSet niceness of report to 19z%Error setting report niceness to 19: N)r�getpidrrror��errorr�rp�nice�	Exception)r&Z_pid�ret�msgrtr*r*r+ry�s
z#LinuxPolicy._configure_low_prioritycCs4|j�s0d|j��d|j��d�}tt|��|_dS)zvShould be overridden by policies to determine if an access key needs
        to be provided for upload or not
        z0Please provide the upload access key for bucket z via endpoint z: N)�get_upload_s3_access_key�get_upload_s3_bucket�get_upload_s3_endpointr�r�r�)r&r�r*r*r+r��sz+LinuxPolicy.prompt_for_upload_s3_access_keycCs0|j�s,d|j��d|j��d�}t|�|_dS)zuShould be overridden by policies to determine if a secret key needs
        to be provided for upload or not
        z0Please provide the upload secret key for bucket z via endpoint z: N)�get_upload_s3_secret_keyr�r�rr�)r&r�r*r*r+r��sz+LinuxPolicy.prompt_for_upload_s3_secret_keycCsH|jsB|jr*|jjd�r*|jdd�|_nttd��}|jd�|_|jS)zqShould be overridden by policies to determine if a bucket needs to
        be provided for upload or not
        zs3://r�Nz"Please provide the upload bucket: r)r�rzr6r�r�r8)r&�
user_inputr*r*r+r��sz'LinuxPolicy.prompt_for_upload_s3_bucketcCs>|j}|js8d|j��d|�d�}tt|��}|p4||_|jS)ztShould be overridden by policies to determine if an endpoint needs
        to be provided for upload or not
        z.Please provide the upload endpoint for bucket z (default: z): )�_upload_s3_endpointrr�r�r�)r&Zdefault_endpointr�r�r*r*r+r��s
z)LinuxPolicy.prompt_for_upload_s3_endpointcCs*|j�s&d|j��d�}tt|��|_dS)zdShould be overridden by policies to determine if a user needs to
        be provided or not
        zPlease provide upload user for z: N)�get_upload_userr�r�r�r{)r&r�r*r*r+r��sz"LinuxPolicy.prompt_for_upload_usercCs6|j�r2|j�|jkr2d|j��d�}t|�|_dS)zsShould be overridden by policies to determine if a password needs to
        be provided for upload or not
        z'Please provide the upload password for z: N)�get_upload_passwordr��_upload_userrr})r&r�r*r*r+r��sz&LinuxPolicy.prompt_for_upload_passwordcCsL||_|js|j�|_|js$td��|j�}|jjtd|j�����|�S)a

        Entry point for sos attempts to upload the generated archive to a
        policy or user specified location.

        Currently there is support for HTTPS, SFTP, and FTP. HTTPS uploads are
        preferred for policy-defined defaults.

        Policies that need to override uploading methods should override the
        respective upload_https(), upload_sftp(), and/or upload_ftp() methods
        and should NOT override this method.

        :param archive: The archive filepath to use for upload
        :type archive: ``str``

        In order to enable this for a policy, that policy needs to implement
        the following:

        Required Class Attrs

        :_upload_url:     The default location to use. Note these MUST include
                          protocol header
        :_upload_user:    Default username, if any else None
        :_upload_password: Default password, if any else None

        The following Class Attrs may optionally be overidden by the Policy

        :_upload_directory:     Default FTP server directory, if any


        The following methods may be overridden by ``Policy`` as needed

        `prompt_for_upload_user()`
            Determines if sos should prompt for a username or not.

        `get_upload_user()`
            Determines if the default or a different username should be used

        `get_upload_https_auth()`
            Format authentication data for HTTPS uploads

        `get_upload_url_string()`
            Print a more human-friendly string than vendor URLs
        z;No upload destination provided by policy or by --upload-urlzAttempting upload to )	r~rzr�r��_determine_upload_typer�r�r��get_upload_url_string)r&�archiveZupload_funcr*r*r+�upload_archive�s,
zLinuxPolicy.upload_archivecCsv|j|j|j|jd�}|jdj|kr6||jdjSd|jkrHtd��|jjd�\}}||krntd|����||S)aBased on the url provided, determine what type of upload to attempt.

        Note that this requires users to provide a FQDN address, such as
        https://myvendor.com/api or ftp://myvendor.com instead of
        myvendor.com/api or myvendor.com
        )Zftp�sftpZhttpsrwrvz://z#Must provide protocol in upload URLz&Unsupported or unrecognized protocol: )	�
upload_ftp�upload_sftp�upload_https�	upload_s3rxr�rzr�r7)r&ZprotsZprotr�r*r*r+r�#s

z"LinuxPolicy._determine_upload_typecCs&|s|j�}|s|j�}tjj||�S)ahFormats the user/password credentials using basic auth

        :param user: The username for upload
        :type user: ``str``

        :param password: Password for `user` to use for upload
        :type password: ``str``

        :returns: The user/password auth suitable for use in requests calls
        :rtype: ``requests.auth.HTTPBasicAuth()``
        )r�r��requests�authZ
HTTPBasicAuth)r&�user�passwordr*r*r+�get_upload_https_auth9s
z!LinuxPolicy.get_upload_https_authcCstjdd�p|jp|jS)z�Helper function to determine if we should use the policy default
        upload access key or one provided by the user

        :returns: The access_key to use for upload
        :rtype: ``str``
        ZSOSUPLOADS3ACCESSKEYN)r�getenvr��_upload_s3_access_key)r&r*r*r+r�Lsz$LinuxPolicy.get_upload_s3_access_keycCs|js|j�|jS)z�Helper function to determine if we should use the policy default
        upload endpoint or one provided by the user

        :returns: The S3 Endpoint to use for upload
        :rtype: ``str``
        )rr�)r&r*r*r+r�Wsz"LinuxPolicy.get_upload_s3_endpointcCs|jp
|jS)z�Helper function to determine if we should use the policy default
        upload region or one provided by the user

        :returns: The S3 region to use for upload
        :rtype: ``str``
        )r��_upload_s3_region)r&r*r*r+�get_upload_s3_regionbsz LinuxPolicy.get_upload_s3_regioncCsb|jrH|jjd�rH|jdd�jdd�}|d|_t|�dkrH|d|_|jsV|j�|jp`|jS)z�Helper function to determine if we should use the policy default
        upload bucket or one provided by the user

        :returns: The S3 bucket to use for upload
        :rtype: ``str``
        zs3://r�Nrr1r)rzr6r7r��lenr�r��_upload_s3_bucket)r&Zbucket_and_prefixr*r*r+r�ks

z LinuxPolicy.get_upload_s3_bucketcCs|jp
|jS)z�Helper function to determine if we should use the policy default
        upload object prefix or one provided by the user

        :returns: The S3 object prefix to use for upload
        :rtype: ``str``
        )r��_upload_s3_object_prefix)r&r*r*r+�get_upload_s3_object_prefix{sz'LinuxPolicy.get_upload_s3_object_prefixcCstjdd�p|jp|jS)z�Helper function to determine if we should use the policy default
        upload secret key or one provided by the user

        :returns: The S3 secret key to use for upload
        :rtype: ``str``
        ZSOSUPLOADS3SECRETKEYN)rr�r��_upload_s3_secret_key)r&r*r*r+r��sz$LinuxPolicy.get_upload_s3_secret_keycCsH|jr<|jr<|jr<|jr<|j�}|j�}d|�d|��|_|jpF|jS)z�Helper function to determine if we should use the policy default
        upload url or one provided by the user

        :returns: The URL to use for upload
        :rtype: ``str``
        zs3://r)rzr�r�r�r�r�rZ)r&�bucket�prefixr*r*r+r��szLinuxPolicy.get_upload_urlcCsd}tj|d|�}|S)Nz([^:]+://[^:]+:)([^@]+)(@.+)z\1********\3)rNrO)r&r_�patternZobfuscated_urlr*r*r+�_get_obfuscated_upload_url�sz&LinuxPolicy._get_obfuscated_upload_urlcCs|j|j��S)z�Used by distro policies to potentially change the string used to
        report upload location from the URL to a more human-friendly string
        )r�r�)r&r*r*r+r��sz!LinuxPolicy.get_upload_url_stringcCstjdd�p|jp|jS)z�Helper function to determine if we should use the policy default
        upload user or one provided by the user

        :returns: The username to use for upload
        :rtype: ``str``
        Z
SOSUPLOADUSERN)rr�r{r�)r&r*r*r+r��szLinuxPolicy.get_upload_usercCstjdd�p|jp|jS)a_Helper function to determine if we should use the policy default
        upload password or one provided by the user

        A user provided password, either via option or the 'SOSUPLOADPASSWORD'
        environment variable will have precendent over any policy value

        :returns: The password to use for upload
        :rtype: ``str``
        ZSOSUPLOADPASSWORDN)rr�r}�_upload_password)r&r*r*r+r��s
zLinuxPolicy.get_upload_passwordcCs:td�std��yddl}Wn,tk
rH}ztd�|�WYdd}~XnXd}|sZ|j�}|sf|j�}|j�jdd�}d	|�d
|��}|j|dd�}d
dd|j	|j
g}	|j|	dd�}
|
dkr�d}n�|
dk�r|j|�d
d|j	|j
g}|j|dd�dk}|�sr|j
�td|j�����nX|
dk�r:td|j��d���n8|
dk�rXtd|j�����n|
dk�rrtd|j����|�s�|j
�td|j�����d|j�d |j���}|j|�d!|j	|j
d"g}
|j|
d#d�}|dk�r�|jd$�dS|dk�r�td%��|dk�rtd&|j����|dk�r&td'��td(|j����dS))a�Attempts to upload the archive to an SFTP location.

        Due to the lack of well maintained, secure, and generally widespread
        python libraries for SFTP, sos will shell-out to the system's local ssh
        installation in order to handle these uploads.

        Do not override this method with one that uses python-paramiko, as the
        upstream sos team will reject any PR that includes that dependency.
        r�zSFTP is not locally supportedrNzFSFTP upload requires python3-pexpect, which is not currently installedFzsftp://rz sftp -oStrictHostKeyChecking=no �@zutf-8)r<zsftp>z	password:zConnection refused�)rgTr1zPermission denied�
z#Incorrect username or password for �zConnection refused by z. Incorrect port?�z!Timeout hit trying to connect to �z,Unexpected error trying to connect to sftp: zUnable to connect via SFTP to zput rXz100%zNo such file or directory�ZbyezTimeout expired while uploadingzUnknown error during upload: z&Unable to write archive to destinationz!Unexpected response from server: )rr��pexpect�ImportErrorr�r�r��replaceZspawnZTIMEOUTZEOF�expectZsendline�closer�Zbeforer~�_get_sftp_upload_name)r&r�r�r�rtZsftp_connectedZsftp_urlZsftp_cmdr�Zsftp_expectsr(Zpass_expectsZput_cmdZput_expectsZput_successr*r*r+r��sv










zLinuxPolicy.upload_sftpcCs*|jjd�d}|jr&tjj|j|�}|S)aIf a specific file name pattern is required by the SFTP server,
        override this method in the relevant Policy. Otherwise the archive's
        name on disk will be used

        :returns:       Filename as it will exist on the SFTP server
        :rtype:         ``str``
        rr1rj)r~r7r|rr r^)r&Zfnamer*r*r+r�'sz!LinuxPolicy._get_sftp_upload_namecCstj|j�||j�|td�S)z�If upload_https() needs to use requests.put(), use this method.

        Policies should override this method instead of the base upload_https()

        :param archive:     The open archive file object
        )�datar��verifyrg)r��putr�r�r)r&r�r�r*r*r+�_upload_https_put4szLinuxPolicy._upload_https_putcCsiS)zJDefine any needed headers to be passed with the POST request here
        r*)r&r*r*r+�_get_upload_headers?szLinuxPolicy._get_upload_headerscCs:d|jjd�d||j�fi}tj|j�||j�|td�S)z�If upload_https() needs to use requests.post(), use this method.

        Policies should override this method instead of the base upload_https()

        :param archive:     The open archive file object
        �filerr1)�filesr�r�rgrj)r"r7r�r�Zpostr�r�r)r&r�r�r�r*r*r+�_upload_https_postDs
zLinuxPolicy._upload_https_postcCs�tstd��t|jd���}|jdjdkr2|j}n|jdj}|jdjdk}|dkrd|j||�}n|j	||�}|j
dkr�|j
d	kr�td
��td|j
�d|j����d
SQRXdS)z�Attempts to upload the archive to an HTTPS location.

        :returns: ``True`` if upload is successful
        :rtype: ``bool``

        :raises: ``Exception`` if upload was unsuccessful
        z7Unable to upload due to missing python requests library�rbrv�autoFr�����i�z/Authentication failed: invalid user credentialszPOST request returned z: TN)r�r�)�REQUESTS_LOADEDr�rAr~rxZ
upload_method�_upload_methodZupload_no_ssl_verifyr�r�Zstatus_code�reason)r&Zarc�methodr�r;r*r*r+r�Ss 

zLinuxPolicy.upload_httpscCs�ddl}ddl}|s|j�}|dkr,td��|jdd�}|sD|j�}|sP|j�}|s`|jp^|j}y.|j	|||dd�}|s�td��|j
|�W�n|jk
r�}ztd	|���|�WYdd}~Xn�|jk
r�}ztd
|���|�WYdd}~Xn�|j
k
�r�}z|t|�j�d}	|	dk�r4td|�d
��|�|	dk�rPtd|�d
��|�|	dk�rjtd|���|�tdt|����|�WYdd}~XnXt|jd��$}
|jd|jjd�d��|
�WdQRX|j�dS)aTAttempts to upload the archive to either the policy defined or user
        provided FTP location.

        :param url: The URL to upload to
        :type url: ``str``

        :param directory: The directory on the FTP server to write to
        :type directory: ``str`` or ``None``

        :param user: The user to authenticate with
        :type user: ``str``

        :param password: The password to use for `user`
        :type password: ``str``

        :returns: ``True`` if upload is successful
        :rtype: ``bool``

        :raises: ``Exception`` if upload in unsuccessful
        rNzIno FTP server specified by policy, use --upload-url to specify a locationzftp://rr�)rgz3connection failed, did you set a user and password?z timeout hit while connecting to zunable to connect to Z503zcould not login as '�'Z530zinvalid password for user 'Z550z"could not set upload directory to z#error trying to establish session: r�zSTOR rr1Trj)�ftplib�socketr�r�r�r�r�r|�_upload_directoryZFTP�cwdrgZgaierrorZ
error_perm�strr7rAr~Z
storbinary�quit)r&r_Z	directoryr�r�r�r�Zsessionrt�errnoZ_arcfiler*r*r+r�rsL  


$zLinuxPolicy.upload_ftpcCs$tstd��|s|j�}|s$|j�}|s6|j�jd�}|s�|j�}|dkr`|jd�r`|dd�}|dkr�|jd�r�|r�|�d�nd}|s�|j	�}|s�|j
�}tdd�}tj
d|||||d	�}y(||jjd�d}	|j|j||	�d
Stk
�r}
ztdt|
����|
�WYdd}
~
XnXdS)
a�Attempts to upload the archive to an S3 bucket.

        :param endpoint: The S3 endpoint to upload to
        :type endpoint: str

        :param region: The S3 region to upload to
        :type region: str

        :param bucket: The name of the S3 bucket to upload to
        :type bucket: str

        :param prefix: The prefix for the S3 object/key
        :type prefix: str

        :param access_key: The access key for the S3 bucket
        :type access_key: str

        :param secret_key: The secret key for the S3 bucket
        :type secret_key: str

        :returns: True if upload is successful
        :rtype: bool

        :raises: Exception if upload is unsuccessful
        z4Unable to upload due to missing python boto3 libraryrrr1Nzapp/sos)Zuser_agent_extrarw)Zendpoint_urlZregion_nameZaws_access_key_idZaws_secret_access_key�configTzFailed to upload to S3: rj)�BOTO3_LOADEDr�r�r�r�r8r�r6�endswithr�r��BotocoreConfig�boto3Zclientr~r7Zupload_filer�)r&ZendpointZregionr�r�Z
access_keyZ
secret_keyZboto3_configZ	s3_client�key�er*r*r+r��s>
zLinuxPolicy.upload_s3cCsdS)z�If sos report commands need to always be prefixed with something,
        for example running in a specific container image, then it should be
        defined here.

        If no prefix should be set, return an empty string instead of None.
        rr*)r&r*r*r+�set_sos_prefix�szLinuxPolicy.set_sos_prefixcCsdS)zcIf a host requires additional cleanup, the command should be set and
        returned here
        rr*)r&r*r*r+�set_cleanup_cmdszLinuxPolicy.set_cleanup_cmdcCsdS)aIReturns the command that will create the container that will be
        used for running commands inside a container on hosts that require it.

        This will use the container runtime defined for the host type to
        launch a container. From there, we use the defined runtime to exec into
        the container's namespace.

        :param image:   The name of the image if not using the policy default
        :type image:    ``str`` or ``None``

        :param auth:    The auth string required by the runtime to pull an
                        image from the registry
        :type auth:     ``str`` or ``None``

        :param force_pull:  Should the runtime forcibly pull the image
        :type force_pull:   ``bool``

        :returns:   The command to execute to launch the temp container
        :rtype:     ``str``
        rr*)r&Zimager�Z
force_pullr*r*r+�create_sos_containersz LinuxPolicy.create_sos_containercCs|j�d|j��S)a�Restarts the container created for sos collect if it has stopped.

        This is called immediately after create_sos_container() as the command
        to create the container will exit and the container will stop. For
        current container runtimes, subsequently starting the container will
        default to opening a bash shell in the container to keep it running,
        thus allowing us to exec into it again.
        z start )�container_runtime�sos_container_name)r&r*r*r+�restart_sos_container#s
z!LinuxPolicy.restart_sos_containercCs"|jr|j�d|j�d|��S|S)aReturns the command that allows us to exec into the created
        container for sos collect.

        :param cmd: The command to run in the sos container
        :type cmd: ``str``

        :returns: The command to execute to run `cmd` in the container
        :rtype: ``str``
        z exec rX)r�r�)r&�cmdr*r*r+�format_container_command/sz$LinuxPolicy.format_container_command)NNTN)r)NN)NN)T)T)NNNN)NNNNNN)NNF)\�__name__�
__module__�__qualname__rY�vendorr[r'r>r2r3rZr�r�r�r�r�r�r�r�r�r�r#Z_preferred_hash_namerzr{r}rr�r�r�r�r�Z
containerizedZcontainer_imageZsos_path_stripZsos_pkg_nameZsos_bin_pathr�Zcontainer_version_commandZcontainer_authfiler�classmethodr-rFrHrIrJrLrMrPrUrQrSrrrmr�ryr�r�r�r�r�r�r�r�r�r�r�r�r�r�r�r�r�r�r�r�r�r�r�r�r�r�r�r�r�r�r�r�r��
__classcell__r*r*)r)r+r2s�(	+;6

8
		
c


F
C	
rc@s,eZdZdZd
gZdZdZeddd��Zd	S)�GenericLinuxPolicyz�This Policy will be returned if no other policy can be loaded. This
    should allow for IndependentPlugins to be executed on any system�Upstream Project� https://github.com/sosreport/sosZSoSaSoS was unable to determine that the distribution of this system is supported, and has loaded a generic configuration. This may not provide desired behavior, and users are encouraged to request a new distribution-specifc policy at the GitHub project above.
rcCst�dS)z|
        This function is responsible for determining if the underlying system
        is supported by this policy.
        N)�NotImplementedError)r,rDr*r*r+rFLszGenericLinuxPolicy.checkN)r�r�)r)	r�r�r�rYr\r�Zvendor_textr�rFr*r*r*r+r�@sr�)'rrNrZsosrr�Zsos.policiesrZsos.policies.init_systemsrZ!sos.policies.init_systems.systemdrZsos.policies.runtimes.criorZsos.policies.runtimes.podmanrZsos.policies.runtimes.dockerr	Zsos.policies.runtimes.lxdr
Z
sos.utilitiesrrr
rrr�r�r�r�Zbotocore.configrr�r�rBrcrerr�r*r*r*r+�<module>
sF