File: //usr/lib/python3.6/site-packages/sos/policies/distros/__pycache__/redhat.cpython-36.opt-1.pyc
3
-�_gW\ � @ sN d dl Z d dlZd dlZd dlZd dlmZ d dlmZ d dlm Z m
Z
m Z m Z m
Z
mZmZmZmZmZ d dlmZmZmZ d dlmZ d dlmZ d dlm Z d d l m Z m Z m Z d d
l!m"Z# yd dl$Z$d Z%W n e&k
r� d Z%Y nX d
Z'G dd� de�Z(dZ)dZ*dZ+G dd� de(�Z,G dd� de,�Z-G dd� de,�Z.G dd� de(�Z/dS )� N)�DeviceAuthorizationClass)� RedHatPlugin)
� RHEL_PRESETS�RHV�RHEL�CB�RHOSP�RHOCP�RH_CFME� RH_SATELLITE�AAPEDA�
AAPCONTROLLER)� LinuxPolicy�ENV_HOST_SYSROOT�
OS_RELEASE)�RpmPackageManager)�FlatpakPackageManager)�MultiPackageManager)�bold�
convert_bytes�TIMEOUT_DEFAULT)�_sosTFzRed Hat Enterprise Linuxc sz e Zd ZdZddgZdZdZdZd Zd Z d
Z
d Z d Z d
Z
dZd � fdd� Ze� fdd��Zdd� Zdd� Zdd� Z� ZS ) � RedHatPolicyzRed Hat�Distribution Website�https://www.redhat.com/�Commercial Support�https://access.redhat.com/z/var/tmpFZfriendlyN�podman�sosz /usr/sbinzVhttps://sso.redhat.com/auth/realms/redhat-external/protocol/openid-connect/auth/devicezPhttps://sso.redhat.com/auth/realms/redhat-external/protocol/openid-connect/tokenTc s� t � j||||d� d| _tttg| j|d�| _| jt g7 _| jj
| _ | j sft j
jd� t jd� | j| j �| _| jr�d| _nd| _| jtjd 7 _| jtjd 7 _| js�| j� | j� d S )
N)�sysroot�init�
probe_runtime� remote_execF)ZprimaryZ fallbacks�chrootr" z'Could not obtain installed package list� z /usr/sbin:/usr/bin:/root/binz'/sbin:/bin:/usr/sbin:/usr/bin:/root/binz/usr/local/binz/usr/local/sbin)�super�__init__�usrmover r r r �package_managerZvalid_subclassesr Zpackages�pkgs�sys�stderr�write�exit�
check_usrmove�PATH�os�pathsepr" Z
set_exec_pathZ load_presets)�selfr r r! r" )� __class__� � /usr/lib/python3.6/redhat.pyr& 8 s.
zRedHatPolicy.__init__c s~ | t k r tt | �j|� d S |jd� ttttd�}xD|j� D ]8\}}t d|� ��}|jdd�|d�|j
d��dd � q>W d S )
Nz�This policy is a building block for all other Red Hat family distributions. You are likely looking for one of the distributions listed below.
)�centos�rhelZ redhatcoreos�fedoraz policies.� z>8z<35z<30F)�newline) r r% �display_distro_helpZadd_text� CentOsPolicy�
RHELPolicy�RedHatCoreOSPolicy� FedoraPolicy�itemsr �os_release_name)�clsZsectionZsubsZsubc�valueZsubln)r3 r4 r5 r; Z s z RedHatPolicy.display_distro_helpc C s8 d|kr t jjd�o t jjd�S |d d }|d dkS )aq Test whether the running system implements UsrMove.
If the 'filesystem' package is present, it will check that the
version is greater than 3. If the package is not present the
'/bin' and '/sbin' paths are checked and UsrMove is assumed
if both are symbolic links.
:param pkgs: a packages dictionary
Z
filesystemz/binz/sbin�versionr �3)r0 �path�islink)r2 r) Zfilesys_versionr4 r4 r5 r. s s
zRedHatPolicy.check_usrmovec C s6 g }dd� }| j r2x|D ]}|j||�� qW |S |S )a2 Mangle paths for post-UsrMove systems.
If the system implements UsrMove, all files will be in
'/usr/[s]bin'. This method substitutes all the /[s]bin
references in the 'files' list with '/usr/[s]bin'.
:param files: the list of package managed files
c S s: ddg}| |kr*| t jjd| dd � �fS tjdd| �fS )Nz/bin/rpmz
/bin/mailxz/usrr$ z (^)(/s?bin)z\1/usr\2)r0 rF �join�re�sub)rF Z
skip_pathsr4 r4 r5 �transform_path� s z8RedHatPolicy.mangle_package_path.<locals>.transform_path)r' �extend)r2 �files�pathsrK �fr4 r4 r5 �mangle_package_path� s
z RedHatPolicy.mangle_package_pathc C s |s
| j S |S )N)�_tmp_dir)r2 Z opt_tmp_dirr4 r4 r5 � get_tmp_dir� s zRedHatPolicy.get_tmp_dir)r r )r r )NNTN)�__name__�
__module__� __qualname__�vendor� vendor_urlsrQ Z
_in_containerZ name_pattern�
upload_url� upload_userZdefault_container_runtimeZ sos_pkg_nameZ sos_bin_path�client_identifier_url�token_endpointr& � classmethodr; r. rP rR �
__classcell__r4 r4 )r3 r5 r % s& !r a[
Any information provided to %(vendor)s will be treated in accordance with the published support policies at:
%(vendor_urls)s
The generated archive may contain data considered sensitive and its content should be reviewed by the originating organization before being passed to any third party.
No changes will be made to system configuration.
z https://api.access.redhat.comz sftp://sftp.access.redhat.comc s� e Zd ZdZdZdZeZdZe de
d �Z e Z
dZdZd Zd'� fd d � Zd
d� Zdd� Zdd� Zdd� Zd(dd�Zdd� Zdd� Zdd � Zd)� fd d � Zd d � Z� fd!d"�Z d#d$� Z d%d&� Z � Z S )*r= at
The RHEL policy is used specifically for Red Hat Enterprise Linux, of
any release, and not forks or derivative distributions. For example, this
policy will be loaded for any RHEL 8 installation, but will not be loaded
for CentOS Stream 8 or Red Hat CoreOS, for which there are separate
policies.
Plugins activated by installed packages will only be activated if those
packages are installed via RPM (dnf/yum inclusive). Packages installed by
other means are not considered by this policy.
By default, --upload will be directed to using the SFTP location provided
by Red Hat for technical support cases. Users who provide login credentials
for their Red Hat Customer Portal account will have their archives uploaded
to a user-specific directory.
If users provide those credentials as well as a case number, --upload will
instead attempt to directly upload archives to the referenced case, thus
streamlining the process of providing data to technical support engineers.
If either or both of the credentials or case number are omitted or are
incorrect, then a temporary anonymous user will be used for upload to the
SFTP server, and users will need to provide that information to their
technical support engineer. This information will be printed at the end of
the upload process for any sos report execution.
zRed Hatz/etc/redhat-releaser7 a This command will collect diagnostic and configuration information from this %(os_release_name)s system and installed applications.
An archive containing the collected information will be generated in %(tmpdir)s and may be provided to a %(vendor)s support representative.
z%(vendor_text)s
�postNi @Tc s" t � j||||d� | jt� d S )N)r r r! r" )r% r& Zregister_presetsr )r2 r r r! r" )r3 r4 r5 r& � s
zRHELPolicy.__init__c C s8 | j d jr | jjtd�� | js4t| _| jjd� d S )N� cmdlineoptszVThe option --upload-user has been deprecated in favour of device authorization in RHELz&No case id provided, uploading to SFTP)�commonsrY �ui_log�info�_�case_id� RH_SFTP_HOSTrX )r2 r4 r4 r5 �prompt_for_upload_user� s
z!RHELPolicy.prompt_for_upload_userc C s | j d jr | jjtd�� d S )Nr_ zVThe option --upload-pass has been deprecated in favour of device authorization in RHEL)r` Z upload_passra rb rc )r2 r4 r4 r5 �prompt_for_upload_password� s z%RHELPolicy.prompt_for_upload_passwordc C sf | j r | j S | jd j r$| jd j S | jd jdkr8tS | jd jsT| jjd� tS d}t|| j S )Nr_ Zsftpz&No case id provided, uploading to SFTPz /support/v1/cases/%s/attachments)rX r` Zupload_protocolre rd ra rb � RH_API_HOST)r2 Z rh_case_apir4 r4 r5 �get_upload_url� s zRHELPolicy.get_upload_urlc C s d| j � �}d|iS )NzBearer Z
Authorization)�
_device_token)r2 Zstr_authr4 r4 r5 �_get_upload_https_auth s z!RHELPolicy._get_upload_https_authc C sh d|j jd�d || j� fi}t| j| j�}|j� | _| jj d| j
� � �� t j | j
� || j� |td�S )z�If upload_https() needs to use requests.post(), use this method.
Policies should override this method instead of the base upload_https()
:param archive: The open archive file object
�file�/r$ z/Device authorized correctly. Uploading file to )rM �headers�verify�timeout���)�name�split�_get_upload_headersr rZ r[ �get_access_tokenrj ra rb �get_upload_url_string�requestsr^ ri rk r )r2 �archivero rM �RHELAuthr4 r4 r5 �_upload_https_post s
z RHELPolicy._upload_https_postc C s | j � jt�rddd�S i S )NZfalsezno-cache)Z isPrivatez
cache-control)ri �
startswithrh )r2 r4 r4 r5 rt $ s
z RHELPolicy._get_upload_headersc C s0 | j � jt�rdS | j � jt�r$dS | j| j�S )NzRed Hat Customer PortalzRed Hat Secure FTP)ri r{ rh re Z_get_obfuscated_upload_urlrX )r2 r4 r4 r5 rv ) s
z RHELPolicy.get_upload_url_stringc C s@ | j jd�d }| jr&| j� d|� �}| jr<tjj| j|�}|S )z�The RH SFTP server will only automatically connect file uploads to
cases if the filename _starts_ with the case number
rm r$ rc rq )Zupload_archive_namers rd Zupload_directoryr0 rF rH )r2 Zfnamer4 r4 r5 �_get_sftp_upload_name0 s z RHELPolicy._get_sftp_upload_namec
s� t jd�d | j� kr t� j� S ts,td��d}d}| js�yt| j | j
�}W n: tk
r� } z dt |�krv| j j
d� W Y dd}~X n X |j� | _| jr�| j j
d| j� � �� td }d}| j�r4| j� } tj|| d d
�}|jd k�rtj|j�d }tj|j�d
}n*| j jd|j� d|j� � �� | j jd� n~ddi}
tj|tj|
�d d�} | jd k�r�tj| j�} | d }| d
}| j j
td|� d��� n | j jd| j� d| j� � �� |�r�|�r�t� j||d�S td��dS )z�Override the base upload_sftp to allow for setting an on-demand
generated anonymous login for the RH SFTP server if a username and
password are not given
z//r$ zPpython3-requests is not installed and is required for obtaining SFTP auth token.Nzend user deniedz:Device token authorization has been cancelled by the user.z/Device authorized correctly. Uploading file to z/support/v2/sftp/token�
)rn rp �� Zusername�tokenz$DEBUG: auth attempt failed (status: z): zUUnable to retrieve Red Hat auth token using provided credentials. Will try anonymous.Z isAnonymousT)�datarp zUser z^ used for anonymous upload. Please inform your support engineer so they may retrieve the data.z)DEBUG: anonymous request failed (status: )�user�passwordz1Could not retrieve valid or anonymous credentials) re rs ri r% � upload_sftp�REQUESTS_LOADED� Exceptionrj r rZ r[ �strra rb ru rv rh rk rw r^ Z status_code�json�loads�text�debug�error�dumpsrc )
r2 r� r� Z_tokenZ_userry �eZurl�retrn ZadataZanonZresp)r3 r4 r5 r� < sV
zRHELPolicy.upload_sftpc C s> t jj|�}|| jkr:| jjtdt| j�� d��� t| _ d S )NzLSize of archive is bigger than Red Hat Customer Portal limit for uploads of z via sos http upload.
)
r0 rF �getsize�_max_size_requestra Zwarningrc r re rX )r2 rx �sizer4 r4 r5 �check_file_too_big� s
z RHELPolicy.check_file_too_bigc s� y(| j � jt�r| j|� t� j|�}W nb tk
r� } zFd}| jjt�sL� | jj t
d|� dt � ��� t | _t� j|�}W Y dd}~X nX |S )zOverride the base upload_archive to provide for automatic failover
from RHCP failures to the public RH dropbox
Fz0Upload to Red Hat Customer Portal failed due to z . Trying N) ri r{ rh r� r% �upload_archiver� rX ra r� rc re )r2 rx Zuploadedr� )r3 r4 r5 r� � s
zRHELPolicy.upload_archivec C sD y*| j jd�}| j|d d }t|d �S tk
r> Y nX dS )Nzredhat-release*r rD F)r( �all_pkgs_by_name_regexr) �intr� )r2 ZrrZpkgnamer4 r4 r5 � dist_version� s zRHELPolicy.dist_versionc C s� x*d
D ]"}| j j|� d�d�r| jt�S qW | jd�d k rD| jt�S | jd�d k r\| jt�S | jd�d k rt| jt�S | jd�d k s�| jd �d k r�| jt�S | jd
�d k r�| jt �S x$dD ] }| j|�d k r�| jt
�S q�W | jt �S )N�rescue� emergencyz.targetFzsatellite-commonz
rhosp-releaseZcfmez ovirt-engineZvdsmz automation-controller-server�automation-eda-controller� automation-eda-controller-server)r� r� )r� r� ) Z init_systemZ
is_running� find_presetr � pkg_by_namer r r
r r
r r )r2 �target�pkgr4 r4 r5 � probe_preset� s&
zRHELPolicy.probe_preset)NNTN)T)NN) rS rT rU �__doc__rV �os_release_file�RHEL_RELEASE_STRrA �
os_release_idrc �disclaimer_text�msgre Z _upload_urlZ_upload_methodrj r� r& rf rg ri rk rz rt rv r| r� r� r� r� r� r] r4 r4 )r3 r5 r= � s4
K r= c @ s" e Zd ZdZdgZdZdZdZdS ) r< ZCentOS�Community Website�https://www.centos.org/z/etc/centos-releasez CentOS Linuxr6 N)r� r� )rS rT rU rV rW r� rA r� r4 r4 r4 r5 r< � s
r< c sv e Zd ZdZdZede d �ZdZdZ dZ
dZ d Z d
Z
d� fd d
� Zeddd��Zdd� Zddd�Zdd� Z� ZS )r> aB
Red Hat CoreOS is a containerized host built upon Red Hat Enterprise Linux
and as such this policy is built on top of the RHEL policy. For users, this
should be entirely transparent as any behavior exhibited or influenced on
RHEL systems by that policy will be seen on RHCOS systems as well.
The one change is that this policy ensures that sos collect will deploy a
container on RHCOS systems in order to facilitate sos report collection,
as RHCOS discourages non-default package installation via rpm-ostree which
is used to maintain atomicity for RHCOS nodes. The default container image
used by this policy is the support-tools image maintained by Red Hat on
registry.redhat.io.
Note that this policy is only loaded when sos is directly run on an RHCOS
node - if sos collect uses the `oc` transport (the default transport that
will be attempted by the ocp cluster profile), then the policy loaded
inside the launched pod will be RHEL. Again, this is expected and will not
impact how sos report collections are performed.
z Red Hat Enterprise Linux CoreOSz�This command will collect diagnostic and configuration information from this %(os_release_name)s system.
An archive containing the collected information will be generated in %(tmpdir)s and may be provided to a %(vendor)s support representative.
z%(vendor_text)s
Tr z®istry.redhat.io/rhel8/support-toolsz/hostz
rpm -q sosz /var/lib/kubelet/config.jsonNc s t � j||||d� d S )N)r r r! r" )r% r& )r2 r r r! r" )r3 r4 r5 r& � s
zRedHatCoreOSPolicy.__init__� c C s� |r d|kS d}t tjkr |S tjt t }yBt|ddd��*}x"|j� j� D ]}|| j|kO }qLW W d Q R X W n tk
r� Y nX |S )NZCoreOSF�rzutf-8)�encoding) r r0 �environr �open�read�
splitlinesrA �IOError)rB ZremoteZcoreosZ host_releaseZhfile�liner4 r4 r5 �check s
zRedHatCoreOSPolicy.checkc C s
| j t�S )N)r� r )r2 r4 r4 r5 r� s z RedHatCoreOSPolicy.probe_presetFc
C sL |p| j }|rdnd}| j� d| j� d| j� d|� d|� d|p@d� d|� �
S )Nz
--pull=alwaysr� z run -di --name zE --privileged --ipc=host --net=host --pid=host -e HOST=/host -e NAME=z
-e IMAGE=r9 zr -v /run:/run -v /var/log:/var/log -v /etc/machine-id:/etc/machine-id -v /etc/localtime:/etc/localtime -v /:/host )�container_image�container_runtime�sos_container_name)r2 ZimageZauthZ
force_pullZ_imageZ_pullr4 r4 r5 �create_sos_container s
z'RedHatCoreOSPolicy.create_sos_containerc C s d| j � �S )Nzpodman rm --force )r� )r2 r4 r4 r5 �set_cleanup_cmd, s z"RedHatCoreOSPolicy.set_cleanup_cmd)NNTN)r� )NNF)rS rT rU r� rA rc r� r� Z
containerizedr� r� Zsos_path_stripZcontainer_version_commandZcontainer_authfiler& r\ r� r� r� r� r] r4 r4 )r3 r5 r> � s"
r> c sB e Zd ZdZdZddgZdZdZd Zd� fd d
� Z dd� Z
� Z S )r? aj
The policy for Fedora based systems, regardless of spin/edition. This
policy is based on the parent Red Hat policy, and thus will only check for
RPM packages when considering packaged-based plugin enablement. Packages
installed by other sources are not considered.
There is no default --upload location for this policy. If users need to
upload an sos report archive from a Fedora system, they will need to
provide the location via --upload-url, and optionally login credentials
for that location via --upload-user and --upload-pass (or the appropriate
environment variables).
zthe Fedora Project�Community Website�https://fedoraproject.org/�Community Forums�%https://discussion.fedoraproject.org/z/etc/fedora-releasez Fedora Linuxr8 NTc s t � j||||d� d S )N)r r r! r" )r% r& )r2 r r r! r" )r3 r4 r5 r& F s
zFedoraPolicy.__init__c C s& | j d�p| jjd�d }t|d �S )Nzfedora-releasezfedora-release-.*r$ rD rq )r� r( r� r� )r2 r� r4 r4 r5 �fedora_versionL s
zFedoraPolicy.fedora_version)r� r� )r� r� )NNTN) rS rT rU r� rV rW r� rA r� r& r� r] r4 r4 )r3 r5 r? 0 s r? )0r� r0 r* rI Zsos.policies.authr Zsos.report.pluginsr Zsos.presets.redhatr r r r r r r
r r r
Zsos.policies.distrosr r r Z!sos.policies.package_managers.rpmr Z%sos.policies.package_managers.flatpakr Z sos.policies.package_managersr Z
sos.utilitiesr r r r r rc rw r� � ImportErrorr� r r� rh re r= r< r> r? r4 r4 r4 r5 �<module> s: 0
X