U 2d]@sdZddlZddlZddlZddlZddlZddlZddlZddlZddl Z ddl Z ddl m Z ddl mZmZmZddlmZmZmZmZmZmZmZmZmZmZmZmZddlmZddlm Z m!Z!m"Z"ddlm#Z$dd lm%Z%m&Z&m'Z'dd l(m)Z)dd l*m+Z+m,Z,dd l-m.Z.dd l/m0Z0m1Z1ddl2m3Z3m4Z4ddl5m6Z6ddl7m8Z8ddl9m:Z:m;Z;ddlZ>ddl?m@Z@ddlAmBZBmCZCmDZDddlEmFZFmGZGmHZHmIZIddlJmKZKmLZLddlMmNZNddlOmPZPddlQmRZRmSZSddlTmUZUmVZVdZWdZXdZYdZZdZ[d Z\d!d"d#gZ]d$Z^d%e j_d&Z`eaZbece&deeZfGd'd(d(ejgZhdd)d*Zid+d,Zjd-d.Zkdd/d0Zld1d2Zmd3d4Znd5d6Zod7d8Zpeqd9d:d;Zreqd9dd?Ztd@dAZudBdCZvdDdEZwdFdGZxdHdIZydJdKZzdLdMZ{dNdOZ|ej}dPdQdRZ~ej}dPdSdTZej}dPdUdVZdWdXZdYdZZd[d\Zej}eqeqd]d^d_Zd`dadbdcZdddeZdfdgZejdhdiZejdjdkZdldmZekejeleeidndodpZekejeleeidqdrdsZekejeleidtedudvdwZej}eedxdydzZej}dd{d|d}Zd~dZejej}ed{ddZddZemejeidddZej}dPddZej}dPddZej}dPddZddZej}dPddZdddZej}dPddZelej}dPddZej}dPddZejeidej}dPddZej}e:eqeeqddddZddZddduddZdduddZdddZddZddZedddZeedkr~eedS)z2Client to manage Ubuntu Pro services on a machine.Nwraps)ListOptionalTuple) actionsaptapt_newsconfigcontractdaemondefaults entitlements event_logger exceptionshttplock)log)messagessecuritysecurity_status)status)timerutilversion)call_api)FullAutoAttachOptions_full_auto_attach) _initiate)MagicAttachRevokeOptions_revoke)MagicAttachWaitOptions_wait)_reboot_required) _is_attached) AptProxyScopesetup_apt_proxy)AttachActionsConfigFileIncorrectTypeError)PRINT_WRAP_WIDTH),create_enable_entitlements_not_found_messageentitlements_disable_orderget_valid_entitlement_names)ApplicationStatusCanDisableFailureCanEnableFailureCanEnableFailureReason)notices state_files)Notice)JsonArrayFormatter) refresh_motdupdate_motd_messages) safe_dump safe_loadproz{name} {command} [flags]zAUse {name} {command} --help for more information about a command.z&Try 'pro --help' for more information.z}Account: {account} Subscription: {subscription} Valid until: {contract_expiry} Technical support level: {tech_support_level} z$https://auth.contracts.canonical.comZtabularjsonyamlzua_logs.tar.gz z A new version is available: {version} Please run: sudo apt-get install ubuntu-advantage-tools to get the latest version with new features and bug fixes.csleZdZdddejdfeedfdd ZddZd fdd Z e e e ee efd d d Z ZS)UAArgumentParserN) base_desccstj||||d||_dS)N)progusageepilogformatter_class)super__init__r>)selfr?r@rArBr> __class__./usr/lib/python3/dist-packages/uaclient/cli.pyrDkszUAArgumentParser.__init__cCs,|tj|dkrt}|d|ddS)Nz&the following arguments are required: r<) print_usagesysstderrTRY_HELPexit)rEmessagerHrHrIerror|s zUAArgumentParser.errorFcsf|jrTt\}}t|}|r*t||}d|jg||_|jdtjj7_t j |ddS)Nr< file) r>r=_get_service_descriptionssortedjoin descriptionrZPRO_HELP_SERVICE_INFOmsgrC print_help)rErTshow_allnon_beta_services_descbeta_services_descZservice_descriptionsrFrHrIrZs zUAArgumentParser.print_helpreturnc Cst}d}g}g}tt}|D]}ztj||dd}Wntjk rZYq&YnX|d|d}|j rd |j }nd}t j |j ||j |dtdd d d } |jr|| q&|| q&||fS) Nz - {name}: {description}{url}namecfgr`Z presentedAsz ({}))r`rXurlz F)widthsubsequent_indentbreak_long_wordsbreak_on_hyphens)r UAConfigr Zget_available_resourcesrentitlement_factoryrEntitlementNotFoundErrorgetZ help_doc_urlformattextwrapfillrXr)Zis_betaappend) rbZservice_info_tmplr\r]Z resourcesresourceent_clsZpresentation_namerdZ service_inforHrHrIrUs@     z*UAArgumentParser._get_service_descriptions)NF)__name__ __module__ __qualname__argparseZ HelpFormatterrstrrDrQrZ staticmethodrrrU __classcell__rHrHrFrIr=jsr=csfdd}|S)z1Decorator asserting exclusive access to lock filecstfdd}|S)Nc s0tj|d|d|i|}W5QRX|S)N)rb lock_holderrb)rZSingleAttemptLock)rbargskwargsZretval)frzrHrInew_fsz0assert_lock_file..wrapper..new_frr}r~rzr}rIwrappersz!assert_lock_file..wrapperrH)rzrrHrrIassert_lock_files rcstfdd}|S)zDecorator asserting root usercs tstn ||SdSN)rwe_are_currently_rootrZNonRootUserError)r{r|rrHrIr~s zassert_root..new_frrrHrrI assert_rootsrcstfdd}|S)z>Decorator to verify if correct params are used for json formatcsR|s|f||S|jdkr>|js>tj}tj|j|jdn|f||SdS)Nr:rYmsg_code)rm assume_yesrZJSON_FORMAT_REQUIRE_ASSUME_YESrUserFacingErrorrYr`)cmd_argsr{r|rYrrHrIr~s z&verify_json_format_args..new_frrrHrrIverify_json_format_argss rcsfdd}|S)zDecorator asserting attached config. :param msg_function: Optional function to generate a custom message if raising an UnattachedError cstfdd}|S)Ncs`t|jsLr@t|dd}t|dd}|||d}t|}nt}||fd|i|S)Ncommandrcservice)r service_namesrbrb)r$ is_attachedgetattrrZUnattachedError)r{rbr|rrrY exception)r} msg_functionrHrIr~s    z/assert_attached..wrapper..new_frrrrrIrsz assert_attached..wrapperrH)rrrHrrIassert_attacheds rcstfdd}|S)z&Decorator asserting unattached config.cs4t|jr t|jjdd|fd|i|S)Nr`rcrb)r$rrZAlreadyAttachedErrormachine_token_fileZaccountrlr{rbr|rrHrIr~s  z"assert_not_attached..new_frrrHrrIassert_not_attachedsrcCsFd|_d|_|jdddd|jddgd d d |jd d ddd|S)z5Build or extend an arg parser for the api subcommand.apiCalls the Client API endpoints. endpoint_pathZendpointzAPI endpoint to call)metavarhelpz--argsoptions*z;Options to pass to the API endpoint, formatted as key=value)destdefaultnargsrz--datadatarcz,arguments in JSON format to the API endpoint)rrr)r?rX add_argumentparserrHrHrI api_parsers*rcCs*d|_d|_tjt|jd|_d|j_|S)z9Build or extend an arg parser for auto-attach subcommand. auto-attachz5Automatically attach on an Ubuntu Pro cloud instance.r`rFlags)r?rX USAGE_TMPLrmNAMEr@ _optionalstitlerrHrHrIauto_attach_parser5s rcCs2d|_d|_tjt|jd|_|jdddd|S)z=rZasetz/Set and apply Ubuntu Pro configuration settingsrkey_value_pairzKkey=value pair to configure for Ubuntu Pro services. Key must be one of: {}, r) rrmrr@r?rXrrrrWr UA_CONFIGURABLE_KEYSrrHrHrIconfig_set_parseras  rcCsLtjtd|d|_d|_d|_|jdddtj ddd |j _ |S) zrunsetz&Unset Ubuntu Pro configuration settingrz?configuration key to unset from Ubuntu Pro services. One of: {}r)rrr) rrmrr@r?rXrrWr rrrrrHrHrIconfig_unset_parserus rcCsd}tjtd|d|_||_d|_d|j_|jdddd }|j d d d }|j t d t ||d|j ddd }|j t d t||d|j ddd }|j td t||d|S)z4Build or extend an arg parser for config subcommand.r z {} rzManage Ubuntu Pro configurationrAvailable Commandsrrcrrrrz,show all Ubuntu Pro configuration setting(s)ractionrsetz$set Ubuntu Pro configuration settingrz&unset Ubuntu Pro configuration setting)rrmrr@r?rXrradd_subparsers add_parser set_defaultsaction_config_showraction_config_setraction_config_unsetr)rr subparsersZ parser_showZ parser_setZ parser_unsetrHrHrI config_parsers@      rcCstjtdd|_tj|_d|_dtj }|dd|_ d|j _ |j dd d td |j d d ddd|j dtddd|j ddddgddd|S)z4Build or extend an arg parser for attach subcommand.zattach rattachz@Attach this machine to Ubuntu Pro with a token obtained from: {}rRzWhen running this command without a token, it will generate a short code and prompt you to attach the machine to your Ubuntu Pro account using a web browser.rtokenrz0token obtained for Ubuntu Pro authentication: {}rz--no-auto-enableZ store_false auto_enablez4do not enable any recommended services automatically)rrrz--attach-configrzKuse the provided attach config file instead of passing the token on the cli)typer--formatstoreclir:4output enable in the specified format (default: cli)rchoicesrr)rrmrr@rvRawDescriptionHelpFormatterrBr?r BASE_UA_URLrXrrrUA_AUTH_TOKEN_URLZFileType)rr>rHrHrI attach_parsersP rcCsVtjtdd|_d|_d|_d|j_|jddd|jd d d d |jd d dd |S)z1Build or extend an arg parser for fix subcommand.z"fix |rfixzLInspect and resolve CVEs and USNs (Ubuntu Security Notices) on this machine.rsecurity_issuezwSecurity vulnerability ID to inspect and resolve on this system. Format: CVE-yyyy-nnnn, CVE-yyyy-nnnnnnn or USN-nnnn-ddrz --dry-run store_truezrIf used, fix will not actually run but will display everything that will happen on the machine during the command.rrz --no-relatedz`If used, when fixing a USN, the command will not try to also fix related USNs to the target USN. rrmrr@r?rXrrrrrHrHrI fix_parsers.  rcCsxd|_tj|_td|_|jddddd|}|jdd d d |jd d d d |jddd d |jddd d |S)z=Build or extend an arg parser for security-status subcommand.security-statusa] Show security updates for packages in the system, including all available Expanded Security Maintenance (ESM) related content. Shows counts of how many packages are supported for security updates in the system. If called with --format json|yaml it shows a summary of the installed packages based on the origin: - main/restricted/universe/multiverse: packages from the Ubuntu archive - esm-infra/esm-apps: packages from the ESM archive - third-party: packages installed from non-Ubuntu sources - unknown: packages which don't have an installation source (like local deb packages or packages for which the source was removed) The output contains basic information about Ubuntu Pro. For a complete status on Ubuntu Pro services, run 'pro status'. rzFormat for the output)r:r;textr)rrrz --thirdpartyz7List and present information about third-party packagesr)rrz --unavailablez7List and present information about unavailable packagesz --esm-infraz5List and present information about esm-infra packagesz --esm-appsz4List and present information about esm-apps packages) r?rvrrBrndedentrXrZadd_mutually_exclusive_group)rgrouprHrHrIsecurity_status_parsersBrcCsVd|_d|_tjtdd|_d|j_tj |_ t d|_|j ddd d gd d d d|S)z5Build or extend an arg parser for refresh subcommand.refreshz9Refresh existing Ubuntu Pro contract and update services.z"refresh [contract|config|messages]rra Refresh three distinct Ubuntu Pro related artifacts in the system: * contract: Update contract details from the server. * config: Reload the config file. * messages: Update APT and MOTD messages related to UA. You can individually target any of the three specific actions, by passing it's target to nome to the command. If no `target` is specified, all targets are refreshed. targetr r rrNzTarget to refresh.)rrrr)r?rXrrmrr@rrrvrrBrnrrrrHrHrIrefresh_parser:s( rcKs|jdkrZ|jrtq|jr*tq|jr|jdkrt t j t |dtjdnt tt |dddS)Nrr:T)Z sort_keysclsF)Zdefault_flow_styler)rmZ thirdpartyrZlist_third_party_packagesZ unavailableZlist_unavailable_packagesZ esm_infraZlist_esm_infra_packagesZesm_appsZlist_esm_apps_packagesprintr:dumpsZsecurity_status_dictrZDatetimeAwareJSONEncoderr7rrHrHrIaction_security_status]s2       rcKsDttj|js&d|j}t|tj||j|j |j d}|j S)NzYError: issue "{}" is not recognized. Usage: "pro fix CVE-yyyy-nnnn" or "pro fix USN-nnnn")rbZissue_iddry_run no_related) rematchrZCVE_OR_USN_REGEXrrmrrZfix_security_issue_idrr exit_code)r{rbr|rYZ fix_statusrHrHrI action_fix{s rcCsTtjtdd}||_d|_d|_d|j_|jdddd|jd d d d gd d d|S)z4Build or extend an arg parser for detach subcommand.detachrz-Detach this machine from Ubuntu Pro services.r --assume-yesrz;do not prompt for confirmation before performing the detachrrrrr:rrrrr@rHrHrI detach_parsers$rrbc Cstjtdd}||_d|_d|_d|j_|jdddd d t j |d d |jd dt t ddt dd|jdddd|S)z2Build or extend an arg parser for help subcommand.zhelp [service]rrz7Provide detailed information about Ubuntu Pro services. Argumentsrrrz-a service to view help output for. One of: {}rrrrrrrz1output help in the specified format (default: {})r--allr(Allow the visualization of beta servicesr) rrmrr@r?rX _positionalsrrrWrvalid_servicesSTATUS_FORMATSrrbr@rHrHrI help_parsers:  rc Cstjtdd}d|_||_d|_d|j_d|j_|j ddd d d t j |d d |j dddd|j dddd|j dddd|j ddddgddd|j dddd|S)z4Build or extend an arg parser for enable subcommand.zenable []rzEnable an Ubuntu Pro service.enablerrrr+z []rzDisable an Ubuntu Pro service.disablerrrrrz=the name(s) of the Ubuntu Pro services to disable. One of: {}rrrrrzrz9Output system related information related to Pro servicessystemrrrrcrreboot-requiredz#does the system need to be rebootedrr) rrmrr@rXr?rrrrraction_system_reboot_requiredreboot_required_parser)rrZparser_reboot_requiredrHrHrI system_parser!s" rcCs.tjtdd|_d|_tj|_t d|_ |S)Nzsystem reboot-requiredrr al Report the current reboot-required status for the machine. This command will output one of the three following states for the machine regarding reboot: * no: The machine doesn't require a reboot * yes: The machine requires a reboot * yes-kernel-livepatches-applied: There are only kernel related packages that require a reboot, but Livepatch has already provided patches for the current running kernel. The machine still needs a reboot, but you can assess if the reboot can be performed in the nearest maintenance window. ) rrmrr@r9rvrrBrnrrXrrHrHrIr5src Cstjtdd}||_d|_d|_tj|_t d|_|j ddddd |j d d t t d d t d d|j ddd dd|j ddddd|j _|S)z4Build or extend an arg parser for status subcommand.rrz6Output the status information for Ubuntu Pro services.u; Report current status of Ubuntu Pro services on system. This shows whether this machine is attached to an Ubuntu Advantage support contract. When attached, the report includes the specific support contract details including contract name, expiry dates, and the status of each service on this system. The attached status output has four columns: * SERVICE: name of the service * ENTITLED: whether the contract to which this machine is attached entitles use of this service. Possible values are: yes or no * STATUS: whether the service is enabled on this machine. Possible values are: enabled, disabled, n/a (if your contract entitles you to the service, but it isn't available for this machine) or — (if you aren't entitled to this service) * DESCRIPTION: a brief description of the service The unattached status output instead has three columns. SERVICE and DESCRIPTION are the same as above, and there is the addition of: * AVAILABLE: whether this service would be available if this machine were attached. The possible values are yes or no. If --simulate-with-token is used, then the output has five columns. SERVICE, AVAILABLE, ENTITLED and DESCRIPTION are the same as mentioned above, and AUTO_ENABLED shows whether the service is set to be enabled when that token is attached. If the --all flag is set, beta and unavailable services are also listed in the output. z--waitrFz Block waiting on pro to complete)rrrrrrz3output status in the specified format (default: {})rz--simulate-with-tokenZTOKENz1simulate the output status using a provided token)rrrrrrr)rrmrr@rXr?rvrrBrnrrrrrrrHrHrI status_parserOsJ% r)rbcmd_name subcmd_namecCsft|d}|dj|}|dj}||krb|dj|tdd|dS)Nrrz must be one of: {}r) get_parser_get_positional_actionsrkeysrZrrrmrW)rbrrr subparserZ valid_choicesrHrHrI_print_help_for_subcommands rT) update_statuscCs|j}|dk r|}|\}}|stt|j|dk rt|tr|jdk rt|jj tj |jj |jj|jdn t |j|rt j |d|S)a=Perform the disable action on a named entitlement. :param entitlement_name: the name of the entitlement to enable :param cfg: the UAConfig to pass to the entitlement :param assume_yes: Assume a yes response for any prompts during service enable @return: True on success, False otherwise N error_msg error_coderr)Zenabled_variantr eventservice_failedr` isinstancer.rPinforYrQservice_processed ua_statusr) entitlementrbrrvariantretreasonrHrHrI_perform_disables$      r&cKst|d|jddS)zGPerform the config action. :return: 0 on success, 1 otherwise r rrrrrrrHrHrI action_configs r)cKs|jrr|jtjkrPd|jdtj}|dd}ttj |t d|dt dj|jt ||jdd d St td d tjDd }d|d}tjD]}t |j|t ||dd q|js|jr|js|jrt ddS)zPerform the 'config show' action optionally limit output to a single key :return: 0 on success :raise UserFacingError: on invalid keys z '{}' must be one of: {}r:rJ )rerfz {key} {value}N)rvaluercSsg|] }t|qSrH)len).0xrHrHrI sz&action_config_show..z{key: |j+}|r\t!t"j#j dddt$|t%j,|| d|_*d|_+n|dkrz$t-| } | dkrt d |Wn8t k r| t!dt d || YnXn2|dkr| .dk} | r t/0|n t1j23t4||| dS)zMPerform the 'config set' action. @return: 0 on success, 1 otherwise r)configure_livepatch_proxy)configure_snap_proxyrr r=z% Expected = but found: {} must be one of: {}r http_proxy https_proxy_rrJzpro scoped aptz global apt)Z current_proxyZprevious_proxyNhttps protocol_typeglobal_)Zupdate_messaging_timerZmetering_timerzInvalid interval for {}rczECannot set {} to {}: for interval must be a positive integer.r true)5uaclient.livepatchr8 uaclient.snapr9rrrrsplit ValueErrorrZrrrmr rrWrZPROXY_VALIDATION_SNAP_HTTP_URLZPROXY_VALIDATION_SNAP_HTTPS_URLZvalidate_proxyr livepatchLivepatchEntitlementapplication_statusr-ENABLEDua_scoped_proxy_optionsZPROXY_VALIDATION_APT_HTTP_URLZPROXY_VALIDATION_APT_HTTPS_URLboolr4r5rrZWARNING_APT_PROXY_OVERWRITEconfigure_apt_proxyr%UACLIENT&deprecated_global_scoped_proxy_optionsglobal_scoped_proxy_optionsWARNING_APT_PROXY_SETUPr6r7GLOBALintlowerr update_apt_newsr2Zapt_news_contents_filedeletesetattr)r{rbr|r8r9rrrset_key set_valuerBZ validate_urlr"livepatch_statusr?Z unset_currentrHrHrIrs                        rc Ksjddlm}ddlm}ddlm}|jtjkr~t |d}| dj d}| dj d}| t dd tj|jd kr|jd d} || d tj|} | \} } | tjkr|| d n|j|jkrt||j|jd nh|j|j|jkrX|j|jkrFd|jkr"dnd} ttj j| d d|j|_t||j!|jd t"||jd dS)zOPerform the 'config unset' action. @return: 0 on success, 1 otherwise r)r%)unconfigure_livepatch_proxy)unconfigure_snap_proxyrr rr;rr<r?rANr@rrC)# uaclient.aptr%rEr]rFr^rr rrrrrZrrrmrWrGrrIrJrKr-rLrMrOrPrQrRrrrrSrTrY) r{rbr|r%r]r^rrrrBr"r\r?rHrHrIrsL              rcCs|t||d\}}|r>|r>tj}|jd||d|dd}n:|rXtjjd|d}n tjj|d|dtjd}|S)zGenerates a custom message for enable/disable commands when unattached. Takes into consideration if the services exist or not, and notify the user accordingly.)namesrbrrc) valid_service operationinvalid_service service_msg)razSee {}rbrcrd) r,rZ!MIXED_SERVICES_FAILURE_UNATTACHEDrmrWZ VALID_SERVICE_FAILURE_UNATTACHEDZINVALID_SERVICE_OP_FAILUREr r)rrrbentitlements_foundentitlements_not_foundrYrHrHrI%_create_enable_disable_unattached_msgs,  rhz pro disablec Kst|dg}t||\}}d}|D]4}tj||d}|||jd} |t| ||jdM}q"|rddtj|ddd} d tj | d d d d } t j d d|| dt |} | t|rdSdS)zbPerform the disable action on a list of entitlements. @return: 0 on success, 1 otherwise rTrarzTry rrb allow_beta.r<PF)rergrhr rerr1)rr,rrjrr&rWrrnZwraprZInvalidServiceToDisableErrorr UAContractClientupdate_activity_tokenrprocess_events) r{rbr|r`rfrgr$ent_namerrentZ valid_namesrdcontract_clientrHrHrIaction_disablesD  rtz pro enablec Ks$t|dd}|j}|r(|r(tjdddttjzt |Wn:tj tj fk r|t j tjddtjtjdYnXt|d g}t||\}}d}|D]&} ztj|| |j|j|||d d \} } tj|d | sB| d k rBt| trB| jd k r(t| jjtj| jj| jj| d| jtj krr|!| n0| rVtj"| dn| sr| d krrtj#| d|| M}Wqtj k r} z(t| jtj| j| j$| dd}W5d } ~ XYqXq|rt%|||jd} t&|tj | j| jdt'|}|(t)|r dSdS)z^Perform the enable action on a named entitlement. @return: 0 on success, 1 otherwise r#rcrr)Zoption1Zoption2T)exc_info)Z warning_msgr extra_args)rrk access_onlyr#rvrNr)rFrjrrr1)*rrwrZInvalidOptionCombinationrrrZREFRESH_CONTRACT_ENABLEr rUrlErrorrLOGdebugREFRESH_CONTRACT_FAILUREwarningr,renable_entitlement_by_namerZbetarlr!rrr/rPrYrQr`r%r0ZIS_BETArpr rrr*Zservices_failedrnrorp)r{rbr|r#rwr`rfrgr$rqent_retr%erYrsrHrHrI action_enables            rz pro detachr^cKs2t||jd}|dkr&ttt|S)zXPerform the detach action for this machine. @return: 0 on success, 1 otherwise rir)_detachrr startrstoprrp)r{rbr|r$rHrHrI action_detachVs r)rbrr_c Csg}t|D]\}ztj||d}Wntjk r<Yq YnX|||d}|jdd\}}|r ||q |rt|dkr~dnd}t d ||D]}t d |j qt j |d sdS|D]}t|||d d q||jt|t tjd S)a7Detach the machine from the active Ubuntu Pro subscription, :param cfg: a ``config.UAConfig`` instance :param assume_yes: Assume a yes answer to any prompts requested. In this case, it means automatically disable any service during detach. @return: 0 on success, 1 otherwise ra)rbrT)Zignore_dependent_servicesr1srcz,Detach will disable the following service{}:z {}riF)rrr)r+rrjrrkZ can_disablerpr-rrrmr`rZprompt_for_confirmationr&Z delete_cacherrXr6rZDETACH_SUCCESS) rbrZ to_disablerqrrrrr$r?suffixrHrHrIrgs4        r)rbr_cCsd}|jr&|jdidid}|r@ttjj|dn ttjt t |t |\}}t |}tt|tdS)NZmachineTokenInfoZ contractInfor`) contract_name)Z machine_tokenrlrrrZATTACH_SUCCESS_TMPLrmZATTACH_SUCCESS_NO_CONTRACT_NAMEr rZcleanuprrr!format_tabularrhandle_unicode_charactersrp)rbrrZ_retoutputrHrHrI_post_cli_attachs(    rcKsV|jr$|jr$tj}tj|j|jdt|j |j|j|}t | |j dkrRdSdS)NrZsuccessrr1) rrrZ API_ERROR_ARGS_AND_DATA_TOGETHERrrrYr`rrrZto_jsonresult)r{rbr|rYrrHrHrI action_apis   rcKsPztt|tjjdWn&tjk r>tt j j YdSXt |dSdS)N)rbmoder1r) rrrEventLoggerModeZCLIrrxrrrZATTACH_FAILURErYrrrHrHrIaction_auto_attachs rc Ks|jdkrtjd|jdttjt|d}tdtjj|j dt |j d}zt ||d}WnLtj k r}z,ttjt|j d}t||d|W5d}~XYnXtdtj|jS) Nr:r)Zparamr,rr<) user_code)Z magic_token)rrb)rmrZMagicAttachInvalidParamrrrZCLI_MAGIC_ATTACH_INITrZCLI_MAGIC_ATTACH_SIGN_INrr!rr"ZMagicAttachTokenErrorZCLI_MAGIC_ATTACH_FAILEDrr ZCLI_MAGIC_ATTACH_PROCESSINGZcontract_token)r{rbr|Z initiate_respZ wait_optionsZ wait_resprZrevoke_optionsrHrHrI _magic_attachs4      rz pro attachc Ks|jr$|jr$tjtjjtjjdn|jsB|jsBt||d}d}nj|jrT|j}d}nXzt t |j}Wn6t k r}ztj |jj|jdW5d}~XYnX|j}|j}|jo|dk}ztj|||dWn tjk rtYnXd}|dk r|jrt||\} } | D]z} tj|| ddd\} } | sd}| dk rt| tr| jdk rt| jjtj| jj| jj| d n t| q| rt| |dd }tj|jtjd tj|j|jd d}t !|}|"t#||SdS) Nrr)Z config_namerQ)r allow_enablerT)rrkr1rrj) file_typerr)$r attach_configrrrZATTACH_TOKEN_ARG_XOR_CONFIGrYr`rr'Z from_dictr8r(ZAttachInvalidConfigFileErrorZenable_servicesrrZattach_with_tokenrxZ AttachErrorr,r}rr/rPrrrQr r*rLrMr rnror)r{rbr|rZenable_services_overriderrrr$foundZ not_foundr`r~r%rYrsrHrHrI action_attachs     rc Ks|jpt}tz}t||z*t|d}|j|ddW5QRXWn<t k r}zt |WYW5QRdSd}~XYnXW5QRXdS)Nzw:gzzlogs/)Zarcnamer1r) rUA_COLLECT_LOGS_FILEtempfileZTemporaryDirectoryrZ collect_logstarfileopenaddPermissionErrorryrQ)r{rbr|Z output_fileZ output_dirZresultsrrHrHrIaction_collect_logs3s    ,rcCst}tttjtjtddtjtdd|d}|jdddd|jdd t d td d |j _ |j d ddd}d|_|jddd}t||jtd|jddd}t||jtd|jddd}t||jtd|jddd}t||jtd|jddd}t||jtd|jddd} t| | jtd|jd d!d} t| |d"| jtd|jd#d$d} t| |d"| jt d|jd%d&d} | jt!dt"| |jd'd(d} t#| | jt$d|jd)d*d}t%||d"|jt&d|jd+d,d}|jt'dt(||jd-d.d}|jt)dt*||jd d td}|jt+d|jd/d0d}|jt,dt-||S)1Nz r)r?rBr@rAr>z--debugrz&show all debug log messages to consolerz --versionrzshow version of {})rrrrrrrcrTrz1attach this machine to an Ubuntu Pro subscriptionrrrrrz+automatically attach on supported platformsrz&collect Pro logs and debug informationr z/manage Ubuntu Pro configuration on this machinerz3remove this machine from an Ubuntu Pro subscriptionr z5disable a specific Ubuntu Pro service on this machinerrz4enable a specific Ubuntu Pro service on this machinerz=check for and mitigate the impact of a CVE/USN on this systemrz.list available security updates for the systemrz3show detailed information about Ubuntu Pro servicesrzrefresh Ubuntu Pro servicesrz)current status of all Ubuntu Pro servicesr z/show system information related to Pro services).__doc__r=rrvrrrm EPILOG_TMPLrr get_versionrrrZrequiredrrrrrrrrrrrr)rrr rtrrrrrrr action_helpaction_refreshr action_statusr print_version action_systemr)rbr>rrZ parser_attachZ parser_apiZparser_auto_attachZparser_collect_logsZ parser_configZ parser_detachZparser_disableZ parser_enableZ parser_fixZparser_security_statusZ parser_helpZparser_refreshZ parser_statusZparser_versionZ parser_systemrHrHrIr@s                    rc Ks|s t}|r|jnd}|r$|jnd}tjjj}tj |||d\}}t |d|k}|r|j r|r|d|krt j dddtdtj |||d\}}qdt dt |tj||d} t t| t |S) NF)simulate_with_tokenr[Zexecution_statusrlrc)endr1r[)r riallrr!ZUserFacingConfigStatusZACTIVEr,rrrNwaitrrtimesleepZset_output_contentrrrrp) r{rbr|r[rZ active_valuerr$Z config_activerrHrHrIrs4       rcKst|d|jddS)zGPerform the system action. :return: 0 on success, 1 otherwise r r'rr(rrHrHrIrs rcKst|}t|jdS)Nr)r#rrZreboot_required)r{rbr|rrHrHrIr s r cKsttdSr)rrr)_argsrbr|rHrHrIrsrc Cshz |WnLtk rX}z.tt|W5QRXttj W5d}~XYnXt tj dSr) Zprocess_config RuntimeErrorrdisable_log_to_consoleryrrrrZREFRESH_CONFIG_FAILURErZREFRESH_CONFIG_SUCCESS)r{rbexcrHrHrI_action_refresh_configs  rc Cslzt|WnNtjk r\}z.tt|W5QRXtt j W5d}~XYnXt t j dSr) r rrrxrrryrrrr{rZREFRESH_CONTRACT_SUCCESSrrbrrHrHrI_action_refresh_contracts rc Cs~z"t|t|jr t|WnLtk rn}z.tt|W5QRXt t j W5d}~XYn Xt t jdSr)r6r5r rW ExceptionrrryrrrrZREFRESH_MESSAGES_FAILURErZREFRESH_MESSAGES_SUCCESSrrHrHrI_action_refresh_messagess rz pro refreshcKsj|jdks|jdkrt|||jdks2|jdkrHt||ttj|jdks\|jdkrft||dS)Nr r rr)rrrr1remover3ZCONTRACT_REFRESH_WARNINGrrrHrHrIrs    r)rbscoperZr[r_cCsR|tjkr|j}|j}n|tjkr.|j}|j}d|kr<|}n|}t|||ddS)zS Handles setting part the apt proxies - global and uaclient scoped proxies r@)r=r>Z proxy_scopeN)r%rTr4r5rPr6r7r&)rbrrZr[r=r>rHrHrIrO%s  rOcKs|j}|j}|s&t|dj|ddS|s2t}t||}|jdkrXt t |n&| D]\}}t d| |q`dS)Nrrrr:z{}: {} )rrrrZr rir!rrmrr:ritemsr)r{rbr|rr[Z help_responserr,rHrHrIr=s  rcCsD|r|jdkst|dddkr"dSt}|r@ttj|ddS)Nrrmrcr:r;)r)rrrZcheck_for_new_versionryr|NEW_VERSION_NOTICErm)rZ new_versionrHrHrI_warn_about_new_versionSsrcCsF|jdkrBtjsBt|dr,|jdkr,dSttj j|jddS)z4Warn users that the user readable output may change.)rrrmrN)r) rrLstdoutisattyhasattrrmryr|rZWARNING_HUMAN_READABLE_OUTPUTrrHrHrI_warn_about_output_redirectioncsrc Cs|dkrt}|j}ts&t}t|tr8| }t }|sNt d}| ||tg|_t tj}||| ||d||t|}|s|jjddd|jddt |}|t| ||d||dS) zSetup console logging and debug logging to log_file It configures the pro client logger. If run as non_root and cfg.log_file is provided, it is replaced with another non-root log file. NZ ubuntuproz upro-consoleT)parentsexist_oki)rz upro-file)r rilog_filerrpro_logZget_user_log_filerrwupperZ LogFormatterlogging getLoggerZsetLevelZ addFilterZRedactionFilterZhandlersZ StreamHandlerrLrMZ setFormatterZset_nameZ addHandlerpathlibPathexistsparentmkdirZtouchZ FileHandlerr4) console_level log_levelrZloggerrbZconsole_formatterZconsole_handlerZ log_file_pathZ file_handlerrHrHrI setup_loggingrs6              rcCsT|jdkrPt|jt|drP|jdkr8ttjj|jdkrPttjj dS)z3Set the right event mode based on the args provided)rrrr rrmr:r;N) rrZ set_commandrrmset_event_moderrZJSONZYAMLrrHrHrIrs     rcsfdd}|S)Nc s2z ||WStk r`ttdW5QRXtdtjdt t dYnt j k rl}zdt |krtj}tdrtj}|j|jd}tj|j|jdtj|jtjd npt8|j|d }|jrtj}ntj}t|jf|W5QRXtj}tj|j|jdtj|jtjd t ttt dW5d}~XYnt jk r}zntj}tdrtj}|j|jd}tj|j|jdtj|jtjd t ttt dW5d}~XYn2t j k r}ztt|jW5QRXtj|j|j!|j"d tjd |jtjd t#|t j$stt ttt |j%W5d}~XYnt&k r,}zpttd W5QRXt tjtj'jtjd tjt(|dt |ddttt dW5d}~XYnXdS)NKeyboardInterruptzInterrupt received; exiting.rSr1ZCERTIFICATE_VERIFY_FAILEDzca-certificates)rdr)Zinfo_msgr)rdrQ)rradditional_infoz{}z&Unhandled exception, please file a bugrYr)rZ error_type))rrrryrQrrLrMrZclear_lock_file_if_presentrOrrxrwrZ&SSL_VERIFICATION_ERROR_CA_CERTIFICATESrZ is_installedZ%SSL_VERIFICATION_ERROR_OPENSSL_CONFIGrmrdrrYr`rZ$LOG_CONNECTIVITY_ERROR_WITH_URL_TMPLZLOG_CONNECTIVITY_ERROR_TMPLrZCONNECTIVITY_ERRORrprZPycurlCACertificatesErrorrrrrZ LockHeldErrorrrZUNEXPECTED_ERRORr)r{r|rZtmplrYZmsg_argsZmsg_tmplrfuncrHrIrs         z#main_error_handler..wrapperrH)rrrHrrImain_error_handlers Vrc Cshttjtjdtjd|s$tj}t}t |d}|dd}|s`| t t t dd|kr|d}|d|}||dd}n|}g}|j|d}t||j}|j} tj|| d|j} |jrtjntj} t| | |jtd|t|W5QRXd d ttD} | rDtd | t ||j!|||d } t"|| S) Nrrrr1z--)r{r<zExecuted with sys.argv: %rcSsg|]\}}d||qS)z{}={})rm)r.kvrHrHrIr00szmain..z'Executed with environment variables: %r)rbrv)#rrINFOr ZCONFIG_DEFAULTSrLargvr rirrKrrNrOindex parse_argsrr=r>rZconfigure_web_proxyrrzDEBUGrryrrZwarn_about_invalid_keysrVZget_pro_environmentrrrr)Zsys_argvrbrZ cli_argumentsZdouble_dash_indexZ pro_cli_argsrvr{r=r>rrZpro_environmentZ return_valuerHrHrImainsP       r__main__)N)N)NN)N)NN)N)rrvr:rrrrLrrrnr functoolsrtypingrrrZuaclientrrr r r r r rrrrrrrrrrrr!rrrZuaclient.api.apirZ2uaclient.api.u.pro.attach.auto.full_auto_attach.v1rrZ+uaclient.api.u.pro.attach.magic.initiate.v1rZ)uaclient.api.u.pro.attach.magic.revoke.v1rr Z'uaclient.api.u.pro.attach.magic.wait.v1r!r"Z5uaclient.api.u.pro.security.status.reboot_required.v1r#Z(uaclient.api.u.pro.status.is_attached.v1r$r_r%r&Zuaclient.data_typesr'r(Zuaclient.defaultsr)Zuaclient.entitlementsr*r+r,Z(uaclient.entitlements.entitlement_statusr-r.r/r0Zuaclient.filesr1r2Zuaclient.files.noticesr3Z uaclient.logr4Zuaclient.timer.update_messagingr5r6Z uaclient.yamlr7r8rrrrNZSTATUS_HEADER_TMPLrrrZ BLUE_INFOrZget_event_loggerrrZreplace_top_level_logger_namersryArgumentParserr=rrrrrrrrrwrrrrrrrrrrrrirrr rrrrr&r)rrrrhrtrrUrrNrrrrrrrrrrr rrrrrrOrrrrrrrrOrHrHrHrIs 8           ^     2'9#'4$P & ) } /,R , !H }      / Z 9