File: //usr/lib/python3/dist-packages/sos/policies/distros/__pycache__/redhat.cpython-310.pyc
o
-�_gW\ � @ sL d dl Z d dlZd dlZd dlZd dlmZ d dlmZ d dlm Z m
Z
m Z m Z m
Z
mZmZmZmZmZ d dlmZmZmZ d dlmZ d dlmZ d dlm Z d d l m Z m Z m Z d d
l!m"Z# zd dl$Z$d Z%W n e&ys d Z%Y nw d
Z'G dd� de�Z(dZ)dZ*dZ+G dd� de(�Z,G dd� de,�Z-G dd� de,�Z.G dd� de(�Z/dS )� N)�DeviceAuthorizationClass)� RedHatPlugin)
� RHEL_PRESETS�RHV�RHEL�CB�RHOSP�RHOCP�RH_CFME� RH_SATELLITE�AAPEDA�
AAPCONTROLLER)� LinuxPolicy�ENV_HOST_SYSROOT�
OS_RELEASE)�RpmPackageManager)�FlatpakPackageManager)�MultiPackageManager)�bold�
convert_bytes�TIMEOUT_DEFAULT)�_sosTFzRed Hat Enterprise Linuxc s~ e Zd ZdZddgZdZdZdZdZdZ dZ
d Z d
Z d Z
d Z
d� fdd� Ze� fdd��Zdd� Zdd� Zdd� Z� ZS )� RedHatPolicy�Red Hat)zDistribution Websitezhttps://www.redhat.com/)zCommercial Supportzhttps://access.redhat.com/z/var/tmpF�friendlyN�podman�sosz /usr/sbinzVhttps://sso.redhat.com/auth/realms/redhat-external/protocol/openid-connect/auth/devicezPhttps://sso.redhat.com/auth/realms/redhat-external/protocol/openid-connect/tokenTc s� t � j||||d� d| _tttg| j|d�| _| jt g7 _| jj
| _ | j s3t j
�d� t �d� | �| j �| _| jrAd| _nd| _| jtjd 7 _| jtjd 7 _| js_| �� | �� d S )
N��sysroot�init�
probe_runtime� remote_execF)�primary� fallbacks�chrootr! z'Could not obtain installed package list� z /usr/sbin:/usr/bin:/root/binz'/sbin:/bin:/usr/sbin:/usr/bin:/root/binz/usr/local/binz/usr/local/sbin)�super�__init__�usrmover r r r �package_manager�valid_subclassesr �packages�pkgs�sys�stderr�write�exit�
check_usrmove�PATH�os�pathsepr! �
set_exec_path� load_presets��selfr r r r! �� __class__� �=/usr/lib/python3/dist-packages/sos/policies/distros/redhat.pyr' 8 s2
��
zRedHatPolicy.__init__c sz | t urtt | ��|� d S |�d� ttttd�}|�� D ] \}}t d|� ��}|jdd�|d�|j
d��dd � q d S )
Nz�This policy is a building block for all other Red Hat family distributions. You are likely looking for one of the distributions listed below.
)�centos�rhel� redhatcoreos�fedoraz policies.� z>8z<35z<30F)�newline) r r& �display_distro_help�add_text� CentOsPolicy�
RHELPolicy�RedHatCoreOSPolicy� FedoraPolicy�itemsr �os_release_name)�cls�section�subs�subc�value�sublnr9 r; r< rC Z s$ ����z RedHatPolicy.display_distro_helpc C s8 d|vrt j�d�ot j�d�S |d d }|d dkS )aq Test whether the running system implements UsrMove.
If the 'filesystem' package is present, it will check that the
version is greater than 3. If the package is not present the
'/bin' and '/sbin' paths are checked and UsrMove is assumed
if both are symbolic links.
:param pkgs: a packages dictionary
�
filesystemz/binz/sbin�versionr �3)r3 �path�islink)r8 r, �filesys_versionr; r; r< r1 s s
zRedHatPolicy.check_usrmovec C s2 g }dd� }| j r|D ] }|�||�� q |S |S )a2 Mangle paths for post-UsrMove systems.
If the system implements UsrMove, all files will be in
'/usr/[s]bin'. This method substitutes all the /[s]bin
references in the 'files' list with '/usr/[s]bin'.
:param files: the list of package managed files
c S s: ddg}| |v r| t j�d| dd � �fS t�dd| �fS )Nz/bin/rpmz
/bin/mailxz/usrr% z (^)(/s?bin)z\1/usr\2)r3 rT �join�re�sub)rT �
skip_pathsr; r; r< �transform_path� s z8RedHatPolicy.mangle_package_path.<locals>.transform_path)r( �extend)r8 �files�pathsr[ �fr; r; r< �mangle_package_path� s z RedHatPolicy.mangle_package_pathc C s |s| j S |S �N)�_tmp_dir)r8 � opt_tmp_dirr; r; r< � get_tmp_dir� s zRedHatPolicy.get_tmp_dir�NNTN)�__name__�
__module__� __qualname__�vendor� vendor_urlsrb �
_in_container� name_pattern�
upload_url� upload_user�default_container_runtime� sos_pkg_name� sos_bin_path�client_identifier_url�token_endpointr' � classmethodrC r1 r` rd �
__classcell__r; r; r9 r< r % s. ��"r a[
Any information provided to %(vendor)s will be treated in accordance with the published support policies at:
%(vendor_urls)s
The generated archive may contain data considered sensitive and its content should be reviewed by the originating organization before being passed to any third party.
No changes will be made to system configuration.
z https://api.access.redhat.comz sftp://sftp.access.redhat.comc s� e Zd ZdZdZdZeZdZe de
d �Z e Z
dZdZd Z
d'� fd d � Zd
d� Zdd� Zdd� Zdd� Zd(dd�Zdd� Zdd� Zdd � Zd)� fd d � Zd d � Z� fd!d"�Z d#d$� Z d%d&� Z � Z S )*rF at
The RHEL policy is used specifically for Red Hat Enterprise Linux, of
any release, and not forks or derivative distributions. For example, this
policy will be loaded for any RHEL 8 installation, but will not be loaded
for CentOS Stream 8 or Red Hat CoreOS, for which there are separate
policies.
Plugins activated by installed packages will only be activated if those
packages are installed via RPM (dnf/yum inclusive). Packages installed by
other means are not considered by this policy.
By default, --upload will be directed to using the SFTP location provided
by Red Hat for technical support cases. Users who provide login credentials
for their Red Hat Customer Portal account will have their archives uploaded
to a user-specific directory.
If users provide those credentials as well as a case number, --upload will
instead attempt to directly upload archives to the referenced case, thus
streamlining the process of providing data to technical support engineers.
If either or both of the credentials or case number are omitted or are
incorrect, then a temporary anonymous user will be used for upload to the
SFTP server, and users will need to provide that information to their
technical support engineer. This information will be printed at the end of
the upload process for any sos report execution.
r z/etc/redhat-releaser> a This command will collect diagnostic and configuration information from this %(os_release_name)s system and installed applications.
An archive containing the collected information will be generated in %(tmpdir)s and may be provided to a %(vendor)s support representative.
�%(vendor_text)s
�postNi @Tc s" t � j||||d� | �t� d S �Nr )r& r' �register_presetsr r7 r9 r; r< r' � s
�zRHELPolicy.__init__c C s< | j d jr| j�td�� | js t| _| j�d� d S d S )N� cmdlineoptszVThe option --upload-user has been deprecated in favour of device authorization in RHEL�&No case id provided, uploading to SFTP)�commonsrn �ui_log�info�_�case_id� RH_SFTP_HOSTrm �r8 r; r; r< �prompt_for_upload_user� s ��z!RHELPolicy.prompt_for_upload_userc C s$ | j d jr| j�td�� d S d S )Nrz zVThe option --upload-pass has been deprecated in favour of device authorization in RHEL)r| � upload_passr} r~ r r� r; r; r< �prompt_for_upload_password� s
��z%RHELPolicy.prompt_for_upload_passwordc C sf | j r| j S | jd j r| jd j S | jd jdkr tS | jd js*| j�d� tS d}t|| j S )Nrz �sftpr{ z /support/v1/cases/%s/attachments)rm r| �upload_protocolr� r� r} r~ � RH_API_HOST)r8 � rh_case_apir; r; r< �get_upload_url� s zRHELPolicy.get_upload_urlc C s d| j � �}d|iS )NzBearer �
Authorization)�
_device_token)r8 �str_authr; r; r< �_get_upload_https_auth s z!RHELPolicy._get_upload_https_authc C sh d|j �d�d || �� fi}t| j| j�}|�� | _| j� d| �
� � �� t j | �
� || �� |td�S )z�If upload_https() needs to use requests.post(), use this method.
Policies should override this method instead of the base upload_https()
:param archive: The open archive file object
�file�/����/Device authorized correctly. Uploading file to )r] �headers�verify�timeout)�name�split�_get_upload_headersr rr rs �get_access_tokenr� r} r~ �get_upload_url_string�requestsrw r� r� r )r8 �archiver� r] �RHELAuthr; r; r< �_upload_https_post s ���
� �z RHELPolicy._upload_https_postc C s | � � �t�r ddd�S i S )N�falsezno-cache)� isPrivatez
cache-control)r� �
startswithr� r� r; r; r< r� $ s
z RHELPolicy._get_upload_headersc C s0 | � � �t�r dS | � � �t�rdS | �| j�S )NzRed Hat Customer PortalzRed Hat Secure FTP)r� r� r� r� �_get_obfuscated_upload_urlrm r� r; r; r< r� ) s
z RHELPolicy.get_upload_url_stringc C s@ | j �d�d }| jr| j� d|� �}| jr tj�| j|�}|S )z�The RH SFTP server will only automatically connect file uploads to
cases if the filename _starts_ with the case number
r� r� r )�upload_archive_namer� r� �upload_directoryr3 rT rW )r8 �fnamer; r; r< �_get_sftp_upload_name0 s z RHELPolicy._get_sftp_upload_namec
s� t �d�d | �� vrt� �� S tstd��d}d}| jsJz t| j | j
�}W n tyD } zdt |�v r:| j �
d� W Y d}~n
d}~ww |�� | _| jrX| j �
d| �� � �� td }d}| jr�| �� } tj|| d d
�}|jd kr�t�|j�d }t�|j�d
}nT| j �d|j� d|�� � �� | j �d� n>ddi}
tj|t�|
�d d�} | jd kr�t�| j�} | d }| d
}| j �
td|� d��� n| j �d| j� d| �� � �� |r�|r�t� j||d�S td��)z�Override the base upload_sftp to allow for setting an on-demand
generated anonymous login for the RH SFTP server if a username and
password are not given
z//r% zPpython3-requests is not installed and is required for obtaining SFTP auth token.Nzend user deniedz:Device token authorization has been cancelled by the user.r� z/support/v2/sftp/token�
)r� r� �� �username�tokenz$DEBUG: auth attempt failed (status: z): zUUnable to retrieve Red Hat auth token using provided credentials. Will try anonymous.� isAnonymousT)�datar� zUser z^ used for anonymous upload. Please inform your support engineer so they may retrieve the data.z)DEBUG: anonymous request failed (status: )�user�passwordz1Could not retrieve valid or anonymous credentials) r� r� r� r& � upload_sftp�REQUESTS_LOADED� Exceptionr� r rr rs �strr} r~ r� r� r� r� r� rw � status_code�json�loads�text�debug�error�dumpsr )
r8 r� r� �_token�_userr� �e�url�retr� �adata�anon�respr9 r; r< r� < sv
� ���
�
���
����zRHELPolicy.upload_sftpc C sB t j�|�}|| jkr | j�tdt| j�� d��� t| _ d S d S )NzLSize of archive is bigger than Red Hat Customer Portal limit for uploads of z via sos http upload.
)
r3 rT �getsize�_max_size_requestr} �warningr r r� rm )r8 r� �sizer; r; r< �check_file_too_big� s
��
�z RHELPolicy.check_file_too_bigc
s� z| � � �t�r
| �|� t� �|�}W |S tyH } z'd}| j�t�s&� | j� t
d|� dt � ��� t | _t� �|�}W Y d}~|S d}~ww )zOverride the base upload_archive to provide for automatic failover
from RHCP failures to the public RH dropbox
Fz0Upload to Red Hat Customer Portal failed due to z . Trying N) r� r� r� r� r& �upload_archiver� rm r} r� r r� )r8 r� �uploadedr� r9 r; r< r� � s*
� �����zRHELPolicy.upload_archivec C sB z| j �d�}| j|d d }t|d �W S ty Y dS w )Nzredhat-release*r rR F)r) �all_pkgs_by_name_regexr, �intr� )r8 �rr�pkgnamer; r; r< � dist_version� s �zRHELPolicy.dist_versionc C s� dD ]}| j �|� d�d�r| �t� S q| �d�d ur"| �t�S | �d�d ur.| �t�S | �d�d ur:| �t�S | �d�d usH| �d�d urM| �t�S | �d �d urY| �t �S d
D ]}| �|�d urk| �t
� S q[| �t �S ) N)�rescue� emergencyz.targetFzsatellite-commonz
rhosp-release�cfmez ovirt-engine�vdsmz automation-controller-server)zautomation-eda-controllerz automation-eda-controller-server) � init_system�
is_running� find_presetr � pkg_by_namer r r
r r
r r )r8 �target�pkgr; r; r< � probe_preset� s( �
�
zRHELPolicy.probe_presetre )T)NN) rf rg rh �__doc__ri �os_release_file�RHEL_RELEASE_STRrJ �
os_release_idr �disclaimer_text�msgr� � _upload_url�_upload_methodr� r� r' r� r� r� r� r� r� r� r� r� r� r� r� r� ru r; r; r9 r< rF � s> �� �
K rF c @ s" e Zd ZdZdgZdZdZdZdS )rE �CentOS)�Community Websitezhttps://www.centos.org/z/etc/centos-releasez CentOS Linuxr= N)rf rg rh ri rj r� rJ r� r; r; r; r< rE � s rE c sz e Zd ZdZdZede d �ZdZdZ dZ
dZ d Z d
Z
d� fd d
� Zeddd��Zdd� Zddd�Zdd� Z� ZS )rG aB
Red Hat CoreOS is a containerized host built upon Red Hat Enterprise Linux
and as such this policy is built on top of the RHEL policy. For users, this
should be entirely transparent as any behavior exhibited or influenced on
RHEL systems by that policy will be seen on RHCOS systems as well.
The one change is that this policy ensures that sos collect will deploy a
container on RHCOS systems in order to facilitate sos report collection,
as RHCOS discourages non-default package installation via rpm-ostree which
is used to maintain atomicity for RHCOS nodes. The default container image
used by this policy is the support-tools image maintained by Red Hat on
registry.redhat.io.
Note that this policy is only loaded when sos is directly run on an RHCOS
node - if sos collect uses the `oc` transport (the default transport that
will be attempted by the ocp cluster profile), then the policy loaded
inside the launched pod will be RHEL. Again, this is expected and will not
impact how sos report collections are performed.
z Red Hat Enterprise Linux CoreOSz�This command will collect diagnostic and configuration information from this %(os_release_name)s system.
An archive containing the collected information will be generated in %(tmpdir)s and may be provided to a %(vendor)s support representative.
rv Tr z®istry.redhat.io/rhel8/support-toolsz/hostz
rpm -q sosz /var/lib/kubelet/config.jsonNc � t � j||||d� d S rx �r& r' r7 r9 r; r< r' � �
�zRedHatCoreOSPolicy.__init__� c C s� |rd|v S d}t tjvr|S tjt t }z,t|ddd��}|�� �� D ] }|| j|v O }q%W d � W |S 1 s;w Y W |S tyL Y |S w )N�CoreOSF�rzutf-8)�encoding) r r3 �environr �open�read�
splitlinesrJ �IOError)rK �remote�coreos� host_release�hfile�liner; r; r< �check s&
� �� ��zRedHatCoreOSPolicy.checkc C s
| � t�S ra )r� r r� r; r; r< r� s
z RedHatCoreOSPolicy.probe_presetFc
C sL |p| j }|r dnd}| j� d| j� d| j� d|� d|� d|p d� d|� �
S )Nz
--pull=alwaysr� z run -di --name zE --privileged --ipc=host --net=host --pid=host -e HOST=/host -e NAME=z
-e IMAGE=rA zr -v /run:/run -v /var/log:/var/log -v /etc/machine-id:/etc/machine-id -v /etc/localtime:/etc/localtime -v /:/host )�container_image�container_runtime�sos_container_name)r8 �image�auth�
force_pull�_image�_pullr; r; r< �create_sos_container s
���� � ��z'RedHatCoreOSPolicy.create_sos_containerc C s d| j � �S )Nzpodman rm --force )r� r� r; r; r< �set_cleanup_cmd, s z"RedHatCoreOSPolicy.set_cleanup_cmdre )r� )NNF)rf rg rh r� rJ r r� r� �
containerizedr� r� �sos_path_strip�container_version_command�container_authfiler' rt r� r� r� r� ru r; r; r9 r< rG � s, �� �
rG c sF e Zd ZdZdZddgZdZdZdZ d� fd
d � Z d d
� Z
� Z S )rH aj
The policy for Fedora based systems, regardless of spin/edition. This
policy is based on the parent Red Hat policy, and thus will only check for
RPM packages when considering packaged-based plugin enablement. Packages
installed by other sources are not considered.
There is no default --upload location for this policy. If users need to
upload an sos report archive from a Fedora system, they will need to
provide the location via --upload-url, and optionally login credentials
for that location via --upload-user and --upload-pass (or the appropriate
environment variables).
zthe Fedora Project)r� zhttps://fedoraproject.org/)zCommunity Forumsz%https://discussion.fedoraproject.org/z/etc/fedora-releasez Fedora Linuxr@ NTc r� rx r� r7 r9 r; r< r' F r� zFedoraPolicy.__init__c C s& | � d�p | j�d�d }t|d �S )Nzfedora-releasezfedora-release-.*r� rR )r� r) r� r� )r8 r� r; r; r< �fedora_versionL s
��� zFedoraPolicy.fedora_versionre ) rf rg rh r� ri rj r� rJ r� r' r ru r; r; r9 r< rH 0 s ��rH )0r� r3 r- rX �sos.policies.authr �sos.report.pluginsr �sos.presets.redhatr r r r r r r
r r r
�sos.policies.distrosr r r �!sos.policies.package_managers.rpmr �%sos.policies.package_managers.flatpakr � sos.policies.package_managersr �
sos.utilitiesr r r r r r r� r� � ImportErrorr� r r� r� r� rF rE rG rH r; r; r; r< �<module> s<
0 �} X