File: //opt/alt/python37/lib/python3.7/site-packages/clcommon/lib/__pycache__/cledition.cpython-37.pyc
B
����"� @ s� d dl Z d dlZd dlZd dlZd dlmZ d dlmZ d dlm Z d dl
m Z m Z m
Z
d dlmZmZ d dlmZmZmZ d dlmZ d d lmZ d
Zd Zd Zd
Z dZ dZ G dd� de�Z G dd� de�Z e e j!j"ee j#j"e e j$j"e e j%j"iZ&G dd� d�Z'd7dd�Z(d8dd�Z)d9d d �Z*d d � Z+d:d d!�Z,e d"�d#d$�Z-d%d&� Z.d'd(� Z/d)d*� Z0e0Z1d+d,� Z2d-d.� Z3e e
e4 e
e4 f d"�d/d0�Z5e6d"�d1d2�Z7e6d"�d3d4�Z8e6d"�d5d6�Z9dS );� N)�Enum)�wraps)�
exceptions)�AnyStr�Tuple�Optional)�CLN_JWT_TOKEN_PATH�CL_EDITION_FILE_FOR_USERS)�read_jwt�
decode_jwt�jwt_token_check)�FormattedException)� in_cagefsz /etc/cloudlinux-edition-soloz /etc/cloudlinux-edition-adminzCloudLinux OS Shared ProzCloudLinux OS SharedzCloudLinux OS SolozCloudLinux OS Adminc @ s e Zd ZdZdZdZdZdZdS )�SupportedEditionsz-
Keeps supported CloudLinux editions
ZsoloZsharedZ
shared_proZadminN)�__name__�
__module__� __qualname__�__doc__�SOLO�SHARED�
SHARED_PRO�ADMIN� r r ��/builddir/build/BUILDROOT/alt-python27-cllib-3.4.1-1.el9.cloudlinux.x86_64/opt/alt/python37/lib/python3.7/site-packages/clcommon/lib/cledition.pyr " s
r c @ s e Zd Zdd� ZdS )�CLEditionDetectionErrorc K s t �| ||d�� d S )N)�message�context)r
�__init__)�selfr r r r r r . s z CLEditionDetectionError.__init__N)r r r r r r r r r - s r c @ s4 e Zd Zed
dd��Zedd� �Zed dd ��ZdS ) �
CLEditionsNTc
C s� | dkrt t�} yt| |d�}W n8 tjk
rX } ztdt� d|� ���W dd}~X Y nX y|d S tk
r� |�d�}|dkr�tdt� d���|r�tj j
S tj j
S X dS )z�
Note: be careful when modifying this method.
Passing token in is used in X-Ray,
ask @dkavchuk or someone else from C-Projects team for details
:param token:
:param verify_exp:
:return:
N)�
verify_expz)Unable to detect edition from jwt token: z-. Please, make sure it is not broken, error: �edition�cl_pluszL. Please, make sure it is not broken, error: not enough fields for detection) r
r r r Z
PyJWTErrorr �KeyError�getr r �valuer )�tokenr �jwt�er" r r r � get_from_jwt? s
&
zCLEditions.get_from_jwtc C sf t jdd| gt jt jdd�}|�� \}}|jdkr>d|kr>dS |jdkrbtd| � d |� d
|� ���dS ) NZrpmz-qT)�stdout�stderr�textr zis not installedFzUnable to check is package z is installed, reason: z, )�
subprocess�Popen�PIPEZ communicate�
returncoder )Z package_nameZprocess�out�errr r r �is_package_installed[ s
z CLEditions.is_package_installedFc C s� |r|rt d��|sVtj�t�rVy| j||d�}W n tk
rL t� }Y nX |rV|S t� rbt� S |s�tj�t �rzt
j j S tj�t
�r�t
jj S t� p�t
jj S dS )a
1. Try to detect edition from jwt token
if edition field is in token -> return edition
if edition field is not present -> recheck via cl_plus flag
if token is broken -> raise error about it
2. Try to detect from file
if edition is in file -> return edition
if file is broken -> raise about it
if file is missed -> check if meta package is present
Detection from file may be switched off using skip_marker_check
In case there is no token with correct edition,
no file we consider edition as regular CL.
Note: be careful when modifying this method.
It is used in X-Ray, ask @dkavchuk or someone else from C-Projects team
for details
zOUnable to detect edition: neither jwt token check, no file marker check enabled)r& r N)r �os�path�isfiler r) �PermissionError�user_cl_editionr �CL_SOLO_EDITION_FILE_MARKERr r r% � CL_ADMIN_EDITION_FILE_MARKERr r )�cls�skip_jwt_check�skip_marker_checkZraw_jwtr r! r r r �get_cl_editioni s$ zCLEditions.get_cl_edition)NT)FFNT)r r r � staticmethodr) r3 � classmethodr> r r r r r = s r TFc C s$ t j| ||d�}|dk o"|tjjkS )aU
Allow skip_jwt_check ONLY if it not critical when license is not valid
Use skip_marker_check=True when validity of license is critical
and fallback to file is not applicable
Note: be careful when modifying this method.
It is used in X-Ray and SSA,
ask @dkavchuk or someone else from C-Projects team for details
)r< r= r N)r r> r r r% )r< r= r r! r r r �is_cl_solo_edition� s
rA c C s$ t j| ||d�}|dk o"|tjjkS )z�
Allow skip_jwt_check ONLY if it not critical when license is not valid
Use skip_marker_check=True when validity of license is critical
and fallback to file is not applicable
)r< r= r N)r r> r r r% )r< r= r r! r r r �is_cl_shared_edition� s
rB c C s$ t j| ||d�}|dk o"|tjjkS )z�
Allow skip_jwt_check ONLY if it not critical when license is not valid
Use skip_marker_check=True when validity of license is critical
and fallback to file is not applicable
)r< r= r N)r r> r r r% )r< r= r r! r r r �is_cl_shared_pro_edition� s
rC c K s$ y
t f | �S tk
r dS X dS )z:
Supress edition checking error and returns False
FN)rC r )�kwargsr r r � is_cl_shared_pro_edition_safely� s
rE c C s$ t j| ||d�}|dk o"|tjjkS )z�
Allow skip_jwt_check ONLY if it not critical when license is not valid
Use skip_marker_check=True when validity of license is critical
and fallback to file is not applicable
)r< r= r N)r r> r r r% )r< r= r r! r r r �is_cl_admin_edition� s
rF )�returnc C s� y t dd�rtS tdd�r tS W n tk
r4 tS X t� \} }}d|krztj� t
�s\t � rzt t
d��}|�� �� S Q R X | r�tS tS dS )z�
Function returns current edition of CL:
- CloudLinux OS Shared
- CloudLinux OS Shared Pro
- CloudLinux OS Solo
- Error string
T)r< z
read error�rN)rA �SOLO_EDITION_HUMAN_READABLErF � ADMIN_EDITION_HUMAN_READABLEr � SHARED_EDITION_HUMAN_READABLEr r4 r5 r6 r r �openr �read�strip�!SHARED_PRO_EDITION_HUMAN_READABLE)Z success_flagZ
error_message�_�fr r r �get_cl_edition_readable� s
rR c C s t d� dS )zJust print skip messagezpCloudLinux Solo edition detected!
Command is skipped, because it is unsupported and unneeded on current editionN)�printr r r r �print_skip_message_on_solo s rT c C s t d� dS )zJust print skip messageznContainer environment detected!
Command is skipped, because it is unsupported and unneeded on current editionN)rS r r r r � print_skip_message_in_container s rU c
C st y4t dd�r t� t�d� t� r2t� t�d� W n: tk
rn } z td| � �� t�d� W d d } ~ X Y nX d S )NT)r< r zError: � )rA rT �sys�exit� is_containerrU r rS )r( r r r �skip_on_cl_solo s
rZ c s t � �� fdd��}|S )Nc s( t dd�st� rt� d S � | |�S d S )NT)r< )rA rY rT )�argsrD )rQ r r �inner' s
z$lve_supported_or_exit.<locals>.inner)r )rQ r\ r )rQ r �lve_supported_or_exit& s r] c C s< t j�t�r8ttd��} | �� �� }W dQ R X t�|�S dS )z�This function is used as workaround for users to be able to get CL Edition.
Crontab will write to CL_EDITION_FILE_FOR_USERS, output of cldetect --detect-edition command with 0644 permission.
rH N) r4 r5 �existsr rL rM rN �"HUMAN_READABLE_TOKEN_EDITION_PAIRSr$ )rQ r! r r r r8 3 s
r8 c
C s� yjd} d}t �� }t| �� }|�d|� d�|�� � W dQ R X |�|d��d�}|�|d��d�}||fS ttt j fk
r� Y nX d S )
zM
Detect system name and version
:return: tuple (os_name, os_ver)
z/etc/os-release�top�[z]
N�NAME�"Z
VERSION_ID)NN)
� configparserZ ConfigParserrL Z read_stringrM r$ rN �OSError�IOError�Error)Zos_release_filenameZ section_nameZconfig�stream�os_nameZos_verr r r �get_os_version? s
$rj c C s t � \} }| dkS )zL
Detertmines is this system Ubuntu
:return: bool flag is_ubuntu
ZUbuntu)rj )ri rP r r r � is_ubuntuY s
rk c C s t j�d�S )z<
Determines is this system running inside container
z/etc/cloudlinux-container)r4 r5 r^ r r r r rY b s rY c C s0 d} t j�d�r,tjdddtjtjd�dk} | S )z]
Determines if secure boot is turned on
:return: bool flag is_secureboot_enabled
Fz/sys/firmware/efiz!mokutil --sb-state | grep enabledTz /bin/bash)�shell�
executabler* r+ r )r4 r5 r^ r- ZcallZDEVNULL)Zenabledr r r �is_secureboot_enabledi s rn )TFT)FFT)FFT)FFT):rd r4 rW r- �enumr � functoolsr r' r �typingr r r Zclcommon.lib.constsr r Zclcommon.lib.jwt_tokenr
r r Zclcommon.clexceptionr
Zclcommon.clcagefsr r9 r: rO rK rI rJ r r r r% r r r r_ r rA rB rC rE rF rR rT rU rZ Zskip_without_lver] r8 �strrj �boolrk rY rn r r r r �<module>
sX [