관리-도구
편집 파일: redhat.cpython-39.opt-1.pyc
a -�_gW\ � @ sL d dl Z d dlZd dlZd dlZd dlmZ d dlmZ d dlm Z m Z m Z m Z m Z mZmZmZmZmZ d dlmZmZmZ d dlmZ d dlmZ d dlm Z d d l m Z m Z m Z d d l!m"Z# zd dl$Z$d Z%W n e&y� d Z%Y n0 d Z'G dd� de�Z(dZ)dZ*dZ+G dd� de(�Z,G dd� de,�Z-G dd� de,�Z.G dd� de(�Z/dS )� N)�DeviceAuthorizationClass)� RedHatPlugin) � RHEL_PRESETS�RHV�RHEL�CB�RHOSP�RHOCP�RH_CFME� RH_SATELLITE�AAPEDA� AAPCONTROLLER)� LinuxPolicy�ENV_HOST_SYSROOT� OS_RELEASE)�RpmPackageManager)�FlatpakPackageManager)�MultiPackageManager)�bold� convert_bytes�TIMEOUT_DEFAULT)�_sosTFzRed Hat Enterprise Linuxc sz e Zd ZdZddgZdZdZdZdZdZ dZ d Z d Z d Z d Zd� fdd� Ze� fdd��Zdd� Zdd� Zdd� Z� ZS )� RedHatPolicy�Red Hat)zDistribution Websitezhttps://www.redhat.com/)zCommercial Supportzhttps://access.redhat.com/z/var/tmpFZfriendlyN�podman�sosz /usr/sbinzVhttps://sso.redhat.com/auth/realms/redhat-external/protocol/openid-connect/auth/devicezPhttps://sso.redhat.com/auth/realms/redhat-external/protocol/openid-connect/tokenTc s� t � j||||d� d| _tttg| j|d�| _| jt g7 _| jj | _ | j sft j �d� t �d� | �| j �| _| jr�d| _nd| _| jtjd 7 _| jtjd 7 _| js�| �� | �� d S ) N��sysroot�init� probe_runtime� remote_execF)ZprimaryZ fallbacks�chrootr z'Could not obtain installed package list� z /usr/sbin:/usr/bin:/root/binz'/sbin:/bin:/usr/sbin:/usr/bin:/root/binz/usr/local/binz/usr/local/sbin)�super�__init__�usrmover r r r �package_managerZvalid_subclassesr Zpackages�pkgs�sys�stderr�write�exit� check_usrmove�PATH�os�pathsepr Z set_exec_pathZ load_presets��selfr r r r �� __class__� �?/usr/lib/python3.9/site-packages/sos/policies/distros/redhat.pyr$ 8 s2 �� zRedHatPolicy.__init__c sz | t ur tt | ��|� d S |�d� ttttd�}|�� D ]8\}}t d|� ��}|jdd�|d�|j d��dd � q<d S ) Nz�This policy is a building block for all other Red Hat family distributions. You are likely looking for one of the distributions listed below. )�centos�rhelZ redhatcoreos�fedoraz policies.� z>8z<35z<30F)�newline) r r# �display_distro_help�add_text� CentOsPolicy� RHELPolicy�RedHatCoreOSPolicy� FedoraPolicy�itemsr �os_release_name)�cls�sectionZsubsZsubc�valueZsublnr2 r4 r5 r; Z s" ���z RedHatPolicy.display_distro_helpc C s8 d|vr t j�d�o t j�d�S |d d }|d dkS )aq Test whether the running system implements UsrMove. If the 'filesystem' package is present, it will check that the version is greater than 3. If the package is not present the '/bin' and '/sbin' paths are checked and UsrMove is assumed if both are symbolic links. :param pkgs: a packages dictionary Z filesystemz/binz/sbin�versionr �3)r. �path�islink)r1 r' Zfilesys_versionr4 r4 r5 r, s s zRedHatPolicy.check_usrmovec C s2 g }dd� }| j r.|D ]}|�||�� q|S |S )a2 Mangle paths for post-UsrMove systems. If the system implements UsrMove, all files will be in '/usr/[s]bin'. This method substitutes all the /[s]bin references in the 'files' list with '/usr/[s]bin'. :param files: the list of package managed files c S s: ddg}| |v r*| t j�d| dd � �fS t�dd| �fS )Nz/bin/rpmz /bin/mailxz/usrr" z (^)(/s?bin)z\1/usr\2)r. rH �join�re�sub)rH Z skip_pathsr4 r4 r5 �transform_path� s z8RedHatPolicy.mangle_package_path.<locals>.transform_path)r% �extend)r1 �files�pathsrM �fr4 r4 r5 �mangle_package_path� s z RedHatPolicy.mangle_package_pathc C s |s | j S |S �N)�_tmp_dir)r1 Z opt_tmp_dirr4 r4 r5 � get_tmp_dir� s zRedHatPolicy.get_tmp_dir)NNTN)�__name__� __module__� __qualname__�vendor� vendor_urlsrT Z _in_containerZ name_pattern� upload_url� upload_userZdefault_container_runtimeZ sos_pkg_nameZ sos_bin_path�client_identifier_url�token_endpointr$ � classmethodr; r, rR rU � __classcell__r4 r4 r2 r5 r % s, � �"r a[ Any information provided to %(vendor)s will be treated in accordance with the published support policies at: %(vendor_urls)s The generated archive may contain data considered sensitive and its content should be reviewed by the originating organization before being passed to any third party. No changes will be made to system configuration. z https://api.access.redhat.comz sftp://sftp.access.redhat.comc s� e Zd ZdZdZdZeZdZe de d �Z e Z dZdZd Zd'� fd d � Zd d� Zdd� Zdd� Zdd� Zd(dd�Zdd� Zdd� Zdd � Zd)� fd d � Zd d � Z� fd!d"�Z d#d$� Z d%d&� Z � Z S )*r> at The RHEL policy is used specifically for Red Hat Enterprise Linux, of any release, and not forks or derivative distributions. For example, this policy will be loaded for any RHEL 8 installation, but will not be loaded for CentOS Stream 8 or Red Hat CoreOS, for which there are separate policies. Plugins activated by installed packages will only be activated if those packages are installed via RPM (dnf/yum inclusive). Packages installed by other means are not considered by this policy. By default, --upload will be directed to using the SFTP location provided by Red Hat for technical support cases. Users who provide login credentials for their Red Hat Customer Portal account will have their archives uploaded to a user-specific directory. If users provide those credentials as well as a case number, --upload will instead attempt to directly upload archives to the referenced case, thus streamlining the process of providing data to technical support engineers. If either or both of the credentials or case number are omitted or are incorrect, then a temporary anonymous user will be used for upload to the SFTP server, and users will need to provide that information to their technical support engineer. This information will be printed at the end of the upload process for any sos report execution. r z/etc/redhat-releaser7 a This command will collect diagnostic and configuration information from this %(os_release_name)s system and installed applications. An archive containing the collected information will be generated in %(tmpdir)s and may be provided to a %(vendor)s support representative. �%(vendor_text)s �postNi @Tc s" t � j||||d� | �t� d S �Nr )r# r$ Zregister_presetsr r0 r2 r4 r5 r$ � s �zRHELPolicy.__init__c C s8 | j d jr | j�td�� | js4t| _| j�d� d S )N� cmdlineoptszVThe option --upload-user has been deprecated in favour of device authorization in RHEL�&No case id provided, uploading to SFTP)�commonsr\ �ui_log�info�_�case_id� RH_SFTP_HOSTr[ �r1 r4 r4 r5 �prompt_for_upload_user� s �z!RHELPolicy.prompt_for_upload_userc C s | j d jr | j�td�� d S )Nrd zVThe option --upload-pass has been deprecated in favour of device authorization in RHEL)rf Z upload_passrg rh ri rl r4 r4 r5 �prompt_for_upload_password� s �z%RHELPolicy.prompt_for_upload_passwordc C sf | j r | j S | jd j r$| jd j S | jd jdkr8tS | jd jsT| j�d� tS d}t|| j S )Nrd �sftpre z /support/v1/cases/%s/attachments)r[ rf Zupload_protocolrk rj rg rh � RH_API_HOST)r1 Z rh_case_apir4 r4 r5 �get_upload_url� s zRHELPolicy.get_upload_urlc C s d| j � �}d|iS )NzBearer Z Authorization)� _device_token)r1 Zstr_authr4 r4 r5 �_get_upload_https_auth s z!RHELPolicy._get_upload_https_authc C sh d|j �d�d || �� fi}t| j| j�}|�� | _| j� d| � � � �� t j | � � || �� |td�S )z�If upload_https() needs to use requests.post(), use this method. Policies should override this method instead of the base upload_https() :param archive: The open archive file object �file�/����/Device authorized correctly. Uploading file to )rO �headers�verify�timeout)�name�split�_get_upload_headersr r] r^ �get_access_tokenrr rg rh �get_upload_url_string�requestsrb rq rs r )r1 �archivery rO �RHELAuthr4 r4 r5 �_upload_https_post s ��� � �z RHELPolicy._upload_https_postc C s | � � �t�rddd�S i S )NZfalsezno-cache)Z isPrivatez cache-control)rq � startswithrp rl r4 r4 r5 r} $ s z RHELPolicy._get_upload_headersc C s0 | � � �t�rdS | � � �t�r$dS | �| j�S )NzRed Hat Customer PortalzRed Hat Secure FTP)rq r� rp rk Z_get_obfuscated_upload_urlr[ rl r4 r4 r5 r ) s z RHELPolicy.get_upload_url_stringc C s@ | j �d�d }| jr&| j� d|� �}| jr<tj�| j|�}|S )z�The RH SFTP server will only automatically connect file uploads to cases if the filename _starts_ with the case number ru rv ri )Zupload_archive_namer| rj Zupload_directoryr. rH rJ )r1 �fnamer4 r4 r5 �_get_sftp_upload_name0 s z RHELPolicy._get_sftp_upload_namec s� t �d�d | �� vr t� �� S ts,td��d}d}| js�zt| j | j �}W n< ty� } z$dt |�v rt| j � d� W Y d}~nd}~0 0 |�� | _| jr�| j � d| �� � �� td }d}| j�r6| �� } tj|| d d �}|jd k�r t�|j�d }t�|j�d }n*| j �d|j� d|�� � �� | j �d� n~ddi} tj|t�| �d d�} | jd k�r�t�| j�} | d }| d }| j � td|� d��� n | j �d| j� d| �� � �� |�r�|�r�t� j||d�S td��dS )z�Override the base upload_sftp to allow for setting an on-demand generated anonymous login for the RH SFTP server if a username and password are not given z//r" zPpython3-requests is not installed and is required for obtaining SFTP auth token.Nzend user deniedz:Device token authorization has been cancelled by the user.rw z/support/v2/sftp/token� )rx rz �� �username�tokenz$DEBUG: auth attempt failed (status: z): zUUnable to retrieve Red Hat auth token using provided credentials. Will try anonymous.Z isAnonymousT)�datarz zUser z^ used for anonymous upload. Please inform your support engineer so they may retrieve the data.z)DEBUG: anonymous request failed (status: )�user�passwordz1Could not retrieve valid or anonymous credentials) rk r| rq r# � upload_sftp�REQUESTS_LOADED� Exceptionrr r r] r^ �strrg rh r~ r rp rs r� rb Z status_code�json�loads�text�debug�error�dumpsri ) r1 r� r� Z_token�_userr� �e�url�retrx ZadataZanonZrespr2 r4 r5 r� < sr � � � ��� ���� zRHELPolicy.upload_sftpc C s> t j�|�}|| jkr:| j�tdt| j�� d��� t| _ d S )NzLSize of archive is bigger than Red Hat Customer Portal limit for uploads of z via sos http upload. ) r. rH �getsize�_max_size_requestrg Zwarningri r rk r[ )r1 r� �sizer4 r4 r5 �check_file_too_big� s ��z RHELPolicy.check_file_too_bigc s� z(| � � �t�r| �|� t� �|�}W nd ty� } zLd}| j�t�sJ� | j� t d|� dt � ��� t | _t� �|�}W Y d}~n d}~0 0 |S )zOverride the base upload_archive to provide for automatic failover from RHCP failures to the public RH dropbox Fz0Upload to Red Hat Customer Portal failed due to z . Trying N) rq r� rp r� r# �upload_archiver� r[ rg r� ri rk )r1 r� Zuploadedr� r2 r4 r5 r� � s$ ���"zRHELPolicy.upload_archivec C sD z,| j �d�}| j|d d }t|d �W S ty> Y n0 dS )Nzredhat-release*r rF F)r& �all_pkgs_by_name_regexr' �intr� )r1 ZrrZpkgnamer4 r4 r5 � dist_version� s zRHELPolicy.dist_versionc C s� dD ]&}| j �|� d�d�r| �t� S q| �d�d urD| �t�S | �d�d ur\| �t�S | �d�d urt| �t�S | �d�d us�| �d�d ur�| �t�S | �d �d ur�| �t �S d D ] }| �|�d ur�| �t � S q�| �t �S ) N)ZrescueZ emergencyz.targetFzsatellite-commonz rhosp-releaseZcfmez ovirt-engineZvdsmz automation-controller-server)zautomation-eda-controllerz automation-eda-controller-server) Z init_systemZ is_running� find_presetr � pkg_by_namer r r r r r r )r1 �target�pkgr4 r4 r5 � probe_preset� s& � zRHELPolicy.probe_preset)NNTN)T)NN) rV rW rX �__doc__rY �os_release_file�RHEL_RELEASE_STRrB � os_release_idri �disclaimer_text�msgrk Z _upload_urlZ_upload_methodrr r� r$ rm rn rq rs r� r} r r� r� r� r� r� r� r` r4 r4 r2 r5 r> � s< �� � K r> c @ s" e Zd ZdZdgZdZdZdZdS )r= ZCentOS)�Community Websitezhttps://www.centos.org/z/etc/centos-releasez CentOS Linuxr6 N)rV rW rX rY rZ r� rB r� r4 r4 r4 r5 r= � s r= c sv e Zd ZdZdZede d �ZdZdZ dZ dZ d Z d Z d� fd d � Zeddd��Zdd� Zddd�Zdd� Z� ZS )r? aB Red Hat CoreOS is a containerized host built upon Red Hat Enterprise Linux and as such this policy is built on top of the RHEL policy. For users, this should be entirely transparent as any behavior exhibited or influenced on RHEL systems by that policy will be seen on RHCOS systems as well. The one change is that this policy ensures that sos collect will deploy a container on RHCOS systems in order to facilitate sos report collection, as RHCOS discourages non-default package installation via rpm-ostree which is used to maintain atomicity for RHCOS nodes. The default container image used by this policy is the support-tools image maintained by Red Hat on registry.redhat.io. Note that this policy is only loaded when sos is directly run on an RHCOS node - if sos collect uses the `oc` transport (the default transport that will be attempted by the ocp cluster profile), then the policy loaded inside the launched pod will be RHEL. Again, this is expected and will not impact how sos report collections are performed. z Red Hat Enterprise Linux CoreOSz�This command will collect diagnostic and configuration information from this %(os_release_name)s system. An archive containing the collected information will be generated in %(tmpdir)s and may be provided to a %(vendor)s support representative. ra Tr z®istry.redhat.io/rhel8/support-toolsz/hostz rpm -q sosz /var/lib/kubelet/config.jsonNc s t � j||||d� d S rc �r# r$ r0 r2 r4 r5 r$ � s �zRedHatCoreOSPolicy.__init__� c C s� |r d|v S d}t tjvr |S tjt t }zRt|ddd��0}|�� �� D ]}|| j|v O }qJW d � n1 sr0 Y W n ty� Y n0 |S )NZCoreOSF�rzutf-8)�encoding) r r. �environr �open�read� splitlinesrB �IOError)rC ZremoteZcoreosZ host_releaseZhfile�liner4 r4 r5 �check s 2 zRedHatCoreOSPolicy.checkc C s | � t�S rS )r� r rl r4 r4 r5 r� s z RedHatCoreOSPolicy.probe_presetFc C sL |p| j }|rdnd}| j� d| j� d| j� d|� d|� d|p@d� d|� � S )Nz --pull=alwaysr� z run -di --name zE --privileged --ipc=host --net=host --pid=host -e HOST=/host -e NAME=z -e IMAGE=r9 zr -v /run:/run -v /var/log:/var/log -v /etc/machine-id:/etc/machine-id -v /etc/localtime:/etc/localtime -v /:/host )�container_image�container_runtime�sos_container_name)r1 ZimageZauthZ force_pullZ_imageZ_pullr4 r4 r5 �create_sos_container s ���� � ��z'RedHatCoreOSPolicy.create_sos_containerc C s d| j � �S )Nzpodman rm --force )r� rl r4 r4 r5 �set_cleanup_cmd, s z"RedHatCoreOSPolicy.set_cleanup_cmd)NNTN)r� )NNF)rV rW rX r� rB ri r� r� Z containerizedr� r� Zsos_path_stripZcontainer_version_commandZcontainer_authfiler$ r_ r� r� r� r� r` r4 r4 r2 r5 r? � s* �� � r? c sB e Zd ZdZdZddgZdZdZdZd� fd d � Z d d � Z � Z S )r@ aj The policy for Fedora based systems, regardless of spin/edition. This policy is based on the parent Red Hat policy, and thus will only check for RPM packages when considering packaged-based plugin enablement. Packages installed by other sources are not considered. There is no default --upload location for this policy. If users need to upload an sos report archive from a Fedora system, they will need to provide the location via --upload-url, and optionally login credentials for that location via --upload-user and --upload-pass (or the appropriate environment variables). zthe Fedora Project)r� zhttps://fedoraproject.org/)zCommunity Forumsz%https://discussion.fedoraproject.org/z/etc/fedora-releasez Fedora Linuxr8 NTc s t � j||||d� d S rc r� r0 r2 r4 r5 r$ F s �zFedoraPolicy.__init__c C s& | � d�p| j�d�d }t|d �S )Nzfedora-releasezfedora-release-.*rv rF )r� r& r� r� )r1 r� r4 r4 r5 �fedora_versionL s ���zFedoraPolicy.fedora_version)NNTN) rV rW rX r� rY rZ r� rB r� r$ r� r` r4 r4 r2 r5 r@ 0 s � �r@ )0r� r. r( rK Zsos.policies.authr Zsos.report.pluginsr Zsos.presets.redhatr r r r r r r r r r Zsos.policies.distrosr r r Z!sos.policies.package_managers.rpmr Z%sos.policies.package_managers.flatpakr Z sos.policies.package_managersr Z sos.utilitiesr r r r r ri r� r� � ImportErrorr� r r� rp rk r> r= r? r@ r4 r4 r4 r5 �<module> s8 0 } X