|
Server : Apache System : Linux cvar2.toservers.com 3.10.0-962.3.2.lve1.5.73.el7.x86_64 #1 SMP Wed Aug 24 21:31:23 UTC 2022 x86_64 User : njnconst ( 1116) PHP Version : 8.4.18 Disable Function : NONE Directory : /opt/alt/python37/lib/python3.7/site-packages/clcommon/lib/__pycache__/ |
Upload File : |
B
(
c�1 � @ s� d dl Z d dlZd dlZd dlZd dlmZ d dlmZ d dlm Z d dl
m Z m Z m
Z
d dlmZmZ d dlmZmZmZ d dlmZ d d lmZ d
Zd Zd Zd
Z dZ dZ G dd� de�Z G dd� de�Z e e j!j"ee j#j"e e j$j"e e j%j"iZ&G dd� d�Z'd5dd�Z(d6dd�Z)d7d d �Z*d8d d �Z+e d �d!d"�Z,d#d$� Z-d%d&� Z.d'd(� Z/e/Z0d)d*� Z1d+d,� Z2e e
e3 e
e3 f d �d-d.�Z4e5d �d/d0�Z6e5d �d1d2�Z7e5d �d3d4�Z8dS )9� N)�Enum)�wraps)�
exceptions)�AnyStr�Tuple�Optional)�CLN_JWT_TOKEN_PATH�CL_EDITION_FILE_FOR_USERS)�read_jwt�
decode_jwt�jwt_token_check)�FormattedException)� in_cagefsz /etc/cloudlinux-edition-soloz /etc/cloudlinux-edition-adminzCloudLinux OS Shared ProzCloudLinux OS SharedzCloudLinux OS SolozCloudLinux OS Adminc @ s e Zd ZdZdZdZdZdZdS )�SupportedEditionsz-
Keeps supported CloudLinux editions
ZsoloZsharedZ
shared_proZadminN)�__name__�
__module__� __qualname__�__doc__�SOLO�SHARED�
SHARED_PRO�ADMIN� r r �G/opt/alt/python37/lib/python3.7/site-packages/clcommon/lib/cledition.pyr " s
r c @ s e Zd Zdd� ZdS )�CLEditionDetectionErrorc K s t �| ||d�� d S )N)�message�context)r
�__init__)�selfr r r r r r . s z CLEditionDetectionError.__init__N)r r r r r r r r r - s r c @ s4 e Zd Zed
dd��Zedd� �Zed dd ��ZdS ) �
CLEditionsNTc
C s� | dkrt t�} yt| |d�}W n8 tjk
rX } ztdt� d|� ���W dd}~X Y nX y|d S tk
r� |�d�}|dkr�tdt� d���|r�tj j
S tj j
S X dS )z�
Note: be careful when modifying this method.
Passing token in is used in X-Ray,
ask @dkavchuk or someone else from C-Projects team for details
:param token:
:param verify_exp:
:return:
N)�
verify_expz)Unable to detect edition from jwt token: z-. Please, make sure it is not broken, error: �edition�cl_pluszL. Please, make sure it is not broken, error: not enough fields for detection) r
r r r Z
PyJWTErrorr �KeyError�getr r �valuer )�tokenr �jwt�er" r r r � get_from_jwt? s
&
zCLEditions.get_from_jwtc C sf t jdd| gt jt jdd�}|�� \}}|jdkr>d|kr>dS |jdkrbtd| � d |� d
|� ���dS ) NZrpmz-qT)�stdout�stderr�textr zis not installedFzUnable to check is package z is installed, reason: z, )�
subprocess�Popen�PIPEZ communicate�
returncoder )Z package_nameZprocess�out�errr r r �is_package_installed[ s
z CLEditions.is_package_installedFc C s� |r|rt d��|sVtj�t�rVy| j||d�}W n tk
rL t� }Y nX |rV|S t� rbt� S |s�tj�t �rzt
j j S tj�t
�r�t
jj S t
jj S dS )a
1. Try to detect edition from jwt token
if edition field is in token -> return edition
if edition field is not present -> recheck via cl_plus flag
if token is broken -> raise error about it
2. Try to detect from file
if edition is in file -> return edition
if file is broken -> raise about it
if file is missed -> check if meta package is present
Detection from file may be switched off using skip_marker_check
In case there is no token with correct edition,
no file we consider edition as regular CL.
Note: be careful when modifying this method.
It is used in X-Ray, ask @dkavchuk or someone else from C-Projects team
for details
zOUnable to detect edition: neither jwt token check, no file marker check enabled)r& r N)r �os�path�isfiler r) �PermissionError�user_cl_editionr �CL_SOLO_EDITION_FILE_MARKERr r r% � CL_ADMIN_EDITION_FILE_MARKERr r )�cls�skip_jwt_check�skip_marker_checkZraw_jwtr r! r r r �get_cl_editioni s$ zCLEditions.get_cl_edition)NT)FFNT)r r r � staticmethodr) r3 � classmethodr> r r r r r = s r TFc C s$ t j| ||d�}|dk o"|tjjkS )aU
Allow skip_jwt_check ONLY if it not critical when license is not valid
Use skip_marker_check=True when validity of license is critical
and fallback to file is not applicable
Note: be careful when modifying this method.
It is used in X-Ray and SSA,
ask @dkavchuk or someone else from C-Projects team for details
)r< r= r N)r r> r r r% )r< r= r r! r r r �is_cl_solo_edition� s
rA c C s$ t j| ||d�}|dk o"|tjjkS )z�
Allow skip_jwt_check ONLY if it not critical when license is not valid
Use skip_marker_check=True when validity of license is critical
and fallback to file is not applicable
)r< r= r N)r r> r r r% )r< r= r r! r r r �is_cl_shared_edition� s
rB c C s$ t j| ||d�}|dk o"|tjjkS )z�
Allow skip_jwt_check ONLY if it not critical when license is not valid
Use skip_marker_check=True when validity of license is critical
and fallback to file is not applicable
)r< r= r N)r r> r r r% )r< r= r r! r r r �is_cl_shared_pro_edition� s
rC c C s$ t j| ||d�}|dk o"|tjjkS )z�
Allow skip_jwt_check ONLY if it not critical when license is not valid
Use skip_marker_check=True when validity of license is critical
and fallback to file is not applicable
)r< r= r N)r r> r r r% )r< r= r r! r r r �is_cl_admin_edition� s
rD )�returnc C s� y t dd�rtS tdd�r tS W n tk
r4 tS X t� \} }}d|krztj� t
�s\t � rzt t
d��}|�� �� S Q R X | r�tS tS dS )z�
Function returns current edition of CL:
- CloudLinux OS Shared
- CloudLinux OS Shared Pro
- CloudLinux OS Solo
- Error string
T)r< z
read error�rN)rA �SOLO_EDITION_HUMAN_READABLErD � ADMIN_EDITION_HUMAN_READABLEr � SHARED_EDITION_HUMAN_READABLEr r4 r5 r6 r r �openr �read�strip�!SHARED_PRO_EDITION_HUMAN_READABLE)Z success_flagZ
error_message�_�fr r r �get_cl_edition_readable� s
rP c C s t d� dS )zJust print skip messagezpCloudLinux Solo edition detected!
Command is skipped, because it is unsupported and unneeded on current editionN)�printr r r r �print_skip_message_on_solo� s rR c C s t d� dS )zJust print skip messageznContainer environment detected!
Command is skipped, because it is unsupported and unneeded on current editionN)rQ r r r r � print_skip_message_in_container� s rS c
C st y4t dd�r t� t�d� t� r2t� t�d� W n: tk
rn } z td| � �� t�d� W d d } ~ X Y nX d S )NT)r< r zError: � )rA rR �sys�exit� is_containerrS r rQ )r( r r r �skip_on_cl_solo s
rX c s t � �� fdd��}|S )Nc s( t dd�st� rt� d S � | |�S d S )NT)r< )rA rW rR )�args�kwargs)rO r r �inner s
z$lve_supported_or_exit.<locals>.inner)r )rO r[ r )rO r �lve_supported_or_exit s r\ c C s< t j�t�r8ttd��} | �� �� }W dQ R X t�|�S dS )z�This function is used as workaround for users to be able to get CL Edition.
Crontab will write to CL_EDITION_FILE_FOR_USERS, output of cldetect --detect-edition command with 0644 permission.
rF N) r4 r5 �existsr rJ rK rL �"HUMAN_READABLE_TOKEN_EDITION_PAIRSr$ )rO r! r r r r8 ) s
r8 c
C s� yjd} d}t �� }t| �� }|�d|� d�|�� � W dQ R X |�|d��d�}|�|d��d�}||fS ttt j fk
r� Y nX d S )
zM
Detect system name and version
:return: tuple (os_name, os_ver)
z/etc/os-release�top�[z]
N�NAME�"Z
VERSION_ID)NN)
� configparserZ ConfigParserrJ Z read_stringrK r$ rL �OSError�IOError�Error)Zos_release_filenameZ section_nameZconfig�stream�os_nameZos_verr r r �get_os_version5 s
$ri c C s t � \} }| dkS )zL
Detertmines is this system Ubuntu
:return: bool flag is_ubuntu
ZUbuntu)ri )rh rN r r r � is_ubuntuO s
rj c C s t j�d�S )z<
Determines is this system running inside container
z/etc/cloudlinux-container)r4 r5 r] r r r r rW X s rW c C s0 d} t j�d�r,tjdddtjtjd�dk} | S )z]
Determines if secure boot is turned on
:return: bool flag is_secureboot_enabled
Fz/sys/firmware/efiz!mokutil --sb-state | grep enabledTz /bin/bash)�shell�
executabler* r+ r )r4 r5 r] r- ZcallZDEVNULL)Zenabledr r r �is_secureboot_enabled_ s rm )TFT)FFT)FFT)FFT)9rc r4 rU r- �enumr � functoolsr r' r �typingr r r Zclcommon.lib.constsr r Zclcommon.lib.jwt_tokenr
r r Zclcommon.clexceptionr
Zclcommon.clcagefsr r9 r: rM rI rG rH r r r r% r r r r^ r rA rB rC rD rP rR rS rX Zskip_without_lver\ r8 �strri �boolrj rW rm r r r r �<module>
sV [