3 ÌaõVã@sâddlZddlZddlZddlZddlZddlmZmZmZm Z y$ddl m Z m Z m Z mZmZmZWnek rxYnXGdd„dƒZejdejZejdejZejGdd „d ejƒƒZejGd d „d ejƒƒZejGd d „d ejƒƒZejGdd„dejƒƒZejGdd„dejƒƒZejGdd„dejƒƒZejGdd„dejƒƒZ Gdd„dƒZ!dZ"dZ#dZ$ej%j&ejej%j&ejej'j&ejej'j&ejej(j&ej)ej(j&ejej*j&ej)ej*j&ejej+j&ejej+j&ejej,j&ej)ej,j&eje"eje"eje#eje#eje$eje$eji Z-dZ.dZ/dZ0dZ1dZ2d Z3d!Z4d"Z5ed#Z6ed$Z7ed%Z8d&Z9d'Z:d(Z;d)Zd,Z?d-Z@d.ZAd/ZBd0ZCd1ZDeDd2ZEeDd3ZFd4ZGd5ZHd6ZId7ZJd8ZKd9ZLd:ZMd;ZNdZQd?ZRd@ZSdAedBZTdCedBZUdDeZVdEeZWdFeZXdGZYdHZZdIZ[dJZ\dKZ]dLZ^dMZ_dNZ`dOZadPZbdQZcdRZddSZedTe\ZfdUe\ZgdVe\ZhdWjieƒZjdXZkdYjieƒZldZZmd[Znd\Zod]Zpd^Zqd_Zrd`jiedaZsdbeZtdceZuddedBZvdeeZwdfZxdgZydhZzdiZ{djZ|dkeZ}dlZ~dmZdnZ€doZdpZ‚dqZƒdrZ„dsZ…dtZ†duZ‡dvZˆdwZ‰dxedBZŠdyZ‹dzZŒd{Zd|ZŽd}Zd~ZdZ‘d€Z’dZ“d‚Z”dƒe”Z•d„Z–d…Z—d†Z˜d‡Z™dˆZšd‰Z›dŠZœd‹ZdŒjie dZžeŸeŸdŽœdd„Z d‘eŸd’œd“d”„Z¡d¥d•d–d—d˜œd™dš„Z¢d›eŸdœœddž„Z£d›d›dœœdŸd „Z¤d›eŸdœœd¡d¢„Z¥d›eŸdœœd£d¤„Z¦dS)¦éN)Ú BASE_UA_URLÚCONFIG_FIELD_ENVVAR_ALLOWLISTÚPRINT_WRAP_WIDTHÚDOCUMENTATION_URL)ÚAnyÚDictÚListÚOptionalÚTupleÚUnionc@seZdZdZdZdZdZdS)ÚTxtColorzzzzN)Ú__name__Ú __module__Ú __qualname__ÚOKGREENÚ DISABLEGREYÚFAILÚENDC©rrú1/usr/lib/python3/dist-packages/uaclient/status.pyr sr u✔u✘c@seZdZdZeƒZeƒZdS)ÚApplicationStatuszO An enum to represent the current application status of an entitlement N)r rrÚ__doc__ÚobjectÚENABLEDÚDISABLEDrrrrr src@seZdZdZdZdZdS)ÚContractStatusz¡ An enum to represent whether a user is entitled to an entitlement (The value of each member is the string that will be used in status output.) ÚyesÚnoN)r rrrÚENTITLEDÚ UNENTITLEDrrrrr*src@seZdZdZeƒZeƒZdS)ÚApplicabilityStatuszQ An enum to represent whether an entitlement could apply to this machine N)r rrrrÚ APPLICABLEÚ INAPPLICABLErrrrr 7sr c@seZdZdZdZdZdS)ÚUserFacingAvailabilitya‹ An enum representing whether a service could be available for a machine. 'Availability' means whether a service is available to machines with this architecture, series and kernel. Whether a contract is entitled to use the specific service is determined by the contract level. This enum should only be used in display code, it should not be used in business logic. rrN)r rrrÚ AVAILABLEÚ UNAVAILABLErrrrr#As r#c@seZdZdZdZdZdZdS)ÚUserFacingConfigStatuszš An enum representing the user-visible config status of UA system. This enum will be used in display code and will be written to status.json ZinactiveZactivezreboot-requiredN)r rrrÚINACTIVEÚACTIVEZREBOOTREQUIREDrrrrr&Rsr&c@s eZdZdZdZdZdZdZdS)ÚUserFacingStatusz¬ An enum representing the states we will display in status output. This enum should only be used in display code, it should not be used in business logic. ÚenabledÚdisabledzn/au—N)r rrrr(r'r"r%rrrrr)_s r)c@s.eZdZdZeƒZeƒZeƒZeƒZeƒZ dS)ÚCanEnableFailureReasonzK An enum representing the reasons an entitlement can't be enabled. N) r rrrrÚ NOT_ENTITLEDÚALREADY_ENABLEDr"ÚIS_BETAÚINCOMPATIBLE_SERVICErrrrr,ns r,c@s$eZdZdeeeddœdd„ZdS)ÚCanEnableFailureN)ÚreasonÚmessageÚreturncCs||_||_dS)N)r2r3)Úselfr2r3rrrÚ__init__|szCanEnableFailure.__init__)N)r rrr,r Ústrr6rrrrr1{s r1Z essentialZstandardZadvancedzError: {issue_id} not found.z#A fix is available in {fix_stream}.z The update is not yet installed.zSThe update is not installed because this system is not attached to a subscription. zXThe update is not installed because this system is attached to an expired subscription. zQThe update is not installed because this system does not have {service} enabled. z The update is already installed.zPFor easiest security on {title}, use Ubuntu Pro. https://ubuntu.com/{cloud}/pro.z {issue} is resolved.z {issue} is not resolved.z% {issue} does not affect your system.z.{count} affected package{plural_str} installedz{issue} is addressed.z{issue} is resolved.z7{issue}: {title} https://ubuntu.com/security/{url_path}zRError: UA service: {service} is not enabled. Without it, we cannot fix the system.zgError: The current UA subscription is not entitled to: {service}. Without it, we cannot fix the system.zAPT install failed.zAPT update failed.zAAPT update failed to read APT config for the following URL{}: {}.zFailure checking APT policy.zUpdating package listszXFailed to connect to authentication server Check your Internet connection and try again.z {error}z% Failed to access URL: {url}. {error}zoFailed to access URL: {url} Cannot verify certificate of server Please install "ca-certificates" and try again.zhFailed to access URL: {url} Cannot verify certificate of server Please check your openssl configuration.z2This command must be run as root (try using sudo).z4{title} is not currently enabled See: sudo ua statuszCould not enable {title}.zCould not disable {title}.z{title} enabledzoThis machine is already attached to '{account_name}' To use a different subscription first run: sudo ua detach.z/{title} is already enabled. See: sudo ua statuszZ{title} is not available for platform {arch}. Supported platforms are: {supported_arches}.z-{title} is not available for Ubuntu {series}.zY{title} is not available for kernel {kernel}. Supported flavors are: {supported_kernels}.z\{title} is not available for kernel {kernel}. Minimum kernel version required: {min_kernel}.zGThis subscription is not entitled to {title} For more information see: Ú.zKUnable to determine auto-attach platform support For more information see: z@Auto-attach image support is not available on {cloud_type} See: z>Auto-attach image support is not available on this image See: z7This machine is not attached to a UA subscription. See zKUbuntu Advantage server provided no aptURL directive for {entitlement_name}z*No Ubuntu Advantage operations are runningz0Operation in progress: {lock_holder} (pid:{pid})zAre you sure? (y/N) zEFailed running reboot_cmds script. See: /var/log/ubuntu-advantage.logz>Livepatch support requires a system reboot across LTS upgrade.zsnapd does not have wait command. Enabling Livepatch can fail under this scenario Please, upgrade snapd if Livepatch enable fails and try again.z:This FIPS install is out of date, run: sudo ua enable fipsz>FIPS support requires system reboot to complete configuration.z To obtain a token please visit: zFailed to attach machine. See z8Failed to enable default services, check: sudo ua statusz2This machine is now attached to '{contract_name}' z+This machine is now successfully attached' z:Cannot {operation} unknown service '{name}'. {service_msg}zUnexpected error(s) occurred. For more details, see the log: /var/log/ubuntu-advantage.log To file a bug run: ubuntu-bug ubuntu-advantage-toolsz~To use '{name}' you need an Ubuntu Advantage subscription Personal and community subscriptions are available at no charge See zEnabling default service {name}z-A reboot is required to complete {operation}.zDService {name} is recommended by default. Run: sudo ua enable {name}zThis machine is now detached.z&Unable to automatically detach machinez,One moment, checking your subscription firstz)Successfully refreshed your subscription.z#Unable to refresh your subscriptionz-Successfully processed your ua configuration.zUnable to process uaclient.confz›{service_being_enabled} cannot be enabled with {incompatible_service}. Disable {incompatible_service} and proceed to enable {service_being_enabled}? (y/N) zNCannot enable {service_being_enabled} when {incompatible_service} is enabled. zMUbuntu {series} does not provide {cloud} optimized FIPS kernel For help see: zsInvalid value for {path_to_value} in /etc/ubuntu-advantage/uaclient.conf. Expected {expected_value}, found {value}.z:Failed to find the machine token overlay file: {file_path}z8Found error: {error} when reading json file: {file_path}z]Package fixes cannot be installed. To install them, run this command as root (try using sudo)z * Introducing Extended Security Maintenance for Applications. Receive updates to over 30,000 software packages with your Ubuntu Advantage subscription. Free for personal use. {url} z CAUTION: Your {title} service will expire in {remaining_days} days. Renew UA subscription at {url} to ensure continued security coverage for your applications. zÍCAUTION: Your {title} service expired on {expired_date}. Renew UA subscription at {url} to ensure continued security coverage for your applications. Your grace period will expire in {remaining_days} days. z—*Your {title} subscription has EXPIRED* {pkg_num} additional security update(s) could have been applied via {title}. Renew your UA services at {url} z×*Your {title} subscription has EXPIRED* Enabling {title} service would provide security updates for following packages: {pkg_names} {pkg_num} {name} security update(s) NOT APPLIED. Renew your UA services at {url} z_Enable {title} to receive additional future security updates. See {url} or run: sudo ua status z(*Your {title} subscription has EXPIRED* zš*The following packages could receive security updates with {title} service enabled: {pkg_names} Learn more about {title} service {eol_release}at {url} zUUbuntu comes with ABSOLUTELY NO WARRANTY, to the extent permitted by applicable law. a;/* * Autogenerated by ubuntu-advantage-tools * Do not edit this file directly * * To change what ubuntu-advantage-tools sets, run one of the following: * Substitute "apt_https_proxy" for "apt_http_proxy" as necessary. * sudo ua config set apt_http_proxy= * sudo ua config unset apt_http_proxy */ z™# Ubuntu-Advantage client config file. # If you modify this file, run "ua refresh config" to ensure changes are # picked up by Ubuntu-Advantage client. zSetting {service} proxyz3"{proxy}" is not a valid url. Not setting as proxy.z/"{proxy}" is not working. Not setting as proxy.zEError trying to use "{proxy}" as proxy to reach "{test_url}": {error}z‡No proxy set in config; however, proxy is configured for: {{services}}. See {docs_url} for more information on ua proxy configuration. )Zdocs_url)Ústringr4cCstjjƒrtj||ƒS|S)z=Return colorized string if using a tty, else original string.)ÚsysÚstdoutÚisattyÚ STATUS_COLORÚget)r:rrrÚcolorize4sr@zList[List[str]])Úcommandsr4cCsxd}x&|D]}|r|d7}|dj|ƒ7}q Wdjtj|tdddƒ}d|krXd }d }nd }d }d jtj|||tjdS)NÚz && ú z \ éz )ÚwidthÚsubsequent_indentÚ z{ z }z{ z }z%{color}{prefix}{content}{suffix}{end})ZcolorÚprefixÚcontentÚsuffixÚend)ÚjoinÚtextwrapÚwraprÚformatr rr)rArIÚcmdZwrapped_contentrHrJrrrÚcolorize_commands9s& rQzList[Tuple[str, str]]z Optional[str]z List[str])Ú column_dataÚheaderr4csjdg}|r|j|ƒtdd„|Dƒƒ}|dkrRdj|ƒ‰|j‡fdd„|Dƒƒn|jdd„|Dƒƒ|S)zžReturn a list of content lines to print to console for a section Content lines will be center-aligned based on max value length of first column. rBcSsg|]}t|dƒ‘qS)r)Úlen)Ú.0Úpairrrrú `sz.get_section_column_content..rz{{:>{}}}: {{}}csg|]}ˆj|Ž‘qSr)rO)rUrV)ÚtemplaterrrWcscSsg|] }|d‘qS)ér)rUrVrrrrWfs)ÚappendÚmaxrOÚextend)rRrSrIZtemplate_lengthr)rXrÚget_section_column_contentUs  r]zDict[str, Any])Ústatusr4c Cs–|dsVtjddddg}x"|dD]}|jtjf|Žƒq$W|jdtgƒdj|ƒStg}xb|dD]V}|d }|jd ƒ}|r„|n|d }|d t|ƒt|d ƒ|dœ}|jt jf|ŽƒqfW|dd}|jdƒrò|jt |jdƒpègddƒ|jdƒg} |dd } | r | jd| fƒ|dd } | r@| jd| fƒ|ddkrv| jdt |dƒfƒ| jdt|ƒfƒ| rŒ|jt | dƒdj|ƒS)z&Format status dict for tabular output.ZattachedZSERVICEr$Z DESCRIPTION)ÚnameÚ availableÚ descriptionÚservicesrBrGÚentitledZdescription_overriderar_r^)r_rcr^raÚcontractÚtech_support_levelZnoticesZNOTICES)rSz* Enable services with: ua enable ZaccountZAccountZ SubscriptionÚoriginÚfreez Valid untilÚexpireszTechnical support level)rR) ÚSTATUS_UNATTACHED_TMPLrOrZr\ÚMESSAGE_UNATTACHEDrLÚ STATUS_HEADERr?r@Ú STATUS_TMPLr]r7) r^rIÚserviceÚservice_statusrcZdescr_overrideraZfmt_argsreÚpairsÚ account_nameZ contract_namerrrÚformat_tabularjsL         rqcCsJdd„ttjjƒƒDƒ|d<dd„|jdgƒDƒ}||d<|jddƒ|S)NcSs8g|]0\}}|jƒtks*|jdƒs*|dkr||dœ‘qS)Z UA_FEATURESZUA_CONFIG_FILE)r_Úvalue)ÚlowerrÚ startswith)rUr_rrrrrrW¦s  z)_format_status_output..Zenvironment_varscSs g|]}|jddƒdkr|‘qS)r`r)r?)rUrmrrrrW®srbrfrB)ÚsortedÚosÚenvironÚitemsr?Úpop)r^Zavailable_servicesrrrÚ_format_status_output¤s rzcCsddlm}tjt|ƒ|dS)Nr)ÚDatetimeAwareJSONEncoder)Úcls)Ú uaclient.utilr{ÚjsonÚdumpsrz)r^r{rrrÚformat_json_statusºs r€cCsddl}|jt|ƒddS)NrF)Údefault_flow_style)ÚyamlÚdumprz)r^r‚rrrÚformat_yaml_statusÂsr„)N)§Úenumr~r;rMrvÚuaclient.defaultsrrrrÚtypingrrrr r r Ú ImportErrorr rrZ OKGREEN_CHECKrZFAIL_XÚuniqueÚEnumrrr r#r&r)r,r1Z ESSENTIALZSTANDARDZADVANCEDr(rrr'r"rr%rrr>Z$MESSAGE_SECURITY_FIX_NOT_FOUND_ISSUEZ#MESSAGE_SECURITY_FIX_RELEASE_STREAMZ%MESSAGE_SECURITY_UPDATE_NOT_INSTALLEDZ2MESSAGE_SECURITY_UPDATE_NOT_INSTALLED_SUBSCRIPTIONZ-MESSAGE_SECURITY_UPDATE_NOT_INSTALLED_EXPIREDZ!MESSAGE_SECURITY_SERVICE_DISABLEDZ!MESSAGE_SECURITY_UPDATE_INSTALLEDZMESSAGE_SECURITY_USE_PRO_TMPLZMESSAGE_SECURITY_ISSUE_RESOLVEDÚ#MESSAGE_SECURITY_ISSUE_NOT_RESOLVEDZ!MESSAGE_SECURITY_ISSUE_UNAFFECTEDZMESSAGE_SECURITY_AFFECTED_PKGSZMESSAGE_USN_FIXEDZMESSAGE_CVE_FIXEDZMESSAGE_SECURITY_URLZ'MESSAGE_SECURITY_UA_SERVICE_NOT_ENABLEDZ(MESSAGE_SECURITY_UA_SERVICE_NOT_ENTITLEDZMESSAGE_APT_INSTALL_FAILEDZMESSAGE_APT_UPDATE_FAILEDZ%MESSAGE_APT_UPDATE_INVALID_URL_CONFIGZMESSAGE_APT_POLICY_FAILEDZMESSAGE_APT_UPDATING_LISTSZMESSAGE_CONNECTIVITY_ERRORZLOG_CONNECTIVITY_ERROR_TMPLZ$LOG_CONNECTIVITY_ERROR_WITH_URL_TMPLZ.MESSAGE_SSL_VERIFICATION_ERROR_CA_CERTIFICATESZ-MESSAGE_SSL_VERIFICATION_ERROR_OPENSSL_CONFIGÚMESSAGE_NONROOT_USERÚMESSAGE_ALREADY_DISABLED_TMPLZMESSAGE_ENABLED_FAILED_TMPLZMESSAGE_DISABLE_FAILED_TMPLZMESSAGE_ENABLED_TMPLÚMESSAGE_ALREADY_ATTACHEDÚMESSAGE_ALREADY_ENABLED_TMPLÚMESSAGE_INAPPLICABLE_ARCH_TMPLÚ MESSAGE_INAPPLICABLE_SERIES_TMPLÚ MESSAGE_INAPPLICABLE_KERNEL_TMPLÚ$MESSAGE_INAPPLICABLE_KERNEL_VER_TMPLÚMESSAGE_UNENTITLED_TMPLZ&MESSAGE_UNABLE_TO_DETERMINE_CLOUD_TYPEZ*MESSAGE_UNSUPPORTED_AUTO_ATTACH_CLOUD_TYPEZMESSAGE_UNSUPPORTED_AUTO_ATTACHrjÚ!MESSAGE_MISSING_APT_URL_DIRECTIVEZMESSAGE_NO_ACTIVE_OPERATIONSÚMESSAGE_LOCK_HELDÚ PROMPT_YES_NOZMESSAGE_REBOOT_SCRIPT_FAILEDZ%MESSAGE_LIVEPATCH_LTS_REBOOT_REQUIREDZ$MESSAGE_SNAPD_DOES_NOT_HAVE_WAIT_CMDZ MESSAGE_FIPS_INSTALL_OUT_OF_DATEZMESSAGE_FIPS_REBOOT_REQUIREDZ$MESSAGE_FIPS_DISABLE_REBOOT_REQUIREDZ"MESSAGE_FIPS_PACKAGE_NOT_AVAILABLEZNOTICE_FIPS_MANUAL_DISABLE_URLZ&NOTICE_WRONG_FIPS_METAPACKAGE_ON_CLOUDZPROMPT_FIPS_PRE_ENABLEZPROMPT_FIPS_UPDATES_PRE_ENABLEZPROMPT_FIPS_PRE_DISABLErOZPROMPT_ENTER_TOKENZPROMPT_EXPIRED_ENTER_TOKENZPROMPT_UA_SUBSCRIPTION_URLrirkrlZ MESSAGE_ATTACH_FORBIDDEN_EXPIREDZ MESSAGE_ATTACH_FORBIDDEN_NOT_YETZMESSAGE_ATTACH_FORBIDDEN_NEVERZMESSAGE_ATTACH_FORBIDDENZMESSAGE_ATTACH_EXPIRED_TOKENZMESSAGE_ATTACH_INVALID_TOKENZMESSAGE_ATTACH_REQUIRES_TOKENZMESSAGE_ATTACH_FAILUREZ'MESSAGE_ATTACH_FAILURE_DEFAULT_SERVICESZMESSAGE_ATTACH_SUCCESS_TMPLZ'MESSAGE_ATTACH_SUCCESS_NO_CONTRACT_NAMEZ'MESSAGE_INVALID_SERVICE_OP_FAILURE_TMPLZMESSAGE_UNEXPECTED_ERRORZ&MESSAGE_ENABLE_FAILURE_UNATTACHED_TMPLÚMESSAGE_ENABLE_BY_DEFAULT_TMPLZ#MESSAGE_ENABLE_REBOOT_REQUIRED_TMPLÚ%MESSAGE_ENABLE_BY_DEFAULT_MANUAL_TMPLZMESSAGE_DETACH_SUCCESSZ!MESSAGE_DETACH_AUTOMATION_FAILUREZMESSAGE_REFRESH_CONTRACT_ENABLEZ MESSAGE_REFRESH_CONTRACT_SUCCESSZ MESSAGE_REFRESH_CONTRACT_FAILUREZMESSAGE_REFRESH_CONFIG_SUCCESSZMESSAGE_REFRESH_CONFIG_FAILUREÚMESSAGE_INCOMPATIBLE_SERVICEÚ)MESSAGE_INCOMPATIBLE_SERVICE_STOPS_ENABLEZMESSAGE_FIPS_BLOCK_ON_CLOUDÚERROR_INVALID_CONFIG_VALUEZ&INVALID_PATH_FOR_MACHINE_TOKEN_OVERLAYZERROR_JSON_DECODING_IN_FILEZMESSAGE_SECURITY_APT_NON_ROOTZMESSAGE_ANNOUNCE_ESM_TMPLZ"MESSAGE_CONTRACT_EXPIRED_SOON_TMPLZ*MESSAGE_CONTRACT_EXPIRED_GRACE_PERIOD_TMPLZ'MESSAGE_CONTRACT_EXPIRED_MOTD_PKGS_TMPLZ&MESSAGE_CONTRACT_EXPIRED_APT_PKGS_TMPLZ"MESSAGE_DISABLED_MOTD_NO_PKGS_TMPLZ)MESSAGE_CONTRACT_EXPIRED_APT_NO_PKGS_TMPLZMESSAGE_DISABLED_APT_PKGS_TMPLZMESSAGE_UBUNTU_NO_WARRANTYZMESSAGE_APT_PROXY_CONFIG_HEADERZMESSAGE_UACLIENT_CONF_HEADERZMESSAGE_SETTING_SERVICE_PROXYÚ%MESSAGE_NOT_SETTING_PROXY_INVALID_URLÚ%MESSAGE_NOT_SETTING_PROXY_NOT_WORKINGÚMESSAGE_ERROR_USING_PROXYZ)MESSAGE_PROXY_DETECTED_BUT_NOT_CONFIGUREDr7r@rQr]rqrzr€r„rrrrÚsh$               :