­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ 3 `3@s^ddlmZddlmZddlmZmZddlZddlZddlZddl Z ddl Z ddl Z ddl m Z ddl mZddlZddlZddlZddlZddlmZddlmZd Zed Zed Zed Zed ZedZedZedZedZedZ edZ!edZ"edZ#Gdddej$Z%Gdddej&j'Z(ddZ)Gddde*Z+ddZ,d d!Z-dS)")absolute_import)unicode_literals)_loggerN)copy)PRIO_PLUGINCONFIG)ustr) up2dateErrorsz_spacewalk.jsonzCRed Hat Satellite or Spacewalk based repositories will be disabled.z@Red Hat Satellite or Spacewalk channel support will be disabled.zLThere was an error communicating with Red Hat Satellite or Spacewalk server.zIThis system is not registered with Red Hat Satellite or Spacewalk server.z.This system is not subscribed to any channels.zSystemId could not be acquired.z%You can use rhn_register to register.zLThis system is receiving updates from Red Hat Satellite or Spacewalk server.zFor security reasons packages from Red Hat Satellite or Spacewalk based repositories can be verified only with locally installed gpg keys. GPG key '%s' has been rejected.z.Package profile information could not be sent.zIMissing required login information for Red Hat Satellite or Spacewalk: %sz>Spacewalk plugin has to be run under with the root privileges.csReZdZdZfddZddZdddZd d Zd d Zd dZ ddZ Z S) SpacewalkZ spacewalkcstt|j||||_||_tjj|jjj t |_ d|_ i|_ t|jj|_|j|j|_d|jjkr|jjd}x |D]\}}|jj||tq|Wtjjstjtd|j_|jjsdStjd|jdS)NFmainzinitialized Spacewalk plugin)superr __init__basecliospathjoinconfZ persistdirSTORED_CHANNELS_NAMEstored_channels_pathconnected_to_spacewalk up2date_cfgrZ read_configparsersectionsitems _set_valuerdnfutilZ am_i_rootrwarning MUST_BE_ROOTenableddebugactivate_channels)selfrroptionskeyvalue) __class__/usr/lib/python3.6/spacewalk.pyr :s(    zSpacewalk.__init__cCs|jjs dSd|jj_dS)NT)rr rZdemandsZ root_user)r#r(r(r)configQszSpacewalk.configTc)Csdi}d}d}d}d}|j}|s(|}nvtjj|_t|j}|jdf}ytjj|jj d}Wn2t j k r}zt j dtt|dSd}~XnX|st j dtt|jidSytjj|jj d} Wnt jk r}zt j dtt|dSd}~XnXt jk r,t j dtt|jidSt jk rTt j dttttdSXd|_t jtx,| D]$} | drlt| j|| d <qlW|j||j j!} x|jD]\} } |j"| }d}|r|j"d}t#|j}| |j$j%kr|j$j| }x |D]\}}|j&||t'qWt(| |j j||j |||||j)|j*d }| j+|qWt j,|dS) NrZuseNoSSLForPackages)timeoutz%s %s %sz%s %sz %s %s %s %sTversionlabel) rproxyr+ sslcacert force_httpcached_version login_infogpgcheckr )-_read_channels_fileup2date_clientr*ZinitUp2dateConfigrget_ssl_ca_certZ up2dateAuthZ getLoginInforr+r RhnServerExceptionrerrorCOMMUNICATION_ERROR RHN_DISABLEDNOT_REGISTERED_ERROR_write_channels_fileZ rhnChannelZgetChannelDetailsZCommunicationErrorZNoChannelsErrorNOT_SUBSCRIBED_ERRORCHANNELS_DISABLEDZNoSystemIdErrorNO_SYSTEM_ID_ERRORUSE_RHNREGISTERrinfoUPDATES_FROM_SPACEWALKdictrrreposgetrrrrr SpacewalkRepor3r addr!)r#Z networkingZenabled_channelsr/r0Z proxy_urlr2Zcached_channelseZ svrChannelschannelrDZ channel_idZ channel_dictZcached_channelr1rr$r%r&repor(r(r)r"Vs~               zSpacewalk.activate_channelscCs|jjs dS|jsdS|jddkr8|j}tjj|ytjj|jj dWn4t j k r}zt j dtt|WYdd}~XnXdS)z, Update system's profile after transaction. NZwriteChangesToLog)r+z%s %s %s)rr rr_make_package_deltar5ZrhnPackageInfoZlogDeltaPackagesZupdatePackageProfiler+r r7rr8r9PROFILE_NOT_SENT)r#deltarHr(r(r) transactions zSpacewalk.transactioncCsy.t|jd}|j}tj|}|SQRXWnXttfk rb}z|jtjkrRWYdd}~Xn&tj j k r}zWYdd}~XnXiS)Nr) openrreadjsonloadsFileNotFoundErrorIOErrorerrnoENOENTdecoderZJSONDecodeError)r# channels_fileZcontentZchannelsrHr(r(r)r4s  zSpacewalk._read_channels_filecCsfy,t|jd}tj||ddWdQRXWn4ttfk r`}z|jtjkrPWYdd}~XnXdS)Nw)indent)rQrrSdumprUrVrWrX)r#varrZrHr(r(r)r<s  zSpacewalk._write_channels_filecCs.dd|jjjDdd|jjjDd}|S)NcSs$g|]}|j|j|j|j|jfqSr()namer,releaseepocharch).0pr(r(r) sz1Spacewalk._make_package_delta..cSs$g|]}|j|j|j|j|jfqSr()r`r,rarbrc)rdrer(r(r)rfs)ZaddedZremoved)rrOZ install_setZ remove_set)r#rNr(r(r)rLs  zSpacewalk._make_package_delta)T) __name__ __module__ __qualname__r`r r*r"rOr4r<rL __classcell__r(r()r'r)r 6s  Mr csDeZdZdZdddddgZfddZd d Zdfd d ZZS)rFzB Repository object for Spacewalk. Uses up2date libraries. zX-RHN-Server-IdzX-RHN-Auth-User-Idz X-RHN-AuthzX-RHN-Auth-Server-TimezX-RHN-Auth-Expire-OffsetcsTttjt|d|jdt|d_fdd|dD_|jd_|jd_yt |d _ Wn<t k r}z t j ttjj|g_ WYdd}~XnX|d |jd krd _|jd _d_d_d _d_|jd_|jd_|jd_|jdr$jnjtdrPj}|rPj|dS)Nr-rr`csg|]}|djqS)z /GET-REQ/)id)rdurl)r#r(r)rfsz*SpacewalkRepo.__init__..rlr/r.Z gpg_key_urlr,r1rKr2rr+r3r0r set_http_headers) r rFr rrEr`Zbaseurlr/r.get_gpg_key_urlsZgpgkeyInvalidGpgKeyLocationrrGPG_KEY_REJECTEDrZi18nZucdZmetadata_expirer2Z keepaliveZ bandwidthZretriesZthrottler+r3r0enabledisablehasattrcreate_http_headersrm)r#rIZoptsrH http_headers)r')r#r)r s8          zSpacewalkRepo.__init__cCs|g}xb|jD]X}||jkr.t|}tjj||j|dkrL|jd|q |jd||j|fq W|jsx|jd|S)Nz*%s: X-libcurl-Empty-Header-Workaround: *z%s: %sz.X-RHN-Transport-Capability: follow-redirects=3)Nrv)needed_headersr2MISSING_HEADERrErrorZ RepoErrorappendr0)r#ruheaderr8r(r(r)rts    z!SpacewalkRepo.create_http_headersTcs0tt|j||}|j}|r,|jtj||S)N)r rF_handle_new_remotertZsetoptlibrepoZLRO_HTTPHEADER)r#ZdestdirZ mirror_setupZhandleru)r'r(r)r|s z SpacewalkRepo._handle_new_remote)T) rgrhri__doc__rwr rtr|rjr(r()r'r)rFs %rFcCs*|j}x|D]}t|st|qW|S)a Parse the key urls and validate them. key_url_string is a space seperated list of gpg key urls that must be located in /etc/pkg/rpm-gpg/. Return a list of strings containing the key urls. Raises InvalidGpgKeyLocation if any of the key urls are invalid. )splitis_valid_gpg_key_urlro)Zkey_url_stringZkey_urlskey_urlr(r(r)rn s   rnc@s eZdZdS)roN)rgrhrir(r(r(r)ro/srocCsP|jd}t|dkrdS|\}}|jdkr2dStjj|}|jdsLdSdS)Nz://Ffilez/etc/pki/rpm-gpg/T)rlenlowerrrnormpath startswith)rZ proto_splitprotorr(r(r)r2s     rcCs4d|ko|dst|d}t|tkr0|dS|S)NZ sslCACertr)ZBadSslCaCertConfigtypelist)rZca_certsr(r(r)r6@s  r6).Z __future__rrZdnfpluginscorerrrZdnf.exceptionsrWrSr}rrZdnf.conf.configrZup2date_client.up2dateAuthr5Zup2date_client.configZup2date_client.rhnChannelZup2date_client.rhnPackageInfoZrhn.i18nrr rr:r>r9r;r=r?r@rBrprMrxrZPluginr rJZReporFrn Exceptionrorr6r(r(r(r)sH      M