Mj
@
D d Z ddlZddlZddlZddlZddlZddlZddlmc m Z
ddl m Z ddl
mZ ddlmZmZ ddlmZ ddlmZmZmZmZmZmZmZ ddlmZm Z dd l m Z ddl Z dd
l m!Z! dd l"m#Z# dd l$m%Z% dd
l&m'Z'm(Z(m)Z)m*Z* ddl+m,Z,m-Z- ddl.m/Z/ ddl0m1Z1 ddl+m2Z2 ddl3m4Z4 ddl5m6Z6 ej7 d Z8 e dddg Z9de:de:fdZ;de:de9fd ZdFd Z?dGd!e:d"e@de:fd#ZAd$e:de:fd%ZBdHd'e:d(eCdefd)ZDde:fd*ZEdId,e:de:fd-ZFde:fd.ZGd/eCdeHfd0ZId1e:dee: fd2ZJde@fd3ZKde@fd4ZLde@fd5ZMd6e@ddfd7ZNde@fd8ZOde:fd9ZPd:e:d;e e:ef de@fd<ZQd= ZRedJd>eCddfd? ZSe dKdBeCdCeCd>eCddfdD ZTdAZUdE ZVdS )Lz>
This module contains helpful utility functions for SSA Agent
N)
namedtuple)contextmanager)date timedelta) LooseVersion)socketfromfdAF_UNIX SOCK_STREAMAF_INETAF_INET6
SOCK_DGRAM)OptionalUnion)urlparse)AtexitIntegration)LoggingIntegration)Feature)is_panel_feature_supportedget_cp_descriptionis_throttling_supportedis_wp2_environment)get_kmodlve_module_version get_username)get_cl_edition_readable) get_hostname)get_rhn_systemid_value )
sentry_dsn)SSAErrorutilsURL domain_nameuri_pathurlreturnc R t | j dd S )u
The domain string the request processor stores as RequestResult.domain.
This is the single source of truth for a URL's domain attribution: it
operates on the raw netloc and removes every 'www.' substring, exactly as
the stored metric is keyed. The authorizer MUST derive its decision from
this same value (see SimpleAgent._authorize_sender) — any divergence
re-opens cross-tenant metric spoofing.
zwww. )r netlocreplace)r% s I/opt/cloudlinux/venv/lib64/python3.11/site-packages/ssa/internal/utils.pycanonical_stored_domainr, 0 s# C== ' ' 3 33 c t | }|j r
d|j nd}|j r |j | nd}t t | | S )z
Split URL into domain_name and uripath including query string
:param url: URL of format protocol://domain/path;parameters?query#fragment
:return: namedtuple URL(domain_name, uripath)
?r( /)r querypathr" r, )r% fragmentsqsuris r+ url_splitr6 < sb
I"+/ 9 Y_ rB%.^
.add_info_ s& g }l ;<<< r- c t | t 5 }| |df | d cddd S # 1 swxY w Y dS # t $ r t
d Y dS w xY w)aI
address_family - we can choose constants represent the address
(and protocol) families
(AF_INET for ipv4 and AF_INET6 for ipv6)
private_ip - specify some private ip address. For instance:
ipv4 -> 10.255.255.255 or ipv6 -> fc00::
r r NzCannot retrieve IP address)r r connect getsockname Exceptionloggerinfo)address_family
private_ipss r+
try_get_ipz sentry_init..try_get_ipi s 6
33
*q :q/***}}q)
*
*
*
*
*
*
*
*
*
*
*
*
*
*
*
*
*
* 6 6 6 KK4 5 5 5 5 5 5 6s4 A" 1A A" AA" A A" "$B
B
c ` t dft dff} | D ]\ }} || }|r|c S dS )zq
We are trying to get an IPv4 or IPv6 address.
In case of failure we'll return 127.0.0.1
z10.255.255.255zfc00::z 127.0.0.1)r r
)
ipversionsaddr_fampriv_ipiprN s r+ get_ipzsentry_init..get_ipx sZ
/08X2FF
!+ HgHg..B
{r- c t }|r| d nd }|r| d nd }t rdnd }dt pdfd|fd|fd|fd t j fd
t
d fd t fd
t
d fd fdt ff
}|D ] } | j |
d S )NversionnameWP2z alt-php-xrayUNKNOWNzControl Panel NamezControl Panel VersionzControl Panel ProductkernelzCloudLinux version
os_releasezCloudlinux edition Architecture architecture
ip_addressusername)
r getr r= platformreleaser r r set_tag) sentry_scopecp_description
cp_versioncp_name
cp_producttagstagrT s r+ set_tagsz sentry_init..set_tags s +--6DN^'' 222$
0>H.$$V,,,D 0 2 2.nope s r- zalt-php-ssa@0.4-30.el8)level event_level)callbacki' )dsn before_sendrb max_value_length integrationsid system_idr& N)dictr; r loggingINFOWARNINGr
sentry_sdkinitr configure_scoper r r userrH ) rD rk rp ssa_versentry_logging
silent_atexitscoperT rN s @@r+ sentry_initr S s D T
6
6
6
' ' ' ' '.
mm7 7G'glXXXN%t444MO $m4
# % % 2; ? ? o6688 o|~~ oamaoaop
HUOOOO D s6 %=D # C/.D /
C<9D ;C<<D DDFfnameas_errorc L t j | t j dd t j | d n# t
$ r Y nw xY w| S # t $ rL}t |r t j n t j dt | Y d}~dS d}~ww xY w)zz
Try to configure logging into given fname
If as_error True, log the exception as ERROR, otherwise -- as INFO
z%(asctime)s %(message)sz%m/%d/%Y %I:%M:%S %p)filenamerq formatdatefmti z$No logging configuration applied: %sN) r| basicConfigr} oschmodPermissionErrorOSErrorrI logERRORstr)r r es r+ set_logging_into_filer s
p',7PZp
HUE " " " " D p p p
H>7==',@fhklmhnhnooooooooops8 "A
; A
AA
AA
B#AB B#lognamec H t t | t j t j | n@# t $ r3}t dt | Y d}~dS d}~ww xY wt | d } | S )zP
Configure logging
:param logname: path to log
:return: logpath
NzFailed to create logdir %sr( T)r )
r r r makedirsr2 dirnamerH rI warningr )r r s r+ configure_loggingr s MMM W%%- K00 1 1 1 1 NN7Q @ @ @22222 ($??? Ns 1A
B(B B
sock_locationbacklogc t t j dd }|dk rft d 5 t t }| | | | ddd n # 1 swxY w Y n0t dt t }| | |S )a
Create socket in given sock_location with restricted permissions
or reuse existing one
:param sock_location: socket address
:param backlog: maximum number of queued connections (default 2048 for high-traffic servers)
:return: socket object
LISTEN_FDSr I N ) intr environr` umask_0r r
bindlistenr r )r r r sockobjs r+
create_socketr s RZ^^L!4455JQ
U^^ $ $ WooG LL ' ' ' NN7 # # # $ $ $ $ $ $ $ $ $ $ $ $ $ $ $
G[11w Ns ?BBBc t t j t d z
} | d S )zC
Returns date of previous day in a format "day.month.year"
r )days%d.%m.%Y)r todayr strftime) yesterdays r+ previous_day_dater s3
ya 0 0 00I j ) ))r- r datestrc l t j | | }| d S )z+
Convert date to format YYYY-mm-dd
z%Y-%m-%d)datetimestrptimer )r formatstr_dates r+ format_dater s.
& &w : :E >>* % %%r- c t j d } | }| d j }t j 5 }| d| ddd n # 1 swxY w Y | d S # t t j
f$ r3}t dt | Y d}~dS d}~ww xY w)ze
Obtain system ID from /etc/sysconfig/rhn/systemid
:return: system ID without ID- prefix
z/etc/sysconfig/rhn/systemidz(.//member[name='system_id']/value/stringry NzID-z Failed to retrieve system_id: %s)ETparsegetrootfindtextr r rc lstripr
ParseErrorrI r r )treerootwhole_idr r s r+ read_sys_idr s
Cx566||~~99 GHHM
'
)
) 1U MM+x 0 0 0 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1u%%% R] # C C C93q66BBBBBBBBBCs< AB A:. B :A>>B A>B C#0(C C#durationc B t t | dz d S )zQ
Cast duration from microseconds to seconds leaving 2 digits after point
i@B z0.2f)floatr )r s r+
duration_castr s! 7*F33 4 44r- filepathc & t | 5 }| }ddd n # 1 swxY w Y n# t $ r Y dS w xY wd | d dd pdS )zDGet version of package from file. alt-php-ssa/alt-php-xray supportedN. z0.0-0)openreadstripr joinsplit)r v_filerV s r+ r9 r9 s
(^^ ,v kkmm))++G , , , , , , , , , , , , , , , 88GMM#&&rr* + + 6w6s3 A 'A A AA A A
A A c t } | dS t | t d k S # t t f$ r Y dS w xY w)zb
Check version of alt-php-xray package.
Autotracing in X-Ray is supported since 0.4-1
NFz0.4-1)r= r TypeErrorAttributeError)version_numbers r+ is_xray_version_supportedr s_
"^^N uN++|G/D/DDD ~ & uus 4 A A c d} t t t 5 } | | n## t t
f$ r Y ddd dS w xY w ddd n # 1 swxY w Y dS )z Check if User Agent is listeningz$/opt/alt/php-xray/run/xray-user.sockNFT)r r
r rF ConnectionErrorr )user_agent_sockrM s r+ is_xray_user_agent_activer ) s >, - - t
X(#
.
. /*z(())Q. / / / / / / / / / / / / / / / / / / 9 uus4 A9 %A, A9 ,A00A9 3A04A9 9B B enabledc t t j sdS t d| t ddd 5 }| | rdnd t d ddd dS # 1 swxY w Y dS # t $ r4}t d
| t | Y d}~dS d}~ww xY w) zb
Switch on/off throttle statistics gathering by kmodlve
:param enabled: True or False
NzSwitching schedstats: %sz!/proc/sys/kernel/sched_schedstatswbr )mode buffering 1 0zDone OKz(Failed to set sched_schedstats to %s: %s) r r LVErI rJ r writer r )r fr s r+ switch_schedstatsr D s/
&gk 2 2
KK*G444Q
5DA
N
N
N #RS
GGG-DD . . . KK " " " # # # # # # # # # # # # # # # # # # Q Q Q >QPPPPPPPPPQs; B
4B > B BB BB
C")CCc t d } t d }t }|rt || S t t | S )z
Check kmodlve module version or kernel version in order to determine
if it provides the detection of IO throttling
z2.0-23z1.5.58)r r compare_versions_geextract_kernel_version)kmod_min_versionkernel_min_version kmod_currents r+ $is_io_throttling_detection_availabler V s]
$H--%h//-//L C"<1ABBB 5 7 79K L LLr- c t j d } t j } | | d }n# t $ r Y dS w xY w|S )zO
Get kernel version in the form of "major-minor" from current platform
zlve([0-9]+(\.[0-9]+)+)\.elr z0.0.0)recompilera rb searchgroupr )patternrb version_nums r+ r r c sp j677G G nnW--33A66 ww s (A
A A
first_versionsecond_versionc r t | |k S # t $ r t d| d| d w xY w)zE
Comparing two versions using the greater or equal operator.
zAUnable to compare required versions: unexpected versions format "z" and "")r r r )r r s r+ r r p s_
M**n<<
wP] w wft w w w
s !6c > t sdS t S )zR
General check of kernel support (IO throttling availability is required)
T)r r r: r- r+ is_kernel_version_supportedr | s# # $ $ t / 1 11r- maskc # K t j | } dV t j | dS # t j | w xY w)z,
Context manager for dropping umask
N)r umask)r prevs r+ r r sF
8D>>D
s 2 Ar T
target_uid
target_gidc # K t j }t j } t j | }n# t $ r d}Y nw xY w| ||} n|j } | ||}n|j }|t j | }||k rWt j | t
d| |r&t j |k rt d || k rqt j
| t
d| |r@t j | k r)||k rt j | t d dV || k r/t j
| t
d| ||k r/t j | t
d| |t j | dS dS # || k r/t j
| t
d| ||k r/t j | t
d| |t j | w w xY w)aH
Context manager to drop privileges during some operation
and then restore them back.
If target_uid or target_gid are given, use input values.
Otherwise, stat target_uid and target_gid from given target_path.
If no target_path given, use current directory.
Use mask if given.
:param target_uid: uid to set
:param target_gid: gid to set
:param target_path: directory or file to stat for privileges,
default -- current directory
:param mask: umask to use
:param with_check: check the result of switching privileges
NzDropped GID privs to %sz6Unable to execute required operation: permission issuezDropped UID privs to %szRestored UID privs to %szRestored GID privs to %s)r getuidgetgidstatr st_uidst_gidr setegidrI debuggetegidr seteuidgeteuid) r
r target_pathr
with_checkprev_uidprev_gid stat_infor s r+ set_privilegesr s{ $ y{{Hy{{HGK(( !JJ")J !JJ")J x~~:
: .
;;; U"*,,*44STT T:
: .
;;; U"*,,*44:%%
8$$$STT T
z ! ! Jx LL3X > > > z ! ! Jx LL3X > > > HTNNNNN z ! ! Jx LL3X > > > z ! ! Jx LL3X > > > HTNNNN s ? A
AG BI#c 2 G d d } || S )Nc e Zd ZdZd Zd ZdS ) singleton..__Singletonzm
A singleton wrapper class. Its instances would be created
for each decorated class.
c " || _ d | _ d S rm )_wrapped _instance)self_clss r+ __init__z'singleton..__Singleton.__init__ s DM !DNNNr- c P | j t s | j |i || _ | j S )z,Returns a single instance of decorated class)r" IS_SINGLETON_ENABLEDr! )r# argskwargss r+ __call__z'singleton..__Singleton.__call__ s0 ~%-A%!. !?!?!?> !r- N)__name__
__module__ __qualname____doc__r% r* r: r- r+ __Singletonr s<
" " " " " " " "r- r/ r: )some_clsr/ s r+ singletonr1 s< " " " " " " " " ;x r- rz )F)r )r )r )NNr NT)Wr. r r r| r ra r xml.etree.ElementTreeetree ElementTreer collectionsr
contextlibr r r distutils.versionr r r r
r r r
r typingr r urllib.parser r sentry_sdk.integrations.atexitr sentry_sdk.integrations.loggingr clcommon.constr clcommon.cpapir r r r clcommon.utilsr r clcommon.lib.cleditionr clcommon.lib.networkr r constantsr
exceptionsr getLoggerrI r" r r, r6 r; r= r boolr r r r r r r r r r9 r r r r r r r r r r r' r1 r: r- r+ rE sx
" " " " " " " " " " " " " " " % % % % % % $ $ $ $ $ $ $ $ * * * * * * V V V V V V V V V V V V V V V V V V " " " " " " " " ! ! ! ! ! ! < < < < < < > > > > > > " " " " " " v v v v v v v v v v v v C C C C C C C C : : : : : : - - - - - - 1 1 1 1 1 1 ! ! ! ! ! ! 7 # #j
344 4 4 4 4 4 4
23
23
2
2
2
26Xc] 6 6 6 6
:hsm : : : :
[ [ [ [|p p p p p p p p$s s " s f (*3 * * * *& & &s & & & &
CS
C
C
C
C 5C 5E 5 5 5 57# 7(3- 7 7 7 7 4 4
d
Qt Q Q Q Q Q$
Md
M
M
M
M
s
E#|BS