3
\me @ s U d Z ddlZddlZddlZddlZddlZddlZddlZddlm Z m
Z
ddl m Z m
Z
mZmZ ddlmZmZmZmZmZ ddlmZ ddlmZ ddlmZm Z dd l m Z ej e Z!d
Z"d Z#d Z$d
Z%dZ&e Z'ddgZ(dddZ)ee*e*f )ddde de(e de dge'g dZ+e+e e+Z dZ,d Z-d Z.d Z/d d d!Z0d"d"d!Z1d#d$gZ2d%d&d'd(d)d*gZ3d}d+d,Z4e*eee5dd-d.d/Z6d0d1 Z7d2d3 Z8d~d4d5Z9dd6d7Z:dd8d9Z;d:d; Zd? Z>d@dA Z?e*e*dBdCdDZ@e*dEdFdGZAe*dEdHdIZBdJdK ZCe*eDdLdMdNZEdOdPdQdRZFdSZGe e*e*f dEdTdUZHdVdW ZIddYdZZJd[d\ ZKdd]d^ZLd_d` ZMddadbZNdcdd ZOdedf ZPdgdh ZQdidj ZRdkdl ZSdmdn ZTdodp ZUdqdr ZVdsdt ZWddudvZXdwdx ZYddzd{ZZd|e.sources`. When the value
of `sources_list` does not appear to be deb822 format, or stable
distribution releases disable deb822 format,
:file:`/etc/apt/sources.list` will be written instead.
.. note::
To ensure that apt configuration is valid yaml, any strings
containing special characters, especially ``:`` should be quoted.
.. note::
For more information about apt configuration, see the
``Additional apt configuration`` example.a- apt:
preserve_sources_list: false
disable_suites:
- $RELEASE-updates
- backports
- $RELEASE
- mysuite
primary:
- arches:
- amd64
- i386
- default
uri: 'http://us.archive.ubuntu.com/ubuntu'
search:
- 'http://cool.but-sometimes-unreachable.com/ubuntu'
- 'http://us.archive.ubuntu.com/ubuntu'
search_dns: false
- arches:
- s390x
- arm64
uri: 'http://archive-to-use-for-arm64.example.com/ubuntu'
security:
- arches:
- default
search_dns: true
sources_list: |
deb $MIRROR $RELEASE main restricted
deb-src $MIRROR $RELEASE main restricted
deb $PRIMARY $RELEASE universe restricted
deb $SECURITY $RELEASE-security multiverse
debconf_selections:
set1: the-package the-package/some-flag boolean true
conf: |
APT {
Get {
Assume-Yes 'true';
Fix-Broken 'true';
}
}
proxy: 'http://[[user][:pass]@]host[:port]/'
http_proxy: 'http://[[user][:pass]@]host[:port]/'
ftp_proxy: 'ftp://[[user][:pass]@]host[:port]/'
https_proxy: 'https://[[user][:pass]@]host[:port]/'
sources:
source1:
keyid: 'keyid'
keyserver: 'keyserverurl'
source: 'deb [signed-by=$KEY_FILE] http:/// bionic main'
source2:
source: 'ppa:'
source3:
source: 'deb $MIRROR $RELEASE multiverse'
key: |
------BEGIN PGP PUBLIC KEY BLOCK-------
------END PGP PUBLIC KEY BLOCK-------
source4:
source: 'deb $MIRROR $RELEASE multiverse'
append: false
key: |
------BEGIN PGP PUBLIC KEY BLOCK-------
------END PGP PUBLIC KEY BLOCK-------a # cloud-init version 23.4 will generate a deb822 formatted sources
# file at /etc/apt/sources.list.d/.sources instead of
# /etc/apt/sources.list when `sources_list` content is deb822
# format.
apt:
sources_list: |
Types: deb
URIs: http://archive.ubuntu.com/ubuntu/
Suites: $RELEASE
Components: main
)idnametitle descriptiondistrosZexamples frequencyZactivate_by_schema_keysz/var/lib/apt/listsz'/etc/apt/apt.conf.d/94cloud-init-configz)/etc/apt/apt.conf.d/90cloud-init-aptproxyzkeyserver.ubuntu.comz!http://archive.ubuntu.com/ubuntu/z"http://security.ubuntu.com/ubuntu/)PRIMARYSECURITYz$http://ports.ubuntu.com/ubuntu-portsamd64Zi386Zs390xZarm64ZarmhfZpowerpcZppc64elZriscv64c C sB | dkrt j|} | tkr"tj S | tkr2tj S td| dS )zreturns the default mirrors for the target. These depend on the
architecture, for more see:
https://wiki.ubuntu.com/UbuntuDevelopment/PackageArchive#PortsNz#No default mirror known for arch %s)r get_dpkg_architecturePRIMARY_ARCHESPRIMARY_ARCH_MIRRORScopy PORTS_ARCHES
PORTS_MIRRORS
ValueError)archtarget r$ &/usr/lib/python3.6/cc_apt_configure.pyget_default_mirrors s
r& )r cfgcloudargsreturnc C sP d}t |}|jdi }t|ts6tdjt|dt|| t||| dS )zprocess the config for apt_config. This can be called from
curthooks if a global apt config was provided or via the "apt"
standalone command.Naptz9Expected dictionary for 'apt' config, found {config_type})Z config_type) convert_to_v3_apt_formatget
isinstancedictr! formattypeapply_debconf_selections apply_apt)r r' r( r) r# apt_cfgr$ r$ r% handle s
r5 c C s( t j r dS tjdp tjds$d S d
S ) NFsystem is snappy.zapt-getr+ no apt commands.TApt is available.)Fr6 )Fr7 )Tr8 )r Zsystem_is_snappyr
whichr$ r$ r$ r% _should_configure_on_empty_apt s
r: c C s | s"t \}}|s"tjd| d S tjd| tj|dd }tj|}t| ||d}tjd| d }| jdt} | rt j
| j }t | || tj
| jdd rt| || t| ||| t||| yt| tt W n" ttfk
r tjd
Y nX d | kr2|}
||
d < |d
|
d
< t| d |||
|d tjdddddddg|dddgd\} } t jd| }
dd |
D }|rtjd | x |D ]}tj|t j qW d S ) Nz#Nothing to do: No apt config and %szhandling apt config: %s)r# codename)r" zApt Mirror info: %sadd_apt_repo_matchpreserve_sources_listFz)Failed to apply proxy or apt config info:sourcesRELEASEMIRROR)r# template_params
aa_repo_matchZpsz-ozppid,pidz-CZdirmngrz gpg-agentTr )r# capturercsz (?P\d+)\s+(?P\d+)c S s$ g | ] }|d dkrt |d qS )r 1rC )int).0pidr$ r$ r%
s z apply_apt..z&Killing gpg-agent and dirmngr pids: %s) r: LOGdebugr Z lsb_releaser find_apt_mirror_infor- ADD_APT_REPO_MATCHrecompilesearch_ensure_dependenciesis_falseadd_mirror_keysgenerate_sources_listrename_apt_listsapply_apt_config APT_PROXY_FN
APT_CONFIG_FNIOErrorOSError exceptionadd_apt_sourcesr
findalloskillsignalSIGKILL)r' r( r# Z
should_configmsgreleaser" mirrorsZmatcherZmatchcfgparamsZgpg_process_outZ_errZgpg_pidsZ
root_gpg_pidsZgpg_pidr$ r$ r% r3 sX
r3 c C s* | j ds| d7 } tjdg| |dd d S )N
zdebconf-set-selectionsT)datar# rD )endswithr
)
selectionsr# r$ r$ r% debconf_set_selections# s
rk c C s g }g }xB| D ]:}|t kr>tjd| t | | |j| q|j| qW t|r`tjd| t|rtjddgt| d |dd d S )Nzunconfiguring %szSThe following packages were installed and preseeded, but cannot be unconfigured: %szdpkg-reconfigurez--frontend=noninteractiveT)rh r# rD )CONFIG_CLEANERSrK rL appendlenwarningr
list)Zpackagesr# Z unhandledZ to_configpkgr$ r$ r% dpkg_reconfigure. s&
rr c
s | j d s tjd dS dj fddt j D }t|j |d t }xJ j D ]>\}}x4|j
D ](}|j dr~qnt j
d d
|}|j| qnW q\W tj|}tjd | |j|} t| d krtjd
dS t| |d dS )z2apply_debconf_selections - push content to debconfZdebconf_selectionsz(debconf_selections was not set in configN
c s g | ] } | qS r$ r$ )rH key)selsetsr$ r% rJ Z s z,apply_debconf_selections..)r# #z[:\s].* z
pkgs_cfgd: %sr zno need for reconfig)r- rK rL joinsortedkeysrk encodesetitems
splitlines
startswithrO subaddr Zget_installed_packages intersectionrn rr )
r' r# rj Z pkgs_cfgdZ_keyZcontentlinerq Zpkgs_installedZ
need_reconfigr$ )ru r% r2 O s(
r2 c C s: t j tj| d}tjd| x|D ]}tj| q$W dS )z%clean out any local cloud-init configz /etc/cloud/cloud.cfg.d/*dpkg*z#cleaning cloud-init config from: %sN)globr
target_pathrK rL r_ unlink)r# flistZdpkg_cfgr$ r$ r% clean_cloud_initr s
r c C sL | }|j dr|dd }|jd}|dkr<||d d }|jdd}|S ) zmirrorurl_to_apt_fileprefix
Convert a mirror url to the file prefix used by apt on disk to
store cache information for that mirror.
To do so do:
- take off ???://
- drop tailing /
- convert in string / to _/r rC z:// N_)ri findreplace)mirrorstringposr$ r$ r% mirrorurl_to_apt_fileprefix} s
r c
C s t |}tj|t}x|j D ]\}}| j|}|s6q |tjj t | }|tjj t | } || krhq t
|}
xlt j d| D ]Z} d| | |
d f } t j
d| | ytj| | W q tk
r t jddd Y qX qW q W dS )z>rename_apt_lists - rename apt lists to preserve old cache dataz%s_*z%s%sNzRenaming apt list %s to %szFailed to rename apt list:T)exc_info)r& r
r APT_LISTSr} r- r_ pathsepr rn r rK rL renamer[ ro )
Z new_mirrorsr# r" Zdefault_mirrorsZprer ZomirrorZnmirrorZoprefixZnprefixZolenfilenameZnewnamer$ r$ r% rV s$
rV c C s: dddddd}y || }W n t k
r4 | }Y nX |S )zthere are a few default names which will be auto-extended.
This comes at the inability to use those names literally as suites,
but on the other hand increases readability of the cfg quite a lotz$RELEASE-updatesz$RELEASE-backportsz$RELEASE-securityz$RELEASE-proposedz$RELEASE)ZupdatesZ backportssecurityZproposedrd )KeyError)suitemappingZretsuiter$ r$ r% map_known_suites s
r ) deb822_entryr* c C s< t jd| s8t jdd| } t jt d| } dt| d S | S )z0If no active Suites, disable this deb822 source.z\nSuites:[ \t]+([\w-]+)z \nSuites:.*rw z7## Entry disabled by cloud-init, due to disable_suites
z# disabled by cloud-init: )rO r^ r DISABLE_SUITES_REDACT_PREFIXr )r r$ r$ r% %disable_deb822_section_without_suites s r )r* c s* g }fdd| D t jd| d}x|j D ]}|jdr`|rT|| d7 }q2|j| q2| sn|j r|r|jt| d}|j| q2|}|jds||d 7 }q2 r|j dd } fd
d|D }||kr|t | d7 }d d j | }||d 7 }q2W |r |jt| dj |S )
z:reads the deb822 format config and comment disabled suitesc s g | ]}t jt|d iqS )r? )r
render_stringr )rH r )rd r$ r% rJ s z)disable_suites_deb822..zDisabling suites %s as %srw rv rs zSuites:rC Nc s g | ]}| kr|qS r$ r$ )rH r )disabled_suite_namesr$ r% rJ s zSuites: )
rK rL r~ r rm isspacer splitr rx ) disabledsrcrd Znew_srcZnew_deb822_entryr Znew_lineZ orig_suitesZ
new_suitesr$ )r rd r% disable_suites_deb822 sB
r c C s | s|S |}t |r t| ||S x| D ]}t|}tj|d|i}tjd|| d}x|jdD ]}|jdrx||7 }q`|j }t
|dkrd} |d jdrx(|dd D ]}
| d7 } |
j d
rP qW || |krd | }||7 }q`W |}q&W |S ) zRreads the config for suites to be disabled and removes those
from the templater? zDisabling suite %s as %srw Trv rC [N]z"# suite disabled by cloud-init: %s) is_deb822_sources_formatr r r r rK rL r~ r r rn ri ) r r rd Zretsrcr Z releasesuiteZnewsrcr ZcolsZpcolcolr$ r$ r% disable_suites s6
r c C s8 x2dD ]*}x$| j |g D ]}t||||d qW qW dS )z=Adds any keys included in the primary/security mirror clausesprimaryr ) file_nameN)r r )r- add_apt_key)r' r( r# rt r r$ r$ r% rT ! s
rT )apt_src_contentr* c C s6 t jd| t jrdS t jd| t jr(dS tjd dS )a? Simple check for deb822 format for apt source content
Only validates that minimal required keys are present in the file, which
indicates we are likely deb822 format.
Doesn't handle if multiple sections all contain deb822 keys.
Return True if content looks like it is deb822 formatted APT source.
z^(deb |deb-src )Fz'^(Types: |Suites: |Components: |URIs: )Tzapt.sources_list value does not match either deb822 source keys or deb/deb-src list keys. Assuming APT deb/deb-src list format.)rO r^ MrK ro )r r$ r$ r% r ( s r zetc/aptz sources.listzsources.list.d)zDir::EtczDir::Etc::sourcelistzDir::Etc::sourcepartsz@(Dir::Etc|Dir::Etc::sourceparts|Dir::Etc::sourcelist) \"([^\"]+)c C s0 yJddl } | j | jjdtd }| jjdtd }| jjdtd }W n tk
r
ytjddg\}}W nN tjk
r td }td }td }d| d| d| d| dd S X tj t
|}t |}|jdtd }|jdtd }|jdtd }Y nX d| d| d| d| dd S )
a Return a dict of applicable apt configuration or defaults.
Prefer python apt_pkg if present.
Fallback to apt-config dump command if present out output parsed
Fallback to DEFAULT_APT_CFG if apt-config commmand absent or
output unparsable.
r NzDir::EtczDir::Etc::sourcelistzDir::Etc::sourcepartsz
apt-configdumpr )
sourcelist sourceparts) apt_pkgZ init_configconfigr- DEFAULT_APT_CFG ImportErrorr
ProcessExecutionErrorrO r^
APT_CFG_REr/ )r Zetcr r Zapt_dumpr Z matched_cfgZapt_cmd_configr$ r$ r% get_apt_cfgL s4 r c C sB t }|d }|d |jj d}tjr0|}n|}||d}x(|D ] } || || < || || j < qDW | jdd}
|
stjd tjrdnd } |j d
|jj | } | s|j d } | stj
d | dS t j | }
t
j|
|}
|
r t|
r ||kr tjd
| |}ntjd| |}t| jd|
|}t j||dd dS )zgenerate_sources_list
create a source.list file based on a custom or default template
by replacing mirrors and release in the templater r z.sources)r? r; sources_listNz1No custom template provided, fall back to builtinz.deb822rw z
sources.list.z sources.listz#No template found, not rendering %szAProvided 'sources_list' user-data is deb822 format, writing to %szFProvided 'sources_list' user-data is not deb822 format, fallback to %sr i )mode)r distror r ZAPT_DEB822_SOURCE_LIST_FILElowerr- rK infoZget_template_filenamero r Z load_filer r r rL r
write_file)r' rd re r( r4 Zapt_sources_listZapt_sources_deb822Z aptsrc_filerf kZtmplZtmpl_fmtZ template_fnZrenderedr r$ r$ r% rU sH
rU Fc C sP t jd| y tj|j}td|| |dS tjk
rJ t jd Y nX dS )zM
actual adding of a key as defined in key argument
to the system
zAdding key:
'%s'r ) output_filerh hardenedz(failed to add apt GPG Key to apt keyringN) rK rL pathlibZPathZstemapt_keyr
r r\ )rt r r r# r r$ r$ r% add_apt_key_raw s
r c
C s g }t }tj| jddr^x@d
D ]8}| j|r"x(| | D ] }ddhj|r:|jd q:W q"W | jdi }xB|j D ]6}ddhj|r|jd ||jd d
rt|jd qtW x$|D ] } tj| s|j t
| qW |r|j j t
| d S )a Install missing package dependencies based on apt_sources config.
Inspect the cloud config user-data provided. When user-data indicates
conditions where add_apt_key or add-apt-repository will be called,
ensure the required command dependencies are present installed.
Perform this inspection upfront because it is very expensive to call
distro.install_packages due to a preliminary 'apt update' called before
package installation.
r= Fr r rt keyidr r> sourcerw zadd-apt-repositoryN)r r )r| r rS r- r r valuesshutilr9 rm PACKAGE_DEPENDENCY_BY_COMMANDr Zinstall_packagesry )
r' rB r( Zmissing_packagesZ
required_cmdsZ
mirror_keyZ mirror_itemZapt_sources_dictentcommandr$ r$ r% rR s&
rR c C s^ d| kr8d| kr8t }d| kr$| d }tj| d || d< d| krZt| d |pR| d |dS dS )z
Add key to the system as defined in ent (if any).
Supports raw keys or keyid's
The latter will as a first step fetched to get the raw key
r rt keyserverr )r N)DEFAULT_KEYSERVERr Z
getkeybyidr )r r( r# r r r r$ r$ r% r s r c C s | j j d S )N)r Zupdate_package_sources)r( r$ r$ r% update_packages s r c
C s |dkr i }|dkr t dt| ts2td| x| D ]}| | }tjd| d|kr|r|j|r|t|d |d< n||d< d|krd|d krt|||dd }||d
< n t||| d|krq:|d }t j
||}|d jd st j j
d |d |d< |d jd
s&|d d
7 < ||rpytjdd|g|d W q: tjk
rl tjd Y q:X q:tj||d } y:d| }
d} d|kr|d rd} tj| |
| d W q: tk
r } ztjd| | W Y dd} ~ X q:X q:W t| dS )a
install keys and repo source .list files defined in 'sources'
for each 'source' entry in the config:
1. expand template variables and write source .list file in
/etc/apt/sources.list.d/
2. install defined keys
3. update packages via distro-specific method (i.e. apt-key update)
@param srcdict: a dict containing elements required
@param cloud: cloud instance object
Example srcdict value:
{
'rio-grande-repo': {
'source': 'deb [signed-by=$KEY_FILE] $MIRROR $RELEASE main',
'keyid': 'B59D 5F15 97A5 04B7 E230 6DCA 0620 BBCF 0368 3F77',
'keyserver': 'pgp.mit.edu'
}
}
Note: Deb822 format is not supported
Nz did not get a valid repo matcherzunknown apt format: %szadding source/key '%s'r r z $KEY_FILET)r ZKEY_FILEr z/etc/apt/sources.list.d/z.listzadd-apt-repositoryz --no-update)r# zadd-apt-repository failed.z%s
arm w)omodezfailed write to file %s: %s)r! r. r/ TypeErrorrK rL r rn r r r r_ r rx ri r
r r\ r r r rZ r )
srcdictr( r# rA rB r r key_filer Zsourcefncontentsr Zdetailr$ r$ r% r] s^
r] c C s i }t jdddd t| trftjd xT| D ]2}d|krPd|d< t j|d}n|d }|||< q.W nt| trv| }ntd|S ) z1convert v1 apt format to v2 (dict in apt_sources)zConfig key 'apt_sources'z22.1zUse 'apt' instead)
deprecateddeprecated_versionZ
extra_messagez9apt config: convert V1 to V2 format (source list to dict)r zcloud_config_sources.listzunknown apt_sources format) r deprecater. rp rK rL Z
rand_dict_keyr/ r! )Zsrclistr Zsrcentrt r$ r$ r% convert_v1_to_v2_apt_formatX s"
r c C s, | j |ddk r(| j |||< | |= dS dS )ziconvert an old key to the new one if the old one exists
returns true if a key was found and convertedNTF)r- )oldcfgaptcfgoldkeynewkeyr$ r$ r% convert_keyt s
r c C sN d
ddg}d}dd gi}x"|D ]\}}t | |||r d
}q W |rJ|g|d < d S )zBconvert old apt_mirror keys into the new more advanced mirror spec
apt_mirroruriapt_mirror_searchrQ apt_mirror_search_dns
search_dnsFarchesdefaultTr N)r r )r rQ )r r )r )r r ZkeymapZ convertedZnewmcfgr r r$ r$ r% convert_mirror~ s
r c C sn ddddddddddd d
}g }x2|D ]*}|| kr&| | dkrF| |= q&|j | q&W |s\| S tjd | d
d | jdd}|dk rtjdd
d x^|D ]V}|| }| | }| |= |dks|j|ddkrq||| krtd||| |f qW | S i }x.|D ]&}|| dk r t| |||| q W t| | x,|D ]$}| j|ddk r:td| q:W || d< | S )z:convert old to new keys and adapt restructured mirror specr> Nproxy
http_proxy https_proxy ftp_proxyr= r r< ) apt_sourcesr r r Z apt_proxyZapt_http_proxyZ
apt_ftp_proxyZapt_https_proxyZapt_preserve_sources_listZapt_custom_sources_listr< rw z The following config key(s): z22.1)r r r+ z0Support for combined old and new apt module keysz@Old and New apt format defined with unequal values %s vs %s @ %sz&old apt key '%s' left after conversion)Nrw )rm r r r- r! r r )r Z
mapoldkeysZ
needtoconvertr Z newaptcfgr Zverifyr r$ r$ r% convert_v2_to_v3_apt_format s`
r c C s, | j dd}|dk r t|| d< t| } | S )zconvert the old list based format to the new dict based one. After that
convert the old dict keys/format to v3 a.k.a 'new apt config'r N)r- r r )r' r r$ r$ r% r, s
r, c
C s d}| rd}g }|dkr d}n|dkr,d}nt dtj||j}dj|jdd d }|rl|jd
| |jd g } |jj }
d |
|d
|
f } x|D ]} | j| | qW tj
| }|S )zG
Try to resolve a list of predefines DNS names to pick mirrors
Nrw r r r zsecurity-mirrorzunknown mirror type.rC z.%s .localdomainzhttp://%s-%s%s/%sz%s)r rw ) r! r Zget_hostname_fqdnfqdnrx r rm extendr r search_for_mirror)
Z
configured
mirrortyper' r( r ZmydomZdomsZ mirrordnsr Z mirror_listr Z mirrorfmtZpostr$ r$ r% search_for_mirror_dns s.
r c C sX | dk r |dkr| }| |dS |j j }|rP|j }|d |d< |d |d< |S t|S )z^sets security mirror to primary if not defined.
returns defaults if no mirrors are definedN)r r r r r r )Z
datasourceZget_package_mirror_infor r& )pmirrorsmirrorr" r( mirror_infomr$ r$ r% update_mirror_info s
r c C sT | j |d}|dkrdS d}x2|D ]*}|j dp2g }||kr@|S d|kr"|}q"W |S )zuout of a list of potential mirror configurations select
and return the one matching the architecture (or default)Nr r )r- )r' r r" Zmirror_cfg_listr Zmirror_cfg_elemr r$ r$ r% get_arch_mirrorconfig* s
r c C s` t | ||}|dkrdS |jdd}|dkr>tj|jdd}|dkr\t|jdd|| |}|S )zpass the three potential stages of mirror specification
returns None is neither of them found anything otherwise the first
hit is returnedNr rQ r )r r- r r r )r' r r" r( Zmcfgr r$ r$ r%
get_mirror= s r c C sn |dkr t j }tjd| t| d||}tjd| t| d||}tjd| t||||}|d |d< |S ) a find_apt_mirror_info
find an apt_mirror given the cfg provided.
It can check for separate config of primary and security mirrors
If only primary is given security is assumed to be equal to primary
If the generic apt_mirror is given that is defining for both
Nz!got arch for mirror selection: %sr zgot primary mirror: %sr zgot security mirror: %sr r@ )r r rK rL r r )r' r( r" r r r r$ r$ r% rM W s rM c s d} fdd |D }t |rBtjd
| tj|d j|d n"tjj|rdtj | tjd | j
d
drtjd| tj| j
d
n"tjj|rtj | tjd| dS )zHapply_apt_config
Applies any apt*proxy config from if specified
r Acquire::http::Proxy "%s";r r Acquire::ftp::Proxy "%s";r Acquire::https::Proxy "%s";c s( g | ] \}} j |r| j | qS r$ )r- )rH r Zfmt)r' r$ r% rJ { s z$apply_apt_config..zwrite apt proxy info to %srs z#no apt proxy configured, removed %sZconfNzwrite apt config info to %sz$no apt config configured, removed %sr r r r r r r r )r r r r ) rn rK rL r r rx r_ r isfileZdel_filer- )r' Z proxy_fnameZ config_fnameZcfgsZproxiesr$ )r' r% rW o s"
rW Tc sV dd fdd} fdd}| dkr4| S | dksD| d krJ| S t d
d S ) ad apt-key replacement
commands implemented: 'add', 'list', 'finger'
@param output_file: name of output gpg file (without .gpg or .asc)
@param data: key contents
@param human_output: list keys formatted for human parsing
@param hardened: write keys to to /etc/apt/cloud-init.gpg.d/ (referred to
with [signed-by] in sources file)
c S sN t jjtrtgng } x*t jtD ] }|jdr"| jt| q"W | rJ| S dS )zreturn all apt keys
/etc/apt/trusted.gpg (if it exists) and all keyfiles (and symlinks to
keyfiles) in /etc/apt/trusted.gpg.d/ are returned
based on apt-key implementation
.gpg.ascrw )r r )r_ r r APT_LOCAL_KEYSlistdirAPT_TRUSTED_GPG_DIRri rm )Z key_filesfiler$ r$ r% _get_key_files s
z apt_key.._get_key_filesc s d} s t jtdj ny2r&tnt}tj }dj|} t j| | W nL t j
k
rv t jtdj Y n& t k
r t jtdj Y nX | S )ziapt-key add
returns filepath to new keyring, or '/dev/null' when an error occurs
z /dev/nullz)Unknown filename, failed to add key: "{}"z{}{}.gpgz Gpg error, failed to add key: {}z#Decode error, failed to add key: {}) r ZlogexcrK r0 CLOUD_INIT_GPG_DIRr r Zdearmorr r
r UnicodeDecodeError)r Zkey_dirstdout)rh r r r$ r% apt_key_add s
z apt_key..apt_key_addc sj g } xZ D ]P}y| j tj|d W q tjk
rZ } ztjd|| W Y dd}~X q X q W dj| S )zapt-key list
returns string of all trusted keys (in /etc/apt/trusted.gpg and
/etc/apt/trusted.gpg.d/)
) human_outputzFailed to list key "%s": %sNrs )rm r rp r
r rK ro rx )Zkey_listr error)r r r$ r% apt_key_list s $z apt_key..apt_key_listr Zfingerrp z@apt_key() commands add, list, and finger are currently supportedN)r! )r r rh r r r r r$ )r rh r r r r% r s r z
cloud-init)NN)N)N)N)FN)NFN)NNN)N)NNFT)\__doc__r Zloggingr_ r rO r ra textwrapr r Ztypingr r r r Z cloudinitr r r
r r Zcloudinit.cloudr
Zcloudinit.configr Zcloudinit.config.schemar r Zcloudinit.settingsr Z getLogger__name__rK rN r
r r r r r r strmetar rY rX r r r r r r& rp r5 r: r3 rk rr r2 r r rV r r r r rT boolr r r r rU r rR r r r] r r r r r, r r r r rM rW r rl r$ r$ r$ r% s
A
<
!
# /(44
"
\
J)
Q