Y(| d dl Z d dlZd dlZd dlmZ d dlmZ d dlmZ d dl m
Z
d dl m Z m
Z
d dlmZmZmZ d dlmZ d d lmZmZmZ d
Zd Zd Zd
ZdZ dZ G d de Z G d de Z e e j j! ee j" j! ee j# j! e e j$ j! iZ% G d d Z&d$dZ'd%dZ( d%dZ)d Z* d%d Z+d efd Z,d Z-d Z.d! Z/d" Z0d e1fd#Z2dS )& N)Enum)AnyStr)
exceptions)clcagefs)CLN_JWT_TOKEN_PATHCL_EDITION_FILE_FOR_USERS)read_jwt
decode_jwtjwt_token_check)FormattedException)get_os_version is_ubuntuis_secureboot_enabledz /etc/cloudlinux-edition-soloz /etc/cloudlinux-edition-adminzCloudLinux OS Shared ProzCloudLinux OS SharedzCloudLinux OS SolozCloudLinux OS Adminc " e Zd ZdZdZdZdZdZdS )SupportedEditionsz-
Keeps supported CloudLinux editions
soloshared
shared_proadminN)__name__
__module__ __qualname____doc__SOLOSHARED
SHARED_PROADMIN /builddir/build/BUILDROOT/alt-python27-cllib-3.4.36-1.el9.cloudlinux.x86_64/opt/cloudlinux/venv/lib/python3.11/site-packages/clcommon/lib/cledition.pyr r " s. D
F J EEEr r c e Zd Zd ZdS )CLEditionDetectionErrorc 6 t j | ||d d S )N)messagecontext)r __init__)selfr$ r% s r r& z CLEditionDetectionError.__init__. s3 #D +
+
r N)r r r r& r r r r" r" - s# r r" c h e Zd Zedd Zed Ze d dedz fd ZdS )
CLEditionsNTc | t t } t | | }n2# t j $ r }t dt d| |d}~ww xY w |d S # t $ r^}| d }|t dt d ||rt j j
nt j j
cY d}~S d}~ww xY w)z
Note: be careful when modifying this method.
Passing token in is used in X-Ray,
ask @dkavchuk or someone else from C-Projects team for details
:param token:
:param verify_exp:
:return:
N)
verify_expz)Unable to detect edition from jwt token: z-. Please, make sure it is not broken, error: editioncl_pluszL. Please, make sure it is not broken, error: not enough fields for detection) r r r
r
PyJWTErrorr" KeyErrorgetr r valuer )tokenr+ jwter- s r get_from_jwtzCLEditions.get_from_jwt? s8 = /00E Uz:::CC$ )B?B B
ey> ! e e eggi((G-b@R b b b :Ad$/55FWF^Fd d d d d d d es3 * AAA A% %
C
/ACC
C
c P t j dd| gt j t j di t j ddi 5 }| \ }}|j dk r*d|v r d d d d S t d
| d | d | d d d n # 1 swxY w Y dS )
Nrpmz-qTLC_ALLC)stdoutstderrtextenvr zis not installedFzUnable to check if package z is installed, reason: z, )
subprocessPopenPIPEosenviron communicate
returncoder" ) package_nameprocouterrs r is_package_installedz CLEditions.is_package_installed^ s<
D, ' ? ?12:1(C 1
''))HC!##%,, .,, , , ", ,&), , $ ts (B6BB "B Freturnc $ |r|rt d |s_t j t r; | || }n # t $ r t }Y nw xY w|r|S t j rt S |sxt j t rt j j
S t j t rt j j
S t S dS )a
1. Try to detect CL edition from JWT token;
If edition field is in token -> return edition
If edition field is not present -> recheck via cl_plus flag (see get_from_jwt)
If token is broken -> raise an error about it
2. Try to detect edition from files.
If JWT edition retreival was attempted and failed, or if we're in cagefs
-> get edition from CL_EDITION_FILE_FOR_USERS
If a edition marker file for Solo or Admin edition is present -> return corresponding edition
Otherwise, fall back to CL_EDITION_FILE_FOR_USERS again
Detection from marker files may be switched off using the `skip_marker_check` parameter.
@param skip_jwt_check: if True, skip checking JWT token for edition.
@param skip_marker_check: if True, skip checking marker files for edition.
@param raw_jwt: raw JWT token to use for edition detection. If None, token will be read from file.
@param verify_exp: if True, verify JWT token expiration time.
@return: Edition of CloudLinux OS or None if edition could not be determined.
Note: be careful when modifying this method.
It is used in X-Ray, ask @dkavchuk or someone else from C-Projects team for details.
zOUnable to detect edition: neither jwt token check, no file marker check enabled)r2 r+ N)r" rA pathisfiler r5 PermissionErroruser_cl_editionr in_cagefsCL_SOLO_EDITION_FILE_MARKERr r r1 CL_ADMIN_EDITION_FILE_MARKERr )clsskip_jwt_checkskip_marker_checkraw_jwtr+ r, s r get_cl_editionzCLEditions.get_cl_editionr s! < / )a
"'..1C"D"D
, **Z*PP"
,
,
,)++
,
%"$$ $ ! %w~~ 9::
5(-33 <==
5(.44"$$ $ ts A A.-A.)NT)FFNT) r r r staticmethodr5 rI classmethodstrrW r r r r) r) = s e e e \ e< \& : :
t
: : : [: : :r r) TFc n t | || }|duo|t j j k S )aU
Allow skip_jwt_check ONLY if it not critical when license is not valid
Use skip_marker_check=True when validity of license is critical
and fallback to file is not applicable
Note: be careful when modifying this method.
It is used in X-Ray and SSA,
ask @dkavchuk or someone else from C-Projects team for details
rT rU r+ N)r) rW r r r1 rT rU r+ r, s r is_cl_solo_editionr^ sE ''%+ ( G
$ J7.?.D.J#JJr c n t | || }|duo|t j j k S z
Allow skip_jwt_check ONLY if it not critical when license is not valid
Use skip_marker_check=True when validity of license is critical
and fallback to file is not applicable
r\ N)r) rW r r r1 r] s r is_cl_shared_editionra sE ''%+ ( G
$ L7.?.F.L#LLr c n t | || }|duo|t j j k S r` )r) rW r r r1 r] s r is_cl_shared_pro_editionrc sE ''%+ ( G
$ P7.?.J.P#PPr c > t di | S # t $ r Y dS w xY w)z:
Supress edition checking error and returns False
FNr )rc r" )kwargss r is_cl_shared_pro_edition_safelyrf s= '11&111 " uus
c n t | || }|duo|t j j k S r` )r) rW r r r1 r] s r is_cl_admin_editionrh sE ''%+ ( G
$ K7.?.E.K#KKr rJ c t d rt S t d rt S n# t $ r
t
cY S w xY wt
\ } }}d|v rt j t st j rUt t dd 5 }| cddd S # 1 swxY w Y | rt" S t
S )z
Function returns current edition of CL:
- CloudLinux OS Shared
- CloudLinux OS Shared Pro
- CloudLinux OS Solo
- Error string
T)rT z
read errorrutf-8encodingN)r^ SOLO_EDITION_HUMAN_READABLErh ADMIN_EDITION_HUMAN_READABLEr" SHARED_EDITION_HUMAN_READABLEr rA rL rM r r rP openr readstrip!SHARED_PRO_EDITION_HUMAN_READABLE) success_flag
error_message_fs r get_cl_edition_readablery sA - T 2 2 2 0. .
5
5
5 0/ / 0 " - - -,,,,- &5%6%6"L- }$$"'..9K*L*L$PXPbPdPd$
+S7
C
C
C $q6688>>## $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ -00,,s% 1 1 AA,&C C#&C#c X t j dt t d dS )zJust print skip messagezJas part of unification effort, features might not map directly to editionszpCloudLinux Solo edition detected!
Command is skipped, because it is unsupported and unneeded on current editionN)warningswarnDeprecationWarningprintr r r print_skip_message_on_solor sG
MT
Z [ [ [ [ [r c V t j dt ddlm} | S )Nz@since v3.4.1 use "clcommon.cpapi.utils:skip_without_lve" insteadr skip_without_lve)r{ r| r} clcommon.cpapi.utilsr r s r r r , s? MJ 655555 r c X t j dt ddlm} || S )NzEsince v3.4.1 use "clcommon.cpapi.utils:lve_supported_or_exit" insteadr )lve_supported_or_exit)r{ r| r} r r )rx r s r r r 5 sA MO ;::::: # ##r c , t j t rot t dd 5 } | }ddd n # 1 swxY w Y t | S dS )z
This function is used as a workaround for users to be able to get the CL Edition.
Crontab will write output of `cldetect --detect-edition` command to CL_EDITION_FILE_FOR_USERS, with 0644 permission.
rj rk rl N) rA rL existsr rq rr rs "HUMAN_READABLE_TOKEN_EDITION_PAIRSr0 )rx r, s r rO rO > s
w~~/00 ?
+S7
C
C
C 'qffhhnn&&G ' ' ' ' ' ' ' ' ' ' ' ' ' ' ' 255g>>> 4s 'A//A36A3c @ t j d S )z<
Determines is this system running inside container
z/etc/cloudlinux-container)rA rL r r r r is_containerr K s 7>>5 6 66r )TFT)FFT)3rA r> r{ enumr typingr r3 r clcommonr clcommon.lib.constsr r clcommon.lib.jwt_tokenr r
r clcommon.clexceptionr clcommon.utilsr
r r rQ rR rt rp rn ro r r" r r1 r r r r r) r^ ra rc rf rh ry r r r rO boolr r r r r s
M M M M M M M M H H H H H H H H H H 3 3 3 3 3 3 L K K K K K K K K K < > $> ! 6 2 4 0 !2!7!=%'8'C'I!#4#;#A "3"9"? & "p p p p p p p pfK K K K$ M M M M -2/4(,Q Q Q Q" (-*/#'L L L L" - - - - ->[ [ [ $ $ $
7d 7 7 7 7 7 7r