+ mi^RIt^RIt^RIt^RIHt^RIHtHtHtH t H t ^RI H uH t^RIHtHtHtHtHtHtHtHtHt^RIHt^RIHt^RIHt^RIH t ^R I!H"t"H#t#^R I$H%t%^R I&H't'R t(R t)R t*Rt+Rt,Rt-Rt.Rt/Rt0Rt1Rt2Rt3R^R^R^R^/t4]Pj!4t6]Pn!]Pp!]944t:]!RRR.4t;!RR]Px4t=!RR]%P|4t?RR lt@R5R!R"lltAR6R#R$lltBR%R&ltCR7R'R(lltDR)R*ltER+R,ltFR-R.ltGR8R/R0lltHR9R1R2lltIR3R4ltJR#):N) namedtuple)AnyDictListOptionalTuple) data_types event_logger exceptionshttpmessagessecret_managersystemutilversion)_enabled_services) _is_attachedUAConfig)ATTACH_FAIL_DATE_FORMAT)attachment_data_filemachine_id_file) serviceclient)get_user_or_root_log_file_pathz/v1/context/machines/tokenz3/v1/contracts/{contract}/context/machines/{machine}z /v1/resourcesz3/v1/resources/{resource}/context/machines/{machine}z/v1/clouds/{cloud_type}/tokenz3/v1/contracts/{contract}/machine-activity/{machine}z /v1/contractz/v1/magic-attachz?/v1/contracts/{contract}/context/machines/{machine}/guest-tokenseries_overridesseriescloudvariantEnableByDefaultServicenameca]tRt^Fto]P !R]P RR7]P !R]P RR7]P !R]P RR7]P !R]P RR7]P !R]P RR7]P !R]P RR7]P !R ]P RR7]P !R ]P RR7]P !R ]P RR7]P !R ]P RR7]P !R ]P RR7]P !R]P RR7]P !R]P RR7]P !R]P RR7.tRV3RlRlltRt Vt R#) CPUTypeData cpuinfo_cpuF)requiredcpuinfo_cpu_architecturecpuinfo_cpu_familycpuinfo_cpu_implementercpuinfo_cpu_partcpuinfo_cpu_revisioncpuinfo_cpu_variant cpuinfo_modelcpuinfo_model_namecpuinfo_steppingcpuinfo_vendor_id"sys_firmware_devicetree_base_model sysinfo_model sysinfo_typeNcN<V^8dQhRS[S[,RS[S[,RS[S[,RS[S[,RS[S[,RS[S[,RS[S[,RS[S[,R S[S[,R S[S[,R S[S[,R S[S[,R S[S[,RS[S[,/#)r#r%r&r'r(r)r*r+r,r-r.r/r0r1)rstr)format __classdict__s"3/usr/lib/python3/dist-packages/uaclient/contract.py __annotate__CPUTypeData.__annotate__zs ) )c] )#+3- )%SM ) "*# ) #3- )'sm )&c] ) } )%SM )#3- )$C= )-5SM ) } )sm )cWnW nW0nW@nWPnW`nWpnWnWnWn Wn V Vn Wn Wn R#Nr#r%r&r'r(r)r*r+r,r-r.r/r0r1)selfr#r%r&r'r(r)r*r+r,r-r.r/r0r1s&&&&&&&&&&&&&&&r7__init__CPUTypeData.__init__zs_"'(@%"4'>$ 0$8!#6 *"4 0!2 . /+(r:r=)NNNNNNNNNNNNNN) __name__ __module__ __qualname____firstlineno__r FieldStringDataValuefieldsr?__static_attributes____classdictcell__)r6s@r7r"r"Fs :55   &  & &  *"<"$>   !:#=#=   Z77%   *"<"rN __class__s&&r7r?UAContractClient.__init__s& S!"%"<"<">r:) retry_sleepsc ^V'g!\P!VP4pVP4pVP RRP V4/4VP 4pVP4VR&RVRV/p\V4pVP\WtR7pVPR8Xd\P!4hVPR8Xd \V4VP^8wd2\P!\VPVP R 7hVP"p \$P&P)V P+R R 44V P+R .4F2p \$P&P)V P+R R 44K4 V #)aMRequests machine attach to the provided machine_id. @param contract_token: Token string providing authentication to ContractBearer service endpoint. @param machine_id: Optional unique system machine id. When absent, contents of /etc/machine-id will be used. @return: Dict of the JSON response containing the machine-token. Authorization Bearer {}lastAttachment machineId activityInfo)dataheadersiurlcodebody machineTokenresourceTokenstoken)rget_machine_idrNraupdater5_get_activity_info isoformat_support_old_machine_info request_urlAPI_V1_ADD_CONTRACT_MACHINErer AttachInvalidTokenError_raise_attach_forbidden_messageContractAPIErrorrf json_dictrsecrets add_secretget) r>contract_token attachment_dt machine_idra activity_infor`backcompat_dataresponse response_jsonrjs &&&& r7add_contract_machine%UAContractClient.add_contract_machinesg..txx8J,,.););N)KLM//1 *7*A*A*C &'ZG3D9## 'o$  ==C 446 6 ]]c ! +H 5 ==C --/]]]]  !** ))   nb 1 #&&'7r|r~s& r7available_resources$UAContractClient.available_resourcess//1 ## & n =-1-1 f- $  ==C --.]]]]  !!!r:c<<V^8dQhRS[RS[S[S[3,/#)r3ryrOr4rr)r5r6s"r7r8rPs# " "s "tCH~ "r:c0VP4pVPRRPV4/4VP\VR7pVP ^8wd2\ P!\VP VPR7hVP#)r[r\rarc) rarlr5rpAPI_V1_GET_CONTRACT_USING_TOKENrer rtrfru)r>ryrar~s&& r7get_contract_using_token)UAContractClient.get_contract_using_tokens,,.););N)KLM## +W$  ==C --3]]]]  !!!r:c<<V^8dQhRS[RS[S[S[3,/#)r3 cloud_typer`r)r5r6s"r7r8rPs% (,S#Xr:c VP\PVR7VR7pVP^8wdVPP RR4pV'd-\ PV4\P!VR7h\P!\VPVPR7hVPp\PPVP RR44V#)zRequests contract token for auto-attach images for Pro clouds. @param instance: AutoAttachCloudInstance for the cloud. @return: Dict of the JSON response containing the contract-token. )r)r`messagerh) error_msgrc contractToken)rp,API_V1_GET_CONTRACT_TOKEN_FOR_CLOUD_INSTANCEr5rerurxLOGdebugr InvalidProImagertrfrrvrw)r>rr`r~msgrs&$$ r7%get_contract_token_for_cloud_instance6UAContractClient.get_contract_token_for_cloud_instances## 8 ? ?% @  $  ==C $$((B7C # 003??--@]]]]  !** ))   or 2 r:c X<V^8dQhRS[RS[RS[S[,RS[S[S[3,/#)r3 machine_tokenresourcer{rOr4rrr)r5r6s"r7r8rPs?$$$$SM $ c3h $r:c V'g!\P!VP4pVP4pVP RRP V4/4\ P W#R7pVPWTR7pVP^8wd2\P!\ VPVPR7hVPPR4'd!VPR,VPR&VPpVPR.4F2p\PP!VPRR 44K4 V#) avRequests machine access context for a given resource @param machine_token: The authentication token needed to talk to this contract service endpoint. @param resource: Entitlement name. @param machine_id: Optional unique system machine id. When absent, contents of /etc/machine-id will be used. @return: Dict of the JSON response containing entitlement accessInfo. r[r\)rmachinerrcexpiresrirjrh)rrkrNrarlr5"API_V1_GET_RESOURCE_MACHINE_ACCESSrprer rtrfrxrurrvrw) r>rrr{rardr~rrjs &&&& r7get_resource_machine_access,UAContractClient.get_resource_machine_accesss ..txx8J,,.););M)JKL0778 ##C#9 ==C --6]]]]       * *,4,<,rrr{ request_datardrar~s& r7update_activity_token&UAContractClient.update_activity_token;s$ --99 //==AA  **4884 ..0 *11 2 ,,.););M)JKL##C|#L ==C --mm(--      33AAM-5,>,>M. )  # # ) )- 8 r:c<<V^8dQhRS[RS[S[S[3,/#)r3 magic_tokenrOr)r5r6s"r7r8rPcs#stCH~r:c DVP4pVPRRPV4/4VP\VR7pVP R8Xd\ P!4hVP R8Xd\ P!4hVP ^8wd2\ P!\VP VPR7hVPp.ROpVF2p\PPVPVR44K4 V#) zRequest magic attach token info. When the magic token is registered, it will contain new fields that will allow us to know that the attach process can proceed r[r\rrbrcrhrjuserCoder)rarlr5rp"API_V1_GET_MAGIC_ATTACH_TOKEN_INFOrer MagicAttachTokenErrorMagicAttachUnavailablertrfrurrvrwrx)r>rrar~r secret_fieldsfields&& r7get_magic_attach_token_info,UAContractClient.get_magic_attach_token_infocs ,,.););K)HIJ## .$  ==C 224 4 ==C 335 5 ==C --6]]]]  !** > "E  " " - -m.?.?r.J K#r:c6<V^8dQhRS[S[S[3,/#rr)r5r6s"r7r8rPsS#Xr:c VP4pVP\VRR7pVPR8Xd\P !4hVP^8wd2\P !\VPVPR7hVPp.ROpVF2p\PPVPVR44K4 V#)z)Create a magic attach token for the user.POSTramethodrrcrhr) rarpAPI_V1_NEW_MAGIC_ATTACHrer rrtrfrurrvrwrx)r>rar~rrrs& r7new_magic_attach_token'UAContractClient.new_magic_attach_tokens,,.## #$  ==C 335 5 ==C --+]]]]  !** > "E  " " - -m.?.?r.J K#r:c <V^8dQhRS[/#)r3r)r4)r5r6s"r7r8rPsSr:c VP4pVPRRPV4/4VP\VRR7pVP R8Xd\ P!4hVP R8Xd\ P!4hVP R8Xd\ P!4hVP ^8wd2\ P!\VP VPR7hR #) z)Revoke a magic attach token for the user.r[r\DELETErrbrrcN) rarlr5rpAPI_V1_REVOKE_MAGIC_ATTACHrer MagicAttachTokenAlreadyActivatedrrrtrf)r>rrar~s&& r7revoke_magic_attach_token*UAContractClient.revoke_magic_attach_tokens,,.););K)HIJ## &$  ==C ==? ? ==C 224 4 ==C 335 5 ==C --.]]]]  r:c X<V^8dQhRS[RS[RS[S[,RS[S[S[3,/#r3rrr{rOr)r5r6s"r7r8rPs?)")")")"SM )" c3h )"r:c V'g!\P!VP4pVP4pVP RRP V4/4\ P VVR7pVP4pVPVRVRVR,RVR,RVR,RVR,/R 7pVP^8wd-\P!WWPVPR 7hVPPR 4'd!VPR ,VPR &VP#) aLGet the updated machine token from the contract server. @param machine_token: The machine token needed to talk to this contract service endpoint. @param contract_id: Unique contract id provided by contract service @param machine_id: Optional unique system machine id. When absent, contents of /etc/machine-id will be used. r[r\rGETrrrr)rrarrcr)rrkrNrarlr5API_V1_GET_CONTRACT_MACHINErmrprer rtrfrxru)r>rrr{rardr|r~s&&&& r7get_contract_machine%UAContractClient.get_contract_machines&..txx8J,,.););M)JKL)00 1 //1 ##  n =-1-1 f-  $   ==C --mm(--       * *,4,<,rrr{rar`r}rdr~s &&&& r7update_contract_machine(UAContractClient.update_contract_machines  ..txx8J,,.););M)JKL  D335 4D9,33 4 ## o$  ==C --mm(--       * *,4,<,rrr{rardr~s&&&& r7r UAContractClient.get_guest_tokens,,.););M)JKL$++ , ##C#G ==C ==. ]]c !--]]]]  !!!r:c  v\P!4pR\P!4PR\P!4P R\P!4P R\P!4R\P!4R\P!4R\P!4R\VPVPVPVP VP"VP$VP&VP(VP*VP,VP.VP0VP2VP4R 7P7R R 7/p\9VP:4P<'Ed\?VP:4P@p\BPD!4pR VPFPH;'g!\PJ!VP:4R VPFPLRVUu.uFqUPNNK upRVUu/uF.pVPP'gKVPNVPRbK0 upRV'dVPTPW4MR/pM/p/VCVC#uupiuupi)z9Return a dict of activity info data for contract requests distributionrrrdesktopr clientVersioncpu_typer=F) keep_none activityID activityToken resourcesresourceVariantsr]N),r get_cpu_infoget_release_inforget_kernel_info uname_releaser get_dpkg_arch is_desktop get_virt_typer get_versionr"r#r%r&r'r(r)r*r+r,r-r.r/r0r1to_dictrrN is_attachedrenabled_servicesrreadrV activity_idrkactivity_tokenr variant_enabled variant_name attached_atrn)r>cpuinfo machine_inforattachment_dataservicer|s& r7rm#UAContractClient._get_activity_info#s>%%' F335BB f,,.<< f--/66 F002 v((* F((* W002  #//)0)I)I#*#=#=(/(G(G!(!9!9%,%A%A$+$?$?%33#*#=#=!(!9!9")";";3:3]3]%33$11gg&/ 4  ! - - -0:KK 2779Od55AA33((2!8!8!G!G:JK:Jwll:JK"#3%#3..7GLL'"6"66#3% !&$//99;M"M    L%s1J1 J6%J6)rVr<)r3r3)rArBrCrDcfg_url_base_attrr?rretrysockettimeoutrrrrrrrrrrrrrmrHrI __classcell__)rWr6s@@r7rKrKs&?? ZZY7(8(T""( " " ZZY78@$$L&9P8..)")"V&"&"P!"!"F7 7 r:rKc$V^8dQhR\/#)r3 request_body)dict)r5s"r7r8r8]sDr:cVPR/4pRVPR4RVRVPR4RRVPR4RVPR4RVPR4RR R \P!4P//#) a' Transforms a request_body that has the new activity_info into a body that includes both old and new forms of machineInfo/activityInfo This is necessary because there may be old ua-airgapped contract servers deployed that we need to support. This function is used for attach and refresh calls. r_r^rosrrrtypeLinuxrelease)rxrrr)r r|s& r7roro]s!$$^R8M \%%k2  )).9 M--n= m''1 m''1 G v..088  r:cV^8dQhR\R\\\3,R\\\3,R\R\R\RR/#) r3rNpast_entitlementsnew_entitlements allow_enablerverboserON)rrr4rbool)r5s"r7r8r8xsgZ Z Z CH~Z 38nZ  Z  Z  Z  Z r:c H^RIHpRp.p.p V!V4F[p W*,p .p \TTP T /4T TTTR7wrT 'd"T 'd\ P T 4KYK[K] \ PV 4\V4^8dg\P !\#W4U Uu.uF9wrV \$P&P)\+V4\-4R73NK; upp R 7hV'd8\P.!V U u.uFp V \$P03NK up R 7hR# \dEK:i;i \PdLp\PT4RpT PT 4\PRT T 4Rp?EKRp?i\d[p\PT4TPT4T PT 4\PRT T 4Rp?EKRp?ii;iuupp iuup i) aIterate over all entitlements in new_entitlement and apply any delta found according to past_entitlements. :param cfg: UAConfig instance :param past_entitlements: dict containing the last valid information regarding service entitlements. :param new_entitlements: dict containing the current information regarding service entitlements. :param allow_enable: Boolean set True if allowed to perform the enable operation. When False, a message will be logged to inform the user about the recommended enabled service. :param series_overrides: Boolean set True if series overrides should be applied to the new_access dict. :param verbose: If True, display output to stdout )entitlements_enable_orderF)rN orig_access new_accessrrrTz+Failed to process contract delta for %s: %rNz5Unexpected error processing contract delta for %s: %r)rlog_path)failed_services)uaclient.entitlementsrKeyErrorprocess_entitlement_deltarxeventservice_processedr UbuntuProErrorr exceptionappenderror Exceptionservices_failedlenAttachFailureUnknownErrorzipr UNEXPECTED_ERRORr5r4rAttachFailureDefaultServices!E_ATTACH_FAILURE_DEFAULT_SERVICES)rNrrrrrr delta_errorunexpected_errorsrr new_entitlementdeltasservice_enableder$s&&&&&& r7process_entitlements_deltar5xs.@KO)#. .4O .&?-11$;*)!1 ' #F:6''-$*K/N /* !22(+?'N (OOD --44"%i.!?!A5(O    55,+DxAAB+   e   ((  MM! K  " "4 ( II=     MM!   $ $Q '  " "4 ( MMG    " sGE#E7?H H EEH(?F.. H;H> >c3h>S#X> >  >  > 4:>r:cX^RIHpV'd \V4\P!W4pRpV'dVP R/4P R4p V 'g"VP R/4P R4p V 'g\ P!WR7hVP R/4P R/4P RR 4p V!VV V R 7p T PYY5R 7pWx3# \ Pdp \PR T 4T hR p ? ii;i)a&Process a entitlement access dictionary deltas if they exist. :param cfg: UAConfig instance :param orig_access: Dict with original entitlement access details before contract refresh deltas :param new_access: Dict with updated entitlement access details after contract refresh :param allow_enable: Boolean set True if allowed to perform the enable operation. When False, a message will be logged to inform the user about the recommended enabled service. :param series_overrides: Boolean set True if series overrides should be applied to the new_access dict. :param verbose: If True, display output to stdout :raise UbuntuProError: on failure to process deltas. :return: A tuple containing a dict of processed deltas and a boolean indicating if the service was fully processed entitlement_factoryF entitlementr)orignew entitlements obligations use_selectorrhrNr rz3Skipping entitlement deltas for "%s". No such classNrr) rr9apply_contract_overridesrget_dict_deltasrxr InvalidContractDeltasServiceTypeEntitlementNotFoundErrorrrprocess_contract_deltas) rNrrrrrr9r2retr rr:excs &&&&&& r7r r s4: ,  ! !+ :F C }b155f=::mR044V2 . S # S $  -K11 l2  ;22  IIEt I  s C77D) D$$D)cXV^8dQhR\PR\P/#)r3r~rO)r HTTPResponser NamedMessage)r5s"r7r8r8s(*** *r:cVPPR4pV'dVR,pVR,pVR8XdLVR,P\4p\P !VVVR,PR4R7hVR8XdLVR,P\4p\P !VVVR,PR4R7hVR 8Xd\P!VR 7h\P!4h) info contractIdreasonzno-longer-effectivetimez%m-%d-%Y)rdatecontract_expiry_dateznot-effective-yet)rrQcontract_effective_dateznever-effective)r) rurxstrftimerr AttachForbiddenExpiredAttachForbiddenNotYetAttachForbiddenNeverAttachExpiredToken)r~rMrrOrQs& r7rsrss    ! !& )D <( h * *<(()@AD33'%)&\%:%::%F   * *<(()@AD22'(,V (=(=j(I   ( (11kJ J  ' ' ))r:c$V^8dQhR\/#)r3rNr)r5s"r7r8r83s!!!r:c\P!V4pVP4pVPpVR,pVR,R,R,p\ VR7pVP WVR7pVP V4\PP4VPR/4PR\P!V44p \P !V 4\VVVP4RVR 7R #) zRequest contract refresh from ua-contracts service. :param verbose: If True, display output to stdout :raise UbuntuProError: on failure to update contract or error processing contract deltas :raise ConnectivityError: On failure during a connection rgmachineTokenInfo contractInfoidrR)rrr^FrAN) rTrUr=rrKrrrrk cache_clearrxrr5) rNrrVorig_entitlements orig_tokenrrcontract_clientrespr{s && r7refreshrc3s33C8*779#11J~.M/0@FK&3/O  2 2# 3 DT" %%',b155V**3/J*% '') r:cFV^8dQhR\R\\,/#)r3rNrO)rrr)r5s"r7r8r8Ws***d4j*r:c\\V4pVP4pVPR.4#)zDQuery available resources from the contract server for this machine.r)rKrrx)rNclientrs& r7get_available_resourcesrgWs+ c "F**,I ==b ))r:c^V^8dQhR\R\R\\\3,/#)r3rNrjrO)rr4rr)r5s"r7r8r8^s)22(2324S>2r:c:\V4pVPV4#)z/Query contract information for a specific token)rKr)rNrjrfs&& r7get_contract_informationrj^s c "F  * *5 11r:cV^8dQhR\\\3,R\\\3,R\/#)r3override_selectorselector_valuesrO)rr4int)r5s"r7r8r8ds4  CH~ 8>5 r:cV^8dQhR\\\3,R\R\R\\,R\\\\\3,3,/#)r3r: series_namerrrO)rr4rrrn)r5s"r7r8r8psXc3hc]   #tCH~  r:cR/pRVRV/pV'dW5R&VPR/4PV/4pV'dVV\R,&\P!VP R.44pVF,p\ VPR4V4p V 'gK(WV &K. V#)rrrr overridesrs)poprqcopydeepcopyrxru) r:rwrrryrmrgeneral_overridesoverrideweights &&&& r7_select_overridesrps IgzBO%, ""x488bI  +,>?@ kook2&FG%% LL $o  6 (f  & r:cV^8dQhR\\\3,R\\,R\\,RR/#)r3rrrrON)rr4rr)r5s"r7r8r8s@.8.8c3h.8 SM.8c].8 .8r:c4^RIHp\\V\4RV9.4'g\ RP V44hVf \P!4PMTpV!4wrVVPR/4p\WtWR4p\VP44FjwrV P4FQwrVR,PV 4p \V \4'dV PV 4KFWR,V &KS Kl R#)aoApply series-specific overrides to an entitlement dict. This function mutates orig_access dict by applying any series-overrides to the top-level keys under 'entitlement'. The series-overrides are sparse and intended to supplement existing top-level dict values. So, sub-keys under the top-level directives, obligations and affordance sub-key values will be preserved if unspecified in series-overrides. To more clearly indicate that orig_access in memory has already had the overrides applied, the 'series' key is also removed from the orig_access dict. :param orig_access: Dict with original entitlement access details )get_cloud_typer:z?Expected entitlement access dict. Missing "entitlement" key: {}N)uaclient.clouds.identityrall isinstancer  RuntimeErrorr5rrrrxrsortedrprl)rrrrrwr_orig_entitlementry_weightoverrides_to_applykeyrtcurrents&&& r7rBrBs&8  ;-} /KL M M &%  -3N!((#$MJ"}b9!zI(.ioo.?'@#,224JC!-044S9G'4((u%38M*3/5(Ar:ctV^8dQhR\R\\\3,R\\ ,/#)r3rNr=rO)rrr4rrr)r5s"r7r8r8s2&& &!%c3h& !&r:c^RIHp.pVP4FwrEVPR/4PRR4pV!WVR7pTPR/4PR/4pTPR4p TP Y4'gK~TP4wrT 'gKTP\TTR74K V# \P dKi;i) rr8r>r?rhr@r: resourceToken)r r) rr9rprxr rE_should_enable_by_default can_enabler%r) rNr=r9enable_by_default_servicesent_name ent_valuerentr>rrrs && r7get_enabled_by_default_servicesrs:!#+113-- r266~rJ %#gNC mmM26::="M ! o6  ( ( D DNN,MJz*11*% ' 4* &%!22   s CC.-C.)TT)FTT)Tr<)NN)Kr{loggingr collectionsrtypingrrrrruaclient.files.machine_tokenfilesrrTuaclientr r r r r rrrr-uaclient.api.u.pro.status.enabled_services.v1r(uaclient.api.u.pro.status.is_attached.v1ruaclient.configruaclient.defaultsruaclient.files.state_filesrr uaclient.httpr uaclient.logrrqrrrrrrrrrrrrqget_event_loggerr! getLoggerreplace_top_level_logger_namerArr DataObjectr"UAServiceClientrKror5r rsrcrgrjrurrBrr:r7rsj  "33**   LA$5L'7;9:-9#0O,9#1%7",/F  a Q q  %%' ::8DE$vy1 T)*''T)n} }44} @6Z z>B*:!H*2 :.8b&r: