`jW d Z ddlZddlZddlZddlZddlZddlZddlZddlZddl Z ddl
m Z m Z ddl
mZmZmZmZmZ e d ZdZdZdZd Zd
Zd Zd Zd
Z ej d Z ej d Z G d de Z de ddfdZ!de de"ddfdZ#de de$fdZ%de$de$fdZ&de d e de'fd Z(d e de fd Z)d e dee fd Z*d!e$de fd"Z+de d#e d$e$ddfd%Z, dEd&e d'ee$ ddfd(Z-de de$d e de fd)Z.d*e$de ddfd+Z/d&e de$fd,Z0de ddfd-Z1d.e d&e ddfd/Z2d0ee dee fd1Z3d e ddfd2Z4de d*e$d3e'ddfd4Z5d.e ddfd5Z6d e d&e ddfd6Z7d e de fd7Z8de de$d e ddfd8Z9de$d e ddfd9Z:de$d e ddfd:Z;de de$d e ddfd;Z<d e ddfd<Z=d e dee fd=Z>d e ddfd>Z?d e ddfd?Z@d e ddfd@ZAdejB fdAZCdEdBeee$ de"fdCZDeEdDk r eF eD dS )Fa Install and atomically select versioned imunify-core Python releases.
This module deliberately uses only the Python standard library and never
imports ``defence360agent``: it must remain runnable while the live package
selection is being changed by rpm or dpkg maintainer scripts.
N)Path
PurePosixPath)IterableListOptionalSequenceSetz/opt/imunify360/venvversionsz
imunify-core-z.imunify-core-currentdefence360agentzimunify_core.egg-infoz.artifact-sha256z 00-imunify-core-migration.pthz"# managed by imunify-core-release
z+^imunify-core-[A-Za-z0-9][A-Za-z0-9._+~-]*$z ^imunify_core-[^/]+\.egg-info$c e Zd ZdZdS ) ReleaseErrorz3The managed release layout is unsafe or incomplete.N)__name__
__module__ __qualname____doc__ E/opt/imunify360/venv/share/imunify360/scripts/imunify_core_release.pyr
r
# s ====r r
pathreturnc X t j t | t j t t dd z }n# t
$ r Y d S w xY w t j | n# t
$ r Y nw xY wt j | d S # t j | w xY w)N O_DIRECTORYr )osopenstrO_RDONLYgetattrOSErrorfsyncclose)r fds r _fsync_directoryr" ' s
WSYY gb-.K.K K
L
L
s< AA
AAA- ,B -
A:7B 9A::B B) destinationmodec |j dd | d 5 }t j | | | t
j | d d d n # 1 swxY w Y t
j t | |dz d S )NTparentsexist_okxb ) parentmkdirr shutil copyfileobjflushr r filenochmodr )sourcer# r$ outputs r _write_filer4 4 s TD 999 $ "666***
!!!" " " " " " " " " " " " " " " HS
te|,,,,,s ABBBarchivec t j }| d 5 t fdd D ]}| | d d d n # 1 swxY w Y | S )Nrbc . d S )Ni )read)streams r <lambda>z!_archive_digest.<locals>.<lambda>@ s &++k":": r r )hashlibsha256r iterupdate hexdigest)r5 digestchunkr: s @r _archive_digestrC = s
^
F d !v::::C@@ ! !E MM% !! ! ! ! ! ! ! ! ! ! ! ! ! ! ! s ,A##A'*A'
release_idc ~ t | s"t d | | S )Nzunsafe release id: {!r}) _RELEASE_RE fullmatchr
format)rD s r _validate_release_idrI E s< , , I4;;JGGHHH r r+ c V | | n# t $ r Y dS w xY wdS )NFT) relative_to
ValueError)r r+ s r _is_relative_torM K sE uu 4s
&& venv_rootc | t z S N)VERSIONS_DIRNAME)rN s r _versions_rootrR S s ' ''r c | dz fddD }|s"t d t | S )Nlibc l h | ]0} | D ]}| |1S r )globis_dir).0patternr rT s r <setcomp>z%_site_package_dirs.<locals>.<setcomp>Y sZ
HHW%%
;;==
r )zpython*/site-packageszpython*/dist-packagesz,no Python site-packages directories below {})r
rH sorted)rN foundrT s @r _site_package_dirsr] W sp
e
C
I
E
: A A# F F
%==r namec 8 t | }| s|j s"t d | t d |j D }|rd|v r"t d | t | S )Nzunsafe archive path: {!r}c 3 " K | ]
}|d v|V dS )) .Nr )rX parts r <genexpr>z$_safe_member_path.<locals>.<genexpr>j s, GG4Y1F1F$1F1F1F1FGGr z..)r is_absolutepartsr
rH tuple)r^ r rf s r _safe_member_pathrh f s D E E6==dCCDDD GG4:GGG G GE EDEMM6==dCCDDD % r stagerA c d}t }g } t j t | d }nA# t t j f$ r(}t
d | | d }~ww xY w|5 | D ]}t |j
} | j d }
|
t k rd}nRt |
r| |
n"t
d |
| s;| s't
d |j
| || f |st
d t' | d
k rt
d | d |D ]\ }} |j | j } | rB| dd
t- j t | |j dz j| | } | 't
d |j
| 5 t5 | | |j d d d n # 1 swxY w Y d d d n # 1 swxY w Y |t7 t9 | z }
|t: z }t- j t |
t | |t> z }| dd 5 }| |dz |! t- j" |# d d d n # 1 swxY w Y tI || tK d |& d D d D ]}tO | tO | d S )NFzr:*)r$ z"cannot open release archive {}: {}r Tz(unexpected top-level archive entry: {!r}z%unsupported archive member type: {!r}z&archive has no defence360agent package z=archive must contain exactly one imunify_core-*.egg-info treei r& r* z cannot read archive member {!r}xasciiencoding
expected_digestc 3 B K | ]}| |V d S rP )rW rX r s r rd z#_extract_release.<locals>.<genexpr> s/ <<$dkkmm<<<<<<<r *)reverse)(settarfiler r r TarErrorr
rH
getmembersrh r^ rf PACKAGE_LINK _EGG_INFO_RErG addisdirisregappendlenr, joinpathr r1 r$ extractfiler4 nextr>
METADATA_LINKreplaceARTIFACT_DIGESTwriter/ r r0 _validate_releaser[ rglobr" )r5 ri rA package_seenmetadata_rootsmembersbundleexcmemberr rootr# r2
metadata_rootnormalized_metadata digest_filer: directorys r _extract_releaser p s L "uuNG
c'll777 W% &
0 7 7 E E
&> &> '')) + +F$V[11D:a=D|## # ''--
""4((((">EEdKK LLNN
fllnn
";BB6;OO
NNFD> * * * * I GHH H ~ ! # # O
# > >LFD(%.$*5K||~~
!!$!>>>[))6;+>???''//F~"5<<V[II
>
>FK===
>
>
>
>
>
>
>
>
>
>
>
>
>
>
> >5&> &> &> &> &> &> &> &> &> &> &> &> &> &> &>P Dn!5!5 6 66M -/Js=!!3':#;#;<<</)K # 0 0 "F Vd]###
!!!" " " " " " " " " " " " " " " eV4444<<%++c**<<<d $ $ ####Us_ #8 A6#A11A6;G4J+/J J+J J+J J++J/2J//ANNNreleaserr c | s| s"t d | | t z }| t
z }| s|dz st d | s|dz st d | t z } | d }n4# t $ r'}t d | d }~ww xY wt j d | st d
|||k rt d d S d S ) Nz#release is not a real directory: {}z __init__.pyz/release has no complete defence360agent packagezPKG-INFOz%release has no complete core metadatarm rn z"release has no artifact digest: {}z [0-9a-f]{64}z"release artifact digest is invalidz4existing release does not match the package artifact)
is_symlinkrW r
rH r{ r is_filer read_textstripr rerG )r rr packagemetadatar installed_digestr s r r r s
7>>#3#3
1 8 8 A A
$G &H NGm$;#D#D#F#F NLMMM DX
%:$C$C$E$E DBCCCO+KM&00'0BBHHJJ M M M?FFsKKLLLM
<)9 : : A?@@@"'7?'J'J B
#"'J'Js (D
D8"D33D8c | s"t d | t | }| dd | rt d ||z }t
| }| s| rt || |S t t j d | t | }|
t | || t j t | t | t# | nZ# t$ $ rM | r7| s#t' j t | d w xY w|S ) Nz"release archive does not exist: {}Tr& #versions root must not be a symlinkrq z.{}-tmp-)prefixdir
ignore_errors)r r
rH rR r, r rC existsr r tempfilemkdtempr rmdirr r r r" Exceptionr- rmtree)r5 rD rN r
finalrA ri s r _stage_releaser s ??
0 7 7 @ @
i((H NN4$N/// B@AAA z !E
W
%
%F ||~~ ))++ %8888 $$Z00c(mm
E
KKMMM%000
3u::s5zz***"""" <<>> :%"2"2"4"4 : M#e**D 9 9 9 9
Ls 'AE7 7AGtargetc |j d |j t j j z } t
j | t | t
j t | t | t |j | d S # t $ r Y d S w xY w# | w # t $ r Y w w xY wxY w)N
.{}.tmp-{})
r+ rH r^ uuiduuid4hexr symlinkr r r" unlinkFileNotFoundError)r r# temporarys r _atomic_symlinkr s "\%8%8$*,,*& & I
63y>>***
3y>>3{#3#3444+,,, DD D sB A%C !B7 7
CCC/
C C/
C,)C/+C,,C/c z t d t | z S )Nz%import sys; sys.path.insert(0, {!r})
)MIGRATION_SELECTOR_MARKERrH r resolve)r s r _migration_selector_contentr s2 $077GOO<M<M8N8NOO r c | s| s"t d | | d }n5# t
$ r(}t d | | d }~ww xY w| t s"t d | d S )Nz,migration selector is not a regular file: {}utf-8rn z%cannot read migration selector {}: {}z)refusing to replace unmanaged selector {})r r r
rH r r
startswithr )r contentr s r _validate_migration_selectorr s
: A A$ G G
..'.22
3 : :4 E E
7 8 8
7 > >t D D
s A# #
B-#BB
site_packagesc | | t z }| s| rt | |j d |j t j j z } |
dd 5 }| t | |
t j | d d d n # 1 swxY w Y t j t% | d t j t% | t% | t) |j | d S # t, $ r Y d S w xY w# | w # t, $ r Y w w xY wxY w)Nr rl r rn i )MIGRATION_SELECTORr r r r+ rH r^ r r r r r r r/ r r r0 r1 r r r" r r )r r r# r r: s r _write_migration_selectorr s "44K 2{ 5 5 7 7 2$[111"\%8%8$*,,*& & I
^^C'^
2
2 &f LL4W== > > > LLNNN HV]]__ % % % & & & & & & & & & & & & & & & Y '''
3y>>3{#3#3444+,,, DD D sh <F A C<0 F <D F D A(F -F
FFF;F+*F;+
F85F;7F88F;site_packages_dirsc g }| D ]X}|t z }| s| r$t | | | Y|S rP )r r r r r )r selectorsr selectors r _migration_selectorsr * so I+ ' '
#55 ?? ' 3 3 5 5 ' ( 2 2 2 X & & & r c t | }n# t $ r Y d S w xY wt | }|D ]*}| t |j +d S rP )r] r
r r r" r+ )rN r r r s r _remove_migration_selectorsr 4 s / : : $%788I * * ))))* *s
allow_legacy_directoryc | rt j t | }||k rd S | d }t | j d d }t || s"t d | |
nm| rY|r| s"t d | t j t | t || d S )NFstrict z(refusing to replace unmanaged symlink {}z%refusing to replace unmanaged path {})r r readlinkr r rR r' rM r
rH r r rW r- r r )r r r existingresolvedr
s r _ensure_public_linkr ? s0 !;s4yy)) v F<<u<--!$,q/22::%:HH x22 :AA$GG
!% T[[]] 7>>tDD
c$ii FD!!!!!r c < | t z }| d D ]{}||k r | s| r| F| r!t
j t | |d S )Nzimunify_core-*.egg-info) r rV r r r rW r- r r )r stabler s r _remove_legacy_metadatar W s
]
*F ""#<== % % 6>> ?? % % KKMMMM
[[]] % M#d)) $ $ $
% %r c t | }| }t || st d t | D ]}|t
z }|t z }t | t |d t t
d t |d t t d t | D ]}|t z }| r6| s"t d | t j t! | t! | }||z |k rt d t# || d S )Nz)release escapes the managed versions root{}/{}T)r Fz%current selector is not a symlink: {}z3computed current target does not resolve to release)rR r rM r
r] r{ r r r rH CURRENT_LINKr r r r relpathr r ) rN r r
resolved_releaser package_link
metadata_linkcurrentr s r _activate_linksr b s i((0022H (( +X 6 6 HFGGG+I66
$|3 %
5
... NN< 6 6#'
NN< 7 7#(
,I66 ) )
,. >> G$6$6$8$8 7>>wGG
%5!6!6M8J8JKK F " + + - -1A A A E
(((( ) )r c \ t | }t }t | D ]}|t z }| s"t
d | | d }t || st
d | | t | dk r"t
d | t t | }t | |S )Nz missing current selector: {}Tr z)current selector escapes managed releasesrk z$site-packages selectors disagree: {})rR r rw r] r r r
rH rM r} r r r> r )rN r
selectedr r r r s r _selected_releaser s i((0022H %%H+I66
,.!!## O = D DW M MNN N??$?// x22 L JKK K X
8}} 2 9 9( C C
4>>""Gg Nr c t | }| }t | || }t | d S rP )rI r r r )r5 rD rN r r s r ri ri sO %j11J D W__ . .
DAAGg r c " t | } | }t | | z }t | t t | t
|| t | t | d S rP ) rI r rR r r r] r verifyr )rD rN r r s r selectr s %j11J D T""Z/Gg +D11222D'"""
4LLL %%%%%r c $ t | } | }t | | z }t | t | }g }|D ]}|t
z }| r_| sK| s"t d
| | | |st | | dS t | |D ]}t || dS )a Expose a staged release before rpm erases the legacy direct layout.
On the first upgrade, rpm still owns the direct ``defence360agent`` tree
when the new package's ``%post`` and the existing consumer triggers run.
Replacing that tree with the final symlink at this point would let the old
package erase traverse into the new release. A temporary ``.pth`` selector
instead makes fresh Python processes import the staged tree without
changing any old package-owned path. ``select`` replaces the legacy layout
after erasure and removes this selector. Later upgrades have only managed
links and can select atomically here without the migration shim.
z*legacy package path is not a directory: {}N)rI r rR r r] r{ r r rW r
rH r r r r )rD rN r r r legacy_packagesr r s r select_for_rpm_transactionr s> &j11J D T""Z/Gg +D11O+ , ,
,. >> ,G$6$6$8$8 ,>>##
"@GG
" "7 + + + z4 +,,,+ : :
!-9999: :r c H t | || t || d S rP )ri r )r5 rD rN s r activater s* ':y)))
:y!!!!!r c $ t | }t | D ]o}|t z }|t z }d t
t }d t
t }| r%t j t | |k r"t d | | r%t j t | |k r"t d | | d |t z k rt d | d |t z k rt d qd S )Nr zinvalid package link: {}zinvalid metadata link: {}Tr z&package link selects the wrong releasez'metadata link selects the wrong release) r r] r{ r rH r r r r r r
r )rN r r r r expected_packageexpected_metadatas r r r s} ++H+I66 J J
$|3 %
5
">>, EE #NN< G G '')) P{3|,,--1AAA 9 @ @ N NOO O ((** {3}--..2CCC +22=AA
t , ,<0G G G GHH H - -M1I I I HII I J'J Jr c t | }| sg S | rt d t d | D S )Nr c 3 K | ]M}|j t !| 5| I|V Nd S rP )r^ r RELEASE_PREFIXrW r rt s r rd z(_managed_release_dirs.<locals>.<genexpr> sr 9 / /
KKMM
!! r )rR r r r
r[ iterdir)rN r
s r _managed_release_dirsr s i((H ?? B@AAA $$&& r c \ t | }| sd S | rt d | d D ]M}| r7| s#t
j t | d Nd S )Nr z.imunify-core-*-tmp-*Tr ) rR r r r
rV rW r- r r )rN r
r s r _remove_temporary_release_dirsr s i((H ?? B@AAA ]]#:;; > > >i&:&:&<&< > M#i.. = = = => >r c | }t | }t | D ];}| |k r!t j t | <t
| d S rP )r r r r- r r r )rN r r r s r cleanupr sw D &&H(.. ( ( ?? ( ( M#g,, ' ' '"4(((((r c | }t | d } t | }n# t $ r g }Y nw xY wt | |D ]}t
d t t
ft d t t ffD ]W\ }}||z }| r9t j t | |k r|
X|t z }| r:| d } t | | r|
t | D ]#}
t! j t |
$t% | | r7t) | s| d S d S d S )NFr r )r rR r] r
r r{ rH r r r r r r r rM r r- r r r anyr r ) rN r r
sitesr r^ expectedr r r r s r remover s D d##++5+99H"4(( %%% ! !
7>>, EE F
GNN< G G H
ND( !4'D
R[T%;%;x%G%G
,. ! e44H x22
! (.. $ $
c'll####"4((( X%5%5%7%7!8!8 s A AAc
t j t } | dd }dD ]K}| | }| dt d | dd Ld
D ].}| | }| dd /d D ]O}||j v r
|j | n| | }| d t t
P| S )N) descriptioncommandT)destrequired)r ri z --archive)typer z --release-id)r )r select-for-rpm-transaction)r ri r r r r r z --venv-root)r default) argparseArgumentParserr add_subparsers
add_parser add_argumentr choicesDEFAULT_VENV_ROOT)parser
subparsersr command_parser
select_parsers r _parserr 1 sB
$
9
9
9F&&I&EEJ( C C#..w77##KdT#JJJ##NT#BBBB; B B"--g66
"">D"AAAA
*,,,
w ' '&&w//
## .? $
Mr argvc 8 t | } |j dk r!t |j |j |j n|j dk r!t |j |j |j n|j dk rt |j |j n|j dk rt |j |j nt|j dk rt |j nT|j dk rt |j n4|j dk rt |j nt |j n^# t t t j f$ r?}t% d |j | t( j Y d }~d
S d }~ww xY wd S ) Nr ri r r r r r z"imunify-core release {} failed: {})filerk r )r
parse_argsr r r5 rD rN ri r r r r r AssertionErrorr r
rx ry printrH sysstderr)r argsr s r mainr O s 99 % %D <: % % T\4?DN C C C C
\W
$
$ $, @ @ @ @
\X
%
% 4?DN 3 3 3 3
\ 9
9
9 &t G G G G
\Y
&
& DN # # # #
\X
%
% 4> " " " "
\X
%
% 4> " " " " .. . \7#3 4
0 7 7 c J J
qqqqq
1s DD< < F4FF__main__rP )Gr r r< r r r- r rx r r pathlibr r typingr r r r r r rQ r r r{ r r r r compilerF r| RuntimeErrorr
r" intr4 r rC rI boolrM rR r] rh r r r r r r r r r r r r r ri r r r r r r r r r r r r
SystemExitr r r <module>r& sX
' ' ' ' ' ' ' ' : : : : : : : : : : : : : :D/00 & '
$4 A bjGHH rz;<< > > > > >< > > >
4
D
-T - - - - - - T c S S $ (d (t ( ( ( ( $ 4: !C !M ! ! ! !A d A 4 A A A A A A J 59
$,SM
4 D c d t @ C d t #
t
"T D T ,Xd^ T
*4 *D * * * *"
""59" " " " "0%4 %D % % % % )t )d )t ) ) ) )F $ ( 4 S T d
&s
&t
&
&
&
&
&$:3 $:4 $:D $: $: $: $:N"d " " " " " " "
Jd Jt J J J J2 T htn >d >t > > > >)t ) ) ) ) )d t 8( <
x
&
#
8 z
*TTVV
r