+ qgjaRVtX0tRt^RIt^RIt^RIt^RIt^RIt^RIt^RIH t ^RI H t H t H t Ht^RIHtHtHtHtHt^RIHt^RIHt^RIHt^RIHt^R IHt]P>!] 4t!R t"R t#R t$R t%Rt&RRRR/t']^kRRR.RWOR]R./t(]^kRt)Rt*Rt+Rt,RRRR /t-RR!RR!/t.R"R#.t/.RXOt0R$t1R]1/t2RYR%lt3R&R'lt4R(t5R)t6R*t7R+t8R,t9R-t:R.t;R/tR3R4lt?R5R6lt@R7R8ltAR9R:ltBR;RR?R@/tCRAtDRBRCltERDtFRZREltGRFtHR[RGltIR\RHltJRItKRJtLRKtMRLtNRMtORNtPROtQRPtRRQtSRYRRltTRStUR]RTltVRU]:/tWR#)^z*Apt Configure: Configure apt for the user.N)indent)DictIterableListMapping)features lifecyclesubp templaterutil)Cloud)Config) MetaSchema)GPG) PER_INSTANCEz ^[\w-]+:\wz/etc/apt/trusted.gpgz/etc/apt/trusted.gpg.d/z/etc/apt/cloud-init.gpg.d/z&# cloud-init disable_suites redacted: add-apt-repositoryzsoftware-properties-commongpggnupgidcc_apt_configuredistrosubuntu frequencyactivate_by_schema_keysz/var/lib/apt/listsz'/etc/apt/apt.conf.d/94cloud-init-configz)/etc/apt/apt.conf.d/90cloud-init-aptproxyzkeyserver.ubuntu.comPRIMARYz!http://archive.ubuntu.com/ubuntu/SECURITYz"http://security.ubuntu.com/ubuntu/z$http://ports.ubuntu.com/ubuntu-portsamd64i386a# Ubuntu sources have moved to the /etc/apt/sources.list.d/ubuntu.sources # file, which uses the deb822 format. Use deb822-formatted .sources files # to manage package sources in the /etc/apt/sources.list.d/ directory. # See the sources.list(5) manual page for details. cVf\P!4pV\9d\P 4#V\ 9d\ P 4#\RV,4h)zreturns the default mirrors for the target. These depend on the architecture, for more see: https://wiki.ubuntu.com/UbuntuDevelopment/PackageArchive#Portsz#No default mirror known for arch %s)r get_dpkg_architecturePRIMARY_ARCHESPRIMARY_ARCH_MIRRORScopy PORTS_ARCHES PORTS_MIRRORS ValueErrorarchs&C/usr/lib/python3/dist-packages/cloudinit/config/cc_apt_configure.pyget_default_mirrorsr)UsV  |))+ ~#((** |!!## :TA BBc LV^8dQhR\R\R\R\RR/#)namecfgcloudargsreturnN)strr r list)formats"r( __annotate__r5ds////6/%/t//r*c@\V4pVPR/4p\V\4'g%\ RP \ V4R74h\V4\4;_uu_4p\WBV4RRR4R# +'giR#;i)zprocess the config for apt_config. This can be called from curthooks if a global apt config was provided or via the "apt" standalone command.aptz9Expected dictionary for 'apt' config, found {config_type}) config_typeN) convert_to_v3_apt_formatget isinstancedictr%r4typeapply_debconf_selectionsr apply_apt)r-r.r/r0apt_cfg gpg_contexts&&&& r(handlerBdsv #3 'CggeR G gt $ $ ""(&T']&"C  W% +'+. s 5 B  B c\P!4'dR#\P!R4'g\P!R4'gR#R#)Fzapt-getr7)Fzsystem is snappy.)Fzno apt commands.)TzApt is available.)r system_is_snappyr whichr*r(_should_configure_on_empty_aptrGws@ )) JJy ! !TZZ%6%6(( $$r*cbV'g-\4wr4V'g\PRV4R#\PRV4\P!4R,p\P !4p\ WVR7p\PRV4RpVPR\4p V 'd!\P!V 4Pp\WV4\P!VPRR44'd%\WV4p \WWqV 4\!Wv4\#V\$\&4R V9d,Tp W[R &VR ,V R &\/VR ,VVV VR 7R#R# \(\*3d\P-R 4L\i;i)z#Nothing to do: No apt config and %sNzhandling apt config: %scodenamer&zApt Mirror info: %sadd_apt_repo_matchpreserve_sources_listFz)Failed to apply proxy or apt config info:sourcesRELEASEMIRROR)template_params aa_repo_match)rGLOGdebugr lsb_releaserfind_apt_mirror_infor:ADD_APT_REPO_MATCHrecompilesearch_ensure_dependenciesis_falseadd_mirror_keysgenerate_sources_listrename_apt_listsapply_apt_config APT_PROXY_FN APT_CONFIG_FNIOErrorOSError exceptionadd_apt_sources) r.r/r should_configmsgreleaser'mirrorsmatchermatchcfgkeysparamss &&& r(r?r?s` ;=  II;S A II'- ,G  % % 'D"3D9GII#W-Gww+-?@H**X&--u- }}SWW4e<==s3/cGDA'ClM: C#y"8,x  N  "!   W C ABCs<F&F.-F.czVPR4'g VR, p\P!R.VRR7R#) zdebconf-set-selectionsTdatacaptureN)endswithr ) selectionss&r(debconf_set_selectionsrts5   u % %e II !" r*c.p.pVFZpV\9d<\PRV4\V,!4VPV4KIVPV4K\ \ V4'd\P RV4\ V4'd.\ P !RR.\V4,RRR7R#R#)zunconfiguring %szSThe following packages were installed and preseeded, but cannot be unconfigured: %szdpkg-reconfigurez--frontend=noninteractiveNTro)CONFIG_CLEANERSrQrRappendlenwarningr r3)packages unhandled to_configpkgs& r(dpkg_reconfigurer~s II / ! II(# . C "   S !   S !  9~~  -   9~~ !< =9o   r*cVPR4pV'g\PR4R#RP\ VP 44Uu.uF q!V,NK up4p\ VP44\4pVP4F^wrVVP4FEpVPR4'dK\P!RRV4pVPV4KG K` \P !4p \PRV4VP#V 4p V 'g\PR 4R#\%V 4R#uupi) z2apply_debconf_selections - push content to debconfdebconf_selectionsz(debconf_selections was not set in configN #z[:\s].*z pkgs_cfgd: %szno need for reconfig)r:rQrRjoinsortedrkrtencodesetitems splitlines startswithrVsubaddr get_installed_packages intersectionr~) r.selsetskeyrs pkgs_cfgd_keycontentliner}pkgs_installed need_reconfigs & r(r>r>s gg*+G  <=F7<<>4JK4JSCLL4JKLJ:,,./I  &&(Ds##&&R.C MM#  ))002NIIoy)**>:M  ()]#+LsE,c\P!\P!RR74p\P RV4VFp\ P !V4K R#)z%clean out any local cloud-init configz/etc/cloud/cloud.cfg.d/*dpkg*pathz#cleaning cloud-init config from: %sN)globr target_pathrQrRosunlink)flistdpkg_cfgs r(clean_cloud_initrsA IId&&,KL MEII3U; (r*cTpVPR4'dV^RpVPR4pV^8d W^,RpVPRR4pV#)zmirrorurl_to_apt_fileprefix Convert a mirror url to the file prefix used by apt on disk to store cache information for that mirror. To do so do: - take off ???:// - drop tailing / - convert in string / to _/z://N_)rrfindreplace)mirrorstringposs& r(mirrorurl_to_apt_fileprefixrs[F s" ++e C axa " ^^C %F Mr*c\V4p\P!\4pVP 4FwrEVP V4pV'gK V\ PP,\V4,pV\ PP,\V4,pWx8XdK\V4p \P!RV,4F:p V: WR: 2p \PRW4\ P!W4K< K R# \d\P!RRR7Kii;i)z>rename_apt_lists - rename apt lists to preserve old cache dataz%s_*NzRenaming apt list %s to %szFailed to rename apt list:T)exc_info)r)r r APT_LISTSrr:rrseprrxrrQrRrenamerbry) new_mirrorsr'default_mirrorsprer-omirrornmirroroprefixnprefixolenfilenamenewnames && r(r]r]s)$/O   9 %C(..0 //$'  #&A'&JJ #&A'&JJ   7| &7"23H '%9G II2H F I (, 41 I 84 H Is D,,"EEc XRRRRRRRRR R /pW,pV# \dTpT#i;i) zthere are a few default names which will be auto-extended. This comes at the inability to use those names literally as suites, but on the other hand increases readability of the cfg quite a lotupdatesz$RELEASE-updates backportsz$RELEASE-backportssecurityz$RELEASE-securityproposedz$RELEASE-proposedrgz$RELEASE)KeyError)suitemappingretsuites& r(map_known_suitesr/sV %)'': G> O  Os  ))c0V^8dQhR\R\/#)r, deb822_entryr1r2)r4s"r(r5r5As    r*c\P!RV4'gI\P!RRV4p\P!\ RV4pR\ VR4,#V#)z0If no active Suites, disable this deb822 source.z\nSuites:[ \t]+([\w-]+)z \nSuites:.*rz7## Entry disabled by cloud-init, due to disable_suites z# disabled by cloud-init: )rVfindallrDISABLE_SUITES_REDACT_PREFIXr)rs&r(%disable_deb822_section_without_suitesrAsd ::0, ? ?vvnb,? vv,-L  G\#?@ A  r*c$V^8dQhR\/#r,r1r)r4s"r(r5r5Qs,,S,r*c.pVUu.uF%p\P!\V4RV/4NK' pp\P RW4RpVP 4EF4pVP R4'd(V'd Wg R2, pMVPV4KBV'dVP4'd8V'dVP\V44RpVPV4KTpVP R4'gWgR,, pKV'd]VP4R,p V Uu.uF pWE9gK VNK p pW8wd'V\ V R2, pRR PV 4 2pWhR,, pEK7 V'dVP\V44RPV4#uupiuupi) z:reads the deb822 format config and comment disabled suitesrMzDisabling suites %s as %srrrzSuites:NNzSuites:  ) r render_stringrrQrRrrrwisspacersplitrr) disabledsrcrgnew_srcrdisabled_suite_namesnew_deb822_entryrnew_line orig_suites new_suitess &&& r(disable_suites_deb822rQsGE  0 7)W9MNII)8J  ??3   fBK/ t$ t||~~9:JK$& NN4 y)) t +   **,r*K)(E4(  ( 'C&DTF"$MM %chhz&:%;<tO+A!B<=MNO 99W S<s+GG  G c$V^8dQhR\/#rr)r4s"r(r5r5s%%c%r*c|V'gV#Tp\V4'd \WV4#VEF p\V4p\P!VRV/4p\ P RWE4RpVPR4FpVPR4'd Wg, pK$VP4p\V4^8di^p V^,PR4'd3VR,F%p V ^, p V PR4'gK%M W,V8Xd R V,pWg, pK TpEK V#) zNreads the config for suites to be disabled and removes those from the templaterMzDisabling suite %s as %srTr[r]z"# suite disabled by cloud-init: %s) is_deb822_sources_formatrrr rrQrRrrrrxrr) rrrgretsrcr releasesuitenewsrcrcolspcolcols &&& r(disable_suitesrs  F$$$XG<< ' ..uy'6JK  ,eB%%d+Ds## ::4 (D  DE ( D D D9"11ELL--.xj 9 55nEK KK={ K "";/&&t4H #H - -. %& 1 II"   +Kcgg&67KHOOK6(RWW^^> LL    4#6#67G#HH@$$&E I HH;=M  MM* +#.N(r*c\PRV4\P!V4Pp\ RW$WR7# \ Pd\PR4hi;i)zA actual adding of a key as defined in key argument to the system zAdding key: '%s'r) output_filerphardenedz(failed to add apt GPG Key to apt keyring) rQrRpathlibPathstemapt_keyr rrc)rrrr$r-s&&&& r(add_apt_key_rawr)Qsg II!3'||I&++ 3s    % % @A s -A,A2c.p\4p\P!VPRR44'd^R FWpVPV4'gKW,F/pRR0P V4'gKVP R4K1 KY VPR/4pVP 4F^pRR0P V4'dVP R4V!VPRR44'gKMVP R 4K` VF=p \P!V 4'dK!VP\V ,4K? V'd'VPP\V44R #R #) aInstall missing package dependencies based on apt_sources config. Inspect the cloud config user-data provided. When user-data indicates conditions where add_apt_key or add-apt-repository will be called, ensure the required command dependencies are present installed. Perform this inspection upfront because it is very expensive to call distro.install_packages due to a preliminary 'apt update' called before package installation. rKFrkeyidrrLsourcerrNr)rr rZr:rrvaluesshutilrErwPACKAGE_DEPENDENCY_BY_COMMANDr install_packagesr) r.rPr/missing_packages required_cmds mirror_key mirror_itemapt_sources_dictentcommands &&& r(rYrYas9#%#&5M }}SWW4e<==1Jwwz""$'??Kw'44[AA%))%0$3 2wwy"-&&( 7  ( ( - -   e $ 2. / /   2 3 ) !||G$$  # #$A'$J K! %%f-=&>?r*cRV9d:RV9d3\pRV9d VR,pVPVR,V4VR&RV9d'\VR,T;'g VR,W#R7#R#)z Add key to the system as defined in ent (if any). Supports raw keys or keyid's The latter will as a first step fetched to get the raw key r+r keyserverrr$N)DEFAULT_KEYSERVER getkeybyidr))r6r/rr$rr9s&&&&& r(rrsq #~%s*% # K(I^^CL)<E  | J 44S_c  r*cVf/pVf \R4h\V\4'g\RV,4hVEFpW,p\P RV4RV9dWVR&RV9d"RVR,9d\ WaVRR 7pWsR &M \ WaV4RV9dKjVR,p\P!W4pVR,PR 4'g+\PPR VR,4VR&VR,PR 4'gVR;;,R , uu&V!V4'd\P!RRV.4EK/\P"!VR,R7p RV,p Rp RV9dVR,'gRp \$P&!WV R7EK VP*P-RR7R# \Pd\P!R4hi;i \(dp \P!RY4hRp ? ii;i)a install keys and repo source .list files defined in 'sources' for each 'source' entry in the config: 1. expand template variables and write source .list file in /etc/apt/sources.list.d/ 2. install defined keys 3. update packages via distro-specific method (i.e. apt-key update) @param srcdict: a dict containing elements required @param cloud: cloud instance object Example srcdict value: { 'rio-grande-repo': { 'source': 'deb [signed-by=$KEY_FILE] $MIRROR $RELEASE main', 'keyid': 'B59D 5F15 97A5 04B7 E230 6DCA 0620 BBCF 0368 3F77', 'keyserver': 'pgp.mit.edu' } } Note: Deb822 format is not supported Nz did not get a valid repo matcherzunknown apt format: %szadding source/key '%s'rr,z $KEY_FILETr:KEY_FILErz/etc/apt/sources.list.d/z.listrz --no-updatezadd-apt-repository failed.rz%s arww)omodezfailed write to file %s: %s)force)r%r;r< TypeErrorrQrRrr rrrrrrrr rrcrr rrar update_package_sources) srcdictr/rrOrPrr6key_filer,sourcefncontentsrAdetails &&&&& r(rdrds6;<< gt $ $0G<== *C0 S & O s?{c(m;"3sTBH*2J ' C ( 3  X((A:))#.. ggll*C OC O:''00  Ow &O    )=&A ##Z9 (HE3s8}} OOHe < \ RV: RWE,: RV: 24h V#/pVF"pW,fK\ WW1V,4K$ \ W4VF)pVPVR4fK\ RV,4h WpR&V#)z:convert old to new keys and adapt restructured mirror spec apt_sourcesrLr^Nr`ra apt_proxyproxyapt_http_proxy http_proxy apt_ftp_proxy https_proxyapt_https_proxy ftp_proxyapt_preserve_sources_listrKapt_custom_sources_listr rJzThe following config key(s): rK)rLrMr7z0Support for combined old and new apt module keysz3Old and New apt format defined with unequal values z vs z @ z&old apt key '%s' left after conversion)Nr)rwrrOr:r%rZrf)rV mapoldkeys needtoconvertrX newaptcfgrYverifyrWs& r(convert_v2_to_v3_apt_formatrw&s ydTW,;#%<!>2 JM  ~+N$$V,    2=/B!  5$'II% $F'F^F~vt!" "  %G + Nr*c\WV4pVfR#VPRR4pVf'\P!VPRR44pVf\ VPRR4WV4pV#)zpass the three potential stages of mirror specification returns None is neither of them found anything otherwise the first hit is returnedNr_rXrb)rr:r rr)r.rr'r/mcfgrs&&&& r( get_mirrorrsv !$ 7D |XXeT "F~''4(@A~& HH\4 (*5  Mr*c Vf,\P!4p\PRV4\ VRW!4p\PRV4\ VRW!4p\PRV4\ W4W!4pVR,VR&V#)afind_apt_mirror_info find an apt_mirror given the cfg provided. It can check for separate config of primary and security mirrors If only primary is given security is assumed to be equal to primary If the generic apt_mirror is given that is defining for both z!got arch for mirror selection: %srzgot primary mirror: %srzgot security mirror: %srrN)r rrQrRrr)r.r/r'rrrs&&& r(rTrTs |))+ 5t<i5GII&0j$6GII'1$WtCK( 2K r*c8RpVUUu.uF5wrEVPV4'gKWPPV4,NK7 ppp\V4'dE\PRV4\P !VRP V4R,4MQ\PPV4'd-\P!V4\PRV4VPRR4'd>\PRV4\P !W PR44R#\PPV4'd/\P!V4\PRV4R#R#uuppi) z@apply_apt_config Applies any apt*proxy config from if specified zwrite apt proxy info to %srz#no apt proxy configured, removed %sconfNzwrite apt config info to %sz$no apt config configured, removed %s))rjAcquire::http::Proxy "%s";)rlr)rpzAcquire::ftp::Proxy "%s";)rnzAcquire::https::Proxy "%s";) r:rxrQrRr rrrrisfiler)r. proxy_fname config_fnamecfgsr-fmtproxiess&&& r(r^r^s   D7;Ld{cggdm"sWWT]""dGL 7|| . <  TYYw%7$%>?  $ $ k" 7E wwvt />  ggfo6  % % l# 8,G &Ms FFcaaaaaRoVVV3RlpVV3RlpVR8Xd V!V4#VR8XgVR8Xd V!V4#\R4h)aHapt-key replacement commands implemented: 'add', 'list', 'finger' @param output_file: name of output gpg file (without .gpg or .asc) @param data: key contents @param human_output: list keys formatted for human parsing @param hardened: write keys to to /etc/apt/cloud-init.gpg.d/ (referred to with [signed-by] in sources file) c*\PP\4'd\.M.p\P!\ 4F8pVP R4'gKVP\ V,4K: V'dV#R#)zreturn all apt keys /etc/apt/trusted.gpg (if it exists) and all keyfiles (and symlinks to keyfiles) in /etc/apt/trusted.gpg.d/ are returned based on apt-key implementation r)z.gpgz.asc)rrrAPT_LOCAL_KEYSlistdirAPT_TRUSTED_GPG_DIRrrrw) key_filesfiles r(_get_key_filesapt_key.._get_key_files4sg)+~(F(F^$B JJ23D}}-..  !4t!;<4&y-2-r*c <RpS'g-\P!\RPS44V#S'd\M\ pVP S4pRPVS4p\P!W4V# \Pd/\P!\RPS44T#\d/\P!\RPS44T#i;i)zYapt-key add returns filepath to new keyring, or '/dev/null' when an error occurs z /dev/nullz)Unknown filename, failed to add key: "{}"z{}{}.gpgz Gpg error, failed to add key: {}z#Decode error, failed to add key: {}) r logexcrQr4CLOUD_INIT_GPG_DIRrdearmorrr rUnicodeDecodeError)rArkey_dirstdoutrpr$r#s& r( apt_key_addapt_key..apt_key_addCs   KK@GGM & *2&8K%,,T2&--g{C  2--  ;BB4H &  >EEdK  s$BAB?D D+DDc<.pS!4F&pVPVPVSR74K( RP V4# \Pd"p\P RY#4Rp?KlRp?ii;i)zgapt-key list returns string of all trusted keys (in /etc/apt/trusted.gpg and /etc/apt/trusted.gpg.d/) ) human_outputzFailed to list key "%s": %sNr)rw list_keysr rrQryr)rAkey_listrFerrorrrs& r( apt_key_listapt_key..apt_key_list_sy &(H L))()N)yy""-- L 98KK Ls"AA<A77A<rfingerr3z@apt_key() commands add, list, and finger are currently supported)r%) r7rr#rpr$rrrrs &&ffff @r(r(r(!sQ& .8# %3 H 6 1C   N  r*z cloud-initcV^8dQh/^\9d\\\3,;R&^\9d \;R&#)r,r/meta)__conditional_annotations__rr2r)r4s"r(r5r5 s?008wsCx091BjC1r*)rdebianzraspberry-pi-os)s390xarm64armhfpowerpcppc64elriscv64)N)F)FN)NN)NNFT)Yr__doc__rloggingrr%rVr.textwraprtypingrrrr cloudinitrrr r r cloudinit.cloudr cloudinit.configr cloudinit.config.schemar cloudinit.gpgrcloudinit.settingsr getLogger__name__rQrUrrrrr/rrr`r_r;r!r$r r#rrr)rBrGr?rtr~r>rrr]rrrrr[rrrr r\r)rYrrdrSrZrfrwr9rrrrrTr^r(rvr5)rs@r(rs1   00@@!#.+ !#'/1G6 74   6r  ! : : +24 56 6"K #$,-L"M C/&%+ \ @ $F$I2$  ,^%P4 N-H 0fD,N  @D &U p8&$GT &R%0&40H8U r"r*