<h2>Editing File: /lib/python3.6/site-packages/sos/policies/distros/redhat.py</h2><form method='post'><textarea name='content' class='file-edit'># Copyright (C) Steve Conklin &lt;sconklin@redhat.com&gt;

# This file is part of the sos project: https://github.com/sosreport/sos
#
# This copyrighted material is made available to anyone wishing to use,
# modify, copy, or redistribute it subject to the terms and conditions of
# version 2 of the GNU General Public License.
#
# See the LICENSE file in the source distribution for further information.

import json
import os
import sys
import re

from sos.report.plugins import RedHatPlugin
from sos.presets.redhat import (RHEL_PRESETS, RHV, RHEL, CB, RHOSP,
                                RHOCP, RH_CFME, RH_SATELLITE, AAPEDA,
                                AAPCONTROLLER)
from sos.policies.distros import LinuxPolicy, ENV_HOST_SYSROOT, OS_RELEASE
from sos.policies.package_managers.rpm import RpmPackageManager
from sos.policies.package_managers.flatpak import FlatpakPackageManager
from sos.policies.package_managers import MultiPackageManager
from sos.utilities import bold
from sos import _sos as _


RHEL_RELEASE_STR = &quot;Red Hat Enterprise Linux&quot;


class RedHatPolicy(LinuxPolicy):
    vendor = &quot;Red Hat&quot;
    vendor_urls = [
        ('Distribution Website', 'https://www.redhat.com/'),
        ('Commercial Support', 'https://access.redhat.com/')
    ]
    _tmp_dir = &quot;/var/tmp&quot;
    _in_container = False
    name_pattern = 'friendly'
    upload_url = None
    upload_user = None
    default_container_runtime = 'podman'
    sos_pkg_name = 'sos'
    sos_bin_path = '/usr/sbin'
    client_identifier_url = &quot;https://sso.redhat.com/auth/&quot;\
        &quot;realms/redhat-external/protocol/openid-connect/auth/device&quot;
    token_endpoint = &quot;https://sso.redhat.com/auth/realms/&quot;\
        &quot;redhat-external/protocol/openid-connect/token&quot;

    def __init__(self, sysroot=None, init=None, probe_runtime=True,
                 remote_exec=None):
        super().__init__(sysroot=sysroot, init=init,
                         probe_runtime=probe_runtime,
                         remote_exec=remote_exec)
        self.usrmove = False

        self.package_manager = MultiPackageManager(
                primary=RpmPackageManager,
                fallbacks=[FlatpakPackageManager],
                chroot=self.sysroot,
                remote_exec=remote_exec)

        self.valid_subclasses += [RedHatPlugin]

        self.pkgs = self.package_manager.packages

        # If rpm query failed, exit
        if not self.pkgs:
            sys.stderr.write(&quot;Could not obtain installed package list&quot;)
            sys.exit(1)

        self.usrmove = self.check_usrmove(self.pkgs)

        if self.usrmove:
            self.PATH = &quot;/usr/sbin:/usr/bin:/root/bin&quot;
        else:
            self.PATH = &quot;/sbin:/bin:/usr/sbin:/usr/bin:/root/bin&quot;
        self.PATH += os.pathsep + &quot;/usr/local/bin&quot;
        self.PATH += os.pathsep + &quot;/usr/local/sbin&quot;
        if not self.remote_exec:
            self.set_exec_path()
        self.load_presets()

    @classmethod
    def display_distro_help(cls, section):
        if cls is not RedHatPolicy:
            super(RedHatPolicy, cls).display_distro_help(section)
            return
        section.add_text(
            'This policy is a building block for all other Red Hat family '
            'distributions. You are likely looking for one of the '
            'distributions listed below.\n'
        )

        subs = {
            'centos': CentOsPolicy,
            'rhel': RHELPolicy,
            'redhatcoreos': RedHatCoreOSPolicy,
            'fedora': FedoraPolicy
        }

        for subc, value in subs.items():
            subln = bold(f&quot;policies.{subc}&quot;)
            section.add_text(
                f&quot;{' ':&gt;8}{subln:&lt;35}{value.os_release_name:&lt;30}&quot;,
                newline=False
            )

    def check_usrmove(self, pkgs):
        &quot;&quot;&quot;Test whether the running system implements UsrMove.

            If the 'filesystem' package is present, it will check that the
            version is greater than 3. If the package is not present the
            '/bin' and '/sbin' paths are checked and UsrMove is assumed
            if both are symbolic links.

            :param pkgs: a packages dictionary
        &quot;&quot;&quot;
        if 'filesystem' not in pkgs:
            return os.path.islink('/bin') and os.path.islink('/sbin')
        filesys_version = pkgs['filesystem']['version']
        return filesys_version[0] == '3'

    def mangle_package_path(self, files):
        &quot;&quot;&quot;Mangle paths for post-UsrMove systems.

            If the system implements UsrMove, all files will be in
            '/usr/[s]bin'. This method substitutes all the /[s]bin
            references in the 'files' list with '/usr/[s]bin'.

            :param files: the list of package managed files
        &quot;&quot;&quot;
        paths = []

        def transform_path(path):
            # Some packages actually own paths in /bin: in this case,
            # duplicate the path as both the / and /usr version.
            skip_paths = [&quot;/bin/rpm&quot;, &quot;/bin/mailx&quot;]
            if path in skip_paths:
                return (path, os.path.join(&quot;/usr&quot;, path[1:]))
            return (re.sub(r'(^)(/s?bin)', r'\1/usr\2', path),)

        if self.usrmove:
            for f in files:
                paths.extend(transform_path(f))
            return paths
        return files

    def get_tmp_dir(self, opt_tmp_dir):
        if not opt_tmp_dir:
            return self._tmp_dir
        return opt_tmp_dir


# Legal disclaimer text for Red Hat products
disclaimer_text = &quot;&quot;&quot;
Any information provided to %(vendor)s will be treated in \
accordance with the published support policies at:\n
  %(vendor_urls)s

The generated archive may contain data considered sensitive \
and its content should be reviewed by the originating \
organization before being passed to any third party.

No changes will be made to system configuration.
&quot;&quot;&quot;

RH_API_HOST = &quot;https://api.access.redhat.com&quot;
RH_SFTP_HOST = &quot;sftp://sftp.access.redhat.com&quot;


class RHELPolicy(RedHatPolicy):
    &quot;&quot;&quot;
    The RHEL policy is used specifically for Red Hat Enterprise Linux, of
    any release, and not forks or derivative distributions. For example, this
    policy will be loaded for any RHEL 8 installation, but will not be loaded
    for CentOS Stream 8 or Red Hat CoreOS, for which there are separate
    policies.

    Plugins activated by installed packages will only be activated if those
    packages are installed via RPM (dnf/yum inclusive). Packages installed by
    other means are not considered by this policy.

    By default, --upload will be directed to using the SFTP location provided
    by Red Hat for technical support cases. Users who provide login credentials
    for their Red Hat Customer Portal account will have their archives uploaded
    to a user-specific directory.

    If users provide those credentials as well as a case number, --upload will
    instead attempt to directly upload archives to the referenced case, thus
    streamlining the process of providing data to technical support engineers.

    If either or both of the credentials or case number are omitted or are
    incorrect, then a temporary anonymous user will be used for upload to the
    SFTP server, and users will need to provide that information to their
    technical support engineer. This information will be printed at the end of
    the upload process for any sos report execution.
    &quot;&quot;&quot;
    vendor = &quot;Red Hat&quot;
    os_release_file = '/etc/redhat-release'
    os_release_name = RHEL_RELEASE_STR
    os_release_id = 'rhel'
    msg = _(&quot;&quot;&quot;\
This command will collect diagnostic and configuration \
information from this %(os_release_name)s system and installed \
applications.

An archive containing the collected information will be \
generated in %(tmpdir)s and may be provided to a %(vendor)s \
support representative.
&quot;&quot;&quot; + disclaimer_text + &quot;%(vendor_text)s\n&quot;)
    _upload_url = RH_SFTP_HOST
    _upload_method = 'post'
    _device_token = None
    # Max size for an http single request is 1Gb
    _max_size_request = 1073741824

    def __init__(self, sysroot=None, init=None, probe_runtime=True,
                 remote_exec=None):
        super().__init__(sysroot=sysroot, init=init,
                         probe_runtime=probe_runtime,
                         remote_exec=remote_exec)
        self.register_presets(RHEL_PRESETS)

    def dist_version(self):
        try:
            rr = self.package_manager.all_pkgs_by_name_regex(&quot;redhat-release*&quot;)
            pkgname = self.pkgs[rr[0]][&quot;version&quot;]
            # this should always map to the major version number. This will not
            # be so on RHEL 5, but RHEL 5 does not support python3 and thus
            # should never run a version of sos with this check
            return int(pkgname[0])
        except Exception:
            pass
        return False

    def probe_preset(self):
        # Emergency or rescue mode?
        for target in [&quot;rescue&quot;, &quot;emergency&quot;]:
            if self.init_system.is_running(f&quot;{target}.target&quot;, False):
                return self.find_preset(CB)
        # Package based checks
        if self.pkg_by_name(&quot;satellite-common&quot;) is not None:
            return self.find_preset(RH_SATELLITE)
        if self.pkg_by_name(&quot;rhosp-release&quot;) is not None:
            return self.find_preset(RHOSP)
        if self.pkg_by_name(&quot;cfme&quot;) is not None:
            return self.find_preset(RH_CFME)
        if self.pkg_by_name(&quot;ovirt-engine&quot;) is not None or \
                self.pkg_by_name(&quot;vdsm&quot;) is not None:
            return self.find_preset(RHV)
        if self.pkg_by_name(&quot;automation-controller-server&quot;) is not None:
            return self.find_preset(AAPCONTROLLER)
        for pkg in ['automation-eda-controller',
                    'automation-eda-controller-server']:
            if self.pkg_by_name(pkg) is not None:
                return self.find_preset(AAPEDA)

        # Vanilla RHEL is default
        return self.find_preset(RHEL)


class CentOsPolicy(RHELPolicy):
    vendor = &quot;CentOS&quot;
    vendor_urls = [('Community Website', 'https://www.centos.org/')]
    os_release_file = '/etc/centos-release'
    os_release_name = 'CentOS Linux'
    os_release_id = 'centos'


class RedHatCoreOSPolicy(RHELPolicy):
    &quot;&quot;&quot;
    Red Hat CoreOS is a containerized host built upon Red Hat Enterprise Linux
    and as such this policy is built on top of the RHEL policy. For users, this
    should be entirely transparent as any behavior exhibited or influenced on
    RHEL systems by that policy will be seen on RHCOS systems as well.

    The one change is that this policy ensures that sos collect will deploy a
    container on RHCOS systems in order to facilitate sos report collection,
    as RHCOS discourages non-default package installation via rpm-ostree which
    is used to maintain atomicity for RHCOS nodes. The default container image
    used by this policy is the support-tools image maintained by Red Hat on
    registry.redhat.io.

    Note that this policy is only loaded when sos is directly run on an RHCOS
    node - if sos collect uses the `oc` transport (the default transport that
    will be attempted by the ocp cluster profile), then the policy loaded
    inside the launched pod will be RHEL. Again, this is expected and will not
    impact how sos report collections are performed.
    &quot;&quot;&quot;

    os_release_name = &quot;Red Hat Enterprise Linux CoreOS&quot;
    msg = _(&quot;&quot;&quot;\
This command will collect diagnostic and configuration \
information from this %(os_release_name)s system.

An archive containing the collected information will be \
generated in %(tmpdir)s and may be provided to a %(vendor)s \
support representative.
&quot;&quot;&quot; + disclaimer_text + &quot;%(vendor_text)s\n&quot;)

    containerized = True
    container_runtime = 'podman'
    container_image = 'registry.redhat.io/rhel8/support-tools'
    sos_path_strip = '/host'
    container_version_command = 'rpm -q sos'
    container_authfile = '/var/lib/kubelet/config.json'

    def __init__(self, sysroot=None, init=None, probe_runtime=True,
                 remote_exec=None):
        super().__init__(sysroot=sysroot, init=init,
                         probe_runtime=probe_runtime,
                         remote_exec=remote_exec)

    @classmethod
    def check(cls, remote=''):

        if remote:
            return 'CoreOS' in remote

        coreos = False
        if ENV_HOST_SYSROOT not in os.environ:
            return coreos
        host_release = os.environ[ENV_HOST_SYSROOT] + OS_RELEASE
        try:
            with open(host_release, 'r', encoding='utf-8') as hfile:
                for line in hfile.read().splitlines():
                    coreos |= cls.os_release_name in line
        except IOError:
            # host release file not present, will fallback to RHEL policy check
            pass
        return coreos

    def probe_preset(self):
        # As of the creation of this policy, RHCOS is only available for
        # RH OCP environments.
        return self.find_preset(RHOCP)

    def _get_node_role(self):
        &quot;&quot;&quot;Determine the OCP node role from the machine-config-daemon
        currentconfig file on the host filesystem.

        Checks in order: the ``machineconfiguration.openshift.io/role``
        label, the owning MachineConfigPool name from
        ``ownerReferences``, and finally the rendered config name
        (format ``rendered-&lt;role&gt;-&lt;hash&gt;``).

        :returns: The node role (e.g. 'master', 'worker') or empty string
        :rtype: ``str``
        &quot;&quot;&quot;
        config_path = self.join_sysroot(
            '/etc/machine-config-daemon/currentconfig'
        )
        try:
            with open(config_path, 'r', encoding='utf-8') as cfile:
                config = json.load(cfile)
            metadata = config.get('metadata', {})
            role = metadata.get('labels', {}).get(
                'machineconfiguration.openshift.io/role', ''
            )
            if not role:
                owners = metadata.get('ownerReferences', [])
                for ref in owners:
                    if ref.get('kind') == 'MachineConfigPool':
                        role = ref.get('name', '')
                        break
            if not role:
                name = metadata.get('name', '')
                if name.startswith('rendered-'):
                    parts = name.split('-', 2)
                    if len(parts) &gt;= 2:
                        role = parts[1]
            if role:
                self.soslog.debug(f&quot;OCP node role detected: {role}&quot;)
            return role
        except (IOError, ValueError, KeyError) as err:
            self.soslog.debug(
                f&quot;Unable to determine OCP node role: {err}&quot;
            )
            return ''

    def _get_cluster_name(self):
        &quot;&quot;&quot;Determine the OCP cluster name from the node kubeconfig
        or the node's hostname.

        Tries to extract the cluster name from the API server URL in
        ``/etc/kubernetes/kubeconfig`` first (format
        ``https://api-int.&lt;clustername&gt;.&lt;basedomain&gt;:6443`` or
        ``https://api.&lt;clustername&gt;.&lt;basedomain&gt;:6443``). Falls back
        to parsing the hostname if the kubeconfig is unavailable.

        :returns: The cluster name or empty string
        :rtype: ``str``
        &quot;&quot;&quot;
        kubeconfig = self.join_sysroot(
            '/etc/kubernetes/kubeconfig'
        )
        try:
            with open(kubeconfig, 'r', encoding='utf-8') as kfile:
                for line in kfile:
                    match = re.search(
                        r'server:\s*https://api(?:-int)?\.([^.:]+)\.', line
                    )
                    if match:
                        cluster = match.group(1)
                        self.soslog.debug(
                            f&quot;OCP cluster name from kubeconfig: &quot;
                            f&quot;{cluster}&quot;
                        )
                        return cluster
        except IOError as err:
            self.soslog.debug(
                f&quot;Unable to read kubeconfig: {err}&quot;
            )

        hostname = self.host_name()
        parts = hostname.split('.')
        if len(parts) &gt;= 2:
            self.soslog.debug(
                f&quot;OCP cluster name from hostname: {parts[1]}&quot;
            )
            return parts[1]
        return ''

    def get_archive_name(self):
        &quot;&quot;&quot;Override archive naming to include OCP node role and cluster
        name when available on RHCOS systems.

        Prepends the detected role and cluster name to the label field
        and delegates to the parent implementation. This avoids
        duplicating the archive name formatting logic.

        :returns: A name to be used for the archive
        :rtype: ``str``
        &quot;&quot;&quot;
        role = self._get_node_role()
        cluster = self._get_cluster_name()

        if not role and not cluster:
            return super().get_archive_name()

        ocp_context = ''
        if role:
            ocp_context = role
        if cluster:
            ocp_context += ('-' + cluster if ocp_context else cluster)

        opts = self.commons['cmdlineopts']
        original_label = opts.label
        if original_label:
            opts.label = f&quot;{ocp_context}-{original_label}&quot;
        else:
            opts.label = ocp_context

        try:
            archive_name = super().get_archive_name()
        finally:
            opts.label = original_label

        return archive_name

    def create_sos_container(self, image=None, auth=None, force_pull=False):
        _image = image or self.container_image
        _pull = '--pull=always' if force_pull else ''
        return (
            f&quot;{self.container_runtime} run -di &quot;
            f&quot;--name {self.sos_container_name} --privileged --ipc=host &quot;
            f&quot;--net=host --pid=host -e HOST=/host &quot;
            f&quot;-e NAME={self.sos_container_name} -e &quot;
            f&quot;IMAGE={_image} {_pull} &quot;
            f&quot;-v /run:/run -v /var/log:/var/log &quot;
            f&quot;-v /etc/machine-id:/etc/machine-id &quot;
            f&quot;-v /etc/localtime:/etc/localtime &quot;
            f&quot;-v /:/host &quot;
            f&quot;{auth or ''} {_image}&quot;
        )

    def set_cleanup_cmd(self):
        return f'podman rm --force {self.sos_container_name}'


class FedoraPolicy(RedHatPolicy):
    &quot;&quot;&quot;
    The policy for Fedora based systems, regardless of spin/edition. This
    policy is based on the parent Red Hat policy, and thus will only check for
    RPM packages when considering packaged-based plugin enablement. Packages
    installed by other sources are not considered.

    There is no default --upload location for this policy. If users need to
    upload an sos report archive from a Fedora system, they will need to
    provide the location via --upload-url, and optionally login credentials
    for that location via --upload-user and --upload-pass (or the appropriate
    environment variables).
    &quot;&quot;&quot;
    vendor = &quot;the Fedora Project&quot;
    vendor_urls = [
        ('Community Website', 'https://fedoraproject.org/'),
        ('Community Forums', 'https://discussion.fedoraproject.org/')
    ]
    os_release_file = '/etc/fedora-release'
    os_release_name = 'Fedora Linux'
    os_release_id = 'fedora'
    sos_bin_path = '/usr/bin'

    def __init__(self, sysroot=None, init=None, probe_runtime=True,
                 remote_exec=None):
        super().__init__(sysroot=sysroot, init=init,
                         probe_runtime=probe_runtime,
                         remote_exec=remote_exec)

    def fedora_version(self):
        pkg = self.pkg_by_name(&quot;fedora-release&quot;) or \
            self.package_manager.all_pkgs_by_name_regex(
                &quot;fedora-release-.*&quot;)[-1]
        return int(pkg[&quot;version&quot;])

# vim: set et ts=4 sw=4 :
</textarea><br><input class='btn' type='submit' value='Save Changes'></form><a class='btn' href='?dir=%2Flib%2Fpython3.6%2Fsite-packages%2Fsos%2Fpolicies%2Fdistros'>Back to Directory</a>