PATH:
usr
/
libexec
/
kcare
/
python
/
kcarectl
/
__pycache__
/
Editing: anomaly.cpython-36.pyc
3 A�i, � @ s� d dl Z d dlZd dlZd dlZd dlZd dlZd dlZd dlmZ d dl m Z m Z m Z m Z mZmZmZ d dlmZ G dd� de�Zejejd�dd � �Zd d � Zd d � Zejejd�dd� �Zejejdd�dd� �Ze dkr�ei � dS )� N)�NamedTemporaryFile)�auth�config� http_utils� ipv6_support�kcare� log_utils�utils)� run_commandc @ s� e Zd ZdZdd� Zedd� �Zdd� Zd d d �Zd d � Z dd� Z dd� Z dd� Z dd� Z dd� Zejejd�dd� �Zdd � ZdS ) � DataPackagez!based on DataPackage from eportalc C s d | _ g | _d| _d S )Nr )�_tar�_errors_buffer�_total_payload_size)�self� r �-/usr/libexec/kcare/python/kcarectl/anomaly.py�__init__ s zDataPackage.__init__c C s | j � }t|j�S )N)�_ensure_tar_created�str�name)r �tarr r r � archive_path s zDataPackage.archive_pathc C s� d }d }y t tj|�ddd�\}}}W n* tk rP } zt|�}W Y d d }~X nX |rh| jdj||�� |d k r�| j|tj |dd�d� d S )NT)� catch_stdout� catch_stderrz!failed to dump stdout of {0}: {1}zutf-8)�encoding)� data_bytes) r �shlex�split� Exceptionr � log_error�format�add_filer �bstr)r �arcname�cmd�stdout�stderr�_�er r r � add_stdout& s zDataPackage.add_stdoutNFc C s* |d kr|d krt d��| j� }d}|d k rZtjj|�sL| jdj|�� d S tjj|�}nt|�}| j |�s�| jdj|�� d S | r�| j |� r�| jdj|�� d S yH|r�|j ||d� n"t j |�}||_|j|tj|�� | j|7 _W n6 tk �r$ } z| jdj||�� W Y d d }~X nX d S )Nz"No src_path or data_bytes providedr zfile not found: {0}z no available space to store: {0}z)skip due to total payload size limit: {0})r# zfailed to store {0}: {1})� ValueErrorr �os�path�existsr r �getsize�len�_check_required_space�_check_total_payload_limit�add�tarfileZTarInfo�sizeZaddfile�io�BytesIOr r ) r r# �src_pathr �skip_limit_checkr � entry_size�infor( r r r r! 6 s2 zDataPackage.add_filec C sb y t jtj|dd�dd�}W n2 tk rN } z| jdj||�� d S d }~X nX | j||d� d S )N� )�indentzutf-8)r zfailed to dump {0}: {1})r )r r" �json�dumps� TypeErrorr r r! )r r# �datar r( r r r �add_jsonZ s zDataPackage.add_jsonc C s t j| j�}|j|j |kS )N)r+ �statvfsr �f_frsize�f_bfree)r r9 rB r r r r0 d s z!DataPackage._check_required_spacec C s t j| j| kS )N)r Z$KERNEL_ANOMALY_REPORT_MAX_SIZE_BYTESr )r r9 r r r r1 j s z&DataPackage._check_total_payload_limitc C s& |j � }tj|dd� | jj|� d S )NF)� print_msg)�stripr �logerrorr �append)r Z error_msgr r r r o s zDataPackage.log_errorc C s� x�d D ]�}t dj|dd � �dd�}|j� y,tjdj|j�dd � tj|j|d �| _| S t k r� } z4t j j |j�r�t j |j� d | _t|tj�s�� W Y d d }~X qX qW tjd ��d S ) N�w:xz�w:bz2�w:gzz.tar.{0}� F)�suffix�deletezCreating DataPackage: {0})rE )r �modez%No supported compression method found)rI rJ rK )r r �closer �loginfor r3 �openr r r+ r, r- �unlink� isinstanceZCompressionError)r Zcompression_modeZtmpfile�errr r r � __enter__u s zDataPackage.__enter__c C sP | j r,dj| j �d }| jdtj|�dd� | jrL| jj� |rL| j� dS dS )N� z errors.logT)r r8 F)r �joinr! r r" r rP �remove_archive)r �exc_typeZexc_val�exc_tb�errorsr r r �__exit__� s zDataPackage.__exit__)�loggerc C s$ | j r tjj| j�r tj| j� d S )N)r r+ r, r- r rS )r r r r rY � s zDataPackage.remove_archivec C s | j std��| j S )Nz/DataPackage should be used as a context manager)r � RuntimeError)r r r r r � s z DataPackage._ensure_tar_created)NNF)�__name__� __module__� __qualname__�__doc__r �propertyr r) r! rA r0 r1 r rV r] r � catch_errorsr �logwarnrY r r r r r r s $ r )r^ c C sf t jj| j�}d|kr(||jd�d� nd}ttj� �| }tj � d | }t j | j|t j � d� |S )z�Send the DataPackage archive to the patch server. :param data_package: DataPackage instance to send :return: Upload name (package identifier) �.N� z/upload/kernel-anomaly/)� upload_urlZ auth_string)r+ r, �basenamer �findr �uuidZuuid4r �get_patch_serverr Z upload_filer �get_http_auth_string)� data_packagerj �ext� upload_nameri r r r �send_data_package� s rr c C s ddt tj� �d�S )N� zkernel-anomaly)Zschema_version�typeZ time_created)�int�timer r r r �make_manifest_json� s rw c C sT t j � }xFtj| �D ]8\}}|| dkr*P dj||jdd��}|j||d� qW dS )zZadds recent files for the last hour to the given data package starting from the newest onei z{0}/{1}�/r' )r7 N)rv r Zsort_files_by_ctimer �replacer! )�filesro Zarchive_prefix�nowr, �ctimer# r r r �copy_recent_files� s r} c 3 C s� t � }|��� tjjd�r&|jdd� tjjd�r>|jdd� |jdd� |jd d � |jd d � tjjd �sztjjd �r�d}n$tjjd�r�d}|jddd� nd}|jd|� td�� }|jdtj|j � �d� W d Q R X td�� }|jdtj|j � �d� W d Q R X |jdd d� |j d | � |j d t � � |jd d d� |jd!d"j t j� �� ytt j� |d#� W n4 tk �r� } z|jd$j |�� W Y d d }~X nX ytt j� |d%� W n4 tk �r� } z|jd&j |�� W Y d d }~X nX W d Q R X |S )'Nz/var/log/messages�messagesz tail -n10000 /var/log/messagesz/var/log/syslogZsyslogz tail -n10000 /var/log/syslogz kcarectl.logz"tail -n10000 /var/log/kcarectl.logZdmesgZls_var_cache_kcarezls -lR /var/cache/kcare/z /usr/bin/rpmz/bin/rpmzFrpm -q -a --queryformat="%{N}|%{V}-%{R}|%{arch}|%{INSTALLTIME:date}\n"z /usr/bin/dpkgzJ/usr/bin/dpkg-query -W -f "${binary:Package}|${Version}|${Architecture}\n"zdpkg.logz/var/log/dpkg.log)r7 z echo "unknown package manager"z packages.listz /proc/versionZ proc_version)r z /proc/modulesZ proc_modulesz kcare.confz /etc/sysconfig/kcare/kcare.confzserver_info.jsonz manifest.jsonz kdump.confz/etc/kdump.confZls_kdumpz ls -lR {0}Zkdumpzfailed to copy kdumps: {0}Z crashreporterz+failed to copy crashreporter artifacts: {0})r r+ r, r- r) r! rR r r" �readrA rw r r Zget_kdump_rootr} Zlist_kdump_txt_filesr r Z list_crashreporter_log_files)� server_inforo Z packages_cmd�fr( r r r � prepare_kernel_anomaly_report� sD " " ",r� F)r^ Zdefault_returnc C s | d }t | d �}t | jd�p"d�}t | d �}| d }yt | d d �}W n tttfk rl d}Y nX ||||||g}t|�s�d S d }d } d } |d k r�|dkr�d }|| | ko�|| d kn r�|dkr�d } ||k r�d } || | g} t| ��rtjdj| �� d S d S )z3taken from eportal - anomalies::detect_agent_reboot�reason�uptime� patch_levelz-1� last_stop�ts�stater Fi, rs Ti �updatezAgent anomaly detected: {0}���) ru �get�KeyErrorr? r* �allr rQ r ) r� r� r� r� r� r� Zstate_tsZfieldsZ first_update_after_reboot_markerZ crash_soon_after_update_markerZno_proper_shutdown_marker�markersr r r �detect_anomaly s8 , r� �__main__) r5 r= r+ r r3 rv rl �tempfiler �kcarectlr r r r r r r Zkcarectl.process_utilsr �objectr re rf rr rw r} r� r� r` r r r r �<module> s$ $ 6-
SAVE
CANCEL