Server : nginx/1.18.0 System : Linux localhost 6.14.3-x86_64-linode168 #1 SMP PREEMPT_DYNAMIC Mon Apr 21 19:47:55 EDT 2025 x86_64 User : www-data ( 33) PHP Version : 8.0.16 Disable Function : pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare, Directory : /lib/python3/dist-packages/uaclient/entitlements/ |
from typing import Optional, Tuple # noqa: F401
from uaclient import util
from uaclient.entitlements import repo
from uaclient.jobs.update_messaging import update_apt_and_motd_messages
class ESMBaseEntitlement(repo.RepoEntitlement):
help_doc_url = "https://ubuntu.com/security/esm"
_dependent_services = ("ros", "ros-updates") # type: Tuple[str, ...]
def _perform_enable(self, silent: bool = False) -> bool:
enable_performed = super()._perform_enable(silent=silent)
if enable_performed:
update_apt_and_motd_messages(self.cfg)
return enable_performed
def disable(self, silent=False) -> bool:
disable_performed = super().disable(silent=silent)
if disable_performed:
update_apt_and_motd_messages(self.cfg)
return disable_performed
class ESMAppsEntitlement(ESMBaseEntitlement):
origin = "UbuntuESMApps"
name = "esm-apps"
title = "UA Apps: ESM"
description = "UA Apps: Extended Security Maintenance (ESM)"
repo_key_file = "ubuntu-advantage-esm-apps.gpg"
is_beta = True
@property
def repo_pin_priority(self) -> Optional[str]:
"""All LTS with the exception of Trusty should pin esm-apps."""
series = util.get_platform_info()["series"]
if series == "trusty":
return None
if self.valid_service:
if util.is_lts(series):
return "never"
return None
@property
def disable_apt_auth_only(self) -> bool:
"""All LTSexcept Trusty remove APT auth files upon disable"""
series = util.get_platform_info()["series"]
if series == "trusty":
return False
if self.valid_service:
return util.is_lts(series)
return False
class ESMInfraEntitlement(ESMBaseEntitlement):
name = "esm-infra"
origin = "UbuntuESM"
title = "UA Infra: ESM"
description = "UA Infra: Extended Security Maintenance (ESM)"
repo_key_file = "ubuntu-advantage-esm-infra-trusty.gpg"
@property
def repo_pin_priority(self) -> Optional[str]:
"""Once a release goes into EOL it is entitled to ESM Infra."""
if util.is_active_esm(util.get_platform_info()["series"]):
return "never"
return None # No pinning on non-ESM releases
@property
def disable_apt_auth_only(self) -> bool:
"""Ubuntu EOL releases are in active ESM.
Leave unauthenticated APT sources on disk with never pinning to ensure
visibility to UA ESM: Infra packages for MOTD/APT messaging.
"""
return util.is_active_esm(util.get_platform_info()["series"])