/opt/cloudlinux/venv/lib/python3.11/site-packages/clwpos/__pycache__
Edit: /opt/cloudlinux/venv/lib/python3.11/site-packages/clwpos/__pycache__/utils.cpython-311.pyc (111089B)
x
K J d dl Z d dlZd dlZd dlZd dlZd dlZd dlZd dlZd dlZd dl Z d dl
Z
d dl Z d dl Z d dl
Z
d dlZd dlZd dlZd dlZd dlZd dlZd dlZd dlZd dl mZmZ d dlmZmZmZ d dlm Z d dl m Z m Z d dl m Z! d dl"m#Z# d dl$m%Z% d d l&m'Z'm(Z(m&Z& d d
l)m*Z*m+Z+m,Z,m-Z- d dl.Z.d d l/m0Z0m1Z1 d d l2m3Z3 d d
l4m5Z5m6Z6 d dl7m8Z8 d dl9m:Z: d dl;m
Z>m?Z?m@Z@mAZAmBZB d dlCmDZD d dlEmFZFmGZG d dlHmIZImJZJ d dlKmLZLmMZM d dlNmOZO d dlPmQZQmRZRmSZS d dlTmUZU d dlVmWZWmXZX d dlYmZZZ d dl[m\Z\m]Z] d dl^m Z m_Z_ d d l`maZambZbmcZcmdZdmeZemfZf d d lgmhZhmiZimjZjmkZkmlZlmmZmmnZnmoZompZpmqZqmrZrmsZsmtZtmuZumvZv d d lwmxZx d d lymzZz d d!l{m|Z|m}Z} d d"l~mZ ej rd d#lmZ da ej e Zd$ Z G d% d&ej Zdd(ed)efd*Zdd(ed+ed,efd-Zdd(ed/efd0Zd1efd2Zd3efd4Zd1efd5Zd6e j fd7Zd8 Zdd9edz d1efd:Zd1efd;Zdd<d9edz d1efd=Zdd<d9edz fd>Z G d? d@ ZdAed1edz fdBZd1ee fdCZdDed1dfdEZdFed1dfdGZd9efdHZdFed1dfdIZddJZdK ZdLed1eeef fdMZdNedOedz fdPZd(efdQZ G dR dSe ZeddUedOedz fdV ZdW ZexddZ Zd[ed1eeef fd\Zdd1efd^Zd_ Zd` Ze G da db Ze G dc dd Ze de Zdf Zdg Zd1efdhZdi Zdj Zdk Zd1efdlZd1efdmZed1ee fdn ZddoZdpZdq ZddrZds Zdt Z G du dv ZddwZ G dx dy Zedzefd{ Zdzed1efd|Zd1efd}Zd1efd~Zd1efdZd1efdZdeded1dfdZdFededed1dfdZd1efdZd1efdZd1eeeef fdZdNed1efdZdeded1efdZded1efdZded1edz fdZdeded1eeeef fdZded1eeeef fdZd1edz fdZexd1edz fd Zexd1edz fd Zexd1edz fd Zexd1edz fd Zded1efdZd ZdededefdZd Zd Ze dd9efd Ze d9efd Zd Ze d ZdS ) N)AbstractContextManagercontextmanager)asdict dataclassfield)Enum)cachewraps)gettext)iglob)Path)AF_UNIX SOCK_STREAMsocket) parse_qsl urlencodeurlparse
urlunparse)_is_cagefs_enabled in_cagefs)mkdir)ClPwddrop_privileges)get_locale_from_envars)Feature)cpinfodocrootget_domain_loginget_main_username_by_uid
get_server_ipis_adminis_panel_feature_supported)NoDomain)CLEditionDetectionErroris_cl_shared_pro_edition)CLN_JWT_TOKEN_PATHDEFAULT_JWT_ES_TOKEN_PATH)
decode_jwtread_jwt)UIConfig)demote exec_utility run_command)
check_license)
PyJWTError
exceptions)Version)
disable_quotawrite_file_via_tempfile)r wp_config)WpCliUnsupportedExceptionWpConfigWriteFailed WpNotExistsWposDaemonUnreachableError WposErrorWPOSLicenseMissing)ALT_PHP_PREFIXCAGEFS_ENTER_USER_BINCAGEFS_ENTER_UTILCLCONFIG_UTILITYCLWPOS_OPT_DIR
EA_PHP_PREFIXPLESK_PHP_PREFIXPUBLIC_OPTIONSSUITES_MARKERSUSER_CLWPOS_CONFIG
USER_WPOS_DIRWPOS_DAEMON_SOCKET_FILEXRAY_MANAGER_UTILITYXRAY_USER_SOCKETRedisRequiredConstants)cached_in_scope )
setup_logging)pack_data_for_socket'read_unpack_response_from_socket_client)RollbackException)PHPc fd}|S )z'
Decorator for catching errors
c t t t a | g|R i |S # t $ r3}t | j |j |j |j d Y d }~d S d }~wt $ r}t |t rt | n t
d|j |j |j |j d}|j r
|j |d< t | j | Y d }~d S d }~wt $ rJ}t
d t | j i t! | d Y d }~d S d }~ww xY w)N)contextresultissuesz
WposError: %s)rS rT warningdetailszUnhandled error)rS rT )loggerrL __name__rO error_and_exit_is_jsonrS messageerrorsr9
isinstancer: rV exceptionrW Exceptionstr)selfargskwargseresponsefuncs py/clwpos/utils.py func_wrapperz!catch_error..func_wrapperp s >"8,,F M4.t...v.. . k k k 4=ai19`a`h*i*i j j j j j j j j j 4 4 4! /00
=q!!!! !)<<<#$9 aiXXHy
0&'i# 4=( 3 3 3 3 3 3 3 3 3 M M M . / / / 4=bCFF*K*K L L L L L L L L L Ms- *
E(A""
E/B D
E
?EE )rg ri s ` rh catch_errorrk k s)
M M M M M* c ( e Zd ZdZ fdZd Z xZS )ExtendedJSONEncoderzz
Makes it easier to use ENUMs and DATACLASSes in program,
automatically converting them when json is printed.
c D d|d< t j di | d S )NF ensure_asciirj )super__init__)rb rd __class__s rh rr z ExtendedJSONEncoder.__init__ s0 !&~ ""6"""""rl c t |t r|j S t |t j t j f r| S t |t rt | S t j | rt j
| S t j
| | S N)r^ r valuedatetimedate isoformatr1 ra dataclasses is_dataclassr json JSONEncoderdefault)rb objs rh r~ zExtendedJSONEncoder.default s c4 +9
hmX-> ?
@
@ +==?? "
W
%
% +s88O
%c
*
* + %c** * ''c222rl )rY
__module__ __qualname____doc__rr r~
__classcell__)rs s @rh rn rn sQ
# # # # # 3 3 3 3 3 3 3rl rn Fis_json is_prettyc |rY|r,t t j | ddt dS t t j | dt dS t | dS )z
Print specified dictionary
:param data_dict: data dictionary to print
:param is_json: True - print in JSON, False - in text
:param is_pretty: True - pretty json print, False - none (default)
:return: None
T)indent sort_keyscls)r r N)printr| dumpsrn ) data_dictr r s rh _print_dictionaryr sy R $*YqDFYZZZ [ [ [ [ [ $*Y$G +E== G +GG GGGc T d} t j rd} t j t t d }t j }t j
}t j }t j }t j
}t j }t j }dd|j d|j ddt j j d| dd|j d|j dd|j d|j dd|j d|j | dd|j d|j d d|j d| d d
d g
S ) ak
Construct list of lines (configuration settings)
that should be in Wordpress config file to enable redis.
Please note that deleting of the plugin would flush all keys related to the plugin (site) from redis.
REDIS_PREFIX and SELECTIVE_FLUSH in wp-config.php would guarantee that plugin will not flush keys unrelated
to this plugin (site)
falsetruer z)// Start of CloudLinux generated section
define('z', 'z');
z', z);
zif (defined('WP_CLI') && WP_CLI && !defined('WP_REDIS_IGNORED_GROUPS')) { define('WP_REDIS_IGNORED_GROUPS', ['user-queries']); }
z'// End of CloudLinux generated section
)get_server_wide_options disable_object_cache_bannersr r r r rE uuiduuid4rI WP_REDIS_PREFIXWP_REDIS_SCHEMEWP_REDIS_CLIENTWP_REDIS_SELECTIVE_FLUSHWP_REDIS_GRACEFULWP_REDIS_DISABLE_BANNERSr val
WP_REDIS_PATH) disable_banners_value socket_path prefix_uuid redis_prefix redis_schema redis_client redis_flushredis_gracefuldisable_bannerss rh redis_cache_config_sectionr d sV $ = ' & ',,xzz=,GGK*,,K)9L)9L)9L(AK+=N,EO 5A<$AA,*:AAAT)7<TT+TTTA<$AA,*:AAAE>&EEN,>EEEN<$NN,*:NKNNN=;#== ===G?'GG,AGGG M2 rl wp_config_pathc t j | }t j | st | t j | s t
t d d| i dS )z
Check that wp-config.php exists inside Wordpress directory.
:param wp_config_path: absolute path to Wordpress config file
:raises: WposError
z)Wordpress config file %(file)s is missingfiler\ rS N)r r dirnameexistsr7 isfiler9 r )r wp_paths rh check_wp_config_existancer s goon--G
7>>' " " #'"""
7>>. ) ) x(S T T_egu^vwwwwx xrl abs_wp_pathc t t j | }t | t dt dt
ffd } t j | }t t || }t d
| |d dS # t $ r}t || d}~ww xY w)z
Clear cloudlinux section with redis object cach config from docroot's wp-config.php
:param abs_wp_path: Absolute path to WordPress
:raises: WposError
liner c | vod| vS )zn
Filter function that should delete CL config options from the `redis_cache_config_section()`
r rj )r lines_to_filters rh __config_filterz1clear_redis_cache_config..__config_filter s ?*L/@/LLrl N)
ra r4 r r r boolreadlistfilterr3 r r r6 )r r r" wp_config_linescleared_wp_configre r! s @rh clear_redis_cache_configr+ s 4455N n---022OMc Md M M M M M M 5#.55 !I!I J J (9 : :NERRRRR 5 5 5!.!4445s AB, ,
C 6CC c b t st | nt j S )z
Run code under user's privileges if we are root; otherwise do nothing.
Used by cleanup/migration routines which should not perform filesystem writes as root.
)r r
contextlib nullcontextr s rh
_drop_to_userr/ s+
->,?,? ]?8 $ $ $ZE[E]E]]rl c | t t j | }t | d t D }t j | }t
d |D }g }|D ]^fd| D }|s|s dS t
fdt D s| _|d gt |dd }t d | |d dS # t $ r}t || d}~ww xY w)
z
Create config for redis-cache.
Updates wp-config.php by inserting CloudLinux redis-cache section when needed.
:param abs_wp_path: absolute path to WordPress
:raises: WposError
c ( i | ]}|j |j S rj )r r ).0constants rh
z-create_redis_cache_config.. s ___HHM8<___rl c 3 K | ]}d |v V dS )WP_REDIS_IGNORED_GROUPSNrj )r2 r s rh z,create_redis_cache_config.. s( #b#b$$=$E#b#b#b#b#b#brl c , i | ]\ }}d | dv
||S )r 'rj )r2 kvr s rh r4 z-create_redis_cache_config.. s3 i i iA_XY___dhMhMh1MhMhMhrl Nc 3 2 K | ]}d |j dv V dS )r r9 Nr )r2 redis_constantr s rh r7 z,create_redis_cache_config.. s7 nn^8."5888D@nnnnnnrl r rK r# r$ )ra r4 r r rI r& anyitemsappendr r3 r r r6 ) r r absent_constantsr) add_cli_directive
cleaned_linesupdated_configre r s @rh create_redis_cache_configrE s 4455N n---5__H^___#.55 ##b#bRa#b#b#b b b b
# + +D i i i i1A1G1G1I1I i i i #
,=
nnnnWmnnnnn
+ $$T***
!
'
)
)
122
7 7 OOOOO 5 5 5!.!4445s A*D A;D
D;&D66D;c
t pt j t } dx}}ddlm} ddlm}m} | D ]} d || D }n.# t $ r!}|
d|| Y d}~@d}~ww xY wt | } |D ]}
t | 5 t ||
| } ddd n # 1 swxY w Y n/# t $ r"}|
d|
|| Y d}~md}~ww xY w| D ]} | d v rd
n| } t | t s|d z
}&t j | s2t j | d r |d z
}| d
| ||
t j |
| d }
t t/ j |
}| d}t j | s t | 5 t j | r\t j | t j |
t j z st5 d| t j | ddd n # 1 swxY w Y |d z
}# t $ r'}|d z
}| d|| Y d}~ d}~ww xY w t9 j | j }n'# t> $ r |
d| Y #w xY w|r%|dk s t j | s| d|| gt j |t@ dd } t | 5 t j | s ddd t j! | }tE j# |j$ rtK j& | nt j | ddd n # 1 swxY w Y ;# tN $ r8}|j( tP j) k r| d||| Y d}~xd}~wt $ r#}| d||| Y d}~d}~ww xY w| * d|| dS )z
Cleanup for old customers:
- Remove legacy backups created next to wp-config.php (docroot):
/wp-config.php.backup
- Remove old per-user backup directory:
/.clwpos/backups/wp-config
r )
find_wp_paths)cpusers userdomainsc g | ]\ }}|S rj rj )r2 _r s rh
z4cleanup_legacy_wp_config_backups.. s >>>uq">>>rl z>legacy wp-config backup cleanup: can't get docroots for %s: %sN)excludeszAlegacy wp-config backup cleanup: can't scan docroot %s for %s: %s)r# .z./r# rK z..zLlegacy wp-config backup cleanup: suspicious wp_rel=%r for user=%s docroot=%sr z.backupz"refuse to delete outside docroot: z.legacy wp-config backup cleanup failed: %s: %sz:legacy wp-config backup cleanup: can't resolve home for %sz8legacy wp-config backup cleanup: invalid home for %s: %rbackupsz wp-configz;legacy wp-config backup cleanup: can't remove %s for %s: %sz;legacy wp-config backup cleanup done: removed=%d skipped=%d)+rX logging getLoggerrY clcommon.clwpos_librG clcommon.cpapirH rI r` debugr' r/ r^ ra r r isabsnormpathr rV r rstripr4 lexistssepr unlinkr r r r rE lstatstatS_ISDIRst_modeshutilrmtreer errnoENOENTinfo)_logremovedskippedrG rH rI r docrootsre rM docroot_pathwp_pathswp_relr r
legacy_backuphometargetsts rh cleanup_legacy_wp_config_backupsro s 0W&x00DGg11111133333333GII Lm Lm >> H(=(=>>>HH JJWYacd e e e HHHH >> $ * e * eL
"8,, T T #MM,$R$R$R S SHT T T T T T T T T T T T T T T
WYegoqr
#
e
e % 8 8f!&#.. qLG 7==(( BG,<,.wrapper= s2 '$&& &tT$V$$$rl )r
)rg rr s ` rh check_license_decoratorrs : s5 4[[% % % % [% Nrl r c t | \ }}||fS # t $ r! t t d d| i w xY w)z
Validates domain, determines it's owner and docroot or exit with error
:param domain: Domain name to check
:return: Tuple (username, docroot)
zNo such domain: %(domain)s.r r )r r# r9 r )r
document_rootowners rh check_domainrw G se d &v
um## d d d(E F FQY[aPbccccds +Ar attemptsc t j }||t j z } t j | t j t j z t j z t j z d }t j
t j | j dz rt j
| t j | n# t $ r Y nw xY wt j | t j t j z t j z t j z t j z d }t j |d }t% |pd D ]O} t j | | n@# t* $ r t- j d Y Lw xY wt1 t3 d n*# t* $ r t1 t3 d w xY w|S ) zE
Try to take lock on file with specified number of attempts.
Nr$ ? za+rK g333333?zwAnother utility instance is already running. Try again later or contact system administrator in case if issue persists.z%IO error happened while getting lock.)fcntlLOCK_EXLOCK_NBr openO_RDWRO_CREAT
O_NOFOLLOW O_CLOEXECr\ S_IMODEfstatr^ closerZ r O_EXCLfdopenrangeflockfilenor r sleepLockFailedExceptionr )r rx lock_typefdlock_fdrK s rh lock_filer U s
IU]" &T WT29rz1BMABLPRW
X
X < , - - 5
HRLLL
$$
BJ&2R]BR\Q B
)B%%x}1%%
A
GNN , ,i888
3
&1
T T T!'*Q"R"RSSST NsU B F5 )B> =F5 >
C F5
C A?F5 'E42F5 4 FF5 F F5 5'G c d}d}t j | }t j | }|s!|s t | dt d i d}|rX t j ddgdddd
}|j pd |j pd z }d |v rd}n"# t t
j
t f$ r Y nw xY wd}|r t j d
}|s#|s#t | dt d i dS dS dS )zb
Validate that MAx Cache is installed and its module is loaded
(Apache and/or nginx).
z!/opt/cloudlinux/maxcache/.versionz'/opt/cloudlinux/maxcache/.nginx-versionrT zMAx Cache is not installed.F apachectlz-MT )checkcapture_outputtexttimeoutr# maxcache_modulez0/etc/nginx/conf.d/modules/ea-nginx-maxcache.confz;MAx Cache module is not enabled (neither Apache nor nginx).N) r r r rZ rK
subprocessrunstdoutstderrr SubprocessErrorr ) r apache_version_pathnginx_version_pathapache_installednginx_installedapache_module_okprocoutputnginx_module_oks rh ensure_maxcache_availabler sr
>Bw~~&9::gnn%788O NO Nw1-J+K+K LMMM
> d# # D k'RDK,=2>F F**#' !:#=wG D O ] '..)[\\
O
qVWW X
s +4B B?>B?c e Zd ZdZdS )r z,
Exception when failed to take lock
N)rY r r r rj rl rh r r s rl r
resource_pathc # V K t | dz | }dV t | dS )z
Lock a file, than do something.
Make specified number of attempts to acquire the lock,
if attempts is None, wait until the lock is released.
Usage:
with acquire_lock(path, attempts=1):
... do something with files ...
z.lockN)r release_lock)r rx r s rh acquire_lockr s9
/::G EEErl c t j | t j n# t $ r Y nw xY w| dS )z
Releases lock file
N)r{ r r LOCK_UNr r )
descriptors rh r r sd
J%%'' 7777
s 14
A A php_versionrP c d}d| j k r5| | r"t t d d|i dS dS )zX
Ensures wp-cli is compatible, e.g some
php modules may prevent stable work
snuffleupaguszea-php74zSeems like ea-php74 %(module)s module is enabled. It may cause instabilities while managing Object Caching. Disable it and try againmoduler N)
identifieris_extension_loadedr5 r )r dangerous_modules rh wp_cli_compatibility_checkr sn '[+++ 0O0OP`0a0a+';
/0
,+++rl hidec v ddt j ddd| iii dg}t t | \ }}||fS )zf
Call cloudlinux-config utility
to hide/show WPOS icon in user's control panel interface.
setz--dataoptions
uiSettingshideAccelerateWPAppz--json)r| r r, r> )r params
returncoder s rh set_wpos_icon_visibilityr sS
I /Dd.K LMNN F &&6??J v rl r c F t | d S )zP
Check the current state of WPOS icon in user's control panel interface
r )r* get_param icon_names rh is_ui_icon_hiddenr s :: < 8 88rl c h t t j t | g S )z[
1. xray utility exists = alt-php-xray package installed
2. feature is visible
)allr r r rG )feature_visibles rh should_xray_user_agent_enabledr s&
344oF G GGrl c t t j t t j t
t
d g S )z
1. xray utility exists = alt-php-xray installed
2. xray socket exists
3. end-user plugin was not enabled by admin = hidden in UI
hideXrayAppr )r r r r rG rH r rj rl rh should_xray_user_agent_disabledr sM GNN/ 0 0 GNN+ , ,
6 6 6
rl c ` e Zd ZU ee Zedz ed< ee Zedz ed< dS )WHMCSServerWideOptionsdefault_factoryNallowed_suitesvisible_suites)rY r r r r' r __annotations__r rj rl rh r r sT "'%"="="=ND4K==="'%"="="=ND4K=====rl r c J e Zd ZU dZeed< eed< eed< eed< eed< eed< ee Z eed < d
Z
ed
z ed < d
Z ed
z ed < d
Z ed
z ed
< d
Z
ed
z ed< d
Zed
z ed< d
Zed
z ed< ddZed Zed Zed Zed Zd
S )ServerWideOptionsz
Options holder representing server-wide option
available for reading for any user on server.
Only can be changed by root.
show_iconr r supported_suitessupported_featureshidden_featuresr
whmcs_optionsNr "disable_smart_advice_notifications%disable_smart_advice_wordpress_plugin disable_smart_advice_reminders upgrade_urlupgrade_url_cdn object_cachec ddl mm i fd j D fdj D }||vrdS d}| j v r| j dS | j }|j v r| j dS | j }|dS t
t | }t t |d }|
t || |t dd|| d t | |d< t | S )
z
Append some needed arguments to upgrade url to make it specific for user.
Please pay attention that we add *customer_name* instead of system user,
that may be different on plesk.
r ) CDNSuitePro PremiumSuitec i | ]
}|j S rj r )r2 featurer s rh r4 z>ServerWideOptions.get_upgrade_url_for_user..< s WWWgw )WWWrl c i | ]
}|j S rj r )r2 r r s rh r4 z>ServerWideOptions.get_upgrade_url_for_user..= s UUUWw (UUUrl Nr cloudlinux_advantage provisioning)r r server_ipmactionsuite)clwpos.feature_suitesr r primary_featuresr r r' r r r r r r r r )
rb r r r feature_to_suite
target_url url_partsqueryr r s
@@rh get_upgrade_url_for_userz*ServerWideOptions.get_upgrade_url_for_user0 sd DCCCCCCC
WWWW 9VWWW
UUUU 8TUUU
* * *4
l3 3 3 't )J k2 2 2#+t -J 4*--.. Yy|,,--
,Xv > > *__+()'2
!'' ! )$$$rl c t t t | j t | j j z S ru )r' r r r r s rh allowed_suites_listz%ServerWideOptions.allowed_suites_listb 6 CT 011D9K9Z4[4[[\\]]]rl c t t t | j t | j j z S ru )r' r r r r s rh visible_suites_listz%ServerWideOptions.visible_suites_listf r rl c ddl m} t } j D ].}| fd|| j D /|S )NrK
ALL_SUITESc & h | ]
}|j v |S rj r r2 r rb s rh z5ServerWideOptions.allowed_features..r ' lllWTXTkIkIkIkIkIkrl )feature_suitesr r r r feature_set)rb r _allowed_featuresr s ` rh allowed_featuresz"ServerWideOptions.allowed_featuresj sw /..... EE- E $ $llll
5(9(Elll
! rl c ddl m} t } j D ].}| fd|| j D /|S )NrK r c & h | ]
}|j v |S rj r r s rh r z5ServerWideOptions.visible_features..} r rl )r r r r r r )rb r _visible_featuresr s ` rh visible_featuresz"ServerWideOptions.visible_featuresv su ...... EE- E $ $llll
5(9(Elll
! rl )r )rY r r r r% r r' r r r r r r r r ra r r propertyr r r r rj rl rh r r s OOO ,1EBX,Y,Y,YM)YYY04 $+4446:&t :::9=)4$;===26"D4K666 "Kt""""&OS4Z&&&0% 0% 0% 0%d ^ ^ X^ ^ ^ X^ ! ! X ! ! ! X! ! !rl r c ddl m} t d| j i }|d |d }}n# t $ r d\ }}Y nw xY w||fS )Nr
WposDaemoncommandaccelerate_wp_premiumaccelerate_wp_cdnFF)
clwpos.daemonr r &DAEMON_GET_SUPPORTED_SUITES_BY_LICENSEr9 )r suites_statuses_by_licenseawp_premium_statusawp_cdn_statuss rh .get_suites_status_from_license_daemon_fallbackr s (((((( :%7:L
&
&
"
''> ? &': ; + : : :-9*NNN: ~ --s &/ A Ac ddl m}m}m} t j st
\ }}nt \ }}|j ||j ||j |i | d S )Nr )CDNSuiter r T)
r r r r r r get_suites_status_from_licenser r r )r r r r r r s rh is_feature_supported_by_licenser s IIIIIIIIII
:<< ^-K-M-M*NN-[-]-]*N-
~.
c% rl c ddl m} t }| D ]:\ }}|j D ]-}|j rt
| r| | .;|S )NrK r )r r r r? features IS_BILLABLEr add)r r
suite_name
suite_item
suite_features rh get_supported_featuresr" s ****** ","2"2"4"4 6 6
J ' 0 6 6M ,
60OPZ0[0[
6"&&}555 6 rl c
ddl m} m}m}m}m} t
dd }g }g }|j |j |j |j fD ]W}t j
t | s-|
| |
| Xt | ||t | t t! g S )zw
Return default content of /opt/clwpos/public_config.json.
This file is accessible by all users on server.
rK )SUPPORTED_SUITESAWPSuiter r r r r )r r r r r r )r r$ r% r r r r* r r r r r rC r@ r r' r" ) r$ r% r r r is_icon_hiddenr r r s rh get_default_server_wide_optionsr' s `_____________ ZZ))*? NNNNN
#X]HM;CST % %w~~nU 344 e$$$ e$$$$ $$%% .// 6 8 899
rl c ddl m} m}m}m} t \ }}t
j | |||gdd||g }d |D S )zY
Get list of supported suites taking
into account license and status on CLN.
rK )r% r r r Tc g | ] }|j
S rj r )r2 r s rh rL z(get_supported_suites.. s + + +5EJ + + +rl )r r% r r r r itertoolscompress)r% r r r _is_awp_premium_allowedis_awp_cdn_allowedsuitess rh get_supported_suitesr/ s|
NMMMMMMMMMMM2P2R2R/ /
<;7$FXZl9m F , +F + + ++rl c t d x} }t j t rM t }n# t $ r Y dS w xY w| d| } | d| }| |fS )NTr r is_awp_premium_allowedr- )r r r r r& _get_jwt_payloadr$ r )r1 r- jwts rh r r s 2Fd2S2S2SS / w~~()) O "$$CC& << "%)ACY!Z!Z WW%9;M N N !#5 55s A
AAc t t } t | d }n,# t $ r }t dt d| d}~ww xY w|S )z1
Read jwt, verify it and return payload.
T)
verify_expz)Unable to detect edition from jwt token: z-. Please, make sure it is not broken, error: N)r) r& r( r/ r$ )tokenr3 re s rh r2 r2 s
' ( (E
4000
%
>8J
>
>:;
>
>
Js (
AA Ac f t | j t r| j S t di | j S )Nrj )r^ r r )server_wide_optionss rh get_whcms_server_wide_optionsr9 s: %35KLL 1"00 ! F F$7$E F FFrl c H ddl m} t }t j t s|S dh t t d 5 }| } t j
| }dD ]}||vr| | }t || }t t |t t | t | z }t# ||| |j fd| D t+ | |_ t/ } |j dd D ] }
|
| vr|j |
!n# t4 $ r
d|_ Y nw xY w|cddd S # t j j $ r8} t; t= d t? | d t i
d} ~ ww xY w# 1 swxY w Y dS ) zL
Gets server wide options which apply
as defaults for all users
rK r r r)r r r c $ i | ] \ }}|v ||
S rj rj )r2 r: r; non_overridable_fieldss rh r4 z+get_server_wide_options..% s+ ,w,w,wdaWX`vWvWvQWvWvWvrl NzZFile is corrupted: Please, delete file %(config_file)s or fix the line provided in details config_filer ) r r r' r r r rB r~ r& r| loadsr getattrsortedr r' intersectionsetattr__dict__r r? r9 r r/ r removePermissionErrordecoderJSONDecodeErrorr9 rK ra )
r default_optionsfcontent
configurationoption_to_mergesuites_from_configsuites_from_defaults
merged_valuesserver_suites_allowedr errr= s
@rh r r s
+*****577O
7>>. ) ) 2 3
nc " " *a&&((' "&*W"5"5M $\
I
I"-77 %2%6%6%G%G"'.'P'P$ !',tC8J4K4K4X4XY\]gYhYh4i4i/j/jjkk! !
-HHHH
$ + +,w,w,w,wm>Q>Q>S>S,w,w,w x x x,I/,Z,ZO )
G(<(>(>% - =aaa @ G GE $999'8??FFFG #
8
8
8 48000
8 #I* * * * * * * *J |+ vwwC&7
K* * * * * * * * * *sU H*C9G$F#21G#F74G6F77GH 3HHHH Hc # K t j t st dt d t } | V t
t 5 t t d 5 }t j
t | | ddd n # 1 swxY w Y ddd dS # 1 swxY w Y dS )z1Set icon visibility in clwpos public options filez6Can't write public options as configuration directory z does not existwN) r r r r? r r r rB r~ r| dumpr )public_config_datarJ s rh write_public_optionsrW = sF 7>>. ) )
d^ d d d
122
n % % 1 1tNC'@'@ 1A &+,,a0001 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1s6 %C;#B* C*B. .C1B. 2CC Cc t j | ft j t j dddd|}ddd fd fdd |j fd
|j ffD }|D ]}| |d nt
j |z }d }|D ]U}|d n#t d
|t
j z
} | | |
rd}V| | d n=# t j
$ r+ | | Y nw xY w|j |j fD ]'}
|
# t $ r Y $w xY w|rt j
| | t j | |j d d
S )a
Run *command* like ``subprocess.run(capture_output=True)`` but read at most
*max_output_bytes* characters from each of stdout/stderr into this process'
memory, then terminate and reap the child.
A plain ``timeout`` bounds only a *silent* stall: a child that floods a huge
reply fast returns well under the timeout with the whole payload already
buffered into (our, possibly root) RSS. Capping the bytes we read closes
that memory-exhaustion vector for untrusted/tenant-controlled endpoints.
Returns a ``subprocess.CompletedProcess``; raises
``subprocess.TimeoutExpired`` when the child produced no bound within
*timeout* (the silent-stall case), matching ``subprocess.run(timeout=...)``.
Tutf-8replace)r r r encodingr] r# )r r c j | | < d S # t t f$ r Y d S w xY wru )r& r r )r streamcapturedmax_output_bytess rh _drainz#_run_bounded_output.._drainh sK
$[[)9 : :HTNNN$ DD s 22c H g | ] \ }}t j ||fd S )T)rm rc daemon) threadingThread)r2 r r] r` s rh rL z'_run_bounded_output..r sC D& dF^DIII rl r r NFg rK )r )r PopenPIPEr r startr monotonicmaxr is_alive terminatewaitTimeoutExpiredkillr r CompletedProcessr )
r
r_ r popen_kwargsr readersthreaddeadline timed_out remainingr] r` r^ s
` @@rh _run_bounded_outputrv N s@
D ++H & 4x6M N G ttDN,<,,
--unique_id=) is replaced with ; the flag name is kept so
logs stay useful. The command actually passed to exec is never modified.
Fz
T=z =)
r^ ra splitr' tupler@ _SECRET_ARG_FLAGSr r type)r
is_stringtokensredacted redact_nextr6 flags rh redact_command_secretsr s> 7C((I s## GdE] + + g HK OOL ) ) ) K eS ! ! )
D=="&KE##D3J// # 0 0 0EE "xx!!! 4== " ""rl c
d}t }d|v r
|r ||d d< t dt t | t | d | dd }t st t j
s|At | f||t t j t j d|S t! j | f|ddd d
t t j t j |d |S t j d k r-t% t' d
t | z t) | t rt* dz | z }n t* dg| z }|At |f||t t j t j d|S t! j |f|t t j t j ddd d
|d|S )aV
Wrapper for subprocess to enter cagefs
do not enter cagefs if:
- CloudLinux Solo
- if process already started as user in cagefs
:param timeout: optional subprocess timeout in seconds; None (default)
keeps the previous unbounded behaviour for existing callers. Pass a
bound when the command talks to an untrusted/tenant-controlled endpoint
so a non-responding child cannot block the caller indefinitely.
:param max_output_bytes: optional cap on how many characters are read from
the child's stdout/stderr into memory; None (default) keeps the previous
unbounded ``capture_output`` behaviour for existing callers. Pass a small
bound when the command talks to an untrusted/tenant-controlled endpoint
so a fast flood cannot exhaust memory even before the timeout fires.
TenvLANG*Executing command: %s with environment: %sr FN)r_ r
preexec_fnrY rZ )r r r r[ r] r r r zInternal error: command %s must not be run as root. Please contact support if you have questions: https://cloudlinux.zendesk.comr\ z --no-io-and-memory-limit --no-io-and-memory-limit)r r r r r[ r] r )r _module_logrc ra r r r r r" r CAGEFSrv r+ r r getegidr r r9 r r^ r= )r
r r_ rd __traceback_hide__localer with_cagefs_enters rh run_in_cagefs_if_neededr s *
#
%
%F 6 &u
f 4c:PQX:Y:Y6Z6Z\_`f`j`jkp`q`q\r\r
JJw & &E{{ 4
4W^DD 4
'&!1 !"*,,
==
~
bjllBJLL99
:<<1 5
)11 2
gs # # Z 14P PSZ Z !24N ORY Y '&!!1 !"*,,
==
~
bjllBJLL99
rl c r t | S # t j $ r Y dS w xY w)z
Returns uid for user
N)r get_uidNoSuchUserExceptionr s rh uid_by_namer sB wwt$$$ $ tts # 66c D t | S # t $ r Y d S w xY wru )r r` )uids rh name_by_uidr s7 "3''' tts
c | e Zd ZdZdZd dZd Zd Zdede e fd Z
d d
Z d d Z d d
Z
dedee fdZdedee fdZd Zdede e defdZed Zd!dZd Zdede e defdZdede e deee e f fdZdedee defd Zded ee defd Z dS )" PhpIniConfigz>
Helper class to update extensions in php .ini files.
z
etc/php.d.stdNc || _ t j d | _ t j d | _ t j d | _ |pt
j t | _ d| j j
d df| _ d S )Nz-^;\s*extension\s*=\s*(?P\w+)\.soz,^\s*extension\s*=\s*(?P\w+)\.soz1^\s*;?\s*extension\s*=\s*(?P\w+)\.soz /var/cagefs/*/*/etc/cl.php.d/c 8 | d d S )Nr r )rz )r s rh z'PhpIniConfig.__init__..< s TZZ__Q%7 rl )r user) r recompiledisabled_patternenabled_pattern extensionrP rQ rY rX r wildcard_ini_user_locations)rb r
custom_loggers rh rr zPhpIniConfig.__init__1 s & "
+[ \ \ !z*Y Z Z $XYY#Bw'8'B'B
V8H8SUU77
,
(((rl c | d d d d S # t $ r4}| j d|t | Y d}~dS d}~ww xY w)z-
Parse .so extensions safely
ry rK z.sor z4Cannot parse extension name from line: %s, error: %sN)rz r` rX rV ra )rb r re s rh _parse_extension_namez"PhpIniConfig._parse_extension_name@ s ::c??1%++E2215 5 K VX\^abc^d^d e e e44444 s 36
A4 )A//A4c z t j | j j | }t j | sg S t
| 5 }| }d d d n # 1 swxY w Y g }|D ]/}| | }|s| | 0|S ru )
r r r r dirr r~ readlinesr r@ )rb ini_path full_pathrJ ini_contentmodulesextraw_module_names rh get_ini_contentz PhpIniConfig.get_ini_contentJ s GLL!1!5x@@ w~~i(( I
)__ (++--K ( ( ( ( ( ( ( ( ( ( ( ( ( ( ( , ,C " 8 8 = =O"
NN? + + + +s A<<B B r r c t j | j j | }t j | s| ||d d S | || d S )NFr )r r r r r r _write_modulesenable_modules)rb r r r s rh create_custom_iniz PhpIniConfig.create_custom_ini[ st GLL!1!5t<< w~~i(( / 75 A A A A A
g . . . . .rl c . |rzt j | j j | }t j | r1| j d| t j | | dg d d S )NzCustom ini to be removed: zacceleratewp.iniT)rE )
r r r r r r rX rT rZ update_user_ini)rb r all_inir s rh remove_custom_iniz PhpIniConfig.remove_custom_inie s % T%5%94@@Iw~~i((
% !!"Jy"J"JKKK )$$$ /D AAAAArl Fc | j D ]`}t |d }|D ]F} | ||||| # t $ r | j d Y Cw xY wad S )Nr z&Error updating single acceleratewp.ini)r r _update_single_inir` rX r_ )rb ini_filenamer rE location cagefs_pathsdir_paths rh r z PhpIniConfig.update_user_inim s 8 H &!122L (
++Hh W]^^^^ K))*RSSS H
s >$A%$A%c |d | }t j || }t | 5 t 5 |rOt j | r/| j d| t j | n5| ||t j | d d d n # 1 swxY w Y d d d d S # 1 swxY w Y d S )Nr z#Custom user ini: %s will be removedr )
r r r r r2 r rX rT rZ r )rb r r r r rE r r s rh r z PhpIniConfig._update_single_iniw s #8F#H--w||Hl33
X
&
& P P
P P
P7>>$'' $K%%&KTRRRIdOOO##D'"'..:N:N#OOO
P P P P P P P P P P P P P P P P P P P P P P P P P P P P P P P P Ps7 C;BC# C;#C' 'C;*C' +C;;C?C?r c t t |d 5 } fd|D cddd S # 1 swxY w Y dS )zU
Return enabled modules.
:param path: full path to .ini file
r; c h | ]I}j | j | d JS N module_namer matchgroupr2 r rb s rh r z0PhpIniConfig._enabled_modules.. sY '--d33? $**40066}EE???rl Nr~ rb r rJ s ` rh _enabled_modulesz PhpIniConfig._enabled_modules s
$__ -11c t j | j j | }t j | st
S | | S )z
Return modules with an active ``extension=.so`` line in the .ini file.
:param path: path to .ini file related to php directory
)r r r r r r r r )rb r r s rh get_enabled_modulesz PhpIniConfig.get_enabled_modules sR
GLL!1!5t<< w~~i(( 55L$$Y///rl c t t |d 5 } fd|D cd d d S # 1 swxY w Y d S )Nr; c h | ]I}j | j | d JS r )r r r r s rh r z0PhpIniConfig._extensions_list.. sV DHQUQ_QeQefjQkQkQw$$T**00 ??QwQwQwrl r r s ` rh _extensions_listz PhpIniConfig._extensions_list s
$__ LM r c $ t j | j j | }t j | sdS | j d| t | }|r| || dS )z
Enable specified modules in .ini php file.
:param path: path to .ini file related to php directory
:param modules: list of modules that should be enabled
FzEnable such extensions: T)
r r r r r r rX rT r r )rb r r r modules_to_enables rh r zPhpIniConfig.enable_modules s GLL!1!5t<< w~~i(( 5 >W>>??? LL > +< = = =trl c d| dS )z-
redis -> extension=redis.so
z
extension=z.so
rj )r s rh _format_as_ini_extz PhpIniConfig._format_as_ini_ext s
*F))))rl Tc g } j d| |rt | }t | 5 }|D ]U t fd|D r" j d d| d @| V d d d n # 1 swxY w Y t
| }d|v r| d |D ]I} | } j d | | | J|rE j d
| t d
| |d d
d S d S )Nz,Such extensions are required to be enabled: c 3 F K | ]} | v V d S ru )r )r2 r r rb s rh r7 z.PhpIniConfig._write_modules.. s6 ]]C4223774?]]]]]]rl zSkip z, z will be added furtherredisc , | d S Nr )endswith)xs rh r z-PhpIniConfig._write_modules.. s ajj.A.A rl keyz Appending lines to be written: zPath to write: r# T
copy_owner) rX rT r r~ r> r@ rA sortr r3 r )
rb r r r
new_ini_linesrJ sorted_modulesr extension_liner s
` @rh r zPhpIniConfig._write_modules s
\IZ\\]]] / #$5 6 6 i
/A / /D]]]]]K\]]]]] ! ))*c$*c*c:K*c*c*cddd !((.... /
/
/
/
/
/
/
/
/
/
/
/
/
/
/
/ 122 n $ $ $A$A B B B$ 1 1F ! 4 4V < .ini file and loads all required extensions
zRequired extensions for z are: )
r r r r r r r' r rX rT )rb r r required_moduless rh get_required_modulesz!PhpIniConfig.get_required_modules s GLL!1!5t<< w~~i(( I 5 5i @ @AA STSSAQSSTTT rl c t j j j | }t j | sdS t
| | z r\t | 5 } fd|D }ddd n # 1 swxY w Y t d | |dd dS )z
Disable specified modules in .ini php file.
:param path: path to .ini file related to php directory
:param modules: list of modules that should be disabled
Fc < g | ]} | S rj )_disable_module)r2 r modules_to_disablerb s rh rL z0PhpIniConfig.disable_modules.. s+ ^ ^ ^TX!5!5d-.ini`` with an active ``extension=.so`` line,
and the interpreter scans that directory in standalone environments
(``/opt/alt/php-standalone`` marker) on top of ``php.ini``. Any module
AccelerateWP already loads from ``php.ini`` is therefore declared twice
and PHP prints ``Module "" is already loaded`` on every startup.
:param dir_path: path to the directory relative to php directory
:param modules: list of modules that should be disabled
:return: mapping ``{relative ini path: [disabled modules]}`` for files
that were actually changed (empty when nothing was changed)
z.inizUnable to disable %s in %sz(Disabled duplicate declarations %s in %s)r r r r r r r rA listdirr r r r r' r rX r_ rc )
rb r r
full_dir_pathr disabledini_name ini_rel_path
ini_full_path
found_moduless
rh disable_modules_in_dirz#PhpIniConfig.disable_modules_in_dir s T%5%98DD
w}}]++ I \\ rz- 8 899 ; ;H$$V,,
7<<(;;L GLL A AM7>>-00
2T5J5J=5Y5Y Y
$ $$\4
3F3FGGGG
%%&BFK]D^D^`mnnn
K GP]I^I^`m n n n%+M%:%:H\ " "s 8D7#D773E-,E-r r c | j | }|U| d }||v r<| | | d S |S )zV
Search for disabled module in line, uncomment line to enable module.
Nr ;)r r r rE r )rb r r r r s rh _enable_modulezPhpIniConfig._enable_module st %++D11 ++m44K ///!((555{{3''..000 rl r c z | j | }| | d }||v rd| S |S )zT
Search for enabled module in line, comment line to disable module.
Nr r r )rb r r r r s rh r z PhpIniConfig._disable_module# sN $**400 ++m44K 000!4zz! rl ru F)T) rY r r r STANDALONE_INI_DIRrr r r ra r' r r r r r r r r r% r staticmethodr r r r r r r r rj rl rh r r ' sS )
"/c /DI / / / /B B B B
P
P
P
P
S
SX
0 0C 0 0 0 0
3
c
t
* * \* _ _ _ _: C $s) "'s 'T#Y '4PSUYZ]U^P^K_ ' ' ' 'R
3
3s8
C SX # rl r c t t j sdS t sT| t t d t d| gt j dd z t j dd z }nCt s3t t rt dgt j z }ndS dt i}t d t! | t! | t# j |t j t j |
}| t j |j dS ) a%
All user-related actions must run inside of cagefs for security reasons.
If solo just return because cagefs is only for shared and shared pro
If root executed, we enter into user cagefs if user is pointed
If not in cagefs and cagefs is enabeled for user enter into cagefs
NzInternal Error: root enters into CageFS without specifying usernamePlease contact support if you have questions: https://cloudlinux.zendesk.comr r rK )r r r )r stdinr )r" r r r r9 r r< r argvr r r r= r r rc ra r re r r communicater r )r cmdr ps rh _run_clwpos_as_user_in_cagefsr / sF &gn 5 5 < 5
%&@$G#(SUTUSU,VY\YabcbdbdYee
[[ /Y[[ A A A "<=H )++
,CA3s88SQTXXVVVSZsycJJJAMMOOOHQ\rl c Z e Zd ZdZdeddfdZd
dZd
dZdefdZ e
de fd Z dS ) RedisConfigurePidFilezm
Helper class that provides methods to work with
pid files of php redis configuration processes.
php_prefixr Nc X | d| _ t t | j | _ d S )Nz-cloudlinux.pid)_pid_file_namer
r? r )rb r s rh rr z RedisConfigurePidFile.__init__U s+ !+ < < < )<== rl c | j d 5 }| t t j d d d d S # 1 swxY w Y d S )NrT )r r~ writera r getpidrb rJ s rh createz RedisConfigurePidFile.createY s
Y^^C
&A
GGC $$ % % % & & & & & & & & & & & & & & & & & &s 4A A #A c n | j r| j d S d S ru )r is_filerZ r s rh rE z RedisConfigurePidFile.remove] s< 9 I rl c 4 | j S ru )r r r s rh r z RedisConfigurePidFile.existsa s y """rl c 6 | sdS | j 5 } t | cd d d S # t $ r Y nw xY w d d d n # 1 swxY w Y dS )N)r r r~ intr& stripr r s rh pidzRedisConfigurePidFile.pidd s {{}} 2
Y^^
16688>>++,,
rs. B2A11
A>;B=A>>BBBr N)
rY r r r ra rr r rE r% r r r r rj rl rh r r O s
>3 >4 > > > >& & & & # # # # # S X rl r r c # K t | } | dV | dS # | w xY w)za
Context manager for creating pid file of current process.
Removes pid file on exit.
N)r r rE )r pid_files rh create_pid_filer p s_ %Z00H
s A Ac t | }t j dk r| S t j |j }d| v S # t t j f$ r Y dS w xY w)z
Find out if PHP redis configuration process is running.
Based on looking for presence of pid files.
For root also checks process existence.
r enable_redisF)
r r r r psutilProcessr r r
NoSuchProcess)r r processs rh "is_php_redis_configuration_runningr# ~ s %Z00H z||q . .. // , - uus .A+ +BBc * t t S )zE
Find out if alt-PHP redis configuration process is running.
)r# r; rj rl rh &is_alt_php_redis_configuration_runningr% s .n = ==rl c * t t S zD
Find out if ea-PHP redis configuration process is running.
)r# r@ rj rl rh %is_ea_php_redis_configuration_runningr( s .m < < ? ??rl c V t pt p
t S )za
Find out if redis configuration process
is running for any PHP (ea-php or alt-php).
)r% r( r* rj rl rh is_redis_configuration_runningr, s. /00 6 0 2 2 6 3 5 5rl new_userold_userc t j 5 }| }ddd n # 1 swxY w Y fd|D }t d | j d dS )z;
Replace user's wpos directory path in redis.conf.
Nc P g | ]"}| j j #S rj )rZ r r2 r r- r. s rh rL z%update_redis_conf.. s- eeeDT\\("3X5FGGeeerl r# r$ )r~ r r r3 r )r- r. rJ redis_conf_lines
updated_liness `` rh update_redis_confr4 s
h! " " )a ;;==) ) ) ) ) ) ) ) ) ) ) ) ) ) ) feeeeTdeeeMBGGM 2 2H4GOOOOOs 8<<c 2 t j | }n9# t $ r,}t d| d| t j Y d}~dS d}~ww xY wfd|D }t
d | t j | d dS )z<
Replace user's redis socket path in wp-config.php.
z=Error occurred during opening wp-config.php located in path "z": )r Nc f g | ]-}j |v r | j j n|.S rj )r rZ r1 s rh rL z$update_wp_config.. sS GOF[_cFcFc X*H,ABBBim rl r# r$ ) r4 r& r r r r r3 r r )r r- r. r) re r3 s `` rh update_wp_configr7 s #.55
akaa^_aahkhrssss # M BGGM 2 2IN;4O4OQVWWWWWs
A!A
Ac t t j t j } | S )z!
Get parent process PID.
)r r r r ppid)r s rh get_parent_pidr: s' >")++ & &D 99;;rl c < t g dd \ } }}| dk S )z`
Detect CL WPOS daemon presence in system
:return: True - daemon works / False - No
)
/sbin/serviceclwpos_monitoringstatusTreturn_full_outputr r- )r rK s rh _is_monitoring_daemon_existsrB s/ ##S#S#ShlmmmJ1 ?rl c t j d| t g dd \ }}}|st ddgd \ }}}|||fS )z5
Update systemd unit file and reload systemd
//usr/share/cloudlinux/clwpos_monitoring.service)/usr/bin/systemctlenable --no-reloadclwpos_monitoring.serviceTr? rE
daemon-reload)r_ copyr- )systemd_unit_fileretcoder r s rh $_update_clwpos_daemon_config_systemdrM sw KACTUUU )TTTim GVV p"-/C_.Ujn"o"o"o FF ""rl c t j }t | d 5 t fdd D ]}| | d d d n # 1 swxY w Y | S )Nrbc . d S )Ni )r& )rJ s rh r z _sha256_file.. s !&&"5"5 rl rl )hashlibsha256r~ iterr hexdigest)r hchunkrJ s @rh _sha256_filerW s A
dD Q5555s;; E
HHUOOOO
;;==s ,A A"%A"path_apath_bc t j | }t j | }|j |j k rdS t | t | k S # t $ r Y dS w xY w)z
Best-effort content comparison. We use it to decide whether shipped systemd unit
needs to be copied into /etc (and thus requires daemon-reload).
F)r r\ st_sizerW r )rX rY st_ast_bs rh _files_identicalr^ sr
wvwv <4< ' '5F##|F';';;; uus 8A A
A*)A* service_namec > t dd| gd \ }}}|dk S )NrE z
is-enabledTr? r rA )r_ rL rK s rh _systemd_service_is_enabledra s- !5|\ RgklllMGQ a<rl unit_namec $ t dddd| gd \ }}}|dk rdS | }|d k rdS d
|v r-| d
d \ }}| }| }|d k rdS |d k S )
z
Returns:
- True/False if systemd reports it explicitly
- None if the property is unsupported/unknown (depends on systemd version)
rE showz-pNeedDaemonReloadTr? r Nr# ry rK yes)r- r rz lower)rb rL r rK rv rhss rh !_systemd_unit_needs_daemon_reloadri s % vt-?K GVQ !||t
LLNNE {{t
e||S!$$3 KKMME {{t E>rl rK is_module_allowed_on_serverc d\ }}}dt j v rt g dd \ }}}n|rt | \ }}}|st g dd \ }}}|||fS )z4
Install WPOS daemon to system and start it
)r NNel6)z/sbin/chkconfigz--addr= Tr? )r< r= rg )platformreleaser- rM )rK rj rL r r s rh _install_daemon_internalro $ s ,GVV """""- = = =RV#
#
#
' ^ 'KK\&]&] #GVV x"-.].].]rv"w"w"w FF ""rl c t pt j t }d}d}t j | rd}t || }t | }t | }|p|du }|du o| } t }
| d|
|||| d\ } } }
|r)| d t | \ } } }
ny|r/| d | t d
d d |gd
\ } } }
| s/|r-| d t d
dgd
\ } } }
n| r| d | r| | |
fS t rdS t || S )a
Install WPOS daemon to server if need:
- if daemon already present - do nothing;
- on CL Shared Pro install daemon if module allowed
On solo and if /etc/systemd/system/clwpos_monitoring.service present it will be updated always
We do not need restart installed daemon here, it's done in rpm_posttrans.sh
:param is_module_allowed_on_server: True/False
z-/etc/systemd/system/clwpos_monitoring.servicerD rH TNzinstall_monitoring_daemon: unit_exists=1 daemon_exists=%s needs_unit_update=%s needs_enable=%s need_daemon_reload=%s need_daemon_reload_unknown=%s)r r# r# zPinstall_monitoring_daemon: updating unit file from shipped and reloading systemdz2install_monitoring_daemon: enabling %s (no-reload)rE rF rG r? zQinstall_monitoring_daemon: running systemctl daemon-reload (NeedDaemonReload=yes)rI zXinstall_monitoring_daemon: skipping daemon-reload (NeedDaemonReload unsupported/unknown))rX rP rQ rY r r r r^ ra ri rB rc rM r- ro )rj rd rK shipped_unit_filerb needs_unit_update needs_enableneed_reload_flagneeds_daemon_reloadneeds_daemon_reload_unknown
daemon_existsrL r r s rh install_monitoring_daemonrx 7 s 0W&x00DGI
w~~'(( )+/ 01BDU V V V6yAAA &XGXCX#466
R '
#, v IIh i i i&JK\&]&] #GVVV
NPYZZZ*5)8]IN'++ + +'
v 2
v mnnn*5)?;'++ + +' -
v tuuu +FF* *#%% y #$57R S SSrl c dd| di} t | }n # t $ r Y dS t $ r Y dS w xY w| d S )a\
Ask the AccelerateWP daemon whether the given service is running.
Returns None when the daemon itself is unreachable, so that callers
can distinguish "service is down" from "daemon is down" (CLPRO-3351).
An application-level error from an alive daemon (e.g. "user has no
redis yet") still means the service is not running.
r
zget-z-statusNFr> )r r8 r9 r )service command_get_service_status_dict
daemon_results rh get_status_from_daemonr} u s (12I2I2I2I&J#*+JKK
% tt uu X & &&s
4 44c t d S r r} rj rl rh redis_is_runningr !' * **rl c t d S )N litespeedr rj rl rh litespeed_is_runningr s !+ . ..rl c t d S )Nnginxr rj rl rh nginx_is_runningr r rl c t d S )N apache2nginxr rj rl rh apache2nginx_is_runningr s !. 1 11rl attributec ddl m} |t }t j |d } t
| 5 }t j | | cddd S # 1 swxY w Y dS # t t j
f$ r7 t d t t d t $ r t t d w xY w)z7
Return attribute's value from info.json file.
r )get_admin_config_directoryz info.jsonNz(Error during reading of "info.json" filezFailed to retrieve data about php version which is currently used. Daemon is not available and cache data is malformed, please try again and contact your administrator if the issue persists.zFailed to retrieve data about php version which is currently used. Daemon is not available and cache data is not available. Contact your administrator if the issue persists.)r r r r r r r~ r| loadr rH r r_ r9 rK r )r r admin_config_dir info_jsonrJ s rh _get_data_from_info_jsonr sZ A@@@@@11(**== -{;;I
)__ +9Q<< * + + + + + + + + + + + + + + + + + + d* +
JKKK
E
D
s0 B A5( B 5A99B <A9=B A2C4c d t }t j r t j } || S ru )r r r r- r. )r rS s rh drop_permissions_if_neededr s/ G z|| ) ( 78 rl r r r c ddl m} || | v rdnd} t |j |d d }n# t
$ r d}Y nw xY w|rd}|S )Nr r activeno)r
r pendingF)r r r r !DAEMON_GET_UPGRADE_ATTEMPT_STATUSr9 )r r r r subscription_status
is_pendings rh get_subscription_statusr s ((((((&-1A1E1Ee1L1L&L&L((RV 'J4`mt(u(uvv
( ' s A AAc 0 d\ } }} t t }n # t $ r ddt ddfcY S w xY w t | nG# t j $ r d\ } }}Y n0t j $ r d\ } }}Y nt j $ r d\ } }}Y nw xY w| ||fS ) z
JWT token check. Mostly copied from cllib, but with some accelerate-wp tunes, including:
- clsolo, cladmin tokens are now valid
- no need to check for shared, because our tools just don't work on shared
)TOKNFz JWT file z read errorN)FzJWT token issuer is invalidN)FzJWT token expiredN)FzJWT token format errorN)r) r' r r( r0 InvalidIssuerErrorExpiredSignatureErrorr/ ) success_flag
error_message token_strings rh jwt_token_checkr s 1A-L- O 9:: O O OH";HHH$NNNNOZ< ( _ _ _4^1 m\\\ + U U U4T1 m\\\ Z Z Z4Y1 m\\\Z 44s) 88A B#B9BBc d} t j | sd S t | 5 }| cd d d S # 1 swxY w Y d S )Nz+/usr/share/cloudlinux/accelerate-wp.version)r r r r~ r& r ) version_filerJ s rh get_accelerate_wp_versionr s @L
7>>, ' ' t
l qvvxx~~ s &A&&A*-A*c |st j dk r-t | d d d }t | S t | S )zE
Returns True/False whether target user is owned by reseller
r )reseller)cpuserkeyls)r r r r! )is_user_owned_by_reseller_daemon_fallback)r
force_as_root
user_owners rh is_user_owned_by_resellerr sX
C
))8=AAA!DQG
J''''8BBBrl c @ ddl m} | ft j } t j | j }n# t $ r d }Y nw xY w||k r t t d d| i t d|j i d }n# t $ r Y dS w xY w|S ) Nr r zpRefusing to resolve reseller ownership for user %(username)s: a non-root caller may only query its own identity.r r r
is_owned_by_resellerT) r r r r r r r r r9 r r DAEMON_IS_USER_OWNED_BY_RESELLER)r r
caller_uid
requested_uidr s rh r r s (((((( Z\\
! L 2 2 9MM ! ! ! MMM ! J & & W $X.
19j>i2j k k "
tt s! 7 AA0 B
BBc t j dk rt | S t | }i }|D ]}|j ||j < t | d }|D ]'t fd|D r
| c S (t j | j S )Nr c , | d S )Nr )count)ds rh r z%get_username_by_uid../ s QWWS\\ rl r c 3 T K | ]"}|k | d z V #dS )r N)r )r2 rl main_homes rh r7 z&get_username_by_uid..2 s> aatW`O`O`4??9s?33O`O`O`O`aarl ) r r r r
get_pw_by_uidr r rA keysr> r getpwuid)r pwd_list home_dirsuser_pwd sorted_dirsr s @rh r r & s z||q',,,77((-- : :H)1)9Iho & & Y^^ - -3I3IJJJ $ , ,Iaaaa aaaaa
, ++++
,|C ((rl c ddl m} t j dk r
| S ddlm} t
d|j i d S # t $ r Y dS w xY w)Nr )is_wp2_environmentr r
is_wp2F) rS r r r r r r DAEMON_IS_WP2_ENVIRONMENTr9 )r r s rh is_wp2_environment_safer 7 s 111111 z||q!!###,,,,,, %y*2V&WXXYab b 55 s A
AAr )rK )r ru r )r )r rP )r )NNr )r- rz rw ra r{ rQ r* r| rP r rm r r r_ r\ r r r rc r typingr r r r r r enumr functoolsr r
r rK globr pathlibr
r r r urllib.parser r r r r clcommon.clcagefsr r clcommon.clcaptainr clcommon.clpwdr r rR r clcommon.constr rS r r r r r r! r" clcommon.cpapi.cpapiexceptionsr# clcommon.lib.cleditionr$ r% clcommon.lib.constsr& r' clcommon.lib.jwt_tokenr( r) clcommon.ui_configr* clcommon.utilsr+ r, r- cllicenselibr. r3 r/ r0 packaging.versionr1 secureior2 r3 clwposr4 clwpos.cl_wpos_exceptionsr5 r6 r7 r8 r9 r: clwpos.constantsr; r< r= r> r? r@ rA rB rC rD rE rF rG rH rI clwpos.scoped_cacherJ logsetuprL socket_utilsrM rN user.website_check.errorsrO
TYPE_CHECKINGclwpos.php.baserP rX rQ rY r rk r} rn r% r r r rZ r r r r
struct_passwdr r ra r r r r r r r' r r r+ r/ rE ro rs r{ rw r r r` r r r r r r r r r r r r r" r' r/ r r2 r9 r rW rv r| r r r r r r r r r# r% r( r* r, r4 r7 r: rB rM rW r^ ra ri ro rx r} r r r r r r r r r r r r r rj rl rh r s
= = = = = = = = 0 0 0 0 0 0 0 0 0 0 " " " " " " " " / / / / / / / / / / C C C C C C C C C C C C
; ; ; ; ; ; ; ; $ $ $ $ $ $ 1 1 1 1 1 1 1 1 6 6 6 6 6 6 " " " " " " 4 3 3 3 3 3 T T T T T T T T M M M M M M M M 7 7 7 7 7 7 7 7 ' ' ' ' ' ' < < < < < < < < < < & & & & & & & & & & & & & & % % % % % % ; ; ; ; ; ; ; ; % % % % % % % % " 0 / / / / / # # # # # # W W W W W W W W 8 8 8 8 8 8 $######
g )) :3 3 3 3 3$* 3 3 3, $ 4 & D 4 S * 5 5 5D 5 5 5 5 4 44 4 4 4 4&S-> & & & &* * *& sTz S
3 (, , , ,#* , , , , , &* & & &d
& & & & *'_ '_$+ '_ '_ '_ '_T DI F xc xd x x x x 5# 5$ 5 5 5 50^C ^ ^ ^ ^#53 #54 #5 #5 #5 #5L\_ \_ \_ \_~
d dsCx d d d d /C /3: / / / /d&
t &
&
&
&
R ) sTz
" 4 E#s(O 9 9$ 9 9 9 9H H H > > > > > > > >
g! g! g! g! g! g! g! g!T . . .& ): @ , , , 6 6 6 "G:P G G G G 7!2 7 7 7 7t
1 45F G
1
1
1
1 @i @i @i @iJ U %# %# %#PU
U
U
U
p E E E E E E E EP @ B
3
4
> > > > >=t = = = =@$ @ @ @ @ P PH P P P P PX# X XX XRV X X X X" d #uS#s]?S # # # # s s S # $ c d
6# #RV #[`adfiknan[o # # # #&;T4 ;TE#sTW-DX ;T ;T ;T ;T|'td{ ' ' ' '$ +$+ + + + + /dTk / / / / +$+ + + + + 2 2 2 2 2
> d 3 *5 5 5. C C C C C C >) ) )" rl