# Copyright (c) 2005-2014 Red Hat, Inc. # # Koji is free software; you can redistribute it and/or # modify it under the terms of the GNU Lesser General Public # License as published by the Free Software Foundation; # version 2.1 of the License. # # This software is distributed in the hope that it will be useful, # but WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU # Lesser General Public License for more details. # # You should have received a copy of the GNU Lesser General Public # License along with this software; if not, write to the Free Software # Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA # # Authors: # Mike McLean # Mike Bonnet from __future__ import absolute_import, division import base64 import calendar import datetime import errno import hashlib import json import logging import os import os.path import re import resource import shutil import stat import struct import sys import tempfile import time import warnings from fnmatch import fnmatch from zlib import adler32 import six from six.moves import range, zip import koji from koji.xmlrpcplus import DateTime # BEGIN kojikamid dup # def md5_constructor(*args, **kwargs): if hasattr(hashlib._hashlib, 'get_fips_mode') and hashlib._hashlib.get_fips_mode(): # do not care about FIPS we need md5 for signatures and older hashes # It is still used for *some* security kwargs['usedforsecurity'] = False return hashlib.md5(*args, **kwargs) # nosec # END kojikamid dup # # imported from kojiweb and kojihub def deprecated(message): """Print deprecation warning""" with warnings.catch_warnings(): warnings.simplefilter('always', DeprecationWarning) warnings.warn(message, DeprecationWarning) def _changelogDate(cldate): return time.strftime('%a %b %d %Y', time.strptime(koji.formatTime(cldate), '%Y-%m-%d %H:%M:%S')) def formatChangelog(entries): """Format a list of changelog entries (dicts) into a string representation.""" result = '' for entry in entries: result += """* %s %s %s """ % (_changelogDate(entry['date']), koji._fix_print(entry['author']), koji._fix_print(entry['text'])) return result DATE_RE = re.compile(r'(\d+)-(\d+)-(\d+)') TIME_RE = re.compile(r'(\d+):(\d+):(\d+)') def parseTime(val): """ Parse a string time in either "YYYY-MM-DD HH24:MI:SS" or "YYYY-MM-DD" format into floating-point seconds since the epoch. If the time portion is not specified, it will be padded with zeros. The string time is treated as UTC. If the time string cannot be parsed into a valid date, None will be returned. """ result = DATE_RE.search(val) if not result: return None else: date = [int(r) for r in result.groups()] time = [0, 0, 0] rest = val[result.end():].strip() result = TIME_RE.search(rest) if result: time = [int(r) for r in result.groups()] return calendar.timegm( datetime.datetime(*(date + time)).timetuple()) def checkForBuilds(session, tag, builds, event, latest=False): """Check that the builds existed in tag at the time of the event. If latest=True, check that the builds are the latest in tag.""" for build in builds: if latest: tagged_list = session.getLatestBuilds(tag, event=event, package=build['name']) else: tagged_list = session.listTagged(tag, event=event, package=build['name'], inherit=True) for tagged in tagged_list: if tagged['version'] == build['version'] and tagged['release'] == build['release']: break else: return False return True class RepoWatcher(object): # timing defaults PAUSE = 6 TIMEOUT = 120 def __init__(self, session, tag, nvrs=None, min_event=None, at_event=None, opts=None, logger=None): self.session = session self.taginfo = session.getTag(tag, strict=True) self.start = None if nvrs is None: nvrs = [] self.nvrs = nvrs self.builds = [koji.parse_NVR(nvr) for nvr in nvrs] # note that we don't assume the nvrs exist yet self.at_event = at_event if min_event is None: self.min_event = None elif at_event is not None: raise koji.ParameterError('Cannot specify both min_event and at_event') elif min_event == "last": # TODO pass through? self.min_event = session.tagLastChangeEvent(self.taginfo['id']) else: self.min_event = int(min_event) # if opts is None we'll get the default opts self.opts = opts self.logger = logger or logging.getLogger('koji') def get_start(self): # we don't want necessarily want to start the clock in init if not self.start: self.start = time.time() return self.start def getRepo(self): """Return repo if available now, without waiting Returns repoinfo or None """ self.logger.info('Need a repo for %s', self.taginfo['name']) # check builds first if self.builds: # there is no point in requesting a repo if the builds aren't even tagged if not koji.util.checkForBuilds(self.session, self.taginfo['id'], self.builds, event=None): self.logger.debug('Builds %s not present in tag %s', self.nvrs, self.taginfo['name']) return None check = self.request() repoinfo = check.get('repo') if repoinfo: # "he says they've already got one" self.logger.info('Request yielded repo: %r', check) if self.check_repo(repoinfo): return repoinfo # TODO save our request to avoid duplication later # otherwise return None def task_args(self): """Return args for a waitrepo task matching our data""" tag = self.taginfo['name'] newer_than = None # this legacy arg doesn't make sense for us if self.at_event: raise koji.GenericError('at_event not supported by waitrepo task') if self.opts: # TODO? raise koji.GenericError('opts not supported by waitrepo task') return [tag, newer_than, self.nvrs, self.min_event] def waitrepo(self, anon=False): self.logger.info('Waiting on repo for %s', self.taginfo['name']) self.get_start() min_event = self.min_event self.logger.debug('min_event = %r, nvrs = %r', min_event, self.nvrs) repoinfo = None req = None while True: # wait on existing request if we have one if req: repoinfo = self.wait_request(req) if self.check_repo(repoinfo): break elif self.at_event is not None: # shouldn't happen raise koji.GenericError('Failed at_event request') else: min_event = self.session.tagLastChangeEvent(self.taginfo['id']) # we should have waited for builds before creating the request # this could indicate further tagging/untagging, or a bug self.logger.error('Repo request did not satisfy conditions') else: # check for repo directly # either first pass or anon mode repoinfo = self.session.repo.get(self.taginfo['id'], min_event=min_event, at_event=self.at_event, opts=self.opts) if repoinfo and self.check_repo(repoinfo): break # Otherwise, we'll need a new request if self.builds: # No point in requesting a repo if the builds aren't tagged yet self.wait_builds(self.builds) min_event = self.session.tagLastChangeEvent(self.taginfo['id']) self.logger.debug('Updated min_event to last change: %s', min_event) if not anon: # Request a repo check = self.request(min_event) repoinfo = check.get('repo') if repoinfo: self.logger.debug('Request yielded repo: %r', check) if self.check_repo(repoinfo): break # otherwise we'll loop and try again else: req = check['request'] self.logger.info('Got request: %(id)s', req) self.logger.debug('Request data: %s', req) if min_event in ('last', None): min_event = req['min_event'] self.logger.info('Updated min_event from hub: %s', min_event) self.pause() self.logger.debug('Got repo: %r', repoinfo) return repoinfo def request(self, min_event=None): if min_event is None: min_event = self.min_event self.logger.info('Requesting a repo') self.logger.debug('self.session.repo.request(%s, min_event=%s, at_event=%s, opts=%r)', self.taginfo['id'], min_event, self.at_event, self.opts) check = self.session.repo.request(self.taginfo['id'], min_event=min_event, at_event=self.at_event, opts=self.opts) return check def wait_request(self, req): watch_fields = ('task_id', 'task_state', 'repo_id', 'active', 'tries') self.get_start() watch_data = dict([(f, req.get(f)) for f in watch_fields]) while True: check = self.session.repo.checkRequest(req['id']) self.logger.debug('Request check: %r', check) repo = check.get('repo') if repo: return repo for f in watch_fields: val1 = watch_data[f] val2 = check['request'][f] if val1 != val2: watch_data[f] = val2 if f == 'task_state': # convert if we can val1 = koji.TASK_STATES[val1] if val1 is not None else val1 val2 = koji.TASK_STATES[val2] if val2 is not None else val2 self.logger.info('Request updated: %s: %s -> %s', f, val1, val2) if self.check_timeout(): raise koji.GenericError("Unsuccessfully waited %s for a new %s repo" % (koji.util.duration(self.start), self.taginfo['name'])) if not check['request']['active']: raise koji.GenericError("Repo request no longer active") self.pause() def wait_builds(self, builds): self.get_start() self.logger.info('Waiting for nvrs %s in tag %s', self.nvrs, self.taginfo['name']) while True: if koji.util.checkForBuilds(self.session, self.taginfo['id'], builds, event=None): self.logger.debug('Successfully waited for nvrs %s in tag %s', self.nvrs, self.taginfo['name']) return if self.check_timeout(): raise koji.GenericError("Unsuccessfully waited %s for %s to appear in the %s repo" % (koji.util.duration(self.start), koji.util.printList(self.nvrs), self.taginfo['name'])) self.logger.debug('Waiting for nvrs %s in tag %s', self.nvrs, self.taginfo['name']) self.pause() def check_repo(self, repoinfo): """See if the repo satifies our conditions""" # Correct tag? if repoinfo['tag_id'] != self.taginfo['id']: # should not happen self.logger.error('Got repo for wrong tag, expected %s, got %s', self.taginfo['id'], repoinfo['tag_id']) return False # Matching event? if self.at_event is not None: if repoinfo['create_event'] != self.at_event: self.logger.info('Got repo with wrong event. %s != %s', repoinfo['create_event'], self.at_event) return False elif self.min_event is not None: if repoinfo['create_event'] < self.min_event: self.logger.info('Got repo before min event. %s < %s', repoinfo['create_event'], self.min_event) return False # Matching opts if self.opts is not None: if repoinfo['opts'] != self.opts: self.logger.info('Got repo with wrong opts. %s != %s', repoinfo['opts'], self.opts) return False # Needed builds? if self.builds: if not koji.util.checkForBuilds(self.session, self.taginfo['id'], self.builds, event=repoinfo['create_event']): self.logger.info('Got repo without needed builds') return False self.logger.debug('Repo satisfies our conditions') return True def pause(self): self.logger.debug('Pausing') time.sleep(self.PAUSE) def check_timeout(self): if (time.time() - self.start) > (self.TIMEOUT * 60.0): return True # else return False def duration(start): """Return the duration between start and now in MM:SS format""" elapsed = time.time() - start mins = int(elapsed // 60) secs = int(elapsed % 60) return '%s:%02i' % (mins, secs) def printList(lst): """Print the contents of the list comma-separated""" if len(lst) == 0: return '' elif len(lst) == 1: return lst[0] elif len(lst) == 2: return ' and '.join(lst) else: ret = ', '.join(lst[:-1]) ret += ', and ' ret += lst[-1] return ret def base64encode(s, as_bytes=False): """Helper function to encode string or bytes as base64 This function returns a string unless as_bytes is True """ if six.PY2: return base64.b64encode(s) if isinstance(s, str): s = s.encode('utf8') data = base64.b64encode(s) if as_bytes: return data else: # ascii is always good enough for base64 encoded data return data.decode('ascii') # We don't need a decode wrapper, but we define this for naming consistency base64decode = base64.b64decode def decode_bytes(data, fallback='iso8859-15'): """Decode a bytes-like object that is expected to be a valid string First utf8 is tried, then the fallback (defaults to iso8859-15). The fallback behavior can be disabled by setting the option to None. """ try: return data.decode('utf8') except UnicodeDecodeError: if fallback: return data.decode(fallback) raise def multi_fnmatch(s, patterns): """Returns true if s matches any pattern in the list If patterns is a string, it will be split() first """ if isinstance(patterns, six.string_types): patterns = patterns.split() for pat in patterns: if fnmatch(s, pat): return True return False def dslice(dict_, keys, strict=True): """Returns a new dictionary containing only the specified keys""" ret = {} for key in keys: if strict or key in dict_: # for strict we skip the has_key check and let the dict generate the KeyError ret[key] = dict_[key] return ret def dslice_ex(dict_, keys, strict=True): """Returns a new dictionary with only the specified keys removed""" ret = dict_.copy() for key in keys: if strict or key in ret: del ret[key] return ret class DataWalker(object): def __init__(self, data, callback, kwargs=None): self.data = data self.callback = callback if kwargs is None: kwargs = {} self.kwargs = kwargs def walk(self): return self._walk(self.data) def _walk(self, value): # recurse if needed if isinstance(value, tuple): value = tuple([self._walk(x) for x in value]) elif isinstance(value, list): value = [self._walk(x) for x in value] elif isinstance(value, dict): ret = {} for k in value: k = self._walk(k) v = self._walk(value[k]) ret[k] = v value = ret # finally, let callback filter the value return self.callback(value, **self.kwargs) def encode_datetime(value): """Convert datetime objects to strings""" if isinstance(value, datetime.datetime): return value.isoformat(' ') elif isinstance(value, DateTime): return datetime.datetime(*value.timetuple()[:6]).isoformat(' ') else: return value def encode_datetime_recurse(value): walker = DataWalker(value, encode_datetime) return walker.walk() def call_with_argcheck(func, args, kwargs=None): """Call function, raising ParameterError if args do not match""" if kwargs is None: kwargs = {} try: return func(*args, **kwargs) except TypeError as e: if sys.exc_info()[2].tb_next is None: # The stack is only one high, so the error occurred in this function. # Therefore, we assume the TypeError is due to a parameter mismatch # in the above function call. raise koji.ParameterError(str(e)) raise def apply_argspec(argspec, args, kwargs=None): """Apply an argspec to the given args and return a dictionary""" if kwargs is None: kwargs = {} f_args, f_varargs, f_varkw, f_defaults = argspec data = dict(zip(f_args, args)) if len(args) > len(f_args): if not f_varargs: raise koji.ParameterError('too many args') data[f_varargs] = tuple(args[len(f_args):]) elif f_varargs: data[f_varargs] = () if f_varkw: data[f_varkw] = {} for arg in kwargs: if arg in data: raise koji.ParameterError('duplicate keyword argument %r' % arg) if arg in f_args: data[arg] = kwargs[arg] elif not f_varkw: raise koji.ParameterError("unexpected keyword argument %r" % arg) else: data[f_varkw][arg] = kwargs[arg] if f_defaults: for arg, val in zip(f_args[-len(f_defaults):], f_defaults): data.setdefault(arg, val) for n, arg in enumerate(f_args): if arg not in data: raise koji.ParameterError('missing required argument %r (#%i)' % (arg, n)) return data class HiddenValue(object): """A wrapper that prevents a value being accidentally printed""" def __init__(self, value): if isinstance(value, HiddenValue): self.value = value.value else: self.value = value def __str__(self): return "[value hidden]" def __repr__(self): return "HiddenValue()" class LazyValue(object): """Used to represent a value that is generated by a function call at access time """ def __init__(self, func, args, kwargs=None, cache=False): if kwargs is None: kwargs = {} self.func = func self.args = args self.kwargs = kwargs self.cache = cache def get(self): if hasattr(self, '_value'): return self._value value = self.func(*self.args, **self.kwargs) if self.cache: self._value = value return value class LazyString(LazyValue): """Lazy values that should be expanded when printed""" def __str__(self): return str(self.get()) def lazy_eval(value): if isinstance(value, LazyValue): return value.get() return value class LazyDict(dict): """A container for lazy data fields can refer to function calls, which can optionally be cached """ def __getitem__(self, key): return lazy_eval(super(LazyDict, self).__getitem__(key)) def lazyset(self, key, func, args, kwargs=None, cache=False): self[key] = LazyValue(func, args, kwargs=kwargs, cache=cache) def get(self, *args, **kwargs): return lazy_eval(super(LazyDict, self).get(*args, **kwargs)) def copy(self): return LazyDict(self) def values(self): return [lazy_eval(val) for val in super(LazyDict, self).values()] def items(self): return [(key, lazy_eval(val)) for key, val in super(LazyDict, self).items()] def itervalues(self): for val in six.itervalues(super(LazyDict, self)): yield lazy_eval(val) def iteritems(self): for key, val in six.iteritems(super(LazyDict, self)): yield key, lazy_eval(val) def pop(self, key, *args, **kwargs): return lazy_eval(super(LazyDict, self).pop(key, *args, **kwargs)) def popitem(self): key, val = super(LazyDict, self).popitem() return key, lazy_eval(val) class LazyRecord(object): """A object whose attributes can reference lazy data Use lazysetattr to set lazy attributes, or just set them to a LazyValue object directly""" def __init__(self, base=None): if base is not None: self.__dict__.update(base.__dict__) self._base_record = base def __getattribute__(self, name): try: val = object.__getattribute__(self, name) except AttributeError: base = object.__getattribute__(self, '_base_record') val = getattr(base, name) return lazy_eval(val) def lazysetattr(object, name, func, args, kwargs=None, cache=False): if not isinstance(object, LazyRecord): raise TypeError('object does not support lazy attributes') value = LazyValue(func, args, kwargs=kwargs, cache=cache) setattr(object, name, value) class _RetryRmtree(Exception): """This exception is used internally by rmtree""" # We raise this exception only when it makes sense for rmtree to retry from the top def rmtree(path, logger=None, background=False): """Delete a directory tree without crossing fs boundaries :param str path: the directory to remove :param Logger logger: Logger object :param bool background: if True, runs in the background returning a cleanup function :return: None or [pid, check_function] In the background case, caller is responsible for waiting on pid and should call the returned check function once it finishes. """ # we use the fake logger to avoid issues with logging locks while forking fd, logfile = tempfile.mkstemp(suffix='.jsonl') os.close(fd) pid = os.fork() if not pid: # child process try: status = 1 with SimpleProxyLogger(logfile) as mylogger: try: _rmtree_nofork(path, logger=mylogger) except Exception as e: mylogger.error('rmtree failed: %s' % e) raise status = 0 finally: # diediedie os._exit(status) # not reached # parent process logger = logger or logging.getLogger('koji') def _rmtree_check(): if not background: # caller will wait in background case _pid, status = os.waitpid(pid, 0) try: SimpleProxyLogger.send(logfile, logger) except Exception as err: logger.error("Failed to get rmtree logs -- %s" % err) try: os.unlink(logfile) except Exception: pass if not background: # caller should check status in background case if not isSuccess(status): raise koji.GenericError(parseStatus(status, "rmtree process")) if os.path.exists(path): raise koji.GenericError("Failed to remove directory: %s" % path) if background: return pid, _rmtree_check else: return _rmtree_check() class SimpleProxyLogger(object): """Save log messages to a file and log them later""" DEBUG = logging.DEBUG INFO = logging.INFO WARNING = logging.WARNING ERROR = logging.ERROR def __init__(self, filename): self.outfile = koji._open_text_file(filename, mode='wt') # so we can use as a context manager def __enter__(self): return self def __exit__(self, _type, value, traceback): self.outfile.close() # don't eat exceptions return False def log(self, level, msg, *args, **kwargs): # jsonl output data = [level, msg, args, kwargs] try: line = json.dumps(data, indent=None) except Exception: try: data = [logging.ERROR, "Unable to log: %s" % data, (), {}] line = json.dumps(data, indent=None) except Exception: line = '[40, "Invalid log data", [], {}]' try: self.outfile.write(line) self.outfile.write('\n') except Exception: pass def info(self, msg, *args, **kwargs): self.log(self.INFO, msg, *args, **kwargs) def warning(self, msg, *args, **kwargs): self.log(self.WARNING, msg, *args, **kwargs) def error(self, msg, *args, **kwargs): self.log(self.ERROR, msg, *args, **kwargs) def debug(self, msg, *args, **kwargs): self.log(self.DEBUG, msg, *args, **kwargs) @staticmethod def send(filename, logger): with koji._open_text_file(filename, mode='rt') as fo: for line in fo: try: level, msg, args, kwargs = json.loads(line) except Exception: level = logging.ERROR msg = "Bad log data: %r" args = (line,) kwargs = {} logger.log(level, msg, *args, **kwargs) def _rmtree_nofork(path, logger=None): """Delete a directory tree without crossing fs boundaries This function is not thread safe because it relies on chdir to avoid forming long paths. """ # implemented to avoid forming long paths # see: https://pagure.io/koji/issue/201 logger = logger or logging.getLogger('koji') try: st = os.lstat(path) except OSError as e: # FileNotFoundError is N/A in py2 if e.errno == errno.ENOENT: logger.warning("No such file/dir %s for removal" % path) return raise if not stat.S_ISDIR(st.st_mode): raise koji.GenericError("Not a directory: %s" % path) dev = st.st_dev cwd = os.getcwd() abspath = os.path.abspath(path) try: # retry loop while True: try: os.chdir(path) new_cwd = os.getcwd() # make sure we're where we think we are if not os.path.samefile(new_cwd, abspath): raise koji.GenericError('chdir to %s resulted in different cwd %s', path, new_cwd) except OSError as e: if e.errno in (errno.ENOENT, errno.ESTALE): # likely racing with another rmtree # if the dir doesn't exist, we're done logger.warning("Directory to remove has disappeared: %s" % path) return raise try: _rmtree(dev, new_cwd, logger) except _RetryRmtree as e: # reset and retry os.chdir(cwd) logger.warning("Retrying rmtree due to %s" % e) continue break finally: os.chdir(cwd) # a successful _rmtree call should leave us with an empty directory try: os.rmdir(path) except OSError as e: if e.errno != errno.ENOENT: raise def _rmtree(dev, cwd, logger): """Remove all contents of CWD""" # This implementation avoids forming long paths and recursion. Otherwise # we will have errors with very deep directory trees. # - to avoid forming long paths we change directory as we go # - to avoid recursion we maintain our own stack dirstack = [] # Each entry in dirstack contains data for a level of directory traversal # - path # - subdirs # As we descend into the tree, we append a new entry to dirstack # When we ascend back up after removal, we pop them off while True: dirs = _stripcwd(dev, cwd, logger) # if cwd has no subdirs, walk back up until we find some while not dirs and dirstack: _assert_cwd(cwd) try: os.chdir('..') except OSError as e: _assert_cwd(cwd) if e.errno in (errno.ENOENT, errno.ESTALE): # likely in a race with another rmtree # however, we cannot proceed from here, so we return to the top raise _RetryRmtree(str(e)) raise dirs = dirstack.pop() cwd = os.path.dirname(cwd) # now that we've ascended back up by one, the last dir entry is # one we've just cleared, so we should remove it empty_dir = dirs.pop() _assert_cwd(cwd) try: os.rmdir(empty_dir) except OSError as e: _assert_cwd(cwd) # If this happens, either something else is writing to the dir, # or there is a bug in our code. # For now, we ignore this and proceed, but we'll still fail at # the top level rmdir logger.error("Unable to remove directory %s: %s" % (empty_dir, e)) pass if not dirs: # we are done break # otherwise we descend into the next subdir subdir = dirs[-1] # note: we do not pop here because we need to remember to remove subdir later _assert_cwd(cwd) try: os.chdir(subdir) except OSError as e: _assert_cwd(cwd) if e.errno == errno.ENOENT: # likely in a race with another rmtree # we'll ignore this and continue # since subdir doesn't exist, we'll pop it off and forget about it dirs.pop() logger.warning("Subdir disappeared during rmtree %s: %s" % (subdir, e)) continue # with dirstack unchanged raise cwd = os.path.join(cwd, subdir) dirstack.append(dirs) def _assert_cwd(cwd): try: actual = os.getcwd() except OSError as e: if e.errno == errno.ENOENT: # subsequent calls should fail with better handling return raise if cwd != actual: raise koji.GenericError('CWD changed unexpectedly: %s -> %s' % (cwd, actual)) def _stripcwd(dev, cwd, logger): """Unlink all files in cwd and return list of subdirs""" dirs = [] _assert_cwd(cwd) try: fdirs = os.listdir('.') except OSError as e: if e.errno in (errno.ENOENT, errno.ESTALE): # cwd could have been removed by others, just return an empty list logger.warning("Unable to read directory: %s" % e) return dirs raise for fn in fdirs: try: st = os.lstat(fn) except OSError as e: _assert_cwd(cwd) if e.errno == errno.ENOENT: continue raise if st.st_dev != dev: # don't cross fs boundary continue if stat.S_ISDIR(st.st_mode): dirs.append(fn) else: _assert_cwd(cwd) try: os.unlink(fn) except OSError: # we'll still fail at the top level pass return dirs def safer_move(src, dst): """Rename if possible, copy+rm otherwise Behavior is similar to shutil.move Unlike move, src is /always/ moved from src to dst. If dst is an existing directory, then an error is raised. """ if os.path.exists(dst): raise koji.GenericError("Destination exists: %s" % dst) elif os.path.islink(dst): raise koji.GenericError("Destination is a symlink: %s" % dst) # TODO - use locking to do a better job of catching races shutil.move(src, dst) def move_and_symlink(src, dst, relative=True, create_dir=False): """Move src to dest and create symlink instead of original file""" if create_dir: koji.ensuredir(os.path.dirname(dst)) safer_move(src, dst) if relative: dst = os.path.relpath(dst, os.path.dirname(src)) os.symlink(dst, src) def joinpath(path, *paths): """A wrapper around os.path.join that limits directory traversal""" # note that the first path is left alone newpaths = [] for _p in paths: p = os.path.normpath(_p) if p == '..' or p.startswith('../') or p.startswith('/'): raise ValueError('Invalid path segment: %s' % _p) newpaths.append(p) return os.path.join(path, *newpaths) def eventFromOpts(session, opts): """Determine event id from standard cli options Standard options are: event: an event id (int) ts: an event timestamp (int) repo: pull event from given repo """ event_id = getattr(opts, 'event', None) if event_id: return session.getEvent(event_id) ts = getattr(opts, 'ts', None) if ts is not None: return session.getLastEvent(before=ts) repo = getattr(opts, 'repo', None) if repo is not None: rinfo = session.repoInfo(repo, strict=True) return {'id': rinfo['create_event'], 'ts': rinfo['create_ts']} return None def filedigestAlgo(hdr): """ Get the file digest algorithm used in hdr. If there is no algorithm flag in the header, default to md5. If the flag contains an unknown, non-None value, return 'unknown'. """ # need to use the header ID hard-coded into Koji so we're not dependent on the # version of rpm installed on the hub digest_algo_id = hdr[koji.RPM_TAG_FILEDIGESTALGO] if not digest_algo_id: # certain versions of rpm return an empty list instead of None # for missing header fields digest_algo_id = None digest_algo = koji.RPM_FILEDIGESTALGO_IDS.get(digest_algo_id, 'unknown') return digest_algo.lower() def check_sigmd5(filename): """Compare header's sigmd5 with actual md5 of hdr+payload without need of rpm""" with open(filename, 'rb') as f: leadsize = 96 # skip magic + reserved o = leadsize + 8 f.seek(o) data = f.read(8) indexcount, storesize = struct.unpack('!II', data) for idx in range(indexcount): data = f.read(16) tag, data_type, offset, count = struct.unpack('!IIII', data) if tag == 1004: # SIGMD5 assert (data_type == 7) # binary data assert (count == 16) # 16 bytes of md5 break # seek to location of md5 f.seek(o + 8 + indexcount * 16 + offset) sigmd5 = f.read(16) # seek to start of header sigsize = 8 + 16 * indexcount + storesize o += sigsize + (8 - (sigsize % 8)) % 8 f.seek(o) # compute md5 of rest of file md5 = md5_constructor() while True: d = f.read(1024**2) if not d: break md5.update(d) return sigmd5 == md5.digest() def parseStatus(rv, prefix): if isinstance(prefix, (list, tuple)): prefix = ' '.join(prefix) if os.WIFSIGNALED(rv): return '%s was killed by signal %i' % (prefix, os.WTERMSIG(rv)) elif os.WIFEXITED(rv): return '%s exited with status %i' % (prefix, os.WEXITSTATUS(rv)) else: return '%s terminated for unknown reasons' % prefix def isSuccess(rv): """Return True if rv indicates successful completion (exited with status 0), False otherwise.""" if os.WIFEXITED(rv) and os.WEXITSTATUS(rv) == 0: return True else: return False def setup_rlimits(opts, logger=None): logger = logger or logging.getLogger("koji") for key in opts: if not key.startswith('RLIMIT_') or not opts[key]: continue rcode = getattr(resource, key, None) if rcode is None: continue orig = resource.getrlimit(rcode) try: limits = [int(x) for x in opts[key].split()] except ValueError: logger.error("Invalid resource limit: %s=%s", key, opts[key]) continue if len(limits) not in (1, 2): logger.error("Invalid resource limit: %s=%s", key, opts[key]) continue if len(limits) == 1: limits.append(orig[1]) logger.warning('Setting resource limit: %s = %r', key, limits) try: resource.setrlimit(rcode, tuple(limits)) except ValueError as e: logger.error("Unable to set %s: %s", key, e) class adler32_constructor(object): # mimicing the hashlib constructors def __init__(self, arg=''): if six.PY3 and isinstance(arg, str): arg = bytes(arg, 'utf-8') self._value = adler32(arg) & 0xffffffff # the bitwise and works around a bug in some versions of python # see: https://bugs.python.org/issue1202 def update(self, arg): if six.PY3 and isinstance(arg, str): arg = bytes(arg, 'utf-8') self._value = adler32(arg, self._value) & 0xffffffff def digest(self): return self._value def hexdigest(self): return "%08x" % self._value def copy(self): dup = adler32_constructor() dup._value = self._value return dup digest_size = 4 block_size = 1 # I think def tsort(parts): """Given a partial ordering, return a totally ordered list. part is a dict of partial orderings. Each value is a set, which the key depends on. The return value is a list of sets, each of which has only dependencies on items in previous entries in the list.""" parts = parts.copy() result = [] while True: level = set([name for name, deps in six.iteritems(parts) if not deps]) if not level: break result.append(level) parts = dict([(name, deps - level) for name, deps in six.iteritems(parts) if name not in level]) if parts: raise ValueError('total ordering not possible') return result class MavenConfigOptAdapter(object): """ Wrap a ConfigParser so it looks like a optparse.Values instance used by maven-build. """ MULTILINE = ['properties', 'envs'] MULTIVALUE = ['goals', 'profiles', 'packages', 'jvm_options', 'maven_options', 'buildrequires'] def __init__(self, conf, section): self._conf = conf self._section = section def __getattr__(self, name): if self._conf.has_option(self._section, name): value = self._conf.get(self._section, name) if name in self.MULTIVALUE: value = value.split() elif name in self.MULTILINE: value = value.splitlines() return value raise AttributeError(name) def maven_opts(values, chain=False, scratch=False): """ Convert the argument (an optparse.Values object) to a dict of build options suitable for passing to maven-build or maven-chain. """ opts = {} for key in ('scmurl', 'patches', 'specfile', 'goals', 'profiles', 'packages', 'jvm_options', 'maven_options'): val = getattr(values, key, None) if val: opts[key] = val props = {} for prop in getattr(values, 'properties', []): fields = prop.split('=', 1) if len(fields) != 2: fields.append(None) props[fields[0]] = fields[1] if props: opts['properties'] = props envs = {} for env in getattr(values, 'envs', []): fields = env.split('=', 1) if len(fields) != 2: raise ValueError("Environment variables must be in NAME=VALUE format") envs[fields[0]] = fields[1] if envs: opts['envs'] = envs if chain: val = getattr(values, 'buildrequires', []) if val: opts['buildrequires'] = val if scratch and not chain: opts['scratch'] = True return opts def maven_params(config, package, chain=False, scratch=False): values = MavenConfigOptAdapter(config, package) return maven_opts(values, chain=chain, scratch=scratch) def wrapper_params(config, package, chain=False, scratch=False): params = {} values = MavenConfigOptAdapter(config, package) params['type'] = getattr(values, 'type', None) params['scmurl'] = getattr(values, 'scmurl', None) params['buildrequires'] = getattr(values, 'buildrequires', []) if not scratch: params['create_build'] = True return params def parse_maven_params(confs, chain=False, scratch=False): """ Parse .ini files that contain parameters to launch a Maven build. Return a map whose keys are package names and values are config parameters. """ config = koji.read_config_files(confs) builds = {} for package in config.sections(): buildtype = 'maven' if config.has_option(package, 'type'): buildtype = config.get(package, 'type') if buildtype == 'maven': params = maven_params(config, package, chain=chain, scratch=scratch) elif buildtype == 'wrapper': params = wrapper_params(config, package, chain=chain, scratch=scratch) if len(params.get('buildrequires')) != 1: raise ValueError("A wrapper-rpm must depend on exactly one package") else: raise ValueError("Unsupported build type: %s" % buildtype) if 'scmurl' not in params: raise ValueError("%s is missing the scmurl parameter" % package) builds[package] = params if not builds: if not isinstance(confs, (list, tuple)): confs = [confs] raise ValueError("No sections found in: %s" % ', '.join(confs)) return builds def parse_maven_param(confs, chain=False, scratch=False, section=None): """ Parse .ini files that contain parameters to launch a Maven build. Return a map that contains a single entry corresponding to the given section of the .ini file. If the config file only contains a single section, section does not need to be specified. """ if not isinstance(confs, (list, tuple)): confs = [confs] builds = parse_maven_params(confs, chain=chain, scratch=scratch) if section: if section in builds: builds = {section: builds[section]} else: raise ValueError("Section %s does not exist in: %s" % (section, ', '.join(confs))) elif len(builds) > 1: raise ValueError( "Multiple sections in: %s, you must specify the section" % ', '.join(confs)) return builds def parse_maven_chain(confs, scratch=False): """ Parse maven-chain config. confs is a path to a config file or a list of paths to config files. Return a map whose keys are package names and values are config parameters. """ builds = parse_maven_params(confs, chain=True, scratch=scratch) depmap = {} for package, params in builds.items(): depmap[package] = set(params.get('buildrequires', [])) try: tsort(depmap) except ValueError: raise ValueError('No possible build order, missing/circular dependencies') return builds def to_list(lst): """ Helper function for py2/py3 compatibility used e.g. in list(dict.keys()) Don't use it for structures like list(zip(x, y)), where six.moves.zip is used, so it is always an iterator. """ if isinstance(lst, list): return lst else: return list(lst) def format_shell_cmd(cmd, text_width=80): """ Helper for wrapping shell command lists to human-readable form, while they still can be copied (from logs) and run in shell. :param [str] cmd: command list :returns str: """ # account for " \" text_width -= 2 s = [] line = '' for bit in cmd: if len(line + bit) > text_width: if line: s.append(line) line = '' if line: line += ' ' line += bit if line: s.append(line) return ' \\\n'.join(s) def extract_build_task(binfo): """ Helper for extracting task id from buildinfo. CGs and older OSBS approach can put it into different places in binfo :param dict binfo: buildinfo :returns int: task id """ task_id = binfo.get('task_id') if task_id is None: # legacy OSBS task id location extra = binfo.get('extra') if extra is not None: task_id = extra.get('container_koji_task_id') return task_id