| Server IP : 178.105.222.151 / Your IP : 216.73.216.38 Web Server : nginx/1.28.3 System : Linux MNK 7.0.0-15-generic #15-Ubuntu SMP PREEMPT_DYNAMIC Wed Apr 22 16:06:43 UTC 2026 x86_64 User : www-data ( 33) PHP Version : 8.5.4 Disable Function : NONE MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : OFF | Sudo : ON | Pkexec : OFF Directory : /lib/python3/dist-packages/cloudinit/config/__pycache__/ |
Upload File : |
+
� �i�# � �� a � R0 t 0 t R t^ RIt^ RIt^ RIHtHtHt ^ RIH t ^ RI
H t ^ RI H
t
^ RIHt ]P ! ]4 tRRRR R
R R R
RR./tRRRRRR
RR RRR./RRRRRR
RR RRR./RRRRRR
RR RRR./RRR RR R
RR RRR./R RR RRR
RR RRR .//tR1 F t]R, ]]& K R2 F t]R, ]]& K . R3OtR!R"R#]R$]R%R&R'./t] ^ k R( tR) tR* tR+ tR, t R- t R. R/ lt R# )4z CA Certs: Add ca certificates.N)� lifecycle�subp�util)�Cloud)�Config)�
MetaSchema)� PER_INSTANCE� ca_cert_path�ca_cert_local_pathz!/usr/local/share/ca-certificates/�ca_cert_filenamez#cloud-init-ca-cert-{cert_index}.crt�ca_cert_configz/etc/ca-certificates.conf�ca_cert_update_cmdzupdate-ca-certificates�aoscz/etc/ssl/certs/z#cloud-init-ca-cert-{cert_index}.pemz+/etc/ca-certificates/conf.d/cloud-init.confzupdate-ca-bundle�fedoraz/etc/pki/ca-trust/z /usr/share/pki/ca-trust-source/z+anchors/cloud-init-ca-cert-{cert_index}.crtzupdate-ca-trust�rhel�opensusez/etc/pki/trust/z/usr/share/pki/trust/�photonz/etc/pki/tls/certs/zrehash_ca_certificates.sh�id� cc_ca_certs�distros� frequency�activate_by_schema_keys�ca_certs�ca-certsc � � \ P V \ 4 p\ P P VR, VR, 4 VR& V# )z�Return a distro-specific ca_certs config dictionary
@param distro_name: String providing the distro class name.
@returns: Dict of distro configurations for ca_cert.
r
r �ca_cert_full_path)�DISTRO_OVERRIDES�get�DEFAULT_CONFIG�os�path�join)� distro_name�cfgs & �>/usr/lib/python3/dist-packages/cloudinit/config/cc_ca_certs.py�_distro_ca_certs_configsr% o sF � � �
�
�{�N�
;�C� !�w�w�|�|� � �!�3�'9�#:� �C�� � �J� c �D � \ P ! V R, RR7 R# )z�
Updates the CA certificate cache on the current machine.
@param distro_cfg: A hash providing _distro_ca_certs_configs function.
r
F)�captureN)r ��
distro_cfgs &r$ �update_ca_certsr+ | s � � �I�I�j�-�.��>r& c � � V' g R# \ V^4 FA w r#\ V4 pV R, P VR7 p\ P ! WTRR7 KC R# )a
Adds certificates to the system. To actually apply the new certificates
you must also call the appropriate distro-specific utility such as
L{update_ca_certs}.
@param distro_cfg: A hash providing _distro_ca_certs_configs function.
@param certs: A list of certificate strings.
Nr )�
cert_indexi� )�mode)� enumerate�str�formatr �
write_file)r* �certsr- �c�cert_file_contents�cert_file_names && r$ � add_ca_certsr7 � sV � � ��"�5�!�,�
�
� ��V��#�$7�8�?�?�!� @�
��
�����G�
-r& c � � V R9 d \ V4 R# V R9 d1 \ V4 V R9 d Rp\ P ! RVR7 R# R# R# )a
Disables all default trusted CA certificates. For Alpine, Debian and
Ubuntu to actually apply the changes you must also call
L{update_ca_certs}.
@param distro_name: String providing the distro class name.
@param distro_cfg: A hash providing _distro_ca_certs_configs function.
)�dataN)r r )�alpiner �debian�raspberry-pi-os�ubuntu)r; r< r= z8ca-certificates ca-certificates/trust_new_crts select no)zdebconf-set-selections�-)�remove_default_ca_certs�disable_system_ca_certsr )r" r* � debconf_sels && r$ �disable_default_ca_certsrB � sY � � �(�(� �
�+� � �
� �
�+� �A� A�O�
�
�I�I�5�K� H� B�
r& c �v � V R, pV' d& \ P P V4 ' g R# RpRp\ P ! V4 P ' d� \
P ! V4 p. pVP 4 Fy pWb8X d RpVP V4 K VR8X g V^ , R 9 d VP V4 KF V' g VP V4 RpVP RV, 4 K{ \
P ! VRP V4 R, R R
7 R# R# ) z�
For every entry in the CA_CERT_CONFIG file prefix the entry with a "!"
in order to disable it.
@param distro_cfg: A hash providing _distro_ca_certs_configs function.
r Nz;# Modified by cloud-init to deselect certs due to user-dataFT� �!�
�wb)�omode)�#rE ) r r �exists�stat�st_sizer �load_text_file�
splitlines�appendr2 r! )r* �ca_cert_cfg_fn�header_comment� added_header�orig� out_lines�lines & r$ r@ r@ � s� � � � 0�1�N� ���� � ��!?�!?�� F� � �L� �w�w�~� �&�&�&��"�"�>�2��� ��O�O�%�D��%� #� �� � ��&����t�A�w�*� 4�� � ��&�#� �$�$�^�4�#'�L�� � ��t��,� &�
��� �D�I�I�i� 0�4� 7�t�
� 'r& c � � V R, f R# \ P R4 \ P ! V R, 4 \ P ! V R, 4 R# )z�
Removes all default trusted CA certificates from the system.
@param distro_cfg: A hash providing _distro_ca_certs_configs function.
r Nz Deleting system CA certificatesr
)�LOG�debugr �delete_dir_contentsr) s &r$ r? r? � sF � � �.�!�)���I�I�/�0�� � �Z�� 7�8�� � �Z�(<� =�>r& c
�L � V ^8� d QhR\ R\ R\ R\ RR/# )� �namer# �cloud�args�returnN)r0 r r �list)r1 s "r$ � __annotate__ra � s/ � � 8 � 8 �� 8 �6� 8 �%� 8 �t� 8 �� 8 r& c �h � RV9 d \ P ! RRRR7 M RV9 d \ P RV 4 R# RV9 d RV9 d \ P R 4 VP RVP R4 4 p\
V\ 4 ' g \ R
4 h\ VP P 4 pR V9 d \ P ! R RR
R7 VP RVP R R4 4 ' d6 \ P R4 \ VP P V4 RV9 dJ \ P ! VR4 pV' d+ \ P R\ V4 4 \! WV4 \ P R4 \# V4 R# )aY
Call to handle ca_cert sections in cloud-config file.
@param name: The module name "ca_cert" from cloud.cfg
@param cfg: A nested dict containing the entire cloud config contents.
@param cloud: The L{CloudInit} object in use.
@param log: Pre-initialized Python logger object to use for logging.
@param args: Any module arguments from cloud.cfg
r zKey 'ca-certs'z22.1zUse 'ca_certs' instead.)�
deprecated�deprecated_version�
extra_messager z<Skipping module named %s, no 'ca_certs' key in configurationNzMFound both ca-certs (deprecated) and ca_certs config keys. Ignoring ca-certs.z unexpected type: {ca_cert_cfg}zremove-defaultszKey 'remove-defaults'z Use 'remove_defaults' instead.�remove_defaultsFz'Disabling/removing default certificates�trustedzAdding %d certificateszUpdating certificates)r � deprecaterW rX �warningr �
isinstance�dict� TypeErrorr% �distror\ rB r �get_cfg_option_list�lenr7 r+ )r\ r# r] r^ � ca_cert_cfgr* �
trusted_certss &&&& r$ �handlerr � sf � � �S�����'� %�3�
�
�3� � � � � J� �
� ��S��Z�3� .� � � �
"�
� �'�'�*�c�g�g�j�&9�:�K� �k�4� (� (��8�9�9�)�%�,�,�*;�*;�<�J� �K�'����.� %�:�
�
����;�?�?�+<�e�D�� � � � �;�<� �� � �!2�!2�J�?� �K� � �0�0��i�H�
� � �I�I�.��M�0B� C� �� 3� �I�I�%�&��J� r& c �@ � V ^8� d Qh/ ^ \ 9 d
\ ;R& # )r[ �meta)�__conditional_annotations__r )r1 s "r$ ra ra s � � $� $�D� �j� �E %r& )�opensuse-microos�opensuse-tumbleweed�
opensuse-leap�sle_hpc� sle-micro�sles)� almalinux�centos�
cloudlinux�rocky)r| r r} r~ r: r; r r< r r r rv rw rx ry rz r{ r= r ) ru �__doc__�loggingr � cloudinitr r r �cloudinit.cloudr �cloudinit.configr �cloudinit.config.schemar �cloudinit.settingsr � getLogger�__name__rW r r rm r rt r% r+ r7 rB r@ r? rr ra )ru s @r$ �<module>r� s� ���
%� � � +� +� !� #� .� +�
����!�� �D��=��=��1��3�4� �� ��)� � /�� A��G� � 1� 2�
�
��,� � ?�� I��$� � 0� 1� � ��,� � ?�� I��$� � 0� 1�
� ��)� � 5�� I��$� � 7� 8� �
��-� � /�� A��$� � :� ;� �;$� �L�F� 0�
� ;��V� ���F� 0�� 7��V� �
� ��. �-�
�w�� � �
�J� 7� �� �
�?�H�*I�6$
�N ?� 8 r&