a

�)g���
@s^dd
lm
Z
mZmZ
eZdZdZdZddl	Z	e	�
dde�
ddlZddl
Z
ddlZddlZddlZddlZddlZddlZddlZddlZddlmZ
dd	lmZ
dd
lmZmZmZ
ddlmZm Z 
ddl!m"Z"m#Z#
dd
l$m%Z%
dZ&dZ'dZ(dZ)dZ*dZ+dZ,e-ddd�Z.dZ/z ddl0Z0ddl1Z0ddl2Z2dZ/Wne3�
yJ


dZ0Z2Yn0Gdd�de4�Z5dd�Z6dd�Z7d d!�Z8d"d#�Z9d$d%�Z:d&d'�Z;d(d)�Z<d*d+�Z=dddde:e&�
ddddddddf
d,d-�
Z>dEd/d0�
Z?d1d2�Z@dde:e&�
dfd3d4�
ZAddde:e&�
fd5d6�
ZBd7d8�ZCd9ddde:e&�
ddddf	d:d;�
ZDd<d=�ZEd>d?�ZFd@dA�ZGdBdC�ZHeIdDk�rZeH�
dS)F�)�absolute_import�division�print_functiona$
---
module: apt
short_description: Manages apt-packages
description:
  - Manages I(apt) packages (such as for Debian/Ubuntu).
version_added: "0.0.2"
options:
  name:
    description:
      - A list of package names, like C(foo), or package specifier with version, like C(foo=1.0) or C(foo>=1.0).
        Name wildcards (fnmatch) like C(apt*) and version wildcards like C(foo=1.0*) are also supported.
    aliases: [ package, pkg ]
    type: list
    elements: str
  state:
    description:
      - Indicates the desired package state. C(latest) ensures that the latest version is installed. C(build-dep) ensures the package build dependencies
        are installed. C(fixed) attempt to correct a system with broken dependencies in place.
    type: str
    default: present
    choices: [ absent, build-dep, latest, present, fixed ]
  update_cache:
    description:
      - Run the equivalent of C(apt-get update) before the operation. Can be run as part of the package installation or as a separate step.
      - Default is not to update the cache.
    aliases: [ update-cache ]
    type: bool
  update_cache_retries:
    description:
      - Amount of retries if the cache update fails. Also see I(update_cache_retry_max_delay).
    type: int
    default: 5
    version_added: '2.10'
  update_cache_retry_max_delay:
    description:
      - Use an exponential backoff delay for each retry (see I(update_cache_retries)) up to this max delay in seconds.
    type: int
    default: 12
    version_added: '2.10'
  cache_valid_time:
    description:
      - Update the apt cache if it is older than the I(cache_valid_time). This option is set in seconds.
      - As of Ansible 2.4, if explicitly set, this sets I(update_cache=yes).
    type: int
    default: 0
  purge:
    description:
     - Will force purging of configuration files if the module state is set to I(absent).
    type: bool
    default: 'no'
  default_release:
    description:
      - Corresponds to the C(-t) option for I(apt) and sets pin priorities
    aliases: [ default-release ]
    type: str
  install_recommends:
    description:
      - Corresponds to the C(--no-install-recommends) option for I(apt). C(true) installs recommended packages.  C(false) does not install
        recommended packages. By default, Ansible will use the same defaults as the operating system. Suggested packages are never installed.
    aliases: [ install-recommends ]
    type: bool
  force:
    description:
      - 'Corresponds to the C(--force-yes) to I(apt-get) and implies C(allow_unauthenticated: yes) and C(allow_downgrade: yes)'
      - "This option will disable checking both the packages' signatures and the certificates of the
        web servers they are downloaded from."
      - 'This option *is not* the equivalent of passing the C(-f) flag to I(apt-get) on the command line'
      - '**This is a destructive operation with the potential to destroy your system, and it should almost never be used.**
         Please also see C(man apt-get) for more information.'
    type: bool
    default: 'no'
  clean:
    description:
      - Run the equivalent of C(apt-get clean) to clear out the local repository of retrieved package files. It removes everything but
        the lock file from /var/cache/apt/archives/ and /var/cache/apt/archives/partial/.
      - Can be run as part of the package installation (clean runs before install) or as a separate step.
    type: bool
    default: 'no'
    version_added: "2.13"
  allow_unauthenticated:
    description:
      - Ignore if packages cannot be authenticated. This is useful for bootstrapping environments that manage their own apt-key setup.
      - 'C(allow_unauthenticated) is only supported with state: I(install)/I(present)'
    aliases: [ allow-unauthenticated ]
    type: bool
    default: 'no'
    version_added: "2.1"
  allow_downgrade:
    description:
      - Corresponds to the C(--allow-downgrades) option for I(apt).
      - This option enables the named package and version to replace an already installed higher version of that package.
      - Note that setting I(allow_downgrade=true) can make this module behave in a non-idempotent way.
      - (The task could end up with a set of packages that does not match the complete list of specified packages to install).
    aliases: [ allow-downgrade, allow_downgrades, allow-downgrades ]
    type: bool
    default: 'no'
    version_added: "2.12"
  allow_change_held_packages:
    description:
      - Allows changing the version of a package which is on the apt hold list
    type: bool
    default: 'no'
    version_added: '2.13'
  upgrade:
    description:
      - If yes or safe, performs an aptitude safe-upgrade.
      - If full, performs an aptitude full-upgrade.
      - If dist, performs an apt-get dist-upgrade.
      - 'Note: This does not upgrade a specific package, use state=latest for that.'
      - 'Note: Since 2.4, apt-get is used as a fall-back if aptitude is not present.'
    version_added: "1.1"
    choices: [ dist, full, 'no', safe, 'yes' ]
    default: 'no'
    type: str
  dpkg_options:
    description:
      - Add dpkg options to apt command. Defaults to '-o "Dpkg::Options::=--force-confdef" -o "Dpkg::Options::=--force-confold"'
      - Options should be supplied as comma separated list
    default: force-confdef,force-confold
    type: str
  deb:
     description:
       - Path to a .deb package on the remote machine.
       - If :// in the path, ansible will attempt to download deb before installing. (Version added 2.1)
       - Requires the C(xz-utils) package to extract the control file of the deb package to install.
     type: path
     required: false
     version_added: "1.6"
  autoremove:
    description:
      - If C(true), remove unused dependency packages for all module states except I(build-dep). It can also be used as the only option.
      - Previous to version 2.4, autoclean was also an alias for autoremove, now it is its own separate command. See documentation for further information.
    type: bool
    default: 'no'
    version_added: "2.1"
  autoclean:
    description:
      - If C(true), cleans the local repository of retrieved package files that can no longer be downloaded.
    type: bool
    default: 'no'
    version_added: "2.4"
  policy_rc_d:
    description:
      - Force the exit code of /usr/sbin/policy-rc.d.
      - For example, if I(policy_rc_d=101) the installed package will not trigger a service start.
      - If /usr/sbin/policy-rc.d already exists, it is backed up and restored after the package installation.
      - If C(null), the /usr/sbin/policy-rc.d isn't created/changed.
    type: int
    default: null
    version_added: "2.8"
  only_upgrade:
    description:
      - Only upgrade a package if it is already installed.
    type: bool
    default: 'no'
    version_added: "2.1"
  fail_on_autoremove:
    description:
      - 'Corresponds to the C(--no-remove) option for C(apt).'
      - 'If C(true), it is ensured that no packages will be removed or the task will fail.'
      - 'C(fail_on_autoremove) is only supported with state except C(absent)'
    type: bool
    default: 'no'
    version_added: "2.11"
  force_apt_get:
    description:
      - Force usage of apt-get instead of aptitude
    type: bool
    default: 'no'
    version_added: "2.4"
  lock_timeout:
    description:
      - How many seconds will this action wait to acquire a lock on the apt db.
      - Sometimes there is a transitory lock and this will retry at least until timeout is hit.
    type: int
    default: 60
    version_added: "2.12"
requirements:
   - python-apt (python 2)
   - python3-apt (python 3)
   - aptitude (before 2.4)
author: "Matthew Williams (@mgwilliams)"
extends_documentation_fragment: action_common_attributes
attributes:
    check_mode:
        support: full
    diff_mode:
        support: full
    platform:
        platforms: debian
notes:
   - Three of the upgrade modes (C(full), C(safe) and its alias C(true)) required C(aptitude) up to 2.3, since 2.4 C(apt-get) is used as a fall-back.
   - In most cases, packages installed with apt will start newly installed services by default. Most distributions have mechanisms to avoid this.
     For example when installing Postgresql-9.5 in Debian 9, creating an excutable shell script (/usr/sbin/policy-rc.d) that throws
     a return code of 101 will stop Postgresql 9.5 starting up after install. Remove the file or remove its execute permission afterwards.
   - The apt-get commandline supports implicit regex matches here but we do not because it can let typos through easier
     (If you typo C(foo) as C(fo) apt-get would install packages that have "fo" in their name with a warning and a prompt for the user.
     Since we don't have warnings and prompts before installing we disallow this.Use an explicit fnmatch pattern if you want wildcarding)
   - When used with a C(loop:) each package will be processed individually, it is much more efficient to pass the list directly to the I(name) option.
   - When C(default_release) is used, an implicit priority of 990 is used. This is the same behavior as C(apt-get -t).
   - When an exact version is specified, an implicit priority of 1001 is used.
a

- name: Install apache httpd  (state=present is optional)
  ansible.builtin.apt:
    name: apache2
    state: present

- name: Update repositories cache and install "foo" package
  ansible.builtin.apt:
    name: foo
    update_cache: yes

- name: Remove "foo" package
  ansible.builtin.apt:
    name: foo
    state: absent

- name: Install the package "foo"
  ansible.builtin.apt:
    name: foo

- name: Install a list of packages
  ansible.builtin.apt:
    pkg:
    - foo
    - foo-tools

- name: Install the version '1.00' of package "foo"
  ansible.builtin.apt:
    name: foo=1.00

- name: Update the repository cache and update package "nginx" to latest version using default release squeeze-backport
  ansible.builtin.apt:
    name: nginx
    state: latest
    default_release: squeeze-backports
    update_cache: yes

- name: Install the version '1.18.0' of package "nginx" and allow potential downgrades
  ansible.builtin.apt:
    name: nginx=1.18.0
    state: present
    allow_downgrade: yes

- name: Install zfsutils-linux with ensuring conflicted packages (e.g. zfs-fuse) will not be removed.
  ansible.builtin.apt:
    name: zfsutils-linux
    state: latest
    fail_on_autoremove: yes

- name: Install latest version of "openjdk-6-jdk" ignoring "install-recommends"
  ansible.builtin.apt:
    name: openjdk-6-jdk
    state: latest
    install_recommends: no

- name: Update all packages to their latest version
  ansible.builtin.apt:
    name: "*"
    state: latest

- name: Upgrade the OS (apt-get dist-upgrade)
  ansible.builtin.apt:
    upgrade: dist

- name: Run the equivalent of "apt-get update" as a separate step
  ansible.builtin.apt:
    update_cache: yes

- name: Only run "update_cache=yes" if the last one is more than 3600 seconds ago
  ansible.builtin.apt:
    update_cache: yes
    cache_valid_time: 3600

- name: Pass options to dpkg on run
  ansible.builtin.apt:
    upgrade: dist
    update_cache: yes
    dpkg_options: 'force-confold,force-confdef'

- name: Install a .deb package
  ansible.builtin.apt:
    deb: /tmp/mypackage.deb

- name: Install the build dependencies for package "foo"
  ansible.builtin.apt:
    pkg: foo
    state: build-dep

- name: Install a .deb package from the internet
  ansible.builtin.apt:
    deb: https://example.com/python-ppq_0.1-1_all.deb

- name: Remove useless packages from the cache
  ansible.builtin.apt:
    autoclean: yes

- name: Remove dependencies that are no longer required
  ansible.builtin.apt:
    autoremove: yes

- name: Run the equivalent of "apt-get clean" as a separate step
  apt:
    clean: yes
aP
cache_updated:
    description: if the cache was updated or not
    returned: success, in some cases
    type: bool
    sample: True
cache_update_time:
    description: time of the last cache update (0 if unknown)
    returned: success, in some cases
    type: int
    sample: 1425828348000
stdout:
    description: output from apt
    returned: success, when needed
    type: str
    sample: |-
        Reading package lists...
        Building dependency tree...
        Reading state information...
        The following extra packages will be installed:
          apache2-bin ...
stderr:
    description: error output from apt
    returned: success, when needed
    type: str
    sample: "AH00558: apache2: Could not reliably determine the server's fully qualified domain name, using 127.0.1.1. Set the 'ServerName' directive globally to ..."
N�ignorezapt API not stable yet)
�
AnsibleModule)
�get_best_parsable_locale)�
has_respawned�probe_interpreters_for_module�respawn_module)�	to_native�to_text)�PY3�string_types)
�
fetch_filezforce-confdef,force-confoldz
0 upgraded, 0 newly installedz'
0 packages upgraded, 0 newly installedz/var/lib/apt/listsz*/var/lib/apt/periodic/update-success-stampzInvalid operationz8Usage: apt-mark [options] {markauto|unmarkauto} packagesz&The following packages will be REMOVEDzDel )�
autoremove�	autocleanFTc@s(eZ
dZd
Zdd�Zdd�Zdd�ZdS)	�	PolicyRcDa

    This class is a context manager for the /usr/sbin/policy-rc.d file.
    It allow the user to prevent dpkg to start the corresponding service when installing
    a package.
    https://people.debian.org/~hmh/invokerc.d-policyrc.d-specification.txt
    cCs@|
|_|jj
d
durdStj�d�
r6tjdd�
|_nd|_dS)N�policy_rc_d�/usr/sbin/policy-rc.dZansible)
�prefix)�
m�params�os�path�exists�tempfileZmkdtemp�
backup_dir)�self�module�r�7/usr/lib/python3.9/site-packages/ansible/modules/apt.py�__init__�
s

zPolicyRcD.__init__c
Cs�|jj
d
durdS|jrTzt�d|j�
Wn&tyR


|jjd|jd�

Yn0zPtdd��&}
|
�d|jj
d
�

Wd�
n1s�0


Y
t	�
dd�
Wn ty�


|jjd	d�

Yn0dS)
�d
        This method will be called when we enter the context, before we call `apt-get …`
        rNrz(Fail to move /usr/sbin/policy-rc.d to %s�
�msg�
wz#!/bin/sh
exit %d
i�
z/Failed to create or chmod /usr/sbin/policy-rc.d)rrr�shutil�move�	Exception�	fail_json�open�writer�chmod)rrrrr �	__enter__�
s






4

zPolicyRcD.__enter__c	Cs�|jj
d
durdS|jrvz(t�tj�|jd�d�
t�|j�

Wq�t	yr


|jj
dtj�|jd�d�

Yq�0n0zt�d�

Wn t	y�


|jj
dd�

Yn0dS)r"rNzpolicy-rc.drz-Fail to move back %s to /usr/sbin/policy-rc.dr#zAFail to remove /usr/sbin/policy-rc.d (after package manipulation))rrrr&r'rr�join�rmdirr(r)�remove)r�type�value�	tracebackrrr �__exit__�
s 


�


�


zPolicyRcD.__exit__N)�__name__�
__module__�__qualname__�__doc__r!r-r4rrrr r�
s
rc
Cs,t�
d
|d�}
t|
�
dkr|
S|
dddfS)Nz(>?=)�
r
)�re�split�len)�pkgspec�partsrrr �
package_split�
s



r?cCs2zt�
||
�WSty,


t�||
�YS0dS)
N)�apt_pkg�version_compare�AttributeErrorZVersionCompare)�versionZ
other_versionrrr �package_version_compare�
s



rDcCs�t�
|�
}|�tj�d
�
�

|�tj�d�
�

|rB|�d||d�
|
dkrZ|�d||d�
||}|�|�
}|stdS|
dkr�t�|j	|�s�dS|j	S)NzDir::Etc::preferenceszDir::Etc::preferencespartsZReleasei��
=�Versioni�)
r@ZPolicyZread_pinfile�configZ	find_fileZread_pindirZ
create_pinZget_candidate_ver�fnmatchZver_str)�pkgname�version_cmprC�release�cacheZpolicy�pkgZpkgverrrr �package_best_match�
s










rNcCsJz||
}|j|
}Wn�t
y�


|d
kr�z~|�|
�
}	|	r�|�|
�
r�t|	�
dkr�|	d}
t||
j||||d
d�\}}}
}|r�|||
|fWYSWYdS|jd|
d�

Wq�ty�


YYdS0nYdSYn0zt|j	�
dk}Wn,t
y�


d	}Ynt�
y


d
}Yn0z|jtj
k}Wn:t�
yZ


z
|j}Wnt�
yT


|j}Yn0Yn0t|
||||j�}d
}d}
|�r:z|jj}Wnt�
y�


|j}Yn0|dk�
r�t�||�}|�r8||k�r8t�||��r8|}
nZ|d
k�r t�||�dk}|�r8||k�r8t�||�dk�r8|}
nd	}|�r>||k�r>|}
n|}
|||
|fS)aR
    :return: A tuple of (installed, installed_version, version_installable, has_files). *installed* indicates whether
    the package (regardless of version) is installed. *installed_version* indicates whether the installed package
    matches the provided version criteria. *version_installable* provides the latest matching version that can be
    installed. In the case of virtual packages where we can't determine an applicable match, True is returned.
    *has_files* indicates whether the package has files on the filesystem (even if not installed, meaning a purge is
    required).
    �installr9r
�
�state)FFTFz%No package matching '%s' is availabler#)FFNFTFNrEz>=)�_cache�KeyErrorZget_providing_packagesZis_virtual_packager<�package_status�namer)rBZinstalled_files�UnicodeDecodeErrorZ
current_stater@ZCURSTATE_INSTALLEDZis_installedZisInstalledrN�	installedrCZinstalledVersionrHrA)rrIrJrC�default_releaserLrQrMZll_pkgZprovided_packages�packagerW�installed_version�version_installable�	has_filesZpackage_is_installedZversion_bestZversion_is_installedrrr rTsj	







�




























"


rTc
Cs,|�d
�
}
d}|
D]}d||f}q|�
�S)N�
,�z%s -o "Dpkg::Options::=--%s")r;�strip)Zdpkg_options_compressedZoptions_list�dpkg_optionsZdpkg_optionrrr �expand_dpkg_optionsWs





�rac	Cs�g}|
r�|
D]�}t|t
�s.|jd
t|�
d�

t|�
\}}}td�
�|�
r�d|v
r�z|}	Wq�ty~


dd�|D�
}	}Yq�0n.z|
}	Wn$ty�


dd�|D�
}	}
Yn0t�	|	|�}|s�|jdt
|�
d�

q�|�|�

q|�|�

q|S)	Nz9Invalid type for package name, expected string but got %sr#z*?[]!�
:c
Ssg|]}
d|
jv
r|
j�qS)
rb�
rU��.0rMrrr �
<listcomp>{�z1expand_pkgspec_from_fnmatches.<locals>.<listcomp>c
Ssg|]
}
|
j�qSrrcrdrrr rf�rgz%No package(s) matching '%s' available)
�
isinstancerr)r1r?�	frozenset�intersection�	NameErrorrH�filterr�extend�append)rr=rLZnew_pkgspecZpkgspec_patternZpkgname_patternrJrCZ_non_multiarchZpkg_name_cacheZ_all_pkg_names�matchesrrr �expand_pkgspec_from_fnmatches`s,	











rpc
Cs�t|�
�
�}
z|
�d
�
}Wn8tyR


z|
�d�
}WntyL


d}Yn0Yn0ztdd�t|
�
D�
�
}Wnty�


t|
�
}Yn0|d7}|d7}dd�|
||��
i
S)	NzResolving dependencies...zReading state information...���c
ss"|]\}
}t�
d|�r|
V
qd
S)z[0-9]+ (packages )?upgradedN)r:�match)re�
i�itemrrr �	<genexpr>�rgzparse_diff.<locals>.<genexpr>r9�prepared�

)	r�
splitlines�index�
ValueError�next�	enumerate�
StopIterationr<r.)�output�diffZ
diff_startZdiff_endrrr �
parse_diff�s










r�cCs�|
sdS|�d
�
}|dur(|�
d�

dSd|d�|
�
f}|�|�
\}}}t|vsZt|vr|d|d�|
�
f}|�|�
\}}}|dkr�|jd||f|||d�
dS)	Nzapt-markzMCould not find apt-mark binary, not marking package(s) as manually installed.z%s manual %s�
 z%s unmarkauto %sr
�'%s' failed: %s�r$�stdout�stderr�rc)�get_bin_path�warnr.�run_command�APT_MARK_INVALID_OP�APT_MARK_INVALID_OP_DEB6r))r�packagesZapt_mark_cmd_path�cmdr��out�errrrr �mark_installed_manually�s









r�c%
Cs�g}d
}t||
|�}
g}|
D]�}|r4|�
d|�

qt|�
\}}}|�
|�

t||||||dd�\}}}}|st|rtq|s�|s�d}td|d�
}||f
S|r�|s�|r�|s�|s�|du
r�|�
d	||f�

n&|r�|�
d	||f�

n|�
d|�

q|r|r|d
kr|�
d	||f�

qd�|�
}|�r�|�
r2d}nd
}|j�
rDd
}nd
}|
�
rTd}
nd
}
|�
rdd}nd
}|�
rtd}nd
}|	�
r�d}	nd
}	|�
r�dt|||	||||f}ndt|||	||
|||f	}|�
r�|d|f
7}|du�
r�|d7}n|du�
r�|d7}|
�r
|d7}|�r|d7}|�r&|d7}t|�
� 
|�	|�
\} }!}"Wd�
n1�sV0


Y
|j
�rrt|!�
}#ni}#d}d}$|�r�t|!v
}$t|$|!|"|#d�}| �r�d}td||"f|!|"| d�}nd}tdd�
}|�s�|j�s�t
||�
||fS)Nr^�'%s'rOrPFz*no available installation candidate for %sr#Tz'%s=%s'rEr��--force-yes�
--simulate�
--auto-remove�--no-removez--only-upgradez--fix-brokenz$%s -y %s %s %s %s %s %s build-dep %sz%%s -y %s %s %s %s %s %s %s install %s� -t '%s'z -o APT::Install-Recommends=noz -o APT::Install-Recommends=yesz --allow-unauthenticatedz --allow-downgradesz --allow-change-held-packages��changedr�r�rr�r��
r�)rprnr?rT�dictr.�
check_mode�APT_GET_CMDrr��_diffr��APT_GET_ZEROr�)%rr=rL�upgraderX�install_recommends�forcer`�	build_dep�fixedr�fail_on_autoremove�only_upgrade�allow_unauthenticated�allow_downgrade�allow_change_held_packages�pkg_listr�Z
package_namesrYrUrJrCrWrZr[r\�status�data�	force_yes�	check_argr�r�r�r�rr�rrr rO�s�



























�











0











rOrFcCsV|�d
d�}|d|
|f}|�
|�
\}}}|dkrH|jd|||d�
t|�
�d�
S)NZdpkgTz --field %s %sr
�	%s failed�r$r�r�rw)r�r�r)rr_)r�deb_fileZfieldZcmd_dpkgr�r�r�r�rrr �get_field_of_deb;s





r�c
 Cs�d
}
g}g}|
�d�
D�
](}
z�t
jj|
t
��d�}t||
d�}t||
d�}ttd�r~tt�	��
dkr~t||
d�}d	||f}n|}z,t
��|}|j
j}t||�d
kr�WWqWnt
y�


Yn0|��s�|s�d|jvr�|r�n|j|jd�

|�|j�

Wn:t
�
y4
}
z |jd
t|�
d�

WYd}~n
d}~00|�|
�

qi}|�
r�t||||||||t|	�
d�	\}}|�
s�|jfi|�
�

|�dd
�}
|�r�d�dd�|	�d�
D�
�
}|j�
r�|d7}|�
r�|d7}d|d�|�
f}t|�
� 
|�|�
\}}}Wd�
n1�s0


Y
d|v�r2|d|}n|}d|v�rh|d}d|v�rp|dd|7<nt|�
}d|v�r�|d|}n|}|d
k�r�|jd|||d�
n|jd|||d�
n*|j|
|�dd�|�dd�|�dd�d�
dS) NFr])
rLZPackagerF�get_architecturesr9ZArchitecturez%s:%sr
z
later versionr#zUnable to install package: %s)	rr=rLr�r�r�r�r�r`r�r�c
Ssg|]}
d|
�qS)
z--%sr)re�
xrrr rf�rgzinstall_deb.<locals>.<listcomp>z --simulatez --force-allz
dpkg %s -i %sr�rrvz

r�Tr�r�r�r^)r;�aptZdebfileZ
DebPackage�Cacher��hasattrr@r<r�rWrCrDr(�checkZ_failure_stringr)rmZmissing_depsrrnrOra�getr.r�rr�r��	exit_json) rZdebsrLr�r�r�r�r�r�r`r�Zdeps_to_installZpkgs_to_installr�rM�pkg_nameZpkg_versionZpkg_archZpkg_keyZ
installed_pkgrZ�
e�retvals�success�optionsr�r�r�r�r�rr�rrr �install_debDs�


















*







�









0












r�c
CsP
g}t||
|�}
|
D]J}t
|�
\}	}
}t||	|
|d|d
d�\}}
}}|
sP|r|r|�d|�

qd�|�
}|s||jdd�

n�|r�d}nd}|r�d	}nd}|r�d
}nd}|jr�d}nd}dt||||||f}t|�
� 
|�	|�
\}}}Wd�
n1s�0


Y
|j
�
rt|�
}ni}|�
r:|jd
||f|||d�
|jd|||d�
dS)Nr0rPr�r�Fr�r�r^�--purger�r�z!%s -q -y %s %s %s %s %s remove %sz'apt-get remove %s' failed: %sr�Tr�)
rpr?rTrnr.r�r�r�rr�r�r�r))rr=rL�purger�r`rr�rYrUrJrCrWrZZ
upgradabler\r�r�r�r�r�r�r�rrrr r0�s>














.




r0c
Cs�|td
dg�
v
rt
d|�
�
|r&d}nd}|
r4d}
nd}
|jrDd}nd}dt||
|||f}t|�
� 
|�|�
\}}	}
Wd�
n1s�0


Y
|jr�t|	�
}ni}|r�|jd	||
f|	|
|d
�
t	||	v}|j
||	|
|d�
dS)Nrrz>Expected "autoremove" or "autoclean" cleanup operation, got %sr�r^r�r�z%s -y %s %s %s %s %sz'apt-get %s' failed: %sr�r�)ri�AssertionErrorr�r�rr�r�r�r)�CLEAN_OP_CHANGED_STRr�)
rr�r��	operationr`r�r�r�r�r�r�rr�rrr �cleanup�s*





.



r�c
Cs\|�d
dg�
\}
}}|j
r$t|�
}ni}|
r<|jd||
d�
|rT|jd|||
d�
||fS)N�apt-get�cleanzapt-get clean failed�r$r�r�zapt-get clean failed: %s)r�r�r�r))rZclean_rcZ	clean_outZ	clean_errZ
clean_diffrrr �aptclean�s








r��yesc
	Cs�
|r
d
}nd}|jrd}
nd}
d}d}|
dks:|
dkrH|rHt
}d|}
n4|
dkr^|s^t}d}
n|rpt
}d|}
nt}d	}
d
}|r�|t
kr�d}q�d}nd}|r�d
}nd}|r�dnd}|	r�dnd}	|dur�|r�t
}n|jdd�

|j|dd�}d||||||	|
|
f}|�
r|d|f
7}t|�
�$
|j||d�\}}}Wd�
n1�
sJ0


Y
|j�
rft|�
}ni}|�
r�|jd||
|f||d�
|t
k�
r�t	|v�
s�|tk�
r�t
|v�
r�|jd|||d�
|jd||||d�
dS)Nr�r^r��dist�fullzdist-upgrade %szfull-upgradezupgrade --with-new-pkgs %szsafe-upgradezR(^Do you want to ignore this warning and proceed anyway\?|^\*\*\*.*\[default=.*\])r�z--assume-yes --allow-untrustedr�z--allow-unauthenticatedz--allow-downgradeszfUnable to find APTITUDE in path. Please make sure to have APTITUDE in path or use 'force_apt_get=True'r#T)
�requiredz%s -y %s %s %s %s %s %s %sr�)
�prompt_regexz'%s %s' failed: %sr�F�r�r$r�r�)r�r$r�r�r)r�r��APTITUDE_CMDr)r�rr�r�r�r��
APTITUDE_ZEROr�)r�moder�rX�use_apt_getr`rr�r�r�r�Zapt_cmdr�Zupgrade_commandr�Zapt_cmd_pathr�r�r�r�rrrr r�sr

























�


4




(

r�c
Cs:d
}tj
�t�
rt�t�
j}ntj
�t�
r6t�t�
j}|S)z�Return mtime of a valid apt cache file.
    Stat the apt cache file and if no cache file is found return 0
    :returns: ``int``
    r
)rrr�APT_UPDATE_SUCCESS_STAMP_PATH�stat�st_mtime�APT_LISTS_PATH)
Z
cache_timerrr �get_cache_mtime`s




r�cCs,t�}t
j
�|�
}
tt�|
���
�
}|
|fS)
z�Return the mtime time stamp and the updated cache time.
    Always retrieve the mtime of the apt cache or set the `cache_mtime`
    variable to 0
    :returns: ``tuple``
    )r��datetimeZ
fromtimestamp�int�time�mktimeZ	timetuple)Zcache_mtime�
mtimestamp�updated_cache_timerrr �get_updated_cache_timems


r�c

Cs�d
}
zt�
�}
Wn�ty�
}
z�dt|�
��vr�d}|dkrd|�gd�
�
\}}}|d7}|dkr4qdq4|dkr�|jdt|�
||f|d�
t�
�}
n|jt|�
d	�

WYd
}~n
d
}~00|
S)
z8Attempt to get the cache object and update till it worksNz/var/lib/apt/lists/r
�)r��update�-qr9zAUpdating the cache to correct corrupt package lists failed:
%s
%s)r$r�r#)r�r��SystemErrorr�lowerr�r))rrLr�Zretriesr�ZsoZserrr �	get_cachezs 











&
r�c.Cs
tt
t
d
dgd�
d�t
ddg
d�t
dd	d
�t
ddd
�t
ddd
�t
dd
d
�t
dd
ddgd�t
dd�
t
d
dg
d�t
ddg
d�t
dd
d
�t
d
gd�
dd�t
d
td
�t
dd
d
�t
dd
d
�t
dd
d
�t
ddd
�t
dd
d
�t
dd
d
�t
dd
d
�t
dd
dg
d�t
dd
gd�
d�t
dd
d
�t
ddd
�d�gd�
g
gd�
g
d d!�}t|�
}
t
d"d#|
|
|
|
d$�}||_t�sHt�
rbd%nd&}t��
r�|jd'�	|t
j�d(�

gd)�
}t|d*�}|�
r�t
|�

|j�
r�|jd+|d(�

|j�d,�
d
u�
r�|�d-|�

n |�d.|�

|jd/d0gd d1�
|jd/d2d3|d4d5gd d1�
t|d*�}|�r2t
|�

n|jd'�	|t
j�d(�

|�d6d
�a|�d/�
a|j}|d7d u�r�t|�
\}}|d8�s�|d9�s�|d:�s�|jd |||d;�
|d9dk�r�d|d9<|d<}	|	�s�t�s�d }	d
}
d}|d=}|d>}
|d?}|d@}t|dA�
}|dB}|dC}|dD}t��|dE}t|�
}�z$|dF�r�z|dFtjdG<Wn"t�y�


|dFtjdG<Yn0|jddH�

t �\}}d
}
|d,�s�|dI�rt!j!�"�}t!j#|dIdJ�
}|||k�s�dK}|j�dL�
}|j�dM�
}t$�%ddN�dO}t&|�
D]~}z|j�s$|�'�
W
�q�Wn2t(j)j*�y`
}
zt+|�
}WYd}~n
d}~00dP||}||k�r�||}t�,|�

�q|jdQ|�r�|ndRd(�

|jddH�

t �\}} |j�s�|| k�r�d }
| }|d8�s|d9�s|d:�s|j|
|
|dS�
|dT}!|d9�r:t-||d9|!|dF|	||||
|�

|d:�r�|dUdk�r^|jdVd(�

dW|d:v�r~t.||d:�|d:<t/||d:|||
|||!||dAdX�

|d8�p�dY}"dZd[�|"D�
}#d\|"v}$|dUd]k}%|%�r|$�r|#�r�|jd^d(�

t-|d_|!|dF|	||||
|�

|#�r@|#D]&}&|&�0d`�
dak�r|jdb|&d(�

�q|#�s~|�rbt1||dc|!dD|dd�
|�r~t1||dc|!dB|dd�
|dUdev�r<d
}'d
}(d
})|dUd]k�r�d }'|dUdfk�r�d }(|dUdgk�r�d })t2||#||'|dF||!||(|)|||dh|
||di�\}*}+|
|+dj<||+dk<|*�r*|jfi|+�
�

n|jfi|+�
�

n(|dUdlk�rdt3||#||dc|!||dm�
Wn�t(j)j4�y�
},
z8t��|k�r�WYd},~,�q8|jdn|,d(�

WYd},~,nBd},~,0t(j)j*�y�
}-
z|jdo|-d(�

WYd}-~-n
d}-~-00|jdpd(�

�q8dS)qN�str�present)�absent�	build-depr��latestr�)r1�default�choices�boolzupdate-cache)r1�aliasesr��)r1r��r
F�listrMrU)r1�elementsr�r)
r1zdefault-releasezinstall-recommends)r�r��no�safer�r�)r1r�r�zallow-unauthenticated)r1r�r�)zallow-downgradeZallow_downgradeszallow-downgrades�<)rQ�update_cache�update_cache_retries�update_cache_retry_max_delay�cache_valid_timer�rY�debrXr�r�r�r`rrr�rr��
force_apt_getr�r�r�r��lock_timeout)r�rYr�)rr�rYr�r�T)Z
argument_specZmutually_exclusiveZrequired_one_ofZsupports_check_modeZnoninteractiveZcritical)ZDEBIAN_FRONTENDZDEBIAN_PRIORITY�LANG�LC_ALL�LC_MESSAGES�LC_CTYPEzpython3-aptz
python-aptz+{0} must be installed and visible from {1}.r#)z/usr/bin/python3z/usr/bin/python2z/usr/bin/pythonr�zX%s must be installed to use check mode. If run normally this module can auto-install it.r�z=Auto-installing missing dependency without updating cache: %sz9Updating cache and auto-installing missing dependency: %sr�r�)
Zcheck_rcrOz--no-install-recommendsz-yr�Zaptituder�rYr�r�r�r�r�r�r�r�r`rr�rr�rXzAPT::Default-Release)
Zprogressr�)
Zsecondsr^r�r�i�g@�@r�zFailed to update apt cache: %szunknown reason)r��
cache_updated�cache_update_timer�rQzdeb only supports state=presentz://)r�r�r�r�r�r�r`rc
Ssg|]}
|
dkr|
���qS)
�
*)
r_)rerYrrr rfzrgzmain.<locals>.<listcomp>r
r�zKunable to install additional packages when upgrading all installed packagesr�rEr9zinvalid package spec: %sr�)r�r�r`)r�r�r�r�r�r�r�)
r�rXr�r�r`r�r�rr�r�r�r�r�r

r
r�)r�r`rz.Failed to lock apt for exclusive operation: %sz%Could not fetch updated apt files: %szNUnexpected code path taken, we really should have exited before, this is a bug)5rr��DPKG_OPTIONSrZrun_command_environ_update�HAS_PYTHON_APTr
rr)�format�sys�
executabler	r
r�rr�r�r�r�r�r�r�r�rar�r�r@rGrBZConfigr*r�r��nowZ	timedelta�randomZrandint�ranger�r�rLZFetchFailedExceptionr�sleepr�rr��countr�rOr0ZLockFailedException).r�localeZAPT_ENV_VARSZapt_pkg_nameZinterpretersZinterpreter�
pZaptclean_stdoutZaptclean_stderrr�Z
updated_cacher�r�r�r�r�r`rr�rZdeadlinerLr�r	
Ztdeltar�r�r�Z	randomizeZretryr�ZdelayZpost_cache_update_timer�Zunfiltered_packagesr�Z
all_installedr�rYZ
state_upgradeZstate_builddepZstate_fixedr�r�ZlockFailedExceptionZfetchFailedExceptionrrr �main�s�









































�

�#





�


�










�












































�











�











�















�
































�






$

&r
�__main__)
rF)JZ
__future__rrrr1Z
__metaclass__Z
DOCUMENTATIONZEXAMPLESZRETURN�warnings�filterwarnings�
FutureWarningr�rH�	itertoolsrr

r:r&r
rr�Zansible.module_utils.basicrZ"ansible.module_utils.common.localerZ#ansible.module_utils.common.respawnrr	r
Zansible.module_utils._textrrZansible.module_utils.sixr
rZansible.module_utils.urlsrr
r�r�r�r�r�r�r�r�r
r�Zapt.debfiler@�ImportError�objectrr?rDrNrTrarpr�r�rOr�r�r0r�r�r�r�r�r�r
r5rrrr �<module>	s�
Mi





















�






MW	/




�


	_
�
0
�
&





�
Z

?