mirror of
https://github.com/home-assistant/supervisor.git
synced 2025-11-19 07:50:17 +00:00
* Formally deprecate CodeNotary build config * Remove CodeNotary specific integrity checking The current code is specific to how CodeNotary was doing integrity checking. A future integrity checking mechanism likely will work differently (e.g. through EROFS based containers). Remove the current code to make way for a future implementation. * Drop CodeNotary integrity fixups * Drop unused tests * Fix pytest * Fix pytest * Remove CodeNotary related exceptions and handling Remove CodeNotary related exceptions and handling from the Docker interface. * Drop unnecessary comment * Remove Codenotary specific IssueType/SuggestionType * Drop Codenotary specific environment and secret reference * Remove unused constants * Introduce APIGone exception for removed APIs Introduce a new exception class APIGone to indicate that certain API features have been removed and are no longer available. Update the security integrity check endpoint to raise this new exception instead of a generic APIError, providing clearer communication to clients that the feature has been intentionally removed. * Drop content trust A cosign based signature verification will likely be named differently to avoid confusion with existing implementations. For now, remove the content trust option entirely. * Drop code sign test * Remove source_mods/content_trust evaluations * Remove content_trust reference in bootstrap.py * Fix security tests * Drop unused tests * Drop codenotary from schema Since we have "remove extra" in voluptuous, we can remove the codenotary field from the addon schema. * Remove content_trust from tests * Remove content_trust unsupported reason * Remove unnecessary comment * Remove unrelated pytest * Remove unrelated fixtures
325 lines
11 KiB
Python
325 lines
11 KiB
Python
"""Bootstrap Supervisor."""
|
|
|
|
# ruff: noqa: T100
|
|
import asyncio
|
|
from collections.abc import Callable
|
|
from importlib import import_module
|
|
import logging
|
|
import os
|
|
import signal
|
|
import warnings
|
|
|
|
from colorlog import ColoredFormatter
|
|
|
|
from .addons.manager import AddonManager
|
|
from .api import RestAPI
|
|
from .arch import CpuArch
|
|
from .auth import Auth
|
|
from .backups.manager import BackupManager
|
|
from .bus import Bus
|
|
from .const import (
|
|
ENV_HOMEASSISTANT_REPOSITORY,
|
|
ENV_SUPERVISOR_MACHINE,
|
|
ENV_SUPERVISOR_NAME,
|
|
ENV_SUPERVISOR_SHARE,
|
|
SOCKET_DOCKER,
|
|
LogLevel,
|
|
UpdateChannel,
|
|
)
|
|
from .core import Core
|
|
from .coresys import CoreSys
|
|
from .dbus.manager import DBusManager
|
|
from .discovery import Discovery
|
|
from .docker.manager import DockerAPI
|
|
from .hardware.manager import HardwareManager
|
|
from .homeassistant.module import HomeAssistant
|
|
from .host.manager import HostManager
|
|
from .ingress import Ingress
|
|
from .jobs import JobManager
|
|
from .misc.scheduler import Scheduler
|
|
from .misc.tasks import Tasks
|
|
from .mounts.manager import MountManager
|
|
from .os.manager import OSManager
|
|
from .plugins.manager import PluginManager
|
|
from .resolution.module import ResolutionManager
|
|
from .security.module import Security
|
|
from .services import ServiceManager
|
|
from .store import StoreManager
|
|
from .supervisor import Supervisor
|
|
from .updater import Updater
|
|
from .utils.sentry import capture_exception, init_sentry
|
|
|
|
_LOGGER: logging.Logger = logging.getLogger(__name__)
|
|
|
|
|
|
async def initialize_coresys() -> CoreSys:
|
|
"""Initialize supervisor coresys/objects."""
|
|
coresys = await CoreSys().load_config()
|
|
|
|
# Check if ENV is in development mode
|
|
if coresys.dev:
|
|
_LOGGER.warning("Environment variable 'SUPERVISOR_DEV' is set")
|
|
coresys.config.logging = LogLevel.DEBUG
|
|
coresys.config.debug = True
|
|
else:
|
|
coresys.config.modify_log_level()
|
|
|
|
# Initialize core objects
|
|
coresys.docker = await DockerAPI(coresys).post_init()
|
|
coresys.resolution = await ResolutionManager(coresys).load_config()
|
|
await coresys.resolution.load_modules()
|
|
coresys.jobs = await JobManager(coresys).load_config()
|
|
coresys.core = await Core(coresys).post_init()
|
|
coresys.plugins = await PluginManager(coresys).load_config()
|
|
coresys.arch = CpuArch(coresys)
|
|
coresys.auth = await Auth(coresys).load_config()
|
|
coresys.updater = await Updater(coresys).load_config()
|
|
coresys.api = RestAPI(coresys)
|
|
coresys.supervisor = Supervisor(coresys)
|
|
coresys.homeassistant = await HomeAssistant(coresys).load_config()
|
|
coresys.addons = await AddonManager(coresys).load_config()
|
|
coresys.backups = await BackupManager(coresys).load_config()
|
|
coresys.host = await HostManager(coresys).post_init()
|
|
coresys.hardware = await HardwareManager.create(coresys)
|
|
coresys.ingress = await Ingress(coresys).load_config()
|
|
coresys.tasks = Tasks(coresys)
|
|
coresys.services = await ServiceManager(coresys).load_config()
|
|
coresys.store = await StoreManager(coresys).load_config()
|
|
coresys.discovery = await Discovery(coresys).load_config()
|
|
coresys.dbus = DBusManager(coresys)
|
|
coresys.os = OSManager(coresys)
|
|
coresys.scheduler = Scheduler(coresys)
|
|
coresys.security = await Security(coresys).load_config()
|
|
coresys.bus = Bus(coresys)
|
|
coresys.mounts = await MountManager(coresys).load_config()
|
|
|
|
# Set Machine/Host ID
|
|
await coresys.init_machine()
|
|
|
|
# diagnostics
|
|
if coresys.config.diagnostics:
|
|
init_sentry(coresys)
|
|
|
|
# bootstrap config
|
|
initialize_system(coresys)
|
|
|
|
if coresys.dev:
|
|
coresys.updater.channel = UpdateChannel.DEV
|
|
|
|
# Convert datetime
|
|
logging.Formatter.converter = lambda *args: coresys.now().timetuple()
|
|
|
|
return coresys
|
|
|
|
|
|
def initialize_system(coresys: CoreSys) -> None:
|
|
"""Set up the default configuration and create folders."""
|
|
config = coresys.config
|
|
|
|
# Home Assistant configuration folder
|
|
if not config.path_homeassistant.is_dir():
|
|
_LOGGER.debug(
|
|
"Creating Home Assistant configuration folder at '%s'",
|
|
config.path_homeassistant,
|
|
)
|
|
config.path_homeassistant.mkdir()
|
|
|
|
# Supervisor ssl folder
|
|
if not config.path_ssl.is_dir():
|
|
_LOGGER.debug("Creating Supervisor SSL/TLS folder at '%s'", config.path_ssl)
|
|
config.path_ssl.mkdir()
|
|
|
|
# Supervisor addon data folder
|
|
if not config.path_addons_data.is_dir():
|
|
_LOGGER.debug(
|
|
"Creating Supervisor Add-on data folder at '%s'", config.path_addons_data
|
|
)
|
|
config.path_addons_data.mkdir(parents=True)
|
|
|
|
if not config.path_addons_local.is_dir():
|
|
_LOGGER.debug(
|
|
"Creating Supervisor Add-on local repository folder at '%s'",
|
|
config.path_addons_local,
|
|
)
|
|
config.path_addons_local.mkdir(parents=True)
|
|
|
|
if not config.path_addons_git.is_dir():
|
|
_LOGGER.debug(
|
|
"Creating Supervisor Add-on git repositories folder at '%s'",
|
|
config.path_addons_git,
|
|
)
|
|
config.path_addons_git.mkdir(parents=True)
|
|
|
|
# Supervisor tmp folder
|
|
if not config.path_tmp.is_dir():
|
|
_LOGGER.debug("Creating Supervisor temp folder at '%s'", config.path_tmp)
|
|
config.path_tmp.mkdir(parents=True)
|
|
|
|
# Supervisor backup folder
|
|
if not config.path_backup.is_dir():
|
|
_LOGGER.debug("Creating Supervisor backup folder at '%s'", config.path_backup)
|
|
config.path_backup.mkdir()
|
|
|
|
# Core backup folder
|
|
if not config.path_core_backup.is_dir():
|
|
_LOGGER.debug("Creating Core backup folder at '%s", config.path_core_backup)
|
|
config.path_core_backup.mkdir(parents=True)
|
|
|
|
# Share folder
|
|
if not config.path_share.is_dir():
|
|
_LOGGER.debug("Creating Supervisor share folder at '%s'", config.path_share)
|
|
config.path_share.mkdir()
|
|
|
|
# Apparmor folders
|
|
if not config.path_apparmor.is_dir():
|
|
_LOGGER.debug(
|
|
"Creating Supervisor Apparmor Profile folder at '%s'", config.path_apparmor
|
|
)
|
|
config.path_apparmor.mkdir()
|
|
|
|
if not config.path_apparmor_cache.is_dir():
|
|
_LOGGER.debug(
|
|
"Creating Supervisor Apparmor Cache folder at '%s'",
|
|
config.path_apparmor_cache,
|
|
)
|
|
config.path_apparmor_cache.mkdir()
|
|
|
|
# DNS folder
|
|
if not config.path_dns.is_dir():
|
|
_LOGGER.debug("Creating Supervisor DNS folder at '%s'", config.path_dns)
|
|
config.path_dns.mkdir()
|
|
|
|
# Audio folder
|
|
if not config.path_audio.is_dir():
|
|
_LOGGER.debug("Creating Supervisor audio folder at '%s'", config.path_audio)
|
|
config.path_audio.mkdir()
|
|
|
|
# Media folder
|
|
if not config.path_media.is_dir():
|
|
_LOGGER.debug("Creating Supervisor media folder at '%s'", config.path_media)
|
|
config.path_media.mkdir()
|
|
|
|
# Mounts folders
|
|
if not config.path_mounts.is_dir():
|
|
_LOGGER.debug("Creating Supervisor mounts folder at '%s'", config.path_mounts)
|
|
config.path_mounts.mkdir()
|
|
|
|
if not config.path_mounts_credentials.is_dir():
|
|
_LOGGER.debug(
|
|
"Creating Supervisor mounts credentials folder at '%s'",
|
|
config.path_mounts_credentials,
|
|
)
|
|
config.path_mounts_credentials.mkdir(mode=0o600)
|
|
|
|
# Emergency folder
|
|
if not config.path_emergency.is_dir():
|
|
_LOGGER.debug(
|
|
"Creating Supervisor emergency folder at '%s'", config.path_emergency
|
|
)
|
|
config.path_emergency.mkdir()
|
|
|
|
# Addon Configs folder
|
|
if not config.path_addon_configs.is_dir():
|
|
_LOGGER.debug(
|
|
"Creating Supervisor add-on configs folder at '%s'",
|
|
config.path_addon_configs,
|
|
)
|
|
config.path_addon_configs.mkdir()
|
|
|
|
if not config.path_cid_files.is_dir():
|
|
_LOGGER.debug("Creating Docker cidfiles folder at '%s'", config.path_cid_files)
|
|
config.path_cid_files.mkdir()
|
|
|
|
|
|
def warning_handler(message, category, filename, lineno, file=None, line=None):
|
|
"""Warning handler which logs warnings using the logging module."""
|
|
_LOGGER.warning("%s:%s: %s: %s", filename, lineno, category.__name__, message)
|
|
if isinstance(message, Exception):
|
|
capture_exception(message)
|
|
|
|
|
|
def initialize_logging() -> None:
|
|
"""Initialize the logging."""
|
|
logging.basicConfig(level=logging.INFO)
|
|
fmt = (
|
|
"%(asctime)s.%(msecs)03d %(levelname)s (%(threadName)s) [%(name)s] %(message)s"
|
|
)
|
|
colorfmt = f"%(log_color)s{fmt}%(reset)s"
|
|
datefmt = "%Y-%m-%d %H:%M:%S"
|
|
|
|
# suppress overly verbose logs from libraries that aren't helpful
|
|
logging.getLogger("aiohttp.access").setLevel(logging.WARNING)
|
|
|
|
logging.getLogger().handlers[0].setFormatter(
|
|
ColoredFormatter(
|
|
colorfmt,
|
|
datefmt=datefmt,
|
|
reset=True,
|
|
log_colors={
|
|
"DEBUG": "cyan",
|
|
"INFO": "green",
|
|
"WARNING": "yellow",
|
|
"ERROR": "red",
|
|
"CRITICAL": "red",
|
|
},
|
|
)
|
|
)
|
|
warnings.showwarning = warning_handler
|
|
|
|
|
|
def check_environment() -> None:
|
|
"""Check if all environment are exists."""
|
|
# check environment variables
|
|
for key in (ENV_SUPERVISOR_SHARE, ENV_SUPERVISOR_NAME):
|
|
try:
|
|
os.environ[key]
|
|
except KeyError:
|
|
_LOGGER.critical("Can't find '%s' environment variable!", key)
|
|
|
|
# Check Machine info
|
|
if not os.environ.get(ENV_HOMEASSISTANT_REPOSITORY) and not os.environ.get(
|
|
ENV_SUPERVISOR_MACHINE
|
|
):
|
|
_LOGGER.critical("Can't find any kind of machine/homeassistant details!")
|
|
elif not os.environ.get(ENV_SUPERVISOR_MACHINE):
|
|
_LOGGER.info("Use the old homeassistant repository for machine extraction")
|
|
|
|
# check docker socket
|
|
if not SOCKET_DOCKER.is_socket():
|
|
_LOGGER.critical("Can't find Docker socket!")
|
|
|
|
|
|
def register_signal_handlers(
|
|
loop: asyncio.AbstractEventLoop, shutdown_handler: Callable[[], None]
|
|
) -> None:
|
|
"""Register SIGTERM, SIGHUP and SIGKILL to stop the Supervisor."""
|
|
try:
|
|
loop.add_signal_handler(signal.SIGTERM, shutdown_handler)
|
|
except (ValueError, RuntimeError):
|
|
_LOGGER.warning("Could not bind to SIGTERM")
|
|
|
|
try:
|
|
loop.add_signal_handler(signal.SIGHUP, shutdown_handler)
|
|
except (ValueError, RuntimeError):
|
|
_LOGGER.warning("Could not bind to SIGHUP")
|
|
|
|
try:
|
|
loop.add_signal_handler(signal.SIGINT, shutdown_handler)
|
|
except (ValueError, RuntimeError):
|
|
_LOGGER.warning("Could not bind to SIGINT")
|
|
|
|
|
|
async def supervisor_debugger(coresys: CoreSys) -> None:
|
|
"""Start debugger if needed."""
|
|
if not coresys.config.debug:
|
|
return
|
|
|
|
debugpy = await coresys.run_in_executor(import_module, "debugpy")
|
|
|
|
_LOGGER.info("Initializing Supervisor debugger")
|
|
|
|
debugpy.listen(("0.0.0.0", 33333))
|
|
if coresys.config.debug_block:
|
|
_LOGGER.info("Wait until debugger is attached")
|
|
debugpy.wait_for_client()
|