vigil/services/apt.py

78 lines
2.6 KiB
Python

# _ __________________
# | | / / _/ ____/ _/ /
# | | / // // / __ / // /
# | |/ // // /_/ // // /___
# |___/___/\____/___/_____/
# © Uthmn 2025 under MIT license
import subprocess
import os
import sys
import re
def require_root():
if os.geteuid() != 0:
print("This script requires root privileges. Please run with sudo.")
sys.exit(1)
def detect_apt():
try:
subprocess.run(["apt", "--version"], capture_output=True, text=True, check=True)
return True
except FileNotFoundError:
return False
except subprocess.CalledProcessError as e:
raise RuntimeError(f"Error running apt: {e.stderr or e}")
def check_updates():
# Update package list
try:
subprocess.run(["apt", "update"], capture_output=True, text=True, check=True, timeout=300)
except FileNotFoundError:
raise FileNotFoundError("apt not found on this system.")
except subprocess.CalledProcessError as e:
raise RuntimeError(f"Error running 'apt update': {e.stderr or e.stdout or e}")
# List upgradable packages
try:
result = subprocess.run(
["apt", "list", "--upgradable"],
capture_output=True,
text=True,
check=True,
timeout=60,
)
upgrades = result.stdout.strip()
lines = [line for line in upgrades.splitlines() if line.strip()]
if len(lines) <= 1: # Only the header
return {} # No upgrades
package_dict = {}
for line in lines[1:]: # skip header
# Example line format:
# docker-ce/focal-security 5:24.0.1~3-0~ubuntu-focal amd64 [upgradable from: 5:23.0.0~3-0~ubuntu-focal]
match = re.match(
r"([^/]+)/([^\s]+)\s+([^\s]+)\s+[^\s]+\s+\[upgradable from: ([^\]]+)\]", line
)
if match:
name, repo, latest_version, installed_version = match.groups()
# Detect security update based on repo name containing "security"
is_security = "security" in repo.lower()
package_dict[name] = {
"installed_version": installed_version,
"latest_version": latest_version,
"repo": repo,
"security": is_security
}
return package_dict
except subprocess.CalledProcessError as e:
raise RuntimeError(f"Error running 'apt list --upgradable': {e.stderr or e.stdout or e}")
if __name__ == "__main__":
require_root()
if detect_apt():
updates = check_updates()
print(updates)