Debian security upgrade

package           : tis-debian-security-upgrade
version           : 0-0
architecture      : all
section           : base
priority          : optional
name              : Debian security upgrade
categories        : System and network
maintainer        : Hubert TOUVET
description       : Upgrade of Debian (only critical packages)
depends           : 
conflicts         : 
maturity          : PROD
locale            : 
target_os         : debian_based
min_wapt_version  : 
sources           : 
installed_size    : 
impacted_process  : 
description_fr    : 
description_pl    : 
description_de    : 
description_es    : 
description_pt    : 
description_it    : 
description_nl    : 
description_ru    : 
audit_schedule    : 
editor            : 
keywords          : 
licence           : 
homepage          : 
package_uuid      : b711bf42-a6cd-4019-9b14-4061b46bfebe
valid_from        : 
valid_until       : 
forced_install_on : 
changelog         : 
min_os_version    : 
max_os_version    : 
icon_sha256sum    : 7891f1ca19ac8a9e41cb2963c0833bb3424a1dcc3f89e6ae484b1841a67063b2
signer            : Tranquil IT
signer_fingerprint: 8c5127a75392be9cc9afd0dbae1222a673072c308c14d88ab246e23832e8c6bb
signature_date    : 2025-04-16T12:17:09.000000
signed_attributes : package,version,architecture,section,priority,name,categories,maintainer,description,depends,conflicts,maturity,locale,target_os,min_wapt_version,sources,installed_size,impacted_process,description_fr,description_pl,description_de,description_es,description_pt,description_it,description_nl,description_ru,audit_schedule,editor,keywords,licence,homepage,package_uuid,valid_from,valid_until,forced_install_on,changelog,min_os_version,max_os_version,icon_sha256sum,signer,signer_fingerprint,signature_date,signed_attributes
signature         : uH37YNNWUFBSMekaGkaqZAJ2BL4xzZ3dy8nm6diG6yrTS33BYH2k+WgLDcT3FJU/q7QbaehZvp19H/nnqEmXRT43u8qqHGPinntipjt4R8wMRQ4bUD21vgTOQeXT9RVmcUn+SjDZmXeDijeTej/ZiD2/3QopTfYAXqa9GUrP9OlgRu7iy6zXE+Zwiy7b2DlzyStqPSJDp8CTFVtMLng96unQtVFyBG8c+H0QgVpMjEfPo+xBwcuS+080pvxyswqAnLe6B22FYiNhbq50Vs77TZA0MkwNWEip7bnjJgypbgs3eQ0+gWxjfQHGQ+H9jtpTj8lwE/QwMtEYnoD1U+Yf6w==

# -*- coding: utf-8 -*-
from setuphelpers import *

env = {"LANG":"C","DEBIAN_FRONTEND":"noninteractive","DEBIAN_PRIORITY":"critical"}

def dolog(msg):
    print(msg)

def install():
    proxy_option = ''
    if force:
        if get_proxies():
            proxy_option='-o Acquire::http::proxy="%s"' % get_proxies()['http']
        run('apt-get %s -qy update' % proxy_option, env=env, accept_returncodes=[0,100], on_write=dolog)
        run('apt-get %s -qy -o "Dpkg::Options::=--force-confdef" -o "Dpkg::Options::=--force-confold" upgrade' % proxy_option, env=env, accept_returncodes=[0,100], timeout=3600, on_write=dolog)
        run('apt-get %s -qy autoclean' % proxy_option, env=env, accept_returncodes=[0,100], on_write=dolog)

def audit():
    proxy_option = ''
    if get_proxies():
        proxy_option='-o Acquire::http::proxy="%s"' % get_proxies()['http']
    print(run('apt-get -qy update',accept_returncodes=[0,100]))
    upgrades_out = run('apt %s list --upgradable' % proxy_option,env=env,accept_returncodes=[0,100])
    if upgrades_out:
        upgrades_out = upgrades_out.splitlines()
        start_idx = upgrades_out.index('Listing...')
        upgrades = upgrades_out[start_idx+1:]

        upgrades_dict = {}

        if upgrades:
            print('--- packages to upgrade ---')

            for u in upgrades:
                package_distri, new_version, arch, current_version_message = u.split(' ',3)
                current_version = current_version_message[1:-1].rsplit(' ',1)[1]
                package,distri = package_distri.split('/',1)
                upgrades_dict[package] = {'package': package, 'current_version': current_version ,'new_version': new_version, 'channel': distri}
                print(' %s %s -> %s (%s)' % (package,current_version, new_version, distri))

        WAPT.write_audit_data_if_changed('debian','upgrades',{
            'count': len(upgrades_dict),
            'packages': upgrades_dict
            },keep_days=100)

        if [ package for package in upgrades_dict.keys() if not package.startswith('linux-image-amd64')]:
            return 'WARNING'
        else:
            return 'OK'
    return 'ERROR'

38d056ab130f7bf7c481c12636a4e9959de36561d3dfcbe54c6e3571bc0c1dc3 : WAPT/certificate.crt
f8f9ef7919cd2850ace3a246212b385c110bda307987cb4483f02bd11625382b : WAPT/control
7891f1ca19ac8a9e41cb2963c0833bb3424a1dcc3f89e6ae484b1841a67063b2 : WAPT/icon.png
44a67b807b3ca3911f038413c2a8a5c15fd21df67e5de236b994ea2e8b598a77 : luti.json
a18c589a20537f6d2a901f7845b057330a47224e6ec5db49be235ab20fbf10c6 : setup.py