dpkg000075500000000173152377510470005433 0ustar00#!/bin/sh

# Skip if systemd is running.
if [ -d /run/systemd/system ]; then
  exit 0
fi

/usr/libexec/dpkg/dpkg-db-backup
man-db000075500000002563152377510470005651 0ustar00#!/bin/sh
#
# man-db cron daily

set -e

if [ -d /run/systemd/system ]; then
    # Skip in favour of systemd timer.
    exit 0
fi

# This should be set by cron, but apparently isn't always; see
# https://bugs.debian.org/209185.  Add fallbacks so that start-stop-daemon
# can be found.
export PATH="$PATH:/usr/local/sbin:/usr/sbin:/sbin"

iosched_idle=
# Don't try to change I/O priority in a vserver or OpenVZ.
if ! grep -Eq '(envID|VxID):.*[1-9]' /proc/self/status && \
   { [ ! -d /proc/vz ] || [ -d /proc/bc ]; }; then
    iosched_idle='--iosched idle'
fi

if ! [ -d /var/cache/man ]; then
    # Recover from deletion, per FHS.
    install -d -o man -g man -m 0755 /var/cache/man
fi

# expunge old catman pages which have not been read in a week
if [ -d /var/cache/man ]; then
  cd /
  # shellcheck disable=SC2086
  start-stop-daemon --start --pidfile /dev/null --startas /bin/sh \
	--oknodo --chuid man $iosched_idle -- -c \
	"find /var/cache/man -type f -name '*.gz' -atime +6 -print0 | \
	 xargs -r0 rm -f"
fi

# regenerate man database
if [ -x /usr/bin/mandb ]; then
    # --pidfile /dev/null so it always starts; mandb isn't really a daemon,
    # but we want to start it like one.
    # shellcheck disable=SC2086
    start-stop-daemon --start --pidfile /dev/null \
		      --startas /usr/bin/mandb --oknodo --chuid man \
		      $iosched_idle \
		      -- --no-purge --quiet
fi

exit 0
.placeholder000064400000000146152377510470007043 0ustar00# DO NOT EDIT OR REMOVE
# This file is a simple placeholder to keep dpkg from removing this directory
apt-compat000075500000002706152377510470006557 0ustar00#!/bin/sh

set -e

# Systemd systems use a systemd timer unit which is preferable to
# run. We want to randomize the apt update and unattended-upgrade
# runs as much as possible to avoid hitting the mirrors all at the
# same time. The systemd time is better at this than the fixed
# cron.daily time
if [ -d /run/systemd/system ]; then
    exit 0
fi

check_power()
{
    # laptop check, on_ac_power returns:
    #       0 (true)    System is on main power
    #       1 (false)   System is not on main power
    #       255 (false) Power status could not be determined
    # Desktop systems always return 255 it seems
    if command -v on_ac_power >/dev/null; then
        if on_ac_power; then
            :
        elif [ $? -eq 1 ]; then
            return 1
        fi
    fi
    return 0
}

# sleep for a random interval of time (default 30min)
# (some code taken from cron-apt, thanks)
random_sleep()
{
    RandomSleep=1800
    eval $(apt-config shell RandomSleep APT::Periodic::RandomSleep)
    if [ $RandomSleep -eq 0 ]; then
	return
    fi
    if [ -z "$RANDOM" ] ; then
        # A fix for shells that do not have this bash feature.
	RANDOM=$(( $(dd if=/dev/urandom bs=2 count=1 2> /dev/null | cksum | cut -d' ' -f1) % 32767 ))
    fi
    TIME=$(($RANDOM % $RandomSleep))
    sleep $TIME
}

# delay the job execution by a random amount of time
random_sleep

# ensure we don't do this on battery
check_power || exit 0

# run daily job
exec /usr/lib/apt/apt.systemd.daily
imunify-antivirus000075500000012315152377510470010211 0ustar00#!/bin/bash
#
# imunify-antivirus daily cron jobs.
#
# Usage:
#   ./imunify-antivirus.cron [<logfile>]
#
# if logfile is not specified, the output will be discarded
# If imunify360-firewall installed, doing nothing
log=${1:-/dev/null}
sh_update_call=${2:-no} # Skips check-domains call and returns return code
lock_wait_secs=${lock_wait_secs:-10800} # Max package manager waiting timeout, 3h
lock_sleep_secs=${lock_sleep_secs:-5} # Poll interval

detect_cloudways_environment() {
    hostname=$(hostname -f)
    lowercase_hostname=$(echo "$hostname" | tr '[:upper:]' '[:lower:]')

    if echo "$lowercase_hostname" | grep -Eq "\.cloudwaysapps\.com|cloudwaysstagingapps\.com"; then
        is_cloudways=true
    elif [ -f /usr/local/sbin/apm ]; then
        if /usr/local/sbin/apm info | grep -q "Cloudways"; then
            is_cloudways=true
        else
            is_cloudways=false
        fi
    else
        is_cloudways=false
    fi
}

wait_for_pkg_manager_idle() {
  local end=$((SECONDS + lock_wait_secs))
  local locks=(
    /var/lib/dpkg/lock-frontend
    /var/lib/dpkg/lock
    /var/lib/apt/lists/lock
    /var/cache/apt/archives/lock
  )

  while :; do
    local busy=0

    if command -v fuser >/dev/null 2>&1; then
      for l in "${locks[@]}"; do
        [ -e "$l" ] || continue
        local pids
        pids="$(fuser "$l" 2>/dev/null | tr -cd '0-9 ' | xargs || true)"
        if [ -n "$pids" ]; then
          busy=1
          echo "Waiting: lock $l is held by PIDs: $pids"
          for pid in $pids; do
            echo "  PID $pid: $(ps -p "$pid" -o comm=,args= 2>/dev/null | sed 's/^[[:space:]]*//')"
          done
        fi
      done
    else
      local pids
      pids="$(pgrep -x dpkg || true) $(pgrep -x apt || true) $(pgrep -x apt-get || true) \
            $(pgrep -x unattended-upgrades || true) $(pgrep -x apt.systemd.daily || true)"
      pids="$(echo "$pids" | tr -s ' ' | xargs || true)"
      if [ -n "$pids" ]; then
        busy=1
        echo "Waiting: package-manager processes running (PIDs: $pids)"
        for pid in $pids; do
          echo "  PID $pid: $(ps -p "$pid" -o comm=,args= 2>/dev/null | sed 's/^[[:space:]]*//')"
        done
      fi
    fi

    [ "$busy" -eq 0 ] && return 0

    if [ "$SECONDS" -ge "$end" ]; then
      echo "Timeout after ${lock_wait_secs}s waiting for dpkg/apt; exiting."
      return 1
    fi

    sleep "$lock_sleep_secs"
  done
}

main()
{
    /usr/libexec/report-command-error /opt/imunify360/venv/bin/python3 /opt/imunify360/venv/share/imunify360/scripts/delay_on_cron_call.py

    detect_cloudways_environment

    echo "Checking if imunify360-firewall is installed"
    if dpkg -s imunify360-firewall; then
        echo "Imunify360-installed, skipping antivirus cron"
        exit 0
    fi

    echo "Starting daily imunify-antivirus cron jobs at $(date)"
    if [ "$sh_update_call" = "no" ]; then
      /usr/bin/imunify360-agent check-domains
      echo "imunify360-agent check-domains RC: $?"
    fi

    PACKAGES="imunify-antivirus \
              ai-bolit \
              alt-common-release \
              alt-php-hyperscan \
              imunify-release \
              imunify-common \
              imunify-notifier \
              imunify-core \
              imunify-realtime-av \
              imunify-realtime-av-imrt2 \
              rustbolit \
              imunify-ui \
              imunify-wp-security \
              imunify360-venv \
              imunify-patchman \
              alt-php-internal \
              app-version-detector"

    if [ "$sh_update_call" != "yes" ] && [ -f /var/imunify360/stop-update ]; then
        echo "Imunify self-update disabled (/var/imunify360/stop-update present); skipping package update"
        return 0
    fi

    wait_for_pkg_manager_idle || exit 1

    /usr/libexec/report-command-error \
        apt-get update -y

    UPDATE_RC=$?
    echo "apt-get update RC after: $UPDATE_RC"

    # Filter out packages not available in any configured repo;
    # apt-get fails hard (rc=100) if any package is completely unknown,
    # unlike yum which silently skips missing packages.
    AVAILABLE_PACKAGES=""
    for pkg in $PACKAGES; do
        if apt-cache show "$pkg" >/dev/null 2>&1; then
            AVAILABLE_PACKAGES="$AVAILABLE_PACKAGES $pkg"
        else
            echo "Skipping $pkg: not available in configured repositories"
        fi
    done

    /usr/libexec/report-command-error \
        apt-mark unhold $AVAILABLE_PACKAGES

    export DEBCONF_NONINTERACTIVE_SEEN=true
    export DEBIAN_FRONTEND=noninteractive
    /usr/libexec/report-command-error \
        apt-get install --only-upgrade \
        -o "Dpkg::Lock::Timeout=600" \
        -o "Dpkg::Options::=--force-confdef" \
        -o "Dpkg::Options::=--force-confold" \
        -y $AVAILABLE_PACKAGES

    UPDATE_RC=$(( $UPDATE_RC + $? ))
    echo "apt-get install --only-upgrade RC after: $UPDATE_RC"

    if [ "$is_cloudways" = "true" ]; then
        echo "Cloudways environment detected, holding packages"
        /usr/libexec/report-command-error \
            apt-mark hold $AVAILABLE_PACKAGES
    fi

    /usr/bin/imunify-antivirus version
    echo "Finished daily imunify-antivirus cron jobs at $(date)"

    if [ "$sh_update_call" = "yes" ]; then
        exit $UPDATE_RC
    fi
}

main >> "$log" 2>&1
quota000075500000000535152377510470005641 0ustar00#! /bin/sh

# check if quota package is available
test -x /usr/sbin/warnquota || exit 0

# check if warnquota run is configured
test -f /etc/default/quota || exit 0
. /etc/default/quota

if [ "$run_warnquota" = "true" ]; then
	# check if quotas are enabled
	if grep -q '^[^#]*quota' /etc/fstab; then
        	/usr/sbin/warnquota -ug
	fi	
fi

exit 0
logrotate000075500000000640152377510470006505 0ustar00#!/bin/sh
export TMPDIR=/var/spool/logrotate/tmp

# skip in favour of systemd timer
if [ -d /run/systemd/system ]; then
    exit 0
fi

# this cronjob persists removals (but not purges)
if [ ! -x /usr/sbin/logrotate ]; then
    exit 0
fi

/usr/sbin/logrotate /etc/logrotate.conf
EXITVALUE=$?
if [ $EXITVALUE != 0 ]; then
    /usr/bin/logger -t logrotate "ALERT exited abnormally with [$EXITVALUE]"
fi
exit $EXITVALUE
apport000075500000000570152377510470006014 0ustar00#!/bin/sh -e
# clean all crash reports which are older than a week.
[ -d /var/crash ] || exit 0
find /var/crash/. ! -name . -prune -type f \( \( -size 0 -a \! -name '*.upload*' -a \! -name '*.drkonqi*' \) -o -mtime +7 \) -exec rm -f -- '{}' \;
find /var/crash/. ! -name . -prune -type d -regextype posix-extended -regex '.*/[0-9]{12}$' \( -mtime +7 \) -exec rm -Rf -- '{}' \;
sysstat000075500000001006152377510470006214 0ustar00#!/bin/sh
# Generate a daily summary of process accounting.  Since this will probably
# get kicked off in the morning, it is run against the previous day data.

set -e

# Our configuration file
DEFAULT=/etc/default/sysstat
# Default settings, overridden in the above file
ENABLED=false

# Skip in favour of systemd timer
[ ! -d /run/systemd/system ] || exit 0

[ -x /usr/lib/sysstat/sa2 ] || exit 0

# Read our config
[ -r "$DEFAULT" ] && . "$DEFAULT"

[ "$ENABLED" = "true" ]  || exit 0

exec /usr/lib/sysstat/sa2 -A