Function get_threat_intelligence_status

webapp_modern.py:13407–13485

Get threat intelligence system status

()

        'error': '',
        'warnings': []
    }

    # Remove stale lock files via sudo (the dir is not owned by ragnar).
    git_dir = os.path.join(repo_path, '.git')
    for lock_name in ('index.lock', 'shallow.lock', 'HEAD.lock',
                      os.path.join('refs', 'heads', 'noai.lock'),
                      os.path.join('refs', 'heads', 'main.lock')):
        lock_path = os.path.join(git_dir, lock_name)
        try:
            if os.path.isfile(lock_path):
                subprocess.run(
                    ['sudo', '-n', 'rm', '-f', lock_path],
                    capture_output=True, text=True, check=False
                )
        except Exception as e:
            logger.debug(f"Could not remove {lock_name}: {e}")

    # Ensure safe.directory is configured (avoids ownership errors when
    # /opt/pwnagotchi is owned by root but git runs via sudo).
    try:
        subprocess.run(
            ['sudo', '-n', 'git', 'config', '--global',
             'safe.directory', repo_path],
            capture_output=True, text=True, check=False
        )
    except Exception:
        pass

    # Perform git pull with one automatic retry on failure.
    max_attempts = 2
    for attempt in range(1, max_attempts + 1):
        try:
            pull_proc = subprocess.run(
                ['sudo', '-n', 'git', '-C', repo_path, 'pull'],
                capture_output=True,
                text=True,
                check=True,
                timeout=PWN_GIT_TIMEOUT
            )
            result['output'] = pull_proc.stdout.strip()
            logger.info(f"Pwn git pull completed: {result['output']}")
            break  # success
        except (subprocess.CalledProcessError, subprocess.TimeoutExpired) as e:
            if isinstance(e, subprocess.TimeoutExpired):
                error_msg = f"git pull timed out after {PWN_GIT_TIMEOUT}s"
            else:
                error_msg = e.stderr.strip() or e.stdout.strip() or str(e)
            logger.error(f"Pwn git pull attempt {attempt}/{max_attempts} failed: {error_msg}")

            if attempt >= max_attempts:
                result['error'] = f"Git pull failed: {error_msg}"
                return result

            # Auto-recover before retrying.
            recovered = False
            err_lower = error_msg.lower()

            # Lock file appeared during pull