/*
  Copyright 2024 Northern.tech AS

  This file is part of CFEngine 3 - written and maintained by Northern.tech AS.

  This program is free software; you can redistribute it and/or modify it
  under the terms of the GNU General Public License as published by the
  Free Software Foundation; version 3.

  This program is distributed in the hope that it will be useful,
  but WITHOUT ANY WARRANTY; without even the implied warranty of
  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  GNU General Public License for more details.

  You should have received a copy of the GNU General Public License
  along with this program; if not, write to the Free Software
  Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA  02111-1307, USA

  To the extent this program is licensed as part of the Enterprise
  versions of CFEngine, the applicable Commercial Open Source License
  (COSL) may apply to this file if you as a licensee so wish it. See
  included file COSL.txt.
*/

#include <package_module.h>
#include <pipes.h>
#include <exec_tools.h>
#include <signals.h>
#include <buffer.h>
#include <string_lib.h>
#include <path.h>
#include <actuator.h>
#include <file_lib.h>
#include <known_dirs.h>
#include <string_sequence.h>
#include <locks.h>
#include <rlist.h>
#include <policy.h>
#include <eval_context.h>
#include <changes_chroot.h>     /* RecordPkgOperationInChroot() */
#include <simulate_mode.h>      /* CHROOT_PKG_OPERATION_* */
#include <csv_writer.h>         /* safely write csv entries */

#define INVENTORY_LIST_BUFFER_SIZE 100 * 80 /* 100 entries with 80 characters
                                             * per line */

static bool UpdateSinglePackageModuleCache(EvalContext *ctx,
                                    const PackageModuleWrapper *module_wrapper,
                                    UpdateType type, bool force_update);
static void GetPackageModuleExecInfo(const PackageModuleBody *package_module, char **exec_path,
                                     char **script_path, char **script_path_quoted, char **script_exec_opts);
static int NegotiateSupportedAPIVersion(PackageModuleWrapper *wrapper);


void DeletePackageModuleWrapper(PackageModuleWrapper *wrapper)
{
    if (wrapper != NULL)
    {
        free(wrapper->path);
        free(wrapper->script_path);
        free(wrapper->script_path_quoted);
        free(wrapper->script_exec_opts);
        free(wrapper->name);
        free(wrapper);
    }
}

PackageModuleWrapper *NewPackageModuleWrapper(PackageModuleBody *package_module)
{
    assert(package_module && package_module->name);

    PackageModuleWrapper *wrapper = xmalloc(sizeof(PackageModuleWrapper));

    GetPackageModuleExecInfo(package_module, &(wrapper->path),
                             &(wrapper->script_path), &(wrapper->script_path_quoted),
                             &(wrapper->script_exec_opts));
    wrapper->name = SafeStringDuplicate(package_module->name);
    wrapper->package_module = package_module;

    if (wrapper->path == NULL)
    {
        Log(LOG_LEVEL_ERR, "No executable for the package module '%s'", package_module->name);
        DeletePackageModuleWrapper(wrapper);
        return NULL;
    }

    /* Check if the given files exist and have the required permissions. */
    if (wrapper->script_path != NULL)
    {
        /* we were given a path to a script to execute with the given
         * interpreter */
        const char *interpreter_path = wrapper->path;
        const char *script_path = wrapper->script_path;

        if (access(interpreter_path, X_OK) != 0)
        {
            Log(LOG_LEVEL_ERR,
                "Cannot find package module interpreter at location '%s'"
                " or access to the file is restricted: %s",
                wrapper->path, GetErrorStr());
            DeletePackageModuleWrapper(wrapper);
            return NULL;
        }
        if (access(script_path, R_OK) != 0)
        {
            Log(LOG_LEVEL_ERR,
                "Cannot find package module script at location '%s'"
                " or access to the file is restricted: %s",
                wrapper->script_path, GetErrorStr());
            DeletePackageModuleWrapper(wrapper);
            return NULL;
        }
    }
    else if (access(wrapper->path, X_OK) != 0)
    {
        /* no script path specified --> the given path has to be executable */
        Log(LOG_LEVEL_ERR,
            "Cannot find package module at location '%s' or access to file is restricted: %s",
            wrapper->path, GetErrorStr());
        DeletePackageModuleWrapper(wrapper);
        return NULL;
    }

    /* Negotiate API version */
    wrapper->supported_api_version = NegotiateSupportedAPIVersion(wrapper);
    if (wrapper->supported_api_version != 1)
    {
        Log(LOG_LEVEL_ERR,
            "Unsupported package module wrapper API version: %d",
            wrapper->supported_api_version);
        DeletePackageModuleWrapper(wrapper);
        return NULL;
    }

    Log(LOG_LEVEL_DEBUG,
        "Successfully created package module wrapper for '%s' package module.",
        package_module->name);

    return wrapper;
}

static int PackageWrapperCommunicate(const PackageModuleWrapper *wrapper, const char *args,
                                     const char *request, Rlist **response)
{
    char *all_args = NULL;
    if (wrapper->script_path != NULL)
    {
        if (wrapper->script_exec_opts == NULL)
        {
            all_args = StringConcatenate(3, wrapper->script_path_quoted, " ", args);
            args = all_args;
        }
        else
        {
            all_args = StringConcatenate(5, wrapper->script_exec_opts, " ",
                                         wrapper->script_path_quoted, " ", args);
            args = all_args;
        }
    }
    int ret = PipeReadWriteData(wrapper->path, args, request, response,
                                PACKAGE_PROMISE_SCRIPT_TIMEOUT_SEC,
                                PACKAGE_PROMISE_TERMINATION_CHECK_SEC);
    free(all_args);

    return ret;
}

void UpdatePackagesCache(EvalContext *ctx, bool force_update)
{
    Log(LOG_LEVEL_DEBUG, "Updating package cache.");

    PackagePromiseGlobalLock package_lock =
            AcquireGlobalPackagePromiseLock(ctx);

    if (package_lock.g_lock.lock == NULL)
    {
        Log(LOG_LEVEL_INFO, "Can not acquire global lock for package promise. "
            "Skipping updating cache.");
        return;
    }

    Rlist *default_inventory = GetDefaultInventoryFromContext(ctx);

    for (const Rlist *rp = default_inventory; rp != NULL; rp = rp->next)
    {
        const char *pm_name =  RlistScalarValue(rp);

        PackageModuleBody *module = GetPackageModuleFromContext(ctx, pm_name);
        if (!module)
        {
            Log(LOG_LEVEL_ERR,
                "Can not find body for package module: %s", pm_name);
            continue;
        }

        PackageModuleWrapper *module_wrapper = NewPackageModuleWrapper(module);

        if (!module_wrapper)
        {
            Log(LOG_LEVEL_ERR,
                "Can not set up wrapper for module: %s", pm_name);
            continue;
        }

        UpdateSinglePackageModuleCache(ctx, module_wrapper,
                                       UPDATE_TYPE_INSTALLED, force_update);
        UpdateSinglePackageModuleCache(ctx, module_wrapper,
                                       force_update ? UPDATE_TYPE_UPDATES :
                                           UPDATE_TYPE_LOCAL_UPDATES,
                                       force_update);

        DeletePackageModuleWrapper(module_wrapper);
    }
    YieldGlobalPackagePromiseLock(package_lock);
}

PackagePromiseGlobalLock AcquireGlobalPackagePromiseLock(EvalContext *ctx)
{
    Bundle bundle = {.name = "package_global"};
    BundleSection section = {.promise_type = "package_global",
                             .parent_bundle = &bundle};
    Promise pp = {.promiser = "package_global",
                  .parent_section = &section};

    CfLock package_promise_global_lock;

    package_promise_global_lock =
            AcquireLock(ctx, GLOBAL_PACKAGE_PROMISE_LOCK_NAME, VUQNAME, CFSTARTTIME,
                        0, VEXPIREAFTER, &pp, false);

    return (PackagePromiseGlobalLock) {.g_lock = package_promise_global_lock,
                                       .lock_ctx = ctx};
}

void YieldGlobalPackagePromiseLock(PackagePromiseGlobalLock lock)
{
    Bundle bundle = {.name = "package_global"};
    BundleSection section = {.promise_type = "package_global",
                             .parent_bundle = &bundle};
    Promise pp = {.promiser = "package_global",
                  .parent_section = &section};

    YieldCurrentLockAndRemoveFromCache(lock.lock_ctx, lock.g_lock,
                                       GLOBAL_PACKAGE_PROMISE_LOCK_NAME, &pp);
}

static void ParseAndLogErrorMessage(const Rlist *data)
{
    for (const Rlist *rp = data; rp != NULL; rp = rp->next)
    {
        char *line = RlistScalarValue(rp);

        if (StringStartsWith(line, "Error="))
        {
            Log(LOG_LEVEL_ERR, "package module: %s", line);
        }
        else if (StringStartsWith(line, "ErrorMessage="))
        {
            Log(LOG_LEVEL_ERR, "package module: %s", line);
        }
        else
        {
            Log(LOG_LEVEL_VERBOSE,
                "Unsupported response from package module: %s", line);
        }
    }
}

static void FreePackageInfo(PackageInfo *package_info)
{
    if (package_info)
    {
        free(package_info->arch);
        free(package_info->name);
        free(package_info->version);

        free(package_info);
    }
}

static char *ParseOptions(Rlist *options)
{
    if (RlistIsNullList(options))
    {
        return SafeStringDuplicate("");
    }

    Buffer *data = BufferNew();
    for (Rlist *rp = options; rp != NULL; rp = rp->next)
    {
        char *value = RlistScalarValue(rp);
        BufferAppendString(data, "options=");
        BufferAppendString(data, value);
        BufferAppendString(data, "\n");
    }
    return BufferClose(data);
}

static PackageInfo *ParseAndCheckPackageDataReply(const Rlist *data)
{
    PackageInfo * package_data = xcalloc(1, sizeof(PackageInfo));

    for (const Rlist *rp = data; rp != NULL; rp = rp->next)
    {
        const char *line = RlistScalarValue(rp);

        if (StringStartsWith(line, "PackageType="))
        {
            const char *type = line + strlen("PackageType=");
            if (StringEqual(type, "file"))
            {
                package_data->type = PACKAGE_TYPE_FILE;
            }
            else if (StringEqual(type, "repo"))
            {
                package_data->type = PACKAGE_TYPE_REPO;
            }
            else
            {
                Log(LOG_LEVEL_VERBOSE, "unsupported package type: %s", type);
                free(package_data);
                return NULL;
            }
        }
        else if (StringStartsWith(line, "Name="))
        {
            if (package_data->name)
            {
                /* Some error occurred as we already have name for
                 * given package. */
                Log(LOG_LEVEL_ERR,
                    "Extraneous package name line received: [%s] %s",
                    line, package_data->name);
                free(package_data);
                return NULL;
            }
            package_data->name =
                SafeStringDuplicate(line + strlen("Name="));
        }
        else if (StringStartsWith(line, "Version="))
        {
            if (package_data->version)
            {
                /* Some error occurred as we already have version for
                 * given package. */
                Log(LOG_LEVEL_ERR,
                    "Extraneous package version line received: [%s] %s",
                    line, package_data->version);
                free(package_data);
                return NULL;
            }
            package_data->version =
                SafeStringDuplicate(line + strlen("Version="));
        }
        else if (StringStartsWith(line, "Architecture="))
        {
            if (package_data->arch)
            {
                /* Some error occurred as we already have arch for
                 * given package. */
               Log(LOG_LEVEL_ERR,
                   "Extraneous package architecture line received: [%s] %s",
                   line, package_data->arch);
                free(package_data);
                return NULL;
            }
            package_data->arch =
                SafeStringDuplicate(line + strlen("Architecture="));
        }
        /* For handling errors */
        else if (StringStartsWith(line, "Error="))
        {
            Log(LOG_LEVEL_ERR, "package module: %s", line);
        }
        else if (StringStartsWith(line, "ErrorMessage="))
        {
            Log(LOG_LEVEL_ERR, "package module: %s", line);
        }
        else
        {
            Log(LOG_LEVEL_VERBOSE,
                "Unsupported response from package module: %s", line);
        }
    }

    return package_data;
}

static int NegotiateSupportedAPIVersion(PackageModuleWrapper *wrapper)
{
    assert(wrapper);

    Log(LOG_LEVEL_DEBUG, "Getting supported API version.");

    int api_version = -1;

    Rlist *response = NULL;
    if (PackageWrapperCommunicate(wrapper, "supports-api-version", "",
                                  &response) != 0)
    {
        Log(LOG_LEVEL_INFO,
            "Error occurred while getting supported API version.");
        return -1;
    }

    if (response)
    {
        if (RlistLen(response) == 1)
        {
            api_version = atoi(RlistScalarValue(response));
            Log(LOG_LEVEL_DEBUG, "package wrapper API version: %d", api_version);
        }
        RlistDestroy(response);
    }
    return api_version;
}

/* IMPORTANT: this might not return all the data we need like version
              or architecture but package name MUST be known. */
static
PackageInfo *GetPackageData(const char *name, const char *version,
                            const char *architecture, Rlist *options,
                            const PackageModuleWrapper *wrapper)
{
    assert(wrapper);

    Log(LOG_LEVEL_DEBUG, "Getting package '%s' data.", name);

    char *options_str = ParseOptions(options);
    char *ver = version ?
        StringFormat("Version=%s\n", version) : NULL;
    char *arch = architecture ?
        StringFormat("Architecture=%s\n", architecture) : NULL;

    char *request =
            StringFormat("%sFile=%s\n%s%s", options_str, name,
                         ver ? ver : "", arch ? arch : "");
    free(ver);
    free(arch);

    Rlist *response = NULL;
    if (PackageWrapperCommunicate(wrapper, "get-package-data", request, &response) != 0)
    {
        Log(LOG_LEVEL_INFO, "Some error occurred while communicating with "
            "package module while collecting package data.");
        free(options_str);
        free(request);
        return NULL;
    }

    PackageInfo *package_data = NULL;

    if (response)
    {
        package_data = ParseAndCheckPackageDataReply(response);
        RlistDestroy(response);

        if (package_data)
        {
            /* At this point at least package name and type MUST be known
             * (if no error) */
            if (!package_data->name || package_data->type == PACKAGE_TYPE_NONE)
            {
                Log(LOG_LEVEL_INFO, "Unknown package name or type.");
                FreePackageInfo(package_data);
                package_data = NULL;
            }
        }
    }
    free(options_str);
    free(request);

    return package_data;
}

static void GetPackageModuleExecInfo(const PackageModuleBody *package_module, char **exec_path,
                                     char **script_path, char **script_path_quoted,
                                     char **script_exec_opts)
{

    assert(exec_path != NULL);
    assert(script_path != NULL);
    assert(script_path_quoted != NULL);

    char *package_module_path = NULL;

    if (package_module->module_path != NULL && !StringEqual(package_module->module_path, ""))
    {
        package_module_path = xstrdup(package_module->module_path);
    }
    else
    {
        package_module_path = StringFormat("%s%c%s%c%s%c%s", GetWorkDir(), FILE_SEPARATOR,
                                           "modules", FILE_SEPARATOR, "packages", FILE_SEPARATOR,
                                           package_module->name);
    }

    if (package_module->interpreter && !StringEqual(package_module->interpreter, ""))
    {
        *script_path = package_module_path;
        *script_path_quoted = Path_GetQuoted(*script_path);

        if (strchr(package_module->interpreter, ' ') == NULL)
        {
            /* No spaces in the 'interpreter' string, easy! Just interpreter path given, no opts. */
            *exec_path = xstrdup(package_module->interpreter);
            *script_exec_opts = NULL;
        }
        else
        {
            /* we need to split the interpreter command from the (potential)
             * interpreter args */
            ArgGetExecutableAndArgs(package_module->interpreter, exec_path, script_exec_opts);
        }
    }
    else
    {
        *exec_path = package_module_path;
        *script_path = NULL;
        *script_path_quoted = NULL;
        *script_exec_opts = NULL;
    }
}

static int IsPackageInCache(EvalContext *ctx,
                            const PackageModuleWrapper *module_wrapper,
                            const char *name, const char *ver, const char *arch)
{
    const char *version = ver;
    /* Handle latest version in specific way for repo packages.
     * Please note that for file packages 'latest' version is not supported
     * and check against that is made in CheckPolicyAndPackageInfoMatch(). */
    if (version && StringEqual(version, "latest"))
    {
        version = NULL;
    }

    /* Make sure cache is updated. */
    if (ctx)
    {
        if (!UpdateSinglePackageModuleCache(ctx, module_wrapper,
                                            UPDATE_TYPE_INSTALLED, false))
        {
            Log(LOG_LEVEL_ERR, "Can not update cache.");
        }
    }

    CF_DB *db_cached;
    if (!OpenSubDB(&db_cached, dbid_packages_installed,
                   module_wrapper->package_module->name))
    {
        Log(LOG_LEVEL_INFO, "Can not open cache database.");
        return -1;
    }

    char *key = NULL;
    if (version && arch)
    {
        key = StringFormat("N<%s>V<%s>A<%s>", name, version, arch);
    }
    else if (version)
    {
        key = StringFormat("N<%s>V<%s>", name, version);
    }
    else if (arch)
    {
        key = StringFormat("N<%s>A<%s>", name, arch);
    }
    else
    {
         key = StringFormat("N<%s>", name);
    }

    int is_in_cache = 0;
    char buff[1];

    Log(LOG_LEVEL_DEBUG, "Looking for key in installed packages cache: %s", key);

    if (ReadDB(db_cached, key, buff, 1))
    {
        /* Just make sure DB is not corrupted. */
        if (buff[0] == '1')
        {
            is_in_cache = 1;
        }
        else
        {
            Log(LOG_LEVEL_INFO,
                "Seem to have corrupted data in cache database");
            is_in_cache = -1;
        }
    }

    Log(LOG_LEVEL_DEBUG,
        "Looking for package %s in cache returned: %d", name, is_in_cache);

    CloseDB(db_cached);

    return is_in_cache;
}

void WritePackageDataToDB(CF_DB *db_installed,
        const char *name, const char *ver, const char *arch,
        UpdateType type)
{
    char package_key[strlen(name) + strlen(ver) +
                     strlen(arch) + 11];

    xsnprintf(package_key, sizeof(package_key),
              "N<%s>", name);
    if (type == UPDATE_TYPE_INSTALLED)
    {
        WriteDB(db_installed, package_key, "1", 1);
        xsnprintf(package_key, sizeof(package_key),
                "N<%s>V<%s>", name, ver);
        WriteDB(db_installed, package_key, "1", 1);
        xsnprintf(package_key, sizeof(package_key),
                "N<%s>A<%s>", name, arch);
        WriteDB(db_installed, package_key, "1", 1);
        xsnprintf(package_key, sizeof(package_key),
                "N<%s>V<%s>A<%s>", name, ver, arch);
        WriteDB(db_installed, package_key, "1", 1);
    }
    else if (HasKeyDB(db_installed, package_key, strlen(package_key) + 1))
    {
        /* type == UPDATE_TYPE_UPDATES || type == UPDATE_TYPE_LOCAL_UPDATES */
        size_t val_size =
                ValueSizeDB(db_installed, package_key, strlen(package_key) + 1);
        char buff[val_size + strlen(arch) + strlen(ver) + 8];

        ReadDB(db_installed, package_key, buff, val_size);
        xsnprintf(buff + val_size, sizeof(package_key), "V<%s>A<%s>\n",
                  ver, arch);
        Log(LOG_LEVEL_DEBUG,
            "Updating available updates key '%s' with value '%s'",
            package_key, buff);

        WriteDB(db_installed, package_key, buff, strlen(buff));
    }
    else
    {
        /* type == UPDATE_TYPE_UPDATES || type == UPDATE_TYPE_LOCAL_UPDATES */
        char buff[strlen(arch) + strlen(ver) + 8];
        xsnprintf(buff, sizeof(package_key), "V<%s>A<%s>\n", ver, arch);
        WriteDB(db_installed, package_key, buff, strlen(buff));
    }
}

int UpdatePackagesDB(Rlist *data, const char *pm_name, UpdateType type)
{
    assert(pm_name);

    bool have_error = false;

    CF_DB *db_cached;
    dbid db_id = type == UPDATE_TYPE_INSTALLED ? dbid_packages_installed :
                                                 dbid_packages_updates;
    if (OpenSubDB(&db_cached, db_id, pm_name))
    {
        CleanDB(db_cached);

        Writer *idw = StringWriter();
        CsvWriter *idcw = CsvWriterOpen(idw);

        const char *package_data[3] = {NULL, NULL, NULL};

        for (const Rlist *rp = data; rp != NULL; rp = rp->next)
        {
            const char *line = RlistScalarValue(rp);

            if (StringStartsWith(line, "Name="))
            {
                if (package_data[0])
                {
                    if (package_data[1] && package_data[2])
                    {
                        WritePackageDataToDB(db_cached, package_data[0],
                                             package_data[1], package_data[2],
                                             type);

                        CsvWriterField(idcw, package_data[0]);
                        CsvWriterField(idcw, package_data[1]);
                        CsvWriterField(idcw, package_data[2]);
                        CsvWriterNewRecord(idcw);
                    }
                    else
                    {
                        /* some error occurred */
                        Log(LOG_LEVEL_VERBOSE,
                                "Malformed response from package module for package %s",
                                package_data[0]);
                    }
                    package_data[1] = NULL;
                    package_data[2] = NULL;
                }

                /* This must be the first entry on a list */
                package_data[0] = line + strlen("Name=");

            }
            else if (StringStartsWith(line, "Version="))
            {
                package_data[1] = line + strlen("Version=");
            }
            else if (StringStartsWith(line, "Architecture="))
            {
                package_data[2] = line + strlen("Architecture=");
            }
            else if (StringStartsWith(line, "Error="))
            {
                Log(LOG_LEVEL_ERR, "package module: %s", line);
                have_error = true;
            }
            else if (StringStartsWith(line, "ErrorMessage="))
            {
                Log(LOG_LEVEL_ERR, "package module: %s", line);
                have_error = true;
            }
            else
            {
                 Log(LOG_LEVEL_ERR,
                     "Unsupported response from package module: %s", line);
                 have_error = true;
            }
        }
        /* We should have one more entry left or empty 'package_data'. */
        if (package_data[0] && package_data[1] && package_data[2])
        {
            WritePackageDataToDB(db_cached, package_data[0],
                             package_data[1], package_data[2], type);

            CsvWriterField(idcw, package_data[0]);
            CsvWriterField(idcw, package_data[1]);
            CsvWriterField(idcw, package_data[2]);
            CsvWriterNewRecord(idcw);
        }
        else if (package_data[0] || package_data[1] || package_data[2])
        {
            Log(LOG_LEVEL_VERBOSE,
                "Malformed response from package manager: [%s:%s:%s]",
                package_data[0] ? package_data[0] : "",
                package_data[1] ? package_data[1] : "",
                package_data[2] ? package_data[2] : "");
        }

        char *inventory_key = "<inventory>";
        CsvWriterClose(idcw);
        char *inventory_list = StringWriterClose(idw);

        // Legacy: the lines are expected to be separated by newlines, not CRLF
        const size_t buf_size = strlen(inventory_list);
        NDEBUG_UNUSED const ssize_t num_repl =
            StringReplace(inventory_list, buf_size, "\r\n", "\n");
        assert(num_repl >= 0);

        /* We can have empty list of installed software or available updates. */
        if (inventory_list == NULL)
        {
            WriteDB(db_cached, inventory_key, "", 0);
        }
        else
        {
            WriteDB(db_cached, inventory_key, inventory_list,
                    strlen(inventory_list));
            free(inventory_list);
        }

        CloseDB(db_cached);
        return have_error ? -1 : 0;
    }
    /* Unable to open database. */
    return -1;
}


bool UpdateCache(Rlist* options, const PackageModuleWrapper *wrapper,
                 UpdateType type)
{
    assert(wrapper);

    Log(LOG_LEVEL_DEBUG, "Updating cache: %d", type);

    char *options_str = ParseOptions(options);
    Rlist *response = NULL;

    const char *req_type = NULL;
    if (type == UPDATE_TYPE_INSTALLED)
    {
        req_type = "list-installed";
    }
    else if (type == UPDATE_TYPE_UPDATES)
    {
        req_type = "list-updates";
    }
    else if (type == UPDATE_TYPE_LOCAL_UPDATES)
    {
        req_type = "list-updates-local";
    }

    if (PackageWrapperCommunicate(wrapper, req_type, options_str, &response) != 0)
    {
        Log(LOG_LEVEL_VERBOSE, "Some error occurred while communicating with "
                "package module while updating cache.");
        free(options_str);
        return false;
    }

    if (!response)
    {
        Log(LOG_LEVEL_DEBUG,
            "Received empty packages list after requesting: %s", req_type);
    }

    bool ret = true;

    /* We still need to update DB with empty data. */
    if (UpdatePackagesDB(response, wrapper->name, type) != 0)
    {
        Log(LOG_LEVEL_INFO, "Error updating packages cache.");
        ret = false;
    }

    RlistDestroy(response);
    free(options_str);
    return ret;
}


PromiseResult ValidateChangedPackage(const NewPackages *policy_data,
                                     const PackageModuleWrapper *wrapper,
                                     const PackageInfo *package_info,
                                     NewPackageAction action_type)
{
    assert(package_info && package_info->name);

    Log(LOG_LEVEL_DEBUG, "Validating package: %s", package_info->name);

    if (!UpdateCache(policy_data->package_options, wrapper,
                     UPDATE_TYPE_INSTALLED))
    {
        Log(LOG_LEVEL_INFO,
            "Can not update installed packages cache after package installation");
        return PROMISE_RESULT_FAIL;
    }

    if (!UpdateCache(policy_data->package_options, wrapper,
                     UPDATE_TYPE_LOCAL_UPDATES))
    {
        Log(LOG_LEVEL_INFO,
            "Can not update available updates cache after package installation");
        return PROMISE_RESULT_FAIL;
    }

    int is_in_cache = IsPackageInCache(NULL, wrapper, package_info->name,
                                       package_info->version,
                                       package_info->arch);
    if (is_in_cache == 1)
    {
        return action_type == NEW_PACKAGE_ACTION_PRESENT ?
            PROMISE_RESULT_CHANGE : PROMISE_RESULT_FAIL;
    }
    else if (is_in_cache == 0)
    {
        return action_type == NEW_PACKAGE_ACTION_PRESENT ?
            PROMISE_RESULT_FAIL : PROMISE_RESULT_CHANGE;
    }
    else
    {
        Log(LOG_LEVEL_INFO,
            "Some error occurred while reading installed packages cache.");
        return PROMISE_RESULT_FAIL;
    }
}

PromiseResult RemovePackage(const char *name, Rlist* options,
                            const char *version, const char *architecture,
                            const PackageModuleWrapper *wrapper)
{
    assert(wrapper);

    Log(LOG_LEVEL_DEBUG, "Removing package '%s'", name);

    char *options_str = ParseOptions(options);
    char *ver = version ?
        StringFormat("Version=%s\n", version) : NULL;
    char *arch = architecture ?
        StringFormat("Architecture=%s\n", architecture) : NULL;
    char *request = StringFormat("%sName=%s\n%s%s",
            options_str, name, ver ? ver : "", arch ? arch : "");

    PromiseResult res = PROMISE_RESULT_CHANGE;

    Rlist *error_message = NULL;
    if (PackageWrapperCommunicate(wrapper, "remove", request, &error_message) != 0)
    {
        Log(LOG_LEVEL_INFO,
            "Error communicating package module while removing package.");
        res = PROMISE_RESULT_FAIL;
    }
    if (error_message)
    {
        ParseAndLogErrorMessage(error_message);
        res = PROMISE_RESULT_FAIL;
        RlistDestroy(error_message);
    }

    free(request);
    free(options_str);
    free(ver);
    free(arch);

    /* We assume that at this point package is removed correctly. */
    return res;
}


static PromiseResult InstallPackageGeneric(Rlist *options,
        PackageType type, const char *packages_list_formatted,
        const PackageModuleWrapper *wrapper)
{
    assert(wrapper);

    Log(LOG_LEVEL_DEBUG,
        "Installing %s type package: '%s'",
        type == PACKAGE_TYPE_FILE ? "file" : "repo",
        packages_list_formatted);

    char *options_str = ParseOptions(options);
    char *request = StringFormat("%s%s", options_str, packages_list_formatted);

    PromiseResult res = PROMISE_RESULT_CHANGE;

    const char *package_install_command = NULL;
    if (type == PACKAGE_TYPE_FILE)
    {
        package_install_command = "file-install";
    }
    else if (type == PACKAGE_TYPE_REPO)
    {
        package_install_command = "repo-install";
    }
    else
    {
        /* If we end up here something bad has happened. */
        ProgrammingError("Unsupported package type");
    }

    Log(LOG_LEVEL_DEBUG,
        "Sending install command to package module: '%s'",
        request);

    Rlist *error_message = NULL;
    if (PackageWrapperCommunicate(wrapper, package_install_command, request, &error_message) != 0)
    {
        Log(LOG_LEVEL_INFO, "Some error occurred while communicating with "
            "package module while installing package.");
        res = PROMISE_RESULT_FAIL;
    }
    if (error_message)
    {
        ParseAndLogErrorMessage(error_message);
        res = PROMISE_RESULT_FAIL;
        RlistDestroy(error_message);
    }

    free(request);
    free(options_str);

    return res;
}

static PromiseResult InstallPackage(Rlist *options,
                                    PackageType type, const char *package_to_install,
                                    const char *version, const char *architecture,
                                    const PackageModuleWrapper *wrapper)
{
    Log(LOG_LEVEL_DEBUG, "Installing package '%s'", package_to_install);

    char *ver = version ?
        StringFormat("Version=%s\n", version) : NULL;
    char *arch = architecture ?
        StringFormat("Architecture=%s\n", architecture) : NULL;
    char *request = NULL;

    PromiseResult res = PROMISE_RESULT_CHANGE;

    if (type == PACKAGE_TYPE_FILE)
    {
        request = StringFormat("File=%s\n%s%s",
                               package_to_install,
                               ver ? ver : "",
                               arch ? arch : "");
    }
    else if (type == PACKAGE_TYPE_REPO)
    {
        request = StringFormat("Name=%s\n%s%s",
                               package_to_install,
                               ver ? ver : "",
                               arch ? arch : "");
    }
    else
    {
        /* If we end up here something bad has happened. */
        ProgrammingError("Unsupported package type");
    }

    res = InstallPackageGeneric(options, type, request, wrapper);

    free(request);
    free(ver);
    free(arch);

    return res;
}

static PromiseResult FileInstallPackage(EvalContext *ctx,
                                        const Promise *pp,
                                        const Attributes *attr,
                                        const char *package_file_path,
                                        const PackageInfo *info,
                                        const PackageModuleWrapper *wrapper,
                                        int is_in_cache)
{
    assert(attr != NULL);

    const NewPackages *policy_data = &(attr->new_packages);

    Log(LOG_LEVEL_DEBUG, "Installing file type package.");

    /* We have some packages matching file package promise in cache. */
    if (is_in_cache == 1)
    {
        Log(LOG_LEVEL_VERBOSE, "Package exists in cache. Skipping installation.");
        if (ChrootChanges())
        {
            RecordPkgOperationInChroot(CHROOT_PKG_OPERATION_PRESENT, package_file_path, NULL, NULL);
        }
        return PROMISE_RESULT_NOOP;
    }

    PromiseResult res;
    if (MakingChanges(ctx, pp, attr, &res, "install file type package: %s", package_file_path))
    {
        if (ChrootChanges())
        {
            /* TODO: simulate file package installation */
            RecordPkgOperationInChroot(CHROOT_PKG_OPERATION_INSTALL, package_file_path, NULL, NULL);
            return PROMISE_RESULT_CHANGE;
        }
        res = InstallPackage(policy_data->package_options,
                             PACKAGE_TYPE_FILE, package_file_path,
                             NULL, NULL, wrapper);
        if (res == PROMISE_RESULT_CHANGE)
        {
            Log(LOG_LEVEL_DEBUG, "Validating package: %s", package_file_path);
            return ValidateChangedPackage(policy_data, wrapper, info,
                                          NEW_PACKAGE_ACTION_PRESENT);
        }
    }
    return res;
}


static Seq *GetVersionsFromUpdates(EvalContext *ctx, const PackageInfo *info,
                                   const PackageModuleWrapper *module_wrapper)
{
    assert(info && info->name);

    CF_DB *db_updates;
    dbid db_id = dbid_packages_updates;
    Seq *updates_list = NULL;

    /* Make sure cache is updated. */
    if (!UpdateSinglePackageModuleCache(ctx, module_wrapper,
                                        UPDATE_TYPE_UPDATES, false))
    {
        Log(LOG_LEVEL_INFO, "Can not update packages cache.");
    }

    if (OpenSubDB(&db_updates, db_id, module_wrapper->package_module->name))
    {
        char package_key[strlen(info->name) + 4];

        xsnprintf(package_key, sizeof(package_key),
                "N<%s>", info->name);

        Log(LOG_LEVEL_DEBUG, "Looking for key in updates: %s", package_key);

        if (HasKeyDB(db_updates, package_key, sizeof(package_key)))
        {
            Log(LOG_LEVEL_DEBUG, "Found key in updates database");

            updates_list = SeqNew(3, FreePackageInfo);
            size_t val_size =
                    ValueSizeDB(db_updates, package_key, sizeof(package_key));
            char buff[val_size + 1];
            buff[val_size] = '\0';

            ReadDB(db_updates, package_key, buff, val_size);
            Seq* updates = SeqStringFromString(buff, '\n');

            for (size_t i = 0; i < SeqLength(updates); i++)
            {
                char *package_line = SeqAt(updates, i);
                Log(LOG_LEVEL_DEBUG, "Got line in updates database: '%s",
                    package_line);

                char version[strlen(package_line)];
                char arch[strlen(package_line)];

                if (sscanf(package_line, "V<%[^>]>A<%[^>]>", version, arch) == 2)
                {
                    PackageInfo *package = xcalloc(1, sizeof(PackageInfo));

                    package->name = SafeStringDuplicate(info->name);
                    package->version = SafeStringDuplicate(version);
                    package->arch = SafeStringDuplicate(arch);
                    SeqAppend(updates_list, package);
                }
                else
                {
                    /* Some error occurred while scanning package updates. */
                    Log(LOG_LEVEL_INFO,
                        "Unable to parse available updates line: %s",
                        package_line);
                }
            }
        }
        CloseDB(db_updates);
    }
    return updates_list;
}

static PromiseResult RepoInstall(EvalContext *ctx,
                                 const Promise *pp,
                                 const Attributes *attr,
                                 const PackageInfo *package_info,
                                 const PackageModuleWrapper *wrapper,
                                 int is_in_cache,
                                 bool *verified)
{
    assert(attr != NULL);
    assert(package_info != NULL);

    const NewPackages *policy_data = &(attr->new_packages);

    Log(LOG_LEVEL_DEBUG, "Installing repo type package: %d", is_in_cache);
    const char *const package_version = package_info->version;
    const char *const package_name = package_info->name;
    /* Package is not present in cache. */
    if (is_in_cache == 0)
    {
        /* Make sure cache is updated. */
        if (!UpdateSinglePackageModuleCache(ctx, wrapper,
                                            UPDATE_TYPE_UPDATES, false))
        {
            Log(LOG_LEVEL_INFO, "Can not update packages cache.");
        }

        const char *version = package_version;
        if (StringEqual(version, "latest"))
        {
            Log(LOG_LEVEL_DEBUG, "Clearing latest package version");
            version = NULL;
        }
        PromiseResult result = PROMISE_RESULT_FAIL;
        if (MakingChanges(ctx, pp, attr, &result, "install repo type package: %s", package_name))
        {
            if (ChrootChanges())
            {
                /* TODO: simulate package installation */
                RecordPkgOperationInChroot(CHROOT_PKG_OPERATION_INSTALL, package_name,
                                           package_version, package_info->arch);
                return PROMISE_RESULT_CHANGE;
            }
            *verified = false; /* Verification will be done in RepoInstallPackage(). */
            result = InstallPackage(policy_data->package_options, PACKAGE_TYPE_REPO,
                                    package_name, version, package_info->arch,
                                    wrapper);
        }
        return result;
    }


    /* We have some packages matching already installed at this point. */


    if (!StringEqual(package_version, "latest"))
    {
        /* No version or explicit version specified. */
        if (ChrootChanges())
        {
            RecordPkgOperationInChroot(CHROOT_PKG_OPERATION_PRESENT, package_name,
                                       package_version, package_info->arch);
        }
        Log(LOG_LEVEL_VERBOSE, "Package '%s' already installed", package_name);

        return PROMISE_RESULT_NOOP;
    }

    /* We have 'latest' version in policy. */

    /* This can return more than one latest version if we have packages
     * with different architectures installed. */
    Seq *latest_versions = GetVersionsFromUpdates(ctx, package_info, wrapper);
    if (latest_versions == NULL)
    {
        if (ChrootChanges())
        {
            RecordPkgOperationInChroot(CHROOT_PKG_OPERATION_PRESENT, package_name,
                                       package_version, package_info->arch);
        }
        Log(LOG_LEVEL_VERBOSE,
            "Package '%s' is already in the latest version. "
            "Skipping installation.", package_name);

        return PROMISE_RESULT_NOOP;
    }

    PromiseResult res = PROMISE_RESULT_NOOP;
    Buffer *install_buffer = BufferNew();
    Seq *packages_to_install = SeqNew(1, NULL);

    /* Loop through possible updates. */
    size_t length = SeqLength(latest_versions);
    for (size_t i = 0; i < length; i++)
    {
        PackageInfo *update_package = SeqAt(latest_versions, i);

        /* We can have multiple packages with different architectures
         * in updates available but we are interested only in updating
         * package with specific architecture. */
        if (package_info->arch &&
            !StringEqual(package_info->arch, update_package->arch))
        {
            Log(LOG_LEVEL_DEBUG,
                "Skipping update check of package '%s' as updates"
                "architecure doesn't match specified in policy: %s != %s.",
                package_name, package_info->arch,
                update_package->arch);
            continue;
        }

        const char *const update_version = update_package->version;

        Log(LOG_LEVEL_DEBUG,
            "Checking for package '%s' version '%s' in available updates",
            package_name, update_version);

        /* Just in case some package managers will report highest possible
         * version in updates list instead of removing entry if package is
         * already in the latest version. */
        const int update_in_cache = IsPackageInCache(
            ctx, wrapper, package_name, update_version, update_package->arch);
        if (update_in_cache == 1)
        {
            if (ChrootChanges())
            {
                RecordPkgOperationInChroot(CHROOT_PKG_OPERATION_PRESENT, package_name,
                                           update_version, update_package->arch);
            }
            Log(LOG_LEVEL_VERBOSE,
                "Package version from updates matches one installed. "
                "Skipping package installation.");
            res = PromiseResultUpdate(res, PROMISE_RESULT_NOOP);
            continue;
        }
        else if (update_in_cache == -1)
        {
            Log(LOG_LEVEL_INFO,
                "Skipping package installation due to error with checking "
                "packages cache.");
            res = PromiseResultUpdate(res, PROMISE_RESULT_FAIL);
            continue;
        }
        else
        {
            PromiseResult result = PROMISE_RESULT_FAIL;
            if (MakingChanges(ctx, pp, attr, &result, "install repo type package: %s",
                              package_name))
            {
                if (ChrootChanges())
                {
                    RecordPkgOperationInChroot(CHROOT_PKG_OPERATION_INSTALL, package_name,
                                               update_version, update_package->arch);
                }
                else
                {
                    /* Append package data to buffer. At the end all packages
                     * data that need to be updated will be sent to package module
                     * at once. This is important if we have package in more than
                     * one architecture. If we would update one after another we
                     * may end up with the ones doesn't matching default
                     * architecture being removed. */
                    BufferAppendF(install_buffer,
                                  "Name=%s\nVersion=%s\nArchitecture=%s\n",
                                  package_name,
                                  update_version,
                                  update_package->arch);

                    /* Here we are adding latest_versions elements to different
                     * seq. Make sure to not free those and not free latest_versions
                     * before we are done with packages_to_install.
                     * This is needed for later verification if package was
                     * installed correctly. */
                    SeqAppend(packages_to_install, update_package);
                }
            }
            else
            {
                res = PromiseResultUpdate(res, result);
                continue;
            }
        }
    }

    char *install_formatted_list = BufferClose(install_buffer);

    if (install_formatted_list)
    {
        /* If we have some packages to install. */
        if (strlen(install_formatted_list) > 0)
        {
            Log(LOG_LEVEL_DEBUG,
                "Formatted list of packages to be send to package module: "
                "[%s]", install_formatted_list);
            res = InstallPackageGeneric(policy_data->package_options,
                                        PACKAGE_TYPE_REPO,
                                        install_formatted_list, wrapper);

            for (size_t i = 0; i < SeqLength(packages_to_install); i++)
            {
                PackageInfo *to_verify = SeqAt(packages_to_install, i);
                PromiseResult validate =
                    ValidateChangedPackage(policy_data, wrapper,
                                           to_verify,
                                           NEW_PACKAGE_ACTION_PRESENT);
                Log(LOG_LEVEL_DEBUG,
                    "Validating package %s:%s:%s installation result: %d",
                    to_verify->name, to_verify->version,
                    to_verify->arch, validate);
                res = PromiseResultUpdate(res, validate);
                *verified = true;
            }
        }
        free(install_formatted_list);
    }

    SeqDestroy(packages_to_install);
    SeqDestroy(latest_versions);
    return res;
}

static PromiseResult RepoInstallPackage(EvalContext *ctx,
                                        const Promise *pp,
                                        const Attributes *attr,
                                        const PackageInfo *package_info,
                                        const PackageModuleWrapper *wrapper,
                                        int is_in_cache)
{
    assert(attr != NULL);

    const NewPackages *policy_data = &(attr->new_packages);

    bool verified = false;
    PromiseResult res = RepoInstall(ctx, pp, attr, package_info, wrapper,
                                    is_in_cache, &verified);

    if (res == PROMISE_RESULT_CHANGE && !verified)
    {
        return ValidateChangedPackage(policy_data, wrapper, package_info,
                                      NEW_PACKAGE_ACTION_PRESENT);
    }
    return res;
}

static bool CheckPolicyAndPackageInfoMatch(const NewPackages *packages_policy,
                                           const PackageInfo *info)
{
    if (packages_policy->package_version &&
        StringEqual(packages_policy->package_version, "latest"))
    {
        Log(LOG_LEVEL_WARNING, "Unsupported 'latest' version for package "
                "promise of type file.");
        return false;
    }

    /* Check if file we are having matches what we want in policy. */
    if (info->arch && packages_policy->package_architecture &&
            !StringEqual(info->arch, packages_policy->package_architecture))
    {
        Log(LOG_LEVEL_WARNING,
            "Package arch and one specified in policy doesn't match: %s -> %s",
            info->arch, packages_policy->package_architecture);
        return false;
    }

    if (info->version && packages_policy->package_version &&
        !StringEqual(info->version, packages_policy->package_version))
    {

        Log(LOG_LEVEL_WARNING,
            "Package version and one specified in policy doesn't "
            "match: %s -> %s",
            info->version, packages_policy->package_version);
        return false;
    }
    return true;
}

PromiseResult HandlePresentPromiseAction(EvalContext *ctx,
                                         const Promise *pp,
                                         const Attributes *attr,
                                         const PackageModuleWrapper *wrapper)
{
    assert(pp != NULL);
    assert(attr != NULL);

    const char *package_name = pp->promiser;
    const NewPackages *policy_data = &(attr->new_packages);

    Log(LOG_LEVEL_DEBUG, "Starting evaluating present action promise.");

    /* Figure out what kind of package we are having. */
    PackageInfo *package_info = GetPackageData(package_name,
                                               policy_data->package_version,
                                               policy_data->package_architecture,
                                               policy_data->package_options,
                                               wrapper);

    PromiseResult result = PROMISE_RESULT_FAIL;
    if (package_info)
    {
        /* Check if data in policy matches returned by wrapper (files only). */
        if (package_info->type == PACKAGE_TYPE_FILE)
        {

            if (!CheckPolicyAndPackageInfoMatch(policy_data, package_info))
            {
                Log(LOG_LEVEL_ERR, "Package data and policy doesn't match");
                FreePackageInfo(package_info);
                return PROMISE_RESULT_FAIL;
            }
        }
        else if (package_info->type == PACKAGE_TYPE_REPO)
        {
            /* We are expecting only package name to be returned by
             * 'get-package-data' in case of repo package */
            if (package_info->arch)
            {
                Log(LOG_LEVEL_VERBOSE,
                    "Unexpected package architecture received from package module. Ignoring.");
                free(package_info->arch);
                package_info->arch = NULL;
            }
            if (package_info->version)
            {
                Log(LOG_LEVEL_VERBOSE,
                    "Unexpected package version received from package module. Ignoring.");
                free(package_info->version);
                package_info->version = NULL;
            }
        }

        /* Fill missing data in package_info from policy. This will allow
         * to match cache against all known package details we are
         * interested in */
        if (!package_info->arch && policy_data->package_architecture)
        {
            package_info->arch =
                    SafeStringDuplicate(policy_data->package_architecture);
        }
        if (!package_info->version && policy_data->package_version)
        {
            package_info->version =
                    SafeStringDuplicate(policy_data->package_version);
        }

        /* Check if package exists in cache */
        int is_in_cache = IsPackageInCache(ctx, wrapper,
                                           package_info->name,
                                           package_info->version,
                                           package_info->arch);

        if (is_in_cache == -1)
        {
            Log(LOG_LEVEL_ERR, "Some error occurred while looking for package '%s' in cache.",
                package_name);
            return PROMISE_RESULT_FAIL;
        }

        switch (package_info->type)
        {
            case PACKAGE_TYPE_FILE:
                result = FileInstallPackage(ctx, pp, attr, package_name, package_info,
                                            wrapper, is_in_cache);
                break;
            case PACKAGE_TYPE_REPO:
                result = RepoInstallPackage(ctx, pp, attr, package_info,
                                            wrapper, is_in_cache);
                break;
            default:
                /* We shouldn't end up here. If we are having unsupported
                 package type this should be detected and handled
                 in ParseAndCheckPackageDataReply(). */
                ProgrammingError("Unsupported package type");
        }

        FreePackageInfo(package_info);
    }
    else
    {
        Log(LOG_LEVEL_INFO, "Can not obtain package data for promise: %s",
            package_name);
    }


    Log(LOG_LEVEL_DEBUG, "Evaluating present action promise status: %c", result);
    return result;
}


PromiseResult HandleAbsentPromiseAction(EvalContext *ctx,
                                        const Promise *pp,
                                        const Attributes *attr,
                                        const PackageModuleWrapper *wrapper)
{
    assert(pp != NULL);
    assert(attr != NULL);

    const char *package_name = pp->promiser;
    const NewPackages *policy_data = &(attr->new_packages);

    /* Check if we are not having 'latest' version. */
    if (policy_data->package_version &&
            StringEqual(policy_data->package_version, "latest"))
    {
        Log(LOG_LEVEL_ERR, "Package version 'latest' not supported for"
                "absent package promise");
        return PROMISE_RESULT_FAIL;
    }

    /* Check if package exists in cache */
    int is_in_cache = IsPackageInCache(ctx, wrapper, package_name,
                                       policy_data->package_version,
                                       policy_data->package_architecture);
    if (is_in_cache == 1)
    {
        /* Remove package(s) */
        PromiseResult res;
        if (MakingChanges(ctx, pp, attr, &res, "remove package '%s'", package_name))
        {
            if (ChrootChanges())
            {
                /* TODO: simulate removal */
                RecordPkgOperationInChroot(CHROOT_PKG_OPERATION_REMOVE, package_name,
                                           policy_data->package_version,
                                           policy_data->package_architecture);
                return PROMISE_RESULT_CHANGE;
            }
            res = RemovePackage(package_name,
                    policy_data->package_options, policy_data->package_version,
                    policy_data->package_architecture, wrapper);

            if (res == PROMISE_RESULT_CHANGE)
            {
                /* Check if package was removed. */

                /* package_name is actually pp->promiser which is 'const char *'
                 * so we need to type-cast it. It's safe because pkg_info is
                 * passed as const *PackageInfo. */
                const PackageInfo pkg_info = {
                    .name = (char *) package_name,
                    .version = policy_data->package_version,
                    .arch = policy_data->package_architecture
                };
                return ValidateChangedPackage(policy_data, wrapper, &(pkg_info),
                                              NEW_PACKAGE_ACTION_ABSENT);
            }
        }

        return res;
    }
    else if (is_in_cache == -1)
    {
        Log(LOG_LEVEL_ERR, "Error occurred while checking package '%s' "
            "existence in cache.", package_name);
        return PROMISE_RESULT_FAIL;
    }
    else
    {
        /* Package is not in cache which means it is already removed. */
        Log(LOG_LEVEL_DEBUG, "Package '%s' not installed. Skipping removing.",
            package_name);
        if (ChrootChanges())
        {
            RecordPkgOperationInChroot(CHROOT_PKG_OPERATION_ABSENT, package_name, policy_data->package_version,
                                       policy_data->package_architecture);
        }
        return PROMISE_RESULT_NOOP;
    }
}


/* IMPORTANT: This must be called under protection of
 * GLOBAL_PACKAGE_PROMISE_LOCK_NAME lock! */
bool UpdateSinglePackageModuleCache(EvalContext *ctx,
                                    const PackageModuleWrapper *module_wrapper,
                                    UpdateType type, bool force_update)
{
    assert(module_wrapper->package_module->name);

    Log(LOG_LEVEL_DEBUG,
        "Trying to%s update cache type: %d.",
        force_update ? " force" : "", type);

    if (!force_update)
    {
        if (module_wrapper->package_module->installed_ifelapsed == CF_NOINT ||
            module_wrapper->package_module->updates_ifelapsed == CF_NOINT)
        {
            Log(LOG_LEVEL_ERR,
                "Invalid or missing arguments in package_module body '%s':  "
                "query_installed_ifelapsed = %d query_updates_ifelapsed = %d",
                module_wrapper->package_module->name,
                module_wrapper->package_module->installed_ifelapsed,
                module_wrapper->package_module->updates_ifelapsed);
            return false;
        }
    }

    Bundle bundle = {.name = "package_cache"};
    BundleSection section = {.promise_type = "package_cache",
                             .parent_bundle = &bundle};
    Promise pp = {.promiser = "package_cache",
                  .parent_section = &section};

    CfLock cache_updates_lock = {NULL, NULL, false};
    char cache_updates_lock_name[CF_BUFSIZE];
    int ifelapsed_time = -1;

    dbid dbid_val;

    if (type == UPDATE_TYPE_INSTALLED)
    {
        dbid_val = dbid_packages_installed;
        snprintf(cache_updates_lock_name, CF_BUFSIZE - 1,
                 "package-cache-installed-%s", module_wrapper->package_module->name);
        ifelapsed_time = module_wrapper->package_module->installed_ifelapsed;
    }
    else
    {
        dbid_val = dbid_packages_updates;
        snprintf(cache_updates_lock_name, CF_BUFSIZE - 1,
                "package-cache-updates-%s", module_wrapper->package_module->name);
        ifelapsed_time = module_wrapper->package_module->updates_ifelapsed;
    }

    char *db_name = DBIdToSubPath(dbid_val, module_wrapper->name);
    struct stat statbuf;
    if (!force_update)
    {
        if (stat(db_name, &statbuf) == -1 && errno == ENOENT)
        {
            /* Force update if database file doesn't exist. Not strictly
             * necessary with the locks we have, but good to have for tests
             * that delete the database. */
            Log(LOG_LEVEL_VERBOSE,
                "Forcing package list update due to missing database");
            force_update = true;

            /* When the cfengine database containing the cache of package updates
             * available is initialized we should use the network to get the
             * current list of updates available. It's not unlikely that the OS
             * does not yet have a local cache, which simply results in an error
             * getting a list of package updates available. */
            if (type == UPDATE_TYPE_LOCAL_UPDATES)
            {
                type = UPDATE_TYPE_UPDATES;
            }
        }

        cache_updates_lock =
                AcquireLock(ctx, cache_updates_lock_name, VUQNAME, CFSTARTTIME,
                            ifelapsed_time, VEXPIREAFTER, &pp, false);
    }
    free(db_name);

    bool ret = true;

    if (force_update || cache_updates_lock.lock != NULL)
    {

        /* Update available updates cache. */
        if (!UpdateCache(module_wrapper->package_module->options, module_wrapper, type))
        {
            Log(LOG_LEVEL_INFO,
                "Some error occurred while updating available updates cache.");
            ret = false;
        }
        if (cache_updates_lock.lock != NULL)
        {
            YieldCurrentLock(cache_updates_lock);
        }
    }
    else
    {
        Log(LOG_LEVEL_VERBOSE, "Skipping %s package cache update.",
            type == UPDATE_TYPE_INSTALLED ?
                    "installed packages" : "available updates");
    }
    return ret;
}