InPanel 1.2.1__py3-none-any.whl

inpanel/mod/service.py

@@ -0,0 +1,262 @@
+# -*- coding: utf-8 -*-
+#
+# Copyright (c) 2017-2026 Jackson Dou
+# All rights reserved.
+#
+# InPanel is distributed under the terms of the (new) BSD License.
+# The full license can be found in 'LICENSE'.
+
+'''Module for Service Management.'''
+
+
+import os
+# from mod_shell import async_command
+from glob import glob
+from pathlib import Path
+from shlex import split
+from subprocess import PIPE, Popen
+
+from ..base import kernel_name, os_name
+
+
+def web_handler(context):
+    '''for web server'''
+    action = context.get_argument('action', '')
+
+    if action == 'start':
+        name = context.get_argument('name', '')
+        service_label = context.get_argument('service', '')
+        if not name:
+            name = service_label
+        if do_start(name):
+            context.write({'code': 0, 'msg': f'{name} 已启动成功'})
+        else:
+            context.write({'code': -1, 'msg': f'{name} 启动运行失败'})
+    elif action == 'stop':
+        name = context.get_argument('name', '')
+        service_label = context.get_argument('service', '')
+        if not name:
+            name = service_label
+        if do_stop(name):
+            context.write({'code': 0, 'msg': f'{name} 已成功停止运行'})
+        else:
+            context.write({'code': -1, 'msg': f'{name} 停止运行失败'})
+    elif action == 'restart':
+        name = context.get_argument('name', '')
+        service_label = context.get_argument('service', '')
+        if not name:
+            name = service_label
+        if do_start(name):
+            context.write({'code': 0, 'msg': f'{name} 已重新启动'})
+        else:
+            context.write({'code': -1, 'msg': f'{name} 重新启动失败'})
+    elif action == 'chkconfig':
+        autostart = context.get_argument('autostart', '')
+        if not name:
+            name = service_label
+
+        autostart_str = {'on': '启用', 'off': '禁用'}
+        if set_autostart(service_label, autostart == 'on' and True or False):
+            context.write({'code': 0, 'msg': f'成功{autostart_str[autostart]} {name} 自动启动！'})
+        else:
+            context.write({'code': -1, 'msg': f'{autostart_str[autostart]} {name} 自动启动失败！'})
+    elif action == 'get_autostart_list':
+        context.write({'code': 0, 'data': get_autostart_list()})
+    else:
+        context.write({'code': -1, 'msg': '未定义的操作！'})
+
+def do_start(service_name=None):
+    '''start service'''
+    if not service_name:
+        return False
+    return True
+
+
+def do_stop(service_name=None):
+    '''stop service'''
+    if not service_name:
+        return False
+    return True
+
+
+def do_restart(service_name=None):
+    '''stop service then start service'''
+    if not service_name:
+        return False
+    do_stop()
+    do_start()
+
+
+def get_status(name = None):
+    '''get '''
+    if name is None:
+        return False
+    return True
+
+
+def do_search():
+    '''set service auto start on system up'''
+    return True
+
+
+def get_list():
+    '''Return a list of all service'''
+    return []
+
+
+def get_autostart_list():
+    """Return a list of the autostart service name.
+    """
+    if kernel_name == 'Linux':
+        if os_name == 'Ubuntu':
+            return []
+        startlevel = -1
+        with open('/etc/inittab', encoding='utf-8') as f:
+            for line in f:
+                if line.startswith('id:'):
+                    startlevel = line.split(':')[1]
+                    break
+        if startlevel == -1:
+            p = Popen(split('runlevel'), stdout=PIPE, close_fds=True)
+            startlevel = int(p.stdout.read().decode().strip().replace('N ', ''))
+            p.wait()
+
+        rcpath = f'/etc/rc.d/rc{startlevel}.d/'
+        enable_service_path = '/etc/systemd/system/multi-user.target.wants/'
+        services = [
+            Path(os.readlink(filepath))
+            for filepath in glob(f'{rcpath}/S*')
+        ]
+        services += [
+            Path(filePath).replace('.service', '')
+            for filePath in glob(f'{enable_service_path}*.service')
+        ]
+        return services
+    elif kernel_name == 'Darwin':
+        return []
+    # others
+    return []
+
+
+def set_autostart(service_name=None, autostart=True):
+    """Add or remove service to autostart list.
+    E.g: chkconfig service_name on|off
+    """
+    if not service_name:
+        return False
+    if kernel_name == 'Linux':
+        cmdbin = 'chkconfig'
+        status = 'on' if autostart else 'off'
+        cmd = f'{cmdbin} {service_name} {status}'
+        cmd = split(cmd)
+        p = Popen(cmd, stdout=PIPE, close_fds=True)
+        p.stdout.read()
+        return p.wait() == 0 and True or False
+    elif kernel_name == 'Darwin':
+        return False
+    else:
+        return False
+
+def do_add():
+    '''create service config file'''
+    return True
+
+
+__all__ = [
+    'do_start', 'do_stop', 'do_restart', 'do_search', 'get_list',
+    'get_autostart_list', 'set_autostart'
+]
+
+class Service(object):
+
+    '''supported service operate script'''
+    service_items = {
+        'inpanel': False,
+        'nginx': False,
+        'httpd': False,
+        'vsftpd': False,
+        'mysqld': False,
+        'redis': False,
+        'memcached': False,
+        'mongod': False,
+        'php-fpm': False,
+        'sendmail': False,
+        'postfix': False,
+        'sshd': False,
+        'iptables': False,
+        'crond': False,
+        'ntpd': False,
+        'named': False,
+        'lighttpd': False,
+        'proftpd': False,
+        'pure-ftpd': False,
+        'smb': False
+    }
+
+    pidnames = {
+        'sendmail': ['sm-client'],
+        'smb': ['smbd']
+    }
+
+    subsys_locks = (
+        'iptables'
+    )
+
+    @classmethod
+    def status(self, service = None):
+        if not service:
+            return None
+        initscript = f'/etc/init.d/{service}'
+        if not Path(initscript).exists():
+            initscript = f'/usr/lib/systemd/system/{service}.service'
+            if not Path(initscript).exists():
+                return None
+
+        pidfile = f'/var/run/{service}.pid'
+        if not Path(pidfile).is_file():
+            p = glob(f'/var/run/{service}/*.pid')
+            if len(p) > 0:
+                pidfile = p[0]
+            else:
+                # some services have special pid filename
+                if service in Service.pidnames:
+                    for pidname in Service.pidnames[service]:
+                        pidfile = f'/var/run/{pidname}.pid'
+                        if Path(pidfile).is_file():
+                            break
+                        else:
+                            pidfile = None
+                else:
+                    pidfile = None
+        if not pidfile:
+            # not always corrent, some services dead but the lock still exists
+            # some services don't have the pidfile
+            if service in Service.subsys_locks:
+                if Path(f'/var/lock/subsys/{service}').exists():
+                    return 'running'
+
+            # try execute pidof to find the pidfile
+            cmd_ = split(f'pidof -c -o %%PPID -x {service}')
+            p = Popen(cmd_, stdout=PIPE, close_fds=True)
+            pid = p.stdout.read().decode().strip()
+            p.wait()
+
+            if not pid:
+                return 'stopped'
+
+        if pidfile:
+            with open(pidfile, encoding='utf-8') as f:
+                pid = f.readline().strip()
+            if not pid:
+                return 'stopped'
+            if not Path(f'/proc/{pid}').exists():
+                return 'stopped'
+
+        return 'running'
+
+
+
+if __name__ == '__main__':
+    autostart_services = get_autostart_list()
+    for service in Service.support_services:
+        print('* Status of %s: %s (autostart: %s)' % (service, Service.status(service), str(service in autostart_services)))

inpanel/mod/setting.py

@@ -0,0 +1,228 @@
+# -*- coding: utf-8 -*-
+#
+# Copyright (c) 2017-2026 Jackson Dou
+# All rights reserved.
+#
+# InPanel is distributed under the terms of the (new) BSD License.
+# The full license can be found in 'LICENSE'.
+
+"""Module for Settings Management."""
+
+import time
+from hashlib import md5
+from hmac import new as hmac_new
+from base64 import b64decode
+from pathlib import Path
+
+import tornado.httpclient
+import tornado.escape
+from ..base import app_api
+from .. import utils
+from .config import update_info_config
+from . import server
+
+
+async def handle_get(context, section):
+    """Handle GET requests for settings."""
+    if section == 'auth':
+        username = context.config.get('auth', 'username')
+        passwordcheck = context.config.getboolean('auth', 'passwordcheck')
+        context.write({'username': username, 'passwordcheck': passwordcheck})
+        context.finish()
+
+    elif section == 'runtime':
+        mode = context.config.get('runtime', 'mode')
+        loginlockexpire = context.config.getint('runtime', 'loginlockexpire')
+        loginfails = context.config.getint('runtime', 'loginfails')
+        loginlock = context.config.getboolean('runtime', 'loginlock')
+        if not mode:
+            mode = 'prod'
+            context.config.set('runtime', 'mode', 'prod')
+        context.write({
+            'mode': mode,
+            'loginlockexpire': loginlockexpire,
+            'loginfails': loginfails,
+            'loginlock': loginlock
+        })
+        context.finish()
+
+    elif section == 'server':
+        ip = context.config.get('server', 'ip')
+        port = context.config.get('server', 'port')
+        forcehttps = context.config.getboolean('server', 'forcehttps')
+        sslkey = context.config.get('server', 'sslkey')
+        sslcrt = context.config.get('server', 'sslcrt')
+        context.write({'forcehttps': forcehttps, 'ip': ip, 'port': port, 'sslkey': sslkey, 'sslcrt': sslcrt})
+        context.finish()
+
+    elif section == 'accesskey':
+        accesskey = context.config.get('auth', 'accesskey')
+        accesskeyenable = context.config.getboolean('auth', 'accesskeyenable')
+        context.write({'accesskey': accesskey, 'accesskeyenable': accesskeyenable})
+        context.finish()
+
+    elif section == 'upver':
+        force = context.get_argument('force', '')
+        update_info = update_info_config()
+        lastcheck = update_info.get('update', 'lastcheck')
+        lastcheck = 0 if lastcheck == '' else int(lastcheck)
+
+        # detect new version daily
+        if force or time.time() > lastcheck + 86400:
+            http_client = tornado.httpclient.AsyncHTTPClient()
+            try:
+                response = await http_client.fetch(app_api['latest'])
+                if response.error:
+                    context.write({'code': -1, 'msg': '获取新版本信息失败！'})
+                else:
+                    data = response.body.decode('utf-8')
+                    if not data:
+                        context.write({'code': -1, 'msg': '获取新版本信息失败！'})
+                    else:
+                        update_info.set('update', 'lastcheck', int(time.time()))
+                        update_info.set('update', 'updateinfo', data)
+                        try:
+                            data = tornado.escape.json_decode(data)
+                            context.write({'code': 0, 'msg':'', 'data': data})
+                        except:
+                            context.write({'code': -1, 'msg': '获取新版本信息失败！'})
+            except:
+                context.write({'code': -1, 'msg': '获取新版本信息失败！'})
+        else:
+            data = update_info.get('update', 'updateinfo')
+            try:
+                data = tornado.escape.json_decode(data)
+            except:
+                data = None
+
+            context.write({'code': 0, 'msg': '', 'data': data})
+
+        context.finish()
+
+
+def handle_post(context, section):
+    """Handle POST requests for settings."""
+    if section == 'auth':
+        if context.config.get('runtime', 'mode') == 'demo':
+            context.write({'code': -1, 'msg': '演示模式不允许修改用户名和密码！'})
+            return
+
+        username = context.get_argument('username', '')
+        password = context.get_argument('password', '')
+        passwordc = context.get_argument('passwordc', '')
+        passwordcheck = context.get_argument('passwordcheck', '')
+
+        if username == '':
+            context.write({'code': -1, 'msg': '用户名不能为空！'})
+            return
+        if password != passwordc:
+            context.write({'code': -1, 'msg': '两次密码输入不一致！'})
+            return
+
+        if passwordcheck != 'on':
+            passwordcheck = 'off'
+        context.config.set('auth', 'passwordcheck', passwordcheck)
+
+        if username != '':
+            context.config.set('auth', 'username', username)
+        if password != '':
+            key = md5(utils.randstr().encode('utf-8')).hexdigest()
+            pwd = hmac_new(key.encode('utf-8'), password.encode('utf-8'), md5).hexdigest()
+            context.config.set('auth', 'password', '%s:%s' % (pwd, key))
+
+        context.write({'code': 0, 'msg': '账号设置更新成功！'})
+
+    elif section == 'server':
+        if context.config.get('runtime', 'mode') == 'demo':
+            context.write({'code': -1, 'msg': '演示模式不允许修改服务绑定地址！'})
+            return
+
+        ip = context.get_argument('ip', '*')
+        if ip != '*' and ip != '':
+            if not utils.is_valid_ip(ip):
+                context.write({'code': -1, 'msg': '%s 不是有效的IP地址！' % ip})
+                return
+            netifaces = server.ServerInfo.netifaces()
+            ips = [netiface['ip'] for netiface in netifaces]
+            if not ip in ips:
+                msg = '<p>%s 不是该服务器的IP地址！</p><p>可用的IP地址有：<br>%s</p>' % (ip, '<br>'.join(ips))
+                context.write({'code': -1, 'msg': msg})
+                return
+
+        port = context.get_argument('port', '14433')
+        port = int(port)
+        if not port > 5000 and port < 65535:
+            context.write({'code': -1, 'msg': '端口范围必须在 5000 到 65535 之间！'})
+            return
+
+        context.config.set('server', 'ip', ip)
+        context.config.set('server', 'port', port)
+
+        sslkey = context.get_argument('sslkey', '')
+        if sslkey == '' or Path(sslkey).is_file():
+            context.config.set('server', 'sslkey', sslkey)
+        else:
+            context.write({'code': -1, 'msg': 'SSL私钥文件不存在，请仔细检查！'})
+            return
+
+        sslcrt = context.get_argument('sslcrt', '')
+        if sslcrt == '' or Path(sslcrt).is_file():
+            context.config.set('server', 'sslcrt', sslcrt)
+        else:
+            context.write({'code': -1, 'msg': 'SSL证书文件不存在，请仔细检查！'})
+            return
+
+        forcehttps = context.get_argument('forcehttps', '')
+        if forcehttps == 'on':
+            if not sslkey or not Path(sslkey).is_file():
+                context.config.set('server', 'forcehttps', 'off')
+                context.write({'code': -1, 'msg': '请填写SSL私钥文件！'})
+                return
+            elif not sslcrt or not Path(sslcrt).is_file():
+                context.config.set('server', 'forcehttps', 'off')
+                context.write({'code': -1, 'msg': '请填写SSL证书文件！'})
+                return
+            context.config.set('server', 'forcehttps', forcehttps)
+        else:
+            context.config.set('server', 'forcehttps', 'off')
+
+        context.write({'code': 0, 'msg': '服务设置更新成功！将在重启服务后生效。'})
+
+    elif section == 'runtime':
+        if context.config.get('runtime', 'mode') == 'demo':
+            context.write({'code': -1, 'msg': '演示模式不允许修改到其他模式！'})
+            return
+
+        mode = context.get_argument('mode', 'prod')
+        if mode not in ('prod', 'demo'):
+            mode = 'prod'
+        context.config.set('runtime', 'mode', mode)
+
+        context.write({'code': 0, 'msg': '运行设置更新成功！'})
+
+    elif section == 'accesskey':
+        if context.config.get('runtime', 'mode') == 'demo':
+            context.write({'code': -1, 'msg': '演示模式不允许修改远程控制设置！'})
+            return
+
+        accesskey = context.get_argument('accesskey', '')
+        accesskeyenable = context.get_argument('accesskeyenable', '')
+
+        if accesskeyenable == 'on' and accesskey == '':
+            context.write({'code': -1, 'msg': '远程控制密钥不能为空！'})
+            return
+
+        if accesskey != '':
+            try:
+                if len(b64decode(accesskey)) != 32:
+                    raise Exception()
+            except:
+                context.write({'code': -1, 'msg': '远程控制密钥格式不正确！'})
+                return
+
+        if accesskeyenable != 'on':
+            accesskeyenable = 'off'
+        context.config.set('auth', 'accesskeyenable', accesskeyenable)
+        context.config.set('auth', 'accesskey', accesskey)
+
+        context.write({'code': 0, 'msg': '远程控制设置更新成功！'})

inpanel/mod/shell.py

@@ -0,0 +1,78 @@
+# -*- coding: utf-8 -*-
+#
+# Copyright (c) 2017-2026 Jackson Dou
+# All rights reserved.
+#
+# InPanel is distributed under the terms of the New BSD License.
+# The full license can be found in 'LICENSE'.
+'''Module for Shell.'''
+
+import shlex
+import subprocess as sbps
+from asyncio import create_subprocess_shell, create_task
+from asyncio import subprocess as async_subprocess
+
+
+async def async_command(command):
+    '''async command'''
+    proc = await create_subprocess_shell(command,
+                                         stdout=async_subprocess.PIPE,
+                                         stderr=async_subprocess.PIPE,
+                                         shell=True)
+    output, _ = await proc.communicate()
+    return (proc.returncode, output.decode('utf-8'))
+
+
+async def async_task(func, *args, **kwds):
+    '''Make an asynchronous function.'''
+    async def wrapper():
+        callback = None
+        if hasattr(kwds, 'callback'):
+            callback = kwds['callback']
+        if callback:
+            del kwds['callback']
+        result = func(*args, **kwds)
+        print('result-origin', result)
+        if callback:
+            return callback(result)
+        else:
+            return result
+    result = await create_task(wrapper())
+    return result
+
+
+def run(cmd, shell=False):
+    if shell:
+        return sbps.call(cmd, shell=shell)
+    else:
+        return sbps.call(shlex.split(cmd))
+
+
+def exec_command(cmd, cwd):
+    '''executive command
+    '''
+    cmd = shlex.split(cmd)
+    cwd = cwd or '/'
+    # print('shell cmd', cmd)
+    try:
+        p = sbps.Popen(cmd,
+                       stdout=sbps.PIPE,
+                       stderr=sbps.PIPE,
+                       close_fds=True,
+                       shell=True,
+                       cwd=cwd)
+        if p.wait() == 0:
+            result = p.stdout.read()  # result = p.stdout.readlines()
+            # print(p.cc.read())
+        else:
+            result = p.stderr.read()  # result = p.stderr.readlines()
+        return {'code': p.wait(), 'cwd': cwd, 'data': result, 'msg': 'success'}
+    except:
+        return {'code': -1, 'data': '', 'msg': 'error'}
+
+
+if __name__ == '__main__':
+    print(exec_command('cd /var/db', '/var'))
+    # print(exec_command('who -a'))
+    # print(exec_command('ls')['code'] == 0)
+    # print(shlex.split('uname -a - b'))