InPanel 1.2.1__py3-none-any.whl

inpanel/mod/apt.py

@@ -0,0 +1,316 @@
+# -*- coding: utf-8 -*-
+#
+# Copyright (c) 2020-2026 Jackson Dou
+# All rights reserved.
+#
+# InPanel is distributed under the terms of The New BSD License.
+# The full license can be found in 'LICENSE'.
+'''Module for APT Repository Management'''
+
+import os
+import re
+from pathlib import Path
+
+from .. import base
+from . import file
+from ..apt import apt_sources
+
+sources_list_path = '/etc/apt/sources.list'
+sources_list_d_path = '/etc/apt/sources.list.d'
+
+
+def get_list():
+    '''get sources list'''
+    res = []
+    if base.kernel_name in ('Linux'):
+        if Path(sources_list_path).exists():
+            res.append('sources.list')
+        if Path(sources_list_d_path).exists() and Path(sources_list_d_path).is_dir():
+            items = sorted(os.listdir(sources_list_d_path))
+            for item in items:
+                if item.endswith('.list'):
+                    res.append('sources.list.d/' + item)
+        return res if len(res) > 0 else []
+    elif base.kernel_name in ('Darwin'):
+        return None
+    else:
+        return None
+
+
+def item_exists(source):
+    '''check if source file exists'''
+    if source == 'sources.list':
+        return Path(sources_list_path).exists()
+    elif source.startswith('sources.list.d/'):
+        filename = source[len('sources.list.d/'):]
+        return Path(sources_list_d_path, filename).exists()
+    return False
+
+
+def get_item(source):
+    '''get source config content'''
+    if not source:
+        return None
+    
+    if source == 'sources.list':
+        filepath = sources_list_path
+    elif source.startswith('sources.list.d/'):
+        filename = source[len('sources.list.d/'):]
+        filepath = str(Path(sources_list_d_path) / filename)
+    else:
+        filepath = str(Path(sources_list_d_path) / source)
+    
+    if Path(filepath).exists():
+        try:
+            with open(filepath, 'r', encoding='utf-8') as f:
+                content = f.read()
+            return {'content': content, 'path': filepath}
+        except Exception as e:
+            return None
+    return None
+
+
+def set_item(source, data):
+    '''set source config content'''
+    if not source or not data:
+        return False
+    
+    if source == 'sources.list':
+        filepath = sources_list_path
+    elif source.startswith('sources.list.d/'):
+        filename = source[len('sources.list.d/'):]
+        filepath = str(Path(sources_list_d_path) / filename)
+    else:
+        filepath = str(Path(sources_list_d_path) / source)
+    
+    if Path(filepath).exists():
+        try:
+            with open(filepath, 'w', encoding='utf-8') as f:
+                f.write(data.get('content', ''))
+            return True
+        except Exception as e:
+            return False
+    else:
+        return False
+
+
+def add_item(source, data):
+    '''add source config file'''
+    if not source or not data:
+        return False
+    
+    if source == 'sources.list':
+        filepath = sources_list_path
+        if Path(filepath).exists():
+            return False
+    elif source.startswith('sources.list.d/'):
+        filename = source[len('sources.list.d/'):]
+        filepath = str(Path(sources_list_d_path) / filename)
+    else:
+        filepath = str(Path(sources_list_d_path) / source)
+    
+    if Path(filepath).exists():
+        return False
+    
+    try:
+        parent_dir = Path(filepath).parent
+        if not parent_dir.exists():
+            parent_dir.mkdir(parents=True, exist_ok=True)
+        with open(filepath, 'w', encoding='utf-8') as f:
+            f.write(data.get('content', ''))
+        return True
+    except Exception as e:
+        return False
+
+
+def del_item(source):
+    '''delete source file'''
+    if not source:
+        return None
+    
+    if source == 'sources.list':
+        filepath = sources_list_path
+    elif source.startswith('sources.list.d/'):
+        filename = source[len('sources.list.d/'):]
+        filepath = str(Path(sources_list_d_path) / filename)
+    else:
+        filepath = str(Path(sources_list_d_path) / source)
+    
+    return file.delete(filepath)
+
+
+def parse_sources(content):
+    '''parse sources.list content into structured data'''
+    sources = []
+    for line in content.split('\n'):
+        line = line.strip()
+        if not line or line.startswith('#'):
+            continue
+        
+        match = re.match(r'^(deb|deb-src)\s+(\S+)\s+(\S+)(?:\s+(.+))?$', line)
+        if match:
+            source_type = match.group(1)
+            url = match.group(2)
+            distribution = match.group(3)
+            components = match.group(4).split() if match.group(4) else []
+            
+            sources.append({
+                'type': source_type,
+                'url': url,
+                'distribution': distribution,
+                'components': components
+            })
+    return sources
+
+
+def generate_sources(sources):
+    '''generate sources.list content from structured data'''
+    lines = []
+    for source in sources:
+        components_str = ' '.join(source.get('components', []))
+        if components_str:
+            line = f"{source['type']} {source['url']} {source['distribution']} {components_str}"
+        else:
+            line = f"{source['type']} {source['url']} {source['distribution']}"
+        lines.append(line)
+    return '\n'.join(lines) + '\n'
+
+
+def get_repo_sury(version):
+    '''install sury php repository'''
+    cmds = []
+    cmds.append('apt-get install -y apt-transport-https lsb-release ca-certificates curl')
+    cmds.append('curl -sSLo /usr/share/keyrings/deb.sury.org-php.gpg https://packages.sury.org/php/apt.gpg')
+    cmds.append(f'echo "deb [signed-by=/usr/share/keyrings/deb.sury.org-php.gpg] https://packages.sury.org/php/ $(lsb_release -sc) main" > /etc/apt/sources.list.d/php.list')
+    cmds.append('apt-get update')
+    return cmds
+
+
+def get_repo_nginx():
+    '''install nginx official repository'''
+    cmds = []
+    cmds.append('apt-get install -y apt-transport-https lsb-release ca-certificates curl')
+    cmds.append('curl -sSLo /usr/share/keyrings/nginx-archive-keyring.gpg https://nginx.org/keys/nginx_signing.key')
+    cmds.append('echo "deb [signed-by=/usr/share/keyrings/nginx-archive-keyring.gpg] http://nginx.org/packages/mainline/debian/ $(lsb_release -sc) nginx" > /etc/apt/sources.list.d/nginx.list')
+    cmds.append('echo -e "Package: *\\nPin: origin nginx.org\\nPin: release o=nginx\\nPin-Priority: 900\\n" > /etc/apt/preferences.d/99nginx')
+    cmds.append('apt-get update')
+    return cmds
+
+
+def get_repo_mariadb(mariadb_version):
+    '''install mariadb official repository'''
+    cmds = []
+    cmds.append('apt-get install -y apt-transport-https lsb-release ca-certificates curl')
+    cmds.append('curl -sSLo /usr/share/keyrings/mariadb-keyring.pgp https://mariadb.org/mariadb_release_signing_key.pgp')
+    cmds.append(f'echo "deb [signed-by=/usr/share/keyrings/mariadb-keyring.pgp] https://ftp.osuosl.org/pub/mariadb/repo/{mariadb_version}/debian $(lsb_release -sc) main" > /etc/apt/sources.list.d/mariadb.list')
+    cmds.append('apt-get update')
+    return cmds
+
+
+def get_repo_nodesource(node_version):
+    '''install nodesource repository'''
+    cmds = []
+    cmds.append(f'curl -fsSL https://deb.nodesource.com/setup_{node_version}.x | bash -')
+    cmds.append('apt-get update')
+    return cmds
+
+
+def get_repo_elastic(stack_version):
+    '''install elastic repository'''
+    cmds = []
+    cmds.append('apt-get install -y apt-transport-https lsb-release ca-certificates curl')
+    cmds.append('curl -sSLo /usr/share/keyrings/elasticsearch-keyring.gpg https://artifacts.elastic.co/GPG-KEY-elasticsearch')
+    cmds.append(f'echo "deb [signed-by=/usr/share/keyrings/elasticsearch-keyring.gpg] https://artifacts.elastic.co/packages/{stack_version}.x/apt stable main" > /etc/apt/sources.list.d/elastic.list')
+    cmds.append('apt-get update')
+    return cmds
+
+
+def web_handler(context):
+    '''Handle web requests for APT repository management'''
+    action = context.get('action', '')
+    source = context.get('source', '')
+    
+    if action == 'list':
+        items = get_list()
+        if items is None:
+            return {'code': -1, 'msg': '获取配置失败！'}
+        else:
+            return {'code': 0, 'msg': '', 'data': items}
+    
+    elif action == 'item':
+        if not source:
+            return {'code': -1, 'msg': '配置文件不能为空！'}
+        data = get_item(source)
+        if data is None:
+            return {'code': -1, 'msg': '配置文件不存在！'}
+        else:
+            return {'code': 0, 'msg': '', 'data': data}
+    
+    elif action == 'add':
+        if not source:
+            return {'code': -1, 'msg': '配置文件不能为空！'}
+        
+        content = context.get('content', '')
+        if not content:
+            return {'code': -1, 'msg': '配置内容不能为空！'}
+        
+        data = {'content': content}
+        
+        if item_exists(source):
+            return {'code': -1, 'msg': '配置文件已存在！'}
+        if add_item(source, data) is True:
+            return {'code': 0, 'msg': '配置添加成功！'}
+        else:
+            return {'code': -1, 'msg': '配置添加失败！'}
+    
+    elif action == 'edit':
+        if not source:
+            return {'code': -1, 'msg': '配置文件不能为空！'}
+        
+        content = context.get('content', '')
+        if not content:
+            return {'code': -1, 'msg': '配置内容不能为空！'}
+        
+        data = {'content': content}
+        
+        if not item_exists(source):
+            return {'code': -1, 'msg': '配置文件不存在！'}
+        if set_item(source, data) is True:
+            return {'code': 0, 'msg': '配置修改成功！'}
+        else:
+            return {'code': -1, 'msg': '配置修改失败！'}
+    
+    elif action == 'del':
+        if not source:
+            return {'code': -1, 'msg': '配置文件不能为空！'}
+        if not item_exists(source):
+            return {'code': -1, 'msg': '配置文件不存在！'}
+        if del_item(source) is True:
+            return {'code': 0, 'msg': '配置文件已移入回收站！'}
+        else:
+            return {'code': -1, 'msg': '删除失败！'}
+    
+    elif action == 'parse':
+        content = context.get('content', '')
+        if not content:
+            return {'code': -1, 'msg': '内容不能为空！'}
+        sources = parse_sources(content)
+        return {'code': 0, 'msg': '', 'data': sources}
+    
+    elif action == 'generate':
+        sources = context.get('sources', [])
+        content = generate_sources(sources)
+        return {'code': 0, 'msg': '', 'data': {'content': content}}
+    
+    else:
+        return {'code': -1, 'msg': '未定义的操作！'}
+
+
+if __name__ == '__main__':
+    l = get_list()
+    print(l)
+    if l:
+        i = l[0]
+        print(i)
+        c = get_item(i)
+        print(c)

inpanel/mod/certificate.py

@@ -0,0 +1,268 @@
+# -*- coding: utf-8 -*-
+#
+# Copyright (c) 2017-2026 Jackson Dou
+# All rights reserved.
+#
+# InPanel is distributed under the terms of the New BSD License.
+# The full license can be found in 'LICENSE'.
+
+'''Module for certificate Management.'''
+
+from pathlib import Path
+from shutil import copy
+from subprocess import PIPE, Popen
+
+from . import file
+import os
+from ..acme import ACME
+
+
+class Certificate():
+
+    def __init__(self):
+        # self.path_current = os.path.dirname(os.path.abspath(__file__))
+        self.path_home = '/etc/inpanel/certs/'
+        self.path_acc = str(Path(self.path_home) / 'client.key')
+        self.path_crt = str(Path(self.path_home) / 'crt')
+        self.path_key = str(Path(self.path_home) / 'key')
+        self.path_csr = str(Path(self.path_home) / 'csr')
+        self.key_size = '4096'
+        self.acme = None
+
+        if not Path(self.path_home).exists():
+            Path(self.path_home).mkdir(parents=True, exist_ok=True)
+        if not Path(self.path_crt).exists():
+            Path(self.path_crt).mkdir(parents=True, exist_ok=True)
+        if not Path(self.path_key).exists():
+            Path(self.path_key).mkdir(parents=True, exist_ok=True)
+        if not Path(self.path_csr).exists():
+            Path(self.path_csr).mkdir(parents=True, exist_ok=True)
+
+        self.init_account()
+
+    def _cmd(self, cmd_list, stdin=None, cmd_input=None, err_msg="Command Line Error"):
+        proc = Popen(cmd_list, stdin=stdin, stdout=PIPE, stderr=PIPE)
+        out, err = proc.communicate(cmd_input)
+        out = out if out else err
+        if proc.returncode != 0:
+            raise IOError("{0}\n{1}".format(err_msg, err))
+        return out.decode('utf8')
+
+    def _check_key(self, key):
+        '''check the RSA key is ok'''
+        if not Path(key).exists():
+            return {'code': -1, 'msg': 'key_not_found'}
+        try:
+            out = self._cmd(['openssl', 'rsa', '-in', key, '-check', '-noout'])
+            if 'RSA key ok' in out:
+                return {'code': 0, 'msg': 'key_ok', 'data': 'ok'}
+            else:
+                return {'code': 0, 'msg': 'key_broken'}
+        except:
+            return {'code': -1, 'msg': 'key_check_error'}
+
+    def _check_csr(self, csr):
+        '''verify the CSR is ok'''
+        csr_path = Path(csr)
+        if not csr_path.exists() or not csr_path.is_file():
+            csr = str(Path(self.path_csr) / csr)
+        if not Path(csr).exists():
+            return {'code': -1, 'msg': 'csr_not_found'}
+        try:
+            out = self._cmd(
+                ['openssl', 'req', '-in', csr, '-verify', '-noout'])
+            if 'verify OK' in out:
+                return {'code': 0, 'msg': 'verify_success'}
+            else:
+                return {'code': -1, 'msg': 'verify_error'}
+        except:
+            return {'code': -1, 'msg': 'verify_error'}
+
+    def _generate_private_key(self, file_key=None, forced=False):
+        '''Generate private key'''
+        if file_key == None or file_key == '':
+            return {'code': -1, 'msg': 'need_key_name'}
+        ckk = self._check_key(file_key)
+        if ckk['code'] == 0 and ckk['data'] == 'ok' and forced == False:
+            return {'code': -1, 'msg': 'key_exists'}
+        try:
+            cmd_ = ['openssl', 'genrsa', '-out', file_key, self.key_size]
+            out = self._cmd(cmd_, err_msg='Generate private key error')
+            if out is None:
+                return {'code': -1, 'msg': 'key_generate_error'}
+            else:
+                return {'code': 0, 'msg': 'key_generate_success'}
+        except:
+            return {'code': -1, 'msg': 'key_generate_error'}
+
+    def init_account(self, file_key=None, forced=False):
+        '''Create a Let's Encrypt account private key'''
+        if file_key == None or file_key == '' or not file_key:
+            file_key = self.path_acc
+        return self._generate_private_key(file_key=file_key, forced=forced)
+
+    def create_domain_key(self, domain, forced=False):
+        '''Create a domain private key'''
+        key = str(Path(self.path_key) / (domain + '.key'))
+        return self._generate_private_key(file_key=key, forced=forced)
+
+    def generate_domain_csr(self, domain=[], custom_key=None, forced=False):
+        '''Generate a certificate signing request (CSR) for domains.'''
+        # openssl genrsa 4096 > github.com.key
+        if domain is None or len(domain) == 0:
+            return {'code': -1, 'msg': 'domain_error'}
+        if custom_key and Path(custom_key).is_file():
+            k = custom_key
+        else:
+            k = str(Path(self.path_key) / (domain[0] + '.key'))
+        if not Path(k).is_file():
+            return {'code': -1, 'msg': 'key_not_found'}
+        ckk = self._check_key(k)
+        if ckk['code'] == 0 and ckk['msg'] == 'key_broken':
+            return {'code': -1, 'msg': 'key_broken'}
+        c = str(Path(self.path_csr) / (domain[0] + '.csr'))
+        if Path(c).is_file() and forced == False:
+            return {'code': -1, 'msg': 'csr_exists'}
+
+        subj = '/CN=%s' % domain[0]
+        print(subj)
+        cmd = ['openssl', 'req', '-new', '-sha256', '-key', k, '-subj', subj]
+        conf_tmp = None
+        if len(domain) > 1:
+            san = ['DNS:%s' % domain[0]]
+            for item in domain[1:]:
+                san.append('DNS:%s' % item)
+            san = 'subjectAltName=%s' % (','.join(san))
+            opssl_conf = '/etc/pki/tls/openssl.cnf'
+            conf_tmp = str(Path(self.path_home) / Path(opssl_conf).name)
+            copy(opssl_conf, conf_tmp)
+            with open(conf_tmp, 'a', encoding='utf-8') as f:
+                f.writelines(['\n[SAN]', '\n%s' % san])
+            # config = '<(cat %s <(printf "[SAN]\\n%s"))' % (opssl_conf, san)
+            cmd.extend(['-reqexts', 'SAN', '-config', conf_tmp])
+        out = self._cmd(cmd, err_msg="Create csr error")
+        if conf_tmp is not None and Path(conf_tmp).exists():
+            os.remove(conf_tmp)
+        if out is None:
+            return {'code': -1, 'msg': 'csr_create_error'}
+        else:
+            with open(c, 'w', encoding='utf-8') as f:
+                f.write(out)
+            return {'code': 0, 'msg': 'csr_create_success', 'data': out}
+
+    def show_domain_csr(self, domain_csr=None, text=True, pubkey=False, subject=False):
+        if domain_csr and Path(domain_csr).exists() and Path(domain_csr).is_file():
+            csr = domain_csr
+        else:
+            csr = str(Path(self.path_csr) / domain_csr)
+        if not Path(csr).exists():
+            return {'code': -1, 'msg': 'csr_not_found'}
+
+        ckcsr = self._check_csr(csr)
+        if not ckcsr['code'] == 0:
+            return ckcsr
+        try:
+            cmd_ = ['openssl', 'req', '-in', csr]
+            if text == True and pubkey is not True and subject is not True:
+                cmd_.append('-text')
+            if pubkey is True:
+                cmd_.extend(['-noout', '-pubkey'])
+            if subject is True:
+                cmd_.extend(['-noout', '-subject'])
+            out = self._cmd(cmd_, err_msg='Generate private key error')
+            if out is None:
+                return {'code': -1, 'msg': 'csr_read_error'}
+            else:
+                return {'code': 0, 'msg': 'csr_read_success', 'data': out}
+        except:
+            return {'code': -1, 'msg': 'csr_read_error'}
+
+    def generate_domain_crt(self, domain):
+        '''getting a signed TLS certificate from Let's Encrypt'''
+        if domain is None:
+            return None
+        acc = self.path_acc
+        csr = str(Path(self.path_csr) / (domain + '.csr'))
+        crt = str(Path(self.path_crt) / (domain + '.crt'))
+        ckdir = '/var/www/%s/.well-known/acme-challenge' % domain
+        print(acc, csr, crt, ckdir)
+        if not Path(ckdir).exists():
+            Path(ckdir).mkdir(parents=True, exist_ok=True)
+        self.acme = ACME(acc, csr, ckdir)
+        signed_crt = self.acme.get_certificate()
+        if signed_crt is not None:
+            with open(crt, 'w', encoding='utf-8') as f:
+                f.write(signed_crt)
+
+    def revoke_domain_cert(self, domain=''):
+        print(domain)
+
+    def get_keys_list(self):
+        items = file.listfile(self.path_key)
+        if items is None:
+            return None
+        res = []
+        for i, item in enumerate(items):
+            path_item = Path(item)
+            if path_item.suffix == '.key':
+                res.append({
+                    'name': item,
+                    'ans': path_item.stem,
+                    'ext': path_item.suffix,
+                    'id': 'ididid',
+                    'size': self.key_size
+                })
+        return res
+
+    def get_crts_list(self):
+        items = file.listfile(self.path_crt)
+        if items is None:
+            return None
+        res = []
+        for i, item in enumerate(items):
+            path_item = Path(item)
+            if path_item.suffix == '.crt':
+                res.append({
+                    'name': item,
+                    'ans': path_item.stem,
+                    'ext': path_item.suffix,
+                    'id': 'ididid',
+                    'size': self.key_size
+                })
+        return res
+
+    def get_csrs_list(self):
+        items = file.listfile(self.path_csr)
+        if items is None:
+            return None
+        res = []
+        for i, item in enumerate(items):
+            path_item = Path(item)
+            if path_item.suffix == '.csr':
+                res.append({
+                    'name': item,
+                    'ext': path_item.suffix,
+                    'created': '2019-01-24',
+                    'size': self.key_size,
+                    'description': '说明'
+                })
+        return res
+
+    def get_host_list(self):
+        res = None
+        res = [{
+            'domain': 'baokan.pub',
+            'id': '9a6d6_7f1c1_e1fd1b154418d4d88d32153bec4b20ac',
+            'size': 2048
+        }, {
+            'domain': 'zhoubao.pub',
+            'id': '9a6d6_7f1c1_e1fd1bfgj418d4d45632153bec4b20ac',
+            'size': 2048
+        }]
+        return res
+
+    def get_config(self):
+        return dict()
+
+    def set_config(self):
+        return dict()