ndev-stack 0.3.13__tar.gz → 0.3.15__tar.gz

{ndev_stack-0.3.13 → ndev_stack-0.3.15}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: ndev-stack
-Version: 0.3.13
+Version: 0.3.15
 Summary: Cross-platform developer stack manager for PHP, FastCGI/PHP-FPM, MariaDB, Redis, PostgreSQL, MongoDB, Nginx, SSL, and Mailpit on Linux and Windows
 Author-email: Ankit Karan <ankit.karan99@gmail.com>
 Project-URL: Homepage, https://github.com/ankitkaran99/ndev

{ndev_stack-0.3.13 → ndev_stack-0.3.15}/ndev/__init__.py

@@ -1,7 +1,7 @@
 """
 ndev: Fast, cross-platform PHP developer environment for Windows and Linux.
 """
-__version__ = "0.3.13"
+__version__ = "0.3.15"
 
 from . import common as common
 from .common.logger import logger as logger

{ndev_stack-0.3.13 → ndev_stack-0.3.15}/ndev/linux/commands/db.py

@@ -317,3 +317,64 @@ def drop_user_cmd(
     confirm_destructive(force, username, f"You are about to DROP user '{username}' permanently.")
     execute_drop_user(host, port, user, password, username, user_host)
 
+
+def configure_mariadb_root_password(new_password: str = "root", sudo_password: Optional[str] = None) -> bool:
+    """
+    Configure MariaDB root account to allow password authentication (e.g. root/root)
+    across localhost, 127.0.0.1, and %.
+    Fixes ERROR 1698 (28000): Access denied for user 'root'@'localhost'
+    caused by default unix_socket authentication on Linux.
+    """
+    from ndev.linux.runtime.nginx_helper import run_privileged_command
+    from ndev.common.utils import which_binary
+
+    sql_statements = [
+        f"ALTER USER 'root'@'localhost' IDENTIFIED VIA mysql_native_password USING PASSWORD('{new_password}') OR unix_socket;",
+        f"ALTER USER 'root'@'localhost' IDENTIFIED BY '{new_password}';",
+        f"CREATE USER IF NOT EXISTS 'root'@'127.0.0.1' IDENTIFIED BY '{new_password}';",
+        f"ALTER USER 'root'@'127.0.0.1' IDENTIFIED BY '{new_password}';",
+        f"CREATE USER IF NOT EXISTS 'root'@'%' IDENTIFIED BY '{new_password}';",
+        f"ALTER USER 'root'@'%' IDENTIFIED BY '{new_password}';",
+        "GRANT ALL PRIVILEGES ON *.* TO 'root'@'localhost' WITH GRANT OPTION;",
+        "GRANT ALL PRIVILEGES ON *.* TO 'root'@'127.0.0.1' WITH GRANT OPTION;",
+        "GRANT ALL PRIVILEGES ON *.* TO 'root'@'%' WITH GRANT OPTION;",
+        "FLUSH PRIVILEGES;",
+    ]
+
+    client_bin = which_binary("mariadb") or which_binary("mysql") or "mariadb"
+
+    for sql in sql_statements:
+        try:
+            cmd = [client_bin, "-u", "root", "-e", sql]
+            run_privileged_command(cmd, password=sudo_password, check=False)
+        except Exception:
+            pass
+
+    # Verify if connection succeeds via TCP
+    for h in ["127.0.0.1", "localhost"]:
+        try:
+            test_cmd = [client_bin, "-h", h, "-P", "3306", "-u", "root", f"--password={new_password}", "-e", "SELECT 1;"]
+            res = subprocess.run(test_cmd, capture_output=True, text=True, timeout=5)
+            if res.returncode == 0:
+                return True
+        except Exception:
+            pass
+
+    return False
+
+
+@db_app.command("set-root-password")
+@db_app.command("reset-root")
+def set_root_password_cmd(
+    password: str = typer.Option("root", "--password", "-p", help="New root password (default: root)"),
+):
+    """Set or reset MariaDB root password and enable password login across localhost and 127.0.0.1."""
+    console.print(f"[bold yellow]Configuring MariaDB root access with password '{password}'...[/bold yellow]")
+    ok = configure_mariadb_root_password(new_password=password)
+    if ok:
+        console.print(f"[bold green]✓ MariaDB root password configured successfully! (user: root, password: {password})[/bold green]")
+        console.print(f"[dim]You can now connect via phpMyAdmin, Laravel, or CLI using user 'root' and password '{password}'.[/dim]")
+    else:
+        logger.error("Failed to configure MariaDB root password. Ensure MariaDB is running and you have administrator privileges.")
+        raise typer.Exit(code=1)
+

{ndev_stack-0.3.13 → ndev_stack-0.3.15}/ndev/linux/commands/doctor.py

@@ -64,7 +64,25 @@ def doctor_cmd():
 
     db_path = which_binary("mariadb") or which_binary("mysql") or which_binary("mysqld")
     if db_path:
-        table.add_row("MariaDB / MySQL", "[green]OK[/green]", f"Found at {db_path}")
+        db_details = f"Found at {db_path}"
+        connected = False
+        client_bin = which_binary("mariadb") or which_binary("mysql") or db_path
+        for test_pwd in ["root", ""]:
+            try:
+                cmd = [client_bin, "-h", "127.0.0.1", "-P", "3306", "-u", "root", f"--password={test_pwd}", "-e", "SELECT 1;"]
+                r = subprocess.run(cmd, capture_output=True, timeout=2)
+                if r.returncode == 0:
+                    connected = True
+                    pwd_label = f"password: '{test_pwd}'" if test_pwd else "no password"
+                    db_details += f" (127.0.0.1 root access: {pwd_label})"
+                    break
+            except Exception:
+                pass
+        if not connected:
+            db_details += " (127.0.0.1 root access restricted: run 'ndev db set-root-password')"
+            table.add_row("MariaDB / MySQL", "[yellow]RESTRICTED[/yellow]", db_details)
+        else:
+            table.add_row("MariaDB / MySQL", "[green]OK[/green]", db_details)
     else:
         table.add_row("MariaDB / MySQL", "[yellow]NOT INSTALLED[/yellow]", f"Run 'ndev setup' or: {stack_install_cmd}")
 

{ndev_stack-0.3.13 → ndev_stack-0.3.15}/ndev/linux/commands/setup.py

@@ -51,9 +51,9 @@ def setup_cmd():
             console.print("[bold yellow]Refreshing openSUSE repositories (sudo zypper refresh)...[/bold yellow]")
             subprocess.run(["sudo", "zypper", "--non-interactive", "refresh"], check=True)
             
-            # 2. Install MariaDB, Nginx, curl, and Bubblewrap
-            console.print("\n[bold yellow]Installing MariaDB, Nginx, curl, and Bubblewrap (sudo zypper install)...[/bold yellow]")
-            packages = ["mariadb", "mariadb-client", "nginx", "curl", "bubblewrap"]
+            # 2. Install MariaDB, Nginx, curl, Bubblewrap, and SELinux tools
+            console.print("\n[bold yellow]Installing MariaDB, Nginx, curl, Bubblewrap, and system tools (sudo zypper install)...[/bold yellow]")
+            packages = ["mariadb", "mariadb-client", "nginx", "curl", "bubblewrap", "policycoreutils-python-utils"]
             subprocess.run(["sudo", "zypper", "--non-interactive", "install", "-y"] + packages, check=True)
 
             # Optional mkcert package
@@ -65,27 +65,16 @@ def setup_cmd():
             except Exception:
                 pass
 
-            try:
-                subprocess.run(["sudo", "systemctl", "enable", "--now", "mariadb"], check=False, capture_output=True)
-                subprocess.run(["sudo", "systemctl", "enable", "--now", "nginx"], check=False, capture_output=True)
-            except Exception:
-                pass
-
-            try:
-                from ndev.linux.runtime.nginx_helper import ensure_selinux_httpd_permissions
-                ensure_selinux_httpd_permissions()
-            except Exception:
-                pass
-
-            console.print("[bold green]MariaDB, Nginx, and Bubblewrap installed and configured successfully![/bold green]\n")
+            console.print("[bold green]System packages installed successfully![/bold green]\n")
         else:
             # 1. Update Package Lists
             console.print("[bold yellow]Updating package lists (sudo apt-get update)...[/bold yellow]")
             subprocess.run(["sudo", "apt-get", "update"], check=True)
             
             # 2. Install MariaDB and Nginx
-            console.print("\n[bold yellow]Installing MariaDB and Nginx (sudo apt-get install)...[/bold yellow]")
-            subprocess.run(["sudo", "apt-get", "install", "-y", "mariadb-server", "nginx", "curl"], check=True)
+            console.print("\n[bold yellow]Installing MariaDB, Nginx, curl, Bubblewrap, and system tools (sudo apt-get install)...[/bold yellow]")
+            packages = ["mariadb-server", "nginx", "curl", "bubblewrap", "policycoreutils-python-utils"]
+            subprocess.run(["sudo", "apt-get", "install", "-y"] + packages, check=True)
 
             # Optional mkcert package
             try:
@@ -96,9 +85,73 @@ def setup_cmd():
             except Exception:
                 pass
 
-            console.print("[bold green]MariaDB and Nginx installed successfully![/bold green]\n")
-        
-        # 3. Install Composer
+            console.print("[bold green]System packages installed successfully![/bold green]\n")
+
+        # 3. Auto-configure Stack Services, Permissions, SSL, and SELinux
+        console.print("[bold yellow]Auto-configuring stack services, directories, SSL, and SELinux...[/bold yellow]")
+        from ndev.linux.runtime.nginx_helper import (
+            ensure_selinux_httpd_permissions,
+            ensure_nginx_ssl_dir,
+            ensure_nginx_sites_enabled_included,
+            ensure_development_directories,
+            reload_nginx,
+        )
+
+        # Enable & start system services
+        try:
+            subprocess.run(["sudo", "systemctl", "enable", "--now", "mariadb"], check=False, capture_output=True)
+            subprocess.run(["sudo", "systemctl", "enable", "--now", "nginx"], check=False, capture_output=True)
+            console.print("  [bold green]✓[/bold green] Enabled and started MariaDB and Nginx system services.")
+        except Exception:
+            pass
+
+        # SELinux Permissions
+        try:
+            ok = ensure_selinux_httpd_permissions()
+            if ok:
+                console.print("  [bold green]✓[/bold green] Configured SELinux permissions for Nginx (httpd_t set to permissive).")
+        except Exception as e:
+            logger.warning(f"SELinux configuration notice: {e}")
+
+        # Nginx SSL Directory (/etc/nginx/ssl)
+        try:
+            ensure_nginx_ssl_dir()
+            console.print("  [bold green]✓[/bold green] Configured Nginx SSL certificate directory (/etc/nginx/ssl).")
+        except Exception as e:
+            logger.warning(f"SSL directory configuration notice: {e}")
+
+        # Nginx Sites-Enabled / Vhosts Bridge
+        try:
+            ensure_nginx_sites_enabled_included()
+            console.print("  [bold green]✓[/bold green] Configured Nginx sites-available/sites-enabled directory bridge.")
+        except Exception as e:
+            logger.warning(f"Nginx bridge configuration notice: {e}")
+
+        # Web development root permissions and docroot traversal
+        try:
+            ensure_development_directories()
+            console.print("  [bold green]✓[/bold green] Configured web development root permissions (~/Sites).")
+        except Exception as e:
+            logger.warning(f"Docroot permission notice: {e}")
+
+        # Reload Nginx
+        try:
+            reload_nginx()
+            console.print("  [bold green]✓[/bold green] Nginx web server configuration reloaded.")
+        except Exception:
+            pass
+
+        # MariaDB Root User Authentication (root / root)
+        try:
+            from ndev.linux.commands.db import configure_mariadb_root_password
+            if configure_mariadb_root_password(new_password="root"):
+                console.print("  [bold green]✓[/bold green] Configured MariaDB root access (user: root, password: root).")
+            else:
+                console.print("  [yellow]Notice: MariaDB root access could not be automatically set to root/root.[/yellow]")
+        except Exception as e:
+            logger.warning(f"MariaDB root configuration notice: {e}")
+
+        # 4. Install Composer
         local_bin = get_user_local_bin_dir()
         composer_bin = local_bin / "composer"
         if composer_bin.exists():
@@ -150,7 +203,12 @@ def setup_cmd():
             chown_to_sudo_user(ndev_link)
             console.print(f"[bold green]Created symlink {ndev_link} -> {ndev_venv_path}[/bold green]")
             
-        console.print("\n[bold green]System setup completed successfully![/bold green]")
+        console.print("\n[bold green]System setup completed successfully![/bold green]\n")
+        try:
+            from ndev.linux.commands.doctor import doctor_cmd
+            doctor_cmd()
+        except Exception:
+            pass
         
     except subprocess.CalledProcessError as e:
         logger.error(f"Command execution failed: {e}")

{ndev_stack-0.3.13 → ndev_stack-0.3.15}/ndev/linux/runtime/nginx_helper.py

@@ -74,14 +74,26 @@ def run_privileged_command(
     capture_output: bool = True
 ) -> subprocess.CompletedProcess:
     """
-    Run a command with elevated privileges using sudo -n if non-root.
+    Run a command with elevated privileges using sudo if non-root.
     Validates sudo password first if provided to refresh the sudo credential timestamp.
+    If no password provided:
+      - Uses sudo -n if not in an interactive terminal or if sudo timestamp is active.
+      - Falls back to interactive sudo if in an interactive terminal.
     """
     full_cmd = list(cmd)
     if os.geteuid() != 0:
         if password:
             validate_sudo_password(password)
-        full_cmd = ["sudo", "-n"] + full_cmd
+            full_cmd = ["sudo", "-n"] + full_cmd
+        else:
+            if not check_sudo_needs_password():
+                full_cmd = ["sudo", "-n"] + full_cmd
+            elif sys.stdin.isatty():
+                full_cmd = ["sudo"] + full_cmd
+                capture_output = False
+            else:
+                full_cmd = ["sudo", "-n"] + full_cmd
+
     return subprocess.run(
         full_cmd,
         check=check,
@@ -156,6 +168,67 @@ def ensure_selinux_httpd_permissions(password: Optional[str] = None) -> bool:
     return success or is_selinux_httpd_permissive()
 
 
+def ensure_nginx_ssl_dir(password: Optional[str] = None) -> Path:
+    """
+    Ensure /etc/nginx/ssl directory exists with 0755 permissions and proper SELinux context.
+    """
+    ssl_dir = Path("/etc/nginx/ssl")
+    if os.geteuid() == 0:
+        ssl_dir.mkdir(parents=True, exist_ok=True)
+        try:
+            os.chmod(str(ssl_dir), 0o755)
+        except Exception:
+            pass
+    else:
+        run_privileged_command(["mkdir", "-p", str(ssl_dir)], password=password, check=False)
+        run_privileged_command(["chmod", "755", str(ssl_dir)], password=password, check=False)
+
+    if shutil.which("restorecon"):
+        run_privileged_command(["restorecon", "-Rv", str(ssl_dir)], password=password, check=False)
+
+    return ssl_dir
+
+
+def ensure_development_directories(password: Optional[str] = None) -> None:
+    """
+    Ensure the user home directory has +x traversal permissions,
+    ~/Sites directory exists with 0755 permissions, and any configured vhost docroots are accessible.
+    """
+    home = Path.home()
+    sudo_user = os.environ.get("SUDO_USER")
+    if sudo_user:
+        try:
+            import pwd
+            home = Path(pwd.getpwnam(sudo_user).pw_dir)
+        except Exception:
+            pass
+
+    # Ensure home has traversal (+x)
+    try:
+        st = home.stat()
+        if not (st.st_mode & 0o001):
+            os.chmod(str(home), st.st_mode | 0o001)
+    except Exception:
+        pass
+
+    # Ensure ~/Sites exists
+    sites_dir = home / "Sites"
+    try:
+        sites_dir.mkdir(parents=True, exist_ok=True)
+        os.chmod(str(sites_dir), 0o755)
+    except Exception:
+        pass
+
+    # Ensure all configured vhost docroots are accessible
+    try:
+        for vhost in list_vhosts():
+            docroot = vhost.get("root")
+            if docroot and Path(docroot).exists():
+                ensure_docroot_accessible(Path(docroot))
+    except Exception:
+        pass
+
+
 def write_privileged_file(target: Path, content: str, password: Optional[str] = None) -> None:
     """
     Write content to a file, using sudo tee if current process lacks permissions.

{ndev_stack-0.3.13 → ndev_stack-0.3.15}/ndev_stack.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: ndev-stack
-Version: 0.3.13
+Version: 0.3.15
 Summary: Cross-platform developer stack manager for PHP, FastCGI/PHP-FPM, MariaDB, Redis, PostgreSQL, MongoDB, Nginx, SSL, and Mailpit on Linux and Windows
 Author-email: Ankit Karan <ankit.karan99@gmail.com>
 Project-URL: Homepage, https://github.com/ankitkaran99/ndev

{ndev_stack-0.3.13 → ndev_stack-0.3.15}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "ndev-stack"
-version = "0.3.13"
+version = "0.3.15"
 description = "Cross-platform developer stack manager for PHP, FastCGI/PHP-FPM, MariaDB, Redis, PostgreSQL, MongoDB, Nginx, SSL, and Mailpit on Linux and Windows"
 readme = "README.md"
 requires-python = ">=3.10"

{ndev_stack-0.3.13 → ndev_stack-0.3.15}/tests/test_opensuse_compat.py

@@ -549,6 +549,17 @@ class TestTuiSelectEventHandling(unittest.TestCase):
                 app._switch_php_version.assert_called_once_with("8.4.27")
 
 
+class TestDatabaseCommands(unittest.TestCase):
+    def test_configure_mariadb_root_password(self):
+        from ndev.linux.commands.db import configure_mariadb_root_password
+        with patch("ndev.linux.runtime.nginx_helper.run_privileged_command") as mock_priv:
+            with patch("subprocess.run") as mock_run:
+                mock_run.return_value = subprocess.CompletedProcess(args=[], returncode=0)
+                ok = configure_mariadb_root_password(new_password="root")
+                self.assertTrue(ok)
+                mock_priv.assert_called()
+
+
 class TestTuiEnsureSudo(unittest.TestCase):
     def test_ensure_sudo_when_not_needed(self):
         from ndev.linux.tui import NdevDashboard