# -- coding: utf-8 -- # Licensed to the Apache Software Foundation (ASF) under one # or more contributor license agreements. See the NOTICE file # distributed with this work for additional information # regarding copyright ownership. The ASF licenses this file # to you under the Apache License, Version 2.0 (the # "License"); you may not use this file except in compliance # with the License. You may obtain a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, # software distributed under the License is distributed on an # "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY # KIND, either express or implied. See the License for the # specific language governing permissions and limitations # under the License. import os import CsHelper from CsFile import CsFile from CsProcess import CsProcess import CsHelper class CsApp: def __init__(self, ip): self.dev = ip.getDevice() self.ip = ip.get_ip_address() self.type = ip.get_type() self.fw = ip.fw class CsApache(CsApp): """ Set up Apache """ def remove(self): file = "/etc/apache2/conf.d/vhost%s.conf" % self.dev if os.path.isfile(file): os.remove(file) CsHelper.service("apache2", "restart") def setup(self): CsHelper.copy_if_needed("/etc/apache2/vhostexample.conf", "/etc/apache2/conf.d/vhost%s.conf" % self.dev) file = CsFile("/etc/apache2/conf.d/vhost%s.conf" % (self.dev)) file.search("", "\t" % (self.ip)) file.search("", "\t" % (self.ip)) file.search("", "\t" % (self.ip)) file.search("Listen .*:80", "Listen %s:80" % (self.ip)) file.search("Listen .*:443", "Listen %s:443" % (self.ip)) file.search("ServerName.*", "\tServerName vhost%s.cloudinternal.com" % (self.dev)) file.commit() if file.is_changed(): CsHelper.service("apache2", "restart") self.fw.append(["", "front", "-A INPUT -i %s -d %s/32 -p tcp -m tcp -m state --state NEW --dport 80 -j ACCEPT" % (self.dev, self.ip) ]) class CsPasswdSvc(CsApp): """ nohup bash /opt/cloud/bin/vpc_passwd_server $ip >/dev/null 2>&1 & """ def setup(self): self.fw.append(["", "front", "-A INPUT -i %s -d %s/32 -p tcp -m tcp -m state --state NEW --dport 8080 -j ACCEPT" % (self.dev, self.ip) ]) proc = CsProcess(['/opt/cloud/bin/vpc_passwd_server', self.ip]) if not proc.find(): proc.start("/usr/bin/nohup", "2>&1 &") class CsDnsmasq(CsApp): """ Set up dnsmasq """ def add_firewall_rules(self): """ Add the necessary firewall rules """ self.fw.append(["", "front", "-A INPUT -i %s -p udp -m udp --dport 67 -j ACCEPT" % self.dev ]) self.fw.append(["", "front", "-A INPUT -i %s -d %s/32 -p udp -m udp --dport 53 -j ACCEPT" % (self.dev, self.ip) ]) self.fw.append(["", "front", "-A INPUT -i %s -d %s/32 -p tcp -m tcp --dport 53 -j ACCEPT" % ( self.dev, self.ip ) ])