mirror of
https://github.com/apache/cloudstack.git
synced 2025-10-26 08:42:29 +01:00
111 lines
4.0 KiB
Python
Executable File
111 lines
4.0 KiB
Python
Executable File
# -- coding: utf-8 --
|
|
# Licensed to the Apache Software Foundation (ASF) under one
|
|
# or more contributor license agreements. See the NOTICE file
|
|
# distributed with this work for additional information
|
|
# regarding copyright ownership. The ASF licenses this file
|
|
# to you under the Apache License, Version 2.0 (the
|
|
# "License"); you may not use this file except in compliance
|
|
# with the License. You may obtain a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing,
|
|
# software distributed under the License is distributed on an
|
|
# "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
|
|
# KIND, either express or implied. See the License for the
|
|
# specific language governing permissions and limitations
|
|
# under the License.
|
|
import os
|
|
from CsFile import CsFile
|
|
import CsHelper
|
|
|
|
|
|
class CsApp:
|
|
def __init__(self, ip):
|
|
self.dev = ip.getDevice()
|
|
self.ip = ip.get_ip_address()
|
|
self.gateway = ip.get_gateway()
|
|
self.type = ip.get_type()
|
|
self.fw = ip.fw
|
|
self.config = ip.config
|
|
|
|
|
|
class CsApache(CsApp):
|
|
""" Set up Apache """
|
|
|
|
def remove(self):
|
|
file = "/etc/apache2/sites-enabled/vhost-%s.conf" % self.dev
|
|
if os.path.isfile(file):
|
|
os.remove(file)
|
|
CsHelper.service("apache2", "restart")
|
|
|
|
def setup(self):
|
|
CsHelper.copy_if_needed("/etc/apache2/vhost.template",
|
|
"/etc/apache2/sites-enabled/vhost-%s.conf" % self.ip)
|
|
|
|
file = CsFile("/etc/apache2/sites-enabled/vhost-%s.conf" % (self.ip))
|
|
if not self.config.cl.is_redundant():
|
|
file.replaceIfFound("<VirtualHost.*:8180>", "<VirtualHost %s:80>" % (self.ip))
|
|
file.replaceIfFound("<VirtualHost.*:8443>", "\t<VirtualHost %s:443>" % (self.ip))
|
|
file.replaceIfFound("Listen .*:8180", "Listen %s:80" % (self.ip))
|
|
file.replaceIfFound("Listen .*:8443", "Listen %s:443" % (self.ip))
|
|
else:
|
|
file.replaceIfFound("<VirtualHost.*:8180>", "<VirtualHost %s:80 %s:80>" % (self.ip, self.gateway))
|
|
file.replaceIfFound("<VirtualHost.*:8443>", "\t<VirtualHost %s:443 %s:443>" % (self.ip, self.gateway))
|
|
file.replaceIfFound("Listen .*:8180", "Listen %s:80\nListen %s:80" % (self.ip, self.gateway))
|
|
file.replaceIfFound("Listen .*:8443", "Listen %s:443\nListen %s:443" % (self.ip, self.gateway))
|
|
file.search("ServerName.*", "\tServerName %s.%s" % (self.config.cl.get_type(), self.config.get_domain()))
|
|
if file.is_changed():
|
|
file.commit()
|
|
CsHelper.execute2("systemctl restart apache2", False)
|
|
|
|
self.fw.append([
|
|
"", "front",
|
|
"-A INPUT -i %s -d %s/32 -p tcp -m tcp -m state --state NEW --dport 80 -j ACCEPT" % (self.dev, self.ip)
|
|
])
|
|
|
|
self.fw.append([
|
|
"", "front",
|
|
"-A INPUT -i %s -d %s/32 -p tcp -m tcp -m state --state NEW --dport 443 -j ACCEPT" % (self.dev, self.ip)
|
|
])
|
|
|
|
|
|
class CsPasswdSvc():
|
|
"""
|
|
CloudStack VR password server
|
|
"""
|
|
|
|
def __init__(self, ip):
|
|
self.ip = ip
|
|
|
|
def start(self):
|
|
CsHelper.service("cloud-password-server@%s" % self.ip, "start")
|
|
|
|
def stop(self):
|
|
CsHelper.service("cloud-password-server@%s" % self.ip, "stop")
|
|
|
|
def restart(self):
|
|
CsHelper.service("cloud-password-server@%s" % self.ip, "restart")
|
|
|
|
|
|
class CsDnsmasq(CsApp):
|
|
""" Set up dnsmasq """
|
|
|
|
def add_firewall_rules(self):
|
|
""" Add the necessary firewall rules
|
|
"""
|
|
self.fw.append(["", "front",
|
|
"-A INPUT -i %s -p udp -m udp --dport 67 -j ACCEPT" % self.dev
|
|
])
|
|
|
|
if self.config.has_dns():
|
|
self.fw.append([
|
|
"", "front",
|
|
"-A INPUT -i %s -d %s/32 -p udp -m udp --dport 53 -j ACCEPT" % (self.dev, self.ip)
|
|
])
|
|
|
|
self.fw.append([
|
|
"", "front",
|
|
"-A INPUT -i %s -d %s/32 -p tcp -m tcp --dport 53 -j ACCEPT" % (self.dev, self.ip)
|
|
])
|