mirror of
https://github.com/apache/cloudstack.git
synced 2025-11-02 20:02:29 +01:00
91a8faac31
* make CORS include a regular glob-matched one * fix NameVirtualHost in CsApp.py as well * even moar cleanups
114 lines
3.8 KiB
Python
Executable File
114 lines
3.8 KiB
Python
Executable File
# -- coding: utf-8 --
|
|
# Licensed to the Apache Software Foundation (ASF) under one
|
|
# or more contributor license agreements. See the NOTICE file
|
|
# distributed with this work for additional information
|
|
# regarding copyright ownership. The ASF licenses this file
|
|
# to you under the Apache License, Version 2.0 (the
|
|
# "License"); you may not use this file except in compliance
|
|
# with the License. You may obtain a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing,
|
|
# software distributed under the License is distributed on an
|
|
# "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
|
|
# KIND, either express or implied. See the License for the
|
|
# specific language governing permissions and limitations
|
|
# under the License.
|
|
import os
|
|
import CsHelper
|
|
from CsFile import CsFile
|
|
from CsProcess import CsProcess
|
|
import CsHelper
|
|
|
|
|
|
class CsApp:
|
|
def __init__(self, ip):
|
|
self.dev = ip.getDevice()
|
|
self.ip = ip.get_ip_address()
|
|
self.type = ip.get_type()
|
|
self.fw = ip.fw
|
|
self.config = ip.config
|
|
|
|
|
|
class CsApache(CsApp):
|
|
""" Set up Apache """
|
|
|
|
def remove(self):
|
|
file = "/etc/apache2/sites-enabled/vhost-%s.conf" % self.dev
|
|
if os.path.isfile(file):
|
|
os.remove(file)
|
|
CsHelper.service("apache2", "restart")
|
|
|
|
def setup(self):
|
|
CsHelper.copy_if_needed("/etc/apache2/vhost.template",
|
|
"/etc/apache2/sites-enabled/vhost-%s.conf" % self.ip)
|
|
|
|
file = CsFile("/etc/apache2/sites-enabled/vhost-%s.conf" % (self.ip))
|
|
file.search("<VirtualHost.*:80>", "\t<VirtualHost %s:80>" % (self.ip))
|
|
file.search("<VirtualHost.*:443>", "\t<VirtualHost %s:443>" % (self.ip))
|
|
file.search("Listen .*:80", "Listen %s:80" % (self.ip))
|
|
file.search("Listen .*:443", "Listen %s:443" % (self.ip))
|
|
file.search("NameVirtualHost .*:80", "NameVirtualHost %s:80" % (self.ip))
|
|
file.search("ServerName.*", "\tServerName %s.%s" % (self.config.cl.get_type(), self.config.get_domain()))
|
|
if file.is_changed():
|
|
file.commit()
|
|
CsHelper.service("apache2", "restart")
|
|
|
|
self.fw.append([
|
|
"", "front",
|
|
"-A INPUT -i %s -d %s/32 -p tcp -m tcp -m state --state NEW --dport 80 -j ACCEPT" % (self.dev, self.ip)
|
|
])
|
|
|
|
self.fw.append([
|
|
"", "front",
|
|
"-A INPUT -i %s -d %s/32 -p tcp -m tcp -m state --state NEW --dport 443 -j ACCEPT" % (self.dev, self.ip)
|
|
])
|
|
|
|
|
|
class CsPasswdSvc():
|
|
"""
|
|
nohup bash /opt/cloud/bin/vpc_passwd_server $ip >/dev/null 2>&1 &
|
|
"""
|
|
|
|
def __init__(self, ip):
|
|
self.ip = ip
|
|
|
|
def start(self):
|
|
proc = CsProcess(["dummy"])
|
|
if proc.grep("passwd_server_ip %s" % self.ip) == -1:
|
|
proc.start("/opt/cloud/bin/passwd_server_ip %s >> /var/log/cloud.log 2>&1" % self.ip, "&")
|
|
|
|
def stop(self):
|
|
proc = CsProcess(["Password Service"])
|
|
pid = proc.grep("passwd_server_ip %s" % self.ip)
|
|
proc.kill(pid)
|
|
pid = proc.grep("8080,reuseaddr,fork,crnl,bind=%s" % self.ip)
|
|
proc.kill(pid)
|
|
|
|
def restart(self):
|
|
self.stop()
|
|
self.start()
|
|
|
|
|
|
class CsDnsmasq(CsApp):
|
|
""" Set up dnsmasq """
|
|
|
|
def add_firewall_rules(self):
|
|
""" Add the necessary firewall rules
|
|
"""
|
|
self.fw.append(["", "front",
|
|
"-A INPUT -i %s -p udp -m udp --dport 67 -j ACCEPT" % self.dev
|
|
])
|
|
|
|
if self.config.has_dns():
|
|
self.fw.append([
|
|
"", "front",
|
|
"-A INPUT -i %s -d %s/32 -p udp -m udp --dport 53 -j ACCEPT" % (self.dev, self.ip)
|
|
])
|
|
|
|
self.fw.append([
|
|
"", "front",
|
|
"-A INPUT -i %s -d %s/32 -p tcp -m tcp --dport 53 -j ACCEPT" % (self.dev, self.ip)
|
|
])
|