Files

756 lines
29 KiB
Python
Raw Permalink Normal View History

2026-04-07 02:04:22 +05:30
# coding: utf-8
# -------------------------------------------------------------------
# yakpanel
# -------------------------------------------------------------------
# Copyright (c) 2015-2099 yakpanel(http://www.yakpanel.com) All rights reserved.
# -------------------------------------------------------------------
# Author: sww <sww@yakpanel.com>
# -------------------------------------------------------------------
import json
import os
# ------------------------------
# 服务模型
# ------------------------------
import sys, re
import time
import traceback
if "/www/server/panel/class" not in sys.path:
sys.path.insert(0, "/www/server/panel/class")
os.chdir("/www/server/panel")
import public
import glob
# 关闭系统加固执行函数后打开
def syssafe_admin(func):
def wrapper(*args, **kwargs):
syssafe_flag = 0
# 检查系统加固并且关闭
if os.path.exists('/www/server/panel/plugin/syssafe/init.sh'):
res = public.ExecShell('/www/server/panel/plugin/syssafe/init.sh status')
if 'already running' in res[0]:
try:
syssafe_flag = 1
public.ExecShell('/www/server/panel/plugin/syssafe/init.sh stop')
res = public.ExecShell('/www/server/panel/plugin/syssafe/init.sh status')
if 'already running' in res[0]:
import PluginLoader
PluginLoader.plugin_run('syssafe', 'set_open', public.to_dict_obj({'status': 0}))
print('已关闭系统加固!')
except:
pass
e = None
result = None
try:
result = func(*args, **kwargs)
except Exception as ex:
e= ex
try:
if syssafe_flag:
public.ExecShell('/www/server/panel/plugin/syssafe/init.sh stop')
res = public.ExecShell('/www/server/panel/plugin/syssafe/init.sh status')
if 'already running' not in res[0]:
import PluginLoader
PluginLoader.plugin_run('syssafe', 'set_open', public.to_dict_obj({'status': 1}))
print('已开启系统加固!')
except:
pass
if e is not None:
raise e
return result
return wrapper
class RealServer:
server_list = ['mysqld_safe', 'redis-server', 'mongod', 'postgres', 'nginx', 'memcached', 'httpd', 'pure-ftpd', 'jsvc', 'dockerd']
system_info = None
# --------------------- 常用服务管理 start----------------------
def server_admin(self, server_name: str, option: str) -> dict:
"""
服务管理
:param server_name:'mysqld_safe', 'redis-server', 'mongod', 'postgres', 'nginx', 'memcached', 'httpd', 'pure-ftpd', 'jsvc', 'dockerd'
:param option: start,stop,restart
:return:
"""
servers = {
"mongod": self.__mongod_admin,
"redis-server": self.__redis_admin,
"memcached": self.__memcached_admin,
"dockerd": self.__docker_admin,
"jsvc": self.__tomcat_admin,
"pure-ftpd": self.__ftp_admin,
"httpd": self.__apache_admin,
"mysqld_safe": self.__mysqld_admin,
"nginx": self.__nginx_admin,
"postgres": self.__pgsql_admin,
}
from system import system
self.syst = system()
if server_name in self.server_list:
res = servers[server_name](option)
return public.returnResult(code=1, msg=res['msg'], status=res['status'])
else:
return public.returnResult(code=0, msg='operation failure Parameter does not exist', status=False)
def __mongod_admin(self, option: str) -> dict:
try:
Command = {"start": "/etc/init.d/mongodb start",
"stop": "/etc/init.d/mongodb stop", }
if option != 'restart':
public.ExecShell(Command.get(option))
return public.returnMsg(True, 'operate successfully!')
public.ExecShell(Command.get('stop'))
public.ExecShell(Command.get('start'))
return public.returnMsg(True, 'operate successfully!')
except:
return public.returnMsg(False, 'operation failure')
def __redis_admin(self, option: str) -> dict:
try:
get = public.dict_obj()
get.name = 'redis'
get.type = option
return self.syst.serverAdmin(get)
except:
return public.returnMsg(False, 'operation failure')
def __memcached_admin(self, option: str) -> dict:
try:
get = public.dict_obj()
get.name = 'memcached'
get.type = option
return self.syst.serverAdmin(get)
except:
return public.returnMsg(False, 'operation failure')
def __docker_admin(self, option: str) -> dict:
try:
exec_str = 'systemctl {} docker.socket'.format(option)
public.ExecShell(exec_str)
return public.returnMsg(True, "operate successfully")
except:
return public.returnMsg(False, 'operation failure')
def __tomcat_admin(self, option: str) -> dict:
try:
get = public.dict_obj()
get.name = 'tomcat'
get.type = option
self.syst.serverAdmin(get)
return public.returnMsg(True, 'operate successfully!')
except:
return public.returnMsg(False, 'operation failure')
def __ftp_admin(self, option: str) -> dict:
try:
get = public.dict_obj()
get.name = 'pure-ftpd'
get.type = option
return self.syst.serverAdmin(get)
except:
return public.returnMsg(False, 'operation failure')
def __apache_admin(self, option: str) -> dict:
try:
get = public.dict_obj()
get.name = 'apache'
get.type = option
res = self.syst.serverAdmin(get)
import time
time.sleep(1)
return res
except:
return public.returnMsg(False, 'operation failure')
def __mysqld_admin(self, option: str) -> dict:
try:
get = public.dict_obj()
get.name = 'mysqld'
get.type = option
return self.syst.serverAdmin(get)
except:
return public.returnMsg(False, 'operation failure')
def __nginx_admin(self, option: str) -> dict:
try:
get = public.dict_obj()
get.name = 'nginx'
get.type = option
return self.syst.serverAdmin(get)
except:
return public.returnMsg(False, 'operation failure')
def __pgsql_admin(self, option: str) -> dict:
try:
get = public.dict_obj()
get.name = 'pgsql'
get.type = option
return self.syst.serverAdmin(get)
except:
return public.returnMsg(False, 'operation failure')
# ----------------------常用服务管理 end----------------------
# ----------------------常用服务状态 start----------------------
def server_status(self, server_name: str) -> dict:
"""
服务状态
:param server_name: 'mysqld_safe', 'redis-server', 'mongod', 'postgres', 'nginx', 'memcached', 'httpd', 'pure-ftpd', 'jsvc', 'dockerd'
:return:
"""
try:
if server_name in self.server_list:
res = self.__get_status(server_name)
return public.returnResult(code=1, msg=res['msg'], data=res['data'], status=res['status'])
else:
return public.returnResult(code=0, msg='operation failure Parameter does not exist', status=False)
except Exception as e:
return public.returnResult(code=0, msg='operation failure', status=False)
def __is_installation(self, name: str) -> bool:
map = {
"mysqld_safe": "mysqld",
"redis-server": "redis",
"mongod": "mongodb",
"postgres": "pgsql",
"nginx": "nginx",
"memcached": "memcached",
"httpd": "httpd",
"pure-ftpd": "pure-ftpd",
"jsvc": "tomcat",
"dockerd": "docker",
"php": "php",
"tamper_proof": "tamper_proof",
"bt_security": "bt_security",
"syssafe": "syssafe",
}
import glob
dir_path = '/etc/init.d/'
files = [os.path.basename(f) for f in glob.glob(dir_path + "*")]
if name == "dockerd":
res = public.ExecShell('docker -v')[0]
if 'version' in res:
return True
return False
if name == "postgres":
res = public.ExecShell('/www/server/pgsql/bin/psql --version')[0]
pgsql = False
if 'PostgreSQL' in res:
pgsql = True
Manager = False
if os.path.exists('/www/server/panel/plugin/pgsql_manager'):
Manager = True
return {'pgsql': pgsql, 'Manager': Manager}
if name == "php":
php_l = [i for i in files if name in i.lower()]
if len(php_l) != 0:
return True
if name == "tamper_proof":
return os.path.exists('/www/server/panel/plugin/tamper_proof')
if name == "bt_security":
return os.path.exists('/www/server/panel/plugin/bt_security')
if name == "syssafe":
return os.path.exists('/www/server/panel/plugin/syssafe')
if map[name] in files:
return True
return False
def __get_status(self, server_name: str) -> dict:
try:
if not self.__is_installation(server_name):
return {'status': True, 'msg': '', 'data': {'install': False, 'status': False}}
res = public.ExecShell('ps -ef|grep {}|grep -v grep'.format(server_name))[0]
if 'mongod' in res:
return {'status': True, 'msg': '', 'data': {'install': True, 'status': True}}
return {'status': True, 'msg': '', 'data': {'install': True, 'status': False}}
except:
return {'status': False, 'msg': '获取失败!', 'data': {'install': False, 'status': False}}
# ----------------------常用服务状态 end----------------------
# ---------------------- 通用服务管理 start----------------------
def universal_server_admin(self, server_name: str, option: str) -> dict:
"""
通用服务管理 服务器在/etc/init.d/目录下有同名的启动文件且启动文件中有start,stop,restart,status命令
:param server_name: 服务名称
:param option: start,stop,restart
:return:
"""
try:
get = public.dict_obj()
get.name = server_name
get.type = option
dir_path = '/etc/init.d/'
files = [os.path.basename(f) for f in glob.glob(dir_path + "*")]
if server_name in files:
res = public.ExecShell('/etc/init.d/{} {}'.format(server_name, option))
if 'is running' in res[0].lower() or 'is active' in res[0].lower() or 'already running' in res[0].lower():
return public.returnResult(code=1, msg='operate successfully!', status=True)
if 'is stopped' in res[0].lower() or 'is not running' in res[0].lower():
return public.returnResult(code=1, msg='operate successfully!', status=True)
else:
return public.returnResult(code=0, msg='operation failure The service was not found in /etc/init.d/', status=False)
except:
return public.returnResult(code=0, msg='operation failure', status=False)
# ---------------------- 通用服务管理 end----------------------
# ---------------------- 通用服务状态 start----------------------
def universal_server_status(self, server_name: str) -> dict:
"""
通用服务状态 服务器在/etc/init.d/目录下有同名的启动文件且启动文件中有status命令status中有输出is running或is active
:param server_name: 服务名称
:return:
"""
try:
get = public.dict_obj()
get.name = server_name
get.type = 'status'
dir_path = '/etc/init.d/'
files = [os.path.basename(f) for f in glob.glob(dir_path + "*")]
if server_name in files:
res = public.ExecShell('/etc/init.d/{} status'.format(server_name))
if 'is running' in res[0].lower() or 'is active' in res[0].lower() or 'already running' in res[0].lower():
return public.returnResult(code=1, msg='运行中', data=True)
return public.returnResult(code=1, msg='未运行', data=False)
return public.returnResult(code=0, msg='服务不存在!', status=False)
except:
return public.returnResult(code=0, msg='获取失败!', data=False)
# ---------------------- 通用服务状态 end----------------------
# ---------------------- 添加开机自启 启动脚本 start----------------------
# 添加开机自启
@syssafe_admin
def add_boot(self, server_name: str, pid_file: str, start_exec: str, stop_exec: str, default_start: str = '2 3 4 5') -> dict:
"""
添加开机自启
:param server_name: 服务名称
:param pid_file: 启动pid记录文件
:param start_exec: 启动命令
:param stop_exec: 停止命令
:param default_start: 默认启动级别
:return:
"""
content = """
#! /bin/sh
# chkconfig: 2345 55 25
### BEGIN INIT INFO
# Provides: {name}
# Required-Start: $all
# Required-Stop: $all
# Default-Start: {default_start}
# Default-Stop: 0 1 6
# Short-Description: {name}
# Description: {name}
### END INIT INFO
# Author: licess
# website: http://www.yakpanel.com
PATH=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin
case "$1" in
start)
echo -n "Starting {name}... "
if [ -f {pid_file} ];then
mPID=$(cat {pid_file})
isStart=`ps ax | awk '{{ print $1 }}' | grep -e "^${{mPID}}$"`
if [ "$isStart" != "" ];then
echo "{name} (pid $mPID) already running."
exit 1
fi
fi
nohup {start_exec} &
if [ $? != 0 ]; then
echo " failed"
exit 1
else
pid=`ps -ef|grep "{start_exec}" |grep -v grep|awk '{{print $2}}'`
echo $! > {pid_file}
echo " done"
fi
;;
stop)
echo -n "Stopping {name}... "
if [ -f {pid_file} ];then
mPID=$(cat {pid_file})
isStart = `ps ax | awk '{{ print $1 }}' | grep -e "^${{mPID}}$"`
if [ "$isStart" = "" ];then
echo "{name} is stopped"
exit 1
fi
else
echo "{name} is stopped"
exit 1
fi
nohup {stop_exec} &
if [ $? != 0 ]; then
echo " failed. Use force-quit"
exit 1
else
echo " done"
fi
;;
status)
if [ -f {pid_file} ];then
mPID=`cat {pid_file}`
isStart=`ps ax | awk '{{ print $1 }}' | grep -e "^${{mPID}}$"`
if [ "$isStart" != '' ];then
echo "{name} (pid `pidof {name}`) is running."
exit 1
else
echo "{name} is stopped"
exit 0
fi
else
echo "{name} is stopped"
exit 0
fi
;;
restart)
$0 stop
sleep 1
$0 start
;;
esac
""".format(name=server_name, pid_file=pid_file, start_exec=start_exec, stop_exec=stop_exec, default_start=default_start)
if os.path.exists(os.path.join('/etc/init.d/', server_name)):
return public.returnResult(code=1, msg='operation failure Service already exists', status=False)
try:
public.writeFile(os.path.join('/etc/init.d/', server_name), content)
os.chmod(os.path.join('/etc/init.d/', server_name), 0o777)
if os.path.exists('/usr/sbin/update-rc.d'):
public.ExecShell('update-rc.d -f {} defaults'.format(server_name))
else:
public.ExecShell('systemctl enable {}'.format(server_name))
return public.returnResult(code=1, msg='operate successfully!', status=True)
except:
return public.returnResult(code=0, msg='operation failure', status=False)
# ---------------------- 添加开机自启 启动脚本 end----------------------
# ---------------------- 删除开机自启 启动脚本 start----------------------
def del_boot(self, server_name: str) -> dict:
"""
删除启动脚本
:param server_name: 服务名称
:return:
"""
try:
if os.path.exists(os.path.join('/etc/init.d/', server_name)):
if os.path.exists('/usr/sbin/update-rc.d'):
public.ExecShell('update-rc.d -f {} remove'.format(server_name))
else:
public.ExecShell('systemctl disable {}'.format(server_name))
os.remove(os.path.join('/etc/init.d/', server_name))
return public.returnResult(code=1, msg='operate successfully!', status=True)
return public.returnResult(code=0, msg='operation failure Service does not exist', status=False)
except:
return public.returnResult(code=0, msg='operation failure', status=False)
# ---------------------- 删除开机自启 启动脚本 end----------------------
# ---------------------- 创建服务守护进程 start----------------------
@syssafe_admin
def create_daemon(self, server_name: str,
pid_file: str,
start_exec: str,
workingdirectory: str,
stop_exec: str = None,
user: str = 'root',
is_power_on: int = 1,
logs_file: str = '',
environments: str = '',
is_fork=None,
restart_type='always',
fork_time_out=20) -> dict:
"""
创建服务守护进程
:param server_name: 服务名称
:param pid_file: 启动pid记录文件
:param start_exec: 启动命令
:param stop_exec: 停止命令
:return:
"""
# 检查系统加固插件是否存在
try:
if not stop_exec:
stop_exec = '/usr/bin/pkill -9 "{}"'.format(start_exec)
content = '''
[Unit]
Description={server_name}
After=network.target
[Service]
{environments}
ExecStart={start_exec}
ExecStop={stop_exec}
WorkingDirectory={workingdirectory}
Restart={restart_type}
SyslogIdentifier={server_name}
User={user}
Type=simple
PrivateTmp=false
PIDFile={pid_file}
[Install]
WantedBy=multi-user.target
'''.format(
start_exec=start_exec,
workingdirectory=workingdirectory,
user=user,
pid_file=pid_file,
server_name=server_name,
environments=environments,
restart_type=restart_type,
stop_exec=stop_exec
)
exe_shell = ''
if is_fork or is_fork is None:
content = content.replace('Type=simple', 'Type=forking')
if not os.path.exists('/usr/lib/systemd/system/'):
os.makedirs('/usr/lib/systemd/system/')
public.writeFile('/usr/lib/systemd/system/{}.service'.format(server_name), content)
if is_power_on:
exe_shell += 'systemctl enable {}\n'.format(server_name) + " && "
exe_shell += 'systemctl daemon-reload' + " && "
if not logs_file:
logs_file = '/www/wwwlogs/project_{}.log'.format(server_name)
rsyslog_conf = public.readFile('/etc/rsyslog.conf')
add_conf = "if $programname == '{}' then {}\n".format(server_name, logs_file)
if rsyslog_conf:
idx = rsyslog_conf.find("if $programname == '{}' then".format(server_name))
if idx == -1:
rsyslog_conf += "\n" + add_conf
else:
line_idx = rsyslog_conf.find('\n', idx)
rsyslog_conf = rsyslog_conf[:idx] + add_conf + rsyslog_conf[line_idx:]
public.writeFile('/etc/rsyslog.conf', rsyslog_conf)
exe_shell += 'systemctl restart rsyslog' + " && "
if not os.path.exists(logs_file):
exe_shell += 'touch {}'.format(logs_file) + ' && '
exe_shell += 'chown -R {user}:{user} {logs_file}'.format(user=user, logs_file=logs_file) + ' && '
if is_fork is not None:
exe_shell += 'systemctl restart {}'.format(server_name)
public.ExecShell(exe_shell)
return public.returnResult(code=1, msg='operate successfully!', status=True)
public.ExecShell(exe_shell)
import subprocess,psutil
try:
start_time = time.time()
process = subprocess.Popen(["systemctl", "restart", server_name], stdout=subprocess.PIPE, stderr=subprocess.PIPE)
while True:
try:
p = psutil.Process(process.pid)
print(p.status())
# 检查进程的状态
if p.status() == psutil.STATUS_ZOMBIE:
break
except:
pass
if process.poll() is not None:
break
if time.time() - start_time > fork_time_out:
raise
time.sleep(0.1)
except:
content = content.replace('Type=forking','Type=simple')
public.writeFile('/usr/lib/systemd/system/{}.service'.format(server_name), content)
public.ExecShell('systemctl daemon-reload && systemctl restart {}'.format(server_name))
return public.returnResult(code=1, msg='operate successfully!', status=True)
except:
return public.returnResult(code=0, msg='operation failure', status=False)
# ---------------------- 创建服务守护进程 end----------------------
# ---------------------- 删除服务守护进程 start----------------------
@syssafe_admin
def del_daemon(self, server_name: str) -> dict:
"""
删除服务守护进程
:param server_name: 服务名称
:return:
"""
try:
public.ExecShell('systemctl stop {}'.format(server_name))
if os.path.exists('/usr/lib/systemd/system/{}.service'.format(server_name)):
public.ExecShell('systemctl disable {}'.format(server_name))
os.remove('/usr/lib/systemd/system/{}.service'.format(server_name))
public.ExecShell('systemctl daemon-reload')
public.ExecShell(r'sed -i "/if \$programname == {}/d" /etc/rsyslog.conf'.format(server_name))
public.ExecShell('systemctl restart rsyslog')
return public.returnResult(code=1, msg='operate successfully!', status=True)
return public.returnResult(code=0, msg='operation failure', status=False)
except:
return public.returnResult(code=0, msg='operation failure', status=False)
# ---------------------- 删除服务守护进程 end----------------------
# ---------------------- 服务守护进程状态 start----------------------
def daemon_status(self, server_name: str) -> dict:
"""
服务守护进程状态
:param server_name: 服务名称
:return:
"""
try:
if not os.path.exists('/usr/lib/systemd/system/{}.service'.format(server_name)):
return public.returnResult(code=0, msg='服务不存在!', status=False)
if not self.system_info:
self.system_info = public.ExecShell("systemctl |grep service|grep -E 'active|deactivating'|awk '{print $1}'")[0]
if server_name+'.service' in self.system_info:
return public.returnResult(code=1, msg='运行中', status=True)
return public.returnResult(code=1, msg='未运行', status=False)
except:
return public.returnResult(code=0, msg='operation failure', status=False)
# ---------------------- 服务守护进程状态 end----------------------
def daemon_admin(self, server_name: str,action:str) -> dict:
"""
:param server_name: 项目名称
:param action: 操作
"""
public.ExecShell('systemctl {} {}'.format(action,server_name))
return public.returnResult(code=1, msg='操作指令已执行', status=True)
# if action == 'start' or action == 'restart':
# num = 0
# for i in range(5):
# time.sleep(0.01)
# if self.daemon_status(server_name)['status']:
# num += 1
# if num > 3:
# return public.returnResult(code=1, msg='启动成功!', status=True)
# return public.returnResult(code=0, msg='启动失败!', status=False)
# return public.returnResult(code=1, msg='关闭成功!' + res[0] + res[1], status=True)
def get_daemon_pid(self, server_name: str) -> dict:
"""
获取守护进程pid
:param server_name: 项目名称
"""
res = public.ExecShell("systemctl show --property=MainPID {}".format(server_name))[0] # type: str
if not res.startswith('MainPID='):
return public.returnResult(code=0, msg='获取失败!', status=False)
try:
pid = int(res.split("=", 1)[1])
return public.returnResult(code=1, msg='获取成功!', data=pid, status=True)
except:
return public.returnResult(code=0, msg='获取失败', status=False)
# ---------------------- 延时定时启动 start----------------------
def add_task(self, shell: str, time: int) -> dict:
"""
服务定时启动
:param server_name: 服务名称
:param start_exec: 启动命令
:param minute: 定时启动时间
:return:
"""
data = {
'type': 3,
'time': time,
'name': shell,
'title': '',
'fun': '',
'args': ''
}
res = public.set_tasks_run(data)
if res['status']:
return public.returnResult(code=1, msg='operate successfully!', status=True)
return public.returnResult(code=0, msg='operation failure', status=False)
# ---------------------- 服务定时启动 end----------------------
class Server:
server = RealServer()
def server_admin(self, get):
try:
if hasattr(self.server, get.name):
return getattr(self.server, get.name)(get.type)
return public.returnMsg(False, 'operation failure Parameter does not exist')
except:
return public.returnMsg(False, 'operation failure')
def server_status(self, get):
try:
if hasattr(self.server, get.name):
return getattr(self.server, get.name)()
return public.returnMsg(False, 'operation failure Parameter does not exist')
except:
return public.returnMsg(False, 'operation failure')
def universal_server_admin(self, get):
try:
return self.server.universal_server_admin(get.name, get.type)
except:
return public.returnMsg(False, 'operation failure')
def universal_server_status(self, get):
try:
return self.server.universal_server_status(get.name)
except:
return public.returnMsg(False, 'operation failure')
def add_boot(self, get):
try:
return self.server.add_boot(get.name, get.pid_file, get.start_exec, get.stop_exec)
except:
return public.returnMsg(False, 'operation failure')
def del_boot(self, get):
try:
return self.server.del_boot(get.name)
except:
return public.returnMsg(False, 'operation failure')
def create_daemon(self, get):
try:
return self.server.create_daemon(get.name, get.pid_file, get.start_exec, get.user)
except:
return public.returnMsg(False, 'operation failure')
def del_daemon(self, get):
try:
return self.server.del_daemon(get.name)
except:
return public.returnMsg(False, 'operation failure')
def daemon_status(self, get):
try:
return self.server.daemon_status(get.name)
except:
return public.returnMsg(False, 'operation failure')
def add_task(self, get):
try:
return self.server.add_task(get.shell, get.time)
except:
return public.returnMsg(False, 'operation failure')