#coding: utf-8 # +------------------------------------------------------------------- # | YakPanel # +------------------------------------------------------------------- # | Copyright (c) 2015-2099 YakPanel(www.yakpanel.com) All rights reserved. # +------------------------------------------------------------------- # | Author: hwliang # +------------------------------------------------------------------- import json import time import os import sys import socket import threading import re if not 'class/' in sys.path: sys.path.insert(0,'class/') from io import BytesIO, StringIO def returnMsg(status,msg,value=None): if value: msg = public.get_msg_gettext(msg,value) return {'status':status,'msg':msg} import public class ssh_terminal: _panel_path = '/www/server/panel' _save_path = _panel_path + '/config/ssh_info/' _host = None _port = 22 _user = None _pass = None _pkey = None _ws = None _ssh = None _last_cmd = "" _last_cmd_tip = 0 _log_type = public.lang("YakPanel terminal") _history_len = 0 _client = "" _rep_ssh_config = False _sshd_config_backup = None _rep_ssh_service = False _tp = None _old_conf = None _debug_file = 'logs/terminal.log' _s_code = None _last_num = 0 _key_passwd = None _video_addr = "" _host_row_id = "" def __init__(self): # 创建jp_login_record表记录ssh登录记录 if not public.M('sqlite_master').where('type=? AND name=?', ('table', 'ssh_login_record')).count(): public.M('').execute('''CREATE TABLE ssh_login_record ( id INTEGER PRIMARY KEY AUTOINCREMENT, addr TEXT, server_ip TEXT, user_agent TEXT, ssh_user TEXT, login_time INTEGER DEFAULT 0, close_time INTEGER DEFAULT 0, video_addr TEXT);''') public.M('').execute('CREATE INDEX ssh_login_record ON ssh_login_record (addr);') self.time = time.time() def record(self, rtype, data): if os.path.exists(public.get_panel_path() + "/data/open_ssh_login.pl") and self._video_addr: path=self._video_addr if rtype == 'header': with open(path, 'w') as fw: fw.write(json.dumps(data) + '\n') return True else: with open(path, 'r') as fr: content = json.loads(fr.read()) stdout = content["stdout"] atime = time.time() iodata = [atime - self.time, data] stdout.append(iodata) content["stdout"] = stdout with open(path, 'w') as fw: fw.write(json.dumps(content) + '\n') self.time = atime return True return False def connect(self): ''' @name 连接服务器 @author hwliang<2020-08-07> @return dict{ status: bool 状态 msg: string 详情 } ''' if not self._host: return public.return_msg_gettext(False, public.lang("Wrong connection address")) if not self._user: self._user = 'root' if not self._port: self._port = 22 self.is_local() if self._host in ['127.0.0.1','localhost']: self._port = public.get_ssh_port() self.set_sshd_config(True) num = 0 while num < 5: num +=1 try: self.debug(public.lang('Reconnection attempts:{}',num)) if self._rep_ssh_config: time.sleep(0.1) sock = socket.socket(socket.AF_INET, socket.SOCK_STREAM) sock.settimeout(2 + num) sock.setsockopt(socket.SOL_SOCKET, socket.SO_SNDBUF, 8192) sock.connect((self._host, self._port)) break except Exception as e: if num == 5: self.set_sshd_config(True) self.debug(public.lang('Retry connection failed, {}',e)) if self._host in ['127.0.0.1','localhost']: return returnMsg(False,'Connection failure: {}',("Authentication failed ," + self._user + "@" + self._host + ":" +str(self._port),)) return returnMsg(False,'Connection failure: {}',(self._host,self._port)) else: time.sleep(0.2) import paramiko self._tp = paramiko.Transport(sock) try: self._tp.start_client() if not self._pass and not self._pkey: self.set_sshd_config(True) return public.return_msg_gettext(False,'Password or private key cannot both be empty: {}:{}',(self._host,str(self._port))) self._tp.banner_timeout=60 if self._pkey: self.debug(public.lang("Authenticating private key")) if sys.version_info[0] == 2: try: self._pkey = self._pkey.encode('utf-8') except: pass p_file = BytesIO(self._pkey) else: p_file = StringIO(self._pkey) try: if self._key_passwd: pkey = paramiko.RSAKey.from_private_key(p_file,password=self._key_passwd) else: pkey = paramiko.RSAKey.from_private_key(p_file) self.debug("尝试使用RSA私钥认证") except Exception as ex: try: p_file.seek(0) # 重置游标 if self._key_passwd: pkey = paramiko.Ed25519Key.from_private_key(p_file,password=self._key_passwd) else: pkey = paramiko.Ed25519Key.from_private_key(p_file) self.debug("尝试使用Ed25519私钥认证") except: try: p_file.seek(0) if self._key_passwd: pkey = paramiko.ECDSAKey.from_private_key(p_file,password=self._key_passwd) else: pkey = paramiko.ECDSAKey.from_private_key(p_file) self.debug("尝试使用ECDSA私钥认证") except: p_file.seek(0) if self._key_passwd: try: pkey = paramiko.DSSKey.from_private_key(p_file,password=self._key_passwd) except Exception as ex: ex = str(ex) if ex.find('OpenSSH private key file checkints do not match') != -1: return public.returnMsg(False, public.lang("Incorrect private key password:{}", ex)) elif ex.find('encountered RSA key, expected DSA key') != -1: pkey = paramiko.RSAKey.from_private_key(p_file,password=self._key_passwd) else: return public.returnMsg(False, public.lang("Private key error: {}", ex)) else: pkey = paramiko.DSSKey.from_private_key(p_file) if not pkey: return public.returnMsg(False, public.lang("Private key error!")) self._tp.auth_publickey(username=self._user, key=pkey) else: try: self._tp.auth_none(self._user) except Exception as e: e = str(e) if e.find('keyboard-interactive') >= 0: self._auth_interactive() else: self.debug('Authenticating password') self._tp.auth_password(username=self._user, password=self._pass) # self._tp.auth_password(username=self._user, password=self._pass) except Exception as e: if self._old_conf: s_file = '/www/server/panel/config/t_info.json' if os.path.exists(s_file): os.remove(s_file) self.set_sshd_config(True) self._tp.close() e = str(e) if e.find('websocket error!') != -1: return public.return_msg_gettext(True, public.lang("connection succeeded")) if e.find('Authentication timeout') != -1: self.debug("认证超时{}".format(e)) return public.return_msg_gettext(False,'Authentication timed out, please press enter to try again!{}',(e,)) if e.find('Authentication failed') != -1: self.debug('认证失败{}'.format(e)) if self._key_passwd: sshd_config = public.readFile('/etc/ssh/sshd_config') if sshd_config and sshd_config.find('ssh-dss') == -1: return returnMsg(False,'The private key verification fails, the private key may be incorrect, or the ssh-dss private key authentication type may not be enabled in the /etc/ssh/sshd_config configuration file') return returnMsg(False,'Authentication failed, please check whether the private key is correct: {}'.format(e + "," + self._user + "@" + self._host + ":" +str(self._port))) return public.return_msg_gettext(False,'Account or Password incorrect: {}',(str(e + "," + self._user + "@" + self._host + ":" +str(self._port)),)) if e.find('Bad authentication type; allowed types') != -1: self.debug(public.lang('Authentication failed {}',str(e))) if self._host in ['127.0.0.1','localhost'] and self._pass == 'none': return public.return_msg_gettext(False,'Username or Password incorrect: {}',(str("Authentication failed ," + self._user + "@" + self._host + ":" +str(self._port)),)) return public.return_msg_gettext(False,'Unsupported authentication type: {}',(str(e))) if e.find('Connection reset by peer') != -1: self.debug(public.lang("The target server actively refused the connection")) return public.return_msg_gettext(False,public.lang("The target server actively refused the connection")) if e.find('Error reading SSH protocol banner') != -1: self.debug('The protocol header response timed out') return public.return_msg_gettext(False,public.lang('The protocol header response timed out, and the network quality with the target server was too bad: {}',str(e))) if e.find('encountered RSA key, expected DSA key') != -1: self.debug('Private keys may require password access') return public.return_msg_gettext(False,public.lang('Private keys may require password access: {}',str(e))) if e.find('password and salt must not be empty') != -1: self.debug('Private keys may require password access') return public.return_msg_gettext(False,public.lang('Private keys may require password access: {}',str(e))) if not e: self.debug('The SSH protocol handshake timed out') return public.return_msg_gettext(False, public.lang("The SSH protocol handshake timed out, and the network quality with the target server is too bad")) err = public.get_error_info() self.debug(err) return public.return_msg_gettext(False,public.lang('unknown error: {}',str(err))) self.debug(public.lang("The authentication is successful and the session channel is being constructed")) self._ssh = self._tp.open_session() self._ssh.get_pty(term='xterm', width=100, height=34) self._ssh.invoke_shell() self._connect_time = time.time() self._last_send = [] from YakPanel import request self._client = public.GetClientIp() +':' + str(request.environ.get('REMOTE_PORT')) public.write_log_gettext(self._log_type,'Successfully logged in to the SSH server [{}:{}]',(self._host,str(self._port))) self.history_send(public.lang("Login success\n")) self.set_sshd_config(True) self.debug(public.lang("Login success")) from YakPanel import session self._video_addr = "/www/server/panel/plugin/jumpserver/static/video/%s.json" % str(int(self._connect_time)) if not os.path.exists("/www/server/panel/plugin/jumpserver/static/video/"): os.makedirs("/www/server/panel/plugin/jumpserver/static/video/") # 如果开启了录像功能 user_agent = str(request.headers.get('User-Agent')) if os.path.exists(public.get_panel_path() + "/data/open_ssh_login.pl"): self._host_row_id = public.M('ssh_login_record').add( 'addr,server_ip,ssh_user,user_agent,login_time,video_addr', (self._client, self._host, self._user, user_agent , int(self._connect_time), self._video_addr)) self.record('header', { "version": 1, "width": 100, "height": 29, "timestamp": int(self._connect_time), "env": { "TERM": "xterm", "SHELL": "/bin/bash", }, "stdout": [] }) return public.return_msg_gettext(True, public.lang("connection succeeded")) def _auth_interactive(self): self.debug('Verification Code') self.brk = False def handler(title, instructions, prompt_list): if not self._ws: raise public.PanelError('websocket error!') if instructions: self._ws.send(instructions) if title: self._ws.send(title) resp = [] for pr in prompt_list: if str(pr[0]).strip() == "Password:": resp.append(self._pass) elif str(pr[0]).strip() == "Verification code:": # 获取前段传入的验证码 self._ws.send("Verification code# ") self._s_code = True code = "" while True: data = self._ws.receive() if data.find('"resize":1') != -1: self.resize(data) continue self._ws.send(data) if data in ["\n", "\r"]: break code += data resp.append(code) self._ws.send("\n") self._s_code = None return tuple(resp) self._tp.auth_interactive(self._user, handler) def get_login_user(self): ''' @name 获取本地登录用户 @author hwliang<2020-08-07> @return string ''' if self._user != 'root': return self._user l_user = 'root' ssh_config_file = '/etc/ssh/sshd_config' ssh_config = public.readFile(ssh_config_file) if not ssh_config: return l_user if ssh_config.find('PermitRootLogin yes') != -1: return l_user user_list = self.get_ulist() login_user = '' for u_info in user_list: if u_info['user'] == 'root': continue if u_info['login'] == '/bin/bash': login_user = u_info['user'] break if not login_user: return l_user return login_user def get_ulist(self): ''' @name 获取本地用户列表 @author hwliang<2020-08-07> @return list ''' u_data = public.readFile('/etc/passwd') u_list = [] for i in u_data.split("\n"): u_tmp = i.split(':') if len(u_tmp) < 3: continue u_info = {} u_info['user'],u_info['pass'],u_info['uid'],u_info['gid'],u_info['user_msg'],u_info['home'],u_info['login'] = u_tmp u_list.append(u_info) return u_list def is_local(self): ''' @name 处理本地连接 @author hwliang<2020-08-07> @ps 如果host为127.0.0.1或localhost，则尝试自动使用publicKey登录 @return void ''' if self._pass: return if self._pkey: return if self._host in ['127.0.0.1','localhost']: try: self._port = public.get_ssh_port() self.set_sshd_config() s_file = '/www/server/panel/config/t_info.json' if os.path.exists(s_file): ssh_info = json.loads(public.en_hexb(public.readFile(s_file))) self._host = ssh_info['host'].strip() if 'username' in ssh_info: self._user = ssh_info['username'] if 'pkey' in ssh_info: self._pkey = ssh_info['pkey'] if 'password' in ssh_info: self._pass = ssh_info['password'] self._old_conf = True return ssh_key_type_file = '{}/data/ssh_key_type.pl'.format(public.get_panel_path()) ssh_key_type = '' if os.path.exists(ssh_key_type_file): ssh_key_type_new = public.readFile(ssh_key_type_file) if ssh_key_type_new: ssh_key_type = ssh_key_type_new.strip() login_user = self.get_login_user() if self._user == 'root' and login_user == 'root': id_rsa_file = ['/root/.ssh/id_ed25519','/root/.ssh/id_ecdsa','/root/.ssh/id_rsa','/root/.ssh/id_rsa_bt'] if ssh_key_type: id_rsa_file.insert(0,'/root/.ssh/id_{}'.format(ssh_key_type)) for ifile in id_rsa_file: if os.path.exists(ifile): self._pkey = public.readFile(ifile) host_path = self._save_path + self._host if not os.path.exists(host_path): os.makedirs(host_path,384) return if not self._pass or not self._pkey or not self._user: home_path = '/home/' + login_user if login_user == 'root': home_path = '/root' self._user = login_user id_rsa_file = [home_path + '/.ssh/id_ed25519',home_path + '/.ssh/id_ecdsa',home_path + '/.ssh/id_rsa',home_path + '/.ssh/id_rsa_bt'] if ssh_key_type: id_rsa_file.insert(0,home_path + '/.ssh/id_{}'.format(ssh_key_type)) for ifile in id_rsa_file: if os.path.exists(ifile): self._pkey = public.readFile(ifile) return self._pass = 'none' return except: return def get_sys_version(self): ''' @name 获取操作系统版本 @author hwliang<2020-08-13> @return bool ''' version = public.readFile('/etc/redhat-release') if not version: version = public.readFile('/etc/issue').strip().split("\n")[0].replace('\\n','').replace(r'\l','').strip() else: version = version.replace('release ','').replace('Linux','').replace('(Core)','').strip() return version def get_ssh_status(self): ''' @name 获取SSH服务状态 @author hwliang<2020-08-13> @return bool ''' version = self.get_sys_version() if os.path.exists('/usr/bin/apt-get'): if os.path.exists('/etc/init.d/sshd'): status = public.ExecShell("service sshd status | grep -P '(dead|stop|not running)'|grep -v grep") else: status = public.ExecShell("service ssh status | grep -P '(dead|stop|not running)'|grep -v grep") else: if version.find(' 7.') != -1 or version.find(' 8.') != -1 or version.find('Fedora') != -1: status = public.ExecShell("systemctl status sshd.service | grep 'dead'|grep -v grep") else: status = public.ExecShell("/etc/init.d/sshd status | grep -e 'stopped' -e '已停'|grep -v grep") if len(status[0]) > 3: status = False else: status = True return status def is_running(self,rep = False): ''' @name 处理SSH服务状态 @author hwliang<2020-08-13> @param rep 是否恢复原来的SSH服务状态 @return bool ''' try: if rep and self._rep_ssh_service: self.restart_ssh('stop') return True ssh_status = self.get_ssh_status() if not ssh_status: self.restart_ssh('start') self._rep_ssh_service = True return True return False except: return False def set_sshd_config(self,rep = False): ''' @name 设置本地SSH配置文件，以支持pubkey认证 @author hwliang<2020-08-13> @param rep 是否恢复ssh配置文件 @return bool ''' self.is_running(rep) if rep and not self._rep_ssh_config: return False try: sshd_config_file = '/etc/ssh/sshd_config' if not os.path.exists(sshd_config_file): return False sshd_config = public.readFile(sshd_config_file) if not sshd_config: return False if rep: if self._sshd_config_backup: public.writeFile(sshd_config_file,self._sshd_config_backup) self.restart_ssh() return True pin = r'^\s*PubkeyAuthentication\s+(yes|no)' pubkey_status = re.findall(pin,sshd_config,re.I) if pubkey_status: if pubkey_status[0] == 'yes': pubkey_status = True else: pubkey_status = False pin = r'^\s*RSAAuthentication\s+(yes|no)' rsa_status = re.findall(pin,sshd_config,re.I) if rsa_status: if rsa_status[0] == 'yes': rsa_status = True else: rsa_status = False self._sshd_config_backup = sshd_config is_write = False if not pubkey_status: sshd_config = re.sub(r'\n#?PubkeyAuthentication\s\w+','\nPubkeyAuthentication yes',sshd_config) is_write = True if not rsa_status: sshd_config = re.sub(r'\n#?RSAAuthentication\s\w+','\nRSAAuthentication yes',sshd_config) is_write = True if is_write: public.writeFile(sshd_config_file,sshd_config) self._rep_ssh_config = True self.restart_ssh() else: self._sshd_config_backup = None return True except: return False def restart_ssh(self,act = 'reload'): ''' 重启ssh 无参数传递 ''' version = public.readFile('/etc/redhat-release') if not os.path.exists('/etc/redhat-release'): public.ExecShell('service ssh ' + act) elif version.find(' 7.') != -1 or version.find(' 8.') != -1: public.ExecShell("systemctl " + act + " sshd.service") else: public.ExecShell("/etc/init.d/sshd " + act) def resize(self, data): ''' @name 调整终端大小 @author hwliang<2020-08-07> @param data 终端尺寸数据 { cols: int 列 rows: int 行 } @return bool ''' try: data = json.loads(data) self._ssh.resize_pty(width=data['cols'], height=data['rows']) return True except: return False def recv(self): ''' @name 读取tty缓冲区数据 @author hwliang<2020-08-07> @return void ''' n = 0 try: while self._ws.connected: resp_line = self._ssh.recv(1024) if not resp_line: if not self._tp.is_active(): self.debug(public.lang("Channel disconnected")) self._ws.send(public.lang("The connection is disconnected, press enter to try to reconnect!")) self.close() return if not resp_line: n+=1 if n > 5: break continue n = 0 if not self._ws.connected: return try: result = resp_line.decode('utf-8','ignore') except: try: result = resp_line.decode() except: result = str(resp_line) self.record('iodata', result) self._ws.send(result) # self.history_recv(result) except Exception as e: e = str(e) if e.find('closed') != -1: self.debug(public.getMsg('SSH_LOGIN_INFO')) elif self._ws.connected: self.debug(public.lang('Error reading tty buffer data, {}',str(e))) if not self._ws.connected: self.debug(public.lang("The client has actively disconnected")) self.close() def send(self): ''' @name 写入数据到缓冲区 @author hwliang<2020-08-07> @return void ''' try: while self._ws.connected: if self._s_code: time.sleep(0.1) continue client_data = self._ws.receive() if not client_data: continue if client_data == '{}': continue if len(client_data) > 10: if client_data.find('{"host":"') != -1: continue if client_data.find('"resize":1') != -1: self.resize(client_data) continue self._ssh.send(client_data) # self.history_send(client_data) except Exception as ex: ex = str(ex) if ex.find('_io.BufferedReader') != -1: self.debug(public.lang("An error occurred while reading data from websocket. Retrying")) self.send() return elif ex.find('closed') != -1: self.debug(public.lang("SSH_LOGIN_INFO")) else: self.debug(public.get_msg_gettext('An error occurred while writing data to the buffer: {}',(str(ex),))) if not self._ws.connected: self.debug(public.lang("The client has actively disconnected")) self.close() def history_recv(self,recv_data): ''' @name 从接收实体保存命令 @author hwliang<2020-08-12> @param recv_data 数据实体 @return void ''' #处理TAB补登 if self._last_cmd_tip == 1: if not recv_data.startswith('\r\n'): self._last_cmd += recv_data.replace('\u0007','').replace("\x07","").strip() self._last_cmd_tip = 0 #上下切换命令 if self._last_cmd_tip == 2: self._last_cmd = recv_data.strip().replace("\x08","").replace("\x07","").replace("\x1b[K","") self._last_cmd_tip = 0 def history_send(self,send_data): ''' @name 从发送实体保存命令 @author hwliang<2020-08-12> @param send_data 数据实体 @return void ''' if not send_data: return his_path = self._save_path + self._host if not os.path.exists(his_path): return his_file = his_path + '/history.pl' #上下切换命令 if send_data in ["\x1b[A","\x1b[B"]: self._last_cmd_tip = 2 return #左移光标 if send_data in ["\x1b[C"]: self._last_num -= 1 return # 右移光标 if send_data in ["\x1b[D"]: self._last_num += 1 return #退格 if send_data == "\x7f": self._last_cmd = self._last_cmd[:-1] return #过滤特殊符号 if send_data in ["\x1b[C","\x1b[D","\x1b[K","\x07","\x08","\x03","\x01","\x02","\x04","\x05","\x06","\x1bOB","\x1bOA","\x1b[8P","\x1b","\x1b[4P","\x1b[6P","\x1b[5P"]: return #Tab补全处理 if send_data == "\t": self._last_cmd_tip = 1 return if str(send_data).find("\x1b") != -1: return if send_data[-1] in ['\r','\n']: if not self._last_cmd: return his_shell = [int(time.time()),self._client,self._user,self._last_cmd] public.writeFile(his_file, json.dumps(his_shell) + "\n","a+") self._last_cmd = "" #超过50M则保留最新的20000行 if os.stat(his_file).st_size > 52428800: his_tmp = public.GetNumLines(his_file,20000) public.writeFile(his_file, his_tmp) else: if self._last_num >= 0: self._last_cmd += send_data def close(self): ''' @name 释放连接 @author hwliang<2020-08-07> @return void ''' try: if self._host_row_id: public.M('ssh_login_record').where('id=?', self._host_row_id).update( {'close_time': int(time.time())}) if self._ssh: self._ssh.close() if self._tp: # 关闭宿主服务 self._tp.close() if self._ws.connected: self._ws.close() except: pass def set_attr(self,ssh_info): ''' @name 设置对象属性，并连接服务器 @author hwliang<2020-08-07> @return void ''' self._host = ssh_info['host'].strip() self._port = int(ssh_info['port']) if 'username' in ssh_info: self._user = ssh_info['username'] if 'pkey' in ssh_info: self._pkey = ssh_info['pkey'] if 'password' in ssh_info: self._pass = ssh_info['password'] if 'pkey_passwd' in ssh_info: self._key_passwd = ssh_info['pkey_passwd'] try: result = self.connect() except Exception as ex: if str(ex).find("NoneType") == -1: raise public.PanelError(ex) return result def heartbeat(self): ''' @name 心跳包 @author hwliang<2020-09-10> @return void ''' while True: time.sleep(30) if self._tp.is_active(): self._tp.send_ignore() else: break if self._ws.connected: self._ws.send("") else: break def debug(self,msg): ''' @name 写debug日志 @author hwliang<2020-09-10> @return void ''' msg = "{} - {}:{} => {} \n".format(public.format_date(),self._host,self._port,msg) self.history_send(msg) public.writeFile(self._debug_file,msg,'a+') def run(self,web_socket, ssh_info=None): ''' @name 启动SSH客户端对象 @author hwliang<2020-08-07> @param web_socket websocket句柄对像 @param ssh_info SSH信息{ host: 主机地址, port: 端口 username: 用户名 password: 密码 pkey: 密钥(如果不为空，将使用密钥连接) } @return void ''' self._ws = web_socket if not self._ssh: if not ssh_info: return result = self.set_attr(ssh_info) else: result = public.get_msg_gettext(True,'ALREADY_CONNECTED') if result['status']: sendt = threading.Thread(target=self.send) recvt = threading.Thread(target=self.recv) ht = threading.Thread(target=self.heartbeat) sendt.start() recvt.start() ht.start() sendt.join() recvt.join() ht.join() self.close() else: self._ws.send(result['msg']) self.close() def __del__(self): ''' 自动释放 ''' self.close() class ssh_host_admin(ssh_terminal): _panel_path = '/www/server/panel' _save_path = _panel_path + '/config/ssh_info/' _pass_file = _panel_path + '/data/a_pass.pl' _user_command_file = _save_path + '/user_command.json' _sys_command_file = _save_path + '/sys_command.json' _pass_str = None def __init__(self): self.__create_aes_pass() def __create_aes_pass(self): ''' @name 创建AES密码 @author @return string ''' if not os.path.exists(self._save_path): os.makedirs(self._save_path,384) if not os.path.exists(self._pass_file): public.writeFile(self._pass_file,public.GetRandomString(16)) public.set_mode(self._pass_file,600) if not self._pass_str: self._pass_str = public.readFile(self._pass_file) if not self._pass_str: self._pass_str = public.GetRandomString(16) public.writeFile(self._pass_file,self._pass_str) public.set_mode(self._pass_file,600) def get_host_list(self,args = None): ''' @name 获取本机保存的SSH信息列表 @author hwliang<2020-08-07> @param args @return list ''' host_list = [] for name in os.listdir(self._save_path): info_file = self._save_path + name +'/info.json' if not os.path.exists(info_file): continue try: info_tmp = self.get_ssh_info(name) host_info = {} host_info['host'] = name host_info['port'] = info_tmp['port'] host_info['ps'] = info_tmp['ps'] host_info['sort'] = int(info_tmp['sort']) except: if os.path.exists(info_file): os.remove(info_file) continue host_list.append(host_info) host_list = sorted(host_list,key=lambda x: x['sort'],reverse=False) return host_list def get_host_find(self,args): ''' @name 获取指定SSH信息 @author hwliang<2020-08-07> @param args{ host: 主机地址 } @return dict ''' args.host = args.host.strip() info_file = self._save_path + args.host +'/info.json' if not os.path.exists(info_file): return public.return_msg_gettext(False, public.lang("The specified SSH information does not exist!")) info_tmp = self.get_ssh_info(args.host) host_info = {} host_info['host'] = args.host host_info['port'] = info_tmp['port'] host_info['ps'] = info_tmp['ps'] host_info['sort'] = info_tmp['sort'] host_info['username'] = info_tmp['username'] host_info['password'] = info_tmp['password'] host_info['pkey'] = info_tmp['pkey'] host_info['pkey_passwd'] = '' if 'pkey_passwd' in info_tmp: host_info['pkey_passwd'] = info_tmp['pkey_passwd'] return host_info def modify_host(self,args): ''' @name 修改SSH信息 @author hwliang<2020-08-07> @param args{ host: 被修改的主机地址, new_host: 新的主机地址, port: 端口 ps: 备注 sort: 排序(可选) username: 用户名 password: 密码 pkey: 密钥(如果不为空，将使用密钥连接) pkey_passwd: 密钥的密码 } @return dict ''' args.new_host = args.new_host.strip() args.host = args.host.strip() if args.host != args.new_host: info_file = self._save_path + args.new_host +'/info.json' if os.path.exists(info_file): return public.return_msg_gettext(False, public.lang("The specified host address has been added to other SSH information!")) info_file = self._save_path + args.host +'/info.json' if not os.path.exists(info_file): return public.return_msg_gettext(False, public.lang("The specified SSH information does not exist!")) if not 'sort' in args: r_data = public.aes_decrypt(public.readFile(info_file),self._pass_str) info_tmp = json.loads(r_data) args.sort = info_tmp['sort'] host_info = {} host_info['host'] = args.new_host host_info['port'] = int(args['port']) host_info['ps'] = args['ps'] host_info['sort'] = args['sort'] host_info['username'] = args['username'] host_info['password'] = args['password'] host_info['pkey'] = args['pkey'] if 'pkey_passwd' in args: host_info['pkey_passwd'] = args['pkey_passwd'] else: host_info['pkey_passwd'] = '' if not host_info['pkey']: host_info['pkey'] = '' result = self.set_attr(host_info) if not result['status']: return result self.save_ssh_info(args.host,host_info) if args.host != args.new_host: public.ExecShell('mv {} {}'.format(self._save_path + args.host,self._save_path + args.new_host)) public.write_log_gettext(self._log_type,'Modify the SSH information of HOST: {}',(args.host,)) return public.return_msg_gettext(True, public.lang("Setup successfully!")) def create_host(self,args): ''' @name 添加SSH信息 @author hwliang<2020-08-07> @param args{ host: 主机地址, port: 端口 ps: 备注 sort: 排序(可选，默认0) username: 用户名 password: 密码 pkey: 密钥(如果不为空，将使用密钥连接) pkey_passwd： 密钥的密码 } @return dict ''' args.host = args.host.strip() host_path = self._save_path + args.host info_file = host_path +'/info.json' if os.path.exists(info_file): args.new_host = args.host return self.modify_host(args) #return public.returnMsg(False, public.lang("Specify that SSH information has been added!")) if not os.path.exists(host_path): os.makedirs(host_path,384) if not 'sort' in args: args.sort = 0 if not 'ps' in args: args.ps = args.host host_info = {} host_info['host'] = args.host host_info['port'] = int(args['port']) host_info['ps'] = args['ps'] host_info['sort'] = int(args['sort']) host_info['username'] = args['username'] host_info['password'] = args['password'] host_info['pkey'] = args['pkey'] host_info['pkey_passwd'] = '' if 'pkey_passwd' in args: host_info['pkey_passwd'] = args['pkey_passwd'] result = self.set_attr(host_info) if not result['status']: return result self.save_ssh_info(args.host,host_info) public.write_log_gettext(self._log_type,'Add the SSH information of HOST: {}',(str(args.host),)) return public.return_msg_gettext(True, public.lang("Setup successfully!")) def remove_host(self,args): ''' @name 删除指定SSH信息 @author hwliang<2020-08-07> @param args{ host: 主机地址 } @return dict ''' args.host = args.host.strip() if not args.host: return public.return_msg_gettext(False, public.lang("Parameter ERROR!")) host_path = self._save_path + args.host if not os.path.exists(host_path): return public.return_msg_gettext(False, public.lang("The specified SSH information does not exist!")) public.ExecShell("rm -rf {}".format(host_path)) public.write_log_gettext(self._log_type,'Delete the SSH information of HOST: {}',(str(args.host),)) return public.return_msg_gettext(True, public.lang("Setup successfully!")) def get_ssh_info(self,host): ''' @name 获取并解密指定SSH信息 @author hwliang<2020-08-07> @param host 主机地址 @return dict or False ''' info_file = self._save_path + host + '/info.json' if not os.path.exists(info_file): return False try: r_data = public.aes_decrypt(public.readFile(info_file),self._pass_str) except ValueError as ex: if str(ex).find('Incorrect AES key length') != -1: if os.path.exists(self._pass_file): os.remove(self._pass_file) self.__create_aes_pass() r_data = public.aes_decrypt(public.readFile(info_file),self._pass_str) return json.loads(r_data) def save_ssh_info(self,host,host_info): ''' @name 获取并解密指定SSH信息 @author hwliang<2020-08-07> @param host 主机地址 @param host_info ssh信息字典 @return bool ''' host_path = self._save_path + host if not os.path.exists(host_path): os.makedirs(host_path,384) info_file = host_path +'/info.json' r_data = public.aes_encrypt(json.dumps(host_info),self._pass_str) public.writeFile(info_file,r_data) return True def set_sort(self,args): ''' @name 获取并解密指定SSH信息 @author hwliang<2020-08-07> @param args{ sort_list{ 主机host : 排序编号, 主机host : 排序编号, ... } } @return bool ''' if not 'sort_list' in args: return public.return_msg_gettext(False, public.lang("Please pass in the [sort_list] field")) sort_list = json.loads(args.sort_list) for name in sort_list.keys(): info_file = self._save_path + name + '/info.json' if not os.path.exists(info_file): continue ssh_info = self.get_ssh_info(name) ssh_info['sort'] = int(sort_list[name]) self.save_ssh_info(name,ssh_info) return public.return_msg_gettext(True, public.lang("Setup successfully!")) def get_command_list(self,args = None, user_cmd = False , sys_cmd = False): ''' @name 获取常用命令列表 @author hwliang<2020-08-08> @param args @param user_cmd 是否不获取用户配置 @param sys_cmd 是否不获取系统配置 @return list ''' sys_command = [] if not sys_cmd: if os.path.exists(self._sys_command_file): sys_command = json.loads(public.readFile(self._sys_command_file)) user_command = [] if not user_cmd: if os.path.exists(self._user_command_file): user_command = json.loads(public.readFile(self._user_command_file)) command = sys_command + user_command return command def command_exists(self,command,title): ''' @name 判断命令是否存在 @author hwliang<2020-08-08> @param command 常用命令列表 @param title 命令标题 @return bool ''' for cmd in command: if cmd['title'] == title: return True return False def save_command(self,command,sys_cmd=False): ''' @name 保存常用命令 @author hwliang<2020-08-08> @param command 常用命令列表 @param sys_cmd 是否为系统配置 @return void ''' s_file = self._user_command_file if sys_cmd: s_file = self._sys_command_file public.writeFile(s_file,json.dumps(command)) def create_command(self,args): ''' @name 创建常用命令 @author hwliang<2020-08-08> @param args{ title 标题 shell 命令文本 } @return dict ''' args.title = args.title.strip() command = self.get_command_list(sys_cmd=True) if self.command_exists(command,args.title): return public.return_msg_gettext(False, public.lang("The specified command name already exists")) cmd = { "title": args.title, "shell": args.shell.strip() } command.append(cmd) self.save_command(command) public.write_log_gettext(self._log_type,'Add common commands [{}]',(str(args.title),)) return public.return_msg_gettext(True, public.lang("Setup successfully!")) def get_command_find(self,args = None, title=None): ''' @name 获取指定命令信息 @author hwliang<2020-08-08> @param args{ title 标题 } 可选 @param title 标题 可选 @return dict ''' if args: title = args.title.strip() command = self.get_command_list() for cmd in command: if cmd['title'] == title or cmd['title'] == args.title: return cmd return public.return_msg_gettext(False, public.lang("The specified command does not exist")) def modify_command(self,args): ''' @name 修改常用命令 @author hwliang<2020-08-08> @param args{ title 标题 new_title 新标题 shell 命令文本 } @return dict ''' args.title = args.title.strip() command = self.get_command_list(sys_cmd=True) if not self.command_exists(command,args.title): return public.return_msg_gettext(False, public.lang("The specified command does not exist")) for i in range(len(command)): if command[i]['title'] == args.title or command[i]['title'] == title: command[i]['title'] = args.new_title.strip() command[i]['shell'] = args.shell.strip() break self.save_command(command) public.write_log_gettext(self._log_type,'Modify common commands [{}]',(str(args.title),)) return public.return_msg_gettext(True, public.lang("Setup successfully!")) def remove_command(self,args): ''' @name 删除指定命令 @author hwliang<2020-08-08> @param args{ title 标题 } @return dict ''' args.title = args.title.strip() command = self.get_command_list(sys_cmd=True) if not self.command_exists(command,args.title): return public.return_msg_gettext(False, public.lang("The specified command does not exist")) for i in range(len(command)): if command[i]['title'] == args.title: del(command[i]) break self.save_command(command) public.write_log_gettext(self._log_type,'Delete common commands [{}]',(str(args.title),)) return public.return_msg_gettext(True, public.lang("Setup successfully!"))