#coding: utf-8 # +------------------------------------------------------------------- # | YakPanel # +------------------------------------------------------------------- # | Copyright (c) 2015-2099 YakPanel(www.yakpanel.com) All rights reserved. # +------------------------------------------------------------------- # | Author: hwliang # +------------------------------------------------------------------- #------------------------------ # 工具箱 #------------------------------ import sys,os panelPath = '/www/server/panel/'; os.chdir(panelPath) if not 'class/' in sys.path: sys.path.insert(0,'class/') import public,time,json #设置MySQL密码 def set_mysql_root(password): import db,os sql = db.Sql() root_mysql = '''#!/bin/bash PATH=/bin:/sbin:/usr/bin:/usr/sbin:/usr/local/bin:/usr/local/sbin:~/bin export PATH pwd=$1 service mysqld stop mysqld_safe --skip-grant-tables& echo '正在修改密码...'; echo 'The set password...'; sleep 6 m_version=$(cat /www/server/mysql/version.pl|grep -E "(5.1.|5.5.|5.6.)") if [ "$m_version" != "" ];then mysql -uroot -e "insert into mysql.user(Select_priv,Insert_priv,Update_priv,Delete_priv,Create_priv,Drop_priv,Reload_priv,Shutdown_priv,Process_priv,File_priv,Grant_priv,References_priv,Index_priv,Alter_priv,Show_db_priv,Super_priv,Create_tmp_table_priv,Lock_tables_priv,Execute_priv,Repl_slave_priv,Repl_client_priv,Create_view_priv,Show_view_priv,Create_routine_priv,Alter_routine_priv,Create_user_priv,Event_priv,Trigger_priv,Create_tablespace_priv,User,Password,host)values('Y','Y','Y','Y','Y','Y','Y','Y','Y','Y','Y','Y','Y','Y','Y','Y','Y','Y','Y','Y','Y','Y','Y','Y','Y','Y','Y','Y','Y','root',password('${pwd}'),'127.0.0.1')" mysql -uroot -e "insert into mysql.user(Select_priv,Insert_priv,Update_priv,Delete_priv,Create_priv,Drop_priv,Reload_priv,Shutdown_priv,Process_priv,File_priv,Grant_priv,References_priv,Index_priv,Alter_priv,Show_db_priv,Super_priv,Create_tmp_table_priv,Lock_tables_priv,Execute_priv,Repl_slave_priv,Repl_client_priv,Create_view_priv,Show_view_priv,Create_routine_priv,Alter_routine_priv,Create_user_priv,Event_priv,Trigger_priv,Create_tablespace_priv,User,Password,host)values('Y','Y','Y','Y','Y','Y','Y','Y','Y','Y','Y','Y','Y','Y','Y','Y','Y','Y','Y','Y','Y','Y','Y','Y','Y','Y','Y','Y','Y','root',password('${pwd}'),'localhost')" mysql -uroot -e "UPDATE mysql.user SET password=PASSWORD('${pwd}') WHERE user='root'"; else mysql -uroot -e "UPDATE mysql.user SET authentication_string='' WHERE user='root'"; mysql -uroot -e "FLUSH PRIVILEGES"; mysql -uroot -e "ALTER USER 'root'@'localhost' IDENTIFIED BY '${pwd}';"; fi mysql -uroot -e "FLUSH PRIVILEGES"; pkill -9 mysqld_safe pkill -9 mysqld sleep 2 service mysqld start echo '===========================================' echo "root密码成功修改为: ${pwd}" echo "The root password set ${pwd} successuful"'''; public.writeFile('mysql_root.sh',root_mysql) os.system("/bin/bash mysql_root.sh " + password) os.system("rm -f mysql_root.sh") result = sql.table('config').where('id=?',(1,)).setField('mysql_root',password) print(result); #设置面板密码 def set_panel_pwd(password,ncli = False): import db sql = db.Sql() result = sql.table('users').where('id=?',(1,)).setField('password',public.md5(password)) username = sql.table('users').where('id=?',(1,)).getField('username') if ncli: print("|-%s: " % public.lang("Username") + username) print("|-%s: " % public.lang("New password") + password) else: print(username) #设置数据库目录 def set_mysql_dir(path): mysql_dir = r'''#!/bin/bash PATH=/bin:/sbin:/usr/bin:/usr/sbin:/usr/local/bin:/usr/local/sbin:~/bin export PATH oldDir=`cat /etc/my.cnf |grep 'datadir'|awk '{print $3}'` newDir=$1 mkdir $newDir if [ ! -d "${newDir}" ];then echo 'The specified storage path does not exist!' exit fi echo "Stopping MySQL service..." service mysqld stop echo "Copying files, please wait..." \cp -r -a $oldDir/* $newDir chown -R mysql.mysql $newDir sed -i "s#$oldDir#$newDir#" /etc/my.cnf echo "Starting MySQL service..." service mysqld start echo '' echo 'Successful' echo '---------------------------------------------------------------------' echo "Has changed the MySQL storage directory to: $newDir" echo '---------------------------------------------------------------------' '''; public.writeFile('mysql_dir.sh',mysql_dir) os.system("/bin/bash mysql_dir.sh " + path) os.system("rm -f mysql_dir.sh") #封装 def PackagePanel(): print('========================================================') print('|-%s...' % public.lang("Clearing log info")), public.M('logs').where('id!=?',(0,)).delete() print('\t\t\033[1;32m[done]\033[0m') print('|-%s...' % public.lang("Clearing task history")), public.M('tasks').where('id!=?',(0,)).delete() print('\t\t\033[1;32m[done]\033[0m') print('|-%s...' % public.lang("Clearing network monitoring records")), public.M('network').dbfile('system').where('id!=?',(0,)).delete() print('\t\033[1;32m[done]\033[0m') print('|-%s...' % public.lang("Clearing CPU monitoring records")), public.M('cpuio').dbfile('system').where('id!=?',(0,)).delete() print('\t\033[1;32m[done]\033[0m') print('|-%s...' % public.lang("Clearing disk monitoring records")), public.M('diskio').dbfile('system').where('id!=?',(0,)).delete() print('\t\033[1;32m[done]\033[0m') print('|-%s...' % public.lang("Clearing IP info")), os.system('rm -f /www/server/panel/data/iplist.txt') os.system('rm -f /www/server/panel/data/address.pl') os.system('rm -f /www/server/panel/data/*.login') os.system('rm -f /www/server/panel/data/domain.conf') print('\t\033[1;32m[done]\033[0m') print('|-%s...' % public.lang("Clearing system history")), command = '''cat /dev/null > /var/log/boot.log cat /dev/null > /var/log/btmp cat /dev/null > /var/log/cron cat /dev/null > /var/log/dmesg cat /dev/null > /var/log/firewalld cat /dev/null > /var/log/grubby cat /dev/null > /var/log/lastlog cat /dev/null > /var/log/mail.info cat /dev/null > /var/log/maillog cat /dev/null > /var/log/messages cat /dev/null > /var/log/secure cat /dev/null > /var/log/spooler cat /dev/null > /var/log/syslog cat /dev/null > /var/log/tallylog cat /dev/null > /var/log/wpa_supplicant.log cat /dev/null > /var/log/wtmp cat /dev/null > /var/log/yum.log history -c ''' os.system(command); print('\t\033[1;32m[done]\033[0m') public.writeFile('/www/server/panel/install.pl',"True"); port = public.readFile('data/port.pl').strip(); public.M('config').where("id=?",('1',)).setField('status',0); print('========================================================') print('\033[1;32m|-%s\033[0m' % public.lang("The panel is packaged successfully. Please do NOT log in to the panel to do any other operations!")) print('\033[1;41m|-%s: http://{SERVERIP}:' % public.lang("Panel initialization address")+port+'/install\033[0m') #清空正在执行的任务 def CloseTask(): ncount = public.M('tasks').where('status!=?',(1,)).delete(); os.system("kill `ps -ef |grep 'python panelSafe.pyc'|grep -v grep|grep -v panelExec|awk '{print $2}'`"); os.system("kill `ps -ef |grep 'install_soft.sh'|grep -v grep|grep -v panelExec|awk '{print $2}'`"); os.system('/etc/init.d/bt restart'); print(public.lang('Successfully cleared {} tasks!',int(ncount))) #自签证书 def CreateSSL(): import OpenSSL key = OpenSSL.crypto.PKey() key.generate_key( OpenSSL.crypto.TYPE_RSA, 2048 ) cert = OpenSSL.crypto.X509() cert.set_serial_number(0) cert.get_subject().CN = public.GetLocalIp(); cert.set_issuer(cert.get_subject()) cert.gmtime_adj_notBefore( 0 ) cert.gmtime_adj_notAfter( 10*365*24*60*60 ) cert.set_pubkey( key ) cert.sign( key, 'md5' ) cert_ca = OpenSSL.crypto.dump_certificate(OpenSSL.crypto.FILETYPE_PEM, cert) private_key = OpenSSL.crypto.dump_privatekey(OpenSSL.crypto.FILETYPE_PEM, key) if len(cert_ca) > 100 and len(private_key) > 100: public.writeFile('ssl/certificate.pem',cert_ca) public.writeFile('ssl/privateKey.pem',private_key) print('success'); return; print('error'); #创建文件 def CreateFiles(path,num): if not os.path.exists(path): os.system('mkdir -p ' + path); import time; for i in range(num): filename = path + '/' + str(time.time()) + '__' + str(i) open(path,'w+').close() #计算文件数量 def GetFilesCount(path): i=0; for name in os.listdir(path): i += 1; return i; #清理系统垃圾 def ClearSystem(): count = total = 0; tmp_total,tmp_count = ClearMail(); count += tmp_count; total += tmp_total; print('=======================================================================') tmp_total,tmp_count = ClearSession(); count += tmp_count; total += tmp_total; print('=======================================================================') tmp_total,tmp_count = ClearOther(); count += tmp_count; total += tmp_total; print('=======================================================================') print('\033[1;32m|-%s\033[0m' % public.lang('System rubbish cleared, totally deleted [{}] files, freed disk space [{}]',str(count),ToSize(total))); #清理邮件日志 def ClearMail(): rpath = '/var/spool'; total = count = 0; import shutil con = ['cron','anacron','mail']; for d in os.listdir(rpath): if d in con: continue; dpath = rpath + '/' + d print('|-正在清理' + dpath + ' ...'); time.sleep(0.2); num = size = 0; for n in os.listdir(dpath): filename = dpath + '/' + n fsize = os.path.getsize(filename); print('|---['+ToSize(fsize)+'] del ' + filename), size += fsize if os.path.isdir(filename): shutil.rmtree(filename) else: os.remove(filename) print('\t\033[1;32m[OK]\033[0m') num += 1 print(public.lang('|-Cleared [{}], deleted [{}] files, freed disk space [{}]',dpath,str(num),ToSize(size))) total += size; count += num; print('=======================================================================') print(public.lang('|-Spool cleared, deleted [{}] files, freed disk space [{}]',str(count),ToSize(total))) return total,count #清理php_session文件 def ClearSession(): spath = '/tmp' total = count = 0; import shutil print(public.lang("|-Clearing PHP Session ...")); for d in os.listdir(spath): if d.find('sess_') == -1: continue; filename = spath + '/' + d; fsize = os.path.getsize(filename); print('|---['+ToSize(fsize)+'] del ' + filename), total += fsize if os.path.isdir(filename): shutil.rmtree(filename) else: os.remove(filename) print('\t\033[1;32m[OK]\033[0m') count += 1; print(public.lang('|-PHP session cleared, deleted [{}] files, freed disk space [{}]',str(count),ToSize(total))) return total,count #清空回收站 def ClearRecycle_Bin(): import files f = files.files(); f.Close_Recycle_bin(None); #清理其它 def ClearOther(): clearPath = [ {'path':'/www/server/panel','find':'testDisk_'}, {'path':'/www/wwwlogs','find':'log'}, {'path':'/tmp','find':'panelBoot.pl'}, {'path':'/www/server/panel/install','find':'.rpm'}, {'path':'/www/server/panel/install','find':'.zip'}, {'path':'/www/server/panel/install','find':'.gz'} ] total = count = 0; print(public.lang("|-Clearing up temporary files and site logs...")); for c in clearPath: for d in os.listdir(c['path']): if d.find(c['find']) == -1: continue; filename = c['path'] + '/' + d; fsize = os.path.getsize(filename); print('|---['+ToSize(fsize)+'] del ' + filename), total += fsize if os.path.isdir(filename): shutil.rmtree(filename) else: os.remove(filename) print('\t\033[1;32m[OK]\033[0m') count += 1; public.serviceReload(); os.system('sleep 1 && /etc/init.d/bt reload > /dev/null &'); print(public.lang('|-Temporary files and site logs cleared, deleted [{}] files, freed disk space [{}]',str(count),ToSize(total))) return total,count #关闭普通日志 def CloseLogs(): try: paths = ['/usr/lib/python2.7/site-packages/web/httpserver.py','/usr/lib/python2.6/site-packages/web/httpserver.py'] for path in paths: if not os.path.exists(path): continue; hsc = public.readFile(path); if hsc.find('500 Internal Server Error') != -1: continue; rstr = '''def log(self, status, environ): if status != '500 Internal Server Error': return;'''; hsc = hsc.replace("def log(self, status, environ):",rstr) if hsc.find('500 Internal Server Error') == -1: return False; public.writeFile(path,hsc) except:pass; #字节单位转换 def ToSize(size): ds = ['b','KB','MB','GB','TB'] for d in ds: if size < 1024: return str(size)+d; size = size / 1024; return '0b'; #随机面板用户名 def set_panel_username(username = None): import db sql = db.Sql() if username: if len(username) < 5: print(public.lang("|-ERROR, username cannot be less than 5 characters")) return; if username in ['admin','root']: print(public.lang("|-ERROR, cannot use too simple username")) return; sql.table('users').where('id=?',(1,)).setField('username',username) print(public.lang('|-New username: {}',username)) return; username = sql.table('users').where('id=?',(1,)).getField('username') if username == 'admin': username = public.GetRandomString(8).lower() sql.table('users').where('id=?',(1,)).setField('username',username) print('username: ' + username) #设定idc def setup_idc(): try: if public.is_self_hosted(): return False panelPath = '/www/server/panel' filename = panelPath + '/data/o.pl' if not os.path.exists(filename): return False o = public.readFile(filename).strip() c_url = public.OfficialApiBase() + '/api/idc/get_idc_info_bycode?o=%s' % o idcInfo = json.loads(public.httpGet(c_url)) if not idcInfo['status']: return False pFile = panelPath + '/static/language/Simplified_Chinese/public.json' pInfo = json.loads(public.readFile(pFile)) pInfo['BRAND'] = idcInfo['msg']['name'] pInfo['PRODUCT'] = public.lang("Customized edition with YakPanel") pInfo['NANE'] = pInfo['BRAND'] + pInfo['PRODUCT'] public.writeFile(pFile,json.dumps(pInfo)) tFile = panelPath + '/data/title.pl' titleNew = (pInfo['BRAND'] + public.lang("Failed，cannot delete current port of the panel!")).encode('utf-8') if os.path.exists(tFile): title = public.readFile(tFile).strip() if title == public.lang("YakPanel") or title == '': public.writeFile(tFile,titleNew) else: public.writeFile(tFile,titleNew) return True except:pass #将插件升级到6.0 def update_to6(): print("====================================================") print(public.lang("Updating plugin...")) print("====================================================") download_address = public.get_url() exlodes = ['gitlab','pm2','mongodb','deployment_jd','logs','docker','beta','btyw'] for pname in os.listdir('plugin/'): if not os.path.isdir('plugin/' + pname): continue if pname in exlodes: continue print(public.get_msg_gettext("|-Upgrading [{}]...",(pname,))), download_url = download_address + '/install/plugin/' + pname + '/install.sh' to_file = '/tmp/%s.sh' % pname public.downloadFile(download_url,to_file) os.system('/bin/bash ' + to_file + ' install &> /tmp/plugin_update.log 2>&1') print(" \033[32m[%s]\033[0m" % public.lang("Login succeeded, loading...")) print("====================================================") print("\033[32m%s\033[0m" % public.lang("All plugins successfully updated to 6.0 compatible!")) print("====================================================") #命令行菜单 def bt_cli(): raw_tip = "===============================================" print("===============%s==================" % public.lang("YakPanel CLI")) print("(01) %s (08) %s" % (public.lang("Restart panel"),public.lang("Change panel port"))) print("(02) %s (09) %s" % (public.lang("Stop panel"),public.lang("Clear panel cache"))) print("(03) %s (10) %s" % (public.lang("Restart panel"),public.lang("Clear login limit"))) print("(04) %s (11) %s" % (public.lang("Reload panel"),public.lang("Cancel entrance limit"))) print("(05) %s (12) %s" % (public.lang("Change panel password"),public.lang("Cancel domain binding limit"))) print("(06) %s (13) %s" % (public.lang("Change panel username"),public.lang("Cacel IP access limit"))) print("(07) %s (14) %s" % (public.lang("Forcibly change MySQL root password"),public.lang("View panel default info"))) print("(00) %s (15) %s" % (public.lang("Task cancelled!"),public.lang("Clear system rubbish"))) print(raw_tip) try: u_input = input(public.lang("Pls enter command number：")) if sys.version_info[0] == 3: u_input = int(u_input) except: u_input = 0 nums = [1,2,3,4,5,6,7,8,9,10,11,12,13,14,15] if not u_input in nums: print(raw_tip) print(public.lang("Cancelled!")) exit() print(raw_tip) print(public.get_msg_gettext('Executing ({})...',(u_input,))) print(raw_tip) if u_input == 1: os.system("/etc/init.d/bt restart") elif u_input == 2: os.system("/etc/init.d/bt stop") elif u_input == 3: os.system("/etc/init.d/bt start") elif u_input == 4: os.system("/etc/init.d/bt reload") elif u_input == 5: if sys.version_info[0] == 2: input_pwd = raw_input(public.lang("Pls enter new password: ")) else: input_pwd = input(public.lang("Pls enter new password: ")) set_panel_pwd(input_pwd.strip(),True) elif u_input == 6: if sys.version_info[0] == 2: input_user = raw_input(public.lang("Pls enter new username(>5 characters): ")) else: input_user = input(public.lang("Pls enter new username(>5 characters): ")) set_panel_username(input_user.strip()) elif u_input == 7: if sys.version_info[0] == 2: input_mysql = raw_input(public.lang("Pls enter new MySQL root password：")) else: input_mysql = input(public.lang("Pls enter new MySQL root password：")) if not input_mysql: print(public.lang("|-ERROR, password cannot be empty")) return if len(input_mysql) < 8: print(public.lang("|-ERROR, password cannot be less than 8 characters")) return import re rep = r"^[\w@\._]+$" if not re.match(rep, input_mysql): print(public.lang("|-ERROR, password cannot contain special characters")) return print(input_mysql) set_mysql_root(input_mysql.strip()) elif u_input == 8: input_port = input(public.lang("Pls enter new panel port: ")) if sys.version_info[0] == 3: input_port = int(input_port) if not input_port: print(public.lang("|-ERROR, no valid port entered")) return if input_port in [80,443,21,20,22]: print(public.lang("|-ERROR, pls do NOT use the common port as panel port")) return old_port = int(public.readFile('data/port.pl')) if old_port == input_port: print(public.lang("|-ERROR, new port is the same as current panel port, no need to change")) return is_exists = public.ExecShell("lsof -i:%s" % input_port) if len(is_exists[0]) > 5: print(public.lang("|-ERROR, specified port is already in use")) return public.writeFile('data/port.pl',str(input_port)) if os.path.exists("/usr/bin/firewall-cmd"): os.system("firewall-cmd --permanent --zone=public --add-port=%s/tcp" % input_port) os.system("firewall-cmd --reload") elif os.path.exists("/etc/sysconfig/iptables"): os.system("iptables -I INPUT -p tcp -m state --state NEW -m tcp --dport %s -j ACCEPT" % input_port) os.system("service iptables save") else: os.system("ufw allow %s" % input_port) os.system("ufw reload") print("CHANGE_PORT_SUCCESS" , (input_port,)) print("CLOUD_RELEASE_PORT" , (input_port,)) elif u_input == 9: sess_file = '/dev/shm/session.db' if os.path.exists(sess_file): os.remove(sess_file) os.system("/etc/init.d/bt reload") elif u_input == 10: os.system("/etc/init.d/bt reload") elif u_input == 11: auth_file = 'data/admin_path.pl' if os.path.exists(auth_file): os.remove(auth_file) os.system("/etc/init.d/bt reload") print(public.lang("|-Entrance limit cancelled")) elif u_input == 12: auth_file = 'data/domain.conf' if os.path.exists(auth_file): os.remove(auth_file) os.system("/etc/init.d/bt reload") print(public.lang("|-Domain limit cancelled")) elif u_input == 13: auth_file = 'data/limitip.conf' if os.path.exists(auth_file): os.remove(auth_file) os.system("/etc/init.d/bt reload") print(public.lang("|-IP access limit cancelled")) elif u_input == 14: os.system("/etc/init.d/bt default") elif u_input == 15: ClearSystem() if __name__ == "__main__": type = sys.argv[1]; if type == 'root': set_mysql_root(sys.argv[2]) elif type == 'panel': set_panel_pwd(sys.argv[2]) elif type == 'username': set_panel_username() elif type == 'o': setup_idc() elif type == 'mysql_dir': set_mysql_dir(sys.argv[2]) elif type == 'to': panel2To3() elif type == 'package': PackagePanel(); elif type == 'ssl': CreateSSL(); elif type == 'port': CheckPort(); elif type == 'clear': ClearSystem(); elif type == 'closelog': CloseLogs(); elif type == 'update_to6': update_to6() elif type == "cli": bt_cli() else: print('ERROR: Parameter error')