430 lines
14 KiB
Python
430 lines
14 KiB
Python
# coding: utf-8
|
||
# +-------------------------------------------------------------------
|
||
# | YakPanel
|
||
# +-------------------------------------------------------------------
|
||
# | Copyright (c) 2015-2017 YakPanel(https://www.yakpanel.com) All rights reserved.
|
||
# +-------------------------------------------------------------------
|
||
# | Author: hwl@yakpanel.com
|
||
# +-------------------------------------------------------------------
|
||
# +--------------------------------------------------------------------
|
||
# | 前置web服务器控制器
|
||
# +--------------------------------------------------------------------
|
||
|
||
import os
|
||
from sys import path as sys_path
|
||
from platform import machine
|
||
|
||
# 设置运行目录
|
||
os.chdir('/www/server/panel')
|
||
|
||
# 添加自定义公共模块路径
|
||
if not 'class/' in sys_path:
|
||
sys_path.insert(0,'class/')
|
||
|
||
# 引入自定义公共模块
|
||
import public
|
||
|
||
|
||
class webserver:
|
||
|
||
|
||
def __init__(self):
|
||
'''
|
||
@name 初始化
|
||
'''
|
||
if not hasattr(public,'get_panel_path'):
|
||
self.__panel_path = '/www/server/panel'
|
||
else:
|
||
self.__panel_path = public.get_panel_path()
|
||
|
||
|
||
self.__webserver_bin = os.path.join(self.__panel_path,'webserver/sbin/webserver') # webserver二进制文件
|
||
self.__webserver_conf = os.path.join(self.__panel_path,'webserver/conf/webserver.conf') # webserver配置文件
|
||
self.__webserver_pid = os.path.join(self.__panel_path,'webserver/logs/webserver.pid') # webserver进程PID
|
||
self.__webserver_ctl = os.path.join(self.__panel_path,'script/webserver-ctl.sh') # webserver控制脚本
|
||
self.__panel_port_file = os.path.join(self.__panel_path, 'data/port.pl') # 面板端口文件
|
||
self.__ssl_key_file = os.path.join(self.__panel_path, 'ssl/privateKey.pem') # SSL私钥文件
|
||
self.__ssl_crt_file = os.path.join(self.__panel_path,'ssl/certificate.pem') # SSL证书文件
|
||
self.__is_ssl_file = os.path.join(self.__panel_path,'data/ssl.pl') # 是否开启SSL文件
|
||
self.__examples_path = os.path.join(self.__panel_path, 'webserver/tpls') # 配置文件模板目录
|
||
self.__webserver_conf_example = os.path.join(self.__examples_path ,'webserver.conf') # webserver配置文件模板
|
||
self.__webserver_ssl_conf_example = os.path.join(self.__examples_path ,'webserver_ssl.conf') # webserver SSL配置文件模板
|
||
self.__webserver_listen_conf_example = os.path.join(self.__examples_path ,'webserver_listen.conf') # webserver监听配置文件模板
|
||
self.__webserver_listen_ssl_conf_example = os.path.join(self.__examples_path ,'webserver_listen_ssl.conf') # webserver SSL监听配置文件模板
|
||
self.__default_port = 8888 # 默认端口
|
||
self.__log_error = 'ERROR'
|
||
self.__log_debug = 'DEBUG'
|
||
self.__log_info = 'INFO'
|
||
self.__log_warning = 'WARNING'
|
||
|
||
|
||
def print_log(self,msg,level='INFO'):
|
||
'''
|
||
@name 打印日志
|
||
@param msg str 日志内容
|
||
@param level str 日志级别
|
||
@return void
|
||
'''
|
||
if not hasattr(public,'print_log'):
|
||
print("[{}]".format(level),msg)
|
||
else:
|
||
public.print_log(msg,level)
|
||
|
||
def exec_shell(self,cmd):
|
||
'''
|
||
@name 执行shell命令
|
||
@param cmd str shell命令
|
||
@return tuple
|
||
'''
|
||
res = public.ExecShell(cmd)
|
||
if isinstance(res,tuple):
|
||
return res
|
||
else:
|
||
return ('',res)
|
||
|
||
|
||
|
||
|
||
# 获取系统架构是X86还是ARM
|
||
def get_machine(self):
|
||
arch = machine()
|
||
return arch
|
||
|
||
def bin_exists(self):
|
||
'''
|
||
@name 判断webserver二进制文件是否存在
|
||
@return bool
|
||
'''
|
||
return os.path.exists(self.__webserver_bin)
|
||
|
||
def conf_exists(self):
|
||
'''
|
||
@name 判断webserver配置文件是否存在
|
||
@return bool
|
||
'''
|
||
return os.path.exists(self.__webserver_conf)
|
||
|
||
def conf_example_exists(self):
|
||
'''
|
||
@name 判断webserver配置文件模板是否存在
|
||
@return bool
|
||
'''
|
||
return os.path.exists(self.__webserver_conf_example)
|
||
|
||
def pid_exists(self):
|
||
'''
|
||
@name 判断webserver进程PID是否存在
|
||
@return bool
|
||
'''
|
||
return os.path.exists(self.__webserver_pid)
|
||
|
||
def ctl_exists(self):
|
||
'''
|
||
@name 判断webserver-ctl.sh是否存在
|
||
@return bool
|
||
'''
|
||
return os.path.exists(self.__webserver_ctl)
|
||
|
||
def hasattr_public(self,defname):
|
||
'''
|
||
@name 判断public模块是否存在
|
||
@return bool
|
||
'''
|
||
if hasattr(public,defname):
|
||
return True
|
||
|
||
self.print_log('public.{} not found.'.format(defname),self.__log_error)
|
||
return False
|
||
|
||
def process_status(self):
|
||
'''
|
||
@name 判断webserver进程是否存在
|
||
@return bool
|
||
'''
|
||
if not self.pid_exists():
|
||
return False
|
||
|
||
res = self.exec_shell("bash {} status".format(self.__webserver_ctl))
|
||
|
||
if res[0].find('not running') != -1:
|
||
return False
|
||
return True
|
||
|
||
def start(self):
|
||
'''
|
||
@name 启动webserver
|
||
@return bool
|
||
'''
|
||
if self.process_status():
|
||
return False
|
||
|
||
|
||
|
||
res = self.exec_shell("bash {} start".format(self.__webserver_ctl))
|
||
if res[0].find('Failed') != -1:
|
||
self.print_log(res,self.__log_warning)
|
||
return False
|
||
|
||
return True
|
||
|
||
def stop(self):
|
||
'''
|
||
@name 停止webserver
|
||
@return bool
|
||
'''
|
||
if not self.process_status():
|
||
return False
|
||
res = self.exec_shell("bash {} stop".format(self.__webserver_ctl))
|
||
if res[0].find('Failed') != -1:
|
||
self.print_log(res,self.__log_warning)
|
||
return False
|
||
return True
|
||
|
||
def restart(self):
|
||
'''
|
||
@name 重启webserver
|
||
@return bool
|
||
'''
|
||
res = self.exec_shell("bash {} restart".format(self.__webserver_ctl))
|
||
if res[0].find('Failed') != -1:
|
||
self.print_log(res,self.__log_warning)
|
||
return False
|
||
return True
|
||
|
||
def reload(self):
|
||
'''
|
||
@name 重载webserver
|
||
@return bool
|
||
'''
|
||
res = self.exec_shell("bash {} reload".format(self.__webserver_ctl))
|
||
if res[0].find('Failed') != -1:
|
||
self.print_log(res,self.__log_warning)
|
||
return False
|
||
return True
|
||
|
||
def get_status(self):
|
||
'''
|
||
@name 获取webserver状态
|
||
@return bool
|
||
'''
|
||
return self.process_status()
|
||
|
||
def configtest(self):
|
||
'''
|
||
@name 测试配置文件是否正确
|
||
@return bool
|
||
'''
|
||
res = self.exec_shell("bash {} configtest".format(self.__webserver_ctl))
|
||
result = "\n".join(res)
|
||
|
||
if result.find('successful') != -1:
|
||
return True
|
||
|
||
self.print_log(result,self.__log_warning)
|
||
return False
|
||
|
||
def get_panel_port(self):
|
||
'''
|
||
@name 获取面板端口
|
||
@return int
|
||
'''
|
||
|
||
# 如果面板端口文件不存在，则使用默认端口
|
||
if not os.path.exists(self.__panel_port_file):
|
||
return self.__default_port
|
||
|
||
# 读取面板端口文件
|
||
port = public.ReadFile(self.__panel_port_file)
|
||
if not port:
|
||
return self.__default_port
|
||
|
||
try:
|
||
# 判断端口是否在1-65535之间
|
||
port = int(port)
|
||
if port < 1 or port > 65535:
|
||
return self.__default_port
|
||
except:
|
||
return self.__default_port
|
||
|
||
return port
|
||
|
||
def is_ssl(self):
|
||
'''
|
||
@name 是否开启了SSL
|
||
@return bool
|
||
'''
|
||
if os.path.exists(self.__is_ssl_file):
|
||
# 如果开启了SSL，则判断SSL证书和私钥文件是否存在
|
||
if os.path.exists(self.__ssl_key_file) and os.path.exists(self.__ssl_crt_file):
|
||
return True
|
||
return False
|
||
|
||
def get_ssl_config(self):
|
||
'''
|
||
@name 获取SSL配置
|
||
@return dict
|
||
'''
|
||
# 如果没有开启SSL，则返回空字符串
|
||
if not self.is_ssl():
|
||
return ''
|
||
|
||
ssl_conf = public.ReadFile(self.__webserver_ssl_conf_example)
|
||
if not ssl_conf:
|
||
self.print_log('Ssl configuration file not found.',self.__log_warning)
|
||
return ''
|
||
|
||
return ssl_conf
|
||
|
||
def get_http3_header(self):
|
||
'''
|
||
@name 获取HTTP3头部
|
||
@return dict
|
||
'''
|
||
http3_header = ''
|
||
|
||
# 如果开启了SSL，则添加HTTP3头部
|
||
if self.is_ssl():
|
||
'''h3=":443"; ma=2592000,h3-29=":443"; ma=2592000'''
|
||
http3_header = "add_header Alt-Svc 'h3=\":{PORT}\"; ma=86400,h3-29=\":{PORT}\"; ma=86400';".format(PORT=self.get_panel_port())
|
||
|
||
return http3_header
|
||
|
||
def get_listen_config(self):
|
||
'''
|
||
@name 获取监听配置
|
||
@return dict
|
||
'''
|
||
default_listen = '''
|
||
listen {PORT};
|
||
listen [::]:{PORT};
|
||
'''
|
||
# 是否开启了SSL
|
||
if self.is_ssl():
|
||
|
||
listen_conf = public.ReadFile(self.__webserver_listen_ssl_conf_example)
|
||
else:
|
||
listen_conf = public.ReadFile(self.__webserver_listen_conf_example)
|
||
|
||
# 如果没有找到监听配置文件，则使用默认监听配置
|
||
if not listen_conf:
|
||
listen_conf = default_listen
|
||
|
||
# 替换面板端口
|
||
port = self.get_panel_port()
|
||
listen_conf = listen_conf.format(PORT=port)
|
||
|
||
return listen_conf
|
||
|
||
|
||
def create_conf(self):
|
||
'''
|
||
@name 创建配置文件
|
||
@return bool
|
||
'''
|
||
if not self.conf_example_exists():
|
||
self.print_log('Web server configuration file template not found.',self.__log_error)
|
||
return False
|
||
|
||
# 读取配置文件模板
|
||
config_example = public.ReadFile(self.__webserver_conf_example)
|
||
if not config_example:
|
||
self.print_log('Web server configuration file template read failed.',self.__log_error)
|
||
return False
|
||
|
||
# 获取监听配置
|
||
listen_conf = self.get_listen_config()
|
||
# 获取SSL配置
|
||
ssl_conf = self.get_ssl_config()
|
||
# 获取HTTP3头部
|
||
http3_header = self.get_http3_header()
|
||
|
||
config = config_example.format(LISTEN=listen_conf, SSL_CONFIG=ssl_conf, HTTP3_HEADER=http3_header)
|
||
res = public.WriteFile(self.__webserver_conf, config)
|
||
if not res:
|
||
self.print_log("Write Web server configuration file failed",self.__log_error)
|
||
return False
|
||
|
||
# 测试配置文件是否正确
|
||
if not self.configtest():
|
||
self.print_log('Web server configuration file test failed.',self.__log_error)
|
||
return False
|
||
|
||
return True
|
||
|
||
def chmod_static_files(self):
|
||
'''
|
||
@name 设置静态文件权限
|
||
@return bool
|
||
'''
|
||
# 设置静态目录链权限
|
||
res = self.exec_shell('chmod 755 /www /www/server /www/server/panel /www/server/panel/YakPanel')
|
||
if res[1] != '':
|
||
self.print_log('\n'.join(res),self.__log_warning)
|
||
return False
|
||
|
||
# 递归设置静态文件权限
|
||
res = self.exec_shell('chmod -R 755 /www/server/panel/YakPanel/static')
|
||
if res[1] != '':
|
||
self.print_log('\n'.join(res),self.__log_warning)
|
||
return False
|
||
|
||
return True
|
||
|
||
def run_webserver(self):
|
||
'''
|
||
@name 启动web服务器
|
||
@return bool 是否成功
|
||
'''
|
||
|
||
try:
|
||
# 判断public模块是否符合要求
|
||
public_function = ['ExecShell','ReadFile','WriteFile','get_error_info','get_panel_path','get_panel_port','print_log']
|
||
for func in public_function:
|
||
if not self.hasattr_public(func):
|
||
return False
|
||
|
||
# 判断webserver二进制文件是否存在，如果不存在则尝试调用下载脚本下载
|
||
if not self.bin_exists():
|
||
if os.path.exists(self.__webserver_ctl):
|
||
self.exec_shell("bash {} download".format(self.__webserver_ctl))
|
||
self.print_log('Web server binary file not found.',self.__log_error)
|
||
return False
|
||
|
||
# 判断cli工具脚本是否存在
|
||
if not self.ctl_exists():
|
||
self.print_log('Web server command line tool not found.',self.__log_error)
|
||
return False
|
||
|
||
# 设置静态文件权限
|
||
if not self.chmod_static_files():
|
||
self.print_log('Web server static file permission setting failed.',self.__log_error)
|
||
return False
|
||
|
||
# 创建配置文件
|
||
if not self.create_conf():
|
||
self.print_log('Web server configuration file creation failed.',self.__log_error)
|
||
return False
|
||
|
||
# 检查webserver进程是否存在，如果存在则重载，否则启动
|
||
if self.process_status():
|
||
res = self.reload()
|
||
if not res:
|
||
self.print_log('Web server reload failed.',self.__log_warning)
|
||
else:
|
||
res = self.start()
|
||
# 检查进程是否正常运行
|
||
if not res:
|
||
self.print_log('Web server start failed.',self.__log_error)
|
||
return False
|
||
except:
|
||
# 将错误信息写入到日志
|
||
self.print_log(public.get_error_info(),self.__log_error)
|
||
return False
|
||
|
||
return True
|
||
|
||
if __name__ == '__main__':
|
||
|
||
web = webserver()
|
||
print(web.run_webserver())
|