Preliminary server chroot installation
Configures a chroot with Perl and bin/pgen-server to run a shell. ssh to 'pgen@localhost' successful shows pgen-server test message then logs out. 'add_key' and 'remove_server' functions also work. Recursive path builder function 'dig_dirs' also works well within the latter.
This commit is contained in:
parent
aedd59b759
commit
e3bdcdb5ae
|
|
@ -0,0 +1,3 @@
|
|||
#!/usr/bin/perl
|
||||
|
||||
print("Testing server\n");
|
||||
|
|
@ -0,0 +1,218 @@
|
|||
#!/usr/bin/perl
|
||||
|
||||
use strict;
|
||||
use warnings;
|
||||
|
||||
our $server_dir = '/var/pgen';
|
||||
use File::Which;
|
||||
|
||||
if (scalar(@ARGV) != 1) {
|
||||
usage("Requires exactly 1 argument:");
|
||||
} elsif ($ARGV[0] eq '-h' || $ARGV[0] eq '--help') {
|
||||
usage("Usage: $0 <option>");
|
||||
} elsif ($ARGV[0] eq 'server') {
|
||||
if (-d $server_dir) {
|
||||
print("Installation appears to already exist. Would you like it to be removed and
|
||||
replaced? All existing password information will be lost. ");
|
||||
my $selection;
|
||||
do {
|
||||
print("[y/N]? ");
|
||||
$selection = <STDIN>;
|
||||
chomp($selection);
|
||||
} while (!defined($selection) || $selection !~ m/^[yYnN]?$/);
|
||||
unless ($selection eq 'y' || $selection eq 'Y') {
|
||||
die("Abandoning installation\n");
|
||||
}
|
||||
remove_server();
|
||||
}
|
||||
install_server();
|
||||
} elsif ($ARGV[0] eq 'client') {
|
||||
install_client();
|
||||
} elsif ($ARGV[0] eq 'remove') {
|
||||
my %removed = (
|
||||
'server' => undef,
|
||||
'client' => undef
|
||||
);
|
||||
if (detect_server()) {
|
||||
$removed{'server'} = remove_server();
|
||||
}
|
||||
if (detect_client()) {
|
||||
$removed{'client'} = remove_client();
|
||||
}
|
||||
foreach (keys(%removed)) {
|
||||
if (defined($removed{$_})) {
|
||||
if ($removed{$_}) {
|
||||
print("Received error '$removed{$_}' while removing $_\n");
|
||||
} else {
|
||||
print("Successfully removed $_\n");
|
||||
}
|
||||
}
|
||||
}
|
||||
} elsif ($ARGV[0] eq 'add') {
|
||||
add_key();
|
||||
} else {
|
||||
usage("Invalid argument '$ARGV[0]'. Requires one of:");
|
||||
}
|
||||
|
||||
exit(0);
|
||||
|
||||
sub detect_server
|
||||
{
|
||||
my $dir = (getpwnam('pgen'))[7] || return undef;
|
||||
if (-d $dir) {
|
||||
return($dir);
|
||||
}
|
||||
return(undef);
|
||||
|
||||
}
|
||||
|
||||
sub detect_client
|
||||
{
|
||||
return(which('pgen'));
|
||||
}
|
||||
|
||||
sub install_server
|
||||
{
|
||||
my $perl = which('perl') || die "Missing dependency: perl\n";
|
||||
chomp($perl);
|
||||
my ($perl_dir) = $perl =~ m/^((?:\/[^\/]*)*)\/perl$/;
|
||||
my @perl_path = ( $server_dir );
|
||||
foreach (split('/',$perl_dir)) {
|
||||
unless($_ eq '') {
|
||||
if (scalar(@perl_path)) {
|
||||
$_ = $perl_path[scalar(@perl_path)-1].'/'.$_;
|
||||
}
|
||||
push(@perl_path,$_);
|
||||
}
|
||||
}
|
||||
foreach (@perl_path, $server_dir."/.ssh", $server_dir."/bin", $server_dir."/lib", $server_dir."/lib64") {
|
||||
print "Creating directory '$_'\n";
|
||||
mkdir($_) || die "Failed to mkdir '$_': $!\n";
|
||||
}
|
||||
use File::Copy;
|
||||
print("Installing Perl...\n");
|
||||
copy($perl,"${server_dir}${perl}");
|
||||
chmod(0755, "${server_dir}${perl}");
|
||||
my $libs = `ldd ${server_dir}${perl}`;
|
||||
foreach (split("\n",$libs)) {
|
||||
if ($_ =~ m#^\s+([^\ ]+)\ =>\ (\/[^\/]+)((?:\/[^\/]*)*)\/([^\/]+) \(.*#) {
|
||||
print "Copying ${2}${3}/${4} to ${server_dir}${2}/${4}\n";
|
||||
copy("${2}${3}/${4}","${server_dir}${2}/${4}");
|
||||
} elsif ($_ =~ m#^\s+(\/[^\/]+)((?:\/[^\/]*)*)\/([^\/]+) \(.*#) {
|
||||
print "Copying ${1}${2}/${3} to ${server_dir}${1}/${3}\n";
|
||||
copy("${1}${2}/${3}","${server_dir}${1}/${3}");
|
||||
} else {
|
||||
print "skipping $_\n";
|
||||
}
|
||||
}
|
||||
my $src = $0;
|
||||
$src =~ s/(.*)\/([^\/]*)/$1\/bin\/pgen-server/;
|
||||
print("Installing $src to ${server_dir}/bin/pgen\n");
|
||||
copy($src,"${server_dir}/bin/pgen") || die("Failed to install: $!\n");
|
||||
chmod(0755, "${server_dir}/bin/pgen");
|
||||
print("Configuring user 'pgen'\n");
|
||||
system("useradd -d $server_dir pgen");
|
||||
system("usermod -s $server_dir/bin/pgen pgen");
|
||||
add_key();
|
||||
print("Server installation complete\n");
|
||||
}
|
||||
|
||||
sub install_client
|
||||
{
|
||||
if (detect_client()) {
|
||||
die("Client is already installed. If necessary, uninstall it with 'remove'\n");
|
||||
}
|
||||
print("TODO: Here I would install the client\n");
|
||||
}
|
||||
|
||||
sub remove_server
|
||||
{
|
||||
if (detect_server()) {
|
||||
system("userdel pgen");
|
||||
}
|
||||
my @paths;
|
||||
my $paths_ref = \@paths;
|
||||
dig_dirs($paths_ref, $server_dir);
|
||||
unless (scalar(@paths)) {
|
||||
die("No chroot installation present at $server_dir\n");
|
||||
}
|
||||
while (scalar(@paths)) {
|
||||
my $target = pop(@paths);
|
||||
print "Removing $target...\n";
|
||||
if (-d $target) {
|
||||
rmdir($target) || die("Failed to remove directory '$target': $!\n");
|
||||
} else {
|
||||
unlink($target) || die("Failed to delete '$target': $!\n");
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
sub dig_dirs
|
||||
{
|
||||
my $paths_ref = shift;
|
||||
my $path = shift;
|
||||
unless (-e $path) {
|
||||
return(undef);
|
||||
}
|
||||
if ($path =~ m/\/\.\.?$/) {
|
||||
return;
|
||||
}
|
||||
push(@$paths_ref, $path);
|
||||
foreach (glob("$path/*"), glob("$path/.*")) {
|
||||
if ($path =~ m/\/\.\.?$/) {
|
||||
next();
|
||||
}
|
||||
if (-d $_) {
|
||||
dig_dirs($paths_ref,$_);
|
||||
} else {
|
||||
push(@$paths_ref, $_);
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
sub remove_client
|
||||
{
|
||||
unless (detect_client()) {
|
||||
return "Client is not installed.\n";
|
||||
}
|
||||
print("TODO: Here I would remove the client\n");
|
||||
}
|
||||
|
||||
sub add_key
|
||||
{
|
||||
unless (detect_server()) {
|
||||
die("This must be run on a host with the server installed");
|
||||
}
|
||||
my $file = "$server_dir/.ssh/authorized_keys";
|
||||
my $msg = "Paste the SSH public key of the user. 'Q' to";
|
||||
if (-e $file) {
|
||||
print("Adding new user. $msg abort ");
|
||||
} else {
|
||||
print("Initializing with first user. $msg skip ");
|
||||
}
|
||||
my $key;
|
||||
do {
|
||||
print("[<key>/Q]: ");
|
||||
$key = <STDIN>;
|
||||
chomp($key);
|
||||
} while (!defined($key) || ($key ne 'Q' && $key ne 'q' && $key !~ m/^ssh\-(dsa|ecdsa|ecdsa\sk|ed25519|ed25519-sk|rsa)\ [a-zA-Z0-9\+\/]{50,}/));
|
||||
open(my $fh, '>>', $file) || die("Failed to open '$file': $!\n");
|
||||
unless ($key eq 'Q' && $key ne 'q') {
|
||||
print $fh $key."\n";
|
||||
}
|
||||
close($fh);
|
||||
}
|
||||
|
||||
sub usage
|
||||
{
|
||||
my $error = shift;
|
||||
if (!defined($error)) {
|
||||
$error = "Unknown failure. Try running with one of these options:";
|
||||
}
|
||||
die($error . "
|
||||
server - install server application
|
||||
client - install client application
|
||||
remove - uninstall client and server (as necessary)
|
||||
add - add a user key (SSH public key)\n");
|
||||
exit(1);
|
||||
}
|
||||
Loading…
Reference in New Issue