ssfs annotate ssfs-server @ rev 46

ssfs-sh: quote everything so it work
author Christophe Lincoln <pankso@slitaz.org>
date Sun Jun 12 18:21:50 2011 +0200 (2011-06-12)
parents e3160ccd3ffb
children 51160b20e291
rev   line source
pankso@4 1 #!/bin/sh
pankso@4 2 #
pankso@4 3 # SliTaz Secure File Storage server side tool.
pankso@4 4 #
pankso@4 5 # Copyright (C) SliTaz GNU/Linux - BSD License
pankso@4 6 # Author: Christophe Lincoln <pankso@slitaz.org>
pankso@4 7 #
pankso@4 8
pankso@4 9 app=$(basename $0)
pankso@4 10 [ -f "/etc/ssfs/$app.conf" ] && . /etc/ssfs/$app.conf
pankso@4 11 [ -f "./data/$app.conf" ] && . ./data/$app.conf
pankso@34 12 state=/var/lib/ssfs
pankso@34 13 share=/usr/share/ssfs
pankso@4 14
pankso@4 15 # Be sure we're root.
pankso@4 16 [ $(id -u) != 0 ] && gettext "You must be root to run:" && \
pankso@4 17 echo " $app" && exit 0
pankso@4 18
pankso@4 19 # Parse cmdline options.
pankso@4 20 for opt in $@
pankso@4 21 do
pankso@4 22 case "$opt" in
pankso@4 23 --login=*)
pankso@4 24 login=${opt#--login=} ;;
pankso@4 25 --id=*)
pankso@4 26 id=${opt#--id=} ;;
pankso@4 27 --pass=*)
pankso@4 28 pass=${opt#--pass=} ;;
pankso@4 29 --root=*)
pankso@4 30 root=${opt#--root=} ;;
pankso@13 31 --vdisk=*)
pankso@13 32 vdisk=${opt#--vdisk=} ;;
pankso@13 33 --size=*)
pankso@13 34 size=${opt#--size=} ;;
pankso@4 35 *)
pankso@4 36 continue ;;
pankso@4 37 esac
pankso@4 38 done
pankso@4 39
pankso@4 40 [ "$root" ] || root=${SSFS_CHROOT}
pankso@13 41 [ "$vdisk" ] || vdisk=${SSFS_VDISK}
pankso@13 42 [ "$size" ] || size=${SSFS_SIZE}
pankso@4 43
pankso@4 44 #
pankso@4 45 # Functions
pankso@4 46 #
pankso@4 47
pankso@4 48 # Built-in help usage.
pankso@4 49 help() {
pankso@4 50 cat << EOT
pankso@4 51
pankso@4 52 $(echo -e "\033[1m$(gettext "Usage:")\033[0m") $app [command] [--option=]
pankso@4 53
pankso@4 54 $(echo -e "\033[1m$(gettext "Commands:")\033[0m")
pankso@4 55 help $(gettext "Display this short usage.")
paul@12 56 users $(gettext "List user accounts and stats.")
pankso@4 57 adduser $(gettext "Add a user to the system with \$HOME in chroot.")
pankso@4 58 deluser $(gettext "Delete a user and remove \$HOME files.")
pankso@4 59 chroot $(gettext "Chroot to Ssfs storage root.")
pankso@13 60 gen-vdisk $(gettext "Create a vdisk with chroot for files storage.")
pankso@13 61 clean-vdisk $(gettext "Clean the vdisk but skip home and root.")
paul@33 62 check-vdisk $(gettext "Check the vdisk filesystem with e2fsck.")
paul@33 63 mount-vdisk $(gettext "Mount a ssfs virtual disk.")
pankso@13 64 umount-vdisk $(gettext "Unmount the vdisk and free loop device.")
pankso@4 65
pankso@4 66 $(echo -e "\033[1m$(gettext "Options:")\033[0m")
paul@33 67 --login= $(gettext "Login name to add or del an user.")
pankso@4 68 --id= $(gettext "User id for adduser command.")
pankso@4 69 --pass= $(gettext "User password for adduser.")
pankso@13 70 --root= $(gettext "The path to the Ssfs vdisk chroot.")
pankso@13 71 --vdisk= $(gettext "Set the Ssfs vdisk path and name.")
pankso@13 72 --size= $(gettext "Set the ext3 vdisk size in Gb.")
pankso@4 73
pankso@4 74 EOT
pankso@4 75 }
pankso@4 76
pankso@4 77 status() {
pankso@4 78 [ $? = 0 ] && echo " OK"
pankso@4 79 [ $? = 1 ] && echo -e " ERROR\n" && exit 1
pankso@4 80 }
pankso@4 81
pankso@13 82 separator() {
pankso@13 83 echo "================================================================================"
pankso@13 84 }
pankso@13 85
pankso@13 86 # We have custom config when adding user to handle quota and user info.
pankso@4 87 user_paths() {
pankso@4 88 config=$SSFS_USERS/$login.conf
pankso@4 89 home=$root/./home/$login
pankso@4 90 }
pankso@4 91
pankso@4 92 user_info() {
pankso@4 93 cat << EOT
pankso@4 94
pankso@4 95 $(gettext "User login :") $login
pankso@4 96 $(gettext "User quota :") $QUOTA
pankso@4 97 $(gettext "Home usage :") $usage
pankso@4 98
pankso@4 99 EOT
pankso@4 100 }
pankso@4 101
pankso@4 102 user_config() {
pankso@4 103 gettext "Creating Ssfs user configuration file..."
pankso@4 104 cat > $config << EOT
pankso@4 105 # Ssfs user configuration file.
pankso@4 106
pankso@4 107 LOGIN="$login"
pankso@4 108 QUOTA="$DEFAULT_QUOTA"
pankso@4 109 EOT
pankso@4 110 chmod 0600 $config && status
pankso@4 111 echo ""
pankso@4 112 }
pankso@4 113
pankso@36 114 vdisk_config() {
pankso@36 115 cat > $root/etc/vdisk.conf << EOT
pankso@36 116 # /etc/vdisk.conf: Ssfs virtual autogenated config file.
pankso@36 117
pankso@36 118 VDATE="$date"
pankso@36 119 VSIZE="$size"
pankso@36 120 FILES="$files"
pankso@36 121 EOT
pankso@36 122 }
pankso@36 123
pankso@13 124 # Handle Ssfs virtual disk.
pankso@13 125 umount_vdisk() {
pankso@13 126 if mount | fgrep -q $root; then
pankso@13 127 loop=$(mount | fgrep $root | awk '{print $1}')
pankso@13 128 gettext "Unmounting Ssfs vdisk:"; echo " $vdisk"
pankso@13 129 umount $root && sleep 1
pankso@13 130 gettext "Detaching loop device:"; echo " $loop"
pankso@13 131 losetup -d $loop
pankso@13 132 else
pankso@13 133 gettext "Ssfs vdisk is not mounted:"; echo " $vdisk"
pankso@13 134 fi
pankso@13 135 }
pankso@13 136
pankso@13 137 mount_vdisk() {
pankso@15 138 if ! mount | fgrep -q $root; then
pankso@15 139 [ -d "$root" ] || mkdir -p $root
pankso@15 140 gettext "Mounting virtual disk:"
pankso@15 141 mount -o loop -t ext3 $vdisk $root
pankso@15 142 else
pankso@15 143 gettext "Ssfs vdisk is already mounted:"
pankso@15 144 fi
pankso@15 145 echo " $vdisk $root"
pankso@13 146 }
pankso@13 147
pankso@4 148 #
pankso@4 149 # Commands
pankso@4 150 #
pankso@4 151
pankso@4 152 case "$1" in
pankso@4 153 users)
pankso@4 154 gettext -e "\nChecking:"; echo " /etc/passwd"
pankso@4 155 fgrep "Ssfs User" /etc/passwd | while read line
pankso@4 156 do
pankso@4 157 login=$(echo $line | cut -d ":" -f 1)
pankso@4 158 home="$root/home/$login"
pankso@4 159 usage=$(du -sm $home | awk '{print $1}')
pankso@4 160 config=$SSFS_USERS/$login.conf
pankso@4 161 . $config || gettext -e "WARNING: No config file\n"
pankso@4 162 user_info
pankso@4 163 done
pankso@4 164 users=$(ls $SSFS_USERS | wc -l)
pankso@4 165 gettext "Users:"; echo -e " $users\n" ;;
pankso@4 166 adduser)
pankso@4 167 # Add a Ssfs user to the system with $HOME in chroot.
pankso@4 168 [ -z "$login" ] && gettext -e "Missing user login name.\n" && exit 0
pankso@4 169 [ -z "$id" ] && gettext -e "Missing user id.\n" && exit 0
pankso@4 170 [ -z "$pass" ] && gettext -e "Missing user password.\n" && exit 0
pankso@4 171 user_paths
pankso@29 172
pankso@29 173 # We need chroot command allowed for users to chroot them on SSH
paul@33 174 # login. Ssfs users have /bin/ssfs-sh as SHell.
pankso@29 175 grep -q ^chroot /etc/busybox.conf ||
pankso@29 176 echo 'chroot = ssx root.root' >> /etc/busybox.conf
pankso@4 177
pankso@4 178 gettext -e "\nChecking:"; echo " /etc/passwd"
pankso@4 179 if grep ^$login: /etc/passwd; then
paul@12 180 gettext -e "Exiting, user already exists:"
pankso@4 181 echo -e " $login\n" && exit 0
pankso@4 182 fi
pankso@29 183
pankso@4 184 gettext "Creating user: $login..."
pankso@4 185 echo -e "$pass\n$pass" | \
pankso@29 186 adduser -h "$home" -g "Ssfs User" -u $id \
pankso@29 187 -s /bin/ssfs-sh $login >/dev/null
pankso@4 188 status
pankso@29 189
pankso@29 190 # Add user to chroot /etc/passwd
pankso@29 191 gettext "Checking vdisk chroot:"; echo " $root/etc/passwd"
pankso@29 192 if ! grep -q ^$login: $root/etc/passwd; then
pankso@29 193 echo "$login:x:$id:$id:Ssfs User:/home/$login:/bin/sh" >> \
pankso@29 194 $root/etc/passwd
pankso@29 195 fi
pankso@4 196
paul@12 197 # We don't want any files from /etc/skel.
pankso@4 198 gettext "Cleaning home and creating: Sync/..."
pankso@15 199 rm -rf $home && mkdir -p $home/Sync $home/.ssh && status
pankso@4 200 gettext "Changing mode on user home: 0700..."
pankso@4 201 chown -R $login.$login $home
pankso@4 202 chmod 0700 $home && status
pankso@4 203
paul@12 204 # Create a custom config per user in SSFS_USERS.
pankso@4 205 [ ! -d "$SSFS_USERS" ] && mkdir -p $SSFS_USERS
pankso@4 206 user_config ;;
pankso@4 207 deluser)
pankso@4 208 [ -z "$login" ] && gettext -e "Missing user login name.\n" && exit 0
pankso@4 209 user_paths
pankso@4 210 gettext -e "\nDeleting user:"; echo -n " $login..."
pankso@29 211 sed -i /^$login:/d $root/etc/passwd
pankso@4 212 deluser $login || status && status
pankso@4 213 gettext "Removing all files in:"; echo -n " $home..."
pankso@4 214 rm -rf $home && status
pankso@4 215 gettext "Removing user config:"; echo -n " $login.conf..."
pankso@4 216 rm -rf $config && status
pankso@4 217 echo "" ;;
pankso@4 218 chroot)
pankso@4 219 gettext -e "\nChanging root to:"; echo -e " $root\n"
pankso@4 220 chroot $root
pankso@4 221 gettext -e "\nBack to the host system:"
pankso@4 222 echo -e " $(hostname)\n" ;;
pankso@36 223 note)
pankso@36 224 # Admin notes for users and displayed on the web interface.
pankso@36 225 note="$2"
pankso@36 226 date=$(date "+%Y-%m-%d %H:%M")
pankso@36 227 if [ "$note" ]; then
pankso@36 228 gettext "Adding note to:"; echo " $state/notes"
pankso@36 229 echo "$date : $note" >> $state/notes
pankso@36 230 fi ;;
pankso@13 231 gen-vdisk)
pankso@35 232 # Generate a virtual disk with a minimal chroot for Ssfs users home.
pankso@34 233 rootfs=$share/rootfs
pankso@4 234 if [ -d "$root/bin" ]; then
pankso@34 235 gettext "A chroot already exists in:"; echo " $root"
pankso@34 236 exit 0
pankso@34 237 fi
pankso@34 238 if [ ! -f "$rootfs/etc/busybox.conf" ]; then
pankso@34 239 gettext "Missing package ssfs-busybox"; echo
pankso@4 240 exit 0
pankso@4 241 fi
pankso@13 242 echo ""
pankso@34 243 gettext "Creating Sshs vdisk minimal chroot"; echo
pankso@13 244 separator
pankso@34 245 echo "Chroot path: $root"
pankso@34 246
pankso@13 247 # Create vdisk if missing.
pankso@13 248 if [ ! -f "$vdisk" ]; then
pankso@13 249 gettext "Creating virtual disk:"; echo " $vdisk ${size}Gb"
pankso@13 250 dd if=/dev/zero of=$vdisk bs=1G count=$size
pankso@23 251 chmod 0600 $vdisk && du -sh $vdisk
pankso@13 252 gettext "Creating ext3 filesystem..."
pankso@13 253 mkfs.ext3 -q -T ext3 -L "Ssfs" -F $vdisk
pankso@13 254 status
pankso@13 255 mount_vdisk
pankso@13 256 fi
pankso@13 257
paul@33 258 # Create a radically minimal chroot with all libs in /lib.
pankso@13 259 gettext "Creating base files..."
pankso@13 260 mkdir -p $root && cd $root
pankso@34 261 for d in etc lib home root
pankso@13 262 do
pankso@13 263 mkdir -p $d
pankso@13 264 done && status
pankso@34 265
pankso@34 266 # /etc files.
pankso@34 267 cp -f /etc/slitaz-release $root/etc
pankso@34 268 if [ ! -f "$root/etc/passwd" ]; then
pankso@34 269 echo "root:x:0:0:root:/root:/bin/sh" > $root/etc/passwd
pankso@34 270 echo "root::13525:0:99999:7:::" > $root/etc/shadow
pankso@34 271 echo "root:x:0:" > $root/etc/group
pankso@34 272 echo "root:*::" > $root/etc/gshadow
pankso@34 273 fi
pankso@34 274
pankso@34 275 # /dev nodes.
pankso@29 276 #mknod -m 666 $root/dev/null c 1 3
pankso@34 277
pankso@34 278 # Ssfs Busybox package install files in $cache and allow easy vdisk
pankso@34 279 # upgrade folowing SliTaz repo.
pankso@34 280 gettext "Installing Ssfs Busybox..."
pankso@34 281 cp -a $rootfs/* $root
pankso@4 282 status
pankso@13 283
pankso@34 284 gettext "Setting files permissions..."
pankso@34 285 chmod 0640 $root/etc/*shadow
pankso@35 286 chmod 0700 $root/root
pankso@34 287 chmod 4755 $root/bin/busybox
pankso@35 288 chmod 0600 $root/etc/busybox.conf
pankso@4 289 status
pankso@13 290
pankso@13 291 # Glib minimal libs, use host lib since package should be installed
pankso@45 292 # from same repo. ? libnss_compat*
pankso@13 293 gettext "Installing Glibc libraries..."
pankso@45 294 for l in ld-*.*so* libc-*.*so libc.so.* libnss_files*
pankso@13 295 do
pankso@13 296 cp -a /lib/$l* $root/lib
pankso@34 297 done && status
pankso@31 298
pankso@36 299 # Ssfs chroot SHell and declare vdisk config.
pankso@31 300 gettext "Installing Ssfs SHell..."
pankso@31 301 install -m 0755 /bin/ssfs-sh $root/bin
pankso@36 302 touch $root/etc/vdisk.conf
pankso@31 303 status
pankso@34 304
pankso@34 305 # List of all system files.
pankso@35 306 gettext "Creating the list of files... "
pankso@35 307 cd $root && rm -f $state/vdisk.files
pankso@34 308 for d in bin etc lib sbin
pankso@34 309 do
pankso@35 310 find ./$d | sed s'/^.//' >> $state/vdisk.files
pankso@34 311 done
pankso@36 312 files=$(cat $state/vdisk.files | wc -l)
pankso@36 313 echo "$files"
pankso@36 314
pankso@36 315 # Create chroot /etc/vdisk.conf
pankso@36 316 size=$(du -sh $vdisk | awk '{print $1}')
pankso@36 317 used=$(du -sh $root | awk '{print $1}')
pankso@36 318 date=$(date '+%Y-%m-%d %H:%M')
pankso@36 319 vdisk_config
pankso@35 320 separator
pankso@36 321 gettext "Vdisk used space:"; echo -e " $used - $date\n" ;;
pankso@13 322 mount-vdisk)
pankso@13 323 mount_vdisk ;;
pankso@13 324 umount-vdisk)
pankso@13 325 umount_vdisk ;;
pankso@15 326 check-vdisk)
pankso@15 327 # Check vdisk with e2fsck.
pankso@15 328 echo ""
pankso@15 329 gettext -e "Checking Ssfs virtual disk\n"
pankso@15 330 separator
pankso@15 331 gettext "Virtual disk : "; du -sh $vdisk
pankso@15 332 gettext "Filesystem usage : "; du -sh $root
pankso@15 333 gettext "Remounting vdisk read/only before e2fsck -p..."
pankso@15 334 mount -o remount,loop,ro $vdisk $root && status
pankso@15 335 e2fsck -p $vdisk
pankso@15 336 gettext "Remounting vdisk read/write..."
pankso@15 337 mount -o remount,loop,rw $vdisk $root && status
pankso@15 338 separator && echo "" ;;
pankso@13 339 clean-vdisk)
pankso@13 340 # clean up the vdisk storage chroot.
pankso@34 341 if [ ! -d "$root/bin" ] || [ ! -d "$root/lib" ]; then
pankso@4 342 gettext -e "No chroot found in:"; echo " $root"
pankso@4 343 exit 0
pankso@4 344 fi
pankso@13 345 gettext -e "\nCleaning virtual disk\n"
pankso@13 346 separator
pankso@34 347 echo "Chroot path: $root"
pankso@4 348 cd $root
pankso@4 349 for dir in *
pankso@4 350 do
pankso@4 351 size=$(du -sh $dir | awk '{print $1}')
pankso@4 352 case "$dir" in
pankso@34 353 etc|home|root|lost*)
pankso@4 354 gettext "Skipping:"; echo " $dir $size *" ;;
pankso@4 355 *)
pankso@4 356 gettext "Removing:"; echo " $dir $size"
pankso@4 357 rm -rf $dir ;;
pankso@4 358 esac
pankso@13 359 done && separator && echo "" ;;
pankso@4 360 *)
pankso@4 361 help ;;
pankso@4 362 esac
pankso@4 363 exit 0