ssfs annotate ssfs-server @ rev 64
ssfs-server: add command up-vdisk
author | Christophe Lincoln <pankso@slitaz.org> |
---|---|
date | Sun Jun 12 23:23:57 2011 +0200 (2011-06-12) |
parents | 291d7b317507 |
children | 694076541061 |
rev | line source |
---|---|
pankso@4 | 1 #!/bin/sh |
pankso@4 | 2 # |
pankso@4 | 3 # SliTaz Secure File Storage server side tool. |
pankso@4 | 4 # |
pankso@4 | 5 # Copyright (C) SliTaz GNU/Linux - BSD License |
pankso@4 | 6 # Author: Christophe Lincoln <pankso@slitaz.org> |
pankso@4 | 7 # |
pankso@4 | 8 |
pankso@4 | 9 app=$(basename $0) |
pankso@4 | 10 [ -f "/etc/ssfs/$app.conf" ] && . /etc/ssfs/$app.conf |
pankso@4 | 11 [ -f "./data/$app.conf" ] && . ./data/$app.conf |
pankso@34 | 12 state=/var/lib/ssfs |
pankso@34 | 13 share=/usr/share/ssfs |
pankso@4 | 14 |
pankso@4 | 15 # Be sure we're root. |
pankso@4 | 16 [ $(id -u) != 0 ] && gettext "You must be root to run:" && \ |
pankso@4 | 17 echo " $app" && exit 0 |
pankso@4 | 18 |
pankso@4 | 19 # Parse cmdline options. |
pankso@4 | 20 for opt in $@ |
pankso@4 | 21 do |
pankso@4 | 22 case "$opt" in |
pankso@4 | 23 --login=*) |
pankso@4 | 24 login=${opt#--login=} ;; |
pankso@4 | 25 --id=*) |
pankso@4 | 26 id=${opt#--id=} ;; |
pankso@4 | 27 --pass=*) |
pankso@4 | 28 pass=${opt#--pass=} ;; |
pankso@4 | 29 --root=*) |
pankso@4 | 30 root=${opt#--root=} ;; |
pankso@13 | 31 --vdisk=*) |
pankso@13 | 32 vdisk=${opt#--vdisk=} ;; |
pankso@13 | 33 --size=*) |
pankso@13 | 34 size=${opt#--size=} ;; |
pankso@4 | 35 *) |
pankso@4 | 36 continue ;; |
pankso@4 | 37 esac |
pankso@4 | 38 done |
pankso@4 | 39 |
pankso@4 | 40 [ "$root" ] || root=${SSFS_CHROOT} |
pankso@13 | 41 [ "$vdisk" ] || vdisk=${SSFS_VDISK} |
pankso@13 | 42 [ "$size" ] || size=${SSFS_SIZE} |
pankso@4 | 43 |
pankso@4 | 44 # |
pankso@4 | 45 # Functions |
pankso@4 | 46 # |
pankso@4 | 47 |
pankso@4 | 48 # Built-in help usage. |
pankso@4 | 49 help() { |
pankso@4 | 50 cat << EOT |
pankso@4 | 51 |
pankso@4 | 52 $(echo -e "\033[1m$(gettext "Usage:")\033[0m") $app [command] [--option=] |
pankso@4 | 53 |
pankso@4 | 54 $(echo -e "\033[1m$(gettext "Commands:")\033[0m") |
pankso@60 | 55 help $(gettext "Display this short help usage.") |
paul@12 | 56 users $(gettext "List user accounts and stats.") |
pankso@4 | 57 adduser $(gettext "Add a user to the system with \$HOME in chroot.") |
pankso@4 | 58 deluser $(gettext "Delete a user and remove \$HOME files.") |
pankso@4 | 59 chroot $(gettext "Chroot to Ssfs storage root.") |
pankso@13 | 60 gen-vdisk $(gettext "Create a vdisk with chroot for files storage.") |
pankso@13 | 61 clean-vdisk $(gettext "Clean the vdisk but skip home and root.") |
paul@33 | 62 check-vdisk $(gettext "Check the vdisk filesystem with e2fsck.") |
pankso@64 | 63 up-vdisk $(gettext "Update a vdisk filesystem.") |
paul@33 | 64 mount-vdisk $(gettext "Mount a ssfs virtual disk.") |
pankso@13 | 65 umount-vdisk $(gettext "Unmount the vdisk and free loop device.") |
pankso@55 | 66 note $(gettext "Write a public note for users.") |
pankso@4 | 67 |
pankso@4 | 68 $(echo -e "\033[1m$(gettext "Options:")\033[0m") |
paul@33 | 69 --login= $(gettext "Login name to add or del an user.") |
pankso@4 | 70 --id= $(gettext "User id for adduser command.") |
pankso@4 | 71 --pass= $(gettext "User password for adduser.") |
pankso@13 | 72 --root= $(gettext "The path to the Ssfs vdisk chroot.") |
pankso@13 | 73 --vdisk= $(gettext "Set the Ssfs vdisk path and name.") |
pankso@13 | 74 --size= $(gettext "Set the ext3 vdisk size in Gb.") |
pankso@4 | 75 |
pankso@4 | 76 EOT |
pankso@4 | 77 } |
pankso@4 | 78 |
pankso@4 | 79 status() { |
pankso@4 | 80 [ $? = 0 ] && echo " OK" |
pankso@4 | 81 [ $? = 1 ] && echo -e " ERROR\n" && exit 1 |
pankso@4 | 82 } |
pankso@4 | 83 |
pankso@13 | 84 separator() { |
pankso@13 | 85 echo "================================================================================" |
pankso@13 | 86 } |
pankso@13 | 87 |
pankso@13 | 88 # We have custom config when adding user to handle quota and user info. |
pankso@4 | 89 user_paths() { |
pankso@4 | 90 config=$SSFS_USERS/$login.conf |
pankso@4 | 91 home=$root/./home/$login |
pankso@4 | 92 } |
pankso@4 | 93 |
pankso@4 | 94 user_info() { |
pankso@4 | 95 cat << EOT |
pankso@4 | 96 |
pankso@4 | 97 $(gettext "User login :") $login |
pankso@4 | 98 $(gettext "User quota :") $QUOTA |
pankso@4 | 99 $(gettext "Home usage :") $usage |
pankso@4 | 100 |
pankso@4 | 101 EOT |
pankso@4 | 102 } |
pankso@4 | 103 |
pankso@4 | 104 user_config() { |
pankso@4 | 105 gettext "Creating Ssfs user configuration file..." |
pankso@4 | 106 cat > $config << EOT |
pankso@4 | 107 # Ssfs user configuration file. |
pankso@4 | 108 |
pankso@4 | 109 LOGIN="$login" |
pankso@4 | 110 QUOTA="$DEFAULT_QUOTA" |
pankso@4 | 111 EOT |
pankso@4 | 112 chmod 0600 $config && status |
pankso@4 | 113 echo "" |
pankso@4 | 114 } |
pankso@4 | 115 |
pankso@36 | 116 vdisk_config() { |
pankso@36 | 117 cat > $root/etc/vdisk.conf << EOT |
paul@59 | 118 # /etc/vdisk.conf: Ssfs virtual auto-generated config file. |
pankso@36 | 119 |
pankso@36 | 120 VDATE="$date" |
pankso@36 | 121 VSIZE="$size" |
pankso@36 | 122 FILES="$files" |
pankso@36 | 123 EOT |
pankso@36 | 124 } |
pankso@36 | 125 |
pankso@13 | 126 # Handle Ssfs virtual disk. |
pankso@13 | 127 umount_vdisk() { |
pankso@13 | 128 if mount | fgrep -q $root; then |
pankso@13 | 129 loop=$(mount | fgrep $root | awk '{print $1}') |
pankso@13 | 130 gettext "Unmounting Ssfs vdisk:"; echo " $vdisk" |
pankso@13 | 131 umount $root && sleep 1 |
pankso@13 | 132 gettext "Detaching loop device:"; echo " $loop" |
pankso@13 | 133 losetup -d $loop |
pankso@13 | 134 else |
pankso@13 | 135 gettext "Ssfs vdisk is not mounted:"; echo " $vdisk" |
pankso@13 | 136 fi |
pankso@13 | 137 } |
pankso@13 | 138 |
pankso@13 | 139 mount_vdisk() { |
pankso@15 | 140 if ! mount | fgrep -q $root; then |
pankso@15 | 141 [ -d "$root" ] || mkdir -p $root |
pankso@15 | 142 gettext "Mounting virtual disk:" |
pankso@15 | 143 mount -o loop -t ext3 $vdisk $root |
pankso@15 | 144 else |
pankso@15 | 145 gettext "Ssfs vdisk is already mounted:" |
pankso@15 | 146 fi |
pankso@15 | 147 echo " $vdisk $root" |
pankso@13 | 148 } |
pankso@13 | 149 |
pankso@4 | 150 # |
pankso@4 | 151 # Commands |
pankso@4 | 152 # |
pankso@4 | 153 |
pankso@4 | 154 case "$1" in |
pankso@4 | 155 users) |
pankso@4 | 156 gettext -e "\nChecking:"; echo " /etc/passwd" |
pankso@4 | 157 fgrep "Ssfs User" /etc/passwd | while read line |
pankso@4 | 158 do |
pankso@4 | 159 login=$(echo $line | cut -d ":" -f 1) |
pankso@4 | 160 home="$root/home/$login" |
pankso@4 | 161 usage=$(du -sm $home | awk '{print $1}') |
pankso@4 | 162 config=$SSFS_USERS/$login.conf |
pankso@4 | 163 . $config || gettext -e "WARNING: No config file\n" |
pankso@4 | 164 user_info |
pankso@4 | 165 done |
pankso@4 | 166 users=$(ls $SSFS_USERS | wc -l) |
pankso@4 | 167 gettext "Users:"; echo -e " $users\n" ;; |
pankso@4 | 168 adduser) |
pankso@4 | 169 # Add a Ssfs user to the system with $HOME in chroot. |
pankso@4 | 170 [ -z "$login" ] && gettext -e "Missing user login name.\n" && exit 0 |
pankso@4 | 171 [ -z "$id" ] && gettext -e "Missing user id.\n" && exit 0 |
pankso@4 | 172 [ -z "$pass" ] && gettext -e "Missing user password.\n" && exit 0 |
pankso@4 | 173 user_paths |
pankso@29 | 174 |
pankso@29 | 175 # We need chroot command allowed for users to chroot them on SSH |
paul@33 | 176 # login. Ssfs users have /bin/ssfs-sh as SHell. |
pankso@29 | 177 grep -q ^chroot /etc/busybox.conf || |
pankso@29 | 178 echo 'chroot = ssx root.root' >> /etc/busybox.conf |
pankso@4 | 179 |
pankso@4 | 180 gettext -e "\nChecking:"; echo " /etc/passwd" |
pankso@4 | 181 if grep ^$login: /etc/passwd; then |
paul@12 | 182 gettext -e "Exiting, user already exists:" |
pankso@4 | 183 echo -e " $login\n" && exit 0 |
pankso@4 | 184 fi |
pankso@29 | 185 |
pankso@4 | 186 gettext "Creating user: $login..." |
pankso@4 | 187 echo -e "$pass\n$pass" | \ |
pankso@29 | 188 adduser -h "$home" -g "Ssfs User" -u $id \ |
pankso@29 | 189 -s /bin/ssfs-sh $login >/dev/null |
pankso@4 | 190 status |
pankso@29 | 191 |
pankso@29 | 192 # Add user to chroot /etc/passwd |
pankso@29 | 193 gettext "Checking vdisk chroot:"; echo " $root/etc/passwd" |
pankso@29 | 194 if ! grep -q ^$login: $root/etc/passwd; then |
pankso@29 | 195 echo "$login:x:$id:$id:Ssfs User:/home/$login:/bin/sh" >> \ |
pankso@29 | 196 $root/etc/passwd |
pankso@63 | 197 echo "$login:x:$id:" >> $root/etc/group |
pankso@29 | 198 fi |
pankso@4 | 199 |
paul@12 | 200 # We don't want any files from /etc/skel. |
pankso@4 | 201 gettext "Cleaning home and creating: Sync/..." |
pankso@15 | 202 rm -rf $home && mkdir -p $home/Sync $home/.ssh && status |
pankso@4 | 203 gettext "Changing mode on user home: 0700..." |
pankso@4 | 204 chown -R $login.$login $home |
pankso@4 | 205 chmod 0700 $home && status |
pankso@4 | 206 |
paul@12 | 207 # Create a custom config per user in SSFS_USERS. |
pankso@4 | 208 [ ! -d "$SSFS_USERS" ] && mkdir -p $SSFS_USERS |
pankso@4 | 209 user_config ;; |
pankso@4 | 210 deluser) |
pankso@4 | 211 [ -z "$login" ] && gettext -e "Missing user login name.\n" && exit 0 |
pankso@4 | 212 user_paths |
pankso@4 | 213 gettext -e "\nDeleting user:"; echo -n " $login..." |
pankso@29 | 214 sed -i /^$login:/d $root/etc/passwd |
pankso@63 | 215 sed -i /^$login:/d $root/etc/group |
pankso@4 | 216 deluser $login || status && status |
pankso@4 | 217 gettext "Removing all files in:"; echo -n " $home..." |
pankso@4 | 218 rm -rf $home && status |
pankso@4 | 219 gettext "Removing user config:"; echo -n " $login.conf..." |
pankso@4 | 220 rm -rf $config && status |
pankso@4 | 221 echo "" ;; |
pankso@4 | 222 chroot) |
pankso@4 | 223 gettext -e "\nChanging root to:"; echo -e " $root\n" |
pankso@4 | 224 chroot $root |
pankso@4 | 225 gettext -e "\nBack to the host system:" |
pankso@4 | 226 echo -e " $(hostname)\n" ;; |
pankso@36 | 227 note) |
pankso@36 | 228 # Admin notes for users and displayed on the web interface. |
pankso@36 | 229 note="$2" |
pankso@36 | 230 date=$(date "+%Y-%m-%d %H:%M") |
pankso@36 | 231 if [ "$note" ]; then |
pankso@36 | 232 gettext "Adding note to:"; echo " $state/notes" |
pankso@36 | 233 echo "$date : $note" >> $state/notes |
pankso@36 | 234 fi ;; |
pankso@13 | 235 gen-vdisk) |
pankso@35 | 236 # Generate a virtual disk with a minimal chroot for Ssfs users home. |
pankso@34 | 237 rootfs=$share/rootfs |
pankso@4 | 238 if [ -d "$root/bin" ]; then |
pankso@34 | 239 gettext "A chroot already exists in:"; echo " $root" |
pankso@34 | 240 exit 0 |
pankso@34 | 241 fi |
pankso@34 | 242 if [ ! -f "$rootfs/etc/busybox.conf" ]; then |
pankso@34 | 243 gettext "Missing package ssfs-busybox"; echo |
pankso@4 | 244 exit 0 |
pankso@4 | 245 fi |
pankso@13 | 246 echo "" |
pankso@34 | 247 gettext "Creating Sshs vdisk minimal chroot"; echo |
pankso@13 | 248 separator |
pankso@34 | 249 echo "Chroot path: $root" |
pankso@34 | 250 |
pankso@13 | 251 # Create vdisk if missing. |
pankso@13 | 252 if [ ! -f "$vdisk" ]; then |
pankso@13 | 253 gettext "Creating virtual disk:"; echo " $vdisk ${size}Gb" |
pankso@13 | 254 dd if=/dev/zero of=$vdisk bs=1G count=$size |
pankso@23 | 255 chmod 0600 $vdisk && du -sh $vdisk |
pankso@13 | 256 gettext "Creating ext3 filesystem..." |
pankso@13 | 257 mkfs.ext3 -q -T ext3 -L "Ssfs" -F $vdisk |
pankso@13 | 258 status |
pankso@13 | 259 mount_vdisk |
pankso@13 | 260 fi |
pankso@13 | 261 |
paul@33 | 262 # Create a radically minimal chroot with all libs in /lib. |
pankso@13 | 263 gettext "Creating base files..." |
pankso@13 | 264 mkdir -p $root && cd $root |
pankso@34 | 265 for d in etc lib home root |
pankso@13 | 266 do |
pankso@13 | 267 mkdir -p $d |
pankso@13 | 268 done && status |
pankso@34 | 269 |
pankso@34 | 270 # /etc files. |
pankso@34 | 271 cp -f /etc/slitaz-release $root/etc |
pankso@34 | 272 if [ ! -f "$root/etc/passwd" ]; then |
pankso@34 | 273 echo "root:x:0:0:root:/root:/bin/sh" > $root/etc/passwd |
pankso@63 | 274 #echo "root::13525:0:99999:7:::" > $root/etc/shadow |
pankso@34 | 275 echo "root:x:0:" > $root/etc/group |
pankso@63 | 276 #echo "root:*::" > $root/etc/gshadow |
pankso@34 | 277 fi |
pankso@34 | 278 |
pankso@34 | 279 # /dev nodes. |
pankso@29 | 280 #mknod -m 666 $root/dev/null c 1 3 |
pankso@34 | 281 |
pankso@34 | 282 # Ssfs Busybox package install files in $cache and allow easy vdisk |
paul@59 | 283 # upgrade following SliTaz repo. |
pankso@34 | 284 gettext "Installing Ssfs Busybox..." |
pankso@34 | 285 cp -a $rootfs/* $root |
pankso@4 | 286 status |
pankso@13 | 287 |
pankso@34 | 288 gettext "Setting files permissions..." |
pankso@35 | 289 chmod 0700 $root/root |
pankso@34 | 290 chmod 4755 $root/bin/busybox |
pankso@35 | 291 chmod 0600 $root/etc/busybox.conf |
pankso@4 | 292 status |
pankso@13 | 293 |
pankso@13 | 294 # Glib minimal libs, use host lib since package should be installed |
pankso@45 | 295 # from same repo. ? libnss_compat* |
pankso@13 | 296 gettext "Installing Glibc libraries..." |
pankso@45 | 297 for l in ld-*.*so* libc-*.*so libc.so.* libnss_files* |
pankso@13 | 298 do |
pankso@13 | 299 cp -a /lib/$l* $root/lib |
pankso@34 | 300 done && status |
pankso@31 | 301 |
pankso@36 | 302 # Ssfs chroot SHell and declare vdisk config. |
pankso@61 | 303 gettext "Installing Ssfs SHell and utility..." |
pankso@31 | 304 install -m 0755 /bin/ssfs-sh $root/bin |
pankso@61 | 305 install -m 0755 $share/ssfs-env $root/bin |
pankso@36 | 306 touch $root/etc/vdisk.conf |
pankso@31 | 307 status |
pankso@34 | 308 |
pankso@34 | 309 # List of all system files. |
pankso@35 | 310 gettext "Creating the list of files... " |
pankso@35 | 311 cd $root && rm -f $state/vdisk.files |
pankso@62 | 312 for d in bin etc lib |
pankso@34 | 313 do |
pankso@35 | 314 find ./$d | sed s'/^.//' >> $state/vdisk.files |
pankso@34 | 315 done |
pankso@36 | 316 files=$(cat $state/vdisk.files | wc -l) |
pankso@36 | 317 echo "$files" |
pankso@36 | 318 |
pankso@36 | 319 # Create chroot /etc/vdisk.conf |
pankso@36 | 320 size=$(du -sh $vdisk | awk '{print $1}') |
pankso@36 | 321 used=$(du -sh $root | awk '{print $1}') |
pankso@36 | 322 date=$(date '+%Y-%m-%d %H:%M') |
pankso@36 | 323 vdisk_config |
pankso@35 | 324 separator |
pankso@36 | 325 gettext "Vdisk used space:"; echo -e " $used - $date\n" ;; |
pankso@13 | 326 mount-vdisk) |
pankso@13 | 327 mount_vdisk ;; |
pankso@13 | 328 umount-vdisk) |
pankso@13 | 329 umount_vdisk ;; |
pankso@15 | 330 check-vdisk) |
pankso@15 | 331 # Check vdisk with e2fsck. |
pankso@15 | 332 echo "" |
pankso@15 | 333 gettext -e "Checking Ssfs virtual disk\n" |
pankso@15 | 334 separator |
pankso@15 | 335 gettext "Virtual disk : "; du -sh $vdisk |
pankso@15 | 336 gettext "Filesystem usage : "; du -sh $root |
pankso@15 | 337 gettext "Remounting vdisk read/only before e2fsck -p..." |
pankso@15 | 338 mount -o remount,loop,ro $vdisk $root && status |
pankso@15 | 339 e2fsck -p $vdisk |
pankso@15 | 340 gettext "Remounting vdisk read/write..." |
pankso@15 | 341 mount -o remount,loop,rw $vdisk $root && status |
pankso@15 | 342 separator && echo "" ;; |
pankso@64 | 343 up-vdisk) |
pankso@64 | 344 $0 clean-vdisk |
pankso@64 | 345 $0 gen-vdisk ;; |
pankso@13 | 346 clean-vdisk) |
pankso@13 | 347 # clean up the vdisk storage chroot. |
pankso@34 | 348 if [ ! -d "$root/bin" ] || [ ! -d "$root/lib" ]; then |
pankso@4 | 349 gettext -e "No chroot found in:"; echo " $root" |
pankso@4 | 350 exit 0 |
pankso@4 | 351 fi |
pankso@13 | 352 gettext -e "\nCleaning virtual disk\n" |
pankso@13 | 353 separator |
pankso@34 | 354 echo "Chroot path: $root" |
pankso@4 | 355 cd $root |
pankso@4 | 356 for dir in * |
pankso@4 | 357 do |
pankso@4 | 358 size=$(du -sh $dir | awk '{print $1}') |
pankso@4 | 359 case "$dir" in |
pankso@34 | 360 etc|home|root|lost*) |
pankso@4 | 361 gettext "Skipping:"; echo " $dir $size *" ;; |
pankso@4 | 362 *) |
pankso@4 | 363 gettext "Removing:"; echo " $dir $size" |
pankso@4 | 364 rm -rf $dir ;; |
pankso@4 | 365 esac |
pankso@13 | 366 done && separator && echo "" ;; |
pankso@4 | 367 *) |
pankso@4 | 368 help ;; |
pankso@4 | 369 esac |
pankso@4 | 370 exit 0 |