| |
| |
| |
| |
| |
| |
| |
| |
|
|
| |
| |
| |
| import public, os |
| from btdockerModel import dk_public as dp |
|
|
|
|
| class dockerBase(object): |
|
|
| def __init__(self): |
| self._db_path = "/www/server/panel/data/db/docker.db" |
| self._backup_log = '/tmp/backup.log' |
| self._log_path = '/tmp/dockertmp.log' |
| self._rCmd_log = '/tmp/dockerRun.log' |
| self._url = "unix:///var/run/docker.sock" |
| self.compose_path = "{}/data/compose".format(public.get_panel_path()) |
| self.aes_key = "btdockerModel_QWERAS" |
| self.moinitor_lock = "/tmp/bt_docker_monitor.lock" |
|
|
| def get_ws_log(self, get): |
| """ |
| 获取日志，websocket |
| @param get: |
| @return: |
| """ |
| if not hasattr(get, "_ws"): |
| return True |
|
|
| import time |
| sum = 0 |
|
|
| with open(get._log_path, "r") as file: |
| position = file.tell() |
| get._ws.send("{}\r\n".format(get.wsLogTitle)) |
|
|
| while True: |
| current_position = file.tell() |
| line = file.readline() |
| if current_position > position: |
| file.seek(position) |
| new_content = file.read(current_position - position) |
| if "nohup" not in new_content: |
| for i in new_content.split('\n'): |
| if i == "": continue |
| get._ws.send(i.strip("\n") + "\r\n") |
|
|
| position = current_position |
|
|
| if "bt_successful" in line: |
| get._ws.send("bt_successful\r\n") |
| del get._ws |
| break |
| elif "bt_failed" in line: |
| get._ws.send("bt_failed\r\n") |
| del get._ws |
| break |
|
|
| if sum > 0: |
| sum = 0 |
| else: |
| sum += 1 |
|
|
| if sum >= 6000: |
| get._ws.send("\r\n超过10分钟未响应！\r\n") |
| break |
|
|
| time.sleep(0.1) |
|
|
| return True |
|
|
| |
| def run_cmd(self, get): |
| """ |
| 命令行创建运行容器(docker run / docker pull)，需要做危险命令校验，存在危险命令则不执行 |
| @param get: |
| @return: |
| """ |
| import re |
| if not hasattr(get, 'cmd'): |
| return public.returnMsg(False, '请传入cmd参数错误') |
|
|
| if "docker run" not in get.cmd and "docker pull" not in get.cmd: |
| return public.returnMsg(False, '只能执行docker run或docker pull命令') |
|
|
| danger_cmd = ['rm', 'rmi', 'kill', 'stop', 'pause', 'unpause', 'restart', 'update', 'exec', 'init', |
| 'shutdown', 'reboot', 'chmod', 'chown', 'dd', 'fdisk', 'killall', 'mkfs', 'mkswap', 'mount', |
| 'swapoff', 'swapon', 'umount', 'userdel', 'usermod', 'passwd', 'groupadd', 'groupdel', |
| 'groupmod', 'chpasswd', 'chage', 'usermod', 'useradd', 'userdel', 'pkill'] |
|
|
| danger_symbol = ['&', '&&', '||', '|', ';'] |
|
|
| for d in danger_cmd: |
| if get.cmd.startswith(d) or re.search(r'\s{}\s'.format(d), get.cmd): |
| return public.returnMsg(False, '存在危险命令: [{}]，不允许执行!'.format(d)) |
|
|
| for d in danger_symbol: |
| if d in get.cmd: |
| return public.returnMsg(False, '存在危险符号: [{}]，不允许执行!'.format(d)) |
|
|
| os.system("echo -n > {}".format(self._rCmd_log)) |
| os.system("nohup {} >> {} 2>&1 && echo 'bt_successful' >> {} || echo 'bt_failed' >> {} &".format( |
| get.cmd, |
| self._rCmd_log, |
| self._rCmd_log, |
| self._rCmd_log, |
| )) |
|
|
| return public.returnMsg(True, "命令已执行完毕！") |
