mailcow/data/Dockerfiles/dockerapi/server.py

161 lines
6.9 KiB
Python
Raw Normal View History

from flask import Flask
from flask_restful import Resource, Api
from flask import jsonify
2017-11-04 03:26:09 +08:00
from flask import request
from threading import Thread
import docker
import signal
import time
2017-12-09 20:15:24 +08:00
import os
import re
import sys
docker_client = docker.DockerClient(base_url='unix://var/run/docker.sock', version='auto')
app = Flask(__name__)
api = Api(app)
class containers_get(Resource):
def get(self):
containers = {}
2017-11-04 03:26:09 +08:00
try:
for container in docker_client.containers.list(all=True):
2017-11-04 03:26:09 +08:00
containers.update({container.attrs['Id']: container.attrs})
return containers
except Exception as e:
2018-02-01 20:38:42 +08:00
return jsonify(type='danger', msg=str(e))
class container_get(Resource):
def get(self, container_id):
if container_id and container_id.isalnum():
2017-11-04 03:26:09 +08:00
try:
for container in docker_client.containers.list(all=True, filters={"id": container_id}):
2017-11-04 03:26:09 +08:00
return container.attrs
except Exception as e:
2018-02-01 20:38:42 +08:00
return jsonify(type='danger', msg=str(e))
else:
2017-11-04 03:26:09 +08:00
return jsonify(type='danger', msg='no or invalid id defined')
class container_post(Resource):
def post(self, container_id, post_action):
if container_id and container_id.isalnum() and post_action:
if post_action == 'stop':
try:
for container in docker_client.containers.list(all=True, filters={"id": container_id}):
container.stop()
2017-11-04 03:26:09 +08:00
return jsonify(type='success', msg='command completed successfully')
except Exception as e:
2018-02-01 20:38:42 +08:00
return jsonify(type='danger', msg=str(e))
2017-11-04 03:26:09 +08:00
elif post_action == 'start':
try:
for container in docker_client.containers.list(all=True, filters={"id": container_id}):
container.start()
2017-11-04 03:26:09 +08:00
return jsonify(type='success', msg='command completed successfully')
except Exception as e:
2018-02-01 20:38:42 +08:00
return jsonify(type='danger', msg=str(e))
2017-11-04 03:26:09 +08:00
elif post_action == 'restart':
try:
for container in docker_client.containers.list(all=True, filters={"id": container_id}):
container.restart()
2017-11-04 03:26:09 +08:00
return jsonify(type='success', msg='command completed successfully')
except Exception as e:
2018-02-01 20:38:42 +08:00
return jsonify(type='danger', msg=str(e))
2017-11-04 03:26:09 +08:00
elif post_action == 'exec':
if not request.json or not 'cmd' in request.json:
return jsonify(type='danger', msg='cmd is missing')
if request.json['cmd'] == 'df' and request.json['dir']:
2017-11-04 03:26:09 +08:00
try:
for container in docker_client.containers.list(filters={"id": container_id}):
# Should be changed to be able to validate a path
directory = re.sub('[^0-9a-zA-Z/]+', '', request.json['dir'])
df_return = container.exec_run(["/bin/bash", "-c", "/bin/df -H " + directory + " | /usr/bin/tail -n1 | /usr/bin/tr -s [:blank:] | /usr/bin/tr ' ' ','"], user='nobody')
if df_return.exit_code == 0:
return df_return.output.rstrip()
else:
return "0,0,0,0,0,0"
except Exception as e:
return jsonify(type='danger', msg=str(e))
elif request.json['cmd'] == 'sieve_list' and request.json['username']:
try:
for container in docker_client.containers.list(filters={"id": container_id}):
sieve_return = container.exec_run(["/bin/bash", "-c", "/usr/local/bin/doveadm sieve list -u '" + request.json['username'].replace("'", "'\\''") + "'"], user='vmail')
return sieve_return.output
2017-11-04 03:26:09 +08:00
except Exception as e:
2018-02-01 20:38:42 +08:00
return jsonify(type='danger', msg=str(e))
2017-11-04 03:26:09 +08:00
elif request.json['cmd'] == 'sieve_print' and request.json['script_name'] and request.json['username']:
try:
for container in docker_client.containers.list(filters={"id": container_id}):
sieve_return = container.exec_run(["/bin/bash", "-c", "/usr/local/bin/doveadm sieve get -u '" + request.json['username'].replace("'", "'\\''") + "' '" + request.json['script_name'].replace("'", "'\\''") + "'"], user='vmail')
return sieve_return.output
2017-11-04 03:26:09 +08:00
except Exception as e:
2018-02-01 20:38:42 +08:00
return jsonify(type='danger', msg=str(e))
2017-12-09 20:15:24 +08:00
elif request.json['cmd'] == 'worker_password' and request.json['raw']:
try:
for container in docker_client.containers.list(filters={"id": container_id}):
hash = container.exec_run(["/bin/bash", "-c", "/usr/bin/rspamadm pw -e -p '" + request.json['raw'].replace("'", "'\\''") + "' 2> /dev/null"], user='_rspamd')
if hash.exit_code == 0:
hash_stdout = str(hash.output)
for line in hash_stdout.split("\n"):
if '$2$' in line:
hash = line.strip()
f = open("/access.inc", "w")
f.write('enable_password = "' + re.sub('[^0-9a-zA-Z\$]+', '', hash.rstrip()) + '";\n')
f.close()
container.restart()
return jsonify(type='success', msg='command completed successfully')
else:
return jsonify(type='danger', msg='command did not complete, exit code was ' + int(hash.exit_code))
2017-12-09 20:15:24 +08:00
except Exception as e:
2018-02-01 20:38:42 +08:00
return jsonify(type='danger', msg=str(e))
elif request.json['cmd'] == 'mailman_password' and request.json['email'] and request.json['passwd']:
try:
for container in docker_client.containers.list(filters={"id": container_id}):
add_su = container.exec_run(["/bin/bash", "-c", "/opt/mm_web/add_su.py '" + request.json['passwd'].replace("'", "'\\''") + "' '" + request.json['email'].replace("'", "'\\''") + "'"], user='mailman')
if add_su.exit_code == 0:
return jsonify(type='success', msg='command completed successfully')
else:
return jsonify(type='danger', msg='command did not complete, exit code was ' + int(add_su.exit_code))
except Exception as e:
return jsonify(type='danger', msg=str(e))
2017-12-09 20:15:24 +08:00
else:
2017-11-04 03:26:09 +08:00
return jsonify(type='danger', msg='Unknown command')
else:
2017-11-04 03:26:09 +08:00
return jsonify(type='danger', msg='invalid action')
else:
2017-11-04 03:26:09 +08:00
return jsonify(type='danger', msg='invalid container id or missing action')
class GracefulKiller:
kill_now = False
def __init__(self):
signal.signal(signal.SIGINT, self.exit_gracefully)
signal.signal(signal.SIGTERM, self.exit_gracefully)
def exit_gracefully(self,signum, frame):
self.kill_now = True
def startFlaskAPI():
app.run(debug=False, host='0.0.0.0', port=8080, threaded=True)
api.add_resource(containers_get, '/containers/json')
api.add_resource(container_get, '/containers/<string:container_id>/json')
api.add_resource(container_post, '/containers/<string:container_id>/<string:post_action>')
if __name__ == '__main__':
api_thread = Thread(target=startFlaskAPI)
api_thread.daemon = True
api_thread.start()
killer = GracefulKiller()
while True:
time.sleep(1)
if killer.kill_now:
break
print "Stopping dockerapi-mailcow"