diff --git a/docs/README.md b/docs/README.md index 792f0ac6d..9aab11085 100644 --- a/docs/README.md +++ b/docs/README.md @@ -104,4 +104,3 @@ - \ No newline at end of file diff --git a/install/install.py b/install/install.py new file mode 100644 index 000000000..952efb618 --- /dev/null +++ b/install/install.py @@ -0,0 +1,227 @@ +#!/usr/bin/python +# coding: utf-8 + +import sys +import os +import MySQLdb +import smtplib +import ConfigParser +import django +from django.core.management import execute_from_command_line +import socket +from smtplib import SMTP, SMTPAuthenticationError, SMTPConnectError +import fcntl +import struct + +jms_dir = os.path.dirname(os.path.abspath(os.path.dirname(__file__))) +sys.path.append(jms_dir) + +os.environ['DJANGO_SETTINGS_MODULE'] = 'jumpserver.settings' +if django.get_version() != '1.6': + setup = django.setup() + +from jumpserver.api import chown, bash, PyCrypt, ServerError, get_object, mkdir +from juser.user_api import db_add_user, server_add_user +from connect import color_print + + +def get_ip_addr(ifname='eth0'): + try: + s = socket.socket(socket.AF_INET, socket.SOCK_DGRAM) + return socket.inet_ntoa(fcntl.ioctl( + s.fileno(), + 0x8915, + struct.pack('256s', ifname[:15]) + )[20:24]) + except: + ips = os.popen("LANG=C ifconfig | grep \"inet addr\" | grep -v \"127.0.0.1\" | awk -F \":\" '{print $2}' | awk '{print $1}'").readlines() + if len(ips) > 0: + return ips[0] + return '' + + +class Setup(object): + """ + 安装jumpserver向导 + """ + def __init__(self): + self.db_host = '127.0.0.1' + self.db_port = 3306 + self.db_user = 'jumpserver' + self.db_pass = 'mysql234' + self.db = 'jumpserver' + self.mail_host = 'smtp.qq.com' + self.mail_port = 25 + self.mail_addr = 'hello@jumpserver.org' + self.mail_pass = '' + self.ip = '' + self.admin_user = 'admin' + self.admin_pass = 'Lov@jms' + + def write_conf(self, conf_file=os.path.join(jms_dir, 'jumpserver.conf')): + color_print('开始写入配置文件', 'green') + conf = ConfigParser.ConfigParser() + conf.read(conf_file) + conf.set('base', 'url', 'http://%s' % self.ip) + conf.set('db', 'host', self.db_host) + conf.set('db', 'port', self.db_port) + conf.set('db', 'user', self.db_user) + conf.set('db', 'pass', self.db_pass) + conf.set('db', 'database', self.db) + conf.set('websocket', 'web_socket_host', '%s: 3000' % self.ip) + conf.set('mail', 'email_host', self.mail_host) + conf.set('mail', 'email_port', self.mail_port) + conf.set('mail', 'email_host_user', self.mail_addr) + conf.set('mail', 'email_host_password', self.mail_pass) + + with open(conf_file, 'w') as f: + conf.write(f) + + @staticmethod + def _rpm_repo(): + color_print('开始安装epel源', 'green') + bash('yum -y install epel-release') + + @staticmethod + def _depend_rpm(): + color_print('开始安装依赖rpm包', 'green') + bash('yum -y install git python-pip mysql-devel gcc automake autoconf python-devel vim sshpass') + + @staticmethod + def _require_pip(): + color_print('开始安装依赖pip包', 'green') + os.chdir(jms_dir) + bash('pip install -r install/requirements.txt') + + def _setup_mysql(self): + color_print('开始安装设置mysql (请手动设置mysql安全)', 'green') + bash('yum -y install mysql-server') + bash('service mysqld start') + bash('mysql -e "create database %s default charset=utf8"' % self.db) + bash('mysql -e "grant all on %s.* to \'%s\'@\'%s\' identified by \'%s\'"' % (self.db, + self.db_user, + self.db_host, + self.db_pass)) + + @staticmethod + def _pull(): + color_print('开始更新jumpserver', 'green') + bash('git pull') + os.chdir(jms_dir) + mkdir('logs', mode=0777) + mkdir('keys', mode=0777) + + @staticmethod + def _set_env(): + color_print('开始关闭防火墙和selinux', 'green') + bash('service iptables stop && chkconfig iptables off && setenforce 0') + + def _test_db_conn(self): + try: + MySQLdb.connect(host=self.db_host, port=self.db_port, + user=self.db_user, passwd=self.db_pass, db=self.db) + color_print('连接数据库成功', 'green') + return True + except MySQLdb.OperationalError, e: + color_print('数据库连接失败 %s' % e, 'red') + return False + + def _test_mail(self): + try: + smtp = SMTP(self.mail_host, port=self.mail_port, timeout=2) + smtp.login(self.mail_addr, self.mail_pass) + smtp.sendmail(self.mail_addr, (self.mail_addr, ), + '''From:%s\r\nTo:%s\r\nSubject:Jumpserver Mail Test!\r\n\r\n Mail test passed!\r\n''' % + (self.mail_addr, self.mail_addr)) + smtp.quit() + return True + + except (SMTPAuthenticationError, socket.timeout), e: + color_print(e, 'red') + return False + + def _input_ip(self): + ip = raw_input('\n请输入您服务器的IP地址,用户浏览器可以访问 [%s]: ' % get_ip_addr()) + self.ip = ip if ip else get_ip_addr() + + def _input_mysql(self): + while True: + db_host = raw_input('请输入数据库服务器IP [127.0.0.1]: ') + db_port = raw_input('请输入数据库服务器端口 [3306]: ') + db_user = raw_input('请输入数据库服务器用户 [root]: ') + db_pass = raw_input('请输入数据库服务器密码: ') + db = raw_input('请输入使用的数据库 [jumpserver]: ') + + if db_host: self.db_host = db_host + if db_port: self.db_port = db_port + if db_user: self.db_user = db_user + if db_pass: self.db_pass = db_pass + if db: self.db = db + + mysql = raw_input('是否使用已经存在的数据库服务器? (y/n) [n]: ') + + if mysql != 'y': + self._setup_mysql() + + if self._test_db_conn(): + break + + print + + def _input_smtp(self): + while True: + self.mail_host = raw_input('请输入SMTP地址: ').strip() + self.mail_port = int(raw_input('请输入SMTP端口: ').strip()) + self.mail_addr = raw_input('请输入账户: ').strip() + self.mail_pass = raw_input('请输入密码: ').strip() + + if self._test_mail(): + color_print('\n\t请登陆邮箱查收邮件, 然后确认是否继续安装\n', 'green') + smtp = raw_input('是否继续? (y/n) [y]: ') + if smtp == 'n': + continue + else: + break + print + + def _input_admin(self): + while True: + self.admin_user = raw_input('请输入管理员用户名 [%s]: ' % self.admin_user).strip() + self.admin_pass = raw_input('请输入管理员密码: ').strip() + admin_pass_again = raw_input('请再次输入管理员密码: ').strip() + + if self.admin_pass != admin_pass_again: + color_print('两次密码不相同请重新输入') + else: + break + print + + @staticmethod + def _sync_db(): + os.chdir(jms_dir) + execute_from_command_line(['manage.py', 'syncdb', '--noinput']) + + def _create_admin(self): + db_add_user(username=self.admin_user, password=self.admin_pass, role='SU', name='admin', groups='', + admin_groups='', email='admin@jumpserver.org', uuid='MayBeYouAreTheFirstUser', is_active=True) + server_add_user(self.admin_user, self.admin_user, ssh_key_login_need=False) + + def start(self): + print "开始安装Jumpserver, 要求环境为 CentOS 6.5 x86_64" + self._pull() + self._set_env() + self._rpm_repo() + self._depend_rpm() + self._require_pip() + self._input_ip() + self._input_mysql() + self._input_smtp() + self._sync_db() + self.write_conf() + self._input_admin() + self._create_admin() + + +if __name__ == '__main__': + setup = Setup() + setup.start() diff --git a/juser/user_api.py b/juser/user_api.py index ca9ac16c9..312068907 100644 --- a/juser/user_api.py +++ b/juser/user_api.py @@ -146,7 +146,7 @@ def gen_ssh_key(username, password='', chown(authorized_key_file, username) -def server_add_user(username, password, ssh_key_pwd, ssh_key_login_need): +def server_add_user(username, password, ssh_key_pwd='', ssh_key_login_need=True): """ add a system user in jumpserver 在jumpserver服务器上添加一个用户