435 lines
16 KiB
Python
435 lines
16 KiB
Python
|
import subprocess
|
|||
|
|
import os
|
|||
|
|
import re
|
|||
|
|
import shlex
|
|||
|
|
from abc import ABC, abstractmethod
|
|||
|
|
from typing import Optional, List, Callable
|
|||
|
|
|
|||
|
|
from dialog import Dialog
|
|||
|
|
from postinstall.logger import logger
|
|||
|
|
|
|||
|
|
REGISTRY_URL = "dr.gosrv.ru"
|
|||
|
|
REGISTRY_LOGIN = "dr_admin"
|
|||
|
|
REGISTRY_PASSWORD = "Qweasdzxc123C@"
|
|||
|
|
DOCKER_COMPOSE_FILE_PATH = "/usr/local/share/postinstall/portainer/"
|
|||
|
|
|
|||
|
|
|
|||
|
|
class CommandExecutor:
|
|||
|
|
@staticmethod
|
|||
|
|
def run_command(
|
|||
|
|
command: str,
|
|||
|
|
shell: bool = False,
|
|||
|
|
input_data: Optional[str] = None,
|
|||
|
|
ignore_errors: List[int] = [],
|
|||
|
|
) -> subprocess.CompletedProcess:
|
|||
|
|
try:
|
|||
|
|
return subprocess.run(
|
|||
|
|
command if shell else shlex.split(command),
|
|||
|
|
shell=shell,
|
|||
|
|
check=True,
|
|||
|
|
input=input_data,
|
|||
|
|
text=True,
|
|||
|
|
capture_output=True,
|
|||
|
|
)
|
|||
|
|
except subprocess.CalledProcessError as e:
|
|||
|
|
if e.returncode not in ignore_errors:
|
|||
|
|
logger.error(f"Ошибка выполнения команды: {e}")
|
|||
|
|
raise
|
|||
|
|
else:
|
|||
|
|
logger.warning(
|
|||
|
|
f"Команда завершилась с игнорируемым кодом ошибки {e.returncode}: {e}"
|
|||
|
|
)
|
|||
|
|
return e
|
|||
|
|
|
|||
|
|
|
|||
|
|
class SystemChecker:
|
|||
|
|
@staticmethod
|
|||
|
|
def is_command_installed(command: str) -> bool:
|
|||
|
|
try:
|
|||
|
|
return CommandExecutor.run_command(f"which {command}").returncode == 0
|
|||
|
|
except subprocess.CalledProcessError:
|
|||
|
|
return False
|
|||
|
|
|
|||
|
|
|
|||
|
|
class ProgressGauge:
|
|||
|
|
def __init__(self, dialog: Dialog, title: str, total_steps: int):
|
|||
|
|
self.dialog = dialog
|
|||
|
|
self.title = title
|
|||
|
|
self.total_steps = total_steps
|
|||
|
|
self.current_step = 0
|
|||
|
|
|
|||
|
|
def update(self, step: int, message: str):
|
|||
|
|
self.current_step = step
|
|||
|
|
percent = int((step / self.total_steps) * 100)
|
|||
|
|
self.dialog.gauge_update(percent, f"{message} ({percent}%)", update_text=True)
|
|||
|
|
|
|||
|
|
def __enter__(self):
|
|||
|
|
self.dialog.gauge_start(self.title, percent=0)
|
|||
|
|
return self
|
|||
|
|
|
|||
|
|
def __exit__(self, exc_type, exc_val, exc_tb):
|
|||
|
|
self.dialog.gauge_stop()
|
|||
|
|
|
|||
|
|
|
|||
|
|
class DockerManager:
|
|||
|
|
@staticmethod
|
|||
|
|
def install(progress_callback: Callable[[int, str], None]):
|
|||
|
|
logger.info("Установка Docker...")
|
|||
|
|
progress_callback(1, "Обновление пакетов")
|
|||
|
|
CommandExecutor.run_command("apt-get update")
|
|||
|
|
progress_callback(2, "Установка Docker")
|
|||
|
|
CommandExecutor.run_command("apt-get install -y docker.io")
|
|||
|
|
progress_callback(3, "Установка Docker Compose")
|
|||
|
|
CommandExecutor.run_command("apt-get install -y docker-compose")
|
|||
|
|
progress_callback(4, "Выполнение входа в Docker registry")
|
|||
|
|
DockerManager.login_to_registry()
|
|||
|
|
progress_callback(5, "Docker успешно установлен")
|
|||
|
|
logger.info("Docker успешно установлен")
|
|||
|
|
|
|||
|
|
@staticmethod
|
|||
|
|
def uninstall(progress_callback: Callable[[int, str], None]):
|
|||
|
|
logger.info("Удаление Docker...")
|
|||
|
|
progress_callback(1, "Удаление Docker и Docker Compose")
|
|||
|
|
CommandExecutor.run_command("apt-get remove -y docker.io docker-compose")
|
|||
|
|
progress_callback(2, "Очистка зависимостей")
|
|||
|
|
CommandExecutor.run_command("apt-get autoremove -y")
|
|||
|
|
progress_callback(3, "Удаление файлов Docker")
|
|||
|
|
CommandExecutor.run_command("rm -rf /var/run/docker")
|
|||
|
|
CommandExecutor.run_command("rm -rf /var/lib/docker")
|
|||
|
|
progress_callback(4, "Docker успешно удален")
|
|||
|
|
logger.info("Docker успешно удален")
|
|||
|
|
|
|||
|
|
@staticmethod
|
|||
|
|
def login_to_registry():
|
|||
|
|
logger.info("Выполняется вход в Docker registry...")
|
|||
|
|
try:
|
|||
|
|
result = CommandExecutor.run_command(
|
|||
|
|
f"echo {REGISTRY_PASSWORD} | docker login --username {REGISTRY_LOGIN} --password-stdin {REGISTRY_URL}",
|
|||
|
|
shell=True,
|
|||
|
|
)
|
|||
|
|
logger.info("Успешный вход в Docker registry")
|
|||
|
|
logger.debug(f"Docker login output: {result.stdout}")
|
|||
|
|
except subprocess.CalledProcessError as e:
|
|||
|
|
logger.error(f"Ошибка входа в Docker registry: {e}")
|
|||
|
|
logger.error(f"Stderr: {e.stderr}")
|
|||
|
|
raise
|
|||
|
|
|
|||
|
|
|
|||
|
|
class UFWManager:
|
|||
|
|
@staticmethod
|
|||
|
|
def add_rule(port: str):
|
|||
|
|
rule_name = "portainer"
|
|||
|
|
logger.info(
|
|||
|
|
f"Добавление именованного правила UFW '{rule_name}' для порта {port}..."
|
|||
|
|
)
|
|||
|
|
CommandExecutor.run_command(f"sudo ufw allow {port}/tcp comment '{rule_name}'")
|
|||
|
|
CommandExecutor.run_command(f"sudo ufw app update {rule_name}")
|
|||
|
|
logger.info(
|
|||
|
|
f"Именованное правило UFW '{rule_name}' для порта {port} успешно добавлено"
|
|||
|
|
)
|
|||
|
|
|
|||
|
|
@staticmethod
|
|||
|
|
def remove_rule(port: str):
|
|||
|
|
rule_name = "portainer"
|
|||
|
|
logger.info(
|
|||
|
|
f"Удаление именованного правила UFW '{rule_name}' для порта {port}..."
|
|||
|
|
)
|
|||
|
|
CommandExecutor.run_command(f"sudo ufw delete allow {port}/tcp")
|
|||
|
|
CommandExecutor.run_command(f"sudo ufw app update {rule_name}")
|
|||
|
|
logger.info(
|
|||
|
|
f"Именованное правило UFW '{rule_name}' для порта {port} успешно удалено"
|
|||
|
|
)
|
|||
|
|
|
|||
|
|
|
|||
|
|
class PortainerManager:
|
|||
|
|
@staticmethod
|
|||
|
|
def install(
|
|||
|
|
port: str, password: str, ip: str, progress_callback: Callable[[int, str], None]
|
|||
|
|
):
|
|||
|
|
logger.info("Установка Portainer...")
|
|||
|
|
progress_callback(1, "Вход в Docker registry")
|
|||
|
|
DockerManager.login_to_registry()
|
|||
|
|
progress_callback(2, "Остановка предыдущей версии Portainer")
|
|||
|
|
try:
|
|||
|
|
CommandExecutor.run_command(
|
|||
|
|
f"sudo docker-compose -f {DOCKER_COMPOSE_FILE_PATH}docker-compose.yml down",
|
|||
|
|
ignore_errors=[1],
|
|||
|
|
)
|
|||
|
|
except subprocess.CalledProcessError:
|
|||
|
|
pass
|
|||
|
|
|
|||
|
|
progress_callback(3, "Удаление старых данных Portainer")
|
|||
|
|
try:
|
|||
|
|
CommandExecutor.run_command(
|
|||
|
|
"docker volume ls -q -f name=portainer* | xargs -r docker volume rm",
|
|||
|
|
ignore_errors=[1],
|
|||
|
|
)
|
|||
|
|
except subprocess.CalledProcessError:
|
|||
|
|
pass
|
|||
|
|
|
|||
|
|
progress_callback(4, "Установка apache2-utils для htpasswd")
|
|||
|
|
if not SystemChecker.is_command_installed("htpasswd"):
|
|||
|
|
CommandExecutor.run_command("apt-get install -y apache2-utils")
|
|||
|
|
|
|||
|
|
progress_callback(5, "Создание конфигурации Portainer")
|
|||
|
|
os.makedirs(os.path.dirname(DOCKER_COMPOSE_FILE_PATH), exist_ok=True)
|
|||
|
|
password_hash = PortainerManager._generate_password_hash(password)
|
|||
|
|
PortainerManager._create_docker_compose_file(port, password_hash, ip)
|
|||
|
|
|
|||
|
|
progress_callback(6, "Запуск Portainer")
|
|||
|
|
CommandExecutor.run_command(
|
|||
|
|
f"sudo docker-compose -f {DOCKER_COMPOSE_FILE_PATH}docker-compose.yml up -d"
|
|||
|
|
)
|
|||
|
|
|
|||
|
|
if ip != "127.0.0.1":
|
|||
|
|
progress_callback(7, "Добавление правила UFW")
|
|||
|
|
UFWManager.add_rule(port)
|
|||
|
|
|
|||
|
|
progress_callback(8, "Portainer успешно установлен")
|
|||
|
|
logger.info("Portainer успешно установлен")
|
|||
|
|
|
|||
|
|
@staticmethod
|
|||
|
|
def uninstall(progress_callback: Callable[[int, str], None]):
|
|||
|
|
logger.info("Удаление Portainer...")
|
|||
|
|
progress_callback(1, "Остановка Portainer")
|
|||
|
|
try:
|
|||
|
|
CommandExecutor.run_command(
|
|||
|
|
f"docker-compose -f {DOCKER_COMPOSE_FILE_PATH}docker-compose.yml down --volumes",
|
|||
|
|
ignore_errors=[1],
|
|||
|
|
)
|
|||
|
|
except subprocess.CalledProcessError:
|
|||
|
|
pass
|
|||
|
|
progress_callback(2, "Удаление файлов конфигурации")
|
|||
|
|
CommandExecutor.run_command(
|
|||
|
|
f"rm -f {DOCKER_COMPOSE_FILE_PATH}docker-compose.yml"
|
|||
|
|
)
|
|||
|
|
try:
|
|||
|
|
with open(f"{DOCKER_COMPOSE_FILE_PATH}docker-compose.yml", "r") as f:
|
|||
|
|
config = f.read()
|
|||
|
|
port_ip_match = re.search(r'"(.+):(\d+):9000"', config)
|
|||
|
|
if port_ip_match:
|
|||
|
|
ip, port = port_ip_match.groups()
|
|||
|
|
if ip != "127.0.0.1":
|
|||
|
|
progress_callback(3, "Удаление правила UFW")
|
|||
|
|
UFWManager.remove_rule(port)
|
|||
|
|
except FileNotFoundError:
|
|||
|
|
logger.warning("Файл конфигурации не найден. Пропуск удаления правила UFW.")
|
|||
|
|
|
|||
|
|
progress_callback(4, "Portainer успешно удален")
|
|||
|
|
logger.info("Portainer успешно удален")
|
|||
|
|
|
|||
|
|
@staticmethod
|
|||
|
|
def _generate_password_hash(password: str) -> str:
|
|||
|
|
return CommandExecutor.run_command(
|
|||
|
|
f"htpasswd -nbB admin {shlex.quote(password)} | cut -d ':' -f 2 | sed 's/\\$/\\$\\$/g'",
|
|||
|
|
shell=True,
|
|||
|
|
).stdout.strip()
|
|||
|
|
|
|||
|
|
@staticmethod
|
|||
|
|
def _create_docker_compose_file(port: str, password_hash: str, ip: str):
|
|||
|
|
docker_compose_content = f"""
|
|||
|
|
version: '2'
|
|||
|
|
|
|||
|
|
services:
|
|||
|
|
portainer:
|
|||
|
|
image: {REGISTRY_URL}/portainer:latest
|
|||
|
|
ports:
|
|||
|
|
- "{ip}:{port}:9000"
|
|||
|
|
command: --admin-password '{password_hash}'
|
|||
|
|
networks:
|
|||
|
|
- local
|
|||
|
|
volumes:
|
|||
|
|
- /var/run/docker.sock:/var/run/docker.sock
|
|||
|
|
- portainer-data:/data
|
|||
|
|
environment:
|
|||
|
|
- PORTAINER_LOCAL_IMAGES_ENVIRONMENT_ID=1
|
|||
|
|
deploy:
|
|||
|
|
mode: global
|
|||
|
|
|
|||
|
|
networks:
|
|||
|
|
local:
|
|||
|
|
driver: bridge
|
|||
|
|
|
|||
|
|
volumes:
|
|||
|
|
portainer-data:
|
|||
|
|
"""
|
|||
|
|
with open(f"{DOCKER_COMPOSE_FILE_PATH}docker-compose.yml", "w") as f:
|
|||
|
|
f.write(docker_compose_content)
|
|||
|
|
|
|||
|
|
|
|||
|
|
class InputValidator:
|
|||
|
|
@staticmethod
|
|||
|
|
def validate(value: str, pattern: str) -> bool:
|
|||
|
|
return bool(re.match(pattern, value))
|
|||
|
|
|
|||
|
|
|
|||
|
|
class UIElement(ABC):
|
|||
|
|
def __init__(self, dialog: Dialog):
|
|||
|
|
self.dialog = dialog
|
|||
|
|
|
|||
|
|
@abstractmethod
|
|||
|
|
def show(self):
|
|||
|
|
pass
|
|||
|
|
|
|||
|
|
|
|||
|
|
class Menu(UIElement):
|
|||
|
|
def show(self):
|
|||
|
|
choices = []
|
|||
|
|
if not SystemChecker.is_command_installed("docker"):
|
|||
|
|
choices.append(("1", "Установить Docker"))
|
|||
|
|
else:
|
|||
|
|
choices.append(("1", "Удалить Docker"))
|
|||
|
|
|
|||
|
|
code, choice = self.dialog.menu("Выберите действие:", choices=choices)
|
|||
|
|
return code, choice
|
|||
|
|
|
|||
|
|
|
|||
|
|
class YesNoUI(UIElement):
|
|||
|
|
def show(self, text: str):
|
|||
|
|
return self.dialog.yesno(text) == self.dialog.OK
|
|||
|
|
|
|||
|
|
|
|||
|
|
class PasswordInput(UIElement):
|
|||
|
|
def show(self):
|
|||
|
|
while True:
|
|||
|
|
code, password = self.dialog.passwordbox(
|
|||
|
|
"Введите пароль для Portainer:", insecure=True
|
|||
|
|
)
|
|||
|
|
if code == self.dialog.CANCEL:
|
|||
|
|
return None
|
|||
|
|
if InputValidator.validate(password, r"^.{12,}$"):
|
|||
|
|
return password
|
|||
|
|
self.dialog.msgbox(
|
|||
|
|
"Пароль должен содержать минимум 12 символов.", width=50, height=10
|
|||
|
|
)
|
|||
|
|
|
|||
|
|
|
|||
|
|
class PortInput(UIElement):
|
|||
|
|
def show(self):
|
|||
|
|
while True:
|
|||
|
|
code, port = self.dialog.inputbox(
|
|||
|
|
"Введите порт для Portainer:", init="9000"
|
|||
|
|
)
|
|||
|
|
if code == self.dialog.CANCEL:
|
|||
|
|
return None
|
|||
|
|
if InputValidator.validate(port, r"^[1-9][0-9]{0,4}$"):
|
|||
|
|
return port
|
|||
|
|
self.dialog.msgbox(
|
|||
|
|
"Некорректный порт. Введите число от 1 до 65535.", width=50, height=10
|
|||
|
|
)
|
|||
|
|
|
|||
|
|
|
|||
|
|
class IPInput(UIElement):
|
|||
|
|
def show(self):
|
|||
|
|
while True:
|
|||
|
|
code, ip = self.dialog.inputbox(
|
|||
|
|
"Введите IP адрес для Portainer:", init="127.0.0.1"
|
|||
|
|
)
|
|||
|
|
if code == self.dialog.CANCEL:
|
|||
|
|
return None
|
|||
|
|
if InputValidator.validate(ip, r"^(\d{1,3}\.){3}\d{1,3}$"):
|
|||
|
|
return ip
|
|||
|
|
self.dialog.msgbox(
|
|||
|
|
"Некорректный IP адрес. Введите адрес в формате X.X.X.X",
|
|||
|
|
width=50,
|
|||
|
|
height=10,
|
|||
|
|
)
|
|||
|
|
|
|||
|
|
|
|||
|
|
class DockerConfigUI:
|
|||
|
|
def __init__(self):
|
|||
|
|
self.dialog = Dialog(dialog="dialog")
|
|||
|
|
self.menu = Menu(self.dialog)
|
|||
|
|
self.password_input = PasswordInput(self.dialog)
|
|||
|
|
self.port_input = PortInput(self.dialog)
|
|||
|
|
self.ip_input = IPInput(self.dialog)
|
|||
|
|
|
|||
|
|
def run(self):
|
|||
|
|
try:
|
|||
|
|
while True:
|
|||
|
|
code, choice = self.menu.show()
|
|||
|
|
if code == self.dialog.OK:
|
|||
|
|
if choice == "1":
|
|||
|
|
self._handle_docker()
|
|||
|
|
elif choice == "2":
|
|||
|
|
self._handle_portainer()
|
|||
|
|
elif choice == "3":
|
|||
|
|
break
|
|||
|
|
else:
|
|||
|
|
break
|
|||
|
|
except Exception as e:
|
|||
|
|
logger.error(f"Произошла ошибка: {e}")
|
|||
|
|
self.dialog.msgbox(f"Произошла ошибка: {str(e)}", width=50, height=10)
|
|||
|
|
|
|||
|
|
def _handle_docker(self):
|
|||
|
|
if not SystemChecker.is_command_installed("docker"):
|
|||
|
|
with ProgressGauge(self.dialog, "Установка Docker", 4) as gauge:
|
|||
|
|
DockerManager.install(gauge.update)
|
|||
|
|
self.dialog.msgbox("Docker успешно установлен.", width=50, height=10)
|
|||
|
|
logger.info("Docker успешно установлен.")
|
|||
|
|
yes_no_ui = YesNoUI(self.dialog)
|
|||
|
|
if yes_no_ui.show(text="Вы хотите установить Docker Swarm - инструмент для управления кластером докер серверов?"):
|
|||
|
|
CommandExecutor.run_command("docker swarm init")
|
|||
|
|
|
|||
|
|
if yes_no_ui.show(
|
|||
|
|
text="Вы хотите установить Portainer - удобный Web интерфейс для управления докер контейнерами?"
|
|||
|
|
):
|
|||
|
|
self.handle_portainer()
|
|||
|
|
else:
|
|||
|
|
with ProgressGauge(self.dialog, "Удаление Docker", 4) as gauge:
|
|||
|
|
PortainerManager.uninstall(gauge.update)
|
|||
|
|
DockerManager.uninstall(gauge.update)
|
|||
|
|
self.dialog.msgbox("Docker успешно удален.", width=50, height=10)
|
|||
|
|
logger.info("Docker успешно удален.")
|
|||
|
|
|
|||
|
|
def handle_portainer(self):
|
|||
|
|
if not SystemChecker.is_command_installed("docker"):
|
|||
|
|
self.dialog.msgbox(
|
|||
|
|
"Docker не установлен. Пожалуйста, сначала установите Docker.",
|
|||
|
|
width=50,
|
|||
|
|
height=10,
|
|||
|
|
)
|
|||
|
|
return
|
|||
|
|
|
|||
|
|
if not os.path.exists(f"{DOCKER_COMPOSE_FILE_PATH}docker-compose.yml"):
|
|||
|
|
self._install_portainer()
|
|||
|
|
else:
|
|||
|
|
with ProgressGauge(self.dialog, "Удаление Portainer", 3) as gauge:
|
|||
|
|
PortainerManager.uninstall(gauge.update)
|
|||
|
|
self.dialog.msgbox("Portainer успешно удален.", width=50, height=10)
|
|||
|
|
logger.info("Portainer успешно удален.")
|
|||
|
|
|
|||
|
|
def _install_portainer(self):
|
|||
|
|
password = self.password_input.show()
|
|||
|
|
if not password:
|
|||
|
|
return
|
|||
|
|
|
|||
|
|
port = self.port_input.show()
|
|||
|
|
if not port:
|
|||
|
|
return
|
|||
|
|
|
|||
|
|
ip = self.ip_input.show()
|
|||
|
|
if not ip:
|
|||
|
|
return
|
|||
|
|
|
|||
|
|
try:
|
|||
|
|
with ProgressGauge(self.dialog, "Установка Portainer", 6) as gauge:
|
|||
|
|
PortainerManager.install(port, password, ip, gauge.update)
|
|||
|
|
self.dialog.msgbox(
|
|||
|
|
f"Portainer успешно установлен.\nВы можете войти в Portainer по адресу {ip}:{port} используя логин admin и введенный пароль",
|
|||
|
|
width=50,
|
|||
|
|
height=10,
|
|||
|
|
)
|
|||
|
|
logger.info(
|
|||
|
|
f"Portainer успешно установлен.\nВы можете войти в Portainer по адресу {ip}:{port} используя логин admin и введенный пароль"
|
|||
|
|
)
|
|||
|
|
except Exception as e:
|
|||
|
|
self.dialog.msgbox(
|
|||
|
|
f"Ошибка при установке Portainer: {str(e)}", width=50, height=10
|
|||
|
|
)
|
|||
|
|
|
|||
|
|
|
|||
|
|
def run():
|
|||
|
|
ui = DockerConfigUI()
|
|||
|
|
ui.run()
|