dKj
- d dl Z d dlZd dlZd dlZd dlZd dlZd dlZd dlZd dlm Z d dl
m Z d dl
mZ d dlmZ d dlmZ d dlmZmZmZmZmZmZmZmZm Z d dl m Z m Z d Z dd
e!fd Z"d Z#d
Z$d Z%d Z&d Z'd Z(d Z)d Z*d Z+de!fdZ,dS ) N)cpusers)gettext) _get_wpos_statistics_total_count)drop_privileges) WposError)
USER_WPOS_DIRPUBLIC_OPTIONSAWP_BACKUP_DIRCLWPOS_UIDS_PATHCLWPOS_ADMIN_DIRUSERS_CONFIGS_TO_BACKUPPUBLIC_OPTIONS_FILE_NAMECLWPOS_UIDS_DIR_NAMEALLOWED_SUITES_JSON)
ALL_SUITESAWPSuitei returnc L | r| gnt t }i }|D ]}} t j | }n%# t $ r t j d| Y 9w xY wt j |j
t fdt D || < ~|S )z3
Collects user configs inside HOME/.clwpos
z*Cannot collect configs folder for user: %sc P g | ]"}t j | #S )ospathjoin).0config
full_user_dirs py/clwpos/whmcs_utils.py
z(collect_user_configs..: s) h h hfbgll=& A A h h h )
listr pwdgetpwnamKeyErrorloggingwarningr r r pw_dirr r
)user target_users user_folderspwr s @r collect_user_configsr+ - s "6D66tGIILL i i d##BB O H$ O O O H RY
>>
h h h hPg h h h T s > A A c t j | t j t j z t j z }n # t
$ r Y dS t $ r Y dS w xY w t j | }t j |j
s t j | dS |j t k r t j | dS g }t }|dk rEt j || }|sn-| | |t! | z }|dk Ed | t j | S # t j | w xY w)aB
Read a tenant-owned config for backup without letting a hostile file at the
path hang or OOM the (shared, root) backup process.
This runs under the tenant's euid (drop_privileges), so it must stay to
user-level operations. O_NONBLOCK prevents open() from blocking on a FIFO
with no writer; O_NOFOLLOW rejects a symlinked path. The fstat S_ISREG check
rejects FIFO/device/socket/dir before any read, and the read is bounded so a
huge/sparse file cannot exhaust memory.
:return: file bytes, or None if the path is absent / not a regular file
Nr r )r openO_RDONLY
O_NOFOLLOW
O_NONBLOCKFileNotFoundErrorOSErrorfstatstatS_ISREGst_modeclosest_sizeMAX_BACKUP_CONF_BYTESreadappendlenr )r fdstchunks remainingchunks r _read_user_conf_safelyrB > sW
WT2; 6 F
G
G tt tt
Xb\\|BJ'' :- - - ) !mmGB **E
MM% U #I !mm xx
s. 9<
A AA-E E A(E Ec
|D ]T}t | 5 t | }|
ddd 1 ddd n # 1 swxY w Y t j || t j t j | }t j |t j | }t j | st j |dd t |d 5 }|
| ddd n # 1 swxY w Y VdS )z(
Copies configs for single user
N T)modeexist_okwb) r rB r r r basenamedirnameexistsmakedirsr- write)usernameconfigs backups_dirr datauser_backup_dir backup_pathfs r backup_single_user_confrT f s
X
&
& )$//D|
',,{H')w'7'78M8M'N'NP Pgll?BG4D4DT4J4JKK w~~o.. D Ked C C C C
+t
$
$
GGDMMM
s# AA A *E E E c
t g} t t g}t }t j t t j
d }t j t st j t d t j |d | D ]7}t j | s"t j || 8|D ]r}t j | s"t j |t j |t j | st j |d }t j |d | D ]<\ }} t% ||| # t& $ r t) j d| Y 9w xY wdS )z
Backups main AccelerateWP configs to
/var/clwpos/DATE-TIME/.backup/%Y_%m_%d_%H_%M_%S.
Directory is only root-editable, so no user permissions
drop is needed.
z%Y_%m_%d_%H_%M_%SrD )rE usersz!Cannot backup configs for user %sN)r r r r+ r r r r
datetimenowstrftimerJ mkdirshutilcopy2copytreerH itemsrT Exceptionr$ exception)files_to_backupfolders_to_backup user_configscurrent_backup_folderr user_backupsrM pathss r backup_accelerate_wprg z s O
())L GLL (()<== 7>>. ) ) -
e,,,,H
"//// 2 2w~~d## T01111! [ [w~~d## bgll+@"'BRBRSWBXBX Y YZZZZ7<< 5w??LH\&&&&'--// % #He\ B B B B A8 L L L H s
G H Hc n t \ } }}g }t j D ]\ }}|t j k rq|| vrm||vrid}|t t
|j dd z
}|t t
|j d z
}|dk r| | |rDt j
dddd d
| gt j t j d | rDt j
ddd d d
| gt j t j d |rDt j
ddd
d d
| gt j t j d |r2t j
ddd|gt j t j d dS dS )zL
Restore AccelerateWP suite states from latest backup (server-wide)
r allowedT)allowed_by_modulesvisiblez /usr/bin/cloudlinux-awp-adminz set-suitez--disallowed-for-allz--suites,)stdoutstderrtextz--visible-for-allz--allowed-for-allz set-optionsz
--upgrade-urlN)
_get_backup_of_public_optionsr r^ r namer r featuresr;
subprocessPopenr PIPE)visible_suitesallowed_suites upgrade_urldisallowed_suites
suite_namesuite
suite_useds r +restore_accelerate_wp_public_options_backupr} s& 3P2Q2Q/NNK ' - / / 5 5
E & &:^+K+KPZbpPpPpJ :4;O;OQZosttt tJ :4;O;OQZ[[ [JQ!((444 G + " HH& ' ' ) ?:?
G G G G G + HH^ $ $ & ?:?
G G G G G + HH^ $ $ & ?:?
G G G G G +
?:? G G G G G GG Gr c V g } g }d}t }|rt j |t }t j | rt
| 5 } t j | }| dg } | dg }| dd }nJ# t j
j $ r3}t t d t | d|i d }~ww xY w d d d n # 1 swxY w Y || |fS )N rw rv rx zMBackup file is corrupted: %(config_file)s or fix the line provided in details config_file)messagedetailscontext)_get_first_backup_folderr r r r rJ r- jsonloadgetdecoderJSONDecodeErrorr _str)rw rv rx first_backuppublic_options_backup_filerS public_optionserrs r rp rp s NNK+--L M%'W\\,@X%Y%Y"
7>>4 5 5 M011
MQ
M%)Yq\\N%3%7%78H"%M%MN%3%7%78H"%M%MN"0"4"4]B"G"GKK|3 M M M# ! #I !J !J #C!.0J K M M M MM
M
M
M
M
M
M
M
M
M
M
M
M
M
M
M >; 66s7 +D-ACDD .DD DD "D c t j t r#d t j t D S d S )Nc n g | ]2}| |j d 0|3S ).)is_dirrq
startswith)r entrys r r z&get_backup_folders.. s= sss% sX]XbXmXmnqXrXrssssr )r r rJ r
scandirr r r get_backup_foldersr sC w~~n%% tss2:n#=#=sssst tr c d t } d }| rt | d d }|r|d S d S )Nc | j S N)rq )r s r z*_get_first_backup_folder.. s EJ r F)keyreverser )r sorted)foldersbackupss r r r sJ ""GG O&>&>NNN qz 4r c t j t D ]} | d rt j t | }t j t d| }t j | rD t j || # t $ r }t j
d|| Y d }~d }~ww xY wd S )Nr z,Unable to deprecate backup dir %s. Error: %s) r listdirr
r r r isdirrenamer2 r$ r` )folder folder_path
folder_newes r %make_accelerate_wp_backups_deprecatedr s *^,, b b S ! ! gll>6:: W\\.,f,,??
7== % % b
b +z2222
b
b
b!"PR]_`aaaaaaaa
b b b bs B55
C ?CC c
n i } i }t }|st j d i S t j |t }t j | 5 }|D ]4}t j |t } t j
t |j d }n# t t f$ r Y iw xY wt j | st! | 5 } t# j | } | di | |< nB# t" j j $ r+}
t j d||
j |
j Y d }
~
nd }
~
ww xY wd d d n # 1 swxY w Y t1 | }6 d d d n # 1 swxY w Y |S )Nz4Can't restore WHMCS backup. There is no backup data.r suiteszZBackup file is corrupted: %s or fix the line provided in detailsStdout is %s. Stderr is %s)r r$ r` r r r r r r r! getpwuidintrq r# TypeErrorrJ r- r r r r r rm rn _group_users_by_suites) r grouped_by_suite_usernamesr users_uids_direntries
uid_folderuid_config_pathrM rS
uid_configr s r _get_backup_of_users_suitesr s^
F!# +--L PQQQ W\\,0DEEN N # # Hw! H HJ gll:7J K KO
<JO(<(<==a@ i(
7>>/22
o&&
:!:!%1 J'1~~h'C'CF8$$|3 : : :% 'CDS&'h: : : : : : : ::
:
:
:
:
:
:
:
:
:
:
:
:
:
:
: *@)G)G & &) HH H H H H H H H H H H H H H H, &%s $+F*,B=<F*=CF*C2F*F-D32F3E2 !E- (F-E2 2F5 F*F F*F F**F.1F. uids_suitesc i }| D ]Z\ }}| D ]@\ }}||vri ||< ||| vr|g i||< || | | A[|S )a
Groups uids by suite and status to change suite status for multiple uids by one run.
Converts per uid dict from
uids_suites = {
"user1": {
"accelerate_wp": "allowed",
"accelerate_wp_premium": "visible",
"accelerate_wp_cdn": "default",
"accelerate_wp_cdn_pro": "allowed"
}
}
to
{
"accelerate_wp": {
"allowed": [user1,user2,user3],
"visible": [user1,user2,user3],
"default": [],
}
}
)r^ r; )r grouped_by_suite_uidsuidr r{ statuss r r r 7 s * "((** = = V #\\^^ = =ME6 111/1%e, 25 99906|%e, !% ( 0 7 7 < < < < = ! r r )-rW r$ r r[ r4 r r! rs clcommon.cpapir clwposr r clwpos.statsr clcommon.clpwdr clwpos.cl_wpos_exceptionsr clwpos.constantsr r r
r r r
r r r clwpos.feature_suitesr r r9 dictr+ rB rT rg r} rp r r r r r r r r r s
" " " " " " 9 9 9 9 9 9 * * * * * * / / / / / /
7 6 6 6 6 6 6 6
$ t "% % %P (. . .b0G 0G 0Gf7 7 70t t t
b
b
b & & &F ! ! ! ! ! ! !r