mirror of
https://github.com/hackacad/bastille.git
synced 2025-12-20 17:20:12 +01:00
Merge branch 'master' into patch-2
This commit is contained in:
@@ -165,11 +165,10 @@ version|-v|--version)
|
|||||||
help|-h|--help)
|
help|-h|--help)
|
||||||
usage
|
usage
|
||||||
;;
|
;;
|
||||||
|
bootstrap|clone|console|create|cp|destroy|etcupdate|export|htop|import|jcp|list|mount|pkg|rcp|rdr|rename|restart|setup|start|stop|top|umount|update|upgrade|verify)
|
||||||
bootstrap|clone|console|create|cp|destroy|etcupdate|export|htop|import|jcp|list|mount|rcp|rdr|rename|restart|setup|start|stop|top|umount|update|upgrade|verify)
|
|
||||||
# Nothing "extra" to do for these commands. -- cwells
|
# Nothing "extra" to do for these commands. -- cwells
|
||||||
;;
|
;;
|
||||||
config|cmd|convert|edit|limits|pkg|service|sysrc|tags|template|zfs)
|
config|cmd|convert|edit|limits|service|sysrc|tags|template|zfs)
|
||||||
# Parse the target and ensure it exists. -- cwells
|
# Parse the target and ensure it exists. -- cwells
|
||||||
if [ $# -eq 0 ]; then # No target was given, so show the command's help. -- cwells
|
if [ $# -eq 0 ]; then # No target was given, so show the command's help. -- cwells
|
||||||
PARAMS='help'
|
PARAMS='help'
|
||||||
|
|||||||
@@ -108,13 +108,10 @@ if echo "${NEWNAME}" | grep -q "[.]"; then
|
|||||||
fi
|
fi
|
||||||
|
|
||||||
validate_ip() {
|
validate_ip() {
|
||||||
IPX_ADDR="ip4.addr"
|
|
||||||
IP6_MODE="disable"
|
IP6_MODE="disable"
|
||||||
ip6=$(echo "${IP}" | grep -E '^(([a-fA-F0-9:]+$)|([a-fA-F0-9:]+\/[0-9]{1,3}$))')
|
ip6=$(echo "${IP}" | grep -E '^(([a-fA-F0-9:]+$)|([a-fA-F0-9:]+\/[0-9]{1,3}$))')
|
||||||
if [ -n "${ip6}" ]; then
|
if [ -n "${ip6}" ]; then
|
||||||
info "Valid: (${ip6})."
|
info "Valid: (${ip6})."
|
||||||
IPX_ADDR="ip6.addr"
|
|
||||||
# shellcheck disable=SC2034
|
|
||||||
IP6_MODE="new"
|
IP6_MODE="new"
|
||||||
else
|
else
|
||||||
local IFS
|
local IFS
|
||||||
@@ -159,17 +156,22 @@ update_jailconf() {
|
|||||||
# IP4
|
# IP4
|
||||||
if [ "${_ip4}" != "not set" ]; then
|
if [ "${_ip4}" != "not set" ]; then
|
||||||
for _ip in ${_ip4}; do
|
for _ip in ${_ip4}; do
|
||||||
|
if echo ${_ip} | grep -q "|"; then
|
||||||
_ip="$(echo ${_ip} | awk -F"|" '{print $2}')"
|
_ip="$(echo ${_ip} | awk -F"|" '{print $2}')"
|
||||||
sed -i '' "/${IPX_ADDR} = .*/ s/${_ip}/${IP}/" "${JAIL_CONFIG}"
|
fi
|
||||||
sed -i '' "/${IPX_ADDR} += .*/ s/${_ip}/127.0.0.1/" "${JAIL_CONFIG}"
|
sed -i '' "/ip4.addr = .*/ s/${_ip}/${IP}/" "${JAIL_CONFIG}"
|
||||||
|
sed -i '' "/ip4.addr += .*/ s/${_ip}/127.0.0.1/" "${JAIL_CONFIG}"
|
||||||
done
|
done
|
||||||
fi
|
fi
|
||||||
# IP6
|
# IP6
|
||||||
if [ "${_ip6}" != "not set" ]; then
|
if [ "${_ip6}" != "not set" ]; then
|
||||||
for _ip in ${_ip6}; do
|
for _ip in ${_ip6}; do
|
||||||
|
if echo ${_ip} | grep -q "|"; then
|
||||||
_ip="$(echo ${_ip} | awk -F"|" '{print $2}')"
|
_ip="$(echo ${_ip} | awk -F"|" '{print $2}')"
|
||||||
sed -i '' "/${IPX_ADDR} = .*/ s/${_ip}/${IP}/" "${JAIL_CONFIG}"
|
fi
|
||||||
sed -i '' "/${IPX_ADDR} += .*/ s/${_ip}/127.0.0.1/" "${JAIL_CONFIG}"
|
sed -i '' "/ip6.addr = .*/ s/${_ip}/${IP}/" "${JAIL_CONFIG}"
|
||||||
|
sed -i '' "/ip6.addr += .*/ s/${_ip}/127.0.0.1/" "${JAIL_CONFIG}"
|
||||||
|
sed -i '' "s/ip6 = .*/ip6 = ${IP6_MODE};/" "${JAIL_CONFIG}"
|
||||||
done
|
done
|
||||||
fi
|
fi
|
||||||
fi
|
fi
|
||||||
|
|||||||
@@ -656,6 +656,7 @@ VNET_JAIL=""
|
|||||||
LINUX_JAIL=""
|
LINUX_JAIL=""
|
||||||
STATIC_MAC=""
|
STATIC_MAC=""
|
||||||
DUAL_STACK=""
|
DUAL_STACK=""
|
||||||
|
VALIDATE_RELEASE="1"
|
||||||
while [ $# -gt 0 ]; do
|
while [ $# -gt 0 ]; do
|
||||||
case "${1}" in
|
case "${1}" in
|
||||||
-h|--help|help)
|
-h|--help|help)
|
||||||
@@ -694,6 +695,10 @@ while [ $# -gt 0 ]; do
|
|||||||
CLONE_JAIL="1"
|
CLONE_JAIL="1"
|
||||||
shift
|
shift
|
||||||
;;
|
;;
|
||||||
|
--no-validate|no-validate)
|
||||||
|
VALIDATE_RELEASE=""
|
||||||
|
shift
|
||||||
|
;;
|
||||||
-*)
|
-*)
|
||||||
for _opt in $(echo ${1} | sed 's/-//g' | fold -w1); do
|
for _opt in $(echo ${1} | sed 's/-//g' | fold -w1); do
|
||||||
case ${_opt} in
|
case ${_opt} in
|
||||||
@@ -750,7 +755,7 @@ if [ -n "${NAME}" ]; then
|
|||||||
validate_name
|
validate_name
|
||||||
fi
|
fi
|
||||||
|
|
||||||
if [ -n "${LINUX_JAIL}" ]; then
|
if [ -n "${LINUX_JAIL}" ] && [ -n "${VALIDATE_RELEASE}" ]; then
|
||||||
case "${RELEASE}" in
|
case "${RELEASE}" in
|
||||||
bionic|ubuntu_bionic|ubuntu|ubuntu-bionic)
|
bionic|ubuntu_bionic|ubuntu|ubuntu-bionic)
|
||||||
## check for FreeBSD releases name
|
## check for FreeBSD releases name
|
||||||
@@ -784,6 +789,7 @@ if [ -n "${LINUX_JAIL}" ]; then
|
|||||||
fi
|
fi
|
||||||
|
|
||||||
if [ -z "${EMPTY_JAIL}" ]; then
|
if [ -z "${EMPTY_JAIL}" ]; then
|
||||||
|
if [ -n "${VALIDATE_RELEASE}" ]; then
|
||||||
## verify release
|
## verify release
|
||||||
case "${RELEASE}" in
|
case "${RELEASE}" in
|
||||||
2.[0-9]*)
|
2.[0-9]*)
|
||||||
@@ -858,6 +864,7 @@ if [ -z "${EMPTY_JAIL}" ]; then
|
|||||||
usage
|
usage
|
||||||
;;
|
;;
|
||||||
esac
|
esac
|
||||||
|
fi
|
||||||
|
|
||||||
## check for name/root/.bastille
|
## check for name/root/.bastille
|
||||||
if [ -d "${bastille_jailsdir}/${NAME}/root/.bastille" ]; then
|
if [ -d "${bastille_jailsdir}/${NAME}/root/.bastille" ]; then
|
||||||
|
|||||||
@@ -34,18 +34,41 @@
|
|||||||
. /usr/local/etc/bastille/bastille.conf
|
. /usr/local/etc/bastille/bastille.conf
|
||||||
|
|
||||||
usage() {
|
usage() {
|
||||||
error_exit "Usage: bastille mount [option(s)] TARGET HOST_PATH JAIL_PATH [filesystem_type options dump pass_number]"
|
error_notify "Usage: bastille mount [option(s)] TARGET HOST_PATH JAIL_PATH [filesystem_type options dump pass_number]"
|
||||||
|
cat << EOF
|
||||||
|
Options:
|
||||||
|
|
||||||
|
-a | --auto Auto mode. Start/stop jail(s) if required.
|
||||||
|
-x | --debug Enable debug mode.
|
||||||
|
|
||||||
|
EOF
|
||||||
|
exit 1
|
||||||
}
|
}
|
||||||
|
|
||||||
# Handle options.
|
# Handle options.
|
||||||
|
AUTO=0
|
||||||
while [ "$#" -gt 0 ]; do
|
while [ "$#" -gt 0 ]; do
|
||||||
case "${1}" in
|
case "${1}" in
|
||||||
-h|--help|help)
|
-h|--help|help)
|
||||||
usage
|
usage
|
||||||
;;
|
;;
|
||||||
--*|-*)
|
-a|--auto)
|
||||||
error_notify "Unknown Option."
|
AUTO=1
|
||||||
usage
|
shift
|
||||||
|
;;
|
||||||
|
-x|--debug)
|
||||||
|
enable_debug
|
||||||
|
shift
|
||||||
|
;;
|
||||||
|
-*)
|
||||||
|
for _opt in $(echo ${1} | sed 's/-//g' | fold -w1); do
|
||||||
|
case ${_opt} in
|
||||||
|
a) AUTO=1 ;;
|
||||||
|
x) enable_debug ;;
|
||||||
|
*) error_exit "Unknown Option: \"${1}\""
|
||||||
|
esac
|
||||||
|
done
|
||||||
|
shift
|
||||||
;;
|
;;
|
||||||
*)
|
*)
|
||||||
break
|
break
|
||||||
@@ -120,6 +143,13 @@ for _jail in ${JAILS}; do
|
|||||||
|
|
||||||
info "[${_jail}]:"
|
info "[${_jail}]:"
|
||||||
|
|
||||||
|
check_target_is_running "${_jail}" || if [ "${AUTO}" -eq 1 ]; then
|
||||||
|
bastille start "${_jail}"
|
||||||
|
else
|
||||||
|
error_notify "Jail is not running."
|
||||||
|
error_exit "Use [-a|--auto] to auto-start the jail."
|
||||||
|
fi
|
||||||
|
|
||||||
_fullpath_fstab="$( echo "${bastille_jailsdir}/${_jail}/root/${_jailpath_fstab}" 2>/dev/null | sed 's#//#/#' )"
|
_fullpath_fstab="$( echo "${bastille_jailsdir}/${_jail}/root/${_jailpath_fstab}" 2>/dev/null | sed 's#//#/#' )"
|
||||||
_fullpath="$( echo "${bastille_jailsdir}/${_jail}/root/${_jailpath}" 2>/dev/null | sed 's#//#/#' )"
|
_fullpath="$( echo "${bastille_jailsdir}/${_jail}/root/${_jailpath}" 2>/dev/null | sed 's#//#/#' )"
|
||||||
_fstab_entry="${_hostpath_fstab} ${_fullpath_fstab} ${_type} ${_perms} ${_checks}"
|
_fstab_entry="${_hostpath_fstab} ${_fullpath_fstab} ${_type} ${_perms} ${_checks}"
|
||||||
|
|||||||
@@ -31,29 +31,82 @@
|
|||||||
# OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
# OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
||||||
|
|
||||||
. /usr/local/share/bastille/common.sh
|
. /usr/local/share/bastille/common.sh
|
||||||
|
. /usr/local/etc/bastille/bastille.conf
|
||||||
|
|
||||||
usage() {
|
usage() {
|
||||||
error_exit "Usage: bastille pkg [-H|--host] TARGET command [args]"
|
error_notify "Usage: bastille pkg [option(s)] TARGET COMMAND args"
|
||||||
|
cat << EOF
|
||||||
|
Options:
|
||||||
|
|
||||||
|
-a | --auto Auto mode. Start/stop jail(s) if required.
|
||||||
|
-H | --host Use host 'pkg'.
|
||||||
|
-x | --debug Enable debug mode.
|
||||||
|
|
||||||
|
EOF
|
||||||
|
exit 1
|
||||||
}
|
}
|
||||||
|
|
||||||
# Handle special-case commands first.
|
# Handle options.
|
||||||
case "$1" in
|
AUTO=0
|
||||||
help|-h|--help)
|
USE_HOST_PKG=0
|
||||||
|
while [ "$#" -gt 0 ]; do
|
||||||
|
case "${1}" in
|
||||||
|
-h|--help|help)
|
||||||
usage
|
usage
|
||||||
;;
|
;;
|
||||||
esac
|
-a|--auto)
|
||||||
|
AUTO=1
|
||||||
|
shift
|
||||||
|
;;
|
||||||
|
-H|--host)
|
||||||
|
USE_HOST_PKG=1
|
||||||
|
shift
|
||||||
|
;;
|
||||||
|
-x|--debug)
|
||||||
|
enable_debug
|
||||||
|
shift
|
||||||
|
;;
|
||||||
|
-*)
|
||||||
|
for _opt in $(echo ${1} | sed 's/-//g' | fold -w1); do
|
||||||
|
case ${_opt} in
|
||||||
|
a) AUTO=1 ;;
|
||||||
|
H) USE_HOST_PKG=1 ;;
|
||||||
|
x) enable_debug ;;
|
||||||
|
*) error_exit "Unknown Option: \"${1}\"" ;;
|
||||||
|
esac
|
||||||
|
done
|
||||||
|
shift
|
||||||
|
;;
|
||||||
|
*)
|
||||||
|
break
|
||||||
|
;;
|
||||||
|
esac
|
||||||
|
done
|
||||||
|
|
||||||
if [ $# -lt 1 ]; then
|
if [ $# -lt 2 ]; then
|
||||||
usage
|
usage
|
||||||
fi
|
fi
|
||||||
|
|
||||||
|
TARGET="${1}"
|
||||||
|
shift
|
||||||
|
|
||||||
bastille_root_check
|
bastille_root_check
|
||||||
|
set_target "${TARGET}"
|
||||||
|
|
||||||
errors=0
|
errors=0
|
||||||
|
|
||||||
for _jail in ${JAILS}; do
|
for _jail in ${JAILS}; do
|
||||||
|
|
||||||
info "[${_jail}]:"
|
info "[${_jail}]:"
|
||||||
bastille_jail_path=$(/usr/sbin/jls -j "${_jail}" path)
|
|
||||||
|
check_target_is_running "${_jail}" || if [ "${AUTO}" -eq 1 ]; then
|
||||||
|
bastille start "${_jail}"
|
||||||
|
else
|
||||||
|
error_notify "Jail is not running."
|
||||||
|
error_continue "Use [-a|--auto] to auto-start the jail."
|
||||||
|
fi
|
||||||
|
|
||||||
|
bastille_jail_path="${bastille_jailsdir}/${_jail}/root"
|
||||||
if [ -f "/usr/sbin/mport" ]; then
|
if [ -f "/usr/sbin/mport" ]; then
|
||||||
if ! jexec -l -U root "${_jail}" /usr/sbin/mport "$@"; then
|
if ! jexec -l -U root "${_jail}" /usr/sbin/mport "$@"; then
|
||||||
errors=1
|
errors=1
|
||||||
@@ -71,10 +124,8 @@ for _jail in ${JAILS}; do
|
|||||||
errors=1
|
errors=1
|
||||||
fi
|
fi
|
||||||
fi
|
fi
|
||||||
echo
|
|
||||||
done
|
done
|
||||||
|
|
||||||
if [ $errors -ne 0 ]; then
|
if [ $errors -ne 0 ]; then
|
||||||
error_exit "Failed to apply on some jails, please check logs"
|
error_exit "Failed to apply on some jails, please check logs"
|
||||||
exit 1
|
|
||||||
fi
|
fi
|
||||||
|
|||||||
@@ -34,15 +34,47 @@
|
|||||||
. /usr/local/etc/bastille/bastille.conf
|
. /usr/local/etc/bastille/bastille.conf
|
||||||
|
|
||||||
usage() {
|
usage() {
|
||||||
error_exit "Usage: bastille umount TARGET JAIL_PATH"
|
error_notify "Usage: bastille umount [option(s)] TARGET JAIL_PATH"
|
||||||
|
cat << EOF
|
||||||
|
Options:
|
||||||
|
|
||||||
|
-a | --auto Auto mode. Start/stop jail(s) if required.
|
||||||
|
-x | --debug Enable debug mode.
|
||||||
|
|
||||||
|
EOF
|
||||||
|
exit 1
|
||||||
}
|
}
|
||||||
|
|
||||||
# Handle special-case commands first.
|
# Handle options.
|
||||||
case "${1}" in
|
AUTO=0
|
||||||
help|-h|--help)
|
while [ "$#" -gt 0 ]; do
|
||||||
|
case "${1}" in
|
||||||
|
-h|--help|help)
|
||||||
usage
|
usage
|
||||||
;;
|
;;
|
||||||
esac
|
-a|--auto)
|
||||||
|
AUTO=1
|
||||||
|
shift
|
||||||
|
;;
|
||||||
|
-x|--debug)
|
||||||
|
enable_debug
|
||||||
|
shift
|
||||||
|
;;
|
||||||
|
-*)
|
||||||
|
for _opt in $(echo ${1} | sed 's/-//g' | fold -w1); do
|
||||||
|
case ${_opt} in
|
||||||
|
a) AUTO=1 ;;
|
||||||
|
x) enable_debug ;;
|
||||||
|
*) error_exit "Unknown Option: \"${1}\""
|
||||||
|
esac
|
||||||
|
done
|
||||||
|
shift
|
||||||
|
;;
|
||||||
|
*)
|
||||||
|
break
|
||||||
|
;;
|
||||||
|
esac
|
||||||
|
done
|
||||||
|
|
||||||
if [ "$#" -ne 2 ]; then
|
if [ "$#" -ne 2 ]; then
|
||||||
usage
|
usage
|
||||||
@@ -58,6 +90,13 @@ for _jail in ${JAILS}; do
|
|||||||
|
|
||||||
info "[${_jail}]:"
|
info "[${_jail}]:"
|
||||||
|
|
||||||
|
check_target_is_running "${_jail}" || if [ "${AUTO}" -eq 1 ]; then
|
||||||
|
bastille start "${_jail}"
|
||||||
|
else
|
||||||
|
error_notify "Jail is not running."
|
||||||
|
error_exit "Use [-a|--auto] to auto-start the jail."
|
||||||
|
fi
|
||||||
|
|
||||||
_jailpath="$( echo "${bastille_jailsdir}/${_jail}/root/${MOUNT_PATH}" 2>/dev/null | sed 's#//#/#' | sed 's#\\##g')"
|
_jailpath="$( echo "${bastille_jailsdir}/${_jail}/root/${MOUNT_PATH}" 2>/dev/null | sed 's#//#/#' | sed 's#\\##g')"
|
||||||
_mount="$( mount | grep -Eo "[[:blank:]]${_jailpath}[[:blank:]]" )"
|
_mount="$( mount | grep -Eo "[[:blank:]]${_jailpath}[[:blank:]]" )"
|
||||||
_jailpath_fstab="$(echo "${bastille_jailsdir}/${_jail}/root/${MOUNT_PATH}" | sed 's#//#/#g' | sed 's# #\\#g' | sed 's#\\#\\\\040#g')"
|
_jailpath_fstab="$(echo "${bastille_jailsdir}/${_jail}/root/${MOUNT_PATH}" | sed 's#//#/#g' | sed 's# #\\#g' | sed 's#\\#\\\\040#g')"
|
||||||
|
|||||||
Reference in New Issue
Block a user