Hitonabi
5560c18816
Security: - Passwort-Leak dicht: os-update/reboot fuettern das sudo-Passwort ueber stdin (jobengine: neues stdin_data + sanitisierte Log-Zeile log_cmd). Verifiziert: Secret taucht nicht mehr im Job-Log/ps auf. - /api/status liefert "secured" -> Topbar-Security-Chip zeigt ehrlich, ob Token aktiv. - WS-Token-Auth funktioniert (Query-Param, war bereits in auth.py). - Bind bleibt 0.0.0.0 (kein Aussperren), kein Token erzwungen. UX-Feedback: - Schnellstart-Bug gefixt (Titel/Text brechen um, .qa-main column). - Cookbook: Sortier-Dropdown (Downloads/Likes/Aktualisiert/Trend) wie HuggingFace. - Server & Wartung: Buttons -> selbsterklaerende Aktionszeilen mit Beschreibung; Reboot nur mit rotem Icon (Vollrot-Bug behoben). - Live-Konsole: neue Option "System (ganzer Server)" -> journalctl ueber alle Units. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
92 lines
3.1 KiB
Python
92 lines
3.1 KiB
Python
"""
|
|
Wartungs-Router: Container/Toolbox aktualisieren.
|
|
|
|
Der konkrete Befehl steckt in MC_UPDATE_CMD (z.B. kyuz0 refresh-Skript) und
|
|
laeuft als Hintergrund-Job mit Live-Log. Spaeter wandert hier ggf. mehr
|
|
Server-Wartung hinein (siehe Roadmap: Server-Management).
|
|
"""
|
|
|
|
import shlex
|
|
import subprocess
|
|
import asyncio
|
|
|
|
from fastapi import APIRouter, Depends, HTTPException, WebSocket, WebSocketDisconnect
|
|
from pydantic import BaseModel
|
|
|
|
from auth import auth
|
|
from config import UPDATE_CMD
|
|
from jobengine import start_job
|
|
|
|
router = APIRouter(prefix="/api", dependencies=[Depends(auth)])
|
|
|
|
class PwdReq(BaseModel):
|
|
password: str
|
|
|
|
@router.post("/update")
|
|
def update():
|
|
if not UPDATE_CMD:
|
|
raise HTTPException(400, "Kein Update-Befehl gesetzt (MC_UPDATE_CMD).")
|
|
job_id = start_job(shlex.split(UPDATE_CMD), "update containers")
|
|
return {"job_id": job_id}
|
|
|
|
@router.post("/os-update")
|
|
def os_update(req: PwdReq):
|
|
# Passwort ueber stdin an sudo -S — NICHT als Klartext-Arg (sonst im Job-Log/ps sichtbar).
|
|
args = ["sudo", "-S", "bash", "-c",
|
|
"apt-get update && DEBIAN_FRONTEND=noninteractive apt-get upgrade -y"]
|
|
job_id = start_job(args, "OS-Update (apt)", stdin_data=req.password + "\n",
|
|
log_cmd="$ sudo apt-get update && apt-get upgrade -y")
|
|
return {"job_id": job_id}
|
|
|
|
@router.post("/service/{name}/restart")
|
|
def service_restart(name: str):
|
|
if name not in ("llama-swap", "mission-control"):
|
|
raise HTTPException(400, "Dienst nicht erlaubt.")
|
|
subprocess.Popen(["sudo", "systemctl", "restart", name])
|
|
return {"ok": True, "note": f"Restart {name} getriggert."}
|
|
|
|
@router.post("/reboot")
|
|
def reboot(req: PwdReq):
|
|
# Passwort ueber stdin (nicht in argv -> nicht in ps sichtbar).
|
|
proc = subprocess.Popen(["sudo", "-S", "reboot"], stdin=subprocess.PIPE, text=True)
|
|
try:
|
|
proc.stdin.write(req.password + "\n")
|
|
proc.stdin.flush()
|
|
except Exception: # noqa: BLE001
|
|
pass
|
|
return {"ok": True, "note": "Reboot getriggert."}
|
|
|
|
@router.websocket("/logs/{service}")
|
|
async def stream_logs(websocket: WebSocket, service: str):
|
|
await websocket.accept()
|
|
if service not in ("llama-swap", "mission-control", "system"):
|
|
await websocket.close(code=1008)
|
|
return
|
|
|
|
if service == "system":
|
|
cmd = ["sudo", "journalctl", "-n", "100", "-f"] # ganzer Server (alle Units)
|
|
else:
|
|
cmd = ["sudo", "journalctl", "-u", service, "-n", "100", "-f"]
|
|
process = await asyncio.create_subprocess_exec(
|
|
*cmd,
|
|
stdout=asyncio.subprocess.PIPE,
|
|
stderr=asyncio.subprocess.PIPE
|
|
)
|
|
try:
|
|
while True:
|
|
line = await process.stdout.readline()
|
|
if not line:
|
|
break
|
|
line_str = line.decode("utf-8", errors="replace")
|
|
# Filter spammy polls
|
|
if '"GET /running HTTP' in line_str or '"GET /api/' in line_str:
|
|
continue
|
|
await websocket.send_text(line_str)
|
|
except WebSocketDisconnect:
|
|
pass
|
|
finally:
|
|
try:
|
|
process.terminate()
|
|
except OSError:
|
|
pass
|