15
15
# along with this program; if not, write to the Free Software
16
16
# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA
19
# Author: Matt Giuca, Tom Conway
18
# Author: Matt Giuca, Tom Conway, Will Grant
20
'''Python console RPC service.
22
Provides an HTTP RPC interface to a Python console process.
35
from common import (util, studpath)
38
trampoline_path = os.path.join(conf.ivle_install_dir, "bin/trampoline")
39
python_path = "/usr/bin/python" # Within jail
40
console_dir = "/opt/ivle/console" # Within jail
41
console_path = "/opt/ivle/console/python-console" # Within jail
44
"""Handler for the Console Service AJAX backend application."""
45
if len(req.path) > 0 and req.path[-1] == os.sep:
49
# The path determines which "command" we are receiving
50
if req.path == "start":
52
elif req.path == "chat":
54
elif req.path == "block":
55
handle_chat(req, kind="block")
57
req.throw_error(req.HTTP_BAD_REQUEST)
59
def handle_start(req):
60
jail_path = os.path.join(conf.jail_base, req.username)
61
working_dir = os.path.join("/home", req.username) # Within jail
63
# Get the UID of the logged-in user
65
(_,_,uid,_,_,_,_) = pwd.getpwnam(req.username)
67
# The user does not exist. This should have already failed the
69
req.throw_error(req.HTTP_INTERNAL_SERVER_ERROR)
71
# Set request attributes
72
req.content_type = "text/plain"
73
req.write_html_head_foot = False
75
# TODO: Figure out the host name the console server is running on.
80
magic = md5.new(uuid.uuid4().bytes).digest().encode('hex')
82
# Try to find a free port on the server.
83
# Just try some random ports in the range [3000,8000)
84
# until we either succeed, or give up. If you think this
85
# sounds risky, it isn't:
86
# For N ports (e.g. 5000) with k (e.g. 100) in use, the
87
# probability of failing to find a free port in t (e.g. 5) tries
88
# is (k / N) ** t (e.g. 3.2*10e-9).
92
port = int(random.uniform(3000, 8000))
94
# Start the console server (port, magic)
95
# trampoline usage: tramp uid jail_dir working_dir script_path args
96
# console usage: python-console port magic
97
# TODO: Pass working_dir as argument, let console cd to it
98
cmd = ' '.join([trampoline_path, str(uid), jail_path,
99
console_dir, python_path, console_path,
100
str(port), str(magic)])
102
print >> sys.stderr, cmd
104
print >> sys.stderr, res
113
raise Exception, "unable to find a free port!"
116
req.write(cjson.encode({"host": host, "port": port, "magic": magic}))
118
def handle_chat(req, kind = "chat"):
119
# The request *should* have the following four fields:
120
# host, port: Host and port where the console server apparently lives
121
# digest, text: Fields to pass along to the console server
122
# It simply acts as a proxy to the console server
123
if req.method != "POST":
124
req.throw_error(req.HTTP_BAD_REQUEST)
125
fields = req.get_fieldstorage()
127
host = fields.getfirst("host").value
128
port = int(fields.getfirst("port").value)
129
digest = fields.getfirst("digest").value
130
except AttributeError:
131
# Any of the getfirsts returned None
132
req.throw_error(req.HTTP_BAD_REQUEST)
133
# If text is None, it was probably just an empty line
135
text = fields.getfirst("text").value
136
except AttributeError:
139
msg = {'cmd':kind, 'text':text, 'digest':digest}
141
sok = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
142
sok.connect((host, port))
143
sok.send(cjson.encode(msg))
145
buf = cStringIO.StringIO()
150
blk = conn.recv(1024, socket.MSG_DONTWAIT)
152
# Exception thrown if it WOULD block (but we
153
# told it not to wait) - ie. we are done
159
req.content_type = "text/plain"
34
from ivle.webapp.base.rest import JSONRESTView, named_operation
35
from ivle.webapp.errors import BadRequest
37
# XXX: Should be RPC view, with actions in URL?
38
class ConsoleServiceRESTView(JSONRESTView):
39
'''An RPC interface to a Python console.'''
40
def get_permissions(self, user):
46
@named_operation('use')
47
def start(self, req, cwd=''):
48
working_dir = os.path.join("/home", req.user.login, cwd)
53
jail_path = os.path.join(req.config['paths']['jails']['mounts'],
55
cons = ivle.console.Console(req.config, uid, jail_path, working_dir)
57
# Assemble the key and return it. Yes, it is double-encoded.
58
return {'key': cjson.encode({"host": cons.host,
60
"magic": cons.magic}).encode('hex')}
62
@named_operation('use')
63
def chat(self, req, key, text='', kind="chat"):
64
# The request *should* have the following four fields:
65
# key: Hex JSON dict of host and port where the console server lives,
66
# and the secret to use to digitally sign the communication with the
68
# text: Fields to pass along to the console server
69
# It simply acts as a proxy to the console server
72
keydict = cjson.decode(key.decode('hex'))
73
host = keydict['host']
74
port = keydict['port']
75
magic = keydict['magic']
77
raise BadRequest("Invalid console key.")
79
jail_path = os.path.join(req.config['paths']['jails']['mounts'],
81
working_dir = os.path.join("/home", req.user.login) # Within jail
84
# XXX: JSONRESTView should do this for us.
85
text = text.decode('utf-8')
87
msg = {'cmd':kind, 'text':text}
89
json_response = ivle.chat.chat(host, port, msg, magic,decode=False)
91
# Snoop the response from python-console to check that it's valid
93
response = cjson.decode(json_response)
94
except cjson.DecodeError:
95
# Could not decode the reply from the python-console server
96
response = {"terminate":
97
"Communication to console process lost"}
98
if "terminate" in response:
99
response = restart_console(req.config, uid, jail_path,
100
working_dir, response["terminate"])
101
except socket.error, (enumber, estring):
102
if enumber == errno.ECONNREFUSED:
103
# Timeout: Restart the session
104
response = restart_console(req.config, uid, jail_path,
106
"The IVLE console has timed out due to inactivity")
107
elif enumber == errno.ECONNRESET:
108
# Communication issue: Restart the session
109
response = restart_console(req.config, uid, jail_path,
111
"Connection with the console has been reset")
113
# Some other error - probably serious
114
raise socket.error, (enumber, estring)
118
def restart_console(config, uid, jail_path, working_dir, reason):
119
"""Tells the client that it must be issued a new console since the old
120
console is no longer availible. The client must accept the new key.
121
Returns the JSON response to be given to the client.
123
# Start a new console server console
124
cons = ivle.console.Console(config, uid, jail_path, working_dir)
126
# Make a JSON object to tell the browser to restart its console client
127
new_key = cjson.encode(
128
{"host": cons.host, "port": cons.port, "magic": cons.magic})
130
return {"restart": reason, "key": new_key.encode("hex")}