15
15
# along with this program; if not, write to the Free Software
16
16
# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA
19
# Author: Matt Giuca, Tom Conway
18
# Author: Matt Giuca, Tom Conway, Will Grant
20
'''Python console RPC service.
22
Provides an HTTP RPC interface to a Python console process.
32
from common import (util, studpath, chat)
32
import simplejson as json
36
trampoline_path = os.path.join(conf.ivle_install_dir, "bin/trampoline")
37
python_path = "/usr/bin/python" # Within jail
38
console_dir = "/opt/ivle/scripts" # Within jail
39
console_path = "/opt/ivle/scripts/python-console" # Within jail
42
"""Handler for the Console Service AJAX backend application."""
43
if len(req.path) > 0 and req.path[-1] == os.sep:
47
# The path determines which "command" we are receiving
48
if req.path == "start":
50
elif req.path == "interrupt":
51
handle_chat(req, kind='interrupt')
52
elif req.path == "chat":
54
elif req.path == "block":
55
handle_chat(req, kind="block")
57
req.throw_error(req.HTTP_BAD_REQUEST)
59
def handle_start(req):
60
# Changes the state on the server - must be POST
61
if req.method != "POST":
62
req.throw_error(req.HTTP_BAD_REQUEST)
64
# See if we have been given extra params
65
fields = req.get_fieldstorage()
67
startdir = fields.getfirst("startdir").value
68
working_dir = os.path.join("/home", req.user.login, startdir)
69
except AttributeError:
70
working_dir = os.path.join("/home", req.user.login)
72
# Get the UID of the logged-in user
75
# Set request attributes
76
req.content_type = "text/plain"
77
req.write_html_head_foot = False
80
jail_path = os.path.join(conf.jail_base, req.user.login)
81
(host, port, magic) = start_console(uid, jail_path, working_dir)
83
# Assemble the key and return it.
84
key = cjson.encode({"host": host, "port": port, "magic": magic})
85
req.write(cjson.encode(key.encode("hex")))
87
def handle_chat(req, kind = "chat"):
88
# The request *should* have the following four fields:
89
# host, port, magic: Host and port where the console server lives,
90
# and the secret to use to digitally sign the communication with the
92
# text: Fields to pass along to the console server
93
# It simply acts as a proxy to the console server
94
if req.method != "POST":
95
req.throw_error(req.HTTP_BAD_REQUEST)
96
fields = req.get_fieldstorage()
98
key = cjson.decode(fields.getfirst("key").value.decode("hex"))
102
except AttributeError:
103
# Any of the getfirsts returned None
104
req.throw_error(req.HTTP_BAD_REQUEST)
105
# If text is None, it was probably just an empty line
107
text = fields.getfirst("text").value.decode('utf-8')
108
except AttributeError:
111
msg = {'cmd':kind, 'text':text}
113
response = chat.chat(host, port, msg, magic, decode = False)
114
except socket.error, (enumber, estring):
115
if enumber == errno.ECONNREFUSED:
116
# Timeout: Restart the session
117
jail_path = os.path.join(conf.jail_base, req.user.login)
118
working_dir = os.path.join("/home", req.user.login) # Within jail
120
# Get the UID of the logged-in user
121
uid = req.user.unixid
124
(host, port, magic) = start_console(uid, jail_path, working_dir)
126
# Make a JSON object to tell the browser to restart its console
128
new_key = cjson.encode(
129
{"host": host, "port": port, "magic": magic})
131
"restart": "The IVLE console has timed out due to inactivity",
132
"key": new_key.encode("hex"),
134
response = cjson.encode(json_restart)
38
from ivle.webapp.base.rest import JSONRESTView, write_operation
39
from ivle.webapp.errors import BadRequest
41
# XXX: Should be RPC view, with actions in URL?
42
class ConsoleServiceRESTView(JSONRESTView):
43
'''An RPC interface to a Python console.'''
44
def get_permissions(self, user, config):
136
# Some other error - probably serious
137
raise socket.error, (enumber, estring)
139
req.content_type = "text/plain"
142
def start_console(uid, jail_path, working_dir):
143
"""Starts up a console service for user uid, inside chroot jail jail_path
144
with work directory of working_dir
145
Returns a tupple (host, port, magic)
50
@write_operation('use')
51
def start(self, req, cwd=''):
52
working_dir = os.path.join("/home", req.user.login, cwd)
55
jail_path = os.path.join(req.config['paths']['jails']['mounts'],
57
cons = ivle.console.Console(req.config, req.user, jail_path,
60
# Assemble the key and return it. Yes, it is double-encoded.
61
return {'key': json.dumps({"host": cons.host,
63
"magic": cons.magic}).encode('hex')}
65
@write_operation('use')
66
def chat(self, req, key, text='', cwd='', kind="chat"):
67
# The request *should* have the following four fields:
68
# key: Hex JSON dict of host and port where the console server lives,
69
# and the secret to use to digitally sign the communication with the
71
# text: Fields to pass along to the console server
72
# It simply acts as a proxy to the console server
75
keydict = json.loads(key.decode('hex'))
76
host = keydict['host']
77
port = keydict['port']
78
magic = keydict['magic']
80
raise BadRequest("Invalid console key.")
82
jail_path = os.path.join(req.config['paths']['jails']['mounts'],
85
working_dir = os.path.join("/home", req.user.login, cwd)
87
# XXX: JSONRESTView should do this for us.
88
text = text.decode('utf-8')
90
msg = {'cmd':kind, 'text':text}
93
json_response = ivle.chat.chat(host, port, msg, magic,decode=False)
94
# Snoop the response from python-console to check that it's valid
95
response = json.loads(json_response)
96
except (ValueError, ivle.chat.ProtocolError):
97
# Could not decode the reply from the python-console server
98
response = {"terminate":
100
if "terminate" in response:
101
response = restart_console(req.config, req.user, jail_path,
102
working_dir, response["terminate"])
103
except socket.error, (enumber, estring):
104
if enumber == errno.ECONNREFUSED:
105
# Timeout: Restart the session
106
response = restart_console(req.config, req.user, jail_path,
108
"Timed out due to inactivity")
109
elif enumber == errno.ECONNRESET:
110
# Communication issue: Restart the session
111
response = restart_console(req.config, req.user, jail_path,
115
# Some other error - probably serious
116
raise socket.error, (enumber, estring)
120
def restart_console(config, user, jail_path, working_dir, reason):
121
"""Tells the client that it must be issued a new console since the old
122
console is no longer availible. The client must accept the new key.
123
Returns the JSON response to be given to the client.
148
# TODO: Figure out the host name the console server is running on.
149
host = socket.gethostname()
153
magic = md5.new(uuid.uuid4().bytes).digest().encode('hex')
155
# Try to find a free port on the server.
156
# Just try some random ports in the range [3000,8000)
157
# until we either succeed, or give up. If you think this
158
# sounds risky, it isn't:
159
# For N ports (e.g. 5000) with k (e.g. 100) in use, the
160
# probability of failing to find a free port in t (e.g. 5) tries
161
# is (k / N) ** t (e.g. 3.2*10e-9).
165
port = int(random.uniform(3000, 8000))
167
# Start the console server (port, magic)
168
# trampoline usage: tramp uid jail_dir working_dir script_path args
169
# console usage: python-console port magic
170
cmd = ' '.join([trampoline_path, str(uid), jail_path,
171
console_dir, python_path, console_path,
172
str(port), str(magic), working_dir])
182
# If we can't start the console after 5 attemps (can't find a free port
183
# during random probing, syntax errors, segfaults) throw an exception.
185
raise Exception, "unable to start console service!"
187
return (host, port, magic)
125
# Start a new console server console
126
cons = ivle.console.Console(config, user, jail_path, working_dir)
128
# Make a JSON object to tell the browser to restart its console client
129
new_key = json.dumps(
130
{"host": cons.host, "port": cons.port, "magic": cons.magic})
132
return {"restart": reason, "key": new_key.encode("hex")}