103
101
# Needed by python
104
102
'/usr/bin/python%s' % PYTHON_VERSION,
105
# Needed by fileservice
106
'/lib/libcom_err.so.2',
107
'/lib/libcrypt.so.1',
108
'/lib/libkeyutils.so.1',
109
'/lib/libresolv.so.2',
112
'/usr/lib/libapr-1.so.0',
113
'/usr/lib/libaprutil-1.so.0',
114
'/usr/lib/libdb-4.4.so',
115
'/usr/lib/libexpat.so.1',
116
'/usr/lib/libgcrypt.so.11',
117
'/usr/lib/libgnutls.so.13',
118
'/usr/lib/libgpg-error.so.0',
119
'/usr/lib/libgssapi_krb5.so.2',
120
'/usr/lib/libk5crypto.so.3',
121
'/usr/lib/libkrb5.so.3',
122
'/usr/lib/libkrb5support.so.0',
123
'/usr/lib/liblber.so.2',
124
'/usr/lib/libldap_r.so.2',
125
'/usr/lib/libneon.so.26',
126
'/usr/lib/libpq.so.5',
127
'/usr/lib/libsasl2.so.2',
128
'/usr/lib/libsqlite3.so.0',
129
'/usr/lib/libsvn_client-1.so.1',
130
'/usr/lib/libsvn_delta-1.so.1',
131
'/usr/lib/libsvn_diff-1.so.1',
132
'/usr/lib/libsvn_fs-1.so.1',
133
'/usr/lib/libsvn_fs_base-1.so.1',
134
'/usr/lib/libsvn_fs_fs-1.so.1',
135
'/usr/lib/libsvn_ra-1.so.1',
136
'/usr/lib/libsvn_ra_dav-1.so.1',
137
'/usr/lib/libsvn_ra_local-1.so.1',
138
'/usr/lib/libsvn_ra_svn-1.so.1',
139
'/usr/lib/libsvn_repos-1.so.1',
140
'/usr/lib/libsvn_subr-1.so.1',
141
'/usr/lib/libsvn_wc-1.so.1',
142
'/usr/lib/libtasn1.so.3',
143
'/usr/lib/libxml2.so.2',
144
103
# Needed by matplotlib
145
104
'/usr/lib/i686/cmov/libssl.so.0.9.8',
146
105
'/usr/lib/i686/cmov/libcrypto.so.0.9.8',
181
131
'jail/usr/lib/python%s' % PYTHON_VERSION,
182
132
'/usr/share/matplotlib': 'jail/usr/share/matplotlib',
183
133
'/etc/ld.so.conf.d': 'jail/etc/ld.so.conf.d',
184
'/usr/share/nltk': 'jail/usr/share/nltk',
188
"""A configuration option; one of the things written to conf.py."""
189
def __init__(self, option_name, default, prompt, comment):
190
"""Creates a configuration option.
191
option_name: Name of the variable in conf.py. Also name of the
192
command-line argument to setup.py conf.
193
default: Default value for this variable.
194
prompt: (Short) string presented during the interactive prompt in
196
comment: (Long) comment string stored in conf.py. Each line of this
197
string should begin with a '#'.
199
self.option_name = option_name
200
self.default = default
202
self.comment = comment
204
# Configuration options, defaults and descriptions
206
config_options.append(ConfigOption("root_dir", "/",
207
"""Root directory where IVLE is located (in URL space):""",
209
# In URL space, where in the site is IVLE located. (All URLs will be prefixed
211
# eg. "/" or "/ivle"."""))
212
config_options.append(ConfigOption("ivle_install_dir", "/opt/ivle",
213
'Root directory where IVLE will be installed (on the local file '
216
# In the local file system, where IVLE is actually installed.
217
# This directory should contain the "www" and "bin" directories."""))
218
config_options.append(ConfigOption("jail_base", "/home/informatics/jails",
219
"""Location of Directories
220
=======================
221
Root directory where the jails (containing user files) are stored
222
(on the local file system):""",
224
# In the local file system, where are the student/user file spaces located.
225
# The user jails are expected to be located immediately in subdirectories of
226
# this location."""))
227
config_options.append(ConfigOption("subjects_base",
228
"/home/informatics/subjects",
229
"""Root directory where the subject directories (containing worksheets
230
and other per-subject files) are stored (on the local file system):""",
232
# In the local file system, where are the per-subject file spaces located.
233
# The individual subject directories are expected to be located immediately
234
# in subdirectories of this location."""))
235
config_options.append(ConfigOption("exercises_base",
236
"/home/informatics/exercises",
237
"""Root directory where the exercise directories (containing
238
subject-independent exercise sheets) are stored (on the local file
241
# In the local file system, where are the subject-independent exercise sheet
242
# file spaces located."""))
243
config_options.append(ConfigOption("tos_path",
244
"/home/informatics/tos.html",
245
"""Location where the Terms of Service document is stored (on the local
248
# In the local file system, where is the Terms of Service document located."""))
249
config_options.append(ConfigOption("motd_path",
250
"/home/informatics/motd.html",
251
"""Location where the Message of the Day document is stored (on the local
254
# In the local file system, where is the Message of the Day document
255
# located. This is an HTML file (just the body fragment), which will
256
# be displayed on the login page. It is optional."""))
257
config_options.append(ConfigOption("public_host", "public.localhost",
258
"""Hostname which will cause the server to go into "public mode",
259
providing login-free access to student's published work:""",
261
# The server goes into "public mode" if the browser sends a request with this
262
# host. This is for security reasons - we only serve public student files on a
263
# separate domain to the main IVLE site.
264
# Public mode does not use cookies, and serves only public content.
265
# Private mode (normal mode) requires login, and only serves files relevant to
266
# the logged-in user."""))
267
config_options.append(ConfigOption("allowed_uids", "33",
268
"""UID of the web server process which will run IVLE.
269
Only this user may execute the trampoline. May specify multiple users as
270
a comma-separated list.
273
# The User-ID of the web server process which will run IVLE, and any other
274
# users who are allowed to run the trampoline. This is stores as a string of
275
# comma-separated integers, simply because it is not used within Python, only
276
# used by the setup program to write to conf.h (see setup.py config)."""))
277
config_options.append(ConfigOption("db_host", "localhost",
278
"""PostgreSQL Database config
279
==========================
280
Hostname of the DB server:""",
282
### PostgreSQL Database config ###
283
# Database server hostname"""))
284
config_options.append(ConfigOption("db_port", "5432",
285
"""Port of the DB server:""",
287
# Database server port"""))
288
config_options.append(ConfigOption("db_dbname", "ivle",
289
"""Database name:""",
292
config_options.append(ConfigOption("db_forumdbname", "ivle_forum",
293
"""Forum Database name:""",
295
# Forum Database name"""))
296
config_options.append(ConfigOption("db_user", "postgres",
297
"""Username for DB server login:""",
299
# Database username"""))
300
config_options.append(ConfigOption("db_password", "",
301
"""Password for DB server login:
302
(Caution: This password is stored in plaintext in lib/conf/conf.py)""",
304
# Database password"""))
305
config_options.append(ConfigOption("auth_modules", "ldap_auth",
306
"""Authentication config
307
=====================
308
Comma-separated list of authentication modules. Only "ldap" is available
311
# Comma-separated list of authentication modules.
312
# These refer to importable Python modules in the www/auth directory.
313
# Modules "ldap" and "guest" are available in the source tree, but
314
# other modules may be plugged in to auth against organisation-specific
315
# auth backends."""))
316
config_options.append(ConfigOption("ldap_url", "ldaps://www.example.com",
317
"""(LDAP options are only relevant if "ldap" is included in the list of
319
URL for LDAP authentication server:""",
321
# URL for LDAP authentication server"""))
322
config_options.append(ConfigOption("ldap_format_string",
323
"uid=%s,ou=users,o=example",
324
"""Format string for LDAP auth request:
325
(Must contain a single "%s" for the user's login name)""",
327
# Format string for LDAP auth request
328
# (Must contain a single "%s" for the user's login name)"""))
329
config_options.append(ConfigOption("svn_addr", "http://svn.localhost/",
332
The base url for accessing subversion repositories:""",
334
# The base url for accessing subversion repositories."""))
335
config_options.append(ConfigOption("svn_conf", "/opt/ivle/svn/svn.conf",
336
"""The location of the subversion configuration file used by apache
337
to host the user repositories:""",
339
# The location of the subversion configuration file used by
340
# apache to host the user repositories."""))
341
config_options.append(ConfigOption("svn_repo_path", "/home/informatics/repositories",
342
"""The root directory for the subversion repositories:""",
344
# The root directory for the subversion repositories."""))
345
config_options.append(ConfigOption("svn_auth_ivle", "/opt/ivle/svn/ivle.auth",
346
"""The location of the password file used to authenticate users
347
of the subversion repository from the ivle server:""",
349
# The location of the password file used to authenticate users
350
# of the subversion repository from the ivle server."""))
351
config_options.append(ConfigOption("svn_auth_local", "/opt/ivle/svn/local.auth",
352
"""The location of the password file used to authenticate local users
353
of the subversion repository:""",
355
# The location of the password file used to authenticate local users
356
# of the subversion repository."""))
357
config_options.append(ConfigOption("usrmgt_host", "localhost",
358
"""User Management Server config
359
============================
360
The hostname where the usrmgt-server runs:""",
362
# The hostname where the usrmgt-server runs."""))
363
config_options.append(ConfigOption("usrmgt_port", "2178",
364
"""The port where the usrmgt-server runs:""",
366
# The port where the usrmgt-server runs."""))
367
config_options.append(ConfigOption("usrmgt_magic", "",
368
"""The password for the usrmgt-server:""",
370
# The password for the usrmgt-server."""))
372
136
# Try importing existing conf, but if we can't just set up defaults
373
137
# The reason for this is that these settings are used by other phases
374
138
# of setup besides conf, so we need to know them.
375
139
# Also this allows you to hit Return to accept the existing value.
377
confmodule = __import__("lib/conf/conf")
378
for opt in config_options:
380
globals()[opt.option_name] = confmodule.__dict__[opt.option_name]
382
globals()[opt.option_name] = opt.default
141
confmodule = __import__("www/conf/conf")
143
root_dir = confmodule.root_dir
147
ivle_install_dir = confmodule.ivle_install_dir
149
ivle_install_dir = "/opt/ivle"
151
public_host = confmodule.public_host
153
public_host = "public.localhost"
155
jail_base = confmodule.jail_base
157
jail_base = "/home/informatics/jails"
159
subjects_base = confmodule.subjects_base
161
subjects_base = "/home/informatics/subjects"
383
162
except ImportError:
384
163
# Just set reasonable defaults
385
for opt in config_options:
386
globals()[opt.option_name] = opt.default
165
ivle_install_dir = "/opt/ivle"
166
public_host = "public.localhost"
167
jail_base = "/home/informatics/jails"
168
subjects_base = "/home/informatics/subjects"
388
172
# Try importing install_list, but don't fail if we can't, because listmake can
389
173
# function without it.
662
432
print """This tool will create the following files:
668
435
prompting you for details about your configuration. The file will be
669
436
overwritten if it already exists. It will *not* install or deploy IVLE.
671
438
Please hit Ctrl+C now if you do not wish to do this.
672
""" % (conffile, jailconffile, conf_hfile, phpBBconffile, usrmgtserver_initdfile)
439
""" % (conffile, conf_hfile)
674
441
# Get information from the administrator
675
442
# If EOF is encountered at any time during the questioning, just exit
678
for opt in config_options:
679
globals()[opt.option_name] = \
680
query_user(globals()[opt.option_name], opt.prompt)
445
root_dir = query_user(root_dir,
446
"""Root directory where IVLE is located (in URL space):""")
447
ivle_install_dir = query_user(ivle_install_dir,
448
'Root directory where IVLE will be installed (on the local file '
450
jail_base = query_user(jail_base,
451
"""Root directory where the jails (containing user files) are stored
452
(on the local file system):""")
453
subjects_base = query_user(subjects_base,
454
"""Root directory where the subject directories (containing worksheets
455
and other per-subject files) are stored (on the local file system):""")
456
public_host = query_user(public_host,
457
"""Hostname which will cause the server to go into "public mode",
458
providing login-free access to student's published work:""")
459
allowed_uids = query_user(allowed_uids,
460
"""UID of the web server process which will run IVLE.
461
Only this user may execute the trampoline. May specify multiple users as
462
a comma-separated list.
682
466
opts = dict(opts)
683
467
# Non-interactive mode. Parse the options.
684
for opt in config_options:
685
if '--' + opt.option_name in opts:
686
globals()[opt.option_name] = opts['--' + opt.option_name]
468
if '--root_dir' in opts:
469
root_dir = opts['--root_dir']
470
if '--ivle_install_dir' in opts:
471
ivle_install_dir = opts['--ivle_install_dir']
472
if '--jail_base' in opts:
473
jail_base = opts['--jail_base']
474
if '--subjects_base' in opts:
475
jail_base = opts['--subjects_base']
476
if '--public_host' in opts:
477
public_host = opts['--public_host']
478
if '--allowed_uids' in opts:
479
allowed_uids = opts['--allowed_uids']
688
481
# Error handling on input values
690
allowed_uids_list = map(int, allowed_uids.split(','))
483
allowed_uids = map(int, allowed_uids.split(','))
691
484
except ValueError:
692
485
print >>sys.stderr, (
693
486
"Invalid UID list (%s).\n"
694
487
"Must be a comma-separated list of integers." % allowed_uids)
697
db_port = int(db_port)
698
if db_port < 0 or db_port >= 65536: raise ValueError()
700
print >>sys.stderr, (
701
"Invalid DB port (%s).\n"
702
"Must be an integer between 0 and 65535." % repr(db_port))
705
usrmgt_port = int(usrmgt_port)
706
if usrmgt_port < 0 or usrmgt_port >= 65536: raise ValueError()
708
print >>sys.stderr, (
709
"Invalid user management port (%s).\n"
710
"Must be an integer between 0 and 65535." % repr(usrmgt_port))
713
# Generate the forum secret
714
forum_secret = hashlib.md5(uuid.uuid4().bytes).hexdigest()
716
# Write lib/conf/conf.py
490
# Write www/conf/conf.py
719
493
conf = open(conffile, "w")
723
497
# Miscellaneous application settings
726
for opt in config_options:
727
conf.write('%s\n%s = %s\n' % (opt.comment, opt.option_name,
728
repr(globals()[opt.option_name])))
730
# Add the forum secret to the config file (regenerated each config)
731
conf.write('forum_secret = "%s"\n' % (forum_secret))
734
except IOError, (errno, strerror):
735
print "IO error(%s): %s" % (errno, strerror)
738
print "Successfully wrote lib/conf/conf.py"
740
# Write conf/jailconf.py
743
conf = open(jailconffile, "w")
745
# In the "in-jail" version of conf, we don't need MOST of the details
746
# (it would be a security risk to have them here).
747
# So we just write root_dir, and jail_base is "/".
748
# (jail_base being "/" means "jail-relative" paths are relative to "/"
749
# when inside the jail.)
750
conf.write("""# IVLE Configuration File
752
# Miscellaneous application settings
753
# (User jail version)
756
500
# In URL space, where in the site is IVLE located. (All URLs will be prefixed
758
502
# eg. "/" or "/ivle".
505
# In the local file system, where IVLE is actually installed.
506
# This directory should contain the "www" and "bin" directories.
507
ivle_install_dir = "%s"
509
# The server goes into "public mode" if the browser sends a request with this
510
# host. This is for security reasons - we only serve public student files on a
511
# separate domain to the main IVLE site.
512
# Public mode does not use cookies, and serves only public content.
513
# Private mode (normal mode) requires login, and only serves files relevant to
514
# the logged-in user.
761
517
# In the local file system, where are the student/user file spaces located.
762
518
# The user jails are expected to be located immediately in subdirectories of
766
# The hostname for serving publicly accessible pages
768
""" % (repr(root_dir),repr(public_host)))
522
# In the local file system, where are the per-subject file spaces located.
523
# The individual subject directories are expected to be located immediately
524
# in subdirectories of this location.
526
""" % (root_dir, ivle_install_dir, public_host, jail_base, subjects_base))
771
529
except IOError, (errno, strerror):
772
530
print "IO error(%s): %s" % (errno, strerror)
775
print "Successfully wrote lib/conf/jailconf.py"
533
print "Successfully wrote www/conf/conf.py"
777
535
# Write trampoline/conf.h
810
565
print "Successfully wrote trampoline/conf.h"
812
# Write www/php/phpBB3/config.php
815
conf = open(phpBBconffile, "w")
818
if db_host == 'localhost':
819
forumdb_host = '127.0.0.1'
821
forumdb_host = db_host
824
// phpBB 3.0.x auto-generated configuration file
825
// Do not change anything in this file!
827
$dbhost = '""" + forumdb_host + """';
828
$dbport = '""" + str(db_port) + """';
829
$dbname = '""" + db_forumdbname + """';
830
$dbuser = '""" + db_user + """';
831
$dbpasswd = '""" + db_password + """';
833
$table_prefix = 'phpbb_';
835
$load_extensions = '';
836
@define('PHPBB_INSTALLED', true);
837
// @define('DEBUG', true);
838
//@define('DEBUG_EXTRA', true);
840
$forum_secret = '""" + forum_secret +"""';
844
except IOError, (errno, strerror):
845
print "IO error(%s): %s" % (errno, strerror)
848
print "Successfully wrote www/php/phpBB3/config.php"
850
# Write lib/conf/usrmgt-server.init
853
conf = open(usrmgtserver_initdfile, "w")
855
conf.write( '''#! /bin/sh
857
# Works for Ubuntu. Check before using on other distributions
860
# Provides: usrmgt-server
861
# Required-Start: $syslog $networking $urandom
862
# Required-Stop: $syslog
863
# Default-Start: 2 3 4 5
865
# Short-Description: IVLE user management server
866
# Description: Daemon connecting to the IVLE user management database.
869
PATH=/sbin:/bin:/usr/sbin:/usr/bin
870
DESC="IVLE user management server"
872
DAEMON=/opt/ivle/scripts/$NAME
873
DAEMON_ARGS="''' + str(usrmgt_port) + ''' ''' + usrmgt_magic + '''"
874
PIDFILE=/var/run/$NAME.pid
875
SCRIPTNAME=/etc/init.d/usrmgt-server
877
# Exit if the daemon does not exist
878
test -f $DAEMON || exit 0
880
# Load the VERBOSE setting and other rcS variables
881
[ -f /etc/default/rcS ] && . /etc/default/rcS
883
# Define LSB log_* functions.
884
# Depend on lsb-base (>= 3.0-6) to ensure that this file is present.
885
. /lib/lsb/init-functions
888
# Function that starts the daemon/service
893
# 0 if daemon has been started
894
# 1 if daemon was already running
895
# 2 if daemon could not be started
896
start-stop-daemon --start --quiet --pidfile $PIDFILE --exec $DAEMON --test > /dev/null \
898
start-stop-daemon --start --quiet --pidfile $PIDFILE --exec $DAEMON -- \
901
# Add code here, if necessary, that waits for the process to be ready
902
# to handle requests from services started subsequently which depend
903
# on this one. As a last resort, sleep for some time.
907
# Function that stops the daemon/service
912
# 0 if daemon has been stopped
913
# 1 if daemon was already stopped
914
# 2 if daemon could not be stopped
915
# other if a failure occurred
916
start-stop-daemon --stop --quiet --retry=TERM/30/KILL/5 --pidfile $PIDFILE --name $NAME
918
[ "$RETVAL" = 2 ] && return 2
919
# Wait for children to finish too if this is a daemon that forks
920
# and if the daemon is only ever run from this initscript.
921
# If the above conditions are not satisfied then add some other code
922
# that waits for the process to drop all resources that could be
923
# needed by services started subsequently. A last resort is to
924
# sleep for some time.
925
start-stop-daemon --stop --quiet --oknodo --retry=0/30/KILL/5 --exec $DAEMON
926
[ "$?" = 2 ] && return 2
927
# Many daemons don't delete their pidfiles when they exit.
933
# Function that sends a SIGHUP to the daemon/service
937
# If the daemon can reload its configuration without
938
# restarting (for example, when it is sent a SIGHUP),
939
# then implement that here.
941
start-stop-daemon --stop --signal 1 --quiet --pidfile $PIDFILE --name $NAME
947
[ "$VERBOSE" != no ] && log_daemon_msg "Starting $DESC" "$NAME"
950
0|1) [ "$VERBOSE" != no ] && log_end_msg 0 ;;
951
2) [ "$VERBOSE" != no ] && log_end_msg 1 ;;
955
[ "$VERBOSE" != no ] && log_daemon_msg "Stopping $DESC" "$NAME"
958
0|1) [ "$VERBOSE" != no ] && log_end_msg 0 ;;
959
2) [ "$VERBOSE" != no ] && log_end_msg 1 ;;
962
#reload|force-reload)
964
# If do_reload() is not implemented then leave this commented out
965
# and leave 'force-reload' as an alias for 'restart'.
967
#log_daemon_msg "Reloading $DESC" "$NAME"
971
restart|force-reload)
973
# If the "reload" option is implemented then remove the
974
# 'force-reload' alias
976
log_daemon_msg "Restarting $DESC" "$NAME"
983
1) log_end_msg 1 ;; # Old process is still running
984
*) log_end_msg 1 ;; # Failed to start
994
#echo "Usage: $SCRIPTNAME {start|stop|restart|reload|force-reload}" >&2
995
echo "Usage: $SCRIPTNAME {start|stop|restart|force-reload}" >&2
1004
except IOError, (errno, strerror):
1005
print "IO error(%s): %s" % (errno, strerror)
1008
# fix permissions as the file contains the database password
1010
os.chmod('doc/setup/usrmgt-server.init', 0600)
1011
except OSError, (errno, strerror):
1012
print "WARNING: Couldn't chmod doc/setup/usrmgt-server.init:"
1013
print "OS error(%s): %s" % (errno, strerror)
1015
print "Successfully wrote lib/conf/usrmgt-server.init"
1018
568
print "You may modify the configuration at any time by editing"
1021
570
print conf_hfile
1023
print usrmgtserver_initdfile
1045
592
action_mkdir('jail/home', dry)
1046
593
action_mkdir('jail/tmp', dry)
1048
# Chmod the tmp directory to world writable
1049
action_chmod_w('jail/tmp', dry)
1051
595
# Copy all console and operating system files into the jail
1052
action_copylist(install_list.list_scripts, 'jail/opt/ivle', dry)
596
action_copylist(install_list.list_console, 'jail/opt/ivle', dry)
1053
597
copy_os_files_jail(dry)
1054
598
# Chmod the python console
1055
action_chmod_x('jail/opt/ivle/scripts/python-console', dry)
1056
action_chmod_x('jail/opt/ivle/scripts/fileservice', dry)
1057
action_chmod_x('jail/opt/ivle/scripts/serveservice', dry)
599
action_chmod_x('jail/opt/ivle/console/python-console', dry)
1059
# Also copy the IVLE lib directory into the jail
1060
# This is necessary for running certain scripts
1061
action_copylist(install_list.list_lib, 'jail/opt/ivle', dry)
1062
# IMPORTANT: The file jail/opt/ivle/lib/conf/conf.py contains details
1063
# which could compromise security if left in the jail (such as the DB
1065
# The "safe" version is in jailconf.py. Delete conf.py and replace it with
1067
action_copyfile('lib/conf/jailconf.py',
1068
'jail/opt/ivle/lib/conf/conf.py', dry)
1070
602
# Compile .py files into .pyc or .pyo files
1071
603
compileall.compile_dir('www', quiet=True)
1072
compileall.compile_dir('lib', quiet=True)
1073
compileall.compile_dir('scripts', quiet=True)
1074
compileall.compile_dir('jail/opt/ivle/lib', quiet=True)
1076
# Set up ivle.pth inside the jail
1077
# Need to set /opt/ivle/lib to be on the import path
1079
"jail/usr/lib/python%s/site-packages/ivle.pth" % PYTHON_VERSION
1080
f = open(ivle_pth, 'w')
1081
f.write('/opt/ivle/lib\n')
604
compileall.compile_dir('console', quiet=True)