71
# Import modules from the website is tricky since they're in the www
73
sys.path.append(os.path.join(os.getcwd(), 'lib'))
75
import common.makeuser
77
# Determine which Python version (2.4 or 2.5, for example) we are running,
78
# and use that as the filename to the Python directory.
79
# Just get the first 3 characters of sys.version.
80
PYTHON_VERSION = sys.version[0:3]
82
# Operating system files to copy over into the jail.
83
# These will be copied from the given place on the OS file system into the
84
# same place within the jail.
87
'/lib/tls/i686/cmov/libc.so.6',
88
'/lib/tls/i686/cmov/libdl.so.2',
89
'/lib/tls/i686/cmov/libm.so.6',
90
'/lib/tls/i686/cmov/libpthread.so.0',
91
'/lib/tls/i686/cmov/libutil.so.1',
94
# These 2 files do not exist in Ubuntu
95
#'/etc/ld.so.preload',
96
#'/etc/ld.so.nohwcap',
102
'/usr/bin/python%s' % PYTHON_VERSION,
103
# Needed by fileservice
104
'/lib/libcom_err.so.2',
105
'/lib/libcrypt.so.1',
106
'/lib/libkeyutils.so.1',
107
'/lib/libresolv.so.2',
110
'/usr/lib/libapr-1.so.0',
111
'/usr/lib/libaprutil-1.so.0',
112
'/usr/lib/libdb-4.4.so',
113
'/usr/lib/libexpat.so.1',
114
'/usr/lib/libgcrypt.so.11',
115
'/usr/lib/libgnutls.so.13',
116
'/usr/lib/libgpg-error.so.0',
117
'/usr/lib/libgssapi_krb5.so.2',
118
'/usr/lib/libk5crypto.so.3',
119
'/usr/lib/libkrb5.so.3',
120
'/usr/lib/libkrb5support.so.0',
121
'/usr/lib/liblber.so.2',
122
'/usr/lib/libldap_r.so.2',
123
'/usr/lib/libneon.so.26',
124
'/usr/lib/libpq.so.5',
125
'/usr/lib/libsasl2.so.2',
126
'/usr/lib/libsqlite3.so.0',
127
'/usr/lib/libsvn_client-1.so.1',
128
'/usr/lib/libsvn_delta-1.so.1',
129
'/usr/lib/libsvn_diff-1.so.1',
130
'/usr/lib/libsvn_fs-1.so.1',
131
'/usr/lib/libsvn_fs_base-1.so.1',
132
'/usr/lib/libsvn_fs_fs-1.so.1',
133
'/usr/lib/libsvn_ra-1.so.1',
134
'/usr/lib/libsvn_ra_dav-1.so.1',
135
'/usr/lib/libsvn_ra_local-1.so.1',
136
'/usr/lib/libsvn_ra_svn-1.so.1',
137
'/usr/lib/libsvn_repos-1.so.1',
138
'/usr/lib/libsvn_subr-1.so.1',
139
'/usr/lib/libsvn_wc-1.so.1',
140
'/usr/lib/libtasn1.so.3',
141
'/usr/lib/libxml2.so.2',
142
# Needed by matplotlib
143
'/usr/lib/i686/cmov/libssl.so.0.9.8',
144
'/usr/lib/i686/cmov/libcrypto.so.0.9.8',
145
'/lib/tls/i686/cmov/libnsl.so.1',
146
'/usr/lib/libz.so.1',
147
'/usr/lib/atlas/liblapack.so.3',
148
'/usr/lib/atlas/libblas.so.3',
149
'/usr/lib/libg2c.so.0',
150
'/usr/lib/libstdc++.so.6',
151
'/usr/lib/libfreetype.so.6',
152
'/usr/lib/libpng12.so.0',
153
'/usr/lib/libBLT.2.4.so.8.4',
154
'/usr/lib/libtk8.4.so.0',
155
'/usr/lib/libtcl8.4.so.0',
156
'/usr/lib/tcl8.4/init.tcl',
157
'/usr/lib/libX11.so.6',
158
'/usr/lib/libXau.so.6',
159
'/usr/lib/libXdmcp.so.6',
160
'/lib/libgcc_s.so.1',
163
'/lib/libnss_dns.so.2',
164
#'/lib/libnss_mdns4.so',
169
'/etc/nsswitch.conf',
170
'/lib/libnss_files.so.2',
172
# Symlinks to make within the jail. Src mapped to dst.
174
'python%s' % PYTHON_VERSION: 'jail/usr/bin/python',
176
# Trees to copy. Src mapped to dst (these will be passed to action_copytree).
178
'/usr/lib/python%s' % PYTHON_VERSION:
179
'jail/usr/lib/python%s' % PYTHON_VERSION,
180
'/usr/share/matplotlib': 'jail/usr/share/matplotlib',
181
'/etc/ld.so.conf.d': 'jail/etc/ld.so.conf.d',
185
"""A configuration option; one of the things written to conf.py."""
186
def __init__(self, option_name, default, prompt, comment):
187
"""Creates a configuration option.
188
option_name: Name of the variable in conf.py. Also name of the
189
command-line argument to setup.py conf.
190
default: Default value for this variable.
191
prompt: (Short) string presented during the interactive prompt in
193
comment: (Long) comment string stored in conf.py. Each line of this
194
string should begin with a '#'.
196
self.option_name = option_name
197
self.default = default
199
self.comment = comment
201
# Configuration options, defaults and descriptions
203
config_options.append(ConfigOption("root_dir", "/",
204
"""Root directory where IVLE is located (in URL space):""",
206
# In URL space, where in the site is IVLE located. (All URLs will be prefixed
208
# eg. "/" or "/ivle"."""))
209
config_options.append(ConfigOption("ivle_install_dir", "/opt/ivle",
210
'Root directory where IVLE will be installed (on the local file '
213
# In the local file system, where IVLE is actually installed.
214
# This directory should contain the "www" and "bin" directories."""))
215
config_options.append(ConfigOption("jail_base", "/home/informatics/jails",
216
"""Location of Directories
217
=======================
218
Root directory where the jails (containing user files) are stored
219
(on the local file system):""",
221
# In the local file system, where are the student/user file spaces located.
222
# The user jails are expected to be located immediately in subdirectories of
223
# this location."""))
224
config_options.append(ConfigOption("subjects_base",
225
"/home/informatics/subjects",
226
"""Root directory where the subject directories (containing worksheets
227
and other per-subject files) are stored (on the local file system):""",
229
# In the local file system, where are the per-subject file spaces located.
230
# The individual subject directories are expected to be located immediately
231
# in subdirectories of this location."""))
232
config_options.append(ConfigOption("exercises_base",
233
"/home/informatics/exercises",
234
"""Root directory where the exercise directories (containing
235
subject-independent exercise sheets) are stored (on the local file
238
# In the local file system, where are the subject-independent exercise sheet
239
# file spaces located."""))
240
config_options.append(ConfigOption("public_host", "public.localhost",
241
"""Hostname which will cause the server to go into "public mode",
242
providing login-free access to student's published work:""",
244
# The server goes into "public mode" if the browser sends a request with this
245
# host. This is for security reasons - we only serve public student files on a
246
# separate domain to the main IVLE site.
247
# Public mode does not use cookies, and serves only public content.
248
# Private mode (normal mode) requires login, and only serves files relevant to
249
# the logged-in user."""))
250
config_options.append(ConfigOption("allowed_uids", "33",
251
"""UID of the web server process which will run IVLE.
252
Only this user may execute the trampoline. May specify multiple users as
253
a comma-separated list.
256
# The User-ID of the web server process which will run IVLE, and any other
257
# users who are allowed to run the trampoline. This is stores as a string of
258
# comma-separated integers, simply because it is not used within Python, only
259
# used by the setup program to write to conf.h (see setup.py config)."""))
260
config_options.append(ConfigOption("db_host", "localhost",
261
"""PostgreSQL Database config
262
==========================
263
Hostname of the DB server:""",
265
### PostgreSQL Database config ###
266
# Database server hostname"""))
267
config_options.append(ConfigOption("db_port", "5432",
268
"""Port of the DB server:""",
270
# Database server port"""))
271
config_options.append(ConfigOption("db_dbname", "ivle",
272
"""Database name:""",
275
config_options.append(ConfigOption("db_forumdbname", "ivle_forum",
276
"""Forum Database name:""",
278
# Forum Database name"""))
279
config_options.append(ConfigOption("db_user", "postgres",
280
"""Username for DB server login:""",
282
# Database username"""))
283
config_options.append(ConfigOption("db_password", "",
284
"""Password for DB server login:
285
(Caution: This password is stored in plaintext in lib/conf/conf.py)""",
287
# Database password"""))
288
config_options.append(ConfigOption("auth_modules", "ldap_auth",
289
"""Authentication config
290
=====================
291
Comma-separated list of authentication modules. Only "ldap" is available
294
# Comma-separated list of authentication modules.
295
# These refer to importable Python modules in the www/auth directory.
296
# Modules "ldap" and "guest" are available in the source tree, but
297
# other modules may be plugged in to auth against organisation-specific
298
# auth backends."""))
299
config_options.append(ConfigOption("ldap_url", "ldaps://www.example.com",
300
"""(LDAP options are only relevant if "ldap" is included in the list of
302
URL for LDAP authentication server:""",
304
# URL for LDAP authentication server"""))
305
config_options.append(ConfigOption("ldap_format_string",
306
"uid=%s,ou=users,o=example",
307
"""Format string for LDAP auth request:
308
(Must contain a single "%s" for the user's login name)""",
310
# Format string for LDAP auth request
311
# (Must contain a single "%s" for the user's login name)"""))
312
config_options.append(ConfigOption("svn_addr", "http://svn.localhost/",
315
The base url for accessing subversion repositories:""",
317
# The base url for accessing subversion repositories."""))
318
config_options.append(ConfigOption("svn_conf", "/opt/ivle/svn/svn.conf",
319
"""The location of the subversion configuration file used by apache
320
to host the user repositories:""",
322
# The location of the subversion configuration file used by
323
# apache to host the user repositories."""))
324
config_options.append(ConfigOption("svn_repo_path", "/home/informatics/repositories",
325
"""The root directory for the subversion repositories:""",
327
# The root directory for the subversion repositories."""))
328
config_options.append(ConfigOption("svn_auth_ivle", "/opt/ivle/svn/ivle.auth",
329
"""The location of the password file used to authenticate users
330
of the subversion repository from the ivle server:""",
332
# The location of the password file used to authenticate users
333
# of the subversion repository from the ivle server."""))
334
config_options.append(ConfigOption("svn_auth_local", "/opt/ivle/svn/local.auth",
335
"""The location of the password file used to authenticate local users
336
of the subversion repository:""",
338
# The location of the password file used to authenticate local users
339
# of the subversion repository."""))
340
config_options.append(ConfigOption("usrmgt_host", "localhost",
341
"""User Management Server config
342
============================
343
The hostname where the usrmgt-server runs:""",
345
# The hostname where the usrmgt-server runs."""))
346
config_options.append(ConfigOption("usrmgt_port", "2178",
347
"""The port where the usrmgt-server runs:""",
349
# The port where the usrmgt-server runs."""))
350
config_options.append(ConfigOption("usrmgt_magic", "",
351
"""The password for the usrmgt-server:""",
353
# The password for the usrmgt-server."""))
71
355
# Try importing existing conf, but if we can't just set up defaults
72
356
# The reason for this is that these settings are used by other phases
73
357
# of setup besides conf, so we need to know them.
74
358
# Also this allows you to hit Return to accept the existing value.
76
confmodule = __import__("www/conf/conf")
78
root_dir = confmodule.root_dir
82
ivle_install_dir = confmodule.ivle_install_dir
84
ivle_install_dir = "/opt/ivle"
86
jail_base = confmodule.jail_base
88
jail_base = "/home/informatics/jails"
360
confmodule = __import__("lib/conf/conf")
361
for opt in config_options:
363
globals()[opt.option_name] = confmodule.__dict__[opt.option_name]
365
globals()[opt.option_name] = opt.default
89
366
except ImportError:
90
367
# Just set reasonable defaults
92
ivle_install_dir = "/opt/ivle"
93
jail_base = "/home/informatics/jails"
368
for opt in config_options:
369
globals()[opt.option_name] = opt.default
97
371
# Try importing install_list, but don't fail if we can't, because listmake can
98
372
# function without it.
332
643
print """This tool will create the following files:
335
647
prompting you for details about your configuration. The file will be
336
648
overwritten if it already exists. It will *not* install or deploy IVLE.
338
650
Please hit Ctrl+C now if you do not wish to do this.
339
""" % (conffile, conf_hfile)
651
""" % (conffile, jailconffile, conf_hfile)
341
653
# Get information from the administrator
342
654
# If EOF is encountered at any time during the questioning, just exit
345
root_dir = query_user(root_dir,
346
"""Root directory where IVLE is located (in URL space):""")
347
ivle_install_dir = query_user(ivle_install_dir,
348
'Root directory where IVLE will be installed (on the local file '
350
jail_base = query_user(jail_base,
351
"""Root directory where the jails (containing user files) are stored
352
(on the local file system):""")
353
allowed_uids = query_user(allowed_uids,
354
"""UID of the web server process which will run IVLE.
355
Only this user may execute the trampoline. May specify multiple users as
356
a comma-separated list.
657
for opt in config_options:
658
globals()[opt.option_name] = \
659
query_user(globals()[opt.option_name], opt.prompt)
360
661
opts = dict(opts)
361
662
# Non-interactive mode. Parse the options.
362
if '--root_dir' in opts:
363
root_dir = opts['--root_dir']
364
if '--ivle_install_dir' in opts:
365
ivle_install_dir = opts['--ivle_install_dir']
366
if '--jail_base' in opts:
367
jail_base = opts['--jail_base']
368
if '--allowed_uids' in opts:
369
allowed_uids = opts['--allowed_uids']
663
for opt in config_options:
664
if '--' + opt.option_name in opts:
665
globals()[opt.option_name] = opts['--' + opt.option_name]
371
667
# Error handling on input values
373
allowed_uids = map(int, allowed_uids.split(','))
669
allowed_uids_list = map(int, allowed_uids.split(','))
374
670
except ValueError:
375
671
print >>sys.stderr, (
376
672
"Invalid UID list (%s).\n"
377
673
"Must be a comma-separated list of integers." % allowed_uids)
676
db_port = int(db_port)
677
if db_port < 0 or db_port >= 65536: raise ValueError()
679
print >>sys.stderr, (
680
"Invalid DB port (%s).\n"
681
"Must be an integer between 0 and 65535." % repr(db_port))
684
usrmgt_port = int(usrmgt_port)
685
if usrmgt_port < 0 or usrmgt_port >= 65536: raise ValueError()
687
print >>sys.stderr, (
688
"Invalid user management port (%s).\n"
689
"Must be an integer between 0 and 65535." % repr(usrmgt_port))
380
# Write www/conf/conf.py
692
# Write lib/conf/conf.py
383
695
conf = open(conffile, "w")
522
929
# chown trampoline to root and set setuid bit
523
930
action_chown_setuid(tramppath, dry)
525
# Copy the www directory using the list
932
# Create a scripts directory to put the usrmgt-server in.
933
action_mkdir(os.path.join(ivle_install_dir, 'scripts'), dry)
934
usrmgtpath = os.path.join(ivle_install_dir, 'scripts/usrmgt-server')
935
action_copyfile('scripts/usrmgt-server', usrmgtpath, dry)
936
action_chmod_x(usrmgtpath, dry)
938
# Copy the www and lib directories using the list
526
939
action_copylist(install_list.list_www, ivle_install_dir, dry)
940
action_copylist(install_list.list_lib, ivle_install_dir, dry)
942
# Copy the php directory
943
action_copytree('www/php/phpBB3',os.path.join(ivle_install_dir,'www/php/phpBB3'),
529
947
# Copy the local jail directory built by the build action
530
948
# to the jails template directory (it will be used as a template
531
949
# for all the students' jails).
532
950
action_copytree('jail', os.path.join(jail_base, 'template'), dry)
952
# Copy the subjects and exercises directories across
953
action_copylist(install_list.list_subjects, subjects_base, dry,
955
action_copylist(install_list.list_exercises, exercises_base, dry,
956
srcdir="./exercises")
958
# Append IVLE path to ivle.pth in python site packages
959
# (Unless it's already there)
960
ivle_pth = os.path.join(sys.prefix,
961
"lib/python%s/site-packages/ivle.pth" % PYTHON_VERSION)
962
ivle_www = os.path.join(ivle_install_dir, "www")
963
ivle_lib = os.path.join(ivle_install_dir, "lib")
964
write_ivle_pth = True
965
write_ivle_lib_pth = True
967
file = open(ivle_pth, 'r')
969
if line.strip() == ivle_www:
970
write_ivle_pth = False
971
elif line.strip() == ivle_lib:
972
write_ivle_lib_pth = False
974
except (IOError, OSError):
977
action_append(ivle_pth, ivle_www)
978
if write_ivle_lib_pth:
979
action_append(ivle_pth, ivle_lib)
983
def updatejails(args):
984
# Get "dry" variable from command line
985
(opts, args) = getopt.gnu_getopt(args, "n", ['dry'])
987
dry = '-n' in opts or '--dry' in opts
990
print "Dry run (no actions will be executed\n"
992
if not dry and os.geteuid() != 0:
993
print >>sys.stderr, "Must be root to run install"
994
print >>sys.stderr, "(I need to chown some files)."
997
# Update the template jail directory in case it hasn't been installed
999
action_copytree('jail', os.path.join(jail_base, 'template'), dry)
1001
# Re-link all the files in all students jails.
1002
for dir in os.listdir(jail_base):
1003
if dir == 'template': continue
1004
# First back up the student's home directory
1005
temp_home = os.tmpnam()
1006
action_rename(os.path.join(jail_base, dir, 'home'), temp_home, dry)
1007
# Delete the student's jail and relink the jail files
1008
action_linktree(os.path.join(jail_base, 'template'),
1009
os.path.join(jail_base, dir), dry)
1010
# Restore the student's home directory
1011
action_rename(temp_home, os.path.join(jail_base, dir, 'home'), dry)
1012
# Set up the user's home directory just in case they don't have a
1013
# directory for this yet
1014
action_mkdir(os.path.join(jail_base, dir, 'home', dir), dry)