70 lines
3.4 KiB
Python
70 lines
3.4 KiB
Python
# actions/configure/base.py
|
|
"""Port of configure/base — base packages + ufw + ufw-docker helper."""
|
|
import os, shutil, stat, urllib.request
|
|
from engine.descriptor import Meta
|
|
|
|
METADATA = Meta(summary="Configure base system packages (curl, wget, git, rsyslog, ufw, ufw-docker).")
|
|
UFW_DOCKER_URL = "https://github.com/chaifeng/ufw-docker/raw/master/ufw-docker"
|
|
|
|
def run(ctx, args):
|
|
log, s = ctx.log, ctx.sys
|
|
log.info("Starting base system initialization...")
|
|
if not os.path.isfile("/etc/debian_version"):
|
|
log.error("Requires a Debian-based system (Debian/Ubuntu)."); raise SystemExit(1)
|
|
needed = [p for p in ["curl", "wget", "git", "rsyslog"] if not shutil.which(p)]
|
|
if needed:
|
|
log.info("Updating package lists..."); s.sudo(["apt-get", "update", "-y"])
|
|
log.info(f"Installing missing essential packages: {', '.join(needed)}...")
|
|
s.sudo(["apt-get", "install", "-y", "-o", "DPkg::Lock::Timeout=60", *needed])
|
|
else:
|
|
log.info("Essential packages already installed.")
|
|
s.ensure_running("rsyslog")
|
|
|
|
# Configure APT to discard downloaded archives
|
|
apt_clean_path = "/etc/apt/apt.conf.d/99-apex"
|
|
apt_clean_content = 'APT::Keep-Downloaded-Packages "0";\n'
|
|
if os.path.exists("/etc/apt/apt.conf.d/01clean"):
|
|
s.sudo(["rm", "-f", "/etc/apt/apt.conf.d/01clean"])
|
|
try:
|
|
current_apt = open(apt_clean_path).read() if os.path.exists(apt_clean_path) else None
|
|
except Exception:
|
|
current_apt = None
|
|
if current_apt != apt_clean_content:
|
|
log.info("Configuring APT to discard downloaded archives...")
|
|
s.sudo(["tee", apt_clean_path], input=apt_clean_content)
|
|
|
|
# Limit systemd-journald max disk usage
|
|
journal_d = "/etc/systemd/journald.conf.d"
|
|
journal_conf = os.path.join(journal_d, "99-apex.conf")
|
|
journal_content = "[Journal]\nSystemMaxUse=200M\n"
|
|
if os.path.exists(os.path.join(journal_d, "maxuse.conf")):
|
|
s.sudo(["rm", "-f", os.path.join(journal_d, "maxuse.conf")])
|
|
try:
|
|
current_journal = open(journal_conf).read() if os.path.exists(journal_conf) else None
|
|
except Exception:
|
|
current_journal = None
|
|
if current_journal != journal_content:
|
|
log.info("Configuring systemd-journald SystemMaxUse=200M...")
|
|
s.sudo(["mkdir", "-p", journal_d])
|
|
s.sudo(["tee", journal_conf], input=journal_content)
|
|
s.sudo(["systemctl", "restart", "systemd-journald"])
|
|
|
|
if not shutil.which("ufw"):
|
|
log.info("Installing UFW..."); s.sudo(["apt-get", "install", "-y", "-o", "DPkg::Lock::Timeout=60", "ufw"])
|
|
else:
|
|
log.info("UFW already installed.")
|
|
from engine.lib.ufw import resolve_ufw_docker_bin
|
|
binp = resolve_ufw_docker_bin()
|
|
if not (os.path.isfile(binp) and os.access(binp, os.X_OK)):
|
|
log.info("Downloading ufw-docker helper...")
|
|
target_bin = os.path.expanduser("~/.local/bin/ufw-docker")
|
|
os.makedirs(os.path.dirname(target_bin), exist_ok=True)
|
|
urllib.request.urlretrieve(UFW_DOCKER_URL, target_bin)
|
|
os.chmod(target_bin, os.stat(target_bin).st_mode | stat.S_IXUSR | stat.S_IXGRP | stat.S_IXOTH)
|
|
log.success(f"ufw-docker downloaded to {target_bin}.")
|
|
else:
|
|
log.info(f"ufw-docker already exists at {binp}.")
|
|
log.info("Ensuring ufw-docker routing rules are installed in UFW...")
|
|
s.sudo([binp, "install"])
|
|
log.success("Base system initialization completed.")
|