mirror of
https://github.com/goharbor/harbor.git
synced 2024-11-30 06:03:45 +01:00
230 lines
8.1 KiB
Python
Executable File
230 lines
8.1 KiB
Python
Executable File
#!/usr/bin/python
|
|
# -*- coding: utf-8 -*-
|
|
from __future__ import print_function, unicode_literals # We require Python 2.6 or later
|
|
from string import Template
|
|
import random
|
|
import string
|
|
import os
|
|
import sys
|
|
import argparse
|
|
import subprocess
|
|
from io import open
|
|
|
|
if sys.version_info[:3][0] == 2:
|
|
import ConfigParser as ConfigParser
|
|
import StringIO as StringIO
|
|
|
|
if sys.version_info[:3][0] == 3:
|
|
import configparser as ConfigParser
|
|
import io as StringIO
|
|
|
|
def validate(conf):
|
|
if len(conf.get("configuration", "secret_key")) != 16:
|
|
raise Exception("Error: The length of secret key has to be 16 characters!")
|
|
|
|
parser = argparse.ArgumentParser()
|
|
parser.add_argument('-conf', dest='cfgfile', default = 'harbor.cfg',type=str,help="the path of Harbor configuration file")
|
|
args = parser.parse_args()
|
|
|
|
#Read configurations
|
|
conf = StringIO.StringIO()
|
|
conf.write("[configuration]\n")
|
|
conf.write(open(args.cfgfile).read())
|
|
conf.seek(0, os.SEEK_SET)
|
|
rcp = ConfigParser.RawConfigParser()
|
|
rcp.readfp(conf)
|
|
|
|
validate(rcp)
|
|
|
|
hostname = rcp.get("configuration", "hostname")
|
|
ui_url = rcp.get("configuration", "ui_url_protocol") + "://" + hostname
|
|
email_server = rcp.get("configuration", "email_server")
|
|
email_server_port = rcp.get("configuration", "email_server_port")
|
|
email_username = rcp.get("configuration", "email_username")
|
|
email_password = rcp.get("configuration", "email_password")
|
|
email_from = rcp.get("configuration", "email_from")
|
|
email_ssl = rcp.get("configuration", "email_ssl")
|
|
harbor_admin_password = rcp.get("configuration", "harbor_admin_password")
|
|
auth_mode = rcp.get("configuration", "auth_mode")
|
|
ldap_url = rcp.get("configuration", "ldap_url")
|
|
# this two options are either both set or unset
|
|
if rcp.has_option("configuration", "ldap_searchdn"):
|
|
ldap_searchdn = rcp.get("configuration", "ldap_searchdn")
|
|
ldap_search_pwd = rcp.get("configuration", "ldap_search_pwd")
|
|
else:
|
|
ldap_searchdn = ""
|
|
ldap_search_pwd = ""
|
|
ldap_basedn = rcp.get("configuration", "ldap_basedn")
|
|
# ldap_filter is null by default
|
|
if rcp.has_option("configuration", "ldap_filter"):
|
|
ldap_filter = rcp.get("configuration", "ldap_filter")
|
|
else:
|
|
ldap_filter = ""
|
|
ldap_uid = rcp.get("configuration", "ldap_uid")
|
|
ldap_scope = rcp.get("configuration", "ldap_scope")
|
|
db_password = rcp.get("configuration", "db_password")
|
|
self_registration = rcp.get("configuration", "self_registration")
|
|
use_compressed_js = rcp.get("configuration", "use_compressed_js")
|
|
customize_crt = rcp.get("configuration", "customize_crt")
|
|
crt_country = rcp.get("configuration", "crt_country")
|
|
crt_state = rcp.get("configuration", "crt_state")
|
|
crt_location = rcp.get("configuration", "crt_location")
|
|
crt_organization = rcp.get("configuration", "crt_organization")
|
|
crt_organizationalunit = rcp.get("configuration", "crt_organizationalunit")
|
|
crt_commonname = rcp.get("configuration", "crt_commonname")
|
|
crt_email = rcp.get("configuration", "crt_email")
|
|
max_job_workers = rcp.get("configuration", "max_job_workers")
|
|
token_expiration = rcp.get("configuration", "token_expiration")
|
|
verify_remote_cert = rcp.get("configuration", "verify_remote_cert")
|
|
secret_key = rcp.get("configuration", "secret_key")
|
|
########
|
|
|
|
#Read version form .git
|
|
try:
|
|
version = subprocess.check_output(["git", "describe","--tags"]).strip('\n')
|
|
except :
|
|
version = "UNKNOWN"
|
|
#######
|
|
|
|
ui_secret = ''.join(random.choice(string.ascii_letters+string.digits) for i in range(16))
|
|
|
|
base_dir = os.path.dirname(__file__)
|
|
config_dir = os.path.join(base_dir, "config")
|
|
templates_dir = os.path.join(base_dir, "templates")
|
|
|
|
ui_config_dir = os.path.join(config_dir,"ui")
|
|
if not os.path.exists(ui_config_dir):
|
|
os.makedirs(os.path.join(config_dir, "ui"))
|
|
|
|
db_config_dir = os.path.join(config_dir, "db")
|
|
if not os.path.exists(db_config_dir):
|
|
os.makedirs(os.path.join(config_dir, "db"))
|
|
|
|
job_config_dir = os.path.join(config_dir, "jobservice")
|
|
if not os.path.exists(job_config_dir):
|
|
os.makedirs(job_config_dir)
|
|
|
|
def render(src, dest, **kw):
|
|
t = Template(open(src, 'r').read())
|
|
with open(dest, 'w') as f:
|
|
f.write(t.substitute(**kw))
|
|
print("Generated configuration file: %s" % dest)
|
|
|
|
ui_conf_env = os.path.join(config_dir, "ui", "env")
|
|
ui_conf = os.path.join(config_dir, "ui", "app.conf")
|
|
registry_conf = os.path.join(config_dir, "registry", "config.yml")
|
|
db_conf_env = os.path.join(config_dir, "db", "env")
|
|
job_conf_env = os.path.join(config_dir, "jobservice", "env")
|
|
|
|
conf_files = [ ui_conf, ui_conf_env, registry_conf, db_conf_env, job_conf_env ]
|
|
def rmdir(cf):
|
|
for f in cf:
|
|
if os.path.exists(f):
|
|
print("Clearing the configuration file: %s" % f)
|
|
os.remove(f)
|
|
rmdir(conf_files)
|
|
|
|
render(os.path.join(templates_dir, "ui", "env"),
|
|
ui_conf_env,
|
|
hostname=hostname,
|
|
db_password=db_password,
|
|
ui_url=ui_url,
|
|
auth_mode=auth_mode,
|
|
harbor_admin_password=harbor_admin_password,
|
|
ldap_url=ldap_url,
|
|
ldap_searchdn =ldap_searchdn,
|
|
ldap_search_pwd =ldap_search_pwd,
|
|
ldap_basedn=ldap_basedn,
|
|
ldap_filter=ldap_filter,
|
|
ldap_uid=ldap_uid,
|
|
ldap_scope=ldap_scope,
|
|
self_registration=self_registration,
|
|
use_compressed_js=use_compressed_js,
|
|
ui_secret=ui_secret,
|
|
secret_key=secret_key,
|
|
verify_remote_cert=verify_remote_cert,
|
|
token_expiration=token_expiration,
|
|
version=version)
|
|
|
|
render(os.path.join(templates_dir, "ui", "app.conf"),
|
|
ui_conf,
|
|
email_server=email_server,
|
|
email_server_port=email_server_port,
|
|
email_username=email_username,
|
|
email_password=email_password,
|
|
email_from=email_from,
|
|
email_ssl=email_ssl,
|
|
ui_url=ui_url)
|
|
|
|
render(os.path.join(templates_dir, "registry", "config.yml"),
|
|
registry_conf,
|
|
ui_url=ui_url)
|
|
|
|
render(os.path.join(templates_dir, "db", "env"),
|
|
db_conf_env,
|
|
db_password=db_password)
|
|
|
|
render(os.path.join(templates_dir, "jobservice", "env"),
|
|
job_conf_env,
|
|
db_password=db_password,
|
|
ui_secret=ui_secret,
|
|
max_job_workers=max_job_workers,
|
|
secret_key=secret_key,
|
|
ui_url=ui_url,
|
|
verify_remote_cert=verify_remote_cert)
|
|
|
|
def validate_crt_subj(dirty_subj):
|
|
subj_list = [item for item in dirty_subj.strip().split("/") \
|
|
if len(item.split("=")) == 2 and len(item.split("=")[1]) > 0]
|
|
return "/" + "/".join(subj_list)
|
|
|
|
FNULL = open(os.devnull, 'w')
|
|
|
|
from functools import wraps
|
|
def stat_decorator(func):
|
|
@wraps(func)
|
|
def check_wrapper(*args, **kwargs):
|
|
stat = func(*args, **kwargs)
|
|
message = "Generated configuration file: %s" % kwargs['path'] \
|
|
if stat == 0 else "Fail to generate %s" % kwargs['path']
|
|
print(message)
|
|
if stat != 0:
|
|
sys.exit(1)
|
|
return check_wrapper
|
|
|
|
@stat_decorator
|
|
def check_private_key_stat(*args, **kwargs):
|
|
return subprocess.call(["openssl", "genrsa", "-out", kwargs['path'], "4096"],\
|
|
stdout=FNULL, stderr=subprocess.STDOUT)
|
|
|
|
@stat_decorator
|
|
def check_certificate_stat(*args, **kwargs):
|
|
dirty_subj = "/C={0}/ST={1}/L={2}/O={3}/OU={4}/CN={5}/emailAddress={6}"\
|
|
.format(crt_country, crt_state, crt_location, crt_organization,\
|
|
crt_organizationalunit, crt_commonname, crt_email)
|
|
subj = validate_crt_subj(dirty_subj)
|
|
return subprocess.call(["openssl", "req", "-new", "-x509", "-key",\
|
|
private_key_pem, "-out", root_crt, "-days", "3650", "-subj", subj], \
|
|
stdout=FNULL, stderr=subprocess.STDOUT)
|
|
|
|
def openssl_is_installed(stat):
|
|
if stat == 0:
|
|
return True
|
|
else:
|
|
print("Cannot find openssl installed in this computer\nUse default SSL certificate file")
|
|
return False
|
|
|
|
if customize_crt == 'on':
|
|
shell_stat = subprocess.check_call(["which", "openssl"], stdout=FNULL, stderr=subprocess.STDOUT)
|
|
if openssl_is_installed(shell_stat):
|
|
private_key_pem = os.path.join(config_dir, "ui", "private_key.pem")
|
|
root_crt = os.path.join(config_dir, "registry", "root.crt")
|
|
crt_conf_files = [ private_key_pem, root_crt ]
|
|
rmdir(crt_conf_files)
|
|
|
|
check_private_key_stat(path=private_key_pem)
|
|
check_certificate_stat(path=root_crt)
|
|
|
|
FNULL.close()
|
|
print("The configuration files are ready, please use docker-compose to start the service.")
|