Mirror
/
zulip
mirror of https://github.com/zulip/zulip.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity
zulip/bots/process_ccache

43 lines
1.6 KiB
Plaintext
Raw Normal View History

Consistently use /usr/bin/env python2.7 in shebangs and commands.
2015-10-04 18:56:26 +02:00
#!/usr/bin/env python2.7
Add webathena authentication button for Zephyr users. This shows up when you're not running a Zephyr mirroring bot and lets you use Webathena to have us run it. Obviously needs more docs. Current problems include: * supervisorctl reload ends up recreating /var/run/supervisor.sock with the wrong permissions, so it only works once in a row before you need to chmod that. * /etc/supervisor/conf.d needs to be humbug-writeable; this is a clear local root vulnerability * This uses SSH and thus is kinda slow. (imported from commit 7029979615ffd50b10f126ce2cf9a85a5eefd7a2)
2013-08-23 20:49:06 +02:00
import sys
import subprocess
import base64
short_user = sys.argv[1]
api_key = sys.argv[2]
ccache_data_encoded = sys.argv[3]
# Update the Kerberos ticket cache file
program_name = "zmirror-%s" % (short_user,)
Apply modernize transform libmodernize.fixes.fix_file. This replaces use of file() with open() which is python 3 compatible, and also adds it to our python 3 support test suite.
2015-10-14 22:31:08 +02:00
with open("/home/zulip/ccache/%s" % (program_name,), "w") as f:
Add webathena authentication button for Zephyr users. This shows up when you're not running a Zephyr mirroring bot and lets you use Webathena to have us run it. Obviously needs more docs. Current problems include: * supervisorctl reload ends up recreating /var/run/supervisor.sock with the wrong permissions, so it only works once in a row before you need to chmod that. * /etc/supervisor/conf.d needs to be humbug-writeable; this is a clear local root vulnerability * This uses SSH and thus is kinda slow. (imported from commit 7029979615ffd50b10f126ce2cf9a85a5eefd7a2)
2013-08-23 20:49:06 +02:00
f.write(base64.b64decode(ccache_data_encoded))
# Setup API key
[manual] Rename /home/humbug to /home/zulip. This may require just doing an mv on the home directory, plus changing the home directory in /etc/passwd. It should of course be done carefully. (imported from commit 660997d897ee6d33563af74f0fc5d4267a911755)
2013-10-04 19:19:57 +02:00
api_key_path = "/home/zulip/api-keys/%s" % (program_name,)
Add webathena authentication button for Zephyr users. This shows up when you're not running a Zephyr mirroring bot and lets you use Webathena to have us run it. Obviously needs more docs. Current problems include: * supervisorctl reload ends up recreating /var/run/supervisor.sock with the wrong permissions, so it only works once in a row before you need to chmod that. * /etc/supervisor/conf.d needs to be humbug-writeable; this is a clear local root vulnerability * This uses SSH and thus is kinda slow. (imported from commit 7029979615ffd50b10f126ce2cf9a85a5eefd7a2)
2013-08-23 20:49:06 +02:00
file(api_key_path, "w").write(api_key + "\n")
# Setup supervisord configuration
supervisor_path = "/etc/supervisor/conf.d/%s.conf" % (program_name,)
[manual] Rename /home/humbug to /home/zulip. This may require just doing an mv on the home directory, plus changing the home directory in /etc/passwd. It should of course be done carefully. (imported from commit 660997d897ee6d33563af74f0fc5d4267a911755)
2013-10-04 19:19:57 +02:00
template = "/home/zulip/zulip/bots/zmirror_private.conf.template"
Add webathena authentication button for Zephyr users. This shows up when you're not running a Zephyr mirroring bot and lets you use Webathena to have us run it. Obviously needs more docs. Current problems include: * supervisorctl reload ends up recreating /var/run/supervisor.sock with the wrong permissions, so it only works once in a row before you need to chmod that. * /etc/supervisor/conf.d needs to be humbug-writeable; this is a clear local root vulnerability * This uses SSH and thus is kinda slow. (imported from commit 7029979615ffd50b10f126ce2cf9a85a5eefd7a2)
2013-08-23 20:49:06 +02:00
template_data = file(template).read()
[manual] Rename /home/humbug to /home/zulip. This may require just doing an mv on the home directory, plus changing the home directory in /etc/passwd. It should of course be done carefully. (imported from commit 660997d897ee6d33563af74f0fc5d4267a911755)
2013-10-04 19:19:57 +02:00
session_path = "/home/zulip/zephyr_sessions/%s" % (program_name,)
zephyr_mirror: Fix support for forwarding mail zephyrs. (imported from commit 4ab2c810d3ccff6058e6c0be2e172a78e216d0a5)
2013-10-01 19:45:29 +02:00
# Preserve mail zephyrs forwarding setting across rewriting the config file
try:
if "--forward-mail-zephyrs" in file(supervisor_path, "r").read():
template_data = template_data.replace("--use-sessions", "--use-sessions --forward-mail-zephyrs")
except Exception:
pass
Add webathena authentication button for Zephyr users. This shows up when you're not running a Zephyr mirroring bot and lets you use Webathena to have us run it. Obviously needs more docs. Current problems include: * supervisorctl reload ends up recreating /var/run/supervisor.sock with the wrong permissions, so it only works once in a row before you need to chmod that. * /etc/supervisor/conf.d needs to be humbug-writeable; this is a clear local root vulnerability * This uses SSH and thus is kinda slow. (imported from commit 7029979615ffd50b10f126ce2cf9a85a5eefd7a2)
2013-08-23 20:49:06 +02:00
file(supervisor_path, "w").write(template_data.replace("USERNAME", short_user))
# Delete your session
subprocess.check_call(["rm", "-f", session_path])
# Update your supervisor config, which may restart your mirror
subprocess.check_call(["supervisorctl", "reread"])
subprocess.check_call(["supervisorctl", "update"])
# Restart your mirror, in case it wasn't restarted by the previous
# (Otherwise if the mirror lost subs, this would do nothing)
# TODO: check whether we JUST restarted it first
subprocess.check_call(["supervisorctl", "restart", program_name])