vsftpd 自动安装脚本

#!/usr/bin/env python
# -*- coding: utf-8 -*-
__author__ = ‘cpy‘

import os
import re
import sys
import logging

‘‘‘
        @desc : install vsftpd software and configure
        @time : 2018-07-02
‘‘‘

reload(sys)
sys.setdefaultencoding(‘utf-8‘)


class Config(object):
        """VSFTPD BASE CONFIG"""
        VFTP_CONF = ‘/etc/vsftpd/vsftpd.conf‘
        VIR_CONF = ‘/etc/vsftpd/vconf‘
        VUSER = ‘/etc/vsftpd/vusers‘
        PAMFILE = ‘/etc/pam.d/vsftpd‘
        LOGFILE = ‘/etc/vsftpd/logs‘
        SYSUSER = ‘/etc/passwd‘
        DENYUSER = ‘/etc/vsftpd/user_list‘

        VCONF_CONTENT_TMP = ‘‘‘anonymous_enable=NO
        #设成YES,允许匿名用户登陆
        allow_writeable_chroot=YES
        #vsftpd 2.3.5之后增强了安全检查，不允许限定在主目录下的用户具有写权限，该命令声明可以具有写权限。
        local_enable=YES
        #允许/禁止本地用户登陆 注意：主要是为虚拟宿主用户，如果该项目设定为NO那么所有虚拟用户将无法访问。
        write_enable=YES
        #设定可以进行写操作。
        local_umask=022
        #设定上传后文件的权限掩码，文件644，文件夹755
        dirmessage_enable=YES
        #设定开启目录标语功能
        xferlog_enable=YES
        #设定开启日志记录功能。
        connect_from_port_20=YES
        #设定端口20进行数据连接
        xferlog_std_format=YES
        #设定日志使用标准的记录格式
        listen=YES
        #开启独立进程vsftpd，不使用超级进程xinetd。设定该Vsftpd服务工作在StandAlone模式下。
        pam_service_name=vsftpd
        #设定，启用pam认证，并指定认证文件名/etc/pam.d/vsftpd
        userlist_enable=YES
        #设定userlist_file中的用户将不得使用FTP
        tcp_wrappers=YES
        #设定支持TCP Wrappers
        chroot_local_user=YES
        #限制所有用户在主目录
        #以下这些是关于Vsftpd虚拟用户支持的重要配置项目。默认Vsftpd.conf中不包含这些设定项目，需要自己手动添加配置
        guest_enable=YES
        #设定启用虚拟用户功能
        guest_username=www
        #指定虚拟用户的宿主用户
        virtual_use_local_privs=YES
        #设定虚拟用户的权限符合他们的宿主用户 
        user_config_dir=/etc/vsftpd/vconf
        #设定虚拟用户个人Vsftp的配置文件存放路径‘‘‘

        PAM_CONTENT_TMP = ‘‘‘auth    sufficient      /lib64/security/pam_userdb.so    db=/etc/vsftpd/virtusers
        account sufficient      /lib64/security/pam_userdb.so    db=/etc/vsftpd/virtusers‘‘‘

        VUSER_CONF_CONTENT_TMP = ‘‘‘local_root=/data/www/virtual/
        #指定虚拟用户的具体主路径
        anonymous_enable=NO
        #设定不允许匿名用户访问
        write_enable=YES
        #设定允许写操作
        local_umask=022
        #设定上传文件权限掩码
        anon_upload_enable=NO
        #设定不允许匿名用户上传
        anon_mkdir_write_enable=NO
        #设定不允许匿名用户建立目录
        idle_session_timeout=600
        #设定空闲连接超时时间
        data_connection_timeout=120
        #设定单次连续传输最大时间
        max_clients=10
        #设定并发客户端访问个数
        max_per_ip=5
        #设定单个客户端的最大线程数，这个配置主要来照顾Flashget、迅雷等多线程下载软件
        local_max_rate=50000
        #设定该用户的最大传输速率，单位b/s‘‘‘


class InitLogging(object):
        """ 初始化日志输出配置 """

        def __init__(self):
                self.LOG = Config.LOGFILE

        def logconfig(self):
                if not os.path.exists(self.LOG):
                        BASE_VSFTP_PATH = os.path.split(self.LOG)[0]
                        os.makedirs(BASE_VSFTP_PATH)
                        f = open(self.LOG, ‘w‘)
                        f.close()
                logging.basicConfig(level=logging.INFO, filename=self.LOG, filemode=‘a‘,
                                    format=‘%(asctime)s - %(filename)s[line:%(lineno)d] - %(levelname)s: %(message)s‘)


class ProgressBar(object):
        def __flush_screen(self, string=‘‘):
                sys.stdout.write(string)
                sys.stdout.flush()

        def progress(self, tasklist=[], width=100):
                # 开始执行
                for taskindex, task in enumerate(tasklist):
                        # 获取每个任务占用的进度条个数
                        scale = int(width / len(tasklist))
                        # 获取每个任务占用任务总数的百分比
                        score = int(100 / len(tasklist))

                        if taskindex == 0:
                                executestring = ‘\r{0:>2}% [{1}]{2}‘.format(0, ‘ ‘ * width, os.linesep)
                                self.__flush_screen(string=executestring)
                        else:
                                executestring = ‘\r{0:>2}% [{1}{2}]{3}‘.format(taskindex * score, ‘=‘ * taskindex * scale,
                                                                               ‘ ‘ * (width - taskindex * scale), os.linesep)
                                self.__flush_screen(string=executestring)
                        eval(task)
                # 执行结束
                endstring = ‘\r{0:>2}% [{1}] 完成{2}‘.format(100, ‘=‘ * width, os.linesep)
                self.__flush_screen(string=endstring)


class Install(object):
        """INSTALL VSFTPD AND CONFIGURE"""

        def __init__(self):
                pass

        def __checkvsftp_version(self):
                """check vsftpd version add configuration"""
                faildmsg = u‘vsftpd 版本获取失败‘
                vsftp_version = os.popen(‘rpm -qa |grep vsftpd‘).read().split(‘-‘)[1].split(‘.‘)
                if vsftp_version:
                        l = [int(i) for i in vsftp_version]
                        if l[0] > 2 or (l[0] == 2 and l[1] > 3) or (l[0] == 2 and l[1] == 3 and l[2] >= 5):
                                return True
                        else:
                                return False
                else:
                        raise RuntimeError(faildmsg)

        def __checkuser(self, username):
                """ Check whether the input mapping user exists in the system  """
                with open(Config.SYSUSER, ‘r‘) as f:
                        list = [username for line in f.readlines() if username == line.split(‘:‘)[0]]
                        if list:
                                return True
                        else:
                                return False

        def __deny_users(self):
                """return /etc/vsftpd/user_list deny users"""
                with open(Config.DENYUSER, ‘r‘) as f:
                        denyusers = [line for line in f.readlines() if not re.match(‘^\s*#.+.*$‘, line)]
                        return denyusers

        def rollback(self, *args):
                """UNINSTALL VSFTPD AND CONFIGURE"""
                if len(args) > 0:
                        if self.__checkuser(username=args[0]):
                                uninstall_command = ‘yum -y remove vsftpd && userdel -r %s && rm -rf %s* && rm -rf /etc/vsftpd‘ % (
                                        args[0], Config.PAMFILE)
                        else:
                                uninstall_command = ‘yum -y remove vsftpd && rm -rf %s* && rm -rf /etc/vsftpd‘ % Config.PAMFILE
                else:
                        uninstall_command = ‘yum -y remove vsftpd && rm -rf %s* && rm -rf /etc/vsftpd‘ % Config.PAMFILE

                if os.system(uninstall_command) != 0:
                        msg = u‘卸载vsftpd 发生错误，请手动清除，以免产生垃圾文件‘
                        print msg
                        logging.info(msg)
                        raise Exception(msg)

        def input_vuserinfo(self, numbers):
                """Trapping the virtual user information input"""
                vuser_dict = {}
                v_user = raw_input(u‘请输入第%d个虚拟用户名:‘ % numbers)
                v_pass = raw_input(u‘请输入第%d个虚拟用户密码:‘ % numbers)
                vuser_dict[‘username‘] = v_user
                vuser_dict[‘password‘] = v_pass
                return vuser_dict

        def install_vsftpd(self, username):
                install_vsftpd_command = ‘yum -y install pam pam-devel db4 db4-tcl vsftpd >>%s‘ % Config.LOGFILE
                actionmsg = u‘开始安装vsftp服务...‘
                errormsg = u‘vsftpd 或其他依赖项安装失败。‘

                logging.info(actionmsg)
                if os.system(install_vsftpd_command) != 0:
                        logging.error(errormsg)
                        self.rollback(username)
                        raise Exception(errormsg)

        def deploy(self, username, parentpath):
                """configure the vsftpd"""
                sucessfulmsg = u‘配置成功。‘
                msg = u‘配置错误，请检查是否已经存在或不允许的参数‘
                denyusers = self.__deny_users()
                if username in denyusers:
                        logging.error(msg)
                        self.rollback(username)
                        raise Exception(msg)
                if not self.__checkuser(username=username):
                        os.makedirs(parentpath)
                        os.rmdir(parentpath)
                        create_user_command = ‘useradd %s -d %s -s /sbin/nologin >> %s‘ % (username, parentpath, Config.LOGFILE)
                        if os.system(create_user_command) != 0:
                                logging.error(msg)
                                self.rollback(username)
                                raise Exception(msg)
                else:
                        logging.warning(msg)
                        self.rollback(username)
                        raise Exception(msg)

                back_conf_command = ‘cp %s %s.bak >> %s‘ % (Config.VFTP_CONF, Config.VFTP_CONF, Config.LOGFILE)
                if os.system(back_conf_command) != 0:
                        logging.error(msg)
                        self.rollback(username)
                        raise Exception(msg)
                else:
                        logging.info(sucessfulmsg)

                f = open(Config.VFTP_CONF, ‘w‘)
                f.close()

                list_vconf_content = Config.VCONF_CONTENT_TMP.split(os.linesep)

                for line in list_vconf_content:
                        if re.match(‘^guest_username\=.+$‘, line.strip()):
                                line = ‘guest_username=%s‘ % username
                        if re.match(‘^user_config_dir\=.+$‘, line.strip()):
                                line = ‘user_config_dir=%s‘ % Config.VIR_CONF
                        if not self.__checkvsftp_version():
                                if re.match(‘^allow_writeable_chroot=YES$‘, line.strip()):
                                        line = ‘#%s‘ % line.strip()

                        with open(Config.VFTP_CONF, ‘a‘) as f:
                                f.write(line.strip() + os.linesep)
                logging.info(sucessfulmsg)

        def deploy_vritual_user(self, username, vuser):
                """config vritual users"""
                sucessfulmsg = u‘创建虚拟用户配置目录成功‘
                faildmsg = u‘创建虚拟用户配置目录失败‘
                dbsucessfulmsg = u‘生成虚拟用户数据文件成功‘
                dbfaildmsg = u‘生成虚拟用户数据文件失败‘

                if not os.path.exists(Config.VIR_CONF):
                        try:
                                os.makedirs(Config.VIR_CONF)
                                logging.info(sucessfulmsg)
                        except Exception:
                                self.rollback(username)
                                raise Exception(faildmsg)
                f = open(Config.VUSER, ‘w‘)
                f.close()

                for v_user in vuser:
                        with open(Config.VUSER, ‘a‘) as f:
                                f.write(v_user.get(‘username‘) + os.linesep)
                                f.write(v_user.get(‘password‘) + os.linesep)

                create_db_command = ‘db_load -T -t hash -f %s %s.db‘ % (Config.VUSER, Config.VUSER)

                if os.path.exists("%s.db" % Config.VUSER):
                        os.remove(‘%s.db‘ % Config.VUSER)

                if os.system(create_db_command) != 0:
                        logging.error(dbfaildmsg)
                        self.rollback(username)
                        raise Exception(dbfaildmsg)
                else:
                        logging.info(dbsucessfulmsg)

        def deploy_pam(self):
                """config virtual user by pam"""
                baksucessfulmsg = u‘备份成功‘
                bakfaildmssg = u‘备份失败‘
                msg = u‘开始配置pam认证...‘
                endmsg = u‘配置pam认证完成‘
                logging.info(msg)
                back_pam_command = ‘cp %s %s.back‘ % (Config.PAMFILE, Config.PAMFILE)

                if os.path.exists(‘%s.back‘ % Config.PAMFILE):
                        os.remove(‘%s.back‘ % Config.PAMFILE)

                if os.system(back_pam_command) != 0:
                        logging.warning(bakfaildmssg)
                else:
                        logging.info(baksucessfulmsg)

                f = open(Config.PAMFILE, ‘w‘)
                f.close()

                list_pam_content = Config.PAM_CONTENT_TMP.split(os.linesep)

                for line in list_pam_content:
                        p = re.compile(r‘(?P<auth>.+\s+.+\s+.+\s+db=)(?P<vuserfile>.+)‘)
                        for dt in p.finditer(line):
                                line = dt.groupdict().get(‘auth‘) + Config.VUSER

                        with open(Config.PAMFILE, ‘a‘) as f:
                                f.write(line.strip() + os.linesep)
                        logging.info(endmsg)

        def deploy_virtual_config(self, username, parentpath, vuser):
                """config virtual user Configure"""
                sucessfulmsg = u‘创建虚拟用户目录或配置成功‘
                faildmsg = u‘创建虚拟用户目录或配置错误‘
                existsmsg = u‘已存在，正在尝试删除...‘

                list_vuser_config_content = Config.VUSER_CONF_CONTENT_TMP.split(os.linesep)
                for v_user in vuser:
                        vuser_path = os.path.join(parentpath, v_user.get(‘username‘))
                        if os.path.exists(vuser_path):
                                logging.warning(existsmsg)
                                os.rmdir(vuser_path)

                        try:
                                os.makedirs(vuser_path)
                                uid = int(os.popen(‘id %s -u‘ % username).read().strip())
                                gid = int(os.popen(‘id %s -g‘ % username).read().strip())
                                os.chown(vuser_path, uid, gid)
                                if not os.path.exists(vuser_path):
                                        logging.error(faildmsg)
                                        raise Exception(faildmsg)
                                logging.info(sucessfulmsg)
                        except Exception:
                                logging.error(faildmsg)
                                self.rollback(username)
                                raise Exception(faildmsg)

                        vuser_config = os.path.join(Config.VIR_CONF, v_user.get(‘username‘))
                        if os.path.exists(vuser_path):
                                f = open(vuser_config, ‘w‘)
                                f.close()
                        else:
                                os.makedirs(Config.VIR_CONF)
                                f = open(vuser_config, ‘w‘)
                                f.close()

                        for line in list_vuser_config_content:
                                if re.match(‘^local_root=.+$‘, line.strip()):
                                        line = ‘local_root=%s‘ % vuser_path
                                with open(vuser_config, ‘a‘) as f:
                                        f.write(line.strip() + os.linesep)
                logging.info(sucessfulmsg)

        def start_server(self, parentpath):
                start_vsftpd_command = ‘service vsftpd start‘
                if os.system(start_vsftpd_command) != 0:
                        logging.error(u‘启动vsftpd服务失败‘)
                        raise Exception(u‘启动vsftpd服务失败‘)
                else:
                        logging.info(u‘启动vsftpd服务成功‘)

                print ‘‘
                print u"安装vsftpd 完成！"
                print ‘‘
                print ‘‘
                print u‘-----‘ * 15
                print u‘1. 请在%s文件中查看登录的用户名和密码，一行用户名，一行密码‘ % Config.VUSER
                print u‘2. ftp数据存放在%s中‘ % parentpath
                print u‘3. 若FTP无法登陆，请检查主机防火墙是否关闭‘
                print u‘-----‘ * 15


if __name__ == ‘__main__‘:
        ‘‘‘初始化日志输出‘‘‘
        LOG = InitLogging()
        LOG.logconfig()

        ‘‘‘安装vsftpd服务‘‘‘
        IS = Install()
        username = raw_input(u‘请输入vsftp的映射宿主用户名(本机账号)：‘)
        parentpath = raw_input(u‘请输入用于存放ftp数据的目录：‘)
        usercount = raw_input(u‘您需要添加几个虚拟用户：‘)
        vuserlist = []
        if usercount.isdigit():
                num = 0
                for i in range(int(usercount)):
                        num += 1
                        vd = IS.input_vuserinfo(numbers=num)
                        vuserlist.append(vd)
        else:
                raise RuntimeError(u‘您输入的参数不是整型‘)

        # IS.install_vsftpd(username=username)
        # IS.deploy(username=username, parentpath=parentpath)
        # IS.deploy_vritual_user(username=username, vuser=vuserlist)
        # IS.deploy_pam()
        # IS.deploy_virtual_config(username=username, parentpath=parentpath, vuser=vuserlist)
        # IS.start_server(parentpath=parentpath)

        PB = ProgressBar()
        tasks = [‘IS.install_vsftpd(username=username)‘, ‘IS.deploy(username=username, parentpath=parentpath)‘,
                 ‘IS.deploy_vritual_user(username=username, vuser=vuserlist)‘, ‘IS.deploy_pam()‘,
                 ‘IS.deploy_virtual_config(username=username, parentpath=parentpath, vuser=vuserlist)‘,
                 ‘IS.start_server(parentpath=parentpath)‘]
        PB.progress(tasklist=tasks, width=50)