gogoCHAD v0.0.2
This commit is contained in:
parent
bf2787f0fd
commit
65ede3d703
103
README.md
103
README.md
@ -1,4 +1,101 @@
|
|||||||
# gogoCHAD
|
```sh
|
||||||
|
█▀▀ █▀█ █▀▀ █▀█ █▀▀ █░█ ▄▀█ █▀▄
|
||||||
|
█▄█ █▄█ █▄█ █▄█ █▄▄ █▀█ █▀█ █▄▀
|
||||||
|
⣿⣿⣿⣿⣿⣿⣿⣿⡿⠿⠛⠛⠛⠋⠉⠈⠉⠉⠉⠉⠛⠻⢿⣿⣿⣿⣿⣿⣿⣿
|
||||||
|
⣿⣿⣿⣿⣿⡿⠋⠁⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠉⠛⢿⣿⣿⣿⣿
|
||||||
|
⣿⣿⣿⣿⡏⣀⠀⠀⠀⠀⠀⠀⠀⣀⣤⣤⣤⣄⡀⠀⠀⠀⠀⠀⠀⠀⠙⢿⣿⣿
|
||||||
|
⣿⣿⣿⢏⣴⣿⣷⠀⠀⠀⠀⠀⢾⣿⣿⣿⣿⣿⣿⡆⠀⠀⠀⠀⠀⠀⠀⠈⣿⣿
|
||||||
|
⣿⣿⣟⣾⣿⡟⠁⠀⠀⠀⠀⠀⢀⣾⣿⣿⣿⣿⣿⣷⢢⠀⠀⠀⠀⠀⠀⠀⢸⣿
|
||||||
|
⣿⣿⣿⣿⣟⠀⡴⠄⠀⠀⠀⠀⠀⠀⠙⠻⣿⣿⣿⣿⣷⣄⠀⠀⠀⠀⠀⠀⠀⣿
|
||||||
|
⣿⣿⣿⠟⠻⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠶⢴⣿⣿⣿⣿⣿⣧⠀⠀⠀⠀⠀⠀⣿
|
||||||
|
⣿⣁⡀⠀⠀⢰⢠⣦⠀⠀⠀⠀⠀⠀⠀⠀⢀⣼⣿⣿⣿⣿⣿⡄⠀⣴⣶⣿⡄⣿
|
||||||
|
⣿⡋⠀⠀⠀⠎⢸⣿⡆⠀⠀⠀⠀⠀⠀⣴⣿⣿⣿⣿⣿⣿⣿⠗⢘⣿⣟⠛⠿⣼
|
||||||
|
⣿⣿⠋⢀⡌⢰⣿⡿⢿⡀⠀⠀⠀⠀⠀⠙⠿⣿⣿⣿⣿⣿⡇⠀⢸⣿⣿⣧⢀⣼
|
||||||
|
⣿⣿⣷⢻⠄⠘⠛⠋⠛⠃⠀⠀⠀⠀⠀⢿⣧⠈⠉⠙⠛⠋⠀⠀⠀⣿⣿⣿⣿⣿
|
||||||
|
⣿⣿⣧⠀⠈⢸⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠟⠀⠀⠀⠀⢀⢃⠀⠀⢸⣿⣿⣿⣿
|
||||||
|
⣿⣿⡿⠀⠴⢗⣠⣤⣴⡶⠶⠖⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⣀⡸⠀⣿⣿⣿⣿
|
||||||
|
⣿⣿⣿⡀⢠⣾⣿⠏⠀⠠⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠛⠉⠀⣿⣿⣿⣿
|
||||||
|
⣿⣿⣿⣧⠈⢹⡇⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⣰⣿⣿⣿⣿
|
||||||
|
⣿⣿⣿⣿⡄⠈⠃⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⢀⣠⣴⣾⣿⣿⣿⣿⣿
|
||||||
|
⣿⣿⣿⣿⣧⡀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⢀⣠⣾⣿⣿⣿⣿⣿⣿⣿⣿⣿
|
||||||
|
⣿⣿⣿⣿⣷⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⢀⣴⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿
|
||||||
|
⣿⣿⣿⣿⣿⣦⣄⣀⣀⣀⣀⠀⠀⠀⠀⠘⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿
|
||||||
|
⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣷⡄⠀⠀⠀⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿
|
||||||
|
⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣧⠀⠀⠀⠙⣿⣿⡟⢻⣿⣿⣿⣿⣿⣿⣿⣿⣿
|
||||||
|
⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⠇⠀⠁⠀⠀⠹⣿⠃⠀⣿⣿⣿⣿⣿⣿⣿⣿⣿
|
||||||
|
⣿⣿⣿⣿⣿⣿⣿⣿⡿⠛⣿⣿⠀⠀⠀⠀⠀⠀⠀⠀⢐⣿⣿⣿⣿⣿⣿⣿⣿⣿
|
||||||
|
⣿⣿⣿⣿⠿⠛⠉⠉⠁⠀⢻⣿⡇⠀⠀⠀⠀⠀⠀⢀⠈⣿⣿⡿⠉⠛⠛⠛⠉⠉
|
||||||
|
⣿⡿⠋⠁⠀⠀⢀⣀⣠⡴⣸⣿⣇⡄⠀⠀⠀⠀⢀⡿⠄⠙⠛⠀⣀⣠⣤⣤⠄ # gogoCHAD by MOIS3Y
|
||||||
|
```
|
||||||
|
# Companion script for Quick access to a server with VM/DCImanager 6 installed
|
||||||
|
|
||||||
|
Allows you to quickly and in one line access the server using the generated platform administrator key.
|
||||||
|
- Safe
|
||||||
|
- Reliable
|
||||||
|
- No hassle
|
||||||
|
|
||||||
|
## Features
|
||||||
|
|
||||||
|
- It finds a guaranteed administrator himself
|
||||||
|
- Generates a link for authorization
|
||||||
|
- Container is very small based on Alpine Linux
|
||||||
|
- Once accessed, container and image will be deleted
|
||||||
|
- There is error handling if access cannot be obtained
|
||||||
|
|
||||||
|
## Run with gogoCHAD:
|
||||||
|
- Get instructions and generate a key pair to access the GO server.
|
||||||
|
- Fill in the parameters in the configuration section
|
||||||
|
- Give a name to the companion script like gogo
|
||||||
|
- Give the script permission to execute chmod 754 gogo attributes should be [-rwxr-xr--]
|
||||||
|
- Place the script in a directory that is on the path of the $PATH environment variable (echo $PATH)
|
||||||
|
The paths are separated by the symbol : you can put here for example /usr/local/bin/gogo
|
||||||
|
- Restart terminal
|
||||||
|
|
||||||
|
## The syntax to connect is:
|
||||||
|
```sh
|
||||||
|
gogo --vm host.domain.zone 22
|
||||||
|
gogo --dci host.domain.zone 2222
|
||||||
|
gogo --bill host.domain.zone 22
|
||||||
|
gogo --vm 8.8.8.8 220122
|
||||||
|
gogo --dns 8.8.8.8 # (without specifying a port, the default port 22 will be used)
|
||||||
|
```
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
## Info:
|
||||||
|
Environment variables are used as input to the container:
|
||||||
|
| ENV | VM6 | DCI6 |
|
||||||
|
| ------ | ------ |------ |
|
||||||
|
| PLATFORM | vm |dci |
|
||||||
|
| CLIENT_HOST |ip |ip |
|
||||||
|
|
||||||
|
To obtain the VM/DCImanager access key, a container is downloaded to the client server,
|
||||||
|
which connects to the platform stack makes a query to the database receives a list of 10
|
||||||
|
finds the first guaranteed admin among them
|
||||||
|
most likely it will be id 2 or 3.
|
||||||
|
The container then makes a request to get the key
|
||||||
|
passing admin id or email via internal authentication api.
|
||||||
|
|
||||||
|
After the container has completed and returns the output with access, it will automatically be deleted.
|
||||||
|
The command sent by this script also includes a command that will remove the image from
|
||||||
|
client server, so access leaves no trace on the server.
|
||||||
|
In addition, the container reads config.json with read-only permissions, while querying the database and
|
||||||
|
obtaining a key does not affect the operation of the platform and does not make changes.
|
||||||
|
|
||||||
|
Access to panels of the 5th generation remains the same if the client server listens only on port 443
|
||||||
|
will have to remove it from the link.
|
||||||
|
When the container is updated, you will need to replace the version tag in the configuration: 0.0.x
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
### Known issues:
|
||||||
|
|
||||||
|
- Sometimes the key for DCI/VMmanager 6 may work,
|
||||||
|
therefore, this problem is solved by connecting by cookies.
|
||||||
|
- If the client did not provide a port or access is denied, the access script will not work,
|
||||||
|
you need to find out the correct port and ask to remove the firewall restrictions.
|
||||||
|
Moreover, if these are panels of the 5th generation, you will receive an access link, but it will not work as expected
|
||||||
|
this is due to the fact that the link is generated before the request to the client server.
|
||||||
|
|
||||||
Companion script for QuickAccess helps to remotely access the web interface of VM/DCImanager 6.
|
|
||||||
Also for 5th generation control panels
|
|
||||||
127
gogoCHAD.sh
Executable file
127
gogoCHAD.sh
Executable file
@ -0,0 +1,127 @@
|
|||||||
|
#!/usr/bin/env bash
|
||||||
|
|
||||||
|
# █▀▀ █▀█ █▄░█ █▀▀ █ █▀▀
|
||||||
|
# █▄▄ █▄█ █░▀█ █▀░ █ █▄█
|
||||||
|
# ---------------------------------------
|
||||||
|
|
||||||
|
# REQUIRED:
|
||||||
|
go_server="ssh.ispsystem.net" # set here GO server address
|
||||||
|
key_path="/home/stepan/.ssh/ispkeys/ISP_ecdsa" # set here fullpath to you private ssh_key
|
||||||
|
key_username="s.zhukovskii" # set first half your name from corp email
|
||||||
|
|
||||||
|
# UPGRADABLE OVER TIME
|
||||||
|
image="mois3y/isp_support:0.0.2" # set image helpfull image for access to VM/DCI
|
||||||
|
|
||||||
|
# OPTIONAL:
|
||||||
|
hide_output=">> /dev/null" # uncomment this line to hide image pull and rm info
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
# █▀▄▀█ ▄▀█ █ █▄░█
|
||||||
|
# █░▀░█ █▀█ █ █░▀█
|
||||||
|
# ----------------------------
|
||||||
|
|
||||||
|
# Check second arument (if empty set default 22 port)
|
||||||
|
if ! [ -z $3 ]; then PORT=$3; else PORT=22; fi
|
||||||
|
|
||||||
|
# Parse address
|
||||||
|
address=$(echo $2 | egrep -o '[a-zA-Z0-9\.\-]+\.[a-zA-Z0-9\.\-]+')
|
||||||
|
|
||||||
|
# SSH full command:
|
||||||
|
ssh_run="ssh -t -i $key_path $key_username@$go_server go $address -p$PORT"
|
||||||
|
|
||||||
|
# Access functions:
|
||||||
|
access_vmdci() {
|
||||||
|
# bin command:
|
||||||
|
docker_pull="/usr/bin/docker pull $image $hide_output"
|
||||||
|
docker_rm="/usr/bin/docker image rm $image $hide_output" # delete image from client host
|
||||||
|
docker_run="/usr/bin/docker run"
|
||||||
|
|
||||||
|
# docker command params:
|
||||||
|
conf_file="/opt/ispsystem/$platform/config.json"
|
||||||
|
scripts_path="/root"
|
||||||
|
|
||||||
|
mount_conf="--mount type=bind,source=$conf_file,target=/app/config.json,readonly"
|
||||||
|
mount_host="--mount type=bind,source=$scripts_path,target=/app/host"
|
||||||
|
|
||||||
|
# start container:
|
||||||
|
container_params="$network $mount_conf $mount_host -e PLATFORM=$platform -e CLIENT_HOST=$address --rm $image"
|
||||||
|
|
||||||
|
# ENTRYPOINT:
|
||||||
|
echo "Сonnect to client server and get access to web UI please wait...."
|
||||||
|
$ssh_run "$docker_pull && $docker_run $container_params && $docker_rm"
|
||||||
|
echo "Сonnect to client server again with ssh session please wait...."
|
||||||
|
$ssh_run
|
||||||
|
|
||||||
|
}
|
||||||
|
|
||||||
|
access_fivegen() {
|
||||||
|
KEY=$(cat /dev/urandom | tr -dc 'a-zA-Z0-9' | fold -w 32 | head -n 1)
|
||||||
|
# bin command:
|
||||||
|
key_gen="/usr/local/mgr5/sbin/mgrctl -m $panel session.newkey key=$KEY"
|
||||||
|
|
||||||
|
# ENTRYPOINT:
|
||||||
|
echo "Сonnect to client server and get access to web UI please wait...."
|
||||||
|
$ssh_run "$key_gen"
|
||||||
|
echo ""
|
||||||
|
echo "Your access link:"
|
||||||
|
echo ""
|
||||||
|
echo "============================================================================="
|
||||||
|
echo "https://$address:1500/$panel?func=auth&key=$KEY"
|
||||||
|
echo "============================================================================="
|
||||||
|
echo ""
|
||||||
|
echo "Сonnect to client server again with ssh session please wait...."
|
||||||
|
echo ""
|
||||||
|
$ssh_run
|
||||||
|
}
|
||||||
|
|
||||||
|
|
||||||
|
if [[ "$1" == "--vm" ]]; then
|
||||||
|
platform="vm"
|
||||||
|
network="--network=vm_vm_box_net"
|
||||||
|
access_vmdci
|
||||||
|
|
||||||
|
elif [[ "$1" == "--dci" ]]; then
|
||||||
|
platform="dci"
|
||||||
|
network="--network=dci_auth"
|
||||||
|
access_vmdci
|
||||||
|
|
||||||
|
elif [[ "$1" == "--bill" ]]; then
|
||||||
|
panel="billmgr"
|
||||||
|
access_fivegen
|
||||||
|
|
||||||
|
elif [[ "$1" == "--ip" ]]; then
|
||||||
|
panel="ipmgr"
|
||||||
|
access_fivegen
|
||||||
|
|
||||||
|
elif [[ "$1" == "--dns" ]]; then
|
||||||
|
panel="dnsmgr"
|
||||||
|
access_fivegen
|
||||||
|
|
||||||
|
elif [[ "$1" == "--vm5" ]]; then
|
||||||
|
panel="vmmgr"
|
||||||
|
access_fivegen
|
||||||
|
|
||||||
|
elif [[ "$1" == "--dci5" ]]; then
|
||||||
|
panel="dcimgr"
|
||||||
|
access_fivegen
|
||||||
|
|
||||||
|
else
|
||||||
|
cat <<- EOF
|
||||||
|
============================================
|
||||||
|
Usage : access.sh host port --panel
|
||||||
|
|
||||||
|
Available Control panels:
|
||||||
|
|
||||||
|
--vm
|
||||||
|
--dci
|
||||||
|
--bill
|
||||||
|
--ip
|
||||||
|
--dns
|
||||||
|
--vm5
|
||||||
|
--dci5
|
||||||
|
|
||||||
|
=============================================
|
||||||
|
EOF
|
||||||
|
fi
|
||||||
|
|
||||||
Loading…
Reference in New Issue
Block a user