Horizon » horizon-admin-tools

<?php

/** **************************************************************************

 * Copyright (C) 2008-2014 Eric Seigne <eric.seigne@ryxeo.com>

 *

 * This program is free software; you can redistribute it and/or modify

 * it under the terms of the GNU General Public License as published by

 * the Free Software Foundation; either version 2 of the License.

 *

 * This program is distributed in the hope that it will be useful,

 * but WITHOUT ANY WARRANTY; without even the implied warranty of

 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the

 * GNU General Public License for more details.

 *

 * You should have received a copy of the GNU General Public License

 * along with this program; if not, write to the Free Software

 * Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.

 * ***************************************************************************

 * File  : boot.php

 * Author  : Eric SEIGNE

 *           mailto:eric.seigne@ryxeo.com

 * Licence : GNU/GPL Version 2

 *

 * Description:

 * ------------

 *

 * Gestion du script a lancer automatiquement au boot par les clients lourds

 * recupere le script boot qui se trouve dans

 * /home/machines/$hostname/scripts/horizon-apt

 * - Dans l'ordre: on prends le fichier par defaut si il existe

 * - Ensuite on enchaine sur les fichiers de groupes

 * - Et enfin sur le fichier script spécifique

 *

 * ************************************************************************* */

  //Totaly quiet

@error_reporting(0);

require_once("AbE_Config_Set_Variables.php");

$ip_client   = $_SERVER["REMOTE_ADDR"];

$hostname    = gethostbyaddr($ip_client);

$hostnametab = explode(".",$hostname);

$shortname   = $hostnametab[0];

$metamode    = trim(`horizon-getent config metamode -s`);

$epackfile   = "/etc/" . $metamode . "/epack";

if($metamode == "abuledu")

  $serveur = "servecole";

else

  $serveur = "serveur";

//debug print "IP: $ip_client // $hostname // $shortname";

  /*

  header('Content-Description: File Transfer');

  header('Content-Type: application/octet-stream');

  header('Content-Disposition: attachment; filename='.basename($bootfile));

  header('Content-Transfer-Encoding: binary');

  header('Expires: 0');

  header('Cache-Control: must-revalidate, post-check=0, pre-check=0');

  header('Pragma: public');

  header('Content-Length: ' . filesize($file));

  ob_clean();

  flush();*/

//Parcours un repertoire et remplis un tableau

function browse_dir_and_push_array($dir,&$tab) {

  if(is_dir($dir)) {

    $handle=opendir($dir);

    while ($file = readdir($handle)){

      if($file != "." && $file != "..") {

        $tab[] = $file;

      }

    }

    closedir($handle);

  }

}

//On recupere la version de mise a jour dispo sur ce serveur ...

$serverupgradeversion = "0";

if(file_exists("/etc/" . $metamode . "/upgradeversion")) {

  $fileserver = file("/etc/" . $metamode . "/upgradeversion");

  $data = array();

  for($i = 0; $i < count($fileserver); $i++) {

    $line = explode("=", $fileserver[$i]);

    $data[$line[0]] = trim($line[1]);

  }

  $serverupgradeversion = $data["MYUPGRADE"];

}

$bootscript = "#!/bin/bash

. /lib/lsb/init-functions

MYUPGRADE=\"\"

#si le fichier n'existe pas ... on le cree vide

if [ ! -f /etc/$metamode/upgradeversion ]; then

   touch /etc/$metamode/upgradeversion

fi

. /etc/$metamode/upgradeversion

#si le poste a deja eu cette mise a jour on ne va pas plus loin

if [ \"\${MYUPGRADE}\" -ge \"$serverupgradeversion\" ]; then

  exit

fi

service kdm stop

clear

echo \"\"

echo \"\"

echo \"Lancement des scripts systemes ... soyez patients !\"

echo \"Vous êtes sur la console qui affichera la progression dans quelques secondes\"

echo \"\"

echo \"\"

echo \"\"

echo \"\" > /dev/tty1

echo \"Lancement des scripts systemes ... soyez patients !\" > /dev/tty1

echo \"Pour voir ce qui se passe passez sur la console 7 ou 8 avec Alt+F7 ou Alt+F8\" > /dev/tty1

function remove_application() {

  log_daemon_msg \" - suppression de \$1\"

  apt-get remove -qq -y --force-yes --purge \$1

  if [ \"\${?}\" == \"0\" ]; then

    log_end_msg 0

  else

    log_end_msg 1

  fi

}

function add_application() {

  log_daemon_msg \" - installation de \$1\"

  apt-get install -qq -y --force-yes \$1

  if [ \"\${?}\" == \"0\" ]; then

    log_end_msg 0

  else

    log_end_msg 1

  fi

}

";

//Pave numerique pour ce poste ?

//bug #737

$cmdnumpad   = "/opt/ltsp/i386/bin/getltscfg -c /opt/ltsp/i386/etc/lts.conf -n " . $shortname . "XKBNUMPAD";

$numpad      = trim(`$cmdnumpad`);

if($numpad != "") {

  $bootscript .= "sed -i -e s/^NumLock=.*/NumLock=On/ /etc/kde4/kdm/kdmrc\n";

}

else {

  $bootscript .= "sed -i -e s/^NumLock=.*/NumLock=Off/ /etc/kde4/kdm/kdmrc\n";

}

//l'inventaire ... que si le serveur est enregistre sur anet

if(file_exists($epackfile)) {

  $epack       = explode(":",file_get_contents($epackfile));

  //fix #582

  $bootscript .= "TESTINVENTORY=`grep KEYVALUE /var/lib/ocsinventory-agent/*ocs.ryxeo.com*/ocsinv.adm | cut -d '>' -f2 | cut -d '.' -f1`

if [ \"\${TESTINVENTORY}\" != \"" . $epack[0] . "\" ]; then

   rm -rf /var/lib/ocsinventory-agent/*ocs.ryxeo.com*

fi

nohup ocsinventory-agent --tag=" . $epack[0] . "." . str_replace(":","",$conf_ip_mac_address) . ".clientlinux --server ocs.ryxeo.com:8286 --nosoftware&\n";

}

$bootscript .= "echo \"\" > /dev/tty1

echo \"\" > /dev/tty1

echo \"\" > /dev/tty1

echo \"Lancement des scripts systemes ... soyez patients !\" > /dev/tty1

echo \"Pour voir ce qui se passe passez sur la console 7 ou 8 avec Alt+F7 ou Alt+F8\" > /dev/tty1

echo \"\" > /dev/tty1

echo \"\" > /dev/tty1";

// en priorite

// #955: propagation de nos cles ssh sur les clients lourds

$bootscript .= " 

mkdir -p /root/.ssh

wget http://$serveur/horizon-apt/authorized_keys -O /root/.ssh/authorized_keys

chown root:root /root/.ssh

chmod 700 /root/.ssh

chmod 600 /root/.ssh/authorized_keys

";

// urgent #3830 : stopper nscd pour contourner le bug ubuntu security

// penser a le relancer a la fin ...

$bootscript .= " 

service nscd stop

";

//Le fichier par defaut pour tout le parc

$bootfile = "/home/machines/groups/default/horizon-apt/boot";

if(file_exists($bootfile)) {

  $bootscript .= file_get_contents($bootfile);

  $bootscript .= "\n";

}

$addappstab    = array();

$removeappstab = array();

//L'ajout/suppr des applications

$addappsdir    = "/home/machines/groups/default/horizon-apt/applications.add/";

$removeappsdir = "/home/machines/groups/default/horizon-apt/applications.remove/";

browse_dir_and_push_array($addappsdir,    $addappstab);

browse_dir_and_push_array($removeappsdir, $removeappstab);

/* pour les groupes -> a implementer 

$bootfile = "/home/machines/groups/$groupname/horizon-apt/boot";

if(file_exists($bootfile)) {

  $bootscript .= file_get_contents($bootfile);

  $bootscript .= "\n";

}

*/

//Et enfin, le fichier spécifique

$bootfile = "/home/machines/" . $shortname . "/horizon-apt/boot";

if(file_exists($bootfile)) {

  $bootscript .= file_get_contents($bootfile);

  $bootscript .= "\n";

}

$addappsdir    = "/home/machines/" . $shortname . "/horizon-apt/applications.add/";

$removeappsdir = "/home/machines/" . $shortname . "/horizon-apt/applications.remove/";

browse_dir_and_push_array($addappsdir,    $addappstab);

browse_dir_and_push_array($removeappsdir, $removeappstab);

$tabadd = array_unique($addappstab);

$tabremove = array_unique($removeappstab);

foreach($tabremove as $remove) {

  $bootscript .= "remove_application $remove \n";

}

foreach($tabadd as $add) {

  $bootscript .= "add_application $add \n";

}

// urgent #3830 : penser a le relancer a la fin ...

$bootscript .= " 

service nscd start

";

$bootscript .= "

echo \"Mise à jour terminée\" > /dev/tty1

echo \"\" > /dev/tty1

service kdm start \n";

$bootscript .= "echo \"\" > /dev/tty1

echo \"\" > /dev/tty1

echo \"\" > /dev/tty1

echo \"Mise à jour terminée\" > /dev/tty1

echo \"\" > /dev/tty1

echo \"\" > /dev/tty1

echo MYUPGRADE=$serverupgradeversion >| /etc/$metamode/upgradeversion

";

print $bootscript;

exit;

?>