mirror of
https://github.com/HuFlungDu/pylibmeshctrl.git
synced 2026-02-20 21:52:16 +00:00
Compare commits
25 Commits
fix/run_co
...
1.3.0
| Author | SHA1 | Date | |
|---|---|---|---|
|
|
e0694f980c | ||
|
|
61053549f2 | ||
|
|
fb3d043431 | ||
|
|
c13985739b | ||
|
|
db1914c87b | ||
|
|
b0d071d87f | ||
|
|
3bcedf5610 | ||
|
|
9c7a8c39b0 | ||
|
|
7ba6989325 | ||
|
|
748e39d5b4 | ||
|
|
6dae40eb40 | ||
|
|
c7d628716e | ||
|
|
1f9979ddd1 | ||
| d4b9524814 | |||
|
|
bc1db8f2b3 | ||
|
|
403c0cd0ec | ||
|
|
0b0029563a | ||
|
|
0b32896c88 | ||
|
|
2304810ee6 | ||
|
|
4cda54ab60 | ||
|
|
87fad5aa13 | ||
|
|
6daaa91758 | ||
|
|
078e07cb4f | ||
|
|
0e569ae0cb | ||
|
|
62fdc79aeb |
@@ -3,3 +3,4 @@ Contributors
|
|||||||
============
|
============
|
||||||
|
|
||||||
* Josiah Baldwin <jbaldwin8889@gmail.com>
|
* Josiah Baldwin <jbaldwin8889@gmail.com>
|
||||||
|
* Daan Selen <https://github.com/DaanSelen>
|
||||||
@@ -2,6 +2,17 @@
|
|||||||
Changelog
|
Changelog
|
||||||
=========
|
=========
|
||||||
|
|
||||||
|
version 1.3.0
|
||||||
|
=============
|
||||||
|
|
||||||
|
Improvements:
|
||||||
|
* Improved how run_commands was handled (#51)
|
||||||
|
* Added remove device functionality (#52)
|
||||||
|
* Added run_console_commands functionality (#55)
|
||||||
|
|
||||||
|
Bugs:
|
||||||
|
* Silly documentation being wrong (#53)
|
||||||
|
|
||||||
version 1.2.2
|
version 1.2.2
|
||||||
=============
|
=============
|
||||||
|
|
||||||
|
|||||||
@@ -295,6 +295,23 @@ class Device(object):
|
|||||||
'''
|
'''
|
||||||
return await self._session.reset_devices(self.nodeid, timeout=timeout)
|
return await self._session.reset_devices(self.nodeid, timeout=timeout)
|
||||||
|
|
||||||
|
async def remove(self, timeout=None):
|
||||||
|
'''
|
||||||
|
Remove device from MeshCentral
|
||||||
|
|
||||||
|
Args:
|
||||||
|
nodeids (str|list[str]): nodeid(s) of the device(s) that have to be removed
|
||||||
|
timeout (int): duration in seconds to wait for a response before throwing an error
|
||||||
|
|
||||||
|
Returns:
|
||||||
|
bool: True on success, raise otherwise
|
||||||
|
|
||||||
|
Raises:
|
||||||
|
:py:class:`~meshctrl.exceptions.SocketError`: Info about socket closure
|
||||||
|
asyncio.TimeoutError: Command timed out
|
||||||
|
'''
|
||||||
|
return self._session.remove_devices(self.nodeid, timeout)
|
||||||
|
|
||||||
async def sleep(self, timeout=None):
|
async def sleep(self, timeout=None):
|
||||||
'''
|
'''
|
||||||
Sleep device
|
Sleep device
|
||||||
|
|||||||
@@ -157,7 +157,7 @@ class Files(tunnel.Tunnel):
|
|||||||
|
|
||||||
async def rm(self, path, files, recursive=False, timeout=None):
|
async def rm(self, path, files, recursive=False, timeout=None):
|
||||||
"""
|
"""
|
||||||
Create a directory on the device. This API doesn't error if the file doesn't exist.
|
Remove a set of files or directories from the device. This API doesn't error if the file doesn't exist.
|
||||||
|
|
||||||
Args:
|
Args:
|
||||||
path (str): Directory from which to delete files
|
path (str): Directory from which to delete files
|
||||||
|
|||||||
@@ -184,7 +184,7 @@ class Session(object):
|
|||||||
async def _listen_data_task(self, websocket):
|
async def _listen_data_task(self, websocket):
|
||||||
async for message in websocket:
|
async for message in websocket:
|
||||||
await self._eventer.emit("raw", message)
|
await self._eventer.emit("raw", message)
|
||||||
# Meshcentral does pong wrong and breaks our parsing, so fix it here. This is fixed now, but we want compatibility with old versions.
|
# Meshcentral does pong wrong and breaks our parsing, so fix it here.
|
||||||
if message == '{action:"pong"}':
|
if message == '{action:"pong"}':
|
||||||
message = '{"action":"pong"}'
|
message = '{"action":"pong"}'
|
||||||
|
|
||||||
@@ -571,7 +571,7 @@ class Session(object):
|
|||||||
while True:
|
while True:
|
||||||
data = await event_queue.get()
|
data = await event_queue.get()
|
||||||
if filter and not util.compare_dict(filter, data):
|
if filter and not util.compare_dict(filter, data):
|
||||||
continue
|
continue
|
||||||
yield data
|
yield data
|
||||||
finally:
|
finally:
|
||||||
self._eventer.off("server_event", _)
|
self._eventer.off("server_event", _)
|
||||||
@@ -1062,6 +1062,30 @@ class Session(object):
|
|||||||
raise exceptions.ServerError(data["result"])
|
raise exceptions.ServerError(data["result"])
|
||||||
return True
|
return True
|
||||||
|
|
||||||
|
async def remove_devices(self, nodeids, timeout=None):
|
||||||
|
'''
|
||||||
|
Remove device(s) from MeshCentral
|
||||||
|
|
||||||
|
Args:
|
||||||
|
nodeids (str|list[str]): nodeid(s) of the device(s) that have to be removed
|
||||||
|
timeout (int): duration in seconds to wait for a response before throwing an error
|
||||||
|
|
||||||
|
Returns:
|
||||||
|
bool: True on success, raise otherwise
|
||||||
|
|
||||||
|
Raises:
|
||||||
|
:py:class:`~meshctrl.exceptions.ServerError`: Error text from server if there is a failure
|
||||||
|
:py:class:`~meshctrl.exceptions.SocketError`: Info about socket closure
|
||||||
|
asyncio.TimeoutError: Command timed out
|
||||||
|
'''
|
||||||
|
if isinstance(nodeids, str):
|
||||||
|
nodeids = [nodeids]
|
||||||
|
|
||||||
|
data = await self._send_command({ "action": 'removedevices', "nodeids": nodeids}, "remove_devices", timeout=timeout)
|
||||||
|
|
||||||
|
if data.get("result", "ok").lower() != "ok":
|
||||||
|
raise exceptions.ServerError(data["result"])
|
||||||
|
return True
|
||||||
|
|
||||||
async def add_device_group(self, name, description="", amtonly=False, features=0, consent=0, timeout=None):
|
async def add_device_group(self, name, description="", amtonly=False, features=0, consent=0, timeout=None):
|
||||||
'''
|
'''
|
||||||
@@ -1473,7 +1497,7 @@ class Session(object):
|
|||||||
return nid
|
return nid
|
||||||
|
|
||||||
result = {n: {"complete": False, "result": [], "command": command} for n in nodeids}
|
result = {n: {"complete": False, "result": [], "command": command} for n in nodeids}
|
||||||
async def _console():
|
async def _():
|
||||||
async for event in self.events({"action": "msg", "type": "console"}):
|
async for event in self.events({"action": "msg", "type": "console"}):
|
||||||
node = match_nodeid(event["nodeid"], nodeids)
|
node = match_nodeid(event["nodeid"], nodeids)
|
||||||
if node:
|
if node:
|
||||||
@@ -1485,26 +1509,7 @@ class Session(object):
|
|||||||
elif (event["value"].startswith("Run commands")):
|
elif (event["value"].startswith("Run commands")):
|
||||||
continue
|
continue
|
||||||
result[node]["result"].append(event["value"])
|
result[node]["result"].append(event["value"])
|
||||||
|
async def __(command):
|
||||||
# We create this task AFTER getting the first message, but I don't feel like implementing this twice, so we'll pass in the first message and have it parsed immediately
|
|
||||||
async def _reply(responseid, start_data=None):
|
|
||||||
# Returns True when all results are in, Falsey otherwise
|
|
||||||
def _parse_event(event):
|
|
||||||
node = match_nodeid(event["nodeid"], nodeids)
|
|
||||||
if node:
|
|
||||||
result.setdefault(node, {})["complete"] = True
|
|
||||||
result[node]["result"].append(event["result"])
|
|
||||||
if all(_["complete"] for key, _ in result.items()):
|
|
||||||
return True
|
|
||||||
|
|
||||||
if start_data is not None:
|
|
||||||
if _parse_event(start_data):
|
|
||||||
return
|
|
||||||
async for event in self.events({"action": "msg", "type": "runcommands", "responseid": responseid}):
|
|
||||||
if _parse_event(event):
|
|
||||||
break
|
|
||||||
|
|
||||||
async def __(command, tg, tasks):
|
|
||||||
data = await self._send_command(command, "run_command", timeout=timeout)
|
data = await self._send_command(command, "run_command", timeout=timeout)
|
||||||
|
|
||||||
if data.get("type", None) != "runcommands" and data.get("result", "ok").lower() != "ok":
|
if data.get("type", None) != "runcommands" and data.get("result", "ok").lower() != "ok":
|
||||||
@@ -1533,10 +1538,15 @@ class Session(object):
|
|||||||
console_task.cancel()
|
console_task.cancel()
|
||||||
elif data.get("type", None) == "runcommands" and not ignore_output:
|
elif data.get("type", None) == "runcommands" and not ignore_output:
|
||||||
tasks.append(tg.create_task(asyncio.wait_for(_reply(data["responseid"], start_data=data), timeout=timeout)))
|
tasks.append(tg.create_task(asyncio.wait_for(_reply(data["responseid"], start_data=data), timeout=timeout)))
|
||||||
|
# Force this to run immediately? This might be odd; but we want to make sure we get don't lose the race condition with the srever.
|
||||||
|
# Not sure if this actually works but I haven't yet seen it fail. *shrug*
|
||||||
|
await asyncio.sleep(0)
|
||||||
|
|
||||||
tasks = []
|
tasks = []
|
||||||
async with asyncio.TaskGroup() as tg:
|
async with asyncio.TaskGroup() as tg:
|
||||||
tasks.append(tg.create_task(__({ "action": 'runcommands', "nodeids": nodeids, "type": (2 if powershell else 0), "cmds": command, "runAsUser": runAsUser, "reply": not ignore_output}, tg, tasks)))
|
if expect_response:
|
||||||
|
tasks.append(tg.create_task(asyncio.wait_for(_(), timeout=timeout)))
|
||||||
|
tasks.append(tg.create_task(__({ "action": 'runcommands', "nodeids": nodeids, "type": (2 if powershell else 0), "cmds": command, "runAsUser": runAsUser })))
|
||||||
|
|
||||||
return {n: v | {"result": "".join(v["result"])} for n,v in result.items()}
|
return {n: v | {"result": "".join(v["result"])} for n,v in result.items()}
|
||||||
|
|
||||||
|
|||||||
@@ -1,4 +1,4 @@
|
|||||||
FROM python:3.13
|
FROM python:3.12
|
||||||
WORKDIR /usr/local/app
|
WORKDIR /usr/local/app
|
||||||
|
|
||||||
# Install the application dependencies
|
# Install the application dependencies
|
||||||
|
|||||||
@@ -1,8 +1,8 @@
|
|||||||
FROM ghcr.io/ylianst/meshcentral:1.1.50
|
FROM ghcr.io/ylianst/meshcentral:latest
|
||||||
RUN apk add curl
|
RUN apk add curl
|
||||||
RUN apk add python3
|
RUN apk add python3
|
||||||
WORKDIR /opt/meshcentral/
|
WORKDIR /opt/meshcentral/
|
||||||
COPY ./scripts/meshcentral ./scripts
|
COPY ./scripts/meshcentral ./scripts
|
||||||
COPY ./config/meshcentral/data /opt/meshcentral/meshcentral-data
|
COPY ./config/meshcentral/data /opt/meshcentral/meshcentral-data
|
||||||
COPY ./config/meshcentral/overrides /opt/meshcentral/meshcentral
|
COPY ./config/meshcentral/overrides /opt/meshcentral/meshcentral
|
||||||
ENTRYPOINT ["python3", "/opt/meshcentral/scripts/create_users.py"]
|
CMD ["python3", "/opt/meshcentral/scripts/create_users.py"]
|
||||||
@@ -7,9 +7,9 @@ thisdir = os.path.abspath(os.path.dirname(__file__))
|
|||||||
with open(os.path.join(thisdir, "users.json")) as infile:
|
with open(os.path.join(thisdir, "users.json")) as infile:
|
||||||
users = json.load(infile)
|
users = json.load(infile)
|
||||||
for username, password in users.items():
|
for username, password in users.items():
|
||||||
print(subprocess.check_output(["node", "/opt/meshcentral/meshcentral", "--createaccount", username, "--pass", password, "--name", username]))
|
subprocess.check_output(["node", "/opt/meshcentral/meshcentral", "--createaccount", username, "--pass", password, "--name", username])
|
||||||
|
|
||||||
|
|
||||||
print(subprocess.check_output(["node", "/opt/meshcentral/meshcentral", "--adminaccount", "admin"]))
|
subprocess.check_output(["node", "/opt/meshcentral/meshcentral", "--adminaccount", "admin"])
|
||||||
|
|
||||||
subprocess.call(["bash", "/opt/meshcentral/entrypoint.sh"])
|
subprocess.call(["bash", "/opt/meshcentral/startup.sh"])
|
||||||
@@ -9,7 +9,16 @@ import requests
|
|||||||
|
|
||||||
async def test_sanity(env):
|
async def test_sanity(env):
|
||||||
async with meshctrl.Session(env.mcurl, user="unprivileged", password=env.users["unprivileged"], ignore_ssl=True) as s:
|
async with meshctrl.Session(env.mcurl, user="unprivileged", password=env.users["unprivileged"], ignore_ssl=True) as s:
|
||||||
|
got_pong = asyncio.Event()
|
||||||
|
async def _():
|
||||||
|
async for raw in s.raw_messages():
|
||||||
|
if raw == '{action:"pong"}':
|
||||||
|
got_pong.set()
|
||||||
|
break
|
||||||
|
ping_task = None
|
||||||
async with asyncio.TaskGroup() as tg:
|
async with asyncio.TaskGroup() as tg:
|
||||||
|
tg.create_task(asyncio.wait_for(_(), timeout=5))
|
||||||
|
tg.create_task(asyncio.wait_for(got_pong.wait(), timeout=5))
|
||||||
ping_task = tg.create_task(s.ping(timeout=10))
|
ping_task = tg.create_task(s.ping(timeout=10))
|
||||||
print("\ninfo ping: {}\n".format(ping_task.result()))
|
print("\ninfo ping: {}\n".format(ping_task.result()))
|
||||||
print("\ninfo user_info: {}\n".format(await s.user_info()))
|
print("\ninfo user_info: {}\n".format(await s.user_info()))
|
||||||
|
|||||||
@@ -251,15 +251,7 @@ async def test_mesh_device(env):
|
|||||||
assert "Run commands completed." not in r[agent2.nodeid]["result"], "Didn't parse run command ending correctly"
|
assert "Run commands completed." not in r[agent2.nodeid]["result"], "Didn't parse run command ending correctly"
|
||||||
assert "meshagent" in (await privileged_session.run_command(agent.nodeid, "ls", timeout=10))[agent.nodeid]["result"], "ls gave incorrect data"
|
assert "meshagent" in (await privileged_session.run_command(agent.nodeid, "ls", timeout=10))[agent.nodeid]["result"], "ls gave incorrect data"
|
||||||
|
|
||||||
# Test run_commands missing device
|
# Test run commands with ndividual device permissions
|
||||||
try:
|
|
||||||
await admin_session.run_command([agent.nodeid, "notanid"], "ls", timeout=10)
|
|
||||||
except* (meshctrl.exceptions.ServerError, ValueError):
|
|
||||||
pass
|
|
||||||
else:
|
|
||||||
raise Exception("Run command on a device that doesn't exist did not raise an exception")
|
|
||||||
|
|
||||||
# Test run commands with individual device permissions
|
|
||||||
try:
|
try:
|
||||||
await unprivileged_session.run_command(agent.nodeid, "ls", timeout=10)
|
await unprivileged_session.run_command(agent.nodeid, "ls", timeout=10)
|
||||||
except* (meshctrl.exceptions.ServerError, ValueError):
|
except* (meshctrl.exceptions.ServerError, ValueError):
|
||||||
@@ -274,7 +266,7 @@ async def test_mesh_device(env):
|
|||||||
else:
|
else:
|
||||||
raise Exception("Unprivileged user has access to device it should not")
|
raise Exception("Unprivileged user has access to device it should not")
|
||||||
|
|
||||||
assert (await admin_session.add_users_to_device((await unprivileged_session.user_info())["_id"], agent.nodeid, meshctrl.constants.DeviceRights.norights)), "Failed to add user to device"
|
assert (await admin_session.add_users_to_device((await unprivileged_session.user_info())["_id"], agent.nodeid, meshctrl.constants.MeshRights.norights)), "Failed to add user to device"
|
||||||
|
|
||||||
try:
|
try:
|
||||||
await unprivileged_session.run_command(agent.nodeid, "ls", ignore_output=True, timeout=10)
|
await unprivileged_session.run_command(agent.nodeid, "ls", ignore_output=True, timeout=10)
|
||||||
@@ -292,14 +284,12 @@ async def test_mesh_device(env):
|
|||||||
|
|
||||||
assert r.links[(await unprivileged_session.user_info())["_id"]]["rights"] == meshctrl.constants.DeviceRights.norights, "Unprivileged user has too many rights!"
|
assert r.links[(await unprivileged_session.user_info())["_id"]]["rights"] == meshctrl.constants.DeviceRights.norights, "Unprivileged user has too many rights!"
|
||||||
|
|
||||||
assert (await admin_session.add_users_to_device([(await unprivileged_session.user_info())["_id"]], agent.nodeid, meshctrl.constants.DeviceRights.fullrights)), "Failed to modify user's permissions"
|
assert (await admin_session.add_users_to_device([(await unprivileged_session.user_info())["_id"]], agent.nodeid, meshctrl.constants.DeviceRights.remotecontrol|meshctrl.constants.DeviceRights.agentconsole|meshctrl.constants.DeviceRights.remotecommands)), "Failed to modify user's permissions"
|
||||||
|
|
||||||
assert (await unprivileged_session.device_info(agent.nodeid, timeout=10)).links[(await unprivileged_session.user_info())["_id"]]["rights"] == meshctrl.constants.DeviceRights.fullrights, "Adding permissions did not update unprivileged user."
|
assert (await unprivileged_session.device_info(agent.nodeid, timeout=10)).links[(await unprivileged_session.user_info())["_id"]]["rights"] == meshctrl.constants.DeviceRights.remotecontrol|meshctrl.constants.DeviceRights.agentconsole|meshctrl.constants.DeviceRights.remotecommands, "Adding permissions did not update unprivileged user."
|
||||||
|
|
||||||
# For now, this expects no response. If we ever figure out why the server isn't sending console information to us when it should, fix this.
|
# For now, this expects no response. If we ever figure out why the server isn't sending console information te us when it should, fix this.
|
||||||
# assert "meshagent" in (await unprivileged_session.run_command(agent.nodeid, "ls", timeout=10))[agent.nodeid]["result"], "ls gave incorrect data"
|
# assert "meshagent" in (await unprivileged_session.run_command(agent.nodeid, "ls", timeout=10))[agent.nodeid]["result"], "ls gave incorrect data"
|
||||||
# Meshcentral has a 10 second cache on user perms.
|
|
||||||
#await asyncio.sleep(15)
|
|
||||||
await unprivileged_session.run_command(agent.nodeid, "ls", timeout=10)
|
await unprivileged_session.run_command(agent.nodeid, "ls", timeout=10)
|
||||||
|
|
||||||
assert await admin_session.move_to_device_group(agent.nodeid, mesh2.meshid, timeout=5), "Failed to move mesh to new device group"
|
assert await admin_session.move_to_device_group(agent.nodeid, mesh2.meshid, timeout=5), "Failed to move mesh to new device group"
|
||||||
@@ -313,7 +303,7 @@ async def test_mesh_device(env):
|
|||||||
|
|
||||||
assert await admin_session.move_to_device_group([agent.nodeid], mesh.name, isname=True, timeout=5), "Failed to move mesh to new device group by name"
|
assert await admin_session.move_to_device_group([agent.nodeid], mesh.name, isname=True, timeout=5), "Failed to move mesh to new device group by name"
|
||||||
|
|
||||||
# For now, this expects no response. If we ever figure out why the server isn't sending console information te us when it should, fix this.
|
# For now, this expe namects no response. If we ever figure out why the server isn't sending console information te us when it should, fix this.
|
||||||
# assert "meshagent" in (await unprivileged_session.run_command(agent.nodeid, "ls", timeout=10))[agent.nodeid]["result"], "ls gave incorrect data"
|
# assert "meshagent" in (await unprivileged_session.run_command(agent.nodeid, "ls", timeout=10))[agent.nodeid]["result"], "ls gave incorrect data"
|
||||||
try:
|
try:
|
||||||
await unprivileged_session.run_command(agent.nodeid, "ls", timeout=10)
|
await unprivileged_session.run_command(agent.nodeid, "ls", timeout=10)
|
||||||
@@ -323,6 +313,15 @@ async def test_mesh_device(env):
|
|||||||
r = await admin_session.remove_users_from_device_group((await privileged_session.user_info())["_id"], mesh.meshid, timeout=10)
|
r = await admin_session.remove_users_from_device_group((await privileged_session.user_info())["_id"], mesh.meshid, timeout=10)
|
||||||
print("\ninfo remove_users_from_device_group: {}\n".format(r))
|
print("\ninfo remove_users_from_device_group: {}\n".format(r))
|
||||||
assert (r[(await privileged_session.user_info())["_id"]]["success"]), "Failed to remove user from device group"
|
assert (r[(await privileged_session.user_info())["_id"]]["success"]), "Failed to remove user from device group"
|
||||||
|
|
||||||
|
await admin_session.remove_devices(agent2.nodeid, timeout=10)
|
||||||
|
try:
|
||||||
|
await admin_session.device_info(agent2.nodeid, timeout=10)
|
||||||
|
except ValueError:
|
||||||
|
pass
|
||||||
|
else:
|
||||||
|
raise Exception("Device not deleted")
|
||||||
|
|
||||||
assert (await admin_session.remove_users_from_device(agent.nodeid, (await unprivileged_session.user_info())["_id"], timeout=10)), "Failed to remove user from device"
|
assert (await admin_session.remove_users_from_device(agent.nodeid, (await unprivileged_session.user_info())["_id"], timeout=10)), "Failed to remove user from device"
|
||||||
|
|
||||||
|
|
||||||
|
|||||||
Reference in New Issue
Block a user