mirror of
https://github.com/freedombox/FreedomBox.git
synced 2026-01-28 08:03:36 +00:00
7470821dc7
- Don't use command line argument for sending the join password for security. - murmurd can switch to mumble-server UID before performing database operations. Remove code to switch to mumble-server user. - murmurd seems to return correct response code of 0 upon successfully setting the password. Simplify code accordingly. - Use subprocess.run() instead of subprocess.Popen for convenience. Tests: - Run functional and unit tests on Debian stable. - Perform a fresh installation. - Verify that setting super user password works. - Verify that setting root channel names works. - Verify that setting join password works. Signed-off-by: Sunil Mohan Adapa <sunil@medhas.org> Reviewed-by: James Valleroy <jvalleroy@mailbox.org>
88 lines
2.3 KiB
Python
88 lines
2.3 KiB
Python
# SPDX-License-Identifier: AGPL-3.0-or-later
|
|
"""
|
|
Configure Mumble server.
|
|
"""
|
|
|
|
import pathlib
|
|
import subprocess
|
|
from typing import Optional
|
|
|
|
import augeas
|
|
|
|
from plinth import action_utils
|
|
from plinth.actions import privileged
|
|
|
|
CONFIG_FILE = '/etc/mumble-server.ini'
|
|
DATA_DIR = '/var/lib/mumble-server'
|
|
|
|
|
|
@privileged
|
|
def setup():
|
|
"""Setup Mumble server."""
|
|
aug = _load_augeas()
|
|
aug.set('.anon/sslCert', DATA_DIR + '/fullchain.pem')
|
|
aug.set('.anon/sslKey', DATA_DIR + '/privkey.pem')
|
|
aug.save()
|
|
|
|
|
|
@privileged
|
|
def set_super_user_password(password: str):
|
|
"""Set the superuser password with murmurd command."""
|
|
subprocess.run(['murmurd', '-readsupw'], input=password.encode(),
|
|
stdout=subprocess.DEVNULL, check=False)
|
|
|
|
|
|
@privileged
|
|
def get_domain() -> Optional[str]:
|
|
"""Return domain name set in mumble or empty string."""
|
|
domain_file = pathlib.Path('/var/lib/mumble-server/domain-freedombox')
|
|
try:
|
|
return domain_file.read_text(encoding='utf-8')
|
|
except FileNotFoundError:
|
|
return None
|
|
|
|
|
|
@privileged
|
|
def set_domain(domain_name: Optional[str]):
|
|
"""Write a file containing domain name."""
|
|
if domain_name:
|
|
domain_file = pathlib.Path('/var/lib/mumble-server/domain-freedombox')
|
|
domain_file.write_text(domain_name, encoding='utf-8')
|
|
|
|
|
|
@privileged
|
|
def change_join_password(join_password: str):
|
|
"""Change to password that is required to join the server"""
|
|
aug = _load_augeas()
|
|
aug.set('.anon/serverpassword', join_password)
|
|
aug.save()
|
|
action_utils.service_try_restart('mumble-server')
|
|
|
|
|
|
@privileged
|
|
def change_root_channel_name(root_channel_name: str):
|
|
"""Change the name of the Root channel."""
|
|
aug = _load_augeas()
|
|
aug.set('.anon/registerName', root_channel_name)
|
|
aug.save()
|
|
action_utils.service_try_restart('mumble-server')
|
|
|
|
|
|
@privileged
|
|
def get_root_channel_name() -> Optional[str]:
|
|
"""Return the currently configured Root channel name."""
|
|
aug = _load_augeas()
|
|
name = aug.get('.anon/registerName')
|
|
return name or None
|
|
|
|
|
|
def _load_augeas():
|
|
"""Initialize Augeas."""
|
|
aug = augeas.Augeas(flags=augeas.Augeas.NO_LOAD +
|
|
augeas.Augeas.NO_MODL_AUTOLOAD)
|
|
aug.transform('Php', CONFIG_FILE)
|
|
aug.set('/augeas/context', '/files' + CONFIG_FILE)
|
|
aug.load()
|
|
|
|
return aug
|