yX d Z ddlZddlmZ ddlmZ ddlmZ ddlm Z ddl
m Z d d
l m
Z
mZ d d lmZ d d lmZ d d
lmZmZ d dlmZ G d d Zdede
j dz ddfdZdS )z
Builder for website isolation jail mount configurations.
Collects user docroots and isolation settings, then generates
the complete jail mount configuration.
N)Path)ClPwd) userdomains) NoPanelUser )
write_via_tmp )config
jail_utils) MountConfig)IsolatedRootConfig)build_docroot_treeprocess_ordered_mounts) MountTypec Z e Zd ZdZdefdZdeddfdZdeddfdZdeddfd Zdefd
Z dS ) JailMountsConfigBuilderz
Builder for generating jail mount configuration files.
Collects docroots and isolation settings, then generates
the mount configuration string for the jail.c implementation.
userc || _ t | _ t | _ t | _ d S )N)r set
_all_docroots_isolated_docroots_phpselector_docroots)selfr s `opt/cloudlinux/venv/lib/python3.11/site-packages/clcagefslib/webisolation/jail_config_builder.py__init__z JailMountsConfigBuilder.__init__& s3 '*uu,/EE /2uu""" docrootreturnNc : | j | dS )z%Register a docroot path for the user.N)r addr r s r add_docrootz#JailMountsConfigBuilder.add_docroot, s w'''''r c : | j | dS )z&Mark a docroot as requiring isolation.N)r r r! s r enable_isolationz(JailMountsConfigBuilder.enable_isolation0 s ##G,,,,,r c : | j | dS )z-Enable per-domain PHP selector for a docroot.N)r r r! s r enable_phpselectorz*JailMountsConfigBuilder.enable_phpselector4 s "&&w/////r c " t | j }|j }|j |j }}t
| j }g }t | j t D ]
}t j || }t | d|d } t |||| }
t || } | | | d} | t$ j | | d |
D ].}
| |
j |
j |
j |
j /| | | t$ j d || j v r| t$ j d
d | t$ j d
d
| t$ j dt j | d
| t$ j dt j | d | t$ j dt j | d | | | d | S )z
Generate the complete mount configuration.
Returns:
Configuration string in jail.c mount syntax.
)keyz/homeT) root_pathtarget
persistent)active_docroottreeuidgid)r. r/ z/.clwpos)mkdir/z/etc/cl.selectorz
/usr/selector)sourcer* z/usr/selector.etcz/etc/cl.selector/z/etc/cl.php.d/z
/etc/cl.php.dz/var/.cagefs/website/z /var/.cagefs
) r get_pw_by_namer pw_dirpw_uidpw_gidr r sortedr lenr full_website_pathr
r r add_overlaymountr BINDtyper2 r* options
close_overlayr USER_MOUNTSr get_website_idappendrenderjoin)r pwhomedirr. r/ r- generated_configsr split_storage_base home_overlaydocroot_mounts jail_configawp_pathr< s r buildz JailMountsConfigBuilder.build8 s WW
#
#DI
.
.)9biS "$"455 d 53??? D B D BG!+!=gw!O!O - /666wSW L
4 &Ts N 777K
# #L 1 1 1 "+++H y~x: N N N (
Z
Z ""5:u|U\5=YYYY
% %l 3 3 3
OOI 13 7 7 7 $444 N+=* N+=. N+cz?XY`?a?a+c+c- N+`J 4 000%d++G $[%6%6 7 7 QSWXXX
)//11 % %G$$$$ . * * +F3GG O =v F F F H )))) . , , +F3GG O =v F F F H ""7++++
]]__F!!4e!<<<#&-..4D0E0EvNNNNNs6 A0 0 BB C C76C7D## EE) rR r^ pathlibr clcommonr clcommon.cpapir clcommon.cpapi.cpapiexceptionsr ior r
r rL r mount_configr
mount_orderingr r mount_typesr r rS
UserConfigrh rT r r rs sP & & & & & & 6 6 6 6 6 6 $ $ $ $ $ $ , , , , , , F F F F F F F F " " " " " "p, p, p, p, p, p, p, p,f3O3 3OV5F5M 3ORV 3O 3O 3O 3O 3O 3Or