makeschsh

   1 #!/usr/bin/python3
   2 #~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~#
   3 # Configuration
   4 schsh = "/usr/local/bin/schsh"
   5 group = "schsh"
   6 chroots = "/var/lib/schsh"
   7
   8 # END of Configuration
   9 #~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~#
  10 # DO NOT TOUCH ANYTHING BELOW THIS LINE
  11
  12 import os, sys, subprocess, pwd, grp
  13
  14 if os.getuid() != 0:
  15         print("Run this a root, please.")
  16         sys.exit(1)
  17
  18
  19 def setup(name):
  20         chroot = os.path.join(chroots, name)
  21         if os.path.exists(chroot):
  22                 raise Exception(chroot+" already exists, please remove it first")
  23         userpw = pwd.getpwnam(name)
  24
  25         # schroot configuration
  26         with open("/etc/schroot/chroot.d/schsh-"+name, "w") as f:
  27                 print("""[schsh-{0}]
  28 type=directory
  29 directory={1}
  30 users={0}
  31 profile=schsh
  32 setup.fstab=schsh/{0}.fstab
  33 """.format(name, chroot), file=f)
  34         with open("/etc/schroot/schsh/"+name+".fstab", "w") as f:
  35                 # no spaces, schroot does not like them
  36                 print("# <file system> <mount point>   <type>  <options>       <dump>  <pass>", file=f)
  37                 # system folders
  38                 for folder in ("/lib", "/lib64", "/usr/bin", "/usr/lib", "/usr/lib64"):
  39                         if os.path.exists(folder):
  40                                 print("{0}\t{0}\tnone\trw,bind\t0\t0".format(folder), file=f)
  41                 # user folder
  42                 print("/home/{0}/data\t/data\tnone\trw,bind\t0\t0".format(name), file=f)
  43
  44         # setup the schroot directory
  45         os.mkdir(chroot)
  46         for folder in ["etc", "dev", "bin", "usr", "data"]:
  47                 os.mkdir(os.path.join(chroot, folder))
  48
  49         # setup /etc/passwd and /etc/group
  50         with open(os.path.join(chroot, "etc", "passwd"), "w") as f:
  51                 print("root:x:0:0:root:/root:/bin/bash", file=f)
  52                 print("{0}:x:{1}:{2}:,,,:/data:/bin/false".format(name, userpw.pw_uid, userpw.pw_gid), file=f)
  53         with open(os.path.join(chroot, "etc", "group"), "w") as f:
  54                 print("root:x:0:", file=f)
  55                 usergrp = grp.getgrgid(userpw.pw_gid)
  56                 print("{0}:x:{1}:".format(usergrp.gr_name, usergrp.gr_gid), file=f)
  57                 if group:
  58                         groupgrp = grp.getgrnam(group)
  59                         assert usergrp.gr_gid != groupgrp.gr_gid
  60                         print("{0}:x:{1}:{2}".format(groupgrp.gr_name, groupgrp.gr_gid, name), file=f)
  61
  62         # user configuration
  63         if userpw.pw_shell != schsh:
  64                 subprocess.check_output(["usermod", "--shell", schsh, name])
  65         if group:
  66                 subprocess.check_output(["adduser", name, "schsh"])
  67
  68         # done!
  69
  70 if len(sys.argv) <= 1:
  71         print("Usage: %s <usernames>" % sys.argv[0])
  72 else:
  73         for name in sys.argv[1:]:
  74                 print("Setting up",name)
  75                 setup(name)