Files
aaPanel/mod/project/backup_restore/modules/plugin_module.py
T
2026-07-24 16:25:43 +08:00

608 lines
29 KiB
Python

# coding: utf-8
# -------------------------------------------------------------------
# aapanel
# -------------------------------------------------------------------
# Copyright (c) 2015-2099 aapanel(http://www.aapanel.com) All rights reserved.
# -------------------------------------------------------------------
# Author: miku <miku@bt.cn>
# -------------------------------------------------------------------
import json
import os
import subprocess
import sys
import time
import warnings
if "/www/server/panel/class" not in sys.path:
sys.path.insert(0, "/www/server/panel/class")
if "/www/server/panel/class_v2" not in sys.path:
sys.path.insert(0, "/www/server/panel/class_v2")
if "/www/server/panel" not in sys.path:
sys.path.insert(0, "/www/server/panel")
import public
from BTPanel import app
from mod.project.backup_restore.base_util import BaseUtil
from mod.project.backup_restore.config_manager import ConfigManager
warnings.filterwarnings("ignore", category=SyntaxWarning)
def get_plugin_object():
import PluginLoader
from panel_plugin_v2 import panelPlugin
p = panelPlugin()
soft_list = PluginLoader.get_plugin_list(0)
# noinspection PyTypeChecker
setattr(p, "_panelPlugin__plugin_s_list", panelPlugin.set_coexist(None, soft_list["list"]))
return p
class PluginModule(BaseUtil, ConfigManager):
def __init__(self):
super().__init__()
self.base_path = '/www/backup/backup_restore'
self.bakcup_task_json = self.base_path + '/backup_task.json'
self.plugin_path = '/www/server/panel/plugin'
self._safe_flag = False
@staticmethod
def _short_text(value, max_length=1200):
try:
value = json.dumps(value, ensure_ascii=False) if isinstance(value, (dict, list)) else str(value)
except Exception:
value = repr(value)
value = value.replace("\r\n", "\n").strip()
if len(value) > max_length:
value = value[-max_length:]
return value
def _get_installed_plugin_info(self, plugin_name):
info_file = os.path.join(self.plugin_path, plugin_name, "info.json")
result = {
"installed": False,
"info_file": info_file,
"version": "",
"checks": os.path.join(self.plugin_path, plugin_name),
"error": ""
}
try:
if not os.path.exists(info_file):
return result
plugin_info = json.loads(public.ReadFile(info_file) or "{}")
result["version"] = str(plugin_info.get("versions", plugin_info.get("version", "")))
result["checks"] = plugin_info.get("checks") or result["checks"]
checks = [item.strip() for item in str(result["checks"]).split(",") if item.strip()]
if checks:
result["installed"] = any(os.path.exists(path) for path in checks)
else:
result["installed"] = os.path.exists(os.path.dirname(info_file))
except Exception as e:
result["error"] = str(e)
return result
def _install_or_skip_plugin(self, plugin_name, plugin_version):
installed_info = self._get_installed_plugin_info(plugin_name)
if installed_info["installed"] and installed_info["version"] == str(plugin_version):
return {
"status": True,
"msg": public.lang("Plugin already installed")
}
self.before_install_plugin(plugin_name)
return self.install_plugin(plugin_name, plugin_version)
def backup_plugin_data(self, timestamp):
self.print_log("====================================================", "backup")
self.print_log(public.lang("Start backing up plugin data"), "backup")
backup_path = self.base_path + "/{timestamp}_backup/plugin".format(timestamp=timestamp)
if not os.path.exists(backup_path):
public.ExecShell('mkdir -p {}'.format(backup_path))
plugin_info = {}
btwaf_path = os.path.join(self.plugin_path, "btwaf")
monitor_path = os.path.join(self.plugin_path, "monitor")
tamper_core_path = os.path.join(self.plugin_path, "tamper_core")
syssafe_path = os.path.join(self.plugin_path, "syssafe")
if os.path.exists(btwaf_path):
result = self.backup_btwaf_data(timestamp)
plugin_info['btwaf'] = result
if os.path.exists(monitor_path):
result = self.backup_monitor_data(timestamp)
plugin_info['monitor'] = result
if os.path.exists(tamper_core_path):
result = self.backup_tamper_core_data(timestamp)
plugin_info['tamper_core'] = result
if os.path.exists(syssafe_path):
result = self.backup_syssafe_data(timestamp)
plugin_info['syssafe'] = result
data_list = self.get_backup_data_list(timestamp)
data_list['data_list']['plugin'] = plugin_info
self.update_backup_data_list(timestamp, data_list)
def backup_btwaf_data(self, timestamp):
backup_path = self.base_path + "/{timestamp}_backup/plugin/btwaf".format(timestamp=timestamp)
if not os.path.exists(backup_path):
public.ExecShell('mkdir -p {}'.format(backup_path))
try:
btwaf_info_json = json.loads(public.ReadFile(os.path.join(self.plugin_path, "btwaf", "info.json")))
result = {
"status": 2,
"err_msg": None,
"version": btwaf_info_json['versions'],
"size": self.get_file_size(os.path.join(self.plugin_path, "btwaf"))
}
public.ExecShell(
"\cp -rpa /www/server/btwaf/config.json {backup_path}/config.json".format(backup_path=backup_path))
public.ExecShell(
"\cp -rpa /www/server/btwaf/site.json {backup_path}/site.json".format(backup_path=backup_path))
public.ExecShell("\cp -rpa /www/server/btwaf/rule {backup_path}/rule".format(backup_path=backup_path))
backup_size = self.format_size(self.get_file_size(backup_path))
self.print_log(public.lang("Nginx firewall ✓ ({})").format(backup_size), 'backup')
return result
except:
return None
def backup_monitor_data(self, timestamp):
backup_path = self.base_path + "/{timestamp}_backup/plugin/monitor".format(timestamp=timestamp)
if not os.path.exists(backup_path):
public.ExecShell('mkdir -p {}'.format(backup_path))
try:
monitor_info_json = json.loads(public.ReadFile(os.path.join(self.plugin_path, "monitor", "info.json")))
result = {
"status": 2,
"err_msg": None,
"version": monitor_info_json['versions'],
"size": self.get_file_size(os.path.join(self.plugin_path, "monitor"))
}
if os.path.exists("/www/server/panel/plugin/monitor/site_robots.json"):
public.ExecShell(
"\cp -rpa /www/server/panel/plugin/monitor/site_robots.json {backup_path}/site_robots.json".format(
backup_path=backup_path
)
)
if os.path.exists("/www/server/panel/plugin/monitor/site_sitemap_info.json"):
public.ExecShell(
"\cp -rpa /www/server/panel/plugin/monitor/site_sitemap_info.json {backup_path}/site_sitemap_info.json".format(
backup_path=backup_path
)
)
if os.path.exists("/www/server/panel/plugin/monitor/spider_api.config"):
public.ExecShell(
"\cp -rpa /www/server/panel/plugin/monitor/spider_api.config {backup_path}/spider_api.config".format(
backup_path=backup_path
)
)
if os.path.exists("/www/server/panel/plugin/monitor/baidu_user.config"):
public.ExecShell(
"\cp -rpa /www/server/panel/plugin/monitor/baidu_user.config {backup_path}/baidu_user.config".format(
backup_path=backup_path
)
)
if os.path.exists("/www/server/panel/plugin/monitor/360_user.config"):
public.ExecShell(
"\cp -rpa /www/server/panel/plugin/monitor/360_user.config {backup_path}/360_user.config".format(
backup_path=backup_path
)
)
public.ExecShell(
"\cp -rpa /www/server/monitor/config {backup_path}/config".format(backup_path=backup_path))
backup_size = self.format_size(self.get_file_size(backup_path))
self.print_log(public.lang("Website monitoring report ✓ ({})").format(backup_size), 'backup')
return result
except:
return None
def backup_tamper_core_data(self, timestamp):
backup_path = self.base_path + "/{timestamp}_backup/plugin/tamper_core".format(timestamp=timestamp)
if not os.path.exists(backup_path):
public.ExecShell('mkdir -p {}'.format(backup_path))
try:
tamper_core_info_json = json.loads(
public.ReadFile(os.path.join(self.plugin_path, "tamper_core", "info.json")))
result = {
"status": 2,
"err_msg": None,
"version": tamper_core_info_json['versions'],
"size": self.get_file_size(os.path.join(self.plugin_path, "tamper_core"))
}
public.ExecShell(
"\cp -rpa /www/server/panel/plugin/tamper_core/tamper_push_template.json {backup_path}/tamper_push_template.json".format(
backup_path=backup_path
)
)
public.ExecShell(
"\cp -rpa /www/server/panel/plugin/tamper_core/rule.json {backup_path}/rule.json".format(
backup_path=backup_path
)
)
public.ExecShell(
"\cp -rpa /www/server/tamper/config_ps.json {backup_path}/config_ps.json".format(
backup_path=backup_path
)
)
public.ExecShell(
"\cp -rpa /www/server/tamper/tamper.conf {backup_path}/tamper.conf".format(
backup_path=backup_path
)
)
backup_size = self.format_size(self.get_file_size(backup_path))
self.print_log(public.lang("Enterprise tamper protection ✓ ({})").format(backup_size), 'backup')
return result
except:
return None
def backup_syssafe_data(self, timestamp):
backup_path = self.base_path + "/{timestamp}_backup/plugin/syssafe".format(timestamp=timestamp)
if not os.path.exists(backup_path):
public.ExecShell('mkdir -p {}'.format(backup_path))
try:
syssafe_info_json = json.loads(public.ReadFile(os.path.join(self.plugin_path, "syssafe", "info.json")))
result = {
"status": 2,
"err_msg": None,
"version": syssafe_info_json['versions'],
"size": self.get_file_size(os.path.join(self.plugin_path, "syssafe"))
}
public.ExecShell(
"\cp -rpa /www/server/panel/plugin/syssafe/config.json {backup_path}/config.json".format(
backup_path=backup_path
)
)
public.ExecShell(
"\cp -rpa /www/server/panel/plugin/syssafe/sys_process.json {backup_path}/sys_process.json".format(
backup_path=backup_path
)
)
public.ExecShell(
"\cp -rpa /www/server/panel/plugin/syssafe/config {backup_path}/".format(
backup_path=backup_path
)
)
backup_size = self.format_size(self.get_file_size(backup_path))
self.print_log(public.lang("System hardening ✓ ({})").format(backup_size), 'backup')
return result
except:
return None
def _sys_safe_pids(self) -> list:
try:
cmd = """ps aux |grep -E "(bt_syssafe|syssafe_main|syssafe_pub)"|
grep -v grep|grep -v systemctl|grep -v "init.d"|awk '{print $2}'|xargs"""
sysafe_output = subprocess.check_output(cmd, shell=True, text=True)
pids = sysafe_output.strip().split()
return pids if pids else []
except Exception:
return []
def restore_plugin_data(self, timestamp):
""""
恢复插件数据
"""
self.print_log("====================================================", "restore")
self.print_log(public.lang("Start restoring plugin data"), "restore")
self.print_log(public.lang("If the migrated machine is not bound to a aapanel user and upgraded to Professional version, plugin restoration failures may occur"), "restore")
restore_data = self.get_restore_data_list(timestamp)
plugin_info = restore_data['data_list']['plugin']
# ============================= start =====================================
self._safe_flag = True if self._sys_safe_pids() else False
try:
public.ExecShell("/etc/init.d/bt_syssafe stop")
except:
pass
# ============================== btwaf =====================================
if 'btwaf' in plugin_info and plugin_info['btwaf']:
log_str = public.lang("Start installing Nginx firewall")
self.print_log(log_str, "restore")
restore_data['data_list']['plugin']['btwaf']['restore_status'] = 1
self.update_restore_data_list(timestamp, restore_data)
plugin_version = plugin_info['btwaf']['version']
install_result = self._install_or_skip_plugin('btwaf', plugin_version)
if install_result['status'] is True:
new_log_str = public.lang("Nginx firewall ✓")
self.replace_log(log_str, new_log_str, "restore")
log_str = public.lang("Start restoring Nginx firewall data")
self.print_log(log_str, "restore")
self.restore_btwaf_data(timestamp)
restore_data['data_list']['plugin']['btwaf']['restore_status'] = 2
self.update_restore_data_list(timestamp, restore_data)
new_log_str = public.lang("Nginx firewall data ✓")
self.replace_log(log_str, new_log_str, "restore")
else:
restore_data['data_list']['plugin']['btwaf']['restore_status'] = 3
restore_data['data_list']['plugin']['btwaf']['err_msg'] = install_result['msg']
self.update_restore_data_list(timestamp, restore_data)
new_log_str = public.lang("Nginx firewall ✗")
self.replace_log(log_str, new_log_str, "restore")
# ====================================== monitor ==============================================
if 'monitor' in plugin_info and plugin_info['monitor']:
log_str = public.lang("Start installing website monitoring report")
self.print_log(log_str, "restore")
restore_data['data_list']['plugin']['monitor']['restore_status'] = 1
self.update_restore_data_list(timestamp, restore_data)
plugin_version = plugin_info['monitor']['version']
install_result = self._install_or_skip_plugin('monitor', plugin_version)
if install_result['status'] is True:
new_log_str = public.lang("Website monitoring report ✓")
self.replace_log(log_str, new_log_str, "restore")
log_str = public.lang("Start restoring website monitoring report data")
self.print_log(log_str, "restore")
self.restore_monitor_data(timestamp)
restore_data['data_list']['plugin']['monitor']['restore_status'] = 2
self.update_restore_data_list(timestamp, restore_data)
new_log_str = public.lang("Website monitoring report data ✓")
self.replace_log(log_str, new_log_str, "restore")
else:
restore_data['data_list']['plugin']['monitor']['restore_status'] = 3
restore_data['data_list']['plugin']['monitor']['err_msg'] = install_result['msg']
self.update_restore_data_list(timestamp, restore_data)
new_log_str = public.lang("Website monitoring report ✗")
self.replace_log(log_str, new_log_str, "restore")
# ========================= tamper_core ======================================
if 'tamper_core' in plugin_info and plugin_info['tamper_core']:
log_str = public.lang("Start installing enterprise tamper protection")
self.print_log(log_str, "restore")
restore_data['data_list']['plugin']['tamper_core']['restore_status'] = 1
self.update_restore_data_list(timestamp, restore_data)
plugin_version = plugin_info['tamper_core']['version']
install_result = self._install_or_skip_plugin('tamper_core', plugin_version)
if install_result['status'] is True:
public.ExecShell("/etc/init.d/bt-tamper stop")
new_log_str = public.lang("Enterprise tamper protection ✓")
self.replace_log(log_str, new_log_str, "restore")
log_str = public.lang("Start restoring enterprise tamper protection data")
self.print_log(log_str, "restore")
self.restore_tamper_core_data(timestamp)
restore_data['data_list']['plugin']['tamper_core']['restore_status'] = 2
self.update_restore_data_list(timestamp, restore_data)
new_log_str = public.lang("Enterprise tamper protection data ✓")
self.replace_log(log_str, new_log_str, "restore")
else:
restore_data['data_list']['plugin']['tamper_core']['restore_status'] = 3
restore_data['data_list']['plugin']['tamper_core']['err_msg'] = install_result['msg']
self.update_restore_data_list(timestamp, restore_data)
new_log_str = public.lang("Enterprise tamper protection ✗")
self.replace_log(log_str, new_log_str, "restore")
# ========================= syssafe ===========================================
if 'syssafe' in plugin_info and plugin_info['syssafe']:
log_str = public.lang("Start installing system hardening")
self.print_log(log_str, "restore")
restore_data['data_list']['plugin']['syssafe']['restore_status'] = 1
self.update_restore_data_list(timestamp, restore_data)
plugin_version = plugin_info['syssafe']['version']
install_result = self._install_or_skip_plugin('syssafe', plugin_version)
if install_result['status'] is True:
public.ExecShell("/etc/init.d/bt_syssafe stop")
new_log_str = public.lang("System hardening ✓")
self.replace_log(log_str, new_log_str, "restore")
log_str = public.lang("Start restoring system hardening data")
self.print_log(log_str, "restore")
self.restore_syssafe_data(timestamp)
restore_data['data_list']['plugin']['syssafe']['restore_status'] = 2
self.update_restore_data_list(timestamp, restore_data)
new_log_str = public.lang("System hardening data ✓")
self.replace_log(log_str, new_log_str, "restore")
else:
restore_data['data_list']['plugin']['syssafe']['restore_status'] = 3
restore_data['data_list']['plugin']['syssafe']['err_msg'] = install_result['msg']
self.update_restore_data_list(timestamp, restore_data)
new_log_str = public.lang("System hardening ✗")
self.replace_log(log_str, new_log_str, "restore")
# ============================= end =====================================
if self._safe_flag is True:
try:
if os.path.exists("/www/server/panel/plugin/syssafe/syssafe_main.py"):
from plugin.syssafe.syssafe_main import syssafe_main as safe_main
res = safe_main().set_open(None)
public.print_log("Syssafe set_open result: {}".format(res))
except Exception as e:
public.print_log("Failed to start syssafe: {}".format(str(e)))
self.print_log(public.lang("Plugin data restoration complete"), "restore")
def restore_btwaf_data(self, timestamp):
restore_path = self.base_path + "/{timestamp}_backup/plugin/btwaf".format(timestamp=timestamp)
plugin_path = "/www/server/btwaf"
if os.path.exists(restore_path) and os.path.exists(plugin_path):
public.ExecShell(
"\cp -rpa {restore_path}/config.json /www/server/btwaf/config.json".format(
restore_path=restore_path
)
)
public.ExecShell(
"\cp -rpa {restore_path}/site.json /www/server/btwaf/site.json".format(
restore_path=restore_path
)
)
public.ExecShell(
"\cp -rpa {restore_path}/rule/* /www/server/btwaf/rule".format(
restore_path=restore_path
)
)
def restore_monitor_data(self, timestamp):
restore_path = self.base_path + "/{timestamp}_backup/plugin/monitor".format(timestamp=timestamp)
plugin_path = "/www/server/panel/plugin/monitor/"
if os.path.exists(restore_path) and os.path.exists(plugin_path):
public.ExecShell(
"\cp -rpa {restore_path}/site_robots.json /www/server/panel/plugin/monitor/site_robots.json".format(
restore_path=restore_path
)
)
public.ExecShell(
"\cp -rpa {restore_path}/site_sitemap_info.json /www/server/panel/plugin/monitor/site_sitemap_info.json".format(
restore_path=restore_path
)
)
public.ExecShell(
"\cp -rpa {restore_path}/spider_api.config /www/server/panel/plugin/monitor/spider_api.config".format(
restore_path=restore_path
)
)
public.ExecShell(
"\cp -rpa {restore_path}/baidu_user.config /www/server/panel/plugin/monitor/baidu_user.config".format(
restore_path=restore_path
)
)
public.ExecShell(
"\cp -rpa {restore_path}/360_user.config /www/server/panel/plugin/monitor/360_user.config".format(
restore_path=restore_path
)
)
public.ExecShell(
"\cp -rpa {restore_path}/config/* /www/server/monitor/config".format(
restore_path=restore_path
)
)
def restore_tamper_core_data(self, timestamp):
restore_path = self.base_path + "/{timestamp}_backup/plugin/tamper_core".format(timestamp=timestamp)
plugin_path = "/www/server/panel/plugin/tamper_core/"
if os.path.exists(restore_path) and os.path.exists(plugin_path):
public.ExecShell(
"\cp -rpa {restore_path}/tamper_push_template.json /www/server/panel/plugin/tamper_core/tamper_push_template.json".format(
restore_path=restore_path
)
)
public.ExecShell(
"\cp -rpa {restore_path}/rule.json /www/server/panel/plugin/tamper_core/rule.json".format(
restore_path=restore_path
)
)
public.ExecShell(
"\cp -rpa {restore_path}/config_ps.json /www/server/tamper/config_ps.json".format(
restore_path=restore_path
)
)
public.ExecShell(
"\cp -rpa {restore_path}/tamper.conf /www/server/tamper/tamper.conf".format(
restore_path=restore_path
)
)
public.ExecShell("/etc/init.d/bt-tamper stop")
def restore_syssafe_data(self, timestamp):
restore_path = self.base_path + "/{timestamp}_backup/plugin/syssafe".format(timestamp=timestamp)
plugin_path = "/www/server/panel/plugin/syssafe/"
if os.path.exists(restore_path) and os.path.exists(plugin_path):
public.ExecShell(
"\cp -rpa {restore_path}/config.json /www/server/panel/plugin/syssafe/config.json".format(
restore_path=restore_path
)
)
public.ExecShell(
"\cp -rpa {restore_path}/sys_process.json /www/server/panel/plugin/syssafe/sys_process.json".format(
restore_path=restore_path
)
)
public.ExecShell(
"\cp -rpa {restore_path}/config/* /www/server/panel/plugin/syssafe/config".format(
restore_path=restore_path
)
)
public.ExecShell("/etc/init.d/bt_syssafe stop")
def before_install_plugin(self, plugin_name: str):
try:
if plugin_name == "btwaf":
cmd = "ps aux | grep 'BT-WAF' | grep -v grep | awk '{print $2}'"
cmd_result = subprocess.run(cmd, shell=True, text=True, capture_output=True, timeout=10)
pids1 = cmd_result.stdout.strip().split()
for pid in pids1:
subprocess.run(["kill", "-9", str(pid)], text=True, capture_output=True, timeout=10)
xss_path = "/www/server/panel/plugin/btwaf/nginx_btwaf_xss"
lsof_result = subprocess.run(
"lsof -t {}".format(xss_path),
shell=True,
text=True,
capture_output=True,
timeout=10
)
pids2 = lsof_result.stdout.strip().split()
for p2 in pids2:
subprocess.run(["kill", "-9", str(p2)], text=True, capture_output=True, timeout=10)
time.sleep(1)
elif plugin_name == "syssafe":
public.ExecShell("/etc/init.d/bt_syssafe stop")
time.sleep(1)
elif plugin_name == "monitor":
pass
elif plugin_name == "tamper_core":
pass
time.sleep(1)
except Exception:
pass
def install_plugin(self, sName, plugin_version):
with app.app_context():
try:
plugin = get_plugin_object()
version_parts = plugin_version.split(".", 1)
sVersion = version_parts[0]
sMin_version = version_parts[1] if len(version_parts) > 1 else ""
get = public.dict_obj()
get.sName = sName
get.version = sVersion
get.min_version = sMin_version
install_response = plugin.install_plugin(get)
if not isinstance(install_response, dict):
return {
'status': False,
'msg': public.lang('Installation failed: {}').format(self._short_text(install_response))
}
if install_response.get("status") not in [0, True]:
return {
'status': False,
'msg': self._short_text(install_response.get("message", install_response.get("msg", "")))
}
info = install_response.get("message")
if not isinstance(info, dict):
return {
'status': False,
'msg': public.lang('Installation failed: {}').format(self._short_text(info))
}
args = public.dict_obj()
args.tmp_path = info.get("tmp_path")
args.plugin_name = sName
args.install_opt = info.get("install_opt")
info = plugin.input_package(args)
return info
except Exception:
import traceback
print(traceback.format_exc())
return {
'status': False,
'msg': public.lang('Installation failed')
}
if __name__ == '__main__':
# 获取命令行参数
if len(sys.argv) < 2:
print("Usage: btpython backup_manager.py <method> <timestamp>")
sys.exit(1)
method_name = sys.argv[1] # 方法名
timestamp = sys.argv[2]
plugin_manager = PluginModule() # 实例化对象
if hasattr(plugin_manager, method_name): # 检查方法是否存在
method = getattr(plugin_manager, method_name) # 获取方法
method(timestamp) # 调用方法
else:
print(f"Error: Method '{method_name}' not found")