210 lines
8.6 KiB
Python
Executable File
210 lines
8.6 KiB
Python
Executable File
#!/usr/bin/env python3
|
|
|
|
import argparse, sys, platform, os, multiprocessing, subprocess, getpass
|
|
|
|
pref = "\033["
|
|
reset = f"{pref}0m"
|
|
composefile = "firegex-compose.yml"
|
|
|
|
class colors:
|
|
black = "30m"
|
|
red = "31m"
|
|
green = "32m"
|
|
yellow = "33m"
|
|
blue = "34m"
|
|
magenta = "35m"
|
|
cyan = "36m"
|
|
white = "37m"
|
|
|
|
def puts(text, *args, color=colors.white, is_bold=False, **kwargs):
|
|
print(f'{pref}{1 if is_bold else 0};{color}' + text + reset, *args, **kwargs)
|
|
|
|
def sep(): puts("-----------------------------------", is_bold=True)
|
|
|
|
def check_if_exists(program):
|
|
return subprocess.call(['sh', '-c',program], stdout=subprocess.DEVNULL, stderr=subprocess.STDOUT) == 0
|
|
|
|
def composecmd(cmd, composefile=None):
|
|
if composefile:
|
|
cmd = f"-f {composefile} {cmd}"
|
|
if not check_if_exists("docker ps"):
|
|
return puts("Cannot use docker, the user hasn't the permission or docker isn't running", color=colors.red)
|
|
elif check_if_exists("docker compose"):
|
|
return os.system(f"docker compose -p firegex {cmd}")
|
|
elif check_if_exists("docker-compose"):
|
|
return os.system(f"docker-compose -p firegex {cmd}")
|
|
else:
|
|
puts("Docker compose not found! please install docker compose!", color=colors.red)
|
|
|
|
def dockercmd(cmd):
|
|
if check_if_exists("docker"):
|
|
return os.system(f"docker {cmd}")
|
|
elif not check_if_exists("docker ps"):
|
|
puts("Cannot use docker, the user hasn't the permission or docker isn't running", color=colors.red)
|
|
else:
|
|
puts("Docker not found! please install docker!", color=colors.red)
|
|
|
|
def run_checks():
|
|
if not check_if_exists("docker"):
|
|
puts("Docker not found! please install docker and docker compose!", color=colors.red)
|
|
exit()
|
|
elif not check_if_exists("docker-compose") and not check_if_exists("docker compose"):
|
|
print(check_if_exists("docker-compose"), check_if_exists("docker compose"))
|
|
puts("Docker compose not found! please install docker compose!", color=colors.red)
|
|
exit()
|
|
if not check_if_exists("docker ps"):
|
|
puts("Cannot use docker, the user hasn't the permission or docker isn't running", color=colors.red)
|
|
exit()
|
|
|
|
parser = argparse.ArgumentParser()
|
|
parser.add_argument('--port', "-p", type=int, required=False, help='Port where open the web service of the firewall', default=4444)
|
|
parser.add_argument('--clear', required=False, action="store_true", help='Delete docker volume associated to firegex resetting all the settings', default=False)
|
|
parser.add_argument('--logs', required=False, action="store_true", help='Show firegex logs', default=False)
|
|
parser.add_argument('--threads', "-t", type=int, required=False, help='Number of threads started for each service/utility', default=-1)
|
|
parser.add_argument('--no-autostart', "-n", required=False, action="store_true", help='Save docker-compose file and not start the container', default=False)
|
|
parser.add_argument('--build', "-b", required=False, action="store_true", help='Build the container locally', default=False)
|
|
parser.add_argument('--keep','-k', required=False, action="store_true", help='Keep the firegex-compose.yml file generated', default=False)
|
|
parser.add_argument('--stop', '-s', required=False, action="store_true", help='Stop firegex execution', default=False)
|
|
parser.add_argument('--restart', '-r', required=False, action="store_true", help='Restart firegex', default=False)
|
|
parser.add_argument('--psw-no-interactive',type=str, required=False, help='Password for no-interactive mode', default=None)
|
|
parser.add_argument('--startup-psw','-P', required=False, action="store_true", help='Insert password in the startup screen of firegex', default=False)
|
|
|
|
|
|
args = parser.parse_args()
|
|
os.chdir(os.path.dirname(os.path.realpath(__file__)))
|
|
run_checks()
|
|
|
|
def write_compose(psw_set=None):
|
|
with open(composefile,"wt") as compose:
|
|
|
|
if "linux" in sys.platform and not 'microsoft-standard' in platform.uname().release: #Check if not is a wsl also
|
|
compose.write(f"""
|
|
services:
|
|
firewall:
|
|
restart: unless-stopped
|
|
container_name: firegex
|
|
{"build: ." if args.build else "image: ghcr.io/pwnzer0tt1/firegex"}
|
|
network_mode: "host"
|
|
environment:
|
|
- PORT={args.port}
|
|
- NTHREADS={args.threads}
|
|
{"- HEX_SET_PSW="+psw_set.encode().hex() if psw_set else ""}
|
|
volumes:
|
|
- firegex_data:/execute/db
|
|
- type: bind
|
|
source: /proc/sys/net/ipv4/conf/all/route_localnet
|
|
target: /sys_host/net.ipv4.conf.all.route_localnet
|
|
- type: bind
|
|
source: /proc/sys/net/ipv4/ip_forward
|
|
target: /sys_host/net.ipv4.ip_forward
|
|
- type: bind
|
|
source: /proc/sys/net/ipv4/conf/all/forwarding
|
|
target: /sys_host/net.ipv4.conf.all.forwarding
|
|
- type: bind
|
|
source: /proc/sys/net/ipv6/conf/all/forwarding
|
|
target: /sys_host/net.ipv6.conf.all.forwarding
|
|
cap_add:
|
|
- NET_ADMIN
|
|
volumes:
|
|
firegex_data:
|
|
""")
|
|
|
|
else:
|
|
sep()
|
|
puts("--- WARNING ---", color=colors.yellow)
|
|
puts("You are not in a linux machine, the firewall will not work in this machine.", color=colors.red)
|
|
compose.write(f"""
|
|
services:
|
|
firewall:
|
|
restart: unless-stopped
|
|
container_name: firegex
|
|
{"build: ." if args.build else "image: ghcr.io/pwnzer0tt1/firegex"}
|
|
ports:
|
|
- {args.port}:{args.port}
|
|
environment:
|
|
- PORT={args.port}
|
|
- NTHREADS={args.threads}
|
|
{"- HEX_SET_PSW="+psw_set.encode().hex() if psw_set else ""}
|
|
volumes:
|
|
- firegex_data:/execute/db
|
|
- /execute/db
|
|
cap_add:
|
|
- NET_ADMIN
|
|
volumes:
|
|
firegex_data:
|
|
""")
|
|
def main():
|
|
start_operation = not (args.stop or args.restart)
|
|
volume_exists = check_if_exists('docker volume ls --filter="name=^firegex_firegex_data$" --quiet | grep firegex_firegex_data')
|
|
|
|
if args.clear:
|
|
dockercmd("volume rm firegex_firegex_data")
|
|
exit()
|
|
|
|
if args.logs:
|
|
composecmd("logs -f")
|
|
exit()
|
|
|
|
if args.build and not os.path.isfile("./Dockerfile"):
|
|
puts("This is not a clone of firegex, to build firegex the clone of the repository is needed!", color=colors.red)
|
|
exit()
|
|
|
|
if args.threads < 1:
|
|
args.threads = multiprocessing.cpu_count()
|
|
|
|
if start_operation and (not args.build or args.keep):
|
|
if check_if_exists("docker ps --filter 'name=^firegex$' --no-trunc | grep firegex"):
|
|
if args.keep:
|
|
write_compose()
|
|
else:
|
|
puts("Firegex is already running! use --help to see options useful to manage firegex execution", color=colors.yellow)
|
|
exit()
|
|
sep()
|
|
puts(f"Firegex", color=colors.yellow, end="")
|
|
puts(" will start on port ", end="")
|
|
puts(f"{args.port}", color=colors.cyan)
|
|
|
|
psw_set = None
|
|
if args.psw_no_interactive:
|
|
psw_set = args.psw_no_interactive
|
|
elif start_operation and not volume_exists and not args.startup_psw:
|
|
while True:
|
|
puts("Insert the password for firegex: ", end="" , color=colors.yellow, is_bold=True, flush=True)
|
|
psw_set = getpass.getpass("")
|
|
puts("Confirm the password: ", end="" , color=colors.yellow, is_bold=True, flush=True)
|
|
check = getpass.getpass("")
|
|
if check != psw_set:
|
|
puts("Passwords don't match!" , color=colors.red, is_bold=True, flush=True)
|
|
else:
|
|
break
|
|
|
|
write_compose(psw_set)
|
|
|
|
sep()
|
|
if not args.no_autostart:
|
|
try:
|
|
if args.restart:
|
|
puts("Running 'docker-compose restart'\n", color=colors.green)
|
|
composecmd("restart", composefile)
|
|
elif args.stop:
|
|
puts("Running 'docker-compose down'\n", color=colors.green)
|
|
composecmd("down", composefile)
|
|
else:
|
|
if not args.build:
|
|
puts("Downloading docker image from github packages 'docker pull ghcr.io/pwnzer0tt1/firegex'", color=colors.green)
|
|
dockercmd("pull ghcr.io/pwnzer0tt1/firegex")
|
|
puts("Running 'docker-compose up -d --build'\n", color=colors.green)
|
|
composecmd("up -d --build", composefile)
|
|
finally:
|
|
if not args.keep:
|
|
os.remove(composefile)
|
|
else:
|
|
puts("Done! You can start/stop firegex with docker-compose up -d --build", color=colors.yellow)
|
|
sep()
|
|
|
|
if __name__ == "__main__":
|
|
try:
|
|
main()
|
|
except KeyboardInterrupt:
|
|
print()
|