devbox
很楠不爱3
这个屌丝很懒，什么也没留下！
关注作者
热门标签
热门文章
当前位置:   article > 正文

主机管理+堡垒机系统开发：前端批量命令结果（十二）

作者：很楠不爱3 | 2024-05-20 14:41:05

赞

踩

{% for i in groups.all %}

一、实际生产的架构图

1、生产环境为什么要这样干

  1. 解耦
  2. 异步

 2、常用的queue软件

  1. redis, rabbitmq
  2. github ,
  3. restful API
  4. celery

二、我们今天如何实现？

1、实现思路

问题：views和web之间已返回，线程这里就断开了，那是因为你用django又启了一个线程

怎样才启动一个独立的进程，和django是没有关系，只不过是用django启动的，由操作系统来管理

三、目录结构

四、代码实现

1、backend

1、main

  1. import subprocess
  2. from web import models
  3. from django.contrib.auth import authenticate
  4. import random,string,uuid
  5.  
  6.  
  7. class HostManager(object):
  8.     """用户登陆堡垒机后的交互程序"""
  9.     def __init__(self):
  10.         self.user = None
  11.     def get_session_id(self,bind_host_obj,tag):
  12.         '''apply  session id'''
  13.         session_obj = models.Session(user_id = self.user.id,bind_host=bind_host_obj,tag=tag)
  14.  
  15.         session_obj.save()
  16.         return session_obj
  17.     
  18.     def interactive(self):
  19.         """交互脚本"""
  20.         print("----run---------")
  21.  
  22.         count = 0
  23.         while count <3:
  24.             username = input("Username:").strip()
  25.             password = input("Password:").strip()
  26.             user = authenticate(username=username,password=password)
  27.             if user:
  28.                 print("Welcome %s".center(50,'-') % user.name )
  29.                 self.user = user
  30.                 break
  31.             else:
  32.                 print("Wrong username or password!")
  33.  
  34.             count += 1
  35.  
  36.         else:
  37.             exit("Too many attempts, bye.")
  38.  
  39.         if self.user: #验证成功
  40.             while True:
  41.                 for index,host_group  in enumerate(self.user.host_groups.all()): #select_related()
  42.                     print("%s.\t%s[%s]" %(index,host_group.name, host_group.bind_hosts.count()))
  43.                 print("z.\t未分组主机[%s]" %(self.user.bind_hosts.count()))
  44.  
  45.  
  46.                 choice = input("%s>>:"% self.user.name).strip()
  47.                 if len(choice) == 0:continue
  48.                 selected_host_group = None
  49.  
  50.                 if choice.isdigit():
  51.                     choice = int(choice)
  52.                     if choice >=0 and choice <= index: #合法选项
  53.                         selected_host_group = self.user.host_groups.all()[choice]
  54.                 elif choice == 'z':
  55.                     selected_host_group = self.user
  56.  
  57.                 if selected_host_group:
  58.                     print("selected host group", selected_host_group)
  59.                     while True:
  60.                         for index, bind_host in enumerate(selected_host_group.bind_hosts.all()):
  61.                             print("%s.\t%s" % (index, bind_host))
  62.                         choice = choice = input("%s>>>:" % self.user.name).strip()
  63.                         if choice.isdigit():
  64.                             choice = int(choice)
  65.                             if choice >= 0 and choice <= index:  # 合法选项
  66.                                 print("going to logon ....", selected_host_group.bind_hosts.all()[choice])
  67.                                 bind_host = selected_host_group.bind_hosts.all()[choice]
  68.                                 ssh_tag  = uuid.uuid4()
  69.                                 session_obj =  self.get_session_id(bind_host,ssh_tag)
  70.  
  71.                                 monitor_script = subprocess.Popen("sh /opt/CrazyEye/backend/session_tracker.sh %s %s" % (ssh_tag,session_obj.id),shell=True,stdout=subprocess.PIPE,stderr=subprocess.PIPE)
  72.                                 
  73.                                 #print(monitor_script.stderr.read()) 
  74.  
  75.                                 subprocess.run('sshpass -p %s ssh %s@%s -E %s -o  StrictHostKeyChecking=no' %(bind_host.remote_user.password,
  76.                                                                            bind_host.remote_user.username,
  77.                                                                            bind_host.host.ip_addr ,ssh_tag ), shell=True)
  78.                                 
  79.  
  80.                         elif choice == 'b':
  81.                             break

2、task_manager

  1. import json,os ,subprocess
  2. from django import conf
  3. from web import models
  4.  
  5. class MultiTaskManger(object):
  6.     """负责解析并触发批量任务"""
  7.  
  8.     def __init__(self,request):
  9.         self.request = request
  10.  
  11.         self.call_task()
  12.  
  13.     def task_parser(self):
  14.         """解析任务"""
  15.         self.task_data = json.loads(self.request.POST.get("task_data"))
  16.  
  17.     def call_task(self):
  18.  
  19.         self.task_parser()
  20.  
  21.         if self.task_data['task_type'] == 0:#cmd
  22.             self.cmd_task()
  23.  
  24.         elif self.task_data['task_type'] == 1:#file transfer
  25.             self.file_transfer_task()
  26.  
  27.  
  28.     def cmd_task(self):
  29.         """
  30.         1.生产任务id
  31.         2.触发任务
  32.         3.返回任务id
  33.         :return:
  34.         """
  35.  
  36.         task_obj = models.Task.objects.create(user=self.request.user,
  37.                                               task_type=self.task_data['task_type'],
  38.                                               content = self.task_data["cmd"])
  39.  
  40.         sub_task_objs = []
  41.  
  42.         for host_id in self.task_data['selected_host_ids']       :
  43.             sub_task_objs.append(models.TaskLogDetail(task=task_obj,bind_host_id=host_id,result='init...',status=2))
  44.  
  45.  
  46.         models.TaskLogDetail.objects.bulk_create(sub_task_objs)
  47.  
  48.         task_script_obj = subprocess.Popen("python %s %s" %(conf.settings.MULTITASK_SCRIPT,task_obj.id),
  49.                                            shell=True,stdout=subprocess.PIPE)
  50.  
  51.  
  52.  
  53.         self.task = task_obj
  54.  
  55.  
  56.  
  57.  
  58.  
  59.     def file_transfer_task(self):
  60.         """
  61.          1.生产任务记录
  62.          2.触发任务
  63.          3. 返回任务id
  64.         :return:
  65.         """
  66.  
  67.  
  68.         task_obj = models.Task.objects.create(user=self.request.user,
  69.                                               task_type=self.task_data['task_type'],
  70.                                               content=json.dumps(self.task_data))
  71.  
  72.         sub_task_objs = []
  73.  
  74.  
  75.         for host_id in self.task_data['selected_host_ids']:
  76.             sub_task_objs.append(models.TaskLogDetail(task=task_obj, bind_host_id=host_id, result='init...', status=2))
  77.  
  78.         models.TaskLogDetail.objects.bulk_create(sub_task_objs)
  79.  
  80.  
  81.         task_script_obj = subprocess.Popen("python %s %s" % (conf.settings.MULTITASK_SCRIPT, task_obj.id),
  82.                                            shell=True, stdout=subprocess.PIPE)
  83.  
  84.         self.task = task_obj

3、task_runner　　

  1. import sys ,os
  2. import time,json
  3. from concurrent.futures  import ThreadPoolExecutor
  4.  
  5. import paramiko
  6.  
  7. def  ssh_cmd(task_log_obj):
  8.     host = task_log_obj.bind_host.host
  9.     user_obj = task_log_obj.bind_host.remote_user
  10.  
  11.     try:
  12.  
  13.         ssh = paramiko.SSHClient()
  14.         ssh.set_missing_host_key_policy(paramiko.AutoAddPolicy())
  15.         ssh.connect(host.ip_addr, host.port, user_obj.username, user_obj.password,timeout=10)
  16.  
  17.         stdin, stdout, stderr = ssh.exec_command(task_log_obj.task.content)
  18.  
  19.         stdout_res = stdout.read()
  20.         stderr_res = stderr.read()
  21.  
  22.         result = stdout_res + stderr_res
  23.         print(result)
  24.         task_log_obj.result = result
  25.  
  26.         task_log_obj.status = 0
  27.         ssh.close()
  28.  
  29.     except Exception as e :
  30.         task_log_obj.result = e
  31.         task_log_obj.status = 1
  32.  
  33.     task_log_obj.save()
  34.  
  35. def file_transfer(task_log_obj):
  36.     host = task_log_obj.bind_host.host
  37.     user_obj = task_log_obj.bind_host.remote_user
  38.     try:
  39.  
  40.         t = paramiko.Transport((host.ip_addr, host.port))
  41.  
  42.         t.connect(username=user_obj.username, password=user_obj.password)
  43.  
  44.         sftp = paramiko.SFTPClient.from_transport(t)
  45.  
  46.         task_data = json.loads(task_log_obj.task.content)
  47.  
  48.  
  49.         if task_data['file_transfer_type'] == 'send':
  50.             sftp.put(task_data['local_file_path'],task_data['remote_file_path'])
  51.             task_log_obj.result = "send local file [%s] to remote [%s] succeeded!" %(task_data['local_file_path'],
  52.                                                                                      task_data['remote_file_path'])
  53.  
  54.         else: #get
  55.  
  56.             local_file_path = "%s/%s" %(django.conf.settings.DOWNLOAD_DIR,task_log_obj.task.id)
  57.             if not os.path.isdir(local_file_path):
  58.                 os.mkdir(local_file_path)
  59.             file_name = task_data['remote_file_path'].split('/')[-1]
  60.             sftp.get(task_data['remote_file_path'], "%s/%s.%s" %(local_file_path,host.ip_addr,file_name))
  61.             task_log_obj.result = "get remote file [%s] succeeded" %(task_data['remote_file_path'])
  62.  
  63.         t.close()
  64.         task_log_obj.status = 0
  65.  
  66.     except Exception as e:
  67.         task_log_obj.result = e
  68.         task_log_obj.status = 1
  69.     task_log_obj.save()
  70.  
  71.  
  72. if __name__ == '__main__':
  73.  
  74.     base_dir = os.path.dirname(os.path.dirname(os.path.abspath(__file__)))
  75.     sys.path.append(base_dir)
  76.     os.environ.setdefault("DJANGO_SETTINGS_MODULE", "CrazyEye.settings")
  77.     import django
  78.     django.setup()
  79.     from django import conf
  80.  
  81.     from web import models
  82.  
  83.  
  84.     if len(sys.argv) ==  1:
  85.         exit("error:must provide task_id!")
  86.     task_id = sys.argv[1]
  87.  
  88.     task_obj = models.Task.objects.get(id=task_id)
  89.  
  90.  
  91.     #1. 生产多线程
  92.     pool = ThreadPoolExecutor(10)
  93.  
  94.  
  95.     if task_obj.task_type == 0:#cmd
  96.         thread_func = ssh_cmd
  97.     else: #file_transfer
  98.         thread_func = file_transfer
  99.  
  100.     for task_log_detail_obj in task_obj.tasklogdetail_set.all():
  101.         pool.submit(thread_func,task_log_detail_obj)
  102.  
  103.         #ssh_cmd(task_log_detail_obj)
  104.  
  105.     pool.shutdown(wait=True)

2、CrazyEye

1、settings

  1 import os
  2 
  3 # Build paths inside the project like this: os.path.join(BASE_DIR, ...)
  4 BASE_DIR = os.path.dirname(os.path.dirname(os.path.abspath(__file__)))
  5 
  6 
  7 # Quick-start development settings - unsuitable for production
  8 # See https://docs.djangoproject.com/en/1.10/howto/deployment/checklist/
  9 
 10 # SECURITY WARNING: keep the secret key used in production secret!
 11 SECRET_KEY = 'c+lq-s!5j1($4zj+_3icw1xwr)yt#%x%&um#!e!b*-*5x(0&3a'
 12 
 13 # SECURITY WARNING: don't run with debug turned on in production!
 14 DEBUG = True
 15 
 16 ALLOWED_HOSTS = ["*"]
 17 
 18 
 19 # Application definition
 20 
 21 INSTALLED_APPS = [
 22     'django.contrib.admin',
 23     'django.contrib.auth',
 24     'django.contrib.contenttypes',
 25     'django.contrib.sessions',
 26     'django.contrib.messages',
 27     'django.contrib.staticfiles',
 28     'web',
 29 ]
 30 
 31 MIDDLEWARE = [
 32     'django.middleware.security.SecurityMiddleware',
 33     'django.contrib.sessions.middleware.SessionMiddleware',
 34     'django.middleware.common.CommonMiddleware',
 35     'django.middleware.csrf.CsrfViewMiddleware',
 36     'django.contrib.auth.middleware.AuthenticationMiddleware',
 37     'django.contrib.messages.middleware.MessageMiddleware',
 38     'django.middleware.clickjacking.XFrameOptionsMiddleware',
 39 ]
 40 
 41 ROOT_URLCONF = 'CrazyEye.urls'
 42 
 43 TEMPLATES = [
 44     {
 45         'BACKEND': 'django.template.backends.django.DjangoTemplates',
 46         'DIRS': [os.path.join(BASE_DIR, 'templates')]
 47         ,
 48         'APP_DIRS': True,
 49         'OPTIONS': {
 50             'context_processors': [
 51                 'django.template.context_processors.debug',
 52                 'django.template.context_processors.request',
 53                 'django.contrib.auth.context_processors.auth',
 54                 'django.contrib.messages.context_processors.messages',
 55             ],
 56         },
 57     },
 58 ]
 59 
 60 WSGI_APPLICATION = 'CrazyEye.wsgi.application'
 61 
 62 
 63 # Database
 64 # https://docs.djangoproject.com/en/1.10/ref/settings/#databases
 65 
 66 DATABASES = {
 67     'default': {
 68         'ENGINE': 'django.db.backends.sqlite3',
 69         'NAME': os.path.join(BASE_DIR, 'db.sqlite3'),
 70     }
 71 }
 72 
 73 
 74 # Password validation
 75 # https://docs.djangoproject.com/en/1.10/ref/settings/#auth-password-validators
 76 
 77 AUTH_PASSWORD_VALIDATORS = [
 78     {
 79         'NAME': 'django.contrib.auth.password_validation.UserAttributeSimilarityValidator',
 80     },
 81     {
 82         'NAME': 'django.contrib.auth.password_validation.MinimumLengthValidator',
 83     },
 84     {
 85         'NAME': 'django.contrib.auth.password_validation.CommonPasswordValidator',
 86     },
 87     {
 88         'NAME': 'django.contrib.auth.password_validation.NumericPasswordValidator',
 89     },
 90 ]
 91 
 92 
 93 # Internationalization
 94 # https://docs.djangoproject.com/en/1.10/topics/i18n/
 95 
 96 LANGUAGE_CODE = 'en-us'
 97 
 98 TIME_ZONE = 'UTC'
 99 
100 USE_I18N = True
101 
102 USE_L10N = True
103 
104 USE_TZ = True
105 
106 
107 # Static files (CSS, JavaScript, Images)
108 # https://docs.djangoproject.com/en/1.10/howto/static-files/
109 
110 STATIC_URL = '/static/'
111 
112 STATICFILES_DIRS = (
113     os.path.join(BASE_DIR,'statics'),
114 )
115 
116 
117 AUTH_USER_MODEL = 'web.UserProfile'
118 
119 AUDIT_LOG_DIR = os.path.join(BASE_DIR,'log')
120 MULTITASK_SCRIPT= os.path.join(BASE_DIR,'backend/task_runner.py')
121 
122 DOWNLOAD_DIR = os.path.join(BASE_DIR,'downloads')
123 
124 
125 LOGIN_URL = "/login/"
settings

2、urls

  1. from django.conf.urls import url
  2. from django.contrib import admin
  3. from web import views
  4.  
  5. urlpatterns = [
  6.     url(r'^admin/', admin.site.urls),
  7.     url(r'^$', views.dashboard),
  8.     url(r'^user_audit/$', views.user_audit,name="user_audit"),
  9.     url(r'^audit_log/(\w+-\w+-\w+)/$', views.audit_log_date,name="audit_log_date"),
  10.     url(r'^audit_log/(\w+-\w+-\w+)/(\d+)/$', views.audit_log_detail,name="audit_log_detail"),
  11.     url(r'^webssh/$', views.webssh,name="webssh"),
  12.     url(r'^multitask/cmd/$', views.multitask_cmd,name="multitask_cmd"),
  13.     url(r'^multitask/file_transfer/$', views.multitask_file_transfer,name="multitask_file_transfer"),
  14.     url(r'^multitask/$', views.multitask,name="multitask"),
  15.     url(r'^multitask/result/$', views.multitask_result,name="task_result"),
  16.     url(r'^login/$', views.acc_login),
  17.     url(r'^logout/$', views.acc_logout,name="logout"),
  18.  
  19. ]

3、templates

1、multitack_cmd.html

  1. {% extends 'index.html' %}
  2.  
  3.  
  4. {% block page-title %}主机管理|批量命令{% endblock %}
  5.  
  6. {% block page-content %}
  7.     {% csrf_token %}
  8.  
  9. <div class="row">
  10.  
  11.     {% include 'multitask_host_list_component.html' %}
  12.  
  13.     <div class="col-lg-8">
  14.         <div class="panel">
  15.             <div class="panel-heading">
  16.                 <h3 class="panel-title">命令操作</h3>
  17.             </div>
  18.             <div class="panel-body">
  19.                 <textarea id="cmd_text" class="form-control"></textarea>
  20.                 <input type="button" id='post_task_btn'  οnclick="PostTask(this,'cmd')" class="btn btn-success pull-right" value="执行命令">
  21.             </div>
  22.         </div>
  23.         <div class="panel">
  24.             <div class="panel-heading">
  25.                 <h3 class="panel-title">任务结果</h3>
  26.             </div>
  27.             <div class="panel-body">
  28.                 <ul id="task_result_container"></ul>
  29.             </div>
  30.         </div>
  31.     </div>
  32.  
  33. </div>
  34.  
  35.  
  36. {% include 'multitask_js_component.html' %}
  37.  
  38. {% endblock %}

2、multitask_host_list_component

  1.     <div class="col-lg-4">
  2.         <div class="panel">
  3.             <div class="panel-heading">
  4.                 <h3 class="panel-title">主机列表</h3>
  5.             </div>
  6.             <div class="panel-body">
  7.                     <div class="list-group bord-no">
  8.                         <a οnclick="HostListDisplayToggle(this)" class="list-group-item " href="#">
  9.                             <input type="checkbox" οnclick="SelectGroup(this)">
  10.                             未分组主机
  11.                             <span class="badge badge-primary">{{ request.user.bind_hosts.count }}</span>
  12.                         </a>
  13.                         <ol class="hide">
  14.                             {% for bind_host in request.user.bind_hosts.all %}
  15.                                 <li><input type="checkbox"  select_host="true" value="{{ bind_host.id }}">{{ bind_host.host.hostname }}({{ bind_host.host.ip_addr }})@{{ bind_host.remote_user.username}}</li>
  16.                             {% endfor %}
  17.                         </ol>
  18.  
  19.  
  20.  
  21.                         {% for host_group in request.user.host_groups.select_related %}
  22.  
  23.                             <a οnclick="HostListDisplayToggle(this)" class="list-group-item " href="#">
  24.                                 <input type="checkbox" οnclick="SelectGroup(this)">
  25.                                 {{ host_group.name }}
  26.                                 <span class="badge badge-primary">{{ host_group.bind_hosts.count }}</span>
  27.                             </a>
  28.                             <ol class="hide">
  29.                                 {% for bind_host in host_group.bind_hosts.all %}
  30.                                     <li><input type="checkbox"  select_host="true" value="{{ bind_host.id }}">{{ bind_host.host.hostname }}({{ bind_host.host.ip_addr }})@{{ bind_host.remote_user.username}}</li>
  31.                                 {% endfor %}
  32.                             </ol>
  33.  
  34.  
  35.                         {% endfor %}
  36.                     </div>
  37.             </div>
  38.         </div>
  39.  
  40.     </div>

3、multitask_js_component

  1. <script>
  2.  
  3.  
  4.     function SelectFileTransferType(ele) {
  5.         if ($(ele).val() == 'get'){
  6.  
  7.             $("#local_file_path").addClass("hide");
  8.         }else {
  9.             $("#local_file_path").removeClass("hide");
  10.         }
  11.     }
  12.  
  13.     function HostListDisplayToggle(ele) {
  14.  
  15.         $(ele).next().toggleClass("hide");
  16.  
  17.  
  18.     }
  19.  
  20.     function SelectGroup(ele) {
  21.  
  22.         $(ele).parent().next().find("input").prop("checked",$(ele).prop("checked"))
  23.  
  24.     }
  25.  
  26.     function  GetTaskResult(task_id) {
  27.  
  28.         $.getJSON( "{% url 'task_result'  %}" ,{'task_id':task_id},function(callback){
  29.  
  30.            console.log( callback);
  31.            var all_task_done = true;
  32.            $.each(callback,function (index,ele) {
  33.                var li_ele = $("li[bind_host_id='"+  ele['id'] +"']");
  34.                li_ele.next().text(ele['result']);
  35.                $(li_ele.children()[0]).text(ele.status);
  36.                if ( ele.status == 2 ){
  37.                    all_task_done = false; //有任务未完成
  38.                }
  39.  
  40.            })
  41.  
  42.            if (all_task_done){
  43.  
  44.                clearInterval(ResultRefreshObj);
  45.                $("#post_task_btn").removeClass("disabled");
  46.            }
  47.  
  48.         });//end getJSON
  49.     }
  50.  
  51.  
  52.     function PostTask(ele,task_type) {
  53.  
  54.         var selected_host_ids  = [];
  55.  
  56.         $("input[select_host]:checked").each(function () {
  57.             selected_host_ids.push( $(this).val()  );
  58.         })
  59.  
  60.         console.log(selected_host_ids)
  61.         if (selected_host_ids.length == 0){
  62.             alert("必须选择主机!")
  63.             return false
  64.         }
  65.  
  66.         if (task_type == "cmd"){
  67.             var cmd_text = $("#cmd_text").val().trim();
  68.  
  69.             if (cmd_text.length == 0){
  70.  
  71.                 alert("必须输入要执行的命令!")
  72.                 return false
  73.             }
  74.  
  75.             var task_arguments = {
  76.                 'selected_host_ids' : selected_host_ids,
  77.                 'task_type':0 ,//cmd
  78.                 'cmd': cmd_text,
  79.  
  80.             }
  81.  
  82.         }else {
  83.  
  84.             var file_transfer_type = $("select[name='file_transfer_type']").val()
  85.             var local_file_path = $("#local_file_path").val().trim()
  86.             var remote_file_path = $("#remote_file_path").val().trim()
  87.             if (file_transfer_type == "send"){
  88.                 if (local_file_path.length == 0){
  89.                     alert("必须输入本地文件路径！")
  90.                     return false
  91.                 }
  92.  
  93.             }
  94.  
  95.             if (remote_file_path.length == 0){
  96.                     alert("必须输入远程文件路径！")
  97.                     return false
  98.             }
  99.  
  100.             var task_arguments = {
  101.                 'selected_host_ids' : selected_host_ids,
  102.                 'task_type':1 ,//file_transfer
  103.                 'file_transfer_type': file_transfer_type,
  104.                 'local_file_path':local_file_path,
  105.                 'remote_file_path':remote_file_path
  106.  
  107.             }
  108.  
  109.         }
  110.  
  111.  
  112.  
  113.  
  114.  
  115.  
  116.         //再此任务执行完成前，不允许再提交新任务
  117.         $(ele).addClass("disabled")
  118.         //提交新任务之前情况任务结果面版
  119.         $("#task_result_container").empty();
  120.  
  121.  
  122.         $.post("{%  url 'multitask' %}"  , {'task_data':JSON.stringify(task_arguments),'csrfmiddlewaretoken':$("input[name='csrfmiddlewaretoken']").val() },function(callback){
  123.  
  124.             console.log(callback);
  125.  
  126.             var callback = JSON.parse(callback);
  127.             $.each(callback.selected_hosts,function (index,ele) {
  128.                 var li_ele = "<li bind_host_id='"+ ele['id'] +"'>Host:" + ele.bind_host__host__hostname + "(" +ele.bind_host__host__ip_addr +")----------------<span></span></li><pre>sdff</pre>" ;
  129.                 $("#task_result_container").append(li_ele);
  130.  
  131.             })
  132.  
  133.  
  134.  
  135.             //去后端定时拿结果
  136.             ResultRefreshObj = setInterval(function () {
  137.  
  138.                     GetTaskResult(callback.task_id);
  139.  
  140.  
  141.                 },2000);
  142.  
  143.         });//end post
  144.  
  145.  
  146.  
  147.     }
  148.  
  149. </script>

4、web

1、admin

  1 from django.contrib import admin
  2 
  3 from web import models
  4 # Register your models here.
  5 
  6 
  7 from django import forms
  8 from django.contrib import admin
  9 from django.contrib.auth.models import Group
 10 from django.contrib.auth.admin import UserAdmin as BaseUserAdmin
 11 from django.contrib.auth.forms import ReadOnlyPasswordHashField
 12 
 13 from web.models import UserProfile
 14 
 15 
 16 class UserCreationForm(forms.ModelForm):
 17     """A form for creating new users. Includes all the required
 18     fields, plus a repeated password."""
 19     password1 = forms.CharField(label='Password', widget=forms.PasswordInput)
 20     password2 = forms.CharField(label='Password confirmation', widget=forms.PasswordInput)
 21 
 22     class Meta:
 23         model = UserProfile
 24         fields = ('email', 'name')
 25 
 26     def clean_password2(self):
 27         # Check that the two password entries match
 28         password1 = self.cleaned_data.get("password1")
 29         password2 = self.cleaned_data.get("password2")
 30         if password1 and password2 and password1 != password2:
 31             raise forms.ValidationError("Passwords don't match")
 32         return password2
 33 
 34     def save(self, commit=True):
 35         # Save the provided password in hashed format
 36         user = super(UserCreationForm, self).save(commit=False)
 37         user.set_password(self.cleaned_data["password1"])
 38         if commit:
 39             user.save()
 40         return user
 41 
 42 
 43 class UserChangeForm(forms.ModelForm):
 44     """A form for updating users. Includes all the fields on
 45     the user, but replaces the password field with admin's
 46     password hash display field.
 47     """
 48     password = ReadOnlyPasswordHashField()
 49 
 50     class Meta:
 51         model = UserProfile
 52         fields = ('email', 'password', 'name', 'is_active', 'is_admin')
 53 
 54     def clean_password(self):
 55         # Regardless of what the user provides, return the initial value.
 56         # This is done here, rather than on the field, because the
 57         # field does not have access to the initial value
 58         return self.initial["password"]
 59 
 60 
 61 class UserProfileAdmin(BaseUserAdmin):
 62     # The forms to add and change user instances
 63     form = UserChangeForm
 64     add_form = UserCreationForm
 65 
 66     # The fields to be used in displaying the User model.
 67     # These override the definitions on the base UserAdmin
 68     # that reference specific fields on auth.User.
 69     list_display = ('email', 'name','is_staff', 'is_admin')
 70     list_filter = ('is_admin','is_staff')
 71     fieldsets = (
 72         (None, {'fields': ('email', 'password')}),
 73         ('Personal info', {'fields': ('name',)}),
 74         ('堡垒机主机授权', {'fields': ('bind_hosts','host_groups')}),
 75         ('Permissions', {'fields': ('is_admin','is_staff','user_permissions','groups')}),
 76     )
 77     # add_fieldsets is not a standard ModelAdmin attribute. UserAdmin
 78     # overrides get_fieldsets to use this attribute when creating a user.
 79     add_fieldsets = (
 80         (None, {
 81             'classes': ('wide',),
 82             'fields': ('email', 'name', 'password1', 'password2')}
 83         ),
 84     )
 85     search_fields = ('email',)
 86     ordering = ('email',)
 87     filter_horizontal = ('user_permissions','groups','bind_hosts','host_groups')
 88 
 89 # Now register the new UserAdmin...
 90 admin.site.register(models.UserProfile, UserProfileAdmin)
 91 # ... and, since we're not using Django's built-in permissions,
 92 # unregister the Group model from admin.
 93 admin.site.unregister(Group)
 94 
 95 
 96 
 97 class RemoteUserAdmin(admin.ModelAdmin):
 98     list_display = ('username','auth_type','password')
 99 
100 
101 class TaskAdmin(admin.ModelAdmin):
102     list_display = ['id','user','task_type','content','date']
103 
104 
105 class TaskLogDetailAdmin(admin.ModelAdmin):
106     list_display = ['id','task','bind_host','result','status','start_date','end_date']
107 
108 
109 admin.site.register(models.Host)
110 admin.site.register(models.HostGroup)
111 admin.site.register(models.BindHost)
112 admin.site.register(models.RemoteUser,RemoteUserAdmin)
113 admin.site.register(models.IDC)
114 admin.site.register(models.Session)
115 admin.site.register(models.Task,TaskAdmin)
116 admin.site.register(models.TaskLogDetail,TaskLogDetailAdmin)
View Code

2、models

  1 from django.db import models
  2 from django.contrib.auth.models import User
  3 
  4 from django.contrib.auth.models import (
  5     BaseUserManager, AbstractBaseUser,PermissionsMixin
  6 )
  7 
  8 
  9 
 10 # Create your models here.
 11 
 12 class IDC(models.Model):
 13     name = models.CharField(max_length=64,unique=True)
 14 
 15     def __str__(self):
 16         return self.name
 17 
 18 class Host(models.Model):
 19     """存储所有主机"""
 20     hostname = models.CharField(max_length=64)
 21     ip_addr = models.GenericIPAddressField(unique=True)
 22     port = models.PositiveSmallIntegerField(default=22)
 23     idc = models.ForeignKey("IDC")
 24 
 25     enabled = models.BooleanField(default=True)
 26 
 27     def __str__(self):
 28         return self.ip_addr
 29 
 30 
 31 
 32 class HostGroup(models.Model):
 33     """主机组"""
 34     name = models.CharField(max_length=64, unique=True)
 35     bind_hosts  = models.ManyToManyField("BindHost")
 36     def __str__(self):
 37         return self.name
 38 
 39 
 40 
 41 class RemoteUser(models.Model):
 42     """存储远程用户名密码"""
 43     username = models.CharField(max_length=64)
 44     auth_type_choices = ((0,'ssh/password'),(1,'ssh/key'))
 45     auth_type = models.SmallIntegerField(choices=auth_type_choices,default=0)
 46     password = models.CharField(max_length=128,blank=True,null=True)
 47 
 48     #hosts = models.ManyToManyField("Host")
 49 
 50     def __str__(self):
 51         return "%s(%s)%s" %( self.username,self.get_auth_type_display(),self.password)
 52 
 53     class Meta:
 54         unique_together = ('username','auth_type','password')
 55 
 56 class BindHost(models.Model):
 57     """绑定远程主机和远程用户的对应关系"""
 58     host = models.ForeignKey("Host")
 59     remote_user = models.ForeignKey("RemoteUser")
 60 
 61     def __str__(self):
 62         return "%s -> %s" %(self.host,self.remote_user)
 63     class Meta:
 64         unique_together = ("host","remote_user")
 65 
 66 
 67 
 68 class UserProfileManager(BaseUserManager):
 69     def create_user(self, email, name, password=None):
 70         """
 71         Creates and saves a User with the given email, date of
 72         birth and password.
 73         """
 74         if not email:
 75             raise ValueError('Users must have an email address')
 76 
 77         user = self.model(
 78             email=self.normalize_email(email),
 79             name=name,
 80         )
 81 
 82         user.set_password(password)
 83         user.save(using=self._db)
 84         return user
 85 
 86     def create_superuser(self, email, name, password):
 87         """
 88         Creates and saves a superuser with the given email, date of
 89         birth and password.
 90         """
 91         user = self.create_user(
 92             email,
 93             password=password,
 94             name=name,
 95         )
 96         user.is_admin = True
 97         user.is_staff = True
 98         user.save(using=self._db)
 99         return user
100 
101 
102 class UserProfile(AbstractBaseUser,PermissionsMixin):
103     email = models.EmailField(
104         verbose_name='email address',
105         max_length=255,
106         unique=True,
107     )
108     name = models.CharField(max_length=64)
109     is_active = models.BooleanField(default=True)
110     is_admin = models.BooleanField(default=False)
111     is_staff = models.BooleanField(
112         ('staff status'),
113         default=False,
114         help_text=('Designates whether the user can log into this admin site.'),
115     )
116 
117     bind_hosts = models.ManyToManyField("BindHost",blank=True)
118     host_groups = models.ManyToManyField("HostGroup",blank=True)
119 
120     objects = UserProfileManager()
121 
122     USERNAME_FIELD = 'email'
123     REQUIRED_FIELDS = ['name',]
124 
125     def get_full_name(self):
126         # The user is identified by their email address
127         return self.email
128 
129     def get_short_name(self):
130         # The user is identified by their email address
131         return self.email
132 
133     def __str__(self):              # __unicode__ on Python 2
134         return self.email
135 
136     def has_perm(self, perm, obj=None):
137         "Does the user have a specific permission?"
138         # Simplest possible answer: Yes, always
139         return True
140 
141     def has_module_perms(self, app_label):
142         "Does the user have permissions to view the app `app_label`?"
143         # Simplest possible answer: Yes, always
144         return True
145 
146 
147 
148 
149 class Session(models.Model):
150     '''生成用户操作session id '''
151     user = models.ForeignKey('UserProfile')
152     bind_host = models.ForeignKey('BindHost')
153     tag = models.CharField(max_length=128,default='n/a')
154     closed = models.BooleanField(default=False)
155     cmd_count = models.IntegerField(default=0) #命令执行数量
156     stay_time = models.IntegerField(default=0, help_text="每次刷新自动计算停留时间",verbose_name="停留时长(seconds)")
157     date = models.DateTimeField(auto_now_add=True)
158 
159     def __str__(self):
160         return '<id:%s user:%s bind_host:%s>' % (self.id,self.user.email,self.bind_host.host)
161     class Meta:
162         verbose_name = '审计日志'
163         verbose_name_plural = '审计日志'
164 
165 
166 
167 class Task(models.Model):
168     """批量任务记录表"""
169     user = models.ForeignKey("UserProfile")
170     task_type_choices = ((0,'cmd'),(1,'file_transfer'))
171     task_type = models.SmallIntegerField(choices=task_type_choices)
172     content = models.TextField(verbose_name="任务内容")
173     #hosts = models.ManyToManyField("BindHost")
174     date  = models.DateTimeField(auto_now_add=True)
175 
176     def __str__(self):
177         return "%s %s" %(self.task_type,self.content)
178 
179 
180 class TaskLogDetail(models.Model):
181     task = models.ForeignKey("Task")
182     bind_host = models.ForeignKey("BindHost")
183     result = models.TextField()
184 
185     status_choices = ((0,'success'),(1,'failed'),(2,'init'))
186     status = models.SmallIntegerField(choices=status_choices)
187 
188     start_date = models.DateTimeField(auto_now_add=True)
189     end_date = models.DateTimeField(blank=True,null=True)
190 
191 
192     def __str__(self):
193         return "%s %s" %(self.bind_host,self.status)
models

3、views

  1. from django.shortcuts import render,redirect,HttpResponse
  2. from django.contrib.auth.decorators import login_required
  3. from django.contrib.auth import authenticate,logout,login
  4. from  django.conf import settings
  5. import os,re,json
  6. from web import models
  7. from backend.task_manager import  MultiTaskManger
  8.  
  9. from backend import audit
  10. # Create your views here.
  11.  
  12. def json_date_handler(obj):
  13.     if hasattr(obj, 'isoformat'):
  14.         return obj.strftime("%Y-%m-%d %T")
  15.  
  16.  
  17.  
  18. @login_required
  19. def dashboard(request):
  20.     return render(request,'index.html')
  21.  
  22.  
  23. def acc_login(request):
  24.  
  25.     error_msg = ''
  26.  
  27.     if request.method == "POST":
  28.         username = request.POST.get('username')
  29.         password = request.POST.get('password')
  30.         user = authenticate(username=username,password=password)
  31.         if user:
  32.             login(request,user)
  33.  
  34.             return redirect("/")
  35.  
  36.         else:
  37.             error_msg = "Wrong username or password!"
  38.     return render(request,"login.html",{'error_msg':error_msg})
  39.  
  40.  
  41. def acc_logout(request):
  42.  
  43.     logout(request)
  44.  
  45.     return redirect("/login/")
  46.  
  47.  
  48.  
  49. @login_required
  50. def webssh(request):
  51.     return render(request,'web_ssh.html')
  52.  
  53. @login_required
  54. def user_audit(request):
  55.  
  56.     log_dirs = os.listdir(settings.AUDIT_LOG_DIR)
  57.  
  58.  
  59.     return render(request,'user_audit.html',locals())
  60.  
  61.  
  62. @login_required
  63. def audit_log_date(request,log_date):
  64.     log_date_path = "%s/%s" %(settings.AUDIT_LOG_DIR,log_date)
  65.     log_file_dirs = os.listdir(log_date_path)
  66.     session_ids = [re.search("\d+",i).group() for i in log_file_dirs ]
  67.  
  68.     session_objs = models.Session.objects.filter(id__in=session_ids)
  69.  
  70.     return render(request, 'user_audit_file_list.html', locals())
  71.  
  72.  
  73. @login_required
  74. def multitask_cmd(request):
  75.  
  76.     return render(request,"multitask_cmd.html")
  77.  
  78. @login_required
  79. def multitask_file_transfer(request):
  80.     return render(request,'multitask_file_transfer.html')
  81.  
  82.  
  83. @login_required
  84. def multitask_result(request):
  85.     task_id = request.GET.get('task_id')
  86.     task_obj = models.Task.objects.get(id=task_id)
  87.     task_log_results = list(task_obj.tasklogdetail_set.values('id', 'result','status','start_date','end_date'))
  88.  
  89.     return  HttpResponse(json.dumps(task_log_results,default=json_date_handler))
  90.  
  91. @login_required
  92. def multitask(request):
  93.  
  94.     print("--->",request.POST)
  95.     task_data = json.loads(request.POST.get('task_data'))
  96.     print("--->selcted hosts",task_data)
  97.  
  98.     task_obj= MultiTaskManger(request)
  99.     selected_hosts = list(task_obj.task.tasklogdetail_set.all().values('id', 'bind_host__host__ip_addr',
  100.                                                              'bind_host__host__hostname', 'bind_host__remote_user__username'))
  101.  
  102.  
  103.  
  104.     return HttpResponse(
  105.         json.dumps({'task_id':task_obj.task.id,'selected_hosts':selected_hosts})
  106.     )
  107.  
  108.  
  109. @login_required
  110. def audit_log_detail(request,log_date,session_id):
  111.     log_date_path = "%s/%s" % (settings.AUDIT_LOG_DIR, log_date)
  112.     log_file_path = "%s/session_%s.log" %(log_date_path,session_id)
  113.  
  114.     log_parser = audit.AuditLogHandler(log_file_path)
  115.     cmd_list = log_parser.parse()
  116.  
  117.     return render(request,"user_audit_detail.html",locals())

五、测试截图

1、执行一条命令

1、web端

2、admin后台

2、执行多条命令

1、web前端

2、admin后台

4、连接不上的命令截图

连接不上直接排除timeout

3、后台触发一条命令

1、后台触发创建

2、控制台截图

3、admin后台截图

4、执行结果前端web显示

1、任务结果前端显示hostid

2、任务结果限制执行结果

 3、超时处理

 4、机器连接不通

5、超时状态数字变化

6、执行成功状态变化

 

转载于:https://www.cnblogs.com/luoahong/p/9501791.html

声明：本文内容由网友自发贡献，不代表【wpsshop博客】立场，版权归原作者所有，本站不承担相应法律责任。如您发现有侵权的内容，请联系我们。转载请注明出处：https://www.wpsshop.cn/w/很楠不爱3/article/detail/598065
推荐阅读
相关标签

Copyright © 2003-2013 www.wpsshop.cn 版权所有，并保留所有权利。

  

闽ICP备14008679号