diff --git a/Cargo.lock b/Cargo.lock index 964333e..a28c5aa 100644 --- a/Cargo.lock +++ b/Cargo.lock @@ -2381,7 +2381,7 @@ dependencies = [ [[package]] name = "peach-config" -version = "0.1.17" +version = "0.1.21" dependencies = [ "clap", "env_logger 0.6.2", @@ -2511,7 +2511,7 @@ dependencies = [ [[package]] name = "peach-web" -version = "0.6.0" +version = "0.6.13" dependencies = [ "async-std", "base64 0.13.0", diff --git a/peach-config/Cargo.toml b/peach-config/Cargo.toml index 5347c57..f3168de 100644 --- a/peach-config/Cargo.toml +++ b/peach-config/Cargo.toml @@ -1,6 +1,6 @@ [package] name = "peach-config" -version = "0.1.17" +version = "0.1.21" authors = ["Andrew Reid ", "Max Fowler "] edition = "2018" description = "Command line tool for installing, updating and configuring PeachCloud" diff --git a/peach-config/src/constants.rs b/peach-config/src/constants.rs index 4a539a0..0437acd 100644 --- a/peach-config/src/constants.rs +++ b/peach-config/src/constants.rs @@ -10,7 +10,7 @@ pub const SERVICES: [&str; 8] = [ "peach-buttons", "peach-oled", "peach-dyndns-updater", - "peach-go-sbot", + "go-sbot", "peach-config", ]; diff --git a/peach-config/src/set_permissions.rs b/peach-config/src/set_permissions.rs index 20d79ab..45a6959 100644 --- a/peach-config/src/set_permissions.rs +++ b/peach-config/src/set_permissions.rs @@ -5,6 +5,7 @@ use crate::utils::cmd; /// so they can be read and written by all PeachCloud services. pub const CONFIGS_DIR: &str = "/var/lib/peachcloud"; pub const PEACH_WEB_DIR: &str = "/usr/share/peach-web"; +pub const PEACH_HOME_DIR: &str = "/home/peach"; /// Utility function to set correct file permissions on the PeachCloud device. /// Accidentally changing file permissions is a fairly common thing to happen, @@ -15,7 +16,8 @@ pub fn set_permissions() -> Result<(), PeachConfigError> { cmd(&["chown", "-R", "peach", CONFIGS_DIR])?; cmd(&["chgrp", "-R", "peach", CONFIGS_DIR])?; cmd(&["chmod", "-R", "u+rwX,g+rwX", PEACH_WEB_DIR])?; - cmd(&["chown", "-R", "peach-web:peach", PEACH_WEB_DIR])?; + cmd(&["chown", "-R", "peach:peach", PEACH_WEB_DIR])?; + cmd(&["chown", "-R", "peach:peach", PEACH_HOME_DIR])?; println!("[ PERMISSIONS SUCCESSFULLY UPDATED ]"); Ok(()) } diff --git a/peach-config/src/setup_peach.rs b/peach-config/src/setup_peach.rs index e027db3..1e09e95 100644 --- a/peach-config/src/setup_peach.rs +++ b/peach-config/src/setup_peach.rs @@ -4,6 +4,7 @@ use std::fs; use crate::error::{FileWriteError, PeachConfigError}; use crate::generate_manifest::save_hardware_config; +use crate::set_permissions::set_permissions; use crate::setup_networking::configure_networking; use crate::setup_peach_deb::setup_peach_deb; use crate::update::update_microservices; @@ -239,6 +240,9 @@ pub fn setup_peach( info!("[ SAVING LOG OF HARDWARE CONFIGURATIONS ]"); save_hardware_config(i2c, rtc)?; + info!("[ SETTING FILE PERMISSIONS ]"); + set_permissions()?; + info!("[ PEACHCLOUD SETUP COMPLETE ]"); info!("[ ------------------------- ]"); info!("[ please reboot your device ]"); diff --git a/peach-lib/src/sbot.rs b/peach-lib/src/sbot.rs index cca4090..ee9434f 100644 --- a/peach-lib/src/sbot.rs +++ b/peach-lib/src/sbot.rs @@ -62,8 +62,9 @@ impl SbotStatus { pub fn read() -> Result { let mut status = SbotStatus::default(); + // note this command does not need to be run as sudo + // because non-privileged users are able to run systemctl show let info_output = Command::new("systemctl") - .arg("--user") .arg("show") .arg("go-sbot.service") .arg("--no-page") @@ -83,8 +84,9 @@ impl SbotStatus { } } + // note this command does not need to be run as sudo + // because non-privileged users are able to run systemctl status let status_output = Command::new("systemctl") - .arg("--user") .arg("status") .arg("go-sbot.service") .output()?; diff --git a/peach-web/Cargo.toml b/peach-web/Cargo.toml index 0b4f9a7..11d345b 100644 --- a/peach-web/Cargo.toml +++ b/peach-web/Cargo.toml @@ -1,6 +1,6 @@ [package] name = "peach-web" -version = "0.6.0" +version = "0.6.13" authors = ["Andrew Reid "] edition = "2018" description = "peach-web is a web application which provides a web interface for monitoring and interacting with the PeachCloud device. This allows administration of the single-board computer (ie. Raspberry Pi) running PeachCloud, as well as the ssb-server and related plugins." diff --git a/peach-web/debian/peach-web.service b/peach-web/debian/peach-web.service index 0891180..d10e45a 100644 --- a/peach-web/debian/peach-web.service +++ b/peach-web/debian/peach-web.service @@ -1,14 +1,10 @@ [Unit] -Description=Rocket web application for serving the PeachCloud web interface. +Description=Rouille web application for serving the PeachCloud web interface. [Service] -User=peach-web -Group=www-data +User=peach +Group=peach WorkingDirectory=/usr/share/peach-web -Environment="ROCKET_ENV=prod" -Environment="ROCKET_ADDRESS=127.0.0.1" -Environment="ROCKET_PORT=3000" -Environment="ROCKET_LOG=critical" Environment="RUST_LOG=info" ExecStart=/usr/bin/peach-web Restart=always diff --git a/peach-web/debian/postinst b/peach-web/debian/postinst index c2aba8e..910a979 100644 --- a/peach-web/debian/postinst +++ b/peach-web/debian/postinst @@ -2,8 +2,7 @@ set -e # create user which peach-web runs as -adduser --quiet --system peach-web -usermod -g peach peach-web +id -u peach &>/dev/null || adduser --quiet peach # create nginx config cat < /etc/nginx/sites-enabled/default @@ -15,16 +14,25 @@ server { rewrite ^/(.*)/$ /$1 permanent; location / { - proxy_pass http://127.0.0.1:3000; + proxy_pass http://127.0.0.1:8000; } } EOF -cat < /etc/sudoers.d/peach-web -# allow peach-web to run commands as peach-go-sbot without a password -peach-web ALL=(peach-go-sbot) NOPASSWD:ALL +# update sudoers to allow peach-web to stop and restart go-sbot.service +mkdir -p /etc/sudoers.d/ +SYSTEMCTL=/bin/systemctl +START="${SYSTEMCTL} start go-sbot.service" +RESTART="${SYSTEMCTL} restart go-sbot.service" +STOP="${SYSTEMCTL} stop go-sbot.service" +ENABLE="${SYSTEMCTL} enable go-sbot.service" +DISABLE="${SYSTEMCTL} disable go-sbot.service" + +cat < /etc/sudoers.d/peach-web +peach ALL=(ALL) NOPASSWD: $START, $STOP, $RESTART, $ENABLE, $DISABLE EOF +chmod 0440 /etc/sudoers.d/peach-web # cargo deb automatically replaces this token below, see https://github.com/mmstick/cargo-deb/blob/master/systemd.md #DEBHELPER# \ No newline at end of file diff --git a/peach-web/src/routes/guide.rs b/peach-web/src/routes/guide.rs index 5babd7c..d5fc4eb 100644 --- a/peach-web/src/routes/guide.rs +++ b/peach-web/src/routes/guide.rs @@ -29,7 +29,7 @@ pub fn build_template() -> PreEscaped { } } " to start the sbot. If the server starts successfully, you will see a green smiley face on the home page. If the face is orange and sleeping, that means the sbot is still inactive (ie. the process is not running). If the face is red and dead, that means the sbot failed to start - indicated an error. For now, the best way to gain insight into the problem is to check the systemd log. Open a terminal and enter: " - code { "systemctl --user status go-sbot.service" } + code { "systemctl status go-sbot.service" } ". The log output may give some clues about the source of the error." } } diff --git a/peach-web/src/routes/status/scuttlebutt.rs b/peach-web/src/routes/status/scuttlebutt.rs index 3630a88..fd8ca8d 100644 --- a/peach-web/src/routes/status/scuttlebutt.rs +++ b/peach-web/src/routes/status/scuttlebutt.rs @@ -53,7 +53,6 @@ fn run_on_startup_element(boot_state: &Option) -> Markup { fn database_element(state: &str) -> Markup { // retrieve the sequence number of the latest message in the sbot database let sequence_num = sbot::latest_sequence_number(); - match (state, sequence_num) { // if the state is "active" and latest_sequence_number() was successful ("active", Ok(number)) => { @@ -62,7 +61,9 @@ fn database_element(state: &str) -> Markup { label class="label-small font-gray" { "MESSAGES IN LOCAL DATABASE" } } } - (_, _) => html! { label class="label-small font-gray" { "DATABASE UNAVAILABLE" } }, + (_, _) => { + html! { label class="label-small font-gray" { "DATABASE UNAVAILABLE" } } + } } } diff --git a/peach-web/src/utils/sbot.rs b/peach-web/src/utils/sbot.rs index b170b7b..8a8b34c 100644 --- a/peach-web/src/utils/sbot.rs +++ b/peach-web/src/utils/sbot.rs @@ -24,8 +24,8 @@ use crate::{error::PeachWebError, utils::sbot}; /// Executes a systemctl command for the go-sbot.service process. pub fn systemctl_sbot_cmd(cmd: &str) -> io::Result { - Command::new("systemctl") - .arg("--user") + Command::new("sudo") + .arg("systemctl") .arg(cmd) .arg("go-sbot.service") .output()