fdroidserver/server.py

   1 #!/usr/bin/env python2
   2 # -*- coding: utf-8 -*-
   3 #
   4 # server.py - part of the FDroid server tools
   5 # Copyright (C) 2010-13, Ciaran Gultnieks, ciaran@ciarang.com
   6 #
   7 # This program is free software: you can redistribute it and/or modify
   8 # it under the terms of the GNU Affero General Public License as published by
   9 # the Free Software Foundation, either version 3 of the License, or
  10 # (at your option) any later version.
  11 #
  12 # This program is distributed in the hope that it will be useful,
  13 # but WITHOUT ANY WARRANTY; without even the implied warranty of
  14 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  15 # GNU Affero General Public License for more details.
  16 #
  17 # You should have received a copy of the GNU Affero General Public License
  18 # along with this program.  If not, see <http://www.gnu.org/licenses/>.
  19
  20 import sys
  21 import hashlib
  22 import os
  23 import subprocess
  24 from optparse import OptionParser
  25 import logging
  26 import common
  27
  28 config = None
  29 options = None
  30
  31
  32 def update_awsbucket(repo_section):
  33     '''
  34     Upload the contents of the directory `repo_section` (including
  35     subdirectories) to the AWS S3 "bucket". The contents of that subdir of the
  36     bucket will first be deleted.
  37
  38     Requires AWS credentials set in config.py: awsaccesskeyid, awssecretkey
  39     '''
  40
  41     import libcloud.security
  42     libcloud.security.VERIFY_SSL_CERT = True
  43     from libcloud.storage.types import Provider, ContainerDoesNotExistError
  44     from libcloud.storage.providers import get_driver
  45
  46     if not config.get('awsaccesskeyid') or not config.get('awssecretkey'):
  47         logging.error('To use awsbucket, you must set awssecretkey and awsaccesskeyid in config.py!')
  48         sys.exit(1)
  49     awsbucket = config['awsbucket']
  50
  51     cls = get_driver(Provider.S3)
  52     driver = cls(config['awsaccesskeyid'], config['awssecretkey'])
  53     try:
  54         container = driver.get_container(container_name=awsbucket)
  55     except ContainerDoesNotExistError:
  56         container = driver.create_container(container_name=awsbucket)
  57         logging.info('Created new container "' + container.name + '"')
  58
  59     upload_dir = 'fdroid/' + repo_section
  60     objs = dict()
  61     for obj in container.list_objects():
  62         if obj.name.startswith(upload_dir + '/'):
  63             objs[obj.name] = obj
  64
  65     for root, _, files in os.walk(os.path.join(os.getcwd(), repo_section)):
  66         for name in files:
  67             upload = False
  68             file_to_upload = os.path.join(root, name)
  69             object_name = 'fdroid/' + os.path.relpath(file_to_upload, os.getcwd())
  70             if object_name not in objs:
  71                 upload = True
  72             else:
  73                 obj = objs.pop(object_name)
  74                 if obj.size != os.path.getsize(file_to_upload):
  75                     upload = True
  76                 else:
  77                     # if the sizes match, then compare by MD5
  78                     md5 = hashlib.md5()
  79                     with open(file_to_upload, 'rb') as f:
  80                         while True:
  81                             data = f.read(8192)
  82                             if not data:
  83                                 break
  84                             md5.update(data)
  85                     if obj.hash != md5.hexdigest():
  86                         s3url = 's3://' + awsbucket + '/' + obj.name
  87                         logging.info(' deleting ' + s3url)
  88                         if not driver.delete_object(obj):
  89                             logging.warn('Could not delete ' + s3url)
  90                         upload = True
  91
  92             if upload:
  93                 if options.verbose:
  94                     logging.info(' uploading "' + file_to_upload + '"...')
  95                 extra = {'acl': 'public-read'}
  96                 if file_to_upload.endswith('.sig'):
  97                     extra['content_type'] = 'application/pgp-signature'
  98                 elif file_to_upload.endswith('.asc'):
  99                     extra['content_type'] = 'application/pgp-signature'
 100                 logging.info(' uploading ' + os.path.relpath(file_to_upload)
 101                              + ' to s3://' + awsbucket + '/' + object_name)
 102                 obj = driver.upload_object(file_path=file_to_upload,
 103                                            container=container,
 104                                            object_name=object_name,
 105                                            verify_hash=False,
 106                                            extra=extra)
 107     # delete the remnants in the bucket, they do not exist locally
 108     while objs:
 109         object_name, obj = objs.popitem()
 110         s3url = 's3://' + awsbucket + '/' + object_name
 111         if object_name.startswith(upload_dir):
 112             logging.warn(' deleting ' + s3url)
 113             driver.delete_object(obj)
 114         else:
 115             logging.info(' skipping ' + s3url)
 116
 117
 118 def update_serverwebroot(repo_section):
 119     rsyncargs = ['rsync', '--update', '--recursive', '--delete']
 120     if options.verbose:
 121         rsyncargs += ['--verbose']
 122     if options.quiet:
 123         rsyncargs += ['--quiet']
 124     if options.identity_file is not None:
 125         rsyncargs += ['-e', 'ssh -i ' + options.identity_file]
 126     if 'identity_file' in config:
 127         rsyncargs += ['-e', 'ssh -i ' + config['identity_file']]
 128     indexxml = os.path.join(repo_section, 'index.xml')
 129     indexjar = os.path.join(repo_section, 'index.jar')
 130     # serverwebroot is guaranteed to have a trailing slash in common.py
 131     if subprocess.call(rsyncargs +
 132                        ['--exclude', indexxml, '--exclude', indexjar,
 133                         repo_section, config['serverwebroot']]) != 0:
 134         sys.exit(1)
 135     # use stricter checking on the indexes since they provide the signature
 136     rsyncargs += ['--checksum']
 137     sectionpath = config['serverwebroot'] + repo_section
 138     if subprocess.call(rsyncargs + [indexxml, sectionpath]) != 0:
 139         sys.exit(1)
 140     if subprocess.call(rsyncargs + [indexjar, sectionpath]) != 0:
 141         sys.exit(1)
 142
 143
 144 def main():
 145     global config, options
 146
 147     # Parse command line...
 148     parser = OptionParser()
 149     parser.add_option("-i", "--identity-file", default=None,
 150                       help="Specify an identity file to provide to SSH for rsyncing")
 151     parser.add_option("-v", "--verbose", action="store_true", default=False,
 152                       help="Spew out even more information than normal")
 153     parser.add_option("-q", "--quiet", action="store_true", default=False,
 154                       help="Restrict output to warnings and errors")
 155     (options, args) = parser.parse_args()
 156
 157     config = common.read_config(options)
 158
 159     if len(args) != 1:
 160         logging.critical("Specify a single command")
 161         sys.exit(1)
 162
 163     if args[0] != 'init' and args[0] != 'update':
 164         logging.critical("The only commands currently supported are 'init' and 'update'")
 165         sys.exit(1)
 166
 167     if config.get('nonstandardwebroot') is True:
 168         standardwebroot = False
 169     else:
 170         standardwebroot = True
 171
 172     if config.get('serverwebroot'):
 173         serverwebroot = config['serverwebroot']
 174         host, fdroiddir = serverwebroot.rstrip('/').split(':')
 175         serverrepobase = os.path.basename(fdroiddir)
 176         if serverrepobase != 'fdroid' and standardwebroot:
 177             logging.error('serverwebroot does not end with "fdroid", '
 178                           + 'perhaps you meant one of these:\n\t'
 179                           + serverwebroot.rstrip('/') + '/fdroid\n\t'
 180                           + serverwebroot.rstrip('/').rstrip(serverrepobase) + 'fdroid')
 181             sys.exit(1)
 182     elif not config.get('awsbucket'):
 183         logging.warn('No serverwebroot or awsbucket set! Edit your config.py to set one or both.')
 184         sys.exit(1)
 185
 186     repo_sections = ['repo']
 187     if config['archive_older'] != 0:
 188         repo_sections.append('archive')
 189
 190     if args[0] == 'init':
 191         if config.get('serverwebroot'):
 192             sshargs = ['ssh']
 193             if options.quiet:
 194                 sshargs += ['-q']
 195             for repo_section in repo_sections:
 196                 cmd = sshargs + [host, 'mkdir -p', fdroiddir + '/' + repo_section]
 197                 if options.verbose:
 198                     # ssh -v produces different output than rsync -v, so this
 199                     # simulates rsync -v
 200                     logging.info(' '.join(cmd))
 201                 if subprocess.call(cmd) != 0:
 202                     sys.exit(1)
 203     elif args[0] == 'update':
 204         for repo_section in repo_sections:
 205             if config.get('serverwebroot'):
 206                 update_serverwebroot(repo_section)
 207             if config.get('awsbucket'):
 208                 update_awsbucket(repo_section)
 209
 210     sys.exit(0)
 211
 212 if __name__ == "__main__":
 213     main()