2020-05-15 09:39:16 +00:00
package main
import (
"fmt"
"os"
2021-02-10 08:23:33 +00:00
"os/exec"
"os/user"
2020-11-30 09:37:17 +00:00
"path/filepath"
2021-02-10 08:23:33 +00:00
"strconv"
2021-02-25 10:20:36 +00:00
"strings"
2020-11-30 09:37:17 +00:00
"github.com/AlecAivazis/survey/v2"
"github.com/crowdsecurity/crowdsec/pkg/metabase"
2020-05-15 09:39:16 +00:00
log "github.com/sirupsen/logrus"
"github.com/spf13/cobra"
)
var (
2020-11-30 09:37:17 +00:00
metabaseUser = "crowdsec@crowdsec.net"
metabasePassword string
metabaseDbPath string
metabaseConfigPath string
metabaseConfigFolder = "metabase/"
metabaseConfigFile = "metabase.yaml"
metabaseImage = "metabase/metabase"
2020-05-15 09:39:16 +00:00
/**/
metabaseListenAddress = "127.0.0.1"
metabaseListenPort = "3000"
metabaseContainerID = "/crowdsec-metabase"
2021-02-10 08:23:33 +00:00
crowdsecGroup = "crowdsec"
2020-11-30 09:37:17 +00:00
forceYes bool
dockerGatewayIPAddr = "172.17.0.1"
2020-05-15 09:39:16 +00:00
/*informations needed to setup a random password on user's behalf*/
)
func NewDashboardCmd ( ) * cobra . Command {
/* ---- UPDATE COMMAND */
var cmdDashboard = & cobra . Command {
2020-11-30 09:37:17 +00:00
Use : "dashboard [command]" ,
2021-04-16 08:50:08 +00:00
Short : "Manage your metabase dashboard container [requires local API]" ,
Long : ` Install / Start / Stop / Remove a metabase container exposing dashboard and metrics .
Note : This command requires database direct access , so is intended to be run on Local API / master .
` ,
Args : cobra . ExactArgs ( 1 ) ,
2020-11-30 09:37:17 +00:00
Example : `
cscli dashboard setup
2020-05-15 09:39:16 +00:00
cscli dashboard start
cscli dashboard stop
2020-11-30 09:37:17 +00:00
cscli dashboard remove
` ,
PersistentPreRun : func ( cmd * cobra . Command , args [ ] string ) {
2021-04-16 08:50:08 +00:00
if err := csConfig . LoadAPIServer ( ) ; err != nil || csConfig . DisableAPI {
log . Fatal ( "Local API is disabled, please run this command on the local API machine" )
}
2020-11-30 09:37:17 +00:00
metabaseConfigFolderPath := filepath . Join ( csConfig . ConfigPaths . ConfigDir , metabaseConfigFolder )
metabaseConfigPath = filepath . Join ( metabaseConfigFolderPath , metabaseConfigFile )
if err := os . MkdirAll ( metabaseConfigFolderPath , os . ModePerm ) ; err != nil {
log . Fatalf ( err . Error ( ) )
}
2021-03-31 09:32:38 +00:00
if err := csConfig . LoadDBConfig ( ) ; err != nil {
2021-04-16 08:50:08 +00:00
log . Errorf ( "This command requires direct database access (must be run on the local API machine)" )
2021-03-31 09:32:38 +00:00
log . Fatalf ( err . Error ( ) )
}
2020-11-30 09:37:17 +00:00
} ,
2020-05-15 09:39:16 +00:00
}
var force bool
var cmdDashSetup = & cobra . Command {
Use : "setup" ,
Short : "Setup a metabase container." ,
Long : ` Perform a metabase docker setup, download standard dashboards, create a fresh user and start the container ` ,
Args : cobra . ExactArgs ( 0 ) ,
2020-11-30 09:37:17 +00:00
Example : `
cscli dashboard setup
cscli dashboard setup -- listen 0.0 .0 .0
cscli dashboard setup - l 0.0 .0 .0 - p 443 -- password < password >
2020-05-15 09:39:16 +00:00
` ,
Run : func ( cmd * cobra . Command , args [ ] string ) {
2020-11-30 09:37:17 +00:00
if metabaseDbPath == "" {
metabaseDbPath = csConfig . ConfigPaths . DataDir
2020-05-15 09:39:16 +00:00
}
2020-11-30 09:37:17 +00:00
if metabasePassword == "" {
metabasePassword = generatePassword ( 16 )
2020-05-15 09:39:16 +00:00
}
2021-02-10 08:23:33 +00:00
var answer bool
groupExist := false
dockerGroup , err := user . LookupGroup ( crowdsecGroup )
if err == nil {
groupExist = true
}
if ! forceYes && ! groupExist {
prompt := & survey . Confirm {
Message : fmt . Sprintf ( "For metabase docker to be able to access SQLite file we need to add a new group called '%s' to the system, is it ok for you ?" , crowdsecGroup ) ,
Default : true ,
}
if err := survey . AskOne ( prompt , & answer ) ; err != nil {
log . Fatalf ( "unable to ask to force: %s" , err )
}
}
if ! answer && ! forceYes && ! groupExist {
log . Fatalf ( "unable to continue without creating '%s' group" , crowdsecGroup )
}
if ! groupExist {
groupAddCmd , err := exec . LookPath ( "groupadd" )
if err != nil {
log . Fatalf ( "unable to find 'groupadd' command, can't continue" )
}
groupAdd := & exec . Cmd { Path : groupAddCmd , Args : [ ] string { groupAddCmd , crowdsecGroup } }
if err := groupAdd . Run ( ) ; err != nil {
log . Fatalf ( "unable to add group '%s': %s" , dockerGroup , err )
}
dockerGroup , err = user . LookupGroup ( crowdsecGroup )
if err != nil {
log . Fatalf ( "unable to lookup '%s' group: %+v" , dockerGroup , err )
}
}
intID , err := strconv . Atoi ( dockerGroup . Gid )
if err != nil {
log . Fatalf ( "unable to convert group ID to int: %s" , err )
}
if err := os . Chown ( csConfig . DbConfig . DbPath , 0 , intID ) ; err != nil {
log . Fatalf ( "unable to chown sqlite db file '%s': %s" , csConfig . DbConfig . DbPath , err )
}
mb , err := metabase . SetupMetabase ( csConfig . API . Server . DbConfig , metabaseListenAddress , metabaseListenPort , metabaseUser , metabasePassword , metabaseDbPath , dockerGroup . Gid )
2020-11-30 09:37:17 +00:00
if err != nil {
log . Fatalf ( err . Error ( ) )
2020-05-15 09:39:16 +00:00
}
2020-11-30 09:37:17 +00:00
if err := mb . DumpConfig ( metabaseConfigPath ) ; err != nil {
log . Fatalf ( err . Error ( ) )
}
log . Infof ( "Metabase is ready" )
fmt . Println ( )
fmt . Printf ( "\tURL : '%s'\n" , mb . Config . ListenURL )
fmt . Printf ( "\tusername : '%s'\n" , mb . Config . Username )
fmt . Printf ( "\tpassword : '%s'\n" , mb . Config . Password )
2020-05-15 09:39:16 +00:00
} ,
}
cmdDashSetup . Flags ( ) . BoolVarP ( & force , "force" , "f" , false , "Force setup : override existing files." )
2020-11-30 09:37:17 +00:00
cmdDashSetup . Flags ( ) . StringVarP ( & metabaseDbPath , "dir" , "d" , "" , "Shared directory with metabase container." )
2020-05-15 09:39:16 +00:00
cmdDashSetup . Flags ( ) . StringVarP ( & metabaseListenAddress , "listen" , "l" , metabaseListenAddress , "Listen address of container" )
cmdDashSetup . Flags ( ) . StringVarP ( & metabaseListenPort , "port" , "p" , metabaseListenPort , "Listen port of container" )
2021-02-10 08:23:33 +00:00
cmdDashSetup . Flags ( ) . BoolVarP ( & forceYes , "yes" , "y" , false , "force yes" )
2020-11-30 09:37:17 +00:00
//cmdDashSetup.Flags().StringVarP(&metabaseUser, "user", "u", "crowdsec@crowdsec.net", "metabase user")
cmdDashSetup . Flags ( ) . StringVar ( & metabasePassword , "password" , "" , "metabase password" )
2020-05-15 09:39:16 +00:00
cmdDashboard . AddCommand ( cmdDashSetup )
var cmdDashStart = & cobra . Command {
Use : "start" ,
Short : "Start the metabase container." ,
Long : ` Stats the metabase container using docker. ` ,
Args : cobra . ExactArgs ( 0 ) ,
Run : func ( cmd * cobra . Command , args [ ] string ) {
2020-11-30 09:37:17 +00:00
mb , err := metabase . NewMetabase ( metabaseConfigPath )
if err != nil {
log . Fatalf ( err . Error ( ) )
}
if err := mb . Container . Start ( ) ; err != nil {
2020-05-15 09:39:16 +00:00
log . Fatalf ( "Failed to start metabase container : %s" , err )
}
log . Infof ( "Started metabase" )
log . Infof ( "url : http://%s:%s" , metabaseListenAddress , metabaseListenPort )
} ,
}
cmdDashboard . AddCommand ( cmdDashStart )
var cmdDashStop = & cobra . Command {
Use : "stop" ,
Short : "Stops the metabase container." ,
Long : ` Stops the metabase container using docker. ` ,
Args : cobra . ExactArgs ( 0 ) ,
Run : func ( cmd * cobra . Command , args [ ] string ) {
2020-11-30 09:37:17 +00:00
if err := metabase . StopContainer ( metabaseContainerID ) ; err != nil {
log . Fatalf ( "unable to stop container '%s': %s" , metabaseContainerID , err )
2020-05-15 09:39:16 +00:00
}
} ,
}
cmdDashboard . AddCommand ( cmdDashStop )
2020-11-30 09:37:17 +00:00
var cmdDashRemove = & cobra . Command {
Use : "remove" ,
Short : "removes the metabase container." ,
Long : ` removes the metabase container using docker. ` ,
Args : cobra . ExactArgs ( 0 ) ,
Example : `
cscli dashboard remove
cscli dashboard remove -- force
` ,
Run : func ( cmd * cobra . Command , args [ ] string ) {
answer := true
if ! forceYes {
prompt := & survey . Confirm {
Message : "Do you really want to remove crowdsec dashboard? (all your changes will be lost)" ,
Default : true ,
}
if err := survey . AskOne ( prompt , & answer ) ; err != nil {
log . Fatalf ( "unable to ask to force: %s" , err )
}
}
if answer {
if metabase . IsContainerExist ( metabaseContainerID ) {
log . Debugf ( "Stopping container %s" , metabaseContainerID )
if err := metabase . StopContainer ( metabaseContainerID ) ; err != nil {
log . Warningf ( "unable to stop container '%s': %s" , metabaseContainerID , err )
}
2021-02-10 08:23:33 +00:00
dockerGroup , err := user . LookupGroup ( crowdsecGroup )
if err == nil { // if group exist, remove it
groupDelCmd , err := exec . LookPath ( "groupdel" )
if err != nil {
log . Fatalf ( "unable to find 'groupdel' command, can't continue" )
}
groupDel := & exec . Cmd { Path : groupDelCmd , Args : [ ] string { groupDelCmd , crowdsecGroup } }
if err := groupDel . Run ( ) ; err != nil {
log . Errorf ( "unable to delete group '%s': %s" , dockerGroup , err )
}
}
2020-11-30 09:37:17 +00:00
log . Debugf ( "Removing container %s" , metabaseContainerID )
if err := metabase . RemoveContainer ( metabaseContainerID ) ; err != nil {
log . Warningf ( "unable to remove container '%s': %s" , metabaseContainerID , err )
}
log . Infof ( "container %s stopped & removed" , metabaseContainerID )
}
2021-02-10 08:23:33 +00:00
log . Debugf ( "Removing metabase db %s" , csConfig . ConfigPaths . DataDir )
2020-11-30 09:37:17 +00:00
if err := metabase . RemoveDatabase ( csConfig . ConfigPaths . DataDir ) ; err != nil {
log . Warningf ( "failed to remove metabase internal db : %s" , err )
}
if force {
2021-02-10 08:23:33 +00:00
if err := metabase . RemoveImageContainer ( ) ; err != nil {
2021-02-25 10:20:36 +00:00
if ! strings . Contains ( err . Error ( ) , "No such image" ) {
log . Fatalf ( "removing docker image: %s" , err )
}
2020-11-30 09:37:17 +00:00
}
}
}
2020-05-15 09:39:16 +00:00
} ,
}
2021-02-10 08:23:33 +00:00
cmdDashRemove . Flags ( ) . BoolVarP ( & force , "force" , "f" , false , "Remove also the metabase image" )
2020-11-30 09:37:17 +00:00
cmdDashRemove . Flags ( ) . BoolVarP ( & forceYes , "yes" , "y" , false , "force yes" )
cmdDashboard . AddCommand ( cmdDashRemove )
2020-05-15 09:39:16 +00:00
2020-11-30 09:37:17 +00:00
return cmdDashboard
2020-05-15 09:39:16 +00:00
}