X-Git-Url: http://git.onelab.eu/?a=blobdiff_plain;f=scripts%2Fvuseradd;h=8023aa66043944a935dc8753906470d1ccccc89f;hb=61374297e8ff43ae7d704fbd20999d52eff6d23f;hp=7c59e736718064748230839b47721a9324b72914;hpb=6fc1eb0a961d6ea174c33f875aa6e75672889ef2;p=util-vserver.git diff --git a/scripts/vuseradd b/scripts/vuseradd index 7c59e73..8023aa6 100755 --- a/scripts/vuseradd +++ b/scripts/vuseradd @@ -4,10 +4,10 @@ # # Copyright (c) 2004 The Trustees of Princeton University (Trustees). # -# $Id: vuseradd,v 1.1 2004/07/30 16:46:41 mlh-pl_kernel Exp $ +# $Id: vuseradd,v 1.23 2005/08/21 21:41:03 mlhuang Exp $ # -: ${UTIL_VSERVER_VARS:=$(dirname $0)/util-vserver-vars} +: ${UTIL_VSERVER_VARS:=/usr/lib/util-vserver/util-vserver-vars} test -e "$UTIL_VSERVER_VARS" || { echo "Can not find util-vserver installation; aborting..." exit 1 @@ -21,46 +21,80 @@ usage() } [ -z "$1" ] && usage +[ "$1" == "--static" ] && { STATIC=yes; shift; } NAME=$1 -# add user -useradd -s /bin/vsh $NAME +# add slices group if not already present +groupadd slices 2>/dev/null || : -# change shell (in case user already exists) -usermod -s /bin/vsh $NAME +# add user +[ -z "$STATIC" ] && useradd -g slices -s /bin/vsh $NAME -# automount keys (eval expands ~) -eval rm -rf ~$NAME/.ssh -eval ln -sf /var/pl_sshd/keys/$NAME ~$NAME/.ssh +# openssh-server 3.8 and above refuse login for "locked" accounts +for file in /etc/passwd /etc/shadow ; do + [ -f $file ] && sed -i -e "s/$NAME:\!\!:\(.*\)/$NAME:*:\1/" $file +done -USERID=$(awk -F: "\$1 == \"$NAME\" { print \$3 }" < /etc/passwd) -GROUPID=$(awk -F: "\$1 == \"$NAME\" { print \$3 }" < /etc/passwd) +USERID=`id -u $NAME` +GROUPID=`id -g $NAME` +GROUPNAME=`id -gn $NAME` # create vserver configuration file -if [ ! -f /etc/vservers/$NAME.conf ] ; then - sed -e "s/#S_CONTEXT=/S_CONTEXT=$USERID/" \ - < /etc/vservers/vserver-reference.conf \ - > /etc/vservers/$NAME.conf +if [ ! -f $__CONFDIR/$NAME.conf ] ; then + sed \ + -e "s/.*S_CONTEXT=.*/S_CONTEXT=$USERID/" \ + -e "s/.*ONBOOT=.*/ONBOOT=yes/" \ + < $__PKGLIBDIR/defaults/sample.conf \ + > $__CONFDIR/$NAME.conf fi -if [ ! -d "$VROOTDIR/$NAME" ] ; then +if [ ! -d "$__DEFAULT_VSERVERDIR/$NAME" ] ; then # check the cache shopt -s nullglob - for i in "$VROOTDIR/.vcache/"* ; do - [ -d "$i" ] && mv "$i" "$VROOTDIR/$NAME" && break + for i in "$__DEFAULT_VSERVERDIR/.vcache/"* ; do + [ -d "$i" ] && mv "$i" "$__DEFAULT_VSERVERDIR/$NAME" && break done # build vserver - if [ ! -d "$VROOTDIR/$NAME" ] ; then - # build image in .vtmp - TMP=$(mktemp -d "$VROOTDIR/.vtmp/$NAME.XXXXXX") - "$PKGLIBDIR/vbuild" "$VROOTDIR/vserver-reference" "$TMP" - # move it to .vcache when complete - mv "$TMP" "$VROOTDIR/$NAME" + if [ ! -d "$__DEFAULT_VSERVERDIR/$NAME" ] ; then + # build in temporary directory + TMP=$(mktemp -d "$__DEFAULT_VSERVERDIR/.$NAME.XXXXXX") + "$__PKGLIBDIR/vbuild" "$__DEFAULT_VSERVERDIR/vserver-reference" "$TMP" + RETVAL=$? + # move it to its permanent location when complete + if [ $RETVAL -ne 0 ] ; then + echo "Error $RETVAL building $__DEFAULT_VSERVERDIR/$NAME" + rm -rf "$TMP" $__CONFDIR/$NAME.conf $__PKGSTATEDIR/$NAME.ctx + userdel -r $NAME + exit $RETVAL + else + # sanity check + vnewsize=$(du -s "$TMP" | awk "{ print \$1 }") + vrefsize=$(du -s "$__DEFAULT_VSERVERDIR/vserver-reference" | awk "{ print \$1 }") + if [ $vnewsize -lt $vrefsize ] ; then + echo "WARNING: Unexpected for 'du -s $__DEFAULT_VSERVERDIR/$NAME'=$vnewsize to be less than 'du -s $__DEFAULT_VSERVERDIR/vserver-reference'=$vrefsize" + fi + + mv "$TMP" "$__DEFAULT_VSERVERDIR/$NAME" + fi fi +fi + +if [ -d "$__DEFAULT_VSERVERDIR/$NAME" ] ; then # fix permissions - chmod 755 "$VROOTDIR/$NAME" + chmod 755 "$__DEFAULT_VSERVERDIR/$NAME" + + # add user in vserver + $_VSERVER_LEGACY $NAME suexec root sh -c \ + "groupadd -g $GROUPID $GROUPNAME ; useradd -u $USERID -g $GROUPID -p '' $NAME" + + # add an unrestricted entry to /etc/sudoers file + if [ -f "$__DEFAULT_VSERVERDIR/$NAME/etc/sudoers" ] && \ + ! grep -q "^$NAME" "$__DEFAULT_VSERVERDIR/$NAME/etc/sudoers" ; then + echo "$NAME ALL=(ALL) ALL" >> "$__DEFAULT_VSERVERDIR/$NAME/etc/sudoers" + fi fi -# add user in vserver -vserver $NAME suexec root groupadd -g $GROUPID $NAME -vserver $NAME suexec root useradd -u $USERID -g $GROUPID -p '' $NAME +# turn resource management on for vserver $NAME +chkconfig resman && service resman start $NAME +# XXX - resman doesn't print a trailing newline +echo