mirrors/copyparty
1
0
Fork 0
mirror of https://github.com/9001/copyparty.git synced 2025-08-17 09:02:15 -06:00
Code Issues Actions Packages Projects Releases Wiki Activity

mount PWD into chroot for config files

Browse source
This commit is contained in:
ed 2021-08-09 22:12:39 +02:00
parent 8d755d41e0
commit 0dbd8a01ff
1 changed files with 63 additions and 37 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

100
bin/prisonparty.sh
View file

@ -1,40 +1,59 @@
#!/bin/bash #!/bin/bash
set -e set -e
# runs copyparty in a chroot # runs copyparty (or any other python script really) in a chroot
# #
# assumption: all items within the following directories are owned by root # assumption: these directories, and everything within, are owned by root
sysdirs=(bin lib lib32 lib64 sbin usr) sysdirs=(bin lib lib32 lib64 sbin usr)
# read arguments # error-handler
{ help() { cat <<'EOF'
jail="$1"; shift
uid="$1"; shift usage:
gid="$1"; shift ./prisonparty.sh <ROOTDIR> <UID> <GID> [VOLDIR [VOLDIR...]] -- copyparty-sfx.py [...]"
vols=() example:
while true; do ./prisonparty.sh /var/jail 1000 1000 /mnt/nas/music -- copyparty-sfx.py -v /mnt/nas/music::rwmd"
v="$1"; shift
[ "$v" = -- ] && break # end of volumes EOF
[ "$#" -eq 0 ] && break # invalid usage exit 1
vols+=("$v")
done
cpp="$1"; shift
} || {
echo "usage: ./prisonparty.sh <ROOTDIR> <UID> <GID> [VOLDIR [VOLDIR...]] -- copyparty-sfx.py [...]"
echo "example: ./prisonparty.sh /var/jail 1000 1000 /mnt/nas/music -- copyparty-sfx.py -v /mnt/nas/music::rwmd"
exit 1
} }
# debug/vis # read arguments
echo "chroot-dir: [$jail]" trap help EXIT
echo "user:group: [$uid:$gid]" jail="$1"; shift
echo " copyparty: [$cpp]" uid="$1"; shift
for v in "${vols[@]}"; do gid="$1"; shift
echo " mount: [$v]"
vols=()
while true; do
v="$1"; shift
[ "$v" = -- ] && break # end of volumes
[ "$#" -eq 0 ] && break # invalid usage
vols+=("$v")
done done
cpp="$1"; shift
cpp="$(realpath "$cpp")"
cppdir="$(dirname "$cpp")"
trap - EXIT
# debug/vis
echo
echo "chroot-dir = $jail"
echo "user:group = $uid:$gid"
echo " copyparty = $cpp"
echo
printf '\033[33m%s\033[0m\n' "copyparty can access these folders and all their subdirectories:"
for v in "${vols[@]}"; do
printf '\033[36m ├─\033[0m %s \033[36m ── added by (You)\033[0m\n' "$v"
done
printf '\033[36m ├─\033[0m %s \033[36m ── where the copyparty binary is\033[0m\n' "$cppdir"
printf '\033[36m ╰─\033[0m %s \033[36m ── the folder you are currently in\033[0m\n' "$PWD"
vols+=("$cppdir" "$PWD")
echo
# resolve and remove trailing slash # resolve and remove trailing slash
@ -43,10 +62,15 @@ jail="${jail%/}"
# bind-mount system directories and volumes # bind-mount system directories and volumes
for v in "${sysdirs[@]}" "${vols[@]}"; do printf '%s\n' "${sysdirs[@]}" "${vols[@]}" | LC_ALL=C sort |
mkdir -p "$jail/$v" while IFS= read -r v; do
mount | grep -qF " on $jail/$v " || [ -e "/$v" ] || {
mount --bind /$v "$jail/$v" # printf '\033[1;31mfolder does not exist:\033[0m %s\n' "$v"
continue
}
mkdir -p "$jail/$v"
mount | grep -qF " on $jail/$v " ||
mount --bind /$v "$jail/$v"
done done
@ -55,14 +79,16 @@ mkdir -p "$jail/tmp"
chown -R "$uid:$gid" "$jail/tmp" chown -R "$uid:$gid" "$jail/tmp"
# copy sfx into jail
cp -pv "$cpp" "$jail/copyparty.py"
# run copyparty # run copyparty
/sbin/chroot --userspec=$uid:$gid "$jail" "$(which python3)" /copyparty.py "$@" /sbin/chroot --userspec=$uid:$gid "$jail" "$(which python3)" "$cpp" "$@" && rv=0 || rv=$?
# cleanup if not in use # cleanup if not in use
lsof "$jail" | grep -qF "$jail" || lsof "$jail" | grep -qF "$jail" &&
mount | grep -F " on $jail" | awk '{sub(/ type .*/,"");sub(/.* on /,"");print}' | LC_ALL=C sort -r | tr '\n' '\0' | xargs -r0 umount echo "chroot is in use, will not cleanup" ||
{
mount | grep -F " on $jail" |
awk '{sub(/ type .*/,"");sub(/.* on /,"");print}' |
LC_ALL=C sort -r | tr '\n' '\0' | xargs -r0 umount
}
exit $rv