-
Notifications
You must be signed in to change notification settings - Fork 0
/
Copy pathbuild_docker_compose.py
210 lines (174 loc) · 8.76 KB
/
build_docker_compose.py
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
#! /bin/python3
import os
# Check if we are working with clean build dir or not
if os.path.isdir("build/"):
print("Looks like you have a previous build setup. Do youo want to replace it with this one?")
print("This WILL destroy your previous network")
print("Please enter:")
print(" \"Y\" for yes")
print(" \"N\" for no")
user_input = input()
while user_input != "Y" and user_input != "N":
print("Invalid input, please enter:")
print(" \"Y\" for yes")
print(" \"N\" for no")
user_input = input()
if user_input == "N":
print("Caneling build.")
exit()
os.system("rm -rf build/")
os.mkdir("build/")
os.system("docker compose down --volumes")
os.system("docker volume rm build_dsset-volume")
os.system("docker network rm build_external_net build_internal_net")
# read in json files to build doocker-compose file, and move/modify Dockerfiles as needed
# Currently there is 0 sanity checking for if zone files make sense, would be nice to add later
# Parsing order: networks.json, clients.json, hosts.json, resolvers.json, name_servers.json
import json
docker_compose_file = open("build/docker-compose.yml", "w")
docker_compose_file.write("version: \"3.9\"\n\n")
network_data = None
with open("networks.json", "r") as f:
network_data = json.load(f)
network_data = network_data["networks"]
if network_data == None:
raise RuntimeError("Unable to load networks.json")
docker_compose_file.write("networks:\n")
for network in network_data:
docker_compose_file.write(" " + network["name"] + ":\n")
docker_compose_file.write(" ipam:\n")
docker_compose_file.write(" driver: default\n")
docker_compose_file.write(" config:\n")
docker_compose_file.write(" - subnet: " + network["subnet"] + "\n")
docker_compose_file.write(" gateway: " + network["gateway"] + "\n")
client_data = None
with open("clients.json", "r") as f:
client_data = json.load(f)
client_data = client_data["clients"]
if client_data == None:
raise RuntimeError("Unable to load clients.json")
docker_compose_file.write("services:\n")
for client in client_data:
docker_compose_file.write(" " + client["name"].replace(".","_") + ":\n")
os.mkdir("build/" + client["name"])
os.system("cp client/Dockerfile build/" + client["name"] + "/Dockerfile")
docker_compose_file.write(" build: "+ client["name"] + "/\n")
docker_compose_file.write(" stdin_open: true\n")
docker_compose_file.write(" tty: true\n")
docker_compose_file.write(" dns: " + client["dns_ip"] + "\n")
docker_compose_file.write(" entrypoint: /bin/bash" + "\n")
docker_compose_file.write(" networks:" + "\n")
for network in client["networks"]:
docker_compose_file.write(" " + network["network_name"] + ":" + "\n")
docker_compose_file.write(" ipv4_address: " + network["ip_address"] + "\n")
host_data = None
with open("hosts.json", "r") as f:
host_data = json.load(f)
host_data = host_data["hosts"]
if host_data == None:
raise RuntimeError("Unable to load hosts.json")
for host in host_data:
docker_compose_file.write(" " + host["name"].replace(".","_") + ":\n")
os.mkdir("build/" + host["name"])
os.system("cp host/Dockerfile build/" + host["name"] + "/Dockerfile")
os.system("cp host/server.py build/" + host["name"] + "/")
docker_compose_file.write(" build: " + host["name"] + "/\n")
docker_compose_file.write(" stdin_open: true\n")
docker_compose_file.write(" tty: true\n")
docker_compose_file.write(" networks:\n")
for network in host["networks"]:
docker_compose_file.write(" " + network["network_name"] + ":\n")
docker_compose_file.write(" ipv4_address: " + network["ip_address"] + "\n")
resolver_data = None
with open("resolvers.json", "r") as f:
resolver_data = json.load(f)
resolver_data = resolver_data["resolvers"]
if resolver_data == None:
raise RuntimeError("Unable to load resolvers.json")
for resolver in resolver_data:
if resolver["name"][len(resolver["name"]) - 1] == ".":
name = resolver["name"][:-1]
else:
name = resolver["name"]
docker_compose_file.write(" " + name.replace(".","_") + ":\n")
os.mkdir("build/" + resolver["name"])
os.system("cp resolver/Dockerfile build/" + resolver["name"] + "/Dockerfile")
os.system("cp resolver/*.bash build/" + resolver["name"])
os.system("cp resolver/named.conf build/" + resolver["name"])
os.system("cp resolver/root.hints build/" + resolver["name"])
docker_compose_file.write(" build: " + resolver["name"] + "/\n")
docker_compose_file.write(" stdin_open: true\n")
docker_compose_file.write(" tty: true\n")
docker_compose_file.write(" networks:\n")
for network in resolver["networks"]:
docker_compose_file.write(" " + network["network_name"] + ":\n")
docker_compose_file.write(" ipv4_address: " + network["ip_address"] + "\n")
docker_compose_file.write(" volumes:\n")
docker_compose_file.write(" - dsset-volume:/dsset\n")
ns_data = None
with open("name_servers.json", "r") as f:
ns_data = json.load(f)
ns_data = ns_data["name_servers"]
if ns_data == None:
raise RuntimeError("Unable to load name_servers.json")
for name_server in ns_data:
if name_server["name"][len(name_server["name"]) - 1] == ".":
name = name_server["name"][:-1]
else:
name = name_server["name"]
docker_compose_file.write(" " + name.replace(".","_") + ":\n")
os.mkdir("build/" + name_server["name"])
os.system("cp name_server/Dockerfile build/" + name_server["name"] + "/Dockerfile")
os.system("cp name_server/named.conf build/" + name_server["name"])
os.system("cp name_server/*.bash build/" + name_server["name"])
os.system("cp name_server/" + name_server["file"] + " build/" + name_server["name"])
# TODO set up reverse zones... should abstract this.
named_conf_file = open("build/" + name_server["name"] + "/named.conf", "a")
named_conf_file.write("\nzone \"" + name_server["zone"] + "\" IN {\n")
named_conf_file.write(" type master;\n")
named_conf_file.write(" file \"/usr/local/etc/bind/zones/" + name_server["file"] + ".signed\";\n")
named_conf_file.write("};\n")
named_conf_file.close()
if name_server["zone"] == ".":
zone = "root"
else:
zone = name_server["zone"][:-1]
docker_file = open("build/" + name_server["name"] + "/Dockerfile", "a")
docker_file.write("COPY db." + zone + " /usr/local/etc/bind/zones\n")
if zone == "root":
zone = "."
docker_file.write("RUN cd /usr/local/etc/bind/zones && dnssec-keygen -a FALCON512 -n ZONE " + zone + "\n")
docker_file.write("RUN cd /usr/local/etc/bind/zones && dnssec-keygen -a FALCON512 -n ZONE -f KSK " + zone + "\n")
if name_server["leaf"] == "true":
if zone == ".":
zone = "root"
out = "."
else:
zone = name_server["zone"][:-1]
out = zone
docker_file.write("RUN cd /usr/local/etc/bind/zones && dnssec-signzone -o " + out + " -N INCREMENT -t -S -K /usr/local/etc/bind/zones db." + zone + "\n")
docker_file.write("CMD /setup_files/move_ds.bash " + name_server["zone"] + " && named && /bin/bash\n")
else:
if zone == ".":
zone = "root"
out = "."
else:
zone = name_server["zone"][:-1]
out = zone
cmd_str = "CMD cd /usr/local/etc/bind/zones "
for c_zone in name_server["child_zones"]:
cmd_str += "&& /setup_files/add_ds.bash " + name_server["file"] + " " + c_zone + " "
cmd_str += "&& if [ ! -f /usr/local/etc/bind/zones/" + name_server["file"] +".signed ]; then dnssec-signzone -o " + out + " -N INCREMENT -t -S -K /usr/local/etc/bind/zones db." + zone + ";fi && /setup_files/move_ds.bash . && named && /bin/bash \n"
docker_file.write(cmd_str)
docker_file.close()
docker_compose_file.write(" build: " + name_server["name"] + "/\n")
docker_compose_file.write(" stdin_open: true\n")
docker_compose_file.write(" tty: true\n")
docker_compose_file.write(" networks:\n")
for network in name_server["networks"]:
docker_compose_file.write(" " + network["network_name"] + ":\n")
docker_compose_file.write(" ipv4_address: " + network["ip_address"] + "\n")
docker_compose_file.write(" volumes:\n")
docker_compose_file.write(" - dsset-volume:/dsset\n")
docker_compose_file.write("volumes:\n")
docker_compose_file.write(" dsset-volume:\n")