70 lines
2.0 KiB
Bash
Executable File
70 lines
2.0 KiB
Bash
Executable File
#!/bin/bash
|
|
#
|
|
# vhost-stack
|
|
# https://git.stack-source.com/msb/vhost-stack
|
|
# Copyright (c) 2022 Matthew Saunders Brown <matthewsaundersbrown@gmail.com>
|
|
# GNU General Public License v3.0+ (see COPYING or https://www.gnu.org/licenses/gpl-3.0.txt)
|
|
|
|
# load include file
|
|
source $(dirname $0)/vhost.sh
|
|
|
|
help()
|
|
{
|
|
thisfilename=$(basename -- "$0")
|
|
echo "Jail specified user."
|
|
echo ""
|
|
echo "usage: $thisfilename -u <username> [-h]"
|
|
echo ""
|
|
echo " -h Print this help."
|
|
echo " -u <username> System username to jail."
|
|
exit
|
|
}
|
|
|
|
vhost:getoptions "$@"
|
|
|
|
# check for username
|
|
if [ -z "$username" ]; then
|
|
echo "username not set"
|
|
exit 1
|
|
fi
|
|
|
|
if ! grep -q "^$username:" /etc/passwd; then
|
|
echo "$username is not installed on this server"
|
|
exit 1
|
|
fi
|
|
|
|
if [[ ! -d /home/$username ]]; then
|
|
echo "/home/$username does not exists"
|
|
exit 1
|
|
fi
|
|
|
|
if [[ -d /usr/jails/$username ]]; then
|
|
echo "/usr/jails/$username already exists"
|
|
exit 1
|
|
fi
|
|
|
|
if grep -q ":/usr/jails/$username/./home/$username:" /etc/passwd; then
|
|
echo "$username already has jail home dir set"
|
|
exit 1
|
|
fi
|
|
|
|
jk_init -k -j /usr/jails/$username shellstack
|
|
mkdir -p /usr/jails/$username/opt /usr/jails/$username/usr/sbin /usr/jails/$username/tmp /usr/jails/$username/srv/www
|
|
ln -s /usr/local/sbin/mini_sendmail /usr/jails/$username/usr/sbin/sendmail
|
|
chmod a+rwx /usr/jails/$username/tmp
|
|
install -d -o $username -g $username -m 755 /usr/jails/$username/home/$username
|
|
mount --bind /home/$username /usr/jails/$username/home/$username
|
|
echo "/home/$username /usr/jails/$username/home/$username none bind 0 0" >> /etc/fstab.jails
|
|
jk_jailuser -n -j /usr/jails/$username -s /bin/bash $username
|
|
|
|
# configure chroot for php-fpm
|
|
vhost::set-phpVersionArray
|
|
for phpVersion in "${phpVersionArray[@]}"
|
|
do
|
|
if [[ -f /etc/php/$phpVersion/fpm/pool.d/$username.conf ]]; then
|
|
if ! /bin/grep -q "^chroot" /etc/php/$phpVersion/fpm/pool.d/$username.conf; then
|
|
echo "chroot = /usr/jails/$username" >> /etc/php/$phpVersion/fpm/pool.d/$username.conf
|
|
fi
|
|
fi
|
|
done
|