gPanel/pkg/system/user.go

package system

import (
	"bytes"
	"errors"
	"fmt"
	"os"
	"os/exec"
)

func CreateBundleUser(username string) (error, error) {
	var cerr bytes.Buffer
	var err error

	adduserArgs := []string{
		"--disabled-password",
		"--gecos",
		"",
		username,
	}

	keygenArgs := []string{
		"-t",
		"rsa",
		"-N",
		"",
		"-f",
		"/home/" + username + "/.ssh/id_rsa",
	}

	// Add the user
	cmd := exec.Command("adduser", adduserArgs...)
	cmd.Stderr = &cerr

	if err = cmd.Run(); err != nil {
		return err, errors.New(cerr.String())
	}

	// Create the .ssh folder for said user
	cmd = exec.Command("mkdir", "/home/"+username+"/.ssh")
	cmd.Stderr = &cerr

	if err = cmd.Run(); err != nil {
		return err, errors.New(cerr.String())
	}

	// Create authorized_keys file
	cmd = exec.Command("touch", "/home/"+username+"/.ssh/authorized_keys")
	cmd.Stderr = &cerr

	if err = cmd.Run(); err != nil {
		return err, errors.New(cerr.String())
	}

	// Put root public key into authorized_keys file
	cmd = exec.Command("cp", "/root/.ssh/id_rsa.pub", "/home/"+username+"/.ssh/authorized_keys")
	cmd.Stderr = &cerr

	if err = cmd.Run(); err != nil {
		return err, errors.New(cerr.String())
	}

	// Create the host key-pair for said user
	cmd = exec.Command("ssh-keygen", keygenArgs...)
	cmd.Stderr = &cerr

	if err = cmd.Run(); err != nil {
		return err, errors.New(cerr.String())
	}

	// Create document root for said user
	cmd = exec.Command("mkdir", "/home/"+username+"/document_root")
	cmd.Stderr = &cerr

	if err = cmd.Run(); err != nil {
		return err, errors.New(cerr.String())
	}

	// Add default index page
	f, err := os.OpenFile("/home/"+username+"/document_root/index.html", os.O_RDWR|os.O_CREATE|os.O_TRUNC, 0777)
	if err != nil {
		return err, nil
	}
	defer f.Close()

	fmt.Fprintln(f, DEFAULT_INDEX)

	/* OWNERSHIP AND FILE PERMISSIONS START */
	cmd = exec.Command("chmod", "700", "/home/"+username+"/.ssh")
	cmd.Stderr = &cerr

	if err = cmd.Run(); err != nil {
		return err, errors.New(cerr.String())
	}

	cmd = exec.Command("chmod", "600", "/home/"+username+"/.ssh/id_rsa")
	cmd.Stderr = &cerr

	if err = cmd.Run(); err != nil {
		return err, errors.New(cerr.String())
	}

	cmd = exec.Command("chmod", "644", "/home/"+username+"/.ssh/id_rsa.pub")
	cmd.Stderr = &cerr

	if err = cmd.Run(); err != nil {
		return err, errors.New(cerr.String())
	}

	cmd = exec.Command("chmod", "644", "/home/"+username+"/.ssh/authorized_keys")
	cmd.Stderr = &cerr

	if err = cmd.Run(); err != nil {
		return err, errors.New(cerr.String())
	}

	cmd = exec.Command("chown", username+":", "/home/"+username+"/.ssh")
	cmd.Stderr = &cerr

	if err = cmd.Run(); err != nil {
		return err, errors.New(cerr.String())
	}

	cmd = exec.Command("chown", username+":", "/home/"+username+"/.ssh/id_rsa")
	cmd.Stderr = &cerr

	if err = cmd.Run(); err != nil {
		return err, errors.New(cerr.String())
	}

	cmd = exec.Command("chown", username+":", "/home/"+username+"/.ssh/id_rsa.pub")
	cmd.Stderr = &cerr

	if err = cmd.Run(); err != nil {
		return err, errors.New(cerr.String())
	}

	cmd = exec.Command("chown", username+":", "/home/"+username+"/.ssh/authorized_keys")
	cmd.Stderr = &cerr

	if err = cmd.Run(); err != nil {
		return err, errors.New(cerr.String())
	}

	cmd = exec.Command("chown", username+":", "/home/"+username+"/document_root")
	cmd.Stderr = &cerr

	if err = cmd.Run(); err != nil {
		return err, errors.New(cerr.String())
	}
	/* OWNERSHIP AND FILE PERMISSIONS END */

	return nil, nil
}

func DeleteBundleUser(username string) (error, error) {
	var cerr bytes.Buffer
	var err error

	// Delete the user and try to remove all files associated
	cmd := exec.Command("deluser", "--quiet", username)
	cmd.Stderr = &cerr

	if err = cmd.Run(); err != nil {
		return err, errors.New(cerr.String())
	}

	// Forcefully remove the users home directory if it has not already been done
	// (sometimes deluser doesn't do its job even with the flag)
	cmd = exec.Command("rm", "-rf", "/home/"+username)
	cmd.Stderr = &cerr

	if err = cmd.Run(); err != nil {
		return err, errors.New(cerr.String())
	}

	return nil, nil
}