mirror of
https://github.com/webmin/webmin.git
synced 2026-06-24 13:00:30 +01:00
d94000afbd
This PR adds a standalone Systemd Services and Units module for managing systemd units across system and user scopes. The module keeps systemd-specific behavior separate from the legacy Bootup and Shutdown module and is implemented as standalone `strict`/`warnings` Perl code rather than depending on its existing init helpers. Those helpers intentionally smooth over multiple init systems, while this module keeps systemd-specific file handling, user-manager behavior, ACL checks, and control operations explicit, scoped, and easier to audit. It includes: - Tabbed views for services, timers, sockets, paths, targets, storage, resources, devices, and user units - Guided creation and editing for common unit types, with contextual fields, validation, and help - User-scoped unit management with linger support and safe handling of home-directory unit files - Runtime actions for start, stop, restart, enable, disable, status, logs, properties, dependencies, and system-unit mask/unmask - Drop-in override inventory plus create, edit, and delete flows - Manual unit-file editing with daemon reload reminders and actions - Configurable module behavior, visible tabs, display options, and post-create navigation - Comprehensive ACL controls for system/user scopes, actions, manual edits, drop-ins, linger, reload, backup, and user filters - Safe Webmin user support through a scoped safe ACL preset - Virtualmin integration for granting domain owners access to their own systemd user units - Tests for unit generation, safety checks, ACL behavior, user-unit handling, backup coverage, and Perl::Critic compatibility A companion Virtualmin PR adds template integration so domain owners can be granted scoped access to their own systemd user units when this module is installed.
71 lines
2.2 KiB
Perl
Executable File
71 lines
2.2 KiB
Perl
Executable File
#!/usr/local/bin/perl
|
|
# Show a page for manually editing discovered systemd unit files.
|
|
|
|
use strict;
|
|
use warnings;
|
|
|
|
require './systemd-lib.pl'; ## no critic
|
|
|
|
our (%access, %in, %text);
|
|
|
|
ReadParse();
|
|
error_setup($text{'manual_edit_err'});
|
|
|
|
systemd_acl_bool(\%access, 'manual') ||
|
|
systemd_acl_bool(\%access, 'manual_user') ||
|
|
systemd_acl_error('pmanual');
|
|
|
|
# File choices are constrained to discovered system and local user unit files.
|
|
my @files = grep { systemd_can_manual(\%access, $_) } list_manual_unit_files();
|
|
@files || error(manual_empty_message());
|
|
my %allowed = map { $_->{'file'}, $_ } @files;
|
|
my $info = $allowed{$in{'file'}} || $files[0];
|
|
my $file = $info->{'file'};
|
|
my $data = read_manual_unit_file($info);
|
|
defined($data) || error($text{'manual_eread'});
|
|
|
|
ui_print_header(undef, $text{'manual_title'}, "");
|
|
my $desc = $info->{'scope'} eq 'user' ?
|
|
text('manual_desc_user',
|
|
ui_tag('tt', html_escape($info->{'user'}))) :
|
|
$text{'manual_desc'};
|
|
print ui_div($desc);
|
|
|
|
# Keep the selector separate so changing files does not submit edits.
|
|
print ui_form_start("edit_manual.cgi");
|
|
print ui_tag('b', html_escape($text{'manual_select'}));
|
|
print ui_select("file", $file,
|
|
[ map { [ $_->{'file'}, manual_unit_file_label($_) ] } @files ]);
|
|
print " ", ui_submit($text{'manual_ok'});
|
|
print ui_form_end();
|
|
|
|
# The editor preserves raw unit text; validation is limited to the file path.
|
|
print ui_form_start("save_manual.cgi", "form-data");
|
|
print ui_hidden("file", $file);
|
|
print ui_table_start(undef, undef, 2);
|
|
print ui_table_row(undef, ui_textarea("data", $data, 35, 120), 2);
|
|
print ui_table_end();
|
|
print ui_form_end([ [ "save", $text{'save'} ] ]);
|
|
|
|
ui_print_footer("index.cgi", $text{'index_return'});
|
|
|
|
# manual_unit_file_label(info)
|
|
# Returns the selector label for a manual-edit unit file.
|
|
sub manual_unit_file_label
|
|
{
|
|
my ($info) = @_;
|
|
return html_escape($info->{'file'});
|
|
}
|
|
|
|
# manual_empty_message()
|
|
# Returns an empty-state message for the current manual-edit ACL scope.
|
|
sub manual_empty_message
|
|
{
|
|
my $user = systemd_acl_default_user(\%access);
|
|
return text('manual_enone_user',
|
|
ui_tag('tt', html_escape($user)))
|
|
if ($user && systemd_acl_bool(\%access, 'manual_user') &&
|
|
!systemd_acl_bool(\%access, 'manual'));
|
|
return $text{'manual_enone'};
|
|
}
|