feat: add netplan configuration models and backend API for applying netplan
All checks were successful
Build and Deploy MITM Webserver / build (push) Successful in 8s
All checks were successful
Build and Deploy MITM Webserver / build (push) Successful in 8s
This commit is contained in:
36
backend/src/Models/netplan.py
Normal file
36
backend/src/Models/netplan.py
Normal file
@@ -0,0 +1,36 @@
|
||||
from pydantic import BaseModel, Field
|
||||
from typing import List, Dict, Optional
|
||||
|
||||
|
||||
class Nameservers(BaseModel):
|
||||
addresses: List[str] = Field(default_factory=list)
|
||||
search: List[str] = Field(default_factory=list)
|
||||
|
||||
|
||||
class EthernetConfig(BaseModel):
|
||||
dhcp4: Optional[bool] = None
|
||||
dhcp6: Optional[bool] = None
|
||||
addresses: Optional[List[str]] = None
|
||||
gateway4: Optional[str] = None
|
||||
gateway6: Optional[str] = None
|
||||
nameservers: Optional[Nameservers] = None
|
||||
optional: Optional[bool] = None
|
||||
|
||||
|
||||
class BridgeConfig(BaseModel):
|
||||
interfaces: List[str] = Field(default_factory=list) # ["eth1", "eth2"]
|
||||
dhcp4: Optional[bool] = None
|
||||
dhcp6: Optional[bool] = None
|
||||
addresses: Optional[List[str]] = None
|
||||
gateway4: Optional[str] = None
|
||||
gateway6: Optional[str] = None
|
||||
nameservers: Optional[Nameservers] = None
|
||||
parameters: Optional[dict] = None # allows spanning-tree, port-priority, forward-delay, etc.
|
||||
optional: Optional[bool] = None
|
||||
|
||||
|
||||
class NetworkConfig(BaseModel):
|
||||
version: int = 2
|
||||
renderer: Optional[str] = "networkd"
|
||||
ethernets: Dict[str, EthernetConfig] = Field(default_factory=dict)
|
||||
bridges: Dict[str, BridgeConfig] = Field(default_factory=dict)
|
||||
@@ -1,3 +1,6 @@
|
||||
from asyncio import subprocess
|
||||
from http.client import HTTPException
|
||||
import src.Models.netplan as netplan
|
||||
from fastapi import FastAPI
|
||||
from fastapi.middleware.cors import CORSMiddleware
|
||||
import os
|
||||
@@ -25,4 +28,33 @@ def read_root():
|
||||
@app.get("/api/nft/ruleset")
|
||||
def read_root():
|
||||
message = os.popen("sudo nft --json list ruleset").read().strip()
|
||||
return {"message": message}
|
||||
return {"message": message}
|
||||
|
||||
|
||||
NETPLAN_FILE = "/etc/netplan/99-app.yaml"
|
||||
|
||||
@app.post("/netplan/apply")
|
||||
def apply_netplan(config: netplan.NetworkConfig):
|
||||
try:
|
||||
data = {"network": config.dict(exclude_none=True)}
|
||||
|
||||
with open(NETPLAN_FILE, "w") as f:
|
||||
yaml.dump(data, f, sort_keys=False)
|
||||
|
||||
# Safety: rollback if config breaks connectivity
|
||||
result = subprocess.run(
|
||||
["netplan", "try", "--timeout", "10"],
|
||||
capture_output=True,
|
||||
text=True,
|
||||
)
|
||||
|
||||
if result.returncode != 0:
|
||||
raise HTTPException(
|
||||
status_code=500,
|
||||
detail=f"Netplan failed: {result.stderr}"
|
||||
)
|
||||
|
||||
return {"status": "ok", "output": result.stdout}
|
||||
|
||||
except Exception as e:
|
||||
raise HTTPException(status_code=500, detail=str(e))
|
||||
Reference in New Issue
Block a user