FM / dedrads

/opt/dedrads

Name	Size	Mode	Actions
account_review/	-	0555	rm
check_software_mods/	-	0555	rm
cms_tools/	-	0555	rm
etc/	-	0555	rm
extras/	-	0555	rm
mailparse/	-	0555	rm
mysql/	-	0555	rm
nlp_scripts/	-	0555	rm
oldrads/	-	0555	rm
perl/	-	0555	rm
provision/	-	0555	rm
python/	-	0555	rm
suspended/	-	0555	rm
__pycache__/	-	0555	rm
account-review	799	0555	edit dl rm
allfw	6259	0555	edit dl rm
alp.py	16553	0555	edit dl rm
autossl_sync	6267	0555	edit dl rm
check_apache	9205	0555	edit dl rm
check_bandwidth	4546	0555	edit dl rm
check_boxtrapper	1684	0555	edit dl rm
check_cpu	12212	0555	edit dl rm
check_crons	1827	0555	edit dl rm
check_dcpumon	1973	0555	edit dl rm
check_dns	1827	0555	edit dl rm
check_domlogs	61	0555	edit dl rm
check_exim	3731	0555	edit dl rm
check_hacks	22604	0555	edit dl rm
check_imap	5249	0555	edit dl rm
check_io	6635	0555	edit dl rm
check_max_children	16341	0555	edit dl rm
check_mem	1660	0555	edit dl rm
check_misc	1510	0555	edit dl rm
check_pacct	5201	0555	edit dl rm
check_php	4344	0555	edit dl rm
check_pop3	2295	0555	edit dl rm
check_prov.py	4714	0555	edit dl rm
check_server	696	0555	edit dl rm
check_size	490	0555	edit dl rm
check_software	9849	0555	edit dl rm
check_spamd	2426	0555	edit dl rm
check_traffic	1933	0555	edit dl rm
check_user	1887	0555	edit dl rm
clean_exim.py	6390	0555	edit dl rm
clusterfix	5343	0555	edit dl rm
cmspass.py	3970	0555	edit dl rm
cms_check.py	9825	0555	edit dl rm
cms_counter.py	36734	0555	edit dl rm
cms_creds	713	0555	edit dl rm
cms_dumpdb	4485	0555	edit dl rm
cms_pw	1416	0555	edit dl rm
cpanel-api	7040	0555	edit dl rm
cpanel_postgres_manager.py	29004	0555	edit dl rm
cpmerge	4631	0555	edit dl rm
cpumon	2195	0555	edit dl rm
dcpumon.pl	1239	0555	edit dl rm
dedcheck	18127	0555	edit dl rm
dns-sync	14386	0555	edit dl rm
docroot.py	4425	0555	edit dl rm
du-tree	7450	0555	edit dl rm
envinfo.py	6633	0555	edit dl rm
exclude_rbl.py	5249	0555	edit dl rm
extract-vhost	2691	0555	edit dl rm
filescan	3566	0555	edit dl rm
find_warez	1460	0555	edit dl rm
first_setup.py	19120	0555	edit dl rm
fixwpcron.py	4822	0555	edit dl rm
fix_dns_cluster	353	0555	edit dl rm
goaccess	1217720	0555	edit dl rm
hostsfilemods	4467	0555	edit dl rm
imap_io	2323	0555	edit dl rm
innodb_converter.py	9343	0555	edit dl rm
killall911	530	0555	edit dl rm
killdns	941	0555	edit dl rm
lastcommcache.sh	1374	0555	edit dl rm
legal_lock_down.sh	7450	0555	edit dl rm
lil-cpanel	52002	0555	edit dl rm
listacct	4575	0555	edit dl rm
mailscan	4544	0555	edit dl rm
mail_sources.py	7407	0555	edit dl rm
megaclisas-status	38664	0555	edit dl rm
migrate2central.sh	14418	0555	edit dl rm
modify-account	40631	0555	edit dl rm
modsec_disable.py	11461	0555	edit dl rm
monarxctl	8912	0555	edit dl rm
msp.pl	27714	0555	edit dl rm
mysql_dstat	474	0555	edit dl rm
mysql_selector.py	73102	0555	edit dl rm
nlp	4582	0555	edit dl rm
procscrape	1863	0555	edit dl rm
quarantine	11083	0555	edit dl rm
radsfunctions.sh	863	0555	edit dl rm
recent-cp	16148	0555	edit dl rm
remote_dump	18347	0555	edit dl rm
reset_cpanel	3205	0555	edit dl rm
server-load	2192	0555	edit dl rm
show-conns	20105	0555	edit dl rm
show-conns-adv.py	54667	0555	edit dl rm
sparta.py	382498	0555	edit dl rm
sqltop	27129	0555	edit dl rm
telcheck	2411	0555	edit dl rm
temprootreset	186	0555	edit dl rm
unsuspend_user	1307	0555	edit dl rm
unsusprunner.sh	1840	0555	edit dl rm
updatednsadmin	526	0555	edit dl rm
update_spf	14972	0555	edit dl rm
upgrade-check	9216	0555	edit dl rm
vhost_data.py	6221	0555	edit dl rm
wp-xray.sh	85816	0555	edit dl rm

Edit: /opt/dedrads/monarxctl (8912B)

#!/usr/lib/rads/venv/bin/python3
from pathlib import Path
from platform import node, freedesktop_os_release
from shutil import rmtree
from urllib.request import urlretrieve
import argparse
import subprocess
import sys
import os
import rads

hostname = node()

monarx_repo = """[monarx]
name=Monarx Agent
baseurl=https://repository.monarx.com/repository/monarx-yum/linux/yum/el/{}/$basearch
gpgkey=
gpgcheck=0
"""
monarx_apt_repo = """deb [arch=amd64] https://repository.monarx.com/repository/ubuntu-{0}/ {0} main"""
apt_signing_key = """https://repository.monarx.com/repository/monarx/publickey/monarxpub.gpg"""

packages = [
    "monarx-agent",
    "monarx-protect",
    "monarx-cpanel-plugin",
    "monarx-whm-plugin",
    "monarx-cwp-plugin",
]

parser = argparse.ArgumentParser(description='Install or remove monarx')

parser.add_argument(
    'function',
    nargs=1,
    default=None,
    help='function',
    choices=['install', 'remove'],
)
parser.add_argument('veid', type=int, nargs="?", default=None, help='VPS ID')
parser.add_argument(
    '--client_id', type=str, default='', help='Monarx client_id'
)
parser.add_argument(
    '--client_secret', type=str, default='', help='Monarx client_secret'
)

args = parser.parse_args()

if args.function is None:
    print("Please specify if you wish to install or remove monarx")
    sys.exit()

if args.veid is not None and not rads.vz.is_vz():
    print("You provided a VPS ID but this isnt a VZ node")
    sys.exit()

if args.function == ['install'] and (
    args.client_id == '' or args.client_secret == ''
):
    print(
        "Please provide client_id and client_secret from BitWarden for installation"
    )
    sys.exit()

monarx_conf = f"""client_id = {args.client_id}
client_secret = {args.client_secret}
user_base = /home/
tags = upsell
host_id = {hostname}"""

if rads.vz.is_vz():
    if args.veid is None:
        print("CTID is required (ex: monarxctl install $CTID)")
    else:
        ctid = str(args.veid)
        envid = rads.vz.get_envid(ctid)

if not rads.vz.is_ct_running(ctid):
        print("container not found")
        sys.exit()

grep = ["grep", "--color=never", "-o", "[0-9]", "/etc/redhat-release"]
yum_cmd = ["yum", "-y", "-q"]
apt_cmd = ["apt-get", "-y"]
is_ubuntu = False
os_ver = ""

def check_install(veid):
    if is_ubuntu:
        distro_cmd = ["dpkg-query", "-W", "--showformat='${Status}'"]
    else:
        distro_cmd = ["rpm", "-q"]

if veid is not None:
        pkg_cmd = vz_exec + distro_cmd + packages
    else:
        pkg_cmd = distro_cmd + packages
    try:
        pkg_out = subprocess.run(
            pkg_cmd, capture_output=True, check=True, text=True
        )
        if is_ubuntu and pkg_out:
            return True
        if "not installed" in pkg_out.stdout:
            return False
        return True
    except subprocess.CalledProcessError as e:
        if e.returncode in (1, 2):
            print(e.stderr)
        else:
            print(f"install check error: {e.cmd} returned {e.returncode}")
    return None

if args.veid:
    vz_exec = ["/usr/sbin/vzctl", "exec2", ctid]
    grep = vz_exec + grep
    yum_cmd = vz_exec + yum_cmd
    apt_cmd = vz_exec + apt_cmd
    path_prefix = '/vz/root/' + envid
else:
    ctid = None
    path_prefix = ""
try:
    print("Checking OS version..")
    if freedesktop_os_release().get('ID', '') == 'ubuntu':
        if ctid is not None:
            lsb_cmd = vz_exec + ["/usr/bin/lsb_release", "-sc"]
        else:
            lsb_cmd = ["/usr/bin/lsb_release", "-sc"]
        is_ubuntu = True
        check_cmd = "dpkg -l"
        # ensure apt/apt-get doesnt ask questions
        os.environ["DEBIAN_FRONTEND"] = "noninteractive"

os_ver = subprocess.check_output(
            lsb_cmd, text=True, stderr=subprocess.DEVNULL
        )
    else:
        check_cmd = "rpm -q"
        os_ver = subprocess.check_output(
            grep, text=True, stderr=subprocess.DEVNULL
        )
        os_ver = int(os_ver.split('\n', maxsplit=1)[0])
    print(f"Detected OS version: {os_ver}")
except subprocess.CalledProcessError as e:
    print(e.cmd, e.stderr)

if is_ubuntu:
    # these dont exist on ubuntu
    packages.remove("monarx-cwp-plugin")
    repo = Path(f'{path_prefix}/etc/apt/sources.list.d/monarx.list')
    apt_key_path = Path(f'{path_prefix}/etc/apt/trusted.gpg.d/monarx.asc')
    os_ver.strip('\n')
    repotext = monarx_apt_repo.format(os_ver.strip())
else:
    # dont install cpanel stuff if theres no cpanel
    if not os.path.exists("/usr/local/cpanel/cpanel"):
        packages.remove("monarx-whm-plugin")
        packages.remove("monarx-cpanel-plugin")
    # dont install cwp stuff if theres no cdwp
    if not os.path.exists("/usr/local/cwpsrv/bin/cwpsrv"):
        packages.remove("monarx-cwp-plugin")
    apt_key_path = None
    repo = Path(f'{path_prefix}/etc/yum.repos.d/monarx.repo')
    repotext = monarx_repo.format(os_ver)
conf = Path(f'{path_prefix}/etc/monarx-agent.conf')

print("repo file:", repo)
print("conf file:", conf)

if "install" in args.function:
    if check_install(ctid):
        print("Monarx packages appear to already be installed")
        sys.exit()

# attempts to download key if its missing
    if is_ubuntu and not os.path.exists(apt_key_path):
        print("Fetching signing key...")
        try:
            urlretrieve(apt_signing_key, apt_key_path)
        except Exception as e:
            print(f"error downloading signing key: {e}")
            print(
                """you can download manually with:
wget -qO - https://repository.monarx.com/repository/monarx/publickey/monarxpub.gpg | sudo tee /etc/apt/trusted.gpg.d/monarx.asc"""
            )
            sys.exit()

print("Beginning monarx install...")
    repo.write_text(repotext, encoding='ascii')
    conf.write_text(monarx_conf, encoding='ascii')
    try:
        if is_ubuntu:
            print("Updating package list with apt update...")
            if ctid is not None:
                update_cmd = vz_exec + [
                    "DEBIAN_FRONTEND=noninteractive",
                    "apt-get",
                    "-qq",
                    "update",
                ]
            else:
                update_cmd = ["apt-get", "-qq", "update"]
            try:
                subprocess.run(update_cmd, check=True)
            except subprocess.CalledProcessError as e:
                print(f"apt update failed: {e}")
                print("Please resolve any apt source issues and try again")
                sys.exit()
            apt_cmd.append("install")
            apt_inst = subprocess.check_output(
                apt_cmd + packages, stderr=subprocess.DEVNULL
            )
        else:
            yum_cmd.append("install")
            yum_inst = subprocess.check_output(
                yum_cmd + packages, stderr=subprocess.DEVNULL
            )
    except subprocess.CalledProcessError as e:
        print(f"install process error: {e.cmd}")
    if check_install(ctid):
        print("Monarx install complete.")
    else:
        print(
            f"""There may have been an issue with the installation process!!
              Please verify with: {check_cmd} {' '.join(packages)}"""
        )

if "remove" in args.function:
    if not check_install(ctid):
        print("Monarx packages not found - are you sure it's installed?")
        sys.exit()
    cleanup_files = [repo, conf]
    # removal will throw errors and leave this behind if the contents changed
    # the contents have obviously changed, it's a cache dir.
    print("Removing monarx-agent cache dir...")
    cache_path = Path(f'{path_prefix}/var/cache/monarx-agent/')
    if os.path.exists(cache_path):
        try:
            rmtree(cache_path)
        except PermissionError:
            print(f"permission error: unable to remove {cache_path}")
        except OSError as e:
            print(f"removal of {cache_path} failed: {e}")

print("Removing monarx packages...")
    try:
        if is_ubuntu:
            apt_cmd.append("purge")
            apt_purge = subprocess.run(apt_cmd + packages, check=True)
            cleanup_files.append(apt_key_path)
        else:
            yum_cmd.append("remove")
            yum_inst = subprocess.run(yum_cmd + packages, check=True)
    except subprocess.CalledProcessError as e:
        print(f"package removal process error: {e.cmd}")
    print("Removing monarx repo and conf...")
    for file in cleanup_files:
        try:
            os.remove(file)
        except FileNotFoundError:
            pass
        except OSError as e:
            print(f"conf/repo removal error: {e.filename} - {e.strerror}.")

if not check_install(ctid):
        print("Monarx removal complete.")
    else:
        print(
            """There may have been an issue with the removal process!!\n"""
            f"""Please verify with: {check_cmd} {' '.join(packages)}"""
        )

cmd: