Gecko [ goons4good.org ]

Name	Size	Permission	Date
cron	[ DIR ]	drwxr-xr-x	2025-07-23 04:12
add-pgsql-ipv6-support.sh	564 B	-rwxr-xr-x	2022-09-28 10:30
allow_cl.sh	3.3 KB	-rwxr-xr-x	2024-03-05 16:15
auth-removal.sh	1.95 KB	-rwx------	2023-01-23 13:29
block_ssh.sh	1.15 KB	-rwxr-xr-x	2023-05-23 21:01
cfm_control	4.65 KB	-rwxr-xr-x	2024-03-28 12:14
check_autossl_excluded.sh	6.88 KB	-rwxr-xr-x	2023-05-22 11:59
convert_to_clos.sh	5.73 KB	-rwxr-xr-x	2023-02-09 14:50
convert_to_core.sh	276 B	-rwx------	2025-04-01 06:33
disable_cpbackups.sh	1.39 KB	-rwxr-xr-x	2024-10-10 07:11
domain_check.py	6.24 KB	-rwxr-xr-x	2024-08-27 10:40
grubinst6.sh	230 B	-rwxr-xr-x	2022-10-27 11:41
grubinst7.sh	323 B	-rwxr-xr-x	2024-01-24 12:57
install-ipa.sh	2 KB	-rwxr-xr-x	2024-09-26 04:24
install-ipa.sh.bak	2.37 KB	-rwxr-xr-x	2023-07-05 13:07
install_cloudlinux.sh	1.31 KB	-rwxr-xr-x	2022-09-29 15:30
install_csf.sh	2.91 KB	-rwx------	2023-05-08 10:57
install_elasticsearch.sh	2.19 KB	-rwx------	2022-07-25 14:24
install_litespeed.sh	4.33 KB	-rwx------	2024-06-13 10:28
install_multiphp.sh	976 B	-rwx------	2022-10-10 14:55
install_redis.sh	709 B	-rwx------	2022-09-28 10:30
ipmicfg	429.04 KB	-rwxr-xr-x	2023-10-04 10:59
lets_encrypt_accept.sh	306 B	-rwxr-xr-x	2024-05-14 09:32
mailqueue_check.sh	1.65 KB	-rwxr-xr-x	2022-04-11 09:40
mysql_minor_upgrade.sh	9.33 KB	-rwxr-xr-x	2024-09-11 17:25
server-scripts_deployer.sh	13.54 KB	-rwxr-xr-x	2024-03-28 12:59
set_autossl_onlynotify_expiry.sh	1.91 KB	-rwxr-xr-x	2022-09-14 08:37
updatecfips.sh	1.62 KB	-rwxr-xr-x	2023-05-22 11:59
wp_plugin_scan.py	14.8 KB	-rw-------	2025-01-21 11:31

Rename

#!/bin/bash
#
# Config Management Controller (enable/disable/status)
#   el7/el8: Salt

_cfm="Salt"
_cfmrun_cmd="/usr/bin/salt-call state.apply --output-diff"
_cfmcontrol() { local action="$1"; /usr/bin/systemctl "${action}" salt-minion; }
_cfmrun()     { eval "${_cfmrun_cmd}"; }
_option=$1
_duration=$2
_reason=$(shift ; shift ; for arg in "$@"; do echo -n "$arg "; done)
_indowntime="/opt/includes/.cfm_downtime"
_atjobid=
_saltblocker="/opt/includes/.stop_salt"

if [[ -e "${_indowntime}" ]]; then
  _downtimed_since=$(date -d @"$(stat -c '%Y' "${_indowntime}")" "+%b %d, %Y")
fi

_curstatus() {
  if [[ -f ${_saltblocker} ]] && [[ -f ${_indowntime} ]]; then
    if [[ $(awk -F'|' '{print NF; exit}' "${_indowntime}") -eq 4 ]]; then
      _downtime_duration=$(awk -F'|' '{print $2}' "${_indowntime}")
    else
      _downtime_duration="Permanent"
    fi
    _atjobid=$(awk -F'|' '{print $3}' "${_indowntime}")
    _downtime_reason=$(awk -F'|' '{print $NF}' "${_indowntime}")
    _downtime_reason=${_downtime_reason//$'\n'/} # Remove all newlines.
    _downtime_by=$(awk -F'|' '{print $1}' "${_indowntime}")
    echo -n "[STATUS] ${_cfm}: disabled | "
    echo -n "Duration: ${_downtime_duration} | "
    if [[ "${_downtime_duration}" == 'Permanent' ]]; then
      echo -n "Downtimed since: ${_downtimed_since} | "
    fi
    echo -n "By: ${_downtime_by} | "
    printf  "Reason: %s\n" "${_downtime_reason}"
    return 1
  elif [[ -f ${_saltblocker} ]] && [[ ! -f ${_indowntime} ]]; then
    printf "[STATUS] %s: %s | with NO REASON ?!\n" "${_cfm}" "disabled"
    return 1
  else
    printf "[STATUS] %s: %s\n" "${_cfm}" "enabled"
    return 0
  fi
}

_usage() {
  printf "Invalid or missing argument.\n"
  printf "Usage: %s [ enable | disable DURATION REASON | status ] \n\n" "$(basename "$0")"
  printf "Examples: \n"
  printf "%s disable 5d BFENG-XYZ\n" "$(basename "$0")"
  printf "%s disable permanent BFENG-XYZ\n\n" "$(basename "$0")"
  _curstatus
}

if [ $# -eq 0 ]; then
  _usage
  exit
fi

_enable() {
  if ! _curstatus; then
    read -r -p "Are you sure you want to enable ${_cfm}? (y/Y, n/N): " answer
    if [[ ${answer} =~ ^([yY])$ ]]; then
      # SYSENG-13956 - remove our flag file, still start the service if not running
      # to recover from legacy disables
      rm -f ${_saltblocker}
      _cfmcontrol start
      printf "Enabling... (please stand by)\n"
      _cfmrun
      printf "Removing %s.\n" "${_indowntime}"
      rm -f ${_indowntime}
      if [[ "${_downtime_duration}" != 'Permanent' ]]; then
        printf "Removing at job %s.\n" "${_atjobid}"
        atrm "${_atjobid}"
      fi
      printf "Done.\n"
      source /root/.bash_profile
    else
      echo "Okay, no worries!"
    fi
  else
    echo "[WARNING] ${_cfm} is already enabled."
  fi
}

_disable() {
  if [ -z "${_reason}" ] && [[ "$(_curstatus)" ]]; then
    printf "[ERROR]: argument(s) missing\n"
    _usage
    exit
  else
    if _curstatus; then
      # let's check if a Jira case ID is included in the comment
      if ! grep -qE '(SYSENG|BFENG)-[0-9].*' <<< "${_reason}"; then
        read -r -p "Are you sure you want to disable ${_cfm} without including a Jira case ID? (y/Y, n/N): " answer
        if [[ ${answer} =~ ^([yY])$ ]]; then
          _disable_salt
        elif [[ ${answer} =~ ^([nN])$ ]]; then
          echo "Okay, no worries! Also it's highly encouraged to include a Jira ID when disabling Salt"
        else
          echo "Invalid option!"
        fi
      else
        _disable_salt
      fi
    else
      echo "[WARNING] ${_cfm} is already disabled."
    fi
  fi
}

_disable_salt() {
  _reason=${_reason//$'\n'/} # Remove all newlines.
  if [[ "${_duration}" =~ ([0-9]+[h,d]) ]]; then
    if [[ "${_duration}" =~ h ]]; then
      _downtime_duration=$(sed 's/.$//' <<< "${_duration}")" hours"
    elif [[ "${_duration}" =~ d ]]; then
      _downtime_duration=$(sed 's/.$//' <<< "${_duration}")" days"
    fi
    #SYSENG-2668
    _atjobid=$( echo "echo y | /opt/bin/cfm_control enable" | at now + "${_downtime_duration}" 2>&1 | sed '/warning: commands will be executed using \/bin\/sh/d' | awk '{print $2}')
  else
    _downtime_duration="Permanent"
  fi

echo "Disabling ${_cfm} for: ${_reason}"
  echo "Duration: ${_downtime_duration}"
  # SYSENG-13956 do this via flagfile rather than kill the services
  touch ${_saltblocker}
  if [[ "${_downtime_duration}" == 'Permanent' ]]; then
    echo "$(logname)|${_downtime_duration}|${_reason}" > ${_indowntime}
  else
    echo "$(logname)|${_downtime_duration}|${_atjobid}|${_reason}" > ${_indowntime}
  fi
  echo "Done."
  source /root/.bash_profile
}

case "$_option" in
  enable)
  _enable
  ;;
  disable)
  _disable
  ;;
  status)
  _curstatus
  ;;
  *)
  _usage
  exit
  ;;
esac