🌐 Configuration réseau (avant activation)
Actuellement :
{net.get('mode','?')} ·
IP {net.get('ip_cidr','—')} ·
GW {net.get('gateway','—')} ·
iface {net.get('interface','—')}
{msg_html}
"""
def render_page(extra_state: dict | None = None) -> str:
state = load_state()
if extra_state:
state.update(extra_state)
return HTML_TEMPLATE.format(
hostname=os.uname().nodename,
fp_short=(state.get("machine_fingerprint") or "—")[:24],
api_base=state.get("hp_api_base", "https://api.unisoc.fr"),
portal_base=state.get("portal_base", "https://client.unisoc.fr"),
status_banner=render_status_banner(state),
activation_section=render_activation_section(state),
network_card=render_network_card(state),
)
# ──────────────────────────────────────────────────────────────────────────────
# Auto-shutdown : quand license.json apparaît, re-run init.py pour basculer
# /etc/issue en banner COUVERTURE Windows BackupServer, puis stop ce service.
# ──────────────────────────────────────────────────────────────────────────────
def auto_shutdown_watcher():
license_file = CONFIG_DIR / "license.json"
while True:
time.sleep(15)
if license_file.exists():
try:
lic = json.loads(license_file.read_text())
if lic.get("license_token") or lic.get("api_key"):
print("[setup-ui] license.json détecté — bascule banner couverture + auto-stop dans 20s")
time.sleep(20)
try:
subprocess.run(["/opt/sylink-honeypot/bin/init.py"], timeout=15)
except Exception as e:
print(f"[setup-ui] init.py rerun échec : {e}")
subprocess.run(["systemctl", "disable", "--now", "sylink-honeypot-setup-ui.service"],
timeout=20)
return
except Exception as e:
print(f"[setup-ui] erreur watch license : {e}")
# ──────────────────────────────────────────────────────────────────────────────
# HTTP handlers
# ──────────────────────────────────────────────────────────────────────────────
class Handler(BaseHTTPRequestHandler):
def do_GET(self):
if urlparse(self.path).path != "/":
self.send_response(404); self.end_headers(); return
self.send_response(200)
self.send_header("Content-Type", "text/html; charset=utf-8")
self.end_headers()
self.wfile.write(render_page().encode())
def do_POST(self):
if urlparse(self.path).path != "/apply-network":
self.send_response(404); self.end_headers(); return
try:
n = int(self.headers.get("Content-Length", 0))
body = self.rfile.read(n).decode("utf-8", errors="replace")
form = {k: v[0] for k, v in parse_qs(body).items()}
mode = form.get("mode", "dhcp")
iface = form.get("interface") or primary_iface()
if mode == "static":
dns = [d.strip() for d in (form.get("dns") or "").split(",") if d.strip()]
ok, msg = apply_network_static(iface, form.get("ip_cidr", "").strip(),
form.get("gateway", "").strip(), dns)
else:
ok, msg = apply_network_dhcp(iface)
page = render_page({"_network_ok": ok, "_network_msg": msg})
self.send_response(200)
self.send_header("Content-Type", "text/html; charset=utf-8")
self.end_headers()
self.wfile.write(page.encode())
except Exception as e:
self.send_response(500); self.end_headers()
self.wfile.write(f"erreur : {e}".encode())
def log_message(self, format, *args):
pass
def main():
threading.Thread(target=auto_shutdown_watcher, daemon=True).start()
server = ThreadingHTTPServer(("0.0.0.0", PORT), Handler)
print(f"sylink-honeypot-setup-ui listening on 0.0.0.0:{PORT}")
server.serve_forever()
if __name__ == "__main__":
main()
)."""
try:
r = subprocess.run(
["qrencode", "-t", "PNG", "-s", "5", "-m", "2", "-o", "-", data],
capture_output=True, timeout=5, check=True,
)
return base64.b64encode(r.stdout).decode("ascii")
except Exception:
return ""
def detect_network_system() -> str:
"""Renvoie 'netplan' (Ubuntu) ou 'ifupdown' (Debian) selon ce qui est installé/utilisé."""
if Path("/etc/netplan").is_dir() and subprocess.run(["which", "netplan"],
capture_output=True).returncode == 0:
return "netplan"
return "ifupdown"
def apply_network_static(iface: str, ip_cidr: str, gateway: str, dns: list[str]) -> tuple[bool, str]:
if not ip_cidr or not gateway:
return False, "IP et passerelle requises."
if "/" not in ip_cidr:
return False, "Format IP attendu : 192.168.1.222/24 (avec CIDR)."
dns_clean = [d for d in dns if d] or ["8.8.8.8", "1.1.1.1"]
sys_type = detect_network_system()
if sys_type == "netplan":
yaml = f"""# UniSOC honeypot — config statique appliquée depuis :8080
network:
version: 2
ethernets:
{iface}:
dhcp4: no
addresses:
- {ip_cidr}
routes:
- to: default
via: {gateway}
nameservers:
addresses: [{', '.join(dns_clean)}]
"""
try:
target = Path("/etc/netplan/99-unisoc-honeypot.yaml")
target.write_text(yaml)
os.chmod(target, 0o600)
for f in Path("/etc/netplan").glob("*.yaml"):
if f.name != target.name:
f.rename(f.with_suffix(".yaml.unisoc-bak"))
subprocess.run(["netplan", "generate"], check=True, timeout=15)
subprocess.Popen(["bash", "-c", "sleep 2 && netplan apply"])
return True, f"[netplan] Config posée. IP {ip_cidr} dans ~5 s."
except Exception as e:
return False, f"netplan échec : {e}"
# ─── ifupdown (Debian) ──────────────────────────────────────────────
try:
# Backup initial /etc/network/interfaces (1 seule fois)
interfaces_path = Path("/etc/network/interfaces")
backup_path = Path("/etc/network/interfaces.unisoc-bak")
if not backup_path.exists() and interfaces_path.exists():
backup_path.write_text(interfaces_path.read_text())
# Réécrit /etc/network/interfaces en minimal + source des .d
interfaces_path.write_text("""# Géré par UniSOC honeypot — voir /etc/network/interfaces.d/
source /etc/network/interfaces.d/*
auto lo
iface lo inet loopback
""")
# Écrit la config statique dans le drop-in
dropin = Path(f"/etc/network/interfaces.d/99-unisoc-honeypot")
cfg = f"""# UniSOC honeypot — config statique appliquée depuis :8080
allow-hotplug {iface}
iface {iface} inet static
address {ip_cidr}
gateway {gateway}
dns-nameservers {' '.join(dns_clean)}
"""
dropin.write_text(cfg)
os.chmod(dropin, 0o644)
# Apply en background pour ne pas couper la réponse HTTP
subprocess.Popen([
"bash", "-c",
f"sleep 2 && ifdown {iface} 2>/dev/null ; ifup {iface}"
])
return True, f"[ifupdown] Config posée. IP {ip_cidr} dans ~5 s — rechargez sur la nouvelle IP."
except Exception as e:
return False, f"ifupdown échec : {e}"
def apply_network_dhcp(iface: str) -> tuple[bool, str]:
sys_type = detect_network_system()
if sys_type == "netplan":
try:
f_unisoc = Path("/etc/netplan/99-unisoc-honeypot.yaml")
if f_unisoc.exists():
f_unisoc.unlink()
for f in Path("/etc/netplan").glob("*.yaml.unisoc-bak"):
f.rename(f.with_suffix(""))
if not list(Path("/etc/netplan").glob("*.yaml")):
Path("/etc/netplan/01-dhcp.yaml").write_text(
f"network:\n version: 2\n ethernets:\n {iface}:\n dhcp4: true\n"
)
os.chmod("/etc/netplan/01-dhcp.yaml", 0o600)
subprocess.run(["netplan", "generate"], check=True, timeout=15)
subprocess.Popen(["bash", "-c", "sleep 2 && netplan apply"])
return True, "[netplan] DHCP restauré."
except Exception as e:
return False, str(e)
# ─── ifupdown ───────────────────────────────────────────────────────
try:
dropin = Path(f"/etc/network/interfaces.d/99-unisoc-honeypot")
if dropin.exists():
dropin.unlink()
# Restore le backup s'il existe, sinon génère un default DHCP
backup_path = Path("/etc/network/interfaces.unisoc-bak")
interfaces_path = Path("/etc/network/interfaces")
if backup_path.exists():
interfaces_path.write_text(backup_path.read_text())
else:
interfaces_path.write_text(f"""source /etc/network/interfaces.d/*
auto lo
iface lo inet loopback
allow-hotplug {iface}
iface {iface} inet dhcp
""")
subprocess.Popen([
"bash", "-c",
f"sleep 2 && ifdown {iface} 2>/dev/null ; ifup {iface}"
])
return True, "[ifupdown] DHCP restauré. Re-bail dans ~5 s."
except Exception as e:
return False, str(e)
# ──────────────────────────────────────────────────────────────────────────────
# HTML — design aligné portail UniSOC (light, slate, primary orange)
# ──────────────────────────────────────────────────────────────────────────────
HTML_TEMPLATE = """
'
if qr_b64 else '