Replace GTK4 desktop app with FastAPI web app (Sovran_SystemsOS Hub)
Agent-Logs-Url: https://github.com/naturallaw777/staging_alpha/sessions/5c173acb-776f-4cd2-bc89-bb7675e38677 Co-authored-by: naturallaw777 <99053422+naturallaw777@users.noreply.github.com>
This commit is contained in:
copilot-swe-agent[bot]
committed by
GitHub
GitHub
parent
af1ad09e2e
commit
42900608f6
329
app/sovran_systemsos_web/server.py
Normal file
329
app/sovran_systemsos_web/server.py
Normal file
@@ -0,0 +1,329 @@
|
||||
"""Sovran_SystemsOS Hub — FastAPI web server."""
|
||||
|
||||
from __future__ import annotations
|
||||
|
||||
import asyncio
|
||||
import json
|
||||
import os
|
||||
import socket
|
||||
import subprocess
|
||||
import threading
|
||||
import urllib.request
|
||||
from typing import AsyncIterator
|
||||
|
||||
from fastapi import FastAPI, HTTPException, Response
|
||||
from fastapi.responses import HTMLResponse, StreamingResponse
|
||||
from fastapi.staticfiles import StaticFiles
|
||||
from fastapi.templating import Jinja2Templates
|
||||
from fastapi.requests import Request
|
||||
|
||||
from .config import load_config
|
||||
from . import systemctl as sysctl
|
||||
|
||||
# ── Constants ────────────────────────────────────────────────────
|
||||
|
||||
FLAKE_LOCK_PATH = "/etc/nixos/flake.lock"
|
||||
FLAKE_INPUT_NAME = "Sovran_Systems"
|
||||
GITEA_API_BASE = "https://git.sovransystems.com/api/v1/repos/Sovran_Systems/Sovran_SystemsOS/commits"
|
||||
|
||||
REBOOT_COMMAND = [
|
||||
"ssh", "-o", "StrictHostKeyChecking=no", "-o", "BatchMode=yes",
|
||||
"root@localhost",
|
||||
"reboot",
|
||||
]
|
||||
|
||||
UPDATE_COMMAND = [
|
||||
"ssh", "-o", "StrictHostKeyChecking=no", "-o", "BatchMode=yes",
|
||||
"root@localhost",
|
||||
"cd /etc/nixos && nix flake update && nixos-rebuild switch && flatpak update -y",
|
||||
]
|
||||
|
||||
CATEGORY_ORDER = [
|
||||
("infrastructure", "Infrastructure"),
|
||||
("bitcoin-base", "Bitcoin Base"),
|
||||
("bitcoin-apps", "Bitcoin Apps"),
|
||||
("communication", "Communication"),
|
||||
("apps", "Self-Hosted Apps"),
|
||||
("nostr", "Nostr"),
|
||||
]
|
||||
|
||||
ROLE_LABELS = {
|
||||
"server_plus_desktop": "Server + Desktop",
|
||||
"desktop": "Desktop Only",
|
||||
"node": "Bitcoin Node",
|
||||
}
|
||||
|
||||
# ── App setup ────────────────────────────────────────────────────
|
||||
|
||||
_BASE_DIR = os.path.dirname(os.path.abspath(__file__))
|
||||
|
||||
app = FastAPI(title="Sovran_SystemsOS Hub")
|
||||
|
||||
app.mount(
|
||||
"/static",
|
||||
StaticFiles(directory=os.path.join(_BASE_DIR, "static")),
|
||||
name="static",
|
||||
)
|
||||
|
||||
# Also serve icons from the app/icons directory (set via env or adjacent folder)
|
||||
_ICONS_DIR = os.environ.get(
|
||||
"SOVRAN_HUB_ICONS",
|
||||
os.path.join(os.path.dirname(_BASE_DIR), "icons"),
|
||||
)
|
||||
if os.path.isdir(_ICONS_DIR):
|
||||
app.mount(
|
||||
"/static/icons",
|
||||
StaticFiles(directory=_ICONS_DIR),
|
||||
name="icons",
|
||||
)
|
||||
|
||||
templates = Jinja2Templates(directory=os.path.join(_BASE_DIR, "templates"))
|
||||
|
||||
# ── Update check helpers ─────────────────────────────────────────
|
||||
|
||||
def _get_locked_info():
|
||||
try:
|
||||
with open(FLAKE_LOCK_PATH, "r") as f:
|
||||
lock = json.load(f)
|
||||
nodes = lock.get("nodes", {})
|
||||
node = nodes.get(FLAKE_INPUT_NAME, {})
|
||||
locked = node.get("locked", {})
|
||||
rev = locked.get("rev")
|
||||
branch = locked.get("ref")
|
||||
if not branch:
|
||||
branch = node.get("original", {}).get("ref")
|
||||
return rev, branch
|
||||
except Exception:
|
||||
pass
|
||||
return None, None
|
||||
|
||||
|
||||
def _get_remote_rev(branch=None):
|
||||
try:
|
||||
url = GITEA_API_BASE + "?limit=1"
|
||||
if branch:
|
||||
url += f"&sha={branch}"
|
||||
req = urllib.request.Request(url, method="GET")
|
||||
req.add_header("Accept", "application/json")
|
||||
with urllib.request.urlopen(req, timeout=15) as resp:
|
||||
data = json.loads(resp.read().decode())
|
||||
if isinstance(data, list) and len(data) > 0:
|
||||
return data[0].get("sha")
|
||||
except Exception:
|
||||
pass
|
||||
return None
|
||||
|
||||
|
||||
def check_for_updates() -> bool:
|
||||
locked_rev, branch = _get_locked_info()
|
||||
remote_rev = _get_remote_rev(branch)
|
||||
if locked_rev and remote_rev:
|
||||
return locked_rev != remote_rev
|
||||
return False
|
||||
|
||||
|
||||
# ── IP helpers ───────────────────────────────────────────────────
|
||||
|
||||
def _get_internal_ip() -> str:
|
||||
try:
|
||||
s = socket.socket(socket.AF_INET, socket.SOCK_DGRAM)
|
||||
s.settimeout(2)
|
||||
s.connect(("1.1.1.1", 80))
|
||||
ip = s.getsockname()[0]
|
||||
s.close()
|
||||
return ip
|
||||
except Exception:
|
||||
pass
|
||||
try:
|
||||
result = subprocess.run(
|
||||
["hostname", "-I"], capture_output=True, text=True, timeout=5,
|
||||
)
|
||||
if result.returncode == 0:
|
||||
parts = result.stdout.strip().split()
|
||||
if parts:
|
||||
return parts[0]
|
||||
except Exception:
|
||||
pass
|
||||
return "unavailable"
|
||||
|
||||
|
||||
def _get_external_ip() -> str:
|
||||
# Max length 46 covers the longest valid IPv6 address (45 chars) plus a newline
|
||||
MAX_IP_LENGTH = 46
|
||||
for url in [
|
||||
"https://api.ipify.org",
|
||||
"https://ifconfig.me/ip",
|
||||
"https://icanhazip.com",
|
||||
]:
|
||||
try:
|
||||
req = urllib.request.Request(url, method="GET")
|
||||
with urllib.request.urlopen(req, timeout=8) as resp:
|
||||
ip = resp.read().decode().strip()
|
||||
if ip and len(ip) < MAX_IP_LENGTH:
|
||||
return ip
|
||||
except Exception:
|
||||
continue
|
||||
return "unavailable"
|
||||
|
||||
|
||||
# ── Routes ───────────────────────────────────────────────────────
|
||||
|
||||
@app.get("/", response_class=HTMLResponse)
|
||||
async def index(request: Request):
|
||||
return templates.TemplateResponse("index.html", {"request": request})
|
||||
|
||||
|
||||
@app.get("/api/config")
|
||||
async def api_config():
|
||||
cfg = load_config()
|
||||
role = cfg.get("role", "server_plus_desktop")
|
||||
return {
|
||||
"role": role,
|
||||
"role_label": ROLE_LABELS.get(role, role),
|
||||
"category_order": CATEGORY_ORDER,
|
||||
}
|
||||
|
||||
|
||||
@app.get("/api/services")
|
||||
async def api_services():
|
||||
cfg = load_config()
|
||||
method = cfg.get("command_method", "systemctl")
|
||||
services = cfg.get("services", [])
|
||||
|
||||
loop = asyncio.get_event_loop()
|
||||
|
||||
async def get_status(entry):
|
||||
unit = entry.get("unit", "")
|
||||
scope = entry.get("type", "system")
|
||||
enabled = entry.get("enabled", True)
|
||||
if enabled:
|
||||
status = await loop.run_in_executor(
|
||||
None, lambda: sysctl.is_active(unit, scope)
|
||||
)
|
||||
else:
|
||||
status = "disabled"
|
||||
return {
|
||||
"name": entry.get("name", ""),
|
||||
"unit": unit,
|
||||
"type": scope,
|
||||
"icon": entry.get("icon", ""),
|
||||
"enabled": enabled,
|
||||
"category": entry.get("category", "other"),
|
||||
"status": status,
|
||||
}
|
||||
|
||||
results = await asyncio.gather(*[get_status(s) for s in services])
|
||||
return list(results)
|
||||
|
||||
|
||||
def _get_allowed_units() -> set[str]:
|
||||
"""Return the set of unit names from the current config (whitelist)."""
|
||||
cfg = load_config()
|
||||
return {s.get("unit", "") for s in cfg.get("services", []) if s.get("unit")}
|
||||
|
||||
|
||||
@app.post("/api/services/{unit}/start")
|
||||
async def service_start(unit: str):
|
||||
if unit not in _get_allowed_units():
|
||||
raise HTTPException(status_code=403, detail=f"Unit {unit!r} is not in the allowed service list")
|
||||
cfg = load_config()
|
||||
method = cfg.get("command_method", "systemctl")
|
||||
loop = asyncio.get_event_loop()
|
||||
ok = await loop.run_in_executor(
|
||||
None, lambda: sysctl.run_action("start", unit, "system", method)
|
||||
)
|
||||
if not ok:
|
||||
raise HTTPException(status_code=500, detail=f"Failed to start {unit}")
|
||||
return {"ok": True}
|
||||
|
||||
|
||||
@app.post("/api/services/{unit}/stop")
|
||||
async def service_stop(unit: str):
|
||||
if unit not in _get_allowed_units():
|
||||
raise HTTPException(status_code=403, detail=f"Unit {unit!r} is not in the allowed service list")
|
||||
cfg = load_config()
|
||||
method = cfg.get("command_method", "systemctl")
|
||||
loop = asyncio.get_event_loop()
|
||||
ok = await loop.run_in_executor(
|
||||
None, lambda: sysctl.run_action("stop", unit, "system", method)
|
||||
)
|
||||
if not ok:
|
||||
raise HTTPException(status_code=500, detail=f"Failed to stop {unit}")
|
||||
return {"ok": True}
|
||||
|
||||
|
||||
@app.post("/api/services/{unit}/restart")
|
||||
async def service_restart(unit: str):
|
||||
if unit not in _get_allowed_units():
|
||||
raise HTTPException(status_code=403, detail=f"Unit {unit!r} is not in the allowed service list")
|
||||
cfg = load_config()
|
||||
method = cfg.get("command_method", "systemctl")
|
||||
loop = asyncio.get_event_loop()
|
||||
ok = await loop.run_in_executor(
|
||||
None, lambda: sysctl.run_action("restart", unit, "system", method)
|
||||
)
|
||||
if not ok:
|
||||
raise HTTPException(status_code=500, detail=f"Failed to restart {unit}")
|
||||
return {"ok": True}
|
||||
|
||||
|
||||
@app.get("/api/network")
|
||||
async def api_network():
|
||||
loop = asyncio.get_event_loop()
|
||||
internal, external = await asyncio.gather(
|
||||
loop.run_in_executor(None, _get_internal_ip),
|
||||
loop.run_in_executor(None, _get_external_ip),
|
||||
)
|
||||
return {"internal_ip": internal, "external_ip": external}
|
||||
|
||||
|
||||
@app.get("/api/updates/check")
|
||||
async def api_updates_check():
|
||||
loop = asyncio.get_event_loop()
|
||||
available = await loop.run_in_executor(None, check_for_updates)
|
||||
return {"available": available}
|
||||
|
||||
|
||||
@app.post("/api/reboot")
|
||||
async def api_reboot():
|
||||
try:
|
||||
await asyncio.create_subprocess_exec(*REBOOT_COMMAND)
|
||||
except Exception:
|
||||
raise HTTPException(status_code=500, detail="Failed to initiate reboot")
|
||||
return {"ok": True}
|
||||
|
||||
|
||||
async def api_updates_run():
|
||||
async def event_stream() -> AsyncIterator[str]:
|
||||
yield "data: $ ssh root@localhost 'cd /etc/nixos && nix flake update && nixos-rebuild switch && flatpak update -y'\n\n"
|
||||
yield "data: \n\n"
|
||||
|
||||
process = await asyncio.create_subprocess_exec(
|
||||
*UPDATE_COMMAND,
|
||||
stdout=asyncio.subprocess.PIPE,
|
||||
stderr=asyncio.subprocess.STDOUT,
|
||||
)
|
||||
|
||||
assert process.stdout is not None
|
||||
try:
|
||||
async for raw_line in process.stdout:
|
||||
line = raw_line.decode(errors="replace").rstrip("\n")
|
||||
# SSE requires data: prefix; escape newlines within a line
|
||||
yield f"data: {line}\n\n"
|
||||
except Exception:
|
||||
yield "data: [stream error: output read interrupted]\n\n"
|
||||
|
||||
await process.wait()
|
||||
if process.returncode == 0:
|
||||
yield "event: done\ndata: success\n\n"
|
||||
else:
|
||||
yield f"event: error\ndata: exit code {process.returncode}\n\n"
|
||||
|
||||
return StreamingResponse(
|
||||
event_stream(),
|
||||
media_type="text/event-stream",
|
||||
headers={
|
||||
"Cache-Control": "no-cache",
|
||||
"X-Accel-Buffering": "no",
|
||||
},
|
||||
)
|
||||
Reference in New Issue
Block a user