Development

docker/routlin-dash/app/action_networkinterfaces.py

@@ -0,0 +1,122 @@
+import os
+
+from flask import Blueprint, request, redirect, flash
+from auth import require_level
+from config_utils import load_core, save_core, verify_core_hash, queued_msg, queue_command
+import sanitize
+import validation as validate
+
+bp = Blueprint('action_networkinterfaces', __name__)
+
+_VIEW = '/view/view_network_interfaces'
+
+_EXCLUDE_PREFIXES = ('lo', 'wg', 'docker', 'br-', 'veth',
+                     'tun', 'tap', 'ppp', 'virbr',
+                     'podman', 'vnet', 'macvtap', 'fc-')
+
+
+def _get_system_interfaces():
+    try:
+        return {
+            n for n in os.listdir('/sys/class/net')
+            if not n.startswith(_EXCLUDE_PREFIXES)
+            and os.path.exists(f'/sys/class/net/{n}/device')
+        }
+    except Exception:
+        return set()
+
+
+def _valid_interface(name):
+    return name in _get_system_interfaces()
+
+
+@bp.route('/action/networkinterfaces_cardnetworkinterface_save', methods=['POST'])
+@require_level('administrator')
+def networkinterfaces_cardnetworkinterface_save():
+    wan = sanitize.interface_name(request.form.get('wan_interface', ''))
+    lan = sanitize.interface_name(request.form.get('lan_interface', ''))
+
+    if not wan or not lan:
+        flash('Both WAN and LAN interfaces are required.', 'error')
+        return redirect(_VIEW)
+
+    if wan == lan:
+        flash('WAN and LAN interfaces must be different.', 'error')
+        return redirect(_VIEW)
+
+    if not verify_core_hash(request.form.get('config_hash', '')):
+        flash('Configuration was modified by another session. Please refresh and try again.', 'error')
+        return redirect(_VIEW)
+
+    available = _get_system_interfaces()
+    for iface in (wan, lan):
+        if available and iface not in available:
+            flash(f"Interface '{iface}' does not exist on this system.", 'error')
+            return redirect(_VIEW)
+
+    core = load_core()
+    gen  = core.setdefault('general', {})
+    gen['wan_interface'] = wan
+    gen['lan_interface'] = lan
+    errors = validate.validate_config(core)
+    if errors:
+        for msg in errors:
+            flash(msg, 'error')
+        return redirect(_VIEW)
+    save_core(core)
+
+    flash(queued_msg('core apply'), 'success')
+    return redirect(_VIEW)
+
+
+@bp.route('/action/networkinterfaces_cardinterfaceconfiguration_apply', methods=['POST'])
+@require_level('administrator')
+def networkinterfaces_cardinterfaceconfiguration_apply():
+    if not verify_core_hash(request.form.get('config_hash', '')):
+        flash('Configuration was modified by another session. Please refresh and try again.', 'error')
+        return redirect(_VIEW)
+
+    iface        = sanitize.interface_name(request.form.get('iface', ''))
+    mtu          = request.form.get('mtu', '').strip()
+    mac          = sanitize.mac(request.form.get('mac', ''))
+    original_mtu = request.form.get('original_mtu', '').strip()
+    original_mac = sanitize.mac(request.form.get('original_mac', ''))
+
+    if not iface:
+        flash('No interface specified.', 'error')
+        return redirect(_VIEW)
+
+    if not _valid_interface(iface):
+        flash(f"Interface '{iface}' does not exist on this system.", 'error')
+        return redirect(_VIEW)
+
+    mtu_int = None
+    if mtu:
+        mtu_int = validate.int_range(mtu, 68, 9000)
+        if mtu_int is None:
+            flash('MTU must be an integer between 68 and 9000.', 'error')
+            return redirect(_VIEW)
+
+    mac_raw = request.form.get('mac', '').strip()
+    if mac_raw and not mac:
+        flash('MAC address must be in the format aa:bb:cc:dd:ee:ff.', 'error')
+        return redirect(_VIEW)
+
+    if not mtu_int and not mac:
+        flash('No changes specified.', 'error')
+        return redirect(_VIEW)
+
+    queued = False
+    if mtu_int and str(mtu_int) != original_mtu:
+        queue_command(f'mtu {iface} {mtu_int}')
+        queued = True
+    if mac and mac != original_mac:
+        queue_command(f'mac {iface} {mac}')
+        queued = True
+
+    if not queued:
+        flash('No changes detected.', 'info')
+        return redirect(_VIEW)
+
+    flash(queued_msg(), 'success')
+    return redirect(_VIEW)