php-censor/src/Command/InstallCommand.php

572 lines
19 KiB
PHP

<?php
namespace PHPCensor\Command;
use Exception;
use PDO;
use PHPCensor\Config;
use PHPCensor\Exception\InvalidArgumentException;
use PHPCensor\Store\Factory;
use PHPCensor\Model\ProjectGroup;
use PHPCensor\Store\UserStore;
use PHPCensor\Store\ProjectGroupStore;
use Symfony\Component\Console\Command\Command;
use Symfony\Component\Console\Helper\QuestionHelper;
use Symfony\Component\Console\Input\InputInterface;
use Symfony\Component\Console\Input\InputOption;
use Symfony\Component\Console\Output\OutputInterface;
use PHPCensor\Service\UserService;
use Symfony\Component\Console\Question\Question;
use Symfony\Component\Console\Question\ConfirmationQuestion;
use Symfony\Component\Yaml\Dumper;
/**
* Install console command - Installs PHP Censor
*
* @author Dan Cryer <dan@block8.co.uk>
*/
class InstallCommand extends Command
{
/**
* @var string
*/
protected $configPath = APP_DIR . 'config.yml';
protected function configure()
{
$this
->setName('php-censor:install')
->addOption('url', null, InputOption::VALUE_OPTIONAL, 'PHP Censor installation URL')
->addOption('db-type', null, InputOption::VALUE_OPTIONAL, 'Database type')
->addOption('db-host', null, InputOption::VALUE_OPTIONAL, 'Database host')
->addOption('db-port', null, InputOption::VALUE_OPTIONAL, 'Database port')
->addOption('db-name', null, InputOption::VALUE_OPTIONAL, 'Database name')
->addOption('db-user', null, InputOption::VALUE_OPTIONAL, 'Database user')
->addOption('db-password', null, InputOption::VALUE_OPTIONAL, 'Database password')
->addOption('admin-name', null, InputOption::VALUE_OPTIONAL, 'Admin name')
->addOption('admin-password', null, InputOption::VALUE_OPTIONAL, 'Admin password')
->addOption('admin-email', null, InputOption::VALUE_OPTIONAL, 'Admin email')
->addOption('queue-use', null, InputOption::VALUE_OPTIONAL, 'Don\'t ask for queue details', true)
->addOption('queue-host', null, InputOption::VALUE_OPTIONAL, 'Beanstalkd queue server hostname')
->addOption('queue-name', null, InputOption::VALUE_OPTIONAL, 'Beanstalkd queue name')
->addOption('config-from-file', null, InputOption::VALUE_OPTIONAL, 'Take config from file and ignore options', false)
->setDescription('Install PHP Censor');
}
/**
* Installs PHP Censor
*/
protected function execute(InputInterface $input, OutputInterface $output)
{
$configFromFile = (boolean)$input->getOption('config-from-file');
if (!$configFromFile && !$this->verifyNotInstalled($output)) {
return;
}
$output->writeln('');
$output->writeln('<info>***************************************</info>');
$output->writeln('<info>* Welcome to PHP Censor installation *</info>');
$output->writeln('<info>***************************************</info>');
$output->writeln('');
$this->checkRequirements($output);
if (!$configFromFile) {
$output->writeln('');
$output->writeln('Please answer the following questions:');
$output->writeln('--------------------------------------');
$output->writeln('');
$connectionVerified = false;
while (!$connectionVerified) {
$db = $this->getDatabaseInformation($input, $output);
$connectionVerified = $this->verifyDatabaseDetails($db, $output);
}
$output->writeln('');
$conf = [];
$conf['b8']['database'] = $db;
$conf['php-censor'] = $this->getConfigInformation($input, $output);
$this->writeConfigFile($conf);
}
$this->reloadConfig();
$this->setupDatabase($output);
$admin = $this->getAdminInformation($input, $output);
$this->createAdminUser($admin, $output);
$this->createDefaultGroup($output);
}
/**
* @param OutputInterface $output
*
* @return bool
*/
protected function verifyNotInstalled(OutputInterface $output)
{
if (file_exists($this->configPath)) {
$content = file_get_contents($this->configPath);
if (!empty($content)) {
$output->writeln('<error>The PHP Censor config file exists and is not empty. PHP Censor is already installed!</error>');
return false;
}
}
return true;
}
/**
* Check PHP version, required modules and for disabled functions.
*
* @param OutputInterface $output
*
* @throws \Exception
*/
protected function checkRequirements(OutputInterface $output)
{
$output->writeln('Checking requirements...');
$errors = false;
if (!(version_compare(PHP_VERSION, '5.6.0') >= 0)) {
$output->writeln('');
$output->writeln('<error>PHP Censor requires at least PHP 5.6.0! Installed PHP ' . PHP_VERSION . '</error>');
$errors = true;
}
$requiredExtensions = ['PDO', 'xml', 'json', 'curl', 'openssl'];
foreach ($requiredExtensions as $extension) {
if (!extension_loaded($extension)) {
$output->writeln('');
$output->writeln('<error>Extension required: ' . $extension . '</error>');
$errors = true;
}
}
$requiredFunctions = ['exec', 'shell_exec', 'proc_open', 'password_hash'];
foreach ($requiredFunctions as $function) {
if (!function_exists($function)) {
$output->writeln('');
$output->writeln('<error>PHP Censor needs to be able to call the ' . $function . '() function. Is it disabled in php.ini?</error>');
$errors = true;
}
}
if ($errors) {
throw new Exception('PHP Censor cannot be installed, as not all requirements are met. Please review the errors above before continuing.');
}
$output->writeln('');
$output->writeln('<info>OK</info>');
}
/**
* Load information for admin user form CLI options or ask info to user.
*
* @param InputInterface $input
* @param OutputInterface $output
* @return array
*/
protected function getAdminInformation(InputInterface $input, OutputInterface $output)
{
$admin = [];
/** @var $helper QuestionHelper */
$helper = $this->getHelperSet()->get('question');
// Function to validate email address.
$mailValidator = function ($answer) {
if (!filter_var($answer, FILTER_VALIDATE_EMAIL)) {
throw new InvalidArgumentException('Must be a valid email address.');
}
return $answer;
};
if ($adminEmail = $input->getOption('admin-email')) {
$adminEmail = $mailValidator($adminEmail);
} else {
$questionEmail = new Question('Admin email: ');
$adminEmail = $helper->ask($input, $output, $questionEmail);
}
if (!$adminName = $input->getOption('admin-name')) {
$questionName = new Question('Admin name: ');
$adminName = $helper->ask($input, $output, $questionName);
}
if (!$adminPassword = $input->getOption('admin-password')) {
$questionPassword = new Question('Admin password: ');
$questionPassword->setHidden(true);
$questionPassword->setHiddenFallback(false);
$adminPassword = $helper->ask($input, $output, $questionPassword);
}
$admin['email'] = $adminEmail;
$admin['name'] = $adminName;
$admin['password'] = $adminPassword;
return $admin;
}
/**
* Load configuration form CLI options or ask info to user.
*
* @param InputInterface $input
* @param OutputInterface $output
*
* @return array
*/
protected function getConfigInformation(InputInterface $input, OutputInterface $output)
{
/** @var $helper QuestionHelper */
$helper = $this->getHelperSet()->get('question');
$urlValidator = function ($answer) {
if (!filter_var($answer, FILTER_VALIDATE_URL)) {
throw new Exception('Must be a valid URL.');
}
return rtrim($answer, '/');
};
if ($url = $input->getOption('url')) {
$url = $urlValidator($url);
} else {
$question = new Question('Your PHP Censor URL ("http://php-censor.local" for example): ');
$question->setValidator($urlValidator);
$url = $helper->ask($input, $output, $question);
}
$queueConfig = $this->getQueueInformation($input, $output);
return [
'language' => 'en',
'per_page' => 10,
'url' => $url,
'queue' => $queueConfig,
'log' => [
'rotate' => false,
'max_files' => 0,
],
'notifications' => [
'enabled' => false,
],
'email_settings' => [
'from_address' => 'PHP Censor <no-reply@php-censor.local>',
'smtp_address' => null,
'smtp_port' => null,
'smtp_username' => null,
'smtp_password' => null,
'smtp_encryption' => false,
],
'ssh' => [
'strength' => 2048,
'comment' => 'admin@php-censor',
],
'bitbucket' => [
'username' => null,
'app_password' => null,
'comments' => [
'commit' => false,
'pull_request' => false,
],
'status' => [
'commit' => false,
],
],
'github' => [
'token' => null,
'comments' => [
'commit' => false,
'pull_request' => false,
],
'status' => [
'commit' => false,
],
],
'build' => [
'remove_builds' => true,
'writer_buffer_size' => 500,
'allow_public_artifacts' => true,
],
'security' => [
'disable_auth' => false,
'default_user_id' => 1,
'auth_providers' => [
'internal' => [
'type' => 'internal',
],
],
],
'dashboard_widgets' => [
'all_projects' => [
'side' => 'left',
],
'last_builds' => [
'side' => 'right',
],
],
];
}
/**
* If the user wants to use a queue, get the necessary details.
*
* @param InputInterface $input
* @param OutputInterface $output
*
* @return array
*/
protected function getQueueInformation(InputInterface $input, OutputInterface $output)
{
$skipQueueConfig = [
'use_queue' => false,
'host' => null,
'name' => null,
'lifetime' => 600,
];
if (!$input->getOption('queue-use')) {
return $skipQueueConfig;
}
$queueConfig = [
'use_queue' => true,
'host' => null,
'name' => null,
'lifetime' => 600,
];
$queueConfig['host'] = $input->getOption('queue-host');
$queueConfig['name'] = $input->getOption('queue-name');
if (!$queueConfig['host'] && !$queueConfig['name']) {
/** @var $helper QuestionHelper */
$helper = $this->getHelper('question');
$question = new ConfirmationQuestion('Use beanstalkd to manage build queue? ', false);
if (!$helper->ask($input, $output, $question)) {
$output->writeln('<error>Skipping beanstalkd configuration.</error>');
return $skipQueueConfig;
}
$questionQueue = new Question('Enter your beanstalkd hostname [localhost]: ', 'localhost');
$queueConfig['host'] = $helper->ask($input, $output, $questionQueue);
$questionName = new Question('Enter the queue (tube) name to use [php-censor-queue]: ', 'php-censor-queue');
$queueConfig['name'] = $helper->ask($input, $output, $questionName);
}
return $queueConfig;
}
/**
* Load configuration for database form CLI options or ask info to user.
*
* @param InputInterface $input
* @param OutputInterface $output
*
* @return array
*/
protected function getDatabaseInformation(InputInterface $input, OutputInterface $output)
{
$db = [];
/** @var $helper QuestionHelper */
$helper = $this->getHelperSet()->get('question');
if (!$dbType = $input->getOption('db-type')) {
$questionType = new Question('Please enter your database type (mysql or pgsql): ');
$dbType = $helper->ask($input, $output, $questionType);
}
if (!$dbHost = $input->getOption('db-host')) {
$questionHost = new Question('Please enter your database host (default: localhost): ', 'localhost');
$dbHost = $helper->ask($input, $output, $questionHost);
}
if (!$dbPort = $input->getOption('db-port')) {
$questionPort = new Question('Please enter your database port (default: empty): ');
$dbPort = $helper->ask($input, $output, $questionPort);
}
if (!$dbName = $input->getOption('db-name')) {
$questionDb = new Question('Please enter your database name (default: php-censor-db): ', 'php-censor-db');
$dbName = $helper->ask($input, $output, $questionDb);
}
if (!$dbUser = $input->getOption('db-user')) {
$questionUser = new Question('Please enter your DB user (default: php-censor-user): ', 'php-censor-user');
$dbUser = $helper->ask($input, $output, $questionUser);
}
if (!$dbPass = $input->getOption('db-password')) {
$questionPass = new Question('Please enter your database password: ');
$questionPass->setHidden(true);
$questionPass->setHiddenFallback(false);
$dbPass = $helper->ask($input, $output, $questionPass);
}
$dbServers = [
[
'host' => $dbHost,
]
];
$dbPort = (integer)$dbPort;
if ($dbPort) {
$dbServers[0]['port'] = $dbPort;
}
$db['servers']['read'] = $dbServers;
$db['servers']['write'] = $dbServers;
$db['type'] = $dbType;
$db['name'] = $dbName;
$db['username'] = $dbUser;
$db['password'] = $dbPass;
return $db;
}
/**
* Try and connect to DB using the details provided
*
* @param array $db
* @param OutputInterface $output
*
* @return bool
*/
protected function verifyDatabaseDetails(array $db, OutputInterface $output)
{
$dns = $db['type'] . ':host=' . $db['servers']['write'][0]['host'];
if (isset($db['servers']['write'][0]['port'])) {
$dns .= ';port=' . (integer)$db['servers']['write'][0]['port'];
}
$dns .= ';dbname=' . $db['name'];
$pdoOptions = [
\PDO::ATTR_PERSISTENT => false,
\PDO::ATTR_ERRMODE => \PDO::ERRMODE_EXCEPTION,
\PDO::ATTR_TIMEOUT => 2,
];
if ('mysql' === $db['type']) {
$pdoOptions[\PDO::MYSQL_ATTR_INIT_COMMAND] = "SET NAMES 'UTF8'";
}
try {
$pdo = new PDO(
$dns,
$db['username'],
$db['password'],
$pdoOptions
);
unset($pdo);
return true;
} catch (Exception $ex) {
$output->writeln('<error>PHP Censor could not connect to database with the details provided. Please try again.</error>');
$output->writeln('<error>' . $ex->getMessage() . '</error>');
}
return false;
}
/**
* Write the config.yml file.
* @param array $config
*/
protected function writeConfigFile(array $config)
{
$dumper = new Dumper();
$yaml = $dumper->dump($config, 4);
file_put_contents($this->configPath, $yaml);
}
protected function setupDatabase(OutputInterface $output)
{
$output->write('Setting up your database...');
$outputMigration = shell_exec(ROOT_DIR . 'bin/console php-censor-migrations:migrate');
$output->writeln('');
$output->writeln($outputMigration);
$output->writeln('<info>OK</info>');
}
/**
* Create admin user using information loaded before.
*
* @param array $admin
* @param OutputInterface $output
*/
protected function createAdminUser($admin, $output)
{
try {
/** @var UserStore $userStore */
$userStore = Factory::getStore('User');
$adminUser = $userStore->getByEmail($admin['email']);
if ($adminUser) {
throw new \RuntimeException('Admin account already exists!');
}
$userService = new UserService($userStore);
$userService->createUser($admin['name'], $admin['email'], 'internal', ['type' => 'internal'], $admin['password'], true);
$output->writeln('<info>User account created!</info>');
} catch (\Exception $ex) {
$output->writeln('<error>PHP Censor failed to create your admin account!</error>');
$output->writeln('<error>' . $ex->getMessage() . '</error>');
}
}
/**
* @param OutputInterface $output
*/
protected function createDefaultGroup($output)
{
try {
/** @var ProjectGroupStore $projectGroupStore */
$projectGroupStore = Factory::getStore('ProjectGroup');
$projectGroup = $projectGroupStore->getByTitle('Projects');
if ($projectGroup) {
throw new \RuntimeException('Default project group already exists!');
}
$group = new ProjectGroup();
$group->setTitle('Projects');
$group->setCreateDate(new \DateTime());
$group->setUserId(0);
Factory::getStore('ProjectGroup')->save($group);
$output->writeln('<info>Default project group created!</info>');
} catch (\Exception $ex) {
$output->writeln('<error>PHP Censor failed to create default project group!</error>');
$output->writeln('<error>' . $ex->getMessage() . '</error>');
}
}
protected function reloadConfig()
{
$config = Config::getInstance();
if (file_exists($this->configPath)) {
$config->loadYaml($this->configPath);
}
}
}