#!/opt/imunify360/venv/bin/python3 """This module import peewee_migrate and apply migrations, for Imunify-AV it's entrypoint for service""" import os import sys from logging import getLogger from peewee_migrate import migrator import defence360agent.internals.logger from defence360agent.application import app from defence360agent.application.settings import configure from defence360agent.contracts.config import Core from defence360agent.contracts.config import Model from defence360agent.contracts.config import bool_from_envvar from defence360agent.router import Router from defence360agent.subsys import systemd_notifier from defence360agent.model.instance import db from defence360agent.model import tls_check from defence360agent.utils import is_cloudways logger = getLogger(__name__) GO_SERVICE_NAME = "/usr/bin/imunify-resident" def apply_migrations(migrations_dirs, attached_dbs=tuple()): """Apply migrations: restructure db, config files, etc.""" logger.info("Applying database migrations...") systemd_notifier.notify(systemd_notifier.AgentState.MIGRATING) # prepare database to operate in WAL journal_mode and run migrations tls_check.reset() db.init(Model.PATH) for db_path, schema_name in attached_dbs: db.execute_sql(f"ATTACH '{db_path}' AS {schema_name}") try: with db.atomic("EXCLUSIVE"): router = Router( db, migrations_dirs=migrations_dirs, logger=logger, ) # HACK: Migrator uses global unconfigurable LOGGER, # overrride it, to use our logging settings migrator.LOGGER = logger router.run() finally: # close connection immediately since later this process # will be replaced by execv db.close() def run(*, start_pkg="defence360agent", configure=configure): """Entry point for Imunify-AV service. Apply migrations, and then replace process with {start_pkg}.run module.""" os.umask(Core.FILE_UMASK) configure() defence360agent.internals.logger.reconfigure() systemd_notifier.notify(systemd_notifier.AgentState.READY) apply_migrations(app.MIGRATIONS_DIRS, app.MIGRATIONS_ATTACHED_DBS) logger.info("Starting main process...") systemd_notifier.notify(systemd_notifier.AgentState.STARTING) use_go = bool_from_envvar("I360_USE_GO", default=is_cloudways()) if use_go: logger.info("Run imunify-resident service") os.execv( GO_SERVICE_NAME, [ GO_SERVICE_NAME, ] + sys.argv[1:], ) else: os.execv( sys.executable, [sys.executable, "-m", "{}".format(start_pkg)] + sys.argv[1:], ) if __name__ == "__main__": run()