注意

不保证能使用，修复原理很简单：反复重启容器加网络

工具

  1. import os
  2. import sys
  3. import re
  5. containersNames = [
  6.     "ctfd_ctfd_1", "ctfd_cache_1", "ctfd_db_1", "ctfd_frpc_1", "frp-docker-for-ctfd-whale_frps_1"
  7. ]
  9. containersIDs = {
  10.     "ctfd_ctfd_1": "",
  11.     "ctfd_cache_1": "",
  12.     "ctfd_db_1": "",
  13.     "ctfd_frpc_1": "",
  14.     "frp-docker-for-ctfd-whale_frps_1": ""
  15. }
  17. # 存放的值为running或exited或restarting，代表容器目前状态
  18. containersStatus = {
  19.     "ctfd_ctfd_1": "",
  20.     "ctfd_cache_1": "",
  21.     "ctfd_db_1": "",
  22.     "ctfd_frpc_1": "",
  23.     "frp-docker-for-ctfd-whale_frps_1": ""
  24. }
  26. # 存放的值为info或error，代表容器目前网络正常与否
  27. networkStatus = {
  28.     "ctfd_ctfd_1": "",
  29.     "ctfd_frpc_1": "",
  30.     "frp-docker-for-ctfd-whale_frps_1": ""
  31. }
  33. IPcontainers = {
  34.     "172.1.0.2": "ctfd_ctfd_1",
  35.     "172.1.0.3": "ctfd_frpc_1",
  36.     "172.1.0.4": "frp-docker-for-ctfd-whale_frps_1"
  37. }
  39. containersIP = {
  40.     "ctfd_ctfd_1": "172.1.0.2",
  41.     "ctfd_frpc_1": "172.1.0.3",
  42.     "frp-docker-for-ctfd-whale_frps_1": "172.1.0.4"
  43. }
  45. ctfdPort = "8000"
  47. def addContainerNetwork():
  48.     global networkStatus
  49.     global containersIP
  50.     if getNetworkStatus():
  51.         return
  52.     for name in networkStatus:
  53.         if networkStatus[name] != "info":
  54.             cmd = "sudo docker network connect --ip {} ctfd_frp {}".format(containersIP[name], name)
  55.             os.popen(cmd).read().strip()            
  56.             getNetworkStatus()
  58. def restartContainer():
  59.     global containersNames
  60.     global containersStatus
  61.     if getContainersStatus():
  62.         return
  63.     for name in containersNames:
  64.         if containersStatus[name] != "running":
  65.             cmd1 = "sudo docker stop {}".format(name)
  66.             cmd2 = "sudo docker start {}".format(name)
  67.             os.popen(cmd1).read().strip()
  68.             os.popen(cmd2).read().strip()
  69.             getContainersStatus()
  71. def fixNetwork():
  72.     fixTimes = 0
  73.     while check_is_fixed() or fixTimes < 10:
  74.         print("[Info] 第{}次修复进行中......".format(fixTimes + 1))
  75.         restartContainer()
  76.         addContainerNetwork()
  77.         restartContainer()
  78.         fixTimes += 1
  79.     if check_is_fixed():
  80.         print("[Info] 修复成功！")
  81.         return True
  82.     else:
  83.         print("[Error] 修复失败！")
  84.     return False
  86. def getCTFdPort():
  87.     global ctfdPort
  88.     cmd = "sudo docker port ctfd_ctfd_1"
  89.     result = os.popen(cmd).read().strip()
  90.     res = re.findall("\d+", result)
  91.     ctfdPort = res[-1]
  92.     return ctfdPort
  94. def check_is_fixed():
  95.     global containersStatus
  96.     global containersNames
  97.     print("[Info] 正在检查CTFd状态......")
  98.     isNormal = True
  99.     for name in containersNames:
  100.         if containersStatus[name] != "running":
  101.             isNormal = False
  102.             print("[Warning] 容器" + name + "目前状态异常:" + containersStatus[name])
  103.     cmd = "sudo curl --max-time 3 http://127.0.0.1:{}".format(ctfdPort)
  104.     result = os.popen(cmd).read().strip()
  105.     if "timed out" in result or "Connection reset by peer" in result:
  106.         print("[Warning] 靶场目前仍然无法访问")
  107.         isNormal = False
  108.     if "CTFd" in result:
  109.         print("[Info] 靶场目前可以正常访问")
  110.         sys.exit(0)
  111.     if isNormal:
  112.         print("[Info] CTFd目前状态似乎正常")
  113.     return isNormal
  115. def getContainersStatus():
  116.     # print("[Info] 正在获取容器状态......")
  117.     global containersStatus
  118.     for name in containersNames:
  119.         cmdExited = "sudo docker ps -aq --filter name={} --filter status=exited".format(name)
  120.         cmdRunning = "sudo docker ps -aq --filter name={} --filter status=running".format(name)
  121.         cmdRestarting = "sudo docker ps -aq --filter name={} --filter status=restarting".format(name)
  122.         resExited = os.popen(cmdExited).read().strip()
  123.         resRunning = os.popen(cmdRunning).read().strip()
  124.         resRestarting = os.popen(cmdRestarting).read().strip()
  125.         if len(resExited) != 0:
  126.             containersStatus[name] = "exited"
  127.         if len(resRunning) != 0:
  128.             containersStatus[name] = "running"
  129.         if len(resRestarting) != 0:
  130.             containersStatus[name] = "restarting"
  131.     # print("[Info] 成功获取容器状态")
  132.     for name in containersStatus:
  133.         if containersStatus[name] != "running":
  134.             return False
  135.     return True
  138. def getNetworkStatus():
  139.     # print("[Info] 正在获取容器网络的信息......")
  140.     for i in range(2, 5):
  141.         cmd = "sudo docker network inspect ctfd_frp | grep 172.1.0{}".format(str(i))
  142.         result = os.popen(cmd).read().strip()
  143.         if "172.1.0.{}".format(str(i)) not in result:
  144.             networkStatus[IPcontainers["172.1.0.{}".format(str(i))]] = "error"
  145.         else:
  146.             networkStatus[IPcontainers["172.1.0.{}".format(str(i))]] = "info"
  147.     for name in networkStatus:
  148.         if networkStatus[name] != "info":
  149.             return False
  150.     return True
  151.     # print("[Info] 成功获取容器网络信息")
  153. def getContainersID():
  154.     # print("[Info] 正在获取容器的ID......")
  155.     global containersNames
  156.     for name in containersNames:
  157.         cmd = "sudo docker ps -aq --filter name={}".format(name)
  158.         result = os.popen(cmd).read().strip()
  159.         if result.isspace():
  160.             return False
  161.         containersIDs[name] = result
  162.     # print("[Info] 成功获取容器的ID")
  163.     return True
  166. def check_is_same_mode():
  167.     global containersNames
  168.     for name in containersNames:
  169.         cmd = "sudo docker ps -a | grep {}".format(name)
  170.         result = os.popen(cmd).read()
  171.         if name not in result:
  172.             return False
  173.     return True
  175. def check_is_install_apt():
  176.     result = os.popen("curl").read().strip()
  177.     if "not found" in result:
  178.         return False
  179.     return True
  181. def check_is_root():
  182.     user = os.geteuid()
  183.     if user != 0:
  184.         return False
  185.     return True
  187. if __name__ == "__main__":
  188.     if check_is_root() is not True:
  189.         print("[Error] 请用root用户执行该脚本")
  190.         sys.exit(1)
  191.     if check_is_install_apt() is not True:
  192.         print("[Error] 请手动安装curl工具")
  193.         sys.exit(1)
  194.     if check_is_same_mode() is not True:
  195.         print("[Error] 此脚本不适用于当前所在环境")
  196.         sys.exit(1)
  197.     if getContainersID() is not True:
  198.         print("[Error] 无法正确获取容器ID")
  199.         sys.exit(1)
  200.     getCTFdPort()
  201.     getContainersStatus()
  202.     getNetworkStatus()
  203.     fixNetwork()

Check-CTFd-Docker-Network.py