Client-Server based manager for connecting systems together and running tasks.

We want create system for handling various tasks on systems automatically. As a example we can use firewalls. On each server will be running client sending information to server where we have iptables module which is connecting servers together based in groups defined on server side. When new client is connected it will get set of rules (predefined + dynamic) Dynamic rules are generated by IP's of servers in groups ( you can generate rules based on all servers in groups).

• binary daemon connecting over web socket to server
• accepting commands from server
• authorize with server based on token
• sending basic information about system (os, ips, interfaces, uptime...)

• Care about authentication
• Registration clients
• Collecting information about clients
• Sending commands to clients
• Monitoring connected / disconnected clients

• Modules will be called by core
• Various modules can be push on selected clients
• Iptables module
• Predefined rules (hard-coded set of rules which will be same for all systems)
• Dynamic rules (connecting together servers based on their IP's and groups

To install Skywall server you need:

• Build essential (Ubuntu package build-essential)
• Python 3 (tested on 3.5.2)
• Python 3 header files (Ubuntu package python3-dev)
• python virtualenv (Ubuntu package virtualenv)
• PostgreSQL database server (tested on 9.5.6)
• PostgreSQL header files (Ubuntu package libpq-dev)

First you need to create a system user for the application:

# useradd -r -s /bin/false -d /opt/skywall skywall
# mkdir /opt/skywall
# chown skywall:skywall /opt/skywall
# sudo -H -u skywall bash

Now, as skywall user, you can install the application to /opt/skywall

$ cd /opt/skywall
$ virtualenv --python=/usr/bin/python3 env
$ . env/bin/activate
(env) $ pip install git+https://github.com/SkyPicker/Skywall.git
(env) $ nodeenv -p --node=7.7.4
(env) $ skywall install

To see the current configuration run:

(env) $ skywall get

To see available settings run:

(env) $ skywall set --help

To run skywall server you need to configure your database connection string:

(env) $ skywall set --server.database 'postgres://USER:PASSWORD@HOST/DATABASE'

By default the server listens on 0.0.0.0 on port 9000. To configure custom server host and port run:

(env) $ skywall set --server.host HOST --server.port PORT

If the server is behind a proxy or the public websocket url of the server is different than the server host and port for some reason, you may need to configure public websocket url as well:

(env) $ skywall set --server.publicUrl URL

Webserver and websocket servers for client systems are running on different ports. This way the system admin can better configure who may access the webserver and who the websocket server. By default the webserver listens on 0.0.0.0 on port 8080. To configure custom webserver host and port set:

(env) $ skywall set --webserver.host HOST --sebserver.port PORT

All settings are saved to configuration file config.yaml automatically created in your main directory. You can manually edit it.

Alternatively, you may pass settings to the application using environment variables. All skywall environment variables are prefixed with skywall_ and have all dots . replaced with underscores _ in their names. Such as:

(env) $ skywall_server_host=1047 skywall get

Note that settings passed using environment variables are not saved to config.yaml and settings configured in config.yaml takes precedence over environment variables.

Skywall is extensible with modules. You may use some of the existing Skywall modules or write your own. To install and enable a module run:

(env) $ pip install MODULE
(env) $ skywall set --modules MODULE
(env) $ skywall install

For instance, to enable Skywall-iptables run:

(env) $ pip install git+https://github.com/SkyPicker/Skywall-iptables.git
(env) $ skywall set --modules skywall_iptables
(env) $ skywall install

To disable a module run:

(env) $ skywall set --modules ~MODULE

To run the Skywall server you first need to build the frontend app:

(env) $ skywall build

And then you can run the server:

(env) $ skywall server

To see Skywall frontend open http://HOST:PORT/ in your browser, where HOST and PORT are webserver host and port you configured. http://0.0.0.0:8080/ by default.

To install Skywall client you need:

• Build essential (Ubuntu package build-essential)
• Python 3 (tested on 3.5.2)
• Python 3 header files (Ubuntu package python3-dev)
• python virtualenv (Ubuntu package virtualenv)

First you need to create a system user for the application:

# useradd -r -s /bin/false -d /opt/skywall skywall
# mkdir /opt/skywall
# chown skywall:skywall /opt/skywall
# sudo -H -u skywall bash

Now, as skywall user, you can install the application to /opt/skywall

$ cd /opt/skywall
$ virtualenv --python=/usr/bin/python3 env
$ . env/bin/activate
(env) $ pip install git+https://github.com/SkyPicker/Skywall.git

To see the current configuration run:

(env) $ skywall get

To see available settings run:

(env) $ skywall set --help

You need to configure host and port how your Skywall client can connect to your Skywall server. By default the server listens on port 9000. If you changed it, you have to change it here as well.

(env) $ skywall set --server.host HOST --server.port PORT

To better identify your clients you may configure labels for them. Labels may be set in GUI or using the following commandline setting.

(env) $ skywall set --client.label LABEL

All settings are saved to configuration file config.yaml automatically created in your main directory. You can manually edit it.

Alternatively, you may pass settings to the application using environment variables. All skywall environment variables are prefixed with skywall_ and have all dots . replaced with underscores _ in their names. Such as:

(env) $ skywall_server_host=1047 skywall get

Note that settings passed using environment variables are not saved to config.yaml and settings configured in config.yaml takes precedence over environment variables.

Skywall is extensible with modules. You may use some of the existing Skywall modules or write your own. To install and enable a module run:

(env) $ pip install MODULE
(env) $ skywall set --modules MODULE

For instance, to enable Skywall-iptables run:

(env) $ pip install git+https://github.com/SkyPicker/Skywall-iptables.git
(env) $ skywall set --modules skywall_iptables

To disable a module run:

(env) $ skywall set --modules ~MODULE

(env) $ skywall client

$ git clone https://github.com/SkyPicker/Skywall.git skywall
$ cd skywall
$ virtualenv --python=/usr/bin/python3 env
$ pwd > $(echo env/lib/python*/site-packages)/local.pth
$ cp bin/skywall env/bin/skywall
$ . env/bin/activate
(env) $ pip install -r requirements.txt
(env) $ nodeenv -p --node=7.7.4
(env) $ npm install
(env) $ ln -s .. node_modules/skywall
(env) $ skywall install

If you want to enable some modules, run:

(env) $ pip install MODULE
(env) $ skywall set --modules MODULE
(env) $ skywall install

For instance, to enable Skywall-iptables run:

(env) $ pip install git+https://github.com/SkyPicker/Skywall-iptables.git
(env) $ skywall set --modules skywall_iptables
(env) $ skywall install

$ git clone https://github.com/SkyPicker/Skywall.git skywall
$ cd skywall
$ virtualenv --python=/usr/bin/python3 env
$ pwd > $(echo env/lib/python*/site-packages)/local.pth
$ cp bin/skywall env/bin/skywall
$ . env/bin/activate
(env) $ pip install -r requirements.txt

If you want to enable some modules, run:

(env) $ pip install MODULE
(env) $ skywall set --modules MODULE

For instance, to enable Skywall-iptables run:

(env) $ pip install git+https://github.com/SkyPicker/Skywall-iptables.git
(env) $ skywall set --modules skywall_iptables

Follow general configuration instructions for the server and the client above.

To run your server in the developement mode with frontend hot-reload you need to enable it:

(env) $ skywall set --devel true

And then run your server (without manually building it, it will build itself):

(env) $ skywall server

This option will enable various debug messages and it will automatically reload the frontend app whenever you change some code in it.

Client has no developement mode yet. Just run:

(env) $ skywall client

Before commiting your code it's a good habit to lint it:

(env) $ npm run eslint
(env) $ npm run pylint

To see the frontend API documentation run the server and open http://HOST:PORT/api in your browser, where HOST and PORT are webserver host and port you configured. http://0.0.0.0:8080/api by default.