Author: up9cloud

Dockerfile

@@ -3,14 +3,16 @@ FROM debian:12-slim
 ENV PYTHONUNBUFFERED=1
 
 RUN set -ex; \
-    apt update; \
-    apt install \
-        --no-install-recommends \
-        -y \
-            seafile-cli \
-            oathtool \
-            ca-certificates \
-            gnupg;
+	apt update; \
+	apt install \
+		--no-install-recommends \
+		-y \
+			seafile-cli \
+			oathtool \
+			ca-certificates \
+			gnupg; \
+	apt-get clean; \
+	rm -rf /var/lib/apt/lists/*
 
 COPY --chmod=755 src/entrypoint.py /entrypoint.py
 

README.md

@@ -66,6 +66,24 @@ Possible issues
 
 try `docker exec -it seaf-cli /bin/bash` and make sure the command (e.q. `seaf-cli list-remote ...`) works
 
+## Dev memo
+
+```bash
+# test
+docker build -t seaf-cli . --no-cache
+
+# run
+docker run --rm -it --net=host -v /root/seafile-client:/seafile-client seaf-cli
+
+# debug
+docker run --rm -it --net=host -v /root/seafile-client:/seafile-client --entrypoint=/bin/bash seaf-cli
+# in container
+apt update
+apt install -y nano procps ntpdate
+nano /bin/seaf-cli
+/entrypoint.sh
+```
+
 ## TODO
 
 - hard link log files to stdout: `ln -sf /proc/self/fd/1 /var/log/myapp.log`

src/entrypoint.py

@@ -9,8 +9,7 @@
 import time
 import traceback
 import types
-
-import seafile
+import urllib.error
 
 def load_as_module(path: str):
     module = types.ModuleType("dynamic_module")
@@ -127,7 +126,7 @@ def __run(self, cmd: list, **kwargs):
         logging.debug(f'run `{ subprocess.list2cmdline(cmd) }`')
         return subprocess.run(cmd, **kwargs)
 
-    def __run_tfa(self, totp_secret: str):
+    def __run_tfa(self):
         cmd = ['oathtool', '--base32', '--totp', self.totp_secret]
         mask_cmd = self.__mask_cmd(cmd, ['--totp'])
         logging.debug(f'run `{ subprocess.list2cmdline(mask_cmd) }`')
@@ -178,10 +177,27 @@ def __get_rpc_client(self):
     def __get_cached_token(self):
         if self.__cached_token is None:
             seafcli.seafile_datadir = str(self.seafile_data_dir)
-            tfa = self.__run_tfa(self.totp_secret)
-            self.__cached_token = seafcli.get_token(self.server_url, self.username, self.password, tfa, seafcli.DEFAULT_CONF_DIR)
+            tfa = self.__run_tfa()
+            # https://github.com/haiwen/seahub/blob/master/seahub/api2/serializers.py#L137
+            # https://github.com/haiwen/seahub/blob/master/seahub/two_factor/views/login.py#L212
+            # if otp failed, could check log file: `/shared/logs/seahub.log`
+            self.__cached_token = self.__debug_seafile_error(
+                lambda: seafcli.get_token(self.server_url, self.username, self.password, tfa, seafcli.DEFAULT_CONF_DIR)
+            )
         return self.__cached_token
 
+    def __debug_seafile_error(self, fn):
+        try:
+            return fn()
+        except Exception as e:
+            if isinstance(e, urllib.error.HTTPError):
+                try:
+                    body = e.read().decode('utf-8')
+                except Exception:
+                    body = None
+                logging.error(f'HTTPError: {e.code} {body}')
+            raise
+
     def init(self):
         logging.info(f'Initializing...')
         if not self.seafile_ini.exists():