Add platform-specific OpenLiteSpeed binaries with SHA256 checksum verification

This update adds automatic platform detection and checksum verification for
OpenLiteSpeed custom binaries during installation and upgrade.

Changes:
- Add detectPlatform() method to detect RHEL 8, RHEL 9, and Ubuntu
- Update binary URLs to use platform-specific paths:
  * RHEL 8: /binaries/rhel8/
  * RHEL 9: /binaries/rhel9/
  * Ubuntu: /binaries/ubuntu/
- Add SHA256 checksum verification to downloadCustomBinary()
- Update installCustomOLSBinaries() to use platform-specific checksums

Binary Versions (OpenLiteSpeed v1.8.4.1 - Module v2.0.4):
- RHEL 8 Module: 1cc71f54d8ae5937d0bd2b2dd27678b47f09f4f7afed2583bbd3493ddd05877f
- RHEL 9 Module: 127227db81bcbebf80b225fc747b69cfcd4ad2f01cea486aa02d5c9ba6c18109
- Ubuntu Module: d070952fcfe27fac2f2c95db9ae31252071bade2cdcff19cf3b3f7812fa9413a
- All Binary: a6e07671ee1c9bcc7f2d12de9e95139315cf288709fb23bf431eb417299ad4e9

Files modified:
- install/installCyberPanel.py
- plogical/upgrade.py

Author: usmannasir

install/installCyberPanel.py

@@ -224,8 +224,42 @@ def detectArchitecture(self):
             logging.InstallLog.writeToFile(str(msg) + " [detectArchitecture]")
             return False
 
-    def downloadCustomBinary(self, url, destination):
-        """Download custom binary file"""
+    def detectPlatform(self):
+        """Detect OS platform for binary selection (rhel8, rhel9, ubuntu)"""
+        try:
+            # Check for Ubuntu
+            if os.path.exists('/etc/lsb-release'):
+                with open('/etc/lsb-release', 'r') as f:
+                    content = f.read()
+                    if 'Ubuntu' in content or 'ubuntu' in content:
+                        return 'ubuntu'
+
+            # Check for RHEL-based distributions
+            if os.path.exists('/etc/os-release'):
+                with open('/etc/os-release', 'r') as f:
+                    content = f.read().lower()
+
+                    # Check for version 8.x (RHEL, AlmaLinux, Rocky, CloudLinux, CentOS 8)
+                    if 'version="8.' in content or 'version_id="8.' in content:
+                        if any(distro in content for distro in ['red hat', 'almalinux', 'rocky', 'cloudlinux', 'centos']):
+                            return 'rhel8'
+
+                    # Check for version 9.x
+                    if 'version="9.' in content or 'version_id="9.' in content:
+                        if any(distro in content for distro in ['red hat', 'almalinux', 'rocky', 'cloudlinux', 'centos']):
+                            return 'rhel9'
+
+            # Default to rhel9 if can't detect (safer default for newer systems)
+            InstallCyberPanel.stdOut("WARNING: Could not detect platform, defaulting to rhel9", 1)
+            return 'rhel9'
+
+        except Exception as msg:
+            logging.InstallLog.writeToFile(str(msg) + " [detectPlatform]")
+            InstallCyberPanel.stdOut(f"ERROR detecting platform: {msg}, defaulting to rhel9", 1)
+            return 'rhel9'
+
+    def downloadCustomBinary(self, url, destination, expected_sha256=None):
+        """Download custom binary file with optional checksum verification"""
         try:
             InstallCyberPanel.stdOut(f"Downloading {os.path.basename(destination)}...", 1)
 
@@ -242,7 +276,27 @@ def downloadCustomBinary(self, url, destination):
                         InstallCyberPanel.stdOut(f"Downloaded successfully ({file_size / (1024*1024):.2f} MB)", 1)
                     else:
                         InstallCyberPanel.stdOut(f"Downloaded successfully ({file_size / 1024:.2f} KB)", 1)
-                    return True
+
+                    # Verify checksum if provided
+                    if expected_sha256:
+                        InstallCyberPanel.stdOut("Verifying checksum...", 1)
+                        import hashlib
+                        sha256_hash = hashlib.sha256()
+                        with open(destination, "rb") as f:
+                            for byte_block in iter(lambda: f.read(4096), b""):
+                                sha256_hash.update(byte_block)
+                        actual_sha256 = sha256_hash.hexdigest()
+
+                        if actual_sha256 == expected_sha256:
+                            InstallCyberPanel.stdOut("Checksum verified successfully", 1)
+                            return True
+                        else:
+                            InstallCyberPanel.stdOut(f"ERROR: Checksum mismatch!", 1)
+                            InstallCyberPanel.stdOut(f"Expected: {expected_sha256}", 1)
+                            InstallCyberPanel.stdOut(f"Got:      {actual_sha256}", 1)
+                            return False
+                    else:
+                        return True
                 else:
                     InstallCyberPanel.stdOut(f"ERROR: Downloaded file too small ({file_size} bytes)", 1)
                     return False
@@ -261,19 +315,52 @@ def installCustomOLSBinaries(self):
             InstallCyberPanel.stdOut("Installing Custom OpenLiteSpeed Binaries", 1)
             InstallCyberPanel.stdOut("=" * 50, 1)
 
-            # URLs for custom binaries
-            OLS_BINARY_URL = "https://cyberpanel.net/openlitespeed-phpconfig-x86_64"
-            MODULE_URL = "https://cyberpanel.net/cyberpanel_ols_x86_64.so"
-            OLS_BINARY_PATH = "/usr/local/lsws/bin/openlitespeed"
-            MODULE_PATH = "/usr/local/lsws/modules/cyberpanel_ols.so"
-
             # Check architecture
             if not self.detectArchitecture():
                 InstallCyberPanel.stdOut("WARNING: Custom binaries only available for x86_64", 1)
                 InstallCyberPanel.stdOut("Skipping custom binary installation", 1)
                 InstallCyberPanel.stdOut("Standard OLS will be used", 1)
                 return True  # Not a failure, just skip
 
+            # Detect platform
+            platform = self.detectPlatform()
+            InstallCyberPanel.stdOut(f"Detected platform: {platform}", 1)
+
+            # Platform-specific URLs and checksums (OpenLiteSpeed v1.8.4.1 - v2.0.4)
+            BINARY_CONFIGS = {
+                'rhel8': {
+                    'url': 'https://cyberpanel.net/binaries/rhel8/openlitespeed-phpconfig-x86_64-rhel8',
+                    'sha256': 'a6e07671ee1c9bcc7f2d12de9e95139315cf288709fb23bf431eb417299ad4e9',
+                    'module_url': 'https://cyberpanel.net/binaries/rhel8/cyberpanel_ols_x86_64_rhel8.so',
+                    'module_sha256': '1cc71f54d8ae5937d0bd2b2dd27678b47f09f4f7afed2583bbd3493ddd05877f'
+                },
+                'rhel9': {
+                    'url': 'https://cyberpanel.net/binaries/rhel9/openlitespeed-phpconfig-x86_64-rhel9',
+                    'sha256': 'a6e07671ee1c9bcc7f2d12de9e95139315cf288709fb23bf431eb417299ad4e9',
+                    'module_url': 'https://cyberpanel.net/binaries/rhel9/cyberpanel_ols_x86_64_rhel9.so',
+                    'module_sha256': 'b5841fa6863bbd9dbac4017acfa946bd643268d6ca0cf16a0cd2f717cfb30330'
+                },
+                'ubuntu': {
+                    'url': 'https://cyberpanel.net/binaries/ubuntu/openlitespeed-phpconfig-x86_64-ubuntu',
+                    'sha256': 'c6a6b4dddd63a4e4ac9b1b51f6db5bd79230f3219e39397de173518ced198d36',
+                    'module_url': 'https://cyberpanel.net/binaries/ubuntu/cyberpanel_ols_x86_64_ubuntu.so',
+                    'module_sha256': 'd070952fcfe27fac2f2c95db9ae31252071bade2cdcff19cf3b3f7812fa9413a'
+                }
+            }
+
+            config = BINARY_CONFIGS.get(platform)
+            if not config:
+                InstallCyberPanel.stdOut(f"ERROR: No binaries available for platform {platform}", 1)
+                InstallCyberPanel.stdOut("Skipping custom binary installation", 1)
+                return True  # Not fatal
+
+            OLS_BINARY_URL = config['url']
+            OLS_BINARY_SHA256 = config['sha256']
+            MODULE_URL = config['module_url']
+            MODULE_SHA256 = config['module_sha256']
+            OLS_BINARY_PATH = "/usr/local/lsws/bin/openlitespeed"
+            MODULE_PATH = "/usr/local/lsws/modules/cyberpanel_ols.so"
+
             # Create backup
             from datetime import datetime
             timestamp = datetime.now().strftime("%Y%m%d-%H%M%S")
@@ -293,15 +380,15 @@ def installCustomOLSBinaries(self):
 
             InstallCyberPanel.stdOut("Downloading custom binaries...", 1)
 
-            # Download OpenLiteSpeed binary
-            if not self.downloadCustomBinary(OLS_BINARY_URL, tmp_binary):
-                InstallCyberPanel.stdOut("ERROR: Failed to download OLS binary", 1)
+            # Download OpenLiteSpeed binary with checksum verification
+            if not self.downloadCustomBinary(OLS_BINARY_URL, tmp_binary, OLS_BINARY_SHA256):
+                InstallCyberPanel.stdOut("ERROR: Failed to download or verify OLS binary", 1)
                 InstallCyberPanel.stdOut("Continuing with standard OLS", 1)
                 return True  # Not fatal, continue with standard OLS
 
-            # Download module
-            if not self.downloadCustomBinary(MODULE_URL, tmp_module):
-                InstallCyberPanel.stdOut("ERROR: Failed to download module", 1)
+            # Download module with checksum verification
+            if not self.downloadCustomBinary(MODULE_URL, tmp_module, MODULE_SHA256):
+                InstallCyberPanel.stdOut("ERROR: Failed to download or verify module", 1)
                 InstallCyberPanel.stdOut("Continuing with standard OLS", 1)
                 return True  # Not fatal, continue with standard OLS
 

plogical/upgrade.py

@@ -631,8 +631,42 @@ def detectArchitecture():
             return False
 
     @staticmethod
-    def downloadCustomBinary(url, destination):
-        """Download custom binary file"""
+    def detectPlatform():
+        """Detect OS platform for binary selection (rhel8, rhel9, ubuntu)"""
+        try:
+            # Check for Ubuntu
+            if os.path.exists('/etc/lsb-release'):
+                with open('/etc/lsb-release', 'r') as f:
+                    content = f.read()
+                    if 'Ubuntu' in content or 'ubuntu' in content:
+                        return 'ubuntu'
+
+            # Check for RHEL-based distributions
+            if os.path.exists('/etc/os-release'):
+                with open('/etc/os-release', 'r') as f:
+                    content = f.read().lower()
+
+                    # Check for version 8.x (RHEL, AlmaLinux, Rocky, CloudLinux, CentOS 8)
+                    if 'version="8.' in content or 'version_id="8.' in content:
+                        if any(distro in content for distro in ['red hat', 'almalinux', 'rocky', 'cloudlinux', 'centos']):
+                            return 'rhel8'
+
+                    # Check for version 9.x
+                    if 'version="9.' in content or 'version_id="9.' in content:
+                        if any(distro in content for distro in ['red hat', 'almalinux', 'rocky', 'cloudlinux', 'centos']):
+                            return 'rhel9'
+
+            # Default to rhel9 if can't detect (safer default for newer systems)
+            Upgrade.stdOut("WARNING: Could not detect platform, defaulting to rhel9", 0)
+            return 'rhel9'
+
+        except Exception as msg:
+            Upgrade.stdOut(f"ERROR detecting platform: {msg}, defaulting to rhel9", 0)
+            return 'rhel9'
+
+    @staticmethod
+    def downloadCustomBinary(url, destination, expected_sha256=None):
+        """Download custom binary file with optional checksum verification"""
         try:
             Upgrade.stdOut(f"Downloading {os.path.basename(destination)}...", 0)
 
@@ -649,7 +683,27 @@ def downloadCustomBinary(url, destination):
                         Upgrade.stdOut(f"Downloaded successfully ({file_size / (1024*1024):.2f} MB)", 0)
                     else:
                         Upgrade.stdOut(f"Downloaded successfully ({file_size / 1024:.2f} KB)", 0)
-                    return True
+
+                    # Verify checksum if provided
+                    if expected_sha256:
+                        Upgrade.stdOut("Verifying checksum...", 0)
+                        import hashlib
+                        sha256_hash = hashlib.sha256()
+                        with open(destination, "rb") as f:
+                            for byte_block in iter(lambda: f.read(4096), b""):
+                                sha256_hash.update(byte_block)
+                        actual_sha256 = sha256_hash.hexdigest()
+
+                        if actual_sha256 == expected_sha256:
+                            Upgrade.stdOut("Checksum verified successfully", 0)
+                            return True
+                        else:
+                            Upgrade.stdOut(f"ERROR: Checksum mismatch!", 0)
+                            Upgrade.stdOut(f"Expected: {expected_sha256}", 0)
+                            Upgrade.stdOut(f"Got:      {actual_sha256}", 0)
+                            return False
+                    else:
+                        return True
                 else:
                     Upgrade.stdOut(f"ERROR: Downloaded file too small ({file_size} bytes)", 0)
                     return False
@@ -668,19 +722,52 @@ def installCustomOLSBinaries():
             Upgrade.stdOut("Installing Custom OpenLiteSpeed Binaries", 0)
             Upgrade.stdOut("=" * 50, 0)
 
-            # URLs for custom binaries
-            OLS_BINARY_URL = "https://cyberpanel.net/openlitespeed-phpconfig-x86_64"
-            MODULE_URL = "https://cyberpanel.net/cyberpanel_ols_x86_64.so"
-            OLS_BINARY_PATH = "/usr/local/lsws/bin/openlitespeed"
-            MODULE_PATH = "/usr/local/lsws/modules/cyberpanel_ols.so"
-
             # Check architecture
             if not Upgrade.detectArchitecture():
                 Upgrade.stdOut("WARNING: Custom binaries only available for x86_64", 0)
                 Upgrade.stdOut("Skipping custom binary installation", 0)
                 Upgrade.stdOut("Standard OLS will be used", 0)
                 return True  # Not a failure, just skip
 
+            # Detect platform
+            platform = Upgrade.detectPlatform()
+            Upgrade.stdOut(f"Detected platform: {platform}", 0)
+
+            # Platform-specific URLs and checksums (OpenLiteSpeed v1.8.4.1 - v2.0.4)
+            BINARY_CONFIGS = {
+                'rhel8': {
+                    'url': 'https://cyberpanel.net/binaries/rhel8/openlitespeed-phpconfig-x86_64-rhel8',
+                    'sha256': 'a6e07671ee1c9bcc7f2d12de9e95139315cf288709fb23bf431eb417299ad4e9',
+                    'module_url': 'https://cyberpanel.net/binaries/rhel8/cyberpanel_ols_x86_64_rhel8.so',
+                    'module_sha256': '1cc71f54d8ae5937d0bd2b2dd27678b47f09f4f7afed2583bbd3493ddd05877f'
+                },
+                'rhel9': {
+                    'url': 'https://cyberpanel.net/binaries/rhel9/openlitespeed-phpconfig-x86_64-rhel9',
+                    'sha256': 'a6e07671ee1c9bcc7f2d12de9e95139315cf288709fb23bf431eb417299ad4e9',
+                    'module_url': 'https://cyberpanel.net/binaries/rhel9/cyberpanel_ols_x86_64_rhel9.so',
+                    'module_sha256': 'b5841fa6863bbd9dbac4017acfa946bd643268d6ca0cf16a0cd2f717cfb30330'
+                },
+                'ubuntu': {
+                    'url': 'https://cyberpanel.net/binaries/ubuntu/openlitespeed-phpconfig-x86_64-ubuntu',
+                    'sha256': 'c6a6b4dddd63a4e4ac9b1b51f6db5bd79230f3219e39397de173518ced198d36',
+                    'module_url': 'https://cyberpanel.net/binaries/ubuntu/cyberpanel_ols_x86_64_ubuntu.so',
+                    'module_sha256': 'd070952fcfe27fac2f2c95db9ae31252071bade2cdcff19cf3b3f7812fa9413a'
+                }
+            }
+
+            config = BINARY_CONFIGS.get(platform)
+            if not config:
+                Upgrade.stdOut(f"ERROR: No binaries available for platform {platform}", 0)
+                Upgrade.stdOut("Skipping custom binary installation", 0)
+                return True  # Not fatal
+
+            OLS_BINARY_URL = config['url']
+            OLS_BINARY_SHA256 = config['sha256']
+            MODULE_URL = config['module_url']
+            MODULE_SHA256 = config['module_sha256']
+            OLS_BINARY_PATH = "/usr/local/lsws/bin/openlitespeed"
+            MODULE_PATH = "/usr/local/lsws/modules/cyberpanel_ols.so"
+
             # Create backup
             from datetime import datetime
             timestamp = datetime.now().strftime("%Y%m%d-%H%M%S")
@@ -700,15 +787,15 @@ def installCustomOLSBinaries():
 
             Upgrade.stdOut("Downloading custom binaries...", 0)
 
-            # Download OpenLiteSpeed binary
-            if not Upgrade.downloadCustomBinary(OLS_BINARY_URL, tmp_binary):
-                Upgrade.stdOut("ERROR: Failed to download OLS binary", 0)
+            # Download OpenLiteSpeed binary with checksum verification
+            if not Upgrade.downloadCustomBinary(OLS_BINARY_URL, tmp_binary, OLS_BINARY_SHA256):
+                Upgrade.stdOut("ERROR: Failed to download or verify OLS binary", 0)
                 Upgrade.stdOut("Continuing with standard OLS", 0)
                 return True  # Not fatal, continue with standard OLS
 
-            # Download module
-            if not Upgrade.downloadCustomBinary(MODULE_URL, tmp_module):
-                Upgrade.stdOut("ERROR: Failed to download module", 0)
+            # Download module with checksum verification
+            if not Upgrade.downloadCustomBinary(MODULE_URL, tmp_module, MODULE_SHA256):
+                Upgrade.stdOut("ERROR: Failed to download or verify module", 0)
                 Upgrade.stdOut("Continuing with standard OLS", 0)
                 return True  # Not fatal, continue with standard OLS