install.py

#!/usr/bin/env python3
"""
ANTRATTER — Installer
Installs ANTRATTER as a system service for 24/7 protection:
  - macOS:   LaunchAgent plist  (~/.config/LaunchAgents)
  - Linux:   systemd user unit  (~/.config/systemd/user)
  - Windows: Windows Service   (via sc.exe / NSSM)

Usage:
  python install.py install    — install & enable service
  python install.py uninstall  — remove service
  python install.py status     — check service status
"""

import os
import sys
import platform
import subprocess
import argparse

_OS       = platform.system()
_PYTHON   = sys.executable
_SCRIPT   = os.path.abspath(os.path.join(os.path.dirname(__file__), "antiratter.py"))
_SVC_NAME  = "com.antratter.protection"
_SVC_DISP  = "ANTRATTER Anti-RAT Protection"
_WATCHDOG  = os.path.abspath(os.path.join(os.path.dirname(__file__), "watchdog.py"))


def install():
    if _OS == "Darwin":
        _install_macos()
    elif _OS == "Linux":
        _install_linux()
    elif _OS == "Windows":
        _install_windows()
    else:
        print(f"Unsupported OS: {_OS}")
        sys.exit(1)


def uninstall():
    if _OS == "Darwin":
        _uninstall_macos()
    elif _OS == "Linux":
        _uninstall_linux()
    elif _OS == "Windows":
        _uninstall_windows()


def status():
    if _OS == "Darwin":
        subprocess.run(["launchctl", "list", _SVC_NAME])
    elif _OS == "Linux":
        subprocess.run(["systemctl", "--user", "status", "antratter.service"])
    elif _OS == "Windows":
        subprocess.run(["sc", "query", "AntiRatter"])


# ── macOS ──────────────────────────────────────────────────────────────────────

def _install_macos():
    plist_dir  = os.path.expanduser("~/Library/LaunchAgents")
    plist_path = os.path.join(plist_dir, f"{_SVC_NAME}.plist")
    os.makedirs(plist_dir, exist_ok=True)

    plist_content = f"""<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN"
  "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
    <key>Label</key>
    <string>{_SVC_NAME}</string>
    <key>ProgramArguments</key>
    <array>
        <string>{_PYTHON}</string>
        <string>{_WATCHDOG}</string>
    </array>
    <key>RunAtLoad</key>
    <true/>
    <key>KeepAlive</key>
    <true/>
    <key>StandardOutPath</key>
    <string>{os.path.expanduser('~/.antratter/logs/stdout.log')}</string>
    <key>StandardErrorPath</key>
    <string>{os.path.expanduser('~/.antratter/logs/stderr.log')}</string>
</dict>
</plist>
"""
    with open(plist_path, "w") as f:
        f.write(plist_content)
    subprocess.run(["launchctl", "load", "-w", plist_path], check=True)
    print(f"[OK] ANTRATTER installed as LaunchAgent: {plist_path}")
    print("[OK] Protection starts automatically on login.")


def _uninstall_macos():
    plist_path = os.path.expanduser(
        f"~/Library/LaunchAgents/{_SVC_NAME}.plist"
    )
    if os.path.isfile(plist_path):
        subprocess.run(["launchctl", "unload", "-w", plist_path])
        os.remove(plist_path)
        print("[OK] ANTRATTER removed.")
    else:
        print("[!] ANTRATTER is not installed.")


# ── Linux ──────────────────────────────────────────────────────────────────────

def _install_linux():
    unit_dir  = os.path.expanduser("~/.config/systemd/user")
    unit_path = os.path.join(unit_dir, "antratter.service")
    os.makedirs(unit_dir, exist_ok=True)

    unit_content = f"""[Unit]
Description={_SVC_DISP}
After=network.target

[Service]
Type=simple
ExecStart={_PYTHON} {_WATCHDOG}
Restart=always
RestartSec=3
RestartSec=5
StandardOutput=append:{os.path.expanduser('~/.antratter/logs/stdout.log')}
StandardError=append:{os.path.expanduser('~/.antratter/logs/stderr.log')}

[Install]
WantedBy=default.target
"""
    with open(unit_path, "w") as f:
        f.write(unit_content)

    subprocess.run(["systemctl", "--user", "daemon-reload"], check=True)
    subprocess.run(["systemctl", "--user", "enable", "--now", "antratter.service"], check=True)
    subprocess.run(["loginctl",  "enable-linger", os.environ.get("USER", "")], check=False)
    print(f"[OK] ANTRATTER installed as systemd user service: {unit_path}")
    print("[OK] Protection starts automatically on boot.")


def _uninstall_linux():
    subprocess.run(["systemctl", "--user", "disable", "--now", "antratter.service"], check=False)
    unit_path = os.path.expanduser("~/.config/systemd/user/antratter.service")
    if os.path.isfile(unit_path):
        os.remove(unit_path)
    subprocess.run(["systemctl", "--user", "daemon-reload"], check=False)
    print("[OK] ANTRATTER removed.")


# ── Windows ────────────────────────────────────────────────────────────────────

def _install_windows():
    # Try NSSM first (Non-Sucking Service Manager), fall back to schtasks
    nssm = _find_nssm()
    if nssm:
        _install_windows_nssm(nssm)
    else:
        _install_windows_schtasks()


def _find_nssm() -> str | None:
    for candidate in ["nssm", "nssm.exe", r"C:\nssm\nssm.exe"]:
        try:
            subprocess.run([candidate, "version"], capture_output=True, check=True)
            return candidate
        except (FileNotFoundError, subprocess.CalledProcessError):
            pass
    return None


def _install_windows_nssm(nssm: str):
    subprocess.run([nssm, "install", "AntiRatter", _PYTHON,
                    f'"{_SCRIPT}" protect --auto-quarantine'], check=True)
    subprocess.run([nssm, "set", "AntiRatter", "DisplayName", _SVC_DISP], check=True)
    subprocess.run([nssm, "set", "AntiRatter", "Start", "SERVICE_AUTO_START"], check=True)
    subprocess.run(["sc", "start", "AntiRatter"], check=True)
    print("[OK] ANTRATTER installed as Windows Service via NSSM.")


def _install_windows_schtasks():
    cmd = (
        f'schtasks /create /sc ONLOGON /tn "AntiRatter" /tr '
        f'"{_PYTHON} {_SCRIPT} protect --auto-quarantine" '
        f'/rl HIGHEST /f'
    )
    subprocess.run(cmd, shell=True, check=True)
    print("[OK] ANTRATTER installed as Scheduled Task (runs on logon).")


def _uninstall_windows():
    subprocess.run(["sc", "stop", "AntiRatter"],  check=False)
    subprocess.run(["sc", "delete", "AntiRatter"], check=False)
    subprocess.run(['schtasks', '/delete', '/tn', 'AntiRatter', '/f'], check=False)
    print("[OK] ANTRATTER removed.")


# ── Entry point ────────────────────────────────────────────────────────────────

if __name__ == "__main__":
    parser = argparse.ArgumentParser(description="ANTRATTER Service Installer")
    parser.add_argument("action", choices=["install", "uninstall", "status"])
    args = parser.parse_args()

    {"install": install, "uninstall": uninstall, "status": status}[args.action]()