testing
This commit is contained in:
parent
852af156a3
commit
94e37cf7f4
182
bootstrap.sh
182
bootstrap.sh
@ -1,67 +1,161 @@
|
|||||||
#!/bin/bash
|
#!/bin/bash
|
||||||
|
|
||||||
|
#########################
|
||||||
|
#### USER EDITABLE ######
|
||||||
|
#########################
|
||||||
|
|
||||||
|
# You should hardcode the base URL for your raw repository files. Set the value
|
||||||
|
# of REPO_RAW_URL to your fork, replacing the `authorized_keys` file with your own.
|
||||||
|
# i.e., "https://raw.githubusercontent.com/<GH_USER>/<GH_REPO>/<GH_BRANCH>"
|
||||||
|
REPO_RAW_URL="https://git.krislamo.org/kris/bootstrap/raw/branch/main"
|
||||||
|
AUTH_KEY_FILE="/authorized_keys"
|
||||||
|
|
||||||
|
# Optional debianzfs install script, accessed with -z
|
||||||
|
DEBIANZFS="https://git.krislamo.org/kris/debianzfs/raw/branch/main/debianzfs.sh"
|
||||||
|
DEBIANZFS_BIN="/usr/local/bin/debianzfs"
|
||||||
|
|
||||||
|
##############################
|
||||||
|
######## STOP EDITING ########
|
||||||
|
##############################
|
||||||
|
|
||||||
# Root required
|
# Root required
|
||||||
if [ $EUID -ne 0 ]; then
|
if [ $EUID -ne 0 ]; then
|
||||||
echo "You must run this script as root"
|
echo "You must run this script as root"
|
||||||
exit 1
|
exit 1
|
||||||
fi
|
fi
|
||||||
|
|
||||||
# Get current date, hostname, create a temporary directory,
|
# Clean environment
|
||||||
# and set the location to the remote repository
|
unset BOOT_CYCLE
|
||||||
DATE=$(date '+%Y%m%d')
|
unset CDROM_REMOVE
|
||||||
TMP_DIR=$(mktemp -d)
|
unset ENABLE_SSH
|
||||||
CUR_HOSTNAME=$(hostname)
|
unset GATEWAY_IP
|
||||||
GIT_LOC="https://github.com/krislamo/bootstrap.git"
|
unset NEW_HOSTNAME
|
||||||
|
unset IP
|
||||||
|
unset QRCODE_SSH
|
||||||
|
unset LIVECD
|
||||||
|
unset REPO
|
||||||
|
unset SSH_INSTALL
|
||||||
|
unset UPDATE_SYSTEM
|
||||||
|
unset ZFSINSTALL
|
||||||
|
unset DATE
|
||||||
|
unset CUR_HOSTNAME
|
||||||
|
|
||||||
# Get user input for hostname and IP
|
# Options
|
||||||
echo "Enter name server's new hostname:"
|
while getopts ':bceg:h:i:lqr:suz' OPTION; do
|
||||||
read NEW_HOSTNAME
|
case "$OPTION" in
|
||||||
|
b) BOOT_CYCLE="true";;
|
||||||
|
c) CDROM_REMOVE="true";;
|
||||||
|
e) ENABLE_SSH="true";;
|
||||||
|
g) GATEWAY_IP="$OPTARG";;
|
||||||
|
h) NEW_HOSTNAME="$OPTARG";;
|
||||||
|
i) IP="$OPTARG";;
|
||||||
|
l) LIVECD="true";;
|
||||||
|
q) QRCODE_SSH="true";;
|
||||||
|
r) REPO="$OPTARG";;
|
||||||
|
s) SSH_INSTALL="true";;
|
||||||
|
u) UPDATE_SYSTEM="true";;
|
||||||
|
z) ZFSINSTALL="true";;
|
||||||
|
?)
|
||||||
|
echo "ERROR: Option not recognized"
|
||||||
|
exit 1;;
|
||||||
|
esac
|
||||||
|
done
|
||||||
|
|
||||||
echo "Enter a static IP address (e.g. 192.168.1.2/24):"
|
# Use Live session settings
|
||||||
read STATIC_IP
|
if [ "$LIVECD" == "true" ]; then
|
||||||
|
CDROM_REMOVE="true"
|
||||||
if [ ! -z "$STATIC_IP" ]; then
|
ENABLE_SSH="true"
|
||||||
echo "Enter the gateway IP (default: 192.168.1.1):"
|
QRCODE_SSH="true"
|
||||||
read GATEWAY_IP
|
SSH_INSTALL="true"
|
||||||
|
UPDATE_SYSTEM="true"
|
||||||
[ -z "$GATEWAY_IP" ] && GATEWAY_IP="192.168.1.1"
|
|
||||||
echo "Gateway set to $GATEWAY_IP"
|
|
||||||
fi
|
fi
|
||||||
|
|
||||||
# Remove CD sources
|
# Allow override but use default repo if not set
|
||||||
cp /etc/apt/sources.list /etc/apt/sources.list.$DATE
|
[ -z "$REPO" ] && REPO="$REPO_RAW_URL"
|
||||||
sed -i '/deb cdrom/d' /etc/apt/sources.list
|
|
||||||
|
|
||||||
# Upgrade software
|
# Get current date and hostname
|
||||||
apt-get update -y
|
DATE=$(date '+%Y%m%d')
|
||||||
|
CUR_HOSTNAME=$(hostname)
|
||||||
|
|
||||||
|
# Remove CD sources from sources list
|
||||||
|
if [ "$CDROM_REMOVE" == "true" ]; then
|
||||||
|
echo "NOTICE: Backing up /etc/apt/sources.list => /etc/apt/sources.list.$DATE"
|
||||||
|
sed -i."$DATE" '/deb cdrom/d' /etc/apt/sources.list
|
||||||
|
fi
|
||||||
|
|
||||||
|
# Upgrade system software
|
||||||
|
if [ "$UPDATE_SYSTEM" -eq 1 ]; then
|
||||||
|
echo "NOTICE: Upgrading system"
|
||||||
|
apt-get update
|
||||||
apt-get upgrade -y
|
apt-get upgrade -y
|
||||||
|
fi
|
||||||
|
|
||||||
# Install git, clone this repo, and navigate to it
|
# If IP is set, backup interfaces and configure static IP
|
||||||
apt-get install git -y
|
if [ -n "$IP" ]; then
|
||||||
cd $TMP_DIR
|
if [ -z "$GATEWAY_IP" ]; then
|
||||||
git clone $GIT_LOC
|
echo "ERROR: IP set without a GATEWAY address. See option -g"
|
||||||
cd bootstrap
|
exit 1
|
||||||
|
fi
|
||||||
|
|
||||||
# Install personal SSH keys under root and install the OpenSSH server
|
echo "NOTICE: Backing up network interfaces file and installing a new static one"
|
||||||
mkdir -p /root/.ssh/
|
sed -i."$DATE" "s/dhcp/static/g" /etc/network/interfaces
|
||||||
cp --update authorized_keys /root/.ssh/authorized_keys
|
|
||||||
apt-get install openssh-server -y
|
|
||||||
|
|
||||||
# If STATIC_IP is set, backup interfaces and configure static IP
|
|
||||||
if [ ! -z "$STATIC_IP" ]; then
|
|
||||||
cp /etc/network/interfaces /etc/network/interfaces.$DATE
|
|
||||||
sed -i "s/dhcp/static/g" /etc/network/interfaces
|
|
||||||
if ! grep -q "address" /etc/network/interfaces; then
|
if ! grep -q "address" /etc/network/interfaces; then
|
||||||
echo " address $STATIC_IP" >> /etc/network/interfaces
|
echo " address $IP" >> /etc/network/interfaces
|
||||||
echo " gateway $GATEWAY_IP" >> /etc/network/interfaces
|
echo " gateway $GATEWAY_IP" >> /etc/network/interfaces
|
||||||
|
else
|
||||||
|
echo "ERROR: Address already set"
|
||||||
|
exit 1
|
||||||
fi
|
fi
|
||||||
fi
|
fi
|
||||||
|
|
||||||
# If NEW_HOSTNAME is set, configure new hostname and backup /etc/hosts
|
# If NEW_HOSTNAME is set, configure new hostname and backup /etc/hosts
|
||||||
if [ ! -z "$NEW_HOSTNAME" ]; then
|
if [ -n "$NEW_HOSTNAME" ]; then
|
||||||
hostnamectl set-hostname $NEW_HOSTNAME
|
hostnamectl set-hostname "$NEW_HOSTNAME"
|
||||||
cp /etc/hosts /etc/hosts.$DATE
|
echo "NOTICE: Backing up /etc/hosts and setting new hostname to '$NEW_HOSTNAME'"
|
||||||
sed -i "s/$CUR_HOSTNAME/$NEW_HOSTNAME/g" /etc/hosts
|
sed -i."$DATE" "s/$CUR_HOSTNAME/$NEW_HOSTNAME/g" /etc/hosts
|
||||||
read -p "Press [enter] to restart this machine"
|
fi
|
||||||
systemctl reboot
|
|
||||||
|
# Install personal SSH keys under root and install the OpenSSH server
|
||||||
|
if [ "$SSH_INSTALL" == "true" ]; then
|
||||||
|
# Does authorized_keys file already exist?
|
||||||
|
if [ -f /root/.ssh/authorized_keys ]; then
|
||||||
|
echo "ERROR: /root/.ssh/authorized_keys file already exists"
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
echo "NOTICE: Installing root's authorized_keys and the OpenSSH server"
|
||||||
|
mkdir -p /root/.ssh/
|
||||||
|
chmod 700 /root/.ssh/
|
||||||
|
wget "${REPO}${AUTH_KEY_FILE}" -O /root/.ssh/authorized_keys
|
||||||
|
chmod 644 /root/.ssh/authorized_keys
|
||||||
|
apt-get install openssh-server -y
|
||||||
|
|
||||||
|
if [ "$ENABLE_SSH" == "true" ]; then
|
||||||
|
echo "NOTICE: Enabling the OpenSSH server"
|
||||||
|
systemctl start ssh
|
||||||
|
fi
|
||||||
|
fi
|
||||||
|
|
||||||
|
# Download DebianZFS script
|
||||||
|
if [ "$ZFSINSTALL" == "true" ]; then
|
||||||
|
echo "NOTICE: Installing DebianZFS installation script"
|
||||||
|
wget "$DEBIANZFS" -O "$DEBIANZFS_BIN"
|
||||||
|
chmod u+x "$DEBIANZFS_BIN"
|
||||||
|
fi
|
||||||
|
|
||||||
|
# Restart
|
||||||
|
if [ "$BOOT_CYCLE" == "true" ]; then
|
||||||
|
echo "NOTICE: Restarting the machine in 10 seconds..."
|
||||||
|
sleep 9
|
||||||
|
echo "NOTICE: Restarting!"
|
||||||
|
sleep 1
|
||||||
|
systemctl reboot
|
||||||
|
elif [ "$SSH_INSTALL" == "true" ] && [ "$ENABLE_SSH" == "true" ]; then
|
||||||
|
if [ "$QRCODE_SSH" == "true" ]; then
|
||||||
|
apt-get update
|
||||||
|
apt-get install -y qrencode
|
||||||
|
read -r -p "Enter SMS number (for QR code): " TELNUM
|
||||||
|
qrencode -t ASCII "smsto:$TELNUM:$(ssh-keygen -l -f /etc/ssh/ssh_host_ecdsa_key.pub)"
|
||||||
|
fi
|
||||||
|
ssh-keygen -l -f /etc/ssh/ssh_host_ecdsa_key.pub
|
||||||
fi
|
fi
|
||||||
|
Loading…
Reference in New Issue
Block a user