kris/bootstrap
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Use getopts and generate auto QR code login script

Browse Source
This commit is contained in:
Kris Lamoureux 2022-12-03 03:18:32 -05:00
parent 852af156a3
commit e69a189d57
Signed by: kris
GPG Key ID: 3EDA9C3441EDA925
1 changed files with 160 additions and 50 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

198
bootstrap.sh
View File

@ -1,67 +1,177 @@
#!/bin/bash #!/bin/bash
#########################
#### USER EDITABLE ######
#########################
# You should hardcode the base URL for your raw repository files. Set the value
# of REPO_RAW_URL to your fork, replacing the `authorized_keys` file with your own.
# i.e., "https://raw.githubusercontent.com/<GH_USER>/<GH_REPO>/<GH_BRANCH>"
REPO_RAW_URL="https://git.krislamo.org/kris/bootstrap/raw/branch/main"
AUTH_KEY_FILE="/authorized_keys"
# Optional debianzfs install script, accessed with -z
DEBIANZFS="https://git.krislamo.org/kris/debianzfs/raw/branch/main/debianzfs.sh"
DEBIANZFS_BIN="/usr/local/bin/debianzfs"
##############################
######## STOP EDITING ########
##############################
# Root required # Root required
if [ $EUID -ne 0 ]; then if [ $EUID -ne 0 ]; then
echo "You must run this script as root" echo "You must run this script as root"
exit 1 exit 1
fi fi
# Get current date, hostname, create a temporary directory, # Clean environment
# and set the location to the remote repository unset BOOT_CYCLE
DATE=$(date '+%Y%m%d') unset CDROM_REMOVE
TMP_DIR=$(mktemp -d) unset ENABLE_SSH
CUR_HOSTNAME=$(hostname) unset FIELD_IP_INDEX
GIT_LOC="https://github.com/krislamo/bootstrap.git" unset GATEWAY_IP
unset NEW_HOSTNAME
unset IP
unset QRCODE_SSH
unset LIVECD
unset REPO
unset SSH_INSTALL
unset TELNUM
unset UPDATE_SYSTEM
unset ZFSINSTALL
unset DATE
unset CUR_HOSTNAME
unset SSH_PUB_KEY
unset SSH_FINGERPRINT
unset MACHINE_IP
unset MESSAGE
unset TEXT_MESSAGE
# Get user input for hostname and IP # Options
echo "Enter name server's new hostname:" while getopts ':bcefg:h:i:lqr:st:uz' OPTION; do
read NEW_HOSTNAME case "$OPTION" in
b) BOOT_CYCLE="true";;
c) CDROM_REMOVE="true";;
e) ENABLE_SSH="true";;
f) FIELD_IP_INDEX="$OPTARG";;
g) GATEWAY_IP="$OPTARG";;
h) NEW_HOSTNAME="$OPTARG";;
i) IP="$OPTARG";;
l) LIVECD="true";;
q) QRCODE_SSH="true";;
r) REPO="$OPTARG";;
s) SSH_INSTALL="true";;
t) TELNUM="$OPTARG";;
u) UPDATE_SYSTEM="true";;
z) ZFSINSTALL="true";;
?)
echo "ERROR: Option not recognized"
exit 1;;
esac
done
echo "Enter a static IP address (e.g. 192.168.1.2/24):" # Use Live session settings
read STATIC_IP if [ "$LIVECD" == "true" ]; then
CDROM_REMOVE="true"
if [ ! -z "$STATIC_IP" ]; then ENABLE_SSH="true"
echo "Enter the gateway IP (default: 192.168.1.1):" QRCODE_SSH="true"
read GATEWAY_IP SSH_INSTALL="true"
UPDATE_SYSTEM="true"
[ -z "$GATEWAY_IP" ] && GATEWAY_IP="192.168.1.1"
echo "Gateway set to $GATEWAY_IP"
fi fi
# Remove CD sources # Allow override but use default repo if not set
cp /etc/apt/sources.list /etc/apt/sources.list.$DATE [ -z "$REPO" ] && REPO="$REPO_RAW_URL"
sed -i '/deb cdrom/d' /etc/apt/sources.list
# Upgrade software # Get current date and hostname
apt-get update -y DATE=$(date '+%Y%m%d')
apt-get upgrade -y CUR_HOSTNAME=$(hostname)
# Install git, clone this repo, and navigate to it # Remove CD sources from sources list
apt-get install git -y if [ "$CDROM_REMOVE" == "true" ]; then
cd $TMP_DIR echo "NOTICE: Backing up /etc/apt/sources.list => /etc/apt/sources.list.$DATE"
git clone $GIT_LOC sed -i."$DATE" '/deb cdrom/d' /etc/apt/sources.list
cd bootstrap fi
# Install personal SSH keys under root and install the OpenSSH server # Upgrade system software
mkdir -p /root/.ssh/ if [ "$UPDATE_SYSTEM" == "true" ]; then
cp --update authorized_keys /root/.ssh/authorized_keys echo "NOTICE: Upgrading system"
apt-get install openssh-server -y apt-get update
apt-get upgrade -y
fi
# If STATIC_IP is set, backup interfaces and configure static IP # If IP is set, backup interfaces and configure static IP
if [ ! -z "$STATIC_IP" ]; then if [ -n "$IP" ]; then
cp /etc/network/interfaces /etc/network/interfaces.$DATE if [ -z "$GATEWAY_IP" ]; then
sed -i "s/dhcp/static/g" /etc/network/interfaces echo "ERROR: IP set without a GATEWAY address. See option -g"
exit 1
fi
echo "NOTICE: Backing up network interfaces file and installing a new static one"
sed -i."$DATE" "s/dhcp/static/g" /etc/network/interfaces
if ! grep -q "address" /etc/network/interfaces; then if ! grep -q "address" /etc/network/interfaces; then
echo " address $STATIC_IP" >> /etc/network/interfaces echo " address $IP" >> /etc/network/interfaces
echo " gateway $GATEWAY_IP" >> /etc/network/interfaces echo " gateway $GATEWAY_IP" >> /etc/network/interfaces
else
echo "ERROR: Address already set"
exit 1
fi fi
fi fi
# If NEW_HOSTNAME is set, configure new hostname and backup /etc/hosts # If NEW_HOSTNAME is set, configure new hostname and backup /etc/hosts
if [ ! -z "$NEW_HOSTNAME" ]; then if [ -n "$NEW_HOSTNAME" ]; then
hostnamectl set-hostname $NEW_HOSTNAME hostnamectl set-hostname "$NEW_HOSTNAME"
cp /etc/hosts /etc/hosts.$DATE echo "NOTICE: Backing up /etc/hosts and setting new hostname to '$NEW_HOSTNAME'"
sed -i "s/$CUR_HOSTNAME/$NEW_HOSTNAME/g" /etc/hosts sed -i."$DATE" "s/$CUR_HOSTNAME/$NEW_HOSTNAME/g" /etc/hosts
read -p "Press [enter] to restart this machine" fi
systemctl reboot
# Install personal SSH keys under root and install the OpenSSH server
if [ "$SSH_INSTALL" == "true" ]; then
# Does authorized_keys file already exist?
if [ -f /root/.ssh/authorized_keys ]; then
echo "ERROR: /root/.ssh/authorized_keys file already exists"
exit 1
fi
echo "NOTICE: Installing root's authorized_keys and the OpenSSH server"
mkdir -p /root/.ssh/
chmod 700 /root/.ssh/
wget "${REPO}${AUTH_KEY_FILE}" -O /root/.ssh/authorized_keys
chmod 644 /root/.ssh/authorized_keys
apt-get install openssh-server -y
if [ "$ENABLE_SSH" == "true" ]; then
echo "NOTICE: Enabling the OpenSSH server"
systemctl start ssh
fi
fi
# Download DebianZFS script
if [ "$ZFSINSTALL" == "true" ]; then
echo "NOTICE: Installing DebianZFS installation script"
wget "$DEBIANZFS" -O "$DEBIANZFS_BIN"
chmod u+x "$DEBIANZFS_BIN"
fi
# Restart or show SSH ECDSA public key fingerprint and IP addresses
if [ "$BOOT_CYCLE" == "true" ]; then
echo "NOTICE: Restarting the machine in 10 seconds..."
sleep 9
echo "NOTICE: Restarting!"
sleep 1
systemctl reboot
elif [ "$SSH_INSTALL" == "true" ] && [ "$ENABLE_SSH" == "true" ]; then
SSH_PUB_KEY="$(ssh-keyscan localhost 2>/dev/null | grep "ecdsa" | cut -f2- -d' ')"
SSH_FINGERPRINT="$(ssh-keygen -l -f /etc/ssh/ssh_host_ecdsa_key.pub | awk '{print $2}')"
[ -z "$FIELD_IP_INDEX" ] && FIELD_IP_INDEX=1
MACHINE_IP="$(hostname -I | cut -f"${FIELD_IP_INDEX}" -d' ')"
MESSAGE="SSH ECDSA KEY: $SSH_FINGERPRINT and IPs: $MACHINE_IP"
# Show QR code with a copy and paste secure and verified login script
if [ "$QRCODE_SSH" == "true" ]; then
apt-get update
apt-get install -y qrencode
[ -z "$TELNUM" ] && read -r -p "Enter SMS number (for QR code): " TELNUM
TEXT_MESSAGE="TF=\$(mktemp) && echo \"${MACHINE_IP} ${SSH_PUB_KEY}\" > \"\$TF\" && ssh -o \"UserKnownHostsFile \$TF\" root@${MACHINE_IP} && rm \"\$TF\""
qrencode -t ASCII "smsto:$TELNUM:$TEXT_MESSAGE"
fi
echo "$MESSAGE"
fi fi