|
@@ -1,550 +0,0 @@
|
1
|
|
-#!/bin/bash
|
2
|
|
-#
|
3
|
|
-# .---. . .
|
4
|
|
-# | | |
|
5
|
|
-# |--- .--. .-. .-. .-.| .-. .--.--. |.-. .-. .--. .-.
|
6
|
|
-# | | (.-' (.-' ( | ( )| | | | )( )| | (.-'
|
7
|
|
-# ' ' --' --' -' - -' ' ' -' -' -' ' - --'
|
8
|
|
-#
|
9
|
|
-# Freedom in the Cloud
|
10
|
|
-#
|
11
|
|
-# cjdns functions
|
12
|
|
-#
|
13
|
|
-# License
|
14
|
|
-# =======
|
15
|
|
-#
|
16
|
|
-# Copyright (C) 2014-2016 Bob Mottram <bob@robotics.uk.to>
|
17
|
|
-#
|
18
|
|
-# This program is free software: you can redistribute it and/or modify
|
19
|
|
-# it under the terms of the GNU Affero General Public License as published by
|
20
|
|
-# the Free Software Foundation, either version 3 of the License, or
|
21
|
|
-# (at your option) any later version.
|
22
|
|
-#
|
23
|
|
-# This program is distributed in the hope that it will be useful,
|
24
|
|
-# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
25
|
|
-# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
26
|
|
-# GNU Affero General Public License for more details.
|
27
|
|
-#
|
28
|
|
-# You should have received a copy of the GNU Affero General Public License
|
29
|
|
-# along with this program. If not, see <http://www.gnu.org/licenses/>.
|
30
|
|
-
|
31
|
|
-VARIANTS=''
|
32
|
|
-
|
33
|
|
-ENABLE_CJDNS="no"
|
34
|
|
-CJDNS_PRIVATE_KEY=
|
35
|
|
-CJDNS_PUBLIC_KEY=
|
36
|
|
-CJDNS_IPV6=
|
37
|
|
-CJDNS_PASSWORD=
|
38
|
|
-CJDNS_PORT=
|
39
|
|
-CJDNS_REPO="https://github.com/cjdelisle/cjdns.git"
|
40
|
|
-CJDNS_COMMIT='13189fde111d0500427a7a0ce06a970753527bca'
|
41
|
|
-CJDCMD_REPO="https://github.com/inhies/cjdcmd"
|
42
|
|
-CJDCMD_COMMIT='973cca6ed0eecf9041c3403a40193c0b1291b808'
|
43
|
|
-
|
44
|
|
-cjdns_variables=(MY_USERNAME
|
45
|
|
- CJDNS_PORT
|
46
|
|
- CJDNS_REPO
|
47
|
|
- CJDNS_COMMIT
|
48
|
|
- CJDCMD_REPO
|
49
|
|
- CJDCMD_COMMIT
|
50
|
|
- CJDNS_IPV6
|
51
|
|
- CJDNS_PUBLIC_KEY
|
52
|
|
- CJDNS_PRIVATE_KEY)
|
53
|
|
-
|
54
|
|
-function install_interactive_cjdns {
|
55
|
|
- echo -n ''
|
56
|
|
- APP_INSTALLED=1
|
57
|
|
-}
|
58
|
|
-
|
59
|
|
-function change_password_cjdns {
|
60
|
|
- echo -n ''
|
61
|
|
-}
|
62
|
|
-
|
63
|
|
-function reconfigure_cjdns {
|
64
|
|
- echo -n ''
|
65
|
|
-}
|
66
|
|
-
|
67
|
|
-function upgrade_cjdns {
|
68
|
|
- if ! grep -Fxq "install_cjdns" $COMPLETION_FILE; then
|
69
|
|
- return
|
70
|
|
- fi
|
71
|
|
- function_check set_repo_commit
|
72
|
|
- set_repo_commit /etc/cjdns "cjdns commit" "$CJDNS_COMMIT" $CJDNS_REPO
|
73
|
|
-}
|
74
|
|
-
|
75
|
|
-function configure_firewall_for_cjdns {
|
76
|
|
- if grep -Fxq "configure_firewall_for_cjdns" $COMPLETION_FILE; then
|
77
|
|
- return
|
78
|
|
- fi
|
79
|
|
- if [[ $ENABLE_CJDNS != "yes" ]]; then
|
80
|
|
- return
|
81
|
|
- fi
|
82
|
|
- ip6tables -t nat -A POSTROUTING -o tun0 -j MASQUERADE
|
83
|
|
- ip6tables -A FORWARD -i tun0 -o eth0 -m state --state RELATED,ESTABLISHED -j ACCEPT
|
84
|
|
- ip6tables -A INPUT -p udp --dport $CJDNS_PORT -j ACCEPT
|
85
|
|
- ip6tables -A INPUT -p tcp --dport $CJDNS_PORT -j ACCEPT
|
86
|
|
-
|
87
|
|
- function_check save_firewall_settings
|
88
|
|
- save_firewall_settings
|
89
|
|
- echo 'configure_firewall_for_cjdns' >> $COMPLETION_FILE
|
90
|
|
-}
|
91
|
|
-
|
92
|
|
-function get_cjdns_public_key {
|
93
|
|
- if [ -f /home/$MY_USERNAME/README ]; then
|
94
|
|
- if grep -q "cjdns public key" /home/$MY_USERNAME/README; then
|
95
|
|
- if [ ! $CJDNS_PUBLIC_KEY ]; then
|
96
|
|
- CJDNS_PUBLIC_KEY=$(cat /home/$MY_USERNAME/README | grep "cjdns public key" | awk -F ':' '{print $2}' | sed 's/^ *//')
|
97
|
|
- fi
|
98
|
|
- fi
|
99
|
|
- fi
|
100
|
|
-}
|
101
|
|
-
|
102
|
|
-function get_cjdns_private_key {
|
103
|
|
- if [ -f /home/$MY_USERNAME/README ]; then
|
104
|
|
- if grep -q "cjdns private key" /home/$MY_USERNAME/README; then
|
105
|
|
- if [ ! $CJDNS_PRIVATE_KEY ]; then
|
106
|
|
- CJDNS_PRIVATE_KEY=$(cat /home/$MY_USERNAME/README | grep "cjdns private key" | awk -F ':' '{print $2}' | sed 's/^ *//')
|
107
|
|
- fi
|
108
|
|
- fi
|
109
|
|
- fi
|
110
|
|
-}
|
111
|
|
-
|
112
|
|
-function get_cjdns_ipv6_address {
|
113
|
|
- if [ -f /home/$MY_USERNAME/README ]; then
|
114
|
|
- if grep -q "cjdns IPv6 address" /home/$MY_USERNAME/README; then
|
115
|
|
- if [ ! $CJDNS_IPV6 ]; then
|
116
|
|
- CJDNS_IPV6=$(cat /home/$MY_USERNAME/README | grep "cjdns IPv6 address" | awk -F ':' '{print $2}' | sed 's/^ *//')
|
117
|
|
- fi
|
118
|
|
- fi
|
119
|
|
- fi
|
120
|
|
-}
|
121
|
|
-
|
122
|
|
-function get_cjdns_port {
|
123
|
|
- if [ -f /home/$MY_USERNAME/README ]; then
|
124
|
|
- if grep -q "cjdns port" /home/$MY_USERNAME/README; then
|
125
|
|
- if [ ! $CJDNS_PORT ]; then
|
126
|
|
- CJDNS_PORT=$(cat /home/$MY_USERNAME/README | grep "cjdns port" | awk -F ':' '{print $2}' | sed 's/^ *//')
|
127
|
|
- fi
|
128
|
|
- fi
|
129
|
|
- fi
|
130
|
|
-}
|
131
|
|
-
|
132
|
|
-function get_cjdns_password {
|
133
|
|
- if [ -f /home/$MY_USERNAME/README ]; then
|
134
|
|
- if grep -q "cjdns password" /home/$MY_USERNAME/README; then
|
135
|
|
- if [ ! $CJDNS_PASSWORD ]; then
|
136
|
|
- CJDNS_PASSWORD=$(cat /home/$MY_USERNAME/README | grep "cjdns password" | awk -F ':' '{print $2}' | sed 's/^ *//')
|
137
|
|
- fi
|
138
|
|
- fi
|
139
|
|
- fi
|
140
|
|
-}
|
141
|
|
-
|
142
|
|
-function backup_local_cjdns {
|
143
|
|
- echo -n ''
|
144
|
|
-}
|
145
|
|
-
|
146
|
|
-function restore_local_cjdns {
|
147
|
|
- if [ -d $USB_MOUNT/backup/cjdns ]; then
|
148
|
|
- echo $"Restoring cjdns installation"
|
149
|
|
- temp_restore_dir=/root/tempcjdns
|
150
|
|
- function_check restore_directory_from_usb
|
151
|
|
- restore_directory_from_usb $temp_restore_dir cjdns
|
152
|
|
- rm -rf /etc/cjdns
|
153
|
|
- cp -r $temp_restore_dir/etc/cjdns /etc/
|
154
|
|
- if [ ! "$?" = "0" ]; then
|
155
|
|
- function_check set_user_permissions
|
156
|
|
- set_user_permissions
|
157
|
|
- function_check backup_unmount_drive
|
158
|
|
- backup_unmount_drive
|
159
|
|
- exit 8472
|
160
|
|
- fi
|
161
|
|
- rm -rf $temp_restore_dir
|
162
|
|
- fi
|
163
|
|
-}
|
164
|
|
-
|
165
|
|
-function backup_remote_cjdns {
|
166
|
|
- echo -n ''
|
167
|
|
-}
|
168
|
|
-
|
169
|
|
-function restore_remote_cjdns {
|
170
|
|
- if [ -d $SERVER_DIRECTORY/backup/cjdns ]; then
|
171
|
|
- echo $"Restoring cjdns installation"
|
172
|
|
- temp_restore_dir=/root/tempcjdns
|
173
|
|
- function_check restore_directory_from_friend
|
174
|
|
- restore_directory_from_friend $temp_restore_dir cjdns
|
175
|
|
- rm -rf /etc/cjdns
|
176
|
|
- cp -r $temp_restore_dir/etc/cjdns /etc/
|
177
|
|
- if [ ! "$?" = "0" ]; then
|
178
|
|
- exit 7438
|
179
|
|
- fi
|
180
|
|
- rm -rf $temp_restore_dir
|
181
|
|
- fi
|
182
|
|
-}
|
183
|
|
-
|
184
|
|
-function remove_cjdns {
|
185
|
|
- service cjdns stop
|
186
|
|
- ip6tables -D nat -D POSTROUTING -o tun0 -j MASQUERADE
|
187
|
|
- ip6tables -D FORWARD -i tun0 -o eth0 -m state --state RELATED,ESTABLISHED -j ACCEPT
|
188
|
|
- ip6tables -D INPUT -p udp --dport $CJDNS_PORT -j ACCEPT
|
189
|
|
- ip6tables -D INPUT -p tcp --dport $CJDNS_PORT -j ACCEPT
|
190
|
|
- function_check save_firewall_settings
|
191
|
|
- save_firewall_settings
|
192
|
|
-
|
193
|
|
- rm -rf /etc/cjdns
|
194
|
|
- sed -i '/install_cjdns/d' $COMPLETION_FILE
|
195
|
|
- sed -i '/cjdns /d' $COMPLETION_FILE
|
196
|
|
- sed -i '/configure_firewall_for_cjdns/d' $COMPLETION_FILE
|
197
|
|
-}
|
198
|
|
-
|
199
|
|
-function install_cjdns_main {
|
200
|
|
- if [[ $ENABLE_CJDNS != "yes" ]]; then
|
201
|
|
- return
|
202
|
|
- fi
|
203
|
|
-
|
204
|
|
- if grep -Fxq "install_cjdns_main" $COMPLETION_FILE; then
|
205
|
|
- return
|
206
|
|
- fi
|
207
|
|
-
|
208
|
|
- apt-get -y install nodejs git build-essential nmap
|
209
|
|
-
|
210
|
|
- # if a README exists then obtain the cjdns parameters
|
211
|
|
- function_check get_cjdns_ipv6_address
|
212
|
|
- get_cjdns_ipv6_address
|
213
|
|
-
|
214
|
|
- function_check get_cjdns_public_key
|
215
|
|
- get_cjdns_public_key
|
216
|
|
-
|
217
|
|
- function_check get_cjdns_private_key
|
218
|
|
- get_cjdns_private_key
|
219
|
|
-
|
220
|
|
- function_check get_cjdns_port
|
221
|
|
- get_cjdns_port
|
222
|
|
-
|
223
|
|
- function_check get_cjdns_password
|
224
|
|
- get_cjdns_password
|
225
|
|
-
|
226
|
|
- # special compile settings for running ./do on the Beaglebone Black
|
227
|
|
- if [[ $INSTALLING_ON_BBB == "yes" ]]; then
|
228
|
|
- CFLAGS="-O2 -march=armv7-a -mtune=cortex-a8 -mfpu=neon -ftree-vectorize -ffast-math -mfloat-abi=hard -marm -Wno-error=maybe-uninitialized"
|
229
|
|
- export LDFLAGS="$CFLAGS"
|
230
|
|
- fi
|
231
|
|
-
|
232
|
|
- if [ ! -d /etc/cjdns ]; then
|
233
|
|
- function_check git_pull
|
234
|
|
- git_clone $CJDNS_REPO /etc/cjdns
|
235
|
|
- cd /etc/cjdns
|
236
|
|
-
|
237
|
|
- git checkout $CJDNS_COMMIT -b $CJDNS_COMMIT
|
238
|
|
- if ! grep -q "cjdns commit" $COMPLETION_FILE; then
|
239
|
|
- echo "cjdns commit:$CJDNS_COMMIT" >> $COMPLETION_FILE
|
240
|
|
- else
|
241
|
|
- sed -i "s/cjdns commit.*/cjdns commit:$CJDNS_COMMIT/g" $COMPLETION_FILE
|
242
|
|
- fi
|
243
|
|
-
|
244
|
|
- ./do
|
245
|
|
- if [ ! "$?" = "0" ]; then
|
246
|
|
- exit 7439
|
247
|
|
- fi
|
248
|
|
- # create a configuration
|
249
|
|
- if [ ! -f /etc/cjdns/cjdroute.conf ]; then
|
250
|
|
- ./cjdroute --genconf > /etc/cjdns/cjdroute.conf
|
251
|
|
- if [ ! "$?" = "0" ]; then
|
252
|
|
- exit 5922
|
253
|
|
- fi
|
254
|
|
- fi
|
255
|
|
- # create a user to run as
|
256
|
|
- useradd cjdns
|
257
|
|
- else
|
258
|
|
- cd /etc/cjdns
|
259
|
|
- function_check git_pull
|
260
|
|
- git_pull $CJDNS_REPO
|
261
|
|
- ./do
|
262
|
|
- if [ ! "$?" = "0" ]; then
|
263
|
|
- exit 9926
|
264
|
|
- fi
|
265
|
|
- fi
|
266
|
|
-
|
267
|
|
- # set permissions
|
268
|
|
- chown -R cjdns:cjdns /etc/cjdns
|
269
|
|
- chmod 600 /etc/cjdns/cjdroute.conf
|
270
|
|
-
|
271
|
|
- /sbin/ip tuntap add mode tun user cjdns dev cjdroute0
|
272
|
|
-
|
273
|
|
- # insert values into the configuration file
|
274
|
|
- if [ $CJDNS_PRIVATE_KEY ]; then
|
275
|
|
- sed -i "s/\"privateKey\":.*/\"privateKey\": \"$CJDNS_PRIVATE_KEY\",/g" /etc/cjdns/cjdroute.conf
|
276
|
|
- else
|
277
|
|
- CJDNS_PRIVATE_KEY=$(cat /etc/cjdns/cjdroute.conf | grep '"privateKey"' | awk -F '"' '{print $4}' | sed -n 1p)
|
278
|
|
- fi
|
279
|
|
- if [ $CJDNS_PUBLIC_KEY ]; then
|
280
|
|
- sed -i "s/\"publicKey\":.*/\"publicKey\": \"$CJDNS_PUBLIC_KEY\",/g" /etc/cjdns/cjdroute.conf
|
281
|
|
- else
|
282
|
|
- CJDNS_PUBLIC_KEY=$(cat /etc/cjdns/cjdroute.conf | grep '"publicKey"' | awk -F '"' '{print $4}' | sed -n 1p)
|
283
|
|
- fi
|
284
|
|
- if [ $CJDNS_IPV6 ]; then
|
285
|
|
- sed -i "s/\"ipv6\":.*/\"ipv6\": \"$CJDNS_IPV6\",/g" /etc/cjdns/cjdroute.conf
|
286
|
|
- else
|
287
|
|
- CJDNS_IPV6=$(cat /etc/cjdns/cjdroute.conf | grep '"ipv6"' | awk -F '"' '{print $4}' | sed -n 1p)
|
288
|
|
- fi
|
289
|
|
- if [ $CJDNS_PASSWORD ]; then
|
290
|
|
- sed -i "0,/{\"password\":.*/s//{\"password\": \"$CJDNS_PASSWORD\"}/g" /etc/cjdns/cjdroute.conf
|
291
|
|
- else
|
292
|
|
- CJDNS_PASSWORD=$(cat /etc/cjdns/cjdroute.conf | grep '"password"' | awk -F '"' '{print $4}' | sed -n 1p)
|
293
|
|
- fi
|
294
|
|
- if [ $CJDNS_PORT ]; then
|
295
|
|
- sed -i "s/\"bind\": \"0.0.0.0:.*/\"bind\": \"0.0.0.0:$CJDNS_PORT\",/g" /etc/cjdns/cjdroute.conf
|
296
|
|
- else
|
297
|
|
- CJDNS_PORT=$(cat /etc/cjdns/cjdroute.conf | grep '"bind": "0.0.0.0:' | awk -F '"' '{print $4}' | awk -F ':' '{print $2}' | sed -n 1p)
|
298
|
|
- fi
|
299
|
|
-
|
300
|
|
- function_check enable_ipv6
|
301
|
|
- enable_ipv6
|
302
|
|
-
|
303
|
|
- echo '#!/bin/sh -e' > /etc/init.d/cjdns
|
304
|
|
- echo '### BEGIN INIT INFO' >> /etc/init.d/cjdns
|
305
|
|
- echo '# hyperboria.sh - An init script (/etc/init.d/) for cjdns' >> /etc/init.d/cjdns
|
306
|
|
- echo '# Provides: cjdroute' >> /etc/init.d/cjdns
|
307
|
|
- echo '# Required-Start: $remote_fs $network' >> /etc/init.d/cjdns
|
308
|
|
- echo '# Required-Stop: $remote_fs $network' >> /etc/init.d/cjdns
|
309
|
|
- echo '# Default-Start: 2 3 4 5' >> /etc/init.d/cjdns
|
310
|
|
- echo '# Default-Stop: 0 1 6' >> /etc/init.d/cjdns
|
311
|
|
- echo '# Short-Description: Cjdns router' >> /etc/init.d/cjdns
|
312
|
|
- echo '# Description: A routing engine designed for security, scalability, speed and ease of use.' >> /etc/init.d/cjdns
|
313
|
|
- echo '# cjdns git repo: https://github.com/cjdelisle/cjdns/' >> /etc/init.d/cjdns
|
314
|
|
- echo '### END INIT INFO' >> /etc/init.d/cjdns
|
315
|
|
- echo '' >> /etc/init.d/cjdns
|
316
|
|
- echo 'PROG="cjdroute"' >> /etc/init.d/cjdns
|
317
|
|
- echo 'GIT_PATH="/etc/cjdns"' >> /etc/init.d/cjdns
|
318
|
|
- echo 'PROG_PATH="/etc/cjdns"' >> /etc/init.d/cjdns
|
319
|
|
- echo 'CJDNS_CONFIG="cjdroute.conf"' >> /etc/init.d/cjdns
|
320
|
|
- echo 'CJDNS_USER="cjdns"' >> /etc/init.d/cjdns
|
321
|
|
- echo "CJDNS_IP='$CJDNS_IPV6'" >> /etc/init.d/cjdns
|
322
|
|
- echo '' >> /etc/init.d/cjdns
|
323
|
|
- echo 'start() {' >> /etc/init.d/cjdns
|
324
|
|
- echo ' # Start it up with the user cjdns' >> /etc/init.d/cjdns
|
325
|
|
- echo ' if [ $(pgrep cjdroute | wc -l) != 0 ];' >> /etc/init.d/cjdns
|
326
|
|
- echo ' then' >> /etc/init.d/cjdns
|
327
|
|
- echo ' echo "cjdroute is already running. Doing nothing..."' >> /etc/init.d/cjdns
|
328
|
|
- echo ' else' >> /etc/init.d/cjdns
|
329
|
|
- echo ' echo " * Starting cjdroute"' >> /etc/init.d/cjdns
|
330
|
|
- echo ' su -c "$PROG_PATH/$PROG < $PROG_PATH/$CJDNS_CONFIG" - $CJDNS_USER' >> /etc/init.d/cjdns
|
331
|
|
- echo ' /sbin/ip addr add $CJDNS_IP/8 dev tun0' >> /etc/init.d/cjdns
|
332
|
|
- echo ' /sbin/ip link set mtu 1312 dev tun0' >> /etc/init.d/cjdns
|
333
|
|
- echo ' /sbin/ip link set tun0 up' >> /etc/init.d/cjdns
|
334
|
|
- echo ' /sbin/ip tuntap add mode tun user cjdns dev tun0' >> /etc/init.d/cjdns
|
335
|
|
- echo ' fi' >> /etc/init.d/cjdns
|
336
|
|
- echo '}' >> /etc/init.d/cjdns
|
337
|
|
- echo '' >> /etc/init.d/cjdns
|
338
|
|
- echo 'stop() {' >> /etc/init.d/cjdns
|
339
|
|
- echo '' >> /etc/init.d/cjdns
|
340
|
|
- echo ' if [ $(pgrep cjdroute | wc -l) != 2 ];' >> /etc/init.d/cjdns
|
341
|
|
- echo ' then' >> /etc/init.d/cjdns
|
342
|
|
- echo ' echo "cjdns isnt running."' >> /etc/init.d/cjdns
|
343
|
|
- echo ' else' >> /etc/init.d/cjdns
|
344
|
|
- echo ' echo "Killing cjdroute"' >> /etc/init.d/cjdns
|
345
|
|
- echo ' killall cjdroute' >> /etc/init.d/cjdns
|
346
|
|
- echo ' fi' >> /etc/init.d/cjdns
|
347
|
|
- echo '}' >> /etc/init.d/cjdns
|
348
|
|
- echo '' >> /etc/init.d/cjdns
|
349
|
|
- echo 'status() {' >> /etc/init.d/cjdns
|
350
|
|
- echo ' if [ $(pgrep cjdroute | wc -l) != 0 ];' >> /etc/init.d/cjdns
|
351
|
|
- echo ' then' >> /etc/init.d/cjdns
|
352
|
|
- echo ' echo "Cjdns is running"' >> /etc/init.d/cjdns
|
353
|
|
- echo ' else' >> /etc/init.d/cjdns
|
354
|
|
- echo ' echo "Cjdns is not running"' >> /etc/init.d/cjdns
|
355
|
|
- echo ' fi' >> /etc/init.d/cjdns
|
356
|
|
- echo '}' >> /etc/init.d/cjdns
|
357
|
|
- echo '' >> /etc/init.d/cjdns
|
358
|
|
- echo ' update() {' >> /etc/init.d/cjdns
|
359
|
|
- echo ' cd $GIT_PATH' >> /etc/init.d/cjdns
|
360
|
|
- echo ' echo "Updating..."' >> /etc/init.d/cjdns
|
361
|
|
- echo ' git pull' >> /etc/init.d/cjdns
|
362
|
|
- echo ' ./do' >> /etc/init.d/cjdns
|
363
|
|
- echo '}' >> /etc/init.d/cjdns
|
364
|
|
- echo '' >> /etc/init.d/cjdns
|
365
|
|
- echo '## Check to see if we are running as root first.' >> /etc/init.d/cjdns
|
366
|
|
- echo 'if [ "$(id -u)" != "0" ]; then' >> /etc/init.d/cjdns
|
367
|
|
- echo ' echo "This script must be run as root" 1>&2' >> /etc/init.d/cjdns
|
368
|
|
- echo ' exit 1' >> /etc/init.d/cjdns
|
369
|
|
- echo 'fi' >> /etc/init.d/cjdns
|
370
|
|
- echo '' >> /etc/init.d/cjdns
|
371
|
|
- echo 'case $1 in' >> /etc/init.d/cjdns
|
372
|
|
- echo ' start)' >> /etc/init.d/cjdns
|
373
|
|
- echo ' start' >> /etc/init.d/cjdns
|
374
|
|
- echo ' exit 0' >> /etc/init.d/cjdns
|
375
|
|
- echo ' ;;' >> /etc/init.d/cjdns
|
376
|
|
- echo ' stop)' >> /etc/init.d/cjdns
|
377
|
|
- echo ' stop' >> /etc/init.d/cjdns
|
378
|
|
- echo ' exit 0' >> /etc/init.d/cjdns
|
379
|
|
- echo ' ;;' >> /etc/init.d/cjdns
|
380
|
|
- echo ' reload|restart|force-reload)' >> /etc/init.d/cjdns
|
381
|
|
- echo ' stop' >> /etc/init.d/cjdns
|
382
|
|
- echo ' sleep 1' >> /etc/init.d/cjdns
|
383
|
|
- echo ' start' >> /etc/init.d/cjdns
|
384
|
|
- echo ' exit 0' >> /etc/init.d/cjdns
|
385
|
|
- echo ' ;;' >> /etc/init.d/cjdns
|
386
|
|
- echo ' status)' >> /etc/init.d/cjdns
|
387
|
|
- echo ' status' >> /etc/init.d/cjdns
|
388
|
|
- echo ' exit 0' >> /etc/init.d/cjdns
|
389
|
|
- echo ' ;;' >> /etc/init.d/cjdns
|
390
|
|
- echo ' update|upgrade)' >> /etc/init.d/cjdns
|
391
|
|
- echo ' update' >> /etc/init.d/cjdns
|
392
|
|
- echo ' stop' >> /etc/init.d/cjdns
|
393
|
|
- echo ' sleep 2' >> /etc/init.d/cjdns
|
394
|
|
- echo ' start' >> /etc/init.d/cjdns
|
395
|
|
- echo ' exit 0' >> /etc/init.d/cjdns
|
396
|
|
- echo ' ;;' >> /etc/init.d/cjdns
|
397
|
|
- echo ' **)' >> /etc/init.d/cjdns
|
398
|
|
- echo ' echo "Usage: $0 (start|stop|restart|status|update)" 1>&2' >> /etc/init.d/cjdns
|
399
|
|
- echo ' exit 1' >> /etc/init.d/cjdns
|
400
|
|
- echo ' ;;' >> /etc/init.d/cjdns
|
401
|
|
- echo 'esac' >> /etc/init.d/cjdns
|
402
|
|
- chmod +x /etc/init.d/cjdns
|
403
|
|
- update-rc.d cjdns defaults
|
404
|
|
- service cjdns start
|
405
|
|
- if [ ! "$?" = "0" ]; then
|
406
|
|
- systemctl status cjdns.service
|
407
|
|
- exit 8260
|
408
|
|
- fi
|
409
|
|
-
|
410
|
|
- apt-get -y install radvd
|
411
|
|
- echo 'interface eth0' > /etc/radvd.conf
|
412
|
|
- echo '{' >> /etc/radvd.conf
|
413
|
|
- echo ' AdvSendAdvert on;' >> /etc/radvd.conf
|
414
|
|
- echo ' prefix fdfc::1/64' >> /etc/radvd.conf
|
415
|
|
- echo ' {' >> /etc/radvd.conf
|
416
|
|
- echo ' AdvRouterAddr on;' >> /etc/radvd.conf
|
417
|
|
- echo ' };' >> /etc/radvd.conf
|
418
|
|
- echo '};' >> /etc/radvd.conf
|
419
|
|
- systemctl restart radvd
|
420
|
|
- if [ ! "$?" = "0" ]; then
|
421
|
|
- systemctl status radvd.service
|
422
|
|
- exit 4395
|
423
|
|
- fi
|
424
|
|
-
|
425
|
|
- if ! grep -q "# Mesh Networking (cjdns)" /etc/network/interfaces; then
|
426
|
|
- echo '' >> /etc/network/interfaces
|
427
|
|
- echo '# Mesh Networking (cjdns)' >> /etc/network/interfaces
|
428
|
|
- echo 'iface eth0 inet6 static' >> /etc/network/interfaces
|
429
|
|
- echo ' pre-up modprobe ipv6' >> /etc/network/interfaces
|
430
|
|
- echo ' address fdfc:0000:0000:0000:0000:0000:0000:0001' >> /etc/network/interfaces
|
431
|
|
- echo ' netmask 64' >> /etc/network/interfaces
|
432
|
|
- service network-manager restart
|
433
|
|
- if [ ! "$?" = "0" ]; then
|
434
|
|
- systemctl status networking.service
|
435
|
|
- exit 6949
|
436
|
|
- fi
|
437
|
|
- fi
|
438
|
|
-
|
439
|
|
- if ! grep -q $"Mesh Networking (cjdns)" /home/$MY_USERNAME/README; then
|
440
|
|
- CURRENT_IP_ADDRESS=$(ip addr show | grep "inet " | sed -n 2p | awk -F ' ' '{print $2}' | awk -F '/' '{print $1}')
|
441
|
|
-
|
442
|
|
- echo '' >> /home/$MY_USERNAME/README
|
443
|
|
- echo '' >> /home/$MY_USERNAME/README
|
444
|
|
- echo $'Mesh Networking (cjdns)' >> /home/$MY_USERNAME/README
|
445
|
|
- echo '=======================' >> /home/$MY_USERNAME/README
|
446
|
|
- echo $"cjdns IPv6 address: $CJDNS_IPV6" >> /home/$MY_USERNAME/README
|
447
|
|
- echo $"cjdns public key: $CJDNS_PUBLIC_KEY" >> /home/$MY_USERNAME/README
|
448
|
|
- echo $"cjdns private key: $CJDNS_PRIVATE_KEY" >> /home/$MY_USERNAME/README
|
449
|
|
- echo $"cjdns password: $CJDNS_PASSWORD" >> /home/$MY_USERNAME/README
|
450
|
|
- echo $"cjdns port: $CJDNS_PORT" >> /home/$MY_USERNAME/README
|
451
|
|
- echo '' >> /home/$MY_USERNAME/README
|
452
|
|
- echo $"Forward port $CJDNS_PORT from your internet router to the ${PROJECT_NAME}" >> /home/$MY_USERNAME/README
|
453
|
|
- echo '' >> /home/$MY_USERNAME/README
|
454
|
|
- echo $'Below is an example of your connection credentials' >> /home/$MY_USERNAME/README
|
455
|
|
- echo $'that you can give to other people so they can connect' >> /home/$MY_USERNAME/README
|
456
|
|
- echo $'to you using your default password' >> /home/$MY_USERNAME/README
|
457
|
|
- echo $'Adding a unique password for each user is advisable' >> /home/$MY_USERNAME/README
|
458
|
|
- echo $'so that leaks can be isolated.' >> /home/$MY_USERNAME/README
|
459
|
|
- echo '' >> /home/$MY_USERNAME/README
|
460
|
|
- echo "\"$CURRENT_IP_ADDRESS:$CJDNS_PORT\":{\"password\":\"$CJDNS_PASSWORD\",\"publicKey\":\"$CJDNS_PUBLIC_KEY\"}" >> /home/$MY_USERNAME/README
|
461
|
|
- echo '' >> /home/$MY_USERNAME/README
|
462
|
|
- echo $'More is not better. 3-5 cjdns peers is good. 30 peers is bad.' >> /home/$MY_USERNAME/README
|
463
|
|
- echo '' >> /home/$MY_USERNAME/README
|
464
|
|
- echo $'NEVER USE A PUBLIC PEER. These degrade the network and make it centralized.' >> /home/$MY_USERNAME/README
|
465
|
|
- echo $'Each node can handle many peers, but no node can handle the entire internet.' >> /home/$MY_USERNAME/README
|
466
|
|
- echo $'As this network grows any public peer will simply become saturated and' >> /home/$MY_USERNAME/README
|
467
|
|
- echo $'useless causing issues for the entire network.' >> /home/$MY_USERNAME/README
|
468
|
|
- echo $'Please report anyone offering you a public peer as they are promoting shared' >> /home/$MY_USERNAME/README
|
469
|
|
- echo $'passwords which could lead to people pretending to be you. A peering pass' >> /home/$MY_USERNAME/README
|
470
|
|
- echo $'should not contain someone elses nickname or info but should contain yours' >> /home/$MY_USERNAME/README
|
471
|
|
- echo $'to ensure it is not shared. It also helps when editing the conf to know who' >> /home/$MY_USERNAME/README
|
472
|
|
- echo $'each password is for.' >> /home/$MY_USERNAME/README
|
473
|
|
- echo '' >> /home/$MY_USERNAME/README
|
474
|
|
- echo $'Possible cjdns destinations of interest:' >> /home/$MY_USERNAME/README
|
475
|
|
- echo ' http://transitiontech.ca/faq' >> /home/$MY_USERNAME/README
|
476
|
|
- echo ' http://cjdns.ca/hypeirc.txt' >> /home/$MY_USERNAME/README
|
477
|
|
- chown $MY_USERNAME:$MY_USERNAME /home/$MY_USERNAME/README
|
478
|
|
- chmod 600 /home/$MY_USERNAME/README
|
479
|
|
- fi
|
480
|
|
-
|
481
|
|
- function_check configure_firewall_for_cjdns
|
482
|
|
- configure_firewall_for_cjdns
|
483
|
|
-
|
484
|
|
- echo 'install_cjdns_main' >> $COMPLETION_FILE
|
485
|
|
-}
|
486
|
|
-
|
487
|
|
-function install_cjdns_tools {
|
488
|
|
- if grep -Fxq "install_cjdns_tools" $COMPLETION_FILE; then
|
489
|
|
- return
|
490
|
|
- fi
|
491
|
|
- if [[ $ENABLE_CJDNS != "yes" ]]; then
|
492
|
|
- return
|
493
|
|
- fi
|
494
|
|
- if [ ! -d /etc/cjdns ]; then
|
495
|
|
- install_cjdns
|
496
|
|
- fi
|
497
|
|
-
|
498
|
|
- apt-get -y install mercurial
|
499
|
|
- if [ ! -f ~/.bashrc ]; then
|
500
|
|
- touch ~/.bashrc
|
501
|
|
- fi
|
502
|
|
-
|
503
|
|
- if [ ! -d /home/git ]; then
|
504
|
|
- # add a gogs user account
|
505
|
|
- adduser --disabled-login --gecos 'Gogs' git
|
506
|
|
-
|
507
|
|
- # install Go
|
508
|
|
- if ! grep -q "export GOPATH=" ~/.bashrc; then
|
509
|
|
- echo "export GOPATH=$GOPATH" >> ~/.bashrc
|
510
|
|
- fi
|
511
|
|
- systemctl set-environment GOPATH=$GOPATH
|
512
|
|
- if ! grep -q "systemctl set-environment GOPATH=" ~/.bashrc; then
|
513
|
|
- echo "systemctl set-environment GOPATH=$GOPATH" >> ~/.bashrc
|
514
|
|
- fi
|
515
|
|
- if [ ! -d $GOPATH ]; then
|
516
|
|
- mkdir -p $GOPATH
|
517
|
|
- fi
|
518
|
|
- fi
|
519
|
|
-
|
520
|
|
- if ! grep -q "export GOPATH=" ~/.bashrc; then
|
521
|
|
- echo "export GOPATH=$GOPATH" >> ~/.bashrc
|
522
|
|
- fi
|
523
|
|
- expected_go_path='export PATH=$PATH:'${GOPATH}'/bin'
|
524
|
|
- export PATH=$PATH:${GOPATH}/bin
|
525
|
|
- if ! grep -q "$expected_go_path" ~/.bashrc; then
|
526
|
|
- echo "$expected_go_path" >> ~/.bashrc
|
527
|
|
- fi
|
528
|
|
- export PATH=$PATH:$GOPATH/bin
|
529
|
|
- CJDCMD_REPO2=$(echo "$CJDCMD_REPO" | sed 's|https://||g')
|
530
|
|
- go get $CJDCMD_REPO2
|
531
|
|
- if [ ! -f $GOPATH/bin/cjdcmd ]; then
|
532
|
|
- echo $'cjdcmd was not compiled. Check your golang installation'
|
533
|
|
- exit 7439
|
534
|
|
- fi
|
535
|
|
- cp $GOPATH/bin/cjdcmd /usr/bin
|
536
|
|
-
|
537
|
|
- # initialise from the cjdns config
|
538
|
|
- /usr/bin/cjdcmd cjdnsadmin -file /etc/cjdns/cjdroute.conf
|
539
|
|
-
|
540
|
|
- install_completed cjdns_tools
|
541
|
|
-}
|
542
|
|
-
|
543
|
|
-function install_cjdns {
|
544
|
|
- install_cjdns_main
|
545
|
|
- install_cjdns_tools
|
546
|
|
- install_completed cjdns
|
547
|
|
- APP_INSTALLED=1
|
548
|
|
-}
|
549
|
|
-
|
550
|
|
-# NOTE: deliberately no exit 0
|