Parcourir la source

If installed within docker certain things aren't needed

Bob Mottram il y a 10 ans
Parent
révision
d2b72e35d9
1 fichiers modifiés avec 40 ajouts et 0 suppressions
  1. 40
    0
      install-freedombone.sh

+ 40
- 0
install-freedombone.sh Voir le fichier

66
 SSH_PORT=2222
66
 SSH_PORT=2222
67
 KERNEL_VERSION="v3.15.10-bone7"
67
 KERNEL_VERSION="v3.15.10-bone7"
68
 USE_HWRNG="yes"
68
 USE_HWRNG="yes"
69
+INSTALLED_WITHIN_DOCKER="no"
69
 
70
 
70
 GPG_KEYSERVER="hkp://keys.gnupg.net"
71
 GPG_KEYSERVER="hkp://keys.gnupg.net"
71
 
72
 
269
   if grep -Fxq "update_the_kernel" $COMPLETION_FILE; then
270
   if grep -Fxq "update_the_kernel" $COMPLETION_FILE; then
270
       return
271
       return
271
   fi
272
   fi
273
+  if [ $INSTALLED_WITHIN_DOCKER == "yes" ]; then
274
+	  return
275
+  fi
272
   cd /opt/scripts/tools
276
   cd /opt/scripts/tools
273
   ./update_kernel.sh --kernel $KERNEL_VERSION
277
   ./update_kernel.sh --kernel $KERNEL_VERSION
274
   echo 'update_the_kernel' >> $COMPLETION_FILE
278
   echo 'update_the_kernel' >> $COMPLETION_FILE
278
   if grep -Fxq "enable_zram" $COMPLETION_FILE; then
282
   if grep -Fxq "enable_zram" $COMPLETION_FILE; then
279
       return
283
       return
280
   fi
284
   fi
285
+  if [ $INSTALLED_WITHIN_DOCKER == "yes" ]; then
286
+	  return
287
+  fi
281
   if ! grep -q "options zram num_devices=1" /etc/modprobe.d/zram.conf; then
288
   if ! grep -q "options zram num_devices=1" /etc/modprobe.d/zram.conf; then
282
       echo 'options zram num_devices=1' >> /etc/modprobe.d/zram.conf
289
       echo 'options zram num_devices=1' >> /etc/modprobe.d/zram.conf
283
   fi
290
   fi
357
   if grep -Fxq "random_number_generator" $COMPLETION_FILE; then
364
   if grep -Fxq "random_number_generator" $COMPLETION_FILE; then
358
       return
365
       return
359
   fi
366
   fi
367
+  if [ $INSTALLED_WITHIN_DOCKER == "yes" ]; then
368
+	  # it is assumed that docker uses the random number
369
+	  # generator of the host system
370
+	  return
371
+  fi
360
   if [ $USE_HWRNG == "yes" ]; then
372
   if [ $USE_HWRNG == "yes" ]; then
361
     apt-get -y --force-yes install rng-tools
373
     apt-get -y --force-yes install rng-tools
362
     sed -i 's|#HRNGDEVICE=/dev/hwrng|HRNGDEVICE=/dev/hwrng|g' /etc/default/rng-tools
374
     sed -i 's|#HRNGDEVICE=/dev/hwrng|HRNGDEVICE=/dev/hwrng|g' /etc/default/rng-tools
544
   if grep -Fxq "configure_firewall" $COMPLETION_FILE; then
556
   if grep -Fxq "configure_firewall" $COMPLETION_FILE; then
545
       return
557
       return
546
   fi
558
   fi
559
+  if [ $INSTALLED_WITHIN_DOCKER == "yes" ]; then
560
+	  # docker does its own firewalling
561
+	  return
562
+  fi
547
   iptables -P INPUT ACCEPT
563
   iptables -P INPUT ACCEPT
548
   ip6tables -P INPUT ACCEPT
564
   ip6tables -P INPUT ACCEPT
549
   iptables -F
565
   iptables -F
570
   if grep -Fxq "configure_firewall_for_dns" $COMPLETION_FILE; then
586
   if grep -Fxq "configure_firewall_for_dns" $COMPLETION_FILE; then
571
       return
587
       return
572
   fi
588
   fi
589
+  if [ $INSTALLED_WITHIN_DOCKER == "yes" ]; then
590
+	  # docker does its own firewalling
591
+	  return
592
+  fi
573
   iptables -A INPUT -i eth0 -p udp -m udp --dport 1024:65535 --sport 53 -j ACCEPT
593
   iptables -A INPUT -i eth0 -p udp -m udp --dport 1024:65535 --sport 53 -j ACCEPT
574
   save_firewall_settings
594
   save_firewall_settings
575
   echo 'configure_firewall_for_dns' >> $COMPLETION_FILE
595
   echo 'configure_firewall_for_dns' >> $COMPLETION_FILE
579
   if grep -Fxq "configure_firewall_for_ftp" $COMPLETION_FILE; then
599
   if grep -Fxq "configure_firewall_for_ftp" $COMPLETION_FILE; then
580
       return
600
       return
581
   fi
601
   fi
602
+  if [ $INSTALLED_WITHIN_DOCKER == "yes" ]; then
603
+	  # docker does its own firewalling
604
+	  return
605
+  fi
582
   iptables -I INPUT -i eth0 -p tcp --dport 1024:65535 --sport 20:21 -j ACCEPT
606
   iptables -I INPUT -i eth0 -p tcp --dport 1024:65535 --sport 20:21 -j ACCEPT
583
   save_firewall_settings
607
   save_firewall_settings
584
   echo 'configure_firewall_for_ftp' >> $COMPLETION_FILE
608
   echo 'configure_firewall_for_ftp' >> $COMPLETION_FILE
588
   if grep -Fxq "configure_firewall_for_web" $COMPLETION_FILE; then
612
   if grep -Fxq "configure_firewall_for_web" $COMPLETION_FILE; then
589
       return
613
       return
590
   fi
614
   fi
615
+  if [ $INSTALLED_WITHIN_DOCKER == "yes" ]; then
616
+	  # docker does its own firewalling
617
+	  return
618
+  fi
591
   iptables -A INPUT -i eth0 -p tcp --dport 32768:61000 --sport 80 -j ACCEPT
619
   iptables -A INPUT -i eth0 -p tcp --dport 32768:61000 --sport 80 -j ACCEPT
592
   iptables -A INPUT -i eth0 -p tcp --dport 32768:61000 --sport 443 -j ACCEPT
620
   iptables -A INPUT -i eth0 -p tcp --dport 32768:61000 --sport 443 -j ACCEPT
593
   save_firewall_settings
621
   save_firewall_settings
598
   if grep -Fxq "configure_firewall_for_ssh" $COMPLETION_FILE; then
626
   if grep -Fxq "configure_firewall_for_ssh" $COMPLETION_FILE; then
599
       return
627
       return
600
   fi
628
   fi
629
+  if [ $INSTALLED_WITHIN_DOCKER == "yes" ]; then
630
+	  # docker does its own firewalling
631
+	  return
632
+  fi
601
   iptables -A INPUT -i eth0 -p tcp --dport 22 -j ACCEPT
633
   iptables -A INPUT -i eth0 -p tcp --dport 22 -j ACCEPT
602
   iptables -A INPUT -i eth0 -p tcp --dport $SSH_PORT -j ACCEPT
634
   iptables -A INPUT -i eth0 -p tcp --dport $SSH_PORT -j ACCEPT
603
   save_firewall_settings
635
   save_firewall_settings
608
   if grep -Fxq "configure_firewall_for_git" $COMPLETION_FILE; then
640
   if grep -Fxq "configure_firewall_for_git" $COMPLETION_FILE; then
609
       return
641
       return
610
   fi
642
   fi
643
+  if [ $INSTALLED_WITHIN_DOCKER == "yes" ]; then
644
+	  # docker does its own firewalling
645
+	  return
646
+  fi
611
   iptables -A INPUT -i eth0 -p tcp --dport 9418 -j ACCEPT
647
   iptables -A INPUT -i eth0 -p tcp --dport 9418 -j ACCEPT
612
   save_firewall_settings
648
   save_firewall_settings
613
   echo 'configure_firewall_for_git' >> $COMPLETION_FILE
649
   echo 'configure_firewall_for_git' >> $COMPLETION_FILE
617
   if grep -Fxq "configure_firewall_for_email" $COMPLETION_FILE; then
653
   if grep -Fxq "configure_firewall_for_email" $COMPLETION_FILE; then
618
       return
654
       return
619
   fi
655
   fi
656
+  if [ $INSTALLED_WITHIN_DOCKER == "yes" ]; then
657
+	  # docker does its own firewalling
658
+	  return
659
+  fi
620
   iptables -A INPUT -i eth0 -p tcp --dport 25 -j ACCEPT
660
   iptables -A INPUT -i eth0 -p tcp --dport 25 -j ACCEPT
621
   iptables -A INPUT -i eth0 -p tcp --dport 587 -j ACCEPT
661
   iptables -A INPUT -i eth0 -p tcp --dport 587 -j ACCEPT
622
   iptables -A INPUT -i eth0 -p tcp --dport 465 -j ACCEPT
662
   iptables -A INPUT -i eth0 -p tcp --dport 465 -j ACCEPT