|
@@ -137,6 +137,117 @@ function mesh_install_batman {
|
137
|
137
|
chroot "$rootdir" systemctl enable batman
|
138
|
138
|
}
|
139
|
139
|
|
|
140
|
+function install_mesh_tunnel {
|
|
141
|
+ # https://sudoroom.org/wiki/Mesh/Relay_setup
|
|
142
|
+ chroot "$rootdir" apt-get -yq install xl2tpd l2tpns
|
|
143
|
+ chroot "$rootdir" apt-get -yq install iproute bridge-utils libnetfilter-conntrack3 python-dev libevent-dev ebtables python-pip git
|
|
144
|
+
|
|
145
|
+ git clone https://github.com/wlanslovenija/tunneldigger $rootdir/opt/tunneldigger
|
|
146
|
+ cd $rootdir/opt/tunneldigger/client
|
|
147
|
+ chroot "$rootdir" make
|
|
148
|
+ if [ ! -f $rootdir/opt/tunneldigger/client/l2tp_client ]; then
|
|
149
|
+ echo $'tunneldigger failed to build client'
|
|
150
|
+ exit 823563
|
|
151
|
+ fi
|
|
152
|
+ cd $rootdir/opt/tunneldigger/broker
|
|
153
|
+ chroot "$rootdir" pip install -r requirements.txt
|
|
154
|
+ echo 'l2tp_core' >> $rootdir/etc/modules
|
|
155
|
+ echo 'l2tp_eth' >> $rootdir/etc/modules
|
|
156
|
+ echo 'l2tp_netlink' >> $rootdir/etc/modules
|
|
157
|
+
|
|
158
|
+ echo '#!/bin/sh' > $rootdir/opt/tunneldigger/broker/scripts/up_hook.sh
|
|
159
|
+ echo 'INTERFACE="$3"' >> $rootdir/opt/tunneldigger/broker/scripts/up_hook.sh
|
|
160
|
+ echo 'ifconfig $INTERFACE up' >> $rootdir/opt/tunneldigger/broker/scripts/up_hook.sh
|
|
161
|
+ echo 'batctl if add $INTERFACE' >> $rootdir/opt/tunneldigger/broker/scripts/up_hook.sh
|
|
162
|
+ echo 'if [ `cat /sys/class/net/bat0/operstate` != "up" ]; then' >> $rootdir/opt/tunneldigger/broker/scripts/up_hook.sh
|
|
163
|
+ echo " ipv4addr=\$(ip -o -f inet addr show dev \"eth0\" | awk '{print \$4}' | awk 'END {print}' | awk -F '/' '{print \$1}')" >> $rootdir/opt/tunneldigger/broker/scripts/up_hook.sh
|
|
164
|
+ echo ' ifconfig bat0 $ipv4addr netmask 255.0.0.0 up' >> $rootdir/opt/tunneldigger/broker/scripts/up_hook.sh
|
|
165
|
+ echo 'fi' >> $rootdir/opt/tunneldigger/broker/scripts/up_hook.sh
|
|
166
|
+ chmod +x $rootdir/opt/tunneldigger/broker/scripts/up_hook.sh
|
|
167
|
+
|
|
168
|
+ echo '[broker]' > $rootdir/opt/tunneldigger/broker/l2tp_broker.cfg
|
|
169
|
+ echo '; IP address the broker will listen and accept tunnels on' >> $rootdir/opt/tunneldigger/broker/l2tp_broker.cfg
|
|
170
|
+ echo 'address=127.0.0.1' >> $rootdir/opt/tunneldigger/broker/l2tp_broker.cfg
|
|
171
|
+ echo '; Ports where the broker will listen on' >> $rootdir/opt/tunneldigger/broker/l2tp_broker.cfg
|
|
172
|
+ echo "port=53,123,8942" >> $rootdir/opt/tunneldigger/broker/l2tp_broker.cfg
|
|
173
|
+ echo '; Interface with that IP address' >> $rootdir/opt/tunneldigger/broker/l2tp_broker.cfg
|
|
174
|
+ echo 'interface=lo' >> $rootdir/opt/tunneldigger/broker/l2tp_broker.cfg
|
|
175
|
+ echo '; Maximum number of tunnels that will be allowed by the broker' >> $rootdir/opt/tunneldigger/broker/l2tp_broker.cfg
|
|
176
|
+ echo 'max_tunnels=1024' >> $rootdir/opt/tunneldigger/broker/l2tp_broker.cfg
|
|
177
|
+ echo '; Tunnel port base' >> $rootdir/opt/tunneldigger/broker/l2tp_broker.cfg
|
|
178
|
+ echo 'port_base=20000' >> $rootdir/opt/tunneldigger/broker/l2tp_broker.cfg
|
|
179
|
+ echo '; Tunnel id base' >> $rootdir/opt/tunneldigger/broker/l2tp_broker.cfg
|
|
180
|
+ echo 'tunnel_id_base=100' >> $rootdir/opt/tunneldigger/broker/l2tp_broker.cfg
|
|
181
|
+ echo '; Namespace (for running multiple brokers); note that you must also' >> $rootdir/opt/tunneldigger/broker/l2tp_broker.cfg
|
|
182
|
+ echo '; configure disjunct ports, and tunnel identifiers in order for' >> $rootdir/opt/tunneldigger/broker/l2tp_broker.cfg
|
|
183
|
+ echo '; namespacing to work' >> $rootdir/opt/tunneldigger/broker/l2tp_broker.cfg
|
|
184
|
+ echo 'namespace=default' >> $rootdir/opt/tunneldigger/broker/l2tp_broker.cfg
|
|
185
|
+ echo '; check if all kernel module are loaded. Do not check for built-ins.' >> $rootdir/opt/tunneldigger/broker/l2tp_broker.cfg
|
|
186
|
+ echo 'check_modules=true' >> $rootdir/opt/tunneldigger/broker/l2tp_broker.cfg
|
|
187
|
+ echo '' >> $rootdir/opt/tunneldigger/broker/l2tp_broker.cfg
|
|
188
|
+ echo '[log]' >> $rootdir/opt/tunneldigger/broker/l2tp_broker.cfg
|
|
189
|
+ echo '; Log filename' >> $rootdir/opt/tunneldigger/broker/l2tp_broker.cfg
|
|
190
|
+ echo 'filename=tunneldigger-broker.log' >> $rootdir/opt/tunneldigger/broker/l2tp_broker.cfg
|
|
191
|
+ echo '; Verbosity' >> $rootdir/opt/tunneldigger/broker/l2tp_broker.cfg
|
|
192
|
+ echo 'verbosity=DEBUG' >> $rootdir/opt/tunneldigger/broker/l2tp_broker.cfg
|
|
193
|
+ echo '; Should IP addresses be logged or not' >> $rootdir/opt/tunneldigger/broker/l2tp_broker.cfg
|
|
194
|
+ echo 'log_ip_addresses=false' >> $rootdir/opt/tunneldigger/broker/l2tp_broker.cfg
|
|
195
|
+ echo '' >> $rootdir/opt/tunneldigger/broker/l2tp_broker.cfg
|
|
196
|
+ echo '[hooks]' >> $rootdir/opt/tunneldigger/broker/l2tp_broker.cfg
|
|
197
|
+ echo '; Arguments to the session.{up,pre-down,down} hooks are as follows:' >> $rootdir/opt/tunneldigger/broker/l2tp_broker.cfg
|
|
198
|
+ echo ';' >> $rootdir/opt/tunneldigger/broker/l2tp_broker.cfg
|
|
199
|
+ echo '; <tunnel_id> <session_id> <interface> <mtu> <endpoint_ip> <endpoint_port> <local_port>' >> $rootdir/opt/tunneldigger/broker/l2tp_broker.cfg
|
|
200
|
+ echo ';' >> $rootdir/opt/tunneldigger/broker/l2tp_broker.cfg
|
|
201
|
+ echo '; Arguments to the session.mtu-changed hook are as follows:' >> $rootdir/opt/tunneldigger/broker/l2tp_broker.cfg
|
|
202
|
+ echo ';' >> $rootdir/opt/tunneldigger/broker/l2tp_broker.cfg
|
|
203
|
+ echo '; <tunnel_id> <session_id> <interface> <old_mtu> <new_mtu>' >> $rootdir/opt/tunneldigger/broker/l2tp_broker.cfg
|
|
204
|
+ echo ';' >> $rootdir/opt/tunneldigger/broker/l2tp_broker.cfg
|
|
205
|
+ echo '' >> $rootdir/opt/tunneldigger/broker/l2tp_broker.cfg
|
|
206
|
+ echo '; Called after the tunnel interface goes up' >> $rootdir/opt/tunneldigger/broker/l2tp_broker.cfg
|
|
207
|
+ echo 'session.up=/opt/tunneldigger/broker/scripts/up_hook.sh' >> $rootdir/opt/tunneldigger/broker/l2tp_broker.cfg
|
|
208
|
+ echo '; Called just before the tunnel interface goes down' >> $rootdir/opt/tunneldigger/broker/l2tp_broker.cfg
|
|
209
|
+ echo 'session.pre-down=' >> $rootdir/opt/tunneldigger/broker/l2tp_broker.cfg
|
|
210
|
+ echo '; Called after the tunnel interface goes down' >> $rootdir/opt/tunneldigger/broker/l2tp_broker.cfg
|
|
211
|
+ echo 'session.down=' >> $rootdir/opt/tunneldigger/broker/l2tp_broker.cfg
|
|
212
|
+ echo '; Called after the tunnel MTU gets changed because of PMTU discovery' >> $rootdir/opt/tunneldigger/broker/l2tp_broker.cfg
|
|
213
|
+ echo 'session.mtu-changed=' >> $rootdir/opt/tunneldigger/broker/l2tp_broker.cfg
|
|
214
|
+
|
|
215
|
+ echo '[Unit]' > $rootdir/etc/systemd/system/tunneldigger.service
|
|
216
|
+ echo 'Description=TunnelDigger Broker' >> $rootdir/etc/systemd/system/tunneldigger.service
|
|
217
|
+ echo 'After=syslog.target' >> $rootdir/etc/systemd/system/tunneldigger.service
|
|
218
|
+ echo 'After=network.target' >> $rootdir/etc/systemd/system/tunneldigger.service
|
|
219
|
+ echo '' >> $rootdir/etc/systemd/system/tunneldigger.service
|
|
220
|
+ echo '[Service]' >> $rootdir/etc/systemd/system/tunneldigger.service
|
|
221
|
+ echo 'Type=simple' >> $rootdir/etc/systemd/system/tunneldigger.service
|
|
222
|
+ echo 'User=root' >> $rootdir/etc/systemd/system/tunneldigger.service
|
|
223
|
+ echo 'Group=root' >> $rootdir/etc/systemd/system/tunneldigger.service
|
|
224
|
+ echo 'WorkingDirectory=/opt/tunneldigger/broker' >> $rootdir/etc/systemd/system/tunneldigger.service
|
|
225
|
+ echo 'ExecStart=/opt/tunneldigger/broker/l2tp_broker.py l2tp_broker.cfg' >> $rootdir/etc/systemd/system/tunneldigger.service
|
|
226
|
+ echo 'Restart=always' >> $rootdir/etc/systemd/system/tunneldigger.service
|
|
227
|
+ echo 'RestartSec=60' >> $rootdir/etc/systemd/system/tunneldigger.service
|
|
228
|
+ echo '' >> $rootdir/etc/systemd/system/tunneldigger.service
|
|
229
|
+ echo '[Install]' >> $rootdir/etc/systemd/system/tunneldigger.service
|
|
230
|
+ echo 'WantedBy=multi-user.target' >> $rootdir/etc/systemd/system/tunneldigger.service
|
|
231
|
+
|
|
232
|
+ echo '#!/bin/bash' > $rootdir/usr/bin/meshtunnel
|
|
233
|
+ echo 'if [ ! $1 ]; then' >> $rootdir/usr/bin/meshtunnel
|
|
234
|
+ echo ' echo "Syntax: meshtunnel [from external IP] [to external IP]"' >> $rootdir/usr/bin/meshtunnel
|
|
235
|
+ echo ' exit 1' >> $rootdir/usr/bin/meshtunnel
|
|
236
|
+ echo 'fi' >> $rootdir/usr/bin/meshtunnel
|
|
237
|
+ echo 'if [ ! $2 ]; then' >> $rootdir/usr/bin/meshtunnel
|
|
238
|
+ echo ' echo "Syntax: meshtunnel [from external IP] [to external IP]"' >> $rootdir/usr/bin/meshtunnel
|
|
239
|
+ echo ' exit 2' >> $rootdir/usr/bin/meshtunnel
|
|
240
|
+ echo 'fi' >> $rootdir/usr/bin/meshtunnel
|
|
241
|
+ echo '' >> $rootdir/usr/bin/meshtunnel
|
|
242
|
+ echo 'sed -i "s|address=.*|address=$1|g" /opt/tunneldigger/broker/l2tp_broker.cfg' >> $rootdir/usr/bin/meshtunnel
|
|
243
|
+ echo 'systemctl restart tunneldigger' >> $rootdir/usr/bin/meshtunnel
|
|
244
|
+ echo 'sleep 3' >> $rootdir/usr/bin/meshtunnel
|
|
245
|
+ echo 'cd /opt/tunneldigger/client' >> $rootdir/usr/bin/meshtunnel
|
|
246
|
+ echo './l2tp_client -f -u foo -l ${2}:53 -i l2tp' >> $rootdir/usr/bin/meshtunnel
|
|
247
|
+ echo 'exit 0' >> $rootdir/usr/bin/meshtunnel
|
|
248
|
+ chmod +x $rootdir/usr/bin/meshtunnel
|
|
249
|
+}
|
|
250
|
+
|
140
|
251
|
function install_batman {
|
141
|
252
|
if [ $INSTALLING_MESH ]; then
|
142
|
253
|
mesh_install_batman
|