freedombone-app-tahoelafs 14KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358
  1. #!/bin/bash
  2. #
  3. # .---. . .
  4. # | | |
  5. # |--- .--. .-. .-. .-.| .-. .--.--. |.-. .-. .--. .-.
  6. # | | (.-' (.-' ( | ( )| | | | )( )| | (.-'
  7. # ' ' --' --' -' - -' ' ' -' -' -' ' - --'
  8. #
  9. # Freedom in the Cloud
  10. #
  11. # Distributed storage
  12. #
  13. # License
  14. # =======
  15. #
  16. # Copyright (C) 2014-2016 Bob Mottram <bob@robotics.uk.to>
  17. #
  18. # This program is free software: you can redistribute it and/or modify
  19. # it under the terms of the GNU Affero General Public License as published by
  20. # the Free Software Foundation, either version 3 of the License, or
  21. # (at your option) any later version.
  22. #
  23. # This program is distributed in the hope that it will be useful,
  24. # but WITHOUT ANY WARRANTY; without even the implied warranty of
  25. # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
  26. # GNU Affero General Public License for more details.
  27. #
  28. # You should have received a copy of the GNU Affero General Public License
  29. # along with this program. If not, see <http://www.gnu.org/licenses/>.
  30. VARIANTS=''
  31. TAHOELAFS_REPO="https://github.com/tahoe-lafs/tahoe-lafs"
  32. TAHOELAFS_COMMIT='30b421d48b3d1dae2ef507bf27a1f3816300cd92'
  33. TAHOELAFS_PORT=50213
  34. TAHOELAFS_WEB_PORT=3456
  35. TAHOELAFS_STORAGE_SPACE=1G
  36. TAHOELAFS_SHARED_DIR='Shared'
  37. TAHOE_COMMAND="cd /var/lib/tahoelafs && venv/bin/tahoe"
  38. function install_interactive_tahoelafs {
  39. echo -n ''
  40. }
  41. function change_password_tahoelafs {
  42. echo -n ''
  43. }
  44. function reconfigure_tahoelafs {
  45. for d in /home/*/ ; do
  46. USERNAME=$(echo "$d" | awk -F '/' '{print $3}')
  47. if [[ $(is_valid_user "$USERNAME") == "1" ]]; then
  48. if [ -d /home/$USERNAME/.tahoe ]; then
  49. su -c "$TAHOE_COMMAND stop" - $USERNAME
  50. rm -rf /home/$USERNAME/.tahoe
  51. fi
  52. if [ -d /home/$USERNAME/${TAHOELAFS_SHARED_DIR} ]; then
  53. rm -rf /home/$USERNAME/${TAHOELAFS_SHARED_DIR}
  54. fi
  55. su -c "cd $TAHOE_COMMAND create-node" - $USERNAME
  56. if [ ! -d /home/$USERNAME/.tahoe ]; then
  57. exit 63722
  58. fi
  59. # create a shared directory
  60. if [ ! -d /home/$USERNAME/${TAHOELAFS_SHARED_DIR} ]; then
  61. mkdir /home/$USERNAME/${TAHOELAFS_SHARED_DIR}
  62. chown -R $USERNAME:$USERNAME /home/$USERNAME/${TAHOELAFS_SHARED_DIR}
  63. fi
  64. TAHOELAFS_CONFIG=/home/$USERNAME/.tahoe/tahoe.cfg
  65. echo '[node]' > $TAHOELAFS_CONFIG
  66. echo "nickname = $USERNAME" >> $TAHOELAFS_CONFIG
  67. echo "web.port = tcp:$TAHOELAFS_WEB_PORT:interface=127.0.0.1" >> $TAHOELAFS_CONFIG
  68. echo 'web.static = public_html' >> $TAHOELAFS_CONFIG
  69. echo "tub.port = tcp:$TAHOELAFS_PORT" >> $TAHOELAFS_CONFIG
  70. echo "tub.location = tcp:$HOSTNAME:$TAHOELAFS_PORT" >> $TAHOELAFS_CONFIG
  71. echo 'timeout.keepalive = 240' >> $TAHOELAFS_CONFIG
  72. echo 'timeout.disconnect = 1800' >> $TAHOELAFS_CONFIG
  73. echo '' >> $TAHOELAFS_CONFIG
  74. echo '[client]' >> $TAHOELAFS_CONFIG
  75. echo 'introducer.furl = None' >> $TAHOELAFS_CONFIG
  76. echo '#helper.furl =' >> $TAHOELAFS_CONFIG
  77. echo '' >> $TAHOELAFS_CONFIG
  78. echo 'shares.needed = 1' >> $TAHOELAFS_CONFIG
  79. echo 'shares.happy = 1' >> $TAHOELAFS_CONFIG
  80. echo 'shares.total = 1' >> $TAHOELAFS_CONFIG
  81. echo '' >> $TAHOELAFS_CONFIG
  82. echo '[storage]' >> $TAHOELAFS_CONFIG
  83. echo 'enabled = true' >> $TAHOELAFS_CONFIG
  84. echo "reserved_space = $TAHOELAFS_STORAGE_SPACE" >> $TAHOELAFS_CONFIG
  85. echo '#expire.enabled = true' >> $TAHOELAFS_CONFIG
  86. echo '#expire.mode =' >> $TAHOELAFS_CONFIG
  87. echo '' >> $TAHOELAFS_CONFIG
  88. echo '[helper]' >> $TAHOELAFS_CONFIG
  89. echo 'enabled = false' >> $TAHOELAFS_CONFIG
  90. echo '' >> $TAHOELAFS_CONFIG
  91. echo '[magic_folder]' >> $TAHOELAFS_CONFIG
  92. echo 'enabled = true' >> $TAHOELAFS_CONFIG
  93. echo "local.directory = /home/${USERNAME}/${TAHOELAFS_SHARED_DIR}" >> $TAHOELAFS_CONFIG
  94. chown $USERNAME:$USERNAME $TAHOELAFS_CONFIG
  95. su -c "$TAHOE_COMMAND start" - $USERNAME
  96. su -c "$TAHOE_COMMAND magic-folder create $HOSTNAME" - $USERNAME
  97. fi
  98. done
  99. }
  100. function upgrade_tahoelafs {
  101. echo -n ''
  102. # TODO
  103. }
  104. function backup_local_tahoelafs {
  105. source_directory=/home/tahoelafs/.tahoe-introducer
  106. if [ ! -d $source_directory ]; then
  107. return
  108. fi
  109. echo $"Backing up Tahoe-LAFS introducer"
  110. systemctl stop tahoelafs
  111. dest_directory=tahoelafs
  112. function_check backup_directory_to_usb
  113. backup_directory_to_usb $source_directory $dest_directory
  114. systemctl start tahoelafs
  115. echo $"Backup to $dest_directory complete"
  116. }
  117. function restore_local_tahoelafs {
  118. echo $"Restoring Tahoe-LAFS introducer"
  119. systemctl stop tahoelafs
  120. temp_restore_dir=/root/temptahoelafs
  121. restore_directory_from_usb $temp_restore_dir tahoelafs
  122. mv /home/tahoelafs/.tahoe-introducer /home/tahoelafs/.tahoe-introducer-old
  123. cp -r $temp_restore_dir/home/tahoelafs/.tahoe-introducer /home/tahoelafs/
  124. if [ ! "$?" = "0" ]; then
  125. mv /home/tahoelafs/.tahoe-introducer-old /home/tahoelafs/.tahoe-introducer
  126. exit 246833
  127. fi
  128. rm -rf /home/tahoelafs/.tahoe-introducer
  129. chown -R tahoelafs:tahoelafs /home/tahoelafs
  130. systemctl start tahoelafs
  131. echo $"Restore complete"
  132. }
  133. function backup_remote_tahoelafs {
  134. source_directory=/home/tahoelafs/.tahoe-introducer
  135. if [ ! -d $source_directory ]; then
  136. return
  137. fi
  138. echo $"Backing up Tahoe-LAFS introducer"
  139. systemctl stop tahoelafs
  140. dest_directory=tahoelafs
  141. function_check backup_directory_to_usb
  142. backup_directory_to_friend $source_directory $dest_directory
  143. systemctl start tahoelafs
  144. echo $"Backup to $dest_directory complete"
  145. }
  146. function restore_remote_tahoelafs {
  147. echo $"Restoring Tahoe-LAFS introducer"
  148. systemctl stop tahoelafs
  149. temp_restore_dir=/root/temptahoelafs
  150. restore_directory_from_friend $temp_restore_dir tahoelafs
  151. mv /home/tahoelafs/.tahoe-introducer /home/tahoelafs/.tahoe-introducer-old
  152. cp -r $temp_restore_dir/home/tahoelafs/.tahoe-introducer /home/tahoelafs/
  153. if [ ! "$?" = "0" ]; then
  154. mv /home/tahoelafs/.tahoe-introducer-old /home/tahoelafs/.tahoe-introducer
  155. exit 623925
  156. fi
  157. rm -rf /home/tahoelafs/.tahoe-introducer-old
  158. chown -R tahoelafs:tahoelafs /home/tahoelafs
  159. systemctl start tahoelafs
  160. echo $"Restore complete"
  161. }
  162. function remove_tahoelafs {
  163. if [[ $(app_is_installed tahoelafs) == "0" ]]; then
  164. return
  165. fi
  166. iptables -D INPUT -p udp --dport $TAHOELAFS_PORT -j ACCEPT
  167. iptables -D INPUT -p tcp --dport $TAHOELAFS_PORT -j ACCEPT
  168. function_check save_firewall_settings
  169. save_firewall_settings
  170. for d in /home/*/ ; do
  171. USERNAME=$(echo "$d" | awk -F '/' '{print $3}')
  172. if [ -f /home/$USERNAME/.tahoe ]; then
  173. su -c "$TAHOE_COMMAND stop" - $USERNAME
  174. rm -rf /home/$USERNAME/.tahoe
  175. fi
  176. done
  177. rm -rf /var/lib/tahoelafs
  178. sed -i '/install_tahoelafs/d' $COMPLETION_FILE
  179. sed -i '/configure_firewall_for_tahoelafs/d' $COMPLETION_FILE
  180. }
  181. function configure_firewall_for_tahoelafs {
  182. if grep -Fxq "configure_firewall_for_tahoelafs" $COMPLETION_FILE; then
  183. return
  184. fi
  185. iptables -A INPUT -p udp --dport $TAHOELAFS_PORT -j ACCEPT
  186. iptables -A INPUT -p tcp --dport $TAHOELAFS_PORT -j ACCEPT
  187. function_check save_firewall_settings
  188. save_firewall_settings
  189. OPEN_PORTS+=("Tahoe-LAFS $TAHOELAFS_PORT")
  190. echo 'configure_firewall_for_tahoelafs' >> $COMPLETION_FILE
  191. }
  192. function tahoelafs_update_script {
  193. update_script_filename=$1
  194. echo '#!/bin/bash' > $update_script_filename
  195. echo 'TOX_USERNAME=$(toxid --showuser)' >> $update_script_filename
  196. echo 'PEERS_FILE=$(mktemp /tmp/tahoelafs-peers.XXXXXX)' >> $update_script_filename
  197. echo -n 'avahi-browse -atl | grep "Workstation" | ' >> $update_script_filename
  198. echo -n "awk -F ' ' '{print \$4}' " >> $update_script_filename
  199. echo '| sort -u > $PEERS_FILE' >> $update_script_filename
  200. echo 'if [ ! "$?" = "0" ]; then' >> $update_script_filename
  201. echo ' exit 1' >> $update_script_filename
  202. echo 'fi' >> $update_script_filename
  203. echo '' >> $update_script_filename
  204. echo 'if [ ! -f $PEERS_FILE ]; then' >> $update_script_filename
  205. echo ' exit 0' >> $update_script_filename
  206. echo 'fi' >> $update_script_filename
  207. echo '' >> $update_script_filename
  208. echo 'furl=""' >> $update_script_filename
  209. echo 'while IFS="" read -r line || [[ -n "$line" ]]; do' >> $update_script_filename
  210. echo ' if [[ $furl != "" ]]; then' >> $update_script_filename
  211. echo -n ' furl="$furl,$line:' >> $update_script_filename
  212. echo -n "$TAHOELAFS_PORT" >> $update_script_filename
  213. echo '"' >> $update_script_filename
  214. echo ' else' >> $update_script_filename
  215. echo -n ' furl="$line:' >> $update_script_filename
  216. echo -n "$TAHOELAFS_PORT" >> $update_script_filename
  217. echo '"' >> $update_script_filename
  218. echo ' fi' >> $update_script_filename
  219. echo 'done < "$PEERS_FILE"' >> $update_script_filename
  220. echo '' >> $update_script_filename
  221. echo 'rm $PEERS_FILE' >> $update_script_filename
  222. echo '' >> $update_script_filename
  223. echo 'for d in /home/*/ ; do' >> $update_script_filename
  224. echo -n ' USERNAME=$(echo "$d" | ' >> $update_script_filename
  225. echo "awk -F '/' '{print \$3}')'" >> $update_script_filename
  226. echo ' if [ -f /home/$USERNAME/.tahoe/tahoe.cfg ]; then' >> $update_script_filename
  227. echo ' if ! grep -q "introducer.furl = ${furl}" /home/$USERNAME/.tahoe/tahoe.cfg; then' >> $update_script_filename
  228. echo ' sed -i "s|introducer.furl =.*|introducer.furl = ${furl}|g" /home/$USERNAME/.tahoe/tahoe.cfg' >> $update_script_filename
  229. echo ' sed -i "s|nickname =.*|nickname = ${TOX_USERNAME}|g" /home/$USERNAME/.tahoe/tahoe.cfg' >> $update_script_filename
  230. echo ' chown $USERNAME:$USERNAME /home/$USERNAME/.tahoe/tahoe.cfg' >> $update_script_filename
  231. echo " su -c '$TAHOE_COMMAND restart' - \$USERNAME" >> $update_script_filename
  232. echo ' fi' >> $update_script_filename
  233. echo ' fi' >> $update_script_filename
  234. echo 'done' >> $update_script_filename
  235. echo '' >> $update_script_filename
  236. echo 'exit 0' >> $update_script_filename
  237. chmod +x $update_script_filename
  238. }
  239. function mesh_install_tahoelafs {
  240. chroot "$rootdir" apt-get -y install build-essential python-pip python-dev
  241. chroot "$rootdir" apt-get -y install libffi-dev libssl-dev python-virtualenv
  242. git clone $TAHOELAFS_REPO $rootdir/var/lib/tahoelafs
  243. cd $rootdir/var/lib/tahoelafs
  244. git checkout $TAHOELAFS_COMMIT -b $TAHOELAFS_COMMIT
  245. cat <<EOF > $rootdir/root/install_tahoelafs
  246. cd /var/lib/tahoelafs
  247. virtualenv venv
  248. venv/bin/pip install --editable .
  249. EOF
  250. chroot "$rootdir" chmod +x /root/install_tahoelafs
  251. chroot "$rootdir" /root/install_tahoelafs
  252. chroot "$rootdir" rm /root/install_tahoelafs
  253. tahoelafs_update_script $rootdir/usr/bin/update-tahoelafs
  254. if ! grep -q "update-tahoelafs" $rootdir/etc/crontab; then
  255. echo "*/1 * * * * root /usr/bin/update-tahoelafs 2> /dev/null" >> $rootdir/etc/crontab
  256. fi
  257. }
  258. function install_tahoelafs {
  259. if [ $INSTALLING_MESH ]; then
  260. mesh_install_tahoelafs
  261. return
  262. fi
  263. apt-get -y install build-essential python-pip python-dev libffi-dev libssl-dev python-virtualenv
  264. # create a user to run the introducer
  265. if [ ! -d /home/tahoelafs ]; then
  266. # add a gogs user account
  267. adduser --disabled-login --gecos 'tahoe-lafs' tahoelafs
  268. fi
  269. if [ -d /home/tahoelafs/Maildir ]; then
  270. rm -rf /home/tahoelafs/Maildir
  271. fi
  272. if [ ! -d /home/tahoelafs/.tahoe-introducer ]; then
  273. mkdir /home/tahoelafs/.tahoe-introducer
  274. fi
  275. git_clone $TAHOELAFS_REPO /home/tahoelafs/tahoelafs
  276. cd /home/tahoelafs/tahoelafs
  277. git checkout $TAHOELAFS_COMMIT -b $TAHOELAFS_COMMIT
  278. virtualenv venv
  279. venv/bin/pip install --editable .
  280. configure_firewall_for_tahoelafs
  281. su -c "cd $TAHOE_COMMAND create-introducer /home/tahoelafs/.tahoe-introducer" - tahoelafs
  282. TAHOELAFS_CONFIG=/home/tahoelafs/.tahoe-introducer/tahoe.cfg
  283. if [ ! -f $TAHOELAFS_CONFIG ]; then
  284. exit 62831
  285. fi
  286. sed -i "s|nickname =.*|nickname = $HOSTNAME|g" $TAHOELAFS_CONFIG
  287. if ! grep -q "[storage]" $TAHOELAFS_CONFIG; then
  288. echo '' >> $TAHOELAFS_CONFIG
  289. echo '[storage]' >> $TAHOELAFS_CONFIG
  290. echo 'enabled = true' >> $TAHOELAFS_CONFIG
  291. echo "reserved_space = $TAHOELAFS_STORAGE_SPACE" >> $TAHOELAFS_CONFIG
  292. fi
  293. chown -R tahoelafs:tahoelafs /home/tahoelafs
  294. TAHOELAFS_DAEMON_FILE=/etc/systemd/system/tahoelafs.service
  295. echo '[Unit]' > $TAHOELAFS_DAEMON_FILE
  296. echo 'Description=Tahoe-LAFS introducer' >> $TAHOELAFS_DAEMON_FILE
  297. echo 'After=syslog.target' >> $TAHOELAFS_DAEMON_FILE
  298. echo 'After=network.target' >> $TAHOELAFS_DAEMON_FILE
  299. echo '' >> $TAHOELAFS_DAEMON_FILE
  300. echo '[Service]' >> $TAHOELAFS_DAEMON_FILE
  301. echo 'Type=simple' >> $TAHOELAFS_DAEMON_FILE
  302. echo "User=tahoelafs" >> $TAHOELAFS_DAEMON_FILE
  303. echo "Group=tahoelafs" >> $TAHOELAFS_DAEMON_FILE
  304. echo "WorkingDirectory=/home/tahoelafs" >> $TAHOELAFS_DAEMON_FILE
  305. echo "ExecStart=venv/bin/tahoe start /home/tahoelafs/.tahoe-introducer" >> $TAHOELAFS_DAEMON_FILE
  306. echo "ExecStop=venv/bin/tahoe stop /home/tahoelafs/.tahoe-introducer" >> $TAHOELAFS_DAEMON_FILE
  307. echo 'Restart=on-failure' >> $TAHOELAFS_DAEMON_FILE
  308. echo "Environment=\"USER=tahoelafs\" \"HOME=/home/tahoelafs\"" >> $TAHOELAFS_DAEMON_FILE
  309. echo '' >> $TAHOELAFS_DAEMON_FILE
  310. echo '[Install]' >> $TAHOELAFS_DAEMON_FILE
  311. echo 'WantedBy=multi-user.target' >> $TAHOELAFS_DAEMON_FILE
  312. systemctl enable tahoelafs
  313. systemctl daemon-reload
  314. systemctl start tahoelafs
  315. }
  316. # NOTE: deliberately no exit 0