| 123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515 | #!/bin/bash
#
# .---.                  .              .
# |                      |              |
# |--- .--. .-.  .-.  .-.|  .-. .--.--. |.-.  .-. .--.  .-.
# |    |   (.-' (.-' (   | (   )|  |  | |   )(   )|  | (.-'
# '    '     --'  --'  -' -  -' '  '   -' -'   -' '   -  --'
#
#                    Freedom in the Cloud
#
# Installs mesh applications. This avoids duplicated functions
# within freedombone and freedombone-image-customize and also
# for client installs
#
# License
# =======
#
# This program is free software: you can redistribute it and/or modify
# it under the terms of the GNU Affero General Public License as published by
# the Free Software Foundation, either version 3 of the License, or
# (at your option) any later version.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
# GNU Affero General Public License for more details.
#
# You should have received a copy of the GNU Affero General Public License
# along with this program.  If not, see <http://www.gnu.org/licenses/>.
PROJECT_NAME='freedombone'
COMPLETION_FILE=$HOME/${PROJECT_NAME}-completed.txt
export TEXTDOMAIN=${PROJECT_NAME}-mesh-install
export TEXTDOMAINDIR="/usr/share/locale"
# for mesh installs
TRACKER_PORT=6969
WIFI_CHANNEL=2
WIFI_INTERFACE='wlan0'
# B.A.T.M.A.N settings
BATMAN_CELLID='02:BA:00:00:03:01'
WIFI_SSID='mesh'
# Babel
BABEL_PORT=6696
rootdir=''
FN=
CHROOT_PREFIX=''
FRIENDS_MIRRORS_SERVER=
# To avoid confusions these are obtained from the main project file
TOXID_REPO=
TOX_PORT=
TOXCORE_REPO=
TOXIC_REPO=
TOXCORE_COMMIT=
TOXIC_COMMIT=
# These are some default nodes, but you can replace them with trusted nodes
# as you prefer. See https://wiki.tox.im/Nodes
TOX_NODES=
#TOX_NODES=(
#  '192.254.75.102,2607:5600:284::2,33445,951C88B7E75C867418ACDB5D273821372BB5BD652740BCDF623A4FA293E75D2F,Tox RELENG,US'
#  '144.76.60.215,2a01:4f8:191:64d6::1,33445,04119E835DF3E78BACF0F84235B300546AF8B936F035185E2A8E9E0A67C8924F,sonOfRa,DE'
#)
# To avoid confusions these are obtained from the main project file
ZERONET_REPO=
ZERONET_COMMIT=
ZERONET_PORT=
# Directory where source code is downloaded and compiled
INSTALL_DIR=$HOME/build
MESH_INSTALL_DIR=/var/lib
REMOVE='no'
source /usr/share/${PROJECT_NAME}/utils/${PROJECT_NAME}-utils-git
function show_help {
    echo ''
    echo $"${PROJECT_NAME}-mesh-install -f [function] -r [rootdir]"
    echo ''
    echo $'Runs a mesh network install function'
    echo ''
    echo $'  -h --help                   Show help'
    echo $'  -f --function [name]        Name of the function to be run'
    echo $'  -r --rootdir [directory]    Root directory'
    echo $'  -w --wifi [interface]       e.g. wlan0'
    echo ''
    exit 0
}
function install_babel {
    $CHROOT_PREFIX apt-get -y install babeld
    babel_script=${rootdir}/var/lib/babel
    echo '#!/bin/bash' > $babel_script
    echo '' >> $babel_script
    echo 'if [[ $1 == "ls" || $1 == "list" ]]; then' >> $babel_script
    echo '    avahi-browse -atl' >> $babel_script
    echo '    exit 0' >> $babel_script
    echo 'fi' >> $babel_script
    echo '' >> $babel_script
    echo 'if [[ $1 == "start" ]]; then' >> $babel_script
    echo '    sed -i "s|#host-name=.*|host-name=$(hostname)|g" /etc/avahi/avahi-daemon.conf' >> $babel_script
    echo '    sed -i "s|host-name=.*|host-name=$(hostname)|g" /etc/avahi/avahi-daemon.conf' >> $babel_script
    echo '    sed -i "s|use-ipv4=.*|use-ipv4=yes|g" /etc/avahi/avahi-daemon.conf' >> $babel_script
    echo '    sed -i "s|use-ipv6=.*|use-ipv6=no|g" /etc/avahi/avahi-daemon.conf' >> $babel_script
    echo '    sed -i "s|hosts:.*|hosts:          files mdns4_minimal dns mdns4 mdns|g" /etc/nsswitch.conf' >> $babel_script
    echo '    systemctl restart avahi-daemon' >> $babel_script
    echo 'fi' >> $babel_script
    echo '' >> $babel_script
    echo "IFACE=$WIFI_INTERFACE" >> $babel_script
    echo 'if [[ $IFACE == "wlan0" ]]; then' >> $babel_script
    echo '    if grep -q "wlan1" /proc/net/dev; then' >> $babel_script
    echo '        IFACE=wlan1' >> $babel_script
    echo '    fi' >> $babel_script
    echo 'fi' >> $babel_script
    echo 'if [[ $IFACE == "wlan0" ]]; then' >> $babel_script
    echo '    if grep -q "wlan2" /proc/net/dev; then' >> $babel_script
    echo '        IFACE=wlan2' >> $babel_script
    echo '    fi' >> $babel_script
    echo 'fi' >> $babel_script
    echo 'if [[ $IFACE == "wlan0" ]]; then' >> $babel_script
    echo '    if grep -q "wlan3" /proc/net/dev; then' >> $babel_script
    echo '        IFACE=wlan3' >> $babel_script
    echo '    fi' >> $babel_script
    echo 'fi' >> $babel_script
    echo '' >> $babel_script
    echo 'if [[ ! grep -q "$IFACE" /proc/net/dev || $1 == "stop" ]]; then' >> $babel_script
    echo '    if ! grep -q "$IFACE" /proc/net/dev; then' >> $babel_script
    echo '        echo "Interface $IFACE was not found"' >> $babel_script
    echo '    else' >> $babel_script
    echo '        echo "Stopping"' >> $babel_script
    echo '    fi' >> $babel_script
    echo '    ifconfig $IFACE down' >> $babel_script
    echo '    pkill babeld' >> $babel_script
    echo '    systemctl restart network-manager' >> $babel_script
    echo '    exit 1' >> $babel_script
    echo 'fi' >> $babel_script
    echo '' >> $babel_script
    echo 'systemctl stop network-manager' >> $babel_script
    echo 'ifconfig $IFACE down' >> $babel_script
    echo -n 'iwconfig $IFACE mode ad-hoc channel ' >> $babel_script
    echo "$WIFI_CHANNEL essid \"$WIFI_SSID\"" >> $babel_script
    echo 'ifconfig $IFACE up' >> $babel_script
    echo -n 'ifconfig $IFACE:avahi ' >> $babel_script
    echo -n "$LOCAL_NETWORK_STATIC_IP_ADDRESS netmask " >> $babel_script
    echo '255.255.255.0 broadcast 192.168.13.255' >> $babel_script
    echo -n 'babeld -D $IFACE:avahi -p ' >> $babel_script
    echo -n "$BABEL_PORT -d 5 " >> $babel_script
    echo '$IFACE' >> $babel_script
    echo 'exit 0' >> $babel_script
    chmod +x $babel_script
    echo '[Unit]' > ${rootdir}/etc/systemd/system/babel.service
    echo 'Description=Babel Mesh' >> ${rootdir}/etc/systemd/system/babel.service
    echo '' >> ${rootdir}/etc/systemd/system/babel.service
    echo '[Service]' >> ${rootdir}/etc/systemd/system/babel.service
    echo 'Type=oneshot' >> ${rootdir}/etc/systemd/system/babel.service
    echo "ExecStart=$babel_script start" >> ${rootdir}/etc/systemd/system/babel.service
    echo "ExecStop=$babel_script stop" >> ${rootdir}/etc/systemd/system/babel.service
    echo 'RemainAfterExit=yes' >> ${rootdir}/etc/systemd/system/babel.service
    echo '' >> ${rootdir}/etc/systemd/system/babel.service
    echo '# Allow time for the server to start/stop' >> ${rootdir}/etc/systemd/system/babel.service
    echo 'TimeoutSec=300' >> ${rootdir}/etc/systemd/system/babel.service
    echo '' >> ${rootdir}/etc/systemd/system/babel.service
    echo '[Install]' >> /etc/systemd/system/babel.service
    echo 'WantedBy=multi-user.target' >> ${rootdir}/etc/systemd/system/babel.service
    $CHROOT_PREFIX systemctl enable babel
}
function install_babel_remove {
    $CHROOT_PREFIX systemctl stop babel
    $CHROOT_PREFIX apt-get -y remove --purge babeld
    rm ${rootdir}/var/lib/babel
    rm ${rootdir}/etc/systemd/system/babel.service
}
function mesh_avahi {
    $CHROOT_PREFIX apt-get -y install avahi-utils avahi-autoipd avahi-dnsconfd
    decarray=( 1 2 3 4 5 6 7 8 9 0 )
    PEER_ID=${decarray[$RANDOM%10]}${decarray[$RANDOM%10]}${decarray[$RANDOM%10]}${decarray[$RANDOM%10]}${decarray[$RANDOM%10]}${decarray[$RANDOM%10]}${decarray[$RANDOM%10]}${decarray[$RANDOM%10]}
    sed -i "s|#host-name=.*|host-name=P$PEER_ID|g" $rootdir/etc/avahi/avahi-daemon.conf
    if [ ! -d $rootdir/etc/avahi/services ]; then
	mkdir -p $rootdir/etc/avahi/services
    fi
    # remove an avahi service which isn't used
    if [ -f $rootdir/etc/avahi/services/udisks.service ]; then
	rm $rootdir/etc/avahi/services/udisks.service
    fi
    # Add an ssh service
    echo '<?xml version="1.0" standalone="no"?><!--*-nxml-*-->' > $rootdir/etc/avahi/services/ssh.service
    echo '<!DOCTYPE service-group SYSTEM "avahi-service.dtd">' >> $rootdir/etc/avahi/services/ssh.service
    echo '<service-group>' >> $rootdir/etc/avahi/services/ssh.service
    echo '  <name replace-wildcards="yes">%h SSH</name>' >> $rootdir/etc/avahi/services/ssh.service
    echo '  <service>' >> $rootdir/etc/avahi/services/ssh.service
    echo '    <type>_ssh._tcp</type>' >> $rootdir/etc/avahi/services/ssh.service
    echo "    <port>$SSH_PORT</port>" >> $rootdir/etc/avahi/services/ssh.service
    echo '  </service>' >> $rootdir/etc/avahi/services/ssh.service
    echo '</service-group>' >> $rootdir/etc/avahi/services/ssh.service
    # keep the daemon running
    WATCHDOG_SCRIPT_NAME="keepon"
    echo '' >> $rootdir/usr/bin/$WATCHDOG_SCRIPT_NAME
    echo '# keep avahi daemon running' >> $rootdir/usr/bin/$WATCHDOG_SCRIPT_NAME
    echo 'AVAHI_RUNNING=$(pgrep avahi-daemon > /dev/null && echo Running)' >> $rootdir/usr/bin/$WATCHDOG_SCRIPT_NAME
    echo 'if [ ! $AVAHI_RUNNING ]; then' >> $rootdir/usr/bin/$WATCHDOG_SCRIPT_NAME
    echo '  systemctl start avahi-daemon' >> $rootdir/usr/bin/$WATCHDOG_SCRIPT_NAME
    echo '  echo -n $CURRENT_DATE >> $LOGFILE' >> $rootdir/usr/bin/$WATCHDOG_SCRIPT_NAME
    echo '  echo " Avahi daemon restarted" >> $LOGFILE' >> $rootdir/usr/bin/$WATCHDOG_SCRIPT_NAME
    echo 'fi' >> $rootdir/usr/bin/$WATCHDOG_SCRIPT_NAME
    chmod +x $rootdir/usr/bin/$WATCHDOG_SCRIPT_NAME
}
function install_babel_client {
    # TODO to be fixed
    TOXIC_FILE=$(cat /usr/share/${PROJECT_NAME}/apps/${PROJECT_NAME}-app-tox | grep "TOXIC_FILE=" | head -n 1 | awk -F '=' '{print $2}')
    if [ ! -f ${rootdir}/tmp/meshtype ]; then
	$CHROOT_PREFIX sudo apt-get -y install babeld
	if [ ! -f $TOXIC_FILE ]; then
	    $CHROOT_PREFIX sudo apt-get -y install toxic
	fi
	CURR_DIR=$(pwd)
	if [ ! -f ~/develop/toxid ]; then
	    if [ ! -f ~/develop ]; then
		mkdir ~/develop
	    fi
	    cd ~/develop
	    git_clone $TOXID_REPO ~/develop/toxid
	fi
	cd ~/develop/toxid
	sudo make install
	cd $CURR_DIR
    fi
    babel_script=${rootdir}/tmp/babel
    echo '#!/bin/bash' > $babel_script
    echo '' >> $babel_script
    echo 'if [[ $1 == "ls" || $1 == "list" ]]; then' >> $babel_script
    echo '    avahi-browse -atl' >> $babel_script
    echo '    exit 0' >> $babel_script
    echo 'fi' >> $babel_script
    echo '' >> $babel_script
    echo 'if [[ $1 == "start" ]]; then' >> $babel_script
    echo '    if [ -f /tmp/meshtype ] ; then' >> $babel_script
    echo '        echo "Mesh already running"' >> $babel_script
    echo '        return' >> $babel_script
    echo '    fi' >> $batman_script
    echo '    # install avahi' >> $babel_script
    echo '    apt-get -y install avahi-utils avahi-autoipd avahi-daemon avahi-dnsconfd bittornado' >> $babel_script
    echo '    sed -i "s|#host-name=.*|host-name=$(hostname)|g" /etc/avahi/avahi-daemon.conf' >> $babel_script
    echo '    sed -i "s|host-name=.*|host-name=$(hostname)|g" /etc/avahi/avahi-daemon.conf' >> $babel_script
    echo '    if [ -f /bin/systemctl ]; then' >> $babel_script
    echo '        systemctl restart avahi-daemon' >> $babel_script
    echo '    else' >> $babel_script
    echo '        service avahi-daemon restart' >> $babel_script
    echo '    fi' >> $babel_script
    echo '    echo "babel" > /tmp/meshtype' >> $babel_script
    echo 'fi' >> $babel_script
    echo '' >> $babel_script
    echo "IFACE=$WIFI_INTERFACE" >> $babel_script
    echo 'if [[ $IFACE == "wlan0" ]]; then' >> $babel_script
    echo '    if grep -q "wlan1" /proc/net/dev; then' >> $babel_script
    echo '        IFACE=wlan1' >> $babel_script
    echo '    fi' >> $babel_script
    echo 'fi' >> $babel_script
    echo 'if [[ $IFACE == "wlan0" ]]; then' >> $babel_script
    echo '    if grep -q "wlan2" /proc/net/dev; then' >> $babel_script
    echo '        IFACE=wlan2' >> $babel_script
    echo '    fi' >> $babel_script
    echo 'fi' >> $babel_script
    echo 'if [[ $IFACE == "wlan0" ]]; then' >> $babel_script
    echo '    if grep -q "wlan3" /proc/net/dev; then' >> $babel_script
    echo '        IFACE=wlan3' >> $babel_script
    echo '    fi' >> $babel_script
    echo 'fi' >> $babel_script
    echo '' >> $babel_script
    echo 'if [[ ! grep -q "$IFACE" /proc/net/dev || $1 == "stop" ]]; then' >> $babel_script
    echo '    if ! grep -q "$IFACE" /proc/net/dev; then' >> $babel_script
    echo '        echo "Interface $IFACE was not found"' >> $babel_script
    echo '    else' >> $babel_script
    echo '        echo "Stopping"' >> $babel_script
    echo '    fi' >> $babel_script
    echo '    ifconfig $IFACE down' >> $babel_script
    echo '    pkill babeld' >> $babel_script
    echo '    if [ -f /bin/systemctl ]; then' >> $babel_script
    echo '        systemctl restart network-manager' >> $babel_script
    echo '    else' >> $babel_script
    echo '        service network-manager restart' >> $babel_script
    echo '    fi' >> $babel_script
    echo '    exit 1' >> $babel_script
    echo 'fi' >> $babel_script
    echo '' >> $babel_script
    echo 'if [ -f /bin/systemctl ]; then' >> $babel_script
    echo '    systemctl stop network-manager' >> $babel_script
    echo 'else' >> $babel_script
    echo '    service network-manager stop' >> $babel_script
    echo 'fi' >> $babel_script
    echo 'ifconfig $IFACE down' >> $babel_script
    echo -n 'iwconfig $IFACE mode ad-hoc channel ' >> $babel_script
    echo "$WIFI_CHANNEL essid \"$WIFI_SSID\"" >> $babel_script
    echo 'ifconfig $IFACE up' >> $babel_script
    echo -n 'ifconfig $IFACE:avahi ' >> $babel_script
    echo -n "$LOCAL_NETWORK_STATIC_IP_ADDRESS netmask " >> $babel_script
    echo '255.255.255.0 broadcast 192.168.13.255' >> $babel_script
    echo -n 'babeld -D $IFACE:avahi -p ' >> $babel_script
    echo -n "$BABEL_PORT -d 5 " >> $babel_script
    echo '$IFACE' >> $babel_script
    echo 'exit 0' >> $babel_script
    chmod +x $babel_script
    sudo mv $babel_script ${rootdir}/usr/bin/babel
}
function install_batman_remove {
    systemctl stop batman
    rm $rootdir/var/lib/batman
    rm $rootdir/etc/systemd/system/batman.service
}
function install_batman {
    $CHROOT_PREFIX apt-get -y install iproute bridge-utils libnetfilter-conntrack3 batctl
    $CHROOT_PREFIX apt-get -y install python-dev libevent-dev ebtables python-pip git
    $CHROOT_PREFIX apt-get -y install wireless-tools rfkill
    if ! grep -q "batman_adv" $rootdir/etc/modules; then
	echo 'batman_adv' >> $rootdir/etc/modules
    fi
    BATMAN_SCRIPT=$rootdir/var/lib/batman
    if [ -f /usr/local/bin/${PROJECT_NAME}-mesh-batman ]; then
	cp /usr/local/bin/${PROJECT_NAME}-mesh-batman $BATMAN_SCRIPT
    else
	cp /usr/bin/${PROJECT_NAME}-mesh-batman $BATMAN_SCRIPT
    fi
    BATMAN_DAEMON=$rootdir/etc/systemd/system/batman.service
    echo '[Unit]' > $BATMAN_DAEMON
    echo 'Description=B.A.T.M.A.N. Advanced' >> $BATMAN_DAEMON
    echo 'After=network.target' >> $BATMAN_DAEMON
    echo '' >> $BATMAN_DAEMON
    echo '[Service]' >> $BATMAN_DAEMON
    echo 'RemainAfterExit=yes' >> $BATMAN_DAEMON
    echo "ExecStart=/var/lib/batman start" >> $BATMAN_DAEMON
    echo "ExecStop=/var/lib/batman stop" >> $BATMAN_DAEMON
    echo 'Restart=on-failure' >> $BATMAN_DAEMON
    echo 'SuccessExitStatus=3 4' >> $BATMAN_DAEMON
    echo 'RestartForceExitStatus=3 4' >> $BATMAN_DAEMON
    echo '' >> $BATMAN_DAEMON
    echo '# Allow time for the server to start/stop' >> $BATMAN_DAEMON
    echo 'TimeoutSec=300' >> $BATMAN_DAEMON
    echo '' >> $BATMAN_DAEMON
    echo '[Install]' >> $BATMAN_DAEMON
    echo 'WantedBy=multi-user.target' >> $BATMAN_DAEMON
    $CHROOT_PREFIX systemctl enable batman
}
function mesh_firewall {
    FIREWALL_FILENAME=${rootdir}/etc/systemd/system/meshfirewall.service
    MESH_FIREWALL_SCRIPT=${rootdir}/usr/bin/mesh-firewall
    echo '#!/bin/bash' > $MESH_FIREWALL_SCRIPT
    echo 'iptables -P INPUT ACCEPT' >> $MESH_FIREWALL_SCRIPT
    echo 'ip6tables -P INPUT ACCEPT' >> $MESH_FIREWALL_SCRIPT
    echo 'iptables -F' >> $MESH_FIREWALL_SCRIPT
    echo 'ip6tables -F' >> $MESH_FIREWALL_SCRIPT
    echo 'iptables -t nat -F' >> $MESH_FIREWALL_SCRIPT
    echo 'ip6tables -t nat -F' >> $MESH_FIREWALL_SCRIPT
    echo 'iptables -X' >> $MESH_FIREWALL_SCRIPT
    echo 'ip6tables -X' >> $MESH_FIREWALL_SCRIPT
    echo 'iptables -P INPUT DROP' >> $MESH_FIREWALL_SCRIPT
    echo 'ip6tables -P INPUT DROP' >> $MESH_FIREWALL_SCRIPT
    echo 'iptables -A INPUT -i lo -j ACCEPT' >> $MESH_FIREWALL_SCRIPT
    echo 'iptables -A INPUT -m conntrack --ctstate ESTABLISHED,RELATED -j ACCEPT' >> $MESH_FIREWALL_SCRIPT
    echo '' >> $MESH_FIREWALL_SCRIPT
    echo '# Make sure incoming tcp connections are SYN packets' >> $MESH_FIREWALL_SCRIPT
    echo 'iptables -A INPUT -p tcp ! --syn -m state --state NEW -j DROP' >> $MESH_FIREWALL_SCRIPT
    echo '' >> $MESH_FIREWALL_SCRIPT
    echo '# Drop packets with incoming fragments' >> $MESH_FIREWALL_SCRIPT
    echo 'iptables -A INPUT -f -j DROP' >> $MESH_FIREWALL_SCRIPT
    echo '' >> $MESH_FIREWALL_SCRIPT
    echo '# Drop bogons' >> $MESH_FIREWALL_SCRIPT
    echo 'iptables -A INPUT -p tcp --tcp-flags ALL ALL -j DROP' >> $MESH_FIREWALL_SCRIPT
    echo 'iptables -A INPUT -p tcp --tcp-flags ALL FIN,PSH,URG -j DROP' >> $MESH_FIREWALL_SCRIPT
    echo 'iptables -A INPUT -p tcp --tcp-flags ALL SYN,RST,ACK,FIN,URG -j DROP' >> $MESH_FIREWALL_SCRIPT
    echo '' >> $MESH_FIREWALL_SCRIPT
    echo '# Incoming malformed NULL packets:' >> $MESH_FIREWALL_SCRIPT
    echo 'iptables -A INPUT -p tcp --tcp-flags ALL NONE -j DROP' >> $MESH_FIREWALL_SCRIPT
    echo '' >> $MESH_FIREWALL_SCRIPT
    echo "iptables -A INPUT -p tcp --dport $TOX_PORT -j ACCEPT" >> $MESH_FIREWALL_SCRIPT
    echo "iptables -A INPUT -i $WIFI_INTERFACE -p udp --dport $ZERONET_PORT -j ACCEPT" >> $MESH_FIREWALL_SCRIPT
    echo "iptables -A INPUT -i $WIFI_INTERFACE -p tcp --dport $ZERONET_PORT -j ACCEPT" >> $MESH_FIREWALL_SCRIPT
    echo "iptables -A INPUT -i $WIFI_INTERFACE -p udp --dport $TRACKER_PORT -j ACCEPT" >> $MESH_FIREWALL_SCRIPT
    echo "iptables -A INPUT -i $WIFI_INTERFACE -p tcp --dport $TRACKER_PORT -j ACCEPT" >> $MESH_FIREWALL_SCRIPT
    echo "iptables -A INPUT -i $WIFI_INTERFACE -p udp --dport 1900 -j ACCEPT" >> $MESH_FIREWALL_SCRIPT
    chmod +x $MESH_FIREWALL_SCRIPT
    echo '[Unit]' > $FIREWALL_FILENAME
    echo 'Description=Mesh Firewall' >> $FIREWALL_FILENAME
    echo '' >> $FIREWALL_FILENAME
    echo '[Service]' >> $FIREWALL_FILENAME
    echo 'Type=oneshot' >> $FIREWALL_FILENAME
    echo 'ExecStart=/usr/bin/mesh-firewall' >> $FIREWALL_FILENAME
    echo 'RemainAfterExit=no' >> $FIREWALL_FILENAME
    echo '' >> $FIREWALL_FILENAME
    echo 'TimeoutSec=30' >> $FIREWALL_FILENAME
    echo '' >> $FIREWALL_FILENAME
    echo '[Install]' >> $FIREWALL_FILENAME
    echo 'WantedBy=multi-user.target' >> $FIREWALL_FILENAME
    $CHROOT_PREFIX systemctl enable meshfirewall
}
function enable_tox_repo {
    sudo sh -c "echo 'deb http://download.opensuse.org/repositories/home:/antonbatenev:/tox/Debian_8.0/ /' > /etc/apt/sources.list.d/tox.list"
    wget http://download.opensuse.org/repositories/home:antonbatenev:tox/Debian_8.0/Release.key
    sudo sh -c "apt-key add - < Release.key"
    sudo apt-get update
    echo "Tox Repository Installed."
}
function mesh_tox_client_qtox {
    enable_tox_repo
    sudo apt-get -y install qtox
    echo "qTox Installed."
}
function mesh_tox_client_toxic_from_repo {
    enable_tox_repo
    sudo apt-get -y install toxic
    echo "Toxic Installed."
}
while [[ $# > 1 ]]
do
    key="$1"
    case $key in
	-h|--help)
	    show_help
	    ;;
	-f|--function)
	    shift
	    FN="$1"
	    ;;
	-r|--rootdir)
	    shift
	    rootdir="$1"
	    CHROOT_PREFIX='chroot "${rootdir}"'
	    ;;
	-w|--wifi|--interface)
	    shift
	    WIFI_INTERFACE="$1"
	    ;;
	-m|--mirror)
	    shift
	    FRIENDS_MIRRORS_SERVER="$1"
	    ;;
	--remove)
	    shift
	    REMOVE="$1"
	    ;;
	*)
	    # unknown option
	    ;;
    esac
    shift
done
if [[ $FN == 'babel' ]]; then
    if [[ $REMOVE != 'yes' ]]; then
	install_babel
    else
	install_babel_remove
    fi
fi
if [[ $FN == 'babel_client' ]]; then
    install_babel_client
fi
if [[ $FN == 'avahi' ]]; then
    mesh_avahi
fi
if [[ $FN == 'firewall' ]]; then
    mesh_firewall
fi
if [[ $FN == 'batman' ]]; then
    if [[ $REMOVE != 'yes' ]]; then
	install_batman
    else
	install_batman_remove
    fi
fi
if [[ $FN == 'qtox' ]]; then
    mesh_tox_client_qtox
fi
if [[ $FN == 'toxic' ]]; then
    mesh_tox_client_toxic_from_repo
fi
exit 0
 |