freedombone-restore-local 25KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732
  1. #!/bin/bash
  2. #
  3. # .---. . .
  4. # | | |
  5. # |--- .--. .-. .-. .-.| .-. .--.--. |.-. .-. .--. .-.
  6. # | | (.-' (.-' ( | ( )| | | | )( )| | (.-'
  7. # ' ' --' --' -' - -' ' ' -' -' -' ' - --'
  8. #
  9. # Freedom in the Cloud
  10. #
  11. # Restore from local storage - typically a USB drive
  12. # License
  13. # =======
  14. #
  15. # Copyright (C) 2015-2016 Bob Mottram <bob@robotics.uk.to>
  16. #
  17. # This program is free software: you can redistribute it and/or modify
  18. # it under the terms of the GNU Affero General Public License as published by
  19. # the Free Software Foundation, either version 3 of the License, or
  20. # (at your option) any later version.
  21. #
  22. # This program is distributed in the hope that it will be useful,
  23. # but WITHOUT ANY WARRANTY; without even the implied warranty of
  24. # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
  25. # GNU Affero General Public License for more details.
  26. #
  27. # You should have received a copy of the GNU Affero General Public License
  28. # along with this program. If not, see <http://www.gnu.org/licenses/>.
  29. PROJECT_NAME='freedombone'
  30. COMPLETION_FILE=$HOME/${PROJECT_NAME}-completed.txt
  31. CONFIGURATION_FILE=$HOME/${PROJECT_NAME}.cfg
  32. BACKUP_EXTRA_DIRECTORIES=/root/backup-extra-dirs.csv
  33. # whether to restore everything or just a specific application
  34. RESTORE_APP='all'
  35. export TEXTDOMAIN=${PROJECT_NAME}-restore-local
  36. export TEXTDOMAINDIR="/usr/share/locale"
  37. PROJECT_INSTALL_DIR=/usr/local/bin
  38. if [ -f /usr/bin/${PROJECT_NAME} ]; then
  39. PROJECT_INSTALL_DIR=/usr/bin
  40. fi
  41. source $PROJECT_INSTALL_DIR/${PROJECT_NAME}-vars
  42. # include utils which allow function_check, go and drive mount
  43. UTILS_FILES=/usr/share/${PROJECT_NAME}/utils/${PROJECT_NAME}-utils-*
  44. for f in $UTILS_FILES
  45. do
  46. source $f
  47. done
  48. USB_DRIVE=/dev/sdb1
  49. USB_MOUNT=/mnt/usb
  50. ADMIN_USERNAME=''
  51. ADMIN_NAME=
  52. read_config_param USB_DRIVE
  53. if [ -f $COMPLETION_FILE ]; then
  54. ADMIN_USERNAME=$(get_completion_param "Admin user")
  55. fi
  56. # MariaDB password
  57. DATABASE_PASSWORD=$(cat /root/dbpass)
  58. function check_backup_exists {
  59. if [ ! -d $USB_MOUNT/backup ]; then
  60. echo $"No backup directory found on the USB drive."
  61. set_user_permissions
  62. backup_unmount_drive
  63. exit 2
  64. fi
  65. }
  66. function check_admin_user {
  67. echo $"Checking that admin user exists"
  68. if [ ! -d /home/$ADMIN_USERNAME ]; then
  69. echo $"Username $ADMIN_USERNAME not found. Reinstall ${PROJECT_NAME} with this username."
  70. set_user_permissions
  71. backup_unmount_drive
  72. exit 295
  73. fi
  74. }
  75. function copy_gpg_keys {
  76. echo $"Copying GPG keys from admin user to root"
  77. cp -r /home/$ADMIN_USERNAME/.gnupg /root
  78. }
  79. function restore_directory_from_usb {
  80. if [ ! -d ${1} ]; then
  81. mkdir ${1}
  82. fi
  83. obnam restore -r $USB_MOUNT/backup/${2} --to ${1}
  84. }
  85. function restore_configuration {
  86. if [[ $RESTORE_APP != 'all' ]]; then
  87. if [[ $RESTORE_APP != 'config' ]]; then
  88. return
  89. fi
  90. fi
  91. # this restores *.cfg and COMPLETION_FILE
  92. if [ -d $USB_MOUNT/backup/config ]; then
  93. echo $"Restoring configuration files"
  94. temp_restore_dir=/root/tempconfig
  95. restore_directory_from_usb $temp_restore_dir config
  96. if [ -f $temp_restore_dir/root/${PROJECT_NAME}.cfg ]; then
  97. cp -f $temp_restore_dir/root/${PROJECT_NAME}.cfg $CONFIGURATION_FILE
  98. if [ ! "$?" = "0" ]; then
  99. set_user_permissions
  100. backup_unmount_drive
  101. rm -rf $temp_restore_dir
  102. exit 5294
  103. fi
  104. fi
  105. if [ -f $CONFIGURATION_FILE ]; then
  106. # install according to the config file
  107. freedombone -c $CONFIGURATION_FILE
  108. fi
  109. if [ -f $temp_restore_dir/root/${PROJECT_NAME}-completed.txt ]; then
  110. cp -f $temp_restore_dir/root/${PROJECT_NAME}-completed.txt $COMPLETION_FILE
  111. if [ ! "$?" = "0" ]; then
  112. set_user_permissions
  113. backup_unmount_drive
  114. rm -rf $temp_restore_dir
  115. exit 6382
  116. fi
  117. fi
  118. if [ -f ${temp_restore_dir}${BACKUP_EXTRA_DIRECTORIES} ]; then
  119. cp -f ${temp_restore_dir}${BACKUP_EXTRA_DIRECTORIES} ${BACKUP_EXTRA_DIRECTORIES}
  120. if [ ! "$?" = "0" ]; then
  121. set_user_permissions
  122. backup_unmount_drive
  123. rm -rf $temp_restore_dir
  124. exit 62121
  125. fi
  126. fi
  127. # restore nginx password hashes
  128. if [ -f $temp_restore_dir/root/htpasswd ]; then
  129. cp -f $temp_restore_dir/root/htpasswd /etc/nginx/.htpasswd
  130. fi
  131. rm -rf $temp_restore_dir
  132. fi
  133. }
  134. function same_admin_user {
  135. PREV_ADMIN_USERNAME=$(get_completion_param "Admin user")
  136. if [[ "$PREV_ADMIN_USERNAME" != "$ADMIN_USERNAME" ]]; then
  137. echo $"The admin username has changed from $PREV_ADMIN_USERNAME to $ADMIN_USERNAME. To restore you will first need to install a new ${PROJECT_NAME} system with an initial admin user named $PREV_ADMIN_USERNAME"
  138. set_user_permissions
  139. backup_unmount_drive
  140. exit 73265
  141. fi
  142. }
  143. function restore_mariadb {
  144. if [[ $RESTORE_APP != 'all' ]]; then
  145. if [[ $RESTORE_APP != 'mariadb' ]]; then
  146. return
  147. fi
  148. fi
  149. if [ -d $USB_MOUNT/backup/mariadb ]; then
  150. echo $"Restoring mysql settings"
  151. temp_restore_dir=/root/tempmariadb
  152. restore_directory_from_usb $temp_restore_dir mariadb
  153. echo $"Get the MariaDB password from the backup"
  154. if [ ! -f ${temp_restore_dir}${temp_restore_dir}/db ]; then
  155. echo $"MariaDB password file not found"
  156. exit 495
  157. fi
  158. BACKUP_MARIADB_PASSWORD=$(cat ${temp_restore_dir}${temp_restore_dir}/db)
  159. if [[ $BACKUP_MARIADB_PASSWORD != $DATABASE_PASSWORD ]]; then
  160. echo $"Restore the MariaDB user table"
  161. mysqlsuccess=$(mysql -u root --password=$DATABASE_PASSWORD mysql -o < ${temp_restore_dir}${temp_restore_dir}/mysql.sql)
  162. if [ ! "$?" = "0" ]; then
  163. echo $"Try again using the password obtained from backup"
  164. mysqlsuccess=$(mysql -u root --password=$BACKUP_MARIADB_PASSWORD mysql -o < ${temp_restore_dir}${temp_restore_dir}/mysql.sql)
  165. fi
  166. if [ ! "$?" = "0" ]; then
  167. echo "$mysqlsuccess"
  168. set_user_permissions
  169. backup_unmount_drive
  170. exit 962
  171. fi
  172. echo $"Restarting database"
  173. service mysql restart
  174. echo $"Change the MariaDB password to the backup version"
  175. DATABASE_PASSWORD=$BACKUP_MARIADB_PASSWORD
  176. fi
  177. shred -zu ${temp_restore_dir}${temp_restore_dir}/db
  178. rm -rf $temp_restore_dir
  179. # Change database password file
  180. echo "$DATABASE_PASSWORD" > /root/dbpass
  181. chmod 600 /root/dbpass
  182. fi
  183. }
  184. function restore_letsencrypt {
  185. if [[ $RESTORE_APP != 'all' ]]; then
  186. if [[ $RESTORE_APP != 'letsencrypt' ]]; then
  187. return
  188. fi
  189. fi
  190. if [ -d $USB_MOUNT/backup/letsencrypt ]; then
  191. echo $"Restoring Lets Encrypt settings"
  192. restore_directory_from_usb / letsencrypt
  193. fi
  194. }
  195. function restore_tor {
  196. if [[ $RESTORE_APP != 'all' ]]; then
  197. if [[ $RESTORE_APP != 'tor' ]]; then
  198. return
  199. fi
  200. fi
  201. if [ -d $USB_MOUNT/backup/tor ]; then
  202. echo $"Restoring Tor settings"
  203. restore_directory_from_usb / tor
  204. fi
  205. }
  206. function restore_mutt_settings {
  207. if [[ $RESTORE_APP != 'all' ]]; then
  208. if [[ $RESTORE_APP != 'mutt' ]]; then
  209. return
  210. fi
  211. fi
  212. if [ -d $USB_MOUNT/backup/mutt ]; then
  213. for d in $USB_MOUNT/backup/mutt/*/ ; do
  214. USERNAME=$(echo "$d" | awk -F '/' '{print $6}')
  215. if [[ $(is_valid_user "$USERNAME") == "1" ]]; then
  216. if [ ! -d /home/$USERNAME ]; then
  217. ${PROJECT_NAME}-adduser $USERNAME
  218. fi
  219. echo $"Restoring Mutt settings for $USERNAME"
  220. temp_restore_dir=/root/tempmutt
  221. restore_directory_from_usb $temp_restore_dir mutt/$USERNAME
  222. if [ -f $temp_restore_dir/home/$USERNAME/tempbackup/.muttrc ]; then
  223. cp -f $temp_restore_dir/home/$USERNAME/tempbackup/.muttrc /home/$USERNAME/.muttrc
  224. fi
  225. if [ -f $temp_restore_dir/home/$USERNAME/tempbackup/Muttrc ]; then
  226. cp -f $temp_restore_dir/home/$USERNAME/tempbackup/Muttrc /etc/Muttrc
  227. fi
  228. if [ ! "$?" = "0" ]; then
  229. rm -rf $temp_restore_dir
  230. set_user_permissions
  231. backup_unmount_drive
  232. exit 276
  233. fi
  234. rm -rf $temp_restore_dir
  235. fi
  236. done
  237. fi
  238. }
  239. function restore_gpg {
  240. if [[ $RESTORE_APP != 'all' ]]; then
  241. if [[ $RESTORE_APP != 'gpg' ]]; then
  242. return
  243. fi
  244. fi
  245. if [ -d $USB_MOUNT/backup/gnupg ]; then
  246. for d in $USB_MOUNT/backup/gnupg/*/ ; do
  247. USERNAME=$(echo "$d" | awk -F '/' '{print $6}')
  248. if [[ $(is_valid_user "$USERNAME") == "1" ]]; then
  249. if [ ! -d /home/$USERNAME ]; then
  250. ${PROJECT_NAME}-adduser $USERNAME
  251. fi
  252. echo $"Restoring gnupg settings for $USERNAME"
  253. temp_restore_dir=/root/tempgnupg
  254. restore_directory_from_usb $temp_restore_dir gnupg/$USERNAME
  255. cp -r $temp_restore_dir/home/$USERNAME/.gnupg /home/$USERNAME/
  256. if [ ! "$?" = "0" ]; then
  257. rm -rf $temp_restore_dir
  258. set_user_permissions
  259. backup_unmount_drive
  260. exit 276
  261. fi
  262. rm -rf $temp_restore_dir
  263. if [[ "$USERNAME" == "$ADMIN_USERNAME" ]]; then
  264. cp -r /home/$USERNAME/.gnupg /root
  265. if [ ! "$?" = "0" ]; then
  266. set_user_permissions
  267. backup_unmount_drive
  268. exit 283
  269. fi
  270. fi
  271. fi
  272. done
  273. fi
  274. }
  275. function restore_procmail {
  276. if [[ $RESTORE_APP != 'all' ]]; then
  277. if [[ $RESTORE_APP != 'procmail' ]]; then
  278. return
  279. fi
  280. fi
  281. if [ -d $USB_MOUNT/backup/procmail ]; then
  282. for d in $USB_MOUNT/backup/procmail/*/ ; do
  283. USERNAME=$(echo "$d" | awk -F '/' '{print $6}')
  284. if [[ $(is_valid_user "$USERNAME") == "1" ]]; then
  285. if [ ! -d /home/$USERNAME ]; then
  286. ${PROJECT_NAME}-adduser $USERNAME
  287. fi
  288. echo $"Restoring procmail settings for $USERNAME"
  289. temp_restore_dir=/root/tempprocmail
  290. restore_directory_from_usb $temp_restore_dir procmail/$USERNAME
  291. cp -f $temp_restore_dir/home/$USERNAME/tempbackup/.procmailrc /home/$USERNAME/
  292. if [ ! "$?" = "0" ]; then
  293. rm -rf $temp_restore_dir
  294. set_user_permissions
  295. backup_unmount_drive
  296. exit 276
  297. fi
  298. rm -rf $temp_restore_dir
  299. fi
  300. done
  301. fi
  302. }
  303. function restore_spamassassin {
  304. if [[ $RESTORE_APP != 'all' ]]; then
  305. if [[ $RESTORE_APP != 'spamassassin' ]]; then
  306. return
  307. fi
  308. fi
  309. if [ -d $USB_MOUNT/backup/spamassassin ]; then
  310. for d in $USB_MOUNT/backup/spamassassin/*/ ; do
  311. USERNAME=$(echo "$d" | awk -F '/' '{print $6}')
  312. if [[ $(is_valid_user "$USERNAME") == "1" ]]; then
  313. if [ -d $USB_MOUNT/backup/spamassassin/$USERNAME ]; then
  314. if [ ! -d /home/$USERNAME ]; then
  315. ${PROJECT_NAME}-adduser $USERNAME
  316. fi
  317. echo $"Restoring spamassassin settings for $USERNAME"
  318. temp_restore_dir=/root/tempspamassassin
  319. restore_directory_from_usb $temp_restore_dir spamassassin/$USERNAME
  320. cp -rf $temp_restore_dir/home/$USERNAME/.spamassassin /home/$USERNAME/
  321. if [ ! "$?" = "0" ]; then
  322. rm -rf $temp_restore_dir
  323. set_user_permissions
  324. backup_unmount_drive
  325. exit 276
  326. fi
  327. rm -rf $temp_restore_dir
  328. fi
  329. fi
  330. done
  331. fi
  332. }
  333. function restore_admin_readme {
  334. if [[ $RESTORE_APP != 'all' ]]; then
  335. if [[ $RESTORE_APP != 'readme' ]]; then
  336. return
  337. fi
  338. fi
  339. if [ -d $USB_MOUNT/backup/readme ]; then
  340. echo $"Restoring admin user README"
  341. # Make a backup of the original README file
  342. # incase old passwords need to be used
  343. if [ -f /home/$ADMIN_USERNAME/README ]; then
  344. if [ ! -f /home/$ADMIN_USERNAME/README_original ]; then
  345. cp /home/$ADMIN_USERNAME/README /home/$ADMIN_USERNAME/README_original
  346. fi
  347. fi
  348. temp_restore_dir=/root/tempreadme
  349. restore_directory_from_usb $temp_restore_dir readme
  350. cp -f $temp_restore_dir/home/$ADMIN_USERNAME/tempbackup/README /home/$ADMIN_USERNAME/
  351. if [ ! "$?" = "0" ]; then
  352. rm -rf $temp_restore_dir
  353. set_user_permissions
  354. backup_unmount_drive
  355. exit 276
  356. fi
  357. rm -rf $temp_restore_dir
  358. fi
  359. }
  360. function restore_user_ssh_keys {
  361. if [[ $RESTORE_APP != 'all' ]]; then
  362. if [[ $RESTORE_APP != 'ssh' ]]; then
  363. return
  364. fi
  365. fi
  366. if [ -d $USB_MOUNT/backup/ssh ]; then
  367. for d in $USB_MOUNT/backup/ssh/*/ ; do
  368. USERNAME=$(echo "$d" | awk -F '/' '{print $6}')
  369. if [[ $(is_valid_user "$USERNAME") == "1" ]]; then
  370. if [ ! -d /home/$USERNAME ]; then
  371. ${PROJECT_NAME}-adduser $USERNAME
  372. fi
  373. echo $"Restoring ssh keys for $USERNAME"
  374. temp_restore_dir=/root/tempssh
  375. restore_directory_from_usb $temp_restore_dir ssh/$USERNAME
  376. cp -r $temp_restore_dir/home/$USERNAME/.ssh /home/$USERNAME/
  377. if [ ! "$?" = "0" ]; then
  378. rm -rf $temp_restore_dir
  379. set_user_permissions
  380. backup_unmount_drive
  381. exit 664
  382. fi
  383. rm -rf $temp_restore_dir
  384. fi
  385. done
  386. fi
  387. }
  388. function restore_user_config {
  389. if [[ $RESTORE_APP != 'all' ]]; then
  390. if [[ $RESTORE_APP != 'userconfig' ]]; then
  391. return
  392. fi
  393. fi
  394. if [ -d $USB_MOUNT/backup/config ]; then
  395. for d in $USB_MOUNT/backup/config/*/ ; do
  396. USERNAME=$(echo "$d" | awk -F '/' '{print $6}')
  397. if [[ $(is_valid_user "$USERNAME") == "1" ]]; then
  398. if [ ! -d /home/$USERNAME ]; then
  399. ${PROJECT_NAME}-adduser $USERNAME
  400. fi
  401. echo $"Restoring config files for $USERNAME"
  402. temp_restore_dir=/root/tempconfig
  403. restore_directory_from_usb $temp_restore_dir config/$USERNAME
  404. cp -r $temp_restore_dir/home/$USERNAME/.config /home/$USERNAME/
  405. if [ ! "$?" = "0" ]; then
  406. rm -rf $temp_restore_dir
  407. set_user_permissions
  408. backup_unmount_drive
  409. exit 664
  410. fi
  411. rm -rf $temp_restore_dir
  412. fi
  413. done
  414. fi
  415. }
  416. function gpg_pubkey_from_email {
  417. key_owner_username=$1
  418. key_email_address=$2
  419. key_id=
  420. if [[ $key_owner_username != "root" ]]; then
  421. key_id=$(su -c "gpg --list-keys $key_email_address | grep 'pub '" - $key_owner_username | awk -F ' ' '{print $2}' | awk -F '/' '{print $2}')
  422. else
  423. key_id=$(gpg --list-keys $key_email_address | grep 'pub ' | awk -F ' ' '{print $2}' | awk -F '/' '{print $2}')
  424. fi
  425. echo $key_id
  426. }
  427. function restore_user_monkeysphere {
  428. if [[ $RESTORE_APP != 'all' ]]; then
  429. if [[ $RESTORE_APP != 'usermonkeysphere' ]]; then
  430. return
  431. fi
  432. fi
  433. if [ -d $USB_MOUNT/backup/monkeysphere ]; then
  434. for d in $USB_MOUNT/backup/monkeysphere/*/ ; do
  435. USERNAME=$(echo "$d" | awk -F '/' '{print $6}')
  436. if [[ $(is_valid_user "$USERNAME") == "1" ]]; then
  437. if [ ! -d /home/$USERNAME ]; then
  438. ${PROJECT_NAME}-adduser $USERNAME
  439. fi
  440. echo $"Restoring monkeysphere ids for $USERNAME"
  441. temp_restore_dir=/root/tempmonkeysphere
  442. restore_directory_from_usb $temp_restore_dir monkeysphere/$USERNAME
  443. cp -r $temp_restore_dir/home/$USERNAME/.monkeysphere /home/$USERNAME/
  444. if [ ! "$?" = "0" ]; then
  445. rm -rf $temp_restore_dir
  446. set_user_permissions
  447. backup_unmount_drive
  448. exit 664
  449. fi
  450. rm -rf $temp_restore_dir
  451. fi
  452. done
  453. # The admin user is the identity certifier
  454. MY_EMAIL_ADDRESS="${ADMIN_USERNAME}@${HOSTNAME}"
  455. read_config_param MY_EMAIL_ADDRESS
  456. MY_GPG_PUBLIC_KEY_ID=$(gpg_pubkey_from_email "$ADMIN_USERNAME" "$MY_EMAIL_ADDRESS")
  457. fpr=$(gpg --with-colons --fingerprint $MY_GPG_PUBLIC_KEY_ID | grep fpr | head -n 1 | awk -F ':' '{print $10}')
  458. monkeysphere-authentication add-identity-certifier $fpr
  459. monkeysphere-authentication update-users
  460. fi
  461. }
  462. function restore_user_fin {
  463. if [[ $RESTORE_APP != 'all' ]]; then
  464. if [[ $RESTORE_APP != 'userfin' ]]; then
  465. return
  466. fi
  467. fi
  468. if [ -d $USB_MOUNT/backup/fin ]; then
  469. for d in $USB_MOUNT/backup/fin/*/ ; do
  470. USERNAME=$(echo "$d" | awk -F '/' '{print $6}')
  471. if [[ $(is_valid_user "$USERNAME") == "1" ]]; then
  472. if [ ! -d /home/$USERNAME ]; then
  473. ${PROJECT_NAME}-adduser $USERNAME
  474. fi
  475. echo $"Restoring fin files for $USERNAME"
  476. temp_restore_dir=/root/tempfin
  477. restore_directory_from_usb $temp_restore_dir fin/$USERNAME
  478. cp -r $temp_restore_dir/home/$USERNAME/.fin /home/$USERNAME/
  479. if [ ! "$?" = "0" ]; then
  480. rm -rf $temp_restore_dir
  481. set_user_permissions
  482. backup_unmount_drive
  483. exit 664
  484. fi
  485. rm -rf $temp_restore_dir
  486. fi
  487. done
  488. fi
  489. }
  490. function restore_user_local {
  491. if [[ $RESTORE_APP != 'all' ]]; then
  492. if [[ $RESTORE_APP != 'userlocal' ]]; then
  493. return
  494. fi
  495. fi
  496. if [ -d $USB_MOUNT/backup/local ]; then
  497. for d in $USB_MOUNT/backup/local/*/ ; do
  498. USERNAME=$(echo "$d" | awk -F '/' '{print $6}')
  499. if [[ $(is_valid_user "$USERNAME") == "1" ]]; then
  500. if [ ! -d /home/$USERNAME ]; then
  501. ${PROJECT_NAME}-adduser $USERNAME
  502. fi
  503. echo $"Restoring local files for $USERNAME"
  504. temp_restore_dir=/root/templocal
  505. restore_directory_from_usb $temp_restore_dir local/$USERNAME
  506. cp -r $temp_restore_dir/home/$USERNAME/.local /home/$USERNAME/
  507. if [ ! "$?" = "0" ]; then
  508. rm -rf $temp_restore_dir
  509. set_user_permissions
  510. backup_unmount_drive
  511. exit 664
  512. fi
  513. rm -rf $temp_restore_dir
  514. fi
  515. done
  516. fi
  517. }
  518. function restore_certs {
  519. if [[ $RESTORE_APP != 'all' ]]; then
  520. if [[ $RESTORE_APP != 'certs' ]]; then
  521. return
  522. fi
  523. fi
  524. if [ -d $USB_MOUNT/backup/ssl ]; then
  525. echo $"Restoring certificates"
  526. mkdir /root/tempssl
  527. restore_directory_from_usb /root/tempssl ssl
  528. cp -r /root/tempssl/etc/ssl/* /etc/ssl
  529. if [ ! "$?" = "0" ]; then
  530. set_user_permissions
  531. backup_unmount_drive
  532. exit 276
  533. fi
  534. rm -rf /root/tempssl
  535. # restore ownership
  536. if [ -f /etc/ssl/private/xmpp.key ]; then
  537. chown prosody:prosody /etc/ssl/private/xmpp.key
  538. chown prosody:prosody /etc/ssl/certs/xmpp.*
  539. fi
  540. if [ -d /etc/dovecot ]; then
  541. chown root:dovecot /etc/ssl/private/dovecot.*
  542. chown root:dovecot /etc/ssl/certs/dovecot.*
  543. fi
  544. if [ -f /etc/ssl/private/exim.key ]; then
  545. cp /etc/ssl/private/exim.key /etc/exim4
  546. cp /etc/ssl/certs/exim.crt /etc/exim4
  547. cp /etc/ssl/certs/exim.dhparam /etc/exim4
  548. chown root:Debian-exim /etc/exim4/exim.key /etc/exim4/exim.crt /etc/exim4/exim.dhparam
  549. chmod 640 /etc/exim4/exim.key /etc/exim4/exim.crt /etc/exim4/exim.dhparam
  550. fi
  551. if [ -f /etc/ssl/private/mumble.key ]; then
  552. if [ -d /var/lib/mumble-server ]; then
  553. cp /etc/ssl/certs/mumble.* /var/lib/mumble-server
  554. cp /etc/ssl/private/mumble.key /var/lib/mumble-server
  555. chown -R mumble-server:mumble-server /var/lib/mumble-server
  556. fi
  557. fi
  558. fi
  559. }
  560. function restore_personal_settings {
  561. if [[ $RESTORE_APP != 'all' ]]; then
  562. if [[ $RESTORE_APP != 'personal' ]]; then
  563. return
  564. fi
  565. fi
  566. if [ -d $USB_MOUNT/backup/personal ]; then
  567. for d in $USB_MOUNT/backup/personal/*/ ; do
  568. USERNAME=$(echo "$d" | awk -F '/' '{print $6}')
  569. if [[ $(is_valid_user "$USERNAME") == "1" ]]; then
  570. if [ -d $USB_MOUNT/backup/personal/$USERNAME ]; then
  571. if [ ! -d /home/$USERNAME ]; then
  572. ${PROJECT_NAME}-adduser $USERNAME
  573. fi
  574. echo $"Restoring personal settings for $USERNAME"
  575. temp_restore_dir=/root/temppersonal
  576. restore_directory_from_usb $temp_restore_dir personal/$USERNAME
  577. if [ -d /home/$USERNAME/personal ]; then
  578. rm -rf /home/$USERNAME/personal
  579. fi
  580. mv $temp_restore_dir/home/$USERNAME/personal /home/$USERNAME
  581. if [ ! "$?" = "0" ]; then
  582. set_user_permissions
  583. backup_unmount_drive
  584. exit 184
  585. fi
  586. rm -rf $temp_restore_dir
  587. fi
  588. fi
  589. done
  590. fi
  591. }
  592. function restore_mailing_list {
  593. if [[ $RESTORE_APP != 'all' ]]; then
  594. if [[ $RESTORE_APP != 'mailinglist' ]]; then
  595. return
  596. fi
  597. fi
  598. if [ -d /var/spool/mlmmj ]; then
  599. echo $"Restoring public mailing list"
  600. temp_restore_dir=/root/tempmailinglist
  601. restore_directory_from_usb $temp_restore_dir mailinglist
  602. cp -r $temp_restore_dir/root/spool/mlmmj/* /var/spool/mlmmj
  603. if [ ! "$?" = "0" ]; then
  604. set_user_permissions
  605. backup_unmount_drive
  606. exit 526
  607. fi
  608. rm -rf $temp_restore_dir
  609. fi
  610. }
  611. function restore_email {
  612. if [[ $RESTORE_APP != 'all' ]]; then
  613. if [[ $RESTORE_APP != 'email' ]]; then
  614. return
  615. fi
  616. fi
  617. if [ -d $USB_MOUNT/backup/mail ]; then
  618. for d in $USB_MOUNT/backup/mail/*/ ; do
  619. USERNAME=$(echo "$d" | awk -F '/' '{print $6}')
  620. if [[ $(is_valid_user "$USERNAME") == "1" ]]; then
  621. if [ ! -d /home/$USERNAME ]; then
  622. ${PROJECT_NAME}-adduser $USERNAME
  623. fi
  624. echo $"Restoring emails for $USERNAME"
  625. temp_restore_dir=/root/tempmail
  626. restore_directory_from_usb $temp_restore_dir mail/$USERNAME
  627. if [ ! -d /home/$USERNAME/Maildir ]; then
  628. mkdir /home/$USERNAME/Maildir
  629. fi
  630. tar -xzvf $temp_restore_dir/root/tempbackupemail/$USERNAME/maildir.tar.gz -C /
  631. if [ ! "$?" = "0" ]; then
  632. set_user_permissions
  633. backup_unmount_drive
  634. exit 927
  635. fi
  636. rm -rf $temp_restore_dir
  637. fi
  638. done
  639. fi
  640. }
  641. function get_restore_app {
  642. if [ ${1} ]; then
  643. if [ ! -d /home/${1} ]; then
  644. RESTORE_APP=${1}
  645. echo $"Restore $RESTORE_APP"
  646. fi
  647. fi
  648. }
  649. get_restore_app ${2}
  650. backup_mount_drive ${1} ${ADMIN_USERNAME} ${2}
  651. check_backup_exists
  652. check_admin_user
  653. copy_gpg_keys
  654. restore_configuration
  655. same_admin_user
  656. restore_mariadb
  657. restore_letsencrypt
  658. restore_tor
  659. restore_mutt_settings
  660. restore_gpg
  661. restore_procmail
  662. restore_spamassassin
  663. restore_admin_readme
  664. restore_user_ssh_keys
  665. restore_user_config
  666. restore_user_monkeysphere
  667. restore_user_fin
  668. restore_user_local
  669. restore_certs
  670. restore_personal_settings
  671. restore_mailing_list
  672. restore_email
  673. restore_apps local $RESTORE_APP
  674. set_user_permissions
  675. backup_unmount_drive
  676. # ensure that all TLS certificates are pinned
  677. #${PROJECT_NAME}-pin-cert all
  678. echo $"Restore from USB drive is complete. You can now unplug it."
  679. exit 0