freedombone-mesh-install 20KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515
  1. #!/bin/bash
  2. #
  3. # .---. . .
  4. # | | |
  5. # |--- .--. .-. .-. .-.| .-. .--.--. |.-. .-. .--. .-.
  6. # | | (.-' (.-' ( | ( )| | | | )( )| | (.-'
  7. # ' ' --' --' -' - -' ' ' -' -' -' ' - --'
  8. #
  9. # Freedom in the Cloud
  10. #
  11. # Installs mesh applications. This avoids duplicated functions
  12. # within freedombone and freedombone-image-customize and also
  13. # for client installs
  14. #
  15. # License
  16. # =======
  17. #
  18. # This program is free software: you can redistribute it and/or modify
  19. # it under the terms of the GNU Affero General Public License as published by
  20. # the Free Software Foundation, either version 3 of the License, or
  21. # (at your option) any later version.
  22. #
  23. # This program is distributed in the hope that it will be useful,
  24. # but WITHOUT ANY WARRANTY; without even the implied warranty of
  25. # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
  26. # GNU Affero General Public License for more details.
  27. #
  28. # You should have received a copy of the GNU Affero General Public License
  29. # along with this program. If not, see <http://www.gnu.org/licenses/>.
  30. PROJECT_NAME='freedombone'
  31. COMPLETION_FILE=$HOME/${PROJECT_NAME}-completed.txt
  32. export TEXTDOMAIN=${PROJECT_NAME}-mesh-install
  33. export TEXTDOMAINDIR="/usr/share/locale"
  34. # for mesh installs
  35. TRACKER_PORT=6969
  36. WIFI_CHANNEL=2
  37. WIFI_INTERFACE='wlan0'
  38. # B.A.T.M.A.N settings
  39. BATMAN_CELLID='02:BA:00:00:03:01'
  40. WIFI_SSID='mesh'
  41. # Babel
  42. BABEL_PORT=6696
  43. rootdir=''
  44. FN=
  45. CHROOT_PREFIX=''
  46. FRIENDS_MIRRORS_SERVER=
  47. # To avoid confusions these are obtained from the main project file
  48. TOXID_REPO=
  49. TOX_PORT=
  50. TOXCORE_REPO=
  51. TOXIC_REPO=
  52. TOXCORE_COMMIT=
  53. TOXIC_COMMIT=
  54. # These are some default nodes, but you can replace them with trusted nodes
  55. # as you prefer. See https://wiki.tox.im/Nodes
  56. TOX_NODES=
  57. #TOX_NODES=(
  58. # '192.254.75.102,2607:5600:284::2,33445,951C88B7E75C867418ACDB5D273821372BB5BD652740BCDF623A4FA293E75D2F,Tox RELENG,US'
  59. # '144.76.60.215,2a01:4f8:191:64d6::1,33445,04119E835DF3E78BACF0F84235B300546AF8B936F035185E2A8E9E0A67C8924F,sonOfRa,DE'
  60. #)
  61. # To avoid confusions these are obtained from the main project file
  62. ZERONET_REPO=
  63. ZERONET_COMMIT=
  64. ZERONET_PORT=
  65. # Directory where source code is downloaded and compiled
  66. INSTALL_DIR=$HOME/build
  67. MESH_INSTALL_DIR=/var/lib
  68. REMOVE='no'
  69. source /usr/share/${PROJECT_NAME}/utils/${PROJECT_NAME}-utils-git
  70. function show_help {
  71. echo ''
  72. echo $"${PROJECT_NAME}-mesh-install -f [function] -r [rootdir]"
  73. echo ''
  74. echo $'Runs a mesh network install function'
  75. echo ''
  76. echo $' -h --help Show help'
  77. echo $' -f --function [name] Name of the function to be run'
  78. echo $' -r --rootdir [directory] Root directory'
  79. echo $' -w --wifi [interface] e.g. wlan0'
  80. echo ''
  81. exit 0
  82. }
  83. function install_babel {
  84. $CHROOT_PREFIX apt-get -y install babeld
  85. babel_script=${rootdir}/var/lib/babel
  86. echo '#!/bin/bash' > $babel_script
  87. echo '' >> $babel_script
  88. echo 'if [[ $1 == "ls" || $1 == "list" ]]; then' >> $babel_script
  89. echo ' avahi-browse -atl' >> $babel_script
  90. echo ' exit 0' >> $babel_script
  91. echo 'fi' >> $babel_script
  92. echo '' >> $babel_script
  93. echo 'if [[ $1 == "start" ]]; then' >> $babel_script
  94. echo ' sed -i "s|#host-name=.*|host-name=$(hostname)|g" /etc/avahi/avahi-daemon.conf' >> $babel_script
  95. echo ' sed -i "s|host-name=.*|host-name=$(hostname)|g" /etc/avahi/avahi-daemon.conf' >> $babel_script
  96. echo ' sed -i "s|use-ipv4=.*|use-ipv4=yes|g" /etc/avahi/avahi-daemon.conf' >> $babel_script
  97. echo ' sed -i "s|use-ipv6=.*|use-ipv6=no|g" /etc/avahi/avahi-daemon.conf' >> $babel_script
  98. echo ' sed -i "s|hosts:.*|hosts: files mdns4_minimal dns mdns4 mdns|g" /etc/nsswitch.conf' >> $babel_script
  99. echo ' systemctl restart avahi-daemon' >> $babel_script
  100. echo 'fi' >> $babel_script
  101. echo '' >> $babel_script
  102. echo "IFACE=$WIFI_INTERFACE" >> $babel_script
  103. echo 'if [[ $IFACE == "wlan0" ]]; then' >> $babel_script
  104. echo ' if grep -q "wlan1" /proc/net/dev; then' >> $babel_script
  105. echo ' IFACE=wlan1' >> $babel_script
  106. echo ' fi' >> $babel_script
  107. echo 'fi' >> $babel_script
  108. echo 'if [[ $IFACE == "wlan0" ]]; then' >> $babel_script
  109. echo ' if grep -q "wlan2" /proc/net/dev; then' >> $babel_script
  110. echo ' IFACE=wlan2' >> $babel_script
  111. echo ' fi' >> $babel_script
  112. echo 'fi' >> $babel_script
  113. echo 'if [[ $IFACE == "wlan0" ]]; then' >> $babel_script
  114. echo ' if grep -q "wlan3" /proc/net/dev; then' >> $babel_script
  115. echo ' IFACE=wlan3' >> $babel_script
  116. echo ' fi' >> $babel_script
  117. echo 'fi' >> $babel_script
  118. echo '' >> $babel_script
  119. echo 'if [[ ! grep -q "$IFACE" /proc/net/dev || $1 == "stop" ]]; then' >> $babel_script
  120. echo ' if ! grep -q "$IFACE" /proc/net/dev; then' >> $babel_script
  121. echo ' echo "Interface $IFACE was not found"' >> $babel_script
  122. echo ' else' >> $babel_script
  123. echo ' echo "Stopping"' >> $babel_script
  124. echo ' fi' >> $babel_script
  125. echo ' ifconfig $IFACE down' >> $babel_script
  126. echo ' pkill babeld' >> $babel_script
  127. echo ' systemctl restart network-manager' >> $babel_script
  128. echo ' exit 1' >> $babel_script
  129. echo 'fi' >> $babel_script
  130. echo '' >> $babel_script
  131. echo 'systemctl stop network-manager' >> $babel_script
  132. echo 'ifconfig $IFACE down' >> $babel_script
  133. echo -n 'iwconfig $IFACE mode ad-hoc channel ' >> $babel_script
  134. echo "$WIFI_CHANNEL essid \"$WIFI_SSID\"" >> $babel_script
  135. echo 'ifconfig $IFACE up' >> $babel_script
  136. echo -n 'ifconfig $IFACE:avahi ' >> $babel_script
  137. echo -n "$LOCAL_NETWORK_STATIC_IP_ADDRESS netmask " >> $babel_script
  138. echo '255.255.255.0 broadcast 192.168.13.255' >> $babel_script
  139. echo -n 'babeld -D $IFACE:avahi -p ' >> $babel_script
  140. echo -n "$BABEL_PORT -d 5 " >> $babel_script
  141. echo '$IFACE' >> $babel_script
  142. echo 'exit 0' >> $babel_script
  143. chmod +x $babel_script
  144. echo '[Unit]' > ${rootdir}/etc/systemd/system/babel.service
  145. echo 'Description=Babel Mesh' >> ${rootdir}/etc/systemd/system/babel.service
  146. echo '' >> ${rootdir}/etc/systemd/system/babel.service
  147. echo '[Service]' >> ${rootdir}/etc/systemd/system/babel.service
  148. echo 'Type=oneshot' >> ${rootdir}/etc/systemd/system/babel.service
  149. echo "ExecStart=$babel_script start" >> ${rootdir}/etc/systemd/system/babel.service
  150. echo "ExecStop=$babel_script stop" >> ${rootdir}/etc/systemd/system/babel.service
  151. echo 'RemainAfterExit=yes' >> ${rootdir}/etc/systemd/system/babel.service
  152. echo '' >> ${rootdir}/etc/systemd/system/babel.service
  153. echo '# Allow time for the server to start/stop' >> ${rootdir}/etc/systemd/system/babel.service
  154. echo 'TimeoutSec=300' >> ${rootdir}/etc/systemd/system/babel.service
  155. echo '' >> ${rootdir}/etc/systemd/system/babel.service
  156. echo '[Install]' >> /etc/systemd/system/babel.service
  157. echo 'WantedBy=multi-user.target' >> ${rootdir}/etc/systemd/system/babel.service
  158. $CHROOT_PREFIX systemctl enable babel
  159. }
  160. function install_babel_remove {
  161. $CHROOT_PREFIX systemctl stop babel
  162. $CHROOT_PREFIX apt-get -y remove --purge babeld
  163. rm ${rootdir}/var/lib/babel
  164. rm ${rootdir}/etc/systemd/system/babel.service
  165. }
  166. function mesh_avahi {
  167. $CHROOT_PREFIX apt-get -y install avahi-utils avahi-autoipd avahi-dnsconfd
  168. decarray=( 1 2 3 4 5 6 7 8 9 0 )
  169. PEER_ID=${decarray[$RANDOM%10]}${decarray[$RANDOM%10]}${decarray[$RANDOM%10]}${decarray[$RANDOM%10]}${decarray[$RANDOM%10]}${decarray[$RANDOM%10]}${decarray[$RANDOM%10]}${decarray[$RANDOM%10]}
  170. sed -i "s|#host-name=.*|host-name=P$PEER_ID|g" $rootdir/etc/avahi/avahi-daemon.conf
  171. if [ ! -d $rootdir/etc/avahi/services ]; then
  172. mkdir -p $rootdir/etc/avahi/services
  173. fi
  174. # remove an avahi service which isn't used
  175. if [ -f $rootdir/etc/avahi/services/udisks.service ]; then
  176. rm $rootdir/etc/avahi/services/udisks.service
  177. fi
  178. # Add an ssh service
  179. echo '<?xml version="1.0" standalone="no"?><!--*-nxml-*-->' > $rootdir/etc/avahi/services/ssh.service
  180. echo '<!DOCTYPE service-group SYSTEM "avahi-service.dtd">' >> $rootdir/etc/avahi/services/ssh.service
  181. echo '<service-group>' >> $rootdir/etc/avahi/services/ssh.service
  182. echo ' <name replace-wildcards="yes">%h SSH</name>' >> $rootdir/etc/avahi/services/ssh.service
  183. echo ' <service>' >> $rootdir/etc/avahi/services/ssh.service
  184. echo ' <type>_ssh._tcp</type>' >> $rootdir/etc/avahi/services/ssh.service
  185. echo " <port>$SSH_PORT</port>" >> $rootdir/etc/avahi/services/ssh.service
  186. echo ' </service>' >> $rootdir/etc/avahi/services/ssh.service
  187. echo '</service-group>' >> $rootdir/etc/avahi/services/ssh.service
  188. # keep the daemon running
  189. WATCHDOG_SCRIPT_NAME="keepon"
  190. echo '' >> $rootdir/usr/bin/$WATCHDOG_SCRIPT_NAME
  191. echo '# keep avahi daemon running' >> $rootdir/usr/bin/$WATCHDOG_SCRIPT_NAME
  192. echo 'AVAHI_RUNNING=$(pgrep avahi-daemon > /dev/null && echo Running)' >> $rootdir/usr/bin/$WATCHDOG_SCRIPT_NAME
  193. echo 'if [ ! $AVAHI_RUNNING ]; then' >> $rootdir/usr/bin/$WATCHDOG_SCRIPT_NAME
  194. echo ' systemctl start avahi-daemon' >> $rootdir/usr/bin/$WATCHDOG_SCRIPT_NAME
  195. echo ' echo -n $CURRENT_DATE >> $LOGFILE' >> $rootdir/usr/bin/$WATCHDOG_SCRIPT_NAME
  196. echo ' echo " Avahi daemon restarted" >> $LOGFILE' >> $rootdir/usr/bin/$WATCHDOG_SCRIPT_NAME
  197. echo 'fi' >> $rootdir/usr/bin/$WATCHDOG_SCRIPT_NAME
  198. chmod +x $rootdir/usr/bin/$WATCHDOG_SCRIPT_NAME
  199. }
  200. function install_babel_client {
  201. # TODO to be fixed
  202. TOXIC_FILE=$(cat /usr/share/${PROJECT_NAME}/apps/${PROJECT_NAME}-app-tox | grep "TOXIC_FILE=" | head -n 1 | awk -F '=' '{print $2}')
  203. if [ ! -f ${rootdir}/tmp/meshtype ]; then
  204. $CHROOT_PREFIX sudo apt-get -y install babeld
  205. if [ ! -f $TOXIC_FILE ]; then
  206. $CHROOT_PREFIX sudo apt-get -y install toxic
  207. fi
  208. CURR_DIR=$(pwd)
  209. if [ ! -f ~/develop/toxid ]; then
  210. if [ ! -f ~/develop ]; then
  211. mkdir ~/develop
  212. fi
  213. cd ~/develop
  214. git_clone $TOXID_REPO ~/develop/toxid
  215. fi
  216. cd ~/develop/toxid
  217. sudo make install
  218. cd $CURR_DIR
  219. fi
  220. babel_script=${rootdir}/tmp/babel
  221. echo '#!/bin/bash' > $babel_script
  222. echo '' >> $babel_script
  223. echo 'if [[ $1 == "ls" || $1 == "list" ]]; then' >> $babel_script
  224. echo ' avahi-browse -atl' >> $babel_script
  225. echo ' exit 0' >> $babel_script
  226. echo 'fi' >> $babel_script
  227. echo '' >> $babel_script
  228. echo 'if [[ $1 == "start" ]]; then' >> $babel_script
  229. echo ' if [ -f /tmp/meshtype ] ; then' >> $babel_script
  230. echo ' echo "Mesh already running"' >> $babel_script
  231. echo ' return' >> $babel_script
  232. echo ' fi' >> $batman_script
  233. echo ' # install avahi' >> $babel_script
  234. echo ' apt-get -y install avahi-utils avahi-autoipd avahi-daemon avahi-dnsconfd bittornado' >> $babel_script
  235. echo ' sed -i "s|#host-name=.*|host-name=$(hostname)|g" /etc/avahi/avahi-daemon.conf' >> $babel_script
  236. echo ' sed -i "s|host-name=.*|host-name=$(hostname)|g" /etc/avahi/avahi-daemon.conf' >> $babel_script
  237. echo ' if [ -f /bin/systemctl ]; then' >> $babel_script
  238. echo ' systemctl restart avahi-daemon' >> $babel_script
  239. echo ' else' >> $babel_script
  240. echo ' service avahi-daemon restart' >> $babel_script
  241. echo ' fi' >> $babel_script
  242. echo ' echo "babel" > /tmp/meshtype' >> $babel_script
  243. echo 'fi' >> $babel_script
  244. echo '' >> $babel_script
  245. echo "IFACE=$WIFI_INTERFACE" >> $babel_script
  246. echo 'if [[ $IFACE == "wlan0" ]]; then' >> $babel_script
  247. echo ' if grep -q "wlan1" /proc/net/dev; then' >> $babel_script
  248. echo ' IFACE=wlan1' >> $babel_script
  249. echo ' fi' >> $babel_script
  250. echo 'fi' >> $babel_script
  251. echo 'if [[ $IFACE == "wlan0" ]]; then' >> $babel_script
  252. echo ' if grep -q "wlan2" /proc/net/dev; then' >> $babel_script
  253. echo ' IFACE=wlan2' >> $babel_script
  254. echo ' fi' >> $babel_script
  255. echo 'fi' >> $babel_script
  256. echo 'if [[ $IFACE == "wlan0" ]]; then' >> $babel_script
  257. echo ' if grep -q "wlan3" /proc/net/dev; then' >> $babel_script
  258. echo ' IFACE=wlan3' >> $babel_script
  259. echo ' fi' >> $babel_script
  260. echo 'fi' >> $babel_script
  261. echo '' >> $babel_script
  262. echo 'if [[ ! grep -q "$IFACE" /proc/net/dev || $1 == "stop" ]]; then' >> $babel_script
  263. echo ' if ! grep -q "$IFACE" /proc/net/dev; then' >> $babel_script
  264. echo ' echo "Interface $IFACE was not found"' >> $babel_script
  265. echo ' else' >> $babel_script
  266. echo ' echo "Stopping"' >> $babel_script
  267. echo ' fi' >> $babel_script
  268. echo ' ifconfig $IFACE down' >> $babel_script
  269. echo ' pkill babeld' >> $babel_script
  270. echo ' if [ -f /bin/systemctl ]; then' >> $babel_script
  271. echo ' systemctl restart network-manager' >> $babel_script
  272. echo ' else' >> $babel_script
  273. echo ' service network-manager restart' >> $babel_script
  274. echo ' fi' >> $babel_script
  275. echo ' exit 1' >> $babel_script
  276. echo 'fi' >> $babel_script
  277. echo '' >> $babel_script
  278. echo 'if [ -f /bin/systemctl ]; then' >> $babel_script
  279. echo ' systemctl stop network-manager' >> $babel_script
  280. echo 'else' >> $babel_script
  281. echo ' service network-manager stop' >> $babel_script
  282. echo 'fi' >> $babel_script
  283. echo 'ifconfig $IFACE down' >> $babel_script
  284. echo -n 'iwconfig $IFACE mode ad-hoc channel ' >> $babel_script
  285. echo "$WIFI_CHANNEL essid \"$WIFI_SSID\"" >> $babel_script
  286. echo 'ifconfig $IFACE up' >> $babel_script
  287. echo -n 'ifconfig $IFACE:avahi ' >> $babel_script
  288. echo -n "$LOCAL_NETWORK_STATIC_IP_ADDRESS netmask " >> $babel_script
  289. echo '255.255.255.0 broadcast 192.168.13.255' >> $babel_script
  290. echo -n 'babeld -D $IFACE:avahi -p ' >> $babel_script
  291. echo -n "$BABEL_PORT -d 5 " >> $babel_script
  292. echo '$IFACE' >> $babel_script
  293. echo 'exit 0' >> $babel_script
  294. chmod +x $babel_script
  295. sudo mv $babel_script ${rootdir}/usr/bin/babel
  296. }
  297. function install_batman_remove {
  298. systemctl stop batman
  299. rm $rootdir/var/lib/batman
  300. rm $rootdir/etc/systemd/system/batman.service
  301. }
  302. function install_batman {
  303. $CHROOT_PREFIX apt-get -y install iproute bridge-utils libnetfilter-conntrack3 batctl
  304. $CHROOT_PREFIX apt-get -y install python-dev libevent-dev ebtables python-pip git
  305. $CHROOT_PREFIX apt-get -y install wireless-tools rfkill
  306. if ! grep -q "batman_adv" $rootdir/etc/modules; then
  307. echo 'batman_adv' >> $rootdir/etc/modules
  308. fi
  309. BATMAN_SCRIPT=$rootdir/var/lib/batman
  310. if [ -f /usr/local/bin/${PROJECT_NAME}-mesh-batman ]; then
  311. cp /usr/local/bin/${PROJECT_NAME}-mesh-batman $BATMAN_SCRIPT
  312. else
  313. cp /usr/bin/${PROJECT_NAME}-mesh-batman $BATMAN_SCRIPT
  314. fi
  315. BATMAN_DAEMON=$rootdir/etc/systemd/system/batman.service
  316. echo '[Unit]' > $BATMAN_DAEMON
  317. echo 'Description=B.A.T.M.A.N. Advanced' >> $BATMAN_DAEMON
  318. echo 'After=network.target' >> $BATMAN_DAEMON
  319. echo '' >> $BATMAN_DAEMON
  320. echo '[Service]' >> $BATMAN_DAEMON
  321. echo 'RemainAfterExit=yes' >> $BATMAN_DAEMON
  322. echo "ExecStart=/var/lib/batman start" >> $BATMAN_DAEMON
  323. echo "ExecStop=/var/lib/batman stop" >> $BATMAN_DAEMON
  324. echo 'Restart=on-failure' >> $BATMAN_DAEMON
  325. echo 'SuccessExitStatus=3 4' >> $BATMAN_DAEMON
  326. echo 'RestartForceExitStatus=3 4' >> $BATMAN_DAEMON
  327. echo '' >> $BATMAN_DAEMON
  328. echo '# Allow time for the server to start/stop' >> $BATMAN_DAEMON
  329. echo 'TimeoutSec=300' >> $BATMAN_DAEMON
  330. echo '' >> $BATMAN_DAEMON
  331. echo '[Install]' >> $BATMAN_DAEMON
  332. echo 'WantedBy=multi-user.target' >> $BATMAN_DAEMON
  333. $CHROOT_PREFIX systemctl enable batman
  334. }
  335. function mesh_firewall {
  336. FIREWALL_FILENAME=${rootdir}/etc/systemd/system/meshfirewall.service
  337. MESH_FIREWALL_SCRIPT=${rootdir}/usr/bin/mesh-firewall
  338. echo '#!/bin/bash' > $MESH_FIREWALL_SCRIPT
  339. echo 'iptables -P INPUT ACCEPT' >> $MESH_FIREWALL_SCRIPT
  340. echo 'ip6tables -P INPUT ACCEPT' >> $MESH_FIREWALL_SCRIPT
  341. echo 'iptables -F' >> $MESH_FIREWALL_SCRIPT
  342. echo 'ip6tables -F' >> $MESH_FIREWALL_SCRIPT
  343. echo 'iptables -t nat -F' >> $MESH_FIREWALL_SCRIPT
  344. echo 'ip6tables -t nat -F' >> $MESH_FIREWALL_SCRIPT
  345. echo 'iptables -X' >> $MESH_FIREWALL_SCRIPT
  346. echo 'ip6tables -X' >> $MESH_FIREWALL_SCRIPT
  347. echo 'iptables -P INPUT DROP' >> $MESH_FIREWALL_SCRIPT
  348. echo 'ip6tables -P INPUT DROP' >> $MESH_FIREWALL_SCRIPT
  349. echo 'iptables -A INPUT -i lo -j ACCEPT' >> $MESH_FIREWALL_SCRIPT
  350. echo 'iptables -A INPUT -m conntrack --ctstate ESTABLISHED,RELATED -j ACCEPT' >> $MESH_FIREWALL_SCRIPT
  351. echo '' >> $MESH_FIREWALL_SCRIPT
  352. echo '# Make sure incoming tcp connections are SYN packets' >> $MESH_FIREWALL_SCRIPT
  353. echo 'iptables -A INPUT -p tcp ! --syn -m state --state NEW -j DROP' >> $MESH_FIREWALL_SCRIPT
  354. echo '' >> $MESH_FIREWALL_SCRIPT
  355. echo '# Drop packets with incoming fragments' >> $MESH_FIREWALL_SCRIPT
  356. echo 'iptables -A INPUT -f -j DROP' >> $MESH_FIREWALL_SCRIPT
  357. echo '' >> $MESH_FIREWALL_SCRIPT
  358. echo '# Drop bogons' >> $MESH_FIREWALL_SCRIPT
  359. echo 'iptables -A INPUT -p tcp --tcp-flags ALL ALL -j DROP' >> $MESH_FIREWALL_SCRIPT
  360. echo 'iptables -A INPUT -p tcp --tcp-flags ALL FIN,PSH,URG -j DROP' >> $MESH_FIREWALL_SCRIPT
  361. echo 'iptables -A INPUT -p tcp --tcp-flags ALL SYN,RST,ACK,FIN,URG -j DROP' >> $MESH_FIREWALL_SCRIPT
  362. echo '' >> $MESH_FIREWALL_SCRIPT
  363. echo '# Incoming malformed NULL packets:' >> $MESH_FIREWALL_SCRIPT
  364. echo 'iptables -A INPUT -p tcp --tcp-flags ALL NONE -j DROP' >> $MESH_FIREWALL_SCRIPT
  365. echo '' >> $MESH_FIREWALL_SCRIPT
  366. echo "iptables -A INPUT -p tcp --dport $TOX_PORT -j ACCEPT" >> $MESH_FIREWALL_SCRIPT
  367. echo "iptables -A INPUT -i $WIFI_INTERFACE -p udp --dport $ZERONET_PORT -j ACCEPT" >> $MESH_FIREWALL_SCRIPT
  368. echo "iptables -A INPUT -i $WIFI_INTERFACE -p tcp --dport $ZERONET_PORT -j ACCEPT" >> $MESH_FIREWALL_SCRIPT
  369. echo "iptables -A INPUT -i $WIFI_INTERFACE -p udp --dport $TRACKER_PORT -j ACCEPT" >> $MESH_FIREWALL_SCRIPT
  370. echo "iptables -A INPUT -i $WIFI_INTERFACE -p tcp --dport $TRACKER_PORT -j ACCEPT" >> $MESH_FIREWALL_SCRIPT
  371. echo "iptables -A INPUT -i $WIFI_INTERFACE -p udp --dport 1900 -j ACCEPT" >> $MESH_FIREWALL_SCRIPT
  372. chmod +x $MESH_FIREWALL_SCRIPT
  373. echo '[Unit]' > $FIREWALL_FILENAME
  374. echo 'Description=Mesh Firewall' >> $FIREWALL_FILENAME
  375. echo '' >> $FIREWALL_FILENAME
  376. echo '[Service]' >> $FIREWALL_FILENAME
  377. echo 'Type=oneshot' >> $FIREWALL_FILENAME
  378. echo 'ExecStart=/usr/bin/mesh-firewall' >> $FIREWALL_FILENAME
  379. echo 'RemainAfterExit=no' >> $FIREWALL_FILENAME
  380. echo '' >> $FIREWALL_FILENAME
  381. echo 'TimeoutSec=30' >> $FIREWALL_FILENAME
  382. echo '' >> $FIREWALL_FILENAME
  383. echo '[Install]' >> $FIREWALL_FILENAME
  384. echo 'WantedBy=multi-user.target' >> $FIREWALL_FILENAME
  385. $CHROOT_PREFIX systemctl enable meshfirewall
  386. }
  387. function enable_tox_repo {
  388. sudo sh -c "echo 'deb http://download.opensuse.org/repositories/home:/antonbatenev:/tox/Debian_8.0/ /' > /etc/apt/sources.list.d/tox.list"
  389. wget http://download.opensuse.org/repositories/home:antonbatenev:tox/Debian_8.0/Release.key
  390. sudo sh -c "apt-key add - < Release.key"
  391. sudo apt-get update
  392. echo "Tox Repository Installed."
  393. }
  394. function mesh_tox_client_qtox {
  395. enable_tox_repo
  396. sudo apt-get -y install qtox
  397. echo "qTox Installed."
  398. }
  399. function mesh_tox_client_toxic_from_repo {
  400. enable_tox_repo
  401. sudo apt-get -y install toxic
  402. echo "Toxic Installed."
  403. }
  404. while [[ $# > 1 ]]
  405. do
  406. key="$1"
  407. case $key in
  408. -h|--help)
  409. show_help
  410. ;;
  411. -f|--function)
  412. shift
  413. FN="$1"
  414. ;;
  415. -r|--rootdir)
  416. shift
  417. rootdir="$1"
  418. CHROOT_PREFIX='chroot "${rootdir}"'
  419. ;;
  420. -w|--wifi|--interface)
  421. shift
  422. WIFI_INTERFACE="$1"
  423. ;;
  424. -m|--mirror)
  425. shift
  426. FRIENDS_MIRRORS_SERVER="$1"
  427. ;;
  428. --remove)
  429. shift
  430. REMOVE="$1"
  431. ;;
  432. *)
  433. # unknown option
  434. ;;
  435. esac
  436. shift
  437. done
  438. if [[ $FN == 'babel' ]]; then
  439. if [[ $REMOVE != 'yes' ]]; then
  440. install_babel
  441. else
  442. install_babel_remove
  443. fi
  444. fi
  445. if [[ $FN == 'babel_client' ]]; then
  446. install_babel_client
  447. fi
  448. if [[ $FN == 'avahi' ]]; then
  449. mesh_avahi
  450. fi
  451. if [[ $FN == 'firewall' ]]; then
  452. mesh_firewall
  453. fi
  454. if [[ $FN == 'batman' ]]; then
  455. if [[ $REMOVE != 'yes' ]]; then
  456. install_batman
  457. else
  458. install_batman_remove
  459. fi
  460. fi
  461. if [[ $FN == 'qtox' ]]; then
  462. mesh_tox_client_qtox
  463. fi
  464. if [[ $FN == 'toxic' ]]; then
  465. mesh_tox_client_toxic_from_repo
  466. fi
  467. exit 0