#!/bin/bash ##################################################################### ####### Script instalador OpenGnsys ####### Autor: Luis Guillén ##################################################################### ##################################################################### ####### Funciones de configuración ##################################################################### # Devuelve en la variable PASSWORD la clave introducida por el usuario (o la indicada por defecto) function enterPassword () { local PASSWORD2 local DEFAULT_PASSWORD="$1" while : ; do stty -echo read -r PASSWORD stty echo if [ -z "$PASSWORD" ]; then # Si esta vacio ponemos el valor por defecto PASSWORD="${PASSWORD:-$DEFAULT_PASSWORD}" break else if [ -n "${PASSWORD//[a-zA-Z0-9]/}" ]; then # Comprobamos que sea un valor alfanumerico echo -e "\\aERROR: Password must be alphanumeric, try again..." else echo -n -e "\\nConfirm password: " stty -echo read -r PASSWORD2 stty echo if [ "$PASSWORD" == "$PASSWORD2" ]; then break else echo -e "\\aERROR: Passwords don't match, try again." fi fi fi echo -n -e "Please, enter a new password (${DEFAULT_PASSWORD}): " done } # Si la distribución no es la recomendada mostramos mensaje informativo. function checkDistribution() { local ADVISED VERSION ADVISED="18" [ -r /etc/os-release ] && eval $(grep VERSION /etc/os-release) [[ "$VERSION" == "$ADVISED."* ]] && return echoAndLog "The OpenGnsys version 1.2.0 installation was tested with full functionality on Ubuntu 18.04 with PHP 7.2." echo -n "Do you want to continue? [y/N]: " read -r GO_ON if [ "${GO_ON^^}" != "Y" ]; then echoAndLog "We left the installation." && exit fi } # Recoge los datos de configuración introducidos por el usuario. function userData () { #### AVISO: Puede editar configuración de acceso por defecto. #### WARNING: Edit default access configuration if you wish. DEFAULT_MYSQL_ROOT_PASSWORD="passwordroot" # Clave por defecto root de MySQL DEFAULT_OPENGNSYS_DB_USER="usuog" # Usuario por defecto de acceso a la base de datos DEFAULT_OPENGNSYS_DB_PASSWD="passusuog" # Clave por defecto de acceso a la base de datos DEFAULT_OPENGNSYS_CLIENT_PASSWD="og" # Clave por defecto de acceso del cliente DEFAULT_OGLIVE="ogLive-bionic-5.4.0-40-generic-amd64-r20200629.85eceaf.iso " # Cliente ogLive echo -e "\\nOpenGnsys Installation" echo "==============================" if [[ $- =~ s ]]; then echo -e "\\nNot interactive mode: setting default configuration values.\\n" MYSQL_ROOT_PASSWORD="$DEFAULT_MYSQL_ROOT_PASSWORD" OPENGNSYS_DB_USER="$DEFAULT_OPENGNSYS_DB_USER" OPENGNSYS_DB_PASSWD="$DEFAULT_OPENGNSYS_DB_PASSWD" OPENGNSYS_CLIENT_PASSWD="$DEFAULT_OPENGNSYS_CLIENT_PASSWD" OGLIVE="$DEFAULT_OGLIVE" return fi # Clave root de MySQL echo -n -e "\\nEnter root password for MySQL (${DEFAULT_MYSQL_ROOT_PASSWORD}): " enterPassword "$DEFAULT_MYSQL_ROOT_PASSWORD" MYSQL_ROOT_PASSWORD="$PASSWORD" # Usuario de acceso a la base de datos while : ; do echo -n -e "\\n\\nEnter username for OpenGnsys console (${DEFAULT_OPENGNSYS_DB_USER}): " read -r OPENGNSYS_DB_USER if [ -n "${OPENGNSYS_DB_USER//[a-zA-Z0-9]/}" ]; then # Comprobamos que sea un valor alfanumerico echo -e "\\aERROR: Must be alphanumeric, try again..." else # Si esta vacio ponemos el valor por defecto OPENGNSYS_DB_USER="${OPENGNSYS_DB_USER:-$DEFAULT_OPENGNSYS_DB_USER}" break fi done # Clave de acceso a la base de datos echo -n -e "\\nEnter password for OpenGnsys console (${DEFAULT_OPENGNSYS_DB_PASSWD}): " enterPassword "$DEFAULT_OPENGNSYS_DB_PASSWD" OPENGNSYS_DB_PASSWD="$PASSWORD" # Clave de acceso del cliente echo -n -e "\\n\\nEnter root password for OpenGnsys client (${DEFAULT_OPENGNSYS_CLIENT_PASSWD}): " enterPassword "$DEFAULT_OPENGNSYS_CLIENT_PASSWD" OPENGNSYS_CLIENT_PASSWD="$PASSWORD" unset PASSWORD # El ogclient sólo es compatible con ogLive de kernel 5.x. Se comenta la elección de ogLive. # Selección de clientes ogLive para descargar. #while : ; do # echo -e "\\n\\nChoose ogLive client to install." # echo -e "1) Kernel 5.4, 64-bit, EFI-compatible" # echo -e "2) Kernel 3.2, 32-bit" # echo -e "3) Both" # echo -n -e "Please, type a valid number (1): " # read -r OPT # case "$OPT" in # 1|"") OGLIVE="$DEFAULT_OGLIVE" # break ;; # 2) OGLIVE="ogLive-precise-3.2.0-23-generic-r5159.iso" # break ;; # 3) OGLIVE=" $DEFAULT_OGLIVE ogLive-precise-3.2.0-23-generic-r5159.iso"; # break ;; # *) echo -e "\\aERROR: unknown option, try again." # esac #done OGLIVE="$DEFAULT_OGLIVE" echo -e "\\n==============================" } # Asigna valores globales de configuración para el script. function globalSetup () { PROGRAMDIR=$(readlink -e "$(dirname "$0")") PROGRAMNAME=$(basename "$0") # Comprobar si se ha descargado el paquete comprimido (REMOTE=0) o sólo el instalador (REMOTE=1). OPENGNSYS_SERVER="opengnsys.es" DOWNLOADURL="https://$OPENGNSYS_SERVER/trac/downloads" if [ -d "$PROGRAMDIR/../installer" ]; then REMOTE=0 else REMOTE=1 fi BRANCH="master" CODE_URL="https://codeload.github.com/opengnsys/OpenGnsys/zip/$BRANCH" API_URL="https://api.github.com/repos/opengnsys/OpenGnsys" # Directorios de instalación y destino de OpenGnsys. WORKDIR=/tmp/opengnsys_installer INSTALL_TARGET=/opt/opengnsys PATH=$PATH:$INSTALL_TARGET/bin # Registro de incidencias. OGLOGFILE=$INSTALL_TARGET/log/${PROGRAMNAME%.sh}.log LOG_FILE=/tmp/$(basename $OGLOGFILE) # Usuario del cliente para acceso remoto. OPENGNSYS_CLIENT_USER="opengnsys" # Nombre de la base datos y fichero SQL para su creación. OPENGNSYS_DATABASE="ogAdmBD" OPENGNSYS_DB_CREATION_FILE=opengnsys/admin/Database/${OPENGNSYS_DATABASE}.sql } # Generar variables de configuración del instalador # Variables globales: # - OSDISTRIB, OSVERSION - tipo y versión de la distribución GNU/Linux # - DEPENDENCIES - array de dependencias que deben estar instaladas # - UPDATEPKGLIST, INSTALLPKGS, CHECKPKGS - comandos para gestión de paquetes # - INSTALLEXTRADEPS - instalar dependencias no incluidas en la distribución # - STARTSERVICE, ENABLESERVICE - iniciar y habilitar un servicio # - STOPSERVICE, DISABLESERVICE - parar y deshabilitar un servicio # - APACHESERV, APACHECFGDIR, APACHESITESDIR, APACHEUSER, APACHEGROUP - servicio y configuración de Apache # - APACHEENABLEMODS, APACHEENABLESSL, APACHEMAKECERT - habilitar módulos y certificado SSL # - APACHEENABLEOG, APACHEOGSITE, - habilitar sitio web de OpenGnsys # - PHPFPMSERV - servicio PHP FastCGI Process Manager para Apache # - INETDSERV - servicio Inetd # - DHCPSERV, DHCPCFGDIR - servicio y configuración de DHCP # - MYSQLSERV, TMPMYCNF - servicio MySQL y fichero temporal con credenciales de acceso # - MARIADBSERV - servicio MariaDB (sustituto de MySQL en algunas distribuciones) # - RSYNCSERV, RSYNCCFGDIR - servicio y configuración de Rsync # - SAMBASERV, SAMBACFGDIR - servicio y configuración de Samba # - TFTPSERV, TFTPCFGDIR - servicio y configuración de TFTP/PXE function autoConfigure() { # Detectar sistema operativo del servidor (compatible con fichero os-release y con LSB). if [ -f /etc/os-release ]; then source /etc/os-release OSDISTRIB="$ID" OSVERSION="$VERSION_ID" else OSDISTRIB=$(lsb_release -is 2>/dev/null) OSVERSION=$(lsb_release -rs 2>/dev/null) fi # Convertir distribución a minúsculas y obtener solo el 1er número de versión. OSDISTRIB="${OSDISTRIB,,}" OSVERSION="${OSVERSION%%.*}" # Configuración según la distribución GNU/Linux (usar minúsculas). case "$OSDISTRIB" in ubuntu|debian|linuxmint) DEPENDENCIES=( subversion apache2 php php-ldap php-fpm mysql-server php-mysql isc-dhcp-server bittorrent tftp-hpa tftpd-hpa xinetd build-essential g++-multilib libmysqlclient-dev wget curl doxygen graphviz bittornado ctorrent samba rsync unzip netpipes debootstrap schroot squashfs-tools btrfs-tools procps arp-scan realpath php-curl gettext moreutils jq wakeonlan udpcast libev-dev libjansson-dev libssl-dev shim-signed grub-efi-amd64-signed gawk libdbi-dev libdbi1 libdbd-mysql automake liblz4-tool ) UPDATEPKGLIST="apt-get update" INSTALLPKG="apt-get -y install --force-yes" CHECKPKG="dpkg -s \$package 2>/dev/null | grep Status | grep -qw install" if which service &>/dev/null; then STARTSERVICE="eval service \$service restart" STOPSERVICE="eval service \$service stop" else STARTSERVICE="eval /etc/init.d/\$service restart" STOPSERVICE="eval /etc/init.d/\$service stop" fi ENABLESERVICE="eval systemctl enable \$service.service" DISABLESERVICE="eval systemctl disable \$service.service" APACHESERV=apache2 APACHECFGDIR=/etc/apache2 APACHESITESDIR=sites-available APACHEOGSITE=opengnsys APACHEUSER="www-data" APACHEGROUP="www-data" APACHEENABLEMODS="a2enmod ssl rewrite proxy_fcgi fastcgi actions alias" APACHEENABLESSL="a2ensite default-ssl" APACHEENABLEOG="a2ensite $APACHEOGSITE" APACHEMAKECERT="make-ssl-cert generate-default-snakeoil --force-overwrite" DHCPSERV=isc-dhcp-server DHCPCFGDIR=/etc/dhcp INETDSERV=xinetd INETDCFGDIR=/etc/xinetd.d MYSQLSERV=mysql MYSQLCFGDIR=/etc/mysql/mysql.conf.d MARIADBSERV=mariadb PHPFPMSERV=php-fpm RSYNCSERV=rsync RSYNCCFGDIR=/etc SAMBASERV=smbd SAMBACFGDIR=/etc/samba TFTPCFGDIR=/var/lib/tftpboot ;; fedora|centos) DEPENDENCIES=( subversion httpd mod_ssl php-ldap php-fpm mysql-server mysql-devel mysql-devel.i686 php-mysql dhcp tftp-server tftp xinetd binutils gcc gcc-c++ glibc-devel glibc-devel.i686 glibc-static glibc-static.i686 libstdc++-devel.i686 make wget curl doxygen graphviz ctorrent samba samba-client rsync unzip debootstrap schroot squashfs-tools python-crypto arp-scan procps-ng gettext moreutils jq net-tools udpcast libev-devel jansson-devel openssl-devel shim-x64 grub2-efi-x64 grub2-efi-x64-modules gawk libdbi-devel libdbi libdbi-dbd-mysql automake http://ftp.altlinux.org/pub/distributions/ALTLinux/5.1/branch/$(arch)/RPMS.classic/netpipes-4.2-alt1.$(arch).rpm ) [ "$OSDISTRIB" == "centos" ] && UPDATEPKGLIST="yum install -y https://dl.fedoraproject.org/pub/epel/epel-release-latest-$OSVERSION.noarch.rpm http://rpms.remirepo.net/enterprise/remi-release-$OSVERSION.rpm" INSTALLEXTRADEPS=( 'pushd /tmp; wget -t3 http://ftp.acc.umu.se/mirror/bittornado/BitTornado-0.3.18.tar.gz && tar xvzf BitTornado-0.3.18.tar.gz && cd BitTornado-CVS && python setup.py install && ln -fs btlaunchmany.py /usr/bin/btlaunchmany && ln -fs bttrack.py /usr/bin/bttrack; popd' ) INSTALLPKG="yum install -y libstdc++ libstdc++.i686" CHECKPKG="rpm -q --quiet \$package" SYSTEMD=$(which systemctl 2>/dev/null) if [ -n "$SYSTEMD" ]; then STARTSERVICE="eval systemctl start \$service.service" STOPSERVICE="eval systemctl stop \$service.service" ENABLESERVICE="eval systemctl enable \$service.service" DISABLESERVICE="eval systemctl disable \$service.service" else STARTSERVICE="eval service \$service start" STOPSERVICE="eval service \$service stop" ENABLESERVICE="eval chkconfig \$service on" DISABLESERVICE="eval chkconfig \$service off" fi APACHESERV=httpd APACHECFGDIR=/etc/httpd/conf.d APACHEOGSITE=opengnsys.conf APACHEUSER="apache" APACHEGROUP="apache" APACHEREWRITEMOD="sed -i '/rewrite/s/^#//' $APACHECFGDIR/../*.conf" DHCPSERV=dhcpd DHCPCFGDIR=/etc/dhcp INETDSERV=xinetd INETDCFGDIR=/etc/xinetd.d MYSQLSERV=mysqld MYSQLCFGDIR=/etc/my.cnf.d MARIADBSERV=mariadb PHPFPMSERV=php-fpm RSYNCSERV=rsync RSYNCCFGDIR=/etc SAMBASERV=smb SAMBACFGDIR=/etc/samba TFTPSERV=tftp TFTPCFGDIR=/var/lib/tftpboot ;; "") echo "ERROR: Unknown Linux distribution, please install \"lsb_release\" command." exit 1 ;; *) echo "ERROR: Distribution not supported by OpenGnsys." exit 1 ;; esac # Fichero de credenciales de acceso a MySQL. TMPMYCNF=/tmp/.my.cnf.$$ } # Modificar variables de configuración tras instalar paquetes del sistema. function autoConfigurePost() { local f MKNETDIR # Configuraciones específicas para Samba y TFTP en Debian 6. [ -z "$SYSTEMD" -a ! -e /etc/init.d/$SAMBASERV ] && SAMBASERV=samba [ ! -e $TFTPCFGDIR ] && TFTPCFGDIR=/srv/tftp # Preparar arranque en red con Grub. for f in grub-mknetdir grub2-mknetdir; do if which $f &>/dev/null; then MKNETDIR=$f; fi done $MKNETDIR --net-directory=$TFTPCFGDIR --subdir=grub } # Cargar lista de paquetes del sistema y actualizar algunas variables de configuración # dependiendo de la versión instalada. function updatePackageList() { local DHCPVERSION PHP7VERSION # Si es necesario, actualizar la lista de paquetes disponibles. [ -n "$UPDATEPKGLIST" ] && eval $UPDATEPKGLIST # Configuración personallizada de algunos paquetes. case "$OSDISTRIB" in ubuntu|linuxmint) # Postconfiguación personalizada para Ubuntu. # Configuración para DHCP v3. DHCPVERSION=$(apt-cache show $(apt-cache pkgnames|egrep "dhcp.?-server$") | \ awk '/Version/ {print substr($2,1,1);}' | \ sort -n | tail -1) if [ $DHCPVERSION = 3 ]; then DEPENDENCIES=( ${DEPENDENCIES[@]/isc-dhcp-server/dhcp3-server} ) DHCPSERV=dhcp3-server DHCPCFGDIR=/etc/dhcp3 fi # Configuración para PHP 7 en Ubuntu. if [ -z "$(apt-cache pkgnames php7)" ]; then eval $INSTALLPKG software-properties-common add-apt-repository -y ppa:ondrej/php eval $UPDATEPKGLIST PHP7VERSION=$(apt-cache pkgnames php7 | sort | head -1) PHPFPMSERV="${PHP7VERSION}-fpm" DEPENDENCIES=( ${DEPENDENCIES[@]//php/$PHP7VERSION} ) fi # Adaptar dependencias para libmysqlclient. [ -z "$(apt-cache pkgnames libmysqlclient-dev)" ] && [ -n "$(apt-cache pkgnames libmysqlclient15)" ] && DEPENDENCIES=( ${DEPENDENCIES[@]//libmysqlclient-dev/libmysqlclient15} ) # Paquete correcto para realpath. [ -z "$(apt-cache pkgnames realpath)" ] && DEPENDENCIES=( ${DEPENDENCIES[@]//realpath/coreutils} ) ;; centos) # Postconfiguación personalizada para CentOS. # Configuración para PHP 7. PHP7VERSION=$(yum list -q php7\* 2>/dev/null | awk -F. '/^php/ {print $1; exit;}') PHPFPMSERV="${PHP7VERSION}-${PHPFPMSERV}" DEPENDENCIES=( ${PHP7VERSION} ${DEPENDENCIES[@]//php/$PHP7VERSION-php} ) # Cambios a aplicar a partir de CentOS 7. if [ $OSVERSION -ge 7 ]; then # Sustituir MySQL por MariaDB. DEPENDENCIES=( ${DEPENDENCIES[*]/mysql-/mariadb-} ) # Instalar ctorrent de EPEL para CentOS 6 (no disponible en CentOS 7). DEPENDENCIES=( ${DEPENDENCIES[*]/ctorrent/http://dl.fedoraproject.org/pub/epel/6/$(arch)/Packages/c/ctorrent-1.3.4-14.dnh3.3.2.el6.$(arch).rpm} ) fi ;; fedora) # Postconfiguación personalizada para Fedora. # Incluir paquetes específicos. DEPENDENCIES=( ${DEPENDENCIES[@]} btrfs-progs ) # Sustituir MySQL por MariaDB a partir de Fedora 20. [ $OSVERSION -ge 20 ] && DEPENDENCIES=( ${DEPENDENCIES[*]/mysql-/mariadb-} ) ;; esac } ##################################################################### ####### Algunas funciones útiles de propósito general: ##################################################################### function getDateTime() { date "+%Y%m%d-%H%M%S" } # Escribe a fichero y muestra por pantalla function echoAndLog() { local DATETIME=`getDateTime` echo "$1" echo "$DATETIME;$SSH_CLIENT;$1" >> $LOG_FILE } # Escribe a fichero y muestra mensaje de error function errorAndLog() { local DATETIME=`getDateTime` echo "ERROR: $1" echo "$DATETIME;$SSH_CLIENT;ERROR: $1" >> $LOG_FILE } # Escribe a fichero y muestra mensaje de aviso function warningAndLog() { local DATETIME=`getDateTime` echo "Warning: $1" echo "$DATETIME;$SSH_CLIENT;Warning: $1" >> $LOG_FILE } # Comprueba si el elemento pasado en $2 está en el array $1 function isInArray() { if [ $# -ne 2 ]; then errorAndLog "${FUNCNAME}(): invalid number of parameters" exit 1 fi local deps local is_in_array=1 local element="$2" echoAndLog "${FUNCNAME}(): checking if $2 is in $1" eval "deps=( \"\${$1[@]}\" )" # Copia local del array del parámetro 1. for (( i = 0 ; i < ${#deps[@]} ; i++ )); do if [ "${deps[$i]}" = "${element}" ]; then echoAndLog "isInArray(): $element found in array" is_in_array=0 fi done if [ $is_in_array -ne 0 ]; then echoAndLog "${FUNCNAME}(): $element NOT found in array" fi return $is_in_array } ##################################################################### ####### Funciones de manejo de paquetes Debian ##################################################################### function checkPackage() { package=$1 if [ -z $package ]; then errorAndLog "${FUNCNAME}(): parameter required" exit 1 fi echoAndLog "${FUNCNAME}(): checking if package $package exists" eval $CHECKPKG if [ $? -eq 0 ]; then echoAndLog "${FUNCNAME}(): package $package exists" return 0 else echoAndLog "${FUNCNAME}(): package $package doesn't exists" return 1 fi } # Recibe array con dependencias # por referencia deja un array con las dependencias no resueltas # devuelve 1 si hay alguna dependencia no resuelta function checkDependencies() { if [ $# -ne 2 ]; then errorAndLog "${FUNCNAME}(): invalid number of parameters" exit 1 fi echoAndLog "${FUNCNAME}(): checking dependences" uncompletedeps=0 # copia local del array del parametro 1 local deps eval "deps=( \"\${$1[@]}\" )" declare -a local_notinstalled for (( i = 0 ; i < ${#deps[@]} ; i++ )) do checkPackage ${deps[$i]} if [ $? -ne 0 ]; then local_notinstalled[$uncompletedeps]=$package let uncompletedeps=uncompletedeps+1 fi done # relleno el array especificado en $2 por referencia for (( i = 0 ; i < ${#local_notinstalled[@]} ; i++ )) do eval "${2}[$i]=${local_notinstalled[$i]}" done # retorna el numero de paquetes no resueltos echoAndLog "${FUNCNAME}(): dependencies uncompleted: $uncompletedeps" return $uncompletedeps } # Recibe un array con las dependencias y lo instala function installDependencies() { if [ $# -ne 1 ]; then errorAndLog "${FUNCNAME}(): invalid number of parameters" exit 1 fi echoAndLog "${FUNCNAME}(): installing uncompleted dependencies" # copia local del array del parametro 1 local deps eval "deps=( \"\${$1[@]}\" )" local string_deps="" for (( i = 0 ; i < ${#deps[@]} ; i++ )) do string_deps="$string_deps ${deps[$i]}" done if [ -z "${string_deps}" ]; then errorAndLog "${FUNCNAME}(): array of dependeces is empty" exit 1 fi OLD_DEBIAN_FRONTEND=$DEBIAN_FRONTEND # Debian/Ubuntu export DEBIAN_FRONTEND=noninteractive echoAndLog "${FUNCNAME}(): now $string_deps will be installed" eval $INSTALLPKG $string_deps if [ $? -ne 0 ]; then errorAndLog "${FUNCNAME}(): error installing dependencies" return 1 fi DEBIAN_FRONTEND=$OLD_DEBIAN_FRONTEND # Debian/Ubuntu test grep -q "EPEL temporal" /etc/yum.repos.d/epel.repo 2>/dev/null || mv -f /etc/yum.repos.d/epel.repo.rpmnew /etc/yum.repos.d/epel.repo 2>/dev/null # CentOS/RedHat EPEL echoAndLog "${FUNCNAME}(): dependencies installed" } # Hace un backup del fichero pasado por parámetro # deja un -last y uno para el día function backupFile() { if [ $# -ne 1 ]; then errorAndLog "${FUNCNAME}(): invalid number of parameters" exit 1 fi local file="$1" local dateymd=`date +%Y%m%d` if [ ! -f "$file" ]; then warningAndLog "${FUNCNAME}(): file $file doesn't exists" return 1 fi echoAndLog "${FUNCNAME}(): making $file backup" # realiza una copia de la última configuración como last cp -a "$file" "${file}-LAST" # si para el día no hay backup lo hace, sino no if [ ! -f "${file}-${dateymd}" ]; then cp -a "$file" "${file}-${dateymd}" fi echoAndLog "${FUNCNAME}(): $file backup success" } ##################################################################### ####### Funciones para el manejo de bases de datos ##################################################################### # This function set password to root function mysqlSetRootPassword() { if [ $# -ne 1 ]; then errorAndLog "${FUNCNAME}(): invalid number of parameters" exit 1 fi local root_mysql="$1" echoAndLog "${FUNCNAME}(): setting root password in MySQL server" mysqladmin -u root password "$root_mysql" if [ $? -ne 0 ]; then errorAndLog "${FUNCNAME}(): error while setting root password in MySQL server" return 1 fi echoAndLog "${FUNCNAME}(): root password saved!" return 0 } # Si el servicio mysql esta ya instalado cambia la variable de la clave del root por la ya existente function mysqlGetRootPassword() { local pass_mysql local pass_mysql2 # Comprobar si MySQL está instalado con la clave de root por defecto. if mysql -u root -p"$MYSQL_ROOT_PASSWORD" <<<"quit" 2>/dev/null; then echoAndLog "${FUNCNAME}(): Using default mysql root password." else stty -echo echo "There is a MySQL service already installed." read -p "Enter MySQL root password: " pass_mysql echo "" read -p "Confrim password:" pass_mysql2 echo "" stty echo if [ "$pass_mysql" == "$pass_mysql2" ] ;then MYSQL_ROOT_PASSWORD="$pass_mysql" return 0 else echo "The keys don't match. Do not configure the server's key," echo "transactions in the database will give error." return 1 fi fi } # comprueba si puede conectar con mysql con el usuario root function mysqlTestConnection() { if [ $# -ne 1 ]; then errorAndLog "${FUNCNAME}(): invalid number of parameters" exit 1 fi local root_password="$1" echoAndLog "${FUNCNAME}(): checking connection to mysql..." # Componer fichero con credenciales de conexión a MySQL. touch $TMPMYCNF chmod 600 $TMPMYCNF cat << EOT > $TMPMYCNF [client] user=root password=$root_password EOT # Borrar el fichero temporal si termina el proceso de instalación. trap "rm -f $TMPMYCNF" 0 1 2 3 6 9 15 # Comprobar conexión a MySQL. echo "" | mysql --defaults-extra-file=$TMPMYCNF if [ $? -ne 0 ]; then errorAndLog "${FUNCNAME}(): connection to mysql failed, check root password and if daemon is running!" return 1 else echoAndLog "${FUNCNAME}(): connection success" return 0 fi } # comprueba si la base de datos existe function mysqlDbExists() { if [ $# -ne 1 ]; then errorAndLog "${FUNCNAME}(): invalid number of parameters" exit 1 fi local database="$1" echoAndLog "${FUNCNAME}(): checking if $database exists..." echo "show databases" | mysql --defaults-extra-file=$TMPMYCNF | grep "^${database}$" if [ $? -ne 0 ]; then echoAndLog "${FUNCNAME}():database $database doesn't exists" return 1 else echoAndLog "${FUNCNAME}():database $database exists" return 0 fi } # Comprueba si la base de datos está vacía. function mysqlCheckDbIsEmpty() { if [ $# -ne 1 ]; then errorAndLog "${FUNCNAME}(): invalid number of parameters" exit 1 fi local database="$1" echoAndLog "${FUNCNAME}(): checking if $database is empty..." num_tablas=`echo "show tables" | mysql --defaults-extra-file=$TMPMYCNF "${database}" | wc -l` if [ $? -ne 0 ]; then errorAndLog "${FUNCNAME}(): error executing query, check database and root password" exit 1 fi if [ $num_tablas -eq 0 ]; then echoAndLog "${FUNCNAME}():database $database is empty" return 0 else echoAndLog "${FUNCNAME}():database $database has tables" return 1 fi } # Importa un fichero SQL en la base de datos. # Parámetros: # - 1: nombre de la BD. # - 2: fichero a importar. # Nota: el fichero SQL puede contener las siguientes palabras reservadas: # - SERVERIP: se sustituye por la dirección IP del servidor. # - DBUSER: se sustituye por usuario de conexión a la BD definido en este script. # - DBPASSWD: se sustituye por la clave de conexión a la BD definida en este script. function mysqlImportSqlFileToDb() { if [ $# -ne 2 ]; then errorAndLog "${FNCNAME}(): invalid number of parameters" exit 1 fi local database="$1" local sqlfile="$2" local tmpfile=$(mktemp) local i=0 local dev="" local status if [ ! -f $sqlfile ]; then errorAndLog "${FUNCNAME}(): Unable to locate $sqlfile!!" return 1 fi echoAndLog "${FUNCNAME}(): importing SQL file to ${database}..." chmod 600 $tmpfile for dev in ${DEVICE[*]}; do if [ "${DEVICE[i]}" == "$DEFAULTDEV" ]; then sed -e "s/SERVERIP/${SERVERIP[i]}/g" \ -e "s/DBUSER/$OPENGNSYS_DB_USER/g" \ -e "s/DBPASSWORD/$OPENGNSYS_DB_PASSWD/g" \ $sqlfile > $tmpfile fi let i++ done mysql --defaults-extra-file=$TMPMYCNF --default-character-set=utf8 "${database}" < $tmpfile status=$? rm -f $tmpfile if [ $status -ne 0 ]; then errorAndLog "${FUNCNAME}(): error while importing $sqlfile in database $database" return 1 fi echoAndLog "${FUNCNAME}(): file imported to database $database" return 0 } # Crea la base de datos function mysqlCreateDb() { if [ $# -ne 1 ]; then errorAndLog "${FUNCNAME}(): invalid number of parameters" exit 1 fi local database="$1" echoAndLog "${FUNCNAME}(): creating database..." mysqladmin --defaults-extra-file=$TMPMYCNF create $database if [ $? -ne 0 ]; then errorAndLog "${FUNCNAME}(): error while creating database $database" return 1 fi # Quitar modo ONLY_FULL_GROUP_BY de MySQL (ticket #730). mysql --defaults-extra-file=$TMPMYCNF -e "SET GLOBAL sql_mode=(SELECT TRIM(BOTH ',' FROM REPLACE(@@sql_mode,'ONLY_FULL_GROUP_BY','')));" echoAndLog "${FUNCNAME}(): database $database created" return 0 } # Comprueba si ya está definido el usuario de acceso a la BD. function mysqlCheckUserExists() { if [ $# -ne 1 ]; then errorAndLog "${FUNCNAME}(): invalid number of parameters" exit 1 fi local userdb="$1" echoAndLog "${FUNCNAME}(): checking if $userdb exists..." echo "select user from user where user='${userdb}'\\G" |mysql --defaults-extra-file=$TMPMYCNF mysql | grep user if [ $? -ne 0 ]; then echoAndLog "${FUNCNAME}(): user doesn't exists" return 1 else echoAndLog "${FUNCNAME}(): user already exists" return 0 fi } # Crea un usuario administrativo para la base de datos function mysqlCreateAdminUserToDb() { if [ $# -ne 3 ]; then errorAndLog "${FUNCNAME}(): invalid number of parameters" exit 1 fi local database="$1" local userdb="$2" local passdb="$3" echoAndLog "${FUNCNAME}(): creating admin user ${userdb} to database ${database}" cat > $WORKDIR/create_${database}.sql </dev/null; then curl --connect-timeout 10 -s "https://$OPENGNSYS_SERVER/" -o /dev/null && \ curl --connect-timeout 10 -s "http://$OPENGNSYS_SERVER/" -o /dev/null elif which wget &>/dev/null; then wget --spider -q "https://$OPENGNSYS_SERVER/" && \ wget --spider -q "http://$OPENGNSYS_SERVER/" else echoAndLog "${FUNCNAME}(): Cannot execute \"wget\" nor \"curl\"." return 1 fi } # Convierte nº de bits (notación CIDR) en máscara de red (gracias a FriedZombie en openwrt.org). cidr2mask () { # Number of args to shift, 255..255, first non-255 byte, zeroes set -- $[ 5 - ($1 / 8) ] 255 255 255 255 $[ (255 << (8 - ($1 % 8))) & 255 ] 0 0 0 [ $1 -gt 1 ] && shift $1 || shift echo ${1-0}.${2-0}.${3-0}.${4-0} } # Obtener los parámetros de red de la interfaz por defecto. function getNetworkSettings() { # Arrays globales definidas: # - DEVICE: nombres de dispositivos de red activos. # - SERVERIP: IPs locales del servidor. # - NETIP: IPs de redes. # - NETMASK: máscaras de red. # - NETBROAD: IPs de difusión de redes. # - ROUTERIP: IPs de routers. # Otras variables globales: # - DEFAULTDEV: dispositivo de red por defecto. # - DNSIP: IP del servidor DNS principal. local i=0 local dev="" echoAndLog "${FUNCNAME}(): Detecting network parameters." DEVICE=( $(ip -o link show up | awk '!/loopback/ {sub(/[:@].*/,"",$2); print $2}') ) if [ -z "$DEVICE" ]; then errorAndLog "${FUNCNAME}(): Network devices not detected." exit 1 fi for dev in ${DEVICE[*]}; do SERVERIP[i]=$(ip -o addr show dev "$dev" | awk '$3~/inet$/ {sub (/\/.*/, ""); print ($4); exit;}') if [ -n "${SERVERIP[i]}" ]; then NETMASK[i]=$( cidr2mask $(ip -o addr show dev "$dev" | awk '$3~/inet$/ {sub (/.*\//, "", $4); print ($4); exit;}') ) NETBROAD[i]=$(ip -o addr show dev "$dev" | awk '$3~/inet$/ {print ($6); exit;}') NETIP[i]=$(ip route list proto kernel | awk -v d="$dev" '$3==d && /src/ {sub (/\/.*/,""); print $1; exit;}') ROUTERIP[i]=$(ip route list default | awk -v d="$dev" '$5==d {print $3; exit;}') DEFAULTDEV=${DEFAULTDEV:-"$dev"} fi let i++ done DNSIP=$(systemd-resolve --status 2>/dev/null | awk '/DNS Servers:/ {print $3; exit;}') [ -z "$DNSIP" ] && DNSIP=$(awk '/nameserver/ {print $2; exit;}' /etc/resolv.conf) if [ -z "${NETIP[*]}" -o -z "${NETMASK[*]}" ]; then errorAndLog "${FUNCNAME}(): Network not detected." exit 1 fi # Variables de ejecución de Apache # - APACHE_RUN_USER # - APACHE_RUN_GROUP if [ -f $APACHECFGDIR/envvars ]; then source $APACHECFGDIR/envvars fi APACHE_RUN_USER=${APACHE_RUN_USER:-"$APACHEUSER"} APACHE_RUN_GROUP=${APACHE_RUN_GROUP:-"$APACHEGROUP"} echoAndLog "${FUNCNAME}(): Default network device: $DEFAULTDEV." } ############################################################ ### Esqueleto para el Servicio pxe y contenedor tftpboot ### ############################################################ function tftpConfigure() { echoAndLog "${FUNCNAME}(): Configuring TFTP service." # Habilitar TFTP y reiniciar Inetd. if [ -n "$TFTPSERV" ]; then if [ -f $INETDCFGDIR/$TFTPSERV ]; then perl -pi -e 's/disable.*/disable = no/' $INETDCFGDIR/$TFTPSERV else service=$TFTPSERV $ENABLESERVICE; $STARTSERVICE fi fi service=$INETDSERV $ENABLESERVICE; $STARTSERVICE # comprobamos el servicio tftp sleep 1 testPxe } # Comprueba que haya conexión al servicio TFTP/PXE. function testPxe () { echoAndLog "${FUNCNAME}(): Checking TFTP service... please wait." echo "test" >$TFTPCFGDIR/testpxe tftp -v 127.0.0.1 -c get testpxe /tmp/testpxe && echoAndLog "TFTP service is OK." || errorAndLog "TFTP service is down." rm -f $TFTPCFGDIR/testpxe /tmp/testpxe } ######################################################################## ## Configuración servicio Samba ######################################################################## # Configurar servicios Samba. function smbConfigure() { echoAndLog "${FUNCNAME}(): Configuring Samba service." backupFile $SAMBACFGDIR/smb.conf # Copiar plantailla de recursos para OpenGnsys sed -e "s/OPENGNSYSDIR/${INSTALL_TARGET//\//\\/}/g" \ $WORKDIR/opengnsys/server/etc/smb-og.conf.tmpl > $SAMBACFGDIR/smb-og.conf # Configurar y recargar Samba" perl -pi -e "s/WORKGROUP/OPENGNSYS/; s/server string \=.*/server string \= OpenGnsys Samba Server/" $SAMBACFGDIR/smb.conf if ! grep -q "smb-og" $SAMBACFGDIR/smb.conf; then echo "include = $SAMBACFGDIR/smb-og.conf" >> $SAMBACFGDIR/smb.conf fi service=$SAMBASERV $ENABLESERVICE; $STARTSERVICE if [ $? -ne 0 ]; then errorAndLog "${FUNCNAME}(): error while configure Samba" return 1 fi # Crear clave para usuario de acceso a los recursos. echo -ne "$OPENGNSYS_CLIENT_PASSWD\n$OPENGNSYS_CLIENT_PASSWD\n" | smbpasswd -a -s $OPENGNSYS_CLIENT_USER echoAndLog "${FUNCNAME}(): Added Samba configuration." return 0 } ######################################################################## ## Configuración servicio Rsync ######################################################################## # Configurar servicio Rsync. function rsyncConfigure() { echoAndLog "${FUNCNAME}(): Configuring Rsync service." backupFile $RSYNCCFGDIR/rsyncd.conf # Configurar acceso a Rsync. sed -e "s/CLIENTUSER/$OPENGNSYS_CLIENT_USER/g" \ $WORKDIR/opengnsys/repoman/etc/rsyncd.conf.tmpl > $RSYNCCFGDIR/rsyncd.conf # Habilitar Rsync y reiniciar Inetd. if [ -n "$RSYNCSERV" ]; then if [ -f /etc/default/rsync ]; then perl -pi -e 's/RSYNC_ENABLE=.*/RSYNC_ENABLE=inetd/' /etc/default/rsync fi if [ -f $INETDCFGDIR/rsync ]; then perl -pi -e 's/disable.*/disable = no/' $INETDCFGDIR/rsync else cat << EOT > $INETDCFGDIR/rsync service rsync { disable = no socket_type = stream wait = no user = root server = $(which rsync) server_args = --daemon log_on_failure += USERID flags = IPv6 } EOT fi service=$RSYNCSERV $ENABLESERVICE service=$INETDSERV $STARTSERVICE fi echoAndLog "${FUNCNAME}(): Added Rsync configuration." return 0 } ######################################################################## ## Configuración servicio DHCP ######################################################################## # Configurar servicios DHCP. function dhcpConfigure() { echoAndLog "${FUNCNAME}(): Sample DHCP configuration." local errcode=0 local i=0 local dev="" backupFile $DHCPCFGDIR/dhcpd.conf for dev in ${DEVICE[*]}; do if [ -n "${SERVERIP[i]}" ]; then backupFile $DHCPCFGDIR/dhcpd-$dev.conf sed -e "s/SERVERIP/${SERVERIP[i]}/g" \ -e "s/NETIP/${NETIP[i]}/g" \ -e "s/NETMASK/${NETMASK[i]}/g" \ -e "s/NETBROAD/${NETBROAD[i]}/g" \ -e "s/ROUTERIP/${ROUTERIP[i]}/g" \ -e "s/DNSIP/$DNSIP/g" \ $WORKDIR/opengnsys/server/etc/dhcpd.conf.tmpl > $DHCPCFGDIR/dhcpd-$dev.conf || errcode=1 fi let i++ done if [ $errcode -ne 0 ]; then errorAndLog "${FUNCNAME}(): error while configuring DHCP server" return 1 fi ln -f $DHCPCFGDIR/dhcpd-$DEFAULTDEV.conf $DHCPCFGDIR/dhcpd.conf service=$DHCPSERV $ENABLESERVICE; $STARTSERVICE echoAndLog "${FUNCNAME}(): Sample DHCP configured in \"$DHCPCFGDIR\"." return 0 } ##################################################################### ####### Funciones específicas de la instalación de Opengnsys ##################################################################### # Copiar ficheros del OpenGnsys Web Console. function installWebFiles() { local COMPATDIR f local SLIMFILE="slim-2.6.1.zip" local SWAGGERFILE="swagger-ui-2.2.5.zip" echoAndLog "${FUNCNAME}(): Installing web files..." # Copiar ficheros. cp -a $WORKDIR/opengnsys/admin/WebConsole/* $INSTALL_TARGET/www #*/ comentario para Doxygen. if [ $? != 0 ]; then errorAndLog "${FUNCNAME}(): Error copying web files." exit 1 fi # Descomprimir librerías: Slim y Swagger-UI. unzip -o $WORKDIR/opengnsys/admin/$SLIMFILE -d $INSTALL_TARGET/www/rest unzip -o $WORKDIR/opengnsys/admin/$SWAGGERFILE -d $INSTALL_TARGET/www/rest # Compatibilidad con dispositivos móviles. COMPATDIR="$INSTALL_TARGET/www/principal" for f in acciones administracion aula aulas hardwares imagenes menus repositorios softwares; do sed 's/clickcontextualnodo/clicksupnodo/g' $COMPATDIR/$f.php > $COMPATDIR/$f.device.php done cp -a $COMPATDIR/imagenes.device.php $COMPATDIR/imagenes.device4.php # Acceso al manual de usuario ln -fs ../doc/userManual $INSTALL_TARGET/www/userManual # Ficheros de log de la API REST. touch $INSTALL_TARGET/log/{ogagent,remotepc,rest}.log echoAndLog "${FUNCNAME}(): Web files installed successfully." } # Copiar ficheros en la zona de descargas de OpenGnsys Web Console. function installDownloadableFiles() { local VERSIONFILE OGVERSION FILENAME TARGETFILE # Obtener versión a descargar. VERSIONFILE="$INSTALL_TARGET/doc/VERSION.json" OGVERSION="$(jq -r ".ogagent // \"$INSTVERSION\"" $VERSIONFILE 2>/dev/null || echo "$INSTVERSION")" FILENAME="ogagentpkgs-$OGVERSION.tar.gz" TARGETFILE=$WORKDIR/$FILENAME # Descargar archivo comprimido, si es necesario. if [ -s $PROGRAMDIR/$FILENAME ]; then echoAndLog "${FUNCNAME}(): Moving $PROGRAMDIR/$FILENAME file to $(dirname $TARGETFILE)" mv $PROGRAMDIR/$FILENAME $TARGETFILE else echoAndLog "${FUNCNAME}(): Downloading $FILENAME" curl $DOWNLOADURL/$FILENAME -o $TARGETFILE fi if [ ! -s $TARGETFILE ]; then errorAndLog "${FUNCNAME}(): Cannot download $FILENAME" return 1 fi # Descomprimir fichero en zona de descargas. tar xvzf $TARGETFILE -C $INSTALL_TARGET/www/descargas if [ $? != 0 ]; then errorAndLog "${FUNCNAME}(): Error uncompressing archive." exit 1 fi } # Configuración específica de Apache. function installWebConsoleApacheConf() { if [ $# -ne 2 ]; then errorAndLog "${FUNCNAME}(): invalid number of parameters" exit 1 fi local path_opengnsys_base="$1" local path_apache2_confd="$2" local CONSOLEDIR=${path_opengnsys_base}/www local sockfile if [ ! -d $path_apache2_confd ]; then errorAndLog "${FUNCNAME}(): path to apache2 conf.d can not found, verify your server installation" return 1 fi mkdir -p $path_apache2_confd/{sites-available,sites-enabled} echoAndLog "${FUNCNAME}(): creating apache2 config file.." # Avtivar PHP-FPM. echoAndLog "${FUNCNAME}(): configuring PHP-FPM" service=$PHPFPMSERV $ENABLESERVICE; $STARTSERVICE sockfile=$(find /run/php -name "php*.sock" -type s -print 2>/dev/null | tail -1) # Activar módulos de Apache. $APACHEENABLEMODS # Activar HTTPS. $APACHEENABLESSL $APACHEMAKECERT # Genera configuración de consola web a partir del fichero plantilla. if [ -n "$(apachectl -v | grep "2\.[0-2]")" ]; then # Configuración para versiones anteriores de Apache. sed -e "s,CONSOLEDIR,$CONSOLEDIR,g" \ $WORKDIR/opengnsys/server/etc/apache-prev2.4.conf.tmpl > $path_apache2_confd/$APACHESITESDIR/${APACHEOGSITE} else # Configuración específica a partir de Apache 2.4 if [ -n "$sockfile" ]; then sed -e "s,CONSOLEDIR,$CONSOLEDIR,g" \ -e "s,proxy:fcgi:.*,proxy:unix:${sockfile%% *}|fcgi://localhost\",g" \ $WORKDIR/opengnsys/server/etc/apache.conf.tmpl > $path_apache2_confd/$APACHESITESDIR/${APACHEOGSITE}.conf else sed -e "s,CONSOLEDIR,$CONSOLEDIR,g" \ $WORKDIR/opengnsys/server/etc/apache.conf.tmpl > $path_apache2_confd/$APACHESITESDIR/${APACHEOGSITE}.conf fi fi $APACHEENABLEOG if [ $? -ne 0 ]; then errorAndLog "${FUNCNAME}(): config file can't be linked to apache conf, verify your server installation" return 1 fi echoAndLog "${FUNCNAME}(): config file created and linked, restarting apache daemon" service=$APACHESERV $ENABLESERVICE; $STARTSERVICE return 0 } # Crear documentación Doxygen para la consola web. function makeDoxygenFiles() { echoAndLog "${FUNCNAME}(): Making Doxygen web files..." $WORKDIR/opengnsys/installer/ogGenerateDoc.sh \ $WORKDIR/opengnsys/client/engine $INSTALL_TARGET/www if [ ! -d "$INSTALL_TARGET/www/html" ]; then errorAndLog "${FUNCNAME}(): unable to create Doxygen web files." return 1 fi mv "$INSTALL_TARGET/www/html" "$INSTALL_TARGET/www/api" echoAndLog "${FUNCNAME}(): Doxygen web files created successfully." } # Crea la estructura base de la instalación de opengnsys function createDirs() { if [ $# -ne 1 ]; then errorAndLog "${FUNCNAME}(): invalid number of parameters" exit 1 fi local path_opengnsys_base="$1" # Crear estructura de directorios. echoAndLog "${FUNCNAME}(): creating directory paths in $path_opengnsys_base" mkdir -p $path_opengnsys_base mkdir -p $path_opengnsys_base/bin mkdir -p $path_opengnsys_base/client/{cache,images,log} mkdir -p $path_opengnsys_base/doc mkdir -p $path_opengnsys_base/etc mkdir -p $path_opengnsys_base/lib mkdir -p $path_opengnsys_base/log/clients ln -fs $path_opengnsys_base/log /var/log/opengnsys mkdir -p $path_opengnsys_base/sbin mkdir -p $path_opengnsys_base/www mkdir -p $path_opengnsys_base/images/groups mkdir -p $TFTPCFGDIR ln -fs $TFTPCFGDIR $path_opengnsys_base/tftpboot mkdir -p $path_opengnsys_base/tftpboot/{menu.lst,grub} if [ $? -ne 0 ]; then errorAndLog "${FUNCNAME}(): error while creating dirs. Do you have write permissions?" return 1 fi # Crear usuario ficticio. if id -u $OPENGNSYS_CLIENT_USER &>/dev/null; then echoAndLog "${FUNCNAME}(): user \"$OPENGNSYS_CLIENT_USER\" is already created" else echoAndLog "${FUNCNAME}(): creating OpenGnsys user" useradd $OPENGNSYS_CLIENT_USER 2>/dev/null if [ $? -ne 0 ]; then errorAndLog "${FUNCNAME}(): error creating OpenGnsys user" return 1 fi fi # Mover el fichero de registro de instalación al directorio de logs. echoAndLog "${FUNCNAME}(): moving installation log file" mv $LOG_FILE $OGLOGFILE && LOG_FILE=$OGLOGFILE chmod 600 $LOG_FILE echoAndLog "${FUNCNAME}(): directory paths created" return 0 } # Copia ficheros de configuración y ejecutables genéricos del servidor. function copyServerFiles () { if [ $# -ne 1 ]; then errorAndLog "${FUNCNAME}(): invalid number of parameters" exit 1 fi local path_opengnsys_base="$1" # Lista de ficheros y directorios origen y de directorios destino. local SOURCES=( server/tftpboot \ /usr/lib/shim/shimx64.efi.signed \ /usr/lib/grub/x86_64-efi-signed/grubnetx64.efi.signed \ server/bin \ repoman/bin \ server/lib \ admin/Sources/Services/ogAdmRepoAux installer/opengnsys_uninstall.sh \ installer/opengnsys_update.sh \ installer/opengnsys_export.sh \ installer/opengnsys_import.sh \ doc ) local TARGETS=( tftpboot \ tftpboot \ tftpboot/grubx64.efi \ bin \ bin \ lib \ sbin \ lib \ lib \ lib \ lib \ doc ) if [ ${#SOURCES[@]} != ${#TARGETS[@]} ]; then errorAndLog "${FUNCNAME}(): inconsistent number of array items" exit 1 fi # Copiar ficheros. echoAndLog "${FUNCNAME}(): copying files to server directories" pushd $WORKDIR/opengnsys local i for (( i = 0; i < ${#SOURCES[@]}; i++ )); do if [ -f "${SOURCES[$i]}" ]; then echoAndLog "Copying ${SOURCES[$i]} to $path_opengnsys_base/${TARGETS[$i]}" cp -a "${SOURCES[$i]}" "${path_opengnsys_base}/${TARGETS[$i]}" elif [ -d "${SOURCES[$i]}" ]; then echoAndLog "Copying content of ${SOURCES[$i]} to $path_opengnsys_base/${TARGETS[$i]}" cp -a "${SOURCES[$i]}"/* "${path_opengnsys_base}/${TARGETS[$i]}" else warningAndLog "Unable to copy ${SOURCES[$i]} to $path_opengnsys_base/${TARGETS[$i]}" fi done popd } #################################################################### ### Funciones de compilación de código fuente de servicios #################################################################### # Compilar los servicios de OpenGnsys function ogServerCompilation () { local ogserverUrl="https://codeload.github.com/opengnsys/ogServer/zip/$BRANCH" local error=0 echoAndLog "${FUNCNAME}(): downloading ogServer code..." if ! (curl "${ogserverUrl}" -o ogserver.zip && \ unzip -qo "ogserver.zip") then errorAndLog "${FUNCNAME}(): "\ "error getting ogServer code from ${ogserverUrl}" return 1 fi rm -f ogserver.zip echoAndLog "${FUNCNAME}(): ogServer code was downloaded" echoAndLog "${FUNCNAME}(): Compiling OpenGnsys Server" pushd "$WORKDIR/ogServer-${BRANCH#v}" autoreconf -fi && ./configure && make && mv ogserver $INSTALL_TARGET/sbin if [ $? -ne 0 ]; then echoAndLog "${FUNCNAME}(): error while compiling OpenGnsys Server" error=1 fi popd return $error } #################################################################### ### Funciones de copia de la Interface de administración #################################################################### # Copiar carpeta de Interface function copyInterfaceAdm () { local hayErrores=0 # Crear carpeta y copiar Interface echoAndLog "${FUNCNAME}(): Copying Administration Interface Folder" cp -ar $WORKDIR/opengnsys/admin/Interface $INSTALL_TARGET/client/interfaceAdm if [ $? -ne 0 ]; then echoAndLog "${FUNCNAME}(): error while copying Administration Interface Folder" hayErrores=1 fi return $hayErrores } #################################################################### ### Funciones instalacion cliente opengnsys #################################################################### function copyClientFiles() { local errstatus=0 echoAndLog "${FUNCNAME}(): Copying OpenGnsys Client files." cp -a $WORKDIR/opengnsys/client/shared/* $INSTALL_TARGET/client if [ $? -ne 0 ]; then errorAndLog "${FUNCNAME}(): error while copying client estructure" errstatus=1 fi echoAndLog "${FUNCNAME}(): Copying OpenGnsys Cloning Engine files." mkdir -p $INSTALL_TARGET/client/lib/engine/bin cp -a $WORKDIR/opengnsys/client/engine/*.lib* $INSTALL_TARGET/client/lib/engine/bin if [ $? -ne 0 ]; then errorAndLog "${FUNCNAME}(): error while copying engine files" errstatus=1 fi if [ $errstatus -eq 0 ]; then echoAndLog "${FUNCNAME}(): client copy files success." else errorAndLog "${FUNCNAME}(): client copy files with errors" fi local ogclientUrl="https://codeload.github.com/opengnsys/ogClient/zip/$BRANCH" echoAndLog "${FUNCNAME}(): downloading ogClient code..." if ! (curl "${ogclientUrl}" -o ogclient.zip && \ unzip -qo ogclient.zip && \ mv "ogClient-${BRANCH#v}" $INSTALL_TARGET/client/ogClient) then errorAndLog "${FUNCNAME}(): "\ "error getting ogClient code from ${ogclientUrl}" return 1 fi rm -f ogclient.zip echoAndLog "${FUNCNAME}(): ogClient code was downloaded" return $errstatus } # Crear certificados para la firma de cargadores de arranque. function createCerts () { local SSLCFGDIR=$INSTALL_TARGET/client/etc/ssl echoAndLog "${FUNCNAME}(): creating certificate files" mkdir -p $SSLCFGDIR/{certs,private} openssl req -new -x509 -newkey rsa:2048 -keyout $SSLCFGDIR/private/opengnsys.key -out $SSLCFGDIR/certs/opengnsys.crt -nodes -days 3650 -subj "/CN=OpenGnsys/" openssl x509 -in $SSLCFGDIR/certs/opengnsys.crt -out $SSLCFGDIR/certs/opengnsys.cer -outform DER echoAndLog "${FUNCNAME}(): certificate successfully created" } # Crear cliente OpenGnsys. function clientCreate() { if [ $# -ne 1 ]; then errorAndLog "${FUNCNAME}(): invalid number of parameters" exit 1 fi local FILENAME="$1" local TARGETFILE=$INSTALL_TARGET/lib/$FILENAME # Descargar cliente, si es necesario. if [ -s $PROGRAMDIR/$FILENAME ]; then echoAndLog "${FUNCNAME}(): Moving $PROGRAMDIR/$FILENAME file to $(dirname $TARGETFILE)" mv $PROGRAMDIR/$FILENAME $TARGETFILE else echoAndLog "${FUNCNAME}(): Downloading $FILENAME" oglivecli download $FILENAME fi if [ ! -s $TARGETFILE ]; then errorAndLog "${FUNCNAME}(): Error loading $FILENAME" return 1 fi # Montar imagen, copiar cliente ogclient y desmontar. echoAndLog "${FUNCNAME}(): Installing ogLive Client" echo -ne "$OPENGNSYS_CLIENT_PASSWD\n$OPENGNSYS_CLIENT_PASSWD\n" | \ oglivecli install $FILENAME echoAndLog "${FUNCNAME}(): Client generation success" } # Configuración básica de servicios de OpenGnsys function openGnsysConfigure() { local i=0 local dev="" local CONSOLEURL echoAndLog "${FUNCNAME}(): Copying init files." cp -a $WORKDIR/opengnsys/admin/Sources/Services/opengnsys.init /etc/init.d/opengnsys cp -a $WORKDIR/opengnsys/admin/Sources/Services/opengnsys.service \ /lib/systemd/system/opengnsys.service cp -a $WORKDIR/ogServer-${BRANCH#v}/cfg/ogserver.service \ /lib/systemd/system/ogserver.service cp -a $WORKDIR/opengnsys/admin/Sources/Services/opengnsys.default /etc/default/opengnsys # Deshabilitar servicios de BitTorrent si no están instalados. if [ ! -e /usr/bin/bttrack ]; then sed -i 's/RUN_BTTRACKER="yes"/RUN_BTTRACKER="no"/; s/RUN_BTSEEDER="yes"/RUN_BTSEEDER="no"/' \ /etc/default/opengnsys fi echoAndLog "${FUNCNAME}(): Creating cron files." echo "* * * * * root [ -x $INSTALL_TARGET/bin/torrent-creator ] && $INSTALL_TARGET/bin/torrent-creator" > /etc/cron.d/torrentcreator echo "5 * * * * root [ -x $INSTALL_TARGET/bin/torrent-tracker ] && $INSTALL_TARGET/bin/torrent-tracker" > /etc/cron.d/torrenttracker echo "* * * * * root [ -x $INSTALL_TARGET/bin/deletepreimage ] && $INSTALL_TARGET/bin/deletepreimage" > /etc/cron.d/imagedelete echo "* * * * * root [ -x $INSTALL_TARGET/bin/ogagentqueue.cron ] && $INSTALL_TARGET/bin/ogagentqueue.cron" > /etc/cron.d/ogagentqueue echoAndLog "${FUNCNAME}(): Creating logrotate configuration files." sed -e "s/OPENGNSYSDIR/${INSTALL_TARGET//\//\\/}/g" \ $WORKDIR/opengnsys/server/etc/logrotate.tmpl > /etc/logrotate.d/opengnsysServer sed -e "s/OPENGNSYSDIR/${INSTALL_TARGET//\//\\/}/g" \ $WORKDIR/opengnsys/repoman/etc/logrotate.tmpl > /etc/logrotate.d/opengnsysRepo echoAndLog "${FUNCNAME}(): Creating OpenGnsys config files." for dev in ${DEVICE[*]}; do if [ -n "${SERVERIP[i]}" ]; then echo "{ \"rest\" : { \"ip\" : \"${SERVERIP[i]}\", \"port\" : \"8888\", \"api_token\": \"5a5ca1172136299640a9f47469237e0a\" }, \"database\" : { \"ip\": \"127.0.0.1\", \"port\": \"3306\", \"name\" : \"$OPENGNSYS_DATABASE\", \"user\" : \"$OPENGNSYS_DB_USER\", \"pass\" : \"$OPENGNSYS_DB_PASSWD\" }, \"wol\" : { \"interface\" : \"$dev\" } }" | jq '.' > "$INSTALL_TARGET"/etc/ogserver-"$dev".json sed -e "s/SERVERIP/${SERVERIP[i]}/g" \ $WORKDIR/opengnsys/repoman/etc/ogAdmRepo.cfg.tmpl > $INSTALL_TARGET/etc/ogAdmRepo-$dev.cfg CONSOLEURL="https://${SERVERIP[i]}/opengnsys" sed -e "s/SERVERIP/${SERVERIP[i]}/g" \ -e "s/DBUSER/$OPENGNSYS_DB_USER/g" \ -e "s/DBPASSWORD/$OPENGNSYS_DB_PASSWD/g" \ -e "s/DATABASE/$OPENGNSYS_DATABASE/g" \ -e "s/OPENGNSYSURL/${CONSOLEURL//\//\\/}/g" \ $INSTALL_TARGET/www/controlacceso.php > $INSTALL_TARGET/www/controlacceso-$dev.php if [ "$dev" == "$DEFAULTDEV" ]; then OPENGNSYS_CONSOLEURL="$CONSOLEURL" OPENGNSYS_SERVERIP="${SERVERIP[i]}" fi fi let i++ done ln -f $INSTALL_TARGET/etc/ogserver-$DEFAULTDEV.json $INSTALL_TARGET/etc/ogserver.json ln -f $INSTALL_TARGET/etc/ogAdmRepo-$DEFAULTDEV.cfg $INSTALL_TARGET/etc/ogAdmRepo.cfg ln -f $INSTALL_TARGET/www/controlacceso-$DEFAULTDEV.php $INSTALL_TARGET/www/controlacceso.php # Configuración del motor de clonación. # - Zona horaria del servidor. TZ=$(timedatectl status|awk -F"[:()]" '/Time.*zone/ {print $2}') cat << EOT >> $INSTALL_TARGET/client/etc/engine.cfg # OpenGnsys Server timezone. TZ="${TZ// /}" EOT # Revisar permisos generales. if [ -x $INSTALL_TARGET/bin/checkperms ]; then echoAndLog "${FUNCNAME}(): Checking permissions." OPENGNSYS_DIR="$INSTALL_TARGET" OPENGNSYS_USER="$OPENGNSYS_CLIENT_USER" APACHE_USER="$APACHE_RUN_USER" APACHE_GROUP="$APACHE_RUN_GROUP" checkperms fi # Evitar inicio de duplicado en Ubuntu 14.04 (Upstart y SysV Init). if [ -f /etc/init/${MYSQLSERV}.conf -a -n "$(which initctl 2>/dev/null)" ]; then service=$MYSQLSERV $DISABLESERVICE fi # Actualizar tokens de autenticación e iniciar los servicios. service="opengnsys" $ENABLESERVICE if [ -x $INSTALL_TARGET/bin/settoken ]; then echoAndLog "${FUNCNAME}(): Setting authentication tokens and starting OpenGnsys services." $INSTALL_TARGET/bin/settoken "$OPENGNSYS_DB_USER" $INSTALL_TARGET/bin/settoken -f else echoAndLog "${FUNCNAME}(): Starting OpenGnsys services." $STARTSERVICE fi # Enable and start ogServer systemd service service="ogserver" $ENABLESERVICE; $STARTSERVICE echoAndLog "${FUNCNAME}(): Creating ogClient config files." sed -i -e 's/127.0.0.1/'$OPENGNSYS_SERVERIP'/' \ -e 's/pass'.*$'/pass\": \"'$OPENGNSYS_CLIENT_PASSWD'\"/' \ $INSTALL_TARGET/client/ogClient/cfg/ogclient.json } ##################################################################### ####### Función de resumen informativo de la instalación ##################################################################### function installationSummary() { local VERSIONFILE REVISION # Crear fichero de versión y revisión, si no existe. VERSIONFILE="$INSTALL_TARGET/doc/VERSION.json" [ -f $VERSIONFILE ] || echo '{ "project": "OpenGnsys" }' >$VERSIONFILE # Incluir datos de revisión, si se está instalando desde el repositorio # de código o si no está incluida en el fichero de versión. if [ $REMOTE -eq 1 ] || [ -z "$(jq -r '.release' $VERSIONFILE)" ]; then # Revisión: rAñoMesDía.Gitcommit (8 caracteres de fecha y 7 primeros de commit). RELEASE=$(curl -s "$API_URL/branches/$BRANCH" | jq -r '"r" + (.commit.commit.committer.date | split("-") | join("")[:8]) + "." + (.commit.sha[:7])' 2>/dev/null) # Obtener revisión para etiqueta de versión en vez de rama de código. [ -z "$RELEASE" ] && RELEASE=$(curl -s $(curl -s "$API_URL/tags" | jq -r ".[] | select(.name==\"$BRANCH\").commit.url" 2>/dev/null) | jq -r '"r" + (.commit.committer.date | split("-") | join("")[:8]) + "." + .sha[:7]' 2>/dev/null) jq ".release=\"$RELEASE\"" $VERSIONFILE | sponge $VERSIONFILE fi VERSION="$(jq -r '[.project, .version, .codename, .release] | join(" ")' $VERSIONFILE 2>/dev/null)" # Mostrar información. echo echoAndLog "OpenGnsys Installation Summary" echo "==============================" echoAndLog "Project version: $VERSION" echoAndLog "Installation directory: $INSTALL_TARGET" echoAndLog "Installation log file: $LOG_FILE" echoAndLog "Repository directory: $INSTALL_TARGET/images" echoAndLog "DHCP configuration directory: $DHCPCFGDIR" echoAndLog "TFTP configuration directory: $TFTPCFGDIR" echoAndLog "Installed ogLive client: $(oglivecli list | awk '{print $2}')" echoAndLog "Samba configuration directory: $SAMBACFGDIR" echoAndLog "Web Console URL: $OPENGNSYS_CONSOLEURL" echoAndLog "Web Console access data: entered by the user" if grep -q "^RUN_BTTRACK.*no" /etc/default/opengnsys; then echoAndLog "BitTorrent service is disabled." fi echo echoAndLog "Post-Installation Instructions:" echo "===============================" echoAndLog "You can improve server security by configuring firewall and SELinux," echoAndLog " running \"$INSTALL_TARGET/lib/security-config\" script as root." echoAndLog "It's strongly recommended to synchronize this server with an NTP server." echoAndLog "Review or edit all configuration files." echoAndLog "Insert DHCP configuration data and restart service." echoAndLog "Review syslog configuration and logrotate by syslog," echoAndLog " in debug mode OpenGnsys log is very extensive." echoAndLog "Optional: Log-in as Web Console admin user." echoAndLog " - Review default Organization data and assign access to users." echoAndLog "Log-in as Web Console organization user." echoAndLog " - Insert OpenGnsys data (labs, computers, menus, etc)." echo } ##################################################################### ####### Proceso de instalación de OpenGnsys ##################################################################### # Sólo ejecutable por usuario root if [ "$(whoami)" != 'root' ]; then echo "ERROR: this program must run under root privileges!!" exit 1 fi globalSetup # Comprobar instalación previa. if cat $INSTALL_TARGET/doc/VERSION.* &>/dev/null; then echo "ERROR: OpenGnsys is already installed. Run \"$INSTALL_TARGET/lib/opengnsys_update.sh\" as root to update." exit 2 fi # Si la distribución no es la recomendada mostramos mensaje informativo. checkDistribution echoAndLog "OpenGnsys installation begins at $(date)" # Introducir datos de configuración y establecer variables globales. userData mkdir -p $WORKDIR pushd $WORKDIR # Detectar datos iniciales de auto-configuración del instalador. autoConfigure # Detectar parámetros de red y comprobar si hay conexión. getNetworkSettings if [ $? -ne 0 ]; then errorAndLog "Error reading default network settings." exit 1 fi checkNetworkConnection if [ $? -ne 0 ]; then errorAndLog "Error connecting to server. Causes:" errorAndLog " - Network is unreachable, review devices parameters." errorAndLog " - You are inside a private network, configure the proxy service." errorAndLog " - Server is temporally down, try agian later." exit 1 fi # Detener servicios de OpenGnsys, si están activos previamente. [ -f /etc/init.d/opengnsys ] && /etc/init.d/opengnsys stop # Actualizar repositorios updatePackageList # Instalación de dependencias (paquetes de sistema operativo). declare -a notinstalled checkDependencies DEPENDENCIES notinstalled if [ $? -ne 0 ]; then installDependencies notinstalled if [ $? -ne 0 ]; then echoAndLog "Error while installing some dependeces, please verify your server installation before continue" exit 1 fi fi if [ -n "$INSTALLEXTRADEPS" ]; then echoAndLog "Installing extra dependencies" for (( i=0; i<${#INSTALLEXTRADEPS[*]}; i++ )); do eval ${INSTALLEXTRADEPS[i]} done fi # Detectar datos de auto-configuración después de instalar paquetes. autoConfigurePost # Arbol de directorios de OpenGnsys. createDirs ${INSTALL_TARGET} if [ $? -ne 0 ]; then errorAndLog "Error while creating directory paths!" exit 1 fi # Si es necesario, descarga el repositorio de código en directorio temporal if [ $REMOTE -eq 1 ]; then downloadCode $CODE_URL if [ $? -ne 0 ]; then errorAndLog "Error while getting code from the repository" exit 1 fi else ln -fs "$(dirname $PROGRAMDIR)" opengnsys fi # Compilar código fuente de los servicios de OpenGnsys. ogServerCompilation if [ $? -ne 0 ]; then errorAndLog "Error while compiling OpenGnsys services" exit 1 fi # Copiar carpeta Interface entre administración y motor de clonación. copyInterfaceAdm if [ $? -ne 0 ]; then errorAndLog "Error while copying Administration Interface" exit 1 fi # Configuración de TFTP. tftpConfigure # Configuración de Samba. smbConfigure if [ $? -ne 0 ]; then errorAndLog "Error while configuring Samba server!" exit 1 fi # Configuración de Rsync. rsyncConfigure # Configuración ejemplo DHCP. dhcpConfigure if [ $? -ne 0 ]; then errorAndLog "Error while copying your dhcp server files!" exit 1 fi # Copiar ficheros de servicios OpenGnsys Server. copyServerFiles ${INSTALL_TARGET} if [ $? -ne 0 ]; then errorAndLog "Error while copying the server files!" exit 1 fi INSTVERSION=$(jq -r '.version' $INSTALL_TARGET/doc/VERSION.json) # Instalar base de datos de OpenGnsys Admin. isInArray notinstalled "mysql-server" || isInArray notinstalled "mariadb-server" if [ $? -eq 0 ]; then # Enable database manager (MySQL, if missing, MariaDB). service=$MYSQLSERV $ENABLESERVICE if [ $? != 0 ]; then service=$MARIADBSERV $ENABLESERVICE fi # Start database manager. $STARTSERVICE # Asignar clave del usuario "root". mysqlSetRootPassword "${MYSQL_ROOT_PASSWORD}" else # Si ya está instalado el gestor de bases de datos, obtener clave de "root", mysqlGetRootPassword fi # Copy MySQL configuration template cp $WORKDIR/opengnsys/server/etc/mysqld-og.cnf $MYSQLCFGDIR 2>/dev/null # Restart database manager. $STARTSERVICE mysqlTestConnection "${MYSQL_ROOT_PASSWORD}" if [ $? -ne 0 ]; then errorAndLog "Error while connection to mysql" exit 1 fi mysqlDbExists ${OPENGNSYS_DATABASE} if [ $? -ne 0 ]; then echoAndLog "Creating Web Console database" mysqlCreateDb ${OPENGNSYS_DATABASE} if [ $? -ne 0 ]; then errorAndLog "Error while creating Web Console database" exit 1 fi else echoAndLog "Web Console database exists, ommiting creation" fi mysqlCheckUserExists ${OPENGNSYS_DB_USER} if [ $? -ne 0 ]; then echoAndLog "Creating user in database" mysqlCreateAdminUserToDb ${OPENGNSYS_DATABASE} ${OPENGNSYS_DB_USER} "${OPENGNSYS_DB_PASSWD}" if [ $? -ne 0 ]; then errorAndLog "Error while creating database user" exit 1 fi fi mysqlCheckDbIsEmpty ${OPENGNSYS_DATABASE} if [ $? -eq 0 ]; then echoAndLog "Creating tables..." if [ -f $WORKDIR/$OPENGNSYS_DB_CREATION_FILE ]; then mysqlImportSqlFileToDb ${OPENGNSYS_DATABASE} $WORKDIR/$OPENGNSYS_DB_CREATION_FILE else errorAndLog "Unable to locate $WORKDIR/$OPENGNSYS_DB_CREATION_FILE!!" exit 1 fi else # Si existe fichero ogBDAdmin-VersLocal-VersRepo.sql; aplicar cambios. REPOVERSION=$(jq -r '.version' $WORKDIR/opengnsys/doc/VERSION.json) OPENGNSYS_DB_UPDATE_FILE="opengnsys/admin/Database/$OPENGNSYS_DATABASE-$INSTVERSION-$REPOVERSION.sql" if [ -f $WORKDIR/$OPENGNSYS_DB_UPDATE_FILE ]; then echoAndLog "Updating tables from version $INSTVERSION to $REPOVERSION" mysqlImportSqlFileToDb ${OPENGNSYS_DATABASE} $WORKDIR/$OPENGNSYS_DB_UPDATE_FILE else echoAndLog "Database unchanged." fi fi # Eliminar fichero temporal con credenciales de acceso a MySQL. rm -f $TMPMYCNF # Copiando páqinas web. installWebFiles # Descargar/descomprimir archivos descargables. installDownloadableFiles # Generar páqinas web de documentación de la API makeDoxygenFiles # Creando configuración de Apache. installWebConsoleApacheConf $INSTALL_TARGET $APACHECFGDIR if [ $? -ne 0 ]; then errorAndLog "Error configuring Apache for OpenGnsys Admin" exit 1 fi popd # Crear la estructura de los accesos al servidor desde el cliente (shared) copyClientFiles if [ $? -ne 0 ]; then errorAndLog "Error creating client structure" fi # Crear certificado para firmar cargadores createCerts # Crear la estructura del cliente de OpenGnsys. for i in $OGLIVE; do if ! clientCreate "$i"; then errorAndLog "Error creating client $i" exit 1 fi done # Configuración de servicios de OpenGnsys openGnsysConfigure # Mostrar sumario de la instalación e instrucciones de post-instalación. installationSummary rm -rf $WORKDIR echoAndLog "OpenGnsys installation finished at $(date)" exit 0