Support for cjdns
This commit is contained in:
Bob Mottram
parent
c6c05693bc
commit
3566b9ed30
|
|
@ -314,6 +314,13 @@ REMOTE_BACKUPS_LOG=/var/log/remotebackups.log
|
|||
# message if something fails to install
|
||||
CHECK_MESSAGE="Check your internet connection, /etc/network/interfaces and /etc/resolv.conf, then delete $COMPLETION_FILE, run 'rm -fR /var/lib/apt/lists/* && apt-get update --fix-missing' and run this script again. If hash sum mismatches persist then try setting $DEBIAN_REPO to a different mirror and also change /etc/apt/sources.list."
|
||||
|
||||
# cjdns settings
|
||||
ENABLE_CJDNS="no"
|
||||
CJDNS_PRIVATE_KEY=
|
||||
CJDNS_PUBLIC_KEY=
|
||||
CJDNS_IPV6=
|
||||
CJDNS_PASSWORD=
|
||||
|
||||
function show_help {
|
||||
echo ''
|
||||
echo './install-freedombone.sh [domain] [username] [subdomain code] [system type]'
|
||||
|
|
@ -381,6 +388,18 @@ function read_configuration {
|
|||
if grep -q "LOCAL_NETWORK_STATIC_IP_ADDRESS" $CONFIGURATION_FILE; then
|
||||
LOCAL_NETWORK_STATIC_IP_ADDRESS=$(grep "LOCAL_NETWORK_STATIC_IP_ADDRESS" $CONFIGURATION_FILE | awk -F '=' '{print $2}')
|
||||
fi
|
||||
if grep -q "ENABLE_CJDNS" $CONFIGURATION_FILE; then
|
||||
ENABLE_CJDNS=$(grep "ENABLE_CJDNS" $CONFIGURATION_FILE | awk -F '=' '{print $2}')
|
||||
fi
|
||||
if grep -q "CJDNS_IPV6" $CONFIGURATION_FILE; then
|
||||
CJDNS_IPV6=$(grep "CJDNS_IPV6" $CONFIGURATION_FILE | awk -F '=' '{print $2}')
|
||||
fi
|
||||
if grep -q "CJDNS_PUBLIC_KEY" $CONFIGURATION_FILE; then
|
||||
CJDNS_PUBLIC_KEY=$(grep "CJDNS_PUBLIC_KEY" $CONFIGURATION_FILE | awk -F '=' '{print $2}')
|
||||
fi
|
||||
if grep -q "CJDNS_PRIVATE_KEY" $CONFIGURATION_FILE; then
|
||||
CJDNS_PRIVATE_KEY=$(grep "CJDNS_PRIVATE_KEY" $CONFIGURATION_FILE | awk -F '=' '{print $2}')
|
||||
fi
|
||||
if grep -q "BACKUP_CERTIFICATE" $CONFIGURATION_FILE; then
|
||||
BACKUP_CERTIFICATE=$(grep "BACKUP_CERTIFICATE" $CONFIGURATION_FILE | awk -F '=' '{print $2}')
|
||||
fi
|
||||
|
|
@ -533,6 +552,181 @@ function install_not_on_BBB {
|
|||
echo 'install_not_on_BBB' >> $COMPLETION_FILE
|
||||
}
|
||||
|
||||
function install_cjdns {
|
||||
if grep -Fxq "install_cjdns" $COMPLETION_FILE; then
|
||||
return
|
||||
fi
|
||||
if [[ $ENABLE_CJDNS != "yes" ]]; then
|
||||
return
|
||||
fi
|
||||
apt-get -y install nodejs git build-essential
|
||||
|
||||
if [ ! -d /etc/cjdns ]; then
|
||||
git clone https://github.com/cjdelisle/cjdns.git /etc/cjdns
|
||||
cd /etc/cjdns
|
||||
# create a configuration
|
||||
if [ ! -f /etc/cjdns/cjdroute.conf ]; then
|
||||
./cjdroute --genconf > /etc/cjdns/cjdroute.conf
|
||||
fi
|
||||
./do
|
||||
# create a user to run as
|
||||
useradd cjdns
|
||||
else
|
||||
cd /etc/cjdns
|
||||
git pull
|
||||
./do
|
||||
fi
|
||||
|
||||
# set permissions
|
||||
chown -R cjdns:cjdns /etc/cjdns
|
||||
chmod 600 /etc/cjdns/cjdroute.conf
|
||||
|
||||
/sbin/ip tuntap add mode tun user cjdns dev cjdroute0
|
||||
|
||||
# insert values into the configuration file
|
||||
if [ $CJDNS_PRIVATE_KEY ]; then
|
||||
sed -i "s/\"privateKey\":.*/\"privateKey\": \"$CJDNS_PRIVATE_KEY\",/g" /etc/cjdns/cjdroute.conf
|
||||
else
|
||||
CJDNS_PRIVATE_KEY=$(cat /etc/cjdns/cjdroute.conf | grep '"privateKey"' | awk -F '"' '{print $4}')
|
||||
fi
|
||||
if [ $CJDNS_PUBLIC_KEY ]; then
|
||||
sed -i "s/\"publicKey\":.*/\"publicKey\": \"$CJDNS_PUBLIC_KEY\",/g" /etc/cjdns/cjdroute.conf
|
||||
else
|
||||
CJDNS_PUBLIC_KEY=$(cat /etc/cjdns/cjdroute.conf | grep '"publicKey"' | awk -F '"' '{print $4}')
|
||||
fi
|
||||
if [ $CJDNS_IPV6 ]; then
|
||||
sed -i "s/\"ipv6\":.*/\"ipv6\": \"$CJDNS_IPV6\",/g" /etc/cjdns/cjdroute.conf
|
||||
else
|
||||
CJDNS_IPV6=$(cat /etc/cjdns/cjdroute.conf | grep '"ipv6"' | awk -F '"' '{print $4}')
|
||||
fi
|
||||
if [ $CJDNS_PASSWORD ]; then
|
||||
sed -i "0,/{\"password\":.*/s//{\"password\": \"$CJDNS_PASSWORD\"}/g" /etc/cjdns/cjdroute.conf
|
||||
else
|
||||
CJDNS_PASSWORD=$(cat /etc/cjdns/cjdroute.conf | grep '"password"' | awk -F '"' '{print $4}' | sed -n 1p)
|
||||
fi
|
||||
|
||||
# endure that ipv6 is enabled and can route
|
||||
sed -i 's/net.ipv6.conf.all.disable_ipv6.*/net.ipv6.conf.all.disable_ipv6 = 0/g' /etc/sysctl.conf
|
||||
#sed -i "s/net.ipv6.conf.all.accept_redirects.*/net.ipv6.conf.all.accept_redirects = 1/g" /etc/sysctl.conf
|
||||
#sed -i "s/net.ipv6.conf.all.accept_source_route.*/net.ipv6.conf.all.accept_source_route = 1/g" /etc/sysctl.conf
|
||||
#sed -i "s/net.ipv6.conf.all.forwarding.*/net.ipv6.conf.all.forwarding=1/g" /etc/sysctl.conf
|
||||
|
||||
echo '#!/bin/sh -e' > /etc/init.d/cjdns
|
||||
echo '### BEGIN INIT INFO' >> /etc/init.d/cjdns
|
||||
echo '# hyperboria.sh - An init script (/etc/init.d/) for cjdns' >> /etc/init.d/cjdns
|
||||
echo '# Provides: cjdroute' >> /etc/init.d/cjdns
|
||||
echo '# Required-Start: $remote_fs $network' >> /etc/init.d/cjdns
|
||||
echo '# Required-Stop: $remote_fs $network' >> /etc/init.d/cjdns
|
||||
echo '# Default-Start: 2 3 4 5' >> /etc/init.d/cjdns
|
||||
echo '# Default-Stop: 0 1 6' >> /etc/init.d/cjdns
|
||||
echo '# Short-Description: Cjdns router' >> /etc/init.d/cjdns
|
||||
echo '# Description: A routing engine designed for security, scalability, speed and ease of use.' >> /etc/init.d/cjdns
|
||||
echo '# cjdns git repo: https://github.com/cjdelisle/cjdns/' >> /etc/init.d/cjdns
|
||||
echo '### END INIT INFO' >> /etc/init.d/cjdns
|
||||
echo '' >> /etc/init.d/cjdns
|
||||
echo 'PROG="cjdroute"' >> /etc/init.d/cjdns
|
||||
echo 'GIT_PATH="/etc/cjdns"' >> /etc/init.d/cjdns
|
||||
echo 'PROG_PATH="/etc/cjdns"' >> /etc/init.d/cjdns
|
||||
echo 'CJDNS_CONFIG="cjdroute.conf"' >> /etc/init.d/cjdns
|
||||
echo 'CJDNS_USER="cjdns"' >> /etc/init.d/cjdns
|
||||
echo "CJDNS_IP='$CJDNS_IPV6'" >> /etc/init.d/cjdns
|
||||
echo '' >> /etc/init.d/cjdns
|
||||
echo 'start() {' >> /etc/init.d/cjdns
|
||||
echo ' # Start it up with the user cjdns' >> /etc/init.d/cjdns
|
||||
echo ' if [ $(pgrep cjdroute | wc -l) != 0 ];' >> /etc/init.d/cjdns
|
||||
echo ' then' >> /etc/init.d/cjdns
|
||||
echo ' echo "cjdroute is already running. Doing nothing..."' >> /etc/init.d/cjdns
|
||||
echo ' else' >> /etc/init.d/cjdns
|
||||
echo ' echo " * Starting cjdroute"' >> /etc/init.d/cjdns
|
||||
echo ' /sbin/ip addr add $CJDNS_IP/8 dev cjdroute0' >> /etc/init.d/cjdns
|
||||
echo ' /sbin/ip link set mtu 1312 dev cjdroute0' >> /etc/init.d/cjdns
|
||||
echo ' /sbin/ip link set cjdroute0 up' >> /etc/init.d/cjdns
|
||||
echo ' sudo -u $CJDNS_USER $PROG_PATH/$PROG < $PROG_PATH/$CJDNS_CONFIG' >> /etc/init.d/cjdns
|
||||
echo ' fi' >> /etc/init.d/cjdns
|
||||
echo '}' >> /etc/init.d/cjdns
|
||||
echo '' >> /etc/init.d/cjdns
|
||||
echo 'stop() {' >> /etc/init.d/cjdns
|
||||
echo '' >> /etc/init.d/cjdns
|
||||
echo ' if [ $(pgrep cjdroute | wc -l) != 2 ];' >> /etc/init.d/cjdns
|
||||
echo ' then' >> /etc/init.d/cjdns
|
||||
echo ' echo "cjdns isnt running."' >> /etc/init.d/cjdns
|
||||
echo ' else' >> /etc/init.d/cjdns
|
||||
echo ' echo "Killing cjdroute"' >> /etc/init.d/cjdns
|
||||
echo ' killall cjdroute' >> /etc/init.d/cjdns
|
||||
echo ' fi' >> /etc/init.d/cjdns
|
||||
echo '}' >> /etc/init.d/cjdns
|
||||
echo '' >> /etc/init.d/cjdns
|
||||
echo 'status() {' >> /etc/init.d/cjdns
|
||||
echo ' if [ $(pgrep cjdroute | wc -l) != 0 ];' >> /etc/init.d/cjdns
|
||||
echo ' then' >> /etc/init.d/cjdns
|
||||
echo ' echo "Cjdns is running"' >> /etc/init.d/cjdns
|
||||
echo ' else' >> /etc/init.d/cjdns
|
||||
echo ' echo "Cjdns is not running"' >> /etc/init.d/cjdns
|
||||
echo ' fi' >> /etc/init.d/cjdns
|
||||
echo '}' >> /etc/init.d/cjdns
|
||||
echo '' >> /etc/init.d/cjdns
|
||||
echo ' update() {' >> /etc/init.d/cjdns
|
||||
echo ' cd $GIT_PATH' >> /etc/init.d/cjdns
|
||||
echo ' echo "Updating..."' >> /etc/init.d/cjdns
|
||||
echo ' git pull' >> /etc/init.d/cjdns
|
||||
echo ' ./do' >> /etc/init.d/cjdns
|
||||
echo '}' >> /etc/init.d/cjdns
|
||||
echo '' >> /etc/init.d/cjdns
|
||||
echo '## Check to see if we are running as root first.' >> /etc/init.d/cjdns
|
||||
echo 'if [ "$(id -u)" != "0" ]; then' >> /etc/init.d/cjdns
|
||||
echo ' echo "This script must be run as root" 1>&2' >> /etc/init.d/cjdns
|
||||
echo ' exit 1' >> /etc/init.d/cjdns
|
||||
echo 'fi' >> /etc/init.d/cjdns
|
||||
echo '' >> /etc/init.d/cjdns
|
||||
echo 'case $1 in' >> /etc/init.d/cjdns
|
||||
echo ' start)' >> /etc/init.d/cjdns
|
||||
echo ' start' >> /etc/init.d/cjdns
|
||||
echo ' exit 0' >> /etc/init.d/cjdns
|
||||
echo ' ;;' >> /etc/init.d/cjdns
|
||||
echo ' stop)' >> /etc/init.d/cjdns
|
||||
echo ' stop' >> /etc/init.d/cjdns
|
||||
echo ' exit 0' >> /etc/init.d/cjdns
|
||||
echo ' ;;' >> /etc/init.d/cjdns
|
||||
echo ' reload|restart|force-reload)' >> /etc/init.d/cjdns
|
||||
echo ' stop' >> /etc/init.d/cjdns
|
||||
echo ' sleep 1' >> /etc/init.d/cjdns
|
||||
echo ' start' >> /etc/init.d/cjdns
|
||||
echo ' exit 0' >> /etc/init.d/cjdns
|
||||
echo ' ;;' >> /etc/init.d/cjdns
|
||||
echo ' status)' >> /etc/init.d/cjdns
|
||||
echo ' status' >> /etc/init.d/cjdns
|
||||
echo ' exit 0' >> /etc/init.d/cjdns
|
||||
echo ' ;;' >> /etc/init.d/cjdns
|
||||
echo ' update|upgrade)' >> /etc/init.d/cjdns
|
||||
echo ' update' >> /etc/init.d/cjdns
|
||||
echo ' stop' >> /etc/init.d/cjdns
|
||||
echo ' sleep 2' >> /etc/init.d/cjdns
|
||||
echo ' start' >> /etc/init.d/cjdns
|
||||
echo ' exit 0' >> /etc/init.d/cjdns
|
||||
echo ' ;;' >> /etc/init.d/cjdns
|
||||
echo ' **)' >> /etc/init.d/cjdns
|
||||
echo ' echo "Usage: $0 (start|stop|restart|status|update)" 1>&2' >> /etc/init.d/cjdns
|
||||
echo ' exit 1' >> /etc/init.d/cjdns
|
||||
echo ' ;;' >> /etc/init.d/cjdns
|
||||
echo 'esac' >> /etc/init.d/cjdns
|
||||
chmod +x /etc/init.d/cjdns
|
||||
update-rc.d cjdns defaults
|
||||
service cjdns start
|
||||
|
||||
if ! grep -q "Mesh Networking" /home/$MY_USERNAME/README; then
|
||||
echo '' >> /home/$MY_USERNAME/README
|
||||
echo '' >> /home/$MY_USERNAME/README
|
||||
echo 'Mesh Networking' >> /home/$MY_USERNAME/README
|
||||
echo '===============' >> /home/$MY_USERNAME/README
|
||||
echo "IPv6 Address: $CJDNS_IPV6" >> /home/$MY_USERNAME/README
|
||||
echo "Public key: $CJDNS_PUBLIC_KEY" >> /home/$MY_USERNAME/README
|
||||
echo "Private key: $CJDNS_PRIVATE_KEY" >> /home/$MY_USERNAME/README
|
||||
chown $MY_USERNAME:$MY_USERNAME /home/$MY_USERNAME/README
|
||||
fi
|
||||
|
||||
echo 'install_cjdns' >> $COMPLETION_FILE
|
||||
}
|
||||
|
||||
function check_hwrng {
|
||||
# If hardware random number generation was enabled then make sure that the device exists.
|
||||
# if /dev/hwrng is not found then any subsequent cryptographic key generation would
|
||||
|
|
@ -7136,6 +7330,7 @@ set_your_domain_name
|
|||
time_synchronisation
|
||||
configure_internet_protocol
|
||||
create_git_project
|
||||
install_cjdns
|
||||
backup_github_projects
|
||||
configure_ssh
|
||||
check_hwrng
|
||||
|
|
|
|||
Loading…
Reference in New Issue