#!/bin/bash # _____ _ _ # | __|___ ___ ___ _| |___ _____| |_ ___ ___ ___ # | __| _| -_| -_| . | . | | . | . | | -_| # |__| |_| |___|___|___|___|_|_|_|___|___|_|_|___| # # Freedom in the Cloud # # Final stage of install # # License # ======= # # Copyright (C) 2014-2018 Bob Mottram # # This program is free software: you can redistribute it and/or modify # it under the terms of the GNU Affero General Public License as published by # the Free Software Foundation, either version 3 of the License, or # (at your option) any later version. # # This program is distributed in the hope that it will be useful, # but WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # GNU Affero General Public License for more details. # # You should have received a copy of the GNU Affero General Public License # along with this program. If not, see . function install_final { if [[ $(is_completed "${FUNCNAME[0]}") == "1" ]]; then return fi # unmount any attached usb drive if [ -d "$USB_MOUNT" ]; then umount "$USB_MOUNT" rm -rf "$USB_MOUNT" fi function_check split_gpg_key_into_fragments split_gpg_key_into_fragments lockdown_permissions mark_completed "${FUNCNAME[0]}" clear echo '' if [[ $ONION_ONLY == 'no' ]]; then echo $" If you wish to verify the server ssh public key at next login it is: $(get_ssh_server_key) Ensure that ports are forwarded from your internet router. You can find the list of ports within the firewall section of the administrator control panel. " else echo $" If you wish to verify the server ssh public key at next login it is: $(get_ssh_server_key) " fi echo '' # add user menu on ssh login if ! grep -q 'controluser' "/home/$MY_USERNAME/.bashrc"; then echo 'export PS1="\W \$"' >> "/home/$MY_USERNAME/.bashrc" echo 'controluser' >> "/home/$MY_USERNAME/.bashrc" fi if [ ! -f "$IMAGE_PASSWORD_FILE" ]; then if [ -f "/root/${PROJECT_NAME}-wifi.cfg" ]; then create_wifi_startup_script echo '' echo $'Shutting down the system. Detatch the ethernet cable, attach wifi dongle, then power on again.' echo '' "${PROJECT_NAME}-logging" off --restart systemctl poweroff return fi echo $'Turning off logging' "${PROJECT_NAME}-logging" off --restart echo $'Rebooting the system' systemctl reboot -i fi echo $'Turning off logging' "${PROJECT_NAME}-logging" off --restart } function update_installed_apps_list { # Why does this secondary file exist, apart from COMPLETION_FILE ? # It's so that it is visible to unprivileged users from the user control panel grep "install_" "$COMPLETION_FILE" > "/usr/share/${PROJECT_NAME}/installed.txt" } function create_default_user_removal_daemon { # This daemon runs on first boot and removes the default fbone user first_start_daemon_filename=/etc/systemd/system/firststart.service first_start_script=/usr/local/bin/firststart { echo '#!/bin/bash'; echo 'if [ -d /home/fbone]; then'; echo ' userdel -r fbone'; echo ' if [ -d /home/fbone]; then'; echo ' rm -rf /home/fbone'; echo ' fi'; echo 'fi'; echo 'systemctl disable firststart'; echo "rm $first_start_daemon_filename"; } > $first_start_script chmod +x $first_start_script { echo '[Unit]'; echo 'Description=Daemon run on first boot'; echo 'After=syslog.target'; echo 'After=network.target'; echo ''; echo '[Service]'; echo 'User=root'; echo 'Group=root'; echo "ExecStart=$first_start_script"; echo 'StandardOutput=syslog'; echo 'StandardError=syslog'; echo ''; echo '[Install]'; echo 'WantedBy=multi-user.target'; } > $first_start_daemon_filename systemctl enable firststart } function final_set_onion_hostname { if [[ "$ONION_ONLY" == 'no' ]]; then return fi if [ ! -f /var/lib/tor/hidden_service_email/hostname ]; then echo $'No onion domain for email was found' exit 368365 fi onion_domain=$(cat /var/lib/tor/hidden_service_email/hostname) echo "$onion_domain" > /etc/hostname hostname "$onion_domain" echo "127.0.1.1 $onion_domain" >> /etc/hosts echo "$onion_domain" > /etc/mailname } function setup_final { function_check update_installed_apps_list update_installed_apps_list function_check create_default_user_removal_daemon create_default_user_removal_daemon function_check final_set_onion_hostname final_set_onion_hostname function_check install_tripwire install_tripwire function_check install_final install_final export DEBIAN_FRONTEND= } # NOTE: deliberately no exit 0