#!/bin/bash # # .---. . . # | | | # |--- .--. .-. .-. .-.| .-. .--.--. |.-. .-. .--. .-. # | | (.-' (.-' ( | ( )| | | | )( )| | (.-' # ' ' --' --' -' - -' ' ' -' -' -' ' - --' # # Freedom in the Cloud # # Creates a debian image using vmdebootstrap # # License # ======= # # Copyright (C) 2015-2016 Bob Mottram # # This program is free software: you can redistribute it and/or modify # it under the terms of the GNU Affero General Public License as published by # the Free Software Foundation, either version 3 of the License, or # (at your option) any later version. # # This program is distributed in the hope that it will be useful, # but WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # GNU Affero General Public License for more details. # # You should have received a copy of the GNU Affero General Public License # along with this program. If not, see . PROJECT_NAME='freedombone' export TEXTDOMAIN=${PROJECT_NAME}-image export TEXTDOMAINDIR="/usr/share/locale" PROJECT_REPO="https://github.com/bashrc/${PROJECT_NAME}" # recommended RAM for virtual machines VM_MEMORY='1G' VARIANT='full' # fixed username and password when the --generic option is used GENERIC_IMAGE_USERNAME='fbone' GENERIC_IMAGE_PASSWORD='freedombone' IMAGE_TYPE='beaglebone' CURR_DIR=$(pwd) CURR_USER=$(echo $USER) BUILD_DIR=~/.tmp_${PROJECT_NAME}_build VMDEBOOTSTRAP_REPO=git://git.liw.fi/vmdebootstrap VMDEBOOTSTRAP_VERSION=0.8 MAKEFILE=${PROJECT_NAME}-image-makefile IMAGE_SIZE=4G IMAGE_NAME='full' USERNAME=$(echo $USER) PASSWORD= # IP address of the router (gateway) ROUTER_IP_ADDRESS="192.168.1.254" # The fixed IP address of the Beaglebone Black (or other SBC) on your local network BOX_IP_ADDRESS="192.168.1.55" # DNS NAMESERVER1='213.73.91.35' NAMESERVER2='85.214.20.141' # An optional freedombone configuration file CONFIG_FILENAME= DEFAULT_DOMAIN_NAME="${PROJECT_NAME}.local" # Minimum number of characters in a password MINIMUM_PASSWORD_LENGTH=10 # Optional ssh public key to allow SSH_PUBKEY="no" # interactive mode INTERACTIVE="no" # Whether this is a generic image for mass redistribution on the interwebs GENERIC_IMAGE="yes" # Whether to reduce the number of decisions during interactive install MINIMAL_INSTALL="yes" # default SSH port SSH_PORT=2222 # Whether sites are accessible only within a Tor browser ONION_ONLY="no" # Where to fetch packages MIRROR='http://httpredir.debian.org/debian' mesh_router_setup_script() { # create a setup script for a mesh router mesh_script_filename=$1 echo "MY_USERNAME=${USERNAME}" > $mesh_script_filename echo "DEFAULT_DOMAIN_NAME=${USERNAME}" >> $mesh_script_filename echo 'SYSTEM_TYPE=mesh' >> $mesh_script_filename echo 'INSTALLING_ON_BBB=no' >> $mesh_script_filename echo 'USB_DRIVE=/dev/sda1' >> $mesh_script_filename echo 'DDNS_PROVIDER=' >> $mesh_script_filename echo 'DDNS_USERNAME=' >> $mesh_script_filename echo 'DDNS_PASSWORD=' >> $mesh_script_filename echo 'DEFAULT_LANGUAGE=en_GB.UTF-8' >> $mesh_script_filename echo 'MY_EMAIL_ADDRESS=' >> $mesh_script_filename echo 'ENABLE_CJDNS=no' >> $mesh_script_filename echo 'ENABLE_BATMAN=yes' >> $mesh_script_filename echo 'ENABLE_BABEL=no' >> $mesh_script_filename echo 'DEBIAN_REPO=' >> $mesh_script_filename echo 'NAMESERVER1=' >> $mesh_script_filename echo 'NAMESERVER2=' >> $mesh_script_filename echo 'BATMAN_CELLID=any' >> $mesh_script_filename echo 'WIFI_CHANNEL=9' >> $mesh_script_filename } while [[ $# > 1 ]] do key="$1" case $key in -h|--help) show_help ;; -c|--config) shift CONFIG_FILENAME="$1" if [ ! -f $CONFIG_FILENAME ]; then echo $"Config file $CONFIG_FILENAME not found" exit 3 fi DEFAULT_DOMAIN_NAME=$(cat $CONFIG_FILENAME | grep 'DEFAULT_DOMAIN_NAME' | awk -F '=' '{print $2}') ;; -t|--target|--board) shift IMAGE_TYPE="$1" ;; -u|--user|--username) shift USERNAME="$1" ;; -p|--password) shift PASSWORD="$1" if [ ${#PASSWORD} -lt $MINIMUM_PASSWORD_LENGTH ]; then echo $"Your password chould contain at least ${MINIMUM_PASSWORD_LENGTH} characters" exit 3628 fi ;; --sshkey|--sshpubkey|--pubkey) shift SSH_PUBKEY="$1" ;; -s|--size) shift IMAGE_SIZE="$1" ;; # Box static IP address on the LAN --ip) shift BOX_IP_ADDRESS="$1" ;; # Router IP address on the LAN --iprouter) shift ROUTER_IP_ADDRESS="$1" ;; # nameserver 1 --ns1|--nameserver1) shift NAMESERVER1="$1" ;; # nameserver 2 --ns2|--nameserver2) shift NAMESERVER2="$1" ;; -i|--interactive) shift INTERACTIVE="$1" ;; -g|--generic) shift GENERIC_IMAGE="$1" ;; --minimal) shift MINIMAL_INSTALL="$1" ;; --ssh|--sshport) shift SSH_PORT="$1" ;; -v|--variant) shift VARIANT="$1" ;; -o|--onion) shift ONION_ONLY="$1" ;; -r|--repo|--repository) shift PROJECT_REPO="$1" ;; -m|--mirror) shift MIRROR="$1" ;; *) # unknown option ;; esac shift done if [[ $INTERACTIVE == "yes" || $INTERACTIVE == "y" || $INTERACTIVE == "Yes" ]]; then ${PROJECT_NAME}-config --minimal "$MINIMAL_INSTALL" if [ -f freedombone.cfg ]; then CONFIG_FILENAME=freedombone.cfg DEFAULT_DOMAIN_NAME=$(cat $CONFIG_FILENAME | grep 'DEFAULT_DOMAIN_NAME' | awk -F '=' '{print $2}') fi fi if [[ $GENERIC_IMAGE == "yes" ]]; then USERNAME=$GENERIC_IMAGE_USERNAME PASSWORD=$GENERIC_IMAGE_PASSWORD fi # If this is a mesh variant then create an appropriate script #if [[ $VARIANT == "mesh"* ]]; then #CONFIG_FILENAME=/tmp/${PROJECT_NAME}_mesh.cfg #mesh_router_setup_script $CONFIG_FILENAME #DEFAULT_DOMAIN_NAME=$(cat $CONFIG_FILENAME | grep 'DEFAULT_DOMAIN_NAME' | awk -F '=' '{print $2}') #fi if [ ! $PASSWORD ]; then # generate a random password PASSWORD="$(openssl rand -base64 10 | cut -c1-8)" fi image_types=( xz img sig vdi qcow2 ) for im in "${image_types[@]}" do no_of_files=$(ls -afq ${CURR_DIR}/${PROJECT_NAME}*.${im} | wc -l) if (( no_of_files > 0 )); then rm ${CURR_DIR}/${PROJECT_NAME}*.${im} fi done if [ -f ${CURR_DIR}/${PROJECT_NAME}_login_credentials.txt ]; then rm ${CURR_DIR}/${PROJECT_NAME}_login_credentials.txt fi if [ -d $BUILD_DIR ]; then rm -rf $BUILD_DIR fi mkdir -p $BUILD_DIR if [ -f /usr/local/bin/$MAKEFILE ]; then cp /usr/local/bin/$MAKEFILE $BUILD_DIR/Makefile else cp /usr/bin/$MAKEFILE $BUILD_DIR/Makefile fi cp -r /etc/${PROJECT_NAME}/* $BUILD_DIR rm -rf $BUILD_DIR/vendor chown -R $CURR_USER:$CURR_USER $BUILD_DIR cd $BUILD_DIR if [[ $MINIMAL_INSTALL == "yes" ]]; then IMAGE_NAME='min' fi if [[ $ONION_ONLY != "no" ]]; then IMAGE_NAME='onion' fi cd $BUILD_DIR make $IMAGE_TYPE \ USERNAME="$USERNAME" \ PASSWORD="$PASSWORD" \ ROUTER_IP_ADDRESS="$ROUTER_IP_ADDRESS" \ BOX_IP_ADDRESS="$BOX_IP_ADDRESS" \ NAMESERVER1="$NAMESERVER1" \ NAMESERVER2="$NAMESERVER2" \ PROJECT_NAME="$PROJECT_NAME" \ CONFIG_FILENAME="$CONFIG_FILENAME" \ IMAGE_SIZE="$IMAGE_SIZE" \ SSH_PUBKEY="$SSH_PUBKEY" \ GENERIC_IMAGE="$GENERIC_IMAGE" \ MINIMAL_INSTALL="$MINIMAL_INSTALL" \ SSH_PORT="$SSH_PORT" \ ONION_ONLY="$ONION_ONLY" \ IMAGE_NAME="$IMAGE_NAME" \ PROJECT_REPO="$PROJECT_REPO" \ MIRROR="$MIRROR" \ BUILD_MIRROR="$MIRROR" if [ ! "$?" = "0" ]; then echo $'Build failed' rm -rf $BUILD_DIR exit 1 fi EXPECTED_EXTENSION='xz' if [[ $IMAGE_TYPE == "qemu"* ]]; then EXPECTED_EXTENSION='qcow2' fi if [[ $IMAGE_TYPE == "virtualbox"* ]]; then EXPECTED_EXTENSION='vdi' fi shopt -s nullglob imgfiles=(build/${PROJECT_NAME}*.${EXPECTED_EXTENSION}) if [ ${#imgfiles[@]} -eq 0 ]; then echo $'Image was not created' rm -rf $BUILD_DIR exit 2 fi # Move images to the current directory for im in "${image_types[@]}" do no_of_files=$(ls -afq build/${PROJECT_NAME}*.${im} | wc -l) if (( no_of_files > 0 )); then mv build/${PROJECT_NAME}*.${im} ${CURR_DIR}/ fi done rm -rf ${BUILD_DIR} cd ${CURR_DIR} clear echo $" Image was created. You will be able to log into it with: " if [[ $IMAGE_TYPE != "virtualbox"* && $IMAGE_TYPE != "qemu"* ]]; then echo $" ssh $USERNAME@$DEFAULT_DOMAIN_NAME -p $SSH_PORT Password: $PASSWORD " else if [[ $IMAGE_TYPE != "qemu"* ]]; then echo $" Username: $USERNAME Password: $PASSWORD " else if [[ $IMAGE_TYPE != "qemu-x86_64"* && $IMAGE_TYPE != "qemu-amd64"* ]]; then echo "qemu-system-i386 -m ${VM_MEMORY} $(ls ${PROJECT_NAME}*.qcow2)" else echo "qemu-system-x86_64 -m ${VM_MEMORY} $(ls ${PROJECT_NAME}*.qcow2)" fi echo $" Username: $USERNAME Password: $PASSWORD " fi fi ls -lh ${PROJECT_NAME}*.img ${PROJECT_NAME}*.sig ${PROJECT_NAME}*.xz ${PROJECT_NAME}*.vdi ${PROJECT_NAME}*.qcow2 # Remove the mesh script after use if [[ $VARIANT == "mesh"* ]]; then rm -f $CONFIG_FILENAME fi # record the default login credentials for later use echo $"Username: $USERNAME Password: $PASSWORD" > ${CURR_DIR}/${PROJECT_NAME}_login_credentials.txt chmod 600 ${CURR_DIR}/${PROJECT_NAME}_login_credentials.txt if [[ $IMAGE_TYPE != "virtualbox"* && $IMAGE_TYPE != "qemu"* ]]; then echo '' echo $'You can copy the image to a microSD card with:' echo '' echo " sudo dd bs=1M if=$(ls ${PROJECT_NAME}*.img) of=/dev/sdX conv=fdatasync" echo '' fi exit 0