Lutchy Horace
parent
2500470a1a
commit
c0e6080a66
13
README
13
README
|
|
@ -4,11 +4,18 @@ README
|
||||||
|
|
||||||
This repository is a collection of scripts that I utilize throughout my infrastructure.
|
This repository is a collection of scripts that I utilize throughout my infrastructure.
|
||||||
|
|
||||||
You can follow issue tracking here https://redmine.lhprojects.net/projects/scripts
|
You can follow issue tracking here https://gitlab.lhprojects.net/lhprojects-information-network/scripts
|
||||||
|
|
||||||
Scripts
|
Scripts
|
||||||
----------
|
----------
|
||||||
|
|
||||||
backup_files.sh: Script I use to rsync files to off-site storage center. You can
|
| Command | Description |
|
||||||
|
| --- | --- |
|
||||||
|
| backup.sh | Script I use to rsync files to off-site storage center. You can
|
||||||
costomize the configuration via backup.conf and then appending it as an argument
|
costomize the configuration via backup.conf and then appending it as an argument
|
||||||
during the script execution.
|
during the script execution. |
|
||||||
|
| cachet_notifyV2.php | A script to update issue on Cachet website. |
|
||||||
|
| convertPTR2InvidiualDomains.php | Migrate PTR records from a single zone to individual zones. |
|
||||||
|
| createVhosts.sh | Modern VHOST script to create VHOSTS RHEL systems |
|
||||||
|
| beep-notify.sh | Attempts to emit a beeping sound through system speaker |
|
||||||
|
| rsync.sh | A rsync script to rsync data to rsync to remote servers |
|
||||||
|
|
|
||||||
|
|
@ -1,30 +0,0 @@
|
||||||
<?php
|
|
||||||
|
|
||||||
/* Init Classes */
|
|
||||||
|
|
||||||
class GetOpts
|
|
||||||
{
|
|
||||||
private $longOpts = [];
|
|
||||||
|
|
||||||
function __construct()
|
|
||||||
{
|
|
||||||
|
|
||||||
}
|
|
||||||
|
|
||||||
public function setLongOpt(string $opt, array $callback)
|
|
||||||
{
|
|
||||||
$this->longOpts[$opt] = $callback;
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
class CheckDomain
|
|
||||||
{
|
|
||||||
public function host(string $domain)
|
|
||||||
{
|
|
||||||
echo $domain;
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
CheckDomain::host('lhprojects.net');
|
|
||||||
/* Get command line options */
|
|
||||||
$args = new GetOpts;
|
|
||||||
|
|
@ -1,6 +0,0 @@
|
||||||
NGINX_USER=nginx #Unused
|
|
||||||
NGINX_DIR=/etc/nginx
|
|
||||||
NGINX_CONF_D=$NGINX_DIR/conf.d
|
|
||||||
NGINX_SVC_RESTART='rc-service nginx reload'
|
|
||||||
#NGINX_LISTEN_IP=192.168.1.128
|
|
||||||
VHOSTS_DIR=/srv/vhosts
|
|
||||||
176
enable_site.sh
176
enable_site.sh
|
|
@ -1,176 +0,0 @@
|
||||||
#!/bin/bash
|
|
||||||
# README
|
|
||||||
# This script is specifically designed to work on Alpine Linux but
|
|
||||||
# may work with other distributions by including a $HOME/.enable_sites.conf.
|
|
||||||
#
|
|
||||||
# See example .enable_sites.conf.example in this repo.
|
|
||||||
#
|
|
||||||
# This script will create a vhost under Nginx
|
|
||||||
|
|
||||||
DEBUG=0
|
|
||||||
|
|
||||||
set -e
|
|
||||||
|
|
||||||
[ $DEBUG -gt 1 ] && set -x
|
|
||||||
|
|
||||||
function usage {
|
|
||||||
echo -e "$0 domain.tld [disable-php|false] [enable-le]"
|
|
||||||
}
|
|
||||||
|
|
||||||
function cleanup {
|
|
||||||
test -n "$DRY_RUN" && rm $VHOST_CONF_FILE
|
|
||||||
}
|
|
||||||
|
|
||||||
function reload_nginx {
|
|
||||||
echo "${_DRY_RUN}Reloading Nginx"
|
|
||||||
if [ -z "$DRY_RUN" ]; then
|
|
||||||
nginx -t
|
|
||||||
$NGINX_SVC_RESTART
|
|
||||||
else
|
|
||||||
echo "Skipping..."
|
|
||||||
fi
|
|
||||||
}
|
|
||||||
|
|
||||||
# Init variables
|
|
||||||
_conf=$HOME/.enable_site.conf
|
|
||||||
_cwd="$( cd "$( dirname "${BASH_SOURCE[0]}" )" && pwd )"
|
|
||||||
_bootstrap=${_cwd}/bootstrap.sh
|
|
||||||
|
|
||||||
# Init script
|
|
||||||
if test -f $_boostrap; then
|
|
||||||
source $_bootstrap 2> /dev/null
|
|
||||||
else
|
|
||||||
echo "Unable to parse BOOTSTRAP: $_bootstrap"
|
|
||||||
exit 1
|
|
||||||
fi
|
|
||||||
|
|
||||||
test -f $_conf && source $_conf || debug "Unable to parse configuration: $_conf, using defaults"
|
|
||||||
|
|
||||||
NGINX_USER=${NGINX_USER:-nginx}
|
|
||||||
NGINX_DIR=${NGINX_DIR:-/etc/nginx}
|
|
||||||
NGINX_CONF_D=$NGINX_DIR/conf.d
|
|
||||||
NGINX_SVC_RESTART=${NGINX_SVC_RESTART:-rc-service nginx reload}
|
|
||||||
NGINX_SSL_DIR=$NGINX_DIR/ssl
|
|
||||||
VHOSTS_DIR=${VHOSTS_DIR:-/srv/vhosts}
|
|
||||||
SSL_CRT=/etc/nginx/webserver.crt
|
|
||||||
SSL_KEY=/etc/nginx/webserver.key
|
|
||||||
|
|
||||||
if test -z "$1"; then
|
|
||||||
usage
|
|
||||||
exit 0
|
|
||||||
fi
|
|
||||||
|
|
||||||
# VHOST dir
|
|
||||||
_vhost_dir=$VHOSTS_DIR/$1/htdocs
|
|
||||||
if [ -z "$DRY_RUN" ]; then
|
|
||||||
# Check domain is a valid domain
|
|
||||||
host $1 &> /dev/null || err "Invalid domain: $1"
|
|
||||||
|
|
||||||
echo "Creating $_vhost_dir"
|
|
||||||
|
|
||||||
mkdir -p $_vhost_dir
|
|
||||||
else
|
|
||||||
echo "DRY_RUN detected"
|
|
||||||
_DRY_RUN="DRY_RUN: "
|
|
||||||
|
|
||||||
echo "${_DRY_RUN}Creating $_vhost_dir"
|
|
||||||
fi
|
|
||||||
|
|
||||||
# Check if we should enable php
|
|
||||||
[ "$2" != "true" ] && [ "$2" != "disable-php" ] && _enable_php='include php.conf;'
|
|
||||||
|
|
||||||
echo "${_DRY_RUN}Creating NGINX configuration for $1"
|
|
||||||
VHOST_CONF_FILE=$NGINX_CONF_D/$1.conf
|
|
||||||
|
|
||||||
|
|
||||||
if [ -n "$DRY_RUN" ]; then
|
|
||||||
VHOST_CONF_FILE=/tmp/$1.conf
|
|
||||||
debug "${_DRY_RUN}Redirecting to $VHOST_CONF_FILE"
|
|
||||||
fi
|
|
||||||
|
|
||||||
# Set listen ip if provided
|
|
||||||
test -n "$NGINX_LISTEN_IP" && _v_listen_ip="$NGINX_LISTEN_IP:"
|
|
||||||
|
|
||||||
# set default listening port to 80
|
|
||||||
_v_listen=${_v_listen_ip}80
|
|
||||||
|
|
||||||
# Redirect plain-text to SSL
|
|
||||||
if [ "$3" = "enable-le" ]; then
|
|
||||||
|
|
||||||
# Change default listening port to 443
|
|
||||||
_v_listen="${_v_listen_ip}443 ssl"
|
|
||||||
|
|
||||||
# set ssl configuration
|
|
||||||
_v_ssl=$(cat << EOF
|
|
||||||
ssl_certificate ssl/$1.pem;
|
|
||||||
ssl_certificate_key ssl/$1.key;
|
|
||||||
EOF
|
|
||||||
)
|
|
||||||
|
|
||||||
# write the plain-text virtual host so
|
|
||||||
# we authenticate with Let's encrypt and
|
|
||||||
# redirect plain-text to SSL
|
|
||||||
cat << EOF > $VHOST_CONF_FILE
|
|
||||||
server {
|
|
||||||
listen ${_v_listen_ip}80;
|
|
||||||
server_name $1;
|
|
||||||
root $_vhost_dir;
|
|
||||||
|
|
||||||
location /.well-known {
|
|
||||||
autoindex on;
|
|
||||||
}
|
|
||||||
|
|
||||||
location / {
|
|
||||||
return 302 https://$1\$request_uri;
|
|
||||||
}
|
|
||||||
}
|
|
||||||
EOF
|
|
||||||
|
|
||||||
reload_nginx
|
|
||||||
|
|
||||||
echo "${_DRY_RUN}Requesting a Let's Encrypt certificate"
|
|
||||||
if [ -z "$DRY_RUN" ]; then
|
|
||||||
certbot certonly --webroot --webroot-path=$_vhost_dir -d $1
|
|
||||||
fi
|
|
||||||
|
|
||||||
_le_path=/etc/letsencrypt/live
|
|
||||||
_le_crt="$_le_path/$1/fullchain.pem $NGINX_SSL_DIR/$1.pem"
|
|
||||||
_le_key="$_le_path/$1/privkey.pem $NGINX_SSL_DIR/$1.key"
|
|
||||||
|
|
||||||
echo "${_DRY_RUN}Creating symlink $_le_crt"
|
|
||||||
[ -z "$DRY_RUN" ] && ln -s $_le_crt
|
|
||||||
echo "${_DRY_RUN}Creating symlink $_le_key"
|
|
||||||
[ -z "$DRY_RUN" ] && ln -s $_le_key
|
|
||||||
|
|
||||||
fi
|
|
||||||
|
|
||||||
cat << EOF >> $VHOST_CONF_FILE
|
|
||||||
$rd
|
|
||||||
server {
|
|
||||||
listen $_v_listen;
|
|
||||||
server_name $1;
|
|
||||||
root $_vhost_dir;
|
|
||||||
index index.php index.html index.html;
|
|
||||||
|
|
||||||
error_log /var/log/nginx/$1.error.log;
|
|
||||||
access_log /var/log/nginx/$1.access.log main;
|
|
||||||
|
|
||||||
$_v_ssl
|
|
||||||
|
|
||||||
location / {
|
|
||||||
|
|
||||||
}
|
|
||||||
|
|
||||||
$_enable_php
|
|
||||||
}
|
|
||||||
EOF
|
|
||||||
|
|
||||||
if [ -n "$DRY_RUN" ]; then
|
|
||||||
echo -e "${_DRY_RUN}I would have wrote this: \n"
|
|
||||||
cat $VHOST_CONF_FILE
|
|
||||||
fi
|
|
||||||
|
|
||||||
reload_nginx
|
|
||||||
|
|
||||||
echo "Success!"
|
|
||||||
cleanup
|
|
||||||
|
|
@ -1,110 +0,0 @@
|
||||||
<?php
|
|
||||||
|
|
||||||
function deny($code, $reason) {
|
|
||||||
|
|
||||||
switch($code) {
|
|
||||||
case 401:
|
|
||||||
$header = '401 Unauthorized';
|
|
||||||
header('WWW-Authenticate: Basic realm="handleLXCAppArmorProfiles"');
|
|
||||||
break;
|
|
||||||
case 403:
|
|
||||||
$header = '403 Forbidden';
|
|
||||||
break;
|
|
||||||
case 503:
|
|
||||||
$header = '503 Service Unavailable';
|
|
||||||
break;
|
|
||||||
}
|
|
||||||
header('HTTP/1.0 ' . $header);
|
|
||||||
print "$code $reason";
|
|
||||||
exit(1);
|
|
||||||
}
|
|
||||||
|
|
||||||
function cleanup() {
|
|
||||||
# Do intelligent cleanup!
|
|
||||||
foreach($_FILES as $fieldName => $key) {
|
|
||||||
if ('tmp_name' === $key) {
|
|
||||||
if (is_countable($_FILES[$fieldName][$key])) {
|
|
||||||
foreach($_FILES[$fieldName][$key] as $fileName) {
|
|
||||||
@unlink($fileName);
|
|
||||||
}
|
|
||||||
} else {
|
|
||||||
@unlink($_FILES[$fieldName][$key]);
|
|
||||||
}
|
|
||||||
}
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
# Check if SAPI is cli
|
|
||||||
if ('cli' === php_sapi_name()) {
|
|
||||||
if ('hash' === @$argv[1] && !empty($argv[2])) {
|
|
||||||
# We going to hash a password and return the result
|
|
||||||
# and write to file
|
|
||||||
$pw = password_hash($argv[2], PASSWORD_DEFAULT);
|
|
||||||
echo $pw;
|
|
||||||
file_put_contents('.htpasswd', "tar.lxc-apparmor-profiles-user:$pw");
|
|
||||||
|
|
||||||
} else {
|
|
||||||
print "Nothing to do here! Exiting...";
|
|
||||||
exit(0);
|
|
||||||
}
|
|
||||||
} else {
|
|
||||||
if (!file_exists('.htpasswd')) {
|
|
||||||
header('HTTP/1.0 503 Service Unavailable');
|
|
||||||
print '503 Service Unavailable';
|
|
||||||
exit(1);
|
|
||||||
}
|
|
||||||
|
|
||||||
$auth_creds = file_get_contents('.htpasswd');
|
|
||||||
$auth_creds = explode(':', $auth_creds);
|
|
||||||
|
|
||||||
if (!isset($_SERVER['PHP_AUTH_USER'])) {
|
|
||||||
deny(401, 'No authorize headers sent!');
|
|
||||||
} else {
|
|
||||||
$user = $_SERVER['PHP_AUTH_USER'];
|
|
||||||
$result = password_verify($_SERVER['PHP_AUTH_PW'], $auth_creds[1]);
|
|
||||||
|
|
||||||
if (true === $result && $auth_creds[0] === $user) {
|
|
||||||
if ('ProcessUpload' === $_SERVER['HTTP_X_APPARMOR_STATE']) {
|
|
||||||
# Process upload.
|
|
||||||
$uploadedFileTmp = $_FILES['apparmor-profiles']['tmp_name'];
|
|
||||||
|
|
||||||
# Check if multiple files where uploaded!
|
|
||||||
if (is_countable($_FILES['apparmor-profiles']['tmp_name'])) {
|
|
||||||
cleanup();
|
|
||||||
deny(403, 'Multiple Uploads not supported!');
|
|
||||||
}
|
|
||||||
|
|
||||||
# Check file mime type is accepted
|
|
||||||
$finfo = new finfo(FILEINFO_MIME);
|
|
||||||
$mime = $finfo->file($uploadedFileTmp);
|
|
||||||
if ('application/x-gzip; charset=binary' !== $mime) {
|
|
||||||
# Clean up tmp file
|
|
||||||
cleanup();
|
|
||||||
deny(403, 'Forbidden mime-type: ' . $mime);
|
|
||||||
}
|
|
||||||
|
|
||||||
# Check if the hash matches what we were given
|
|
||||||
$uploadedHash = hash_file('sha256', $uploadedFileTmp);
|
|
||||||
if ($_SERVER['HTTP_X_TAR_HASH'] !== $uploadedHash) {
|
|
||||||
cleanup();
|
|
||||||
deny(403, 'File hash doesn\'t match!');
|
|
||||||
}
|
|
||||||
|
|
||||||
|
|
||||||
$dest = dirname(__FILE__) . '/apparmor/' . $_FILES['apparmor-profiles']['name'];
|
|
||||||
$result = @move_uploaded_file($uploadedFileTmp, $dest);
|
|
||||||
if (false === $result) {
|
|
||||||
cleanup();
|
|
||||||
deny(503, 'Error processing upload');
|
|
||||||
} else {
|
|
||||||
file_put_contents("$dest.sha256", hash_file('sha256', $dest));
|
|
||||||
cleanup();
|
|
||||||
echo '200 OK';
|
|
||||||
}
|
|
||||||
}
|
|
||||||
} else {
|
|
||||||
cleanup();
|
|
||||||
deny(401, 'Unauthorized');
|
|
||||||
}
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
@ -1,194 +0,0 @@
|
||||||
#!/bin/bash
|
|
||||||
|
|
||||||
LOG=/tmp/pulp_consumer_install.log
|
|
||||||
PYTHON_RHSM_URL=http://mirror.centos.org/centos/7/os/x86_64/Packages/python-rhsm-1.15.4-5.el7.x86_64.rpm
|
|
||||||
ERROR_MSG="Check $LOG log"
|
|
||||||
|
|
||||||
. /etc/os-release
|
|
||||||
|
|
||||||
export LOG
|
|
||||||
export ERROR_MSG
|
|
||||||
|
|
||||||
function debug {
|
|
||||||
if [ -n "$DEBUG" ]; then
|
|
||||||
echo "DEBUG: $1"
|
|
||||||
fi
|
|
||||||
}
|
|
||||||
|
|
||||||
function run_cmd {
|
|
||||||
debug "Executing: $1..."
|
|
||||||
$1 >> $LOG 2>&1
|
|
||||||
if [ $? != 0 ]; then
|
|
||||||
echo "Error: Failed running command '$1'. $ERROR_MSG"
|
|
||||||
exit 1;
|
|
||||||
fi
|
|
||||||
}
|
|
||||||
|
|
||||||
echo ""
|
|
||||||
echo "This script will now install pulp_consumer"
|
|
||||||
echo ""
|
|
||||||
|
|
||||||
export TMPDIR=`mktemp -d /tmp/pulp_consumer.XXXXXX`
|
|
||||||
echo -e "Creating temp directory $TMPDIR...\n"
|
|
||||||
|
|
||||||
OSVER=$(echo $VERSION | awk '{print int($1+0.5)}') # Bash can only compare whole numbers
|
|
||||||
if [ $ID = 'ol' ] && [ $OSVER -ge 7 ]; then
|
|
||||||
echo "Note: python-rhsm has been remove from Oracle Linux 7. Pulling"
|
|
||||||
echo " python-rhsm from mirror.centos.org"
|
|
||||||
echo "Installing $PYTHON_RHSM_URL now..."
|
|
||||||
run_cmd "yum install -y $PYTHON_RHSM_URL"
|
|
||||||
fi
|
|
||||||
echo "Retrieving pulp repo..."
|
|
||||||
run_cmd "wget https://repos.fedorapeople.org/repos/pulp/pulp/rhel-pulp.repo -O /etc/yum.repos.d/rhel-pulp.repo"
|
|
||||||
echo "Installing pulp_consumer and its dependencies..."
|
|
||||||
run_cmd 'yum groupinstall -y pulp-consumer-qpid'
|
|
||||||
|
|
||||||
echo "Installing ssl packages for pulp_consumer message query (qpid)..."
|
|
||||||
run_cmd 'yum install -y qpid-cpp-server-ssl'
|
|
||||||
|
|
||||||
echo ""
|
|
||||||
echo "Extracting embedded files..."
|
|
||||||
echo ""
|
|
||||||
|
|
||||||
cat > $TMPDIR/archive.enc <<'_ENC'
|
|
||||||
H4sIAGy7J1cAA+06a4+jSJLzGan/A9JKN7PyTBkwfrWuT+JpYxtsDPi1arV4g8GA
|
|
||||||
eRjwr79MsKtc1T0zq5Vm905yqLvLzoyMiIx3ZJcZR1lxstMXM46cn/4awAAMSBL+
|
|
||||||
xId97PEn/Ijjg/5PODHEcZIgsSHAw/uDIfYTiv1F8ryDIsv1FEV/Covc9OoXL051
|
|
||||||
0/4B3p/t/z+Fv6GqZ6OZned+5GaoH6G552eo44c2qqfgbxiiZnw62VFuW6hRo5bt
|
|
||||||
6EWY/4rqkQVw7YfdVyqZF5dwD/nbHR296GFhZ2BRz9FVESYoc3M8lAl9cBwtfcjJ
|
|
||||||
i+PMRn0HjeIczRLb9B0fUPbs1H5BkFbYBB7P7PQCDkOv9d0i1XM/jpC/AQwvzvLP
|
|
||||||
4Cf6HS7cifST/YKiwgcGv7a3boRsJbnLncdoFpuBnb+4dn6n8MvfXwCHJE4fOYFv
|
|
||||||
aJLGF98COmg0s+YU1SlClFoJAC3N9G9JYfxYNrAR+iYa2DVaZODCTpyiegGIRLlv
|
|
||||||
NpeDHPXE/5aktuNXb1QgE8gBbTcgGiDoO/W3LAtbNMXO2/uBy/B6CBQMPtw1Z9+M
|
|
||||||
eLMGVAvYbUm05sobB4Fi/pyhirJATRtcFZDLfDeyrYYFcAwdzVMQTEB4KHic+nnd
|
|
||||||
bG2ptSRIk89QjLxVzaMo4HNjCt1p7F7HBTBA5kEEoInWV0o/99DU1kM00bOsjFMr
|
|
||||||
Q+O0of4KelSjMRAV6DL1L3oOqEVAi6dWeajQSpynceSGNSDWuq0FxAWcAttOWrky
|
|
||||||
u7m/mhZ24+LvmdyEggoAfgMMc3dpGCqtOn5HFWgcNYosbeNuc3jwPflmI2vuDO1o
|
|
||||||
AofRc+9uayAd+KOjcA1KordRGjvQelCWSIcs76wZ6p2cvwKNtacsH9w+j9MaHr1h
|
|
||||||
Nyw+nEB/afQeJ3YEXOm3LK8BN0/PPBjq9Sn0owBSjd7pA03AzaBcIESQf7Q3/Yo0
|
|
||||||
Qdk4/EvogSA5AgGyFz/K72GEkmTvvYOjXYjeBSsPsYN27dzsJoHfbt69ttvy6d7Q
|
|
||||||
XkAYIQ9B0Hram0LRL2908jDrQvHBv/pvRhFZof1ipjkCkw31LgCb7DK36+wtQk92
|
|
||||||
lumu/X2k3kQGcjwEqkK9uuafxPl3qaI5+0+kCOQf71e+Pgjye7oD+43C/lzLj+qF
|
|
||||||
+rll7nvav907Du3PjdBmuw0XoGTt16+vKHeyyD2vh3ErNHTL1M7iIjWBE97i5jVB
|
|
||||||
NT6f1cBpTy1DuwKen4Fz2Tfg2W86eyT3evom09uZRt12En+DdH98GLLfa2KDlvlN
|
|
||||||
4DRCnPQIGL8J+OQWsSc/TeP0W+hn+e8LA+m9xSAQLdf9CCZGyKSlgEIKDZeH/PLA
|
|
||||||
754h3MSFtv2Dm1txGYWxDvPcZDWB3gOzYJw+0GmL0S2ptFUbfYcIq28jAYhM8DEy
|
|
||||||
3w6DivAD1TTJCwTVPyXW7qWPjd8nnj8QsKHWOMQPDvxLgvrWtz+W9b29yoYJXGtK
|
|
||||||
06tnCey7NOjfhXpkAVnC/uGND/x259E41YM7NDw4EQX3iKGiXlk9ZhHYhTUabEg+
|
|
||||||
SPDSVoyGKPj5oHB45FFhVpFCdqntAqdLXzNJ431NnH39PsrQbpGl3dA3PqSIN7R3
|
|
||||||
cdVmlLo4vTQGeLGaY82XH0TNd9gfPf19gvoN7P0G9x697mMOa+K+e2P4aPLfS3Y/
|
|
||||||
MturCX6D6y+JfWqS19o24vgtD35u0hKogyf/1h+ums9AHxAPlHAnh1bUzQAWDz8C
|
|
||||||
E0gYZrD7Se0z6JLz1mssO9Qf6kd7ul1Ffzn5UQE8v6my7c7XN6avBa8lgfbadP0h
|
|
||||||
CcZFnhR5m0STOAy/OQ37yKy/+dG3DHRIkZW1/KXiZICDwFFvy6hh56VtR3eJs7Yc
|
|
||||||
wR4MyNCGTpO4gMZt2JaAngvyyF7j99YEwWOWnuvwwkDJRmh/M+MwTr/vXJ1752r5
|
|
||||||
GcS7jSYAF7UzU08gyUZ8GzIpUz35lsffcqiRSL91wqDv/7gBgyO/dXug4QUO3KAk
|
|
||||||
MCSaSQA2fE3CKdK0HVQs2BU5rze5U3qB5Bspf23W22kCTFQNy/aY33YPL3cJm9WH
|
|
||||||
dPCqZ9PTwaAJSGcA0c9BVAGVA2XZb9K12RqNoMigGWuKbGvTr39oURT/qOtGAT9S
|
|
||||||
Wnud98KiI6ztjlyojbYFAuK0fpSZnv2Y34w0DsCFtPXitvWCcn7Tpf+cm8nPsCf9
|
|
||||||
GbRoP4PWDF6wVU5z8j6AAY01qC8/mO5u1OEi+svtwOf2K/jmw24cqP/ehf797urp
|
|
||||||
9ySa6a3V/nfs+4Mh0R69vGcfJ9DPgQtRorxqN9F2wPxA4TZUQU96Q731SyDjRtl7
|
|
||||||
mRqc1/UbyY0e+taNZdYUuZ/PiW+1Kkx1w/Dz0/nn73XXILWsTB2mrTc+v9wv8HdU
|
|
||||||
N7I4LHL7Ybh4LD3vJ4NmQITiNJ8BId+CLWde3ypZOxE2ir0xbhLOe+avyvuO9SNj
|
|
||||||
WOL+6x3vpveFAr41uvY9FFqeDQs4urTKeEj2Ten7mNUbXTZUfadNNjeL3VwIhtWr
|
|
||||||
l39Fbh6OAq999cd2hAF+gj86yZtlUWgE5Kb+DwUHboHZoxk6HvT0Q6xm+3U8WaVx
|
|
||||||
U91hUUvzNgTvQ3abj9ud1kRtlWnbiBxGbtIev7nhrZ682QcMZyBsYH6M7psPNO/9
|
|
||||||
yR+RRf5x+/z1gT5KkBjyn370esIrtJ731/Jo3n8H2O+8/2IETry+/xIYAdbhQzDx
|
|
||||||
fP/9d8BvEGhuIkgow61VgRcYSuWaVUQUBKZzZRjKXrpUKdCUK/DUfN+XelrJyvvZ
|
|
||||||
PD4I3sWUKJlb0DJVrq7cQqSCCYVrHO2JzCdksxErjqWWtCttwHGVxvhsv515xpar
|
|
||||||
WJVatOuxSk9p3JhSFXulpHZNVOloFn5CDhPPs1jK5kusko4ULrJcJanyFezrzdr1
|
|
||||||
/ZrIjirmSs1aKnv1E0KFG1VcUyXr7tmNLAtcadHGhPf3W9wTZaxkymZ9zpXr0tpW
|
|
||||||
pSiP4O3gGsuVhxrIsF3H+51cui7nixQ2YZTzRBGMHitzNCVrFEUKNFtScH9OxUBP
|
|
||||||
Mruza38pWq6JL2biJ8RjzxK7HZZZn8WycaJpeib6zrawKmbr7hzMZvlhRxhzpFxb
|
|
||||||
2o7tdDbZJawXCdvvnDiF7H9CZsN6HItT2lqvzQOGc9vLuleWcjiKjqlV1cpwEAfT
|
|
||||||
zdiyD9l6sp9kXoSbPrvAlUISygttfUISv+xXWne0H0qpS42GnL0MFv4uYaIZq1rK
|
|
||||||
bNIfu7FyEZVjHjEJNrR6U1cJNMPCllktiJNPyJybq+SWcCJvHpRWGS2WQV/mEiWc
|
|
||||||
Z6tJYHWP7ki4poORSFYH+YwpWk7SIXOIO9O+cnRi6hNCLC/lwRAmyqUnY9vrtVyw
|
|
||||||
lUzomWqd2UN9Jqnhzo9VZbWYEd6ESgZWtRxn4izYhrO92ckAhWx6iM8ydqBckaYo
|
|
||||||
7kd+yAI7AAfSSEbad3CPxpcesap0bjSqT8tPyFWQ7Yt4HVmqur+mRpKFmjczDmrU
|
|
||||||
uS62y021uVyKqbhQZtsL37G66fR63ZhbRrg4ix1DDrFPSM/ojU/LeDwyJNPmq0Th
|
|
||||||
aWKqDUTM0y+r2WVruatgJUmxPOoE9YifrsP9qqtuqcXay00zH31C9t2kOuyH/GiJ
|
|
||||||
J4uTXAynq1pwnGka0vvzeaWu+yI2dRZ6n8KH+4zuM/uhM+5jAxMXtsQK4z4h2Jkj
|
|
||||||
5pmbcYeNzGIT1WUMfZeqvq7Onc2hF1f8IDFGx3nJ9MzrlpXTzgVbnlZVtlxfQny6
|
|
||||||
AbcQp3Ob6HFGEB/E+liPOaLfx3z9aq3p3aJMbYnYEasg5vOdYUXCaLEcdIiZRK7N
|
|
||||||
TkSk8RekSRKcxH6fOP7TSe0J/zS89ZR/HY8/qf8DHBt+qP99nMSf9f/fAbTuolSe
|
|
||||||
p74B23ME/i+UkwKXsMJaap+8GgdpNuCjaDi3a4H9jOIsig/QcR8lcHQ8Qoc0Sg3Q
|
|
||||||
EYkOGbTHoRSOcgzKDFCMQrEh2uujXA8djFGKQDECRQCNB6af0f+W4ofv/4M8NCWr
|
|
||||||
tbABeQWdc/vXpoS7yKDIsrBVCM5e4E/GJQaKLsdTlMLQcxMUYuVIuRx1K8YnYhSH
|
|
||||||
tarFeWd2RjZsrqx1111rDqV2D10iwvfnckWeyWoE0r+2SaaqbA0Hy4RmVzsm6vV2
|
|
||||||
3aIzPztihM/qyQXhWLLgonVUjxjGok5pfeyWkTP21py/cbeOEkrCbLo6OUJ58phQ
|
|
||||||
3lLTw6yLzTTxMpUls+og+mZ3jWqX582ZIZurSN2QKrszszzQ5+NrZ6xrE3kslDgp
|
|
||||||
EWl3Vyn48hrOI72ec4KQVtYOEYarMaOeNMqk59Rlndj9xIjX+fzsbmtBqsfX6VjH
|
|
||||||
td727HU7UmlPc6pcr2y7o6aUPNUVGmFru5qtDnS0PirxRd921LrTX0yN3SSv12wq
|
|
||||||
d3CNoPNNalwTNRU2w7IMBspRrNOex6THrYJM7bPFzAjrVoYZUHIp7drXzwLth8Ek
|
|
||||||
kAhB5TvRWMCn0051Haiumu6lkXV2CrwqxwkyrHh7KelLmSaoQbRfnDJ147NGzGPM
|
|
||||||
lacHVowJcmziy7JWKmzqnZjQGo+s/Yoy5DHvOntk3J8lAm3a04MVrroOOZbL+QkL
|
|
||||||
DC2gfFsMeH17uopUdpb7pu+Sa/xa0upGrbK1b1tX9TxBhP4loo4xodFGmV7ImPOu
|
|
||||||
bs9RnC2pduZDjd8t/R5x4eU0sIjcwtwoCI2RdEiu3StR7K5gWq+VrY2FwcLkjBCU
|
|
||||||
XLlfdWYZm121wLcn/WI6cS+sN51w1wvWP8v0RNK3kkTugiU2GRD5EPFVS0jIdaRR
|
|
||||||
qbEbYpMonq2qeDfuzLZVJirT2Ot6uwz0XOWcdmX2qh6j3O2NMHLQKThyzyPkIWOC
|
|
||||||
wCrMUO+PruOZwp0PiSUm7qk3mzI7aufk9Ohsx0V9Ha4w36iYdXXIJG2+KOuKlFzE
|
|
||||||
7Zld8rDoYQPPG+1qPlekYxFfR1pyHmwG1W5OdOanjjOZRHY4Gzjzracbskt2NHE8
|
|
||||||
5zJ1ixQlHbCB1/eu8ZFgNVWeCl173pfdVuS6j3VpcxMP51y16Qwcpg5lzpPHhptk
|
|
||||||
XFBmGiKpah2GG6kyymUXXwkcJWiiFvX5GTVi9Z7JVNhsMCuH29VqKhURNXLkATHu
|
|
||||||
c/X4SBk8SSKOwtkac0qOO4KO+J0z1IzR9jzjqA4buGnBMwscV4JM8jVizKtKQWmj
|
|
||||||
YVhORtYm57tOt4OU84JYdYjuDorM0sMVcAtKEXhirgaKHGIdj9cniT2yi4lW2sxm
|
|
||||||
71OH3A6EI96bn+TRGRlcMOD2a2wxlAIQEQIfG8Xa704HRzqeVWdLGgxjSpZ3rD0u
|
|
||||||
tKM6MU+7zZDoDjsmKHmEvkDWfid08PNltdvLu/EqcnQb0wqPHnQrNqpz4mT2t1Kg
|
|
||||||
Hib8ZLCY8EJ6zcWjZU+peEJTwlVFkrynrX2nM1FWcoQb7LWOu+ds2dvKTDUc9lP/
|
|
||||||
LM4jY7YxzIEmHBYuv173hpXFk+KptGaujpw347WiLC4aqZdyvxeC76fASvs0v02d
|
|
||||||
WE2ScrefUuPxWpyb6gr3kxF3Aaki4y5pQs1NDvGOIrEkN3RwqOd6XkWqoygOI16l
|
|
||||||
akUrxG5oJbPd2lsmQGRKUnc+GcrRelKPTGum76YRgexPPD3aDPqiYnUODGF246Q3
|
|
||||||
ATblo4ryhu5ZZtSpsB342NEOOkeip5qMK4zcsXc6HfZugCEjfiuOzkwwksQBKyaE
|
|
||||||
y+vcdSrvDwwemYtFnS54pWMv+H1vrDGipA3c0swnZBXxbGEQozWyHJ8SIgqtXkcW
|
|
||||||
c9CwD5fayZKChz73u1r0HymeWWHAX5/40mW+aEpXUb9QoW7oJ727/NI8FTLSlxtb
|
|
||||||
P8sKO/0jxNS24C+h/NkjwBg+Alid+yMATR0/1t6MB/W4K8pZybSj84QrZxvtysmI
|
|
||||||
SJHNiwBDi1N5W3nA0vle5SSQnNt1T+TM6SYzWW4Fp2u4RlUiCJNNoE94DBFpcseq
|
|
||||||
HCGyWimqHC6xYiWGMVzrfVj77gkCPkAg//ILxEnK9O2mQCwW3F8RPg6b9G3YXFFw
|
|
||||||
X46ZZvBcGkbt72aS4vfIU6It8RmPnBmaX4/o1Tjq6s7GT6munx6nZX/Hr7eBJdG9
|
|
||||||
SzwIOHFszh3HcjpD8pyMakeLBH0kr3xSQayJsyiFGcbol/mqy1hdgufAhEofxnMN
|
|
||||||
cwOzcxgdGZ2bb+g9ZQVRVw7lemRR+HXaTzbO0kHmlLYpw5wuO5a080TJqmtiHae9
|
|
||||||
1RBP5AOLHdmd29MvY4dfaMDzz1YqxLLrX3jcPGage0GWB5kuuZgZT8LhKSy8CXY+
|
|
||||||
04bg9hY90cHTjWrp52mX7NGkjbE0N+4P+8uMpqxE4FazIRcg42BiTaS5P06M/mox
|
|
||||||
DDIrN/XejFvm7HCj7if4Nr8sw2Xm7S4soyZz8Tq/2Ny8kA6CNUgwAYkOGEOVoKtT
|
|
||||||
f+B91BJYgKMOks9Pj5tVwXv2an502dVoPyOwMwFqEpJZlCf2lF5emd6p7J2jUbRW
|
|
||||||
u9zGUPeuxOdTcnsMy+x4IU21Rx3ly6iz63hqfxYls/HG1YeIfu1Oqzk/yeSV0dnr
|
|
||||||
4j7MjaE13IJbScNppyh0UBePDuVNhY7iBY51yWmgRZEoJosVP18ihyNdLbA5MffI
|
|
||||||
fmcXyLs62PbdHqk56ygc7C6b3XZ7mJ56uOhgu8zYbGpu5sxIsa8W+mZh4kiaTY7Y
|
|
||||||
oq/sQ0XMwgW236dbsxjMWKJgdFK8XNxsaZzmm7rHzzozfsLPR6C9iwhHLDhO4HYI
|
|
||||||
FRzXbDg70Ecjtxerk6JF426Zn9IwC6iVp9RkZYx6Kq1z3YV5zaZe5pKJtDyZ8pfn
|
|
||||||
xP+EJzzhCU94whOe8IQnPOEJT3jCE57whCc84QlPeMITnvCEJzzhCU94whOe8IQn
|
|
||||||
/B+D/wUWlo//AFAAAA==
|
|
||||||
_ENC
|
|
||||||
|
|
||||||
debug "Creating $TMPDIR/files..."
|
|
||||||
mkdir $TMPDIR/files
|
|
||||||
debug "Extracting archive to $TMPDIR/files..."
|
|
||||||
cat $TMPDIR/archive.enc | openssl base64 -d | tar xz -C $TMPDIR/files
|
|
||||||
|
|
||||||
echo "Done"
|
|
||||||
|
|
||||||
ca_file=$TMPDIR/files/ca.crt
|
|
||||||
cl_file=$TMPDIR/files/client.crt
|
|
||||||
cf_file=$TMPDIR/files/consumer.conf
|
|
||||||
dest=/etc/pki/pulp/qpid
|
|
||||||
debug "Creating $dest..."
|
|
||||||
run_cmd "mkdir $dest"
|
|
||||||
|
|
||||||
echo "Copying $ca_file to $dest..."
|
|
||||||
run_cmd "cp $ca_file $dest"
|
|
||||||
echo "Copying $cl_file to $dest..."
|
|
||||||
run_cmd "cp $cl_file $dest"
|
|
||||||
conf_dest=/etc/pulp/consumer
|
|
||||||
echo "Copying $cf_file to $conf_dest..."
|
|
||||||
run_cmd "mv $conf_dest/consumer.conf $conf_dest/consumer.conf.orig"
|
|
||||||
run_cmd "cp $cf_file $conf_dest"
|
|
||||||
|
|
||||||
echo "Enabling systemd pulp-agent service..."
|
|
||||||
run_cmd "systemctl enable goferd"
|
|
||||||
run_cmd "systemctl start goferd"
|
|
||||||
|
|
||||||
debug "Cleaning up..."
|
|
||||||
run_cmd "rm -fR $TMPDIR"
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
@ -1,21 +0,0 @@
|
||||||
#!/usr/bin/env bash
|
|
||||||
#
|
|
||||||
# Auto renew letsencrypt certs
|
|
||||||
#
|
|
||||||
HOSTNAME=`hostname`
|
|
||||||
EMAIL="alerts@lhprojects.net"
|
|
||||||
OUTPUT=$(letsencrypt renew)
|
|
||||||
LE_STATUS=$?
|
|
||||||
|
|
||||||
echo $OUTPUT >> /var/log/letsencrypt/renew.log
|
|
||||||
|
|
||||||
if [ "$LE_STATUS" != 0 ]; then
|
|
||||||
SUBJECT="CRON: Letsencrypt automated renewal failed on ${HOSTNAME}"
|
|
||||||
else
|
|
||||||
SUBJECT="CRON: Renewing all letsencrypt certs on ${HOSTNAME}"
|
|
||||||
fi
|
|
||||||
|
|
||||||
echo $OUTPUT | mail -s "$SUBJECT" $EMAIL
|
|
||||||
|
|
||||||
# Restart nginx
|
|
||||||
systemctl restart nginx
|
|
||||||
|
|
@ -1,13 +0,0 @@
|
||||||
#!/bin/bash
|
|
||||||
# Utility script to mount ecryptfs on my PVE boxes
|
|
||||||
# This script is executed via systemd service file
|
|
||||||
|
|
||||||
PASSPHRASE_FILE=$HOME/.ecryptfs/passphrase
|
|
||||||
if [ ! -e ${PASSPHRASE_FILE} ];then
|
|
||||||
echo "EXITING: ${PASSPHRASE_FILE} missing!"
|
|
||||||
exit 1
|
|
||||||
fi
|
|
||||||
PASSPHRASE=$(cat $PASSPHRASE_FILE)
|
|
||||||
|
|
||||||
/usr/bin/printf "%s" "${PASSPHRASE}" | /usr/bin/ecryptfs-add-passphrase --fnek -
|
|
||||||
/sbin/mount.ecryptfs_private dump
|
|
||||||
|
|
@ -1,12 +0,0 @@
|
||||||
#!/bin/bash
|
|
||||||
|
|
||||||
|
|
||||||
#pulp-admin consumer group bind --consumer-id=$1 --repo-id=ecryptfs-x86_64
|
|
||||||
#pulp-admin consumer group bind --consumer-id=$1 --repo-id=hhvm-x86_64-base
|
|
||||||
pulp-admin consumer bind --consumer-id=$1 --repo-id=oraclelinux7-x86_64-uek3
|
|
||||||
pulp-admin consumer bind --consumer-id=$1 --repo-id=oraclelinux7-x86_64-optional-latest
|
|
||||||
pulp-admin consumer bind --consumer-id=$1 --repo-id=oraclelinux7-x86_64-addons
|
|
||||||
pulp-admin consumer bind --consumer-id=$1 --repo-id=epel7-x86_64-base
|
|
||||||
pulp-admin consumer bind --consumer-id=$1 --repo-id=oraclelinux7-x86_64-latest
|
|
||||||
#pulp-admin consumer group bind --consumer-id=$1 --repo-id=icinga-x86_64-stable-release
|
|
||||||
#pulp-admin consumer group bind --consumer-id=$1 --repo-id=ngtech-x86_64
|
|
||||||
|
|
@ -1,65 +0,0 @@
|
||||||
#!/bin/bash
|
|
||||||
# This script will run a pulp command to update consumers and reboot them
|
|
||||||
|
|
||||||
CURR_DIR="$( cd "$( dirname "${BASH_SOURCE[0]}" )" && pwd )"
|
|
||||||
BOOTSTRAP=${CURR_DIR}/bootstrap.sh
|
|
||||||
|
|
||||||
# Arguments that require values
|
|
||||||
declare -A arr_args_req_value=()
|
|
||||||
|
|
||||||
#######################################
|
|
||||||
function usage
|
|
||||||
{
|
|
||||||
echo "Usage: ${0}"
|
|
||||||
echo " --consumer-group-id"
|
|
||||||
echo " Pulp consumer group id"
|
|
||||||
echo " -r | --reboot"
|
|
||||||
echo " Should the consumer require reboot after update"
|
|
||||||
echo " -h | --help"
|
|
||||||
echo " Show this usage"
|
|
||||||
|
|
||||||
exit 0
|
|
||||||
}
|
|
||||||
|
|
||||||
|
|
||||||
if [ ! -e ${BOOTSTRAP} ];then
|
|
||||||
echo 'EXITING: boostrap.sh must be in the same directory as this script'
|
|
||||||
exit 1
|
|
||||||
fi
|
|
||||||
. $BOOTSTRAP
|
|
||||||
|
|
||||||
# Check command line
|
|
||||||
if [[ -z "${@}" ]]; then
|
|
||||||
usage
|
|
||||||
fi
|
|
||||||
|
|
||||||
echo "${@}" | grep 'consumer-group-id' > /dev/null
|
|
||||||
if [ $? != 0 ]; then
|
|
||||||
echo 'Error: A consumer group id is required!'
|
|
||||||
exit
|
|
||||||
fi
|
|
||||||
|
|
||||||
# Process command line arguments
|
|
||||||
arr_args_req_value['consumer-group-id']=true
|
|
||||||
|
|
||||||
while [[ $# > 0 ]]; do
|
|
||||||
key="$1"
|
|
||||||
|
|
||||||
case $key in
|
|
||||||
--consumer-group-id)
|
|
||||||
check_values arr_args_req_value 'consumer-group-id' 'A consumer group id is required' "$2"
|
|
||||||
_consumer_group_id=$2
|
|
||||||
shift;;
|
|
||||||
-r|--reboot)
|
|
||||||
reboot_arg='--reboot'
|
|
||||||
shift;;
|
|
||||||
-h|--help)
|
|
||||||
usage
|
|
||||||
shift;;
|
|
||||||
*)
|
|
||||||
_default=$key
|
|
||||||
shift;;
|
|
||||||
esac
|
|
||||||
done
|
|
||||||
|
|
||||||
pulp-admin rpm consumer group package update --consumer-group-id=${_consumer_group_id} --all $reboot_arg
|
|
||||||
21
pulp_sync.sh
21
pulp_sync.sh
|
|
@ -1,21 +0,0 @@
|
||||||
#!/bin/bash
|
|
||||||
# Script to sync pulp repositories
|
|
||||||
# This script will be ran manually every week by hand
|
|
||||||
# BETA BETA BETA
|
|
||||||
|
|
||||||
CURR_DIR="$( cd "$( dirname "${BASH_SOURCE[0]}" )" && pwd )"
|
|
||||||
BOOTSTRAP=${CURR_DIR}/bootstrap.sh
|
|
||||||
|
|
||||||
if [ ! -e ${BOOTSTRAP} ];then
|
|
||||||
echo 'EXITING: boostrap.sh must be in the same directory as this script'
|
|
||||||
exit 1
|
|
||||||
fi
|
|
||||||
. $BOOTSTRAP
|
|
||||||
|
|
||||||
repo_ids="oraclelinux7-x86_64-latest epel7-x86_64-base oraclelinux7-x86_64-addons oraclelinux7-x86_64-optional-latest oraclelinux7-x86_64-uek3 hhvm-x86_64-base webmin-noarch-base icinga-x86_64-stable-release ngtech-x86_64"
|
|
||||||
|
|
||||||
for repo_id in $repo_ids; do
|
|
||||||
pulp-admin rpm repo sync run --repo-id=$repo_id
|
|
||||||
done
|
|
||||||
|
|
||||||
|
|
||||||
|
|
@ -1,21 +0,0 @@
|
||||||
# Sample Configuration file
|
|
||||||
#
|
|
||||||
|
|
||||||
# Where to log my output?
|
|
||||||
LOG=/tmp/repo_sync.log
|
|
||||||
|
|
||||||
# Where to download my repository packages?
|
|
||||||
REPO_DIR=repos
|
|
||||||
|
|
||||||
# Syntax:
|
|
||||||
# reponame:repopath
|
|
||||||
#
|
|
||||||
# Retrieve repo name from 'yum repolist' and set repo
|
|
||||||
# path you get from a first run of reposync.
|
|
||||||
#
|
|
||||||
# Note: It appears the path changes between repo's is the
|
|
||||||
# reason you need to run reposync first to get the path
|
|
||||||
REPOS=(
|
|
||||||
repo1:repo1_path
|
|
||||||
repo2:repo2_path
|
|
||||||
)
|
|
||||||
44
repo_sync.sh
44
repo_sync.sh
|
|
@ -1,44 +0,0 @@
|
||||||
#!/bin/bash
|
|
||||||
# Script to sync repos
|
|
||||||
|
|
||||||
CURR_DIR="$( cd "$( dirname "${BASH_SOURCE[0]}" )" && pwd )"
|
|
||||||
BOOTSTRAP=${CURR_DIR}/bootstrap.sh
|
|
||||||
CONFIG_FILE=${CURR_DIR}/repo_sync.conf
|
|
||||||
YUM_LOCK=/var/run/yum.pid
|
|
||||||
|
|
||||||
if [ ! -e ${BOOTSTRAP} ];then
|
|
||||||
echo 'EXITING: boostrap.sh must be in the same directory as this script'
|
|
||||||
exit 1
|
|
||||||
fi
|
|
||||||
. $BOOTSTRAP
|
|
||||||
|
|
||||||
if [ ! -e ${CONFIG_FILE} ]; then
|
|
||||||
echo 'EXITING: repo_sync.conf must be in the same directory as this script'
|
|
||||||
exit 1
|
|
||||||
fi
|
|
||||||
. $CONFIG_FILE
|
|
||||||
|
|
||||||
debug "Current directory: $PWD"
|
|
||||||
debug "Changing directory to ${REPO_DIR}"
|
|
||||||
test ! -d $REPO && err "${REPO_DIR} directory doesn't exists!"
|
|
||||||
cd $REPO_DIR
|
|
||||||
debug "Current directory: $PWD"
|
|
||||||
|
|
||||||
for repo_id in "${!REPOS[@]}"; do
|
|
||||||
## Avoid running while yum is already running
|
|
||||||
if test -e $YUM_LOCK; then
|
|
||||||
err "Yum appears to be running, if this is not the case\nplease delete $YUM_LOCK"
|
|
||||||
fi
|
|
||||||
|
|
||||||
IFS=":" read -r -a array <<< "${REPOS[$repo_id]}"
|
|
||||||
|
|
||||||
name=${array[0]}
|
|
||||||
path=${array[1]}
|
|
||||||
|
|
||||||
echo "Processing repository '${name}'..."
|
|
||||||
run_cmd "reposync" "-n --repoid=${name}"
|
|
||||||
_path=${REPO_DIR}/$path
|
|
||||||
run_cmd "createrepo" "--update ${_path}"
|
|
||||||
unset name
|
|
||||||
unset path
|
|
||||||
done
|
|
||||||
|
|
@ -1,20 +0,0 @@
|
||||||
#
|
|
||||||
# SquidBlocker Updater Configuration
|
|
||||||
#
|
|
||||||
# Note: This updater only supports shallalist blacklist
|
|
||||||
#
|
|
||||||
|
|
||||||
# Blacklist url to download and update SquidBlocker with
|
|
||||||
#
|
|
||||||
blacklist_url='http://dl.lhprojects.net/static_files/shallalist.tar.gz' #Recommended, updated once a day
|
|
||||||
|
|
||||||
# In situtations where you have multiple SquidBlocker instances running.
|
|
||||||
# You can specify a URL for each instance
|
|
||||||
|
|
||||||
## First instance
|
|
||||||
sb_url[1]='http://username:password@127.0.0.1:8081/db/set_batch/'
|
|
||||||
blacklists[1]='warez spyware redirector hacking dynamic costtraps adv tracker' #Blacklist to import
|
|
||||||
|
|
||||||
## Second instance
|
|
||||||
sb_url[2]='http://username2:password2@127.0.0.1:8080/db/set_batch/'
|
|
||||||
blacklists[2]='warez adv redirector costtraps dynamic hacking spyware porn tracker anonvpn'
|
|
||||||
|
|
@ -1,110 +0,0 @@
|
||||||
#!/usr/bin/env bash
|
|
||||||
|
|
||||||
#
|
|
||||||
# Define a function to cleanup working directory
|
|
||||||
#
|
|
||||||
function cleanup {
|
|
||||||
rm -rf "$WORK_DIR"
|
|
||||||
echo "Deleted temp working directory $WORK_DIR"
|
|
||||||
}
|
|
||||||
trap cleanup EXIT INT
|
|
||||||
|
|
||||||
#
|
|
||||||
# Load configuration information
|
|
||||||
#
|
|
||||||
|
|
||||||
## Regular one
|
|
||||||
#source /etc/sysconfig/sbblupdater
|
|
||||||
|
|
||||||
## Debug statement
|
|
||||||
source ./sbblupdater.conf
|
|
||||||
|
|
||||||
#
|
|
||||||
# Create TEMP directory
|
|
||||||
#
|
|
||||||
echo 'Creating TEMP directory...'
|
|
||||||
WORK_DIR=`mktemp -d -p /tmp bl_staging.XXXXXXX`
|
|
||||||
cd ${WORK_DIR}
|
|
||||||
|
|
||||||
if [ "${DEBUG}" = '1' ]; then
|
|
||||||
curr_wd=`pwd`
|
|
||||||
echo "DEBUG: Current directory: ${curr_wd}"
|
|
||||||
fi
|
|
||||||
|
|
||||||
|
|
||||||
#
|
|
||||||
# Download blacklist
|
|
||||||
#
|
|
||||||
## Debug variable
|
|
||||||
#blacklist_url=https://www.lhprojects.net/blacklist/shallalist.tar.gz
|
|
||||||
echo "Downloading blacklist from ${blacklist_url}"
|
|
||||||
|
|
||||||
## Regular one
|
|
||||||
wget -nv ${blacklist_url}
|
|
||||||
exit_status=$?
|
|
||||||
|
|
||||||
if [ ${exit_status} != 0 ]; then
|
|
||||||
echo "ERROR: Unable to download blacklist"
|
|
||||||
exit
|
|
||||||
fi
|
|
||||||
|
|
||||||
#
|
|
||||||
# Extract tar
|
|
||||||
#
|
|
||||||
tar xvf shallalist.tar.gz > /dev/null
|
|
||||||
|
|
||||||
if [ "${DEBUG}" = '1' ]; then
|
|
||||||
curr_wd=`pwd`
|
|
||||||
echo "DEBUG: Current directory: ${curr_wd}"
|
|
||||||
fi
|
|
||||||
|
|
||||||
#
|
|
||||||
# Create domain and url list for each instance then import into SquidBlocker
|
|
||||||
#
|
|
||||||
sb_int=0
|
|
||||||
empty_vars=0
|
|
||||||
while true; do
|
|
||||||
## If there more than 5 consecutive empty sb_url variables, exit out of the loop
|
|
||||||
if [ $empty_vars -gt 5 ]; then
|
|
||||||
break
|
|
||||||
fi
|
|
||||||
if [ -z "${sb_url[sb_int]}" ]; then
|
|
||||||
((empty_vars++))
|
|
||||||
((sb_int++))
|
|
||||||
continue
|
|
||||||
fi
|
|
||||||
|
|
||||||
echo "Creating blacklists for instance ${sb_int}"
|
|
||||||
domains_file=`mktemp domains.XXXX`; domains_file="${WORK_DIR}/${domains_file}"
|
|
||||||
urls_file=`mktemp urls.XXXX`; urls_file="${WORK_DIR}/${urls_file}"
|
|
||||||
|
|
||||||
for bl in ${blacklists[sb_int]}; do
|
|
||||||
cat "BL/${bl}/domains" >> ${domains_file}
|
|
||||||
cat "BL/${bl}/urls" >> ${urls_file}
|
|
||||||
|
|
||||||
if [ "${DEBUG}" = '1' ]; then
|
|
||||||
linecount=`wc -l ${domains_file}`
|
|
||||||
printf "DEBUG: %s has %d domains for instance ${sb_int}\n" ${domains_file} ${linecount}
|
|
||||||
linecount=`wc -l ${urls_file}`
|
|
||||||
printf "DEBUG: %s has %d urls for instance ${sb_int}\n" ${urls_file} ${linecount}
|
|
||||||
fi
|
|
||||||
done
|
|
||||||
|
|
||||||
echo "Importing blacklist into instance ${sb_int}..."
|
|
||||||
curl -i -X POST -H "Content-Type: multipart/form-data" \
|
|
||||||
-F "prefix=dom:" \
|
|
||||||
-F "val=1" \
|
|
||||||
-F "listfile=@${domains_file}" \
|
|
||||||
${sb_url[sb_int]}
|
|
||||||
curl -i -X POST -H "Content-Type: multipart/form-data" \
|
|
||||||
-F "prefix=url:http://" \
|
|
||||||
-F "val=1" \
|
|
||||||
-F "listfile=@${urls_file}" \
|
|
||||||
${sb_url[sb_int]}
|
|
||||||
|
|
||||||
rm -f ${domains_file}
|
|
||||||
rm -f ${urls_file}
|
|
||||||
((sb_int++))
|
|
||||||
done
|
|
||||||
|
|
||||||
|
|
||||||
|
|
@ -1,53 +0,0 @@
|
||||||
#!/bin/bash
|
|
||||||
#
|
|
||||||
# This will start multiple tcptunnel instances
|
|
||||||
|
|
||||||
function _shutdown
|
|
||||||
{
|
|
||||||
for i in {1..6} ; do
|
|
||||||
if [ -z "${PIDS[i]}" ]; then
|
|
||||||
# assume we are at the end of the list
|
|
||||||
break;
|
|
||||||
fi
|
|
||||||
kill ${PIDS[i]} 2>&1 > /dev/null;
|
|
||||||
done
|
|
||||||
exit 0
|
|
||||||
}
|
|
||||||
|
|
||||||
# Trap signals
|
|
||||||
trap "_shutdown" SIGINT SIGTERM
|
|
||||||
|
|
||||||
# This is for debug
|
|
||||||
source tcptunnel.conf
|
|
||||||
|
|
||||||
# Source configuration file
|
|
||||||
#source /etc/sysconfig/tcptunnel
|
|
||||||
|
|
||||||
TCPTUNNEL_STARTED=0
|
|
||||||
NPID=0
|
|
||||||
for i in {0..5} ; do
|
|
||||||
if [ -z "${BIND_ADDRESS[$i]}" ]; then
|
|
||||||
continue
|
|
||||||
fi
|
|
||||||
|
|
||||||
${TCPTUNNEL_BIN} --local-port=${LOCAL_PORT[i]} --remote-port=${REMOTE_PORT[i]} --remote-host=${REMOTE_HOST[i]} --bind-address=${BIND_ADDRESS[i]} &
|
|
||||||
|
|
||||||
# Store pid
|
|
||||||
((NPID++))
|
|
||||||
PIDS[NPID]=$!
|
|
||||||
disown ${PIDS[NPID]}
|
|
||||||
|
|
||||||
if [ $? = 0 ]; then
|
|
||||||
((TCPTUNNEL_STARTED++))
|
|
||||||
fi
|
|
||||||
done
|
|
||||||
|
|
||||||
if [ $TCPTUNNEL_STARTED = 0 ]; then
|
|
||||||
echo "No TCP Tunnels were started"
|
|
||||||
exit 255
|
|
||||||
fi
|
|
||||||
|
|
||||||
echo "${TCPTUNNEL_STARTED} tcptunnels were started successfully"
|
|
||||||
sleep infinity
|
|
||||||
|
|
||||||
|
|
||||||
|
|
@ -1,299 +0,0 @@
|
||||||
#!/usr/bin/env bash
|
|
||||||
#
|
|
||||||
# This script will tar lxc-pve AppArmor profiles and
|
|
||||||
# upload archive to remote download server.
|
|
||||||
#
|
|
||||||
|
|
||||||
# Path to auth file that contains username and password.
|
|
||||||
# Example
|
|
||||||
# username=authuser
|
|
||||||
# password=authpw
|
|
||||||
auth_file=$HOME/.tar.lxc-apparmor-profiles.authfile
|
|
||||||
|
|
||||||
# Do not edit anything below this line
|
|
||||||
set -e
|
|
||||||
|
|
||||||
_curl_opts='--silent'
|
|
||||||
_wget_opts='--quiet'
|
|
||||||
_ssh_opts='-q'
|
|
||||||
if [ -n $DEBUG ] && [[ $DEBUG -ge 2 ]]; then
|
|
||||||
set -x
|
|
||||||
_tar_opts='-v'
|
|
||||||
_curl_opts='--show-error --verbose'
|
|
||||||
_wget_opts='--verbose'
|
|
||||||
_ssh_opts='-vv'
|
|
||||||
fi
|
|
||||||
|
|
||||||
function debug {
|
|
||||||
if test -n "$DEBUG"; then
|
|
||||||
echo "[DEBUG] $1"
|
|
||||||
fi
|
|
||||||
}
|
|
||||||
|
|
||||||
function cleanup {
|
|
||||||
debug "Cleaning up temporary directory..."
|
|
||||||
if test -d $_tmp_dir; then
|
|
||||||
rm -r $_tmp_dir
|
|
||||||
fi
|
|
||||||
}
|
|
||||||
|
|
||||||
function getfilehash {
|
|
||||||
echo $(sha256sum $1|awk '{print $1}')
|
|
||||||
}
|
|
||||||
|
|
||||||
function _wget {
|
|
||||||
wget $_wget_opts $1 2> /dev/null || true
|
|
||||||
}
|
|
||||||
|
|
||||||
function httpdownload {
|
|
||||||
_wget $_dl_filedir/$_dl_filename
|
|
||||||
_wget $_dl_filedir/$_dl_filesha256
|
|
||||||
|
|
||||||
if test ! -f $_dl_filename && test ! -f $_dl_filename.sha256; then
|
|
||||||
echo "ERROR: Failed to download files"; exit 1;
|
|
||||||
fi
|
|
||||||
|
|
||||||
# TODO: rename $_dl_filename to $_tar_filename
|
|
||||||
_file_hash=$(getfilehash $_dl_filename)
|
|
||||||
_remote_hash=$(cat $_dl_filename.sha256)
|
|
||||||
|
|
||||||
if [ $_file_hash != $_remote_hash ]; then
|
|
||||||
echo "Downloaded file corrupted!"
|
|
||||||
exit 1
|
|
||||||
fi
|
|
||||||
}
|
|
||||||
|
|
||||||
if test -n "$TESTING"; then
|
|
||||||
_dl_server=http://localhost:8080
|
|
||||||
else
|
|
||||||
# This is a temporary location, perhaps
|
|
||||||
# permanent. dl.lhprojects.net is not configured
|
|
||||||
# to execute PHP scripts
|
|
||||||
_dl_server=https://www.lhprojects.net
|
|
||||||
fi
|
|
||||||
_tar_filename=apparmor-profiles.tgz
|
|
||||||
_dl_scriptname=handleLXCAppArmorProfiles.php
|
|
||||||
_dl_filedir=$_dl_server/apparmor
|
|
||||||
_dl_filename=$_tar_filename
|
|
||||||
_rsync_server=pve1.lhprojects.int
|
|
||||||
_tmp_dir=/tmp/.tar.lxc-apparmor-profiles
|
|
||||||
_rsync_user=apparmor_rsync
|
|
||||||
_remote_script_path=/usr/local/bin/tar.lxc-apparmor-profiles
|
|
||||||
|
|
||||||
function usage
|
|
||||||
{
|
|
||||||
echo "Usage: ${0}"
|
|
||||||
echo "This script can upload an archive of LXC AppArmor profiles to a remote HTTP"
|
|
||||||
echo "server via handleLXCAppArmorProfiles.php. Alternatively, you can use --download-scp."
|
|
||||||
echo ""
|
|
||||||
echo " --download"
|
|
||||||
echo " Download and extract archive using http via handleLXCAppArmorProfiles.php"
|
|
||||||
echo " NOTE: You need to upload the archive to a middleman HTTP server prior to using --download."
|
|
||||||
echo " --download-scp"
|
|
||||||
echo " Same as above however use scp for file transfer."
|
|
||||||
echo " NOTE: the remote SSH server must have $_remote_script_path installed"
|
|
||||||
echo " --download-test"
|
|
||||||
echo " Same as --download, but extract in temp directory"
|
|
||||||
echo " -h | --help"
|
|
||||||
echo " Show this usage"
|
|
||||||
|
|
||||||
exit 0
|
|
||||||
}
|
|
||||||
|
|
||||||
|
|
||||||
# We going to attempt to create a tmp dir
|
|
||||||
# and set the _tmp_dir variable
|
|
||||||
if test -d $_tmp_dir && test ! -O $_tmp_dir; then
|
|
||||||
debug "ERROR: We don't own $_tmp_dir!"
|
|
||||||
_old_tmp_dir=$_tmp_dir
|
|
||||||
for i in {1..5}; do
|
|
||||||
__tmp_dir=$_tmp_dir$i
|
|
||||||
if test -d $__tmp_dir && test -O $__tmp_dir || test ! -d $__tmp_dir; then
|
|
||||||
debug "Setting _tmp_dir to '$__tmp_dir'"
|
|
||||||
_tmp_dir=$__tmp_dir
|
|
||||||
break
|
|
||||||
fi
|
|
||||||
done
|
|
||||||
|
|
||||||
|
|
||||||
if [[ $_tmp_dir = $_old_tmp_dir ]]; then
|
|
||||||
echo "ERROR: Unable to set a tmp dir"
|
|
||||||
exit 1
|
|
||||||
fi
|
|
||||||
fi
|
|
||||||
_staging_dir=$_tmp_dir/stg
|
|
||||||
|
|
||||||
case "$1" in
|
|
||||||
|
|
||||||
-h | --help )
|
|
||||||
usage
|
|
||||||
;;
|
|
||||||
--download | --download-scp)
|
|
||||||
cleanup
|
|
||||||
mkdir -p $_staging_dir
|
|
||||||
|
|
||||||
cd $_tmp_dir
|
|
||||||
|
|
||||||
if [ $1 = '--download-scp' ]; then
|
|
||||||
echo "Archiving remote AppArmor profiles..."
|
|
||||||
_result=$(ssh $_ssh_opts $_rsync_user@$_rsync_server || true)
|
|
||||||
if [[ $_result != '200 OK' ]]; then
|
|
||||||
echo "ERROR: Something went wrong: REMOTE $_result"
|
|
||||||
cleanup
|
|
||||||
exit 1
|
|
||||||
fi
|
|
||||||
|
|
||||||
echo "Downloading archive..."
|
|
||||||
scp $_ssh_opts $_rsync_user@$_rsync_server:$_tar_filename .
|
|
||||||
scp $_ssh_opts $_rsync_user@$_rsync_server:$_tar_filename.sha256 .
|
|
||||||
if test ! -f $_tar_filename && test ! -f $_tar_filename.sha256; then
|
|
||||||
echo "ERROR: Failed to download files"; exit 1;
|
|
||||||
fi
|
|
||||||
|
|
||||||
_file_hash=$(getfilehash $_tar_filename)
|
|
||||||
_remote_hash=$(cat $_tar_filename.sha256)
|
|
||||||
if [ $_file_hash != $_remote_hash ]; then
|
|
||||||
echo "Downloaded file corrupted!"
|
|
||||||
exit 1
|
|
||||||
fi
|
|
||||||
else
|
|
||||||
httpdownload
|
|
||||||
fi
|
|
||||||
|
|
||||||
echo "Extracting archive..."
|
|
||||||
cd /
|
|
||||||
tar $_tar_opts -xf $_tmp_dir/$_dl_filename .
|
|
||||||
|
|
||||||
cleanup
|
|
||||||
exit 0
|
|
||||||
;;
|
|
||||||
|
|
||||||
--download-test )
|
|
||||||
echo "This is only a download test and archive extract"
|
|
||||||
|
|
||||||
cleanup
|
|
||||||
mkdir -p $_staging_dir
|
|
||||||
|
|
||||||
cd $_tmp_dir
|
|
||||||
httpdownload
|
|
||||||
|
|
||||||
cd $_staging_dir
|
|
||||||
tar $_tar_opts -xf ../$_dl_filename .
|
|
||||||
|
|
||||||
echo "Download test completed successfully"
|
|
||||||
|
|
||||||
cleanup
|
|
||||||
exit 0
|
|
||||||
;;
|
|
||||||
|
|
||||||
* )
|
|
||||||
|
|
||||||
# Check if running under a SSH connection
|
|
||||||
if [ -n "$SSH_CLIENT" ] && [ -z "$1" ] && [ $USER != 'root' ]; then
|
|
||||||
echo "Running from SSH connection and no command arguments given"
|
|
||||||
echo "Exiting"
|
|
||||||
exit 1
|
|
||||||
fi
|
|
||||||
|
|
||||||
# Init
|
|
||||||
_tar_file=$_tmp_dir/$_tar_filename
|
|
||||||
_user_home=$(eval echo "~$_rsync_user")
|
|
||||||
|
|
||||||
_scp_remote=0
|
|
||||||
if test -n "$1" && [ $1 = '--scp-remote' ]; then
|
|
||||||
debug "Remote SCP enabled, not uploading..."
|
|
||||||
_scp_remote=1
|
|
||||||
|
|
||||||
# Determine if we need to run scp instead
|
|
||||||
case "$SSH_ORIGINAL_COMMAND" in
|
|
||||||
"scp -f $_tar_filename" | "scp -f $_tar_filename" | "scp -f $_tar_filename.sha256" | "scp -v -f $_tar_filename.sha256" )
|
|
||||||
|
|
||||||
cd $_user_home
|
|
||||||
|
|
||||||
# Replace script with scp command
|
|
||||||
eval "$SSH_ORIGINAL_COMMAND"
|
|
||||||
exit 0
|
|
||||||
;;
|
|
||||||
esac
|
|
||||||
fi
|
|
||||||
|
|
||||||
cleanup
|
|
||||||
mkdir -p $_staging_dir
|
|
||||||
|
|
||||||
|
|
||||||
debug "Copying AppArmor profiles over to tmp dir..."
|
|
||||||
read -r -d '' _profile_files <<- EOF || true
|
|
||||||
/etc/apparmor.d
|
|
||||||
/etc/apparmor.d/abstractions
|
|
||||||
/etc/apparmor.d/abstractions/lxc
|
|
||||||
/etc/apparmor.d/abstractions/lxc/container-base
|
|
||||||
/etc/apparmor.d/abstractions/lxc/start-container
|
|
||||||
/etc/apparmor.d/lxc
|
|
||||||
/etc/apparmor.d/lxc/lxc-default
|
|
||||||
/etc/apparmor.d/lxc/lxc-default-cgns
|
|
||||||
/etc/apparmor.d/lxc/lxc-default-with-mounting
|
|
||||||
/etc/apparmor.d/lxc/lxc-default-with-nesting
|
|
||||||
/etc/apparmor.d/lxc-containers
|
|
||||||
EOF
|
|
||||||
|
|
||||||
# Read file list
|
|
||||||
while read -r file; do
|
|
||||||
if test -d $file;
|
|
||||||
then
|
|
||||||
_dest=$_staging_dir/.$file
|
|
||||||
debug "Creating directory: $_dest"
|
|
||||||
mkdir -p $_dest
|
|
||||||
elif test -f $file
|
|
||||||
then
|
|
||||||
_src=$file
|
|
||||||
_dest=$_staging_dir/.$file
|
|
||||||
debug "Copying: $_src to $_dest"
|
|
||||||
cp $_src $_dest
|
|
||||||
fi
|
|
||||||
done <<< "$_profile_files"
|
|
||||||
|
|
||||||
debug "Changing directory to $_tmp_dir"
|
|
||||||
cd $_staging_dir
|
|
||||||
|
|
||||||
if [ $PWD != $_staging_dir ]; then
|
|
||||||
echo "Failed to change directory!"
|
|
||||||
exit 1
|
|
||||||
fi
|
|
||||||
|
|
||||||
# Tar files
|
|
||||||
tar $_tar_opts -czf $_tar_file .
|
|
||||||
|
|
||||||
# Get file hash
|
|
||||||
_file_hash=$(getfilehash $_tar_file)
|
|
||||||
|
|
||||||
if [ $_scp_remote -ne 0 ]; then
|
|
||||||
debug "Moving: $_tar_file to $_user_home"
|
|
||||||
mv -f $_tar_file $_user_home/
|
|
||||||
echo $_file_hash > $_user_home/$_tar_filename.sha256
|
|
||||||
echo "200 OK"
|
|
||||||
cleanup
|
|
||||||
exit 0
|
|
||||||
elif test -n "$1"; then
|
|
||||||
echo "ERROR: Invalid argument: $1"
|
|
||||||
cleanup
|
|
||||||
exit 1
|
|
||||||
fi
|
|
||||||
|
|
||||||
# Get auth creds
|
|
||||||
if test ! -f $auth_file; then
|
|
||||||
echo "ERROR: Auth file '$auth_file' not found!"
|
|
||||||
cleanup
|
|
||||||
exit 1
|
|
||||||
fi
|
|
||||||
source $auth_file
|
|
||||||
|
|
||||||
_result=$(curl $_curl_opts -H 'X-AppArmor-State: ProcessUpload' -H "X-Tar-Hash: $_file_hash" -F "apparmor-profiles=@$_tmp_dir/$_tar_filename" --user "$username:$password" $_dl_server/$_dl_scriptname)
|
|
||||||
|
|
||||||
if [[ $_results = '200 OK' ]]; then
|
|
||||||
echo 'Successfully uploaded archive!'
|
|
||||||
else
|
|
||||||
echo "Something went wrong: $_result"
|
|
||||||
fi
|
|
||||||
|
|
||||||
;;
|
|
||||||
esac
|
|
||||||
|
|
@ -1 +0,0 @@
|
||||||
#!/bin/bash
|
|
||||||
Loading…
Reference in New Issue