mirror of
https://github.com/m8tin/cis.git
synced 2025-12-06 15:58:26 +01:00
221 lines
7.9 KiB
Bash
Executable File
221 lines
7.9 KiB
Bash
Executable File
#!/bin/bash
|
|
|
|
[ "$(id -u)" != "0" ] \
|
|
&& sudo "${0}" "${1}" \
|
|
&& exit 0
|
|
|
|
|
|
|
|
# Folders always ends with an tailing '/'
|
|
_SETUP="$(readlink -f "${0}" 2> /dev/null)"
|
|
_CIS_ROOT="$(dirname ${_SETUP:?"Missing SETUP"} 2> /dev/null)/"
|
|
_CORE_SCRIPTS="${_CIS_ROOT:?"Missing CIS_ROOT"}core/"
|
|
|
|
|
|
|
|
function checkPathsAreAvaiable() {
|
|
grep --version &> /dev/null \
|
|
&& [ "$(echo ${PATH} | tr ':' '\n' | grep -c /usr/local/sbin)" -ge 1 ] \
|
|
&& [ "$(echo ${PATH} | tr ':' '\n' | grep -c /usr/local/bin)" -ge 1 ] \
|
|
&& [ "$(echo ${PATH} | tr ':' '\n' | grep -c /usr/sbin)" -ge 1 ] \
|
|
&& [ "$(echo ${PATH} | tr ':' '\n' | grep -c /usr/bin)" -ge 1 ] \
|
|
&& [ "$(echo ${PATH} | tr ':' '\n' | grep -c /sbin)" -ge 3 ] \
|
|
&& [ "$(echo ${PATH} | tr ':' '\n' | grep -c /bin)" -ge 3 ] \
|
|
&& return 0
|
|
|
|
echo "Content of variable PATH is not available."
|
|
return 1
|
|
}
|
|
|
|
function checkGitIsAvailable() {
|
|
git --version &> /dev/null \
|
|
&& return 0
|
|
|
|
apt update &> /dev/null
|
|
echo "Git seams to be unavailable. Please install it using 'apt install git'."
|
|
return 1
|
|
}
|
|
|
|
function checkPreconditions() {
|
|
local _DOMAIN
|
|
_DOMAIN="${1}" # Optional parameter DOMAIN
|
|
readonly _DOMAIN
|
|
|
|
! [ -z "${_DOMAIN}" ] \
|
|
&& [ "$(hostname -d)" != "${_DOMAIN}" ] \
|
|
&& echo \
|
|
&& echo "WARNING: system-domain DOES NOT MATCH overrideOwnDomain: '$(hostname -d)' != '${_DOMAIN}'" \
|
|
&& echo
|
|
|
|
# Given domain verfügbar (nicht leer)
|
|
! [ -z "${_DOMAIN}" ] \
|
|
&& checkPathsAreAvaiable \
|
|
&& checkGitIsAvailable \
|
|
&& git -C "${_CIS_ROOT:?"Missing CIS_ROOT"}" pull &> /dev/null \
|
|
&& return 0
|
|
|
|
echo
|
|
echo "The preconditions were not met."
|
|
|
|
# Given domain verfügbar (nicht leer) => Text unten unnötig
|
|
! [ -z "${_DOMAIN}" ] \
|
|
&& return 1
|
|
|
|
echo
|
|
echo "The needed domain provided by the owner of this host is not available."
|
|
echo "You have to configure the host correctly, e.g.:"
|
|
echo " hostnamectl set-hostname 'SHORT_HOSTNAME.DOMAIN.TLD'"
|
|
echo
|
|
echo "If you are root you can specify the domain information as a parameter, e.g.:"
|
|
echo " ${0} DOMAIN.TLD"
|
|
echo "Then the specified domain is appended to the current short hostname: '$(hostname -s)'"
|
|
|
|
return 1
|
|
}
|
|
|
|
function getOrSetDomain() {
|
|
local _CURRENT_DOMAIN _GIVEN_DOMAIN _OVERRIDE_DOMAIN_FILE
|
|
_CURRENT_DOMAIN="$("${_CORE_SCRIPTS:?"Missing CORE_SCRIPTS"}printOwnDomain.sh")"
|
|
_GIVEN_DOMAIN="${1}" # Optional parameter DOMAIN
|
|
_OVERRIDE_DOMAIN_FILE="${_CIS_ROOT:?"Missing CIS_ROOT"}overrideOwnDomain"
|
|
readonly _CURRENT_DOMAIN _GIVEN_DOMAIN _OVERRIDE_DOMAIN_FILE
|
|
|
|
! [ -z "${_CURRENT_DOMAIN}" ] \
|
|
&& [ -z "${_GIVEN_DOMAIN}" ] \
|
|
&& echo "${_CURRENT_DOMAIN}" \
|
|
&& return 0
|
|
|
|
! [ -z "${_CURRENT_DOMAIN}" ] \
|
|
&& [ "${_CURRENT_DOMAIN}" == "${_GIVEN_DOMAIN}" ] \
|
|
&& echo "${_CURRENT_DOMAIN}" \
|
|
&& return 0
|
|
|
|
# If there is a given domain it will be set or it will override the current one
|
|
[ -z "${_CURRENT_DOMAIN}" ] \
|
|
&& ! [ -z "${_GIVEN_DOMAIN}" ] \
|
|
&& [ "$(id -u)" == "0" ] \
|
|
&& echo "Setting hostname to: $(hostname -s).${_GIVEN_DOMAIN}" >&2 \
|
|
&& hostnamectl set-hostname "$(hostname -s).${_GIVEN_DOMAIN}" \
|
|
&& echo "${_GIVEN_DOMAIN}" \
|
|
&& return 0
|
|
|
|
! [ -z "${_GIVEN_DOMAIN}" ] \
|
|
&& echo "Overwriting domain to: ${_GIVEN_DOMAIN}" >&2 \
|
|
&& echo "${_GIVEN_DOMAIN}" > "${_OVERRIDE_DOMAIN_FILE}" \
|
|
&& echo "${_GIVEN_DOMAIN}" \
|
|
&& return 0
|
|
|
|
return 1
|
|
}
|
|
|
|
function getRemoteRepositoryPath() {
|
|
_REPOSITORY="$(git -C "${_CIS_ROOT:?"Missing CIS_ROOT"}" config --get remote.origin.url 2> /dev/null | grep -i 'git@')"
|
|
_PATH="${_REPOSITORY%/*}" #Removes shortest matching pattern '/*' from the end
|
|
! [ -z "${_PATH}" ] \
|
|
&& echo "${_PATH}/" \
|
|
&& return 0
|
|
|
|
return 1
|
|
}
|
|
|
|
function addDefinition(){
|
|
local _DEFINITIONS _REPOSITORY
|
|
_DEFINITIONS="${1:?"Missing first parameter DEFINITIONS"}"
|
|
_REPOSITORY="$(getRemoteRepositoryPath)cis-definition-${2:?"Missing second parameter DOMAIN"}.git"
|
|
readonly _DEFINITIONS _REPOSITORY
|
|
|
|
[ "$(id -u)" == "0" ] \
|
|
&& echo "Running setup as 'root' trying to add definition repository:" \
|
|
&& "${_CORE_SCRIPTS:?"Missing CORE_SCRIPTS"}addAndCheckGitRepository.sh" "${_DEFINITIONS}" "${_REPOSITORY}" readonly \
|
|
&& echo " - definitions are usable for this host." \
|
|
&& return 0
|
|
|
|
[ "$(id -u)" != "0" ] \
|
|
&& echo "Running setup as 'user' trying to add definition repository:" \
|
|
&& "${_CORE_SCRIPTS:?"Missing CORE_SCRIPTS"}addAndCheckGitRepository.sh" "${_DEFINITIONS}" "${_REPOSITORY}" writable \
|
|
&& echo " - definitions are usable, as working copy." \
|
|
&& return 0
|
|
|
|
return 1
|
|
}
|
|
|
|
function addState() {
|
|
local _STATES _REPOSITORY
|
|
_STATES="${1:?"Missing first parameter STATES"}"
|
|
_REPOSITORY="$(getRemoteRepositoryPath)cis-state-${2:?"Missing second parameter DOMAIN"}.git"
|
|
readonly _STATES _REPOSITORY
|
|
|
|
[ "$(id -u)" == "0" ] \
|
|
&& echo "Running setup as 'root' trying to add state repository:" \
|
|
&& echo \
|
|
&& "${_CORE_SCRIPTS:?"Missing CORE_SCRIPTS"}addAndCheckGitRepository.sh" "${_STATES}" "${_REPOSITORY}" writable \
|
|
&& echo " - states are usable for this host." \
|
|
&& return 0
|
|
|
|
[ "$(id -u)" != "0" ] \
|
|
&& echo "Running setup as 'user' trying to add state repository:" \
|
|
&& echo \
|
|
&& "${_CORE_SCRIPTS:?"Missing CORE_SCRIPTS"}addAndCheckGitRepository.sh" "${_STATES}" "${_REPOSITORY}" writable \
|
|
&& echo " - states are usable, as working copy." \
|
|
&& return 0
|
|
|
|
return 1
|
|
}
|
|
|
|
function setupCoreFunctionality() {
|
|
local _DEFINITIONS _MINUTE_FROM_OWN_IP
|
|
_DEFINITIONS="${1:?"Missing DEFINITIONS: 'ROOT/definitions/DOMAIN'"}"
|
|
_MINUTE_FROM_OWN_IP="$(hostname -I | xargs -n 1 | grep -F '.' | head -n 1 | cut -d. -f4 || echo 0)" #uses last value from first own ipv4 or 0 as minute value
|
|
readonly _DEFINITIONS _MINUTE_FROM_OWN_IP
|
|
|
|
[ "$(id -u)" != "0" ] \
|
|
&& echo "Configuration of host skipped because of insufficient rights." \
|
|
&& return 1
|
|
|
|
[ "$(id -u)" == "0" ] \
|
|
&& echo \
|
|
&& "${_CORE_SCRIPTS:?"Missing CORE_SCRIPTS"}defineAuthorizedKeysOfUser.sh" "${_DEFINITIONS}" root \
|
|
&& echo \
|
|
&& "${_CORE_SCRIPTS:?"Missing CORE_SCRIPTS"}addNormalUser.sh" jenkins \
|
|
&& echo \
|
|
&& "${_CORE_SCRIPTS:?"Missing CORE_SCRIPTS"}defineAuthorizedKeysOfUser.sh" "${_DEFINITIONS}" jenkins \
|
|
&& echo \
|
|
&& "${_CORE_SCRIPTS:?"Missing CORE_SCRIPTS"}ensureUsageOfDefinitions.sh" "${_DEFINITIONS}" /etc/sudoers.d/allow-jenkins-updateRepositories \
|
|
&& echo \
|
|
&& "${_CORE_SCRIPTS:?"Missing CORE_SCRIPTS"}addToCrontabEveryHour.sh" "${_SETUP:?"Missing SETUP"}" "${_MINUTE_FROM_OWN_IP}" \
|
|
&& return 0
|
|
|
|
return 1
|
|
}
|
|
|
|
function setup() {
|
|
local _DEFINITIONS _DOMAIN _STATES
|
|
_DOMAIN="$(getOrSetDomain "${1}")"
|
|
|
|
! checkPreconditions "${_DOMAIN}" \
|
|
&& return 1
|
|
|
|
_DEFINITIONS="${_CIS_ROOT:?"Missing CIS_ROOT"}definitions/${_DOMAIN:?"Missing DOMAIN"}"
|
|
_STATES="${_CIS_ROOT:?"Missing CIS_ROOT"}states/${_DOMAIN:?"Missing DOMAIN"}"
|
|
readonly _DEFINITIONS _DOMAIN _STATES
|
|
|
|
echo \
|
|
&& addDefinition "${_DEFINITIONS:?"Missing DEFINITIONS"}" "${_DOMAIN:?"Missing DOMAIN"}" \
|
|
&& echo \
|
|
&& addState "${_STATES:?"Missing STATES"}" "${_DOMAIN:?"Missing DOMAIN"}" \
|
|
&& echo \
|
|
&& echo "Using definitions: '${_DEFINITIONS:?"Missing DEFINITIONS"}' ..." \
|
|
&& setupCoreFunctionality "${_DEFINITIONS:?"Missing DEFINITIONS"}" \
|
|
&& return 0
|
|
|
|
echo "FAIL: setup is incomplete: ("$(readlink -f ${0})")"
|
|
echo " - due to an error or insufficient rights."
|
|
return 1
|
|
}
|
|
|
|
# sanitizes all parameters
|
|
setup "$(echo ${1} | sed -E 's|[^a-zA-Z0-9/:@._-]*||g')" \
|
|
&& exit 0
|
|
|
|
exit 1
|