mirror of
https://github.com/m8tin/cis.git
synced 2026-06-02 14:56:58 +02:00
m8in
100 lines
3.4 KiB
Bash
Executable File
100 lines
3.4 KiB
Bash
Executable File
#!/bin/bash
|
|
|
|
# No write permission, but terminal => restart as root using sudo, user jenkins can do this without password
|
|
! [ -w "${0}" ] \
|
|
&& [ -t 0 ] \
|
|
&& sudo "${0}" "${1}" \
|
|
&& exit 0
|
|
|
|
# No write permission and no terminal => restart as root using sudo non-interactive, user jenkins can do this without password
|
|
! [ -w "${0}" ] \
|
|
&& ! [ -t 0 ] \
|
|
&& sudo -n "${0}" "${1}" \
|
|
&& exit 0
|
|
|
|
# Still no write permission => was not called as root
|
|
! [ -w "${0}" ] \
|
|
&& echo "Host $HOSTNAME: insufficient rights." \
|
|
&& exit 1
|
|
|
|
|
|
|
|
function update_repositories() {
|
|
local _CIS_ROOT _DEFINITIONS _DOMAIN _MODE _STATES _UPDATE_REPOSITORIES
|
|
_UPDATE_REPOSITORIES="$(readlink -f "${0}" 2> /dev/null)"
|
|
_CIS_ROOT="${_UPDATE_REPOSITORIES%/updateRepositories.sh}/" #Removes shortest matching pattern '/updateRepositories.sh' from the end
|
|
_MODE="${1:-"--core"}"
|
|
_DOMAIN="$(${_CIS_ROOT:?"Missing CIS_ROOT"}core/printOwnDomain.sh)"
|
|
_DEFINITIONS="${_CIS_ROOT}definitions/${_DOMAIN:?"Missing DOMAIN from file: ${_CIS_ROOT}domainOfHostOwner"}/"
|
|
_STATES="${_CIS_ROOT}states/${_DOMAIN:?"Missing DOMAIN from file: ${_CIS_ROOT}domainOfHostOwner"}/"
|
|
readonly _CIS_ROOT _DEFINITIONS _DOMAIN _MODE _STATES _UPDATE_REPOSITORIES
|
|
|
|
[ "${_MODE}" == "--repair" ] \
|
|
&& (git -C "${_CIS_ROOT}" reset --hard origin/main; \
|
|
git -C "${_DEFINITIONS}" reset --hard origin/main; \
|
|
git -C "${_STATES}" reset --hard origin/main; \
|
|
echo "Run repairs") \
|
|
&& return 0
|
|
|
|
[ "${_MODE}" == "--test" ] \
|
|
&& git -C "${_CIS_ROOT}" pull \
|
|
&& git -C "${_DEFINITIONS}" pull \
|
|
&& git -C "${_STATES}" pull \
|
|
&& echo "Run in testMode successfully." \
|
|
&& return 0
|
|
|
|
[ "${_MODE}" == "--scripts" ] \
|
|
&& printf "Host $HOSTNAME updating scripts: ${_CIS_ROOT} ... " \
|
|
&& (git -C "${_CIS_ROOT}" pull &> /dev/null) \
|
|
&& echo "(done)" \
|
|
&& return 0
|
|
|
|
[ "${_MODE}" == "--definitions" ] \
|
|
&& echo "Host ${HOSTNAME} updating definitions: ${_DEFINITIONS} ... " \
|
|
&& (git -C "${_DEFINITIONS}" pull &> /dev/null) \
|
|
&& echo "(done)" \
|
|
&& return 0
|
|
|
|
[ "${_MODE}" == "--states" ] \
|
|
&& echo "Host ${HOSTNAME} updating states: ${_STATES} ... " \
|
|
&& (git -C "${_STATES}" pull &> /dev/null) \
|
|
&& echo "(done)" \
|
|
&& return 0
|
|
|
|
[ "${_MODE}" == "--core" ] \
|
|
&& echo "Host ${HOSTNAME} updating core including scripts, definitions and states: ${_STATES} ... " \
|
|
&& (git -C "${_CIS_ROOT}" pull &> /dev/null) \
|
|
&& (git -C "${_DEFINITIONS}" pull &> /dev/null) \
|
|
&& (git -C "${_STATES}" pull &> /dev/null) \
|
|
&& echo "(done)" \
|
|
&& return 0
|
|
|
|
echo "FAILED: an error occurred during an update."
|
|
return 1
|
|
}
|
|
|
|
function isValid() {
|
|
# printf '%s'
|
|
# - always treats the contents of ${1} as pure plain text.
|
|
# grep -qE: checks RegExp, but quiet
|
|
printf '%s' "${1}" | grep -qE "${2:?"isValid(): Missing REGEXP"}"
|
|
}
|
|
|
|
function isValidOptional() {
|
|
[ -z "${1}" ] || isValid "${1}" "${2}"
|
|
}
|
|
|
|
|
|
|
|
# Parameter 1: Only one of these values are allowed (--core, --definitions, --repair, --scripts, --states, --test)
|
|
if isValidOptional "${1}" '^(--core|--definitions|--repair|--scripts|--states|--test)$'
|
|
then
|
|
update_repositories "${1}" \
|
|
&& exit 0
|
|
else
|
|
echo "Failure: At least one parameter is invalid" >&2
|
|
exit 1
|
|
fi
|
|
|
|
exit 1
|