-
Bob Mottram authoredBob Mottram authored
Code owners
Assign users and groups as approvers for specific file changes. Learn more.
freedombone-image-customise 92.93 KiB
#!/bin/bash
# _____ _ _
# | __|___ ___ ___ _| |___ _____| |_ ___ ___ ___
# | __| _| -_| -_| . | . | | . | . | | -_|
# |__| |_| |___|___|___|___|_|_|_|___|___|_|_|___|
#
# Freedom in the Cloud
#
# Based on bin/freedombox-customize from freedom-maker
#
# License
# =======
#
# Copyright (C) 2015-2019 Bob Mottram <bob@freedombone.net>
#
# This program is free software: you can redistribute it and/or modify
# it under the terms of the GNU Affero General Public License as published by
# the Free Software Foundation, either version 3 of the License, or
# (at your option) any later version.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
# GNU Affero General Public License for more details.
#
# You should have received a copy of the GNU Affero General Public License
# along with this program. If not, see <http://www.gnu.org/licenses/>.
set -e
set -x
PROJECT_NAME='freedombone'
LOCAL_NAME=${PROJECT_NAME}
INSTALL_DIR=/root/build
COMPLETION_FILE=$HOME/${PROJECT_NAME}-completed.txt
PROJECT_REPO="https://code.freedombone.net/bashrc/${PROJECT_NAME}"
VARIANT='full'
# username created by default within a debian image
GENERIC_IMAGE_USERNAME='fbone'
export TEXTDOMAIN=${PROJECT_NAME}-image-customise
export TEXTDOMAINDIR="/usr/share/locale"
# Whether to minimise the number of decisions during interactive install
MINIMAL_INSTALL="yes"
MY_USERNAME='debian'
MY_PASSWORD="${PROJECT_NAME}"
# Minimum number of characters in a password
MINIMUM_PASSWORD_LENGTH=10
# IP address of the router (gateway)
ROUTER_IP_ADDRESS="192.168.1.254"
# The fixed IP address of the Beaglebone Black on your local network
BOX_IP_ADDRESS="192.168.1.55"
# DNS
NAMESERVER1='91.239.100.100'
NAMESERVER2='89.233.43.71'
NAMESERVER3='87.118.100.175'
NAMESERVER4='94.75.228.29'
NAMESERVER5='85.25.251.254'
NAMESERVER6='2.141.58.13'
# optional configuration file containing freedombone settings
CONFIG_FILENAME=
# Optional ssh public key to allow
SSH_PUBKEY="no"
# Whether this is a generic image for mass redistribution on the interwebs
GENERIC_IMAGE="no"
# default SSH port
SSH_PORT=2222
# for mesh installs
TRACKER_PORT=6969
# Whether sites are accessible only within a Tor browser
ONION_ONLY="no"
# Whether to only install debian and nothing else
DEBIAN_INSTALL_ONLY="no"
# wifi settings
WIFI_INTERFACE='wlan0'
WIFI_SSID=
WIFI_TYPE='wpa2-psk'
WIFI_PASSPHRASE=
WIFI_HOTSPOT='no'
WIFI_NETWORKS_FILE=~/${PROJECT_NAME}-wifi.cfg
# Whether to install non-free wifi drivers for the mesh client
INSECURE='no'
# optional desktop background image for mesh
MESH_DESKTOP_BACKGROUND_IMAGE=/usr/local/share/${PROJECT_NAME}_mesh_initial_background.png
# The browser application to use
BROWSER=firefox
BROWSER_OPTIONS='-url'
MESH_INSTALL_DIR=/var/lib
# for mesh installs whether to delete all data and generate
# a new identity at every shutdown/boot
AMNESIC='no'
# defines the initial keyboard layout
KEYBOARD_MAP='gb'
# Strings used for setting the username
MESH_TITLE=$"Freedombone Mesh"
MESH_SET_USERNAME=$"Welcome to the Freedombone mesh.\n\nThe first thing you will need to do is set a nickname so that other peers can find you."
# Whether to enable zeronet on the mesh
ENABLE_ZERONET=
MESH_TEXT_EDITOR='pluma'
BABEL_REPO="https://github.com/jech/babeld"
BABEL_COMMIT='d9390d1fee337c464e67255bbbd879d975e126e2'
OLSR2_REPO="https://github.com/OLSR/OONF"
OLSR2_COMMIT='81033251c4ee1c5699bfee9d2985112c6266ab0a'
BMX6_REPO="https://github.com/bmx-routing/bmx6"
BMX6_COMMIT='39dd1f2d99ac5a3fa28e92f8173c15039132e181'
BMX7_REPO="https://github.com/bmx-routing/bmx7"
BMX7_COMMIT='85841b068ff4db82b038decbd3c5191edd56d826'
CONTINUOUS_INTEGRATION=
PATH=/usr/local/bin:/usr/local/sbin:/usr/bin:/usr/sbin:/bin:/sbin
# Whether to use a SATA drive and if so what its device/partition name is
# eg. sda2
EXTERNAL_DRIVE=
install_cabal() {
if [[ $VARIANT != "meshclient" ]]; then
return
fi
get_npm_arch
mesh_setup_npm
cat <<EOF > "$rootdir/usr/bin/install_cabal"
#!/bin/bash
export PATH=/root/.npm-global/bin:$PATH
export NPM_CONFIG_PREFIX=/root/.npm-global
npm install --arch=$NPM_ARCH -g dat
npm install --arch=$NPM_ARCH -g cabal
EOF
chroot "$rootdir" /bin/chmod +x /usr/bin/install_cabal
chroot "$rootdir" /usr/bin/install_cabal
rm "$rootdir/usr/bin/install_cabal"
{ echo '#!/bin/bash';
echo 'cd /root/.npm-global/bin';
echo 'cabal'; } > "$rootdir/usr/bin/cabal"
chmod +x "$rootdir/usr/bin/cabal"
}
image_install_myqr() {
if [[ "$ARCHITECTURE" != 'amd64' && "$ARCHITECTURE" != 'x86'* ]]; then
return
fi
if [ -f "$rootdir/usr/local/bin/myqr" ]; then
return
fi
# shellcheck disable=SC2086
chroot "$rootdir" $INSTALL_PACKAGES python3-pip
chroot "$rootdir" pip3 install myqr
if [ ! -f "$rootdir/usr/local/bin/myqr" ]; then
echo $'Failed to install myqr'
exit 36
fi
}
configure_backports() {
echo "deb http://${DEBIAN_REPO}/debian/ ${DEBIAN_VERSION}-backports main" >> "$rootdir/etc/apt/sources.list"
}
configure_contrib_repo() {
if ! grep -q "contrib" "$rootdir/etc/apt/sources.list"; then
chroot "$rootdir" /bin/sed -i "s| main| main contrib|g" /etc/apt/sources.list
fi
}
enable_eatmydata_override() {
# shellcheck disable=SC2086
chroot "$rootdir" $INSTALL_PACKAGES eatmydata
if [ -x "$rootdir/usr/bin/eatmydata" ] && \
[ ! -f "$rootdir/etc/apt/apt.conf.d/95debian-edu-install-dpkg-eatmydata" ]; then
echo $"info: Adding apt config to call dpkg via eatmydata"
printf "#!/bin/sh\\nexec eatmydata dpkg \"\$@\"\\n" \
> "$rootdir/var/tmp/dpkg-eatmydata"
chmod 755 "$rootdir/var/tmp/dpkg-eatmydata"
cat > "$rootdir/etc/apt/apt.conf.d/95debian-edu-install-dpkg-eatmydata" <<EOF
Dir::Bin::dpkg "/var/tmp/dpkg-eatmydata";
EOF
else
echo $"error: unable to find /usr/bin/eatmydata after installing the eatmydata package"
fi
}
disable_eatmydata_override() {
for override in \
/etc/apt/apt.conf.d/95debian-edu-install-dpkg-eatmydata \
/var/tmp/dpkg-eatmydata ; do
echo $"info: Removing apt config to call dpkg via eatmydata"
if [ -f "$rootdir$override" ] ; then
rm -f "$rootdir$override"
else
echo $"warning: missing $rootdir$override"
fi
done
sync # Flush file buffers before continuing
}
set_apt_sources() {
NEW_MIRROR="$1"
COMPONENTS="main"
cat <<EOF > etc/apt/sources.list
deb $NEW_MIRROR $SUITE $COMPONENTS
deb-src $NEW_MIRROR $SUITE $COMPONENTS
#deb http://security.debian.org/ $SUITE/updates main
#deb-src http://security.debian.org/ $SUITE/updates main
EOF
}
configure_networking() {
# shellcheck disable=SC2086
chroot "$rootdir" $INSTALL_PACKAGES resolvconf
if [[ "$DEBIAN_INSTALL_ONLY" != "no" ]]; then
return
fi
{ echo '# This file describes the network interfaces available on your system';
echo '# and how to activate them. For more information, see interfaces(5).';
echo 'source /etc/network/interfaces.d/*'; } > "$rootdir/etc/network/interfaces"
if [[ "$GENERIC_IMAGE" == "no" ]]; then
{ echo 'auto eth0';
echo 'iface eth0 inet static';
echo "address $BOX_IP_ADDRESS";
echo 'netmask 255.255.255.0';
echo "gateway $ROUTER_IP_ADDRESS"; } > "$rootdir/etc/network/interfaces.d/static"
hexarray=( 1 2 3 4 5 6 7 8 9 0 a b c d e f )
a=${hexarray[$RANDOM%16]}${hexarray[$RANDOM%16]}
b=${hexarray[$RANDOM%16]}${hexarray[$RANDOM%16]}
c=${hexarray[$RANDOM%16]}${hexarray[$RANDOM%16]}
d=${hexarray[$RANDOM%16]}${hexarray[$RANDOM%16]}
e=${hexarray[$RANDOM%16]}${hexarray[$RANDOM%16]}
echo "hwaddress ether de:$a:$b:$c:$d:$e" > "$rootdir/etc/network/interfaces.d/macaddress"
else
{ echo 'auto eth0';
echo 'iface eth0 inet dhcp'; } > "$rootdir/etc/network/interfaces.d/dynamic"
fi
# configure DNS
resolvconf=$rootdir/etc/resolvconf/resolv.conf.d/head
{ echo 'domain localdomain';
echo 'search localdomain';
echo "nameserver $NAMESERVER1";
echo "nameserver $NAMESERVER2";
echo "nameserver $NAMESERVER3";
echo "nameserver $NAMESERVER4";
echo "nameserver $NAMESERVER5";
echo "nameserver $NAMESERVER6"; } > "$resolvconf"
chroot "$rootdir" resolvconf -u
if [[ $VARIANT != "meshclient" && $VARIANT != "meshusb" ]]; then
# change the motd to show further install instructions
echo $"
_____ _ _
| __|___ ___ ___ _| |___ _____| |_ ___ ___ ___
| __| _| -_| -_| . | . | | . | . | | -_|
|__| |_| |___|___|___|___|_|_|_|___|___|_|_|___|
Initial base install
Your system is not yet installed. To complete the process run the
following commands, then enter your details.
sudo su
${PROJECT_NAME} menuconfig
" > "$rootdir/etc/motd"
else
echo $"
_____ _ _
| __|___ ___ ___ _| |___ _____| |_ ___ ___ ___
| __| _| -_| -_| . | . | | . | . | | -_|
|__| |_| |___|___|___|___|_|_|_|___|___|_|_|___|
Freedom in the Mesh
" > "$rootdir/etc/motd"
fi
}
configure_ssh() {
if [[ $VARIANT == "mesh"* ]]; then
return
fi
sed -i "s/Port .*/Port ${SSH_PORT}/g" "$rootdir/etc/ssh/sshd_config"
sed -i "s/#Port ${SSH_PORT}/Port ${SSH_PORT}/g" "$rootdir/etc/ssh/sshd_config"
# No password login by default, use the webadmin to enable it if needed
sed -i 's|#PasswordAuthentication|PasswordAuthentication|g' "$rootdir/etc/ssh/sshd_config"
sed -i 's|PasswordAuthentication.*|PasswordAuthentication no|g' "$rootdir/etc/ssh/sshd_config"
if [[ "$SSH_PUBKEY" != "no" ]]; then
if [ ! -d "$rootdir/home/$MY_USERNAME/.ssh" ]; then
mkdir "$rootdir/home/$MY_USERNAME/.ssh"
fi
echo "$SSH_PUBKEY" > "$rootdir/home/$MY_USERNAME/.ssh/authorized_keys"
chroot "$rootdir" /bin/chown -R "$MY_USERNAME":"$MY_USERNAME" "/home/$MY_USERNAME/.ssh"
echo $"Using ssh public key:"
echo $SSH_PUBKEY
echo $'Password ssh authentication turned off'
fi
}
create_generic_image() {
if [[ $DEBIAN_INSTALL_ONLY != "no" ]]; then
return
fi
if [[ $GENERIC_IMAGE == "no" ]]; then
return
fi
if [ $CONFIG_FILENAME ]; then
if [[ "$CONFIG_FILENAME" == *"mesh.cfg"* ]]; then
VARIANT="mesh"
fi
fi
# Don't install any configuration. This will be a base system
if [[ $VARIANT != "mesh"* ]]; then
CONFIG_FILENAME=
else
touch "$rootdir/root/.initial_mesh_setup"
fi
# Stick with the existing login for mesh clients
if [[ $VARIANT == "meshclient" || $VARIANT == "meshusb" ]]; then
return
fi
# The presence of this file indicates that the initial
# setup has not yet been completed
touch "$rootdir/home/$MY_USERNAME/.initial_setup"
chroot "$rootdir" /bin/chown "$MY_USERNAME":"$MY_USERNAME" "/home/$MY_USERNAME/.initial_setup"
touch "$rootdir/root/.initial_setup"
cat >> "$rootdir/home/$MY_USERNAME/.bashrc" <<EOF
# initial setup of the system
if [ -f ~/.initial_setup ]; then
clear
echo "
.---. . .
| | |
|--- .--. .-. .-. .-.| .-. .--.--. |.-. .-. .--. .-.
| | (.-' (.-' ( | ( )| | | | )( )| | (.-'
' ' --' --' -' - -' ' ' -' -' -' ' - --'
Initial setup process
Please enter your password a second time.
"
sudo su
fi
EOF
{ echo "MY_USERNAME=${MY_USERNAME}";
echo '# initial setup of the system';
echo 'if [ -f ~/.initial_setup ]; then';
echo ' if [ -f ~/login.txt ]; then';
echo " NEW_USER_PASSWORD=\$(printf \"%s\" \"\$(cat ~/login.txt)\")";
echo ' else';
echo " ENTROPY=\$(cat /proc/sys/kernel/random/entropy_avail)";
echo " if [ \$ENTROPY -lt 500 ]; then"; } >> "$rootdir/root/.bashrc"
ENTROPY_MESSAGE1=$'Initial setup process'
ENTROPY_MESSAGE2=$'Password Generation'
ENTROPY_MESSAGE3=$'WARNING: The entropy available on this system is too low to generate a password.\n\nThe installation process cannot continue.'
{ echo " dialog --backtitle \"${ENTROPY_MESSAGE1}\" --title \"${ENTROPY_MESSAGE2}\" --msgbox \"${ENTROPY_MESSAGE3}\" 8 50";
echo ' exit';
echo ' fi';
echo -n " NEW_USER_PASSWORD=\$(openssl rand -base64 32 | tr -dc A-Za-z0-9 | head -c ";
echo "${DEFAULT_PASSWORD_LENGTH})";
echo ' fi';
echo " echo \"\${NEW_USER_PASSWORD}\" > ~/login.txt";
echo ' clear';
echo ' echo ""'; } >> "$rootdir/root/.bashrc"
NEW_LOGIN_PASSWORD_MESSAGE1=$'Your new login password is:'
NEW_LOGIN_PASSWORD_MESSAGE2=$'Use it whenever you wish to ssh into this system.'
NEW_LOGIN_PASSWORD_MESSAGE3=$'IMPORTANT: Please take a moment to enter the above password into a\npassword manager or write it down somewhere.'
PRESS_KEY_MESSAGE=$'Press any key to continue...'
{ echo " echo \"${NEW_LOGIN_PASSWORD_MESSAGE1}\"";
echo ' echo ""';
echo " echo \" \${NEW_USER_PASSWORD}\"";
echo ' echo ""';
echo " echo \"${NEW_LOGIN_PASSWORD_MESSAGE2}\"";
echo ' echo ""';
echo " echo \"${NEW_LOGIN_PASSWORD_MESSAGE3}\"";
echo ' echo ""';
echo " read -n1 -r -p \"${PRESS_KEY_MESSAGE}\" key";
# change the password for the admin user
echo -n " echo \"${MY_USERNAME}:";
echo "\$(printf \"%s\" \"\$(cat ~/login.txt)\")\" | /usr/sbin/chpasswd";
# update before continuing
echo " cd /root/${PROJECT_NAME}";
echo " git stash";
echo " git pull";
echo " git checkout stretch";
echo " make install"; } >> "$rootdir/root/.bashrc"
if [[ "$VARIANT" != "mesh"* && "$VARIANT" != "usb" ]]; then
if [[ "$ONION_ONLY" == "no" ]]; then
if [[ "$MINIMAL_INSTALL" == "no" ]]; then
echo " ${PROJECT_NAME} menuconfig-full" >> "$rootdir/root/.bashrc"
else
echo " ${PROJECT_NAME} menuconfig" >> "$rootdir/root/.bashrc"
fi
else
echo " ${PROJECT_NAME} menuconfig-onion" >> "$rootdir/root/.bashrc"
fi
else
echo " echo ''" >> "$rootdir/root/.bashrc"
fi
{ echo ' if [ "$?" = "0" ]; then';
echo " if [ -f ~/${PROJECT_NAME}-completed.txt ]; then";
echo " # Check that the initial setup really did complete";
echo " if grep -q 'tripwire' ~/${PROJECT_NAME}-completed.txt; then";
# Remove the initial setup files
echo ' rm /root/.initial_setup';
echo ' rm /home/fbone/.initial_setup';
echo " touch /root/.remove_${GENERIC_IMAGE_USERNAME}";
echo ' rm ~/login.txt'; } >> "$rootdir/root/.bashrc"
if [[ "$VARIANT" != "mesh"* && "$VARIANT" != "usb" ]]; then
{ echo " SSH_ONION_HOSTNAME=\$(cat /var/lib/tor/hidden_service_ssh/hostname)";
echo " if [ \${#SSH_ONION_HOSTNAME} -lt 2 ]; then";
echo ' exit 62';
echo ' fi'; } >> "$rootdir/root/.bashrc"
fi
{ echo " if [ -f /root/${PROJECT_NAME}-wifi.cfg ]; then";
echo " echo '[Unit]' > /etc/systemd/system/wifistart.service";
echo " echo 'Description=WifiStartup (Start wifi networking)' >> /etc/systemd/system/wifistart.service";
echo " echo 'After=syslog.target' >> /etc/systemd/system/wifistart.service";
echo " echo 'After=network.target' >> /etc/systemd/system/wifistart.service";
echo " echo 'After=remote-fs.target' >> /etc/systemd/system/wifistart.service";
echo " echo '' >> /etc/systemd/system/wifistart.service";
echo " echo '[Service]' >> /etc/systemd/system/wifistart.service";
echo " echo 'Type=simple' >> /etc/systemd/system/wifistart.service";
echo " echo 'User=root' >> /etc/systemd/system/wifistart.service";
echo " echo 'Group=root' >> /etc/systemd/system/wifistart.service";
echo " echo 'WorkingDirectory=/root' >> /etc/systemd/system/wifistart.service";
echo " echo 'ExecStart=/usr/local/bin/${PROJECT_NAME}-wifi --wait 5 2> /dev/null' >> /etc/systemd/system/wifistart.service";
echo " echo '' >> /etc/systemd/system/wifistart.service";
echo " echo '[Install]' >> /etc/systemd/system/wifistart.service";
echo " echo 'WantedBy=multi-user.target' >> /etc/systemd/system/wifistart.service";
echo " systemctl enable wifistart";
echo " systemctl daemon-reload";
echo ' fi';
echo ' systemctl reboot -i';
echo ' fi';
echo ' fi';
echo ' else';
echo ' key=';
echo " while [[ \$key != \"x\" ]]; do"; } >> "$rootdir/root/.bashrc"
INSTALL_FAIL_MESSAGE=$"Install failed. Press x to continue..."
{ echo " read -n1 -r -p \"${INSTALL_FAIL_MESSAGE}\" key";
echo ' done';
echo ' fi';
echo ' exit';
echo 'else';
echo ' # Remove default account after install';
echo " if [ -f /root/.remove_${GENERIC_IMAGE_USERNAME} ]; then";
echo " if [ -d /home/${GENERIC_IMAGE_USERNAME} ]; then";
echo " userdel -r ${GENERIC_IMAGE_USERNAME}";
echo " if [ -d /home/${GENERIC_IMAGE_USERNAME} ]; then";
echo " rm -rf /home/${GENERIC_IMAGE_USERNAME}";
echo " rm /root/.remove_${GENERIC_IMAGE_USERNAME}";
echo ' fi';
echo ' fi';
echo ' fi';
echo 'fi'; } >> "$rootdir/root/.bashrc"
}
continue_installation() {
# If a configuration file exists then run with it
# otherwise the interactive installer can be used
# This is equivalent to installing freedombox-setup on freedombox
if [ $CONFIG_FILENAME ]; then
if [ ${#CONFIG_FILENAME} -gt 2 ]; then
cp "$CONFIG_FILENAME" "$rootdir/root/$PROJECT_NAME.cfg"
cat "$rootdir/root/$PROJECT_NAME.cfg"
chroot "$rootdir" su -c "$PROJECT_NAME -c /root/$PROJECT_NAME.cfg" - root
fi
fi
}
atheros_wifi() {
chroot "$rootdir" dpkg -i /root/${PROJECT_NAME}/drivers/firmware-ath9k-htc.deb
# shellcheck disable=SC2086
chroot "$rootdir" $INSTALL_PACKAGES firmware-linux-free
}
configure_wifi() {
if [[ $VARIANT == "mesh"* ]]; then
return
fi
wifi_setup_service=setupwififirstboot
wifi_setup_file=$rootdir/root/setup_wifi_firstboot
echo '#!/bin/bash' > "$wifi_setup_file"
if [ -f $WIFI_NETWORKS_FILE ]; then
echo "${PROJECT_NAME}-wifi --networks $WIFI_NETWORKS_FILE" >> "$wifi_setup_file"
else
if [[ $WIFI_TYPE != 'none' ]]; then
if [ ${#WIFI_PASSPHRASE} -lt 2 ]; then
return
fi
echo "${PROJECT_NAME}-wifi -s $WIFI_SSID -t $WIFI_TYPE -p $WIFI_PASSPHRASE --hotspot $WIFI_HOTSPOT" >> "$wifi_setup_file"
else
echo "${PROJECT_NAME}-wifi -s $WIFI_SSID -t $WIFI_TYPE --hotspot $WIFI_HOTSPOT" >> "$wifi_setup_file"
fi
fi
{ echo "systemctl stop ${wifi_setup_service}";
echo "systemctl disable ${wifi_setup_service}";
echo "rm /etc/systemd/system/${wifi_setup_service}.service";
echo 'systemctl reboot -i'; } >> "$wifi_setup_file"
chmod +x "$wifi_setup_file"
{ echo '[Unit]';
echo 'Description=Initial wifi configuration';
echo 'After=syslog.target';
echo 'After=network.target';
echo '';
echo '[Service]';
echo 'Type=simple';
echo 'User=root';
echo 'Group=root';
echo 'WorkingDirectory=/root';
echo "ExecStart=/root/setup_wifi_firstboot > /var/log/wifi_setup.log";
echo '';
echo 'TimeoutSec=99999';
echo '';
echo '[Install]';
echo 'WantedBy=multi-user.target'; } >> "$rootdir/etc/systemd/system/${wifi_setup_service}.service"
chmod +x "$rootdir/etc/systemd/system/${wifi_setup_service}.service"
chroot "$rootdir" systemctl enable ${wifi_setup_service}
}
##############################################################################
# Mesh networking
##############################################################################
# for mesh installs
TRACKER_PORT=6969
WIFI_CHANNEL=2
# B.A.T.M.A.N settings
BATMAN_CELLID='02:BA:00:00:03:01'
WIFI_SSID='mesh'
# To avoid confusions these are obtained from the main project file
#TOXID_REPO=
#TOX_PORT=
#TOXCORE_REPO=
#TOXIC_REPO=
#TOXCORE_COMMIT=
#TOXIC_COMMIT=
# These are some default nodes, but you can replace them with trusted nodes
# as you prefer. See https://wiki.tox.im/Nodes
#TOX_NODES=
#TOX_NODES=(
# '192.254.75.102,2607:5600:284::2,33445,951C88B7E75C867418ACDB5D273821372BB5BD652740BCDF623A4FA293E75D2F,Tox RELENG,US'
# '144.76.60.215,2a01:4f8:191:64d6::1,33445,04119E835DF3E78BACF0F84235B300546AF8B936F035185E2A8E9E0A67C8924F,sonOfRa,DE'
#)
# To avoid confusions these are obtained from the main project file
ZERONET_REPO=
ZERONET_COMMIT=
ZERONET_PORT=
ZERONET_BLOG_REPO=
ZERONET_BLOG_COMMIT=
ZERONET_MAIL_REPO=
ZERONET_MAIL_COMMIT=
ZERONET_FORUM_REPO=
ZERONET_FORUM_COMMIT=
ZERONET_ID_REPO=
ZERONET_ID_COMMIT=
# Directory where source code is downloaded and compiled
INSTALL_DIR=$HOME/build
INSTALLING_MESH=
mesh_shutdown_script() {
mesh_shutdown_script="$rootdir/usr/bin/meshshutdown"
{ echo '#!/bin/bash';
echo 'batman stop'; } > "$mesh_shutdown_script"
chroot "$rootdir" chmod +x /usr/bin/meshshutdown
{ echo '[Unit]';
echo 'Description=Shuts down the mesh';
echo 'Before=shutdown.target';
echo '';
echo '[Service]';
echo 'User=root';
echo 'Group=root';
echo 'ExecStart=/bin/true';
echo 'ExecStop=/bin/bash /usr/bin/meshshutdown';
echo 'RemainAfterExit=yes';
echo '';
echo '[Install]';
echo 'WantedBy=multi-user.target'; } > "$rootdir/etc/systemd/system/meshshutdown.service"
chroot "$rootdir" systemctl enable meshshutdown
}
install_babel() {
git clone "$BABEL_REPO" "$rootdir/etc/babel"
cat <<EOF > "$rootdir/usr/bin/install_babel"
#!/bin/bash
cd /etc/babel
git checkout $BABEL_COMMIT -b $BABEL_COMMIT
cd /etc/babel
DATE_FMT=%Y-%m-%d
SOURCE_DATE_EPOCH=2018-12-07
BUILD_DATE=\$(date -u -d \"\${SOURCE_DATE_EPOCH}\" \"+\${DATE_FMT}\" 2>/dev/null || date -u -r \"\${SOURCE_DATE_EPOCH}\" \"+\${DATE_FMT}\" 2>/dev/null || date -u \"+\${DATE_FMT}\")
make
make install
EOF
chroot "$rootdir" chmod +x /usr/bin/install_babel
chroot "$rootdir" /usr/bin/install_babel
if [ ! -f "$rootdir/usr/local/bin/babeld" ]; then
echo $'Unable to build Babel'
exit 52
fi
rm "$rootdir/usr/bin/install_babel"
{ echo '[Unit]';
echo 'Description=Babel mesh routing protocol';
echo 'Requires=network.target';
echo 'After=network.target';
echo '';
echo '[Service]';
echo 'User=root';
echo 'Group=root';
echo 'ExecStart=/usr/local/bin/babeld wlan0';
echo 'Restart=on-failure';
echo '';
echo '[Install]';
echo 'WantedBy=multi-user.target'; } > "$rootdir/etc/systemd/system/babel.service"
}
install_olsr2() {
# shellcheck disable=SC2086
chroot "$rootdir" $INSTALL_PACKAGES cmake libnl-3-dev
git clone "$OLSR2_REPO" "$rootdir/etc/olsr2"
cat <<EOF > "$rootdir/usr/bin/install_olsr2"
#!/bin/bash
cd /etc/olsr2
git checkout $OLSR2_COMMIT -b $OLSR2_COMMIT
cd /etc/olsr2/build
DATE_FMT=%Y-%m-%d
SOURCE_DATE_EPOCH=2018-12-07
BUILD_DATE=\$(date -u -d \"\${SOURCE_DATE_EPOCH}\" \"+\${DATE_FMT}\" 2>/dev/null || date -u -r \"\${SOURCE_DATE_EPOCH}\" \"+\${DATE_FMT}\" 2>/dev/null || date -u \"+\${DATE_FMT}\")
cmake ..
make
make install
EOF
chroot "$rootdir" chmod +x /usr/bin/install_olsr2
chroot "$rootdir" /usr/bin/install_olsr2
if [ ! -f "$rootdir/usr/local/sbin/olsrd2_static" ]; then
echo $'Unable to build OLSR2'
exit 79
fi
rm "$rootdir/usr/bin/install_olsr2"
{ echo '[Unit]';
echo 'Description=OLSR2 mesh routing protocol';
echo 'Requires=network.target';
echo 'After=network.target';
echo '';
echo '[Service]';
echo 'User=root';
echo 'Group=root';
echo 'ExecStart=/usr/local/sbin/olsrd2_static wlan0';
echo 'Restart=on-failure';
echo '';
echo '[Install]';
echo 'WantedBy=multi-user.target'; } > "$rootdir/etc/systemd/system/olsr2.service"
}
install_bmx6() {
git clone "$BMX6_REPO" "$rootdir/etc/bmx6"
cat <<EOF > "$rootdir/usr/bin/install_bmx6"
#!/bin/bash
cd /etc/bmx6
git checkout $BMX6_COMMIT -b $BMX6_COMMIT
DATE_FMT=%Y-%m-%d
SOURCE_DATE_EPOCH=2018-12-07
BUILD_DATE=\$(date -u -d \"\${SOURCE_DATE_EPOCH}\" \"+\${DATE_FMT}\" 2>/dev/null || date -u -r \"\${SOURCE_DATE_EPOCH}\" \"+\${DATE_FMT}\" 2>/dev/null || date -u \"+\${DATE_FMT}\")
make
make install
cd /etc/bmx6/lib/bmx6_http_info
make
make install
cd /etc/bmx6/lib/bmx6_json
make
make install
cd /etc/bmx6/lib/bmx6_quagga
make
make install
cd /etc/bmx6/lib/bmx6_sms
make
make install
cd /etc/bmx6/lib/bmx6_table
make
make install
cd /etc/bmx6/lib/bmx6_topology
make
make install
EOF
chroot "$rootdir" chmod +x /usr/bin/install_bmx6
chroot "$rootdir" /usr/bin/install_bmx6
if [ ! -f "$rootdir/usr/sbin/bmx6" ]; then
echo $'bmx6 was not installed'
exit 79
fi
rm "$rootdir/usr/bin/install_bmx6"
{ echo '[Unit]';
echo 'Description=BMX6 mesh routing protocol';
echo 'Requires=network.target';
echo 'After=network.target';
echo '';
echo '[Service]';
echo 'Type=forking';
echo 'User=root';
echo 'Group=root';
echo 'ExecStart=/usr/sbin/bmx6 dev=wlan0';
echo "ExecStop=/usr/bin/kill -15 \$MAINPID";
echo 'PIDFile=/var/run/bmx6/pid';
echo 'Restart=on-failure';
echo '';
echo '[Install]';
echo 'WantedBy=multi-user.target'; } > "$rootdir/etc/systemd/system/bmx6.service"
}
install_bmx7() {
# shellcheck disable=SC2086
chroot "$rootdir" $INSTALL_PACKAGES libjson-c-dev zlib1g-dev libiw-dev wget cmake pkg-config lua5.1 liblua5.1-0-dev dh-autoreconf
git clone "$BMX7_REPO" "$rootdir/etc/bmx7"
MBEDTLS_VERSION='2.8.0'
cat <<EOF > "$rootdir/usr/bin/install_bmx7"
#!/bin/bash
cd /etc
wget https://tls.mbed.org/download/mbedtls-${MBEDTLS_VERSION}-gpl.tgz
tar xzvf mbedtls-${MBEDTLS_VERSION}-gpl.tgz
cd mbedtls-${MBEDTLS_VERSION}
DATE_FMT=%Y-%m-%d
SOURCE_DATE_EPOCH=2018-12-07
BUILD_DATE=\$(date -u -d \"\${SOURCE_DATE_EPOCH}\" \"+\${DATE_FMT}\" 2>/dev/null || date -u -r \"\${SOURCE_DATE_EPOCH}\" \"+\${DATE_FMT}\" 2>/dev/null || date -u \"+\${DATE_FMT}\")
if ! make; then
exit 1
fi
make install
cd /etc
git clone https://github.com/json-c/json-c.git
cd json-c
git checkout 3df1f98b4ab52f271dba5e13ec59cf4d1d093e1a -b 3df1f98b4ab52f271dba5e13ec59cf4d1d093e1a
sh ./autogen.sh
./configure
if ! make; then
exit 2
fi
make install
cd /etc
git clone https://git.openwrt.org/project/libubox.git
cd libubox
git checkout 3c1b33b7d57ad8b8aeeab8babd48625b86532e0b -b 3c1b33b7d57ad8b8aeeab8babd48625b86532e0b
cmake .
if ! make; then
exit 3
fi
make install
cd /etc
git clone https://git.openwrt.org/project/uci.git
cd uci
git checkout 5d2bf09ec594d97eb9284b8c721dbfe10b81a6f6 -b 5d2bf09ec594d97eb9284b8c721dbfe10b81a6f6
if ! cmake .; then
exit 4
fi
make clean all install WOPTS="-pedantic -Wall"
make install
cd /etc/bmx7
git checkout $BMX7_COMMIT -b $BMX7_COMMIT
if ! make build_all EXTRA_CFLAGS="-DTRAFFIC_DUMP -DCRYPTLIB=MBEDTLS_2_8_0"; then
exit 5
fi
make install
cd /etc/bmx7
make -C lib/bmx7_http_info/
make -C lib/bmx7_http_info/ install
make -C lib/bmx7_uci_config/
make -C lib/bmx7_uci_config/ install
make -C lib/bmx7_json/
make -C lib/bmx7_json/ install
make -C lib/bmx7_tun/
make -C lib/bmx7_tun/ install
make -C lib/bmx7_sms/
make -C lib/bmx7_sms/ install
make -C lib/bmx7_topology/
make -C lib/bmx7_topology/ install
EOF
chroot "$rootdir" chmod +x /usr/bin/install_bmx7
chroot "$rootdir" /usr/bin/install_bmx7
if [ ! -f "$rootdir/usr/sbin/bmx7" ]; then
echo $'bmx7 was not installed'
exit 67
fi
rm "$rootdir/usr/bin/install_bmx7"
{ echo '[Unit]';
echo 'Description=BMX7 mesh routing protocol';
echo 'Requires=network.target';
echo 'After=network.target';
echo '';
echo '[Service]';
echo 'Type=forking';
echo 'User=root';
echo 'Group=root';
echo 'ExecStart=/usr/sbin/bmx7 dev=wlan0';
echo "ExecStop=/usr/bin/kill -15 \$MAINPID";
echo 'PIDFile=/var/run/bmx7/pid';
echo 'Restart=on-failure';
echo '';
echo '[Install]';
echo 'WantedBy=multi-user.target'; } > "$rootdir/etc/systemd/system/bmx7.service"
}
initialise_mesh() {
if [[ "$VARIANT" != "mesh"* ]]; then
return
fi
if [[ "$DEBIAN_INSTALL_ONLY" != "no" ]]; then
return
fi
if [[ "$INSECURE" == $'yes' ]]; then
echo '*********************************************************'
echo $'WARNING: non-free wifi drivers are being installed.'
echo $' This may compromise the security of your system.'
echo '*********************************************************'
# enable non-free repo
if ! grep -q "non-free" "$rootdir/etc/apt/sources.list"; then
chroot "$rootdir" /bin/sed -i "s| main| main non-free|g" /etc/apt/sources.list
fi
# shellcheck disable=SC2086
chroot "$rootdir" $UPDATE_PACKAGES
# install proprietary wifi drivers
# see https://wiki.debian.org/iwlwifi
# shellcheck disable=SC2086
chroot "$rootdir" $INSTALL_PACKAGES firmware-iwlwifi firmware-b43-installer firmware-brcm80211 firmware-realtek
fi
INSTALLING_MESH=1
# shellcheck disable=SC2086
chroot "$rootdir" $INSTALL_PACKAGES apt-transport-https
# install tor as a possible way of routing traffic between internet gateways
# shellcheck disable=SC2086
chroot "$rootdir" $INSTALL_PACKAGES_BACKPORTS tor
# dhcp daemon for hotspot on secondary wifi adapter
# shellcheck disable=SC2086
chroot "$rootdir" $INSTALL_PACKAGES dnsmasq
# for debugging
# shellcheck disable=SC2086
chroot "$rootdir" $INSTALL_PACKAGES traceroute
# set the default protocol to be used
echo 'bmx6' > "$rootdir$MESH_DEFAULT_PROTOCOL"
sed -i 's|#net.ipv6.conf.all.forwarding.*|net.ipv6.conf.all.forwarding=1|g' "$rootdir/etc/sysctl.conf"
sed -i 's|net.ipv6.conf.all.forwarding.*|net.ipv6.conf.all.forwarding=1|g' "$rootdir/etc/sysctl.conf"
sed -i 's|#net.ipv6.conf.all.accept_redirects.*|net.ipv6.conf.all.accept_redirects=1|g' "$rootdir/etc/sysctl.conf"
sed -i 's|net.ipv6.conf.all.accept_redirects.*|net.ipv6.conf.all.accept_redirects=1|g' "$rootdir/etc/sysctl.conf"
sed -i 's|#net.ipv6.conf.all.accept_source_route.*|net.ipv6.conf.all.accept_source_route=1|g' "$rootdir/etc/sysctl.conf"
sed -i 's|net.ipv6.conf.all.accept_source_route.*|net.ipv6.conf.all.accept_source_route=1|g' "$rootdir/etc/sysctl.conf"
configure_firewall
install_avahi
install_batman
install_bmx6
install_bmx7
install_olsr2
install_babel
mesh_shutdown_script
install_vpn
install_tomb
#install_tahoelafs
image_install_web_server
mesh_install_scuttlebot
install_cabal
# shellcheck disable=SC2086
chroot "$rootdir" $CLEAN_PACKAGES
chroot "$rootdir" /bin/rm -rf /var/lib/apt/lists/*
# shellcheck disable=SC2086
chroot "$rootdir" $CLEAN_PACKAGES
install_ipfs
install_tox
install_pelican
mesh_install_cryptpad
#mesh_install_peertube
if [ "$ENABLE_ZERONET" ]; then
install_zeronet
fi
# ssh server not available on mesh peers
if [ -f "$rootdir/etc/avahi/services/ssh.service" ]; then
rm "$rootdir/etc/avahi/services/ssh.service"
fi
MESH_SERVICE='mesh-setup.service'
MESH_SETUP_DAEMON="$rootdir/etc/systemd/system/$MESH_SERVICE"
MESH_STARTUP_PARAMS="${MY_USERNAME}"
if [[ "$AMNESIC" != 'no' ]]; then
MESH_STARTUP_PARAMS="${MY_USERNAME} amnesic"
fi
# command to switch to wired mesh
{ echo '#!/bin/bash';
echo 'echo -n "eth" > /root/.mesh_interface_type';
echo 'systemctl reboot -i'; } > "$rootdir/usr/bin/wired"
chmod +x "$rootdir/usr/bin/wired"
# command to switch to wireless mesh
{ echo '#!/bin/bash';
echo 'echo -n "wlan" > /root/.mesh_interface_type';
echo 'systemctl reboot -i'; } > "$rootdir/usr/bin/wireless"
chmod +x "$rootdir/usr/bin/wireless"
{ echo '[Unit]';
echo 'Description=Initial mesh router configuration';
echo 'After=syslog.target';
echo 'After=network.target';
echo '';
echo '[Service]';
echo 'Type=simple';
echo 'User=root';
echo 'Group=root';
echo 'WorkingDirectory=/root';
echo "ExecStart=/usr/local/bin/${PROJECT_NAME}-image-mesh ${MESH_STARTUP_PARAMS} > /var/log/mesh-setup.log";
echo '';
echo 'TimeoutSec=99999';
echo '';
echo '[Install]';
echo 'WantedBy=multi-user.target'; } > "$MESH_SETUP_DAEMON"
chmod +x "$MESH_SETUP_DAEMON"
chroot "$rootdir" systemctl enable "$MESH_SERVICE"
}
# User interface for USB drive installs ######################################
mesh_client_startup_applications() {
if [ ! -d "$rootdir/home/$MY_USERNAME/Desktop" ]; then
mkdir -p "$rootdir/home/$MY_USERNAME/Desktop"
fi
if [ ! -d "$rootdir/home/$MY_USERNAME/.config/autostart" ]; then
mkdir -p "$rootdir/home/$MY_USERNAME/.config/autostart"
chroot "$rootdir" /bin/chown -R "$MY_USERNAME":"$MY_USERNAME" "/home/$MY_USERNAME/.config"
fi
START_DESKTOP="$rootdir/home/$MY_USERNAME/mesh-desktop.sh"
FIRST_BOOT="/home/$MY_USERNAME/.first_boot"
TAHOE_COMMAND="cd /var/lib/tahoelafs && venv/bin/tahoe"
{ echo '#!/bin/bash';
echo "setxkbmap ${KEYBOARD_MAP}";
echo 'dconf write /org/mate/caja/desktop/volumes-visible false';
echo 'dconf write /org/mate/caja/desktop/computer-icon-visible false';
echo 'dconf write /org/mate/caja/desktop/home-icon-visible false';
echo 'dconf write /org/mate/caja/desktop/network-icon-visible false';
echo 'dconf write /org/mate/caja/desktop/trash-icon-visible false';
echo 'dconf write /org/mate/caja/desktop/volumes-visible false';
echo 'dconf write /org/mate/desktop/media-handling/automount-open false';
echo 'dconf write /org/mate/screensaver/lock-enabled false';
echo 'dconf write /org/mate/power-manager/lock-keyring-suspend false';
echo 'dconf write /org/mate/power-manager/lock-suspend false';
echo 'dconf write /org/mate/power-manager/lock-use-screensaver false';
echo 'dconf write /org/mate/power-manager/lock-blank-screen false';
echo 'dconf write /org/mate/power-manager/lock-hibernate false';
echo 'dconf write /org/mate/power-manager/lock-keyring-hibernate false';
echo 'dconf write /org/mate/desktop/peripherals/touchpad/scroll-method 2';
echo '#dconf write /org/mate/desktop.a11y.applications/screen-reader-enabled true';
echo '#dconf write /org/mate/interface/accessibility true';
echo '#dconf write /org/mate/applications-at-visual/startup true';
echo "touch /home/$MY_USERNAME/.dbus/Xdbus";
echo "chmod 600 /home/$MY_USERNAME/.dbus/Xdbus";
echo "env | grep DBUS_SESSION_BUS_ADDRESS > /home/$MY_USERNAME/.dbus/Xdbus";
echo "echo 'export DBUS_SESSION_BUS_ADDRESS' >> /home/$MY_USERNAME/.dbus/Xdbus";
echo '';
echo "amixer set 'Master' unmute";
echo "amixer set 'Master' 50%";
echo '';
echo '';
echo "if [ ! -f $FIRST_BOOT ]; then";
echo ' if [ -d /var/lib/tahoelafs ]; then';
echo " $TAHOE_COMMAND start";
echo ' fi';
echo ' exit 0';
echo 'fi';
echo '';
echo 'INITIAL_TOX_USERNAME=""';
echo "while [ \${#INITIAL_TOX_USERNAME} -eq 0 ]; do";
echo " data=\$(zenity --entry --title=\"$MESH_TITLE\" --text=\"$MESH_SET_USERNAME\")";
echo ' accepted=$?';
echo ' if ((accepted == 0)); then';
echo " INITIAL_TOX_USERNAME=\$(awk -F, '{print \$1}' <<<\$data)";
echo ' fi';
echo 'done';
echo '';
echo "toxid --setuser \"\$INITIAL_TOX_USERNAME\"";
echo '';
echo "if [ -f /home/$MY_USERNAME/.tahoe/tahoe.cfg ]; then";
echo " sed -i 's|nickname =.*|nickname = \$INITIAL_TOX_USERNAME|g' /home/$MY_USERNAME/.tahoe/tahoe.cfg";
echo " $TAHOE_COMMAND restart";
echo 'fi';
echo '';
echo "rm -f $FIRST_BOOT";
echo '';
echo 'exit 0'; } > "$START_DESKTOP"
chmod +x "$START_DESKTOP"
START_DESKTOP2="$rootdir/home/$MY_USERNAME/.config/autostart/mesh-start.desktop"
{ echo '[Desktop Entry]';
echo 'Type=Application';
echo 'Name=Mesh start desktop script';
echo "Exec=bash -c '~/mesh-desktop.sh'";
echo 'X-GNOME-Autostart-enabled=true'; } > "$START_DESKTOP2"
chmod +x "$START_DESKTOP2"
}
mesh_desktop_icons() {
if [ ! -d "$rootdir/home/$MY_USERNAME/Desktop" ]; then
mkdir -p "$rootdir/home/$MY_USERNAME/Desktop"
fi
# Terminal
#echo '[Desktop Entry]' > $rootdir/home/$MY_USERNAME/Desktop/terminal.desktop
#echo 'Name=MATE Terminal' >> $rootdir/home/$MY_USERNAME/Desktop/terminal.desktop
#echo 'Type=Application' >> $rootdir/home/$MY_USERNAME/Desktop/terminal.desktop
#echo 'Comment=Use the command line' >> $rootdir/home/$MY_USERNAME/Desktop/terminal.desktop
#echo 'TryExec=mate-terminal' >> $rootdir/home/$MY_USERNAME/Desktop/terminal.desktop
#echo 'Exec=mate-terminal' >> $rootdir/home/$MY_USERNAME/Desktop/terminal.desktop
#echo 'Icon=terminal' >> $rootdir/home/$MY_USERNAME/Desktop/terminal.desktop
#echo 'StartupNotify=true' >> $rootdir/home/$MY_USERNAME/Desktop/terminal.desktop
chroot "$rootdir" /bin/chown -R "$MY_USERNAME":"$MY_USERNAME" "/home/$MY_USERNAME/Desktop"
}
configure_user_interface() {
if [[ "$VARIANT" != "meshclient" && "$VARIANT" != "meshusb" && "$VARIANT" != "usb" ]]; then
return
fi
# desktop
# shellcheck disable=SC2086
chroot "$rootdir" $INSTALL_PACKAGES mate-desktop-environment
# tool to change desktop settings from command line
# shellcheck disable=SC2086
chroot "$rootdir" $INSTALL_PACKAGES dconf-cli dconf-gsettings-backend dbus dbus-x11
# for tomb
# shellcheck disable=SC2086
chroot "$rootdir" $INSTALL_PACKAGES pinentry-gtk2
# for tox video
# shellcheck disable=SC2086
chroot "$rootdir" $INSTALL_PACKAGES ffmpeg cheese v4l-utils
# to provide notifications
# shellcheck disable=SC2086
chroot "$rootdir" $INSTALL_PACKAGES libnotify-bin
# for video/audio
# shellcheck disable=SC2086
chroot "$rootdir" $INSTALL_PACKAGES libtheora-bin libvorbis-dev v4l-utils
# a sane editor
# shellcheck disable=SC2086
chroot "$rootdir" $INSTALL_PACKAGES emacs
# for wifi monitoring
# shellcheck disable=SC2086
chroot "$rootdir" $INSTALL_PACKAGES horst
# for sound level control
# shellcheck disable=SC2086
chroot "$rootdir" $INSTALL_PACKAGES alsa-utils pavucontrol
# to play various media types
# shellcheck disable=SC2086
chroot "$rootdir" $INSTALL_PACKAGES vlc
# android adb to allow phones to be connected and for example transfer photos/documents
# shellcheck disable=SC2086
chroot "$rootdir" $INSTALL_PACKAGES android-tools-adb
# USB cloning tool
# shellcheck disable=SC2086
chroot "$rootdir" $INSTALL_PACKAGES gnome-multi-writer
# clipboard
# shellcheck disable=SC2086
chroot "$rootdir" $INSTALL_PACKAGES xclip
# multimedia recording and editing
# shellcheck disable=SC2086
chroot "$rootdir" $INSTALL_PACKAGES audacity
# shellcheck disable=SC2086
chroot "$rootdir" $INSTALL_PACKAGES shotwell
# shellcheck disable=SC2086
chroot "$rootdir" $INSTALL_PACKAGES kdenlive breeze-icon-theme
# for gtk dialog entry
# shellcheck disable=SC2086
chroot "$rootdir" $INSTALL_PACKAGES zenity
# accessibility
# shellcheck disable=SC2086
#chroot "$rootdir" $INSTALL_PACKAGES_BACKPORTS gnome-orca
# shellcheck disable=SC2086
#chroot "$rootdir" $INSTALL_PACKAGES festival
# Produce a text file on the desktop listing users on the mesh
cat <<EOF > "$rootdir/usr/bin/list-tox-users"
#!/bin/bash
StrMeshUsers=\$"Mesh Peers"
StrUsername=\$'nickname'
StrToxID=\$'Tox ID'
ethernet_connected=\$(cat /sys/class/net/eth0/carrier)
users_list=\$(lstox | awk -F ' ' '{\$1=""; print \$0}' | sed -e 's/^[[:space:]]*//' | sort -d | uniq)
if [ \${#users_list} -eq 0 ]; then
no_of_users=0
else
no_of_users=\$(echo "\$users_list" | wc -l)
fi
if [ \$no_of_users -gt 0 ]; then
echo "\$users_list" > /tmp/Users.txt
chown $MY_USERNAME:$MY_USERNAME /tmp/Users.txt
if [ ! -f /home/$MY_USERNAME/showusers ]; then
echo '#!/bin/bash' > /home/$MY_USERNAME/showusers
echo 'data=\$(' >> /home/$MY_USERNAME/showusers
echo 'cat /tmp/Users.txt | \\' >> /home/$MY_USERNAME/showusers
echo " awk -F ' ' '{" >> /home/$MY_USERNAME/showusers
echo ' for(i=1;i<=NF;i++){' >> /home/$MY_USERNAME/showusers
echo ' print \$i;' >> /home/$MY_USERNAME/showusers
echo ' }' >> /home/$MY_USERNAME/showusers
echo "}' | \\\\" >> /home/$MY_USERNAME/showusers
echo ' zenity --list \\' >> /home/$MY_USERNAME/showusers
echo " --title='\$StrMeshUsers' \\\\" >> /home/$MY_USERNAME/showusers
echo " --column='\$StrUsername' --column='\$StrToxID' \\\\" >> /home/$MY_USERNAME/showusers
echo ' --print-column=2 --hide-column=2 --width=250 --height=400)' >> /home/$MY_USERNAME/showusers
echo 'if [ ! \$data ]; then' >> /home/$MY_USERNAME/showusers
echo ' exit 0' >> /home/$MY_USERNAME/showusers
echo 'fi' >> /home/$MY_USERNAME/showusers
echo 'echo "\$data" | xclip -selection clipboard' >> /home/$MY_USERNAME/showusers
chmod +x /home/$MY_USERNAME/showusers
fi
echo '[Desktop Entry]' > /home/$MY_USERNAME/Desktop/Users.desktop
if [ \$no_of_users -lt 2 ]; then
echo "Name=\$no_of_users Peer" >> /home/$MY_USERNAME/Desktop/Users.desktop
else
echo "Name=\$no_of_users Peers" >> /home/$MY_USERNAME/Desktop/Users.desktop
fi
echo 'Type=Application' >> /home/$MY_USERNAME/Desktop/Users.desktop
echo 'Comment=List of users' >> /home/$MY_USERNAME/Desktop/Users.desktop
echo 'Comment[el]= ' >> /home/$MY_USERNAME/Desktop/Users.desktop
echo 'Comment[ar]= ' >> /home/$MY_USERNAME/Desktop/Users.desktop
echo "Comment[ca]=Llista d'usuaris" >> /home/$MY_USERNAME/Desktop/Users.desktop
echo 'Comment[hi]= ' >> /home/$MY_USERNAME/Desktop/Users.desktop
echo 'Comment[fr]=Liste des utilisateurs' >> /home/$MY_USERNAME/Desktop/Users.desktop
echo 'Comment[de]=Liste der Benutzer' >> /home/$MY_USERNAME/Desktop/Users.desktop
echo 'Comment[es]=Lista de usuarios' >> /home/$MY_USERNAME/Desktop/Users.desktop
echo 'Comment[it]=Elenco degli utenti' >> /home/$MY_USERNAME/Desktop/Users.desktop
echo 'Comment[ru]= ' >> /home/$MY_USERNAME/Desktop/Users.desktop
echo 'Comment[zh]=' >> /home/$MY_USERNAME/Desktop/Users.desktop
echo 'Exec=bash /home/$MY_USERNAME/showusers' >> /home/$MY_USERNAME/Desktop/Users.desktop
echo 'Icon=/usr/share/$PROJECT_NAME/avatars/icon_users.png' >> /home/$MY_USERNAME/Desktop/Users.desktop
echo 'StartupNotify=false' >> /home/$MY_USERNAME/Desktop/Users.desktop
chmod +x /home/$MY_USERNAME/Desktop/Users.desktop
chown $MY_USERNAME:$MY_USERNAME /home/$MY_USERNAME/Desktop/Users.desktop
if [ ! -f /home/$MY_USERNAME/.cryptpad.desktop ]; then
# Make a script to start cryptpad, which also shows
# an initial warning about slow loading
echo '#!/bin/bash' > /home/$MY_USERNAME/.cryptpad_start
echo 'if [ -f /home/$MY_USERNAME/.cryptpad_first_load ]; then' >> /home/$MY_USERNAME/.cryptpad_start
echo ' zenity --info --text="The first time you run this it may take a few minutes to load, during which it will only show a completely blank web page. After that it should be reasonably quick. If the browser asks, choose the wait option. You may want to go drink your favorite heated beverage." --title="CryptPad" --width 600' >> /home/$MY_USERNAME/.cryptpad_start
echo ' rm /home/$MY_USERNAME/.cryptpad_first_load' >> /home/$MY_USERNAME/.cryptpad_start
echo 'fi' >> /home/$MY_USERNAME/.cryptpad_start
echo "$BROWSER $BROWSER_OPTIONS http://\${HOSTNAME}.local" >> /home/$MY_USERNAME/.cryptpad_start
chmod +x /home/$MY_USERNAME/.cryptpad_start
if [ ! -f /home/$MY_USERNAME/Desktop/cryptpad.desktop ]; then
echo '[Desktop Entry]' > /home/$MY_USERNAME/Desktop/cryptpad.desktop
echo 'Name=CryptPad' >> /home/$MY_USERNAME/Desktop/cryptpad.desktop
echo 'Type=Application' >> /home/$MY_USERNAME/Desktop/cryptpad.desktop
echo 'Comment=Realtime collaborative editing of documents' >> /home/$MY_USERNAME/Desktop/cryptpad.desktop
echo 'Comment[el]= ' >> /home/$MY_USERNAME/Desktop/cryptpad.desktop
echo 'Comment[ar]= ' >> /home/$MY_USERNAME/Desktop/cryptpad.desktop
echo 'Comment[ca]=Edici collaborativa en temps real de documents' >> /home/$MY_USERNAME/Desktop/cryptpad.desktop
echo 'Comment[hi]= ' >> /home/$MY_USERNAME/Desktop/cryptpad.desktop
echo 'Comment[fr]=Edition collaborative en temps rel de documents' >> /home/$MY_USERNAME/Desktop/cryptpad.desktop
echo 'Comment[de]=Kollaboratives Echtzeit-Editing von Dokumenten' >> /home/$MY_USERNAME/Desktop/cryptpad.desktop
echo 'Comment[es]=Edicin colaborativa en tiempo real de documentos' >> /home/$MY_USERNAME/Desktop/cryptpad.desktop
echo 'Comment[it]=Editing collaborativo di documenti in tempo reale' >> /home/$MY_USERNAME/Desktop/cryptpad.desktop
echo 'Comment[ru]= ' >> /home/$MY_USERNAME/Desktop/cryptpad.desktop
echo 'Comment[zh]=' >> /home/$MY_USERNAME/Desktop/cryptpad.desktop
echo "Exec=/home/$MY_USERNAME/.cryptpad_start" >> /home/$MY_USERNAME/Desktop/cryptpad.desktop
echo "Icon=/usr/share/$PROJECT_NAME/avatars/icon_cryptpad.png" >> /home/$MY_USERNAME/Desktop/cryptpad.desktop
echo 'Terminal=false' >> /home/$MY_USERNAME/Desktop/cryptpad.desktop
echo 'Categories=Application;' >> /home/$MY_USERNAME/Desktop/cryptpad.desktop
chmod +x /home/$MY_USERNAME/Desktop/cryptpad.desktop
chown $MY_USERNAME:$MY_USERNAME /home/$MY_USERNAME/Desktop/cryptpad.desktop
else
if ! grep -q "\${HOSTNAME}.local" /home/$MY_USERNAME/.cryptpad_start; then
sed -i "s|$BROWSER .*|Exec=$BROWSER $BROWSER_OPTIONS http://\${HOSTNAME}.local|g" /home/$MY_USERNAME/.cryptpad_start
fi
fi
fi
if [ -d /etc/peertube ]; then
if [ ! -f /home/$MY_USERNAME/.peertube.desktop ]; then
if [ ! -f /home/$MY_USERNAME/Desktop/peertube.desktop ]; then
echo '[Desktop Entry]' > /home/$MY_USERNAME/Desktop/peertube.desktop
echo 'Name=PeerTube' >> /home/$MY_USERNAME/Desktop/peertube.desktop
echo 'Type=Application' >> /home/$MY_USERNAME/Desktop/peertube.desktop
echo 'Comment=Upload and view videos on the mesh' >> /home/$MY_USERNAME/Desktop/peertube.desktop
echo 'Comment[el]=' >> /home/$MY_USERNAME/Desktop/peertube.desktop
echo 'Comment[ar]=' >> /home/$MY_USERNAME/Desktop/peertube.desktop
echo 'Comment[ca]=' >> /home/$MY_USERNAME/Desktop/peertube.desktop
echo 'Comment[hi]=' >> /home/$MY_USERNAME/Desktop/peertube.desktop
echo 'Comment[fr]=' >> /home/$MY_USERNAME/Desktop/peertube.desktop
echo 'Comment[de]=' >> /home/$MY_USERNAME/Desktop/peertube.desktop
echo 'Comment[es]=' >> /home/$MY_USERNAME/Desktop/peertube.desktop
echo 'Comment[it]=' >> /home/$MY_USERNAME/Desktop/peertube.desktop
echo 'Comment[ru]=' >> /home/$MY_USERNAME/Desktop/peertube.desktop
echo 'Comment[zh]=' >> /home/$MY_USERNAME/Desktop/peertube.desktop
echo "Exec=$BROWSER $BROWSER_OPTIONS http://\${HOSTNAME}.local:$MESH_PEERTUBE_PORT" >> /home/$MY_USERNAME/Desktop/peertube.desktop
echo "Icon=/usr/share/$PROJECT_NAME/avatars/icon_peertube.png" >> /home/$MY_USERNAME/Desktop/peertube.desktop
echo 'Terminal=false' >> /home/$MY_USERNAME/Desktop/peertube.desktop
echo 'Categories=Application;' >> /home/$MY_USERNAME/Desktop/peertube.desktop
chmod +x /home/$MY_USERNAME/Desktop/peertube.desktop
chown $MY_USERNAME:$MY_USERNAME /home/$MY_USERNAME/Desktop/peertube.desktop
else
if ! grep -q "\${HOSTNAME}.local" /home/$MY_USERNAME/Desktop/peertube.desktop; then
sed -i "s|Exec=.*|Exec=$BROWSER $BROWSER_OPTIONS http://\${HOSTNAME}.local:$MESH_PEERTUBE_PORT|g" /home/$MY_USERNAME/Desktop/peertube.desktop
fi
fi
fi
fi
if [ ! -f /home/$MY_USERNAME/Desktop/vpn.desktop ]; then
echo '[Desktop Entry]' > /home/$MY_USERNAME/Desktop/vpn.desktop
echo 'Type=Application' >> /home/$MY_USERNAME/Desktop/vpn.desktop
echo 'Name=Connect Meshes' >> /home/$MY_USERNAME/Desktop/vpn.desktop
echo 'Name[el]= ' >> /home/$MY_USERNAME/Desktop/vpn.desktop
echo 'Name[ar]= ' >> /home/$MY_USERNAME/Desktop/vpn.desktop
echo 'Name[ca]=Connecteu malles' >> /home/$MY_USERNAME/Desktop/vpn.desktop
echo 'Name[hi]= ' >> /home/$MY_USERNAME/Desktop/vpn.desktop
echo 'Name[fr]=Connecter les maillages' >> /home/$MY_USERNAME/Desktop/vpn.desktop
echo 'Name[de]=Netze verbinden' >> /home/$MY_USERNAME/Desktop/vpn.desktop
echo 'Name[es]=Conectar Mallas' >> /home/$MY_USERNAME/Desktop/vpn.desktop
echo 'Name[it]=Collegare le maglie' >> /home/$MY_USERNAME/Desktop/vpn.desktop
echo 'Name[ru]= ' >> /home/$MY_USERNAME/Desktop/vpn.desktop
echo 'Name[zh]=' >> /home/$MY_USERNAME/Desktop/vpn.desktop
echo 'Comment=Connect to another mesh network via the internet' >> /home/$MY_USERNAME/Desktop/vpn.desktop
echo 'Comment[el]= ' >> /home/$MY_USERNAME/Desktop/vpn.desktop
echo 'Comment[ar]= ' >> /home/$MY_USERNAME/Desktop/vpn.desktop
echo "Comment[ca]=Connecteu-vos a una altra xarxa de malla a travs d'Internet" >> /home/$MY_USERNAME/Desktop/vpn.desktop
echo 'Comment[hi]= ' >> /home/$MY_USERNAME/Desktop/vpn.desktop
echo 'Comment[fr]=Connectez-vous un autre rseau maill via Internet' >> /home/$MY_USERNAME/Desktop/vpn.desktop
echo 'Comment[de]=Verbindung mit einem anderen Mesh-Netzwerk ber das Internet' >> /home/$MY_USERNAME/Desktop/vpn.desktop
echo 'Comment[es]=Conctese a otra red en malla a travs de Internet' >> /home/$MY_USERNAME/Desktop/vpn.desktop
echo "Comment[it]=Collegarsi ad un'altra rete di maglie via internet" >> /home/$MY_USERNAME/Desktop/vpn.desktop
echo 'Comment[ru]= ' >> /home/$MY_USERNAME/Desktop/vpn.desktop
echo 'Comment[zh]=' >> /home/$MY_USERNAME/Desktop/vpn.desktop
echo 'Exec=/usr/local/bin/${PROJECT_NAME}-mesh-connect' >> /home/$MY_USERNAME/Desktop/vpn.desktop
echo 'Icon=/usr/share/$PROJECT_NAME/avatars/icon_connect.png' >> /home/$MY_USERNAME/Desktop/vpn.desktop
echo 'StartupNotify=false' >> /home/$MY_USERNAME/Desktop/vpn.desktop
chmod +x /home/$MY_USERNAME/Desktop/vpn.desktop
chown $MY_USERNAME:$MY_USERNAME /home/$MY_USERNAME/Desktop/vpn.desktop
fi
if [ ! -f /home/$MY_USERNAME/Desktop/routing.desktop ]; then
echo '[Desktop Entry]' > /home/$MY_USERNAME/Desktop/routing.desktop
echo 'Type=Application' >> /home/$MY_USERNAME/Desktop/routing.desktop
echo 'Name=Routing Protocol' >> /home/$MY_USERNAME/Desktop/routing.desktop
echo 'Name[el]= ' >> /home/$MY_USERNAME/Desktop/routing.desktop
echo 'Name[ar]= ' >> /home/$MY_USERNAME/Desktop/routing.desktop
echo "Name[ca]=Protocol d'enrutament" >> /home/$MY_USERNAME/Desktop/routing.desktop
echo 'Name[hi]= ' >> /home/$MY_USERNAME/Desktop/routing.desktop
echo 'Name[fr]=Protocole de routage' >> /home/$MY_USERNAME/Desktop/routing.desktop
echo 'Name[de]=Routingprotokoll' >> /home/$MY_USERNAME/Desktop/routing.desktop
echo 'Name[es]=Protocolo de enrutamiento' >> /home/$MY_USERNAME/Desktop/routing.desktop
echo 'Name[it]=Protocollo di routing' >> /home/$MY_USERNAME/Desktop/routing.desktop
echo 'Name[ru]= ' >> /home/$MY_USERNAME/Desktop/routing.desktop
echo 'Name[zh]=' >> /home/$MY_USERNAME/Desktop/routing.desktop
echo 'Comment=Select the mesh routing protocol' >> /home/$MY_USERNAME/Desktop/routing.desktop
echo 'Comment[el]= ' >> /home/$MY_USERNAME/Desktop/routing.desktop
echo 'Comment[ar]= ' >> /home/$MY_USERNAME/Desktop/routing.desktop
echo "Comment[ca]=Seleccioneu el protocol d'enrutament de malles" >> /home/$MY_USERNAME/Desktop/routing.desktop
echo 'Comment[hi]= ' >> /home/$MY_USERNAME/Desktop/routing.desktop
echo 'Comment[fr]=Slectionnez le protocole de routage de maillage' >> /home/$MY_USERNAME/Desktop/routing.desktop
echo 'Comment[de]=Whlen Sie das Mesh-Routing-Protokoll' >> /home/$MY_USERNAME/Desktop/routing.desktop
echo 'Comment[es]=Seleccione el protocolo de enrutamiento de malla' >> /home/$MY_USERNAME/Desktop/routing.desktop
echo "Comment[it]=Seleziona il protocollo di instradamento della mesh" >> /home/$MY_USERNAME/Desktop/routing.desktop
echo 'Comment[ru]= ' >> /home/$MY_USERNAME/Desktop/routing.desktop
echo 'Comment[zh]=' >> /home/$MY_USERNAME/Desktop/routing.desktop
echo "Exec=mate-terminal -e \"/usr/local/bin/${PROJECT_NAME}-mesh-routing\"" >> /home/$MY_USERNAME/Desktop/routing.desktop
echo 'Icon=/usr/share/$PROJECT_NAME/avatars/icon_routing.png' >> /home/$MY_USERNAME/Desktop/routing.desktop
echo 'Terminal=false' >> /home/$MY_USERNAME/Desktop/routing.desktop
echo 'Categories=Application' >> /home/$MY_USERNAME/Desktop/routing.desktop
chmod +x /home/$MY_USERNAME/Desktop/routing.desktop
chown $MY_USERNAME:$MY_USERNAME /home/$MY_USERNAME/Desktop/routing.desktop
fi
if [ -f /tmp/.ipfs-users ]; then
echo '[Desktop Entry]' > /home/$MY_USERNAME/Desktop/sites.desktop
echo 'Type=Application' >> /home/$MY_USERNAME/Desktop/sites.desktop
echo "Name=Visit a site" >> /home/$MY_USERNAME/Desktop/sites.desktop
echo "Name[el]= " >> /home/$MY_USERNAME/Desktop/sites.desktop
echo "Name[ar]= " >> /home/$MY_USERNAME/Desktop/sites.desktop
echo "Name[ca]=Visiteu un lloc" >> /home/$MY_USERNAME/Desktop/sites.desktop
echo "Name[hi]= " >> /home/$MY_USERNAME/Desktop/sites.desktop
echo "Name[fr]=Visitez un site" >> /home/$MY_USERNAME/Desktop/sites.desktop
echo "Name[de]=Besuchen Sie eine Website" >> /home/$MY_USERNAME/Desktop/sites.desktop
echo "Name[es]=Visita un sitio" >> /home/$MY_USERNAME/Desktop/sites.desktop
echo "Name[it]=Visita un sito" >> /home/$MY_USERNAME/Desktop/sites.desktop
echo "Name[ru]= " >> /home/$MY_USERNAME/Desktop/sites.desktop
echo "Name[zh]=" >> /home/$MY_USERNAME/Desktop/sites.desktop
echo 'Comment=Visit a site' >> /home/$MY_USERNAME/Desktop/sites.desktop
echo "Comment[el]= " >> /home/$MY_USERNAME/Desktop/sites.desktop
echo "Comment[ar]= " >> /home/$MY_USERNAME/Desktop/sites.desktop
echo "Commant[ca]=Visiteu un lloc" >> /home/$MY_USERNAME/Desktop/sites.desktop
echo "Comment[hi]= " >> /home/$MY_USERNAME/Desktop/sites.desktop
echo "Comment[fr]=Visitez un site" >> /home/$MY_USERNAME/Desktop/sites.desktop
echo "Comment[de]=Besuchen Sie eine Website" >> /home/$MY_USERNAME/Desktop/sites.desktop
echo "Comment[es]=Visita un sitio" >> /home/$MY_USERNAME/Desktop/sites.desktop
echo "Comment[it]=Visita un sito" >> /home/$MY_USERNAME/Desktop/sites.desktop
echo "Comment[ru]= " >> /home/$MY_USERNAME/Desktop/sites.desktop
echo "Comment[zh]=" >> /home/$MY_USERNAME/Desktop/sites.desktop
echo 'Exec=/usr/local/bin/${PROJECT_NAME}-mesh-visit-site' >> /home/$MY_USERNAME/Desktop/sites.desktop
echo 'Icon=/usr/share/$PROJECT_NAME/avatars/icon_sites.png' >> /home/$MY_USERNAME/Desktop/sites.desktop
echo 'StartupNotify=false' >> /home/$MY_USERNAME/Desktop/sites.desktop
chmod +x /home/$MY_USERNAME/Desktop/sites.desktop
chown $MY_USERNAME:$MY_USERNAME /home/$MY_USERNAME/Desktop/sites.desktop
echo '[Desktop Entry]' > /home/$MY_USERNAME/Desktop/blog.desktop
echo 'Type=Application' >> /home/$MY_USERNAME/Desktop/blog.desktop
echo "Name=Blog" >> /home/$MY_USERNAME/Desktop/blog.desktop
echo "Name[el]=Blog" >> /home/$MY_USERNAME/Desktop/blog.desktop
echo "Name[ar]=" >> /home/$MY_USERNAME/Desktop/blog.desktop
echo "Name[ca]=Blog" >> /home/$MY_USERNAME/Desktop/blog.desktop
echo "Name[hi]=" >> /home/$MY_USERNAME/Desktop/blog.desktop
echo "Name[fr]=Blog" >> /home/$MY_USERNAME/Desktop/blog.desktop
echo "Name[de]=Blog" >> /home/$MY_USERNAME/Desktop/blog.desktop
echo "Name[es]=Blog" >> /home/$MY_USERNAME/Desktop/blog.desktop
echo "Name[it]=Blog" >> /home/$MY_USERNAME/Desktop/blog.desktop
echo "Name[ru]=" >> /home/$MY_USERNAME/Desktop/blog.desktop
echo "Name[zh]=" >> /home/$MY_USERNAME/Desktop/blog.desktop
echo 'Comment=View or create blog entries' >> /home/$MY_USERNAME/Desktop/blog.desktop
echo 'Comment[el]= ' >> /home/$MY_USERNAME/Desktop/blog.desktop
echo 'Comment[ar]= ' >> /home/$MY_USERNAME/Desktop/blog.desktop
echo 'Comment[ca]=Permet visualitzar o crear entrades de bloc' >> /home/$MY_USERNAME/Desktop/blog.desktop
echo 'Comment[hi]= ' >> /home/$MY_USERNAME/Desktop/blog.desktop
echo 'Comment[fr]=Afficher ou crer des entres de blog' >> /home/$MY_USERNAME/Desktop/blog.desktop
echo 'Comment[de]=Blog-Eintrge anzeigen oder erstellen' >> /home/$MY_USERNAME/Desktop/blog.desktop
echo 'Comment[es]=Ver o crear entradas de blog' >> /home/$MY_USERNAME/Desktop/blog.desktop
echo 'Comment[it]=Visualizza o crea voci di blog' >> /home/$MY_USERNAME/Desktop/blog.desktop
echo 'Comment[ru]= ' >> /home/$MY_USERNAME/Desktop/blog.desktop
echo 'Comment[zh]=' >> /home/$MY_USERNAME/Desktop/blog.desktop
echo 'Exec=/usr/local/bin/${PROJECT_NAME}-mesh-blog' >> /home/$MY_USERNAME/Desktop/blog.desktop
echo 'Icon=/usr/share/$PROJECT_NAME/avatars/icon_blog.png' >> /home/$MY_USERNAME/Desktop/blog.desktop
echo 'StartupNotify=false' >> /home/$MY_USERNAME/Desktop/blog.desktop
chmod +x /home/$MY_USERNAME/Desktop/blog.desktop
chown $MY_USERNAME:$MY_USERNAME /home/$MY_USERNAME/Desktop/blog.desktop
fi
if [ ! -f /home/$MY_USERNAME/runtox ]; then
echo 'qtox_running=\$(ps aux | grep qtox | grep data)' > /home/$MY_USERNAME/runtox
echo 'if [ \${#qtox_running} -eq 0 ]; then' >> /home/$MY_USERNAME/runtox
echo ' bash -c "qtox -p data"' >> /home/$MY_USERNAME/runtox
echo 'fi' >> /home/$MY_USERNAME/runtox
echo 'exit 0' >> /home/$MY_USERNAME/runtox
chmod +x /home/$MY_USERNAME/runtox
chown $MY_USERNAME:$MY_USERNAME /home/$MY_USERNAME/runtox
fi
if [ ! -f /home/$MY_USERNAME/Desktop/tox.desktop ]; then
echo '[Desktop Entry]' > /home/$MY_USERNAME/Desktop/tox.desktop
echo 'Name=Chat' >> /home/$MY_USERNAME/Desktop/tox.desktop
echo 'Name[el]=' >> /home/$MY_USERNAME/Desktop/tox.desktop
echo 'Name[ar]=' >> /home/$MY_USERNAME/Desktop/tox.desktop
echo 'Name[ca]=Xat' >> /home/$MY_USERNAME/Desktop/tox.desktop
echo 'Name[hi]=' >> /home/$MY_USERNAME/Desktop/tox.desktop
echo 'Name[fr]=Bavarder' >> /home/$MY_USERNAME/Desktop/tox.desktop
echo 'Name[de]=Chat' >> /home/$MY_USERNAME/Desktop/tox.desktop
echo 'Name[es]=Charla' >> /home/$MY_USERNAME/Desktop/tox.desktop
echo 'Name[it]=Chiacchierare' >> /home/$MY_USERNAME/Desktop/tox.desktop
echo 'Name[ru]=' >> /home/$MY_USERNAME/Desktop/tox.desktop
echo 'Name[zh]=' >> /home/$MY_USERNAME/Desktop/tox.desktop
echo 'Type=Application' >> /home/$MY_USERNAME/Desktop/tox.desktop
echo 'Comment=Chat, Voice and Video' >> /home/$MY_USERNAME/Desktop/tox.desktop
echo 'Comment[el]=, ' >> /home/$MY_USERNAME/Desktop/tox.desktop
echo 'Comment[ar]= ' >> /home/$MY_USERNAME/Desktop/tox.desktop
echo 'Comment[ca]=Xat, veu i vdeo' >> /home/$MY_USERNAME/Desktop/tox.desktop
echo 'Comment[hi]=, ' >> /home/$MY_USERNAME/Desktop/tox.desktop
echo 'Comment[fr]=Chat, voix et vido' >> /home/$MY_USERNAME/Desktop/tox.desktop
echo 'Comment[de]=Chat, Sprache und Video' >> /home/$MY_USERNAME/Desktop/tox.desktop
echo 'Comment[es]=Chat, voz y video' >> /home/$MY_USERNAME/Desktop/tox.desktop
echo 'Comment[it]=Chat, voce e video' >> /home/$MY_USERNAME/Desktop/tox.desktop
echo 'Comment[ru]=, ' >> /home/$MY_USERNAME/Desktop/tox.desktop
echo 'Comment[zh]=' >> /home/$MY_USERNAME/Desktop/tox.desktop
echo 'Exec=bash /home/$MY_USERNAME/runtox' >> /home/$MY_USERNAME/Desktop/tox.desktop
echo "Icon=/usr/share/$PROJECT_NAME/avatars/icon_chat.png" >> /home/$MY_USERNAME/Desktop/tox.desktop
echo 'StartupNotify=true' >> /home/$MY_USERNAME/Desktop/tox.desktop
chmod +x /home/$MY_USERNAME/Desktop/tox.desktop
chown $MY_USERNAME:$MY_USERNAME /home/$MY_USERNAME/Desktop/tox.desktop
fi
else
if [ -f /tmp/Users.txt ]; then
rm /tmp/Users.txt
rm /home/$MY_USERNAME/Desktop/Users.desktop
if [ -f /home/$MY_USERNAME/Desktop/Users.desktop ]; then
rm /home/$MY_USERNAME/Desktop/Users.desktop
fi
if [ -f /home/$MY_USERNAME/Desktop/sites.desktop ]; then
rm /home/$MY_USERNAME/Desktop/sites.desktop
fi
if [ -f /home/$MY_USERNAME/Desktop/blog.desktop ]; then
rm /home/$MY_USERNAME/Desktop/blog.desktop
fi
if [ -f /home/$MY_USERNAME/Desktop/tox.desktop ]; then
rm /home/$MY_USERNAME/Desktop/tox.desktop
fi
pkill qtox
fi
# If there is no ethernet then remove the invite icon
if [[ "\$ethernet_connected" == "0" ]]; then
if [ -f /home/$MY_USERNAME/Desktop/invite.desktop ]; then
rm /home/$MY_USERNAME/Desktop/invite.desktop
fi
fi
fi
EOF
chroot "$rootdir" /bin/chown "$MY_USERNAME":"$MY_USERNAME" /usr/bin/list-tox-users
chroot "$rootdir" /bin/chmod +x /usr/bin/list-tox-users
echo "* * * * * $MY_USERNAME bash -c /usr/bin/list-tox-users > /dev/null" >> "$rootdir/etc/crontab"
if [[ "$VARIANT" != "usb" ]]; then
# log in automatically
# shellcheck disable=SC2086
chroot "$rootdir" $INSTALL_PACKAGES nodm xinit
echo 'NODM_ENABLED=true' > /etc/default/nodm
echo "NODM_USER=$MY_USERNAME" >> /etc/default/nodm
chroot "$rootdir" mkdir /etc/systemd/system/getty@tty1.service.d
{ echo '[Service]';
echo 'ExecStart=';
echo "ExecStart=-/sbin/agetty --autologin fbone --noclear %I \$TERM"; } > "$rootdir/etc/systemd/system/getty@tty1.service.d/override.conf"
echo "[[ -z \$DISPLAY && \$XDG_VTNR -eq 1 ]] && exec startx" >> "$rootdir/home/$MY_USERNAME/.profile"
chroot "$rootdir" systemctl set-default multi-user.target
mesh_client_startup_applications
mesh_desktop_icons
# Different desktop background for amnesic
if [[ "$AMNESIC" != 'no' ]]; then
MESH_DESKTOP_BACKGROUND_IMAGE="/usr/local/share/${PROJECT_NAME}_mesh_amnesic_background.png"
fi
# change the desktop background
if [ "$MESH_DESKTOP_BACKGROUND_IMAGE" ]; then
if [ -f "$MESH_DESKTOP_BACKGROUND_IMAGE" ]; then
if [ -d "$rootdir/usr/share/images/desktop-base" ]; then
cp "$MESH_DESKTOP_BACKGROUND_IMAGE" "$rootdir/usr/share/images/desktop-base/${PROJECT_NAME}_mesh_background.png"
chroot "$rootdir" /bin/rm /usr/share/images/desktop-base/desktop-background
chroot "$rootdir" ln -s "/usr/share/images/desktop-base/${PROJECT_NAME}_mesh_background.png" /usr/share/images/desktop-base/desktop-background
fi
fi
fi
else
# shellcheck disable=SC2086
chroot "$rootdir" $INSTALL_PACKAGES lightdm
fi
# browser
# shellcheck disable=SC2086
chroot "$rootdir" $INSTALL_PACKAGES firefox-esr
# help
mkdir -p "$rootdir/home/${MY_USERNAME}/help/images"
cd "$rootdir/root/${PROJECT_NAME}/website" || exit 23
${PROJECT_NAME}-deploy-website "$rootdir/home/${MY_USERNAME}/help"
chroot "$rootdir" /bin/chown -R "${MY_USERNAME}":"${MY_USERNAME}" "/home/${MY_USERNAME}/help"
# Tox user interface
#enable_tox_repo
mesh_tox_qtox
# copy the default qtox ini file
if [ ! -d "${rootdir}/home/${MY_USERNAME}/.config/tox" ]; then
mkdir "${rootdir}/home/${MY_USERNAME}/.config/tox"
cp "/usr/local/bin/${PROJECT_NAME}-config-qtox" "${rootdir}/home/${MY_USERNAME}/.config/tox/qtox.ini"
chroot "$rootdir" /bin/chown -R "${MY_USERNAME}":"${MY_USERNAME}" "/home/${MY_USERNAME}/.config"
fi
if [[ "$VARIANT" == "usb" ]]; then
# tor
# shellcheck disable=SC2086
chroot "$rootdir" $INSTALL_PACKAGES_BACKPORTS tor
# xmpp client
chroot "$rootdir" echo "deb ftp://ftp.gajim.org/debian unstable main" > /etc/apt/sources.list.d/gajim.list
# shellcheck disable=SC2086
chroot "$rootdir" $UPDATE_PACKAGES
# shellcheck disable=SC2086
chroot "$rootdir" $INSTALL_PACKAGES gajim-dev-keyring
# shellcheck disable=SC2086
chroot "$rootdir" $INSTALL_PACKAGES git python-dev python-pip gajim-nightly
chroot "$rootdir" mkdir "/home/$GENERIC_IMAGE_USERNAME/.local/share/gajim/plugins" -p
chroot "$rootdir" git clone https://github.com/omemo/gajim-omemo "/home/$GENERIC_IMAGE_USERNAME/.local/share/gajim/plugins/gajim-omemo"
chroot "$rootdir" pip install protobuf==2.6.1, python-axolotl==0.1.35
chroot "$rootdir" /bin/chown -R "$GENERIC_IMAGE_USERNAME":"$GENERIC_IMAGE_USERNAME" "/home/$GENERIC_IMAGE_USERNAME/.local"
# IRC client
# shellcheck disable=SC2086
chroot "$rootdir" $INSTALL_PACKAGES hexchat profanity
fi
}
##############################################################################
# setup_utils
##############################################################################
image_install_inadyn() {
if [ "$INSTALLING_MESH" ]; then
return
fi
if [ ! -d "$rootdir/root/build" ]; then
mkdir -p "$rootdir/root/build"
fi
# shellcheck disable=SC2086
chroot "$rootdir" $INSTALL_PACKAGES build-essential curl libgnutls28-dev automake1.11 libconfuse-dev
# shellcheck disable=SC2086
chroot "$rootdir" $INSTALL_PACKAGES gnutls-dev libconfuse-dev pkg-config libtool
if [ -d /repos/inadyn ]; then
mkdir -p "$rootdir/root/build/inadyn"
cp -r -p /repos/inadyn/. "$rootdir/root/build/inadyn"
cd "$rootdir/root/build/inadyn" || exit 24
git pull
else
git clone "$INADYN_REPO" "$rootdir/root/build/inadyn"
fi
if [ ! -d "$rootdir/root/build/inadyn" ]; then
echo 'Failed to clone inadyn'
exit 72
fi
cd "$rootdir/root/build/inadyn" || exit 34
git checkout "$INADYN_COMMIT" -b "$INADYN_COMMIT"
cd "$rootdir/root/build/inadyn" || exit 24
{ echo '#!/bin/bash';
echo 'cd ~/build/inadyn';
echo '';
echo 'DATE_FMT=%Y-%m-%d';
echo 'SOURCE_DATE_EPOCH=2018-12-07';
echo "BUILD_DATE=\$(date -u -d \"\${SOURCE_DATE_EPOCH}\" \"+\${DATE_FMT}\" 2>/dev/null || date -u -r \"\${SOURCE_DATE_EPOCH}\" \"+\${DATE_FMT}\" 2>/dev/null || date -u \"+\${DATE_FMT}\")";
echo '';
echo './autogen.sh';
echo './configure --prefix=/usr --sysconfdir=/etc --localstatedir=/var';
echo 'make -j5';
echo 'make install-strip'; } > "$rootdir/root/build/build_inadyn.sh"
chmod +x "$rootdir/root/build/build_inadyn.sh"
chroot "$rootdir" /root/build/build_inadyn.sh
if [ ! -f "$rootdir/usr/sbin/inadyn" ]; then
echo 'Failed to build inadyn'
exit 62
fi
# create a configuration file
{ echo 'period = 300';
echo ''; } > "$rootdir/etc/inadyn.conf"
chmod 600 "$rootdir/etc/inadyn.conf"
{ echo '[Unit]';
echo 'Description=Internet Dynamic DNS Client';
echo 'Documentation=man:inadyn';
echo 'Documentation=man:inadyn.conf';
echo 'Documentation=https://github.com/troglobit/inadyn';
echo 'ConditionPathExists=/etc/inadyn.conf';
echo 'After=network-online.target';
echo 'Requires=network-online.target';
echo '';
echo '[Service]';
echo 'Type=simple';
echo "ExecStart=/usr/sbin/inadyn -C -n -s --loglevel=err --config ${INADYN_CONFIG_FILE}";
echo 'Restart=on-failure';
echo 'RestartSec=10';
echo '';
echo '[Install]';
echo 'WantedBy=multi-user.target'; } > "$rootdir/etc/systemd/system/inadyn.service"
chroot "$rootdir" systemctl enable inadyn
echo "inadyn commit:$INADYN_COMMIT" >> "$rootdir/root/${PROJECT_NAME}-completed.txt"
}
image_setup_utils() {
if [ "$INSTALLING_MESH" ]; then
return
fi
# shellcheck disable=SC2086
chroot "$rootdir" $INSTALL_PACKAGES apt-transport-https
# shellcheck disable=SC2086
chroot "$rootdir" $REMOVE_PACKAGES_PURGE apache2-bin*
# shellcheck disable=SC2086
chroot "$rootdir" $UPGRADE_PACKAGES
# shellcheck disable=SC2086
chroot "$rootdir" $INSTALL_PACKAGES ca-certificates
# shellcheck disable=SC2086
chroot "$rootdir" $INSTALL_PACKAGES apt-utils
# shellcheck disable=SC2086
chroot "$rootdir" $INSTALL_PACKAGES shellcheck hdparm
# shellcheck disable=SC2086
chroot "$rootdir" $INSTALL_PACKAGES diceware
if [[ "$ARCHITECTURE" == 'amd64' ]]; then
# shellcheck disable=SC2086
chroot "$rootdir" $INSTALL_PACKAGES linux-image-amd64
fi
if [[ "$ARCHITECTURE" == 'qemu'* || "$ARCHITECTURE" == 'amd64' || "$ARCHITECTURE" == 'x86_64' || "$ARCHITECTURE" == 'i686' || "$ARCHITECTURE" == 'i386' ]]; then
# shellcheck disable=SC2086
chroot "$rootdir" $INSTALL_PACKAGES grub2 lvm2
fi
# shellcheck disable=SC2086
chroot "$rootdir" $INSTALL_PACKAGES locales locales-all debconf
SYSCTL_FILE="$rootdir/etc/sysctl.conf"
if [ ! -f "$SYSCTL_FILE" ]; then
touch "$SYSCTL_FILE"
fi
cp "$SYSCTL_FILE" "$rootdir/root/sysctl.conf"
chown "$CURR_USER":"$CURR_GROUP" "$rootdir/root/sysctl.conf"
if ! grep -q "tcp_challenge_ack_limit" "$rootdir/root/sysctl.conf"; then
echo 'net.ipv4.tcp_challenge_ack_limit = 999999999' >> "$rootdir/root/sysctl.conf"
else
sed -i 's|net.ipv4.tcp_challenge_ack_limit.*|net.ipv4.tcp_challenge_ack_limit = 999999999|g' "$rootdir/root/sysctl.conf"
fi
cp "$rootdir/root/sysctl.conf" "$SYSCTL_FILE"
rm "$rootdir/root/sysctl.conf"
# all the packages
# shellcheck disable=SC2086
chroot "$rootdir" $INSTALL_PACKAGES cryptsetup libgfshare-bin duplicity sshpass wget
# shellcheck disable=SC2086
chroot "$rootdir" $INSTALL_PACKAGES avahi-daemon avahi-utils avahi-discover
# shellcheck disable=SC2086
chroot "$rootdir" $INSTALL_PACKAGES connect-proxy openssh-server
# shellcheck disable=SC2086
chroot "$rootdir" $INSTALL_PACKAGES sudo git dialog build-essential avahi-daemon avahi-utils
# shellcheck disable=SC2086
chroot "$rootdir" $INSTALL_PACKAGES avahi-discover iptables dnsutils net-tools
# shellcheck disable=SC2086
chroot "$rootdir" $INSTALL_PACKAGES network-manager iputils-ping libnss-mdns libnss-myhostname
# shellcheck disable=SC2086
chroot "$rootdir" $CLEAN_PACKAGES
chroot "$rootdir" /bin/rm -rf /var/lib/apt/lists/*
# shellcheck disable=SC2086
chroot "$rootdir" $INSTALL_PACKAGES libnss-gw-name nano man ntp locales locales-all debconf
# shellcheck disable=SC2086
chroot "$rootdir" $INSTALL_PACKAGES wireless-tools wpasupplicant usbutils cryptsetup zsh
# shellcheck disable=SC2086
chroot "$rootdir" $INSTALL_PACKAGES pinentry-curses eatmydata iotop bc hostapd haveged
# shellcheck disable=SC2086
chroot "$rootdir" $INSTALL_PACKAGES cpulimit screen elinks libpam-cracklib
# shellcheck disable=SC2086
chroot "$rootdir" $INSTALL_PACKAGES vim-common python3 unattended-upgrades
# shellcheck disable=SC2086
chroot "$rootdir" $INSTALL_PACKAGES dosfstools btrfs-tools
# Tor and ssh over tor
# shellcheck disable=SC2086
chroot "$rootdir" $INSTALL_PACKAGES_BACKPORTS tor
# shellcheck disable=SC2086
chroot "$rootdir" $INSTALL_PACKAGES connect-proxy
chroot "$rootdir" connect-proxy
sed -i 's|#Log notice file.*|Log notice file /var/log/tor/notices.log|g' "$rootdir/etc/tor/torrc"
sed -i 's|Log notice file.*|Log notice file /var/log/tor/notices.log|g' "$rootdir/etc/tor/torrc"
sed -i "s|#AccountingMax.*|AccountingMax $TOR_MAX_TRAFFIC_PER_MONTH_GB GBytes|g" "$rootdir/etc/tor/torrc"
sed -i "s|AccountingMax.*|AccountingMax $TOR_MAX_TRAFFIC_PER_MONTH_GB GBytes|g" "$rootdir/etc/tor/torrc"
if ! grep -q 'Host *.onion' "$rootdir/root/.ssh/config"; then
if [ ! -d "$rootdir/root/.ssh" ]; then
mkdir "$rootdir/root/.ssh"
fi
echo 'Host *.onion' >> "$rootdir/root/.ssh/config"
echo 'ProxyCommand connect -R remote -5 -S 127.0.0.1:9050 %h %p' >> "$rootdir/root/.ssh/config"
fi
if ! grep -q 'Host *.onion' "$rootdir/etc/skel/.ssh/config"; then
if [ ! -d "$rootdir/etc/skel/.ssh" ]; then
mkdir "$rootdir/etc/skel/.ssh"
fi
echo 'Host *.onion' >> "$rootdir/etc/skel/.ssh/config"
echo 'ProxyCommand connect -R remote -5 -S 127.0.0.1:9050 %h %p' >> "$rootdir/etc/skel/.ssh/config"
fi
# Install webcam for USB canary
# shellcheck disable=SC2086
chroot "$rootdir" $INSTALL_PACKAGES fswebcam
# shellcheck disable=SC2086
chroot "$rootdir" $CLEAN_PACKAGES
chroot "$rootdir" /bin/rm -rf /var/lib/apt/lists/*
# Install golang
chroot "$rootdir" adduser --disabled-login --gecos 'go' go
GOARCH=
if [[ "$ARCHITECTURE" == *"386" || "$ARCHITECTURE" == *"686" ]]; then
GOARCH=386
fi
if [[ "$ARCHITECTURE" == *"amd64" || "$ARCHITECTURE" == "x86_64" ]]; then
GOARCH=amd64
fi
if [[ "$ARCHITECTURE" == *"arm"* ]]; then
GOARCH=armv6l
fi
if [[ "$ARCHITECTURE" == *"aarch"* || "$ARCHITECTURE" == *"arm64"* ]]; then
GOARCH=arm64
fi
if [ ! "$GOARCH" ]; then
echo $'System architecture was not specified when installing Go'
exit 67
fi
GO_SOURCE="https://storage.googleapis.com/golang/go${GO_VERSION}.linux-${GOARCH}.tar.gz"
if [ ! -d "${rootdir}/root/build" ]; then
mkdir -p "$rootdir/root/build"
fi
cd "$rootdir/root/build" || exit 42
wget "${GO_SOURCE}"
if [ ! -f "${rootdir}/root/build/go${GO_VERSION}.linux-${GOARCH}.tar.gz" ]; then
exit 26
fi
chroot "$rootdir" tar -C /home/go -xzf "${INSTALL_DIR}/go${GO_VERSION}.linux-${GOARCH}.tar.gz"
if [ ! -d "${rootdir}/home/go/go/bin" ]; then
echo 'Go binary not installed'
exit 76
fi
# shellcheck disable=SC2086
mv ${rootdir}/home/go/go ${rootdir}/home/go/go${GO_VERSION}
echo "export GOROOT=/home/go" >> "${rootdir}/root/.bashrc"
echo "export GOROOT=/home/go" >> "${rootdir}/etc/skel/.bashrc"
echo "export GOROOT=/home/go" >> "${rootdir}/home/go/.bashrc"
echo "export GOPATH=\$GOROOT/go${GO_VERSION}/bin" >> "${rootdir}/root/.bashrc"
echo "export GOPATH=\$GOROOT/go${GO_VERSION}/bin" >> "${rootdir}/etc/skel/.bashrc"
echo "export GOPATH=\$GOROOT/go${GO_VERSION}/bin" >> "${rootdir}/home/go/.bashrc"
echo "export PATH=\$PATH:\$GOPATH" >> "${rootdir}/root/.bashrc"
echo "export PATH=\$PATH:\$GOPATH" >> "${rootdir}/etc/skel/.bashrc"
echo "export PATH=\$PATH:\$GOPATH" >> "${rootdir}/home/go/.bashrc"
chroot "$rootdir" chown -R go:go /home/go
cp "${rootdir}/home/go/go${GO_VERSION}/bin/"* "${rootdir}/usr/bin"
echo "upgrade_golang:$GO_VERSION" >> "${rootdir}/root/${PROJECT_NAME}-completed.txt"
# Tomb
# shellcheck disable=SC2086
chroot "$rootdir" $INSTALL_PACKAGES zsh pinentry-curses
git clone "$TOMB_REPO" "$rootdir/root/build/tomb"
cd "$rootdir/root/build/tomb" || exit 46
git checkout "$TOMB_COMMIT" -b "$TOMB_COMMIT"
chroot "$rootdir" cd /root/build/tomb && make install
echo "tomb commit:$TOMB_COMMIT" >> "$rootdir/root/${PROJECT_NAME}-completed.txt"
if ! grep -q '\* hard maxsyslogins' "$rootdir/etc/security/limits.conf"; then
echo '* hard maxsyslogins 10' >> "$rootdir/etc/security/limits.conf"
else
sed -i 's|hard maxsyslogins.*|hard maxsyslogins 10|g' "$rootdir/etc/security/limits.conf"
fi
# Max logins for each user
if ! grep -q '\* hard maxlogins' "$rootdir/etc/security/limits.conf"; then
echo '* hard maxlogins 2' >> "$rootdir/etc/security/limits.conf"
else
sed -i 's|hard maxlogins.*|hard maxlogins 2|g' "$rootdir/etc/security/limits.conf"
fi
# Email
# shellcheck disable=SC2086
chroot "$rootdir" $REMOVE_PACKAGES postfix
# shellcheck disable=SC2086
chroot "$rootdir" $INSTALL_PACKAGES exim4 exim4-daemon-heavy sasl2-bin swaks libnet-ssleay-perl procmail
# shellcheck disable=SC2086
chroot "$rootdir" $INSTALL_PACKAGES spamassassin
# shellcheck disable=SC2086
chroot "$rootdir" $INSTALL_PACKAGES dovecot-imapd
#backup
# shellcheck disable=SC2086
chroot "$rootdir" $INSTALL_PACKAGES duplicity gnupg
# encrypting email
# shellcheck disable=SC2086
chroot "$rootdir" $INSTALL_PACKAGES libmail-gnupg-perl
# shellcheck disable=SC2086
chroot "$rootdir" $CLEAN_PACKAGES
chroot "$rootdir" /bin/rm -rf /var/lib/apt/lists/*
git clone "$GPGIT_REPO" "$rootdir/root/build/gpgit"
cd "$rootdir/root/build/gpgit" || exit 62
git checkout "$GPGIT_COMMIT" -b "$GPGIT_COMMIT"
cp "$rootdir/root/build/gpgit/gpgit.pl" "$rootdir/usr/bin"
echo "gpgit commit:$GPGIT_COMMIT" >> "$rootdir/root/${PROJECT_NAME}-completed.txt"
# email client
# shellcheck disable=SC2086
chroot "$rootdir" $INSTALL_PACKAGES lynx abook urlview mutt
git clone "$CLEANUP_MAILDIR_REPO" "$rootdir/root/build/cleanup-maildir"
cd "$rootdir/root/build/cleanup-maildir" || exit 24
git checkout "$CLEANUP_MAILDIR_COMMIT" -b "$CLEANUP_MAILDIR_COMMIT"
cp "$rootdir/root/build/cleanup-maildir/cleanup-maildir" "$rootdir/usr/bin"
echo "cleanup-maildir commit:$CLEANUP_MAILDIR_COMMIT" >> "$rootdir/root/${PROJECT_NAME}-completed.txt"
# shellcheck disable=SC2086
chroot "$rootdir" $INSTALL_PACKAGES_BACKPORTS spectre-meltdown-checker
# web server
# shellcheck disable=SC2086
chroot "$rootdir" $REMOVE_PACKAGES_PURGE apache2
# shellcheck disable=SC2086
chroot "$rootdir" $INSTALL_PACKAGES nginx php-fpm apache2-utils
git clone "$NGINX_ENSITE_REPO" "$rootdir/root/build/nginx_ensite"
cd "$rootdir/root/build/nginx_ensite" || exit 46
git checkout "$NGINX_ENSITE_COMMIT" -b "$NGINX_ENSITE_COMMIT"
echo "nginx-ensite commit:$NGINX_ENSITE_COMMIT" >> "$rootdir/root/${PROJECT_NAME}-completed.txt"
chroot "$rootdir" cd /root/build/nginx_ensite && make install
if [ ! -f "$rootdir/etc/pam.d/nginx" ]; then
{ echo '#%PAM-1.0';
echo '@include common-auth';
echo '@include common-account';
echo '@include common-session'; } > "$rootdir/etc/pam.d/nginx"
fi
# shellcheck disable=SC2086
chroot "$rootdir" $CLEAN_PACKAGES
chroot "$rootdir" /bin/rm -rf /var/lib/apt/lists/*
# shellcheck disable=SC2086
chroot "$rootdir" $INSTALL_PACKAGES tripwire
# filesystem optimisations
#sed -i 's|btrfs subvol=@|btrfs defaults,subvol=@,compress=lzo,ssd|g' $rootdir/etc/fstab
}
image_install_nodejs() {
if [[ "$VARIANT" == "mesh" ]]; then
return
fi
mesh_install_nodejs
echo 'install_nodejs' >> "${rootdir}/root/${PROJECT_NAME}-completed.txt"
}
image_preinstall_repos() {
if [[ "$VARIANT" == "mesh"* ]]; then
return
fi
if [ ! -d "$rootdir/repos" ]; then
mkdir "$rootdir/repos"
fi
wget -q "$PEERTUBE_DOWNLOAD" -O "$rootdir/repos/${PEERTUBE_DOWNLOAD_FILENAME}.tar.xz"
git clone "$CMAKE_REPO" "$rootdir/repos/cmake"
git clone "$INADYN_REPO" "$rootdir/repos/inadyn"
git clone "$TOMB_REPO" "$rootdir/repos/tomb"
# shellcheck disable=SC2001
bludit_download_zip=bludit-$(echo "$BLUDIT_VERSION" | sed 's|\.|-|g').zip
url=${BLUDIT_DOWNLOAD}/${bludit_download_zip}
wget "$url" -O "$rootdir/repos/${bludit_download_zip}"
git clone "$BLUDIT_THEME_REPO" "$rootdir/repos/bludittheme"
git clone "$CRYPTPAD_REPO" "$rootdir/repos/cryptpad"
git clone "$ETESYNC_REPO" "$rootdir/repos/etesync"
git clone "$DOKUWIKI_REPO" "$rootdir/repos/dokuwiki"
git clone "$ETHERPAD_REPO" "$rootdir/repos/etherpad"
git clone "$FRIENDICA_REPO" "$rootdir/repos/friendica"
#git clone "$GNUSOCIAL_REPO" "$rootdir/repos/gnusocial"
git clone "$PLEROMA_REPO" "$rootdir/repos/pleroma"
#git clone "$GNUSOCIAL_MARKDOWN_REPO" "$rootdir/repos/gnusocial-markdown"
git clone "$QVITTER_THEME_REPO" "$rootdir/repos/qvitter"
git clone "$PLEROMA_FRONTEND_REPO" "$rootdir/repos/pleroma-fe"
#git clone "$POSTACTIV_REPO" "$rootdir/repos/postactiv"
#git clone "$SHARINGS_REPO" "$rootdir/repos/sharings"
git clone "$HTMLY_REPO" "$rootdir/repos/htmly"
git clone "$HUBZILLA_REPO" "$rootdir/repos/hubzilla"
git clone "$HUBZILLA_ADDONS_REPO" "$rootdir/repos/hubzilla-addons"
git clone "$ZAP_REPO" "$rootdir/repos/zap"
git clone "$KOEL_REPO" "$rootdir/repos/koel"
git clone "$LYCHEE_REPO" "$rootdir/repos/lychee"
git clone "$MAILPILE_REPO" "$rootdir/repos/mailpile"
git clone "$MATRIX_REPO" "$rootdir/repos/matrix"
#git clone "$MOVIM_REPO" "$rootdir/repos/movim"
git clone "$NEXTCLOUD_REPO" "$rootdir/repos/nextcloud"
git clone "$PIHOLE_REPO" "$rootdir/repos/pihole"
#git clone "$PROFANITY_REPO" "$rootdir/repos/profanity"
#git clone "$LIBMESODE_REPO" "$rootdir/repos/libmesode"
#git clone "$PROFANITY_OMEMO_PLUGIN_REPO" "$rootdir/repos/profanity-omemo"
#git clone "$RSS_READER_REPO" "$rootdir/repos/rss"
#git clone "$RSS_MOBILE_READER_REPO" "$rootdir/repos/rss-mobile"
git clone "$TOXCORE_REPO" "$rootdir/repos/toxcore"
git clone "$TOXID_REPO" "$rootdir/repos/toxid"
git clone "$TOXIC_REPO" "$rootdir/repos/toxic"
git clone "$TURTL_REPO" "$rootdir/repos/turtl"
git clone "$KANBOARD_REPO" "$rootdir/repos/kanboard"
#git clone "$KEYSERVER_WEB_REPO" "$rootdir/repos/keyserverweb"
git clone "$PRIVATEBIN_REPO" "$rootdir/repos/privatebin"
git clone "$EDITH_REPO" "$rootdir/repos/edith"
#git clone "$BDSMAIL_REPO" "$rootdir/repos/bdsmail"
git clone "$SMOLRSS_REPO" "$rootdir/repos/smolrss"
#git clone "$WEKAN_REPO" "$rootdir/repos/wekan"
#git clone "$FLOW_ROUTER_REPO" "$rootdir/repos/flowrouter"
#git clone "$ZERONET_REPO" "$rootdir/repos/zeronet"
#git clone "$QTOX_REPO" "$rootdir/repos/qtox"
}
##############################################################################
# Set to true/false to control if eatmydata is used during build
use_eatmydata=true
rootdir="$1"
fmdir="$(pwd)"
image="$fmdir"/"$2"
cd "$rootdir"
echo info: building "$MACHINE" for "$ARCHITECTURE"
export DEBIAN_FRONTEND=noninteractive DEBCONF_NONINTERACTIVE_SEEN=true
export LC_ALL=C LANGUAGE=C LANG=C
# Override libpam-tmpdir setting during build, as the directories
# are not created yet.
export TMP=/tmp/ TMPDIR=/tmp/
if [ ! "$MY_USERNAME" ]; then
echo $'No username was specified'
exit 52
fi
username="$MY_USERNAME"
echo $"warning: creating initial user $username with well known password!"
password="$MY_PASSWORD"
chroot "$rootdir" /usr/bin/env -i \
HOME=/root \
PATH=/usr/local/bin:/usr/local/sbin:/usr/bin:/usr/sbin:/bin:/sbin
echo "export PATH=/usr/local/bin:/usr/local/sbin:/usr/bin:/usr/sbin:/bin:/sbin:" >> "$rootdir/root/.bashrc"
chroot "$rootdir" adduser --gecos "$username" --disabled-password "$username"
echo "$username:$password" | chroot "$rootdir" /usr/sbin/chpasswd
chroot "$rootdir" adduser "$username" sudo
if [ ! "$DEBIAN_REPO" ]; then
DEBIAN_REPO='ftp.de.debian.org'
fi
if [ ! "$DEBIAN_VERSION" ]; then
DEBIAN_VERSION='stretch'
fi
set_apt_sources "$BUILD_MIRROR"
# shellcheck disable=SC2086
chroot "$rootdir" $CLEAN_PACKAGES
chroot "$rootdir" /bin/rm -rf /var/lib/apt/lists/*
# shellcheck disable=SC2086
chroot "$rootdir" $CLEAN_PACKAGES
set_apt_sources "$MIRROR"
configure_backports
configure_contrib_repo
# shellcheck disable=SC2086
chroot "$rootdir" $UPDATE_PACKAGES
# shellcheck disable=SC2086
chroot "$rootdir" $INSTALL_PACKAGES apt-utils
cat > "$rootdir/usr/sbin/policy-rc.d" <<EOF
#!/bin/sh
exit 101
EOF
chmod a+rx "$rootdir/usr/sbin/policy-rc.d"
if "$use_eatmydata" ; then
enable_eatmydata_override
fi
if [ -n "$CUSTOM_SETUP" ]; then
cp "$CUSTOM_SETUP" "$rootdir"/tmp
# shellcheck disable=SC2086
chroot "$rootdir" $INSTALL_PACKAGES gdebi-core
chroot "$rootdir" gdebi -n "/tmp/$(basename "$CUSTOM_SETUP")"
fi
if [[ "$VARIANT" != "mesh"* ]]; then
# shellcheck disable=SC2086
chroot "$rootdir" $INSTALL_PACKAGES openssh-server
fi
# shellcheck disable=SC2086
chroot "$rootdir" $INSTALL_PACKAGES sudo git dialog build-essential
# shellcheck disable=SC2086
chroot "$rootdir" $INSTALL_PACKAGES avahi-daemon avahi-utils avahi-discover
# shellcheck disable=SC2086
chroot "$rootdir" $INSTALL_PACKAGES iptables dnsutils net-tools network-manager iputils-ping
# shellcheck disable=SC2086
chroot "$rootdir" $INSTALL_PACKAGES libnss-mdns libnss-myhostname libnss-gw-name nano man ntp
# shellcheck disable=SC2086
chroot "$rootdir" $INSTALL_PACKAGES locales locales-all debconf wireless-tools wpasupplicant usbutils
if [[ "$ARCHITECTURE" == 'qemu'* || "$ARCHITECTURE" == 'i386' || "$ARCHITECTURE" == 'i686' || "$ARCHITECTURE" == 'amd64' || "$ARCHITECTURE" == 'x86_64' ]]; then
# shellcheck disable=SC2086
chroot "$rootdir" $INSTALL_PACKAGES cryptsetup zsh pinentry-curses iotop bc
# shellcheck disable=SC2086
chroot "$rootdir" $INSTALL_PACKAGES grub2 hostapd lvm2
fi
sed -i "s|#host-name=.*|host-name=${LOCAL_NAME}|g" "$rootdir/etc/avahi/avahi-daemon.conf"
sed -i "s|host-name=.*|host-name=${LOCAL_NAME}|g" "$rootdir/etc/avahi/avahi-daemon.conf"
sed -i 's|#domain-name=.*|domain-name=local|g' "$rootdir/etc/avahi/avahi-daemon.conf"
sed -i 's|domain-name=.*|domain-name=local|g' "$rootdir/etc/avahi/avahi-daemon.conf"
sed -i "s|use-ipv4=.*|use-ipv4=yes|g" "$rootdir/etc/avahi/avahi-daemon.conf"
sed -i "s|use-ipv6=.*|use-ipv6=no|g" "$rootdir/etc/avahi/avahi-daemon.conf"
sed -i "s|#disallow-other-stacks=.*|disallow-other-stacks=yes|g" "$rootdir/etc/avahi/avahi-daemon.conf"
sed -i "s|hosts:.*|hosts: files mdns4_minimal mdns4 mdns dns|g" "$rootdir/etc/nsswitch.conf"
sed -i "s|#publish-domain=.*|publish-domain=yes|g" "$rootdir/etc/avahi/avahi-daemon.conf"
sed -i "s|publish-domain=.*|publish-domain=yes|g" "$rootdir/etc/avahi/avahi-daemon.conf"
sed -i "s|#publish-addresses=.*|publish-addresses=yes|g" "$rootdir/etc/avahi/avahi-daemon.conf"
sed -i "s|publish-addresses=.*|publish-addresses=yes|g" "$rootdir/etc/avahi/avahi-daemon.conf"
# Add an ssh avahi service
{ echo '<?xml version="1.0" standalone="no"?><!--*-nxml-*-->';
echo '<!DOCTYPE service-group SYSTEM "avahi-service.dtd">';
echo '<service-group>';
echo ' <name replace-wildcards="yes">%h SSH</name>';
echo ' <service>';
echo ' <type>_ssh._tcp</type>';
echo " <port>$SSH_PORT</port>";
echo ' </service>';
echo '</service-group>'; } > "$rootdir/etc/avahi/services/ssh.service"
if [[ "$VARIANT" != "mesh"* ]]; then
# Add a http avahi service
{ echo '<?xml version="1.0" standalone="no"?><!--*-nxml-*-->';
echo '<!DOCTYPE service-group SYSTEM "avahi-service.dtd">';
echo '<service-group>';
echo ' <name replace-wildcards="yes">%h HTTP</name>';
echo ' <service>';
echo ' <type>_http._tcp</type>';
echo " <port>80</port>";
echo ' </service>';
echo '</service-group>'; } > "$rootdir/etc/avahi/services/http.service"
fi
# Ensure that the avahi daemon keeps running
WATCHDOG_SCRIPT_NAME="keepon"
{ echo '#!/bin/bash';
echo 'LOGFILE=/var/log/keepon.log';
echo "CURRENT_DATE=\$(date)";
echo '';
echo "# keep avahi-daemon daemon running";
echo "RUNNING=\$(ps aux | grep avahi-daemon | grep -v grep > /dev/null && echo Running)";
echo "if [ ! \$RUNNING ]; then";
echo " systemctl start avahi-daemon";
echo " echo -n \$CURRENT_DATE >> \$LOGFILE";
echo " echo \"avahi-daemon daemon restarted\" >> \$LOGFILE";
echo 'fi';
echo "# End of avahi-daemon"; } > "$rootdir/usr/bin/$WATCHDOG_SCRIPT_NAME"
chmod +x "$rootdir/usr/bin/$WATCHDOG_SCRIPT_NAME"
echo "*/1 * * * * root /usr/bin/$WATCHDOG_SCRIPT_NAME" >> "$rootdir/etc/crontab"
chroot "$rootdir" /bin/bash -x <<EOF
git clone $PROJECT_REPO /root/$PROJECT_NAME
cd /root/$PROJECT_NAME
git checkout stretch
make install
EOF
chroot "$rootdir" "${PROJECT_NAME}-image-hardware-setup" 2>&1 | \
tee "$rootdir/var/log/${PROJECT_NAME}-image-hardware-setup.log"
rm "$rootdir/usr/sbin/policy-rc.d"
# Set up HRNG for systems known to have one
# Otherwise install haveged
if [[ "$MACHINE" != "beagle"* ]]; then
# With some VMs, the hardware cycles counter is emulated and deterministic,
# and thus predictible, so havege should not be used
if [[ "$MACHINE" != "qemu"* ]]; then
# shellcheck disable=SC2086
chroot "$rootdir" $INSTALL_PACKAGES haveged
fi
else
# shellcheck disable=SC2086
chroot "$rootdir" $INSTALL_PACKAGES rng-tools
sed -i 's|#HRNGDEVICE=/dev/hwrng|HRNGDEVICE=/dev/hwrng|g' "$rootdir/etc/default/rng-tools"
fi
# Possible boards with u-boot images:
#
# A10-OLinuXino-Lime
# A10s-OLinuXino-M
# A20-OLinuXino-Lime
# A20-OLinuXino-Lime2
# A20-OLinuXino_MICRO
# A20-Olimex-SOM-EVB
# Bananapi
# Bananapro
# CHIP
# Cubieboard
# Cubieboard2
# Cubieboard4
# Cubietruck
# Cubietruck_plus
# Lamobo_R1
# Linksprite_pcDuino
# Linksprite_pcDuino3
# Mini-X
# am335x_boneblack
# am57xx_evm
# arndale
# dra7xx_evm
# igep0020
# mx53loco
# mx6cuboxi
# mx6cuboxi4x4
# nanopi_neo
# nitrogen6q
# nokia_rx51
# novena
# odroid
# odroid-xu3
# omap3_beagle
# omap3_pandora
# omap4_panda
# orangepi_plus
# orangepi_zero
# udoo
# usbarmory
# wandboard
# copy u-boot to beginning of image
case "$MACHINE" in
beagleboneblack)
dd if="$rootdir/usr/lib/u-boot/am335x_boneblack/MLO" of="$image" \
count=1 seek=1 conv=notrunc bs=128k
dd if="$rootdir/usr/lib/u-boot/am335x_boneblack/u-boot.img" of="$image" \
count=2 seek=1 conv=notrunc bs=384k
;;
beaglebonegreen)
dd if="$rootdir/usr/lib/u-boot/am335x_boneblack/MLO" of="$image" \
count=1 seek=1 conv=notrunc bs=128k
dd if="$rootdir/usr/lib/u-boot/am335x_boneblack/u-boot.img" of="$image" \
count=2 seek=1 conv=notrunc bs=384k
;;
beaglex15)
ls -l "$rootdir/usr/lib/u-boot/am57xx_evm"
dd if="$rootdir/usr/lib/u-boot/am57xx_evm/MLO" of="$image" \
count=1 seek=1 conv=notrunc bs=128k
dd if="$rootdir/usr/lib/u-boot/am57xx_evm/u-boot.img" of="$image" \
count=2 seek=1 conv=notrunc bs=384k
;;
cubieboard2)
dd if="$rootdir/usr/lib/u-boot/Cubieboard2/u-boot-sunxi-with-spl.bin" of="$image" \
seek=8 conv=notrunc bs=1k
;;
a20-olinuxino-lime)
dd if="$rootdir/usr/lib/u-boot/A20-OLinuXino-Lime/u-boot-sunxi-with-spl.bin" \
of="$image" seek=8 conv=notrunc bs=1k
;;
esac
if "$use_eatmydata" ; then
disable_eatmydata_override
fi
configure_ssh
configure_networking
admin_user_sudo
create_generic_image
atheros_wifi
continue_installation
if [[ "$MACHINE" == 'beagle'* ]]; then
beaglebone_flasher "$MACHINE"
fi
image_install_nodejs
image_install_myqr
initialise_mesh
configure_wifi
configure_user_interface
image_setup_utils
image_install_inadyn
if [[ $VARIANT != "mesh"* ]]; then
image_install_web_server
fi
image_install_web_admin
#image_preinstall_repos
# Lastly for onion installs switch the repo sources to use tor transport
image_create_tor_repo_sources
# remove downloaded packages
# shellcheck disable=SC2086
chroot "$rootdir" $REMOVE_UNUSED_PACKAGES
# shellcheck disable=SC2086
chroot "$rootdir" $CLEAN_PACKAGES
cd /
echo $"info: killing leftover processes in chroot"
fuser -mvk "$rootdir/." || true
exit 0