2016-08-12 01:38:13 +02:00
#!/bin/bash
2016-08-13 01:08:44 +02:00
# Créer les conteneurs Yunohost et les configure
2016-08-12 01:38:13 +02:00
# Récupère le dossier du script
2016-09-18 19:23:54 +02:00
if [ " ${ 0 : 0 : 1 } " = = "/" ] ; then script_dir = " $( dirname " $0 " ) " ; else script_dir = " $( echo $PWD /$( dirname " $0 " | cut -d '.' -f2) | sed 's@/$@@' ) " ; fi
2016-08-12 01:38:13 +02:00
2016-08-13 19:31:36 +02:00
LOG = Build_lxc.log
LOG_BUILD_LXC = " $script_dir / $LOG "
PLAGE_IP = 10.1.5
IP_LXC1 = 10.1.5.3
IP_LXC2 = 10.1.5.4
ARG_SSH = -t
2016-08-16 15:36:12 +02:00
DOMAIN = $( cat " $script_dir /domain.ini " )
2020-05-21 19:10:41 +02:00
YUNO_PWD = demo
2016-08-12 17:35:14 +02:00
LXC_NAME1 = yunohost_demo1
LXC_NAME2 = yunohost_demo2
2016-08-13 22:05:38 +02:00
TIME_TO_SWITCH = 30
2022-08-31 04:16:23 +02:00
DIST = "bullseye"
2016-08-13 22:05:38 +02:00
# En minutes
2016-09-07 23:31:11 +02:00
MAIL_ADDR = demo@yunohost.org
2018-08-26 14:37:15 +02:00
dnsforce = 0
2018-08-26 13:40:41 +02:00
main_iface =
dns =
2016-08-12 01:38:13 +02:00
2019-06-25 01:15:37 +02:00
lxc_current_version = $( lxc-info --version)
if $( dpkg --compare-versions " $lxc_current_version " "gt" "3.0.0" ) ; then new_lxc = 1; else new_lxc = 0; fi
2019-06-24 22:46:46 +02:00
2016-08-12 01:38:13 +02:00
USER_DEMO = demo
2020-05-21 19:10:41 +02:00
PASSWORD_DEMO = demo
2016-08-12 01:38:13 +02:00
2018-08-26 13:40:41 +02:00
# Tente de définir l'interface réseau principale
if [ -z $main_iface ] # Si main_iface est vide, tente de le trouver.
then
# main_iface=$(sudo route | grep default.*0.0.0.0 -m1 | awk '{print $8;}') # Prend l'interface réseau défini par default
main_iface = $( sudo ip route | grep default | awk '{print $5;}' ) # Prend l'interface réseau défini par default
if [ -z $main_iface ] ; then
echo -e "\e[91mImpossible de déterminer le nom de l'interface réseau de l'hôte.\e[0m"
exit 1
fi
fi
if [ -z $dns ] # Si l'adresse du dns est vide, tente de le déterminer à partir de la passerelle par défaut.
then
# dns=$(sudo route -n | grep ^0.0.0.0.*$main_iface | awk '{print $2;}')
dns = $( sudo ip route | grep default | awk '{print $3;}' )
if [ -z $dns ] ; then
echo -e "\e[91mImpossible de déterminer l'adresse de la passerelle.\e[0m"
exit 1
fi
fi
2016-09-18 19:23:54 +02:00
# Check user
if [ " $USER " != " $( cat " $script_dir /setup_user " ) " ] && test -e " $script_dir /setup_user " ; then
echo -e " \e[91mCe script doit être exécuté avec l'utilisateur $( cat " $script_dir /setup_user " ) "
echo -en "\e[0m"
exit 0
fi
2016-08-16 15:36:12 +02:00
2018-08-26 13:40:41 +02:00
sudo mkdir -p /var/lib/lxcsnaps # Créer le dossier lxcsnaps, pour s'assurer que lxc utilisera ce dossier, même avec lxc 2.
2018-08-26 15:48:55 +02:00
if sudo lxc-info -n $LXC_NAME1 > /dev/null 2>& 1
2018-08-26 13:40:41 +02:00
then # Si le conteneur existe déjà
echo -e "\e[1m> Suppression du conteneur existant.\e[0m" | tee -a " $LOG_BUILD_LXC "
2018-08-26 15:48:55 +02:00
" $script_dir /demo_lxc_destroy.sh " quiet | tee -a " $LOG_BUILD_LXC "
2018-08-26 13:40:41 +02:00
fi
2022-08-30 19:52:44 +02:00
echo -e " \e[1m> Création d'une machine debian $DIST minimaliste\e[0m " | tee -a " $LOG_BUILD_LXC "
sudo lxc-create -n $LXC_NAME1 -t debian -- -r $DIST >> " $LOG_BUILD_LXC " 2>& 1
2016-08-12 01:38:13 +02:00
2016-12-17 19:31:44 +01:00
echo -e "\e[1m> Active le bridge réseau\e[0m" | tee -a " $LOG_BUILD_LXC "
2016-08-12 01:38:13 +02:00
sudo ifup lxc_demo --interfaces= /etc/network/interfaces.d/lxc_demo >> " $LOG_BUILD_LXC " 2>& 1
2016-12-17 19:31:44 +01:00
echo -e "\e[1m> Configuration réseau du conteneur\e[0m" | tee -a " $LOG_BUILD_LXC "
2019-06-25 00:06:55 +02:00
if [ $new_lxc -eq 1 ] ; then
2022-08-30 19:52:44 +02:00
sudo sed -i " s/^lxc.net.0.link = lxcbr0 $/lxc.net.0.link = lxc_demo\nlxc.net.0.name = eth0\nlxc.net.0.veth.pair = $LXC_NAME1 / " /var/lib/lxc/$LXC_NAME1 /config >> " $LOG_BUILD_LXC " 2>& 1
2019-06-24 22:46:46 +02:00
else
sudo sed -i " s/^lxc.network.type = empty $/lxc.network.type = veth\nlxc.network.flags = up\nlxc.network.link = lxc_demo\nlxc.network.name = eth0\nlxc.network.veth.pair = $LXC_NAME1 \nlxc.network.hwaddr = 00:FF:AA:00:00:03/ " /var/lib/lxc/$LXC_NAME1 /config >> " $LOG_BUILD_LXC " 2>& 1
fi
2016-08-12 01:38:13 +02:00
2016-12-17 19:31:44 +01:00
echo -e "\e[1m> Configuration réseau de la machine virtualisée\e[0m" | tee -a " $LOG_BUILD_LXC "
2016-08-13 19:31:36 +02:00
sudo sed -i " s@iface eth0 inet dhcp@iface eth0 inet static\n\taddress $IP_LXC1 /24\n\tgateway $PLAGE_IP .1@ " /var/lib/lxc/$LXC_NAME1 /rootfs/etc/network/interfaces >> " $LOG_BUILD_LXC " 2>& 1
2016-08-12 01:38:13 +02:00
2016-12-17 19:31:44 +01:00
echo -e "\e[1m> Configure le parefeu\e[0m" | tee -a " $LOG_BUILD_LXC "
2016-08-12 01:38:13 +02:00
sudo iptables -A FORWARD -i lxc_demo -o eth0 -j ACCEPT >> " $LOG_BUILD_LXC " 2>& 1
sudo iptables -A FORWARD -i eth0 -o lxc_demo -j ACCEPT >> " $LOG_BUILD_LXC " 2>& 1
sudo iptables -t nat -A POSTROUTING -s $PLAGE_IP .0/24 -j MASQUERADE >> " $LOG_BUILD_LXC " 2>& 1
2018-08-26 13:40:41 +02:00
echo -e "\e[1m> Vérification du contenu du resolv.conf\e[0m" | tee -a " $LOG_BUILD_LXC "
if ! sudo cat /var/lib/lxc/$LXC_NAME1 /rootfs/etc/resolv.conf | grep -q nameserver; then
dnsforce = 1 # Le resolv.conf est vide, on force l'ajout d'un dns.
fi
if [ $dnsforce -eq 1 ] ; then # Force la réécriture du resolv.conf
echo " nameserver $dns " | sudo tee /var/lib/lxc/$LXC_NAME1 /rootfs/etc/resolv.conf
fi
# Fix an issue with apparmor when the container start.
2019-06-25 00:06:55 +02:00
if [ $new_lxc -eq 1 ] ; then
2019-06-24 22:46:46 +02:00
sudo sed -i " s/^lxc.apparmor.profile = generated $/lxc.apparmor.profile = unconfined/ " /var/lib/lxc/$LXC_NAME1 /config >> " $LOG_BUILD_LXC " 2>& 1
else
echo -e "\n# Fix apparmor issues\nlxc.aa_profile = unconfined" | sudo tee -a /var/lib/lxc/$LXC_NAME1 /config >> " $LOG_BUILD_LXC " 2>& 1
fi
2018-08-26 13:40:41 +02:00
2016-12-17 19:31:44 +01:00
echo -e "\e[1m> Démarrage de la machine\e[0m" | tee -a " $LOG_BUILD_LXC "
2018-08-26 13:40:41 +02:00
sudo lxc-start -n $LXC_NAME1 -d --logfile " $script_dir /lxc_boot.log " >> " $LOG_BUILD_LXC " 2>& 1
2016-08-12 01:38:13 +02:00
sleep 3
sudo lxc-ls -f >> " $LOG_BUILD_LXC " 2>& 1
2022-08-30 19:52:44 +02:00
echo -e "\e[1m> Update et install aptitude sudo aptitude sudo ssh openssh-server curl\e[0m" | tee -a " $LOG_BUILD_LXC "
2016-08-12 17:35:14 +02:00
sudo lxc-attach -n $LXC_NAME1 -- apt-get update
2022-08-30 19:52:44 +02:00
sudo lxc-attach -n $LXC_NAME1 -- apt-get install -y aptitude sudo ssh openssh-server curl
2016-12-17 19:31:44 +01:00
echo -e "\e[1m> Installation des paquets standard et ssh-server\e[0m" | tee -a " $LOG_BUILD_LXC "
2018-08-26 13:40:41 +02:00
sudo lxc-attach -n $LXC_NAME1 -- aptitude install -y ~pstandard ~prequired ~pimportant
2016-12-17 19:31:44 +01:00
echo -e "\e[1m> Renseigne /etc/hosts sur l'invité\e[0m" | tee -a " $LOG_BUILD_LXC "
2016-08-12 17:35:14 +02:00
echo " 127.0.0.1 $LXC_NAME1 " | sudo tee -a /var/lib/lxc/$LXC_NAME1 /rootfs/etc/hosts >> " $LOG_BUILD_LXC " 2>& 1
2016-08-12 01:38:13 +02:00
2016-12-17 19:31:44 +01:00
echo -e "\e[1m> Ajoute l'user ssh_demo (avec un mot de passe à revoir...)\e[0m" | tee -a " $LOG_BUILD_LXC "
2016-08-12 17:35:14 +02:00
sudo lxc-attach -n $LXC_NAME1 -- useradd -m -p ssh_demo ssh_demo >> " $LOG_BUILD_LXC " 2>& 1
2016-08-12 01:38:13 +02:00
2016-12-17 19:31:44 +01:00
echo -e "\e[1m> Autorise ssh_demo à utiliser sudo sans mot de passe\e[0m" | tee -a " $LOG_BUILD_LXC "
2016-08-13 01:08:44 +02:00
echo "ssh_demo ALL=(ALL:ALL) NOPASSWD: ALL" | sudo tee -a /var/lib/lxc/$LXC_NAME1 /rootfs/etc/sudoers >> " $LOG_BUILD_LXC " 2>& 1
2016-08-12 01:38:13 +02:00
2016-12-17 19:31:44 +01:00
echo -e "\e[1m> Mise en place de la connexion ssh vers l'invité.\e[0m" | tee -a " $LOG_BUILD_LXC "
2016-08-12 17:35:14 +02:00
sudo mkdir /var/lib/lxc/$LXC_NAME1 /rootfs/home/ssh_demo/.ssh >> " $LOG_BUILD_LXC " 2>& 1
sudo cp $HOME /.ssh/$LXC_NAME1 .pub /var/lib/lxc/$LXC_NAME1 /rootfs/home/ssh_demo/.ssh/authorized_keys >> " $LOG_BUILD_LXC " 2>& 1
sudo lxc-attach -n $LXC_NAME1 -- chown ssh_demo -R /home/ssh_demo/.ssh >> " $LOG_BUILD_LXC " 2>& 1
2016-08-12 01:38:13 +02:00
2019-06-23 14:17:36 +02:00
ssh -o StrictHostKeyChecking = no $ARG_SSH $LXC_NAME1 "exit 0" # Initie une première connexion SSH pour valider la clé.
2016-08-12 01:38:13 +02:00
if [ " $? " -ne 0 ] ; then # Si l'utilisateur tarde trop, la connexion sera refusée... ???
2016-08-12 17:35:14 +02:00
ssh $ARG_SSH $LXC_NAME1 "exit 0" # Initie une premier connexion SSH pour valider la clé.
2016-08-12 01:38:13 +02:00
fi
2018-08-26 13:40:41 +02:00
# Fix ssh common issues with stretch "No supported key exchange algorithms"
sudo lxc-attach -n $LXC_NAME -- dpkg-reconfigure openssh-server >> " $LOG_BUILD_LXC " 2>& 1
# Fix locales issue
sudo lxc-attach -n $LXC_NAME -- locale-gen en_US.UTF-8 >> " $LOG_BUILD_LXC " 2>& 1
sudo lxc-attach -n $LXC_NAME -- localedef -i en_US -f UTF-8 en_US.UTF-8 >> " $LOG_BUILD_LXC " 2>& 1
2016-12-17 19:31:44 +01:00
echo -e "\e[1m> Installation de Yunohost...\e[0m" | tee -a " $LOG_BUILD_LXC "
2022-08-30 19:52:44 +02:00
ssh $ARG_SSH $LXC_NAME1 " sudo /bin/bash -c \"curl https://install.yunohost.org/ $DIST | bash -s -- -a -d stable\" " | tee -a " $LOG_BUILD_LXC " 2>& 1
2016-12-17 19:31:44 +01:00
echo -e "\e[1m> Post install Yunohost\e[0m" | tee -a " $LOG_BUILD_LXC "
2022-08-31 04:16:23 +02:00
ssh $ARG_SSH $LXC_NAME1 "sudo systemctl start dbus.service" | tee -a " $LOG_BUILD_LXC " 2>& 1
2020-05-21 19:10:41 +02:00
ssh $ARG_SSH $LXC_NAME1 " sudo yunohost tools postinstall --domain $DOMAIN --password $YUNO_PWD --force-password " | tee -a " $LOG_BUILD_LXC " 2>& 1
2022-08-18 19:28:56 +02:00
echo -e "\e[1m> Fix SSH access\e[0m" | tee -a " $LOG_BUILD_LXC "
sudo lxc-attach -n $LXC_NAME1 -- sed -i "s/AllowGroups ssh.main sftp.main ssh.app sftp.app admins root/AllowGroups ssh.main sftp.main ssh.app sftp.app admins root ssh_demo/" /etc/ssh/sshd_config >> " $LOG_BUILD_LXC " 2>& 1
sudo lxc-attach -n $LXC_NAME1 -- service sshd restart >> " $LOG_BUILD_LXC " 2>& 1
2020-05-21 19:10:41 +02:00
echo -e "\e[1m> Disable password strength\e[0m" | tee -a " $LOG_BUILD_LXC "
ssh $ARG_SSH $LXC_NAME1 "sudo yunohost settings set security.password.user.strength -v -1" | tee -a " $LOG_BUILD_LXC "
2016-08-12 01:38:13 +02:00
USER_DEMO_CLEAN = ${ USER_DEMO // "_" / "" }
2016-12-17 19:31:44 +01:00
echo -e "\e[1m> Ajout de l'utilisateur de demo\e[0m" | tee -a " $LOG_BUILD_LXC "
2022-08-18 19:28:56 +02:00
ssh $ARG_SSH $LXC_NAME1 " sudo yunohost user create \" $USER_DEMO \" --firstname \" $USER_DEMO_CLEAN \" --lastname \" $USER_DEMO_CLEAN \" --domain \" $DOMAIN \" --password \" $PASSWORD_DEMO \" "
2016-08-12 01:38:13 +02:00
2016-12-17 19:31:44 +01:00
echo -e "\e[1m\n> Vérification de l'état de Yunohost\e[0m" | tee -a " $LOG_BUILD_LXC "
2016-08-12 17:35:14 +02:00
ssh $ARG_SSH $LXC_NAME1 "sudo yunohost -v" | tee -a " $LOG_BUILD_LXC " 2>& 1
2016-08-12 01:38:13 +02:00
2016-09-18 19:23:54 +02:00
# ********
2016-12-17 19:31:44 +01:00
echo -e "\e[1m>> Modification de Yunohost pour la demo\e[0m" | tee -a " $LOG_BUILD_LXC "
2016-09-18 19:23:54 +02:00
# App officielles
2016-12-17 19:31:44 +01:00
echo -e "\e[1m> Installation des applications officielles\e[0m" | tee -a " $LOG_BUILD_LXC "
2018-08-26 13:40:41 +02:00
# Ampache
echo -e "\e[36mInstallation de Ampache\e[0m" | tee -a " $LOG_BUILD_LXC "
2019-06-23 12:46:26 +02:00
ssh $ARG_SSH $LXC_NAME1 " sudo yunohost app install ampache -a \"domain= $DOMAIN &path=/ampache&admin= $USER_DEMO &is_public=1\" " | tee -a " $LOG_BUILD_LXC "
2018-08-26 13:40:41 +02:00
# Baikal
2016-12-17 19:31:44 +01:00
echo -e "\e[36mInstallation de baikal\e[0m" | tee -a " $LOG_BUILD_LXC "
2016-09-18 19:23:54 +02:00
ssh $ARG_SSH $LXC_NAME1 " sudo yunohost app install baikal -a \"domain= $DOMAIN &path=/baikal&password= $PASSWORD_DEMO \" " | tee -a " $LOG_BUILD_LXC "
2018-08-26 13:40:41 +02:00
# Agendav
2016-12-17 19:31:44 +01:00
echo -e "\e[36mInstallation d'agendav\e[0m" | tee -a " $LOG_BUILD_LXC "
2016-09-18 19:23:54 +02:00
ssh $ARG_SSH $LXC_NAME1 " sudo yunohost app install agendav -a \"domain= $DOMAIN &path=/agendav&language=en\" " | tee -a " $LOG_BUILD_LXC "
2018-08-26 13:40:41 +02:00
# Dokuwiki
2016-12-17 19:31:44 +01:00
echo -e "\e[36mInstallation de dokuwiki\e[0m" | tee -a " $LOG_BUILD_LXC "
2019-06-23 14:56:49 +02:00
ssh $ARG_SSH $LXC_NAME1 " sudo yunohost app install dokuwiki -a \"domain= $DOMAIN &path=/dokuwiki&admin= $USER_DEMO &is_public=1&language=en\" " | tee -a " $LOG_BUILD_LXC "
2018-08-26 13:40:41 +02:00
# Etherpad
echo -e "\e[36mInstallation de etherpad\e[0m" | tee -a " $LOG_BUILD_LXC "
2018-08-26 15:48:55 +02:00
ssh $ARG_SSH $LXC_NAME1 " sudo yunohost app install etherpad_mypads -a \"domain= $DOMAIN &path=/etherpad&admin= $USER_DEMO &password=administration&language=en&is_public=1&export=none&mypads=1&useldap=0\" " | tee -a " $LOG_BUILD_LXC "
2018-08-26 13:40:41 +02:00
# Hextris
2016-12-17 19:31:44 +01:00
echo -e "\e[36mInstallation de hextris\e[0m" | tee -a " $LOG_BUILD_LXC "
2018-08-26 13:40:41 +02:00
ssh $ARG_SSH $LXC_NAME1 " sudo yunohost app install hextris -a \"domain= $DOMAIN &path=/hextris&is_public=1\" " | tee -a " $LOG_BUILD_LXC "
# Jirafeau
2016-12-17 19:31:44 +01:00
echo -e "\e[36mInstallation de jirafeau\e[0m" | tee -a " $LOG_BUILD_LXC "
2018-08-26 13:40:41 +02:00
ssh $ARG_SSH $LXC_NAME1 " sudo yunohost app install jirafeau -a \"domain= $DOMAIN &path=/jirafeau&admin_user= $USER_DEMO &upload_password= $PASSWORD_DEMO &is_public=1\" " | tee -a " $LOG_BUILD_LXC "
# Kanboard
2016-12-17 19:31:44 +01:00
echo -e "\e[36mInstallation de kanboard\e[0m" | tee -a " $LOG_BUILD_LXC "
2018-08-26 13:40:41 +02:00
ssh $ARG_SSH $LXC_NAME1 " sudo yunohost app install kanboard -a \"domain= $DOMAIN &path=/kanboard&admin= $USER_DEMO &is_public=1\" " | tee -a " $LOG_BUILD_LXC "
# Nextcloud
2018-01-05 17:41:45 +01:00
echo -e "\e[36mInstallation de nextcloud\e[0m" | tee -a " $LOG_BUILD_LXC "
2022-08-18 19:28:56 +02:00
ssh $ARG_SSH $LXC_NAME1 " sudo yunohost app install nextcloud -a \"domain= $DOMAIN &path=/nextcloud&admin= $USER_DEMO &user_home=0&is_public=1\" " | tee -a " $LOG_BUILD_LXC "
2018-08-26 13:40:41 +02:00
# Opensondage
2016-12-17 19:31:44 +01:00
echo -e "\e[36mInstallation de opensondage\e[0m" | tee -a " $LOG_BUILD_LXC "
2018-08-26 13:40:41 +02:00
ssh $ARG_SSH $LXC_NAME1 " sudo yunohost app install opensondage -a \"domain= $DOMAIN &path=/date&admin= $USER_DEMO &language=en&is_public=1\" " | tee -a " $LOG_BUILD_LXC "
# Phpmyadmin
2016-12-17 19:31:44 +01:00
echo -e "\e[36mInstallation de phpmyadmin\e[0m" | tee -a " $LOG_BUILD_LXC "
2016-09-18 19:23:54 +02:00
ssh $ARG_SSH $LXC_NAME1 " sudo yunohost app install phpmyadmin -a \"domain= $DOMAIN &path=/phpmyadmin&admin= $USER_DEMO \" " | tee -a " $LOG_BUILD_LXC "
2018-08-26 13:40:41 +02:00
# Piwigo
2018-01-05 17:41:45 +01:00
echo -e "\e[36mInstallation de piwigo\e[0m" | tee -a " $LOG_BUILD_LXC "
ssh $ARG_SSH $LXC_NAME1 " sudo yunohost app install piwigo -a \"domain= $DOMAIN &path=/piwigo&admin= $USER_DEMO &is_public=1&language=en\" " | tee -a " $LOG_BUILD_LXC "
2018-08-26 13:40:41 +02:00
# Rainloop
2017-07-01 22:25:04 +02:00
echo -e "\e[36mInstallation de rainloop\e[0m" | tee -a " $LOG_BUILD_LXC "
2022-08-18 19:28:56 +02:00
ssh $ARG_SSH $LXC_NAME1 " sudo yunohost app install rainloop -a \"domain= $DOMAIN &path=/rainloop&is_public=No&password= $PASSWORD_DEMO &ldap=Yes&language=en\" " | tee -a " $LOG_BUILD_LXC "
2018-08-26 13:40:41 +02:00
# Roundcube
2016-12-17 19:31:44 +01:00
echo -e "\e[36mInstallation de roundcube\e[0m" | tee -a " $LOG_BUILD_LXC "
2020-12-10 11:58:31 +01:00
ssh $ARG_SSH $LXC_NAME1 " sudo yunohost app install roundcube -a \"domain= $DOMAIN &path=/webmail&with_carddav=0&with_enigma=0&language=en_GB\" " | tee -a " $LOG_BUILD_LXC "
2018-08-26 13:40:41 +02:00
# Searx
2016-12-17 19:31:44 +01:00
echo -e "\e[36mInstallation de searx\e[0m" | tee -a " $LOG_BUILD_LXC "
2018-08-26 13:40:41 +02:00
ssh $ARG_SSH $LXC_NAME1 " sudo yunohost app install searx -a \"domain= $DOMAIN &path=/searx&is_public=1\" " | tee -a " $LOG_BUILD_LXC "
# Shellinabox
2016-12-17 19:31:44 +01:00
echo -e "\e[36mInstallation de shellinabox\e[0m" | tee -a " $LOG_BUILD_LXC "
2016-09-18 19:23:54 +02:00
ssh $ARG_SSH $LXC_NAME1 " sudo yunohost app install shellinabox -a \"domain= $DOMAIN &path=/ssh\" " | tee -a " $LOG_BUILD_LXC "
2018-08-26 13:40:41 +02:00
# Strut
2016-12-17 19:31:44 +01:00
echo -e "\e[36mInstallation de strut\e[0m" | tee -a " $LOG_BUILD_LXC "
2018-08-26 13:40:41 +02:00
ssh $ARG_SSH $LXC_NAME1 " sudo yunohost app install strut -a \"domain= $DOMAIN &path=/strut&is_public=1\" " | tee -a " $LOG_BUILD_LXC "
# Transmission
2016-12-17 19:31:44 +01:00
echo -e "\e[36mInstallation de transmission\e[0m" | tee -a " $LOG_BUILD_LXC "
2016-09-18 19:23:54 +02:00
ssh $ARG_SSH $LXC_NAME1 " sudo yunohost app install transmission -a \"domain= $DOMAIN &path=/torrent\" " | tee -a " $LOG_BUILD_LXC "
2018-08-26 13:40:41 +02:00
# Ttrss
2016-12-17 19:31:44 +01:00
echo -e "\e[36mInstallation de ttrss\e[0m" | tee -a " $LOG_BUILD_LXC "
2022-08-18 19:28:56 +02:00
ssh $ARG_SSH $LXC_NAME1 " sudo yunohost app install ttrss -a \"domain= $DOMAIN &path=/ttrss&is_public=1\" " | tee -a " $LOG_BUILD_LXC "
2018-08-26 13:40:41 +02:00
# Wallabag
2016-12-17 19:31:44 +01:00
echo -e "\e[36mInstallation de wallabag\e[0m" | tee -a " $LOG_BUILD_LXC "
2018-08-26 13:40:41 +02:00
ssh $ARG_SSH $LXC_NAME1 " sudo yunohost app install wallabag2 -a \"domain= $DOMAIN &path=/wallabag&admin= $USER_DEMO \" " | tee -a " $LOG_BUILD_LXC "
# Wordpress
2016-12-17 19:31:44 +01:00
echo -e "\e[36mInstallation de wordpress\e[0m" | tee -a " $LOG_BUILD_LXC "
2018-08-26 14:37:15 +02:00
ssh $ARG_SSH $LXC_NAME1 " sudo yunohost app install wordpress -a \"domain= $DOMAIN &path=/blog&admin= $USER_DEMO &language=en_US&multisite=0&is_public=1\" " | tee -a " $LOG_BUILD_LXC "
2018-08-26 13:40:41 +02:00
# Zerobin
2016-12-17 19:31:44 +01:00
echo -e "\e[36mInstallation de zerobin\e[0m" | tee -a " $LOG_BUILD_LXC "
2018-08-26 13:40:41 +02:00
ssh $ARG_SSH $LXC_NAME1 " sudo yunohost app install zerobin -a \"domain= $DOMAIN &path=/zerobin&is_public=1\" " | tee -a " $LOG_BUILD_LXC "
2016-09-18 19:23:54 +02:00
2016-10-14 00:56:22 +02:00
# Désactive l'accès à shellinabox
sudo rm " /var/lib/lxc/ $LXC_NAME1 /rootfs/etc/nginx/conf.d/ $DOMAIN .d/shellinabox.conf " # Supprime le fichier de conf nginx de shellinabox pour empêcher d'y accéder.
ssh $ARG_SSH $LXC_NAME1 "sudo yunohost app setting shellinabox path -d && sudo yunohost app setting shellinabox domain -d && sudo yunohost app ssowatconf" | tee -a " $LOG_BUILD_LXC "
# Indique le couple login/mot de passe demo/demo
2016-11-06 15:17:36 +01:00
# Et ajoute demo/demo par défaut dans les champs d'identification
2019-06-23 14:01:19 +02:00
sed -i " 3i\<center>Login: $USER_DEMO / Password: $PASSWORD_DEMO </center> " /var/lib/lxc/yunohost_demo1/rootfs/usr/share/ssowat/portal/login.html # Sur le login du portail
sed -i " s/id=\"user\" type=\"text\" name=\"user\"/id=\"user\" type=\"text\" name=\"user\" value=\" $USER_DEMO \"/ " /var/lib/lxc/yunohost_demo1/rootfs/usr/share/ssowat/portal/login.html
sed -i " s/id=\"password\" type=\"password\" name=\"password\"/id=\"password\" type=\"password\" name=\"password\" value=\" $PASSWORD_DEMO \"/ " /var/lib/lxc/yunohost_demo1/rootfs/usr/share/ssowat/portal/login.html
2016-11-06 15:17:36 +01:00
2022-08-30 19:52:44 +02:00
#sed -i "17i\   Password: $YUNO_PWD" /var/lib/lxc/yunohost_demo1/rootfs/usr/share/yunohost/admin/views/login.ms # Et sur le login admin
#sed -i "s/type=\"password\" id=\"password\" name=\"password\"/type=\"password\" id=\"password\" name=\"password\" value=\"$YUNO_PWD\"/" /var/lib/lxc/yunohost_demo1/rootfs/usr/share/yunohost/admin/views/login.ms
2016-10-14 00:56:22 +02:00
2016-11-06 14:44:47 +01:00
# Désactive l'installation d'app custom
2020-12-10 10:37:01 +01:00
sed -i "s@<a role=\"button\" class=\"btn btn-success slide\">{{t 'install'}}</a>@<a role=\"\" class=\"btn btn-success slide\">{{t 'install'}}</a>@g" /var/lib/lxc/yunohost_demo1/rootfs/usr/share/yunohost/admin/views/app/app_catalog_category.ms
2016-11-06 14:44:47 +01:00
# Désactive l'ajout de domaine, pour éviter surtout les nohost
2020-12-10 10:37:01 +01:00
sed -i "s@<input type=\"submit\" role=\"button\" class=\"btn btn-success slide back\" value=\"{{t 'add'}}\">@<input type=\"\" role=\"\" class=\"btn btn-success slide back\" value=\"{{t 'add'}}\">@g" /var/lib/lxc/yunohost_demo1/rootfs/usr/share/yunohost/admin/views/domain/domain_add.ms
2016-11-06 14:44:47 +01:00
2016-09-18 19:23:54 +02:00
# ********
2016-08-12 01:38:13 +02:00
2016-12-17 19:31:44 +01:00
echo -e "\e[1m> Arrêt de la machine virtualisée\e[0m" | tee -a " $LOG_BUILD_LXC "
2016-08-12 17:35:14 +02:00
sudo lxc-stop -n $LXC_NAME1 >> " $LOG_BUILD_LXC " 2>& 1
2016-08-12 01:38:13 +02:00
2016-12-17 19:31:44 +01:00
echo -e "\e[1m> Suppression des règles de parefeu\e[0m" | tee -a " $LOG_BUILD_LXC "
2016-08-12 01:38:13 +02:00
sudo iptables -D FORWARD -i lxc_demo -o eth0 -j ACCEPT >> " $LOG_BUILD_LXC " 2>& 1
sudo iptables -D FORWARD -i eth0 -o lxc_demo -j ACCEPT >> " $LOG_BUILD_LXC " 2>& 1
sudo iptables -t nat -D POSTROUTING -s $PLAGE_IP .0/24 -j MASQUERADE >> " $LOG_BUILD_LXC " 2>& 1
sudo ifdown --force lxc_demo >> " $LOG_BUILD_LXC " 2>& 1
2016-12-17 19:31:44 +01:00
echo -e "\e[1m> Création d'un snapshot\e[0m" | tee -a " $LOG_BUILD_LXC "
2016-08-12 17:35:14 +02:00
sudo lxc-snapshot -n $LXC_NAME1 >> " $LOG_BUILD_LXC " 2>& 1
# Il sera nommé snap0 et stocké dans /var/lib/lxcsnaps/$LXC_NAME1/snap0/
2016-12-17 19:31:44 +01:00
echo -e "\e[1m> Clone la machine\e[0m" | tee -a " $LOG_BUILD_LXC "
2018-08-28 14:34:03 +02:00
sudo lxc-copy --name= $LXC_NAME1 --newname= $LXC_NAME2 >> " $LOG_BUILD_LXC " 2>& 1
2016-08-12 01:38:13 +02:00
2016-12-17 19:31:44 +01:00
echo -e "\e[1m> Modification de l'ip du clone\e[0m" | tee -a " $LOG_BUILD_LXC "
2016-08-13 19:31:36 +02:00
sudo sed -i " s@address $IP_LXC1 @address $IP_LXC2 @ " /var/lib/lxc/$LXC_NAME2 /rootfs/etc/network/interfaces >> " $LOG_BUILD_LXC " 2>& 1
2016-12-17 19:31:44 +01:00
echo -e "\e[1m> Et le nom du veth\e[0m" | tee -a " $LOG_BUILD_LXC "
2016-08-13 22:05:38 +02:00
sudo sed -i " s@^lxc.network.veth.pair = $LXC_NAME1 @lxc.network.veth.pair = $LXC_NAME2 @ " /var/lib/lxc/$LXC_NAME2 /config >> " $LOG_BUILD_LXC " 2>& 1
2016-12-17 19:31:44 +01:00
echo -e "\e[1m> Et enfin renseigne /etc/hosts sur le clone\e[0m" | tee -a " $LOG_BUILD_LXC "
2016-08-16 15:36:12 +02:00
sudo sed -i " s@^127.0.0.1 $LXC_NAME1 @127.0.0.1 $LXC_NAME2 @ " /var/lib/lxc/$LXC_NAME2 /rootfs/etc/hosts >> " $LOG_BUILD_LXC " 2>& 1
2016-08-13 19:31:36 +02:00
2016-12-17 19:31:44 +01:00
echo -e "\e[1m> Mise en place du cron de switch\e[0m"
2016-08-16 15:36:12 +02:00
echo | sudo tee /etc/cron.d/demo_switch <<EOF > /dev/null
2016-08-12 18:07:01 +02:00
# Switch des conteneurs toutes les $TIME_TO_SWITCH minutes
2016-08-13 19:31:36 +02:00
*/$TIME_TO_SWITCH * * * * root $script_dir /demo_switch.sh >> " $script_dir /demo_switch.log " 2>& 1
2016-08-12 18:07:01 +02:00
EOF
2016-12-17 19:31:44 +01:00
echo -e "\e[1m> Et du cron d'upgrade\e[0m"
2016-08-16 15:36:12 +02:00
echo | sudo tee /etc/cron.d/demo_upgrade <<EOF > /dev/null
2016-08-13 22:05:38 +02:00
# Vérifie les mises à jour des conteneurs de demo, lorsqu'ils ne sont pas utilisés, à partir de 3h2minutes chaque nuit. Attention à rester sur un multiple du temps de switch.
2016-09-18 19:23:54 +02:00
2 3 * * * root $script_dir /demo_upgrade.sh >> " $script_dir /demo_upgrade.log " 2>& 1
2016-08-13 01:08:44 +02:00
EOF
2016-08-12 18:07:01 +02:00
2016-12-17 19:31:44 +01:00
echo -e "\e[1m> Démarrage de la démo\e[0m"
2016-08-13 01:08:44 +02:00
" $script_dir /demo_start.sh "
2016-08-13 19:31:36 +02:00
2016-09-18 19:23:54 +02:00
# echo "> Mise en place du service"
echo | sudo tee /etc/systemd/system/lxc_demo.service <<EOF > /dev/null
[ Unit]
Description = Start and stop script for lxc demo container
Requires = network.target
After = network.target
[ Service]
Type = forking
ExecStart = $script_dir /demo_start.sh
2022-09-08 23:58:03 +02:00
RemainAfterExit = true
2016-09-18 19:23:54 +02:00
ExecStop = $script_dir /demo_stop.sh
ExecReload = $script_dir /demo_start.sh
[ Install]
WantedBy = multi-user.target
EOF
# Démarrage automatique du service
sudo systemctl enable lxc_demo.service
sudo service lxc_demo start
2016-08-13 19:31:36 +02:00
# Après le démarrage du premier conteneur, fait un snapshot du deuxième.
2016-12-17 19:31:44 +01:00
echo -e "\e[1m> Création d'un snapshot pour le 2e conteneur\e[0m" | tee -a " $LOG_BUILD_LXC "
2016-08-13 19:31:36 +02:00
sudo lxc-snapshot -n $LXC_NAME2 >> " $LOG_BUILD_LXC " 2>& 1
# Il sera nommé snap0 et stocké dans /var/lib/lxcsnaps/$LXC_NAME2/snap0/
