#!/bin/bash # postinst script for #PACKAGE# # # see: dh_installdeb(1) set -e # summary of how this script can be called: # * `configure' # * `abort-upgrade' # * `abort-remove' `in-favour' # # * `abort-remove' # * `abort-deconfigure' `in-favour' # `removing' # # for details, see https://www.debian.org/doc/debian-policy/ or # the debian-policy package case "$1" in configure) ### START gather all the info from the box and generate the variabels source /etc/wit-net.conf if [ -z $LOOPBACKv4 ]; then echo "LOOPBACK not provided by DHCP" exit 2 fi export TIER_ID=$(echo $LOOPBACKv4 | cut -d . -f 3) export NODE_ID=$(echo $LOOPBACKv4 | cut -d . -f 4) export DOMAINNAME=${HOSTNAME#*.} if [ -z "$TIER_ID" ]; then echo "Unable to autodetect TIER_ID, looks like we deal with a special node, please set in environment" exit 2 fi if [ -z "$DOMAINNAME" ]; then echo "Unable to autodetect DOMAINNAME, looks like we deal with a special case, please set in environment and/or update the code" exit 2 fi export NODE_ASN="4200$(printf "%03d" $TIER_ID)$(printf "%03d" $NODE_ID)" export LOOPBACKv6="2604:bbc0::$TIER_ID:$NODE_ID" MGMT_MAC=$(ip -br link show dev $(ip -4 -br addr | grep 10.0. | awk '{ print $1 }') | awk '{ print $3 }') ## END variables ## START writing config files sed -i -e '/#*PasswordAuthentication /d' /etc/ssh/sshd_config echo "PasswordAuthentication no" >>/etc/ssh/sshd_config echo "iface lo inet static" > /etc/network/interfaces.d/lo echo " address ${LOOPBACKv4}/32" >> /etc/network/interfaces.d/lo echo "" >> /etc/network/interfaces.d/lo echo "iface lo inet6 static" >> /etc/network/interfaces.d/lo echo " address ${LOOPBACKv6}/128" >> /etc/network/interfaces.d/lo sed -i -e "s/FRRROUTERID/${LOOPBACKv4}/" -e "s/NODEASN/${NODE_ASN}/" /etc/frr/frr.conf.wit chown frr.frr /etc/frr/frr.conf.wit /etc/frr/daemons.wit sed -i -e "s/HOSTNAME\.DOMAINNAME/${HOSTNAME}/" /etc/ipsec.conf.wit echo ": RSA ${HOSTNAME}.key" >/etc/ipsec.secrets chmod 600 /etc/ipsec.secrets echo 'SUBSYSTEM=="net", ACTION=="add", DRIVERS=="?*", ATTR{address}=="'$MGMT_MAC'", ATTR{type}=="1", NAME="mgmt1"' >/etc/udev/rules.d/70-persistent-net.rules i=0 for nic in $(ip -br link | awk '{ print $1 }'); do if ethtool $nic | grep -q 10000; then i=$((i+1)) echo 'SUBSYSTEM=="net", ACTION=="add", DRIVERS=="?*", ATTR{address}=="'$(cat /sys/class/net/$nic/address)'", ATTR{type}=="1", NAME="feth'$i'"' >>/etc/udev/rules.d/70-persistent-net.rules fi done sed -i "/$MGMT_MAC.*feth./d" /etc/udev/rules.d/70-persistent-net.rules sed -i -e "/debcore1/d" -e "/${HOSTNAME%%.*}/d" -e "/${LOOPBACKv4}/d" /etc/hosts echo -e "${LOOPBACKv4}\t${HOSTNAME}\t${HOSTNAME%%.*}" >>/etc/hosts sed -i -e '/GRUB_CMDLINE_LINUX_DEFAULT=/d' -e '/GRUB_CMDLINE_LINUX=/d' -e '/GRUB_SERIAL_COMMAND=/d' -e '/GRUB_TERMINAL=/d' /etc/default/grub echo -e 'GRUB_CMDLINE_LINUX_DEFAULT=""\nGRUB_CMDLINE_LINUX="console=tty0 console=ttyS1,115200n8"\nGRUB_TERMINAL=serial\nGRUB_SERIAL_COMMAND="serial --speed=115200 --unit=1 --word=8 --parity=no --stop=1"' >>/etc/default/grub ## END config file section ## START configuring services as we need it systemctl enable firewall systemctl restart systemd-timesyncd systemctl restart ssh update-grub sysctl -p /etc/sysctl.d/10-frr.conf ## END services section ;; abort-upgrade|abort-remove|abort-deconfigure) ;; *) echo "postinst called with unknown argument \`$1'" >&2 exit 1 ;; esac # dh_installdeb will replace this with shell code automatically # generated by other debhelper scripts. #DEBHELPER# exit 0