summaryrefslogtreecommitdiffstats
path: root/retiolum/scripts/tinc_setup/new_install.sh
blob: 4884f7fed87c364f9ddb1682fb3c926e20026a12 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
#!/bin/sh

#get sudo
if test "${nosudo-false}" != true -a `id -u` != 0; then
  echo "we're going sudo..." >&2
  exec sudo -E "$0" "$@"
  exit 23 # go to hell
fi
set -euf
#
SUBNET4=${SUBNET4:-10.243}
SUBNET6=${SUBNET6:-42}
TEMPDIR=${TEMPDIR:-auto}
TINCDIR=${TINCDIR:-auto}
exists() { type "$1" >/dev/null 2>/dev/null; }

if exists hostname ;then SYSHOSTN=${HOSTNAME:-$(hostname)}
elif exists uci    ;then SYSHOSTN=$(uci get system.@system[0].hostname)
elif [ -e /etc/hostname ]   ;then SYSHOSTN=$(cat /etc/hostname)
else                              SYSHOSTN="unknown"
fi

#overwrite `found` hostname
HOSTN=${HOSTN:-$SYSHOSTN}
NETNAME=${NETNAME:-retiolum}
MASK4=${MASK4:-16}
MASK6=${MASK6:-16}
RMASK=${RMASK:-255.255.0.0}
URL=${URL:-http://euer.krebsco.de/retiolum/hosts.tar.gz}
SURL=${SURL:-http://euer.krebsco.de/retiolum/supernodes.tar.gz}

IRCCHANNEL=${IRCCHANNEL:-"#krebs"}
IRCSERVER=${IRCSERVER:-"irc.freenode.net"}
IRCPORT=${IRCPORT:-6667}

OS=${OS:-0}

IP4=${IP4:-0}
IP6=${IP6:-0}

RAND4=1
RAND6=1

#convert hostmask to subnetmask only version 4
host2subnet()
{
    NEEDDOTSINSUB=$(expr 3 - $( echo $SUBNET4 | tr -C -d . | wc -c))
    case $NEEDDOTSINSUB in
        3) FULLSUBNET=$SUBNET4.0.0.0 ;;
        2) FULLSUBNET=$SUBNET4.0.0 ;;
        1) FULLSUBNET=$SUBNET4.0 ;;
        0) FULLSUBNET=$SUBNET4 ;;
        *) echo "cannot read subnet" && exit 1;;
    esac
}

#check if ip is valid ipv4 function
check_ip_valid4()
{
    if [ "$(echo $1 | awk -F"\." ' $0 ~ /^([0-9]{1,3}\.){3}[0-9]{1,3}$/ && $1 <=255 && $2 <= 255 && $3 <= 255 && $4 <= 255 ' 2>/dev/null)" == "$1" ] && [ ${1:0:${#SUBNET4}} == $SUBNET4 ]
    then
        return 0
    else
        return 1
    fi
}

#check if ip is valid ipv6 function
check_ip_valid6()
{
    if [ "$(echo $1 | awk -F"." ' $0 ~ /^([0-9a-fA-F]{1,4}\:){7}[0-9a-fA-F]{1,4}$/' 2>/dev/null)" == $1 ] && [ ${1:0:${#SUBNET6}} == $SUBNET6 ]
    then
        return 0
    else
        return 1
    fi
}

#check if ip is taken function
check_ip_taken()
{
    if grep -q -r -E "$1(#|/)" $TEMPDIR/hosts/ ;then
        return 1
    else
        return 0
    fi
}

#if hostname is taken, count upwards until it isn't taken function
get_hostname()
{
    TSTFILE=$TEMPDIR/hosts/$1
    LCOUNTER=0
    if test -e $TSTFILE; then
        while test -e $TSTFILE; do
            : $((LCOUNTER+=1))
            TSTFILE=$TEMPDIR/hosts/$1$LCOUNTER
        done
        HOSTN=$1$LCOUNTER
    else
        HOSTN=$1
    fi
}

#os autodetection
find_os()
{
    if grep -qe 'Linux' /etc/*release 2>/dev/null || grep -qe 'Linux' /etc/issue 2>/dev/null; then
        OS='linux'
    elif exists getprop ; then
        OS='android'
    elif test -e /etc/openwrt_release; then
        OS='openwrt'
    elif uname -s | grep -qi 'darwin'; then
        OS='osx'
    else
        echo "Cannot determine your operating system, falling back to Linux"
        OS='linux'
    fi
}

if [ $IP4 -eq 0 ]; then
    RAND4=1
elif ! check_ip_valid4 $IP4; then
    echo 'ip4 is invalid'
    exit 1
fi
if [ $IP6 -eq 0 ]; then
    RAND6=1
elif ! check_ip_valid6 $IP6; then
    echo 'ip6 is invalid'
    exit 1
fi

#find OS
if [ $OS -eq 0 ]; then
    find_os
fi

#check if everything is installed
if ! exists awk ; then
    echo "Please install awk"
    exit 1
fi

if ! exists curl ; then
    if ! exists wget ; then
        echo "Please install curl or wget"
        exit 1
    else
        LOADER='wget -O-'
    fi
else
    LOADER=curl
fi

if ! $(ping -c 1 -W 5 euer.krebsco.de 1>/dev/null) ;then
    echo "Cant reach euer, check if your internet is working"
    exit 1
fi

#check if everything is installed
if [ $OS = 'android' ]; then
    if ! test -e /data/data/org.poirsouille.tinc_gui/files/tincd; then
        echo "Please install tinc-gui"
        exit 1
    else
        TINCBIN=/data/data/org.poirsouille.tinc_gui/files/tincd
        DEV="/dev/tun"
        if [ $TINCDIR = 'auto' ]; then TINCDIR="/usr/local/etc/tinc" ;fi
        if [ $TEMPDIR = 'auto' ]; then TEMPDIR="/storage/sdcard0/tinc-fu" ;fi
        mount -o remount,rw /
        mount -o remount,rw /system
    fi
elif [ $OS = 'osx' ]; then
    if ! exists tincd >/dev/null; then
        echo "Please install tinc"
        exit 1
    else
        TINCBIN=tincd
        DEV="/dev/net/tun"
        if [ $TINCDIR = 'auto' ]; then TINCDIR="/usr/local/etc/tinc" ;fi
        if [ $TEMPDIR = 'auto' ]; then TEMPDIR="/tmp/tinc-install-fu" ;fi
    fi
else
    if ! exists tincd >/dev/null; then
        echo "Please install tinc"
        exit 1
    else
        TINCBIN=tincd
        DEV="/dev/net/tun"
        if [ $TINCDIR = 'auto' ]; then TINCDIR="/etc/tinc" ;fi
        if [ $TEMPDIR = 'auto' ]; then TEMPDIR="/tmp/tinc-install-fu" ;fi
    fi
fi

#generate full subnet information for v4

#test if tinc directory already exists
if test -e $TINCDIR/$NETNAME; then
    echo "tinc config directory $TINCDIR/$NETNAME does already exist. (backup and) delete config directory and restart"
    exit 1
fi

#get tinc-hostfiles
mkdir -p $TEMPDIR/hosts
$LOADER $URL | tar zx -C $TEMPDIR/hosts/

#check for free ip
#version 4
until check_ip_taken $IP4; do
    if [ $RAND4 -eq 1 ]; then
        IP4="$SUBNET4.$(( $(head /dev/urandom | tr -dc "123456789" | head -c3) %255)).$(( $(head /dev/urandom | tr -dc "123456789" | head -c3) %255))"
    else
        printf 'choose new ip: '
        read IP4
        while !  check_ip_valid4 $IP4; do
            printf 'the ip is invalid, retard, choose a valid ip: '
            read IP4
        done
    fi
done

#version 6
until check_ip_taken $IP6; do
    if [ $RAND6 -eq 1 ]; then
        NETLENGTH=$(expr $(expr 128 - $MASK6) / 4)
        IP6="$SUBNET6$(head /dev/urandom | tr -dc "0123456789abcdef" | head -c$NETLENGTH | sed 's/..../:&/g')" #todo: generate ip length from hostmask
    else
        printf 'ip taken, choose new ip: '

        read IP6
        while !  check_ip_valid6 $IP6; do
            printf 'the ip is invalid, retard, choose a valid ip: '
            read IP6
        done
    fi
done


#check for free hostname
get_hostname $HOSTN


#create the configs
mkdir -p $TINCDIR/$NETNAME
cd $TINCDIR/$NETNAME

if [ $OS = 'openwrt' ]; then
    mkdir hosts
    $LOADER $SURL | tar xz -C hosts/
else
    mv $TEMPDIR/hosts ./
fi

rm -r $TEMPDIR || echo "$TEMPDIR does not exist, skipping removal"

echo "Subnet = $IP4" > hosts/$HOSTN
echo "Subnet = $IP6" >> hosts/$HOSTN

cat>tinc.conf<<EOF
Name = $HOSTN
Device = $DEV

#newer tinc features
LocalDiscovery = yes
AutoConnect = 3

#ConnectTos
ConnectTo = slowpoke
ConnectTo = pigstarter
ConnectTo = pico
EOF

host2subnet $MASK4

#check if ip is installed
if exists ip >/dev/null; then
    echo 'dirname="`dirname "$0"`"' > tinc-up
    echo '' >> tinc-up
    echo 'conf=$dirname/tinc.conf' >> tinc-up
    echo '' >> tinc-up
    echo 'name=$(sed -n "s|^ *Name *= *\([^ ]*\) *$|\\1|p" $conf)' >> tinc-up
    echo '' >> tinc-up
    echo 'host=$dirname/hosts/$name' >> tinc-up
    echo '' >> tinc-up
    echo 'ip link set $INTERFACE up' >> tinc-up
    echo '' >> tinc-up
    echo "addr4=\$(sed -n \"s|^ *Subnet *= *\\($SUBNET4[.][^ ]*\\) *\$|\\\\1|p\" \$host)" >> tinc-up
    echo 'ip -4 addr add $addr4 dev $INTERFACE' >> tinc-up
    echo "ip -4 route add $FULLSUBNET/$MASK4 dev \$INTERFACE" >> tinc-up
    echo '' >> tinc-up
    echo "addr6=\$(sed -n \"s|^ *Subnet *= *\\($SUBNET6[:][^ ]*\\) *\$|\\\\1|p\" \$host)" >> tinc-up
    echo 'ip -6 addr add $addr6 dev $INTERFACE' >> tinc-up
    echo "ip -6 route add $SUBNET6::/$MASK6 dev \$INTERFACE" >> tinc-up
else
    echo 'dirname="`dirname "$0"`"' > tinc-up
    echo '' >> tinc-up
    echo 'conf=$dirname/tinc.conf' >> tinc-up
    echo '' >> tinc-up
    echo 'name=$(sed -n "s|^ *Name *= *\([^ ]*\) *$|\\1|p" $conf)' >> tinc-up
    echo '' >> tinc-up
    echo 'host=$dirname/hosts/$name' >> tinc-up
    echo '' >> tinc-up
    echo "addr4=\$(sed -n \"s|^ *Subnet *= *\\($SUBNET4[.][^ ]*\\) *$|\\\\1|p\" \$host)" >> tinc-up
    echo 'ifconfig $INTERFACE $addr4' >> tinc-up
    echo "route add -net $FULLSUBNET netmask $RMASK dev \$INTERFACE " >> tinc-up
fi

#fix permissions
chmod +x tinc-up
chown -R 0:0 .

#generate keys with tinc
if exists tincctl ; then
    yes | tincctl -n $NETNAME generate-keys
    cat rsa_key.pub >> hosts/$HOSTN
else
    yes | $TINCBIN -n $NETNAME -K
fi

if [ $OS = 'android' ]; then
    mkdir /etc/tinc
    cd /
    mv $TINCDIR/$NETNAME /etc/tinc/
    cd /etc/tinc/$NETNAME
fi
#write to irc-channel
NICK="${HOSTN}_$(head /dev/urandom | tr -dc "0123456789" | head -c3)"

(   echo "NICK $NICK";
    echo "USER $NICK $IRCSERVER bla : $NICK";
    echo "JOIN $IRCCHANNEL";
    sleep 23;
    echo "PRIVMSG $IRCCHANNEL : This is $HOSTN";
    sed "s/^\(.*\)/PRIVMSG $IRCCHANNEL : \1/" hosts/$HOSTN;
    sleep 5; ) | telnet $IRCSERVER $IRCPORT


# finish what you have begun!
tincd -n $NETNAME