summaryrefslogtreecommitdiffstats
path: root/retiolum/scripts/tinc_setup/new_install.sh
blob: 87c20e570f7bb4fe6dfd72e86b97390214a9189e (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
#!/bin/sh
main(){

  #get sudo
  if test "${nosudo-false}" != true -a `id -u` != 0; then
    echo "we're going sudo..." >&2
    exec sudo -E "$0" "$@"
    exit 23 # go to hell
  fi
  set -euf
  #
  SUBNET4=${SUBNET4:-10.243}
  SUBNET6=${SUBNET6:-42}
  TEMPDIR=${TEMPDIR:-auto}
  TINCDIR=${TINCDIR:-auto}
  exists() { type "$1" >/dev/null 2>/dev/null; }

  if exists hostname ;then SYSHOSTN=${HOSTNAME:-$(hostname)}
  elif exists uci    ;then SYSHOSTN=$(uci get system.@system[0].hostname)
  elif [ -e /etc/hostname ]   ;then SYSHOSTN=$(cat /etc/hostname)
  else                              SYSHOSTN="unknown"
  fi

  #overwrite `found` hostname
  HOSTN=${HOSTN:-$SYSHOSTN}
  NETNAME=${NETNAME:-retiolum}
  MASK4=${MASK4:-16}
  MASK6=${MASK6:-16}
  RMASK=${RMASK:-255.255.0.0}
  URL=${URL:-http://euer.krebsco.de/retiolum/hosts.tar.gz}
  SURL=${SURL:-http://euer.krebsco.de/retiolum/supernodes.tar.gz}

  IRCCHANNEL=${IRCCHANNEL:-"#krebs_incoming"}
  IRCSERVER=${IRCSERVER:-"irc.freenode.net"}
  IRCPORT=${IRCPORT:-6667}

  OS=${OS:-0}
  TELNET=${TELNET:-}

  IP4=${IP4:-0}
  IP6=${IP6:-0}

  RAND4=1
  RAND6=1

  if $(echo $HOSTN | grep -q -); then
    echo 'invalid hostname, - not allowed'
    exit 1
  fi


  if [ $IP4 -eq 0 ]; then
    RAND4=1
  elif ! check_ip_valid4 $IP4; then
    echo 'ip4 is invalid'
    exit 1
  fi
  if [ $IP6 -eq 0 ]; then
    RAND6=1
  elif ! check_ip_valid6 $IP6; then
    echo 'ip6 is invalid'
    exit 1
  fi

  #find OS
  if [ $OS -eq 0 ]; then
    find_os
  fi
  if [ -z "$TELNET" ]; then
    find_telnet
  fi
  #check if everything is installed
  if ! exists awk ; then
    echo "Please install awk"
    exit 1
  fi

  if ! exists curl ; then
    if ! exists wget ; then
      echo "Please install curl or wget"
      exit 1
    else
      LOADER='wget -O-'
      HEAD_LOADER="$LOADER --spider"
    fi
  else
    LOADER=curl
    HEAD_LOADER="$LOADER -I"
  fi

  if ! $HEAD_LOADER $SURL >/dev/null 2>/dev/null ;then
    echo "Cannot find supernode package, check if your internet is working"
    exit 1
  fi

  #check if everything is installed
  if [ $OS = 'android' ]; then
    if ! test -e /data/data/org.poirsouille.tinc_gui/files/tincd; then
      echo "Please install tinc-gui"
      exit 1
    else
      TINCBIN=/data/data/org.poirsouille.tinc_gui/files/tincd
      DEV="/dev/tun"
      if [ $TINCDIR = 'auto' ]; then TINCDIR="/usr/local/etc/tinc" ;fi
      if [ $TEMPDIR = 'auto' ]; then TEMPDIR="/storage/sdcard0/tinc-fu" ;fi
      mount -o remount,rw /
      mount -o remount,rw /system
    fi
  elif [ $OS = 'osx' ]; then
    if ! exists tincd >/dev/null; then
      echo "Please install tinc"
      exit 1
    else
      TINCBIN=tincd
      DEV="/dev/net/tun"
      if [ $TINCDIR = 'auto' ]; then TINCDIR="/usr/local/etc/tinc" ;fi
      if [ $TEMPDIR = 'auto' ]; then TEMPDIR="/tmp/tinc-install-fu" ;fi
    fi
  else
    if ! exists tincd >/dev/null; then
      echo "Please install tinc"
      exit 1
    else
      TINCBIN=tincd
      DEV="/dev/net/tun"
      if [ $TINCDIR = 'auto' ]; then TINCDIR="/etc/tinc" ;fi
      if [ $TEMPDIR = 'auto' ]; then TEMPDIR="/tmp/tinc-install-fu" ;fi
    fi
  fi

  #generate full subnet information for v4

  #test if tinc directory already exists
  if test -e $TINCDIR/$NETNAME; then
    echo "tinc config directory $TINCDIR/$NETNAME does already exist. (backup and) delete config directory and restart"
    exit 1
  fi

  #get tinc-hostfiles
  mkdir -p $TEMPDIR/hosts
  $LOADER $URL | tar zx -C $TEMPDIR/hosts/

  #check for free ip
  #version 4
  until check_ip_taken $IP4; do
    if [ $RAND4 -eq 1 ]; then
      IP4="$SUBNET4.$(( $(head /dev/urandom | tr -dc "123456789" | head -c3) %255)).$(( $(head /dev/urandom | tr -dc "123456789" | head -c3) %255))"
    else
      printf 'choose new ip: '
      read IP4
      while !  check_ip_valid4 $IP4; do
        printf 'the ip is invalid, retard, choose a valid ip: '
        read IP4
      done
    fi
  done

  #version 6
  until check_ip_taken $IP6; do
    if [ $RAND6 -eq 1 ]; then
      NETLENGTH=$(expr $(expr 128 - $MASK6) / 4)
      IP6="$SUBNET6$(head /dev/urandom | tr -dc "0123456789abcdef" | head -c$NETLENGTH | sed 's/..../:&/g')" #todo: generate ip length from hostmask
    else
      printf 'ip taken, choose new ip: '

      read IP6
      while !  check_ip_valid6 $IP6; do
        printf 'the ip is invalid, retard, choose a valid ip: '
        read IP6
      done
    fi
  done


  #check for free hostname
  get_hostname $HOSTN


  #create the configs
  mkdir -p $TINCDIR/$NETNAME
  cd $TINCDIR/$NETNAME

  if [ $OS = 'openwrt' ]; then
    mkdir hosts
    $LOADER $SURL | tar xz -C hosts/
  else
    mv $TEMPDIR/hosts ./
  fi

  rm -r $TEMPDIR || echo "$TEMPDIR does not exist, skipping removal"

  echo "Subnet = $IP4" > hosts/$HOSTN
  echo "Subnet = $IP6" >> hosts/$HOSTN

  cat>tinc.conf<<EOF
Name = $HOSTN
Device = $DEV

#newer tinc features
LocalDiscovery = yes
AutoConnect = 3

#ConnectTos
ConnectTo = fastpoke
ConnectTo = pigstarter
ConnectTo = kheurop
EOF

  host2subnet $MASK4
  
  #check if ip is installed
  if exists ip >/dev/null; then
    echo 'dirname="`dirname "$0"`"' > tinc-up
    echo '' >> tinc-up
    echo 'conf=$dirname/tinc.conf' >> tinc-up
    echo '' >> tinc-up
    echo 'host=$dirname/hosts/$NAME' >> tinc-up
    echo '' >> tinc-up
    echo 'ip link set $INTERFACE up' >> tinc-up
    echo '' >> tinc-up
    echo "addr4=\$(sed -n \"s|^ *Subnet *= *\\($SUBNET4[.][^ ]*\\) *\$|\\\\1|p\" \$host)" >> tinc-up
    echo 'ip -4 addr add $addr4 dev $INTERFACE' >> tinc-up
    echo "ip -4 route add $FULLSUBNET/$MASK4 dev \$INTERFACE" >> tinc-up
    #TODO: variable for network announced
    echo "ip -4 route add 172.22.0.0/15 dev \$INTERFACE" >> tinc-up
    echo '' >> tinc-up
    echo "addr6=\$(sed -n \"s|^ *Subnet *= *\\($SUBNET6[:][^ ]*\\) *\$|\\\\1|p\" \$host)" >> tinc-up
    echo 'ip -6 addr add $addr6 dev $INTERFACE || exit 0' >> tinc-up
    echo "ip -6 route add $SUBNET6::/$MASK6 dev \$INTERFACE" >> tinc-up
  else
    echo 'dirname="`dirname "$0"`"' > tinc-up
    echo '' >> tinc-up
    echo 'conf=$dirname/tinc.conf' >> tinc-up
    echo '' >> tinc-up
    echo 'name=$(sed -n "s|^ *Name *= *\([^ ]*\) *$|\\1|p" $conf)' >> tinc-up
    echo '' >> tinc-up
    echo 'host=$dirname/hosts/$name' >> tinc-up
    echo '' >> tinc-up
    echo "addr4=\$(sed -n \"s|^ *Subnet *= *\\($SUBNET4[.][^ ]*\\) *$|\\\\1|p\" \$host)" >> tinc-up
    echo 'ifconfig $INTERFACE $addr4' >> tinc-up
    echo "route add -net $FULLSUBNET netmask $RMASK dev \$INTERFACE " >> tinc-up
  fi
  
  #fix permissions
  chmod +x tinc-up
  chown -R 0:0 .
  
  #generate keys with tinc
  if exists tinc ; then
    yes | tinc -n $NETNAME generate-keys
  else
    yes | $TINCBIN -n $NETNAME -K
  fi
  
  if [ $OS = 'android' ]; then
    mkdir /etc/tinc
    cd /
    mv $TINCDIR/$NETNAME /etc/tinc/
    cd /etc/tinc/$NETNAME
  fi
  #write to irc-channel
  NICK="${HOSTN}_$(head /dev/urandom | tr -dc "0123456789" | head -c3)"
  
  (   echo "NICK $NICK";
  echo "USER $NICK $IRCSERVER bla : $NICK";
  echo "JOIN $IRCCHANNEL";
  sleep 23;
  echo "PRIVMSG $IRCCHANNEL : This is $HOSTN";
  sed "s/^\(.*\)/PRIVMSG $IRCCHANNEL : \1/" hosts/$HOSTN;
  sleep 5; ) | $TELNET $IRCSERVER $IRCPORT
  
  
  # finish what you have begun!
  tincd -n $NETNAME
  echo "if you are new, go into irc://freenode/krebs and introduce yourself"
  echo "do not forget to add the host to the 'services' repository"
}


#convert hostmask to subnetmask only version 4
host2subnet()
{
  NEEDDOTSINSUB=$(expr 3 - $( echo $SUBNET4 | tr -C -d . | wc -c))
  case $NEEDDOTSINSUB in
    3) FULLSUBNET=$SUBNET4.0.0.0 ;;
    2) FULLSUBNET=$SUBNET4.0.0 ;;
    1) FULLSUBNET=$SUBNET4.0 ;;
    0) FULLSUBNET=$SUBNET4 ;;
    *) echo "cannot read subnet" && exit 1;;
    esac
}

#check if ip is valid ipv4 function
check_ip_valid4()
{
  if [ "$(echo $1 | awk -F"\." ' $0 ~ /^([0-9]{1,3}\.){3}[0-9]{1,3}$/ && $1 <=255 && $2 <= 255 && $3 <= 255 && $4 <= 255 ' 2>/dev/null)" == "$1" ] && [ ${1:0:${#SUBNET4}} == $SUBNET4 ]
  then
    return 0
  else
    return 1
  fi
}

#check if ip is valid ipv6 function
check_ip_valid6()
{
  if [ "$(echo $1 | awk -F"." ' $0 ~ /^([0-9a-fA-F]{1,4}\:){7}[0-9a-fA-F]{1,4}$/' 2>/dev/null)" == $1 ] && [ ${1:0:${#SUBNET6}} == $SUBNET6 ]
  then
    return 0
  else
    return 1
  fi
}

#check if ip is taken function
check_ip_taken()
{
  if grep -q -r -E "$1(#|/)" $TEMPDIR/hosts/ ;then
    return 1
  else
    return 0
  fi
}

#if hostname is taken, count upwards until it isn't taken function
get_hostname()
{
  TSTFILE=$TEMPDIR/hosts/$1
  LCOUNTER=0
  if test -e $TSTFILE; then
    while test -e $TSTFILE; do
      : $((LCOUNTER+=1))
      TSTFILE=$TEMPDIR/hosts/$1$LCOUNTER
    done
    HOSTN=$1$LCOUNTER
  else
    HOSTN=$1
  fi
}

#os autodetection
find_os()
{
  if grep -qe 'Linux' /etc/*release 2>/dev/null || grep -qe 'Linux' /etc/issue 2>/dev/null; then
    OS='linux'
  elif test -e /etc/preferred-apps/google.xml; then
    OS='android'
  elif test -e /etc/openwrt_release; then
    OS='openwrt'
  elif uname -s | grep -qi 'darwin'; then
    OS='osx'
  else
    echo "Cannot determine your operating system, falling back to Linux"
    OS='linux'
  fi
}

find_telnet(){
  if exists telnet >/dev/null;then
    TELNET="`command -v telnet`"
  elif exists busybox >/dev/null;then
    TELNET="`command -v busybox` telnet"
  else
    echo "cannot find telnet binary, please install either telnet-client or busybox"
    echo "bailing out!"
    exit 1
  fi
}
main