forked from firewalla/firewalla
-
Notifications
You must be signed in to change notification settings - Fork 0
/
Copy pathbuildraw4
executable file
·183 lines (144 loc) · 7.06 KB
/
buildraw4
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
#!/bin/bash
function perr_and_exit()
{
echo "$1" >&2
exit 1
}
function usage()
{
cat << EOM
Usage: buildraw [-n] [-h]"
-n Skip apt dependency installations.
-h Show this help.
EOM
}
function setup_sys_env()
{
# Set firewalla global environment variable
if ! grep "^FIREWALLA_HOME=" /etc/environment &>/dev/null; then
echo "FIREWALLA_HOME "+$basedir
sudo /bin/echo "FIREWALLA_HOME=$basedir" | sudo bash -c 'cat - >> /etc/environment' || perr_and_exit "Failed to setup FIREWALLA_HOME env variable."
fi
# Set NODE_PATH
if ! grep "^NODE_PATH=" /etc/environment &>/dev/null; then
sudo echo "NODE_PATH=/home/pi/.node_modules" | sudo bash -c 'cat - >> /etc/environment' || perr_and_exit "Failed to add NODE_PATH env"
fi
}
function install_dependencies()
{
git pull || perr_and_exit "Failed to pull latest firewalla code."
# TODO: check local apt mirror
echo "Installing node source repository..."
sudo curl -sL https://deb.nodesource.com/setup_4.x | sudo -E bash - || perr_and_exit "Failed to install node source repo"
echo "Executing apt-get update, please be patient..."
sudo apt-get update || perr_and_exit "apt-get update failed."
apt_pkg_list="wget net-tools curl redis-server iptables ca-certificates nmap dsniff bluetooth bluez libbluetooth-dev libudev-dev nodejs openvpn easy-rsa python-pip cron ntpdate ipset dhcpdump dnsmasq dnsutils nbtscan"
echo "Installing dependencies, please be patient..."
sudo apt-get install $apt_pkg_list -y || perr_and_exit "Failed to install needed packages."
sudo -H pip install --upgrade pip
sudo -H pip install setuptools
if [[ -f /.dockerenv ]]; then
echo "Setting special npm configuration for Docker enviornment..."
# a workaround for npm/nodejs bug
# https://github.com/npm/npm/issues/4719
sudo npm config set unsafe-perm true
fi
echo "Installing tools: forever and xml-json..."
sudo npm install forever -g
sudo npm install xml-json -g
echo "Setting up required folders and configures..."
sudo mkdir -p /blog || perr_and_exit "Failed to create folder /blog"
sudo mkdir -p /bspool || perr_and_exit "Failed to create folder /bspool"
echo "Setting up openvpn..."
sudo rm -r -f /etc/openvpn || perr_and_exit "Failed to delete existing openvpn configure folder."
sudo mkdir -p /etc/openvpn || perr_and_exit "Failed to create new openvpn configure folder."
sudo cp -r /usr/share/easy-rsa /etc/openvpn || perr_and_exit "Failed to copy easy_rsa."
echo "Installing shadowsocks..."
sudo -H pip install shadowsocks || perr_and_exit "Failed to install shadowsocks."
}
function install_walla()
{
echo "Installing node modules..."
FW_NODE_MODULES_PATH=~/.node_modules
branch=$(git rev-parse --abbrev-ref HEAD)
CPU_PLATFORM=$(uname -m)
if [[ ! -e $FW_NODE_MODULES_PATH ]]; then
if [[ $CPU_PLATFORM == "x86_64" ]]; then
NODE_MODULE_REPO=https://github.com/firewalla/firewalla_nodemodules.x86_64.git
git clone $NODE_MODULE_REPO $FW_NODE_MODULES_PATH
elif [[ $CPU_PLATFORM == "armv7l" ]]; then
NODE_MODULE_REPO=https://github.com/firewalla/firewalla_nodemodules.git
git clone $NODE_MODULE_REPO $FW_NODE_MODULES_PATH
cd $FW_NODE_MODULES_PATH
git fetch
git checkout $branch
git reset -q --hard `cat $FIREWALLA_HOME/scripts/NODE_MODULES_REVISION.$CPU_PLATFORM`
cd -
elif [[ $CPU_PLATFORM == "aarch64" ]]; then
NODE_MODULE_REPO=https://github.com/firewalla/firewalla_nodemodules.aarch64.git
git clone $NODE_MODULE_REPO $FW_NODE_MODULES_PATH
cd $FW_NODE_MODULES_PATH
git fetch
git checkout $branch
git reset -q --hard `cat $FIREWALLA_HOME/scripts/NODE_MODULES_REVISION.$CPU_PLATFORM`
cd -
fi
fi
# Skip bro installation if in docker environment, bro in apt repo will be used in Docker
if [[ ! -f /.dockerenv ]]; then
echo "Installing bro..."
if [[ ! -f $basedir/imports/bro49.tar.gz ]]; then
cd $basedir/imports && wget https://github.com/firewalla/firewalla/releases/download/1.6/bro49.tar.gz -O bro49.tar.gz
fi
cd $basedir/imports && tar -zxf bro49.tar.gz && sudo cp -r -f $basedir/imports/bro /usr/local/ && rm -r -f $basedir/imports/bro || perr_and_exit "Failed to install bro."
cp $basedir/bin/real/bit* $basedir/bin/
fi
sudo cp $basedir/etc/sysctl.conf /etc/sysctl.conf || perr_and_exit "Failed to replace system sysctl.conf."
sudo cp $basedir/etc/bro-cron /etc/cron.hourly/. || perr_and_exit "Failed to install root bron cronjobs."
crontab $basedir/etc/brotab || perr_and_exit "Failed to install user bro cronjobs."
# Enable BBR TCP congestion control
grep "tcp_bbr" /etc/modules-load.d/modules.conf >/dev/null 2>&1
if [[ $? -ne 0 ]]; then
sudo echo "tcp_bbr" >> /etc/modules-load.d/modules.conf
fi
echo "Setting up encipher..."
sudo mkdir -p /encipher.config || perr_and_exit "Failed to create /encipher.config/"
sudo cp $basedir/config/netbot.config /encipher.config/ || perr_and_exit "Failed top copy encipher config."
sudo mkdir -p /firewalla && sudo chmod 777 /firewalla || perr_and_exit "Failed to create /firewalla."
echo "Setting up brofish and firewalla services..."
sudo cp $basedir/etc/brofish.service /etc/systemd/system/. || perr_and_exit "Failed to copy brofish.servie."
sudo cp $basedir/etc/firewalla.service /etc/systemd/system/. || perr_and_exit "Failed to copy firewalla service."
sudo cp $basedir/etc/fireupgrade.service /etc/systemd/system/. || perr_and_exit "Failed to copy fireupgrade service."
# ignore systemctl part in docker enviornment, there is some bug that systemctl doesn't work in Docker
if [[ -z ${TRAVIS+x} && ! -f /.dockerenv ]]; then
# systemd will bring up firewalla service, which will bring up all the rest firewalla services
sudo systemctl daemon-reload || perr_and_exit "Failed to refresh systemd services."
sudo systemctl enable firewalla || perr_and_exit "Failed to enable firewalla service."
sudo systemctl enable fireupgrade || perr_and_exit "Failed to enable firewalla service."
fi
sudo setcap cap_net_raw+eip $(eval readlink -f `which nodejs`) || perr_and_exit "Failed setup capabilities for nodejs."
sudo mkdir /etc/update-motd.d >/dev/null 2>&1
sudo cp $basedir/etc/10-header /etc/update-motd.d/10-header
}
function post_installation() {
source $FIREWALLA_HOME/scripts/utils.sh
setup_folders
echo 'export PATH=$PATH:/sbin' >> /home/pi/.bashrc
}
basedir=`dirname $0`
export basedir=`cd $basedir;pwd`
FIREWALLA_HOME=$basedir
echo "basedir is $basedir"
while getopts "tnh" opt; do
case $opt in
n) NO_DEPS=1;;
h) usage; exit 0;;
?) perr_and_exit "Invalid option.";;
esac
done
[[ "$NO_DEPS" != 1 ]] && install_dependencies || echo "Skipping dependency installation."
setup_sys_env
install_walla
post_installation
echo "Installation successful."
exit 0