Init: Update
This commit is contained in:
Christer Waren
@@ -153,80 +153,276 @@ wxi-config-legacy(){
|
||||
mv $HOME/.warengroup/config.json.tmp $HOME/.warengroup/config.json &> /dev/null
|
||||
}
|
||||
|
||||
wxi-restricted(){
|
||||
if [[ -z $1 || $1 == "--user" ]]
|
||||
then
|
||||
if [[ $USER == "root" || $USER == "local" ]]
|
||||
then
|
||||
wxi-content status "Command" "Restricted"
|
||||
wxi-content text "It's not permitted to execute this command with root or local user."
|
||||
wxi-repeat "\n" 3
|
||||
exit 1
|
||||
fi
|
||||
fi
|
||||
|
||||
if [[ $1 == "--org" ]]
|
||||
then
|
||||
if [[ ! -z ${args['org']} ]]
|
||||
then
|
||||
case ${args['org']} in
|
||||
warengroup)
|
||||
ORG=warengroup
|
||||
;;
|
||||
cwchristerw)
|
||||
ORG=cwchristerw
|
||||
;;
|
||||
*)
|
||||
wxi-content status "Organization" "Unsupported"
|
||||
wxi-stop
|
||||
;;
|
||||
esac
|
||||
elif [[ $(hostname -d) == "devices.waren.io" ]]
|
||||
then
|
||||
ORG=warengroup
|
||||
elif [[ $(hostname -d) == "devices.christerwaren.fi" ]]
|
||||
then
|
||||
ORG=cwchristerw
|
||||
fi
|
||||
|
||||
if [[ ! -z $ORG ]]
|
||||
then
|
||||
case $ORG in
|
||||
warengroup)
|
||||
DOMAIN=waren.io
|
||||
VAULT_DOMAIN=vault.cwinfo.net
|
||||
ORG_HEADER="Warén Group"
|
||||
;;
|
||||
cwchristerw)
|
||||
DOMAIN=christerwaren.fi
|
||||
VAULT_DOMAIN=vault.cwinfo.net
|
||||
ORG_HEADER="Christer Warén"
|
||||
;;
|
||||
*)
|
||||
wxi-content status "Organization" "Unsupported"
|
||||
wxi-stop
|
||||
;;
|
||||
esac
|
||||
else
|
||||
wxi-content status "Organization" "Required"
|
||||
wxi-stop
|
||||
fi
|
||||
fi
|
||||
|
||||
if [[ -z $1 || $1 == "--vault" ]]
|
||||
then
|
||||
if [[ -z $VAULT_DOMAIN ]]
|
||||
then
|
||||
wxi-content status "Vault" "Unavailable"
|
||||
wxi-repeat "\n" 3
|
||||
exit 1
|
||||
fi
|
||||
|
||||
VAULT_STATUS=$(curl -s -o /dev/null -w "%{http_code}" https://$VAULT_DOMAIN/v1/sys/health)
|
||||
if [[ ! $VAULT_STATUS -eq 200 ]]
|
||||
then
|
||||
wxi-content status "Vault" "Offline"
|
||||
wxi-repeat "\n" 3
|
||||
exit 1
|
||||
fi
|
||||
fi
|
||||
}
|
||||
|
||||
wx-init(){
|
||||
wx-login
|
||||
wxi-header "Init"
|
||||
wx-login
|
||||
wxi-header "Init"
|
||||
|
||||
if [[ ! -z ${args['hostname']} && ${#args['hostname']} -gt 5 ]]
|
||||
if [[ ! -z ${args['hostname']} && ${#args['hostname']} -gt 5 ]]
|
||||
then
|
||||
HOSTNAME="${args['hostname']}.devices.$DOMAIN"
|
||||
elif [[ $(hostname -d) ]]
|
||||
then
|
||||
HOSTNAME=$(hostname --fqdn)
|
||||
else
|
||||
wxi-content status "Hostname" "Required"
|
||||
wxi-stop
|
||||
fi
|
||||
|
||||
if [[ ! -z ${args['device-type']} ]]
|
||||
then
|
||||
if [[ ${args['device-type']} == "server" ]]
|
||||
then
|
||||
HOSTNAME="${args['hostname']}.devices.$DOMAIN"
|
||||
elif [[ $(hostname -d) ]]
|
||||
DEVICE_TYPE="Server"
|
||||
elif [[ ${args['device-type']} == "workstation" ]]
|
||||
then
|
||||
HOSTNAME=$(hostname --fqdn)
|
||||
DEVICE_TYPE="Workstation"
|
||||
else
|
||||
wxi-content status "Hostname" "Required"
|
||||
wxi-stop
|
||||
wxi-content status "Device Type" "Invalid"
|
||||
wxi-stop
|
||||
fi
|
||||
else
|
||||
wxi-content status "Device Type" "Required"
|
||||
wxi-stop
|
||||
fi
|
||||
|
||||
if [[ ! -z ${args['device-type']} ]]
|
||||
then
|
||||
if [[ ${args['device-type']} == "server" ]]
|
||||
then
|
||||
DEVICE_TYPE="Server"
|
||||
elif [[ ${args['device-type']} == "workstation" ]]
|
||||
then
|
||||
DEVICE_TYPE="Workstation"
|
||||
else
|
||||
wxi-content status "Device Type" "Invalid"
|
||||
wxi-stop
|
||||
fi
|
||||
else
|
||||
wxi-content status "Device Type" "Required"
|
||||
wxi-stop
|
||||
fi
|
||||
mkdir -p ~/.ssh/keys &> /dev/null
|
||||
|
||||
mkdir -p ~/.ssh/keys &> /dev/null
|
||||
apt-get update &> /dev/null
|
||||
apt-get install -y python3-pip python3-venv jq git curl lsb-release &> /dev/null
|
||||
dnf install -y epel-release &> /dev/null
|
||||
dnf install -y python3-pip jq git curl lsb_release &> /dev/null
|
||||
python3 -m venv /opt/ansible &> /dev/null
|
||||
/opt/ansible/bin/pip3 install ansible &> /dev/null
|
||||
/opt/ansible/bin/pip3 install cryptography dnspython hvac jmespath netaddr passlib pexpect xmltodict &> /dev/null
|
||||
|
||||
apt-get update &> /dev/null
|
||||
apt-get install -y python3-pip python3-venv jq git curl lsb-release &> /dev/null
|
||||
dnf install -y epel-release &> /dev/null
|
||||
dnf install -y python3-pip jq git curl lsb_release &> /dev/null
|
||||
python3 -m venv /opt/ansible &> /dev/null
|
||||
/opt/ansible/bin/pip3 install ansible &> /dev/null
|
||||
/opt/ansible/bin/pip3 install cryptography dnspython hvac jmespath netaddr passlib pexpect xmltodict &> /dev/null
|
||||
curl \
|
||||
-H "X-Vault-Token: $TOKEN" \
|
||||
-X GET \
|
||||
https://$VAULT_DOMAIN/v1/init.sh/data/ssh -s | jq -r '.data.data.privkey' > ~/.ssh/keys/init
|
||||
|
||||
curl \
|
||||
-H "X-Vault-Token: $TOKEN" \
|
||||
-X GET \
|
||||
https://$VAULT_DOMAIN/v1/init.sh/data/ssh -s | jq -r '.data.data.privkey' > ~/.ssh/keys/init
|
||||
chmod 700 ~/.ssh/keys/init &> /dev/null
|
||||
|
||||
chmod 700 ~/.ssh/keys/init &> /dev/null
|
||||
mkdir -p ~/.ansible &> /dev/null
|
||||
|
||||
mkdir -p ~/.ansible &> /dev/null
|
||||
if [ ! -f ~/.ansible/vars.yml ]
|
||||
then
|
||||
echo "---" > ~/.ansible/vars.yml
|
||||
echo "hostname: $HOSTNAME" >> ~/.ansible/vars.yml
|
||||
echo "info:" >> ~/.ansible/vars.yml
|
||||
echo " type: $DEVICE_TYPE" >> ~/.ansible/vars.yml
|
||||
echo "config:" >> ~/.ansible/vars.yml
|
||||
echo " identity:" >> ~/.ansible/vars.yml
|
||||
echo " vault:" >> ~/.ansible/vars.yml
|
||||
echo " domain: $VAULT_DOMAIN" >> ~/.ansible/vars.yml
|
||||
fi
|
||||
|
||||
if [ ! -f ~/.ansible/vars.yml ]
|
||||
then
|
||||
echo "---" > ~/.ansible/vars.yml
|
||||
echo "hostname: $HOSTNAME" >> ~/.ansible/vars.yml
|
||||
echo "info:" >> ~/.ansible/vars.yml
|
||||
echo " type: $DEVICE_TYPE" >> ~/.ansible/vars.yml
|
||||
echo "config:" >> ~/.ansible/vars.yml
|
||||
echo " identity:" >> ~/.ansible/vars.yml
|
||||
echo " vault:" >> ~/.ansible/vars.yml
|
||||
echo " domain: $VAULT_DOMAIN" >> ~/.ansible/vars.yml
|
||||
fi
|
||||
GIT_DOMAIN="git.waren.io"
|
||||
GIT_PORT="2222"
|
||||
GIT_REPOSITORY="warengroup-private/infra-plus"
|
||||
|
||||
GIT_DOMAIN="git.waren.io"
|
||||
GIT_PORT="2222"
|
||||
GIT_REPOSITORY="warengroup-private/infra-plus"
|
||||
export HVT=$TOKEN
|
||||
|
||||
export HVT=$TOKEN
|
||||
/opt/ansible/bin/ansible-galaxy collection install ansible.mysql ansible.posix ansible.utils ansible.windows community.crypto community.dns community.docker community.general community.grafana community.hashi_vault community.libvirt community.mongodb community.postgresql community.windows containers.podman --upgrade &> /dev/null
|
||||
|
||||
/opt/ansible/bin/ansible-galaxy collection install ansible.mysql ansible.posix ansible.utils ansible.windows community.crypto community.dns community.docker community.general community.grafana community.hashi_vault community.libvirt community.mongodb community.postgresql community.windows containers.podman --upgrade &> /dev/null
|
||||
/opt/ansible/bin/ansible-pull -U ssh://git@$GIT_DOMAIN:$GIT_PORT/$GIT_REPOSITORY -d ~/.ansible/pull/infra --accept-host-key --private-key ~/.ssh/keys/init --extra-vars @~/.ansible/vars.yml init.yml -t init
|
||||
|
||||
/opt/ansible/bin/ansible-pull -U ssh://git@$GIT_DOMAIN:$GIT_PORT/$GIT_REPOSITORY -d ~/.ansible/pull/infra --accept-host-key --private-key ~/.ssh/keys/init --extra-vars @~/.ansible/vars.yml init.yml -t init
|
||||
unset HVT
|
||||
}
|
||||
|
||||
unset HVT
|
||||
wxi-start(){
|
||||
wxi-header "Warén Init" h1
|
||||
|
||||
mkdir -p $HOME/.warengroup &> /dev/null
|
||||
|
||||
if [[ ! -f "$HOME/.warengroup/config.json" || $(jq -e . < $HOME/.warengroup/config.json &>/dev/null; echo $?) -gt 0 ]]
|
||||
then
|
||||
echo '{}' | jq > $HOME/.warengroup/config.json
|
||||
fi
|
||||
|
||||
mkdir -p $HOME/.ssh/keys
|
||||
chmod 700 -R $HOME/.ssh/keys
|
||||
|
||||
echo -n "$wxiBold"
|
||||
echo "Designed by"
|
||||
echo -n "$wxiNormal"
|
||||
wxiLink "Warén Group™" "https://waren.io"
|
||||
}
|
||||
|
||||
wxi-stop (){
|
||||
rm -rf /.ssh/keys/init &> /dev/null
|
||||
|
||||
wxi-repeat "\n" 3
|
||||
exit 1
|
||||
}
|
||||
|
||||
wxi-content(){
|
||||
if [[ $1 == "text" ]]
|
||||
then
|
||||
echo "$2"
|
||||
elif [[ $1 == "text*" ]]
|
||||
then
|
||||
echo -n "$2"
|
||||
elif [[ $1 == "status" ]]
|
||||
then
|
||||
echo -n "Status: "
|
||||
echo "$2 - $3"
|
||||
elif [[ $1 == "link" ]]
|
||||
then
|
||||
echo "$2 - $3"
|
||||
fi
|
||||
}
|
||||
|
||||
wxiRed=$(tput setaf 196)
|
||||
wxiGreen=$(tput setaf 46)
|
||||
wxiYellow=$(tput setaf 226)
|
||||
wxiBlue=$(tput setaf 21)
|
||||
wxiPurple=$(tput setaf 165)
|
||||
wxiTurquoise=$(tput setaf 14)
|
||||
wxiPink=$(tput setaf 198)
|
||||
wxiOrange=$(tput setaf 202)
|
||||
wxiUnderline=$(tput smul)
|
||||
wxiBold=$(tput bold)
|
||||
wxiNormal=$(tput sgr0)
|
||||
|
||||
wxiLink() {
|
||||
printf '\e]8;;%s\e\\%s\e]8;;\e\\\n' "$2" "$1"
|
||||
}
|
||||
|
||||
wxi-header(){
|
||||
if [[ $2 == "h1" || $2 == "" ]]
|
||||
then
|
||||
#wxi-repeat " " $(($(tput cols)/2-${#1}/2))
|
||||
echo -n "$wxiBold"
|
||||
echo ${1^^}
|
||||
echo -n "$wxiNormal"
|
||||
echo ""
|
||||
fi
|
||||
|
||||
if [[ $2 == "h1*" ]]
|
||||
then
|
||||
#wxi-repeat " " $(($(tput cols)/2-${#1}/2))
|
||||
echo -n "$wxiBold"
|
||||
echo ${1^^}
|
||||
echo -n "$wxiNormal"
|
||||
fi
|
||||
|
||||
if [[ $2 == "h2" ]]
|
||||
then
|
||||
#wxi-repeat " " $(($(tput cols)/2-${#1}/2))
|
||||
echo -n "$wxiBold"
|
||||
echo ">> $1 <<"
|
||||
echo -n "$wxiNormal"
|
||||
fi
|
||||
|
||||
if [[ $2 == "h3" ]]
|
||||
then
|
||||
#wxi-repeat " " $(($(tput cols)/2-${#1}/2))
|
||||
echo -n "$wxiBold"
|
||||
echo "$1"
|
||||
echo -n "$wxiNormal"
|
||||
fi
|
||||
|
||||
if [[ $2 == "h4" ]]
|
||||
then
|
||||
#wxi-repeat " " $(($(tput cols)/2-${#1}/2))
|
||||
echo -n "$wxiUnderline"
|
||||
echo "$1"
|
||||
echo -n "$wxiNormal"
|
||||
fi
|
||||
}
|
||||
|
||||
|
||||
wxi-repeat() {
|
||||
if [[ $1 == " " ]]
|
||||
then
|
||||
local str=$1 n=$2 spaces
|
||||
printf -v spaces "%*s" $n " "
|
||||
printf "%s" "${spaces// /$str}"
|
||||
else
|
||||
for i in $(seq 1 $2);
|
||||
do
|
||||
echo -en $1
|
||||
done
|
||||
fi
|
||||
}
|
||||
|
||||
wx-login(){
|
||||
@@ -284,7 +480,6 @@ wx-login(){
|
||||
if [[ -z $USERNAME || -z $PASSWORD ]]
|
||||
then
|
||||
wxi-content status "Username & Password" "Required"
|
||||
wxi-footer
|
||||
wxi-stop
|
||||
fi
|
||||
|
||||
@@ -292,7 +487,6 @@ wx-login(){
|
||||
if [[ -z $VAULT_LOGIN || ${#VAULT_LOGIN} -lt 95 || ${#VAULT_LOGIN} -gt 95 ]]
|
||||
then
|
||||
wxi-content status "Login" "Failed"
|
||||
wxi-footer
|
||||
wxi-stop
|
||||
fi
|
||||
|
||||
@@ -322,14 +516,12 @@ wx-login(){
|
||||
if [[ -z $TOKEN ]]
|
||||
then
|
||||
wxi-content status "Token" "Required"
|
||||
wxi-footer
|
||||
wxi-stop
|
||||
fi
|
||||
|
||||
if [[ ${#TOKEN} -lt 95 || ${#TOKEN} -gt 95 ]]
|
||||
then
|
||||
wxi-content status "Token" "Invalid"
|
||||
wxi-footer
|
||||
wxi-stop
|
||||
fi
|
||||
|
||||
@@ -337,7 +529,6 @@ wx-login(){
|
||||
if [[ -z $VAULT_LOGIN || ${#VAULT_LOGIN} -lt 95 || ${#VAULT_LOGIN} -gt 95 ]]
|
||||
then
|
||||
wxi-content status "Login" "Failed"
|
||||
wxi-footer
|
||||
|
||||
if [[ $(wxi-config-legacy login read) ]]
|
||||
then
|
||||
@@ -353,7 +544,6 @@ wx-login(){
|
||||
;;
|
||||
*)
|
||||
wxi-content status "Login Type" "Unsupported"
|
||||
wxi-footer
|
||||
wxi-stop
|
||||
;;
|
||||
esac
|
||||
@@ -375,206 +565,8 @@ wx-login(){
|
||||
then
|
||||
USERNAME=${VAULT_USERNAME#oidc-}
|
||||
fi
|
||||
|
||||
wxi-footer
|
||||
}
|
||||
|
||||
wxi-restricted(){
|
||||
if [[ -z $1 || $1 == "--user" ]]
|
||||
then
|
||||
if [[ $USER != "root" && $USER != "local" ]]
|
||||
then
|
||||
wxi-content status "Command" "Restricted"
|
||||
wxi-content text "It's not permitted to execute this command as $USER."
|
||||
wxi-footer
|
||||
wxi-repeat "\n" 3
|
||||
exit 1
|
||||
fi
|
||||
fi
|
||||
|
||||
if [[ $1 == "--org" ]]
|
||||
then
|
||||
if [[ ! -z ${args['org']} ]]
|
||||
then
|
||||
case ${args['org']} in
|
||||
warengroup)
|
||||
ORG=warengroup
|
||||
;;
|
||||
cwchristerw)
|
||||
ORG=cwchristerw
|
||||
;;
|
||||
*)
|
||||
wxi-content status "Organization" "Unsupported"
|
||||
wxi-footer
|
||||
wxi-stop
|
||||
;;
|
||||
esac
|
||||
elif [[ $(hostname -d) == "devices.waren.io" ]]
|
||||
then
|
||||
ORG=warengroup
|
||||
elif [[ $(hostname -d) == "devices.christerwaren.fi" ]]
|
||||
then
|
||||
ORG=cwchristerw
|
||||
fi
|
||||
|
||||
if [[ ! -z $ORG ]]
|
||||
then
|
||||
case $ORG in
|
||||
warengroup)
|
||||
DOMAIN=waren.io
|
||||
VAULT_DOMAIN=vault.cwinfo.net
|
||||
ORG_HEADER="Warén Group"
|
||||
;;
|
||||
cwchristerw)
|
||||
DOMAIN=christerwaren.fi
|
||||
VAULT_DOMAIN=vault.cwinfo.net
|
||||
ORG_HEADER="Christer Warén"
|
||||
;;
|
||||
*)
|
||||
wxi-content status "Organization" "Unsupported"
|
||||
wxi-footer
|
||||
wxi-stop
|
||||
;;
|
||||
esac
|
||||
else
|
||||
wxi-content status "Organization" "Required"
|
||||
wxi-footer
|
||||
wxi-stop
|
||||
fi
|
||||
fi
|
||||
|
||||
if [[ -z $1 || $1 == "--vault" ]]
|
||||
then
|
||||
if [[ -z $VAULT_DOMAIN ]]
|
||||
then
|
||||
wxi-content status "Vault" "Unavailable"
|
||||
wxi-footer
|
||||
wxi-repeat "\n" 3
|
||||
exit 1
|
||||
fi
|
||||
|
||||
VAULT_STATUS=$(curl -s -o /dev/null -w "%{http_code}" https://$VAULT_DOMAIN/v1/sys/health)
|
||||
if [[ ! $VAULT_STATUS -eq 200 ]]
|
||||
then
|
||||
wxi-content status "Vault" "Offline"
|
||||
wxi-footer
|
||||
wxi-repeat "\n" 3
|
||||
exit 1
|
||||
fi
|
||||
fi
|
||||
}
|
||||
|
||||
wxi-start(){
|
||||
wxi-header "Warén Init" h1
|
||||
|
||||
mkdir -p $HOME/.warengroup &> /dev/null
|
||||
|
||||
if [[ ! -f "$HOME/.warengroup/config.json" || $(jq -e . < $HOME/.warengroup/config.json &>/dev/null; echo $?) -gt 0 ]]
|
||||
then
|
||||
echo '{}' | jq > $HOME/.warengroup/config.json
|
||||
fi
|
||||
|
||||
mkdir -p $HOME/.ssh/keys
|
||||
chmod 700 -R $HOME/.ssh/keys
|
||||
}
|
||||
|
||||
wxi-stop (){
|
||||
rm -rf /.ssh/keys/init &> /dev/null
|
||||
|
||||
wxi-repeat "\n" 3
|
||||
exit 1
|
||||
}
|
||||
|
||||
wxi-content(){
|
||||
if [[ $1 == "text" ]]
|
||||
then
|
||||
echo "$2"
|
||||
elif [[ $1 == "status" ]]
|
||||
then
|
||||
wxi-repeat "\n" 2
|
||||
echo -n "$wxiBold"
|
||||
echo "Status"
|
||||
echo -n "$wxiNormal"
|
||||
echo "$2 - $3"
|
||||
elif [[ $1 == "link" ]]
|
||||
then
|
||||
echo "$2 - $3"
|
||||
fi
|
||||
}
|
||||
|
||||
wxi-footer(){
|
||||
echo ""
|
||||
echo "------------------------------"
|
||||
echo -n "$wxiBold"
|
||||
echo "Designed by"
|
||||
echo -n "$wxiNormal"
|
||||
wxiLink "Warén Group™" "https://waren.io"
|
||||
echo "=============================="
|
||||
}
|
||||
|
||||
wxiRed=$(tput setaf 196)
|
||||
wxiGreen=$(tput setaf 46)
|
||||
wxiYellow=$(tput setaf 226)
|
||||
wxiBlue=$(tput setaf 21)
|
||||
wxiPurple=$(tput setaf 165)
|
||||
wxiTurquoise=$(tput setaf 14)
|
||||
wxiPink=$(tput setaf 198)
|
||||
wxiOrange=$(tput setaf 202)
|
||||
wxiUnderline=$(tput smul)
|
||||
wxiBold=$(tput bold)
|
||||
wxiNormal=$(tput sgr0)
|
||||
|
||||
wxiLink() {
|
||||
printf '\e]8;;%s\e\\%s\e]8;;\e\\\n' "$2" "$1"
|
||||
}
|
||||
|
||||
wxi-header(){
|
||||
if [[ $2 == "h1" ]]
|
||||
then
|
||||
wxi-repeat "\n" 3
|
||||
echo "=============================="
|
||||
wxi-repeat " " $((30/2-${#1}/2))
|
||||
echo -n "$wxiBold"
|
||||
echo "$1"
|
||||
echo -n "$wxiNormal"
|
||||
echo "=============================="
|
||||
fi
|
||||
|
||||
if [[ $2 == "h2" || -z $2 ]]
|
||||
then
|
||||
wxi-start
|
||||
wxi-repeat " " $((30/2-6/2-${#1}/2))
|
||||
echo -n "$wxiBold"
|
||||
echo ">> $1 <<"
|
||||
echo -n "$wxiNormal"
|
||||
echo "------------------------------"
|
||||
echo ""
|
||||
fi
|
||||
|
||||
if [[ $2 == "h3" ]]
|
||||
then
|
||||
echo -n "$wxiBold"
|
||||
echo "$1"
|
||||
echo -n "$wxiNormal"
|
||||
fi
|
||||
}
|
||||
|
||||
|
||||
wxi-repeat() {
|
||||
if [[ $1 == " " ]]
|
||||
then
|
||||
local str=$1 n=$2 spaces
|
||||
printf -v spaces "%*s" $n " "
|
||||
printf "%s" "${spaces// /$str}"
|
||||
else
|
||||
for i in $(seq 1 $2);
|
||||
do
|
||||
echo -en $1
|
||||
done
|
||||
fi
|
||||
}
|
||||
|
||||
#{{ COMMANDS }}
|
||||
|
||||
wxi-args "$@"
|
||||
wxi-config
|
||||
|
||||
Reference in New Issue
Block a user