From ff2c55e17f01c87d49c203b7fe34b2970f030c3c Mon Sep 17 00:00:00 2001
From: Christer Waren <cwchristerw@gmail.com>
Date: Mon, 12 Oct 2026 19:33:22 +0300
Subject: [PATCH] Init: Update

---
 init.ps1 |  33 ----
 init.sh  | 594 -------------------------------------------------------
 2 files changed, 627 deletions(-)
 delete mode 100644 init.ps1
 delete mode 100755 init.sh

diff --git a/init.ps1 b/init.ps1
deleted file mode 100644
index aeedc76..0000000
--- a/init.ps1
+++ /dev/null
@@ -1,33 +0,0 @@
-echo ""
-echo ""
-echo ""
-echo "=============================="
-echo ""
-echo "Waren Init"
-echo ""
-echo "=============================="
-echo ""
-echo ""
-echo "Generating SSH Key"
-New-Item -ItemType Directory -Path "$Env:USERPROFILE\.ssh\keys" -Force
-ssh-keygen -f "$Env:USERPROFILE\.ssh\keys\infra" -t ed25519 -C "$Env:USERDOMAIN"
-echo ""
-echo ""
-echo "Copy SSH Key"
-Get-Content "$Env:USERPROFILE\.ssh\keys\infra.pub"
-echo ""
-echo ""
-echo "Install OpenSSH Server"
-Add-WindowsCapability -Online -Name OpenSSH.Server
-echo ""
-echo ""
-echo "Enable OpenSSH Server"
-Set-Service -Name sshd -StartupType 'Automatic'
-echo ""
-echo ""
-echo "Start OpenSSH Server"
-Start-Service -Name sshd
-echo ""
-echo ""
-echo "Install Debian"
-wsl --install Debian
diff --git a/init.sh b/init.sh
deleted file mode 100755
index 8b1cc12..0000000
--- a/init.sh
+++ /dev/null
@@ -1,594 +0,0 @@
-#!/bin/bash
-if [ ! "$BASH_VERSION" ] ; then
-  echo "Warén Group / Infra / Init"
-  echo "This command requires using BASH shell."
-  exit 1
-fi
-
-if [[ -L "$0" ]]
-then
-  PWD=$(dirname -- "$(readlink -f -- "$0")")
-fi
-
-wxi-args(){
-  declare -gAx args
-  args=()
-
-  while [[ $# -gt 0 ]]; do
-    case "$1" in
-      --*=*)
-        key="${1%%=*}"
-        value="${1#*=}"
-        args["${key#--}"]="$value"
-        shift
-        ;;
-
-      --*)
-        key="$1"
-        opt="${key#--}"
-        shift
-        if [[ $# -gt 0 && "${1}" != -* ]]; then
-          args["$opt"]="$1"
-          shift
-        else
-          args["$opt"]=true
-        fi
-        ;;
-
-      -*=*)
-        key="${1%%=*}"
-        value="${1#*=}"
-        args["${key#-}"]="$value"
-        shift
-        ;;
-
-      -*)
-        key="$1"
-        opt="${key#-}"
-        shift
-        if [[ $# -gt 0 && "${1}" != -* ]]; then
-          args["$opt"]="$1"
-          shift
-        else
-          args["$opt"]=true
-        fi
-        ;;
-
-      *)
-        args["$((++pos))"]="${1%%=*}"
-        shift
-        ;;
-    esac
-  done
-}
-
-wxi-config(){
-  declare -gAx config
-  case $1 in
-    create)
-      if [[ ! -f $HOME/.warengroup/config.json ]]
-      then
-        echo '{}' > $HOME/.warengroup/config.json
-      fi
-      ;;
-    deploy)
-      if [[ ! $(jq -e . $HOME/.warengroup/config.json.tmp >/dev/null 2>&1) ]]
-      then
-        mv $HOME/.warengroup/config.json.tmp $HOME/.warengroup/config.json &> /dev/null
-      fi
-      ;;
-    write)
-      jq '.'"$2"' = "'$3'"' $HOME/.warengroup/config.json &> $HOME/.warengroup/config.json.tmp
-      wxi-config deploy
-      ;;
-    load)
-      while IFS=$'\t' read -r k v; do config["$k"]="$v"; done < <(
-        jq -r '
-          paths(scalars) as $p
-          | "\( $p|map(tostring)|join(".") )\t\( getpath($p) )"
-          ' $HOME/.warengroup/config.json
-        )
-      ;;
-    reload)
-      wxi-config load
-      ;;
-    *)
-      WX_HOME=$HOME/.warengroup
-      export WX_HOME
-
-      mkdir -p $WX_HOME
-      chmod 700 -R "$WX_HOME"
-
-      mkdir -p "$WX_HOME/credentials" \
-               "$WX_HOME/credentials/ssh" \
-               "$WX_HOME/credentials/ssh/eas" \
-               "$WX_HOME/credentials/ansible-vault/eas" \
-               "$WX_HOME/infra/eas/credentials/ssh"
-
-      find "$WX_HOME" -type d -exec chmod 700 {} +
-      find "$WX_HOME" -type f -exec chmod 600 {} +
-
-      wxi-config create
-      if [[ -n ${args['proxy']} ]]
-      then
-        wxi-config write proxy "${args['proxy']}"
-      fi
-
-      wxi-config load
-
-      PROXY_ARGS=()
-      if [[ -n "${config['proxy']}" ]]; then
-        PROXY_ARGS=(--proxy "${config['proxy']}")
-      fi
-      ;;
-  esac
-}
-
-wxi-config-legacy(){
-  case $1 in
-    login)
-      case $2 in
-        write)
-          jq '.login.'$ORG'.token = "'$TOKEN'"' $WX_HOME/config.json &> $WX_HOME/config.json.tmp
-        ;;
-        read)
-          if [[ -f "$WX_HOME/config.json" && $(cat $WX_HOME/config.json | jq -r .login.$ORG.token) != 'null' && $(cat $WX_HOME/config.json | jq -r .login.$ORG.token) != '' ]]
-          then
-            cat $WX_HOME/config.json | jq -r .login.$ORG.token
-          else
-            return 1
-          fi
-        ;;
-        erase)
-          TOKEN=""
-          wxi-config-legacy login write
-        ;;
-      esac
-    ;;
-    *)
-      echo -n ""
-    ;;
-  esac
-
-  mv $WX_HOME/config.json.tmp $WX_HOME/config.json &> /dev/null
-}
-
-wxi-restricted(){
-  if [[ -z $1 || $1 == "--user" ]]
-  then
-    if [[ $USER == "root" || $USER == "local" ]]
-    then
-      wxi-content status "Command" "Restricted"
-      wxi-content text "It's not permitted to execute this command with root or local user."
-      wxi-repeat "\n" 3
-      exit 1
-    fi
-  fi
-
-  if [[ $1 == "--org" ]]
-  then
-    if [[ ! -z ${args['org']} ]]
-    then
-      case ${args['org']} in
-          warengroup)
-              ORG=warengroup
-              ;;
-          cwchristerw)
-              ORG=cwchristerw
-              ;;
-          *)
-              wxi-content status "Organization" "Unsupported"
-              wxi-stop
-              ;;
-      esac
-    elif [[ $(hostname -d) == "devices.waren.io" ]]
-    then
-      ORG=warengroup
-    elif [[ $(hostname -d) == "devices.christerwaren.fi" ]]
-    then
-      ORG=cwchristerw
-    fi
-
-    if [[ ! -z $ORG ]]
-    then
-      case $ORG in
-        warengroup)
-          DOMAIN=waren.io
-          VAULT_DOMAIN=vault.cwinfo.net
-          ORG_HEADER="Warén Group"
-          ;;
-        cwchristerw)
-          DOMAIN=christerwaren.fi
-          VAULT_DOMAIN=vault.cwinfo.net
-          ORG_HEADER="Christer Warén"
-          ;;
-        *)
-          wxi-content status "Organization" "Unsupported"
-          wxi-stop
-          ;;
-      esac
-    else
-      wxi-content status "Organization" "Required"
-      wxi-stop
-    fi
-  fi
-
-  if [[ -z $1 || $1 == "--vault" ]]
-  then
-    if [[ -z $VAULT_DOMAIN ]]
-    then
-      wxi-content status "Vault" "Unavailable"
-      wxi-repeat "\n" 3
-      exit 1
-    fi
-
-    VAULT_STATUS=$(curl -s -o /dev/null -w "%{http_code}" https://$VAULT_DOMAIN/v1/sys/health)
-    if [[ ! $VAULT_STATUS -eq 200 ]]
-    then
-      wxi-content status "Vault" "Offline"
-      wxi-repeat "\n" 3
-      exit 1
-    fi
-  fi
-}
-
-wxi-init(){
-  wx-login
-  wxi-header "Init"
-
-  if [[ ! -z ${args['hostname']} && ${#args['hostname']} -gt 5 ]]
-  then
-    HOSTNAME="${args['hostname']}.devices.$DOMAIN"
-  elif [[ $(hostname -d) ]]
-  then
-    HOSTNAME=$(hostname --fqdn)
-  else
-    wxi-content status "Hostname" "Required"
-    wxi-stop
-  fi
-
-  if [[ ! -z ${args['device-type']} ]]
-  then
-    if [[ ${args['device-type']} == "server" ]]
-    then
-      DEVICE_TYPE="Server"
-    elif [[ ${args['device-type']} == "workstation" ]]
-    then
-      DEVICE_TYPE="Workstation"
-    else
-      wxi-content status "Device Type" "Invalid"
-      wxi-stop
-    fi
-  else
-    wxi-content status "Device Type" "Required"
-    wxi-stop
-  fi
-
-  mkdir -p ~/.ssh/keys &> /dev/null
-
-  apt-get update &> /dev/null
-  apt-get install -y python3-pip python3-venv jq git curl lsb-release &> /dev/null
-  dnf install -y epel-release &> /dev/null
-  dnf install -y python3-pip jq git curl lsb_release &> /dev/null
-  python3 -m venv /opt/ansible &> /dev/null
-  /opt/ansible/bin/pip3 install ansible &> /dev/null
-  /opt/ansible/bin/pip3 install cryptography dnspython hvac jmespath netaddr passlib pexpect xmltodict &> /dev/null
-
-  curl \
-    -H "X-Vault-Token: $TOKEN" \
-    -X GET \
-    https://$VAULT_DOMAIN/v1/init.sh/data/ssh -s | jq -r '.data.data.privkey' > ~/.ssh/keys/init
-
-  chmod 700 ~/.ssh/keys/init &> /dev/null
-
-  mkdir -p ~/.ansible &> /dev/null
-
-  if [ ! -f ~/.ansible/vars.yml ]
-  then
-    echo "---" > ~/.ansible/vars.yml
-    echo "hostname: $HOSTNAME" >> ~/.ansible/vars.yml
-    echo "info:" >> ~/.ansible/vars.yml
-    echo "  type: $DEVICE_TYPE" >> ~/.ansible/vars.yml
-    echo "config:" >> ~/.ansible/vars.yml
-    echo "  identity:" >> ~/.ansible/vars.yml
-    echo "    vault:" >> ~/.ansible/vars.yml
-    echo "      domain: $VAULT_DOMAIN" >> ~/.ansible/vars.yml
-  fi
-
-  GIT_DOMAIN="git.waren.io"
-  GIT_PORT="2222"
-  GIT_REPOSITORY="warengroup-private/infra-plus"
-
-  export HVT=$TOKEN
-
-  /opt/ansible/bin/ansible-galaxy collection install ansible.mysql ansible.posix ansible.utils ansible.windows community.crypto community.dns community.docker community.general community.grafana community.hashi_vault community.libvirt community.mongodb community.postgresql community.windows containers.podman --upgrade &> /dev/null
-
-  /opt/ansible/bin/ansible-pull -U ssh://git@$GIT_DOMAIN:$GIT_PORT/$GIT_REPOSITORY -d ~/.ansible/pull/infra --accept-host-key --private-key ~/.ssh/keys/init --extra-vars @~/.ansible/vars.yml init.yml -t init
-
-  unset HVT
-}
-
-wxi-start(){
-  wxi-header "Warén Group / Infra / Init" h1
-
-  mkdir -p $HOME/.warengroup &> /dev/null
-
-  if [[ ! -f "$HOME/.warengroup/config.json" || $(jq -e . < $HOME/.warengroup/config.json &>/dev/null; echo $?) -gt 0 ]]
-  then
-    echo '{}' | jq > $HOME/.warengroup/config.json
-  fi
-
-  mkdir -p $HOME/.ssh/keys
-  chmod 700 -R $HOME/.ssh/keys
-
-  echo -n "$wxiBold"
-  echo "Designed by"
-  echo -n "$wxiNormal"
-  wxiLink "Warén Group™" "https://waren.io"
-}
-
-wxi-stop (){
-  rm -rf /.ssh/keys/init &> /dev/null
-
-  wxi-repeat "\n" 3
-  exit 1
-}
-
-wxi-content(){
-  if [[ $1 == "text" ]]
-  then
-    echo "$2"
-  elif [[ $1 == "text*" ]]
-  then
-    echo -n "$2"
-  elif [[ $1 == "status" ]]
-  then
-    echo -n "Status: "
-    echo "$2 - $3"
-  elif [[ $1 == "link" ]]
-  then
-    echo "$2 - $3"
-  fi
-}
-
-wxiRed=$(tput setaf 196)
-wxiGreen=$(tput setaf 46)
-wxiYellow=$(tput setaf 226)
-wxiBlue=$(tput setaf 21)
-wxiPurple=$(tput setaf 165)
-wxiTurquoise=$(tput setaf 14)
-wxiPink=$(tput setaf 198)
-wxiOrange=$(tput setaf 202)
-wxiUnderline=$(tput smul)
-wxiBold=$(tput bold)
-wxiNormal=$(tput sgr0)
-
-wxiLink() {
-  printf '\e]8;;%s\e\\%s\e]8;;\e\\\n' "$2" "$1"
-  echo ""
-}
-
-wxi-header(){
-  if [[ $2 == "h1" ]]
-  then
-    #wxi-repeat " " $(($(tput cols)/2-${#1}/2))
-    echo -n "$wxiBold"
-    echo ${1^^}
-    echo -n "$wxiNormal"
-    echo ""
-  fi
-
-  if [[ $2 == "h1*" ]]
-  then
-    #wxi-repeat " " $(($(tput cols)/2-${#1}/2))
-    echo -n "$wxiBold"
-    echo ${1^^}
-    echo -n "$wxiNormal"
-  fi
-
-  if [[ $2 == "h2" || $2 == "" ]]
-  then
-    #wxi-repeat " " $(($(tput cols)/2-${#1}/2))
-    echo -n "$wxiBold"
-    echo ">> $1 <<"
-    echo -n "$wxiNormal"
-  fi
-
-  if [[ $2 == "h3" ]]
-  then
-    #wxi-repeat " " $(($(tput cols)/2-${#1}/2))
-    echo -n "$wxiBold"
-    echo "$1"
-    echo -n "$wxiNormal"
-  fi
-
-  if [[ $2 == "h4" ]]
-  then
-    #wxi-repeat " " $(($(tput cols)/2-${#1}/2))
-    echo -n "$wxiUnderline"
-    echo "$1"
-    echo -n "$wxiNormal"
-  fi
-}
-
-
-wxi-repeat() {
-  if [[ $1 == " " ]]
-  then
-    local str=$1 n=$2 spaces
-    printf -v spaces "%*s" $n " "
-    printf "%s" "${spaces// /$str}"
-  else
-    for i in $(seq 1 $2);
-    do
-        echo -en $1
-    done
-  fi
-}
-
-wx-login(){
-  wxi-header "Login"
-  wxi-restricted --user
-  wxi-restricted --org
-  wxi-restricted --vault
-
-  wxi-header "$ORG_HEADER" h3
-
-  if [[ ! -z ${args['auth-method']} ]]
-  then
-    AUTH_METHOD=${args['auth-method']}
-  elif [[ ! -z ${args['token']} ]]
-  then
-    AUTH_METHOD=token
-  elif [[ $(wxi-config-legacy login read) ]]
-  then
-    AUTH_METHOD=token
-  elif [[ ! -z ${args['username']} ]]
-  then
-    AUTH_METHOD=ldap
-  else
-    AUTH_METHOD=ldap
-  fi
-
-  if [[ ! -z $AUTH_METHOD ]]
-  then
-    case $AUTH_METHOD in
-      ldap)
-        echo -n "Username: "
-        if [[ ! -z ${args['username']} ]]
-        then
-          USERNAME=${args['username']}
-          wxi-content text "$USERNAME"
-        else
-          read USERNAME
-        fi
-
-        echo -n "Password: "
-        if [[ ! -z ${args['password']} ]]
-        then
-          PASSWORD=${args['password']}
-        else
-          read -s PASSWORD
-        fi
-
-        if [[ ! -z $PASSWORD ]]
-        then
-          wxi-content text "****************"
-        else
-          wxi-content text ""
-        fi
-
-        if [[ -z $USERNAME || -z $PASSWORD ]]
-        then
-          wxi-content status "Username & Password" "Required"
-          wxi-stop
-        fi
-
-        VAULT_LOGIN=$(curl https://$VAULT_DOMAIN/v1/auth/ldap/login/$USERNAME -X POST -d '{ "password": "'$PASSWORD'" }' -s | jq -r '.auth.client_token')
-        if [[ -z $VAULT_LOGIN || ${#VAULT_LOGIN} -lt 95 || ${#VAULT_LOGIN} -gt 95 ]]
-        then
-          wxi-content status "Login" "Failed"
-          wxi-stop
-        fi
-
-        TOKEN=$VAULT_LOGIN
-        wxi-config-legacy login write
-        ;;
-      token)
-        echo -n "Token: "
-        if [[ ! -z ${args['token']} ]]
-        then
-          if [[ ${args['token']} != "true" ]]
-          then
-            TOKEN=${args['token']}
-          fi
-        elif [[ $(wxi-config-legacy login read) ]]
-        then
-          TOKEN=$(wxi-config-legacy login read)
-        else
-          read -s TOKEN
-        fi
-
-        if [[ ! -z $TOKEN ]]
-        then
-          wxi-content text "***********************************************************************************************"
-        fi
-
-        if [[ -z $TOKEN ]]
-        then
-          wxi-content status "Token" "Required"
-          wxi-stop
-        fi
-
-        if [[ ${#TOKEN} -lt 95 || ${#TOKEN} -gt 95 ]]
-        then
-          wxi-content status "Token" "Invalid"
-          wxi-stop
-        fi
-
-        VAULT_LOGIN=$(curl https://$VAULT_DOMAIN/v1/auth/token/renew-self -X POST --header "X-Vault-Token: $TOKEN" -d '{ "token": "'$TOKEN'" }' -s | jq -r '.auth.client_token')
-        if [[ -z $VAULT_LOGIN || ${#VAULT_LOGIN} -lt 95 || ${#VAULT_LOGIN} -gt 95 ]]
-        then
-          wxi-content status "Login" "Failed"
-
-          if [[ $(wxi-config-legacy login read) ]]
-          then
-            wx-logout &> /dev/null
-            wx-login
-          else
-            wxi-stop
-          fi
-        fi
-
-        TOKEN=$VAULT_LOGIN
-        wxi-config-legacy login write
-        ;;
-      *)
-        wxi-content status "Login Type" "Unsupported"
-        wxi-stop
-        ;;
-    esac
-  fi
-
-  VAULT_USERNAME=$(curl https://$VAULT_DOMAIN/v1/auth/token/lookup-self -X GET --header "X-Vault-Token: $TOKEN" -s | jq -r '.data.display_name')
-  if [[ -z $VAULT_USERNAME ]]
-  then
-    wxi-content status "Login" "Username Missing"
-    wxi-stop
-  elif [[ $VAULT_USERNAME != ldap* && $VAULT_USERNAME != oidc* ]]
-  then
-    wxi-content status "Login" "Authentication Method Invalid"
-    wxi-stop
-  elif [[ $VAULT_USERNAME == ldap* ]]
-  then
-    USERNAME=${VAULT_USERNAME#ldap-}
-  elif [[ $VAULT_USERNAME == oidc* ]]
-  then
-    USERNAME=${VAULT_USERNAME#oidc-}
-  fi
-}
-
-
-wxi-args "$@"
-wxi-config
-
-echo -n $wxiBold$wxiRed
-cat <<'EOF'
-
-  (`\ .-') /`  ('-.     _  .-')     ('-.       .-') _
-   `.( OO ),' ( OO ).-.( \( -O )  _(  OO)     ( OO ) )
-,--./  .--.   / . --. / ,------. (,------.,--./ ,--,'
-|      |  |   | \-.  \  |   /`. ' |  .---'|   \ |  |\
-|  |   |  |,.-'-'  |  | |  /  | | |  |    |    \|  | )
-|  |.'.|  |_)\| |_.'  | |  |_.' |(|  '--. |  .     |/
-|         |   |  .-.  | |  .  '.' |  .--' |  |\    |
-|   ,'.   |   |  | |  | |  |\  \  |  `---.|  | \   |
-'--'   '--'   `--' `--' `--' '--' `------'`--'  `--'
-
-EOF
-echo -n $wxiNormal
-
-wxi-start
-wxi-init
-wxi-stop
-