Context Navigation

source: installer/opengnsys_installer_devel_esxi.sh @ eec3970

Visit:

configure-oglivelgromero-new-oglivemainmaint-cronmount-efivarfsmultivmmultivm-ogboot-installerogClonningEngineoglive-ipv6test-python-scriptsticket-301ticket-50ticket-50-oldticket-577ticket-585ticket-611ticket-612ticket-693ticket-700ubu24tplunification2use-local-agent-oglivevarios-instalacion

Last change on this file since eec3970 was ee47fac, checked in by Natalia Serrano <natalia.serrano@…>, 16 months ago
Fix permissions of certificate files, refs #134
Property mode set to `100755`
File size: 71.4 KB

Rev	Line
[b4f6d4b]	1	#!/bin/bash
	2
	3	#####################################################################
	4	####### Script instalador OpenGnsys
	5	####### Autor: Luis Guillén <lguillen@unizar.es>
	6	#####################################################################
	7
	8
	9	#####################################################################
	10	####### Funciones de configuración
	11	#####################################################################
[e404e82]	12
[b4f6d4b]	13	MY_BRANCH=$1
	14
[3513239]	15	# Devuelve en la variable PASSWORD la clave introducida por el usuario (o la indicada por defecto)
[b4f6d4b]	16	function enterPassword ()
	17	{
	18	local PASSWORD2
	19	local DEFAULT_PASSWORD="$1"
	20
	21	while : ; do
	22	stty -echo
	23	read -r PASSWORD
	24	stty echo
	25	if [ -z "$PASSWORD" ]; then
	26	# Si esta vacio ponemos el valor por defecto
	27	PASSWORD="${PASSWORD:-$DEFAULT_PASSWORD}"
	28	break
	29	else
	30	if [ -n "${PASSWORD//[a-zA-Z0-9]/}" ]; then # Comprobamos que sea un valor alfanumerico
	31	echo -e "\\aERROR: Password must be alphanumeric, try again..."
	32	else
	33	echo -n -e "\\nConfirm password: "
	34	stty -echo
	35	read -r PASSWORD2
	36	stty echo
	37	if [ "$PASSWORD" == "$PASSWORD2" ]; then
	38	break
	39	else
	40	echo -e "\\aERROR: Passwords don't match, try again."
	41	fi
	42	fi
	43	fi
	44	echo -n -e "Please, enter a new password (${DEFAULT_PASSWORD}): "
	45	done
	46	}
	47
	48	# Recoge los datos de configuración introducidos por el usuario.
	49	function userData ()
	50	{
	51	#### AVISO: Puede editar configuración de acceso por defecto.
	52	#### WARNING: Edit default access configuration if you wish.
	53	DEFAULT_MYSQL_ROOT_PASSWORD="passwordroot" # Clave por defecto root de MySQL
	54	DEFAULT_OPENGNSYS_DB_USER="usuog" # Usuario por defecto de acceso a la base de datos
	55	DEFAULT_OPENGNSYS_DB_PASSWD="passusuog" # Clave por defecto de acceso a la base de datos
	56	DEFAULT_OPENGNSYS_CLIENT_PASSWD="og" # Clave por defecto de acceso del cliente
	57	DEFAULT_OGLIVE="ogLive-focal-5.11.0-22-generic-amd64-r20210413.992ebb9.iso" # Cliente ogLive
	58
	59	echo -e "\\nOpenGnsys Installation"
	60	echo "=============================="
	61
	62	if [[ $- =~ s ]]; then
	63	echo -e "\\nNot interactive mode: setting default configuration values.\\n"
	64	MYSQL_ROOT_PASSWORD="$DEFAULT_MYSQL_ROOT_PASSWORD"
	65	OPENGNSYS_DB_USER="$DEFAULT_OPENGNSYS_DB_USER"
	66	OPENGNSYS_DB_PASSWD="$DEFAULT_OPENGNSYS_DB_PASSWD"
	67	OPENGNSYS_CLIENT_PASSWD="$DEFAULT_OPENGNSYS_CLIENT_PASSWD"
	68	OGLIVE="$DEFAULT_OGLIVE"
	69	return
	70	fi
	71
	72	# Clave root de MySQL
	73	echo -n -e "\\nEnter root password for MySQL (${DEFAULT_MYSQL_ROOT_PASSWORD}): "
	74	enterPassword "$DEFAULT_MYSQL_ROOT_PASSWORD"
	75	MYSQL_ROOT_PASSWORD="$PASSWORD"
	76
	77	# Usuario de acceso a la base de datos
	78	while : ; do
	79	echo -n -e "\\n\\nEnter username for OpenGnsys console (${DEFAULT_OPENGNSYS_DB_USER}): "
	80	read -r OPENGNSYS_DB_USER
	81	if [ -n "${OPENGNSYS_DB_USER//[a-zA-Z0-9]/}" ]; then # Comprobamos que sea un valor alfanumerico
	82	echo -e "\\aERROR: Must be alphanumeric, try again..."
	83	else
	84	# Si esta vacio ponemos el valor por defecto
	85	OPENGNSYS_DB_USER="${OPENGNSYS_DB_USER:-$DEFAULT_OPENGNSYS_DB_USER}"
	86	break
	87	fi
	88	done
	89
	90	# Clave de acceso a la base de datos
	91	echo -n -e "\\nEnter password for OpenGnsys console (${DEFAULT_OPENGNSYS_DB_PASSWD}): "
	92	enterPassword "$DEFAULT_OPENGNSYS_DB_PASSWD"
	93	OPENGNSYS_DB_PASSWD="$PASSWORD"
	94
	95	# Clave de acceso del cliente
	96	echo -n -e "\\n\\nEnter root password for OpenGnsys client (${DEFAULT_OPENGNSYS_CLIENT_PASSWD}): "
	97	enterPassword "$DEFAULT_OPENGNSYS_CLIENT_PASSWD"
	98	OPENGNSYS_CLIENT_PASSWD="$PASSWORD"
	99	unset PASSWORD
	100
	101	# Selección de clientes ogLive para descargar.
	102	while : ; do
	103	echo -e "\\n\\nChoose ogLive client to install."
	104	echo -e "1) Kernel 5.11, 64-bit, EFI-compatible"
	105	echo -e "2) Kernel 3.2, 32-bit"
	106	echo -e "3) Both"
	107	echo -n -e "Please, type a valid number (1): "
	108	read -r OPT
	109	case "$OPT" in
	110	1\|"") OGLIVE="$DEFAULT_OGLIVE"
	111	break ;;
	112	2) OGLIVE="ogLive-precise-3.2.0-23-generic-r5159.iso"
	113	break ;;
	114	3) OGLIVE=" $DEFAULT_OGLIVE ogLive-precise-3.2.0-23-generic-r5159.iso";
	115	break ;;
	116	*) echo -e "\\aERROR: unknown option, try again."
	117	esac
	118	done
	119
	120	echo -e "\\n=============================="
	121	}
	122
	123	# Asigna valores globales de configuración para el script.
	124	function globalSetup ()
	125	{
	126	PROGRAMDIR=$(readlink -e "$(dirname "$0")")
	127	PROGRAMNAME=$(basename "$0")
	128
	129	# Comprobar si se ha descargado el paquete comprimido (REMOTE=0) o sólo el instalador (REMOTE=1).
	130	OPENGNSYS_SERVER="opengnsys.es"
	131	DOWNLOADURL="https://$OPENGNSYS_SERVER/trac/downloads"
	132	if [ -d "$PROGRAMDIR/../installer" ]; then
[11fbd77]	133	echo REMOTE=0
[b4f6d4b]	134	REMOTE=0
	135	else
[11fbd77]	136	echo REMOTE=1
[b4f6d4b]	137	REMOTE=1
	138	fi
[a8044f7]	139	BRANCH=$1
	140	if [[ -z $BRANCH ]]; then
[b4f6d4b]	141	BRANCH="main"
[a8044f7]	142	fi
[b4f6d4b]	143	API_URL="https://api.github.com/repos/opengnsys/OpenGnsys"
[4733eca]	144	GIT_REPO="ssh://git@ognproject.evlt.uma.es:21987/opengnsys/opengnsys.git"
[b4f6d4b]	145
	146	# Directorios de instalación y destino de OpenGnsys.
	147	WORKDIR=/tmp/opengnsys_installer
	148	INSTALL_TARGET=/opt/opengnsys
	149	PATH=$PATH:$INSTALL_TARGET/bin
	150
	151	# Registro de incidencias.
	152	OGLOGFILE=$INSTALL_TARGET/log/${PROGRAMNAME%.sh}.log
	153	LOG_FILE=/tmp/$(basename $OGLOGFILE)
	154
	155	# Usuario del cliente para acceso remoto.
	156	OPENGNSYS_CLIENT_USER="opengnsys"
	157	# Nombre de la base datos y fichero SQL para su creación.
	158	OPENGNSYS_DATABASE="ogAdmBD"
	159	OPENGNSYS_DB_CREATION_FILE=opengnsys/admin/Database/${OPENGNSYS_DATABASE}.sql
[f605fae]	160
[a8044f7]	161	# Set Default net
[f605fae]	162	DHCPNET=${DHCPNET:-"NONE"}
	163	echo Default Network is $DHCPNET
[b4f6d4b]	164	}
	165
	166	# Generar variables de configuración del instalador
	167	# Variables globales:
	168	# - OSDISTRIB, OSVERSION - tipo y versión de la distribución GNU/Linux
	169	# - DEPENDENCIES - array de dependencias que deben estar instaladas
	170	# - UPDATEPKGLIST, INSTALLPKGS, CHECKPKGS - comandos para gestión de paquetes
	171	# - INSTALLEXTRADEPS - instalar dependencias no incluidas en la distribución
	172	# - STARTSERVICE, ENABLESERVICE - iniciar y habilitar un servicio
	173	# - STOPSERVICE, DISABLESERVICE - parar y deshabilitar un servicio
	174	# - APACHESERV, APACHECFGDIR, APACHESITESDIR, APACHEUSER, APACHEGROUP - servicio y configuración de Apache
	175	# - APACHEENABLEMODS, APACHEENABLESSL, APACHEMAKECERT - habilitar módulos y certificado SSL
	176	# - APACHEENABLEOG, APACHEOGSITE, - habilitar sitio web de OpenGnsys
	177	# - PHPFPMSERV - servicio PHP FastCGI Process Manager para Apache
	178	# - INETDSERV - servicio Inetd
	179	# - DHCPSERV, DHCPCFGDIR - servicio y configuración de DHCP
	180	# - MYSQLSERV, TMPMYCNF - servicio MySQL y fichero temporal con credenciales de acceso
	181	# - MARIADBSERV - servicio MariaDB (sustituto de MySQL en algunas distribuciones)
	182	# - RSYNCSERV, RSYNCCFGDIR - servicio y configuración de Rsync
	183	# - SAMBASERV, SAMBACFGDIR - servicio y configuración de Samba
	184	# - TFTPSERV, TFTPCFGDIR - servicio y configuración de TFTP/PXE
	185	function autoConfigure()
	186	{
	187	# Detectar sistema operativo del servidor (compatible con fichero os-release y con LSB).
	188	if [ -f /etc/os-release ]; then
	189	source /etc/os-release
	190	OSDISTRIB="$ID"
	191	OSVERSION="$VERSION_ID"
	192	else
	193	OSDISTRIB=$(lsb_release -is 2>/dev/null)
	194	OSVERSION=$(lsb_release -rs 2>/dev/null)
	195	fi
	196	# Convertir distribución a minúsculas y obtener solo el 1er número de versión.
	197	OSDISTRIB="${OSDISTRIB,,}"
	198	OSVERSION="${OSVERSION%%.*}"
	199
	200	# Configuración según la distribución GNU/Linux (usar minúsculas).
	201	case "$OSDISTRIB" in
	202	ubuntu\|debian\|linuxmint)
[11fbd77]	203	DEPENDENCIES=( subversion apache2 php php-ldap php-fpm mysql-server php-mysql isc-dhcp-server bittorrent tftp-hpa tftpd-hpa xinetd build-essential g++-multilib libmysqlclient-dev wget curl doxygen graphviz bittornado ctorrent samba rsync unzip netpipes debootstrap schroot squashfs-tools btrfs-tools procps arp-scan realpath php-curl gettext moreutils jq wakeonlan udpcast libev-dev libjansson-dev libssl-dev shim-signed grub-efi-amd64-signed gawk libdbi-dev libdbi1 libdbd-mysql liblz4-tool git stunnel4 )
[b4f6d4b]	204	UPDATEPKGLIST="apt-get update"
	205	INSTALLPKG="apt-get -y install --force-yes"
	206	CHECKPKG="dpkg -s \$package 2>/dev/null \| grep Status \| grep -qw install"
	207	if which service &>/dev/null; then
	208	STARTSERVICE="eval service \$service restart"
	209	STOPSERVICE="eval service \$service stop"
	210	else
	211	STARTSERVICE="eval /etc/init.d/\$service restart"
	212	STOPSERVICE="eval /etc/init.d/\$service stop"
	213	fi
	214	ENABLESERVICE="eval update-rc.d \$service defaults"
	215	DISABLESERVICE="eval update-rc.d \$service disable"
	216	APACHESERV=apache2
	217	APACHECFGDIR=/etc/apache2
	218	APACHESITESDIR=sites-available
	219	APACHEOGSITE=opengnsys
	220	APACHEUSER="www-data"
	221	APACHEGROUP="www-data"
	222	APACHEENABLEMODS="a2enmod ssl rewrite proxy_fcgi fastcgi actions alias"
	223	APACHEENABLESSL="a2ensite default-ssl"
	224	APACHEENABLEOG="a2ensite $APACHEOGSITE"
	225	APACHEMAKECERT="make-ssl-cert generate-default-snakeoil --force-overwrite"
	226	DHCPSERV=isc-dhcp-server
	227	DHCPCFGDIR=/etc/dhcp
	228	INETDSERV=xinetd
	229	INETDCFGDIR=/etc/xinetd.d
	230	MYSQLSERV=mysql
	231	MYSQLCFGDIR=/etc/mysql/mysql.conf.d
	232	MARIADBSERV=mariadb
	233	PHPFPMSERV=php-fpm
	234	RSYNCSERV=rsync
	235	RSYNCCFGDIR=/etc
	236	SAMBASERV=smbd
	237	SAMBACFGDIR=/etc/samba
	238	TFTPCFGDIR=/var/lib/tftpboot
[c9459a1]	239	LOCAL_CERTS_DIR=/usr/local/share/ca-certificates
	240	UPDATE_CA_CMD=update-ca-certificates
	241	STUNNEL_CAPATH=/etc/ssl/certs
[b4f6d4b]	242	;;
	243	fedora\|centos)
	244	DEPENDENCIES=( subversion httpd mod_ssl php-ldap php-fpm mysql-server mysql-devel mysql-devel.i686 php-mysql dhcp tftp-server tftp xinetd binutils gcc gcc-c++ glibc-devel glibc-devel.i686 glibc-static glibc-static.i686 libstdc++-devel.i686 make wget curl doxygen graphviz ctorrent samba samba-client rsync unzip debootstrap schroot squashfs-tools python-crypto arp-scan procps-ng gettext moreutils jq net-tools udpcast libev-devel jansson-devel openssl-devel shim-x64 grub2-efi-x64 grub2-efi-x64-modules gawk libdbi-devel libdbi libdbi-dbd-mysql http://ftp.altlinux.org/pub/distributions/ALTLinux/5.1/branch/$(arch)/RPMS.classic/netpipes-4.2-alt1.$(arch).rpm )
	245	[ "$OSDISTRIB" == "centos" ] && UPDATEPKGLIST="yum install -y https://dl.fedoraproject.org/pub/epel/epel-release-latest-$OSVERSION.noarch.rpm http://rpms.remirepo.net/enterprise/remi-release-$OSVERSION.rpm"
	246	INSTALLEXTRADEPS=( 'pushd /tmp; wget -t3 http://ftp.acc.umu.se/mirror/bittornado/BitTornado-0.3.18.tar.gz && tar xvzf BitTornado-0.3.18.tar.gz && cd BitTornado-CVS && python setup.py install && ln -fs btlaunchmany.py /usr/bin/btlaunchmany && ln -fs bttrack.py /usr/bin/bttrack; popd' )
	247	INSTALLPKG="yum install -y libstdc++ libstdc++.i686"
	248	CHECKPKG="rpm -q --quiet \$package"
	249	SYSTEMD=$(which systemctl 2>/dev/null)
	250	if [ -n "$SYSTEMD" ]; then
	251	STARTSERVICE="eval systemctl start \$service.service"
	252	STOPSERVICE="eval systemctl stop \$service.service"
	253	ENABLESERVICE="eval systemctl enable \$service.service"
	254	DISABLESERVICE="eval systemctl disable \$service.service"
	255	else
	256	STARTSERVICE="eval service \$service start"
	257	STOPSERVICE="eval service \$service stop"
	258	ENABLESERVICE="eval chkconfig \$service on"
	259	DISABLESERVICE="eval chkconfig \$service off"
	260	fi
	261	APACHESERV=httpd
	262	APACHECFGDIR=/etc/httpd/conf.d
	263	APACHEOGSITE=opengnsys.conf
	264	APACHEUSER="apache"
	265	APACHEGROUP="apache"
	266	APACHEREWRITEMOD="sed -i '/rewrite/s/^#//' $APACHECFGDIR/../*.conf"
	267	DHCPSERV=dhcpd
	268	DHCPCFGDIR=/etc/dhcp
	269	INETDSERV=xinetd
	270	INETDCFGDIR=/etc/xinetd.d
	271	MYSQLSERV=mysqld
	272	MYSQLCFGDIR=/etc/my.cnf.d
	273	MARIADBSERV=mariadb
	274	PHPFPMSERV=php-fpm
	275	RSYNCSERV=rsync
	276	RSYNCCFGDIR=/etc
	277	SAMBASERV=smb
	278	SAMBACFGDIR=/etc/samba
	279	TFTPSERV=tftp
	280	TFTPCFGDIR=/var/lib/tftpboot
[c9459a1]	281	LOCAL_CERTS_DIR=/etc/pki/ca-trust/source/anchors
	282	UPDATE_CA_CMD=update-ca-trust
	283	STUNNEL_CAPATH=/etc/pki/tls/certs
[b4f6d4b]	284	;;
	285	"") echo "ERROR: Unknown Linux distribution, please install \"lsb_release\" command."
	286	exit 1 ;;
	287	*) echo "ERROR: Distribution not supported by OpenGnsys."
	288	exit 1 ;;
	289	esac
	290
	291	# Fichero de credenciales de acceso a MySQL.
	292	TMPMYCNF=/tmp/.my.cnf.$$
	293	}
	294
	295
	296	# Modificar variables de configuración tras instalar paquetes del sistema.
	297	function autoConfigurePost()
	298	{
	299	local f MKNETDIR
	300
	301	# Configuraciones específicas para Samba y TFTP en Debian 6.
	302	[ -z "$SYSTEMD" -a ! -e /etc/init.d/$SAMBASERV ] && SAMBASERV=samba
	303	[ ! -e $TFTPCFGDIR ] && TFTPCFGDIR=/srv/tftp
	304
	305	# Preparar arranque en red con Grub.
	306	for f in grub-mknetdir grub2-mknetdir; do
	307	if which $f &>/dev/null; then MKNETDIR=$f; fi
	308	done
	309	$MKNETDIR --net-directory=$TFTPCFGDIR --subdir=grub
	310	}
	311
	312
	313	# Cargar lista de paquetes del sistema y actualizar algunas variables de configuración
	314	# dependiendo de la versión instalada.
	315	function updatePackageList()
	316	{
	317	local DHCPVERSION PHP7VERSION
	318
	319	# Si es necesario, actualizar la lista de paquetes disponibles.
	320	[ -n "$UPDATEPKGLIST" ] && eval $UPDATEPKGLIST
	321
	322	# Configuración personallizada de algunos paquetes.
	323	case "$OSDISTRIB" in
	324	ubuntu\|linuxmint) # Postconfiguación personalizada para Ubuntu.
	325	# Configuración para DHCP v3.
	326	DHCPVERSION=$(apt-cache show $(apt-cache pkgnames\|egrep "dhcp.?-server$") \| \
	327	awk '/Version/ {print substr($2,1,1);}' \| \
	328	sort -n \| tail -1)
	329	if [ $DHCPVERSION = 3 ]; then
	330	DEPENDENCIES=( ${DEPENDENCIES[@]/isc-dhcp-server/dhcp3-server} )
	331	DHCPSERV=dhcp3-server
	332	DHCPCFGDIR=/etc/dhcp3
	333	fi
	334	# Configuración para PHP 7 en Ubuntu.
	335	if [ -z "$(apt-cache pkgnames php7)" ]; then
	336	eval $INSTALLPKG software-properties-common
	337	add-apt-repository -y ppa:ondrej/php
	338	eval $UPDATEPKGLIST
	339	PHP7VERSION=$(apt-cache pkgnames php7 \| sort \| head -1)
	340	PHPFPMSERV="${PHP7VERSION}-fpm"
	341	DEPENDENCIES=( ${DEPENDENCIES[@]//php/$PHP7VERSION} )
	342	fi
	343	# Adaptar dependencias para libmysqlclient.
	344	[ -z "$(apt-cache pkgnames libmysqlclient-dev)" ] && [ -n "$(apt-cache pkgnames libmysqlclient15)" ] && DEPENDENCIES=( ${DEPENDENCIES[@]//libmysqlclient-dev/libmysqlclient15} )
	345	# Paquetes correctos en versiones nuevas.
	346	[ -z "$(apt-cache pkgnames realpath)" ] && DEPENDENCIES=( ${DEPENDENCIES[@]//realpath/coreutils} )
	347	[ -z "$(apt-cache pkgnames btrfs-tools)" ] && DEPENDENCIES=( ${DEPENDENCIES[@]//btrfs-tools/btrfs-progs} )
	348	[ -z "$(apt-cache pkgnames bittorrent)" ] && DEPENDENCIES=( ${DEPENDENCIES[@]//bittorrent/} )
	349	[ -z "$(apt-cache pkgnames bittornado)" ] && DEPENDENCIES=( ${DEPENDENCIES[@]//bittornado/} )
	350	;;
	351	centos) # Postconfiguación personalizada para CentOS.
	352	# Configuración para PHP 7.
	353	PHP7VERSION=$(yum list -q php7\* 2>/dev/null \| awk -F. '/^php/ {print $1; exit;}')
	354	PHPFPMSERV="${PHP7VERSION}-${PHPFPMSERV}"
	355	DEPENDENCIES=( ${PHP7VERSION} ${DEPENDENCIES[@]//php/$PHP7VERSION-php} )
	356	# Cambios a aplicar a partir de CentOS 7.
	357	if [ $OSVERSION -ge 7 ]; then
	358	# Sustituir MySQL por MariaDB.
	359	DEPENDENCIES=( ${DEPENDENCIES[*]/mysql-/mariadb-} )
	360	# Instalar ctorrent de EPEL para CentOS 6 (no disponible en CentOS 7).
	361	DEPENDENCIES=( ${DEPENDENCIES[*]/ctorrent/http://dl.fedoraproject.org/pub/epel/6/$(arch)/Packages/c/ctorrent-1.3.4-14.dnh3.3.2.el6.$(arch).rpm} )
	362	fi
	363	;;
	364	fedora) # Postconfiguación personalizada para Fedora.
	365	# Incluir paquetes específicos.
	366	DEPENDENCIES=( ${DEPENDENCIES[@]} btrfs-progs )
	367	# Sustituir MySQL por MariaDB a partir de Fedora 20.
	368	[ $OSVERSION -ge 20 ] && DEPENDENCIES=( ${DEPENDENCIES[*]/mysql-/mariadb-} )
	369	;;
	370	esac
	371	}
	372
	373
	374	#####################################################################
	375	####### Algunas funciones útiles de propósito general:
	376	#####################################################################
	377
	378	function getDateTime()
	379	{
	380	date "+%Y%m%d-%H%M%S"
	381	}
	382
	383	# Escribe a fichero y muestra por pantalla
	384	function echoAndLog()
	385	{
	386	local DATETIME=`getDateTime`
	387	echo "$1"
	388	echo "$DATETIME;$SSH_CLIENT;$1" >> $LOG_FILE
	389	}
	390
	391	# Escribe a fichero y muestra mensaje de error
	392	function errorAndLog()
	393	{
	394	local DATETIME=`getDateTime`
	395	echo "ERROR: $1"
	396	echo "$DATETIME;$SSH_CLIENT;ERROR: $1" >> $LOG_FILE
	397	}
	398
	399	# Escribe a fichero y muestra mensaje de aviso
	400	function warningAndLog()
	401	{
	402	local DATETIME=`getDateTime`
	403	echo "Warning: $1"
	404	echo "$DATETIME;$SSH_CLIENT;Warning: $1" >> $LOG_FILE
	405	}
	406
	407	# Comprueba si el elemento pasado en $2 está en el array $1
	408	function isInArray()
	409	{
	410	if [ $# -ne 2 ]; then
	411	errorAndLog "${FUNCNAME}(): invalid number of parameters"
	412	exit 1
	413	fi
	414
	415	local deps
	416	local is_in_array=1
	417	local element="$2"
	418
	419	echoAndLog "${FUNCNAME}(): checking if $2 is in $1"
	420	eval "deps=( \"\${$1[@]}\" )"
	421
	422	# Copia local del array del parámetro 1.
	423	for (( i = 0 ; i < ${#deps[@]} ; i++ )); do
	424	if [ "${deps[$i]}" = "${element}" ]; then
	425	echoAndLog "isInArray(): $element found in array"
	426	is_in_array=0
	427	fi
	428	done
	429
	430	if [ $is_in_array -ne 0 ]; then
	431	echoAndLog "${FUNCNAME}(): $element NOT found in array"
	432	fi
	433
	434	return $is_in_array
	435	}
	436
	437
	438	#####################################################################
	439	####### Funciones de manejo de paquetes Debian
	440	#####################################################################
	441
	442	function checkPackage()
	443	{
	444	package=$1
	445	if [ -z $package ]; then
	446	errorAndLog "${FUNCNAME}(): parameter required"
	447	exit 1
	448	fi
	449	echoAndLog "${FUNCNAME}(): checking if package $package exists"
	450	eval $CHECKPKG
	451	if [ $? -eq 0 ]; then
	452	echoAndLog "${FUNCNAME}(): package $package exists"
	453	return 0
	454	else
	455	echoAndLog "${FUNCNAME}(): package $package doesn't exists"
	456	return 1
	457	fi
	458	}
	459
	460	# Recibe array con dependencias
	461	# por referencia deja un array con las dependencias no resueltas
	462	# devuelve 1 si hay alguna dependencia no resuelta
	463	function checkDependencies()
	464	{
	465	if [ $# -ne 2 ]; then
	466	errorAndLog "${FUNCNAME}(): invalid number of parameters"
	467	exit 1
	468	fi
	469
	470	echoAndLog "${FUNCNAME}(): checking dependences"
	471	uncompletedeps=0
	472
	473	# copia local del array del parametro 1
	474	local deps
	475	eval "deps=( \"\${$1[@]}\" )"
	476
	477	declare -a local_notinstalled
	478
	479	for (( i = 0 ; i < ${#deps[@]} ; i++ ))
	480	do
	481	checkPackage ${deps[$i]}
	482	if [ $? -ne 0 ]; then
	483	local_notinstalled[$uncompletedeps]=$package
	484	let uncompletedeps=uncompletedeps+1
	485	fi
	486	done
	487
	488	# relleno el array especificado en $2 por referencia
	489	for (( i = 0 ; i < ${#local_notinstalled[@]} ; i++ ))
	490	do
	491	eval "${2}[$i]=${local_notinstalled[$i]}"
	492	done
	493
	494	# retorna el numero de paquetes no resueltos
	495	echoAndLog "${FUNCNAME}(): dependencies uncompleted: $uncompletedeps"
	496	return $uncompletedeps
	497	}
	498
	499	# Recibe un array con las dependencias y lo instala
	500	function installDependencies()
	501	{
	502	if [ $# -ne 1 ]; then
	503	errorAndLog "${FUNCNAME}(): invalid number of parameters"
	504	exit 1
	505	fi
	506	echoAndLog "${FUNCNAME}(): installing uncompleted dependencies"
	507
	508	# copia local del array del parametro 1
	509	local deps
	510	eval "deps=( \"\${$1[@]}\" )"
	511
	512	local string_deps=""
	513	for (( i = 0 ; i < ${#deps[@]} ; i++ ))
	514	do
	515	string_deps="$string_deps ${deps[$i]}"
	516	done
	517
	518	if [ -z "${string_deps}" ]; then
	519	errorAndLog "${FUNCNAME}(): array of dependeces is empty"
	520	exit 1
	521	fi
	522
	523	OLD_DEBIAN_FRONTEND=$DEBIAN_FRONTEND # Debian/Ubuntu
	524	export DEBIAN_FRONTEND=noninteractive
	525
	526	echoAndLog "${FUNCNAME}(): now $string_deps will be installed"
	527	eval $INSTALLPKG $string_deps
	528	if [ $? -ne 0 ]; then
	529	errorAndLog "${FUNCNAME}(): error installing dependencies"
	530	return 1
	531	fi
	532
	533	DEBIAN_FRONTEND=$OLD_DEBIAN_FRONTEND # Debian/Ubuntu
	534	test grep -q "EPEL temporal" /etc/yum.repos.d/epel.repo 2>/dev/null \|\| mv -f /etc/yum.repos.d/epel.repo.rpmnew /etc/yum.repos.d/epel.repo 2>/dev/null # CentOS/RedHat EPEL
	535
	536	echoAndLog "${FUNCNAME}(): dependencies installed"
	537	}
	538
	539	# Hace un backup del fichero pasado por parámetro
	540	# deja un -last y uno para el día
	541	function backupFile()
	542	{
	543	if [ $# -ne 1 ]; then
	544	errorAndLog "${FUNCNAME}(): invalid number of parameters"
	545	exit 1
	546	fi
	547
	548	local file="$1"
	549	local dateymd=`date +%Y%m%d`
	550
	551	if [ ! -f "$file" ]; then
	552	warningAndLog "${FUNCNAME}(): file $file doesn't exists"
	553	return 1
	554	fi
	555
	556	echoAndLog "${FUNCNAME}(): making $file backup"
	557
	558	# realiza una copia de la última configuración como last
	559	cp -a "$file" "${file}-LAST"
	560
	561	# si para el día no hay backup lo hace, sino no
	562	if [ ! -f "${file}-${dateymd}" ]; then
	563	cp -a "$file" "${file}-${dateymd}"
	564	fi
	565
	566	echoAndLog "${FUNCNAME}(): $file backup success"
	567	}
	568
	569	#####################################################################
	570	####### Funciones para el manejo de bases de datos
	571	#####################################################################
	572
	573	# This function set password to root
	574	function mysqlSetRootPassword()
	575	{
	576	if [ $# -ne 1 ]; then
	577	errorAndLog "${FUNCNAME}(): invalid number of parameters"
	578	exit 1
	579	fi
	580
	581	local root_mysql="$1"
	582	echoAndLog "${FUNCNAME}(): setting root password in MySQL server"
	583	mysqladmin -u root password "$root_mysql"
	584	if [ $? -ne 0 ]; then
	585	errorAndLog "${FUNCNAME}(): error while setting root password in MySQL server"
	586	return 1
	587	fi
	588	echoAndLog "${FUNCNAME}(): root password saved!"
	589	return 0
	590	}
	591
	592	# Si el servicio mysql esta ya instalado cambia la variable de la clave del root por la ya existente
	593	function mysqlGetRootPassword()
	594	{
	595	local pass_mysql
	596	local pass_mysql2
	597	# Comprobar si MySQL está instalado con la clave de root por defecto.
	598	if mysql -u root -p"$MYSQL_ROOT_PASSWORD" <<<"quit" 2>/dev/null; then
	599	echoAndLog "${FUNCNAME}(): Using default mysql root password."
	600	else
	601	stty -echo
	602	echo "There is a MySQL service already installed."
	603	read -p "Enter MySQL root password: " pass_mysql
	604	echo ""
	605	read -p "Confrim password:" pass_mysql2
	606	echo ""
	607	stty echo
	608	if [ "$pass_mysql" == "$pass_mysql2" ] ;then
	609	MYSQL_ROOT_PASSWORD="$pass_mysql"
	610	return 0
	611	else
	612	echo "The keys don't match. Do not configure the server's key,"
	613	echo "transactions in the database will give error."
	614	return 1
	615	fi
	616	fi
	617	}
	618
	619	# comprueba si puede conectar con mysql con el usuario root
	620	function mysqlTestConnection()
	621	{
	622	if [ $# -ne 1 ]; then
	623	errorAndLog "${FUNCNAME}(): invalid number of parameters"
	624	exit 1
	625	fi
	626
	627	local root_password="$1"
	628	echoAndLog "${FUNCNAME}(): checking connection to mysql..."
	629	# Componer fichero con credenciales de conexión a MySQL.
	630	touch $TMPMYCNF
	631	chmod 600 $TMPMYCNF
	632	cat << EOT > $TMPMYCNF
	633	[client]
	634	user=root
	635	password=$root_password
	636	EOT
	637	# Borrar el fichero temporal si termina el proceso de instalación.
	638	trap "rm -f $TMPMYCNF" 0 1 2 3 6 9 15
	639	# Comprobar conexión a MySQL.
	640	echo "" \| mysql --defaults-extra-file=$TMPMYCNF
	641	if [ $? -ne 0 ]; then
	642	errorAndLog "${FUNCNAME}(): connection to mysql failed, check root password and if daemon is running!"
	643	return 1
	644	else
	645	echoAndLog "${FUNCNAME}(): connection success"
	646	return 0
	647	fi
	648	}
	649
	650	# comprueba si la base de datos existe
	651	function mysqlDbExists()
	652	{
	653	if [ $# -ne 1 ]; then
	654	errorAndLog "${FUNCNAME}(): invalid number of parameters"
	655	exit 1
	656	fi
	657
	658	local database="$1"
	659	echoAndLog "${FUNCNAME}(): checking if $database exists..."
	660	echo "show databases" \| mysql --defaults-extra-file=$TMPMYCNF \| grep "^${database}$"
	661	if [ $? -ne 0 ]; then
	662	echoAndLog "${FUNCNAME}():database $database doesn't exists"
	663	return 1
	664	else
	665	echoAndLog "${FUNCNAME}():database $database exists"
	666	return 0
	667	fi
	668	}
	669
	670	# Comprueba si la base de datos está vacía.
	671	function mysqlCheckDbIsEmpty()
	672	{
	673	if [ $# -ne 1 ]; then
	674	errorAndLog "${FUNCNAME}(): invalid number of parameters"
	675	exit 1
	676	fi
	677
	678	local database="$1"
	679	echoAndLog "${FUNCNAME}(): checking if $database is empty..."
	680	num_tablas=`echo "show tables" \| mysql --defaults-extra-file=$TMPMYCNF "${database}" \| wc -l`
	681	if [ $? -ne 0 ]; then
	682	errorAndLog "${FUNCNAME}(): error executing query, check database and root password"
	683	exit 1
	684	fi
	685
	686	if [ $num_tablas -eq 0 ]; then
	687	echoAndLog "${FUNCNAME}():database $database is empty"
	688	return 0
	689	else
	690	echoAndLog "${FUNCNAME}():database $database has tables"
	691	return 1
	692	fi
	693
	694	}
	695
	696	# Importa un fichero SQL en la base de datos.
	697	# Parámetros:
	698	# - 1: nombre de la BD.
	699	# - 2: fichero a importar.
	700	# Nota: el fichero SQL puede contener las siguientes palabras reservadas:
	701	# - SERVERIP: se sustituye por la dirección IP del servidor.
	702	# - DBUSER: se sustituye por usuario de conexión a la BD definido en este script.
	703	# - DBPASSWD: se sustituye por la clave de conexión a la BD definida en este script.
	704	function mysqlImportSqlFileToDb()
	705	{
	706	if [ $# -ne 2 ]; then
	707	errorAndLog "${FNCNAME}(): invalid number of parameters"
	708	exit 1
	709	fi
	710
	711	local database="$1"
	712	local sqlfile="$2"
	713	local tmpfile=$(mktemp)
	714	local i=0
	715	local dev=""
	716	local status
	717
	718	if [ ! -f $sqlfile ]; then
	719	errorAndLog "${FUNCNAME}(): Unable to locate $sqlfile!!"
	720	return 1
	721	fi
	722
	723	echoAndLog "${FUNCNAME}(): importing SQL file to ${database}..."
	724	chmod 600 $tmpfile
	725	for dev in ${DEVICE[*]}; do
	726	if [ "${DEVICE[i]}" == "$DEFAULTDEV" ]; then
	727	sed -e "s/SERVERIP/${SERVERIP[i]}/g" \
	728	-e "s/DBUSER/$OPENGNSYS_DB_USER/g" \
	729	-e "s/DBPASSWORD/$OPENGNSYS_DB_PASSWD/g" \
	730	$sqlfile > $tmpfile
	731	fi
	732	let i++
	733	done
	734	mysql --defaults-extra-file=$TMPMYCNF --default-character-set=utf8 "${database}" < $tmpfile
	735	status=$?
	736	rm -f $tmpfile
	737	if [ $status -ne 0 ]; then
	738	errorAndLog "${FUNCNAME}(): error while importing $sqlfile in database $database"
	739	return 1
	740	fi
	741	echoAndLog "${FUNCNAME}(): file imported to database $database"
	742	return 0
	743	}
	744
	745	# Crea la base de datos
	746	function mysqlCreateDb()
	747	{
	748	if [ $# -ne 1 ]; then
	749	errorAndLog "${FUNCNAME}(): invalid number of parameters"
	750	exit 1
	751	fi
	752
	753	local database="$1"
	754
	755	echoAndLog "${FUNCNAME}(): creating database..."
	756	mysqladmin --defaults-extra-file=$TMPMYCNF create $database
	757	if [ $? -ne 0 ]; then
	758	errorAndLog "${FUNCNAME}(): error while creating database $database"
	759	return 1
	760	fi
	761	# Quitar modo ONLY_FULL_GROUP_BY de MySQL (ticket #730).
	762	mysql --defaults-extra-file=$TMPMYCNF -e "SET GLOBAL sql_mode=(SELECT TRIM(BOTH ',' FROM REPLACE(@@sql_mode,'ONLY_FULL_GROUP_BY','')));"
	763
	764	echoAndLog "${FUNCNAME}(): database $database created"
	765	return 0
	766	}
	767
	768	# Comprueba si ya está definido el usuario de acceso a la BD.
	769	function mysqlCheckUserExists()
	770	{
	771	if [ $# -ne 1 ]; then
	772	errorAndLog "${FUNCNAME}(): invalid number of parameters"
	773	exit 1
	774	fi
	775
	776	local userdb="$1"
	777
	778	echoAndLog "${FUNCNAME}(): checking if $userdb exists..."
	779	echo "select user from user where user='${userdb}'\\G" \|mysql --defaults-extra-file=$TMPMYCNF mysql \| grep user
	780	if [ $? -ne 0 ]; then
	781	echoAndLog "${FUNCNAME}(): user doesn't exists"
	782	return 1
	783	else
	784	echoAndLog "${FUNCNAME}(): user already exists"
	785	return 0
	786	fi
	787
	788	}
	789
	790	# Crea un usuario administrativo para la base de datos
	791	function mysqlCreateAdminUserToDb()
	792	{
	793	if [ $# -ne 3 ]; then
	794	errorAndLog "${FUNCNAME}(): invalid number of parameters"
	795	exit 1
	796	fi
	797
	798	local database="$1"
	799	local userdb="$2"
	800	local passdb="$3"
	801
	802	echoAndLog "${FUNCNAME}(): creating admin user ${userdb} to database ${database}"
	803
	804	cat > $WORKDIR/create_${database}.sql <<EOF
	805	CREATE USER '${userdb}'@'localhost' IDENTIFIED BY '${passdb}';
	806	GRANT USAGE ON . TO '${userdb}'@'localhost';
	807	GRANT ALL PRIVILEGES ON ${database}.* TO '${userdb}'@'localhost' WITH GRANT OPTION;
	808	FLUSH PRIVILEGES;
	809	EOF
	810	mysql --defaults-extra-file=$TMPMYCNF < $WORKDIR/create_${database}.sql
	811	if [ $? -ne 0 ]; then
	812	errorAndLog "${FUNCNAME}(): error while creating user in mysql"
	813	rm -f $WORKDIR/create_${database}.sql
	814	return 1
	815	else
	816	echoAndLog "${FUNCNAME}(): user created ok"
	817	rm -f $WORKDIR/create_${database}.sql
	818	return 0
	819	fi
	820	}
	821
	822
	823	#####################################################################
	824	####### Funciones para la descarga de código
	825	#####################################################################
	826
	827	# Obtiene el código fuente del proyecto desde el repositorio de GitHub.
	828	function downloadCode()
	829	{
	830	if [ $# -ne 1 ]; then
	831	errorAndLog "${FUNCNAME}(): invalid number of parameters"
	832	exit 1
	833	fi
	834
	835	local url="$1"
	836
[85df22be]	837	echoAndLog "${FUNCNAME}(): downloading code from '$url'..."
[b4f6d4b]	838
[11fbd77]	839	GIT_SSH_COMMAND="ssh -o StrictHostKeyChecking=accept-new" git archive --remote=$url --format zip --output opengnsys.zip --prefix=opengnsys/ $BRANCH && unzip opengnsys.zip
[b4f6d4b]	840	if [ $? -ne 0 ]; then
	841	errorAndLog "${FUNCNAME}(): error getting OpenGnsys code from $url"
	842	return 1
	843	fi
	844	rm -f opengnsys.zip
	845	echoAndLog "${FUNCNAME}(): code was downloaded"
	846	return 0
	847	}
	848
	849
	850	############################################################
	851	### Detectar red
	852	############################################################
	853
	854	# Comprobar si existe conexión.
	855	function checkNetworkConnection()
	856	{
	857	echoAndLog "${FUNCNAME}(): Checking OpenGnsys server connectivity."
	858	OPENGNSYS_SERVER=${OPENGNSYS_SERVER:-"opengnsys.es"}
	859	if which curl &>/dev/null; then
[17dc359]	860	curl --connect-timeout 10 --retry 5 --retry-delay 5 --max-time 30 "https://$OPENGNSYS_SERVER/" -o /dev/null && \
	861	curl --connect-timeout 10 --retry 5 --retry-delay 5 --max-time 30 "http://$OPENGNSYS_SERVER/" -o /dev/null
[b4f6d4b]	862	elif which wget &>/dev/null; then
	863	wget --spider -q "https://$OPENGNSYS_SERVER/" && \
	864	wget --spider -q "http://$OPENGNSYS_SERVER/"
	865	else
	866	echoAndLog "${FUNCNAME}(): Cannot execute \"wget\" nor \"curl\"."
	867	return 1
	868	fi
	869	}
	870
	871	# Convierte nº de bits (notación CIDR) en máscara de red (gracias a FriedZombie en openwrt.org).
	872	cidr2mask ()
	873	{
	874	# Number of args to shift, 255..255, first non-255 byte, zeroes
	875	set -- $[ 5 - ($1 / 8) ] 255 255 255 255 $[ (255 << (8 - ($1 % 8))) & 255 ] 0 0 0
	876	[ $1 -gt 1 ] && shift $1 \|\| shift
	877	echo ${1-0}.${2-0}.${3-0}.${4-0}
	878	}
	879
	880	# Obtener los parámetros de red de la interfaz por defecto.
	881	function getNetworkSettings()
	882	{
	883	# Arrays globales definidas:
	884	# - DEVICE: nombres de dispositivos de red activos.
	885	# - SERVERIP: IPs locales del servidor.
	886	# - NETIP: IPs de redes.
	887	# - NETMASK: máscaras de red.
	888	# - NETBROAD: IPs de difusión de redes.
	889	# - ROUTERIP: IPs de routers.
	890	# Otras variables globales:
	891	# - DEFAULTDEV: dispositivo de red por defecto.
	892	# - DNSIP: IP del servidor DNS principal.
	893
	894	local i=0
	895	local dev=""
[c9459a1]	896
[b4f6d4b]	897	echoAndLog "${FUNCNAME}(): Detecting network parameters."
[c9459a1]	898	DEVICE=( $(ip -o link show up \| awk '!/loopback/ {sub(/[:@].*/,"",$2); print $2}') )
[b4f6d4b]	899	if [ -z "$DEVICE" ]; then
	900	errorAndLog "${FUNCNAME}(): Network devices not detected."
	901	exit 1
	902	fi
	903	for dev in ${DEVICE[*]}; do
	904	SERVERIP[i]=$(ip -o addr show dev "$dev" \| awk '$3~/inet$/ {sub (/\/.*/, ""); print ($4); exit;}')
	905	if [ -n "${SERVERIP[i]}" ]; then
	906	NETMASK[i]=$( cidr2mask $(ip -o addr show dev "$dev" \| awk '$3~/inet$/ {sub (/.*\//, "", $4); print ($4); exit;}') )
	907	NETBROAD[i]=$(ip -o addr show dev "$dev" \| awk '$3~/inet$/ {print ($6); exit;}')
	908	NETIP[i]=$(ip route list proto kernel \| awk -v d="$dev" '$3==d && /src/ {sub (/\/.*/,""); print $1; exit;}')
	909	ROUTERIP[i]=$(ip route list default \| awk -v d="$dev" '$5==d {print $3; exit;}')
[a8044f7]	910	if [ $DHCPNET == ${NETIP[i]} ]; then
[f605fae]	911	DEFAULTDEV="$dev"
	912	else
	913	DEFAULTDEV=${DEFAULTDEV:-"$dev"}
	914	fi
[b4f6d4b]	915	fi
	916	let i++
	917	done
	918	DNSIP=$(systemd-resolve --status 2>/dev/null \| awk '/DNS Servers:/ {print $3; exit;}')
	919	[ -z "$DNSIP" ] && DNSIP=$(awk '/nameserver/ {print $2; exit;}' /etc/resolv.conf)
	920	if [ -z "${NETIP[]}" -o -z "${NETMASK[]}" ]; then
	921	errorAndLog "${FUNCNAME}(): Network not detected."
	922	exit 1
	923	fi
	924
	925	# Variables de ejecución de Apache
	926	# - APACHE_RUN_USER
	927	# - APACHE_RUN_GROUP
	928	if [ -f $APACHECFGDIR/envvars ]; then
	929	source $APACHECFGDIR/envvars
	930	fi
	931	APACHE_RUN_USER=${APACHE_RUN_USER:-"$APACHEUSER"}
	932	APACHE_RUN_GROUP=${APACHE_RUN_GROUP:-"$APACHEGROUP"}
	933
	934	echoAndLog "${FUNCNAME}(): Default network device: $DEFAULTDEV."
	935	}
	936
	937
	938	############################################################
	939	### Esqueleto para el Servicio pxe y contenedor tftpboot ###
	940	############################################################
	941
	942	function tftpConfigure()
	943	{
	944	echoAndLog "${FUNCNAME}(): Configuring TFTP service."
	945	# Habilitar TFTP y reiniciar Inetd.
	946	if [ -n "$TFTPSERV" ]; then
	947	if [ -f $INETDCFGDIR/$TFTPSERV ]; then
	948	perl -pi -e 's/disable.*/disable = no/' $INETDCFGDIR/$TFTPSERV
	949	else
	950	service=$TFTPSERV
	951	$ENABLESERVICE; $STARTSERVICE
	952	fi
	953	fi
	954	service=$INETDSERV
	955	$ENABLESERVICE; $STARTSERVICE
	956
	957	# comprobamos el servicio tftp
	958	sleep 1
	959	testPxe
	960	}
	961
	962	# Comprueba que haya conexión al servicio TFTP/PXE.
	963	function testPxe ()
	964	{
	965	echoAndLog "${FUNCNAME}(): Checking TFTP service... please wait."
	966	echo "test" >$TFTPCFGDIR/testpxe
	967	tftp -v 127.0.0.1 -c get testpxe /tmp/testpxe && echoAndLog "TFTP service is OK." \|\| errorAndLog "TFTP service is down."
	968	rm -f $TFTPCFGDIR/testpxe /tmp/testpxe
	969	}
	970
	971
	972	########################################################################
	973	## Configuración servicio Samba
	974	########################################################################
	975
	976	# Configurar servicios Samba.
	977	function smbConfigure()
	978	{
	979	echoAndLog "${FUNCNAME}(): Configuring Samba service."
	980
	981	backupFile $SAMBACFGDIR/smb.conf
	982
	983	# Copiar plantailla de recursos para OpenGnsys
	984	sed -e "s/OPENGNSYSDIR/${INSTALL_TARGET//\//\\/}/g" \
	985	$WORKDIR/opengnsys/server/etc/smb-og.conf.tmpl > $SAMBACFGDIR/smb-og.conf
	986	# Configurar y recargar Samba"
	987	perl -pi -e "s/WORKGROUP/OPENGNSYS/; s/server string \=.*/server string \= OpenGnsys Samba Server/" $SAMBACFGDIR/smb.conf
	988	if ! grep -q "smb-og" $SAMBACFGDIR/smb.conf; then
	989	echo "include = $SAMBACFGDIR/smb-og.conf" >> $SAMBACFGDIR/smb.conf
	990	fi
	991	service=$SAMBASERV
	992	$ENABLESERVICE; $STARTSERVICE
	993	if [ $? -ne 0 ]; then
	994	errorAndLog "${FUNCNAME}(): error while configure Samba"
	995	return 1
	996	fi
	997	# Crear clave para usuario de acceso a los recursos.
	998	echo -ne "$OPENGNSYS_CLIENT_PASSWD\n$OPENGNSYS_CLIENT_PASSWD\n" \| smbpasswd -a -s $OPENGNSYS_CLIENT_USER
	999
	1000	echoAndLog "${FUNCNAME}(): Added Samba configuration."
	1001	return 0
	1002	}
	1003
	1004
	1005	########################################################################
	1006	## Configuración servicio Rsync
	1007	########################################################################
	1008
	1009	# Configurar servicio Rsync.
	1010	function rsyncConfigure()
	1011	{
	1012	echoAndLog "${FUNCNAME}(): Configuring Rsync service."
	1013
	1014	backupFile $RSYNCCFGDIR/rsyncd.conf
	1015
	1016	# Configurar acceso a Rsync.
	1017	sed -e "s/CLIENTUSER/$OPENGNSYS_CLIENT_USER/g" \
	1018	$WORKDIR/opengnsys/repoman/etc/rsyncd.conf.tmpl > $RSYNCCFGDIR/rsyncd.conf
	1019	# Habilitar Rsync y reiniciar Inetd.
	1020	if [ -n "$RSYNCSERV" ]; then
	1021	if [ -f /etc/default/rsync ]; then
	1022	perl -pi -e 's/RSYNC_ENABLE=.*/RSYNC_ENABLE=inetd/' /etc/default/rsync
	1023	fi
	1024	if [ -f $INETDCFGDIR/rsync ]; then
	1025	perl -pi -e 's/disable.*/disable = no/' $INETDCFGDIR/rsync
	1026	else
	1027	cat << EOT > $INETDCFGDIR/rsync
	1028	service rsync
	1029	{
	1030	disable = no
	1031	socket_type = stream
	1032	wait = no
	1033	user = root
	1034	server = $(which rsync)
	1035	server_args = --daemon
	1036	log_on_failure += USERID
	1037	flags = IPv6
	1038	}
	1039	EOT
	1040	fi
	1041	service=$RSYNCSERV $ENABLESERVICE
	1042	service=$INETDSERV $STARTSERVICE
	1043	fi
	1044
	1045	echoAndLog "${FUNCNAME}(): Added Rsync configuration."
	1046	return 0
	1047	}
	1048
	1049
	1050	########################################################################
	1051	## Configuración servicio DHCP
	1052	########################################################################
	1053
	1054	# Configurar servicios DHCP.
	1055	function dhcpConfigure()
	1056	{
	1057	echoAndLog "${FUNCNAME}(): Sample DHCP configuration."
	1058
	1059	local errcode=0
	1060	local i=0
	1061	local dev=""
	1062
	1063	backupFile $DHCPCFGDIR/dhcpd.conf
	1064	for dev in ${DEVICE[*]}; do
	1065	if [ -n "${SERVERIP[i]}" ]; then
	1066	backupFile $DHCPCFGDIR/dhcpd-$dev.conf
	1067	sed -e "s/SERVERIP/${SERVERIP[i]}/g" \
	1068	-e "s/NETIP/${NETIP[i]}/g" \
	1069	-e "s/NETMASK/${NETMASK[i]}/g" \
	1070	-e "s/NETBROAD/${NETBROAD[i]}/g" \
	1071	-e "s/ROUTERIP/${ROUTERIP[i]}/g" \
	1072	-e "s/DNSIP/$DNSIP/g" \
	1073	$WORKDIR/opengnsys/server/etc/dhcpd.conf.tmpl > $DHCPCFGDIR/dhcpd-$dev.conf \|\| errcode=1
	1074	fi
	1075	let i++
	1076	done
	1077	if [ $errcode -ne 0 ]; then
	1078	errorAndLog "${FUNCNAME}(): error while configuring DHCP server"
	1079	return 1
	1080	fi
	1081	ln -f $DHCPCFGDIR/dhcpd-$DEFAULTDEV.conf $DHCPCFGDIR/dhcpd.conf
	1082	service=$DHCPSERV
	1083	$ENABLESERVICE; $STARTSERVICE
	1084	echoAndLog "${FUNCNAME}(): Sample DHCP configured in \"$DHCPCFGDIR\"."
	1085	return 0
	1086	}
	1087
	1088
	1089	#####################################################################
	1090	####### Funciones específicas de la instalación de Opengnsys
	1091	#####################################################################
	1092
	1093	# Copiar ficheros del OpenGnsys Web Console.
	1094	function installWebFiles()
	1095	{
	1096	local COMPATDIR f
	1097	local SLIMFILE="slim-2.6.1.zip"
	1098	local SWAGGERFILE="swagger-ui-2.2.5.zip"
	1099
	1100	echoAndLog "${FUNCNAME}(): Installing web files..."
	1101	# Copiar ficheros.
	1102	cp -a $WORKDIR/opengnsys/admin/WebConsole/* $INSTALL_TARGET/www #*/ comentario para Doxygen.
	1103	if [ $? != 0 ]; then
	1104	errorAndLog "${FUNCNAME}(): Error copying web files."
	1105	exit 1
	1106	fi
	1107
	1108	# Descomprimir librerías: Slim y Swagger-UI.
	1109	unzip -o $WORKDIR/opengnsys/admin/$SLIMFILE -d $INSTALL_TARGET/www/rest
	1110	unzip -o $WORKDIR/opengnsys/admin/$SWAGGERFILE -d $INSTALL_TARGET/www/rest
	1111
	1112	# Compatibilidad con dispositivos móviles.
	1113	COMPATDIR="$INSTALL_TARGET/www/principal"
	1114	for f in acciones administracion aula aulas hardwares imagenes menus repositorios softwares; do
	1115	sed 's/clickcontextualnodo/clicksupnodo/g' $COMPATDIR/$f.php > $COMPATDIR/$f.device.php
	1116	done
	1117	cp -a $COMPATDIR/imagenes.device.php $COMPATDIR/imagenes.device4.php
	1118	# Acceso al manual de usuario
	1119	ln -fs ../doc/userManual $INSTALL_TARGET/www/userManual
	1120	# Ficheros de log de la API REST.
	1121	touch $INSTALL_TARGET/log/{ogagent,remotepc,rest}.log
	1122
	1123	echoAndLog "${FUNCNAME}(): Web files installed successfully."
	1124	}
	1125
[c9459a1]	1126	function configurePHPvars()
	1127	{
	1128	OGADMSRV_HOSTNAME=$1
	1129	OGADMSRV_PORT=$2
	1130	sed "s/__OGADMSRV_HOSTNAME__/$OGADMSRV_HOSTNAME/; s/__OGADMSRV_PORT__/$OGADMSRV_PORT/" <$WORKDIR/opengnsys/server/etc/php-vars.php.tmpl >$INSTALL_TARGET/etc/php-vars.php
	1131	}
	1132
[b4f6d4b]	1133	# Copiar ficheros en la zona de descargas de OpenGnsys Web Console.
	1134	function installDownloadableFiles()
	1135	{
	1136	local VERSIONFILE OGVERSION FILENAME TARGETFILE
	1137
	1138	# Obtener versión a descargar.
	1139	VERSIONFILE="$INSTALL_TARGET/doc/VERSION.json"
	1140	OGVERSION="$(jq -r ".ogagent // \"$INSTVERSION\"" $VERSIONFILE 2>/dev/null \|\| echo "$INSTVERSION")"
	1141	FILENAME="ogagentpkgs-$OGVERSION.tar.gz"
	1142	TARGETFILE=$WORKDIR/$FILENAME
	1143
	1144	# Descargar archivo comprimido, si es necesario.
	1145	if [ -s $PROGRAMDIR/$FILENAME ]; then
	1146	echoAndLog "${FUNCNAME}(): Moving $PROGRAMDIR/$FILENAME file to $(dirname $TARGETFILE)"
	1147	mv $PROGRAMDIR/$FILENAME $TARGETFILE
	1148	else
	1149	echoAndLog "${FUNCNAME}(): Downloading $FILENAME"
[17dc359]	1150	curl --retry 5 --retry-delay 5 --max-time 30 $DOWNLOADURL/$FILENAME -o $TARGETFILE
[b4f6d4b]	1151	fi
	1152	if [ ! -s $TARGETFILE ]; then
	1153	errorAndLog "${FUNCNAME}(): Cannot download $FILENAME"
	1154	return 1
	1155	fi
	1156
	1157	# Descomprimir fichero en zona de descargas.
	1158	tar xvzf $TARGETFILE -C $INSTALL_TARGET/www/descargas
	1159	if [ $? != 0 ]; then
	1160	errorAndLog "${FUNCNAME}(): Error uncompressing archive."
	1161	exit 1
	1162	fi
	1163	}
	1164
	1165	# Configuración específica de Apache.
	1166	function installWebConsoleApacheConf()
	1167	{
	1168	if [ $# -ne 2 ]; then
	1169	errorAndLog "${FUNCNAME}(): invalid number of parameters"
	1170	exit 1
	1171	fi
	1172
	1173	local path_opengnsys_base="$1"
	1174	local path_apache2_confd="$2"
	1175	local CONSOLEDIR=${path_opengnsys_base}/www
	1176	local sockfile
	1177
	1178	if [ ! -d $path_apache2_confd ]; then
	1179	errorAndLog "${FUNCNAME}(): path to apache2 conf.d can not found, verify your server installation"
	1180	return 1
	1181	fi
	1182
	1183	mkdir -p $path_apache2_confd/{sites-available,sites-enabled}
	1184
	1185	echoAndLog "${FUNCNAME}(): creating apache2 config file.."
	1186
	1187	# Avtivar PHP-FPM.
	1188	echoAndLog "${FUNCNAME}(): configuring PHP-FPM"
	1189	service=$PHPFPMSERV
	1190	$ENABLESERVICE; $STARTSERVICE
	1191	sockfile=$(find /run/php -name "php*.sock" -type s -print 2>/dev/null \| tail -1)
	1192
	1193	# Activar módulos de Apache.
	1194	$APACHEENABLEMODS
	1195	# Activar HTTPS.
	1196	$APACHEENABLESSL
	1197	$APACHEMAKECERT
	1198	# Genera configuración de consola web a partir del fichero plantilla.
	1199	if [ -n "$(apachectl -v \| grep "2\.[0-2]")" ]; then
	1200	# Configuración para versiones anteriores de Apache.
	1201	sed -e "s,CONSOLEDIR,$CONSOLEDIR,g" \
	1202	$WORKDIR/opengnsys/server/etc/apache-prev2.4.conf.tmpl > $path_apache2_confd/$APACHESITESDIR/${APACHEOGSITE}
	1203	else
	1204	# Configuración específica a partir de Apache 2.4
	1205	if [ -n "$sockfile" ]; then
	1206	sed -e "s,CONSOLEDIR,$CONSOLEDIR,g" \
	1207	-e "s,proxy:fcgi:.,proxy:unix:${sockfile%% }\|fcgi://localhost\",g" \
	1208	$WORKDIR/opengnsys/server/etc/apache.conf.tmpl > $path_apache2_confd/$APACHESITESDIR/${APACHEOGSITE}.conf
	1209	else
	1210	sed -e "s,CONSOLEDIR,$CONSOLEDIR,g" \
	1211	$WORKDIR/opengnsys/server/etc/apache.conf.tmpl > $path_apache2_confd/$APACHESITESDIR/${APACHEOGSITE}.conf
	1212	fi
	1213	fi
	1214	$APACHEENABLEOG
	1215	if [ $? -ne 0 ]; then
	1216	errorAndLog "${FUNCNAME}(): config file can't be linked to apache conf, verify your server installation"
	1217	return 1
	1218	fi
	1219	echoAndLog "${FUNCNAME}(): config file created and linked, restarting apache daemon"
	1220	service=$APACHESERV
	1221	$ENABLESERVICE; $STARTSERVICE
	1222	return 0
	1223	}
	1224
	1225
	1226	# Crear documentación Doxygen para la consola web.
	1227	function makeDoxygenFiles()
	1228	{
	1229	echoAndLog "${FUNCNAME}(): Making Doxygen web files..."
	1230	$WORKDIR/opengnsys/installer/ogGenerateDoc.sh \
	1231	$WORKDIR/opengnsys/client/engine $INSTALL_TARGET/www
	1232	if [ ! -d "$INSTALL_TARGET/www/html" ]; then
	1233	errorAndLog "${FUNCNAME}(): unable to create Doxygen web files."
	1234	return 1
	1235	fi
	1236	mv "$INSTALL_TARGET/www/html" "$INSTALL_TARGET/www/api"
	1237	echoAndLog "${FUNCNAME}(): Doxygen web files created successfully."
	1238	}
	1239
	1240
	1241	# Crea la estructura base de la instalación de opengnsys
	1242	function createDirs()
	1243	{
	1244	if [ $# -ne 1 ]; then
	1245	errorAndLog "${FUNCNAME}(): invalid number of parameters"
	1246	exit 1
	1247	fi
	1248
	1249	local path_opengnsys_base="$1"
	1250
	1251	# Crear estructura de directorios.
	1252	echoAndLog "${FUNCNAME}(): creating directory paths in $path_opengnsys_base"
	1253	mkdir -p $path_opengnsys_base
	1254	mkdir -p $path_opengnsys_base/bin
	1255	mkdir -p $path_opengnsys_base/client/{cache,images,log}
	1256	mkdir -p $path_opengnsys_base/doc
	1257	mkdir -p $path_opengnsys_base/etc
	1258	mkdir -p $path_opengnsys_base/lib
	1259	mkdir -p $path_opengnsys_base/log/clients
	1260	ln -fs $path_opengnsys_base/log /var/log/opengnsys
	1261	mkdir -p $path_opengnsys_base/sbin
	1262	mkdir -p $path_opengnsys_base/www
	1263	mkdir -p $path_opengnsys_base/images/groups
	1264	mkdir -p $TFTPCFGDIR
	1265	ln -fs $TFTPCFGDIR $path_opengnsys_base/tftpboot
	1266	mkdir -p $path_opengnsys_base/tftpboot/{menu.lst,grub}
	1267	if [ $? -ne 0 ]; then
	1268	errorAndLog "${FUNCNAME}(): error while creating dirs. Do you have write permissions?"
	1269	return 1
	1270	fi
	1271
	1272	# Crear usuario ficticio.
	1273	if id -u $OPENGNSYS_CLIENT_USER &>/dev/null; then
	1274	echoAndLog "${FUNCNAME}(): user \"$OPENGNSYS_CLIENT_USER\" is already created"
	1275	else
	1276	echoAndLog "${FUNCNAME}(): creating OpenGnsys user"
	1277	useradd $OPENGNSYS_CLIENT_USER 2>/dev/null
	1278	if [ $? -ne 0 ]; then
	1279	errorAndLog "${FUNCNAME}(): error creating OpenGnsys user"
	1280	return 1
	1281	fi
	1282	fi
	1283
	1284	# Mover el fichero de registro de instalación al directorio de logs.
	1285	echoAndLog "${FUNCNAME}(): moving installation log file"
	1286	mv $LOG_FILE $OGLOGFILE && LOG_FILE=$OGLOGFILE
	1287	chmod 600 $LOG_FILE
	1288
	1289	echoAndLog "${FUNCNAME}(): directory paths created"
	1290	return 0
	1291	}
	1292
	1293	# Copia ficheros de configuración y ejecutables genéricos del servidor.
	1294	function copyServerFiles ()
	1295	{
	1296	if [ $# -ne 1 ]; then
	1297	errorAndLog "${FUNCNAME}(): invalid number of parameters"
	1298	exit 1
	1299	fi
	1300
	1301	local path_opengnsys_base="$1"
	1302
	1303	# Lista de ficheros y directorios origen y de directorios destino.
	1304	local SOURCES=( server/tftpboot \
	1305	/usr/lib/shim/shimx64.efi.signed \
	1306	/usr/lib/grub/x86_64-efi-signed/grubnetx64.efi.signed \
	1307	server/bin \
	1308	repoman/bin \
	1309	server/lib \
	1310	admin/Sources/Services/ogAdmServerAux
	1311	admin/Sources/Services/ogAdmRepoAux
	1312	installer/opengnsys_uninstall.sh \
	1313	installer/opengnsys_update.sh \
	1314	installer/opengnsys_export.sh \
	1315	installer/opengnsys_import.sh \
	1316	doc )
	1317	local TARGETS=( tftpboot \
	1318	tftpboot \
	1319	tftpboot/grubx64.efi \
	1320	bin \
	1321	bin \
	1322	lib \
	1323	sbin \
	1324	sbin \
	1325	lib \
	1326	lib \
	1327	lib \
	1328	lib \
	1329	doc )
	1330
	1331	if [ ${#SOURCES[@]} != ${#TARGETS[@]} ]; then
	1332	errorAndLog "${FUNCNAME}(): inconsistent number of array items"
	1333	exit 1
	1334	fi
	1335
	1336	# Copiar ficheros.
	1337	echoAndLog "${FUNCNAME}(): copying files to server directories"
	1338
	1339	pushd $WORKDIR/opengnsys
	1340	local i
	1341	for (( i = 0; i < ${#SOURCES[@]}; i++ )); do
	1342	if [ -f "${SOURCES[$i]}" ]; then
	1343	echoAndLog "Copying ${SOURCES[$i]} to $path_opengnsys_base/${TARGETS[$i]}"
	1344	cp -a "${SOURCES[$i]}" "${path_opengnsys_base}/${TARGETS[$i]}"
	1345	elif [ -d "${SOURCES[$i]}" ]; then
	1346	echoAndLog "Copying content of ${SOURCES[$i]} to $path_opengnsys_base/${TARGETS[$i]}"
	1347	cp -a "${SOURCES[$i]}"/* "${path_opengnsys_base}/${TARGETS[$i]}"
	1348	else
	1349	warningAndLog "Unable to copy ${SOURCES[$i]} to $path_opengnsys_base/${TARGETS[$i]}"
	1350	fi
	1351	done
	1352
	1353	popd
	1354	}
	1355
	1356	####################################################################
[c9459a1]	1357	### Funciones de TLS
	1358	####################################################################
	1359
	1360	CA_DIR=/root/CA
	1361	OG_BASEDIR=/opt/opengnsys
	1362
	1363	function gatherCertsInfo()
	1364	{
	1365	ERRORS=0
[11fbd77]	1366	## BUG cuando REMOTE=1, $WORKDIR/opengnsys es el contenido del zip (producido al vuelo con 'git archive'), y naturalmente no contiene ./user-certs
	1367	## este código debe buscar los certificados en otro sitio adicional
[c9459a1]	1368	if [ -f $WORKDIR/opengnsys/user-certs/ca.crt.pem ]; then
	1369	echoAndLog "CA provided by the user, checking presence of all certificates"
	1370
	1371	TLS_DATA_CA_CERTFILE=$WORKDIR/opengnsys/user-certs/ca.crt.pem
	1372	TLS_DATA_OGADMSRV_CERTFILE=$WORKDIR/opengnsys/user-certs/ogAdmSrv.crt.pem
	1373	TLS_DATA_OGADMSRV_KEYFILE=$WORKDIR/opengnsys/user-certs/ogAdmSrv.key.pem
	1374	TLS_DATA_WEBCONSOLE_CERTFILE=$WORKDIR/opengnsys/user-certs/WebConsole.crt.pem
	1375	TLS_DATA_WEBCONSOLE_KEYFILE=$WORKDIR/opengnsys/user-certs/WebConsole.key.pem
	1376
	1377	## el usuario tiene que facilitar todos los certificados
	1378	## si falta alguno, no podemos generarlo aquí porque habría que tener la privkey de la CA, y el usuario no nos la debe dar
	1379	if [ ! -f $TLS_DATA_OGADMSRV_CERTFILE ]; then errorAndLog "ogAdmSrv certificate not found"; ERRORS=1; fi
	1380	if [ ! -f $TLS_DATA_OGADMSRV_KEYFILE ]; then errorAndLog "ogAdmSrv privkey not found"; ERRORS=1; fi
	1381	if [ ! -f $TLS_DATA_WEBCONSOLE_CERTFILE ]; then errorAndLog "WebConsole certificate not found"; ERRORS=1; fi
	1382	if [ ! -f $TLS_DATA_WEBCONSOLE_KEYFILE ]; then errorAndLog "WebConsole privkey not found"; ERRORS=1; fi
	1383
	1384	if [ $ERRORS -eq 0 ]; then
	1385	## validar que las privkeys no tengan contraseña para que opengnsys pueda arrancar de forma desatendida
	1386	if ! openssl rsa -in $TLS_DATA_OGADMSRV_KEYFILE -passin pass:42 -noout; then errorAndLog "ogAdmSrv privkey is encrypted"; ERRORS=1; fi
	1387	if ! openssl rsa -in $TLS_DATA_WEBCONSOLE_KEYFILE -passin pass:42 -noout; then errorAndLog "WebConsole privkey is encrypted"; ERRORS=1; fi
	1388
	1389	if [ $ERRORS -eq 0 ]; then
	1390	# obtener los subject de cada certificado
	1391	# la salida de openssl es tal que "subject=C = ES, ST = Madrid, L = Madrid, CN = test.example.org"
	1392	# con el sed cocinamos la salida
	1393	# además añadimos un / al principio para que el CN final sea correcto: "/C=ES/ST=Madrid/L=Madrid/CN=test.opengnsys.local"
	1394	TLS_DATA_CA_SUBJ=/$( openssl x509 -in $TLS_DATA_CA_CERTFILE -subject -noout \|sed 's/^subject=//; s/ *//g; s/,/\//g')
	1395	TLS_DATA_OGADMSRV_SUBJ=/$( openssl x509 -in $TLS_DATA_OGADMSRV_CERTFILE -subject -noout \|sed 's/^subject=//; s/ *//g; s/,/\//g')
	1396	TLS_DATA_WEBCONSOLE_SUBJ=/$(openssl x509 -in $TLS_DATA_WEBCONSOLE_CERTFILE -subject -noout \|sed 's/^subject=//; s/ *//g; s/,/\//g')
	1397
	1398	# obtener CN a partir del subject
	1399	TLS_DATA_CA_CN=$( echo $TLS_DATA_CA_SUBJ \|sed 's/.CN=\([^/$]\).*/\1/')
	1400	TLS_DATA_OGADMSRV_CN=$( echo $TLS_DATA_OGADMSRV_SUBJ \|sed 's/.CN=\([^/$]\).*/\1/')
	1401	TLS_DATA_WEBCONSOLE_CN=$( echo $TLS_DATA_WEBCONSOLE_SUBJ \|sed 's/.CN=\([^/$]\).*/\1/')
	1402
	1403	# los CN de los componentes que aceptan conexiones deberían resolver a una IP
	1404	if ! nslookup $TLS_DATA_OGADMSRV_CN &>/dev/null; then errorAndLog "ogAdmSrv CN doesn't resolve to an IP"; ERRORS=1; fi
	1405
	1406	if [ $ERRORS -eq 0 ]; then
	1407	echoAndLog "Provided CA and certs are ok"
	1408	fi
	1409	fi
	1410	fi
	1411	fi
	1412
[11fbd77]	1413	## aquí también hay que tener en cuenta el sitio adicional para los user-certs
	1414	if [ ! -f $WORKDIR/opengnsys/user-certs/ca.crt.pem -o $ERRORS -eq 1 ]; then
[c9459a1]	1415	echoAndLog "CA and certs not provided by the user or issues found, we will generate a new CA and all certs"
	1416
	1417	TLS_DATA_CA_CN=ca.opengnsys.local
	1418	TLS_DATA_CA_SUBJ=/CN=ca.opengnsys.local
	1419	TLS_DATA_CA_CERTFILE=$CA_DIR/certs/ca.crt.pem
	1420	TLS_DATA_CA_EXPIRY=7300 # this variable is used later to make some decisions
	1421
	1422	TLS_DATA_OGADMSRV_CN=ogAdmSrv.opengnsys.local
	1423	TLS_DATA_OGADMSRV_SUBJ=/CN=ogAdmSrv.opengnsys.local
	1424	TLS_DATA_OGADMSRV_CERTFILE=$CA_DIR/certs/ogAdmSrv.crt.pem
	1425	TLS_DATA_OGADMSRV_KEYFILE=$CA_DIR/private/ogAdmSrv.key.pem
	1426	TLS_DATA_OGADMSRV_EXPIRY=375
	1427
	1428	TLS_DATA_WEBCONSOLE_CN=WebConsole.opengnsys.local
	1429	TLS_DATA_WEBCONSOLE_SUBJ=/CN=WebConsole.opengnsys.local
	1430	TLS_DATA_WEBCONSOLE_CERTFILE=$CA_DIR/certs/WebConsole.crt.pem
	1431	TLS_DATA_WEBCONSOLE_KEYFILE=$CA_DIR/private/WebConsole.key.pem
	1432	TLS_DATA_WEBCONSOLE_EXPIRY=375
	1433	fi
	1434
	1435	# otras cosas de TLS no cubiertas arriba por no estar relacionadas con los certificados
	1436	TLS_DATA_OGADMSRV_LISTEN_PORT=48888
	1437
	1438	return 0
	1439	}
	1440
	1441	function _genCA ()
	1442	{
	1443	SUBJ=$1
	1444	EXPIRY_DAYS=$2
	1445	openssl genrsa -out private/ca.key.pem 4096
	1446	openssl req -config openssl.cnf -key private/ca.key.pem -new -x509 -days $EXPIRY_DAYS -sha256 -subj $SUBJ -out certs/ca.crt.pem
	1447
	1448	return 0
	1449	}
	1450
	1451	function _genCert ()
	1452	{
	1453	COMPONENT=$1
	1454	SUBJ=$2
	1455	EXPIRY_DAYS=$3
	1456
	1457	openssl genrsa -out private/$COMPONENT.key.pem 2048
	1458	openssl req -config openssl.cnf -key private/$COMPONENT.key.pem -new -sha256 -subj $SUBJ -out csr/$COMPONENT.csr.pem
	1459	openssl ca -config openssl.cnf -batch -days $EXPIRY_DAYS -notext -md sha256 -in csr/$COMPONENT.csr.pem -out certs/$COMPONENT.crt.pem
	1460
	1461	return 0
	1462	}
	1463
	1464	function genAllCerts ()
	1465	{
	1466	mkdir -p $CA_DIR
	1467	pushd $CA_DIR
	1468	cat >openssl.cnf <<EOF
	1469	[ca]
	1470	default_ca = CA_default
	1471
	1472	[CA_default]
	1473	dir = $CA_DIR
	1474	certs = $CA_DIR/certs
	1475	new_certs_dir = $CA_DIR/newcerts
	1476	database = $CA_DIR/index.txt
	1477	serial = $CA_DIR/serial
	1478	default_md = sha256
	1479	policy = policy_loose
	1480
	1481	private_key = $CA_DIR/private/ca.key.pem
	1482	certificate = $CA_DIR/certs/ca.crt.pem
	1483
	1484	[policy_loose]
	1485	countryName = optional
	1486	stateOrProvinceName = optional
	1487	localityName = optional
	1488	organizationName = optional
	1489	organizationalUnitName = optional
	1490	commonName = supplied
	1491	emailAddress = optional
	1492
	1493	[req]
	1494	default_bits = 2048
	1495	distinguished_name = req_distinguished_name
	1496	default_md = sha256
	1497
	1498	[req_distinguished_name]
	1499	countryName = Country Name (2 letter code)
	1500	EOF
	1501	mkdir certs csr newcerts private
	1502	chmod 0700 private
	1503	touch index.txt index.txt.attr
	1504	echo 1000 >serial
	1505
	1506	_genCA $TLS_DATA_CA_SUBJ $TLS_DATA_CA_EXPIRY
	1507	_genCert ogAdmSrv $TLS_DATA_OGADMSRV_SUBJ $TLS_DATA_OGADMSRV_EXPIRY
	1508	_genCert WebConsole $TLS_DATA_WEBCONSOLE_SUBJ $TLS_DATA_WEBCONSOLE_EXPIRY
	1509
	1510	popd
	1511	return 0
	1512	}
	1513
	1514	function installAllCerts ()
	1515	{
	1516	mkdir -p $OG_BASEDIR/etc/ssl
	1517
	1518	## CA cert goes to the OS store
	1519	cp $TLS_DATA_CA_CERTFILE $LOCAL_CERTS_DIR/opengnsys-ca.crt
	1520
	1521	## ogAdmSrv cert & key go to the application store
	1522	cp $TLS_DATA_OGADMSRV_CERTFILE $TLS_DATA_OGADMSRV_KEYFILE $OG_BASEDIR/etc/ssl/
	1523	## certs of ogAdmSrv clients go to the OS store (stunnel seems to require this)
	1524	cp $TLS_DATA_WEBCONSOLE_CERTFILE $LOCAL_CERTS_DIR/opengnsys-WebConsole.crt
	1525
	1526	## WebConsole cert & key go to the application store
	1527	cp $TLS_DATA_WEBCONSOLE_CERTFILE $TLS_DATA_WEBCONSOLE_KEYFILE $OG_BASEDIR/etc/ssl/
	1528
	1529	$UPDATE_CA_CMD
[ee47fac]	1530	chmod 0640 $OG_BASEDIR/etc/ssl/*
	1531	chown stunnel4:www-data $OG_BASEDIR/etc/ssl/*
[c9459a1]	1532
	1533	return 0
	1534	}
	1535
	1536	# si generamos nuestros propios certificados, los CNs tienen que resolver a alguna IP
	1537	# no podemos dar por hecho que algún servidor DNS por ahí fuera resuelva los CNs que hemos generado al instalar
	1538	function makeCommonNamesResolvable ()
	1539	{
	1540	# ogAdmSrv
	1541	local i=0
	1542	for dev in ${DEVICE[*]}; do
	1543	echoAndLog "${FUNCNAME}(): evaluating dev (${DEVICE[i]}) against defaultdev ($DEFAULTDEV)"
	1544	if [ "${DEVICE[i]}" == "$DEFAULTDEV" ]; then
	1545	ETC_HOSTS_IP=${SERVERIP[i]}
	1546	echoAndLog "${FUNCNAME}(): will use dev (${DEVICE[i]}) IP ($ETC_HOSTS_IP)"
	1547	break
	1548	fi
	1549	let i++
	1550	done
	1551
	1552	if [ -z $ETC_HOSTS_IP ]; then
	1553	echoAndLog "${FUNCNAME}(): Don't know what IP address to add to /etc/hosts for ogAdmSrv"
	1554	else
	1555	echo "$ETC_HOSTS_IP $TLS_DATA_OGADMSRV_CN" >>/etc/hosts
	1556	fi
	1557
	1558	return 0
	1559	}
	1560
	1561	function configureStunnel ()
	1562	{
	1563	local i=0
	1564	for dev in ${DEVICE[*]}; do
	1565	echoAndLog "${FUNCNAME}(): evaluating dev (${DEVICE[i]}) against defaultdev ($DEFAULTDEV)"
	1566	if [ "${DEVICE[i]}" == "$DEFAULTDEV" ]; then
	1567	LISTEN_IP=${SERVERIP[i]}
	1568	echoAndLog "${FUNCNAME}(): will use dev (${DEVICE[i]}) IP ($LISTEN_IP)"
	1569	break
	1570	fi
	1571	let i++
	1572	done
	1573
	1574	if [ -z $LISTEN_IP ]; then
	1575	echoAndLog "${FUNCNAME}(): Don't know what IP address to listen on"
	1576	return 1
	1577	fi
	1578
	1579	cat >/etc/stunnel/ogAdmSrv.conf <<EOF
	1580	setuid = stunnel4
	1581	setgid = stunnel4
	1582	pid = /var/run/stunnel4/ogAdmSrv.pid
	1583
	1584	[ogAdmSrv]
	1585	accept = $LISTEN_IP:$TLS_DATA_OGADMSRV_LISTEN_PORT
	1586	connect = 127.0.0.1:8888
	1587	cert = $OG_BASEDIR/etc/ssl/ogAdmSrv.crt.pem
	1588	key = $OG_BASEDIR/etc/ssl/ogAdmSrv.key.pem
	1589	capath = $STUNNEL_CAPATH
	1590	requireCert = yes
	1591	verifyPeer = yes
	1592	verifyChain = yes
	1593	EOF
	1594
	1595	sed -i -e '/^ENABLED=/s/0/1/' /etc/default/stunnel4
	1596	service=stunnel4
	1597	$STARTSERVICE
	1598	return 0
	1599	}
	1600
	1601
	1602	####################################################################
[b4f6d4b]	1603	### Funciones de compilación de código fuente de servicios
	1604	####################################################################
	1605
	1606	# Compilar los servicios de OpenGnsys
	1607	function servicesCompilation ()
	1608	{
	1609	local hayErrores=0
	1610
	1611	# Compilar OpenGnsys Server
	1612	echoAndLog "${FUNCNAME}(): Compiling OpenGnsys Admin Server"
	1613	pushd $WORKDIR/opengnsys/admin/Sources/Services/ogAdmServer
	1614	make && mv ogAdmServer $INSTALL_TARGET/sbin
	1615	if [ $? -ne 0 ]; then
	1616	echoAndLog "${FUNCNAME}(): error while compiling OpenGnsys Admin Server"
	1617	hayErrores=1
	1618	fi
	1619	popd
	1620	# Compilar OpenGnsys Agent
	1621	echoAndLog "${FUNCNAME}(): Compiling OpenGnsys Agent"
	1622	pushd $WORKDIR/opengnsys/admin/Sources/Services/ogAdmAgent
	1623	make && mv ogAdmAgent $INSTALL_TARGET/sbin
	1624	if [ $? -ne 0 ]; then
	1625	echoAndLog "${FUNCNAME}(): error while compiling OpenGnsys Agent"
	1626	hayErrores=1
	1627	fi
	1628	popd
	1629	# Compilar OpenGnsys Client
	1630	echoAndLog "${FUNCNAME}(): Compiling OpenGnsys Admin Client"
	1631	pushd $WORKDIR/opengnsys/admin/Sources/Clients/ogAdmClient
	1632	make && mv ogAdmClient ../../../../client/shared/bin
	1633	if [ $? -ne 0 ]; then
	1634	echoAndLog "${FUNCNAME}(): error while compiling OpenGnsys Admin Client"
	1635	hayErrores=1
	1636	fi
	1637	popd
	1638
	1639	return $hayErrores
	1640	}
	1641
	1642	####################################################################
	1643	### Funciones de copia de la Interface de administración
	1644	####################################################################
	1645
	1646	# Copiar carpeta de Interface
	1647	function copyInterfaceAdm ()
	1648	{
	1649	local hayErrores=0
	1650
	1651	# Crear carpeta y copiar Interface
	1652	echoAndLog "${FUNCNAME}(): Copying Administration Interface Folder"
	1653	cp -ar $WORKDIR/opengnsys/admin/Interface $INSTALL_TARGET/client/interfaceAdm
	1654	if [ $? -ne 0 ]; then
	1655	echoAndLog "${FUNCNAME}(): error while copying Administration Interface Folder"
	1656	hayErrores=1
	1657	fi
	1658
	1659	return $hayErrores
	1660	}
	1661
	1662
	1663	####################################################################
	1664	### Funciones instalacion cliente opengnsys
	1665	####################################################################
	1666
	1667	function copyClientFiles()
	1668	{
	1669	local errstatus=0
	1670
	1671	echoAndLog "${FUNCNAME}(): Copying OpenGnsys Client files."
	1672	cp -a $WORKDIR/opengnsys/client/shared/* $INSTALL_TARGET/client
	1673	if [ $? -ne 0 ]; then
	1674	errorAndLog "${FUNCNAME}(): error while copying client estructure"
	1675	errstatus=1
	1676	fi
	1677
	1678	echoAndLog "${FUNCNAME}(): Copying OpenGnsys Cloning Engine files."
	1679	mkdir -p $INSTALL_TARGET/client/lib/engine/bin
	1680	cp -a $WORKDIR/opengnsys/client/engine/.lib $INSTALL_TARGET/client/lib/engine/bin
	1681	if [ $? -ne 0 ]; then
	1682	errorAndLog "${FUNCNAME}(): error while copying engine files"
	1683	errstatus=1
	1684	fi
	1685
	1686	if [ $errstatus -eq 0 ]; then
	1687	echoAndLog "${FUNCNAME}(): client copy files success."
	1688	else
	1689	errorAndLog "${FUNCNAME}(): client copy files with errors"
	1690	fi
	1691
	1692	return $errstatus
	1693	}
	1694
	1695
	1696	# Crear certificados para la firma de cargadores de arranque.
	1697	function createCerts ()
	1698	{
	1699	local SSLCFGDIR=$INSTALL_TARGET/client/etc/ssl
	1700	echoAndLog "${FUNCNAME}(): creating certificate files"
	1701	mkdir -p $SSLCFGDIR/{certs,private}
	1702	openssl req -new -x509 -newkey rsa:2048 -keyout $SSLCFGDIR/private/opengnsys.key -out $SSLCFGDIR/certs/opengnsys.crt -nodes -days 3650 -subj "/CN=OpenGnsys/"
	1703	openssl x509 -in $SSLCFGDIR/certs/opengnsys.crt -out $SSLCFGDIR/certs/opengnsys.cer -outform DER
	1704	echoAndLog "${FUNCNAME}(): certificate successfully created"
	1705	}
	1706
	1707
	1708	# Crear cliente OpenGnsys.
	1709	function clientCreate()
	1710	{
	1711	if [ $# -ne 1 ]; then
	1712	errorAndLog "${FUNCNAME}(): invalid number of parameters"
	1713	exit 1
	1714	fi
	1715
	1716	local FILENAME="$1"
	1717	local TARGETFILE=$INSTALL_TARGET/lib/$FILENAME
	1718
	1719	# Descargar cliente, si es necesario.
	1720	if [ -s $PROGRAMDIR/$FILENAME ]; then
	1721	echoAndLog "${FUNCNAME}(): Moving $PROGRAMDIR/$FILENAME file to $(dirname $TARGETFILE)"
	1722	mv $PROGRAMDIR/$FILENAME $TARGETFILE
	1723	else
	1724	echoAndLog "${FUNCNAME}(): Downloading $FILENAME"
	1725	oglivecli download $FILENAME
	1726	fi
	1727	if [ ! -s $TARGETFILE ]; then
	1728	errorAndLog "${FUNCNAME}(): Error loading $FILENAME"
	1729	return 1
	1730	fi
	1731
	1732	# Montar imagen, copiar cliente ogclient y desmontar.
	1733	echoAndLog "${FUNCNAME}(): Installing ogLive Client"
	1734	echo -ne "$OPENGNSYS_CLIENT_PASSWD\n$OPENGNSYS_CLIENT_PASSWD\n" \| \
	1735	oglivecli install $FILENAME
	1736
	1737	echoAndLog "${FUNCNAME}(): Client generation success"
	1738	}
	1739
	1740
	1741	# Configuración básica de servicios de OpenGnsys
	1742	function openGnsysConfigure()
	1743	{
	1744	local i=0
	1745	local dev=""
	1746	local CONSOLEURL
	1747
	1748	echoAndLog "${FUNCNAME}(): Copying init files."
	1749	cp -a $WORKDIR/opengnsys/admin/Sources/Services/opengnsys.init /etc/init.d/opengnsys
	1750	cp -a $WORKDIR/opengnsys/admin/Sources/Services/opengnsys.default /etc/default/opengnsys
	1751	# Deshabilitar servicios de BitTorrent si no están instalados.
	1752	if [ ! -e /usr/bin/bttrack ]; then
	1753	sed -i 's/RUN_BTTRACKER="yes"/RUN_BTTRACKER="no"/; s/RUN_BTSEEDER="yes"/RUN_BTSEEDER="no"/' \
	1754	/etc/default/opengnsys
	1755	fi
	1756	echoAndLog "${FUNCNAME}(): Creating cron files."
	1757	echo "* * * * * root [ -x $INSTALL_TARGET/bin/torrent-creator ] && $INSTALL_TARGET/bin/torrent-creator" > /etc/cron.d/torrentcreator
	1758	echo "5 * * * * root [ -x $INSTALL_TARGET/bin/torrent-tracker ] && $INSTALL_TARGET/bin/torrent-tracker" > /etc/cron.d/torrenttracker
	1759	echo "* * * * * root [ -x $INSTALL_TARGET/bin/deletepreimage ] && $INSTALL_TARGET/bin/deletepreimage" > /etc/cron.d/imagedelete
	1760	echo "* * * * * root [ -x $INSTALL_TARGET/bin/ogagentqueue.cron ] && $INSTALL_TARGET/bin/ogagentqueue.cron" > /etc/cron.d/ogagentqueue
	1761
	1762	echoAndLog "${FUNCNAME}(): Creating logrotate configuration files."
	1763	sed -e "s/OPENGNSYSDIR/${INSTALL_TARGET//\//\\/}/g" \
	1764	$WORKDIR/opengnsys/server/etc/logrotate.tmpl > /etc/logrotate.d/opengnsysServer
	1765
	1766	sed -e "s/OPENGNSYSDIR/${INSTALL_TARGET//\//\\/}/g" \
	1767	$WORKDIR/opengnsys/repoman/etc/logrotate.tmpl > /etc/logrotate.d/opengnsysRepo
	1768
	1769	echoAndLog "${FUNCNAME}(): Creating OpenGnsys config files."
	1770	for dev in ${DEVICE[*]}; do
	1771	if [ -n "${SERVERIP[i]}" ]; then
	1772	sed -e "s/SERVERIP/${SERVERIP[i]}/g" \
	1773	-e "s/DBUSER/$OPENGNSYS_DB_USER/g" \
	1774	-e "s/DBPASSWORD/$OPENGNSYS_DB_PASSWD/g" \
	1775	-e "s/DATABASE/$OPENGNSYS_DATABASE/g" \
	1776	$WORKDIR/opengnsys/admin/Sources/Services/ogAdmServer/ogAdmServer.cfg > $INSTALL_TARGET/etc/ogAdmServer-$dev.cfg
	1777	sed -e "s/SERVERIP/${SERVERIP[i]}/g" \
	1778	$WORKDIR/opengnsys/repoman/etc/ogAdmRepo.cfg.tmpl > $INSTALL_TARGET/etc/ogAdmRepo-$dev.cfg
	1779	sed -e "s/SERVERIP/${SERVERIP[i]}/g" \
	1780	-e "s/DBUSER/$OPENGNSYS_DB_USER/g" \
	1781	-e "s/DBPASSWORD/$OPENGNSYS_DB_PASSWD/g" \
	1782	-e "s/DATABASE/$OPENGNSYS_DATABASE/g" \
	1783	$WORKDIR/opengnsys/admin/Sources/Services/ogAdmAgent/ogAdmAgent.cfg > $INSTALL_TARGET/etc/ogAdmAgent-$dev.cfg
	1784	CONSOLEURL="https://${SERVERIP[i]}/opengnsys"
	1785	sed -e "s/SERVERIP/${SERVERIP[i]}/g" \
	1786	-e "s/DBUSER/$OPENGNSYS_DB_USER/g" \
	1787	-e "s/DBPASSWORD/$OPENGNSYS_DB_PASSWD/g" \
	1788	-e "s/DATABASE/$OPENGNSYS_DATABASE/g" \
	1789	-e "s/OPENGNSYSURL/${CONSOLEURL//\//\\/}/g" \
	1790	$INSTALL_TARGET/www/controlacceso.php > $INSTALL_TARGET/www/controlacceso-$dev.php
	1791	sed -e "s/SERVERIP/${SERVERIP[i]}/g" \
	1792	-e "s/OPENGNSYSURL/${CONSOLEURL//\//\\/}/g" \
	1793	$WORKDIR/opengnsys/admin/Sources/Clients/ogAdmClient/ogAdmClient.cfg > $INSTALL_TARGET/client/etc/ogAdmClient-$dev.cfg
	1794	if [ "$dev" == "$DEFAULTDEV" ]; then
	1795	OPENGNSYS_CONSOLEURL="$CONSOLEURL"
	1796	fi
	1797	fi
	1798	let i++
	1799	done
	1800	ln -f $INSTALL_TARGET/etc/ogAdmServer-$DEFAULTDEV.cfg $INSTALL_TARGET/etc/ogAdmServer.cfg
	1801	ln -f $INSTALL_TARGET/etc/ogAdmRepo-$DEFAULTDEV.cfg $INSTALL_TARGET/etc/ogAdmRepo.cfg
	1802	ln -f $INSTALL_TARGET/etc/ogAdmAgent-$DEFAULTDEV.cfg $INSTALL_TARGET/etc/ogAdmAgent.cfg
	1803	ln -f $INSTALL_TARGET/client/etc/ogAdmClient-$DEFAULTDEV.cfg $INSTALL_TARGET/client/etc/ogAdmClient.cfg
	1804	ln -f $INSTALL_TARGET/www/controlacceso-$DEFAULTDEV.php $INSTALL_TARGET/www/controlacceso.php
	1805
	1806	# Configuración del motor de clonación.
	1807	# - Zona horaria del servidor.
	1808	TZ=$(timedatectl status\|awk -F"[:()]" '/Time.*zone/ {print $2}')
	1809	cat << EOT >> $INSTALL_TARGET/client/etc/engine.cfg
	1810	# OpenGnsys Server timezone.
	1811	TZ="${TZ// /}"
	1812	EOT
	1813
	1814	# Revisar permisos generales.
	1815	if [ -x $INSTALL_TARGET/bin/checkperms ]; then
	1816	echoAndLog "${FUNCNAME}(): Checking permissions."
	1817	OPENGNSYS_DIR="$INSTALL_TARGET" OPENGNSYS_USER="$OPENGNSYS_CLIENT_USER" APACHE_USER="$APACHE_RUN_USER" APACHE_GROUP="$APACHE_RUN_GROUP" checkperms
	1818	fi
	1819
	1820	# Evitar inicio de duplicado en Ubuntu 14.04 (Upstart y SysV Init).
	1821	if [ -f /etc/init/${MYSQLSERV}.conf -a -n "$(which initctl 2>/dev/null)" ]; then
	1822	service=$MYSQLSERV
	1823	$DISABLESERVICE
	1824	fi
	1825
	1826	# Actualizar tokens de autenticación e iniciar los servicios.
	1827	service="opengnsys"
	1828	$ENABLESERVICE
	1829	if [ -x $INSTALL_TARGET/bin/settoken ]; then
	1830	echoAndLog "${FUNCNAME}(): Setting authentication tokens and starting OpenGnsys services."
	1831	$INSTALL_TARGET/bin/settoken "$OPENGNSYS_DB_USER"
	1832	$INSTALL_TARGET/bin/settoken -f
	1833	else
	1834	echoAndLog "${FUNCNAME}(): Starting OpenGnsys services."
	1835	$STARTSERVICE
	1836	fi
	1837	}
	1838
	1839
	1840	#####################################################################
	1841	####### Función de resumen informativo de la instalación
	1842	#####################################################################
	1843
	1844	function installationSummary()
	1845	{
	1846	local VERSIONFILE REVISION
	1847
	1848	# Crear fichero de versión y revisión, si no existe.
	1849	VERSIONFILE="$INSTALL_TARGET/doc/VERSION.json"
	1850	[ -f $VERSIONFILE ] \|\| echo '{ "project": "OpenGnsys" }' >$VERSIONFILE
	1851	# Incluir datos de revisión, si se está instalando desde el repositorio
	1852	# de código o si no está incluida en el fichero de versión.
	1853	if [ $REMOTE -eq 1 ] \|\| [ -z "$(jq -r '.release' $VERSIONFILE)" ]; then
[3513239]	1854	# Revisión: rAñoMesDía.Gitcommit (8 caracteres de fecha y 7 primeros de commit).
[b4f6d4b]	1855	RELEASE=$(curl -s "$API_URL/branches/$BRANCH" \| jq -r '"r" + (.commit.commit.committer.date \| split("-") \| join("")[:8]) + "." + (.commit.sha[:7])' 2>/dev/null)
	1856	# Obtener revisión para etiqueta de versión en vez de rama de código.
	1857	[ -z "$RELEASE" ] && RELEASE=$(curl -s $(curl -s "$API_URL/tags" \| jq -r ".[] \| select(.name==\"$BRANCH\").commit.url" 2>/dev/null) \| jq -r '"r" + (.commit.committer.date \| split("-") \| join("")[:8]) + "." + .sha[:7]' 2>/dev/null)
	1858	jq ".release=\"$RELEASE\"" $VERSIONFILE \| sponge $VERSIONFILE
	1859	fi
	1860	VERSION="$(jq -r '[.project, .version, .codename, .release] \| join(" ")' $VERSIONFILE 2>/dev/null)"
	1861
	1862	# Mostrar información.
	1863	echo
	1864	echoAndLog "OpenGnsys Installation Summary"
	1865	echo "=============================="
	1866	echoAndLog "Project version: $VERSION"
	1867	echoAndLog "Installation directory: $INSTALL_TARGET"
	1868	echoAndLog "Installation log file: $LOG_FILE"
	1869	echoAndLog "Repository directory: $INSTALL_TARGET/images"
	1870	echoAndLog "DHCP configuration directory: $DHCPCFGDIR"
	1871	echoAndLog "TFTP configuration directory: $TFTPCFGDIR"
	1872	echoAndLog "Installed ogLive client: $(oglivecli list \| awk '{print $2}')"
	1873	echoAndLog "Samba configuration directory: $SAMBACFGDIR"
	1874	echoAndLog "Web Console URL: $OPENGNSYS_CONSOLEURL"
	1875	echoAndLog "Web Console access data: entered by the user"
	1876	if grep -q "^RUN_BTTRACK.*no" /etc/default/opengnsys; then
	1877	echoAndLog "BitTorrent service is disabled."
	1878	fi
	1879	echo
	1880	echoAndLog "Post-Installation Instructions:"
	1881	echo "==============================="
	1882	echoAndLog "You can improve server security by configuring firewall and SELinux,"
	1883	echoAndLog " running \"$INSTALL_TARGET/lib/security-config\" script as root."
	1884	echoAndLog "It's strongly recommended to synchronize this server with an NTP server."
	1885	echoAndLog "Review or edit all configuration files."
	1886	echoAndLog "Insert DHCP configuration data and restart service."
	1887	echoAndLog "Optional: If you want to use BURG as boot manager, run"
	1888	echoAndLog " \"curl $DOWNLOADURL/burg.tgz -o $INSTALL_TARGET/client/lib/burg.tgz\" as root."
	1889	echoAndLog "Optional: Log-in as Web Console admin user."
	1890	echoAndLog " - Review default Organization data and assign access to users."
	1891	echoAndLog "Log-in as Web Console organization user."
	1892	echoAndLog " - Insert OpenGnsys data (labs, computers, menus, etc)."
	1893	echo
	1894	}
	1895
	1896
	1897
	1898	#####################################################################
	1899	####### Proceso de instalación de OpenGnsys
	1900	#####################################################################
	1901
	1902	# Sólo ejecutable por usuario root
	1903	if [ "$(whoami)" != 'root' ]; then
	1904	echo "ERROR: this program must run under root privileges!!"
	1905	exit 1
	1906	fi
	1907
	1908	globalSetup $MY_BRANCH
	1909	# Comprobar instalación previa.
	1910	if cat $INSTALL_TARGET/doc/VERSION.* &>/dev/null; then
	1911	echo "ERROR: OpenGnsys is already installed. Run \"$INSTALL_TARGET/lib/opengnsys_update.sh\" as root to update."
	1912	exit 2
	1913	fi
	1914
	1915	echoAndLog "OpenGnsys installation begins at $(date)"
	1916	# Introducir datos de configuración y establecer variables globales.
	1917	userData
	1918
	1919	mkdir -p $WORKDIR
	1920	pushd $WORKDIR
	1921
	1922	# Detectar datos iniciales de auto-configuración del instalador.
	1923	autoConfigure
	1924
	1925	# Detectar parámetros de red y comprobar si hay conexión.
	1926	getNetworkSettings
	1927	if [ $? -ne 0 ]; then
	1928	errorAndLog "Error reading default network settings."
	1929	exit 1
	1930	fi
	1931	checkNetworkConnection
	1932	if [ $? -ne 0 ]; then
	1933	errorAndLog "Error connecting to server. Causes:"
	1934	errorAndLog " - Network is unreachable, review devices parameters."
	1935	errorAndLog " - You are inside a private network, configure the proxy service."
	1936	errorAndLog " - Server is temporally down, try agian later."
	1937	exit 1
	1938	fi
	1939
	1940	# Detener servicios de OpenGnsys, si están activos previamente.
	1941	[ -f /etc/init.d/opengnsys ] && /etc/init.d/opengnsys stop
	1942
	1943	# Actualizar repositorios
	1944	updatePackageList
	1945
	1946	# Instalación de dependencias (paquetes de sistema operativo).
	1947	declare -a notinstalled
	1948	checkDependencies DEPENDENCIES notinstalled
	1949	if [ $? -ne 0 ]; then
	1950	installDependencies notinstalled
	1951	if [ $? -ne 0 ]; then
	1952	echoAndLog "Error while installing some dependeces, please verify your server installation before continue"
	1953	exit 1
	1954	fi
	1955	fi
	1956	if [ -n "$INSTALLEXTRADEPS" ]; then
	1957	echoAndLog "Installing extra dependencies"
	1958	for (( i=0; i<${#INSTALLEXTRADEPS[*]}; i++ )); do
	1959	eval ${INSTALLEXTRADEPS[i]}
	1960	done
	1961	fi
	1962
	1963	# Detectar datos de auto-configuración después de instalar paquetes.
	1964	autoConfigurePost
	1965
	1966	# Arbol de directorios de OpenGnsys.
	1967	createDirs ${INSTALL_TARGET}
	1968	if [ $? -ne 0 ]; then
	1969	errorAndLog "Error while creating directory paths!"
	1970	exit 1
	1971	fi
	1972
	1973	# Si es necesario, descarga el repositorio de código en directorio temporal
	1974	if [ $REMOTE -eq 1 ]; then
	1975	downloadCode $GIT_REPO
	1976	if [ $? -ne 0 ]; then
	1977	errorAndLog "Error while getting code from the repository"
	1978	exit 1
	1979	fi
	1980	else
	1981	ln -fs "$(dirname $PROGRAMDIR)" opengnsys
	1982	fi
	1983
[c9459a1]	1984	# TLS
	1985	gatherCertsInfo
	1986	if [ $? -ne 0 ]; then
	1987	errorAndLog 'Not all required certificates have been provided, or privkey or DNS issues'
	1988	exit 1
	1989	fi
	1990	[ $TLS_DATA_CA_EXPIRY ] && genAllCerts ## el usuario no nos ha dado sus certificados: generamos unos
	1991	installAllCerts
	1992	[ $TLS_DATA_CA_EXPIRY ] && makeCommonNamesResolvable ## el usuario no nos ha dado sus certificados: configuramos resolución de nombres en /etc/hosts
	1993	configureStunnel
	1994	if [ $? -ne 0 ]; then
	1995	errorAndLog 'Error while setting stunnel up'
	1996	exit 1
	1997	fi
	1998
[b4f6d4b]	1999	# Compilar código fuente de los servicios de OpenGnsys.
	2000	servicesCompilation
	2001	if [ $? -ne 0 ]; then
	2002	errorAndLog "Error while compiling OpenGnsys services"
	2003	exit 1
	2004	fi
	2005
	2006	# Copiar carpeta Interface entre administración y motor de clonación.
	2007	copyInterfaceAdm
	2008	if [ $? -ne 0 ]; then
	2009	errorAndLog "Error while copying Administration Interface"
	2010	exit 1
	2011	fi
	2012
	2013	# Configuración de TFTP.
	2014	tftpConfigure
	2015
	2016	# Configuración de Samba.
	2017	smbConfigure
	2018	if [ $? -ne 0 ]; then
	2019	errorAndLog "Error while configuring Samba server!"
	2020	exit 1
	2021	fi
	2022
	2023	# Configuración de Rsync.
	2024	rsyncConfigure
	2025
	2026	# Configuración ejemplo DHCP.
	2027	dhcpConfigure
	2028	if [ $? -ne 0 ]; then
	2029	errorAndLog "Error while copying your dhcp server files!"
	2030	exit 1
	2031	fi
	2032
	2033	# Copiar ficheros de servicios OpenGnsys Server.
	2034	copyServerFiles ${INSTALL_TARGET}
	2035	if [ $? -ne 0 ]; then
	2036	errorAndLog "Error while copying the server files!"
	2037	exit 1
	2038	fi
	2039	INSTVERSION=$(jq -r '.version' $INSTALL_TARGET/doc/VERSION.json)
	2040
	2041	# Instalar base de datos de OpenGnsys Admin.
	2042	isInArray notinstalled "mysql-server" \|\| isInArray notinstalled "mariadb-server"
	2043	if [ $? -eq 0 ]; then
	2044	# Enable database manager (MySQL, if missing, MariaDB).
	2045	service=$MYSQLSERV
	2046	$ENABLESERVICE
	2047	if [ $? != 0 ]; then
	2048	service=$MARIADBSERV
	2049	$ENABLESERVICE
	2050	fi
	2051	# Start database manager.
	2052	$STARTSERVICE
	2053	# Asignar clave del usuario "root".
	2054	mysqlSetRootPassword "${MYSQL_ROOT_PASSWORD}"
	2055	else
	2056	# Si ya está instalado el gestor de bases de datos, obtener clave de "root".
	2057	mysqlGetRootPassword
	2058	fi
	2059
	2060	# Copy MySQL configuration template
	2061	cp $WORKDIR/opengnsys/server/etc/mysqld-og.cnf $MYSQLCFGDIR 2>/dev/null
	2062	# Restart database manager.
	2063	$STARTSERVICE
	2064
	2065	mysqlTestConnection "${MYSQL_ROOT_PASSWORD}"
	2066	if [ $? -ne 0 ]; then
	2067	errorAndLog "Error while connection to mysql"
	2068	exit 1
	2069	fi
	2070	mysqlDbExists ${OPENGNSYS_DATABASE}
	2071	if [ $? -ne 0 ]; then
	2072	echoAndLog "Creating Web Console database"
	2073	mysqlCreateDb ${OPENGNSYS_DATABASE}
	2074	if [ $? -ne 0 ]; then
	2075	errorAndLog "Error while creating Web Console database"
	2076	exit 1
	2077	fi
	2078	else
	2079	echoAndLog "Web Console database exists, ommiting creation"
	2080	fi
	2081
	2082	mysqlCheckUserExists ${OPENGNSYS_DB_USER}
	2083	if [ $? -ne 0 ]; then
	2084	echoAndLog "Creating user in database"
	2085	mysqlCreateAdminUserToDb ${OPENGNSYS_DATABASE} ${OPENGNSYS_DB_USER} "${OPENGNSYS_DB_PASSWD}"
	2086	if [ $? -ne 0 ]; then
	2087	errorAndLog "Error while creating database user"
	2088	exit 1
	2089	fi
	2090
	2091	fi
	2092
	2093	mysqlCheckDbIsEmpty ${OPENGNSYS_DATABASE}
	2094	if [ $? -eq 0 ]; then
	2095	echoAndLog "Creating tables..."
	2096	if [ -f $WORKDIR/$OPENGNSYS_DB_CREATION_FILE ]; then
	2097	mysqlImportSqlFileToDb ${OPENGNSYS_DATABASE} $WORKDIR/$OPENGNSYS_DB_CREATION_FILE
	2098	else
	2099	errorAndLog "Unable to locate $WORKDIR/$OPENGNSYS_DB_CREATION_FILE!!"
	2100	exit 1
	2101	fi
	2102	else
	2103	# Si existe fichero ogBDAdmin-VersLocal-VersRepo.sql; aplicar cambios.
	2104	REPOVERSION=$(jq -r '.version' $WORKDIR/opengnsys/doc/VERSION.json)
	2105	OPENGNSYS_DB_UPDATE_FILE="opengnsys/admin/Database/$OPENGNSYS_DATABASE-$INSTVERSION-$REPOVERSION.sql"
	2106	if [ -f $WORKDIR/$OPENGNSYS_DB_UPDATE_FILE ]; then
	2107	echoAndLog "Updating tables from version $INSTVERSION to $REPOVERSION"
	2108	mysqlImportSqlFileToDb ${OPENGNSYS_DATABASE} $WORKDIR/$OPENGNSYS_DB_UPDATE_FILE
	2109	else
	2110	echoAndLog "Database unchanged."
	2111	fi
	2112	fi
	2113	# Eliminar fichero temporal con credenciales de acceso a MySQL.
	2114	rm -f $TMPMYCNF
	2115
	2116	# Copiando páqinas web.
	2117	installWebFiles
[c9459a1]	2118	# Configurar variables de PHP
	2119	configurePHPvars $TLS_DATA_OGADMSRV_CN $TLS_DATA_OGADMSRV_LISTEN_PORT
[b4f6d4b]	2120	# Descargar/descomprimir archivos descargables.
	2121	installDownloadableFiles
	2122	# Generar páqinas web de documentación de la API
	2123	makeDoxygenFiles
	2124
	2125	# Creando configuración de Apache.
	2126	installWebConsoleApacheConf $INSTALL_TARGET $APACHECFGDIR
	2127	if [ $? -ne 0 ]; then
	2128	errorAndLog "Error configuring Apache for OpenGnsys Admin"
	2129	exit 1
	2130	fi
	2131
	2132	popd
	2133
	2134	# Crear la estructura de los accesos al servidor desde el cliente (shared)
	2135	copyClientFiles
	2136	if [ $? -ne 0 ]; then
	2137	errorAndLog "Error creating client structure"
	2138	fi
	2139
	2140	# Crear certificado para firmar cargadores
	2141	createCerts
	2142
	2143	# Crear la estructura del cliente de OpenGnsys.
	2144	for i in $OGLIVE; do
	2145	if ! clientCreate "$i"; then
	2146	errorAndLog "Error creating client $i"
	2147	exit 1
	2148	fi
	2149	done
	2150
	2151	# Configuración de servicios de OpenGnsys
	2152	openGnsysConfigure
	2153
	2154	# Mostrar sumario de la instalación e instrucciones de post-instalación.
	2155	installationSummary
	2156
	2157	rm -rf $WORKDIR
	2158	echoAndLog "OpenGnsys installation finished at $(date)"
	2159	exit 0
	2160

Note: See TracBrowser for help on using the repository browser.

Download in other formats: