wireguard-install.sh 3.9 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150
  1. #!/usr/bin/env bash
  2. set -o errexit
  3. set -o errtrace
  4. set -o nounset
  5. set -o pipefail
  6. shopt -s expand_aliases
  7. alias die='EXIT=$? LINE=$LINENO error_exit'
  8. trap die ERR
  9. trap 'die "Script interrupted."' INT
  10. function error_exit() {
  11. trap - ERR
  12. local DEFAULT='Unknown failure occured.'
  13. local REASON="\e[97m${1:-$DEFAULT}\e[39m"
  14. local FLAG="\e[91m[ERROR:LXC] \e[93m$EXIT@$LINE"
  15. msg "$FLAG $REASON"
  16. exit $EXIT
  17. }
  18. function msg() {
  19. local TEXT="$1"
  20. echo -e "$TEXT"
  21. }
  22. RD=`echo "\033[01;31m"`
  23. BL=`echo "\033[36m"`
  24. GN=`echo "\033[1;92m"`
  25. CL=`echo "\033[m"`
  26. CM="${GN}✓${CL}"
  27. CROSS="${RD}✗${CL}"
  28. RETRY_NUM=10
  29. RETRY_EVERY=3
  30. NUM=$RETRY_NUM
  31. echo -en "${GN} Setting up Container OS... "
  32. sed -i "/$LANG/ s/\(^# \)//" /etc/locale.gen
  33. locale-gen >/dev/null
  34. while [ "$(hostname -I)" = "" ]; do
  35. 1>&2 echo -en "${CROSS}${RD} No Network! "
  36. sleep $RETRY_EVERY
  37. ((NUM--))
  38. if [ $NUM -eq 0 ]
  39. then
  40. 1>&2 echo -e "${CROSS}${RD} No Network After $RETRY_NUM Tries${CL}"
  41. exit 1
  42. fi
  43. done
  44. echo -e "${CM}${CL} \r"
  45. echo -en "${GN} Network Connected: ${BL}$(hostname -I)${CL} "
  46. echo -e "${CM}${CL} \r"
  47. MAC=$(cat /sys/class/net/$(ip route show default | awk '/default/ {print $5}')/address)
  48. echo -en "${GN} MAC Address: ${BL}${MAC}${CL} "
  49. echo -e "${CM}${CL} \r"
  50. OPTIONS_PATH='/options.conf'
  51. cat >$OPTIONS_PATH <<'EOF'
  52. IPv4dev=eth0
  53. install_user=root
  54. VPN=wireguard
  55. pivpnNET=10.6.0.0
  56. subnetClass=24
  57. ALLOWED_IPS="0.0.0.0/0, ::0/0"
  58. pivpnMTU=1420
  59. pivpnPORT=51820
  60. pivpnDNS1=1.1.1.1
  61. pivpnDNS2=8.8.8.8
  62. pivpnHOST=
  63. pivpnPERSISTENTKEEPALIVE=25
  64. UNATTUPG=1
  65. EOF
  66. echo -en "${GN} Updating Container OS... "
  67. apt update &>/dev/null
  68. apt-get -qqy upgrade &>/dev/null
  69. echo -e "${CM}${CL} \r"
  70. echo -en "${GN} Installing Dependencies... "
  71. apt-get install -y curl &>/dev/null
  72. apt-get install -y sudo &>/dev/null
  73. apt-get install -y gunicorn &>/dev/null
  74. echo -e "${CM}${CL} \r"
  75. echo -en "${GN} Installing WireGuard (using pivpn.io)... "
  76. curl -s -L https://install.pivpn.io > install.sh
  77. chmod +x install.sh
  78. ./install.sh --unattended options.conf &>/dev/null
  79. echo -e "${CM}${CL} \r"
  80. echo -en "${GN} Installing pip3... "
  81. apt-get install python3-pip -y &>/dev/null
  82. pip install flask &>/dev/null
  83. pip install ifcfg &>/dev/null
  84. pip install flask_qrcode &>/dev/null
  85. pip install icmplib &>/dev/null
  86. echo -e "${CM}${CL} \r"
  87. echo -en "${GN} Installing WGDashboard... "
  88. WGDREL=$(curl -s https://api.github.com/repos/donaldzou/WGDashboard/releases/latest \
  89. | grep "tag_name" \
  90. | awk '{print substr($2, 2, length($2)-3) }') \
  91. git clone -b ${WGDREL} https://github.com/donaldzou/WGDashboard.git /ect/wgdashboard &>/dev/null
  92. cd /ect/wgdashboard/src
  93. sudo chmod u+x wgd.sh
  94. sudo ./wgd.sh install &>/dev/null
  95. sudo chmod -R 755 /etc/wireguard
  96. echo -e "${CM}${CL} \r"
  97. echo -en "${GN} Creating wg-dashboard.service... "
  98. service_path="/etc/systemd/system/wg-dashboard.service"
  99. echo "[Unit]
  100. After=netword.service
  101. [Service]
  102. WorkingDirectory=/ect/wgdashboard/src
  103. ExecStart=/usr/bin/python3 /ect/wgdashboard/src/dashboard.py
  104. Restart=always
  105. [Install]
  106. WantedBy=default.target" > $service_path
  107. sudo chmod 664 /etc/systemd/system/wg-dashboard.service
  108. sudo systemctl daemon-reload
  109. sudo systemctl enable wg-dashboard.service &>/dev/null
  110. sudo systemctl start wg-dashboard.service
  111. echo -e "${CM}${CL} \r"
  112. PASS=$(grep -w "root" /etc/shadow | cut -b6);
  113. if [[ $PASS != $ ]]; then
  114. echo -en "${GN} Customizing Container... "
  115. rm /etc/motd
  116. rm /etc/update-motd.d/10-uname
  117. touch ~/.hushlogin
  118. GETTY_OVERRIDE="/etc/systemd/system/container-getty@1.service.d/override.conf"
  119. mkdir -p $(dirname $GETTY_OVERRIDE)
  120. cat << EOF > $GETTY_OVERRIDE
  121. [Service]
  122. ExecStart=
  123. ExecStart=-/sbin/agetty --autologin root --noclear --keep-baud tty%I 115200,38400,9600 \$TERM
  124. EOF
  125. systemctl daemon-reload
  126. systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
  127. echo -e "${CM}${CL} \r"
  128. fi
  129. echo -en "${GN} Cleanup... "
  130. apt-get autoremove >/dev/null
  131. apt-get autoclean >/dev/null
  132. rm -rf /var/{cache,log}/* /var/lib/apt/lists/*
  133. echo -e "${CM}${CL} \n"