wireguard-install.sh 4.2 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161
  1. #!/usr/bin/env bash
  2. YW=`echo "\033[33m"`
  3. RD=`echo "\033[01;31m"`
  4. BL=`echo "\033[36m"`
  5. GN=`echo "\033[1;92m"`
  6. CL=`echo "\033[m"`
  7. RETRY_NUM=10
  8. RETRY_EVERY=3
  9. NUM=$RETRY_NUM
  10. CM="${GN}✓${CL}"
  11. CROSS="${RD}✗${CL}"
  12. BFR="\\r\\033[K"
  13. HOLD="-"
  14. set -o errexit
  15. set -o errtrace
  16. set -o nounset
  17. set -o pipefail
  18. shopt -s expand_aliases
  19. alias die='EXIT=$? LINE=$LINENO error_exit'
  20. trap die ERR
  21. function error_exit() {
  22. trap - ERR
  23. local reason="Unknown failure occurred."
  24. local msg="${1:-$reason}"
  25. local flag="${RD}‼ ERROR ${CL}$EXIT@$LINE"
  26. echo -e "$flag $msg" 1>&2
  27. exit $EXIT
  28. }
  29. function msg_info() {
  30. local msg="$1"
  31. echo -ne " ${HOLD} ${YW}${msg}..."
  32. }
  33. function msg_ok() {
  34. local msg="$1"
  35. echo -e "${BFR} ${CM} ${GN}${msg}${CL}"
  36. }
  37. function msg_error() {
  38. local msg="$1"
  39. echo -e "${BFR} ${CROSS} ${RD}${msg}${CL}"
  40. }
  41. msg_info "Setting up Container OS "
  42. sed -i "/$LANG/ s/\(^# \)//" /etc/locale.gen
  43. locale-gen >/dev/null
  44. while [ "$(hostname -I)" = "" ]; do
  45. 1>&2 echo -en "${CROSS}${RD} No Network! "
  46. sleep $RETRY_EVERY
  47. ((NUM--))
  48. if [ $NUM -eq 0 ]
  49. then
  50. 1>&2 echo -e "${CROSS}${RD} No Network After $RETRY_NUM Tries${CL}"
  51. exit 1
  52. fi
  53. done
  54. msg_ok "Set up Container OS"
  55. msg_ok "Network Connected: ${BL}$(hostname -I)"
  56. if nc -zw1 8.8.8.8 443; then msg_ok "Internet Connected"; else msg_error "Internet NOT Connected"; exit 1; fi;
  57. RESOLVEDIP=$(nslookup "github.com" | awk -F':' '/^Address: / { matched = 1 } matched { print $2}' | xargs)
  58. if [[ -z "$RESOLVEDIP" ]]; then msg_error "DNS Lookup Failure"; else msg_ok "DNS Resolved github.com to $RESOLVEDIP"; fi;
  59. OPTIONS_PATH='/options.conf'
  60. cat >$OPTIONS_PATH <<'EOF'
  61. IPv4dev=eth0
  62. install_user=root
  63. VPN=wireguard
  64. pivpnNET=10.6.0.0
  65. subnetClass=24
  66. ALLOWED_IPS="0.0.0.0/0, ::0/0"
  67. pivpnMTU=1420
  68. pivpnPORT=51820
  69. pivpnDNS1=1.1.1.1
  70. pivpnDNS2=8.8.8.8
  71. pivpnHOST=
  72. pivpnPERSISTENTKEEPALIVE=25
  73. UNATTUPG=1
  74. EOF
  75. msg_info "Updating Container OS"
  76. apt-get update &>/dev/null
  77. apt-get -y upgrade &>/dev/null
  78. msg_ok "Updated Container OS"
  79. msg_info "Installing Dependencies"
  80. apt-get install -y curl &>/dev/null
  81. apt-get install -y sudo &>/dev/null
  82. apt-get install -y gunicorn &>/dev/null
  83. msg_ok "Installed Dependencies"
  84. msg_info "Installing WireGuard (using pivpn.io)"
  85. curl -s -L https://install.pivpn.io > install.sh
  86. chmod +x install.sh
  87. ./install.sh --unattended options.conf &>/dev/null
  88. msg_ok "Installed WireGuard"
  89. msg_info "Installing pip3"
  90. apt-get install python3-pip -y &>/dev/null
  91. pip install flask &>/dev/null
  92. pip install ifcfg &>/dev/null
  93. pip install flask_qrcode &>/dev/null
  94. pip install icmplib &>/dev/null
  95. msg_ok "Installed pip3"
  96. msg_info "Installing WGDashboard"
  97. WGDREL=$(curl -s https://api.github.com/repos/donaldzou/WGDashboard/releases/latest \
  98. | grep "tag_name" \
  99. | awk '{print substr($2, 2, length($2)-3) }') \
  100. git clone -b ${WGDREL} https://github.com/donaldzou/WGDashboard.git /etc/wgdashboard &>/dev/null
  101. cd /etc/wgdashboard/src
  102. sudo chmod u+x wgd.sh
  103. sudo ./wgd.sh install &>/dev/null
  104. sudo chmod -R 755 /etc/wireguard
  105. msg_ok "Installed WGDashboard"
  106. msg_info "Creating Service"
  107. service_path="/etc/systemd/system/wg-dashboard.service"
  108. echo "[Unit]
  109. After=netword.service
  110. [Service]
  111. WorkingDirectory=/etc/wgdashboard/src
  112. ExecStart=/usr/bin/python3 /etc/wgdashboard/src/dashboard.py
  113. Restart=always
  114. [Install]
  115. WantedBy=default.target" > $service_path
  116. sudo chmod 664 /etc/systemd/system/wg-dashboard.service
  117. sudo systemctl daemon-reload
  118. sudo systemctl enable wg-dashboard.service &>/dev/null
  119. sudo systemctl start wg-dashboard.service
  120. msg_ok "Created Service"
  121. PASS=$(grep -w "root" /etc/shadow | cut -b6);
  122. if [[ $PASS != $ ]]; then
  123. msg_info "Customizing Container"
  124. rm /etc/motd
  125. rm /etc/update-motd.d/10-uname
  126. touch ~/.hushlogin
  127. GETTY_OVERRIDE="/etc/systemd/system/container-getty@1.service.d/override.conf"
  128. mkdir -p $(dirname $GETTY_OVERRIDE)
  129. cat << EOF > $GETTY_OVERRIDE
  130. [Service]
  131. ExecStart=
  132. ExecStart=-/sbin/agetty --autologin root --noclear --keep-baud tty%I 115200,38400,9600 \$TERM
  133. EOF
  134. systemctl daemon-reload
  135. systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
  136. msg_ok "Customized Container"
  137. fi
  138. msg_info "Cleaning up"
  139. apt-get autoremove >/dev/null
  140. apt-get autoclean >/dev/null
  141. rm -rf /var/{cache,log}/* /var/lib/apt/lists/*
  142. msg_ok "Cleaned"