mirror of
https://github.com/RaspAP/raspap-webgui.git
synced 2024-11-22 23:50:30 +00:00
349 lines
13 KiB
Bash
Executable file
349 lines
13 KiB
Bash
Executable file
raspap_dir="/etc/raspap"
|
|
raspap_user="www-data"
|
|
version=`sed 's/\..*//' /etc/debian_version`
|
|
|
|
# Determine version, set default home location for lighttpd and
|
|
# php package to install
|
|
webroot_dir="/var/www/html"
|
|
if [ $version -eq 9 ]; then
|
|
version_msg="Raspian 9.0 (Stretch)"
|
|
php_package="php7.0-cgi"
|
|
elif [ $version -eq 8 ]; then
|
|
version_msg="Raspian 8.0 (Jessie)"
|
|
php_package="php5-cgi"
|
|
else
|
|
version_msg="Raspian earlier than 8.0 (Wheezy)"
|
|
webroot_dir="/var/www"
|
|
php_package="php5-cgi"
|
|
fi
|
|
|
|
# Outputs a RaspAP Install log line
|
|
function install_log() {
|
|
echo -e "\033[1;32mRaspAP Install: $*\033[m"
|
|
}
|
|
|
|
# Outputs a RaspAP Install Error log line and exits with status code 1
|
|
function install_error() {
|
|
echo -e "\033[1;37;41mRaspAP Install Error: $*\033[m"
|
|
exit 1
|
|
}
|
|
|
|
# Outputs a RaspAP Warning line
|
|
function install_warning() {
|
|
echo -e "\033[1;33mWarning: $*\033[m"
|
|
}
|
|
|
|
# Outputs a welcome message
|
|
function display_welcome() {
|
|
raspberry='\033[0;35m'
|
|
green='\033[1;32m'
|
|
|
|
echo -e "${raspberry}\n"
|
|
echo -e " 888888ba .d888888 888888ba"
|
|
echo -e " 88 8b d8 88 88 8b"
|
|
echo -e "a88aaaa8P' .d8888b. .d8888b. 88d888b. 88aaaaa88a a88aaaa8P"
|
|
echo -e " 88 8b. 88 88 Y8ooooo. 88 88 88 88 88"
|
|
echo -e " 88 88 88. .88 88 88. .88 88 88 88"
|
|
echo -e " dP dP 88888P8 88888P 88Y888P 88 88 dP"
|
|
echo -e " 88"
|
|
echo -e " dP"
|
|
echo -e "${green}"
|
|
echo -e "The Quick Installer will guide you through a few easy steps\n\n"
|
|
}
|
|
|
|
### NOTE: all the below functions are overloadable for system-specific installs
|
|
### NOTE: some of the below functions MUST be overloaded due to system-specific installs
|
|
|
|
function config_installation() {
|
|
install_log "Configure installation"
|
|
echo "Detected ${version_msg}"
|
|
echo "Install directory: ${raspap_dir}"
|
|
echo "Lighttpd directory: ${webroot_dir}"
|
|
echo -n "Complete installation with these values? [y/N]: "
|
|
read answer
|
|
if [[ $answer != "y" ]]; then
|
|
echo "Installation aborted."
|
|
exit 0
|
|
fi
|
|
}
|
|
|
|
# Runs a system software update to make sure we're using all fresh packages
|
|
function update_system_packages() {
|
|
# OVERLOAD THIS
|
|
install_error "No function definition for update_system_packages"
|
|
}
|
|
|
|
# Installs additional dependencies using system package manager
|
|
function install_dependencies() {
|
|
# OVERLOAD THIS
|
|
install_error "No function definition for install_dependencies"
|
|
}
|
|
|
|
# Enables PHP for lighttpd and restarts service for settings to take effect
|
|
function enable_php_lighttpd() {
|
|
install_log "Enabling PHP for lighttpd"
|
|
|
|
sudo lighttpd-enable-mod fastcgi-php
|
|
sudo service lighttpd force-reload
|
|
sudo /etc/init.d/lighttpd restart || install_error "Unable to restart lighttpd"
|
|
}
|
|
|
|
# Verifies existence and permissions of RaspAP directory
|
|
function create_raspap_directories() {
|
|
install_log "Creating RaspAP directories"
|
|
if [ -d "$raspap_dir" ]; then
|
|
sudo mv $raspap_dir "$raspap_dir.`date +%F-%R`" || install_error "Unable to move old '$raspap_dir' out of the way"
|
|
fi
|
|
sudo mkdir -p "$raspap_dir" || install_error "Unable to create directory '$raspap_dir'"
|
|
|
|
# Create a directory for existing file backups.
|
|
sudo mkdir -p "$raspap_dir/backups"
|
|
|
|
# Create a directory to store networking configs
|
|
sudo mkdir -p "$raspap_dir/networking"
|
|
# Copy existing dhcpcd.conf to use as base config
|
|
cat /etc/dhcpcd.conf | sudo tee -a /etc/raspap/networking/defaults
|
|
|
|
sudo chown -R $raspap_user:$raspap_user "$raspap_dir" || install_error "Unable to change file ownership for '$raspap_dir'"
|
|
}
|
|
|
|
# Generate logging enable/disable files for hostapd
|
|
function create_logging_scripts() {
|
|
install_log "Creating logging scripts"
|
|
sudo mkdir $raspap_dir/hostapd || install_error "Unable to create directory '$raspap_dir/hostapd'"
|
|
|
|
# Move existing shell scripts
|
|
sudo mv $webroot_dir/installers/*log.sh $raspap_dir/hostapd || install_error "Unable to move logging scripts"
|
|
}
|
|
|
|
# Generate logging enable/disable files for hostapd
|
|
function create_logging_scripts() {
|
|
sudo mkdir /etc/raspap/hostapd
|
|
sudo mv /var/www/html/installers/*log.sh /etc/raspap/hostapd
|
|
}
|
|
|
|
# Fetches latest files from github to webroot
|
|
function download_latest_files() {
|
|
if [ -d "$webroot_dir" ]; then
|
|
sudo mv $webroot_dir "$webroot_dir.`date +%F-%R`" || install_error "Unable to remove old webroot directory"
|
|
fi
|
|
|
|
install_log "Cloning latest files from github"
|
|
git clone --depth 1 https://github.com/billz/raspap-webgui /tmp/raspap-webgui || install_error "Unable to download files from github"
|
|
sudo mv /tmp/raspap-webgui $webroot_dir || install_error "Unable to move raspap-webgui to web root"
|
|
}
|
|
|
|
# Sets files ownership in web root directory
|
|
function change_file_ownership() {
|
|
if [ ! -d "$webroot_dir" ]; then
|
|
install_error "Web root directory doesn't exist"
|
|
fi
|
|
|
|
install_log "Changing file ownership in web root directory"
|
|
sudo chown -R $raspap_user:$raspap_user "$webroot_dir" || install_error "Unable to change file ownership for '$webroot_dir'"
|
|
}
|
|
|
|
# Check for existing /etc/network/interfaces and /etc/hostapd/hostapd.conf files
|
|
function check_for_old_configs() {
|
|
if [ -f /etc/network/interfaces ]; then
|
|
sudo cp /etc/network/interfaces "$raspap_dir/backups/interfaces.`date +%F-%R`"
|
|
sudo ln -sf "$raspap_dir/backups/interfaces.`date +%F-%R`" "$raspap_dir/backups/interfaces"
|
|
fi
|
|
|
|
if [ -f /etc/hostapd/hostapd.conf ]; then
|
|
sudo cp /etc/hostapd/hostapd.conf "$raspap_dir/backups/hostapd.conf.`date +%F-%R`"
|
|
sudo ln -sf "$raspap_dir/backups/hostapd.conf.`date +%F-%R`" "$raspap_dir/backups/hostapd.conf"
|
|
fi
|
|
|
|
if [ -f /etc/dnsmasq.conf ]; then
|
|
sudo cp /etc/dnsmasq.conf "$raspap_dir/backups/dnsmasq.conf.`date +%F-%R`"
|
|
sudo ln -sf "$raspap_dir/backups/dnsmasq.conf.`date +%F-%R`" "$raspap_dir/backups/dnsmasq.conf"
|
|
fi
|
|
|
|
if [ -f /etc/dhcpcd.conf ]; then
|
|
sudo cp /etc/dhcpcd.conf "$raspap_dir/backups/dhcpcd.conf.`date +%F-%R`"
|
|
sudo ln -sf "$raspap_dir/backups/dhcpcd.conf.`date +%F-%R`" "$raspap_dir/backups/dhcpcd.conf"
|
|
fi
|
|
|
|
if [ -f /etc/rc.local ]; then
|
|
sudo cp /etc/rc.local "$raspap_dir/backups/rc.local.`date +%F-%R`"
|
|
sudo ln -sf "$raspap_dir/backups/rc.local.`date +%F-%R`" "$raspap_dir/backups/rc.local"
|
|
fi
|
|
}
|
|
|
|
# Move configuration file to the correct location
|
|
function move_config_file() {
|
|
if [ ! -d "$raspap_dir" ]; then
|
|
install_error "'$raspap_dir' directory doesn't exist"
|
|
fi
|
|
|
|
install_log "Moving configuration file to '$raspap_dir'"
|
|
sudo mv "$webroot_dir"/raspap.php "$raspap_dir" || install_error "Unable to move files to '$raspap_dir'"
|
|
sudo chown -R $raspap_user:$raspap_user "$raspap_dir" || install_error "Unable to change file ownership for '$raspap_dir'"
|
|
}
|
|
|
|
# Set up default configuration
|
|
function default_configuration() {
|
|
install_log "Setting up hostapd"
|
|
if [ -f /etc/default/hostapd ]; then
|
|
sudo mv /etc/default/hostapd /tmp/default_hostapd.old || install_error "Unable to remove old /etc/default/hostapd file"
|
|
fi
|
|
sudo mv $webroot_dir/config/default_hostapd /etc/default/hostapd || install_error "Unable to move hostapd defaults file"
|
|
sudo mv $webroot_dir/config/hostapd.conf /etc/hostapd/hostapd.conf || install_error "Unable to move hostapd configuration file"
|
|
sudo mv $webroot_dir/config/dnsmasq.conf /etc/dnsmasq.conf || install_error "Unable to move dnsmasq configuration file"
|
|
sudo mv $webroot_dir/config/dhcpcd.conf /etc/dhcpcd.conf || install_error "Unable to move dhcpcd configuration file"
|
|
|
|
# Generate required lines for Rasp AP to place into rc.local file.
|
|
# #RASPAP is for removal script
|
|
lines=(
|
|
'echo 1 > \/proc\/sys\/net\/ipv4\/ip_forward #RASPAP'
|
|
'iptables -t nat -A POSTROUTING -j MASQUERADE #RASPAP'
|
|
|
|
)
|
|
|
|
for line in "${lines[@]}"; do
|
|
if grep "$line" /etc/rc.local > /dev/null; then
|
|
echo "$line: Line already added"
|
|
else
|
|
sudo sed -i "s/^exit 0$/$line\nexit 0/" /etc/rc.local
|
|
echo "Adding line $line"
|
|
fi
|
|
done
|
|
}
|
|
|
|
|
|
# Add a single entry to the sudoers file
|
|
function sudo_add() {
|
|
sudo bash -c "echo \"www-data ALL=(ALL) NOPASSWD:$1\" | (EDITOR=\"tee -a\" visudo)" \
|
|
|| install_error "Unable to patch /etc/sudoers"
|
|
}
|
|
|
|
# Adds www-data user to the sudoers file with restrictions on what the user can execute
|
|
function patch_system_files() {
|
|
# add symlink to prevent wpa_cli cmds from breaking with multiple wlan interfaces
|
|
install_log "symlinked wpa_supplicant hooks for multiple wlan interfaces"
|
|
sudo ln -s /usr/share/dhcpcd/hooks/10-wpa_supplicant /etc/dhcp/dhclient-enter-hooks.d/
|
|
# Set commands array
|
|
cmds=(
|
|
"/sbin/ifdown"
|
|
"/sbin/ifup"
|
|
"/bin/cat /etc/wpa_supplicant/wpa_supplicant.conf"
|
|
"/bin/cat /etc/wpa_supplicant/wpa_supplicant-wlan[0-9].conf"
|
|
"/bin/cp /tmp/wifidata /etc/wpa_supplicant/wpa_supplicant.conf"
|
|
"/bin/cp /tmp/wifidata /etc/wpa_supplicant/wpa_supplicant-wlan[0-9].conf"
|
|
"/sbin/wpa_cli -i wlan[0-9] scan_results"
|
|
"/sbin/wpa_cli -i wlan[0-9] scan"
|
|
"/sbin/wpa_cli reconfigure"
|
|
"/bin/cp /tmp/hostapddata /etc/hostapd/hostapd.conf"
|
|
"/etc/init.d/hostapd start"
|
|
"/etc/init.d/hostapd stop"
|
|
"/etc/init.d/dnsmasq start"
|
|
"/etc/init.d/dnsmasq stop"
|
|
"/bin/cp /tmp/dhcpddata /etc/dnsmasq.conf"
|
|
"/sbin/shutdown -h now"
|
|
"/sbin/reboot"
|
|
"/sbin/ip link set wlan[0-9] down"
|
|
"/sbin/ip link set wlan[0-9] up"
|
|
"/sbin/ip -s a f label wlan[0-9]"
|
|
"/bin/cp /etc/raspap/networking/dhcpcd.conf /etc/dhcpcd.conf"
|
|
"/etc/raspap/hostapd/enablelog.sh"
|
|
"/etc/raspap/hostapd/disablelog.sh"
|
|
)
|
|
|
|
# Check if sudoers needs patching
|
|
if [ $(sudo grep -c www-data /etc/sudoers) -ne 28 ]
|
|
then
|
|
# Sudoers file has incorrect number of commands. Wiping them out.
|
|
install_log "Cleaning sudoers file"
|
|
sudo sed -i '/www-data/d' /etc/sudoers
|
|
install_log "Patching system sudoers file"
|
|
# patch /etc/sudoers file
|
|
for cmd in "${cmds[@]}"
|
|
do
|
|
sudo_add $cmd
|
|
IFS=$'\n'
|
|
done
|
|
else
|
|
install_log "Sudoers file already patched"
|
|
fi
|
|
}
|
|
|
|
|
|
# Change configuration of php cgi.
|
|
function configure_php() {
|
|
phpcgiconf=""
|
|
if [ "$php_package" = "php7.0-cgi" ]; then
|
|
phpcgiconf="/etc/php/7.0/cgi/php.ini"
|
|
elif [ "$php_package" = "php5-cgi" ]; then
|
|
phpcgiconf="/etc/php/cgi/php.ini"
|
|
fi
|
|
|
|
if [ -f "$phpcgiconf" ]; then
|
|
# Set the httpOnly flag on session cookies.
|
|
# So they cannot be read by javascript, if cookie flag supported by useragent.
|
|
sudo sed -i 's/^session.cookie_httponly\s*=\s*([O|o]ff|0)\s*$/session.cookie_httponly = 1/' "$phpcgiconf"
|
|
# Enable PHP Zend Opcache if off.
|
|
sudo sed -i 's/;opcache.enable\s*=\s*([O|o]ff|0)\s*$/opcache.enable=1/' "$phpcgiconf"
|
|
# Turn off unused assert function for unit test support.
|
|
#sudo sed -i 's/;assert.active\s*=\s*([O|o]n|1)\s*$/assert.active = 0/' "$phpcgiconf"
|
|
# Turn off file upload support if on.
|
|
#sudo sed -i 's/file_uploads\s*=\s*([O|o]n|1)\s*$/file_uploads = 0/' "$phpcgiconf"
|
|
# Use sha1 instead of md5 for sessionid.
|
|
sudo sed -i 's/^session.hash_function\s*=\s*0\s*$/session.hash_function = 1/' "$phpcgiconf"
|
|
# Disable the X-Powered-By header and magic logo uri(if enabled php5).
|
|
sudo sed -i 's/^expose_php\s*=\s*([O|o]n|1)\s*$/expose_php = 0/' "$phpcgiconf"
|
|
else
|
|
install_warning "Php configuration could not be found."
|
|
fi
|
|
|
|
# Make sure opcache extension is turned on.
|
|
if [ -f "/usr/sbin/phpenmod" ]; then
|
|
sudo phpenmod opcache
|
|
else
|
|
install_warning "phpenmod not installed."
|
|
fi
|
|
|
|
# Disable unused php extensions to safe memory use and for hardening.
|
|
if [ -f "/usr/sbin/phpdismod" ]; then
|
|
sudo phpdismod phar
|
|
sudo phpdismod ftp
|
|
sudo phpdismod sockets
|
|
sudo phpdismod shmop
|
|
sudo phpdismod sysvmsg
|
|
sudo phpdismod sysvsem
|
|
sudo phpdismod sysvshm
|
|
sudo phpdismod tokenizer
|
|
else
|
|
install_warning "phpdismmod not installed or not in path."
|
|
fi
|
|
}
|
|
|
|
function install_complete() {
|
|
install_log "Installation completed!"
|
|
|
|
echo -n "The system needs to be rebooted as a final step. Reboot now? [y/N]: "
|
|
read answer
|
|
if [[ $answer != "y" ]]; then
|
|
echo "Reboot aborted."
|
|
exit 0
|
|
fi
|
|
sudo shutdown -r now || install_error "Unable to execute shutdown"
|
|
}
|
|
|
|
function install_raspap() {
|
|
display_welcome
|
|
config_installation
|
|
update_system_packages
|
|
install_dependencies
|
|
enable_php_lighttpd
|
|
create_raspap_directories
|
|
check_for_old_configs
|
|
download_latest_files
|
|
change_file_ownership
|
|
create_logging_scripts
|
|
move_config_file
|
|
default_configuration
|
|
patch_system_files
|
|
configure_php
|
|
install_complete
|
|
}
|