Spotter-VM/basic.sh

#!/bin/sh
set -e

SOURCE_DIR=$(realpath $(dirname "${0}"))/basic

# Install packages
apk --no-cache add ca-certificates curl bridge e2fsprogs-extra gettext iptables kbd-misc libcap libressl libseccomp postfix python3 py3-bcrypt py3-cffi py3-cryptography py3-dnspython py3-jinja2 py3-requests py3-six py3-werkzeug nginx util-linux
if [ ${DEBUG:-0} -eq 1 ]; then
    # Install some utilities for DEBUG mode
    apk --no-cache add git file htop less openssh-server openssh-sftp-server tar xz
fi

# Copy root profile files and settings for DEBUG mode
if [ ${DEBUG:-0} -eq 1 ]; then
    mkdir -p /root/.config/htop /root/.ssh
    cp ${SOURCE_DIR}/root/.profile /root/.profile
    cp ${SOURCE_DIR}/root/.ssh/authorized_keys /root/.ssh/authorized_keys
    cp ${SOURCE_DIR}/root/.config/htop/htoprc /root/.config/htop/htoprc
fi

# Copy boot configuration
cp ${SOURCE_DIR}/boot/extlinux.conf /boot/extlinux.conf
cp ${SOURCE_DIR}/boot/vm.txt /boot/vm.txt
cp ${SOURCE_DIR}/etc/inittab /etc/inittab
cp ${SOURCE_DIR}/sbin/extend-disk /sbin/extend-disk
cp ${SOURCE_DIR}/sbin/vmtty /sbin/vmtty
>/etc/motd

# Enable support for Czech characters
cp ${SOURCE_DIR}/etc/rc.conf /etc/rc.conf
cp ${SOURCE_DIR}/etc/conf.d/consolefont /etc/conf.d/consolefont

# Configure NTP client
cp ${SOURCE_DIR}/etc/conf.d/ntpd /etc/conf.d/ntpd

# Configure networking
cp ${SOURCE_DIR}/etc/conf.d/iptables /etc/conf.d/iptables
cp ${SOURCE_DIR}/etc/iptables/rules-save /etc/iptables/rules-save
cp ${SOURCE_DIR}/etc/network/interfaces /etc/network/interfaces
service networking restart

# Download and configure acme.sh
mkdir /etc/acme.sh.d
wget https://raw.githubusercontent.com/Neilpang/acme.sh/master/acme.sh -O /usr/bin/acme.sh
sed -i 's|$HOME/.$PROJECT_NAME|/etc/acme.sh.d|' /usr/bin/acme.sh
chmod +x /usr/bin/acme.sh

# Download and configure LXC
wget https://dl.dasm.cz/lxc.tar.xz -O - | tar xJf - -C /
mkdir /var/log/lxc
echo -e "172.17.0.1 host" >>/etc/hosts

# Copy VMMgr resources
cp ${SOURCE_DIR}/etc/init.d/vmmgr /etc/init.d/vmmgr
rc-update -u
cp -r ${SOURCE_DIR}/srv/vm /srv/vm
ln -s /srv/vm/cli.py /usr/bin/vmmgr

# Create a self-signed certificate
vmmgr create-selfsigned

# Configure nginx
cp ${SOURCE_DIR}/etc/nginx/nginx.conf /etc/nginx/nginx.conf

# Configure postfix
cp ${SOURCE_DIR}/etc/postfix/main.cf /etc/postfix/main.cf 
newaliases

# Configure services
for SERVICE in cgroups consolefont crond iptables nginx ntpd postfix swap vmmgr; do
    rc-update add ${SERVICE} boot
    service ${SERVICE} start
done

# Configure services for DEBUG mode
if [ ${DEBUG:-0} -eq 1 ]; then
    rc-update add sshd boot
    service sshd start
fi

# Generate nginx default.conf
vmmgr update-host spotter.vm 443