summaryrefslogtreecommitdiffstats
path: root/retiolum/scripts/tinc_setup/new_install.sh
blob: 7a62e13b36b2d6c771fc0dd677e21b1550fcbb97 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
#!/bin/sh

#get sudo
if test "${nosudo-false}" != true -a `id -u` != 0; then
  echo "we're going sudo..." >&2
  exec sudo -E "$0" "$@"
  exit 23 # go to hell
fi

#
SUBNET4=${SUBNET4:-10.243}
SUBNET6=${SUBNET6:-42}
TEMPDIR=${TEMPDIR:-auto}
SYSHOSTN=${HOSTNAME:-$(hostname)}
HOSTN=${HOSTN:-$SYSHOSTN}
NETNAME=${NETNAME:-retiolum}
MASK4=${MASK4:-16}
MASK6=${MASK6:-16}
URL=${URL:-euer.krebsco.de/retiolum/hosts.tar.gz}

IRCCHANNEL=${IRCCHANNEL:-"#krebsco"}
IRCSERVER=${IRCSERVER:-"irc.freenode.net"}
IRCPORT=${IRCPORT:-6667}

OS=${OS:-0}

IP4=${IP4:-0}
IP6=${IP6:-0}

RAND4=0
RAND6=0

usage()
{
cat << EOF
usage $0 options
This script gets you into the KREBS Darknet
all parameters are optional

Options:
 -h          Show this message(haha)
 -4 \$ipv4   specify an ip(version 4), this also disables random ip mode, default is random
 -6 \$ipv6   specify an ip(version 6), this also disables random ip mode, default is random
 -s \$SUBNET Choose another Subnet(version4), default is 10.243
 -x \$SUBNET Choose another Subnet(version6), default is 42
 -m \$MASK   Choose another Subnet Mask(version4), default is 16
 -j \$MASK   Choose another Subnet Mask(version6), default is 16
 -t \$DIR    Choose another Temporary directory, default is /tmp/tinc-install-fu
 -o \$HOST   Choose another Hostname, default is your system hostname
 -n \$NET    Choose another tincd netname,this also specifies the path to your tinc config, default is retiolum
 -u \$URL    specify another hostsfiles.tar.gz url, default is euer.krebsco.de/retiolum/hosts.tar.gz
 -l \$OS     specify an OS, numeric parameter.0=Automatic 1=Linux 2=Android, disables automatic OS-finding, default is 0
 -r \$ADDR   give the node an reachable remote address, ipv4 or dns
EOF
}

#convert hostmask to subnetmask only version 4
host2subnet()
{
    NEEDDOTSINSUB=$(expr 3 - $(echo $SUBNET4 | sed 's/[0-9]*//g'))
    FULLSUBNET=$(echo $SUBNET4$(eval "printf '.0'%.0s {1..${#NEEDDOTSINSUB}}"s))

    result=$(($(($((1 << $1)) - 1)) << $((32 - $1))))
    byte=""
    for i in {0..2}; do
        byte=.$(($result % 256))$byte
        result=$(($result / 256))
    done
    RETARDEDMASK=$result$byte
}

#check if ip is valid ipv4 function
check_ip_valid4()
{
    if [ "$(echo $1 | awk -F"\." ' $0 ~ /^([0-9]{1,3}\.){3}[0-9]{1,3}$/ && $1 <=255 && $2 <= 255 && $3 <= 255 && $4 <= 255 ' 2>/dev/null)" == "$1" ] && [ ${1:0:${#SUBNET4}} == $SUBNET4 ]
    then
        return 0
    else
        return 1
    fi
}

#check if ip is valid ipv6 function
check_ip_valid6()
{
    if [ "$(echo $1 | awk -F"." ' $0 ~ /^([0-9a-fA-F]{1,4}\:){7}[0-9a-fA-F]{1,4}$/' 2>/dev/null)" == $1 ] && [ ${1:0:${#SUBNET6}} == $SUBNET6 ]
    then
        return 0
    else
        return 1
    fi
}

#check if ip is taken function
check_ip_taken()
{
    if grep -q -E "$1(#|/)" $TEMPDIR/hosts/* ;then
        return 1
    else
        return 0
    fi
}

#if hostname is taken, count upwards until it isn't taken function
get_hostname()
{
    TSTFILE=$TEMPDIR/hosts/$1
    LCOUNTER=0
    if test -e $TSTFILE; then
        while test -e $TSTFILE; do
            let LCOUNTER=LCOUNTER+1
            TSTFILE=$TEMPDIR/hosts/$1$LCOUNTER
        done
        HOSTN=$1$LCOUNTER
    else
        HOSTN=$1
    fi
}

#os autodetection
find_os()
{
    if grep -qe '.*' /etc/*release 2>/dev/null; then
        OS=1
    elif which getprop&>/dev/null; then
        OS=2
    fi
}

if [ $IP4 -eq 0 ]; then
    RAND4=1
elif ! check_ip_valid4 $IP4; then
    echo 'ip4 is invalid'
    exit 1
fi
if [ $IP6 -eq 0 ]; then
    RAND6=1
elif ! check_ip_valid6 $IP6; then
    echo 'ip6 is invalid'
    exit 1
fi

#find OS
if [ $OS -eq 0 ]; then
    find_os
fi

#check if everything is installed
if ! which awk&>/dev/null; then
    echo "Please install awk"
    exit 1
fi

if ! which curl&>/dev/null; then
    if ! which wget&>/dev/null; then
        echo "Please install curl or wget"
        exit 1
    else
        LOADER='wget -O-'
    fi
else
    LOADER=curl
fi

if ! $(ping -c 1 euer.krebsco.de -W 5 1>/dev/null) ;then
    echo "Cant reach euer, check if your internet is working"
    exit 1
fi


#parse options
while getopts "h4:6:s:x:m:j:t:o:n:u:l:" OPTION
do
    case $OPTION in
        h)
            usage
            exit 1
            ;;
        4)
            IP4=$OPTARG
            RAND4=0
            if ! check_ip_valid4 $IP4; then echo "ipv4 is invalid" && exit 1; fi
            ;;
        6)
            IP6=$OPTARG
            RAND6=0
            if ! check_ip_valid6 $IP6; then echo "ipv6 is invalid" && exit 1; fi
            ;;
        s)
            SUBNET4=$OPTARG
            ;;
        x)
            SUBNET6=$OPTARG
            ;;
        m)
            MASK4=$OPTARG
            ;;
        j)
            MASK6=$OPTARG
            ;;
        t)
            TEMPDIR=$OPTARG
            ;;
        o)
            HOSTN=$OPTARG
            ;;
        n)
            NETNAME=$OPTARG
            ;;
        u)
            URL=$OPTARG
            if $(! curl -s --head $URL | head -n 1 | grep "HTTP/1.[01] [23].." > /dev/null); then
                echo "url not reachable"
                exit 1
            fi
            ;;
        l)
            OS=$OPTARG
            if ! [ "$(echo $OS | awk -F"." ' $0 ~ /^[0-2]$/' )" == $OS ]; then
                echo "invalid input for OS"
                exit 1
            fi
            ;;
        r)
            ADDR=$OPTARG
            ;;

    esac
done

#check for OS
if [ $OS -eq 0 ]; then
    echo $OS
    find_os
fi

#check if everything is installed
if [ $OS -eq 2 ]; then
    if ! test -e /data/data/org.poirsouille.tinc_gui/files/tincd; then
        echo "Please install tinc-gui"
        exit 1
    else
        TINCBIN=/data/data/org.poirsouille.tinc_gui/files/tincd
        if [ $TEMPDIR == 'auto' ]; then TEMPDIR=/data/secure/data ;fi
    fi
else
    if ! which tincd&>/dev/null; then
        echo "Please install tinc"
        exit 1
    else
        TINCBIN=tincd
        if [ $TEMPDIR == 'auto' ]; then TEMPDIR=/mnt/tinc-install-fu ;fi
    fi
fi

#generate full subnet information for v4

#test if tinc directory already exists
if test -e /etc/tinc/$NETNAME; then
    echo "tinc config directory /etc/tinc/$NETNAME does already exist. (backup and) delete config directory and restart"
    exit 1
fi

#get tinc-hostfiles
mkdir -p $TEMPDIR/hosts
$LOADER euer.krebsco.de/retiolum/hosts.tar.gz | tar zx -C $TEMPDIR/hosts/

#check for free ip
#version 4
until check_ip_taken $IP4; do
    if [ $RAND4 -eq 1 ]; then
        IP4="$SUBNET4.$(( $(head /dev/urandom | tr -dc "123456789" | head -c3) %255)).$(( $(head /dev/urandom | tr -dc "123456789" | head -c3) %255))"
    else
        printf 'choose new ip: '
        read IP4
        while !  check_ip_valid4 $IP4; do
            printf 'the ip is invalid, retard, choose a valid ip: '
            read IP4
        done
    fi
done

#version 6
until check_ip_taken $IP6; do
    if [ $RAND6 -eq 1 ]; then
        NETLENGTH=$(expr $(expr 128 - $MASK6) / 4)
        IP6="$SUBNET6$(head /dev/urandom | tr -dc "0123456789abcdef" | head -c$NETLENGTH | sed 's/..../:&/g')" #todo: generate ip length from hostmask
    else
        printf 'ip taken, choose new ip: '

        read IP6
        while !  check_ip_valid6 $IP6; do
            printf 'the ip is invalid, retard, choose a valid ip: '
            read IP6
        done
    fi
done


#check for free hostname
get_hostname $HOSTN


#create the configs
if [ $OS -eq 2 ];then
    mkdir -p /usr/local/etc/tinc/$NETNAME
    cd /usr/local/etc/tinc/$NETNAME
else
    mkdir -p /etc/tinc/$NETNAME
    cd /etc/tinc/$NETNAME
fi

mv $TEMPDIR/hosts ./

echo "Subnet = $IP4" > hosts/$HOSTN
echo "Subnet = $IP6" >> hosts/$HOSTN

cat>tinc.conf<<EOF
Name = $HOSTN
Device = /dev/net/tun

#newer tinc features
LocalDiscovery = yes
AutoConnect = 3

#ConnectTos
ConnectTo = euer
ConnectTo = pico
EOF

host2subnet $MASK4

#check if ip is installed
if which ip&>/dev/null; then
    echo 'dirname="`dirname "$0"`"' > tinc-up
    echo '' >> tinc-up
    echo 'conf=$dirname/tinc.conf' >> tinc-up
    echo '' >> tinc-up
    echo 'name=$(sed -n "s|^ *Name *= *\([^ ]*\) *$|\1|p " $conf)' >> tinc-up
    echo '' >> tinc-up
    echo 'host=$dirname/hosts/$name' >> tinc-up
    echo '' >> tinc-up
    echo 'ip link set $INTERFACE up' >> tinc-up
    echo '' >> tinc-up
    echo "addr4=\$(sed -n \"s|^ *Subnet *= *\\($SUBNET4[.][^ ]*\\) *$|\\1|p\" \$host)" >> tinc-up
    echo 'ip -4 addr add $addr4 dev $INTERFACE' >> tinc-up
    echo "ip -4 route add $FULLSUBNET/$MASK4 dev \$INTERFACE" >> tinc-up
    echo '' >> tinc-up
    echo "addr6=\$(sed -n \"s|^ *Subnet *= *\\($SUBNET6[:][^ ]*\\) *$|\\1|p\" \$host)" >> tinc-up
    echo 'ip -6 addr add $addr6 dev $INTERFACE' >> tinc-up
    echo "ip -6 route add $SUBNET6::/$MASK6 dev \$INTERFACE" >> tinc-up
else
    echo 'dirname="`dirname "$0"`"' > tinc-up
    echo '' >> tinc-up
    echo 'conf=$dirname/tinc.conf' >> tinc-up
    echo '' >> tinc-up
    echo 'name=$(sed -n "s|^ *Name *= *\([^ ]*\) *$|\1|p " $conf)' >> tinc-up
    echo '' >> tinc-up
    echo 'host=$dirname/hosts/$name' >> tinc-up
    echo '' >> tinc-up
    echo "addr4=\$(sed -n \"s|^ *Subnet *= *\\($SUBNET4[.][^ ]*\\) *$|\\1|p\" \$host)" >> tinc-up
    echo 'ifconfig $INTERFACE $addr4' >> tinc-up
    echo "route add -net $FULLSUBNET netmask $RETARDEDMASK dev $INTERFACE " >> tinc-up
fi

#fix permissions
chmod +x tinc-up
chown -R root:root .

#generate keys with tinc
if which tincctl&>/dev/null; then
    yes | tincctl -n $NETNAME generate-keys
    cat rsa_key.pub >> hosts/$HOSTN
else
    yes | $TINCBIN -n $NETNAME -K
fi

#write to irc-channel
NICK="${HOSTN}_$(head /dev/urandom | tr -dc "0123456789" | head -c3)"

(   echo "NICK $NICK";
    echo "USER $NICK $IRCSERVER bla : $NICK";
    echo "JOIN $IRCCHANNEL";
    sleep 23;
    sed "s/^\(.*\)/PRIVMSG $IRCCHANNEL : \1/" hosts/$HOSTN;
    sleep 5; ) | telnet $IRCSERVER $IRCPORT