#!/bin/bash -l
# Copyright (C) 2016 Ian Kelling
-# This program is under GPL v. 3 or later, see <http://www.gnu.org/licenses/>
+
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+
+# http://www.apache.org/licenses/LICENSE-2.0
+
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
errcatch
set -x
jq
locate
meld
+ nmap
offlineimap
p7zip
paprefs
-########### begin section including lj ################
+########### begin section including li ################
+
+case $distro in
+ debian)
+ if [[ `debian-archive` == testing ]]; then
+ pi acme-tiny
+ fi
+esac
case $distro in
fedora) spa unrar ;;
# /usr/share/doc/unattended-upgrades# cat README.md
# /etc/apt/apt.conf.d/50unattended-upgrades
if isdebian; then
- pi unattended-upgrades
- s dd of=/etc/apt/apt.conf.d/10periodic <<'EOF'
-# this file was mostly just comments.
-APT::Periodic::Update-Package-Lists "1";
-APT::Periodic::Download-Upgradeable-Packages "1";
-APT::Periodic::AutocleanInterval "7";
-APT::Periodic::Unattended-Upgrade "1";
-EOF
-
-
- { cat <<'EOF'
-Unattended-Upgrade::Mail "root";
-Unattended-Upgrade::MailOnlyOnError "true";
-Unattended-Upgrade::Remove-Unused-Dependencies "true";
-Unattended-Upgrade::Origins-Pattern {
-# default is just upgrade main and security, not updates.
-EOF
- if isdebian-testing; then
- cat <<'EOF'
-# for testing, only do security updates.
- "origin=Debian,codename=${distro_codename},label=Debian-Security";
-EOF
- else
- cat <<'EOF'
-# These are stable packages only getting bugfixes anyways.
- "origin=*";
-EOF
- fi
- cat <<'EOF'
-};
-EOF
- } | s dd of=/etc/apt/apt.conf.d/50unattended-upgrades
-
-
- echo $- > /tmp/x
+ debian-setup-auto-update
fi
-# cron
-/a/bin/crons/all
-
+# we've got a few dependencies later on, so install them now.
+pi "${simple_packages[@]}"
+simple_packages=()
case $HOSTNAME in
lj|li)
- pi "${simple_packages[@]}"
case $HOSTNAME in
lj) domain=iank.bid ;;
li) domain=iankelling.org ;;
esac
- homepage-setup $domain
+ /a/h/setup.sh $domain
s rld /a/h/_site/ /var/www/$domain/html
curl https://$domain/git/?p=mediawiki-setup/.git;a=blob_plain;f=mw-setup-script;hb=HEAD | bash
cd /a/opt
wget -nv -N https://dl.google.com/linux/direct/google-chrome-stable_current_amd64.deb
errallow
+ set -o pipefail
s dpkg -i google-chrome-stable_current_amd64.deb |& tee $log
code=$?
errcatch
case $code in
0) : ;;
*)
- if grep '^dpkg: dependency problems prevent configuration of' \
+ # previously I had a more specific search, but dpkg
+ # changed it's output as of 7/2016
+ if grep 'dependency problems' \
$log &>/dev/null; then
s apt-get -fy install
else
exit 1
fi
;;
- esac
- ;;
- arch)
- pi google-chrome
- ;;
- esac
- ;;
+esac
+;;
+arch)
+ pi google-chrome
+ ;;
+esac
+;;
esac
# printer
bridge-utils dnsmasq qemu bind-tools
# otherwise we get error about accessing kvm module.
# seems like there might be a better way, but google was a bit vague.
- s sed -ri '/^ *user *=/d' /etc/libvirt/qemu.conf
+ s sed -ri --follow-symlinks '/^ *user *=/d' /etc/libvirt/qemu.conf
echo 'user = "root"' | s tee -a /etc/libvirt/qemu.conf
# https://bbs.archlinux.org/viewtopic.php?id=206206
# # this should prolly go in the wiki
# because no systemd user instance was running.
# Doing systemd --user resulted in
# Trying to run as user instance, but $XDG_RUNTIME_DIR is not set
+
+if isdebian-testing; then
+ # as of 7/2016, has no unstable deps, and is not in testing anymore.
+ pi synergy/unstable
+else
+ pi synergy
+fi
+
case $distro in
# ubuntu unknown. probably the same as debian, just check if the
# init scripts come with the package.
[Install]
WantedBy=sockets.target
EOF
+ systemctl --user daemon-reload
;;&
*)
- pi synergy
# taken from arch wiki.
s dd of=/etc/systemd/system/synergyc@.service <<'EOF'
[Unit]
[Service]
User=%i
-ExecStart=/usr/bin/synergyc --no-daemon treetowl
+ExecStart=/usr/bin/synergyc --no-daemon frodo
Restart=on-failure
# per man systemd.unit, StartLimitInterval, by default we
# restart more than 5 times in 10 seconds.
[Install]
WantedBy=multi-user.target
EOF
+ s systemctl daemon-reload
case $HOSTNAME in
- frodo)
+ x2|treetowl)
ser enable synergyc@ian
ser start synergyc@ian ||: # X might not be running yet
+ ;;
+ frodo)
systemctl --user start synergys ||:
systemctl --user enable synergys
;;
- treetowl) systemctl --user enable synergys ;;
esac
;;
esac
# -o on, turn on 4 hour period non-performance degrading testing.
# short test daily 2-3am, extended tests Saturdays between 3-4am:
sched="-s (S/../.././02|L/../../6/03)"
-s sed -i "s#^[[:space:]]*DEVICESCAN.*#\
+s sed -i --follow-symlinks "s#^[[:space:]]*DEVICESCAN.*#\
DEVICESCAN -a -o on -S on -n standby,q $sched\
-m ian@iankelling.org -M exec /usr/local/bin/smart-notify#" /etc/smartd.conf
# consulted first. This is often slower and undesirable, ie. local dns
# queries go from 0ms to 10+ or 100+ ms. To reverse the ordering, you
# can do:
-#sudo sed -i '/tun\*\|tap\*/d' /etc/resolvconf/interface-order
+#sudo sed -i --follow-symlinks '/tun\*\|tap\*/d' /etc/resolvconf/interface-order
# however, this breaks dns lookup for hosts on the openvpn lan.
# I can\'t figure out why hosts on the normal lan would not be
# broken under the default ordering, except the host I was
########### misc stuff
+if ! sudo test -e /etc/openvpn/client.key; then
+ /a/bin/vpn-setup/vpn-mk-client-cert
+fi
+
+
case $distro in
debian|ubuntu)
case `debian-archive` in
esac
# add 2 lines after workgroup option
-s sed -ri '/^\s*encrypt passwords\s*=/d' /etc/samba/smb.conf
-s sed -ri '/^\s*map to guest\s*=/d' /etc/samba/smb.conf
-s sed -i 's/\(\s*workgroup\s*=\).*/\1 WORKGROUP\n\tencrypt passwords = yes\n\tmap to guest = bad password/' /etc/samba/smb.conf
+s sed -ri --follow-symlinks '/^\s*encrypt passwords\s*=/d' /etc/samba/smb.conf
+s sed -ri --follow-symlinks '/^\s*map to guest\s*=/d' /etc/samba/smb.conf
+s sed -i --follow-symlinks 's/\(\s*workgroup\s*=\).*/\1 WORKGROUP\n\tencrypt passwords = yes\n\tmap to guest = bad password/' /etc/samba/smb.conf
# remove default homes section. not sharing that.
-s sed -ri '/^\s*\[homes\]/,/\s*\[/d' /etc/samba/smb.conf
+s sed -ri --follow-symlinks '/^\s*\[homes\]/,/\s*\[/d' /etc/samba/smb.conf
if ! grep -xF '[public]' /etc/samba/smb.conf &>/dev/null; then
s tee -a /etc/samba/smb.conf <<'EOF'
iankelling.org / git / distro-setup / blobdiff