chmod +x /usr/bin/archlike-pxe-mount
sed -i '/^root:/s,/bin/ash$,/bin/bash,' /etc/passwd
+
+
+
+uset dropbear.@dropbear[0].PasswordAuth 0
+uset dropbear.@dropbear[0].RootPasswordAuth 0
+uset dropbear.@dropbear[0].Port 2220
+if ! cmp -s /root/dropbear_rsa_host_key /etc/dropbear/dropbear_rsa_host_key; then
+ cp /root/dropbear_rsa_host_key /etc/dropbear/dropbear_rsa_host_key
+ dropbear_restart=true
+fi
+
+if $dropbear_restart; then
+ v /etc/init.d/dropbear restart
+fi
+
+
+uset network.lan.ipaddr $l.$lanip
+uset network.lan.netmask $mask
+if $dev2; then
+ uset network.lan.gateway $l.1
+ uset network.wan.proto none
+ uset network.wan6.proto none
+ /etc/init.d/dnsmasq stop
+ /etc/init.d/dnsmasq disable
+ /etc/init.d/odhcpd stop
+ /etc/init.d/odhcpd disable
+ rm -f /etc/resolv.conf
+ cat >/etc/resolv.conf <<'EOF'
+nameserver 8.8.8.8
+nameserver 8.8.4.4
+EOF
+
+ # things i tried to keep dnsmasq running but not enabled except local dns,
+ # but it didnt work right and i dont need it anyways.
+ # uset dhcp.wan.ignore $dev2 # default is false
+ # uset dhcp.lan.ignore $dev2 # default is false
+ # uset dhcp.@dnsmasq[0].interface lo
+ # uset dhcp.@dnsmasq[0].localuse 0
+ # uset dhcp.@dnsmasq[0].resolvfile /etc/dnsmasq.conf
+ # uset dhcp.@dnsmasq[0].noresolv 1
+ # todo: populate /etc/resolv.conf with a static value
+
+else
+ # these are the defaults
+ uset network.lan.gateway ''
+ uset network.wan.proto dhcp
+ uset network.wan6.proto dhcpv6
+ /etc/init.d/dnsmasq start
+ # todo: figure out why this returns 1
+ /etc/init.d/dnsmasq enable ||:
+ /etc/init.d/odhcpd start
+ /etc/init.d/odhcpd enable
+fi
+
+wireless_restart=false
+for x in 0 1; do
+ uset wireless.default_radio$x.ssid "$ssid"
+ uset wireless.default_radio$x.key $key
+ uset wireless.default_radio$x.encryption psk2
+ if [[ $mac ]]; then
+ uset wireless.default_radio$x.macaddr $macpre$((macsuf + 2*x))
+ fi
+ # secondary device has wireless disabled
+ uset wireless.radio$x.disabled $dev2
+done
+
+if $wireless_restart; then
+ v wifi
+fi
+
+
+
# usb, screen, relay are for libremanage
+# rsync is for brc
v pi kmod-usb-storage block-mount kmod-fs-ext4 nfs-kernel-server \
tcpdump openvpn-openssl adblock libusb-compat /root/relay_1.0-1_mips_24kc.ipk \
- screen kmod-usb-serial-cp210x kmod-usb-serial-ftdi
+ screen kmod-usb-serial-cp210x kmod-usb-serial-ftdi rsync
cat >/etc/libremanage.conf <<EOF
${libremanage_host}_type=switch
-uset dropbear.@dropbear[0].PasswordAuth 0
-uset dropbear.@dropbear[0].RootPasswordAuth 0
-uset dropbear.@dropbear[0].Port 2220
-if ! cmp -s /root/dropbear_rsa_host_key /etc/dropbear/dropbear_rsa_host_key; then
- cp /root/dropbear_rsa_host_key /etc/dropbear/dropbear_rsa_host_key
- dropbear_restart=true
-fi
-
-wireless_restart=false
-
-for x in 0 1; do
- uset wireless.default_radio$x.ssid "$ssid"
- uset wireless.default_radio$x.key $key
- uset wireless.default_radio$x.encryption psk2
- if [[ $mac ]]; then
- uset wireless.default_radio$x.macaddr $macpre$((macsuf + 2*x))
- fi
- # secondary device has wireless disabled
- uset wireless.radio$x.disabled $dev2
-done
-
-if $wireless_restart; then
- v wifi
-fi
-
########## openvpn exampl
########## missing firewall settings for routing lan
option name ssh
option src wan
option src_dport 22
- option dest_ip $l.8
+ option dest_ip $l.2
option dest lan
config rule
option src wan
option dest_port 22
config redirect
- option name sshkd
+ option name sshtp
option src wan
option src_dport 2202
option dest_port 22
- option dest_ip $l.2
+ option dest_ip $l.8
option dest lan
config rule
option src wan
v cedit /etc/hosts <<EOF || dnsmasq_restart=true
127.0.1.1 $hostname
$l.1 $hostname
-$l.2 kd
+$l.2 kd faiserver
$l.3 frodo
$l.4 wrt2
$l.5 x2
$l.6 demohost
#$l.7 x3
-$l.8 tp b8.nz faiserver
+$l.8 tp b8.nz
$l.9 bb8
$l.14 wrt3
2600:3c00::f03c:91ff:fe6d:baf8 li
# It has no sensitive info.
enable-tftp=br-lan
tftp-root=/mnt/usb/tftpboot
+dhcp-optsfile=/etc/dnsmasq-dhcpopts.conf
EOF
-uset network.lan.ipaddr $l.$lanip
-uset network.lan.netmask $mask
-if $dev2; then
- uset network.lan.gateway $l.1
- uset network.wan.proto none
- uset network.wan6.proto none
- /etc/init.d/dnsmasq stop
- /etc/init.d/dnsmasq disable
- /etc/init.d/odhcpd stop
- /etc/init.d/odhcpd disable
- # things i tried to keep dnsmasq running but not enabled except local dns,
- # but it didnt work right and i dont need it anyways.
- # uset dhcp.wan.ignore $dev2 # default is false
- # uset dhcp.lan.ignore $dev2 # default is false
- # uset dhcp.@dnsmasq[0].interface lo
- # uset dhcp.@dnsmasq[0].localuse 0
- # uset dhcp.@dnsmasq[0].resolvfile /etc/dnsmasq.conf
- # uset dhcp.@dnsmasq[0].noresolv 1
- # todo: populate /etc/resolv.conf with a static value
-else
- # these are the defaults
- uset network.lan.gateway ''
- uset network.wan.proto dhcp
- uset network.wan6.proto dhcpv6
- /etc/init.d/dnsmasq start
- # todo: figure out why this returns 1
- /etc/init.d/dnsmasq enable ||:
- /etc/init.d/odhcpd start
- /etc/init.d/odhcpd enable
-fi
-if $dnsmasq_restart; then
+if $dnsmasq_restart && ! $dev2; then
v /etc/init.d/dnsmasq restart
fi
fi
-
+# todo: we should catch errors and still run this if needed
if $network_restart; then
reboot
fi
-if $dropbear_restart; then
- v /etc/init.d/dropbear restart
-fi
exit 0