2 # Copyright (C) 2016 Ian Kelling
4 # This program is free software; you can redistribute it and/or
5 # modify it under the terms of the GNU General Public License
6 # as published by the Free Software Foundation; either version 2
7 # of the License, or (at your option) any later version.
9 # This program is distributed in the hope that it will be useful,
10 # but WITHOUT ANY WARRANTY; without even the implied warranty of
11 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
12 # GNU General Public License for more details.
14 # You should have received a copy of the GNU General Public License
15 # along with this program; if not, write to the Free Software
16 # Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
19 [[ $EUID == 0 ]] ||
exec sudo
-E "${BASH_SOURCE[0]}" "$@"
21 x
="$(readlink -f "$BASH_SOURCE")"; source "${x%/*}/bash-trace"
26 Usage: ${0##*/} [OPTIONS] [HOST] [TYPE]
27 Configure dnsmasq boot options and fai-chboot if appropriate. This is
28 not general purpose, it has code specific to dhcp servers I run.
30 Without TYPE, disable server and fai server. In that case, HOST is only
31 needed for fsf office network.
33 HOST A hostname known to the dhcp server, or default for all.
34 TYPE One of arch, parabola, plain, fai.
36 -a Don't setup pxe, just Wait for 2 dhcp acks, then disable the pxe
37 server after a delay. First ack is for pxe boot, 2nd ack is
38 for os boot. Sometimes on debian, there is a 3rd one shortly
39 after the 2nd. I can't remember exactly why this caused a
40 problem, but I'm hoping the sleep will take care of it.
41 -d Don't alter dhcp config. Only make sense for fai type, and on network
42 other than home or fsf.
43 -k Pass -k to myfai-chboot.
44 -r Don't redeploy fai config. For example, if there is a different host
47 -S sets FAI_ACTION=sysinfo, see myfai-chboot for more info.
48 -w Setup pxe, then wait like -a.
49 -h|--help Print help and exit
52 Note, when switching between plain and arch or parabola, you will need to
57 ln -s <arch/parabola/debian iso dir> tftpboot
60 Notes on debugging pxe dhcp tftp:
62 For debugging dhcp, add to /etc/dnsmasq.conf: log-dhcp
64 Newer openwrt runs dnsmasq with a whitelist of readable files and dirs:
67 /sbin/ujail -t 5 -n dnsmasq -u -l -r /bin/ubus -r /etc/TZ -r /etc/dnsmasq.conf -r /etc/ethers -r /etc/group -r /etc/hosts -r /etc/passwd -w /tmp/dhcp.leases -r /tmp/dnsmasq.d -r /tmp/hosts -r /tmp/resolv.conf.d -r /usr/bin/jshn -r /usr/lib/dnsmasq/dhcp-script.sh -r /usr/share/dnsmasq/dhcpbogushostname.conf -r /usr/share/dnsmasq/rfc6761.conf -r /usr/share/dnsmasq/trust-anchors.conf -r /usr/share/libubox/jshn.sh -r /var/etc/dnsmasq.conf.cfg01411c -w /var/run/dnsmasq/ -- /usr/sbin/dnsmasq -C /var/etc/dnsmasq.conf.cfg01411c -k -x /var/run/dnsmasq/dnsmasq.cfg01411c.pid
69 logging tftp requests:
70 /etc/default/tftpd-hpa:
72 TFTP_OPTIONS="--secure -vv"
75 Note: Uses GNU getopt options parsing style
81 m
() { printf "$pre %s\n" "$*"; "$@"; }
82 e
() { printf "$pre %s\n" "$*"; }
83 err
() { echo "[$(date +'%Y-%m-%d %H:%M:%S%z')]: $pre: $*" >&2; }
87 ##### begin command line parsing ########
100 temp
=$
(getopt
-l help adkrSwh
"$@") || usage
1
104 -a) wait=true
; set=false
; shift ;;
105 -d) dhcp
=false
; shift ;;
106 -k) chboot_args
+=(-k); shift ;;
107 -r) redep
=false
; shift ;;
108 -S) chboot_args
+=(-S); shift ;;
109 -w) wait=true
; set=true
; shift ;;
112 *) echo "$0: Internal error!" ; exit 1 ;;
116 read -r host type <<<"$@"
122 arch|parabola
) cmd
=archlike
;;
125 echo "$0: error expected type of arch|parabola|fai"
132 echo "$0: error: expected 0-2 arguments"
139 if $wait && ! $dhcp; then
140 echo "$0: error -w conflicts with -d, choose one or other"
145 if [[ $host && $host != default
]]; then
146 host_tag
="tag:$host,"
149 ##### end command line parsing ########
153 ${host_tag}209,boot/syslinux/${type}iso.cfg
154 ${host_tag}210,/${type}/
155 ${host_tag}option:bootfile-name,/${type}/boot/syslinux/lpxelinux.0
160 # if arch based was used before, this additionally needs
161 # the tftp link in /mnt/usb to be changed.
163 ${host_tag}option:bootfile-name,pxelinux.0
169 ${host_tag}option:bootfile-name,pxelinux.0
170 ${host_tag}option:server-ip-address,$faiserverip
171 ${host_tag}option:tftp-server,$faiserverip
173 # Note, previously used normal dnsmasq option, but it requires dnsmasq
174 # restart, which causes momentary dns failures, which can bork an
177 # dhcp-boot=${host_tag}pxelinux.0,faiserver.b8.nz,faiserver.b8.nz
182 wait_cmd
="ssh tarantula.office.fsf.org tail -n0 -f /var/log/syslog"
184 wait_cmd
="ssh cmc logread -f"
189 host_regex
=" $(getent hosts kw | awk '{print $1}' | sed 's/\./\\./g')"
194 regex
=".*DHCPACK.*$host_regex\b"
196 while (( i
!= wait_count
)) && read -r line
; do
197 if [[ $line =~
$regex ]]; then
201 done < <($wait_cmd ||
:) # tail returns 2 it seems
208 if [[ ! $cmd ]]; then
209 e
"removing pxe for $host on tarantula"
210 ssh tarantula.office.fsf.org bash
-e <<EOF
211 sed -ri 's/^( *host +$host *\{).*/\1/' /etc/dhcp/dhcpd.conf
212 systemctl restart isc-dhcp-server
214 elif [[ $cmd == fai
]]; then
215 e
"adding pxe for $host on tarantula"
216 ssh tarantula.office.fsf.org bash
-e <<EOF
217 sed -ri 's/^( *host +$host *\{).*/\1 next-server faiserver.office.fsf.org; filename "pxelinux.0";/' /etc/dhcp/dhcpd.conf
218 systemctl restart isc-dhcp-server
222 e
"updating dnsmasq.conf:"
224 ${cmd:-:}|
ssh cmc
"dd of=/var/run/dnsmasq/dhcpopts.conf; /etc/init.d/dnsmasq reload
225 $([[ $type == arch || $type == parabola ]] && echo archlike-pxe-mount)"
229 type -t host &>/dev
/null || sudo apt-get
-y install dnsutils
230 faiserverip
=$
(host faiserver |
sed -rn 's/^\S+ has address //p;T;q' ||
:)
231 if [[ ! $faiserverip ||
$faiserverip =~
[[:space
:]] ]]; then
232 echo "$0: error: failed to get \$faiserverip, got: $faiserverip"
239 if [[ $type == fai
]]; then
243 m myfai-chboot
${chboot_args[@]} $host
245 # This will fail if faiserver is not setup, so ignore any
246 # failure and don't bother us about it.
247 myfai-chboot
&>/dev
/null ||
:
252 # fai's debian jessie 8.5ish does 2 dhcp requests when booting,
253 # roughly 4 seconds apart. Earlier
254 # versions did just 1. Now testing on a vm, it does 1.
256 echo "waiting for $acks dhcp acks then disabling pxe"
262 # previously tried waiting for one more ack then disabling faiserver,
263 # since it can contain sensitive info, so turn it off when not in use,
264 # but disabling that for now as it's inconvenient to clean this
265 # up and run it in the background etc.
267 # if [[ $type == fai ]]; then
268 # echo "waiting for 1 dhcp ack then disabling fai server"