| 1 | #!/bin/bash
|
|---|
| 2 | ## @file
|
|---|
| 3 | # Post installation script template for local gateway image.
|
|---|
| 4 | #
|
|---|
| 5 | # Note! This script expects to be running chrooted (inside new sytem).
|
|---|
| 6 | #
|
|---|
| 7 |
|
|---|
| 8 | #
|
|---|
| 9 | # Copyright (C) 2020-2023 Oracle and/or its affiliates.
|
|---|
| 10 | #
|
|---|
| 11 | # This file is part of VirtualBox base platform packages, as
|
|---|
| 12 | # available from https://www.virtualbox.org.
|
|---|
| 13 | #
|
|---|
| 14 | # This program is free software; you can redistribute it and/or
|
|---|
| 15 | # modify it under the terms of the GNU General Public License
|
|---|
| 16 | # as published by the Free Software Foundation, in version 3 of the
|
|---|
| 17 | # License.
|
|---|
| 18 | #
|
|---|
| 19 | # This program is distributed in the hope that it will be useful, but
|
|---|
| 20 | # WITHOUT ANY WARRANTY; without even the implied warranty of
|
|---|
| 21 | # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
|
|---|
| 22 | # General Public License for more details.
|
|---|
| 23 | #
|
|---|
| 24 | # You should have received a copy of the GNU General Public License
|
|---|
| 25 | # along with this program; if not, see <https://www.gnu.org/licenses>.
|
|---|
| 26 | #
|
|---|
| 27 | # SPDX-License-Identifier: GPL-3.0-only
|
|---|
| 28 | #
|
|---|
| 29 |
|
|---|
| 30 |
|
|---|
| 31 | #
|
|---|
| 32 | # Globals.
|
|---|
| 33 | #
|
|---|
| 34 | MY_TARGET="/mnt/sysimage"
|
|---|
| 35 | MY_LOGFILE="${MY_TARGET}/var/log/vboxpostinstall.log"
|
|---|
| 36 | MY_CHROOT_CDROM="/cdrom"
|
|---|
| 37 | MY_CDROM_NOCHROOT="/tmp/vboxcdrom"
|
|---|
| 38 | MY_EXITCODE=0
|
|---|
| 39 | MY_DEBUG="" # "yes"
|
|---|
| 40 |
|
|---|
| 41 | @@VBOX_COND_HAS_PROXY@@
|
|---|
| 42 | PROXY="@@VBOX_INSERT_PROXY@@"
|
|---|
| 43 | export http_proxy="${PROXY}"
|
|---|
| 44 | export https_proxy="${PROXY}"
|
|---|
| 45 | echo "HTTP proxy is ${http_proxy}" | tee -a "${MY_LOGFILE}"
|
|---|
| 46 | echo "HTTPS proxy is ${https_proxy}" | tee -a "${MY_LOGFILE}"
|
|---|
| 47 | @@VBOX_COND_END@@
|
|---|
| 48 |
|
|---|
| 49 | #
|
|---|
| 50 | # Do we need to exec using target bash? If so, we must do that early
|
|---|
| 51 | # or ash will bark 'bad substitution' and fail.
|
|---|
| 52 | #
|
|---|
| 53 | if [ "$1" = "--need-target-bash" ]; then
|
|---|
| 54 | # Try figure out which directories we might need in the library path.
|
|---|
| 55 | if [ -z "${LD_LIBRARY_PATH}" ]; then
|
|---|
| 56 | LD_LIBRARY_PATH="${MY_TARGET}/lib"
|
|---|
| 57 | fi
|
|---|
| 58 | for x in \
|
|---|
| 59 | ${MY_TARGET}/lib \
|
|---|
| 60 | ${MY_TARGET}/usr/lib \
|
|---|
| 61 | ${MY_TARGET}/lib/*linux-gnu/ \
|
|---|
| 62 | ${MY_TARGET}/lib32/ \
|
|---|
| 63 | ${MY_TARGET}/lib64/ \
|
|---|
| 64 | ${MY_TARGET}/usr/lib/*linux-gnu/ \
|
|---|
| 65 | ${MY_TARGET}/usr/lib32/ \
|
|---|
| 66 | ${MY_TARGET}/usr/lib64/ \
|
|---|
| 67 | ;
|
|---|
| 68 | do
|
|---|
| 69 | if [ -e "$x" ]; then LD_LIBRARY_PATH="${LD_LIBRARY_PATH}:${x}"; fi;
|
|---|
| 70 | done
|
|---|
| 71 | export LD_LIBRARY_PATH
|
|---|
| 72 |
|
|---|
| 73 | # Append target bin directories to the PATH as busybox may not have tee.
|
|---|
| 74 | PATH="${PATH}:${MY_TARGET}/bin:${MY_TARGET}/usr/bin:${MY_TARGET}/sbin:${MY_TARGET}/usr/sbin"
|
|---|
| 75 | export PATH
|
|---|
| 76 |
|
|---|
| 77 | # Drop the --need-target-bash argument and re-exec.
|
|---|
| 78 | shift
|
|---|
| 79 | echo "******************************************************************************" >> "${MY_LOGFILE}"
|
|---|
| 80 | echo "** Relaunching using ${MY_TARGET}/bin/bash $0 $*" >> "${MY_LOGFILE}"
|
|---|
| 81 | echo "** LD_LIBRARY_PATH=${LD_LIBRARY_PATH}" >> "${MY_LOGFILE}"
|
|---|
| 82 | echo "** PATH=${PATH}" >> "${MY_LOGFILE}"
|
|---|
| 83 | exec "${MY_TARGET}/bin/bash" "$0" "$@"
|
|---|
| 84 | fi
|
|---|
| 85 |
|
|---|
| 86 |
|
|---|
| 87 | #
|
|---|
| 88 | # Commands.
|
|---|
| 89 | #
|
|---|
| 90 |
|
|---|
| 91 | # Logs execution of a command.
|
|---|
| 92 | log_command()
|
|---|
| 93 | {
|
|---|
| 94 | echo "--------------------------------------------------" >> "${MY_LOGFILE}"
|
|---|
| 95 | echo "** Date: `date -R`" >> "${MY_LOGFILE}"
|
|---|
| 96 | echo "** Executing: $*" >> "${MY_LOGFILE}"
|
|---|
| 97 | "$@" 2>&1 | tee -a "${MY_LOGFILE}"
|
|---|
| 98 | MY_TMP_EXITCODE="${PIPESTATUS[0]}" # bashism - whatever.
|
|---|
| 99 | if [ "${MY_TMP_EXITCODE}" != "0" ]; then
|
|---|
| 100 | if [ "${MY_TMP_EXITCODE}" != "${MY_IGNORE_EXITCODE}" ]; then
|
|---|
| 101 | echo "** exit code: ${MY_TMP_EXITCODE}" | tee -a "${MY_LOGFILE}"
|
|---|
| 102 | MY_EXITCODE=1;
|
|---|
| 103 | else
|
|---|
| 104 | echo "** exit code: ${MY_TMP_EXITCODE} (ignored)" | tee -a "${MY_LOGFILE}"
|
|---|
| 105 | fi
|
|---|
| 106 | fi
|
|---|
| 107 | }
|
|---|
| 108 |
|
|---|
| 109 | # Logs execution of a command inside the target.
|
|---|
| 110 | log_command_in_target()
|
|---|
| 111 | {
|
|---|
| 112 | log_command chroot "${MY_TARGET}" "$@"
|
|---|
| 113 | }
|
|---|
| 114 |
|
|---|
| 115 | # Checks if $1 is a command on the PATH inside the target jail.
|
|---|
| 116 | chroot_which()
|
|---|
| 117 | {
|
|---|
| 118 | for dir in /bin /usr/bin /sbin /usr/sbin;
|
|---|
| 119 | do
|
|---|
| 120 | if [ -x "${MY_TARGET}${dir}/$1" ]; then
|
|---|
| 121 | return 0;
|
|---|
| 122 | fi
|
|---|
| 123 | done
|
|---|
| 124 | return 1;
|
|---|
| 125 | }
|
|---|
| 126 |
|
|---|
| 127 | #
|
|---|
| 128 | # Log header.
|
|---|
| 129 | #
|
|---|
| 130 | echo "******************************************************************************" >> "${MY_LOGFILE}"
|
|---|
| 131 | echo "** VirtualBox Unattended Guest Installation - Late installation actions" >> "${MY_LOGFILE}"
|
|---|
| 132 | echo "** Date: `date -R`" >> "${MY_LOGFILE}"
|
|---|
| 133 | echo "** Started: $0 $*" >> "${MY_LOGFILE}"
|
|---|
| 134 |
|
|---|
| 135 |
|
|---|
| 136 | #
|
|---|
| 137 | # We want the ISO available inside the target jail.
|
|---|
| 138 | #
|
|---|
| 139 | if [ -d "${MY_TARGET}${MY_CHROOT_CDROM}" ]; then
|
|---|
| 140 | MY_RMDIR_TARGET_CDROM=
|
|---|
| 141 | else
|
|---|
| 142 | MY_RMDIR_TARGET_CDROM="yes"
|
|---|
| 143 | log_command mkdir -p ${MY_TARGET}${MY_CHROOT_CDROM}
|
|---|
| 144 | fi
|
|---|
| 145 |
|
|---|
| 146 | if [ -f "${MY_TARGET}${MY_CHROOT_CDROM}/vboxpostinstall.sh" ]; then
|
|---|
| 147 | MY_UNMOUNT_TARGET_CDROM=
|
|---|
| 148 | echo "** binding cdrom into jail: already done" | tee -a "${MY_LOGFILE}"
|
|---|
| 149 | else
|
|---|
| 150 | MY_UNMOUNT_TARGET_CDROM="yes"
|
|---|
| 151 | log_command mount -o bind "${MY_CDROM_NOCHROOT}" "${MY_TARGET}${MY_CHROOT_CDROM}"
|
|---|
| 152 | if [ -f "${MY_TARGET}${MY_CHROOT_CDROM}/vboxpostinstall.sh" ]; then
|
|---|
| 153 | echo "** binding cdrom into jail: success" | tee -a "${MY_LOGFILE}"
|
|---|
| 154 | else
|
|---|
| 155 | echo "** binding cdrom into jail: failed" | tee -a "${MY_LOGFILE}"
|
|---|
| 156 | fi
|
|---|
| 157 | if [ "${MY_DEBUG}" = "yes" ]; then
|
|---|
| 158 | log_command find "${MY_TARGET}${MY_CHROOT_CDROM}"
|
|---|
| 159 | fi
|
|---|
| 160 | fi
|
|---|
| 161 |
|
|---|
| 162 |
|
|---|
| 163 | #
|
|---|
| 164 | # Debug
|
|---|
| 165 | #
|
|---|
| 166 | if [ "${MY_DEBUG}" = "yes" ]; then
|
|---|
| 167 | log_command id
|
|---|
| 168 | log_command ps
|
|---|
| 169 | log_command ps auxwwwf
|
|---|
| 170 | log_command env
|
|---|
| 171 | log_command df
|
|---|
| 172 | log_command mount
|
|---|
| 173 | log_command_in_target df
|
|---|
| 174 | log_command_in_target mount
|
|---|
| 175 | #log_command find /
|
|---|
| 176 | MY_EXITCODE=0
|
|---|
| 177 | fi
|
|---|
| 178 |
|
|---|
| 179 |
|
|---|
| 180 | #
|
|---|
| 181 | # Proxy hack for yum
|
|---|
| 182 | #
|
|---|
| 183 | @@VBOX_COND_HAS_PROXY@@
|
|---|
| 184 | echo "" >> "${MY_TARGET}/etc/yum.conf"
|
|---|
| 185 | echo "proxy=@@VBOX_INSERT_PROXY@@" >> "${MY_TARGET}/etc/yum.conf"
|
|---|
| 186 | @@VBOX_COND_END@@
|
|---|
| 187 |
|
|---|
| 188 | #
|
|---|
| 189 | # Packages needed for GAs.
|
|---|
| 190 | #
|
|---|
| 191 | echo "--------------------------------------------------" >> "${MY_LOGFILE}"
|
|---|
| 192 | echo '** Installing packages for building kernel modules...' | tee -a "${MY_LOGFILE}"
|
|---|
| 193 | log_command_in_target yum -y install "kernel-devel-$(uname -r)"
|
|---|
| 194 | log_command_in_target yum -y install "kernel-headers-$(uname -r)"
|
|---|
| 195 | log_command_in_target yum -y install gcc
|
|---|
| 196 | log_command_in_target yum -y install binutils
|
|---|
| 197 | log_command_in_target yum -y install make
|
|---|
| 198 | log_command_in_target yum -y install dkms
|
|---|
| 199 | log_command_in_target yum -y install make
|
|---|
| 200 | log_command_in_target yum -y install bzip2
|
|---|
| 201 | log_command_in_target yum -y install perl
|
|---|
| 202 |
|
|---|
| 203 |
|
|---|
| 204 | #
|
|---|
| 205 | # GAs
|
|---|
| 206 | #
|
|---|
| 207 | @@VBOX_COND_IS_INSTALLING_ADDITIONS@@
|
|---|
| 208 | echo "--------------------------------------------------" >> "${MY_LOGFILE}"
|
|---|
| 209 | echo '** Installing VirtualBox Guest Additions...' | tee -a "${MY_LOGFILE}"
|
|---|
| 210 | MY_IGNORE_EXITCODE=2 # returned if modules already loaded and reboot required.
|
|---|
| 211 | log_command_in_target /bin/bash "${MY_CHROOT_CDROM}/vboxadditions/VBoxLinuxAdditions.run" --nox11
|
|---|
| 212 | log_command_in_target /bin/bash -c "udevadm control --reload-rules" # GAs doesn't yet do this.
|
|---|
| 213 | log_command_in_target /bin/bash -c "udevadm trigger" # (ditto)
|
|---|
| 214 | MY_IGNORE_EXITCODE=
|
|---|
| 215 | log_command_in_target usermod -a -G vboxsf "@@VBOX_INSERT_USER_LOGIN@@"
|
|---|
| 216 | @@VBOX_COND_END@@
|
|---|
| 217 |
|
|---|
| 218 | #
|
|---|
| 219 | # Local gateway support
|
|---|
| 220 | #
|
|---|
| 221 | log_command_in_target yum -y install https://dl.fedoraproject.org/pub/epel/epel-release-latest-7.noarch.rpm
|
|---|
| 222 | #log_command_in_target yum -y update
|
|---|
| 223 | log_command_in_target yum -y install openvpn
|
|---|
| 224 | log_command_in_target yum -y install connect-proxy
|
|---|
| 225 | log_command_in_target usermod -a -G wheel "@@VBOX_INSERT_USER_LOGIN@@"
|
|---|
| 226 |
|
|---|
| 227 | echo "** Creating ${MY_TARGET}/home/@@VBOX_INSERT_USER_LOGIN@@/cloud-bridge.conf..." | tee -a "${MY_LOGFILE}"
|
|---|
| 228 | cat >"${MY_TARGET}/home/@@VBOX_INSERT_USER_LOGIN@@/cloud-bridge.conf" <<'EOT'
|
|---|
| 229 | # port 1194
|
|---|
| 230 | # proto udp
|
|---|
| 231 | port 443
|
|---|
| 232 | proto tcp-server
|
|---|
| 233 | dev tap0
|
|---|
| 234 | secret static.key
|
|---|
| 235 | keepalive 10 120
|
|---|
| 236 | compress lz4-v2
|
|---|
| 237 | push "compress lz4-v2"
|
|---|
| 238 | persist-key
|
|---|
| 239 | persist-tun
|
|---|
| 240 | status /var/log/openvpn-status.log
|
|---|
| 241 | log-append /var/log/openvpn.log
|
|---|
| 242 | verb 3
|
|---|
| 243 | EOT
|
|---|
| 244 |
|
|---|
| 245 | echo "** Creating ${MY_TARGET}/home/@@VBOX_INSERT_USER_LOGIN@@/cloud-bridge.sh..." | tee -a "${MY_LOGFILE}"
|
|---|
| 246 | cat >"${MY_TARGET}/home/@@VBOX_INSERT_USER_LOGIN@@/cloud-bridge.sh" <<'EOT'
|
|---|
| 247 | # Initialize variables
|
|---|
| 248 | br="br0"
|
|---|
| 249 | tap="tap0"
|
|---|
| 250 | vnic1=$1
|
|---|
| 251 | vnic2=$2
|
|---|
| 252 | vnic2_gw=$3
|
|---|
| 253 | target_mac=$4
|
|---|
| 254 |
|
|---|
| 255 | # Install openvpn if it is missing
|
|---|
| 256 | if ! yum list installed openvpn; then
|
|---|
| 257 | sudo yum -y install openvpn
|
|---|
| 258 | fi
|
|---|
| 259 |
|
|---|
| 260 | # Let openvpn traffic through Linux firewall
|
|---|
| 261 | #sudo iptables -I INPUT -p udp --dport 1194 -j ACCEPT
|
|---|
| 262 | sudo iptables -I INPUT -p tcp --dport 443 -j ACCEPT
|
|---|
| 263 |
|
|---|
| 264 | # Switch to secondary VNIC
|
|---|
| 265 | sudo ip route change default via $vnic2_gw dev $vnic2
|
|---|
| 266 | sudo ip link set dev $vnic1 down
|
|---|
| 267 |
|
|---|
| 268 | # Bring up the cloud end of the tunnel
|
|---|
| 269 | sudo openvpn --config cloud-bridge.conf --daemon
|
|---|
| 270 |
|
|---|
| 271 | # Use target MAC for primary VNIC
|
|---|
| 272 | sudo ip link set dev $vnic1 address $target_mac
|
|---|
| 273 |
|
|---|
| 274 | # Bridge tap and primary VNIC
|
|---|
| 275 | sudo ip link add name $br type bridge
|
|---|
| 276 | sudo ip link set dev $vnic1 master $br
|
|---|
| 277 | sudo ip link set dev $tap master $br
|
|---|
| 278 |
|
|---|
| 279 | # Bring up all interfaces
|
|---|
| 280 | sudo ip link set dev $tap up
|
|---|
| 281 | sudo ip link set dev $vnic1 up
|
|---|
| 282 | sudo ip link set dev $br up
|
|---|
| 283 | EOT
|
|---|
| 284 | log_command chmod +x "${MY_TARGET}/home/@@VBOX_INSERT_USER_LOGIN@@/cloud-bridge.sh"
|
|---|
| 285 |
|
|---|
| 286 | echo "** Creating ${MY_TARGET}/home/@@VBOX_INSERT_USER_LOGIN@@/local-bridge.conf..." | tee -a "${MY_LOGFILE}"
|
|---|
| 287 | cat >"${MY_TARGET}/home/@@VBOX_INSERT_USER_LOGIN@@/local-bridge.conf" <<'EOT'
|
|---|
| 288 | dev tap0
|
|---|
| 289 | # proto udp
|
|---|
| 290 | # port 1194
|
|---|
| 291 | proto tcp-client
|
|---|
| 292 | port 443
|
|---|
| 293 | persist-key
|
|---|
| 294 | persist-tun
|
|---|
| 295 | secret static.key
|
|---|
| 296 | compress lz4-v2
|
|---|
| 297 | log-append /var/log/openvpn.log
|
|---|
| 298 | verb 3
|
|---|
| 299 | EOT
|
|---|
| 300 |
|
|---|
| 301 | echo "** Creating ${MY_TARGET}/home/@@VBOX_INSERT_USER_LOGIN@@/local-bridge.sh..." | tee -a "${MY_LOGFILE}"
|
|---|
| 302 | cat >"${MY_TARGET}/home/@@VBOX_INSERT_USER_LOGIN@@/local-bridge.sh" <<'EOT'
|
|---|
| 303 | echo Complete command line for debugging purposes:
|
|---|
| 304 | echo $0 $*
|
|---|
| 305 |
|
|---|
| 306 | # Make sure we are at home
|
|---|
| 307 | cd ~
|
|---|
| 308 |
|
|---|
| 309 | # Initialize variables
|
|---|
| 310 | user=opc
|
|---|
| 311 | cbr_ip1=$1
|
|---|
| 312 | cbr_ip2=$2
|
|---|
| 313 | target_mac=$3
|
|---|
| 314 | br="br0"
|
|---|
| 315 | tap="tap0"
|
|---|
| 316 | eth="enp0s8"
|
|---|
| 317 |
|
|---|
| 318 | proxy1_ssh=""
|
|---|
| 319 | proxy2_ssh=""
|
|---|
| 320 | proxy2_vpn=""
|
|---|
| 321 | case $4 in
|
|---|
| 322 | HTTP | HTTPS)
|
|---|
| 323 | proxy1_ssh="connect-proxy -w 30 -H $5:$6 %h %p"
|
|---|
| 324 | ;;
|
|---|
| 325 | SOCKS | SOCKS5)
|
|---|
| 326 | proxy1_ssh="connect-proxy -w 30 -S $5:$6 %h %p"
|
|---|
| 327 | ;;
|
|---|
| 328 | SOCKS4)
|
|---|
| 329 | proxy1_ssh="connect-proxy -w 30 -4 -S $5:$6 %h %p"
|
|---|
| 330 | ;;
|
|---|
| 331 | esac
|
|---|
| 332 | case $7 in
|
|---|
| 333 | HTTP | HTTPS)
|
|---|
| 334 | proxy2_ssh="connect-proxy -w 30 -H $8:$9 %h %p"
|
|---|
| 335 | proxy2_vpn="--http-proxy $8 $9"
|
|---|
| 336 | ;;
|
|---|
| 337 | SOCKS | SOCKS5)
|
|---|
| 338 | proxy2_ssh="connect-proxy -w 30 -S $8:$9 %h %p"
|
|---|
| 339 | proxy2_vpn="--socks-proxy $8 $9"
|
|---|
| 340 | ;;
|
|---|
| 341 | SOCKS4)
|
|---|
| 342 | proxy2_ssh="connect-proxy -w 30 -4 -S $8:$9 %h %p"
|
|---|
| 343 | proxy2_vpn="--socks-proxy $8 $9"
|
|---|
| 344 | ;;
|
|---|
| 345 | esac
|
|---|
| 346 |
|
|---|
| 347 | # Generate pre-shared secret and share it with the server, bypassing proxy if necessary
|
|---|
| 348 | /usr/sbin/openvpn --genkey --secret static.key
|
|---|
| 349 | for i in 1 2 3 4
|
|---|
| 350 | do
|
|---|
| 351 | # Go via proxy if set
|
|---|
| 352 | scp ${proxy1_ssh:+ -o ProxyCommand="$proxy1_ssh"} static.key cloud-bridge.conf cloud-bridge.sh $user@$cbr_ip1:
|
|---|
| 353 | if [ $? -eq 0 ]; then break; fi; sleep 15
|
|---|
| 354 | # Go direct even if proxy is set
|
|---|
| 355 | scp static.key cloud-bridge.conf cloud-bridge.sh $user@$cbr_ip1:
|
|---|
| 356 | if [ $? -eq 0 ]; then proxy1_ssh=""; break; fi; sleep 15
|
|---|
| 357 | done
|
|---|
| 358 |
|
|---|
| 359 | # Get metadata info from the cloud bridge
|
|---|
| 360 | for i in 1 2 3 4; do metadata=$(ssh ${proxy1_ssh:+ -o ProxyCommand="$proxy1_ssh"} $user@$cbr_ip1 sudo oci-network-config) && break || sleep 15; done
|
|---|
| 361 |
|
|---|
| 362 | # Extract primary VNIC info
|
|---|
| 363 | vnic1_md=`echo "$metadata"|grep -E "\sUP\s"`
|
|---|
| 364 | vnic1_dev=`echo $vnic1_md|cut -d ' ' -f 8`
|
|---|
| 365 | vnic1_mac=`echo $vnic1_md|cut -d ' ' -f 12`
|
|---|
| 366 | # Extract secondary VNIC info
|
|---|
| 367 | vnic2_md=`echo "$metadata"|grep -E "\sDOWN\s"`
|
|---|
| 368 | vnic2_dev=`echo $vnic2_md|cut -d ' ' -f 8`
|
|---|
| 369 | vnic2_gw=`echo $vnic2_md|cut -d ' ' -f 5`
|
|---|
| 370 |
|
|---|
| 371 | # Configure secondary VNIC
|
|---|
| 372 | ssh ${proxy1_ssh:+ -o ProxyCommand="$proxy1_ssh"} $user@$cbr_ip1 sudo oci-network-config -c
|
|---|
| 373 |
|
|---|
| 374 | # Bring up the cloud bridge
|
|---|
| 375 | ssh ${proxy2_ssh:+ -o ProxyCommand="$proxy2_ssh"} $user@$cbr_ip2 /bin/sh -x cloud-bridge.sh $vnic1_dev $vnic2_dev $vnic2_gw $target_mac
|
|---|
| 376 | if [ $? -eq 0 ]
|
|---|
| 377 | then
|
|---|
| 378 | # SSH was able to reach cloud via proxy, establish a tunnel via proxy as well
|
|---|
| 379 | sudo /usr/sbin/openvpn $proxy2_vpn --config local-bridge.conf --daemon --remote $cbr_ip2
|
|---|
| 380 | else
|
|---|
| 381 | # Retry without proxy
|
|---|
| 382 | ssh $user@$cbr_ip2 /bin/sh -x cloud-bridge.sh $vnic1_dev $vnic2_dev $vnic2_gw $target_mac
|
|---|
| 383 | # Establish a tunnel to the cloud bridge
|
|---|
| 384 | sudo /usr/sbin/openvpn --config local-bridge.conf --daemon --remote $cbr_ip2
|
|---|
| 385 | fi
|
|---|
| 386 |
|
|---|
| 387 | # Bridge the openvpn tap device and the local Ethernet interface
|
|---|
| 388 | sudo ip link set dev $eth down
|
|---|
| 389 | sudo ip link add name $br type bridge
|
|---|
| 390 | sudo ip link set dev $eth master $br
|
|---|
| 391 | sudo ip link set dev $tap master $br
|
|---|
| 392 |
|
|---|
| 393 | # Bring up all interfaces
|
|---|
| 394 | sudo ip link set dev $tap up
|
|---|
| 395 | sudo ip link set dev $eth up
|
|---|
| 396 | sudo ip link set dev $br up
|
|---|
| 397 | EOT
|
|---|
| 398 | log_command chmod +x "${MY_TARGET}/home/@@VBOX_INSERT_USER_LOGIN@@/local-bridge.sh"
|
|---|
| 399 |
|
|---|
| 400 | echo "** Creating ${MY_TARGET}/home/@@VBOX_INSERT_USER_LOGIN@@/.ssh/config..." | tee -a "${MY_LOGFILE}"
|
|---|
| 401 | log_command mkdir "${MY_TARGET}/home/@@VBOX_INSERT_USER_LOGIN@@/.ssh"
|
|---|
| 402 | cat >"${MY_TARGET}/home/@@VBOX_INSERT_USER_LOGIN@@/.ssh/config" <<'EOT'
|
|---|
| 403 | Host *
|
|---|
| 404 | StrictHostKeyChecking no
|
|---|
| 405 | EOT
|
|---|
| 406 | log_command chmod 400 "${MY_TARGET}/home/@@VBOX_INSERT_USER_LOGIN@@/.ssh/config"
|
|---|
| 407 |
|
|---|
| 408 | log_command_in_target chown -R @@VBOX_INSERT_USER_LOGIN@@:@@VBOX_INSERT_USER_LOGIN@@ "/home/@@VBOX_INSERT_USER_LOGIN@@"
|
|---|
| 409 |
|
|---|
| 410 | echo '** Creating /etc/systemd/system/keygen.service...' | tee -a "${MY_LOGFILE}"
|
|---|
| 411 | cat >"${MY_TARGET}/etc/systemd/system/keygen.service" <<'EOT'
|
|---|
| 412 | [Unit]
|
|---|
| 413 | Description=Boot-time ssh key pair generator
|
|---|
| 414 | After=vboxadd.service
|
|---|
| 415 |
|
|---|
| 416 | [Service]
|
|---|
| 417 | ExecStart=/bin/sh -c 'su - vbox -c "cat /dev/zero | ssh-keygen -q -N \\\"\\\""'
|
|---|
| 418 | ExecStartPost=/bin/sh -c 'VBoxControl guestproperty set "/VirtualBox/Gateway/PublicKey" "`cat ~vbox/.ssh/id_rsa.pub`" --flags TRANSIENT'
|
|---|
| 419 | Type=oneshot
|
|---|
| 420 | RemainAfterExit=yes
|
|---|
| 421 |
|
|---|
| 422 | [Install]
|
|---|
| 423 | WantedBy=multi-user.target
|
|---|
| 424 | EOT
|
|---|
| 425 | log_command chmod 644 "${MY_TARGET}/etc/systemd/system/keygen.service"
|
|---|
| 426 | log_command_in_target systemctl enable keygen.service
|
|---|
| 427 |
|
|---|
| 428 | echo '** Creating /etc/sudoers.d/020_vbox_sudo...' | tee -a "${MY_LOGFILE}"
|
|---|
| 429 | echo "@@VBOX_INSERT_USER_LOGIN@@ ALL=(ALL) NOPASSWD: ALL" > "${MY_TARGET}/etc/sudoers.d/020_vbox_sudo"
|
|---|
| 430 |
|
|---|
| 431 | #
|
|---|
| 432 | # Test Execution Service.
|
|---|
| 433 | #
|
|---|
| 434 | @@VBOX_COND_IS_INSTALLING_TEST_EXEC_SERVICE@@
|
|---|
| 435 | echo "--------------------------------------------------" >> "${MY_LOGFILE}"
|
|---|
| 436 | echo '** Installing Test Execution Service...' | tee -a "${MY_LOGFILE}"
|
|---|
| 437 | log_command_in_target test "${MY_CHROOT_CDROM}/vboxvalidationkit/linux/@@VBOX_INSERT_OS_ARCH@@/TestExecService"
|
|---|
| 438 | log_command mkdir -p "${MY_TARGET}/opt/validationkit" "${MY_TARGET}/media/cdrom"
|
|---|
| 439 | log_command cp -R ${MY_CDROM_NOCHROOT}/vboxvalidationkit/* "${MY_TARGET}/opt/validationkit/"
|
|---|
| 440 | log_command chmod -R u+rw,a+xr "${MY_TARGET}/opt/validationkit/"
|
|---|
| 441 | if [ -e "${MY_TARGET}/usr/bin/chcon" -o -e "${MY_TARGET}/bin/chcon" -o -e "${MY_TARGET}/usr/sbin/chcon" -o -e "${MY_TARGET}/sbin/chcon" ]; then
|
|---|
| 442 | MY_IGNORE_EXITCODE=1
|
|---|
| 443 | log_command_in_target chcon -R -t usr_t "/opt/validationkit/"
|
|---|
| 444 | MY_IGNORE_EXITCODE=
|
|---|
| 445 | fi
|
|---|
| 446 |
|
|---|
| 447 | # systemd service config:
|
|---|
| 448 | MY_UNIT_PATH="${MY_TARGET}/lib/systemd/system"
|
|---|
| 449 | test -d "${MY_TARGET}/usr/lib/systemd/system" && MY_UNIT_PATH="${MY_TARGET}/usr/lib/systemd/system"
|
|---|
| 450 | if [ -d "${MY_UNIT_PATH}" ]; then
|
|---|
| 451 | log_command cp "${MY_TARGET}/opt/validationkit/linux/vboxtxs.service" "${MY_UNIT_PATH}/vboxtxs.service"
|
|---|
| 452 | log_command chmod 644 "${MY_UNIT_PATH}/vboxtxs.service"
|
|---|
| 453 | log_command_in_target systemctl -q enable vboxtxs
|
|---|
| 454 |
|
|---|
| 455 | # System V like:
|
|---|
| 456 | elif [ -e "${MY_TARGET}/etc/init.d/" ]; then
|
|---|
| 457 |
|
|---|
| 458 | # Install the script. On rhel6 scripts are under /etc/rc.d/ with /etc/init.d and /etc/rc?.d being symlinks.
|
|---|
| 459 | if [ -d "${MY_TARGET}/etc/rc.d/init.d/" ]; then
|
|---|
| 460 | MY_INIT_D_PARENT_PATH="${MY_TARGET}/etc/rc.d"
|
|---|
| 461 | log_command ln -s "../../../opt/validationkit/linux/vboxtxs" "${MY_INIT_D_PARENT_PATH}/init.d/"
|
|---|
| 462 | else
|
|---|
| 463 | MY_INIT_D_PARENT_PATH="${MY_TARGET}/etc"
|
|---|
| 464 | log_command ln -s "../../opt/validationkit/linux/vboxtxs" "${MY_INIT_D_PARENT_PATH}/init.d/"
|
|---|
| 465 | fi
|
|---|
| 466 |
|
|---|
| 467 | # Use runlevel management script if found.
|
|---|
| 468 | if chroot_which chkconfig; then # Redhat based sysvinit systems
|
|---|
| 469 | log_command_in_target chkconfig --add vboxtxs
|
|---|
| 470 | elif chroot_which insserv; then # SUSE-based sysvinit systems
|
|---|
| 471 | log_command_in_target insserv vboxtxs
|
|---|
| 472 | elif chroot_which update-rc.d; then # Debian/Ubuntu-based systems
|
|---|
| 473 | log_command_in_target update-rc.d vboxtxs defaults
|
|---|
| 474 | elif chroot_which rc-update; then # Gentoo Linux
|
|---|
| 475 | log_command_in_target rc-update add vboxtxs default
|
|---|
| 476 | # Fall back on hardcoded symlinking.
|
|---|
| 477 | else
|
|---|
| 478 | log_command ln -s "../init.d/vboxtxs" "${MY_INIT_D_PARENT_PATH}/rc0.d/K65vboxtxs"
|
|---|
| 479 | log_command ln -s "../init.d/vboxtxs" "${MY_INIT_D_PARENT_PATH}/rc1.d/K65vboxtxs"
|
|---|
| 480 | log_command ln -s "../init.d/vboxtxs" "${MY_INIT_D_PARENT_PATH}/rc6.d/K65vboxtxs"
|
|---|
| 481 | log_command ln -s "../init.d/vboxtxs" "${MY_INIT_D_PARENT_PATH}/rc2.d/S35vboxtxs"
|
|---|
| 482 | log_command ln -s "../init.d/vboxtxs" "${MY_INIT_D_PARENT_PATH}/rc3.d/S35vboxtxs"
|
|---|
| 483 | log_command ln -s "../init.d/vboxtxs" "${MY_INIT_D_PARENT_PATH}/rc4.d/S35vboxtxs"
|
|---|
| 484 | log_command ln -s "../init.d/vboxtxs" "${MY_INIT_D_PARENT_PATH}/rc5.d/S35vboxtxs"
|
|---|
| 485 | fi
|
|---|
| 486 | else
|
|---|
| 487 | echo "** error: Unknown init script system." | tee -a "${MY_LOGFILE}"
|
|---|
| 488 | fi
|
|---|
| 489 |
|
|---|
| 490 | @@VBOX_COND_END@@
|
|---|
| 491 |
|
|---|
| 492 |
|
|---|
| 493 | #
|
|---|
| 494 | # Run user command.
|
|---|
| 495 | #
|
|---|
| 496 | @@VBOX_COND_HAS_POST_INSTALL_COMMAND@@
|
|---|
| 497 | echo '** Running custom user command ...' | tee -a "${MY_LOGFILE}"
|
|---|
| 498 | log_command @@VBOX_INSERT_POST_INSTALL_COMMAND@@
|
|---|
| 499 | @@VBOX_COND_END@@
|
|---|
| 500 |
|
|---|
| 501 |
|
|---|
| 502 | #
|
|---|
| 503 | # Unmount the cdrom if we bound it and clean up the chroot if we set it up.
|
|---|
| 504 | #
|
|---|
| 505 | if [ -n "${MY_UNMOUNT_TARGET_CDROM}" ]; then
|
|---|
| 506 | echo "** unbinding cdrom from jail..." | tee -a "${MY_LOGFILE}"
|
|---|
| 507 | log_command umount "${MY_TARGET}${MY_CHROOT_CDROM}"
|
|---|
| 508 | fi
|
|---|
| 509 |
|
|---|
| 510 | if [ -n "${MY_RMDIR_TARGET_CDROM}" ]; then
|
|---|
| 511 | log_command rmdir "${MY_TARGET}${MY_CHROOT_CDROM}"
|
|---|
| 512 | fi
|
|---|
| 513 |
|
|---|
| 514 |
|
|---|
| 515 | #
|
|---|
| 516 | # Log footer.
|
|---|
| 517 | #
|
|---|
| 518 | echo "******************************************************************************" >> "${MY_LOGFILE}"
|
|---|
| 519 | echo "** Date: `date -R`" >> "${MY_LOGFILE}"
|
|---|
| 520 | echo "** Final exit code: ${MY_EXITCODE}" >> "${MY_LOGFILE}"
|
|---|
| 521 | echo "******************************************************************************" >> "${MY_LOGFILE}"
|
|---|
| 522 |
|
|---|
| 523 | exit ${MY_EXITCODE}
|
|---|
| 524 |
|
|---|
