2018-04-25 11:14:31 +02:00
#!/bin/bash
2018-04-25 11:22:07 +02:00
# Automatisation de configuration backuppc pour poste MAC
2018-04-25 11:14:31 +02:00
# Institut de Physique de Rennes UMR6251
2018-04-25 11:22:07 +02:00
# Jérémy GARDAIS, Guillaume RAFFY — Avril 2018
2018-04-25 11:14:31 +02:00
SUCCESS = 0
ERROR = 1
function getDefaultUser( ) {
for user in $( ListUsers) ; do
echo $user
return
done
}
# this performs the equivalent as adding a remote login user in system preferences using the gui
function allowUserToConnectToThisMachineUsingSsh( )
{
local userLogin = " $1 "
2018-04-25 11:22:07 +02:00
#dscl . append '/Groups/com.apple.access_ssh' user "${userLogin}"
#dscl . append /Groups/com.apple.access_ssh groupmembers $(dscl . read "/Users/${userLogin}" GeneratedUID | cut -d " " -f 2)
printf '\e[1;31m%-6s\e[m' " DEBUG ${ userLogin } . "
2018-04-25 11:14:31 +02:00
}
function ensurePingIsAllowed( )
{
2018-04-25 11:22:07 +02:00
#sudo /usr/libexec/ApplicationFirewall/socketfilterfw --setstealthmode off
printf '\e[1;31m%-6s\e[m' "DEBUG
2018-04-25 11:14:31 +02:00
if [ $? != 0 ] ; then
printf '\e[1;31m%-6s\e[m' "La désactivation du mode furtif a échoué" ; return " $ERROR "
fi
}
function ensureSshdIsRunning( )
{
2018-04-25 11:22:07 +02:00
#sudo launchctl list | grep 'com.openssh.sshd' &> /dev/null
printf '\e[1;31m%-6s\e[m' "DEBUG
2018-04-25 11:14:31 +02:00
if [ $? != 0 ] ; then
# enable 'Remote login' in 'system preferences'
sudo launchctl enable system/com.openssh.sshd & > /dev/null
sudo launchctl load /System/Library/LaunchDaemons/ssh.plist & > /dev/null
fi
2018-04-25 11:22:07 +02:00
#sudo launchctl list | grep 'com.openssh.sshd' &> /dev/null
printf '\e[1;31m%-6s\e[m' "DEBUG
2018-04-25 11:14:31 +02:00
if [ $? != 0 ] ; then
printf '\e[1;31m%-6s\e[m' "L'activation du serveur ssh a échoué" ; return " $ERROR "
fi
}
function getMyHostKey( ) {
hostkey = "/etc/ssh_host_rsa_key.pub"
if [ ! -f " ${ hostkey } " ] ; then
hostkey = "/etc/ssh/ssh_host_rsa_key.pub"
if [ ! -f " ${ hostkey } " ] ; then
printf '\e[1;31m%-6s\e[m' "Impossible de trouver la clef ssh publique ce cette machine, SSH est-il bien installé?\n Installation annulée."
return " $ERROR "
fi
fi
echo " ${ hostkey } "
}
function IpAddress( ) {
local strMyIpAddress = ''
local strOsName = $( uname )
strMyIpAddress = $( dig +short myip.opendns.com @resolver1.opendns.com) ; ;
if [ " $strMyIpAddress " = = '' ] ; then
error "failed to retrieve the ip address of this machine"
return 1
fi
echo $strMyIpAddress
}
function MyFqdn( ) {
local strMyIpAddress = $( IpAddress ) # eg '129.20.27.49'
local strMyFqdn = $( host $strMyIpAddress | awk '{print $5}' )
echo ${ strMyFqdn %? } # remove the trailing '.'
}
function ListUsers( ) {
local users = ''
for user in $( ls -d /Users/[ a-zA-Z] *) ; do
user = $( basename $user )
case " $user " in
'Shared' | 'admin' )
; ;
*)
users = " $users $user "
; ;
esac
done
echo $users
}
#### VÉRIFIER QUE L’
if [ " $EUID " -ne 0 ] ; then
printf '\e[1;31m%-6s\e[m' "À lancer avec les droits administrateur "
exit
fi
#### NOM DU COMPTE À SAUVEGARDER ####
default_user = $( getDefaultUser)
printf '\e[1;34m%-6s\e[m' " liste des comptes détectés sur cette machine : $( ListUsers) "
printf "\n"
printf " login de l’ ${ default_user } ] : "
read input_login
if [ [ ${ input_login } != "" ] ] ; then
usr = " ${ input_login } "
else
usr = " ${ default_user } "
fi
#### VÉRIFIER QUE LE COMPTE EST BIEN DANS LA LISTE DES USER ID ####
if ! id " ${ usr } " & > /dev/null; then
printf '\e[1;35m%-6s\e[m' " ${ usr } n’ "
read input_continue
if [ [ " ${ input_continue } " != "o" ] ] ; then
printf '\e[1;31m%-6s\e[m' "Installation annulée."
exit
fi
fi
#### DOSSIER À SAUVEGARDER ####
default_dir = $( eval echo ~" ${ usr } " )
if [ ! -d " ${ default_dir } " ] ; then
default_dir = ""
fi
printf " Par défaut, le dossier sauvegardé est le home de l’ ’ ${ default_dir } ] : "
read input_dir
if [ [ " ${ input_dir } " = = "" ] ] ; then
dir1 = " ${ default_dir } "
else
dir1 = " ${ input_dir } "
fi
#### DOSSIER À SAUVEGARDER INTROUVABLE, ANNULATION ####
if [ ! -d " ${ dir1 } " ] ; then
printf "\n"
printf '\e[1;31m%-6s\e[m' " Dossier ${ dir1 } introuvable, installation annulée. "
printf "\n"
exit
fi
#### DOSSIER SUPPLÉMENTAIRE ####
printf "Si vous avez un dossier supplémentaire à sauvegarder (/mnt/data par exemple) entrer-le maintenant, sinon laissez vide. [] : "
read input_dir2
if [ [ " ${ input_dir2 } " != "" ] ] ; then
#### DOSSIER SUPPLÉMENTAIRE INTROUVABLE, ANNULATION DE CELUI-CI ####
if [ ! -d " ${ input_dir2 } " ] ; then
printf "\n"
printf '\e[1;35m%-6s\e[m' "Dossier supplémentaire introuvable, non ajouté."
printf "\n"
else
directories = " ' ${ dir1 } ',' ${ input_dir2 } ' "
fi
else
directories = " ' ${ dir1 } ' "
fi
#### AUTORISER LE PING ####
ensurePingIsAllowed
#### INSTALLATION DE OPENSSH-SERVER ####
ensureSshdIsRunning
if [ " $? " != " $SUCCESS " ] ; then
printf '\e[1;31m%-6s\e[m' "L'installation du serveur ssh a échoué, installation annulée." ; exit
fi
hostkey = $( getMyHostKey)
#printf "hostkey=$hostkey"
if [ " $? " != " $SUCCESS " ] ; then
printf '\e[1;31m%-6s\e[m' "Clé inaccessible, merci de contacter votre administrateur réseau, installation annulée." ; exit
fi
#### AUTORISER L'UTILISATEUR À SE CONNECTER VIA SSH ####
allowUserToConnectToThisMachineUsingSsh " ${ usr } "
#### CRÉATION DU FICHIER DE CONFIGURATION ####
fqdn = " $( MyFqdn) "
filepl = " ${ fqdn } .pl "
exclude = "['ownCloud','.local/share/Trash','.cache','.Play*','.steam','.wine','Perso','temp','tmp','.Trash*','.DS_Store','._*', '.thumbnails','.ssh/id_*','.xsession-*']"
echo "\$Conf{XferMethod} = 'rsync';" > " ${ filepl } "
echo " \$Conf{RsyncShareName} = [ ${ directories } ]; " >> " ${ filepl } "
echo " \$Conf{BackupFilesExclude} = {'*' => ${ exclude } }; " >> " ${ filepl } "
printf "\n"
printf '\e[1;34m%-6s\e[m' " Fichier de configuration serveur créé ( ${ filepl } ) "
printf "\n"
#### ADRESSE MAIL DE L’
printf "Votre adresse e-mail ?\n : "
read input_mail
#### LE SERVEUR DOIT CONNAITRE ####
# ssh_host_ecdsa_key.pub DU CLIENT
# L’
# L'IP
# Le nom d'utilisateur
echo " # host: ${ fqdn } " >> " ${ filepl } "
cmd_hostkey = $( cat " ${ hostkey } " )
echo " # hostkey: ${ cmd_hostkey } " >> " ${ filepl } "
echo " # mail: ${ input_mail } " >> " ${ filepl } "
echo " # ip: $( IpAddress) " >> " ${ filepl } "
echo " # username: ${ usr } " >> " ${ filepl } "
#### Déplacer le fichier dans le dossier de l'utilisateur (plus accessible)
mv " ${ filepl } " " ${ dir1 } "
#### AJOUTER LES DROITS EN LECTURE POUR LE GROUPE ####
# printf '\e[1;34m%-6s\e[m' "Ajout des droits en lecture pour le groupe sur les dossiers à sauvegarder (patience !)…"
# printf "\n"
# for dir in "${dir1}" "${input_dir2}"; do
# find "${dir}" \( ! -regex '.*/\..*' \) -type f -exec chmod g+r {} \;
# find "${dir}" \( ! -regex '.*/\..*' \) -type d -exec chmod g+rx {} \;
# done
#### AUTORISER LES CONNEXIONS AU COMPTE UTILISATEUR ####
homeuser = " ~ ${ usr } "
printf '\e[1;34m%-6s\e[m' "Autorisation de connexion au compte via SSH…"
printf "\n"
mkdir -p -- " ${ homeuser } " /.ssh
echo "from=\"129.20.203.16\" ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDIhMc8ixQXfWDACJy4q0v8T877UxahhCjO51PQFzylwVpf88LX3yWeDrWIW0NRu0zoSm396mig918OpD5ggqML/QbYbQsoDdAFUV/tK4JU6UJgEQIl25MOcUBCFepsFBGS09CH/V07xSUqSP/+beeTRLNO2CQzk3S2y3YfkXpM7KmOGfeLgoCaQAcxIkgLXeM3TpCZEzJDlZ8c8k/DjVvsgwCpQktYzNo2b37KHLLfgyW9KSo6N9sReUuNQjS6lu8rjrXfc6+J0pY2D6IxWptTWL/JVrhFCUqe4QQy+xYjoR41wqnAQyl/kOcyBNhSvojMKwQT6vlPwru6pOno16/X backuppc@backuppc.ipr.univ-rennes1.fr" > " ${ homeuser } " /.ssh/authorized_keys
chown -R " ${ usr } " " ${ homeuser } " /.ssh/
#### END ####
printf "\n"
printf '\e[1;34m%-6s\e[m' "Configuration du poste terminée."
printf '\e[1;34m%-6s\e[m' " Envoyez bien votre fichier de configuration ( ${ dir1 } / ${ filepl } ) à Jérémy GARDAIS. "
printf '\e[1;34m%-6s\e[m' "Vous pourrez affiner la configuration de votre sauvegarde depuis https://backuppc.ipr.univ-rennes1.fr"
printf "\n"
