.
This commit is contained in:
he
+21
@@ -0,0 +1,21 @@
|
|||||||
|
|
||||||
|
# Python (if src/ or pyinstaller is ever used)
|
||||||
|
__pycache__/
|
||||||
|
*.pyc
|
||||||
|
dist/
|
||||||
|
build/
|
||||||
|
*.spec
|
||||||
|
*.egg-info/
|
||||||
|
|
||||||
|
# Editors
|
||||||
|
*.swp
|
||||||
|
*.swo
|
||||||
|
*~
|
||||||
|
|
||||||
|
# OS
|
||||||
|
.DS_Store
|
||||||
|
Thumbs.db
|
||||||
|
|
||||||
|
# Docker Compose — user's active stacks and secrets
|
||||||
|
compose/custom/
|
||||||
|
compose/config.env
|
||||||
@@ -0,0 +1,3 @@
|
|||||||
|
[submodule "compose/scale-tail"]
|
||||||
|
path = compose/scale-tail
|
||||||
|
url = https://github.com/tailscale-dev/ScaleTail.git
|
||||||
@@ -0,0 +1,426 @@
|
|||||||
|
# AGENT Context — myLinux Project
|
||||||
|
|
||||||
|
> **Purpose:** Single-source context document so any AI agent can understand the project, navigate the codebase, and make correct contributions.
|
||||||
|
|
||||||
|
---
|
||||||
|
|
||||||
|
## 1. Project Overview
|
||||||
|
|
||||||
|
**myLinux** is a personal bootstrap and homelab toolkit for Debian/Ubuntu. One command turns a bare install into a fully productive machine:
|
||||||
|
|
||||||
|
- Automated system package installation (25+ packages)
|
||||||
|
- A unified CLI (`pos`) for network, Docker, media, system, and SSH tasks
|
||||||
|
- Optional desktop application installers (15 apps)
|
||||||
|
- Docker Compose service management via ScaleTail templates (119+ self-hosted services with Tailscale sidecar)
|
||||||
|
- Systemd service management for boot-time automation
|
||||||
|
|
||||||
|
**Repository:** `https://github.com/IFindMe/myLinux`
|
||||||
|
**Target OS:** Debian / Ubuntu (uses `apt`)
|
||||||
|
**Shell:** Bash (`#!/usr/bin/env bash`)
|
||||||
|
|
||||||
|
---
|
||||||
|
|
||||||
|
## 2. Directory Structure
|
||||||
|
|
||||||
|
```
|
||||||
|
myLinux/
|
||||||
|
├── install.sh # Main orchestrator — entry point
|
||||||
|
├── preinstall.sh # Phase 1: system packages via apt + yt-dlp
|
||||||
|
├── postinstall.sh # Phase 3: PATH, bash completion, systemd services
|
||||||
|
│
|
||||||
|
├── lib/
|
||||||
|
│ └── common.sh # Shared library (colors, logging, spinner, timer, run)
|
||||||
|
│
|
||||||
|
├── bin/ # CLI tools — installed to /usr/local/bin/
|
||||||
|
│ ├── pos # Main dispatcher — smart arg matching to pos-* scripts
|
||||||
|
│ ├── pos-network-ip # Show interfaces, routes, public IP
|
||||||
|
│ ├── pos-network-checkport # TCP port checker
|
||||||
|
│ ├── pos-network-scan # Parallel ping sweep of CIDR subnet
|
||||||
|
│ ├── pos-docker-ps # Enhanced docker ps (health, IPs, ports, uptime)
|
||||||
|
│ ├── pos-docker-health # Quick one-glance health dashboard
|
||||||
|
│ ├── pos-docker-compose # Docker Compose service manager (largest script, 317 lines)
|
||||||
|
│ ├── pos-media-mp3 # Audio downloader (yt-dlp → MP3)
|
||||||
|
│ ├── pos-media-mp4 # Video downloader (yt-dlp → MP4, interactive format select)
|
||||||
|
│ ├── pos-system-firewall # Interactive UFW manager (menu-driven, 284 lines)
|
||||||
|
│ ├── pos-ssh-load-keys # Load SSH keys into ssh-agent
|
||||||
|
│ ├── pos-vbox # Disposable Docker-based "VMs"
|
||||||
|
│ ├── autostart.sh # Boot-time script (via systemd)
|
||||||
|
│ ├── wr-* # Legacy wrappers → pos (backward compat)
|
||||||
|
│ ├── mp3, mp4, vbox # Legacy convenience wrappers → pos
|
||||||
|
│ └── ssh-load-all # Legacy wrapper → pos ssh load-keys
|
||||||
|
│
|
||||||
|
├── apps/ # Optional desktop app installers (by category)
|
||||||
|
│ ├── install.sh # Interactive picker / orchestrator
|
||||||
|
│ ├── browsers/
|
||||||
|
│ │ └── brave.sh # Brave Browser (APT repo)
|
||||||
|
│ ├── development/
|
||||||
|
│ │ ├── opencode.sh # opencode AI agent (official script)
|
||||||
|
│ │ └── vscode.sh # VS Code (Microsoft APT repo)
|
||||||
|
│ ├── media/
|
||||||
|
│ │ ├── obs.sh # OBS Studio (apt)
|
||||||
|
│ │ ├── scrcpy.sh # scrcpy Android mirror (GitHub release)
|
||||||
|
│ │ └── vlc.sh # VLC media player (apt)
|
||||||
|
│ ├── networking/
|
||||||
|
│ │ ├── netbird.sh # NetBird VPN (official script)
|
||||||
|
│ │ ├── tailscale.sh # Tailscale VPN (official script)
|
||||||
|
│ │ └── zerotier.sh # ZeroTier VPN (official script)
|
||||||
|
│ ├── remote-access/
|
||||||
|
│ │ ├── termius.sh # Termius SSH client (.deb)
|
||||||
|
│ │ └── vnc-viewer.sh # TigerVNC Viewer (apt)
|
||||||
|
│ ├── system/
|
||||||
|
│ │ ├── docker.sh # Docker Engine (get.docker.com)
|
||||||
|
│ │ └── qemu.sh # QEMU + libvirt + KVM (apt)
|
||||||
|
│ └── utilities/
|
||||||
|
│ ├── affine.sh # AFFiNE knowledge base (AppImage)
|
||||||
|
│ ├── btop.sh # btop resource monitor (apt)
|
||||||
|
│ └── localsend.sh # LocalSend (flatpak)
|
||||||
|
│
|
||||||
|
├── completions/
|
||||||
|
│ └── pos.bash # Bash tab-completion for the pos CLI
|
||||||
|
│
|
||||||
|
├── compose/
|
||||||
|
│ └── scale-tail/ # Git submodule → ScaleTail templates (119+ services)
|
||||||
|
│
|
||||||
|
├── systemd/
|
||||||
|
│ ├── autostart.service # Runs autostart.sh on boot
|
||||||
|
│ └── ssh-agent.service # System-wide SSH agent socket
|
||||||
|
│
|
||||||
|
├── README.md # User-facing documentation
|
||||||
|
├── DEV.md # Developer guide
|
||||||
|
├── .gitignore # Excludes secrets, Python artifacts, OS files
|
||||||
|
└── .gitmodules # Submodule: compose/scale-tail → ScaleTail
|
||||||
|
```
|
||||||
|
|
||||||
|
---
|
||||||
|
|
||||||
|
## 3. Installation Flow
|
||||||
|
|
||||||
|
```
|
||||||
|
User runs: ./install.sh [--apps|--full|--dry-run|--skip <phase>|--steps <spec>]
|
||||||
|
│
|
||||||
|
├─ Phase 1: preinstall.sh (requires root)
|
||||||
|
│ └─ apt update + installs 25+ packages + yt-dlp + fail2ban
|
||||||
|
│
|
||||||
|
├─ Phase 2: install.sh (requires root)
|
||||||
|
│ └─ Copies bin/* → /usr/local/bin/ (chmod 755)
|
||||||
|
│ └─ Copies lib/common.sh → /usr/local/bin/common.sh (chmod 644)
|
||||||
|
│
|
||||||
|
├─ Phase 3: postinstall.sh (runs as user)
|
||||||
|
│ └─ Configures fail2ban (SSH jail: 5 retries, 1h ban)
|
||||||
|
│ └─ PATH export in ~/.bashrc
|
||||||
|
│ └─ Bash completion for pos CLI
|
||||||
|
│ └─ Copies systemd/*.service → /etc/systemd/system/, enables them
|
||||||
|
│
|
||||||
|
├─ Phase 4: ScaleTail clone
|
||||||
|
│ └─ Shallow-clones ScaleTail templates to /usr/local/share/mylinux/scale-tail
|
||||||
|
│
|
||||||
|
└─ [if --apps or --full]: apps/install.sh
|
||||||
|
└─ Interactive picker (or --all for non-interactive)
|
||||||
|
```
|
||||||
|
|
||||||
|
**After install, the repo can be deleted** — all tools live in `/usr/local/bin/` and templates in `/usr/local/share/mylinux/`.
|
||||||
|
|
||||||
|
### install.sh Flags
|
||||||
|
|
||||||
|
| Flag | Purpose |
|
||||||
|
|------|---------|
|
||||||
|
| `--apps` | Run interactive app picker after core install |
|
||||||
|
| `--full` | Core install + all apps (non-interactive) |
|
||||||
|
| `--dry-run` | Preview without executing |
|
||||||
|
| `--skip <phase>` | Skip a phase (repeatable): `preinstall`, `scripts`, `postinstall`, `scalepoint`, `apps` |
|
||||||
|
| `--steps <spec>` | Run only specific phases. Format: `1,3,4` or `1-3` |
|
||||||
|
| `--no-color` | Disable colored output |
|
||||||
|
|
||||||
|
### pos Output Logging
|
||||||
|
|
||||||
|
All non-interactive `pos` commands log output to `~/.local/share/mylinux/logs/`:
|
||||||
|
- Per-command files: `YYYYMMDD_HHMMSS_pos_<cmd>.log` (full stdout+stderr)
|
||||||
|
- Main log: `pos.log` (command + timestamp + exit code for every invocation)
|
||||||
|
- Interactive commands (`system-firewall`, `media-mp4`) only log invocation, not output
|
||||||
|
|
||||||
|
---
|
||||||
|
|
||||||
|
## 4. The `pos` CLI System
|
||||||
|
|
||||||
|
### How It Works
|
||||||
|
|
||||||
|
`bin/pos` is the main dispatcher. It:
|
||||||
|
1. Scans its own directory for all executable `pos-*` files
|
||||||
|
2. Extracts category-subcommand names from filenames
|
||||||
|
3. Uses variable-length argument matching to find the right script
|
||||||
|
|
||||||
|
**Example:** `pos docker compose up jellyfin`
|
||||||
|
- Tries `pos-docker-compose-up-jellyfin` (not found)
|
||||||
|
- Tries `pos-docker-compose-up` (not found)
|
||||||
|
- Finds `pos-docker-compose` (runs with args `up jellyfin`)
|
||||||
|
|
||||||
|
### Available Commands
|
||||||
|
|
||||||
|
| Category | Command | Script | Description |
|
||||||
|
|----------|---------|--------|-------------|
|
||||||
|
| network | ip | `pos-network-ip` | Show interfaces, routes, public IP |
|
||||||
|
| network | checkport | `pos-network-checkport` | Check TCP port connectivity |
|
||||||
|
| network | scan | `pos-network-scan` | Parallel ping sweep of CIDR |
|
||||||
|
| docker | ps | `pos-docker-ps` | Enhanced container overview |
|
||||||
|
| docker | health | `pos-docker-health` | Quick health dashboard (exits 1 if unhealthy) |
|
||||||
|
| docker | compose | `pos-docker-compose` | Service manager (ls/up/down/restart/logs/update/config) |
|
||||||
|
| media | mp3 | `pos-media-mp3` | Download audio as MP3 |
|
||||||
|
| media | mp4 | `pos-media-mp4` | Download video with format select |
|
||||||
|
| system | firewall | `pos-system-firewall` | Interactive UFW management |
|
||||||
|
| ssh | load-keys | `pos-ssh-load-keys` | Load SSH keys into agent |
|
||||||
|
| vbox | create | `pos-vbox create` | Create disposable VM (asks "Enter now?") |
|
||||||
|
| vbox | enter | `pos-vbox enter` | Start and exec into container |
|
||||||
|
| vbox | ls | `pos-vbox ls` | List vbox-managed containers only (label-filtered) |
|
||||||
|
| vbox | start/stop/rm | `pos-vbox start/stop/rm` | Lifecycle management |
|
||||||
|
|
||||||
|
### Legacy Wrappers
|
||||||
|
|
||||||
|
These forward to `pos` transparently: `wr-ip`, `wr-checkport`, `wr-scan-ping`, `wr-docker`, `wr-compose`, `wr-ufw`, `mp3`, `mp4`, `vbox`, `ssh-load-all`.
|
||||||
|
|
||||||
|
### pos vbox Details
|
||||||
|
|
||||||
|
`pos-vbox` manages disposable Docker containers as lightweight VMs:
|
||||||
|
|
||||||
|
- **Container labeling:** All created containers get `mylinux.vbox=true` label
|
||||||
|
- **`ls` filtering:** `docker ps --filter label=mylinux.vbox=true` — only shows vbox-managed containers
|
||||||
|
- **Post-create prompt:** After `create`, asks "Enter now? [Y/n]" using `confirm` helper
|
||||||
|
- **Working dir detection:** `enter` auto-detects bind mount path from container labels
|
||||||
|
- **Custom dirs:** `--dir <path>` or `--dir .` for current directory
|
||||||
|
|
||||||
|
---
|
||||||
|
|
||||||
|
## 5. Shared Library — `lib/common.sh`
|
||||||
|
|
||||||
|
Sourced by most scripts. Provides:
|
||||||
|
|
||||||
|
| Function | Purpose |
|
||||||
|
|----------|---------|
|
||||||
|
| `log "msg"` | Green `[+]` status message |
|
||||||
|
| `warn "msg"` | Yellow `[!]` warning |
|
||||||
|
| `err "msg"` | Red `ERROR:` + exit 1 |
|
||||||
|
| `ok "msg"` | Green `OK` prefix |
|
||||||
|
| `section "title"` | Cyan-bordered section header |
|
||||||
|
| `step N T "msg"` | Numbered step header (e.g., `[1/4] Installing`) |
|
||||||
|
| `run cmd` | Executes command, respects `$DRY_RUN` |
|
||||||
|
| `spawn "msg" cmd` | Runs with animated braille spinner, elapsed time, OK/FAIL status |
|
||||||
|
| `timer_start` / `timer_stop` | Elapsed time tracking |
|
||||||
|
| `confirm "prompt" [default]` | y/N or Y/n prompt |
|
||||||
|
|
||||||
|
**Auto-detects TTY** — disables colors when piped.
|
||||||
|
|
||||||
|
**Source pattern:**
|
||||||
|
```bash
|
||||||
|
source "$(dirname "$0")/../lib/common.sh"
|
||||||
|
```
|
||||||
|
|
||||||
|
**Scripts that do NOT source common.sh** (self-contained): `bin/pos`, `pos-network-ip`, `pos-network-checkport`, `pos-network-scan`, `pos-media-mp3`, `pos-media-mp4`, `pos-ssh-load-keys`, `pos-system-firewall`.
|
||||||
|
|
||||||
|
---
|
||||||
|
|
||||||
|
## 6. Docker Compose / ScaleTail
|
||||||
|
|
||||||
|
### Architecture
|
||||||
|
|
||||||
|
ScaleTail provides 119+ Docker Compose templates with a Tailscale sidecar pattern (`network_mode: service:tailscale`). Each service gets a `tail-xxxxx.ts.net` URL with optional automatic HTTPS.
|
||||||
|
|
||||||
|
```
|
||||||
|
/usr/local/share/mylinux/scale-tail/ # Templates (git repo)
|
||||||
|
└── services/<name>/
|
||||||
|
├── compose.yaml
|
||||||
|
└── .env
|
||||||
|
|
||||||
|
~/.config/mylinux/compose.env # Global defaults (TS_AUTHKEY, TZ, DNS_SERVER, SERVICES_BASE)
|
||||||
|
|
||||||
|
/srv/<service>/ # Active deployments (default base)
|
||||||
|
├── compose.yaml # From template (refreshed on update)
|
||||||
|
├── .env # User config (preserved across updates)
|
||||||
|
├── config/
|
||||||
|
└── data/
|
||||||
|
```
|
||||||
|
|
||||||
|
### Key Commands
|
||||||
|
|
||||||
|
| Command | Description |
|
||||||
|
|---------|-------------|
|
||||||
|
| `pos docker compose ls` | List all available ScaleTail services |
|
||||||
|
| `pos docker compose up <svc>` | Deploy service to SERVICES_BASE |
|
||||||
|
| `pos docker compose down <svc>` | Stop a deployed service |
|
||||||
|
| `pos docker compose restart <svc>` | Restart a service |
|
||||||
|
| `pos docker compose logs <svc> [-f]` | View/follow logs |
|
||||||
|
| `pos docker compose update` | Pull latest templates, refresh compose.yaml (preserves .env) |
|
||||||
|
| `pos docker compose config set K=V` | Set global config value |
|
||||||
|
| `pos docker compose config show` | Display current config |
|
||||||
|
|
||||||
|
### Global Config Keys
|
||||||
|
|
||||||
|
- `TS_AUTHKEY` — Tailscale auth key (required)
|
||||||
|
- `TZ` — Timezone
|
||||||
|
- `DNS_SERVER` — Custom DNS
|
||||||
|
- `SERVICES_BASE` — Deployment root (default: `/srv`)
|
||||||
|
|
||||||
|
---
|
||||||
|
|
||||||
|
## 7. Optional Apps (`apps/`)
|
||||||
|
|
||||||
|
### How They Work
|
||||||
|
|
||||||
|
- `apps/install.sh` auto-discovers all `apps/<category>/*.sh` files (excluding itself)
|
||||||
|
- Three modes: interactive (default), `--all`, or specific app names as arguments
|
||||||
|
- Interactive TUI groups apps by category with section headers
|
||||||
|
- Each app script is standalone, idempotent, sources `lib/common.sh`
|
||||||
|
|
||||||
|
### Installation Methods
|
||||||
|
|
||||||
|
| Method | Apps |
|
||||||
|
|--------|------|
|
||||||
|
| `apt install` | btop, obs, vlc, vnc-viewer, qemu |
|
||||||
|
| APT repo (GPG + repo) | brave, vscode |
|
||||||
|
| Official `curl \| sh` | docker, tailscale, netbird, zerotier, opencode |
|
||||||
|
| AppImage | affine |
|
||||||
|
| GitHub release binary | scrcpy |
|
||||||
|
| Flatpak | localsend |
|
||||||
|
| .deb package | termius |
|
||||||
|
|
||||||
|
### Adding a New App
|
||||||
|
|
||||||
|
1. Create `apps/<name>.sh` following the template in DEV.md
|
||||||
|
2. It auto-appears in the interactive picker — no registration needed
|
||||||
|
|
||||||
|
---
|
||||||
|
|
||||||
|
## 8. Systemd Services
|
||||||
|
|
||||||
|
| Service | File | Purpose |
|
||||||
|
|---------|------|---------|
|
||||||
|
| `ssh-agent.service` | `systemd/ssh-agent.service` | System-wide SSH agent, socket at `/run/ssh-agent/socket` |
|
||||||
|
| `autostart.service` | `systemd/autostart.service` | Runs `autostart.sh` on boot |
|
||||||
|
|
||||||
|
All `.service` files in `systemd/` are automatically copied to `/etc/systemd/system/` and enabled by `postinstall.sh`.
|
||||||
|
|
||||||
|
---
|
||||||
|
|
||||||
|
## 9. Configuration Files
|
||||||
|
|
||||||
|
### Gitignored Secrets
|
||||||
|
|
||||||
|
- `config/rclone.conf` — rclone remote config (OAuth tokens)
|
||||||
|
- `config/authorized_keys` — SSH public keys
|
||||||
|
|
||||||
|
### Runtime Config
|
||||||
|
|
||||||
|
- `~/.config/mylinux/compose.env` — Docker Compose global defaults
|
||||||
|
- `~/.bashrc` — Modified by postinstall (PATH, bash completion)
|
||||||
|
|
||||||
|
---
|
||||||
|
|
||||||
|
## 10. Coding Conventions
|
||||||
|
|
||||||
|
### Script Standards
|
||||||
|
|
||||||
|
- **Shebang:** `#!/usr/bin/env bash`
|
||||||
|
- **Strict mode:** `set -euo pipefail`
|
||||||
|
- **Help:** Every script accepts `-h`/`--help` via `case` pattern
|
||||||
|
- **Idempotency:** Check existence before creating/modifying
|
||||||
|
- **Exit codes:** 0 = success, 1 = error
|
||||||
|
|
||||||
|
### Naming Conventions
|
||||||
|
|
||||||
|
- `pos-<category>-<command>` — canonical tool names
|
||||||
|
- `wr-*` — legacy wrappers
|
||||||
|
- `apps/<category>/<name>.sh` — optional app installers
|
||||||
|
- Hyphens for word separation, lowercase always
|
||||||
|
|
||||||
|
### Error Handling
|
||||||
|
|
||||||
|
- `command -v <tool> &>/dev/null` to check tool availability
|
||||||
|
- `set -euo pipefail` for fail-fast
|
||||||
|
- `err()` for fatal errors, `warn()` for non-fatal
|
||||||
|
- Confirmation prompts for destructive actions
|
||||||
|
|
||||||
|
### Security
|
||||||
|
|
||||||
|
- Never hardcode secrets in scripts
|
||||||
|
- Use `chmod 600` for sensitive files
|
||||||
|
- Validate user input before shell commands
|
||||||
|
- Use `sudo` only where necessary
|
||||||
|
|
||||||
|
---
|
||||||
|
|
||||||
|
## 11. Development Workflow
|
||||||
|
|
||||||
|
### Adding a New App
|
||||||
|
|
||||||
|
1. Create `apps/<category>/<name>.sh` following the template in DEV.md
|
||||||
|
2. It auto-appears in the interactive picker — no registration needed
|
||||||
|
|
||||||
|
### Adding a New Tool
|
||||||
|
|
||||||
|
1. Create `bin/pos-<category>-<command>` following conventions
|
||||||
|
2. Add system deps to `PACKAGES` array in `preinstall.sh` (if needed)
|
||||||
|
3. Add config logic to `postinstall.sh` (if needed, with `.gitignore` for secrets)
|
||||||
|
4. Update `README.md`
|
||||||
|
5. Test: `bash -n bin/your-tool && shellcheck bin/your-tool`
|
||||||
|
|
||||||
|
### Testing
|
||||||
|
|
||||||
|
```bash
|
||||||
|
# Syntax check all scripts
|
||||||
|
for f in bin/* apps/*/*.sh lib/common.sh install.sh preinstall.sh postinstall.sh; do
|
||||||
|
bash -n "$f" || echo "FAIL: $f"
|
||||||
|
done
|
||||||
|
|
||||||
|
# ShellCheck linting
|
||||||
|
shellcheck bin/my-script
|
||||||
|
|
||||||
|
# Test in Docker
|
||||||
|
docker run --rm -it -v $PWD:/repo ubuntu:22.04 bash
|
||||||
|
# inside: cd /repo && ./install.sh
|
||||||
|
|
||||||
|
# Test apps interactively
|
||||||
|
./apps/install.sh --all
|
||||||
|
./apps/install.sh docker vscode
|
||||||
|
```
|
||||||
|
|
||||||
|
### Commit Conventions
|
||||||
|
|
||||||
|
Use conventional prefixes: `feat:`, `fix:`, `docs:`, `refactor:`, `chore:`
|
||||||
|
|
||||||
|
---
|
||||||
|
|
||||||
|
## 12. Key File Quick Reference
|
||||||
|
|
||||||
|
| File | Lines | Purpose |
|
||||||
|
|------|-------|---------|
|
||||||
|
| `install.sh` | ~120 | Main orchestrator — 4 phases with CLI flags |
|
||||||
|
| `preinstall.sh` | ~52 | System packages + yt-dlp + fail2ban |
|
||||||
|
| `postinstall.sh` | ~65 | fail2ban config, PATH, bash completion, systemd |
|
||||||
|
| `lib/common.sh` | 121 | Shared library |
|
||||||
|
| `bin/pos` | ~130 | CLI dispatcher with smart arg matching + logging |
|
||||||
|
| `bin/pos-docker-compose` | 317 | Largest script — full compose management |
|
||||||
|
| `bin/pos-system-firewall` | 284 | Interactive UFW manager |
|
||||||
|
| `bin/pos-docker-ps` | 127 | Enhanced container overview |
|
||||||
|
| `bin/pos-docker-health` | ~90 | Quick health dashboard |
|
||||||
|
| `bin/pos-vbox` | ~160 | Docker-based disposable VMs (label-filtered, auto-enter prompt) |
|
||||||
|
| `completions/pos.bash` | 118 | Dynamic bash completion |
|
||||||
|
| `apps/install.sh` | 99 | App picker/orchestrator |
|
||||||
|
|
||||||
|
---
|
||||||
|
|
||||||
|
## 13. Common Tasks for Agents
|
||||||
|
|
||||||
|
| Task | Where to Edit |
|
||||||
|
|------|---------------|
|
||||||
|
| Add a new CLI tool | Create `bin/pos-<cat>-<cmd>`, add deps in `preinstall.sh` |
|
||||||
|
| Add a new app installer | Create `apps/<name>.sh` (auto-discovered) |
|
||||||
|
| Add a systemd service | Create `systemd/<name>.service` (auto-installed by postinstall) |
|
||||||
|
| Modify package list | Edit `PACKAGES` array in `preinstall.sh` |
|
||||||
|
| Change PATH or bash config | Edit `postinstall.sh` |
|
||||||
|
| Modify fail2ban config | Edit jail.local section in `postinstall.sh` |
|
||||||
|
| Add bash completion | Edit `completions/pos.bash` |
|
||||||
|
| Modify Docker Compose logic | Edit `bin/pos-docker-compose` |
|
||||||
|
| Modify Docker health check | Edit `bin/pos-docker-health` |
|
||||||
|
| Modify UFW/firewall logic | Edit `bin/pos-system-firewall` |
|
||||||
|
| Modify pos logging | Edit log setup in `bin/pos` |
|
||||||
|
| Modify install phases/flags | Edit arg parsing in `install.sh` |
|
||||||
|
| Update documentation | Edit `README.md` and/or `DEV.md` |
|
||||||
|
| Add a secret config file | Add to `config/`, update `.gitignore`, add copy logic in `postinstall.sh` |
|
||||||
@@ -0,0 +1,418 @@
|
|||||||
|
# Development Guide
|
||||||
|
|
||||||
|
How this repo works, how to add features, and what to keep in mind when editing.
|
||||||
|
|
||||||
|
---
|
||||||
|
|
||||||
|
## Concepts
|
||||||
|
|
||||||
|
### Three-Phase Installation
|
||||||
|
|
||||||
|
The installer runs in three sequential phases:
|
||||||
|
|
||||||
|
```
|
||||||
|
install.sh
|
||||||
|
│
|
||||||
|
┌───────────┼───────────┐
|
||||||
|
▼ ▼ ▼
|
||||||
|
preinstall.sh bin/* postinstall.sh
|
||||||
|
(packages) → /usr/local/bin (config + services)
|
||||||
|
```
|
||||||
|
|
||||||
|
| Phase | Script | Responsibility |
|
||||||
|
|-------|--------|----------------|
|
||||||
|
| Pre | `preinstall.sh` | System packages, apt repositories, global binaries (yt-dlp) |
|
||||||
|
| Install | `install.sh` | Copies everything in `bin/` to `/usr/local/bin` with `chmod 755` |
|
||||||
|
| Post | `postinstall.sh` | User config (SSH, rclone), `~/.bashrc`, systemd services |
|
||||||
|
|
||||||
|
Each phase is independent and is only run if the corresponding file exists.
|
||||||
|
|
||||||
|
### Script Categories
|
||||||
|
|
||||||
|
| Directory | Purpose | Installed To |
|
||||||
|
|-----------|---------|--------------|
|
||||||
|
| `bin/` | Daily-use tools and wrappers | `/usr/local/bin/` |
|
||||||
|
| `apps/<category>/` | Optional desktop apps (by category) | run on demand |
|
||||||
|
| `lib/` | Shared library (`common.sh`) | sourced at build time |
|
||||||
|
<<<<<<< HEAD
|
||||||
|
| `config/` | Static config files + SSH authorized_keys | `~/.config/<app>/` (via postinstall) |
|
||||||
|
=======
|
||||||
|
| `config/` | Static config files (gitignored — user adds their own) | `~/.config/<app>/` (via postinstall) |
|
||||||
|
>>>>>>> bba577c (Initial commit)
|
||||||
|
| `compose/` | ScaleTail templates (dev reference only) | cloned to `/usr/local/share/mylinux/scale-tail` on install |
|
||||||
|
| `systemd/` | Systemd service unit files | `/etc/systemd/system/` (via postinstall) |
|
||||||
|
|
||||||
|
### Key Files Added
|
||||||
|
|
||||||
|
| File | Purpose |
|
||||||
|
|------|---------|
|
||||||
|
<<<<<<< HEAD
|
||||||
|
| `.gitignore` | Prevents secrets (rclone tokens) and build artifacts from being committed |
|
||||||
|
| `config/authorized_keys` | SSH public keys read by `postinstall.sh` (replaces hardcoded key) |ls
|
||||||
|
|
||||||
|
=======
|
||||||
|
| `.gitignore` | Prevents secrets (rclone tokens, SSH keys) and build artifacts from being committed |
|
||||||
|
>>>>>>> bba577c (Initial commit)
|
||||||
|
| `~/.config/mylinux/compose.env` | Global Docker Compose defaults (`TS_AUTHKEY`, `TZ`, `DNS_SERVER`, `SERVICES_BASE`) — created by `wr-compose config` |
|
||||||
|
|
||||||
|
---
|
||||||
|
|
||||||
|
## How to Add a New Tool
|
||||||
|
|
||||||
|
### 1. Create the script in `bin/`
|
||||||
|
|
||||||
|
```bash
|
||||||
|
#!/usr/bin/env bash
|
||||||
|
|
||||||
|
set -euo pipefail
|
||||||
|
|
||||||
|
# Use the shared library for colors and helpers (preferred)
|
||||||
|
source "$(dirname "$0")/../lib/common.sh"
|
||||||
|
|
||||||
|
usage() {
|
||||||
|
cat <<EOF
|
||||||
|
Usage: my-tool <argument>
|
||||||
|
EOF
|
||||||
|
exit 0
|
||||||
|
}
|
||||||
|
|
||||||
|
case "${1:-}" in
|
||||||
|
-h|--help|"") usage ;;
|
||||||
|
esac
|
||||||
|
|
||||||
|
# --- script logic ---
|
||||||
|
```
|
||||||
|
|
||||||
|
**Conventions to follow:**
|
||||||
|
|
||||||
|
- **Shebang:** `#!/usr/bin/env bash` (portable across distros)
|
||||||
|
- **Strict mode:** `set -euo pipefail` at the top
|
||||||
|
- **`--help` flag:** all tools must accept `-h` / `--help` — use the `case ... esac` pattern above
|
||||||
|
- **Shared library:** source `lib/common.sh` from any script in `bin/` or `apps/` for consistent colors, logging (`log`, `warn`, `err`, `ok`), spinners (`spawn`), and dry-run support (`run`). Use `spawn "message" command` for long-running installs.
|
||||||
|
- **Fallback (no lib):** if sourcing `common.sh` is not desired, inline:
|
||||||
|
```bash
|
||||||
|
log() { echo "[+] $*"; }
|
||||||
|
warn() { echo "[!] $*"; }
|
||||||
|
err() { echo "ERROR: $*" >&2; exit 1; }
|
||||||
|
```
|
||||||
|
- **Exit codes:** `0` for success, `1` for error
|
||||||
|
|
||||||
|
### 2. Add system dependencies (if any)
|
||||||
|
|
||||||
|
Open `preinstall.sh` and add the package name to the `PACKAGES` array:
|
||||||
|
|
||||||
|
```bash
|
||||||
|
PACKAGES=(
|
||||||
|
...
|
||||||
|
your-package
|
||||||
|
)
|
||||||
|
```
|
||||||
|
|
||||||
|
### 3. Add runtime configuration (if any)
|
||||||
|
|
||||||
|
If the tool needs a config file:
|
||||||
|
- Place the file in `config/`
|
||||||
|
- Add copy logic in `postinstall.sh`
|
||||||
|
|
||||||
|
If the file contains secrets (tokens, keys):
|
||||||
|
- Add it to `.gitignore`
|
||||||
|
- Document in README how to create it manually
|
||||||
|
|
||||||
|
<<<<<<< HEAD
|
||||||
|
### 4. Add SSH keys (if needed)
|
||||||
|
|
||||||
|
Place public keys in `config/authorized_keys` (one per line).
|
||||||
|
`postinstall.sh` reads from this file automatically.
|
||||||
|
|
||||||
|
=======
|
||||||
|
>>>>>>> bba577c (Initial commit)
|
||||||
|
### 5. Update README.md
|
||||||
|
|
||||||
|
Add a section under **Tools Reference** following the existing format.
|
||||||
|
|
||||||
|
### 6. Test
|
||||||
|
|
||||||
|
```bash
|
||||||
|
# Syntax check
|
||||||
|
bash -n bin/your-tool
|
||||||
|
|
||||||
|
# ShellCheck linting
|
||||||
|
shellcheck bin/your-tool
|
||||||
|
|
||||||
|
# Run directly
|
||||||
|
./bin/your-tool --help
|
||||||
|
```
|
||||||
|
|
||||||
|
---
|
||||||
|
|
||||||
|
## How to Edit an Existing Tool
|
||||||
|
|
||||||
|
1. **Find the script** — all tools live in `bin/`
|
||||||
|
2. **Understand the contract** — what args does it expect? What does it print? What exit codes?
|
||||||
|
3. **Make the change** — keep it idempotent if possible (running twice = same result)
|
||||||
|
4. **Update README** if usage, output, or behaviour changed
|
||||||
|
5. **Run `shellcheck`** on the modified file:
|
||||||
|
```bash
|
||||||
|
shellcheck bin/your-tool
|
||||||
|
```
|
||||||
|
|
||||||
|
---
|
||||||
|
|
||||||
|
## How to Add a New App
|
||||||
|
|
||||||
|
App installers live in `apps/<category>/` and follow a simple pattern. Each is a standalone script that can be run independently.
|
||||||
|
|
||||||
|
### Template
|
||||||
|
|
||||||
|
```bash
|
||||||
|
#!/usr/bin/env bash
|
||||||
|
set -euo pipefail
|
||||||
|
source "$(dirname "$0")/../../lib/common.sh"
|
||||||
|
|
||||||
|
install_myapp() {
|
||||||
|
command -v myapp &>/dev/null && { log "myapp already installed"; return 0; }
|
||||||
|
|
||||||
|
spawn "Installing myapp" sudo apt install -y myapp
|
||||||
|
}
|
||||||
|
|
||||||
|
install_myapp
|
||||||
|
```
|
||||||
|
|
||||||
|
Note: app scripts are now in `apps/<category>/`, so the source path to `common.sh` is two levels up (`../../lib/common.sh`).
|
||||||
|
|
||||||
|
### Conventions
|
||||||
|
|
||||||
|
- **Shebang:** `#!/usr/bin/env bash`
|
||||||
|
- **Strict mode:** `set -euo pipefail`
|
||||||
|
- **Shared library:** always source `lib/common.sh` from the app directory
|
||||||
|
- **Idempotent:** check `command -v` before installing; skip if present
|
||||||
|
- **Method:** standardize on official repos/scripts over PPAs or third-party
|
||||||
|
- **APT packages** → `sudo apt install -y <pkg>` wrapped in `spawn`
|
||||||
|
- **Official scripts** → `curl ... | sh` inside `spawn`
|
||||||
|
- **Flatpak** → `flatpak install -y flathub <app-id>` inside `spawn`
|
||||||
|
- **`.deb` files** → download to temp and `sudo apt install -y ./file.deb` inside `spawn`
|
||||||
|
- **Groups:** `usermod` commands print a re-login reminder (`log "Log out and back in for group changes to take effect"`)
|
||||||
|
|
||||||
|
### Adding to the picker
|
||||||
|
|
||||||
|
`apps/install.sh` auto-discovers all `apps/<category>/*.sh` files (excluding itself). Just create the script in the appropriate category subdirectory and it will appear in the interactive prompt under that category.
|
||||||
|
|
||||||
|
Categories: `browsers`, `development`, `media`, `networking`, `remote-access`, `system`, `utilities`.
|
||||||
|
|
||||||
|
---
|
||||||
|
|
||||||
|
## Best Practices
|
||||||
|
|
||||||
|
### Idempotency
|
||||||
|
|
||||||
|
Scripts should be safe to run multiple times:
|
||||||
|
- Check if something exists before creating it
|
||||||
|
- Use `>>` with checks (grep for existing content) instead of blindly appending
|
||||||
|
- Don't overwrite configs that the user may have customized
|
||||||
|
|
||||||
|
### Error Handling
|
||||||
|
|
||||||
|
```bash
|
||||||
|
# Fail fast
|
||||||
|
set -euo pipefail
|
||||||
|
|
||||||
|
# Check for required commands
|
||||||
|
if ! command -v docker &>/dev/null; then
|
||||||
|
echo "docker not found"
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
# Check arguments
|
||||||
|
if [[ -z "${1:-}" ]]; then
|
||||||
|
echo "Usage: my-tool <argument>"
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
```
|
||||||
|
|
||||||
|
### Portability
|
||||||
|
|
||||||
|
This repo targets **Debian** and **Ubuntu**. Keep in mind:
|
||||||
|
- Use `apt` not `apt-get` unless you need non-interactive guarantees
|
||||||
|
- Assume `bash` is at `/usr/bin/env bash`
|
||||||
|
- Prefer POSIX-safe patterns when possible
|
||||||
|
- Check for command availability with `command -v`
|
||||||
|
|
||||||
|
### Dry-run support
|
||||||
|
|
||||||
|
Scripts that make changes (`install.sh`, `preinstall.sh`) support `--dry-run`:
|
||||||
|
|
||||||
|
```bash
|
||||||
|
./install.sh --dry-run # preview without executing
|
||||||
|
```
|
||||||
|
|
||||||
|
Use the `run()` helper pattern:
|
||||||
|
|
||||||
|
```bash
|
||||||
|
run() {
|
||||||
|
if [ "$DRY_RUN" -eq 1 ]; then
|
||||||
|
log "(dry-run) $*"
|
||||||
|
else
|
||||||
|
"$@"
|
||||||
|
fi
|
||||||
|
}
|
||||||
|
|
||||||
|
run sudo apt install -y git
|
||||||
|
```
|
||||||
|
|
||||||
|
### Security
|
||||||
|
|
||||||
|
- **Never hardcode secrets** in scripts (SSH keys, API tokens, passwords) — put them in `config/` files that are `.gitignore`d
|
||||||
|
- Use `chmod 600` for sensitive files (SSH keys, rclone config)
|
||||||
|
- Validate user input before using it in shell commands
|
||||||
|
- Use `sudo` only where necessary; don't run the whole script as root if only one command needs elevation
|
||||||
|
|
||||||
|
### Naming
|
||||||
|
|
||||||
|
- Prefix personal wrappers with `wr-` (e.g., `wr-ip`, `wr-docker`)
|
||||||
|
- Keep names lowercase, use hyphens for word separation
|
||||||
|
- Name should hint at the tool's purpose (`wr-scan-ping`, `wr-checkport`)
|
||||||
|
|
||||||
|
---
|
||||||
|
|
||||||
|
## Working with Systemd
|
||||||
|
|
||||||
|
### Adding a new service
|
||||||
|
|
||||||
|
1. Create `systemd/<name>.service`
|
||||||
|
2. postinstall.sh automatically copies all `*.service` files to `/etc/systemd/system/` and enables them
|
||||||
|
|
||||||
|
Service file template:
|
||||||
|
|
||||||
|
```ini
|
||||||
|
[Unit]
|
||||||
|
Description=My Service
|
||||||
|
After=network-online.target
|
||||||
|
Wants=network-online.target
|
||||||
|
|
||||||
|
[Service]
|
||||||
|
Type=simple
|
||||||
|
ExecStart=/usr/local/bin/your-script.sh
|
||||||
|
Restart=on-failure
|
||||||
|
RestartSec=10
|
||||||
|
|
||||||
|
[Install]
|
||||||
|
WantedBy=multi-user.target
|
||||||
|
```
|
||||||
|
|
||||||
|
---
|
||||||
|
|
||||||
|
## Working with Config Files
|
||||||
|
|
||||||
|
1. Place the file in `config/`
|
||||||
|
2. Add a section to `postinstall.sh`:
|
||||||
|
|
||||||
|
```bash
|
||||||
|
if [ -f config/your-config.conf ]; then
|
||||||
|
mkdir -p "$HOME/.config/your-app"
|
||||||
|
cp config/your-config.conf "$HOME/.config/your-app/your-config.conf"
|
||||||
|
chmod 600 "$HOME/.config/your-app/your-config.conf"
|
||||||
|
echo "Installed your-config.conf"
|
||||||
|
fi
|
||||||
|
```
|
||||||
|
|
||||||
|
---
|
||||||
|
|
||||||
|
## Working with Docker Compose
|
||||||
|
|
||||||
|
The installer clones [ScaleTail](https://github.com/tailscale-dev/ScaleTail) templates to `/usr/local/share/mylinux/scale-tail/` — a library of 119+ self-hosted services with a **Tailscale sidecar** pattern. Each service runs with `network_mode: service:tailscale`, gets a `tail-xxxxx.ts.net` URL, and optional automatic HTTPS via Tailscale Serve or Funnel.
|
||||||
|
|
||||||
|
### Architecture (after install)
|
||||||
|
|
||||||
|
```
|
||||||
|
/usr/local/share/mylinux/scale-tail/ # ScaleTail templates (git repo)
|
||||||
|
└── services/<name>/
|
||||||
|
├── compose.yaml # Service definition (Tailscale + app containers)
|
||||||
|
└── .env # Template variables (SERVICE, IMAGE_URL, TS_AUTHKEY, TZ, ...)
|
||||||
|
|
||||||
|
~/.config/mylinux/compose.env # Global defaults — set via wr-compose config
|
||||||
|
|
||||||
|
<SERVICES_BASE>/<name>/ # Active deployments (default: /srv/<name>)
|
||||||
|
├── compose.yaml # Copied from template (refreshed on wr-compose update)
|
||||||
|
├── .env # Your real config — preserved across updates
|
||||||
|
├── config/ # Service configuration data
|
||||||
|
└── data/ # Service persistent data
|
||||||
|
```
|
||||||
|
|
||||||
|
### `wr-compose` commands
|
||||||
|
|
||||||
|
| Command | Behaviour |
|
||||||
|
|---------|-----------|
|
||||||
|
| `wr-compose up <service>` | Deploys service to `$SERVICES_BASE/<service>/` (default: `/srv`), creates `config/` + `data/` dirs, generates `.env` from global config (prompts for `TS_AUTHKEY` if empty), runs `docker compose up -d` |
|
||||||
|
| `wr-compose down <service>` | Runs `docker compose down` in the service directory |
|
||||||
|
| `wr-compose update` | `git pull` in ScaleTail templates dir, then re-copies `compose.yaml` into all deployed directories — `.env` files are left untouched |
|
||||||
|
| `wr-compose config set K=V` | Persists a value in `~/.config/mylinux/compose.env` (e.g. `TS_AUTHKEY`, `TZ`, `DNS_SERVER`, `SERVICES_BASE`) |
|
||||||
|
|
||||||
|
### Portable `.env` design
|
||||||
|
|
||||||
|
- **Global**: `~/.config/mylinux/compose.env` — one place for `TS_AUTHKEY`, `TZ`, `DNS_SERVER`, `SERVICES_BASE`.
|
||||||
|
- **Per-service**: `<SERVICES_BASE>/<service>/.env` — generated from the ScaleTail template on first deploy, with empty values filled from the global config.
|
||||||
|
- **On update**: `wr-compose update` refreshes only `compose.yaml` from the templates; `.env` files are preserved.
|
||||||
|
- **Services path**: set `SERVICES_BASE` to any directory (e.g. `/srv`) via `wr-compose config set SERVICES_BASE=/srv`. Defaults to `/srv`.
|
||||||
|
|
||||||
|
This means `wr-compose` works anywhere — no repo clone needed after install. Just set `TS_AUTHKEY` once and deploy.
|
||||||
|
|
||||||
|
### Contributing upstream
|
||||||
|
|
||||||
|
ScaleTail provides a [service template](https://github.com/tailscale-dev/ScaleTail/tree/main/templates/service-template). To add a service:
|
||||||
|
|
||||||
|
1. Fork ScaleTail and add your service under `services/<name>/`
|
||||||
|
2. Submit a PR upstream
|
||||||
|
3. Changes are picked up by `wr-compose update`
|
||||||
|
|
||||||
|
---
|
||||||
|
|
||||||
|
## Commit Guidelines
|
||||||
|
|
||||||
|
- Use conventional commit prefixes: `feat:`, `fix:`, `docs:`, `refactor:`, `chore:`
|
||||||
|
- Explain *why* the change was made, not just *what* changed
|
||||||
|
- Keep commits focused — one logical change per commit
|
||||||
|
|
||||||
|
Examples:
|
||||||
|
|
||||||
|
```
|
||||||
|
feat: add wr-mytool for monitoring disk usage
|
||||||
|
fix: wr-ip fails when no default route exists
|
||||||
|
docs: add example output for wr-scan-ping
|
||||||
|
```
|
||||||
|
|
||||||
|
---
|
||||||
|
|
||||||
|
## Useful Commands
|
||||||
|
|
||||||
|
```bash
|
||||||
|
# Syntax-check a script without running it
|
||||||
|
bash -n bin/my-script
|
||||||
|
bash -n apps/utilities/myapp.sh
|
||||||
|
|
||||||
|
# ShellCheck linting
|
||||||
|
shellcheck bin/my-script
|
||||||
|
shellcheck apps/utilities/myapp.sh
|
||||||
|
|
||||||
|
# Quick syntax check all scripts
|
||||||
|
for f in bin/* apps/*/*.sh lib/common.sh install.sh preinstall.sh postinstall.sh; do
|
||||||
|
bash -n "$f" || echo "FAIL: $f"
|
||||||
|
done
|
||||||
|
|
||||||
|
# Initialize submodule after clone
|
||||||
|
git submodule update --init
|
||||||
|
|
||||||
|
# Pull latest ScaleTail services
|
||||||
|
git submodule update --remote compose/scale-tail
|
||||||
|
|
||||||
|
# List available compose services
|
||||||
|
./bin/wr-compose ls
|
||||||
|
|
||||||
|
# Test install in Docker
|
||||||
|
docker run --rm -it -v $PWD:/repo ubuntu:22.04 bash
|
||||||
|
# inside container: cd /repo && ./install.sh
|
||||||
|
|
||||||
|
# Test app installation interactively
|
||||||
|
./apps/install.sh
|
||||||
|
./apps/install.sh --all # install all apps
|
||||||
|
./apps/install.sh docker vscode # install specific apps
|
||||||
|
```
|
||||||
Executable
+18
@@ -0,0 +1,18 @@
|
|||||||
|
#!/usr/bin/env bash
|
||||||
|
set -euo pipefail
|
||||||
|
source "$(dirname "$0")/../../lib/common.sh"
|
||||||
|
|
||||||
|
install_brave() {
|
||||||
|
command -v brave-browser &>/dev/null && { log "brave already installed"; return 0; }
|
||||||
|
|
||||||
|
spawn "Adding brave apt repo" bash -c "
|
||||||
|
sudo curl -fsSLo /usr/share/keyrings/brave-browser-archive-keyring.gpg \
|
||||||
|
https://brave-browser-apt-release.s3.brave.com/brave-browser-archive-keyring.gpg
|
||||||
|
echo 'deb [arch=amd64 signed-by=/usr/share/keyrings/brave-browser-archive-keyring.gpg] https://brave-browser-apt-release.s3.brave.com/ stable main' \
|
||||||
|
| sudo tee /etc/apt/sources.list.d/brave-browser-release.list >/dev/null
|
||||||
|
"
|
||||||
|
spawn "Installing brave-browser" sudo apt update -qq
|
||||||
|
spawn "Installing brave-browser" sudo apt install -y brave-browser
|
||||||
|
}
|
||||||
|
|
||||||
|
install_brave
|
||||||
Executable
+16
@@ -0,0 +1,16 @@
|
|||||||
|
#!/usr/bin/env bash
|
||||||
|
set -euo pipefail
|
||||||
|
source "$(dirname "$0")/../../lib/common.sh"
|
||||||
|
|
||||||
|
install_opencode() {
|
||||||
|
command -v opencode &>/dev/null && { log "opencode already installed"; return 0; }
|
||||||
|
|
||||||
|
spawn "Installing opencode" bash -c "
|
||||||
|
curl -fsSL https://opencode.ai/install | bash
|
||||||
|
"
|
||||||
|
spawn "source bashrc" source ~/.bashrc
|
||||||
|
log "opencode installed to ~/.opencode/bin"
|
||||||
|
log "Add to PATH: export PATH=\"\$HOME/.opencode/bin:\$PATH\""
|
||||||
|
}
|
||||||
|
|
||||||
|
install_opencode
|
||||||
Executable
+18
@@ -0,0 +1,18 @@
|
|||||||
|
#!/usr/bin/env bash
|
||||||
|
set -euo pipefail
|
||||||
|
source "$(dirname "$0")/../../lib/common.sh"
|
||||||
|
|
||||||
|
install_vscode() {
|
||||||
|
command -v code &>/dev/null && { log "vscode already installed"; return 0; }
|
||||||
|
|
||||||
|
spawn "Adding vscode apt repo" bash -c "
|
||||||
|
sudo curl -fsSL https://packages.microsoft.com/keys/microsoft.asc \
|
||||||
|
| sudo gpg --dearmor -o /usr/share/keyrings/packages.microsoft.gpg
|
||||||
|
echo 'deb [arch=amd64 signed-by=/usr/share/keyrings/packages.microsoft.gpg] https://packages.microsoft.com/repos/code stable main' \
|
||||||
|
| sudo tee /etc/apt/sources.list.d/vscode.list >/dev/null
|
||||||
|
"
|
||||||
|
spawn "Updating apt" sudo apt update -qq
|
||||||
|
spawn "Installing code" sudo apt install -y code
|
||||||
|
}
|
||||||
|
|
||||||
|
install_vscode
|
||||||
Executable
+143
@@ -0,0 +1,143 @@
|
|||||||
|
#!/usr/bin/env bash
|
||||||
|
set -euo pipefail
|
||||||
|
source "$(dirname "$0")/../lib/common.sh"
|
||||||
|
|
||||||
|
usage() {
|
||||||
|
cat <<EOF
|
||||||
|
Usage: bash apps/install.sh [OPTIONS] [app ...]
|
||||||
|
|
||||||
|
Install optional desktop applications.
|
||||||
|
|
||||||
|
Options:
|
||||||
|
--all Install all available apps without prompting
|
||||||
|
-h, --help Show this help message
|
||||||
|
|
||||||
|
Examples:
|
||||||
|
bash apps/install.sh # interactive selection
|
||||||
|
bash apps/install.sh --all # install everything
|
||||||
|
bash apps/install.sh brave vscode # install specific apps
|
||||||
|
EOF
|
||||||
|
exit 0
|
||||||
|
}
|
||||||
|
|
||||||
|
ALL=0
|
||||||
|
POSITIONAL=()
|
||||||
|
|
||||||
|
while [[ $# -gt 0 ]]; do
|
||||||
|
case "$1" in
|
||||||
|
--all) ALL=1; shift ;;
|
||||||
|
-h|--help) usage ;;
|
||||||
|
-*) err "Unknown option: $1" ;;
|
||||||
|
*) POSITIONAL+=("$1"); shift ;;
|
||||||
|
esac
|
||||||
|
done
|
||||||
|
|
||||||
|
APPS_DIR="$(dirname "$0")"
|
||||||
|
|
||||||
|
# ── Category display names ─────────────────────────────────────
|
||||||
|
declare -A CAT_NAMES=(
|
||||||
|
[browsers]="Browsers"
|
||||||
|
[development]="Development"
|
||||||
|
[media]="Media"
|
||||||
|
[networking]="Networking / VPN"
|
||||||
|
[remote-access]="Remote Access"
|
||||||
|
[system]="System / Virtualization"
|
||||||
|
[utilities]="Utilities"
|
||||||
|
)
|
||||||
|
|
||||||
|
# ── Discover categories and apps ───────────────────────────────
|
||||||
|
CATEGORIES=()
|
||||||
|
declare -A CAT_APPS
|
||||||
|
|
||||||
|
for cat_dir in "$APPS_DIR"/*/; do
|
||||||
|
[ -d "$cat_dir" ] || continue
|
||||||
|
cat_name=$(basename "$cat_dir")
|
||||||
|
# Skip non-app directories
|
||||||
|
[[ "$cat_name" == "install" ]] && continue
|
||||||
|
# Check if directory has any .sh files
|
||||||
|
has_apps=0
|
||||||
|
for f in "$cat_dir"*.sh; do
|
||||||
|
[ -f "$f" ] && has_apps=1 && break
|
||||||
|
done
|
||||||
|
[ "$has_apps" -eq 0 ] && continue
|
||||||
|
|
||||||
|
CATEGORIES+=("$cat_name")
|
||||||
|
CAT_APPS["$cat_name"]=()
|
||||||
|
for f in "$cat_dir"*.sh; do
|
||||||
|
[ -f "$f" ] || continue
|
||||||
|
app_name=$(basename "$f" .sh)
|
||||||
|
CAT_APPS["$cat_name"]+=("$app_name")
|
||||||
|
done
|
||||||
|
done
|
||||||
|
|
||||||
|
# ── Helper: find which category an app belongs to ──────────────
|
||||||
|
find_app_category() {
|
||||||
|
local app="$1"
|
||||||
|
for cat in "${CATEGORIES[@]}"; do
|
||||||
|
for a in "${CAT_APPS[$cat]}"; do
|
||||||
|
[ "$a" == "$app" ] && { echo "$cat"; return 0; }
|
||||||
|
done
|
||||||
|
done
|
||||||
|
return 1
|
||||||
|
}
|
||||||
|
|
||||||
|
SELECTED=()
|
||||||
|
|
||||||
|
# ── Mode 1: specific apps requested on command line ────────────
|
||||||
|
if [ "${#POSITIONAL[@]}" -gt 0 ]; then
|
||||||
|
for req in "${POSITIONAL[@]}"; do
|
||||||
|
cat=$(find_app_category "$req" 2>/dev/null) && {
|
||||||
|
SELECTED+=("$req")
|
||||||
|
} || {
|
||||||
|
warn "Unknown app: $req (skipping)"
|
||||||
|
}
|
||||||
|
done
|
||||||
|
|
||||||
|
# ── Mode 2: --all ─────────────────────────────────────────────
|
||||||
|
elif [ "$ALL" -eq 1 ]; then
|
||||||
|
for cat in "${CATEGORIES[@]}"; do
|
||||||
|
for app in "${CAT_APPS[$cat]}"; do
|
||||||
|
SELECTED+=("$app")
|
||||||
|
done
|
||||||
|
done
|
||||||
|
|
||||||
|
# ── Mode 3: interactive TUI ───────────────────────────────────
|
||||||
|
else
|
||||||
|
section "Optional Applications"
|
||||||
|
echo "Select apps to install (y/n for each):"
|
||||||
|
echo
|
||||||
|
|
||||||
|
for cat in "${CATEGORIES[@]}"; do
|
||||||
|
display="${CAT_NAMES[$cat]:-$cat}"
|
||||||
|
echo " $display"
|
||||||
|
for app in "${CAT_APPS[$cat]}"; do
|
||||||
|
read -rp " Install ${app}? [y/N]: " yn
|
||||||
|
if [[ "$yn" =~ ^[Yy] ]]; then
|
||||||
|
SELECTED+=("$app")
|
||||||
|
fi
|
||||||
|
done
|
||||||
|
echo
|
||||||
|
done
|
||||||
|
fi
|
||||||
|
|
||||||
|
# ── Install selected apps ──────────────────────────────────────
|
||||||
|
[ "${#SELECTED[@]}" -eq 0 ] && { warn "No apps selected"; exit 0; }
|
||||||
|
|
||||||
|
echo
|
||||||
|
section "Installing ${SELECTED[*]}"
|
||||||
|
|
||||||
|
timer_start
|
||||||
|
count=1
|
||||||
|
total=${#SELECTED[@]}
|
||||||
|
for app in "${SELECTED[@]}"; do
|
||||||
|
cat=$(find_app_category "$app")
|
||||||
|
step "$count" "$total" "$app"
|
||||||
|
bash "$APPS_DIR/$cat/$app.sh"
|
||||||
|
count=$((count + 1))
|
||||||
|
echo
|
||||||
|
done
|
||||||
|
|
||||||
|
echo
|
||||||
|
echo "${GREEN}════════════════════════════════════════════${RESET}"
|
||||||
|
echo "${GREEN} Apps installed ($(timer_stop))${RESET}"
|
||||||
|
echo "${GREEN}════════════════════════════════════════════${RESET}"
|
||||||
Executable
+10
@@ -0,0 +1,10 @@
|
|||||||
|
#!/usr/bin/env bash
|
||||||
|
set -euo pipefail
|
||||||
|
source "$(dirname "$0")/../../lib/common.sh"
|
||||||
|
|
||||||
|
install_obs() {
|
||||||
|
command -v obs &>/dev/null && { log "obs-studio already installed"; return 0; }
|
||||||
|
spawn "Installing obs-studio" sudo apt install -y obs-studio
|
||||||
|
}
|
||||||
|
|
||||||
|
install_obs
|
||||||
@@ -0,0 +1,53 @@
|
|||||||
|
#!/usr/bin/env bash
|
||||||
|
set -euo pipefail
|
||||||
|
source "$(dirname "$0")/../../lib/common.sh"
|
||||||
|
|
||||||
|
RELEASE_URL="https://api.github.com/repos/Genymobile/scrcpy/releases/latest"
|
||||||
|
|
||||||
|
install_scrcpy() {
|
||||||
|
command -v scrcpy &>/dev/null && { log "scrcpy already installed"; return 0; }
|
||||||
|
|
||||||
|
spawn "Fetching latest scrcpy release info" bash -c "
|
||||||
|
curl -fsSL '$RELEASE_URL' -o /tmp/scrcpy-release.json
|
||||||
|
"
|
||||||
|
|
||||||
|
local tag asset_url
|
||||||
|
tag=$(python3 -c "import json; print(json.load(open('/tmp/scrcpy-release.json'))['tag_name'])")
|
||||||
|
asset_url=$(python3 -c "
|
||||||
|
import json
|
||||||
|
r = json.load(open('/tmp/scrcpy-release.json'))
|
||||||
|
for a in r['assets']:
|
||||||
|
if a['name'].startswith('scrcpy-linux-x86_64') and a['name'].endswith('.tar.gz'):
|
||||||
|
print(a['browser_download_url'])
|
||||||
|
break
|
||||||
|
")
|
||||||
|
version="${tag#v}"
|
||||||
|
|
||||||
|
spawn "Downloading scrcpy $version" bash -c "
|
||||||
|
install_dir=/usr/local/lib/scrcpy-$version
|
||||||
|
curl -fsSL '$asset_url' -o /tmp/scrcpy.tar.gz
|
||||||
|
sudo rm -rf \$install_dir /usr/local/lib/scrcpy
|
||||||
|
sudo mkdir -p \$install_dir
|
||||||
|
sudo tar xzf /tmp/scrcpy.tar.gz -C \$install_dir --strip-components=1
|
||||||
|
sudo ln -sf \$install_dir/scrcpy /usr/local/bin/scrcpy
|
||||||
|
rm -f /tmp/scrcpy.tar.gz /tmp/scrcpy-release.json
|
||||||
|
"
|
||||||
|
|
||||||
|
spawn "Adding desktop entry" bash -c "
|
||||||
|
sudo tee /usr/share/applications/scrcpy.desktop >/dev/null <<-EOF
|
||||||
|
[Desktop Entry]
|
||||||
|
Name=scrcpy
|
||||||
|
Comment=Display and control Android devices
|
||||||
|
Exec=/usr/local/bin/scrcpy
|
||||||
|
Icon=/usr/local/lib/scrcpy-$version/scrcpy.png
|
||||||
|
Terminal=false
|
||||||
|
Type=Application
|
||||||
|
Categories=Utility;
|
||||||
|
StartupNotify=false
|
||||||
|
EOF
|
||||||
|
"
|
||||||
|
|
||||||
|
log "scrcpy $version installed (adb included in the bundle)"
|
||||||
|
}
|
||||||
|
|
||||||
|
install_scrcpy
|
||||||
Executable
+10
@@ -0,0 +1,10 @@
|
|||||||
|
#!/usr/bin/env bash
|
||||||
|
set -euo pipefail
|
||||||
|
source "$(dirname "$0")/../../lib/common.sh"
|
||||||
|
|
||||||
|
install_vlc() {
|
||||||
|
command -v vlc &>/dev/null && { log "vlc already installed"; return 0; }
|
||||||
|
spawn "Installing vlc" sudo apt install -y vlc
|
||||||
|
}
|
||||||
|
|
||||||
|
install_vlc
|
||||||
Executable
+14
@@ -0,0 +1,14 @@
|
|||||||
|
#!/usr/bin/env bash
|
||||||
|
set -euo pipefail
|
||||||
|
source "$(dirname "$0")/../../lib/common.sh"
|
||||||
|
|
||||||
|
install_netbird() {
|
||||||
|
command -v netbird &>/dev/null && { log "netbird already installed"; return 0; }
|
||||||
|
|
||||||
|
spawn "Installing netbird" bash -c "
|
||||||
|
curl -fsSL https://pkgs.netbird.io/install.sh | sh
|
||||||
|
"
|
||||||
|
log "Join a network: sudo netbird up --setup-key <key>"
|
||||||
|
}
|
||||||
|
|
||||||
|
install_netbird
|
||||||
Executable
+14
@@ -0,0 +1,14 @@
|
|||||||
|
#!/usr/bin/env bash
|
||||||
|
set -euo pipefail
|
||||||
|
source "$(dirname "$0")/../../lib/common.sh"
|
||||||
|
|
||||||
|
install_tailscale() {
|
||||||
|
command -v tailscale &>/dev/null && { log "tailscale already installed"; return 0; }
|
||||||
|
|
||||||
|
spawn "Installing tailscale" bash -c "
|
||||||
|
curl -fsSL https://tailscale.com/install.sh | sh
|
||||||
|
"
|
||||||
|
log "Start tailscale: sudo tailscale up"
|
||||||
|
}
|
||||||
|
|
||||||
|
install_tailscale
|
||||||
Executable
+14
@@ -0,0 +1,14 @@
|
|||||||
|
#!/usr/bin/env bash
|
||||||
|
set -euo pipefail
|
||||||
|
source "$(dirname "$0")/../../lib/common.sh"
|
||||||
|
|
||||||
|
install_zerotier() {
|
||||||
|
command -v zerotier-one &>/dev/null && { log "zerotier already installed"; return 0; }
|
||||||
|
|
||||||
|
spawn "Installing zerotier" bash -c "
|
||||||
|
curl -s https://install.zerotier.com | sudo bash
|
||||||
|
"
|
||||||
|
log "Join a network: sudo zerotier-cli join <network-id>"
|
||||||
|
}
|
||||||
|
|
||||||
|
install_zerotier
|
||||||
Executable
+20
@@ -0,0 +1,20 @@
|
|||||||
|
#!/usr/bin/env bash
|
||||||
|
set -euo pipefail
|
||||||
|
source "$(dirname "$0")/../../lib/common.sh"
|
||||||
|
|
||||||
|
install_termius() {
|
||||||
|
command -v termius &>/dev/null && { log "termius already installed"; return 0; }
|
||||||
|
|
||||||
|
spawn "Downloading Termius .deb" bash -c "
|
||||||
|
curl -fsSL -o /tmp/termius.deb 'https://www.termius.com/download/linux/Termius.deb'
|
||||||
|
"
|
||||||
|
|
||||||
|
spawn "Installing Termius" bash -c "
|
||||||
|
sudo dpkg -i /tmp/termius.deb || sudo apt-get install -f -y
|
||||||
|
rm -f /tmp/termius.deb
|
||||||
|
"
|
||||||
|
|
||||||
|
log "Termius installed — launch with 'termius'"
|
||||||
|
}
|
||||||
|
|
||||||
|
install_termius
|
||||||
Executable
+10
@@ -0,0 +1,10 @@
|
|||||||
|
#!/usr/bin/env bash
|
||||||
|
set -euo pipefail
|
||||||
|
source "$(dirname "$0")/../../lib/common.sh"
|
||||||
|
|
||||||
|
install_vnc_viewer() {
|
||||||
|
command -v vncviewer &>/dev/null && { log "tigervnc-viewer already installed"; return 0; }
|
||||||
|
spawn "Installing tigervnc-viewer" sudo apt install -y tigervnc-viewer
|
||||||
|
}
|
||||||
|
|
||||||
|
install_vnc_viewer
|
||||||
Executable
+15
@@ -0,0 +1,15 @@
|
|||||||
|
#!/usr/bin/env bash
|
||||||
|
set -euo pipefail
|
||||||
|
source "$(dirname "$0")/../../lib/common.sh"
|
||||||
|
|
||||||
|
install_docker() {
|
||||||
|
command -v docker &>/dev/null && { log "docker already installed"; return 0; }
|
||||||
|
|
||||||
|
spawn "Installing docker engine" bash -c "
|
||||||
|
curl -fsSL https://get.docker.com | sh
|
||||||
|
"
|
||||||
|
spawn "Adding user to docker group" sudo usermod -aG docker "$USER"
|
||||||
|
warn "Log out and back in for docker group to take effect"
|
||||||
|
}
|
||||||
|
|
||||||
|
install_docker
|
||||||
Executable
+18
@@ -0,0 +1,18 @@
|
|||||||
|
#!/usr/bin/env bash
|
||||||
|
set -euo pipefail
|
||||||
|
source "$(dirname "$0")/../../lib/common.sh"
|
||||||
|
|
||||||
|
install_qemu() {
|
||||||
|
command -v qemu-system-x86_64 &>/dev/null && { log "qemu already installed"; return 0; }
|
||||||
|
|
||||||
|
spawn "Installing qemu and libvirt" sudo apt install -y \
|
||||||
|
qemu-system qemu-utils qemu-kvm \
|
||||||
|
libvirt-daemon-system libvirt-clients \
|
||||||
|
bridge-utils virt-manager
|
||||||
|
|
||||||
|
spawn "Adding user to libvirt group" sudo usermod -aG libvirt "$USER"
|
||||||
|
spawn "Adding user to kvm group" sudo usermod -aG kvm "$USER"
|
||||||
|
warn "Log out and back in for libvirt/kvm groups to take effect"
|
||||||
|
}
|
||||||
|
|
||||||
|
install_qemu
|
||||||
Executable
+35
@@ -0,0 +1,35 @@
|
|||||||
|
#!/usr/bin/env bash
|
||||||
|
set -euo pipefail
|
||||||
|
source "$(dirname "$0")/../../lib/common.sh"
|
||||||
|
|
||||||
|
install_affine() {
|
||||||
|
command -v affine &>/dev/null && { log "affine already installed"; return 0; }
|
||||||
|
|
||||||
|
local appimage_url="https://github.com/toeverything/AFFiNE/releases/download/v0.26.3/affine-0.26.3-stable-linux-x64.appimage"
|
||||||
|
|
||||||
|
local icon_url="https://raw.githubusercontent.com/toeverything/AFFiNE/master/packages/frontend/apps/electron/resources/icons/icon.png"
|
||||||
|
|
||||||
|
spawn "Installing AFFiNE AppImage" bash -c "
|
||||||
|
mkdir -p /opt/affine
|
||||||
|
curl -fsSL '$appimage_url' -o /opt/affine/affine.AppImage
|
||||||
|
chmod +x /opt/affine/affine.AppImage
|
||||||
|
ln -sf /opt/affine/affine.AppImage /usr/local/bin/affine
|
||||||
|
"
|
||||||
|
|
||||||
|
spawn "Adding desktop entry" bash -c "
|
||||||
|
curl -fsSL '$icon_url' -o /opt/affine/icon.png
|
||||||
|
cat > /usr/share/applications/affine.desktop <<-EOF
|
||||||
|
[Desktop Entry]
|
||||||
|
Name=AFFiNE
|
||||||
|
Comment=Next-gen knowledge base
|
||||||
|
Exec=/opt/affine/affine.AppImage
|
||||||
|
Icon=/opt/affine/icon.png
|
||||||
|
Terminal=false
|
||||||
|
Type=Application
|
||||||
|
Categories=Office;Utility;
|
||||||
|
StartupNotify=false
|
||||||
|
EOF
|
||||||
|
"
|
||||||
|
}
|
||||||
|
|
||||||
|
install_affine
|
||||||
Executable
+10
@@ -0,0 +1,10 @@
|
|||||||
|
#!/usr/bin/env bash
|
||||||
|
set -euo pipefail
|
||||||
|
source "$(dirname "$0")/../../lib/common.sh"
|
||||||
|
|
||||||
|
install_btop() {
|
||||||
|
command -v btop &>/dev/null && { log "btop already installed"; return 0; }
|
||||||
|
spawn "Installing btop" sudo apt install -y btop
|
||||||
|
}
|
||||||
|
|
||||||
|
install_btop
|
||||||
Executable
+19
@@ -0,0 +1,19 @@
|
|||||||
|
#!/usr/bin/env bash
|
||||||
|
set -euo pipefail
|
||||||
|
source "$(dirname "$0")/../../lib/common.sh"
|
||||||
|
|
||||||
|
install_localsend() {
|
||||||
|
if flatpak list 2>/dev/null | grep -q org.localsend.localsend_app; then
|
||||||
|
log "localsend already installed"
|
||||||
|
return 0
|
||||||
|
fi
|
||||||
|
|
||||||
|
if ! command -v flatpak &>/dev/null; then
|
||||||
|
spawn "Installing flatpak" sudo apt install -y flatpak
|
||||||
|
fi
|
||||||
|
|
||||||
|
spawn "Adding flathub remote" sudo flatpak remote-add --if-not-exists flathub https://flathub.org/repo/flathub.flatpakrepo
|
||||||
|
spawn "Installing localsend" sudo flatpak install -y flathub org.localsend.localsend_app
|
||||||
|
}
|
||||||
|
|
||||||
|
install_localsend
|
||||||
Executable
+14
@@ -0,0 +1,14 @@
|
|||||||
|
#!/usr/bin/env bash
|
||||||
|
|
||||||
|
LOG="${HOME:-/root}/.autostart.log"
|
||||||
|
|
||||||
|
echo "[$(date)] autostart running" >> "$LOG" 2>/dev/null || true
|
||||||
|
|
||||||
|
# Check network connectivity
|
||||||
|
if ping -c 1 -W 2 8.8.8.8 &>/dev/null; then
|
||||||
|
echo "[$(date)] Network: online" >> "$LOG" 2>/dev/null || true
|
||||||
|
else
|
||||||
|
echo "[$(date)] Network: offline" >> "$LOG" 2>/dev/null || true
|
||||||
|
fi
|
||||||
|
|
||||||
|
echo "[$(date)] autostart complete" >> "$LOG" 2>/dev/null || true
|
||||||
@@ -0,0 +1,145 @@
|
|||||||
|
#!/usr/bin/env bash
|
||||||
|
set -euo pipefail
|
||||||
|
|
||||||
|
self="$(cd "$(dirname "$0")" && pwd)"
|
||||||
|
|
||||||
|
# ── Colors (auto-off when not a TTY) ───────────────────────────
|
||||||
|
if [ -t 1 ]; then
|
||||||
|
BOLD=$(tput bold 2>/dev/null || true)
|
||||||
|
CYAN=$(tput setaf 6 2>/dev/null || true)
|
||||||
|
DIM=$(tput dim 2>/dev/null || true)
|
||||||
|
RESET=$(tput sgr0 2>/dev/null || true)
|
||||||
|
else
|
||||||
|
BOLD=""; CYAN=""; DIM=""; RESET=""
|
||||||
|
fi
|
||||||
|
|
||||||
|
# ── Collect available commands ─────────────────────────────────
|
||||||
|
_pos_commands() {
|
||||||
|
local cmds=()
|
||||||
|
local f
|
||||||
|
for f in "$self"/pos-*; do
|
||||||
|
[ -x "$f" ] || continue
|
||||||
|
local name="${f##*/pos-}"
|
||||||
|
cmds+=("$name")
|
||||||
|
done
|
||||||
|
echo "${cmds[*]}"
|
||||||
|
}
|
||||||
|
|
||||||
|
# ── Help text ──────────────────────────────────────────────────
|
||||||
|
usage() {
|
||||||
|
cat <<'EOF'
|
||||||
|
pos — Personal OS Toolkit
|
||||||
|
|
||||||
|
A unified CLI for network, docker, media, system,
|
||||||
|
and SSH tools on Debian/Ubuntu.
|
||||||
|
|
||||||
|
USAGE
|
||||||
|
pos <category> <command> [args]
|
||||||
|
|
||||||
|
CATEGORIES
|
||||||
|
network ip | checkport | scan
|
||||||
|
docker ps | compose
|
||||||
|
media mp3 | mp4
|
||||||
|
system firewall
|
||||||
|
ssh load-keys
|
||||||
|
vbox create | enter | stop | start | rm | ls
|
||||||
|
|
||||||
|
EXAMPLES
|
||||||
|
pos network ip Show interfaces, routes, public IP
|
||||||
|
pos network checkport 10.0.0.1:80 Check if a TCP port is open
|
||||||
|
pos network scan 192.168.1.0/24 Fast parallel ping sweep
|
||||||
|
|
||||||
|
pos docker ps List containers (health, IPs, ports)
|
||||||
|
pos docker compose ls List available ScaleTail services
|
||||||
|
pos docker compose up jellyfin Deploy a service with Tailscale
|
||||||
|
|
||||||
|
pos media mp3 <url> Download audio as MP3
|
||||||
|
pos media mp4 <url> Download video as MP4
|
||||||
|
|
||||||
|
pos system firewall Interactive UFW manager
|
||||||
|
|
||||||
|
pos ssh load-keys Load all SSH keys into agent
|
||||||
|
|
||||||
|
pos vbox create lab1 Create disposable Docker VM
|
||||||
|
pos vbox create lab1 --dir . Create VM using current directory
|
||||||
|
pos vbox enter lab1 Shell into a Docker VM
|
||||||
|
pos vbox ls List Docker VMs
|
||||||
|
|
||||||
|
HELP
|
||||||
|
pos help <command> Show help for a command
|
||||||
|
pos --help Show this help
|
||||||
|
|
||||||
|
LEGACY WRAPPERS
|
||||||
|
wr-ip, wr-checkport, wr-scan-ping, wr-docker,
|
||||||
|
wr-compose, wr-ufw, mp3, mp4, vbox, ssh-load-all
|
||||||
|
still work and forward to pos.
|
||||||
|
EOF
|
||||||
|
exit 0
|
||||||
|
}
|
||||||
|
|
||||||
|
# ── Handle --help / -h ─────────────────────────────────────────
|
||||||
|
case "${1:-}" in
|
||||||
|
-h|--help|"") usage ;;
|
||||||
|
esac
|
||||||
|
|
||||||
|
# ── pos help <command> ─────────────────────────────────────────
|
||||||
|
if [ "${1:-}" = "help" ]; then
|
||||||
|
shift
|
||||||
|
[ $# -eq 0 ] && usage
|
||||||
|
cmd="pos-${1// /-}"
|
||||||
|
if command -v "$cmd" &>/dev/null; then
|
||||||
|
exec "$cmd" --help
|
||||||
|
fi
|
||||||
|
[ -x "$self/$cmd" ] && exec "$self/$cmd" --help
|
||||||
|
echo "pos: unknown command '$1'" >&2
|
||||||
|
echo "Run 'pos --help' to see available commands." >&2
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
# ── Dispatch ───────────────────────────────────────────────────
|
||||||
|
args=("$@")
|
||||||
|
n=${#args[@]}
|
||||||
|
|
||||||
|
# ── Logging setup ──────────────────────────────────────────────
|
||||||
|
LOG_DIR="$HOME/.local/share/mylinux/logs"
|
||||||
|
mkdir -p "$LOG_DIR" 2>/dev/null || true
|
||||||
|
CMD_SAFE=$(echo "${args[*]}" | tr ' /' '__')
|
||||||
|
LOG_FILE="$LOG_DIR/$(date +%Y%m%d_%H%M%S)_pos_${CMD_SAFE}.log"
|
||||||
|
MAIN_LOG="$LOG_DIR/pos.log"
|
||||||
|
log_cmd() { echo "[$(date '+%Y-%m-%d %H:%M:%S')] $* → exit $2" >> "$MAIN_LOG"; }
|
||||||
|
|
||||||
|
# Commands that read from stdin interactively — only log invocation
|
||||||
|
INTERACTIVE_CMDS="system-firewall media-mp4"
|
||||||
|
|
||||||
|
for ((i=n-1; i>=0; i--)); do
|
||||||
|
cmd="pos"
|
||||||
|
for ((j=0; j<=i; j++)); do
|
||||||
|
cmd="${cmd}-${args[$j]}"
|
||||||
|
done
|
||||||
|
|
||||||
|
resolved=""
|
||||||
|
if command -v "$cmd" &>/dev/null; then
|
||||||
|
resolved="$cmd"
|
||||||
|
elif [ -x "$self/$cmd" ]; then
|
||||||
|
resolved="$self/$cmd"
|
||||||
|
fi
|
||||||
|
|
||||||
|
[ -z "$resolved" ] && continue
|
||||||
|
|
||||||
|
sub="${cmd#pos-}"
|
||||||
|
if [[ " $INTERACTIVE_CMDS " == *" $sub "* ]]; then
|
||||||
|
# Interactive: log invocation only, then exec normally
|
||||||
|
log_cmd "pos $*" "" 0
|
||||||
|
exec "$resolved" "${args[@]:i+1}"
|
||||||
|
else
|
||||||
|
# Non-interactive: capture full output
|
||||||
|
"$resolved" "${args[@]:i+1}" 2>&1 | tee "$LOG_FILE"
|
||||||
|
rc=${PIPESTATUS[0]}
|
||||||
|
log_cmd "pos $*" "$LOG_FILE" "$rc"
|
||||||
|
exit "$rc"
|
||||||
|
fi
|
||||||
|
done
|
||||||
|
|
||||||
|
echo "pos: unknown command '${args[0]}'" >&2
|
||||||
|
echo "Run 'pos --help' to see available commands." >&2
|
||||||
|
exit 1
|
||||||
Executable
+317
@@ -0,0 +1,317 @@
|
|||||||
|
#!/usr/bin/env bash
|
||||||
|
set -euo pipefail
|
||||||
|
source "$(dirname "$0")/../lib/common.sh" 2>/dev/null || source "$(dirname "$0")/common.sh"
|
||||||
|
|
||||||
|
SCALE_DIR="/usr/local/share/mylinux/scale-tail/services"
|
||||||
|
CONFIG_ENV="${HOME}/.config/mylinux/compose.env"
|
||||||
|
|
||||||
|
usage() {
|
||||||
|
cat <<EOF
|
||||||
|
Usage:
|
||||||
|
pos docker compose ls List available ScaleTail services
|
||||||
|
pos docker compose installed List deployed services
|
||||||
|
pos docker compose up <service> Deploy a service
|
||||||
|
pos docker compose down <service> Stop a service
|
||||||
|
pos docker compose restart <service> Restart a service
|
||||||
|
pos docker compose logs <service> [-f] View service logs
|
||||||
|
pos docker compose update Pull latest ScaleTail + refresh compose files
|
||||||
|
pos docker compose config Show global config
|
||||||
|
pos docker compose config set KEY=VALUE Set a global config value
|
||||||
|
pos docker compose config edit Open global config in editor
|
||||||
|
-h, --help Show this help
|
||||||
|
|
||||||
|
Examples:
|
||||||
|
pos docker compose up jellyfin
|
||||||
|
pos docker compose down actual-budget
|
||||||
|
pos docker compose logs home-assistant -f
|
||||||
|
pos docker compose config set TS_AUTHKEY=tskey-auth-xxxxx
|
||||||
|
EOF
|
||||||
|
exit 0
|
||||||
|
}
|
||||||
|
|
||||||
|
check_deps() {
|
||||||
|
command -v docker &>/dev/null || err "docker not found — run 'install.sh --apps' and install Docker first"
|
||||||
|
}
|
||||||
|
|
||||||
|
check_templates() {
|
||||||
|
[ -d "$SCALE_DIR" ] || err "ScaleTail templates not found at $SCALE_DIR — run 'install.sh' to set them up"
|
||||||
|
}
|
||||||
|
|
||||||
|
check_service() {
|
||||||
|
local svc="$1"
|
||||||
|
[ -d "$SCALE_DIR/$svc" ] || err "Unknown service '$svc' — run 'pos docker compose ls' to see available services"
|
||||||
|
}
|
||||||
|
|
||||||
|
load_global_config() {
|
||||||
|
mkdir -p "$(dirname "$CONFIG_ENV")"
|
||||||
|
[ -f "$CONFIG_ENV" ] && source "$CONFIG_ENV"
|
||||||
|
SERVICES_BASE="${SERVICES_BASE:-/srv}"
|
||||||
|
}
|
||||||
|
|
||||||
|
service_dir() {
|
||||||
|
local svc="$1"
|
||||||
|
echo "$SERVICES_BASE/$svc"
|
||||||
|
}
|
||||||
|
|
||||||
|
###############################################################################
|
||||||
|
# Commands
|
||||||
|
###############################################################################
|
||||||
|
|
||||||
|
cmd_ls() {
|
||||||
|
check_templates
|
||||||
|
local names=()
|
||||||
|
for svc in "$SCALE_DIR"/*/; do
|
||||||
|
names+=("$(basename "$svc")")
|
||||||
|
done
|
||||||
|
IFS=$'\n' names=($(sort <<<"${names[*]}")); unset IFS
|
||||||
|
|
||||||
|
echo "${CYAN}Available ScaleTail services:${RESET}"
|
||||||
|
echo "${BLUE}────────────────────────────────────────${RESET}"
|
||||||
|
local name
|
||||||
|
for name in "${names[@]}"; do
|
||||||
|
printf " ${GREEN}%s${RESET}\n" "$name"
|
||||||
|
done
|
||||||
|
echo "${BLUE}────────────────────────────────────────${RESET}"
|
||||||
|
echo " ${#names[@]} services total"
|
||||||
|
}
|
||||||
|
|
||||||
|
cmd_installed() {
|
||||||
|
load_global_config
|
||||||
|
local count=0
|
||||||
|
|
||||||
|
echo "${CYAN}Deployed services:${RESET}"
|
||||||
|
echo "${BLUE}────────────────────────────────────────${RESET}"
|
||||||
|
|
||||||
|
[ -d "$SERVICES_BASE" ] || { echo " (none — $SERVICES_BASE does not exist)"; echo "${BLUE}────────────────────────────────────────${RESET}"; echo " 0 services deployed"; return; }
|
||||||
|
|
||||||
|
for svc in "$SERVICES_BASE"/*/; do
|
||||||
|
[ -d "$svc" ] || continue
|
||||||
|
local name
|
||||||
|
name=$(basename "$svc")
|
||||||
|
local status=""
|
||||||
|
if [ -f "$svc/compose.yaml" ] || [ -f "$svc/compose.yml" ]; then
|
||||||
|
status=$(docker compose ls --format json 2>/dev/null | python3 -c "
|
||||||
|
import sys, json
|
||||||
|
try:
|
||||||
|
data = json.load(sys.stdin)
|
||||||
|
if not isinstance(data, list):
|
||||||
|
data = [data]
|
||||||
|
for e in data:
|
||||||
|
if e.get('Name') == '$name':
|
||||||
|
print(e.get('Status', 'unknown'))
|
||||||
|
break
|
||||||
|
except: pass
|
||||||
|
" 2>/dev/null || echo "unknown")
|
||||||
|
fi
|
||||||
|
printf " ${GREEN}%-28s${RESET} %s\n" "$name" "${status:-unknown}"
|
||||||
|
count=$((count + 1))
|
||||||
|
done
|
||||||
|
echo "${BLUE}────────────────────────────────────────${RESET}"
|
||||||
|
echo " $count services deployed"
|
||||||
|
}
|
||||||
|
|
||||||
|
cmd_up() {
|
||||||
|
local svc="$1"
|
||||||
|
[ -z "$svc" ] && usage
|
||||||
|
check_deps
|
||||||
|
check_templates
|
||||||
|
check_service "$svc"
|
||||||
|
load_global_config
|
||||||
|
|
||||||
|
local target
|
||||||
|
target=$(service_dir "$svc")
|
||||||
|
|
||||||
|
if [ ! -d "$target" ]; then
|
||||||
|
log "Creating $svc at $target"
|
||||||
|
mkdir -p "$target/config" "$target/data"
|
||||||
|
if [ -f "$SCALE_DIR/$svc/compose.yaml" ]; then
|
||||||
|
cp "$SCALE_DIR/$svc/compose.yaml" "$target/"
|
||||||
|
fi
|
||||||
|
if [ -f "$SCALE_DIR/$svc/compose.yml" ]; then
|
||||||
|
cp "$SCALE_DIR/$svc/compose.yml" "$target/"
|
||||||
|
fi
|
||||||
|
else
|
||||||
|
mkdir -p "$target/config" "$target/data"
|
||||||
|
fi
|
||||||
|
|
||||||
|
local env_file="$target/.env"
|
||||||
|
if [ ! -f "$env_file" ]; then
|
||||||
|
if [ -f "$SCALE_DIR/$svc/.env" ]; then
|
||||||
|
cp "$SCALE_DIR/$svc/.env" "$env_file"
|
||||||
|
else
|
||||||
|
cat > "$env_file" <<-EOF
|
||||||
|
SERVICE=$svc
|
||||||
|
IMAGE_URL=
|
||||||
|
SERVICEPORT=
|
||||||
|
DNS_SERVER=${DNS_SERVER:-9.9.9.9}
|
||||||
|
TS_AUTHKEY=${TS_AUTHKEY:-}
|
||||||
|
TZ=${TZ:-Europe/Amsterdam}
|
||||||
|
EOF
|
||||||
|
fi
|
||||||
|
|
||||||
|
if [ -n "${TS_AUTHKEY:-}" ]; then
|
||||||
|
sed -i "s|^TS_AUTHKEY=.*|TS_AUTHKEY=$TS_AUTHKEY|" "$env_file" 2>/dev/null || true
|
||||||
|
fi
|
||||||
|
if [ -n "${TZ:-}" ]; then
|
||||||
|
sed -i "s|^TZ=.*|TZ=$TZ|" "$env_file" 2>/dev/null || true
|
||||||
|
fi
|
||||||
|
if [ -n "${DNS_SERVER:-}" ]; then
|
||||||
|
sed -i "s|^DNS_SERVER=.*|DNS_SERVER=$DNS_SERVER|" "$env_file" 2>/dev/null || true
|
||||||
|
fi
|
||||||
|
|
||||||
|
if grep -q "^TS_AUTHKEY=$" "$env_file" 2>/dev/null; then
|
||||||
|
warn "TS_AUTHKEY is not set"
|
||||||
|
local key
|
||||||
|
read -rp " Enter your Tailscale auth key (or press Enter to skip): " key
|
||||||
|
if [ -n "$key" ]; then
|
||||||
|
sed -i "s|^TS_AUTHKEY=.*|TS_AUTHKEY=$key|" "$env_file"
|
||||||
|
fi
|
||||||
|
fi
|
||||||
|
log ".env created at $env_file — edit it if needed before continuing"
|
||||||
|
fi
|
||||||
|
|
||||||
|
log "Starting $svc..."
|
||||||
|
(cd "$target" && docker compose up -d)
|
||||||
|
ok "$svc is running"
|
||||||
|
}
|
||||||
|
|
||||||
|
cmd_down() {
|
||||||
|
local svc="$1"
|
||||||
|
[ -z "$svc" ] && usage
|
||||||
|
check_deps
|
||||||
|
load_global_config
|
||||||
|
local target
|
||||||
|
target=$(service_dir "$svc")
|
||||||
|
[ -d "$target" ] || err "$svc is not deployed at $target"
|
||||||
|
log "Stopping $svc..."
|
||||||
|
(cd "$target" && docker compose down)
|
||||||
|
ok "$svc stopped"
|
||||||
|
}
|
||||||
|
|
||||||
|
cmd_restart() {
|
||||||
|
local svc="$1"
|
||||||
|
[ -z "$svc" ] && usage
|
||||||
|
check_deps
|
||||||
|
load_global_config
|
||||||
|
local target
|
||||||
|
target=$(service_dir "$svc")
|
||||||
|
[ -d "$target" ] || err "$svc is not deployed"
|
||||||
|
log "Restarting $svc..."
|
||||||
|
(cd "$target" && docker compose restart)
|
||||||
|
ok "$svc restarted"
|
||||||
|
}
|
||||||
|
|
||||||
|
cmd_logs() {
|
||||||
|
local svc="$1"
|
||||||
|
shift 2>/dev/null || true
|
||||||
|
[ -z "$svc" ] && usage
|
||||||
|
check_deps
|
||||||
|
load_global_config
|
||||||
|
local target
|
||||||
|
target=$(service_dir "$svc")
|
||||||
|
[ -d "$target" ] || err "$svc is not deployed"
|
||||||
|
(cd "$target" && exec docker compose logs "$@")
|
||||||
|
}
|
||||||
|
|
||||||
|
cmd_update() {
|
||||||
|
check_templates
|
||||||
|
|
||||||
|
log "Updating ScaleTail templates..."
|
||||||
|
sudo git -C "/usr/local/share/mylinux/scale-tail" pull
|
||||||
|
ok "Templates updated"
|
||||||
|
|
||||||
|
load_global_config
|
||||||
|
local refreshed=0
|
||||||
|
|
||||||
|
[ -d "$SERVICES_BASE" ] || { ok "$refreshed compose files refreshed (.env preserved)"; return; }
|
||||||
|
|
||||||
|
for svc in "$SERVICES_BASE"/*/; do
|
||||||
|
[ -d "$svc" ] || continue
|
||||||
|
local name
|
||||||
|
name=$(basename "$svc")
|
||||||
|
if [ -f "$SCALE_DIR/$name/compose.yaml" ]; then
|
||||||
|
cp "$SCALE_DIR/$name/compose.yaml" "$svc/compose.yaml"
|
||||||
|
refreshed=$((refreshed + 1))
|
||||||
|
fi
|
||||||
|
if [ -f "$SCALE_DIR/$name/compose.yml" ]; then
|
||||||
|
cp "$SCALE_DIR/$name/compose.yml" "$svc/compose.yml"
|
||||||
|
refreshed=$((refreshed + 1))
|
||||||
|
fi
|
||||||
|
done
|
||||||
|
|
||||||
|
ok "$refreshed compose files refreshed (.env preserved)"
|
||||||
|
}
|
||||||
|
|
||||||
|
cmd_config() {
|
||||||
|
local action="${1:-show}"
|
||||||
|
shift 2>/dev/null || true
|
||||||
|
|
||||||
|
case "$action" in
|
||||||
|
show)
|
||||||
|
load_global_config
|
||||||
|
if [ -f "$CONFIG_ENV" ]; then
|
||||||
|
echo "${CYAN}Global compose config:${RESET}"
|
||||||
|
echo "${BLUE}────────────────────────────────────────${RESET}"
|
||||||
|
cat "$CONFIG_ENV"
|
||||||
|
echo "${BLUE}────────────────────────────────────────${RESET}"
|
||||||
|
echo "SERVICES_BASE=$SERVICES_BASE"
|
||||||
|
else
|
||||||
|
warn "No config file found at $CONFIG_ENV"
|
||||||
|
echo "Default SERVICES_BASE=/srv"
|
||||||
|
fi
|
||||||
|
;;
|
||||||
|
set)
|
||||||
|
local pair="${1:-}"
|
||||||
|
[ -z "$pair" ] && usage
|
||||||
|
local key="${pair%%=*}"
|
||||||
|
local val="${pair#*=}"
|
||||||
|
mkdir -p "$(dirname "$CONFIG_ENV")"
|
||||||
|
if [ -f "$CONFIG_ENV" ] && grep -q "^${key}=" "$CONFIG_ENV" 2>/dev/null; then
|
||||||
|
sed -i "s|^${key}=.*|${key}=${val}|" "$CONFIG_ENV"
|
||||||
|
else
|
||||||
|
echo "${key}=${val}" >> "$CONFIG_ENV"
|
||||||
|
fi
|
||||||
|
ok "Set ${key}=${val}"
|
||||||
|
;;
|
||||||
|
edit)
|
||||||
|
mkdir -p "$(dirname "$CONFIG_ENV")"
|
||||||
|
if [ ! -f "$CONFIG_ENV" ]; then
|
||||||
|
cat > "$CONFIG_ENV" <<-EOF
|
||||||
|
TS_AUTHKEY=
|
||||||
|
TZ=Europe/Amsterdam
|
||||||
|
DNS_SERVER=9.9.9.9
|
||||||
|
SERVICES_BASE=/srv
|
||||||
|
EOF
|
||||||
|
fi
|
||||||
|
"${EDITOR:-nano}" "$CONFIG_ENV"
|
||||||
|
;;
|
||||||
|
*)
|
||||||
|
usage
|
||||||
|
;;
|
||||||
|
esac
|
||||||
|
}
|
||||||
|
|
||||||
|
###############################################################################
|
||||||
|
# CLI dispatch
|
||||||
|
###############################################################################
|
||||||
|
|
||||||
|
[ $# -eq 0 ] && usage
|
||||||
|
|
||||||
|
case "${1:-}" in
|
||||||
|
-h|--help) usage ;;
|
||||||
|
esac
|
||||||
|
|
||||||
|
cmd="${1:-}"
|
||||||
|
shift
|
||||||
|
|
||||||
|
case "$cmd" in
|
||||||
|
ls) cmd_ls ;;
|
||||||
|
installed) cmd_installed ;;
|
||||||
|
up) cmd_up "${1:-}" ;;
|
||||||
|
down) cmd_down "${1:-}" ;;
|
||||||
|
restart) cmd_restart "${1:-}" ;;
|
||||||
|
logs) cmd_logs "$@" ;;
|
||||||
|
update) cmd_update ;;
|
||||||
|
config) cmd_config "$@" ;;
|
||||||
|
*) usage ;;
|
||||||
|
esac
|
||||||
Executable
+109
@@ -0,0 +1,109 @@
|
|||||||
|
#!/usr/bin/env bash
|
||||||
|
set -euo pipefail
|
||||||
|
source "$(dirname "$0")/../lib/common.sh" 2>/dev/null || source "$(dirname "$0")/common.sh"
|
||||||
|
|
||||||
|
usage() {
|
||||||
|
cat <<EOF
|
||||||
|
Usage: pos docker health
|
||||||
|
|
||||||
|
Quick one-glance health dashboard for all Docker containers.
|
||||||
|
Shows health status, uptime, and exits with code 1 if any container is unhealthy.
|
||||||
|
|
||||||
|
Exit codes:
|
||||||
|
0 All containers healthy (or no healthcheck configured)
|
||||||
|
1 One or more containers unhealthy
|
||||||
|
EOF
|
||||||
|
exit 0
|
||||||
|
}
|
||||||
|
|
||||||
|
case "${1:-}" in
|
||||||
|
-h|--help) usage ;;
|
||||||
|
esac
|
||||||
|
|
||||||
|
if ! command -v docker &>/dev/null; then
|
||||||
|
echo "docker not found"
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
if ! container_ids=$(docker ps -a -q 2>/dev/null) || [[ -z "$container_ids" ]]; then
|
||||||
|
echo "No containers."
|
||||||
|
exit 0
|
||||||
|
fi
|
||||||
|
|
||||||
|
healthy=0
|
||||||
|
unhealthy=0
|
||||||
|
no_check=0
|
||||||
|
other=0
|
||||||
|
|
||||||
|
echo "── Docker Health ─────────────────────────────────"
|
||||||
|
|
||||||
|
for cid in $container_ids; do
|
||||||
|
info=$(docker inspect "$cid" 2>/dev/null) || continue
|
||||||
|
|
||||||
|
name=$(echo "$info" | python3 -c "import sys,json; print(json.load(sys.stdin)[0]['Name'].lstrip('/'))" 2>/dev/null)
|
||||||
|
health=$(echo "$info" | python3 -c "
|
||||||
|
import sys,json
|
||||||
|
d=json.load(sys.stdin)[0]
|
||||||
|
h=d.get('State',{}).get('Health',{})
|
||||||
|
print(h.get('Status','') if h else '')
|
||||||
|
" 2>/dev/null || true)
|
||||||
|
started_at=$(echo "$info" | python3 -c "import sys,json; print(json.load(sys.stdin)[0]['State']['StartedAt'])" 2>/dev/null)
|
||||||
|
status=$(echo "$info" | python3 -c "import sys,json; print(json.load(sys.stdin)[0]['State']['Status'])" 2>/dev/null)
|
||||||
|
|
||||||
|
# Calculate uptime
|
||||||
|
uptime="-"
|
||||||
|
if start_ts=$(date -d "$started_at" +%s 2>/dev/null); then
|
||||||
|
now_ts=$(date +%s)
|
||||||
|
diff=$((now_ts - start_ts))
|
||||||
|
days=$((diff / 86400))
|
||||||
|
hours=$(((diff % 86400) / 3600))
|
||||||
|
mins=$(((diff % 3600) / 60))
|
||||||
|
if [ "$days" -gt 0 ]; then
|
||||||
|
uptime="${days}d ${hours}h"
|
||||||
|
elif [ "$hours" -gt 0 ]; then
|
||||||
|
uptime="${hours}h ${mins}m"
|
||||||
|
else
|
||||||
|
uptime="${mins}m"
|
||||||
|
fi
|
||||||
|
fi
|
||||||
|
|
||||||
|
# Determine health display
|
||||||
|
if [ -n "$health" ]; then
|
||||||
|
case "$health" in
|
||||||
|
healthy)
|
||||||
|
health_display="${GREEN}healthy${RESET}"
|
||||||
|
healthy=$((healthy + 1))
|
||||||
|
;;
|
||||||
|
unhealthy)
|
||||||
|
health_display="${RED}unhealthy${RESET}"
|
||||||
|
unhealthy=$((unhealthy + 1))
|
||||||
|
;;
|
||||||
|
starting)
|
||||||
|
health_display="${YELLOW}starting${RESET}"
|
||||||
|
other=$((other + 1))
|
||||||
|
;;
|
||||||
|
*)
|
||||||
|
health_display="${YELLOW}${health}${RESET}"
|
||||||
|
other=$((other + 1))
|
||||||
|
;;
|
||||||
|
esac
|
||||||
|
elif [ "$status" != "running" ]; then
|
||||||
|
health_display="${RED}${status}${RESET}"
|
||||||
|
other=$((other + 1))
|
||||||
|
else
|
||||||
|
health_display="${YELLOW}no healthcheck${RESET}"
|
||||||
|
no_check=$((no_check + 1))
|
||||||
|
fi
|
||||||
|
|
||||||
|
printf " %-24s %b%-20s${RESET} %s\n" "$name" "" "$health_display" "$uptime"
|
||||||
|
done
|
||||||
|
|
||||||
|
total=$((healthy + unhealthy + no_check + other))
|
||||||
|
echo "──────────────────────────────────────────────────"
|
||||||
|
echo " Total: $total ${GREEN}healthy: $healthy${RESET} ${RED}unhealthy: $unhealthy${RESET} no check: $no_check"
|
||||||
|
|
||||||
|
if [ "$unhealthy" -gt 0 ]; then
|
||||||
|
echo
|
||||||
|
echo "${RED}Unhealthy containers detected${RESET}"
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
Executable
+127
@@ -0,0 +1,127 @@
|
|||||||
|
#!/usr/bin/env bash
|
||||||
|
set -euo pipefail
|
||||||
|
source "$(dirname "$0")/../lib/common.sh" 2>/dev/null || source "$(dirname "$0")/common.sh"
|
||||||
|
|
||||||
|
usage() {
|
||||||
|
cat <<EOF
|
||||||
|
Usage: pos docker ps
|
||||||
|
|
||||||
|
Display enhanced Docker container overview with health status,
|
||||||
|
uptime, IPs, and port mappings.
|
||||||
|
EOF
|
||||||
|
exit 0
|
||||||
|
}
|
||||||
|
|
||||||
|
case "${1:-}" in
|
||||||
|
-h|--help) usage ;;
|
||||||
|
esac
|
||||||
|
|
||||||
|
if ! command -v docker &>/dev/null; then
|
||||||
|
echo "docker not found"
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
if ! container_ids=$(docker ps -q 2>/dev/null) || [[ -z "$container_ids" ]]; then
|
||||||
|
echo "No running containers."
|
||||||
|
exit 0
|
||||||
|
fi
|
||||||
|
|
||||||
|
healthy_count=0
|
||||||
|
unhealthy_count=0
|
||||||
|
running_count=0
|
||||||
|
total_count=0
|
||||||
|
|
||||||
|
printf "%-28s %-35s %-22s %-10s %-35s %-20s %s\n" \
|
||||||
|
"NAME" "IMAGE" "STATUS(HEALTH)" "UPTIME" "IPS" "PORTS" "CONTAINER ID"
|
||||||
|
|
||||||
|
for cid in $container_ids; do
|
||||||
|
total_count=$((total_count + 1))
|
||||||
|
|
||||||
|
info=$(docker inspect "$cid" 2>/dev/null) || continue
|
||||||
|
|
||||||
|
name=$(echo "$info" | python3 -c "import sys,json; print(json.load(sys.stdin)[0]['Name'].lstrip('/'))" 2>/dev/null)
|
||||||
|
image=$(echo "$info" | python3 -c "import sys,json; print(json.load(sys.stdin)[0]['Config']['Image'])" 2>/dev/null)
|
||||||
|
status=$(echo "$info" | python3 -c "import sys,json; print(json.load(sys.stdin)[0]['State']['Status'])" 2>/dev/null)
|
||||||
|
health=$(echo "$info" | python3 -c "
|
||||||
|
import sys,json
|
||||||
|
d=json.load(sys.stdin)[0]
|
||||||
|
h=d.get('State',{}).get('Health',{})
|
||||||
|
print(h.get('Status','') if h else '')
|
||||||
|
" 2>/dev/null || true)
|
||||||
|
started_at=$(echo "$info" | python3 -c "import sys,json; print(json.load(sys.stdin)[0]['State']['StartedAt'])" 2>/dev/null)
|
||||||
|
ip_data=$(echo "$info" | python3 -c "
|
||||||
|
import sys,json
|
||||||
|
d=json.load(sys.stdin)[0]
|
||||||
|
nets=d.get('NetworkSettings',{}).get('Networks',{})
|
||||||
|
out=' '.join(f'{k}:{v.get(\"IPAddress\",\"\")}' for k,v in nets.items() if v.get('IPAddress'))
|
||||||
|
print(out or '-')
|
||||||
|
" 2>/dev/null)
|
||||||
|
port_data=$(echo "$info" | python3 -c "
|
||||||
|
import sys,json
|
||||||
|
d=json.load(sys.stdin)[0]
|
||||||
|
ports=d.get('NetworkSettings',{}).get('Ports',{}) or {}
|
||||||
|
parts=[]
|
||||||
|
for container_port, bindings in ports.items():
|
||||||
|
if bindings:
|
||||||
|
for b in bindings:
|
||||||
|
hp=b.get('HostPort','')
|
||||||
|
hi=b.get('HostIp','')
|
||||||
|
if hi and hp:
|
||||||
|
parts.append(f'{hi}:{hp}->{container_port}')
|
||||||
|
elif hp:
|
||||||
|
parts.append(f'{hp}->{container_port}')
|
||||||
|
else:
|
||||||
|
parts.append(container_port)
|
||||||
|
else:
|
||||||
|
parts.append(container_port)
|
||||||
|
print(', '.join(parts) if parts else '-')
|
||||||
|
" 2>/dev/null)
|
||||||
|
|
||||||
|
[ "${#image}" -gt 35 ] && image="${image:0:32}..."
|
||||||
|
|
||||||
|
if [ "$status" = "running" ]; then
|
||||||
|
running_count=$((running_count + 1))
|
||||||
|
fi
|
||||||
|
|
||||||
|
if [ -n "$health" ]; then
|
||||||
|
case "$health" in
|
||||||
|
healthy) healthy_count=$((healthy_count + 1)); status_display="${GREEN}${status} (${health})${RESET}" ;;
|
||||||
|
unhealthy) unhealthy_count=$((unhealthy_count + 1)); status_display="${RED}${status} (${health})${RESET}" ;;
|
||||||
|
*) status_display="${YELLOW}${status} (${health})${RESET}" ;;
|
||||||
|
esac
|
||||||
|
else
|
||||||
|
status_display="${YELLOW}${status}${RESET}"
|
||||||
|
fi
|
||||||
|
|
||||||
|
uptime="-"
|
||||||
|
if start_ts=$(date -d "$started_at" +%s 2>/dev/null); then
|
||||||
|
now_ts=$(date +%s)
|
||||||
|
diff=$((now_ts - start_ts))
|
||||||
|
days=$((diff / 86400))
|
||||||
|
hours=$(((diff % 86400) / 3600))
|
||||||
|
mins=$(((diff % 3600) / 60))
|
||||||
|
if [ "$days" -gt 0 ]; then
|
||||||
|
uptime="${days}d ${hours}h"
|
||||||
|
elif [ "$hours" -gt 0 ]; then
|
||||||
|
uptime="${hours}h ${mins}m"
|
||||||
|
else
|
||||||
|
uptime="${mins}m"
|
||||||
|
fi
|
||||||
|
fi
|
||||||
|
|
||||||
|
printf "%-28s %-35s %-22b %-10s %-35s %-20s %s\n" \
|
||||||
|
"$name" "$image" "$status_display" "$uptime" "$ip_data" "$port_data" "$cid"
|
||||||
|
done
|
||||||
|
|
||||||
|
echo
|
||||||
|
printf '%*s\n' 120 '' | tr ' ' '-'
|
||||||
|
|
||||||
|
echo "Containers : $total_count"
|
||||||
|
echo "Healthy : $healthy_count"
|
||||||
|
echo "Unhealthy : $unhealthy_count"
|
||||||
|
echo "Running : $running_count"
|
||||||
|
|
||||||
|
if [ "$unhealthy_count" -gt 0 ]; then
|
||||||
|
echo
|
||||||
|
echo "${RED}Warning: unhealthy containers detected${RESET}"
|
||||||
|
fi
|
||||||
Executable
+30
@@ -0,0 +1,30 @@
|
|||||||
|
#!/usr/bin/env bash
|
||||||
|
set -euo pipefail
|
||||||
|
|
||||||
|
usage() {
|
||||||
|
cat <<EOF
|
||||||
|
Usage: pos media mp3 <url>
|
||||||
|
|
||||||
|
Download audio from a URL and convert to MP3 via yt-dlp.
|
||||||
|
|
||||||
|
Examples:
|
||||||
|
pos media mp3 https://youtube.com/watch?v=dQw4w9WgXcQ
|
||||||
|
EOF
|
||||||
|
exit 0
|
||||||
|
}
|
||||||
|
|
||||||
|
case "${1:-}" in
|
||||||
|
-h|--help|"") usage ;;
|
||||||
|
esac
|
||||||
|
|
||||||
|
url="$1"
|
||||||
|
|
||||||
|
yt-dlp \
|
||||||
|
-x \
|
||||||
|
--audio-format mp3 \
|
||||||
|
--audio-quality 0 \
|
||||||
|
--embed-thumbnail \
|
||||||
|
--convert-thumbnails jpg \
|
||||||
|
--add-metadata \
|
||||||
|
-o "$HOME/Music/%(title)s.%(ext)s" \
|
||||||
|
"$url"
|
||||||
Executable
+33
@@ -0,0 +1,33 @@
|
|||||||
|
#!/usr/bin/env bash
|
||||||
|
set -euo pipefail
|
||||||
|
|
||||||
|
usage() {
|
||||||
|
cat <<EOF
|
||||||
|
Usage: pos media mp4 <url>
|
||||||
|
|
||||||
|
Download video from a URL via yt-dlp with interactive format selection.
|
||||||
|
|
||||||
|
Examples:
|
||||||
|
pos media mp4 https://youtube.com/watch?v=dQw4w9WgXcQ
|
||||||
|
EOF
|
||||||
|
exit 0
|
||||||
|
}
|
||||||
|
|
||||||
|
case "${1:-}" in
|
||||||
|
-h|--help|"") usage ;;
|
||||||
|
esac
|
||||||
|
|
||||||
|
url="$1"
|
||||||
|
|
||||||
|
yt-dlp -F "$url"
|
||||||
|
|
||||||
|
echo
|
||||||
|
read -rp "Enter format ID: " format
|
||||||
|
|
||||||
|
yt-dlp \
|
||||||
|
-f "$format" \
|
||||||
|
--merge-output-format mp4 \
|
||||||
|
--embed-thumbnail \
|
||||||
|
--add-metadata \
|
||||||
|
-o "$HOME/Videos/%(title)s.%(ext)s" \
|
||||||
|
"$url"
|
||||||
Executable
+44
@@ -0,0 +1,44 @@
|
|||||||
|
#!/usr/bin/env bash
|
||||||
|
set -euo pipefail
|
||||||
|
|
||||||
|
usage() {
|
||||||
|
cat <<EOF
|
||||||
|
Usage: pos network checkport <ip:port>
|
||||||
|
|
||||||
|
Check if a TCP port is open on a remote host.
|
||||||
|
|
||||||
|
Examples:
|
||||||
|
pos network checkport 192.168.1.1:80
|
||||||
|
pos network checkport 10.0.0.5:443
|
||||||
|
EOF
|
||||||
|
exit 0
|
||||||
|
}
|
||||||
|
|
||||||
|
case "${1:-}" in
|
||||||
|
-h|--help|"") usage ;;
|
||||||
|
esac
|
||||||
|
|
||||||
|
target="$1"
|
||||||
|
|
||||||
|
if [[ "$target" != *:* ]]; then
|
||||||
|
echo "ERROR: Expected <ip:port> format, got '$target'"
|
||||||
|
echo "Usage: pos network checkport <ip:port>"
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
ip="${target%:*}"
|
||||||
|
port="${target#*:}"
|
||||||
|
|
||||||
|
if [[ -z "$ip" || -z "$port" ]]; then
|
||||||
|
echo "ERROR: Invalid target '$target'"
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
echo "Checking $ip:$port ..."
|
||||||
|
echo
|
||||||
|
|
||||||
|
if timeout 2 bash -c "cat < /dev/null > /dev/tcp/$ip/$port" 2>/dev/null; then
|
||||||
|
echo "OPEN ✔ $ip:$port"
|
||||||
|
else
|
||||||
|
echo "CLOSED ✖ $ip:$port"
|
||||||
|
fi
|
||||||
Executable
+46
@@ -0,0 +1,46 @@
|
|||||||
|
#!/usr/bin/env bash
|
||||||
|
set -euo pipefail
|
||||||
|
|
||||||
|
usage() {
|
||||||
|
cat <<EOF
|
||||||
|
Usage: pos network ip
|
||||||
|
|
||||||
|
Display network interfaces, default route, and public IP.
|
||||||
|
EOF
|
||||||
|
exit 0
|
||||||
|
}
|
||||||
|
|
||||||
|
case "${1:-}" in
|
||||||
|
-h|--help) usage ;;
|
||||||
|
esac
|
||||||
|
|
||||||
|
SEP() { printf '\u2550%.0s' $(seq 1 47); echo; }
|
||||||
|
|
||||||
|
SEP
|
||||||
|
echo "Network Interfaces"
|
||||||
|
SEP
|
||||||
|
|
||||||
|
ip -o -4 addr show | while read -r _ ifname _ ipaddr _; do
|
||||||
|
printf "%-20s %s\n" "$ifname" "${ipaddr%%/*}"
|
||||||
|
done
|
||||||
|
|
||||||
|
echo
|
||||||
|
|
||||||
|
SEP
|
||||||
|
echo "Default Route"
|
||||||
|
SEP
|
||||||
|
|
||||||
|
gateway=$(ip route | awk '/default/ {print $3; exit}')
|
||||||
|
iface=$(ip route | awk '/default/ {print $5; exit}')
|
||||||
|
|
||||||
|
printf "%-20s %s\n" "Interface" "${iface:-N/A}"
|
||||||
|
printf "%-20s %s\n" "Gateway" "${gateway:-N/A}"
|
||||||
|
|
||||||
|
echo
|
||||||
|
|
||||||
|
SEP
|
||||||
|
echo "Public IP"
|
||||||
|
SEP
|
||||||
|
|
||||||
|
curl -4 -s --max-time 5 https://ifconfig.me 2>/dev/null || echo "Unavailable"
|
||||||
|
echo
|
||||||
Executable
+270
@@ -0,0 +1,270 @@
|
|||||||
|
#!/usr/bin/env bash
|
||||||
|
set -euo pipefail
|
||||||
|
|
||||||
|
usage() {
|
||||||
|
cat <<EOF
|
||||||
|
Usage: pos network scan <cidr> [--full] [--retries N]
|
||||||
|
|
||||||
|
Two-phase network scan using nmap.
|
||||||
|
|
||||||
|
Phase 1: Fast host discovery (finds alive hosts)
|
||||||
|
Phase 2: Full metadata scan on alive hosts only (--full only)
|
||||||
|
|
||||||
|
Options:
|
||||||
|
--full Detailed scan: OS, ports, services, NSE scripts (slower)
|
||||||
|
--retries N Retries per host in discovery (default: 1)
|
||||||
|
|
||||||
|
Examples:
|
||||||
|
pos network scan 192.168.1.0/24
|
||||||
|
pos network scan 10.0.0.0/28 --full
|
||||||
|
pos network scan 172.1.1.104
|
||||||
|
pos network scan 192.168.1.0/24 --retries 3
|
||||||
|
EOF
|
||||||
|
exit 0
|
||||||
|
}
|
||||||
|
|
||||||
|
case "${1:-}" in
|
||||||
|
-h|--help|"") usage ;;
|
||||||
|
esac
|
||||||
|
|
||||||
|
net=""
|
||||||
|
full=0
|
||||||
|
retries=1
|
||||||
|
|
||||||
|
while [[ $# -gt 0 ]]; do
|
||||||
|
case "$1" in
|
||||||
|
--full) full=1; shift ;;
|
||||||
|
--retries)
|
||||||
|
if [[ -z "${2:-}" || "$2" == --* ]]; then
|
||||||
|
echo "ERROR: --retries requires a number"
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
retries="$2"; shift 2 ;;
|
||||||
|
*) net="$1"; shift ;;
|
||||||
|
esac
|
||||||
|
done
|
||||||
|
|
||||||
|
if [[ -z "$net" ]]; then
|
||||||
|
echo "ERROR: Missing CIDR (e.g. 192.168.1.0/24)"
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
# ── Input validation ───────────────────────────────────────────
|
||||||
|
# Bare IP → /32
|
||||||
|
if [[ "$net" =~ ^[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}$ ]]; then
|
||||||
|
net="${net}/32"
|
||||||
|
# Valid CIDR
|
||||||
|
elif [[ "$net" =~ ^[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}/[0-9]{1,2}$ ]]; then
|
||||||
|
: # ok
|
||||||
|
else
|
||||||
|
echo "ERROR: Invalid target '$net'"
|
||||||
|
echo "Expected: IP (172.1.1.104) or CIDR (192.168.1.0/24)"
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
if ! command -v nmap &>/dev/null; then
|
||||||
|
echo "ERROR: nmap is required. Install with: sudo apt install nmap"
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
# ── Estimate host count ────────────────────────────────────────
|
||||||
|
cidr_bits="${net##*/}"
|
||||||
|
if [[ "$cidr_bits" -ge 24 ]]; then
|
||||||
|
host_estimate=$(( 1 << (32 - cidr_bits) ))
|
||||||
|
elif [[ "$cidr_bits" -ge 16 ]]; then
|
||||||
|
host_estimate="$(( 1 << (32 - cidr_bits) ))+"
|
||||||
|
else
|
||||||
|
host_estimate="many"
|
||||||
|
fi
|
||||||
|
|
||||||
|
is_root=0
|
||||||
|
[[ $EUID -eq 0 ]] && is_root=1
|
||||||
|
|
||||||
|
can_sudo=0
|
||||||
|
if [[ "$is_root" -eq 1 ]]; then
|
||||||
|
can_sudo=1
|
||||||
|
elif sudo -n nmap -V &>/dev/null; then
|
||||||
|
can_sudo=1
|
||||||
|
elif [[ "$full" -eq 1 && -t 0 ]]; then
|
||||||
|
can_sudo=1
|
||||||
|
fi
|
||||||
|
|
||||||
|
tmpfile=$(mktemp /tmp/scan-XXXXXX.txt)
|
||||||
|
trap 'rm -f "$tmpfile"' EXIT
|
||||||
|
|
||||||
|
# ── Phase 1: Fast host discovery ───────────────────────────────
|
||||||
|
nmap_cmd="nmap"
|
||||||
|
[[ "$can_sudo" -eq 1 ]] && nmap_cmd="sudo nmap"
|
||||||
|
|
||||||
|
echo "Discovering hosts in $net (~$host_estimate) ..."
|
||||||
|
echo
|
||||||
|
|
||||||
|
$nmap_cmd -sn -T5 -n \
|
||||||
|
--min-rate 1000 \
|
||||||
|
--min-parallelism 1024 \
|
||||||
|
--min-hostgroup 1024 \
|
||||||
|
--max-retries "$retries" \
|
||||||
|
--host-timeout 5s \
|
||||||
|
"$net" 2>/dev/null | awk '/^Nmap scan report for/ {
|
||||||
|
ip = $(NF);
|
||||||
|
gsub(/[()]/, "", ip);
|
||||||
|
print ip;
|
||||||
|
}' > "$tmpfile"
|
||||||
|
|
||||||
|
host_count=$(wc -l < "$tmpfile")
|
||||||
|
|
||||||
|
if [[ "$host_count" -eq 0 ]]; then
|
||||||
|
echo "No hosts found."
|
||||||
|
exit 0
|
||||||
|
fi
|
||||||
|
|
||||||
|
echo "Found $host_count host(s)."
|
||||||
|
echo
|
||||||
|
|
||||||
|
if [[ "$full" -eq 0 ]]; then
|
||||||
|
cat "$tmpfile"
|
||||||
|
echo
|
||||||
|
echo "Done."
|
||||||
|
exit 0
|
||||||
|
fi
|
||||||
|
|
||||||
|
# ── Phase 2: Full metadata scan ────────────────────────────────
|
||||||
|
echo "Scanning $host_count host(s) (full) ..."
|
||||||
|
echo
|
||||||
|
|
||||||
|
nmap_args="-sV --version-intensity 9 -sC -T4 -n"
|
||||||
|
nmap_args="$nmap_args --min-parallelism 256 --max-parallelism 512"
|
||||||
|
nmap_args="$nmap_args --min-hostgroup 256 --max-hostgroup 512"
|
||||||
|
nmap_args="$nmap_args --min-rate 1000 --max-retries 1"
|
||||||
|
nmap_args="$nmap_args --host-timeout 60s --max-rtt-timeout 200ms"
|
||||||
|
nmap_args="$nmap_args --script ssh-hostkey,ssl-cert,http-title,http-server-header,smb-os-discovery,nbstat,rpcinfo"
|
||||||
|
[[ "$can_sudo" -eq 1 ]] && nmap_args="$nmap_args -O --osscan-guess"
|
||||||
|
|
||||||
|
# shellcheck disable=SC2086
|
||||||
|
$nmap_cmd $nmap_args -iL "$tmpfile" 2>/dev/null | awk '
|
||||||
|
BEGIN { ip_count = 0; has_os = 0 }
|
||||||
|
|
||||||
|
/^Nmap scan report for/ {
|
||||||
|
ip = $(NF);
|
||||||
|
gsub(/[()]/, "", ip);
|
||||||
|
hostname = "";
|
||||||
|
if ($(NF) ~ /^\(/) {
|
||||||
|
hostname = $(NF-1);
|
||||||
|
} else if (NF > 4) {
|
||||||
|
if (ip != $(NF-1) && $(NF-1) !~ /^(for|[0-9])/) {
|
||||||
|
hostname = $(NF-1);
|
||||||
|
}
|
||||||
|
}
|
||||||
|
if (ip_count > 0) printf "\n";
|
||||||
|
ip_count++;
|
||||||
|
has_os = 0;
|
||||||
|
if (hostname != "" && hostname != ip)
|
||||||
|
printf "\033[1;36m%s\033[0m (%s)\n", ip, hostname;
|
||||||
|
else
|
||||||
|
printf "\033[1;36m%s\033[0m\n", ip;
|
||||||
|
}
|
||||||
|
|
||||||
|
/^MAC Address/ {
|
||||||
|
vendor = $0;
|
||||||
|
sub(/.*\(/, "", vendor);
|
||||||
|
sub(/\).*/, "", vendor);
|
||||||
|
printf " \033[2m%-10s\033[0m %s %s\n", "MAC:", $3, vendor;
|
||||||
|
}
|
||||||
|
|
||||||
|
/^Aggressive OS guesses:/ {
|
||||||
|
has_os = 1;
|
||||||
|
line = $0;
|
||||||
|
sub(/.*guesses: /, "", line);
|
||||||
|
gsub(/\s*\(.*/, "", line);
|
||||||
|
printf " \033[2m%-10s\033[0m %s\n", "OS:", line;
|
||||||
|
}
|
||||||
|
|
||||||
|
/^OS details:/ {
|
||||||
|
has_os = 1;
|
||||||
|
sub(/.*OS details: /, "");
|
||||||
|
printf " \033[2m%-10s\033[0m %s\n", "OS:", $0;
|
||||||
|
}
|
||||||
|
|
||||||
|
/^Running:/ {
|
||||||
|
sub(/.*Running: /, "");
|
||||||
|
printf " \033[2m%-10s\033[0m %s\n", "OS:", $0;
|
||||||
|
}
|
||||||
|
|
||||||
|
/^Service Info:/ {
|
||||||
|
line = $0;
|
||||||
|
sub(/.*Service Info:/, "", line);
|
||||||
|
gsub(/^ +/, "", line);
|
||||||
|
if (has_os == 0)
|
||||||
|
printf " \033[2m%-10s\033[0m %s\n", "Info:", line;
|
||||||
|
}
|
||||||
|
|
||||||
|
/^\| ssh-hostkey:/ {
|
||||||
|
line = $0;
|
||||||
|
sub(/.*ssh-hostkey:/, "", line);
|
||||||
|
gsub(/^ +/, "", line);
|
||||||
|
if (line ~ /SHA256/) {
|
||||||
|
match(line, /SHA256:[A-Za-z0-9+\/=]+/);
|
||||||
|
key = substr(line, RSTART, RLENGTH);
|
||||||
|
printf " \033[2m%-10s\033[0m %s\n", "SSH:", key;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
/^\| http-title:/ {
|
||||||
|
line = $0;
|
||||||
|
sub(/.*http-title:/, "", line);
|
||||||
|
gsub(/^ +/, "", line);
|
||||||
|
gsub(/\s*\[.*$/, "", line);
|
||||||
|
if (line != "" && line !~ /^No/)
|
||||||
|
printf " \033[2m%-10s\033[0m %s\n", "HTTP Title:", line;
|
||||||
|
}
|
||||||
|
|
||||||
|
/^\| http-server-header:/ {
|
||||||
|
line = $0;
|
||||||
|
sub(/.*http-server-header:/, "", line);
|
||||||
|
gsub(/^ +/, "", line);
|
||||||
|
printf " \033[2m%-10s\033[0m %s\n", "HTTP Server:", line;
|
||||||
|
}
|
||||||
|
|
||||||
|
/^\|_?NetBIOS name:/ {
|
||||||
|
line = $0;
|
||||||
|
sub(/.*NetBIOS name:/, "", line);
|
||||||
|
sub(/,.*$/, "", line);
|
||||||
|
gsub(/^ +/, "", line);
|
||||||
|
printf " \033[2m%-10s\033[0m %s\n", "NetBIOS:", line;
|
||||||
|
}
|
||||||
|
|
||||||
|
/^\|_?SMB OS:/ {
|
||||||
|
line = $0;
|
||||||
|
sub(/.*SMB OS:/, "", line);
|
||||||
|
gsub(/^ +/, "", line);
|
||||||
|
printf " \033[2m%-10s\033[0m %s\n", "SMB:", line;
|
||||||
|
}
|
||||||
|
|
||||||
|
/^\|_?Domain:/ {
|
||||||
|
line = $0;
|
||||||
|
sub(/.*Domain:/, "", line);
|
||||||
|
gsub(/^ +/, "", line);
|
||||||
|
if (line != "" && line !~ /^WORKGROUP/)
|
||||||
|
printf " \033[2m%-10s\033[0m %s\n", "Domain:", line;
|
||||||
|
}
|
||||||
|
|
||||||
|
/^\| [0-9]+\/tcp/ {
|
||||||
|
line = $0;
|
||||||
|
gsub(/^ *\| */, "", line);
|
||||||
|
printf " \033[2m%-10s\033[0m %s\n", "RPC:", line;
|
||||||
|
}
|
||||||
|
|
||||||
|
/^[0-9]+\/tcp[[:space:]]+open/ {
|
||||||
|
port = $1; service = $3;
|
||||||
|
version = "";
|
||||||
|
for (i = 4; i <= NF; i++) version = version " " $i;
|
||||||
|
gsub(/^ +/, "", version);
|
||||||
|
if (version != "")
|
||||||
|
printf " \033[2m%-10s\033[0m %s — %s\n", port, service, version;
|
||||||
|
else
|
||||||
|
printf " \033[2m%-10s\033[0m %s\n", port, service;
|
||||||
|
}
|
||||||
|
'
|
||||||
|
|
||||||
|
echo
|
||||||
|
echo "Done."
|
||||||
Executable
+30
@@ -0,0 +1,30 @@
|
|||||||
|
#!/usr/bin/env bash
|
||||||
|
set -euo pipefail
|
||||||
|
|
||||||
|
usage() {
|
||||||
|
cat <<EOF
|
||||||
|
Usage: pos ssh load-keys
|
||||||
|
|
||||||
|
Load all SSH private keys into the ssh-agent.
|
||||||
|
|
||||||
|
Requires ssh-agent.service running (socket at /run/ssh-agent/socket).
|
||||||
|
EOF
|
||||||
|
exit 0
|
||||||
|
}
|
||||||
|
|
||||||
|
case "${1:-}" in
|
||||||
|
-h|--help) usage ;;
|
||||||
|
esac
|
||||||
|
|
||||||
|
export SSH_AUTH_SOCK="${SSH_AUTH_SOCK:-/run/ssh-agent/socket}"
|
||||||
|
|
||||||
|
for key in ~/.ssh/id_*; do
|
||||||
|
[ -f "$key" ] || continue
|
||||||
|
case "$key" in
|
||||||
|
*.pub|known_hosts|authorized_keys|config) continue ;;
|
||||||
|
esac
|
||||||
|
ssh-keygen -y -f "$key" &>/dev/null || continue
|
||||||
|
ssh-add "$key" 2>/dev/null
|
||||||
|
done
|
||||||
|
|
||||||
|
ssh-add -l
|
||||||
Executable
+284
@@ -0,0 +1,284 @@
|
|||||||
|
#!/usr/bin/env bash
|
||||||
|
set -euo pipefail
|
||||||
|
IFS=$'\n\t'
|
||||||
|
|
||||||
|
if [[ $EUID -ne 0 ]]; then
|
||||||
|
echo "ERROR: Please run as root (sudo)."
|
||||||
|
echo "Usage: sudo pos system firewall"
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
HISTORY=()
|
||||||
|
DRY_RUN=0
|
||||||
|
|
||||||
|
if [[ "${1:-}" == "--dry-run" ]]; then
|
||||||
|
DRY_RUN=1
|
||||||
|
fi
|
||||||
|
|
||||||
|
log() { echo "[+] $*"; }
|
||||||
|
warn() { echo "[!] $*"; }
|
||||||
|
err() { echo "ERROR: $*" >&2; exit 1; }
|
||||||
|
|
||||||
|
run_cmd() {
|
||||||
|
local -a cmd=("$@")
|
||||||
|
printf "\n>>> %s\n" "${cmd[*]}"
|
||||||
|
read -rp "Execute this command? [y/N]: " confirm
|
||||||
|
if [[ "$confirm" =~ ^[Yy]$ ]]; then
|
||||||
|
if [[ "$DRY_RUN" -eq 1 ]]; then
|
||||||
|
echo "(dry-run) skipping execution"
|
||||||
|
else
|
||||||
|
"${cmd[@]}"
|
||||||
|
fi
|
||||||
|
HISTORY+=("${cmd[*]}")
|
||||||
|
else
|
||||||
|
echo "Cancelled."
|
||||||
|
fi
|
||||||
|
}
|
||||||
|
|
||||||
|
build_ufw_cmd() {
|
||||||
|
local action="$1"
|
||||||
|
local direction="$2"
|
||||||
|
local proto="$3"
|
||||||
|
local from="$4"
|
||||||
|
local to="$5"
|
||||||
|
local port="$6"
|
||||||
|
local onif="$7"
|
||||||
|
local logmode="$8"
|
||||||
|
local comment="$9"
|
||||||
|
local insert_pos="${10:-}"
|
||||||
|
local suffix="${11:-}"
|
||||||
|
|
||||||
|
local -a cmd=(ufw)
|
||||||
|
|
||||||
|
if [[ -n "$insert_pos" ]]; then
|
||||||
|
if [[ "$insert_pos" == "prepend" ]]; then
|
||||||
|
cmd+=(prepend)
|
||||||
|
else
|
||||||
|
cmd+=(insert "$insert_pos")
|
||||||
|
fi
|
||||||
|
fi
|
||||||
|
|
||||||
|
cmd+=("$action")
|
||||||
|
|
||||||
|
[[ -n "$direction" ]] && cmd+=("$direction")
|
||||||
|
[[ -n "$onif" ]] && cmd+=(on "$onif")
|
||||||
|
[[ -n "$proto" ]] && cmd+=(proto "$proto")
|
||||||
|
[[ -n "$from" ]] && cmd+=(from "$from")
|
||||||
|
cmd+=(to "$to")
|
||||||
|
[[ -n "$port" ]] && cmd+=(port "$port")
|
||||||
|
[[ -n "$logmode" ]] && cmd+=("$logmode")
|
||||||
|
if [[ -n "$comment" ]]; then
|
||||||
|
local safe="${comment// /_}"
|
||||||
|
cmd+=(comment "$safe")
|
||||||
|
fi
|
||||||
|
[[ "$suffix" == "v6" ]] && cmd+=(v6)
|
||||||
|
|
||||||
|
run_cmd "${cmd[@]}"
|
||||||
|
}
|
||||||
|
|
||||||
|
prompt_ipver() {
|
||||||
|
local ver
|
||||||
|
read -rp "IP version (4 / 6 / both): " ver
|
||||||
|
echo "$ver"
|
||||||
|
}
|
||||||
|
|
||||||
|
apply_for_versions() {
|
||||||
|
local action="$1" direction="$2" proto="$3" from="$4" to="$5"
|
||||||
|
local port="$6" onif="$7" logmode="$8" comment="$9"
|
||||||
|
local insert_pos="${10:-}"
|
||||||
|
local ipver
|
||||||
|
ipver=$(prompt_ipver)
|
||||||
|
|
||||||
|
case "$ipver" in
|
||||||
|
4) build_ufw_cmd "$action" "$direction" "$proto" "$from" "$to" "$port" "$onif" "$logmode" "$comment" "$insert_pos" "" ;;
|
||||||
|
6) build_ufw_cmd "$action" "$direction" "$proto" "$from" "$to" "$port" "$onif" "$logmode" "$comment" "$insert_pos" "v6" ;;
|
||||||
|
both)
|
||||||
|
build_ufw_cmd "$action" "$direction" "$proto" "$from" "$to" "$port" "$onif" "$logmode" "$comment" "$insert_pos" ""
|
||||||
|
build_ufw_cmd "$action" "$direction" "$proto" "$from" "$to" "$port" "$onif" "$logmode" "$comment" "$insert_pos" "v6"
|
||||||
|
;;
|
||||||
|
*) echo "Invalid choice. Choose 4, 6 or both." ;;
|
||||||
|
esac
|
||||||
|
}
|
||||||
|
|
||||||
|
add_rule() {
|
||||||
|
echo
|
||||||
|
echo "Choose rule type:"
|
||||||
|
echo "1) Port/service (eg: port 8080 or 'ssh')"
|
||||||
|
echo "2) IP-based (from X to Y)"
|
||||||
|
echo "3) Directional port rule (in/out to any port ...)"
|
||||||
|
read -rp "Choice: " rtype
|
||||||
|
|
||||||
|
case "$rtype" in
|
||||||
|
1)
|
||||||
|
read -rp "Action (allow/deny/reject/limit) [allow]: " action
|
||||||
|
action=${action:-allow}
|
||||||
|
read -rp "Enter port number or service name (eg 'ssh' or '8080'): " port_or_svc
|
||||||
|
|
||||||
|
if [[ "$port_or_svc" =~ ^[0-9]+$ ]]; then
|
||||||
|
read -rp "Protocol (tcp/udp/any) [tcp]: " proto
|
||||||
|
proto=${proto:-tcp}
|
||||||
|
[[ "$proto" == "any" ]] && proto=""
|
||||||
|
read -rp "Interface (leave empty for any): " onif
|
||||||
|
read -rp "Log? (none/log/log-all) [none]: " logmode
|
||||||
|
[[ "$logmode" == "none" ]] && logmode=""
|
||||||
|
read -rp "Comment (optional): " comment
|
||||||
|
|
||||||
|
apply_for_versions "$action" "" "$proto" "" "any" "$port_or_svc" "$onif" "$logmode" "$comment"
|
||||||
|
else
|
||||||
|
read -rp "IP version (4 / 6 / both) [4]: " ipver
|
||||||
|
ipver=${ipver:-4}
|
||||||
|
case "$ipver" in
|
||||||
|
4) run_cmd ufw "$action" "$port_or_svc" ;;
|
||||||
|
6) run_cmd ufw "$action" "$port_or_svc" v6 ;;
|
||||||
|
both) run_cmd ufw "$action" "$port_or_svc"
|
||||||
|
run_cmd ufw "$action" "$port_or_svc" v6 ;;
|
||||||
|
*) echo "invalid ipver" ;;
|
||||||
|
esac
|
||||||
|
fi
|
||||||
|
;;
|
||||||
|
|
||||||
|
2)
|
||||||
|
read -rp "Action (allow/deny/reject) [deny]: " action
|
||||||
|
action=${action:-deny}
|
||||||
|
read -rp "From address/CIDR (eg 192.168.1.5 or 10.0.0.0/24): " from
|
||||||
|
read -rp "To address (leave empty for 'any') [any]: " to
|
||||||
|
to=${to:-any}
|
||||||
|
read -rp "Direction (in/out) [in]: " direction
|
||||||
|
direction=${direction:-in}
|
||||||
|
read -rp "Port (leave empty if not applicable): " port
|
||||||
|
read -rp "Protocol (tcp/udp/any) [any]: " proto
|
||||||
|
[[ "$proto" == "any" ]] && proto=""
|
||||||
|
read -rp "Interface (leave empty for any): " onif
|
||||||
|
read -rp "Log? (none/log/log-all) [none]: " logmode
|
||||||
|
[[ "$logmode" == "none" ]] && logmode=""
|
||||||
|
read -rp "Comment (optional): " comment
|
||||||
|
|
||||||
|
apply_for_versions "$action" "$direction" "$proto" "$from" "$to" "$port" "$onif" "$logmode" "$comment"
|
||||||
|
;;
|
||||||
|
|
||||||
|
3)
|
||||||
|
read -rp "Action (allow/deny/reject/limit) [allow]: " action
|
||||||
|
action=${action:-allow}
|
||||||
|
read -rp "Direction (in/out) [in]: " direction
|
||||||
|
direction=${direction:-in}
|
||||||
|
read -rp "Port number: " port
|
||||||
|
read -rp "Protocol (tcp/udp/any) [tcp]: " proto
|
||||||
|
[[ "$proto" == "any" ]] && proto=""
|
||||||
|
read -rp "On interface (leave empty for any): " onif
|
||||||
|
read -rp "From address (optional): " from
|
||||||
|
from=${from:-}
|
||||||
|
read -rp "To address [any]: " to
|
||||||
|
to=${to:-any}
|
||||||
|
read -rp "Log? (none/log/log-all) [none]: " logmode
|
||||||
|
[[ "$logmode" == "none" ]] && logmode=""
|
||||||
|
read -rp "Comment (optional): " comment
|
||||||
|
read -rp "Insert position (number/prepend/empty): " insert_pos
|
||||||
|
|
||||||
|
apply_for_versions "$action" "$direction" "$proto" "$from" "$to" "$port" "$onif" "$logmode" "$comment" "$insert_pos"
|
||||||
|
;;
|
||||||
|
|
||||||
|
*) echo "Unknown choice." ;;
|
||||||
|
esac
|
||||||
|
}
|
||||||
|
|
||||||
|
delete_rule() {
|
||||||
|
echo
|
||||||
|
echo "Delete rule by:"
|
||||||
|
echo "1) rule number (use 'ufw status numbered' to see numbers)"
|
||||||
|
echo "2) rule text (eg: 'allow 22/tcp')"
|
||||||
|
read -rp "Choice: " dch
|
||||||
|
|
||||||
|
case "$dch" in
|
||||||
|
1)
|
||||||
|
ufw status numbered
|
||||||
|
read -rp "Number to delete: " num
|
||||||
|
run_cmd ufw delete "$num"
|
||||||
|
;;
|
||||||
|
2)
|
||||||
|
read -rp "Exact rule text to delete (eg: deny 80/tcp): " ruletext
|
||||||
|
run_cmd ufw delete $ruletext
|
||||||
|
;;
|
||||||
|
*) echo "Unknown choice." ;;
|
||||||
|
esac
|
||||||
|
}
|
||||||
|
|
||||||
|
show_status() {
|
||||||
|
echo
|
||||||
|
echo "1) Simple status"
|
||||||
|
echo "2) Verbose status"
|
||||||
|
echo "3) Numbered status (useful for delete)"
|
||||||
|
read -rp "Choice: " sc
|
||||||
|
case "$sc" in
|
||||||
|
1) run_cmd ufw status ;;
|
||||||
|
2) run_cmd ufw status verbose ;;
|
||||||
|
3) run_cmd ufw status numbered ;;
|
||||||
|
*) echo "Unknown choice." ;;
|
||||||
|
esac
|
||||||
|
}
|
||||||
|
|
||||||
|
while true; do
|
||||||
|
cat <<'MENU'
|
||||||
|
|
||||||
|
==============================
|
||||||
|
UFW POWER — human friendly
|
||||||
|
==============================
|
||||||
|
1) Add rule (port/service/ip/directional)
|
||||||
|
2) Delete rule (by number or text)
|
||||||
|
3) Show status (simple / verbose / numbered)
|
||||||
|
4) Enable UFW
|
||||||
|
5) Disable UFW
|
||||||
|
6) Reset UFW (delete all rules)
|
||||||
|
7) Set default policy (incoming/outgoing)
|
||||||
|
8) Show executed commands history (so far)
|
||||||
|
0) Exit
|
||||||
|
------------------------------
|
||||||
|
MENU
|
||||||
|
read -rp "Choose: " opt
|
||||||
|
|
||||||
|
case "$opt" in
|
||||||
|
1) add_rule ;;
|
||||||
|
2) delete_rule ;;
|
||||||
|
3) show_status ;;
|
||||||
|
4) run_cmd ufw enable ;;
|
||||||
|
5) run_cmd ufw disable ;;
|
||||||
|
6)
|
||||||
|
echo "WARNING: ufw reset will disable and remove all rules."
|
||||||
|
read -rp "Type 'RESET' to confirm: " c
|
||||||
|
[[ "$c" == "RESET" ]] && run_cmd ufw reset || echo "Reset aborted."
|
||||||
|
;;
|
||||||
|
7)
|
||||||
|
read -rp "Default incoming policy (allow/deny/reject) [deny]: " defin
|
||||||
|
defin=${defin:-deny}
|
||||||
|
read -rp "Default outgoing policy (allow/deny/reject) [allow]: " defout
|
||||||
|
defout=${defout:-allow}
|
||||||
|
run_cmd ufw default "$defin" incoming
|
||||||
|
run_cmd ufw default "$defout" outgoing
|
||||||
|
;;
|
||||||
|
8)
|
||||||
|
echo
|
||||||
|
echo "Executed commands so far:"
|
||||||
|
echo
|
||||||
|
if [[ "${#HISTORY[@]}" -eq 0 ]]; then
|
||||||
|
echo "(none yet)"
|
||||||
|
else
|
||||||
|
for c in "${HISTORY[@]}"; do echo " - $c"; done
|
||||||
|
fi
|
||||||
|
;;
|
||||||
|
0)
|
||||||
|
echo
|
||||||
|
echo "Final executed commands summary:"
|
||||||
|
if [[ "${#HISTORY[@]}" -eq 0 ]]; then
|
||||||
|
echo "(no commands executed)"
|
||||||
|
else
|
||||||
|
for c in "${HISTORY[@]}"; do echo " - $c"; done
|
||||||
|
fi
|
||||||
|
echo "Goodbye — firewall remains watchful."
|
||||||
|
exit 0
|
||||||
|
;;
|
||||||
|
*) echo "Unknown option." ;;
|
||||||
|
esac
|
||||||
|
|
||||||
|
echo
|
||||||
|
read -rp "Press Enter to continue..."
|
||||||
|
clear
|
||||||
|
done
|
||||||
Executable
+156
@@ -0,0 +1,156 @@
|
|||||||
|
#!/usr/bin/env bash
|
||||||
|
set -euo pipefail
|
||||||
|
source "$(dirname "$0")/../lib/common.sh" 2>/dev/null || source "$(dirname "$0")/common.sh"
|
||||||
|
|
||||||
|
usage() {
|
||||||
|
cat <<EOF
|
||||||
|
Usage:
|
||||||
|
pos vbox create <name> [image] [--dir <path>]
|
||||||
|
pos vbox enter <name>
|
||||||
|
pos vbox stop <name>
|
||||||
|
pos vbox start <name>
|
||||||
|
pos vbox rm <name>
|
||||||
|
pos vbox ls
|
||||||
|
|
||||||
|
Manage disposable Docker containers as lightweight VMs.
|
||||||
|
|
||||||
|
Each container gets a bind-mounted host directory so files persist
|
||||||
|
on the host even after the container is removed.
|
||||||
|
|
||||||
|
Options:
|
||||||
|
--dir <path> Use custom directory instead of default ~/<name>
|
||||||
|
Use "." for current directory
|
||||||
|
|
||||||
|
Examples:
|
||||||
|
pos vbox create lab1
|
||||||
|
pos vbox create lab1 --dir .
|
||||||
|
pos vbox create lab1 --dir /mnt/data/lab1
|
||||||
|
pos vbox create kali kalilinux/kali-rolling
|
||||||
|
pos vbox enter lab1
|
||||||
|
pos vbox stop lab1
|
||||||
|
pos vbox start lab1
|
||||||
|
pos vbox rm lab1
|
||||||
|
pos vbox ls
|
||||||
|
EOF
|
||||||
|
exit 0
|
||||||
|
}
|
||||||
|
|
||||||
|
case "${1:-}" in
|
||||||
|
-h|--help) usage ;;
|
||||||
|
esac
|
||||||
|
|
||||||
|
cmd="${1:-}"
|
||||||
|
[ -z "$cmd" ] && usage
|
||||||
|
|
||||||
|
container_exists() {
|
||||||
|
docker container inspect "$1" &>/dev/null
|
||||||
|
}
|
||||||
|
|
||||||
|
container_running() {
|
||||||
|
[[ "$(docker inspect -f '{{.State.Running}}' "$1" 2>/dev/null)" == "true" ]]
|
||||||
|
}
|
||||||
|
|
||||||
|
case "$cmd" in
|
||||||
|
create)
|
||||||
|
name="${2:-}"
|
||||||
|
[ -z "$name" ] && usage
|
||||||
|
|
||||||
|
# Parse remaining args: [image] [--dir <path>]
|
||||||
|
image="ubuntu:22.04"
|
||||||
|
custom_dir=""
|
||||||
|
shift 2 || true
|
||||||
|
while [ $# -gt 0 ]; do
|
||||||
|
case "$1" in
|
||||||
|
--dir)
|
||||||
|
[ -z "${2:-}" ] && { echo "Missing value for --dir"; exit 1; }
|
||||||
|
custom_dir="$2"
|
||||||
|
shift 2
|
||||||
|
;;
|
||||||
|
*)
|
||||||
|
image="$1"
|
||||||
|
shift
|
||||||
|
;;
|
||||||
|
esac
|
||||||
|
done
|
||||||
|
|
||||||
|
if container_exists "$name"; then
|
||||||
|
echo "[!] Container already exists: $name"
|
||||||
|
exit 0
|
||||||
|
fi
|
||||||
|
|
||||||
|
if [ -n "$custom_dir" ]; then
|
||||||
|
lab_dir="$(cd "$custom_dir" 2>/dev/null && pwd)" || { echo "[!] Directory not found: $custom_dir"; exit 1; }
|
||||||
|
else
|
||||||
|
lab_dir="$HOME/$name"
|
||||||
|
fi
|
||||||
|
mkdir -p "$lab_dir"
|
||||||
|
echo "[+] Lab directory: $lab_dir"
|
||||||
|
|
||||||
|
echo "[+] Pulling image: $image"
|
||||||
|
docker pull "$image"
|
||||||
|
|
||||||
|
echo "[+] Creating: $name"
|
||||||
|
docker create \
|
||||||
|
-it \
|
||||||
|
--name "$name" \
|
||||||
|
--label mylinux.vbox=true \
|
||||||
|
-v "$lab_dir:$lab_dir" \
|
||||||
|
-w "$lab_dir" \
|
||||||
|
"$image" \
|
||||||
|
bash >/dev/null
|
||||||
|
echo "[+] Done"
|
||||||
|
|
||||||
|
if confirm "Enter now?"; then
|
||||||
|
docker start "$name" >/dev/null
|
||||||
|
exec docker exec -it -w "$lab_dir" "$name" bash
|
||||||
|
fi
|
||||||
|
;;
|
||||||
|
|
||||||
|
enter)
|
||||||
|
name="${2:-}"
|
||||||
|
[ -z "$name" ] && usage
|
||||||
|
|
||||||
|
if ! container_exists "$name"; then
|
||||||
|
echo "[!] Container not found: $name"
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
if ! container_running "$name"; then
|
||||||
|
docker start "$name" >/dev/null
|
||||||
|
fi
|
||||||
|
|
||||||
|
# Detect working dir from container mounts
|
||||||
|
lab_dir=$(docker inspect -f '{{range .Mounts}}{{if eq .Destination .Destination}}{{.Source}}{{end}}{{end}}' "$name" 2>/dev/null | head -1)
|
||||||
|
if [ -n "$lab_dir" ] && [ -d "$lab_dir" ]; then
|
||||||
|
exec docker exec -it -w "$lab_dir" "$name" bash
|
||||||
|
else
|
||||||
|
exec docker exec -it "$name" bash
|
||||||
|
fi
|
||||||
|
;;
|
||||||
|
|
||||||
|
start)
|
||||||
|
name="${2:-}"
|
||||||
|
[ -z "$name" ] && usage
|
||||||
|
docker start "$name"
|
||||||
|
;;
|
||||||
|
|
||||||
|
stop)
|
||||||
|
name="${2:-}"
|
||||||
|
[ -z "$name" ] && usage
|
||||||
|
docker stop "$name"
|
||||||
|
;;
|
||||||
|
|
||||||
|
rm)
|
||||||
|
name="${2:-}"
|
||||||
|
[ -z "$name" ] && usage
|
||||||
|
docker rm -f "$name"
|
||||||
|
;;
|
||||||
|
|
||||||
|
ls)
|
||||||
|
docker ps -a --filter label=mylinux.vbox=true --format "table {{.Names}}\t{{.Image}}\t{{.Status}}"
|
||||||
|
;;
|
||||||
|
|
||||||
|
*)
|
||||||
|
usage
|
||||||
|
;;
|
||||||
|
esac
|
||||||
Executable
+2
@@ -0,0 +1,2 @@
|
|||||||
|
#!/usr/bin/env bash
|
||||||
|
exec pos ssh load-keys "$@"
|
||||||
Executable
+2
@@ -0,0 +1,2 @@
|
|||||||
|
#!/usr/bin/env bash
|
||||||
|
exec pos network checkport "$@"
|
||||||
Executable
+2
@@ -0,0 +1,2 @@
|
|||||||
|
#!/usr/bin/env bash
|
||||||
|
exec pos docker compose "$@"
|
||||||
Executable
+2
@@ -0,0 +1,2 @@
|
|||||||
|
#!/usr/bin/env bash
|
||||||
|
exec pos docker ps "$@"
|
||||||
Executable
+2
@@ -0,0 +1,2 @@
|
|||||||
|
#!/usr/bin/env bash
|
||||||
|
exec pos network scan "$@"
|
||||||
Executable
+2
@@ -0,0 +1,2 @@
|
|||||||
|
#!/usr/bin/env bash
|
||||||
|
exec pos system firewall "$@"
|
||||||
@@ -0,0 +1,118 @@
|
|||||||
|
#!/usr/bin/env bash
|
||||||
|
# Bash completion for pos — dynamically discovers pos-* subcommands
|
||||||
|
# Install: source this file in ~/.bashrc or place in /etc/bash_completion.d/
|
||||||
|
|
||||||
|
_pos() {
|
||||||
|
local cur prev words cword
|
||||||
|
|
||||||
|
# Manual init if bash-completion package is not loaded
|
||||||
|
if declare -F _init_completion &>/dev/null; then
|
||||||
|
_init_completion || return
|
||||||
|
else
|
||||||
|
COMPREPLY=()
|
||||||
|
cur="${COMP_WORDS[COMP_CWORD]}"
|
||||||
|
prev="${COMP_WORDS[COMP_CWORD-1]}"
|
||||||
|
words=("${COMP_WORDS[@]}")
|
||||||
|
cword=$COMP_CWORD
|
||||||
|
fi
|
||||||
|
|
||||||
|
local pos_bin="${COMP_WORDS[0]}"
|
||||||
|
local pos_dir
|
||||||
|
pos_dir="$(dirname "$(command -v "$pos_bin" 2>/dev/null || echo "$pos_bin")")"
|
||||||
|
|
||||||
|
# ── Collect all pos-* subcommands ──────────────────────────
|
||||||
|
local all_cmds=()
|
||||||
|
local f
|
||||||
|
for f in "$pos_dir"/pos-*; do
|
||||||
|
[ -x "$f" ] || continue
|
||||||
|
all_cmds+=("${f##*/pos-}")
|
||||||
|
done
|
||||||
|
|
||||||
|
# ── Build category→subcommand map ──────────────────────────
|
||||||
|
local -A cat_cmds
|
||||||
|
for cmd in "${all_cmds[@]}"; do
|
||||||
|
local cat="${cmd%%-*}"
|
||||||
|
local sub="${cmd#*-}"
|
||||||
|
if [ "$cat" != "$cmd" ]; then
|
||||||
|
cat_cmds["$cat"]+="${sub} "
|
||||||
|
fi
|
||||||
|
done
|
||||||
|
|
||||||
|
# ── Helpers ────────────────────────────────────────────────
|
||||||
|
_pos_complete_categories() {
|
||||||
|
COMPREPLY=($(compgen -W "${!cat_cmds[*]}" -- "$cur"))
|
||||||
|
}
|
||||||
|
|
||||||
|
_pos_complete_subcats() {
|
||||||
|
local cat="${words[1]}"
|
||||||
|
COMPREPLY=($(compgen -W "${cat_cmds[$cat]:-}" -- "$cur"))
|
||||||
|
}
|
||||||
|
|
||||||
|
_pos_complete_compose_services() {
|
||||||
|
local scale_dir="/usr/local/share/mylinux/scale-tail/services"
|
||||||
|
if [ -d "$scale_dir" ]; then
|
||||||
|
local svcs=()
|
||||||
|
for d in "$scale_dir"/*/; do
|
||||||
|
[ -d "$d" ] && svcs+=("$(basename "$d")")
|
||||||
|
done
|
||||||
|
COMPREPLY=($(compgen -W "${svcs[*]}" -- "$cur"))
|
||||||
|
fi
|
||||||
|
}
|
||||||
|
|
||||||
|
_pos_complete_compose_cmds() {
|
||||||
|
COMPREPLY=($(compgen -W "ls installed up down restart logs update config" -- "$cur"))
|
||||||
|
}
|
||||||
|
|
||||||
|
_pos_complete_vbox_cmds() {
|
||||||
|
COMPREPLY=($(compgen -W "create enter stop start rm ls" -- "$cur"))
|
||||||
|
}
|
||||||
|
|
||||||
|
_pos_complete_docker_vbox_names() {
|
||||||
|
local names
|
||||||
|
names=$(docker ps -a --filter label=mylinux.vbox=true --format '{{.Names}}' 2>/dev/null)
|
||||||
|
COMPREPLY=($(compgen -W "$names" -- "$cur"))
|
||||||
|
}
|
||||||
|
|
||||||
|
# ── Dispatch ───────────────────────────────────────────────
|
||||||
|
case "${#words[@]}" in
|
||||||
|
2)
|
||||||
|
_pos_complete_categories
|
||||||
|
;;
|
||||||
|
3)
|
||||||
|
_pos_complete_subcats
|
||||||
|
;;
|
||||||
|
4)
|
||||||
|
case "${words[1]}-${words[2]}" in
|
||||||
|
docker-compose)
|
||||||
|
case "${words[3]}" in
|
||||||
|
up|down|restart|logs)
|
||||||
|
_pos_complete_compose_services
|
||||||
|
;;
|
||||||
|
*)
|
||||||
|
_pos_complete_compose_cmds
|
||||||
|
;;
|
||||||
|
esac
|
||||||
|
;;
|
||||||
|
vbox-*)
|
||||||
|
_pos_complete_vbox_cmds
|
||||||
|
;;
|
||||||
|
esac
|
||||||
|
;;
|
||||||
|
5)
|
||||||
|
case "${words[1]}-${words[2]}" in
|
||||||
|
docker-compose)
|
||||||
|
case "${words[3]}" in
|
||||||
|
up|down|restart|logs)
|
||||||
|
_pos_complete_compose_services
|
||||||
|
;;
|
||||||
|
esac
|
||||||
|
;;
|
||||||
|
vbox-create|vbox-enter|vbox-stop|vbox-start|vbox-rm)
|
||||||
|
_pos_complete_docker_vbox_names
|
||||||
|
;;
|
||||||
|
esac
|
||||||
|
;;
|
||||||
|
esac
|
||||||
|
}
|
||||||
|
|
||||||
|
complete -F _pos pos
|
||||||
@@ -0,0 +1 @@
|
|||||||
|
ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIK8u4mvN1oWUGjWZCjUT0742u6AJEIHfi+PAQgZuNnPv
|
||||||
Executable
+144
@@ -0,0 +1,144 @@
|
|||||||
|
#!/usr/bin/env bash
|
||||||
|
set -euo pipefail
|
||||||
|
|
||||||
|
# ── Parse --no-color BEFORE sourcing common.sh ──────────────────
|
||||||
|
NO_COLOR=0
|
||||||
|
for arg in "$@"; do
|
||||||
|
[ "$arg" = "--no-color" ] && NO_COLOR=1
|
||||||
|
done
|
||||||
|
if [ "$NO_COLOR" -eq 1 ]; then
|
||||||
|
export TERM=dumb
|
||||||
|
unset CYAN GREEN YELLOW RED BLUE BOLD RESET
|
||||||
|
fi
|
||||||
|
|
||||||
|
source "$(dirname "$0")/lib/common.sh"
|
||||||
|
|
||||||
|
DRY_RUN=0
|
||||||
|
RUN_APPS=0
|
||||||
|
SKIP_PHASES=""
|
||||||
|
STEPS_SPEC=""
|
||||||
|
|
||||||
|
usage() {
|
||||||
|
cat <<EOF
|
||||||
|
Usage: ./install.sh [OPTIONS]
|
||||||
|
|
||||||
|
Bootstrap a fresh Debian/Ubuntu install.
|
||||||
|
|
||||||
|
Options:
|
||||||
|
--apps Run interactive app picker after core install
|
||||||
|
--full Core install + all optional apps (non-interactive)
|
||||||
|
--dry-run Show what would be done without executing
|
||||||
|
--skip <phase> Skip a phase (repeatable):
|
||||||
|
preinstall, scripts, postinstall, scalepoint, apps
|
||||||
|
--steps <spec> Run only specific phases. Format: 1,3,4 or 1-3
|
||||||
|
(1=preinstall, 2=scripts, 3=postinstall, 4=scalepoint)
|
||||||
|
--no-color Disable colored output
|
||||||
|
-h, --help Show this help message
|
||||||
|
EOF
|
||||||
|
exit 0
|
||||||
|
}
|
||||||
|
|
||||||
|
while [[ $# -gt 0 ]]; do
|
||||||
|
case "$1" in
|
||||||
|
--apps) RUN_APPS=1; shift ;;
|
||||||
|
--full) RUN_APPS=2; shift ;;
|
||||||
|
--dry-run) DRY_RUN=1; shift ;;
|
||||||
|
--skip)
|
||||||
|
[ -z "${2:-}" ] && err "Missing value for --skip"
|
||||||
|
SKIP_PHASES="${SKIP_PHASES:+$SKIP_PHASES,}$2"
|
||||||
|
shift 2
|
||||||
|
;;
|
||||||
|
--steps)
|
||||||
|
[ -z "${2:-}" ] && err "Missing value for --steps"
|
||||||
|
STEPS_SPEC="$2"
|
||||||
|
shift 2
|
||||||
|
;;
|
||||||
|
--no-color) shift ;;
|
||||||
|
-h|--help) usage ;;
|
||||||
|
*) err "Unknown option: $1" ;;
|
||||||
|
esac
|
||||||
|
done
|
||||||
|
|
||||||
|
# ── Phase runner ────────────────────────────────────────────────
|
||||||
|
# Phase names → numbers: preinstall=1 scripts=2 postinstall=3 scalepoint=4
|
||||||
|
should_run() {
|
||||||
|
local phase_num="$1"
|
||||||
|
local phase_name="$2"
|
||||||
|
|
||||||
|
# --skip takes precedence
|
||||||
|
if [[ ",$SKIP_PHASES," == *",$phase_name,"* ]]; then
|
||||||
|
return 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
# --steps restricts to listed phases only
|
||||||
|
if [ -n "$STEPS_SPEC" ]; then
|
||||||
|
if [[ ",$STEPS_SPEC," != *",$phase_num,"* ]]; then
|
||||||
|
return 1
|
||||||
|
fi
|
||||||
|
fi
|
||||||
|
|
||||||
|
return 0
|
||||||
|
}
|
||||||
|
|
||||||
|
section "myLinux Bootstrap"
|
||||||
|
timer_start
|
||||||
|
|
||||||
|
# ── Phase 1: preinstall ────────────────────────────────────────
|
||||||
|
if should_run 1 preinstall; then
|
||||||
|
step 1 4 "Installing system packages"
|
||||||
|
if [ -f preinstall.sh ]; then
|
||||||
|
spawn "apt update" sudo apt update
|
||||||
|
bash preinstall.sh
|
||||||
|
fi
|
||||||
|
fi
|
||||||
|
|
||||||
|
# ── Phase 2: install wrappers ──────────────────────────────────
|
||||||
|
if should_run 2 scripts; then
|
||||||
|
step 2 4 "Installing wrapper scripts"
|
||||||
|
run sudo mkdir -p /usr/local/bin
|
||||||
|
count=0
|
||||||
|
for f in bin/*; do
|
||||||
|
[ -f "$f" ] || continue
|
||||||
|
run sudo install -m 755 "$f" /usr/local/bin/
|
||||||
|
count=$((count + 1))
|
||||||
|
done
|
||||||
|
run sudo install -m 644 lib/common.sh /usr/local/bin/common.sh
|
||||||
|
ok "$count scripts + lib -> /usr/local/bin"
|
||||||
|
fi
|
||||||
|
|
||||||
|
# ── Phase 3: postinstall ───────────────────────────────────────
|
||||||
|
if should_run 3 postinstall; then
|
||||||
|
step 3 4 "Post-install configuration"
|
||||||
|
if [ -f postinstall.sh ]; then
|
||||||
|
bash postinstall.sh
|
||||||
|
fi
|
||||||
|
fi
|
||||||
|
|
||||||
|
# ── Phase 4: ScaleTail templates ────────────────────────────────
|
||||||
|
if should_run 4 scalepoint; then
|
||||||
|
step 4 4 "Cloning ScaleTail templates"
|
||||||
|
scale_dest="/usr/local/share/mylinux/scale-tail"
|
||||||
|
if [ ! -d "$scale_dest" ]; then
|
||||||
|
spawn "Cloning ScaleTail" sudo git clone --depth 1 \
|
||||||
|
https://github.com/tailscale-dev/ScaleTail.git "$scale_dest"
|
||||||
|
else
|
||||||
|
log "ScaleTail already cloned"
|
||||||
|
fi
|
||||||
|
fi
|
||||||
|
|
||||||
|
echo
|
||||||
|
echo "${GREEN}════════════════════════════════════════════${RESET}"
|
||||||
|
echo "${GREEN} Bootstrap complete ($(timer_stop))${RESET}"
|
||||||
|
echo "${GREEN}════════════════════════════════════════════${RESET}"
|
||||||
|
|
||||||
|
# ── Optional apps ──────────────────────────────────────────────
|
||||||
|
if [ "$RUN_APPS" -eq 1 ]; then
|
||||||
|
echo
|
||||||
|
bash apps/install.sh
|
||||||
|
elif [ "$RUN_APPS" -eq 2 ]; then
|
||||||
|
echo
|
||||||
|
bash apps/install.sh --all
|
||||||
|
elif should_run 5 apps && [ -f apps/install.sh ]; then
|
||||||
|
# --skip apps disables app phase even if --apps/--full is not used
|
||||||
|
true
|
||||||
|
fi
|
||||||
+121
@@ -0,0 +1,121 @@
|
|||||||
|
# ── Colors (auto-off when not a TTY) ───────────────────────────
|
||||||
|
if [ -t 1 ]; then
|
||||||
|
CYAN=$(tput setaf 6)
|
||||||
|
GREEN=$(tput setaf 2)
|
||||||
|
YELLOW=$(tput setaf 3)
|
||||||
|
RED=$(tput setaf 1)
|
||||||
|
BLUE=$(tput setaf 4)
|
||||||
|
BOLD=$(tput bold)
|
||||||
|
RESET=$(tput sgr0)
|
||||||
|
else
|
||||||
|
CYAN=""; GREEN=""; YELLOW=""; RED=""; BLUE=""; BOLD=""; RESET=""
|
||||||
|
fi
|
||||||
|
|
||||||
|
# ── Core helpers ───────────────────────────────────────────────
|
||||||
|
log() { echo "${GREEN}[+]${RESET} $*"; }
|
||||||
|
warn() { echo "${YELLOW}[!]${RESET} $*"; }
|
||||||
|
err() { echo "${RED}ERROR:${RESET} $*" >&2; exit 1; }
|
||||||
|
ok() { echo "${GREEN} OK${RESET} $*"; }
|
||||||
|
|
||||||
|
# ── Section header ─────────────────────────────────────────────
|
||||||
|
section() {
|
||||||
|
local title="$*"
|
||||||
|
echo
|
||||||
|
echo "${CYAN}════════════════════════════════════════════${RESET}"
|
||||||
|
echo "${CYAN} ${title}${RESET}"
|
||||||
|
echo "${CYAN}════════════════════════════════════════════${RESET}"
|
||||||
|
}
|
||||||
|
|
||||||
|
# ── Step header (numbered) ─────────────────────────────────────
|
||||||
|
step() {
|
||||||
|
local current="$1" total="$2" msg="$3"
|
||||||
|
echo
|
||||||
|
echo "${BOLD} [${current}/${total}] ${msg}${RESET}"
|
||||||
|
echo "${BLUE} ─────────────────────────────────────────${RESET}"
|
||||||
|
}
|
||||||
|
|
||||||
|
# ── Dry-run aware executor ─────────────────────────────────────
|
||||||
|
run() {
|
||||||
|
if [ "${DRY_RUN:-0}" -eq 1 ]; then
|
||||||
|
log "(dry-run) $*"
|
||||||
|
else
|
||||||
|
"$@"
|
||||||
|
fi
|
||||||
|
}
|
||||||
|
|
||||||
|
# ── Internal: nanoseconds → formatted time string ─────────────
|
||||||
|
_nano_now() { date +%s%N; }
|
||||||
|
_elapsed() {
|
||||||
|
local start="$1" end
|
||||||
|
end=$(_nano_now)
|
||||||
|
local ms=$(( (end - start) / 1000000 ))
|
||||||
|
if [ "$ms" -ge 1000 ]; then
|
||||||
|
awk "BEGIN { printf \"%.1fs\", $ms / 1000 }"
|
||||||
|
elif [ "$ms" -ge 1 ]; then
|
||||||
|
echo "${ms}ms"
|
||||||
|
else
|
||||||
|
echo "0ms"
|
||||||
|
fi
|
||||||
|
}
|
||||||
|
|
||||||
|
# ── Timer ──────────────────────────────────────────────────────
|
||||||
|
TIMER_START=0
|
||||||
|
timer_start() { TIMER_START=$(_nano_now); }
|
||||||
|
timer_stop() { _elapsed "$TIMER_START"; }
|
||||||
|
|
||||||
|
# ── Timed command runner ───────────────────────────────────────
|
||||||
|
# Shows a spinner while the command runs in background,
|
||||||
|
# then prints result + elapsed time.
|
||||||
|
spawn() {
|
||||||
|
local msg="$1"
|
||||||
|
shift
|
||||||
|
local start
|
||||||
|
start=$(_nano_now)
|
||||||
|
|
||||||
|
# Run in background, capture output
|
||||||
|
local out err rc
|
||||||
|
out=$(mktemp)
|
||||||
|
err=$(mktemp)
|
||||||
|
"$@" >"$out" 2>"$err" &
|
||||||
|
local pid=$!
|
||||||
|
|
||||||
|
# Spinner
|
||||||
|
local spin=('⠋' '⠙' '⠹' '⠸' '⠼' '⠴' '⠦' '⠧' '⠇' '⠏')
|
||||||
|
local i=0
|
||||||
|
while kill -0 "$pid" 2>/dev/null; do
|
||||||
|
printf "\r${CYAN} %s${RESET} %s" "${spin[$i]}" "$msg"
|
||||||
|
i=$(( (i + 1) % ${#spin[@]} ))
|
||||||
|
sleep 0.1
|
||||||
|
done
|
||||||
|
rc=0; wait "$pid" || rc=$?
|
||||||
|
local elapsed
|
||||||
|
elapsed=$(_elapsed "$start")
|
||||||
|
|
||||||
|
if [ "$rc" -eq 0 ]; then
|
||||||
|
printf "\r${GREEN} OK${RESET} %s (${elapsed})\n" "$msg"
|
||||||
|
else
|
||||||
|
printf "\r${RED} FAIL${RESET} %s (${elapsed})\n" "$msg"
|
||||||
|
# Show captured stderr on failure
|
||||||
|
if [ -s "$err" ]; then
|
||||||
|
sed 's/^/ /' "$err"
|
||||||
|
fi
|
||||||
|
rm -f "$out" "$err"
|
||||||
|
exit "$rc"
|
||||||
|
fi
|
||||||
|
rm -f "$out" "$err"
|
||||||
|
}
|
||||||
|
|
||||||
|
# ── Confirmation prompt ────────────────────────────────────────
|
||||||
|
confirm() {
|
||||||
|
local prompt="$1" default="${2:-y}" yn
|
||||||
|
if [ "$default" = "y" ]; then
|
||||||
|
read -rp "${prompt} [Y/n]: " yn
|
||||||
|
[[ -z "$yn" || "$yn" =~ ^[Yy] ]]
|
||||||
|
else
|
||||||
|
read -rp "${prompt} [y/N]: " yn
|
||||||
|
[[ "$yn" =~ ^[Yy] ]]
|
||||||
|
fi
|
||||||
|
}
|
||||||
|
|
||||||
|
# ── Source guard ───────────────────────────────────────────────
|
||||||
|
return 0 2>/dev/null || true
|
||||||
Executable
+94
@@ -0,0 +1,94 @@
|
|||||||
|
#!/usr/bin/env bash
|
||||||
|
set -euo pipefail
|
||||||
|
source "$(dirname "$0")/lib/common.sh"
|
||||||
|
|
||||||
|
log "Running post-install..."
|
||||||
|
|
||||||
|
# ── rclone config ──────────────────────────────────────────────
|
||||||
|
# Place your rclone.conf in config/ (gitignored) and this will install it.
|
||||||
|
if [ -f config/rclone.conf ]; then
|
||||||
|
mkdir -p "$HOME/.config/rclone"
|
||||||
|
cp config/rclone.conf "$HOME/.config/rclone/rclone.conf"
|
||||||
|
chmod 600 "$HOME/.config/rclone/rclone.conf"
|
||||||
|
log "Installed rclone.conf"
|
||||||
|
else
|
||||||
|
warn "fail2ban not found, skipping"
|
||||||
|
fi
|
||||||
|
|
||||||
|
# ── Ensure all bin dirs are in PATH ────────────────────────────
|
||||||
|
PATH_LINE='export PATH="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$HOME/.local/bin:$PATH"'
|
||||||
|
BASHRC="$HOME/.bashrc"
|
||||||
|
|
||||||
|
if grep -qsF "$PATH_LINE" "$BASHRC" 2>/dev/null; then
|
||||||
|
log "PATH already configured"
|
||||||
|
else
|
||||||
|
echo "$PATH_LINE" >> "$BASHRC"
|
||||||
|
log "Added PATH to ~/.bashrc"
|
||||||
|
fi
|
||||||
|
|
||||||
|
# ── Bash completion for pos ─────────────────────────────────────
|
||||||
|
COMPLETION_LINE='source /usr/local/share/bash-completion/completions/pos.bash 2>/dev/null || true'
|
||||||
|
|
||||||
|
if grep -qsF "pos.bash" "$BASHRC" 2>/dev/null; then
|
||||||
|
log "pos completion already configured"
|
||||||
|
else
|
||||||
|
echo "$COMPLETION_LINE" >> "$BASHRC"
|
||||||
|
log "Added pos completion to ~/.bashrc"
|
||||||
|
fi
|
||||||
|
|
||||||
|
if [ -f completions/pos.bash ]; then
|
||||||
|
run sudo mkdir -p /usr/local/share/bash-completion/completions
|
||||||
|
run sudo install -m 644 completions/pos.bash \
|
||||||
|
/usr/local/share/bash-completion/completions/pos.bash
|
||||||
|
log "Installed pos completion"
|
||||||
|
else
|
||||||
|
warn "completions/pos.bash not found, skipping"
|
||||||
|
fi
|
||||||
|
|
||||||
|
<<<<<<< HEAD
|
||||||
|
# ── SSH authorized keys ────────────────────────────────────────
|
||||||
|
SSH_DIR="$HOME/.ssh"
|
||||||
|
AUTH_FILE="$SSH_DIR/authorized_keys"
|
||||||
|
KEY_FILE="config/authorized_keys"
|
||||||
|
|
||||||
|
if [ -f "$KEY_FILE" ]; then
|
||||||
|
mkdir -p "$SSH_DIR"
|
||||||
|
chmod 700 "$SSH_DIR"
|
||||||
|
touch "$AUTH_FILE"
|
||||||
|
chmod 600 "$AUTH_FILE"
|
||||||
|
|
||||||
|
added=0
|
||||||
|
while IFS= read -r key; do
|
||||||
|
[[ -z "$key" || "$key" == \#* ]] && continue
|
||||||
|
if grep -qsF "$key" "$AUTH_FILE" 2>/dev/null; then
|
||||||
|
log "SSH key already present"
|
||||||
|
else
|
||||||
|
echo "$key" >> "$AUTH_FILE"
|
||||||
|
added=$((added + 1))
|
||||||
|
fi
|
||||||
|
done < "$KEY_FILE"
|
||||||
|
if [ "$added" -gt 0 ]; then
|
||||||
|
log "Installed $added SSH key(s)"
|
||||||
|
fi
|
||||||
|
else
|
||||||
|
warn "config/authorized_keys not found, skipping SSH setup"
|
||||||
|
fi
|
||||||
|
|
||||||
|
=======
|
||||||
|
>>>>>>> bba577c (Initial commit)
|
||||||
|
# ── systemd services ───────────────────────────────────────────
|
||||||
|
if [ -d systemd ] && [ -n "$(ls -A systemd/*.service 2>/dev/null)" ]; then
|
||||||
|
run sudo cp systemd/*.service /etc/systemd/system/
|
||||||
|
run sudo systemctl daemon-reload
|
||||||
|
|
||||||
|
for svc in systemd/*.service; do
|
||||||
|
svc_name=$(basename "$svc")
|
||||||
|
run sudo systemctl enable --now "$svc_name" 2>/dev/null || \
|
||||||
|
run sudo systemctl enable "$svc_name"
|
||||||
|
done
|
||||||
|
log "Systemd services installed and enabled"
|
||||||
|
else
|
||||||
|
warn "No systemd services found, skipping"
|
||||||
|
fi
|
||||||
|
|
||||||
|
log "Post-install completed."
|
||||||
Executable
+52
@@ -0,0 +1,52 @@
|
|||||||
|
#!/usr/bin/env bash
|
||||||
|
set -euo pipefail
|
||||||
|
source "$(dirname "$0")/lib/common.sh"
|
||||||
|
|
||||||
|
DRY_RUN=0
|
||||||
|
|
||||||
|
usage() {
|
||||||
|
cat <<EOF
|
||||||
|
Usage: preinstall.sh [OPTIONS]
|
||||||
|
|
||||||
|
Install system packages and tools.
|
||||||
|
|
||||||
|
Options:
|
||||||
|
--dry-run Show what would be done without executing
|
||||||
|
-h, --help Show this help message
|
||||||
|
EOF
|
||||||
|
exit 0
|
||||||
|
}
|
||||||
|
|
||||||
|
while [[ $# -gt 0 ]]; do
|
||||||
|
case "$1" in
|
||||||
|
--dry-run) DRY_RUN=1; shift ;;
|
||||||
|
-h|--help) usage ;;
|
||||||
|
*) err "Unknown option: $1" ;;
|
||||||
|
esac
|
||||||
|
done
|
||||||
|
|
||||||
|
PACKAGES=(
|
||||||
|
git curl wget vim nano tmux tree jq
|
||||||
|
unzip zip rsync htop btop telnet
|
||||||
|
net-tools iputils-ping traceroute tcpdump nmap
|
||||||
|
openssh-client openssh-server ufw fail2ban
|
||||||
|
ca-certificates gnupg lsb-release
|
||||||
|
python3 python3-pip rclone
|
||||||
|
)
|
||||||
|
|
||||||
|
spawn "apt update" sudo apt update
|
||||||
|
spawn "Installing packages" sudo apt install -y "${PACKAGES[@]}"
|
||||||
|
#spawn "add user to sudo list" usermod -aG sudo $USER
|
||||||
|
spawn "Installing yt-dlp" sudo curl -L \
|
||||||
|
https://github.com/yt-dlp/yt-dlp/releases/latest/download/yt-dlp \
|
||||||
|
-o /usr/local/bin/yt-dlp
|
||||||
|
run sudo chmod a+rx /usr/local/bin/yt-dlp
|
||||||
|
|
||||||
|
log "Verifying installations..."
|
||||||
|
for cmd in git yt-dlp; do
|
||||||
|
if command -v "$cmd" &>/dev/null; then
|
||||||
|
run "$cmd" --version
|
||||||
|
fi
|
||||||
|
done
|
||||||
|
|
||||||
|
log "Pre-install completed."
|
||||||
@@ -0,0 +1,13 @@
|
|||||||
|
[Unit]
|
||||||
|
Description=My Linux Autostart Script
|
||||||
|
After=network-online.target
|
||||||
|
Wants=network-online.target
|
||||||
|
|
||||||
|
[Service]
|
||||||
|
Type=simple
|
||||||
|
ExecStart=/usr/local/bin/autostart.sh
|
||||||
|
Restart=on-failure
|
||||||
|
RestartSec=10
|
||||||
|
|
||||||
|
[Install]
|
||||||
|
WantedBy=multi-user.target
|
||||||
@@ -0,0 +1,14 @@
|
|||||||
|
[Unit]
|
||||||
|
Description=SSH Authentication Agent
|
||||||
|
After=network.target
|
||||||
|
|
||||||
|
[Service]
|
||||||
|
Type=simple
|
||||||
|
ExecStartPre=mkdir -p /run/ssh-agent
|
||||||
|
ExecStart=/usr/bin/ssh-agent -D -a /run/ssh-agent/socket
|
||||||
|
ExecStartPost=/bin/sh -c 'chmod 666 /run/ssh-agent/socket'
|
||||||
|
ExecStopPost=/bin/sh -c 'rm -f /run/ssh-agent/socket'
|
||||||
|
Restart=on-failure
|
||||||
|
|
||||||
|
[Install]
|
||||||
|
WantedBy=multi-user.target
|
||||||
Reference in New Issue
Block a user