GeezerVison is showing github.com — lowendscript/setup-debian.sh at master · XCodeAny/lowendscript

Expand file tree

setup-debian.sh

Copy path

More file actions

Latest commit

History

executable file

410 lines (364 loc) · 9.7 KB

setup-debian.sh

Copy path

File metadata and controls

executable file

410 lines (364 loc) · 9.7 KB

Raw

Copy raw file

Download raw file

Open symbols panel

Edit and raw actions

100

101

102

103

104

105

106

107

108

109

110

111

112

113

114

115

116

117

118

119

120

121

122

123

124

125

126

127

128

129

130

131

132

133

134

135

136

137

138

139

140

141

142

143

144

145

146

147

148

149

150

151

152

153

154

155

156

157

158

159

160

161

162

163

164

165

166

167

168

169

170

171

172

173

174

175

176

177

178

179

180

181

182

183

184

185

186

187

188

189

190

191

192

193

194

195

196

197

198

199

200

201

202

203

204

205

206

207

208

209

210

211

212

213

214

215

216

217

218

219

220

221

222

223

224

225

226

227

228

229

230

231

232

233

234

235

236

237

238

239

240

241

242

243

244

245

246

247

248

249

250

251

252

253

254

255

256

257

258

259

260

261

262

263

264

265

266

267

268

269

270

271

272

273

274

275

276

277

278

279

280

281

282

283

284

285

286

287

288

289

290

291

292

293

294

295

296

297

298

299

300

301

302

303

304

305

306

307

308

309

310

311

312

313

314

315

316

317

318

319

320

321

322

323

324

325

326

327

328

329

330

331

332

333

334

335

336

337

338

339

340

341

342

343

344

345

346

347

348

349

350

351

352

353

354

355

356

357

358

359

360

361

362

363

364

365

366

367

368

369

370

371

372

373

374

375

376

377

378

379

380

381

382

383

384

385

386

387

388

389

390

391

392

393

394

395

396

397

398

399

400

401

402

403

404

405

406

407

408

409

410

#!/bin/bash

function check_install {

if [ -z "`which "$1" 2>/dev/null`" ]

then

executable=$1

shift

while [ -n "$1" ]

DEBIAN_FRONTEND=noninteractive apt-get -q -y install "$1"

print_info "$1 installed for $executable"

shift

done

else

print_warn "$2 already installed"

}

function check_remove {

if [ -n "`which "$1" 2>/dev/null`" ]

then

DEBIAN_FRONTEND=noninteractive apt-get -q -y remove --purge "$2"

print_info "$2 removed"

else

print_warn "$2 is not installed"

}

function check_sanity {

# Do some sanity checking.

if [ $(/usr/bin/id -u) != "0" ]

then

die 'Must be run by root user'

if [ ! -f /etc/debian_version ]

then

die "Distribution is not supported"

}

function die {

echo "ERROR: $1" > /dev/null 1>&2

exit 1

}

function get_domain_name() {

# Getting rid of the lowest part.

domain=${1%.*}

lowest=`expr "$domain" : '.*\.$[a-z][a-z]*$'`

case "$lowest" in

com|net|org|gov|edu|co)

domain=${domain%.*}

;;

esac

lowest=`expr "$domain" : '.*\.$[a-z][a-z]*$'`

[ -z "$lowest" ] && echo "$domain" || echo "$lowest"

}

function get_password() {

# Check whether our local salt is present.

SALT=/var/lib/radom_salt

if [ ! -f "$SALT" ]

then

head -c 512 /dev/urandom > "$SALT"

chmod 400 "$SALT"

password=`(cat "$SALT"; echo $1) | md5sum | base64`

echo ${password:0:13}

}

function install_dash {

check_install dash dash

rm -f /bin/sh

ln -s dash /bin/sh

}

function install_dropbear {

check_install dropbear dropbear

check_install /usr/sbin/xinetd xinetd

# Disable SSH

touch /etc/ssh/sshd_not_to_be_run

invoke-rc.d ssh stop

# Enable dropbear to start. We are going to use xinetd as it is just

# easier to configure and might be used for other things.

cat > /etc/xinetd.d/dropbear <<END

service ssh

{

socket_type = stream

only_from = 0.0.0.0

wait = no

user = root

protocol = tcp

server = /usr/sbin/dropbear

server_args = -i

disable = no

}

END

invoke-rc.d xinetd restart

}

function install_exim4 {

check_install mail exim4

if [ -f /etc/exim4/update-exim4.conf.conf ]

then

sed -i \

"s/dc_eximconfig_configtype='local'/dc_eximconfig_configtype='internet'/" \

/etc/exim4/update-exim4.conf.conf

invoke-rc.d exim4 restart

}

function install_mysql {

# Install the MySQL packages

check_install mysqld mysql-server

check_install mysql mysql-client

# Install a low-end copy of the my.cnf to disable InnoDB, and then delete

# all the related files.

invoke-rc.d mysql stop

rm -f /var/lib/mysql/ib*

cat > /etc/mysql/conf.d/lowendbox.cnf <<END

[mysqld]

key_buffer = 8M

query_cache_size = 0

skip-innodb

END

invoke-rc.d mysql start

# Generating a new password for the root user.

passwd=`get_password root@mysql`

mysqladmin password "$passwd"

cat > ~/.my.cnf <<END

[client]

user = root

password = $passwd

END

chmod 600 ~/.my.cnf

}

function install_nginx {

check_install nginx nginx

# Need to increase the bucket size for Debian 5.

cat > /etc/nginx/conf.d/lowendbox.conf <<END

server_names_hash_bucket_size 64;

END

invoke-rc.d nginx restart

}

function install_php {

check_install php-cgi php5-cgi php5-cli php5-mysql

cat > /etc/init.d/php-cgi <<END

#!/bin/bash

### BEGIN INIT INFO

# Provides: php-cgi

# Required-Start: networking

# Required-Stop: networking

# Default-Start: 2 3 4 5

# Default-Stop: 0 1 6

# Short-Description: Start the PHP FastCGI processes web server.

### END INIT INFO

PATH=/sbin:/bin:/usr/sbin:/usr/bin

NAME="php-cgi"

DESC="php-cgi"

PIDFILE="/var/run/www/php.pid"

FCGIPROGRAM="/usr/bin/php-cgi"

FCGISOCKET="/var/run/www/php.sock"

FCGIUSER="www-data"

FCGIGROUP="www-data"

if [ -e /etc/default/php-cgi ]

then

source /etc/default/php-cgi

[ -z "\$PHP_FCGI_CHILDREN" ] && PHP_FCGI_CHILDREN=1

[ -z "\$PHP_FCGI_MAX_REQUESTS" ] && PHP_FCGI_MAX_REQUESTS=5000

ALLOWED_ENV="PATH USER PHP_FCGI_CHILDREN PHP_FCGI_MAX_REQUESTS FCGI_WEB_SERVER_ADDRS"

set -e

. /lib/lsb/init-functions

case "\$1" in

start)

unset E

for i in \${ALLOWED_ENV}; do

E="\${E} \${i}=\${!i}"

done

log_daemon_msg "Starting \$DESC" \$NAME

env - \${E} start-stop-daemon --start -x \$FCGIPROGRAM -p \$PIDFILE \\

-c \$FCGIUSER:\$FCGIGROUP -b -m -- -b \$FCGISOCKET

log_end_msg 0

;;

stop)

log_daemon_msg "Stopping \$DESC" \$NAME

if start-stop-daemon --quiet --stop --oknodo --retry 30 \\

--pidfile \$PIDFILE --exec \$FCGIPROGRAM

then

rm -f \$PIDFILE

log_end_msg 0

else

log_end_msg 1

;;

restart|force-reload)

\$0 stop

sleep 1

\$0 start

;;

echo "Usage: \$0 {start|stop|restart|force-reload}" >&2

exit 1

;;

esac

exit 0

END

chmod 755 /etc/init.d/php-cgi

mkdir -p /var/run/www

chown www-data:www-data /var/run/www

cat > /etc/nginx/fastcgi_php <<END

location ~ \.php$ {

include /etc/nginx/fastcgi_params;

fastcgi_index index.php;

fastcgi_param SCRIPT_FILENAME \$document_root\$fastcgi_script_name;

if (-f \$request_filename) {

fastcgi_pass unix:/var/run/www/php.sock;

}

END

update-rc.d php-cgi defaults

invoke-rc.d php-cgi start

}

function install_syslogd {

# We just need a simple vanilla syslogd. Also there is no need to log to

# so many files (waste of fd). Just dump them into

# /var/log/(cron/mail/messages)

check_install /usr/sbin/syslogd inetutils-syslogd

invoke-rc.d inetutils-syslogd stop

for file in /var/log/*.log /var/log/mail.* /var/log/debug /var/log/syslog

[ -f "$file" ] && rm -f "$file"

done

for dir in fsck news

[ -d "/var/log/$dir" ] && rm -rf "/var/log/$dir"

done

cat > /etc/syslog.conf <<END

*.*;mail.none;cron.none -/var/log/messages

cron.* -/var/log/cron

mail.* -/var/log/mail

END

[ -d /etc/logrotate.d ] || mkdir -p /etc/logrotate.d

cat > /etc/logrotate.d/inetutils-syslogd <<END

/var/log/cron

/var/log/mail

/var/log/messages {

rotate 4

weekly

missingok

notifempty

compress

sharedscripts

postrotate

/etc/init.d/inetutils-syslogd reload >/dev/null

endscript

}

END

invoke-rc.d inetutils-syslogd start

}

function install_wordpress {

check_install wget wget

if [ -z "$1" ]

then

die "Usage: `basename $0` wordpress <hostname>"

# Downloading the WordPress' latest and greatest distribution.

mkdir /tmp/wordpress.$$

wget -O - http://wordpress.org/latest.tar.gz | \

tar zxf - -C /tmp/wordpress.$$

mv /tmp/wordpress.$$/wordpress "/var/www/$1"

rm -rf /tmp/wordpress.$$

chown root:root -R "/var/www/$1"

# Setting up the MySQL database

dbname=`echo $1 | tr . _`

userid=`get_domain_name $1`

# MySQL userid cannot be more than 15 characters long

userid="${userid:0:15}"

passwd=`get_password "$userid@mysql"`

cp "/var/www/$1/wp-config-sample.php" "/var/www/$1/wp-config.php"

sed -i "s/database_name_here/$dbname/; s/username_here/$userid/; s/password_here/$passwd/" \

"/var/www/$1/wp-config.php"

mysqladmin create "$dbname"

echo "GRANT ALL PRIVILEGES ON \`$dbname\`.* TO \`$userid\`@localhost IDENTIFIED BY '$passwd';" | \

mysql

# Setting up Nginx mapping

cat > "/etc/nginx/sites-enabled/$1.conf" <<END

server {

server_name $1;

root /var/www/$1;

include /etc/nginx/fastcgi_php;

location / {

index index.php;

if (!-e \$request_filename) {

rewrite ^(.*)$ /index.php last;

}

END

invoke-rc.d nginx reload

}

function print_info {

echo -n -e '\e[1;36m'

echo -n $1

echo -e '\e[0m'

}

function print_warn {

echo -n -e '\e[1;33m'

echo -n $1

echo -e '\e[0m'

}

function remove_unneeded {

# Some Debian have portmap installed. We don't need that.

check_remove /sbin/portmap portmap

# Remove rsyslogd, which allocates ~30MB privvmpages on an OpenVZ system,

# which might make some low-end VPS inoperatable. We will do this even

# before running apt-get update.

check_remove /usr/sbin/rsyslogd rsyslog

# Other packages that seem to be pretty common in standard OpenVZ

# templates.

check_remove /usr/sbin/apache2 'apache2*'

check_remove /usr/sbin/named bind9

check_remove /usr/sbin/smbd 'samba*'

check_remove /usr/sbin/nscd nscd

# Need to stop sendmail as removing the package does not seem to stop it.

if [ -f /usr/lib/sm.bin/smtpd ]

then

invoke-rc.d sendmail stop

check_remove /usr/lib/sm.bin/smtpd 'sendmail*'

}

function update_upgrade {

# Run through the apt-get update/upgrade first. This should be done before

# we try to install any package

apt-get -q -y update

apt-get -q -y upgrade

}

########################################################################

# START OF PROGRAM

########################################################################

export PATH=/bin:/usr/bin:/sbin:/usr/sbin

check_sanity

case "$1" in

exim4)

install_exim4

;;

mysql)

install_mysql

;;

nginx)

install_nginx

;;

php)

install_php

;;

system)

remove_unneeded

update_upgrade

install_dash

install_syslogd

install_dropbear

;;

wordpress)

install_wordpress $2

;;

echo 'Usage:' `basename $0` '[option]'

echo 'Available option:'

for option in system exim4 mysql nginx php wordpress

echo ' -' $option

done

;;

esac