forked from ss/sovereign-stack
62 lines
1.9 KiB
Bash
Executable File
62 lines
1.9 KiB
Bash
Executable File
#!/bin/bash
|
|
|
|
set -eu
|
|
cd "$(dirname "$0")"
|
|
|
|
# let's make sure we have an ssh keypair. We just use $SSH_HOME/id_rsa
|
|
# TODO convert this to SSH private key held on Trezor. THus trezor-T required for
|
|
# login operations. This should be configurable of course.
|
|
if [ ! -f "$SSH_HOME/id_rsa" ]; then
|
|
# generate a new SSH key for the base vm image.
|
|
ssh-keygen -f "$SSH_HOME/id_rsa" -t ecdsa -b 521 -N ""
|
|
fi
|
|
|
|
## This is a weird if clause since we need to LEFT-ALIGN the statement below.
|
|
SSH_STRING="Host ${FQDN}"
|
|
if ! grep -q "$SSH_STRING" "$SSH_HOME/config"; then
|
|
|
|
########## BEGIN
|
|
cat >> "$SSH_HOME/config" <<-EOF
|
|
|
|
${SSH_STRING}
|
|
HostName ${FQDN}
|
|
User ubuntu
|
|
EOF
|
|
###
|
|
|
|
fi
|
|
|
|
function prepare_host {
|
|
# scan the remote machine and install it's identity in our SSH known_hosts file.
|
|
ssh-keyscan -H -t ecdsa "$FQDN" >> "$SSH_HOME/known_hosts"
|
|
|
|
# create a directory to store backup archives. This is on all new vms.
|
|
ssh "$FQDN" mkdir -p "$REMOTE_HOME/backups"
|
|
|
|
# if this execution is for btcpayserver, then we run the stub/btcpay setup script
|
|
# but only if it hasn't been executed before.
|
|
if [ "$VIRTUAL_MACHINE" = btcpayserver ]; then
|
|
if [ "$(ssh "$BTCPAY_FQDN" [[ ! -f "$REMOTE_HOME/btcpay.complete" ]]; echo $?)" -eq 0 ]; then
|
|
./btcpayserver/stub_btcpay_setup.sh
|
|
fi
|
|
fi
|
|
|
|
}
|
|
|
|
ssh-keygen -f "$SSH_HOME/known_hosts" -R "$FQDN"
|
|
|
|
# if the machine doesn't exist, we create it.
|
|
if ! lxc list --format csv | grep -q "$LXD_VM_NAME"; then
|
|
|
|
# create a base image if needed and instantiate a VM.
|
|
if [ -z "$MAC_ADDRESS_TO_PROVISION" ]; then
|
|
echo "ERROR: You MUST define a MAC Address for all your machines by setting WWW_SERVER_MAC_ADDRESS, BTCPAYSERVER_MAC_ADDRESS in your site defintion."
|
|
echo "INFO: IMPORTANT! You MUST have DHCP Reservations for these MAC addresses. You also need records established the DNS."
|
|
exit 1
|
|
fi
|
|
|
|
./provision_lxc.sh
|
|
fi
|
|
|
|
prepare_host
|