1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
|
#!/usr/bin/env bash
BIN_PATH_INSTALLED="/usr/local/bin/crowdsec-custom-bouncer"
BIN_PATH="./crowdsec-custom-bouncer"
CONFIG_DIR="/etc/crowdsec/bouncers/"
PID_DIR="/var/run/crowdsec/"
SYSTEMD_PATH_FILE="/etc/systemd/system/crowdsec-custom-bouncer.service"
API_KEY=""
BINARY_PATH=""
usage() {
echo "Usage: ./install.sh [options]"
echo " -h|--help Display this help message."
echo " -b|--binary <path> Specify the binary path"
exit 0
}
while [[ $# -gt 0 ]]
do
key="${1}"
case ${key} in
-b|--binary)
if ! [ -f "${2}" ]; then
echo "${key} need a path"
usage
exit 1
fi
BINARY_PATH="$2"
shift # past argument
BINARY_PATH=$(readlink -f $BINARY_PATH)
shift
;;
-h|--help)
usage
exit 0
;;
*) # unknown option
echo "Unknown argument ${key}."
usage
exit 1
;;
esac
done
gen_apikey() {
which cscli > /dev/null
if [[ $? == 0 ]]; then
echo "cscli found, generating bouncer api key."
SUFFIX=`tr -dc A-Za-z0-9 </dev/urandom | head -c 8`
API_KEY=`cscli bouncers add crowdsec-custom-bouncer-${SUFFIX} -o raw`
READY="yes"
else
echo "cscli not found, you will need to generate api key."
READY="no"
fi
}
gen_binary_path() {
echo "Absolute path to your custom binary:"
read BINARY_PATH
if [[ ${answer} == "" ]]; then
return
fi
}
install_custom_bouncer() {
install -v -m 755 -D "${BIN_PATH}" "${BIN_PATH_INSTALLED}"
mkdir -p "${CONFIG_DIR}"
cp "./config/crowdsec-custom-bouncer.yaml" "${CONFIG_DIR}crowdsec-custom-bouncer.yaml"
CFG=${CONFIG_DIR} PID=${PID_DIR} BIN=${BIN_PATH_INSTALLED} envsubst < ./config/crowdsec-custom-bouncer.service > "${SYSTEMD_PATH_FILE}"
systemctl daemon-reload
}
gen_config_file() {
API_KEY=${API_KEY} BINARY_PATH=${BINARY_PATH} envsubst < ./config/crowdsec-custom-bouncer.yaml > "${CONFIG_DIR}crowdsec-custom-bouncer.yaml"
}
if ! [ $(id -u) = 0 ]; then
echo "Please run the install script as root or with sudo"
exit 1
fi
echo "Installing crowdsec-custom-bouncer"
install_custom_bouncer
gen_apikey
if ! [ -f "$BINARY_PATH" ]; then
gen_binary_path
fi
gen_config_file
systemctl enable crowdsec-custom-bouncer.service
if ! [ -f "$BINARY_PATH" ]; then
echo "$BINARY_PATH doesn't exist, can't start crowdsec-custom-bouncer service."
echo "Please edit ${CONFIG_DIR}crowdsec-custom-bouncer.yaml with a real binary path and run 'sudo systemctl start crowdsec-custom-bouncer'."
exit 1
fi
if [ "$READY" = "yes" ]; then
systemctl start crowdsec-custom-bouncer.service
else
echo "service not started. You need to get an API key and configure it in ${CONFIG_DIR}crowdsec-custom-bouncer.yaml and then run systemctl start crowdsec-custom-bouncer.service"
fi
echo "crowdsec-custom-bouncer service has been installed!"
|
