debian-config-jobs 57.6 KB
Newer Older
Igor Pecovnik's avatar
Igor Pecovnik committed
1
2
#!/bin/bash
#
3
#
Igor Pecovnik's avatar
Igor Pecovnik committed
4
5
6
7
8
9
# Copyright (c) 2017 Igor Pecovnik, igor.pecovnik@gma**.com
#
# This file is licensed under the terms of the GNU General Public
# License version 2. This program is licensed "as is" without any
# warranty of any kind, whether express or implied.

ThomasKaiser's avatar
ThomasKaiser committed
10
[[ -n ${SUDO_USER} ]] && SUDO="sudo "
Igor Pecovnik's avatar
Igor Pecovnik committed
11
12
13

function jobs ()
{
Igor Pecovnik's avatar
Igor Pecovnik committed
14
15
16
	# Shows box with loading ...
	#
	dialog --backtitle "$BACKTITLE" --title " Please wait " --infobox "\nLoading ${selection,,} submodule ... " 5 $((26+${#selection}))
17
18
19

	unset selection

Igor Pecovnik's avatar
Igor Pecovnik committed
20
21
22
23
24
25
26
27
	case $1 in

	#-------------------------------------------------------------------------------------------------------------------------------------#


	# Application installer
	#
	"Softy" )
Igor Pecovnik's avatar
Igor Pecovnik committed
28
		[[ -f softy ]] && ./softy || softy
Igor Pecovnik's avatar
Igor Pecovnik committed
29
30
	;;

31
32
	# Remove BT
	#
33
	"BT remove" )
34
35
36
37
38
		if ! is_package_manager_running; then
			debconf-apt-progress -- apt-get -y remove bluetooth bluez bluez-tools
			check_if_installed xserver-xorg && debconf-apt-progress -- apt-get -y remove pulseaudio-module-bluetooth blueman
			debconf-apt-progress -- apt -y -qq autoremove
		fi
39
40
41
42
	;;

	# Enabling BT
	#
43
	"BT install" )
44
		if ! is_package_manager_running; then
45
46
47
			debconf-apt-progress -- apt-get -y install bluetooth bluez bluez-tools
			check_if_installed xserver-xorg && debconf-apt-progress -- apt-get -y --no-install-recommends install pulseaudio-module-bluetooth blueman
		fi
48
49
50
51
52
	;;

	# Removing IR
	#
	"Remove IR" )
53
54
55
56
		if ! is_package_manager_running; then
			debconf-apt-progress -- apt-get -y remove lirc
			debconf-apt-progress -- apt -y -qq autoremove
		fi
57
58
59
60
61
	;;

	# Enabling IR
	#
	"IR" )
62
63
64
		if ! is_package_manager_running; then
			debconf-apt-progress -- apt-get -y --no-install-recommends install lirc
		fi
65
66
	;;

Igor Pecovnik's avatar
Igor Pecovnik committed
67
68
69
70
71
72
73
74
75
76
77
78
79
80

	# Sharing USB ports
	#
	"USB redirector" )
		if [[ -n $(netstat -lnt | awk '$6 == "LISTEN" && $4 ~ ".'32032'"') ]]; then
			[[ -f /usr/local/usb-redirector/uninstall.sh ]] && /usr/local/usb-redirector/uninstall.sh uninstall
			rm -f /usr/local/bin/usbclnt
		else
			TARGET_BRANCH=$BRANCH
			exceptions "$BRANCH"
			IFS='.' read -a array <<< $(uname -r)
			[[ -z $(dpkg -l | grep linux-headers) ]] && debconf-apt-progress -- apt-get -y \
			install linux-headers${TARGET_BRANCH}-${TARGET_FAMILY}
			if (( "${array[0]}" == "4" )) && (( "${array[1]}" >= "1" )); then
81
82
83
				rm -rf /usr/src/usb-redirector-linux-arm-gnueabi
				wget -qO- https://www.incentivespro.com/usb-redirector-linux-arm-gnueabi.tar.gz | tar xz -C /usr/src
				cd /usr/src/usb-redirector-linux-arm-gnueabi/
Igor Pecovnik's avatar
Igor Pecovnik committed
84
			else
85
				rm -rf /usr/src/usb-redirector-linux-arm-eabi
Igor Pecovnik's avatar
Igor Pecovnik committed
86
87
				wget -qO- https://raw.githubusercontent.com/armbian/build/master/packages/blobs/usb-redirector/usb-redirector-old.tgz \
				| tar xz -C /usr/src
88
				cd /usr/src/usb-redirector-linux-arm-eabi/
Igor Pecovnik's avatar
Igor Pecovnik committed
89
90
91
92
93
94
95
96
97
98
99
100
			fi
			./installer.sh install
			sleep 3
			check_port "32032" "USB Redirector"
		fi
	;;


	# Simple CLI monitoring
	#
	"Monitor" )
		clear
ThomasKaiser's avatar
ThomasKaiser committed
101
102
		armbianmonitor -m
		sleep 2
Igor Pecovnik's avatar
Igor Pecovnik committed
103
104
	;;

Aristo Chen's avatar
Aristo Chen committed
105
106
107
	# SBC-becn
	#
	"Benchmarking" )
Igor Pecovnik's avatar
Igor Pecovnik committed
108
109
110
111
112
		if [[ ! -f /usr/local/bin/sbc-benc ]]; then
			wget -q -O /usr/local/bin/sbc-bench https://raw.githubusercontent.com/ThomasKaiser/sbc-bench/master/sbc-bench.sh
			chmod +x /usr/local/bin/sbc-bench
		fi
		sbc-bench
Igor Pečovnik's avatar
Igor Pečovnik committed
113
114
		echo ""
		read -n 1 -s -p "Press any key to continue"
Aristo Chen's avatar
Aristo Chen committed
115
	;;
Igor Pecovnik's avatar
Igor Pecovnik committed
116

Igor Pecovnik's avatar
Igor Pecovnik committed
117

Igor Pecovnik's avatar
Igor Pecovnik committed
118
119
120
121
122
123
124
125
126
127
	# Send diagnostics
	#
	"Diagnostics" )
		clear
		armbianmonitor -u
		echo ""
		read -n 1 -s -p "Press any key to continue"
	;;


Igor Pecovnik's avatar
Igor Pecovnik committed
128
129
130
	# Control board consumption
	#
	"Consumption" )
131
		clear
Igor Pecovnik's avatar
Igor Pecovnik committed
132
		h3consumption
ThomasKaiser's avatar
ThomasKaiser committed
133
		echo -e "\nType \e[92m${SUDO}${0##*/}\e[0m to get back\n"
Igor Pecovnik's avatar
Igor Pecovnik committed
134
135
136
137
138
139
140
		exit
	;;


	# Board (fex) settings editor
	#
	"Fexedit" )
141
142
143
144
145
		exec 3>&1
		monitor=$(dialog --print-maxsize 2>&1 1>&3)
		exec 3>&-
		mon_x=$(echo $monitor | awk '{print $2}' | sed 's/,//')
		mon_y=$(echo $monitor | awk '{print $3}' | sed 's/,//')
Igor Pecovnik's avatar
Igor Pecovnik committed
146
147
148
149
		TEMP=$(mktemp -d || exit 1)
		trap "rm -rf \"${TEMP}\" ; exit 0" 0 1 2 3 15
		bin2fex /boot/script.bin ${TEMP}/tempfex.txt >/dev/null 2>&1
		dialog --title "Edit u-boot environment" \
150
		--ok-label "Save" --no-collapse --editbox ${TEMP}/tempfex.txt $mon_y 0 2> ${TEMP}/tempfex.out
Igor Pecovnik's avatar
Igor Pecovnik committed
151
152
153
154
		[[ $? = 0 ]] && fex2bin ${TEMP}/tempfex.out /boot/script.bin
	;;


155
156
157


	#
Igor Pecovnik's avatar
Igor Pecovnik committed
158
159
	# Install kernel headers
	#
160
	"Headers_install" )
161
		if ! is_package_manager_running; then
Igor Pečovnik's avatar
Bugfix    
Igor Pečovnik committed
162
			if [[ -f /etc/armbian-release ]]; then
163
				INSTALL_PKG="linux-headers-${BRANCH}-${LINUXFAMILY}";
164
165
166
				else
				INSTALL_PKG="linux-headers-$(uname -r | sed 's/'-$(dpkg --print-architecture)'//')";
			fi
167
			debconf-apt-progress -- apt-get -y install ${INSTALL_PKG}
Igor Pecovnik's avatar
Igor Pecovnik committed
168
169
170
171
		fi
	;;


172
	#
Aristo Chen's avatar
Aristo Chen committed
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
	# Remove kernel headers
	#
	"Headers_remove" )
		if ! is_package_manager_running; then
			REMOVE_PKG="linux-headers-*"
			if [[ -n $(dpkg -l | grep linux-headers) ]]; then
				debconf-apt-progress -- apt-get -y purge ${REMOVE_PKG}
				rm -rf /usr/src/linux-headers*
			else
				debconf-apt-progress -- apt-get -y install ${INSTALL_PKG}
			fi
			# cleanup
			apt clean
			debconf-apt-progress -- apt -y autoremove
		fi
	;;
189
190


Igor Pecovnik's avatar
Igor Pecovnik committed
191
	#
root's avatar
root committed
192
193
	# Install kernel source
	#
194
	"Source_install" )
Aristo Chen's avatar
Aristo Chen committed
195
		if ! is_package_manager_running; then
196

197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
			if [[ -z $scripted ]]; then
				LIST=()
				for pkg in $SOURCE_PKG_LIST
				do
					LIST+=( "$pkg" "" )
				done

				exec 3>&1
				selection=$(dialog --backtitle "$BACKTITLE" --title "Kernel install" --clear --cancel-label "Back" \
				--menu "Choose kernel version" 12 70 ${#LIST[@]} "${LIST[@]}" 2>&1 1>&3)
				exit_status=$?
				exec 3>&-
				[[ $exit_status == 1 || $exit_status == 255 ]] && clear
			else
				selection=$(echo $SOURCE_PKG_LIST | awk '{ print $NF }')
			fi

			PACKAGE=$(echo "$selection" | sed "s/-current//" | sed "s/-dev//" | sed "s/-legacy//")
			if [[ -n $PACKAGE ]]; then
				debconf-apt-progress -- apt-get -y install ${selection}
Aristo Chen's avatar
Aristo Chen committed
217
218
219
220
221
222
223
224
				mkdir -p /usr/src/$PACKAGE
				(pv -n /usr/src/$PACKAGE".tar.xz" | xz -d -T0 - | tar xf - -C /usr/src/$PACKAGE ) 2>&1 | dialog --colors --backtitle "$BACKTITLE" --title " Please wait! " --gauge "\nDecompressing kernel sources to /usr/src/$PACKAGE" 8 80
				xz -d /usr/src/*config.xz --stdout > /usr/src/$PACKAGE/.config
				rm /usr/src/$PACKAGE".tar.xz" /usr/src/*config.xz
				apt clean
				debconf-apt-progress -- apt-get -y purge linux-source*
				debconf-apt-progress -- apt -y autoremove
				if [[ -z $scripted ]]; then
225
					dialog --colors --backtitle "$BACKTITLE" --no-collapse --title " Kernel source " --clear --msgbox "\nYou will find pre-configured kernel sources in /usr/src/$PACKAGE" 7 72
Aristo Chen's avatar
Aristo Chen committed
226
				fi
227
228
			else
				dialog --backtitle "$BACKTITLE" --title " Please wait " --infobox "\nLoading software submodule ... " 5 34
Aristo Chen's avatar
Aristo Chen committed
229
			fi
230
		fi
Aristo Chen's avatar
Aristo Chen committed
231
	;;
Igor Pecovnik's avatar
Igor Pecovnik committed
232
233
234



Aristo Chen's avatar
Aristo Chen committed
235
236
237
238
239
	#
	# Remove kernel source
	#
	"Source_remove" )
		if ! is_package_manager_running; then
240

241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
			if [[ -z $scripted ]]; then
				LIST=()
				for pkg in $SOURCE_PKG_LIST_INSTALLED
				do
					LIST+=( "$pkg" "" )
				done

				exec 3>&1
				selection=$(dialog --backtitle "$BACKTITLE" --title "Kernel remove" --clear --cancel-label "Back" \
				--menu "Choose kernel version" 12 70 ${#LIST[@]} "${LIST[@]}" 2>&1 1>&3)
				exit_status=$?
				exec 3>&-
				[[ $exit_status == 1 || $exit_status == 255 ]] && clear
			else
				selection=$(echo $SOURCE_PKG_LIST_INSTALLED | awk '{ print $NF }')
			fi

			if [[ -n $selection ]]; then
				PACKAGE="linux-source-$(echo $selection | sed 's/[-|(|[:alpha:]|(|[:space:]|(|/]//g')-${BRANCH}-${LINUXFAMILY}"
				if ls $selection 1> /dev/null 2>&1; then
					debconf-apt-progress -- apt-get -y purge $PACKAGE
Aristo Chen's avatar
Aristo Chen committed
262
263
					debconf-apt-progress -- apt -y autoremove
					apt clean
264
265
					dialog --backtitle "$BACKTITLE" --title " Please wait " --infobox "\nRemoving $selection ... " 5 72
					rm -r $selection
Aristo Chen's avatar
Aristo Chen committed
266
				fi
267
268
269
270
271
				if [[ -z $scripted ]]; then
					dialog --colors --backtitle "$BACKTITLE" --no-collapse --title " Kernel source " --clear --msgbox "\n$selection removed" 7 72
				fi
			else
				dialog --backtitle "$BACKTITLE" --title " Please wait " --infobox "\nLoading software submodule ... " 5 34
Aristo Chen's avatar
Aristo Chen committed
272
273
274
			fi
		fi
	;;
275
276


Igor Pecovnik's avatar
Igor Pecovnik committed
277

278
279
280
281
	# Toggle mini and full firmware
	#
	"Full"|"Mini" )
		if ! is_package_manager_running; then
JC Staudt's avatar
JC Staudt committed
282
			debconf-apt-progress -- apt-get -y purge armbian-firmware* # workaround since pkg replace doesn't work properly
Igor Pecovnik's avatar
Igor Pecovnik committed
283
			debconf-apt-progress -- apt-get -y install armbian-firmware$(echo -"${1,,}" | sed 's/-mini//')
284
285
286
287
		fi
	;;


Igor Pecovnik's avatar
Igor Pecovnik committed
288
289
290
	# Set the display resolution
	#
	"Display" )
291
		# show display modes menu
292
293
294
		if [[ -f /usr/bin/h3disp ]]; then
			# h3 boards
			get_h3modes
295
			dialog --title " Display output type " --colors --help-button --help-label "Cancel" --no-label "DVI" --yes-label "HDMI" \
296
297
298
299
300
301
302
303
304
			--backtitle "$BACKTITLE" --yesno "\nIn case you use an HDMI-to-DVI converter choose DVI!" 7 57
			output_type=$?
			if [[ $output_type = 0 || $output_type = 1 ]]; then
				if [[ $output_type = 0 ]]; then
					display_cmd="h3disp -m $SCREEN_RESOLUTION";
					else
					display_cmd="h3disp -m $SCREEN_RESOLUTION -d";
				fi

305

306
			fi
307
		elif [[ "$LINUXFAMILY" = odroidc* || "$LINUXFAMILY" = odroidn2 ]]; then
308
309
			get_odroidmodes
			display_cmd="sed -i \"s/^setenv m .*/# &/\" /boot/boot.ini;sed -i '/setenv m \"$SCREEN_RESOLUTION\"/s/^# //g' /boot/boot.ini";
310
311
			# odroid n2
			display_cmd='sed -i "s/^setenv hdmimode .*/setenv hdmimode \"$SCREEN_RESOLUTION\"/" /boot/boot.ini; sed -i "s/^setenv display_autodetect .*/setenv display_autodetect \"false\"/" /boot/boot.ini';
312
313
314
315
316
317
		else
			# a20 boards
			get_a20modes
			display_cmd="sed -i \"s/^disp_mode=.*/disp_mode=$SCREEN_RESOLUTION/\" /boot/armbianEnv.txt";
		fi

318
		dialog --title " Display resolution " --colors --no-label "Cancel" --backtitle "$BACKTITLE" --yesno \
319
320
321
322
		"\nSwitching to \Z1$SCREEN_RESOLUTION\Z0 and reboot?" 7 42
		if [[ $? = 0 ]]; then
			eval $display_cmd > /dev/null
			reboot
323
		fi
Igor Pecovnik's avatar
Igor Pecovnik committed
324
325
326
327
328
329
330
331
332
	;;


	#-------------------------------------------------------------------------------------------------------------------------------------#
	#-------------------------------------------------------------------------------------------------------------------------------------#
	#-------------------------------------------------------------------------------------------------------------------------------------#



Igor Pecovnik's avatar
RC1    
Igor Pecovnik committed
333
334
335
	# Select dynamic or edit static IP address
	#
	"IP" )
336
			select_interface
337
338
			# check if we have systemd networking in action
			SYSTEMDNET=$(service systemd-networkd status | grep -w active | grep -w running)
339
340
			dialog --title " IP address assignment " --colors --backtitle "$BACKTITLE" --help-button --help-label "Cancel" \
			--yes-label "DHCP" --no-label "Static" --yesno \
JC Staudt's avatar
JC Staudt committed
341
			"\n\Z1DHCP:\Z0   automatic IP assignment by your router or DHCP server\n\n\Z1Static:\Z0 manually fixed IP address" 9 70
342
			exitstatus=$?;
343
344

			# dynamic
345
			if [[ $exitstatus = 0 ]]; then
346
				if [[ -n $SYSTEMDNET ]]; then
347
					filename="/etc/systemd/network/10-${SELECTED_ADAPTER}.network"
348
349
350
351
352
353
					if [[ -f $filename ]]; then
						sed -i '/Network/,$d' $filename
						echo -e "[Network]" >>$filename
						echo -e "DHCP=ipv4" >>$filename
					fi
				else
354
355
356
					if [[ -n $(LC_ALL=C nmcli device status | grep $SELECTED_ADAPTER ) ]]; then
						nmcli connection delete uuid $(LC_ALL=C nmcli -f UUID,DEVICE connection show | grep $SELECTED_ADAPTER | awk '{print $1}') >/dev/null 2>&1
						nmcli con add con-name "Armbian ethernet" type ethernet ifname $SELECTED_ADAPTER >/dev/null 2>&1
357
						nmcli con up "Armbian ethernet" >/dev/null 2>&1
358
						else
359
						create_if_config "$SELECTED_ADAPTER" "$SELECTED_ADAPTER" "dynamic" > /etc/network/interfaces
360
					fi
361
				fi
362
			fi
363
364

			# static
365
			if [[ $exitstatus = 1 ]]; then
366
				create_if_config "$SELECTED_ADAPTER" "$SELECTED_ADAPTER" "fixed" > /dev/null
367
				if [[ -n $SYSTEMDNET ]]; then
368
					systemd_ip_editor "${SELECTED_ADAPTER}"
369
				else
370
371
					if [[ -n $(LC_ALL=C nmcli device status | grep $SELECTED_ADAPTER ) ]]; then
						nm_ip_editor "$SELECTED_ADAPTER"
372
					else
373
						ip_editor "$SELECTED_ADAPTER" "$SELECTED_ADAPTER" "/etc/network/interfaces"
374
					fi
375
				fi
Igor Pecovnik's avatar
RC1    
Igor Pecovnik committed
376
377
378
			fi
	;;

Igor Pečovnik's avatar
Igor Pečovnik committed
379
	# Start network performance daemon
380
381
	#
	"Iperf3" )
Igor Pečovnik's avatar
Igor Pečovnik committed
382
			#
383
384
385
386
387
388
389
			if pgrep -x "iperf3" > /dev/null
			then
				pkill iperf3
			else
				iperf3 -s -D
			fi
	;;
Igor Pecovnik's avatar
Igor Pecovnik committed
390

Igor Pečovnik's avatar
Igor Pečovnik committed
391

JC Staudt's avatar
JC Staudt committed
392
	# Toggle IPv6
Igor Pečovnik's avatar
Igor Pečovnik committed
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
	#
	"IPV6" )
			#
			sed -i --follow-symlinks '/^net.ipv6.conf*/d' /etc/sysctl.d/99-sysctl.conf
			if [ -f "/etc/apt/apt.conf.d/99force-ipv4" ]; then
				rm /etc/apt/apt.conf.d/99force-ipv4
				echo 'net.ipv6.conf.all.disable_ipv6 = 0' >> /etc/sysctl.d/99-sysctl.conf
				echo 'net.ipv6.conf.default.disable_ipv6 = 0' >> /etc/sysctl.d/99-sysctl.conf
				echo 'net.ipv6.conf.lo.disable_ipv6 = 0' >> /etc/sysctl.d/99-sysctl.conf
			else
				echo 'Acquire::ForceIPv4 "true";' > /etc/apt/apt.conf.d/99force-ipv4
				echo 'net.ipv6.conf.all.disable_ipv6 = 1' >> /etc/sysctl.d/99-sysctl.conf
				echo 'net.ipv6.conf.default.disable_ipv6 = 1' >> /etc/sysctl.d/99-sysctl.conf
				echo 'net.ipv6.conf.lo.disable_ipv6 = 1' >> /etc/sysctl.d/99-sysctl.conf
			fi
			sysctl -p > /dev/null
	;;


Igor Pecovnik's avatar
Igor Pecovnik committed
412
413
414
	# Connect to wireless access point
	#
	"WiFi" )
Aristo Chen's avatar
Aristo Chen committed
415
416
417
418
		# disable AP mode on certain adapters
		wlan_exceptions "off"
		[[ "$reboot_module" == true ]] && dialog --backtitle "$BACKTITLE" --title " Warning " --msgbox "\nReboot is required for this adapter to switch to STA mode" 7 62 && reboot
		nmtui-connect
Igor Pecovnik's avatar
Igor Pecovnik committed
419
420
	;;

421

422
423
424
	# Connect to 3G/4G network
	#
	"LTE" )
Aristo Chen's avatar
Aristo Chen committed
425
		if ! is_package_manager_running; then
426
427
428
429
430
431
432
			if [[ $LTE_MODEM == *online* ]]; then
				dialog --title " LTE modem is connected " --colors --backtitle "$BACKTITLE" --yes-label "Back" --no-label "Disconnect" --yesno "\n\Z1Disconnect:\Z0 kill mobile connection\n\n" 7 42
				[[ $? = 1 ]] && lte "$LTE_MODEM_ID" "off"
			else
				dialog --title " LTE modem is disconnected " --colors --backtitle "$BACKTITLE" --yes-label "Back" --no-label "Connect" --yesno "\n\Z1Connect:\Z0 dial mobile connection\n\n" 7 42
				[[ $? = 1 ]] && lte "$LTE_MODEM_ID" "on"
			fi
Aristo Chen's avatar
Aristo Chen committed
433
		fi
434
435
436
	;;


437
438
439
	# Connect to wireless access point
	#
	"Clear" )
Aristo Chen's avatar
Aristo Chen committed
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
		# remove managed interfaces
		systemctl daemon-reload
		nmcli con delete $(nmcli --fields NAME,UUID,TYPE con | grep wifi | awk '{print $2}')
		sed 's/interface-name:wl.*//' -i /etc/NetworkManager/conf.d/10-ignore-interfaces.conf
		sed 's/,$//' -i /etc/NetworkManager/conf.d/10-ignore-interfaces.conf
		rm -f /etc/network/interfaces.d/armbian.ap.*
		rm -f /etc/dnsmasq.conf
		systemctl stop dnsmasq
		systemctl disable dnsmasq
		iptables -t nat -D POSTROUTING 1 >/dev/null 2>&1
		systemctl stop armbian-restore-iptables.service
		systemctl disable armbian-restore-iptables.service
		rm -f /etc/iptables.ipv4.nat
		rm -f /var/run/hostapd/* >/dev/null 2>&1
		reload-nety
455
456
457
	;;


Igor Pecovnik's avatar
Igor Pecovnik committed
458
459
460
	# Create WiFi access point
	#
	"Hotspot" )
461
	if ! is_package_manager_running; then
Igor Pecovnik's avatar
Igor Pecovnik committed
462
		systemctl daemon-reload
463
		CURRENT_UUID=$(LC_ALL=C nmcli -f DEVICE,TYPE,STATE device status | grep -w " wifi " | grep -w " disconnected")
Igor Pecovnik's avatar
Igor Pecovnik committed
464
		if [[ -n $(service hostapd status | grep -w active | grep -w running) ]]; then
Igor Pecovnik's avatar
Igor Pecovnik committed
465
			if [[ -n $HOSTAPDBRIDGE ]]; then
466
				dialog --title " Hostapd service is running " --colors --backtitle "$BACKTITLE" --help-button \
467
				--help-label "Cancel" --yes-label "Stop and reboot" --no-label "Edit" --yesno \
468
				"\n\Z1Stop:\Z0 stop and reboot\n\n\Z1Edit:\Z0 change basic parameters: SSID, password and channel" 9 70
Igor Pecovnik's avatar
Igor Pecovnik committed
469
470

			else
471
				dialog --title " Hostapd service is running " --colors --backtitle "$BACKTITLE" --help-button \
472
				--help-label "Cancel" --yes-label "Stop" --no-label "Edit" --yesno \
473
				"\n\Z1Stop:\Z0 stop providing Access Point\n\n\Z1Edit:\Z0 change basic parameters: SSID, password and channel" 9 70
Igor Pecovnik's avatar
Igor Pecovnik committed
474
			fi
Igor Pecovnik's avatar
Igor Pecovnik committed
475
476
			exitstatus=$?;
			if [[ $exitstatus = 0 ]]; then
JC Staudt's avatar
JC Staudt committed
477
				dialog --backtitle "$BACKTITLE" --title " Please wait " --infobox "\nDisabling hotspot. Please wait!" 5 35
Igor Pecovnik's avatar
Igor Pecovnik committed
478
				sed -i "s/^DAEMON_CONF=.*/DAEMON_CONF=/" /etc/init.d/hostapd
479
				# disable DNS
Igor Pecovnik's avatar
Igor Pecovnik committed
480
				systemctl daemon-reload
Igor Pecovnik's avatar
Cleanup    
Igor Pecovnik committed
481
				systemctl disable dnsmasq.service >/dev/null 2>&1
482

Igor Pecovnik's avatar
Igor Pecovnik committed
483
				ifdown $WIRELESS_ADAPTER 2> /dev/null
484
				rm -f /etc/network/interfaces.d/armbian.ap.*
Igor Pecovnik's avatar
Igor Pecovnik committed
485
				rm -f /etc/dnsmasq.conf
Igor Pecovnik's avatar
Igor Pecovnik committed
486
				iptables -t nat -D POSTROUTING 1 >/dev/null 2>&1
Igor Pecovnik's avatar
Igor Pecovnik committed
487
				rm -f /etc/iptables.ipv4.nat
488
489
				systemctl stop armbian-restore-iptables.service
				systemctl disable armbian-restore-iptables.service				rm -f /var/run/hostapd/* >/dev/null 2>&1
Igor Pecovnik's avatar
Cleanup    
Igor Pecovnik committed
490
				sed -i '/^iptables/ d' /etc/rc.local
491
				sed -i '/^service dnsmasq/ d' /etc/rc.local
492
493
				sed 's/interface-name:wl.*//' -i /etc/NetworkManager/conf.d/10-ignore-interfaces.conf
				sed 's/,$//' -i /etc/NetworkManager/conf.d/10-ignore-interfaces.conf
Igor Pecovnik's avatar
Igor Pecovnik committed
494
				iptables -F
495
496
				# reload services
				reload-nety
Igor Pecovnik's avatar
Igor Pecovnik committed
497
				[[ -n $HOSTAPDBRIDGE ]] && reboot
Igor Pecovnik's avatar
Igor Pecovnik committed
498
			fi
499
			if [[ $exitstatus = 1 ]]; then wlan_edit; reload-nety "reload"; fi
Igor Pecovnik's avatar
Cleanup    
Igor Pecovnik committed
500
		elif [[ -z $CURRENT_UUID ]]; then
Igor Pecovnik's avatar
Igor Pecovnik committed
501
				dialog --title " Info " --backtitle "$BACKTITLE" --no-collapse --msgbox "\nAll wireless connections are in use." 7 40
Igor Pecovnik's avatar
Igor Pecovnik committed
502
		else
503
504
505
				# check for low quality drivers and combinations
				check_and_warn

Igor Pecovnik's avatar
Igor Pecovnik committed
506
				# remove interfaces from managed list
507
508
509
510
				if [[ -f /etc/NetworkManager/conf.d/10-ignore-interfaces.conf ]]; then
					sed 's/interface-name:wl.*//' -i /etc/NetworkManager/conf.d/10-ignore-interfaces.conf
					sed 's/,$//' -i /etc/NetworkManager/conf.d/10-ignore-interfaces.conf
				fi
511

512
513
514
515
516
517
518
				# clear current settings
				rm -f /etc/network/interfaces.d/armbian.ap.nat
				rm -f /etc/network/interfaces.d/armbian.ap.bridge
				service networking restart
				service network-manager restart
				{ for ((i = 0 ; i <= 100 ; i+=20)); do sleep 1; echo $i; done } | dialog --title " Initializing wireless adapters " --colors --gauge "" 5 50 0

519
520
521
522
523
524
				# start with basic config
				if grep -q "^## IEEE 802.11ac" /etc/hostapd.conf; then sed '/## IEEE 802.11ac\>/,/^## IEEE 802.11ac\>/ s/.*/#&/' -i /etc/hostapd.conf; fi
				if grep -q "^## IEEE 802.11a" /etc/hostapd.conf; then sed '/## IEEE 802.11a\>/,/^## IEEE 802.11a\>/ s/.*/#&/' -i /etc/hostapd.conf; fi
				if grep -q "^## IEEE 802.11n" /etc/hostapd.conf; then sed '/## IEEE 802.11n/,/^## IEEE 802.11n/ s/.*/#&/' -i /etc/hostapd.conf; fi
				sed -i "s/^channel=.*/channel=5/" /etc/hostapd.conf

525
				service network-manager reload
Igor Pecovnik's avatar
Igor Pecovnik committed
526
527
528
529
530
				# change special adapters to AP mode
				wlan_exceptions "on"
				# check for WLAN interfaces
				get_wlan_interface
				# add interface to unmanaged list
531
532
533
534
535
536
537
				if [[ -f /etc/NetworkManager/conf.d/10-ignore-interfaces.conf ]]; then
					[[ -z $(grep -w unmanaged-devices= /etc/NetworkManager/conf.d/10-ignore-interfaces.conf) ]] && sed '$ s/$/,/' -i /etc/NetworkManager/conf.d/10-ignore-interfaces.conf
					sed '$ s/$/'"interface-name:$WIRELESS_ADAPTER"'/' -i /etc/NetworkManager/conf.d/10-ignore-interfaces.conf
				else
					echo "[keyfile]" > /etc/NetworkManager/conf.d/10-ignore-interfaces.conf
					echo "unmanaged-devices=interface-name:$WIRELESS_ADAPTER" >> /etc/NetworkManager/conf.d/10-ignore-interfaces.conf
				fi
538
				service network-manager reload
Igor Pecovnik's avatar
Igor Pecovnik committed
539
				# display dialog
540
541
				dialog --colors --backtitle "$BACKTITLE" --title "Please wait" --infobox \
				"\nWireless adapter: \Z1${WIRELESS_ADAPTER}\Z0\n\nProbing nl80211 hostapd driver compatibility." 7 50
542
				debconf-apt-progress -- apt-get --reinstall -o Dpkg::Options::="--force-confnew" -y -qq --no-install-recommends install hostapd
Igor Pecovnik's avatar
Igor Pecovnik committed
543
544
545
546
547
				# change to selected interface
				sed -i "s/^interface=.*/interface=$WIRELESS_ADAPTER/" /etc/hostapd.conf
				# add hostapd.conf to services
				sed -i "s/^DAEMON_CONF=.*/DAEMON_CONF=\/etc\/hostapd.conf/" /etc/init.d/hostapd
				# check both options
Igor Pecovnik's avatar
Igor Pecovnik committed
548
549
550
551
552
553
				# add allow cli access if not exists. temporally
				if ! grep -q "ctrl_interface" /etc/hostapd.conf; then
					echo "" >> /etc/hostapd.conf
					echo "ctrl_interface=/var/run/hostapd" >> /etc/hostapd.conf
					echo "ctrl_interface_group=0" >> /etc/hostapd.conf
				fi
554
555
556
				#
				check_advanced_modes
				#
557
				if [[ -n "$hostapd_error" ]]; then
558
559
					dialog --colors --backtitle "$BACKTITLE" --title "Please wait" --infobox \
					"\nWireless adapter: \Z1${WIRELESS_ADAPTER}\Z0\n\nProbing Realtek hostapd driver compatibility." 7 50
560
					debconf-apt-progress -- apt-get --reinstall -o Dpkg::Options::="--force-confnew" -y -qq --no-install-recommends install hostapd-realtek
Igor Pecovnik's avatar
Igor Pecovnik committed
561
562
					# change to selected interface
					sed -i "s/^interface=.*/interface=$WIRELESS_ADAPTER/" /etc/hostapd.conf
563
564
565
566
567
568
569
570
					# add allow cli access if not exists. temporally
					if ! grep -q "ctrl_interface" /etc/hostapd.conf; then
						echo "ctrl_interface=/var/run/hostapd" >> /etc/hostapd.conf
						echo "ctrl_interface_group=0" >> /etc/hostapd.conf
					fi
					#
					check_advanced_modes
					#
Igor Pecovnik's avatar
Igor Pecovnik committed
571
				fi
572

573
				if [[ -n "$hostapd_error" ]]; then
Igor Pecovnik's avatar
Igor Pecovnik committed
574
575
576
					dialog --backtitle "$BACKTITLE" --title "Warning" \
					--infobox "\nWireless adapter: $WIRELESS_ADAPTER\n\nNo compatible hostapd driver found." 7 39
					sed -i "s/^DAEMON_CONF=.*/DAEMON_CONF=/" /etc/init.d/hostapd
577
					# remove interfaces from managed list
578
579
					sed 's/interface-name:wl.*//' -i /etc/NetworkManager/conf.d/10-ignore-interfaces.conf
					sed 's/,$//' -i /etc/NetworkManager/conf.d/10-ignore-interfaces.conf
Igor Pecovnik's avatar
Igor Pecovnik committed
580
581
582
					systemctl daemon-reload;service hostapd restart
				fi

583
584
585
586
587
588
589
590
591
592
				# let's remove bridge out for this simple configurator
				#
				# dialog --title " Choose Access Point mode for $WIRELESS_ADAPTER " --colors --backtitle "$BACKTITLE" --no-label "Bridge" \
				# --yes-label "NAT" --yesno "\n\Z1NAT:\Z0 with own DHCP server, out of your primary network\n\
				# \n\Z1Bridge:\Z0 wireless clients will use your routers DHCP server" 9 70
				# response=$?
				#
				# let's remove bridge out for this simple configurator

				response=0
Igor Pecovnik's avatar
Igor Pecovnik committed
593

594
595
596
				# create interfaces file if not exits
				[[ ! -f /etc/network/interfaces ]] && echo "source /etc/network/interfaces.d/*" > /etc/network/interfaces

Igor Pecovnik's avatar
Igor Pecovnik committed
597
				# select default interfaces if there is more than one
598
				select_default_interface
Igor Pecovnik's avatar
Igor Pecovnik committed
599
600

				NETWORK_CONF="/etc/network/interfaces"
Igor Pecovnik's avatar
Igor Pecovnik committed
601
602
603

				case $response in
					# bridge
Igor Pecovnik's avatar
Igor Pecovnik committed
604
					1)
Igor Pecovnik's avatar
RC1    
Igor Pecovnik committed
605
						TEMP_CONF="/etc/network/interfaces.d/armbian.ap.bridge"
Igor Pecovnik's avatar
Igor Pecovnik committed
606
607

						sed -i 's/.bridge=.*/bridge=br0/' /etc/hostapd.conf
Igor Pecovnik's avatar
Cleanup    
Igor Pecovnik committed
608
						if [[ $DEFAULT_ADAPTER == "br0" ]]; then NEW_DEFAULT_ADAPTER="eth0"; else NEW_DEFAULT_ADAPTER="$DEFAULT_ADAPTER"; fi
Igor Pecovnik's avatar
Igor Pecovnik committed
609
610
611
612
613
614
						echo -e "#bridged wireless for hostapd by armbian-config\n" > $TEMP_CONF
						echo -e "auto lo br0\niface lo inet loopback" >> $TEMP_CONF
						echo -e "\nauto $NEW_DEFAULT_ADAPTER\nallow-hotplug $NEW_DEFAULT_ADAPTER\niface $NEW_DEFAULT_ADAPTER inet manual" >> $TEMP_CONF
						echo -e "\nauto $WIRELESS_ADAPTER\nallow-hotplug $WIRELESS_ADAPTER\niface $WIRELESS_ADAPTER inet manual\n" >> $TEMP_CONF
						create_if_config "$DEFAULT_ADAPTER" "br0" >> $TEMP_CONF
						echo -e "\nbridge_ports $NEW_DEFAULT_ADAPTER $WIRELESS_ADAPTER" >> $TEMP_CONF
615

Igor Pecovnik's avatar
Igor Pecovnik committed
616
617
					;;
					# NAT
Igor Pecovnik's avatar
Igor Pecovnik committed
618
					0)
Igor Pecovnik's avatar
RC1    
Igor Pecovnik committed
619
						TEMP_CONF="/etc/network/interfaces.d/armbian.ap.nat"
620
621

						# install dnsmas and iptables
622
						if [[ $(dpkg-query -W -f='${db:Status-Abbrev}\n' dnsmasq 2>/dev/null) != "*ii*" ]]; then
623
							debconf-apt-progress -- apt-get -qq -y --no-install-recommends install dnsmasq iptables
624
							systemctl enable dnsmasq
625
626
						fi

Igor Pecovnik's avatar
Igor Pecovnik committed
627
628
						echo -e "# armbian NAT hostapd\nallow-hotplug $WIRELESS_ADAPTER\niface $WIRELESS_ADAPTER inet static " > $TEMP_CONF
						echo -e "\taddress 172.24.1.1\n\tnetmask 255.255.255.0\n\tnetwork 172.24.1.0\n\tbroadcast 172.24.1.255" >> $TEMP_CONF
Igor Pecovnik's avatar
Igor Pecovnik committed
629
630
631
632
633
634
635
636
637
638
639
640
641
642
						# create new configuration
						echo "interface=$WIRELESS_ADAPTER				# Use interface $WIRELESS_ADAPTER" > /etc/dnsmasq.conf
						echo "listen-address=172.24.1.1					# Explicitly specify the address to listen on" >> /etc/dnsmasq.conf
						echo "bind-interfaces							# Bind to the interface to make sure we aren't sending \
						things elsewhere" >> /etc/dnsmasq.conf
						echo "server=8.8.8.8							# Forward DNS requests to Google DNS" >> /etc/dnsmasq.conf
						echo "domain-needed								# Don't forward short names" >> /etc/dnsmasq.conf
						echo "bogus-priv								# Never forward addresses in the non-routed address spaces" \
						>> /etc/dnsmasq.conf
						echo "dhcp-range=172.24.1.50,172.24.1.150,12h	# Assign IP addresses between 172.24.1.50 and 172.24.1.150 with \
						a 12 hour lease time" >> /etc/dnsmasq.conf
						# - Enable IPv4 forwarding
						sed -i "/net.ipv4.ip_forward=/c\net.ipv4.ip_forward=1" /etc/sysctl.conf
						echo 1 > /proc/sys/net/ipv4/ip_forward
643
644
						# Clear iptables
						iptables-save | awk '/^[*]/ { print $1 } /^:[A-Z]+ [^-]/ { print $1 " ACCEPT" ; } /COMMIT/ { print $0; }' | iptables-restore
Igor Pecovnik's avatar
Igor Pecovnik committed
645
646
647
648
649
650
651
						# - Apply iptables
						iptables -t nat -A POSTROUTING -o $DEFAULT_ADAPTER -j MASQUERADE
						iptables -A FORWARD -i $DEFAULT_ADAPTER -o $WIRELESS_ADAPTER -m state --state RELATED,ESTABLISHED -j ACCEPT
						iptables -A FORWARD -i $WIRELESS_ADAPTER -o $DEFAULT_ADAPTER -j ACCEPT
						# - Save IP tables, applied during ifup in /etc/network/interfaces.
						iptables-save > /etc/iptables.ipv4.nat
						sed -i 's/^bridge=.*/#&/' /etc/hostapd.conf
652
						#sed -e 's/exit 0//g' -i /etc/rc.local
653
						# workaround if hostapd is too slow
654
655
656
						#echo "service dnsmasq start" >> /etc/rc.local
						#echo "iptables-restore < /etc/iptables.ipv4.nat" >> /etc/rc.local
						#echo "exit 0" >> /etc/rc.local
657
658
659
660
661
662
663
664
665
666
667
668
669
670
						systemctl stop armbian-restore-iptables.service
						systemctl disable armbian-restore-iptables.service
						cat <<-EOF > /etc/systemd/system/armbian-restore-iptables.service
						[Unit]
						Description="Restore IP tables"
						[Timer]
						OnBootSec=20Sec
						[Service]
						Type=oneshot
						ExecStart=/sbin/iptables-restore /etc/iptables.ipv4.nat
						[Install]
						WantedBy=sysinit.target
						EOF
						systemctl enable armbian-restore-iptables.service
Igor Pecovnik's avatar
Igor Pecovnik committed
671
672
673
674
675
					;;
				3)exit;;

				255) exit;;
				esac
Igor Pecovnik's avatar
Igor Pecovnik committed
676

677
				dialog --backtitle "$BACKTITLE" --title " Please wait " --infobox "\nEnabling hotspot. Please wait!" 5 34
Igor Pecovnik's avatar
Igor Pecovnik committed
678
679
680
681
682
683
684
685
686
687

				#
				# only for bridged connection we need to check and reboot. tdlr check if it can be done on the fly
				HOSTAPDBRIDGE=$(cat /etc/hostapd.conf 2> /dev/null | grep -w "^bridge=br0")
				if [[ -n $HOSTAPDBRIDGE ]]; then
						dialog --title "Manually adjust network configuration if needed" --backtitle "$BACKTITLE" \
						--ok-label "Reboot to apply new settings" --no-collapse --editbox $TEMP_CONF 30 0 2> $TEMP_CONF".tmp"
						response=$?
						if [[ $response = 0 ]]; then
							mv $TEMP_CONF".tmp" $TEMP_CONF
Igor Pecovnik's avatar
RC1    
Igor Pecovnik committed
688
							#reboot
Igor Pecovnik's avatar
Igor Pecovnik committed
689
690
691
						fi
					else
						ifdown $WIRELESS_ADAPTER 2> /dev/null
692
						sleep 2
Igor Pecovnik's avatar
Igor Pecovnik committed
693
694
						ifup $WIRELESS_ADAPTER 2> /dev/null
						echo "nameserver 8.8.8.8" > /etc/resolvconf/resolv.conf.d/base
695
						[[ "$reboot_module" == true ]] && dialog --backtitle "$BACKTITLE" --title " Warning " --msgbox "\nReboot is required for this adapter to switch to AP mode" 7 61 && reboot
696
697
						# reload services
						reload-nety "reload"
Igor Pecovnik's avatar
Igor Pecovnik committed
698
699
				fi
		fi
700
	fi
Igor Pecovnik's avatar
Igor Pecovnik committed
701
702
703
	;;


704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
	# Manage Softether VPN
	#
	"VPN" )
	VPNDIR="/usr/local/vpnclient/"

	function vpn_reconfigure ()
	{
	if [[ -f /etc/server.vpn ]]; then
		${VPNDIR}vpnclient stop >/dev/null 2>&1
		${VPNDIR}vpnclient start >/dev/null 2>&1
		# purge old settings
		${VPNDIR}vpncmd /client localhost /cmd accountlist | grep "VPN Connection Setting Name" | cut -d "|" -f 2 | sed 's/^/"/;s/$/"/' | xargs /usr/local/vpnclient/vpncmd /client localhost /cmd accountdisconnect >/dev/null 2>&1
		${VPNDIR}vpncmd /client localhost /cmd accountlist | grep "VPN Connection Setting Name" | cut -d "|" -f 2 | sed 's/^/"/;s/$/"/' | xargs /usr/local/vpnclient/vpncmd /client localhost /cmd accountdelete >/dev/null 2>&1
		# import new
		${VPNDIR}vpncmd /client localhost /cmd accountimport //etc//server.vpn >/dev/null 2>&1
		# reload to connect
		${VPNDIR}vpnclient stop >/dev/null 2>&1
		${VPNDIR}vpnclient start >/dev/null 2>&1
JC Staudt's avatar
JC Staudt committed
722
		[[ $? = 0 ]] && dialog --backtitle "$BACKTITLE" --title " VPN " --msgbox "\nConfiguration was successfully imported!" 7 43
723
724
725
726
727
728
729
730
731
732
733
734
735
	fi
	}

	function get_numbers {
		EXCLUDE=$(ip neigh | grep vpn_se | grep -o '[0-9]\{1,3\}\.[0-9]\{1,3\}\.[0-9]\{1,3\}\.' | head -1)
		ADAPTER=$(ip -4 route ls | grep default | grep -Po '(?<=dev )(\S+)' | grep -v vpn_se | head -1)
		IP=$(ip route | grep $ADAPTER | grep default | grep -o '[0-9]\{1,3\}\.[0-9]\{1,3\}\.[0-9]\{1,3\}\.[0-9]\{1,3\}' | head -1)
		VPNSERVERIP=$(${VPNDIR}vpncmd /client localhost /cmd accountlist | grep "VPN Server" |grep -o '[0-9]\{1,3\}\.[0-9]\{1,3\}\.[0-9]\{1,3\}\.[0-9]\{1,3\}' | head -1)
		SUBNET=$(ifconfig vpn_se | grep 'inet addr:' | grep -v '127.0.0.1' | cut -d: -f2 | awk '{ print $1}' | grep -o '[0-9]\{1,3\}\.[0-9]\{1,3\}\.[0-9]\{1,3\}')
		GW=$(ip neigh | grep vpn_se | grep $SUBNET | grep -o '[0-9]\{1,3\}\.[0-9]\{1,3\}\.[0-9]\{1,3\}\.[0-9]\{1,3\}' | head -1)
	}

	function raise_dev {
Aristo Chen's avatar
Aristo Chen committed
736
737
738
739
740
741
742
		i=0;
		while [[ -z "$TEMP" && $i<5 ]]; do
				TEMP=$(${VPNDIR}vpncmd /client localhost /cmd accountlist | grep Status | grep Connected)
				sleep 1
				i=$((i+1))
		done
		dhclient vpn_se
743
744
745
746
	}

	if pgrep -x "vpnclient" > /dev/null
	then
Aristo Chen's avatar
Aristo Chen committed
747
748
749
750
751
752
753
754
755
		${VPNDIR}vpnclient stop >/dev/null 2>&1
		${VPNDIR}vpnclient start >/dev/null 2>&1
		if [[ -z $(${VPNDIR}vpncmd /client localhost /cmd nicList | grep Enabled) ]]; then
			${VPNDIR}vpncmd /client localhost /cmd niccreate se >/dev/null 2>&1
		fi
		if [[ -z $(${VPNDIR}vpncmd /client localhost /cmd accountlist | grep "VPN Server") ]]; then
			dialog --backtitle "$BACKTITLE" --no-label " Cancel " --yes-label " Import " --title " VPN " --yesno "\nA VPN configuration was not found.\n\nPlace valid file at /etc/server.vpn" 9 45
			if [[ $? = 0 && -f /etc/server.vpn ]]; then
				${VPNDIR}vpncmd /client localhost /cmd accountimport //etc//server.vpn >/dev/null 2>&1
756
757
				${VPNDIR}vpnclient stop >/dev/null 2>&1
				${VPNDIR}vpnclient start >/dev/null 2>&1
Aristo Chen's avatar
Aristo Chen committed
758
759
760
				[[ $? = 0 ]] && dialog --backtitle "$BACKTITLE" --title " VPN " --msgbox "\nConfiguration was successfully imported!" 7 43
			fi
		fi
761

Aristo Chen's avatar
Aristo Chen committed
762
763
		# raise devices
		raise_dev
764

Aristo Chen's avatar
Aristo Chen committed
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
		if [[ -n $(${VPNDIR}vpncmd /client localhost /cmd accountlist | grep Status | grep Connected) ]]; then
			get_numbers
			echo "ip route add $VPNSERVERIP via $IP dev $ADAPTER"
			echo "ip route del default"
			echo "ip route add default via $GW dev vpn_se"
			read
			dialog --title "VPN client is connected to $VPNSERVERIP" --colors --backtitle "$BACKTITLE" --help-button --help-label "Cancel" --yes-label "Stop" --no-label " Import " --yesno "\n\Z1Stop:  \Z0 stop\n\n\Z1Import:\Z0 import new config from /etc/armbian.vpn" 9 70
		fi
		response=$?
		if [[ $response = 0 ]]; then
			get_numbers
			echo "ip route del $VPNSERVERIP"
			echo "ip route del default"
			echo "ip route add default via $IP dev $ADAPTER"
			read
			dialog --backtitle "$BACKTITLE"  --nocancel --nook --infobox "\nClosing VPN connection" 5 27
			${VPNDIR}vpnclient stop >/dev/null 2>&1
		fi
783
	else
Aristo Chen's avatar
Aristo Chen committed
784
785
786
787
788
789
790
791
792
793
794
795
		dialog --title "VPN client is disconnected" --colors --backtitle "$BACKTITLE" --help-button --help-label "Cancel" --yes-label "Connect" --no-label " Import " --yesno "\n\Z1Connect:\Z0 Connect with your VPN server \n\n\Z1Import:\Z0 import new config from /etc/armbian.vpn" 9 70
		response=$?
		if [[ $response = 0 ]]; then
			${VPNDIR}vpnclient start >/dev/null 2>&1

			# raise devices
			raise_dev
			get_numbers
			echo "ip route add $VPNSERVERIP via $IP dev $ADAPTER"
			echo "ip route del default"
			echo "ip route add default via $GW dev vpn_se"
			read
796

Aristo Chen's avatar
Aristo Chen committed
797
798
		fi
		[[ $response = 1 ]] && vpn_reconfigure
799
800
801
802
	fi
	;;


Igor Pecovnik's avatar
Igor Pecovnik committed
803
804
	# Connect to Bluetooth
	#
805
	"BT discover" )
Aristo Chen's avatar
Aristo Chen committed
806
807
		dialog --backtitle "$BACKTITLE" --title " Bluetooth " --msgbox "\nVerify that your Bluetooth device is discoverable!" 7 54
		connect_bt_interface
Igor Pecovnik's avatar
Igor Pecovnik committed
808
809
810
811
812
	;;


	# Edit network settings
	#
Igor Pecovnik's avatar
RC1    
Igor Pecovnik committed
813
	"Advanced" )
Igor Pecovnik's avatar
Igor Pecovnik committed
814
		dialog --backtitle "$BACKTITLE" --title " Edit ifupdown network configuration /etc/network/interfaces" --no-collapse \
Igor Pecovnik's avatar
Igor Pecovnik committed
815
		--ok-label "Save" --editbox /etc/network/interfaces 30 0 2> /etc/network/interfaces.out
816
		[[ $? = 0 ]] && mv /etc/network/interfaces.out /etc/network/interfaces && reload-nety "reload"
Igor Pecovnik's avatar
Igor Pecovnik committed
817
818
	;;

819
820
821
	# Remove automatic wifi conections
	#
	"Forget" )
Igor Pecovnik's avatar
Igor Pecovnik committed
822
		LC_ALL=C nmcli --fields UUID,TIMESTAMP-REAL,TYPE con show | grep wifi |  awk '{print $1}' | while read line; \
823
		do nmcli con delete uuid  $line; done > /dev/null
824
825
	;;

Igor Pecovnik's avatar
Igor Pecovnik committed
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842



	#-------------------------------------------------------------------------------------------------------------------------------------#
	#-------------------------------------------------------------------------------------------------------------------------------------#
	#-------------------------------------------------------------------------------------------------------------------------------------#




	# Change timezone
	#
	"Timezone" )
		dpkg-reconfigure tzdata
	;;


Igor Pecovnik's avatar
Igor Pecovnik committed
843
844
845
846
	# Change locales
	#
	"Locales" )
		dpkg-reconfigure locales
Igor Pecovnik's avatar
Igor Pecovnik committed
847
848
849
		source /etc/default/locale
		sed -i "s/^LANGUAGE=.*/LANGUAGE=$LANG/" /etc/default/locale
		export LANGUAGE=$LANG
Igor Pecovnik's avatar
Igor Pecovnik committed
850
851
	;;

852
853
854
855
	# Change keyboard
	#
	"Keyboard" )
		dpkg-reconfigure keyboard-configuration
Igor Pečovnik's avatar
Igor Pečovnik committed
856
		setupcon
857
	;;
Igor Pecovnik's avatar
Igor Pecovnik committed
858

859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
	# Change Hostname
	#
	"Hostname" )
		hostname_current=$(cat /etc/hostname)
		hostname_new=$(\
		dialog --no-cancel --title " Change hostname " --backtitle "$BACKTITLE" --inputbox "\nType new hostname\n " 10 50 $hostname_current \
		3>&1 1>&2 2>&3 3>&- \
		)
		if [[ $? = 0 && -n $hostname_new ]]; then
			sed -i "s/$hostname_current/$hostname_new/g" /etc/hosts
			sed -i "s/$hostname_current/$hostname_new/g" /etc/hostname
			hostname $hostname_new
			systemctl restart systemd-logind.service
			dialog --title " Info " --backtitle "$BACKTITLE" --no-collapse --msgbox "\nYou need to logout to make the changes effective." 7 53
		fi
	;;

876
	# Bash
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
	#
	"BASH" )
		# change shell for root
		chsh -s /bin/bash
		add_choose_user
		if [ -n "$CHOSEN_USER" ]; then
			chsh -s /bin/bash $CHOSEN_USER
		fi
		# cleanup
		rm -rf /etc/oh-my-zsh /etc/skel/.zshrc /etc/skel/.oh-my-zsh
		rm -rf /root/{.zshrc,.oh-my-zsh}
		# and for selected normal user
		add_choose_user
		if [ -n "$CHOSEN_USER" ]; then
			rm -rf /home/$CHOSEN_USER/{.zshrc,.oh-my-zsh}
		fi
		# change shell for future users
		sed -i "s/^SHELL=.*/SHELL=\/bin\/bash/" /etc/default/useradd
		# remove crontab
		crontab -l | grep -v oh-my  | crontab -
897
898
899
		if [[ -z $scripted ]]; then
			dialog --backtitle "$BACKTITLE" --title "Info" --colors --msgbox "\nYour default shell was switched to: \Z1BASH\Z0\n\nPlease logout & login from this session!" 9 47
		fi
900
901
902
903
904
905
906
	;;


	# ZSH
	#
	"ZSH" )
		if ! is_package_manager_running; then
Aristo Chen's avatar
Aristo Chen committed
907
908
			if ! check_if_installed zsh ; then
				debconf-apt-progress -- apt-get update
Igor Pečovnik's avatar
Igor Pečovnik committed
909
				debconf-apt-progress -- apt-get install -y zsh tmux git
Aristo Chen's avatar
Aristo Chen committed
910
911
912
913
914
915
916
917
918
919
920
921
922
			fi
			rm -rf /etc/oh-my-zsh
			git clone --quiet https://github.com/robbyrussell/oh-my-zsh.git /etc/oh-my-zsh
			cp /etc/oh-my-zsh/templates/zshrc.zsh-template /etc/skel/.zshrc
			mkdir -p /etc/skel/.oh-my-zsh/cache
			# change shell for future users
			sed -i "s/^SHELL=.*/SHELL=\/usr\/bin\/zsh/" /etc/default/useradd
			# we have common settings
			sed -i "s/^export ZSH=.*/export ZSH=\/etc\/oh-my-zsh/" /etc/skel/.zshrc
			# user cache
			sed -i "/^export ZSH=.*/a export ZSH_CACHE_DIR=~\/.oh-my-zsh\/cache" /etc/skel/.zshrc
			# define theme
			sed -i 's/^ZSH_THEME=.*/ZSH_THEME="risto"/' /etc/skel/.zshrc
923
924
			# disable prompt while update
			sed -i 's/# DISABLE_UPDATE_PROMPT="true"/DISABLE_UPDATE_PROMPT="true"/g' /etc/skel/.zshrc
Aristo Chen's avatar
Aristo Chen committed
925
926
927
928
			# define default plugins
			sed -i 's/^plugins=.*/plugins=(git git-extras debian tmux screen history extract colorize web-search docker)/' /etc/skel/.zshrc
			# change shell for root
			chsh -s $(grep /zsh$ /etc/shells | tail -1)
929
			# copy cache directory
Aristo Chen's avatar
Aristo Chen committed
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
			cp -R --attributes-only /etc/skel/.oh-my-zsh /root/.oh-my-zsh
			cp /etc/skel/.zshrc /root/.zshrc
			# and for selected normal user
			add_choose_user
			if [ -n "$CHOSEN_USER" ]; then
				chsh -s $(grep /zsh$ /etc/shells | tail -1) $CHOSEN_USER
				# copy cache directory
				cp -R --attributes-only /etc/skel/.oh-my-zsh /home/$CHOSEN_USER/.oh-my-zsh
				cp /etc/skel/.zshrc /home/$CHOSEN_USER/.zshrc
				chown -R ${CHOSEN_USER}:${CHOSEN_USER} /home/${CHOSEN_USER}/{.zshrc,.oh-my-zsh}
			fi
			# add a cronjob to update oh-my-zsh once per month
			(crontab -l 2>/dev/null; echo "0 0 1 * * cd /etc/oh-my-zsh ; git pull origin master >/dev/null 2>/dev/null") | crontab -
			if [[ -z $scripted ]]; then
				dialog --backtitle "$BACKTITLE" --title "Info" --colors --msgbox "\nYour default shell was switched to: \Z1ZSH\Z0\n\nPlease logout & login from this session!" 9 47
			fi
946
947
948
949
		fi
	;;


950
951
952
	# Firmware update
	#
	"Firmware" )
953
954
955
956
957
958
959
		if ! is_package_manager_running; then
			clear
			exec 3>&1
			monitor=$(dialog --print-maxsize 2>&1 1>&3)
			exec 3>&-
			mon_x=$(echo $monitor | awk '{print $2}' | sed 's/,//');mon_x=$(( $mon_x / 2 ))
			mon_y=$(echo $monitor | awk '{print $3}' | sed 's/,//');
960
			if [[ -z $scripted ]]; then
961
			dialog --title " Update " --backtitle "$BACKTITLE" --no-label "No" --yesno "\nDo you want to update board firmware?" 7 41
962
963
			fi
			if [[ $? -eq 0 ]]; then
964
965
				debconf-apt-progress -- apt-get update
				debconf-apt-progress -- apt-get -o Dpkg::Options::="--force-confdef" -o Dpkg::Options::="--force-confold" -y upgrade
Igor Pecovnik's avatar
Bugfix    
Igor Pecovnik committed
966
				[[ -z $scripted ]] && \
967
				dialog --title " Firmware update " --colors --no-label "No" --backtitle "$BACKTITLE" --yesno \
968
				"\nFirmware has been updated. Reboot?   " 7 39
Igor Pecovnik's avatar
Bugfix    
Igor Pecovnik committed
969
				if [[ $? -eq 0 ]]; then reboot; fi
970
			fi
971
972
973
		fi
	;;

974

Igor Pecovnik's avatar
Igor Pecovnik committed
975
976
977
978
979
980
981
982
983
	# Install to SATA, eMMC, NAND or USB
	#
	"Install" )
		nand-sata-install
	;;


	# Freeze and unfreeze kernel and board support packages
	#
Igor Pecovnik's avatar
Igor Pecovnik committed
984
	"Freeze" | "Defreeze" )
985
	if ! is_package_manager_running; then
986
		if [[ -z $scripted ]]; then dialog --title " Updating " --backtitle "$BACKTITLE" --yes-label "$1" --no-label "Cancel" --yesno \
Igor Pečovnik's avatar
Igor Pečovnik committed
987
		"\nDo you want to ${1,,} Armbian firmware updates?" 7 54
988
989
990
991
		fi
		if [[ $? -eq 0 ]]; then

			unset PACKAGE_LIST
Igor Pečovnik's avatar
Igor Pečovnik committed
992

Aristo Chen's avatar
Aristo Chen committed
993
994
995
996
997
998
999
1000
1001
1002
1003
1004
1005
1006
1007
1008
1009
1010
1011
1012
1013
			# basic packages

			check_if_installed linux-u-boot-${BOARD}-${BRANCH} && PACKAGE_LIST+=" linux-u-boot-${BOARD}-${BRANCH}"
			check_if_installed linux-image-${BRANCH}-${LINUXFAMILY} && PACKAGE_LIST+=" linux-image-${BRANCH}-${LINUXFAMILY}"
			check_if_installed linux-dtb-${BRANCH}-${LINUXFAMILY} && PACKAGE_LIST+=" linux-dtb-${BRANCH}-${LINUXFAMILY}"
			check_if_installed linux-headers-${BRANCH}-${LINUXFAMILY} && PACKAGE_LIST+=" linux-headers-${BRANCH}-${LINUXFAMILY}"

			# new BSP
			check_if_installed armbian-${LINUXFAMILY} && PACKAGE_LIST+=" armbian-${LINUXFAMILY}"
			check_if_installed armbian-${BOARD} && PACKAGE_LIST+=" armbian-${BOARD}"
			check_if_installed armbian-${DISTROID} && PACKAGE_LIST+=" armbian-${DISTROID}"
			check_if_installed armbian-${DISTROID}-desktop-xfce && PACKAGE_LIST+=" armbian-${DISTROID}-desktop-xfce"
			check_if_installed armbian-firmware && PACKAGE_LIST+=" armbian-firmware"
			check_if_installed armbian-firmware-full && PACKAGE_LIST+=" armbian-firmware-full"

			local words=( $PACKAGE_LIST )
			local command="unhold"
			IFS=" "
			[[ $1 == "Freeze" ]] && local command="hold"
			for word in $PACKAGE_LIST; do apt-mark $command $word; done | dialog --backtitle "$BACKTITLE" --title "Packages ${1,,}" --progressbox $((${#words[@]}+2)) 64
			fi
Igor Pecovnik's avatar
Igor Pecovnik committed
1014
1015
1016
1017
		fi
	;;


1018
1019
1020
1021
1022
1023
1024
1025
1026
	# Switch to other kernel versions
	"Other")
	if ! is_package_manager_running; then
		other_kernel_version
	fi
	;;



Igor Pecovnik's avatar
Igor Pecovnik committed
1027
1028
1029
	# Enable or disable desktop
	#
	"Desktop" )
1030
		if [[ -n $DISPLAY_MANAGER ]]; then
Igor Pecovnik's avatar
Igor Pecovnik committed
1031
			dialog --title " Desktop is enabled and running " --backtitle "$BACKTITLE" \
1032
			--yes-label "Stop" --no-label "Cancel" --yesno "\nDo you want to stop and disable this service?" 7 50
Igor Pecovnik's avatar
Igor Pecovnik committed
1033
			exitstatus=$?;
1034
			if [[ $exitstatus = 0 ]]; then
Igor Pecovnik's avatar
Igor Pecovnik committed
1035
1036
1037
1038
1039
1040
1041
1042
1043
1044
1045
1046
				function stop_display()
				{
					bash -c "service lightdm stop >/dev/null 2>&1
					systemctl disable lightdm.service >/dev/null 2>&1
					service nodm stop >/dev/null 2>&1
					systemctl disable nodm.service >/dev/null 2>&1"
				}
				if xhost >& /dev/null ; then
					stop_display &
				else
					stop_display
				fi
Igor Pečovnik's avatar
Igor Pečovnik committed
1047
			fi
Igor Pecovnik's avatar
Igor Pecovnik committed
1048
		else
1049
			if ! is_package_manager_running; then
Igor Pečovnik's avatar
Igor Pečovnik committed
1050
1051
				# remove nodm and install lightdm = backward compatibility
				[[ -n $(dpkg -l | grep nodm) ]] && debconf-apt-progress -- apt-get -y purge nodm
Igor Pečovnik's avatar
Igor Pečovnik committed
1052
				[[ -z $(dpkg -l | grep lightdm) ]] && debconf-apt-progress -- apt-get -o Dpkg::Options::="--force-confold" -y --no-install-recommends install lightdm-gtk-greeter lightdm
1053
				if [[ -n $DESKTOP_INSTALLED ]]; then
Igor Pečovnik's avatar
Igor Pečovnik committed
1054
					dialog --title " Display manager " --backtitle "$BACKTITLE" --yesno "\nDo you want to enable autologin?" 7 36
1055
					exitstatus=$?;
Igor Pečovnik's avatar
Igor Pečovnik committed
1056
1057
1058
1059
1060
1061
1062
1063
1064
1065
1066
1067
1068
1069
1070
1071
					if [[ $exitstatus = 0 ]]; then
						add_choose_user
						if [ -n "$CHOSEN_USER" ]; then
							mkdir -p /etc/lightdm/lightdm.conf.d
							echo "[Seat:*]" > /etc/lightdm/lightdm.conf.d/22-armbian-autologin.conf
							echo "autologin-user=$CHOSEN_USER" >> /etc/lightdm/lightdm.conf.d/22-armbian-autologin.conf
							echo "autologin-user-timeout=0" >> /etc/lightdm/lightdm.conf.d/22-armbian-autologin.conf
							echo "user-session=xfce" >> /etc/lightdm/lightdm.conf.d/22-armbian-autologin.conf
							ln -s /lib/systemd/system/lightdm.service /etc/systemd/system/display-manager.service >/dev/null 2>&1
							service lightdm start >/dev/null 2>&1
						fi
					else
						rm /etc/lightdm/lightdm.conf.d/22-armbian-autologin.conf >/dev/null 2>&1
						ln -s /lib/systemd/system/lightdm.service /etc/systemd/system/display-manager.service >/dev/null 2>&1
						service lightdm start >/dev/null 2>&1
					fi
Igor Pecovnik's avatar
Igor Pecovnik committed
1072
1073
					# kill this bash script after desktop is up and if executed on console
					[[ $(tty | sed -e "s:/dev/::") == tty* ]] && kill -9 $$
Igor Pecovnik's avatar
Igor Pecovnik committed
1074
				fi
1075
			fi
Igor Pecovnik's avatar
Igor Pecovnik committed
1076
1077
1078
		fi
	;;

1079
	"Default" )
Aristo Chen's avatar
Aristo Chen committed
1080
		configure_desktop "--install-recommends"
1081
1082
	;;

Igor Pecovnik's avatar
Igor Pecovnik committed
1083
1084
1085
1086
1087
	"RDP" )
		if [[ -n $(service xrdp status | grep -w active) ]]; then
			systemctl stop xrdp.service >/dev/null 2>&1
			systemctl disable xrdp.service >/dev/null 2>&1
		else
1088
			if ! is_package_manager_running; then
Igor Pečovnik's avatar
Igor Pečovnik committed
1089
				debconf-apt-progress -- apt-get -y install xrdp vnc4server xorgxrdp
1090
1091
1092
1093
1094
1095
				systemctl enable xrdp.service >/dev/null 2>&1
				systemctl start xrdp.service >/dev/null 2>&1
				dialog --title "Info" --backtitle "$BACKTITLE" --nocancel --no-collapse --pause \
				"\nRemote graphical login to $BOARD_NAME using Microsoft Remote Desktop Protocol (RDP) is enabled." 11 57 3

			fi
Igor Pecovnik's avatar
Igor Pecovnik committed
1096
1097
1098
		fi
	;;

1099
1100
1101
1102
1103
1104
1105
1106
	"Thunderbird" )
		if ! check_if_installed thunderbird then ; then
			debconf-apt-progress -- apt-get -y install thunderbird
		else
			debconf-apt-progress -- apt-get -y purge thunderbird
		fi
	;;

Aristo Chen's avatar
Aristo Chen committed
1107
1108
1109
1110
1111
1112
1113
	"Gimp" )
		if ! check_if_installed gimp then ; then
			debconf-apt-progress -- apt-get -y install gimp
		else
			debconf-apt-progress -- apt-get -y purge gimp
		fi
	;;
1114

1115
1116
1117
1118
1119
	"Libre" )
		debconf-apt-progress -- apt-get -y purge libreoffice*
	;;

	"Writer" )
Igor Pecovnik's avatar
Igor Pecovnik committed
1120
1121
1122
		pkg_install="libreoffice-writer libreoffice-style-tango"
		if [[ "$DISTROID" == "xenial" ]]; then pkg_install+=" libreoffice-gtk"; else pkg_install+=" libreoffice-gtk2"; fi
		debconf-apt-progress -- apt-get -y install $pkg_install
1123
1124
1125
	;;

	"Suite" )
Igor Pecovnik's avatar
Igor Pecovnik committed
1126
1127
1128
		pkg_install="libreoffice libreoffice-style-tango"
		if [[ "$DISTROID" == "xenial" ]]; then pkg_install+=" libreoffice-gtk"; else pkg_install+=" libreoffice-gtk2"; fi
		debconf-apt-progress -- apt-get -y install $pkg_install
1129
1130
	;;

Igor Pecovnik's avatar
Igor Pecovnik committed
1131
1132
1133
1134

	# Stop low-level messages on console
	#
	"Lowlevel" )
Igor Pecovnik's avatar
Igor Pecovnik committed
1135
		dialog --title " Kernel messages " --backtitle "$BACKTITLE" --help-button \
Igor Pecovnik's avatar
Igor Pecovnik committed
1136
1137
1138
1139
1140
1141
		--help-label "Yes & reboot" --yes-label "Yes" --no-label "Cancel" --yesno "\nStop low-level messages on console?" 7 64
		exitstatus=$?;
		[[ $exitstatus = 0 ]] && sed -i 's/^#kernel.printk\(.*\)/kernel.printk\1/' /etc/sysctl.conf
		[[ $exitstatus = 2 ]] && sed -i 's/^#kernel.printk\(.*\)/kernel.printk\1/' /etc/sysctl.conf && reboot
	;;

1142
1143
1144
	# CPU speed and governor
	#
	"CPU" )
1145
		POLICY="policy0"
Aristo Chen's avatar
Aristo Chen committed
1146
		[[ $(grep -c '^processor' /proc/cpuinfo) -gt 4 ]] && POLICY="policy4"
1147
		[[ ! -d /sys/devices/system/cpu/cpufreq/policy4 ]] && POLICY="policy0"
1148
		generic_select "$(cat /sys/devices/system/cpu/cpufreq/$POLICY/scaling_available_frequencies)" "Select minimum CPU speed"
1149
		MIN_SPEED=$PARAMETER
1150
		generic_select "$(cat /sys/devices/system/cpu/cpufreq/$POLICY/scaling_available_frequencies)" "Select maximum CPU speed" "$PARAMETER"
1151
		MAX_SPEED=$PARAMETER
1152
		generic_select "$(cat /sys/devices/system/cpu/cpufreq/$POLICY/scaling_available_governors)" "Select CPU governor"
1153
1154
1155
1156
1157
1158
1159
1160
1161
1162
1163
1164
1165
1166
		GOVERNOR=$PARAMETER
		if [[ -n $MIN_SPEED && -n $MAX_SPEED && -n $GOVERNOR ]]; then
			dialog --colors --title " Apply and save changes " --backtitle "$BACKTITLE" --yes-label "OK" --no-label "Cancel" --yesno \
			"\nCPU frequency will be within \Z1$(($MIN_SPEED / 1000))\Z0 and \Z1$(($MAX_SPEED / 1000)) MHz\Z0. The governor \Z1$GOVERNOR\Z0 will decide which speed to use within this range." 9 58
			if [[ $? -eq 0 ]]; then
				sed -i "s/MIN_SPEED=.*/MIN_SPEED=$MIN_SPEED/" /etc/default/cpufrequtils
				sed -i "s/MAX_SPEED=.*/MAX_SPEED=$MAX_SPEED/" /etc/default/cpufrequtils
				sed -i "s/GOVERNOR=.*/GOVERNOR=$GOVERNOR/" /etc/default/cpufrequtils
				systemctl restart cpufrequtils
				sync
			fi
		fi
	;;

1167
1168
1169
1170
1171
1172
1173
1174
1175
1176
1177
1178
1179
1180
	"Avahi")
	if ! is_package_manager_running; then
		if check_if_installed avahi-daemon ; then
			service avahi-daemon stop
			debconf-apt-progress -- apt-get -y purge avahi-daemon
		else
			debconf-apt-progress -- apt-get -y install avahi-daemon
			[[ -f /usr/share/doc/avahi-daemon/examples/sftp-ssh.service ]] && cp /usr/share/doc/avahi-daemon/examples/sftp-ssh.service /etc/avahi/services/
			[[ -f /usr/share/doc/avahi-daemon/examples/ssh.service ]] && cp /usr/share/doc/avahi-daemon/examples/ssh.service /etc/avahi/services/
			service avahi-daemon restart
		fi
	fi
	;;

Igor Pecovnik's avatar
Igor Pecovnik committed
1181
1182
1183
1184

	# Edit boot environment
	#
	"Bootenv" )
Igor Pecovnik's avatar
Igor Pecovnik committed
1185
		dialog --title " Edit u-boot environment " --ok-label "Save" \
Igor Pecovnik's avatar
Igor Pecovnik committed
1186
1187
		--no-collapse --editbox /boot/armbianEnv.txt 30 0 2> /boot/armbianEnv.txt.out
		[[ $? = 0 ]] && mv /boot/armbianEnv.txt.out /boot/armbianEnv.txt
Igor Pečovnik's avatar
Igor Pečovnik committed
1188
		sync
Igor Pecovnik's avatar
Igor Pecovnik committed
1189
1190
1191
1192
1193
1194
	;;

	# Edit boot script
	#
	"Bootscript" )
		if [[ -f /boot/boot.ini ]]; then
Aristo Chen's avatar
Aristo Chen committed
1195
1196
1197
			dialog --title " Edit boot.ini script " --ok-label "Save" \
			--no-collapse --editbox /boot/boot.ini 30 0 2> /boot/boot.ini.out
			[[ $? = 0 ]] && mv /boot/boot.ini.out /boot/boot.ini
Igor Pecovnik's avatar
Igor Pecovnik committed
1198
1199
1200
1201
		fi
	;;


Igor Pecovnik's avatar
RC1    
Igor Pecovnik committed
1202
	# Toggle overlay items
Igor Pecovnik's avatar
Igor Pecovnik committed
1203
	#
1204
	"Hardware" )
1205
1206
1207
1208
1209
1210
1211
1212
1213
1214
1215
1216
1217
1218
1219
1220
1221
1222
1223
		# check if user agree to enter this area
		CHANGES="false"
		while true; do
			overlay_prefix=$(cat /boot/armbianEnv.txt | grep overlay_prefix | sed 's/overlay_prefix=//g')
			TARGET_BRANCH=$BRANCH
			exceptions "$BRANCH"
			MOTD=()
			LINES=()
			LIST_CONST=-3
			j=0
			DIALOG_CANCEL=1
			DIALOG_ESC=255
			while read line
			do
				STATUS=$([[ -n $(cat /boot/armbianEnv.txt | grep overlays | grep -w ${line}) ]] && echo "on")
				DESC=$(description "$line")
				MOTD+=( "$line" "$DESC" "$STATUS")
				LINES[ $j ]=$line
				(( j++ ))
1224
			done < <(ls -1 ${OVERLAYDIR}/${overlay_prefix}*.dtbo | sed 's/^.*\('${overlay_prefix}'.*\)/\1/g' | sed 's/'${overlay_prefix}'-//g' | sed 's/.dtbo//g' )
1225
1226

			exec 3>&1
Igor Pecovnik's avatar
Igor Pecovnik committed
1227
				selection=$(dialog --backtitle "$BACKTITLE" --colors --title "Toggle hardware configuration" --clear --cancel-label \
1228
				"Back" --ok-label "Save" --checklist "\nUse \Z1<space>\Z0 to toggle functions and save them. Exit when you are done.\n " \
1229
				0 0 0 "${MOTD[@]}" 2>&1 1>&3)
1230
1231
1232
1233
1234
1235
1236
1237
1238
1239
1240
1241
1242
				exit_status=$?
			exec 3>&-

			case $exit_status in
					$DIALOG_ESC)
					break
				;;
				0)
					CHANGES="true"
					newoverlays="$(echo "$selection" | sed "s|[^ ]* *|&|g")"
					sed -i "s/^overlays=.*/overlays=$newoverlays/" /boot/armbianEnv.txt
					if ! grep -q "overlays" /boot/armbianEnv.txt; then echo "overlays=$newoverlays" >> /boot/armbianEnv.txt; fi
					if [[ -z $newoverlays ]]; then sed -i "/^overlays/d" /boot/armbianEnv.txt; fi
Igor Pečovnik's avatar
Igor Pečovnik committed
1243
					sync
1244
1245
1246
1247
1248
1249
1250
1251
1252
1253
1254
1255
1256
				;;
				1)
					if [[ "$CHANGES" == "true" ]]; then
					dialog --title " Applying changes " --backtitle "$BACKTITLE" --yes-label "Reboot" \
					--no-label "Cancel" --yesno "\nReboot to enable new features?" 7 34
					if [[ $? = 0 ]]; then reboot; else break; fi
					else
						break
					fi
				;;
				esac
			done

Igor Pecovnik's avatar
Igor Pecovnik committed
1257
1258
	;;

1259
1260
1261
1262
1263
1264
1265
1266
	# Change to other mirrors
	#
	"Mirror" )

		IFS=$'\r\n'
		GLOBIGNORE='*'
		LIST_CONST=3
		BEFORE="$(cat /etc/apt/sources.list.d/armbian.list | sed 's/http/\nhttp/g' | grep ^http | sed 's/\(^http[^ <]*\)\(.*\)/\1/g' | sed 's/https\?:\/\///')"
Igor Pečovnik's avatar
Igor Pečovnik committed
1267
		BEFORE_DESC=$(description "${BEFORE}")
1268
		PREFIX="$(echo $BEFORE | cut -f1 -d".")"
Igor Pečovnik's avatar
Igor Pečovnik committed
1269
1270
		AVAL_MIRROR=()
		if [[ $PREFIX == beta ]]; then
Igor Pecovnik's avatar
Igor Pecovnik committed
1271
			AVAL_MIRROR=("beta.armbian.com" "mirrors.netix.net/armbian/apt/")
Igor Pečovnik's avatar
Igor Pečovnik committed
1272
			else
Igor Pecovnik's avatar
Igor Pecovnik committed
1273
			AVAL_MIRROR+=("apt.armbian.com" "mirrors.tuna.tsinghua.edu.cn/armbian/" "mirrors.netix.net/armbian/apt/" "mirrors.dotsrc.org/armbian-apt/")
Igor Pečovnik's avatar
Igor Pečovnik committed
1274
		fi
1275
1276
1277
1278
1279
1280
		local LIST=()
		for i in "${AVAL_MIRROR[@]}"
			do
			DESC=$(description "${i[0]}")
			[[ "${i[0]}" != "$BEFORE" ]] && LIST+=( "${i[0]//[[:blank:]]/}" "$DESC" )
		done
JC Staudt's avatar
JC Staudt committed
1281
1282
		LIST_LENGTH=$(($LIST_CONST+${#LIST[@]}/2));
		if [ "$LIST_LENGTH" -le 3 ]; then
1283
1284
1285
1286
			TARGET_MIRROR=${AVAL_MIRROR[0]}
			dialog --backtitle "$BACKTITLE" --title "Please wait" --colors --msgbox "\nThere are no mirrors available!" 7 35
		else
			exec 3>&1
1287
			TARGET_MIRROR=$(dialog --cancel-label "Cancel" --backtitle "$BACKTITLE" --no-collapse \
JC Staudt's avatar
JC Staudt committed
1288
			--title "Change repository location" --colors --clear --menu "\nfrom \Z1$BEFORE_DESC\Z0 to:\n " $((6+${LIST_LENGTH})) 60 15 "${LIST[@]}" 2>&1 1>&3)
1289
1290
1291
1292
1293
			exitstatus=$?;
			exec 3>&-
		fi

		if [[ $exitstatus == 0 ]]; then
Igor Pečovnik's avatar
Igor Pečovnik committed
1294
			sed -i "s~$BEFORE~$TARGET_MIRROR~" /etc/apt/sources.list.d/armbian.list
1295
1296
1297
			dialog --backtitle "$BACKTITLE" --title "Info" --colors --msgbox "\nArmbian package repository was switched to:\n\n\Z1$TARGET_MIRROR\Z0" 9 47
		fi
	;;
Igor Pecovnik's avatar
Igor Pecovnik committed
1298
1299
1300
1301
1302
1303
1304
1305

	# Toggle welcome screen items
	#
	"Welcome" )
		while true; do
		HOME="/etc/update-motd.d/"
		MOTD=()
		LINES=()
Igor Pecovnik's avatar
Igor Pecovnik committed
1306
		LIST_CONST=9
Igor Pecovnik's avatar
Igor Pecovnik committed
1307
1308
1309
1310
1311
1312
		j=0
		DIALOG_CANCEL=1
		DIALOG_ESC=255

		while read line
		do
Igor Pečovnik's avatar
Igor Pečovnik committed
1313
			STATUS=$([[ -x ${HOME}${line} ]] && echo "on")
Igor Pecovnik's avatar
Igor Pecovnik committed
1314
1315
1316
1317
1318
1319
			DESC=$(description "$line")
			MOTD+=( "$line" "$DESC" "$STATUS")
			LINES[ $j ]=$line
			(( j++ ))
		done < <(ls -1 $HOME)

JC Staudt's avatar
JC Staudt committed
1320
				LISTLENGTH="$(($LIST_CONST+${#MOTD[@]}/3))"
Igor Pecovnik's avatar
Igor Pecovnik committed
1321
1322
				exec 3>&1
				selection=$(dialog --backtitle "$BACKTITLE" --title "Toggle motd executing scripts" --clear --cancel-label \
1323
				"Back" --ok-label "Save" --checklist "\nChoose what you want to enable or disable:\n " \
JC Staudt's avatar
JC Staudt committed
1324
				$LISTLENGTH 80 15 "${MOTD[@]}" 2>&1 1>&3)
Igor Pecovnik's avatar
Igor Pecovnik committed
1325
1326
1327
1328
1329
1330
1331
1332
1333
1334
1335
1336
1337
1338
1339
				exit_status=$?
				exec 3>&-
				case $exit_status in
				$DIALOG_CANCEL | $DIALOG_ESC)
						break
						;;
				0)
						chmod -x ${HOME}*
						chmod +x $(echo "$selection" | sed "s|[^ ]* *|${HOME}&|g")
				;;
				esac
		done
	;;


1340
1341
	# Toggle sshd options
	#
Igor Pecovnik's avatar
Igor Pecovnik committed
1342
	"SSH" )
root's avatar
root committed
1343
	if ! is_package_manager_running; then
1344
		while true; do
root's avatar
root committed
1345
1346
1347
1348
1349
1350
			if ! check_if_installed libpam-google-authenticator ; then
				debconf-apt-progress -- apt-get -y install libpam-google-authenticator
			fi
			if ! check_if_installed qrencode ; then
				debconf-apt-progress -- apt-get -y install qrencode
			fi
Igor Pecovnik's avatar
Igor Pecovnik committed
1351
			DIALOG_CANCEL=2
1352
			DIALOG_ESC=255
1353
1354
			LIST_CONST=9
			WINDOW_SIZE=21
1355

1356
			# variables cleanup
1357
1358
			PermitRootLogin="";
			PubkeyAuthentication="";
1359
1360
1361
			PasswordAuthentication="";
			PhoneAuthentication=""
			MergeParameter="";
1362
1363
			ExtraDesc="";

Igor Pecovnik's avatar
Igor Pecovnik committed
1364
			Buttons="--no-cancel --ok-label "Save" --help-button --help-label Cancel"
1365
1366
1367

			# read values
			[[ $(grep "^PermitRootLogin" /etc/ssh/sshd_config | awk '{print $2}') == "yes" ]] 			&& PermitRootLogin="on"
Igor Pecovnik's avatar
Igor Pecovnik committed
1368
			[[ $(grep "^@include common-auth" /etc/pam.d/sshd | awk '{print $2}') == "common-auth" ]]  	&& PasswordAuthentication="on"
1369
1370
1371
1372
1373
1374
1375
			[[ $(grep "^PubkeyAuthentication" /etc/ssh/sshd_config | awk '{print $2}') == "yes" ]]  	&& PubkeyAuthentication="on"
			[[ -n $(grep "pam_google_authenticator.so" /etc/pam.d/sshd) ]] 								&& PhoneAuthentication="on"

			# create menu
			MOTD=( "PermitRootLogin" "Allow root login" "$PermitRootLogin" )
			MOTD+=( "PasswordAuthentication" "Password login" "$PasswordAuthentication" )
			MOTD+=( "PubkeyAuthentication" "SSH key login" "$PubkeyAuthentication" )
1376
			MOTD+=( "PhoneAuthentication" "Google two-step authentication with one-time passcode" "$PhoneAuthentication" )
1377

Igor Pecovnik's avatar
Igor Pecovnik committed
1378
			Buttons="--no-cancel --ok-label "Save" --help-button --help-label Cancel"
1379
			if [[ $PhoneAuthentication == "on" ]]; then
Igor Pecovnik's avatar
Igor Pecovnik committed
1380
				Buttons="--cancel-label Generate-token --ok-label "Save" --help-button --help-label Cancel"
1381
1382
				ExtraDesc="\n\Z1Note:\Z0 Two-step verification token is identical for all users on the system.\n \n"
				LIST_CONST=11
Igor Pecovnik's avatar
Igor Pecovnik committed
1383
1384
1385
				if [[ -f ~/.google_authenticator ]]; then
					Buttons="--cancel-label New-token --ok-label "Save" --help-button --help-label Cancel --extra-button --extra-label Show-token"
				fi
1386
1387
			fi

1388
1389
1390
			LISTLENGTH="$((${#MOTD[@]}/3))"
			HEIGHT="$((LISTLENGTH + $LIST_CONST))"

1391
			exec 3>&1
1392
1393
				selection=$(dialog --colors $Buttons --backtitle "$BACKTITLE" --title " Toggle sshd options " --clear --checklist \
				"\nChoose what you want to enable or disable:\n $ExtraDesc" $HEIGHT 0 $LISTLENGTH "${MOTD[@]}" 2>&1 1>&3)
1394
1395
1396
1397
1398
1399
1400
1401
1402
1403
1404
1405
				exit_status=$?
			exec 3>&-

			case $exit_status in
				$DIALOG_CANCEL | $DIALOG_ESC)
				break
				;;
				0)
					# read values, adjust config and restart service
					my_array=($selection)
					for((n=0;n<${#MOTD[@]};n++)); do
						if (( $(($n % 3 )) == 0 )); then
1406
1407

								# generic options if any
1408
								if [[ " ${my_array[*]} " == *" ${MOTD[$n]} "* ]]; then
1409
									sed -i "s/^#\?${MOTD[$n]}.*/${MOTD[$n]} yes/" /etc/ssh/sshd_config
1410
									else
1411
									sed -i "s/^#\?${MOTD[$n]}.*/${MOTD[$n]} no/" /etc/ssh/sshd_config
1412
								fi
1413
1414
1415
1416
1417
1418
1419
1420
1421
1422

								if [[ $n -eq 0 ]]; then

									# phone
									if [[ " ${my_array[*]} " == *" PhoneAuthentication "* ]]; then
										MergeParameter="keyboard-interactive"
										sed -i "s/^#\?ChallengeResponseAuthentication.*/ChallengeResponseAuthentication yes/" /etc/ssh/sshd_config
										sed -i -n '/password updating/{p;:a;N;/@include common-password/!ba;s/.*\n/auth required pam_google_authenticator.so nullok\n/};p' /etc/pam.d/sshd
										else
										MergeParameter=""
1423
										sed -i '/^auth required pam_google_authenticator.so nullok/ d' /etc/pam.d/sshd
1424
1425
1426
1427
1428
1429
1430
1431
1432
1433
1434
1435
1436
1437
1438
1439
1440
1441
1442
1443
1444
1445
1446
1447
1448
1449
1450
1451
1452
1453
										sed -i "s/^#\?ChallengeResponseAuthentication.*/ChallengeResponseAuthentication no/" /etc/ssh/sshd_config
									fi

									# password
									if [[ " ${my_array[*]} " == *" PasswordAuthentication "* ]]; then
											MergeParameter="password keyboard-interactive"
											sed -i "s/^#\?PasswordAuthentication.*/PasswordAuthentication yes/" /etc/ssh/sshd_config
											sed -i "s/^#\?ChallengeResponseAuthentication.*/ChallengeResponseAuthentication yes/" /etc/ssh/sshd_config
											sed -i "s/^\#@include common-auth/\@include common-auth/" /etc/pam.d/sshd
										else
											sed -i "s/^#\?PasswordAuthentication.*/PasswordAuthentication no/" /etc/ssh/sshd_config
											#sed -i "s/^#\?ChallengeResponseAuthentication.*/ChallengeResponseAuthentication no/" /etc/ssh/sshd_config
											sed -i "s/^\@include common-auth/\#@include common-auth/" /etc/pam.d/sshd
									fi

									# pubkey
									if [[ " ${my_array[*]} " == *" PubkeyAuthentication "* ]]; then
											MergeParameter="publickey keyboard-interactive "
											sed -i "s/^#\?PubkeyAuthentication.*/PubkeyAuthentication yes/" /etc/ssh/sshd_config
										else
											sed -i "s/^#\?PubkeyAuthentication.*/PubkeyAuthentication no/" /etc/ssh/sshd_config
									fi


									if [[ " ${my_array[*]} " == *" PubkeyAuthentication "* && " ${my_array[*]} " == *" PhoneAuthentication "* ]]; then
											MergeParameter="publickey,password publickey,keyboard-interactive"
											sed -i "s/^#\?PubkeyAuthentication.*/PubkeyAuthentication yes/" /etc/ssh/sshd_config
									fi


1454
								fi
1455
1456
						fi
					done
1457

1458
1459
1460
1461
1462
					if [[ -z $MergeParameter ]]; then
							sed -i '/^AuthenticationMethods.*/ d' /etc/ssh/sshd_config
						else
							sed -i '/^AuthenticationMethods.*/ d' /etc/ssh/sshd_config
							sed -i -n '/and ChallengeResponseAuthentication to/{p;:a;N;/UsePAM yes/!ba;s/.*\n/AuthenticationMethods '"$MergeParameter"'\n/};p' /etc/ssh/sshd_config
1463
1464
					fi

1465
					# reload sshd
1466
					systemctl restart sshd.service
1467
				;;
1468
1469
1470
				3)
					display_qr_code
				;;
Igor Pecovnik's avatar
Igor Pecovnik committed
1471
				1)
1472
1473
1474
1475
1476
1477
					dialog --colors --title " \Z1Warning\Z0 " --backtitle "$BACKTITLE" --yes-label "Generate" --no-label "No" --yesno "\nWhen you generate new token you have to scan it with your mobile device again.\n\nUnderstand?" 10 48
					if [[ $? = 0 ]]; then
						google-authenticator -t -d -f -r 3 -R 30 -W -q
						google_token_allusers
						display_qr_code
					fi
1478
				;;
1479
1480
				esac
		done
root's avatar
root committed
1481
	fi
1482
1483
1484
1485
	;;



Igor Pecovnik's avatar
Igor Pecovnik committed
1486
1487
1488
	# Switch to daily builds
	#
	"Nightly" )
1489

1490
		if ! is_package_manager_running; then
1491
			[[ -z $scripted ]] &&
JC Staudt's avatar
JC Staudt committed
1492
1493
1494
			dialog --colors --title " \Z1Warning\Z0 " --backtitle "$BACKTITLE" --yes-label "Yes" \
			--no-label "No" --yesno \
			"\nYou are switching to an untested auto-build repository which might break your system.\n\nContinue?" 10 48
1495

1496
			if [[ $? = 0 || -n $scripted ]]; then
1497
				sed -i 's/^deb http:\/\/[^ ]*/deb http:\/\/beta.armbian.com/' /etc/apt/sources.list.d/armbian.list
1498
				reload_bsp $branch
1499
			fi
Igor Pecovnik's avatar
Igor Pecovnik committed
1500
1501
1502
1503
		fi
	;;


1504
	# Switch to stable builds
Igor Pecovnik's avatar
Igor Pecovnik committed
1505
1506
	#
	"Stable" )
1507

1508
		if ! is_package_manager_running; then
1509
			[[ -z $scripted ]] &&
JC Staudt's avatar
JC Staudt committed
1510
1511
1512
			dialog --colors --title " \Z1Warning\Z0 " --backtitle "$BACKTITLE" --yes-label "Yes" \
			--no-label "No" --yesno \
			"\nYou are switching to a stable repository where you will receive future updates.\n\nContinue?" 9 44
1513

1514
			if [[ $? = 0 || -n $scripted ]]; then
1515
				sed -i 's/^deb http:\/\/beta/deb http:\/\/apt/' /etc/apt/sources.list.d/armbian.list
1516
				reload_bsp $branch
1517
			fi
Igor Pecovnik's avatar
Igor Pecovnik committed
1518
		fi
1519

Igor Pecovnik's avatar
Igor Pecovnik committed
1520
1521
	;;

1522
	# Switch to alternative configurations
1523
1524
	#
	"DTB" )
1525
		if ! is_package_manager_running; then
1526
			aval_dtbs
1527
			if [[ $exitstatus = 0 ]]; then
Aristo Chen's avatar
Aristo Chen committed
1528
1529
1530
1531
1532
1533
1534
				BOX_LENGTH=$((${#TARGET_BOARD}+28));
				dialog --title "Switching board config" --backtitle "$BACKTITLE" --yes-label "Reboot" --no-label "Cancel" --yesno "\nReboot to $TARGET_BOARD settings?" 7 $BOX_LENGTH
				if [[ $? = 0 ]]; then
					sed -i "s/^fdt_file=.*/fdt_file=$TARGET_BOARD/" /boot/armbianEnv.txt 2> /dev/null && grep -q "fdt_file=$TARGET_BOARD" /boot/armbianEnv.txt 2> /dev/null || echo "fdt_file=$TARGET_BOARD" >> /boot/armbianEnv.txt
					[[ "$LINUXFAMILY" = odroidxu4 ]] && sed -i "s/^fdt_file/board_name/" /boot/armbianEnv.txt && sed -i "s/^BOARD_NAME.*/BOARD_NAME=\"Odroid ${TARGET_BOARD^^}\"/" /etc/armbian-release
					reboot;
				fi
1535
			fi
1536
1537
		fi
	;;
Igor Pecovnik's avatar
Igor Pecovnik committed
1538
1539
1540
1541
1542


	# Toggle virtual read-only root filesystem
	#
	"Overlayroot" )
1543
		if ! is_package_manager_running; then
Igor Pečovnik's avatar
Igor Pečovnik committed
1544
			if [[ -n $(mount | grep -w overlay | grep -v chromium) ]]; then
1545
1546
1547
1548
1549
1550
1551
1552
1553
				dialog --title " Root overlay " --backtitle "$BACKTITLE" --yes-label "Disable" \
				--no-label "Cancel" \
				--yesno "\nYour system is already virtual read-only.\n\nDo you want to disable this feature and reboot?" 9 60
				[[ $? = 0 ]] && overlayroot-chroot sed -i "s/^overlayroot=.*/overlayroot=\"\"/" /etc/overlayroot.conf && \
				overlayroot-chroot rm /etc/update-motd.d/97-overlayroot && reboot
			else
				debconf-apt-progress -- apt-get -o Dpkg::Options::="--force-confnew" -y --no-install-recommends install overlayroot
				echo '#!/bin/bash' > /etc/update-motd.d/97-overlayroot
				echo 'if [ -n "$(mount | grep -w tmpfs-root)" ]; then \
1554
				echo -e "[\e[0m \e[1mremember: your system is in virtual read only mode\e[0m ]\n";fi' >> /etc/update-motd.d/97-overlayroot
1555
1556
1557
1558
1559
				chmod +x /etc/update-motd.d/97-overlayroot
				dialog --title "Root overlay" --backtitle "$BACKTITLE" --yes-label "Reboot" \
				--no-label "Cancel" --yesno "\nEnable virtual read-only root and reboot." 7 45
				[[ $? = 0 ]] && sed -i "s/^overlayroot=.*/overlayroot=\"tmpfs\"/" /etc/overlayroot.conf && reboot
			fi
Igor Pecovnik's avatar
Igor Pecovnik committed
1560
1561
1562
		fi
	;;

Igor Pecovnik's avatar
Igor Pecovnik committed
1563

Igor Pecovnik's avatar
Igor Pecovnik committed
1564
	esac
1565
1566
1567


[[ -n $scripted ]] && exit
Igor Pečovnik's avatar
Igor Pečovnik committed
1568
}