debian-config-jobs 54.2 KB
Newer Older
Igor Pecovnik's avatar
Igor Pecovnik committed
1
2
#!/bin/bash
#
3
#
Igor Pecovnik's avatar
Igor Pecovnik committed
4
5
6
7
8
9
# Copyright (c) 2017 Igor Pecovnik, igor.pecovnik@gma**.com
#
# This file is licensed under the terms of the GNU General Public
# License version 2. This program is licensed "as is" without any
# warranty of any kind, whether express or implied.

ThomasKaiser's avatar
ThomasKaiser committed
10
[[ -n ${SUDO_USER} ]] && SUDO="sudo "
Igor Pecovnik's avatar
Igor Pecovnik committed
11
12
13

function jobs ()
{
Igor Pecovnik's avatar
Igor Pecovnik committed
14
15
16
	# Shows box with loading ...
	#
	dialog --backtitle "$BACKTITLE" --title " Please wait " --infobox "\nLoading ${selection,,} submodule ... " 5 $((26+${#selection}))
Igor Pecovnik's avatar
Igor Pecovnik committed
17
18
19
20
21
22
23
24
	case $1 in

	#-------------------------------------------------------------------------------------------------------------------------------------#


	# Application installer
	#
	"Softy" )
Igor Pecovnik's avatar
Igor Pecovnik committed
25
		[[ -f softy ]] && ./softy || softy
Igor Pecovnik's avatar
Igor Pecovnik committed
26
27
	;;

28
29
	# Remove BT
	#
30
	"BT remove" )
31
32
33
34
35
		if ! is_package_manager_running; then
			debconf-apt-progress -- apt-get -y remove bluetooth bluez bluez-tools
			check_if_installed xserver-xorg && debconf-apt-progress -- apt-get -y remove pulseaudio-module-bluetooth blueman
			debconf-apt-progress -- apt -y -qq autoremove
		fi
36
37
38
39
	;;

	# Enabling BT
	#
40
	"BT install" )
41
		if ! is_package_manager_running; then
42
43
44
			debconf-apt-progress -- apt-get -y install bluetooth bluez bluez-tools
			check_if_installed xserver-xorg && debconf-apt-progress -- apt-get -y --no-install-recommends install pulseaudio-module-bluetooth blueman
		fi
45
46
47
48
49
	;;

	# Removing IR
	#
	"Remove IR" )
50
51
52
53
		if ! is_package_manager_running; then
			debconf-apt-progress -- apt-get -y remove lirc
			debconf-apt-progress -- apt -y -qq autoremove
		fi
54
55
56
57
58
	;;

	# Enabling IR
	#
	"IR" )
59
60
61
		if ! is_package_manager_running; then
			debconf-apt-progress -- apt-get -y --no-install-recommends install lirc
		fi
62
63
	;;

Igor Pecovnik's avatar
Igor Pecovnik committed
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95

	# Sharing USB ports
	#
	"USB redirector" )
		if [[ -n $(netstat -lnt | awk '$6 == "LISTEN" && $4 ~ ".'32032'"') ]]; then
			[[ -f /usr/local/usb-redirector/uninstall.sh ]] && /usr/local/usb-redirector/uninstall.sh uninstall
			rm -f /usr/local/bin/usbclnt
		else
			TARGET_BRANCH=$BRANCH
			exceptions "$BRANCH"
			IFS='.' read -a array <<< $(uname -r)
			[[ -z $(dpkg -l | grep linux-headers) ]] && debconf-apt-progress -- apt-get -y \
			install linux-headers${TARGET_BRANCH}-${TARGET_FAMILY}
			rm -rf /usr/src/usb-redirector-linux-arm-eabi
			if (( "${array[0]}" == "4" )) && (( "${array[1]}" >= "1" )); then
				wget -qO- http://www.incentivespro.com/usb-redirector-linux-arm-eabi.tar.gz | tar xz -C /usr/src
			else
				wget -qO- https://raw.githubusercontent.com/armbian/build/master/packages/blobs/usb-redirector/usb-redirector-old.tgz \
				| tar xz -C /usr/src
			fi
			cd /usr/src/usb-redirector-linux-arm-eabi/
			./installer.sh install
			sleep 3
			check_port "32032" "USB Redirector"
		fi
	;;


	# Simple CLI monitoring
	#
	"Monitor" )
		clear
ThomasKaiser's avatar
ThomasKaiser committed
96
97
		armbianmonitor -m
		sleep 2
Igor Pecovnik's avatar
Igor Pecovnik committed
98
99
	;;

Igor Pecovnik's avatar
Igor Pecovnik committed
100
101
102
103
104
105
106
107
        # SBC-becn
        #
        "Benchmarking" )
		if [[ ! -f /usr/local/bin/sbc-benc ]]; then
			wget -q -O /usr/local/bin/sbc-bench https://raw.githubusercontent.com/ThomasKaiser/sbc-bench/master/sbc-bench.sh
			chmod +x /usr/local/bin/sbc-bench
		fi
		sbc-bench
Igor Pečovnik's avatar
Igor Pečovnik committed
108
109
		echo ""
		read -n 1 -s -p "Press any key to continue"
Igor Pecovnik's avatar
Igor Pecovnik committed
110
111
        ;;

Igor Pecovnik's avatar
Igor Pecovnik committed
112

Igor Pecovnik's avatar
Igor Pecovnik committed
113
114
115
116
117
118
119
120
121
122
	# Send diagnostics
	#
	"Diagnostics" )
		clear
		armbianmonitor -u
		echo ""
		read -n 1 -s -p "Press any key to continue"
	;;


Igor Pecovnik's avatar
Igor Pecovnik committed
123
124
125
	# Control board consumption
	#
	"Consumption" )
126
		clear
Igor Pecovnik's avatar
Igor Pecovnik committed
127
		h3consumption
ThomasKaiser's avatar
ThomasKaiser committed
128
		echo -e "\nType \e[92m${SUDO}${0##*/}\e[0m to get back\n"
Igor Pecovnik's avatar
Igor Pecovnik committed
129
130
131
132
133
134
135
		exit
	;;


	# Board (fex) settings editor
	#
	"Fexedit" )
136
137
138
139
140
		exec 3>&1
		monitor=$(dialog --print-maxsize 2>&1 1>&3)
		exec 3>&-
		mon_x=$(echo $monitor | awk '{print $2}' | sed 's/,//')
		mon_y=$(echo $monitor | awk '{print $3}' | sed 's/,//')
Igor Pecovnik's avatar
Igor Pecovnik committed
141
142
143
144
		TEMP=$(mktemp -d || exit 1)
		trap "rm -rf \"${TEMP}\" ; exit 0" 0 1 2 3 15
		bin2fex /boot/script.bin ${TEMP}/tempfex.txt >/dev/null 2>&1
		dialog --title "Edit u-boot environment" \
145
		--ok-label "Save" --no-collapse --editbox ${TEMP}/tempfex.txt $mon_y 0 2> ${TEMP}/tempfex.out
Igor Pecovnik's avatar
Igor Pecovnik committed
146
147
148
149
		[[ $? = 0 ]] && fex2bin ${TEMP}/tempfex.out /boot/script.bin
	;;


150
151
152


	#
Igor Pecovnik's avatar
Igor Pecovnik committed
153
154
155
	# Install kernel headers
	#
	"Headers" )
156
157
158
		if ! is_package_manager_running; then
			TARGET_BRANCH=$BRANCH
			exceptions "$BRANCH"
159
			REMOVE_PKG="linux-headers-*"
Igor Pečovnik's avatar
Bugfix    
Igor Pečovnik committed
160
			if [[ -f /etc/armbian-release ]]; then
161
162
163
164
				INSTALL_PKG="linux-headers${TARGET_BRANCH}-${TARGET_FAMILY}";
				else
				INSTALL_PKG="linux-headers-$(uname -r | sed 's/'-$(dpkg --print-architecture)'//')";
			fi
165
			if [[ -n $(dpkg -l | grep linux-headers) ]]; then
166
					debconf-apt-progress -- apt-get -y purge ${REMOVE_PKG}
167
					rm -rf /usr/src/linux-headers*
168
			else
169
					debconf-apt-progress -- apt-get -y install ${INSTALL_PKG}
170
			fi
171
172
			# cleanup
			debconf-apt-progress -- apt -y autoremove
Igor Pecovnik's avatar
Igor Pecovnik committed
173
174
175
176
		fi
	;;


177
178


Igor Pecovnik's avatar
Igor Pecovnik committed
179
	#
root's avatar
root committed
180
181
182
	# Install kernel source
	#
	"Source" )
Igor Pecovnik's avatar
Igor Pecovnik committed
183
                if ! is_package_manager_running; then
184
		PACKAGE=$(echo "$SOURCE_PKG" | sed "s/-next//" | sed "s/-dev//" | sed "s/-default//")
Igor Pecovnik's avatar
Igor Pecovnik committed
185
                        if [[ -n $(dpkg -l | grep $SOURCE_PKG) ]]; then
186
                                        debconf-apt-progress -- apt-get -y purge linux-source*
Igor Pecovnik's avatar
Igor Pecovnik committed
187
188
					# cleanup
		                        debconf-apt-progress -- apt -y autoremove
189
					rm -r /usr/src/linux-source*
Igor Pecovnik's avatar
Igor Pecovnik committed
190
191
                        else
                                        debconf-apt-progress -- apt-get -y install ${SOURCE_PKG}
192
193
194
195
196
					mkdir -p /usr/src/$PACKAGE
					(pv -n /usr/src/$PACKAGE".tar.xz" | xz -d -T0 - | tar xf - -C /usr/src/$PACKAGE ) 2>&1 | dialog --colors --backtitle "$BACKTITLE" --title " Please wait! " --gauge "\nDecompressing kernel sources to /usr/src/$PACKAGE" 8 80
					xz -d /usr/src/*config.xz --stdout > /usr/src/$PACKAGE/.config
					rm /usr/src/$PACKAGE".tar.xz" /usr/src/*config.xz
					dialog --colors --backtitle "$BACKTITLE" --no-collapse --title " Kernel source " --clear --msgbox "\nYou will find pre-configured kernel sources in /usr/src/$PACKAGE" 7 72
Igor Pecovnik's avatar
Igor Pecovnik committed
197
198
199
200
201
202
203
                        fi
                fi
        ;;




204
205
206
207
	# Toggle mini and full firmware
	#
	"Full"|"Mini" )
		if ! is_package_manager_running; then
JC Staudt's avatar
JC Staudt committed
208
			debconf-apt-progress -- apt-get -y purge armbian-firmware* # workaround since pkg replace doesn't work properly
Igor Pecovnik's avatar
Igor Pecovnik committed
209
			debconf-apt-progress -- apt-get -y install armbian-firmware$(echo -"${1,,}" | sed 's/-mini//')
210
211
212
213
		fi
	;;


Igor Pecovnik's avatar
Igor Pecovnik committed
214
215
216
	# Set the display resolution
	#
	"Display" )
217
		# show display modes menu
218
219
220
		if [[ -f /usr/bin/h3disp ]]; then
			# h3 boards
			get_h3modes
221
			dialog --title " Display output type " --colors --help-button --help-label "Cancel" --no-label "DVI" --yes-label "HDMI" \
222
223
224
225
226
227
228
229
230
			--backtitle "$BACKTITLE" --yesno "\nIn case you use an HDMI-to-DVI converter choose DVI!" 7 57
			output_type=$?
			if [[ $output_type = 0 || $output_type = 1 ]]; then
				if [[ $output_type = 0 ]]; then
					display_cmd="h3disp -m $SCREEN_RESOLUTION";
					else
					display_cmd="h3disp -m $SCREEN_RESOLUTION -d";
				fi

231

232
			fi
233
234
235
		elif [[ "$LINUXFAMILY" = odroidc* ]]; then
			get_odroidmodes
			display_cmd="sed -i \"s/^setenv m .*/# &/\" /boot/boot.ini;sed -i '/setenv m \"$SCREEN_RESOLUTION\"/s/^# //g' /boot/boot.ini";
236
237
238
239
240
241
		else
			# a20 boards
			get_a20modes
			display_cmd="sed -i \"s/^disp_mode=.*/disp_mode=$SCREEN_RESOLUTION/\" /boot/armbianEnv.txt";
		fi

242
		dialog --title " Display resolution " --colors --no-label "Cancel" --backtitle "$BACKTITLE" --yesno \
243
244
245
246
		"\nSwitching to \Z1$SCREEN_RESOLUTION\Z0 and reboot?" 7 42
		if [[ $? = 0 ]]; then
			eval $display_cmd > /dev/null
			reboot
247
		fi
Igor Pecovnik's avatar
Igor Pecovnik committed
248
249
250
251
252
253
254
255
256
	;;


	#-------------------------------------------------------------------------------------------------------------------------------------#
	#-------------------------------------------------------------------------------------------------------------------------------------#
	#-------------------------------------------------------------------------------------------------------------------------------------#



Igor Pecovnik's avatar
RC1    
Igor Pecovnik committed
257
258
259
	# Select dynamic or edit static IP address
	#
	"IP" )
260
261
			# check if we have systemd networking in action
			SYSTEMDNET=$(service systemd-networkd status | grep -w active | grep -w running)
262
263
			dialog --title " IP address assignment " --colors --backtitle "$BACKTITLE" --help-button --help-label "Cancel" \
			--yes-label "DHCP" --no-label "Static" --yesno \
JC Staudt's avatar
JC Staudt committed
264
			"\n\Z1DHCP:\Z0   automatic IP assignment by your router or DHCP server\n\n\Z1Static:\Z0 manually fixed IP address" 9 70
265
			exitstatus=$?;
266
267

			# dynamic
268
			if [[ $exitstatus = 0 ]]; then
269
270
271
272
273
274
275
276
				if [[ -n $SYSTEMDNET ]]; then
					filename="/etc/systemd/network/10-${DEFAULT_ADAPTER}.network"
					if [[ -f $filename ]]; then
						sed -i '/Network/,$d' $filename
						echo -e "[Network]" >>$filename
						echo -e "DHCP=ipv4" >>$filename
					fi
				else
277
					if [[ -n $(LC_ALL=C nmcli device status | grep $DEFAULT_ADAPTER | grep connected) ]]; then
278
279
280
						nmcli connection delete uuid $(LC_ALL=C nmcli -f UUID,DEVICE connection show | grep $DEFAULT_ADAPTER | awk '{print $1}') >/dev/null 2>&1
						nmcli con add con-name "Armbian ethernet" type ethernet ifname $DEFAULT_ADAPTER >/dev/null 2>&1
						nmcli con up "Armbian ethernet" >/dev/null 2>&1
281
282
283
						else
						create_if_config "$DEFAULT_ADAPTER" "$DEFAULT_ADAPTER" "dynamic" > /etc/network/interfaces
					fi
284
				fi
285
			fi
286
287

			# static
288
			if [[ $exitstatus = 1 ]]; then
Igor Pecovnik's avatar
RC1    
Igor Pecovnik committed
289
				create_if_config "$DEFAULT_ADAPTER" "$DEFAULT_ADAPTER" "fixed" > /dev/null
290
291
292
				if [[ -n $SYSTEMDNET ]]; then
					systemd_ip_editor "${DEFAULT_ADAPTER}"
				else
293
294
295
296
297
					if [[ -n $(LC_ALL=C nmcli device status | grep $DEFAULT_ADAPTER | grep connected) ]]; then
						nm_ip_editor "$DEFAULT_ADAPTER"
					else
						ip_editor "$DEFAULT_ADAPTER" "$DEFAULT_ADAPTER" "/etc/network/interfaces"
					fi
298
				fi
Igor Pecovnik's avatar
RC1    
Igor Pecovnik committed
299
300
301
			fi
	;;

Igor Pečovnik's avatar
Igor Pečovnik committed
302
	# Start network performance daemon
303
304
	#
	"Iperf3" )
Igor Pečovnik's avatar
Igor Pečovnik committed
305
			#
306
307
308
309
310
311
312
			if pgrep -x "iperf3" > /dev/null
			then
				pkill iperf3
			else
				iperf3 -s -D
			fi
	;;
Igor Pecovnik's avatar
Igor Pecovnik committed
313

Igor Pečovnik's avatar
Igor Pečovnik committed
314

JC Staudt's avatar
JC Staudt committed
315
	# Toggle IPv6
Igor Pečovnik's avatar
Igor Pečovnik committed
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
	#
	"IPV6" )
			#
			sed -i --follow-symlinks '/^net.ipv6.conf*/d' /etc/sysctl.d/99-sysctl.conf
			if [ -f "/etc/apt/apt.conf.d/99force-ipv4" ]; then
				rm /etc/apt/apt.conf.d/99force-ipv4
				echo 'net.ipv6.conf.all.disable_ipv6 = 0' >> /etc/sysctl.d/99-sysctl.conf
				echo 'net.ipv6.conf.default.disable_ipv6 = 0' >> /etc/sysctl.d/99-sysctl.conf
				echo 'net.ipv6.conf.lo.disable_ipv6 = 0' >> /etc/sysctl.d/99-sysctl.conf
			else
				echo 'Acquire::ForceIPv4 "true";' > /etc/apt/apt.conf.d/99force-ipv4
				echo 'net.ipv6.conf.all.disable_ipv6 = 1' >> /etc/sysctl.d/99-sysctl.conf
				echo 'net.ipv6.conf.default.disable_ipv6 = 1' >> /etc/sysctl.d/99-sysctl.conf
				echo 'net.ipv6.conf.lo.disable_ipv6 = 1' >> /etc/sysctl.d/99-sysctl.conf
			fi
			sysctl -p > /dev/null
	;;


Igor Pecovnik's avatar
Igor Pecovnik committed
335
336
337
338
339
	# Connect to wireless access point
	#
	"WiFi" )
			# disable AP mode on certain adapters
			wlan_exceptions "off"
340
			[[ "$reboot_module" == true ]] && dialog --backtitle "$BACKTITLE" --title " Warning " --msgbox "\nReboot is required for this adapter to switch to STA mode" 7 62 && reboot
Igor Pecovnik's avatar
Igor Pecovnik committed
341
342
343
			nmtui-connect
	;;

344

345
346
347
	# Connect to 3G/4G network
	#
	"LTE" )
root's avatar
root committed
348
	if ! is_package_manager_running; then
349
350
351
352
353
354
355
			if [[ $LTE_MODEM == *online* ]]; then
				dialog --title " LTE modem is connected " --colors --backtitle "$BACKTITLE" --yes-label "Back" --no-label "Disconnect" --yesno "\n\Z1Disconnect:\Z0 kill mobile connection\n\n" 7 42
				[[ $? = 1 ]] && lte "$LTE_MODEM_ID" "off"
			else
				dialog --title " LTE modem is disconnected " --colors --backtitle "$BACKTITLE" --yes-label "Back" --no-label "Connect" --yesno "\n\Z1Connect:\Z0 dial mobile connection\n\n" 7 42
				[[ $? = 1 ]] && lte "$LTE_MODEM_ID" "on"
			fi
root's avatar
root committed
356
	fi
357
358
359
	;;


360
361
362
363
364
	# Connect to wireless access point
	#
	"Clear" )
			# remove managed interfaces
			systemctl daemon-reload
Igor Pecovnik's avatar
Igor Pecovnik committed
365
			nmcli con delete $(nmcli --fields NAME,UUID,TYPE con | grep wifi | awk '{print $2}')
366
367
			sed 's/interface-name:wl.*//' -i /etc/NetworkManager/conf.d/10-ignore-interfaces.conf
			sed 's/,$//' -i /etc/NetworkManager/conf.d/10-ignore-interfaces.conf
368
			rm -f /etc/network/interfaces.d/armbian.ap.*
Igor Pecovnik's avatar
Igor Pecovnik committed
369
			rm -f /etc/dnsmasq.conf
370
371
			systemctl stop dnsmasq
			systemctl disable dnsmasq
Igor Pecovnik's avatar
Igor Pecovnik committed
372
			iptables -t nat -D POSTROUTING 1 >/dev/null 2>&1
373
374
			systemctl stop armbian-restore-iptables.service
			systemctl disable armbian-restore-iptables.service
Igor Pecovnik's avatar
Igor Pecovnik committed
375
376
			rm -f /etc/iptables.ipv4.nat
			rm -f /var/run/hostapd/* >/dev/null 2>&1
377
378
379
380
			reload-nety
	;;


Igor Pecovnik's avatar
Igor Pecovnik committed
381
382
383
	# Create WiFi access point
	#
	"Hotspot" )
384
	if ! is_package_manager_running; then
Igor Pecovnik's avatar
Igor Pecovnik committed
385
		systemctl daemon-reload
386
		CURRENT_UUID=$(LC_ALL=C nmcli -f DEVICE,TYPE,STATE device status | grep -w " wifi " | grep -w " disconnected")
Igor Pecovnik's avatar
Igor Pecovnik committed
387
		if [[ -n $(service hostapd status | grep -w active | grep -w running) ]]; then
Igor Pecovnik's avatar
Igor Pecovnik committed
388
			if [[ -n $HOSTAPDBRIDGE ]]; then
389
				dialog --title " Hostapd service is running " --colors --backtitle "$BACKTITLE" --help-button \
390
				--help-label "Cancel" --yes-label "Stop and reboot" --no-label "Edit" --yesno \
391
				"\n\Z1Stop:\Z0 stop and reboot\n\n\Z1Edit:\Z0 change basic parameters: SSID, password and channel" 9 70
Igor Pecovnik's avatar
Igor Pecovnik committed
392
393

			else
394
				dialog --title " Hostapd service is running " --colors --backtitle "$BACKTITLE" --help-button \
395
				--help-label "Cancel" --yes-label "Stop" --no-label "Edit" --yesno \
396
				"\n\Z1Stop:\Z0 stop providing Access Point\n\n\Z1Edit:\Z0 change basic parameters: SSID, password and channel" 9 70
Igor Pecovnik's avatar
Igor Pecovnik committed
397
			fi
Igor Pecovnik's avatar
Igor Pecovnik committed
398
399
			exitstatus=$?;
			if [[ $exitstatus = 0 ]]; then
JC Staudt's avatar
JC Staudt committed
400
				dialog --backtitle "$BACKTITLE" --title " Please wait " --infobox "\nDisabling hotspot. Please wait!" 5 35
Igor Pecovnik's avatar
Igor Pecovnik committed
401
				sed -i "s/^DAEMON_CONF=.*/DAEMON_CONF=/" /etc/init.d/hostapd
402
				# disable DNS
Igor Pecovnik's avatar
Igor Pecovnik committed
403
				systemctl daemon-reload
Igor Pecovnik's avatar
Cleanup    
Igor Pecovnik committed
404
				systemctl disable dnsmasq.service >/dev/null 2>&1
405

Igor Pecovnik's avatar
Igor Pecovnik committed
406
				ifdown $WIRELESS_ADAPTER 2> /dev/null
407
				rm -f /etc/network/interfaces.d/armbian.ap.*
Igor Pecovnik's avatar
Igor Pecovnik committed
408
				rm -f /etc/dnsmasq.conf
Igor Pecovnik's avatar
Igor Pecovnik committed
409
				iptables -t nat -D POSTROUTING 1 >/dev/null 2>&1
Igor Pecovnik's avatar
Igor Pecovnik committed
410
				rm -f /etc/iptables.ipv4.nat
411
412
				systemctl stop armbian-restore-iptables.service
				systemctl disable armbian-restore-iptables.service				rm -f /var/run/hostapd/* >/dev/null 2>&1
Igor Pecovnik's avatar
Cleanup    
Igor Pecovnik committed
413
				sed -i '/^iptables/ d' /etc/rc.local
414
				sed -i '/^service dnsmasq/ d' /etc/rc.local
415
416
				sed 's/interface-name:wl.*//' -i /etc/NetworkManager/conf.d/10-ignore-interfaces.conf
				sed 's/,$//' -i /etc/NetworkManager/conf.d/10-ignore-interfaces.conf
Igor Pecovnik's avatar
Igor Pecovnik committed
417
				iptables -F
418
419
				# reload services
				reload-nety
Igor Pecovnik's avatar
Igor Pecovnik committed
420
				[[ -n $HOSTAPDBRIDGE ]] && reboot
Igor Pecovnik's avatar
Igor Pecovnik committed
421
			fi
422
			if [[ $exitstatus = 1 ]]; then wlan_edit; reload-nety "reload"; fi
Igor Pecovnik's avatar
Cleanup    
Igor Pecovnik committed
423
		elif [[ -z $CURRENT_UUID ]]; then
Igor Pecovnik's avatar
Igor Pecovnik committed
424
				dialog --title " Info " --backtitle "$BACKTITLE" --no-collapse --msgbox "\nAll wireless connections are in use." 7 40
Igor Pecovnik's avatar
Igor Pecovnik committed
425
		else
426
427
428
				# check for low quality drivers and combinations
				check_and_warn

Igor Pecovnik's avatar
Igor Pecovnik committed
429
				# remove interfaces from managed list
430
431
432
433
				if [[ -f /etc/NetworkManager/conf.d/10-ignore-interfaces.conf ]]; then
					sed 's/interface-name:wl.*//' -i /etc/NetworkManager/conf.d/10-ignore-interfaces.conf
					sed 's/,$//' -i /etc/NetworkManager/conf.d/10-ignore-interfaces.conf
				fi
434

435
436
437
438
439
440
441
				# clear current settings
				rm -f /etc/network/interfaces.d/armbian.ap.nat
				rm -f /etc/network/interfaces.d/armbian.ap.bridge
				service networking restart
				service network-manager restart
				{ for ((i = 0 ; i <= 100 ; i+=20)); do sleep 1; echo $i; done } | dialog --title " Initializing wireless adapters " --colors --gauge "" 5 50 0

442
443
444
445
446
447
				# start with basic config
				if grep -q "^## IEEE 802.11ac" /etc/hostapd.conf; then sed '/## IEEE 802.11ac\>/,/^## IEEE 802.11ac\>/ s/.*/#&/' -i /etc/hostapd.conf; fi
				if grep -q "^## IEEE 802.11a" /etc/hostapd.conf; then sed '/## IEEE 802.11a\>/,/^## IEEE 802.11a\>/ s/.*/#&/' -i /etc/hostapd.conf; fi
				if grep -q "^## IEEE 802.11n" /etc/hostapd.conf; then sed '/## IEEE 802.11n/,/^## IEEE 802.11n/ s/.*/#&/' -i /etc/hostapd.conf; fi
				sed -i "s/^channel=.*/channel=5/" /etc/hostapd.conf

448
				service network-manager reload
Igor Pecovnik's avatar
Igor Pecovnik committed
449
450
451
452
453
				# change special adapters to AP mode
				wlan_exceptions "on"
				# check for WLAN interfaces
				get_wlan_interface
				# add interface to unmanaged list
454
455
456
457
458
459
460
				if [[ -f /etc/NetworkManager/conf.d/10-ignore-interfaces.conf ]]; then
					[[ -z $(grep -w unmanaged-devices= /etc/NetworkManager/conf.d/10-ignore-interfaces.conf) ]] && sed '$ s/$/,/' -i /etc/NetworkManager/conf.d/10-ignore-interfaces.conf
					sed '$ s/$/'"interface-name:$WIRELESS_ADAPTER"'/' -i /etc/NetworkManager/conf.d/10-ignore-interfaces.conf
				else
					echo "[keyfile]" > /etc/NetworkManager/conf.d/10-ignore-interfaces.conf
					echo "unmanaged-devices=interface-name:$WIRELESS_ADAPTER" >> /etc/NetworkManager/conf.d/10-ignore-interfaces.conf
				fi
461
				service network-manager reload
Igor Pecovnik's avatar
Igor Pecovnik committed
462
				# display dialog
463
464
				dialog --colors --backtitle "$BACKTITLE" --title "Please wait" --infobox \
				"\nWireless adapter: \Z1${WIRELESS_ADAPTER}\Z0\n\nProbing nl80211 hostapd driver compatibility." 7 50
465
				debconf-apt-progress -- apt-get --reinstall -o Dpkg::Options::="--force-confnew" -y -qq --no-install-recommends install hostapd
Igor Pecovnik's avatar
Igor Pecovnik committed
466
467
468
469
470
				# change to selected interface
				sed -i "s/^interface=.*/interface=$WIRELESS_ADAPTER/" /etc/hostapd.conf
				# add hostapd.conf to services
				sed -i "s/^DAEMON_CONF=.*/DAEMON_CONF=\/etc\/hostapd.conf/" /etc/init.d/hostapd
				# check both options
Igor Pecovnik's avatar
Igor Pecovnik committed
471
472
473
474
475
476
				# add allow cli access if not exists. temporally
				if ! grep -q "ctrl_interface" /etc/hostapd.conf; then
					echo "" >> /etc/hostapd.conf
					echo "ctrl_interface=/var/run/hostapd" >> /etc/hostapd.conf
					echo "ctrl_interface_group=0" >> /etc/hostapd.conf
				fi
477
478
479
				#
				check_advanced_modes
				#
480
				if [[ -n "$hostapd_error" ]]; then
481
482
					dialog --colors --backtitle "$BACKTITLE" --title "Please wait" --infobox \
					"\nWireless adapter: \Z1${WIRELESS_ADAPTER}\Z0\n\nProbing Realtek hostapd driver compatibility." 7 50
483
					debconf-apt-progress -- apt-get --reinstall -o Dpkg::Options::="--force-confnew" -y -qq --no-install-recommends install hostapd-realtek
Igor Pecovnik's avatar
Igor Pecovnik committed
484
485
					# change to selected interface
					sed -i "s/^interface=.*/interface=$WIRELESS_ADAPTER/" /etc/hostapd.conf
486
487
488
489
490
491
492
493
					# add allow cli access if not exists. temporally
					if ! grep -q "ctrl_interface" /etc/hostapd.conf; then
						echo "ctrl_interface=/var/run/hostapd" >> /etc/hostapd.conf
						echo "ctrl_interface_group=0" >> /etc/hostapd.conf
					fi
					#
					check_advanced_modes
					#
Igor Pecovnik's avatar
Igor Pecovnik committed
494
				fi
495

496
				if [[ -n "$hostapd_error" ]]; then
Igor Pecovnik's avatar
Igor Pecovnik committed
497
498
499
					dialog --backtitle "$BACKTITLE" --title "Warning" \
					--infobox "\nWireless adapter: $WIRELESS_ADAPTER\n\nNo compatible hostapd driver found." 7 39
					sed -i "s/^DAEMON_CONF=.*/DAEMON_CONF=/" /etc/init.d/hostapd
500
					# remove interfaces from managed list
501
502
					sed 's/interface-name:wl.*//' -i /etc/NetworkManager/conf.d/10-ignore-interfaces.conf
					sed 's/,$//' -i /etc/NetworkManager/conf.d/10-ignore-interfaces.conf
Igor Pecovnik's avatar
Igor Pecovnik committed
503
504
505
					systemctl daemon-reload;service hostapd restart
				fi

506
507
508
509
510
511
512
513
514
515
				# let's remove bridge out for this simple configurator
				#
				# dialog --title " Choose Access Point mode for $WIRELESS_ADAPTER " --colors --backtitle "$BACKTITLE" --no-label "Bridge" \
				# --yes-label "NAT" --yesno "\n\Z1NAT:\Z0 with own DHCP server, out of your primary network\n\
				# \n\Z1Bridge:\Z0 wireless clients will use your routers DHCP server" 9 70
				# response=$?
				#
				# let's remove bridge out for this simple configurator

				response=0
Igor Pecovnik's avatar
Igor Pecovnik committed
516

517
518
519
				# create interfaces file if not exits
				[[ ! -f /etc/network/interfaces ]] && echo "source /etc/network/interfaces.d/*" > /etc/network/interfaces

Igor Pecovnik's avatar
Igor Pecovnik committed
520
				# select default interfaces if there is more than one
Igor Pecovnik's avatar
Igor Pecovnik committed
521
				#select_default_interface
Igor Pecovnik's avatar
Igor Pecovnik committed
522
523

				NETWORK_CONF="/etc/network/interfaces"
Igor Pecovnik's avatar
Igor Pecovnik committed
524
525
526

				case $response in
					# bridge
Igor Pecovnik's avatar
Igor Pecovnik committed
527
					1)
Igor Pecovnik's avatar
RC1    
Igor Pecovnik committed
528
						TEMP_CONF="/etc/network/interfaces.d/armbian.ap.bridge"
Igor Pecovnik's avatar
Igor Pecovnik committed
529
530

						sed -i 's/.bridge=.*/bridge=br0/' /etc/hostapd.conf
Igor Pecovnik's avatar
Cleanup    
Igor Pecovnik committed
531
						if [[ $DEFAULT_ADAPTER == "br0" ]]; then NEW_DEFAULT_ADAPTER="eth0"; else NEW_DEFAULT_ADAPTER="$DEFAULT_ADAPTER"; fi
Igor Pecovnik's avatar
Igor Pecovnik committed
532
533
534
535
536
537
						echo -e "#bridged wireless for hostapd by armbian-config\n" > $TEMP_CONF
						echo -e "auto lo br0\niface lo inet loopback" >> $TEMP_CONF
						echo -e "\nauto $NEW_DEFAULT_ADAPTER\nallow-hotplug $NEW_DEFAULT_ADAPTER\niface $NEW_DEFAULT_ADAPTER inet manual" >> $TEMP_CONF
						echo -e "\nauto $WIRELESS_ADAPTER\nallow-hotplug $WIRELESS_ADAPTER\niface $WIRELESS_ADAPTER inet manual\n" >> $TEMP_CONF
						create_if_config "$DEFAULT_ADAPTER" "br0" >> $TEMP_CONF
						echo -e "\nbridge_ports $NEW_DEFAULT_ADAPTER $WIRELESS_ADAPTER" >> $TEMP_CONF
538

Igor Pecovnik's avatar
Igor Pecovnik committed
539
540
					;;
					# NAT
Igor Pecovnik's avatar
Igor Pecovnik committed
541
					0)
Igor Pecovnik's avatar
RC1    
Igor Pecovnik committed
542
						TEMP_CONF="/etc/network/interfaces.d/armbian.ap.nat"
543
544

						# install dnsmas and iptables
545
						if [[ $(dpkg-query -W -f='${db:Status-Abbrev}\n' dnsmasq 2>/dev/null) != "*ii*" ]]; then
546
							debconf-apt-progress -- apt-get -qq -y --no-install-recommends install dnsmasq;
547
							systemctl enable dnsmasq
548
549
						fi

Igor Pecovnik's avatar
Igor Pecovnik committed
550
551
						echo -e "# armbian NAT hostapd\nallow-hotplug $WIRELESS_ADAPTER\niface $WIRELESS_ADAPTER inet static " > $TEMP_CONF
						echo -e "\taddress 172.24.1.1\n\tnetmask 255.255.255.0\n\tnetwork 172.24.1.0\n\tbroadcast 172.24.1.255" >> $TEMP_CONF
Igor Pecovnik's avatar
Igor Pecovnik committed
552
553
554
555
556
557
558
559
560
561
562
563
564
565
						# create new configuration
						echo "interface=$WIRELESS_ADAPTER				# Use interface $WIRELESS_ADAPTER" > /etc/dnsmasq.conf
						echo "listen-address=172.24.1.1					# Explicitly specify the address to listen on" >> /etc/dnsmasq.conf
						echo "bind-interfaces							# Bind to the interface to make sure we aren't sending \
						things elsewhere" >> /etc/dnsmasq.conf
						echo "server=8.8.8.8							# Forward DNS requests to Google DNS" >> /etc/dnsmasq.conf
						echo "domain-needed								# Don't forward short names" >> /etc/dnsmasq.conf
						echo "bogus-priv								# Never forward addresses in the non-routed address spaces" \
						>> /etc/dnsmasq.conf
						echo "dhcp-range=172.24.1.50,172.24.1.150,12h	# Assign IP addresses between 172.24.1.50 and 172.24.1.150 with \
						a 12 hour lease time" >> /etc/dnsmasq.conf
						# - Enable IPv4 forwarding
						sed -i "/net.ipv4.ip_forward=/c\net.ipv4.ip_forward=1" /etc/sysctl.conf
						echo 1 > /proc/sys/net/ipv4/ip_forward
566
567
						# Clear iptables
						iptables-save | awk '/^[*]/ { print $1 } /^:[A-Z]+ [^-]/ { print $1 " ACCEPT" ; } /COMMIT/ { print $0; }' | iptables-restore
Igor Pecovnik's avatar
Igor Pecovnik committed
568
569
570
571
572
573
574
						# - Apply iptables
						iptables -t nat -A POSTROUTING -o $DEFAULT_ADAPTER -j MASQUERADE
						iptables -A FORWARD -i $DEFAULT_ADAPTER -o $WIRELESS_ADAPTER -m state --state RELATED,ESTABLISHED -j ACCEPT
						iptables -A FORWARD -i $WIRELESS_ADAPTER -o $DEFAULT_ADAPTER -j ACCEPT
						# - Save IP tables, applied during ifup in /etc/network/interfaces.
						iptables-save > /etc/iptables.ipv4.nat
						sed -i 's/^bridge=.*/#&/' /etc/hostapd.conf
575
						#sed -e 's/exit 0//g' -i /etc/rc.local
576
						# workaround if hostapd is too slow
577
578
579
						#echo "service dnsmasq start" >> /etc/rc.local
						#echo "iptables-restore < /etc/iptables.ipv4.nat" >> /etc/rc.local
						#echo "exit 0" >> /etc/rc.local
580
581
582
583
584
585
586
587
588
589
590
591
592
593
						systemctl stop armbian-restore-iptables.service
						systemctl disable armbian-restore-iptables.service
						cat <<-EOF > /etc/systemd/system/armbian-restore-iptables.service
						[Unit]
						Description="Restore IP tables"
						[Timer]
						OnBootSec=20Sec
						[Service]
						Type=oneshot
						ExecStart=/sbin/iptables-restore /etc/iptables.ipv4.nat
						[Install]
						WantedBy=sysinit.target
						EOF
						systemctl enable armbian-restore-iptables.service
Igor Pecovnik's avatar
Igor Pecovnik committed
594
595
596
597
598
					;;
				3)exit;;

				255) exit;;
				esac
Igor Pecovnik's avatar
Igor Pecovnik committed
599

600
				dialog --backtitle "$BACKTITLE" --title " Please wait " --infobox "\nEnabling hotspot. Please wait!" 5 34
Igor Pecovnik's avatar
Igor Pecovnik committed
601
602
603
604
605
606
607
608
609
610

				#
				# only for bridged connection we need to check and reboot. tdlr check if it can be done on the fly
				HOSTAPDBRIDGE=$(cat /etc/hostapd.conf 2> /dev/null | grep -w "^bridge=br0")
				if [[ -n $HOSTAPDBRIDGE ]]; then
						dialog --title "Manually adjust network configuration if needed" --backtitle "$BACKTITLE" \
						--ok-label "Reboot to apply new settings" --no-collapse --editbox $TEMP_CONF 30 0 2> $TEMP_CONF".tmp"
						response=$?
						if [[ $response = 0 ]]; then
							mv $TEMP_CONF".tmp" $TEMP_CONF
Igor Pecovnik's avatar
RC1    
Igor Pecovnik committed
611
							#reboot
Igor Pecovnik's avatar
Igor Pecovnik committed
612
613
614
						fi
					else
						ifdown $WIRELESS_ADAPTER 2> /dev/null
615
						sleep 2
Igor Pecovnik's avatar
Igor Pecovnik committed
616
617
						ifup $WIRELESS_ADAPTER 2> /dev/null
						echo "nameserver 8.8.8.8" > /etc/resolvconf/resolv.conf.d/base
618
						[[ "$reboot_module" == true ]] && dialog --backtitle "$BACKTITLE" --title " Warning " --msgbox "\nReboot is required for this adapter to switch to AP mode" 7 61 && reboot
619
620
						# reload services
						reload-nety "reload"
Igor Pecovnik's avatar
Igor Pecovnik committed
621
622
				fi
		fi
623
	fi
Igor Pecovnik's avatar
Igor Pecovnik committed
624
625
626
	;;


627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
	# Manage Softether VPN
	#
	"VPN" )
	VPNDIR="/usr/local/vpnclient/"

	function vpn_reconfigure ()
	{
	if [[ -f /etc/server.vpn ]]; then
		${VPNDIR}vpnclient stop >/dev/null 2>&1
		${VPNDIR}vpnclient start >/dev/null 2>&1
		# purge old settings
		${VPNDIR}vpncmd /client localhost /cmd accountlist | grep "VPN Connection Setting Name" | cut -d "|" -f 2 | sed 's/^/"/;s/$/"/' | xargs /usr/local/vpnclient/vpncmd /client localhost /cmd accountdisconnect >/dev/null 2>&1
		${VPNDIR}vpncmd /client localhost /cmd accountlist | grep "VPN Connection Setting Name" | cut -d "|" -f 2 | sed 's/^/"/;s/$/"/' | xargs /usr/local/vpnclient/vpncmd /client localhost /cmd accountdelete >/dev/null 2>&1
		# import new
		${VPNDIR}vpncmd /client localhost /cmd accountimport //etc//server.vpn >/dev/null 2>&1
		# reload to connect
		${VPNDIR}vpnclient stop >/dev/null 2>&1
		${VPNDIR}vpnclient start >/dev/null 2>&1
JC Staudt's avatar
JC Staudt committed
645
		[[ $? = 0 ]] && dialog --backtitle "$BACKTITLE" --title " VPN " --msgbox "\nConfiguration was successfully imported!" 7 43
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
	fi
	}

	function get_numbers {
		EXCLUDE=$(ip neigh | grep vpn_se | grep -o '[0-9]\{1,3\}\.[0-9]\{1,3\}\.[0-9]\{1,3\}\.' | head -1)
		ADAPTER=$(ip -4 route ls | grep default | grep -Po '(?<=dev )(\S+)' | grep -v vpn_se | head -1)
		IP=$(ip route | grep $ADAPTER | grep default | grep -o '[0-9]\{1,3\}\.[0-9]\{1,3\}\.[0-9]\{1,3\}\.[0-9]\{1,3\}' | head -1)
		VPNSERVERIP=$(${VPNDIR}vpncmd /client localhost /cmd accountlist | grep "VPN Server" |grep -o '[0-9]\{1,3\}\.[0-9]\{1,3\}\.[0-9]\{1,3\}\.[0-9]\{1,3\}' | head -1)
		SUBNET=$(ifconfig vpn_se | grep 'inet addr:' | grep -v '127.0.0.1' | cut -d: -f2 | awk '{ print $1}' | grep -o '[0-9]\{1,3\}\.[0-9]\{1,3\}\.[0-9]\{1,3\}')
		GW=$(ip neigh | grep vpn_se | grep $SUBNET | grep -o '[0-9]\{1,3\}\.[0-9]\{1,3\}\.[0-9]\{1,3\}\.[0-9]\{1,3\}' | head -1)
	}

	function raise_dev {
			i=0;
			while [[ -z "$TEMP" && $i<5 ]]; do
					TEMP=$(${VPNDIR}vpncmd /client localhost /cmd accountlist | grep Status | grep Connected)
					sleep 1
					i=$((i+1))
			done
			dhclient vpn_se
	}

	if pgrep -x "vpnclient" > /dev/null
	then
				${VPNDIR}vpnclient stop >/dev/null 2>&1
				${VPNDIR}vpnclient start >/dev/null 2>&1
				if [[ -z $(${VPNDIR}vpncmd /client localhost /cmd nicList | grep Enabled) ]]; then
					${VPNDIR}vpncmd /client localhost /cmd niccreate se >/dev/null 2>&1
				fi
				if [[ -z $(${VPNDIR}vpncmd /client localhost /cmd accountlist | grep "VPN Server") ]]; then
JC Staudt's avatar
JC Staudt committed
676
					dialog --backtitle "$BACKTITLE" --no-label " Cancel " --yes-label " Import " --title " VPN " --yesno "\nA VPN configuration was not found.\n\nPlace valid file at /etc/server.vpn" 9 45
677
678
679
680
					if [[ $? = 0 && -f /etc/server.vpn ]]; then
						${VPNDIR}vpncmd /client localhost /cmd accountimport //etc//server.vpn >/dev/null 2>&1
						${VPNDIR}vpnclient stop >/dev/null 2>&1
						${VPNDIR}vpnclient start >/dev/null 2>&1
JC Staudt's avatar
JC Staudt committed
681
						[[ $? = 0 ]] && dialog --backtitle "$BACKTITLE" --title " VPN " --msgbox "\nConfiguration was successfully imported!" 7 43
682
683
684
685
686
687
688
689
690
691
692
693
					fi
				fi

				# raise devices
				raise_dev

				if [[ -n $(${VPNDIR}vpncmd /client localhost /cmd accountlist | grep Status | grep Connected) ]]; then
					get_numbers
					echo "ip route add $VPNSERVERIP via $IP dev $ADAPTER"
					echo "ip route del default"
					echo "ip route add default via $GW dev vpn_se"
					read
694
					dialog --title "VPN client is connected to $VPNSERVERIP" --colors --backtitle "$BACKTITLE" --help-button --help-label "Cancel" --yes-label "Stop" --no-label " Import " --yesno "\n\Z1Stop:  \Z0 stop\n\n\Z1Import:\Z0 import new config from /etc/armbian.vpn" 9 70
695
696
697
698
699
700
701
702
703
704
705
706
				fi
				response=$?
				if [[ $response = 0 ]]; then
					get_numbers
					echo "ip route del $VPNSERVERIP"
					echo "ip route del default"
					echo "ip route add default via $IP dev $ADAPTER"
					read
					dialog --backtitle "$BACKTITLE"  --nocancel --nook --infobox "\nClosing VPN connection" 5 27
					${VPNDIR}vpnclient stop >/dev/null 2>&1
				fi
	else
707
				dialog --title "VPN client is disconnected" --colors --backtitle "$BACKTITLE" --help-button --help-label "Cancel" --yes-label "Connect" --no-label " Import " --yesno "\n\Z1Connect:\Z0 Connect with your VPN server \n\n\Z1Import:\Z0 import new config from /etc/armbian.vpn" 9 70
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
				response=$?
				if [[ $response = 0 ]]; then
					${VPNDIR}vpnclient start >/dev/null 2>&1

					# raise devices
					raise_dev
					get_numbers
					echo "ip route add $VPNSERVERIP via $IP dev $ADAPTER"
					echo "ip route del default"
					echo "ip route add default via $GW dev vpn_se"
					read

				fi
				[[ $response = 1 ]] && vpn_reconfigure
	fi
	;;


Igor Pecovnik's avatar
Igor Pecovnik committed
726
727
	# Connect to Bluetooth
	#
728
	"BT discover" )
JC Staudt's avatar
JC Staudt committed
729
	dialog --backtitle "$BACKTITLE" --title " Bluetooth " --msgbox "\nVerify that your Bluetooth device is discoverable!" 7 54
Igor Pecovnik's avatar
Igor Pecovnik committed
730
731
732
733
734
735
	connect_bt_interface
	;;


	# Edit network settings
	#
Igor Pecovnik's avatar
RC1    
Igor Pecovnik committed
736
	"Advanced" )
Igor Pecovnik's avatar
Igor Pecovnik committed
737
		dialog --backtitle "$BACKTITLE" --title " Edit ifupdown network configuration /etc/network/interfaces" --no-collapse \
Igor Pecovnik's avatar
Igor Pecovnik committed
738
		--ok-label "Save" --editbox /etc/network/interfaces 30 0 2> /etc/network/interfaces.out
739
		[[ $? = 0 ]] && mv /etc/network/interfaces.out /etc/network/interfaces && reload-nety "reload"
Igor Pecovnik's avatar
Igor Pecovnik committed
740
741
	;;

742
743
744
	# Remove automatic wifi conections
	#
	"Forget" )
Igor Pecovnik's avatar
Igor Pecovnik committed
745
		LC_ALL=C nmcli --fields UUID,TIMESTAMP-REAL,TYPE con show | grep wifi |  awk '{print $1}' | while read line; \
746
		do nmcli con delete uuid  $line; done > /dev/null
747
748
	;;

Igor Pecovnik's avatar
Igor Pecovnik committed
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765



	#-------------------------------------------------------------------------------------------------------------------------------------#
	#-------------------------------------------------------------------------------------------------------------------------------------#
	#-------------------------------------------------------------------------------------------------------------------------------------#




	# Change timezone
	#
	"Timezone" )
		dpkg-reconfigure tzdata
	;;


Igor Pecovnik's avatar
Igor Pecovnik committed
766
767
768
769
	# Change locales
	#
	"Locales" )
		dpkg-reconfigure locales
Igor Pecovnik's avatar
Igor Pecovnik committed
770
771
772
		source /etc/default/locale
		sed -i "s/^LANGUAGE=.*/LANGUAGE=$LANG/" /etc/default/locale
		export LANGUAGE=$LANG
Igor Pecovnik's avatar
Igor Pecovnik committed
773
774
	;;

775
776
777
778
779
	# Change keyboard
	#
	"Keyboard" )
		dpkg-reconfigure keyboard-configuration
	;;
Igor Pecovnik's avatar
Igor Pecovnik committed
780

781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
	# Change Hostname
	#
	"Hostname" )
		hostname_current=$(cat /etc/hostname)
		hostname_new=$(\
		dialog --no-cancel --title " Change hostname " --backtitle "$BACKTITLE" --inputbox "\nType new hostname\n " 10 50 $hostname_current \
		3>&1 1>&2 2>&3 3>&- \
		)
		if [[ $? = 0 && -n $hostname_new ]]; then
			sed -i "s/$hostname_current/$hostname_new/g" /etc/hosts
			sed -i "s/$hostname_current/$hostname_new/g" /etc/hostname
			hostname $hostname_new
			systemctl restart systemd-logind.service
			dialog --title " Info " --backtitle "$BACKTITLE" --no-collapse --msgbox "\nYou need to logout to make the changes effective." 7 53
		fi
	;;

798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
	# ZSH
	#
	"BASH" )
		# change shell for root
		chsh -s /bin/bash
		add_choose_user
		if [ -n "$CHOSEN_USER" ]; then
			chsh -s /bin/bash $CHOSEN_USER
		fi
		# cleanup
		rm -rf /etc/oh-my-zsh /etc/skel/.zshrc /etc/skel/.oh-my-zsh
		rm -rf /root/{.zshrc,.oh-my-zsh}
		# and for selected normal user
		add_choose_user
		if [ -n "$CHOSEN_USER" ]; then
			rm -rf /home/$CHOSEN_USER/{.zshrc,.oh-my-zsh}
		fi
		# change shell for future users
		sed -i "s/^SHELL=.*/SHELL=\/bin\/bash/" /etc/default/useradd
		# remove crontab
		crontab -l | grep -v oh-my  | crontab -
		dialog --backtitle "$BACKTITLE" --title "Info" --colors --msgbox "\nYour default shell was switched to: \Z1BASH\Z0\n\nPlease logout & login from this session!" 9 47
	;;


	# ZSH
	#
	"ZSH" )
		if ! is_package_manager_running; then
		if ! check_if_installed zsh ; then
			debconf-apt-progress -- apt-get update
			debconf-apt-progress -- apt-get install -y zsh tmux
		fi
		rm -rf /etc/oh-my-zsh
		git clone --quiet https://github.com/robbyrussell/oh-my-zsh.git /etc/oh-my-zsh
		cp /etc/oh-my-zsh/templates/zshrc.zsh-template /etc/skel/.zshrc
		mkdir -p /etc/skel/.oh-my-zsh/cache
		# change shell for future users
		sed -i "s/^SHELL=.*/SHELL=\/usr\/bin\/zsh/" /etc/default/useradd
		# we have common settings
		sed -i "s/^export ZSH=.*/export ZSH=\/etc\/oh-my-zsh/" /etc/skel/.zshrc
		# user cache
		sed -i "/^export ZSH=.*/a export ZSH_CACHE_DIR=~\/.oh-my-zsh\/cache" /etc/skel/.zshrc
		# define theme
		sed -i 's/^ZSH_THEME=.*/ZSH_THEME="risto"/' /etc/skel/.zshrc
Igor Pečovnik's avatar
Igor Pečovnik committed
843
844
		# define default plugins
		sed -i 's/^plugins=.*/plugins=(git git-extras debian tmux screen history extract colorize web-search docker)/' /etc/skel/.zshrc		
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
		# change shell for root
		chsh -s $(grep /zsh$ /etc/shells | tail -1)
		# copy cache directory
		cp -R --attributes-only /etc/skel/.oh-my-zsh /root/.oh-my-zsh
		cp /etc/skel/.zshrc /root/.zshrc
		# and for selected normal user
		add_choose_user
		if [ -n "$CHOSEN_USER" ]; then
			chsh -s $(grep /zsh$ /etc/shells | tail -1) $CHOSEN_USER
			# copy cache directory
			cp -R --attributes-only /etc/skel/.oh-my-zsh /home/$CHOSEN_USER/.oh-my-zsh
			cp /etc/skel/.zshrc /home/$CHOSEN_USER/.zshrc
			chown -R ${CHOSEN_USER}:${CHOSEN_USER} /home/${CHOSEN_USER}/{.zshrc,.oh-my-zsh}
		fi
		# add a cronjob to update oh-my-zsh once per month
		(crontab -l 2>/dev/null; echo "0 0 1 * * cd /etc/oh-my-zsh ; git -q pull origin master >/dev/null 2>/dev/null") | crontab -
		dialog --backtitle "$BACKTITLE" --title "Info" --colors --msgbox "\nYour default shell was switched to: \Z1ZSH\Z0\n\nPlease logout & login from this session!" 9 47
		fi
	;;


866
867
868
	# Firmware update
	#
	"Firmware" )
869
870
871
872
873
874
875
		if ! is_package_manager_running; then
			clear
			exec 3>&1
			monitor=$(dialog --print-maxsize 2>&1 1>&3)
			exec 3>&-
			mon_x=$(echo $monitor | awk '{print $2}' | sed 's/,//');mon_x=$(( $mon_x / 2 ))
			mon_y=$(echo $monitor | awk '{print $3}' | sed 's/,//');
876
			dialog --title " Update " --backtitle "$BACKTITLE" --no-label "No" --yesno "\nDo you want to update board firmware?" 7 41
877
878
879
			if [[ $? = 0 ]]; then
				debconf-apt-progress -- apt-get update
				debconf-apt-progress -- apt-get -o Dpkg::Options::="--force-confdef" -o Dpkg::Options::="--force-confold" -y upgrade
880
				dialog --title " Firmware update " --colors --no-label "No" --backtitle "$BACKTITLE" --yesno \
881
882
883
				"\nFirmware has been updated. Reboot?   " 7 39
				if [[ $? = 0 ]]; then reboot; fi
			fi
884
885
886
		fi
	;;

887

Igor Pecovnik's avatar
Igor Pecovnik committed
888
889
890
891
892
893
894
895
896
	# Install to SATA, eMMC, NAND or USB
	#
	"Install" )
		nand-sata-install
	;;


	# Freeze and unfreeze kernel and board support packages
	#
Igor Pecovnik's avatar
Igor Pecovnik committed
897
	"Freeze" | "Defreeze" )
898
	if ! is_package_manager_running; then
899
		dialog --title " Updating " --backtitle "$BACKTITLE" --yes-label "$1" --no-label "Cancel" --yesno \
Igor Pečovnik's avatar
Igor Pečovnik committed
900
		"\nDo you want to ${1,,} Armbian firmware updates?" 7 54
Igor Pecovnik's avatar
Igor Pecovnik committed
901
902
903
		if [[ $? = 0 ]]; then
		TARGET_BRANCH=$BRANCH
		exceptions "$BRANCH"
Igor Pečovnik's avatar
Igor Pečovnik committed
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
		unset PACKAGE_LIST

		# basic packages
		check_if_installed linux-u-boot-${BOARD}-${UBOOT_BRANCH} && PACKAGE_LIST=$PACKAGE_LIST" linux-u-boot-${BOARD}-${UBOOT_BRANCH}"
		check_if_installed linux-image${TARGET_BRANCH}-${TARGET_FAMILY} && PACKAGE_LIST=$PACKAGE_LIST" linux-image${TARGET_BRANCH}-${TARGET_FAMILY}"
		check_if_installed linux-dtb$TARGET_BRANCH-$TARGET_FAMILY && PACKAGE_LIST=$PACKAGE_LIST" linux-dtb$TARGET_BRANCH-$TARGET_FAMILY"

		# old BSP
		check_if_installed linux-$(lsb_release -cs)-root$TARGET_BRANCH-$BOARD && PACKAGE_LIST=$PACKAGE_LIST" linux-$(lsb_release -cs)-root$TARGET_BRANCH-$BOARD"
		check_if_installed linux-headers${TARGET_BRANCH}-${TARGET_FAMILY} && PACKAGE_LIST=$PACKAGE_LIST" linux-headers${TARGET_BRANCH}-${TARGET_FAMILY}"

		# new BSP
		check_if_installed armbian-${LINUXFAMILY} && PACKAGE_LIST=$PACKAGE_LIST" armbian-${LINUXFAMILY}"
		check_if_installed armbian-${BOARD} && PACKAGE_LIST=$PACKAGE_LIST" armbian-${BOARD}"
		check_if_installed armbian-$(lsb_release -cs) && PACKAGE_LIST=$PACKAGE_LIST" armbian-$(lsb_release -cs)"
		check_if_installed armbian-$(lsb_release -cs)-desktop-xfce && PACKAGE_LIST=$PACKAGE_LIST" armbian-$(lsb_release -cs)-desktop-xfce"
		check_if_installed armbian-firmware && PACKAGE_LIST=$PACKAGE_LIST" armbian-firmware"
		check_if_installed armbian-firmware-full && PACKAGE_LIST=$PACKAGE_LIST" armbian-firmware-full"

Igor Pecovnik's avatar
Igor Pecovnik committed
923
924

		local words=( $PACKAGE_LIST )
Igor Pecovnik's avatar
Bugfix    
Igor Pecovnik committed
925
		local command="unhold"
Igor Pečovnik's avatar
Igor Pečovnik committed
926
		IFS=" "
Igor Pecovnik's avatar
Bugfix    
Igor Pecovnik committed
927
928
		[[ $1 == "Freeze" ]] && local command="hold"
		for word in $PACKAGE_LIST; do apt-mark $command $word; done | dialog --backtitle "$BACKTITLE" --title "Packages ${1,,}" --progressbox $((${#words[@]}+2)) 64
Igor Pecovnik's avatar
Igor Pecovnik committed
929
		fi
930
	fi
Igor Pecovnik's avatar
Igor Pecovnik committed
931
932
933
	;;


934
935
936
937
938
939
940
941
942
	# Switch to other kernel versions
	"Other")
	if ! is_package_manager_running; then
		other_kernel_version
	fi
	;;



Igor Pecovnik's avatar
Igor Pecovnik committed
943
944
945
	# Enable or disable desktop
	#
	"Desktop" )
946
		if [[ -n $DISPLAY_MANAGER ]]; then
Igor Pecovnik's avatar
Igor Pecovnik committed
947
			dialog --title " Desktop is enabled and running " --backtitle "$BACKTITLE" \
948
			--yes-label "Stop" --no-label "Cancel" --yesno "\nDo you want to stop and disable this service?" 7 50
Igor Pecovnik's avatar
Igor Pecovnik committed
949
			exitstatus=$?;
950
			if [[ $exitstatus = 0 ]]; then
Igor Pečovnik's avatar
Igor Pečovnik committed
951
				service lightdm stop >/dev/null 2>&1 && systemctl disable lightdm.service >/dev/null 2>&1
Igor Pečovnik's avatar
Igor Pečovnik committed
952
				service nodm stop >/dev/null 2>&1 && systemctl disable nodm.service >/dev/null 2>&1
Igor Pečovnik's avatar
Igor Pečovnik committed
953
			fi
Igor Pecovnik's avatar
Igor Pecovnik committed
954
		else
955
			if ! is_package_manager_running; then
Igor Pečovnik's avatar
Igor Pečovnik committed
956
957
				# remove nodm and install lightdm = backward compatibility
				[[ -n $(dpkg -l | grep nodm) ]] && debconf-apt-progress -- apt-get -y purge nodm
Igor Pečovnik's avatar
Igor Pečovnik committed
958
				[[ -z $(dpkg -l | grep lightdm) ]] && debconf-apt-progress -- apt-get -o Dpkg::Options::="--force-confold" -y --no-install-recommends install lightdm-gtk-greeter lightdm
959
				if [[ -n $DESKTOP_INSTALLED ]]; then
Igor Pečovnik's avatar
Igor Pečovnik committed
960
					dialog --title " Display manager " --backtitle "$BACKTITLE" --yesno "\nDo you want to enable autologin?" 7 36
961
					exitstatus=$?;
Igor Pečovnik's avatar
Igor Pečovnik committed
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
					if [[ $exitstatus = 0 ]]; then
						add_choose_user
						if [ -n "$CHOSEN_USER" ]; then
							mkdir -p /etc/lightdm/lightdm.conf.d
							echo "[Seat:*]" > /etc/lightdm/lightdm.conf.d/22-armbian-autologin.conf
							echo "autologin-user=$CHOSEN_USER" >> /etc/lightdm/lightdm.conf.d/22-armbian-autologin.conf
							echo "autologin-user-timeout=0" >> /etc/lightdm/lightdm.conf.d/22-armbian-autologin.conf
							echo "user-session=xfce" >> /etc/lightdm/lightdm.conf.d/22-armbian-autologin.conf
							ln -s /lib/systemd/system/lightdm.service /etc/systemd/system/display-manager.service >/dev/null 2>&1
							service lightdm start >/dev/null 2>&1
						fi
					else
						rm /etc/lightdm/lightdm.conf.d/22-armbian-autologin.conf >/dev/null 2>&1
						ln -s /lib/systemd/system/lightdm.service /etc/systemd/system/display-manager.service >/dev/null 2>&1
						service lightdm start >/dev/null 2>&1
					fi
Igor Pecovnik's avatar
Igor Pecovnik committed
978
				fi
979
			fi
Igor Pecovnik's avatar
Igor Pecovnik committed
980
981
982
		fi
	;;

983
984
985
986
987
988
989
990
	"Minimal" )
	configure_desktop
	;;

	"Default")
	configure_desktop "--install-recommends"
	;;

Igor Pecovnik's avatar
Igor Pecovnik committed
991
992
993
994
995
	"RDP" )
		if [[ -n $(service xrdp status | grep -w active) ]]; then
			systemctl stop xrdp.service >/dev/null 2>&1
			systemctl disable xrdp.service >/dev/null 2>&1
		else
996
			if ! is_package_manager_running; then
Igor Pečovnik's avatar
Igor Pečovnik committed
997
				debconf-apt-progress -- apt-get -y install xrdp vnc4server xorgxrdp
998
999
1000
1001
1002
1003
				systemctl enable xrdp.service >/dev/null 2>&1
				systemctl start xrdp.service >/dev/null 2>&1
				dialog --title "Info" --backtitle "$BACKTITLE" --nocancel --no-collapse --pause \
				"\nRemote graphical login to $BOARD_NAME using Microsoft Remote Desktop Protocol (RDP) is enabled." 11 57 3

			fi
Igor Pecovnik's avatar
Igor Pecovnik committed
1004
1005
1006
		fi
	;;

1007
1008
1009
1010
1011
1012
1013
1014
1015
1016
1017
1018
1019
1020
1021
1022
1023
1024
1025
1026
	"Thunderbird" )
		if ! check_if_installed thunderbird then ; then
			debconf-apt-progress -- apt-get -y install thunderbird
		else
			debconf-apt-progress -- apt-get -y purge thunderbird
		fi
	;;

	"Libre" )
		debconf-apt-progress -- apt-get -y purge libreoffice*
	;;

	"Writer" )
		debconf-apt-progress -- apt-get -y install libreoffice-writer libreoffice-style-tango libreoffice-gtk
	;;

	"Suite" )
		debconf-apt-progress -- apt-get -y install libreoffice libreoffice-style-tango libreoffice-gtk
	;;

Igor Pecovnik's avatar
Igor Pecovnik committed
1027
1028
1029
1030

	# Stop low-level messages on console
	#
	"Lowlevel" )
Igor Pecovnik's avatar
Igor Pecovnik committed
1031
		dialog --title " Kernel messages " --backtitle "$BACKTITLE" --help-button \
Igor Pecovnik's avatar
Igor Pecovnik committed
1032
1033
1034
1035
1036
1037
		--help-label "Yes & reboot" --yes-label "Yes" --no-label "Cancel" --yesno "\nStop low-level messages on console?" 7 64
		exitstatus=$?;
		[[ $exitstatus = 0 ]] && sed -i 's/^#kernel.printk\(.*\)/kernel.printk\1/' /etc/sysctl.conf
		[[ $exitstatus = 2 ]] && sed -i 's/^#kernel.printk\(.*\)/kernel.printk\1/' /etc/sysctl.conf && reboot
	;;

1038
1039
1040
	# CPU speed and governor
	#
	"CPU" )
1041
		POLICY="policy0"
1042
	        [[ $(grep -c '^processor' /proc/cpuinfo) -gt 4 ]] && POLICY="policy4"
1043
		[[ ! -d /sys/devices/system/cpu/cpufreq/policy4 ]] && POLICY="policy0"
1044
		generic_select "$(cat /sys/devices/system/cpu/cpufreq/$POLICY/scaling_available_frequencies)" "Select minimum CPU speed"
1045
		MIN_SPEED=$PARAMETER
1046
		generic_select "$(cat /sys/devices/system/cpu/cpufreq/$POLICY/scaling_available_frequencies)" "Select maximum CPU speed" "$PARAMETER"
1047
		MAX_SPEED=$PARAMETER
1048
		generic_select "$(cat /sys/devices/system/cpu/cpufreq/$POLICY/scaling_available_governors)" "Select CPU governor"
1049
1050
1051
1052
1053
1054
1055
1056
1057
1058
1059
1060
1061
1062
		GOVERNOR=$PARAMETER
		if [[ -n $MIN_SPEED && -n $MAX_SPEED && -n $GOVERNOR ]]; then
			dialog --colors --title " Apply and save changes " --backtitle "$BACKTITLE" --yes-label "OK" --no-label "Cancel" --yesno \
			"\nCPU frequency will be within \Z1$(($MIN_SPEED / 1000))\Z0 and \Z1$(($MAX_SPEED / 1000)) MHz\Z0. The governor \Z1$GOVERNOR\Z0 will decide which speed to use within this range." 9 58
			if [[ $? -eq 0 ]]; then
				sed -i "s/MIN_SPEED=.*/MIN_SPEED=$MIN_SPEED/" /etc/default/cpufrequtils
				sed -i "s/MAX_SPEED=.*/MAX_SPEED=$MAX_SPEED/" /etc/default/cpufrequtils
				sed -i "s/GOVERNOR=.*/GOVERNOR=$GOVERNOR/" /etc/default/cpufrequtils
				systemctl restart cpufrequtils
				sync
			fi
		fi
	;;

Igor Pecovnik's avatar
Igor Pecovnik committed
1063
1064
1065
1066

	# Edit boot environment
	#
	"Bootenv" )
Igor Pecovnik's avatar
Igor Pecovnik committed
1067
		dialog --title " Edit u-boot environment " --ok-label "Save" \
Igor Pecovnik's avatar
Igor Pecovnik committed
1068
1069
		--no-collapse --editbox /boot/armbianEnv.txt 30 0 2> /boot/armbianEnv.txt.out
		[[ $? = 0 ]] && mv /boot/armbianEnv.txt.out /boot/armbianEnv.txt
Igor Pečovnik's avatar
Igor Pečovnik committed
1070
		sync
Igor Pecovnik's avatar
Igor Pecovnik committed
1071
1072
1073
1074
1075
1076
	;;

	# Edit boot script
	#
	"Bootscript" )
		if [[ -f /boot/boot.ini ]]; then
Igor Pecovnik's avatar
Igor Pecovnik committed
1077
		dialog --title " Edit boot.ini script " --ok-label "Save" \
Igor Pecovnik's avatar
Igor Pecovnik committed
1078
1079
1080
1081
1082
1083
		--no-collapse --editbox /boot/boot.ini 30 0 2> /boot/boot.ini.out
		[[ $? = 0 ]] && mv /boot/boot.ini.out /boot/boot.ini
		fi
	;;


Igor Pecovnik's avatar
RC1    
Igor Pecovnik committed
1084
	# Toggle overlay items
Igor Pecovnik's avatar
Igor Pecovnik committed
1085
	#
1086
	"Hardware" )
1087
1088
1089
1090
1091
1092
1093
1094
1095
1096
1097
1098
1099
1100
1101
1102
1103
1104
1105
		# check if user agree to enter this area
		CHANGES="false"
		while true; do
			overlay_prefix=$(cat /boot/armbianEnv.txt | grep overlay_prefix | sed 's/overlay_prefix=//g')
			TARGET_BRANCH=$BRANCH
			exceptions "$BRANCH"
			MOTD=()
			LINES=()
			LIST_CONST=-3
			j=0
			DIALOG_CANCEL=1
			DIALOG_ESC=255
			while read line
			do
				STATUS=$([[ -n $(cat /boot/armbianEnv.txt | grep overlays | grep -w ${line}) ]] && echo "on")
				DESC=$(description "$line")
				MOTD+=( "$line" "$DESC" "$STATUS")
				LINES[ $j ]=$line
				(( j++ ))
1106
			done < <(ls -1 ${OVERLAYDIR}/${overlay_prefix}*.dtbo | sed 's/^.*\('${overlay_prefix}'.*\)/\1/g' | sed 's/'${overlay_prefix}'-//g' | sed 's/.dtbo//g' )
1107
1108

			exec 3>&1
Igor Pecovnik's avatar
Igor Pecovnik committed
1109
				selection=$(dialog --backtitle "$BACKTITLE" --colors --title "Toggle hardware configuration" --clear --cancel-label \
1110
				"Back" --ok-label "Save" --checklist "\nUse \Z1<space>\Z0 to toggle functions and save them. Exit when you are done.\n " \
1111
				0 0 0 "${MOTD[@]}" 2>&1 1>&3)
1112
1113
1114
1115
1116
1117
1118
1119
1120
1121
1122
1123
1124
				exit_status=$?
			exec 3>&-

			case $exit_status in
					$DIALOG_ESC)
					break
				;;
				0)
					CHANGES="true"
					newoverlays="$(echo "$selection" | sed "s|[^ ]* *|&|g")"
					sed -i "s/^overlays=.*/overlays=$newoverlays/" /boot/armbianEnv.txt
					if ! grep -q "overlays" /boot/armbianEnv.txt; then echo "overlays=$newoverlays" >> /boot/armbianEnv.txt; fi
					if [[ -z $newoverlays ]]; then sed -i "/^overlays/d" /boot/armbianEnv.txt; fi
Igor Pečovnik's avatar
Igor Pečovnik committed
1125
					sync
1126
1127
1128
1129
1130
1131
1132
1133
1134
1135
1136
1137
1138
				;;
				1)
					if [[ "$CHANGES" == "true" ]]; then
					dialog --title " Applying changes " --backtitle "$BACKTITLE" --yes-label "Reboot" \
					--no-label "Cancel" --yesno "\nReboot to enable new features?" 7 34
					if [[ $? = 0 ]]; then reboot; else break; fi
					else
						break
					fi
				;;
				esac
			done

Igor Pecovnik's avatar
Igor Pecovnik committed
1139
1140
	;;

1141
1142
1143
1144
1145
1146
1147
1148
	# Change to other mirrors
	#
	"Mirror" )

		IFS=$'\r\n'
		GLOBIGNORE='*'
		LIST_CONST=3
		BEFORE="$(cat /etc/apt/sources.list.d/armbian.list | sed 's/http/\nhttp/g' | grep ^http | sed 's/\(^http[^ <]*\)\(.*\)/\1/g' | sed 's/https\?:\/\///')"
Igor Pečovnik's avatar
Igor Pečovnik committed
1149
		BEFORE_DESC=$(description "${BEFORE}")
1150
		PREFIX="$(echo $BEFORE | cut -f1 -d".")"
Igor Pečovnik's avatar
Igor Pečovnik committed
1151
1152
		AVAL_MIRROR=()
		if [[ $PREFIX == beta ]]; then
Igor Pečovnik's avatar
bug fix    
Igor Pečovnik committed
1153
			AVAL_MIRROR=("beta.armbian.com" "mirrors.netix.net/armbian/apt/")
Igor Pečovnik's avatar
Igor Pečovnik committed
1154
			else
Igor Pečovnik's avatar
Igor Pečovnik committed
1155
			AVAL_MIRROR+=("apt.armbian.com" "mirrors.tuna.tsinghua.edu.cn/armbian/" "mirrors.netix.net/armbian/apt/" "mirrors.dotsrc.org/armbian-apt/")
Igor Pečovnik's avatar
Igor Pečovnik committed
1156
		fi
1157
1158
1159
1160
1161
1162
		local LIST=()
		for i in "${AVAL_MIRROR[@]}"
			do
			DESC=$(description "${i[0]}")
			[[ "${i[0]}" != "$BEFORE" ]] && LIST+=( "${i[0]//[[:blank:]]/}" "$DESC" )
		done
JC Staudt's avatar
JC Staudt committed
1163
1164
		LIST_LENGTH=$(($LIST_CONST+${#LIST[@]}/2));
		if [ "$LIST_LENGTH" -le 3 ]; then
1165
1166
1167
1168
			TARGET_MIRROR=${AVAL_MIRROR[0]}
			dialog --backtitle "$BACKTITLE" --title "Please wait" --colors --msgbox "\nThere are no mirrors available!" 7 35
		else
			exec 3>&1
1169
			TARGET_MIRROR=$(dialog --cancel-label "Cancel" --backtitle "$BACKTITLE" --no-collapse \
JC Staudt's avatar
JC Staudt committed
1170
			--title "Change repository location" --colors --clear --menu "\nfrom \Z1$BEFORE_DESC\Z0 to:\n " $((6+${LIST_LENGTH})) 60 15 "${LIST[@]}" 2>&1 1>&3)
1171
1172
1173
1174
1175
			exitstatus=$?;
			exec 3>&-
		fi

		if [[ $exitstatus == 0 ]]; then
Igor Pečovnik's avatar
Igor Pečovnik committed
1176
			sed -i "s~$BEFORE~$TARGET_MIRROR~" /etc/apt/sources.list.d/armbian.list
1177
1178
1179
			dialog --backtitle "$BACKTITLE" --title "Info" --colors --msgbox "\nArmbian package repository was switched to:\n\n\Z1$TARGET_MIRROR\Z0" 9 47
		fi
	;;
Igor Pecovnik's avatar
Igor Pecovnik committed
1180
1181
1182
1183
1184
1185
1186
1187

	# Toggle welcome screen items
	#
	"Welcome" )
		while true; do
		HOME="/etc/update-motd.d/"
		MOTD=()
		LINES=()
Igor Pecovnik's avatar
Igor Pecovnik committed
1188
		LIST_CONST=9
Igor Pecovnik's avatar
Igor Pecovnik committed
1189
1190
1191
1192
1193
1194
		j=0
		DIALOG_CANCEL=1
		DIALOG_ESC=255

		while read line
		do
Igor Pečovnik's avatar
Igor Pečovnik committed
1195
			STATUS=$([[ -x ${HOME}${line} ]] && echo "on")
Igor Pecovnik's avatar
Igor Pecovnik committed
1196
1197
1198
1199
1200
1201
			DESC=$(description "$line")
			MOTD+=( "$line" "$DESC" "$STATUS")
			LINES[ $j ]=$line
			(( j++ ))
		done < <(ls -1 $HOME)

JC Staudt's avatar
JC Staudt committed
1202
				LISTLENGTH="$(($LIST_CONST+${#MOTD[@]}/3))"
Igor Pecovnik's avatar
Igor Pecovnik committed
1203
1204
				exec 3>&1
				selection=$(dialog --backtitle "$BACKTITLE" --title "Toggle motd executing scripts" --clear --cancel-label \
1205
				"Back" --ok-label "Save" --checklist "\nChoose what you want to enable or disable:\n " \
JC Staudt's avatar
JC Staudt committed
1206
				$LISTLENGTH 80 15 "${MOTD[@]}" 2>&1 1>&3)
Igor Pecovnik's avatar
Igor Pecovnik committed
1207
1208
1209
1210
1211
1212
1213
1214
1215
1216
1217
1218
1219
1220
1221
				exit_status=$?
				exec 3>&-
				case $exit_status in
				$DIALOG_CANCEL | $DIALOG_ESC)
						break
						;;
				0)
						chmod -x ${HOME}*
						chmod +x $(echo "$selection" | sed "s|[^ ]* *|${HOME}&|g")
				;;
				esac
		done
	;;


1222
1223
	# Toggle sshd options
	#
Igor Pecovnik's avatar
Igor Pecovnik committed
1224
	"SSH" )
root's avatar
root committed
1225
	if ! is_package_manager_running; then
1226
		while true; do
root's avatar
root committed
1227
1228
1229
1230
1231
1232
			if ! check_if_installed libpam-google-authenticator ; then
				debconf-apt-progress -- apt-get -y install libpam-google-authenticator
			fi
			if ! check_if_installed qrencode ; then
				debconf-apt-progress -- apt-get -y install qrencode
			fi
Igor Pecovnik's avatar
Igor Pecovnik committed
1233
			DIALOG_CANCEL=2
1234
			DIALOG_ESC=255
1235
1236
			LIST_CONST=9
			WINDOW_SIZE=21
1237

1238
			# variables cleanup
1239
1240
			PermitRootLogin="";
			PubkeyAuthentication="";
1241
1242
1243
			PasswordAuthentication="";
			PhoneAuthentication=""
			MergeParameter="";
1244
1245
			ExtraDesc="";

Igor Pecovnik's avatar
Igor Pecovnik committed
1246
			Buttons="--no-cancel --ok-label "Save" --help-button --help-label Cancel"
1247
1248
1249

			# read values
			[[ $(grep "^PermitRootLogin" /etc/ssh/sshd_config | awk '{print $2}') == "yes" ]] 			&& PermitRootLogin="on"
Igor Pecovnik's avatar
Igor Pecovnik committed
1250
			[[ $(grep "^@include common-auth" /etc/pam.d/sshd | awk '{print $2}') == "common-auth" ]]  	&& PasswordAuthentication="on"
1251
1252
1253
1254
1255
1256
1257
			[[ $(grep "^PubkeyAuthentication" /etc/ssh/sshd_config | awk '{print $2}') == "yes" ]]  	&& PubkeyAuthentication="on"
			[[ -n $(grep "pam_google_authenticator.so" /etc/pam.d/sshd) ]] 								&& PhoneAuthentication="on"

			# create menu
			MOTD=( "PermitRootLogin" "Allow root login" "$PermitRootLogin" )
			MOTD+=( "PasswordAuthentication" "Password login" "$PasswordAuthentication" )
			MOTD+=( "PubkeyAuthentication" "SSH key login" "$PubkeyAuthentication" )
1258
			MOTD+=( "PhoneAuthentication" "Google two-step authentication with one-time passcode" "$PhoneAuthentication" )
1259

Igor Pecovnik's avatar
Igor Pecovnik committed
1260
			Buttons="--no-cancel --ok-label "Save" --help-button --help-label Cancel"
1261
			if [[ $PhoneAuthentication == "on" ]]; then
Igor Pecovnik's avatar
Igor Pecovnik committed
1262
				Buttons="--cancel-label Generate-token --ok-label "Save" --help-button --help-label Cancel"
1263
1264
				ExtraDesc="\n\Z1Note:\Z0 Two-step verification token is identical for all users on the system.\n \n"
				LIST_CONST=11
Igor Pecovnik's avatar
Igor Pecovnik committed
1265
1266
1267
				if [[ -f ~/.google_authenticator ]]; then
					Buttons="--cancel-label New-token --ok-label "Save" --help-button --help-label Cancel --extra-button --extra-label Show-token"
				fi
1268
1269
			fi

1270
1271
1272
			LISTLENGTH="$((${#MOTD[@]}/3))"
			HEIGHT="$((LISTLENGTH + $LIST_CONST))"

1273
			exec 3>&1
1274
1275
				selection=$(dialog --colors $Buttons --backtitle "$BACKTITLE" --title " Toggle sshd options " --clear --checklist \
				"\nChoose what you want to enable or disable:\n $ExtraDesc" $HEIGHT 0 $LISTLENGTH "${MOTD[@]}" 2>&1 1>&3)
1276
1277
1278
1279
1280
1281
1282
1283
1284
1285
1286
1287
				exit_status=$?
			exec 3>&-

			case $exit_status in
				$DIALOG_CANCEL | $DIALOG_ESC)
				break
				;;
				0)
					# read values, adjust config and restart service
					my_array=($selection)
					for((n=0;n<${#MOTD[@]};n++)); do
						if (( $(($n % 3 )) == 0 )); then
1288
1289

								# generic options if any
1290
								if [[ " ${my_array[*]} " == *" ${MOTD[$n]} "* ]]; then
1291
									sed -i "s/^#\?${MOTD[$n]}.*/${MOTD[$n]} yes/" /etc/ssh/sshd_config
1292
									else
1293
									sed -i "s/^#\?${MOTD[$n]}.*/${MOTD[$n]} no/" /etc/ssh/sshd_config
1294
								fi
1295
1296
1297
1298
1299
1300
1301
1302
1303
1304

								if [[ $n -eq 0 ]]; then

									# phone
									if [[ " ${my_array[*]} " == *" PhoneAuthentication "* ]]; then
										MergeParameter="keyboard-interactive"
										sed -i "s/^#\?ChallengeResponseAuthentication.*/ChallengeResponseAuthentication yes/" /etc/ssh/sshd_config
										sed -i -n '/password updating/{p;:a;N;/@include common-password/!ba;s/.*\n/auth required pam_google_authenticator.so nullok\n/};p' /etc/pam.d/sshd
										else
										MergeParameter=""
1305
										sed -i '/^auth required pam_google_authenticator.so nullok/ d' /etc/pam.d/sshd
1306
1307
1308
1309
1310
1311
1312
1313
1314
1315
1316
1317
1318
1319
1320
1321
1322
1323
1324
1325
1326
1327
1328
1329
1330
1331
1332
1333
1334
1335
										sed -i "s/^#\?ChallengeResponseAuthentication.*/ChallengeResponseAuthentication no/" /etc/ssh/sshd_config
									fi

									# password
									if [[ " ${my_array[*]} " == *" PasswordAuthentication "* ]]; then
											MergeParameter="password keyboard-interactive"
											sed -i "s/^#\?PasswordAuthentication.*/PasswordAuthentication yes/" /etc/ssh/sshd_config
											sed -i "s/^#\?ChallengeResponseAuthentication.*/ChallengeResponseAuthentication yes/" /etc/ssh/sshd_config
											sed -i "s/^\#@include common-auth/\@include common-auth/" /etc/pam.d/sshd
										else
											sed -i "s/^#\?PasswordAuthentication.*/PasswordAuthentication no/" /etc/ssh/sshd_config
											#sed -i "s/^#\?ChallengeResponseAuthentication.*/ChallengeResponseAuthentication no/" /etc/ssh/sshd_config
											sed -i "s/^\@include common-auth/\#@include common-auth/" /etc/pam.d/sshd
									fi

									# pubkey
									if [[ " ${my_array[*]} " == *" PubkeyAuthentication "* ]]; then
											MergeParameter="publickey keyboard-interactive "
											sed -i "s/^#\?PubkeyAuthentication.*/PubkeyAuthentication yes/" /etc/ssh/sshd_config
										else
											sed -i "s/^#\?PubkeyAuthentication.*/PubkeyAuthentication no/" /etc/ssh/sshd_config
									fi


									if [[ " ${my_array[*]} " == *" PubkeyAuthentication "* && " ${my_array[*]} " == *" PhoneAuthentication "* ]]; then
											MergeParameter="publickey,password publickey,keyboard-interactive"
											sed -i "s/^#\?PubkeyAuthentication.*/PubkeyAuthentication yes/" /etc/ssh/sshd_config
									fi


1336
								fi
1337
1338
						fi
					done
1339

1340
1341
1342
1343
1344
					if [[ -z $MergeParameter ]]; then
							sed -i '/^AuthenticationMethods.*/ d' /etc/ssh/sshd_config
						else
							sed -i '/^AuthenticationMethods.*/ d' /etc/ssh/sshd_config
							sed -i -n '/and ChallengeResponseAuthentication to/{p;:a;N;/UsePAM yes/!ba;s/.*\n/AuthenticationMethods '"$MergeParameter"'\n/};p' /etc/ssh/sshd_config
1345
1346
					fi

1347
					# reload sshd
1348
					systemctl restart sshd.service
1349
				;;
1350
1351
1352
				3)
					display_qr_code
				;;
Igor Pecovnik's avatar
Igor Pecovnik committed
1353
				1)
1354
1355
1356
1357
1358
1359
					dialog --colors --title " \Z1Warning\Z0 " --backtitle "$BACKTITLE" --yes-label "Generate" --no-label "No" --yesno "\nWhen you generate new token you have to scan it with your mobile device again.\n\nUnderstand?" 10 48
					if [[ $? = 0 ]]; then
						google-authenticator -t -d -f -r 3 -R 30 -W -q
						google_token_allusers
						display_qr_code
					fi
1360
				;;
1361
1362
				esac
		done
root's avatar
root committed
1363
	fi
1364
1365
1366
1367
	;;



Igor Pecovnik's avatar
Igor Pecovnik committed
1368
1369
1370
	# Switch to daily builds
	#
	"Nightly" )
1371

1372
		if ! is_package_manager_running; then
JC Staudt's avatar
JC Staudt committed
1373
1374
1375
			dialog --colors --title " \Z1Warning\Z0 " --backtitle "$BACKTITLE" --yes-label "Yes" \
			--no-label "No" --yesno \
			"\nYou are switching to an untested auto-build repository which might break your system.\n\nContinue?" 10 48
1376

1377
1378
			if [[ $? = 0 ]]; then
				sed -i 's/apt.armbian.com/beta.armbian.com/' /etc/apt/sources.list.d/armbian.list
1379
				reload_bsp "nightly"
1380
			fi
Igor Pecovnik's avatar
Igor Pecovnik committed
1381
1382
1383
1384
		fi
	;;


1385
	# Switch to stable builds
Igor Pecovnik's avatar
Igor Pecovnik committed
1386
1387
	#
	"Stable" )
1388

1389
		if ! is_package_manager_running; then
JC Staudt's avatar
JC Staudt committed
1390
1391
1392
			dialog --colors --title " \Z1Warning\Z0 " --backtitle "$BACKTITLE" --yes-label "Yes" \
			--no-label "No" --yesno \
			"\nYou are switching to a stable repository where you will receive future updates.\n\nContinue?" 9 44
1393

1394
1395
			if [[ $? = 0 ]]; then
				sed -i 's/beta.armbian.com/apt.armbian.com/' /etc/apt/sources.list.d/armbian.list
1396
				reload_bsp "stable"
1397
			fi
Igor Pecovnik's avatar
Igor Pecovnik committed
1398
		fi
1399

Igor Pecovnik's avatar
Igor Pecovnik committed
1400
1401
	;;

1402
	# Switch to alternative configurations
1403
1404
	#
	"DTB" )
1405
		if ! is_package_manager_running; then
1406
			aval_dtbs
1407
			if [[ $exitstatus = 0 ]]; then
JC Staudt's avatar
JC Staudt committed
1408
1409
			BOX_LENGTH=$((${#TARGET_BOARD}+28));
			dialog --title "Switching board config" --backtitle "$BACKTITLE" --yes-label "Reboot" --no-label "Cancel" --yesno "\nReboot to $TARGET_BOARD settings?" 7 $BOX_LENGTH
1410
			if [[ $? = 0 ]]; then
1411
				sed -i "s/^fdt_file=.*/fdt_file=$TARGET_BOARD/" /boot/armbianEnv.txt 2> /dev/null && grep -q "fdt_file=$TARGET_BOARD" /boot/armbianEnv.txt 2> /dev/null || echo "fdt_file=$TARGET_BOARD" >> /boot/armbianEnv.txt
1412
				[[ "$LINUXFAMILY" = odroidxu4 ]] && sed -i "s/^fdt_file/board_name/" /boot/armbianEnv.txt && sed -i "s/^BOARD_NAME.*/BOARD_NAME=\"Odroid ${TARGET_BOARD^^}\"/" /etc/armbian-release
1413
1414
1415
				reboot;
			fi
			fi
1416
1417
		fi
	;;
Igor Pecovnik's avatar
Igor Pecovnik committed
1418
1419
1420
1421
1422


	# Toggle virtual read-only root filesystem
	#
	"Overlayroot" )
1423
		if ! is_package_manager_running; then
Igor Pečovnik's avatar
Igor Pečovnik committed
1424
			if [[ -n $(mount | grep -w overlay | grep -v chromium) ]]; then
1425
1426
1427
1428
1429
1430
1431
1432
1433
				dialog --title " Root overlay " --backtitle "$BACKTITLE" --yes-label "Disable" \
				--no-label "Cancel" \
				--yesno "\nYour system is already virtual read-only.\n\nDo you want to disable this feature and reboot?" 9 60
				[[ $? = 0 ]] && overlayroot-chroot sed -i "s/^overlayroot=.*/overlayroot=\"\"/" /etc/overlayroot.conf && \
				overlayroot-chroot rm /etc/update-motd.d/97-overlayroot && reboot
			else
				debconf-apt-progress -- apt-get -o Dpkg::Options::="--force-confnew" -y --no-install-recommends install overlayroot
				echo '#!/bin/bash' > /etc/update-motd.d/97-overlayroot
				echo 'if [ -n "$(mount | grep -w tmpfs-root)" ]; then \
1434
				echo -e "[\e[0m \e[1mremember: your system is in virtual read only mode\e[0m ]\n";fi' >> /etc/update-motd.d/97-overlayroot
1435
1436
1437
1438
1439
				chmod +x /etc/update-motd.d/97-overlayroot
				dialog --title "Root overlay" --backtitle "$BACKTITLE" --yes-label "Reboot" \
				--no-label "Cancel" --yesno "\nEnable virtual read-only root and reboot." 7 45
				[[ $? = 0 ]] && sed -i "s/^overlayroot=.*/overlayroot=\"tmpfs\"/" /etc/overlayroot.conf && reboot
			fi
Igor Pecovnik's avatar
Igor Pecovnik committed
1440
1441
1442
		fi
	;;

Igor Pecovnik's avatar
Igor Pecovnik committed
1443

Igor Pecovnik's avatar
Igor Pecovnik committed
1444
	esac
Igor Pečovnik's avatar
Igor Pečovnik committed
1445
}