From 6d3e7ce6484fb5ca013c33c44769e1bf6beaa81f Mon Sep 17 00:00:00 2001
From: Valentin Lab <valentin.lab@kalysto.org>
Date: Fri, 21 May 2021 10:48:43 +0200
Subject: [PATCH] new: [host] several small adjustments

Signed-off-by: Valentin Lab <valentin.lab@kalysto.org>
---
 precise/host/hooks/install.d/40-btrfs.sh      |  2 +-
 precise/host/hooks/install.d/60-docker.sh     |  2 +-
 precise/host/hooks/install.d/61-mirror-dir.sh |  1 +
 precise/host/hooks/install.d/75-fail2ban.sh   | 23 ++++++++++++
 .../host/hooks/install.d/80-dns-waterfall.sh  |  2 +-
 precise/host/hooks/install.d/95-checks.sh     | 37 +++++++++++++++----
 precise/host/hooks/install.d/96-backup-lxc.sh |  4 +-
 7 files changed, 59 insertions(+), 12 deletions(-)
 create mode 120000 precise/host/hooks/install.d/61-mirror-dir.sh
 create mode 100644 precise/host/hooks/install.d/75-fail2ban.sh

diff --git a/precise/host/hooks/install.d/40-btrfs.sh b/precise/host/hooks/install.d/40-btrfs.sh
index 2c60782..a33e5a2 100755
--- a/precise/host/hooks/install.d/40-btrfs.sh
+++ b/precise/host/hooks/install.d/40-btrfs.sh
@@ -54,7 +54,7 @@ if [ "$UPDATE_BTRFS_TOOLS" ]; then
                     zlib1g-dev python3-dev python3-setuptools libacl1-dev e2fslibs-dev \
                     libblkid-dev liblzo2-dev libzstd-dev </dev/null &&
             ./autogen.sh &&
-            ./configure --prefix=/opt/apps/btrfs-tools &&
+            ./configure --prefix=/opt/apps/btrfs-tools --disable-zoned &&
             make &&
             make install &&
             ln -sf /opt/apps/btrfs-tools/bin/* /usr/local/bin/
diff --git a/precise/host/hooks/install.d/60-docker.sh b/precise/host/hooks/install.d/60-docker.sh
index 4688e45..5cfbd87 100755
--- a/precise/host/hooks/install.d/60-docker.sh
+++ b/precise/host/hooks/install.d/60-docker.sh
@@ -21,7 +21,7 @@ if [ -n "$just_installed" ]; then
                        grep "$docker_version" |
                        head -n 1 | xargs echo)"
         ## DOWNGRADE to 17.xx because 18.xx do not support registry v1
-        apt-get install -y docker-ce="$version"
+        apt-get install -y --allow-downgrades docker-ce="$version"
         need_restart=true
     fi
 
diff --git a/precise/host/hooks/install.d/61-mirror-dir.sh b/precise/host/hooks/install.d/61-mirror-dir.sh
new file mode 120000
index 0000000..b3561dd
--- /dev/null
+++ b/precise/host/hooks/install.d/61-mirror-dir.sh
@@ -0,0 +1 @@
+../../../../rsync-backup/hooks/install.d/60-install.sh
\ No newline at end of file
diff --git a/precise/host/hooks/install.d/75-fail2ban.sh b/precise/host/hooks/install.d/75-fail2ban.sh
new file mode 100644
index 0000000..81cafdb
--- /dev/null
+++ b/precise/host/hooks/install.d/75-fail2ban.sh
@@ -0,0 +1,23 @@
+#!/bin/bash
+
+
+## Depends lxc-scripts installed
+
+
+##
+## Install
+##
+
+
+apt-get install -y fail2ban </dev/null
+
+sed -ri 's/^(bantime\s+=\s+.*)$/bantime = 1w/g' /etc/fail2ban/jail.conf
+sed -ri 's/^(findtime\s+=\s+.*)$/findtime = 26w/g' /etc/fail2ban/jail.conf
+
+
+##
+## Test
+##
+
+# fail2ban-client status
+# fail2ban-client status sshd
diff --git a/precise/host/hooks/install.d/80-dns-waterfall.sh b/precise/host/hooks/install.d/80-dns-waterfall.sh
index 283ac41..72273a4 100755
--- a/precise/host/hooks/install.d/80-dns-waterfall.sh
+++ b/precise/host/hooks/install.d/80-dns-waterfall.sh
@@ -53,8 +53,8 @@ chown bind:bind /var/log/named
 service lxc restart
 service lxc-net restart  ## had to 'brctl delbr lxcbr0' myself
 
-/etc/init.d/bind9 start
 /etc/init.d/dnsmasq start
+/etc/init.d/bind9 start
 
 cp /etc/resolv.conf{,.orig}
 cat <<EOF > /etc/resolv.conf
diff --git a/precise/host/hooks/install.d/95-checks.sh b/precise/host/hooks/install.d/95-checks.sh
index 4b8bd4c..9830af3 100755
--- a/precise/host/hooks/install.d/95-checks.sh
+++ b/precise/host/hooks/install.d/95-checks.sh
@@ -2,16 +2,39 @@
 
 ## REQUIRES: 0k-manage mail
 
-ln -sf /opt/apps/0k-manage/src/etc/cron.hourly/check-* /etc/cron.hourly/
-
-
-ln -sf /opt/apps/0k-charms/rsync-backup/resources/bin/mirror-dir-check /usr/local/sbin/
-
-
+[ -n "${BACKUP_SERVER}" ] || {
+    echo "Error: you must set \$BACKUP_SERVER prior to running this script." >&2
+    exit 1
+}
+
+if ! [ -e "/etc/default/alerting" ]; then
+    if [ -z "$DEFAULT_ALERTING_EMAILS" ]; then
+           echo "You must define \$DEFAULT_ALERTING_EMAILS before launching this script." >&2
+           exit 1
+    fi
+    cat <<EOF > /etc/default/alerting
+MAIL_DESTS=(
+$(
+for email in $DEFAULT_ALERTING_EMAILS; do
+echo "    $email"
+done
+)
+)
+EOF
+fi
+
+ln -sfv /opt/apps/0k-manage/src/etc/cron.hourly/check-* /etc/cron.hourly/
+
+if ! [ -e /usr/local/sbin/mirror-dir ]; then
+    ln -sfv /opt/apps/0k-charms/rsync-backup/resources/bin/mirror-dir /usr/local/sbin/
+fi
+
+mailname=$(cat /etc/mailname)
+mailname=${mailname%.localdomain}
 cat <<EOF > /etc/cron.d/mirror-dir-check
 SHELL=/bin/bash
 PATH=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin
 
-35 * * * *   root   mirror-dir-check -d "core-06.0k.io:10023" -n '12 hours' | logger -t mirror-dir-check
+35 * * * *   root   mirror-dir check -d "$BACKUP_SERVER:10023" -n '12 hours' | logger -t mirror-dir-check
 
 EOF
\ No newline at end of file
diff --git a/precise/host/hooks/install.d/96-backup-lxc.sh b/precise/host/hooks/install.d/96-backup-lxc.sh
index d912f68..b2dc233 100755
--- a/precise/host/hooks/install.d/96-backup-lxc.sh
+++ b/precise/host/hooks/install.d/96-backup-lxc.sh
@@ -6,8 +6,8 @@
 ## Backup lxc
 ##
 
-ln -sf /opt/apps/lxc-scripts/etc/cron.hourly/* /etc/cron.hourly/
-ln -sf /opt/apps/lxc-scripts/etc/cron.daily/* /etc/cron.daily/
+ln -sfv /opt/apps/lxc-scripts/etc/cron.hourly/* /etc/cron.hourly/
+ln -sfv /opt/apps/lxc-scripts/etc/cron.daily/* /etc/cron.daily/
 
 
 if ! grep ^BACKUP_LXC_PATH= /etc/default/lxc >/dev/null 2>&1; then