staging.inyokaproject.org

#/bin/bash
echo -e $"\n==================================================================================================================================="
echo -e $'\nTL;DR'
echo -e $'\nThis script is preparing a new blank linux server into a production ready kubernetes cluster for hosting containerized apps.'
echo -e $'\nControl bools has to be defined, because this script will be used ( or abused :) ) for more universal linux configurations too.'
echo -e $"\n==================================================================================================================================="

# Define the control bools
dummyVGA="True"  # if True a dummy X11 will be installed, to simulate a monitor which is useful in some docker applications
dummyXconf=/usr/share/X11/xorg.conf.d/xorg.conf
dockerCanonicalFork="True"  # if True the docker fork from Canonical, and if False the official docker will be installed.
dockerDeamon=/etc/docker/daemon.json
kubernetes="True" # if True Canonical microk8s will be installed. Use Canonical docker, because microk8s is from Canonical too. 

# root user creates a sudo user ubuntu if not already exists
if [ $USER = "root" ]; then
    if id -u "ubuntu" >/dev/null 2>&1; then
	echo -e $'\nUser ubuntu already has an user account'
    else
        echo -e $"\nInit new sudo user ubuntu"
        apt-get update
        apt-get install -y sudo
        adduser -m -s /bin/bash ubuntu
        adduser --gecos '' ubuntu
        usermod -aG sudo ubuntu
        echo "me  ALL=(ALL) NOPASSWD:ALL" | sudo tee /etc/sudoers.d/ubuntu
    fi #if ubuntu
    echo -e $'\nLogout and login as ubuntu or pi user, and re-execute this script'
fi #if root

# configure ubuntu user environment
if [ $USER = "ubuntu" ] || [ $USER = "pi" ]; then
    echo -e $"\nInstalling, or updating basic dependencies"
    sudo apt-get update
    sudo apt-get install -y ccache dos2unix bash-completion snapd fuse ufw nano nfs-common
    sudo systemctl start snapd.socket

    # Simulated monitor pluged in for dummy XServer 
    if test -f "$dummyXconf" && [[ $dummyVGA == "True" ]]; then
        echo -e $"\n==================================================="
	echo -e $"\nDummy XServer already installed"	
    else
        if [[ $dummyVGA == "True" ]]; then
            echo -e $"\n==================================================="
            echo -e $"\nInstall dummy vga monitor"
            sudo apt-get install -y xserver-xorg-video-dummy
            sudo touch $dummyXconf
            #ToDo sed mock X11 config into file
        fi
    fi

    # Docker section
    if [ -x "$(command -v docker)" ]; then
        echo -e $"\n==================================================="
	echo -e $"\ndocker already installed"	
        echo -e $"\n==================================================="
    else
        if [[ $dockerCanonicalFork == "False" ]]; then
            echo -e $"\nInstall official docker"
            echo -e $"\nRemove docker artefacts if they exist"
	    sudo apt-get remove docker docker-engine docker.io containerd runc
	    sudo apt-get purge docker-ce docker-ce-cli containerd.io
	    sudo rm -rf /var/lib/docker
	    sudo rm -rf /var/lib/containerd
            echo -e $"\nSetup docker repository"  
	    sudo apt-get install -y apt-transport-https ca-certificates curl gnupg lsb-release
	    curl -fsSL https://download.docker.com/linux/ubuntu/gpg | sudo gpg --dearmor -o /usr/share/keyrings/docker-archive-keyring.gpg
		    echo \
	  		   "deb [arch=amd64 signed-by=/usr/share/keyrings/docker-archive-keyring.gpg] https://download.docker.com/linux/ubuntu \
  			   $(lsb_release -cs) stable" | sudo tee /etc/apt/sources.list.d/docker.list > /dev/null
  	    sudo apt-get update

	    echo -e $"\nInstall official docker"
	    sudo apt-get install -y docker-ce docker-ce-cli containerd.io

	    echo -e $"\nManage docker as non-root user"
	    sudo groupadd docker
	    sudo usermod -aG docker $USER
	    sudo chown "$USER":"$USER" /home/"$USER"/.docker -R
	    sudo chmod g+rwx "$HOME/.docker" -R

	    echo -e $"\nConfigure docker to start on boot"
	    sudo systemctl enable docker.service
	    sudo systemctl enable containerd.service

	    echo -e "\nInstall docker-compose"
	    sudo curl -L "https://github.com/docker/compose/releases/download/1.29.2/docker-compose-$(uname -s)-$(uname -m)" -o /usr/local/bin/docker-compose
	    sudo chmod +x /usr/local/bin/docker-compose
	    sudo ln -s /usr/local/bin/docker-compose /usr/bin/docker-compose

	    echo -e "\nNext you have to setup systemd for docker!"
	    echo "See: Configuring remote access with systemd unit file in https://docs.docker.com/engine/install/linux-postinstall/"
	    echo -e "\ndocker successfully installed. please logout and login again"
            echo -e $"\n==================================================="
	else
            echo -e $"\n==================================================="
	    echo -e $"\nInstall Canonical docker"
	    sudo apt-get install -y docker.io docker-compose docker-doc docker-registry
	    echo -e $"\nManage docker as non-root user"
	    sudo groupadd docker
	    sudo usermod -aG docker $USER
            sudo chown ubuntu:docker /var/run/docker.sock
            sudo chown -R ubuntu:docker /var/run/docker
            sudo systemctl enable  docker
            echo -e $'\nLogin as ubuntu or pi user, and re-execute this script'
            echo -e $'\nSystem will be rebootet now'
            sudo reboot
        fi
    fi #if docker

    # Kubernetes section
    if [[ $kubernetes == "True" ]]; then
        if [ -x "$(command -v microk8s)" ]; 
        then
            echo -e $"\n==================================================="
            echo -e $"\nmicrok8s already installed"  
            echo -e $"\n==================================================="
        else
            if [ -f "$dockerDeamon" ]; then
                echo -e $"\nDocker daemon already configured"	
                echo "$dockerDeamon exists."
            else 
                echo "$dockerDeamon does not exist."
                # because of microk8s inspect 'WARNING:  Docker is installed.'
                sudo touch /etc/docker/daemon.json
                sudo tee /etc/docker/daemon.json <<<'{"insecure-registries":["localhost:32000"]}'
                sudo systemctl restart docker
            fi

            echo -e $"\nConfigure firewall for Kubernetes"
            sudo ufw allow in on venet0 && sudo ufw allow out on venet0
            sudo ufw default allow routed

            echo -e $"\n==================================================="
            echo -e $"\nDisabeling swap for Kubernetes"
            sudo swapoff -a

            echo -e $"\n==================================================="
            echo -e $"\nSee what versions of microk8s are currently published"       
            snap info microk8s

            echo -e $"\n==================================================="
            echo -e $"\nInstall microk8s - Canocical Kubernetes"  
            sudo snap install microk8s --classic --channel=1.18/stable
            sudo usermod -a -G microk8s $USER      

            echo -e $"\nGenerate and show microk8s kube config"
            mkdir -p ~/.kube
            microk8s config > ~/.kube/config
            microk8s config
            sudo chown -R $USER. ~/.kube

            echo -e $"\n==================================================="
            echo -e $"\nShow kubelet service status"
            systemctl status snap.microk8s.daemon-kubelet

            echo -e $"\n==================================================="
            echo -e $"\nEnable addons and basic services"  
            microk8s.enable dns dashboard storage registry        

            echo -e $"\nmicrok8s waiting for status"  
            microk8s status --wait-ready

            echo -e $"\n==================================================="
            echo -e $"\nGet microk8s namespaces"  
            microk8s.kubectl get all --namespace kube-system

            echo -e $"\n==================================================="
            echo -e $"\nmicrok8s inspect"
            microk8s inspect

            echo -e $"\n==================================================="
            echo -e $"\nCheck kubernetes ports"
            sudo netstat -lnpt|grep kube           

            echo -e $"\n==================================================="
            echo -e $"\nCreate microk8s access token"      
            token=$(microk8s kubectl -n kube-system get secret | grep default-token | cut -d " " -f1)
            microk8s kubectl -n kube-system describe secret $token
            
            echo -e $"\nmicrok8s dashboard IP"                  
            microk8s kubectl -n kube-system get service/kubernetes-dashboard -o go-template={{.spec.clusterIP}}

            echo -e $"\n==================================================="
        fi
    fi #if kubernetes
fi #if ubuntu

dummyVGA="True" 

echo -e $'\nUser ubuntu already has an user account'

echo -e $"\n==================================================="
echo -e $"\ndocker already installed"	
echo -e $"\n==================================================="

            echo -e $"\n==================================================="
            echo -e $"\nCreate microk8s access token"      
            token=$(microk8s kubectl -n kube-system get secret | grep default-token | cut -d " " -f1)
            microk8s kubectl -n kube-system describe secret $token

createMicrok8sAccessToken () {
            echo "==================================================="
            echo "Create microk8s access token"      
            token=$(microk8s kubectl -n kube-system get secret | grep default-token | cut -d " " -f1)
            microk8s kubectl -n kube-system describe secret $token
}
#
# ... viele Zeilen später:
#
            createMicrok8sAccessToken ()

#!/bin/sh

[ "$(id -u)" -eq 0 ] || exec sudo "$0" "$@"

# Als root
id

# Jetzt als der aufrufende User:
sudo -u "$SUDO_USER" id

#!/bin/sh

[ -z "$DEBUG" ] || set -x
[ $(id -u) -eq 0 ] || exec sudo "DEBUG=$DEBUG" "$0" "$@"

# Kommando als root
id

# Jetzt als der ursprünglich aufrufende User:
sudo -u "$SUDO_USER" id

$ echo 'foo\nbar' | od -t x1c
0000000  66  6f  6f  5c  6e  62  61  72  0a
          f   o   o   \   n   b   a   r  \n
0000011
$ echo $'foo\nbar' | od -t x1c
0000000  66  6f  6f  0a  62  61  72  0a
          f   o   o  \n   b   a   r  \n
0000010

#!/bin/sh

abort() { echo "$*" >&2; exit 1; }

# Wenn man ein bisschen paranoid ist:
export USER=$(id -un)

if [ "$USER" != ubuntu -a "$USER" != pi ]; then
  abort "ERROR: user needs to be 'ubuntu' or 'pi' but was '$USER'"
fi

...

t530:~/job/fbb/mysql 🐧> echo -e 'foo\nbar' | od -t x1c
0000000  66  6f  6f  0a  62  61  72  0a
          f   o   o  \n   b   a   r  \n
0000010
t530:~/job/fbb/mysql 🐧> echo -e $'foo\nbar' | od -t x1c
0000000  66  6f  6f  0a  62  61  72  0a
          f   o   o  \n   b   a   r  \n
0000010