begin_from_cockpit.sh

#!/bin/sh

custAbbr=$1
custTld=$2
siteSubnet=$3
siteName=$4
extDns1=$5
extDns2=$6
cybercns_hostname=$7
cybercns_siteId=$8
cybercns_clientId=$9
cybercns_clientSecret=${10}
Perch_URL=${11}
}OPNSense_URL=${12}
OPNSense_SHA256=${13}
password=${14}

mkdir -p /etc/osapp 

conf="/etc/osapp/osapp-vars.conf"

echo """
osapp_inst=\"/usr/local/osapp\"
vpool=\"pool0\"
nicBondType=\"bond\"
VLAN_IDs=(10 20 30 40 50 60 70 80 100)
siteName=\"$siteName\"
OSAPP_Hostname=\"$custAbbr-$siteName-OSAPP\"
Perch_Hostname=\"$custAbbr-$siteName-Perch\"
OPNsense_Hostname=\"$custAbbr-$siteName-FW\"
OPNSense_VMName=\"OPNsense_Firewall\"
Perch_VMName=\"Perch_Sensor\"
custAbbr=\"$custAbbr\"
custTld=\"$custTld\"
siteSubnet=\"$siteSubnet\"
Allowed_DNS=(\"$extDns1\" \"$extDns2\")
cybercns_hostname=\"$cybercns_hostname\"
cybercns_siteId=\"$cybercns_siteId\"
Perch_URL=\"$Perch_URL\"
OPNSense_URL=\"$OPNSense_URL\"
OPNSense_SHA256=\"$OPNSense_SHA256\"
snmpCommunity=\"radermonitor\"
password=\"$password\"
""" > $conf 

tmpScript="/usr/local/bin/run-osapp-setup.sh"
rm -f $tmpScript 
echo '#!/bin/sh

touch /tmp/osapp-setup-running

source /etc/osapp/osapp-vars.conf 
echo "Beginning Setup"

grep -v ^password /etc/osapp/osapp-vars.conf 

# Set root password
echo $password | passwd --stdin root

# Install OS addons
dnf -y install epel-release
dnf clean all
dnf -y update 
pkgs="cockpit-dashboard cockpit-session-recording sshpass"
echo "Installing RPM Packages: $pkgs"
dnf -y install $pkgs

cat /dev/zero | ssh-keygen -t rsa -q -N ""

# Set up Hypervisor
/usr/local/osapp/host_setup/host_kvm_setup.sh || exit 1

# Set up Networking
/usr/local/osapp/host_setup/host_networking.sh 2>/dev/null

# Import Firewall VM(s)
/usr/local/osapp/vm_setup/opnsense/create_opnsense.sh || exit 1

# Import Perch VM
/usr/local/osapp/vm_setup/perch/create_perch.sh || exit 1

# Configure Firewall VM
/usr/local/osapp/vm_setup/opnsense/process_config.sh  || exit 1

# Boot Perch VM 
/usr/local/osapp/vm_setup/perch/start_perch.sh  || exit 1

### Ready for Containers ### 
/usr/local/osapp/container_setup/podman.sh || exit 1

# Create CyberCNS Container if needed
#if [[ $(echo $cybercns_siteId) -eq 25 ]]; then 
#    /usr/local/osapp/container_setup/cybercns/cybercns.sh  || exit 1
#else
#    echo "No valid CyberCNS Site ID specified, skipping container installation..."
#fi

# Install CyberCNS
if [[ $(echo $cybercns_siteId) -eq 25 ]]; then
    curl -k https://cybercnsagent.s3.amazonaws.com/cybercnsagent_linux -O; chmod +x cybercnsagent_linux; sudo ./cybercnsagent_linux -c $cybercns_siteId -a $cybercns_clientId -s $cybercns_clientSecret -b $cybercns_hostname -i Probe
else
    echo "No valid CyberCNS Site ID specified, skipping CyberCNS Probe installation..."
fi


sed -ie "s/^password.*//g" /etc/osapp/osapp-vars.conf 

echo "End Setup."
rm -f /tmp/osapp-setup-running
' > $tmpScript

chmod a+x $tmpScript 
unitid="OSAPP-Setup-${RANDOM}"
echo "Starting job: watch with journalctl -f -u $unitid"
echo ""
systemd-run --unit=$unitid $tmpScript
journalctl -f -u $unitid


#hi