set -e # Exit on error (avoids snowballing)

export DEBIAN_FRONTEND=noninteractive # Bypass (most!) interactive questions

FLAGDIR=/etc/iiab/install-flags

APTPATH=/usr/bin # Avoids problematic /usr/local/bin/apt on Linux Mint

[ $(id -un) = root ] || { echo "Please run 'sudo iiab'" ; exit 1 ; }

mkdir -p $FLAGDIR # Whih also creates /etc/iiab

[ $# != 0 ] && printf '%s\n' "$@" >> /etc/iiab/pr-queue

command -v grep &> /dev/null ||

$APTPATH/apt -y install grep # AVOID UX CLUTTER+DELAYS: 4 MORE BELOW!

check_user_pwd() {

}

if check_user_pwd "pi" "raspberry"; then

echo -e "\n\nRaspberry Pi's are COMPROMISED often if the default password is not changed!\n"

echo -n "What password do you want for GNU/Linux user 'pi' ? "

read ans < /dev/tty # Whines but doesn't change password if [Enter]

echo pi:"$ans" | chpasswd || true # Overrides 'set -e'

IIAB_ADMIN_USER=iiab-admin

tmp=$(grep '^iiab_admin_user:\s' /opt/iiab/iiab/vars/default_vars.yml 2> /dev/null | sed 's/^iiab_admin_user:\s\+\<//; s/#.*//; s/\s*$//')

if [ "$tmp" != "" ]; then IIAB_ADMIN_USER=$tmp; fi

tmp=$(grep '^iiab_admin_user:\s' /etc/iiab/local_vars.yml 2> /dev/null | sed 's/^iiab_admin_user:\s\+\<//; s/#.*//; s/\s*$//')

if [ "$tmp" != "" ]; then IIAB_ADMIN_USER=$tmp; fi

IIAB_ADMIN_PUBLISHED_PWD=g0adm1n

tmp=$(grep '^iiab_admin_published_pwd:\s' /opt/iiab/iiab/vars/default_vars.yml 2> /dev/null | sed 's/^iiab_admin_published_pwd:\s\+\<//; s/#.*//; s/\s*$//')

if [ "$tmp" != "" ]; then IIAB_ADMIN_PUBLISHED_PWD=$tmp; fi

if ! grep -q '^iiab_admin_user_install:\s\+[fF]alse\b' /etc/iiab/local_vars.yml 2> /dev/null ; then

if ! id -u "$IIAB_ADMIN_USER" > /dev/null 2> /dev/null; then

useradd "$IIAB_ADMIN_USER"

echo "$IIAB_ADMIN_USER":"$IIAB_ADMIN_PUBLISHED_PWD" | chpasswd

fi

if check_user_pwd "$IIAB_ADMIN_USER" "$IIAB_ADMIN_PUBLISHED_PWD"; then

echo -e "\n\nUser '$IIAB_ADMIN_USER' retains default password '$IIAB_ADMIN_PUBLISHED_PWD' per http://FAQ.IIAB.IO\n"

echo -e "This is for login to Internet-in-a-Box's Admin Console (http://box.lan/admin)"

echo -e "Technical Details: https://github.com/iiab/iiab/blob/master/roles/iiab-admin\n"

echo -n "What password do you want for GNU/Linux user '$IIAB_ADMIN_USER' ? "

read ans < /dev/tty # Whines but doesn't change password if [Enter]

echo "$IIAB_ADMIN_USER":"$ans" | chpasswd || true # Overrides 'set -e'

if [ -f $FLAGDIR/iiab-complete ]; then

echo -e "\n\nIIAB INSTALLATION (/usr/sbin/iiab) IS ALREADY COMPLETE -- per existence of:"

echo -e "$FLAGDIR/iiab-complete -- nothing to do.\n"

exit 0

command -v wget &> /dev/null ||

$APTPATH/apt -y install wget # AS ABOVE (grep)

command -v nano &> /dev/null ||

$APTPATH/apt -y install nano # BELOW (git, jq)

local_vars_src_file=local_vars_big.yml # Testing default, for section I. (PR's can change local_vars.yml templates)

if [ -f /etc/iiab/local_vars.yml ]; then

# FUTURE: Test if their local_vars.yml is sufficiently version-compatible !

echo -e "\n\n EXISTING /etc/iiab/local_vars.yml is being used to install Internet-in-a-Box\n"

echo -e " 🚂 🚃 🚄 🚅 🚆 🚇 🚈 🚉 🚊 🚋 🚌 🚍 🚎 🚏 🚐 🚑 🚒 🚚 🚛 🚜 🚞 🚟 🚠 🚡 🚲\n"

echo -e " Google 'local_vars.yml' to learn more!"

echo -e "\n\nInstalling Internet-in-a-Box requires /etc/iiab/local_vars.yml\n"

echo -e "Do you want (1) 🚵 MIN-sized (2) 🚢🚣 MEDIUM-sized or (3) 🚂🚃🚃 BIG-sized?"

echo -e "Or (m) for 🚑 MEDICAL? YOU NEED 2 GB RAM OR HIGHER, IF YOU CHOOSE (3)\n"

echo -e 'See "What can I do with E-books and Internet-in-a-Box?" and "What services'

echo -e '(IIAB apps) are suggested during installation?" within http://FAQ.IIAB.IO\n'

echo -e "WARNING: This Can Take More Than An Hour, depending on Internet speed, CPU,"

echo -e "temperature, and the speed of your microSD card.\n"

echo -n "Please type 1, 2, 3 or m then press [ENTER]: "

read local_vars_size < /dev/tty

echo

case $local_vars_size in

1)

local_vars_src_file=local_vars_min.yml

;;

3)

local_vars_src_file=local_vars_big.yml

;;

m)

local_vars_src_file=local_vars_medical.yml

;;

*)

local_vars_src_file=local_vars_medium.yml

;;

esac

if [ -d /opt/iiab/iiab/vars ]; then

cp /opt/iiab/iiab/vars/$local_vars_src_file /etc/iiab/local_vars.yml

else

wget -O /etc/iiab/local_vars.yml https://github.com/iiab/iiab/raw/master/vars/$local_vars_src_file

fi

echo -en "\nEdit /etc/iiab/local_vars.yml to customize your Internet-in-a-Box? [Y/n] "

read ans < /dev/tty

if [ "$ans" != "n" ] && [ "$ans" != "N" ]; then

echo -e "\n1) PLEASE RUN: sudo nano /etc/iiab/local_vars.yml\n"

echo -e "2) After you're done editing, RUN 'sudo iiab' TO CONTINUE!\n"

exit 0

fi

echo -e "\n\n ██████████████████████████████████████████████████████████████████████████████"

echo -e " ██ ██"

echo -e " ██ RUN 'sudo iiab' IF THIS INSTALL SCRIPT EVER FAILS, TO TRY TO CONTINUE! ██"

echo -e " ██ ██"

echo -e " ██████████████████████████████████████████████████████████████████████████████"

echo -e "\n\n'apt update' is checking for OS updates...\n"

$APTPATH/apt -qq update > /tmp/apt.stdout 2> /tmp/apt.stderr || true # Overrides 'set -e'

if (( $(wc -c < /tmp/apt.stderr) > 82 )); then # apt.stderr typically contains exactly 82 characters when there are no errors, no matter the primary locale, i.e. 3-line file "\nWARNING: apt does not have a stable CLI interface. Use with caution in scripts.\n\n" ...OR... in other cases more than 82, e.g. many lines of errors when apt is busy/locked/offline/etc

echo -e "'apt update' FAILED. VERIFY YOU'RE ONLINE and resolve all errors below:\n"

cat /tmp/apt.stderr

exit 1

elif grep -q 'apt list --upgradable' /tmp/apt.stdout; then # apt.stdout typically contains {"All packages are up to date.\n" [even if primary locale is French & Hindi!], "Todos los paquetes están actualizados.\n", "所有软件包均为最新。\n"} ...OR... {"5 packages can be upgraded. Run 'apt list --upgradable' to see them.\n" [even if primary locale is French & Hindi!], "Se puede actualizar 1 paquete. Ejecute «apt list --upgradable» para verlo.\n", "有 1 个软件包可以升级。请执行 ‘apt list --upgradable’ 来查看它们。\n"}

cat /tmp/apt.stdout

echo -e "\nYour OS will now be upgraded...this takes time. THEN IT WILL AUTO-REBOOT.\n"

echo -n "Hit [ENTER] to confirm you'll RUN 'sudo iiab' AFTER IT REBOOTS: "

read ans < /dev/tty

echo

$APTPATH/apt -y dist-upgrade

reboot

exit 0 # Nec to avoid both output lines below (that confuse implementers!)

cat /tmp/apt.stdout # "All packages are up to date.\n"

echo -ne "\nHit [ENTER] to confirm you'll TRY TO RERUN 'sudo iiab' IF THERE IS A PROBLEM: "

read ans < /dev/tty

if [ -e /dev/mmcblk0p2 ]; then

echo -e "\n\nFound microSD card /dev/mmcblk0p2: Lower its reserve disk space from ~5% to 2%\n"

tune2fs -m 2 /dev/mmcblk0p2

echo -e "\n\nDOWNLOAD (CLONE) IIAB'S 3 KEY REPOS INTO /opt/iiab ..."

command -v git &> /dev/null ||

$APTPATH/apt -y install git # AVOID UX CLUTTER+DELAYS

mkdir -p /opt/iiab

cd /opt/iiab

if [ -d iiab ]; then

echo -e "REPO EXISTS? Consider 'cd /opt/iiab/iiab; git pull'"

git clone https://github.com/iiab/iiab

if [ -d iiab-admin-console ]; then

echo -e "REPO EXISTS? Consider 'cd /opt/iiab/iiab-admin-console; git pull'"

git clone https://github.com/iiab/iiab-admin-console

if [ -d iiab-factory ]; then

echo -e "REPO EXISTS? Consider 'cd /opt/iiab/iiab-factory; git pull'"

git clone https://github.com/iiab/iiab-factory

echo -e "\n\nINSTALL PR's FROM iiab/iiab OR iiab/iiab-admin-console -- USAGE EXAMPLES:\n"

echo -e " sudo iiab 361 2604 2607"

echo -e " curl d.iiab.io/install.txt | sudo bash -s 361 2604 2607\n"

command -v jq &> /dev/null ||

$APTPATH/apt -y install jq # sed better, to avoid delays?

if [ -s /etc/iiab/pr-queue ]; then # Set an email address for 'git pull' if one isn't yet set

git config --get user.email 1> /dev/null ||

git config --global user.email "[email protected]"

echo -e "\nYour git email is set to: $(git config --get user.email)"

echo -e 'Change this by running: sudo git config --global user.email "[email protected]"'

cp /opt/iiab/iiab/vars/$local_vars_src_file /tmp

while [ -s /etc/iiab/pr-queue ] # Test that file exists and is non-empty

pr=$(head -1 /etc/iiab/pr-queue) # Try the next PR, from top of queue

if ! [[ "$pr" =~ ^[1-9][0-9]*$ ]]; then

echo -e "\n\e[1mInvalid PR number:\e[0m $pr\n"

echo -n "Delete it from top of /etc/iiab/pr-queue and continue? [Y/n] "

read ans < /dev/tty

[ "$ans" = "n" ] || [ "$and" = "N" ] &&

exit 1

sed -i '1d' /etc/iiab/pr-queue # Delete 1st line

continue

fi

if (( pr >= 1561 )); then # iiab/iiab's lowest PR as of October 2020

repo=iiab

else

repo=iiab-admin-console

fi

http_code=$(curl -sH "Accept: application/vnd.github.v3" https://api.github.com/repos/iiab/$repo/pulls/$pr -w "%{http_code}" -o /tmp/iiab-pr.json)

if [ "$http_code" != 200 ] ; then

echo -e "\n\e[41mCOULD NOT FIND PR #$pr (https://github.com/iiab/$repo/pull/$pr)\e[0m\n"

echo -en "\e[41mHTTP ERROR: $http_code\e[0m\e[1m "

[ "$http_code" = 403 ] &&

echo -en "(DID YOU REQUEST 60+ PR's IN ONE HOUR?)"

[ "$http_code" = 404 ] &&

echo -en "(IS #$pr AN ISSUE, RATHER THAN A PR?)"

echo -e "\n"

cat /tmp/iiab-pr.json # GitHub sometimes includes an English explanation of the error, and URL, e.g. https://developer.github.com/v3/#rate-limiting

echo

curl -IsH "Accept: application/vnd.github.v3" https://api.github.com/repos/iiab/$repo/pulls/$pr # HTTP headers typically reveal a lot more!

echo -n "Delete it from top of /etc/iiab/pr-queue and continue? [Y/n] "

read ans < /dev/tty

[ "$ans" = "n" ] || [ "$and" = "N" ] &&

exit 1

sed -i '1d' /etc/iiab/pr-queue # Delete 1st line

continue

fi

account=$(jq -r '.head.label' /tmp/iiab-pr.json | cut -d: -f1)

branch=$(jq -r '.head.label' /tmp/iiab-pr.json | cut -d: -f2)

echo -e "\nPR #$pr: cd /opt/iiab/$repo"

cd /opt/iiab/$repo

#git checkout -b POTLUCK master || true # If test branch name/norm in future...for both repos?

echo -e "git pull --no-edit https://github.com/$account/$repo $branch" # Or $repo.git

git pull --no-edit https://github.com/$account/$repo $branch || {

echo -e "\n\e[1mgit exit/error code:\e[0m $?\n" # if hides err code

echo -n "Delete it from top of /etc/iiab/pr-queue and continue? [Y/n] "

read ans < /dev/tty

[ "$ans" = "n" ] || [ "$and" = "N" ] &&

exit 1

sed -i '1d' /etc/iiab/pr-queue # Delete 1st line

continue

}

sed -i '1d' /etc/iiab/pr-queue # Delete 1st line

echo "$pr $(date '+%F %T %Z')" >> /etc/iiab/pr-list-pulled # For iiab-diagnostics

if ! cmp -s /tmp/$local_vars_src_file /opt/iiab/iiab/vars/$local_vars_src_file; then

mv /etc/iiab/local_vars.yml /etc/iiab/local_vars.yml.old

cp /opt/iiab/iiab/vars/$local_vars_src_file /etc/iiab/local_vars.yml

echo -e "\n\e[1mWARNING: /opt/iiab/iiab/vars/$local_vars_src_file HAS CHANGED!\n"

echo -e "YOUR /etc/iiab/local_vars.yml WAS MOVED TO /etc/iiab/local_vars.yml.old\e[0m\n"

echo -n "Edit the NEW /etc/iiab/local_vars.yml to customize Internet-in-a-Box? [Y/n] "

read ans < /dev/tty

if [ "$ans" != "n" ] && [ "$ans" != "N" ]; then

echo -e "\n1) PLEASE RUN: sudo nano /etc/iiab/local_vars.yml\n"

echo -e "2) After you're done editing, RUN 'sudo iiab' TO CONTINUE!\n"

exit 0

fi

echo -e "\n\nINSTALL ANSIBLE + CORE IIAB SOFTWARE + ADMIN CONSOLE / CONTENT PACK MENUS...\n"

echo -e "Install Ansible..."

cd /opt/iiab/iiab/scripts/

./ansible

echo -e "\n┌──────────────────────────────────────────────────────────────────────────────┐"

echo -e "│ │"

echo -e "│ NOW INSTALL IIAB SOFTWARE! If glitches arise (connectivity or otherwise) │"

echo -e "│ │"

echo -e "│ PLEASE TRY TO CONTINUE BY RE-RUNNING PARENT SCRIPT 'sudo iiab' -- or run │"

echo -e "│ │"

echo -e "│ child script ./iiab-install -- both avoid repeating any of the 9 stages. │"

echo -e "│ │"

echo -e "└──────────────────────────────────────────────────────────────────────────────┘"

cd /opt/iiab/iiab/

./iiab-install # "$@"

if [ -f $FLAGDIR/iiab-admin-console-complete ]; then

echo -e "ADMIN CONSOLE INSTALLATION IS ALREADY COMPLETE -- per existence of:"

echo -e "$FLAGDIR/iiab-admin-console-complete\n"

elif grep -q '^admin_console_install:\s\+[fF]alse\b' /etc/iiab/local_vars.yml ; then

echo -e "LET'S NOT TRY TO INSTALL ADMIN CONSOLE -- because:"

echo -e "'admin_console_install: False' is in /etc/iiab/local_vars.yml\n"

echo -e "Install Admin Console... (also runs iiab-get-kiwix-cat to d/l Kiwix catalog,"

echo -e "and installs Dynamic Menuing for /library/www/html/home/index.html)\n"

cd /opt/iiab/iiab-admin-console

./install

touch $FLAGDIR/iiab-admin-console-complete

if grep -q '^admin_console_enabled:\s\+[fF]alse\b' /etc/iiab/local_vars.yml ; then

echo -e "'admin_console_enabled: False' is in /etc/iiab/local_vars.yml"

echo -e "...so let's try to DISABLE & STOP Admin Console's iiab-cmdsrv.service\n"

systemctl disable iiab-cmdsrv || true # Overrides 'set -e'

systemctl stop iiab-cmdsrv || true # Overrides 'set -e'

echo -e "'admin_console_enabled: False' isn't in /etc/iiab/local_vars.yml"

echo -e "...so let's try to ENABLE & START Admin Console's iiab-cmdsrv.service\n"

systemctl enable iiab-cmdsrv || true # Overrides 'set -e'

systemctl start iiab-cmdsrv || true # Overrides 'set -e'

if [ -d /library/ka-lite ]; then

echo -e "\n\nKA LITE REQUIRES 2 THINGS...\n"

echo -e "Register with KA Lite - just the anonymous registration...\n"

# /usr/bin/kalite venv wrapper invokes 'export KALITE_HOME=/library/ka-lite'

if [ ! -f $FLAGDIR/kalite-zone-complete ]; then

echo -e "Now running 'kalite manage generate_zone' ...\n"

kalite manage generate_zone || true # Overrides 'set -e'

touch $FLAGDIR/kalite-zone-complete

else

echo -e "'kalite manage generate_zone' IS ALREADY COMPLETE -- per existence of:"

echo -e "$FLAGDIR/kalite-zone-complete\n"

fi

echo -e "\nInstall KA Lite's mandatory 0.9 GB English Pack... (en.zip)\n"

if [ ! -f $FLAGDIR/kalite-en.zip-complete ]; then

#echo -e 'Now retrieving it...\n'

cd /tmp

if [ -f en.zip ]; then

if [ $(wc -c < en.zip) -ne 929916955 ]; then

echo -e "\nERROR: /tmp/en.zip must be 929,916,955 bytes to proceed.\n" >&2

exit 1

else

echo -e "\nUsing existing /tmp/en.zip whose 929,916,955 byte size is correct!\n"

fi

else

wget http://pantry.learningequality.org/downloads/ka-lite/0.17/content/contentpacks/en.zip

fi

echo -e 'Now installing /tmp/en.zip into /library/ka-lite/content/*\n'

kalite manage retrievecontentpack local en en.zip

touch $FLAGDIR/kalite-en.zip-complete

fi

if systemctl -q is-active transmission-daemon; then

echo -e "\n\nSTARTING BITTORRENT DOWNLOAD(S) for KA Lite...Please Monitor: http://box:9091\n"

transmission-remote -n Admin:changeme -t all --start

touch $FLAGDIR/iiab-complete

echo -e "\n\n ┌───────────────────────────────────────────────────────────┐"

echo -e " │ │"

echo -e " │ INTERNET-IN-A-BOX (IIAB) SOFTWARE INSTALL IS COMPLETE │"

echo -e " │ │"

echo -e " └───────────────────────────────────────────────────────────┘\n"

echo -e "(1A) A couple minutes after you reboot (below) try to connect any laptop to"

echo -e 'Wi-Fi hotspot "Internet in a Box". If this works, verify that you can browse'

echo -e "to http://box or http://box.lan or http://172.18.96.1\n"

echo -e "(1B) IF THOSE 3 DON'T WORK, try http://box.local from any device connected to"

echo -e "your usual network. Or try http://localhost from your IIAB itself!\n"

echo -e "(1C) IF ALL 5 ABOVE DON'T WORK, ask the person who set up the network/router"

echo -e "in your building for the IP address of your IIAB, so you can browse to it"

echo -e "using (something like) http://192.168.0.100\n"

echo -e '(2) ADD CONTENT using http://box.lan/admin (changing "box.lan" to be as above!)'

echo -e 'PLEASE READ "What are the default passwords?" and "How do I customize my'

echo -e 'Internet-in-a-Box home page?" at http://FAQ.IIAB.IO\n'

echo -e "(3) Please run the 'iiab-diagnostics' command, to generate a URL summarizing"

echo -e "your IIAB configuration, for volunteers seeking to help you. We strongly"

echo -e "encourage you to share this URL also when connecting with others in the IIAB"

echo -e "global community, learning from other initiatives in your region and beyond!\n"

echo -ne "HIT [Enter] TO REBOOT, CONFIRMING YOU'VE" '"photographed" THE ABOVE PARAGRAPHS: '

read ans < /dev/tty

reboot