set -e # Exit on error (avoids snowballing)

export DEBIAN_FRONTEND=noninteractive # Bypass (most!) interactive questions

SCRIPT=iiab-upgrade

RELEASE=5

CURR_VER="" # Ansible version you currently have installed

GOOD_VER="2.10.1" # Trigger point for anisble forced reinstall

BASEDIR=/opt/iiab

CONFDIR=/etc/iiab

FLAGDIR=$CONFDIR/install-flags

IIABENV=$CONFDIR/iiab.env

IIABSTATE=$CONFDIR/iiab_state.yml

APT_PATH=/usr/bin/apt # Avoids problematic /usr/local/bin/apt on Linux Mint

REINSTALL=""

INTERACTIVE=0

UPDATE=0

MASTER=1

TEST=jv

IIABTEST=""

MIN_RPI_KERN=1336

SELFUPDATE_SCRIPT="/tmp/.updateScript.sh"

if [ "$1" = "--interactive" ]; then

shift 1

INTERACTIVE=1

if [ "$1" = "--upgrade" ]; then

shift 1

rm $FLAGS/iiab*complete || true

UPDATE=1

if [ "$1" = "--reinstall" ]; then

rm $FLAGS/iiab*complete || true

REINSTALL="--reinstall"

check_kernel(){

}

if [ "$1" = "--kernel-check" ]; then

check_kernel

exit 0

if [ $(id -u) -ne 0 ]; then

echo -e "$SCRIPT must be run as root. Try 'sudo $SCRIPT'\n"

exit 1

check_branch(){

git -C $BASEDIR/iiab branch | grep \* | grep release-7 | wc -l

}

function use_master(){

}

function upgrade_source(){

}

function update_master(){

}

function check_revision(){

}

function update_self() {

}

version_gt() { [ "$(printf '%s\n' "$@" | sort -V | head -1)" != "$1" ]; }

check_user_pwd() {

}

T_Start=`date`

update_self

T_self=`date`

if [ `check_branch` -gt 0 ]; then

if whiptail --yesno "\nFound release-7.X branch would you like (re)install using the latest master?" 20 60 2 3>&1 1>&2 2>&3; then

echo "matched yes for master"

use_master

else

echo "remaning on release-7.X branch updating"

cd $BASEDIR/iiab

MASTER=0

git pull -q

fi

if [ $INTERACTIVE == 1 ]; then

# B. Ask for password change if pi/raspberry default remains

if check_user_pwd "pi" "raspberry"; then

PASSWORD=$(whiptail --passwordbox "

echo pi:$PASSWORD | chpasswd 2>&1 > /dev/null || true # Overrides 'set -e'

fi

# C. Create user 'iiab-admin' as nec, with default password

if ! id -u iiab-admin > /dev/null 2> /dev/null; then

useradd iiab-admin

echo iiab-admin:g0adm1n | chpasswd

fi

if check_user_pwd "iiab-admin" "g0adm1n"; then

# D. Ask for password change if iiab-admin/g0adm1n default remains

PASSWORD2=$(whiptail --passwordbox "

echo iiab-admin:$PASSWORD2 | chpasswd 2>&1 > /dev/null || true # Overrides 'set -e'

fi

if [ $MASTER == 1 ]; then

update_master

check_revision

T_check=`date`

if [ -f $FLAGDIR/iiab-complete ] && [ $UPDATE == 0 ]; then

echo -e "\n\nIIAB INSTALLATION (/usr/sbin/iiab) IS ALREADY COMPLETE -- per existence of:"

echo -e "$FLAGDIR/iiab-complete -- nothing to do.\n"

exit 0

mkdir -p $FLAGDIR

cd $CONFDIR

if [ -f local_vars.yml ]; then

# FUTURE: Test if their local_vars.yml is sufficiently version-compatible !

echo -e "\n\n EXISTING $CONFDIR/local_vars.yml is being used to install Internet-in-a-Box\n"

echo -e " 🚂 🚃 🚄 🚅 🚆 🚇 🚈 🚉 🚊 🚋 🚌 🚍 🚎 🚏 🚐 🚑 🚒 🚚 🚛 🚜 🚞 🚟 🚠 🚡 🚲\n"

echo -e " Google 'local_vars.yml' to learn more!"

echo -e "\n\nInstalling Internet-in-a-Box requires $CONFDIR/local_vars.yml"

echo -e "Do you want (1) 🚵 MIN-sized (2) 🚢🚣 MEDIUM-sized or (3) 🚂🚃🚃 BIG-sized?\n"

echo -e "These take about 1, 2 or 3 hours on an older Raspberry Pi 3 or 3 B+, depending"

echo -e "on Internet speed, CPU speed/temperature and microSD card/disk speed. Please"

echo -e "use a Raspberry Pi 4 or x86_64 to install in about an hour or less !\n"

echo -e 'See "What can I do with E-books and Internet-in-a-Box?" and "What services'

echo -e '(IIAB apps) are suggested during installation?" within http://FAQ.IIAB.IO\n'

echo -n "Please type 1, 2 or 3 then press [ENTER]: "

local_vars_size=""

if [ "$INTERACTIVE" == 1 ]; then

read local_vars_size < /dev/tty

fi

echo

case $local_vars_size in

1)

cp $BASEDIR/iiab/vars/local_vars_min.yml local_vars.yml

;;

3)

cp $BASEDIR/iiab/vars/local_vars_big.yml local_vars.yml

;;

*)

cp $BASEDIR/iiab/vars/local_vars_medium.yml local_vars.yml

;;

esac

echo -en "\nEdit /etc/iiab/local_vars.yml to customize your Internet-in-a-Box? [Y/n] "

ans="n"

if [ $INTERACTIVE == 1 ]; then

read ans < /dev/tty

fi

if [ "$ans" == "y" ] || [ "$ans" == "Y" ]; then

exit 0

fi

echo -e "\n\n ██████████████████████████████████████████████████████████████████████████████████████"

echo -e " ██ ██"

echo -e " ██ RUN 'sudo iiab-upgrade' IF THIS INSTALL SCRIPT EVER FAILS, TO TRY TO CONTINUE! ██"

echo -e " ██ ██"

echo -e " ██████████████████████████████████████████████████████████████████████████████████████"

echo -e "\n"

if [ $INTERACTIVE == 1 ]; then

echo -ne "\nHit [ENTER] to confirm you'll TRY TO RERUN 'sudo iiab' IF THERE IS A PROBLEM: "

read ans < /dev/tty

echo -e "\n\n'apt update' is checking for OS updates...\n"

$APT_PATH -qq update > /tmp/apt.stdout 2> /tmp/apt.stderr || true # Overrides 'set -e'

if [ $(wc -c < /tmp/apt.stderr) -gt 82 ]; then # apt.stderr typically contains exactly 82 characters when there are no errors, no matter the primary locale, i.e. 3-line file "\nWARNING: apt does not have a stable CLI interface. Use with caution in scripts.\n\n" ...OR... in other cases more than 82, e.g. many lines of errors when apt is busy/locked/offline/etc

echo -e "'apt update' FAILED. VERIFY YOU'RE ONLINE and resolve all errors below:\n"

cat /tmp/apt.stderr

exit 1

elif grep -q 'apt list --upgradable' /tmp/apt.stdout; then # apt.stdout typically contains {"All packages are up to date.\n" [even if primary locale is French & Hindi!], "Todos los paquetes están actualizados.\n", "所有软件包均为最新。\n"} ...OR... {"5 packages can be upgraded. Run 'apt list --upgradable' to see them.\n" [even if primary locale is French & Hindi!], "Se puede actualizar 1 paquete. Ejecute «apt list --upgradable» para verlo.\n", "有 1 个软件包可以升级。请执行 ‘apt list --upgradable’ 来查看它们。\n"}

cat /tmp/apt.stdout

if [ "$INTERACTIVE" == 1 ]; then

echo -e "\nYour OS will now be upgraded...this takes time. THEN IT WILL AUTO-REBOOT.\n"

echo -n "Hit [ENTER] to confirm you'll RUN 'sudo iiab' AFTER IT REBOOTS: "

read ans < /dev/tty

echo

$APT_PATH -y dist-upgrade

reboot

exit 0 # Nec to avoid both output lines below (that confuse implementers!)

else

$APT_PATH -y dist-upgrade

fi

cat /tmp/apt.stdout # "All packages are up to date.\n"

T_apt=`date`

if ! [ $(command -v ansible-playbook) ]; then # "command -v" is POSIX compliant; also catches built-in commands like "cd"

echo -e "Install Ansible..."

$BASEDIR/iiab/scripts/ansible

CURR_VER=`ansible --version | head -1 | awk '{print $2}'` # To match iiab-install. Was: CURR_VER=`ansible --version | head -n 1 | cut -f 2 -d " "`

echo -e "\n\nCURRENTLY INSTALLED ANSIBLE: $CURR_VER"

if version_gt $CURR_VER $GOOD_VER || [ $CURR_VER == $GOOD_VER ]; then

echo -e "$CURR_VER is >= $GOOD_VER, skipping install!"

else

echo -e "(Re)Install Ansible..."

$APT_PATH -y remove ansible

$BASEDIR/iiab/scripts/ansible

fi

T_ansible=`date`

if [ $INTERACTIVE == 1 ] && [ -e /dev/mmcblk0p2 ]; then

echo -e "\n\nFound microSD card /dev/mmcblk0p2: Lower its reserve disk space from ~5% to 1%\n"

tune2fs -m 1 /dev/mmcblk0p2

echo -e "\n┌──────────────────────────────────────────────────────────────────────────────┐"

echo -e "│ │"

echo -e "│ NOW UPGRADE IIAB SOFTWARE! If glitches arise (connectivity or otherwise) │"

echo -e "│ │"

echo -e "│ PLEASE TRY TO CONTINUE BY RE-RUNNING SCRIPT 'sudo iiab-upgrade' │"

echo -e "│ │"

echo -e "└──────────────────────────────────────────────────────────────────────────────┘"

cd $BASEDIR/iiab/

if [ $UPDATE == 1 ]; then

echo "upg_path is $upg_path"

echo "OLDREV is $OLDREV"

input="$upg_path/upgrade_roles"

while IFS= read -r REV

do

echo "REV is $REV"

if [ $(echo $REV | awk '{print $1}') -gt $OLDREV ]; then

echo "found REV $REV"

force=$(echo $REV | awk '{print $2}')

if [ "$force" == "calibre-web" ]; then # role directory & installed marker differ

force=calibreweb

elif [ "$force" == "httpd" ]; then # role directory & installed marker differ

force=apache

elif [ "$force" == "osm-vector-maps" ]; then # role directory & installed marker differ

force=osm_vector_maps

fi

echo -e "REV has $force - removing from iiab_state.yml\\n"

sed -i "/^$force/d" $IIABSTATE

fi

done < "$input"

if [ $OLDREV -lt 10 ]; then

./runrole www_base

fi

if [ -f /etc/systemd/system/udev-reload ]; then

systemctl disable udev-reload

fi

./iiab-configure

if ! [ -f upgrade_roles ]; then

echo "manually update $IIABENV with IIAB_REVISION while 2500 is sidelined"

sed -i "s/^IIAB_REVISION=.*/IIAB_REVISION=$NEWREV/" $IIABENV

fi

./iiab-install $REINSTALL

T_iiab=`date`

echo -e "Install Admin Console... (also runs iiab-get-kiwix-cat to d/l Kiwix catalog, and installs Dynamic Menuing for /library/www/html/home/index.html)\n"

if ! grep -q '^admin_console_install:\s\+[fF]alse\b' /etc/iiab/local_vars.yml ; then

if [ ! -f $FLAGDIR/iiab-admin-console-complete ] || [ $UPDATE == 1 ]; then

cd $BASEDIR/iiab-admin-console

./install

touch $FLAGDIR/iiab-admin-console-complete

else

echo -e "ADMIN CONSOLE INSTALLATION IS ALREADY COMPLETE -- per existence of:"

echo -e "$FLAGDIR/iiab-admin-console-complete\n"

fi

if grep -q '^admin_console_enabled: False' /etc/iiab/local_vars.yml ; then

echo -e "'admin_console_enabled: False' is in /etc/iiab/local_vars.yml"

echo -e "...so let's try to DISABLE & STOP Admin Console's iiab-cmdsrv.service"

systemctl disable iiab-cmdsrv

systemctl stop iiab-cmdsrv

fi

echo -e "LET'S NOT TRY TO INSTALL ADMIN CONSOLE -- because:"

echo -e "'admin_console_install: False' is in /etc/iiab/local_vars.yml\n"

T_console=`date`

if [ -d /library/ka-lite ]; then

echo -e "\n\nKA LITE REQUIRES 2 THINGS...\n"

echo -e "Register with KA Lite - just the anonymous registration...\n"

# /usr/bin/kalite venv wrapper invokes 'export KALITE_HOME=/library/ka-lite'

if [ ! -f $FLAGDIR/kalite-zone-complete ]; then

echo -e "Now running 'kalite manage generate_zone' ...\n"

kalite manage generate_zone || true # Overrides 'set -e'

touch $FLAGDIR/kalite-zone-complete

else

echo -e "'kalite manage generate_zone' IS ALREADY COMPLETE -- per existence of:"

echo -e "$FLAGDIR/kalite-zone-complete\n"

fi

echo -e "\nInstall KA Lite's mandatory 0.9 GB English Pack... en.zip\n"

if [ ! -f $FLAGDIR/kalite-en.zip-complete ]; then

#echo -e 'Now retrieving it...\n'

cd /tmp

if [ -f en.zip ]; then

if [ $(wc -c < en.zip) -ne 929916955 ]; then

echo -e "\nERROR: /tmp/en.zip must be 929,916,955 bytes to proceed.\n" >&2

exit 1

else

echo -e "\nUsing existing /tmp/en.zip whose 929,916,955 byte size is correct!\n"

fi

else

wget http://pantry.learningequality.org/downloads/ka-lite/0.17/content/contentpacks/en.zip

fi

echo -e 'Now installing /tmp/en.zip into /library/ka-lite/content/*\n'

kalite manage retrievecontentpack local en en.zip

touch $FLAGDIR/kalite-en.zip-complete

else

echo -e 'kalite zip already done'

fi

T_kalite=`date`

if [ $INTERACTIVE == 1 ] && (systemctl -q is-active transmission-daemon); then

echo -e "\n\nSTARTING BITTORRENT DOWNLOAD(S) for KA Lite...Please Monitor: http://box:9091\n"

transmission-remote -n Admin:changeme -t all --start

touch $FLAGDIR/iiab-complete

echo -e "\n\n ┌───────────────────────────────────────────────────────────┐"

echo -e " │ │"

echo -e " │ INTERNET-IN-A-BOX (IIAB) SOFTWARE INSTALL IS COMPLETE │"

echo -e " │ │"

echo -e " └───────────────────────────────────────────────────────────┘\n"

echo -e "(1A) A couple minutes after you reboot (below) try to connect any laptop to"

echo -e 'Wi-Fi hotspot "Internet in a Box". If this works, verify that you can browse'

echo -e "to http://box or http://box.lan or http://172.18.96.1\n"

echo -e "(1B) IF THOSE 3 DON'T WORK, try http://box.local from any device connected to"

echo -e "your usual network. Or try http://localhost from your IIAB itself!\n"

echo -e "(1C) IF ALL 5 ABOVE DON'T WORK, ask the person who set up the network/router"

echo -e "in your building for the IP address of your IIAB, so you can browse to it"

echo -e "using (something like) http://192.168.0.100\n"

echo -e '(2) ADD CONTENT using http://box.lan/admin (changing "box.lan" to be as above!)'

echo -e 'PLEASE READ "What are the default passwords?" and "How do I customize my'

echo -e 'Internet-in-a-Box home page?" at http://FAQ.IIAB.IO\n'

echo -e "(3) Please run the 'iiab-diagnostics' command, to generate a URL summarizing"

echo -e "your IIAB configuration, for volunteers seeking to help you. We strongly"

echo -e "encourage you to share this URL also when connecting with others in the IIAB"

echo -e "global community, learning from other initiatives in your region and beyond!\n"

if [ -f /etc/rpi-issue ]; then

check_kernel

if [ -f $SELFUPDATE_SCRIPT ]; then

rm $SELFUPDATE_SCRIPT

T_End=`date`

echo "iiab-upgrade run start: $T_Start"

echo "time to self update: $T_self"

echo "time to revision check: $T_check"

echo "time to apt upgrade: $T_apt"

echo "time to ansible: $T_ansible"

echo "time to iiab: $T_iiab"

echo "time to admin-console $T_console"

echo "time to kailte config: $T_kalite"

echo "iiab-upgrade run end: $T_End"

if [ $INTERACTIVE == 1 ]; then

echo -ne "HIT [Y] [Enter] TO REBOOT, [Enter] to exit, CONFIRMING YOU'VE" '"photographed" THE ABOVE PARAGRAPHS: '

ans=n

read ans < /dev/tty

if [ "$ans" == "y" ] || [ "$ans" == "Y" ]; then

reboot

fi

echo -e "Remember to reboot"

exit 0