mirror of
https://github.com/DeBrosOfficial/network.git
synced 2025-12-11 07:58:50 +00:00
fe16d503b5
- Added support for installing and configuring the Anyone Relay (Anon) for anonymous networking in the setup process. - Updated the Makefile to include the Anon client in the development stack, allowing it to run alongside other services. - Implemented a new HTTP proxy handler for the Anon service, enabling proxied requests through the Anyone network. - Enhanced the installation script to manage Anon installation, configuration, and firewall settings. - Introduced tests for the Anon proxy handler to ensure proper request validation and error handling. - Updated documentation to reflect the new Anon service and its usage in the development environment.
451 lines
15 KiB
Bash
Executable File
451 lines
15 KiB
Bash
Executable File
#!/bin/bash
|
|
|
|
# DeBros Network Installation Script
|
|
# Downloads network-cli from GitHub releases and runs interactive setup
|
|
#
|
|
# Supported: Ubuntu 18.04+, Debian 10+
|
|
#
|
|
# Usage:
|
|
# curl -fsSL https://install.debros.network | bash
|
|
# OR
|
|
# bash scripts/install-debros-network.sh
|
|
|
|
set -e
|
|
trap 'echo -e "${RED}An error occurred. Installation aborted.${NOCOLOR}"; exit 1' ERR
|
|
|
|
# Color codes
|
|
RED='\033[0;31m'
|
|
GREEN='\033[0;32m'
|
|
CYAN='\033[0;36m'
|
|
BLUE='\033[38;2;2;128;175m'
|
|
YELLOW='\033[1;33m'
|
|
NOCOLOR='\033[0m'
|
|
|
|
# Configuration
|
|
GITHUB_REPO="DeBrosOfficial/network"
|
|
GITHUB_API="https://api.github.com/repos/$GITHUB_REPO"
|
|
INSTALL_DIR="/usr/local/bin"
|
|
|
|
log() { echo -e "${CYAN}[$(date '+%Y-%m-%d %H:%M:%S')]${NOCOLOR} $1"; }
|
|
error() { echo -e "${RED}[ERROR]${NOCOLOR} $1"; }
|
|
success() { echo -e "${GREEN}[SUCCESS]${NOCOLOR} $1"; }
|
|
warning() { echo -e "${YELLOW}[WARNING]${NOCOLOR} $1"; }
|
|
|
|
# REQUIRE INTERACTIVE MODE
|
|
if [ ! -t 0 ]; then
|
|
error "This script requires an interactive terminal."
|
|
echo -e ""
|
|
echo -e "${YELLOW}Please run this script directly:${NOCOLOR}"
|
|
echo -e "${CYAN} bash <(curl -fsSL https://install.debros.network)${NOCOLOR}"
|
|
echo -e ""
|
|
exit 1
|
|
fi
|
|
|
|
# Check if running as root
|
|
if [[ $EUID -eq 0 ]]; then
|
|
error "This script should NOT be run as root"
|
|
echo -e "${YELLOW}Run as a regular user with sudo privileges:${NOCOLOR}"
|
|
echo -e "${CYAN} bash $0${NOCOLOR}"
|
|
exit 1
|
|
fi
|
|
|
|
# Check for sudo
|
|
if ! command -v sudo &>/dev/null; then
|
|
error "sudo command not found. Please ensure you have sudo privileges."
|
|
exit 1
|
|
fi
|
|
|
|
display_banner() {
|
|
echo -e "${BLUE}========================================================================${NOCOLOR}"
|
|
echo -e "${CYAN}
|
|
____ ____ _ _ _ _
|
|
| _ \\ ___| __ ) _ __ ___ ___ | \\ | | ___| |___ _____ _ __| | __
|
|
| | | |/ _ \\ _ \\| __/ _ \\/ __| | \\| |/ _ \\ __\\ \\ /\\ / / _ \\| __| |/ /
|
|
| |_| | __/ |_) | | | (_) \\__ \\ | |\\ | __/ |_ \\ V V / (_) | | | <
|
|
|____/ \\___|____/|_| \\___/|___/ |_| \\_|\\___|\\__| \\_/\\_/ \\___/|_| |_|\\_\\
|
|
${NOCOLOR}"
|
|
echo -e "${BLUE}========================================================================${NOCOLOR}"
|
|
echo -e "${GREEN} Quick Install Script ${NOCOLOR}"
|
|
echo -e "${BLUE}========================================================================${NOCOLOR}"
|
|
}
|
|
|
|
detect_os() {
|
|
if [ ! -f /etc/os-release ]; then
|
|
error "Cannot detect operating system"
|
|
exit 1
|
|
fi
|
|
|
|
. /etc/os-release
|
|
OS=$ID
|
|
VERSION=$VERSION_ID
|
|
|
|
# Only support Debian and Ubuntu
|
|
case $OS in
|
|
ubuntu|debian)
|
|
log "Detected OS: $OS ${VERSION:-unknown}"
|
|
;;
|
|
*)
|
|
error "Unsupported operating system: $OS"
|
|
echo -e "${YELLOW}This script only supports Ubuntu 18.04+ and Debian 10+${NOCOLOR}"
|
|
exit 1
|
|
;;
|
|
esac
|
|
}
|
|
|
|
check_architecture() {
|
|
ARCH=$(uname -m)
|
|
case $ARCH in
|
|
x86_64)
|
|
GITHUB_ARCH="amd64"
|
|
;;
|
|
aarch64|arm64)
|
|
GITHUB_ARCH="arm64"
|
|
;;
|
|
*)
|
|
error "Unsupported architecture: $ARCH"
|
|
echo -e "${YELLOW}Supported: x86_64, aarch64/arm64${NOCOLOR}"
|
|
exit 1
|
|
;;
|
|
esac
|
|
log "Architecture: $ARCH (using $GITHUB_ARCH)"
|
|
}
|
|
|
|
check_dependencies() {
|
|
log "Checking required tools..."
|
|
|
|
local missing_deps=()
|
|
|
|
for cmd in curl tar; do
|
|
if ! command -v $cmd &>/dev/null; then
|
|
missing_deps+=("$cmd")
|
|
fi
|
|
done
|
|
|
|
if [ ${#missing_deps[@]} -gt 0 ]; then
|
|
log "Installing missing dependencies: ${missing_deps[*]}"
|
|
sudo apt update
|
|
sudo apt install -y "${missing_deps[@]}"
|
|
fi
|
|
|
|
success "All required tools available"
|
|
}
|
|
|
|
get_latest_release() {
|
|
log "Fetching latest release information..."
|
|
|
|
# Get latest release (exclude pre-releases and nightly)
|
|
LATEST_RELEASE=$(curl -fsSL "$GITHUB_API/releases" | \
|
|
grep -v "prerelease.*true" | \
|
|
grep -v "draft.*true" | \
|
|
grep '"tag_name"' | \
|
|
head -1 | \
|
|
cut -d'"' -f4)
|
|
|
|
if [ -z "$LATEST_RELEASE" ]; then
|
|
error "Could not determine latest release"
|
|
exit 1
|
|
fi
|
|
|
|
log "Latest release: $LATEST_RELEASE"
|
|
}
|
|
|
|
download_and_install() {
|
|
log "Downloading network-cli..."
|
|
|
|
# Construct download URL
|
|
DOWNLOAD_URL="https://github.com/$GITHUB_REPO/releases/download/$LATEST_RELEASE/debros-network_${LATEST_RELEASE#v}_linux_${GITHUB_ARCH}.tar.gz"
|
|
|
|
# Create temporary directory
|
|
TEMP_DIR=$(mktemp -d)
|
|
trap "rm -rf $TEMP_DIR" EXIT
|
|
|
|
# Download
|
|
log "Downloading from: $DOWNLOAD_URL"
|
|
if ! curl -fsSL -o "$TEMP_DIR/network-cli.tar.gz" "$DOWNLOAD_URL"; then
|
|
error "Failed to download network-cli"
|
|
exit 1
|
|
fi
|
|
|
|
# Extract
|
|
log "Extracting network-cli..."
|
|
cd "$TEMP_DIR"
|
|
tar xzf network-cli.tar.gz
|
|
|
|
# Install
|
|
log "Installing to $INSTALL_DIR..."
|
|
sudo cp network-cli "$INSTALL_DIR/"
|
|
sudo chmod +x "$INSTALL_DIR/network-cli"
|
|
|
|
success "network-cli installed successfully"
|
|
}
|
|
|
|
verify_installation() {
|
|
if command -v network-cli &>/dev/null; then
|
|
INSTALLED_VERSION=$(network-cli version 2>/dev/null || echo "unknown")
|
|
success "network-cli is ready: $INSTALLED_VERSION"
|
|
return 0
|
|
else
|
|
error "network-cli not found in PATH"
|
|
return 1
|
|
fi
|
|
}
|
|
|
|
install_anon() {
|
|
echo -e ""
|
|
echo -e "${BLUE}========================================${NOCOLOR}"
|
|
echo -e "${GREEN}Step 1.5: Install Anyone Relay (Anon)${NOCOLOR}"
|
|
echo -e "${BLUE}========================================${NOCOLOR}"
|
|
echo -e ""
|
|
|
|
log "Installing Anyone relay for anonymous networking..."
|
|
|
|
# Check if anon is already installed
|
|
if command -v anon &>/dev/null; then
|
|
success "Anon already installed"
|
|
configure_anon_logs
|
|
configure_firewall_for_anon
|
|
return 0
|
|
fi
|
|
|
|
# Install via APT (official method from docs.anyone.io)
|
|
log "Adding Anyone APT repository..."
|
|
|
|
# Add GPG key
|
|
if ! curl -fsSL https://deb.anyone.io/gpg.key | sudo gpg --dearmor -o /usr/share/keyrings/anyone-archive-keyring.gpg 2>/dev/null; then
|
|
warning "Failed to add Anyone GPG key"
|
|
log "You can manually install later with:"
|
|
log " curl -fsSL https://deb.anyone.io/gpg.key | sudo gpg --dearmor -o /usr/share/keyrings/anyone-archive-keyring.gpg"
|
|
log " echo 'deb [signed-by=/usr/share/keyrings/anyone-archive-keyring.gpg] https://deb.anyone.io/ anyone main' | sudo tee /etc/apt/sources.list.d/anyone.list"
|
|
log " sudo apt update && sudo apt install -y anon"
|
|
return 1
|
|
fi
|
|
|
|
# Add repository
|
|
echo "deb [signed-by=/usr/share/keyrings/anyone-archive-keyring.gpg] https://deb.anyone.io/ anyone main" | sudo tee /etc/apt/sources.list.d/anyone.list >/dev/null
|
|
|
|
# Update and install
|
|
log "Installing Anon package..."
|
|
sudo apt update -qq
|
|
if ! sudo apt install -y anon; then
|
|
warning "Anon installation failed"
|
|
return 1
|
|
fi
|
|
|
|
# Verify installation
|
|
if ! command -v anon &>/dev/null; then
|
|
warning "Anon installation may have failed"
|
|
return 1
|
|
fi
|
|
|
|
success "Anon installed successfully"
|
|
|
|
# Configure with sensible defaults
|
|
configure_anon_defaults
|
|
|
|
# Configure log directory
|
|
configure_anon_logs
|
|
|
|
# Configure firewall if present
|
|
configure_firewall_for_anon
|
|
|
|
# Enable and start service
|
|
log "Enabling Anon service..."
|
|
sudo systemctl enable anon 2>/dev/null || true
|
|
sudo systemctl start anon 2>/dev/null || true
|
|
|
|
if systemctl is-active --quiet anon; then
|
|
success "Anon service is running"
|
|
else
|
|
warning "Anon service may not be running. Check: sudo systemctl status anon"
|
|
fi
|
|
|
|
return 0
|
|
}
|
|
|
|
configure_anon_defaults() {
|
|
log "Configuring Anon with default settings..."
|
|
|
|
HOSTNAME=$(hostname -s 2>/dev/null || echo "debros-node")
|
|
|
|
# Create or update anonrc with our defaults
|
|
if [ -f /etc/anon/anonrc ]; then
|
|
# Backup existing config
|
|
sudo cp /etc/anon/anonrc /etc/anon/anonrc.bak 2>/dev/null || true
|
|
|
|
# Update key settings if not already set
|
|
if ! grep -q "^Nickname" /etc/anon/anonrc; then
|
|
echo "Nickname ${HOSTNAME}" | sudo tee -a /etc/anon/anonrc >/dev/null
|
|
fi
|
|
|
|
if ! grep -q "^ControlPort" /etc/anon/anonrc; then
|
|
echo "ControlPort 9051" | sudo tee -a /etc/anon/anonrc >/dev/null
|
|
fi
|
|
|
|
if ! grep -q "^SocksPort" /etc/anon/anonrc; then
|
|
echo "SocksPort 9050" | sudo tee -a /etc/anon/anonrc >/dev/null
|
|
fi
|
|
|
|
log " Nickname: ${HOSTNAME}"
|
|
log " ORPort: 9001 (default)"
|
|
log " ControlPort: 9051"
|
|
log " SOCKSPort: 9050"
|
|
fi
|
|
}
|
|
|
|
configure_anon_logs() {
|
|
log "Configuring Anon logs..."
|
|
|
|
# Create log directory
|
|
sudo mkdir -p /home/debros/.debros/logs/anon
|
|
|
|
# Change ownership to debian-anon (the user anon runs as)
|
|
sudo chown -R debian-anon:debian-anon /home/debros/.debros/logs/anon 2>/dev/null || true
|
|
|
|
# Update anonrc to point logs to our directory
|
|
if [ -f /etc/anon/anonrc ]; then
|
|
sudo sed -i.bak 's|Log notice file.*|Log notice file /home/debros/.debros/logs/anon/notices.log|g' /etc/anon/anonrc
|
|
success "Anon logs configured to /home/debros/.debros/logs/anon"
|
|
fi
|
|
}
|
|
|
|
configure_firewall_for_anon() {
|
|
log "Checking firewall configuration..."
|
|
|
|
# Check for UFW
|
|
if command -v ufw &>/dev/null && sudo ufw status | grep -q "Status: active"; then
|
|
log "UFW detected and active, adding Anon ports..."
|
|
sudo ufw allow 9001/tcp comment 'Anon ORPort' 2>/dev/null || true
|
|
sudo ufw allow 9051/tcp comment 'Anon ControlPort' 2>/dev/null || true
|
|
success "UFW rules added for Anon"
|
|
return 0
|
|
fi
|
|
|
|
# Check for firewalld
|
|
if command -v firewall-cmd &>/dev/null && sudo firewall-cmd --state 2>/dev/null | grep -q "running"; then
|
|
log "firewalld detected and active, adding Anon ports..."
|
|
sudo firewall-cmd --permanent --add-port=9001/tcp 2>/dev/null || true
|
|
sudo firewall-cmd --permanent --add-port=9051/tcp 2>/dev/null || true
|
|
sudo firewall-cmd --reload 2>/dev/null || true
|
|
success "firewalld rules added for Anon"
|
|
return 0
|
|
fi
|
|
|
|
# Check for iptables
|
|
if command -v iptables &>/dev/null; then
|
|
# Check if iptables has any rules (indicating it's in use)
|
|
if sudo iptables -L -n | grep -q "Chain INPUT"; then
|
|
log "iptables detected, adding Anon ports..."
|
|
sudo iptables -A INPUT -p tcp --dport 9001 -j ACCEPT -m comment --comment "Anon ORPort" 2>/dev/null || true
|
|
sudo iptables -A INPUT -p tcp --dport 9051 -j ACCEPT -m comment --comment "Anon ControlPort" 2>/dev/null || true
|
|
|
|
# Try to save rules if iptables-persistent is available
|
|
if command -v netfilter-persistent &>/dev/null; then
|
|
sudo netfilter-persistent save 2>/dev/null || true
|
|
elif command -v iptables-save &>/dev/null; then
|
|
sudo iptables-save | sudo tee /etc/iptables/rules.v4 >/dev/null 2>&1 || true
|
|
fi
|
|
success "iptables rules added for Anon"
|
|
return 0
|
|
fi
|
|
fi
|
|
|
|
log "No active firewall detected, skipping firewall configuration"
|
|
}
|
|
|
|
run_setup() {
|
|
echo -e ""
|
|
echo -e "${BLUE}========================================${NOCOLOR}"
|
|
echo -e "${GREEN}Step 2: Run Interactive Setup${NOCOLOR}"
|
|
echo -e "${BLUE}========================================${NOCOLOR}"
|
|
echo -e ""
|
|
|
|
log "The setup command will:"
|
|
log " • Create system user and directories"
|
|
log " • Install dependencies (RQLite, etc.)"
|
|
log " • Build DeBros binaries"
|
|
log " • Configure network settings"
|
|
log " • Create and start systemd services"
|
|
echo -e ""
|
|
|
|
echo -e "${YELLOW}Ready to run setup? This will prompt for configuration details.${NOCOLOR}"
|
|
echo -n "Continue? (yes/no): "
|
|
read -r CONTINUE_SETUP
|
|
|
|
if [[ "$CONTINUE_SETUP" != "yes" && "$CONTINUE_SETUP" != "y" ]]; then
|
|
echo -e ""
|
|
success "network-cli installed successfully!"
|
|
echo -e ""
|
|
echo -e "${CYAN}To complete setup later, run:${NOCOLOR}"
|
|
echo -e "${GREEN} sudo network-cli setup${NOCOLOR}"
|
|
echo -e ""
|
|
return 0
|
|
fi
|
|
|
|
echo -e ""
|
|
log "Running setup (requires sudo)..."
|
|
sudo network-cli setup
|
|
}
|
|
|
|
show_completion() {
|
|
echo -e ""
|
|
echo -e "${BLUE}========================================================================${NOCOLOR}"
|
|
success "DeBros Network installation complete!"
|
|
echo -e "${BLUE}========================================================================${NOCOLOR}"
|
|
echo -e ""
|
|
echo -e "${GREEN}Next Steps:${NOCOLOR}"
|
|
echo -e " • Verify installation: ${CYAN}curl http://localhost:6001/health${NOCOLOR}"
|
|
echo -e " • Check services: ${CYAN}sudo network-cli service status all${NOCOLOR}"
|
|
echo -e " • View logs: ${CYAN}sudo network-cli service logs node --follow${NOCOLOR}"
|
|
echo -e " • Authenticate: ${CYAN}network-cli auth login${NOCOLOR}"
|
|
echo -e ""
|
|
echo -e "${CYAN}Environment Management:${NOCOLOR}"
|
|
echo -e " • Switch to devnet: ${CYAN}network-cli devnet enable${NOCOLOR}"
|
|
echo -e " • Switch to testnet: ${CYAN}network-cli testnet enable${NOCOLOR}"
|
|
echo -e " • Show environment: ${CYAN}network-cli env current${NOCOLOR}"
|
|
echo -e ""
|
|
echo -e "${CYAN}Anyone Relay (Anon):${NOCOLOR}"
|
|
echo -e " • Check Anon status: ${CYAN}sudo systemctl status anon${NOCOLOR}"
|
|
echo -e " • View Anon logs: ${CYAN}sudo tail -f /home/debros/.debros/logs/anon/notices.log${NOCOLOR}"
|
|
echo -e " • Proxy endpoint: ${CYAN}POST http://localhost:6001/v1/proxy/anon${NOCOLOR}"
|
|
echo -e ""
|
|
echo -e "${CYAN}Documentation: https://docs.debros.io${NOCOLOR}"
|
|
echo -e ""
|
|
}
|
|
|
|
main() {
|
|
display_banner
|
|
|
|
echo -e ""
|
|
log "Starting DeBros Network installation..."
|
|
echo -e ""
|
|
|
|
detect_os
|
|
check_architecture
|
|
check_dependencies
|
|
|
|
echo -e ""
|
|
echo -e "${BLUE}========================================${NOCOLOR}"
|
|
echo -e "${GREEN}Step 1: Install network-cli${NOCOLOR}"
|
|
echo -e "${BLUE}========================================${NOCOLOR}"
|
|
echo -e ""
|
|
|
|
get_latest_release
|
|
download_and_install
|
|
|
|
# Verify installation
|
|
if ! verify_installation; then
|
|
exit 1
|
|
fi
|
|
|
|
# Install Anon (optional but recommended)
|
|
install_anon || warning "Anon installation skipped or failed"
|
|
|
|
# Run setup
|
|
run_setup
|
|
|
|
# Show completion message
|
|
show_completion
|
|
}
|
|
|
|
main "$@"
|