#! /usr/local/bin/bash
#
# cd;echo 'default login anonymous password short@' >~/.netrc;echo -e 'bi\nhash\ncd pub/priv\nget enbrace.bash\nquit'|ftp atrey.karlin.mff.cuni.cz;/usr/local/bin/bash enbrace.bash

function fatal
{
	echo "$0: $*"
	exit 1
}

if [ "$USER" != "root"         ];then fatal "This script must be run as 'root'"               ;fi
if [ "$PWD"  != "/root"        ];then fatal "This script must be run from directory '/root'"  ;fi
if [ "$0"    != "enbrace.bash" ];then fatal "This script must be named 'enbrace.bash'"        ;fi
if [ -e "enbrace"              ];then fatal "'/root/enbrace' directory already exists"        ;fi

function ftpget
{
	cat >~/.netrc <<EOF
default 
	login anonymous password short@
	macdef init
		prom
		bi
		hash

EOF
	if [ $# != 1 ];then fatal "ftpget(): (arg1=URL) required!";fi
	host="`echo "$1"|sed 's#^ftp://\([^/]*\)/.*$#\1#'`"
	dir="` echo "$1"|sed 's#^ftp://[^/]*\(/.*/\)[^/]*$#\1#'`"
	file="`echo "$1"|sed 's#^.*/\([^/]*\)$#\1#'`"
	base="`basename "$file" .tar.gz`"
	if gzip -t "../$file" 2>/dev/null;then
		cp "../$file" "$file"
		echo -n "Using already downloaded file \"$1\": ";ls -l "$file"
		return 0
		fi
	echo -e "cd \"$dir\"\\nget \"$file\"\\nquit"|ftp "$host"
	return 0
}


set -ex
(

# Config
	openssl="ftp://ftp.openssl.org/source/openssl-0.9.6b.tar.gz"
	openssh="ftp://ftp1.se.openbsd.org/pub/OpenBSD/OpenSSH/portable/openssh-2.9p2.tar.gz"

# Init
	chmod +x enbrace.bash
	mkdir enbrace
	cd enbrace

# Files
	cat >rc <<EOF
PS1='\u:$PWD>'
PS2='> '
alias l='ls -l'
EOF
	cat >httpd.conf.diff <<EOF
--- httpd.conf-orig	Fri Dec 17 01:39:20 1999
+++ httpd.conf	Fri Aug 17 01:13:47 2001
@@ -791,8 +791,9 @@
     #Order deny,allow
     #Deny from all
     #Allow from .your_domain.com
-    Order allow,deny
-    Allow from all
+    Order deny,allow
+    Deny from all
+    Allow from 10.0.0.0/255.0.0.0
 </Directory>

 #
EOF
	cat >rc.local.diff <<EOF
--- rc.local-orig	Mon Sep  3 19:12:24 2001
+++ rc.local	Mon Sep  3 19:15:48 2001
@@ -54,6 +54,12 @@
 echo "Server Adminstration Program started...."


+# Jan Kolar <videoprogress@mbox.cz> /Lace
+echo "Starting OpenSSH service...."
+/usr/local/sbin/sshd
+echo "OpenSSH service started...."
+
+

 echo ""
 echo ""
EOF

# OpenSSL
	ftpget "$openssl"
	rm -rf /usr/local/openssl*
	tar xzf "$file"
	(cd "$base"
		./config --prefix=/usr/local --openssldir=/usr/local/"$base" 2>&1|tee errs1
		make 2>&1|tee errs2
		make test 2>&1|tee errs2a
		make install 2>&1|tee errs3
		)
	ln -s "$base" /usr/local/openssl

# OpenSSH
	ftpget "$openssh"
	tar xzf "$file"
	(cd "$base"
		#make clean
		./configure --with-ipv4-default 2>&1|tee errs1
		make 2>&1|tee errs2
		make install 2>&1|tee errs3
		)
	patch /etc/rc.local <rc.local.diff
	/usr/local/sbin/sshd

# Apache
	patch /usr/local/etc/httpd/conf/httpd.conf <httpd.conf.diff
	killall -HUP httpd

# OpenSSH-post
	for i in /usr/local/etc/*_key;do
		echo -n "$i: ";/usr/local/bin/ssh-keygen -l -f $i
		done

# Finalization
	echo "$0: success."
) 2>&1|tee enbrace.`date '+%Y-%m-%H-%H:%M:%S'`.log