From 20559345b02b58c6ad663bc2c94933d8977f24ed Mon Sep 17 00:00:00 2001
From: t3chn0m4g3 <t3chn0m4g3@gmail.com>
Date: Tue, 27 Jun 2023 19:55:46 +0200
Subject: [PATCH] add installer

Instead of individual installers for each distribution there is only one necessary now that we are using Ansible.
---
 install.sh | 113 +++++++++++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 113 insertions(+)
 create mode 100755 install.sh

diff --git a/install.sh b/install.sh
new file mode 100755
index 00000000..7af2ad1b
--- /dev/null
+++ b/install.sh
@@ -0,0 +1,113 @@
+#!/bin/bash
+
+myPACKAGES="ansible wget"
+myINSTALLER=$(cat << "EOF"
+ _____     ____       _      ___           _        _ _
+|_   _|   |  _ \ ___ | |_   |_ _|_ __  ___| |_ __ _| | | ___ _ __
+  | |_____| |_) / _ \| __|   | || '_ \/ __| __/ _` | | |/ _ \ '__|
+  | |_____|  __/ (_) | |_    | || | | \__ \ || (_| | | |  __/ |
+  |_|     |_|   \___/ \__|  |___|_| |_|___/\__\__,_|_|_|\___|_|
+EOF
+)
+
+# Check if running with root privileges
+if [ $EUID -eq 0 ]; 
+  then
+    echo "This script should not be run as root. Please run it as a regular user."
+    exit 1
+fi
+
+# Check if running on a supported distribution
+mySUPPORTED_DISTRIBUTIONS=("Fedora" "Debian" "openSUSE Tumbleweed" "Ubuntu")
+myCURRENT_DISTRIBUTION=$(awk -F= '/^NAME/{print $2}' /etc/os-release | tr -d '"')
+
+if [[ ! " ${mySUPPORTED_DISTRIBUTIONS[@]} " =~ " ${myCURRENT_DISTRIBUTION} " ]];
+  then
+    echo "### Only the following distributions are supported: Fedora, Debian, openSUSE Tumbleweed and Ubuntu."
+    exit 1
+fi
+
+# Begin of Installer
+echo "$myINSTALLER"
+echo
+echo
+echo "### This script will now install T-Pot and all of its dependencies."
+while [ "$myQST" != "y" ] && [ "$myQST" != "n" ];
+  do
+    read -p "### Install? (y/n) " myQST
+  done
+if [ "$myQST" = "n" ];
+  then
+    echo
+    echo "### Aborting!"
+    echo
+    exit 0
+fi
+
+# Install packages based on the distribution
+case $myCURRENT_DISTRIBUTION in
+  "Fedora")
+    sudo dnf update -y
+    sudo dnf install -y ${myPACKAGES}
+    ;;
+  "Debian"|"Ubuntu")
+    if ! command -v sudo >/dev/null; 
+      then
+	echo "### ‘sudo‘ is not installed. To continue you need to provide the ‘root‘ password... "
+	echo "### ... or press CTRL-C to manually install ‘sudo‘ and add your user to the sudoers."
+	su -c "apt -y update && apt -y install sudo ${myPACKAGES}"
+        su -c "/usr/sbin/usermod -aG sudo $(whoami)"
+      else
+        sudo apt update
+        sudo apt install -y ${myPACKAGES}
+    fi
+    ;;
+  "openSUSE Tumbleweed")
+    sudo zypper refresh
+    sudo zypper install -y ${myPACKAGES}
+    echo "export ANSIBLE_PYTHON_INTERPRETER=/bin/python3" | sudo tee -a /etc/profile.d/ansible.sh >/dev/null
+    source /etc/profile.d/ansible.sh
+    ;;
+esac
+echo
+
+# Check if passwordless sudo access is available
+sudo -n true > /dev/null 2>&1
+if [ $? -eq 1 ]; 
+  then
+    myANSIBLE_BECOME_OPTION="--become"
+    echo "### ‘sudo‘ is setup passwordless, setting ansible become option to ${myANSIBLE_BECOME_OPTION}."
+    echo
+  else
+    myANSIBLE_BECOME_OPTION="--ask-become-pass"
+    echo "### ‘sudo‘ is setup with password, setting ansible become option to ${myANSIBLE_BECOME_OPTION}."
+    echo
+fi
+
+# Download tpot.yml if not found locally
+if [ ! -f installer/install/tpot.yml ];
+  then
+    echo "### Now downloading T-Pot Ansible Installation Playbooks... "
+    wget -qO tpot.yml https://github.com/telekom-security/tpotce/raw/dev/installer/install/tpot.yml
+    myANSIBLE_TPOT_PLAYBOOK="tpot.yml"
+    echo
+  else
+    echo "### Using local T-Pot Ansible Installation Playbook ... "
+    myANSIBLE_TPOT_PLAYBOOK="installer/install/tpot.yml"
+fi
+
+# Run Ansible Playbooks
+echo "### Now running T-Pot Ansible Installation Playbooks..."
+echo "### Ansible will ask for the ‘BECOME password‘ which is typically the password you ’sudo’ with."
+echo
+ANSIBLE_LOG_PATH=$PWD/install_tpot.log ansible-playbook ${myANSIBLE_TPOT_PLAYBOOK} -i 127.0.0.1, -c local ${myANSIBLE_BECOME_OPTION}
+
+# Done and show running services
+sudo grc netstat -tulpen
+echo "Please review for possible honeypot port conflicts."
+echo "While SSH is taken care of, other services such as"
+echo "SMTP, HTTP, etc. might prevent T-Pot from starting."
+
+echo "Done. Please reboot and re-connect via SSH on tcp/64295."
+echo
+