mirror of
https://github.com/telekom-security/tpotce.git
synced 2025-05-04 22:28:52 +00:00
2c4eaf0794
- deprecate old release - set virtual version - we need tpot user / group, adding to installer - tweaking - do not use the dev branch, it will break stuff
78 lines
2.2 KiB
Bash
Executable file
78 lines
2.2 KiB
Bash
Executable file
#!/bin/bash
|
|
|
|
# Needs to run as non-root
|
|
myWHOAMI=$(whoami)
|
|
if [ "$myWHOAMI" == "root" ]
|
|
then
|
|
echo "Need to run as user ..."
|
|
exit
|
|
fi
|
|
|
|
# Check if running on Fedora
|
|
if ! grep -q 'ID=fedora' /etc/os-release; then
|
|
echo "This script is designed to run on Fedora. Aborting."
|
|
exit 1
|
|
fi
|
|
|
|
if [ ! -f /var/log/fedora-install-lock ]; then
|
|
echo "Error: The installer has not been run on this system. Aborting uninstallation."
|
|
exit 1
|
|
fi
|
|
|
|
# Remove SSH config changes
|
|
echo "Removing SSH config changes..."
|
|
sudo sed -i '/Port 64295/d' /etc/ssh/sshd_config
|
|
|
|
# Remove DNS config changes
|
|
echo "Updating DNS config..."
|
|
sudo bash -c "sed -i 's/^.*DNSStubListener=.*/#DNSStubListener=yes/' /etc/systemd/resolved.conf"
|
|
sudo systemctl restart systemd-resolved.service
|
|
|
|
# Restore SELinux config
|
|
echo "Restoring SELinux config..."
|
|
sudo sed -i s/SELINUX=permissive/SELINUX=enforcing/g /etc/selinux/config
|
|
|
|
# Remove Firewall rules
|
|
echo "Removing Firewall rules..."
|
|
sudo firewall-cmd --permanent --remove-port=64295/tcp
|
|
sudo firewall-cmd --permanent --zone=public --set-target=default
|
|
#sudo firewall-cmd --reload
|
|
sudo firewall-cmd --list-all
|
|
|
|
# Unload kernel modules
|
|
echo "Unloading kernel modules..."
|
|
sudo modprobe -rv iptable_filter
|
|
sudo rm /etc/modules-load.d/iptables.conf
|
|
|
|
# Uninstall Docker
|
|
echo "Stopping and removing all containers ..."
|
|
docker stop $(docker ps -aq)
|
|
docker rm $(docker ps -aq)
|
|
echo "Uninstalling Docker..."
|
|
sudo systemctl stop docker
|
|
sudo systemctl disable docker
|
|
sudo dnf -y remove docker-ce docker-ce-cli containerd.io docker-buildx-plugin docker-compose-plugin
|
|
sudo dnf config-manager --disable docker-ce-stable
|
|
sudo rm /etc/yum.repos.d/docker-ce.repo
|
|
|
|
# Remove user from Docker, T-Pot group
|
|
echo "Removing $(whoami) from T-Pot group..."
|
|
sudo gpasswd -d $(whoami) tpot
|
|
echo "Removing $(whoami) from Docker group..."
|
|
sudo gpasswd -d $(whoami) docker
|
|
# Remove T-Pot user and group
|
|
echo "Removing T-Pot user..."
|
|
sudo userdel tpot
|
|
echo "Removing T-Pot group..."
|
|
sudo groupdel tpot
|
|
|
|
# Remove aliases
|
|
echo "Removing aliases..."
|
|
sed -i '/alias dps=/d' ~/.bashrc
|
|
sed -i '/alias dpsw=/d' ~/.bashrc
|
|
|
|
# Remove installer lock file
|
|
sudo rm /var/log/fedora-install-lock
|
|
|
|
echo "Done. Please reboot and re-connect via SSH on tcp/22"
|
|
|