#!/bin/bash
#
# LiHAS Grundinstallation Server Debian 9 Stretch
ln -sf bash /bin/sh

# sources.list bauen
>/etc/apt/sources.list
echo '#deb http://httpredir.debian.org/debian/ buster main contrib non-free' >/etc/apt/sources.list.d/buster.list
echo '#deb http://httpredir.debian.org/debian stretch-proposed-updates main contrib non-free' >/etc/apt/sources.list.d/stretch-proposed-updates.list
echo '#deb http://httpredir.debian.org/debian sid main contrib non-free' >/etc/apt/sources.list.d/sid.list
echo '#deb http://httpredir.debian.org/debian experimental main contrib non-free' >/etc/apt/sources.list.d/experimental.list
echo 'deb http://ftp.lihas.de/debian/ stretch main' >/etc/apt/sources.list.d/lihas.list
echo '#deb http://httpredir.debian.org/debian/ stretch-backports main contrib non-free' >/etc/apt/sources.list.d/stretch-backports.list
echo 'deb http://httpredir.debian.org/debian stretch main contrib non-free' >/etc/apt/sources.list.d/stretch.list
echo 'deb http://httpredir.debian.org/debian-security stretch/updates main contrib non-free' >/etc/apt/sources.list.d/stretch-security.list
echo 'deb http://httpredir.debian.org/debian stretch-updates main contrib non-free' >/etc/apt/sources.list.d/stretch-updates.list

#Passende Preferences bauen
cat << EOF > /etc/apt/preferences
Package:  *
Pin:  release a=stretch-backports
Pin-Priority:  200

Package:  *
Pin:  release n=stretch-proposed-updates
Pin-Priority:  500

Package:  *
Pin:  release n=stretch-updates
Pin-Priority:  500

Package:  *
Pin:  release n=sid
Pin-Priority:  99

Package:  *
Pin:  release n=buster
Pin-Priority:  100

Package:  *
Pin:  release n=stretch
Pin-Priority:  500

Package:  *
Pin:  release a=experimental
Pin-Priority:  9
EOF

wget -O - http://ftp.lihas.de/debian/apt-key-lihas.gpg | apt-key add -

echo "APT::Cache-Limit 267772160;" > /etc/apt/apt.conf.d/08limit

wget -O - http://ftp.lihas.de/debian/apt-key-lihas.gpg | apt-key add -

apt-get -y update
apt-get -y install debsums debconf debconf-utils debian-goodies dselect apt-dater-host
# lihas-keyring
apt-get -y install lihas-keyring
# damit Key greift
apt-get -y update

# Debconf-Parameter setzten
echo dash dash/sh select        false | debconf-set-selections
echo debconf    debconf/frontend    select    Dialog | debconf-set-selections
echo debconf    debconf/priority    select    medium | debconf-set-selections
echo tzdata  tzdata/Zones/SystemV    select | debconf-set-selections
echo ca-certificates ca-certificates/trust_new_crts  select  yes | debconf-set-selections
echo man-db  man-db/install-setuid   boolean false | debconf-set-selections
echo irqbalance      irqbalance/oneshot      boolean true | debconf-set-selections
echo console-setup   console-setup/store_defaults_in_debconf_db      boolean true | debconf-set-selections

echo tzdata    tzdata/Areas    select    Europe | debconf-set-selections
echo tzdata    tzdata/Zones/Europe    select    Berlin | debconf-set-selections
echo locales locales/default_environment_locale      select  de_DE.UTF-8 | debconf-set-selections
echo d-i     keyboard-configuration/model    select  Generische PC-Tastatur mit 105 Tasten \(Intl\) | debconf-set-selections
echo keyboard-configuration  keyboard-configuration/model    select  Generische PC-Tastatur mit 105 Tasten \(Intl\) | debconf-set-selections
echo nullmailer      nullmailer/relayhost    string  mail | debconf-set-selections
echo nullmailer    nullmailer/adminaddr    string    root | debconf-set-selections

echo locales locales/locales_to_be_generated multiselect     de_DE ISO-8859-1, de_DE.UTF-8 UTF-8, de_DE@euro ISO-8859-15, en_US ISO-8859-1, en_US.ISO-8859-15 ISO-8859-15, en_US.UTF-8 UTF-8| debconf-set-selections
echo console-data    console-data/keymap/qwertz/swiss/german/keymap  select |debconf-set-selections
echo console-data    console-data/keymap/qwertz/german/standard/keymap    select    Programmer | debconf-set-selections
echo console-data    console-data/keymap/qwertz/german/variant    select    Standard | debconf-set-selections
echo console-setup    console-setup/codesetcode    string    Lat15 | debconf-set-selections
echo console-common    console-data/keymap/family    select    qwertz | debconf-set-selections
echo libpaper1    libpaper/defaultpaper    select    a4 | debconf-set-selections

apt-get update
apt-get -y install sysvinit-core
# zusaetzlich zu tzdata
echo "Europe/Berlin" > /etc/timezone


# zusaetzlich zu locales
update-locale

# Basis-Pakete installieren
# nullmailer vorrangig installieren, damit z.B. nicht exim nachgezogen wird.
apt-get -y install nullmailer s-nail bsd-mailx 
apt-get -y install mdadm lvm2 
apt-get -y install pciutils ethtool 
apt-get -y install dialog locales less vim vo screen tzdata ssh psmisc rsyslog ncurses-term bash-completion rsync file logrotate etckeeper needrestart

# allow root login using password
sed -i '/^PermitRootLogin/c \PermitRootLogin yes' /etc/ssh/sshd_config
/etc/init.d/ssh restart

# vim config
# - place cursor where file was last edited
[ ! -f /etc/vim/vimrc.local ] && cat << EOF > /etc/vim/vimrc.local
syntax on
colors elflord
if has("autocmd")
  au BufReadPost * if line("'\"") > 1 && line("'\"") <= line("$") | exe "normal! g'\"" | endif
endif
EOF


grep -q /etc/bash_completion /root/.bashrc || echo . /etc/bash_completion >> /root/.bashrc
#apt-get -y install modconf

# ntp, ntp-simple gibt es nicht mehr(lenny)
apt-get -y install ntp ntpdate

# Zum Schluss nano weg und dist-upgrade
#apt-get -y purge nano resolvconf
#siehe lihas/documentation/resolvconf
apt-get -y purge nano
apt-get -y dist-upgrade

# vim zum default-Editor machen
update-alternatives --set editor /usr/bin/vim.basic

# git silencen
( 
        if dpkg -l etckeeper > /dev/null ; then 
                cd /etc
                git config --global user.name root
                git config --global user.email support@lihas.de
                git commit --amend --reset-author -m "things done"
        fi 
)
# clean up packet cache
apt-get clean


X=`grep -n ^[^#]*allow-hotplug /etc/network/interfaces | sed 's/^/        /g'`
[ -n "$X" ] && cat << EOF

    **********************************************************
    please remove "allow-hotplug" from /etc/network/interfaces
$X
    use "auto" instead
    **********************************************************

EOF

cat << EOF >/root/.screenrc
hardstatus alwayslastline "%w"
defscrollback 10000
EOF

mkdir -p /root/.ssh

cat << EOF >/root/.ssh/authorized_keys
ssh-rsa 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 are@lihas.de/2017
ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC9ZxrBgZA8Bw+9wzZVyihD5Lq4uLjIk/bKHtp2rNSyNCQ/B+AJJ64mqWZXUayMIWlhoW1sNjyeC+7qm4H7XwwmBbwIon46UqwQCbU2wCe4ZCGba8YkADMQfZB5jDM9fPCZlbsZrne/XCeDJcTkSkTSnfveEAlQ5Ig1H3zCL+1zvwp500wfCUXipMD+9lak10t3apdksDyKno4Klxq2ETaAChTLxQcAfcb6U6BCncQF11upZ0mDm0/wP5k+4wamUdmhFA0WnK0C8JF08XM+cG20SHszvt3nAiAA3WpJnA/cmL8bTrEZUDiRYKvvhv+M1J4YezKzQfm5/t/HYvf4CSux jgr@lihas.de
ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA0b0hckiy71cCccM4L0ElbUagbtcZkXPtPS4C1APVS7w4NwVFlccjUqjUzM+dGtZVrz92iJnl42bJe1CAyDWhaktJo5h/QsaqXSObq941rLiFOoS4/fcU+p1RwVSauW0H3obYsqnSH6oXKwMAqWXyH1vH2mbU9DpnNjnM+NVLVsF1khz7UojokUP5YRtDwlsTQRCh+BXPdKeGxYISrdPKK8l091GXvIYwKls0TonlQlu/ldFSs690DV/0t++y9eEzTs2pw0IdYMnoDxMrIulLXeb86tzui08dLQqtn8dsFN98n4D8ADmZz1kuVCxP2ZbmYGP7wO9D6E4c2jlq9LksIQ== rbe@lihas.de
ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDXBLWS5jKu0L+bqRPZ8le74xPjn/81Zy23+bd5z3tT87uL53ojtIyOakoS5ZzeTs2aIF+e/7VSLezWS5sT7N3/laNFgbykQKeyPcWOdc0ZCpHxBCTqm266T1cXVorMlycxQZoYkfPZjR4t+K0YFQeuwTbzu/JM4pJr2Rwce7CcE3TJoL+qvu6CQgg627fN51chNz2h8xq6Ylo35r46YSxoqQLpxLKlaAn/ytAMQvqNpjYGUUZDWYBVmB0oY2gxt77jKmKmk0RVpcQPmBM109vEyXBYRS8gcJYGCg+u6ejc5Z7ohK1x4504AKn9ViLNtW8CGjHVNg1oClslkw5BaOaV ubu@lihas.de
ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDHUZlKHY1mHpm70dEzrkf5yFTPYo2p9X7uHHoal7QaoDioPvXKmLzDhtRz7r+cfxrBrAokk0Ub4TRFaS2+tgwHgpTu7ESC7vV2u3vCBFqr90vmy1ZTr9IoXZpjJjxEvkMwxEJqmJcFoWTZi/+Bnfrh3qT6oV1Yv1BAxOYeAlWYjiCfW3T+0EJ/sdKcXduQJDoe7Z/jsif8eLAxZZuiHV57uLVHBDt1RLSQJvr+RWWn82LnPcvaq2AhBgp1B371vR0XhnK4cWEKp6QbMnl2ikemzngp/OtZbvD3JcXBjfMq2iaBFMdY1VRC6pHJ6RtjwkcQ564gAFpJVLWQb6RxZYPT jgr@laptop01.lihas.de
EOF

# cciss ueberwachen
#apt-get -y install cciss-vol-status
# ipmi
#apt-get -y install ipmitool

# heartbeat

apt-get autoremove
#debconf
dpkg-reconfigure -f noninteractive libpaper1
dpkg-reconfigure -f noninteractive ca-certificates
dpkg-reconfigure -f noninteractive man-db
dpkg-reconfigure -f noninteractive irqbalance
dpkg-reconfigure -f noninteractive console-setup
dpkg-reconfigure -f noninteractive console-data
dpkg-reconfigure -f noninteractive console-common
dpkg-reconfigure -f noninteractive keyboard-configuration
dpkg-reconfigure -f noninteractive d-i
dpkg-reconfigure -f noninteractive nullmailer
dpkg-reconfigure -f noninteractive debconf
dpkg-reconfigure -f noninteractive tzdata
dpkg-reconfigure -f noninteractive locales