pratik/server_init_harden
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat: FreeBSD, Fedora, SUSE, Arch support for "Package installation"

Browse Source 
operation

- List of packages to install maintained inside the method itself
- Debian/Ubuntu: Set timezone to UTC to not let apt blocked for response
This commit is contained in:
Pratik Tripathy
2025-09-08 17:07:48 +05:30
parent 8fbed3d811
commit 784dcfefcb
1 changed files with 37 additions and 34 deletions
Download Patch File Download Diff File Expand all files Collapse all files

71
init-linux-harden.sh
View File

@@ -530,54 +530,57 @@ harden_ssh_config() {
fi fi
} }
install_package() { install_packages() {
if [ $# -eq 0 ]; then console_log "INFO" "Installing required applications..."
file_log "ERROR" "No package specified for installation" file_log "INFO" "Installing required applications..."
return 1
fi
PACKAGE_NAME="$1" LINUX_ONLY_PACKAGES="firewalld"
COMMON_PACKAGES="curl sudo sshguard"
# Detect the package manager and OS # Detect the package manager and OS
if [ -f /etc/debian_version ] || [ -f /etc/ubuntu_version ]; then if [ -f /etc/debian_version ] || [ -f /etc/ubuntu_version ]; then # Debian/Ubuntu
# Debian/Ubuntu # Don't let timezone setting stop installation: make UTC server's timezone
file_log "INFO" "Installing $PACKAGE_NAME using apt..." ln -fs /usr/share/zoneinfo/UTC /etc/localtime >/dev/null
# Don't let timezone setting stop the installation: make UTC the system timezone console_log "WARNING" "Server's timezone set to UTC to avoid installation interruption."
ln -fs /usr/share/zoneinfo/UTC /etc/localtime file_log "WARNING" "Server's timezone set to UTC to avoid installation interruption. Change this after the script completes."
file_log "WARNING" "Set UTC as system timezone. Change this after the script completes." file_log "INFO" "Installing $COMMON_PACKAGES $LINUX_ONLY_PACKAGES using apt..."
# shellcheck disable=SC2086 # shellcheck disable=SC2086
output=$(DEBIAN_FRONTEND=noninteractive apt-get update -y && apt-get install -y --no-install-recommends $PACKAGE_NAME 2>&1) output=$(DEBIAN_FRONTEND=noninteractive apt-get update -y && apt-get install -y --no-install-recommends $COMMON_PACKAGES $LINUX_ONLY_PACKAGES 2>&1)
ret=$? command_status=$?
elif [ -f /etc/fedora-release ]; then elif [ -f /etc/fedora-release ]; then # Fedora
# Fedora file_log "INFO" "Installing $COMMON_PACKAGES $LINUX_ONLY_PACKAGES using dnf..."
file_log "INFO" "Installing $PACKAGE_NAME using dnf..."
# shellcheck disable=SC2086 # shellcheck disable=SC2086
output=$(dnf makecache && dnf install -y $PACKAGE_NAME 2>&1) output=$(dnf makecache >/dev/null 2>&1 && dnf install -y $COMMON_PACKAGES $LINUX_ONLY_PACKAGES 2>&1)
ret=$? command_status=$?
elif [ -f /etc/freebsd-update.conf ]; then elif [ -f /etc/SuSE-release ] || [ -f /etc/SUSE-brand ] || command -v zypper >/dev/null 2>&1; then # SUSE
# FreeBSD file_log "INFO" "Installing $COMMON_PACKAGES $LINUX_ONLY_PACKAGES using zypper..."
file_log "INFO" "Installing $PACKAGE_NAME using pkg..."
# shellcheck disable=SC2086 # shellcheck disable=SC2086
output=$(pkg update && pkg install -y $PACKAGE_NAME 2>&1) output=$(zypper refresh >/dev/null 2>&1 && zypper install -y $COMMON_PACKAGES $LINUX_ONLY_PACKAGES 2>&1)
ret=$? command_status=$?
elif [ -f /etc/arch-release ] || command -v pacman >/dev/null 2>&1; then # Arch Linux
file_log "INFO" "Installing $COMMON_PACKAGES $LINUX_ONLY_PACKAGES using pacman..."
# shellcheck disable=SC2086
output=$(pacman -Sy >/dev/null 2>&1 && pacman -S --noconfirm $COMMON_PACKAGES $LINUX_ONLY_PACKAGES 2>&1)
command_status=$?
elif [ -f /etc/freebsd-update.conf ]; then # FreeBSD
file_log "INFO" "Installing $COMMON_PACKAGES using pkg..."
# shellcheck disable=SC2086
output=$(pkg update && pkg install -y $COMMON_PACKAGES 2>&1)
command_status=$?
else else
file_log "ERROR" "Unsupported operating system" file_log "ERROR" "Unsupported operating system"
return 1 return 1
fi fi
# Log the output if any file_log "INFO" "Applications installation output: $output"
if [ -n "$output" ]; then
file_log "INFO" "Package installation output: $output"
fi
# Handle the return status if [ $command_status -ne 0 ]; then
if [ $ret -ne 0 ]; then console_log "SUCCESS" "Installed all required applications"
file_log "ERROR" "Failed to install package: $PACKAGE_NAME" file_log "ERROR" "Failed to install applications"
return 1 return 1
else
file_log "SUCCESS" "Installed applications"
fi fi
file_log "SUCCESS" "Successfully installed package: $PACKAGE_NAME"
return 0
} }
configure_ufw() { configure_ufw() {