Add install-cyberchef.sh
This commit is contained in:
parent
f2ccf1505f
commit
7949daefad
1 changed files with 289 additions and 0 deletions
289
install-cyberchef.sh
Normal file
289
install-cyberchef.sh
Normal file
|
|
@ -0,0 +1,289 @@
|
|||
#!/bin/bash
|
||||
|
||||
# Script to install Docker and CyberChef with verification and redeployment capabilities
|
||||
# Must be run with root privileges
|
||||
|
||||
# Error handling
|
||||
set -e
|
||||
trap 'echo "Error on line $LINENO. Exit code: $?"' ERR
|
||||
|
||||
# Configuration
|
||||
INSTALL_DIR="/docker/cyberchef"
|
||||
COMPOSE_FILE="${INSTALL_DIR}/docker-compose.yml"
|
||||
LOG_FILE="/var/log/cyberchef-install.log"
|
||||
CYBERCHEF_VERSION="latest"
|
||||
CONTAINER_NAME="cyberchef"
|
||||
|
||||
# Utility functions
|
||||
check_port_availability() {
|
||||
local port=$1
|
||||
if lsof -i ":$port" >/dev/null 2>&1; then
|
||||
local process_info=$(lsof -i ":$port" | tail -n 1)
|
||||
local pid=$(echo "$process_info" | awk '{print $2}')
|
||||
local process_name=$(echo "$process_info" | awk '{print $1}')
|
||||
log_message "⚠ Error: Port $port is already in use by process $process_name (PID: $pid)"
|
||||
return 1
|
||||
fi
|
||||
return 0
|
||||
}
|
||||
|
||||
check_required_ports() {
|
||||
local required_ports=(8000)
|
||||
local ports_in_use=()
|
||||
|
||||
for port in "${required_ports[@]}"; do
|
||||
if ! check_port_availability "$port"; then
|
||||
ports_in_use+=($port)
|
||||
fi
|
||||
done
|
||||
|
||||
if [ ${#ports_in_use[@]} -ne 0 ]; then
|
||||
log_message "The following required ports are already in use: ${ports_in_use[*]}"
|
||||
log_message "Please free these ports before proceeding with the installation."
|
||||
log_message "You can either:"
|
||||
log_message "1. Stop the services using these ports"
|
||||
log_message "2. Modify the docker-compose.yml to use different ports"
|
||||
log_message "3. Run 'lsof -i :<port>' to identify which process is using each port"
|
||||
return 1
|
||||
fi
|
||||
|
||||
log_message "✓ All required ports are available"
|
||||
return 0
|
||||
}
|
||||
|
||||
log_message() {
|
||||
local message="[$(date '+%Y-%m-%d %H:%M:%S')] $1"
|
||||
echo "$message"
|
||||
echo "$message" >> "$LOG_FILE"
|
||||
}
|
||||
|
||||
show_container_status() {
|
||||
log_message "Current container status:"
|
||||
echo "----------------------------------------"
|
||||
docker compose ps --format "table {{.Name}}\t{{.Status}}\t{{.Ports}}"
|
||||
echo "----------------------------------------"
|
||||
}
|
||||
|
||||
check_service_status() {
|
||||
local container_name="cyberchef-web-1"
|
||||
|
||||
# Check if container exists and is running
|
||||
if ! docker ps -q -f name="$container_name" >/dev/null 2>&1; then
|
||||
log_message "Container $container_name not found"
|
||||
return 1
|
||||
fi
|
||||
|
||||
local status=$(docker inspect -f '{{.State.Status}}' "$container_name" 2>/dev/null)
|
||||
if [ "$status" != "running" ]; then
|
||||
log_message "Container status is $status, expected running"
|
||||
return 1
|
||||
fi
|
||||
|
||||
# Give the nginx server inside container time to start
|
||||
local max_attempts=30
|
||||
local attempt=1
|
||||
local delay=2
|
||||
|
||||
while [ $attempt -le $max_attempts ]; do
|
||||
if curl -sf http://localhost:8000 >/dev/null 2>&1; then
|
||||
log_message "Web service is responding on port 8000"
|
||||
return 0
|
||||
fi
|
||||
log_message "Waiting for web service to respond (attempt $attempt/$max_attempts)..."
|
||||
sleep $delay
|
||||
attempt=$((attempt + 1))
|
||||
done
|
||||
|
||||
log_message "Web service failed to respond after $max_attempts attempts"
|
||||
return 1
|
||||
}
|
||||
|
||||
verify_installation() {
|
||||
log_message "Verifying CyberChef installation..."
|
||||
|
||||
if ! check_service_status; then
|
||||
log_message "CyberChef service is not running properly"
|
||||
return 1
|
||||
fi
|
||||
|
||||
log_message "CyberChef service is running properly"
|
||||
return 0
|
||||
}
|
||||
|
||||
check_docker_version() {
|
||||
local current_version=$(docker --version | cut -d ' ' -f3 | cut -d ',' -f1)
|
||||
log_message "Current Docker version: $current_version"
|
||||
|
||||
# Check for updates
|
||||
apt-get update >/dev/null 2>&1
|
||||
local available_version=$(apt-cache policy docker-ce | grep Candidate | cut -d ' ' -f4)
|
||||
|
||||
if [ "$current_version" != "$available_version" ]; then
|
||||
log_message "New Docker version available: $available_version"
|
||||
read -p "Do you want to upgrade Docker? (y/N) " -n 1 -r
|
||||
echo
|
||||
if [[ $REPLY =~ ^[Yy]$ ]]; then
|
||||
apt-get install -y docker-ce docker-ce-cli containerd.io
|
||||
fi
|
||||
fi
|
||||
}
|
||||
|
||||
redeploy_service() {
|
||||
log_message "Redeploying CyberChef..."
|
||||
|
||||
cd "$INSTALL_DIR"
|
||||
docker compose down
|
||||
docker compose up -d
|
||||
|
||||
# Wait for service to be healthy
|
||||
local retries=0
|
||||
while ! check_service_status && [ $retries -lt 5 ]; do
|
||||
log_message "Waiting for CyberChef to become healthy..."
|
||||
sleep 10
|
||||
retries=$((retries + 1))
|
||||
done
|
||||
|
||||
if [ $retries -eq 5 ]; then
|
||||
log_message "Failed to redeploy CyberChef after 5 attempts"
|
||||
return 1
|
||||
fi
|
||||
|
||||
log_message "CyberChef redeployed successfully"
|
||||
return 0
|
||||
}
|
||||
|
||||
backup_existing_data() {
|
||||
if [ -d "$INSTALL_DIR" ]; then
|
||||
local backup_dir="${INSTALL_DIR}_backup_$(date +%Y%m%d_%H%M%S)"
|
||||
log_message "Creating backup of existing installation at $backup_dir"
|
||||
cp -r "$INSTALL_DIR" "$backup_dir"
|
||||
fi
|
||||
}
|
||||
|
||||
check_existing_installation() {
|
||||
log_message "Checking existing CyberChef installation..."
|
||||
|
||||
if [ -f "$COMPOSE_FILE" ]; then
|
||||
log_message "Existing installation found"
|
||||
show_container_status
|
||||
|
||||
if verify_installation; then
|
||||
log_message "✓ CyberChef is running correctly"
|
||||
log_message "✓ CyberChef is accessible at http://localhost:8000"
|
||||
return 0
|
||||
else
|
||||
log_message "⚠ Service issues detected. Starting recovery process..."
|
||||
return 1
|
||||
fi
|
||||
fi
|
||||
return 1
|
||||
}
|
||||
|
||||
# Main script execution starts here
|
||||
|
||||
# Check if script is run as root
|
||||
if [ "$EUID" -ne 0 ]; then
|
||||
echo "Please run as root"
|
||||
exit 1
|
||||
fi
|
||||
|
||||
# Initialize log file
|
||||
mkdir -p "$(dirname "$LOG_FILE")"
|
||||
touch "$LOG_FILE"
|
||||
log_message "Starting CyberChef installation/verification script"
|
||||
|
||||
# Check if Docker is installed
|
||||
if ! command -v docker &> /dev/null; then
|
||||
log_message "Docker not found. Installing Docker..."
|
||||
curl -fsSL https://get.docker.com -o get-docker.sh
|
||||
sh get-docker.sh
|
||||
apt-get update
|
||||
apt-get install -y docker-compose-plugin
|
||||
log_message "Docker installed successfully"
|
||||
else
|
||||
log_message "Docker already installed"
|
||||
check_docker_version
|
||||
fi
|
||||
|
||||
# Check existing installation or proceed with new installation
|
||||
if check_existing_installation; then
|
||||
exit 0
|
||||
else
|
||||
if [ -f "$COMPOSE_FILE" ]; then
|
||||
# Attempt to recover existing installation
|
||||
backup_existing_data
|
||||
|
||||
if ! redeploy_service; then
|
||||
log_message "Failed to redeploy CyberChef. Manual intervention may be required."
|
||||
exit 1
|
||||
fi
|
||||
else
|
||||
# New installation
|
||||
log_message "Starting new CyberChef installation"
|
||||
|
||||
# Create installation directory
|
||||
mkdir -p "$INSTALL_DIR"
|
||||
cd "$INSTALL_DIR"
|
||||
|
||||
# Check if required ports are available
|
||||
if ! check_required_ports; then
|
||||
log_message "⚠ Port conflict detected. Please resolve the conflicts and run the script again."
|
||||
exit 1
|
||||
fi
|
||||
|
||||
# Create docker-compose.yml
|
||||
cat > docker-compose.yml <<'EOF'
|
||||
version: "3.8"
|
||||
services:
|
||||
web:
|
||||
image: mpepping/cyberchef:latest
|
||||
container_name: cyberchef-web
|
||||
restart: unless-stopped
|
||||
networks:
|
||||
- cyberchef_network
|
||||
ports:
|
||||
- "8000:8000"
|
||||
healthcheck:
|
||||
test: ["CMD", "curl", "-f", "http://localhost:8000"]
|
||||
interval: 30s
|
||||
timeout: 10s
|
||||
retries: 5
|
||||
environment:
|
||||
- TZ=UTC
|
||||
volumes:
|
||||
- cyberchef_data:/opt/cyberchef
|
||||
|
||||
networks:
|
||||
cyberchef_network:
|
||||
driver: bridge
|
||||
|
||||
volumes:
|
||||
cyberchef_data:
|
||||
name: cyberchef_data
|
||||
EOF
|
||||
|
||||
# Start services
|
||||
log_message "Starting CyberChef service..."
|
||||
docker compose up -d
|
||||
|
||||
# Give service time to initialize
|
||||
log_message "Waiting for service to initialize..."
|
||||
# Initial wait for container to start up
|
||||
sleep 5
|
||||
|
||||
# Verify installation
|
||||
if verify_installation; then
|
||||
log_message "✓ Installation completed successfully!"
|
||||
show_container_status
|
||||
|
||||
log_message "Important next steps:"
|
||||
log_message "1. Set up a reverse proxy in CloudPanel"
|
||||
log_message "2. Create SSL certificate for your domain"
|
||||
log_message "3. Access CyberChef at http://localhost:8000"
|
||||
else
|
||||
log_message "Installation completed but service is not running properly"
|
||||
log_message "Please check the logs and try redeploying the service"
|
||||
exit 1
|
||||
fi
|
||||
fi
|
||||
fi
|
||||
Loading…
Reference in a new issue