289 lines
No EOL
8.4 KiB
Bash
289 lines
No EOL
8.4 KiB
Bash
#!/bin/bash
|
|
|
|
# Script to install Docker and CyberChef with verification and redeployment capabilities
|
|
# Must be run with root privileges
|
|
|
|
# Error handling
|
|
set -e
|
|
trap 'echo "Error on line $LINENO. Exit code: $?"' ERR
|
|
|
|
# Configuration
|
|
INSTALL_DIR="/docker/cyberchef"
|
|
COMPOSE_FILE="${INSTALL_DIR}/docker-compose.yml"
|
|
LOG_FILE="/var/log/cyberchef-install.log"
|
|
CYBERCHEF_VERSION="latest"
|
|
CONTAINER_NAME="cyberchef"
|
|
|
|
# Utility functions
|
|
check_port_availability() {
|
|
local port=$1
|
|
if lsof -i ":$port" >/dev/null 2>&1; then
|
|
local process_info=$(lsof -i ":$port" | tail -n 1)
|
|
local pid=$(echo "$process_info" | awk '{print $2}')
|
|
local process_name=$(echo "$process_info" | awk '{print $1}')
|
|
log_message "⚠ Error: Port $port is already in use by process $process_name (PID: $pid)"
|
|
return 1
|
|
fi
|
|
return 0
|
|
}
|
|
|
|
check_required_ports() {
|
|
local required_ports=(8000)
|
|
local ports_in_use=()
|
|
|
|
for port in "${required_ports[@]}"; do
|
|
if ! check_port_availability "$port"; then
|
|
ports_in_use+=($port)
|
|
fi
|
|
done
|
|
|
|
if [ ${#ports_in_use[@]} -ne 0 ]; then
|
|
log_message "The following required ports are already in use: ${ports_in_use[*]}"
|
|
log_message "Please free these ports before proceeding with the installation."
|
|
log_message "You can either:"
|
|
log_message "1. Stop the services using these ports"
|
|
log_message "2. Modify the docker-compose.yml to use different ports"
|
|
log_message "3. Run 'lsof -i :<port>' to identify which process is using each port"
|
|
return 1
|
|
fi
|
|
|
|
log_message "✓ All required ports are available"
|
|
return 0
|
|
}
|
|
|
|
log_message() {
|
|
local message="[$(date '+%Y-%m-%d %H:%M:%S')] $1"
|
|
echo "$message"
|
|
echo "$message" >> "$LOG_FILE"
|
|
}
|
|
|
|
show_container_status() {
|
|
log_message "Current container status:"
|
|
echo "----------------------------------------"
|
|
docker compose ps --format "table {{.Name}}\t{{.Status}}\t{{.Ports}}"
|
|
echo "----------------------------------------"
|
|
}
|
|
|
|
check_service_status() {
|
|
local container_name="cyberchef-web-1"
|
|
|
|
# Check if container exists and is running
|
|
if ! docker ps -q -f name="$container_name" >/dev/null 2>&1; then
|
|
log_message "Container $container_name not found"
|
|
return 1
|
|
fi
|
|
|
|
local status=$(docker inspect -f '{{.State.Status}}' "$container_name" 2>/dev/null)
|
|
if [ "$status" != "running" ]; then
|
|
log_message "Container status is $status, expected running"
|
|
return 1
|
|
fi
|
|
|
|
# Give the nginx server inside container time to start
|
|
local max_attempts=30
|
|
local attempt=1
|
|
local delay=2
|
|
|
|
while [ $attempt -le $max_attempts ]; do
|
|
if curl -sf http://localhost:8000 >/dev/null 2>&1; then
|
|
log_message "Web service is responding on port 8000"
|
|
return 0
|
|
fi
|
|
log_message "Waiting for web service to respond (attempt $attempt/$max_attempts)..."
|
|
sleep $delay
|
|
attempt=$((attempt + 1))
|
|
done
|
|
|
|
log_message "Web service failed to respond after $max_attempts attempts"
|
|
return 1
|
|
}
|
|
|
|
verify_installation() {
|
|
log_message "Verifying CyberChef installation..."
|
|
|
|
if ! check_service_status; then
|
|
log_message "CyberChef service is not running properly"
|
|
return 1
|
|
fi
|
|
|
|
log_message "CyberChef service is running properly"
|
|
return 0
|
|
}
|
|
|
|
check_docker_version() {
|
|
local current_version=$(docker --version | cut -d ' ' -f3 | cut -d ',' -f1)
|
|
log_message "Current Docker version: $current_version"
|
|
|
|
# Check for updates
|
|
apt-get update >/dev/null 2>&1
|
|
local available_version=$(apt-cache policy docker-ce | grep Candidate | cut -d ' ' -f4)
|
|
|
|
if [ "$current_version" != "$available_version" ]; then
|
|
log_message "New Docker version available: $available_version"
|
|
read -p "Do you want to upgrade Docker? (y/N) " -n 1 -r
|
|
echo
|
|
if [[ $REPLY =~ ^[Yy]$ ]]; then
|
|
apt-get install -y docker-ce docker-ce-cli containerd.io
|
|
fi
|
|
fi
|
|
}
|
|
|
|
redeploy_service() {
|
|
log_message "Redeploying CyberChef..."
|
|
|
|
cd "$INSTALL_DIR"
|
|
docker compose down
|
|
docker compose up -d
|
|
|
|
# Wait for service to be healthy
|
|
local retries=0
|
|
while ! check_service_status && [ $retries -lt 5 ]; do
|
|
log_message "Waiting for CyberChef to become healthy..."
|
|
sleep 10
|
|
retries=$((retries + 1))
|
|
done
|
|
|
|
if [ $retries -eq 5 ]; then
|
|
log_message "Failed to redeploy CyberChef after 5 attempts"
|
|
return 1
|
|
fi
|
|
|
|
log_message "CyberChef redeployed successfully"
|
|
return 0
|
|
}
|
|
|
|
backup_existing_data() {
|
|
if [ -d "$INSTALL_DIR" ]; then
|
|
local backup_dir="${INSTALL_DIR}_backup_$(date +%Y%m%d_%H%M%S)"
|
|
log_message "Creating backup of existing installation at $backup_dir"
|
|
cp -r "$INSTALL_DIR" "$backup_dir"
|
|
fi
|
|
}
|
|
|
|
check_existing_installation() {
|
|
log_message "Checking existing CyberChef installation..."
|
|
|
|
if [ -f "$COMPOSE_FILE" ]; then
|
|
log_message "Existing installation found"
|
|
show_container_status
|
|
|
|
if verify_installation; then
|
|
log_message "✓ CyberChef is running correctly"
|
|
log_message "✓ CyberChef is accessible at http://localhost:8000"
|
|
return 0
|
|
else
|
|
log_message "⚠ Service issues detected. Starting recovery process..."
|
|
return 1
|
|
fi
|
|
fi
|
|
return 1
|
|
}
|
|
|
|
# Main script execution starts here
|
|
|
|
# Check if script is run as root
|
|
if [ "$EUID" -ne 0 ]; then
|
|
echo "Please run as root"
|
|
exit 1
|
|
fi
|
|
|
|
# Initialize log file
|
|
mkdir -p "$(dirname "$LOG_FILE")"
|
|
touch "$LOG_FILE"
|
|
log_message "Starting CyberChef installation/verification script"
|
|
|
|
# Check if Docker is installed
|
|
if ! command -v docker &> /dev/null; then
|
|
log_message "Docker not found. Installing Docker..."
|
|
curl -fsSL https://get.docker.com -o get-docker.sh
|
|
sh get-docker.sh
|
|
apt-get update
|
|
apt-get install -y docker-compose-plugin
|
|
log_message "Docker installed successfully"
|
|
else
|
|
log_message "Docker already installed"
|
|
check_docker_version
|
|
fi
|
|
|
|
# Check existing installation or proceed with new installation
|
|
if check_existing_installation; then
|
|
exit 0
|
|
else
|
|
if [ -f "$COMPOSE_FILE" ]; then
|
|
# Attempt to recover existing installation
|
|
backup_existing_data
|
|
|
|
if ! redeploy_service; then
|
|
log_message "Failed to redeploy CyberChef. Manual intervention may be required."
|
|
exit 1
|
|
fi
|
|
else
|
|
# New installation
|
|
log_message "Starting new CyberChef installation"
|
|
|
|
# Create installation directory
|
|
mkdir -p "$INSTALL_DIR"
|
|
cd "$INSTALL_DIR"
|
|
|
|
# Check if required ports are available
|
|
if ! check_required_ports; then
|
|
log_message "⚠ Port conflict detected. Please resolve the conflicts and run the script again."
|
|
exit 1
|
|
fi
|
|
|
|
# Create docker-compose.yml
|
|
cat > docker-compose.yml <<'EOF'
|
|
version: "3.8"
|
|
services:
|
|
web:
|
|
image: mpepping/cyberchef:latest
|
|
container_name: cyberchef-web
|
|
restart: unless-stopped
|
|
networks:
|
|
- cyberchef_network
|
|
ports:
|
|
- "8000:8000"
|
|
healthcheck:
|
|
test: ["CMD", "curl", "-f", "http://localhost:8000"]
|
|
interval: 30s
|
|
timeout: 10s
|
|
retries: 5
|
|
environment:
|
|
- TZ=UTC
|
|
volumes:
|
|
- cyberchef_data:/opt/cyberchef
|
|
|
|
networks:
|
|
cyberchef_network:
|
|
driver: bridge
|
|
|
|
volumes:
|
|
cyberchef_data:
|
|
name: cyberchef_data
|
|
EOF
|
|
|
|
# Start services
|
|
log_message "Starting CyberChef service..."
|
|
docker compose up -d
|
|
|
|
# Give service time to initialize
|
|
log_message "Waiting for service to initialize..."
|
|
# Initial wait for container to start up
|
|
sleep 5
|
|
|
|
# Verify installation
|
|
if verify_installation; then
|
|
log_message "✓ Installation completed successfully!"
|
|
show_container_status
|
|
|
|
log_message "Important next steps:"
|
|
log_message "1. Set up a reverse proxy in CloudPanel"
|
|
log_message "2. Create SSL certificate for your domain"
|
|
log_message "3. Access CyberChef at http://localhost:8000"
|
|
else
|
|
log_message "Installation completed but service is not running properly"
|
|
log_message "Please check the logs and try redeploying the service"
|
|
exit 1
|
|
fi
|
|
fi
|
|
fi |