anduin / Server Init

#!/bin/bash #========================== # Set up the environment #========================== set -e # exit on error set -o pipefail # exit on pipeline error set -u # treat unset variable as error #========================== # Basic Information #========================== export LC_ALL=C export LANG=en_US.UTF-8 export DEBIAN_FRONTEND=noninteractive export SCRIPT_DIR="$(dirname "$(readlink -f "$0")")" #========================== # Color #========================== Green="\033[32m" Red="\033[31m" Yellow="\033[33m" Blue="\033[36m" Font="\033[0m" GreenBG="\033[42;37m" RedBG="\033[41;37m" OK="${Green}[ OK ]${Font}" ERROR="${Red}[FAILED]${Font}" WARNING="${Yellow}[ WARN ]${Font}" #========================== # Print Colorful Text #========================== function print_ok() { echo -e "${OK} ${Blue} $1 ${Font}" } function print_error() { echo -e "${ERROR} ${Red} $1 ${Font}" } function print_warn() { echo -e "${WARNING} ${Yellow} $1 ${Font}" } #========================== # Judge function #========================== function judge() { if [[ 0 -eq $? ]]; then print_ok "$1 succeeded" sleep 0.2 else print_error "$1 failed" exit 1 fi } prepare_host() { print_ok "Update apt-get" sudo apt-get update judge "Update apt-get" print_ok "Install sshpass" sudo apt-get install -y sshpass judge "Install sshpass" } wait_server_till_can_ssh() { userName=$1 password=$2 serverName=$3 print_ok "Waiting for server to be ready: ssh $userName@$serverName" while true; do set +e sshpass -p "$password" ssh -o StrictHostKeyChecking=no "$userName@$serverName" "echo 'Server is ready'" if [ $? -eq 0 ]; then break fi print_warn "Server is not ready yet. Retrying..." sleep 5 done print_ok "Server is ready to connect via ssh" set -e } prepare_server() { userName=$1 if [ -z "$userName" ]; then print_error "Please provide username. Usage: prepare_server.sh '<username>' '<password>' '<serverName>' '<desiredHostname>' '<desiredUsername>'" exit 1 fi password=$2 if [ -z "$password" ]; then print_error "Please provide password for user $userName. Usage: prepare_server.sh '<username>' '<password>' '<serverName>' '<desiredHostname>' '<desiredUsername>'" exit 1 fi serverName=$3 if [ -z "$serverName" ]; then print_error "Please provide server name. Usage: prepare_server.sh '<username>' '<password>' '<serverName>' '<desiredHostname>' '<desiredUsername>'" exit 1 fi desiredHostname=$4 if [ -z "$desiredHostname" ]; then echo "Please provide desired hostname. Usage: prepare_server.sh '<username>' '<password>' '<serverName>' '<desiredHostname>' '<desiredUsername>'" exit 1 fi desiredUsername=$5 if [ -z "$desiredUsername" ]; then print_error "Please provide desired username. Usage: prepare_server.sh '<username>' '<password>' '<serverName>' '<desiredHostname>' '<desiredUsername>'" exit 1 fi prepare_host ssh-keygen -f "/home/anduin/.ssh/known_hosts" -R "$serverName" wait_server_till_can_ssh "$userName" "$password" "$serverName" print_ok "Changing hostname for $serverName to $desiredHostname" sshpass -p "$password" ssh -o StrictHostKeyChecking=no "$userName@$serverName" "sudo hostnamectl set-hostname $desiredHostname" sshpass -p "$password" ssh -o StrictHostKeyChecking=no "$userName@$serverName" "sleep 3" sshpass -p "$password" ssh -o StrictHostKeyChecking=no "$userName@$serverName" "sudo reboot" || true sleep 5 print_ok "Hostname changed to $desiredHostname" print_warn "Server is rebooting..." wait_server_till_can_ssh "$userName" "$password" "$serverName" print_ok "Creating a new user..." alreadyExist=$(sshpass -p "$password" ssh -o StrictHostKeyChecking=no "$userName@$serverName" "grep -w '^$desiredUsername:' /etc/passwd | wc -l") if [ "$alreadyExist" -gt 0 ]; then print_ok "User $desiredUsername already exists." else print_ok "Creating user $desiredUsername" sshpass -p "$password" ssh -o StrictHostKeyChecking=no "$userName@$serverName" "sudo adduser $desiredUsername --gecos 'First Last,RoomNumber,WorkPhone,HomePhone' --disabled-password" fi judge "User $desiredUsername created" print_ok "Setting password for user $desiredUsername" userPassword=$(uuidgen) sshpass -p "$password" ssh -o StrictHostKeyChecking=no "$userName@$serverName" "echo '$desiredUsername:$userPassword' | sudo chpasswd" judge "Password set for user $desiredUsername as $userPassword" print_ok "Adding user $desiredUsername to sudo group" sshpass -p "$userPassword" ssh -o StrictHostKeyChecking=no "$desiredUsername@$serverName" "sudo usermod -aG sudo $desiredUsername" judge "User $desiredUsername added to sudo group" # Determine if userName and desiredUsername are the same if [ "$userName" = "$desiredUsername" ]; then # Update the password variable to the new password print_ok "Initial user and desired user are the same. Updating password for subsequent SSH connections." password="$userPassword" fi print_ok "Allowing user $desiredUsername to run sudo without password" sshpass -p "$password" ssh -o StrictHostKeyChecking=no "$desiredUsername@$serverName" "sudo mkdir -p /etc/sudoers.d" sshpass -p "$password" ssh -o StrictHostKeyChecking=no "$desiredUsername@$serverName" "sudo touch /etc/sudoers.d/$desiredUsername" sshpass -p "$password" ssh -o StrictHostKeyChecking=no "$desiredUsername@$serverName" "echo '$desiredUsername ALL=(ALL) NOPASSWD:ALL' | sudo tee -a /etc/sudoers.d/$desiredUsername" judge "User $desiredUsername can run sudo without password" # If ~/.ssh/id_rsa.pub does not exist, create it if [ ! -f ~/.ssh/id_rsa.pub ]; then print_warn "Creating ssh keys on local machine" ssh-keygen -t rsa -N "" -f ~/.ssh/id_rsa fi print_ok "Copying ssh keys with ssh-copy-id" sshpass -p "$password" ssh-copy-id -i ~/.ssh/id_rsa.pub "$desiredUsername@$serverName" print_ok "SSH keys copied" wait_server_till_can_ssh "$desiredUsername" "$password" "$serverName" print_ok "Disabling root login, password login and enabling ssh key login" ssh -o StrictHostKeyChecking=no "$desiredUsername@$serverName" "sudo sed -i 's/PermitRootLogin yes/PermitRootLogin no/g' /etc/ssh/sshd_config" ssh -o StrictHostKeyChecking=no "$desiredUsername@$serverName" "sudo sed -i 's/PasswordAuthentication yes/PasswordAuthentication no/g' /etc/ssh/sshd_config" ssh -o StrictHostKeyChecking=no "$desiredUsername@$serverName" "sudo sed -i 's/PubkeyAuthentication no/PubkeyAuthentication yes/g' /etc/ssh/sshd_config" # Uncomment those lines if they are commented ssh -o StrictHostKeyChecking=no "$desiredUsername@$serverName" "sudo sed -i 's/#PermitRootLogin no/PermitRootLogin no/g' /etc/ssh/sshd_config" ssh -o StrictHostKeyChecking=no "$desiredUsername@$serverName" "sudo sed -i 's/#PasswordAuthentication no/PasswordAuthentication no/g' /etc/ssh/sshd_config" ssh -o StrictHostKeyChecking=no "$desiredUsername@$serverName" "sudo sed -i 's/#PubkeyAuthentication yes/PubkeyAuthentication yes/g' /etc/ssh/sshd_config" ssh -o StrictHostKeyChecking=no "$desiredUsername@$serverName" "sudo systemctl restart sshd" judge "Disable root login, password login and enabled ssh key login" print_ok "Server is ready for $desiredUsername to login. Deleting other users..." otherUsers=$(ssh -o StrictHostKeyChecking=no "$desiredUsername@$serverName" "grep -v -E 'nologin|false|root|sync|$desiredUsername' /etc/passwd | cut -d: -f1") for otherUser in $otherUsers; do print_warn "Deleting user $otherUser..." ssh -o StrictHostKeyChecking=no "$desiredUsername@$serverName" "sudo pkill -u $otherUser" || true ssh -o StrictHostKeyChecking=no "$desiredUsername@$serverName" "sudo deluser --remove-home $otherUser" done print_ok "Resetting machine-id" ssh -o StrictHostKeyChecking=no "$desiredUsername@$serverName" "sudo rm -f /etc/machine-id /var/lib/dbus/machine-id" ssh -o StrictHostKeyChecking=no "$desiredUsername@$serverName" "sudo systemd-machine-id-setup" ssh -o StrictHostKeyChecking=no "$desiredUsername@$serverName" "sudo cp /etc/machine-id /var/lib/dbus/machine-id" judge "Machine-id reset" print_ok "Enabling ufw firewall" ssh -o StrictHostKeyChecking=no "$desiredUsername@$serverName" "sudo apt-get install -y ufw" ssh -o StrictHostKeyChecking=no "$desiredUsername@$serverName" "sudo ufw allow OpenSSH" ssh -o StrictHostKeyChecking=no "$desiredUsername@$serverName" "echo 'y' | sudo ufw enable" judge "Ufw firewall enabled" print_ok "Enabling BBR if not enabled" ssh -o StrictHostKeyChecking=no "$desiredUsername@$serverName" "sudo sysctl net.ipv4.tcp_available_congestion_control | grep -q bbr || echo 'net.core.default_qdisc=fq' | sudo tee -a /etc/sysctl.conf" ssh -o StrictHostKeyChecking=no "$desiredUsername@$serverName" "sudo sysctl net.ipv4.tcp_available_congestion_control | grep -q bbr || echo 'net.ipv4.tcp_congestion_control=bbr' | sudo tee -a /etc/sysctl.conf" ssh -o StrictHostKeyChecking=no "$desiredUsername@$serverName" "sudo sysctl -p" judge "BBR enabled" print_ok "Selecting best mirror" ssh -o StrictHostKeyChecking=no "$desiredUsername@$serverName" "curl -s https://gist.aiursoft.cn/anduin/879917820a6c4b268fc12c21f1b3fe7a/raw/HEAD/mirror.sh | bash" ssh -o StrictHostKeyChecking=no "$desiredUsername@$serverName" "sudo apt update" judge "Best mirror selected" print_ok "Installing latest kernel..." ssh -o StrictHostKeyChecking=no "$desiredUsername@$serverName" "sudo apt search linux-generic-hwe-* | awk -F'/' '/linux-generic-hwe-/ {print \$1}' | sort | head -n 1 | xargs -r sudo apt install -y" judge "Latest kernel installed" print_ok "Rebooting server..." ssh -o StrictHostKeyChecking=no "$desiredUsername@$serverName" "sleep 3" ssh -o StrictHostKeyChecking=no "$desiredUsername@$serverName" "sudo reboot" || true sleep 5 print_warn "Server is rebooting..." wait_server_till_can_ssh "$desiredUsername" "$password" "$serverName" print_ok "Installing updates" ssh -o StrictHostKeyChecking=no "$desiredUsername@$serverName" "sudo apt update" ssh -o StrictHostKeyChecking=no "$desiredUsername@$serverName" "sudo apt upgrade -y" ssh -o StrictHostKeyChecking=no "$desiredUsername@$serverName" "sudo apt autoremove -y" judge "Updates installed" print_ok "Rebooting server..." ssh -o StrictHostKeyChecking=no "$desiredUsername@$serverName" "sleep 3" ssh -o StrictHostKeyChecking=no "$desiredUsername@$serverName" "sudo reboot" || true sleep 5 print_warn "Server is rebooting..." wait_server_till_can_ssh "$desiredUsername" "$password" "$serverName" print_ok "Set CPU to performance mode" ssh -o StrictHostKeyChecking=no "$desiredUsername@$serverName" "sudo apt install -y linux-tools-common linux-tools-\$(uname -r)" ssh -o StrictHostKeyChecking=no "$desiredUsername@$serverName" "sudo cpupower frequency-info" ssh -o StrictHostKeyChecking=no "$desiredUsername@$serverName" "sudo cpupower frequency-set -g performance" || true judge "CPU set to performance mode" print_ok "Set timezone to GMT" ssh -o StrictHostKeyChecking=no "$desiredUsername@$serverName" "sudo timedatectl set-timezone GMT" judge "Timezone set to GMT" print_ok "Removing snap..." ssh -o StrictHostKeyChecking=no "$desiredUsername@$serverName" "sudo systemctl disable --now snapd" ssh -o StrictHostKeyChecking=no "$desiredUsername@$serverName" "sudo apt purge -y snapd" ssh -o StrictHostKeyChecking=no "$desiredUsername@$serverName" "sudo rm -rf /snap /var/snap /var/lib/snapd /var/cache/snapd /usr/lib/snapd ~/snap" ssh -o StrictHostKeyChecking=no "$desiredUsername@$serverName" "sudo tee /etc/apt/preferences.d/no-snap.pref > /dev/null << EOF Package: snapd Pin: release a=* Pin-Priority: -10 EOF" ssh -o StrictHostKeyChecking=no "$desiredUsername@$serverName" "sudo chown root:root /etc/apt/preferences.d/no-snap.pref" judge "Snap removed" print_ok "Autoremoving apt packages" ssh -o StrictHostKeyChecking=no "$desiredUsername@$serverName" "sudo apt autoremove -y --purge" judge "Apt packages autoremoved" print_ok "Benchmarking server..." ssh -o StrictHostKeyChecking=no "$desiredUsername@$serverName" "sudo apt install -y sysbench" ssh -o StrictHostKeyChecking=no "$desiredUsername@$serverName" "sysbench cpu --threads=\$(nproc) run" judge "Server benchmarked" print_ok "Server is ready for use" print_ok "ssh $desiredUsername@$serverName" } # To use this function: # Arg1: username # Arg2: password # Arg3: servername # Arg4: Desired hostname # Arg5: Desired username prepare_server "$@"

#!/usr/bin/env bash # Step 1: Ensure required packages are installed sudo apt update sudo apt install -y curl apt-transport-https lsb-release function switchSource() { # Get current Ubuntu codename (e.g., jammy, focal, bionic) codename=$(lsb_release -cs) # Define a list of potential mirrors mirrors=( "https://archive.ubuntu.com/ubuntu/" "https://mirror.aarnet.edu.au/pub/ubuntu/archive/" # Australia "https://mirror.fsmg.org.nz/ubuntu/" # New Zealand "https://mirrors.neterra.net/ubuntu/archive/" # Bulgaria "https://mirror.csclub.uwaterloo.ca/ubuntu/" # Canada "https://mirrors.dotsrc.org/ubuntu/" # Denmark "https://mirrors.nic.funet.fi/ubuntu/" # Finland "https://mirror.ubuntu.ikoula.com/" # France "https://mirror.xtom.com.hk/ubuntu/" # Hong Kong "https://mirrors.piconets.webwerks.in/ubuntu-mirror/ubuntu/" # India "https://ftp.udx.icscoe.jp/Linux/ubuntu/" # Japan "https://ftp.kaist.ac.kr/ubuntu/" # Korea "https://ubuntu.mirror.garr.it/ubuntu/" # Italy "https://ftp.uni-stuttgart.de/ubuntu/" # Germany "https://mirror.i3d.net/pub/ubuntu/" # Netherlands "https://mirroronet.pl/pub/mirrors/ubuntu/" # Poland "https://ubuntu.mobinhost.com/ubuntu/" # Iran "http://sg.archive.ubuntu.com/ubuntu/" # Singapore "http://ossmirror.mycloud.services/os/linux/ubuntu/" # Singapore "https://mirror.enzu.com/ubuntu/" # United States "http://jp.archive.ubuntu.com/ubuntu/" # Japan "http://kr.archive.ubuntu.com/ubuntu/" # Korea "http://us.archive.ubuntu.com/ubuntu/" # United States "http://tw.archive.ubuntu.com/ubuntu/" # Taiwan "https://mirror.twds.com.tw/ubuntu/" # Taiwan "https://ubuntu.mirrors.uk2.net/ubuntu/" # United Kingdom "http://mirrors.ustc.edu.cn/ubuntu/" # 中国科学技术大学 "http://ftp.sjtu.edu.cn/ubuntu/" # 上海交通大学 "http://mirrors.tuna.tsinghua.edu.cn/ubuntu/" # 清华大学 "http://mirrors.aliyun.com/ubuntu/" # 阿里云 "http://mirrors.163.com/ubuntu/" # 网易 "http://mirrors.cloud.tencent.com/ubuntu/" # 腾讯云 "http://mirror.aiursoft.cn/ubuntu/" # Aiursoft "http://mirrors.anduinos.com/ubuntu/" # AnduinOS "http://mirrors.huaweicloud.com/ubuntu/" # 华为云 "http://mirrors.zju.edu.cn/ubuntu/" # 浙江大学 "http://azure.archive.ubuntu.com/ubuntu/" # Azure "https://mirrors.isu.net.sa/apt-mirror/" # Saudi Arabia "https://mirror.team-host.ru/ubuntu/" # Russia "https://labs.eif.urjc.es/mirror/ubuntu/" # Spain "https://mirror.alastyr.com/ubuntu/ubuntu-archive/" # Turkey "https://ftp.acc.umu.se/ubuntu/" # Sweden "https://mirror.kku.ac.th/ubuntu/" # Thailand "https://mirror.bizflycloud.vn/ubuntu/" # Vietnam ) declare -A results # Function to test speed of a single mirror test_speed() { url="$1" # Attempt to do a quick GET and measure total time response="$(curl -o /dev/null -s -w "%{http_code} %{time_total}\n" \ --connect-timeout 1 --max-time 2 "$url")" http_code=$(echo "$response" | awk '{print $1}') time_total=$(echo "$response" | awk '{print $2}') # If HTTP code == 200, mark the measured time; otherwise use a large value if [ "$http_code" -eq 200 ]; then results["$url"]="$time_total" else echo "Failed to access $url (HTTP code: $http_code)" results["$url"]="9999" fi } echo "Testing all mirrors for Ubuntu '$codename'..." for mirror in "${mirrors[@]}"; do test_speed "$mirror" done # Sort mirrors by time_total # Example of sorted_mirrors entry: "https://archive.ubuntu.com/ubuntu/ 0.034" sorted_mirrors="$( for url in "${!results[@]}"; do echo "$url ${results[$url]}" done | sort -k2 -n )" echo echo "=== Sorted mirrors by response time (ascending) ===" echo "$sorted_mirrors" echo # Pick the top (fastest) mirror from the sorted list fastest_mirror="$(echo "$sorted_mirrors" | head -n 1 | awk '{print $1}')" echo "Fastest mirror found: $fastest_mirror" echo "Updating /etc/apt/sources.list..." # Update /etc/apt/sources.list with the fastest mirror sudo tee /etc/apt/sources.list >/dev/null <<EOF deb $fastest_mirror $codename main restricted universe multiverse deb $fastest_mirror $codename-updates main restricted universe multiverse deb $fastest_mirror $codename-backports main restricted universe multiverse deb $fastest_mirror $codename-security main restricted universe multiverse EOF # Final check sudo apt update echo "All done!" } # Call the main function switchSource