You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
144 lines
4.7 KiB
144 lines
4.7 KiB
#!/bin/bash |
|
|
|
export PATH=/bin:/usr/bin:/sbin:/usr/sbin |
|
shopt -s expand_aliases |
|
|
|
dryRun=0 |
|
|
|
echo "*** ZeroTier One install/update ***" |
|
|
|
if [ "$UID" -ne 0 ]; then |
|
echo "Not running as root so doing dry run (no modifications to system)..." |
|
dryRun=1 |
|
fi |
|
|
|
if [ $dryRun -gt 0 ]; then |
|
alias ln="echo '>> dry run: ln'" |
|
alias rm="echo '>> dry run: rm'" |
|
alias mv="echo '>> dry run: mv'" |
|
alias cp="echo '>> dry run: cp'" |
|
alias chown="echo '>> dry run: chown'" |
|
alias chgrp="echo '>> dry run: chgrp'" |
|
alias chmod="echo '>> dry run: chmod'" |
|
alias launchctl="echo '>> dry run: launchctl'" |
|
alias zerotier-cli="echo '>> dry run: zerotier-cli'" |
|
fi |
|
|
|
zthome="/Library/Application Support/ZeroTier/One" |
|
ztapp="/Applications/ZeroTier One.app" |
|
if [ ! -d "$ztapp" ]; then |
|
ztapp=`mdfind kMDItemCFBundleIdentifier == 'com.zerotier.ZeroTierOne' | grep -E '.*ZeroTier One[.]app$' | grep -v -F '/build-' | grep -v -F '/Volumes/ZeroTier' | sort | head -n 1` |
|
fi |
|
|
|
scriptPath="`dirname "$0"`/`basename "$0"`" |
|
if [ ! -r "$scriptPath" ]; then |
|
scriptPath="$0" |
|
if [ ! -r "$scriptPath" ]; then |
|
echo "Installer cannot determine its own path; $scriptPath is not readable." |
|
exit 2 |
|
fi |
|
fi |
|
|
|
endMarkerIndex=`grep -a -b -E '^################' "$scriptPath" | head -c 16 | cut -d : -f 1` |
|
if [ "$endMarkerIndex" -le 100 ]; then |
|
echo 'Internal error: unable to find end of script / start of binary data marker.' |
|
exit 2 |
|
fi |
|
blobStart=`expr $endMarkerIndex + 17` |
|
if [ "$blobStart" -le "$endMarkerIndex" ]; then |
|
echo 'Internal error: unable to find end of script / start of binary data marker.' |
|
exit 2 |
|
fi |
|
|
|
echo 'Extracting files...' |
|
if [ $dryRun -gt 0 ]; then |
|
echo ">> dry run: tail -c +$blobStart \"$scriptPath\" | bunzip2 -c | tar -xvop -C / -f -" |
|
else |
|
rm -rf '/tmp/_zt1tmp' |
|
mkdir '/tmp/_zt1tmp' |
|
tail -c +$blobStart "$scriptPath" | bunzip2 -c | tar -xop -C '/tmp/_zt1tmp' -f - |
|
fi |
|
|
|
cd '/tmp/_zt1tmp' |
|
|
|
if [ $dryRun -eq 0 -a ! -d './Applications/ZeroTier One.app' ]; then |
|
echo 'Archive extraction failed, cannot find files in /tmp/_zt1tmp.' |
|
exit 2 |
|
fi |
|
|
|
echo 'Installing zerotier-one service...' |
|
|
|
mkdir -p "$zthome" |
|
chown root:admin "$zthome" |
|
chmod 0750 "$zthome" |
|
cp -fa ./Library/Application\ Support/ZeroTier/One/* "$zthome" |
|
chown -R root:wheel "$zthome/tap.kext" |
|
chown -R root:wheel "$zthome/pre10.8/tap.kext" |
|
|
|
echo 'Installing/updating ZeroTier One.app...' |
|
|
|
if [ ! -z "$ztapp" -a -d "$ztapp" -a -f "$ztapp/Contents/Info.plist" ]; then |
|
# Preserve ownership of current app across updates... that way the admin |
|
# user who dragged it into /Applications can just trash it the way they |
|
# would any other app. This works (due to mdfind up top) even if they put |
|
# it somewhere non-standard on their system. |
|
currentAppOwner=`stat -f '%u' "$ztapp"` |
|
currentAppGroup=`stat -f '%g' "$ztapp"` |
|
|
|
rm -rf "$ztapp" |
|
mv -f './Applications/ZeroTier One.app' "$ztapp" |
|
|
|
if [ ! -z "$currentAppOwner" -a ! -z "$currentAppGroup" ]; then |
|
chown -R $currentAppOwner "$ztapp" |
|
chgrp -R $currentAppGroup "$ztapp" |
|
else |
|
chown -R root "$ztapp" |
|
chgrp -R admin "$ztapp" |
|
fi |
|
else |
|
# If there is no existing app, just drop the shipped one into place |
|
ztapp="/Applications/ZeroTier One.app" |
|
mv -f './Applications/ZeroTier One.app' "$ztapp" |
|
chown -R root "$ztapp" |
|
chgrp -R admin "$ztapp" |
|
fi |
|
|
|
# Set up symlink that watches for app deletion |
|
rm -f "$zthome/shutdownIfUnreadable" |
|
ln -sf "$ztapp/Contents/Info.plist" "$zthome/shutdownIfUnreadable" |
|
|
|
echo 'Installing zerotier-cli command line utility...' |
|
|
|
rm -f /usr/bin/zerotier-cli /usr/bin/zerotier-idtool |
|
ln -sf "/Library/Application Support/ZeroTier/One/zerotier-one" /usr/bin/zerotier-cli |
|
ln -sf "/Library/Application Support/ZeroTier/One/zerotier-one" /usr/bin/zerotier-idtool |
|
|
|
# This lets the install helper AppleScript thingy go ahead and authorize the |
|
# user after the installer is done, skiping that step for the user who did |
|
# the service install. |
|
if [ ! -f '/Library/Application Support/ZeroTier/One/authtoken.secret' ]; then |
|
echo 'Pre-creating authtoken.secret for ZeroTier service...' |
|
if [ $dryRun -eq 0 ]; then |
|
rm -f '/Library/Application Support/ZeroTier/One/authtoken.secret' |
|
head -c 1024 /dev/urandom | md5 | head -c 24 >'/Library/Application Support/ZeroTier/One/authtoken.secret' |
|
chmod 0600 '/Library/Application Support/ZeroTier/One/authtoken.secret' |
|
fi |
|
fi |
|
|
|
echo 'Installing and (re-)starting zerotier-one service via launchctl...' |
|
|
|
mv -f './Library/LaunchDaemons/com.zerotier.one.plist' '/Library/LaunchDaemons/' |
|
launchctl load /Library/LaunchDaemons/com.zerotier.one.plist |
|
|
|
# launchctl will restart us after exit if this is an online auto-update |
|
|
|
cd /tmp |
|
rm -rf _zt1tmp |
|
|
|
exit 0 |
|
|
|
# Do not remove the last line or add a carriage return to it! The installer |
|
# looks for an unterminated line beginning with 16 #'s in itself to find |
|
# the binary blob data, which is appended after it. |
|
|
|
################ |