diff options
| author | Lukasz Kasprzak <lukasz.kasprzak@pm.me> | 2026-01-23 12:48:30 +0100 |
|---|---|---|
| committer | Lukasz Kasprzak <lukasz.kasprzak@pm.me> | 2026-01-23 12:48:30 +0100 |
| commit | 97f968a30e7dc28f6d99bfbaae8a4aeefb6ad525 (patch) | |
| tree | 5a250224ab69a04f05be2f757af86bfee9a7fec0 /archive | |
| parent | a00f92fdb6062af011d98ba8af6ddf0713fa7b3e (diff) | |
| download | bin-97f968a30e7dc28f6d99bfbaae8a4aeefb6ad525.tar.gz bin-97f968a30e7dc28f6d99bfbaae8a4aeefb6ad525.zip | |
added all of my scripts
Diffstat (limited to 'archive')
| -rwxr-xr-x | archive/bridge-sync.sh.bak | 31 | ||||
| -rwxr-xr-x | archive/kvm-lab-create.bak | 110 | ||||
| -rwxr-xr-x | archive/vm-new | 58 | ||||
| -rwxr-xr-x | archive/vm-rm | 44 |
4 files changed, 243 insertions, 0 deletions
diff --git a/archive/bridge-sync.sh.bak b/archive/bridge-sync.sh.bak new file mode 100755 index 0000000..7aecb75 --- /dev/null +++ b/archive/bridge-sync.sh.bak @@ -0,0 +1,31 @@ +#!/usr/bin/env bash +set -euo pipefail + +CERT_FILE="$HOME/.config/isync/proton-bridge.pem" + +echo "[1] Restart Bridge" +systemctl --user restart protonmail-bridge.service + +echo "[2] Wait for Bridge IMAP port" +for i in {1..30}; do + ss -ltn '( sport = :1143 )' | grep -q 1143 && break + sleep 1 +done + +ss -ltn '( sport = :1143 )' | grep -q 1143 || { + echo "Bridge did not start"; exit 1; } + +echo "[3] Refresh cert" +systemctl --user start proton-bridge-cert-refresh.service + +echo "[4] Wait for cert" +for i in {1..10}; do + [ -s "$CERT_FILE" ] && break + sleep 1 +done + +[ -s "$CERT_FILE" ] || { echo "Cert not created"; exit 1; } + +echo "[5] Run mbsync" +mbsync -a -V + diff --git a/archive/kvm-lab-create.bak b/archive/kvm-lab-create.bak new file mode 100755 index 0000000..d0d5865 --- /dev/null +++ b/archive/kvm-lab-create.bak @@ -0,0 +1,110 @@ +#!/usr/bin/env bash +set -euo pipefail + +# Libvirt context (system) +URI="qemu:///system" + +# Base/template (immutable parent qcow2) +BASE="/var/lib/libvirt/images/base/debian13-template.qcow2" +TEMPLATE_DOMAIN="debian13-template" + +# Lab overlays directory (dedicated) +LABDIR="/var/lib/libvirt/images/lab" + +usage() { + echo "Usage: kvm-lab-create <lab-name> [--start]" + echo "Example: kvm-lab-create lab02 --start" +} + +NAME="${1:-}" +START="${2:-}" + +if [[ -z "$NAME" ]]; then + usage + exit 1 +fi + +if [[ "${START:-}" != "" && "${START:-}" != "--start" ]]; then + usage + exit 1 +fi + +DISK="${LABDIR}/${NAME}.qcow2" +XML_TMP="$(mktemp "/tmp/${NAME}.xml.XXXXXX")" + +cleanup() { rm -f "$XML_TMP"; } +trap cleanup EXIT + +# ---- Preconditions (read-only checks) ---- +if ! sudo test -r "$BASE"; then + echo "ERROR: Base image not readable: $BASE" + exit 1 +fi + +if [[ ! -d "$LABDIR" ]]; then + echo "ERROR: Lab directory missing: $LABDIR" + exit 1 +fi + +if [[ -e "$DISK" ]]; then + echo "ERROR: Disk already exists: $DISK" + exit 1 +fi + +if virsh -c "$URI" dominfo "$NAME" &>/dev/null; then + echo "ERROR: Domain already exists: $NAME" + exit 1 +fi + +if ! virsh -c "$URI" dominfo "$TEMPLATE_DOMAIN" &>/dev/null; then + echo "ERROR: Template domain not found in $URI: $TEMPLATE_DOMAIN" + exit 1 +fi + +# ---- Create overlay disk ---- +echo "Creating overlay disk: $DISK" +sudo qemu-img create -f qcow2 -F qcow2 -b "$BASE" "$DISK" >/dev/null + +# Ensure qemu/libvirt can open it +sudo chown libvirt-qemu:libvirt "$DISK" +sudo chmod 0660 "$DISK" + +# Quick sanity: confirm backing file is correct +echo "Validating backing file..." +sudo qemu-img info "$DISK" | grep -E "backing file:|file format:|virtual size:" || true + +# ---- Clone domain XML ---- +echo "Cloning domain XML from: $TEMPLATE_DOMAIN" +virsh -c "$URI" dumpxml "$TEMPLATE_DOMAIN" > "$XML_TMP" + +# Replace <name> and the disk path, and force NAT-only network "default" +# Notes: +# - disk path substitution assumes template points at /var/lib/libvirt/images/base/debian13-template.qcow2 +# - network replacement assumes a standard <interface type='network'> exists +sed -i \ + -e "s|<name>${TEMPLATE_DOMAIN}</name>|<name>${NAME}</name>|" \ + -e "s|${BASE}|${DISK}|g" \ + -e "s|<source network='[^']*'|<source network='default'|g" \ + "$XML_TMP" + +# Extra safety: remove any hostfs passthrough (if any) to prevent host access via mounts +# (If none exist, this does nothing.) +perl -0777 -i -pe 's/<filesystem[\s\S]*?<\/filesystem>\n?//g' "$XML_TMP" +# +# Remove UUID to avoid collision with template +sed -i -E '/<uuid>[^<]*<\/uuid>/d' "$XML_TMP" +# ---- Define domain ---- +echo "Defining domain: $NAME" +virsh -c "$URI" define "$XML_TMP" >/dev/null + +# ---- Optional start ---- +if [[ "$START" == "--start" ]]; then + echo "Starting domain: $NAME" + virsh -c "$URI" start "$NAME" >/dev/null +fi + +echo "OK: Lab '${NAME}' created (disk: ${DISK})." +if [[ "$START" != "--start" ]]; then + echo "To start: virsh -c $URI start ${NAME}" +fi + diff --git a/archive/vm-new b/archive/vm-new new file mode 100755 index 0000000..3955c6c --- /dev/null +++ b/archive/vm-new @@ -0,0 +1,58 @@ +#!/usr/bin/env bash +set -euo pipefail + +NAME="${1:-}" +RAM="${2:-4096}" # MiB +VCPUS="${3:-2}" + +BASE="/var/lib/libvirt/images/base/work01-base.qcow2" +DIR="/var/lib/libvirt/images/overlays" +DISK="${DIR}/${NAME}.qcow2" + +usage() { + echo "Usage: vm-new <name> [ramMiB=4096] [vcpus=2]" >&2 + exit 2 +} + +[[ -n "$NAME" ]] || usage + +case "$NAME" in + debian13-template|work01|Whonix-Gateway|Whonix-Workstation) + echo "Refusing: protected VM name '$NAME'." >&2 + exit 1 + ;; +esac + +if sudo virsh dominfo "$NAME" >/dev/null 2>&1; then + echo "Refusing: VM '$NAME' already exists in libvirt." >&2 + exit 1 +fi + +if [[ ! -f "$BASE" ]]; then + echo "Base image not found: $BASE" >&2 + exit 1 +fi + +if [[ -e "$DISK" ]]; then + echo "Refusing: disk already exists: $DISK" >&2 + exit 1 +fi + +# Create overlay +sudo qemu-img create -f qcow2 -F qcow2 -b "$BASE" "$DISK" >/dev/null + +# Define + install (import existing disk) +sudo virt-install --connect qemu:///system \ + --name "$NAME" \ + --memory "$RAM" --vcpus "$VCPUS" --cpu host-model \ + --disk "path=$DISK,format=qcow2,bus=virtio" \ + --network network=default,model=virtio \ + --graphics none \ + --import \ + --osinfo linux2024 \ + --noautoconsole + +echo "Created: $NAME" +echo "Disk: $DISK" +echo "Next: sudo virsh start $NAME && sudo virsh domifaddr $NAME" + diff --git a/archive/vm-rm b/archive/vm-rm new file mode 100755 index 0000000..3cbeb7d --- /dev/null +++ b/archive/vm-rm @@ -0,0 +1,44 @@ +#!/usr/bin/env bash +set -euo pipefail + +NAME="${1:-}" +usage() { echo "Usage: vm-rm <name>" >&2; exit 2; } +[[ -n "$NAME" ]] || usage + +case "$NAME" in + debian13-template|work01|Whonix-Gateway|Whonix-Workstation) + echo "Refusing: protected VM name '$NAME'." >&2 + exit 1 + ;; +esac + +if ! sudo virsh dominfo "$NAME" >/dev/null 2>&1; then + echo "VM not found in libvirt: $NAME" >&2 + exit 1 +fi + +# Find associated disk(s) from XML, delete only qcow2 under overlays/ +mapfile -t DISKS < <(sudo virsh domblklist "$NAME" --details \ + | awk '$3=="disk" && $4 ~ /^\// {print $4}') + +echo "Will remove VM: $NAME" +for d in "${DISKS[@]}"; do + echo "Disk: $d" +done + +sudo virsh destroy "$NAME" >/dev/null 2>&1 || true +sudo virsh undefine "$NAME" --nvram >/dev/null 2>&1 || sudo virsh undefine "$NAME" >/dev/null + +for d in "${DISKS[@]}"; do + case "$d" in + /var/lib/libvirt/images/overlays/*.qcow2) + sudo rm -f -- "$d" + ;; + *) + echo "Skipping non-overlay disk: $d" >&2 + ;; + esac +done + +echo "Removed: $NAME" + |
