fedora-OEMDRV/system_setup/sync_client_software.sh

#!/usr/bin/env sh
# SPDX-FileCopyrightText: Daniel Pätzold
# SPDX-License-Identifier: AGPL-3.0-or-later
#
# Central sofwareinstallation script. Should be called from logon-script via sudo and prereserved env
#
source $(dirname "$0")/setup_system.inc.sh

#Check for root
if [ "$EUID" -ne 0 ]; then
    echo "Error: Script requires root privileges. It should be executed via logon-script and not standalone."
    echo "Press any key to continue" && read -n 1 -s -r && exit 1
fi

#Check Token
if [ "${DAVTOKEN_USER}." == "." ]; then
    echo "Error: Script cannot be executed standalone, must be run with a matching sudo rule and needs a prereserved environement from logon-script."
    elog_add "A matching sudo rule could look like this: "'^'${SYSCONFIGPATH////'\/'}'\/system_setup\/sync_client_software\.sh.*$'
    elog_add "Hint: the rule must contain the !authenticate and setenv option to work."
    echo "Press any key to continue" && read -n 1 -s -r && exit 1
fi

#Check if Repository is defined
if [ "${CLIENT_SOFTWARE_DST}." == "." ]; then
    echo "No central softwarerepository defined (CLIENT_SOFTWARE_DST). Skipping sync."
    exit 0
fi

echo "Syncing central softwarerepository ${CLIENT_SOFTWARE_DST}"
# Create Directory if not existent
mkdir -p ${CLIENT_SOFTWARE_DST}

#Logs for systems software-repository go to roots log files
LOGFILE="${TEMPDIR}/${SCRIPTNAME}.log"
echo "Logging to File ${LOGFILE}"
mkdir -p ${TEMPDIR}

#Install or update Nextcloud com.nextcloud.desktopclient.nextcloud
echo "Update or install Nextcloud client"
/usr/bin/flatpak remote-add --if-not-exists flathub https://dl.flathub.org/repo/flathub.flatpakrepo
/usr/bin/flatpak install -y --or-update --noninteractive flathub com.nextcloud.desktopclient.nextcloud && echo "Done Update/Install of Nextcloud."

#Sync remote Files
chown root:${CLIENTADMINGROUP} -R ${SYSCONFIGPATH}
chmod ug+rwX,o=rX -R ${SYSCONFIGPATH}
# At first, sync central configs if they are configured to be synced
if [[ ! -z "${DISTCONFIGPATH_SRC}" ]]; then
    SYNCCMD="sudo -i /usr/bin/flatpak run --branch=stable --arch=x86_64 --command=nextcloudcmd com.nextcloud.desktopclient.nextcloud -h -u ${DAVTOKEN_USER} -p ${DAVTOKEN_PASS} --path ${DISTCONFIGPATH_SRC} ${DISTCONFIGPATH} https://${SERVERFQDN_NC}"
    SYNCCMD_HIDDENPW=$( echo "${SYNCCMD/${DAVTOKEN_PASS}/***HIDDEN***}" )
    echo "Exec: ${SYNCCMD_HIDDENPW}"
    echo "Sync Configuration" > ${LOGFILE}
    echo "====================" >> ${LOGFILE}
    date >> ${LOGFILE}
    echo ${SYNCCMD_HIDDENPW} >> ${LOGFILE}
    echo "" >> ${LOGFILE}
    ${SYNCCMD} >> ${LOGFILE} 2>&1
    if [[ $? -ne 0 ]]; then
        echo "Error in sync:"
        echo "****"
        cat ${LOGFILE}
        echo "****"
        echo ""
        echo "Please check if your Token is setup right and for the above Output"
        read -n 1 -s -r -p "Press any key to continue"
        echo ""
        exit 1
    fi
fi
# Then, sync all client_software-files
if [[ ! -z "${CLIENT_SOFTWARE_SRC}" ]]; then
    SYNCCMD="sudo -i /usr/bin/flatpak run --branch=stable --arch=x86_64 --command=nextcloudcmd com.nextcloud.desktopclient.nextcloud -h -u ${DAVTOKEN_USER} -p ${DAVTOKEN_PASS} --path ${CLIENT_SOFTWARE_SRC} ${CLIENT_SOFTWARE_DST} https://${SERVERFQDN_NC}"
    SYNCCMD_HIDDENPW=$( echo "${SYNCCMD/${DAVTOKEN_PASS}/***HIDDEN***}" )
    echo "Exec: ${SYNCCMD_HIDDENPW}"
    echo "Sync Client Software" > ${LOGFILE}
    echo "====================" >> ${LOGFILE}
    date >> ${LOGFILE}
    echo ${SYNCCMD_HIDDENPW} >> ${LOGFILE}
    echo "" >> ${LOGFILE}
    ${SYNCCMD} >> ${LOGFILE} 2>&1
    if [[ $? -ne 0 ]]; then
        echo "Error in sync:"
        echo "****"
        cat ${LOGFILE}
        echo "****"
        echo ""
        echo "Please check if your Token is setup right and for the above Output"
        read -n 1 -s -r -p "Press any key to continue"
        echo ""
        exit 1
    fi
fi

# After sync again, restore the right to all filles. They must be owned by root, changeable by admingroup and readable by otherusers (we are root, so we can change!)
chown root:${CLIENTADMINGROUP} -R ${SYSCONFIGPATH}
chmod ug+rwX,o=rX -R ${SYSCONFIGPATH}
#Make all install.sh executable
find ${CLIENT_SOFTWARE_DST} -type f -name install.sh -exec chmod ug+x {} \;
if [ -f "${CLIENT_SOFTWARE_DST}/install.sh" ]; then
    chmod u+x "${CLIENT_SOFTWARE_DST}/install.sh"
fi
echo "Sucessfully synced."

#Run Software setup
echo "Running Setup of Software"
if [ $1 == "install" ]; then
    ${CLIENT_SOFTWARE_DST}/install.sh $2
    if [ $? -ne 0 ]; then
        exit 1
    fi
fi