From 3b42eac51d33bdbc58b448d4e4fd65aaac84c2f6 Mon Sep 17 00:00:00 2001 From: Itiligent <94789708+itiligent@users.noreply.github.com> Date: Fri, 19 Jul 2024 15:59:33 +1000 Subject: [PATCH] keep custom rdp share names after upgrade --- 1-setup.sh | 50 ++++++++++--------- README.md | 6 +-- .../{backup-guac.sh => backup-guacamole.sh} | 0 upgrade-guac.sh => upgrade-guacamole.sh | 9 +++- 4 files changed, 38 insertions(+), 27 deletions(-) rename guac-management/{backup-guac.sh => backup-guacamole.sh} (100%) rename upgrade-guac.sh => upgrade-guacamole.sh (96%) diff --git a/1-setup.sh b/1-setup.sh index 1a74779..fb5f1fc 100644 --- a/1-setup.sh +++ b/1-setup.sh @@ -175,8 +175,8 @@ wget -q --show-progress ${GITHUB}/guac-optional-features/add-xtra-histrecstor.sh wget -q --show-progress ${GITHUB}/guac-optional-features/add-smtp-relay-o365.sh -O add-smtp-relay-o365.sh wget -q --show-progress ${GITHUB}/guac-optional-features/add-tls-guac-daemon.sh -O add-tls-guac-daemon.sh wget -q --show-progress ${GITHUB}/guac-optional-features/add-fail2ban.sh -O add-fail2ban.sh -wget -q --show-progress ${GITHUB}/guac-management/backup-guac.sh -O backup-guac.sh -wget -q --show-progress ${GITHUB}/upgrade-guac.sh -O upgrade-guac.sh +wget -q --show-progress ${GITHUB}/guac-management/backup-guacamole.sh -O backup-guacamole.sh +wget -q --show-progress ${GITHUB}/upgrade-guacamole.sh -O upgrade-guacamole.sh # Download the (customisable) dark theme & branding template wget -q --show-progress ${GITHUB}/branding.jar -O branding.jar @@ -198,12 +198,12 @@ if [[ -z "${MYSQL_VERSION}" ]]; then # Use Linux distro default version. MYSQLSRV="default-mysql-server default-mysql-client mysql-common" # Server MYSQLCLIENT="default-mysql-client" # Client - DB_CMD="mysql" # The mysql -v command is depricated on some versions, here is an option to substitute any another. + DB_CMD="mysql" # The mysql -v command is depricated on some versions. else # Use official mariadb.org repo MYSQLSRV="mariadb-server mariadb-client mariadb-common" # Server MYSQLCLIENT="mariadb-client" # Client - DB_CMD="mariadb" # The mysql -v command is depricated on some versions, option to substitute any another. + DB_CMD="mariadb" # The mysql -v command is depricated on some versions. fi # Standardise on a lexicon for the differing dependency package names between distros @@ -234,7 +234,7 @@ fi # Ongoing fixes and workarounds as distros diverge/change ############################################################# ####################################################################################################################### -# Workaround for Debian incompatibilities with latet Tomcat versions. (Adds the oldstable repo and downgrades the Tomcat version to be installed) +# Workaround for Debian incompatibilities with latest Tomcat versions. (Adds the oldstable repo and downgrades the Tomcat version to be installed) if [[ ${ID,,} = "debian" && ${VERSION_CODENAME,,} = *"bookworm"* ]] || [[ ${ID,,} = "debian" && ${VERSION_CODENAME,,} = *"trixie"* ]]; then #(checks for upper and lower case) echo "deb http://deb.debian.org/debian/ bullseye main" | sudo tee /etc/apt/sources.list.d/bullseye.list &> /dev/null sudo apt-get update -qq &> /dev/null @@ -668,14 +668,14 @@ echo echo -e "${GREY}Synchronising the install script suite with the selected installation options..." # Sync the various manual config scripts with the relevant variables selected at install # This way scripts can be run at a later time without modification to match the original install -sed -i "s|MYSQL_HOST=|MYSQL_HOST='${MYSQL_HOST}'|g" $DOWNLOAD_DIR/backup-guac.sh -sed -i "s|MYSQL_PORT=|MYSQL_PORT='${MYSQL_PORT}'|g" $DOWNLOAD_DIR/backup-guac.sh -sed -i "s|GUAC_USER=|GUAC_USER='${GUAC_USER}'|g" $DOWNLOAD_DIR/backup-guac.sh -sed -i "s|GUAC_PWD=|GUAC_PWD='${GUAC_PWD}'|g" $DOWNLOAD_DIR/backup-guac.sh -sed -i "s|GUAC_DB=|GUAC_DB='${GUAC_DB}'|g" $DOWNLOAD_DIR/backup-guac.sh -sed -i "s|DB_BACKUP_DIR=|DB_BACKUP_DIR='${DB_BACKUP_DIR}'|g" $DOWNLOAD_DIR/backup-guac.sh -sed -i "s|BACKUP_EMAIL=|BACKUP_EMAIL='${BACKUP_EMAIL}'|g" $DOWNLOAD_DIR/backup-guac.sh -sed -i "s|BACKUP_RETENTION=|BACKUP_RETENTION='${BACKUP_RETENTION}'|g" $DOWNLOAD_DIR/backup-guac.sh +sed -i "s|MYSQL_HOST=|MYSQL_HOST='${MYSQL_HOST}'|g" $DOWNLOAD_DIR/backup-guacamole.sh +sed -i "s|MYSQL_PORT=|MYSQL_PORT='${MYSQL_PORT}'|g" $DOWNLOAD_DIR/backup-guacamole.sh +sed -i "s|GUAC_USER=|GUAC_USER='${GUAC_USER}'|g" $DOWNLOAD_DIR/backup-guacamole.sh +sed -i "s|GUAC_PWD=|GUAC_PWD='${GUAC_PWD}'|g" $DOWNLOAD_DIR/backup-guacamole.sh +sed -i "s|GUAC_DB=|GUAC_DB='${GUAC_DB}'|g" $DOWNLOAD_DIR/backup-guacamole.sh +sed -i "s|DB_BACKUP_DIR=|DB_BACKUP_DIR='${DB_BACKUP_DIR}'|g" $DOWNLOAD_DIR/backup-guacamole.sh +sed -i "s|BACKUP_EMAIL=|BACKUP_EMAIL='${BACKUP_EMAIL}'|g" $DOWNLOAD_DIR/backup-guacamole.sh +sed -i "s|BACKUP_RETENTION=|BACKUP_RETENTION='${BACKUP_RETENTION}'|g" $DOWNLOAD_DIR/backup-guacamole.sh sed -i "s|CERT_COUNTRY=|CERT_COUNTRY='${CERT_COUNTRY}'|g" $DOWNLOAD_DIR/add-tls-guac-daemon.sh sed -i "s|CERT_STATE=|CERT_STATE='${CERT_STATE}'|g" $DOWNLOAD_DIR/add-tls-guac-daemon.sh @@ -684,13 +684,17 @@ sed -i "s|CERT_ORG=|CERT_ORG='${CERT_ORG}'|g" $DOWNLOAD_DIR/add-tls-guac-daemon. sed -i "s|CERT_OU=|CERT_OU='${CERT_OU}'|g" $DOWNLOAD_DIR/add-tls-guac-daemon.sh sed -i "s|CERT_DAYS=|CERT_DAYS='${CERT_DAYS}'|g" $DOWNLOAD_DIR/add-tls-guac-daemon.sh -sed -i "s|INSTALL_MYSQL=|INSTALL_MYSQL='${INSTALL_MYSQL}'|g" $DOWNLOAD_DIR/upgrade-guac.sh -sed -i "s|MYSQL_HOST=|MYSQL_HOST='${MYSQL_HOST}'|g" $DOWNLOAD_DIR/upgrade-guac.sh -sed -i "s|MYSQL_PORT=|MYSQL_PORT='${MYSQL_PORT}'|g" $DOWNLOAD_DIR/upgrade-guac.sh -sed -i "s|GUAC_DB=|GUAC_DB='${GUAC_DB}'|g" $DOWNLOAD_DIR/upgrade-guac.sh -sed -i "s|MYSQL_ROOT_PWD=|MYSQL_ROOT_PWD='${MYSQL_ROOT_PWD}'|g" $DOWNLOAD_DIR/upgrade-guac.sh -sed -i "s|GUAC_USER=|GUAC_USER='${GUAC_USER}'|g" $DOWNLOAD_DIR/upgrade-guac.sh -sed -i "s|GUAC_PWD=|GUAC_PWD='${GUAC_PWD}'|g" $DOWNLOAD_DIR/upgrade-guac.sh +sed -i "s|INSTALL_MYSQL=|INSTALL_MYSQL='${INSTALL_MYSQL}'|g" $DOWNLOAD_DIR/upgrade-guacamole.sh +sed -i "s|MYSQL_HOST=|MYSQL_HOST='${MYSQL_HOST}'|g" $DOWNLOAD_DIR/upgrade-guacamole.sh +sed -i "s|MYSQL_PORT=|MYSQL_PORT='${MYSQL_PORT}'|g" $DOWNLOAD_DIR/upgrade-guacamole.sh +sed -i "s|GUAC_DB=|GUAC_DB='${GUAC_DB}'|g" $DOWNLOAD_DIR/upgrade-guacamole.sh +sed -i "s|MYSQL_ROOT_PWD=|MYSQL_ROOT_PWD='${MYSQL_ROOT_PWD}'|g" $DOWNLOAD_DIR/upgrade-guacamole.sh +sed -i "s|GUAC_USER=|GUAC_USER='${GUAC_USER}'|g" $DOWNLOAD_DIR/upgrade-guacamole.sh +sed -i "s|GUAC_PWD=|GUAC_PWD='${GUAC_PWD}'|g" $DOWNLOAD_DIR/upgrade-guacamole.sh + +sed -i "s|RDP_SHARE_HOST=|RDP_SHARE_HOST='${RDP_SHARE_HOST}'|g" $DOWNLOAD_DIR/upgrade-guacamole.sh +sed -i "s|RDP_SHARE_LABEL=|RDP_SHARE_LABEL='${RDP_SHARE_LABEL}'|g" $DOWNLOAD_DIR/upgrade-guacamole.sh +sed -i "s|RDP_PRINTER_LABEL=|RDP_PRINTER_LABEL='${RDP_PRINTER_LABEL}'|g" $DOWNLOAD_DIR/upgrade-guacamole.sh sed -i "s|PROXY_SITE=|PROXY_SITE='${PROXY_SITE}'|g" $DOWNLOAD_DIR/3-install-nginx.sh sed -i "s|INSTALL_LOG=|INSTALL_LOG='${INSTALL_LOG}'|g" $DOWNLOAD_DIR/3-install-nginx.sh @@ -791,12 +795,12 @@ else fi # Add a Guacamole database backup (Mon-Fri 12:00am) into the current user's cron -mv $DOWNLOAD_DIR/backup-guac.sh $DB_BACKUP_DIR +mv $DOWNLOAD_DIR/backup-guacamole.sh $DB_BACKUP_DIR crontab -l >cron_1 # Remove any pre-existing entry just in case sed -i '/# backup guacamole/d' cron_1 # Create the backup job -echo "0 0 * * 1-5 ${DB_BACKUP_DIR}/backup-guac.sh # backup guacamole" >>cron_1 +echo "0 0 * * 1-5 ${DB_BACKUP_DIR}/backup-guacamole.sh # backup guacamole" >>cron_1 # Overwrite the old cron settings and cleanup crontab cron_1 rm cron_1 @@ -839,7 +843,7 @@ fi # Tidy up echo -echo -e "${GREY}Removing build-essential packages..." +echo -e "${GREY}Removing build-essential package & cleaning up..." mv $USER_HOME_DIR/1-setup.sh $DOWNLOAD_DIR sudo apt remove -y build-essential &>>${INSTALL_LOG} # Lets not leave build resources installed on a secure system sudo apt-get -y autoremove &>>${INSTALL_LOG} diff --git a/README.md b/README.md index 2f7d418..b6816f7 100644 --- a/README.md +++ b/README.md @@ -55,7 +55,7 @@ wget https://raw.githubusercontent.com/itiligent/Guacamole-Install/main/1-setup. **Other useful custom install notes:** - **Caution:** Re-running the auto-installer re-downloads the suite of scripts and this will overwrite your script edits. Run setup locally after editing the setup script. If any other scripts are edited, their corresponding download links in the setup script must also be commented out in the main setup script. -- Many scripts are **automatically adjusted with your chosen installation settings at 1st install** to create a matched set that allows for application upgrades or extra feature additions in future without fiddly configuration tasks. +- Many scripts are **automatically adjusted with your chosen installation settings at 1st install** to create a matched set that allows for future upgrades or extra feature additions and a consistent build. - Nginx reverse proxy is configured to default to at least TLS 1.2. To revert, see commented sections of the `/etc/nginx/nginx.conf` file after install. - A daily MySQL backup job is automatically configured under the script owner's crontab. - **Security note:** The Quick Connect option brings some extra security implications, be aware of potential risks in your environment. @@ -86,7 +86,7 @@ TOMCAT=$(ls /etc/ | grep tomcat) && sudo systemctl restart ${TOMCAT} && sudo sys ## Upgrading Guacamole -🌐 **To upgrade Guacamole, edit `upgrade-guac.sh` to reflect the latest versions of Guacamole & MySQL connector/J before running.** This script will also automatically update TOTP, DUO, LDAP, Quick Connect, and History Recorded Storage extensions if present. +🌐 **To upgrade Guacamole, edit `upgrade-guacamole.sh` to reflect the latest versions of Guacamole & MySQL connector/J before running.** This script will also automatically update TOTP, DUO, LDAP, Quick Connect, and History Recorded Storage extensions if present. ## High Availability Deployment @@ -114,7 +114,7 @@ TOMCAT=$(ls /etc/ | grep tomcat) && sudo systemctl restart ${TOMCAT} && sudo sys - `add-tls-guac-daemon.sh`: Wraps internal traffic between guacd server & Guacamole web app in TLS. - `add-fail2ban.sh`: Fail2ban (& Guacamole protection policy) installer script. - `backup-guacamole.sh`: MySQL backup setup script. -- `upgrade-guac.sh`: Guacamole application, extension, and MySQL connector upgrade script. +- `upgrade-guacamole.sh`: Guacamole application, extension, and MySQL connector upgrade script. - `branding.jar`: Base template for customizing Guacamole's UI theme. 😄🥑 diff --git a/guac-management/backup-guac.sh b/guac-management/backup-guacamole.sh similarity index 100% rename from guac-management/backup-guac.sh rename to guac-management/backup-guacamole.sh diff --git a/upgrade-guac.sh b/upgrade-guacamole.sh similarity index 96% rename from upgrade-guac.sh rename to upgrade-guacamole.sh index 321d629..3eb2fe4 100644 --- a/upgrade-guac.sh +++ b/upgrade-guacamole.sh @@ -75,6 +75,9 @@ GUAC_USER= GUAC_PWD= GUAC_DB= MYSQL_ROOT_PWD= +RDP_SHARE_HOST= +RDP_SHARE_LABEL= +RDP_PRINTER_LABEL= # Standardise on a distro version identification lexicon source /etc/os-release @@ -82,7 +85,6 @@ ID=$ID VERSION_ID=$VERSION_ID VERSION_CODENAME=$VERSION_CODENAME - # Workaround for issue #31 if [[ "${ID,,}" = "debian" && "${VERSION_CODENAME,,}" = *"bullseye"* ]] || [[ "${ID,,}" = "ubuntu" && "${VERSION_CODENAME,,}" = *"focal"* ]]; then IFS='.' read -ra guac_version_parts <<< "${GUAC_VERSION}" @@ -168,6 +170,11 @@ else fi echo -e "${LGREEN}Downloaded guacamole-server-${NEW_GUAC_VERSION}.tar.gz${GREY}" +# Add customised RDP share names and printer labels, remove Guacamole default labelling +sed -i -e 's/IDX_CLIENT_NAME, "Guacamole RDP"/IDX_CLIENT_NAME, "'"${RDP_SHARE_HOST}"'"/' ${DOWNLOAD_DIR}/guacamole-server-${NEW_GUAC_VERSION}/src/protocols/rdp/settings.c +sed -i -e 's/IDX_DRIVE_NAME, "Guacamole Filesystem"/IDX_DRIVE_NAME, "'"${RDP_SHARE_LABEL}"'"/' ${DOWNLOAD_DIR}/guacamole-server-${NEW_GUAC_VERSION}/src/protocols/rdp/settings.c +sed -i -e 's/IDX_PRINTER_NAME, "Guacamole Printer"/IDX_PRINTER_NAME, "'"${RDP_PRINTER_LABEL}"'"/' ${DOWNLOAD_DIR}/guacamole-server-${NEW_GUAC_VERSION}/src/protocols/rdp/settings.c + # Make and install guacd (Guacamole-Server) cd guacamole-server-${NEW_GUAC_VERSION}/ echo