Refactor openFirewall() and add support for x11vnc/vncserver
This commit is contained in:
59
installJRMC
59
installJRMC
@@ -900,11 +900,14 @@ EOF"
|
||||
|
||||
|
||||
#######################################
|
||||
# Open the default JRiver Media Center ports using the system firewall tool
|
||||
# Opens ports using the system firewall tool
|
||||
# Arguments
|
||||
# Takes one argument, the pre-specified name of the service to enable
|
||||
# Requires:
|
||||
# ID
|
||||
# _bash_cmd
|
||||
# _firewall_cmd
|
||||
# _port
|
||||
# Returns:
|
||||
# 0 if ports opened sucessfully, 1 if not
|
||||
#######################################
|
||||
@@ -912,26 +915,40 @@ EOF"
|
||||
|
||||
_runDebug "${FUNCNAME[0]}"
|
||||
|
||||
# Create OS-specific port rules based on argument (service) name
|
||||
local -a _f_ports # for firewall_cmd
|
||||
local _u_ports # for ufw
|
||||
if [[ "$1" == "jriver" ]]; then
|
||||
_f_ports=("52100-52200/tcp" "1900/udp")
|
||||
_u_ports="52100:52200/tcp|1900/udp"
|
||||
elif [[ "$1" =~ ^(x11vnc|vncserver)$ ]]; then
|
||||
_f_ports=("$_port/tcp")
|
||||
_u_ports="$_port/tcp"
|
||||
fi
|
||||
|
||||
# Open the ports
|
||||
if [[ "$ID" =~ ^(fedora|centos)$ ]] && [[ -x $(command -v firewall-cmd) ]]; then
|
||||
if ! firewall-cmd --get-services | grep -q jriver; then
|
||||
_firewall_cmd --permanent --new-service=jriver > /dev/null 2>&1
|
||||
_firewall_cmd --permanent --service=jriver --set-description="JRiver Media Center Media Server" > /dev/null 2>&1
|
||||
_firewall_cmd --permanent --service=jriver --set-short="jriver" > /dev/null 2>&1
|
||||
_firewall_cmd --permanent --service=jriver --add-port=52100-52200/tcp > /dev/null 2>&1
|
||||
_firewall_cmd --permanent --service=jriver --add-port=1900/udp > /dev/null 2>&1
|
||||
_firewall-cmd --add-service jriver --permanent > /dev/null 2>&1
|
||||
if ! _firewall_cmd --get-services | grep -q "$1"; then
|
||||
_firewall_cmd --permanent --new-service="$1" > /dev/null 2>&1
|
||||
_firewall_cmd --permanent --service="$1" --set-description="$1 installed by installJRMC" > /dev/null 2>&1
|
||||
_firewall_cmd --permanent --service="$1" --set-short="$1" > /dev/null 2>&1
|
||||
for _f_port in "${_f_ports[@]}"; do
|
||||
_firewall_cmd --permanent --service="$1" --add-port="$_f_port" > /dev/null 2>&1
|
||||
done
|
||||
_firewall-cmd --add-service "$1" --permanent > /dev/null 2>&1
|
||||
_firewall_cmd --reload > /dev/null 2>&1
|
||||
fi
|
||||
elif [[ "$ID" =~ ^(ubuntu|debian)$ ]] && [[ -x $(command -v ufw) ]]; then
|
||||
if [[ ! -f "/etc/ufw/applications.d/jriver.service" ]]; then
|
||||
_bash_cmd "cat <<-EOF > /etc/ufw/applications.d/jriver.service
|
||||
[jriver]
|
||||
title=JRiver Media Center
|
||||
description=Allows JRiver Media Server access
|
||||
ports=52100:52200/tcp|1900/udp
|
||||
if [[ ! -f "/etc/ufw/applications.d/$1.service" ]]; then
|
||||
_bash_cmd "cat <<-EOF > /etc/ufw/applications.d/$1.service
|
||||
[$1]
|
||||
title=$1
|
||||
description=$1 installed by installJRMC
|
||||
ports=$_u_ports
|
||||
EOF"
|
||||
fi
|
||||
_firewall_cmd allow jriver > /dev/null 2>&1
|
||||
_firewall_cmd app update "$1"
|
||||
_firewall_cmd allow "$1" > /dev/null 2>&1
|
||||
fi
|
||||
|
||||
# shellcheck disable=SC2181
|
||||
@@ -1127,8 +1144,7 @@ EOF"
|
||||
fi
|
||||
fi
|
||||
|
||||
# Alert user to the likely vnc port
|
||||
local _port=$(( ${_display#:} + 5900 ))
|
||||
declare -g _port=$(( ${_display#:} + 5900 ))
|
||||
|
||||
_bash_cmd "cat <<-EOF > $_service_fname
|
||||
[Unit]
|
||||
@@ -1162,6 +1178,8 @@ EOF"
|
||||
|
||||
[[ -z $_display ]] && _display="${DISPLAY:-":0"}"
|
||||
|
||||
declare -g _port=$(( ${_display#:} + 5900 ))
|
||||
|
||||
# Get current desktop resolution
|
||||
# TODO: may need to break this out into its own function and get smarter at identifying multi-monitors
|
||||
local _res
|
||||
@@ -1192,6 +1210,7 @@ EOF"
|
||||
_systemctl_reload && \
|
||||
_systemctl_start "$_service_name" && \
|
||||
_systemctl_enable "$_service_name"
|
||||
echo "x11vnc running on localhost:$_port"
|
||||
}
|
||||
|
||||
|
||||
@@ -1322,7 +1341,7 @@ EOF"
|
||||
_installMCFromRepo
|
||||
_symlinkCerts
|
||||
_restoreLicense
|
||||
_openFirewall
|
||||
_openFirewall "jriver"
|
||||
fi
|
||||
|
||||
# Build RPM from source DEB
|
||||
@@ -1343,7 +1362,7 @@ EOF"
|
||||
_installPackage --noquery "$_mcrpm"
|
||||
_symlinkCerts
|
||||
_restoreLicense
|
||||
_openFirewall
|
||||
_openFirewall "jriver"
|
||||
fi
|
||||
fi
|
||||
|
||||
@@ -1356,6 +1375,7 @@ EOF"
|
||||
;;
|
||||
x11vnc)
|
||||
_serviceX11VNC
|
||||
_openFirewall "x11vnc"
|
||||
;;
|
||||
mediaserver)
|
||||
_serviceMediaserver
|
||||
@@ -1365,6 +1385,7 @@ EOF"
|
||||
;;
|
||||
mediacenter-vncserver)
|
||||
_serviceVNC
|
||||
_openFirewall "vncserver"
|
||||
;;
|
||||
*)
|
||||
esac
|
||||
|
||||
Reference in New Issue
Block a user