#!/bin/bash ###################################################### # Snipe-It Install Script # # Script created by Mike Tucker # # mtucker6784@gmail.com # # This script is just to help streamline the # # install process for Debian and CentOS # # based distributions. I assume you will be # # installing as a subdomain on a fresh OS install. # # Right now I'm not going to worry about SMTP setup # # # # Feel free to modify, but please give # # credit where it's due. Thanks! # ###################################################### # ensure running as root if [ "$(id -u)" != "0" ]; then exec sudo "$0" "$@" fi #First things first, let's set some variables and find our distro. clear name="snipeit" si="Snipe-IT" hostname="$(hostname)" fqdn="$(hostname --fqdn)" ans=default hosts=/etc/hosts file=v3.0-alpha2.zip #CHANGE THIS WHEN MASTER IS V3 AGAIN tmp=/tmp/$name fileName=snipe-it-3.0-alpha2 rm -rf $tmp/ mkdir $tmp function isinstalled { if yum list installed "$@" >/dev/null 2>&1; then true else false fi } if [ -f /etc/lsb-release ]; then distro="$(lsb_release -s -i )" version="$(lsb_release -s -r)" elif [ -f /etc/os-release ]; then distro="$(. /etc/os-release && echo $ID)" version="$(. /etc/os-release && echo $VERSION_ID)" #Order is important here. If /etc/os-release and /etc/centos-release exist, we're on centos 7. #If only /etc/centos-release exist, we're on centos6(or earlier). Centos-release is less parsable, #so lets assume that it's version 6 (Plus, who would be doing a new install of anything on centos5 at this point..) elif [ -f /etc/centos-release]; then distro="Centos" version="6" else distro="unsupported" fi echo " _____ _ __________ / ___/____ (_)___ ___ / _/_ __/ \__ \/ __ \/ / __ \/ _ \______ / / / / ___/ / / / / / /_/ / __/_____// / / / /____/_/ /_/_/ .___/\___/ /___/ /_/ /_/ " echo "" echo "" echo " Welcome to Snipe-IT Inventory Installer for Centos and Debian!" echo "" shopt -s nocasematch case $distro in *Ubuntu*) echo " The installer has detected Ubuntu version $version as the OS." distro=ubuntu ;; *Debian*) echo " The installer has detected Debian version $version as the OS." distro=debian ;; *centos*|*redhat*) echo " The installer has detected $distro version $version as the OS." distro=centos ;; *) echo " The installer was unable to determine your OS. Exiting for safety." exit ;; esac shopt -u nocasematch #Get your FQDN. echo -n " Q. What is the FQDN of your server? ($fqdn): " read fqdn if [ -z "$fqdn" ]; then fqdn="$(hostname --fqdn)" fi echo " Setting to $fqdn" echo "" #Do you want to set your own passwords, or have me generate random ones? until [[ $ans == "yes" ]] || [[ $ans == "no" ]]; do echo -n " Q. Do you want me to automatically create the snipe database user password? (y/n) " read setpw case $setpw in [yY] | [yY][Ee][Ss] ) mysqluserpw="$(echo `< /dev/urandom tr -dc _A-Za-z-0-9 | head -c16`)" ans="yes" ;; [nN] | [n|N][O|o] ) echo -n " Q. What do you want your snipeit user password to be?" read -s mysqluserpw echo "" ans="no" ;; *) echo " Invalid answer. Please type y or n" ;; esac done #Snipe says we need a new 32bit key, so let's create one randomly and inject it into the file random32="$(echo `< /dev/urandom tr -dc _A-Za-z-0-9 | head -c32`)" #db_setup.sql will be injected to the database during install. #Again, this file should be removed, which will be a prompt at the end of the script. dbsetup=$tmp/db_setup.sql echo >> $dbsetup "CREATE DATABASE snipeit;" echo >> $dbsetup "GRANT ALL PRIVILEGES ON snipeit.* TO snipeit@localhost IDENTIFIED BY '$mysqluserpw';" #Let us make it so only root can read the file. Again, this isn't best practice, so please remove these after the install. chown root:root $dbsetup chmod 700 $dbsetup ## TODO: Progress tracker on each step case $distro in debian) ##################################### Install for Debian ############################################## webdir=/var/www #Update/upgrade Debian repositories. echo "" echo "## Updating Debian packages in the background. Please be patient." echo "" apachefile=/etc/apache2/sites-available/$name.conf sudo apt-get update >> /var/log/snipeit-install.log 2>&1 sudo apt-get -y upgrade >> /var/log/snipeit-install.log 2>&1 echo "## Installing packages." sudo apt-get -y install mariadb-server mariadb-client echo "## Going to suppress more messages that you don't need to worry about. Please wait." sudo apt-get -y install apache2 >> /var/log/snipeit-install.log 2>&1 sudo apt-get install -y git unzip php5 php5-mcrypt php5-curl php5-mysql php5-gd php5-ldap libapache2-mod-php5 curl >> /var/log/snipeit-install.log 2>&1 # Get files and extract to web dir echo "" echo "## Downloading snipeit and extract to web directory." wget -P $tmp/ https://github.com/snipe/snipe-it/archive/$file >> /var/log/snipeit-install.log 2>&1 unzip -qo $tmp/$file -d $tmp/ cp -R $tmp/$fileName $webdir/$name ## TODO make sure apache is set to start on boot and go ahead and start it #Enable mcrypt and rewrite echo "## Enabling mcrypt and rewrite" sudo php5enmod mcrypt >> /var/log/snipeit-install.log 2>&1 sudo a2enmod rewrite >> /var/log/snipeit-install.log 2>&1 #Create a new virtual host for Apache. echo "## Create Virtual host for apache." echo >> $apachefile "" echo >> $apachefile "" echo >> $apachefile "" echo >> $apachefile "ServerAdmin webmaster@localhost" echo >> $apachefile " " echo >> $apachefile " Require all granted" echo >> $apachefile " AllowOverride All" echo >> $apachefile " " echo >> $apachefile " DocumentRoot $webdir/$name/public" echo >> $apachefile " ServerName $fqdn" echo >> $apachefile " ErrorLog /var/log/apache2/snipeIT.error.log" echo >> $apachefile " CustomLog /var/log/apache2/access.log combined" echo >> $apachefile "" echo "## Configuring .env file." cat > $webdir/$name/.env <<-EOF #Created By Snipe-it Installer APP_TIMEZONE=$(cat /etc/timezone) DB_HOST=localhost DB_DATABASE=snipeit DB_USERNAME=snipeit DB_PASSWORD=$mysqluserpw APP_URL=http://$fqdn APP_KEY=$random32 EOF echo "## Setting up hosts file." echo >> $hosts "127.0.0.1 $hostname $fqdn" a2ensite $name.conf >> /var/log/snipeit-install.log 2>&1 #Modify the Snipe-It files necessary for a production environment. echo "## Modify the Snipe-It files necessary for a production environment." echo "## Securing Mysql" # Have user set own root password when securing install # and just set the snipeit database user at the beginning /usr/bin/mysql_secure_installation ## TODO make sure mysql is set to start on boot and go ahead and start it echo "Creating Mysql Database and User." echo "## Please Input your MySQL/MariaDB root password: " echo "" mysql -u root -p < $dbsetup echo "" #Install / configure composer echo "## Installing and configuring composer" cd $webdir/$name/ curl -sS https://getcomposer.org/installer | php php composer.phar install --no-dev --prefer-source #Change permissions on directories echo "## Seting permissions on web directory." sudo chmod -R 755 $webdir/$name/storage sudo chmod -R 755 $webdir/$name/storage/private_uploads sudo chmod -R 755 $webdir/$name/public/uploads sudo chown -R www-data:www-data /var/www/ # echo "## Finished permission changes." echo "## Restarting apache." service apache2 restart ;; ubuntu) ##################################### Install for Ubuntu ############################################## webdir=/var/www #Update/upgrade Debian/Ubuntu repositories, get the latest version of git. echo "" echo "## Updating ubuntu in the background. Please be patient." echo "" apachefile=/etc/apache2/sites-available/$name.conf sudo apt-get update >> /var/log/snipeit-install.log 2>&1 sudo apt-get -y upgrade >> /var/log/snipeit-install.log 2>&1 echo "## Installing packages." #We already established MySQL root & user PWs, so we dont need to be prompted. Let's go ahead and install Apache, PHP and MySQL. echo "## Setting up LAMP." sudo DEBIAN_FRONTEND=noninteractive apt-get install -y lamp-server^ >> /var/log/snipeit-install.log 2>&1 if [ "$version" == "16.04" ]; then sudo apt-get install -y git unzip php php-mcrypt php-curl php-mysql php-gd php-ldap php-mbstring >> /var/log/snipeit-install.log 2>&1 #Enable mcrypt and rewrite echo "## Enabling mcrypt and rewrite" sudo phpenmod mcrypt >> /var/log/snipeit-install.log 2>&1 sudo phpenmod mbstring >> /var/log/snipeit-install 2>&1 sudo a2enmod rewrite >> /var/log/snipeit-install.log 2>&1 else sudo apt-get install -y git unzip php5 php5-mcrypt php5-curl php5-mysql php5-gd php5-ldap >> /var/log/snipeit-install.log 2>&1 #Enable mcrypt and rewrite echo "## Enabling mcrypt and rewrite" sudo php5enmod mcrypt >> /var/log/snipeit-install.log 2>&1 sudo a2enmod rewrite >> /var/log/snipeit-install.log 2>&1 fi # Get files and extract to web dir echo "" echo "## Downloading snipeit and extract to web directory." wget -P $tmp/ https://github.com/snipe/snipe-it/archive/$file >> /var/log/snipeit-install.log 2>&1 unzip -qo $tmp/$file -d $tmp/ cp -R $tmp/$fileName $webdir/$name ## TODO make sure apache is set to start on boot and go ahead and start it sudo ls -al /etc/apache2/mods-enabled/rewrite.load >> /var/log/snipeit-install.log 2>&1 #Create a new virtual host for Apache. echo "## Create Virtual host for apache." echo >> $apachefile "" echo >> $apachefile "" echo >> $apachefile "" echo >> $apachefile "ServerAdmin webmaster@localhost" echo >> $apachefile " " echo >> $apachefile " Require all granted" echo >> $apachefile " AllowOverride All" echo >> $apachefile " " echo >> $apachefile " DocumentRoot $webdir/$name/public" echo >> $apachefile " ServerName $fqdn" echo >> $apachefile " ErrorLog /var/log/apache2/snipeIT.error.log" echo >> $apachefile " CustomLog /var/log/apache2/access.log combined" echo >> $apachefile "" echo "## Setting up hosts file." echo >> $hosts "127.0.0.1 $hostname $fqdn" a2ensite $name.conf >> /var/log/snipeit-install.log 2>&1 cat > $webdir/$name/.env <<-EOF #Created By Snipe-it Installer APP_TIMEZONE=$(cat /etc/timezone) DB_HOST=localhost DB_DATABASE=snipeit DB_USERNAME=snipeit DB_PASSWORD=$mysqluserpw APP_URL=http://$fqdn APP_KEY=$random32 EOF ## TODO make sure mysql is set to start on boot and go ahead and start it # Setup Mysql, then run the command. /usr/bin/mysql_secure_installation echo "## Creating MySQL Database and user. " echo "## Please Input your MySQL/MariaDB root password: " mysql -u root -p < $dbsetup echo "## Securing Mysql" # Have user set own root password when securing install # and just set the snipeit database user at the beginning #Install / configure composer echo "## Installing and configuring composer" cd $webdir/$name/ curl -sS https://getcomposer.org/installer | php php composer.phar install --no-dev --prefer-source #Change permissions on directories echo "## Seting permissions on web directory." sudo chmod -R 755 $webdir/$name/storage sudo chmod -R 755 $webdir/$name/storage/private_uploads sudo chmod -R 755 $webdir/$name/public/uploads sudo chown -R www-data:www-data /var/www/$name # echo "## Finished permission changes." echo "## Restarting apache." service apache2 restart ;; centos ) if [ "$version" == "6" ]; then ##################################### Install for Centos/Redhat 6 ############################################## webdir=/var/www/html ##TODO make sure the repo doesnt exhist isnt already in there #Allow us to get the mysql engine echo "" echo "## Adding IUS, epel-release and mariaDB repos."; mariadbRepo=/etc/yum.repos.d/MariaDB.repo touch $mariadbRepo echo >> $mariadbRepo "[mariadb]" echo >> $mariadbRepo "name = MariaDB" echo >> $mariadbRepo "baseurl = http://yum.mariadb.org/10.0/centos6-amd64" echo >> $mariadbRepo "gpgkey=https://yum.mariadb.org/RPM-GPG-KEY-MariaDB" echo >> $mariadbRepo "gpgcheck=1" echo >> $mariadbRepo "enable=1" yum -y install wget epel-release >> /var/log/snipeit-install.log 2>&1 wget -P $tmp/ https://centos6.iuscommunity.org/ius-release.rpm >> /var/log/snipeit-install.log 2>&1 rpm -Uvh $tmp/ius-release*.rpm >> /var/log/snipeit-install.log 2>&1 #Install PHP and other needed stuff. echo "## Installing PHP and other needed stuff"; PACKAGES="httpd MariaDB-server git unzip php56u php56u-mysqlnd php56u-bcmath php56u-cli php56u-common php56u-embedded php56u-gd php56u-mbstring php56u-mcrypt php56u-ldap" for p in $PACKAGES;do if isinstalled $p;then echo " ##" $p "Installed" else echo -n " ##" $p "Installing... " yum -y install $p >> /var/log/snipeit-install.log 2>&1 echo ""; fi done; echo "" echo "## Downloading Snipe-IT from github and putting it in the web directory."; wget -P $tmp/ https://github.com/snipe/snipe-it/archive/$file >> /var/log/snipeit-install.log 2>&1 unzip -qo $tmp/$file -d $tmp/ cp -R $tmp/$fileName $webdir/$name # Make mariaDB start on boot and restart the daemon echo "## Starting the mariaDB server."; chkconfig mysql on /sbin/service mysql start echo "## Securing mariaDB server."; /usr/bin/mysql_secure_installation echo "## Creating MySQL Database/User." echo "## Please Input your MySQL/MariaDB root password: " mysql -u root -p < $dbsetup ##TODO make sure the apachefile doesnt exhist isnt already in there #Create the new virtual host in Apache and enable rewrite echo "## Creating the new virtual host in Apache."; apachefile=/etc/httpd/conf.d/$name.conf echo >> $apachefile "" echo >> $apachefile "" echo >> $apachefile "" echo >> $apachefile "" echo >> $apachefile "ServerAdmin webmaster@localhost" echo >> $apachefile " " echo >> $apachefile " Allow From All" echo >> $apachefile " AllowOverride All" echo >> $apachefile " Options +Indexes" echo >> $apachefile " " echo >> $apachefile " DocumentRoot $webdir/$name/public" echo >> $apachefile " ServerName $fqdn" echo >> $apachefile " ErrorLog /var/log/httpd/snipeIT.error.log" echo >> $apachefile " CustomLog /var/log/access.log combined" echo >> $apachefile "" ##TODO make sure hosts file doesnt already contain this info echo "## Setting up hosts file."; echo >> $hosts "127.0.0.1 $hostname $fqdn" # Make apache start on boot and restart the daemon echo "## Starting the apache server."; chkconfig httpd on /sbin/service httpd start tzone=$(grep ZONE /etc/sysconfig/clock | tr -d '"' | sed 's/ZONE=//g'); echo "## Configuring .env file." cat > $webdir/$name/.env <<-EOF #Created By Snipe-it Installer APP_TIMEZONE=$tzone DB_HOST=localhost DB_DATABASE=snipeit DB_USERNAME=snipeit DB_PASSWORD=$mysqluserpw APP_URL=http://$fqdn APP_KEY=$random32 EOF #Install / configure composer echo "## Configure composer" cd $webdir/$name curl -sS https://getcomposer.org/installer | php php composer.phar install --no-dev --prefer-source # Change permissions on directories sudo chmod -R 755 $webdir/$name/storage sudo chmod -R 755 $webdir/$name/public/uploads sudo chown -R apache:apache $webdir/$name #TODO detect if SELinux and firewall are enabled to decide what to do #Add SELinux and firewall exception/rules. Youll have to allow 443 if you want ssl connectivity. # chcon -R -h -t httpd_sys_script_rw_t $webdir/$name/ # firewall-cmd --zone=public --add-port=80/tcp --permanent # firewall-cmd --reload service httpd restart elif [ "$version" == "7" ]; then ##################################### Install for Centos/Redhat 7 ############################################## webdir=/var/www/html #Allow us to get the mysql engine echo "" echo "## Add IUS, epel-release and mariaDB repos."; yum -y install wget epel-release >> /var/log/snipeit-install.log 2>&1 wget -P $tmp/ https://centos7.iuscommunity.org/ius-release.rpm >> /var/log/snipeit-install.log 2>&1 rpm -Uvh $tmp/ius-release*.rpm >> /var/log/snipeit-install.log 2>&1 #Install PHP and other needed stuff. echo "## Installing PHP and other needed stuff"; PACKAGES="httpd mariadb-server git unzip php56u php56u-mysqlnd php56u-bcmath php56u-cli php56u-common php56u-embedded php56u-gd php56u-mbstring php56u-mcrypt php56u-ldap" for p in $PACKAGES;do if isinstalled $p;then echo " ##" $p "Installed" else echo -n " ##" $p "Installing... " yum -y install $p >> /var/log/snipeit-install.log 2>&1 echo ""; fi done; echo "" echo "## Downloading Snipe-IT from github and put it in the web directory."; wget -P $tmp/ https://github.com/snipe/snipe-it/archive/$file >> /var/log/snipeit-install.log 2>&1 unzip -qo $tmp/$file -d $tmp/ cp -R $tmp/$fileName $webdir/$name # Make mariaDB start on boot and restart the daemon echo "## Starting the mariaDB server."; systemctl enable mariadb.service systemctl start mariadb.service echo "## Securing mariaDB server."; echo ""; echo ""; /usr/bin/mysql_secure_installation echo "## Creating MySQL Database/User." echo "## Please Input your MySQL/MariaDB root password " mysql -u root -p < $dbsetup ##TODO make sure the apachefile doesnt exhist isnt already in there #Create the new virtual host in Apache and enable rewrite apachefile=/etc/httpd/conf.d/$name.conf echo "## Creating the new virtual host in Apache."; echo >> $apachefile "" echo >> $apachefile "" echo >> $apachefile "LoadModule rewrite_module modules/mod_rewrite.so" echo >> $apachefile "" echo >> $apachefile "" echo >> $apachefile "ServerAdmin webmaster@localhost" echo >> $apachefile " " echo >> $apachefile " Allow From All" echo >> $apachefile " AllowOverride All" echo >> $apachefile " Options +Indexes" echo >> $apachefile " " echo >> $apachefile " DocumentRoot $webdir/$name/public" echo >> $apachefile " ServerName $fqdn" echo >> $apachefile " ErrorLog /var/log/httpd/snipeIT.error.log" echo >> $apachefile " CustomLog /var/log/access.log combined" echo >> $apachefile "" ##TODO make sure this isnt already in there echo "## Setting up hosts file."; echo >> $hosts "127.0.0.1 $hostname $fqdn" echo "## Starting the apache server."; # Make apache start on boot and restart the daemon systemctl enable httpd.service systemctl restart httpd.service tzone=$(timedatectl | gawk -F'[: ]' ' $9 ~ /zone/ {print $11}'); echo "## Configuring .env file." cat > $webdir/$name/.env <<-EOF #Created By Snipe-it Installer APP_TIMEZONE=$tzone DB_HOST=localhost DB_DATABASE=snipeit DB_USERNAME=snipeit DB_PASSWORD=$mysqluserpw APP_URL=http://$fqdn APP_KEY=$random32 EOF # Change permissions on directories #Install / configure composer cd $webdir/$name curl -sS https://getcomposer.org/installer | php php composer.phar install --no-dev --prefer-source sudo chmod -R 755 $webdir/$name/storage sudo chmod -R 755 $webdir/$name/storage/private_uploads sudo chmod -R 755 $webdir/$name/public/uploads sudo chown -R apache:apache $webdir/$name # Make SeLinux happy sudo chcon -R -h -t httpd_sys_script_rw_t $webdir/$name/ #TODO detect if SELinux and firewall are enabled to decide what to do #Add SELinux and firewall exception/rules. Youll have to allow 443 if you want ssl connectivity. # chcon -R -h -t httpd_sys_script_rw_t $webdir/$name/ # firewall-cmd --zone=public --add-port=80/tcp --permanent # firewall-cmd --reload systemctl restart httpd.service else echo "Unable to Handle Centos Version #. Version Found: " $version return 1 fi esac echo "" echo " ***If you want mail capabilities, edit $webdir/$name/.env and edit based on .env.example***" echo "" echo " ***Open http://$fqdn to login to Snipe-IT.***" echo "" echo "" echo "## Cleaning up..." rm -f snipeit.sh rm -f install.sh rm -rf $tmp/ echo "## Done!" sleep 1