#!/bin/sh
# Install the rollcall binary on pxe-server. Run as root from this directory.
# Prereqs: PostgreSQL running locally with role+db "rollcall";
#          /etc/rollcall/config.json present (see config.example.json).
set -eu
cd "$(dirname "$0")"
getent passwd rollcall >/dev/null || useradd --system --no-create-home --shell /usr/sbin/nologin --user-group rollcall
install -d -m 0750 -o root -g rollcall /etc/rollcall
install -d /srv/rollcall/image
[ -x ./rollcall ] && install -m 0755 rollcall /usr/local/bin/rollcall
install -m 0644 rollcall.service /etc/systemd/system/
[ -e /etc/rollcall/config.json ] || { echo "write /etc/rollcall/config.json first (see config.example.json)" >&2; exit 1; }
chown root:rollcall /etc/rollcall/config.json && chmod 0640 /etc/rollcall/config.json
# master key is created by the service on first start; the dir must be writable for that
chown rollcall:rollcall /etc/rollcall
# rollcall writes per-MAC pxelinux configs
chgrp rollcall /srv/tftp/pxelinux.cfg && chmod 2775 /srv/tftp/pxelinux.cfg
install -m 0644 /usr/lib/syslinux/modules/bios/poweroff.c32 /srv/tftp/poweroff.c32
sed "s/@AGENT_TOKEN@/$(jq -r .agent_token /etc/rollcall/config.json)/g" pxelinux-default > /srv/tftp/pxelinux.cfg/default && chmod 0644 /srv/tftp/pxelinux.cfg/default
[ -e /srv/tftp/rollcall ] || ln -s /srv/rollcall/image /srv/tftp/rollcall
[ -d /srv/tftp/efi64 ] && ln -sfn ../rollcall /srv/tftp/efi64/rollcall
systemctl daemon-reload
systemctl enable --now rollcall.service
systemctl restart rollcall.service
sleep 1
systemctl --no-pager status rollcall.service | head -5