You cannot select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
124 lines
3.7 KiB
Bash
124 lines
3.7 KiB
Bash
#!/bin/bash
|
|
set -e
|
|
|
|
USER_UID=${USER_UID:-1000}
|
|
USER_GID=${USER_GID:-1000}
|
|
|
|
BROWSER_BOX_USER=${BROWSER_BOX_USER:-browser}
|
|
BROWSER_BOX_REPO=${BROWSER_BOX_REPO:-sameersbn}
|
|
|
|
install_browser_box() {
|
|
echo "Installing browser-box..."
|
|
install -m 0755 /var/cache/browser-box/browser-box /target/
|
|
echo "Installing google-chrome..."
|
|
ln -sf browser-box /target/google-chrome
|
|
echo "Installing google-chrome-stable..."
|
|
ln -sf browser-box /target/google-chrome-stable
|
|
echo "Installing tor-browser..."
|
|
ln -sf browser-box /target/tor-browser
|
|
echo "Installing chromium-browser..."
|
|
ln -sf browser-box /target/chromium-browser
|
|
echo "Installing firefox..."
|
|
ln -sf browser-box /target/firefox
|
|
echo "Installing url luancher..."
|
|
ln -sf browser-box /target/browser-exec
|
|
if [ "${BROWSER_BOX_USER}" != "browser" ] && [ -n "${BROWSER_BOX_USER}" ]; then
|
|
echo "Updating user to ${BROWSER_BOX_USER}..."
|
|
sed -i -e s%"BROWSER_BOX_USER:-browser"%"BROWSER_BOX_USER:-${BROWSER_BOX_USER}"%1 /target/browser-box
|
|
fi
|
|
if [[ -n "${CHROME_USERDATA}" ]]; then
|
|
echo "Updating Chrome user volume..."
|
|
sed -i -e s%"CHROME_USERDATA=.*$"%"CHROME_USERDATA\=${CHROME_USERDATA}"%1 /target/browser-box
|
|
fi
|
|
if [[ -n "${FIREFOX_USERDATA}" ]]; then
|
|
echo "Updating FireFox user volume..."
|
|
sed -i -e s%"FIREFOX_USERDATA=.*$"%"FIREFOX_USERDATA\=${FIREFOX_USERDATA}"%1 /target/browser-box
|
|
fi
|
|
sed -i -e s%"\(BROWSER_BOX_REPO=\).*$"%"\1${BROWSER_BOX_REPO}"%1 /target/browser-box
|
|
|
|
}
|
|
|
|
uninstall_browser_box() {
|
|
echo "Uninstalling browser-box..."
|
|
rm -rf /target/browser-box
|
|
echo "Uninstalling google-chrome..."
|
|
rm -rf /target/google-chrome
|
|
echo "Uninstalling google-chrome-stable..."
|
|
rm -rf /target/google-chrome-stable
|
|
echo "Uninstalling tor-browser..."
|
|
rm -rf /target/tor-browser
|
|
echo "Uninstalling chromium-browser..."
|
|
rm -rf /target/chromium-browser
|
|
echo "Uninstalling firefox..."
|
|
rm -rf /target/firefox
|
|
echo "Uninstalling url launcher..."
|
|
rm -rf /target/browser-exec
|
|
}
|
|
|
|
create_user() {
|
|
# ensure home directory is owned by browser
|
|
# and that profile files exist
|
|
if [[ -d /home/${BROWSER_BOX_USER} ]]; then
|
|
chown ${USER_UID}:${USER_GID} /home/${BROWSER_BOX_USER}
|
|
# copy user files from /etc/skel
|
|
cp /etc/skel/.bashrc /home/${BROWSER_BOX_USER}
|
|
cp /etc/skel/.bash_logout /home/${BROWSER_BOX_USER}
|
|
cp /etc/skel/.profile /home/${BROWSER_BOX_USER}
|
|
chown ${USER_UID}:${USER_GID} \
|
|
/home/${BROWSER_BOX_USER}/.bashrc \
|
|
/home/${BROWSER_BOX_USER}/.profile \
|
|
/home/${BROWSER_BOX_USER}/.bash_logout
|
|
fi
|
|
# create group with USER_GID
|
|
if ! getent group ${BROWSER_BOX_USER} >/dev/null; then
|
|
groupadd -f -g ${USER_GID} ${BROWSER_BOX_USER} 2> /dev/null
|
|
fi
|
|
|
|
# create user with USER_UID
|
|
if ! getent passwd ${BROWSER_BOX_USER} >/dev/null; then
|
|
adduser --disabled-login --uid ${USER_UID} --gid ${USER_GID} \
|
|
--gecos 'Browser Box' ${BROWSER_BOX_USER}
|
|
fi
|
|
|
|
# fixes issue #7
|
|
chown -R ${BROWSER_BOX_USER}: /usr/lib/tor-browser
|
|
}
|
|
|
|
grant_access_to_video_devices() {
|
|
for device in /dev/video*
|
|
do
|
|
if [[ -c $device ]]; then
|
|
VIDEO_GID=$(stat -c %g $device)
|
|
VIDEO_GROUP=$(stat -c %G $device)
|
|
if [[ ${VIDEO_GROUP} == "UNKNOWN" ]]; then
|
|
VIDEO_GROUP=browser-box-video
|
|
groupadd -g ${VIDEO_GID} ${VIDEO_GROUP}
|
|
fi
|
|
usermod -a -G ${VIDEO_GROUP} ${BROWSER_BOX_USER}
|
|
break
|
|
fi
|
|
done
|
|
}
|
|
|
|
launch_browser() {
|
|
cd /home/${BROWSER_BOX_USER}
|
|
exec sudo -HEu ${BROWSER_BOX_USER} PULSE_SERVER=/run/pulse/native $@ ${extra_opts}
|
|
}
|
|
|
|
case "$1" in
|
|
install)
|
|
install_browser_box
|
|
;;
|
|
uninstall)
|
|
uninstall_browser_box
|
|
;;
|
|
google-chrome|google-chrome-stable|tor-browser|chromium-browser|firefox)
|
|
create_user
|
|
grant_access_to_video_devices
|
|
launch_browser $@
|
|
;;
|
|
*)
|
|
exec $@
|
|
;;
|
|
esac
|