blob: 1a2b670e49efebbcb61a05594047d26466e28047 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
|
#!/bin/bash
set -e -x
# set to Pacific Time (for @cvrebert)
# ln -sf /usr/share/zoneinfo/America/Los_Angeles /etc/localtime
# remove useless crap
aptitude remove wpasupplicant wireless-tools
aptitude remove pppconfig pppoeconf ppp
# setup firewall
ufw default allow outgoing
ufw default deny incoming
ufw allow ssh
ufw enable
ufw status verbose
# install Node.js
aptitude install build-essential # for native addons
curl -s https://deb.nodesource.com/gpgkey/nodesource.gpg.key | apt-key add -
DISTRO=$(lsb_release -c -s)
echo "deb https://deb.nodesource.com/node_5.x ${DISTRO} main" > /etc/apt/sources.list.d/nodesource.list
echo "deb-src https://deb.nodesource.com/node_5.x ${DISTRO} main" >> /etc/apt/sources.list.d/nodesource.list
aptitude update
aptitude install nodejs
# setup gruntworker itself
apt-get -y --no-install-recommends install openssh-client git python3 python3-dev # other dependencies
npm install -g grunt-cli # dependency
git clone https://github.com/twbs/gruntworker.git ~/gruntworker
cp ~/gruntworker/gruntworker.py /usr/local/bin/
cp ~/gruntworker/gruntworker-*.sh /usr/local/bin/
chmod u=rwx,go=rx /usr/local/bin/gruntworker*
useradd -m gruntworker
# setup SSH keys
su gruntworker # USER: gruntworker
mkdir ~/.ssh
ssh-keyscan -t rsa github.com > ~gruntworker/.ssh/known_hosts
# MANUAL STEP: Put SSH keys in /home/gruntworker/.ssh
chmod -R go-rwx ~/.ssh
# setup git & repo
git clone git@github.com:twbs/bootstrap.git ~/git-repo
cd ~/git-repo
git remote set-url origin https://github.com/twbs/bootstrap.git
git remote set-url --push origin git@github.com:twbs/bootstrap.git
git config core.fileMode false
git config user.name "Bootstrap's Grunt bot"
git config user.email 'twbs-grunt@users.noreply.github.com'
# setup cron
exit # USER: root
cp ~/gruntworker/gruntworker.crontab /etc/cron.d/gruntworker
restart cron # until upstart goes away
|
