Meshcentral

MeshCentral 是一个完整的主机管理平台。

使用 MeshCentral可以通过 Web来远程管理和控制本地网络或 Internet 上任何地方的计算机。启动服务器后创建设备组并在要管理的每台主机上下载并安装代理。一分钟后，主机会添加到管理平台。

MeshCentral 包括完整的基于 Web 的远程桌面、终端和文件管理功能。

支持在Ubuntu 18+版本安装

#!/usr/bin/env bash

if ! which lsb_release >/dev/null
then
sudo apt-get install -y lsb-core > null
fi

curl -sL https://deb.nodesource.com/setup_16.x | sudo -E bash -  > null
sudo apt-get update  > null
echo "Installing MeshCentral"
sudo apt-get install -y nodejs  > null
sudo npm install -g npm  > null

sudo mkdir -p /opt/meshcentral/meshcentral-data
sudo chown ${USER}:${USER} -R /opt/meshcentral
cd /opt/meshcentral
npm install meshcentral
sudo chown ${USER}:${USER} -R /opt/meshcentral

meshservice="$(cat << EOF
[Unit]
Description=MeshCentral Server
After=network.target
[Service]
Type=simple
LimitNOFILE=1000000
ExecStart=/usr/bin/node node_modules/meshcentral
Environment=NODE_ENV=production
WorkingDirectory=/opt/meshcentral
User=${USER}
Group=${USER}
Restart=always
RestartSec=10s
[Install]
WantedBy=multi-user.target
EOF
)"
echo "${meshservice}" | sudo tee /etc/systemd/system/meshcentral.service > /dev/null

sudo setcap 'cap_net_bind_service=+ep' `which node`
sudo systemctl daemon-reload
sudo systemctl enable meshcentral.service
sudo systemctl start meshcentral.service

echo "You will now be given a choice of what database you want to use"

# Choice for Database
PS3='Choose your preferred option for database server:'
DB=("NeDB" "MongoDB" "Postgres")
select DBOPT in "${DB[@]}"; do
case $DBOPT in
"NeDB")
break
;;

"MongoDB")
while ! [[ $CHECK_MESH_SERVICE1 ]]; do
  CHECK_MESH_SERVICE1=$(sudo systemctl status meshcentral.service | grep "Active: active (running)")
  echo -ne "Meshcentral not ready yet...${NC}\n"
  sleep 3
done

sudo systemctl stop meshcentral

if [ $(lsb_release -si | tr '[:upper:]' '[:lower:]') = "ubuntu" ]
then
wget -qO - https://www.mongodb.org/static/pgp/server-5.0.asc | sudo apt-key add -
echo "deb http://repo.mongodb.org/apt/ubuntu $(lsb_release -cs)/mongodb-org/5.0" multiverse | sudo tee /etc/apt/sources.list.d/mongodb-org-5.0.list
elif [ $(lsb_release -si | tr '[:upper:]' '[:lower:]') = "debian" ]
then
wget -qO - https://www.mongodb.org/static/pgp/server-5.0.asc | sudo apt-key add -
echo "deb http://repo.mongodb.org/apt/debian $(lsb_release -cs)/mongodb-org/5.0" main | sudo tee /etc/apt/sources.list.d/mongodb-org-5.0.list
fi

sudo apt-get update > null
sudo apt-get install -y mongodb-org > null
sudo systemctl enable mongod
sudo systemctl start mongod
sed -i '/"settings": {/a "MongoDb": "mongodb://127.0.0.1:27017/meshcentral",\n"MongoDbCol": "meshcentral",' /opt/meshcentral/meshcentral-data/config.json

while ! [[ $CHECK_MONGO_SERVICE ]]; do
  CHECK_MONGO_SERVICE=$(sudo systemctl status mongod.service | grep "Active: active (running)")
  echo -ne "MongoDB is not ready yet...${NC}\n"
  sleep 3
done

sudo systemctl start meshcentral.service
break
;;

"Postgres")
while ! [[ $CHECK_MESH_SERVICE2 ]]; do
  CHECK_MESH_SERVICE2=$(sudo systemctl status meshcentral.service | grep "Active: active (running)")
  echo -ne "Meshcentral not ready yet...${NC}\n"
  sleep 3
done

sudo systemctl stop meshcentral
sudo apt-get install -y postgresql  > null
sudo systemctl enable postgresql
sudo systemctl start postgresql

while ! [[ $CHECK_POSTGRES_SERVICE ]]; do
  CHECK_POSTGRES_SERVICE=$(sudo systemctl status postgresql.service | grep "Active: active (exited)")
  echo -ne "PostgreSQL is not ready yet...${NC}\n"
  sleep 3
done

DBUSER=$(cat /dev/urandom | tr -dc 'a-z' | fold -w 8 | head -n 1)
DBPWD=$(cat /dev/urandom | tr -dc 'a-zA-Z0-9' | fold -w 20 | head -n 1)

sudo -u postgres psql -c "CREATE DATABASE meshcentral"
sudo -u postgres psql -c "CREATE USER ${DBUSER} WITH PASSWORD '${DBPWD}'"
sudo -u postgres psql -c "ALTER ROLE ${DBUSER} SET client_encoding TO 'utf8'"
sudo -u postgres psql -c "ALTER ROLE ${DBUSER} SET default_transaction_isolation TO 'read committed'"
sudo -u postgres psql -c "ALTER ROLE ${DBUSER} SET timezone TO 'UTC'"
sudo -u postgres psql -c "GRANT ALL PRIVILEGES ON DATABASE meshcentral TO ${DBUSER}"

if ! which jq >/dev/null
then
sudo apt-get install -y jq > null
fi

cat "/opt/meshcentral/meshcentral-data/config.json" |
    jq " .settings.postgres.user |= \"${DBUSER}\" " |
    jq " .settings.postgres.password |= \"${DBPWD}\" " |
    jq " .settings.postgres.port |= \"5432\" " |
    jq " .settings.postgres.host |= \"localhost\" " > "/opt/meshcentral/meshcentral-data/configdb.json"

mv /opt/meshcentral/meshcentral-data/configdb.json /opt/meshcentral/meshcentral-data/config.json

sudo systemctl start meshcentral.service
break
;;

*) echo "invalid option $REPLY";;
esac
done

# Choice for Setup

PS3='Would you like this script to preconfigure best options:'
DB=("Yes" "No")
select DBOPT in "${DB[@]}"; do
case $DBOPT in
"Yes")

if ! which jq >/dev/null
then
sudo apt-get install -y jq > null
fi

# DNS/SSL Setup
echo -ne "Enter your preferred domain/dns address ${NC}: "
read dnsnames

echo -ne "Enter your email address ${NC}: "
read letsemail

echo -ne "Enter your company name ${NC}: "
read coname

echo -ne "Enter your preferred username ${NC}: "
read meshuname

meshpwd=$(cat /dev/urandom | tr -dc 'a-zA-Z0-9' | fold -w 20 | head -n 1)

while ! [[ $CHECK_MESH_SERVICE3 ]]; do
  CHECK_MESH_SERVICE3=$(sudo systemctl status meshcentral.service | grep "Active: active (running)")
  echo -ne "Meshcentral not ready yet...${NC}\n"
  sleep 3
done
sudo systemctl stop meshcentral.service

sed -i 's|"_letsencrypt": |"letsencrypt": |g' /opt/meshcentral/meshcentral-data/config.json
sed -i 's|"_redirPort": |"redirPort": |g' /opt/meshcentral/meshcentral-data/config.json
sed -i 's|"_cert": |"cert": |g' /opt/meshcentral/meshcentral-data/config.json
sed -i 's|    "production": false|    "production": true|g' /opt/meshcentral/meshcentral-data/config.json
sed -i 's|      "_title": "MyServer",|      "title": "'"${coname}"' Support",|g' /opt/meshcentral/meshcentral-data/config.json
sed -i 's|      "_newAccounts": true,|      "newAccounts": false,|g' /opt/meshcentral/meshcentral-data/config.json
sed -i 's|      "_userNameIsEmail": true|      "_userNameIsEmail": true,|g' /opt/meshcentral/meshcentral-data/config.json
sed -i '/     "_userNameIsEmail": true,/a "agentInviteCodes": true,\n "agentCustomization": {\n"displayname": "'"$coname"' Support",\n"description": "'"$coname"' Remote Agent",\n"companyName": "'"$coname"'",\n"serviceName": "'"$coname"'Remote"\n}' /opt/meshcentral/meshcentral-data/config.json
sed -i '/"settings": {/a "plugins":{\n"enabled": true\n},' /opt/meshcentral/meshcentral-data/config.json
sed -i '/"settings": {/a "MaxInvalidLogin": {\n"time": 5,\n"count": 5,\n"coolofftime": 30\n},' /opt/meshcentral/meshcentral-data/config.json

   cat "/opt/meshcentral/meshcentral-data/config.json" |     
jq " .settings.cert |= \"$dnsnames\" " |
jq " .letsencrypt.email |= \"$letsemail\" " |
jq " .letsencrypt.names |= \"$dnsnames\" " > /opt/meshcentral/meshcentral-data/config2.json
mv /opt/meshcentral/meshcentral-data/config2.json /opt/meshcentral/meshcentral-data/config.json

echo "Getting MeshCentral SSL Cert"
sudo systemctl start meshcentral

sleep 15
while ! [[ $CHECK_MESH_SERVICE4 ]]; do
  CHECK_MESH_SERVICE4=$(sudo systemctl status meshcentral.service | grep "Active: active (running)")
  echo -ne "Meshcentral not ready yet...${NC}\n"
  sleep 3
done
sleep 3
while ! [[ $CHECK_MESH_SERVICE5 ]]; do
  CHECK_MESH_SERVICE5=$(sudo systemctl status meshcentral.service | grep "Active: active (running)")
  echo -ne "Meshcentral not ready yet...${NC}\n"
  sleep 3
done

sudo systemctl stop meshcentral

echo "Creating Username"

node node_modules/meshcentral --createaccount $meshuname --pass $meshpwd --email $letsemail
sleep 1
node node_modules/meshcentral --adminaccount $meshuname 
sleep 3
sudo systemctl start meshcentral
while ! [[ $CHECK_MESH_SERVICE6 ]]; do
  CHECK_MESH_SERVICE6=$(sudo systemctl status meshcentral.service | grep "Active: active (running)")
  echo -ne "Meshcentral not ready yet...${NC}\n"
  sleep 3
done

echo "Setting up defaults on MeshCentral"
node node_modules/meshcentral/meshctrl.js --url wss://$dnsnames:443 --loginuser $meshuname --loginpass $meshpwd AddDeviceGroup --name "$coname"
node node_modules/meshcentral/meshctrl.js --url wss://$dnsnames:443 --loginuser $meshuname --loginpass $meshpwd EditDeviceGroup --group "$coname" --desc ''"$coname"' Support Group' --consent 71
node node_modules/meshcentral/meshctrl.js --url wss://$dnsnames:443 --loginuser $meshuname --loginpass $meshpwd EditUser --userid $meshuname --realname ''"$coname"' Support'
sudo systemctl restart meshcentral

echo "You can now go to https://$dnsnames and login with "
echo "$meshuname and $meshpwd"
echo "Enjoy :)"

break
;;

"No")
break
;;

*) echo "invalid option $REPLY";;
esac
done

相关连接

https://meshcentral.com/

https://github.com/techahold/Meshcentral-Installer

https://github.com/theredkoala21/MeshCentral-InstallScripts

https://www.meshcommander.com/meshcentral2