condor
82 lines
4.4 KiB
Bash
82 lines
4.4 KiB
Bash
#!/bin/bash
|
|
# Author: yeho <lj2007331 AT gmail.com>
|
|
# BLOG: https://linuxeye.com
|
|
#
|
|
# Notes: OneinStack for CentOS/RedHat 7+ Debian 9+ and Ubuntu 16+
|
|
#
|
|
# Project home page:
|
|
# https://oneinstack.com
|
|
# https://github.com/oneinstack/oneinstack
|
|
|
|
Install_PureFTPd() {
|
|
pushd ${oneinstack_dir}/src > /dev/null
|
|
id -g ${run_group} >/dev/null 2>&1
|
|
[ $? -ne 0 ] && groupadd ${run_group}
|
|
id -u ${run_user} >/dev/null 2>&1
|
|
[ $? -ne 0 ] && useradd -g ${run_group} -M -s /sbin/nologin ${run_user}
|
|
|
|
tar xzf pure-ftpd-${pureftpd_ver}.tar.gz
|
|
pushd pure-ftpd-${pureftpd_ver} > /dev/null
|
|
[ ! -d "${pureftpd_install_dir}" ] && mkdir -p ${pureftpd_install_dir}
|
|
./configure --prefix=${pureftpd_install_dir} CFLAGS=-O2 --with-puredb --with-quotas --with-cookie --with-virtualhosts --with-virtualchroot --with-diraliases --with-sysquotas --with-ratios --with-altlog --with-paranoidmsg --with-shadow --with-welcomemsg --with-throttling --with-uploadscript --with-language=english --with-tls
|
|
make -j ${THREAD} && make install
|
|
popd > /dev/null
|
|
if [ -e "${pureftpd_install_dir}/sbin/pure-ftpwho" ]; then
|
|
/bin/cp ../services/pureftpd.service /lib/systemd/system/
|
|
sed -i "s@/usr/local/pureftpd@${pureftpd_install_dir}@g" /lib/systemd/system/pureftpd.service
|
|
systemctl enable pureftpd
|
|
|
|
[ ! -e "${pureftpd_install_dir}/etc" ] && mkdir ${pureftpd_install_dir}/etc
|
|
/bin/cp ../config/pure-ftpd.conf ${pureftpd_install_dir}/etc
|
|
sed -i "s@^PureDB.*@PureDB ${pureftpd_install_dir}/etc/pureftpd.pdb@" ${pureftpd_install_dir}/etc/pure-ftpd.conf
|
|
sed -i "s@^LimitRecursion.*@LimitRecursion 65535 8@" ${pureftpd_install_dir}/etc/pure-ftpd.conf
|
|
IPADDR=${IPADDR:-127.0.0.1}
|
|
[ ! -d /etc/ssl/private ] && mkdir -p /etc/ssl/private
|
|
openssl dhparam -out /etc/ssl/private/pure-ftpd-dhparams.pem 2048
|
|
openssl req -x509 -days 7300 -sha256 -nodes -subj "/C=CN/ST=Shanghai/L=Shanghai/O=OneinStack/CN=${IPADDR}" -newkey rsa:2048 -keyout /etc/ssl/private/pure-ftpd.pem -out /etc/ssl/private/pure-ftpd.pem
|
|
chmod 600 /etc/ssl/private/pure-ftpd*.pem
|
|
sed -i "s@^# TLS.*@&\nCertFile /etc/ssl/private/pure-ftpd.pem@" ${pureftpd_install_dir}/etc/pure-ftpd.conf
|
|
sed -i "s@^# TLS.*@&\nTLSCipherSuite HIGH:MEDIUM:+TLSv1:\!SSLv2:\!SSLv3@" ${pureftpd_install_dir}/etc/pure-ftpd.conf
|
|
sed -i "s@^# TLS.*@TLS 1@" ${pureftpd_install_dir}/etc/pure-ftpd.conf
|
|
ulimit -s unlimited
|
|
systemctl start pureftpd
|
|
|
|
# iptables Ftp
|
|
if [ "${PM}" == 'yum' ]; then
|
|
if [ -n "`grep 'dport 80 ' /etc/sysconfig/iptables`" ] && [ -z "$(grep '20000:30000' /etc/sysconfig/iptables)" ]; then
|
|
iptables -I INPUT 5 -p tcp -m state --state NEW -m tcp --dport 21 -j ACCEPT
|
|
iptables -I INPUT 6 -p tcp -m state --state NEW -m tcp --dport 20000:30000 -j ACCEPT
|
|
service iptables save
|
|
ip6tables -I INPUT 5 -p tcp -m state --state NEW -m tcp --dport 21 -j ACCEPT
|
|
ip6tables -I INPUT 6 -p tcp -m state --state NEW -m tcp --dport 20000:30000 -j ACCEPT
|
|
service ip6tables save
|
|
fi
|
|
elif [ "${PM}" == 'apt-get' ]; then
|
|
if [ -e '/etc/iptables/rules.v4' ]; then
|
|
if [ -n "`grep 'dport 80 ' /etc/iptables/rules.v4`" ] && [ -z "$(grep '20000:30000' /etc/iptables/rules.v4)" ]; then
|
|
iptables -I INPUT 5 -p tcp -m state --state NEW -m tcp --dport 21 -j ACCEPT
|
|
iptables -I INPUT 6 -p tcp -m state --state NEW -m tcp --dport 20000:30000 -j ACCEPT
|
|
iptables-save > /etc/iptables/rules.v4
|
|
ip6tables -I INPUT 5 -p tcp -m state --state NEW -m tcp --dport 21 -j ACCEPT
|
|
ip6tables -I INPUT 6 -p tcp -m state --state NEW -m tcp --dport 20000:30000 -j ACCEPT
|
|
ip6tables-save > /etc/iptables/rules.v6
|
|
fi
|
|
elif [ -e '/etc/iptables.up.rules' ]; then
|
|
if [ -n "`grep 'dport 80 ' /etc/iptables.up.rules`" ] && [ -z "$(grep '20000:30000' /etc/iptables.up.rules)" ]; then
|
|
iptables -I INPUT 5 -p tcp -m state --state NEW -m tcp --dport 21 -j ACCEPT
|
|
iptables -I INPUT 6 -p tcp -m state --state NEW -m tcp --dport 20000:30000 -j ACCEPT
|
|
iptables-save > /etc/iptables.up.rules
|
|
fi
|
|
fi
|
|
fi
|
|
|
|
echo "${CSUCCESS}Pure-Ftp installed successfully! ${CEND}"
|
|
rm -rf pure-ftpd-${pureftpd_ver}
|
|
else
|
|
rm -rf ${pureftpd_install_dir}
|
|
echo "${CFAILURE}Pure-Ftpd install failed, Please contact the author! ${CEND}" && lsb_release -a
|
|
kill -9 $$; exit 1;
|
|
fi
|
|
popd > /dev/null
|
|
}
|