first commit

2022-07-10 10:51:11 +02:00 · 2022-07-10 10:51:11 +02:00 · 59df90254b
commit 59df90254b
2 changed files with 245 additions and 0 deletions
--- a/README.md
+++ b/README.md
--- a/signal.yml
+++ b/signal.yml
@ -0,0 +1,245 @@
+---
+
+- name: Install signal-cli
+  hosts: all
+  tasks:
+    - name: Install Basic Packages
+      apt:
+        name:
+          - openjdk-17-jdk-headless
+          - libmodern-perl-perl
+        update_cache: no
+        install_recommends: no
+
+    - name: Create Signal Group
+      ansible.builtin.group:
+        name: signal
+        state: present
+        gid: 1002
+
+    - name: Add root to signal group
+      ansible.builtin.user:
+        name: root
+        groups: signal
+        append: yes
+
+    - name: Create Signal User
+      ansible.builtin.user:
+        name: signal
+        comment: Signal User
+        uid: 1002
+        group: signal
+
+    - name: Create ssh dir
+      ansible.builtin.file:
+        path: /home/signal/.ssh
+        owner: signal
+        group: signal
+        state: directory
+        mode: '0700'
+
+    - name: Generate an OpenSSH keypair ed25519
+      community.crypto.openssh_keypair:
+        owner: signal
+        group: signal
+        path: /home/signal/.ssh/id_ed25519
+        type: ed25519
+
+    - name: Put install/update script
+      blockinfile:
+        path: /usr/local/sbin/autoupdate.d/signal-cli.update
+        create: yes
+        mode: 0400
+        owner: root
+        group: root
+        marker: "# {mark} ANSIBLE MANAGED BLOCK"
+        block: |
+          # Install/Update signal-cli script
+          [ -z "$g_tmp" ] && . /etc/bash/gaboshlib.include
+          set -e
+          umask 0077
+          SIGNALCLIVERS=$(wget -q -t1 --timeout=30 https://github.com/AsamK/signal-cli/releases -O - | grep Latest -B 4 | grep /releases/tag/v | head -n1 | cut -d\> -f3 | perl -pe 's/^v(.*)\<.*$/$1/')
+          echo $SIGNALCLIVERS | egrep -q "^[0-9].+[0-9]$" || g_echo_error "No valid signal-cli Version parsed in GitHub: $SIGNALCLIVERS"
+          cd /home/signal
+          if [ -d signal-cli-${SIGNALCLIVERS} ]
+          then
+            echo "signal-cli-${SIGNALCLIVERS} already installed - no Update available"
+          else
+            [ -f signal-cli-${SIGNALCLIVERS}-Linux.tar.gz ] || wget -q "https://github.com/AsamK/signal-cli/releases/download/v${SIGNALCLIVERS}/signal-cli-${SIGNALCLIVERS}-Linux.tar.gz"
+            tar --no-same-permissions -xzf signal-cli-${SIGNALCLIVERS}-Linux.tar.gz
+            if [ $(uname -m) == aarch64 ]
+            then
+              SIGNALLIBVERS=$(ls signal-cli-${SIGNALCLIVERS}/lib/libsignal-client-*.jar | cut -d'-' -f5 | sed 's/.jar$//')
+              [ -f libsignal_jni.so-v${SIGNALLIBVERS}-aarch64-unknown-linux-gnu.tar.gz ] || wget -q https://github.com/exquo/signal-libs-build/releases/download/libsignal-client_v${SIGNALLIBVERS}/libsignal_jni.so-v${SIGNALLIBVERS}-aarch64-unknown-linux-gnu.tar.gz
+              rm -f libsignal_jni.so
+              tar --no-same-permissions -xzf libsignal_jni.so-v${SIGNALLIBVERS}-aarch64-unknown-linux-gnu.tar.gz
+              zip -uj signal-cli-${SIGNALCLIVERS}/lib/libsignal-client-${SIGNALLIBVERS}.jar libsignal_jni.so
+            fi
+            chown -R signal. signal-cli-${SIGNALCLIVERS}
+            rm -f signal-cli
+            ln -s signal-cli-${SIGNALCLIVERS} signal-cli
+          fi
+        validate: /bin/bash -n %s
+        backup: yes
+      notify:
+      - Run Installation/Update
+
+    - name: systemd-service
+      blockinfile:
+        path: /etc/systemd/system/signal-cli.service
+        create: yes
+        mode: 0444
+        owner: root
+        group: root
+        marker: "# {mark} ANSIBLE MANAGED BLOCK"
+        block: |
+          [Unit]
+          Description=Send secure messages to Signal clients
+          Requires=dbus.socket
+          After=dbus.socket
+          Wants=network-online.target
+          After=network-online.target
+          
+          [Service]
+          Type=dbus
+          Environment="SIGNAL_CLI_OPTS=-Xms2m"
+          ExecStart=/home/signal/signal-cli/bin/signal-cli --config /home/signal/.local/share/signal-cli daemon --system
+          User=signal
+          BusName=org.asamk.Signal
+          # JVM always exits with 143 in reaction to SIGTERM signal
+          SuccessExitStatus=143
+          Restart=on-failure
+          
+          [Install]
+          WantedBy=multi-user.target
+          Alias=dbus-org.asamk.Signal.service
+      notify:
+      - Restart signal-cli
+
+    - name: /etc/dbus-1/system.d/org.asamk.Signal.conf signal-dbus-config
+      blockinfile:
+        path: /etc/dbus-1/system.d/org.asamk.Signal.conf
+        create: yes
+        mode: 0444
+        owner: root
+        group: root
+        marker: "<!-- {mark} ANSIBLE MANAGED BLOCK -->"
+        block: |
+          <!DOCTYPE busconfig PUBLIC "-//freedesktop//DTD D-BUS Bus Configuration 1.0//EN"
+          "http://www.freedesktop.org/standards/dbus/1.0/busconfig.dtd">
+          
+          <busconfig>
+            <policy user="signal">
+              <allow own="org.asamk.Signal"/>
+              <allow send_destination="org.asamk.Signal"/>
+              <allow receive_sender="org.asamk.Signal"/>
+            </policy>
+          
+            <policy group="signal">
+              <allow send_destination="org.asamk.Signal"/>
+              <allow receive_sender="org.asamk.Signal"/>
+            </policy>
+          </busconfig>
+      notify:
+      - Restart dbus
+      
+    - name: /etc/dbus-1/system.d/org.asamk.Signal.conf shebang
+      lineinfile:
+        path: /etc/dbus-1/system.d/org.asamk.Signal.conf
+        insertbefore: BOF
+        line: <?xml version="1.0"?> <!--*-nxml-*-->
+
+
+    - name: /etc/dbus-1/system.d/org.asamk.Signal.service signal-dbus-service
+      blockinfile:
+        path: /etc/dbus-1/system.d/org.asamk.Signal.service
+        create: yes
+        mode: 0444
+        owner: root
+        group: root
+        block: |
+          [D-BUS Service]
+          Name=org.asamk.Signal
+          Exec=/bin/false
+          SystemdService=dbus-org.asamk.Signal.service
+      notify:
+      - Restart dbus
+
+    - name: Receive signal messages
+      blockinfile:
+        path: /usr/local/bin/signal-receive.pl
+        create: yes
+        mode: 0550
+        owner: root
+        group: signal
+        marker: "# {mark} ANSIBLE MANAGED BLOCK"
+        block: |
+          use Modern::Perl;
+          use Net::DBus;
+          use Net::DBus::Reactor;
+          
+          sub msgRcv {
+            my ($timestamp, $sender, $groupID, $message, $attachments) = @_;
+            print "Message: $message\nSender: $sender\nTimestamp: $timestamp\nAttachments: $attachments\n";
+            return;
+          }
+          
+          my $bus = Net::DBus->system();
+          my $sig = $bus->get_service("org.asamk.Signal");
+          my $obj = $sig->get_object("/org/asamk/Signal/_4944136198288","org.asamk.Signal");
+          my $sigid = $obj->connect_to_signal('MessageReceived', \&msgRcv);
+          
+          my $reactor=Net::DBus::Reactor->main();
+          $reactor->run();
+           
+          exit 0;
+        backup: yes
+
+    - name: /usr/local/bin/signal-receive.pl shebang
+      lineinfile:
+        path: /usr/local/bin/signal-receive.pl
+        insertbefore: BOF
+        line: "#!/usr/bin/perl"
+
+    - name: /usr/local/sbin/runchecks.d/services
+      lineinfile:
+        path: /usr/local/sbin/runchecks.d/services
+        create: yes
+        line: "signal-cli"
+
+    - name: /etc/cron.d/signal_local - daily selftest
+      blockinfile:
+        path: /etc/cron.d/signal_local
+        create: yes
+        mode: 0644
+        owner: root
+        group: signal
+        marker: "# {mark} ANSIBLE MANAGED BLOCK"
+        block: |
+          0 15 * * *      root    sleep $(shuf -i 1-120 -n 1) ; echo "Dies ist ein täglicher Selbsttest von {{inventory_hostname}}. Falls diese Nachricht mal nicht um 15Uhr eingeht stimmt etwas nicht!" | /usr/local/bin/notify.sh
+        backup: yes
+
+    - name: 'add signal-cli to startup'
+      command: systemctl enable signal-cli
+      args:
+        creates: /etc/systemd/system/multi-user.target.wants/signal-cli.service
+
+  handlers:
+
+    - name: Run Installation/Update
+      ansible.builtin.shell: bash /usr/local/sbin/autoupdate.d/signal-cli.update
+      notify:
+      - Restart signal-cli
+
+    - name: Restart systemd
+      ansible.builtin.shell: systemctl daemon-reload
+
+    - name: Restart dbus
+      service:
+        name: dbus
+        state: restarted
+
+    - name: Restart signal-cli
+      service:
+        name: signal-cli
+        state: restarted