install ssh

install-ssh.sh

#!/usr/bin/env bash

request_cmd=$([[ -x "$(command -v curl)" ]] && echo "curl_request" || echo "wget_request")
download_cmd=$([[ -x "$(command -v curl)" ]] && echo "curl -sSO" || echo "wget -q")

#GOSS_ENDPOINT="https://api.goss.vdo.manage.rackspace.com/v1.0/instance/goss"
GOSS_ENDPOINT="https://chandra-goka.api.goss.dev.vdo.manage.rackspace.com/v1.0"

jwt_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiJ9.eyJkb21haW4iOiIxMjM0MTE3Iiwic2VydmljZV90eXBlIjoiTUFOQUdFRF9WTUMiLCJzZXJ2aWNlX2lkIjoiNGM5NjA1MmEtODVjMC00MDZlLWJjZmMtOGI0MWI3OWFiNWY3IiwidG9rZW5faWQiOiI5NDg2N2JiZC00MWIzLTRiZjAtODYzYS1kNjIwMzlkMjYzZDkifQ.Apwr6nQpzglkUzOt3XXhH7y58nffszSCqeTQiGsJBcNrZnmqeqooc_JB3o-8AEwuIH0lD6TW7BN3FgttKW2eRrzK_mWwWe9Eue8swXrRupQBKaDVLGKTdK17NjWN-FzETlVQd0wCQreLWTRuPjXFf_QfeHK3v9M-P1tjO9n30fm_cDOKUi5ueJHYx61iX_XPFDD9-b2iOqRyydFnbol0hVBpoUA4jlK4sgLA7-pNnhWM5elPZO5N78MwkokfZjDkxRjw-29Zx4ia_GNZU-BWtkWsroFTlcn3CGc9VB5YXSqJM7fuerzEJEZiTx1VETBMGFzQCDntGOQpYp-kV8BFHQ
UNABLE_TO_ACTIVATE=1
JOB_RETRIEVE_FAILURE=2
NO_JOB_FOUND=3
OS_UNSUPPORTED=4

get_guest_info_machine_id=$(vmtoolsd --cmd "info-get guestinfo.machine.id")

find_value() {
  local key="$1"
  if [[ -f /etc/centos-release ]]; then
      [[ "${key}" == "ID" ]] && echo "centos" && return
      if [[ "${key}" == "VERSION_ID" ]]; then
        local version
        version=$(awk '{ for (i=1; i<=NF; ++i) { if ($i ~ /[0-9]/) print $i } }' /etc/centos-release)
        IFS='.' read -ra versionArr <<< "$version"
        echo "${versionArr[0]}.${versionArr[1]}"
        return
      fi
  fi
  if [[ -f /etc/redhat-release ]]; then
      [[ "${key}" == "ID" ]] && echo "rhel" && return
      [[ "${key}" == "VERSION_ID" ]] && awk '{ for (i=1; i<=NF; ++i) { if ($i ~ /[0-9]/) print $i } }' /etc/redhat-release && return
  fi
  [[ -f /etc/os-release ]] && awk "/^$key=/" /etc/os-release | sed "s/\($key=\"\?\|\"$\)//g" && return
}

distro=$(find_value ID)
distro_version=$(find_value VERSION_ID)

has_instance_id() {
  regfile="/var/lib/amazon/ssm/Vault/Store/RegistrationKey"
  if [[ -f "$regfile" ]] && \
    [[ $(grep -c '"instanceID":"mi-' "$regfile") -eq 1 ]]; then
    my_id=$(ssm-cli get-instance-information | sed 's/"[:|,]"/ /g' | awk '{print $2}')
    if [[ $my_id == mi-* ]]; then
      return 0
    else
      return 1
    fi
  fi
  return 1
}

wget_request() {
  # $1 = url
  # $2 = header
  # $3 (optional) = HTTP Method
  optional_post_argument=$([[ $# -gt 2 ]] && echo '--post-data ""'|| echo "")
  wget -q --save-header -O- "$1" "--header=$2"
}


curl_request() {
  # $1 = url
  # $2 = header
  # $3 (optional) = HTTP Method
  optional_post_argument=$([[ $# -gt 2 ]] && echo "--request POST"|| echo "")
  curl --location -s -D - "$1" -H "$2" $optional_post_argument
}

send_error() {
  # $1 = error code

  echo "Sending error to goss with error code: $1"
  error_endpoint="$GOSS_ENDPOINT/instance/goss/error/$1"
  $request_cmd "$error_endpoint" "X-Auth-Token: $jwt_token" "POST"
}

install_generic() {
    local bin_url="$1"
    local install_cmd="$2"
    # The start/stop commands should be available globally
    svc_stop_cmd="$3"
    svc_start_cmd="$4"
    local svc_status_cmd="$5"
    if [[ $($svc_status_cmd) == 0 ]]; then
      echo "SSM Agent already installed"
    else
      [[ ! -d /tmp/ssm ]] && mkdir /tmp/ssm
      cd /tmp/ssm || :
      echo "Running: $download_cmd $bin_url"
      $download_cmd "${bin_url}"
      echo "Running $install_cmd"
      $install_cmd
      echo "Running $svc_start_cmd"
      $svc_start_cmd
      if [[ "$?" != 0 ]]; then
        echo "Failed to start the amazon-ssm-agent service."
        # This is likely due to the OS being unsupported
        send_error $OS_UNSUPPORTED
        exit 1
      fi

      echo "Running $svc_stop_cmd"
      $svc_stop_cmd
    fi
}

install_ubuntu() {
    local bin_url="https://s3.amazonaws.com/ec2-downloads-windows/SSMAgent/latest/debian_amd64/amazon-ssm-agent.deb"
    local install_cmd="dpkg -i /tmp/ssm/amazon-ssm-agent.deb"
    svc_stop_cmd="service amazon-ssm-agent stop"
    svc_start_cmd="service amazon-ssm-agent start"
    local svc_status_cmd="service amazon-ssm-agent status"
    install_generic "$bin_url" "$install_cmd" "$svc_stop_cmd" "$svc_start_cmd" "$svc_status_status"
}

install_rhel6() {
    local bin_url="https://s3.amazonaws.com/ec2-downloads-windows/SSMAgent/latest/linux_amd64/amazon-ssm-agent.rpm"
    local install_cmd="yum install -y /tmp/ssm/amazon-ssm-agent.rpm"
    svc_stop_cmd="stop amazon-ssm-agent"
    svc_start_cmd="start amazon-ssm-agent"
    local svc_status_status="service amazon-ssm-agent status"
    install_generic "$bin_url" "$install_cmd" "$svc_stop_cmd" "$svc_start_cmd" "$svc_status_status"
}

install_rhel7() {
    local bin_url="https://s3.amazonaws.com/ec2-downloads-windows/SSMAgent/latest/linux_amd64/amazon-ssm-agent.rpm"
    local install_cmd="yum install -y /tmp/ssm/amazon-ssm-agent.rpm"
    svc_stop_cmd="systemctl stop amazon-ssm-agent"
    svc_start_cmd="systemctl start amazon-ssm-agent"
    local svc_status_status="systemctl status amazon-ssm-agent"
    install_generic "$bin_url" "$install_cmd" "$svc_stop_cmd" "$svc_start_cmd" "$svc_status_status"
}

install_sles() {
    local bin_url="https://s3.amazonaws.com/ec2-downloads-windows/SSMAgent/latest/linux_amd64/amazon-ssm-agent.rpm"
    local install_cmd="rpm --install /tmp/ssm/amazon-ssm-agent.rpm"
    svc_stop_cmd="systemctl stop amazon-ssm-agent"
    svc_start_cmd="systemctl start amazon-ssm-agent"
    local svc_status_status="systemctl status amazon-ssm-agent"
    install_generic "$bin_url" "$install_cmd" "$svc_stop_cmd" "$svc_start_cmd" "$svc_status_status"
}

install_debian() {
    local bin_url="https://s3.amazonaws.com/ec2-downloads-windows/SSMAgent/latest/debian_amd64/amazon-ssm-agent.deb"
    local install_cmd="sudo dpkg -i /tmp/ssm/amazon-ssm-agent.deb"
    svc_stop_cmd="systemctl stop amazon-ssm-agent"
    svc_start_cmd="systemctl start amazon-ssm-agent"
    local svc_status_status="systemctl status amazon-ssm-agent"
    install_generic "$bin_url" "$install_cmd" "$svc_stop_cmd" "$svc_start_cmd" "$svc_status_status"
}

install_ssm() {
  case $distro in
      ubuntu)
          install_ubuntu
          ;;
      centos|rhel)
          if [[ "${distro_version}" == 6* ]]; then
            install_rhel6
          else
            install_rhel7
          fi
          ;;
      sles)
            install_sles
          ;;
      debian)
            install_debian
          ;;
      *)
          echo "Operating System unsupported."
          send_error $OS_UNSUPPORTED
          exit 1
          ;;
  esac
}

activate_ssm() {
  # $1 = activation_id
  # $2 = activation_code
  # $3 = region
  echo "Stopping the SSM agent."
  $svc_stop_cmd

  echo "Registering the SSM agent."
  amazon-ssm-agent -y -register -code "$2" -id "$1" -region "$3" > /dev/null

  echo "Starting the SSM agent."
  $svc_start_cmd

  if [[ "$?" != 0 ]]; then
    echo "Failed to start the amazon-ssm-agent service."
    send_error $OS_UNSUPPORTED
    exit 1
  fi
}

get_header_from_response() {
  # $1 Raw response from http request
  echo "$1" | sed '/^\s*$/q'
}

get_body_from_response() {
  # $1 Raw response from http request
  echo "$1" | sed '1,/^\s*$/d'
}

get_response_status_code() {
  echo "$1" | head -1 | grep -Eo '[0-9][0-9][0-9]'
}

get_job_location() {
  echo "$1" | tr -d '\r' | awk '/^[lL]ocation: /{print $2}'
}

get_job_count() {
  # $1 = Response JSON of GET job request
  echo "$1" | tr -d '\r' | grep -Eo "\"currentItemCount\":[0-9]+" | awk -F\: '{print $2}'
}

get_job_status() {
  # $1 = Response JSON of GET job request
  echo "$1" | tr -d '\r' | grep -Eo "\"status\":[^,]+" | head -1 | awk -F\: '{print $2}' | tr -d '"'
}

get_activation_id() {
  # $1 = Response JSON of GET job request
  echo "$1" | tr -d '\r' | grep -Eo "\"activation_id\":[^,]+" | head -1 | awk -F\: '{print $2}' | tr -d '"'
}

get_activation_code() {
  # $1 = Response JSON of GET job request
  echo "$1" | tr -d '\r' | grep -Eo "\"activation_code\":[^,]+" | head -1 | awk -F\: '{print $2}' | tr -d '"'
}

get_region() {
  # $1 = Response JSON of GET job request
  echo "$1" | tr -d '\r' | grep -Eo "\"region\":[^,]+" | head -1 | awk -F\: '{print $2}' | tr -d '"'
}

if has_instance_id; then
  echo "Instance Id already exists, do not re-run the activation."
  exit 0
fi

install_ssm

echo "Creating a GOSS job to create an activation code"

activation_endpoint="$GOSS_ENDPOINT/jwt/goss/activate/$get_guest_info_machine_id"
echo "activation_endpoint :: $activation_endpoint"
activation_job_response=$($request_cmd $activation_endpoint "X-Auth-Token: $jwt_token" "POST")

activation_status=$(get_response_status_code "$activation_job_response")

if [[ $activation_status != 2* ]]
then
  echo "Got a non-successful response when getting activation code."
  send_error $UNABLE_TO_ACTIVATE
  exit 1
fi
echo "Activation Job Response: $activation_job_response"
job_location=$(get_job_location "$activation_job_response")

# Up to 10 retries
for NUM in 1 2 3 4 5 6 7 8 9 10
do
  echo "Calling get job"
  echo "jwt_token: $jwt_token"
  echo "Job location: $job_location"
  job_response=$($request_cmd $job_location "X-Auth-Token: $jwt_token")
  echo "Job response: $job_status"
  job_status=$(get_response_status_code "$job_response")
  echo "Job status: $job_status"
  if [[ $job_status != 2* ]]
  then
    echo "Unable to get activation job response"
    send_error $JOB_RETRIEVE_FAILURE
    exit 1
  fi

  job_data=$(get_body_from_response "$job_response")

  if [[ $(get_job_count "$job_data")  -lt 1 ]]
  then
    echo "No jobs found, aborting."
    send_error $NO_JOB_FOUND
    exit 1
  fi

  status="$(get_job_status "$job_data")"

  if [ "$status" = "RUNNING" ]
  then
    echo "Job is still running..."
    # wait 10 seconds
    sleep 10
    continue
  fi

  if [ "$status" != "SUCCEEDED" ]
  then
    echo "Failed to get activation from GOSS"
    exit 1
  fi

  activation_id="$(get_activation_id "$job_data")"
  activation_code="$(get_activation_code "$job_data")"
  region="$(get_region "$job_data")"
  break
done

echo "Activation_id: $activation_id"
activate_ssm "$activation_id" "$activation_code" "$region"