alpine.sh

#!/bin/bash
#
# Author: lovekk <admin AT lovekk.org>
# Blog: https://www.lovekk.org/
# Demo: https://16mb.tw/
#

clear
printf "
#######################################################################
#                  16MB Typecho for Alpine Linux v1.0                 #
#       For more information please visit https://www.lovekk.org      #
#                  Demo please visit https://16mb.tw                  #
#######################################################################
"

# Check if user is root
[ $(id -u) != "0" ] && { echo "Error: You must be root to run this script"; exit 1; }

# Get network card
link=$(ls /sys/class/net)
linkStr=''
for i in ${link}; do
    linkStr=${linkStr}","${i}
done
devStr=${linkStr#*,}

# check virutal
while :; do echo
    read -p "Please select your virutal(lxc|openvz): " sys
    if echo {lxc openvz} | grep -w ${sys} &> /dev/null; then
        break
    else
        echo "input error! Please only input 'lxc' or 'openvz'"
    fi
done

# check dev
while :; do echo
    read -p "Please select network card(${devStr}): " dev
    if echo "${link}" | grep -w ${dev} &> /dev/null; then
        break
    else
        echo "input error! Please only input ${devStr}"
    fi
done

# check os
if [ -e /etc/redhat-release ]; then
    yum install wget xz unzip -y
elif [ -n "$(grep 'bian' /etc/issue)" -o "$(lsb_release -is 2>/dev/null)" == "Debian" ]; then
    apt-get install wget xz-utils unzip -y
elif [ -n "$(grep 'Ubuntu' /etc/issue)" -o "$(lsb_release -is 2>/dev/null)" == "Ubuntu" -o -n "$(grep 'Linux Mint' /etc/issue)" ]; then
    apt-get install wget xz-utils unzip -y
else
  echo "${CFAILURE}Does not support this OS, Please contact the author! ${CEND}"
  kill -9 $$
fi

cd /
# download alpine
mkdir -p /lovekk
path=$(wget -O- http://images.linuxcontainers.org/meta/1.0/index-system | grep -v edge | awk '-F;' '($1=="alpine" && $3=="amd64") {print $NF}' | tail -1)
wget --no-check-certificate http://images.linuxcontainers.org${path}rootfs.tar.xz -O ~/rootfs.tar.xz
xz -d ~/rootfs.tar.xz
tar xf ~/rootfs.tar -C /lovekk

# set parameter
sed -i 's/rc_sys="lxc"/rc_sys="${sys}"/' /lovekk/etc/rc.conf

# set network
cat > /lovekk/etc/network/interfaces << EOF
auto lo
iface lo inet loopback

auto $dev
iface $dev inet dhcp

hostname \$(hostname)
EOF
rm -f /lovekk/etc/resolv.conf
cp /etc/resolv.conf /lovekk/etc/resolv.conf

# set passwd
sed -i '/^root:/d' /lovekk/etc/shadow
grep '^root:' /etc/shadow >> /lovekk/etc/shadow

# delete old os
/lovekk/lib/ld-musl-x86_64.so.1 /lovekk/bin/busybox rm -rf `/lovekk/lib/ld-musl-x86_64.so.1 /lovekk/bin/busybox ls / | grep -v "lovekk"`

# copy alpine
/lovekk/lib/ld-musl-x86_64.so.1 /lovekk/bin/busybox cp -a /lovekk/* /

# set export
export PATH="/usr/sbin:/usr/bin:/sbin:/bin"
rm -rf /lovekk

# os update
cat > /etc/apk/repositories << EOF
https://mirrors.ustc.edu.cn/alpine/latest-stable/main
https://mirrors.ustc.edu.cn/alpine/latest-stable/community
EOF
apk update

# install ssh
apk add openssh
echo PermitRootLogin yes >> /etc/ssh/sshd_config

# prevent getty spamming the syslog
apk add e2fsprogs-extra
sed -i "s/^tty/#tty/g" /etc/inittab
chattr +i /etc/inittab

# install caddy
apk add caddy
cat > /etc/caddy/caddy.conf << EOF
:80 {
  gzip
  root /data/www
  fastcgi / /data/run/php-fpm.sock php
  rewrite {
    if {path} not_match ^\/admin
    to {path} {path}/ /index.php?{query}
  }
}
EOF
rm -f /etc/init.d/caddy

# install php
apk add php7 php7-fpm php7-opcache php7-ctype php7-pdo_sqlite php7-session php7-curl php7-tokenizer
sed -i "s@^memory_limit.*@memory_limit = 5M@" /etc/php7/php.ini
sed -i 's@^output_buffering =@output_buffering = On\noutput_buffering =@' /etc/php7/php.ini
sed -i 's@^;cgi.fix_pathinfo.*@cgi.fix_pathinfo=1@' /etc/php7/php.ini
sed -i 's@^short_open_tag = Off@short_open_tag = On@' /etc/php7/php.ini
sed -i 's@^expose_php = On@expose_php = Off@' /etc/php7/php.ini
sed -i 's@^request_order.*@request_order = "CGP"@' /etc/php7/php.ini
sed -i 's@^;date.timezone.*@date.timezone = Asia/Shanghai@' /etc/php7/php.ini
sed -i 's@^post_max_size.*@post_max_size = 100M@' /etc/php7/php.ini
sed -i 's@^upload_max_filesize.*@upload_max_filesize = 50M@' /etc/php7/php.ini
sed -i 's@^max_execution_time.*@max_execution_time = 600@' /etc/php7/php.ini
sed -i 's@^;realpath_cache_size.*@realpath_cache_size = 2M@' /etc/php7/php.ini
sed -i 's@^disable_functions.*@disable_functions = passthru,exec,system,chroot,chgrp,chown,shell_exec,proc_open,proc_get_status,ini_alter,ini_restore,dl,openlog,syslog,readlink,symlink,popepassthru,stream_socket_server,fsocket,popen@' /etc/php7/php.ini
mv /etc/php7/php-fpm.conf /etc/php7/php-fpm.conf.bak
cat > /etc/php7/php-fpm.conf << EOF
[global]
pid = /data/run/php-fpm.pid
error_log = /data/log/php-fpm.log
log_level = warning
emergency_restart_threshold = 30
emergency_restart_interval = 60s
process_control_timeout = 5s
daemonize = yes

[caddy]
listen = /data/run/php-fpm.sock
listen.backlog = -1
listen.allowed_clients = 127.0.0.1
listen.owner = caddy
listen.group = caddy
listen.mode = 0666
user = caddy
group = caddy

pm = dynamic
pm.max_children = 3
pm.start_servers = 2
pm.min_spare_servers = 1
pm.max_spare_servers = 3
pm.max_requests = 8192
pm.process_idle_timeout = 10s
request_terminate_timeout = 120
request_slowlog_timeout = 0

pm.status_path = /php-fpm_status
slowlog = /data/log/slow.log
rlimit_files = 1200
rlimit_core = 0

catch_workers_output = yes
env[PATH] = /usr/local/bin:/usr/bin:/bin
env[TMP] = /tmp
env[TMPDIR] = /tmp
env[TEMP] = /tmp
EOF
rm -f /etc/init.d/php-fpm7

# install supervisor
apk add supervisor
mkdir /etc/supervisor.d/
cat > /etc/supervisor.d/php.ini << EOF
[program:php]
user=root
command=/usr/sbin/php-fpm7 --nodaemonize --fpm-config /etc/php7/php-fpm.conf
startsecs=10
startretries=100
autorstart=true
autorestart=true
EOF
cat > /etc/supervisor.d/caddy.ini << EOF
[program:caddy]
user=root
command=/usr/sbin/caddy -conf /etc/caddy/caddy.conf -log /data/log/caddy.log -agree
startsecs=10
startretries=100
autorstart=true
autorestart=true
EOF

# set typecho
mkdir -p /data/run
mkdir -p /data/log
mkdir -p /data/www
cd /data/www/
wget http://typecho.org/downloads/1.1-17.10.30-release.tar.gz
tar zxf 1.1-17.10.30-release.tar.gz 
rm -f 1.1-17.10.30-release.tar.gz
cd build/
mv * ../
cd ..
rm -rf build/
cd /data/www/usr/plugins
rm -rf *
wget -c --no-check-certificate https://github.com/typecho-fans/plugins/releases/download/plugins-H_to_L/LoveKKComment.zip
unzip LoveKKComment.zip
rm -f LoveKKComment.zip
chown -R caddy:caddy /data/www

# set auto start
rc-update add sshd default
rc-update add supervisord default
rc-update add mdev sysinit
rc-update add devfs sysinit

# reboot
sync
reboot -f