forked from fgg89/docker-ap
-
Notifications
You must be signed in to change notification settings - Fork 0
/
Copy pathdocker_ap
executable file
·306 lines (267 loc) · 10.1 KB
/
docker_ap
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
#!/bin/bash
#title :docker_ap.sh
#description :This script will configure a Debian-based system
# for running a wireless access point inside a
# docker container.
# The docker container has unique access to the
# physical wireless interface.
#author :Fran Gonzalez
#date :20150520
#version :0.1
#usage :bash docker_ap <start|stop> [interface]
#bash_version :4.3.11(1)-release (x86_64-pc-linux-gnu)
#dependencies :docker, iw, pgrep, grep, iptables, cat, ip,
# bridge-utils, rfkill
#========================================================================
#########################################################################
# VARS #
#########################################################################
# Colors
MAGENTA='\e[0;35m'
RED='\e[0;31m'
GREEN='\e[0;32m'
BLUE='\e[0;34m'
NC='\e[0m'
ROOT_UID="0"
ARCH=$(arch)
# WLAN parameters
SSID="DockerAP"
HW_MODE="g"
CHANNEL="6"
PASSPHRASE="dockerap123"
WPA_MODE="WPA-PSK"
# Other parameters
SUBNET="192.168.7"
IP_AP="192.168.7.1"
NETMASK="/24"
DNS_SERVER="8.8.8.8"
DOCKER_NAME="ap-container"
HT_CAPAB="[HT40-][SHORT-GI-20][SHORT-GI-40]"
CONF_FILE="wlan_config.txt"
pushd "$(dirname "$0")" > /dev/null
PATHSCRIPT=$(pwd)
popd > /dev/null
# Check run as root
if [ "$UID" -ne "$ROOT_UID" ] ; then
echo "You must be root to run this script!"
exit 1
fi
if [ "$1" == "help" ] || [ "$#" -eq 0 ] || [ "$#" -ne 2 ]
then
show_usage
fi
if [ "$ARCH" == "armv7l" ]
then
DOCKER_IMAGE="fgg89/armhf-docker-ap"
elif [ "$ARCH" == "x86_64" ]
then
DOCKER_IMAGE="fgg89/docker-ap"
else
echo "Currently supported architectures are x86_64 and armv7. Exiting..."
exit 1
fi
# TODO: Check docker service status
#########################################################################
# FUNCTIONS #
#########################################################################
show_usage () {
echo -e "Usage: $0 <start|stop> [interface]"
exit 1
}
print_banner () {
echo -e "${MAGENTA} ___ _ _ ___ ${NC}"
echo -e "${MAGENTA}| \ ___ __| |_____ _ _ /_\ | _ \\ ${NC}"
echo -e "${MAGENTA}| |) / _ \/ _| / / -_) '_| / _ \| _/ ${NC}"
echo -e "${MAGENTA}|___/\___/\__|_\_\___|_| /_/ \_\_| ${NC}"
echo ""
}
# Check that the interface exists and its not in use. Returns iface phy
iface_check (){
IFACE="$1"
# Check that the requested iface is available
if ! [ -e /sys/class/net/"$IFACE" ]
then
echo -e "${RED}[ERROR]${NC} The interface provided does not exist. Exiting..."
exit 1
fi
# Check that the given interface is not used by the host as the default route
if [[ $(ip r | grep default | cut -d " " -f5) == "$IFACE" ]]
then
echo -e "${BLUE}[INFO]${NC} The selected interface is configured as the default route, if you use it you will lose internet connectivity"
while true;
do
read -p "Do you wish to continue? [y/n]" yn
case $yn in
[Yy]* ) break;;
[Nn]* ) exit;;
* ) echo "Please answer yes or no.";;
esac
done
fi
# Find the physical interface for the given wireless interface
PHY=$(cat /sys/class/net/"$IFACE"/phy80211/name)
echo $PHY
}
# Check system arquitecture and pull the right image, if necessary.
docker_img() {
# Architecture
echo -e "${BLUE}[INFO]${NC} Architecture: ${GREEN}$ARCH${NC}"
# Checking if the docker image has been already pulled
IMG_CHECK=$(docker images -q $DOCKER_IMAGE)
if [ "$IMG_CHECK" != "" ]
then
echo -e "${BLUE}[INFO]${NC} Docker image ${GREEN}$DOCKER_IMAGE${NC} found"
else
echo -e "${BLUE}[INFO]${NC} Docker image ${RED}$DOCKER_IMAGE${NC} not found"
# Option 1: Building
echo -e "[+] Building the image ${GREEN}$DOCKER_IMAGE${NC} (Grab a coffee...)"
if [ "$ARCH" == "armv7l" ]
then
docker build -q --rm -t $DOCKER_IMAGE -f "$PATHSCRIPT"/build/Dockerfile_armv7 .
elif [ "$ARCH" == "x86_64" ]
then
#docker build -q --rm -t $DOCKER_IMAGE -f "$PATHSCRIPT"/build/Dockerfile_x86_64 .
sudo -u "$USER" bash -c "docker build -q --rm -t $DOCKER_IMAGE -f "$PATHSCRIPT"/build/Dockerfile_x86_64 ."
fi
fi
}
hostapd_setup() {
### Check if hostapd is running in the host
hostapd_pid=$(pgrep hostapd)
if [ ! "$hostapd_pid" == "" ]
then
echo -e "${BLUE}[INFO]${NC} hostapd service is already running in the system, make sure you use a different wireless interface..."
#kill -9 "$hostapd_pid"
fi
# Unblock wifi and bring the wireless interface up
echo -e "${BLUE}[INFO]${NC} Unblocking wifi and setting ${IFACE} up"
rfkill unblock wifi
ip link set "$IFACE" up
# Check if a wlan config file exists, else take wlan parameters by default
if [ -e "$PATHSCRIPT"/"$CONF_FILE" ]
then
echo -e "${BLUE}[INFO]${NC} Found WLAN config file"
# Parse the wlan config file
IFS="="
while read -r name value
do
case $name in
''|\#* ) continue;; # Skip blank lines and lines starting with #
"SSID" )
SSID=${value//\"/}
echo -e "${BLUE}"[INFO]"${NC}" SSID: "${MAGENTA}""$SSID""${NC}";;
"PASSPHRASE" )
PASSPHRASE=${value//\"/};;
"HW_MODE" )
HW_MODE=${value//\"/};;
"CHANNEL" )
CHANNEL=${value//\"/};;
"SUBNET" )
SUBNET=${value//\"/};;
"IP_AP" )
IP_AP=${value//\"/};;
"NETMASK" )
NETMASK=${value//\"/};;
"DNS_SERVER" )
DNS_SERVER=${value//\"/};;
"HT_CAPAB" )
HT_CAPAB=${value//\"/};;
"DOCKER_NAME" )
DOCKER_NAME=${value//\"/};;
* )
echo Parameter "$name" in "$PATHSCRIPT"/"$CONF_FILE" not recognized
esac
done < "$PATHSCRIPT"/"$CONF_FILE"
else
echo -e "${BLUE}[INFO]${NC} WLAN config file not found. Setting default WLAN parameters"
echo -e "${BLUE}"[INFO]"${NC}" SSID: "${MAGENTA}""$SSID""${NC}"
fi
}
init () {
IFACE="$1"
PHY=$(iface_check "$IFACE")
# Number of phy interfaces
NUM_PHYS=$(iw dev | grep -c phy)
echo -e "${BLUE}[INFO]${NC} Number of physical wireless interfaces connected: ${GREEN}$NUM_PHYS${NC}"
docker_img
hostapd_setup "$IFACE"
### Generating hostapd.conf file
echo -e "[+] Generating hostapd.conf"
sed -e "s/_SSID/$SSID/g" -e "s/_IFACE/$IFACE/" -e "s/_HW_MODE/$HW_MODE/g" -e "s/_CHANNEL/$CHANNEL/g" -e "s/_HT_CAPAB/$HT_CAPAB/g" -e "s/_PASSPHRASE/$PASSPHRASE/g" -e "s/_WPA_MODE/$WPA_MODE/g" "$PATHSCRIPT"/templates/hostapd.template > "$PATHSCRIPT"/hostapd.conf
### Generating dnsmasq.conf file
echo -e "[+] Generating dnsmasq.conf"
sed -e "s/_DNS_SERVER/$DNS_SERVER/g" -e "s/_IFACE/$IFACE/" -e "s/_SUBNET_FIRST/$SUBNET.20/g" -e "s/_SUBNET_END/$SUBNET.254/g" "$PATHSCRIPT"/templates/dnsmasq.template > "$PATHSCRIPT"/dnsmasq.conf
}
service_start () {
IFACE="$1"
echo -e "[+] Starting the docker container with name ${GREEN}$DOCKER_NAME${NC}"
touch hostapd.log
docker run -dt --name $DOCKER_NAME --net=bridge --cap-add=NET_ADMIN --cap-add=NET_RAW -v "$PATHSCRIPT"/hostapd.conf:/etc/hostapd/hostapd.conf -v "$PATHSCRIPT"/dnsmasq.conf:/etc/dnsmasq.conf -v "$PATHSCRIPT"/hostapd.log:/var/log/hostapd.log $DOCKER_IMAGE > /dev/null 2>&1
pid=$(docker inspect -f '{{.State.Pid}}' $DOCKER_NAME)
# Assign phy wireless interface to the container
mkdir -p /var/run/netns
ln -s /proc/"$pid"/ns/net /var/run/netns/"$pid"
iw phy "$PHY" set netns "$pid"
### Assign an IP to the wifi interface
echo -e "[+] Configuring ${GREEN}$IFACE${NC} with IP address ${GREEN}$IP_AP${NC}"
ip netns exec "$pid" ip addr flush dev "$IFACE"
ip netns exec "$pid" ip link set "$IFACE" up
ip netns exec "$pid" ip addr add "$IP_AP$NETMASK" dev "$IFACE"
### iptables rules for NAT
echo "[+] Adding natting rule to iptables (container)"
ip netns exec "$pid" iptables -t nat -A POSTROUTING -s $SUBNET.0$NETMASK ! -d $SUBNET.0$NETMASK -j MASQUERADE
### Enable IP forwarding
echo "[+] Enabling IP forwarding (container)"
ip netns exec "$pid" echo 1 > /proc/sys/net/ipv4/ip_forward
### start hostapd and dnsmasq in the container
echo -e "[+] Starting ${GREEN}hostapd${NC} and ${GREEN}dnsmasq${NC} in the docker container ${GREEN}$DOCKER_NAME${NC}"
docker exec "$DOCKER_NAME" start_ap
}
service_stop () {
IFACE="$1"
echo -e "[-] Stopping ${GREEN}$DOCKER_NAME${NC}"
docker stop $DOCKER_NAME > /dev/null 2>&1
echo -e "[-] Removing ${GREEN}$DOCKER_NAME${NC}"
docker rm $DOCKER_NAME > /dev/null 2>&1
echo [-] Removing conf files
if [ -e "$PATHSCRIPT"/hostapd.conf ]
then
rm "$PATHSCRIPT"/hostapd.conf
fi
if [ -e "$PATHSCRIPT"/dnsmasq.conf ]
then
rm "$PATHSCRIPT"/dnsmasq.conf
fi
echo [-] Removing IP address in "$IFACE"
ip addr del "$IP_AP$NETMASK" dev "$IFACE" > /dev/null 2>&1
# Clean up dangling symlinks in /var/run/netns
find -L /var/run/netns -type l -delete
}
#########################################################################
# MAIN #
#########################################################################
if [ "$1" == "start" ]
then
if [[ -z "$2" ]]
then
echo -e "${RED}[ERROR]${NC} No interface provided. Exiting..."
exit 1
fi
IFACE=${2}
service_stop "$IFACE"
clear
print_banner
init "$IFACE"
service_start "$IFACE"
elif [ "$1" == "stop" ]
then
if [[ -z "$2" ]]
then
echo -e "${RED}[ERROR]${NC} No interface provided. Exiting..."
exit 1
fi
IFACE=${2}
service_stop "$IFACE"
else
echo "Usage: $0 <start|stop> <interface>"
fi