docker.sh

#!/bin/bash

function main {
    # loop args
    if [[ $# -ne 0 ]] ; then
        for var in "$@" ; do
            eval $var
        done
        exit 1
    fi
    
    # menu
    while true; do
    read -n 1 -p "
    server tools
    ===================
    1) Docker Base - Arch
    2) Docker Base - Debian/Arbmain
    3) Docker Remove All
    4) route port to 80
    5) docker pipe
    b) backup docker folder
    u) user permissions
    *) Any key to exit
    :" ans;
    reset
    case $ans in 
        1) fn_docker_base_arch ;;
        2) fn_docker_base_debian ;;
        4) fn_remove_all ;;
        4) fn_nftables ;;
        5) fn_dockerpipe ;;
        b) fn_backup ;;
        u) fn_user_permissions ;;
        *) $SHELL ;;
    esac
    done
}


function fn_user_permissions {
    sudo usermod -aG docker $USER
    newgrp docker # login to group, save reboot!
}


function fn_backup {
    echo "backup docker folder..."
    hostname=$(hostname)
    archive=$HOME/Backups/docker-${hostname}.tar.gz
    backup=$HOME/Docker
    
    echo "listing containers"
    containers=$(docker container list -qa)
    echo $containers

    mkdir $HOME/Backups

    echo "stop containers"
    sudo docker container stop ${containers}

    echo "create backup..."
    echo ${archive}
    sudo tar -czvf ${archive} ${backup} > /dev/null

    echo "restart containers"
    sudo docker restart ${containers}

    echo "done!"
}

function fn_nftables {
    echo "Enter port to forward to 80: "
    read port_forward

    sudo systemctl --now enable nftables

sudo tee /etc/nftables.conf > /dev/null << EOL
#!/usr/bin/nft -f

flush ruleset

table inet filter {
        chain input {
                type filter hook input priority 0;
        }
        chain forward {
                type filter hook forward priority 0;
        }
        chain output {
                type filter hook output priority 0;
        }
}

table ip nat {
        chain prerouting {
                type nat hook prerouting priority 0; policy accept;
                tcp dport 80 redirect to ${port_forward}
        }

        chain postrouting {
                type nat hook postrouting priority 0; policy accept;
        }
}
EOL

    sudo nft -f /etc/nftables.conf
    #sudo systemctl restart nftables
    sudo nft list ruleset
}


function fn_dockerpipe {
    # pipe
    mkdir $HOME/Docker/pipe
    mkfifo $HOME/Docker/pipe/pipe_in
    mkfifo $HOME/Docker/pipe/pipe_out

    # create script
sudo tee $HOME/Docker/pipe/start_pipe.sh > /dev/null << EOL
#!/bin/bash
while true; do eval "\$(cat pipe_in)" > pipe_out; done
EOL

sudo tee $HOME/Docker/pipe/run.sh > /dev/null << EOL
#!/bin/bash
echo "\$@" > /pipe/pipe_in
cat /pipe/pipe_out
EOL

    sudo chmod +x $HOME/Docker/pipe/start_pipe.sh
    sudo chmod +x $HOME/Docker/pipe/run.sh

    # create service
sudo tee /etc/systemd/system/pipe.service > /dev/null << EOL
    [Unit]
    Description=docker pipe
    After=sound.target

    [Service]
    ExecStart=$HOME/Docker/pipe/start_pipe.sh
    WorkingDirectory=$HOME/Docker/pipe/
    StandardOutput=inherit
    StandardError=inherit
    Restart=always
    User=$USER
    Environment="PULSE_RUNTIME_PATH=/run/user/1000/pulse/"

    [Install]
    WantedBy=default.target
EOL

    sudo systemctl reset-failed pipe
    sudo systemctl enable pipe
    sudo systemctl start pipe
    systemctl status pipe.service
}


function fn_docker_base_debian {
    # https://docs.docker.com/engine/install/debian/

    # https://download.docker.com/linux/debian/dists/
    VERSION="bookworm"
    echo "install docker for debian: $VERSION"

    # remove old
    ./util.sh -u docker.io docker-doc docker-compose podman-docker containerd runc
    sudo apt autoremove -y

    # Add Docker's official GPG key:
    sudo apt update
    sudo apt install ca-certificates curl
    sudo install -m 0755 -d /etc/apt/keyrings
    sudo curl -fsSL https://download.docker.com/linux/debian/gpg -o /etc/apt/keyrings/docker.asc
    sudo chmod a+r /etc/apt/keyrings/docker.asc

    # Add the repository to Apt sources:
    echo \
    "deb [arch=$(dpkg --print-architecture) signed-by=/etc/apt/keyrings/docker.asc] https://download.docker.com/linux/debian \
    $(. /etc/os-release && echo "$VERSION") stable" | \
    sudo tee /etc/apt/sources.list.d/docker.list > /dev/null
    sudo apt update

    # install
    ./util.sh -i docker-ce docker-ce-cli containerd.io docker-buildx-plugin docker-compose-plugin

    # add user
    sudo usermod -aG docker ${USER}
    echo "reboot required!"
}


function fn_docker_base_arch {
    ./util.sh -i docker docker-compose
    sudo systemctl enable docker
    sudo systemctl start docker
    # add user
    sudo usermod -aG docker {$USER}
    echo "reboot required!"
}


function fn_remove_all {
    sudo docker container stop $(sudo docker container ls -aq)
    sudo docker container prune -f
    sudo docker ps
}


# pass all args
main "$@"