#!/bin/bash

# Update and isntall the packages unsed in my homelab

# need to be root
if [ "$EUID" -ne 0 ]; then
  echo "Please run as root"
  exit
fi

# Debian OS
if [ -f /etc/debian_version ]; then
    # install the apt-transport-https
    apt install -y apt-transport-https
    # download the gpg key for PBIS-Open
    wget -O - http://repo.pbis.beyondtrust.com/apt/RPM-GPG-KEY-pbis | apt-key add -
    # download the repo for PBIS-Open for SSO and Domain 
    wget -O /etc/apt/sources.list.d/pbiso.list http://repo.pbis.beyondtrust.com/apt/pbiso.list 
    # update the list of available packages
    apt update
    # install the packages
    apt install -y pbis-open sudo nano htop nload iperf3 iperf3 open-vm-tools unattended-upgrades unzip git

# CentOS OS
elif [ -f /etc/redhat-release ]; then
    # isntall the epel for other packages and wget
    yum install -y wget epel-release git
    
    # download the repo for PBIS-Open for SSO and Domain
    wget -O /etc/yum.repos.d/pbiso.repo http://repo.pbis.beyondtrust.com/yum/pbiso.repo
    
    # clean the yum cache
    yum clean all
    # install the packages
    yum install -y pbis-open sudo nano htop nload iperf3 bind-utils open-vm-tools yum-cron unzip

    # modify yum-cron config to auto install security updates and enable/start the service 
    sed --in-place "s/^update_cmd\ =\ default/update_cmd\ =\ security/" /etc/yum/yum-cron.conf
    sed --in-place "s/^apply_updates\ =\ no/apply_updates\ =\ yes/" /etc/yum/yum-cron.conf
    systemctl enable yum-cron
    systemctl start yum-cron 

    # modify ssh to allow root login and then restart the service
    sed --in-place "s/^#PermitRootLogin\ yes/PermitRootLogin\ yes/" /etc/ssh/sshd_config
    systemctl restart sshd

else
    echo "Unable to determine linux distro"
    exit
fi