setup.sh

#!/bin/bash
set -Eeuo pipefail

### --- VALIDAR ROOT --- ###
if [[ "$(id -u)" -ne 0 ]]; then
    echo "Este script debe ejecutarse como root."
    exit 1
fi

trap 'echo "Error en la línea $LINENO. Abortando."' ERR

### --- CONFIGURACIÓN INICIAL POR DEFECTO --- ###
DEF_USERNAME="tu-usuario"
DEF_SSH_KEY="tu-ssh-key"
AZURE_AGENT_VERSION="4.265.1"
AZURE_AGENT_URL="https://download.agent.dev.azure.com/agent/${AZURE_AGENT_VERSION}/vsts-agent-linux-x64-${AZURE_AGENT_VERSION}.tar.gz"

### --- INPUT --- ###
read -rp "Nombre de usuario a crear [${DEF_USERNAME}]: " USERNAME
USERNAME="${USERNAME:-$DEF_USERNAME}"

read -rp "Clave SSH pública (ENTER para default): " SSH_KEY
SSH_KEY="${SSH_KEY:-$DEF_SSH_KEY}"

### --- VARIABLES --- ###
USER_HOME="/home/${USERNAME}"
SSH_DIR="${USER_HOME}/.ssh"
DOWNLOADS="${USER_HOME}/Downloads"
AGENT_DIR="/azureAgent"

### --- FUNCIONES --- ###
log() { echo -e "\n=== $1 ===\n"; }

ensure_group() {
    local user="$1"
    local group="$2"

    if ! id -nG "$user" | tr ' ' '\n' | grep -qx "$group"; then
        usermod -aG "$group" "$user"
    fi
}

require_cmd() {
    command -v "$1" >/dev/null 2>&1 || {
        echo "Falta el comando requerido: $1"
        exit 1
    }
}

install_docker_latest() {
    log "Instalando última versión de Docker Engine + Compose Plugin"

    apt-get update -y
    apt-get install -y ca-certificates curl gnupg

    install -m 0755 -d /etc/apt/keyrings

    if [[ ! -f /etc/apt/keyrings/docker.asc ]]; then
        curl -fsSL https://download.docker.com/linux/ubuntu/gpg -o /etc/apt/keyrings/docker.asc
        chmod a+r /etc/apt/keyrings/docker.asc
    fi

    . /etc/os-release
    ARCH="$(dpkg --print-architecture)"
    CODENAME="${VERSION_CODENAME}"

    cat >/etc/apt/sources.list.d/docker.list <<EOF
deb [arch=${ARCH} signed-by=/etc/apt/keyrings/docker.asc] https://download.docker.com/linux/ubuntu ${CODENAME} stable
EOF

    # Eliminar paquetes conflictivos si existen
    apt-get remove -y docker.io docker-doc docker-compose docker-compose-v2 podman-docker containerd runc || true

    apt-get update -y
    apt-get install -y docker-ce docker-ce-cli containerd.io docker-buildx-plugin docker-compose-plugin

    systemctl enable --now docker

    docker --version
    docker compose version
}

### --- PRECHECKS --- ###
require_cmd apt-get
require_cmd curl
require_cmd tar
require_cmd wget

### --- ACTUALIZAR SISTEMA --- ###
log "Actualizando sistema"
apt-get update -y
DEBIAN_FRONTEND=noninteractive apt-get full-upgrade -y

### --- INSTALAR DOCKER --- ###
install_docker_latest

### --- CREAR USUARIO --- ###
log "Creando usuario ${USERNAME}"

if ! id "${USERNAME}" &>/dev/null; then
    adduser --disabled-password --gecos "" "${USERNAME}"
fi

ensure_group "${USERNAME}" "sudo"
ensure_group "${USERNAME}" "docker"

### --- SUDO SIN CONTRASEÑA --- ###
log "Configurando sudo sin contraseña"

SUDO_FILE="/etc/sudoers.d/${USERNAME}"
echo "${USERNAME} ALL=(ALL) NOPASSWD:ALL" > "$SUDO_FILE"
chmod 440 "$SUDO_FILE"

if ! visudo -cf "$SUDO_FILE"; then
    echo "Error en sudoers, corregir manualmente: $SUDO_FILE"
    exit 1
fi

### --- SSH KEY --- ###
log "Configurando SSH"

mkdir -p "${SSH_DIR}"
chmod 700 "${SSH_DIR}"
echo "${SSH_KEY}" > "${SSH_DIR}/authorized_keys"
chmod 600 "${SSH_DIR}/authorized_keys"
chown -R "${USERNAME}:${USERNAME}" "${SSH_DIR}"

### --- CARPETA DOCKER --- ###
log "Creando carpeta /docker"

mkdir -p /docker
chmod 755 /docker
chown "${USERNAME}:${USERNAME}" /docker

### --- AZURE AGENT: DESCARGA --- ###
log "Descargando Azure Agent ${AZURE_AGENT_VERSION}"

mkdir -p "${DOWNLOADS}"
wget -q "${AZURE_AGENT_URL}" -O "${DOWNLOADS}/agent.tar.gz"
chown -R "${USERNAME}:${USERNAME}" "${DOWNLOADS}"

### --- INSTALACIÓN AZURE AGENT --- ###
log "Instalando Azure Agent"

mkdir -p "${AGENT_DIR}"
tar -xzf "${DOWNLOADS}/agent.tar.gz" -C "${AGENT_DIR}"

chmod -R 755 "${AGENT_DIR}"
chown -R "${USERNAME}:${USERNAME}" "${AGENT_DIR}"

cd "${AGENT_DIR}"

log "Instalando dependencias del agente Azure"
if [[ ! -f ".dependencies_installed" ]]; then
    ./bin/installdependencies.sh
    touch .dependencies_installed
fi

read -rp "Nombre Azure Organización: " YOUR_ORGANIZATION
read -rp "Nombre Grupo de Pools: " YOUR_POOLS
read -srp "Access Token [oculta]: " YOUR_ACCESS_TOKEN
echo ""

sudo -u "${USERNAME}" ./config.sh --unattended \
  --agent "$(hostname)" \
  --url "https://dev.azure.com/${YOUR_ORGANIZATION}" \
  --auth PAT \
  --token "${YOUR_ACCESS_TOKEN}" \
  --pool "${YOUR_POOLS}" \
  --work "_work" \
  --replace \
  --acceptTeeEula || true

./svc.sh install "${USERNAME}" || true
./svc.sh start || true

### --- SAMBA --- ###
log "Instalando y configurando Samba"

apt-get install -y samba

read -srp "Contraseña de Samba [oculta]: " SAMBA_PASSWORD
echo ""

(echo "${SAMBA_PASSWORD}"; echo "${SAMBA_PASSWORD}") | smbpasswd -s -a "${USERNAME}"

### --- VALIDACIÓN FINAL DOCKER --- ###
log "Validando Docker"
docker --version
docker compose version
systemctl is-active --quiet docker && echo "Docker activo ✔"

### --- FINAL --- ###
log "SETUP COMPLETADO ✔"
echo "Reiniciar manualmente cuando desees: sudo reboot"
echo "Luego el usuario ${USERNAME} deberá volver a iniciar sesión para tomar el grupo docker."

### --- ELIMINAR SCRIPT SI NO ESTÁ EN / --- ###
SCRIPT_PATH="$(readlink -f "$0")"
SCRIPT_DIR="$(dirname "$SCRIPT_PATH")"
SCRIPT_NAME="$(basename "$SCRIPT_PATH")"
[[ "$SCRIPT_DIR" != "/" ]] && rm -f "$SCRIPT_PATH" || true