main.sh

#!/bin/bash
#############################################################
# Main startup script to configure and start ZeroTier
#
# Features
# ========
# # Create TUN device if necessary
# # Join ZT network(s) if specified via ENV var NETWORK_IDS
# # Restore iptable rules from file to enable gateway function
#
# Author: SidneyC <sidneyc_at_outlook_dot_com>
# Modified: ddeitterick
#############################################################
export PATH=/bin:/usr/bin:/usr/local/bin:/sbin:/usr/sbin

#Configurable script settings
RETRY_COUNT=3
SLEEP_TIME=5

trap SIGTERM

#Setting up TUN device
mkdir -p /dev/net
if [ ! -c /dev/net/tun ]; then
    echo "INFO: No TUN device found. Creating one."
    mknod /dev/net/tun c 10 200
fi

if [ ! -c /dev/net/tun ]; then
        echo 'FATAL ERROR: Failed to find/create /dev/net/tun device.'
        exit 1
fi

#Enable multipath
if [ ! "${MULTIPATH^^}" == "ENABLED" ]; then
    echo "INFO: Multipath not enabled."
else
    if [ ! -f /etc/iproute2/rt_tables ]; then
        echo "ERROR: rt_tables not found."
        echo "WARNING: Multipath enabled, but not configured correctly."
    elif [ -f /etc/iproute2/rt_tables ] && [ ! -f /var/lib/zerotier-one/setuproutes.sh ] ; then
        echo "ERROR: setuproutes.sh not found. Routing tables not updated."
        echo "WARNING: Multipath enabled, but not configured correctly."
    else
        CMD_OUT=$( /var/lib/zerotier-one/setuproutes.sh 2>&1)
        if [ -z $CMD_OUT ]; then
            echo "INFO: Routing tables updated successfully."
            echo "INFO: Multipath enabled."
        else
            echo "ERROR: Could not update routing tables. MSG is <$CMD_OUT>"
            echo "WARNING: Multipath enabled, but not configured correctly."
        fi
    fi    
fi

#Start the ZT service
zerotier-one & export APP_PID=$!

echo "INFO: ZeroTier client version: $( zerotier-cli -v )"

TRY_COUNT=0
while [ $TRY_COUNT -lt $RETRY_COUNT ]
do
    sleep $SLEEP_TIME
    CMD_OUT=$( zerotier-cli status )
    if [ ! -z "$( echo "$CMD_OUT" | grep "ONLINE" )" ]; then
        TRY_COUNT=$RETRY_COUNT
        echo "INFO: ZeroTier service is now ONLINE. Your ZT address is: $( echo "$CMD_OUT" | cut -f3 -d' ' )"
    else
        TRY_COUNT=`expr $TRY_COUNT + 1`
        if [ $TRY_COUNT -eq $RETRY_COUNT ]; then
            echo "FATAL ERROR: $CMD_OUT"
            exit 1
        fi
    fi
done
#Service up and ONLINE!

#Join one or more network(s) if specified 
if [ ! -z "$NETWORK_IDS" ]; then
    LINE=$(echo $NETWORK_IDS | tr ";" "\n")
    for ID in $LINE; do
        CMD_OUT=$( zerotier-cli join $ID )
        if [ -z "$( echo "$CMD_OUT" | grep "200 join OK" )" ]; then
            echo "ERROR: Could not join network: ($ID). MSG is <$CMD_OUT>"
        else
            echo "INFO: Joined network: $ID"
        fi
    done
fi

#Log which network(s) are connected
CMD_OUT=$( zerotier-cli listnetworks )
CON_COUNT=$( echo "$CMD_OUT" | grep -v "<nwid>" | wc -l )
if [ $CON_COUNT -lt 1 ]; then
    echo "WARNING: No networks configured!"
else
    echo "INFO: Networks configured: $CON_COUNT."
    echo "INFO: Networks connected: $( echo "$CMD_OUT" | grep "OK" | wc -l )."
fi
while IFS= read -r LINE; do
    if [ ! -z "$( echo "$LINE" | grep "OK" )" ]; then
        FIELDS=($LINE)
        echo "INFO: Connected to ${FIELDS[6]} network with name <${FIELDS[3]}> and id <${FIELDS[2]}> using interface <${FIELDS[7]}> with MAC <${FIELDS[4]}> and IP(s) <${FIELDS[8]}>" 
    fi
done <<< "$CMD_OUT"

#Check if ip forwarding is configured and active
if [ -z $( sysctl net.ipv4.ip_forward | cut -f3 -d' ' ) ]; then
    echo "FATAL ERROR: IP forwarding not enabled in host. Please enable IP forwarding in host before starting the container again."
    exit 1
fi

#Import iptables saved rules
FILE=/etc/iptables/rules.v4
if [ -f "$FILE" ]; then
    iptables-legacy-restore -n $FILE
    echo "INFO: Successfully imported iptables save file from: $FILE"
else
    echo "WARNING: iptables save file not imported."
fi

#Add static route for Docker host traffic
CMD_OUT=$( route add -net $DOCKER_HOST netmask 255.255.255.255 gw 172.16.100.1 2>&1)
    if [ -z $CMD_OUT ]; then
        echo "INFO: Static route added successfully."
    else
        echo "ERROR: Could not add static route. MSG is <$CMD_OUT>"
    fi

wait $APP_PID
exit 0