mirror of
https://github.com/Security-Onion-Solutions/securityonion.git
synced 2025-12-06 09:12:45 +01:00
222 lines
6.6 KiB
Bash
222 lines
6.6 KiB
Bash
#!/bin/bash
|
|
|
|
#################################################################
|
|
# RAID-1 Setup Script for NVMe Drives
|
|
#################################################################
|
|
#
|
|
# DESCRIPTION:
|
|
# This script automatically sets up a RAID-1 (mirrored) array using two NVMe drives
|
|
# (/dev/nvme0n1 and /dev/nvme1n1) and mounts it at /nsm with XFS filesystem.
|
|
#
|
|
# FUNCTIONALITY:
|
|
# - Detects and reports existing RAID configurations
|
|
# - Thoroughly cleans target drives of any existing data/configurations
|
|
# - Creates GPT partition tables with RAID-type partitions
|
|
# - Establishes RAID-1 array (/dev/md0) for data redundancy
|
|
# - Formats the array with XFS filesystem for performance
|
|
# - Automatically mounts at /nsm and configures for boot persistence
|
|
# - Provides monitoring information for resync operations
|
|
#
|
|
# SAFETY FEATURES:
|
|
# - Requires root privileges
|
|
# - Exits gracefully if RAID already exists and is mounted
|
|
# - Performs comprehensive cleanup to avoid conflicts
|
|
# - Forces partition table updates and waits for system recognition
|
|
#
|
|
# PREREQUISITES:
|
|
# - Two NVMe drives: /dev/nvme0n1 and /dev/nvme1n1
|
|
# - Root access
|
|
# - mdadm, sgdisk, and standard Linux utilities
|
|
#
|
|
# WARNING: This script will DESTROY all data on the target drives!
|
|
#
|
|
# USAGE: sudo ./raid_setup.sh
|
|
#
|
|
#################################################################
|
|
|
|
# Exit on any error
|
|
set -e
|
|
|
|
# Function to log messages
|
|
log() {
|
|
echo "[$(date '+%Y-%m-%d %H:%M:%S')] $1"
|
|
}
|
|
|
|
# Function to check if running as root
|
|
check_root() {
|
|
if [ "$EUID" -ne 0 ]; then
|
|
log "Error: Please run as root"
|
|
exit 1
|
|
fi
|
|
}
|
|
|
|
# Function to check if RAID is already set up
|
|
check_existing_raid() {
|
|
if [ -e "/dev/md0" ]; then
|
|
if mdadm --detail /dev/md0 &>/dev/null; then
|
|
local raid_state=$(mdadm --detail /dev/md0 | grep "State" | awk '{print $3}')
|
|
local mount_point="/nsm"
|
|
|
|
log "Found existing RAID array /dev/md0 (State: $raid_state)"
|
|
|
|
if mountpoint -q "$mount_point"; then
|
|
log "RAID is already mounted at $mount_point"
|
|
log "Current RAID details:"
|
|
mdadm --detail /dev/md0
|
|
|
|
# Check if resyncing
|
|
if grep -q "resync" /proc/mdstat; then
|
|
log "RAID is currently resyncing:"
|
|
grep resync /proc/mdstat
|
|
log "You can monitor progress with: watch -n 60 cat /proc/mdstat"
|
|
else
|
|
log "RAID is fully synced and operational"
|
|
fi
|
|
|
|
# Show disk usage
|
|
log "Current disk usage:"
|
|
df -h "$mount_point"
|
|
|
|
exit 0
|
|
fi
|
|
fi
|
|
fi
|
|
|
|
# Check if any of the target devices are in use
|
|
for device in "/dev/nvme0n1" "/dev/nvme1n1"; do
|
|
if lsblk -o NAME,MOUNTPOINT "$device" | grep -q "nsm"; then
|
|
log "Error: $device is already mounted at /nsm"
|
|
exit 1
|
|
fi
|
|
|
|
if mdadm --examine "$device" &>/dev/null || mdadm --examine "${device}p1" &>/dev/null; then
|
|
log "Error: $device appears to be part of an existing RAID array"
|
|
log "To reuse this device, you must first:"
|
|
log "1. Unmount any filesystems"
|
|
log "2. Stop the RAID array: mdadm --stop /dev/md0"
|
|
log "3. Zero the superblock: mdadm --zero-superblock ${device}p1"
|
|
exit 1
|
|
fi
|
|
done
|
|
}
|
|
|
|
# Function to ensure devices are not in use
|
|
ensure_devices_free() {
|
|
local device=$1
|
|
|
|
log "Cleaning up device $device"
|
|
|
|
# Kill any processes using the device
|
|
fuser -k "${device}"* 2>/dev/null || true
|
|
|
|
# Force unmount any partitions
|
|
for part in "${device}"*; do
|
|
if mount | grep -q "$part"; then
|
|
umount -f "$part" 2>/dev/null || true
|
|
fi
|
|
done
|
|
|
|
# Stop any MD arrays using this device
|
|
for md in $(ls /dev/md* 2>/dev/null || true); do
|
|
if mdadm --detail "$md" 2>/dev/null | grep -q "$device"; then
|
|
mdadm --stop "$md" 2>/dev/null || true
|
|
fi
|
|
done
|
|
|
|
# Clear MD superblock
|
|
mdadm --zero-superblock "${device}"* 2>/dev/null || true
|
|
|
|
# Remove LVM PV if exists
|
|
pvremove -ff -y "$device" 2>/dev/null || true
|
|
|
|
# Clear all signatures
|
|
wipefs -af "$device" 2>/dev/null || true
|
|
|
|
# Delete partition table
|
|
dd if=/dev/zero of="$device" bs=512 count=2048 2>/dev/null || true
|
|
dd if=/dev/zero of="$device" bs=512 seek=$(( $(blockdev --getsz "$device") - 2048 )) count=2048 2>/dev/null || true
|
|
|
|
# Force kernel to reread
|
|
blockdev --rereadpt "$device" 2>/dev/null || true
|
|
partprobe -s "$device" 2>/dev/null || true
|
|
sleep 2
|
|
}
|
|
|
|
# Main script
|
|
main() {
|
|
log "Starting RAID setup script"
|
|
|
|
# Check if running as root
|
|
check_root
|
|
|
|
# Check for existing RAID setup
|
|
check_existing_raid
|
|
|
|
# Clean up any existing MD arrays
|
|
log "Cleaning up existing MD arrays"
|
|
mdadm --stop --scan 2>/dev/null || true
|
|
|
|
# Clear mdadm configuration
|
|
log "Clearing mdadm configuration"
|
|
echo "DEVICE partitions" > /etc/mdadm.conf
|
|
|
|
# Clean and prepare devices
|
|
for device in "/dev/nvme0n1" "/dev/nvme1n1"; do
|
|
ensure_devices_free "$device"
|
|
|
|
log "Creating new partition table on $device"
|
|
sgdisk -Z "$device"
|
|
sgdisk -o "$device"
|
|
|
|
log "Creating RAID partition"
|
|
sgdisk -n 1:0:0 -t 1:fd00 "$device"
|
|
|
|
partprobe "$device"
|
|
udevadm settle
|
|
sleep 5
|
|
done
|
|
|
|
log "Final verification of partition availability"
|
|
if ! [ -b "/dev/nvme0n1p1" ] || ! [ -b "/dev/nvme1n1p1" ]; then
|
|
log "Error: Partitions not available after creation"
|
|
exit 1
|
|
fi
|
|
|
|
log "Creating RAID array"
|
|
mdadm --create /dev/md0 --level=1 --raid-devices=2 \
|
|
--metadata=1.2 \
|
|
/dev/nvme0n1p1 /dev/nvme1n1p1 \
|
|
--force --run
|
|
|
|
log "Creating XFS filesystem"
|
|
mkfs.xfs -f /dev/md0
|
|
|
|
log "Creating mount point"
|
|
mkdir -p /nsm
|
|
|
|
log "Updating fstab"
|
|
sed -i '/\/dev\/md0/d' /etc/fstab
|
|
echo "/dev/md0 /nsm xfs defaults,nofail 0 0" >> /etc/fstab
|
|
|
|
log "Reloading systemd daemon"
|
|
systemctl daemon-reload
|
|
|
|
log "Mounting filesystem"
|
|
mount -a
|
|
|
|
log "Saving RAID configuration"
|
|
mdadm --detail --scan > /etc/mdadm.conf
|
|
|
|
log "RAID setup complete"
|
|
log "RAID array details:"
|
|
mdadm --detail /dev/md0
|
|
|
|
if grep -q "resync" /proc/mdstat; then
|
|
log "RAID is currently resyncing. You can monitor progress with:"
|
|
log "watch -n 60 cat /proc/mdstat"
|
|
fi
|
|
}
|
|
|
|
# Run main function
|
|
main "$@"
|