ProxPrep

#!/bin/bash

#Versão: 1.3
#Data..: 27/02/2020
#Quem..: Siena


### Shutdown ###
function pause(){
   read -p "$*"
}
clear
echo ""
echo ""
echo "#####################"
echo "#   A T E N Ç Ã O   #"
echo "#####################"
echo ""
echo "A VM será desligada."
echo ""
echo "Vários arquivos serão apagados/limpos para envelopar o template para novo deploy."
echo ""
echo "Após reinicia-la, altere o nome e domínio (se necessário), e"
echo "Alterar nome da vm em:"
echo "- /etc/hostname"
echo "- /etc/hosts"
echo ""
echo "Alterar o UUID"
echo "   systemd-machine-id-setup"
echo ""
echo "Alterar configurações de rede em"
echo "/etc/network/interfaces e /etc/resolv.conf."
echo ""
echo "Ajustar o /etc/systemd/timesyncd.conf para:"
echo "FallbackNTP=ntp.cais.rnp.br {GATEWAY_VLAN}"
echo "Rode o comando:"
echo "   dpkg-reconfigure openssh-server"
echo "   systemctl restart ssh"
echo "para refazer as chaves de acesso."
echo ""
echo "OBS: este script foi testado apenas no Debian 10 Buster"
echo ""
pause 'ENTER p/ confirmar ou CTRL+C p/ cancelar:'

### Remove Old Kernels ###
dpkg -l 'linux-*' | sed '/^ii/!d;/'"$(uname -r | sed "s/\(.*\)-\([^0-9]\+\)/\1/")"'/d;s/^[^ ]* [^ ]* \([^ ]*\).*/\1/;/[0-9]/!d' | xargs apt-get -y purge
update-initramfs -u -k all
grub-install --recheck --no-floppy /dev/sda
update-grub2
sync

### Time Sync ###
timedatectl set-ntp on
timedatectl status
systemctl enable  systemd-timesyncd.service
systemctl restart systemd-timesyncd.service
systemctl enable  ntp
systemctl restart ntp

service ntp stop
ntpd -gq
service ntp start
ntpq -p


### Clear ###
apt --reinstall install debian-keyring debian-archive-keyring
apt --purge autoremove
apt autoclean
apt clean
apt purge
rm -rf /var/lib/apt/lists/*
rm -f /var/cache/apt/archives/*
rm -f /var/cache/apt/archives/partial/*
rm -f /var/cache/apt/pkgcache.bin
rm -f /var/cache/apt/srcpkgcache.bin
> /var/lib/apt/cdroms.list


rm -rf /tmp/*
rm -rf /tmp/.*
rm –rf /var/tmp/*
rm –rf /var/tmp/.*

#Clear the machine-id
> /etc/machine-id

#E-mail
postsuper -d ALL

#Clear bash history
> /root/.bash_history
unset HISTFILE

#SSH
rm -f /etc/ssh/ssh_host_*
rm -rf /root/.ssh/*

#Force the logs to rotate & remove old logs
logrotate –f /etc/logrotate.conf
> /var/lib/logrotate/status
rm –f /var/log/*.log* /var/log/*.gz
rm –f /var/log/mail.*
rm –f /var/log/messages*
rm –f /var/log/syslog*
rm -f /var/log/debug*
rm -rf /var/log/boot-repair/*
> /var/log/stunnel4/stunnel.log

#Truncate the audit logs
cat /dev/null > /var/log/wtmp
cat /dev/null > /var/log/lastlog
cat /dev/null > /var/log/faillog

#Remove the udev persistent device rules
rm -f /etc/udev/rules.d/70*

### Stop Services ###
systemctl stop rsyslog
systemctl stop syslog
systemctl stop ssh
systemctl stop postfix
systemctl stop apparmor
systemctl stop networking

### Finnaly ###
> /root/.bash_history
unset HISTFILE
fstrim /
sync
echo ""
echo "A VM será desligada em 15 segundos..."
echo ""
sleep 10
shutdown -h now