f5fpc-vpn.sh

#!/usr/bin/env bash

DOCKER_IMAGE="openmindonline/f5fpc"
CONTAINER_NAME="f5fpc-vpn"
VPNHOST=""
USERNAME=""
PASSWORD=""
keep_running=1

for cmd in docker ip; do
  if ! command -v "$cmd" >/dev/null 2>&1; then
    echo "Unsatisfied dependencies: $cmd command not found!"
    exit 1
  fi
done

show_help() {
  cat << EOF
Usage: $0 <MODE> [<PARAMETERS...>]

Supported modes:
  - client
  - gateway

Supported parameters:
  -h --help  Show this help text
  -t --host     VPN host
  -u --user     VPN username
  -p --password VPN password
EOF
}

observe_f5fpc() {
  last_result=-1
  while [ $keep_running ] ; do
    output=$(docker exec "$CONTAINER_NAME" /usr/local/bin/f5fpc -i)
    result=$?
    case $result in
      0) # Everything seems to be ok
        ;;
      1)
        if [ "$last_result" != "1" ] ; then
          echo "Session initialized"
        fi
        ;;
      2)
        if [ "$last_result" != "2" ] ; then
          echo "User login in progress"
        fi
        ;;
      3)
        if [ "$last_result" != "3" ] ; then
          echo "Waiting..."
        fi
        ;;
      5)
        if [ "$last_result" != "5" ] ; then
          echo "Connection established successfully"
        fi
        ;;
      7)
        echo "Logon denied"
        echo "$output"
        echo "Shutting down..."
        docker stop "$CONTAINER_NAME"
        echo ""
        exit
        ;;
      9)
        echo "Connection timed out"
        echo "Shutting down..."
        docker stop "$CONTAINER_NAME"
        echo ""
        exit
        ;;
      85) # client not connected
        exit
        ;;
      *)
        echo "Unknown result code: $result"
        echo "Please create an issue with this code here:"
        echo "https://github.com/MatthiasLohr/docker-f5fpc/issues/new"
        echo ""
        echo "Additional information:"
        echo "$output"
        ;;
    esac
    last_result="$result"
  done
}

start_client() {
  if ! docker run -d --rm --privileged \
    --name "$CONTAINER_NAME" \
    --net host \
    -e VPNHOST="$VPNHOST" \
    -e USERNAME="$USERNAME" \
    -e PASSWORD="$PASSWORD" \
    "${DOCKER_IMAGE}" \
    /opt/idle.sh > /dev/null; then
      echo "Error starting docker container."
      exit 1
  fi
  docker exec -it "$CONTAINER_NAME" /opt/connect.sh
  observe_f5fpc
}

start_gateway() {
  if ! docker run -d --rm --privileged \
    --name "$CONTAINER_NAME" \
    --sysctl net.ipv4.ip_forward=1 \
    -e VPNHOST="$VPNHOST" \
    -e USERNAME="$USERNAME" \
    -e PASSWORD="$PASSWORD" \
    "${DOCKER_IMAGE}" \
    /opt/idle.sh > /dev/null; then
      echo "Error starting docker container."
      exit 1
  fi
  docker exec -it "$CONTAINER_NAME" /opt/connect.sh
  dockerip=$(docker inspect -f '{{range .NetworkSettings.Networks}}{{.IPAddress}}{{end}}' $CONTAINER_NAME)
  for network in "${NETWORKS[@]}"; do
    sudo ip route add "$network" via "$dockerip"
  done
  observe_f5fpc
}

stop_vpn() {
  echo "Shutting down..."
  dockerip=$(docker inspect -f '{{range .NetworkSettings.Networks}}{{.IPAddress}}{{end}}' $CONTAINER_NAME)
  for network in "${NETWORKS[@]}"; do
    sudo ip route del "$network" via "$dockerip"
  done
  docker exec "$CONTAINER_NAME" /usr/local/bin/f5fpc -o > /dev/null
  docker stop "$CONTAINER_NAME"
  exit
}

# read CLI parameters
POSITIONAL=()
NETWORKS=()
while [ $# -gt 0 ] ; do
  case $1 in
    -h|--help)
      show_help
      exit
      shift
      ;;
    -t|--host)
      VPNHOST="$2"
      shift
      shift
      ;;
    -u|--user)
      USERNAME="$2"
      shift
      shift
      ;;
    -p|--password)
      PASSWORD="$2"
      shift
      shift
      ;;
    -n|--network)
      NETWORKS+=("$2")
      shift
      shift
      ;;
    -i|--image)
      DOCKER_IMAGE="$2"
      shift
      shift
      ;;
    *)
      POSITIONAL+=("$1")
      shift
      ;;
  esac
done
set -- "${POSITIONAL[@]}" # restore positional parameters

# start vpn connection
trap stop_vpn INT
MODE="$1"

if [ -z "$MODE" ] ;  then
  echo "No mode given!"
  show_help
  exit 1
fi

case $MODE in
  client)
    start_client
    ;;
  gateway)
    start_gateway
    ;;
  *)
    echo "Unsupported mode $MODE!"
    show_help
    exit 1
    ;;
esac