A
8672b0de6b
Full working closed-loop eSIM provisioning stack (spec in claude.md / plan/): Flask API, SQLite subscriber store, credential/profile generator, Open5GS and free5gc core adapters, captive portal, operational scripts, systemd units, network configs, and a 44-test suite. Profile generation currently returns a mock JSON profile; real SGP.22 generation via pySim is the planned Phase-2 upgrade. Fixes two bugs found while getting the suite green: - generate_imsi hardcoded a 10-digit MSIN, producing 16-digit IMSIs for a 3-digit MNC; MSIN length is now 15 - len(mcc) - len(mnc). - check_rate_limit compared timestamps as strings across mismatched formats (SQLite CURRENT_TIMESTAMP vs Python isoformat); both sides now normalized via SQLite datetime() so the window check is chronologically correct. Add .gitignore for venv, caches, runtime config.yaml, and databases. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
137 lines
3.7 KiB
Bash
Executable File
137 lines
3.7 KiB
Bash
Executable File
#!/data/data/com.termux/files/usr/bin/bash
|
|
# termux_setup.sh — Deploy the eSIM provisioning server on Android via Termux.
|
|
# Run from the repo root: bash android/termux_setup.sh
|
|
set -euo pipefail
|
|
|
|
INSTALL_DIR="$HOME/esim-provisioning"
|
|
FLASK_PORT=5000
|
|
NGINX_PORT=8080
|
|
# Default Android hotspot gateway — adjust if your device differs
|
|
AP_IP="${ESIM_AP_IP:-192.168.43.1}"
|
|
|
|
SCRIPT_DIR="$(cd "$(dirname "$0")/.." && pwd)"
|
|
|
|
echo "=== eSIM Provisioning — Termux Setup ==="
|
|
echo " Install dir: $INSTALL_DIR"
|
|
echo " AP IP: $AP_IP"
|
|
echo ""
|
|
|
|
# ---- 1. Update and install packages ----
|
|
echo "[1/5] Installing Termux packages..."
|
|
pkg update -y
|
|
pkg install -y python python-pip nginx
|
|
|
|
# ---- 2. Install Python dependencies ----
|
|
echo "[2/5] Installing Python dependencies..."
|
|
pip install --quiet flask cryptography pymongo pyyaml requests
|
|
|
|
# ---- 3. Deploy server files ----
|
|
echo "[3/5] Deploying server files..."
|
|
mkdir -p "$INSTALL_DIR"/{server/core_adapters,portal/{css,js,assets},scripts,tests,data}
|
|
|
|
cp -r "$SCRIPT_DIR/server/"* "$INSTALL_DIR/server/"
|
|
cp -r "$SCRIPT_DIR/portal/"* "$INSTALL_DIR/portal/"
|
|
cp -r "$SCRIPT_DIR/scripts/"* "$INSTALL_DIR/scripts/"
|
|
cp "$SCRIPT_DIR/requirements.txt" "$INSTALL_DIR/"
|
|
|
|
# Write a localised config
|
|
cat > "$INSTALL_DIR/config.yaml" << EOF
|
|
network:
|
|
mcc: "302"
|
|
mnc: "720"
|
|
plmn: "302720"
|
|
op_key: "63bfa50ee6523365ff14c1f45f88737d"
|
|
|
|
wifi:
|
|
ssid: "Emergency-5G"
|
|
ip: "$AP_IP"
|
|
|
|
server:
|
|
host: "0.0.0.0"
|
|
port: $FLASK_PORT
|
|
debug: false
|
|
|
|
database:
|
|
path: "$INSTALL_DIR/data/subscribers.db"
|
|
|
|
rate_limiting:
|
|
max_profiles_per_mac: 1
|
|
window_hours: 1
|
|
|
|
core:
|
|
type: "none"
|
|
|
|
profile:
|
|
carrier_name: "Ad-Hoc Network"
|
|
profile_name: "Emergency 5G"
|
|
apn: "internet"
|
|
EOF
|
|
|
|
# ---- 4. Configure nginx ----
|
|
echo "[4/5] Configuring nginx..."
|
|
mkdir -p "$PREFIX/etc/nginx/conf.d"
|
|
cat > "$PREFIX/etc/nginx/nginx.conf" << EOF
|
|
worker_processes 1;
|
|
events { worker_connections 64; }
|
|
http {
|
|
include mime.types;
|
|
server {
|
|
listen $NGINX_PORT default_server;
|
|
server_name _;
|
|
|
|
location = / { return 302 http://$AP_IP:$NGINX_PORT/activate; }
|
|
|
|
location /activate {
|
|
alias $INSTALL_DIR/portal/;
|
|
index index.html;
|
|
}
|
|
location /css/ { alias $INSTALL_DIR/portal/css/; }
|
|
location /js/ { alias $INSTALL_DIR/portal/js/; }
|
|
|
|
location /api/ {
|
|
proxy_pass http://127.0.0.1:$FLASK_PORT;
|
|
proxy_set_header X-Real-IP \$remote_addr;
|
|
proxy_set_header X-Forwarded-For \$proxy_add_x_forwarded_for;
|
|
}
|
|
|
|
location / { return 302 http://$AP_IP:$NGINX_PORT/activate; }
|
|
}
|
|
}
|
|
EOF
|
|
|
|
# ---- 5. Initialise database and create start script ----
|
|
echo "[5/5] Initialising database and writing start script..."
|
|
|
|
CONFIG_PATH="$INSTALL_DIR/config.yaml" python "$INSTALL_DIR/scripts/init_db.py"
|
|
|
|
cat > "$INSTALL_DIR/start.sh" << 'STARTEOF'
|
|
#!/data/data/com.termux/files/usr/bin/bash
|
|
cd "$HOME/esim-provisioning"
|
|
echo "Starting nginx..."
|
|
nginx
|
|
echo "Starting Flask provisioning server..."
|
|
CONFIG_PATH="$HOME/esim-provisioning/config.yaml" python -m server.app &
|
|
echo ""
|
|
echo "Server running. Connect to Android hotspot then open:"
|
|
echo " http://192.168.43.1:8080/activate"
|
|
echo ""
|
|
echo "To stop: pkill nginx; pkill -f server.app"
|
|
STARTEOF
|
|
chmod +x "$INSTALL_DIR/start.sh"
|
|
|
|
# Termux:Boot integration
|
|
BOOT_DIR="$HOME/.termux/boot"
|
|
mkdir -p "$BOOT_DIR"
|
|
cp "$INSTALL_DIR/start.sh" "$BOOT_DIR/esim-provisioning.sh"
|
|
|
|
echo ""
|
|
echo "=== Setup Complete ==="
|
|
echo ""
|
|
echo "Next steps:"
|
|
echo " 1. Enable WiFi Hotspot in Android Settings (any SSID, no password)"
|
|
echo " 2. Run: ~/esim-provisioning/start.sh"
|
|
echo " 3. Clients connect to hotspot and visit:"
|
|
echo " http://$AP_IP:$NGINX_PORT/activate"
|
|
echo ""
|
|
echo "Install Termux:Boot (from F-Droid) for auto-start on device reboot."
|