USER_LC_ALL="${LC_ALL}"

LC_ALL=C

FHEM_DIR="/opt/fhem"

SLEEPINTERVAL=0.5

TIMEOUT="${TIMEOUT:-10}"

RESTART="${RESTART:-1}"

TELNETPORT="${TELNETPORT:-7072}"

CONFIGTYPE="${CONFIGTYPE:-"fhem.cfg"}"

DNS=$( cat /etc/resolv.conf | grep -m1 nameserver | sed -e 's/^nameserver[ \t]*//' )

export DOCKER_GW="${DOCKER_GW:-$(netstat -r -n | grep ^0.0.0.0 | awk '{print $2}')}"

export DOCKER_HOST="${DOCKER_HOST:-${DOCKER_GW}}"

FHEM_UID="${FHEM_UID:-6061}"

FHEM_GID="${FHEM_GID:-6061}"

FHEM_PERM_DIR="${FHEM_PERM_DIR:-0750}"

FHEM_PERM_FILE="${FHEM_PERM_FILE:-0640}"

FHEM_CLEANINSTALL=1

UMASK="${UMASK:-0037}"

BLUETOOTH_GID="${BLUETOOTH_GID:-6001}"

GPIO_GID="${GPIO_GID:-6002}"

I2C_GID="${I2C_GID:-6003}"

APT_PKGS="${APT_PKGS:-}"

CPAN_PKGS="${CPAN_PKGS:-}"

PIP_PKGS="${PIP_PKGS:-}"

NPM_PKGS="${NPM_PKGS:-}"

[ ! -f /image_info.EMPTY ] && touch /image_info.EMPTY

ip link add dummy0 type dummy >/dev/null 2>&1

if [[ $? -eq 0 ]]; then

echo 1 > /docker.privileged

ip link delete dummy0 >/dev/null

export DOCKER_PRIVILEGED=1

echo 0 > /docker.privileged

export DOCKER_PRIVILEGED=0

ip -4 addr show docker0 >/dev/null 2>&1

if [[ $? -eq 0 ]]; then

echo 1 > /docker.hostnetwork

export DOCKER_HOSTNETWORK=1

unset DOCKER_HOST

unset DOCKER_GW

echo 0 > /docker.hostnetwork

export DOCKER_HOSTNETWORK=0

cat /proc/self/cgroup | grep "memory:" | cut -d "/" -f 3 > /docker.container.id

captest --text | grep -P "^Effective:" | cut -d " " -f 2- | sed "s/, /\n/g" | sort | sed ':a;N;$!ba;s/\n/,/g' > /docker.container.cap.e

captest --text | grep -P "^Permitted:" | cut -d " " -f 2- | sed "s/, /\n/g" | sort | sed ':a;N;$!ba;s/\n/,/g' > /docker.container.cap.p

captest --text | grep -P "^Inheritable:" | cut -d " " -f 2- | sed "s/, /\n/g" | sort | sed ':a;N;$!ba;s/\n/,/g' > /docker.container.cap.i

if [ -d "/fhem" ]; then

echo "Preparing initial start:"

i=1

[ -s "${FHEM_DIR}/fhem.pl" ] && FHEM_CLEANINSTALL=0

if [ -s /pre-init.sh ]; then

echo "$i. Running /pre-init.sh script"

[ ! -w /pre-init.sh ] || chmod 755 /pre-init.sh

[ ! -x /pre-init.sh ] || DEBIAN_FRONTEND=noninteractive LC_ALL=C /pre-init.sh

(( i++ ))

fi

if [ -s /docker/pre-init.sh ]; then

echo "$i. Running /docker/pre-init.sh script"

[ ! -w /docker/pre-init.sh ] || chmod 755 /docker/pre-init.sh

[ ! -x /docker/pre-init.sh ] || DEBIAN_FRONTEND=noninteractive LC_ALL=C /docker/pre-init.sh

(( i++ ))

fi

if [ "${APT_PKGS}" != '' ]; then

echo "$i. Adding custom APT packages to container ..."

DEBIAN_FRONTEND=noninteractive apt-get update >>/pkgs.apt 2>&1

DEBIAN_FRONTEND=noninteractive apt-get install -y --no-install-recommends \

${APT_PKGS} \

>>/pkgs.apt 2>&1

(( i++ ))

fi

if [ "${CPAN_PKGS}" != '' ]; then

if [ ! -e /usr/bin/cpanm ] && [ ! -e /usr/local/bin/cpanm ]; then

echo "$i. Installing cpanminus ..."

DEBIAN_FRONTEND=noninteractive apt-get update >>/pkgs.cpanm 2>&1

DEBIAN_FRONTEND=noninteractive apt-get install -y --no-install-recommends \

cpanminus \

>>/pkgs.cpanm 2>&1

(( i++ ))

fi

echo "$i. Adding custom Perl modules to container ..."

cpanm --notest \

${CPAN_PKGS} \

>>/pkgs.cpanm 2>&1

(( i++ ))

fi

if [ "${PIP_PKGS}" != '' ]; then

if [ ! -e /usr/bin/pip3 ]; then

echo "$i. Installing pip3 ..."

DEBIAN_FRONTEND=noninteractive apt-get update >>/pkgs.pip 2>&1

DEBIAN_FRONTEND=noninteractive apt-get install -y --no-install-recommends \

python3 \

python3-pip \

>>/pkgs.pip 2>&1

(( i++ ))

fi

echo "$i. Adding custom Python modules to container ..."

pip3 install \

${PIP_PKGS} \

>>/pkgs.pip 2>&1

(( i++ ))

fi

if [ "${NPM_PKGS}" != '' ]; then

if [ ! -e /usr/bin/npm ]; then

MTYPE=$(uname -m)

if [ "${MTYPE}" = 'arm32v5' ]; then

echo "ERROR: Missing Node.js for ${MTYPE} platform cannot be installed automatically"

exit 1

fi

echo "$i. Adding APT sources for Node.js ..."

if [ "${MTYPE}" = "i386" ]; then

curl -fsSL https://deb.nodesource.com/setup_8.x | bash - >>/pkgs.npm 2>&1

else

curl -fsSL https://deb.nodesource.com/setup_14.x | bash - >>/pkgs.npm 2>&1

fi

(( i++ ))

echo "$i. Installing Node.js ..."

DEBIAN_FRONTEND=noninteractive apt-get update >>/pkgs.npm 2>&1

DEBIAN_FRONTEND=noninteractive apt-get install -y --no-install-recommends \

nodejs \

>>/pkgs.npm 2>&1

(( i++ ))

fi

echo "$i. Adding custom Node.js packages to container ..."

npm install -g --unsafe-perm --production \

${NPM_PKGS} \

>>/pkgs.npm 2>&1

(( i++ ))

fi

if [ "${FHEM_CLEANINSTALL}" = '1' ]; then

echo "$i. Installing FHEM to ${FHEM_DIR}"

shopt -s dotglob nullglob 2>&1>/dev/null

mv -f /fhem/* ${FHEM_DIR}/ 2>&1>/dev/null

cd ${FHEM_DIR} 2>&1>/dev/null

echo 'http://fhem.de/fhemupdate/controls_fhem.txt' > ./FHEM/controls.txt

mv ./controls_fhem.txt ./FHEM/ 2>&1>/dev/null

perl ./contrib/commandref_modular.pl 2>&1>/dev/null

cp -f ./fhem.cfg ./fhem.cfg.default

(( i++ ))

echo "$i. Patching fhem.cfg default configuration"

[ -z "$(cat ${FHEM_DIR}/fhem.cfg | grep -P '^attr global dnsServer')" ] && echo "attr global dnsServer ${DNS}" >> ${FHEM_DIR}/fhem.cfg

[ -z "$(cat ${FHEM_DIR}/fhem.cfg | grep -P '^attr global commandref')" ] && echo "attr global commandref modular" >> ${FHEM_DIR}/fhem.cfg

[ -z "$(cat ${FHEM_DIR}/fhem.cfg | grep -P '^attr global mseclog')" ] && echo "attr global mseclog 1" >> ${FHEM_DIR}/fhem.cfg

(( i++ ))

echo "$i. Adding pre-defined devices to fhem.cfg"

echo "define DockerImageInfo DockerImageInfo" >> ${FHEM_DIR}/fhem.cfg

echo "attr DockerImageInfo alias Docker Image Info" >> ${FHEM_DIR}/fhem.cfg

echo "attr DockerImageInfo devStateIcon ok:security@green Initialized:system_fhem_reboot@orange .*:message_attention@red" >> ${FHEM_DIR}/fhem.cfg

echo "attr DockerImageInfo group System" >> ${FHEM_DIR}/fhem.cfg

echo "attr DockerImageInfo icon docker" >> ${FHEM_DIR}/fhem.cfg

echo "attr DockerImageInfo room System" >> ${FHEM_DIR}/fhem.cfg

echo "define fhemServerApt AptToDate localhost" >> ${FHEM_DIR}/fhem.cfg

echo "attr fhemServerApt alias System Update Status" >> ${FHEM_DIR}/fhem.cfg

echo "attr fhemServerApt devStateIcon system.updates.available:security@red system.is.up.to.date:security@green:repoSync .*in.progress:system_fhem_reboot@orange errors:message_attention@red" >> ${FHEM_DIR}/fhem.cfg

echo "attr fhemServerApt group Update" >> ${FHEM_DIR}/fhem.cfg

echo "attr fhemServerApt icon debian" >> ${FHEM_DIR}/fhem.cfg

echo "attr fhemServerApt room System" >> ${FHEM_DIR}/fhem.cfg

if [ -e /usr/bin/npm ]; then

echo "define fhemServerNpm npmjs localhost" >> ${FHEM_DIR}/fhem.cfg

echo "attr fhemServerNpm alias Node.js Package Update Status" >> ${FHEM_DIR}/fhem.cfg

echo "attr fhemServerNpm devStateIcon npm.updates.available:security@red:outdated npm.is.up.to.date:security@green:outdated .*npm.outdated.*in.progress:system_fhem_reboot@orange .*in.progress:system_fhem_update@orange warning.*:message_attention@orange error.*:message_attention@red" >> ${FHEM_DIR}/fhem.cfg

echo "attr fhemServerNpm group Update" >> ${FHEM_DIR}/fhem.cfg

echo "attr fhemServerNpm icon npm-old" >> ${FHEM_DIR}/fhem.cfg

echo "attr fhemServerNpm room System" >> ${FHEM_DIR}/fhem.cfg

fi

if [ -e /usr/bin/cpanm ] || [ -e /usr/local/bin/cpanm ]; then

echo "define fhemInstaller Installer" >> ${FHEM_DIR}/fhem.cfg

echo "attr fhemInstaller alias FHEM Installer Status" >> ${FHEM_DIR}/fhem.cfg

echo "attr fhemInstaller devStateIcon .*updates.available:security@red:outdated up.to.date:security@green:outdated .*outdated.*in.progress:system_fhem_reboot@orange .*in.progress:system_fhem_update@orange warning.*:message_attention@orange error.*:message_attention@red" >> ${FHEM_DIR}/fhem.cfg

echo "attr fhemInstaller group Update" >> ${FHEM_DIR}/fhem.cfg

echo "attr fhemInstaller icon system_fhem" >> ${FHEM_DIR}/fhem.cfg

echo "attr fhemInstaller room System" >> ${FHEM_DIR}/fhem.cfg

fi

cd - 2>&1>/dev/null

else

echo "$i. Updating existing FHEM installation in ${FHEM_DIR}"

[ -s ${FHEM_DIR}/${CONFIGTYPE} ] && cp -f ${FHEM_DIR}/${CONFIGTYPE} ${FHEM_DIR}/${CONFIGTYPE}.bak

cp -f /fhem/FHEM/99_DockerImageInfo.pm ${FHEM_DIR}/FHEM/

fi

(( i++ ))

rm -rf /fhem/

if [ -s /post-init.sh ]; then

echo "$i. Running /post-init.sh script"

[ ! -w /post-init.sh ] || chmod 755 /post-init.sh

[ ! -x /post-init.sh ] || DEBIAN_FRONTEND=noninteractive LC_ALL=C /post-init.sh

(( i++ ))

fi

if [ -s /docker/post-init.sh ]; then

echo "$i. Running /docker/post-init.sh script"

[ ! -w /docker/post-init.sh ] || chmod 755 /docker/post-init.sh

[ ! -x /docker/post-init.sh ] || DEBIAN_FRONTEND=noninteractive LC_ALL=C /docker/post-init.sh

(( i++ ))

fi

echo -e '\n\n'

elif [ ! -s "${FHEM_DIR}/fhem.pl" ]; then

echo "- ERROR: Unable to find FHEM installation in ${FHEM_DIR}/fhem.pl"

exit 1

if [ -z "${LOGFILE}" ]; then

if [ "${CONFIGTYPE}" == "configDB" ]; then

LOGFILE="${FHEM_DIR}/./log/fhem-%Y-%m-%d.log"

elif [ -s ${FHEM_DIR}/${CONFIGTYPE} ]; then

GLOGFILE=$(cat ${FHEM_DIR}/${CONFIGTYPE} | grep -P '^attr global logfile' | cut -d ' ' -f 4)

LOGFILE="${FHEM_DIR}/${GLOGFILE:-./log/fhem-%Y-%m-%d.log}"

else

LOGFILE="${FHEM_DIR}/./log/fhem-%Y-%m-%d.log"

fi

LOGFILE="${FHEM_DIR}/${LOGFILE}"

if [ -z "${PIDFILE}" ]; then

if [ "${CONFIGTYPE}" == "configDB" ]; then

PIDFILE="${FHEM_DIR}/./log/fhem.pid"

elif [ -s ${FHEM_DIR}/${CONFIGTYPE} ]; then

GPIDFILE=$(cat ${FHEM_DIR}/${CONFIGTYPE} | grep -P '^attr global pidfilename' | cut -d ' ' -f 4)

PIDFILE="${FHEM_DIR}/${GPIDFILE:-./log/fhem.pid}"

else

PIDFILE="${FHEM_DIR}/./log/fhem.pid"

fi

PIDFILE="${FHEM_DIR}/${PIDFILE}"

echo "Preparing user environment ..."

i=1

[ ! -s /etc/passwd.orig ] && cp -f /etc/passwd /etc/passwd.orig

[ ! -s /etc/shadow.orig ] && cp -f /etc/shadow /etc/shadow.orig

[ ! -s /etc/group.orig ] && cp -f /etc/group /etc/group.orig

cp -f /etc/passwd.orig /etc/passwd

cp -f /etc/shadow.orig /etc/shadow

cp -f /etc/group.orig /etc/group

echo "$i. Creating group 'fhem' with GID ${FHEM_GID} ..."

groupadd --force --gid ${FHEM_GID} --non-unique fhem 2>&1>/dev/null

echo "$i. Enforcing GID for group 'bluetooth' to ${BLUETOOTH_GID} ..."

sed -i "s/^bluetooth\:.*/bluetooth\:x\:${BLUETOOTH_GID}/" /etc/group

echo "$i. Creating user 'fhem' with UID ${FHEM_UID} ..."

useradd --home ${FHEM_DIR} --shell /bin/bash --uid ${FHEM_UID} --no-create-home --no-user-group --non-unique fhem 2>&1>/dev/null

usermod --append --gid ${FHEM_GID} --groups ${FHEM_GID} fhem 2>&1>/dev/null

adduser --quiet fhem audio 2>&1>/dev/null

adduser --quiet fhem bluetooth 2>&1>/dev/null

adduser --quiet fhem dialout 2>&1>/dev/null

adduser --quiet fhem mail 2>&1>/dev/null

adduser --quiet fhem tty 2>&1>/dev/null

adduser --quiet fhem video 2>&1>/dev/null

echo "$i. Creating log directory ${LOGFILE%/*} ..."

mkdir -p "${LOGFILE%/*}"

echo "$i. Enforcing user and group ownership for ${FHEM_DIR} to fhem:fhem ..."

chown --recursive --quiet --no-dereference ${FHEM_UID}:${FHEM_GID} ${FHEM_DIR}/ 2>&1>/dev/null

chown --recursive --quiet --no-dereference ${FHEM_UID}:${FHEM_GID} ${LOGFILE%/*}/ 2>&1>/dev/null

echo "$i. Enforcing file and directory permissions for ${FHEM_DIR} ..."

find ${FHEM_DIR}/ -type d -exec chmod --quiet ${FHEM_PERM_DIR} {} \;

chmod --quiet go-w ${FHEM_DIR}

find ${FHEM_DIR}/ -type f -exec chmod --quiet ${FHEM_PERM_FILE} {} \;

find ${FHEM_DIR}/ -type f -name '*.pl' -exec chmod --quiet u+x {} \;

find ${FHEM_DIR}/ -type f -name '*.py' -exec chmod --quiet u+x {} \;

find ${FHEM_DIR}/ -type f -name '*.sh' -exec chmod --quiet u+x {} \;

find ${FHEM_DIR}/ -path '*/bin/*' -type f -exec chmod --quiet u+x {} \;

find ${FHEM_DIR}/ -path '*/sbin/*' -type f -exec chmod --quiet u+x {} \;

find ${FHEM_DIR}/ -path '*/*script*/*' -type f -exec chmod --quiet u+x {} \;

echo "$i. Correcting group ownership for /dev/tty* ..."

find /dev/ -regextype sed -regex ".*/tty[0-9]*" -exec chown --recursive --quiet --no-dereference .tty {} \; 2>/dev/null

find /dev/ -name "ttyS*" -exec chown --recursive --quiet --no-dereference .dialout {} \; 2>/dev/null

find /dev/ -name "ttyACM*" -exec chown --recursive --quiet --no-dereference .dialout {} \; 2>/dev/null

find /dev/ -name "ttyUSB*" -exec chown --recursive --quiet --no-dereference .dialout {} \; 2>/dev/null

find /dev/ -regextype sed -regex ".*/tty[0-9]*" -exec chmod --recursive --quiet g+w {} \; 2>/dev/null

find /dev/ -name "ttyS*" -exec chmod --recursive --quiet g+rw {} \; 2>/dev/null

find /dev/ -name "ttyACM*" -exec chmod --recursive --quiet g+rw {} \; 2>/dev/null

find /dev/ -name "ttyUSB*" -exec chmod --recursive --quiet g+rw {} \; 2>/dev/null

if [[ -d /dev/serial/by-id ]]; then

echo "$i. Correcting group ownership for /dev/serial/* ..."

find /dev/serial/by-id/ -exec chown --recursive --quiet --no-dereference .dialout {} \; 2>/dev/null

find /dev/serial/by-id/ -exec chmod --recursive --quiet g+rw {} \; 2>/dev/null

(( i++ ))

if [[ "$(find /dev/ -name "gpio*"|wc -l)" -gt "0" || -d /sys/devices/virtual/gpio || -d /sys/devices/platform/gpio-sunxi/gpio || /sys/class/gpio ]]; then

echo "$i. Found GPIO: Correcting group permissions in /dev and /sys to 'gpio' with GID ${GPIO_GID} ..."

if [ -n "$(grep ^gpio: /etc/group)" ]; then

sed -i "s/^gpio\:.*/gpio\:x\:${GPIO_GID}/" /etc/group

else

groupadd --force --gid ${GPIO_GID} --non-unique gpio 2>&1>/dev/null

fi

adduser --quiet fhem gpio 2>&1>/dev/null

find /dev/ -name "gpio*" -exec chown --recursive --quiet --no-dereference .gpio {} \; 2>/dev/null

find /dev/ -name "gpio*" -exec chmod --recursive --quiet g+rw {} \; 2>/dev/null

[ -d /sys/devices/virtual/gpio ] && chown --recursive --quiet --no-dereference .gpio /sys/devices/virtual/gpio/* 2>&1>/dev/null && chmod --recursive --quiet g+w /sys/devices/virtual/gpio/*

[ -d /sys/devices/platform/gpio-sunxi/gpio ] && chown --recursive --quiet --no-dereference .gpio /sys/devices/platform/gpio-sunxi/gpio/* 2>&1>/dev/null && chmod --recursive --quiet g+w /sys/devices/platform/gpio-sunxi/gpio/*

[ -d /sys/class/gpio ] && chown --recursive --quiet --no-dereference .gpio /sys/class/gpio/* 2>&1>/dev/null && chmod --recursive --quiet g+w /sys/class/gpio/*

(( i++ ))

if [ -n "$(grep ^i2c: /etc/group)" ]; then

echo "$i. Found I2C: Correcting group permissions in /dev to 'i2c' with GID ${I2C_GID} ..."

if [ -n "$(grep ^i2c: /etc/group)" ]; then

sed -i "s/^i2c\:.*/i2c\:x\:${I2C_GID}/" /etc/group

else

groupadd --force --gid ${I2C_GID} --non-unique i2c 2>&1>/dev/null

fi

adduser --quiet fhem i2c 2>&1>/dev/null

find /dev/ -name "i2c-*" -exec chown --recursive --quiet --no-dereference .i2c {} \;

(( i++ ))

echo "$i. Updating /etc/sudoers.d/fhem-docker ..."

echo "# Auto-generated during container start" > /etc/sudoers.d/fhem-docker

echo "fhem ALL=(ALL) NOPASSWD: /usr/bin/nmap" >> /etc/sudoers.d/fhem-docker

echo "fhem ALL=(ALL) NOPASSWD: /usr/bin/apt-get -q update" >> /etc/sudoers.d/fhem-docker

echo "fhem ALL=(ALL) NOPASSWD: /usr/bin/apt-get -s -q -V upgrade" >> /etc/sudoers.d/fhem-docker

echo "fhem ALL=(ALL) NOPASSWD: /usr/bin/apt-get -y -q -V upgrade" >> /etc/sudoers.d/fhem-docker

echo "fhem ALL=(ALL) NOPASSWD: /usr/bin/apt-get -y -q -V dist-upgrade" >> /etc/sudoers.d/fhem-docker

echo "fhem ALL=(ALL) NOPASSWD:SETENV: /usr/bin/npm update *" >> /etc/sudoers.d/fhem-docker

echo "fhem ALL=(ALL) NOPASSWD:SETENV: /usr/local/bin/cpanm *" >> /etc/sudoers.d/fhem-docker

echo "fhem ALL=(ALL) NOPASSWD: /usr/bin/apt-get -y install *" >> /etc/sudoers.d/fhem-docker

echo "fhem ALL=(ALL) NOPASSWD:SETENV: /usr/bin/npm install *" >> /etc/sudoers.d/fhem-docker

echo "fhem ALL=(ALL) NOPASSWD:SETENV: /usr/bin/npm uninstall *" >> /etc/sudoers.d/fhem-docker

chmod 440 /etc/sudoers.d/fhem*

chown --quiet --no-dereference root:${FHEM_GID} /etc/sudoers.d/fhem* 2>&1>/dev/null

mkdir -p ${FHEM_DIR}/.ssh

chmod 700 ${FHEM_DIR}/.ssh

[ -e ${FHEM_DIR}/.ssh/authorized_keys ] && chmod 600 ${FHEM_DIR}/.ssh/authorized_keys

if [ ! -s ${FHEM_DIR}/.ssh/id_ed25519 ]; then

echo "$i. Generating SSH Ed25519 client certificate for user 'fhem' ..."

rm -f ${FHEM_DIR}/.ssh/id_ed25519*

ssh-keygen -t ed25519 -f ${FHEM_DIR}/.ssh/id_ed25519 -q -N "" -o -a 100

sed -i "s/root@.*/fhem@fhem-docker/" ${FHEM_DIR}/.ssh/id_ed25519.pub

(( i++ ))

if [ ! -s ${FHEM_DIR}/.ssh/id_rsa ]; then

echo "$i. Generating SSH RSA client certificate for user 'fhem' ..."

rm -f ${FHEM_DIR}/.ssh/id_rsa*

ssh-keygen -t rsa -b 4096 -f ${FHEM_DIR}/.ssh/id_rsa -q -N "" -o -a 100

sed -i "s/root@.*/fhem@fhem-docker/" ${FHEM_DIR}/.ssh/id_rsa.pub

(( i++ ))

if [ ! -f ${FHEM_DIR}/.ssh/config ]; then

echo "$i. Generating SSH client configuration for user 'fhem' ..."

echo "IdentityFile ~/.ssh/id_ed25519

" > ${FHEM_DIR}/.ssh/config

(( i++ ))

if [ -z "$(dig +short -t a gateway.docker.internal.)" ]; then

echo "$i. Adding gateway.docker.internal to /etc/hosts ..."

if [ -n "${DOCKER_GW}" ]; then

grep -q -E "gateway\.docker\.internal" /etc/hosts || echo -e "${DOCKER_GW}\tgateway.docker.internal" >> /etc/hosts

fi

(( i++ ))

if [ -z "$(dig +short -t a host.docker.internal.)" ]; then

echo "$i. Adding host.docker.internal to /etc/hosts ..."

if [ -n "${DOCKER_HOST}" ]; then

grep -q -E "host\.docker\.internal" /etc/hosts || echo -e "${DOCKER_HOST}\thost.docker.internal" >> /etc/hosts

else

grep -q -E "host\.docker\.internal" /etc/hosts || echo -e "127.0.127.2\thost.docker.internal" >> /etc/hosts

fi

(( i++ ))

echo "$i. Pre-authorizing SSH to Docker host for user 'fhem' ..."

touch ${FHEM_DIR}/.ssh/known_hosts

grep -v -E "^host.docker.internal" ${FHEM_DIR}/.ssh/known_hosts | grep -v -E "^gateway.docker.internal" > ${FHEM_DIR}/.ssh/known_hosts.tmp

ssh-keyscan -t ed25519 host.docker.internal 2>/dev/null >> ${FHEM_DIR}/.ssh/known_hosts.tmp

ssh-keyscan -t rsa host.docker.internal 2>/dev/null >> ${FHEM_DIR}/.ssh/known_hosts.tmp

mv -f ${FHEM_DIR}/.ssh/known_hosts.tmp ${FHEM_DIR}/.ssh/known_hosts

echo "$i. Updating SSH key pinning and SSH client permissions for user 'fhem' ..."

cat ${FHEM_DIR}/.ssh/known_hosts /ssh_known_hosts.txt | grep -v ^# | sort -u -k1,2 > ${FHEM_DIR}/.ssh/known_hosts.tmp

mv -f ${FHEM_DIR}/.ssh/known_hosts.tmp ${FHEM_DIR}/.ssh/known_hosts

chown -R fhem.fhem ${FHEM_DIR}/.ssh/

chmod 640 ${FHEM_DIR}/.ssh/known_hosts

chmod 600 ${FHEM_DIR}/.ssh/id_ed25519 ${FHEM_DIR}/.ssh/id_rsa

chmod 640 ${FHEM_DIR}/.ssh/id_ed25519.pub ${FHEM_DIR}/.ssh/id_rsa.pub

[ -s "$( date +"${LOGFILE}" )" ] && OLDLINES=$( wc -l < "$( date +"${LOGFILE}" )" ) || OLDLINES=0

NEWLINES=${OLDLINES}

FOUND=false

function PrintNewLines {

}

function StopFHEM {

}

function StartFHEM {

}

StartFHEM

while true; do

# FHEM isn't running

if [ ! -s "$PIDFILE" ] || ! kill -0 "$(<"$PIDFILE")" 2>&1 >/dev/null; then

PrintNewLines

COUNTDOWN="$TIMEOUT"

echo -ne "\n\nAbrupt daemon termination, starting $COUNTDOWN""s countdown ..."

while ( [ ! -s "$PIDFILE" ] || ! kill -0 "$(<"$PIDFILE")" 2>&1 >/dev/null ) && (( COUNTDOWN > 0 )); do

echo -n " $COUNTDOWN"

(( COUNTDOWN-- ))

sleep 1

done

# FHEM didn't reappear

if [ ! -s "$PIDFILE" ] || ! kill -0 "$(<"$PIDFILE")" 2>&1 >/dev/null; then

# Container should be stopped

if [ "$RESTART" == "0" ]; then

echo -e ' 0\nStopping Container. Bye!\n'

exit 1

# Automatic restart is enabled

else

echo -e ' 0\nAutomatic restart ...\n'

# Cleanup

if [ -s "$PIDFILE" ]; then

kill -9 "$(<"$PIDFILE")" 2>&1>/dev/null

rm -f "$PIDFILE"

fi

StartFHEM

fi

# FHEM reappeared

else

echo -e '\nFHEM process reappeared ...\n'

fi

fi

# Printing log lines in intervalls

PrintNewLines

sleep $SLEEPINTERVAL