jcoffey-dev f8a86736f9 Harden user_manage, update_system, and the Zimbra pair
user_manage.sh ran useradd/userdel/usermod with no privilege check at
all, so an ordinary user got "Failed to create user." with no hint that
root was the missing piece. Mutating subcommands now require root while
listusers/listgroups stay open, and the check runs *after* the
subcommand is recognised so a bare invocation still prints usage instead
of complaining about privileges. Account names are validated before
reaching useradd, and `deluser` -- which removes the home directory
irrecoverably -- prints what it will delete and confirms first.

zimbra_backup.sh reported success on failed backups. getRestURL can
write an HTTP error body and still exit zero, so a " Backup completed"
could sit over a file containing an error page. Size and gzip -t checks
now gate that, and a suspect file is renamed .suspect rather than
deleted, so it can be looked at. zimbra_restore.sh likewise validates
the archive before starting a restore from it.

Both Zimbra scripts had `cmd` followed by `if [ $? -eq 0 ]`. Adding
set -e to those would have made the error branches unreachable -- set -e
exits before the check -- so the tests are inline instead. That would
have been a silent regression rather than a visible one.

update_system.sh gained strict mode, and a note on the pacman branch:
Arch has no supported partial-upgrade path, and --noconfirm answers away
the prompts that would otherwise warn.

Integrity checks verified against an error page, a truncated archive, a
non-gzip file and a real one.
2026-08-22 22:22:05 -07:00
2025-05-17 10:06:21 -07:00
2025-05-17 10:06:49 -07:00
2025-06-12 16:03:33 -07:00
2025-05-17 10:06:49 -07:00

Linux System Administration Scripts

Automate routine tasks: This project provides a collection of Bash scripts to automate common Linux system administration duties. Automating daily sysadmin tasks improves efficiency and consistency by reducing manual repetition and the risk of human error. Each script is designed to be distribution-agnostic, using only standard base utilities (e.g. rsync, tar, awk, grep, netstat/ss, systemctl) available on most Linux systems. All scripts are released under the GNU GPL v3.0 license and include usage information in their headers.

Included Scripts

  • backup.sh Backup Utility: Archive directories into compressed tarballs for backups.
  • restore.sh Restore Utility: Restore files from backup archives.
  • disk_cleanup.sh Disk Usage & Cleanup: Report disk usage and identify large files; optionally clean package caches and temporary files to free space.
  • log_inspect.sh Log Inspection: Search within log files or tail the latest system logs for troubleshooting.
  • log_rotate.sh Log Rotation: Compress and rotate old log files to prevent excessive disk usage
  • network_info.sh Network & Firewall Info: Show network interface details, routing table, open listening ports, and basic firewall (iptables) rules.
  • process_monitor.sh Process Management: List top resource-consuming processes and allow termination of processes by name or PID.
  • security_audit.sh Security Audit: Scan for security issues like world-writable files, SUID/SGID executables, and open network ports.
  • service_manager.sh Service Management: Start, stop, restart, or check status of system services, and enable/disable services at boot.
  • sys_monitor.sh System Monitoring: Display system uptime, resource utilization (CPU, memory, disk), and top processes.
  • update_system.sh System Updates: Apply available package updates and patches (works with apt, yum/dnf, zypper, pacman).
  • user_manage.sh User and Group Management: Create or remove user accounts and groups, modify user group memberships, and lock/unlock accounts.
  • zimbra_backup.sh - Create a backup for a zimbra mailbox.
  • zimbra_restore.sh - Restore a backup for a zimbra mailbox.
  • rsync_magic.sh - A smart Bash script that wraps rsync for safe, flexible, and efficient file synchronization and backups.
S
Description
Imported from github.com during the 2026-09-20 standup (local dir: SysAdminAutomation)
Readme GPL-3.0
106 KiB
Languages
Shell 100%