#!/bin/bash

#DESC Register system with TF's Redhat insights account.
# TF POS Linux insights registration.

yum -y install scap-security-guide*
yum -y install yara subscription-manager

# verify root
ID=`/usr/bin/id -u`
[ $ID -ne 0 ] && echo "You must be root to run $0." && exit 1

# cert fix
[ -f /etc/pki/consumer/cert.pem ] && mv /etc/pki/consumer/cert.pem /etc/pki/consumer/cert.pem.bak
[ -f /etc/pki/consumer/key.pem ] && mv /etc/pki/consumer/key.pem /etc/pki/consumer/key.pem.bak

# install insights rpm.
yum -y install insights-client
[ $? -ne 0 ] && echo "Could not install insights client." && exit 2

# make config changes to conf.
sed -i 's/\authmethod=BASIC/authmethod=CERT/g' /etc/insights-client/insights-client.conf
sed -i 's/\#authmethod=/authmethod=CERT/g' /etc/insights-client/insights-client.conf
sed -i 's/\username=tfslinuxpos/username=/g' /etc/insights-client/insights-client.conf
sed -i 's/\password=erpoithxciujhnbmxhgkvhasw/password=/g' /etc/insights-client/insights-client.conf
#sed -i "s/test_scan:\ true/test_scan:\ false/g" /etc/insights-client/malware-detection-config.yml
[ $? -ne 0 ] && echo "Could not update conf file." && exit 3

# register.
subscription-manager register --activationkey=TelefloraPOS --org=4508688
# subscription-manager config --rhsm.auto_enable_yum_plugins=0
insights-client --register
insights-client --enable-schedule
[ $? -ne 0 ] && echo "Error with registration." && exit 4

#add cron item
[ ! -f /etc/cron.d/insights_scan ] && echo "30 20 * * * root (insights-client --checkin && insights-client --compliance && insights-client --collector malware-detection)" > /etc/cron.d/insights_scan

exit 0