routeros: Rename role

roles/routeros/files/README.md

@@ -0,0 +1,16 @@
+# Mikrotik Routeros Cheat Sheet
+
+## Update
+
+```
+/system package update print
+/tool fetch url=https://oob.foo.sh/routeros/routeros-7.13.4-arm.npk
+/system reboot
+/system package update print
+```
+
+## Change port vlan
+
+```
+/interface/bridge/port/set [find where bridge=bridge and interface=ether1] pvid=30
+```

roles/routeros/files/download-routeros-firmware.sh

@@ -0,0 +1,63 @@
+#!/bin/sh
+
+set -eu
+
+umask 022
+
+cd /srv/web/oob.foo.sh/routeros
+
+verbose=false
+if [ "${1:-}" = "-v" ]; then
+    verbose=true
+    shift
+fi
+
+if [ $# -gt 0 ]; then
+    echo "Usage: $(basename "$0") [-v]" 1>&2
+    exit 1
+fi
+
+packageinfo=$(curl -sSf "https://mikrotik.com/download" | awk -F '"' '
+    {
+      if (!url && $0 ~ /routeros-[0-9\.]+-arm.npk/) {
+        url=$2
+      } else if (!found && url && $0 ~ /data-checksum-sha256/) {
+        print url " " $6
+        found = 1
+      }
+    }
+    ')
+
+packageurl="$(echo "$packageinfo" | cut -d " " -f 1)"
+checksum="$(echo "$packageinfo" | cut -d " " -f 2)"
+if [ -z "$packageurl" ]; then
+    echo "ERR: Got empty package URL, exiting" 1>&2
+    exit 1
+fi
+packagename="$(basename "$packageurl")"
+if [ -f "$packagename" ]; then
+    "$verbose" && echo "Already up to date"
+    exit 0
+fi
+
+if [ -z "$checksum" ]; then
+    echo "ERR: Failed to determine package checksum" 1>&2
+    exit 1
+fi
+
+echo "Downloading new package '${packagename}'"
+tmpfile="$(mktemp -p .)"
+trap 'rm -f -- "$tmpfile"' EXIT
+curl -sSf -o "$tmpfile" "$packageurl"
+
+if [ "$(sha256sum "$tmpfile" | cut -d " " -f 1)" != "$checksum" ]; then
+    echo "ERR: Checksum check failed, not saving package" 1>&2
+    exit 1
+fi
+
+mv "$tmpfile" "$packagename"
+
+echo
+curl -sSf "https://cdn.mikrotik.com/routeros/$(echo "$packagename" | cut -d "-" -f 2)/CHANGELOG"
+echo
+echo

roles/routeros/tasks/main.yml

@@ -0,0 +1,47 @@
+---
+- name: Create group
+  ansible.builtin.group:
+    name: routeros
+    system: true
+
+- name: Create user
+  ansible.builtin.user:
+    name: routeros
+    comment: RouterOS Downloader
+    group: routeros
+    create_home: false
+    home: /var/empty
+    shell: /sbin/nologin
+    system: true
+
+- name: Create download directory
+  ansible.builtin.file:
+    path: /srv/web/oob.foo.sh/routeros
+    state: directory
+    mode: "0775"
+    owner: root
+    group: routeros
+
+- name: Install README.md
+  ansible.builtin.copy:
+    dest: /srv/web/oob.foo.sh/routeros/README.md
+    src: README.md
+    mode: "0644"
+    owner: root
+    group: "{{ ansible_wheel }}"
+
+- name: Install download script
+  ansible.builtin.copy:
+    dest: /usr/local/bin/download-routeros-firmware
+    src: download-routeros-firmware.sh
+    mode: "0755"
+    owner: root
+    group: "{{ ansible_wheel }}"
+
+- name: Install cron job
+  ansible.builtin.cron:
+    name: download-routeros-firmware
+    job: /usr/local/bin/download-routeros-firmware
+    user: routeros
+    hour: "05"
+    minute: "25"