aboutsummaryrefslogtreecommitdiffstats
path: root/tools/strip-netconf.sh
blob: bfb2d35ba954a39d4534d153d2358b72cd4cb57b (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
#!/bin/bash
mkdir -p tmp
ls -1 *.conf | while read file; do
	# Remove rusk & rask
	sed -E \
		-e 's/secret ".+";/secret "<removed>";/g' \
		-e 's/encrypted-password ".+";/encrypted-password "<removed>";/g' \
		-e 's/"scp:\/\/.+" password ".+";/"scp:\/\/user\@host\/some\/folder\/" password "<removed>";/g' \
		-e 's/serial-number .+;/serial-number <removed>;/g' \
		-e 's/community .+ /community <removed> /g' \
		-e '/\/\* dat/d' \
		-e '/\/\* tad/d' \
		-e 's/ecdsa-sha2-nistp256-key .+;/ecdsa-sha2-nistp256-key <removed>;/g' \
		-e 's/collector .+;/collector <removed>;/g' \
		-e 's/authentication-key ".+"/authentication-key "<removed>";/g' \
		-e 's/LU[0-9]+/LU1337/g' \
		-e 's/SB[0-9]+/SB1337/g' \
		-e 's/ssh-ed25519 .+;/ssh-ed25519 "<removed>";/g' \
		-e 's/contact .+;/contact "<removed>";/g' \
		$file > tmp/$file

	# Remove SSH-host-info
	sed -i '' \
		-e '/ssh-known-hosts {/ {' -e 'n; s/host .\+ {/host <removed> {/' -e '}' \
		tmp/$file

	# Remove stuff from ACL's
	sed -i '' \
		-e ':again' -e N -e '$!b again' \
		-e 's/prefix-list mgmt-v4 {[^}]*}/prefix-list mgmt-v4 {\n    }/g' \
		tmp/$file

	sed -i '' \
		-e ':again' -e N -e '$!b again' \
		-e 's/prefix-list mgmt-v6 {[^}]*}/prefix-list mgmt-v6 {\n    }/g' \
		tmp/$file

done