commit 22278c7a3ec42075f3bb8a2270ac8024eb074455
from: smytht <tom.smyth@wirelessconnect.eu>
date: Sun Sep 03 15:03:46 2023 UTC

improve nsh scripts directory structure

Improve NSH scripts directory structure

commit - a24278572f987c848dd4dac094e80008a84ac37f
commit + 22278c7a3ec42075f3bb8a2270ac8024eb074455
blob - 45b22b89d89978726d421226ddaa02da6a3791a0 (mode 644)
blob + /dev/null
--- nsh-scripts/bin/enable-sshd.nshrc
+++ /dev/null
@@ -1,5 +0,0 @@
-#!/usr/local/bin/nsh -
-enable
-sshd enable
-write memory
-quit 
blob - 972f5213948334b4b2b22d29f398dccc8b606627 (mode 644)
blob + /dev/null
--- nsh-scripts/bin/initial-config.nshrc
+++ /dev/null
@@ -1,5 +0,0 @@
-#!/usr/local/bin/nsh -
-enable
-pf enable
-sshd enable
-write-config
blob - de25a27d1617554f64500ae0ca119cf95cc122f9 (mode 644)
blob + /dev/null
--- nsh-scripts/bin/mg-env-settings
+++ /dev/null
@@ -1 +0,0 @@
-VISUAL=/usr/bin/mg; export VISUAL; EDITOR=/usr/bin/mg; export EDITOR
blob - b30fd80eb373ca572a4947d40542ebcd446f74d8 (mode 644)
blob + /dev/null
--- nsh-scripts/bin/nsh
+++ /dev/null
@@ -1,12 +0,0 @@
-#!/bin/ksh
-#
-# $OpenBSD: nsh,v 1.0  2022/04/07 01:41:16 cappuccio Exp $
-
-daemon="/usr/local/bin/nsh"
-daemon_flags=" -v -i /etc/nshrc | tee -a /var/log/nsh.log"
-
-rc_reload=NO
-
-. /etc/rc.d/rc.subr
-
-rc_cmd $1
blob - 11dfa2566b90c140770a2454e4acacf992d39a9e (mode 644)
blob + /dev/null
--- nsh-scripts/bin/nsh-openbsd-integration.sh
+++ /dev/null
@@ -1,282 +0,0 @@
-#!/bin/sh -
-
-dflt='No'
-
-#check if user is root
-if [ $(id -u) != 0 ];
-then
-	echo "Must be run as root"
-	exit
-else
-	#ask user do they want to continue
-	#default is No
-	echo "This script is built to suit a typical network configuration setup"
-	echo "If you have an unusual config, it is not recommended to run"
-	read input?"Do you want to continue? (Yes/No) [${dflt}] "
-
-	if [ -z "${input}" ]; then input="${dflt}"; fi
-	if [ "${input}" = 'Yes' ] || [ "${input}" = 'yes' ];
-	then
-		test -f /var/nsh/backup/pre-nsh-config && echo pre-nsh-config exists already && exit
-		test -f /etc/nshrc && echo etc-nshrc exists already && exit
-		 
-		mkdir -p /var/nsh/backup/pre-nsh-config
-		
-		#remove world permissions from created directories
-		chmod -R 750 /var/nsh
-		chown -R root /var/nsh
-		chgrp -R wheel /var/nsh 
-		#chmod 750 /var/nsh/backup
-		#chmod 750 /var/nsh/backup/pre-nsh-config
-		 
-		#checks if file exists
-		#makes a copy and moves conf file
-		#secures file
-		pf='/etc/pf.conf'
-		if [ -f $pf ]; then
-			cp /etc/pf.conf /var/nsh/backup/pre-nsh-config/
-			mv /etc/pf.conf /var/run/pf.conf.0
-			chown root /var/run/pf.conf.0
-			chgrp wheel /var/run/pf.conf.0
-			chmod 660 /var/run/pf.conf.0
-		else
-			echo etc-pf does not exist, not importing!
-		fi
-
-		ipsec='/etc/ipsec.conf'
-		if [ -f $ipsec ]; then
-			cp /etc/ipsec.conf /var/nsh/backup/pre-nsh-config/
-			mv /etc/ipsec.conf /var/run/ipsec.conf.0
-			chown root /var/run/ipsec.conf.0
-			chgrp wheel /var/run/ipsec.conf.0
-			chmod 660 /var/run/ipsec.conf.0
-		else
-			echo etc-ipsec does not exist, not importing!
-		fi
-		 
-		bgpd='/etc/bgpd.conf'
-		if [ -f $bgpd ]; then
-			cp /etc/bgpd.conf /var/nsh/backup/pre-nsh-config/
-			mv /etc/bgpd.conf /var/run/bgpd.conf.0
-			chown root /var/run/bgpd.conf.0
-			chgrp wheel /var/run/bgpd.conf.0
-			chmod 660 /var/run/bgpd.conf.0
-		else
-			echo etc-bgpd does not exist, not importing!
-		fi
-		 
-		ospfd='/etc/ospfd.conf'
-		if [ -f $ospfd ]; then
-			cp /etc/ospfd.conf /var/nsh/backup/pre-nsh-config/
-			mv /etc/ospfd.conf /var/run/ospfd.conf.0
-			chown root /var/run/ospfd.conf.0
-			chgrp wheel /var/run/ospfd.conf.0
-			chmod 660 /var/run/ospfd.conf.0
-		else
-			echo etc-ospfd does not exist, not importing!
-		fi
-		 
-		 
-		ospf6d='/etc/ospf6d.conf'
-		if [ -f $ospf6d ]; then
-			cp /etc/ospf6d.conf /var/nsh/backup/pre-nsh-config/
-			mv /etc/ospf6d.conf /var/run/ospf6d.conf.0
-			chown root /var/run/ospf6d.conf.0
-			chgrp wheel /var/run/ospf6d.conf.0
-			chmod 660 /var/run/ospf6d.conf.0
-		else
-			echo etc-ospf6d does not exist, not importing!
-			
-		fi
-		dhcpd='/etc/dhcpd.conf'
-		if [ -f $dhcpd ]; then
-			cp /etc/dhcpd.conf /var/nsh/backup/pre-nsh-config/
-			mv /etc/dhcpd.conf /var/run/dhcpd.conf.0
-			chown root /var/run/dhcpd.conf.0
-			chgrp wheel /var/run/dhcpd.conf.0
-			chmod 660 /var/run/dhcpd.conf.0
-		else
-			echo etc-dhcpd does not exist, not importing!
-		fi
-		
-		ntpd='/etc/ntpd.conf'
-		if [ -f $ntpd ]; then
-			cp /etc/ntpd.conf /var/nsh/backup/pre-nsh-config/
-			mv /etc/ntpd.conf /var/run/ntpd.conf.0
-			chown root /var/run/ntpd.conf.0
-			chgrp wheel /var/run/ntpd.conf.0
-			chmod 660 /var/run/ntpd.conf.0
-		else
-			echo etc-ntpd does not exist, not importing!
-		fi
-		 
-		sshd_config='/etc/ssh/sshd_config'
-		if [ -f $sshd_config ]; then
-			cp /etc/ssh/sshd_config /var/nsh/backup/pre-nsh-config/
-			mv /etc/ssh/sshd_config /var/run/sshd.conf.0
-			chown root /var/run/sshd.conf.0
-			chgrp wheel /var/run/sshd.conf.0
-			chmod 660 /var/run/sshd.conf.0
-		else
-			echo etc-ssh_config does not exist, not importing!
-		fi
-
-		eigrpd='/etc/eigrpd.conf'
-		if [ -f $eigrpd ]; then
-			cp /etc/eigrpd.conf /var/nsh/backup/pre-nsh-config/
-			mv /etc/eigrpd.conf /var/run/eigrpd.conf.0
-			chown root /var/run/eigrpd.conf.0
-			chgrp wheel /var/run/eigrpd.conf.0
-			chmod 660 /var/run/eigrpd.conf.0
-		else
-			echo etc-eigrpd does not exist, not importing!
-		fi
-
-		relayd='/etc/relayd.conf'
-		if [ -f $relayd ]; then
-			cp /etc/relayd.conf /var/nsh/backup/pre-nsh-config/
-			mv /etc/relayd.conf /var/run/relayd.conf.0
-			chown root /var/run/relayd.conf.0
-			chgrp wheel /var/run/relayd.conf.0
-			chmod 660 /var/run/relayd.conf.0
-		else
-			echo etc-relayd does not exist, not importing!
-		fi
-
-		ripd='/etc/ripd.conf'
-		if [ -f $ripd ]; then
-			cp /etc/ripd.conf /var/nsh/backup/pre-nsh-config/
-			mv /etc/ripd.conf /var/run/ripd.conf.0
-			chown root /var/run/ripd.conf.0
-			chgrp wheel /var/run/ripd.conf.0
-			chmod 660 /var/run/ripd.conf.0
-		else
-			echo etc-ripd does not exist, not importing!
-		fi
-		 
-		ldpd='/etc/ldpd.conf'
-		if [ -f $ldpd ]; then
-			cp /etc/ldpd.conf /var/nsh/backup/pre-nsh-config/
-			mv /etc/ldpd.conf /var/run/ldpd.conf.0
-			chown root /var/run/ldpd.conf.0
-			chgrp wheel /var/run/ldpd.conf.0
-			chmod 660 /var/run/ldpd.conf.0
-		else
-			echo etc-ldpd does not exist, not importing!
-		fi
-		 
-		iked='/etc/iked.conf'
-		if [ -f $iked ]; then
-			cp /etc/iked.conf /var/nsh/backup/pre-nsh-config/
-			mv /etc/iked.conf /var/run/iked.conf.0
-			chown root /var/run/iked.conf.0
-			chgrp wheel /var/run/iked.conf.0
-			chmod 660 /var/run/iked.conf.0
-		else
-			echo etc-iked does not exist, not importing!
-		fi
-
-		snmpd='/etc/snmpd.conf'
-		if [ -f $snmpd ]; then
-			cp /etc/snmpd.conf /var/nsh/backup/pre-nsh-config/
-			mv /etc/snmpd.conf /var/run/snmpd.conf.0
-			chown root /var/run/snmpd.conf.0
-			chgrp wheel /var/run/snmpd.conf.0
-			chmod 660 /var/run/snmpd.conf.0
-		else
-			echo etc-snmpd does not exist, not importing!
-		fi
-		 
-		ldapd='/etc/ldapd.conf'
-		if [ -f $ldapd ]; then
-			cp /etc/ldapd.conf /var/nsh/backup/pre-nsh-config/
-			mv /etc/ldapd.conf /var/run/ldapd.conf.0
-			chown root /var/run/ldapd.conf.0
-			chgrp wheel /var/run/ldapd.conf.0
-			chmod 660 /var/run/ldapd.conf.0
-		else
-			echo etc-ldapd does not exist, not importing!
-		fi
-
-		resolv='/etc/resolv.conf'
-		if [ -f $resolv ]; then
-			cp /etc/resolv.conf /var/nsh/backup/pre-nsh-config/
-			
-		else
-			echo etc-resolv does not exist, not backing up!
-		fi
-
-		motd='/etc/motd'
-		if [ -f $motd ]; then
-			cp /etc/motd /var/nsh/backup/pre-nsh-config/
-			mv /etc/motd /var/run/motd.0
-			sed -i 's/Welcome to OpenBSD/OpenBSD/g' /var/run/motd.0
-			ln -s /var/run/motd.0 /etc/motd
-			chown root /var/run/motd.0
-			chgrp wheel /var/run/motd.0
-			chmod 660 /var/run/motd.0
-		else 
-			echo etc-motd does not exist, not importing!
-		fi
-		
-		smtpd='/etc/mail/smtpd.conf'
-		if [ -f $smtpd ]; then
-			cp /etc/mail/smtpd.conf /var/nsh/backup/pre-nsh-config/
-			mv /etc/mail/smtpd.conf /var/run/smtpd.conf.0
-			chown root /var/run/smtpd.conf.0
-			chgrp wheel /var/run/smtpd.conf.0
-			chmod 660 /var/run/smtpd.conf.0
-		else 
-			echo etc-smtpd does not exist, not importing!
-		fi
-		
-		dvmrpd='/etc/dvmrpd.conf'
-		if [ -f $dvmrpd ]; then
-			cp /etc/dvmrpd.conf /var/nsh/backup/pre-nsh-config/
-			mv /etc/dvmrpd.conf /var/run/dvmrpd.conf.0
-			chown root /var/run/dvmrpd.conf.0
-			chgrp wheel /var/run/dvmrpd.conf.0
-			chmod 660 /var/run/dvmrpd.conf.0
-		else 
-			echo etc-dvmrpd does not exist, not importing!
-		fi
-		
-		sasync='/etc/sasync.conf'
-		if [ -f $sasync ]; then
-			cp /etc/sasync.conf /var/nsh/backup/pre-nsh-config/
-			mv /etc/sasync.conf /var/run/sasync.conf.0
-			chown root /var/run/sasync.conf.0
-			chgrp wheel /var/run/sasync.conf.0
-			chmod 660 /var/run/sasync.conf.0
-		else 
-			echo etc-sasyncd does not exist, not importing!
-		fi
-		
-		#setup and secure nshlog 
-		touch /var/log/nsh.log
-		chown root /var/log/nsh.log
-		chgrp wheel /var/log/nsh.log
-		chmod 660 /var/log/nsh.log
-		#import running Openbsd kernel configuration
-		/usr/local/bin/nsh -c ./write-config.nshrc
-		#secure nshrc config file 
-		chmod 660 /etc/nshrc
-		#Remove any networking config from /etc/ that conflicts with nsh
-		mv /etc/hostname.* /var/nsh/backup/pre-nsh-config/
-		mv /etc/mygate /var/nsh/backup/pre-nsh-config/
-		#can we import rc.conf.local to nsh config
-		mv /etc/rc.conf.local /var/nsh/backup/pre-nsh-config/
-		cp nsh /etc/rc.d/
-		chmod 555 /etc/rc.d/nsh
-		#enable nsh 
-		rcctl enable nsh
-		#disable services now managed by nsh 
-		rcctl disable ntpd
-		rcctl disable smtpd
-		rcctl disable sshd
-		echo reboot device for nsh configuration to take effect
-		/usr/local/bin/nsh -c ./enable-sshd.nshrc
-	else
-		exit
-	fi
-fi
blob - 9048768cae24c3d67326470392210a2e5703493a (mode 644)
blob + /dev/null
--- nsh-scripts/bin/write-config.nshrc
+++ /dev/null
@@ -1,3 +0,0 @@
-#!/usr/local/bin/nsh
-enable
-write-config
blob - /dev/null
blob + 45b22b89d89978726d421226ddaa02da6a3791a0 (mode 644)
--- /dev/null
+++ scripts/nshrc/enable-sshd.nshrc
@@ -0,0 +1,5 @@
+#!/usr/local/bin/nsh -
+enable
+sshd enable
+write memory
+quit 
blob - /dev/null
blob + 972f5213948334b4b2b22d29f398dccc8b606627 (mode 644)
--- /dev/null
+++ scripts/nshrc/initial-config.nshrc
@@ -0,0 +1,5 @@
+#!/usr/local/bin/nsh -
+enable
+pf enable
+sshd enable
+write-config
blob - /dev/null
blob + de25a27d1617554f64500ae0ca119cf95cc122f9 (mode 644)
--- /dev/null
+++ scripts/nshrc/mg-env-settings
@@ -0,0 +1 @@
+VISUAL=/usr/bin/mg; export VISUAL; EDITOR=/usr/bin/mg; export EDITOR
blob - /dev/null
blob + b30fd80eb373ca572a4947d40542ebcd446f74d8 (mode 644)
--- /dev/null
+++ scripts/nshrc/nsh
@@ -0,0 +1,12 @@
+#!/bin/ksh
+#
+# $OpenBSD: nsh,v 1.0  2022/04/07 01:41:16 cappuccio Exp $
+
+daemon="/usr/local/bin/nsh"
+daemon_flags=" -v -i /etc/nshrc | tee -a /var/log/nsh.log"
+
+rc_reload=NO
+
+. /etc/rc.d/rc.subr
+
+rc_cmd $1
blob - /dev/null
blob + 9048768cae24c3d67326470392210a2e5703493a (mode 644)
--- /dev/null
+++ scripts/nshrc/write-config.nshrc
@@ -0,0 +1,3 @@
+#!/usr/local/bin/nsh
+enable
+write-config
blob - /dev/null
blob + 11dfa2566b90c140770a2454e4acacf992d39a9e (mode 644)
--- /dev/null
+++ scripts/shell/nsh-openbsd-integration.sh
@@ -0,0 +1,282 @@
+#!/bin/sh -
+
+dflt='No'
+
+#check if user is root
+if [ $(id -u) != 0 ];
+then
+	echo "Must be run as root"
+	exit
+else
+	#ask user do they want to continue
+	#default is No
+	echo "This script is built to suit a typical network configuration setup"
+	echo "If you have an unusual config, it is not recommended to run"
+	read input?"Do you want to continue? (Yes/No) [${dflt}] "
+
+	if [ -z "${input}" ]; then input="${dflt}"; fi
+	if [ "${input}" = 'Yes' ] || [ "${input}" = 'yes' ];
+	then
+		test -f /var/nsh/backup/pre-nsh-config && echo pre-nsh-config exists already && exit
+		test -f /etc/nshrc && echo etc-nshrc exists already && exit
+		 
+		mkdir -p /var/nsh/backup/pre-nsh-config
+		
+		#remove world permissions from created directories
+		chmod -R 750 /var/nsh
+		chown -R root /var/nsh
+		chgrp -R wheel /var/nsh 
+		#chmod 750 /var/nsh/backup
+		#chmod 750 /var/nsh/backup/pre-nsh-config
+		 
+		#checks if file exists
+		#makes a copy and moves conf file
+		#secures file
+		pf='/etc/pf.conf'
+		if [ -f $pf ]; then
+			cp /etc/pf.conf /var/nsh/backup/pre-nsh-config/
+			mv /etc/pf.conf /var/run/pf.conf.0
+			chown root /var/run/pf.conf.0
+			chgrp wheel /var/run/pf.conf.0
+			chmod 660 /var/run/pf.conf.0
+		else
+			echo etc-pf does not exist, not importing!
+		fi
+
+		ipsec='/etc/ipsec.conf'
+		if [ -f $ipsec ]; then
+			cp /etc/ipsec.conf /var/nsh/backup/pre-nsh-config/
+			mv /etc/ipsec.conf /var/run/ipsec.conf.0
+			chown root /var/run/ipsec.conf.0
+			chgrp wheel /var/run/ipsec.conf.0
+			chmod 660 /var/run/ipsec.conf.0
+		else
+			echo etc-ipsec does not exist, not importing!
+		fi
+		 
+		bgpd='/etc/bgpd.conf'
+		if [ -f $bgpd ]; then
+			cp /etc/bgpd.conf /var/nsh/backup/pre-nsh-config/
+			mv /etc/bgpd.conf /var/run/bgpd.conf.0
+			chown root /var/run/bgpd.conf.0
+			chgrp wheel /var/run/bgpd.conf.0
+			chmod 660 /var/run/bgpd.conf.0
+		else
+			echo etc-bgpd does not exist, not importing!
+		fi
+		 
+		ospfd='/etc/ospfd.conf'
+		if [ -f $ospfd ]; then
+			cp /etc/ospfd.conf /var/nsh/backup/pre-nsh-config/
+			mv /etc/ospfd.conf /var/run/ospfd.conf.0
+			chown root /var/run/ospfd.conf.0
+			chgrp wheel /var/run/ospfd.conf.0
+			chmod 660 /var/run/ospfd.conf.0
+		else
+			echo etc-ospfd does not exist, not importing!
+		fi
+		 
+		 
+		ospf6d='/etc/ospf6d.conf'
+		if [ -f $ospf6d ]; then
+			cp /etc/ospf6d.conf /var/nsh/backup/pre-nsh-config/
+			mv /etc/ospf6d.conf /var/run/ospf6d.conf.0
+			chown root /var/run/ospf6d.conf.0
+			chgrp wheel /var/run/ospf6d.conf.0
+			chmod 660 /var/run/ospf6d.conf.0
+		else
+			echo etc-ospf6d does not exist, not importing!
+			
+		fi
+		dhcpd='/etc/dhcpd.conf'
+		if [ -f $dhcpd ]; then
+			cp /etc/dhcpd.conf /var/nsh/backup/pre-nsh-config/
+			mv /etc/dhcpd.conf /var/run/dhcpd.conf.0
+			chown root /var/run/dhcpd.conf.0
+			chgrp wheel /var/run/dhcpd.conf.0
+			chmod 660 /var/run/dhcpd.conf.0
+		else
+			echo etc-dhcpd does not exist, not importing!
+		fi
+		
+		ntpd='/etc/ntpd.conf'
+		if [ -f $ntpd ]; then
+			cp /etc/ntpd.conf /var/nsh/backup/pre-nsh-config/
+			mv /etc/ntpd.conf /var/run/ntpd.conf.0
+			chown root /var/run/ntpd.conf.0
+			chgrp wheel /var/run/ntpd.conf.0
+			chmod 660 /var/run/ntpd.conf.0
+		else
+			echo etc-ntpd does not exist, not importing!
+		fi
+		 
+		sshd_config='/etc/ssh/sshd_config'
+		if [ -f $sshd_config ]; then
+			cp /etc/ssh/sshd_config /var/nsh/backup/pre-nsh-config/
+			mv /etc/ssh/sshd_config /var/run/sshd.conf.0
+			chown root /var/run/sshd.conf.0
+			chgrp wheel /var/run/sshd.conf.0
+			chmod 660 /var/run/sshd.conf.0
+		else
+			echo etc-ssh_config does not exist, not importing!
+		fi
+
+		eigrpd='/etc/eigrpd.conf'
+		if [ -f $eigrpd ]; then
+			cp /etc/eigrpd.conf /var/nsh/backup/pre-nsh-config/
+			mv /etc/eigrpd.conf /var/run/eigrpd.conf.0
+			chown root /var/run/eigrpd.conf.0
+			chgrp wheel /var/run/eigrpd.conf.0
+			chmod 660 /var/run/eigrpd.conf.0
+		else
+			echo etc-eigrpd does not exist, not importing!
+		fi
+
+		relayd='/etc/relayd.conf'
+		if [ -f $relayd ]; then
+			cp /etc/relayd.conf /var/nsh/backup/pre-nsh-config/
+			mv /etc/relayd.conf /var/run/relayd.conf.0
+			chown root /var/run/relayd.conf.0
+			chgrp wheel /var/run/relayd.conf.0
+			chmod 660 /var/run/relayd.conf.0
+		else
+			echo etc-relayd does not exist, not importing!
+		fi
+
+		ripd='/etc/ripd.conf'
+		if [ -f $ripd ]; then
+			cp /etc/ripd.conf /var/nsh/backup/pre-nsh-config/
+			mv /etc/ripd.conf /var/run/ripd.conf.0
+			chown root /var/run/ripd.conf.0
+			chgrp wheel /var/run/ripd.conf.0
+			chmod 660 /var/run/ripd.conf.0
+		else
+			echo etc-ripd does not exist, not importing!
+		fi
+		 
+		ldpd='/etc/ldpd.conf'
+		if [ -f $ldpd ]; then
+			cp /etc/ldpd.conf /var/nsh/backup/pre-nsh-config/
+			mv /etc/ldpd.conf /var/run/ldpd.conf.0
+			chown root /var/run/ldpd.conf.0
+			chgrp wheel /var/run/ldpd.conf.0
+			chmod 660 /var/run/ldpd.conf.0
+		else
+			echo etc-ldpd does not exist, not importing!
+		fi
+		 
+		iked='/etc/iked.conf'
+		if [ -f $iked ]; then
+			cp /etc/iked.conf /var/nsh/backup/pre-nsh-config/
+			mv /etc/iked.conf /var/run/iked.conf.0
+			chown root /var/run/iked.conf.0
+			chgrp wheel /var/run/iked.conf.0
+			chmod 660 /var/run/iked.conf.0
+		else
+			echo etc-iked does not exist, not importing!
+		fi
+
+		snmpd='/etc/snmpd.conf'
+		if [ -f $snmpd ]; then
+			cp /etc/snmpd.conf /var/nsh/backup/pre-nsh-config/
+			mv /etc/snmpd.conf /var/run/snmpd.conf.0
+			chown root /var/run/snmpd.conf.0
+			chgrp wheel /var/run/snmpd.conf.0
+			chmod 660 /var/run/snmpd.conf.0
+		else
+			echo etc-snmpd does not exist, not importing!
+		fi
+		 
+		ldapd='/etc/ldapd.conf'
+		if [ -f $ldapd ]; then
+			cp /etc/ldapd.conf /var/nsh/backup/pre-nsh-config/
+			mv /etc/ldapd.conf /var/run/ldapd.conf.0
+			chown root /var/run/ldapd.conf.0
+			chgrp wheel /var/run/ldapd.conf.0
+			chmod 660 /var/run/ldapd.conf.0
+		else
+			echo etc-ldapd does not exist, not importing!
+		fi
+
+		resolv='/etc/resolv.conf'
+		if [ -f $resolv ]; then
+			cp /etc/resolv.conf /var/nsh/backup/pre-nsh-config/
+			
+		else
+			echo etc-resolv does not exist, not backing up!
+		fi
+
+		motd='/etc/motd'
+		if [ -f $motd ]; then
+			cp /etc/motd /var/nsh/backup/pre-nsh-config/
+			mv /etc/motd /var/run/motd.0
+			sed -i 's/Welcome to OpenBSD/OpenBSD/g' /var/run/motd.0
+			ln -s /var/run/motd.0 /etc/motd
+			chown root /var/run/motd.0
+			chgrp wheel /var/run/motd.0
+			chmod 660 /var/run/motd.0
+		else 
+			echo etc-motd does not exist, not importing!
+		fi
+		
+		smtpd='/etc/mail/smtpd.conf'
+		if [ -f $smtpd ]; then
+			cp /etc/mail/smtpd.conf /var/nsh/backup/pre-nsh-config/
+			mv /etc/mail/smtpd.conf /var/run/smtpd.conf.0
+			chown root /var/run/smtpd.conf.0
+			chgrp wheel /var/run/smtpd.conf.0
+			chmod 660 /var/run/smtpd.conf.0
+		else 
+			echo etc-smtpd does not exist, not importing!
+		fi
+		
+		dvmrpd='/etc/dvmrpd.conf'
+		if [ -f $dvmrpd ]; then
+			cp /etc/dvmrpd.conf /var/nsh/backup/pre-nsh-config/
+			mv /etc/dvmrpd.conf /var/run/dvmrpd.conf.0
+			chown root /var/run/dvmrpd.conf.0
+			chgrp wheel /var/run/dvmrpd.conf.0
+			chmod 660 /var/run/dvmrpd.conf.0
+		else 
+			echo etc-dvmrpd does not exist, not importing!
+		fi
+		
+		sasync='/etc/sasync.conf'
+		if [ -f $sasync ]; then
+			cp /etc/sasync.conf /var/nsh/backup/pre-nsh-config/
+			mv /etc/sasync.conf /var/run/sasync.conf.0
+			chown root /var/run/sasync.conf.0
+			chgrp wheel /var/run/sasync.conf.0
+			chmod 660 /var/run/sasync.conf.0
+		else 
+			echo etc-sasyncd does not exist, not importing!
+		fi
+		
+		#setup and secure nshlog 
+		touch /var/log/nsh.log
+		chown root /var/log/nsh.log
+		chgrp wheel /var/log/nsh.log
+		chmod 660 /var/log/nsh.log
+		#import running Openbsd kernel configuration
+		/usr/local/bin/nsh -c ./write-config.nshrc
+		#secure nshrc config file 
+		chmod 660 /etc/nshrc
+		#Remove any networking config from /etc/ that conflicts with nsh
+		mv /etc/hostname.* /var/nsh/backup/pre-nsh-config/
+		mv /etc/mygate /var/nsh/backup/pre-nsh-config/
+		#can we import rc.conf.local to nsh config
+		mv /etc/rc.conf.local /var/nsh/backup/pre-nsh-config/
+		cp nsh /etc/rc.d/
+		chmod 555 /etc/rc.d/nsh
+		#enable nsh 
+		rcctl enable nsh
+		#disable services now managed by nsh 
+		rcctl disable ntpd
+		rcctl disable smtpd
+		rcctl disable sshd
+		echo reboot device for nsh configuration to take effect
+		/usr/local/bin/nsh -c ./enable-sshd.nshrc
+	else
+		exit
+	fi
+fi