import paramiko

ssh = paramiko.SSHClient()
ssh.set_missing_host_key_policy(paramiko.AutoAddPolicy())
ssh.connect('140.44.4.21', username='root', key_filename=r'C:\Users\Snarf\.ssh\id_ed25519_snarfnet', timeout=15)

script = """#!/bin/bash
export DEBIAN_FRONTEND=noninteractive

echo "=== 1. Root Filesystem Hardening ==="
tune2fs -l /dev/mmcblk0p2 | grep -i "error.*behavior"

echo "=== 2. Time Synchronization Setup ==="
cat << 'EOF' > /etc/systemd/timesyncd.conf
[Time]
NTP=140.44.4.11 14.4.4.44
FallbackNTP=time.cloudflare.com time.google.com 0.us.pool.ntp.org 1.us.pool.ntp.org
PollIntervalMinSec=32
PollIntervalMaxSec=512
EOF
systemctl restart systemd-timesyncd.service
echo "Timesync status: $(systemctl is-active systemd-timesyncd)"

echo "=== 3. Zabbix Agent 2 Installation & Configuration ==="
apt-get update -y
apt-get install -y zabbix-agent2

mkdir -p /etc/zabbix
echo "a1142332ccfa9c53040e36171bb551ceb2865fb4051d203404df39e88ebe94f0" > /etc/zabbix/zabbix_agent2.psk
chmod 600 /etc/zabbix/zabbix_agent2.psk
chown zabbix:zabbix /etc/zabbix/zabbix_agent2.psk 2>/dev/null || true

cat << 'EOF' > /etc/zabbix/zabbix_agent2.conf
Server=zabbix.snarfnet.net
ServerActive=zabbix.snarfnet.net
HostnameItem=system.hostname
HostMetadata=Linux
TLSConnect=psk
TLSAccept=psk
TLSPSKIdentity=PSK_autoregister
TLSPSKFile=/etc/zabbix/zabbix_agent2.psk
LogFile=/var/log/zabbix/zabbix_agent2.log
LogFileSize=10
BufferSend=5
BufferSize=100
EOF
systemctl enable --now zabbix-agent2.service
echo "Zabbix-agent2 status: $(systemctl is-active zabbix-agent2)"

echo "=== 4. K3s Agent Installation (v1.30.6+k3s1) ==="
curl -sfL https://get.k3s.io | INSTALL_K3S_VERSION=v1.30.6+k3s1 K3S_URL=https://140.44.4.11:6443 K3S_TOKEN=myworstkeptsecret44 sh -

echo "K3s-agent status: $(systemctl is-active k3s-agent)"
echo "=== ALL PROVISIONING TASKS COMPLETE ==="
"""

print("Running provisioning script on sninfr2lnxwrk01...")
stdin, stdout, stderr = ssh.exec_command(script, get_pty=True)

for line in iter(stdout.readline, ""):
    print(line, end="")

exit_code = stdout.channel.recv_exit_status()
print(f"\nFinished with exit code: {exit_code}")

ssh.close()