370 lines
12 KiB
Bash
Executable File
370 lines
12 KiB
Bash
Executable File
#!/bin/bash
|
|
|
|
set -e
|
|
|
|
SCRIPT_DIR="$(cd "$(dirname "$BASH_SOURCE[0]")" && pwd)"
|
|
|
|
. "$1"
|
|
|
|
ROOT_PARTITION_MAP=""
|
|
ROOT_PARTITION_MAP_NAME=""
|
|
if [[ $ENCRYPT_DISK = "true" ]]
|
|
then
|
|
ROOT_PARTITION_MAP="/dev/mapper/cryptelfroot"
|
|
ROOT_PARTITION_MAP_NAME="cryptelfroot"
|
|
else
|
|
ROOT_PARTITION_MAP="${ROOT_PARTITION}"
|
|
fi
|
|
|
|
function run(){
|
|
echo "[ ] $1"
|
|
echo "# $1" >>install.log
|
|
echo "> $2" >>install.log
|
|
bash -c "$2" &>>install.log \
|
|
&& echo -e "\e[1A\e[K[ \e[32mOK\e[0m ] $1" \
|
|
|| {
|
|
echo -e "\e[1A\e[K[\e[31mFAIL\e[0m] $1"
|
|
bash -c "$3"
|
|
exit 10
|
|
}
|
|
echo >>install.log
|
|
}
|
|
|
|
function run-chroot(){
|
|
echo "[ ] $1"
|
|
echo "# $1" >>install.log
|
|
echo "> chroot /mnt $2" >>install.log
|
|
arch-chroot /mnt bash -c "$2" &>>install.log \
|
|
&& echo -e "\e[1A\e[K[ \e[32mOK\e[0m ] $1" \
|
|
|| {
|
|
echo -e "\e[1A\e[K[\e[31mFAIL\e[0m] $1"
|
|
bash -c "$3"
|
|
exit 20
|
|
}
|
|
echo >>install.log
|
|
}
|
|
|
|
function preperations() {
|
|
echo
|
|
echo === preperations
|
|
echo
|
|
|
|
run "install git" "pacman -Sy --noconfirm git"
|
|
run "enable ntp" "timedatectl set-ntp true"
|
|
run "set timezone" "timedatectl set-timezone Europe/Amsterdam"
|
|
}
|
|
|
|
function format_disk() {
|
|
echo
|
|
echo === format disk
|
|
echo
|
|
|
|
run "applly partion table" "sfdisk $DISK <$SFDISK_FILE"
|
|
run "format boot partition" "mkfs.fat -F 32 ${UEFI_PARTITION}"
|
|
run "format swap partition" "mkswap ${SWAP_PARTITION}"
|
|
if [[ $ENCRYPT_DISK = "true" ]]; then
|
|
echo -n "$PASS" >keyfile.luks
|
|
run "encrypt root partition" "cryptsetup luksFormat --batch-mode --key-file keyfile.luks ${ROOT_PARTITION}" "rm keyfile.luks"
|
|
run "map root partitaion" "cryptsetup open --batch-mode --key-file keyfile.luks ${ROOT_PARTITION} ${ROOT_PARTITION_MAP_NAME}" "rm keyfile.luks"
|
|
rm keyfile.luks
|
|
run "format root partition" "mkfs.btrfs ${ROOT_PARTITION_MAP}"
|
|
else
|
|
run "format root partition" "mkfs.btrfs ${ROOT_PARTITION}"
|
|
fi
|
|
|
|
run "mount root partition" "mount ${ROOT_PARTITION_MAP} /mnt"
|
|
run "create root btrfs subvolume" "btrfs subvolume create /mnt/@elfRoot_a"
|
|
run "create root btrfs subvolume" "btrfs subvolume create /mnt/@elfRoot_b"
|
|
run "create home btrfs subvolume" "btrfs subvolume create /mnt/@home"
|
|
run "create home btrfs subvolume" "btrfs subvolume create /mnt/@var"
|
|
run "unmount btrfs" "umount /mnt"
|
|
if [[ $ENCRYPT_DISK = "true" ]]; then
|
|
run "unmap root partitaion" "cryptsetup close ${ROOT_PARTITION_MAP_NAME}"
|
|
fi
|
|
}
|
|
|
|
function mount_disk() {
|
|
subvol="@elfRoot_$1"
|
|
echo
|
|
echo === mount disk with subvol $1
|
|
echo
|
|
|
|
if [[ $ENCRYPT_DISK = "true" ]]; then
|
|
echo -n "$PASS" >keyfile.luks
|
|
run "map root partitaion" "cryptsetup open --batch-mode --key-file keyfile.luks ${ROOT_PARTITION} ${ROOT_PARTITION_MAP_NAME}"
|
|
rm keyfile.luks
|
|
fi
|
|
run "mount root subvolume" "mount -o subvol=$subvol ${ROOT_PARTITION_MAP} /mnt"
|
|
run "mount home subvolume" "mount --mkdir -o subvol=@home ${ROOT_PARTITION_MAP} /mnt/home"
|
|
run "mount home subvolume" "mount --mkdir -o subvol=@var ${ROOT_PARTITION_MAP} /mnt/var"
|
|
run "mount boot partition" "mount --mkdir ${UEFI_PARTITION} /mnt/boot"
|
|
run "enable swap" "swapon ${SWAP_PARTITION}"
|
|
}
|
|
|
|
function umount_disk() {
|
|
echo
|
|
echo === mount disk
|
|
echo
|
|
|
|
run "mount root subvolume" "umount -R /mnt"
|
|
run "unmap root partitaion" "cryptsetup close ${ROOT_PARTITION_MAP_NAME}"
|
|
run "enable swap" "swapoff ${SWAP_PARTITION}"
|
|
}
|
|
|
|
function install_base() {
|
|
echo
|
|
echo === install arch
|
|
echo
|
|
|
|
run "install base of arch" "pacstrap /mnt base linux linux-firmware"
|
|
run "intall utitlities" "pacstrap /mnt btrfs-progs man vim sudo"
|
|
run "intall networkmanager" "pacstrap /mnt networkmanager"
|
|
run "generate fstab" "genfstab -U /mnt >>/mnt/etc/fstab"
|
|
}
|
|
|
|
function set_locals() {
|
|
echo
|
|
echo === set locals
|
|
echo
|
|
|
|
run-chroot "set timezone" "ln -sf /usr/share/zoneinfo/Europe/Amsterdam /etc/localtime"
|
|
run-chroot "set hwclock to UTC" "hwclock --systohc"
|
|
run-chroot "update locals.gen" "sed --in-place -E -e 's/^#?en_GB.UTF-8/en_GB.UTF-8/' -e 's/^#?en_US.UTF-8/en_US.UTF-8/' /etc/locale.gen"
|
|
run-chroot "generate locals" "locale-gen"
|
|
run-chroot "config locals" "echo \"LANG=en_GB.UTF-8\" >/etc/locale.conf"
|
|
run-chroot "set hostname" "echo \"$HOSTNAME\" >/etc/hostname"
|
|
run-chroot "create hosts file" "cat >/etc/hosts <<EOF
|
|
127.0.0.1 localhost
|
|
::1 localhost
|
|
127.0.1.1 $HOSTNAME
|
|
EOF
|
|
"
|
|
}
|
|
|
|
function install_bootloader() {
|
|
echo
|
|
echo === install bootloader
|
|
echo
|
|
|
|
run-chroot "config initramfs" "sed --in-place -e 's/HOOKS=(.*)/HOOKS=(base udev autodetect microcode modconf kms keyboard block encrypt filesystems fsck)/' /etc/mkinitcpio.conf"
|
|
run-chroot "generate initramfs" "mkinitcpio -P"
|
|
|
|
DISKUUID=$(blkid --output export ${ROOT_PARTITION} | grep '^UUID' | sed 's/UUID=//')
|
|
BOAT_LOADER_OPTIONS_A=""
|
|
if [[ $ENCRYPT_DISK = "true" ]]
|
|
then
|
|
BOAT_LOADER_OPTIONS_A="cryptdevice=UUID=${DISKUUID}:${ROOT_PARTITION_MAP_NAME}:allow-discards "
|
|
fi
|
|
BOAT_LOADER_OPTIONS_A="${BOAT_LOADER_OPTIONS_A}root=${ROOT_PARTITION_MAP} "
|
|
BOAT_LOADER_OPTIONS_A="${BOAT_LOADER_OPTIONS_A}rootflags=subvol=@elfRoot_a "
|
|
if [[ $ENCRYPT_DISK = "true" ]]
|
|
then
|
|
BOAT_LOADER_OPTIONS_A="${BOAT_LOADER_OPTIONS_A}rd.luks.options=discard "
|
|
fi
|
|
BOAT_LOADER_OPTIONS_A="${BOAT_LOADER_OPTIONS_A}rw"
|
|
BOAT_LOADER_OPTIONS_B="$(echo ${BOAT_LOADER_OPTIONS_A} | sed -e 's/@elfRoot_a/@elfRoot_b/g')"
|
|
run-chroot "install systemd-boot" "bootctl install"
|
|
run-chroot "create boot config A" "cat >/boot/loader/entries/elfA.conf <<EOF
|
|
title E.L.F. OS (A)
|
|
linux /vmlinuz-linux
|
|
initrd /initramfs-linux.img
|
|
options ${BOAT_LOADER_OPTIONS_A}
|
|
EOF
|
|
"
|
|
run-chroot "create boot config B" "cat >/boot/loader/entries/elfB.conf <<EOF
|
|
title E.L.F. OS (B)
|
|
linux /vmlinuz-linux
|
|
initrd /initramfs-linux-fallback.img
|
|
options ${BOAT_LOADER_OPTIONS_B}
|
|
EOF
|
|
"
|
|
run-chroot "create main boot config" "cat >/boot/loader/loader.conf <<EOF
|
|
default elfA.conf
|
|
timeout 4
|
|
console-mode max
|
|
editor no
|
|
EOF
|
|
"
|
|
}
|
|
|
|
function create_user() {
|
|
echo
|
|
echo === setup user
|
|
echo
|
|
|
|
run-chroot "add .ssh dir to skel" "mkdir -p /etc/skel/.ssh"
|
|
run-chroot "create admin group" "groupadd admin"
|
|
run-chroot "create user" "useradd --home-dir /home/${USERNAME} --create-home --skel /etc/skel ${USERNAME} --groups admin"
|
|
arch-chroot /mnt bash -c "echo \"${USERNAME}:${PASS_USER}\" | chpasswd" # don't log the password
|
|
run-chroot "add user to sudoers" "echo \"%admin ALL=(ALL:ALL) ALL\" >>/etc/sudoers"
|
|
run "clone keys repo" "git clone ${SSH_KEY_REPO} /mnt/opt/keys"
|
|
run-chroot "create authoized keys" "cd /opt/keys/ssh && cat ${USER_SSH_KEYS} > /home/${USERNAME}/.ssh/authorized_keys"
|
|
}
|
|
|
|
function miscellaneous() {
|
|
echo
|
|
echo === miscellaneous
|
|
echo
|
|
|
|
run "set udev rules" "mkdir -p /mnt/etc/udev.d/rules/"
|
|
run "set udev rules" "cp $SCRIPT_DIR/configs/udev/*.rules /mnt/etc/udev.d/rules/"
|
|
}
|
|
|
|
function prepair_firt_boot() {
|
|
echo
|
|
echo === prepair first boot
|
|
echo
|
|
|
|
run "copy config files" "cp -r $SCRIPT_DIR/configs /mnt/opt/elfOS_configFiles"
|
|
run "copy fist boot script" "cp $SCRIPT_DIR/first-boot.sh /mnt/first-boot.sh && chmod 700 /mnt/first-boot.sh"
|
|
run "make script executable" "cp $SCRIPT_DIR/first-boot.sh /mnt/first-boot.sh"
|
|
run "create fist boot config" "cat >/mnt/first-boot.env <<EOF
|
|
USERNAME=$USERNAME
|
|
HOSTNAME=$HOSTNAME
|
|
CONFIG_DIR=/opt/elfOS_configFiles
|
|
LOG_FILE=/var/log/elfOS/first-boot.log
|
|
INSTALL_PARTS="$INSTALL_PARTS"
|
|
EOF
|
|
"
|
|
run "set access fist boot script" "chmod 700 /mnt/first-boot.env"
|
|
run "create first boot service" "cat >/mnt/etc/systemd/system/first_boot.service <<EOF
|
|
[Unit]
|
|
Description=first boot install script
|
|
|
|
[Service]
|
|
Type=simple
|
|
StandardOutput=journal+console
|
|
ExecStart=/first-boot.sh
|
|
|
|
[Install]
|
|
WantedBy=multi-user.target
|
|
EOF
|
|
"
|
|
run-chroot "enable first boot service" "systemctl enable first_boot.service"
|
|
run "make elfOS log dir" "mkdir /mnt/var/log/elfOS && chmod 700 /mnt/var/log/elfOS"
|
|
run "copy install log to disk" "cp $SCRIPT_DIR/install.log /mnt/var/log/elfOS/install.log && chmod 700 /mnt/var/log/elfOS/install.log"
|
|
}
|
|
|
|
function copy_a_to_b() {
|
|
if [[ $ENCRYPT_DISK = "true" ]]; then
|
|
echo -n "$PASS" >keyfile.luks
|
|
run "map root partitaion" "cryptsetup open --batch-mode --key-file keyfile.luks ${ROOT_PARTITION} ${ROOT_PARTITION_MAP_NAME}"
|
|
rm keyfile.luks
|
|
fi
|
|
run "mount disk" "mount ${ROOT_PARTITION_MAP} /mnt"
|
|
run "copy a to b" "cp -R /mnt/@elfRoot_a /mnt/@elfRoot_b"
|
|
}
|
|
|
|
echo "" >install.log
|
|
|
|
case $2 in
|
|
install)
|
|
if [[ $ENCRYPT_DISK = "true" ]]
|
|
then
|
|
echo -n "disk encryption password: "
|
|
read -s PASS
|
|
echo
|
|
echo -n "retype password: "
|
|
read -s PASSRE
|
|
echo
|
|
if [ "$PASS" != "$PASSRE" ]; then
|
|
echo "password do not match"
|
|
exit 1
|
|
fi
|
|
fi
|
|
|
|
echo -n "password for $USERNAME: "
|
|
read -s PASS_USER
|
|
echo
|
|
echo -n "retype password: "
|
|
read -s PASSRE_USER
|
|
echo
|
|
|
|
if [ "$PASS_USER" != "$PASSRE_USER" ]; then
|
|
echo "password do not match"
|
|
exit 2
|
|
fi
|
|
|
|
echo -n "are you sure you want to format ${DISK} (y/N): "
|
|
read -s confirm
|
|
echo
|
|
if [ "$confirm" != "y" ]; then
|
|
echo "exit"
|
|
exit 2
|
|
fi
|
|
|
|
preperations
|
|
format_disk
|
|
mount_disk a
|
|
install_base
|
|
set_locals
|
|
install_bootloader
|
|
create_user
|
|
miscellaneous
|
|
prepair_firt_boot
|
|
umount_disk
|
|
copy_a_to_b
|
|
;;
|
|
reinstall_*)
|
|
if [[ $ENCRYPT_DISK = "true" ]]; then
|
|
echo -n "disk encryption password: "
|
|
read -s PASS
|
|
echo
|
|
fi
|
|
|
|
echo -n "password for $USERNAME: "
|
|
read -s PASS_USER
|
|
echo
|
|
echo -n "retype password: "
|
|
read -s PASSRE_USER
|
|
echo
|
|
if [ "$PASS_USER" != "$PASSRE_USER" ]; then
|
|
echo "password do not match"
|
|
exit 2
|
|
fi
|
|
echo
|
|
|
|
preperations
|
|
if [[ "$2" = "reinstall_a" ]]; then
|
|
mount_disk a
|
|
else
|
|
mount_disk b
|
|
fi
|
|
install_base
|
|
set_locals
|
|
install_bootloader
|
|
create_user
|
|
miscellaneous
|
|
prepair_firt_boot
|
|
umount_disk
|
|
;;
|
|
bootloader)
|
|
if [[ $ENCRYPT_DISK = "true" ]]; then
|
|
echo -n "disk encryption password: "
|
|
read -s PASS
|
|
echo
|
|
fi
|
|
|
|
preperations
|
|
mount_disk a
|
|
install_bootloader
|
|
umount_disk
|
|
;;
|
|
*)
|
|
echo "$0 <config_file> <action>"
|
|
echo
|
|
echo "action:"
|
|
echo " install: install the full os"
|
|
echo " reinstall_a: re install os on system A"
|
|
echo " reinstall_b: re install os on system B"
|
|
echo " bootloader: re setup the bootloader"
|
|
exit
|
|
;;
|
|
esac
|
|
|
|
echo
|
|
echo === reboot
|
|
echo
|
|
|
|
run "reboot" "shutdown -r now"
|