infong
/
debi
mirror of https://github.com/bohanyang/debi
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Minor update

Browse Source
pull/8/head
Bohan Yang 5 years ago committed by GitHub
parent 0885d0b308
commit 499da4dd27
1 changed files with 31 additions and 31 deletions
Whitespace
Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL
Unified View
Diff Options
Show Stats Download Patch File Download Diff File
  1. 62
      debi.sh

62
debi.sh
Unescape View File

@ -2,26 +2,26 @@
set -eu set -eu
_err() { err() {
printf 'Error: %s.\n' "$1" 1>&2 printf 'Error: %s.\n' "$1" 1>&2
exit 1 exit 1
} }
_command_exists() { command_exists() {
command -v "$1" > /dev/null 2>&1 command -v "$1" > /dev/null 2>&1
} }
late_command= late_command=
_late_command() { run_later() {
[ -z "$late_command" ] && late_command='true' [ -z "$late_command" ] && late_command='true'
late_command="$late_command; $1" late_command="$late_command; $1"
} }
_backup() { backup() {
_late_command "[ ! -e \"$1$2\" ] && cp \"$1\" \"$1$2\"" run_later "[ ! -e \"$1.backup\" ] && cp \"$1\" \"$1.backup\""
} }
_prompt_password() { prompt_password() {
if [ -z "$password" ]; then if [ -z "$password" ]; then
read -rs -p 'Password: ' password read -rs -p 'Password: ' password
fi fi
@ -81,7 +81,7 @@ while [ $# -gt 0 ]; do
security_repository=mirror security_repository=mirror
;; ;;
*) *)
_err "No such preset $2" err "No such preset $2"
esac esac
shift shift
;; ;;
@ -221,7 +221,7 @@ while [ $# -gt 0 ]; do
dry_run=true dry_run=true
;; ;;
*) *)
_err "Illegal option $1" err "Illegal option $1"
esac esac
shift shift
done done
@ -233,7 +233,7 @@ save_preseed='cat'
if [ "$dry_run" != true ]; then if [ "$dry_run" != true ]; then
user="$(id -un 2>/dev/null || true)" user="$(id -un 2>/dev/null || true)"
[ "$user" != root ] && _err 'root privilege is required' [ "$user" != root ] && err 'root privilege is required'
rm -rf "$installer_directory" rm -rf "$installer_directory"
mkdir -p "$installer_directory" mkdir -p "$installer_directory"
@ -282,8 +282,8 @@ d-i preseed/early_command string anna-install network-console
EOF EOF
if [ -n "$authorized_keys_url" ]; then if [ -n "$authorized_keys_url" ]; then
_backup /etc/ssh/sshd_config .backup backup /etc/ssh/sshd_config
_late_command 'sed -ri "s/^#?PasswordAuthentication .+/PasswordAuthentication no/" /etc/ssh/sshd_config' run_later 'sed -ri "s/^#?PasswordAuthentication .+/PasswordAuthentication no/" /etc/ssh/sshd_config'
$save_preseed << EOF $save_preseed << EOF
d-i network-console/password-disabled boolean true d-i network-console/password-disabled boolean true
d-i network-console/authorized_keys_url string $authorized_keys_url d-i network-console/authorized_keys_url string $authorized_keys_url
@ -313,16 +313,16 @@ d-i mirror/udeb/suite string $suite
EOF EOF
if [ "$skip_account_setup" != true ]; then if [ "$skip_account_setup" != true ]; then
if _command_exists mkpasswd; then if command_exists mkpasswd; then
if [ -z "$password" ]; then if [ -z "$password" ]; then
password="$(mkpasswd -m sha-512)" password="$(mkpasswd -m sha-512)"
else else
password="$(mkpasswd -m sha-512 "$password")" password="$(mkpasswd -m sha-512 "$password")"
fi fi
elif _command_exists busybox && busybox mkpasswd --help >/dev/null 2>&1; then elif command_exists busybox && busybox mkpasswd --help >/dev/null 2>&1; then
_prompt_password prompt_password
password="$(busybox mkpasswd -m sha512 "$password")" password="$(busybox mkpasswd -m sha512 "$password")"
elif _command_exists python3; then elif command_exists python3; then
if [ -z "$password" ]; then if [ -z "$password" ]; then
password="$(python3 -c 'import crypt, getpass; print(crypt.crypt(getpass.getpass(), crypt.mksalt(crypt.METHOD_SHA512)))')" password="$(python3 -c 'import crypt, getpass; print(crypt.crypt(getpass.getpass(), crypt.mksalt(crypt.METHOD_SHA512)))')"
else else
@ -330,7 +330,7 @@ if [ "$skip_account_setup" != true ]; then
fi fi
else else
cleartext_password=true cleartext_password=true
_prompt_password prompt_password
fi fi
$save_preseed << 'EOF' $save_preseed << 'EOF'
@ -341,10 +341,10 @@ EOF
if [ "$username" = root ]; then if [ "$username" = root ]; then
if [ -z "$authorized_keys_url" ]; then if [ -z "$authorized_keys_url" ]; then
_backup /etc/ssh/sshd_config .backup backup /etc/ssh/sshd_config
_late_command 'sed -ri "s/^#?PermitRootLogin .+/PermitRootLogin yes/" /etc/ssh/sshd_config' run_later 'sed -ri "s/^#?PermitRootLogin .+/PermitRootLogin yes/" /etc/ssh/sshd_config'
else else
_late_command "mkdir -m 0700 -p ~root/.ssh && busybox wget -O - \"$authorized_keys_url\" | tee -a ~root/.ssh/authorized_keys" run_later "mkdir -m 0700 -p ~root/.ssh && busybox wget -O - \"$authorized_keys_url\" | tee -a ~root/.ssh/authorized_keys"
fi fi
$save_preseed << 'EOF' $save_preseed << 'EOF'
@ -361,11 +361,11 @@ EOF
echo "d-i passwd/root-password-crypted password $password" | $save_preseed echo "d-i passwd/root-password-crypted password $password" | $save_preseed
fi fi
else else
_backup /etc/ssh/sshd_config .backup backup /etc/ssh/sshd_config
_late_command 'sed -ri "s/^#?PermitRootLogin .+/PermitRootLogin no/" /etc/ssh/sshd_config' run_later 'sed -ri "s/^#?PermitRootLogin .+/PermitRootLogin no/" /etc/ssh/sshd_config'
if [ -n "$authorized_keys_url" ]; then if [ -n "$authorized_keys_url" ]; then
_late_command "sudo -u $username mkdir -m 0700 -p ~$username/.ssh && busybox wget -O - \"$authorized_keys_url\" | sudo -u $username tee -a ~$username/.ssh/authorized_keys" run_later "sudo -u $username mkdir -m 0700 -p ~$username/.ssh && busybox wget -O - \"$authorized_keys_url\" | sudo -u $username tee -a ~$username/.ssh/authorized_keys"
fi fi
$save_preseed << EOF $save_preseed << EOF
@ -511,7 +511,7 @@ $save_preseed << 'EOF'
d-i finish-install/reboot_in_progress note d-i finish-install/reboot_in_progress note
EOF EOF
[ "$bbr" = true ] && _late_command '{ echo "net.core.default_qdisc=fq"; echo "net.ipv4.tcp_congestion_control=bbr"; } > /etc/sysctl.d/bbr.conf' [ "$bbr" = true ] && run_later '{ echo "net.core.default_qdisc=fq"; echo "net.ipv4.tcp_congestion_control=bbr"; } > /etc/sysctl.d/bbr.conf'
[ -n "$late_command" ] && echo "d-i preseed/late_command string in-target bash -c '$late_command'" | $save_preseed [ -n "$late_command" ] && echo "d-i preseed/late_command string in-target bash -c '$late_command'" | $save_preseed
@ -521,33 +521,33 @@ save_grub_cfg='cat'
if [ "$dry_run" != true ]; then if [ "$dry_run" != true ]; then
if [ -z "$architecture" ]; then if [ -z "$architecture" ]; then
architecture=amd64 architecture=amd64
_command_exists dpkg && architecture="$(dpkg --print-architecture)" command_exists dpkg && architecture="$(dpkg --print-architecture)"
fi fi
base_url="$mirror_protocol://$mirror_host$mirror_directory/dists/$suite/main/installer-$architecture/current/images/netboot/debian-installer/$architecture" base_url="$mirror_protocol://$mirror_host$mirror_directory/dists/$suite/main/installer-$architecture/current/images/netboot/debian-installer/$architecture"
if _command_exists wget; then if command_exists wget; then
wget "$base_url/linux" "$base_url/initrd.gz" wget "$base_url/linux" "$base_url/initrd.gz"
elif _command_exists curl; then elif command_exists curl; then
curl -O "$base_url/linux" -O "$base_url/initrd.gz" curl -O "$base_url/linux" -O "$base_url/initrd.gz"
elif _command_exists busybox; then elif command_exists busybox; then
busybox wget "$base_url/linux" "$base_url/initrd.gz" busybox wget "$base_url/linux" "$base_url/initrd.gz"
else else
_err 'wget/curl/busybox is required to download files' err 'wget/curl/busybox is required to download files'
fi fi
gunzip initrd.gz gunzip initrd.gz
echo preseed.cfg | cpio -H newc -o -A -F initrd echo preseed.cfg | cpio -H newc -o -A -F initrd
gzip initrd gzip initrd
if _command_exists update-grub; then if command_exists update-grub; then
grub_cfg=/boot/grub/grub.cfg grub_cfg=/boot/grub/grub.cfg
update-grub update-grub
elif _command_exists grub2-mkconfig; then elif command_exists grub2-mkconfig; then
grub_cfg=/boot/grub2/grub.cfg grub_cfg=/boot/grub2/grub.cfg
grub2-mkconfig -o "$grub_cfg" grub2-mkconfig -o "$grub_cfg"
else else
_err 'update-grub/grub2-mkconfig command not found' err 'update-grub/grub2-mkconfig command not found'
fi fi
save_grub_cfg="tee -a $grub_cfg" save_grub_cfg="tee -a $grub_cfg"

Write Preview
Loading…
Cancel
Save