debi/netboot.sh

#!/usr/bin/env sh

# Copyright 2018-present Brent, Yang Bohan

# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.

# You may obtain a copy of the License at

#     http://www.apache.org/licenses/LICENSE-2.0

# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.

# See the License for the specific language governing permissions and
# limitations under the License.

set -ex

while [ $# -gt 0 ]; do
  case $1 in
    --template)
      DEBI_TEMPLATE=$2
      shift
      ;;
    --hostname)
      DEBI_HOSTNAME=$2
      shift
      ;;
    --protocol)
      DEBI_PROTOCOL=$2
      shift
      ;;
    --mirror)
      DEBI_MIRROR=$2
      shift
      ;;
    --directory)
      DEBI_DIRECTORY=${2%/}
      shift
      ;;
    --suite)
      DEBI_SUITE=$2
      shift
      ;;
    --username)
      DEBI_USERNAME=$2
      shift
      ;;
    --password)
      DEBI_PASSWORD=$2
      shift
      ;;
    --timezone)
      DEBI_TIMEZONE=$2
      shift
      ;;
    --ntp-server)
      DEBI_NTP_SERVER=$2
      shift
      ;;
    --security-mirror)
      DEBI_SECURITY_MIRROR=$2
      shift
      ;;
    --upgrade)
      DEBI_UPGRADE=$2
      shift
      ;;
    --ip)
      DEBI_IP=$2
      shift
      ;;
    --netmask)
      DEBI_NETMASK=$2
      shift
      ;;
    --gateway)
      DEBI_GATEWAY=$2
      shift
      ;;
    --dns)
      DEBI_DNS=$2
      shift
      ;;
    --include)
      DEBI_INCLUDE=$2
      shift
      ;;
    --ssh-password)
      DEBI_SSH=true
      DEBI_SSH_PASSWD=$2
      shift
      ;;
    --ssh-keys)
      DEBI_SSH=true
      DEBI_SSH_KEYS=$2
      shift
      ;;
    --filesystem)
      DEBI_FILESYSTEM=$2
      shift
      ;;
    --dry-run)
      DEBI_DRY_RUN=true
    ;;
    --disk-encryption)
      DEBI_DISK_ENCRYPTION="crypto"
    ;;
    --manual)
      DEBI_MANUAL=true
    ;;
    --architecture)
      DEBI_ARCHITECTURE=$2
      shift
    ;;
    --boot-partition)
      DEBI_BOOT_PARTITION=true
    ;;
    *)
      echo "Illegal option $1"
      exit 1
  esac
  shift
done

case "$DEBI_TEMPLATE" in
  china)
    DEBI_PROTOCOL=${DEBI_PROTOCOL:-https}
    DEBI_MIRROR=${DEBI_MIRROR:-chinanet.mirrors.ustc.edu.cn}
    DEBI_TIMEZONE=${DEBI_TIMEZONE:-Asia/Shanghai}
    DEBI_NTP_SERVER=${DEBI_NTP_SERVER:-cn.ntp.org.cn}
    DEBI_SECURITY_MIRROR=${DEBI_SECURITY_MIRROR:-true}
    DEBI_DNS=${DEBI_DNS:-156.154.70.5 156.154.71.5}
  vps)
    DEBI_PROTOCOL=${DEBI_PROTOCOL:-https}
    DEBI_MIRROR=${DEBI_MIRROR:-cdn-aws.deb.debian.org}
    DEBI_NTP_SERVER=${DEBI_NTP_SERVER:-time.google.com}
    DEBI_SECURITY_MIRROR=${DEBI_SECURITY_MIRROR:-true}
esac

DEBI_PROTOCOL=${DEBI_PROTOCOL:-http}
DEBI_MIRROR=${DEBI_MIRROR:-deb.debian.org}
DEBI_DIRECTORY=${DEBI_DIRECTORY:-/debian}

if [ -z "$DEBI_ARCHITECTURE" ]; then
  DEBI_ARCHITECTURE=$(dpkg --print-architecture)
fi

DEBI_SUITE=${DEBI_SUITE:-stretch}
DEBI_USERNAME=${DEBI_USERNAME:-debian}
DEBI_TIMEZONE=${DEBI_TIMEZONE:-UTC}
DEBI_NTP_SERVER=${DEBI_NTP_SERVER:-pool.ntp.org}
DEBI_UPGRADE=${DEBI_UPGRADE:-full-upgrade}
DEBI_DNS=${DEBI_DNS:-1.1.1.1 1.0.0.1}
DEBI_FILESYSTEM=${DEBI_FILESYSTEM:-ext4}
DEBI_DISK_ENCRYPTION=${DEBI_DISK_ENCRYPTION:-regular}

if [ -z "$DEBI_SECURITY_MIRROR" ]; then
  DEBI_SECURITY_MIRROR=http://security.debian.org/debian-security
else
  if [ "$DEBI_SECURITY_MIRROR" = true ]; then
    DEBI_SECURITY_MIRROR=$DEBI_PROTOCOL://$DEBI_MIRROR${DEBI_DIRECTORY%/*}/debian-security
  fi
fi

if [ "$DEBI_MANUAL" != true ]; then
  if [ -z "$DEBI_PASSWORD" ]; then
    DEBI_PASSWORD=$(mkpasswd -m sha-512)
  else
    DEBI_PASSWORD=$(mkpasswd -m sha-512 "$DEBI_PASSWORD")
  fi
fi

if [ "$DEBI_DRY_RUN" != true ]; then
  DEBI_TARGET="debian-$DEBI_SUITE"
  if [ "$DEBI_BOOT_PARTITION" = true ]; then
    DEBI_BOOT_DIRECTORY=/
  else
    DEBI_BOOT_DIRECTORY=/boot/
  fi
  DEBI_WORKDIR="/boot/$DEBI_TARGET"
  DEBI_TARGET_PATH="$DEBI_BOOT_DIRECTORY$DEBI_TARGET"
  DEBI_BASE_URL=$DEBI_PROTOCOL://$DEBI_MIRROR$DEBI_DIRECTORY/dists/$DEBI_SUITE/main/installer-$DEBI_ARCHITECTURE/current/images/netboot/debian-installer/$DEBI_ARCHITECTURE
  if type update-grub >/dev/null; then
    update-grub
    DEBI_GRUB_CONFIG=/boot/grub/grub.cfg
  else
    DEBI_GRUB_CONFIG=/boot/grub2/grub.cfg
    grub2-mkconfig > "$DEBI_GRUB_CONFIG"
  fi
  rm -fr "$DEBI_WORKDIR"
  mkdir -p "$DEBI_WORKDIR"
  cd "$DEBI_WORKDIR"
fi

cat >> preseed.cfg << EOF
# Localization

d-i debian-installer/locale string en_US.UTF-8
d-i keyboard-configuration/xkb-keymap select us

# Network configuration

d-i netcfg/choose_interface select auto
EOF

if [ -n "$DEBI_IP" ]; then
  echo "d-i netcfg/disable_autoconfig boolean true" >> preseed.cfg
  echo "d-i netcfg/get_ipaddress string $DEBI_IP" >> preseed.cfg
  if [ -n "$DEBI_NETMASK" ]; then
    echo "d-i netcfg/get_netmask string $DEBI_NETMASK" >> preseed.cfg
  fi
  if [ -n "$DEBI_GATEWAY" ]; then
    echo "d-i netcfg/get_gateway string $DEBI_GATEWAY" >> preseed.cfg
  fi
  if [ -n "$DEBI_DNS" ]; then
    echo "d-i netcfg/get_nameservers string $DEBI_DNS" >> preseed.cfg
  fi
  echo "d-i netcfg/confirm_static boolean true" >> preseed.cfg
fi

cat >> preseed.cfg << EOF
d-i netcfg/get_hostname string debian
d-i netcfg/get_domain string
EOF

if [ -n "$DEBI_HOSTNAME" ]; then
  echo "d-i netcfg/hostname string $DEBI_HOSTNAME" >> preseed.cfg
fi

cat >> preseed.cfg << EOF
d-i hw-detect/load_firmware boolean true
EOF

if [ "$DEBI_SSH" = true ]; then
  echo "d-i anna/choose_modules string network-console" >> preseed.cfg
  echo "d-i preseed/early_command string anna-install network-console" >> preseed.cfg
  if [ -n "$DEBI_SSH_PASSWORD" ]; then
    echo "d-i network-console/password password $DEBI_SSH_PASSWORD" >> preseed.cfg
    echo "d-i network-console/password-again password $DEBI_SSH_PASSWORD" >> preseed.cfg
  fi
  if [ -n "$DEBI_SSH_KEYS" ]; then
    echo "d-i network-console/authorized_keys_url string $DEBI_SSH_KEYS" >> preseed.cfg
  fi
  echo "d-i network-console/start select Continue" >> preseed.cfg
fi

cat >> preseed.cfg << EOF

# Mirror settings

d-i mirror/country string manual
d-i mirror/protocol string {{-PROTOCOL-}}
d-i mirror/{{-PROTOCOL-}}/hostname string {{-MIRROR-}}
d-i mirror/{{-PROTOCOL-}}/directory string {{-DIRECTORY-}}
d-i mirror/{{-PROTOCOL-}}/proxy string
d-i mirror/suite string {{-SUITE-}}
d-i mirror/udeb/suite string {{-SUITE-}}

# Clock and time zone setup

d-i clock-setup/utc boolean true
d-i time/zone string {{-TIMEZONE-}}
d-i clock-setup/ntp boolean true
d-i clock-setup/ntp-server string {{-NTP_SERVER-}}
EOF

if [ "$DEBI_MANUAL" != true ]; then
  cat >> preseed.cfg << EOF

# User account setup

d-i passwd/root-login boolean false
d-i passwd/user-fullname string
d-i passwd/username string {{-USERNAME-}}
d-i passwd/user-password-crypted password {{-PASSWORD-}}

# Disk partitioning

d-i partman-basicfilesystems/no_swap boolean false
d-i partman/default_filesystem string {{-FILESYSTEM-}}
d-i partman-auto/method string {{-DISK_ENCRYPTION-}}
d-i partman-lvm/device_remove_lvm boolean true
d-i partman-md/device_remove_md boolean true
d-i partman-lvm/confirm boolean true
d-i partman-lvm/confirm_nooverwrite boolean true
EOF

  if [ "$DEBI_DISK_ENCRYPTION" = "regular" ]; then
    cat >> preseed.cfg << EOF
d-i partman-auto/expert_recipe string naive :: 0 1 -1 \$default_filesystem \$primary{ } \$bootable{ } method{ format } format{ } use_filesystem{ } \$default_filesystem{ } mountpoint{ / } .
d-i partman-auto/choose_recipe select naive
EOF
  fi

  cat >> preseed.cfg << EOF
d-i partman-partitioning/confirm_write_new_label boolean true
d-i partman/choose_partition select finish
d-i partman/confirm boolean true
d-i partman/confirm_nooverwrite boolean true
d-i partman/mount_style select uuid
EOF

  cat >> preseed.cfg << EOF

# Base system installation

d-i base-installer/install-recommends boolean false

# Apt setup

d-i apt-setup/services-select multiselect updates
d-i apt-setup/local0/repository string {{-SECURITY_MIRROR-}} {{-SUITE-}}/updates main
d-i apt-setup/local0/source boolean true

# Package selection

tasksel tasksel/first multiselect ssh-server
EOF

  if [ -n "$DEBI_INCLUDE" ]; then
    echo "d-i pkgsel/include string $DEBI_INCLUDE" >> preseed.cfg
  fi

  cat >> preseed.cfg << EOF
d-i pkgsel/upgrade select {{-UPGRADE-}}
popularity-contest popularity-contest/participate boolean false

# Boot loader installation

d-i grub-installer/only_debian boolean true
d-i grub-installer/bootdev string default

# Finishing up the installation

d-i finish-install/reboot_in_progress note
EOF
fi

sed -i 's/{{-PROTOCOL-}}/'"$DEBI_PROTOCOL"'/g' preseed.cfg
sed -i 's/{{-MIRROR-}}/'"$DEBI_MIRROR"'/g' preseed.cfg
sed -i 's/{{-DIRECTORY-}}/'$(echo "$DEBI_DIRECTORY" | sed 's/\//\\\//g')'/g' preseed.cfg
sed -i 's/{{-SUITE-}}/'"$DEBI_SUITE"'/g' preseed.cfg
sed -i 's/{{-USERNAME-}}/'"$DEBI_USERNAME"'/g' preseed.cfg
sed -i 's/{{-PASSWORD-}}/'$(echo "$DEBI_PASSWORD" | sed 's/\//\\\//g')'/g' preseed.cfg
sed -i 's/{{-TIMEZONE-}}/'$(echo "$DEBI_TIMEZONE" | sed 's/\//\\\//g')'/g' preseed.cfg
sed -i 's/{{-NTP_SERVER-}}/'"$DEBI_NTP_SERVER"'/g' preseed.cfg
sed -i 's/{{-SECURITY_MIRROR-}}/'$(echo "$DEBI_SECURITY_MIRROR" | sed 's/\//\\\//g')'/g' preseed.cfg
sed -i 's/{{-UPGRADE-}}/'"$DEBI_UPGRADE"'/g' preseed.cfg
sed -i 's/{{-FILESYSTEM-}}/'"$DEBI_FILESYS"'/g' preseed.cfg
sed -i 's/{{-DISK_ENCRYPTION-}}/'"$DEBI_DISK_ENCRYPTION"'/g' preseed.cfg

if [ "$DEBI_DRYRUN" != true ]; then
  wget "$DEBI_BASE_URL/linux" "$DEBI_BASE_URL/initrd.gz"
  gunzip initrd.gz
  echo preseed.cfg | cpio -H newc -o -A -F initrd
  gzip initrd

  cat >> "$DEBI_GRUB_CONFIG" << EOF
menuentry 'New Install' --id debian-netboot-installer {
insmod part_msdos
insmod ext2
set root='(hd0,msdos1)'
linux $DEBI_TARGET_PATH/linux
initrd $DEBI_TARGET_PATH/initrd.gz
}
EOF

fi