|
@@ -2,26 +2,26 @@
|
|
|
|
|
|
|
|
set -eu
|
|
set -eu
|
|
|
|
|
|
|
|
-_err() {
|
|
|
|
|
|
|
+err() {
|
|
|
printf 'Error: %s.\n' "$1" 1>&2
|
|
printf 'Error: %s.\n' "$1" 1>&2
|
|
|
exit 1
|
|
exit 1
|
|
|
}
|
|
}
|
|
|
|
|
|
|
|
-_command_exists() {
|
|
|
|
|
|
|
+command_exists() {
|
|
|
command -v "$1" > /dev/null 2>&1
|
|
command -v "$1" > /dev/null 2>&1
|
|
|
}
|
|
}
|
|
|
|
|
|
|
|
late_command=
|
|
late_command=
|
|
|
-_late_command() {
|
|
|
|
|
|
|
+run_later() {
|
|
|
[ -z "$late_command" ] && late_command='true'
|
|
[ -z "$late_command" ] && late_command='true'
|
|
|
late_command="$late_command; $1"
|
|
late_command="$late_command; $1"
|
|
|
}
|
|
}
|
|
|
|
|
|
|
|
-_backup() {
|
|
|
|
|
- _late_command "[ ! -e \"$1$2\" ] && cp \"$1\" \"$1$2\""
|
|
|
|
|
|
|
+backup() {
|
|
|
|
|
+ run_later "[ ! -e \"$1.backup\" ] && cp \"$1\" \"$1.backup\""
|
|
|
}
|
|
}
|
|
|
|
|
|
|
|
-_prompt_password() {
|
|
|
|
|
|
|
+prompt_password() {
|
|
|
if [ -z "$password" ]; then
|
|
if [ -z "$password" ]; then
|
|
|
read -rs -p 'Password: ' password
|
|
read -rs -p 'Password: ' password
|
|
|
fi
|
|
fi
|
|
@@ -81,7 +81,7 @@ while [ $# -gt 0 ]; do
|
|
|
security_repository=mirror
|
|
security_repository=mirror
|
|
|
;;
|
|
;;
|
|
|
*)
|
|
*)
|
|
|
- _err "No such preset $2"
|
|
|
|
|
|
|
+ err "No such preset $2"
|
|
|
esac
|
|
esac
|
|
|
shift
|
|
shift
|
|
|
;;
|
|
;;
|
|
@@ -221,7 +221,7 @@ while [ $# -gt 0 ]; do
|
|
|
dry_run=true
|
|
dry_run=true
|
|
|
;;
|
|
;;
|
|
|
*)
|
|
*)
|
|
|
- _err "Illegal option $1"
|
|
|
|
|
|
|
+ err "Illegal option $1"
|
|
|
esac
|
|
esac
|
|
|
shift
|
|
shift
|
|
|
done
|
|
done
|
|
@@ -233,7 +233,7 @@ save_preseed='cat'
|
|
|
if [ "$dry_run" != true ]; then
|
|
if [ "$dry_run" != true ]; then
|
|
|
user="$(id -un 2>/dev/null || true)"
|
|
user="$(id -un 2>/dev/null || true)"
|
|
|
|
|
|
|
|
- [ "$user" != root ] && _err 'root privilege is required'
|
|
|
|
|
|
|
+ [ "$user" != root ] && err 'root privilege is required'
|
|
|
|
|
|
|
|
rm -rf "$installer_directory"
|
|
rm -rf "$installer_directory"
|
|
|
mkdir -p "$installer_directory"
|
|
mkdir -p "$installer_directory"
|
|
@@ -282,8 +282,8 @@ d-i preseed/early_command string anna-install network-console
|
|
|
EOF
|
|
EOF
|
|
|
|
|
|
|
|
if [ -n "$authorized_keys_url" ]; then
|
|
if [ -n "$authorized_keys_url" ]; then
|
|
|
- _backup /etc/ssh/sshd_config .backup
|
|
|
|
|
- _late_command 'sed -ri "s/^#?PasswordAuthentication .+/PasswordAuthentication no/" /etc/ssh/sshd_config'
|
|
|
|
|
|
|
+ backup /etc/ssh/sshd_config
|
|
|
|
|
+ run_later 'sed -ri "s/^#?PasswordAuthentication .+/PasswordAuthentication no/" /etc/ssh/sshd_config'
|
|
|
$save_preseed << EOF
|
|
$save_preseed << EOF
|
|
|
d-i network-console/password-disabled boolean true
|
|
d-i network-console/password-disabled boolean true
|
|
|
d-i network-console/authorized_keys_url string $authorized_keys_url
|
|
d-i network-console/authorized_keys_url string $authorized_keys_url
|
|
@@ -313,16 +313,16 @@ d-i mirror/udeb/suite string $suite
|
|
|
EOF
|
|
EOF
|
|
|
|
|
|
|
|
if [ "$skip_account_setup" != true ]; then
|
|
if [ "$skip_account_setup" != true ]; then
|
|
|
- if _command_exists mkpasswd; then
|
|
|
|
|
|
|
+ if command_exists mkpasswd; then
|
|
|
if [ -z "$password" ]; then
|
|
if [ -z "$password" ]; then
|
|
|
password="$(mkpasswd -m sha-512)"
|
|
password="$(mkpasswd -m sha-512)"
|
|
|
else
|
|
else
|
|
|
password="$(mkpasswd -m sha-512 "$password")"
|
|
password="$(mkpasswd -m sha-512 "$password")"
|
|
|
fi
|
|
fi
|
|
|
- elif _command_exists busybox && busybox mkpasswd --help >/dev/null 2>&1; then
|
|
|
|
|
- _prompt_password
|
|
|
|
|
|
|
+ elif command_exists busybox && busybox mkpasswd --help >/dev/null 2>&1; then
|
|
|
|
|
+ prompt_password
|
|
|
password="$(busybox mkpasswd -m sha512 "$password")"
|
|
password="$(busybox mkpasswd -m sha512 "$password")"
|
|
|
- elif _command_exists python3; then
|
|
|
|
|
|
|
+ elif command_exists python3; then
|
|
|
if [ -z "$password" ]; then
|
|
if [ -z "$password" ]; then
|
|
|
password="$(python3 -c 'import crypt, getpass; print(crypt.crypt(getpass.getpass(), crypt.mksalt(crypt.METHOD_SHA512)))')"
|
|
password="$(python3 -c 'import crypt, getpass; print(crypt.crypt(getpass.getpass(), crypt.mksalt(crypt.METHOD_SHA512)))')"
|
|
|
else
|
|
else
|
|
@@ -330,7 +330,7 @@ if [ "$skip_account_setup" != true ]; then
|
|
|
fi
|
|
fi
|
|
|
else
|
|
else
|
|
|
cleartext_password=true
|
|
cleartext_password=true
|
|
|
- _prompt_password
|
|
|
|
|
|
|
+ prompt_password
|
|
|
fi
|
|
fi
|
|
|
|
|
|
|
|
$save_preseed << 'EOF'
|
|
$save_preseed << 'EOF'
|
|
@@ -341,10 +341,10 @@ EOF
|
|
|
|
|
|
|
|
if [ "$username" = root ]; then
|
|
if [ "$username" = root ]; then
|
|
|
if [ -z "$authorized_keys_url" ]; then
|
|
if [ -z "$authorized_keys_url" ]; then
|
|
|
- _backup /etc/ssh/sshd_config .backup
|
|
|
|
|
- _late_command 'sed -ri "s/^#?PermitRootLogin .+/PermitRootLogin yes/" /etc/ssh/sshd_config'
|
|
|
|
|
|
|
+ backup /etc/ssh/sshd_config
|
|
|
|
|
+ run_later 'sed -ri "s/^#?PermitRootLogin .+/PermitRootLogin yes/" /etc/ssh/sshd_config'
|
|
|
else
|
|
else
|
|
|
- _late_command "mkdir -m 0700 -p ~root/.ssh && busybox wget -O - \"$authorized_keys_url\" | tee -a ~root/.ssh/authorized_keys"
|
|
|
|
|
|
|
+ run_later "mkdir -m 0700 -p ~root/.ssh && busybox wget -O - \"$authorized_keys_url\" | tee -a ~root/.ssh/authorized_keys"
|
|
|
fi
|
|
fi
|
|
|
|
|
|
|
|
$save_preseed << 'EOF'
|
|
$save_preseed << 'EOF'
|
|
@@ -361,11 +361,11 @@ EOF
|
|
|
echo "d-i passwd/root-password-crypted password $password" | $save_preseed
|
|
echo "d-i passwd/root-password-crypted password $password" | $save_preseed
|
|
|
fi
|
|
fi
|
|
|
else
|
|
else
|
|
|
- _backup /etc/ssh/sshd_config .backup
|
|
|
|
|
- _late_command 'sed -ri "s/^#?PermitRootLogin .+/PermitRootLogin no/" /etc/ssh/sshd_config'
|
|
|
|
|
|
|
+ backup /etc/ssh/sshd_config
|
|
|
|
|
+ run_later 'sed -ri "s/^#?PermitRootLogin .+/PermitRootLogin no/" /etc/ssh/sshd_config'
|
|
|
|
|
|
|
|
if [ -n "$authorized_keys_url" ]; then
|
|
if [ -n "$authorized_keys_url" ]; then
|
|
|
- _late_command "sudo -u $username mkdir -m 0700 -p ~$username/.ssh && busybox wget -O - \"$authorized_keys_url\" | sudo -u $username tee -a ~$username/.ssh/authorized_keys"
|
|
|
|
|
|
|
+ run_later "sudo -u $username mkdir -m 0700 -p ~$username/.ssh && busybox wget -O - \"$authorized_keys_url\" | sudo -u $username tee -a ~$username/.ssh/authorized_keys"
|
|
|
fi
|
|
fi
|
|
|
|
|
|
|
|
$save_preseed << EOF
|
|
$save_preseed << EOF
|
|
@@ -511,7 +511,7 @@ $save_preseed << 'EOF'
|
|
|
d-i finish-install/reboot_in_progress note
|
|
d-i finish-install/reboot_in_progress note
|
|
|
EOF
|
|
EOF
|
|
|
|
|
|
|
|
-[ "$bbr" = true ] && _late_command '{ echo "net.core.default_qdisc=fq"; echo "net.ipv4.tcp_congestion_control=bbr"; } > /etc/sysctl.d/bbr.conf'
|
|
|
|
|
|
|
+[ "$bbr" = true ] && run_later '{ echo "net.core.default_qdisc=fq"; echo "net.ipv4.tcp_congestion_control=bbr"; } > /etc/sysctl.d/bbr.conf'
|
|
|
|
|
|
|
|
[ -n "$late_command" ] && echo "d-i preseed/late_command string in-target bash -c '$late_command'" | $save_preseed
|
|
[ -n "$late_command" ] && echo "d-i preseed/late_command string in-target bash -c '$late_command'" | $save_preseed
|
|
|
|
|
|
|
@@ -521,33 +521,33 @@ save_grub_cfg='cat'
|
|
|
if [ "$dry_run" != true ]; then
|
|
if [ "$dry_run" != true ]; then
|
|
|
if [ -z "$architecture" ]; then
|
|
if [ -z "$architecture" ]; then
|
|
|
architecture=amd64
|
|
architecture=amd64
|
|
|
- _command_exists dpkg && architecture="$(dpkg --print-architecture)"
|
|
|
|
|
|
|
+ command_exists dpkg && architecture="$(dpkg --print-architecture)"
|
|
|
fi
|
|
fi
|
|
|
|
|
|
|
|
base_url="$mirror_protocol://$mirror_host$mirror_directory/dists/$suite/main/installer-$architecture/current/images/netboot/debian-installer/$architecture"
|
|
base_url="$mirror_protocol://$mirror_host$mirror_directory/dists/$suite/main/installer-$architecture/current/images/netboot/debian-installer/$architecture"
|
|
|
|
|
|
|
|
- if _command_exists wget; then
|
|
|
|
|
|
|
+ if command_exists wget; then
|
|
|
wget "$base_url/linux" "$base_url/initrd.gz"
|
|
wget "$base_url/linux" "$base_url/initrd.gz"
|
|
|
- elif _command_exists curl; then
|
|
|
|
|
|
|
+ elif command_exists curl; then
|
|
|
curl -O "$base_url/linux" -O "$base_url/initrd.gz"
|
|
curl -O "$base_url/linux" -O "$base_url/initrd.gz"
|
|
|
- elif _command_exists busybox; then
|
|
|
|
|
|
|
+ elif command_exists busybox; then
|
|
|
busybox wget "$base_url/linux" "$base_url/initrd.gz"
|
|
busybox wget "$base_url/linux" "$base_url/initrd.gz"
|
|
|
else
|
|
else
|
|
|
- _err 'wget/curl/busybox is required to download files'
|
|
|
|
|
|
|
+ err 'wget/curl/busybox is required to download files'
|
|
|
fi
|
|
fi
|
|
|
|
|
|
|
|
gunzip initrd.gz
|
|
gunzip initrd.gz
|
|
|
echo preseed.cfg | cpio -H newc -o -A -F initrd
|
|
echo preseed.cfg | cpio -H newc -o -A -F initrd
|
|
|
gzip initrd
|
|
gzip initrd
|
|
|
|
|
|
|
|
- if _command_exists update-grub; then
|
|
|
|
|
|
|
+ if command_exists update-grub; then
|
|
|
grub_cfg=/boot/grub/grub.cfg
|
|
grub_cfg=/boot/grub/grub.cfg
|
|
|
update-grub
|
|
update-grub
|
|
|
- elif _command_exists grub2-mkconfig; then
|
|
|
|
|
|
|
+ elif command_exists grub2-mkconfig; then
|
|
|
grub_cfg=/boot/grub2/grub.cfg
|
|
grub_cfg=/boot/grub2/grub.cfg
|
|
|
grub2-mkconfig -o "$grub_cfg"
|
|
grub2-mkconfig -o "$grub_cfg"
|
|
|
else
|
|
else
|
|
|
- _err 'update-grub/grub2-mkconfig command not found'
|
|
|
|
|
|
|
+ err 'update-grub/grub2-mkconfig command not found'
|
|
|
fi
|
|
fi
|
|
|
|
|
|
|
|
save_grub_cfg="tee -a $grub_cfg"
|
|
save_grub_cfg="tee -a $grub_cfg"
|