162 lines
4.3 KiB
Bash
162 lines
4.3 KiB
Bash
#!/bin/bash
|
|
|
|
#########################
|
|
#### USER EDITABLE ######
|
|
#########################
|
|
|
|
# You should hardcode the base URL for your raw repository files. Set the value
|
|
# of REPO_RAW_URL to your fork, replacing the `authorized_keys` file with your own.
|
|
# i.e., "https://raw.githubusercontent.com/<GH_USER>/<GH_REPO>/<GH_BRANCH>"
|
|
REPO_RAW_URL="https://git.krislamo.org/kris/bootstrap/raw/branch/main"
|
|
AUTH_KEY_FILE="/authorized_keys"
|
|
|
|
# Optional debianzfs install script, accessed with -z
|
|
DEBIANZFS="https://git.krislamo.org/kris/debianzfs/raw/branch/main/debianzfs.sh"
|
|
DEBIANZFS_BIN="/usr/local/bin/debianzfs"
|
|
|
|
##############################
|
|
######## STOP EDITING ########
|
|
##############################
|
|
|
|
# Root required
|
|
if [ $EUID -ne 0 ]; then
|
|
echo "You must run this script as root"
|
|
exit 1
|
|
fi
|
|
|
|
# Clean environment
|
|
unset BOOT_CYCLE
|
|
unset CDROM_REMOVE
|
|
unset ENABLE_SSH
|
|
unset GATEWAY_IP
|
|
unset NEW_HOSTNAME
|
|
unset IP
|
|
unset QRCODE_SSH
|
|
unset LIVECD
|
|
unset REPO
|
|
unset SSH_INSTALL
|
|
unset UPDATE_SYSTEM
|
|
unset ZFSINSTALL
|
|
unset DATE
|
|
unset CUR_HOSTNAME
|
|
|
|
# Options
|
|
while getopts ':bceg:h:i:lqr:suz' OPTION; do
|
|
case "$OPTION" in
|
|
b) BOOT_CYCLE="true";;
|
|
c) CDROM_REMOVE="true";;
|
|
e) ENABLE_SSH="true";;
|
|
g) GATEWAY_IP="$OPTARG";;
|
|
h) NEW_HOSTNAME="$OPTARG";;
|
|
i) IP="$OPTARG";;
|
|
l) LIVECD="true";;
|
|
q) QRCODE_SSH="true";;
|
|
r) REPO="$OPTARG";;
|
|
s) SSH_INSTALL="true";;
|
|
u) UPDATE_SYSTEM="true";;
|
|
z) ZFSINSTALL="true";;
|
|
?)
|
|
echo "ERROR: Option not recognized"
|
|
exit 1;;
|
|
esac
|
|
done
|
|
|
|
# Use Live session settings
|
|
if [ "$LIVECD" == "true" ]; then
|
|
CDROM_REMOVE="true"
|
|
ENABLE_SSH="true"
|
|
QRCODE_SSH="true"
|
|
SSH_INSTALL="true"
|
|
UPDATE_SYSTEM="true"
|
|
fi
|
|
|
|
# Allow override but use default repo if not set
|
|
[ -z "$REPO" ] && REPO="$REPO_RAW_URL"
|
|
|
|
# Get current date and hostname
|
|
DATE=$(date '+%Y%m%d')
|
|
CUR_HOSTNAME=$(hostname)
|
|
|
|
# Remove CD sources from sources list
|
|
if [ "$CDROM_REMOVE" == "true" ]; then
|
|
echo "NOTICE: Backing up /etc/apt/sources.list => /etc/apt/sources.list.$DATE"
|
|
sed -i."$DATE" '/deb cdrom/d' /etc/apt/sources.list
|
|
fi
|
|
|
|
# Upgrade system software
|
|
if [ "$UPDATE_SYSTEM" -eq 1 ]; then
|
|
echo "NOTICE: Upgrading system"
|
|
apt-get update
|
|
apt-get upgrade -y
|
|
fi
|
|
|
|
# If IP is set, backup interfaces and configure static IP
|
|
if [ -n "$IP" ]; then
|
|
if [ -z "$GATEWAY_IP" ]; then
|
|
echo "ERROR: IP set without a GATEWAY address. See option -g"
|
|
exit 1
|
|
fi
|
|
|
|
echo "NOTICE: Backing up network interfaces file and installing a new static one"
|
|
sed -i."$DATE" "s/dhcp/static/g" /etc/network/interfaces
|
|
if ! grep -q "address" /etc/network/interfaces; then
|
|
echo " address $IP" >> /etc/network/interfaces
|
|
echo " gateway $GATEWAY_IP" >> /etc/network/interfaces
|
|
else
|
|
echo "ERROR: Address already set"
|
|
exit 1
|
|
fi
|
|
fi
|
|
|
|
# If NEW_HOSTNAME is set, configure new hostname and backup /etc/hosts
|
|
if [ -n "$NEW_HOSTNAME" ]; then
|
|
hostnamectl set-hostname "$NEW_HOSTNAME"
|
|
echo "NOTICE: Backing up /etc/hosts and setting new hostname to '$NEW_HOSTNAME'"
|
|
sed -i."$DATE" "s/$CUR_HOSTNAME/$NEW_HOSTNAME/g" /etc/hosts
|
|
fi
|
|
|
|
# Install personal SSH keys under root and install the OpenSSH server
|
|
if [ "$SSH_INSTALL" == "true" ]; then
|
|
# Does authorized_keys file already exist?
|
|
if [ -f /root/.ssh/authorized_keys ]; then
|
|
echo "ERROR: /root/.ssh/authorized_keys file already exists"
|
|
exit 1
|
|
fi
|
|
|
|
echo "NOTICE: Installing root's authorized_keys and the OpenSSH server"
|
|
mkdir -p /root/.ssh/
|
|
chmod 700 /root/.ssh/
|
|
wget "${REPO}${AUTH_KEY_FILE}" -O /root/.ssh/authorized_keys
|
|
chmod 644 /root/.ssh/authorized_keys
|
|
apt-get install openssh-server -y
|
|
|
|
if [ "$ENABLE_SSH" == "true" ]; then
|
|
echo "NOTICE: Enabling the OpenSSH server"
|
|
systemctl start ssh
|
|
fi
|
|
fi
|
|
|
|
# Download DebianZFS script
|
|
if [ "$ZFSINSTALL" == "true" ]; then
|
|
echo "NOTICE: Installing DebianZFS installation script"
|
|
wget "$DEBIANZFS" -O "$DEBIANZFS_BIN"
|
|
chmod u+x "$DEBIANZFS_BIN"
|
|
fi
|
|
|
|
# Restart
|
|
if [ "$BOOT_CYCLE" == "true" ]; then
|
|
echo "NOTICE: Restarting the machine in 10 seconds..."
|
|
sleep 9
|
|
echo "NOTICE: Restarting!"
|
|
sleep 1
|
|
systemctl reboot
|
|
elif [ "$SSH_INSTALL" == "true" ] && [ "$ENABLE_SSH" == "true" ]; then
|
|
if [ "$QRCODE_SSH" == "true" ]; then
|
|
apt-get update
|
|
apt-get install -y qrencode
|
|
read -r -p "Enter SMS number (for QR code): " TELNUM
|
|
qrencode -t ASCII "smsto:$TELNUM:$(ssh-keygen -l -f /etc/ssh/ssh_host_ecdsa_key.pub)"
|
|
fi
|
|
ssh-keygen -l -f /etc/ssh/ssh_host_ecdsa_key.pub
|
|
fi
|