183 lines
5.1 KiB
Bash
Executable file
183 lines
5.1 KiB
Bash
Executable file
#!/bin/bash
|
|
# WARNING: this script will destroy data on the selected disk.
|
|
# This script does not work out of the box,
|
|
# it is run in the custom arch installer built via
|
|
# https://gitlab.com/kesslermaximilian/arch-pkgs
|
|
#
|
|
# For the exact requirements, see the README at the git repository
|
|
#
|
|
|
|
|
|
set -uo pipefail
|
|
trap 's=$?; echo "$0: Error on line "$LINENO": $BASH_COMMAND"; exit $s' ERR
|
|
|
|
# test internet connectivity
|
|
ping -c 1 -W 2 archlinux.org || (echo "You don't seem to be connected to the internet, aborting." && exit 1)
|
|
|
|
### Get infomation from user ###
|
|
hostname=$(dialog --stdout --inputbox "Enter hostname" 0 0) || exit 1
|
|
clear
|
|
: ${hostname:?"hostname cannot be empty"}
|
|
|
|
user=$(dialog --stdout --inputbox "Enter username" 0 0) || exit 1
|
|
clear
|
|
: ${user:?"user cannot be empty"}
|
|
|
|
disk_password=$(dialog --stdout --passwordbox "Enter disk encryption password" 0 0) || exit 1
|
|
clear
|
|
: ${disk_password:?"password cannot be empty"}
|
|
disk_password2=$(dialog --stdout --passwordbox "Enter disk encryption password again" 0 0) || exit 1
|
|
clear
|
|
[[ "$disk_password" == "$disk_password2" ]] || ( echo "Passwords did not match"; exit 1; )
|
|
|
|
user_password=$(dialog --stdout --passwordbox "Enter user (and root) password" 0 0) || exit 1
|
|
clear
|
|
: ${user_password:?"password cannot be empty"}
|
|
user_password2=$(dialog --stdout --passwordbox "Enter user (and root) password again" 0 0) || exit 1
|
|
clear
|
|
[[ "$user_password" == "$user_password2" ]] || ( echo "Passwords did not match"; exit 1; )
|
|
|
|
devicelist=$(lsblk -dplnx size -o name,size | grep -Ev "boot|rpmb|loop" | tac)
|
|
device=$(dialog --stdout --menu "Select installation disk" 0 0 0 ${devicelist}) || exit 1
|
|
clear
|
|
|
|
|
|
#### Got all user input, start with installation now
|
|
|
|
# set up all further variables
|
|
|
|
REPO_URL="https://mkessler-arch.maximilian-kessler.de"
|
|
|
|
cryptlvm="cryptlvm"
|
|
vlgrp="vlgrp"
|
|
|
|
mapped_device="/dev/mapper/${cryptlvm}"
|
|
|
|
part_boot="${device}p1"
|
|
part_luks="${device}p2"
|
|
|
|
part_swap="/dev/${vlgrp}/swap"
|
|
part_root="/dev/${vlgrp}/root"
|
|
part_home="/dev/${vlgrp}/home"
|
|
|
|
|
|
### Set up logging ###
|
|
exec 1> >(tee "stdout.log")
|
|
exec 2> >(tee "stderr.log")
|
|
|
|
timedatectl set-ntp true
|
|
|
|
### update mirrors
|
|
echo "Running reflector to update mirrors"
|
|
reflector
|
|
|
|
### Setup the disk and partitions ###
|
|
ram_size=$(free --mebi | awk '/Mem:/ {print $2}')
|
|
swap_size=$((ram_size + 1024))M # 1 Gigabyte more swap space than available ram
|
|
root_size=60G
|
|
|
|
# creates two partitions: one boot partition and another partition, filling the rest of space
|
|
echo "Creating partitions on ${device}..."
|
|
fdisk "${device}" <<EOF
|
|
g
|
|
n
|
|
|
|
|
|
+256M
|
|
t
|
|
EFI System
|
|
n
|
|
|
|
|
|
|
|
w
|
|
EOF
|
|
|
|
|
|
wipefs "${part_boot}"
|
|
wipefs "${part_luks}"
|
|
|
|
echo "Setting up luks on ${part_luks}"
|
|
echo "${disk_password}" | cryptsetup luksFormat -q "${part_luks}"
|
|
echo "${disk_password}" | cryptsetup open "${part_luks}" "${cryptlvm}"
|
|
|
|
pvcreate "${mapped_device}"
|
|
vgcreate "${vlgrp}" "${mapped_device}"
|
|
lvcreate -L "${swap_size}" "${vlgrp}" -n swap
|
|
lvcreate -L "${root_size}" "${vlgrp}" -n root
|
|
lvcreate -l '99%FREE' "${vlgrp}" -n home
|
|
|
|
mkfs.fat -F32 "${part_boot}"
|
|
mkfs.ext4 "${part_root}"
|
|
mkfs.ext4 "${part_home}"
|
|
mkswap "${part_swap}"
|
|
|
|
mount "${part_root}" /mnt
|
|
mount "${part_home}" /mnt/home --mkdir
|
|
mount "${part_boot}" /mnt/boot --mkdir
|
|
swapon "${part_swap}"
|
|
|
|
echo "Finished setting up luks, lvm and mounted all partitions"
|
|
|
|
read -p "Continue with installing packages into /mnt? [y/n]? " -n 1 -r
|
|
echo # (optional) move to a new line
|
|
if [[ ! $REPLY =~ ^[Yy]$ ]]
|
|
then
|
|
exit 1
|
|
fi
|
|
|
|
### Install and configure the basic system ###
|
|
|
|
echo "Installing packages into /mnt"
|
|
pacman -Sy
|
|
pacstrap /mnt mkessler-desktop
|
|
|
|
echo "Configuring mkessler-arch repo in installed system"
|
|
### Set up custom repo on installed system as well
|
|
cat >>/mnt/etc/pacman.conf <<EOF
|
|
|
|
[mkessler-arch]
|
|
Server = $REPO_URL
|
|
EOF
|
|
|
|
echo "Generating fstab file"
|
|
genfstab -U /mnt >> /mnt/etc/fstab
|
|
|
|
echo "Setting hostname"
|
|
echo "${hostname}" > /mnt/etc/hostname
|
|
|
|
|
|
# I have no idea why this is mounted at this point, but for arch-chroot to work
|
|
# we have to unmount this
|
|
# For now, this is just black magic making this work
|
|
umount /mnt/dev
|
|
|
|
echo "Adding user ${user} in new system"
|
|
arch-chroot /mnt useradd --create-home --user-group --shell /usr/bin/zsh --groups wheel,uucp,video,audio,storage,games,input,informant "$user"
|
|
|
|
arch-chroot /mnt chsh -s /usr/bin/zsh
|
|
|
|
echo "Activating wheel group"
|
|
sed -i 's/^\#\s%wheel\sALL=(ALL:ALL)\sNOPASSWD:\sALL$/%wheel ALL=(ALL:ALL) NOPASSWD: ALL/' /mnt/etc/sudoers
|
|
|
|
echo "${user}:${user_password}" | chpasswd --root /mnt
|
|
echo "root:${user_password}" | chpasswd --root /mnt
|
|
|
|
echo "Installing grub bootloader"
|
|
# install grub (but not main configuration file)
|
|
arch-chroot /mnt grub-install --target=x86_64-efi --efi-directory=/boot --bootloader-id=GRUB
|
|
|
|
echo 'Configuring HOOKS in /etc/mkinitcpio.conf and regenerating initramfs'
|
|
sed -i 's/^HOOKS=(base .* fsck)$/HOOKS=(base udev autodetect keyboard keymap consolefont modconf block encrypt lvm2 filesystems resume fsck)/' /mnt/etc/mkinitcpio.conf
|
|
arch-chroot /mnt mkinitcpio -P
|
|
|
|
|
|
cat <<EOF
|
|
---------------------
|
|
Installed basic packages and setup in /mnt
|
|
Manual configuration is still needed for the following
|
|
- configure grub parameters for cryptvolume and resume hook
|
|
- generate main grub.cfg with grub-mkconfig -o /boot/grub/grub.cfg
|
|
---------------------
|
|
|
|
|