feat: add superior luks-arch-installer
This commit is contained in:
parent
e4990c5035
commit
1704b08bb9
375
Misc/Arch-LuksCrypt-Install.bash
Normal file
375
Misc/Arch-LuksCrypt-Install.bash
Normal file
@ -0,0 +1,375 @@
|
|||||||
|
#!/bin/bash
|
||||||
|
|
||||||
|
set -eo pipefail
|
||||||
|
|
||||||
|
confirmation() {
|
||||||
|
local message
|
||||||
|
message="${1}"
|
||||||
|
|
||||||
|
local choice
|
||||||
|
|
||||||
|
while :; do
|
||||||
|
printf "%s (Y/n) " "${message}"
|
||||||
|
read -r choice
|
||||||
|
case "${choice}" in
|
||||||
|
y | Y)
|
||||||
|
return 0
|
||||||
|
;;
|
||||||
|
n | N)
|
||||||
|
return 1
|
||||||
|
;;
|
||||||
|
*) printf "\nInput must be either y, Y, n, or N" ;;
|
||||||
|
esac
|
||||||
|
done
|
||||||
|
}
|
||||||
|
|
||||||
|
print-break() {
|
||||||
|
local green=
|
||||||
|
green="$(tput setaf 2)"
|
||||||
|
local reset
|
||||||
|
reset="$(tput sgr0)"
|
||||||
|
printf "${green}%.s─${reset}" $(seq 1 "$(tput cols)")
|
||||||
|
}
|
||||||
|
|
||||||
|
print-title() {
|
||||||
|
local title
|
||||||
|
title="${*}"
|
||||||
|
local bold
|
||||||
|
bold="$(tput bold)"
|
||||||
|
local underline
|
||||||
|
underline="$(tput smul)"
|
||||||
|
|
||||||
|
local cyan
|
||||||
|
cyan="$(tput setaf 6)"
|
||||||
|
local reset
|
||||||
|
reset="$(tput sgr0)"
|
||||||
|
|
||||||
|
printf "%s%s%s%s%s\n" "${bold}" "${underline}" "${cyan}" "${title}" "${reset}" >&2
|
||||||
|
}
|
||||||
|
|
||||||
|
echo-rgb() {
|
||||||
|
# Echo a colored string to the terminal based on rgb values
|
||||||
|
#
|
||||||
|
# Positional Arguments:
|
||||||
|
#
|
||||||
|
# message <type: string> <position: 1> <required: true>
|
||||||
|
# - The message to be printed to stdout
|
||||||
|
# red <type: int> <position: 2> <required: true>
|
||||||
|
# - The red value from 0 to 255
|
||||||
|
# green <type: int> <position: 3> <required: true>
|
||||||
|
# - The green value from 0 to 255
|
||||||
|
# blue <type: int> <position: 4> <required: true>
|
||||||
|
# - The blue value from 0 to 255
|
||||||
|
#
|
||||||
|
# Usage:
|
||||||
|
# echo-rgb "Yep" 10 8 30
|
||||||
|
#
|
||||||
|
# POSIX Compliant:
|
||||||
|
# N/A
|
||||||
|
#
|
||||||
|
|
||||||
|
local red
|
||||||
|
local green
|
||||||
|
local blue
|
||||||
|
local input
|
||||||
|
|
||||||
|
input="${1}"
|
||||||
|
red="${2}"
|
||||||
|
green="${3}"
|
||||||
|
blue="${4}"
|
||||||
|
|
||||||
|
printf "\e[0;38;2;%s;%s;%sm%s\e[m\n" "${red}" "${green}" "${blue}" "${input}"
|
||||||
|
}
|
||||||
|
|
||||||
|
important() {
|
||||||
|
echo-rgb "${1}" 135 195 255
|
||||||
|
}
|
||||||
|
|
||||||
|
log() {
|
||||||
|
# Print a message and send it to stdout or stderr depending upon log level, also configurable with debug etc.
|
||||||
|
#
|
||||||
|
# Arguments:
|
||||||
|
# level <type: string> <position: 1> <required: true>
|
||||||
|
# - The log level, defined within a case check in this function
|
||||||
|
# message <type: string> <position: 2> <required: true>
|
||||||
|
# - The info message
|
||||||
|
# line_number <type: int> <position: 3> <required: false>
|
||||||
|
# - The line number of the calling function (${LINNO})
|
||||||
|
#
|
||||||
|
# Usage:
|
||||||
|
# log "info" "Could not find that directory"
|
||||||
|
#
|
||||||
|
# POSIX Compliant:
|
||||||
|
# Yes
|
||||||
|
#
|
||||||
|
|
||||||
|
# Set debug status depending if a global debug variable has been set to either 1 or 0
|
||||||
|
local debug
|
||||||
|
if [ ${DEBUG} ]; then
|
||||||
|
debug=${DEBUG}
|
||||||
|
else
|
||||||
|
debug=0
|
||||||
|
fi
|
||||||
|
|
||||||
|
local FORMAT
|
||||||
|
FORMAT="[$(echo-rgb "$(date +%Y-%m-%dT%H:%M:%S)" 180 140 255)]"
|
||||||
|
|
||||||
|
# Convert the level to uppercase
|
||||||
|
local level
|
||||||
|
level=$(echo "${1}" | tr '[:lower:]' '[:upper:]')
|
||||||
|
|
||||||
|
local message
|
||||||
|
message="${2}"
|
||||||
|
|
||||||
|
case "${level}" in
|
||||||
|
INFO)
|
||||||
|
# Output all info log levels to stdout
|
||||||
|
printf "${FORMAT}[$(echo-rgb "INFO" 0 140 255)] %s\n" "${message}" >&2
|
||||||
|
return 0
|
||||||
|
;;
|
||||||
|
WARN | WARNING)
|
||||||
|
# Output all warning log levels to stdout
|
||||||
|
printf "${FORMAT}[$(echo-rgb "WARNING" 255 255 0)] %s\n" "${message}" >&2
|
||||||
|
return 0
|
||||||
|
;;
|
||||||
|
DEBUG)
|
||||||
|
# Output all debug log levels to stdout
|
||||||
|
if [ "${DEBUG}" ]; then
|
||||||
|
printf "${FORMAT}[$(echo-rgb "DEBUG" 0 160 110)] %s\n" "${message}" >&2
|
||||||
|
fi
|
||||||
|
return 0
|
||||||
|
;;
|
||||||
|
ERROR)
|
||||||
|
# Output all error log levels to stderr
|
||||||
|
printf "${FORMAT}[$(echo-rgb "ERROR" 255 0 0)] %s\n" "${message}" >&2
|
||||||
|
return 0
|
||||||
|
;;
|
||||||
|
# Further log levels can be added by extending this switch statement with more comparisons
|
||||||
|
|
||||||
|
*) # Default case, no matches
|
||||||
|
# Returns non-zero code as an improper log option was passed, this helps with using `set -e`
|
||||||
|
printf "${FORMAT}[ERROR] %s\n" "Invalid log level passed, received level \"${level}\" with message \"${message}\"" >&2
|
||||||
|
return 1
|
||||||
|
;;
|
||||||
|
esac
|
||||||
|
}
|
||||||
|
|
||||||
|
get-available-disks() {
|
||||||
|
local available_disks=()
|
||||||
|
|
||||||
|
local disk_line
|
||||||
|
local disk
|
||||||
|
while read -r; do
|
||||||
|
# tr is used to change multiple whitespaces into a single space for processing by cut
|
||||||
|
disk_line="$(printf "%s" "${REPLY}" | tr -s " ")"
|
||||||
|
disk=$(printf "%s" "${disk_line}" | cut -d " " -f2)
|
||||||
|
if [[ "${disk}" = "disk" ]]; then
|
||||||
|
available_disks+=("$(printf "/dev/%s" "${disk_line}" | cut -d " " -f1)")
|
||||||
|
fi
|
||||||
|
done <<<"$(lsblk --output NAME,TYPE)"
|
||||||
|
|
||||||
|
printf "%s" "${available_disks[@]}"
|
||||||
|
}
|
||||||
|
|
||||||
|
get-disk-partitions() {
|
||||||
|
local disk="${1}"
|
||||||
|
|
||||||
|
if [[ -z "${disk}" ]]; then
|
||||||
|
log "error" "No disk passed!"
|
||||||
|
return 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
if ! blkid | grep "${disk}" >/dev/null; then
|
||||||
|
return 1
|
||||||
|
fi
|
||||||
|
local partitions
|
||||||
|
IFS=$'\n' partitions=("$(blkid -o device | grep "${disk}")")
|
||||||
|
printf "%s" "${partitions[@]}"
|
||||||
|
}
|
||||||
|
|
||||||
|
check-connectivity() {
|
||||||
|
if ! host "google.com" >/dev/null; then
|
||||||
|
log "error" "Unable to reach google, network is down. This script requires network connectivity with active DNS resolution"
|
||||||
|
return 1
|
||||||
|
fi
|
||||||
|
}
|
||||||
|
|
||||||
|
select-item() {
|
||||||
|
local item_name="${1}"
|
||||||
|
shift
|
||||||
|
local items
|
||||||
|
# shellcheck disable=2206
|
||||||
|
items=($@)
|
||||||
|
local item_selected
|
||||||
|
while :; do
|
||||||
|
local count=1
|
||||||
|
for item in "${items[@]}"; do
|
||||||
|
printf "%s %s\n" "${count}.)" "$(important "${item}")" >&2
|
||||||
|
count=$((count + 1))
|
||||||
|
done
|
||||||
|
count=1
|
||||||
|
|
||||||
|
read -rp "Select a ${item_name} number: " item_selected
|
||||||
|
case "${item_selected}" in
|
||||||
|
'' | *[!0-9]*)
|
||||||
|
log "error" "A number was not passed"
|
||||||
|
continue
|
||||||
|
;;
|
||||||
|
esac
|
||||||
|
|
||||||
|
for item in "${items[@]}"; do
|
||||||
|
# printf -- "--> %s | %s\n" "${item_selected}" "${count}"
|
||||||
|
if [[ ${count} -eq ${item_selected} ]]; then
|
||||||
|
printf "%s" "${item}"
|
||||||
|
return 0
|
||||||
|
fi
|
||||||
|
count="$((count + 1))"
|
||||||
|
done
|
||||||
|
log "error" "Invalid selection made, received: \"${item_selected}\""
|
||||||
|
done
|
||||||
|
}
|
||||||
|
|
||||||
|
partition-disk() {
|
||||||
|
local disk="${1}"
|
||||||
|
(
|
||||||
|
echo n
|
||||||
|
echo "${BOOT_PARTITION_NUMBER}"
|
||||||
|
echo
|
||||||
|
echo +512M
|
||||||
|
echo ef00
|
||||||
|
echo n
|
||||||
|
echo "${ROOT_PARTITION_NUMBER}"
|
||||||
|
echo
|
||||||
|
echo
|
||||||
|
echo 8300
|
||||||
|
echo w
|
||||||
|
echo Y
|
||||||
|
) | gdisk "${disk}" >/dev/null
|
||||||
|
mkfs.vfat -F32 -n EFI "${disk}"*"${BOOT_PARTITION_NUMBER}"
|
||||||
|
}
|
||||||
|
|
||||||
|
main() {
|
||||||
|
local ARCH_TIMEZONE="CST"
|
||||||
|
local LOCALE="en_US.UTF-8 UTF-8"
|
||||||
|
local LANG="en_US.UTF-8"
|
||||||
|
local DISK_PARTITION_LETTER=""
|
||||||
|
local HOSTNAME="Arch-Linux"
|
||||||
|
local MICROCODE="amd"
|
||||||
|
|
||||||
|
clear
|
||||||
|
if ! check-connectivity; then
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
local selected_disk
|
||||||
|
local i_selected_disk
|
||||||
|
while :; do
|
||||||
|
print-title "Select the installation disk"
|
||||||
|
selected_disk="$(select-item "disk" "$(get-available-disks)")"
|
||||||
|
i_selected_disk="$(important "${selected_disk}")"
|
||||||
|
if confirmation "Is ${i_selected_disk} the correct disk to install to?"; then
|
||||||
|
break
|
||||||
|
fi
|
||||||
|
done
|
||||||
|
printf "Disk set as %s\n" "${i_selected_disk}" >&2
|
||||||
|
print-break
|
||||||
|
|
||||||
|
print-title "Partition Creation"
|
||||||
|
export BOOT_PARTITION_NUMBER=120
|
||||||
|
export ROOT_PARTITION_NUMBER=121
|
||||||
|
if ! confirmation "Begin installation of Arch Linux to ${i_selected_disk}?"; then
|
||||||
|
printf "Install request denied, exiting..." >&2
|
||||||
|
exit 0
|
||||||
|
fi
|
||||||
|
printf "Writing new partitions to %s\n" "${i_selected_disk}" >&2
|
||||||
|
partition-disk "${selected_disk}"
|
||||||
|
printf "Successfully wrote partitions to %s\n" "${i_selected_disk}" >&2
|
||||||
|
local boot_partion="${selected_disk}${DISK_PARTITION_LETTER}${BOOT_PARTITION_NUMBER}"
|
||||||
|
local root_partition="${selected_disk}${DISK_PARTITION_LETTER}${ROOT_PARTITION_NUMBER}"
|
||||||
|
print-break
|
||||||
|
|
||||||
|
print-title "Partition Encryption"
|
||||||
|
printf "Encrypting %s\n" "$(important "${root_partition}")" >&2
|
||||||
|
cryptsetup -y -v luksFormat "${root_partition}" || exit
|
||||||
|
printf "Opening encrypted device %s\n" \
|
||||||
|
"${i_selected_disk}" >&2
|
||||||
|
cryptsetup open "${root_partition}" cryptroot || exit
|
||||||
|
mkfs.fat -F 32 "${boot_partion}"
|
||||||
|
mkfs.ext4 "/dev/mapper/cryptroot"
|
||||||
|
print-break
|
||||||
|
|
||||||
|
print-title "Configure Swap"
|
||||||
|
local mem_amount_kb
|
||||||
|
mem_amount_kb="$(grep MemTotal /proc/meminfo | tr -s " " | cut -d " " -f2)"
|
||||||
|
mem_amount_mb=$((mem_amount_kb / 1024))
|
||||||
|
# Space to swap is taken from fedora guidelines:
|
||||||
|
# https://docs.fedoraproject.org/en-US/Fedora/22/html/Installation_Guide/sect-installation-gui-manual-partitioning-recommended.html
|
||||||
|
if ((mem_amount_mb < 2048)); then
|
||||||
|
mem_amount_kb=$((mem_amount_kb * 3 / 1024))
|
||||||
|
elif ((mem_amount_mb < 8192)); then
|
||||||
|
mem_amount_kb=$((mem_amount_kb * 2 / 1024))
|
||||||
|
elif ((mem_amount_mb < 65536)); then
|
||||||
|
mem_amount_kb=$((mem_amount_kb * 3 / 2 / 1024))
|
||||||
|
fi
|
||||||
|
printf "Creating swap file with memory amount: %s mebibytes\n" "$(important "${mem_amount_kb}")"
|
||||||
|
dd if=/dev/zero of=/mnt/swapfile bs=1M count="${mem_amount_kb}" status=progress
|
||||||
|
chmod 600 /mnt/swapfile
|
||||||
|
mkswap /mnt/swapfile
|
||||||
|
swapon /mnt/swapfile
|
||||||
|
printf "Finished creating swapfile\n" >&2
|
||||||
|
|
||||||
|
print-title "Install Arch Into Encrypted Volume"
|
||||||
|
printf "Mounting Needed Directores\n" >&2
|
||||||
|
mount /dev/mapper/cryptroot /mnt
|
||||||
|
mkdir /mnt/boot
|
||||||
|
mount "${boot_partion}" /mnt/boot
|
||||||
|
printf "Doing Pacstrap\n" >&2
|
||||||
|
pacstrap /mnt linux linux-firmware base base-devel grub efibootmgr vim git "${MICROCODE}"-ucode networkmanager
|
||||||
|
genfstab -U /mnt >>/mnt/etc/fstab
|
||||||
|
print-break
|
||||||
|
|
||||||
|
print-title "Configure System"
|
||||||
|
printf "Entering Chroot\n" >&2
|
||||||
|
arch-chroot /mnt <<-__END_CHROOT_CMDS__
|
||||||
|
printf "Setting default password as %s\n" "$(important "toor")"
|
||||||
|
printf "toor\ntoor\n" | passwd
|
||||||
|
|
||||||
|
printf "Linking timezone as %s\n" "$(important "${ARCH_TIMEZONE}")" >&2
|
||||||
|
ln -sf "/usr/share/zoneinfo/${ARCH_TIMEZONE}" "/etc/localtime"
|
||||||
|
|
||||||
|
printf "Setting Hardware Clock\n" >&2
|
||||||
|
hwclock --systohc
|
||||||
|
|
||||||
|
printf "Setting LOCALE to %s\n" "$(important "${LOCALE}")" >&2
|
||||||
|
printf "%s\n" "${LOCALE}" >/etc/locale.gen
|
||||||
|
|
||||||
|
printf "Generting Locale\n" >&2
|
||||||
|
locale-gen
|
||||||
|
|
||||||
|
printf "Setting LANG to %s\n" "$(important "${LANG}")" >&2
|
||||||
|
printf "%s\n" "${LANG}" >>/etc/locale.conf
|
||||||
|
|
||||||
|
printf "Setting HOSTNAME to %s\n" "$(important "${HOSTNAME}")"
|
||||||
|
printf "%s\n" "${HOSTNAME}" >>/etc/hostname
|
||||||
|
|
||||||
|
printf "Set mkinitcipio hooks\n" >&2
|
||||||
|
sed -i 's/HOOKS=.*/HOOKS=(base udev autodetect keyboard modconf block encrypt filesystems fsck)/' /etc/mkinitcpio.conf
|
||||||
|
mkinitcpio -P
|
||||||
|
|
||||||
|
printf "Configure Grub\n" >&2
|
||||||
|
yes | pacman -S grub efibootmgr intel-ucode amd-ucode
|
||||||
|
sed -i
|
||||||
|
"s/GRUB_CMDLINE_LINUX=.*/GRUB_CMDLINE_LINUX=\"cryptdevice=UUID=$(blkid -s UUID -o value "${root_partition}"):cryptroot\"/" /etc/default/grub
|
||||||
|
grub-install --target=x86_64-efi --efi-directory=/boot --bootloader-id=GRUB
|
||||||
|
grub-mkconfig -o /boot/grub/grub.cfg
|
||||||
|
|
||||||
|
printf "Setting up networkmanager\n" >&2
|
||||||
|
yes | pacman -S networkmanager
|
||||||
|
systemctl enable NetworkManager
|
||||||
|
__END_CHROOT_CMDS__
|
||||||
|
print-break
|
||||||
|
printf "%s\n\tUsername: root\n\tPassword: toor" "$(important "Finished with installation, login is:")"
|
||||||
|
|
||||||
|
}
|
||||||
|
|
||||||
|
main
|
||||||
Loading…
Reference in New Issue
Block a user