wip/shell
This commit is contained in:
parent
672b385447
commit
f52abc28b3
GPG key ID:
9C7613450C80C24F
50 changed files with 0 additions and 0 deletions
113
shell/rescue/common.sh
Normal file
113
shell/rescue/common.sh
Normal file
|
|
@ -0,0 +1,113 @@
|
|||
rescue_configure() {
|
||||
local hostname="${1}"
|
||||
# apt / conf
|
||||
printf "\
|
||||
Acquire::AllowInsecureRepositories False;
|
||||
Acquire::AllowWeakRepositories False;
|
||||
Acquire::AllowDowngradeToInsecureRepositories False;
|
||||
Acquire::Check-Valid-Until True;
|
||||
APT::Install-Recommends False;
|
||||
APT::Install-Suggests False;
|
||||
APT::Get::Show-Versions True;
|
||||
Dir::Etc::SourceParts \"\";
|
||||
Dpkg::Progress True;
|
||||
" >"/etc/apt/apt.conf.d/apt.conf"
|
||||
# apt / sources
|
||||
printf "%s" "\
|
||||
deb https://deb.debian.org/debian \
|
||||
${DEBIAN_CODENAME} main non-free-firmware contrib non-free
|
||||
deb https://deb.debian.org/debian \
|
||||
${DEBIAN_CODENAME}-backports main non-free-firmware contrib non-free
|
||||
deb https://deb.debian.org/debian \
|
||||
${DEBIAN_CODENAME}-updates main non-free-firmware contrib non-free
|
||||
deb https://deb.debian.org/debian-security \
|
||||
${DEBIAN_CODENAME}-security main non-free-firmware contrib non-free
|
||||
" >"/etc/apt/sources.list"
|
||||
# bash / rc
|
||||
main_link_bashrc
|
||||
mv .bashrc .bashrc.old
|
||||
# host name
|
||||
hostname "${hostname}"
|
||||
# locales
|
||||
printf "\
|
||||
en_US.UTF-8 UTF-8
|
||||
fr_FR.UTF-8 UTF-8
|
||||
" >"/etc/locale.gen"
|
||||
# generate locales
|
||||
locale-gen
|
||||
# update catalog
|
||||
apt_update
|
||||
# disable frontend
|
||||
debian_disable_frontend
|
||||
# install backports
|
||||
apt_install_backports "tmux"
|
||||
# install packages
|
||||
apt_install_release "apt-file" "mosh" "screen" "byobu"
|
||||
# update catalog
|
||||
apt_update
|
||||
}
|
||||
|
||||
rescue_install() {
|
||||
# update catalog
|
||||
apt_update
|
||||
# disable frontend
|
||||
debian_disable_frontend
|
||||
# upgrade packages
|
||||
apt_upgrade
|
||||
# install packages
|
||||
apt_install_release \
|
||||
"man-db" \
|
||||
"dmidecode" "efibootmgr" "lshw" "pciutils" "usbutils" \
|
||||
"parted" "mdadm" "cryptsetup-bin" "lvm2" \
|
||||
"btrfs-progs" "dosfstools" "duperemove" "squashfs-tools" \
|
||||
"git" "micro" "nano" "python3" "rsync" "vim" \
|
||||
"exa" "lf" "ncdu" "nnn" "ranger" "tree" \
|
||||
"file" "htop" "iotop" "ipcalc" "libdigest-sha3-perl" "lsof"
|
||||
# install backports
|
||||
apt_install_backports \
|
||||
"grub-pc-bin" \
|
||||
\
|
||||
"grub-efi-amd64-bin"
|
||||
}
|
||||
|
||||
rescue_upload() {
|
||||
local host="${1}"
|
||||
local hostname="${2}"
|
||||
if [ -n "${hostname}" ]; then
|
||||
local user="root"
|
||||
#
|
||||
local user_host="${user}@${host}"
|
||||
# remove fingerprints
|
||||
ssh-keygen -R "${host}"
|
||||
# copy ssh id
|
||||
ssh-copy-id \
|
||||
-o "StrictHostKeyChecking=accept-new" \
|
||||
"${user_host}"
|
||||
# upload root
|
||||
rsync --delete --recursive \
|
||||
"$(main_env_root)" "${user_host}:/etc"
|
||||
# call setup
|
||||
# TODO variable
|
||||
ssh "${user_host}" -- "\
|
||||
. \"/etc/bash/main.sh\" ; rescue_configure \"${hostname}\""
|
||||
# create session
|
||||
ssh "${user_host}" -- byobu new-session -d
|
||||
# send keys
|
||||
ssh "${user_host}" -- byobu send-keys "rescue_install" "C-m"
|
||||
# attach session
|
||||
mosh "${user_host}" -- byobu attach-session
|
||||
else
|
||||
echo "host & hostname"
|
||||
return 1
|
||||
fi
|
||||
}
|
||||
|
||||
rescue_wipe_1_zero() {
|
||||
fs_wipe "/dev/mapper/crypt" "512M"
|
||||
}
|
||||
|
||||
rescue_wipe_3_close() {
|
||||
umount "/media/boot"
|
||||
umount "/media/crypt" &&
|
||||
cryptsetup luksClose "crypt"
|
||||
}
|
||||
127
shell/rescue/hetzner.sh
Normal file
127
shell/rescue/hetzner.sh
Normal file
|
|
@ -0,0 +1,127 @@
|
|||
rescue_wipe_0_init_hetzner_8_8() {
|
||||
local device
|
||||
set \
|
||||
"/dev/sda" \
|
||||
"/dev/sdb"
|
||||
local members
|
||||
local number
|
||||
local passphrase
|
||||
# read passphrase
|
||||
passphrase="$(read_passphrase)"
|
||||
#
|
||||
lsblk
|
||||
echo -n "WIPE" "${@}" "/?\\ OR CANCEL /!\\"
|
||||
read -r
|
||||
#
|
||||
number=0
|
||||
for device in "${@}"; do
|
||||
number=$((number + 1))
|
||||
echo
|
||||
echo "#${number}: ${device}"
|
||||
#
|
||||
parted --script "${device}" \
|
||||
mktable gpt \
|
||||
unit "mib" \
|
||||
mkpart "crypt-${number}" 33282 7630885 \
|
||||
mkpart "boot-${number}" 514 33282 \
|
||||
mkpart "esp-${number}" 2 514 \
|
||||
set 3 esp on \
|
||||
mkpart "bios-${number}" 1 2 \
|
||||
set 4 bios_grub on
|
||||
done
|
||||
#
|
||||
number=0
|
||||
for device in "${@}"; do
|
||||
number=$((number + 1))
|
||||
echo
|
||||
echo "#${number}: ${device}4"
|
||||
# wipe bios
|
||||
fs_wipe "${device}4"
|
||||
done
|
||||
#
|
||||
number=0
|
||||
for device in "${@}"; do
|
||||
number=$((number + 1))
|
||||
echo
|
||||
echo "#${number}: ${device}3"
|
||||
# format esp
|
||||
fs_wipe "${device}3" "1M"
|
||||
fs_make_fat "${device}3" "esp-${number}" "0000000${number}"
|
||||
# mount esp
|
||||
mkdir --parents "/media/esp/${number}"
|
||||
mount "${device}3" "/media/esp/${number}"
|
||||
done
|
||||
#
|
||||
number=0
|
||||
for device in "${@}"; do
|
||||
number=$((number + 1))
|
||||
echo
|
||||
echo "#${number}: ${device}2"
|
||||
# wipe boot
|
||||
fs_wipe "${device}2" "1G" 1
|
||||
done
|
||||
#
|
||||
members=()
|
||||
for device in "${@}"; do
|
||||
members+=("${device}2")
|
||||
done
|
||||
fs_raid_create \
|
||||
"boot" "00000000:00000000:00000000:00000002" "${members[@]}"
|
||||
#
|
||||
fs_make_btrfs "/dev/md/boot" "boot" \
|
||||
"00000000-0000-0000-0000-00000000000b"
|
||||
# mount boot
|
||||
mkdir --parents "/media/boot"
|
||||
mount \
|
||||
--options "autodefrag,compress-force=zstd" \
|
||||
"/dev/md/boot" "/media/boot"
|
||||
#
|
||||
number=0
|
||||
for device in "${@}"; do
|
||||
number=$((number + 1))
|
||||
echo
|
||||
echo "#${number}: ${device}1"
|
||||
# wipe crypt head
|
||||
fs_wipe "${device}1" "1G" 1
|
||||
done
|
||||
#
|
||||
members=()
|
||||
for device in "${@}"; do
|
||||
members+=("${device}1")
|
||||
done
|
||||
fs_raid_create \
|
||||
"crypt" "00000000:00000000:00000000:00000001" "${members[@]}"
|
||||
# encrypt
|
||||
luks_format "${passphrase}" "/dev/md/crypt"
|
||||
# open
|
||||
echo "${passphrase}" |
|
||||
cryptsetup luksOpen "/dev/md/crypt" "crypt"
|
||||
# passphrase
|
||||
unset passphrase
|
||||
}
|
||||
|
||||
rescue_wipe_2_make_hetzner_8_8() {
|
||||
local passphrase
|
||||
# close
|
||||
cryptsetup luksClose "crypt"
|
||||
# read passphrase
|
||||
passphrase="$(read_passphrase)"
|
||||
# encrypt
|
||||
luks_format "${passphrase}" "/dev/md/crypt"
|
||||
# open
|
||||
echo "${passphrase}" |
|
||||
cryptsetup luksOpen "/dev/md/crypt" "crypt"
|
||||
# passphrase
|
||||
unset passphrase
|
||||
# format crypt
|
||||
fs_make_btrfs "/dev/mapper/crypt" "crypt" \
|
||||
"00000000-0000-0000-0000-00000000000c"
|
||||
# mount crypt
|
||||
mkdir --parents "/media/crypt"
|
||||
mount \
|
||||
--options "autodefrag,compress-force=zstd" \
|
||||
"/dev/mapper/crypt" "/media/crypt"
|
||||
# make swap file
|
||||
fs_make_btrfs_swap "/media/crypt/swap" "64g" \
|
||||
"00000000-0000-0000-0000-000000000005"
|
||||
}
|
||||
73
shell/rescue/ovh.sh
Normal file
73
shell/rescue/ovh.sh
Normal file
|
|
@ -0,0 +1,73 @@
|
|||
rescue_wipe_0_init_ovh_vle2() {
|
||||
local device="/dev/sdb"
|
||||
local passphrase
|
||||
# read passphrase
|
||||
passphrase="$(read_passphrase)"
|
||||
# warn
|
||||
lsblk
|
||||
printf "%s" "WIPE ${device} /?\\ OR CANCEL /!\\"
|
||||
read -r
|
||||
#
|
||||
parted --script "${device}" \
|
||||
mktable gpt \
|
||||
unit "mib" \
|
||||
mkpart "crypt" 4610 40959 \
|
||||
mkpart "boot" 514 4610 \
|
||||
mkpart "esp" 2 514 \
|
||||
set 3 esp on \
|
||||
mkpart bios 1 2 \
|
||||
set 4 bios_grub on
|
||||
# bios / wipe
|
||||
fs_wipe "${device}4"
|
||||
# esp / wipe
|
||||
fs_wipe "${device}3" "1M"
|
||||
# esp / format
|
||||
fs_make_fat "${device}3" "esp" "00000001"
|
||||
# esp / mount
|
||||
mkdir --parents "/media/esp"
|
||||
mount "${device}3" "/media/esp"
|
||||
# boot / wipe
|
||||
fs_wipe "${device}2" "1G" 1
|
||||
# boot / format
|
||||
fs_make_btrfs "${device}2" "boot" \
|
||||
"00000000-0000-0000-0000-00000000000b"
|
||||
# boot / mount
|
||||
mkdir --parents "/media/boot"
|
||||
mount --options "autodefrag,compress-force=zstd" \
|
||||
"${device}2" "/media/boot"
|
||||
# crypt / wipe
|
||||
fs_wipe "${device}1" "1G" 1
|
||||
# crypt / encrypt
|
||||
luks_format "${passphrase}" "${device}1"
|
||||
# crypt / open
|
||||
echo "${passphrase}" |
|
||||
cryptsetup luksOpen "${device}1" "crypt"
|
||||
# passphrase
|
||||
unset passphrase
|
||||
}
|
||||
|
||||
rescue_wipe_2_make_ovh_vle2() {
|
||||
local device="/dev/sdb"
|
||||
local passphrase
|
||||
# crypt / close
|
||||
cryptsetup luksClose "crypt"
|
||||
# read passphrase
|
||||
passphrase="$(read_passphrase)"
|
||||
# crypt / encrypt
|
||||
luks_format "${passphrase}" "${device}1"
|
||||
# crypt / open
|
||||
echo "${passphrase}" |
|
||||
cryptsetup luksOpen "${device}1" "crypt"
|
||||
# passphrase
|
||||
unset passphrase
|
||||
# crypt / format
|
||||
fs_make_btrfs "/dev/mapper/crypt" "crypt" \
|
||||
"00000000-0000-0000-0000-00000000000c"
|
||||
# crypt / mount
|
||||
mkdir --parents "/media/crypt"
|
||||
mount --options "autodefrag,compress-force=zstd" \
|
||||
"/dev/mapper/crypt" "/media/crypt"
|
||||
# crypt / swap
|
||||
fs_make_btrfs_swap "/media/crypt/swap" "4g" \
|
||||
"00000000-0000-0000-0000-000000000005"
|
||||
}
|
||||
Loading…
Add table
Add a link
Reference in a new issue