sh/bash/ovh-rescue.sh

#! /usr/bin/env sh

ovh_rescue_configure() {
	local host="${1}"
	# apt / conf
	printf "\
Acquire::AllowInsecureRepositories False;
Acquire::AllowWeakRepositories False;
Acquire::AllowDowngradeToInsecureRepositories False;
Acquire::Check-Valid-Until True;
APT::Install-Recommends False;
APT::Install-Suggests False;
APT::Get::Show-Versions True;
Dir::Etc::SourceParts '';
Dpkg::Progress True;
" >"/etc/apt/apt.conf"
	# apt / sources
	printf "\
deb https://deb.debian.org/debian buster main contrib non-free
deb https://deb.debian.org/debian buster-backports main contrib non-free
deb https://deb.debian.org/debian buster-updates main contrib non-free
deb https://deb.debian.org/debian-security buster/updates main contrib non-free
" >"/etc/apt/sources.list"
	# bash / rc
	main_link_bashrc
	# host name
	hostname "${host}"
	# locales
	printf "\
en_US.UTF-8 UTF-8
fr_FR.UTF-8 UTF-8
" >"/etc/locale.gen"
	# fix alias
	rm --force "/usr/share/locale/locale.alias"
	ln --symbolic "/etc/locale.alias" "/usr/share/locale/locale.alias"
	# generate locales
	locale-gen
	# update catalog
	apt-get update
	#
	debian_disable_frontend
	# install packages
	apt-get install --assume-yes \
		"tmux" \
		\
		"byobu" \
		"mosh"
	# clean cache
	apt_clean_cache
}

ovh_rescue_install() {
	local release="buster"
	# update catalog
	apt-get update
	#
	debian_disable_frontend
	# upgrade packages
	apt-get upgrade --assume-yes
	#
	apt_clean_cache
	# install packages
	apt-get install --assume-yes \
		"parted" "mdadm" "lvm2" \
		\
		"lshw" \
		"file" "micro" \
		"grub-efi-amd64-bin" "grub-pc-bin" \
		"htop" "iotop" "lsof" \
		"exa" "ncdu" "nnn" "ranger" "tree" \
		"squashfs-tools" \
		"uuid-runtime"
	# clean cache
	apt_clean_cache
	# install backports
	apt-get install --assume-yes \
		--target-release "${release}-backports" \
		"cryptsetup-bin" "rsync" \
		\
		"git"
	# clean cache
	apt_clean_cache
}

ovh_rescue_upload() {
	local host="${1}"
	if [ "${host}" ]; then
		local user="root"
		#
		local user_host="${user}@${host}"
		# remove fingerprints
		ssh-keygen -R "${host}"
		# copy ssh id
		ssh-copy-id \
			-o "StrictHostKeyChecking=accept-new" \
			"${user_host}"
		# upload root
		rsync --delete --recursive "${MAIN_BASH_ROOT}/" "${user_host}:/etc/bash/"
		# call setup
		# TODO variable
		ssh "${user_host}" -- \
			"source \"/etc/bash/main.sh\" ; ovh-rescue-configure \"${host}\""
		# create session
		ssh "${user_host}" -- byobu new-session -d
		# send keys
		ssh "${user_host}" -- byobu send-keys "ovh-rescue-install" "C-m"
		# attach session
		mosh "${user_host}" -- byobu attach-session
	else
		echo "Host?"
		return 1
	fi
}

ovh_rescue_wipe_1_2TB() {
	local device="/dev/sda"
	local unit="mib"
	#
	lsblk
	printf "%s" "WIPE ${device} /?\\ OR CANCEL /!\\"
	read -r
	#
	parted "${device}" --script mktable gpt
	#
	parted "${device}" unit "${unit}" mkpart "crypt" 65795 1907729
	#
	parted "${device}" unit "${unit}" mkpart "boot" 259 65795
	#
	parted "${device}" unit "${unit}" mkpart "esp" 2 259
	parted "${device}" set 3 esp on
	#
	parted "${device}" unit "${unit}" mkpart bios 1 2
	parted "${device}" set 4 bios_grub on
	# wipe bios
	dd if="/dev/zero" of="/dev/sda4"
	# format esp
	mkfs.vfat -F 32 -n "esp" "/dev/sda3"
	# format boot
	mkfs.ext4 -F -L "boot" "/dev/sda2"
	# read passphrase
	local passphrase
	printf "PassPhrase: "
	read -r -s passphrase
	# encrypt
	echo "${passphrase}" |
		cryptsetup \
			--verbose \
			--batch-mode \
			--type "luks2" \
			--pbkdf "argon2id" \
			--cipher "aes-xts-plain64" \
			--iter-time 8192 \
			--key-size 512 \
			--hash "sha512" \
			--use-random \
			luksFormat \
			"/dev/sda1"
	# open
	echo "${passphrase}" |
		cryptsetup luksOpen "/dev/sda1" "crypt"
	# pv
	pvcreate "/dev/mapper/crypt"
	# vg
	vgcreate "crypt" "/dev/mapper/crypt"
	# lv swap
	lvcreate --name "swap" --size "68719476736b" "crypt"
	# lv data
	lvcreate --name "data" --extents "100%FREE" "crypt"
	# format swap
	mkswap --label "swap" "/dev/mapper/crypt-swap"
	# format data
	mkfs.ext4 -L "data" "/dev/mapper/crypt-data"
	# vg off
	vgchange --activate "n" "crypt"
	# close
	cryptsetup luksClose "crypt"
}