sh/bash/hetzner-rescue.sh

327 lines
8.1 KiB
Bash
Raw Normal View History

2023-10-02 16:16:32 +00:00
function hetzner-rescue-configure {
2023-10-03 09:07:38 +00:00
local hostname="${1}"
2023-10-02 17:32:50 +00:00
local package
2023-10-02 15:30:04 +00:00
local packages=(
2023-10-02 19:06:25 +00:00
'mosh'
'screen' 'tmux' 'byobu'
'apt-file'
2023-10-02 15:30:04 +00:00
)
# apt / conf
echo -n "\
Acquire::AllowInsecureRepositories False;
Acquire::AllowWeakRepositories False;
Acquire::AllowDowngradeToInsecureRepositories False;
Acquire::Check-Valid-Until True;
APT::Install-Recommends False;
APT::Install-Suggests False;
APT::Get::Show-Versions True;
Dir::Etc::SourceParts '';
Dpkg::Progress True;
" > '/etc/apt/apt.conf'
# apt / sources
echo -n "\
2023-10-02 16:28:25 +00:00
deb https://deb.debian.org/debian bookworm main non-free-firmware contrib non-free
deb https://deb.debian.org/debian bookworm-backports main non-free-firmware contrib non-free
deb https://deb.debian.org/debian bookworm-updates main non-free-firmware contrib non-free
deb https://deb.debian.org/debian-security bookworm-security main non-free-firmware contrib non-free
2023-10-02 15:30:04 +00:00
" > '/etc/apt/sources.list'
# bash / rc
main_link_bashrc
2023-10-02 19:19:27 +00:00
mv .bashrc .bashrc.old
2023-10-02 15:30:04 +00:00
# host name
2023-10-03 09:07:38 +00:00
hostname "${hostname}"
2023-10-02 15:30:04 +00:00
# locales
echo -n "\
en_US.UTF-8 UTF-8
fr_FR.UTF-8 UTF-8
" > '/etc/locale.gen'
# generate locales
locale-gen
# update catalog
apt-get update
#
debian_disable_frontend
# install packages
2023-10-02 17:32:50 +00:00
for package in "${packages[@]}" ; do
2023-10-02 17:39:41 +00:00
echo ; echo "${package}"
2023-10-02 17:32:50 +00:00
apt-get install \
--assume-yes \
"${package}"
apt_clean_cache
done
2023-10-02 17:35:18 +00:00
# update catalog
apt-get update
2023-10-02 15:30:04 +00:00
}
2023-10-02 16:16:32 +00:00
function hetzner-rescue-install {
2023-10-02 17:32:50 +00:00
local package
2023-10-02 16:42:39 +00:00
local release='bookworm'
2023-10-02 15:30:04 +00:00
local packages=(
# installed
2023-10-02 19:03:30 +00:00
'dmidecode' 'efibootmgr' 'pciutils' 'usbutils'
2023-10-02 17:45:03 +00:00
'parted' 'mdadm' 'cryptsetup-bin' 'lvm2'
2023-10-02 17:11:39 +00:00
'btrfs-progs' 'dosfstools'
2023-10-02 17:51:47 +00:00
'git' 'nano' 'python3' 'rsync' 'vim'
2023-10-02 19:03:30 +00:00
'file' 'htop' 'lsof' 'man-db' 'tree' 'uuid-runtime'
2023-10-02 15:30:04 +00:00
# install
'lshw'
2023-12-29 07:10:41 +00:00
'duperemove' 'squashfs-tools'
2023-10-02 17:50:29 +00:00
'grub-efi-amd64-bin' 'grub-pc-bin'
'libdigest-sha3-perl' 'micro'
2023-10-02 19:07:51 +00:00
'iotop'
'exa' 'ipcalc' 'lf' 'ncdu' 'nnn' 'ranger'
2023-10-02 15:30:04 +00:00
)
local backports=(
)
# update catalog
apt-get update
#
debian_disable_frontend
# upgrade packages
apt-get upgrade --assume-yes
#
apt_clean_cache
# install packages
2023-10-02 17:32:50 +00:00
for package in "${packages[@]}" ; do
2023-10-02 17:39:41 +00:00
echo ; echo "${package}"
2023-10-02 17:32:50 +00:00
apt-get install \
--assume-yes \
"${package}"
apt_clean_cache
done
2023-10-02 15:30:04 +00:00
# install backports
2023-10-02 17:32:50 +00:00
for package in "${backports[@]}" ; do
2023-10-02 17:39:41 +00:00
echo ; echo "${package}"
2023-10-02 17:32:50 +00:00
apt-get install \
--assume-yes \
--target-release "${release}-backports" \
"${package}"
apt_clean_cache
done
2023-10-02 15:30:04 +00:00
}
2023-10-02 16:16:32 +00:00
function hetzner-rescue-upload {
2023-10-02 15:30:04 +00:00
local host="${1}"
2023-10-03 09:07:38 +00:00
local hostname="${2}"
if [ "${hostname}" ] ; then
2023-10-02 15:30:04 +00:00
local user='root'
#
local user_host="${user}@${host}"
# remove fingerprints
ssh-keygen -R "${host}"
# copy ssh id
ssh-copy-id \
-o 'StrictHostKeyChecking=accept-new' \
"${user_host}"
# upload root
rsync --delete --recursive "${MAIN_BASH_ROOT}/" "${user_host}:/etc/bash/"
# call setup
# TODO variable
2023-10-03 09:07:38 +00:00
ssh "${user_host}" -- "source '/etc/bash/main.sh' ; hetzner-rescue-configure '${hostname}'"
2023-10-02 15:30:04 +00:00
# create session
ssh "${user_host}" -- byobu new-session -d
# send keys
2023-10-02 16:16:32 +00:00
ssh "${user_host}" -- byobu send-keys 'hetzner-rescue-install' 'C-m'
2023-10-02 15:30:04 +00:00
# attach session
mosh "${user_host}" -- byobu attach-session
else
echo 'Host?'
return 1
fi
}
2023-10-03 02:18:00 +00:00
2023-12-28 16:18:17 +00:00
function hetzner-rescue-wipe-8-8-0-init {
2023-12-28 07:36:46 +00:00
local device
local devices=(
'/dev/sda'
'/dev/sdb'
)
local members
local number
local passphrase
local unit='mib'
# read passphrase
echo -n 'PassPhrase: '
read -r -s passphrase
#
lsblk
echo -n 'WIPE' "${devices[@]}" '/?\ OR CANCEL /!\'
read
#
number=0
for device in "${devices[@]}" ; do
((number++))
echo ; echo "#${number}: ${device}"
#
parted "${device}" --script mktable gpt
#
parted "${device}" unit "${unit}" \
2023-12-28 08:23:03 +00:00
mkpart "crypt-${number}" 33282 7630885
2023-12-28 07:36:46 +00:00
#
parted "${device}" unit "${unit}" \
2023-12-28 08:23:03 +00:00
mkpart "boot-${number}" 514 33282
2023-12-28 07:36:46 +00:00
#
parted "${device}" unit "${unit}" \
2023-12-28 08:23:03 +00:00
mkpart "esp-${number}" 2 514
2023-12-28 07:36:46 +00:00
parted "${device}" set 3 esp on
#
parted "${device}" unit "${unit}" \
mkpart "bios-${number}" 1 2
parted "${device}" set 4 bios_grub on
done
#
number=0
for device in "${devices[@]}" ; do
((number++))
echo ; echo "#${number}: ${device}4"
# wipe bios
dd \
if='/dev/zero' of="${device}4"
done
#
number=0
for device in "${devices[@]}" ; do
((number++))
echo ; echo "#${number}: ${device}3"
# format esp
dd \
if='/dev/zero' of="${device}3" bs='1M'
2023-12-28 09:01:15 +00:00
mkfs.vfat \
-F 32 \
-S 4096 \
2023-12-28 11:40:43 +00:00
-i "0000000${number}" \
2023-12-28 09:01:15 +00:00
-n "esp-${number}" \
"${device}3"
2023-12-29 08:39:42 +00:00
# mount esp
2023-12-29 08:48:24 +00:00
mkdir --parents "/media/esp/${number}"
mount "${device}3" "/media/esp/${number}"
2023-12-28 07:36:46 +00:00
done
#
number=0
for device in "${devices[@]}" ; do
((number++))
echo ; echo "#${number}: ${device}2"
# wipe boot
dd status='progress' \
2023-12-28 09:01:15 +00:00
if='/dev/zero' of="${device}2" bs='1G' count=1
2023-12-28 07:36:46 +00:00
done
#
members=()
for device in "${devices[@]}" ; do
members+=("${device}2")
done
2024-01-01 10:37:44 +00:00
mdadm \
--create '/dev/md/boot' \
--name 'boot' \
--uuid '00000000:00000000:00000000:00000002' \
--metadata 1 \
--level 0 \
--raid-devices ${#devices[@]} \
"${members[@]}"
#
2023-12-28 09:01:15 +00:00
mkfs.btrfs --force \
2024-01-01 10:37:44 +00:00
--checksum 'sha256' \
2023-12-28 09:01:15 +00:00
--label 'boot' \
2023-12-28 11:40:43 +00:00
--uuid '00000000-0000-0000-0000-00000000000b' \
2024-01-01 10:37:44 +00:00
'/dev/md/boot'
2023-12-28 11:56:24 +00:00
# mount boot
mkdir --parents '/media/boot'
mount \
2023-12-29 13:11:56 +00:00
--options 'autodefrag,compress-force=zstd' \
2024-01-01 10:37:44 +00:00
'/dev/md/boot' '/media/boot'
2023-12-28 07:36:46 +00:00
#
number=0
for device in "${devices[@]}" ; do
((number++))
echo ; echo "#${number}: ${device}1"
# wipe crypt head
dd status='progress' \
if='/dev/zero' of="${device}1" bs='1G' count=1
done
#
members=()
for device in "${devices[@]}" ; do
members+=("${device}1")
done
mdadm \
--create '/dev/md/crypt' \
--name 'crypt' \
2024-01-01 10:37:44 +00:00
--uuid '00000000:00000000:00000000:00000001' \
2023-12-28 07:36:46 +00:00
--metadata 1 \
--level 0 \
--raid-devices ${#devices[@]} \
"${members[@]}"
# encrypt
echo "${passphrase}" \
| cryptsetup \
--verbose \
--batch-mode \
--type 'luks2' \
--pbkdf 'argon2id' \
--cipher 'aes-xts-plain64' \
--iter-time 8192 \
--key-size 512 \
--hash 'sha512' \
--use-random \
luksFormat \
'/dev/md/crypt'
# open
echo "${passphrase}" \
| cryptsetup luksOpen '/dev/md/crypt' 'crypt'
2023-12-28 11:00:25 +00:00
}
2023-12-28 16:18:17 +00:00
function hetzner-rescue-wipe-8-8-1-zero {
2023-12-28 07:36:46 +00:00
# wipe crypt
dd status='progress' \
2023-12-28 10:58:57 +00:00
if='/dev/zero' of='/dev/mapper/crypt' bs='8G'
2023-12-28 07:36:46 +00:00
}
2023-12-28 16:18:17 +00:00
function hetzner-rescue-wipe-8-8-2-make {
2023-12-28 07:36:46 +00:00
local passphrase
# close
cryptsetup luksClose 'crypt'
# read passphrase
echo -n 'PassPhrase: '
read -r -s passphrase
# encrypt
echo "${passphrase}" \
| cryptsetup \
--verbose \
--batch-mode \
--type 'luks2' \
--pbkdf 'argon2id' \
--cipher 'aes-xts-plain64' \
--iter-time 8192 \
--key-size 512 \
--hash 'sha512' \
--use-random \
luksFormat \
'/dev/md/crypt'
# open
echo "${passphrase}" \
| cryptsetup luksOpen '/dev/md/crypt' 'crypt'
2023-12-28 11:44:00 +00:00
# format crypt
2023-12-28 11:40:43 +00:00
mkfs.btrfs --force \
2024-01-01 10:37:44 +00:00
--checksum 'sha256' \
2023-12-28 11:40:43 +00:00
--label 'crypt' \
--uuid '00000000-0000-0000-0000-00000000000c' \
'/dev/mapper/crypt'
2023-12-28 11:44:00 +00:00
# mount crypt
mkdir --parents '/media/crypt'
mount \
2023-12-29 13:11:56 +00:00
--options 'autodefrag,compress-force=zstd' \
2023-12-28 11:44:00 +00:00
'/dev/mapper/crypt' '/media/crypt'
2023-12-28 11:49:44 +00:00
# make swap file
btrfs filesystem mkswapfile \
--size '64g' \
--uuid '00000000-0000-0000-0000-000000000005' \
'/media/crypt/swap'
2023-12-28 12:00:10 +00:00
}
function hetzner-rescue-wipe-8-8-3-close {
umount '/media/boot'
#
umount '/media/crypt' \
&& cryptsetup luksClose 'crypt'
2023-12-28 07:36:46 +00:00
}