hetzner/function

This commit is contained in:
Marc Beninca 2023-10-02 18:16:32 +02:00
parent 90b5440f13
commit 0e8ea7af97

View file

@ -1,4 +1,4 @@
function ovh-rescue-configure {
function hetzner-rescue-configure {
local host="${1}"
local packages=(
'byobu' 'mosh'
@ -46,7 +46,7 @@ fr_FR.UTF-8 UTF-8
apt_clean_cache
}
function ovh-rescue-install {
function hetzner-rescue-install {
local release='buster'
local packages=(
# installed
@ -85,7 +85,7 @@ function ovh-rescue-install {
apt_clean_cache
}
function ovh-rescue-upload {
function hetzner-rescue-upload {
local host="${1}"
if [ "${host}" ] ; then
local user='root'
@ -101,11 +101,11 @@ if [ "${host}" ] ; then
rsync --delete --recursive "${MAIN_BASH_ROOT}/" "${user_host}:/etc/bash/"
# call setup
# TODO variable
ssh "${user_host}" -- "source '/etc/bash/main.sh' ; ovh-rescue-configure '${host}'"
ssh "${user_host}" -- "source '/etc/bash/main.sh' ; hetzner-rescue-configure '${host}'"
# create session
ssh "${user_host}" -- byobu new-session -d
# send keys
ssh "${user_host}" -- byobu send-keys 'ovh-rescue-install' 'C-m'
ssh "${user_host}" -- byobu send-keys 'hetzner-rescue-install' 'C-m'
# attach session
mosh "${user_host}" -- byobu attach-session
else
@ -113,67 +113,3 @@ else
return 1
fi
}
function ovh-rescue-wipe-1-2TB {
local device='/dev/sda'
local unit='mib'
#
lsblk
echo -n 'WIPE' "${device}" '/?\ OR CANCEL /!\'
read
#
parted "${device}" --script mktable gpt
#
parted "${device}" unit "${unit}" mkpart 'crypt' 65795 1907729
#
parted "${device}" unit "${unit}" mkpart 'boot' 259 65795
#
parted "${device}" unit "${unit}" mkpart 'esp' 2 259
parted "${device}" set 3 esp on
#
parted "${device}" unit "${unit}" mkpart bios 1 2
parted "${device}" set 4 bios_grub on
# wipe bios
dd if='/dev/zero' of='/dev/sda4'
# format esp
mkfs.vfat -F 32 -n 'esp' '/dev/sda3'
# format boot
mkfs.ext4 -F -L 'boot' '/dev/sda2'
# read passphrase
local passphrase
echo -n 'PassPhrase: '
read -r -s passphrase
# encrypt
echo "${passphrase}" \
| cryptsetup \
--verbose \
--batch-mode \
--type 'luks2' \
--pbkdf 'argon2id' \
--cipher 'aes-xts-plain64' \
--iter-time 8192 \
--key-size 512 \
--hash 'sha512' \
--use-random \
luksFormat \
'/dev/sda1'
# open
echo "${passphrase}" \
| cryptsetup luksOpen '/dev/sda1' 'crypt'
# pv
pvcreate '/dev/mapper/crypt'
# vg
vgcreate 'crypt' '/dev/mapper/crypt'
# lv swap
lvcreate --name 'swap' --size '68719476736b' 'crypt'
# lv data
lvcreate --name 'data' --extents '100%FREE' 'crypt'
# format swap
mkswap --label 'swap' '/dev/mapper/crypt-swap'
# format data
mkfs.ext4 -L 'data' '/dev/mapper/crypt-data'
# vg off
vgchange --activate n 'crypt'
# close
cryptsetup luksClose 'crypt'
}