This commit is contained in:
Marc Beninca 2024-11-11 12:37:07 +01:00
parent 801f3b859c
commit 3b05dfecc4
Signed by: marc.beninca
GPG key ID: 9C7613450C80C24F

View file

@ -13,14 +13,14 @@ APT::Install-Suggests False;
APT::Get::Show-Versions True; APT::Get::Show-Versions True;
Dir::Etc::SourceParts ''; Dir::Etc::SourceParts '';
Dpkg::Progress True; Dpkg::Progress True;
" > "/etc/apt/apt.conf" " >"/etc/apt/apt.conf"
# apt / sources # apt / sources
printf "\ printf "\
deb https://deb.debian.org/debian buster main contrib non-free deb https://deb.debian.org/debian buster main contrib non-free
deb https://deb.debian.org/debian buster-backports main contrib non-free deb https://deb.debian.org/debian buster-backports main contrib non-free
deb https://deb.debian.org/debian buster-updates main contrib non-free deb https://deb.debian.org/debian buster-updates main contrib non-free
deb https://deb.debian.org/debian-security buster/updates main contrib non-free deb https://deb.debian.org/debian-security buster/updates main contrib non-free
" > "/etc/apt/sources.list" " >"/etc/apt/sources.list"
# bash / rc # bash / rc
main_link_bashrc main_link_bashrc
# host name # host name
@ -29,7 +29,7 @@ deb https://deb.debian.org/debian-security buster/updates main contrib non-free
printf "\ printf "\
en_US.UTF-8 UTF-8 en_US.UTF-8 UTF-8
fr_FR.UTF-8 UTF-8 fr_FR.UTF-8 UTF-8
" > '/etc/locale.gen' " >"/etc/locale.gen"
# fix alias # fix alias
rm --force "/usr/share/locale/locale.alias" rm --force "/usr/share/locale/locale.alias"
ln --symbolic "/etc/locale.alias" "/usr/share/locale/locale.alias" ln --symbolic "/etc/locale.alias" "/usr/share/locale/locale.alias"
@ -41,8 +41,9 @@ fr_FR.UTF-8 UTF-8
debian_disable_frontend debian_disable_frontend
# install packages # install packages
apt-get install --assume-yes \ apt-get install --assume-yes \
"byobu" \ "mosh" \
"mosh" "tmux" \
"byobu"
# #
apt_clean_cache apt_clean_cache
} }
@ -59,55 +60,55 @@ ovh_rescue_install() {
apt_clean_cache apt_clean_cache
# install packages # install packages
apt-get install --assume-yes \ apt-get install --assume-yes \
"parted" "mdadm" "lvm2" \ "parted" "mdadm" "lvm2" \
\ \
"lshw" \ "lshw" \
"file" "micro" \ "file" "micro" \
"grub-efi-amd64-bin" "grub-pc-bin" \ "grub-efi-amd64-bin" "grub-pc-bin" \
"htop" "iotop" "lsof" \ "htop" "iotop" "lsof" \
"exa" "ncdu" "nnn" "ranger" "tree" \ "exa" "ncdu" "nnn" "ranger" "tree" \
"squashfs-tools" \ "squashfs-tools" \
"uuid-runtime" "uuid-runtime"
# #
apt_clean_cache apt_clean_cache
# install backports # install backports
apt-get install --assume-yes \ apt-get install --assume-yes \
--target-release "${release}-backports" \ --target-release "${release}-backports" \
"cryptsetup-bin" "rsync" \ "cryptsetup-bin" "rsync" \
\ \
"git" "git"
# #
apt_clean_cache apt_clean_cache
} }
ovh_rescue_upload() { ovh_rescue_upload() {
local host="${1}" local host="${1}"
if [ "${host}" ] ; then if [ "${host}" ]; then
local user="root" local user="root"
# #
local user_host="${user}@${host}" local user_host="${user}@${host}"
# remove fingerprints # remove fingerprints
ssh-keygen -R "${host}" ssh-keygen -R "${host}"
# copy ssh id # copy ssh id
ssh-copy-id \ ssh-copy-id \
-o "StrictHostKeyChecking=accept-new" \ -o "StrictHostKeyChecking=accept-new" \
"${user_host}" "${user_host}"
# upload root # upload root
rsync --delete --recursive "${MAIN_BASH_ROOT}/" "${user_host}:/etc/bash/" rsync --delete --recursive "${MAIN_BASH_ROOT}/" "${user_host}:/etc/bash/"
# call setup # call setup
# TODO variable # TODO variable
ssh "${user_host}" -- \ ssh "${user_host}" -- \
"source \"/etc/bash/main.sh\" ; ovh-rescue-configure \"${host}\"" "source \"/etc/bash/main.sh\" ; ovh-rescue-configure \"${host}\""
# create session # create session
ssh "${user_host}" -- byobu new-session -d ssh "${user_host}" -- byobu new-session -d
# send keys # send keys
ssh "${user_host}" -- byobu send-keys "ovh-rescue-install" "C-m" ssh "${user_host}" -- byobu send-keys "ovh-rescue-install" "C-m"
# attach session # attach session
mosh "${user_host}" -- byobu attach-session mosh "${user_host}" -- byobu attach-session
else else
echo 'Host?' echo 'Host?'
return 1 return 1
fi fi
} }
ovh_rescue_wipe_1_2TB() { ovh_rescue_wipe_1_2TB() {
@ -140,22 +141,22 @@ ovh_rescue_wipe_1_2TB() {
printf "PassPhrase: " printf "PassPhrase: "
read -r -s passphrase read -r -s passphrase
# encrypt # encrypt
echo "${passphrase}" \ echo "${passphrase}" |
| cryptsetup \ cryptsetup \
--verbose \ --verbose \
--batch-mode \ --batch-mode \
--type "luks2" \ --type "luks2" \
--pbkdf "argon2id" \ --pbkdf "argon2id" \
--cipher "aes-xts-plain64" \ --cipher "aes-xts-plain64" \
--iter-time 8192 \ --iter-time 8192 \
--key-size 512 \ --key-size 512 \
--hash "sha512" \ --hash "sha512" \
--use-random \ --use-random \
luksFormat \ luksFormat \
"/dev/sda1" "/dev/sda1"
# open # open
echo "${passphrase}" \ echo "${passphrase}" |
| cryptsetup luksOpen "/dev/sda1" "crypt" cryptsetup luksOpen "/dev/sda1" "crypt"
# pv # pv
pvcreate "/dev/mapper/crypt" pvcreate "/dev/mapper/crypt"
# vg # vg