quotes
This commit is contained in:
parent
305968a9e6
commit
4e81f18817
GPG key ID:
9C7613450C80C24F
1 changed files with 46 additions and 46 deletions
|
|
@ -1,18 +1,18 @@
|
|||
rescue_wipe_0_init_hetzner_8_8() {
|
||||
local device
|
||||
local devices=(
|
||||
'/dev/sda'
|
||||
'/dev/sdb'
|
||||
"/dev/sda"
|
||||
"/dev/sdb"
|
||||
)
|
||||
local members
|
||||
local number
|
||||
local passphrase
|
||||
local unit='mib'
|
||||
local unit="mib"
|
||||
# read passphrase
|
||||
passphrase="$(read_passphrase)"
|
||||
#
|
||||
lsblk
|
||||
echo -n 'WIPE' "${devices[@]}" '/?\ OR CANCEL /!\'
|
||||
echo -n "WIPE" "${devices[@]}" "/?\\ OR CANCEL /!\\"
|
||||
read
|
||||
#
|
||||
number=0
|
||||
|
|
@ -53,7 +53,7 @@ rescue_wipe_0_init_hetzner_8_8() {
|
|||
echo "#${number}: ${device}4"
|
||||
# wipe bios
|
||||
dd \
|
||||
if='/dev/zero' of="${device}4"
|
||||
if="/dev/zero" of="${device}4"
|
||||
done
|
||||
#
|
||||
number=0
|
||||
|
|
@ -63,7 +63,7 @@ rescue_wipe_0_init_hetzner_8_8() {
|
|||
echo "#${number}: ${device}3"
|
||||
# format esp
|
||||
dd \
|
||||
if='/dev/zero' of="${device}3" bs='1M'
|
||||
if="/dev/zero" of="${device}3" bs="1M"
|
||||
mkfs.vfat \
|
||||
-F 32 \
|
||||
-S 4096 \
|
||||
|
|
@ -81,8 +81,8 @@ rescue_wipe_0_init_hetzner_8_8() {
|
|||
echo
|
||||
echo "#${number}: ${device}2"
|
||||
# wipe boot
|
||||
dd status='progress' \
|
||||
if='/dev/zero' of="${device}2" bs='1G' count=1
|
||||
dd status="progress" \
|
||||
if="/dev/zero" of="${device}2" bs="1G" count=1
|
||||
done
|
||||
#
|
||||
members=()
|
||||
|
|
@ -90,24 +90,24 @@ rescue_wipe_0_init_hetzner_8_8() {
|
|||
members+=("${device}2")
|
||||
done
|
||||
mdadm \
|
||||
--create '/dev/md/boot' \
|
||||
--create "/dev/md/boot" \
|
||||
--level 0 \
|
||||
--metadata 1 \
|
||||
--name 'md:boot' \
|
||||
--name "md:boot" \
|
||||
--raid-devices ${#devices[@]} \
|
||||
--uuid '00000000:00000000:00000000:00000002' \
|
||||
--uuid "00000000:00000000:00000000:00000002" \
|
||||
"${members[@]}"
|
||||
#
|
||||
mkfs.btrfs --force \
|
||||
--checksum 'sha256' \
|
||||
--label 'boot' \
|
||||
--uuid '00000000-0000-0000-0000-00000000000b' \
|
||||
'/dev/md/boot'
|
||||
--checksum "sha256" \
|
||||
--label "boot" \
|
||||
--uuid "00000000-0000-0000-0000-00000000000b" \
|
||||
"/dev/md/boot"
|
||||
# mount boot
|
||||
mkdir --parents '/media/boot'
|
||||
mkdir --parents "/media/boot"
|
||||
mount \
|
||||
--options 'autodefrag,compress-force=zstd' \
|
||||
'/dev/md/boot' '/media/boot'
|
||||
--options "autodefrag,compress-force=zstd" \
|
||||
"/dev/md/boot" "/media/boot"
|
||||
#
|
||||
number=0
|
||||
for device in "${devices[@]}"; do
|
||||
|
|
@ -115,8 +115,8 @@ rescue_wipe_0_init_hetzner_8_8() {
|
|||
echo
|
||||
echo "#${number}: ${device}1"
|
||||
# wipe crypt head
|
||||
dd status='progress' \
|
||||
if='/dev/zero' of="${device}1" bs='1G' count=1
|
||||
dd status="progress" \
|
||||
if="/dev/zero" of="${device}1" bs="1G" count=1
|
||||
done
|
||||
#
|
||||
members=()
|
||||
|
|
@ -124,30 +124,30 @@ rescue_wipe_0_init_hetzner_8_8() {
|
|||
members+=("${device}1")
|
||||
done
|
||||
mdadm \
|
||||
--create '/dev/md/crypt' \
|
||||
--create "/dev/md/crypt" \
|
||||
--level 0 \
|
||||
--metadata 1 \
|
||||
--name 'md:crypt' \
|
||||
--name "md:crypt" \
|
||||
--raid-devices ${#devices[@]} \
|
||||
--uuid '00000000:00000000:00000000:00000001' \
|
||||
--uuid "00000000:00000000:00000000:00000001" \
|
||||
"${members[@]}"
|
||||
# encrypt
|
||||
echo "${passphrase}" |
|
||||
cryptsetup \
|
||||
--verbose \
|
||||
--batch-mode \
|
||||
--type 'luks2' \
|
||||
--pbkdf 'argon2id' \
|
||||
--cipher 'aes-xts-plain64' \
|
||||
--type "luks2" \
|
||||
--pbkdf "argon2id" \
|
||||
--cipher "aes-xts-plain64" \
|
||||
--iter-time 8192 \
|
||||
--key-size 512 \
|
||||
--hash 'sha512' \
|
||||
--hash "sha512" \
|
||||
--use-random \
|
||||
luksFormat \
|
||||
'/dev/md/crypt'
|
||||
"/dev/md/crypt"
|
||||
# open
|
||||
echo "${passphrase}" |
|
||||
cryptsetup luksOpen '/dev/md/crypt' 'crypt'
|
||||
cryptsetup luksOpen "/dev/md/crypt" "crypt"
|
||||
# passphrase
|
||||
unset passphrase
|
||||
}
|
||||
|
|
@ -155,7 +155,7 @@ rescue_wipe_0_init_hetzner_8_8() {
|
|||
rescue_wipe_2_make_hetzner_8_8() {
|
||||
local passphrase
|
||||
# close
|
||||
cryptsetup luksClose 'crypt'
|
||||
cryptsetup luksClose "crypt"
|
||||
# read passphrase
|
||||
passphrase="$(read_passphrase)"
|
||||
# encrypt
|
||||
|
|
@ -163,34 +163,34 @@ rescue_wipe_2_make_hetzner_8_8() {
|
|||
cryptsetup \
|
||||
--verbose \
|
||||
--batch-mode \
|
||||
--type 'luks2' \
|
||||
--pbkdf 'argon2id' \
|
||||
--cipher 'aes-xts-plain64' \
|
||||
--type "luks2" \
|
||||
--pbkdf "argon2id" \
|
||||
--cipher "aes-xts-plain64" \
|
||||
--iter-time 8192 \
|
||||
--key-size 512 \
|
||||
--hash 'sha512' \
|
||||
--hash "sha512" \
|
||||
--use-random \
|
||||
luksFormat \
|
||||
'/dev/md/crypt'
|
||||
"/dev/md/crypt"
|
||||
# open
|
||||
echo "${passphrase}" |
|
||||
cryptsetup luksOpen '/dev/md/crypt' 'crypt'
|
||||
cryptsetup luksOpen "/dev/md/crypt" "crypt"
|
||||
# passphrase
|
||||
unset passphrase
|
||||
# format crypt
|
||||
mkfs.btrfs --force \
|
||||
--checksum 'sha256' \
|
||||
--label 'crypt' \
|
||||
--uuid '00000000-0000-0000-0000-00000000000c' \
|
||||
'/dev/mapper/crypt'
|
||||
--checksum "sha256" \
|
||||
--label "crypt" \
|
||||
--uuid "00000000-0000-0000-0000-00000000000c" \
|
||||
"/dev/mapper/crypt"
|
||||
# mount crypt
|
||||
mkdir --parents '/media/crypt'
|
||||
mkdir --parents "/media/crypt"
|
||||
mount \
|
||||
--options 'autodefrag,compress-force=zstd' \
|
||||
'/dev/mapper/crypt' '/media/crypt'
|
||||
--options "autodefrag,compress-force=zstd" \
|
||||
"/dev/mapper/crypt" "/media/crypt"
|
||||
# make swap file
|
||||
btrfs filesystem mkswapfile \
|
||||
--size '64g' \
|
||||
--uuid '00000000-0000-0000-0000-000000000005' \
|
||||
'/media/crypt/swap'
|
||||
--size "64g" \
|
||||
--uuid "00000000-0000-0000-0000-000000000005" \
|
||||
"/media/crypt/swap"
|
||||
}
|
||||
|
|
|
|||
Loading…
Reference in a new issue