rwx.work/sh
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

quoootes

Browse source
This commit is contained in:
Marc Beninca 2024-11-11 12:17:52 +01:00
parent cc8ca58cff
commit 6f17ecfec3
Signed by: marc.beninca
GPG key ID: 9C7613450C80C24F
1 changed files with 52 additions and 51 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

103
bash/ovh-rescue.sh
View file

@ -1,12 +1,12 @@
#! /usr/bin/env bash #! /usr/bin/env sh
ovh_rescue_configure() { ovh_rescue_configure() {
local host="${1}" local host="${1}"
local packages=( local packages=(
'byobu' 'mosh' "byobu" "mosh"
) )
# apt / conf # apt / conf
echo -n "\ printf "\
Acquire::AllowInsecureRepositories False; Acquire::AllowInsecureRepositories False;
Acquire::AllowWeakRepositories False; Acquire::AllowWeakRepositories False;
Acquire::AllowDowngradeToInsecureRepositories False; Acquire::AllowDowngradeToInsecureRepositories False;
@ -16,26 +16,26 @@ APT::Install-Suggests False;
APT::Get::Show-Versions True; APT::Get::Show-Versions True;
Dir::Etc::SourceParts ''; Dir::Etc::SourceParts '';
Dpkg::Progress True; Dpkg::Progress True;
" > '/etc/apt/apt.conf' " > "/etc/apt/apt.conf"
# apt / sources # apt / sources
echo -n "\ printf "\
deb https://deb.debian.org/debian buster main contrib non-free deb https://deb.debian.org/debian buster main contrib non-free
deb https://deb.debian.org/debian buster-backports main contrib non-free deb https://deb.debian.org/debian buster-backports main contrib non-free
deb https://deb.debian.org/debian buster-updates main contrib non-free deb https://deb.debian.org/debian buster-updates main contrib non-free
deb https://deb.debian.org/debian-security buster/updates main contrib non-free deb https://deb.debian.org/debian-security buster/updates main contrib non-free
" > '/etc/apt/sources.list' " > "/etc/apt/sources.list"
# bash / rc # bash / rc
main_link_bashrc main_link_bashrc
# host name # host name
hostname "${host}" hostname "${host}"
# locales # locales
echo -n "\ printf "\
en_US.UTF-8 UTF-8 en_US.UTF-8 UTF-8
fr_FR.UTF-8 UTF-8 fr_FR.UTF-8 UTF-8
" > '/etc/locale.gen' " > '/etc/locale.gen'
# fix alias # fix alias
rm --force '/usr/share/locale/locale.alias' rm --force "/usr/share/locale/locale.alias"
ln --symbolic '/etc/locale.alias' '/usr/share/locale/locale.alias' ln --symbolic "/etc/locale.alias" "/usr/share/locale/locale.alias"
# generate locales # generate locales
locale-gen locale-gen
# update catalog # update catalog
@ -48,25 +48,25 @@ fr_FR.UTF-8 UTF-8
apt_clean_cache apt_clean_cache
} }
function ovh-rescue-install { ovh_rescue_install() {
local release='buster' local release="buster"
local packages=( local packages=(
# installed # installed
'parted' 'mdadm' 'lvm2' "parted" "mdadm" "lvm2"
# install # install
'lshw' "lshw"
'file' 'micro' "file" "micro"
'grub-efi-amd64-bin' 'grub-pc-bin' "grub-efi-amd64-bin" "grub-pc-bin"
'htop' 'iotop' 'lsof' "htop" "iotop" "lsof"
'exa' 'ncdu' 'nnn' 'ranger' 'tree' "exa" "ncdu" "nnn" "ranger" "tree"
'squashfs-tools' "squashfs-tools"
'uuid-runtime' "uuid-runtime"
) )
local backports=( local backports=(
# installed # installed
'cryptsetup-bin' 'rsync' "cryptsetup-bin" "rsync"
# install # install
'git' "git"
) )
# update catalog # update catalog
apt-get update apt-get update
@ -87,27 +87,28 @@ function ovh-rescue-install {
apt_clean_cache apt_clean_cache
} }
function ovh-rescue-upload { ovh_rescue_upload() {
local host="${1}" local host="${1}"
if [ "${host}" ] ; then if [ "${host}" ] ; then
local user='root' local user="root"
# #
local user_host="${user}@${host}" local user_host="${user}@${host}"
# remove fingerprints # remove fingerprints
ssh-keygen -R "${host}" ssh-keygen -R "${host}"
# copy ssh id # copy ssh id
ssh-copy-id \ ssh-copy-id \
-o 'StrictHostKeyChecking=accept-new' \ -o "StrictHostKeyChecking=accept-new" \
"${user_host}" "${user_host}"
# upload root # upload root
rsync --delete --recursive "${MAIN_BASH_ROOT}/" "${user_host}:/etc/bash/" rsync --delete --recursive "${MAIN_BASH_ROOT}/" "${user_host}:/etc/bash/"
# call setup # call setup
# TODO variable # TODO variable
ssh "${user_host}" -- "source '/etc/bash/main.sh' ; ovh-rescue-configure '${host}'" ssh "${user_host}" -- \
"source \"/etc/bash/main.sh\" ; ovh-rescue-configure \"${host}\""
# create session # create session
ssh "${user_host}" -- byobu new-session -d ssh "${user_host}" -- byobu new-session -d
# send keys # send keys
ssh "${user_host}" -- byobu send-keys 'ovh-rescue-install' 'C-m' ssh "${user_host}" -- byobu send-keys "ovh-rescue-install" "C-m"
# attach session # attach session
mosh "${user_host}" -- byobu attach-session mosh "${user_host}" -- byobu attach-session
else else
@ -116,66 +117,66 @@ else
fi fi
} }
function ovh-rescue-wipe-1-2TB { ovh_rescue_wipe_1_2TB() {
local device='/dev/sda' local device="/dev/sda"
local unit='mib' local unit="mib"
# #
lsblk lsblk
echo -n 'WIPE' "${device}" "/?\\ OR CANCEL /!\\" printf "%s" "WIPE ${device} /?\\ OR CANCEL /!\\"
read -r read -r
# #
parted "${device}" --script mktable gpt parted "${device}" --script mktable gpt
# #
parted "${device}" unit "${unit}" mkpart 'crypt' 65795 1907729 parted "${device}" unit "${unit}" mkpart "crypt" 65795 1907729
# #
parted "${device}" unit "${unit}" mkpart 'boot' 259 65795 parted "${device}" unit "${unit}" mkpart "boot" 259 65795
# #
parted "${device}" unit "${unit}" mkpart 'esp' 2 259 parted "${device}" unit "${unit}" mkpart "esp" 2 259
parted "${device}" set 3 esp on parted "${device}" set 3 esp on
# #
parted "${device}" unit "${unit}" mkpart bios 1 2 parted "${device}" unit "${unit}" mkpart bios 1 2
parted "${device}" set 4 bios_grub on parted "${device}" set 4 bios_grub on
# wipe bios # wipe bios
dd if='/dev/zero' of='/dev/sda4' dd if="/dev/zero" of="/dev/sda4"
# format esp # format esp
mkfs.vfat -F 32 -n 'esp' '/dev/sda3' mkfs.vfat -F 32 -n "esp" "/dev/sda3"
# format boot # format boot
mkfs.ext4 -F -L 'boot' '/dev/sda2' mkfs.ext4 -F -L "boot" "/dev/sda2"
# read passphrase # read passphrase
local passphrase local passphrase
echo -n 'PassPhrase: ' printf "PassPhrase: "
read -r -s passphrase read -r -s passphrase
# encrypt # encrypt
echo "${passphrase}" \ echo "${passphrase}" \
| cryptsetup \ | cryptsetup \
--verbose \ --verbose \
--batch-mode \ --batch-mode \
--type 'luks2' \ --type "luks2" \
--pbkdf 'argon2id' \ --pbkdf "argon2id" \
--cipher 'aes-xts-plain64' \ --cipher "aes-xts-plain64" \
--iter-time 8192 \ --iter-time 8192 \
--key-size 512 \ --key-size 512 \
--hash 'sha512' \ --hash "sha512" \
--use-random \ --use-random \
luksFormat \ luksFormat \
'/dev/sda1' "/dev/sda1"
# open # open
echo "${passphrase}" \ echo "${passphrase}" \
| cryptsetup luksOpen '/dev/sda1' 'crypt' | cryptsetup luksOpen "/dev/sda1" "crypt"
# pv # pv
pvcreate '/dev/mapper/crypt' pvcreate "/dev/mapper/crypt"
# vg # vg
vgcreate 'crypt' '/dev/mapper/crypt' vgcreate "crypt" "/dev/mapper/crypt"
# lv swap # lv swap
lvcreate --name 'swap' --size '68719476736b' 'crypt' lvcreate --name "swap" --size "68719476736b" "crypt"
# lv data # lv data
lvcreate --name 'data' --extents '100%FREE' 'crypt' lvcreate --name "data" --extents "100%FREE" "crypt"
# format swap # format swap
mkswap --label 'swap' '/dev/mapper/crypt-swap' mkswap --label "swap" "/dev/mapper/crypt-swap"
# format data # format data
mkfs.ext4 -L 'data' '/dev/mapper/crypt-data' mkfs.ext4 -L "data" "/dev/mapper/crypt-data"
# vg off # vg off
vgchange --activate n 'crypt' vgchange --activate "n" "crypt"
# close # close
cryptsetup luksClose 'crypt' cryptsetup luksClose "crypt"
} }