indent
This commit is contained in:
parent
0ffbf27412
commit
801f3b859c
GPG key ID:
9C7613450C80C24F
1 changed files with 138 additions and 138 deletions
|
|
@ -1,9 +1,9 @@
|
||||||
#! /usr/bin/env sh
|
#! /usr/bin/env sh
|
||||||
|
|
||||||
ovh_rescue_configure() {
|
ovh_rescue_configure() {
|
||||||
local host="${1}"
|
local host="${1}"
|
||||||
# apt / conf
|
# apt / conf
|
||||||
printf "\
|
printf "\
|
||||||
Acquire::AllowInsecureRepositories False;
|
Acquire::AllowInsecureRepositories False;
|
||||||
Acquire::AllowWeakRepositories False;
|
Acquire::AllowWeakRepositories False;
|
||||||
Acquire::AllowDowngradeToInsecureRepositories False;
|
Acquire::AllowDowngradeToInsecureRepositories False;
|
||||||
|
|
@ -14,162 +14,162 @@ APT::Get::Show-Versions True;
|
||||||
Dir::Etc::SourceParts '';
|
Dir::Etc::SourceParts '';
|
||||||
Dpkg::Progress True;
|
Dpkg::Progress True;
|
||||||
" > "/etc/apt/apt.conf"
|
" > "/etc/apt/apt.conf"
|
||||||
# apt / sources
|
# apt / sources
|
||||||
printf "\
|
printf "\
|
||||||
deb https://deb.debian.org/debian buster main contrib non-free
|
deb https://deb.debian.org/debian buster main contrib non-free
|
||||||
deb https://deb.debian.org/debian buster-backports main contrib non-free
|
deb https://deb.debian.org/debian buster-backports main contrib non-free
|
||||||
deb https://deb.debian.org/debian buster-updates main contrib non-free
|
deb https://deb.debian.org/debian buster-updates main contrib non-free
|
||||||
deb https://deb.debian.org/debian-security buster/updates main contrib non-free
|
deb https://deb.debian.org/debian-security buster/updates main contrib non-free
|
||||||
" > "/etc/apt/sources.list"
|
" > "/etc/apt/sources.list"
|
||||||
# bash / rc
|
# bash / rc
|
||||||
main_link_bashrc
|
main_link_bashrc
|
||||||
# host name
|
# host name
|
||||||
hostname "${host}"
|
hostname "${host}"
|
||||||
# locales
|
# locales
|
||||||
printf "\
|
printf "\
|
||||||
en_US.UTF-8 UTF-8
|
en_US.UTF-8 UTF-8
|
||||||
fr_FR.UTF-8 UTF-8
|
fr_FR.UTF-8 UTF-8
|
||||||
" > '/etc/locale.gen'
|
" > '/etc/locale.gen'
|
||||||
# fix alias
|
# fix alias
|
||||||
rm --force "/usr/share/locale/locale.alias"
|
rm --force "/usr/share/locale/locale.alias"
|
||||||
ln --symbolic "/etc/locale.alias" "/usr/share/locale/locale.alias"
|
ln --symbolic "/etc/locale.alias" "/usr/share/locale/locale.alias"
|
||||||
# generate locales
|
# generate locales
|
||||||
locale-gen
|
locale-gen
|
||||||
# update catalog
|
# update catalog
|
||||||
apt-get update
|
apt-get update
|
||||||
#
|
#
|
||||||
debian_disable_frontend
|
debian_disable_frontend
|
||||||
# install packages
|
# install packages
|
||||||
apt-get install --assume-yes \
|
apt-get install --assume-yes \
|
||||||
"byobu" \
|
"byobu" \
|
||||||
"mosh"
|
"mosh"
|
||||||
#
|
#
|
||||||
apt_clean_cache
|
apt_clean_cache
|
||||||
}
|
}
|
||||||
|
|
||||||
ovh_rescue_install() {
|
ovh_rescue_install() {
|
||||||
local release="buster"
|
local release="buster"
|
||||||
# update catalog
|
# update catalog
|
||||||
apt-get update
|
apt-get update
|
||||||
#
|
#
|
||||||
debian_disable_frontend
|
debian_disable_frontend
|
||||||
# upgrade packages
|
# upgrade packages
|
||||||
apt-get upgrade --assume-yes
|
apt-get upgrade --assume-yes
|
||||||
#
|
#
|
||||||
apt_clean_cache
|
apt_clean_cache
|
||||||
# install packages
|
# install packages
|
||||||
apt-get install --assume-yes \
|
apt-get install --assume-yes \
|
||||||
"parted" "mdadm" "lvm2" \
|
"parted" "mdadm" "lvm2" \
|
||||||
\
|
\
|
||||||
"lshw" \
|
"lshw" \
|
||||||
"file" "micro" \
|
"file" "micro" \
|
||||||
"grub-efi-amd64-bin" "grub-pc-bin" \
|
"grub-efi-amd64-bin" "grub-pc-bin" \
|
||||||
"htop" "iotop" "lsof" \
|
"htop" "iotop" "lsof" \
|
||||||
"exa" "ncdu" "nnn" "ranger" "tree" \
|
"exa" "ncdu" "nnn" "ranger" "tree" \
|
||||||
"squashfs-tools" \
|
"squashfs-tools" \
|
||||||
"uuid-runtime"
|
"uuid-runtime"
|
||||||
#
|
#
|
||||||
apt_clean_cache
|
apt_clean_cache
|
||||||
# install backports
|
# install backports
|
||||||
apt-get install --assume-yes \
|
apt-get install --assume-yes \
|
||||||
--target-release "${release}-backports" \
|
--target-release "${release}-backports" \
|
||||||
"cryptsetup-bin" "rsync" \
|
"cryptsetup-bin" "rsync" \
|
||||||
\
|
\
|
||||||
"git"
|
"git"
|
||||||
#
|
#
|
||||||
apt_clean_cache
|
apt_clean_cache
|
||||||
}
|
}
|
||||||
|
|
||||||
ovh_rescue_upload() {
|
ovh_rescue_upload() {
|
||||||
local host="${1}"
|
local host="${1}"
|
||||||
if [ "${host}" ] ; then
|
if [ "${host}" ] ; then
|
||||||
local user="root"
|
local user="root"
|
||||||
#
|
#
|
||||||
local user_host="${user}@${host}"
|
local user_host="${user}@${host}"
|
||||||
# remove fingerprints
|
# remove fingerprints
|
||||||
ssh-keygen -R "${host}"
|
ssh-keygen -R "${host}"
|
||||||
# copy ssh id
|
# copy ssh id
|
||||||
ssh-copy-id \
|
ssh-copy-id \
|
||||||
-o "StrictHostKeyChecking=accept-new" \
|
-o "StrictHostKeyChecking=accept-new" \
|
||||||
"${user_host}"
|
"${user_host}"
|
||||||
# upload root
|
# upload root
|
||||||
rsync --delete --recursive "${MAIN_BASH_ROOT}/" "${user_host}:/etc/bash/"
|
rsync --delete --recursive "${MAIN_BASH_ROOT}/" "${user_host}:/etc/bash/"
|
||||||
# call setup
|
# call setup
|
||||||
# TODO variable
|
# TODO variable
|
||||||
ssh "${user_host}" -- \
|
ssh "${user_host}" -- \
|
||||||
"source \"/etc/bash/main.sh\" ; ovh-rescue-configure \"${host}\""
|
"source \"/etc/bash/main.sh\" ; ovh-rescue-configure \"${host}\""
|
||||||
# create session
|
# create session
|
||||||
ssh "${user_host}" -- byobu new-session -d
|
ssh "${user_host}" -- byobu new-session -d
|
||||||
# send keys
|
# send keys
|
||||||
ssh "${user_host}" -- byobu send-keys "ovh-rescue-install" "C-m"
|
ssh "${user_host}" -- byobu send-keys "ovh-rescue-install" "C-m"
|
||||||
# attach session
|
# attach session
|
||||||
mosh "${user_host}" -- byobu attach-session
|
mosh "${user_host}" -- byobu attach-session
|
||||||
else
|
else
|
||||||
echo 'Host?'
|
echo 'Host?'
|
||||||
return 1
|
return 1
|
||||||
fi
|
fi
|
||||||
}
|
}
|
||||||
|
|
||||||
ovh_rescue_wipe_1_2TB() {
|
ovh_rescue_wipe_1_2TB() {
|
||||||
local device="/dev/sda"
|
local device="/dev/sda"
|
||||||
local unit="mib"
|
local unit="mib"
|
||||||
#
|
#
|
||||||
lsblk
|
lsblk
|
||||||
printf "%s" "WIPE ${device} /?\\ OR CANCEL /!\\"
|
printf "%s" "WIPE ${device} /?\\ OR CANCEL /!\\"
|
||||||
read -r
|
read -r
|
||||||
#
|
#
|
||||||
parted "${device}" --script mktable gpt
|
parted "${device}" --script mktable gpt
|
||||||
#
|
#
|
||||||
parted "${device}" unit "${unit}" mkpart "crypt" 65795 1907729
|
parted "${device}" unit "${unit}" mkpart "crypt" 65795 1907729
|
||||||
#
|
#
|
||||||
parted "${device}" unit "${unit}" mkpart "boot" 259 65795
|
parted "${device}" unit "${unit}" mkpart "boot" 259 65795
|
||||||
#
|
#
|
||||||
parted "${device}" unit "${unit}" mkpart "esp" 2 259
|
parted "${device}" unit "${unit}" mkpart "esp" 2 259
|
||||||
parted "${device}" set 3 esp on
|
parted "${device}" set 3 esp on
|
||||||
#
|
#
|
||||||
parted "${device}" unit "${unit}" mkpart bios 1 2
|
parted "${device}" unit "${unit}" mkpart bios 1 2
|
||||||
parted "${device}" set 4 bios_grub on
|
parted "${device}" set 4 bios_grub on
|
||||||
# wipe bios
|
# wipe bios
|
||||||
dd if="/dev/zero" of="/dev/sda4"
|
dd if="/dev/zero" of="/dev/sda4"
|
||||||
# format esp
|
# format esp
|
||||||
mkfs.vfat -F 32 -n "esp" "/dev/sda3"
|
mkfs.vfat -F 32 -n "esp" "/dev/sda3"
|
||||||
# format boot
|
# format boot
|
||||||
mkfs.ext4 -F -L "boot" "/dev/sda2"
|
mkfs.ext4 -F -L "boot" "/dev/sda2"
|
||||||
# read passphrase
|
# read passphrase
|
||||||
local passphrase
|
local passphrase
|
||||||
printf "PassPhrase: "
|
printf "PassPhrase: "
|
||||||
read -r -s passphrase
|
read -r -s passphrase
|
||||||
# encrypt
|
# encrypt
|
||||||
echo "${passphrase}" \
|
echo "${passphrase}" \
|
||||||
| cryptsetup \
|
| cryptsetup \
|
||||||
--verbose \
|
--verbose \
|
||||||
--batch-mode \
|
--batch-mode \
|
||||||
--type "luks2" \
|
--type "luks2" \
|
||||||
--pbkdf "argon2id" \
|
--pbkdf "argon2id" \
|
||||||
--cipher "aes-xts-plain64" \
|
--cipher "aes-xts-plain64" \
|
||||||
--iter-time 8192 \
|
--iter-time 8192 \
|
||||||
--key-size 512 \
|
--key-size 512 \
|
||||||
--hash "sha512" \
|
--hash "sha512" \
|
||||||
--use-random \
|
--use-random \
|
||||||
luksFormat \
|
luksFormat \
|
||||||
"/dev/sda1"
|
"/dev/sda1"
|
||||||
# open
|
# open
|
||||||
echo "${passphrase}" \
|
echo "${passphrase}" \
|
||||||
| cryptsetup luksOpen "/dev/sda1" "crypt"
|
| cryptsetup luksOpen "/dev/sda1" "crypt"
|
||||||
# pv
|
# pv
|
||||||
pvcreate "/dev/mapper/crypt"
|
pvcreate "/dev/mapper/crypt"
|
||||||
# vg
|
# vg
|
||||||
vgcreate "crypt" "/dev/mapper/crypt"
|
vgcreate "crypt" "/dev/mapper/crypt"
|
||||||
# lv swap
|
# lv swap
|
||||||
lvcreate --name "swap" --size "68719476736b" "crypt"
|
lvcreate --name "swap" --size "68719476736b" "crypt"
|
||||||
# lv data
|
# lv data
|
||||||
lvcreate --name "data" --extents "100%FREE" "crypt"
|
lvcreate --name "data" --extents "100%FREE" "crypt"
|
||||||
# format swap
|
# format swap
|
||||||
mkswap --label "swap" "/dev/mapper/crypt-swap"
|
mkswap --label "swap" "/dev/mapper/crypt-swap"
|
||||||
# format data
|
# format data
|
||||||
mkfs.ext4 -L "data" "/dev/mapper/crypt-data"
|
mkfs.ext4 -L "data" "/dev/mapper/crypt-data"
|
||||||
# vg off
|
# vg off
|
||||||
vgchange --activate "n" "crypt"
|
vgchange --activate "n" "crypt"
|
||||||
# close
|
# close
|
||||||
cryptsetup luksClose "crypt"
|
cryptsetup luksClose "crypt"
|
||||||
}
|
}
|
||||||
|
|
|
||||||
Loading…
Reference in a new issue