2 # Copyright (C) 2016 Ian Kelling
4 # This program is free software; you can redistribute it and/or
5 # modify it under the terms of the GNU General Public License
6 # as published by the Free Software Foundation; either version 2
7 # of the License, or (at your option) any later version.
9 # This program is distributed in the hope that it will be useful,
10 # but WITHOUT ANY WARRANTY; without even the implied warranty of
11 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
12 # GNU General Public License for more details.
14 # You should have received a copy of the GNU General Public License
15 # along with this program; if not, write to the Free Software
16 # Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
18 trap 'echo "$0:$LINENO:error: \"$BASH_COMMAND\" returned $?" >&2' ERR
20 # note, when I did genfstab, i
21 # neeeded to to do for x in mv /etc/*.pacorig; do mv $x ${x%.pacorig}; done
25 [[ -L /etc
/localtime
]] ||
ln -s /usr
/share
/zoneinfo
/America
/Los_Angeles
/etc
/localtime
27 echo "$l UTF-8" > /etc
/locale.gen
29 echo "LANG=$l" > /etc
/locale.conf
30 # if coming from windows, and you had to set the time, do this
31 # hwclock --systohc --utc
33 # A password is required to access the volume:
34 # Command requires device and ampped name as arguments
36 # If we were using btrfs raid, we supposedly would need this.
37 # # add btrfs as module instead of hook due to
38 # # https://wiki.archlinux.org/index.php/Btrfs,
39 # # https://bugs.archlinux.org/task/42884
40 # # disabled, as with just the module, startup spammed something about
41 # # command takes a device name and something else.
42 # sed -ri --follow-symlinks '/^ *MODULES *=.*btrfs/!s/^( *MODULES *=.*)"/\1 btrfs"/' /etc/mkinitcpio.conf
43 # # remove extra space
44 # sed -ri --follow-symlinks 's/^( *MODULES *=[^"]*)" */\1"/' /etc/mkinitcpio.conf
49 # for desktop without full fs encryption, use this:
50 #cat > /etc/crypttab <<'EOF'
51 #tmp /dev/lvm/tmp /dev/urandom tmp,cipher=aes-xts-plain64,size=256
53 # otgherwise ERROR: file not found: `fsck.btrfs'
54 pacman
-S --noconfirm btrfs-progs
56 pacman
-S --noconfirm grub gptfdisk
62 # https://wiki.archlinux.org/index.php/Dm-crypt/System_configuration#Boot_loader
63 # if cryptdevice was lvm, it woulde be in this format,
64 # where x2-vg is from lvdisplay, VG Name field.
65 # cryptdevice=/dev/disk/by-uuid/585dff23-136f-446f-815f-01053b70c957:x2-vg
66 # but, if you are using your own fstab, it seems you just give it a name,
67 # which will be the crypt device name under /dev/mapper/
68 # https://wiki.archlinux.org/index.php/GRUB#Additional_arguments
71 root_devs
=( ${ROOT_PARTITIONS} )
72 first_root_dev
=${root_devs[0]}
76 cryptdevices
=${ROOT_PARTITIONS// /,}
77 root
=/dev
/mapper
/crypt_dev_
${first_root_dev##*/}
78 resume
=${first_root_dev%[0-9]}$swapn
82 # If we have more than 1 to decrypt, arch wiki lead me onto
83 # a sort of hacky way run the encrypt hook multiple times.
85 # https://wiki.archlinux.org/index.php/Dm-crypt/Encrypting_an_entire_system#Configuring_mkinitcpio_2
86 # used to have lvm2 after encrypt for lvm, but not using lvm anymore
87 for x
in encrypt btrfs
; do
88 sed -ri --follow-symlinks -f - /etc
/mkinitcpio.conf
<<EOF
89 /^ *HOOKS.*\b$x\b/!s/^( *HOOKS=.*)filesystems/\1$x filesystems/
93 # this is the default file, otherwise you use cryptkey=device:fstype:path
94 sed -ri --follow-symlinks -f - /etc
/mkinitcpio.conf
<<EOF
95 s#^\s*FILES=.*#FILES="/crypto_keyfile.bin"#
98 grep FILES
/etc
/mkinitcpio.conf
99 echo "$0: grub cmdline additions: ${k_args[*]}"
100 sed -ri --follow-symlinks -f - /etc
/default
/grub
<<EOF
101 \%${k_args[*]}%!s%^ *GRUB_CMDLINE_LINUX_DEFAULT *= *"%\0${k_args[*]} %
107 # remove the default quiet arg.
108 # this doesn't seem to affect anything, so leave it alone.
109 #sed -ri --follow-symlinks 's/^( *GRUB_CMDLINE_LINUX_DEFAULT *= *.*) ?\bquiet\b(.*)/\1\2/' /etc/default/grub
111 # https://wiki.archlinux.org/index.php/GRUB#Install_to_disk
112 for dev
in $BOOT_DEVICE; do
113 grub-install
--recheck $dev
115 grub-mkconfig
-o /boot
/grub
/grub.cfg
116 # gtk2 is an optional dependency of unison.
117 # I know Im gonna want the gui, so just doing it now.
118 pacman
-S --noconfirm openssh rsync
121 pacman
-S --noconfirm sudo
123 .
/a
/bin
/fai
/fai-wrapper
124 /a
/bin
/fai
/fai
/config
/distro-install-common
/end
125 systemctl
enable sshd
127 rm -rf /home
/iank
/.
ssh
128 cp -r /root
/.
ssh /home
/iank
129 chown
-R iank
:iank
/home
/iank
/.
ssh
130 # the groups recommended by
131 # https://wiki.archlinux.org/index.php/Users_and_groups#Group_list
132 usermod
-aG games
,rfkill
,users
,uucp,wheel iank
135 pacman
-S --noconfirm net-tools
# for route
136 # get the mac of the interface used by the broadcast route.
137 mac
=$
(cat /sys
/class
/net
/$
(route
-n |
sed -rn 's/^0\.0\.0\.0.*[[:space:]]([^[:space:]]+)[[:space:]]*$/\1/p')/address
)
141 cat > /etc
/systemd
/network
/wired.network
<<EOF
149 cat > /etc
/systemd
/network
/br0.network
<<EOF
157 cat > /etc
/systemd
/network
/br0.netdev
<<EOF
161 # use the same mac as the physical port,
162 # which is mapped to a static ip in our dhcp server.
169 for x
in networkd resolved
; do systemctl
enable systemd-
$x; done