X-Git-Url: https://iankelling.org/git/?a=blobdiff_plain;ds=sidebyside;f=fai%2Fconfig%2Fscripts%2FGRUB_PC%2F11-iank;h=1234474396cab62da1f83b97e1c97b031b852636;hb=78a1427fc167ccee73d448054a9c40c19d737ed3;hp=3bb65ea27aa8d5c1bb1ff3c5bf6cee8c6ea67810;hpb=db2ca58c3e327f73b64189dec14cf7e7a01b6d34;p=automated-distro-installer diff --git a/fai/config/scripts/GRUB_PC/11-iank b/fai/config/scripts/GRUB_PC/11-iank index 3bb65ea..1234474 100755 --- a/fai/config/scripts/GRUB_PC/11-iank +++ b/fai/config/scripts/GRUB_PC/11-iank @@ -13,6 +13,7 @@ if ! type -t fcopy &>/dev/null; then fi chroot $FAI_ROOT bash <<'EOFOUTER' +set -eE -o pipefail if getent group systemd-journal >/dev/null; then # makes the journal be saved to disk. mkdir -p /var/log/journal @@ -57,7 +58,19 @@ fcopy -riBM /etc/apt # E: Could not get lock /var/lib/apt/lists/lock - open (11: Resource temporarily unavailable) # so add a sleep. 1 sec is probably way more than needed. sleep 1 -$ROOTCMD apt-get update +f=$FAI_ROOT/var/cache/apt/pkgcache.bin +if [[ ! -r $f ]] || (( $(( $(date +%s) - $(stat -c %Y $f ) )) > 60*60*2 )); then + i=0 + while fuser $FAI_ROOT/var/lib/dpkg/lock &>/dev/null; do + sleep 1 + i=$(( i+1 )) + if (( i > 300 )); then + echo "error: timed out waiting for /var/lib/dpkg/lock" >&2 + exit 1 + fi + $ROOTCMD apt-get update + done +fi chroot $FAI_ROOT bash <<'EOF' @@ -83,7 +96,11 @@ chmod 700 /root/.ssh dpkg-reconfigure -fnoninteractive resolvconf # default jessie groups + kvm, systemd-journal, adm -usermod -aG adm,cdrom,floppy,sudo,audio,dip,video,plugdev,netdev iank +for g in adm cdrom floppy sudo audio dip video plugdev netdev; do + if getent gropu $g >/dev/null; then + usermod -aG $g iank + fi +done if getent group systemd-journal >/dev/null; then usermod -aG systemd-journal iank @@ -99,9 +116,23 @@ EOF if [[ $FAI_ACTION != dirinstall ]]; then - cat >$FAI_ROOT/etc/grub.d/40_custom <<'EOF' + + # luks options, see man systemd-cryptsetup-generator + # all i know is that with luks.crypttab=no, swap still timed out on boot. + # and with rd.luks.crypttab=no, it works. + cmdline="rd.luks.crypttab=no console=ttyS0" + if ifclass LINODE; then + speed=19200 + cmdline+=",${speed}n8" + cmdline="rd.luks.crypttab=no console=ttyS0,${speed}n8" + else + speed=115200 + cmdline+=",${speed}n8 console=tty0" + fi + + cat >$FAI_ROOT/etc/grub.d/40_custom </etc/initramfs-tools/modules +update-initramfs -u -k all +EOF + fi fi # reading through the groups that iank is in but user2 isn't, for g in plugdev audio video cdrom; do - $ROOTCMD usermod -a -G $g user2 + $ROOTCMD usermod -a -G $g user2 done