X-Git-Url: https://iankelling.org/git/?a=blobdiff_plain;f=fai%2Fconfig%2Fdistro-install-common%2Fend;h=e764c32ea67367e21a887e518926694071f999d3;hb=cef9b6ede5c1e028bed1b4dc7895f5dfa121ad6b;hp=3948073df0ec311cbc01bc9efe63e52011b3409a;hpb=8d5ef1a7a61d7475823452f47f5b4cd7a06722e8;p=automated-distro-installer diff --git a/fai/config/distro-install-common/end b/fai/config/distro-install-common/end index 3948073..e764c32 100755 --- a/fai/config/distro-install-common/end +++ b/fai/config/distro-install-common/end @@ -4,46 +4,46 @@ set -eE -o pipefail trap 'echo "$0:$LINENO:error: \"$BASH_COMMAND\" returned $?" >&2' ERR if [[ $EUID != 0 ]]; then - echo "$0: error: expected to be root." - exit 1 + echo "$0: error: expected to be root." + exit 1 fi # ssh host keys # note, $BASH_SOURCE is not defined here under fai. + src=$(dirname "$0")/p/c/machine_specific/$HOSTNAME/filesystem/etc/ssh dst=$target/etc/ssh if [[ -e $src && -e $dst ]]; then - # outside of fai context, we skip this - cp -rT $src $dst + # outside of fai context or setting up a brand new host, we skip this + cp -rT $src $dst fi -TPW=/q/root/shadow/traci-simple -if ifclass tp; then - ROOTPW=/q/root/shadow/standard -# ROOTPW="$TPW" -else - ROOTPW=/q/root/shadow/standard +USER2PW=/q/root/shadow/user2 +# if doesn't exist, we dont set one +ROOTPW=/q/root/shadow/standard +if [[ ! -e $ROOTPW ]]; then + ROOTPW=/q/root/shadow/$HOSTNAME fi chpw() { - # generating a hashed password: - # under debian, you can do - # mkpasswd -m sha-512 -s >/q/root/shadow/standard - # On arch, best seems to be copy your shadow file to a temp location, - # then passwd, get out the new pass, then copy the shadow file back. - - user=$1 - pwfile=$2 - if [[ $pwfile && -e $pwfile ]]; then - printf "$user:" | cat - "$pwfile" | $ROOTCMD chpasswd -e - else - echo "$0: warning: no pw set for $user" >&2 - fi + # generating a hashed password: + # under debian, you can do + # mkpasswd -m sha-512 -s >/q/root/shadow/standard + # On arch, best seems to be copy your shadow file to a temp location, + # then passwd, get out the new pass, then copy the shadow file back. + + user=$1 + pwfile=$2 + if [[ $pwfile && -e $pwfile ]]; then + printf "$user:" | cat - "$pwfile" | $ROOTCMD chpasswd -e + else + echo "$0: warning: no pw set for $user" >&2 + fi } au() { # add user. i don't use adduser for portability - if ! $ROOTCMD getent passwd ${@: -1}; then - $ROOTCMD useradd -Um -s /bin/bash $@ - fi + if ! $ROOTCMD getent passwd ${@: -1}; then + $ROOTCMD useradd -Um -s /bin/bash $@ + fi } chpw root "$ROOTPW" @@ -58,12 +58,13 @@ fi au iank chpw iank "$ROOTPW" -au traci +au user2 if ifclass frodo; then - chpw traci "$TPW" + chpw user2 "$USER2PW" fi -# comparing iank's groups to traci, I see none she should join on arch -$ROOTCMD usermod -a -G traci iank +# comparing iank's groups to user2, I see none she should join on arch +$ROOTCMD usermod -a -G user2 iank + $ROOTCMD getent group docker &>/dev/null || $ROOTCMD groupadd -r docker $ROOTCMD usermod -a -G docker iank @@ -71,33 +72,18 @@ $ROOTCMD usermod -a -G docker iank # based on unison error, with 8192 from # sysctl -a | grep fs.inotify.max_user_watches #http://stackoverflow.com/questions/535768/what-is-a-reasonable-amount-of-inotify-watches-with-linux - f=$target/etc/sysctl.d/99-sysctl.conf key=fs.inotify.max_user_watches if [[ -e $f ]]; then sed -ri --follow-symlinks "/^\s*$key\s*=/d" $f; fi -echo "fs.inotify.max_user_watches = 1000000" >> $f +echo "fs.inotify.max_user_watches = 50000" >> $f # applies it. it would be also be applied after a reboot $ROOTCMD sysctl --system f=$target/etc/sudoers line='iank ALL=(ALL) NOPASSWD: ALL' if [[ ! -e $f ]] || ! grep -xF "$line" $f; then - echo "$line" >> $f -fi - -dir=/p/c/machine_specific/$HOSTNAME/.unison -$ROOTCMD mkdir -p $dir -if ! $ROOTCMD test -L /root/.unison; then - $ROOTCMD rm -rf /root/.unison - $ROOTCMD ln -s -T $dir /root/.unison + echo "$line" >> $f fi -$ROOTCMD chown -R 1000:1000 $dir -while true; do - $ROOTCMD chown 1000:1000 $dir - $ROOTCMD chmod 700 $dir - dir=$(dirname $dir) - if [[ $dir == /p ]]; then break; fi -done au --system -s /bin/false --home-dir /var/lib/bitcoind bitcoin