X-Git-Url: https://iankelling.org/git/?a=blobdiff_plain;f=fai%2Fconfig%2Fhooks%2Finstsoft.DEFAULT;h=bdcaab13fe2b39ee1831c1b72dd2991dbbddff9e;hb=ee37d990c89bb3bab1b54e3b3fb43e9f79ed039b;hp=ab6e213617f02f65094b554d2f41e4a8da3b2c11;hpb=ce5290b5a6eee95cc59b5c1651d73a224c3d5bbd;p=automated-distro-installer diff --git a/fai/config/hooks/instsoft.DEFAULT b/fai/config/hooks/instsoft.DEFAULT index ab6e213..bdcaab1 100755 --- a/fai/config/hooks/instsoft.DEFAULT +++ b/fai/config/hooks/instsoft.DEFAULT @@ -1,8 +1,10 @@ #!/bin/bash -# exit for any vm which is not our test vm -if ifclass VM && ! ifclass demohost; then - exit 0 +# These are things we can do before package_config packages get installed. + +# exit for any vm except demohost, or if we are doing a dirinstall +if ifclass VM && ! ifclass demohost || ifclass VOL_STRETCH_BOOTSTRAP || [[ ! $FAI_ACTION || $FAI_ACTION = dirinstall ]]; then + exit 0 fi keyfile=/var/lib/fai/config/distro-install-common/luks/host-$HOSTNAME @@ -13,33 +15,30 @@ cat <<'EOF' $(cat $keyfile) EOF EOFOUTER -chmod +x $f - +chmod 700 $f -crypt_dev=(/dev/mapper/crypt_dev_?da3) -crypt_dev=${crypt_dev[0]} -crypt_name=${crypt_dev##/dev/mapper/} -dev=(/dev/?da3) -dev=${dev[0]} -dd if=$keyfile of=$crypt_dev - -f=$target/root/keyscript-manual -cat >$f <<'EOF' -#!/bin/sh -if ! [ -e /tmp/key ]; then - stty -echo - read pass - printf '%s' "$pass" > /tmp/key +# for hosts which don't have these data volumes, copy the specific +# files we need. +if ifclass demohost; then + files=(/var/lib/fai/config/distro-install-common/luks/host-demohost) +elif ifclass tp; then + files=(/var/lib/fai/config/distro-install-common/luks/host-{tp,demohost}) +fi +if [[ ${files[0]} ]]; then + d=$target/q/root/luks + mkdir -p $d + chmod 700 $d + cp -p ${files[@]} $d fi -cat /tmp/key -EOF -chmod +x $f -if ifclass tp; then - d=$target/root/shadow - mkdir -p $d - ls -la /var/lib/fai/config/distro-install-common - cp /var/lib/fai/config/distro-install-common/traci{,-simple} $d -fi +#### this bit is duplicated in rootsshsync +f=/var/lib/fai/config/files/root/.ssh/authorized_keys/STANDARD +d=$target/etc/initramfs-tools +d2=$target/etc/dropbear-initramfs +mkdir -p $d/root/.ssh $d2 +chmod 700 $d/root $d/root/.ssh +# i think buster uses the second, flidas uses the first. +cp -p $f $d/root/.ssh/authorized_keys +cp -p $f $d2/authorized_keys