X-Git-Url: https://iankelling.org/git/?a=blobdiff_plain;f=fai%2Fconfig%2Fscripts%2FGRUB_PC%2F11-iank;h=1234474396cab62da1f83b97e1c97b031b852636;hb=78a1427fc167ccee73d448054a9c40c19d737ed3;hp=7270d65902c34047432fa89a4176508d20df3ad4;hpb=11a2db1a576e78f58af7f1e7e4c83422635b630d;p=automated-distro-installer diff --git a/fai/config/scripts/GRUB_PC/11-iank b/fai/config/scripts/GRUB_PC/11-iank index 7270d65..1234474 100755 --- a/fai/config/scripts/GRUB_PC/11-iank +++ b/fai/config/scripts/GRUB_PC/11-iank @@ -13,6 +13,7 @@ if ! type -t fcopy &>/dev/null; then fi chroot $FAI_ROOT bash <<'EOFOUTER' +set -eE -o pipefail if getent group systemd-journal >/dev/null; then # makes the journal be saved to disk. mkdir -p /var/log/journal @@ -27,9 +28,9 @@ EOFOUTER # -r = recursive # -i = ignore non-matching class warnings, always exit 0 # -B = no backup files -fcopy -riB /boot +fcopy -riBM /boot # this is also done by FABASE/10-misc by default. -fcopy -riB /root +fcopy -riBM /root src=$FAI/distro-install-common/shadow @@ -42,7 +43,7 @@ fi $FAI/distro-install-common/end if ifclass VOL_STRETCH_BOOTSTRAP; then - fcopy -ri /etc/systemd/system + fcopy -riM /etc/systemd/system chroot $FAI_ROOT bash <<'EOFOUTER' systemctl enable fai_check.service EOFOUTER @@ -52,12 +53,24 @@ fi # these get copied in an earlier stage by fai, but leaving it here since # I run this as a single post-fai script to update things that have changed. -fcopy -riB /etc/apt +fcopy -riBM /etc/apt # outside of fai, this seems to regularly lead to # E: Could not get lock /var/lib/apt/lists/lock - open (11: Resource temporarily unavailable) # so add a sleep. 1 sec is probably way more than needed. sleep 1 -$ROOTCMD apt-get update +f=$FAI_ROOT/var/cache/apt/pkgcache.bin +if [[ ! -r $f ]] || (( $(( $(date +%s) - $(stat -c %Y $f ) )) > 60*60*2 )); then + i=0 + while fuser $FAI_ROOT/var/lib/dpkg/lock &>/dev/null; do + sleep 1 + i=$(( i+1 )) + if (( i > 300 )); then + echo "error: timed out waiting for /var/lib/dpkg/lock" >&2 + exit 1 + fi + $ROOTCMD apt-get update + done +fi chroot $FAI_ROOT bash <<'EOF' @@ -83,7 +96,11 @@ chmod 700 /root/.ssh dpkg-reconfigure -fnoninteractive resolvconf # default jessie groups + kvm, systemd-journal, adm -usermod -aG adm,cdrom,floppy,sudo,audio,dip,video,plugdev,netdev iank +for g in adm cdrom floppy sudo audio dip video plugdev netdev; do + if getent gropu $g >/dev/null; then + usermod -aG $g iank + fi +done if getent group systemd-journal >/dev/null; then usermod -aG systemd-journal iank @@ -99,9 +116,23 @@ EOF if [[ $FAI_ACTION != dirinstall ]]; then - cat >$FAI_ROOT/etc/grub.d/40_custom <<'EOF' + + # luks options, see man systemd-cryptsetup-generator + # all i know is that with luks.crypttab=no, swap still timed out on boot. + # and with rd.luks.crypttab=no, it works. + cmdline="rd.luks.crypttab=no console=ttyS0" + if ifclass LINODE; then + speed=19200 + cmdline+=",${speed}n8" + cmdline="rd.luks.crypttab=no console=ttyS0,${speed}n8" + else + speed=115200 + cmdline+=",${speed}n8 console=tty0" + fi + + cat >$FAI_ROOT/etc/grub.d/40_custom </etc/initramfs-tools/modules +update-initramfs -u -k all +EOF + fi fi -# reading through the groups that iank is in but traci isn't, +# reading through the groups that iank is in but user2 isn't, for g in plugdev audio video cdrom; do - $ROOTCMD usermod -a -G $g traci + $ROOTCMD usermod -a -G $g user2 done