#!/bin/bash -l
# Copyright (C) 2016 Ian Kelling
# This program is under GPL v. 3 or later, see
# for bootstrapping a new machine
# to make ssh run better, first run this:
sudo bash -c 'source /a/c/repos/bash/.bashrc && source /a/bin/ssh-emacs-setup'
# see t.org for OS installer notes
# usage: $0 [OPTIONS] HOSTNAME
# tips:
# run any sudo command first so your pass is cached
# set the scrollback to unlimited in case something goes wrong
if [[ $EUID == 0 ]]; then
echo error: do not run as root
exit
fi
interactive=true # set this to true if running by hand in emacs
[[ $- == *i* ]] || interactive=false
if ! $interactive; then
set -x
set -e -o pipefail
fi
set -E
trap 'echo "$0:$LINENO:error: \"$BASH_COMMAND\" returned $?"' ERR
headless=false
debian_stable=false
recompile=true
# for copying to a new data fs
bootstrapfs=false
while [[ $1 == -* ]]; do
case $1 in
# avoid some of the longer compilation steps,
# when we need to rerun because we had an error
-n) recompile=false; shift ;;
-b) boostrap_new_comp=true; shift ;;
esac
done
if [[ $1 ]]; then
host=$1
else
host=$HOSTNAME
fi
for f in iank-dev htpc treetowl x2 frodo; do
eval "$f() { [[ $host == $f ]]; }"
done
encrypted() { iank-dev || x2 || frodo ; }
shopt -s extglob
export GLOBIGNORE=*/.:*/..
umask 0002
####### end command line parsing
if frodo; then
x=/usr/local/bin/iancryptsetup
sudo dd of=$x <<'EOF'
#!/bin/bash -x
# man systemd-cryptsetup-generator
#man systemd-cryptsetup
#man systemd-cryptsetup@.service
f=/tmp/iancryptsetup
ssh -oStrictHostKeyChecking=no -oUserKnownHostsFile=/dev/null \
-T -i /p/cryptkeyssh/id_rsa ian@treetowl > $f || exit 0
# example of initial setup of a disk
#disk=/dev/sdg2
#echo YES|cryptsetup --verbose luksFormat $disk $f
## copy $f into paste buffer, then enter memorized pass, which we can use
## This is for the case of ssh not being available
#cryptsetup --verbose --verify-passphrase luksAddKey $disk
# initial keyfile can be generated like any random pass
# head -c 200 /dev/urandom | tr -cd '[:alnum:]' | head -c 80 > keyfile
data=(
b1d7f102-c7cd-40a0-bff0-2d498692b5a7 crypta7
80649f08-1977-441b-ad8f-246931571702 crypt02
3ae71d1a-dbd5-4cbe-afa2-c7529c0c4d31 crypt31
bd4bbf8e-35c1-48e5-bb15-106c1b47792b crypt2b
c061a929-54fe-4a47-939d-c008ba418246 crypt46
ec709a4b-1ba7-463f-a1cd-841cb40868f0 cryptf0
b9f2a980-f57c-4c58-9313-055da09d579c crypt9c
747b9932-aa98-4552-86ab-657d0ccd4fb0 cryptb0
afb44dd6-28ba-443b-9ca4-34dc2a95a213 crypt13
)
for ((i=0; i<${#data[@]}; i+=2)); do
cryptsetup luksOpen --key-file $f UUID=${data[i]} ${data[i+1]}
done
for x in a q /mnt/btrfs_root; do
mount /$x
done
#/a/bin/firefox-link
exit 0
EOF
sudo chmod +x $x
# todo, it needs to wait for networking
sudo dd of=/etc/systemd/system/iancrypt.service <<'EOF'
[Unit]
Description=iancrypt
[Service]
Type=oneshot
ExecStart=/usr/local/bin/iancryptsetup
[Install]
WantedBy=multi-user.target
EOF
sudo systemctl enable iancrypt.service
sudo systemctl restart iancrypt.service
fi
if iank-dev; then
desktop=$(ssh root@iankelling.org grep desktop /etc/hosts | grep -o "^.* ")
if $bootstrapfs; then
# for bootstrapping at a new job:
cp="scp $desktop:"
# for moving to a new hd, change $cp to move between filesystems
mkdir -p /a/bin
chown -R ian:ian /a
$cp/a/c /a
$cp/a/c/bin/{bash-programs-by-ian,distro-begin,distro-functions,input-setup.sh} /a/bin
echo -e \\n\\n\\n | ssh-keygen -t rsa
fi
fi
# example which will be usefull when redoing desktop
# if x2; then
# f=/etc/fstab
# line='/dev/mapper/fedora-a /a btrfs noatime 0 1'
# if ! grep -Fxq "$line" $f; then
# echo "$line" | sudo tee -a $f >/dev/null
# fi
# if ! mount | grep -q '^/dev/mapper/fedora-a'; then
# dir=/a
# sudo mkdir -p $dir
# sudo chown ian:ian $dir
# sudo mount $dir
# fi
# fi
# set noatime.
sudo sed -ri '/noatime/!s/(ext[234]|btrfs)[[:space:]]+/\1 noatime,/' /etc/fstab
sudo sed -ri '/noatime/s/relatime,?|defaults,?//g' /etc/fstab
# this script has been designed to be idempotent
# todo, it would be nice to cut down on some of the output
for x in /a/bin/bash-programs-by-ian/repos/{errhandle,tee-unique,lnf}/*-function; do
source $x;
done
set +e
$interactive || errcatch
source /a/bin/distro-functions/src/identify-distros
echo path:$PATH
if isfedora; then
# comment out line disallowing calling sudo in scripts
sudo sed -i 's/^Defaults *requiretty/#\0 # ian commented/' /etc/sudoers
# turn on magic sysrq commands for this boot cycle
echo 1 > sudo dd of=/proc/sys/kernel/sysrq
# selinux is not user friendly. Like, you enable samba, but you haven't run the magic selinux commands so it doesn't work
# and you have no idea why.
sudo sed -i 's/^\(SELINUX=\).*/\1disabled/' /etc/selinux/config
selinuxenabled && sudo setenforce 0
fi
# link files
lnf /a/c/* /a/bin ~
for x in /a/c/repos/bash/!(.git); do
lnf "$x" ~
sudo -i <$x
sudo dd of=/etc/pacman.conf if=$x; rm $x
sudo systemctl enable pacserve.service
sudo systemctl start pacserve.service
fi
pup
# strange error if just installing trash-cli: "pyalpm requires python",
# so I see that it requires python2, and installing that manually fixes it.
# I didn't see this on earlier installation, main thing which changed was
# pacserve, so not sure if it's related.
pi python2 trash-cli
###### link files ###########
# convenient to just do all file linking in one place
lnf /a/* ~
s lnf /a/sdx{,d} /
# if it wasn't set already, we could set hostname here
#echo treetowl | s dd of=/etc/hostname
#s hostname -F /etc/hostname
#HOSTNAME=$(hostname)
#########################################
# NOTE: only /a needs to be mounted for creating links!
###########################################
# todo: this is desktop specific. on work comp, mkdir /p/.editor-backups
# todo: reconcile ~/.ssh/config work/home
if encrypted; then
lnf -T /p/offlineimap ~/Maildir
lnf -T /p/News ~/News
s lnf -T /q/p /p
# don't use /* because I don't want to require it to be mounted
s lnf /q/root/.editor-backups /q/root/.undo-tree-history \
/q/root/.ssh /q/root/sasl_passwd /q/root/sasl_passwd.db /a/opt \
/a/c/.emacs.d ~/.unison /root
fi
for x in /a/c/repos/*/!(.git); do
[[ $x == */. || $x == */.. ]] && continue # workaround for ubuntu 14.04 bug
lnf "$x" ~
done
s lnf /a/c/.inputrc /a/c/.vim /a/c/.vimrc /a/c/.gvimrc /root
if [[ $HOSTNAME == htpc ]]; then
lnf -T /i/Videos ~/Downloads
fi
if encrypted; then
# for dovecot
lnf -T /i/mboxes ~/mail
fi
# basic needed packages
case $(distro-name) in
debian)
pi $( $debian_stable && e -t $code-backports ) iceweasel \
linux-image-amd64 firmware-linux-nonfree \
firmware-linux-free linux-headers-amd64
;;&
ubuntu|debian)
pi xmacro gtk-redshift xinput
;;&
fedora)
p -y groupinstall development-tools c-development books admin-tools
pi redshift-gtk
# debian has this package patched to work, upstream is dead
# tried using alien, pi alien, alien -r *.deb, rpm -Uhv *.rpm, got this error, so fuck it
# file /usr/bin from install of xmacro-0.3pre_20000911-7.x86_64 conflicts with file from package filesystem-3.2-19.fc20.x86_64
# http://packages.debian.org/source/sid/xmacro
pi patch libXtst-devel wget man-pages # what is the ubuntu equivalent to man-pages?
cd $(mktemp -d)
wget http://ftp.de.debian.org/debian/pool/main/x/xmacro/xmacro_0.3pre-20000911.orig.tar.gz
wget http://ftp.de.debian.org/debian/pool/main/x/xmacro/xmacro_0.3pre-20000911-6.diff.gz
ex *.gz
patch -p0 < xmacro_0.3pre-20000911-6.diff
cd xmacro-0.3pre-20000911.orig
make
sleep 1 # not sure why the following command couldn\'t find, so trying this
# no make install target
s cp -f xmacroplay xmacrorec xmacrorec2 /usr/local/bin
;;&
arch)
# libxtst is missing dep https://aur.archlinux.org/packages/xmacro/#news
pi xorg-server redshift xorg-xinput pkgfile libxtst xmacro
# like apt-cache
s pkgfile --update
;;&
esac
pi xbindkeys xkbset cryptsetup unison
# enables trim for volume delete, other rare commands.
sudo sed -ri 's/( *issue_discards\b).*/\1 = 1/' /etc/lvm/lvm.conf
if encrypted; then
if isdeb; then
sudo cp /usr/share/doc/util-linux/examples/fstrim.{service,timer} /etc/systemd/system
fi
# does weekly trim
sudo systemctl enable fstrim.timer
# relatime is default, but it still significantly increases writes
# in comparison because it writes on the first read after each
# write.
#
dirs=(/i /mnt/{1,2,3,4,5,6,7,8,9})
if ! frodo; then
dirs+=(/q)
fi
s mkdir -p ${dirs[@]}
s chown ian:ian ${dirs[@]}
# ssh and probably some other things care about parent directory
# ownership, and ssh doesn\'t allow any group writable parent
# directories, so we are forced to use a directory structure similar
# to home directories
s chown root:ian /q
s chmod 755 /q
if treetowl; then
# get uuids from blkid and lvdisplay
# at times Ive done this through the installer. not anymore
tu /etc/fstab<<'EOF'
/dev/mapper/cswap1 none swap sw 0 0
/dev/mapper/q /q ext4 noatime 0 2
UUID=3f7b31cd-f299-40b4-a86b-7604282e2715 /i btrfs noatime 0 2
UUID=3f7b31cd-f299-40b4-a86b-7604282e2715 /mnt/btrfs_root btrfs noatime,subvolid=0 0 2
EOF
s mkdir -p /mnt/btrfs_root
s dd of=/etc/crypttab <<'EOF'
# i used to use UUID= from cryptsetup luksUUID /dev/mapper/ianvg1-q
# however, it doesn't work for lvm volumes when opening on the command line,
# So, just using the thing which works both ways.
q /dev/mapper/vg_treetowl00-lv01 none luks,discard,noauto
# based on cryptsetup's README.Debian, and FAQ
cswap1 /dev/mapper/vg_treetowl00-lv00 /dev/urandom swap,cipher=aes-cbc-essiv:sha256,size=256,hash=sha256,discard,noearly
EOF
s chmod 600 /etc/crypttab
s systemctl daemon-reload
s systemctl restart systemd-cryptsetup@q.service
s mount /q
s systemctl restart systemd-cryptsetup@cswap1.service
# old ways:
# s update-rc.d cryptdisks enable
# misc notes about when messing around with jessie:
# # this was useful on debian jessie:
# systemd-tty-ask-password-agent --query
# according to the broadcast message
# jessie also still had /etc/init.d/cryptdisks,
# which seemed to work only with reload, and it seems deprecated
# and cryptdisks_start q, also prolly deprecated
fi
# emacs dependencies.
# dunno why debian installed postfix with yum-builddep emacs
# but I will just explicitly install it here since
# I use it for sending mail in emacs.
if isdeb; then
s debconf-set-selections</dev/null; then
temp="$(mktemp)"
eval "$($GPGAGENT --homedir /p/do-not-delete --daemon --sh --write-env-file=$PID_FILE 2>$temp)"
temperr="$(<"$temp")"
[ -n "$temperr" ] && xmessage "gpg-agent stderr: $temperr"
elif [ -r "$PID_FILE" ]; then
. "$PID_FILE"
export GPG_AGENT_INFO
fi
fi
# ubuntu has 002, debian has 022.
# from what I've read, benefit of 002 makes shared groups read/write.
# Security concern is where some unixes put everyone in a same group,
# so if you copy files there with exact perms, that is probably not
# what you want. I don't use a system like that, and I don't really care
# either way, but I'd prefer
# being able to sync file perms with ubuntu systems at work,
# and it's easier to change the debian one.
umask 002
EOF
if isarch; then
# install so it's build dependencies don't get removed.
x=$(mktemp -d)
pushd $x
aurex emacs-git
makepkg -si --noconfirm
popd
rm -rf $x
else
if $recompile; then
/a/bin/buildscripts/emacs
else
/a/bin/buildscripts/emacs -r
fi
fi
# todo, figure this out for arch if we ever try out gnome.
if ! isarch; then
# install for multiple display managers in case we use one
if isdeb; then
dir=/etc/gdm3
elif isfedora; then
# fedora didn\'t have the 3.
dir=/etc/gdm
fi
mkdir -p $dir/PostLogin
s command cp /a/bin/desktop-20-autostart.sh $dir/PostLogin/Default
s mkdir /etc/lightdm/lightdm.conf.d
s dd of=/etc/lightdm/lightdm.conf.d/12-ian.conf <<'EOF'
[SeatDefaults]
session-setup-script=/a/bin/desktop-20-autostart.sh
EOF
fi
if isubuntu; then
# disable crash report annoying crap
s dd of=/etc/default/apport <<<'enabled=0'
fi
pi ghc sakura
# todo, also note for work comp, scp opt/org-mode bin/build-scripts
# use the package manger version to install the cabal version
pi cabal-install
cabal update
PATH="$PATH:$HOME/.cabal/bin"
# trying out the distro's versions newer distros
if $debian_stable || isubuntu; then
# todo: on ubuntu 12.04, needed to install zlib1g-dev
cabal install cabal-install
pu cabal-install
# just guessed at this after getting /bin/ld cannot find -lHSmtl or something
t ~/.ghc
cabal update
# todo, work machine required some packages libx11-dev libxrandr-dev libxft2-dev
cabal install xmonad
cabal install xmonad-contrib
# work machine:
# pi tasksel. select openssh server, basic server, large font selection
#http://comments.gmane.org/gmane.comp.lang.haskell.xmonad/13871
cat <<'EOF'
manual steps required:
xfce, "Session and Startup" > "Application Autostart"
Add
Name: xmonad
Description: xmonad --replace
Command: delayed-xmonad
EOF
else
pi xmonad
if isarch; then
# for displaying error messages.
# optional dependency in arch, standard elsewhere.
pi xorg-xmessage xmonad-contrib xorg-xsetroot xorg-xinit
# https://wiki.archlinux.org/index.php/Xinitrc
cp /etc/X11/xinit/xinitrc ~/.xinitrc
sed -ri '/^ *twm\b/,$d' ~/.xinitrc
echo "source /a/bin/xinitrc" >> ~/.xinitrc
else
pi suckless-tools
fi
fi
pi dmenu