grep -q small /etc/grml_version 2>>$DEBUG && return 0 || return 1
}
+# if no password is set return a random password
+set_passwd() {
+ [ -n "$PASSWD" ] && return 0
+
+ if [ -x /usr/bin/apg ] ; then
+ PASSWD="$(apg -M NL -a 0 -m 8 -x 12 -n 1)"
+ elif [ -x /usr/bin/gpw ] ; then
+ PASSWD="$(gpw 1)"
+ elif [ -x /usr/bin/pwgen ] ; then
+ PASSWD="$(pwgen -1 8)"
+ elif [ -x /usr/bin/hexdump ] ; then
+ PASSWD="$(dd if=/dev/urandom bs=14 count=1 2>/dev/null | hexdump | awk '{print $3 $4}')"
+ elif [ -n "$RANDOM" ] ; then
+ PASSWD="grml${RANDOM}"
+ else
+ PASSWD=''
+ eerror "Empty passphrase and neither apg, gpw, pwgen, hexdump nor \$RANDOM available. Skipping."
+ eend 1
+ return 1
+ fi
+}
+
### }}}
# {{{ filesystems (proc, pts, sys) and fixes
[ -z "$KTZ" ] && [ -r /etc/timezone ] && KTZ=$(cat /etc/timezone)
if [ ! -f "/usr/share/zoneinfo/$KTZ" ] ; then
ewarn "Warning: unknown timezone $KTZ" ; eend 1
- KTZ="Europe/Vienna"
+ KTZ="UTC"
ewarn "Falling back to timezone $KTZ" ; eend 0
fi
# {{{ autostart of ssh
config_ssh(){
if checkbootparam 'ssh' ; then
- SSH_PASSWD=''
- SSH_PASSWD="$(getbootparam 'ssh' 2>>$DEBUG)"
+ local PASSWD
+ PASSWD="$(getbootparam 'ssh' 2>>$DEBUG)"
+
config_userlocal
einfo "Bootoption ssh found, trying to set password for root and user $localuser"
[ -z "$localuser" ] && eend 1
- eindent
- if [ -z "$SSH_PASSWD" ] ; then
- if [ -x /usr/bin/apg ] ; then
- SSH_PASSWD="$(apg -M NL -a 0 -m 8 -x 12 -n 1)"
- elif [ -x /usr/bin/gpw ] ; then
- SSH_PASSWD="$(gpw 1)"
- elif [ -x /usr/bin/pwgen ] ; then
- SSH_PASSWD="$(pwgen -1 8)"
- elif [ -x /usr/bin/hexdump ] ; then
- SSH_PASSWD="$(dd if=/dev/urandom bs=14 count=1 2>/dev/null | hexdump | awk '{print $3 $4}')"
- elif [ -n "$RANDOM" ] ; then
- SSH_PASSWD="grml${RANDOM}"
- else
- SSH_PASSWD=''
- eerror "Empty passphrase and neither pwgen nor hexdump nor \$RANDOM found. Skipping."
- eend 1
- fi
- if [ -n "$SSH_PASSWD" ] ; then
- ewarn "No given password for ssh found. Using random password: $SSH_PASSWD" ; eend 0
- fi
+ eindent
+ if [ -z "$PASSWD" ] ; then
+ set_passwd && ewarn "No given password for found. Using random password: $PASSWD" && eend 0
fi
eoutdent
- # finally check if we have a password we can use:
- if [ -n "$SSH_PASSWD" ] ; then
- # chpasswd sucks, seriously.
+ if [ -n "$PASSWD" ] ; then
chpass_options=""
if chpasswd --help 2>&1 | grep -q -- '-m,' ; then
chpass_options="-m"
fi
- echo "$localuser:$SSH_PASSWD" | chpasswd $chpass_options
- echo "root:$SSH_PASSWD" | chpasswd $chpass_options
+
+ echo "$localuser:$PASSWD" | chpasswd $chpass_options
+ echo "root:$PASSWD" | chpasswd $chpass_options
+
+ eindent
+ ewarn "Warning: please change the password for root and user $localuser as soon as possible!"
+ eoutdent
fi
einfo "Starting secure shell server in background for root and user $localuser"
/etc/init.d/ssh start >>$DEBUG 2>>$DEBUG &
eend $?
- eindent
- ewarn "Warning: please change the password for root and user $localuser as soon as possible!"
- eoutdent
fi
}
}
# }}}
-# {{{ set password for default user
+# {{{ set password for root and default user
config_passwd(){
if checkbootparam 'passwd' >>$DEBUG 2>&1; then
+ local PASSWD
PASSWD="$(getbootparam 'passwd' 2>>$DEBUG)"
+
config_userlocal
- einfo "Bootoption passwd found, change password for user '$localuser'."
+ einfo "Bootoption passwd found, trying to set password for root and user $localuser"
[ -z "$localuser" ] && eend 1
- if [ -n "$PASSWD" ] ; then
- echo "$localuser:$PASSWD" | chpasswd -m ; eend $?
- else
- eerror "No given password for ssh found. Autostart of SSH will not work." ; eend 1
- fi
+
eindent
- ewarn "Warning: please change the password for user grml set via bootparameter as soon as possible!"
+ if [ -z "$PASSWD" ] ; then
+ set_passwd && ewarn "No given password for found. Using random password: $PASSWD" && eend 0
+ fi
eoutdent
+
+ if [ -n "$PASSWD" ] ; then
+ chpass_options=""
+ if chpasswd --help 2>&1 | grep -q -- '-m,' ; then
+ chpass_options="-m"
+ fi
+
+ echo "$localuser:$PASSWD" | chpasswd $chpass_options
+ echo "root:$PASSWD" | chpasswd $chpass_options
+
+ eindent
+ ewarn "Warning: please change the password for root and user $localuser as soon as possible!"
+ eoutdent
+ fi
+
+fi
+
+if checkbootparam 'encpasswd' >>$DEBUG 2>&1; then
+ local PASSWD
+ PASSWD="$(getbootparam 'encpasswd' 2>>$DEBUG)"
+
+ if [ -z "$PASSWD" ] ; then
+ eerror "No hashed password found, can not set password."
+ eend 1
+ return
+ fi
+
+ config_userlocal
+ einfo "Bootoption encpasswd found, trying to set hashed password for root and user $localuser"
+ [ -z "$localuser" ] && eend 1
+
+ if [ -n "$PASSWD" ] ; then
+ chpass_options="-e"
+
+ echo "$localuser:$PASSWD" | chpasswd $chpass_options
+ echo "root:$PASSWD" | chpasswd $chpass_options
+
+ eindent
+ ewarn "Warning: please change the password for root and user $localuser as soon as possible!"
+ eoutdent
+ fi
+
fi
}
# }}}
}
# }}}
-# {{{ stats
-config_stats() {
- if ! checkbootparam 'nostats' ; then
- BASE_URL="http://stats.grml.org/report/"
- ACTION_NAME=Boot
-
- HOST_ID=$(cat /proc/sys/kernel/random/boot_id)
-
- grep -q " lm " /proc/cpuinfo && HAS_64BIT="1" || HAS_64BIT="0"
- DATE_STRING=$(date +'h=%H&m=%M&s=%S')
- [ -e /etc/grml_version ] && VERSION=$(cat /etc/grml_version) || \
- VERSION=$(lsb_release -d | awk -F: '{gsub(/^[ \t]+/, "", $2); print $2}')
-
- PARAMS="$( echo "$CMDLINE" | sed -e 's/=[^ ]*/=x/g' | tr " " "\n"|sort|tr "\n" " " )"
-
- echo "$CMDLINE" | grep -q -e "fetch" -e "nfsroot" && BOOT="remote"
- [ -z "$BOOT" ] && BOOT="local"
-
- ADDITIONAL_PARAMS=""
- ( [ -n "$COLUMNS" ] && [ -n "$LINES" ] ) && \
- ADDITIONAL_PARAMS="$ADDITIONAL_PARAMS&res=$((COLUMNS * 8))x$((LINES * 16))"
-
- URI='$BASE_URL?action=${ACTION_NAME}\&$DATE_STRING\&unique_id=${HOST_ID}\&support_64bit=$HAS_64BIT\&version=$VERSION\&bootup=$BOOT\¶ms=$PARAMS$ADDITIONAL_PARAMS'
-
- get_remote_file "$URI" "/dev/null" >/dev/null 2>&1 &!
- fi
-}
-# }}}
-
# {{{ fix/workaround for unionfs
fix_unionfs(){
if [ -z "$INSTALLED" ]; then
elif checkvalue $CONFIG_MYCONFIG; then # checkbootparam myconfig
einfo "Searching for device(s) labeled with $GRMLCFG. (Disable this via boot option: noautoconfig)" ; eend 0
eindent
- # We do need the following fix so floppy disk is available to blkid in any case :-/
- if [ -r /dev/fd0 ] ; then
- einfo "Floppy device detected. Trying to access floppy disk (this might take a few seconds)."
- if timeout 4 dd if=/dev/fd0 of=/dev/null bs=512 count=1 >>$DEBUG 2>&1 ; then
- timeout 4 blkid /dev/fd0 >>$DEBUG 2>&1
- fi
- fi
DCSDEVICE=$(blkid -t LABEL=$GRMLCFG | head -1 | awk -F: '{print $1}')
modprobe 9p 2>/dev/null || true
projects / grml-autoconfig.git / blobdiff