# Filename: /etc/debootstrap/chroot-script
# Purpose: script executed in chroot when installing Debian via grml-debootstrap
# Authors: grml-team (grml.org), (c) Michael Prokop <mika@grml.org>
-# Bug-Reports: see http://grml.org/bugs/
+# Bug-Reports: see https://grml.org/bugs/
# License: This file is licensed under the GPL v2.
################################################################################
# GRML_CHROOT_SCRIPT_MARKER - do not remove this line unless you want to keep
fi
# }}}
+# shellcheck disable=SC1091
. /etc/debootstrap/config || exit 1
+# shellcheck disable=SC1091
. /etc/debootstrap/variables || exit 1
[ -r /proc/1 ] || mount -t proc none /proc
# read -s emulation for dash. result is in $resp.
set -o noglob
[ -t 0 ] && stty -echo
- read resp
+ read -r resp
[ -t 0 ] && stty echo
set +o noglob
}
# add security.debian.org:
case "$RELEASE" in
unstable|sid|lenny) ;; # no security pool available
- *)
+ squeeze|wheezy|jessie|stretch|buster)
echo "Adding security.debian.org to sources.list."
echo "deb http://security.debian.org ${RELEASE}/updates $COMPONENTS" >> /etc/apt/sources.list
;;
+ *)
+ # bullseye and newer releases use a different repository layout, see
+ # https://lists.debian.org/debian-devel-announce/2019/07/msg00004.html
+ echo "Adding security.debian.org/debian-security to sources.list."
+ echo "deb http://security.debian.org/debian-security ${RELEASE}-security $COMPONENTS" >> /etc/apt/sources.list
+ ;;
esac
}
# }}}
if [ -n "$ISO" ] ; then
echo "Removing ISO (${ISO}) from sources.list."
- TMP_ISO=$(echo "$ISO" |sed 's#/#\\/#g')
+ TMP_ISO="${ISO//\//\\\/}"
sed -i "/deb $TMP_ISO $RELEASE $COMPONENTS/ D" /etc/apt/sources.list
else
if [ -n "$MIRROR" ] && echo "$MIRROR" | grep -q 'file:' ; then
echo "Removing local mirror (${MIRROR}) from sources.list."
- TMP_MIRROR=$(echo "$MIRROR" |sed 's#/#\\/#g')
+ TMP_MIRROR="${MIRROR//\//\\\/}"
sed -i "/deb $TMP_MIRROR $RELEASE $COMPONENTS/ D" /etc/apt/sources.list
echo "Adding fallback mirror entry (${FALLBACK_MIRROR}) to sources.list instead."
echo "deb $FALLBACK_MIRROR $RELEASE $COMPONENTS" >> /etc/apt/sources.list
EOF
fi
+ # shellcheck disable=SC2086
if apt-get update $DPKG_OPTIONS; then
+ # shellcheck disable=SC2086
apt-get -y --allow-unauthenticated install grml-debian-keyring $DPKG_OPTIONS
+ # shellcheck disable=SC2086
apt-get update $DPKG_OPTIONS
else
# make sure we have the keys available for aptitude
}
# }}}
-# check available backports release version {{{
-checkbackports() {
- wget -q -O/dev/null "http://backports.debian.org/debian-backports/dists/${1}-backports/Release"
-}
-# }}}
-
# feature to provide Debian backports repos {{{
backportrepos() {
- if [ -n "$BACKPORTREPOS" ] ; then
- if ! checkbackports "$RELEASE" ; then
- echo "Backports for ${RELEASE} are not available." >&2
- exit 1
- else
- # user might have provided their own apt sources.list
- if ! grep -q backports /etc/apt/sources.list.d/backports.list 2>/dev/null ; then
- cat >> /etc/apt/sources.list.d/backports.list << EOF
+ if [ -n "$BACKPORTREPOS" ] ; then
+ cat >> /etc/apt/sources.list.d/backports.list << EOF
# debian backports: ${RELEASE}-backports repository:
-deb http://backports.debian.org/debian-backports ${RELEASE}-backports main
-deb-src http://backports.debian.org/debian-backports ${RELEASE}-backports main
+deb ${MIRROR} ${RELEASE}-backports main
+deb-src ${MIRROR} ${RELEASE}-backports main
EOF
- fi
- fi
- fi
+ fi
}
# }}}
remove_apt_cache() {
if [ "$RM_APTCACHE" = 'yes' ] ; then
echo "Cleaning apt cache."
+ # shellcheck disable=SC2086
apt-get clean $DPKG_OPTIONS
else
echo "Not cleaning apt cache as \$RM_APTCACHE is unset."
exit 1
else
$APTUPDATE
+ # shellcheck disable=SC2086,SC2046
DEBIAN_FRONTEND=$DEBIAN_FRONTEND $APTINSTALL $(grep -v '^#' /etc/debootstrap/packages) $GRMLPACKAGES
fi
fi
if [ "$EXTRAPACKAGES" = 'yes' ] ; then
PACKAGELIST=$(find /etc/debootstrap/extrapackages -type f -name '*.deb')
if [ -n "$PACKAGELIST" ]; then
+ # shellcheck disable=SC2086
dpkg -i $PACKAGELIST
# run apt again to resolve any deps
DEBIAN_FRONTEND=$DEBIAN_FRONTEND $APTINSTALL
local KARCH
+ # shellcheck disable=SC2153
case "$ARCH" in
i386)
case "$RELEASE" in
if expr "$COMPONENTS" : '.*non-free' >/dev/null ; then
KERNELPACKAGES="$KERNELPACKAGES firmware-linux"
fi
+ # shellcheck disable=SC2086
DEBIAN_FRONTEND=$DEBIAN_FRONTEND $APTINSTALL $KERNELPACKAGES
else
echo "Warning: Could not find a kernel for your system. Your system won't be able to boot itself!"
reconfigure() {
if [ -n "$RECONFIGURE" ] ; then
for package in $RECONFIGURE ; do
- if dpkg --list $package >/dev/null 2>&1 | grep -q '^ii' ; then
- DEBIAN_FRONTEND=$DEBIAN_FRONTEND dpkg-reconfigure $package || \
+ if dpkg --list "$package" >/dev/null 2>&1 | grep -q '^ii' ; then
+ DEBIAN_FRONTEND=$DEBIAN_FRONTEND dpkg-reconfigure "$package" || \
echo "Warning: $package does not exist, can not reconfigure it."
fi
done
# adjust timezone {{{
timezone() {
if [ -n "$TIMEZONE" ] ; then
- echo "Adjusting /etc/localtime"
- ln -sf "/usr/share/zoneinfo/$TIMEZONE" /etc/localtime
+ echo "Adjusting /etc/localtime"
+ ln -sf "/usr/share/zoneinfo/$TIMEZONE" /etc/localtime
+
+ echo "Setting /etc/timezone to $TIMEZONE"
+ printf '%s\n' "$TIMEZONE" > /etc/timezone
+
fi
}
# }}}
# helper function for fstab() {{{
createfstab(){
echo "Setting up /etc/fstab"
+ cat > /etc/fstab <<EOF
+# /etc/fstab - created by grml-debootstrap on $(date)
+# Accessible filesystems, by reference, are maintained under '/dev/disk/'.
+# See man pages fstab(5), findfs(8), mount(8) and/or blkid(8) for more info.
+#
+# After editing this file, run 'systemctl daemon-reload' to update systemd
+# units generated from this file.
+#
+EOF
+
if [ -n "$TARGET_UUID" ] ; then
- echo "/dev/disk/by-uuid/${TARGET_UUID} / auto defaults,errors=remount-ro 0 1" > /etc/fstab
+ echo "/dev/disk/by-uuid/${TARGET_UUID} / auto defaults,errors=remount-ro 0 1" >> /etc/fstab
else
echo "Warning: couldn't identify target UUID for rootfs, your /etc/fstab might be incomplete."
fi
if [ -n "$EFI" ] ; then
+ # shellcheck disable=SC2086
echo "UUID=$(blkid -o value -s UUID $EFI) /boot/efi vfat umask=0077 0 1" >> /etc/fstab
fi
fi
if [ -r /etc/mailname ] ; then
# adjust /etc/mailname
- local etc_mail_domain=$(/bin/dnsdomainname 2>/dev/null || echo localdomain)
+ local etc_mail_domain
+ etc_mail_domain=$(/bin/dnsdomainname 2>/dev/null || echo localdomain)
case "$HOSTNAME" in
*.*)
local mailname="$HOSTNAME"
# generate initrd/initramfs {{{
initrd() {
# assume the first available kernel as our main kernel
+ # shellcheck disable=SC2012
KERNELIMG=$(ls -1 /boot/vmlinuz-* 2>/dev/null | head -1)
if [ -z "$KERNELIMG" ] ; then
echo 'No kernel image found, skipping initrd stuff.'>&2
DEBIAN_FRONTEND=$DEBIAN_FRONTEND $APTINSTALL ${GRUB_PACKAGE}
fi
- if ! [ -x "$(which grub-install)" ] ; then
+ if ! [ -x "$(command -v grub-install)" ] ; then
echo "Error: grub-install not available. (Error while installing grub package?)" >&2
return 1
fi
for device in $SELECTED_PARTITIONS ; do
GRUB="${device%%[0-9]}"
echo "Installing grub on ${GRUB}:"
- grub-install --no-floppy "$GRUB"
+ if ! grub-install --no-floppy "$GRUB" ; then
+ echo "Error: failed to execute 'grub-install --no-floppy $GRUB'." >&2
+ exit 1
+ fi
+
done
rm -f /boot/grub/device.map
else
echo "Installing grub on ${GRUB}:"
case "$RELEASE" in
lenny|squeeze|wheezy)
- grub-install --no-floppy "$(readlink -f "${GRUB}")"
+ local grub_dev
+ grub_dev="$(readlink -f "${GRUB}")"
+ if ! grub-install --no-floppy "${grub_dev}" ; then
+ echo "Error: failed to execute 'grub-install --no-floppy ${grub_dev}'." >&2
+ exit 1
+ fi
rm -f /boot/grub/device.map
;;
*)
echo "(hd0) ${GRUB}" > /boot/grub/device.map
- grub-install "(hd0)"
+ if ! grub-install "(hd0)" ; then
+ echo "Error: failed to execute 'grub-install (hd0)'." >&2
+ exit 1
+ fi
rm /boot/grub/device.map
;;
esac
return 1
fi
+ if [ -n "${BOOT_APPEND}" ] ; then
+ echo "Adding BOOT_APPEND configuration ['${BOOT_APPEND}'] to /etc/default/grub."
+ sed -i "/GRUB_CMDLINE_LINUX_DEFAULT/ s#\"\$# ${BOOT_APPEND}\"#" /etc/default/grub
+ fi
+
mountpoint /boot/efi &>/dev/null && umount /boot/efi
$UPDATEGRUB
projects / grml-debootstrap.git / blobdiff