X-Git-Url: https://git.grml.org/?p=grml-debootstrap.git;a=blobdiff_plain;f=chroot-script;h=3650c6f7cfa98fbb2d8a38b9e52495aad5cd9176;hp=cea2f7d26da762e8d0e927aa4eccf210af4c27fd;hb=edb714ea01d5094f37966a00fd279f8c97b504e7;hpb=e1bac354b542d9f6fed10d26a051cd7bd3b86d33 diff --git a/chroot-script b/chroot-script index cea2f7d..3650c6f 100755 --- a/chroot-script +++ b/chroot-script @@ -4,7 +4,6 @@ # Authors: grml-team (grml.org), (c) Michael Prokop # Bug-Reports: see http://grml.org/bugs/ # License: This file is licensed under the GPL v2. -# Latest change: Son Dez 16 16:30:31 CET 2007 [mika] ################################################################################ set -e # exit on any error @@ -12,16 +11,16 @@ set -e # exit on any error . /etc/debootstrap/config || exit 1 . /etc/debootstrap/variables || exit 1 -[ -r /proc/1 ] || mount -t proc none /proc +[ -r /proc/1 ] || mount -t proc none /proc # variable checks {{{ # use aptitude only if it's available if [ -x /usr/bin/aptitude ] ; then - APTINSTALL='aptitude -y install ' + APTINSTALL="aptitude -y --without-recommends install $DPKG_OPTIONS" APTUPDATE='aptitude update' else - APTINSTALL='apt-get --force-yes -y install' + APTINSTALL="apt-get --force-yes -y install $DPKG_OPTIONS" APTUPDATE='apt-get update' fi @@ -37,20 +36,25 @@ stage() { echo "$2" > "$STAGES/$1" return 0 elif grep -q done "$STAGES/$1" 2>/dev/null ; then - echo "[*] Notice: stage $1 has been executed already, skipping execution therefore.">&2 + echo " [*] Notice: stage $1 has been executed already, skipping execution therefore.">&2 return 1 fi + echo " Executing stage ${1}" + return 0 } # }}} # define chroot mirror {{{ chrootmirror() { + [ -n "$KEEP_SRC_LIST" ] && return + [ -z "$COMPONENTS" ] && COMPONENTS='main contrib non-free' + if [ -n "$ISO" ] ; then - echo "deb $ISO $RELEASE main contrib" > /etc/apt/sources.list - [ -n "$CHROOTMIRROR" ] && echo "deb $CHROOTMIRROR $RELEASE main contrib non-free" >> /etc/apt/sources.list + echo "deb $ISO $RELEASE $COMPONENTS" > /etc/apt/sources.list + [ -n "$MIRROR" ] && echo "deb $MIRROR $RELEASE $COMPONENTS" >> /etc/apt/sources.list || /bin/true else - if [ -n "$CHROOTMIRROR" ] ; then - echo "deb $CHROOTMIRROR $RELEASE main contrib non-free" > /etc/apt/sources.list + if [ -n "$MIRROR" ] ; then + echo "deb $MIRROR $RELEASE $COMPONENTS" > /etc/apt/sources.list fi fi } @@ -59,7 +63,9 @@ chrootmirror() { # set up grml repository {{{ grmlrepos() { if [ -n "$GRMLREPOS" ] ; then - cat >> /etc/apt/sources.list << EOF + # user might have provided their own apt sources.list + if ! grep -q grml /etc/apt/sources.list 2>/dev/null ; then + cat >> /etc/apt/sources.list << EOF # grml: stable repository: deb http://deb.grml.org/ grml-stable main @@ -70,6 +76,8 @@ grmlrepos() { deb-src http://deb.grml.org/ grml-testing main EOF + fi + # make sure we have the keys available for aptitude gpg --keyserver subkeys.pgp.net --recv-keys F61E2E7CECDEA787 gpg --export F61E2E7CECDEA787 | apt-key add - || /bin/true # not yet sure @@ -117,15 +125,35 @@ makedev() { } # }}} +# make sure services do not start up {{{ +install_policy_rcd() { + if ! [ -r /usr/sbin/policy-rc.d ] ; then + export POLICYRCD=1 + cat > /usr/sbin/policy-rc.d << EOF +#!/bin/sh +exit 101 +EOF + chmod 775 /usr/sbin/policy-rc.d + fi +} +# }}} + # install additional packages {{{ packages() { + # Pre-seed the debconf database with answers. Each question will be marked + # as seen to prevent debconf from asking the question interactively. + [ -f /etc/debootstrap/debconf-selections ] && { + echo "Preseeding the debconf database, some lines might be skipped..." + cat /etc/debootstrap/debconf-selections | debconf-set-selections + } + if [ "$PACKAGES" = 'yes' ] ; then if ! [ -r /etc/debootstrap/packages ] ; then echo "Error: /etc/debootstrap/packages not found, exiting." exit 1 else $APTUPDATE - DEBIAN_FRONTEND=$DEBIAN_FRONTEND $APTINSTALL $(cat /etc/debootstrap/packages) $GRMLPACKAGES + DEBIAN_FRONTEND=$DEBIAN_FRONTEND $APTINSTALL $(grep -v '^#' /etc/debootstrap/packages) $GRMLPACKAGES fi fi } @@ -188,97 +216,67 @@ reconfigure() { # }}} # set password of user root {{{ -setpassword() { -# Set a password, via chpasswd. -# Use perl rather than echo, to avoid the password -# showing in the process table. (However, this is normally -# only called when first booting the system, when root has no -# password at all, so that should be an unnecessary precaution). -# -# Pass in three arguments: the user, the password, and 'true' if the -# password has been pre-crypted (by preseeding). -# -# Taken from /var/lib/dpkg/info/passwd.config - SETPASSWD_PW="$2" - export SETPASSWD_PW - - # This is very annoying. chpasswd cannot handle generating md5 - # passwords as it is not PAM-aware. Thus, I have to work around - # that by crypting the password myself if md5 is used. - USE_MD5=1 - export USE_MD5 - - if [ "$3" = true ]; then - PRECRYPTED=1 - else - PRECRYPTED='' - fi - export PRECRYPTED - LC_ALL=C LANGUAGE=C LANG=C perl -e ' - sub CreateCryptSalt { - my $md5 = shift; - - my @valid = split(//, "./0123456789abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ"); - my ($in, $out); - - my $cryptsaltlen = ($md5 ? 8 : 2); - - open (F, " /etc/hosts + if [ -f /etc/hosts ] ; then + sed -i "s#127.0.0.1 .*#127.0.0.1 localhost $HOSTNAME#" /etc/hosts + [ -n "$HOSTNAME" ] && sed -i "s/grml/$HOSTNAME/g" /etc/hosts + else + cat > /etc/hosts << EOF +127.0.0.1 localhost $HOSTNAME + +#127.0.0.1 localhost +#127.0.1.1 $HOSTNAME.example.org $HOSTNAME + +# The following lines are desirable for IPv6 capable hosts +#::1 ip6-localhost ip6-loopback $HOSTNAME +::1 ip6-localhost ip6-loopback +fe00::0 ip6-localnet +ff00::0 ip6-mcastprefix +ff02::1 ip6-allnodes +ff02::2 ip6-allrouters +ff02::3 ip6-allhosts +EOF fi } # }}} # set up /etc/network/interfaces {{{ interfaces() { - touch /etc/network/interfaces - # make sure we add the entries only once - if ! grep -q eth0 /etc/network/interfaces ; then + if ! [ -r /etc/network/interfaces ] || ! grep -q "auto lo" /etc/network/interfaces ; then echo "Setting up /etc/network/interfaces" cat >> /etc/network/interfaces << EOF @@ -307,11 +305,16 @@ timezone() { # helper function for fstab() {{{ createfstab(){ echo "Setting up /etc/fstab" -cat > /etc/fstab << EOF -$TARGET / auto defaults,errors=remount-ro 0 1 -/sys /sys sysfs rw,nosuid,nodev,noexec 0 0 -proc /proc proc defaults 0 0 -/dev/cdrom /mnt/cdrom0 iso9660 ro,user,noauto 0 0 +if [ -n "$TARGET_UUID" ] ; then + echo "/dev/disk/by-uuid/${TARGET_UUID} / auto defaults,errors=remount-ro 0 1" > /etc/fstab +else + echo "${TARGET} / auto defaults,errors=remount-ro 0 1" > /etc/fstab +fi + +cat >> /etc/fstab << EOF +proc /proc proc defaults 0 0 +/sys /sys sysfs noauto,rw,nosuid,nodev,noexec 0 0 +/dev/cdrom /mnt/cdrom0 iso9660 ro,user,noauto 0 0 # some other examples: # /dev/sda2 none swap sw 0 0 # /dev/hda1 /Grml ext3 dev,suid,user,noauto 0 2 @@ -341,6 +344,18 @@ hostname() { if [ -n "$HOSTNAME" ] ; then echo "Setting hostname to ${HOSTNAME}." echo "$HOSTNAME" > /etc/hostname + + # adjust postfix configuration + if [ -r /etc/postfix/main.cf ] ; then + # adjust hostname related options: + sed -i "s/grml/$HOSTNAME/g" /etc/postfix/main.cf + sed -i "s/^myhostname = .*/myhostname = $HOSTNAME/" /etc/postfix/main.cf + sed -i "s/^mydestination = .*/mydestination = localdomain, localhost, localhost.localdomain, $HOSTNAME/" /etc/postfix/main.cf + + # listen on loopback interface only: + sed -i "s/^inet_interfaces = .*/inet_interfaces = loopback-only/" /etc/postfix/main.cf + grep -q inet_interfaces /etc/postfix/main.cf || echo 'inet_interfaces = loopback-only' >> /etc/postfix/main.cf + fi fi } # }}} @@ -348,7 +363,12 @@ hostname() { # generate initrd/initramfs {{{ initrd() { # assume the first available kernel as our main kernel - KERNELIMG=$(ls -1 /boot/vmlinuz-* | head -1) + KERNELIMG=$(ls -1 /boot/vmlinuz-* 2>/dev/null | head -1) + if [ -z "$KERNELIMG" ] ; then + echo 'No kernel image found, skipping initrd stuff.'>&2 + return + fi + KERNELVER=${KERNELIMG#/boot/vmlinuz-} # generate initrd @@ -392,7 +412,20 @@ grub() { $UPDATEGRUB -y if [ -f /boot/grub/menu.lst ] ; then sed -i "s/^# groot=.*/# groot=(${GROOT})/g" /boot/grub/menu.lst - sed -i "s|^# kopt=root=.*|# kopt=root=${TARGET} ro ${BOOT_APPEND}|g" /boot/grub/menu.lst + case "$TARGET" in + # do NOT use uuid with SW-RAID + /dev/md*) + sed -i "s|^# kopt=root=.*|# kopt=root=${TARGET} ro ${BOOT_APPEND}|g" /boot/grub/menu.lst + ;; + *) + if [ -n "$TARGET_UUID" ] ; then + sed -i "s|^# kopt=root=.*|# kopt=root=UUID=${TARGET_UUID} ro ${BOOT_APPEND}|g" /boot/grub/menu.lst + else + sed -i "s|^# kopt=root=.*|# kopt=root=${TARGET} ro ${BOOT_APPEND}|g" /boot/grub/menu.lst + fi + ;; + esac + # not sure why savedefault does not work for me; any ideas? sed -i "s/^savedefault.*/# &/g" /boot/grub/menu.lst $UPDATEGRUB -y @@ -401,6 +434,17 @@ grub() { } # }}} +# execute all scripts present in /etc/debootstrap/chroot-scripts/ {{{ +custom_scripts() { + [ -d /etc/debootstrap/chroot-scripts/ ] || return 0 + + for script in /etc/debootstrap/chroot-scripts/* ; do + echo "Executing script $script" + $script && echo "done" || echo "failed" + done +} +# }}} + # make sure we don't have any running processes left {{{ services() { for service in ssh mdadm mdadm-raid ; do @@ -415,6 +459,7 @@ services() { finalize() { # make sure we don't leave any sensible data rm -f /etc/debootstrap/variables + [ -n "$POLICYRCD" ] && rm -f /usr/sbin/policy-rc.d umount -a 1>/dev/null 2>/dev/null || true umount /proc 1>/dev/null 2>/dev/null || true umount /proc 1>/dev/null 2>/dev/null || true @@ -423,13 +468,15 @@ finalize() { # }}} # execute the functions {{{ - for i in chrootmirror grmlrepos kernelimg_conf makedev packages extrapackages \ - mkinitrd kernel reconfigure hosts interfaces timezone fstab hostname \ - initrd grub passwords services finalize ; do - if stage $i ; then + for i in chrootmirror grmlrepos kernelimg_conf makedev install_policy_rcd \ + packages extrapackages mkinitrd kernel reconfigure hosts interfaces \ + timezone fstab hostname initrd grub passwords custom_scripts services ; do + if stage $i ; then $i && stage $i done || exit 1 - fi + fi done + # always execute the finalize stage: + finalize # }}} # finally exit the chroot {{{