X-Git-Url: https://git.grml.org/?p=grml-debootstrap.git;a=blobdiff_plain;f=chroot-script;h=80b45ab0ac4740aeecf46d44f7463126d14a4885;hp=cf99596273b53a32f33b3d59fcacdcd9f3b1e648;hb=7e1e9b8dbdcf2ad71aff50ffdb032eb9df8a9e64;hpb=e45e376b45ef53014bd6f56164be2b5cbc9f49a1 diff --git a/chroot-script b/chroot-script index cf99596..80b45ab 100755 --- a/chroot-script +++ b/chroot-script @@ -1,36 +1,47 @@ -#!/bin/sh +#!/bin/bash # Filename: /etc/debootstrap/chroot-script # Purpose: script executed in chroot when installing Debian via grml-debootstrap # Authors: grml-team (grml.org), (c) Michael Prokop -# Bug-Reports: see http://grml.org/bugs/ +# Bug-Reports: see https://grml.org/bugs/ # License: This file is licensed under the GPL v2. ################################################################################ # GRML_CHROOT_SCRIPT_MARKER - do not remove this line unless you want to keep # this script as /bin/chroot-script on your new installed system ################################################################################ +# error_handler {{{ +if [ "$REPORT_TRAP_ERR" = "yes" ] || [ "$FAIL_TRAP_ERR" = "yes" ]; then + set -E + set -o pipefail + trap "error_handler" ERR +fi +# }}} + +# shellcheck disable=SC1091 . /etc/debootstrap/config || exit 1 +# shellcheck disable=SC1091 . /etc/debootstrap/variables || exit 1 [ -r /proc/1 ] || mount -t proc none /proc +[ -r /sys/kernel ] || mount -t sysfs none /sys # variable checks {{{ # use aptitude only if it's available if [ -x /usr/bin/aptitude ] ; then - APTUPDATE='aptitude update' + APTUPDATE="aptitude update $DPKG_OPTIONS" # Debian ISOs do not contain signed Release files if [ -n "$ISO" ] ; then APTINSTALL="aptitude -y --allow-untrusted --without-recommends install $DPKG_OPTIONS" - APTUPGRADE='aptitude -y --allow-untrusted safe-upgrade' + APTUPGRADE="aptitude -y --allow-untrusted safe-upgrade $DPKG_OPTIONS" else APTINSTALL="aptitude -y --without-recommends install $DPKG_OPTIONS" - APTUPGRADE='aptitude -y safe-upgrade' + APTUPGRADE="aptitude -y safe-upgrade $DPKG_OPTIONS" fi else - APTINSTALL="apt-get --force-yes -y --no-install-recommends install $DPKG_OPTIONS" - APTUPDATE='apt-get update' - APTUPGRADE='apt-get --force-yes -y upgrade' + APTINSTALL="apt-get -y --no-install-recommends install $DPKG_OPTIONS" + APTUPDATE="apt-get update $DPKG_OPTIONS" + APTUPGRADE="apt-get -y upgrade $DPKG_OPTIONS" fi if [ -z "$STAGES" ] ; then @@ -44,7 +55,7 @@ stage() { if [ -n "$2" ] ; then echo "$2" > "$STAGES/$1" return 0 - elif grep -q done "$STAGES/$1" 2>/dev/null ; then + elif grep -q 'done' "$STAGES/$1" 2>/dev/null ; then echo " [*] Notice: stage $1 has been executed already, skipping execution therefore.">&2 return 1 fi @@ -56,7 +67,7 @@ askpass() { # read -s emulation for dash. result is in $resp. set -o noglob [ -t 0 ] && stty -echo - read resp + read -r resp [ -t 0 ] && stty echo set +o noglob } @@ -70,15 +81,18 @@ chrootmirror() { fi if [ -z "$COMPONENTS" ] ; then - COMPONENTS='main contrib non-free' + COMPONENTS='main' fi echo "Using repository components $COMPONENTS" if [ -n "$ISO" ] ; then echo "Adjusting sources.list for ISO (${ISO})." echo "deb $ISO $RELEASE $COMPONENTS" > /etc/apt/sources.list - echo "Adding mirror entry (${MIRROR}) to sources.list." - [ -n "$MIRROR" ] && echo "deb $MIRROR $RELEASE $COMPONENTS" >> /etc/apt/sources.list || true + + if [ -n "$MIRROR" ] ; then + echo "Adding mirror entry (${MIRROR}) to sources.list." + echo "deb $MIRROR $RELEASE $COMPONENTS" >> /etc/apt/sources.list + fi else if [ -n "$MIRROR" ] ; then echo "Adjusting sources.list for mirror (${MIRROR})." @@ -86,9 +100,19 @@ chrootmirror() { fi fi + # LTS support + case "$RELEASE" in + squeeze) + if [ -n "$MIRROR" ] ; then + echo "Release matching $RELEASE - enabling LTS support in sources.list" + echo "deb $MIRROR ${RELEASE}-lts $COMPONENTS" >> /etc/apt/sources.list + fi + ;; + esac + # add security.debian.org: case "$RELEASE" in - unstable|sid) ;; # no security pool available + unstable|sid|lenny) ;; # no security pool available *) echo "Adding security.debian.org to sources.list." echo "deb http://security.debian.org ${RELEASE}/updates $COMPONENTS" >> /etc/apt/sources.list @@ -106,12 +130,12 @@ remove_chrootmirror() { if [ -n "$ISO" ] ; then echo "Removing ISO (${ISO}) from sources.list." - TMP_ISO=$(echo "$ISO" |sed 's#/#\\/#g') + TMP_ISO="${ISO//\//\\\/}" sed -i "/deb $TMP_ISO $RELEASE $COMPONENTS/ D" /etc/apt/sources.list else - if [ -n "$MIRROR" -a -n "$(echo $MIRROR|grep file:)" ] ; then + if [ -n "$MIRROR" ] && echo "$MIRROR" | grep -q 'file:' ; then echo "Removing local mirror (${MIRROR}) from sources.list." - TMP_MIRROR=$(echo "$MIRROR" |sed 's#/#\\/#g') + TMP_MIRROR="${MIRROR//\//\\\/}" sed -i "/deb $TMP_MIRROR $RELEASE $COMPONENTS/ D" /etc/apt/sources.list echo "Adding fallback mirror entry (${FALLBACK_MIRROR}) to sources.list instead." echo "deb $FALLBACK_MIRROR $RELEASE $COMPONENTS" >> /etc/apt/sources.list @@ -136,13 +160,16 @@ grmlrepos() { EOF fi - if apt-get update ; then - apt-get -y --allow-unauthenticated install grml-debian-keyring - apt-get update + # shellcheck disable=SC2086 + if apt-get update $DPKG_OPTIONS; then + # shellcheck disable=SC2086 + apt-get -y --allow-unauthenticated install grml-debian-keyring $DPKG_OPTIONS + # shellcheck disable=SC2086 + apt-get update $DPKG_OPTIONS else # make sure we have the keys available for aptitude - gpg --keyserver subkeys.pgp.net --recv-keys F61E2E7CECDEA787 - gpg --export F61E2E7CECDEA787 | apt-key add - || true # not yet sure + gpg --keyserver subkeys.pgp.net --recv-keys 709BCE51568573EBC160E590F61E2E7CECDEA787 + gpg --export 709BCE51568573EBC160E590F61E2E7CECDEA787 | apt-key add - || true # not yet sure # why it's necessary, sometimes we get an error even though it works [mika] fi @@ -165,29 +192,15 @@ EOF } # }}} -# check available backports release version {{{ -checkbackports() { - wget -q -O/dev/null http://backports.debian.org/debian-backports/dists/${1}-backports/Release -} -# }}} - # feature to provide Debian backports repos {{{ backportrepos() { - if [ -n "$BACKPORTREPOS" ] ; then - if ! checkbackports $RELEASE ; then - echo "Backports for ${RELEASE} are not available." >&2 - exit 1 - else - # user might have provided their own apt sources.list - if ! grep -q backports /etc/apt/sources.list.d/backports.list 2>/dev/null ; then - cat >> /etc/apt/sources.list.d/backports.list << EOF + if [ -n "$BACKPORTREPOS" ] ; then + cat >> /etc/apt/sources.list.d/backports.list << EOF # debian backports: ${RELEASE}-backports repository: -deb http://backports.debian.org/debian-backports ${RELEASE}-backports main -deb-src http://backports.debian.org/debian-backports ${RELEASE}-backports main +deb ${MIRROR} ${RELEASE}-backports main +deb-src ${MIRROR} ${RELEASE}-backports main EOF - fi - fi - fi + fi } # }}} @@ -223,7 +236,7 @@ upgrade_system() { if [ "$UPGRADE_SYSTEM" = "yes" ] ; then echo "Running update + upgrade" $APTUPDATE - $APTUPGRADE + DEBIAN_FRONTEND=$DEBIAN_FRONTEND $APTUPGRADE else echo "Not running update + upgrade as \$UPDATE_AND_UPGRADE is not set to 'yes'." fi @@ -234,7 +247,8 @@ upgrade_system() { remove_apt_cache() { if [ "$RM_APTCACHE" = 'yes' ] ; then echo "Cleaning apt cache." - apt-get clean + # shellcheck disable=SC2086 + apt-get clean $DPKG_OPTIONS else echo "Not cleaning apt cache as \$RM_APTCACHE is unset." fi @@ -247,7 +261,7 @@ packages() { # as seen to prevent debconf from asking the question interactively. [ -f /etc/debootstrap/debconf-selections ] && { echo "Preseeding the debconf database, some lines might be skipped..." - cat /etc/debootstrap/debconf-selections | debconf-set-selections + debconf-set-selections < /etc/debootstrap/debconf-selections } if [ "$PACKAGES" = 'yes' ] ; then @@ -256,6 +270,7 @@ packages() { exit 1 else $APTUPDATE + # shellcheck disable=SC2086,SC2046 DEBIAN_FRONTEND=$DEBIAN_FRONTEND $APTINSTALL $(grep -v '^#' /etc/debootstrap/packages) $GRMLPACKAGES fi fi @@ -267,6 +282,7 @@ extrapackages() { if [ "$EXTRAPACKAGES" = 'yes' ] ; then PACKAGELIST=$(find /etc/debootstrap/extrapackages -type f -name '*.deb') if [ -n "$PACKAGELIST" ]; then + # shellcheck disable=SC2086 dpkg -i $PACKAGELIST # run apt again to resolve any deps DEBIAN_FRONTEND=$DEBIAN_FRONTEND $APTINSTALL @@ -291,9 +307,20 @@ get_kernel_version() { return 0 fi - case $ARCH in - i386) KARCH=686 ;; - amd64) KARCH=amd64 ;; + local KARCH + + # shellcheck disable=SC2153 + case "$ARCH" in + i386) + case "$RELEASE" in + lenny|squeeze|wheezy) KARCH='686' ;; + # since jessie the linux-image-686 image doesn't exist any longer + *) KARCH='686-pae' ;; + esac + ;; + amd64) + KARCH='amd64' + ;; *) echo "Only i386 and amd64 are currently supported" >&2 return 1 @@ -311,11 +338,21 @@ get_kernel_version() { # install kernel packages {{{ kernel() { + if [ -n "$NOKERNEL" ] ; then + echo "Skipping installation of kernel packages as requested via --nokernel" + return 0 + fi + $APTUPDATE KVER=$(get_kernel_version) if [ -n "$KVER" ] ; then # note: install busybox to be able to debug initramfs - KERNELPACKAGES="linux-image-$KVER linux-headers-$KVER busybox firmware-linux-free firmware-linux" + KERNELPACKAGES="linux-image-$KVER linux-headers-$KVER busybox firmware-linux-free" + # only add firmware-linux if we have non-free as a component + if expr "$COMPONENTS" : '.*non-free' >/dev/null ; then + KERNELPACKAGES="$KERNELPACKAGES firmware-linux" + fi + # shellcheck disable=SC2086 DEBIAN_FRONTEND=$DEBIAN_FRONTEND $APTINSTALL $KERNELPACKAGES else echo "Warning: Could not find a kernel for your system. Your system won't be able to boot itself!" @@ -327,8 +364,8 @@ kernel() { reconfigure() { if [ -n "$RECONFIGURE" ] ; then for package in $RECONFIGURE ; do - if dpkg --list $package >/dev/null 2>&1 | grep -q '^ii' ; then - DEBIAN_FRONTEND=$DEBIAN_FRONTEND dpkg-reconfigure $package || \ + if dpkg --list "$package" >/dev/null 2>&1 | grep -q '^ii' ; then + DEBIAN_FRONTEND=$DEBIAN_FRONTEND dpkg-reconfigure "$package" || \ echo "Warning: $package does not exist, can not reconfigure it." fi done @@ -360,12 +397,12 @@ passwords() b='2' echo "Setting password for user root:" while [ "$a" != "$b" ] ; do - echo -n "Enter new UNIX password for user root: " + printf "Enter new UNIX password for user root: " askpass a="$resp" unset resp echo - echo -n "Retype new UNIX password for user root: " + printf "Retype new UNIX password for user root: " askpass b="$resp" unset resp @@ -386,44 +423,27 @@ passwords() # set up /etc/hosts {{{ hosts() { - if [ -f /etc/hosts ] ; then - sed -i "s#127.0.0.1 .*#127.0.0.1 localhost $HOSTNAME#" /etc/hosts - [ -n "$HOSTNAME" ] && sed -i "s/grml/$HOSTNAME/g" /etc/hosts - else + if ! [ -f /etc/hosts ] ; then cat > /etc/hosts << EOF -127.0.0.1 localhost $HOSTNAME - -#127.0.0.1 localhost -#127.0.1.1 $HOSTNAME.example.org $HOSTNAME - -# The following lines are desirable for IPv6 capable hosts -#::1 ip6-localhost ip6-loopback $HOSTNAME -::1 ip6-localhost ip6-loopback -fe00::0 ip6-localnet -ff00::0 ip6-mcastprefix -ff02::1 ip6-allnodes -ff02::2 ip6-allrouters -ff02::3 ip6-allhosts +127.0.0.1 localhost +::1 localhost ip6-localhost ip6-loopback +ff02::1 ip6-allnodes +ff02::2 ip6-allrouters EOF fi } # }}} -# set up /etc/network/interfaces {{{ -interfaces() { - if ! [ -r /etc/network/interfaces ] || ! grep -q "auto lo" /etc/network/interfaces ; then - echo "Setting up /etc/network/interfaces" - cat >> /etc/network/interfaces << EOF - -# loopback device: -iface lo inet loopback -auto lo - -# eth0: -# iface eth0 inet dhcp -# auto eth0 +# set default locales {{{ +default_locales() { + if [ -n "$DEFAULT_LOCALES" ] ; then + if ! [ -x /usr/sbin/update-locale ] ; then + echo "Warning: update-locale executable not available (no locales package installed?)" + echo "Ignoring request to run update-locale for $DEFAULT_LOCALES therefore" + return 0 + fi -EOF + /usr/sbin/update-locale LANGUAGE="$DEFAULT_LANGUAGE" LANG="$DEFAULT_LOCALES" fi } # }}} @@ -431,19 +451,28 @@ EOF # adjust timezone {{{ timezone() { if [ -n "$TIMEZONE" ] ; then - echo "Adjusting /etc/localtime" - ln -sf /usr/share/zoneinfo/$TIMEZONE /etc/localtime + echo "Adjusting /etc/localtime" + ln -sf "/usr/share/zoneinfo/$TIMEZONE" /etc/localtime + + echo "Setting /etc/timezone to $TIMEZONE" + printf '%s\n' "$TIMEZONE" > /etc/timezone + fi } # }}} # helper function for fstab() {{{ createfstab(){ - echo "Setting up /etc/fstab" -if [ -n "$TARGET_UUID" ] ; then - echo "/dev/disk/by-uuid/${TARGET_UUID} / auto defaults,errors=remount-ro 0 1" > /etc/fstab -else - echo "${TARGET} / auto defaults,errors=remount-ro 0 1" > /etc/fstab + echo "Setting up /etc/fstab" + if [ -n "$TARGET_UUID" ] ; then + echo "/dev/disk/by-uuid/${TARGET_UUID} / auto defaults,errors=remount-ro 0 1" > /etc/fstab + else + echo "Warning: couldn't identify target UUID for rootfs, your /etc/fstab might be incomplete." + fi + +if [ -n "$EFI" ] ; then + # shellcheck disable=SC2086 + echo "UUID=$(blkid -o value -s UUID $EFI) /boot/efi vfat umask=0077 0 1" >> /etc/fstab fi cat >> /etc/fstab << EOF @@ -452,7 +481,7 @@ proc /proc proc defaults 0 0 # some other examples: # /dev/sda2 none swap sw,pri=0 0 0 # /dev/hda1 /Grml ext3 dev,suid,user,noauto 0 2 -# //1.2.3.4/pub /smb/pub smbfs defaults,user,noauto,uid=grml,gid=grml 0 0 +# //1.2.3.4/pub /smb/pub cifs user,noauto,uid=grml,gid=grml 0 0 # linux:/pub /beer nfs defaults 0 0 # tmpfs /tmp tmpfs size=300M 0 0 # /dev/sda5 none swap sw 0 0 @@ -489,6 +518,21 @@ hostname() { sed -i "s/^inet_interfaces = .*/inet_interfaces = loopback-only/" /etc/postfix/main.cf grep -q inet_interfaces /etc/postfix/main.cf || echo 'inet_interfaces = loopback-only' >> /etc/postfix/main.cf fi + if [ -r /etc/mailname ] ; then + # adjust /etc/mailname + local etc_mail_domain + etc_mail_domain=$(/bin/dnsdomainname 2>/dev/null || echo localdomain) + case "$HOSTNAME" in + *.*) + local mailname="$HOSTNAME" + ;; + *) + local mailname="${HOSTNAME}.${etc_mail_domain}" + ;; + esac + echo "Setting mailname to ${mailname}" + echo "$mailname" > /etc/mailname + fi fi } # }}} @@ -496,6 +540,7 @@ hostname() { # generate initrd/initramfs {{{ initrd() { # assume the first available kernel as our main kernel + # shellcheck disable=SC2012 KERNELIMG=$(ls -1 /boot/vmlinuz-* 2>/dev/null | head -1) if [ -z "$KERNELIMG" ] ; then echo 'No kernel image found, skipping initrd stuff.'>&2 @@ -507,11 +552,29 @@ initrd() { # generate initrd if [ -n "$INITRD" ] ; then echo "Generating initrd." - update-initramfs -c -t -k $KERNELVER + update-initramfs -c -t -k "$KERNELVER" fi } # }}} +efi_setup() { + if [ -z "$EFI" ] ; then + return 0 + fi + + if ! dpkg --list efibootmgr 2>/dev/null | grep -q '^ii' ; then + echo "Notice: efi option set but no efibootmgr package, installing it therefore." + DEBIAN_FRONTEND=$DEBIAN_FRONTEND $APTINSTALL efibootmgr + fi + + mkdir -p /boot/efi + echo "Mounting $EFI on /boot/efi" + mount "$EFI" /boot/efi || return 1 + + echo "Invoking efibootmgr" + efibootmgr || return 1 +} + # grub configuration/installation {{{ grub_install() { @@ -520,12 +583,25 @@ grub_install() { return 0 fi - if ! dpkg --list grub-pc 2>/dev/null | grep -q '^ii' ; then - echo "Notice: grub option set but no grub-pc package, installing it therefore." - DEBIAN_FRONTEND=$DEBIAN_FRONTEND $APTINSTALL grub-pc + efi_setup || return 1 + + if [ -n "$EFI" ] ; then + GRUB_PACKAGE=grub-efi-amd64 + else + GRUB_PACKAGE=grub-pc + fi + + # make sure this is pre-defined so we have sane settings for automated + # upgrades, see https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=711019 + echo "Setting ${GRUB_PACKAGE} debconf configuration for install device to $GRUB" + echo "${GRUB_PACKAGE} ${GRUB_PACKAGE}/install_devices multiselect $GRUB" | debconf-set-selections + + if ! dpkg --list ${GRUB_PACKAGE} 2>/dev/null | grep -q '^ii' ; then + echo "Notice: grub option set but no ${GRUB_PACKAGE} package, installing it therefore." + DEBIAN_FRONTEND=$DEBIAN_FRONTEND $APTINSTALL ${GRUB_PACKAGE} fi - if ! [ -x "$(which grub-install)" ] ; then + if ! [ -x "$(command -v grub-install)" ] ; then echo "Error: grub-install not available. (Error while installing grub package?)" >&2 return 1 fi @@ -536,9 +612,20 @@ grub_install() { echo "Installing grub on ${GRUB}:" grub-install --no-floppy "$GRUB" done + rm -f /boot/grub/device.map else echo "Installing grub on ${GRUB}:" - grub-install --no-floppy "$GRUB" + case "$RELEASE" in + lenny|squeeze|wheezy) + grub-install --no-floppy "$(readlink -f "${GRUB}")" + rm -f /boot/grub/device.map + ;; + *) + echo "(hd0) ${GRUB}" > /boot/grub/device.map + grub-install "(hd0)" + rm /boot/grub/device.map + ;; + esac fi echo "Adjusting grub configuration for use on ${GRUB}." @@ -553,6 +640,8 @@ grub_install() { return 1 fi + mountpoint /boot/efi &>/dev/null && umount /boot/efi + $UPDATEGRUB } # }}} @@ -585,6 +674,7 @@ finalize() { [ -n "$POLICYRCD" ] && rm -f /usr/sbin/policy-rc.d + umount /sys >/dev/null 2>/dev/null || true umount /proc >/dev/null 2>/dev/null || true } # }}} @@ -607,12 +697,12 @@ trap signal_handler HUP INT QUIT TERM install_policy_rcd for i in chrootmirror grmlrepos backportrepos kernelimg_conf \ - kernel packages extrapackages reconfigure hosts interfaces \ - timezone fstab hostname initrd grub_install passwords \ + kernel packages extrapackages reconfigure hosts \ + default_locales timezone fstab hostname initrd grub_install passwords \ custom_scripts upgrade_system remove_apt_cache services \ remove_chrootmirror; do if stage $i ; then - $i && stage $i done || exit 1 + $i && stage $i 'done' || exit 1 fi done # always execute the finalize stage: