#!/bin/bash function first_stage(){ set -e echo foo first_stage echo -n "hostname: " read hostname_in export NEW_HOSTNAME=$hostname_in echo -n "luks password: " read -s luks_password_in export LUKS_PASSWORD=$luks_password_in echo echo -n "root password: " read -s root_password_in export ROOT_PASSWORD=$root_password_in echo echo -n "user password: " read -s user_password_in export USER_PASSWORD=$user_password_in echo lsblk -ftpo NAME,FSTYPE,LABEL,UUID,FSAVAIL,MOUNTPOINT select DEVICE in $(lsblk -frpno NAME); do echo using $DEVICE break done export DEVICE apt install -y debootstrap cryptsetup btrfs-progs lvm2 rsync if [ -d /dev/cryptvg ]; then mount | grep target | awk '{print $3}'| sort -r | while read LINE; do umount -l $LINE; done if [ -b /dev/cryptvg/swap ]; then swapoff /dev/cryptvg/swap || true fi vgchange -an /dev/cryptvg fi if [ -b /dev/mapper/cryptlvm ]; then cryptsetup luksClose cryptlvm fi wipefs -a ${DEVICE} ( echo o echo n echo p echo 1 echo echo +2G echo n echo p echo 2 echo echo echo w ) | fdisk ${DEVICE} wipefs -a ${DEVICE}1 wipefs -a ${DEVICE}2 echo mkfs.ext4 ${DEVICE}1 yes | mkfs.ext4 ${DEVICE}1 ( echo $LUKS_PASSWORD echo $LUKS_PASSWORD )| cryptsetup luksFormat ${DEVICE}2 echo $LUKS_PASSWORD | cryptsetup luksOpen ${DEVICE}2 cryptlvm unset LUKS_PASSWORD pvcreate /dev/mapper/cryptlvm vgcreate cryptvg /dev/mapper/cryptlvm export LVM_SIZE=$(dev_size /dev/mapper/cryptlvm) export SWAP_SIZE=$(($(mem_size)/1024/1024)) export ROOT_SIZE=$(($LVM_SIZE/1024/1024-$SWAP_SIZE-512)) echo lvcreate /dev/cryptvg --name=root --size=${ROOT_SIZE}M lvcreate /dev/cryptvg --name=root --size=${ROOT_SIZE}M yes | mkfs.btrfs /dev/cryptvg/root echo lvcreate /dev/cryptvg --name=swap --size=${SWAP_SIZE}M lvcreate /dev/cryptvg --name=swap --size=${SWAP_SIZE}M mkswap /dev/cryptvg/swap swapon /dev/cryptvg/swap mkdir -p /tmp/mnt mount /dev/cryptvg/root /tmp/mnt btrfs subvolume create /tmp/mnt/@ btrfs subvolume create /tmp/mnt/@home umount /tmp/mnt echo mount -osubvol=@ /dev/cryptvg/root $TARGET mount -osubvol=@ /dev/cryptvg/root $TARGET echo debootstrap sid $TARGET debootstrap sid $TARGET mount ${DEVICE}1 $TARGET/boot echo mount ${DEVICE}1 $TARGET/boot echo mount -osubvol=@home /dev/cryptvg/root $TARGET/home mount -osubvol=@home /dev/cryptvg/root $TARGET/home genfstab -U $TARGET | tee $TARGET/etc/fstab UUID=$(lsblk -lpo NAME,UUID | grep ${DEVICE}2 | awk '{print $2}') echo cryptlvm UUID=${UUID} none luks,initramfs > $TARGET/etc/crypttab } function second_stage(){ set -e export DEBIAN_FRONTEND=noninteractive ( echo $ROOT_PASSWORD echo $ROOT_PASSWORD ) | passwd unset ROOT_PASSWORD echo -n > /etc/motd echo $NEW_HOSTNAME > /etc/hostname hostname $NEW_HOSTNAME sed -i 's/main/main contrib non-free/g' /etc/apt/sources.list apt update apt install -y linux-image-amd64 grub2 cryptsetup cryptsetup-initramfs cryptsetup-suspend btrfs-progs lvm2 firmware-iwlwifi locales tzdata keyboard-configuration console-common zsh intel-microcode ldnsutils wireguard resolvconf grub-install ${DEVICE} update-grub update-initramfs -k all -u mkdir /snap btrfs subvolume snapshot / /snap/$(date +%Y-%m-%d_basesystem) apt install -y task-mate-desktop mate-desktop-environment-extra dbus-x11 ( echo $USER_PASSWORD echo $USER_PASSWORD echo echo echo echo echo ) | adduser jedi unset USER_PASSWORD btrfs subvolume snapshot / /snap/$(date +%Y-%m-%d_user_gui) apt install -y git wget materia-gtk-theme htop nmap arandr timeshift gparted jq apt install -y virt-manager telegram-desktop chromium firefox thunderbird geany vlc pidgin meld remmina gmpc apt install -y gimp inkscape blender freecad kicad || true btrfs subvolume snapshot / /snap/$(date +%Y-%m-%d_big_tools) chsh --shell /usr/bin/zsh jedi echo second_stage done export -f user_install su jedi -c "bash -c user_install" } function user_install(){ set -e export GIT_SSH_COMMAND="ssh -o UserKnownHostsFile=/dev/null -o StrictHostKeyChecking=no -i/home/jedi/.ssh/id_rsa" export XDG_RUNTIME_DIR=/run/user/1000 dbus-launch dconf write /org/mate/desktop/interface/gtk-theme "'Materia-dark'" || true dbus-launch dconf write /org/mate/marco/general/theme "'Materia-dark'" || true dbus-launch dconf write /org/mate/desktop/interface/icon-theme "'Adwaita'" || true dbus-launch dconf write /org/mate/desktop/peripherals/mouse/cursor-theme "'Adwaita'" || true git clone https://github.com/robbyrussell/oh-my-zsh.git $HOME/.oh-my-zsh chmod 0755 $HOME/.oh-my-zsh chown -R jedi:jedi $HOME cd rsync -a /root/unbox_data/secrets/SSH/ /home/jedi/.ssh/ git clone ssh://git@git.neulandlabor.de:2222/j3d1/laptop_tools.git Tools echo $? TOOLBOX_LINK=$(wget "https://data.services.jetbrains.com/products/releases?code=TBA&latest=true" -O - 2>/dev/null | jq -r ".TBA[0].downloads.linux.link") wget --show-progress -qO ./toolbox.tar.gz ${TOOLBOX_LINK} unset TOOLBOX_LINK TOOLBOX_TEMP_DIR=$(mktemp -d) tar -C "$TOOLBOX_TEMP_DIR" -xf toolbox.tar.gz rm ./toolbox.tar.gz "$TOOLBOX_TEMP_DIR"/*/jetbrains-toolbox rm -r "$TOOLBOX_TEMP_DIR" unset TOOLBOX_TEMP_DIR echo } function post_install_stage(){ sleep 0.5 mount | grep target | awk '{print $3}'| sort -r | while read LINE; do umount -l $LINE; done }