1614 lines
68 KiB
Bash
Executable File
1614 lines
68 KiB
Bash
Executable File
#!/bin/bash
|
|
#
|
|
# .---. . .
|
|
# | | |
|
|
# |--- .--. .-. .-. .-.| .-. .--.--. |.-. .-. .--. .-.
|
|
# | | (.-' (.-' ( | ( )| | | | )( )| | (.-'
|
|
# ' ' --' --' -' - -' ' ' -' -' -' ' - --'
|
|
#
|
|
# Freedom in the Cloud
|
|
#
|
|
# Based on bin/freedombox-customize from freedom-maker
|
|
#
|
|
# License
|
|
# =======
|
|
#
|
|
# This program is free software: you can redistribute it and/or modify
|
|
# it under the terms of the GNU Affero General Public License as published by
|
|
# the Free Software Foundation, either version 3 of the License, or
|
|
# (at your option) any later version.
|
|
#
|
|
# This program is distributed in the hope that it will be useful,
|
|
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
# GNU Affero General Public License for more details.
|
|
#
|
|
# You should have received a copy of the GNU Affero General Public License
|
|
# along with this program. If not, see <http://www.gnu.org/licenses/>.
|
|
|
|
set -e
|
|
set -x
|
|
|
|
PROJECT_NAME='freedombone'
|
|
LOCAL_NAME=${PROJECT_NAME}
|
|
INSTALL_DIR=/root/build
|
|
COMPLETION_FILE=$HOME/${PROJECT_NAME}-completed.txt
|
|
|
|
PROJECT_REPO="https://github.com/bashrc/${PROJECT_NAME}"
|
|
|
|
VARIANT='full'
|
|
|
|
# username created by default within a debian image
|
|
GENERIC_IMAGE_USERNAME='fbone'
|
|
|
|
export TEXTDOMAIN=${PROJECT_NAME}-image-customise
|
|
export TEXTDOMAINDIR="/usr/share/locale"
|
|
|
|
# Whether to minimise the number of decisions during interactive install
|
|
MINIMAL_INSTALL="yes"
|
|
|
|
MY_USERNAME='debian'
|
|
MY_PASSWORD="${PROJECT_NAME}"
|
|
|
|
# Minimum number of characters in a password
|
|
MINIMUM_PASSWORD_LENGTH=10
|
|
|
|
# IP address of the router (gateway)
|
|
ROUTER_IP_ADDRESS="192.168.1.254"
|
|
|
|
# The fixed IP address of the Beaglebone Black on your local network
|
|
BOX_IP_ADDRESS="192.168.1.55"
|
|
|
|
# DNS
|
|
NAMESERVER1='213.73.91.35'
|
|
NAMESERVER2='85.214.20.141'
|
|
|
|
# optional configuration file containing freedombone settings
|
|
CONFIG_FILENAME=
|
|
|
|
# Optional ssh public key to allow
|
|
SSH_PUBKEY="no"
|
|
|
|
# Whether this is a generic image for mass redistribution on the interwebs
|
|
GENERIC_IMAGE="no"
|
|
|
|
# default SSH port
|
|
SSH_PORT=2222
|
|
|
|
# for mesh installs
|
|
TRACKER_PORT=6969
|
|
|
|
# Whether sites are accessible only within a Tor browser
|
|
ONION_ONLY="no"
|
|
|
|
# Whether to only install debian and nothing else
|
|
DEBIAN_INSTALL_ONLY="no"
|
|
|
|
# wifi settings
|
|
WIFI_INTERFACE='wlan0'
|
|
WIFI_SSID=
|
|
WIFI_TYPE='wpa2-psk'
|
|
WIFI_PASSPHRASE=
|
|
WIFI_HOTSPOT='no'
|
|
WIFI_NETWORKS_FILE=~/${PROJECT_NAME}-wifi.cfg
|
|
|
|
# Whether to install non-free wifi drivers for the mesh client
|
|
INSECURE='no'
|
|
|
|
# optional desktop background image for mesh
|
|
MESH_DESKTOP_BACKGROUND_IMAGE=/usr/local/share/${PROJECT_NAME}_mesh_initial_background.png
|
|
|
|
# The browser application to use
|
|
BROWSER=midori
|
|
|
|
MESH_INSTALL_DIR=/var/lib
|
|
|
|
# for mesh installs whether to delete all data and generate
|
|
# a new identity at every shutdown/boot
|
|
AMNESIC='no'
|
|
|
|
# Whether this is a dedicated gnusocial or postactiv instance
|
|
SOCIALINSTANCE=
|
|
|
|
# defines the initial keyboard layout
|
|
KEYBOARD_MAP='gb'
|
|
|
|
# Strings used for setting the username
|
|
MESH_TITLE=$"Freedombone Mesh"
|
|
MESH_SET_USERNAME=$"Welcome to the Freedombone mesh.\n\nThe first thing you will need to do is set a username so that other peers can find you."
|
|
|
|
# Whether to enable zeronet on the mesh
|
|
ENABLE_ZERONET=
|
|
|
|
MESH_TEXT_EDITOR='pluma'
|
|
|
|
PATH=/usr/local/bin:/usr/local/sbin:/usr/bin:/usr/sbin:/bin:/sbin
|
|
|
|
function configure_backports {
|
|
echo "deb http://${DEBIAN_REPO}/debian/ ${DEBIAN_VERSION}-backports main" >> $rootdir/etc/apt/sources.list
|
|
}
|
|
|
|
function configure_contrib_repo {
|
|
if ! grep -q "contrib" $rootdir/etc/apt/sources.list; then
|
|
chroot "$rootdir" /bin/sed -i "s| main| main contrib|g" /etc/apt/sources.list
|
|
fi
|
|
}
|
|
|
|
enable_eatmydata_override() {
|
|
chroot $rootdir apt-get install -y eatmydata
|
|
if [ -x $rootdir/usr/bin/eatmydata ] && \
|
|
[ ! -f $rootdir/etc/apt/apt.conf.d/95debian-edu-install-dpkg-eatmydata ]; then
|
|
echo $"info: Adding apt config to call dpkg via eatmydata"
|
|
printf "#!/bin/sh\nexec eatmydata dpkg \"\$@\"\n" \
|
|
> $rootdir/var/tmp/dpkg-eatmydata
|
|
chmod 755 $rootdir/var/tmp/dpkg-eatmydata
|
|
cat > $rootdir/etc/apt/apt.conf.d/95debian-edu-install-dpkg-eatmydata <<EOF
|
|
Dir::Bin::dpkg "/var/tmp/dpkg-eatmydata";
|
|
EOF
|
|
else
|
|
echo $"error: unable to find /usr/bin/eatmydata after installing the eatmydata package"
|
|
fi
|
|
}
|
|
|
|
disable_eatmydata_override() {
|
|
for override in \
|
|
/etc/apt/apt.conf.d/95debian-edu-install-dpkg-eatmydata \
|
|
/var/tmp/dpkg-eatmydata ; do
|
|
echo $"info: Removing apt config to call dpkg via eatmydata"
|
|
if [ -f $rootdir$override ] ; then
|
|
rm -f $rootdir$override
|
|
else
|
|
echo $"warning: missing $rootdir$override"
|
|
fi
|
|
done
|
|
sync # Flush file buffers before continuing
|
|
}
|
|
|
|
set_apt_sources() {
|
|
NEW_MIRROR="$1"
|
|
COMPONENTS="main"
|
|
|
|
cat <<EOF > etc/apt/sources.list
|
|
deb $NEW_MIRROR $SUITE $COMPONENTS
|
|
deb-src $NEW_MIRROR $SUITE $COMPONENTS
|
|
|
|
#deb http://security.debian.org/ $SUITE/updates main
|
|
#deb-src http://security.debian.org/ $SUITE/updates main
|
|
EOF
|
|
}
|
|
|
|
configure_networking() {
|
|
chroot "$rootdir" apt-get -yq install resolvconf
|
|
|
|
if [[ "$MACHINE" == "beaglebonewifi" ]]; then
|
|
# Allow networking over USB in order to configure the
|
|
# wifi login settings
|
|
|
|
echo '# This file describes the network interfaces available on your system' > $rootdir/etc/network/interfaces
|
|
echo '# and how to activate them. For more information, see interfaces(5).' >> $rootdir/etc/network/interfaces
|
|
echo 'source /etc/network/interfaces.d/*' >> $rootdir/etc/network/interfaces
|
|
|
|
echo 'iface usb0 inet static' >> $rootdir/etc/network/interfaces.d/usb
|
|
echo ' address 192.168.7.2' >> $rootdir/etc/network/interfaces.d/usb
|
|
echo ' netmask 255.255.255.252' >> $rootdir/etc/network/interfaces.d/usb
|
|
echo ' network 192.168.7.0' >> $rootdir/etc/network/interfaces.d/usb
|
|
echo ' gateway 192.168.7.1' >> $rootdir/etc/network/interfaces.d/usb
|
|
return
|
|
fi
|
|
|
|
if [[ $DEBIAN_INSTALL_ONLY != "no" ]]; then
|
|
return
|
|
fi
|
|
|
|
if [[ $GENERIC_IMAGE == "no" ]]; then
|
|
echo '# This file describes the network interfaces available on your system' > $rootdir/etc/network/interfaces
|
|
echo '# and how to activate them. For more information, see interfaces(5).' >> $rootdir/etc/network/interfaces
|
|
echo 'source /etc/network/interfaces.d/*' >> $rootdir/etc/network/interfaces
|
|
|
|
echo "auto eth0
|
|
iface eth0 inet static
|
|
address $BOX_IP_ADDRESS
|
|
netmask 255.255.255.0
|
|
gateway $ROUTER_IP_ADDRESS" > $rootdir/etc/network/interfaces.d/static
|
|
|
|
hexarray=( 1 2 3 4 5 6 7 8 9 0 a b c d e f )
|
|
a=${hexarray[$RANDOM%16]}${hexarray[$RANDOM%16]}
|
|
b=${hexarray[$RANDOM%16]}${hexarray[$RANDOM%16]}
|
|
c=${hexarray[$RANDOM%16]}${hexarray[$RANDOM%16]}
|
|
d=${hexarray[$RANDOM%16]}${hexarray[$RANDOM%16]}
|
|
e=${hexarray[$RANDOM%16]}${hexarray[$RANDOM%16]}
|
|
echo "hwaddress ether de:$a:$b:$c:$d:$e" > $rootdir/etc/network/interfaces.d/macaddress
|
|
fi
|
|
|
|
# configure DNS
|
|
resolvconf=$rootdir/etc/resolvconf/resolv.conf.d/head
|
|
echo 'domain localdomain' > $resolvconf
|
|
echo 'search localdomain' >> $resolvconf
|
|
echo "nameserver $NAMESERVER1" >> $resolvconf
|
|
echo "nameserver $NAMESERVER2" >> $resolvconf
|
|
echo "nameserver $NAMESERVER3" >> $resolvconf
|
|
echo "nameserver $NAMESERVER4" >> $resolvconf
|
|
echo "nameserver $NAMESERVER5" >> $resolvconf
|
|
echo "nameserver $NAMESERVER6" >> $resolvconf
|
|
chroot "$rootdir" resolvconf -u
|
|
|
|
if [[ $VARIANT != "meshclient" && $VARIANT != "meshusb" ]]; then
|
|
# change the motd to show further install instructions
|
|
echo $"
|
|
.---. . .
|
|
| | |
|
|
|--- .--. .-. .-. .-.| .-. .--.--. |.-. .-. .--. .-.
|
|
| | (.-' (.-' ( | ( )| | | | )( )| | (.-'
|
|
' ' --' --' -' - -' ' ' -' -' -' ' - --'
|
|
|
|
Initial base install
|
|
|
|
Your system is not yet installed. To complete the process run the
|
|
following commands, then enter your details.
|
|
|
|
sudo su
|
|
${PROJECT_NAME} menuconfig
|
|
|
|
" > $rootdir/etc/motd
|
|
else
|
|
echo $"
|
|
.---. . .
|
|
| | |
|
|
|--- .--. .-. .-. .-.| .-. .--.--. |.-. .-. .--. .-.
|
|
| | (.-' (.-' ( | ( )| | | | )( )| | (.-'
|
|
' ' --' --' -' - -' ' ' -' -' -' ' - --'
|
|
|
|
Freedom in the Mesh
|
|
" > $rootdir/etc/motd
|
|
fi
|
|
}
|
|
|
|
configure_ssh() {
|
|
if [[ $VARIANT == "mesh"* ]]; then
|
|
return
|
|
fi
|
|
|
|
sed -i "s/Port .*/Port ${SSH_PORT}/g" $rootdir/etc/ssh/sshd_config
|
|
sed -i "s/#Port ${SSH_PORT}/Port ${SSH_PORT}/g" $rootdir/etc/ssh/sshd_config
|
|
|
|
if [[ "$SSH_PUBKEY" != "no" ]]; then
|
|
if [ ! -d $rootdir/home/$MY_USERNAME/.ssh ]; then
|
|
mkdir $rootdir/home/$MY_USERNAME/.ssh
|
|
fi
|
|
echo "$SSH_PUBKEY" > $rootdir/home/$MY_USERNAME/.ssh/authorized_keys
|
|
chroot $rootdir /bin/chown -R $MY_USERNAME:$MY_USERNAME /home/$MY_USERNAME/.ssh
|
|
sed -i 's|PasswordAuthentication.*|PasswordAuthentication no|g' $rootdir/etc/ssh/sshd_config
|
|
sed -i 's|#PasswordAuthentication no|PasswordAuthentication no|g' $rootdir/etc/ssh/sshd_config
|
|
echo $"Using ssh public key:"
|
|
echo $SSH_PUBKEY
|
|
echo $'Password ssh authentication turned off'
|
|
fi
|
|
}
|
|
|
|
create_generic_image() {
|
|
if [[ $DEBIAN_INSTALL_ONLY != "no" ]]; then
|
|
return
|
|
fi
|
|
if [[ $GENERIC_IMAGE == "no" ]]; then
|
|
return
|
|
fi
|
|
if [ $CONFIG_FILENAME ]; then
|
|
if [[ "$CONFIG_FILENAME" == *"mesh.cfg"* ]]; then
|
|
VARIANT="mesh"
|
|
fi
|
|
fi
|
|
|
|
# Don't install any configuration. This will be a base system
|
|
if [[ $VARIANT != "mesh"* ]]; then
|
|
CONFIG_FILENAME=
|
|
else
|
|
touch $rootdir/root/.initial_mesh_setup
|
|
fi
|
|
|
|
# Stick with the existing login for mesh clients
|
|
if [[ $VARIANT == "meshclient" || $VARIANT == "meshusb" ]]; then
|
|
return
|
|
fi
|
|
|
|
# The presence of this file indicates that the initial
|
|
# setup has not yet been completed
|
|
touch $rootdir/home/$MY_USERNAME/.initial_setup
|
|
chroot $rootdir /bin/chown $MY_USERNAME:$MY_USERNAME /home/$MY_USERNAME/.initial_setup
|
|
touch $rootdir/root/.initial_setup
|
|
|
|
cat >> $rootdir/home/$MY_USERNAME/.bashrc <<EOF
|
|
# initial setup of the system
|
|
if [ -f ~/.initial_setup ]; then
|
|
clear
|
|
echo "
|
|
.---. . .
|
|
| | |
|
|
|--- .--. .-. .-. .-.| .-. .--.--. |.-. .-. .--. .-.
|
|
| | (.-' (.-' ( | ( )| | | | )( )| | (.-'
|
|
' ' --' --' -' - -' ' ' -' -' -' ' - --'
|
|
|
|
Initial setup process
|
|
|
|
Please enter your password a second time.
|
|
"
|
|
sudo su
|
|
fi
|
|
EOF
|
|
|
|
echo "MY_USERNAME=${MY_USERNAME}" >> $rootdir/root/.bashrc
|
|
echo "SSH_PORT=${SSH_PORT}" >> $rootdir/root/.bashrc
|
|
echo '# initial setup of the system' >> $rootdir/root/.bashrc
|
|
echo 'if [ -f ~/.initial_setup ]; then' >> $rootdir/root/.bashrc
|
|
echo ' if [ -f ~/login.txt ]; then' >> $rootdir/root/.bashrc
|
|
echo ' NEW_USER_PASSWORD=$(printf `cat ~/login.txt`)' >> $rootdir/root/.bashrc
|
|
echo ' else' >> $rootdir/root/.bashrc
|
|
echo ' ENTROPY=$(cat /proc/sys/kernel/random/entropy_avail)' >> $rootdir/root/.bashrc
|
|
echo ' if [ $ENTROPY -lt 500 ]; then' >> $rootdir/root/.bashrc
|
|
ENTROPY_MESSAGE1=$'Initial setup process'
|
|
ENTROPY_MESSAGE2=$'Password Generation'
|
|
ENTROPY_MESSAGE3=$'WARNING: The entropy available on this system is too low to generate a password.\n\nThe installation process cannot continue.'
|
|
echo " dialog --backtitle \"${ENTROPY_MESSAGE1}\" --title \"${ENTROPY_MESSAGE2}\" --msgbox \"${ENTROPY_MESSAGE3}\" 8 50" >> $rootdir/root/.bashrc
|
|
echo ' exit' >> $rootdir/root/.bashrc
|
|
echo ' fi' >> $rootdir/root/.bashrc
|
|
echo -n ' NEW_USER_PASSWORD=$(openssl rand -base64 32 | tr -dc A-Za-z0-9 | head -c ' >> $rootdir/root/.bashrc
|
|
echo "${DEFAULT_PASSWORD_LENGTH})" >> $rootdir/root/.bashrc
|
|
echo ' fi' >> $rootdir/root/.bashrc
|
|
echo ' echo "${NEW_USER_PASSWORD}" > ~/login.txt' >> $rootdir/root/.bashrc
|
|
|
|
echo ' clear' >> $rootdir/root/.bashrc
|
|
echo ' echo ""' >> $rootdir/root/.bashrc
|
|
NEW_LOGIN_PASSWORD_MESSAGE1=$'Your new login password is:'
|
|
NEW_LOGIN_PASSWORD_MESSAGE2=$'Use it whenever you wish to ssh into this system.'
|
|
NEW_LOGIN_PASSWORD_MESSAGE3=$'IMPORTANT: Please take a moment to enter the above password into a\npassword manager or write it down somewhere.'
|
|
PRESS_KEY_MESSAGE=$'Press any key to continue...'
|
|
echo " echo \"${NEW_LOGIN_PASSWORD_MESSAGE1}\"" >> $rootdir/root/.bashrc
|
|
echo ' echo ""' >> $rootdir/root/.bashrc
|
|
echo ' echo " ${NEW_USER_PASSWORD}"' >> $rootdir/root/.bashrc
|
|
echo ' echo ""' >> $rootdir/root/.bashrc
|
|
echo " echo \"${NEW_LOGIN_PASSWORD_MESSAGE2}\"" >> $rootdir/root/.bashrc
|
|
echo ' echo ""' >> $rootdir/root/.bashrc
|
|
echo " echo \"${NEW_LOGIN_PASSWORD_MESSAGE3}\"" >> $rootdir/root/.bashrc
|
|
echo ' echo ""' >> $rootdir/root/.bashrc
|
|
echo " read -n1 -r -p \"${PRESS_KEY_MESSAGE}\" key" >> $rootdir/root/.bashrc
|
|
|
|
# change the password for the admin user
|
|
echo -n " echo \"${MY_USERNAME}:" >> $rootdir/root/.bashrc
|
|
echo '$(printf `cat ~/login.txt`)"|chpasswd' >> $rootdir/root/.bashrc
|
|
|
|
# update before continuing
|
|
echo " cd /root/${PROJECT_NAME}" >> $rootdir/root/.bashrc
|
|
echo " git stash" >> $rootdir/root/.bashrc
|
|
echo " git pull" >> $rootdir/root/.bashrc
|
|
echo " git checkout stretch" >> $rootdir/root/.bashrc
|
|
echo " make install" >> $rootdir/root/.bashrc
|
|
|
|
if [[ $VARIANT != "mesh"* && $VARIANT != "usb" ]]; then
|
|
if [[ "$SOCIALINSTANCE" == "gnusocial" ]]; then
|
|
echo " ${PROJECT_NAME} menuconfig-gnusocial" >> $rootdir/root/.bashrc
|
|
else
|
|
if [[ "$SOCIALINSTANCE" == "postactiv" ]]; then
|
|
echo " ${PROJECT_NAME} menuconfig-postactiv" >> $rootdir/root/.bashrc
|
|
else
|
|
if [[ $ONION_ONLY == "no" ]]; then
|
|
if [[ $MINIMAL_INSTALL == "no" ]]; then
|
|
echo " ${PROJECT_NAME} menuconfig-full" >> $rootdir/root/.bashrc
|
|
else
|
|
echo " ${PROJECT_NAME} menuconfig" >> $rootdir/root/.bashrc
|
|
fi
|
|
else
|
|
echo " ${PROJECT_NAME} menuconfig-onion" >> $rootdir/root/.bashrc
|
|
fi
|
|
fi
|
|
fi
|
|
else
|
|
echo " echo ''" >> $rootdir/root/.bashrc
|
|
fi
|
|
echo ' if [ "$?" = "0" ]; then' >> $rootdir/root/.bashrc
|
|
echo " if [ -f ~/${PROJECT_NAME}-completed.txt ]; then" >> $rootdir/root/.bashrc
|
|
echo " # Check that the initial setup really did complete" >> $rootdir/root/.bashrc
|
|
echo " if grep -q 'tripwire' ~/${PROJECT_NAME}-completed.txt; then" >> $rootdir/root/.bashrc
|
|
# Remove the initial setup files
|
|
echo ' rm /root/.initial_setup' >> $rootdir/root/.bashrc
|
|
echo ' rm /home/fbone/.initial_setup' >> $rootdir/root/.bashrc
|
|
echo " touch /root/.remove_${GENERIC_IMAGE_USERNAME}" >> $rootdir/root/.bashrc
|
|
echo ' shred -zu ~/login.txt' >> $rootdir/root/.bashrc
|
|
if [[ $VARIANT != "mesh"* && $VARIANT != "usb" ]]; then
|
|
echo ' SSH_ONION_HOSTNAME=$(cat /var/lib/tor/hidden_service_ssh/hostname)' >> $rootdir/root/.bashrc
|
|
|
|
echo ' if [ ${#SSH_ONION_HOSTNAME} -lt 2 ]; then' >> $rootdir/root/.bashrc
|
|
echo ' exit 62392' >> $rootdir/root/.bashrc
|
|
echo ' fi' >> $rootdir/root/.bashrc
|
|
fi
|
|
echo " if [ -f /root/${PROJECT_NAME}-wifi.cfg ]; then" >> $rootdir/root/.bashrc
|
|
echo " echo '[Unit]' > /etc/systemd/system/wifistart.service" >> $rootdir/root/.bashrc
|
|
echo " echo 'Description=WifiStartup (Start wifi networking)' >> /etc/systemd/system/wifistart.service" >> $rootdir/root/.bashrc
|
|
echo " echo 'After=syslog.target' >> /etc/systemd/system/wifistart.service" >> $rootdir/root/.bashrc
|
|
echo " echo 'After=network.target' >> /etc/systemd/system/wifistart.service" >> $rootdir/root/.bashrc
|
|
echo " echo 'After=remote-fs.target' >> /etc/systemd/system/wifistart.service" >> $rootdir/root/.bashrc
|
|
echo " echo '' >> /etc/systemd/system/wifistart.service" >> $rootdir/root/.bashrc
|
|
echo " echo '[Service]' >> /etc/systemd/system/wifistart.service" >> $rootdir/root/.bashrc
|
|
echo " echo 'Type=simple' >> /etc/systemd/system/wifistart.service" >> $rootdir/root/.bashrc
|
|
echo " echo 'User=root' >> /etc/systemd/system/wifistart.service" >> $rootdir/root/.bashrc
|
|
echo " echo 'Group=root' >> /etc/systemd/system/wifistart.service" >> $rootdir/root/.bashrc
|
|
echo " echo 'WorkingDirectory=/root' >> /etc/systemd/system/wifistart.service" >> $rootdir/root/.bashrc
|
|
echo " echo 'ExecStart=/usr/local/bin/freedombone-wifi --wait 5 2> /dev/null' >> /etc/systemd/system/wifistart.service" >> $rootdir/root/.bashrc
|
|
echo " echo '' >> /etc/systemd/system/wifistart.service" >> $rootdir/root/.bashrc
|
|
echo " echo '[Install]' >> /etc/systemd/system/wifistart.service" >> $rootdir/root/.bashrc
|
|
echo " echo 'WantedBy=multi-user.target' >> /etc/systemd/system/wifistart.service" >> $rootdir/root/.bashrc
|
|
echo " systemctl enable wifistart" >> $rootdir/root/.bashrc
|
|
echo " systemctl daemon-reload" >> $rootdir/root/.bashrc
|
|
echo ' fi' >> $rootdir/root/.bashrc
|
|
echo ' systemctl reboot -i' >> $rootdir/root/.bashrc
|
|
echo ' fi' >> $rootdir/root/.bashrc
|
|
echo ' fi' >> $rootdir/root/.bashrc
|
|
echo ' else' >> $rootdir/root/.bashrc
|
|
echo ' key=' >> $rootdir/root/.bashrc
|
|
echo ' while [[ $key != "x" ]]; do' >> $rootdir/root/.bashrc
|
|
INSTALL_FAIL_MESSAGE=$"Install failed. Press x to continue..."
|
|
echo " read -n1 -r -p \"${INSTALL_FAIL_MESSAGE}\" key" >> $rootdir/root/.bashrc
|
|
echo ' done' >> $rootdir/root/.bashrc
|
|
echo ' fi' >> $rootdir/root/.bashrc
|
|
echo ' exit' >> $rootdir/root/.bashrc
|
|
echo 'else' >> $rootdir/root/.bashrc
|
|
echo ' # Remove default account after install' >> $rootdir/root/.bashrc
|
|
echo " if [ -f /root/.remove_${GENERIC_IMAGE_USERNAME} ]; then" >> $rootdir/root/.bashrc
|
|
echo " if [ -d /home/${GENERIC_IMAGE_USERNAME} ]; then" >> $rootdir/root/.bashrc
|
|
echo " userdel -r ${GENERIC_IMAGE_USERNAME}" >> $rootdir/root/.bashrc
|
|
echo " if [ -d /home/${GENERIC_IMAGE_USERNAME} ]; then" >> $rootdir/root/.bashrc
|
|
echo " rm -rf /home/${GENERIC_IMAGE_USERNAME}" >> $rootdir/root/.bashrc
|
|
echo " rm /root/.remove_${GENERIC_IMAGE_USERNAME}" >> $rootdir/root/.bashrc
|
|
echo ' fi' >> $rootdir/root/.bashrc
|
|
echo ' fi' >> $rootdir/root/.bashrc
|
|
echo ' fi' >> $rootdir/root/.bashrc
|
|
echo 'fi' >> $rootdir/root/.bashrc
|
|
}
|
|
|
|
continue_installation() {
|
|
# If a configuration file exists then run with it
|
|
# otherwise the interactive installer can be used
|
|
# This is equivalent to installing freedombox-setup on freedombox
|
|
if [ $CONFIG_FILENAME ]; then
|
|
if [ ${#CONFIG_FILENAME} -gt 2 ]; then
|
|
cp $CONFIG_FILENAME $rootdir/root/$PROJECT_NAME.cfg
|
|
cat $rootdir/root/$PROJECT_NAME.cfg
|
|
chroot "$rootdir" su -c "$PROJECT_NAME -c /root/$PROJECT_NAME.cfg" - root
|
|
fi
|
|
fi
|
|
}
|
|
|
|
atheros_wifi() {
|
|
if [[ "$MACHINE" == "beaglebonewifi" ]]; then
|
|
return
|
|
fi
|
|
|
|
firmware_filename="open-ath9k-htc-firmware_1.3-1_all.deb"
|
|
firmware_hash='5fea58ffefdf0ef15b504db7fbe3bc078c03e0d927bba64085e4b6f2546102f5'
|
|
|
|
firmware_url="http://us.archive.trisquel.info/trisquel/pool/main/o/open-ath9k-htc-firmware/$firmware_filename"
|
|
firmware_tempfile="/tmp/$firmware_filename"
|
|
wget "$firmware_url" -O "$rootdir$firmware_tempfile"
|
|
downloaded_firmware_hash=$(sha256sum "$rootdir$firmware_tempfile" | awk -F ' ' '{print $1}')
|
|
if [[ "$downloaded_firmware_hash" == "$firmware_hash" ]]; then
|
|
chroot "$rootdir" dpkg -i "$firmware_tempfile"
|
|
else
|
|
echo 'WARNING: Atheros Wifi firmware hash does not match. The driver has not been installed.'
|
|
fi
|
|
}
|
|
|
|
configure_wifi() {
|
|
if [[ $VARIANT == "mesh"* ]]; then
|
|
return
|
|
fi
|
|
|
|
if [ -f $WIFI_NETWORKS_FILE ]; then
|
|
chroot "$rootdir" ${PROJECT_NAME}-wifi --networks $WIFI_NETWORKS_FILE
|
|
return
|
|
fi
|
|
|
|
if [[ $WIFI_TYPE != 'none' ]]; then
|
|
if [ ${#WIFI_PASSPHRASE} -lt 2 ]; then
|
|
return
|
|
fi
|
|
chroot "$rootdir" ${PROJECT_NAME}-wifi -s $WIFI_SSID -t $WIFI_TYPE -p $WIFI_PASSPHRASE --hotspot $WIFI_HOTSPOT
|
|
else
|
|
chroot "$rootdir" ${PROJECT_NAME}-wifi -s $WIFI_SSID -t $WIFI_TYPE --hotspot $WIFI_HOTSPOT
|
|
fi
|
|
}
|
|
|
|
##############################################################################
|
|
# Mesh networking
|
|
##############################################################################
|
|
|
|
# for mesh installs
|
|
TRACKER_PORT=6969
|
|
|
|
WIFI_CHANNEL=2
|
|
|
|
# B.A.T.M.A.N settings
|
|
BATMAN_CELLID='02:BA:00:00:03:01'
|
|
WIFI_SSID='mesh'
|
|
|
|
# To avoid confusions these are obtained from the main project file
|
|
#TOXID_REPO=
|
|
#TOX_PORT=
|
|
#TOXCORE_REPO=
|
|
#TOXIC_REPO=
|
|
#TOXCORE_COMMIT=
|
|
#TOXIC_COMMIT=
|
|
# These are some default nodes, but you can replace them with trusted nodes
|
|
# as you prefer. See https://wiki.tox.im/Nodes
|
|
#TOX_NODES=
|
|
#TOX_NODES=(
|
|
# '192.254.75.102,2607:5600:284::2,33445,951C88B7E75C867418ACDB5D273821372BB5BD652740BCDF623A4FA293E75D2F,Tox RELENG,US'
|
|
# '144.76.60.215,2a01:4f8:191:64d6::1,33445,04119E835DF3E78BACF0F84235B300546AF8B936F035185E2A8E9E0A67C8924F,sonOfRa,DE'
|
|
#)
|
|
|
|
# To avoid confusions these are obtained from the main project file
|
|
ZERONET_REPO=
|
|
ZERONET_COMMIT=
|
|
ZERONET_PORT=
|
|
ZERONET_BLOG_REPO=
|
|
ZERONET_BLOG_COMMIT=
|
|
ZERONET_MAIL_REPO=
|
|
ZERONET_MAIL_COMMIT=
|
|
ZERONET_FORUM_REPO=
|
|
ZERONET_FORUM_COMMIT=
|
|
ZERONET_ID_REPO=
|
|
ZERONET_ID_COMMIT=
|
|
|
|
# Directory where source code is downloaded and compiled
|
|
INSTALL_DIR=$HOME/build
|
|
|
|
INSTALLING_MESH=
|
|
|
|
PATCHWORK_REPO="https://github.com/ssbc/patchwork"
|
|
PATCHWORK_COMMIT='60111a9e3385d65be0d17aa0d15fd20e5fb311ce'
|
|
|
|
FERMENT_REPO="https://github.com/LolaShare/ferment"
|
|
FERMENT_COMMIT='6e0e434114cd4cc652a03f6dcc6ddcec007b0058'
|
|
|
|
install_patchwork() {
|
|
if [[ $VARIANT != "meshclient" ]]; then
|
|
return
|
|
fi
|
|
|
|
get_npm_arch
|
|
|
|
git clone $PATCHWORK_REPO $rootdir/etc/patchwork
|
|
if [ ! -d $rootdir/etc/patchwork ]; then
|
|
exit 7823520
|
|
fi
|
|
cd $rootdir/etc/patchwork
|
|
git checkout $PATCHWORK_COMMIT -b $PATCHWORK_COMMIT
|
|
|
|
cat <<EOF > $rootdir/usr/bin/install_patchwork
|
|
#!/bin/bash
|
|
cd /etc/patchwork
|
|
npm install --arch=$NPM_ARCH --build-from-source
|
|
npm install --arch=$NPM_ARCH --save-dev electron-rebuild
|
|
./node_modules/.bin/electron-rebuild
|
|
npm install --arch=$NPM_ARCH git-ssb
|
|
EOF
|
|
chroot "$rootdir" /bin/chmod +x /usr/bin/install_patchwork
|
|
chroot "$rootdir" /usr/bin/install_patchwork
|
|
rm $rootdir/usr/bin/install_patchwork
|
|
|
|
echo '#!/bin/bash' > $rootdir/usr/bin/start_patchwork
|
|
echo 'cd /etc/patchwork' >> $rootdir/usr/bin/start_patchwork
|
|
echo 'npm start' >> $rootdir/usr/bin/start_patchwork
|
|
chmod +x $rootdir/usr/bin/start_patchwork
|
|
|
|
# Copy icon to an accesible location
|
|
cp $rootdir/root/$PROJECT_NAME/img/icon_patchwork.png $rootdir/etc/patchwork/icon_patchwork.png
|
|
}
|
|
|
|
install_ferment() {
|
|
if [[ $VARIANT != "meshclient" ]]; then
|
|
return
|
|
fi
|
|
|
|
get_npm_arch
|
|
|
|
git clone $FERMENT_REPO $rootdir/etc/ferment
|
|
if [ ! -d $rootdir/etc/ferment ]; then
|
|
exit 5239465
|
|
fi
|
|
cd $rootdir/etc/ferment
|
|
git checkout $FERMENT_COMMIT -b $FERMENT_COMMIT
|
|
|
|
cat <<EOF > $rootdir/usr/bin/install_ferment
|
|
#!/bin/bash
|
|
cd /etc/ferment
|
|
npm install --arch=$NPM_ARCH --build-from-source
|
|
npm install --arch=$NPM_ARCH --save-dev electron-rebuild
|
|
./node_modules/.bin/electron-rebuild
|
|
npm install --arch=$NPM_ARCH git-ssb
|
|
EOF
|
|
chroot "$rootdir" /bin/chmod +x /usr/bin/install_ferment
|
|
chroot "$rootdir" /usr/bin/install_ferment
|
|
rm $rootdir/usr/bin/install_ferment
|
|
|
|
echo '#!/bin/bash' > $rootdir/usr/bin/start_ferment
|
|
echo 'cd /etc/ferment' >> $rootdir/usr/bin/start_ferment
|
|
echo 'npm start' >> $rootdir/usr/bin/start_ferment
|
|
chmod +x $rootdir/usr/bin/start_ferment
|
|
|
|
# Copy icon to an accesible location
|
|
cp $rootdir/root/$PROJECT_NAME/img/icon_ferment.png $rootdir/etc/patchwork/icon_ferment.png
|
|
}
|
|
|
|
initialise_mesh() {
|
|
if [[ $VARIANT != "mesh"* ]]; then
|
|
return
|
|
fi
|
|
if [[ $DEBIAN_INSTALL_ONLY != "no" ]]; then
|
|
return
|
|
fi
|
|
|
|
if [[ $INSECURE == $'yes' ]]; then
|
|
echo '*********************************************************'
|
|
echo $'WARNING: non-free wifi drivers are being installed.'
|
|
echo $' This may compromise the security of your system.'
|
|
echo '*********************************************************'
|
|
|
|
# enable non-free repo
|
|
if ! grep -q "non-free" $rootdir/etc/apt/sources.list; then
|
|
chroot "$rootdir" /bin/sed -i "s| main| main non-free|g" /etc/apt/sources.list
|
|
fi
|
|
|
|
chroot "$rootdir" apt-get update
|
|
|
|
# install proprietary wifi drivers
|
|
# see https://wiki.debian.org/iwlwifi
|
|
chroot "$rootdir" apt-get -yq install firmware-iwlwifi firmware-b43-installer firmware-brcm80211 firmware-realtek
|
|
fi
|
|
|
|
INSTALLING_MESH=1
|
|
|
|
chroot "$rootdir" apt-get -yq install apt-transport-https
|
|
|
|
configure_firewall
|
|
install_avahi
|
|
install_batman
|
|
install_vpn
|
|
install_tomb
|
|
#install_tahoelafs
|
|
#install_librevault
|
|
install_patchwork
|
|
install_ferment
|
|
install_ipfs
|
|
install_tox
|
|
install_web_server
|
|
install_pelican
|
|
if [ $ENABLE_ZERONET ]; then
|
|
install_zeronet
|
|
fi
|
|
|
|
MESH_SERVICE='mesh-setup.service'
|
|
MESH_SETUP_DAEMON=$rootdir/etc/systemd/system/$MESH_SERVICE
|
|
|
|
MESH_STARTUP_PARAMS="${MY_USERNAME}"
|
|
if [[ $AMNESIC != 'no' ]]; then
|
|
MESH_STARTUP_PARAMS="${MY_USERNAME} amnesic"
|
|
fi
|
|
|
|
echo '[Unit]' > $MESH_SETUP_DAEMON
|
|
echo 'Description=Initial mesh router configuration' >> $MESH_SETUP_DAEMON
|
|
echo 'After=syslog.target' >> $MESH_SETUP_DAEMON
|
|
echo 'After=network.target' >> $MESH_SETUP_DAEMON
|
|
echo '' >> $MESH_SETUP_DAEMON
|
|
echo '[Service]' >> $MESH_SETUP_DAEMON
|
|
echo 'Type=simple' >> $MESH_SETUP_DAEMON
|
|
echo 'User=root' >> $MESH_SETUP_DAEMON
|
|
echo 'Group=root' >> $MESH_SETUP_DAEMON
|
|
echo 'WorkingDirectory=/root' >> $MESH_SETUP_DAEMON
|
|
echo "ExecStart=/usr/local/bin/${PROJECT_NAME}-image-mesh ${MESH_STARTUP_PARAMS} > /var/log/mesh-setup.log" >> $MESH_SETUP_DAEMON
|
|
echo '' >> $MESH_SETUP_DAEMON
|
|
echo 'TimeoutSec=99999' >> $MESH_SETUP_DAEMON
|
|
echo '' >> $MESH_SETUP_DAEMON
|
|
echo '[Install]' >> $MESH_SETUP_DAEMON
|
|
echo 'WantedBy=multi-user.target' >> $MESH_SETUP_DAEMON
|
|
chmod +x $MESH_SETUP_DAEMON
|
|
chroot "$rootdir" systemctl enable $MESH_SERVICE
|
|
}
|
|
|
|
# User interface for USB drive installs ######################################
|
|
|
|
function mesh_client_startup_applications {
|
|
if [ ! -d $rootdir/home/$MY_USERNAME/Desktop ]; then
|
|
mkdir -p $rootdir/home/$MY_USERNAME/Desktop
|
|
fi
|
|
|
|
if [ ! -d $rootdir/home/$MY_USERNAME/.config/autostart ]; then
|
|
mkdir -p $rootdir/home/$MY_USERNAME/.config/autostart
|
|
chroot "$rootdir" /bin/chown -R $MY_USERNAME:$MY_USERNAME /home/$MY_USERNAME/.config
|
|
fi
|
|
|
|
START_DESKTOP=$rootdir/home/$MY_USERNAME/mesh-desktop.sh
|
|
FIRST_BOOT=/home/$MY_USERNAME/.first_boot
|
|
TAHOE_COMMAND="cd /var/lib/tahoelafs && venv/bin/tahoe"
|
|
echo '#!/bin/bash' > $START_DESKTOP
|
|
echo "setxkbmap ${KEYBOARD_MAP}" > $START_DESKTOP
|
|
echo 'dconf write /org/mate/caja/desktop/volumes-visible false' >> $START_DESKTOP
|
|
echo 'dconf write /org/mate/caja/desktop/computer-icon-visible false' >> $START_DESKTOP
|
|
echo 'dconf write /org/mate/caja/desktop/home-icon-visible false' >> $START_DESKTOP
|
|
echo 'dconf write /org/mate/caja/desktop/network-icon-visible false' >> $START_DESKTOP
|
|
echo 'dconf write /org/mate/caja/desktop/trash-icon-visible false' >> $START_DESKTOP
|
|
echo 'dconf write /org/mate/caja/desktop/volumes-visible false' >> $START_DESKTOP
|
|
echo 'dconf write /org/mate/desktop/media-handling/automount-open false' >> $START_DESKTOP
|
|
echo 'dconf write /org/mate/screensaver/lock-enabled false' >> $START_DESKTOP
|
|
echo 'dconf write /org/mate/power-manager/lock-keyring-suspend false' >> $START_DESKTOP
|
|
echo 'dconf write /org/mate/power-manager/lock-suspend false' >> $START_DESKTOP
|
|
echo 'dconf write /org/mate/power-manager/lock-use-screensaver false' >> $START_DESKTOP
|
|
echo 'dconf write /org/mate/power-manager/lock-blank-screen false' >> $START_DESKTOP
|
|
echo 'dconf write /org/mate/power-manager/lock-hibernate false' >> $START_DESKTOP
|
|
echo 'dconf write /org/mate/power-manager/lock-keyring-hibernate false' >> $START_DESKTOP
|
|
echo 'dconf write /org/mate/desktop/peripherals/touchpad/scroll-method 2' >> $START_DESKTOP
|
|
echo "touch /home/$MY_USERNAME/.dbus/Xdbus" >> $START_DESKTOP
|
|
echo "chmod 600 /home/$MY_USERNAME/.dbus/Xdbus" >> $START_DESKTOP
|
|
echo "env | grep DBUS_SESSION_BUS_ADDRESS > /home/$MY_USERNAME/.dbus/Xdbus" >> $START_DESKTOP
|
|
echo "echo 'export DBUS_SESSION_BUS_ADDRESS' >> /home/$MY_USERNAME/.dbus/Xdbus" >> $START_DESKTOP
|
|
|
|
echo '' >> $START_DESKTOP
|
|
echo "amixer set 'Master' unmute" >> $START_DESKTOP
|
|
echo "amixer set 'Master' 50%" >> $START_DESKTOP
|
|
echo '' >> $START_DESKTOP
|
|
echo '' >> $START_DESKTOP
|
|
echo "if [ ! -f $FIRST_BOOT ]; then" >> $START_DESKTOP
|
|
echo " $TAHOE_COMMAND start" >> $START_DESKTOP
|
|
echo ' exit 0' >> $START_DESKTOP
|
|
echo 'fi' >> $START_DESKTOP
|
|
echo '' >> $START_DESKTOP
|
|
echo 'INITIAL_TOX_USERNAME=""' >> $START_DESKTOP
|
|
echo 'while [ ${#INITIAL_TOX_USERNAME} -eq 0 ]; do' >> $START_DESKTOP
|
|
echo ' data=$(tempfile 2>/dev/null)' >> $START_DESKTOP
|
|
echo ' trap "rm -f $data" 0 1 2 5 15' >> $START_DESKTOP
|
|
echo -n " dialog --title \"${MESH_TITLE}\" " >> $START_DESKTOP
|
|
echo -n "--backtitle \"${MESH_TITLE}\" " >> $START_DESKTOP
|
|
echo -n "--inputbox \"${MESH_SET_USERNAME}\" 12 60 Anon " >> $START_DESKTOP
|
|
echo '2>$data' >> $START_DESKTOP
|
|
echo ' sel=$?' >> $START_DESKTOP
|
|
echo ' case $sel in' >> $START_DESKTOP
|
|
echo ' 0)' >> $START_DESKTOP
|
|
echo ' INITIAL_TOX_USERNAME=$(<$data)' >> $START_DESKTOP
|
|
echo ' ;;' >> $START_DESKTOP
|
|
echo ' esac' >> $START_DESKTOP
|
|
echo 'done' >> $START_DESKTOP
|
|
echo '' >> $START_DESKTOP
|
|
echo 'toxid --setuser "$INITIAL_TOX_USERNAME"' >> $START_DESKTOP
|
|
echo '' >> $START_DESKTOP
|
|
echo "if [ -f /home/$MY_USERNAME/.tahoe/tahoe.cfg ]; then" >> $START_DESKTOP
|
|
echo " sed -i 's|nickname =.*|nickname = \$INITIAL_TOX_USERNAME|g' /home/$MY_USERNAME/.tahoe/tahoe.cfg" >> $START_DESKTOP
|
|
|
|
echo " $TAHOE_COMMAND restart" >> $START_DESKTOP
|
|
echo 'fi' >> $START_DESKTOP
|
|
echo '' >> $START_DESKTOP
|
|
echo "rm -f $FIRST_BOOT" >> $START_DESKTOP
|
|
echo '' >> $START_DESKTOP
|
|
echo 'exit 0' >> $START_DESKTOP
|
|
chmod +x $START_DESKTOP
|
|
|
|
START_DESKTOP2=$rootdir/home/$MY_USERNAME/.config/autostart/mesh-start.desktop
|
|
echo '[Desktop Entry]' > $START_DESKTOP2
|
|
echo 'Type=Application' >> $START_DESKTOP2
|
|
echo 'Name=Mesh start desktop script' >> $START_DESKTOP2
|
|
echo "Exec=bash -c '~/mesh-desktop.sh'" >> $START_DESKTOP2
|
|
echo 'X-GNOME-Autostart-enabled=true' >> $START_DESKTOP2
|
|
chmod +x $START_DESKTOP2
|
|
|
|
START_DESKTOP3=$rootdir/home/$MY_USERNAME/.config/autostart/set_username.desktop
|
|
echo '[Desktop Entry]' > $START_DESKTOP3
|
|
echo 'Version=1.0' >> $START_DESKTOP3
|
|
echo 'Name=Set Username' >> $START_DESKTOP3
|
|
echo 'Type=Application' >> $START_DESKTOP3
|
|
echo 'Comment=Set username' >> $START_DESKTOP3
|
|
echo "Exec=mate-terminal -e \"bash -c /home/${MY_USERNAME}/mesh-desktop.sh\"" >> $START_DESKTOP3
|
|
echo 'Icon=user-away' >> $START_DESKTOP3
|
|
echo 'Terminal=false' >> $START_DESKTOP3
|
|
echo 'Categories=Application;' >> $START_DESKTOP3
|
|
chmod +x $START_DESKTOP3
|
|
}
|
|
|
|
function mesh_desktop_icons {
|
|
if [ ! -d $rootdir/home/$MY_USERNAME/Desktop ]; then
|
|
mkdir -p $rootdir/home/$MY_USERNAME/Desktop
|
|
fi
|
|
|
|
# Terminal
|
|
#echo '[Desktop Entry]' > $rootdir/home/$MY_USERNAME/Desktop/terminal.desktop
|
|
#echo 'Name=MATE Terminal' >> $rootdir/home/$MY_USERNAME/Desktop/terminal.desktop
|
|
#echo 'Type=Application' >> $rootdir/home/$MY_USERNAME/Desktop/terminal.desktop
|
|
#echo 'Comment=Use the command line' >> $rootdir/home/$MY_USERNAME/Desktop/terminal.desktop
|
|
#echo 'TryExec=mate-terminal' >> $rootdir/home/$MY_USERNAME/Desktop/terminal.desktop
|
|
#echo 'Exec=mate-terminal' >> $rootdir/home/$MY_USERNAME/Desktop/terminal.desktop
|
|
#echo 'Icon=terminal' >> $rootdir/home/$MY_USERNAME/Desktop/terminal.desktop
|
|
#echo 'StartupNotify=true' >> $rootdir/home/$MY_USERNAME/Desktop/terminal.desktop
|
|
|
|
chroot "$rootdir" /bin/chown -R $MY_USERNAME:$MY_USERNAME /home/$MY_USERNAME/Desktop
|
|
}
|
|
|
|
function configure_user_interface {
|
|
if [[ $VARIANT != "meshclient" && $VARIANT != "meshusb" && $VARIANT != "usb" ]]; then
|
|
return
|
|
fi
|
|
|
|
# desktop
|
|
chroot "$rootdir" apt-get -yq install mate-desktop-environment
|
|
|
|
# tool to change desktop settings from command line
|
|
chroot "$rootdir" apt-get -yq install dconf-cli dconf-gsettings-backend dbus dbus-x11
|
|
|
|
# for tomb
|
|
chroot "$rootdir" apt-get -yq install pinentry-gtk2
|
|
|
|
# for tox video
|
|
chroot "$rootdir" apt-get -yq install ffmpeg cheese v4l-utils
|
|
|
|
# to provide notifications
|
|
chroot "$rootdir" apt-get -yq install libnotify-bin
|
|
|
|
# for video/audio
|
|
chroot "$rootdir" apt-get -yq install libtheora-bin libvorbis-dev v4l-utils
|
|
|
|
# a sane editor
|
|
chroot "$rootdir" apt-get -yq install emacs
|
|
|
|
# for wifi monitoring
|
|
chroot "$rootdir" apt-get -yq install horst
|
|
|
|
# for sound level control
|
|
chroot "$rootdir" apt-get -yq install alsa-utils pavucontrol
|
|
|
|
# to play various media types
|
|
chroot "$rootdir" apt-get -yq install vlc
|
|
|
|
# android adb to allow phones to be connected and for example transfer photos/documents
|
|
chroot "$rootdir" apt-get -yq install android-tools-adb
|
|
|
|
# USB cloning tool
|
|
chroot "$rootdir" apt-get -yq install gnome-multi-writer
|
|
|
|
# Produce a text file on the desktop listing users on the mesh
|
|
cat <<EOF > $rootdir/usr/bin/list-tox-users
|
|
#!/bin/bash
|
|
users_list=\$(lstox | awk -F ' ' '{\$1=""; print \$0}' | sed -e 's/^[[:space:]]*//' | sort -d | uniq)
|
|
if [ ! \$users_list ]; then
|
|
no_of_users=0
|
|
else
|
|
no_of_users=\$(echo "\$users_list" | wc -l)
|
|
fi
|
|
if [ \$no_of_users -gt 0 ]; then
|
|
echo "\$users_list" > /tmp/Users.txt
|
|
chown $MY_USERNAME:$MY_USERNAME /tmp/Users.txt
|
|
|
|
echo 'showing_users=\$(ps aux | grep $MESH_TEXT_EDITOR | grep "Users.txt")' > /home/$MY_USERNAME/showusers
|
|
echo 'if [ \${#showing_users} -eq 0 ]; then' >> /home/$MY_USERNAME/showusers
|
|
echo ' $MESH_TEXT_EDITOR /tmp/Users.txt' >> /home/$MY_USERNAME/showusers
|
|
echo 'fi' >> /home/$MY_USERNAME/showusers
|
|
echo 'exit 0' >> /home/$MY_USERNAME/showusers
|
|
chmod +x /home/$MY_USERNAME/showusers
|
|
chown $MY_USERNAME:$MY_USERNAME /home/$MY_USERNAME/showusers
|
|
|
|
echo '[Desktop Entry]' > /home/$MY_USERNAME/Desktop/Users.desktop
|
|
if [ \$no_of_users -lt 2 ]; then
|
|
echo "Name=\$no_of_users Other User" >> /home/$MY_USERNAME/Desktop/Users.desktop
|
|
else
|
|
echo "Name=\$no_of_users Other Users" >> /home/$MY_USERNAME/Desktop/Users.desktop
|
|
fi
|
|
echo 'Type=Application' >> /home/$MY_USERNAME/Desktop/Users.desktop
|
|
echo 'Comment=List of users' >> /home/$MY_USERNAME/Desktop/Users.desktop
|
|
echo 'Exec=bash /home/$MY_USERNAME/showusers' >> /home/$MY_USERNAME/Desktop/Users.desktop
|
|
echo 'Icon=/usr/share/$PROJECT_NAME/avatars/otheruser.png' >> /home/$MY_USERNAME/Desktop/Users.desktop
|
|
echo 'StartupNotify=false' >> /home/$MY_USERNAME/Desktop/Users.desktop
|
|
chmod +x /home/$MY_USERNAME/Desktop/Users.desktop
|
|
chown $MY_USERNAME:$MY_USERNAME /home/$MY_USERNAME/Desktop/Users.desktop
|
|
|
|
if [ ! -f /home/$MY_USERNAME/Desktop/social.desktop ]; then
|
|
echo '[Desktop Entry]' > /home/$MY_USERNAME/Desktop/social.desktop
|
|
echo 'Name=Social' >> /home/$MY_USERNAME/Desktop/social.desktop
|
|
echo 'Type=Application' >> /home/$MY_USERNAME/Desktop/social.desktop
|
|
echo 'Comment=A decentralized messaging and sharing app built on top of Secure Scuttlebutt (SSB)' >> /home/$MY_USERNAME/Desktop/social.desktop
|
|
echo 'Exec=bash /usr/bin/start_patchwork' >> /home/$MY_USERNAME/Desktop/social.desktop
|
|
echo "Icon=/etc/patchwork/icon_patchwork.png" >> /home/$MY_USERNAME/Desktop/social.desktop
|
|
echo 'StartupNotify=true' >> /home/$MY_USERNAME/Desktop/social.desktop
|
|
chmod +x /home/$MY_USERNAME/Desktop/social.desktop
|
|
chown $MY_USERNAME:$MY_USERNAME /home/$MY_USERNAME/Desktop/social.desktop
|
|
else
|
|
if grep -q "Offline" /home/$MY_USERNAME/Desktop/social.desktop; then
|
|
sed -i 's|Name=.*|Name=Social|g' /home/$MY_USERNAME/Desktop/social.desktop
|
|
fi
|
|
fi
|
|
|
|
if [ ! -f /home/$MY_USERNAME/Desktop/audio.desktop ]; then
|
|
echo '[Desktop Entry]' > /home/$MY_USERNAME/Desktop/audio.desktop
|
|
echo 'Name=Audio/Music' >> /home/$MY_USERNAME/Desktop/audio.desktop
|
|
echo 'Type=Application' >> /home/$MY_USERNAME/Desktop/audio.desktop
|
|
echo 'Comment=Audio publishing and streaming' >> /home/$MY_USERNAME/Desktop/audio.desktop
|
|
echo 'Exec=bash /usr/bin/start_ferment' >> /home/$MY_USERNAME/Desktop/audio.desktop
|
|
echo "Icon=/etc/patchwork/icon_ferment.png" >> /home/$MY_USERNAME/Desktop/audio.desktop
|
|
echo 'StartupNotify=true' >> /home/$MY_USERNAME/Desktop/audio.desktop
|
|
chmod +x /home/$MY_USERNAME/Desktop/audio.desktop
|
|
chown $MY_USERNAME:$MY_USERNAME /home/$MY_USERNAME/Desktop/audio.desktop
|
|
else
|
|
if grep -q "Offline" /home/$MY_USERNAME/Desktop/audio.desktop; then
|
|
sed -i 's|Name=.*|Name=Audio/Music|g' /home/$MY_USERNAME/Desktop/audio.desktop
|
|
fi
|
|
fi
|
|
|
|
if [ -f /tmp/.ipfs-users ]; then
|
|
echo '[Desktop Entry]' > /home/$MY_USERNAME/Desktop/sites.desktop
|
|
echo 'Type=Application' >> /home/$MY_USERNAME/Desktop/sites.desktop
|
|
echo "Name=Visit a site" >> /home/$MY_USERNAME/Desktop/sites.desktop
|
|
echo 'Comment=Visit a site' >> /home/$MY_USERNAME/Desktop/sites.desktop
|
|
echo 'Exec=mate-terminal -e /usr/local/bin/${PROJECT_NAME}-mesh-visit-site' >> /home/$MY_USERNAME/Desktop/sites.desktop
|
|
echo 'Icon=/usr/share/${PROJECT_NAME}/avatars/ipfs.jpg' >> /home/$MY_USERNAME/Desktop/sites.desktop
|
|
echo 'StartupNotify=false' >> /home/$MY_USERNAME/Desktop/sites.desktop
|
|
chmod +x /home/$MY_USERNAME/Desktop/sites.desktop
|
|
chown $MY_USERNAME:$MY_USERNAME /home/$MY_USERNAME/Desktop/sites.desktop
|
|
|
|
echo '[Desktop Entry]' > /home/$MY_USERNAME/Desktop/blog.desktop
|
|
echo 'Type=Application' >> /home/$MY_USERNAME/Desktop/blog.desktop
|
|
echo "Name=Blog" >> /home/$MY_USERNAME/Desktop/blog.desktop
|
|
echo 'Comment=View or create blog entries' >> /home/$MY_USERNAME/Desktop/blog.desktop
|
|
echo 'Exec=mate-terminal -e /usr/local/bin/${PROJECT_NAME}-mesh-blog' >> /home/$MY_USERNAME/Desktop/blog.desktop
|
|
echo 'Icon=/usr/share/${PROJECT_NAME}/avatars/blog.png' >> /home/$MY_USERNAME/Desktop/blog.desktop
|
|
echo 'StartupNotify=false' >> /home/$MY_USERNAME/Desktop/blog.desktop
|
|
chmod +x /home/$MY_USERNAME/Desktop/blog.desktop
|
|
chown $MY_USERNAME:$MY_USERNAME /home/$MY_USERNAME/Desktop/blog.desktop
|
|
fi
|
|
|
|
if [ ! -f /home/$MY_USERNAME/runtox ]; then
|
|
echo 'qtox_running=\$(ps aux | grep qtox | grep data)' > /home/$MY_USERNAME/runtox
|
|
echo 'if [ \${#qtox_running} -eq 0 ]; then' >> /home/$MY_USERNAME/runtox
|
|
echo ' bash -c "qtox -p data"' >> /home/$MY_USERNAME/runtox
|
|
echo 'fi' >> /home/$MY_USERNAME/runtox
|
|
echo 'exit 0' >> /home/$MY_USERNAME/runtox
|
|
chmod +x /home/$MY_USERNAME/runtox
|
|
chown $MY_USERNAME:$MY_USERNAME /home/$MY_USERNAME/runtox
|
|
fi
|
|
|
|
if [ ! -f /home/$MY_USERNAME/Desktop/tox.desktop ]; then
|
|
echo '[Desktop Entry]' > /home/$MY_USERNAME/Desktop/tox.desktop
|
|
echo 'Name=Chat' >> /home/$MY_USERNAME/Desktop/tox.desktop
|
|
echo 'Type=Application' >> /home/$MY_USERNAME/Desktop/tox.desktop
|
|
echo 'Comment=Chat, Voice and Video' >> /home/$MY_USERNAME/Desktop/tox.desktop
|
|
echo 'Exec=bash /home/$MY_USERNAME/runtox' >> /home/$MY_USERNAME/Desktop/tox.desktop
|
|
echo "Icon=/usr/share/$PROJECT_NAME/avatars/chat.png" >> /home/$MY_USERNAME/Desktop/tox.desktop
|
|
echo 'StartupNotify=true' >> /home/$MY_USERNAME/Desktop/tox.desktop
|
|
chmod +x /home/$MY_USERNAME/Desktop/tox.desktop
|
|
chown $MY_USERNAME:$MY_USERNAME /home/$MY_USERNAME/Desktop/tox.desktop
|
|
fi
|
|
else
|
|
if [ -f /tmp/Users.txt ]; then
|
|
rm /tmp/Users.txt
|
|
rm /home/$MY_USERNAME/Desktop/Users.desktop
|
|
if [ -f /home/$MY_USERNAME/Desktop/Users.desktop ]; then
|
|
rm /home/$MY_USERNAME/Desktop/Users.desktop
|
|
fi
|
|
if [ -f /home/$MY_USERNAME/Desktop/sites.desktop ]; then
|
|
rm /home/$MY_USERNAME/Desktop/sites.desktop
|
|
fi
|
|
if [ -f /home/$MY_USERNAME/Desktop/blog.desktop ]; then
|
|
rm /home/$MY_USERNAME/Desktop/blog.desktop
|
|
fi
|
|
if [ -f /home/$MY_USERNAME/Desktop/tox.desktop ]; then
|
|
rm /home/$MY_USERNAME/Desktop/tox.desktop
|
|
fi
|
|
if [ -f /home/$MY_USERNAME/Desktop/social.desktop ]; then
|
|
if ! grep -q "Offline" /home/$MY_USERNAME/Desktop/social.desktop; then
|
|
sed -i 's|Name=.*|Name=Social (Offline)|g' /home/$MY_USERNAME/Desktop/social.desktop
|
|
fi
|
|
fi
|
|
if [ -f /home/$MY_USERNAME/Desktop/audio.desktop ]; then
|
|
if ! grep -q "Offline" /home/$MY_USERNAME/Desktop/audio.desktop; then
|
|
sed -i 's|Name=.*|Name=Audio/Music (Offline)|g' /home/$MY_USERNAME/Desktop/audio.desktop
|
|
fi
|
|
fi
|
|
pkill qtox
|
|
fi
|
|
fi
|
|
EOF
|
|
chroot "$rootdir" /bin/chown $MY_USERNAME:$MY_USERNAME /usr/bin/list-tox-users
|
|
chroot "$rootdir" /bin/chmod +x /usr/bin/list-tox-users
|
|
echo "* * * * * $MY_USERNAME bash -c /usr/bin/list-tox-users > /dev/null" >> $rootdir/etc/crontab
|
|
|
|
if [[ $VARIANT != "usb" ]]; then
|
|
# log in automatically
|
|
chroot "$rootdir" apt-get -y install nodm xinit
|
|
echo 'NODM_ENABLED=true' > /etc/default/nodm
|
|
echo "NODM_USER=$MY_USERNAME" >> /etc/default/nodm
|
|
|
|
chroot "$rootdir" mkdir /etc/systemd/system/getty@tty1.service.d
|
|
echo '[Service]' > $rootdir/etc/systemd/system/getty@tty1.service.d/override.conf
|
|
echo 'ExecStart=' >> $rootdir/etc/systemd/system/getty@tty1.service.d/override.conf
|
|
echo 'ExecStart=-/sbin/agetty --autologin fbone --noclear %I $TERM' >> $rootdir/etc/systemd/system/getty@tty1.service.d/override.conf
|
|
|
|
echo '[[ -z $DISPLAY && $XDG_VTNR -eq 1 ]] && exec startx' >> $rootdir/home/$MY_USERNAME/.profile
|
|
|
|
chroot "$rootdir" systemctl set-default multi-user.target
|
|
|
|
mesh_client_startup_applications
|
|
mesh_desktop_icons
|
|
|
|
# Different desktop background for amnesic
|
|
if [[ $AMNESIC != 'no' ]]; then
|
|
MESH_DESKTOP_BACKGROUND_IMAGE=/usr/local/share/${PROJECT_NAME}_mesh_amnesic_background.png
|
|
fi
|
|
|
|
# change the desktop background
|
|
if [ $MESH_DESKTOP_BACKGROUND_IMAGE ]; then
|
|
if [ -f $MESH_DESKTOP_BACKGROUND_IMAGE ]; then
|
|
if [ -d $rootdir/usr/share/images/desktop-base ]; then
|
|
cp $MESH_DESKTOP_BACKGROUND_IMAGE $rootdir/usr/share/images/desktop-base/${PROJECT_NAME}_mesh_background.png
|
|
chroot "$rootdir" /bin/rm /usr/share/images/desktop-base/desktop-background
|
|
chroot "$rootdir" ln -s /usr/share/images/desktop-base/${PROJECT_NAME}_mesh_background.png /usr/share/images/desktop-base/desktop-background
|
|
fi
|
|
fi
|
|
fi
|
|
else
|
|
chroot "$rootdir" apt-get -yq install lightdm
|
|
fi
|
|
|
|
# browser
|
|
chroot "$rootdir" apt-get -yq install $BROWSER
|
|
|
|
# help
|
|
mkdir -p $rootdir/home/${MY_USERNAME}/help/images
|
|
cd $rootdir/root/${PROJECT_NAME}/website
|
|
./deploy.sh EN $rootdir/home/${MY_USERNAME}/help
|
|
chroot "$rootdir" /bin/chown -R ${MY_USERNAME}:${MY_USERNAME} /home/${MY_USERNAME}/help
|
|
|
|
# Tox user interface
|
|
enable_tox_repo
|
|
mesh_tox_qtox
|
|
# copy the default qtox ini file
|
|
if [ ! -d ${rootdir}/home/${MY_USERNAME}/.config/tox ]; then
|
|
mkdir ${rootdir}/home/${MY_USERNAME}/.config/tox
|
|
cp /usr/local/bin/${PROJECT_NAME}-config-qtox ${rootdir}/home/${MY_USERNAME}/.config/tox/qtox.ini
|
|
chroot "$rootdir" /bin/chown -R ${MY_USERNAME}:${MY_USERNAME} /home/${MY_USERNAME}/.config
|
|
fi
|
|
|
|
if [[ $VARIANT == "usb" ]]; then
|
|
# tor
|
|
chroot "$rootdir" apt-get -yq install tor
|
|
|
|
# xmpp client
|
|
chroot "$rootdir" echo "deb ftp://ftp.gajim.org/debian unstable main" > /etc/apt/sources.list.d/gajim.list
|
|
chroot "$rootdir" apt-get update
|
|
chroot "$rootdir" apt-get -yq install gajim-dev-keyring
|
|
chroot "$rootdir" apt-get -yq install git python-dev python-pip gajim-nightly
|
|
chroot "$rootdir" mkdir /home/$GENERIC_IMAGE_USERNAME/.local/share/gajim/plugins -p
|
|
chroot "$rootdir" git clone https://github.com/omemo/gajim-omemo /home/$GENERIC_IMAGE_USERNAME/.local/share/gajim/plugins/gajim-omemo
|
|
chroot "$rootdir" pip install protobuf==2.6.1, python-axolotl==0.1.35
|
|
chroot "$rootdir" /bin/chown -R $GENERIC_IMAGE_USERNAME:$GENERIC_IMAGE_USERNAME /home/$GENERIC_IMAGE_USERNAME/.local
|
|
|
|
# IRC client
|
|
chroot "$rootdir" apt-get -yq install hexchat profanity
|
|
fi
|
|
}
|
|
|
|
##############################################################################
|
|
# setup_utils
|
|
##############################################################################
|
|
|
|
function image_install_inadyn {
|
|
if [ $INSTALLING_MESH ]; then
|
|
return
|
|
fi
|
|
if [ ! -d $rootdir/root/build ]; then
|
|
mkdir -p $rootdir/root/build
|
|
fi
|
|
chroot "$rootdir" apt-get -yq install build-essential curl libgnutls28-dev automake1.11 libconfuse-dev
|
|
|
|
if [ -d /repos/inadyn ]; then
|
|
mkdir $rootdir/root/build/inadyn
|
|
cp -r -p /repos/inadyn/. $rootdir/root/build/inadyn
|
|
cd $rootdir/root/build/inadyn
|
|
git pull
|
|
else
|
|
git clone $INADYN_REPO $rootdir/root/build/inadyn
|
|
fi
|
|
|
|
if [ ! -d $rootdir/root/build/inadyn ]; then
|
|
echo 'Failed to clone inadyn'
|
|
exit 728252
|
|
fi
|
|
cd $rootdir/root/build/inadyn
|
|
git checkout $INADYN_COMMIT -b $INADYN_COMMIT
|
|
|
|
cd $rootdir/root/build/inadyn
|
|
echo '#!/bin/bash' > $rootdir/root/build/build_inadyn.sh
|
|
echo 'cd ~/build/inadyn' >> $rootdir/root/build/build_inadyn.sh
|
|
echo '#./autogen.sh' >> $rootdir/root/build/build_inadyn.sh
|
|
echo './configure' >> $rootdir/root/build/build_inadyn.sh
|
|
echo 'USE_OPENSSL=1 make' >> $rootdir/root/build/build_inadyn.sh
|
|
echo 'make install' >> $rootdir/root/build/build_inadyn.sh
|
|
chmod +x $rootdir/root/build/build_inadyn.sh
|
|
chroot "$rootdir" /root/build/build_inadyn.sh
|
|
if [ ! -f $rootdir/usr/local/sbin/inadyn ]; then
|
|
echo 'Failed to build inadyn'
|
|
exit 6209356
|
|
fi
|
|
|
|
# create a configuration file
|
|
echo 'background' > $rootdir/etc/inadyn.conf
|
|
echo 'verbose 1' >> $rootdir/etc/inadyn.conf
|
|
echo 'period 300' >> $rootdir/etc/inadyn.conf
|
|
echo 'startup-delay 60' >> $rootdir/etc/inadyn.conf
|
|
echo 'cache-dir /run/inadyn' >> $rootdir/etc/inadyn.conf
|
|
echo 'logfile /dev/null' >> $rootdir/etc/inadyn.conf
|
|
chmod 600 $rootdir/etc/inadyn.conf
|
|
|
|
echo '[Unit]' > $rootdir/etc/systemd/system/inadyn.service
|
|
echo 'Description=inadyn (DynDNS updater)' >> $rootdir/etc/systemd/system/inadyn.service
|
|
echo 'After=network.target' >> $rootdir/etc/systemd/system/inadyn.service
|
|
echo '' >> $rootdir/etc/systemd/system/inadyn.service
|
|
echo '[Service]' >> $rootdir/etc/systemd/system/inadyn.service
|
|
echo 'ExecStart=/usr/local/sbin/inadyn --config /etc/inadyn.conf' >> $rootdir/etc/systemd/system/inadyn.service
|
|
echo 'Restart=always' >> $rootdir/etc/systemd/system/inadyn.service
|
|
echo 'Type=forking' >> $rootdir/etc/systemd/system/inadyn.service
|
|
echo '' >> $rootdir/etc/systemd/system/inadyn.service
|
|
echo '[Install]' >> $rootdir/etc/systemd/system/inadyn.service
|
|
echo 'WantedBy=multi-user.target' >> $rootdir/etc/systemd/system/inadyn.service
|
|
chroot "$rootdir" systemctl enable inadyn
|
|
echo "inadyn commit:$INADYN_COMMIT" >> $rootdir/root/freedombone-completed.txt
|
|
}
|
|
|
|
function image_setup_utils {
|
|
if [ $INSTALLING_MESH ]; then
|
|
return
|
|
fi
|
|
chroot "$rootdir" apt-get -yq install apt-transport-https
|
|
chroot "$rootdir" apt-get -yq remove --purge apache2-bin*
|
|
chroot "$rootdir" apt-get -yq dist-upgrade
|
|
chroot "$rootdir" apt-get -yq install ca-certificates
|
|
chroot "$rootdir" apt-get -yq install apt-utils
|
|
|
|
if [[ $ARCHITECTURE == 'amd64' ]]; then
|
|
chroot "$rootdir" apt-get -yq install linux-image-amd64
|
|
fi
|
|
|
|
if [[ $ARCHITECTURE == 'qemu'* || $ARCHITECTURE == 'amd64' || $ARCHITECTURE == 'x86_64' || $ARCHITECTURE == 'i686' || $ARCHITECTURE == 'i386' ]]; then
|
|
chroot "$rootdir" apt-get -yq install grub2 lvm2
|
|
fi
|
|
|
|
chroot "$rootdir" apt-get -yq install locales locales-all debconf
|
|
|
|
SYSCTL_FILE=$rootdir/etc/sysctl.conf
|
|
if [ ! -f $SYSCTL_FILE ]; then
|
|
touch $SYSCTL_FILE
|
|
fi
|
|
cp $SYSCTL_FILE $rootdir/root/sysctl.conf
|
|
chown $CURR_USER:$CURR_GROUP $rootdir/root/sysctl.conf
|
|
if ! grep -q "tcp_challenge_ack_limit" $rootdir/root/sysctl.conf; then
|
|
echo 'net.ipv4.tcp_challenge_ack_limit = 999999999' >> $rootdir/root/sysctl.conf
|
|
else
|
|
sed -i 's|net.ipv4.tcp_challenge_ack_limit.*|net.ipv4.tcp_challenge_ack_limit = 999999999|g' $rootdir/root/sysctl.conf
|
|
fi
|
|
cp $rootdir/root/sysctl.conf $SYSCTL_FILE
|
|
rm $rootdir/root/sysctl.conf
|
|
|
|
# all the packages
|
|
chroot "$rootdir" apt-get -yq install cryptsetup libgfshare-bin duplicity sshpass wget
|
|
chroot "$rootdir" apt-get -yq install avahi-daemon avahi-utils avahi-discover
|
|
chroot "$rootdir" apt-get -yq install connect-proxy openssh-server
|
|
chroot "$rootdir" apt-get -yq install sudo git dialog build-essential avahi-daemon avahi-utils
|
|
chroot "$rootdir" apt-get -yq install avahi-discover avahi-autoipd iptables dnsutils net-tools
|
|
chroot "$rootdir" apt-get -yq install network-manager iputils-ping libnss-mdns libnss-myhostname
|
|
chroot "$rootdir" apt-get -yq install libnss-gw-name nano man ntp locales locales-all debconf
|
|
chroot "$rootdir" apt-get -yq install wireless-tools wpasupplicant usbutils cryptsetup zsh
|
|
chroot "$rootdir" apt-get -yq install pinentry-curses eatmydata iotop bc hostapd haveged
|
|
chroot "$rootdir" apt-get -yq install cpulimit screen elinks libpam-cracklib
|
|
chroot "$rootdir" apt-get -yq install vim-common python3 unattended-upgrades
|
|
|
|
# Tor and ssh over tor
|
|
chroot "$rootdir" apt-get -yq install tor connect-proxy
|
|
chroot "$rootdir" connect-proxy
|
|
sed -i 's|#Log notice file.*|Log notice file /dev/null|g' $rootdir/etc/tor/torrc
|
|
sed -i 's|Log notice file.*|Log notice file /dev/null|g' $rootdir/etc/tor/torrc
|
|
sed -i "s|#AccountingMax.*|AccountingMax $TOR_MAX_TRAFFIC_PER_DAY_GB GBytes|g" $rootdir/etc/tor/torrc
|
|
sed -i "s|AccountingMax.*|AccountingMax $TOR_MAX_TRAFFIC_PER_DAY_GB GBytes|g" $rootdir/etc/tor/torrc
|
|
if ! grep -q 'Host *.onion' $rootdir/root/.ssh/config; then
|
|
if [ ! -d $rootdir/root/.ssh ]; then
|
|
mkdir $rootdir/root/.ssh
|
|
fi
|
|
echo 'Host *.onion' >> $rootdir/root/.ssh/config
|
|
echo 'ProxyCommand connect -R remote -5 -S 127.0.0.1:9050 %h %p' >> $rootdir/root/.ssh/config
|
|
fi
|
|
if ! grep -q 'Host *.onion' $rootdir/etc/skel/.ssh/config; then
|
|
if [ ! -d $rootdir/etc/skel/.ssh ]; then
|
|
mkdir $rootdir/etc/skel/.ssh
|
|
fi
|
|
echo 'Host *.onion' >> $rootdir/etc/skel/.ssh/config
|
|
echo 'ProxyCommand connect -R remote -5 -S 127.0.0.1:9050 %h %p' >> $rootdir/etc/skel/.ssh/config
|
|
fi
|
|
|
|
# Install golang
|
|
chroot "$rootdir" adduser --disabled-login --gecos 'go' go
|
|
GOARCH=
|
|
if [[ $ARCHITECTURE == *"386" || $ARCHITECTURE == *"686" ]]; then
|
|
GOARCH=386
|
|
fi
|
|
if [[ $ARCHITECTURE == *"amd64" || $ARCHITECTURE == "x86_64" ]]; then
|
|
GOARCH=amd64
|
|
fi
|
|
if [[ $ARCHITECTURE == *"arm"* ]]; then
|
|
GOARCH=armv6l
|
|
fi
|
|
if [[ $ARCHITECTURE == *"aarch"* || $ARCHITECTURE == *"arm64"* ]]; then
|
|
GOARCH=arm64
|
|
fi
|
|
if [ ! $GOARCH ]; then
|
|
echo $'System architecture was not specified when installing Go'
|
|
exit 6734378
|
|
fi
|
|
GO_SOURCE=https://storage.googleapis.com/golang/go${GO_VERSION}.linux-${GOARCH}.tar.gz
|
|
|
|
if [ ! -d ${rootdir}/root/build ]; then
|
|
mkdir -p $rootdir/root/build
|
|
fi
|
|
cd $rootdir/root/build
|
|
wget ${GO_SOURCE}
|
|
if [ ! -f ${rootdir}/root/build/go${GO_VERSION}.linux-${GOARCH}.tar.gz ]; then
|
|
exit 26524
|
|
fi
|
|
chroot "$rootdir" tar -C /home/go -xzf ${INSTALL_DIR}/go${GO_VERSION}.linux-${GOARCH}.tar.gz
|
|
if [ ! -d ${rootdir}/home/go/go/bin ]; then
|
|
echo 'Go binary not installed'
|
|
exit 763562
|
|
fi
|
|
mv ${rootdir}/home/go/go ${rootdir}/home/go/go${GO_VERSION}
|
|
echo "export GOROOT=/home/go" >> ${rootdir}/root/.bashrc
|
|
echo "export GOROOT=/home/go" >> ${rootdir}/etc/skel/.bashrc
|
|
echo "export GOROOT=/home/go" >> ${rootdir}/home/go/.bashrc
|
|
echo "export GOPATH=\$GOROOT/go${GO_VERSION}/bin" >> ${rootdir}/root/.bashrc
|
|
echo "export GOPATH=\$GOROOT/go${GO_VERSION}/bin" >> ${rootdir}/etc/skel/.bashrc
|
|
echo "export GOPATH=\$GOROOT/go${GO_VERSION}/bin" >> ${rootdir}/home/go/.bashrc
|
|
echo 'export PATH=$PATH:$GOPATH' >> ${rootdir}/root/.bashrc
|
|
echo 'export PATH=$PATH:$GOPATH' >> ${rootdir}/etc/skel/.bashrc
|
|
echo 'export PATH=$PATH:$GOPATH' >> ${rootdir}/home/go/.bashrc
|
|
chroot "$rootdir" chown -R go:go /home/go
|
|
cp ${rootdir}/home/go/go${GO_VERSION}/bin/* ${rootdir}/usr/bin
|
|
|
|
# Tomb
|
|
chroot "$rootdir" apt-get -yq install zsh pinentry-curses
|
|
git clone $TOMB_REPO $rootdir/root/build/tomb
|
|
cd $rootdir/root/build/tomb
|
|
git checkout $TOMB_COMMIT -b $TOMB_COMMIT
|
|
chroot "$rootdir" cd /root/build/tomb && make install
|
|
echo "tomb commit:$TOMB_COMMIT" >> $rootdir/root/freedombone-completed.txt
|
|
|
|
if ! grep -q '* hard maxsyslogins' $rootdir/etc/security/limits.conf; then
|
|
echo '* hard maxsyslogins 10' >> $rootdir/etc/security/limits.conf
|
|
else
|
|
sed -i 's|hard maxsyslogins.*|hard maxsyslogins 10|g' $rootdir/etc/security/limits.conf
|
|
fi
|
|
|
|
# Max logins for each user
|
|
if ! grep -q '* hard maxlogins' $rootdir/etc/security/limits.conf; then
|
|
echo '* hard maxlogins 2' >> $rootdir/etc/security/limits.conf
|
|
else
|
|
sed -i 's|hard maxlogins.*|hard maxlogins 2|g' $rootdir/etc/security/limits.conf
|
|
fi
|
|
|
|
# Email
|
|
chroot "$rootdir" apt-get -yq remove postfix
|
|
chroot "$rootdir" apt-get -yq install exim4 exim4-daemon-heavy sasl2-bin swaks libnet-ssleay-perl procmail
|
|
chroot "$rootdir" apt-get -yq install spamassassin
|
|
chroot "$rootdir" apt-get -yq install dovecot-imapd
|
|
|
|
#backup
|
|
chroot "$rootdir" apt-get -yq install duplicity gnupg
|
|
|
|
# monkeysphere
|
|
#chroot "$rootdir" apt-get -yq install monkeysphere msva-perl
|
|
|
|
# encrypting email
|
|
chroot "$rootdir" apt-get -yq install libmail-gnupg-perl
|
|
git clone $GPGIT_REPO $rootdir/root/build/gpgit
|
|
cd $rootdir/root/build/gpgit
|
|
git checkout $GPGIT_COMMIT -b $GPGIT_COMMIT
|
|
cp $rootdir/root/build/gpgit/gpgit.pl $rootdir/usr/bin
|
|
echo "gpgit commit:$GPGIT_COMMIT" >> $rootdir/root/freedombone-completed.txt
|
|
|
|
# email client
|
|
chroot "$rootdir" apt-get -yq install lynx abook urlview mutt
|
|
|
|
git clone $CLEANUP_MAILDIR_REPO $rootdir/root/build/cleanup-maildir
|
|
cd $rootdir/root/build/cleanup-maildir
|
|
git checkout $CLEANUP_MAILDIR_COMMIT -b $CLEANUP_MAILDIR_COMMIT
|
|
cp $rootdir/root/build/cleanup-maildir/cleanup-maildir $rootdir/usr/bin
|
|
echo "cleanup-maildir commit:$CLEANUP_MAILDIR_COMMIT" >> $rootdir/root/freedombone-completed.txt
|
|
|
|
# web server
|
|
chroot "$rootdir" apt-get -yq remove --purge apache2
|
|
chroot "$rootdir" apt-get -yq install nginx php-fpm
|
|
git clone $NGINX_ENSITE_REPO $rootdir/root/build/nginx_ensite
|
|
cd $rootdir/root/build/nginx_ensite
|
|
git checkout $NGINX_ENSITE_COMMIT -b $NGINX_ENSITE_COMMIT
|
|
echo "nginx-ensite commit:$NGINX_ENSITE_COMMIT" >> $rootdir/root/freedombone-completed.txt
|
|
chroot "$rootdir" cd /root/build/nginx_ensite && make install
|
|
if [ ! -f $rootdir/etc/pam.d/nginx ]; then
|
|
echo '#%PAM-1.0' > $rootdir/etc/pam.d/nginx
|
|
echo '@include common-auth' >> $rootdir/etc/pam.d/nginx
|
|
echo '@include common-account' >> $rootdir/etc/pam.d/nginx
|
|
echo '@include common-session' >> $rootdir/etc/pam.d/nginx
|
|
fi
|
|
chroot "$rootdir" apt-get -yq install tripwire
|
|
|
|
# filesystem optimisations
|
|
#sed -i 's|btrfs subvol=@|btrfs defaults,subvol=@,compress=lzo,ssd|g' $rootdir/etc/fstab
|
|
}
|
|
|
|
function image_install_nodejs {
|
|
mesh_install_nodejs
|
|
#echo 'install_nodejs' >> ${rootdir}/root/${PROJECT_NAME}-completed.txt
|
|
}
|
|
|
|
function image_preinstall_repos {
|
|
if [[ $VARIANT == "mesh"* ]]; then
|
|
return
|
|
fi
|
|
|
|
if [ ! -d $rootdir/repos ]; then
|
|
mkdir $rootdir/repos
|
|
fi
|
|
|
|
git clone $CMAKE_REPO $rootdir/repos/cmake
|
|
git clone $INADYN_REPO $rootdir/repos/inadyn
|
|
git clone $TOMB_REPO $rootdir/repos/tomb
|
|
|
|
if [[ $SOCIALINSTANCE == "gnusocial" ]]; then
|
|
git clone $GNUSOCIAL_REPO $rootdir/repos/gnusocial
|
|
git clone $GNUSOCIAL_MARKDOWN_REPO $rootdir/repos/gnusocial-markdown
|
|
#git clone $QVITTER_THEME_REPO $rootdir/repos/qvitter
|
|
git clone $PLEROMA_REPO $rootdir/repos/pleroma
|
|
return
|
|
fi
|
|
|
|
if [[ $SOCIALINSTANCE == "postactiv" ]]; then
|
|
git clone $GNUSOCIAL_MARKDOWN_REPO $rootdir/repos/gnusocial-markdown
|
|
#git clone $QVITTER_THEME_REPO $rootdir/repos/qvitter
|
|
git clone $PLEROMA_REPO $rootdir/repos/pleroma
|
|
#git clone $POSTACTIV_REPO $rootdir/repos/postactiv
|
|
return
|
|
fi
|
|
|
|
git clone $CRYPTPAD_REPO $rootdir/repos/cryptpad
|
|
git clone $DOKUWIKI_REPO $rootdir/repos/dokuwiki
|
|
git clone $ETHERPAD_REPO $rootdir/repos/etherpad
|
|
git clone $FRIENDICA_REPO $rootdir/repos/friendica
|
|
git clone $GNUSOCIAL_REPO $rootdir/repos/gnusocial
|
|
git clone $GNUSOCIAL_MARKDOWN_REPO $rootdir/repos/gnusocial-markdown
|
|
#git clone $QVITTER_THEME_REPO $rootdir/repos/qvitter
|
|
git clone $PLEROMA_REPO $rootdir/repos/pleroma
|
|
#git clone $POSTACTIV_REPO $rootdir/repos/postactiv
|
|
git clone $SHARINGS_REPO $rootdir/repos/sharings
|
|
git clone $HTMLY_REPO $rootdir/repos/htmly
|
|
git clone $HUBZILLA_REPO $rootdir/repos/hubzilla
|
|
git clone $HUBZILLA_ADDONS_REPO $rootdir/repos/hubzilla-addons
|
|
git clone $KOEL_REPO $rootdir/repos/koel
|
|
#git clone $LIBREVAULT_REPO $rootdir/repos/librevault
|
|
git clone $LYCHEE_REPO $rootdir/repos/lychee
|
|
git clone $MAILPILE_REPO $rootdir/repos/mailpile
|
|
git clone $MATRIX_REPO $rootdir/repos/matrix
|
|
git clone $MEDIAGOBLIN_REPO $rootdir/repos/mediagoblin
|
|
#git clone $MOVIM_REPO $rootdir/repos/movim
|
|
git clone $NEXTCLOUD_REPO $rootdir/repos/nextcloud
|
|
git clone $PIHOLE_REPO $rootdir/repos/pihole
|
|
git clone $PROFANITY_REPO $rootdir/repos/profanity
|
|
git clone $LIBMESODE_REPO $rootdir/repos/libmesode
|
|
git clone $PROFANITY_OMEMO_PLUGIN_REPO $rootdir/repos/profanity-omemo
|
|
git clone $RSS_READER_REPO $rootdir/repos/rss
|
|
git clone $RSS_MOBILE_READER_REPO $rootdir/repos/rss-mobile
|
|
git clone $SEARX_REPO $rootdir/repos/searx
|
|
git clone $TOXCORE_REPO $rootdir/repos/toxcore
|
|
git clone $TOXID_REPO $rootdir/repos/toxid
|
|
git clone $TOXIC_REPO $rootdir/repos/toxic
|
|
git clone $TURTL_REPO $rootdir/repos/turtl
|
|
git clone $KANBOARD_REPO $rootdir/repos/kanboard
|
|
git clone $KEYSERVER_WEB_REPO $rootdir/repos/keyserverweb
|
|
#git clone $WEKAN_REPO $rootdir/repos/wekan
|
|
#git clone $FLOW_ROUTER_REPO $rootdir/repos/flowrouter
|
|
#git clone $METEOR_USERACCOUNTS_REPO $rootdir/repos/meteoruseraccounts
|
|
#git clone $METEOR_REPO $rootdir/repos/meteor
|
|
#git clone $ZERONET_REPO $rootdir/repos/zeronet
|
|
#git clone $QTOX_REPO $rootdir/repos/qtox
|
|
}
|
|
|
|
##############################################################################
|
|
|
|
|
|
# Set to true/false to control if eatmydata is used during build
|
|
use_eatmydata=true
|
|
|
|
rootdir="$1"
|
|
fmdir="$(pwd)"
|
|
image="$fmdir"/"$2"
|
|
cd "$rootdir"
|
|
|
|
echo info: building $MACHINE for $ARCHITECTURE
|
|
|
|
export DEBIAN_FRONTEND=noninteractive DEBCONF_NONINTERACTIVE_SEEN=true
|
|
export LC_ALL=C LANGUAGE=C LANG=C
|
|
|
|
# Override libpam-tmpdir setting during build, as the directories
|
|
# are not created yet.
|
|
export TMP=/tmp/ TMPDIR=/tmp/
|
|
|
|
if [ ! $MY_USERNAME ]; then
|
|
echo $'No username was specified'
|
|
exit 52825
|
|
fi
|
|
username=$MY_USERNAME
|
|
echo $"warning: creating initial user $username with well known password!"
|
|
password=$MY_PASSWORD
|
|
chroot "$rootdir" /usr/bin/env -i \
|
|
HOME=/root \
|
|
PATH=/usr/local/bin:/usr/local/sbin:/usr/bin:/usr/sbin:/bin:/sbin
|
|
echo "export PATH=/usr/local/bin:/usr/local/sbin:/usr/bin:/usr/sbin:/bin:/sbin:" >> $rootdir/root/.bashrc
|
|
chroot "$rootdir" adduser --gecos $username --disabled-password $username
|
|
echo $username:$password | chroot "$rootdir" /usr/sbin/chpasswd
|
|
chroot "$rootdir" adduser $username sudo
|
|
|
|
if [ ! $DEBIAN_REPO ]; then
|
|
DEBIAN_REPO='ftp.de.debian.org'
|
|
fi
|
|
if [ ! $DEBIAN_VERSION ]; then
|
|
DEBIAN_VERSION='stretch'
|
|
fi
|
|
|
|
set_apt_sources $BUILD_MIRROR
|
|
chroot "$rootdir" apt-get clean
|
|
chroot "$rootdir" /bin/rm -rf /var/lib/apt/lists/*
|
|
chroot "$rootdir" apt-get clean
|
|
set_apt_sources $MIRROR
|
|
configure_backports
|
|
configure_contrib_repo
|
|
chroot "$rootdir" apt-get update
|
|
chroot "$rootdir" apt-get install -y apt-utils
|
|
|
|
cat > $rootdir/usr/sbin/policy-rc.d <<EOF
|
|
#!/bin/sh
|
|
exit 101
|
|
EOF
|
|
chmod a+rx $rootdir/usr/sbin/policy-rc.d
|
|
|
|
if $use_eatmydata ; then
|
|
enable_eatmydata_override
|
|
fi
|
|
|
|
if [ -n "$CUSTOM_SETUP" ]; then
|
|
cp "$CUSTOM_SETUP" "$rootdir"/tmp
|
|
chroot "$rootdir" apt-get install -y gdebi-core
|
|
chroot "$rootdir" gdebi -n /tmp/"$(basename $CUSTOM_SETUP)"
|
|
fi
|
|
|
|
if [[ $VARIANT != "mesh"* ]]; then
|
|
chroot "$rootdir" apt-get install -y openssh-server
|
|
fi
|
|
chroot "$rootdir" apt-get install -y sudo git dialog build-essential
|
|
chroot "$rootdir" apt-get install -y avahi-daemon avahi-utils avahi-discover avahi-autoipd
|
|
chroot "$rootdir" apt-get install -y iptables dnsutils net-tools network-manager iputils-ping
|
|
chroot "$rootdir" apt-get install -y libnss-mdns libnss-myhostname libnss-gw-name nano man ntp
|
|
chroot "$rootdir" apt-get install -y locales locales-all debconf wireless-tools wpasupplicant usbutils
|
|
if [[ $ARCHITECTURE == 'qemu'* || $ARCHITECTURE == 'i386' || $ARCHITECTURE == 'i686' || $ARCHITECTURE == 'amd64' || $ARCHITECTURE == 'x86_64' ]]; then
|
|
chroot "$rootdir" apt-get install -y cryptsetup zsh pinentry-curses iotop bc
|
|
chroot "$rootdir" apt-get install -y grub2 hostapd lvm2
|
|
fi
|
|
|
|
sed -i "s|#host-name=.*|host-name=${LOCAL_NAME}|g" $rootdir/etc/avahi/avahi-daemon.conf
|
|
sed -i "s|host-name=.*|host-name=${LOCAL_NAME}|g" $rootdir/etc/avahi/avahi-daemon.conf
|
|
sed -i "s|use-ipv4=.*|use-ipv4=yes|g" $rootdir/etc/avahi/avahi-daemon.conf
|
|
sed -i "s|use-ipv6=.*|use-ipv6=no|g" $rootdir/etc/avahi/avahi-daemon.conf
|
|
sed -i "s|#disallow-other-stacks=.*|disallow-other-stacks=yes|g" $rootdir/etc/avahi/avahi-daemon.conf
|
|
sed -i "s|hosts:.*|hosts: files mdns4_minimal dns mdns4 mdns|g" $rootdir/etc/nsswitch.conf
|
|
|
|
# Add an ssh avahi service
|
|
echo '<?xml version="1.0" standalone="no"?><!--*-nxml-*-->' > $rootdir/etc/avahi/services/ssh.service
|
|
echo '<!DOCTYPE service-group SYSTEM "avahi-service.dtd">' >> $rootdir/etc/avahi/services/ssh.service
|
|
echo '<service-group>' >> $rootdir/etc/avahi/services/ssh.service
|
|
echo ' <name replace-wildcards="yes">%h SSH</name>' >> $rootdir/etc/avahi/services/ssh.service
|
|
echo ' <service>' >> $rootdir/etc/avahi/services/ssh.service
|
|
echo ' <type>_ssh._tcp</type>' >> $rootdir/etc/avahi/services/ssh.service
|
|
echo " <port>$SSH_PORT</port>" >> $rootdir/etc/avahi/services/ssh.service
|
|
echo ' </service>' >> $rootdir/etc/avahi/services/ssh.service
|
|
echo '</service-group>' >> $rootdir/etc/avahi/services/ssh.service
|
|
|
|
# Ensure that the avahi daemon keeps running
|
|
WATCHDOG_SCRIPT_NAME="keepon"
|
|
echo '#!/bin/bash' > $rootdir/usr/bin/$WATCHDOG_SCRIPT_NAME
|
|
echo 'LOGFILE=/var/log/keepon.log' >> $rootdir/usr/bin/$WATCHDOG_SCRIPT_NAME
|
|
echo 'CURRENT_DATE=$(date)' >> $rootdir/usr/bin/$WATCHDOG_SCRIPT_NAME
|
|
echo '' >> $rootdir/usr/bin/$WATCHDOG_SCRIPT_NAME
|
|
echo "# keep avahi-daemon daemon running" >> $rootdir/usr/bin/$WATCHDOG_SCRIPT_NAME
|
|
echo "RUNNING=$(pgrep avahi-daemon > /dev/null && echo Running)" >> $rootdir/usr/bin/$WATCHDOG_SCRIPT_NAME
|
|
echo 'if [ ! $RUNNING ]; then' >> $rootdir/usr/bin/$WATCHDOG_SCRIPT_NAME
|
|
echo " systemctl start avahi-daemon" >> $rootdir/usr/bin/$WATCHDOG_SCRIPT_NAME
|
|
echo ' echo -n $CURRENT_DATE >> $LOGFILE' >> $rootdir/usr/bin/$WATCHDOG_SCRIPT_NAME
|
|
echo " echo \"avahi-daemon daemon restarted\" >> \$LOGFILE" >> $rootdir/usr/bin/$WATCHDOG_SCRIPT_NAME
|
|
echo 'fi' >> $rootdir/usr/bin/$WATCHDOG_SCRIPT_NAME
|
|
echo "# End of avahi-daemon" >> $rootdir/usr/bin/$WATCHDOG_SCRIPT_NAME
|
|
chmod +x $rootdir/usr/bin/$WATCHDOG_SCRIPT_NAME
|
|
echo "*/1 * * * * root /usr/bin/$WATCHDOG_SCRIPT_NAME" >> $rootdir/etc/crontab
|
|
|
|
chroot "$rootdir" /bin/bash -x <<EOF
|
|
git clone $PROJECT_REPO /root/$PROJECT_NAME
|
|
cd /root/$PROJECT_NAME
|
|
git checkout stretch
|
|
make install
|
|
cp image_build/bbb-4.9.0.tar.gz /boot/bbb.tar.gz
|
|
EOF
|
|
|
|
chroot "$rootdir" ${PROJECT_NAME}-image-hardware-setup 2>&1 | \
|
|
tee $rootdir/var/log/${PROJECT_NAME}-image-hardware-setup.log
|
|
|
|
rm $rootdir/usr/sbin/policy-rc.d
|
|
|
|
# Set up HRNG for systems known to have one
|
|
# Otherwise install haveged
|
|
if [[ "$MACHINE" != "beaglebone"* ]]; then
|
|
# With some VMs, the hardware cycles counter is emulated and deterministic,
|
|
# and thus predictible, so havege should not be used
|
|
if [[ "$MACHINE" != "qemu"* ]]; then
|
|
chroot $rootdir apt-get -yq install haveged
|
|
fi
|
|
else
|
|
chroot $rootdir apt-get -yq install rng-tools
|
|
sed -i 's|#HRNGDEVICE=/dev/hwrng|HRNGDEVICE=/dev/hwrng|g' $rootdir/etc/default/rng-tools
|
|
|
|
fi
|
|
|
|
# copy u-boot to beginning of image
|
|
case "$MACHINE" in
|
|
beaglebone)
|
|
dd if=$rootdir/usr/lib/u-boot/am335x_boneblack/MLO of="$image" \
|
|
count=1 seek=1 conv=notrunc bs=128k
|
|
dd if=$rootdir/usr/lib/u-boot/am335x_boneblack/u-boot.img of="$image" \
|
|
count=2 seek=1 conv=notrunc bs=384k
|
|
;;
|
|
beaglebonewifi)
|
|
touch $rootdir/root/.wifi-only
|
|
dd if=$rootdir/usr/lib/u-boot/am335x_boneblack/MLO of="$image" \
|
|
count=1 seek=1 conv=notrunc bs=128k
|
|
dd if=$rootdir/usr/lib/u-boot/am335x_boneblack/u-boot.img of="$image" \
|
|
count=2 seek=1 conv=notrunc bs=384k
|
|
;;
|
|
cubieboard2)
|
|
dd if=$rootdir/usr/lib/u-boot/Cubieboard2/u-boot-sunxi-with-spl.bin of="$image" \
|
|
seek=8 conv=notrunc bs=1k
|
|
;;
|
|
a20-olinuxino-lime)
|
|
dd if=$rootdir/usr/lib/u-boot/A20-OLinuXino-Lime/u-boot-sunxi-with-spl.bin \
|
|
of="$image" seek=8 conv=notrunc bs=1k
|
|
;;
|
|
esac
|
|
|
|
if $use_eatmydata ; then
|
|
disable_eatmydata_override
|
|
fi
|
|
|
|
configure_ssh
|
|
configure_networking
|
|
admin_user_sudo
|
|
create_generic_image
|
|
atheros_wifi
|
|
continue_installation
|
|
image_install_nodejs
|
|
initialise_mesh
|
|
configure_wifi
|
|
configure_user_interface
|
|
image_setup_utils
|
|
image_install_inadyn
|
|
image_preinstall_repos
|
|
|
|
# remove downloaded packages
|
|
chroot $rootdir apt-get -y autoremove
|
|
chroot $rootdir apt-get clean
|
|
|
|
cd /
|
|
echo $"info: killing leftover processes in chroot"
|
|
fuser -mvk $rootdir/. || true
|
|
|
|
exit 0
|