blob: 85f509dc583323d2080d782a7d87e3c792c6a7a1 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
|
#
# Bootless: evil-maid mitigator.
#
#
# Load environment
#
if [ -s $prefix/grubenv ]; then
load_env
fi
#
# Basic config
#
set default="0"
set timeout=5
#
# Menu appearance
#
set menu_color_normal=white/blue
set menu_color_highlight=yellow/red
#
# Handles boot from fully encrypted /boot volumes.
# Usage: bootfde <volume> <kernel-version> [source] [target]
#
function bootfde {
# Loads raid, lvm and luks modules you can access kernel and initrd from
# the inside your encrypted OS!
insmod mdraid1x
insmod lvm
insmod luks
set volume=${1}
if [ "${2}" ]; then
set version=${2}
else
set version=3.16.0-4-amd64
fi
if [ "${3}" ]; then
set source=${3}
else
set source=/dev/mapper/${1}
fi
if [ "${4}" ]; then
set target=${4}
else
set target=root
fi
cryptomount lvm/${volume}
set root=(crypto0)
# Load the LVM module again after loading the encrypted volume
# so Grub can detect LVM volumes inside crypto0.
rmmod lvm
insmod lvm
echo "Loading ${volume}..."
linux /boot/vmlinuz-${version} root=/dev/mapper/${target} cryptopts=target=${target},source=${source} ro quiet apparmor=1 security=apparmor
echo 'Loading initial ramdisk ...'
initrd /boot/initrd.img-${version}
}
#
# Handles boot from images stored in the USB stick.
# Usage: bootfde <volume> <kernel-version> [target] [rootfs] [distro]
#
function bootimg {
set volume=${1}
if [ "${2}" ]; then
set version=${2}
else
set version=3.16.0-4-amd64
fi
if [ "${3}" ]; then
set target=${3}
else
set target=root
fi
if [ "${4}" ]; then
set rootfs=${4}
else
set rootfs=${target}
fi
if [ "${5}" ]; then
set distro=${5}
else
set distro=debian
fi
echo "Loading ${1}..."
linux /boot/custom/${distro}/vmlinuz-${version} root=/dev/mapper/${rootfs} cryptopts=target=${target},source=${volume} ro quiet apparmor=1 security=apparmor
echo 'Loading initial ramdisk ...'
initrd /boot/custom/${distro}/initrd.img-${version}
}
#
# Default menu entry
#
menuentry "Memtest86+" {
linux16 /boot/default/memtest/memtest86+.bin
}
#
# Custom menu entries
#
if [ -e "/boot/custom/custom.cfg" ]; then
menuentry "Custom configurations" {
configfile /boot/custom/custom.cfg
}
fi
|
