diff options
Diffstat (limited to 'share/hydractl')
-rwxr-xr-x | share/hydractl/provision | 148 |
1 files changed, 148 insertions, 0 deletions
diff --git a/share/hydractl/provision b/share/hydractl/provision index 488c2ea..0b4139b 100755 --- a/share/hydractl/provision +++ b/share/hydractl/provision @@ -2,3 +2,151 @@ # # System installer. # + +# Load +source $APP_BASE/lib/hydra/functions || exit 1 +hydra_config_load + +# Setup. +hydra_read device /dev/sdb "Destination device" +hydra_read garbage y "Pre-fill volumes with garbage? (y/n)" +hydra_read hostname $HOSTNAME "Hostname" +hydra_read domain example.com "Domain" +hydra_read arch amd64 "System arch" +hydra_read version lenny "Distro version" +hydra_read vg vg "Temporary install vg" +hydra_read grub n "Setup GRUB? (y/n)" + +# Warning. +echo "" +echo "Make sure you have chosen the right parameters" +echo "and that $device has the needed partitions." +echo "" +echo "Press ENTER to continue, Ctrl-C to abort." +read answer + +# Create volumes. +echo "Creating the needed disk volumes..." +pvcreate "$device"3 +vgcreate $vg "$device"3 +lvcreate -L20G -n root $vg +vgchange -a y $vg + +# Garbage. +if [ "$garbage" == "y" ]; then + echo "Filling volumes with garbage..." + dd if=/dev/urandom of=/dev/$vg/root + dd if=/dev/urandom of="$device"1 +fi + +# Create root device. +echo "Creating root device..." +cryptsetup -h sha256 -c aes-cbc-essiv:sha256 -s 256 luksFormat /dev/$vg/root +cryptsetup luksOpen /dev/$vg/root debootstrap +mkfs.ext3 /dev/mapper/debootstrap + +# Initial system install. +echo "Installing base system..." +mkdir /tmp/debootstrap +mount /dev/mapper/debootstrap /tmp/debootstrap/ +debootstrap --arch=$arch $version /tmp/debootstrap/ + +# Initial configuration. +echo "Applying initial configuration..." +mount none -t proc /tmp/debootstrap/proc/ +mount -o bind /dev/ /tmp/debootstrap/dev +cp -L /etc/resolv.conf /tmp/debootstrap/etc +echo $hostname.$domain > /tmp/debootstrap/etc/hostname +echo "127.0.0.1 localhost $hostname $hostname.$domain" >> /tmp/debootstrap/etc/hosts +echo LANG=C > /tmp/debootstrap/etc/default/locale + +# Initial upgrade. +echo "Applying initial upgrades..." +chroot /tmp/debootstrap/ apt-get update +chroot /tmp/debootstrap/ apt-get upgrade +chroot /tmp/debootstrap/ apt-get install locales cryptsetup lvm2 initramfs-tools grub + +# Crypttab. +echo "Configuring crypttab..." +cat > /tmp/debootstrap/etc/crypttab <<-EOF +# <target name> <source device> <key file> <options> +root /dev/mapper/vg-root none luks,cipher=aes-cbc-essiv:sha256 +cswap "$device"1 /dev/random swap,cipher=aes-cbc-essiv:sha256 +EOF + +# Fstab. +echo "Configuring fstab..." +cat > /tmp/debootstrap/etc/fstab <<-EOF +/dev/mapper/cswap none swap sw 0 0 +/dev/mapper/root / ext3 defaults,errors=remount-ro 0 1 +EOF + +# Boot. +echo "Boot device setup..." +mkfs.ext3 "$device"2 +mount "$device"2 /boot +grub-install --no-floppy "$device" +echo " "$device"2 /boot ext3 defaults,errors=remount-ro 0 2" >> /tmp/debootstrap/etc/fstab + +# Grub. +if [ "$grub" == "y" ]; then + echo "Setting up GRUB..." + mkdir -p /tmp/debootstrap/boot/grub/ + cat /tmp/debootstrap/boot/grub/menu.lst <<-EOF +title $hostname (hd0) +root (hd0,1) +kernel /vmlinuz-2.6.26-2-vserver-amd64 root=/dev/mapper/root ro quiet rootdelay=10 +initrd /initrd.img-2.6.26-2-vserver-amd64 + +title $hostname (hd0) (single) +root (hd0,1) +kernel /vmlinuz-2.6.26-2-vserver-amd64 root=/dev/mapper/root ro single rootdelay=10 +initrd /initrd.img-2.6.26-2-vserver-amd64 +EOF +fi + +# Kernel. +echo "Installing kernel..." +cat > /tmp/debootstrap/boot/grub/etc/initramfs-tools/modules <<-EOF +dm-mod +dm-crypt +aes +twofish +sha256 +EOF + +cat > /tmp/debootstrap/etc/kernel-img.conf <<-EOF +do_initrd = Yes +EOF + +if [ "$arch" == "i386" ]; then + kernel_arch="686" +else + kernel_arch="$arch" +fi + +chroot /tmp/debootstrap apt-get install linux-image-2.6-vserver-$kernel_arch + +# Initramfs. +echo "Creating initramfs..." +chroot /tmp/debootstrap update-initramfs -v -u + +# Ssh. +echo "Installing OpenSSH daemon..." +chroot /tmp/debootstrap apt-get install openssh-server + +echo "OpenSSH fingerprints:" +chroot /tmp/debootstrap ssh-keygen -l -f /etc/ssh/ssh_host_dsa_key.pub +chroot /tmp/debootstrap ssh-keygen -l -f /etc/ssh/ssh_host_rsa_key.pub + +# Accounts. +echo "Installing sudo..." +chroot /tmp/debootstrap apt-get install sudo + +echo "Choose a root password." +chroot /tmp/debootstrap passwd root + +# Final steps: +# Create an user account with sudo privileges. +# Network setup. + |