V8.00.000.2025.06.17
Signed-off-by: Marc S. Weidner <msw@coresecret.dev>
This commit is contained in:
38
func/2012_helper_chroot.sh
Normal file
38
func/2012_helper_chroot.sh
Normal file
@@ -0,0 +1,38 @@
|
|||||||
|
#!/bin/bash
|
||||||
|
# SPDX-Version: 3.0
|
||||||
|
# SPDX-CreationInfo: 2025-06-17; WEIDNER, Marc S.; <msw@coresecret.dev>
|
||||||
|
# SPDX-ExternalRef: GIT https://git.coresecret.dev/msw/CISS.debian.installer.git
|
||||||
|
# SPDX-FileContributor: WEIDNER, Marc S.; Centurion Intelligence Consulting Agency
|
||||||
|
# SPDX-FileCopyrightText: 2024-2025; WEIDNER, Marc S.; <msw@coresecret.dev>
|
||||||
|
# SPDX-FileType: SOURCE
|
||||||
|
# SPDX-License-Identifier: EUPL-1.2 OR LicenseRef-CCLA-1.0
|
||||||
|
# SPDX-LicenseComment: This file is part of the CISS.debian.installer.secure framework.
|
||||||
|
# SPDX-PackageName: CISS.debian.installer
|
||||||
|
# SPDX-Security-Contact: security@coresecret.eu
|
||||||
|
|
||||||
|
guard_sourcing
|
||||||
|
|
||||||
|
#######################################
|
||||||
|
# Wrapper for executing commands in the desired chroot environment.
|
||||||
|
# Globals:
|
||||||
|
# TERM
|
||||||
|
# Arguments:
|
||||||
|
# $1: Target of the chroot environment.
|
||||||
|
# $@: Commands and options and parameters to be executed in chroot.
|
||||||
|
#######################################
|
||||||
|
do_in_target() {
|
||||||
|
declare var_chroot_target="$1"; shift
|
||||||
|
declare -a ary_chroot_command=("$@")
|
||||||
|
if chroot "${var_chroot_target}" /usr/bin/env -i \
|
||||||
|
HOME=/root \
|
||||||
|
PATH=/usr/sbin:/usr/bin:/sbin:/bin \
|
||||||
|
TERM="${TERM}" \
|
||||||
|
"${ary_chroot_command[@]}"; then
|
||||||
|
do_log "info" "false" "Success: chroot ${var_chroot_target}: ${ary_chroot_command[*]}"
|
||||||
|
return 0
|
||||||
|
else
|
||||||
|
do_log "emergency" "false" "Failed: chroot ${var_chroot_target}: ${ary_chroot_command[*]}"
|
||||||
|
return "${ERR_CHRT_COMMAND}"
|
||||||
|
fi
|
||||||
|
}
|
||||||
|
# vim: number et ts=2 sw=2 sts=2 ai tw=128 ft=sh
|
||||||
@@ -12,25 +12,6 @@
|
|||||||
|
|
||||||
guard_sourcing
|
guard_sourcing
|
||||||
|
|
||||||
#######################################
|
|
||||||
# Wrapper for executing commands in the desired chroot environment.
|
|
||||||
# Globals:
|
|
||||||
# TERM
|
|
||||||
# Arguments:
|
|
||||||
# $1: Target of the chroot environment.
|
|
||||||
# $@: Commands and options and parameters to be executed in chroot.
|
|
||||||
#######################################
|
|
||||||
do_in_target() {
|
|
||||||
declare var_chroot_target="$1"; shift
|
|
||||||
declare ary_chroot_command=("$@")
|
|
||||||
do_log "info" "false" "Executing in the target system '${var_chroot_target}' command: '${ary_chroot_command[*]}'."
|
|
||||||
chroot "${var_chroot_target}" /usr/bin/env -i \
|
|
||||||
HOME=/root \
|
|
||||||
PATH=/usr/sbin:/usr/bin:/sbin:/bin \
|
|
||||||
TERM="${TERM}" \
|
|
||||||
"${ary_chroot_command[@]}"
|
|
||||||
}
|
|
||||||
|
|
||||||
#######################################
|
#######################################
|
||||||
# Helper Module to generate a Subnet Mask out of an IP in CCDIR Notation.
|
# Helper Module to generate a Subnet Mask out of an IP in CCDIR Notation.
|
||||||
# Arguments:
|
# Arguments:
|
||||||
@@ -49,7 +30,7 @@ generate_subnetmask() {
|
|||||||
$(((var_mask_int >> 16) & 0xFF)) \
|
$(((var_mask_int >> 16) & 0xFF)) \
|
||||||
$(((var_mask_int >> 8) & 0xFF)) \
|
$(((var_mask_int >> 8) & 0xFF)) \
|
||||||
$((var_mask_int & 0xFF)))
|
$((var_mask_int & 0xFF)))
|
||||||
echo "${var_has_ipv4_subnet}"
|
printf '%s' "${var_has_ipv4_subnet}"
|
||||||
return 0
|
return 0
|
||||||
}
|
}
|
||||||
|
|
||||||
|
|||||||
@@ -20,7 +20,7 @@ guard_sourcing
|
|||||||
remove_whitespace() {
|
remove_whitespace() {
|
||||||
# shellcheck disable=SC2155
|
# shellcheck disable=SC2155
|
||||||
declare var_out=$(printf "%s" "$1" | xargs)
|
declare var_out=$(printf "%s" "$1" | xargs)
|
||||||
echo "${var_out}"
|
printf '%s' "${var_out}"
|
||||||
}
|
}
|
||||||
|
|
||||||
#######################################
|
#######################################
|
||||||
|
|||||||
@@ -57,5 +57,7 @@ validation_preseed() {
|
|||||||
do_log "info" "false" "'${var}' is not set."
|
do_log "info" "false" "'${var}' is not set."
|
||||||
fi
|
fi
|
||||||
done
|
done
|
||||||
|
|
||||||
|
return 0
|
||||||
}
|
}
|
||||||
# vim: number et ts=2 sw=2 sts=2 ai tw=128 ft=sh:
|
# vim: number et ts=2 sw=2 sts=2 ai tw=128 ft=sh:
|
||||||
|
|||||||
@@ -103,5 +103,6 @@ partitioning() {
|
|||||||
done
|
done
|
||||||
|
|
||||||
done
|
done
|
||||||
|
return 0
|
||||||
}
|
}
|
||||||
# vim: number et ts=2 sw=2 sts=2 ai tw=128 ft=sh
|
# vim: number et ts=2 sw=2 sts=2 ai tw=128 ft=sh
|
||||||
|
|||||||
@@ -154,5 +154,6 @@ partition_encryption() {
|
|||||||
done
|
done
|
||||||
|
|
||||||
done
|
done
|
||||||
|
return 0
|
||||||
}
|
}
|
||||||
# vim: number et ts=2 sw=2 sts=2 ai tw=128 ft=sh
|
# vim: number et ts=2 sw=2 sts=2 ai tw=128 ft=sh
|
||||||
|
|||||||
@@ -98,5 +98,6 @@ partition_formatting() {
|
|||||||
done
|
done
|
||||||
|
|
||||||
done
|
done
|
||||||
|
return 0
|
||||||
}
|
}
|
||||||
# vim: number et ts=2 sw=2 sts=2 ai tw=128 ft=sh
|
# vim: number et ts=2 sw=2 sts=2 ai tw=128 ft=sh
|
||||||
|
|||||||
@@ -68,5 +68,6 @@ setup_filesystem() {
|
|||||||
done
|
done
|
||||||
|
|
||||||
done
|
done
|
||||||
|
return 0
|
||||||
}
|
}
|
||||||
# vim: number et ts=2 sw=2 sts=2 ai tw=128 ft=sh
|
# vim: number et ts=2 sw=2 sts=2 ai tw=128 ft=sh
|
||||||
|
|||||||
@@ -238,5 +238,6 @@ mount_partition() {
|
|||||||
done
|
done
|
||||||
|
|
||||||
done
|
done
|
||||||
|
return 0
|
||||||
}
|
}
|
||||||
# vim: number et ts=2 sw=2 sts=2 ai tw=128 ft=sh
|
# vim: number et ts=2 sw=2 sts=2 ai tw=128 ft=sh
|
||||||
|
|||||||
34
func/4000_debootstrap.sh
Normal file
34
func/4000_debootstrap.sh
Normal file
@@ -0,0 +1,34 @@
|
|||||||
|
#!/bin/bash
|
||||||
|
# SPDX-Version: 3.0
|
||||||
|
# SPDX-CreationInfo: 2025-06-17; WEIDNER, Marc S.; <msw@coresecret.dev>
|
||||||
|
# SPDX-ExternalRef: GIT https://git.coresecret.dev/msw/CISS.debian.installer.git
|
||||||
|
# SPDX-FileContributor: WEIDNER, Marc S.; Centurion Intelligence Consulting Agency
|
||||||
|
# SPDX-FileCopyrightText: 2024-2025; WEIDNER, Marc S.; <msw@coresecret.dev>
|
||||||
|
# SPDX-FileType: SOURCE
|
||||||
|
# SPDX-License-Identifier: EUPL-1.2 OR LicenseRef-CCLA-1.0
|
||||||
|
# SPDX-LicenseComment: This file is part of the CISS.debian.installer.secure framework.
|
||||||
|
# SPDX-PackageName: CISS.debian.installer
|
||||||
|
# SPDX-Security-Contact: security@coresecret.eu
|
||||||
|
|
||||||
|
guard_sourcing
|
||||||
|
|
||||||
|
#######################################
|
||||||
|
# Install minimal Debian environment via debootstrap command.
|
||||||
|
# Globals:
|
||||||
|
# ERR_DEBOOTSTRAP
|
||||||
|
# TARGET
|
||||||
|
# Arguments:
|
||||||
|
# None
|
||||||
|
# Returns:
|
||||||
|
# "${ERR_DEBOOTSTRAP}"
|
||||||
|
#######################################
|
||||||
|
func_debootstrap() {
|
||||||
|
if debootstrap --arch amd64 bookworm "${TARGET}" https://deb.debian.org/debian; then
|
||||||
|
do_log "info" "false" "Executing 'debootstrap --arch amd64 bookworm '${TARGET}' https://deb.debian.org/debian' successful."
|
||||||
|
return 0
|
||||||
|
else
|
||||||
|
do_log "emergency" "false" "Executing 'debootstrap --arch amd64 bookworm '${TARGET}' https://deb.debian.org/debian' NOT successful."
|
||||||
|
return "${ERR_DEBOOTSTRAP}"
|
||||||
|
fi
|
||||||
|
}
|
||||||
|
# vim: number et ts=2 sw=2 sts=2 ai tw=128 ft=sh
|
||||||
55
func/4020_configure_system.sh
Normal file
55
func/4020_configure_system.sh
Normal file
@@ -0,0 +1,55 @@
|
|||||||
|
#!/bin/bash
|
||||||
|
# SPDX-Version: 3.0
|
||||||
|
# SPDX-CreationInfo: 2025-06-17; WEIDNER, Marc S.; <msw@coresecret.dev>
|
||||||
|
# SPDX-ExternalRef: GIT https://git.coresecret.dev/msw/CISS.debian.installer.git
|
||||||
|
# SPDX-FileContributor: WEIDNER, Marc S.; Centurion Intelligence Consulting Agency
|
||||||
|
# SPDX-FileCopyrightText: 2024-2025; WEIDNER, Marc S.; <msw@coresecret.dev>
|
||||||
|
# SPDX-FileType: SOURCE
|
||||||
|
# SPDX-License-Identifier: EUPL-1.2 OR LicenseRef-CCLA-1.0
|
||||||
|
# SPDX-LicenseComment: This file is part of the CISS.debian.installer.secure framework.
|
||||||
|
# SPDX-PackageName: CISS.debian.installer
|
||||||
|
# SPDX-Security-Contact: security@coresecret.eu
|
||||||
|
|
||||||
|
guard_sourcing
|
||||||
|
|
||||||
|
#######################################
|
||||||
|
# Configure target system for chroot.
|
||||||
|
# Globals:
|
||||||
|
# ERR_CHRT_MOUNTS
|
||||||
|
# TARGET
|
||||||
|
# Arguments:
|
||||||
|
# None
|
||||||
|
#######################################
|
||||||
|
configure_system() {
|
||||||
|
|
||||||
|
### Notes
|
||||||
|
# --rbind: recursive binding.
|
||||||
|
# --make-rslave: In this case, the mount point is marked as 'slave'.
|
||||||
|
# This means changes to the source mount (e.g., /proc) are propagated to the target mount (e.g., "${TARGET}"/proc).
|
||||||
|
# Conversely, changes to the target mount are not propagated back to the source mount.
|
||||||
|
# This mode is necessary to avoid problems with double or erroneous propagation effects in chroot or container environments.
|
||||||
|
|
||||||
|
declare var_src var_dst
|
||||||
|
declare -a ary_mounts=(proc sys dev run)
|
||||||
|
|
||||||
|
for var_src in "${ary_mounts[@]}"; do
|
||||||
|
var_dst="${TARGET}/${var_src}"
|
||||||
|
mkdir -p "${var_dst}"
|
||||||
|
|
||||||
|
if ! mount --make-rslave --rbind "/${var_src}" "${var_dst}"; then
|
||||||
|
do_log "emergency" "false" "Failed: 'mount --make-rslave --rbind /${var_src} ${var_dst}'."
|
||||||
|
return "${ERR_CHRT_MOUNTS}"
|
||||||
|
fi
|
||||||
|
|
||||||
|
do_log "info" "true" "Success: 'mount --make-rslave --rbind /${var_src} ${var_dst}'."
|
||||||
|
|
||||||
|
done
|
||||||
|
|
||||||
|
if ! do_in_target "${TARGET}" mkdir -p /etc/systemd/system/multi-user.target.wants; then
|
||||||
|
return "${ERR_CHRT_MOUNTS}"
|
||||||
|
fi
|
||||||
|
|
||||||
|
do_log "info" "true" "Command: 'mkdir -p /etc/systemd/system/multi-user.target.wants' executed in: '${TARGET}'."
|
||||||
|
return 0
|
||||||
|
}
|
||||||
|
# vim: number et ts=2 sw=2 sts=2 ai tw=128 ft=sh
|
||||||
353
func/4040_generate_fstab.sh
Normal file
353
func/4040_generate_fstab.sh
Normal file
@@ -0,0 +1,353 @@
|
|||||||
|
#!/bin/bash
|
||||||
|
# SPDX-Version: 3.0
|
||||||
|
# SPDX-CreationInfo: 2025-06-17; WEIDNER, Marc S.; <msw@coresecret.dev>
|
||||||
|
# SPDX-ExternalRef: GIT https://git.coresecret.dev/msw/CISS.debian.installer.git
|
||||||
|
# SPDX-FileContributor: WEIDNER, Marc S.; Centurion Intelligence Consulting Agency
|
||||||
|
# SPDX-FileCopyrightText: 2024-2025; WEIDNER, Marc S.; <msw@coresecret.dev>
|
||||||
|
# SPDX-FileType: SOURCE
|
||||||
|
# SPDX-License-Identifier: EUPL-1.2 OR LicenseRef-CCLA-1.0
|
||||||
|
# SPDX-LicenseComment: This file is part of the CISS.debian.installer.secure framework.
|
||||||
|
# SPDX-PackageName: CISS.debian.installer
|
||||||
|
# SPDX-Security-Contact: security@coresecret.eu
|
||||||
|
|
||||||
|
guard_sourcing
|
||||||
|
|
||||||
|
###########################################################################################
|
||||||
|
# Generate target '/etc/fstab' entries.
|
||||||
|
# Globals:
|
||||||
|
# ERR_NO_DEVIC_PATH
|
||||||
|
# ERR_NO_ENCR_LABEL
|
||||||
|
# MAP_EPHEMERAL_ENCLABEL
|
||||||
|
# MAP_MOUNTPATH_DEV
|
||||||
|
# MODULE_ERR
|
||||||
|
# MODULE_TXT
|
||||||
|
# RECIPE_STRING
|
||||||
|
# TARGET
|
||||||
|
# Arguments:
|
||||||
|
# None
|
||||||
|
###########################################################################################
|
||||||
|
generate_fstab() {
|
||||||
|
### Generate '${TARGET}/etc/fstab' header
|
||||||
|
touch "${TARGET}/etc/fstab"
|
||||||
|
chmod 0644 "${TARGET}/etc/fstab"
|
||||||
|
|
||||||
|
cat << 'EOF' >> "${TARGET}/etc/fstab"
|
||||||
|
# /etc/fstab: static file system information.
|
||||||
|
#
|
||||||
|
# Use 'blkid' to print the universally unique identifier for a
|
||||||
|
# device; this may be used with UUID= as a more robust way to name devices
|
||||||
|
# that works even if disks are added and removed. See fstab(5).
|
||||||
|
#
|
||||||
|
# systemd generates mount units based on this file, see systemd.mount(5).
|
||||||
|
# Please run 'systemctl daemon-reload' after making changes here.
|
||||||
|
#
|
||||||
|
# <file system> <mount point> <type> <options> <dump> <pass>
|
||||||
|
|
||||||
|
EOF
|
||||||
|
|
||||||
|
### Generate '${TARGET}/etc/fstab' special entries '/' '/boot' '/boot/efi'.
|
||||||
|
### Define the order of the special paths.
|
||||||
|
declare -a var_path_order ary_devs ary_parts
|
||||||
|
declare var_dev var_part
|
||||||
|
|
||||||
|
var_path_order=("/" "/boot" "/boot/efi")
|
||||||
|
|
||||||
|
### Iterate over all devices in the recipe.
|
||||||
|
readarray -t ary_devs < <(yq e -r ".recipe.${VAR_RECIPE_STRING}.dev | keys | .[]" "${VAR_SETUP_PART}")
|
||||||
|
for var_dev in "${ary_devs[@]}"; do
|
||||||
|
|
||||||
|
### Iterate over all partitions for this device.
|
||||||
|
readarray -t ary_parts < <(yq e -r ".recipe.${VAR_RECIPE_STRING}.dev.${var_dev} | keys | .[]" "${VAR_SETUP_PART}")
|
||||||
|
for var_part in "${ary_parts[@]}"; do
|
||||||
|
|
||||||
|
### Extract parameters from YAML.
|
||||||
|
var_fs_btrfs_compress=$(yq_val ".recipe.${VAR_RECIPE_STRING}.dev.${var_dev}.${var_part}.filesystem.btrfs.compress" "${VAR_SETUP_PART}")
|
||||||
|
var_fs_btrfs_level=$(yq_val ".recipe.${VAR_RECIPE_STRING}.dev.${var_dev}.${var_part}.filesystem.btrfs.level" "${VAR_SETUP_PART}")
|
||||||
|
var_fs_btrfs_subvolume=$(yq_val ".recipe.${VAR_RECIPE_STRING}.dev.${var_dev}.${var_part}.filesystem.btrfs.subvolume" "${VAR_SETUP_PART}")
|
||||||
|
var_fs_btrfs_snapshot=$(yq_val ".recipe.${VAR_RECIPE_STRING}.dev.${var_dev}.${var_part}.filesystem.btrfs.snapshot" "${VAR_SETUP_PART}")
|
||||||
|
var_encryption_enable=$(yq_val ".recipe.${VAR_RECIPE_STRING}.dev.${var_dev}.${var_part}.encryption.enable" "${VAR_SETUP_PART}")
|
||||||
|
var_encryption_label=$(yq_val ".recipe.${VAR_RECIPE_STRING}.dev.${var_dev}.${var_part}.encryption.label" "${VAR_SETUP_PART}")
|
||||||
|
var_fs_label=$(yq_val ".recipe.${VAR_RECIPE_STRING}.dev.${var_dev}.${var_part}.filesystem.label" "${VAR_SETUP_PART}")
|
||||||
|
var_fs_options=$(yq_val ".recipe.${VAR_RECIPE_STRING}.dev.${var_dev}.${var_part}.filesystem.options" "${VAR_SETUP_PART}")
|
||||||
|
var_fs_version=$(yq_val ".recipe.${VAR_RECIPE_STRING}.dev.${var_dev}.${var_part}.filesystem.version" "${VAR_SETUP_PART}")
|
||||||
|
var_mount_path=$(yq_val ".recipe.${VAR_RECIPE_STRING}.dev.${var_dev}.${var_part}.mount.path" "${VAR_SETUP_PART}")
|
||||||
|
var_mount_options=$(yq_val ".recipe.${VAR_RECIPE_STRING}.dev.${var_dev}.${var_part}.mount.options" "${VAR_SETUP_PART}")
|
||||||
|
var_mount_optsnap=$(yq_val ".recipe.${VAR_RECIPE_STRING}.dev.${var_dev}.${var_part}.mount.optsnap" "${VAR_SETUP_PART}")
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
done
|
||||||
|
|
||||||
|
done
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
### Reminder ###
|
||||||
|
# HMP_MOUNTPATH_DEV["${MOUNT_PATH}"]="/dev/mapper/${ENCRYPTION_LABEL}"
|
||||||
|
# HMP_MOUNTPATH_DEV["${MOUNT_PATH}"]="/dev/${DEV}${PARTITION}"
|
||||||
|
|
||||||
|
### Generate '${TARGET}/etc/fstab' special entries '/' '/boot' '/boot/efi'.
|
||||||
|
### Define the order of the special paths.
|
||||||
|
declare -a var_path_order
|
||||||
|
var_path_order=("/" "/boot" "/boot/efi")
|
||||||
|
|
||||||
|
declare var_device_path var_device_uuid var_encryption_label var_path
|
||||||
|
declare MATCHING_VAR
|
||||||
|
declare TRANSFORMED_STRING
|
||||||
|
|
||||||
|
for var_path in "${var_path_order[@]}"; do
|
||||||
|
# Initialize variables
|
||||||
|
var_device_path="${HMP_MOUNTPATH_DEV[${var_path}]}"
|
||||||
|
var_device_uuid=$(blkid -s UUID -o value "${var_device_path}")
|
||||||
|
|
||||||
|
# if KEY:VALUE equals "/dev/${DEV}${PARTITION}"
|
||||||
|
if [[ ${var_device_path} =~ ^/dev/[a-zA-Z]+[0-9]+$ ]]; then
|
||||||
|
|
||||||
|
TRANSFORMED_STRING=$(echo "${var_device_path}" | sed 's|/dev/|dev_|; s|\([a-zA-Z]\)\([0-9]\)|\1_\2|')
|
||||||
|
|
||||||
|
# if KEY:VALUE equals "/dev/mapper/${ENCRYPTION_LABEL}"
|
||||||
|
elif [[ ${var_device_path} =~ ^/dev/mapper/ ]]; then
|
||||||
|
|
||||||
|
# Extract ENCRYPTION_LABEL
|
||||||
|
var_encryption_label="${var_device_path#/dev/mapper/}"
|
||||||
|
|
||||||
|
# Search matching variable of a sourced "${PRESEED}" variable file
|
||||||
|
MATCHING_VAR=$(declare -p | grep -oP "recipe_[^ ]+_encryption_label=${var_encryption_label}")
|
||||||
|
|
||||||
|
if [[ -n ${MATCHING_VAR} ]]; then
|
||||||
|
|
||||||
|
# Extract third, fourth and fifth part of the respective variable
|
||||||
|
TRANSFORMED_STRING=$(echo "${MATCHING_VAR}" | sed -E 's|recipe_[^_]+_(dev_[^_]+_[^_]+)_.*|\1|')
|
||||||
|
|
||||||
|
else
|
||||||
|
|
||||||
|
do_log "error" "false" "No matching variable found for ENCRYPTION_LABEL='${var_encryption_label}'."
|
||||||
|
exit "${ERR_NO_ENCR_LABEL}"
|
||||||
|
|
||||||
|
fi
|
||||||
|
|
||||||
|
else
|
||||||
|
|
||||||
|
do_log "error" "false" "Unknown DEVICE_PATH-Format: '${var_device_path}'."
|
||||||
|
exit "${ERR_NO_DEVIC_PATH}"
|
||||||
|
|
||||||
|
fi
|
||||||
|
|
||||||
|
declare BTRFS_COMPR_VAR="recipe_${RECIPE_STRING}_${TRANSFORMED_STRING}_filesystem_btrfs_compress"
|
||||||
|
declare BTRFS_LEVEL_VAR="recipe_${RECIPE_STRING}_${TRANSFORMED_STRING}_filesystem_btrfs_level"
|
||||||
|
declare FILESYSTEM_LABEL_VAR="recipe_${RECIPE_STRING}_${TRANSFORMED_STRING}_filesystem_label"
|
||||||
|
declare FILESYSTEM_VERSION_VAR="recipe_${RECIPE_STRING}_${TRANSFORMED_STRING}_filesystem_version"
|
||||||
|
declare MOUNT_OPTIONS_VAR="recipe_${RECIPE_STRING}_${TRANSFORMED_STRING}_mount_options"
|
||||||
|
declare MOUNT_SUBVOLUME_VAR="recipe_${RECIPE_STRING}_${TRANSFORMED_STRING}_mount_subvolume"
|
||||||
|
|
||||||
|
declare BTRFS_COMPR=${!BTRFS_COMPR_VAR}
|
||||||
|
declare BTRFS_LEVEL=${!BTRFS_LEVEL_VAR}
|
||||||
|
declare FILESYSTEM_LABEL=${!FILESYSTEM_LABEL_VAR}
|
||||||
|
declare FILESYSTEM_VERSION=${!FILESYSTEM_VERSION_VAR}
|
||||||
|
declare MOUNT_OPTIONS=${!MOUNT_OPTIONS_VAR}
|
||||||
|
declare MOUNT_SUBVOLUME=${!MOUNT_SUBVOLUME_VAR}
|
||||||
|
|
||||||
|
if [[ ${var_path} == "/" ]]; then
|
||||||
|
|
||||||
|
if [[ ${FILESYSTEM_VERSION} == "btrfs" ]]; then
|
||||||
|
|
||||||
|
declare BTRFS_OPTIONS="compress=${BTRFS_COMPR}:${BTRFS_LEVEL}"
|
||||||
|
# shellcheck disable=2129
|
||||||
|
echo "# ${var_path} was on ${MAP_MOUNTPATH_DEV[${var_path}]} during installation" >> "${TARGET}"/etc/fstab
|
||||||
|
echo "# ${var_path} was on ${var_device_uuid} during installation" >> "${TARGET}"/etc/fstab
|
||||||
|
echo "${MAP_MOUNTPATH_DEV[${var_path}]} ${var_path} ${FILESYSTEM_VERSION} ${MOUNT_OPTIONS},${BTRFS_OPTIONS},subvol=${MOUNT_SUBVOLUME} 0 1" >> "${TARGET}"/etc/fstab
|
||||||
|
echo "" >> "${TARGET}"/etc/fstab
|
||||||
|
do_log "info" "false" "fstab entry generated: '${MAP_MOUNTPATH_DEV[${var_path}]} ${var_path} ${FILESYSTEM_VERSION} ${MOUNT_OPTIONS},${BTRFS_OPTIONS},subvol=${MOUNT_SUBVOLUME} 0 1'."
|
||||||
|
|
||||||
|
elif [[ ${FILESYSTEM_VERSION} == "ext4" ]]; then
|
||||||
|
|
||||||
|
# shellcheck disable=2129
|
||||||
|
echo "# ${var_path} was on ${MAP_MOUNTPATH_DEV[${var_path}]} during installation" >> "${TARGET}"/etc/fstab
|
||||||
|
echo "# ${var_path} was on ${var_device_uuid} during installation" >> "${TARGET}"/etc/fstab
|
||||||
|
echo "${MAP_MOUNTPATH_DEV[${var_path}]} ${var_path} ${FILESYSTEM_VERSION} ${MOUNT_OPTIONS} 0 1" >> "${TARGET}"/etc/fstab
|
||||||
|
echo "" >> "${TARGET}"/etc/fstab
|
||||||
|
do_log "info" "false" "fstab entry generated: '${MAP_MOUNTPATH_DEV[${var_path}]} ${var_path} ${FILESYSTEM_VERSION} ${MOUNT_OPTIONS} 0 1'."
|
||||||
|
|
||||||
|
else
|
||||||
|
|
||||||
|
do_log "error" "false" "fstab entry - no valid filesystem: '${FILESYSTEM_VERSION}' found for '${var_path}'."
|
||||||
|
|
||||||
|
fi
|
||||||
|
|
||||||
|
elif [[ ${var_path} == "/boot" ]]; then
|
||||||
|
|
||||||
|
if [[ ${FILESYSTEM_VERSION} == "btrfs" ]]; then
|
||||||
|
|
||||||
|
declare BTRFS_OPTIONS="compress=${BTRFS_COMPR}:${BTRFS_LEVEL}"
|
||||||
|
# shellcheck disable=2129
|
||||||
|
echo "# ${var_path} was on ${MAP_MOUNTPATH_DEV[${var_path}]} during installation" >> "${TARGET}"/etc/fstab
|
||||||
|
echo "# ${var_path} was on ${var_device_uuid} during installation" >> "${TARGET}"/etc/fstab
|
||||||
|
echo "UUID=${var_device_uuid} ${var_path} ${FILESYSTEM_VERSION} ${MOUNT_OPTIONS},${BTRFS_OPTIONS},subvol=${MOUNT_SUBVOLUME} 0 2" >> "${TARGET}"/etc/fstab
|
||||||
|
echo "" >> "${TARGET}"/etc/fstab
|
||||||
|
do_log "info" "false" "fstab entry generated: 'UUID=${var_device_uuid} ${var_path} ${FILESYSTEM_VERSION} ${MOUNT_OPTIONS},${BTRFS_OPTIONS},subvol=${MOUNT_SUBVOLUME} 0 2'."
|
||||||
|
|
||||||
|
elif [[ ${FILESYSTEM_VERSION} == "ext4" ]]; then
|
||||||
|
|
||||||
|
# shellcheck disable=2129
|
||||||
|
echo "# ${var_path} was on ${MAP_MOUNTPATH_DEV[${var_path}]} during installation" >> "${TARGET}"/etc/fstab
|
||||||
|
echo "# ${var_path} was on ${var_device_uuid} during installation" >> "${TARGET}"/etc/fstab
|
||||||
|
echo "UUID=${var_device_uuid} ${var_path} ${FILESYSTEM_VERSION} ${MOUNT_OPTIONS} 0 2" >> "${TARGET}"/etc/fstab
|
||||||
|
echo "" >> "${TARGET}"/etc/fstab
|
||||||
|
do_log "info" "false" "fstab entry generated: 'UUID=${var_device_uuid} ${var_path} ${FILESYSTEM_VERSION} ${MOUNT_OPTIONS} 0 2'."
|
||||||
|
|
||||||
|
else
|
||||||
|
|
||||||
|
do_log "error" "false" "fstab entry - no valid filesystem: '${FILESYSTEM_VERSION}' found for '${var_path}'."
|
||||||
|
|
||||||
|
fi
|
||||||
|
|
||||||
|
elif [[ ${var_path} == "/boot/efi" ]]; then
|
||||||
|
|
||||||
|
if [[ ${FILESYSTEM_VERSION} == "fat32" ]]; then
|
||||||
|
|
||||||
|
# shellcheck disable=2129
|
||||||
|
echo "# ${var_path} was on ${MAP_MOUNTPATH_DEV[${var_path}]} during installation" >> "${TARGET}"/etc/fstab
|
||||||
|
echo "# ${var_path} was on ${var_device_uuid} during installation" >> "${TARGET}"/etc/fstab
|
||||||
|
echo "UUID=${var_device_uuid} ${var_path} vfat umask=0077 0 2" >> "${TARGET}"/etc/fstab
|
||||||
|
echo "" >> "${TARGET}"/etc/fstab
|
||||||
|
do_log "info" "false" "fstab entry generated: 'UUID=${var_device_uuid} ${var_path} vfat umask=0077 0 2'."
|
||||||
|
|
||||||
|
else
|
||||||
|
|
||||||
|
do_log "error" "false" "fstab entry - no valid filesystem: '${FILESYSTEM_VERSION}' found for '${var_path}'."
|
||||||
|
|
||||||
|
fi
|
||||||
|
|
||||||
|
else
|
||||||
|
|
||||||
|
do_log "error" "false" "fstab entry - no valid '${var_path}' for '/', '/boot', '/boot/efi' found."
|
||||||
|
|
||||||
|
fi
|
||||||
|
|
||||||
|
done
|
||||||
|
|
||||||
|
# Generate '${TARGET}/etc/fstab' remaining entries
|
||||||
|
for var_path in "${!MAP_MOUNTPATH_DEV[@]}"; do
|
||||||
|
|
||||||
|
# Initialize variables
|
||||||
|
var_device_path="${MAP_MOUNTPATH_DEV[${var_path}]}"
|
||||||
|
var_device_uuid=$(blkid -s UUID -o value "${var_device_path}")
|
||||||
|
|
||||||
|
# if KEY:VALUE equals "/dev/${DEV}${PARTITION}"
|
||||||
|
if [[ ${var_device_path} =~ ^/dev/[a-zA-Z]+[0-9]+$ ]]; then
|
||||||
|
|
||||||
|
TRANSFORMED_STRING=$(echo "${var_device_path}" | sed 's|/dev/|dev_|; s|\([a-zA-Z]\)\([0-9]\)|\1_\2|')
|
||||||
|
|
||||||
|
# if KEY:VALUE equals "/dev/mapper/${ENCRYPTION_LABEL}"
|
||||||
|
elif [[ ${var_device_path} =~ ^/dev/mapper/ ]]; then
|
||||||
|
|
||||||
|
# Extract ENCRYPTION_LABEL
|
||||||
|
var_encryption_label="${var_device_path#/dev/mapper/}"
|
||||||
|
|
||||||
|
# Search matching variable of a sourced "${PRESEED}" variable file
|
||||||
|
MATCHING_VAR=$(declare -p | grep -oP "recipe_[^ ]+_encryption_label=${var_encryption_label}")
|
||||||
|
|
||||||
|
if [[ -n ${MATCHING_VAR} ]]; then
|
||||||
|
|
||||||
|
# Extract third, fourth and fifth part of the respective variable
|
||||||
|
TRANSFORMED_STRING=$(echo "${MATCHING_VAR}" | sed -E 's|recipe_[^_]+_(dev_[^_]+_[^_]+)_.*|\1|')
|
||||||
|
|
||||||
|
else
|
||||||
|
|
||||||
|
do_log "error" "false" "No matching variable found for ENCRYPTION_LABEL='${var_encryption_label}'."
|
||||||
|
exit "${ERR_NO_ENCR_LABEL}"
|
||||||
|
|
||||||
|
fi
|
||||||
|
|
||||||
|
else
|
||||||
|
|
||||||
|
do_log "error" "false" "Unknown DEVICE_PATH-Format: '${var_device_path}'."
|
||||||
|
exit "${ERR_NO_DEVIC_PATH}"
|
||||||
|
|
||||||
|
fi
|
||||||
|
|
||||||
|
declare BTRFS_COMPR_VAR="recipe_${RECIPE_STRING}_${TRANSFORMED_STRING}_filesystem_btrfs_compress"
|
||||||
|
declare BTRFS_LEVEL_VAR="recipe_${RECIPE_STRING}_${TRANSFORMED_STRING}_filesystem_btrfs_level"
|
||||||
|
declare FILESYSTEM_LABEL_VAR="recipe_${RECIPE_STRING}_${TRANSFORMED_STRING}_filesystem_label"
|
||||||
|
declare FILESYSTEM_VERSION_VAR="recipe_${RECIPE_STRING}_${TRANSFORMED_STRING}_filesystem_version"
|
||||||
|
declare MOUNT_OPTIONS_VAR="recipe_${RECIPE_STRING}_${TRANSFORMED_STRING}_mount_options"
|
||||||
|
declare MOUNT_SUBVOLUME_VAR="recipe_${RECIPE_STRING}_${TRANSFORMED_STRING}_mount_subvolume"
|
||||||
|
|
||||||
|
declare BTRFS_COMPR=${!BTRFS_COMPR_VAR}
|
||||||
|
declare BTRFS_LEVEL=${!BTRFS_LEVEL_VAR}
|
||||||
|
declare FILESYSTEM_LABEL=${!FILESYSTEM_LABEL_VAR}
|
||||||
|
declare FILESYSTEM_VERSION=${!FILESYSTEM_VERSION_VAR}
|
||||||
|
declare MOUNT_OPTIONS=${!MOUNT_OPTIONS_VAR}
|
||||||
|
declare MOUNT_SUBVOLUME=${!MOUNT_SUBVOLUME_VAR}
|
||||||
|
|
||||||
|
# Skip already mounted paths ("/", "/boot", "/boot/efi")
|
||||||
|
if [[ " ${var_path_order[*]} " == *" ${var_path} "* ]]; then
|
||||||
|
continue
|
||||||
|
fi
|
||||||
|
|
||||||
|
if [[ ${FILESYSTEM_VERSION} == "btrfs" ]]; then
|
||||||
|
|
||||||
|
declare BTRFS_OPTIONS="compress=${BTRFS_COMPR}:${BTRFS_LEVEL}"
|
||||||
|
# shellcheck disable=2129
|
||||||
|
echo "# ${var_path} was on ${MAP_MOUNTPATH_DEV[${var_path}]} during installation" >> "${TARGET}"/etc/fstab
|
||||||
|
echo "# ${var_path} was on ${var_device_uuid} during installation" >> "${TARGET}"/etc/fstab
|
||||||
|
echo "UUID=${var_device_uuid} ${var_path} ${FILESYSTEM_VERSION} ${MOUNT_OPTIONS},${BTRFS_OPTIONS},subvol=${MOUNT_SUBVOLUME} 0 2" >> "${TARGET}"/etc/fstab
|
||||||
|
echo "" >> "${TARGET}"/etc/fstab
|
||||||
|
do_log "info" "false" "fstab entry generated: 'UUID=${var_device_uuid} ${var_path} ${FILESYSTEM_VERSION} ${MOUNT_OPTIONS},${BTRFS_OPTIONS},subvol=${MOUNT_SUBVOLUME} 0 2'."
|
||||||
|
|
||||||
|
elif [[ ${FILESYSTEM_VERSION} == "ext4" ]]; then
|
||||||
|
|
||||||
|
# shellcheck disable=2129
|
||||||
|
echo "# ${var_path} was on ${MAP_MOUNTPATH_DEV[${var_path}]} during installation" >> "${TARGET}"/etc/fstab
|
||||||
|
echo "# ${var_path} was on ${var_device_uuid} during installation" >> "${TARGET}"/etc/fstab
|
||||||
|
echo "UUID=${var_device_uuid} ${var_path} ${FILESYSTEM_VERSION} ${MOUNT_OPTIONS} 0 2" >> "${TARGET}"/etc/fstab
|
||||||
|
echo "" >> "${TARGET}"/etc/fstab
|
||||||
|
do_log "info" "false" "fstab entry generated: 'UUID=${var_device_uuid} ${var_path} ${FILESYSTEM_VERSION} ${MOUNT_OPTIONS} 0 2'."
|
||||||
|
|
||||||
|
else
|
||||||
|
|
||||||
|
do_log "error" "false" "fstab entry - no valid filesystem: '${FILESYSTEM_VERSION}' found for '${var_path}'."
|
||||||
|
|
||||||
|
fi
|
||||||
|
|
||||||
|
done
|
||||||
|
|
||||||
|
# TODO: flexible entries for more than one CD-ROM drives.
|
||||||
|
# Add entry for CD-ROM device
|
||||||
|
# shellcheck disable=2129
|
||||||
|
echo "# /media/cdrom0 was on /dev/sr0 during installation" >> "${TARGET}"/etc/fstab
|
||||||
|
echo "/dev/sr0 /media/cdrom0 udf,iso9660 user,noauto 0 0" >> "${TARGET}"/etc/fstab
|
||||||
|
echo "" >> "${TARGET}"/etc/fstab
|
||||||
|
do_log "info" "false" "fstab entry generated: '/dev/sr0 /media/cdrom0 udf,iso9660 user,noauto 0 0'."
|
||||||
|
|
||||||
|
# Add entry for proc and tmpfs device
|
||||||
|
# shellcheck disable=2129
|
||||||
|
echo "##### Added by CISS.2025.debian.installer" >> "${TARGET}"/etc/fstab
|
||||||
|
echo "proc /proc proc nodev,nosuid,noexec,hidepid=2 0 0" >> "${TARGET}"/etc/fstab
|
||||||
|
echo "tmpfs /dev/shm tmpfs rw,nodev,nosuid,noexec,relatime,size=1G 0 0" >> "${TARGET}"/etc/fstab
|
||||||
|
echo "" >> "${TARGET}"/etc/fstab
|
||||||
|
do_log "info" "false" "fstab entry generated: 'proc /proc proc nodev,nosuid,noexec,hidepid=2 0 0'."
|
||||||
|
do_log "info" "false" "fstab entry generated: 'tmpfs /dev/shm tmpfs rw,nodev,nosuid,noexec,relatime,size=1G 0 0'."
|
||||||
|
|
||||||
|
# TODO: flexible 'SWAP' entry, not only ephemeral SWAP.
|
||||||
|
# Add entry for SWAP device
|
||||||
|
declare MOUNT_PATH="SWAP"
|
||||||
|
# shellcheck disable=2129
|
||||||
|
echo "##### Added by CISS.2025.debian.installer" >> "${TARGET}"/etc/fstab
|
||||||
|
echo "${MAP_EPHEMERAL_ENCLABEL["${MOUNT_PATH}"]} none swap defaults 0 0" >> "${TARGET}"/etc/fstab
|
||||||
|
echo "" >> "${TARGET}"/etc/fstab
|
||||||
|
do_log "info" "false" "fstab entry generated: '${MAP_EPHEMERAL_ENCLABEL["${MOUNT_PATH}"]} none swap defaults 0 0'."
|
||||||
|
|
||||||
|
# TODO: flexible '/tmp' entry, not only ephemeral SWAP.
|
||||||
|
# Add entry for '/tmp' device
|
||||||
|
declare MOUNT_PATH="/tmp"
|
||||||
|
# shellcheck disable=2129
|
||||||
|
echo "##### Added by CISS.2025.debian.installer" >> "${TARGET}"/etc/fstab
|
||||||
|
echo "${MAP_EPHEMERAL_ENCLABEL["${MOUNT_PATH}"]} /tmp ext4 defaults,rw,nodev,nosuid,relatime 0 0" >> "${TARGET}"/etc/fstab
|
||||||
|
echo "" >> "${TARGET}"/etc/fstab
|
||||||
|
do_log "info" "false" "fstab entry generated: '${MAP_EPHEMERAL_ENCLABEL["${MOUNT_PATH}"]} /tmp ext4 defaults,rw,nodev,nosuid,relatime 0 0'."
|
||||||
|
|
||||||
|
do_show_footer "${MODULE_TXT}"
|
||||||
|
}
|
||||||
|
# vim: number et ts=2 sw=2 sts=2 ai tw=128 ft=sh:
|
||||||
@@ -1,41 +0,0 @@
|
|||||||
#!/bin/bash
|
|
||||||
# SPDX-Version: 3.0
|
|
||||||
# SPDX-CreationInfo: 2025-02-13; WEIDNER, Marc S.; <cendev@coresecret.eu>
|
|
||||||
# SPDX-ExternalRef: GIT https://cendev.eu/marc.weidner/CISS.2025.debian.installer.git
|
|
||||||
# SPDX-FileContributor: WEIDNER, Marc S.; Centurion Intelligence Consulting Agency
|
|
||||||
# SPDX-FileCopyrightText: 2024-2025; WEIDNER, Marc S.; <cendev@coresecret.eu>
|
|
||||||
# SPDX-FileType: SOURCE
|
|
||||||
# SPDX-License-Identifier: EUPL-1.2 OR LicenseRef-CCLA-1.0
|
|
||||||
# SPDX-LicenseComment: This file is part of the CISS.2025.hardened.installer framework.
|
|
||||||
# SPDX-PackageName: CISS.2025.hardened.installer
|
|
||||||
# SPDX-Security-Contact: security@coresecret.eu
|
|
||||||
|
|
||||||
###########################################################################################
|
|
||||||
# 3.7.0. Functions - installation - debootstrap #
|
|
||||||
###########################################################################################
|
|
||||||
|
|
||||||
###########################################################################################
|
|
||||||
# Install minimal Debian environment via debootstrap command.
|
|
||||||
# Globals:
|
|
||||||
# ERR_DE_BOOT_STRAP
|
|
||||||
# MODULE_ERR
|
|
||||||
# MODULE_TXT
|
|
||||||
# TARGET
|
|
||||||
# Arguments:
|
|
||||||
# None
|
|
||||||
###########################################################################################
|
|
||||||
3_7_0_functions_installation_debootstrap() {
|
|
||||||
declare -g -x MODULE_ERR="3_7_0_functions_installation_debootstrap"
|
|
||||||
declare -g -x MODULE_TXT="Executing debootstrap"
|
|
||||||
do_show_header "${MODULE_TXT}"
|
|
||||||
|
|
||||||
if debootstrap --arch amd64 bookworm "${TARGET}" https://deb.debian.org/debian; then
|
|
||||||
do_log "info" "false" "Executing 'debootstrap --arch amd64 bookworm '${TARGET}' https://deb.debian.org/debian' successful."
|
|
||||||
else
|
|
||||||
do_log "emergency" "false" "Executing 'debootstrap --arch amd64 bookworm '${TARGET}' https://deb.debian.org/debian' NOT successful."
|
|
||||||
exit "${ERR_DE_BOOT_STRAP}"
|
|
||||||
fi
|
|
||||||
|
|
||||||
do_show_footer "${MODULE_TXT}"
|
|
||||||
}
|
|
||||||
# vim: number et ts=2 sw=2 sts=2 ai tw=128 ft=sh:
|
|
||||||
@@ -1,75 +0,0 @@
|
|||||||
#!/bin/bash
|
|
||||||
# SPDX-Version: 3.0
|
|
||||||
# SPDX-CreationInfo: 2025-02-13; WEIDNER, Marc S.; <cendev@coresecret.eu>
|
|
||||||
# SPDX-ExternalRef: GIT https://cendev.eu/marc.weidner/CISS.2025.debian.installer.git
|
|
||||||
# SPDX-FileContributor: WEIDNER, Marc S.; Centurion Intelligence Consulting Agency
|
|
||||||
# SPDX-FileCopyrightText: 2024-2025; WEIDNER, Marc S.; <cendev@coresecret.eu>
|
|
||||||
# SPDX-FileType: SOURCE
|
|
||||||
# SPDX-License-Identifier: EUPL-1.2 OR LicenseRef-CCLA-1.0
|
|
||||||
# SPDX-LicenseComment: This file is part of the CISS.2025.hardened.installer framework.
|
|
||||||
# SPDX-PackageName: CISS.2025.hardened.installer
|
|
||||||
# SPDX-Security-Contact: security@coresecret.eu
|
|
||||||
|
|
||||||
###########################################################################################
|
|
||||||
# 3.7.1. Functions - installation - configure system #
|
|
||||||
###########################################################################################
|
|
||||||
|
|
||||||
###########################################################################################
|
|
||||||
# Configure target system for chroot.
|
|
||||||
# Globals:
|
|
||||||
# MODULE_ERR
|
|
||||||
# MODULE_TXT
|
|
||||||
# TARGET
|
|
||||||
# Arguments:
|
|
||||||
# None
|
|
||||||
###########################################################################################
|
|
||||||
3_7_1_functions_installation_configure_system() {
|
|
||||||
declare -g -x MODULE_ERR="3_7_1_functions_installation_configure_system"
|
|
||||||
declare -g -x MODULE_TXT="Configure and prepare system after debootstrap for setup"
|
|
||||||
do_show_header "${MODULE_TXT}"
|
|
||||||
|
|
||||||
### Reminder ###
|
|
||||||
# --rbind: recursive binding.
|
|
||||||
# --make-rslave: In this case, the mount point is marked as 'slave'.
|
|
||||||
# This means changes to the source mount (e.g., /proc) are propagated to the target mount (e.g., "${TARGET}"/proc).
|
|
||||||
# Conversely, changes to the target mount are not propagated back to the source mount.
|
|
||||||
# This mode is necessary to avoid problems with double or erroneous propagation effects in chroot or container environments.
|
|
||||||
|
|
||||||
if mount --make-rslave --rbind /proc "${TARGET}"/proc; then
|
|
||||||
do_log "info" "true" "'mount --make-rslave --rbind /proc ${TARGET}/proc'."
|
|
||||||
else
|
|
||||||
do_log "emergency" "false" "Failed: 'mount --make-rslave --rbind /proc ${TARGET}/proc'."
|
|
||||||
exit "${ERR_CHROOT_MOUNTS}"
|
|
||||||
fi
|
|
||||||
|
|
||||||
if mount --make-rslave --rbind /sys "${TARGET}"/sys; then
|
|
||||||
do_log "info" "true" "'mount --make-rslave --rbind /sys ${TARGET}/sys'."
|
|
||||||
else
|
|
||||||
do_log "emergency" "false" "Failed: 'mount --make-rslave --rbind /sys ${TARGET}/sys'."
|
|
||||||
exit "${ERR_CHROOT_MOUNTS}"
|
|
||||||
fi
|
|
||||||
|
|
||||||
if mount --make-rslave --rbind /dev "${TARGET}"/dev; then
|
|
||||||
do_log "info" "true" "'mount --make-rslave --rbind /dev ${TARGET}/dev'."
|
|
||||||
else
|
|
||||||
do_log "emergency" "false" "Failed: 'mount --make-rslave --rbind /dev ${TARGET}/dev'."
|
|
||||||
exit "${ERR_CHROOT_MOUNTS}"
|
|
||||||
fi
|
|
||||||
|
|
||||||
if mount --make-rslave --rbind /run "${TARGET}"/run; then
|
|
||||||
do_log "info" "true" "'mount --make-rslave --rbind /run ${TARGET}/run'."
|
|
||||||
else
|
|
||||||
do_log "emergency" "false" "Failed: 'mount --make-rslave --rbind /run ${TARGET}/run'."
|
|
||||||
exit "${ERR_CHROOT_MOUNTS}"
|
|
||||||
fi
|
|
||||||
|
|
||||||
if do_in_target "${TARGET}" mkdir -p /etc/systemd/system/multi-user.target.wants; then
|
|
||||||
do_log "info" "true" "Command: 'mkdir -p /etc/systemd/system/multi-user.target.wants' executed in: '${TARGET}'."
|
|
||||||
else
|
|
||||||
do_log "emergency" "false" "Failed: Command: 'mkdir -p /etc/systemd/system/multi-user.target.wants' executed in: '${TARGET}'."
|
|
||||||
exit "${ERR_CHROOT_MOUNTS}"
|
|
||||||
fi
|
|
||||||
|
|
||||||
do_show_footer "${MODULE_TXT}"
|
|
||||||
}
|
|
||||||
# vim: number et ts=2 sw=2 sts=2 ai tw=128 ft=sh:
|
|
||||||
@@ -1,325 +0,0 @@
|
|||||||
#!/bin/bash
|
|
||||||
# SPDX-Version: 3.0
|
|
||||||
# SPDX-CreationInfo: 2025-02-13; WEIDNER, Marc S.; <cendev@coresecret.eu>
|
|
||||||
# SPDX-ExternalRef: GIT https://cendev.eu/marc.weidner/CISS.2025.debian.installer.git
|
|
||||||
# SPDX-FileContributor: WEIDNER, Marc S.; Centurion Intelligence Consulting Agency
|
|
||||||
# SPDX-FileCopyrightText: 2024-2025; WEIDNER, Marc S.; <cendev@coresecret.eu>
|
|
||||||
# SPDX-FileType: SOURCE
|
|
||||||
# SPDX-License-Identifier: EUPL-1.2 OR LicenseRef-CCLA-1.0
|
|
||||||
# SPDX-LicenseComment: This file is part of the CISS.2025.hardened.installer framework.
|
|
||||||
# SPDX-PackageName: CISS.2025.hardened.installer
|
|
||||||
# SPDX-Security-Contact: security@coresecret.eu
|
|
||||||
|
|
||||||
###########################################################################################
|
|
||||||
# 3.7.2. Functions - installation - generate fstab #
|
|
||||||
###########################################################################################
|
|
||||||
|
|
||||||
###########################################################################################
|
|
||||||
# Generate target '/etc/fstab' entries.
|
|
||||||
# Globals:
|
|
||||||
# ERR_NO_DEVIC_PATH
|
|
||||||
# ERR_NO_ENCR_LABEL
|
|
||||||
# MAP_EPHEMERAL_ENCLABEL
|
|
||||||
# MAP_MOUNTPATH_DEV
|
|
||||||
# MODULE_ERR
|
|
||||||
# MODULE_TXT
|
|
||||||
# RECIPE_STRING
|
|
||||||
# TARGET
|
|
||||||
# Arguments:
|
|
||||||
# None
|
|
||||||
###########################################################################################
|
|
||||||
3_7_2_functions_installation_generate_fstab() {
|
|
||||||
declare -g -x MODULE_ERR="3_7_2_functions_installation_generate_fstab"
|
|
||||||
declare -g -x MODULE_TXT="Generating '${TARGET}/etc/fstab'"
|
|
||||||
do_show_header "${MODULE_TXT}"
|
|
||||||
|
|
||||||
# Generate '${TARGET}/etc/fstab' header
|
|
||||||
touch "${TARGET}"/etc/fstab
|
|
||||||
chmod 0644 "${TARGET}"/etc/fstab
|
|
||||||
|
|
||||||
# shellcheck disable=SC2129
|
|
||||||
cat << 'EOF' >> "${TARGET}"/etc/fstab
|
|
||||||
# /etc/fstab: static file system information.
|
|
||||||
#
|
|
||||||
# Use 'blkid' to print the universally unique identifier for a
|
|
||||||
# device; this may be used with UUID= as a more robust way to name devices
|
|
||||||
# that works even if disks are added and removed. See fstab(5).
|
|
||||||
#
|
|
||||||
# systemd generates mount units based on this file, see systemd.mount(5).
|
|
||||||
# Please run 'systemctl daemon-reload' after making changes here.
|
|
||||||
#
|
|
||||||
# <file system> <mount point> <type> <options> <dump> <pass>
|
|
||||||
|
|
||||||
EOF
|
|
||||||
|
|
||||||
### Reminder ###
|
|
||||||
# MAP_MOUNTPATH_DEV["${MOUNT_PATH}"]="/dev/mapper/${ENCRYPTION_LABEL}"
|
|
||||||
# MAP_MOUNTPATH_DEV["${MOUNT_PATH}"]="/dev/${DEV}${PARTITION}"
|
|
||||||
|
|
||||||
# Generate '${TARGET}/etc/fstab' special entries '/' '/boot' '/boot/efi'.
|
|
||||||
# Define the order of the special keys.
|
|
||||||
declare -a KEY_ORDER
|
|
||||||
KEY_ORDER=("/" "/boot" "/boot/efi")
|
|
||||||
|
|
||||||
declare DEVICE_PATH
|
|
||||||
declare DEVICE_UUID
|
|
||||||
declare ENCRYPTION_LABEL
|
|
||||||
declare KEY
|
|
||||||
declare MATCHING_VAR
|
|
||||||
declare TRANSFORMED_STRING
|
|
||||||
|
|
||||||
for KEY in "${KEY_ORDER[@]}"; do
|
|
||||||
# Initialize variables
|
|
||||||
DEVICE_PATH="${MAP_MOUNTPATH_DEV[${KEY}]}"
|
|
||||||
DEVICE_UUID=$(blkid -s UUID -o value "${DEVICE_PATH}")
|
|
||||||
|
|
||||||
# if KEY:VALUE equals "/dev/${DEV}${PARTITION}"
|
|
||||||
if [[ ${DEVICE_PATH} =~ ^/dev/[a-zA-Z]+[0-9]+$ ]]; then
|
|
||||||
|
|
||||||
TRANSFORMED_STRING=$(echo "${DEVICE_PATH}" | sed 's|/dev/|dev_|; s|\([a-zA-Z]\)\([0-9]\)|\1_\2|')
|
|
||||||
|
|
||||||
# if KEY:VALUE equals "/dev/mapper/${ENCRYPTION_LABEL}"
|
|
||||||
elif [[ ${DEVICE_PATH} =~ ^/dev/mapper/ ]]; then
|
|
||||||
|
|
||||||
# Extract ENCRYPTION_LABEL
|
|
||||||
ENCRYPTION_LABEL="${DEVICE_PATH#/dev/mapper/}"
|
|
||||||
|
|
||||||
# Search matching variable of a sourced "${PRESEED}" variable file
|
|
||||||
MATCHING_VAR=$(declare -p | grep -oP "recipe_[^ ]+_encryption_label=${ENCRYPTION_LABEL}")
|
|
||||||
|
|
||||||
if [[ -n ${MATCHING_VAR} ]]; then
|
|
||||||
|
|
||||||
# Extract third, fourth and fifth part of the respective variable
|
|
||||||
TRANSFORMED_STRING=$(echo "${MATCHING_VAR}" | sed -E 's|recipe_[^_]+_(dev_[^_]+_[^_]+)_.*|\1|')
|
|
||||||
|
|
||||||
else
|
|
||||||
|
|
||||||
do_log "error" "false" "No matching variable found for ENCRYPTION_LABEL='${ENCRYPTION_LABEL}'."
|
|
||||||
exit "${ERR_NO_ENCR_LABEL}"
|
|
||||||
|
|
||||||
fi
|
|
||||||
|
|
||||||
else
|
|
||||||
|
|
||||||
do_log "error" "false" "Unknown DEVICE_PATH-Format: '${DEVICE_PATH}'."
|
|
||||||
exit "${ERR_NO_DEVIC_PATH}"
|
|
||||||
|
|
||||||
fi
|
|
||||||
|
|
||||||
declare BTRFS_COMPR_VAR="recipe_${RECIPE_STRING}_${TRANSFORMED_STRING}_filesystem_btrfs_compress"
|
|
||||||
declare BTRFS_LEVEL_VAR="recipe_${RECIPE_STRING}_${TRANSFORMED_STRING}_filesystem_btrfs_level"
|
|
||||||
declare FILESYSTEM_LABEL_VAR="recipe_${RECIPE_STRING}_${TRANSFORMED_STRING}_filesystem_label"
|
|
||||||
declare FILESYSTEM_VERSION_VAR="recipe_${RECIPE_STRING}_${TRANSFORMED_STRING}_filesystem_version"
|
|
||||||
declare MOUNT_OPTIONS_VAR="recipe_${RECIPE_STRING}_${TRANSFORMED_STRING}_mount_options"
|
|
||||||
declare MOUNT_SUBVOLUME_VAR="recipe_${RECIPE_STRING}_${TRANSFORMED_STRING}_mount_subvolume"
|
|
||||||
|
|
||||||
declare BTRFS_COMPR=${!BTRFS_COMPR_VAR}
|
|
||||||
declare BTRFS_LEVEL=${!BTRFS_LEVEL_VAR}
|
|
||||||
declare FILESYSTEM_LABEL=${!FILESYSTEM_LABEL_VAR}
|
|
||||||
declare FILESYSTEM_VERSION=${!FILESYSTEM_VERSION_VAR}
|
|
||||||
declare MOUNT_OPTIONS=${!MOUNT_OPTIONS_VAR}
|
|
||||||
declare MOUNT_SUBVOLUME=${!MOUNT_SUBVOLUME_VAR}
|
|
||||||
|
|
||||||
if [[ ${KEY} == "/" ]]; then
|
|
||||||
|
|
||||||
if [[ ${FILESYSTEM_VERSION} == "btrfs" ]]; then
|
|
||||||
|
|
||||||
declare BTRFS_OPTIONS="compress=${BTRFS_COMPR}:${BTRFS_LEVEL}"
|
|
||||||
# shellcheck disable=2129
|
|
||||||
echo "# ${KEY} was on ${MAP_MOUNTPATH_DEV[${KEY}]} during installation" >> "${TARGET}"/etc/fstab
|
|
||||||
echo "# ${KEY} was on ${DEVICE_UUID} during installation" >> "${TARGET}"/etc/fstab
|
|
||||||
echo "${MAP_MOUNTPATH_DEV[${KEY}]} ${KEY} ${FILESYSTEM_VERSION} ${MOUNT_OPTIONS},${BTRFS_OPTIONS},subvol=${MOUNT_SUBVOLUME} 0 1" >> "${TARGET}"/etc/fstab
|
|
||||||
echo "" >> "${TARGET}"/etc/fstab
|
|
||||||
do_log "info" "false" "fstab entry generated: '${MAP_MOUNTPATH_DEV[${KEY}]} ${KEY} ${FILESYSTEM_VERSION} ${MOUNT_OPTIONS},${BTRFS_OPTIONS},subvol=${MOUNT_SUBVOLUME} 0 1'."
|
|
||||||
|
|
||||||
elif [[ ${FILESYSTEM_VERSION} == "ext4" ]]; then
|
|
||||||
|
|
||||||
# shellcheck disable=2129
|
|
||||||
echo "# ${KEY} was on ${MAP_MOUNTPATH_DEV[${KEY}]} during installation" >> "${TARGET}"/etc/fstab
|
|
||||||
echo "# ${KEY} was on ${DEVICE_UUID} during installation" >> "${TARGET}"/etc/fstab
|
|
||||||
echo "${MAP_MOUNTPATH_DEV[${KEY}]} ${KEY} ${FILESYSTEM_VERSION} ${MOUNT_OPTIONS} 0 1" >> "${TARGET}"/etc/fstab
|
|
||||||
echo "" >> "${TARGET}"/etc/fstab
|
|
||||||
do_log "info" "false" "fstab entry generated: '${MAP_MOUNTPATH_DEV[${KEY}]} ${KEY} ${FILESYSTEM_VERSION} ${MOUNT_OPTIONS} 0 1'."
|
|
||||||
|
|
||||||
else
|
|
||||||
|
|
||||||
do_log "error" "false" "fstab entry - no valid filesystem: '${FILESYSTEM_VERSION}' found for '${KEY}'."
|
|
||||||
|
|
||||||
fi
|
|
||||||
|
|
||||||
elif [[ ${KEY} == "/boot" ]]; then
|
|
||||||
|
|
||||||
if [[ ${FILESYSTEM_VERSION} == "btrfs" ]]; then
|
|
||||||
|
|
||||||
declare BTRFS_OPTIONS="compress=${BTRFS_COMPR}:${BTRFS_LEVEL}"
|
|
||||||
# shellcheck disable=2129
|
|
||||||
echo "# ${KEY} was on ${MAP_MOUNTPATH_DEV[${KEY}]} during installation" >> "${TARGET}"/etc/fstab
|
|
||||||
echo "# ${KEY} was on ${DEVICE_UUID} during installation" >> "${TARGET}"/etc/fstab
|
|
||||||
echo "UUID=${DEVICE_UUID} ${KEY} ${FILESYSTEM_VERSION} ${MOUNT_OPTIONS},${BTRFS_OPTIONS},subvol=${MOUNT_SUBVOLUME} 0 2" >> "${TARGET}"/etc/fstab
|
|
||||||
echo "" >> "${TARGET}"/etc/fstab
|
|
||||||
do_log "info" "false" "fstab entry generated: 'UUID=${DEVICE_UUID} ${KEY} ${FILESYSTEM_VERSION} ${MOUNT_OPTIONS},${BTRFS_OPTIONS},subvol=${MOUNT_SUBVOLUME} 0 2'."
|
|
||||||
|
|
||||||
elif [[ ${FILESYSTEM_VERSION} == "ext4" ]]; then
|
|
||||||
|
|
||||||
# shellcheck disable=2129
|
|
||||||
echo "# ${KEY} was on ${MAP_MOUNTPATH_DEV[${KEY}]} during installation" >> "${TARGET}"/etc/fstab
|
|
||||||
echo "# ${KEY} was on ${DEVICE_UUID} during installation" >> "${TARGET}"/etc/fstab
|
|
||||||
echo "UUID=${DEVICE_UUID} ${KEY} ${FILESYSTEM_VERSION} ${MOUNT_OPTIONS} 0 2" >> "${TARGET}"/etc/fstab
|
|
||||||
echo "" >> "${TARGET}"/etc/fstab
|
|
||||||
do_log "info" "false" "fstab entry generated: 'UUID=${DEVICE_UUID} ${KEY} ${FILESYSTEM_VERSION} ${MOUNT_OPTIONS} 0 2'."
|
|
||||||
|
|
||||||
else
|
|
||||||
|
|
||||||
do_log "error" "false" "fstab entry - no valid filesystem: '${FILESYSTEM_VERSION}' found for '${KEY}'."
|
|
||||||
|
|
||||||
fi
|
|
||||||
|
|
||||||
elif [[ ${KEY} == "/boot/efi" ]]; then
|
|
||||||
|
|
||||||
if [[ ${FILESYSTEM_VERSION} == "fat32" ]]; then
|
|
||||||
|
|
||||||
# shellcheck disable=2129
|
|
||||||
echo "# ${KEY} was on ${MAP_MOUNTPATH_DEV[${KEY}]} during installation" >> "${TARGET}"/etc/fstab
|
|
||||||
echo "# ${KEY} was on ${DEVICE_UUID} during installation" >> "${TARGET}"/etc/fstab
|
|
||||||
echo "UUID=${DEVICE_UUID} ${KEY} vfat umask=0077 0 2" >> "${TARGET}"/etc/fstab
|
|
||||||
echo "" >> "${TARGET}"/etc/fstab
|
|
||||||
do_log "info" "false" "fstab entry generated: 'UUID=${DEVICE_UUID} ${KEY} vfat umask=0077 0 2'."
|
|
||||||
|
|
||||||
else
|
|
||||||
|
|
||||||
do_log "error" "false" "fstab entry - no valid filesystem: '${FILESYSTEM_VERSION}' found for '${KEY}'."
|
|
||||||
|
|
||||||
fi
|
|
||||||
|
|
||||||
else
|
|
||||||
|
|
||||||
do_log "error" "false" "fstab entry - no valid '${KEY}' for '/', '/boot', '/boot/efi' found."
|
|
||||||
|
|
||||||
fi
|
|
||||||
|
|
||||||
done
|
|
||||||
|
|
||||||
# Generate '${TARGET}/etc/fstab' remaining entries
|
|
||||||
for KEY in "${!MAP_MOUNTPATH_DEV[@]}"; do
|
|
||||||
|
|
||||||
# Initialize variables
|
|
||||||
DEVICE_PATH="${MAP_MOUNTPATH_DEV[${KEY}]}"
|
|
||||||
DEVICE_UUID=$(blkid -s UUID -o value "${DEVICE_PATH}")
|
|
||||||
|
|
||||||
# if KEY:VALUE equals "/dev/${DEV}${PARTITION}"
|
|
||||||
if [[ ${DEVICE_PATH} =~ ^/dev/[a-zA-Z]+[0-9]+$ ]]; then
|
|
||||||
|
|
||||||
TRANSFORMED_STRING=$(echo "${DEVICE_PATH}" | sed 's|/dev/|dev_|; s|\([a-zA-Z]\)\([0-9]\)|\1_\2|')
|
|
||||||
|
|
||||||
# if KEY:VALUE equals "/dev/mapper/${ENCRYPTION_LABEL}"
|
|
||||||
elif [[ ${DEVICE_PATH} =~ ^/dev/mapper/ ]]; then
|
|
||||||
|
|
||||||
# Extract ENCRYPTION_LABEL
|
|
||||||
ENCRYPTION_LABEL="${DEVICE_PATH#/dev/mapper/}"
|
|
||||||
|
|
||||||
# Search matching variable of a sourced "${PRESEED}" variable file
|
|
||||||
MATCHING_VAR=$(declare -p | grep -oP "recipe_[^ ]+_encryption_label=${ENCRYPTION_LABEL}")
|
|
||||||
|
|
||||||
if [[ -n ${MATCHING_VAR} ]]; then
|
|
||||||
|
|
||||||
# Extract third, fourth and fifth part of the respective variable
|
|
||||||
TRANSFORMED_STRING=$(echo "${MATCHING_VAR}" | sed -E 's|recipe_[^_]+_(dev_[^_]+_[^_]+)_.*|\1|')
|
|
||||||
|
|
||||||
else
|
|
||||||
|
|
||||||
do_log "error" "false" "No matching variable found for ENCRYPTION_LABEL='${ENCRYPTION_LABEL}'."
|
|
||||||
exit "${ERR_NO_ENCR_LABEL}"
|
|
||||||
|
|
||||||
fi
|
|
||||||
|
|
||||||
else
|
|
||||||
|
|
||||||
do_log "error" "false" "Unknown DEVICE_PATH-Format: '${DEVICE_PATH}'."
|
|
||||||
exit "${ERR_NO_DEVIC_PATH}"
|
|
||||||
|
|
||||||
fi
|
|
||||||
|
|
||||||
declare BTRFS_COMPR_VAR="recipe_${RECIPE_STRING}_${TRANSFORMED_STRING}_filesystem_btrfs_compress"
|
|
||||||
declare BTRFS_LEVEL_VAR="recipe_${RECIPE_STRING}_${TRANSFORMED_STRING}_filesystem_btrfs_level"
|
|
||||||
declare FILESYSTEM_LABEL_VAR="recipe_${RECIPE_STRING}_${TRANSFORMED_STRING}_filesystem_label"
|
|
||||||
declare FILESYSTEM_VERSION_VAR="recipe_${RECIPE_STRING}_${TRANSFORMED_STRING}_filesystem_version"
|
|
||||||
declare MOUNT_OPTIONS_VAR="recipe_${RECIPE_STRING}_${TRANSFORMED_STRING}_mount_options"
|
|
||||||
declare MOUNT_SUBVOLUME_VAR="recipe_${RECIPE_STRING}_${TRANSFORMED_STRING}_mount_subvolume"
|
|
||||||
|
|
||||||
declare BTRFS_COMPR=${!BTRFS_COMPR_VAR}
|
|
||||||
declare BTRFS_LEVEL=${!BTRFS_LEVEL_VAR}
|
|
||||||
declare FILESYSTEM_LABEL=${!FILESYSTEM_LABEL_VAR}
|
|
||||||
declare FILESYSTEM_VERSION=${!FILESYSTEM_VERSION_VAR}
|
|
||||||
declare MOUNT_OPTIONS=${!MOUNT_OPTIONS_VAR}
|
|
||||||
declare MOUNT_SUBVOLUME=${!MOUNT_SUBVOLUME_VAR}
|
|
||||||
|
|
||||||
# Skip already mounted paths ("/", "/boot", "/boot/efi")
|
|
||||||
if [[ " ${KEY_ORDER[*]} " == *" ${KEY} "* ]]; then
|
|
||||||
continue
|
|
||||||
fi
|
|
||||||
|
|
||||||
if [[ ${FILESYSTEM_VERSION} == "btrfs" ]]; then
|
|
||||||
|
|
||||||
declare BTRFS_OPTIONS="compress=${BTRFS_COMPR}:${BTRFS_LEVEL}"
|
|
||||||
# shellcheck disable=2129
|
|
||||||
echo "# ${KEY} was on ${MAP_MOUNTPATH_DEV[${KEY}]} during installation" >> "${TARGET}"/etc/fstab
|
|
||||||
echo "# ${KEY} was on ${DEVICE_UUID} during installation" >> "${TARGET}"/etc/fstab
|
|
||||||
echo "UUID=${DEVICE_UUID} ${KEY} ${FILESYSTEM_VERSION} ${MOUNT_OPTIONS},${BTRFS_OPTIONS},subvol=${MOUNT_SUBVOLUME} 0 2" >> "${TARGET}"/etc/fstab
|
|
||||||
echo "" >> "${TARGET}"/etc/fstab
|
|
||||||
do_log "info" "false" "fstab entry generated: 'UUID=${DEVICE_UUID} ${KEY} ${FILESYSTEM_VERSION} ${MOUNT_OPTIONS},${BTRFS_OPTIONS},subvol=${MOUNT_SUBVOLUME} 0 2'."
|
|
||||||
|
|
||||||
elif [[ ${FILESYSTEM_VERSION} == "ext4" ]]; then
|
|
||||||
|
|
||||||
# shellcheck disable=2129
|
|
||||||
echo "# ${KEY} was on ${MAP_MOUNTPATH_DEV[${KEY}]} during installation" >> "${TARGET}"/etc/fstab
|
|
||||||
echo "# ${KEY} was on ${DEVICE_UUID} during installation" >> "${TARGET}"/etc/fstab
|
|
||||||
echo "UUID=${DEVICE_UUID} ${KEY} ${FILESYSTEM_VERSION} ${MOUNT_OPTIONS} 0 2" >> "${TARGET}"/etc/fstab
|
|
||||||
echo "" >> "${TARGET}"/etc/fstab
|
|
||||||
do_log "info" "false" "fstab entry generated: 'UUID=${DEVICE_UUID} ${KEY} ${FILESYSTEM_VERSION} ${MOUNT_OPTIONS} 0 2'."
|
|
||||||
|
|
||||||
else
|
|
||||||
|
|
||||||
do_log "error" "false" "fstab entry - no valid filesystem: '${FILESYSTEM_VERSION}' found for '${KEY}'."
|
|
||||||
|
|
||||||
fi
|
|
||||||
|
|
||||||
done
|
|
||||||
|
|
||||||
# TODO: flexible entries for more than one CD-ROM drives.
|
|
||||||
# Add entry for CD-ROM device
|
|
||||||
# shellcheck disable=2129
|
|
||||||
echo "# /media/cdrom0 was on /dev/sr0 during installation" >> "${TARGET}"/etc/fstab
|
|
||||||
echo "/dev/sr0 /media/cdrom0 udf,iso9660 user,noauto 0 0" >> "${TARGET}"/etc/fstab
|
|
||||||
echo "" >> "${TARGET}"/etc/fstab
|
|
||||||
do_log "info" "false" "fstab entry generated: '/dev/sr0 /media/cdrom0 udf,iso9660 user,noauto 0 0'."
|
|
||||||
|
|
||||||
# Add entry for proc and tmpfs device
|
|
||||||
# shellcheck disable=2129
|
|
||||||
echo "##### Added by CISS.2025.debian.installer" >> "${TARGET}"/etc/fstab
|
|
||||||
echo "proc /proc proc nodev,nosuid,noexec,hidepid=2 0 0" >> "${TARGET}"/etc/fstab
|
|
||||||
echo "tmpfs /dev/shm tmpfs rw,nodev,nosuid,noexec,relatime,size=1G 0 0" >> "${TARGET}"/etc/fstab
|
|
||||||
echo "" >> "${TARGET}"/etc/fstab
|
|
||||||
do_log "info" "false" "fstab entry generated: 'proc /proc proc nodev,nosuid,noexec,hidepid=2 0 0'."
|
|
||||||
do_log "info" "false" "fstab entry generated: 'tmpfs /dev/shm tmpfs rw,nodev,nosuid,noexec,relatime,size=1G 0 0'."
|
|
||||||
|
|
||||||
# TODO: flexible 'SWAP' entry, not only ephemeral SWAP.
|
|
||||||
# Add entry for SWAP device
|
|
||||||
declare MOUNT_PATH="SWAP"
|
|
||||||
# shellcheck disable=2129
|
|
||||||
echo "##### Added by CISS.2025.debian.installer" >> "${TARGET}"/etc/fstab
|
|
||||||
echo "${MAP_EPHEMERAL_ENCLABEL["${MOUNT_PATH}"]} none swap defaults 0 0" >> "${TARGET}"/etc/fstab
|
|
||||||
echo "" >> "${TARGET}"/etc/fstab
|
|
||||||
do_log "info" "false" "fstab entry generated: '${MAP_EPHEMERAL_ENCLABEL["${MOUNT_PATH}"]} none swap defaults 0 0'."
|
|
||||||
|
|
||||||
# TODO: flexible '/tmp' entry, not only ephemeral SWAP.
|
|
||||||
# Add entry for '/tmp' device
|
|
||||||
declare MOUNT_PATH="/tmp"
|
|
||||||
# shellcheck disable=2129
|
|
||||||
echo "##### Added by CISS.2025.debian.installer" >> "${TARGET}"/etc/fstab
|
|
||||||
echo "${MAP_EPHEMERAL_ENCLABEL["${MOUNT_PATH}"]} /tmp ext4 defaults,rw,nodev,nosuid,relatime 0 0" >> "${TARGET}"/etc/fstab
|
|
||||||
echo "" >> "${TARGET}"/etc/fstab
|
|
||||||
do_log "info" "false" "fstab entry generated: '${MAP_EPHEMERAL_ENCLABEL["${MOUNT_PATH}"]} /tmp ext4 defaults,rw,nodev,nosuid,relatime 0 0'."
|
|
||||||
|
|
||||||
do_show_footer "${MODULE_TXT}"
|
|
||||||
}
|
|
||||||
# vim: number et ts=2 sw=2 sts=2 ai tw=128 ft=sh:
|
|
||||||
@@ -37,10 +37,9 @@ declare -girx ERR_MOUNTING_DEV=233 # The Device could not be mounted.
|
|||||||
declare -girx ERR_MOUNTING_ROOT=232 # The / Volume could not be mounted.
|
declare -girx ERR_MOUNTING_ROOT=232 # The / Volume could not be mounted.
|
||||||
declare -girx ERR_MOUNTING_LUKS=231 # The LUKS Volume could not be mounted.
|
declare -girx ERR_MOUNTING_LUKS=231 # The LUKS Volume could not be mounted.
|
||||||
declare -girx ERR_UNKNOWN_DEV=230 # Unknown Device Path.
|
declare -girx ERR_UNKNOWN_DEV=230 # Unknown Device Path.
|
||||||
|
declare -girx ERR_DEBOOTSTRAP=229 # Failure occurred on debootstrap.
|
||||||
|
declare -girx ERR_CHRT_MOUNTS=228 # Failure occurred while mounting system devices.
|
||||||
|
declare -girx ERR_CHRT_COMMAND=227 # Failure occurred while executing chroot environment command.
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
### Definition of error trap vars
|
### Definition of error trap vars
|
||||||
@@ -51,7 +50,6 @@ declare -gx ERRFUNC="" # = ${FUNCNAME[0]:-main} = $4 = ERRFUNC
|
|||||||
declare -gx ERRCMMD="" # = ${$BASH_COMMAND} = $5 = ERRCMMD
|
declare -gx ERRCMMD="" # = ${$BASH_COMMAND} = $5 = ERRCMMD
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
declare -gir ERR_SPLASH_PNG=200 # --change-splash MUST be 'club' or 'hexagon'
|
declare -gir ERR_SPLASH_PNG=200 # --change-splash MUST be 'club' or 'hexagon'
|
||||||
declare -gir ERR_CONTROL_CT=201 # --control MUST be an integer between '1' and '65535'
|
declare -gir ERR_CONTROL_CT=201 # --control MUST be an integer between '1' and '65535'
|
||||||
declare -gir ERR_RENICE_PRI=202 # --renice-priority MUST an integer between '-19' and '19'
|
declare -gir ERR_RENICE_PRI=202 # --renice-priority MUST an integer between '-19' and '19'
|
||||||
@@ -65,32 +63,5 @@ declare -gir ERR_RGHT_PWD_F=209 # --root-password-file failed to set permissions
|
|||||||
declare -gir ERR_PASS_LENGH=210 # --root-password-file password MUST be between 20 and 64 characters
|
declare -gir ERR_PASS_LENGH=210 # --root-password-file password MUST be between 20 and 64 characters
|
||||||
declare -gir ERR_PASS_PLICY=211 # --root-password-file password MUST NOT contain double quotes
|
declare -gir ERR_PASS_PLICY=211 # --root-password-file password MUST NOT contain double quotes
|
||||||
declare -gir ERR__SSH__PORT=212 # --ssh-port MUST be an integer between '1' and '65535'
|
declare -gir ERR__SSH__PORT=212 # --ssh-port MUST be an integer between '1' and '65535'
|
||||||
|
|
||||||
declare -gir ERR_NOTABSPATH=252 # Not an absolute path
|
declare -gir ERR_NOTABSPATH=252 # Not an absolute path
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
declare -g -i -r -x ERR_DO_NOT_SOURCE=110
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
declare -g -i -r -x ERR_NO_HIGHST_DEV=115
|
|
||||||
declare -g -i -r -x ERR_WRONG_PARTTBL=116
|
|
||||||
declare -g -i -r -x ERR_MOUNTING_PATH=117
|
|
||||||
declare -g -i -r -x ERR_MOUNTING_ROOT=118
|
|
||||||
declare -g -i -r -x ERR_CREAT_SUB_VOL=119
|
|
||||||
declare -g -i -r -x ERR_NO_ENCR_LABEL=120
|
|
||||||
declare -g -i -r -x ERR_NO_DEVIC_PATH=121
|
|
||||||
declare -g -i -r -x ERR_UNSUPPT_TABLE=122
|
|
||||||
declare -g -i -r -x ERR_DE_BOOT_STRAP=123
|
|
||||||
declare -g -i -r -x ERR_CHROOT_MOUNTS=124
|
|
||||||
declare -g -i -r -x ERR_UNEXCEPTIONAL=127
|
|
||||||
|
|
||||||
# vim: number et ts=2 sw=2 sts=2 ai tw=128 ft=sh
|
# vim: number et ts=2 sw=2 sts=2 ai tw=128 ft=sh
|
||||||
|
|||||||
Reference in New Issue
Block a user