#!/bin/sh
# bashsupport disable=BP5007
# shellcheck disable=SC2249
# shellcheck shell=sh

# SPDX-Version: 3.0
# SPDX-CreationInfo: 2025-11-12; WEIDNER, Marc S.; <msw@coresecret.dev>
# SPDX-ExternalRef: GIT https://git.coresecret.dev/msw/CISS.debian.live.builder.git
# SPDX-FileContributor: WEIDNER, Marc S.; Centurion Intelligence Consulting Agency
# SPDX-FileCopyrightText: 2024-2025; WEIDNER, Marc S.; <msw@coresecret.dev>
# SPDX-FileType: SOURCE
# SPDX-License-Identifier: GPL-3.0-or-later
# SPDX-LicenseComment: This file is part of the CISS.debian.installer.secure framework.
# SPDX-PackageName: CISS.debian.live.builder
# SPDX-Security-Contact: security@coresecret.eu

### Modified Version of the original file:
### https://salsa.debian.org/live-team/live-boot 'components/9990-networking.sh'
### Change the behavior so that the systemd-networkd stack '/etc/resolv.conf' is not overwritten.

# set -e

printf "\e[95m[INFO] Sourcing             : [/usr/lib/live/boot/9990-networking.sh] \n\e[0m"

Device_from_bootif ()
{
  # Support for Syslinux IPAPPEND parameter
  # it sets the BOOTIF variable on the kernel parameter

  if [ -n "${BOOTIF}" ]
  then
    # Pxelinux sets BOOTIF to a value based on the mac address of the
    # network card used to PXE boot, so use this value for DEVICE rather
    # than a hard-coded device name from initramfs.conf. This facilitates
    # network booting when machines may have multiple network cards.
    # Pxelinux sets BOOTIF to 01-$mac_address

    # Strip off the leading "01-", which isn't part of the mac
    # address
    temp_mac=${BOOTIF#*-}

    # Convert to the typical mac address format by replacing "-" with ":"
    bootif_mac=""
    IFS='-'
    for x in ${temp_mac}
    do
      if [ -z "${bootif_mac}" ]
      then
        bootif_mac="${x}"
      else
        bootif_mac="${bootif_mac}:${x}"
      fi
    done
    unset IFS

    # Look for devices with matching mac address and set DEVICE to
    # appropriate value if match is found.

    for device in /sys/class/net/*
    do
      if [ -f "${device}/address" ]
      then
        current_mac=$(cat "${device}/address")

        if [ "${bootif_mac}" = "${current_mac}" ]
        then
          DEVICE=${device##*/}
          break
        fi
      fi
    done
  fi
}

do_netsetup ()
{
  printf "\e[95m[INFO] do_netsetup()        : [/usr/lib/live/boot/9990-networking.sh] \n\e[0m"
  modprobe -q af_packet # For DHCP

  udevadm trigger
  udevadm settle

  [ -n "${ETHDEV_TIMEOUT}" ] || ETHDEV_TIMEOUT=15
  echo "Using timeout of ${ETHDEV_TIMEOUT} seconds for network configuration."

  if [ -z "${NETBOOT}" ] && [ -z "${FETCH}" ] && [ -z "${HTTPFS}" ] && [ -z "${FTPFS}" ]
  then
    # See if we can select the device from BOOTIF
    Device_from_bootif

    # if ethdevice was not specified on the kernel command line,
    # make sure we try to get a working network configuration
    # for *every* present network device (except for loopback of course)
    if [ -z "${ETHDEVICE}" ]
    then
      echo "If you want to boot from a specific device use bootoption ethdevice=..."
      for device in /sys/class/net/*
      do
        dev=${device##*/}
        if [ "${dev}" != "lo" ]
        then
          ETHDEVICE="${ETHDEVICE} ${dev}"
        fi
      done
    fi

    # Split args of ethdevice=eth0,eth1 into "eth0 eth1"
    for device in $(echo "${ETHDEVICE}" | sed 's/,/ /g')
    do
      devlist="${devlist} ${device}"
    done

    for dev in ${devlist}
    do
      echo "Executing ipconfig -t ${ETHDEV_TIMEOUT} ${dev}"
      ipconfig -t "${ETHDEV_TIMEOUT}" "${dev}" | tee -a /netboot.config

      # if configuration of a device worked, we should have an assigned
      # IP address, if so, let's use the device as $DEVICE for later usage.
      # Simple and primitive approach, which seems to work fine
      if ifconfig "${dev}" | grep -q -E 'inet.*addr:|inet [0-9][0-9]*.[0-9][0-9]*.[0-9][0-9]*.[0-9][0-9]*'
      then
        export DEVICE="${dev}"
        break
      fi
    done
  else
    for interface in ${DEVICE}; do
      ipconfig -t "${ETHDEV_TIMEOUT}" "${interface}" | tee "/netboot-${interface}.config"

      # shellcheck disable=SC1090
      [ -e "/run/net-${interface}.conf" ] && . "/run/net-${interface}.conf"

      if [ "${IPV4ADDR}" != "0.0.0.0" ]
      then
        break
      fi
    done
  fi

  for interface in ${DEVICE}
  do
    # source relevant ipconfig output
    OLDHOSTNAME=${HOSTNAME}

    # shellcheck disable=SC1090
    [ -e "/run/net-${interface}.conf" ] && . "/run/net-${interface}.conf"

    [ -z "${HOSTNAME}" ] && HOSTNAME="${OLDHOSTNAME}"
    export HOSTNAME

    if [ -n "${interface}" ]
    then
      # HWADDR used by do_iscsi from 9990-mount-iscsi.sh
      # shellcheck disable=SC2034
      HWADDR="$(cat "/sys/class/net/${interface}/address")"
    fi

    if [ ! -e "/etc/hostname" ] && [ -n "${HOSTNAME}" ]
    then
      echo "Creating /etc/hostname"
      echo "${HOSTNAME}" > /etc/hostname
    fi

    # Only create /etc/hosts if FQDN is known (to let 'hostname -f' query
    # this file). Otherwise, DNS will be queried to determine the FQDN.
    if [ ! -e "/etc/hosts" ] && [ -n "${DNSDOMAIN}" ]
    then
      echo "Creating /etc/hosts"
      cat > /etc/hosts <<EOF
127.0.0.1	localhost
127.0.1.1	${HOSTNAME}.${DNSDOMAIN}	${HOSTNAME}

# The following lines are desirable for IPv6 capable hosts
::1     localhost ip6-localhost ip6-loopback
ff02::1 ip6-allnodes
ff02::2 ip6-allrouters
EOF
    fi

    if [ ! -e "/etc/resolv.conf" ]
    then
      echo "Creating /etc/resolv.conf"

      if [ -n "${DNSDOMAIN}" ]
      then
        echo "domain ${DNSDOMAIN}" > /etc/resolv.conf
      fi

      for i in ${IPV4DNS0} ${IPV4DNS1} ${IPV4DNS1} ${DNSSERVERS}
      do
        if [ -n "${i}" ] && [ "${i}" != 0.0.0.0 ]
        then
          echo "nameserver ${i}" >> /etc/resolv.conf
        fi
      done

      if [ -n "${DOMAINSEARCH}" ]
      then
        echo "search ${DOMAINSEARCH}" >> /etc/resolv.conf
      elif [ -n "${DNSDOMAIN}" ]
      then
        echo "search ${DNSDOMAIN}" >> /etc/resolv.conf
      fi
    fi

    # Check if we have a network device at all
    if ! ls /sys/class/net/"${interface}" > /dev/null 2>&1 && \
      ! ls /sys/class/net/eth0 > /dev/null 2>&1 && \
      ! ls /sys/class/net/wlan0 > /dev/null 2>&1 && \
      ! ls /sys/class/net/ath0 > /dev/null 2>&1 && \
      ! ls /sys/class/net/ra0 > /dev/null 2>&1
    then
      panic "No supported network device found, maybe a non-mainline driver is required."
    fi
  done
  printf "\e[92m[INFO] Successfully applied : [/usr/lib/live/boot/9990-networking.sh/do_netsetup()] \n\e[0m"
}