stable #2

Merged
alientim merged 89 commits from stable into dev 2024-11-15 10:37:11 +01:00
Showing only changes of commit 4d072450c0 - Show all commits

View File

@@ -11,19 +11,19 @@ print_status() {
echo -e "${GREEN}${NC} ${1} completed." echo -e "${GREEN}${NC} ${1} completed."
} }
echo -e "${RED}${NC} Starting System Update..." echo -e "${RED}${NC} Starting System Update..." | tee -a /var/log/install
sudo apt update >>/var/log/install 2>&1 && print_status "System Update" sudo apt update >>/var/log/install 2>&1 && print_status "System Update"
sudo apt upgrade -y >>/var/log/install 2>&1 && print_status "System Upgrade" sudo apt upgrade -y >>/var/log/install 2>&1 && print_status "System Upgrade"
sudo apt dist-upgrade -y >>/var/log/install 2>&1 && print_status "System Dist-Upgrade" sudo apt dist-upgrade -y >>/var/log/install 2>&1 && print_status "System Dist-Upgrade"
echo -e "${RED}${NC} Installing required packages..." echo -e "${RED}${NC} Installing required packages..." | tee -a /var/log/install
sudo apt install --no-install-recommends xserver-xorg x11-xserver-utils xinit chromium-browser fonts-noto-color-emoji nfs-common watchdog xdotool rsync -y >>/var/log/install 2>&1 && print_status "Required packages installed" sudo apt install --no-install-recommends xserver-xorg x11-xserver-utils xinit chromium-browser fonts-noto-color-emoji nfs-common watchdog xdotool rsync -y >>/var/log/install 2>&1 && print_status "Required packages installed"
sudo apt install realvnc-vnc-server overlayroot -y >>/var/log/install 2>&1 && print_status "VNC and Overlayroot installed" sudo apt install realvnc-vnc-server overlayroot -y >>/var/log/install 2>&1 && print_status "VNC and Overlayroot installed"
sudo apt autoremove -y >>/var/log/install 2>&1 && print_status "Autoremove" sudo apt autoremove -y >>/var/log/install 2>&1 && print_status "Autoremove"
sudo apt clean >>/var/log/install 2>&1 && print_status "Clean" sudo apt clean >>/var/log/install 2>&1 && print_status "Clean"
rm -rf /var/lib/apt/lists/* >>/var/log/install 2>&1 && print_status "Clear cache" rm -rf /var/lib/apt/lists/* >>/var/log/install 2>&1 && print_status "Clear cache"
echo -e "${RED}${NC} Configuring Raspberry Pi settings..." echo -e "${RED}${NC} Configuring Raspberry Pi settings..." | tee -a /var/log/install
sudo raspi-config nonint do_camera 0 >> /var/log/install 2>&1 && print_status "Camera disabled" sudo raspi-config nonint do_camera 0 >> /var/log/install 2>&1 && print_status "Camera disabled"
sudo raspi-config nonint do_vnc 0 >> /var/log/install 2>&1 && print_status "VNC enabled" sudo raspi-config nonint do_vnc 0 >> /var/log/install 2>&1 && print_status "VNC enabled"
sudo raspi-config nonint do_spi 0 >> /var/log/install 2>&1 && print_status "SPI disabled" sudo raspi-config nonint do_spi 0 >> /var/log/install 2>&1 && print_status "SPI disabled"
@@ -36,20 +36,20 @@ sudo raspi-config nonint do_locale "de_DE.UTF-8" "de_DE.UTF-8" >> /var/log/insta
sudo raspi-config nonint do_timezone "Europe/Berlin" >> /var/log/install 2>&1 && print_status "Timezone set to Europe/Berlin" sudo raspi-config nonint do_timezone "Europe/Berlin" >> /var/log/install 2>&1 && print_status "Timezone set to Europe/Berlin"
sudo raspi-config nonint do_boot_order 3 >> /var/log/install 2>&1 && print_status "Boot order set to network boot" sudo raspi-config nonint do_boot_order 3 >> /var/log/install 2>&1 && print_status "Boot order set to network boot"
echo -e "${RED}${NC} Configuring VNC..." echo -e "${RED}${NC} Configuring VNC..." | tee -a /var/log/install
sudo systemctl enable vncserver-x11-serviced.service >>/var/log/install 2>&1 && print_status "VNC service enabled" sudo systemctl enable vncserver-x11-serviced.service >>/var/log/install 2>&1 && print_status "VNC service enabled"
sudo systemctl start vncserver-x11-serviced.service >>/var/log/install 2>&1 && print_status "VNC service started" sudo systemctl start vncserver-x11-serviced.service >>/var/log/install 2>&1 && print_status "VNC service started"
CONFIG_FILE="/root/.vnc/config.d/vncserver-x11" CONFIG_FILE="/root/.vnc/config.d/vncserver-x11"
if [ ! -d "$(dirname "$CONFIG_FILE")" ]; then if [ ! -d "$(dirname "$CONFIG_FILE")" ]; then
mkdir -p "$(dirname "$CONFIG_FILE")" mkdir -p "$(dirname "$CONFIG_FILE")"
print_status "Created directory for VNC config." >> /var/log/install 2>&1 echo -e "${GREEN}${NC} Created directory for VNC config." | tee -a /var/log/install
fi fi
read -p "Do you want to set a VNC password? (y/n): " -r read -p "Do you want to set a VNC password? (y/n): " -r
if [[ $REPLY =~ ^[Yy](e[Ss]?)?$ ]]; then if [[ $REPLY =~ ^[Yy](e[Ss]?)?$ ]]; then
vncpasswd vncpasswd
print_status "VNC password has been set." >> /var/log/install 2>&1 echo -e "${GREEN}${NC} VNC password has been set." | tee -a /var/log/install
else else
echo -e "${RED}${NC} No VNC password will be set." >> /var/log/install 2>&1 echo -e "${GREEN}${NC} No VNC password will be set." | tee -a /var/log/install
fi fi
if [ "$(vncpasswd -o)" = 'none' ]; then if [ "$(vncpasswd -o)" = 'none' ]; then
echo "Authentication=None" >> "$CONFIG_FILE" echo "Authentication=None" >> "$CONFIG_FILE"
@@ -68,10 +68,10 @@ sudo raspi-config nonint do_vnc 0 >>/var/log/install 2>&1 && print_status "VNC e
sudo systemctl unmask vncserver-x11-serviced.service >>/var/log/install 2>&1 && print_status "VNC unmask" sudo systemctl unmask vncserver-x11-serviced.service >>/var/log/install 2>&1 && print_status "VNC unmask"
sudo systemctl enable vncserver-x11-serviced.service >>/var/log/install 2>&1 && print_status "VNC enabled systemctl" sudo systemctl enable vncserver-x11-serviced.service >>/var/log/install 2>&1 && print_status "VNC enabled systemctl"
echo -e "${RED}${NC} Creating user 'loginuser'..." echo -e "${RED}${NC} Creating user 'loginuser'..." | tee -a /var/log/install
sudo adduser --disabled-password --gecos "" loginuser >>/var/log/install 2>&1 && print_status "User 'loginuser' created" sudo adduser --disabled-password --gecos "" loginuser >>/var/log/install 2>&1 && print_status "User 'loginuser' created"
echo -e "${RED}${NC} Setting permissions for 'loginuser'..." echo -e "${RED}${NC} Setting permissions for 'loginuser'..." | tee -a /var/log/install
sudo tee /etc/sudoers.d/loginuser >/dev/null << 'EOF' sudo tee /etc/sudoers.d/loginuser >/dev/null << 'EOF'
loginuser ALL=(ALL) NOPASSWD: /usr/bin/systemctl start watchdog, /usr/bin/systemctl stop watchdog, /usr/bin/systemctl restart watchdog loginuser ALL=(ALL) NOPASSWD: /usr/bin/systemctl start watchdog, /usr/bin/systemctl stop watchdog, /usr/bin/systemctl restart watchdog
loginuser ALL=(ALL) NOPASSWD: /usr/bin/systemctl stop watchdog-monitor loginuser ALL=(ALL) NOPASSWD: /usr/bin/systemctl stop watchdog-monitor
@@ -87,13 +87,13 @@ loginuser ALL=(ALL) NOPASSWD: /usr/sbin/reboot
EOF EOF
sudo usermod -aG video loginuser >>/var/log/install 2>&1 && print_status "Permissions for 'loginuser' set" sudo usermod -aG video loginuser >>/var/log/install 2>&1 && print_status "Permissions for 'loginuser' set"
echo -e "${RED}${NC} Disabling root login..." echo -e "${RED}${NC} Disabling root login..." | tee -a /var/log/install
sudo tee /etc/ssh/sshd_config >/dev/null << 'EOF' sudo tee /etc/ssh/sshd_config >/dev/null << 'EOF'
PermitRootLogin no PermitRootLogin no
EOF EOF
sudo passwd -l root >>/var/log/install 2>&1 && print_status "Root login disabled" sudo passwd -l root >>/var/log/install 2>&1 && print_status "Root login disabled"
echo -e "${RED}${NC} Copy requiered files..." echo -e "${RED}${NC} Copy requiered files..." | tee -a /var/log/install
mkdir -p /etc/chromium/policies/managed /home/wis/.ssh /usr/bin/custom mkdir -p /etc/chromium/policies/managed /home/wis/.ssh /usr/bin/custom
declare -A files=( declare -A files=(
["/root/rps-client/boot/ro-root.sh"]="/boot/ro-root.sh" ["/root/rps-client/boot/ro-root.sh"]="/boot/ro-root.sh"
@@ -120,49 +120,49 @@ for src in "${!files[@]}"; do
done done
print_status "All files have been successfully copied" print_status "All files have been successfully copied"
echo -e "${RED}${NC} Setting file permissions..." echo -e "${RED}${NC} Setting file permissions..." | tee -a /var/log/install
sudo chown loginuser:loginuser -R /home/loginuser >>/var/log/install 2>&1 && print_status "File permissions for 'loginuser' set" sudo chown loginuser:loginuser -R /home/loginuser >>/var/log/install 2>&1 && print_status "File permissions for 'loginuser' set"
sudo chown wis:wis -R /home/wis >>/var/log/install 2>&1 && print_status "File permissions for 'wis' set" sudo chown wis:wis -R /home/wis >>/var/log/install 2>&1 && print_status "File permissions for 'wis' set"
echo -e "${RED}${NC} Creating log files..." echo -e "${RED}${NC} Creating log files..." | tee -a /var/log/install
sudo touch /var/log/watchdog.log /var/log/chromium-monitor.log /var/log/hostname.log >>/var/log/install 2>&1 && print_status "Log files created" sudo touch /var/log/watchdog.log /var/log/chromium-monitor.log /var/log/hostname.log >>/var/log/install 2>&1 && print_status "Log files created"
sudo chown loginuser:loginuser /var/log/watchdog.log /var/log/chromium-monitor.log /var/log/hostname.log >>/var/log/install 2>&1 && print_status "Ownership set for log files" sudo chown loginuser:loginuser /var/log/watchdog.log /var/log/chromium-monitor.log /var/log/hostname.log >>/var/log/install 2>&1 && print_status "Ownership set for log files"
sudo chmod 777 /var/log/watchdog.log /var/log/chromium-monitor.log /var/log/hostname.log >>/var/log/install 2>&1 && print_status "Permissions set for log files" sudo chmod 777 /var/log/watchdog.log /var/log/chromium-monitor.log /var/log/hostname.log >>/var/log/install 2>&1 && print_status "Permissions set for log files"
sudo chmod +x /usr/bin/custom/* >>/var/log/install 2>&1 && print_status "Permissions set for script files" sudo chmod +x /usr/bin/custom/* >>/var/log/install 2>&1 && print_status "Permissions set for script files"
echo -e "${RED}${NC} Enabling services..." echo -e "${RED}${NC} Enabling services..." | tee -a /var/log/install
sudo systemctl daemon-reload >>/var/log/install 2>&1 && print_status "Daemon reloaded" sudo systemctl daemon-reload >>/var/log/install 2>&1 && print_status "Daemon reloaded"
sudo systemctl enable hostname watchdog chromium-monitor vncserver-x11-serviced.service getty@tty1 >>/var/log/install 2>&1 && print_status "Services enabled" sudo systemctl enable hostname watchdog chromium-monitor vncserver-x11-serviced.service getty@tty1 >>/var/log/install 2>&1 && print_status "Services enabled"
sudo systemctl restart getty@tty1 >>/var/log/install 2>&1 && print_status "getty service restarted" sudo systemctl restart getty@tty1 >>/var/log/install 2>&1 && print_status "getty service restarted"
echo -e "${RED}${NC} Do you want to clean up unused kernels? (y/n):" echo -e "${RED}${NC} Do you want to clean up unused kernels? (y/n):" | tee -a /var/log/install
read -r clean_kernels read -r clean_kernels
if [[ "$clean_kernels" =~ ^[Yy](e[Ss]?)?$ ]]; then if [[ "$clean_kernels" =~ ^[Yy](e[Ss]?)?$ ]]; then
echo -e "${RED}${NC} Cleaning up unused kernels..." echo -e "${RED}${NC} Cleaning up unused kernels..." | tee -a /var/log/install
sudo bash /root/remove_unused_kernel.sh -u -e >>/var/log/install 2>&1 && print_status "Unused kernels cleaned up" sudo bash /root/remove_unused_kernel.sh -u -e >>/var/log/install 2>&1 && print_status "Unused kernels cleaned up"
else else
echo -e "${RED}${NC} Skipping unused kernel cleanup..." echo -e "${RED}${NC} Skipping unused kernel cleanup..." | tee -a /var/log/install
print_status "Cleanup has been skipped" >> /var/log/install 2>&1 echo -e "${GREEN}${NC} Cleanup has been skipped" | tee -a /var/log/install
fi fi
echo "performance" | sudo tee /sys/devices/system/cpu/cpu0/cpufreq/scaling_governor echo "performance" | sudo tee /sys/devices/system/cpu/cpu0/cpufreq/scaling_governor
sudo systemctl mask sleep.target suspend.target hibernate.target hybrid-sleep.target sudo systemctl mask sleep.target suspend.target hibernate.target hybrid-sleep.target
echo -e "${RED}${NC} Cleaning up installer..." echo -e "${RED}${NC} Cleaning up installer..." | tee -a /var/log/install
sudo rm -rf ./rps-client >>/var/log/install 2>&1 && print_status "Installer cleaned up" sudo rm -rf ./rps-client >>/var/log/install 2>&1 && print_status "Installer cleaned up"
echo -e "${RED}${NC} Configuring Overlayroot..." echo -e "${RED}${NC} Configuring Overlayroot..." | tee -a /var/log/install
CONFIG_FILE="/etc/overlayroot.conf" CONFIG_FILE="/etc/overlayroot.conf"
echo 'overlayroot_cfgdisk="disabled"' | sudo tee "$CONFIG_FILE" echo 'overlayroot_cfgdisk="disabled"' | sudo tee "$CONFIG_FILE" >/dev/null
echo 'overlayroot=""' | sudo tee -a "$CONFIG_FILE" echo 'overlayroot=""' | sudo tee -a "$CONFIG_FILE" >/dev/null
read -p "Do you want to activate overlayfs? (y/n): " -r read -p "Do you want to activate overlayfs? (y/n): " -r
if [[ $REPLY =~ ^[Yy](e[Ss]?)?$ ]]; then if [[ $REPLY =~ ^[Yy](e[Ss]?)?$ ]]; then
echo 'overlayroot="tmpfs:overlayfs"' | sudo tee -a "$CONFIG_FILE" echo 'overlayroot="tmpfs:overlayfs"' | sudo tee -a "$CONFIG_FILE"
sudo raspi-config nonint do_overlayroot 0 >>/var/log/install 2>&1 && print_status "Overlayroot enabled in raspi-config" sudo raspi-config nonint do_overlayroot 0 >>/var/log/install 2>&1 && print_status "Overlayroot enabled in raspi-config"
print_status "Overlayroot has been activated." >> /var/log/install 2>&1 echo -e "${GREEN}${NC} Overlayroot has been activated." | tee -a /var/log/install
else else
echo 'overlayroot=""' | sudo tee -a "$CONFIG_FILE" echo 'overlayroot=""' | sudo tee -a "$CONFIG_FILE"
echo -e "${RED}${NC} Overlayroot has not been activated." >> /var/log/install 2>&1 echo -e "${GREEN}${NC} Overlayroot has not been activated." | tee -a /var/log/install
fi fi
echo -e "${GREEN}${NC} Installation complete. Press any key to reboot..." >> /var/log/install 2>&1 echo -e "${GREEN}${NC} Installation complete. Press any key to reboot..." >> /var/log/install 2>&1