#  Version 1.0:
#  Created 2024 by Tim Eertmoed, Christian Hampp @ WiS IT-Solutions GmbH, Germany to work on Raspian as custom pxe init script.

# Version 1.0:
# Created 2024 by Tim Eertmoed, Christian Hampp @ WiS IT-Solutions GmbH, Germany to work on Raspian as custom pxe init script.

clear
echo "Starting System Update..."
sudo apt update >/dev/null 2>&1 && sudo apt upgrade -y >/dev/null 2>&1 && sudo apt dist-upgrade -y >/dev/null 2>&1 && sudo apt autoremove -y >/dev/null 2>&1 && sudo apt clean -y >/dev/null 2>&1
echo "System Update Completed..."

echo "Installing required packages..."
sudo apt install --no-install-recommends xserver-xorg x11-xserver-utils xinit chromium-browser fonts-noto-color-emoji nfs-common watchdog xdotool rsync -y >/dev/null 2>&1
clear

echo "Creating user 'loginuser'..."
sudo adduser --disabled-password --gecos "" loginuser >/dev/null 2>&1

echo "Setting permissions for 'loginuser'..."
sudo tee /etc/sudoers.d/loginuser >/dev/null << 'EOF'
loginuser ALL=(ALL) NOPASSWD: /usr/bin/systemctl restart watchdog
loginuser ALL=(ALL) NOPASSWD: /usr/bin/echo
loginuser ALL=(ALL) NOPASSWD: /usr/bin/cp
loginuser ALL=(ALL) NOPASSWD: /usr/bin/sed
loginuser ALL=(ALL) NOPASSWD: /usr/sbin/reboot
loginuser ALL=(ALL) NOPASSWD: /usr/sbin/dhclient eth0
loginuser ALL=(ALL) NOPASSWD: /usr/bin/fbset
loginuser ALL=(ALL) NOPASSWD: /usr/bin/cat /var/lib/dhcp/*
EOF
sudo usermod -aG video loginuser >/dev/null 2>&1

echo "Disabling root login..."
sudo tee /etc/ssh/sshd_config >/dev/null << 'EOF'
PermitRootLogin no
EOF
sudo passwd -l root >/dev/null 2>&1

echo "Copying required files..."
rm ./rps-light-pxe/.gitignore ./rps-light-pxe/LICENSE ./rps-light-pxe/README.md >/dev/null 2>&1
cp -r ./rps-light-pxe/ / >/dev/null 2>&1

echo "Setting file permissions..."
sudo chown loginuser:loginuser /home/loginuser/.xinitrc >/dev/null 2>&1
sudo chown loginuser:loginuser /home/loginuser/.bash_profile >/dev/null 2>&1
sudo chmod +x /root/remove_unused_kernel.sh >/dev/null 2>&1
sudo chmod +x /usr/bin/watchdog >/dev/null 2>&1
sudo chmod +x /usr/bin/chromium-monitor >/dev/null 2>&1

echo "Enabling services..."
sudo systemctl daemon-reload >/dev/null 2>&1
sudo systemctl enable watchdog >/dev/null 2>&1
sudo systemctl enable chromium-monitor >/dev/null 2>&1
sudo systemctl enable getty@tty1 >/dev/null 2>&1

echo "Cleaning up old kernels..."
sudo bash /root/remove_unused_kernel.sh -u -e >/dev/null 2>&1
rm /root/remove_unused_kernel.sh >/dev/null 2>&1

echo "Installation complete. Press any key to reboot."
read -n 1 -s
sudo reboot