62 lines
2.5 KiB
Bash
62 lines
2.5 KiB
Bash
# Version 1.0:
|
|
# Created 2024 by Tim Eertmoed, Christian Hampp @ WiS IT-Solutions GmbH, Germany to work on Raspian as custom pxe init script.
|
|
|
|
# Version 1.0:
|
|
# Created 2024 by Tim Eertmoed, Christian Hampp @ WiS IT-Solutions GmbH, Germany to work on Raspian as custom pxe init script.
|
|
|
|
clear
|
|
echo "Starting System Update..."
|
|
sudo apt update >/dev/null 2>&1 && sudo apt upgrade -y >/dev/null 2>&1 && sudo apt dist-upgrade -y >/dev/null 2>&1 && sudo apt autoremove -y >/dev/null 2>&1 && sudo apt clean -y >/dev/null 2>&1
|
|
echo "System Update Completed..."
|
|
|
|
echo "Installing required packages..."
|
|
sudo apt install --no-install-recommends xserver-xorg x11-xserver-utils xinit chromium-browser fonts-noto-color-emoji nfs-common watchdog xdotool rsync -y >/dev/null 2>&1
|
|
clear
|
|
|
|
echo "Creating user 'loginuser'..."
|
|
sudo adduser --disabled-password --gecos "" loginuser >/dev/null 2>&1
|
|
|
|
echo "Setting permissions for 'loginuser'..."
|
|
sudo tee /etc/sudoers.d/loginuser >/dev/null << 'EOF'
|
|
loginuser ALL=(ALL) NOPASSWD: /usr/bin/systemctl restart watchdog
|
|
loginuser ALL=(ALL) NOPASSWD: /usr/bin/echo
|
|
loginuser ALL=(ALL) NOPASSWD: /usr/bin/cp
|
|
loginuser ALL=(ALL) NOPASSWD: /usr/bin/sed
|
|
loginuser ALL=(ALL) NOPASSWD: /usr/sbin/reboot
|
|
loginuser ALL=(ALL) NOPASSWD: /usr/sbin/dhclient eth0
|
|
loginuser ALL=(ALL) NOPASSWD: /usr/bin/fbset
|
|
loginuser ALL=(ALL) NOPASSWD: /usr/bin/cat /var/lib/dhcp/*
|
|
EOF
|
|
sudo usermod -aG video loginuser >/dev/null 2>&1
|
|
|
|
echo "Disabling root login..."
|
|
sudo tee /etc/ssh/sshd_config >/dev/null << 'EOF'
|
|
PermitRootLogin no
|
|
EOF
|
|
sudo passwd -l root >/dev/null 2>&1
|
|
|
|
echo "Copying required files..."
|
|
rm ./rps-light-pxe/.gitignore ./rps-light-pxe/LICENSE ./rps-light-pxe/README.md >/dev/null 2>&1
|
|
cp -r ./rps-light-pxe/ / >/dev/null 2>&1
|
|
|
|
echo "Setting file permissions..."
|
|
sudo chown loginuser:loginuser /home/loginuser/.xinitrc >/dev/null 2>&1
|
|
sudo chown loginuser:loginuser /home/loginuser/.bash_profile >/dev/null 2>&1
|
|
sudo chmod +x /root/remove_unused_kernel.sh >/dev/null 2>&1
|
|
sudo chmod +x /usr/bin/watchdog >/dev/null 2>&1
|
|
sudo chmod +x /usr/bin/chromium-monitor >/dev/null 2>&1
|
|
|
|
echo "Enabling services..."
|
|
sudo systemctl daemon-reload >/dev/null 2>&1
|
|
sudo systemctl enable watchdog >/dev/null 2>&1
|
|
sudo systemctl enable chromium-monitor >/dev/null 2>&1
|
|
sudo systemctl enable getty@tty1 >/dev/null 2>&1
|
|
|
|
echo "Cleaning up old kernels..."
|
|
sudo bash /root/remove_unused_kernel.sh -u -e >/dev/null 2>&1
|
|
rm /root/remove_unused_kernel.sh >/dev/null 2>&1
|
|
|
|
echo "Installation complete. Press any key to reboot."
|
|
read -n 1 -s
|
|
sudo reboot
|