77 lines
3.3 KiB
Bash
77 lines
3.3 KiB
Bash
#!/bin/bash
|
|
|
|
RED='\033[0;31m'
|
|
GREEN='\033[0;32m'
|
|
NC='\033[0m' # No Color
|
|
|
|
clear
|
|
|
|
echo -e "${RED}→${NC} Starting System Update..."
|
|
sudo apt update >/dev/null 2>&1 && sudo apt upgrade -y >/dev/null 2>&1 && sudo apt dist-upgrade -y >/dev/null 2>&1 && sudo apt autoremove -y >/dev/null 2>&1 && sudo apt clean -y >/dev/null 2>&1
|
|
echo -e "${GREEN}✔${NC} System Update Completed..."
|
|
|
|
echo -e "${RED}→${NC} Installing required packages..."
|
|
sudo apt install --no-install-recommends xserver-xorg x11-xserver-utils xinit -y >/dev/null 2>&1
|
|
sudo apt install --no-install-recommends chromium-browser fonts-noto-color-emoji nfs-common watchdog xdotool rsync -y >/dev/null 2>&1
|
|
sudo apt install realvnc-vnc-server overlayroot -y >/dev/null 2>&1
|
|
echo -e "${GREEN}✔${NC} Required packages installed..."
|
|
|
|
echo -e "${RED}→${NC} Creating user 'loginuser'..."
|
|
sudo adduser --disabled-password --gecos "" loginuser >/dev/null 2>&1
|
|
echo -e "${GREEN}✔${NC} User 'loginuser' created..."
|
|
|
|
echo -e "${RED}→${NC} Setting permissions for 'loginuser'..."
|
|
sudo tee /etc/sudoers.d/loginuser >/dev/null << 'EOF'
|
|
loginuser ALL=(ALL) NOPASSWD: /usr/bin/systemctl restart watchdog
|
|
loginuser ALL=(ALL) NOPASSWD: /usr/bin/echo
|
|
loginuser ALL=(ALL) NOPASSWD: /usr/bin/cp
|
|
loginuser ALL=(ALL) NOPASSWD: /usr/bin/sed
|
|
loginuser ALL=(ALL) NOPASSWD: /usr/sbin/reboot
|
|
loginuser ALL=(ALL) NOPASSWD: /usr/sbin/dhclient eth0
|
|
loginuser ALL=(ALL) NOPASSWD: /usr/bin/fbset
|
|
loginuser ALL=(ALL) NOPASSWD: /usr/bin/cat /var/lib/dhcp/*
|
|
EOF
|
|
sudo usermod -aG video loginuser >/dev/null 2>&1
|
|
echo -e "${GREEN}✔${NC} Permissions for 'loginuser' set..."
|
|
|
|
echo -e "${RED}→${NC} Disabling root login..."
|
|
sudo tee /etc/ssh/sshd_config >/dev/null << 'EOF'
|
|
PermitRootLogin no
|
|
EOF
|
|
sudo passwd -l root >/dev/null 2>&1
|
|
echo -e "${GREEN}✔${NC} Root login disabled..."
|
|
|
|
echo -e "${RED}→${NC} Copying required files..."
|
|
sudo rm ./rps-client/.gitignore ./rps-client/LICENSE ./rps-client/README.md >/dev/null 2>&1
|
|
sudo rsync -a --numeric-ids --info=progress2 --no-owner --no-group ./rps-client/* / >/dev/null 2>&1
|
|
echo -e "${GREEN}✔${NC} Required files copied..."
|
|
|
|
echo -e "${RED}→${NC} Setting file permissions..."
|
|
sudo chown loginuser:loginuser -R /home/loginuser >/dev/null 2>&1
|
|
sudo chmod +x /root/remove_unused_kernel.sh >/dev/null 2>&1
|
|
sudo chmod +x /usr/bin/watchdog >/dev/null 2>&1
|
|
sudo chmod +x /usr/bin/chromium-monitor >/dev/null 2>&1
|
|
echo -e "${GREEN}✔${NC} File permissions set..."
|
|
|
|
echo -e "${RED}→${NC} Enabling services..."
|
|
sudo systemctl daemon-reload >/dev/null 2>&1
|
|
sudo systemctl enable watchdog >/dev/null 2>&1
|
|
sudo systemctl enable chromium-monitor >/dev/null 2>&1
|
|
sudo systemctl enable vncserver-x11-serviced.service >/dev/null 2>&1
|
|
sudo systemctl restart getty@tty1 >/dev/null 2>&1
|
|
echo -e "${GREEN}✔${NC} Services enabled..."
|
|
|
|
echo -e "${RED}→${NC} Cleaning up old kernels..."
|
|
sudo bash /root/remove_unused_kernel.sh -u -e >/dev/null 2>&1
|
|
echo -e "${GREEN}✔${NC} Old kernels cleaned up..."
|
|
|
|
echo -e "${RED}→${NC} Cleaning up installer..."
|
|
sudo rm -rf ./rps-client >/dev/null 2>&1
|
|
echo -e "${GREEN}✔${NC} Installer cleaned up..."
|
|
|
|
echo -e "${GREEN}✔${NC} Installation complete. Press any key to reboot..."
|
|
read -n 1 -s
|
|
sudo reboot
|
|
|
|
# Version 1.0:
|
|
# Created 2024 by Tim Eertmoed, Christian Hampp @ WiS IT-Solutions GmbH, Germany to work on Raspian as custom pxe init script. |