WIP
							parent
							
								
									c0b46ea867
								
							
						
					
					
						commit
						a326c20ca2
					
				| @ -0,0 +1,2 @@ | ||||
| # <target>      <source device>         <key file>      <options> | ||||
| md0-unlocked /dev/md0 none luks,discard | ||||
| @ -0,0 +1,7 @@ | ||||
| # | ||||
| # /etc/fstab: static file system information | ||||
| # | ||||
| # <file system> <dir>   <type>  <options>       <dump>  <pass> | ||||
| 
 | ||||
| /dev/mapper/md0-unlocked / btrfs relatime,ssd 0 0 | ||||
| /dev/md1 /boot btrfs relatime,ssd 0 0 | ||||
| @ -1,30 +0,0 @@ | ||||
| #!/bin/bash | ||||
| set -e | ||||
| 
 | ||||
| 
 | ||||
| apt-get -y install mdadm btrfs-tools | ||||
| 
 | ||||
| "./parted/${1}.sh" # "returns" /dev/md0 as root device | ||||
| 
 | ||||
| echo -n 'Enter luks password: ' | ||||
| read -s md0pwd | ||||
| echo -n $md0pwd | cryptsetup -q luksFormat /dev/md0 | ||||
| unset md0pwd | ||||
| 
 | ||||
| cryptsetup open --type luks /dev/md0 md0-unlocked | ||||
| 
 | ||||
| mkfs.btrfs /dev/mapper/md0-unlocked | ||||
| 
 | ||||
| mkdir /mnt/md0-unlocked | ||||
| mount /dev/mapper/md0-unlocked /mnt/md0-unlocked | ||||
| 
 | ||||
| debootstrap --variant=minbase --arch=amd64 stretch /mnt/md0-unlocked https://deb.debian.org/debian/ | ||||
| 
 | ||||
| mount -t proc none /mnt/md0-unlocked/proc | ||||
| mount -t sysfs none /mnt/md0-unlocked/sys | ||||
| mount -o bind /dev /mnt/md0-unlocked/dev | ||||
| 
 | ||||
| cp docker.key /mnt/md0-unlocked/docker.key | ||||
| cp -a post-debootstrap-installer.sh /mnt/md0-unlocked/post-debootstrap-installer.sh | ||||
| 
 | ||||
| chroot /mnt/md0-unlocked /post-debootstrap-installer.sh | ||||
| @ -0,0 +1,52 @@ | ||||
| #!/bin/bash | ||||
| set -e | ||||
| 
 | ||||
| 
 | ||||
| apt-get -y install mdadm btrfs-tools | ||||
| 
 | ||||
| # returns /dev/md0 as root device | ||||
| # returns /dev/md1 as boot device | ||||
| "./parted/${1}.sh" | ||||
| 
 | ||||
| # encrypt and unlock root device | ||||
| echo 'Enter luks password: ' | ||||
| read -s md0pwd | ||||
| echo -n $md0pwd | cryptsetup -q luksFormat /dev/md0 | ||||
| echo -n $md0pwd | cryptsetup open --type luks /dev/md0 md0-unlocked | ||||
| unset md0pwd | ||||
| 
 | ||||
| 
 | ||||
| # format | ||||
| 
 | ||||
| chroot=/mnt/md0-unlocked | ||||
| 
 | ||||
| # root device | ||||
| mkfs.btrfs /dev/mapper/md0-unlocked | ||||
| mkdir /mnt/md0-unlocked | ||||
| mount /dev/mapper/md0-unlocked /mnt/md0-unlocked | ||||
| 
 | ||||
| # boot device | ||||
| mkfs.btrfs /dev/md1 | ||||
| mkdir "$chroot/boot" | ||||
| mount /dev/md1 "$chroot/boot" | ||||
| 
 | ||||
| 
 | ||||
| # debootstrap | ||||
| 
 | ||||
| debootstrap --variant=minbase --arch=amd64 stretch "$chroot" https://deb.debian.org/debian/ | ||||
| 
 | ||||
| mount -t proc none "$chroot/proc" | ||||
| mount -t sysfs none "$chroot/sys" | ||||
| mount -o bind /dev "$chroot/dev" | ||||
| 
 | ||||
| cp -a "$chroot/docker.key" \ | ||||
|       "$chroot/post-debootstrap-installer.sh" \ | ||||
|       /mnt/md0/unlocked/ | ||||
| 
 | ||||
| # set hostname | ||||
| echo "$2" > "$chroot/etc/hostname" | ||||
| 
 | ||||
| chroot "$chroot" /post-debootstrap-installer.sh | ||||
| 
 | ||||
| rm "$chroot/docker.key" \ | ||||
|    "$chroot/post-debootstrap-installer.sh" | ||||
					Loading…
					
					
				
		Reference in New Issue
	
	 root
						root