setup.sh.in

#!/usr/bin/env bash
# This script is meant to be ran inside the new Void Linux installation.
#set -x # Debug

# Constants
############
COLOR_GREEN="@COLOR_GREEN@"
COLOR_BLUE="@COLOR_BLUE@"
COLOR_RED="@COLOR_RED@"
COLOR_RESET="@COLOR_RESET@"
DEF_MIRROR="@DEF_MIRROR@"
MIRROR="@MIRROR@"
RM_PKGS="@RM_PKGS@"
RM_FILES="@RM_FILES@"
EXTRA_VOID_REPOS=(@EXTRA_VOID_REPOS@)
BASE_PKGS="@BASE_PKGS@"
EXTRA_PKGS="@EXTRA_PKGS@"
ENABLE_SV="@ENABLE_SV@"
DISABLE_SV="@DISABLE_SV@"
HOSTNAME="@HOSTNAME@"
USERNAMES="@USERNAMES@"
USERS_PW_DEFAULT='@USERS_PW_DEFAULT@'
USERS_PW_ENCRYPTION="@USERS_PW_ENCRYPTION@"
USERS_GROUPS_COMMON="@USERS_GROUPS_COMMON@"
USERS_SHELL_DEFAULT="@USERS_SHELL_DEFAULT@"
USERS_SUDO_ASKPASS=@USERS_SUDO_ASKPASS@
PERMIT_ROOT_LOGIN=@PERMIT_ROOT_LOGIN@

# Runtime vars
###############
arch="$(xbps-uhelper arch)" # e.g. "aarch64-musl"

# Functions
############
error() { echo -e "${COLOR_RED}ERROR: $1${COLOR_RESET}" 1>&2; exit 1; }
log() { echo -e "${COLOR_GREEN}(rootfs) ${COLOR_BLUE}>>${COLOR_RESET} $1"; }
enable_sv() { local svd; for sv in $@; do svd=/etc/sv/$sv; [ -d $svd ] && ln -s $svd /etc/runit/runsvdir/default/ || error "Service '$sv' doesn't exist!"; done; }
disable_sv() { local svd; for sv in $@; do svd=/etc/sv/$sv; [ -d $svd ] && touch $svd/down || error "Service '$sv' doesn't exist!"; done; }
runas() {
	if [ -t 0 ]; then
		sudo -u $1 -i bash -c "$2"
	else
		# read possibly multi-line commands from stdin
		sudo -u $1 -i bash
	fi
}
cmd_exists() { command -v $1 >/dev/null; }
mirror_setup() {
	[ "$MIRROR" = "$DEF_MIRROR" ] && return
	log "Switching default package mirror to '$MIRROR'..."
	cp /usr/share/xbps.d/*-repository-*.conf /etc/xbps.d/
	# FIXME: Chimera Linux fails right here under QEMU arches due to a segfault of e.g. qemu-aarch64!
	sed -i "s|$DEF_MIRROR|$MIRROR|g" /etc/xbps.d/*-repository-*.conf
}
base_setup() {
	if [[ "$arch" != *"-musl" ]]; then
		log "Generating default locales for glibc..."
		xbps-reconfigure -f glibc-locales
	fi

	log "Upgrading xbps..."
	xbps-install -Su xbps -y

	if [ "$RM_PKGS" ]; then
		log "Removing some unneeded packages..."
		xbps-remove -y $RM_PKGS || error "Failed to remove packages '$RM_PKGS'!"
	fi
	if [ "$RM_FILES" ]; then
		log "Removing some unneeded files..."
		local rm_patterns=() rm_excludes=() pattern
		# FIXME: doesn't support spaces!
		for pattern in $RM_FILES; do
			if [[ "$pattern" != "!"* ]]; then
				rm_patterns+=("$pattern")
			else
				rm_excludes+=(-not -path "${pattern:1}")
			fi
		done
		find "${rm_patterns[@]}" -maxdepth 0 "${rm_excludes[@]}" -exec rm -rf {} + 2>/dev/null
	fi

	log "Upgrading all base packages..."
	xbps-install -Su -y

	log "Finishing base system setup..."
	xbps-install base-system -y
	xbps-remove -y base-voidstrap
}
stage1_setup() {
	mirror_setup
	base_setup
}
pkgs_setup() {
	[ "$BASE_PKGS$EXTRA_PKGS" ] || return

	if [ ${#EXTRA_VOID_REPOS[@]} -gt 0 ]; then
		log "Enabling ${#EXTRA_VOID_REPOS[@]} extra Void repositories (${EXTRA_VOID_REPOS[*]})..."
		xbps-install -Sy ${EXTRA_VOID_REPOS[*]/#/void-repo-} || error "Failed to enable ${#EXTRA_VOID_REPOS[@]} extra Void repositories (${EXTRA_VOID_REPOS[*]})!"
	fi

	log "Installing additional configured packages..."
	xbps-install -Sy $BASE_PKGS $EXTRA_PKGS || error "Failed to install packages '$BASE_PKGS $EXTRA_PKGS'!"

	if [ "$EXTRA_PKGS" ]; then
		log "Repository-locking all built extra packages..."
		xbps-pkgdb -m repolock $EXTRA_PKGS || error "Failed to repolock packages '$EXTRA_PKGS'!"
	fi
}
sv_setup() {
	if [ "$ENABLE_SV" ]; then
		log "Enabling runit services $ENABLE_SV..."
		enable_sv $ENABLE_SV
	fi

	if [ "$DISABLE_SV" ]; then
		log "Disabling runit services $DISABLE_SV..."
		disable_sv $DISABLE_SV
	fi
}
user_setup() {
	log "Performing user setup..."
	local pw_conf=""
	while IFS="" read line; do
		local fields=() user="" pw="$USERS_PW_DEFAULT" id="" groups="$USERS_GROUPS_COMMON" \
			shell="$USERS_SHELL_DEFAULT" fullname=""
		IFS=':' read -ra fields <<< "$line"
		user="${fields[0]}"
		[ "${fields[1]}" ] && pw="${fields[1]}"
		[ "${fields[2]}" ] && id="${fields[2]}"
		[ "$pw" ] && pw_conf+="$user:$pw\n"

		[ "${fields[4]}" ] && shell="${fields[4]}"
		[ "${fields[5]}" ] && fullname="${fields[5]}"
		if [ "$user" = "root" ]; then
			[ -z "$pw" ] && passwd -d root
			if [[ "$shell" && "$shell" != "/bin/sh" ]]; then
				chsh -s $shell || error "Failed to change shell of root user to '$shell'!"
			fi
			if [ "$fullname" ]; then
				chfn -f "$fullname" root || error "Failed to change full name of root user to '$fullname'!"
			fi
			continue
		fi
		if [ "${fields[3]}" ]; then
			[ "$groups" ] && groups+=",${fields[3]}" || groups="${fields[3]}"
		fi

		local args=()
		[ "$id" ] && args+=(-u $id)
		[ "$groups" ] && args+=(-G $groups)
		[ "$shell" ] && args+=(-s $shell)
		[ "$fullname" ] && args+=(-c "$fullname")
		useradd -m "${args[@]}" $user || error "Couldn't create new user $user!"
	done <<< "$(</users.conf)"
	shred -uz /users.conf

	[ "$pw_conf" ] || return
	local args=()
	[ "$USERS_PW_ENCRYPTION" ] && args+=(-c $USERS_PW_ENCRYPTION) || args+=(-e)
	printf "${pw_conf::-2}" | chpasswd ${args[@]}

	local nopasswd=""
	$USERS_SUDO_ASKPASS || nopasswd=" NOPASSWD:"
	echo "%wheel ALL=(ALL)${nopasswd} ALL" > /etc/sudoers.d/wheel
	chmod 400 /etc/sudoers.d/wheel
}
root_ssh_setup() {
	$PERMIT_ROOT_LOGIN || return

	log "Allowing login as root via SSH..."
	sed 's/^#PermitRootLogin.*/PermitRootLogin yes/' -i /etc/ssh/sshd_config
}
hostname_setup() {
	[ "$HOSTNAME" ] || return

	log "Setting system hostname to $HOSTNAME..."
	echo "$HOSTNAME" > /etc/hostname
}
fix_root_perms() {
	log "Setting /root permissions to 700 (from $(stat -c '%a' /root))..."
	chmod 700 /root
}
run_custom_script() {
	local custom_script="/mkrootfs.custom.sh"
	[ -f "$custom_script" ] || return

	log "Running $custom_script..."
	. "$custom_script"
	rm "$custom_script"
}
do_cleanup() {
	log "Removing installed orphan packages..."
	xbps-remove -o -y

	if [ ! -d /pkgcache ]; then
		local cache_size="$(du -sh /var/cache/xbps | awk '{print $1}')"
		log "Cleaning $cache_size of cached packages..."
		rm /var/cache/xbps/*
	fi
}
finalize_setup() {
	if cmd_exists updatedb; then
		log "Updating mlocate database..."
		sudo updatedb
	fi

	if cmd_exists fake-hwclock; then
		log "Saving current time for fake-hwclock to restore on initial boot..."
		fake-hwclock save "\$(date +'%Y-%m-%d %H:%M:%S')"
	fi
}
stage2_setup() {
	pkgs_setup
	sv_setup
	user_setup
	root_ssh_setup
	hostname_setup
	fix_root_perms
	run_custom_script
	do_cleanup
	finalize_setup
}

# Script
#########
stage="$1"
[ "$stage" ] && ${stage}_setup