From 920fed7d3d1cf0ee30657c1e1fee1764d5612b21 Mon Sep 17 00:00:00 2001 From: JieXu Date: Sun, 16 Nov 2025 03:23:02 +0800 Subject: [PATCH] Update reinstall.sh --- reinstall.sh | 5349 ++++++++++++++++++++++++++++++++++++++++++-------- 1 file changed, 4525 insertions(+), 824 deletions(-) diff --git a/reinstall.sh b/reinstall.sh index 375a6dc..3edb7e1 100644 --- a/reinstall.sh +++ b/reinstall.sh @@ -1,942 +1,4643 @@ #!/usr/bin/env bash -# reinstall-freebsd-linux.sh -# Reinstall system on Linux / FreeBSD using DD + cloud-init (NoCloud) with: -# - freebsd -# - rocky -# - almalinux -# - fedora -# - redhat -# -# All target systems use cloud-init to inject: -# - root password (--password) -# - SSH public key(s) (--ssh-key, multiple) -# - SSH port (--ssh-port) -# - optional FRPC config (--frpc-toml) stored as EFI:/nocloud/frpc.toml -# -# Requirements: -# - Run with bash: bash reinstall-freebsd-linux.sh ... -# - Needs dd, xz, qemu-img, mount, and curl or wget or fetch -# - On Linux (RHEL/Rocky/Alma/Fedora) this script will try to install missing deps automatically. +# nixos 默认的配置不会生成 /bin/bash +# shellcheck disable=SC2086 set -eE +confhome=https://raw.githubusercontent.com/bin456789/reinstall/main +confhome_cn=https://cnb.cool/bin456789/reinstall/-/git/raw/main +# confhome_cn=https://www.ghproxy.cc/https://raw.githubusercontent.com/bin456789/reinstall/main -SCRIPT_NAME="${0##*/}" +# 用于判断 reinstall.sh 和 trans.sh 是否兼容 +SCRIPT_VERSION=4BACD833-A585-23BA-6CBB-9AA4E08E0004 -error() { - echo "ERROR: $*" >&2 +# 记录要用到的 windows 程序，运行时输出删除 \r +WINDOWS_EXES='cmd powershell wmic reg diskpart netsh bcdedit mountvol' + +# 强制 linux 程序输出英文，防止 grep 不到想要的内容 +# https://www.gnu.org/software/gettext/manual/html_node/The-LANGUAGE-variable.html +export LC_ALL=C + +# 处理部分用户用 su 切换成 root 导致环境变量没 sbin 目录 +# 也能处理 cygwin bash 没有添加 -l 运行 reinstall.sh +# 不要漏了最后的 $PATH，否则会找不到 windows 系统程序例如 diskpart +export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH + +# 记录日志，过滤含有 password 的行 +exec > >(tee >(grep -iv password >>/reinstall.log)) 2>&1 +THIS_SCRIPT=$(readlink -f "$0") +trap 'trap_err $LINENO $?' ERR + +trap_err() { + line_no=$1 + ret_no=$2 + + error "Line $line_no return $ret_no" + sed -n "$line_no"p "$THIS_SCRIPT" +} + +if ! { [ -n "$BASH" ] && [ -n "$BASH_VERSION" ]; }; then + echo "Please run this script with bash." >&2 exit 1 -} +fi -warn() { - echo "WARN: $*" >&2 -} - -info() { - echo "==> $*" -} - -usage() { +usage_and_exit() { + if is_in_windows; then + reinstall_____='.\reinstall.bat' + else + reinstall_____=' ./reinstall.sh' + fi cat <&2 +} + +warn() { + local msg + if [ "$1" = false ]; then + shift + msg=$* + else + msg="Warning: $*" + fi + echo_color_text '\e[33m' "$msg" >&2 +} + +error() { + echo_color_text '\e[31m' "***** ERROR *****" >&2 + echo_color_text '\e[31m' "$*" >&2 +} + +echo_color_text() { + color="$1" + shift + plain="\e[0m" + echo -e "$color$*$plain" +} + +error_and_exit() { + error "$@" + exit 1 +} + +show_dd_password_tips() { + warn false " +This password is only used for SSH access to view logs during the installation. +Password of the image will NOT modify. + +密码仅用于安装过程中通过 SSH 查看日志。 +镜像的密码不会被修改。 +" +} + +show_url_in_args() { + while [ $# -gt 0 ]; do + case "$1" in + [Hh][Tt][Tt][Pp][Ss]://* | [Hh][Tt][Tt][Pp]://* | [Mm][Aa][Gg][Nn][Ee][Tt]:*) echo "$1" ;; + esac + shift + done +} + +curl() { + is_have_cmd curl || install_pkg curl + + # 显示 url + show_url_in_args "$@" >&2 + + # 添加 -f, --fail，不然 404 退出码也为0 + # 32位 cygwin 已停止更新，证书可能有问题，先添加 --insecure + # centos 7 curl 不支持 --retry-connrefused --retry-all-errors + # 因此手动 retry + for i in $(seq 5); do + if command curl --insecure --connect-timeout 10 -f "$@"; then + return + else + ret=$? + # 403 404 错误，或者达到重试次数 + if [ $ret -eq 22 ] || [ $i -eq 5 ]; then + return $ret + fi + sleep 1 + fi + done +} + +mask2cidr() { + local x=${1##*255.} + set -- 0^^^128^192^224^240^248^252^254^ $(((${#1} - ${#x}) * 2)) ${x%%.*} + x=${1%%"$3"*} + echo $(($2 + (${#x} / 4))) +} + +is_in_china() { + [ "$force_cn" = 1 ] && return 0 + + if [ -z "$_loc" ]; then + # www.cloudflare.com/dash.cloudflare.com 国内访问的是美国服务器，而且部分地区被墙 + # 没有ipv6 www.visa.cn + # 没有ipv6 www.bose.cn + # 没有ipv6 www.garmin.com.cn + # 备用 www.prologis.cn + # 备用 www.autodesk.com.cn + # 备用 www.keysight.com.cn + if ! _loc=$(curl -L http://www.qualcomm.cn/cdn-cgi/trace | grep '^loc=' | cut -d= -f2 | grep .); then + error_and_exit "Can not get location." + fi + echo "Location: $_loc" >&2 + fi + [ "$_loc" = CN ] +} + +is_in_windows() { + [ "$(uname -o)" = Cygwin ] || [ "$(uname -o)" = Msys ] +} + +is_in_alpine() { + [ -f /etc/alpine-release ] +} + +is_use_cloud_image() { + [ -n "$cloud_image" ] && [ "$cloud_image" = 1 ] +} + +is_force_use_installer() { + [ -n "$installer" ] && [ "$installer" = 1 ] +} + +is_use_dd() { + [ "$distro" = dd ] +} + +is_boot_in_separate_partition() { + mount | grep -q ' on /boot type ' +} + +is_os_in_btrfs() { + mount | grep -q ' on / type btrfs ' +} + +is_os_in_subvol() { + subvol=$(awk '($2=="/") { print $i }' /proc/mounts | grep -o 'subvol=[^ ]*' | cut -d= -f2) + [ "$subvol" != / ] +} + +get_os_part() { + awk '($2=="/") { print $1 }' /proc/mounts +} + +umount_all() { + # windows defender 打开时，cygwin 运行 mount 很慢，但 cat /proc/mounts 很快 + if mount_lists=$(mount | grep -w "on $1" | awk '{print $3}' | grep .); then + # alpine 没有 -R + if umount --help 2>&1 | grep -wq -- '-R'; then + umount -R "$1" + else + echo "$mount_lists" | tac | xargs -n1 umount + fi + fi +} + +cp_to_btrfs_root() { + mount_dir=$tmp/reinstall-btrfs-root + if ! grep -q $mount_dir /proc/mounts; then + mkdir -p $mount_dir + mount "$(get_os_part)" $mount_dir -t btrfs -o subvol=/ + fi + cp -rf "$@" "$mount_dir" +} + +is_host_has_ipv4_and_ipv6() { + host=$1 + + install_pkg dig + # dig会显示cname结果，cname结果以.结尾，grep -v '\.$' 用于去除 cname 结果 + res=$(dig +short $host A $host AAAA | grep -v '\.$') + # 有.表示有ipv4地址，有:表示有ipv6地址 + grep -q \. <<<$res && grep -q : <<<$res +} + +is_netboot_xyz() { + [ "$distro" = netboot.xyz ] +} + +is_alpine_live() { + [ "$distro" = alpine ] && [ "$hold" = 1 ] +} + +is_have_initrd() { + ! is_netboot_xyz +} + +is_use_firmware() { + # shellcheck disable=SC2154 + [ "$nextos_distro" = debian ] && ! is_virt +} + +is_digit() { + [[ "$1" =~ ^[0-9]+$ ]] } is_port_valid() { - [[ "$1" =~ ^[0-9]+$ ]] && [ "$1" -ge 1 ] && [ "$1" -le 65535 ] + is_digit "$1" && [ "$1" -ge 1 ] && [ "$1" -le 65535 ] } -http_download() { - local url="$1" dst="$2" - if command -v curl >/dev/null 2>&1; then - curl -L --fail -o "$dst" "$url" - elif command -v wget >/dev/null 2>&1; then - wget -O "$dst" "$url" - elif command -v fetch >/dev/null 2>&1; then - fetch -o "$dst" "$url" - else - error "No curl/wget/fetch found, cannot download: $url" +get_host_by_url() { + cut -d/ -f3 <<<$1 +} + +get_function() { + declare -f "$1" +} + +get_function_content() { + declare -f "$1" | sed '1d;2d;$d' +} + +insert_into_file() { + local file=$1 + local location=$2 + local regex_to_find=$3 + shift 3 + + if ! [ -f "$file" ]; then + error_and_exit "File not found: $file" fi -} -detect_os_arch() { - OS=$(uname -s) - ARCH=$(uname -m) + # 默认 grep -E + if [ $# -eq 0 ]; then + set -- -E + fi - case "$OS" in - Linux|FreeBSD) ;; - *) error "Unsupported OS: $OS (only Linux and FreeBSD are supported)" ;; + line_num=$(grep "$@" -n "$regex_to_find" "$file" | cut -d: -f1) + + found_count=$(echo "$line_num" | wc -l) + if [ ! "$found_count" -eq 1 ]; then + return 1 + fi + + case "$location" in + before) line_num=$((line_num - 1)) ;; + after) ;; + *) return 1 ;; esac - case "$ARCH" in - x86_64|amd64) MACHINE_ARCH="x86_64" ;; - aarch64|arm64) MACHINE_ARCH="aarch64" ;; - *) - warn "Unknown arch: $ARCH, image URL selection may fail" - MACHINE_ARCH="$ARCH" - ;; - esac + sed -i "${line_num}r /dev/stdin" "$file" } -ensure_dependencies_linux_rhel_like() { - # Only called on Linux with /etc/redhat-release present. - if [ "$(id -u)" -ne 0 ]; then - warn "Running as non-root; cannot auto-install dependencies. Please run as root if you want auto-install." - return - fi - - local pm= - if command -v dnf >/dev/null 2>&1; then - pm="dnf" - elif command -v yum >/dev/null 2>&1; then - pm="yum" - fi - - if [ -z "$pm" ]; then - warn "Could not find dnf/yum on a Red Hat like system; please install dependencies manually." - return - fi - - local need_pkgs=() - - if ! command -v qemu-img >/dev/null 2>&1; then - need_pkgs+=("qemu-img") - fi - if ! command -v xz >/dev/null 2>&1; then - need_pkgs+=("xz") - fi - if ! command -v curl >/dev/null 2>&1 && ! command -v wget >/dev/null 2>&1 && ! command -v fetch >/dev/null 2>&1; then - need_pkgs+=("curl") - fi - # pv is optional but nice to have for decompression progress - if ! command -v pv >/dev/null 2>&1; then - need_pkgs+=("pv") - fi - - if [ "${#need_pkgs[@]}" -gt 0 ]; then - info "Installing missing dependencies with $pm: ${need_pkgs[*]}" - "$pm" -y install "${need_pkgs[@]}" - fi +test_url() { + test_url_real false "$@" } -ensure_dependencies_linux_generic() { - # For non-Red-Hat Linux, just check and error with a clear message for hard deps. - local missing=() - - if ! command -v qemu-img >/dev/null 2>&1; then - missing+=("qemu-img") - fi - if ! command -v xz >/dev/null 2>&1; then - missing+=("xz") - fi - if ! command -v curl >/dev/null 2>&1 && ! command -v wget >/dev/null 2>&1 && ! command -v fetch >/dev/null 2>&1; then - missing+=("curl/wget/fetch") - fi - - if [ "${#missing[@]}" -gt 0 ]; then - error "Missing dependencies on Linux: ${missing[*]} -Please install them manually with your package manager (e.g. apt, zypper, pacman) and rerun this script." - fi - - if ! command -v pv >/dev/null 2>&1; then - warn "Optional tool 'pv' not found. xz decompression will work but without a progress bar. -You can install 'pv' with your package manager if you want throughput/time progress." - fi +test_url_grace() { + test_url_real true "$@" } -ensure_dependencies_freebsd() { - # For now just check and give a hint. - local missing=() +test_url_real() { + grace=$1 + url=$2 + expect_types=$3 + var_to_eval=$4 + info test url - if ! command -v qemu-img >/dev/null 2>&1; then - missing+=("qemu-img (qemu-tools)") - fi - if ! command -v xz >/dev/null 2>&1; then - missing+=("xz") - fi - if ! command -v curl >/dev/null 2>&1 && ! command -v wget >/dev/null 2>&1 && ! command -v fetch >/dev/null 2>&1; then - missing+=("curl/wget/fetch") - fi + failed() { + $grace && return 1 + error_and_exit "$@" + } - if [ "${#missing[@]}" -gt 0 ]; then - error "Missing dependencies on FreeBSD: ${missing[*]} -Hint: you can install them with: - pkg install qemu-tools xz curl" - fi + tmp_file=$tmp/img-test - if ! command -v pv >/dev/null 2>&1; then - warn "Optional tool 'pv' not found. xz decompression will work but without a progress bar. -On FreeBSD you can install it with: - pkg install pv" - fi -} - -ensure_dependencies() { - if [ "$OS" = "Linux" ]; then - if [ -f /etc/redhat-release ]; then - ensure_dependencies_linux_rhel_like + # TODO: 好像无法识别 nixos 官方源的跳转 + # 有的服务器不支持 range，curl会下载整个文件 + # 所以用 head 限制 1M + # 过滤 curl 23 错误（head 限制了大小） + # 也可用 ulimit -f 但好像 cygwin 不支持 + # ${PIPESTATUS[n]} 表示第n个管道的返回值 + echo $url + for i in $(seq 5 -1 0); do + if command curl --insecure --connect-timeout 10 -Lfr 0-1048575 "$url" \ + 1> >(exec head -c 1048576 >$tmp_file) \ + 2> >(exec grep -v 'curl: (23)' >&2); then + break else - ensure_dependencies_linux_generic + ret=$? + msg="$url not accessible" + case $ret in + 22) + # 403 404 + # 这里的 failed 虽然返回 1，但是不会中断脚本，因此要手动 return + failed "$msg" + return "$ret" + ;; + 23) + # 限制了空间 + break + ;; + *) + # 其他错误 + if [ $i -eq 0 ]; then + failed "$msg" + return "$ret" + fi + ;; + esac + sleep 1 fi - elif [ "$OS" = "FreeBSD" ]; then - ensure_dependencies_freebsd + done + + # 如果要检查文件类型 + if [ -n "$expect_types" ]; then + install_pkg file + real_type=$(file_enhanced $tmp_file) + echo "File type: $real_type" + + # debian 9 ubuntu 16.04-20.04 可能会将 iso 识别成 raw + for type in $expect_types $([ "$expect_types" = iso ] && echo raw); do + if [[ ."$real_type" = *."$type" ]]; then + # 如果要设置变量 + if [ -n "$var_to_eval" ]; then + IFS=. read -r "${var_to_eval?}" "${var_to_eval}_warp" <<<"$real_type" + fi + return + fi + done + + failed "$url +Expected type: $expect_types +Actually type: $real_type" fi } -auto_detect_disk() { - # Only called when DISK is empty. - info "Auto-detecting target disk..." +fix_file_type() { + # gzip的mime有很多种写法 + # centos7中显示为 x-gzip，在其他系统中显示为 gzip，可能还有其他 + # 所以不用mime判断 + # https://www.digipres.org/formats/sources/tika/formats/#application/gzip - if [[ "$OS" == "Linux" ]]; then - if command -v lsblk >/dev/null 2>&1; then - local best_name="" best_size=0 - # NAME TYPE RM SIZE(bytes) - while read -r name type rm size; do - [ "$type" = "disk" ] || continue - [ "$rm" = "0" ] || continue - if [ "$size" -gt "$best_size" ]; then - best_size="$size" - best_name="$name" + # centos 7 上的 file 显示 qcow2 的 mime 为 application/octet-stream + # file debian-12-genericcloud-amd64.qcow2 + # debian-12-genericcloud-amd64.qcow2: QEMU QCOW Image (v3), 2147483648 bytes + # file --mime debian-12-genericcloud-amd64.qcow2 + # debian-12-genericcloud-amd64.qcow2: application/octet-stream; charset=binary + + # --extension 不靠谱 + # file -b /reinstall-tmp/img-test --mime-type + # application/x-qemu-disk + # file -b /reinstall-tmp/img-test --extension + # ??? + + # 1. 删除,;# + # DOS/MBR boot sector; partition 1: ... + # gzip compressed data, was ... + # # ISO 9660 CD-ROM filesystem data... (有些 file 版本开头输出有井号) + + # 2. 删除开头的空格 + + # 3. 删除无意义的单词 POSIX, Unicode, UTF-8, ASCII + # POSIX tar archive (GNU) + # Unicode text, UTF-8 text + # UTF-8 Unicode text, with very long lines + # ASCII text + + # 4. 下面两种都是 raw + # DOS/MBR boot sector + # x86 boot sector; partition 1: ... + sed -E \ + -e 's/[,;#]//g' \ + -e 's/^[[:space:]]*//' \ + -e 's/(POSIX|Unicode|UTF-8|ASCII)//gi' \ + -e 's/DOS\/MBR boot sector/raw/i' \ + -e 's/x86 boot sector/raw/i' \ + -e 's/Zstandard/zstd/i' \ + -e 's/Windows imaging \(WIM\) image/wim/i' | + awk '{print $1}' | to_lower +} + +# 不用 file -z，因为 +# 1. file -z 只能看透一层 +# 2. alpine file -z 无法看透部分镜像（前1M），例如： +# guajibao-win10-ent-ltsc-2021-x64-cn-efi.vhd.gz +# guajibao-win7-sp1-ent-x64-cn-efi.vhd.gz +# win7-ent-sp1-x64-cn-efi.vhd.gz +# 还要注意 centos 7 没有 -Z 只有 -z +file_enhanced() { + file=$1 + + full_type= + while true; do + type="$(file -b $file | fix_file_type)" + full_type="$type.$full_type" + case "$type" in + xz | gzip | zstd) + install_pkg "$type" + $type -dc <"$file" | head -c 1048576 >"$file.inside" + mv -f "$file.inside" "$file" + ;; + tar) + install_pkg "$type" + # 隐藏 gzip: unexpected end of file 提醒 + tar xf "$file" -O 2>/dev/null | head -c 1048576 >"$file.inside" + mv -f "$file.inside" "$file" + ;; + *) + break + ;; + esac + done + # shellcheck disable=SC2001 + echo "$full_type" | sed 's/\.$//' +} + +add_community_repo_for_alpine() { + local alpine_ver + + # 先检查原来的repo是不是egde + if grep -q '^http.*/edge/main$' /etc/apk/repositories; then + alpine_ver=edge + else + alpine_ver=v$(cut -d. -f1,2 >/etc/apk/repositories + fi +} + +assert_not_in_container() { + _error_and_exit() { + error_and_exit "Not Supported OS in Container.\nPlease use https://github.com/LloydAsp/OsMutation" + } + + is_in_windows && return + + if is_have_cmd systemd-detect-virt; then + if systemd-detect-virt -qc; then + _error_and_exit + fi + else + if [ -d /proc/vz ] || grep -q container=lxc /proc/1/environ; then + _error_and_exit + fi + fi +} + +# 使用 | del_br ，但返回 del_br 之前返回值 +run_with_del_cr() { + if false; then + # ash 不支持 PIPESTATUS[n] + res=$("$@") && ret=0 || ret=$? + echo "$res" | del_cr + return $ret + else + "$@" | del_cr + return ${PIPESTATUS[0]} + fi +} + +run_with_del_cr_template() { + if get_function _$exe >/dev/null; then + run_with_del_cr _$exe "$@" + else + run_with_del_cr command $exe "$@" + fi +} + +wmic() { + if is_have_cmd wmic; then + # 如果参数没有 GET，添加 GET，防止以下报错 + # wmic memorychip /format:list + # 此级别的开关异常。 + has_get=false + for i in "$@"; do + # 如果参数有 GET + if [ "$(to_upper <<<"$i")" = GET ]; then + has_get=true + break + fi + done + + # 输出为 /format:list 格式 + if $has_get; then + command wmic "$@" /format:list + else + command wmic "$@" get /format:list + fi + return + fi + + # powershell wmi 默认参数 + local namespace='root\cimv2' + local class= + local filter= + local props= + + # namespace + if [[ "$(to_upper <<<"$1")" = /NAMESPACE* ]]; then + # 删除引号，删除 \\ + namespace=$(cut -d: -f2 <<<"$1" | sed -e "s/[\"']//g" -e 's/\\\\//g') + shift + fi + + # class + if [[ "$(to_upper <<<"$1")" = PATH ]]; then + class=$2 + shift 2 + else + case "$(to_lower <<<"$1")" in + nicconfig) class=Win32_NetworkAdapterConfiguration ;; + memorychip) class=Win32_PhysicalMemory ;; + *) class=Win32_$1 ;; + esac + shift + fi + + # filter + if [[ "$(to_upper <<<"$1")" = WHERE ]]; then + filter=$2 + shift 2 + fi + + # props + if [[ "$(to_upper <<<"$1")" = GET ]]; then + props=$2 + shift 2 + fi + + if ! [ -f "$tmp/wmic.ps1" ]; then + curl -Lo "$tmp/wmic.ps1" "$confhome/wmic.ps1" + fi + + # shellcheck disable=SC2046 + powershell -NoLogo -NoProfile -NonInteractive -ExecutionPolicy Bypass \ + -File "$(cygpath -w "$tmp/wmic.ps1")" \ + -Namespace "$namespace" \ + -Class "$class" \ + $([ -n "$filter" ] && echo -Filter "$filter") \ + $([ -n "$props" ] && echo -Properties "$props") +} + +is_virt() { + if [ -z "$_is_virt" ]; then + if is_in_windows; then + # https://github.com/systemd/systemd/blob/main/src/basic/virt.c + # https://sources.debian.org/src/hw-detect/1.159/hw-detect.finish-install.d/08hw-detect/ + vmstr='VMware|Virtual|Virtualization|VirtualBox|VMW|Hyper-V|Bochs|QEMU|KVM|OpenStack|KubeVirt|innotek|Xen|Parallels|BHYVE' + for name in ComputerSystem BIOS BaseBoard; do + if wmic $name | grep -Eiw $vmstr; then + _is_virt=true + break fi - done < <(lsblk -b -ndo NAME,TYPE,RM,SIZE 2>/dev/null || true) + done - if [ -n "$best_name" ]; then - DISK="/dev/$best_name" - info "Auto-detected disk: $DISK (largest non-removable disk)" - return 0 + # 用运行 windows ，肯定够内存运行 alpine lts netboot + # 何况还能停止 modloop + + # 没有风扇和温度信息，大概是虚拟机 + # 阿里云 倚天710 arm 有温度传感器 + # ovh KS-LE-3 没有风扇和温度信息？ + if false && [ -z "$_is_virt" ] && + ! wmic /namespace:'\\root\cimv2' PATH Win32_Fan 2>/dev/null | grep -q ^Name && + ! wmic /namespace:'\\root\wmi' PATH MSAcpi_ThermalZoneTemperature 2>/dev/null | grep -q ^Name; then + _is_virt=true + fi + else + # aws t4g debian 11 + # systemd-detect-virt: 为 none，即使装了dmidecode + # virt-what: 未装 deidecode时结果为空，装了deidecode后结果为aws + # 所以综合两个命令的结果来判断 + if is_have_cmd systemd-detect-virt && systemd-detect-virt -v; then + _is_virt=true + fi + + if [ -z "$_is_virt" ]; then + # debian 安装 virt-what 不会自动安装 dmidecode，因此结果有误 + install_pkg dmidecode virt-what + # virt-what 返回值始终是0，所以用是否有输出作为判断 + if [ -n "$(virt-what)" ]; then + _is_virt=true + fi fi fi - error "Unable to auto-detect target disk on Linux. Please specify --disk explicitly." - else - # FreeBSD - if command -v sysctl >/dev/null 2>&1; then - local disks - disks=$(sysctl -n kern.disks 2>/dev/null || true) - for d in $disks; do - case "$d" in - cd*|md*|lo*|ram*) continue ;; + + if [ -z "$_is_virt" ]; then + _is_virt=false + fi + echo "VM: $_is_virt" + fi + $_is_virt +} + +is_absolute_path() { + # 检查路径是否以/开头 + # 注意语法和 ash 不同 + [[ "$1" = /* ]] +} + +is_cpu_supports_x86_64_v3() { + # 用 ld.so/cpuid/coreinfo.exe 更准确 + # centos 7 /usr/lib64/ld-linux-x86-64.so.2 没有 --help + # alpine gcompat /lib/ld-linux-x86-64.so.2 没有 --help + + # https://en.wikipedia.org/wiki/X86-64#Microarchitecture_levels + # https://learn.microsoft.com/sysinternals/downloads/coreinfo + + # abm = popcnt + lzcnt + # /proc/cpuinfo 不显示 lzcnt, 可用 abm 代替，但 cygwin 也不显示 abm + # /proc/cpuinfo 不显示 osxsave, 故用 xsave 代替 + + need_flags="avx avx2 bmi1 bmi2 f16c fma movbe xsave" + had_flags=$(grep -m 1 ^flags /proc/cpuinfo | awk -F': ' '{print $2}') + + for flag in $need_flags; do + if ! grep -qw $flag <<<"$had_flags"; then + return 1 + fi + done +} + +assert_cpu_supports_x86_64_v3() { + if ! is_cpu_supports_x86_64_v3; then + error_and_exit "Could not install $distro $releasever because the CPU does not support x86-64-v3." + fi +} + +# sr-latn-rs 到 sr-latn +en_us() { + echo "$lang" | awk -F- '{print $1"-"$2}' + + # zh-hk 可回落到 zh-tw + if [ "$lang" = zh-hk ]; then + echo zh-tw + fi +} + +# fr-ca 到 ca +us() { + # 葡萄牙准确对应 pp + if [ "$lang" = pt-pt ]; then + echo pp + return + fi + # 巴西准确对应 pt + if [ "$lang" = pt-br ]; then + echo pt + return + fi + + echo "$lang" | awk -F- '{print $2}' + + # hk 额外回落到 tw + if [ "$lang" = zh-hk ]; then + echo tw + fi +} + +# fr-ca 到 fr-fr +en_en() { + echo "$lang" | awk -F- '{print $1"-"$1}' + + # en-gb 额外回落到 en-us + if [ "$lang" = en-gb ]; then + echo en-us + fi +} + +# fr-ca 到 fr +en() { + # 巴西/葡萄牙回落到葡萄牙语 + if [ "$lang" = pt-br ] || [ "$lang" = pt-pt ]; then + echo "pp" + return + fi + + echo "$lang" | awk -F- '{print $1}' +} + +english() { + case "$lang" in + ar-sa) echo Arabic ;; + bg-bg) echo Bulgarian ;; + cs-cz) echo Czech ;; + da-dk) echo Danish ;; + de-de) echo German ;; + el-gr) echo Greek ;; + en-gb) echo Eng_Intl ;; + en-us) echo English ;; + es-es) echo Spanish ;; + es-mx) echo Spanish_Latam ;; + et-ee) echo Estonian ;; + fi-fi) echo Finnish ;; + fr-ca) echo FrenchCanadian ;; + fr-fr) echo French ;; + he-il) echo Hebrew ;; + hr-hr) echo Croatian ;; + hu-hu) echo Hungarian ;; + it-it) echo Italian ;; + ja-jp) echo Japanese ;; + ko-kr) echo Korean ;; + lt-lt) echo Lithuanian ;; + lv-lv) echo Latvian ;; + nb-no) echo Norwegian ;; + nl-nl) echo Dutch ;; + pl-pl) echo Polish ;; + pt-pt) echo Portuguese ;; + pt-br) echo Brazilian ;; + ro-ro) echo Romanian ;; + ru-ru) echo Russian ;; + sk-sk) echo Slovak ;; + sl-si) echo Slovenian ;; + sr-latn | sr-latn-rs) echo Serbian_Latin ;; + sv-se) echo Swedish ;; + th-th) echo Thai ;; + tr-tr) echo Turkish ;; + uk-ua) echo Ukrainian ;; + zh-cn) echo ChnSimp ;; + zh-hk | zh-tw) echo ChnTrad ;; + esac +} + +parse_windows_image_name() { + set -- $image_name + + if ! [ "$1" = windows ]; then + return 1 + fi + shift + + if [ "$1" = server ]; then + server=server + shift + fi + + version=$1 + shift + + if [ "$1" = r2 ]; then + version+=" r2" + shift + fi + + edition= + while [ $# -gt 0 ]; do + case "$1" in + # windows 10 enterprise n ltsc 2021 + k | n | kn) ;; + *) + if [ -n "$edition" ]; then + edition+=" " + fi + edition+="$1" + ;; + esac + shift + done +} + +is_have_arm_version() { + case "$version" in + 10) + case "$edition" in + home | 'home single language' | pro | education | enterprise | 'pro education' | 'pro for workstations') return ;; + 'iot enterprise') return ;; + # arm ltsc 只有 2021 有 iso + 'enterprise ltsc 2021' | 'iot enterprise ltsc 2021') return ;; + esac + ;; + 11) return ;; + esac + return 1 +} + +find_windows_iso() { + parse_windows_image_name || error_and_exit "--image-name wrong: $image_name" + if ! { [ "$version" = 8 ] || [ "$version" = 8.1 ]; } && [ -z "$edition" ]; then + error_and_exit "Edition is not set." + fi + + if [ -z "$lang" ]; then + lang=en-us + fi + langs="$lang $(en_us) $(us) $(en_en) $(en)" + langs=$(echo "$langs" | xargs -n 1 | awk '!seen[$0]++') + full_lang=$(english) + + case "$basearch" in + x86_64) arch_win=x64 ;; + aarch64) arch_win=arm64 ;; + esac + + get_windows_iso_link +} + +get_windows_iso_link() { + get_label_msdn() { + if [ -n "$server" ]; then + case "$version" in + 2008 | '2008 r2') + case "$edition" in + serverweb | serverwebcore) echo _ ;; + serverstandard | serverstandardcore) echo _ ;; + serverenterprise | serverenterprisecore) echo _ ;; + serverdatacenter | serverdatacentercore) echo _ ;; esac - DISK="/dev/$d" - info "Auto-detected disk: $DISK (from kern.disks)" - return 0 + ;; + # massgrave 不提供 2012 下载 + '2012 r2' | \ + 2016 | 2019 | 2022 | 2025) + case "$edition" in + serverstandard | serverstandardcore) echo _ ;; + serverdatacenter | serverdatacentercore) echo _ ;; + esac + ;; + esac + else + case "$version" in + vista) + case "$edition" in + starter) + case "$arch_win" in + x86) echo _ ;; + esac + ;; + homebasic | homepremium | ultimate) echo _ ;; + business | enterprise) "$edition" ;; + esac + ;; + 7) + case "$edition" in + starter) + case "$arch_win" in + x86) echo starter ;; + esac + ;; + homebasic) + case "$arch_win" in + x86) echo "home basic" ;; + esac + ;; + homepremium) echo "home premium" ;; + professional | enterprise | ultimate) echo "$edition" ;; + esac + ;; + 8 | 8.1) + case "$edition" in + '') echo _ ;; # windows 8.x core + pro | enterprise) echo "$edition" ;; + esac + ;; + 10) + case "$edition" in + home | 'home single language') echo consumer ;; + pro | enterprise) echo business ;; + education | 'pro education' | 'pro for workstations') + case "$arch_win" in + arm64) echo consumer ;; + x64) echo business ;; # iso 更小 + esac + ;; + # iot + 'iot enterprise') echo 'iot enterprise' ;; + # iot ltsc + 'iot enterprise ltsc 2019' | 'iot enterprise ltsc 2021') echo "$edition" ;; + # ltsc + 'enterprise 2015 ltsb' | 'enterprise 2016 ltsb' | 'enterprise ltsc 2019') echo "$edition" ;; + 'enterprise ltsc 2021') + # arm64 的 enterprise ltsc 2021 要下载 iot enterprise ltsc 2021 iso + case "$arch_win" in + arm64) echo 'iot enterprise ltsc 2021' ;; + x86 | x64) echo 'enterprise ltsc 2021' ;; + esac + ;; + esac + ;; + 11) + # arm business iso 都没有 education, pro education, pro for workstations + # 即使它的名字包含 EDU + # SW_DVD9_Win_Pro_10_22H2.31_Arm64_English_Pro_Ent_EDU_N_MLF_X24-05074.ISO + # en-us_windows_11_business_editions_version_25h2_arm64_dvd_8afc9b39.iso + case "$edition" in + home | 'home single language') echo consumer ;; + pro | enterprise) echo business ;; + education | 'pro education' | 'pro for workstations') + case "$arch_win" in + arm64) echo consumer ;; + x64) echo business ;; # iso 更小 + esac + ;; + # iot + 'iot enterprise' | 'iot enterprise subscription') echo 'iot enterprise' ;; + # iot ltsc + 'iot enterprise ltsc 2024' | 'iot enterprise subscription ltsc 2024') echo 'iot enterprise ltsc 2024' ;; + # ltsc + 'enterprise ltsc 2024') + # arm64 的 enterprise ltsc 2024 要下载 iot enterprise ltsc 2024 iso + case "$arch_win" in + arm64) echo 'iot enterprise ltsc 2024' ;; + x64) echo 'enterprise ltsc 2024' ;; + esac + ;; + esac + ;; + esac + fi + } + + get_label_vlsc() { + case "$version" in + 10 | 11) + case "$edition" in + pro | education | enterprise | 'pro education' | 'pro for workstations') echo pro ;; + esac + ;; + esac + } + + # msdl 没有每月发布的 iso + # msdl 只有 consumer 版本，因此里面的 pro 版本不是 vl 版 + # 8.1 没有每月发布的 iso，因此优先从 msdl 下载 + # win10 22h2 arm 有每月发布的 iso，因此不从 msdl 下载 + # win10/11 ltsc 没有每月发布的 iso，但是 msdl 没有 ltsc 版本 + get_label_msdl() { + case "$version" in + 8.1) + case "$edition" in + '' | pro) echo _ ;; + esac + ;; + esac + } + + get_page() { + if [ "$arch_win" = arm64 ]; then + echo arm + elif is_ltsc; then + echo ltsc + elif [ "$server" = 'server' ]; then + echo server + else + case "$version" in + vista | 7 | 8 | 8.1 | 10 | 11) + echo "$version" + ;; + esac + fi + } + + is_ltsc() { + grep -Ewq 'ltsb|ltsc' <<<"$edition" + } + + # 部分 bash 不支持 $() 里面嵌套case，所以定义成函数 + label_msdn=$(get_label_msdn) + label_msdl=$(get_label_msdl) + label_vlsc=$(get_label_vlsc) + page=$(get_page) + + if [ "$page" = vista ]; then + page_url=https://massgrave.dev/windows_vista__links + elif [ "$page" = server ]; then + page_url=https://massgrave.dev/windows-server-links + else + page_url=https://massgrave.dev/windows_${page}_links + fi + + info "Find windows iso" + echo "Version: $version" + echo "Edition: $edition" + echo "Label msdn: $label_msdn" + echo "Label msdl: $label_msdl" + echo "Label vlsc: $label_vlsc" + echo "List: $page_url" + echo + + # 先判断是否能自动查找该版本 + # 再判断是否支持 arm + # 这样可以在输入错误 Edition 时例如 windows 11 enterprise ltsc 2021 + # 显示名称错误，而不是显示该版本不支持 arm + + if [ -z "$page" ] || { [ -z "$label_msdn" ] && [ -z "$label_msdl" ] && [ -z "$label_vlsc" ]; }; then + error_and_exit "Not support find this iso. Check if --image-name is wrong. Or set --iso manually." + fi + + if [ "$basearch" = aarch64 ] && ! is_have_arm_version; then + error_and_exit "No ARM iso for this Windows Version or Edition." + fi + + if [ -n "$label_msdl" ]; then + iso=$(curl -L "$page_url" | grep -ioP 'https://[^ ]+?#[0-9]+' | head -1 | grep .) + else + curl -L "$page_url" | grep -ioP 'https://[^ ]+?.(iso|img)' >$tmp/win.list + + # 如果不是 ltsc ，应该先去除 ltsc 链接，否则最终链接有 ltsc 的 + # 例如查找 windows 10 iot enterprise，会得到 + # en-us_windows_10_iot_enterprise_ltsc_2021_arm64_dvd_e8d4fc46.iso + # en-us_windows_10_iot_enterprise_version_22h2_arm64_dvd_39566b6b.iso + # sed -Ei 和 sed -iE 是不同的 + if is_ltsc; then + sed -Ei '/ltsc|ltsb/!d' $tmp/win.list + else + sed -Ei '/ltsc|ltsb/d' $tmp/win.list + fi + + get_windows_iso_link_inner + fi +} + +get_shortest_line() { + # awk '{print length($0), $0}' | sort -n | head -1 | awk '{print $2}' + awk '(NR == 1 || length($0) < length(shortest)) { shortest = $0 } END { print shortest }' +} + +get_windows_iso_link_inner() { + regexs=() + + # msdn + if [ -n "$label_msdn" ]; then + if [ "$label_msdn" = _ ]; then + label_msdn= + fi + for lang in $langs; do + regex= + for i in ${lang} windows ${server} ${version} ${label_msdn}; do + if [ -n "$i" ]; then + regex+="${i}_" + fi + done + regex+=".*${arch_win}.*.(iso|img)" + regexs+=("$regex") + done + fi + + # vlsc + if [ -n "$label_vlsc" ]; then + regex="sw_dvd[59]_win_${label_vlsc}_${version}.*${arch_win}_${full_lang}.*.(iso|img)" + regexs+=("$regex") + fi + + # 查找 + for regex in "${regexs[@]}"; do + regex=${regex// /_} + + echo "looking for: $regex" >&2 + if iso=$(grep -Ei "/$regex" "$tmp/win.list" | get_shortest_line | grep .); then + return + fi + done + + error_and_exit "Could not find iso for this windows edition or language." +} + +setos() { + local step=$1 + local distro=$2 + local releasever=$3 + info set $step $distro $releasever + + setos_netboot.xyz() { + if is_efi; then + if [ "$basearch" = aarch64 ]; then + eval ${step}_efi=https://boot.netboot.xyz/ipxe/netboot.xyz-arm64.efi + else + eval ${step}_efi=https://boot.netboot.xyz/ipxe/netboot.xyz.efi + fi + else + eval ${step}_vmlinuz=https://boot.netboot.xyz/ipxe/netboot.xyz.lkrn + fi + } + + setos_alpine() { + is_virt && flavour=virt || flavour=lts + + # 不要用https 因为甲骨文云arm initramfs阶段不会从硬件同步时钟，导致访问https出错 + if is_in_china; then + mirror=http://mirror.nju.edu.cn/alpine/v$releasever + else + mirror=http://dl-cdn.alpinelinux.org/alpine/v$releasever + fi + eval ${step}_vmlinuz=$mirror/releases/$basearch/netboot/vmlinuz-$flavour + eval ${step}_initrd=$mirror/releases/$basearch/netboot/initramfs-$flavour + eval ${step}_modloop=$mirror/releases/$basearch/netboot/modloop-$flavour + eval ${step}_repo=$mirror/main + } + + setos_debian() { + is_debian_elts() { + [ "$releasever" -le 10 ] + } + + if [ "$releasever" -le 9 ] && [ "$basearch" = aarch64 ]; then + error_and_exit "Debian $releasever ELTS does not support aarch64." + fi + + # 用此标记要是否 elts, 用于安装后修改 elts/etls-cn 源 + # shellcheck disable=SC2034 + is_debian_elts && elts=1 || elts=0 + + case "$releasever" in + 9) codename=stretch ;; + 10) codename=buster ;; + 11) codename=bullseye ;; + 12) codename=bookworm ;; + 13) codename=trixie ;; + 14) codename=forky ;; + 15) codename=duke ;; + esac + + if ! is_use_cloud_image && is_debian_elts && is_in_china; then + warn " +Due to the lack of Debian Freexian ELTS instaler mirrors in China, the installation time may be longer. +Continue? + +由于没有 Debian Freexian ELTS 国内安装源，安装时间可能会比较长。 +继续安装? +" + read -r -p '[y/N]: ' + if ! [[ "$REPLY" = [Yy] ]]; then + exit + fi + fi + + # udeb_mirror 安装时的源 + # deb_mirror 安装后要修改成的源 + if is_debian_elts; then + if is_in_china; then + # https://github.com/tuna/issues/issues/1999 + # nju 也没同步 + udeb_mirror=deb.freexian.com/extended-lts + deb_mirror=mirror.nju.edu.cn/debian-elts + initrd_mirror=mirror.nju.edu.cn/debian-archive/debian + else + # 按道理不应该用官方源，但找不到其他源 + udeb_mirror=deb.freexian.com/extended-lts + deb_mirror=deb.freexian.com/extended-lts + initrd_mirror=archive.debian.org/debian + fi + else + if is_in_china; then + # ftp.cn.debian.org 不在国内还严重丢包 + # https://www.itdog.cn/ping/ftp.cn.debian.org + mirror=mirror.nju.edu.cn/debian + else + mirror=deb.debian.org/debian # fastly + fi + udeb_mirror=$mirror + deb_mirror=$mirror + initrd_mirror=$mirror + fi + + # 云镜像和 firmware 下载源 + if is_in_china; then + cdimage_mirror=https://mirror.nju.edu.cn/debian-cdimage + else + cdimage_mirror=https://cdimage.debian.org/images # 在瑞典，不是 cdn + # cloud.debian.org 同样在瑞典，不是 cdn + fi + + is_virt && flavour=-cloud || flavour= + # debian 10 云内核 vultr efi vnc 没有显示 + [ "$releasever" -le 10 ] && flavour= + # 甲骨文 arm64 cloud 内核 vnc 没有显示 + [ "$basearch_alt" = arm64 ] && flavour= + + if is_use_cloud_image; then + # cloud image + # https://salsa.debian.org/cloud-team/debian-cloud-images/-/tree/master/config_space/bookworm/files/etc/default/grub.d + # cloud 包括各种奇怪的优化，例如不显示 grub 菜单 + # 因此使用 nocloud + if false; then + is_virt && ci_type=genericcloud || ci_type=generic + else + ci_type=nocloud + fi + eval ${step}_img=$cdimage_mirror/cloud/$codename/latest/debian-$releasever-$ci_type-$basearch_alt.qcow2 + else + # 传统安装 + initrd_dir=dists/$codename/main/installer-$basearch_alt/current/images/netboot/debian-installer/$basearch_alt + + eval ${step}_udeb_mirror=$udeb_mirror + eval ${step}_vmlinuz=https://$initrd_mirror/$initrd_dir/linux + eval ${step}_initrd=https://$initrd_mirror/$initrd_dir/initrd.gz + eval ${step}_ks=$confhome/debian.cfg + eval ${step}_firmware=$cdimage_mirror/unofficial/non-free/firmware/$codename/current/firmware.cpio.gz + eval ${step}_codename=$codename + fi + + # 官方安装和云镜像都会用到的 + eval ${step}_deb_mirror=$deb_mirror + eval ${step}_kernel=linux-image$flavour-$basearch_alt + } + + setos_kali() { + if is_use_cloud_image; then + : + else + # 传统安装 + if is_in_china; then + hostname=mirror.nju.edu.cn + else + # http.kali.org 没有 ipv6 地址 + # http.kali.org (geoip 重定向) 到 kali.download (cf) + hostname=kali.download + fi + codename=kali-rolling + mirror=http://$hostname/kali/dists/$codename/main/installer-$basearch_alt/current/images/netboot/debian-installer/$basearch_alt + + is_virt && flavour=-cloud || flavour= + + eval ${step}_vmlinuz=$mirror/linux + eval ${step}_initrd=$mirror/initrd.gz + eval ${step}_ks=$confhome/debian.cfg + eval ${step}_deb_mirror=$hostname/kali + eval ${step}_udeb_mirror=$hostname/kali + eval ${step}_codename=$codename + eval ${step}_kernel=linux-image$flavour-$basearch_alt + # 缺少 firmware 下载 + fi + } + + setos_ubuntu() { + case "$releasever" in + 16.04) codename=xenial ;; + 18.04) codename=bionic ;; + 20.04) codename=focal ;; + 22.04) codename=jammy ;; + 24.04) codename=noble ;; + 25.10) codename=questing ;; # non-lts + esac + + if is_use_cloud_image; then + # cloud image + if is_in_china; then + # 有的源没有 releases 镜像 + # https://mirrors.tuna.tsinghua.edu.cn/ubuntu-cloud-images/releases/ + # https://unicom.mirrors.ustc.edu.cn/ubuntu-cloud-images/releases/ + # https://mirror.nju.edu.cn/ubuntu-cloud-images/releases/ + + # mirrors.cloud.tencent.com + ci_mirror=https://mirror.nju.edu.cn/ubuntu-cloud-images + else + ci_mirror=https://cloud-images.ubuntu.com + fi + + # 以下版本有 minimal 镜像 + # amd64 所有 + # arm64 24.04 和以上 + is_have_minimal_image() { + [ "$basearch_alt" = amd64 ] || [ "${releasever%.*}" -ge 24 ] + } + + get_suffix() { + if [ "$releasever" = 16.04 ]; then + if is_efi; then + echo -uefi1 + else + echo -disk1 + fi + fi + } + + if [ "$minimal" = 1 ]; then + if ! is_have_minimal_image; then + error_and_exit "Minimal cloud image is not available for $releasever $basearch_alt." + fi + eval ${step}_img="$ci_mirror/minimal/releases/$codename/release/ubuntu-$releasever-minimal-cloudimg-$basearch_alt$(get_suffix).img" + else + # 用 codename 而不是 releasever，可减少一次跳转 + eval ${step}_img="$ci_mirror/releases/$codename/release/ubuntu-$releasever-server-cloudimg-$basearch_alt$(get_suffix).img" + fi + else + # 传统安装 + if is_in_china; then + case "$basearch" in + "x86_64") mirror=https://mirror.nju.edu.cn/ubuntu-releases/$releasever ;; + "aarch64") mirror=https://mirror.nju.edu.cn/ubuntu-cdimage/releases/$releasever/release ;; + esac + else + case "$basearch" in + "x86_64") mirror=https://releases.ubuntu.com/$releasever ;; + "aarch64") mirror=https://cdimage.ubuntu.com/releases/$releasever/release ;; + esac + fi + + # iso + filename=$(curl -L $mirror/ | grep -oP "ubuntu-$releasever.*?-live-server-$basearch_alt.iso" | + sort -uV | tail -1 | grep .) + iso=$mirror/$filename + # 在 ubuntu 20.04 上，file 命令检测 ubuntu 22.04 iso 结果是 DOS/MBR boot sector + test_url "$iso" iso + eval ${step}_iso=$iso + + # ks + eval ${step}_ks=$confhome/ubuntu.yaml + eval ${step}_minimal=$minimal + fi + } + + setos_arch() { + if [ "$basearch" = "x86_64" ]; then + if is_in_china; then + mirror=https://mirror.nju.edu.cn/archlinux + else + mirror=https://geo.mirror.pkgbuild.com # geoip + fi + else + if is_in_china; then + mirror=https://mirror.nju.edu.cn/archlinuxarm + else + # https 证书有问题 + mirror=http://mirror.archlinuxarm.org # geoip + fi + fi + + if is_use_cloud_image; then + # cloud image + eval ${step}_img=$mirror/images/latest/Arch-Linux-x86_64-cloudimg.qcow2 + else + # 传统安装 + case "$basearch" in + x86_64) dir="core/os/$basearch" ;; + aarch64) dir="$basearch/core" ;; + esac + test_url $mirror/$dir/core.db gzip + eval ${step}_mirror=$mirror + fi + } + + setos_nixos() { + if is_in_china; then + mirror=https://mirror.nju.edu.cn/nix-channels + else + mirror=https://nixos.org/channels + fi + + if is_use_cloud_image; then + : + else + # 传统安装 + # 该服务器文件缓存 miss 时会响应 206 + Location 头 + # 但 curl 这种情况不会重定向，所以添加 text 类型让它不要报错 + test_url $mirror/nixos-$releasever/store-paths.xz 'xz text' + eval ${step}_mirror=$mirror + fi + } + + setos_gentoo() { + if is_in_china; then + mirror=https://mirror.nju.edu.cn/gentoo + else + mirror=https://distfiles.gentoo.org # cdn77 + fi + + dir=releases/$basearch_alt/autobuilds + + if is_use_cloud_image; then + # 使用 systemd 且没有 cloud-init + prefix=di-$basearch_alt-console + filename=$(curl -L $mirror/$dir/latest-$prefix.txt | grep '.qcow2' | awk '{print $1}' | grep .) + file=$mirror/$dir/$filename + test_url "$file" 'qemu' + eval ${step}_img=$file + else + prefix=stage3-$basearch_alt-systemd + filename=$(curl -L $mirror/$dir/latest-$prefix.txt | grep '.tar.xz' | awk '{print $1}' | grep .) + file=$mirror/$dir/$filename + test_url "$file" 'tar.xz' + eval ${step}_img=$file + fi + } + + setos_opensuse() { + # https://download.opensuse.org/ + # curl 会跳转到最近的镜像源，但可能会被镜像源 block + # aria2 会跳转使用 metalink + + # https://downloadcontent.opensuse.org # 德国 + # https://downloadcontentcdn.opensuse.org # fastly cdn + + # 很多国内源缺少 aarch64 tumbleweed appliances + # https://download.opensuse.org/ports/aarch64/tumbleweed/appliances/ + # https://mirrors.ustc.edu.cn/opensuse/ports/aarch64/tumbleweed/appliances/ + # https://mirrors.tuna.tsinghua.edu.cn/opensuse/ports/aarch64/tumbleweed/appliances/ + + if is_in_china; then + mirror=https://mirror.nju.edu.cn/opensuse + else + mirror=https://downloadcontentcdn.opensuse.org + fi + + if [ "$releasever" = tumbleweed ]; then + # tumbleweed + if [ "$basearch" = aarch64 ]; then + dir=ports/aarch64/tumbleweed/appliances + else + dir=tumbleweed/appliances + fi + file=openSUSE-Tumbleweed-Minimal-VM.$basearch-Cloud.qcow2 + else + # leap + dir=distribution/leap/$releasever/appliances + case "$releasever" in + 15.6) file=openSUSE-Leap-$releasever-Minimal-VM.$basearch-Cloud.qcow2 ;; + # 16.0) file=Leap-$releasever-Minimal-VM.$basearch-Cloud.qcow2 ;; # 缺少 openSUSE-repos-Leap 包，导致没有源 + 16.0) file=Leap-$releasever-Minimal-VM.$basearch-kvm$(if [ "$basearch" = x86_64 ]; then echo '-and-xen'; fi).qcow2 ;; + esac + + # https://src.opensuse.org/openSUSE/Leap-Images/src/branch/leap-16.0/kiwi-templates-Minimal/Minimal.kiwi + # https://build.opensuse.org/projects/Virtualization:Appliances:Images:openSUSE-Leap-15.6/packages/kiwi-templates-Minimal/files/Minimal.kiwi + # https://build.opensuse.org/projects/Virtualization:Appliances:Images:openSUSE-Tumbleweed/packages/kiwi-templates-Minimal/files/Minimal.kiwi + # 有专门的kvm镜像，openSUSE-Leap-15.5-Minimal-VM.x86_64-kvm-and-xen.qcow2，里面没有cloud-init + # file=openSUSE-Leap-15.5-Minimal-VM.x86_64-kvm-and-xen.qcow2 + fi + eval ${step}_img=$mirror/$dir/$file + } + + setos_windows() { + if [ -z "$iso" ]; then + # 查找时将 windows longhorn serverdatacenter 改成 windows server 2008 serverdatacenter + image_name=${image_name/windows longhorn server/windows server 2008 server} + echo "iso url is not set. Attempting to find it automatically." + find_windows_iso + fi + + # 将上面的 windows server 2008 serverdatacenter 改回 windows longhorn serverdatacenter + # 也能纠正用户输入了 windows server 2008 serverdatacenter + # 注意 windows server 2008 r2 serverdatacenter 不用改 + image_name=${image_name/windows server 2008 server/windows longhorn server} + + if [[ "$iso" = magnet:* ]]; then + : # 不测试磁力链接 + else + # 需要用户输入 massgrave.dev 直链 + if grep -Eiq '\.massgrave\.dev/.*\.(iso|img)$' <<<"$iso" || + grep -Eiq '\.gravesoft\.dev/#[0-9]+$' <<<"$iso"; then + info "Set Direct link" + # MobaXterm 不支持 + # printf '\e]8;;http://example.com\e\\This is a link\e]8;;\e\\\n' + + # MobaXterm 不显示为超链接 + # info false "请在浏览器中打开 $iso 获取直链并粘贴到这里。" + # info false "Please open $iso in browser to get the direct link and paste it here." + + echo "请在浏览器中打开 $iso 获取直链并粘贴到这里。" + echo "Please open $iso in browser to get the direct link and paste it here." + IFS= read -r -p "Direct Link: " iso + if [ -z "$iso" ]; then + error_and_exit "ISO Link is empty." + fi + fi + + # 测试是否是 iso + test_url "$iso" iso + + # 判断 iso 架构是否兼容 + # https://gitlab.com/libosinfo/osinfo-db/-/tree/main/data/os/microsoft.com?ref_type=heads + # uupdump linux 下合成的标签是 ARM64，windows下合成的标签是 A64 + if file -b "$tmp/img-test" | grep -Eq '_(A64|ARM64)'; then + iso_arch=arm64 + else + iso_arch=x86_or_x64 + fi + + if ! { + { [ "$basearch" = x86_64 ] && [ "$iso_arch" = x86_or_x64 ]; } || + { [ "$basearch" = aarch64 ] && [ "$iso_arch" = arm64 ]; } + }; then + warn " +The current machine is $basearch, but it seems the ISO is for $iso_arch. Continue? +当前机器是 $basearch，但 ISO 似乎是 $iso_arch。继续安装?" + read -r -p '[y/N]: ' + if ! [[ "$REPLY" = [Yy] ]]; then + exit + fi + fi + fi + + [ -n "$boot_wim" ] && test_url "$boot_wim" 'wim' + + eval "${step}_iso='$iso'" + eval "${step}_boot_wim='$boot_wim'" + eval "${step}_image_name='$image_name'" + } + + # shellcheck disable=SC2154 + setos_dd() { + # raw 包含 vhd + test_url $img 'raw raw.gzip raw.xz raw.zstd raw.tar.gzip raw.tar.xz raw.tar.zstd' img_type + + if is_efi; then + install_pkg hexdump + + # openwrt 镜像 efi part type 不是 esp + # 因此改成检测 fat? + # https://downloads.openwrt.org/releases/23.05.3/targets/x86/64/openwrt-23.05.3-x86-64-generic-ext4-combined-efi.img.gz + + # od 在 coreutils 里面，好像要配合 tr 才能删除空格 + # hexdump 在 util-linux / bsdmainutils 里面 + # xxd 要单独安装，el 在 vim-common 里面 + # xxd -l $((34 * 4096)) -ps -c 128 + + # 仅打印前34个扇区 * 4096字节（按最大的算） + # 每行128字节 + hexdump -n $((34 * 4096)) -e '128/1 "%02x" "\n"' -v "$tmp/img-test" >$tmp/img-test-hex + if grep -q '^28732ac11ff8d211ba4b00a0c93ec93b' $tmp/img-test-hex; then + echo 'DD: Image is EFI.' + else + echo 'DD: Image is not EFI.' + warn ' +The current machine uses EFI boot, but the DD image seems not an EFI image. +Continue with DD? +当前机器使用 EFI 引导，但 DD 镜像可能不是 EFI 镜像。 +继续 DD?' + read -r -p '[y/N]: ' + if [[ "$REPLY" = [Yy] ]]; then + eval ${step}_confirmed_no_efi=1 + else + exit + fi + fi + fi + eval "${step}_img='$img'" + eval "${step}_img_type='$img_type'" + eval "${step}_img_type_warp='$img_type_warp'" + } + + setos_fnos() { + if [ "$basearch" = aarch64 ]; then + error_and_exit "FNOS not supports ARM." + fi + + # 系统盘大小 + min=8 + default=8 + while true; do + IFS= read -r -p "Type System Partition Size in GB. Minimal $min GB. [$default]: " input + input=${input:-$default} + if ! { is_digit "$input" && [ "$input" -ge "$min" ]; }; then + error "Invalid Size. Please Try again." + else + eval "${step}_fnos_part_size=${input}G" + break + fi + done + + iso=$(curl -L https://fnnas.com/ | grep -o 'https://[^"]*\.iso' | head -1 | grep .) + + # curl 7.82.0+ + # curl -L --json '{"url":"'$iso'"}' https://www.fnnas.com/api/download-sign + + iso=$(curl -L \ + -d '{"url":"'$iso'"}' \ + -H 'Content-Type: application/json' \ + https://www.fnnas.com/api/download-sign | + grep -o 'https://[^"]*') + + test_url "$iso" iso + eval "${step}_iso='$iso'" + } + + setos_aosc() { + if is_in_china; then + mirror=https://mirror.nju.edu.cn/anthon/aosc-os + else + # 服务器在香港 + mirror=https://releases.aosc.io + fi + + dir=os-$basearch_alt/base + file=$(curl -L $mirror/$dir/ | grep -oP 'aosc-os_base_.*?\.tar.xz' | + sort -uV | tail -1 | grep .) + img=$mirror/$dir/$file + test_url $img 'tar.xz' + eval ${step}_img=$img + } + + setos_centos_almalinux_rocky_fedora() { + # el 10 需要 x86-64-v3，除了 almalinux + if [ "$basearch" = x86_64 ] && + { [ "$distro" = centos ] || [ "$distro" = rocky ]; } && + [ "$releasever" -ge 10 ]; then + assert_cpu_supports_x86_64_v3 + fi + + elarch=$basearch + if [ "$basearch" = x86_64 ] && + [ "$distro" = almalinux ] && [ "$releasever" -ge 10 ] && + ! is_cpu_supports_x86_64_v3; then + elarch=x86_64_v2 + fi + + if is_use_cloud_image; then + # ci + if is_in_china; then + case $distro in + centos) ci_mirror="https://mirror.nju.edu.cn/centos-cloud/centos" ;; + almalinux) ci_mirror="https://mirror.nju.edu.cn/almalinux/$releasever/cloud/$elarch/images" ;; + rocky) ci_mirror="https://mirror.nju.edu.cn/rocky/$releasever/images/$elarch" ;; + fedora) ci_mirror="https://mirror.nju.edu.cn/fedora/releases/$releasever/Cloud/$elarch/images" ;; + esac + else + case $distro in + centos) ci_mirror="https://cloud.centos.org/centos" ;; + almalinux) ci_mirror="https://repo.almalinux.org/almalinux/$releasever/cloud/$elarch/images" ;; + rocky) ci_mirror="https://download.rockylinux.org/pub/rocky/$releasever/images/$elarch" ;; + fedora) ci_mirror="https://d2lzkl7pfhq30w.cloudfront.net/pub/fedora/linux/releases/$releasever/Cloud/$elarch/images" ;; + esac + fi + case $distro in + centos) + case $releasever in + 7) + # CentOS-7-aarch64-GenericCloud.qcow2c 是旧版本 + ver=-2211 + ci_image=$ci_mirror/$releasever/images/CentOS-$releasever-$elarch-GenericCloud$ver.qcow2c + ;; + *) + # 有 bios 和 efi 镜像 + # https://cloud.centos.org/centos/10-stream/x86_64/images/CentOS-Stream-GenericCloud-10-latest.x86_64.qcow2 + # https://cloud.centos.org/centos/10-stream/x86_64/images/CentOS-Stream-GenericCloud-x86_64-10-latest.x86_64.qcow2 + [ "$elarch" = x86_64 ] && + ci_image=$ci_mirror/$releasever-stream/$elarch/images/CentOS-Stream-GenericCloud-x86_64-$releasever-latest.$elarch.qcow2 || + ci_image=$ci_mirror/$releasever-stream/$elarch/images/CentOS-Stream-GenericCloud-$releasever-latest.$elarch.qcow2 + ;; + esac + ;; + almalinux) ci_image=$ci_mirror/AlmaLinux-$releasever-GenericCloud-latest.$elarch.qcow2 ;; + rocky) ci_image=$ci_mirror/Rocky-$releasever-GenericCloud-Base.latest.$elarch.qcow2 ;; + fedora) + # 不加 / 会跳转到 https://dl.fedoraproject.org，纯 ipv6 无法访问 + # curl -L -6 https://d2lzkl7pfhq30w.cloudfront.net/pub/fedora/linux/releases/42/Cloud/x86_64/images + # curl -L -6 https://d2lzkl7pfhq30w.cloudfront.net/pub/fedora/linux/releases/42/Cloud/x86_64/images/ + filename=$(curl -L $ci_mirror/ | grep -oP "Fedora-Cloud-Base-Generic.*?.qcow2" | + sort -uV | tail -1 | grep .) + ci_image=$ci_mirror/$filename + ;; + esac + + eval ${step}_img=${ci_image} + else + # 传统安装 + case $distro in + centos) mirrorlist="https://mirrors.centos.org/mirrorlist?repo=centos-baseos-$releasever-stream&arch=$elarch" ;; + almalinux) mirrorlist="https://mirrors.almalinux.org/mirrorlist/$releasever/baseos" ;; + rocky) mirrorlist="https://mirrors.rockylinux.org/mirrorlist?arch=$elarch&repo=BaseOS-$releasever" ;; + fedora) mirrorlist="https://mirrors.fedoraproject.org/mirrorlist?arch=$elarch&repo=fedora-$releasever" ;; + esac + + # rocky/centos9 需要删除第一行注释， almalinux 需要替换链接里面的 $basearch + for cur_mirror in $(curl -L $mirrorlist | sed "/^#/d" | sed "s,\$basearch,$elarch,"); do + host=$(get_host_by_url $cur_mirror) + if is_host_has_ipv4_and_ipv6 $host && + test_url_grace ${cur_mirror}images/pxeboot/vmlinuz; then + mirror=$cur_mirror + break + fi + done + + if [ -z "$mirror" ]; then + error_and_exit "All mirror failed." + fi + + eval "${step}_mirrorlist='${mirrorlist}'" + + eval ${step}_ks=$confhome/redhat.cfg + eval ${step}_vmlinuz=${mirror}images/pxeboot/vmlinuz + eval ${step}_initrd=${mirror}images/pxeboot/initrd.img + eval ${step}_squashfs=${mirror}images/install.img + test_url ${mirror}images/install.img 'squashfs' + fi + } + + setos_oracle() { + # el 10 需要 x86-64-v3 + if [ "$basearch" = x86_64 ] && [ "$releasever" -ge 10 ]; then + assert_cpu_supports_x86_64_v3 + fi + + if is_use_cloud_image; then + # ci + install_pkg jq + mirror=https://yum.oracle.com + + [ "$basearch" = aarch64 ] && + template_prefix=ol${releasever}_${basearch}-cloud || + template_prefix=ol${releasever} + curl -Lo $tmp/oracle.json $mirror/templates/OracleLinux/$template_prefix-template.json + dir=$(jq -r .base_url $tmp/oracle.json) + file=$(jq -r .kvm.image $tmp/oracle.json) + ci_image=$mirror$dir/$file + + eval ${step}_img=${ci_image} + else + : + fi + } + + setos_redhat() { + if is_use_cloud_image; then + # el 10 需要 x86-64-v3 + if [ "$basearch" = x86_64 ] && [[ "$img" = *rhel-10* ]]; then + assert_cpu_supports_x86_64_v3 + fi + eval "${step}_img='$img'" + else + : + fi + } + + setos_opencloudos() { + # https://mirrors.opencloudos.tech 不支持 ipv6 + # https://mirrors.cloud.tencent.com 没有 stream + if [ "$releasever" -ge 23 ]; then + mirror=https://mirrors.opencloudos.tech/opencloudos-stream/releases + else + mirror=https://mirrors.cloud.tencent.com/opencloudos + fi + + if is_use_cloud_image; then + # ci + if [ "$releasever" -eq 9 ]; then + dir=$releasever/images/qcow2/$basearch + else + dir=$releasever/images/$basearch + fi + + file=$(curl -L $mirror/$dir/ | grep -oP 'OpenCloudOS.*?\.qcow2' | + sort -uV | tail -1 | grep .) + eval ${step}_img=$mirror/$dir/$file + else + : + fi + } + + setos_anolis() { + mirror=https://mirrors.openanolis.cn/anolis + if is_use_cloud_image; then + # ci + dir=$releasever/isos/GA/$basearch + [ "$releasever" -ge 23 ] && + filename='AnolisOS.*?\.qcow2' || + filename='AnolisOS.*?-ANCK\.qcow2' + file=$(curl -L $mirror/$dir/ | grep -oP "$filename" | + sort -uV | tail -1 | grep .) + eval ${step}_img=$mirror/$dir/$file + else + : + fi + } + + setos_openeuler() { + if is_in_china; then + mirror=https://repo.openeuler.openatom.cn + else + mirror=https://repo.openeuler.org + fi + if is_use_cloud_image; then + # ci + name=$(curl -L "$mirror/" | grep -oE "openEuler-$releasever(-LTS)?(-SP[0-9])?" | + sort -uV | tail -1 | grep .) + eval ${step}_img=$mirror/$name/virtual_machine_img/$basearch/$name-$basearch.qcow2.xz + else + : + fi + } + + eval ${step}_distro=$distro + eval ${step}_releasever=$releasever + + case "$distro" in + centos | almalinux | rocky | fedora) setos_centos_almalinux_rocky_fedora ;; + *) setos_$distro ;; + esac + + # debian/kali <=256M 必须使用云内核，否则不够内存 + if is_distro_like_debian && ! is_in_windows && [ "$ram_size" -le 256 ]; then + exit_if_cant_use_cloud_kernel + fi + + # 集中测试云镜像格式 + if is_use_cloud_image && [ "$step" = finalos ]; then + # shellcheck disable=SC2154 + test_url $finalos_img 'qemu qemu.gzip qemu.xz qemu.zstd raw.xz' finalos_img_type + fi +} + +is_distro_like_redhat() { + if [ -n "$1" ]; then + _distro=$1 + else + _distro=$distro + fi + [ "$_distro" = redhat ] || [ "$_distro" = centos ] || [ "$_distro" = almalinux ] || [ "$_distro" = rocky ] || [ "$_distro" = fedora ] || [ "$_distro" = oracle ] +} + +is_distro_like_debian() { + if [ -n "$1" ]; then + _distro=$1 + else + _distro=$distro + fi + [ "$_distro" = debian ] || [ "$_distro" = kali ] +} + +get_latest_distro_releasever() { + get_function_content verify_os_name | + grep -wo "$1 [^'\"]*" | awk -F'|' '{print $NF}' +} + +# 检查是否为正确的系统名 +verify_os_name() { + if [ -z "$*" ]; then + usage_and_exit + fi + + # 不要删除 centos 7 + for os in \ + 'centos 7|9|10' \ + 'anolis 7|8|23' \ + 'opencloudos 8|9|23' \ + 'almalinux 8|9|10' \ + 'rocky 8|9|10' \ + 'oracle 8|9|10' \ + 'fedora 42|43' \ + 'nixos 25.05' \ + 'debian 9|10|11|12|13' \ + 'opensuse 15.6|16.0|tumbleweed' \ + 'alpine 3.19|3.20|3.21|3.22' \ + 'openeuler 20.03|22.03|24.03|25.09' \ + 'ubuntu 16.04|18.04|20.04|22.04|24.04|25.10' \ + 'redhat' \ + 'kali' \ + 'arch' \ + 'gentoo' \ + 'aosc' \ + 'fnos' \ + 'windows' \ + 'dd' \ + 'netboot.xyz'; do + read -r ds vers <<<"$os" + vers_=${vers//\./\\\.} + finalos=$(echo "$@" | to_lower | sed -n -E "s,^($ds)[ :-]?(|$vers_)$,\1 \2,p") + if [ -n "$finalos" ]; then + read -r distro releasever <<<"$finalos" + # 默认版本号 + if [ -z "$releasever" ] && [ -n "$vers" ]; then + releasever=$(awk -F '|' '{print $NF}' <<<"|$vers") + fi + return + fi + done + + error "Please specify a proper os" + usage_and_exit +} + +verify_os_args() { + case "$distro" in + dd) [ -n "$img" ] || error_and_exit "dd need --img" ;; + redhat) [ -n "$img" ] || error_and_exit "redhat need --img" ;; + windows) [ -n "$image_name" ] || error_and_exit "Install Windows need --image-name." ;; + esac + + case "$distro" in + netboot.xyz | windows) [ -z "$ssh_keys" ] || error_and_exit "not support ssh key for $distro" ;; + esac +} + +get_cmd_path() { + # arch 云镜像不带 which + # command -v 包括脚本里面的方法 + # ash 无效 + type -f -p $1 +} + +is_have_cmd() { + get_cmd_path $1 >/dev/null 2>&1 +} + +install_pkg() { + is_in_windows && return + + find_pkg_mgr() { + [ -n "$pkg_mgr" ] && return + + # 查找方法1: 通过 ID / ID_LIKE + # 因为可能装了多种包管理器 + if [ -f /etc/os-release ]; then + # shellcheck source=/dev/null + for id in $({ . /etc/os-release && echo $ID $ID_LIKE; }); do + # https://github.com/chef/os_release + case "$id" in + fedora | centos | rhel) is_have_cmd dnf && pkg_mgr=dnf || pkg_mgr=yum ;; + debian | ubuntu) pkg_mgr=apt-get ;; + opensuse | suse) pkg_mgr=zypper ;; + alpine) pkg_mgr=apk ;; + arch) pkg_mgr=pacman ;; + gentoo) pkg_mgr=emerge ;; + nixos) pkg_mgr=nix-env ;; + esac + [ -n "$pkg_mgr" ] && return done fi - error "Unable to auto-detect target disk on FreeBSD. Please specify --disk explicitly." + + # 查找方法 2 + for mgr in dnf yum apt-get pacman zypper emerge apk nix-env; do + is_have_cmd $mgr && pkg_mgr=$mgr && return + done + + return 1 + } + + cmd_to_pkg() { + unset USE + case $cmd in + ar) + case "$pkg_mgr" in + *) pkg="binutils" ;; + esac + ;; + xz) + case "$pkg_mgr" in + apt-get) pkg="xz-utils" ;; + *) pkg="xz" ;; + esac + ;; + lsblk | findmnt) + case "$pkg_mgr" in + apk) pkg="$cmd" ;; + *) pkg="util-linux" ;; + esac + ;; + lsmem) + case "$pkg_mgr" in + apk) pkg="util-linux-misc" ;; + *) pkg="util-linux" ;; + esac + ;; + fdisk) + case "$pkg_mgr" in + apt-get) pkg="fdisk" ;; + apk) pkg="util-linux-misc" ;; + *) pkg="util-linux" ;; + esac + ;; + hexdump) + case "$pkg_mgr" in + apt-get) pkg="bsdmainutils" ;; + *) pkg="util-linux" ;; + esac + ;; + unsquashfs) + case "$pkg_mgr" in + zypper) pkg="squashfs" ;; + emerge) pkg="squashfs-tools" && export USE="lzma" ;; + *) pkg="squashfs-tools" ;; + esac + ;; + nslookup | dig) + case "$pkg_mgr" in + apt-get) pkg="dnsutils" ;; + pacman) pkg="bind" ;; + apk | emerge) pkg="bind-tools" ;; + yum | dnf | zypper) pkg="bind-utils" ;; + esac + ;; + iconv) + case "$pkg_mgr" in + apk) pkg="musl-utils" ;; + *) error_and_exit "Which GNU/Linux do not have iconv built-in?" ;; + esac + ;; + *) pkg=$cmd ;; + esac + } + + # 系统 package名称 repo名称 + # centos/alma/rocky/fedora epel-release epel + # oracle linux oracle-epel-release ol9_developer_EPEL + # opencloudos epol-release EPOL + # alibaba cloud linux 3 epel-release/epel-aliyuncs-release(qcow2自带) epel + # anolis 23 anolis-epao-release EPAO + + # anolis 8 + # [root@localhost ~]# yum search *ep*-release | grep -v next + # ========================== Name Matched: *ep*-release ========================== + # anolis-epao-release.noarch : EPAO Packages for Anolis OS 8 repository configuration + # epel-aliyuncs-release.noarch : Extra Packages for Enterprise Linux repository configuration + # epel-release.noarch : Extra Packages for Enterprise Linux repository configuration (qcow2自带) + + check_is_need_epel() { + is_need_epel() { + case "$pkg" in + dpkg) true ;; + jq) is_have_cmd yum && ! is_have_cmd dnf ;; # el7/ol7 的 jq 在 epel 仓库 + *) false ;; + esac + } + + get_epel_repo_name() { + # el7 不支持 yum repolist --all，要使用 yum repolist all + # el7 yum repolist 第一栏有 /x86_64 后缀，因此要去掉。而 el9 没有 + $pkg_mgr repolist all | awk '{print $1}' | awk -F/ '{print $1}' | grep -Ei 'ep(el|ol|ao)$' + } + + get_epel_pkg_name() { + # el7 不支持 yum list --available，要使用 yum list available + $pkg_mgr list available | grep -E '(.*-)?ep(el|ol|ao)-(.*-)?release' | + awk '{print $1}' | cut -d. -f1 | grep -v next | head -1 + } + + if is_need_epel; then + if ! epel=$(get_epel_repo_name); then + $pkg_mgr install -y "$(get_epel_pkg_name)" + epel=$(get_epel_repo_name) + fi + enable_epel="--enablerepo=$epel" + else + enable_epel= + fi + } + + install_pkg_real() { + text="$pkg" + if [ "$pkg" != "$cmd" ]; then + text+=" ($cmd)" + fi + echo "Installing package '$text'..." + + case $pkg_mgr in + dnf) + check_is_need_epel + dnf install $enable_epel -y --setopt=install_weak_deps=False $pkg + ;; + yum) + check_is_need_epel + yum install $enable_epel -y $pkg + ;; + emerge) emerge --oneshot $pkg ;; + pacman) pacman -Syu --noconfirm --needed $pkg ;; + zypper) zypper install -y $pkg ;; + apk) + add_community_repo_for_alpine + apk add $pkg + ;; + apt-get) + [ -z "$apt_updated" ] && apt-get update && apt_updated=1 + DEBIAN_FRONTEND=noninteractive apt-get install -y $pkg + ;; + nix-env) + # 不指定 channel 会很慢，而且很占内存 + [ -z "$nix_updated" ] && nix-channel --update && nix_updated=1 + nix-env -iA nixos.$pkg + ;; + esac + } + + is_need_reinstall() { + cmd=$1 + + # gentoo 默认编译的 unsquashfs 不支持 xz + if [ "$cmd" = unsquashfs ] && is_have_cmd emerge && ! $cmd |& grep -wq xz; then + echo "unsquashfs not supported xz. rebuilding." + return 0 + fi + + # busybox fdisk 无法显示 mbr 分区表的 id + if [ "$cmd" = fdisk ] && is_have_cmd apk && $cmd |& grep -wq BusyBox; then + return 0 + fi + + # busybox grep 不支持 -oP + if [ "$cmd" = grep ] && is_have_cmd apk && $cmd |& grep -wq BusyBox; then + return 0 + fi + + return 1 + } + + for cmd in "$@"; do + if ! is_have_cmd $cmd || is_need_reinstall $cmd; then + if ! find_pkg_mgr; then + error_and_exit "Can't find compatible package manager. Please manually install $cmd." + fi + cmd_to_pkg + install_pkg_real + fi + done >&2 +} + +is_valid_ram_size() { + is_digit "$1" && [ "$1" -gt 0 ] +} + +check_ram() { + ram_standard=$( + case "$distro" in + netboot.xyz) echo 0 ;; + alpine | debian | kali | dd) echo 256 ;; + arch | gentoo | aosc | nixos | windows) echo 512 ;; + redhat | centos | almalinux | rocky | fedora | oracle | ubuntu | anolis | opencloudos | openeuler) echo 1024 ;; + opensuse | fnos) echo -1 ;; # 没有安装模式 + esac + ) + + # 不用检查内存的情况 + if [ "$ram_standard" -eq 0 ]; then + return + fi + + # 未测试 + ram_cloud_image=256 + + has_cloud_image=$( + case "$distro" in + redhat | centos | almalinux | rocky | oracle | fedora | debian | ubuntu | opensuse | anolis | openeuler) echo true ;; + netboot.xyz | alpine | dd | arch | gentoo | nixos | kali | windows) echo false ;; + esac + ) + + if is_in_windows; then + ram_size=$(wmic memorychip get capacity | awk -F= '{sum+=$2} END {if(sum>0) print sum/1024/1024}') + else + # lsmem最准确但 centos7 arm 和 alpine 不能用，debian 9 util-linux 没有 lsmem + # arm 24g dmidecode 显示少了128m + # arm 24g lshw 显示23BiB + # ec2 t4g arm alpine 用 lsmem 和 dmidecode 都无效，要用 lshw，但结果和free -m一致，其他平台则没问题 + install_pkg lsmem + ram_size=$(lsmem -b 2>/dev/null | grep 'Total online memory:' | awk '{ print $NF/1024/1024 }') + + if ! is_valid_ram_size "$ram_size"; then + install_pkg dmidecode + ram_size=$(dmidecode -t 17 | grep "Size.*[GM]B" | awk '{if ($3=="GB") s+=$2*1024; else s+=$2} END {if(s>0) print s}') + fi + + if ! is_valid_ram_size "$ram_size"; then + install_pkg lshw + # 不能忽略 -i，alpine 显示的是 System memory + ram_str=$(lshw -c memory -short | grep -i 'System Memory' | awk '{print $3}') + ram_size=$(grep <<<$ram_str -o '[0-9]*') + grep <<<$ram_str GiB && ram_size=$((ram_size * 1024)) + fi + fi + + # 用于兜底，不太准确 + # cygwin 要装 procps-ng 才有 free 命令 + if ! is_valid_ram_size "$ram_size"; then + ram_size_k=$(grep '^MemTotal:' /proc/meminfo | awk '{print $2}') + ram_size=$((ram_size_k / 1024 + 64 + 4)) + fi + + if ! is_valid_ram_size "$ram_size"; then + error_and_exit "Could not detect RAM size." + fi + + # ram 足够就用普通方法安装，否则如果内存大于512就用 cloud image + # TODO: 测试 256 384 内存 + if ! is_use_cloud_image && [ $ram_size -lt $ram_standard ]; then + if $has_cloud_image; then + info "RAM < $ram_standard MB. Fallback to cloud image mode" + cloud_image=1 + else + error_and_exit "Could not install $distro: RAM < $ram_standard MB." + fi + fi + + if is_use_cloud_image && [ $ram_size -lt $ram_cloud_image ]; then + error_and_exit "Could not install $distro using cloud image: RAM < $ram_cloud_image MB." fi } -# Show disk partition info at the end (best-effort). -show_partition_info() { - echo - echo "---------------- Disk partition layout ----------------" - if [ "$OS" = "Linux" ]; then - if command -v lsblk >/dev/null 2>&1; then - lsblk "$DISK" || true - elif command -v fdisk >/dev/null 2>&1; then - fdisk -l "$DISK" || true +is_efi() { + if is_in_windows; then + # bcdedit | grep -qi '^path.*\.efi' + mountvol | grep -q --text 'EFI' + else + [ -d /sys/firmware/efi ] + fi +} + +is_grub_dir_linked() { + # cloudcone 重装前/重装后(方法1) + [ "$(readlink -f /boot/grub/grub.cfg)" = /boot/grub2/grub.cfg ] || + [ "$(readlink -f /boot/grub2/grub.cfg)" = /boot/grub/grub.cfg ] || + # cloudcone 重装后(方法2) + { [ -f /boot/grub2/grub.cfg ] && [ "$(cat /boot/grub2/grub.cfg)" = 'chainloader (hd0)+1' ]; } +} + +is_secure_boot_enabled() { + if is_efi; then + if is_in_windows; then + reg query 'HKLM\SYSTEM\CurrentControlSet\Control\SecureBoot\State' /v UEFISecureBootEnabled 2>/dev/null | grep 0x1 else - echo "Could not show partition info (no lsblk/fdisk)." + if dmesg | grep -i 'Secure boot enabled'; then + return 0 + fi + install_pkg mokutil + mokutil --sb-state 2>&1 | grep -i 'SecureBoot enabled' fi else - # FreeBSD - if command -v gpart >/dev/null 2>&1; then - local d="${DISK#/dev/}" - gpart show "$d" 2>/dev/null || gpart show "$DISK" 2>/dev/null || echo "Could not show partition info with gpart." - else - echo "Could not show partition info (no gpart)." - fi + return 1 fi - echo "-------------------------------------------------------" } -# RHEL-specific hook: run reinstall-fbll.sh freebsd 14 before final summary (if present) -run_rhel_freebsd_hook() { - if [ "$OS" = "Linux" ] && [ -f /etc/redhat-release ]; then - if [ -f "./reinstall-fbll.sh" ]; then - info "RHEL detected, running: bash reinstall-fbll.sh freebsd 14" - if ! bash ./reinstall-fbll.sh freebsd 14; then - warn "reinstall-fbll.sh freebsd 14 failed, continuing anyway." +is_need_grub_extlinux() { + ! { is_netboot_xyz && is_efi; } +} + +# 只有 linux bios 是用本机的 grub/extlinux +is_use_local_grub_extlinux() { + is_need_grub_extlinux && ! is_in_windows && ! is_efi +} + +is_use_local_grub() { + is_use_local_grub_extlinux && is_mbr_using_grub +} + +is_use_local_extlinux() { + is_use_local_grub_extlinux && ! is_mbr_using_grub +} + +is_mbr_using_grub() { + find_main_disk + # 各发行版不一定自带 strings hexdump xxd od 命令 + head -c 440 /dev/$xda | grep --text -iq 'GRUB' +} + +to_upper() { + tr '[:lower:]' '[:upper:]' +} + +to_lower() { + tr '[:upper:]' '[:lower:]' +} + +del_cr() { + # wmic/reg 换行符是 \r\r\n + # wmic nicconfig where InterfaceIndex=$id get MACAddress,IPAddress,IPSubnet,DefaultIPGateway | hexdump -c + sed -E 's/\r+$//' +} + +del_empty_lines() { + sed '/^[[:space:]]*$/d' +} + +del_comment_lines() { + sed '/^[[:space:]]*#/d' +} + +trim() { + # sed -E -e 's/^[[:space:]]+//' -e 's/[[:space:]]+$//' + sed -e 's/^[[:space:]]*//' -e 's/[[:space:]]*$//' +} + +prompt_password() { + info "prompt password" + warn false "Leave blank to use a random password." + warn false "不填写则使用随机密码" + while true; do + IFS= read -r -p "Password: " password + if [ -n "$password" ]; then + IFS= read -r -p "Retype password: " password_confirm + if [ "$password" = "$password_confirm" ]; then + break + else + error "Passwords don't match. Try again." fi else - warn "RHEL detected, but ./reinstall-fbll.sh not found; skipping RHEL hook." + # 特殊字符列表 + # https://learn.microsoft.com/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/hh994562(v=ws.11) + # 有的机器运行 centos 7 ，用 /dev/random 产生 16 位密码，开启了 rngd 也要 5 秒，关闭了 rngd 则长期阻塞 + chars=\''A-Za-z0-9~!@#$%^&*_=+`|(){}[]:;"<>,.?/-' + password=$(tr -dc "$chars" >"$dir/password-plaintext" + fi + + # sha512 + # 以下系统均支持 sha512 密码，但是生成密码需要不同的工具 + # 兼容性 openssl mkpasswd busybox python + # centos 7 × 只有expect的 需要编译 √ + # centos 8 √ 只有expect的 + # debian 9 × √ + # ubuntu 16 × √ + # alpine √ 可能系统装了expect √ + # cygwin √ + # others √ + + # alpine + if is_have_cmd busybox && busybox mkpasswd --help 2>&1 | grep -wq sha512; then + crypted=$(printf '%s' "$password" | busybox mkpasswd -m sha512) + # others + elif install_pkg openssl && openssl passwd --help 2>&1 | grep -wq '\-6'; then + crypted=$(printf '%s' "$password" | openssl passwd -6 -stdin) + # debian 9 / ubuntu 16 + elif is_have_cmd apt-get && install_pkg whois && mkpasswd -m help | grep -wq sha-512; then + crypted=$(printf '%s' "$password" | mkpasswd -m sha-512 --stdin) + # centos 7 + # crypt.mksalt 是 python3 的 + # 红帽把它 backport 到了 centos7 的 python2 上 + # 在其它发行版的 python2 上运行会出错 + elif is_have_cmd yum && is_have_cmd python2; then + crypted=$(python2 -c "import crypt, sys; print(crypt.crypt(sys.argv[1], crypt.mksalt(crypt.METHOD_SHA512)))" "$password") + else + error_and_exit "Could not generate sha512 password." + fi + echo "$crypted" >"$dir/password-linux-sha512" + + # yescrypt + # 旧系统不支持，先不管 + if false; then + if mkpasswd -m help | grep -wq yescrypt; then + crypted=$(printf '%s' "$password" | mkpasswd -m yescrypt --stdin) + echo "$crypted" >"$dir/password-linux-yescrypt" + fi + fi + + # windows + if [ "$distro" = windows ] || [ "$distro" = dd ]; then + install_pkg iconv + + # 要分两行写，因为 echo "$(xxx)" 返回值始终为 0，出错也不会中断脚本 + # grep . 为了保证脚本没有出错 + base64=$(printf '%s' "${password}Password" | iconv -f UTF-8 -t UTF-16LE | base64 -w 0 | grep .) + echo "$base64" >"$dir/password-windows-user-base64" + + base64=$(printf '%s' "${password}AdministratorPassword" | iconv -f UTF-8 -t UTF-16LE | base64 -w 0 | grep .) + echo "$base64" >"$dir/password-windows-administrator-base64" + fi +} + +# 记录主硬盘 +find_main_disk() { + if [ -n "$main_disk" ]; then + return + fi + + if is_in_windows; then + # TODO: + # 已测试 vista + # 测试 软raid + # 测试 动态磁盘 + + # diskpart 命令结果 + # 磁盘 ID: E5FDE61C + # 磁盘 ID: {92CF6564-9B2E-4348-A3BD-D84E3507EBD7} + main_disk=$(printf "%s\n%s" "select volume $c" "uniqueid disk" | diskpart | + tail -1 | awk '{print $NF}' | sed 's,[{}],,g') + else + # centos7下测试 lsblk --inverse $mapper | grep -w disk grub2-probe -t disk / + # 跨硬盘btrfs 只显示第一个硬盘 显示两个硬盘 + # 跨硬盘lvm 显示两个硬盘 显示/dev/mapper/centos-root + # 跨硬盘软raid 显示两个硬盘 显示/dev/md127 + + # 还有 findmnt + + # 改成先检测 /boot/efi /efi /boot 分区？ + + install_pkg lsblk + # 查找主硬盘时，优先查找 /boot 分区，再查找 / 分区 + # lvm 显示的是 /dev/mapper/xxx-yyy，再用第二条命令得到sda + mapper=$(mount | awk '$3=="/boot" {print $1}' | grep . || mount | awk '$3=="/" {print $1}') + xda=$(lsblk -rn --inverse $mapper | grep -w disk | awk '{print $1}' | sort -u) + + # 检测主硬盘是否横跨多个磁盘 + os_across_disks_count=$(wc -l <<<"$xda") + if [ $os_across_disks_count -eq 1 ]; then + info "Main disk: $xda" + else + error_and_exit "OS across $os_across_disks_count disk: $xda" + fi + + # 可以用 dd 找出 guid? + + # centos7 blkid lsblk 不显示 PTUUID + # centos7 sfdisk 不显示 Disk identifier + # alpine blkid 不显示 gpt 分区表的 PTUUID + # 因此用 fdisk + + # Disk identifier: 0x36778223 # gnu fdisk + mbr + # Disk identifier: D6B17C1A-FA1E-40A1-BDCB-0278A3ED9CFC # gnu fdisk + gpt + # Disk identifier (GUID): d6b17c1a-fa1e-40a1-bdcb-0278a3ed9cfc # busybox fdisk + gpt + # 不显示 Disk identifier # busybox fdisk + mbr + + # 获取 xda 的 id + install_pkg fdisk + main_disk=$(fdisk -l /dev/$xda | grep 'Disk identifier' | awk '{print $NF}' | sed 's/0x//') + fi + + # 检查 id 格式是否正确 + if ! grep -Eix '[0-9a-f]{8}' <<<"$main_disk" && + ! grep -Eix '[0-9a-f-]{36}' <<<"$main_disk"; then + error_and_exit "Disk ID is invalid: $main_disk" + fi +} + +is_found_ipv4_netconf() { + [ -n "$ipv4_mac" ] && [ -n "$ipv4_addr" ] && [ -n "$ipv4_gateway" ] +} + +is_found_ipv6_netconf() { + [ -n "$ipv6_mac" ] && [ -n "$ipv6_addr" ] && [ -n "$ipv6_gateway" ] +} + +# TODO: 单网卡多IP +collect_netconf() { + if is_in_windows; then + convert_net_str_to_array() { + config=$1 + key=$2 + var=$3 + IFS=',' read -r -a "${var?}" <<<"$(grep "$key=" <<<"$config" | cut -d= -f2 | sed 's/[{}\"]//g')" + } + + # 部分机器精简了 powershell + # 所以不要用 powershell 获取网络信息 + # ids=$(wmic nic where "PhysicalAdapter=true and MACAddress is not null and (PNPDeviceID like '%VEN_%&DEV_%' or PNPDeviceID like '%{F8615163-DF3E-46C5-913F-F2D2F965ED0E}%')" get InterfaceIndex | sed '1d') + + # 否 手动 0 0.0.0.0/0 19 192.168.1.1 + # 否 手动 0 0.0.0.0/0 59 nekoray-tun + + # wmic nic: + # 真实网卡 + # AdapterType=以太网 802.3 + # AdapterTypeId=0 + # MACAddress=68:EC:C5:11:11:11 + # PhysicalAdapter=TRUE + # PNPDeviceID=PCI\VEN_8086&DEV_095A&SUBSYS_94108086&REV_61\4&295A4BD&1&00E0 + + # VPN tun 网卡，部分移动云电脑也有 + # AdapterType= + # AdapterTypeId= + # MACAddress= + # PhysicalAdapter=TRUE + # PNPDeviceID=SWD\WINTUN\{6A460D48-FB76-6C3F-A47D-EF97D3DC6B0E} + + # VMware 网卡 + # AdapterType=以太网 802.3 + # AdapterTypeId=0 + # MACAddress=00:50:56:C0:00:08 + # PhysicalAdapter=TRUE + # PNPDeviceID=ROOT\VMWARE\0001 + + for v in 4 6; do + if [ "$v" = 4 ]; then + # 或者 route print + routes=$(netsh int ipv4 show route | awk '$4 == "0.0.0.0/0"') + else + routes=$(netsh int ipv6 show route | awk '$4 == "::/0"') + fi + + if [ -z "$routes" ]; then + continue + fi + + while read -r route; do + if false; then + read -r _ _ _ _ id gateway <<<"$route" + else + id=$(awk '{print $5}' <<<"$route") + gateway=$(awk '{print $6}' <<<"$route") + fi + + config=$(wmic nicconfig where InterfaceIndex=$id get MACAddress,IPAddress,IPSubnet,DefaultIPGateway) + # 排除 IP/子网/网关/MAC 为空的 + if grep -q '=$' <<<"$config"; then + continue + fi + + mac_addr=$(grep "MACAddress=" <<<"$config" | cut -d= -f2 | to_lower) + convert_net_str_to_array "$config" IPAddress ips + convert_net_str_to_array "$config" IPSubnet subnets + convert_net_str_to_array "$config" DefaultIPGateway gateways + + # IPv4 + # shellcheck disable=SC2154 + if [ "$v" = 4 ]; then + for ((i = 0; i < ${#ips[@]}; i++)); do + ip=${ips[i]} + subnet=${subnets[i]} + if [[ "$ip" = *.* ]]; then + # ipcalc 依赖 perl，会使 cygwin 增加 ~50M + # cidr=$(ipcalc -b "$ip/$subnet" | grep Netmask: | awk '{print $NF}') + cidr=$(mask2cidr "$subnet") + ipv4_addr="$ip/$cidr" + ipv4_gateway="$gateway" + ipv4_mac="$mac_addr" + # 只取第一个 IP + break + fi + done + fi + + # IPv6 + if [ "$v" = 6 ]; then + ipv6_type_list=$(netsh interface ipv6 show address $id normal) + for ((i = 0; i < ${#ips[@]}; i++)); do + ip=${ips[i]} + cidr=${subnets[i]} + if [[ "$ip" = *:* ]]; then + ipv6_type=$(grep "$ip" <<<"$ipv6_type_list" | awk '{print $1}') + # Public 是 slaac + # 还有类型 Temporary，不过有 Temporary 肯定还有 Public，因此不用 + if [ "$ipv6_type" = Public ] || + [ "$ipv6_type" = Dhcp ] || + [ "$ipv6_type" = Manual ]; then + ipv6_addr="$ip/$cidr" + ipv6_gateway="$gateway" + ipv6_mac="$mac_addr" + # 只取第一个 IP + break + fi + fi + done + fi + + # 网关 + # shellcheck disable=SC2154 + if false; then + for gateway in "${gateways[@]}"; do + if [ -n "$ipv4_addr" ] && [[ "$gateway" = *.* ]]; then + ipv4_gateway="$gateway" + elif [ -n "$ipv6_addr" ] && [[ "$gateway" = *:* ]]; then + ipv6_gateway="$gateway" + fi + done + fi + + # 如果通过本条 route 的网卡找到了 IP 则退出 routes 循环 + if is_found_ipv${v}_netconf; then + break + fi + done < <(echo "$routes") + done + else + # linux + # 通过默认网关得到默认网卡 + + # 多个默认路由下 + # ip -6 route show default dev ens3 完全不显示 + + # ip -6 route show default + # default proto static metric 1024 pref medium + # nexthop via 2a01:1111:262:4940::2 dev ens3 weight 1 onlink + # nexthop via fe80::5054:ff:fed4:5286 dev ens3 weight 1 + + # ip -6 route show default + # default via 2602:1111:0:80::1 dev eth0 metric 1024 onlink pref medium + + # arch + vultr + # ip -6 route show default + # default nhid 4011550343 via fe80::fc00:5ff:fe3d:2714 dev enp1s0 proto ra metric 1024 expires 1504sec pref medium + + for v in 4 6; do + if via_gateway_dev_ethx=$(ip -$v route show default | grep -Ewo 'via [^ ]+ dev [^ ]+' | head -1 | grep .); then + read -r _ gateway _ ethx <<<"$via_gateway_dev_ethx" + eval ipv${v}_ethx="$ethx" # can_use_cloud_kernel 要用 + eval ipv${v}_mac="$(ip link show dev $ethx | grep link/ether | head -1 | awk '{print $2}')" + eval ipv${v}_gateway="$gateway" + eval ipv${v}_addr="$(ip -$v -o addr show scope global dev $ethx | grep -v temporary | head -1 | awk '{print $4}')" + fi + done + fi + + if ! is_found_ipv4_netconf && ! is_found_ipv6_netconf; then + error_and_exit "Can not get IP info." + fi + + info "Network Info" + echo "IPv4 MAC: $ipv4_mac" + echo "IPv4 Address: $ipv4_addr" + echo "IPv4 Gateway: $ipv4_gateway" + echo "---" + echo "IPv6 MAC: $ipv6_mac" + echo "IPv6 Address: $ipv6_addr" + echo "IPv6 Gateway: $ipv6_gateway" + echo +} + +add_efi_entry_in_windows() { + source=$1 + + # 挂载 + if result=$(find /cygdrive/?/EFI/Microsoft/Boot/bootmgfw.efi 2>/dev/null); then + # 已经挂载 + x=$(echo $result | cut -d/ -f3) + else + # 找到空盘符并挂载 + for x in {a..z}; do + [ ! -e /cygdrive/$x ] && break + done + mountvol $x: /s + fi + + # 文件夹命名为reinstall而不是grub，因为可能机器已经安装了grub，bcdedit名字同理 + dist_dir=/cygdrive/$x/EFI/reinstall + basename=$(basename $source) + mkdir -p $dist_dir + cp -f "$source" "$dist_dir/$basename" + + # 如果 {fwbootmgr} displayorder 为空 + # 执行 bcdedit /copy '{bootmgr}' 会报错 + # 例如 azure windows 2016 模板 + # 要先设置默认的 {fwbootmgr} displayorder + # https://github.com/hakuna-m/wubiuefi/issues/286 + bcdedit /set '{fwbootmgr}' displayorder '{bootmgr}' /addfirst + + # 添加启动项 + id=$(bcdedit /copy '{bootmgr}' /d "$(get_entry_name)" | grep -o '{.*}') + bcdedit /set $id device partition=$x: + bcdedit /set $id path \\EFI\\reinstall\\$basename + bcdedit /set '{fwbootmgr}' bootsequence $id +} + +get_maybe_efi_dirs_in_linux() { + # arch云镜像efi分区挂载在/efi，且使用 autofs，挂载后会有两个 /efi 条目 + # openEuler 云镜像 boot 分区是 vfat 格式，但 vfat 可以当 efi 分区用 + # TODO: 最好通过 lsblk/blkid 检查是否为 efi 分区类型 + mount | awk '$5=="vfat" || $5=="autofs" {print $3}' | grep -E '/boot|/efi' | sort -u +} + +get_disk_by_part() { + dev_part=$1 + install_pkg lsblk >&2 + lsblk -rn --inverse "$dev_part" | grep -w disk | awk '{print $1}' +} + +get_part_num_by_part() { + dev_part=$1 + grep -oE '[0-9]*$' <<<"$dev_part" +} + +grep_efi_entry() { + # efibootmgr + # BootCurrent: 0002 + # Timeout: 1 seconds + # BootOrder: 0000,0002,0003,0001 + # Boot0000* sles-secureboot + # Boot0001* CD/DVD Rom + # Boot0002* Hard Disk + # Boot0003* sles-secureboot + # MirroredPercentageAbove4G: 0.00 + # MirrorMemoryBelow4GB: false + + # 根据文档，* 表示 active，也就是说有可能没有*(代表inactive) + # https://manpages.debian.org/testing/efibootmgr/efibootmgr.8.en.html + grep -E '^Boot[0-9a-fA-F]{4}' +} + +# trans.sh 有同名方法 +grep_efi_index() { + awk '{print $1}' | sed -e 's/Boot//' -e 's/\*//' +} + +add_efi_entry_in_linux() { + source=$1 + + install_pkg efibootmgr + + for efi_part in $(get_maybe_efi_dirs_in_linux); do + if find $efi_part -iname "*.efi" >/dev/null; then + dist_dir=$efi_part/EFI/reinstall + basename=$(basename $source) + mkdir -p $dist_dir + + if [[ "$source" = http* ]]; then + curl -Lo "$dist_dir/$basename" "$source" + else + cp -f "$source" "$dist_dir/$basename" + fi + + if false; then + grub_probe="$(command -v grub-probe grub2-probe)" + dev_part="$("$grub_probe" -t device "$dist_dir")" + else + install_pkg findmnt + # arch findmnt 会得到 + # systemd-1 + # /dev/sda2 + dev_part=$(findmnt -T "$dist_dir" -no SOURCE | grep '^/dev/') + fi + + id=$(efibootmgr --create-only \ + --disk "/dev/$(get_disk_by_part $dev_part)" \ + --part "$(get_part_num_by_part $dev_part)" \ + --label "$(get_entry_name)" \ + --loader "\\EFI\\reinstall\\$basename" | + grep_efi_entry | tail -1 | grep_efi_index) + efibootmgr --bootnext $id + return + fi + done + + error_and_exit "Can't find efi partition." +} + +get_grub_efi_filename() { + case "$basearch" in + x86_64) echo grubx64.efi ;; + aarch64) echo grubaa64.efi ;; + esac +} + +install_grub_linux_efi() { + info 'download grub efi' + + # fedora 39 的 efi 无法识别 opensuse tumbleweed 的 xfs + efi_distro=opensuse + + grub_efi=$(get_grub_efi_filename) + + # 不要用 download.opensuse.org 和 download.fedoraproject.org + # 因为 ipv6 访问有时跳转到 ipv4 地址，造成 ipv6 only 机器无法下载 + # 日韩机器有时得到国内镜像源，但镜像源屏蔽了国外 IP 导致连不上 + # https://mirrors.bfsu.edu.cn/opensuse/ports/aarch64/tumbleweed/repo/oss/EFI/BOOT/grub.efi + + # fcix 经常 404 + # https://mirror.fcix.net/opensuse/tumbleweed/repo/oss/EFI/BOOT/bootx64.efi + # https://mirror.fcix.net/opensuse/tumbleweed/appliances/openSUSE-Tumbleweed-Minimal-VM.x86_64-Cloud.qcow2 + + # dl.fedoraproject.org 不支持 ipv6 + + if [ "$efi_distro" = fedora ]; then + # fedora 43 efi 在 vultr 无法引导 debain 9/10 netboot + fedora_ver=$(get_latest_distro_releasever fedora) + + if is_in_china; then + mirror=https://mirror.nju.edu.cn/fedora + else + mirror=https://d2lzkl7pfhq30w.cloudfront.net/pub/fedora/linux + fi + + curl -Lo $tmp/$grub_efi $mirror/releases/$fedora_ver/Everything/$basearch/os/EFI/BOOT/$grub_efi + else + if is_in_china; then + mirror=https://mirror.nju.edu.cn/opensuse + else + mirror=https://downloadcontentcdn.opensuse.org + fi + + [ "$basearch" = x86_64 ] && ports='' || ports=/ports/$basearch + + curl -Lo $tmp/$grub_efi $mirror$ports/tumbleweed/repo/oss/EFI/BOOT/grub.efi + fi + + add_efi_entry_in_linux $tmp/$grub_efi +} + +download_and_extract_apk() { + local alpine_ver=$1 + local package=$2 + local extract_dir=$3 + + install_pkg tar xz + is_in_china && mirror=http://mirror.nju.edu.cn/alpine || mirror=https://dl-cdn.alpinelinux.org/alpine + package_apk=$(curl -L $mirror/v$alpine_ver/main/$basearch/ | grep -oP "$package-[^-]*-[^-]*\.apk" | sort -u) + if ! [ "$(wc -l <<<"$package_apk")" -eq 1 ]; then + error_and_exit "find no/multi apks." + fi + mkdir -p "$extract_dir" + + # 屏蔽警告 + tar 2>&1 | grep -q BusyBox && tar_args= || tar_args=--warning=no-unknown-keyword + curl -L "$mirror/v$alpine_ver/main/$basearch/$package_apk" | tar xz $tar_args -C "$extract_dir" +} + +install_grub_win() { + # 下载 grub + info download grub + grub_ver=2.06 + # ftpmirror.gnu.org 是 geoip 重定向，不是 cdn + # 有可能重定义到一个拉黑了部分 IP 的服务器 + is_in_china && grub_url=https://mirror.nju.edu.cn/gnu/grub/grub-$grub_ver-for-windows.zip || + grub_url=https://mirrors.kernel.org/gnu/grub/grub-$grub_ver-for-windows.zip + curl -Lo $tmp/grub.zip $grub_url + # unzip -qo $tmp/grub.zip + 7z x $tmp/grub.zip -o$tmp -r -y -xr!i386-efi -xr!locale -xr!themes -bso0 + grub_dir=$tmp/grub-$grub_ver-for-windows + grub=$grub_dir/grub + + # 设置 grub 包含的模块 + # 原系统是 windows，因此不需要 ext2 lvm xfs btrfs + grub_modules+=" normal minicmd serial ls echo test cat reboot halt linux chain search all_video configfile" + grub_modules+=" scsi part_msdos part_gpt fat ntfs ntfscomp lzopio xzio gzio zstd" + if ! is_efi; then + grub_modules+=" biosdisk linux16" + fi + + # 设置 grub prefix 为c盘根目录 + # 运行 grub-probe 会改变cmd窗口字体 + prefix=$($grub-probe -t drive $c: | sed 's|.*PhysicalDrive|(hd|' | del_cr)/ + echo $prefix + + # 安装 grub + if is_efi; then + # efi + info install grub for efi + + case "$basearch" in + x86_64) grub_arch=x86_64 ;; + aarch64) grub_arch=arm64 ;; + esac + + # 下载 grub arm64 模块 + if ! [ -d $grub_dir/grub/$grub_arch-efi ]; then + # 3.20 是 grub 2.12，可能会有问题 + alpine_ver=3.19 + download_and_extract_apk $alpine_ver grub-efi $tmp/grub-efi + cp -r $tmp/grub-efi/usr/lib/grub/$grub_arch-efi/ $grub_dir + fi + + grub_efi=$(get_grub_efi_filename) + $grub-mkimage -p $prefix -O $grub_arch-efi -o "$(cygpath -w "$grub_dir/$grub_efi")" $grub_modules + add_efi_entry_in_windows "$grub_dir/$grub_efi" + else + # bios + info install grub for bios + + # bootmgr 加载 g2ldr 有大小限制 + # 超过大小会报错 0xc000007b + # 解决方法1 g2ldr.mbr + g2ldr + # 解决方法2 生成少于64K的 g2ldr + 动态模块 + if false; then + # g2ldr.mbr + # 部分国内机无法访问 ftp.cn.debian.org + is_in_china && host=mirror.nju.edu.cn || host=deb.debian.org + curl -LO http://$host/debian/tools/win32-loader/stable/win32-loader.exe + 7z x win32-loader.exe 'g2ldr.mbr' -o$tmp/win32-loader -r -y -bso0 + find $tmp/win32-loader -name 'g2ldr.mbr' -exec cp {} /cygdrive/$c/ \; + + # g2ldr + # 配置文件 c:\grub.cfg + $grub-mkimage -p "$prefix" -O i386-pc -o "$(cygpath -w $grub_dir/core.img)" $grub_modules + cat $grub_dir/i386-pc/lnxboot.img $grub_dir/core.img >/cygdrive/$c/g2ldr + else + # grub-install 无法设置 prefix + # 配置文件 c:\grub\grub.cfg + $grub-install $c \ + --target=i386-pc \ + --boot-directory=$c: \ + --install-modules="$grub_modules" \ + --themes= \ + --fonts= \ + --no-bootsector + + cat $grub_dir/i386-pc/lnxboot.img /cygdrive/$c/grub/i386-pc/core.img >/cygdrive/$c/g2ldr + fi + + # 添加引导 + # 脚本可能不是首次运行，所以先删除原来的 + id='{1c41f649-1637-52f1-aea8-f96bfebeecc8}' + bcdedit /enum all | grep --text $id && bcdedit /delete $id + bcdedit /create $id /d "$(get_entry_name)" /application bootsector + bcdedit /set $id device partition=$c: + bcdedit /set $id path \\g2ldr + bcdedit /displayorder $id /addlast + bcdedit /bootsequence $id /addfirst + fi +} + +find_grub_extlinux_cfg() { + dir=$1 + filename=$2 + keyword=$3 + + # 当 ln -s /boot/grub /boot/grub2 时 + # find /boot/ 会自动忽略 /boot/grub2 里面的文件 + cfgs=$( + # 只要 $dir 存在 + # 无论是否找到结果，返回值都是 0 + find $dir \ + -type f -name $filename \ + -exec grep -E -l "$keyword" {} \; + ) + + count="$(wc -l <<<"$cfgs")" + if [ "$count" -eq 1 ]; then + echo "$cfgs" + else + error_and_exit "Find $count $filename." + fi +} + +# 空格、&、用户输入的网址要加引号，否则 grub 无法正确识别 +is_need_quote() { + [[ "$1" = *' '* ]] || [[ "$1" = *'&'* ]] || [[ "$1" = http* ]] +} + +# 转换 finalos_a=1 为 finalos.a=1 ，排除 finalos_mirrorlist +build_finalos_cmdline() { + if vars=$(compgen -v finalos_); then + for key in $vars; do + value=${!key} + key=${key#finalos_} + if [ -n "$value" ] && [ $key != "mirrorlist" ]; then + is_need_quote "$value" && + finalos_cmdline+=" finalos_$key='$value'" || + finalos_cmdline+=" finalos_$key=$value" + fi + done + fi +} + +build_extra_cmdline() { + # 使用 extra_xxx=yyy 而不是 extra.xxx=yyy + # 因为 debian installer /lib/debian-installer-startup.d/S02module-params + # 会将 extra.xxx=yyy 写入新系统的 /etc/modprobe.d/local.conf + # https://answers.launchpad.net/ubuntu/+question/249456 + # https://salsa.debian.org/installer-team/rootskel/-/blob/master/src/lib/debian-installer-startup.d/S02module-params?ref_type=heads + for key in confhome hold force_boot_mode force_cn force_old_windows_setup cloud_image main_disk \ + elts deb_mirror \ + ssh_port rdp_port web_port allow_ping; do + value=${!key} + if [ -n "$value" ]; then + is_need_quote "$value" && + extra_cmdline+=" extra_$key='$value'" || + extra_cmdline+=" extra_$key=$value" + fi + done + + # 指定最终安装系统的 mirrorlist，链接有&，在grub中是特殊字符，所以要加引号 + if [ -n "$finalos_mirrorlist" ]; then + extra_cmdline+=" extra_mirrorlist='$finalos_mirrorlist'" + elif [ -n "$nextos_mirrorlist" ]; then + extra_cmdline+=" extra_mirrorlist='$nextos_mirrorlist'" + fi + + # cloudcone 特殊处理 + if is_grub_dir_linked; then + finalos_cmdline+=" extra_link_grub_dir=1" + fi +} + +echo_tmp_ttys() { + if false; then + curl -L $confhome/ttys.sh | sh -s "console=" + else + case "$basearch" in + x86_64) echo "console=ttyS0,115200n8 console=tty0" ;; + aarch64) echo "console=ttyS0,115200n8 console=ttyAMA0,115200n8 console=tty0" ;; + esac + fi +} + +get_entry_name() { + printf 'reinstall (' + printf '%s' "$distro" + [ -n "$releasever" ] && printf ' %s' "$releasever" + [ "$distro" = alpine ] && [ "$hold" = 1 ] && printf ' Live OS' + printf ')' +} + +# shellcheck disable=SC2154 +build_nextos_cmdline() { + if [ $nextos_distro = alpine ]; then + nextos_cmdline="alpine_repo=$nextos_repo modloop=$nextos_modloop" + elif is_distro_like_debian $nextos_distro; then + # 设置分辨率为800*600，防止分辨率过高 ssh screen attach 后无法全部显示 + # iso 默认有 vga=788 + # 如果要设置位数: video=800x600-16 + nextos_cmdline="lowmem/low=1 auto=true priority=critical" + # nextos_cmdline+=" vga=788 video=800x600" + nextos_cmdline+=" url=$nextos_ks" + nextos_cmdline+=" mirror/http/hostname=${nextos_udeb_mirror%/*}" + nextos_cmdline+=" mirror/http/directory=/${nextos_udeb_mirror##*/}" + nextos_cmdline+=" base-installer/kernel/image=$nextos_kernel" + # elts 的 debian 不能用 security 源，否则安装过程会提示无法访问 + if [ "$nextos_distro" = debian ] && is_debian_elts; then + nextos_cmdline+=" apt-setup/services-select=" + fi + # kali 安装好后网卡是 eth0 这种格式，但安装时不是 + if [ "$nextos_distro" = kali ]; then + nextos_cmdline+=" net.ifnames=0" + nextos_cmdline+=" simple-cdd/profiles=kali" + fi + elif is_distro_like_redhat $nextos_distro; then + # redhat + nextos_cmdline="root=live:$nextos_squashfs inst.ks=$nextos_ks" + fi + + if is_distro_like_debian $nextos_distro; then + if [ "$basearch" = "x86_64" ]; then + # debian installer 好像第一个 tty 是主 tty + # 设置ttyS0,tty0,安装界面还是显示在ttyS0 + : + else + # debian arm 在没有ttyAMA0的机器上（aws t4g），最少要设置一个tty才能启动 + # 只设置tty0也行，但安装过程ttyS0没有显示 + nextos_cmdline+=" $(echo_tmp_ttys)" + fi + else + nextos_cmdline+=" $(echo_tmp_ttys)" + fi + # nextos_cmdline+=" mem=256M" + # nextos_cmdline+=" lowmem=+1" +} + +build_cmdline() { + # nextos + build_nextos_cmdline + + # finalos + # trans 需要 finalos_distro 识别是安装 alpine 还是其他系统 + if [ "$distro" = alpine ]; then + finalos_distro=alpine + fi + if [ -n "$finalos_distro" ]; then + build_finalos_cmdline + fi + + # extra + build_extra_cmdline + + cmdline="$nextos_cmdline $finalos_cmdline $extra_cmdline" +} + +# 脚本可能多次运行，先清理之前的残留 +mkdir_clear() { + dir=$1 + + if [ -z "$dir" ] || [ "$dir" = / ]; then + return + fi + + # 再次运行时，有可能 mount 了 btrfs root，因此先要 umount_all + # 但目前不需要 mount ，因此用不到 + # umount_all "$dir" + rm -rf "$dir" + mkdir -p "$dir" +} + +mod_initrd_debian_kali() { + # hack 1 + # 允许设置 ipv4 onlink 网关 + sed -Ei 's,&&( onlink=),||\1,' etc/udhcpc/default.script + + # hack 2 + # 强制使用 screen + # shellcheck disable=SC1003,SC2016 + { + echo 'if false && : \' | insert_into_file lib/debian-installer.d/S70menu before 'if [ -x "$bterm" ]' -F + echo 'if true || : \' | insert_into_file lib/debian-installer.d/S70menu before 'if [ -x "$screen_bin" -a' -F + } + + # hack 3 + # 修改 /var/lib/dpkg/info/netcfg.postinst 运行我们的脚本 + netcfg() { + #!/bin/sh + # shellcheck source=/dev/null + . /usr/share/debconf/confmodule + db_progress START 0 5 debian-installer/netcfg/title + + : get_ip_conf_cmd + + # 运行 trans.sh，保存配置 + db_progress INFO base-installer/progress/netcfg + # 添加 || exit ，可以在 debian installer 不兼容 /trans.sh 语法时强制报错 + # exit 不带参数，返回值为 || 前面命令的返回值 + sh /trans.sh || exit + db_progress STEP 1 + db_progress STOP + } + + postinst=var/lib/dpkg/info/netcfg.postinst + get_function_content netcfg >$postinst + get_ip_conf_cmd | insert_into_file $postinst after ": get_ip_conf_cmd" + # cat $postinst + + # hack 4 + # 修改 udeb 依赖 + + # 直接覆盖 net-retriever，方便调试 + # curl -Lo /usr/lib/debian-installer/retriever/net-retriever $confhome/net-retriever + + change_priority() { + while IFS= read -r line; do + if [[ "$line" = Package:* ]]; then + package=$(echo "$line" | cut -d' ' -f2-) + + elif [[ "$line" = Priority:* ]]; then + # shellcheck disable=SC2154 + if [ "$line" = "Priority: standard" ]; then + for p in $disabled_list; do + if [ "$package" = "$p" ]; then + line="Priority: optional" + break + fi + done + elif [[ "$package" = ata-modules* ]]; then + # 改成强制安装 + # 因为是 pata-modules sata-modules scsi-modules 的依赖 + # 但我们没安装它们，也就不会自动安装 ata-modules + line="Priority: standard" + fi + fi + echo "$line" + done + } + + # shellcheck disable=SC2012 + kver=$(ls -d lib/modules/* | awk -F/ '{print $NF}') + + net_retriever=usr/lib/debian-installer/retriever/net-retriever + # shellcheck disable=SC2016 + sed -i 's,>> "$1",| change_priority >> "$1",' $net_retriever + insert_into_file $net_retriever after '#!/bin/sh' <$deb_list + fi + + # 下载 deb/udeb + deb_path=$(grep -F "/${package}_" "$deb_list") + curl -Lo $tmp/tmp.deb http://$mirror/"$deb_path" + + if false; then + # 使用 dpkg + # cygwin 没有 dpkg + install_pkg dpkg + dpkg -x $tmp/tmp.deb $extract_dir + else + # 使用 ar tar xz + # cygwin 需安装 binutils + # centos7 ar 不支持 --output + install_pkg ar tar xz + (cd $tmp && ar x $tmp/tmp.deb) + tar xf $tmp/data.tar.xz -C $extract_dir + fi + } + + # 不用在 windows 判断是哪种硬盘控制器，因为 256M 运行 windows 只可能是 xp，而脚本本来就不支持 xp + # 在 debian installer 中判断能否用云内核 + create_can_use_cloud_kernel_sh can_use_cloud_kernel.sh + + # 下载 fix-eth-name 脚本 + curl -LO "$confhome/fix-eth-name.sh" + curl -LO "$confhome/fix-eth-name.service" + + # 有段时间 kali initrd 删除了原版 wget + # 但 initrd 的 busybox wget 又不支持 https + # 因此改成在这里下载 + curl -LO "$confhome/get-xda.sh" + curl -LO "$confhome/ttys.sh" + if [ -n "$frpc_config" ]; then + curl -LO "$confhome/get-frpc-url.sh" + curl -LO "$confhome/frpc.service" + fi + + # 可以节省一点内存？ + echo 'export DEBCONF_DROP_TRANSLATIONS=1' | + insert_into_file lib/debian-installer/menu before 'exec debconf' + + # 还原 kali netinst.iso 的 simple-cdd 机制 + # 主要用于调用 kali.postinst 设置 zsh 为默认 shell + # 但 mini.iso 又没有这种机制 + # https://gitlab.com/kalilinux/build-scripts/kali-live/-/raw/main/kali-config/common/includes.installer/kali-finish-install?ref_type=heads + # https://salsa.debian.org/debian/simple-cdd/-/blob/master/debian/14simple-cdd?ref_type=heads + # https://http.kali.org/pool/main/s/simple-cdd/simple-cdd-profiles_0.6.9_all.udeb + if [ "$distro" = kali ]; then + # 但我们没有使用 iso，因此没有 kali.postinst，需要另外下载 + mkdir -p cdrom/simple-cdd + curl -Lo cdrom/simple-cdd/kali.postinst https://gitlab.com/kalilinux/build-scripts/kali-live/-/raw/main/kali-config/common/includes.installer/kali-finish-install?ref_type=heads + chmod a+x cdrom/simple-cdd/kali.postinst + fi + + if [ "$distro" = debian ] && is_debian_elts; then + curl -Lo usr/share/keyrings/debian-archive-keyring.gpg https://deb.freexian.com/extended-lts/archive-key.gpg + fi + + # 提前下载 sshd + # 以便在配置下载源之前就可以启动 sshd + mkdir_clear $tmp/sshd + download_and_extract_deb udeb openssh-server-udeb $tmp/sshd + cp -r $tmp/sshd/* . + + # 提前下载 fdisk + # 因为 fdisk-udeb 包含 fdisk 和 sfdisk，提前下载可减少占用 + mkdir_clear $tmp/fdisk + download_and_extract_deb udeb fdisk-udeb $tmp/fdisk + cp -f $tmp/fdisk/usr/sbin/fdisk usr/sbin/ + + # 下载 websocketd + # debian 11+ 才有 websocketd + if [ "$distro" = kali ] || + { [ "$distro" = debian ] && [ "$releasever" -ge 11 ]; }; then + mkdir_clear $tmp/websocketd + download_and_extract_deb deb websocketd $tmp/websocketd + cp -f $tmp/websocketd/usr/bin/websocketd usr/bin/ + fi + + # >256M 或者当前系统是 windows + if [ $ram_size -gt 256 ] || is_in_windows; then + sed -i '/^pata-modules/d' $net_retriever + sed -i '/^sata-modules/d' $net_retriever + sed -i '/^scsi-modules/d' $net_retriever + else + # <=256M 极限优化 + find_main_disk + extra_drivers= + for driver in $(get_disk_drivers $xda); do + echo "using driver: $driver" + case $driver in + nvme) extra_drivers+=" nvme nvme-core" ;; + # xen 的横杠特别不同 + xen_blkfront) extra_drivers+=" xen-blkfront" ;; + xen_scsifront) extra_drivers+=" xen-scsifront" ;; + virtio_blk | virtio_scsi | hv_storvsc | vmw_pvscsi) extra_drivers+=" $driver" ;; + pata_legacy) sed -i '/^pata-modules/d' $net_retriever ;; # 属于 pata-modules + ata_piix) sed -i '/^sata-modules/d' $net_retriever ;; # 属于 sata-modules + ata_generic) ;; # 属于 ata-modules，不用处理，因为我们设置强制安装了 ata-modules + esac + done + + # extra drivers + # xen 还需要以下两个？ + # kernel/drivers/xen/xen-scsiback.ko + # kernel/drivers/block/xen-blkback/xen-blkback.ko + # 但反查也找不到 curl https://deb.debian.org/debian/dists/bookworm/main/Contents-udeb-amd64.gz | zcat | grep xen + if [ -n "$extra_drivers" ]; then + mkdir_clear $tmp/scsi + download_and_extract_deb udeb scsi-modules-$kver-di $tmp/scsi + relative_drivers_dir=lib/modules/$kver/kernel/drivers + + udeb_drivers_dir=$tmp/scsi/$relative_drivers_dir + dist_drivers_dir=$initrd_dir/$relative_drivers_dir + ( + cd $udeb_drivers_dir + for driver in $extra_drivers; do + # debian 模块没有压缩 + # kali 模块有压缩 + # 因此要有 * + if ! find $dist_drivers_dir -name "$driver.ko*" | grep -q .; then + echo "adding driver: $driver" + file=$(find . -name "$driver.ko*" | grep .) + cp -fv --parents "$file" "$dist_drivers_dir" + fi + done + ) + fi + fi + + # amd64) + # level1=737 # MT=754108, qemu: -m 780 + # level2=424 # MT=433340, qemu: -m 460 + # min=316 # MT=322748, qemu: -m 350 + + # 将 use_level 2 9 修改为 use_level 1 + # x86 use_level 2 会出现 No root file system is defined. + # arm 即使 use_level 1 也会出现 No root file system is defined. + sed -i 's/use_level=[29]/use_level=1/' lib/debian-installer-startup.d/S15lowmem + + # hack 3 + # 修改 trans.sh + # 1. 直接调用 create_ifupdown_config + # shellcheck disable=SC2154 + insert_into_file $initrd_dir/trans.sh after '^: main' < > + # 5. debian 11/12 initrd 无法识别 < < + # 6. debian 11 initrd 无法识别 set -E + # 7. debian 11 initrd 无法识别 trap ERR + # 8. debian 9 initrd 无法识别 ${string//find/replace} + # 9. debian 12 initrd 无法识别 . <( + # 删除或注释，可能会导致空方法而报错，因此改为替换成'\n: #' + replace='\n: #' + sed -Ei \ + -e "s/> >/$replace/" \ + -e "s/< $1 + $(get_function get_drivers) + $(get_function get_net_drivers) + $(get_function get_disk_drivers) + $(get_function can_use_cloud_kernel) + + can_use_cloud_kernel "\$@" +EOF +} + +get_ip_conf_cmd() { + collect_netconf >&2 + is_in_china && is_in_china=true || is_in_china=false + + sh=/initrd-network.sh + if is_found_ipv4_netconf && is_found_ipv6_netconf && [ "$ipv4_mac" = "$ipv6_mac" ]; then + echo "'$sh' '$ipv4_mac' '$ipv4_addr' '$ipv4_gateway' '$ipv6_addr' '$ipv6_gateway' '$is_in_china'" + else + if is_found_ipv4_netconf; then + echo "'$sh' '$ipv4_mac' '$ipv4_addr' '$ipv4_gateway' '' '' '$is_in_china'" + fi + if is_found_ipv6_netconf; then + echo "'$sh' '$ipv6_mac' '' '' '$ipv6_addr' '$ipv6_gateway' '$is_in_china'" fi fi } -# Parse ssh-key: supports inline / URL / github / gitlab / file -parse_ssh_key() { - local val="$1" - local val_lower key_url tmpfile ssh_key +mod_initrd_alpine() { + # hack 1 v3.19 和之前的 virt 内核需添加 ipv6 模块 + if virt_dir=$(ls -d $initrd_dir/lib/modules/*-virt 2>/dev/null); then + ipv6_dir=$virt_dir/kernel/net/ipv6 + if ! [ -f $ipv6_dir/ipv6.ko ] && ! grep -q ipv6 $initrd_dir/lib/modules/*/modules.builtin; then + mkdir -p $ipv6_dir + modloop_file=$tmp/modloop_file + modloop_dir=$tmp/modloop_dir + curl -Lo $modloop_file $nextos_modloop + if is_in_windows; then + # cygwin 没有 unsquashfs + 7z e $modloop_file ipv6.ko -r -y -o$ipv6_dir + else + install_pkg unsquashfs + mkdir_clear $modloop_dir + unsquashfs -f -d $modloop_dir $modloop_file 'modules/*/kernel/net/ipv6/ipv6.ko' + find $modloop_dir -name ipv6.ko -exec cp {} $ipv6_dir/ \; + fi + fi + fi - ssh_key_error_and_exit() { - error "$1 + # hack 下载 dhcpcd + # shellcheck disable=SC2154 + download_and_extract_apk "$nextos_releasever" dhcpcd "$initrd_dir" + sed -i -e '/^slaac private/s/^/#/' -e '/^#slaac hwaddr/s/^#//' $initrd_dir/etc/dhcpcd.conf + + # hack 2 /usr/share/udhcpc/default.script + # 脚本被调用的顺序 + # udhcpc: deconfig + # udhcpc: bound + # udhcpc6: deconfig + # udhcpc6: bound + # shellcheck disable=SC2317 + udhcpc() { + if [ "$1" = deconfig ]; then + return + fi + if [ "$1" = bound ] && [ -n "$ipv6" ]; then + # shellcheck disable=SC2154 + ip -6 addr add "$ipv6" dev "$interface" + ip link set dev "$interface" up + return + fi + } + + get_function_content udhcpc | + insert_into_file usr/share/udhcpc/default.script after 'deconfig\|renew\|bound' + + # 允许设置 ipv4 onlink 网关 + sed -Ei 's,(0\.0\.0\.0\/0),"\1 onlink",' usr/share/udhcpc/default.script + + # hack 3 网络配置 + # alpine 根据 MAC_ADDRESS 判断是否有网络 + # https://github.com/alpinelinux/mkinitfs/blob/c4c0115f9aa5aa8884c923dc795b2638711bdf5c/initramfs-init.in#L914 + insert_into_file init after 'configure_ip\(\)' <\$sysroot/etc/local.d/trans.start + # wget --no-check-certificate -O \$sysroot/etc/local.d/trans.start $confhome/trans.sh + cp /trans.sh \$sysroot/etc/local.d/trans.start + chmod a+x \$sysroot/etc/local.d/trans.start + ln -s /etc/init.d/local \$sysroot/etc/runlevels/default/ + + # 配置 + 自定义驱动 + for dir in /configs /custom_drivers; do + if [ -d \$dir ]; then + cp -r \$dir \$sysroot/ + rm -rf \$dir + fi + done +EOF + + # 判断云镜像 debain 能否用云内核 + if is_distro_like_debian; then + create_can_use_cloud_kernel_sh can_use_cloud_kernel.sh + insert_into_file init before '^exec (/bin/busybox )?switch_root' <$initrd_dir/configs/ssh_keys + else + save_password $initrd_dir/configs + fi + if [ -n "$frpc_config" ]; then + cat "$frpc_config" >$initrd_dir/configs/frpc.toml + fi + + if is_distro_like_debian $nextos_distro; then + mod_initrd_debian_kali + else + mod_initrd_$nextos_distro + fi + + # 添加自定义 windows 驱动 + if [ "$distro" = windows ] && [ -n "$custom_infs" ]; then + # shellcheck disable=SC1090 + . <(curl -L $confhome/windows-driver-utils.sh) + echo "$custom_infs" | while read -r inf; do + parse_inf_and_cp_driever "$inf" "$initrd_dir/custom_drivers" "$basearch_alt" true + done + fi + + # alpine live 不精简 initrd + # 因为不知道用户想干什么，可能会用到精简的文件 + if is_virt && ! is_alpine_live; then + remove_useless_initrd_files + fi + + if [ "$hold" = 0 ]; then + info 'hold 0' + read -r -p 'Press Enter to continue...' + fi + + # 重建 + # 注意要用 cpio -H newc 不要用 cpio -c ，不同版本的 -c 作用不一样，很坑 + # -c Use the old portable (ASCII) archive format + # -c Identical to "-H newc", use the new (SVR4) + # portable format.If you wish the old portable + # (ASCII) archive format, use "-H odc" instead. + find . | cpio --quiet -o -H newc | gzip -1 >/reinstall-initrd + cd - >/dev/null +} + +remove_useless_initrd_files() { + info "slim initrd" + + # 显示精简前的大小 + du -sh . + + # 删除 initrd 里面没用的文件/驱动 + rm -rf bin/brltty + rm -rf etc/brltty + rm -rf sbin/wpa_supplicant + rm -rf usr/lib/libasound.so.* + rm -rf usr/share/alsa + ( + cd lib/modules/*/kernel/drivers/net/ethernet/ + for item in *; do + case "$item" in + # 甲骨文 arm 用自定义镜像支持设为 mlx5 vf 网卡，且不是 azure 那样显示两个网卡 + # https://debian.pkgs.org/13/debian-main-amd64/linux-image-6.12.43+deb13-cloud-amd64_6.12.43-1_amd64.deb.html + amazon | google | mellanox | realtek | pensando) ;; + intel) + ( + cd "$item" + for sub_item in *; do + case "$sub_item" in + # 有 e100.ko e1000文件夹 e1000e文件夹 + e100* | lib* | *vf | idpf) ;; + *) rm -rf $sub_item ;; + esac + done + ) + ;; + *) rm -rf $item ;; + esac + done + ) + ( + cd lib/modules/*/kernel + for item in \ + net/mac80211 \ + net/wireless \ + net/bluetooth \ + drivers/hid \ + drivers/mmc \ + drivers/mtd \ + drivers/usb \ + drivers/ssb \ + drivers/mfd \ + drivers/bcma \ + drivers/pcmcia \ + drivers/parport \ + drivers/platform \ + drivers/staging \ + drivers/net/usb \ + drivers/net/bonding \ + drivers/net/wireless \ + drivers/input/rmi4 \ + drivers/input/keyboard \ + drivers/input/touchscreen \ + drivers/bus/mhi \ + drivers/char/pcmcia \ + drivers/misc/cardreader; do + rm -rf $item + done + ) + + # 显示精简后的大小 + du -sh . +} + +get_unix_path() { + if is_in_windows; then + # 输入的路径是 / 开头也没问题 + cygpath -u "$1" + else + printf '%s' "$1" + fi +} + +# 脚本入口 + +if mount | grep -q 'tmpfs on / type tmpfs'; then + error_and_exit "Can't run this script in Live OS." +fi + +if is_in_windows; then + # win系统盘 + c=$(echo $SYSTEMDRIVE | cut -c1) + + # 64位系统 + 32位cmd/cygwin，需要添加 PATH，否则找不到64位系统程序，例如bcdedit + sysnative=$(cygpath -u $WINDIR\\Sysnative) + if [ -d $sysnative ]; then + PATH=$PATH:$sysnative + fi + + # 更改 windows 命令输出语言为英文 + # chcp 会清屏 + mode.com con cp select=437 >/dev/null + + # 为 windows 程序输出删除 cr + for exe in $WINDOWS_EXES; do + # 如果我们覆写了 wmic()，则先将 wmic() 重命名为 _wmic() + if get_function $exe >/dev/null 2>&1; then + eval "_$(get_function $exe)" + fi + # 使用以下方法重新生成 wmic() + # 调用链：wmic() -> run_with_del_cr(wmic) -> _wmic() -> command wmic + eval "$exe(){ $(get_function_content run_with_del_cr_template | sed "s/\$exe/$exe/g") }" + done +fi + +# 检查 root +if is_in_windows; then + # 64位系统 + 32位cmd/cygwin，运行 openfiles 报错：目标系统必须运行 32 位的操作系统 + if ! fltmc >/dev/null 2>&1; then + error_and_exit "Please run as administrator." + fi +else + if [ "$EUID" -ne 0 ]; then + error_and_exit "Please run as root." + fi +fi + +long_opts= +for o in ci installer debug minimal allow-ping force-cn help \ + add-driver: \ + hold: sleep: \ + iso: \ + image-name: \ + boot-wim: \ + img: \ + lang: \ + passwd: password: \ + ssh-port: \ + ssh-key: public-key: \ + rdp-port: \ + web-port: http-port: \ + allow-ping: \ + commit: \ + frpc-conf: frpc-config: frpc-toml: \ + force-boot-mode: \ + force-old-windows-setup:; do + [ -n "$long_opts" ] && long_opts+=, + long_opts+=$o +done + +# 整理参数 +if ! opts=$(getopt -n $0 -o "h,x" --long "$long_opts" -- "$@"); then + exit +fi + +# /tmp 挂载在内存的话，可能不够空间 +# 处理 --frpc--toml 时会下载文件，因此在处理参数前就创建临时目录 +tmp=/reinstall-tmp +mkdir_clear "$tmp" + +eval set -- "$opts" +# shellcheck disable=SC2034 +while true; do + case "$1" in + -h | --help) + usage_and_exit + ;; + --commit) + commit=$2 + shift 2 + ;; + -x | --debug) + set -x + shift + ;; + --ci) + cloud_image=1 + unset installer + shift + ;; + --installer) + installer=1 + unset cloud_image + shift + ;; + --minimal) + minimal=1 + shift + ;; + --allow-ping) + allow_ping=1 + shift + ;; + --force-cn) + # 仅为了方便测试 + force_cn=1 + shift + ;; + --hold | --sleep) + if ! { [ "$2" = 0 ] || [ "$2" = 1 ] || [ "$2" = 2 ]; }; then + error_and_exit "Invalid $1 value: $2" + fi + hold=$2 + shift 2 + ;; + --frpc-conf | --frpc-config | --frpc-toml) + [ -n "$2" ] || error_and_exit "Need value for $1" + + case "$(to_lower <<<"$2")" in + http://* | https://*) + frpc_config_url=$2 + frpc_config=$tmp/frpc_config + if ! curl -L "$frpc_config_url" -o "$frpc_config"; then + error_and_exit "Can't get frpc config from $frpc_config_url" + fi + ;; + *) + # windows 路径转换 + if ! { frpc_config=$(get_unix_path "$2") && [ -f "$frpc_config" ]; }; then + error_and_exit "File not exists: $2" + fi + ;; + esac + + # 转为绝对路径 + frpc_config=$(readlink -f "$frpc_config") + + shift 2 + ;; + --force-boot-mode) + if ! { [ "$2" = bios ] || [ "$2" = efi ]; }; then + error_and_exit "Invalid $1 value: $2" + fi + force_boot_mode=$2 + shift 2 + ;; + --passwd | --password) + [ -n "$2" ] || error_and_exit "Need value for $1" + password=$2 + shift 2 + ;; + --ssh-key | --public-key) + ssh_key_error_and_exit() { + error "$1" + cat <"$meta_path" </dev/null || \ - sed -i 's/^Port .*/Port ${SSH_PORT}/' /etc/ssh/sshd_config 2>/dev/null || \ - sed -i '' 's/^#Port .*/Port ${SSH_PORT}/' /etc/ssh/sshd_config 2>/dev/null || \ - sed -i '' 's/^Port .*/Port ${SSH_PORT}/' /etc/ssh/sshd_config 2>/dev/null || true - fi - service sshd restart 2>/dev/null || systemctl restart sshd 2>/dev/null || true -EOF - fi - - if [ -n "$FRPC_PRESENT" ]; then - cat <<'EOF' - - | - # If EFI nocloud contains frpc.toml, copy to /etc/frp and try to start frpc - if [ -f /boot/efi/nocloud/frpc.toml ]; then - mkdir -p /etc/frp - cp /boot/efi/nocloud/frpc.toml /etc/frp/frpc.toml - (frpc -c /etc/frp/frpc.toml || /usr/local/bin/frpc -c /etc/frp/frpc.toml || true) & - fi -EOF - fi - } >"$user_path" -} - -# ----------------- main ----------------- - -[ $# -lt 1 ] && usage - -TARGET_OS=$(echo "$1" | to_lower) -shift || true - -TARGET_VER="" -IMG_URL="" -DISK="" -PASSWORD="" -SSH_KEYS_ALL="" -SSH_PORT="" -WEB_PORT="" -FRPC_TOML="" -FRPC_PRESENT="" -HOLD="0" -AUTO_PASSWORD=0 - -# If the next positional arg is numeric, treat it as version for specific OSes. -if [ $# -gt 0 ] && [[ "$1" =~ ^[0-9]+$ ]]; then - case "$TARGET_OS" in - freebsd|rocky|almalinux|fedora) - TARGET_VER="$1" - shift - ;; - redhat) - error "Do not specify a version for redhat. Use: $SCRIPT_NAME redhat --img URL [--disk /dev/XXX] ..." - ;; - *) - ;; - esac -fi - -while [ $# -gt 0 ]; do - case "$1" in - -h|--help) - usage - ;; - --disk) - shift - [ -n "$1" ] || error "Need value for --disk" - DISK="$1" - ;; - --disk=*) - DISK="${1#*=}" - ;; - --img) - shift - [ -n "$1" ] || error "Need value for --img" - IMG_URL="$1" - ;; - --img=*) - IMG_URL="${1#*=}" - ;; - --password|--passwd) - shift - [ -n "$1" ] || error "Need value for --password" - PASSWORD="$1" - ;; - --ssh-key|--public-key) - shift - [ -n "$1" ] || error "Need value for --ssh-key" - key_line=$(parse_ssh_key "$1") - if [ -n "$SSH_KEYS_ALL" ]; then - SSH_KEYS_ALL+=$'\n' - fi - SSH_KEYS_ALL+="$key_line" - ;; - --ssh-port) - shift - [ -n "$1" ] || error "Need value for --ssh-port" - is_port_valid "$1" || error "Invalid --ssh-port: $1" - SSH_PORT="$1" - ;; - --web-port) - shift - [ -n "$1" ] || error "Need value for --web-port" - is_port_valid "$1" || error "Invalid --web-port: $1" - WEB_PORT="$1" - ;; - --frpc-toml) - shift - [ -n "$1" ] || error "Need value for --frpc-toml" - FRPC_TOML="$1" - ;; - --hold) - shift - [ -n "$1" ] || error "Need value for --hold" - [[ "$1" == "1" || "$1" == "2" ]] || error "Invalid --hold: $1 (must be 1 or 2)" - HOLD="$1" - ;; - *) - error "Unknown argument: $1" - ;; - esac - shift || true done -detect_os_arch -ensure_dependencies # auto install / check qemu-img, xz, curl/wget/fetch, pv (on RHEL-like) +# 检查目标系统名 +verify_os_name "$@" -# Disk handling: auto-detect if not provided -if [ -n "$DISK" ]; then - if [[ "$DISK" != /dev/* ]]; then - DISK="/dev/$DISK" +# 检查必须的参数 +verify_os_args + +# 不支持容器虚拟化 +assert_not_in_container + +# 不支持安全启动 +if is_secure_boot_enabled; then + error_and_exit "Please disable secure boot first." +fi + +# 密码 +if ! is_netboot_xyz && [ -z "$ssh_keys" ] && [ -z "$password" ]; then + if is_use_dd; then + show_dd_password_tips fi -else - auto_detect_disk + prompt_password fi -if [ ! -b "$DISK" ] && [ ! -c "$DISK" ]; then - error "Target disk $DISK does not exist or is not a block/char device" -fi +# 必备组件 +install_pkg curl grep -# Password / SSH key behaviour: -# If neither password nor ssh-key specified, ask for password; if still empty, generate random. -if [ -z "$PASSWORD" ] && [ -z "$SSH_KEYS_ALL" ]; then - echo "No --password or --ssh-key specified." - echo "You can set a root password now, or leave empty to auto-generate a random 20-character password." - - while :; do - read -r -s -p "Enter root password (leave empty to auto-generate): " pw1 - echo - - # Empty: auto-generate random password, no need to confirm - if [ -z "$pw1" ]; then - if command -v tr >/dev/null 2>&1; then - PASSWORD=$(LC_ALL=C tr -dc 'A-Za-z0-9' /dev/null 2>&1; then - # pv is optional; if present, show progress - xz -dc "$IMG_QCOW.xz" | pv >"$IMG_QCOW" + ;; +oracle | opensuse | anolis | opencloudos | openeuler) + cloud_image=1 + ;; +redhat | centos | almalinux | rocky | fedora | ubuntu) + if is_force_use_installer; then + unset cloud_image else - xz -dc "$IMG_QCOW.xz" >"$IMG_QCOW" + cloud_image=1 fi -fi + ;; +esac -# Convert to raw using qemu-img (with progress) -info "Converting qcow2 to raw with qemu-img (with progress)..." -qemu-img convert -p -O raw "$IMG_QCOW" "$IMG_RAW" +# 检查硬件架构 +if is_in_windows; then + # x86-based PC + # x64-based PC + # ARM-based PC + # ARM64-based PC -# Final confirmation -echo -echo "WARNING: dd will be run on $DISK. ALL DATA ON THIS DISK WILL BE LOST!" -read -r -p "Type 'yes' to continue: " ans -if [ "$ans" != "yes" ]; then - error "Operation cancelled by user." -fi - -# RHEL: unregister subscription BEFORE dd -if [ "$OS" = "Linux" ] && [ -f /etc/redhat-release ] && command -v subscription-manager >/dev/null 2>&1; then - info "RHEL detected, trying to unregister existing subscription before overwriting disk..." - if ! subscription-manager unregister; then - warn "subscription-manager unregister failed, continuing anyway." - fi -fi - -# dd to disk -info "Writing image to disk with dd, this may take a while..." -dd if="$IMG_RAW" of="$DISK" bs=4M conv=fsync status=progress -sync -info "dd finished." - -# Try to refresh partition table (best-effort) -if command -v partprobe >/dev/null 2>&1; then - partprobe "$DISK" || true -elif command -v blockdev >/dev/null 2>&1; then - blockdev --rereadpt "$DISK" || true -fi - -sleep 2 - -# Find and mount EFI partition -EFI_PART=$(find_efi_partition "$DISK") -info "Trying EFI partition: $EFI_PART" - -MNT_EFI="$TMPDIR/efi" -mkdir -p "$MNT_EFI" - -if [[ "$OS" == "FreeBSD" ]]; then - if ! mount -t msdosfs "$EFI_PART" "$MNT_EFI" 2>/dev/null; then - warn "Failed to mount EFI partition $EFI_PART, skipping cloud-init NoCloud injection." - EFI_PART="" + if false; then + # 如果机器没有 wmic 则需要下载 wmic.ps1，但此时未判断国内外，还是用国外源 + basearch=$(wmic ComputerSystem get SystemType | grep '=' | cut -d= -f2 | cut -d- -f1) + elif true; then + # 可以用 + basearch=$(reg query "HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\Environment" /v PROCESSOR_ARCHITECTURE | + grep . | tail -1 | awk '{print $NF}') + else + # 也可以用 + basearch=$(cmd /c "if defined PROCESSOR_ARCHITEW6432 (echo %PROCESSOR_ARCHITEW6432%) else (echo %PROCESSOR_ARCHITECTURE%)") fi else - if ! mount "$EFI_PART" "$MNT_EFI" 2>/dev/null; then - # Some systems require explicit vfat - if ! mount -t vfat "$EFI_PART" "$MNT_EFI" 2>/dev/null && ! mount -t msdos "$EFI_PART" "$MNT_EFI" 2>/dev/null; then - warn "Failed to mount EFI partition $EFI_PART, skipping cloud-init NoCloud injection." - EFI_PART="" - fi + # archlinux 云镜像没有 arch 命令 + # https://en.wikipedia.org/wiki/Uname + basearch=$(uname -m) +fi + +# 统一架构名称，并强制 64 位 +case "$(echo $basearch | to_lower)" in +i?86 | x64 | x86* | amd64) + basearch=x86_64 + basearch_alt=amd64 + ;; +arm* | aarch64) + basearch=aarch64 + basearch_alt=arm64 + ;; +*) error_and_exit "Unsupported arch: $basearch" ;; +esac + +# 未测试 +if false && [[ "$confhome" = http*://raw.githubusercontent.com/* ]]; then + repo=$(echo $confhome | cut -d/ -f4,5) + branch=$(echo $confhome | cut -d/ -f6) + # 避免脚本更新时，文件不同步造成错误 + if [ -z "$commit" ]; then + commit=$(curl -L https://api.github.com/repos/$repo/git/refs/heads/$branch | + grep '"sha"' | grep -Eo '[0-9a-f]{40}') + fi + # shellcheck disable=SC2001 + confhome=$(echo "$confhome" | sed "s/main$/$commit/") +fi + +# 设置国内代理 +# 要在使用 wmic 前设置，否则国内机器会从国外源下载 wmic.ps1 +# gitee 不支持ipv6 +# jsdelivr 有12小时缓存 +# https://github.com/XIU2/UserScript/blob/master/GithubEnhanced-High-Speed-Download.user.js#L31 +if is_in_china; then + if [ -n "$confhome_cn" ]; then + confhome=$confhome_cn + elif [ -n "$github_proxy" ] && [[ "$confhome" = http*://raw.githubusercontent.com/* ]]; then + confhome=${confhome/http:\/\//https:\/\/} + confhome=${confhome/https:\/\/raw.githubusercontent.com/$github_proxy} fi fi -if [ -n "$EFI_PART" ]; then - NOCLOUD_DIR="$MNT_EFI/nocloud" - mkdir -p "$NOCLOUD_DIR" +# 检查内存 +# 会用到 wmic，因此要在设置国内 confhome 后使用 +check_ram - # Handle FRPC config if present - if [ -n "$FRPC_TOML" ]; then - FRPC_PRESENT=1 - if [[ "$FRPC_TOML" =~ ^https?:// ]]; then - info "Downloading FRPC config: $FRPC_TOML" - if ! http_download "$FRPC_TOML" "$NOCLOUD_DIR/frpc.toml"; then - warn "Failed to download FRPC config, ignoring" - FRPC_PRESENT="" - fi - elif [ -f "$FRPC_TOML" ]; then - info "Copying FRPC config from: $FRPC_TOML" - cp "$FRPC_TOML" "$NOCLOUD_DIR/frpc.toml" +# 以下目标系统不需要两步安装 +# alpine +# debian +# el7 x86_64 >=1g +# el7 aarch64 >=1.5g +# el8/9/fedora 任何架构 >=2g +if is_netboot_xyz || + { ! is_use_cloud_image && { + [ "$distro" = "alpine" ] || is_distro_like_debian || + { is_distro_like_redhat && [ $releasever -eq 7 ] && [ $ram_size -ge 1024 ] && [ $basearch = "x86_64" ]; } || + { is_distro_like_redhat && [ $releasever -eq 7 ] && [ $ram_size -ge 1536 ] && [ $basearch = "aarch64" ]; } || + { is_distro_like_redhat && [ $releasever -ge 8 ] && [ $ram_size -ge 2048 ]; } + }; }; then + setos nextos $distro $releasever +else + # alpine 作为中间系统时，使用最新版 + alpine_ver_for_trans=$(get_latest_distro_releasever alpine) + setos finalos $distro $releasever + setos nextos alpine $alpine_ver_for_trans +fi + +# 删除之前的条目 +# 防止第一次运行 netboot.xyz，第二次运行其他，但还是进入 netboot.xyz +# 防止第一次运行其他，第二次运行 netboot.xyz，但还有第一次的菜单 +# bios 无论什么情况都用到 grub，所以不用处理 +if is_efi; then + if is_in_windows; then + rm -f /cygdrive/$c/grub.cfg + + bcdedit /set '{fwbootmgr}' bootsequence '{bootmgr}' + bcdedit /enum bootmgr | grep --text -B3 'reinstall' | awk '{print $2}' | grep '{.*}' | + xargs -I {} cmd /c bcdedit /delete {} + else + # shellcheck disable=SC2046 + # 如果 nixos 的 efi 挂载到 /efi，则不会生成 /boot 文件夹 + # find 不存在的路径会报错退出 + find $(get_maybe_efi_dirs_in_linux) $([ -d /boot ] && echo /boot) \ + -type f -name 'custom.cfg' -exec rm -f {} \; + + install_pkg efibootmgr + efibootmgr | grep -q 'BootNext:' && efibootmgr --quiet --delete-bootnext + efibootmgr | grep_efi_entry | grep 'reinstall' | grep_efi_index | + xargs -I {} efibootmgr --quiet --bootnum {} --delete-bootnum + fi +fi + +# 有的机器开启了 kexec，例如腾讯云轻量 debian，要禁用 +if [ -f /etc/default/kexec ]; then + sed -i 's/LOAD_KEXEC=true/LOAD_KEXEC=false/' /etc/default/kexec +fi + +# 下载 netboot.xyz / 内核 +# shellcheck disable=SC2154 +if is_netboot_xyz; then + if is_efi; then + curl -Lo /netboot.xyz.efi $nextos_efi + if is_in_windows; then + add_efi_entry_in_windows /netboot.xyz.efi else - warn "Invalid FRPC config path: $FRPC_TOML, ignoring" - FRPC_PRESENT="" + add_efi_entry_in_linux /netboot.xyz.efi + fi + else + curl -Lo /reinstall-vmlinuz $nextos_vmlinuz + fi +else + # 下载 nextos 内核 + info download vmlnuz and initrd + curl -Lo /reinstall-vmlinuz $nextos_vmlinuz + curl -Lo /reinstall-initrd $nextos_initrd + if is_use_firmware; then + curl -Lo /reinstall-firmware $nextos_firmware + fi +fi + +# 修改 alpine debian kali initrd +if [ "$nextos_distro" = alpine ] || is_distro_like_debian "$nextos_distro"; then + mod_initrd +fi + +# 将内核/netboot.xyz.lkrn 放到正确的位置 +if false && is_need_grub_extlinux; then + if is_in_windows; then + cp -f /reinstall-vmlinuz /cygdrive/$c/ + is_have_initrd && cp -f /reinstall-initrd /cygdrive/$c/ + else + if is_os_in_btrfs && is_os_in_subvol; then + cp_to_btrfs_root /reinstall-vmlinuz + is_have_initrd && cp_to_btrfs_root /reinstall-initrd + fi + fi +fi + +# grub / extlinux +if is_need_grub_extlinux; then + # win 使用外部 grub + if is_in_windows; then + install_grub_win + else + # linux efi 使用外部 grub，因为 + # 1. 原系统 grub 可能没有去除 aarch64 内核 magic number 校验 + # 2. 原系统可能不是用 grub + if is_efi; then + install_grub_linux_efi fi fi - info "Writing NoCloud seed to EFI:/nocloud/ ..." - write_nocloud_seed "$TARGET_OS" "$NOCLOUD_DIR/meta-data" "$NOCLOUD_DIR/user-data" + # 寻找 grub.cfg / extlinux.conf + if is_in_windows; then + if is_efi; then + grub_cfg=/cygdrive/$c/grub.cfg + else + grub_cfg=/cygdrive/$c/grub/grub.cfg + fi + else + # linux + if is_efi; then + # 现在 linux-efi 是使用 reinstall 目录下的 grub + # shellcheck disable=SC2046 + efi_reinstall_dir=$(find $(get_maybe_efi_dirs_in_linux) -type d -name "reinstall" | head -1) + grub_cfg=$efi_reinstall_dir/grub.cfg + else + if is_mbr_using_grub; then + if is_have_cmd update-grub; then + # alpine debian ubuntu + grub_cfg=$(grep -o '[^ ]*grub.cfg' "$(get_cmd_path update-grub)" | head -1) + else + # 找出主配置文件（含有menuentry|blscfg） + # 现在 efi 用下载的 grub，因此不需要查找 efi 目录 + grub_cfg=$(find_grub_extlinux_cfg '/boot/grub*' grub.cfg 'menuentry|blscfg') + fi + else + # extlinux + extlinux_cfg=$(find_grub_extlinux_cfg /boot extlinux.conf LINUX) + fi + fi + fi - sync - umount "$MNT_EFI" || true -else - warn "EFI could not be mounted; target system can still boot, but cloud-init configuration may not be applied." + # 判断用 linux 还是 linuxefi（主要是红帽系） + # 现在 efi 用下载的 grub，因此不需要判断 linux 或 linuxefi + if false && is_use_local_grub_extlinux; then + # 在x86 efi机器上，不同版本的 grub 可能用 linux 或 linuxefi 加载内核 + # 通过检测原有的条目有没有 linuxefi 字样就知道当前 grub 用哪一种 + # 也可以检测 /etc/grub.d/10_linux + if [ -d /boot/loader/entries/ ]; then + entries="/boot/loader/entries/" + fi + if grep -q -r -E '^[[:space:]]*linuxefi[[:space:]]' $grub_cfg $entries; then + efi=efi + fi + fi + + # 找到 grub 程序的前缀 + # 并重新生成 grub.cfg + # 因为有些机子例如hython debian的grub.cfg少了40_custom 41_custom + if is_use_local_grub; then + if is_have_cmd grub2-mkconfig; then + grub=grub2 + elif is_have_cmd grub-mkconfig; then + grub=grub + else + error_and_exit "grub not found" + fi + + # nixos 手动执行 grub-mkconfig -o /boot/grub/grub.cfg 会丢失系统启动条目 + # 正确的方法是修改 configuration.nix 的 boot.loader.grub.extraEntries + # 但是修改 configuration.nix 不是很好，因此改成修改 grub.cfg + if [ -x /nix/var/nix/profiles/system/bin/switch-to-configuration ]; then + # 生成 grub.cfg + /nix/var/nix/profiles/system/bin/switch-to-configuration boot + # 手动启用 41_custom + nixos_grub_home="$(dirname "$(readlink -f "$(get_cmd_path grub-mkconfig)")")/.." + $nixos_grub_home/etc/grub.d/41_custom >>$grub_cfg + elif is_have_cmd update-grub; then + update-grub + else + $grub-mkconfig -o $grub_cfg + fi + fi + + # 重新生成 extlinux.conf + if is_use_local_extlinux; then + if is_have_cmd update-extlinux; then + update-extlinux + fi + fi + + # 选择用 custom.cfg (linux-bios) 还是 grub.cfg (linux-efi / win) + if is_use_local_grub; then + target_cfg=$(dirname $grub_cfg)/custom.cfg + else + target_cfg=$grub_cfg + fi + + # 找到 /reinstall-vmlinuz /reinstall-initrd 的绝对路径 + if is_in_windows; then + # dir=/cygwin/ + dir=$(cygpath -m / | cut -d: -f2-)/ + else + # extlinux + 单独的 boot 分区 + # 把内核文件放在 extlinux.conf 所在的目录 + if is_use_local_extlinux && is_boot_in_separate_partition; then + dir= + else + # 获取当前系统根目录在 btrfs 中的绝对路径 + if is_os_in_btrfs; then + # btrfs subvolume show / + # 输出可能是 / 或 root 或 @/.snapshots/1/snapshot + dir=$(btrfs subvolume show / | head -1) + if ! [ "$dir" = / ]; then + dir="/$dir/" + fi + else + dir=/ + fi + fi + fi + + vmlinuz=${dir}reinstall-vmlinuz + initrd=${dir}reinstall-initrd + firmware=${dir}reinstall-firmware + + # 设置 linux initrd 命令 + if is_use_local_extlinux; then + linux_cmd=LINUX + initrd_cmd=INITRD + else + if is_netboot_xyz; then + linux_cmd=linux16 + initrd_cmd=initrd16 + else + linux_cmd="linux$efi" + initrd_cmd="initrd$efi" + fi + fi + + # 设置 cmdlind initrds + if ! is_netboot_xyz; then + find_main_disk + build_cmdline + + initrds="$initrd" + if is_use_firmware; then + initrds+=" $firmware" + fi + fi + + if is_use_local_extlinux; then + info extlinux + echo $extlinux_cfg + extlinux_dir="$(dirname $extlinux_cfg)" + + # 不起作用 + # 好像跟 extlinux --once 有冲突 + sed -i "/^MENU HIDDEN/d" $extlinux_cfg + sed -i "/^TIMEOUT /d" $extlinux_cfg + + del_empty_lines <$target_cfg + + # 原系统为 openeuler 云镜像，需要添加 --unrestricted，否则要输入密码 + del_empty_lines <