First draft of the installation script
This commit is contained in:
TuDatTr
8
etc/X11/xorg.conf.d/30-touchpad.conf
Normal file
8
etc/X11/xorg.conf.d/30-touchpad.conf
Normal file
@@ -0,0 +1,8 @@
|
||||
Section "InputClass"
|
||||
Identifier "touchpad"
|
||||
Driver "libinput"
|
||||
MatchIsTouchpad "on"
|
||||
Option "Tapping" "on"
|
||||
Option "ClickMethod" "clickfinger"
|
||||
Option "NaturalScrolling" "true"
|
||||
EndSection
|
||||
49
etc/iptables/iptables.rules
Normal file
49
etc/iptables/iptables.rules
Normal file
@@ -0,0 +1,49 @@
|
||||
# Generated by iptables-save v1.8.4 on Wed May 20 18:14:58 2020
|
||||
*security
|
||||
:INPUT ACCEPT [484:209329]
|
||||
:FORWARD ACCEPT [0:0]
|
||||
:OUTPUT ACCEPT [586:99971]
|
||||
COMMIT
|
||||
# Completed on Wed May 20 18:14:58 2020
|
||||
# Generated by iptables-save v1.8.4 on Wed May 20 18:14:58 2020
|
||||
*raw
|
||||
:PREROUTING ACCEPT [511:211250]
|
||||
:OUTPUT ACCEPT [586:99971]
|
||||
COMMIT
|
||||
# Completed on Wed May 20 18:14:58 2020
|
||||
# Generated by iptables-save v1.8.4 on Wed May 20 18:14:58 2020
|
||||
*mangle
|
||||
:PREROUTING ACCEPT [511:211250]
|
||||
:INPUT ACCEPT [511:211250]
|
||||
:FORWARD ACCEPT [0:0]
|
||||
:OUTPUT ACCEPT [586:99971]
|
||||
:POSTROUTING ACCEPT [586:99971]
|
||||
COMMIT
|
||||
# Completed on Wed May 20 18:14:58 2020
|
||||
# Generated by iptables-save v1.8.4 on Wed May 20 18:14:58 2020
|
||||
*filter
|
||||
:INPUT DROP [0:0]
|
||||
:FORWARD DROP [0:0]
|
||||
:OUTPUT ACCEPT [15:932]
|
||||
:TCP - [0:0]
|
||||
:UDP - [0:0]
|
||||
-A INPUT -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
|
||||
-A INPUT -i lo -j ACCEPT
|
||||
-A INPUT -m conntrack --ctstate INVALID -j DROP
|
||||
-A INPUT -p udp -m conntrack --ctstate NEW -j UDP
|
||||
-A INPUT -p tcp -m tcp --tcp-flags FIN,SYN,RST,ACK SYN -m conntrack --ctstate NEW -j TCP
|
||||
-A INPUT -p tcp -m recent --set --name TCP-PORTSCAN --mask 255.255.255.255 --rsource -j REJECT --reject-with tcp-reset
|
||||
-A INPUT -p udp -m recent --set --name UDP-PORTSCAN --mask 255.255.255.255 --rsource -j REJECT --reject-with icmp-port-unreachable
|
||||
-A INPUT -j REJECT --reject-with icmp-proto-unreachable
|
||||
-A TCP -p tcp -m recent --update --seconds 60 --name TCP-PORTSCAN --mask 255.255.255.255 --rsource -j REJECT --reject-with tcp-reset
|
||||
-A UDP -p udp -m recent --update --seconds 60 --name UDP-PORTSCAN --mask 255.255.255.255 --rsource -j REJECT --reject-with icmp-port-unreachable
|
||||
COMMIT
|
||||
# Completed on Wed May 20 18:14:58 2020
|
||||
# Generated by iptables-save v1.8.4 on Wed May 20 18:14:58 2020
|
||||
*nat
|
||||
:PREROUTING ACCEPT [4:239]
|
||||
:INPUT ACCEPT [0:0]
|
||||
:OUTPUT ACCEPT [74:6294]
|
||||
:POSTROUTING ACCEPT [74:6294]
|
||||
COMMIT
|
||||
# Completed on Wed May 20 18:14:58 2020
|
||||
8
etc/systemd/system/march.service
Normal file
8
etc/systemd/system/march.service
Normal file
@@ -0,0 +1,8 @@
|
||||
[Unit]
|
||||
Description=March Reboot Service
|
||||
|
||||
[Service]
|
||||
ExecStart=/root/arch-reboot.sh
|
||||
|
||||
[Install]
|
||||
WantedBy=multi-user.target
|
||||
14
etc/systemd/system/suspend@.service
Normal file
14
etc/systemd/system/suspend@.service
Normal file
@@ -0,0 +1,14 @@
|
||||
[Unit]
|
||||
Description=User suspend actions
|
||||
Before=sleep.target
|
||||
|
||||
[Service]
|
||||
User=%I
|
||||
Type=forking
|
||||
Environment=DISPLAY=:0
|
||||
ExecStartPre=
|
||||
ExecStart= /home/tuan/.scripts/i3lock.py
|
||||
ExecStartPost=/usr/bin/sleep 1
|
||||
|
||||
[Install]
|
||||
WantedBy=sleep.target
|
||||
62
install.sh
Executable file
62
install.sh
Executable file
@@ -0,0 +1,62 @@
|
||||
#!/bin/bash
|
||||
|
||||
device="CHANGEME" # Device that shoud be partitioned e.g. "/dev/sda"
|
||||
timezone="CHANGEME" # Your timezone according to /usr/share/zoneinfo/ e.g. "/usr/share/zoneinfo/EUROPE/Berlin"
|
||||
locale="CHANGEME" # Your locale according to /etc/locale.gen e.g. "en_US.UTF-8 UTF-8"
|
||||
hostname="CHANGEME" # Name for your machine e.g. "ArchLinux"
|
||||
username="CHANGEME" # Your username e.g. "foo"
|
||||
sudogrp="CHANGEME" # Name of the sudogrp
|
||||
|
||||
CWD="$( cd "$( dirname "${BASH_SOURCE[0]}" )" >/dev/null 2>&1 && pwd )"
|
||||
|
||||
# partition 1: 1MiB -> 500MiB FAT32
|
||||
# partition 2: 500MiB -> 3GiB swap
|
||||
# partition 3: 3GiB -> .. ext4
|
||||
parted $device mklabel gpt mkpart primary fat32 1MiB 512 mkpart primary linux-swap 500MiB 3GiB mkpart primary ext4 3GiB 100% set 1 esp on -s
|
||||
|
||||
if [ -b "$device\p1" ]; then
|
||||
bootpart=$device\p1
|
||||
swappart=$device\p2
|
||||
rootpart=$device\p3
|
||||
else
|
||||
bootpart=$device\1
|
||||
swappart=$device\2
|
||||
rootpart=$device\3
|
||||
fi
|
||||
|
||||
mkfs.vfat $bootpart
|
||||
mkswap $swappart
|
||||
swapon $swappart
|
||||
|
||||
# LUKS
|
||||
cryptsetup -y luksFormat --type luks2 $rootpart
|
||||
cryptsetup open $rootpart cryptroot
|
||||
|
||||
cryptroot=/dev/mapper/cryptroot
|
||||
|
||||
mkfs.ext4 $cryptroot
|
||||
|
||||
mount $cryptroot /mnt
|
||||
mkdir /mnt/boot
|
||||
mount $bootpart /mnt/boot
|
||||
|
||||
pacstrap /mnt base base-devel linux linux-firmware
|
||||
|
||||
genfstab -U /mnt >> /mnt/etc/fstab
|
||||
|
||||
|
||||
cp $CWD/etc/systemd/system/march.service /mnt/etc/systemd/system/march.service
|
||||
cp $CWD/root/march-chroot.sh /mnt/root/arch-chroot.sh
|
||||
cp $CWD/root/march-reboot.sh /mnt/root/arch-reboot.sh
|
||||
chmod +x /mnt/root/arch-chroot.sh
|
||||
chmod +x /mnt/root/arch-reboot.sh
|
||||
|
||||
arch-chroot /mnt /root/march-chroot.sh -t $timezone -l $locale -h $hostname -u $username -s $sudogrp
|
||||
sed -i "s/arch-reboot.sh/\0 -u $username -s $sudogrp/" /mnt/etc/systemd/system/march.service
|
||||
|
||||
umount $bootpart
|
||||
swapoff $swappart
|
||||
umount $cryptroot
|
||||
cryptsetup close $cryptroot
|
||||
|
||||
shutdown -r now
|
||||
42
root/march-chroot.sh
Normal file
42
root/march-chroot.sh
Normal file
@@ -0,0 +1,42 @@
|
||||
#!/bin/bash
|
||||
|
||||
timezone="CHANGEME" # specified in ./arch-chroot.sh
|
||||
locale="CHANGEME"
|
||||
hostname="CHANGEME"
|
||||
username="CHANGEME"
|
||||
sudogrp="CHANGEME"
|
||||
|
||||
arch-chroot /mnt root/march-chroot.sh -t timezone -l locale -h hostname -u username -s sudogrp
|
||||
|
||||
ln -sf $timezone /etc/localtime
|
||||
|
||||
hwclock --systohc
|
||||
|
||||
echo $locale >> /etc/locale.gen
|
||||
if [ $locale != "en_US.UTF-8 UTF-8"]; then
|
||||
echo "en_US.UTF-8 UTF-8" >> /etc/locale.gen
|
||||
fi
|
||||
|
||||
locale-gen
|
||||
|
||||
echo "LANG=en_US.UTF-8" > /etc/locale.conf
|
||||
|
||||
echo $hostname > /etc/hostname
|
||||
|
||||
sed -i "s/^HOOKS=([[:alnum:][:space:]]\+)/HOOKS=(base udev autodetect keyboard keymap consolefont modconf block encrypt filesystems fsck)/" /etc/mkinitcpio.conf
|
||||
mkinitcpio -p linux
|
||||
|
||||
passwd
|
||||
|
||||
bootctl install
|
||||
echo "timeout 3
|
||||
default arch" > /boot/loader/loader.conf
|
||||
echo "title ArchLinux
|
||||
linux /vmlinuz-linux
|
||||
initrd /initramfs-linux.img
|
||||
options rw cryptdevice=$(blkid $rootpart | cut -d" " -f2 | tr -d \"):cryptroot root=$cryptroot i8042.noloop i8042.nomux i8042.nopnp i8042.reset" > /boot/loader/entries/arch.conf
|
||||
|
||||
sed -i "s/"
|
||||
|
||||
systemctl enable march.service
|
||||
systemctl enable dhcpcd.service
|
||||
32
root/march-reboot.sh
Normal file
32
root/march-reboot.sh
Normal file
@@ -0,0 +1,32 @@
|
||||
#!/bin/bash
|
||||
|
||||
sudogrp="CHANGEME"
|
||||
username="CHANGEME"
|
||||
|
||||
pacman -S --noconfirm git zsh gvim wget arch-audit lightdm lightdm-webkit2-greeter xorg-server xf86-video-intel i3-gaps xorg-xbacklight xorg-xrandr i3lock-color alsa-utils pulseaudio pulseaudio-alsa pulseaudio-bluetooth playerctl pavucontrol exfat-utils udiskie blueman acpi acpid tlp compton conky rxvt-unicode networkmanager network-manager-applet networkmanager-openconnect networkmanager-openvpn stow maim openssh xdotool xclip thunderbird firefox veracrypt keepassxc texlive-most evince pandoc pdfgrep adobe-source-han-sans-otc-fonts python3 python3-pip ranger atool elinks ffmpegthumbnailer highlight libcaca lynx mediainfo odt2txt perl-image-exiftool poppler python-chardet transmission-cli w3m
|
||||
|
||||
echo "%$sudogrp ALL=(ALL) ALL" >> /etc/sudoers
|
||||
groupadd $sudogrp
|
||||
useradd -m -G $sudogrp -s $username
|
||||
|
||||
systemctl enable lightdm
|
||||
sed -i "s/#user-session.*/user-session=i3/g" /etc/lightdm/lightdm.conf
|
||||
sed -i "s/#greeter-session.*/greeter-session=lightdm-webkit2-greeter/g" /etc/lightdm/lightdm.conf
|
||||
|
||||
cp $CWD/etc/systemd/system/suspend@.service /etc/systemd/system/suspend@.service
|
||||
cp $CWD/etc/X11/xorg.conf.d/30-touchpad.conf /etc/X11/xorg.conf.d/30-touchpad.conf
|
||||
cp $CWD/etc/iptables/iptables.rules /etc/iptables/iptables.rules
|
||||
|
||||
# From this on we need need to be $username
|
||||
su $username sh -c "$(curl -fsSL https://raw.githubusercontent.com/robbyrussell/oh-my-zsh/master/tools/install.sh)" &
|
||||
cp -r /usr/share/zsh-theme-powerlevel9k $HOME/.oh-my-zsh/themes/powerlevel9k
|
||||
|
||||
su $username sh -c "git clone https://github.com/powerline/fonts.git --depth=1 /home/$username/fonts"
|
||||
su $username sh -c "chmod +x /home/$username/fonts/install.sh"
|
||||
su $username sh -c "/home/$username/fonts/install.sh"
|
||||
su $username sh -c "rm -rf /home/$username/fonts/"
|
||||
|
||||
su $username sh -c "git clone git@gitlab.com:TuDatTr/dotfiles.git /home/$username/.dotfiles"
|
||||
su $username sh -c "cd /home/$username/.dotfiles & stow vim"
|
||||
su $username sh -c "cd /home/$username/.dotfiles & stow zsh"
|
||||
su $username sh -c "cd /home/$username/.dotfiles & stow config"
|
||||
Reference in New Issue
Block a user