|
|
|
@ -12,23 +12,22 @@ else
|
|
|
|
|
exit 1
|
|
|
|
|
fi
|
|
|
|
|
|
|
|
|
|
echo "Exec ifconfig"
|
|
|
|
|
ifconfig
|
|
|
|
|
read -p "Enter interface for configure bridge:" NET_IF
|
|
|
|
|
echo "Doing pacman -Syy"
|
|
|
|
|
pacman -Syy
|
|
|
|
|
|
|
|
|
|
echo "Starting lsblk"
|
|
|
|
|
lsblk
|
|
|
|
|
read -p "Enter partition to encrypt:" PARTITION
|
|
|
|
|
|
|
|
|
|
echo "Installing requirements"
|
|
|
|
|
apt install cryptsetup ecryptfs-utils zfsutils-linux -y
|
|
|
|
|
pacman -S --noconfirm cryptsetup ecryptfs-utils $(pacman -Q linux | tail -n 1 | awk {'print $1'})-zfs $(pacman -Q linux | tail -n 1 | awk {'print $1'})-headers parted
|
|
|
|
|
|
|
|
|
|
echo "Loading ZFS kernel module"
|
|
|
|
|
modprobe zfs
|
|
|
|
|
|
|
|
|
|
echo "Setting timezone to Prague"
|
|
|
|
|
timedatectl set-timezone Europe/Prague
|
|
|
|
|
|
|
|
|
|
echo "Disabling zpool auto-scrub"
|
|
|
|
|
sed -i 's/^/#/' /etc/cron.d/zfsutils-linux
|
|
|
|
|
|
|
|
|
|
echo "Starting ecryptfs-setup-swap"
|
|
|
|
|
ecryptfs-setup-swap -f
|
|
|
|
|
|
|
|
|
@ -49,55 +48,46 @@ zfs create crypt/lxd
|
|
|
|
|
zfs create crypt/lxd/dir
|
|
|
|
|
zfs create crypt/lxd/storage
|
|
|
|
|
|
|
|
|
|
echo "Install snapd and lxd"
|
|
|
|
|
pacman -S snapd --noconfirm
|
|
|
|
|
systemctl enable snapd
|
|
|
|
|
systemctl start snapd
|
|
|
|
|
sleep 5
|
|
|
|
|
snap install lxd
|
|
|
|
|
|
|
|
|
|
echo "Switch to 4.16 LXD version"
|
|
|
|
|
snap switch --channel 4.16/stable lxd
|
|
|
|
|
snap refresh
|
|
|
|
|
|
|
|
|
|
echo "Stopping and disabling lxd"
|
|
|
|
|
systemctl disable lxd
|
|
|
|
|
systemctl disable lxd.socket
|
|
|
|
|
systemctl stop lxd
|
|
|
|
|
snap stop --disable lxd
|
|
|
|
|
snap disable lxd
|
|
|
|
|
|
|
|
|
|
echo "Deleting everything in /var/lib/lxd/*"
|
|
|
|
|
rm /var/lib/lxd/* -r
|
|
|
|
|
echo "Deleting everything in /var/snap/lxd/common/lxd/*"
|
|
|
|
|
rm /var/snap/lxd/common/lxd/* -r
|
|
|
|
|
|
|
|
|
|
echo "Creating mountpoint /var/lib/lxd to crypt/lxd/dir"
|
|
|
|
|
zfs set mountpoint=/var/lib/lxd crypt/lxd/dir
|
|
|
|
|
echo "Creating mountpoint /var/snap/lxd/common/lxd to crypt/lxd/dir"
|
|
|
|
|
zfs set mountpoint=/var/snap/lxd/common/lxd crypt/lxd/dir
|
|
|
|
|
|
|
|
|
|
echo "Configuring sysctl"
|
|
|
|
|
echo "vm.swappiness = 1" > /etc/sysctl.d/50-usl-mm.conf
|
|
|
|
|
echo "vm.min_free_kbytes = 131072" >> /etc/sysctl.d/50-usl-mm.conf
|
|
|
|
|
echo "vm.dirty_background_ratio = 5" >> /etc/sysctl.d/50-usl-mm.conf
|
|
|
|
|
echo "fs.inotify.max_queued_events = 1048576" >> /etc/sysctl.d/50-usl-mm.conf
|
|
|
|
|
echo "fs.inotify.max_user_instances = 1048576" >> /etc/sysctl.d/50-usl-mm.conf
|
|
|
|
|
echo "fs.inotify.max_user_watches = 1048576" >> /etc/sysctl.d/50-usl-mm.conf
|
|
|
|
|
echo "kernel.dmesg_restrict = 1" >> /etc/sysctl.d/50-usl-mm.conf
|
|
|
|
|
|
|
|
|
|
echo "Configuring arc cache for zfs to min 256MB and max 1536MB"
|
|
|
|
|
echo "Configuring arc cache for zfs to min 256MB and max 1536MB + txg_timeout to 3"
|
|
|
|
|
echo "options zfs zfs_arc_min=268435456" > /etc/modprobe.d/zfs.conf
|
|
|
|
|
echo "options zfs zfs_arc_max=1610612736" >> /etc/modprobe.d/zfs.conf
|
|
|
|
|
echo "options zfs zfs_txg_timeout=3" >> /etc/modprobe.d/zfs.conf
|
|
|
|
|
|
|
|
|
|
echo "Doing mkinitcpio -P"
|
|
|
|
|
mkinitcpio -P
|
|
|
|
|
|
|
|
|
|
echo "Doing update-initramfs -u"
|
|
|
|
|
update-initramfs -u
|
|
|
|
|
|
|
|
|
|
echo "Configuring network to use bridge"
|
|
|
|
|
echo "auto lo" > /etc/network/interfaces
|
|
|
|
|
echo "iface lo inet loopback" >> /etc/network/interfaces
|
|
|
|
|
echo " " >> /etc/network/interfaces
|
|
|
|
|
echo "iface $NET_IF inet manual" >> /etc/network/interfaces
|
|
|
|
|
echo "iface $NET_IF inet6 manual" >> /etc/network/interfaces
|
|
|
|
|
echo "auto br0" >> /etc/network/interfaces
|
|
|
|
|
echo "iface br0 inet dhcp" >> /etc/network/interfaces
|
|
|
|
|
echo " bridge_ports $NET_IF" >> /etc/network/interfaces
|
|
|
|
|
echo " bridge_stp off" >> /etc/network/interfaces
|
|
|
|
|
echo " bridge_fd 0" >> /etc/network/interfaces
|
|
|
|
|
echo " " >> /etc/network/interfaces
|
|
|
|
|
echo "iface br0 inet6 auto" >> /etc/network/interfaces
|
|
|
|
|
echo " bridge_ports $NET_IF" >> /etc/network/interfaces
|
|
|
|
|
echo " bridge_stp off" >> /etc/network/interfaces
|
|
|
|
|
echo " bridge_fd 0" >> /etc/network/interfaces
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
echo "Purging netplan,disabling dhcpcd and install ifupdown"
|
|
|
|
|
apt purge nplan -y
|
|
|
|
|
rm /etc/netplan/* -f
|
|
|
|
|
apt install bridge-utils ifupdown -y
|
|
|
|
|
|
|
|
|
|
echo "Doing apt update and apt dist-upgrade"
|
|
|
|
|
apt update
|
|
|
|
|
apt dist-upgrade -y
|
|
|
|
|
echo "Doing pacman -Suu"
|
|
|
|
|
pacman -Suu --noconfirm
|
|
|
|
|
|
|
|
|
|
echo "Creating onstart script in /root"
|
|
|
|
|
echo "#!/bin/bash" > /root/onstart
|
|
|
|
@ -110,11 +100,16 @@ echo "else" >> /root/onstart
|
|
|
|
|
echo "echo \"Passwords not match!\"" >> /root/onstart
|
|
|
|
|
echo "exit 1" >> /root/onstart
|
|
|
|
|
echo "fi" >> /root/onstart
|
|
|
|
|
echo "echo \"Stopping LXD snap daemon and deleting /var/snap/lxd/common/lxd/*\"" >> /root/onstart
|
|
|
|
|
echo "snap disable lxd" >> /root/onstart
|
|
|
|
|
echo "rm /var/snap/lxd/common/lxd/* -rf" >> /root/onstart
|
|
|
|
|
echo "echo \"Opening encrypted partition\"" >> /root/onstart
|
|
|
|
|
echo "echo \$pass_var | cryptsetup open $PARTITION crypt -c -" >> /root/onstart
|
|
|
|
|
echo "partprobe" >> /root/onstart
|
|
|
|
|
echo "zpool import -d /dev/mapper crypt -f -m" >> /root/onstart
|
|
|
|
|
echo "systemctl start lxd" >> /root/onstart
|
|
|
|
|
echo "sleep 5" >> /root/onstart
|
|
|
|
|
echo "snap enable lxd" >> /root/onstart
|
|
|
|
|
echo "snap start lxd" >> /root/onstart
|
|
|
|
|
|
|
|
|
|
chmod +x /root/onstart
|
|
|
|
|
read -p "Press any key for reboot"
|
|
|
|
@ -122,9 +117,9 @@ reboot
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
post_reboot_script () {
|
|
|
|
|
echo "Stopping lxd and delete /var/lib/lxd/*"
|
|
|
|
|
systemctl stop lxd
|
|
|
|
|
rm /var/lib/lxd/* -r
|
|
|
|
|
echo "Stopping lxd and delete /var/snap/lxd/common/lxd/*"
|
|
|
|
|
systemctl stop snap.lxd.daemon
|
|
|
|
|
rm /var/snap/lxd/common/lxd/* -r
|
|
|
|
|
|
|
|
|
|
echo "Executing /root/onstart"
|
|
|
|
|
bash /root/onstart
|
|
|
|
@ -168,20 +163,18 @@ echo "scrollback 5000" >> /root/.screenrc
|
|
|
|
|
echo "hardstatus string \"%{=b kw} %?%-Lw%?%{=br kw}[%n %t]%{=b kw}%?%+Lw%? %= %c\"" >> /root/.screenrc
|
|
|
|
|
|
|
|
|
|
echo "Install utilities"
|
|
|
|
|
apt install -y mc htop screen zfsnap smartmontools
|
|
|
|
|
pacman -S --noconfirm mc htop screen smartmontools pv
|
|
|
|
|
|
|
|
|
|
echo "Setting-up wireguard"
|
|
|
|
|
pacman -S --noconfirm wireguard-dkms wireguard-tools
|
|
|
|
|
lxc profile set default linux.kernel_modules wireguard
|
|
|
|
|
|
|
|
|
|
echo "Set max processes to 1500 in default profile in LXD"
|
|
|
|
|
lxc profile set default limits.processes 1500
|
|
|
|
|
|
|
|
|
|
read -p "Done, press any key to return to main menu"
|
|
|
|
|
main_menu
|
|
|
|
|
}
|
|
|
|
|
echo "Set refresh.retain=2 in snap"
|
|
|
|
|
snap set system refresh.retain=2
|
|
|
|
|
|
|
|
|
|
install_uptrack () {
|
|
|
|
|
cd /tmp
|
|
|
|
|
wget https://ksplice.oracle.com/uptrack/dist/bionic/ksplice-uptrack.deb
|
|
|
|
|
apt install libgtk2-perl dbus-x11 libglade2-0 libpython-stdlib libpython2.7-minimal libpython2.7-stdlib python python-cairo python-dbus python-gi python-glade2 python-gobject-2 python-gtk2 python-minimal python-pycurl python-yaml python2.7 python2.7-minimal -y
|
|
|
|
|
dpkg -i ksplice-uptrack.deb
|
|
|
|
|
read -p "Done, press any key to return to main menu"
|
|
|
|
|
main_menu
|
|
|
|
|
}
|
|
|
|
@ -191,7 +184,6 @@ main_menu () {
|
|
|
|
|
options=(
|
|
|
|
|
1 "Pre-reboot script"
|
|
|
|
|
2 "Post-reboot script"
|
|
|
|
|
3 "Install uptrack-upgrade"
|
|
|
|
|
)
|
|
|
|
|
|
|
|
|
|
choices=$("${cmd[@]}" "${options[@]}" 2>&1 >/dev/tty)
|
|
|
|
@ -208,10 +200,6 @@ main_menu () {
|
|
|
|
|
post_reboot_script
|
|
|
|
|
;;
|
|
|
|
|
|
|
|
|
|
3)
|
|
|
|
|
install_uptrack
|
|
|
|
|
;;
|
|
|
|
|
|
|
|
|
|
esac
|
|
|
|
|
done
|
|
|
|
|
clear
|
|
|
|
|