87 lines
3.0 KiB
Bash
87 lines
3.0 KiB
Bash
#!/usr/bin/env bash
|
|
|
|
# (Keep in mind that default root password is 1234)
|
|
# Flash SBC's SD with Armbian and clone this repository in /root
|
|
|
|
# YOU SHOULD REMOVE THIS SCRIPT AFTER SETUP
|
|
|
|
# initialization
|
|
echo "Starting initialization"
|
|
echo $fqdn > /etc/hostname
|
|
localectl set-keymap $keymap
|
|
timedatectl set-timezone $timezone
|
|
systemctl disable apt-daily-upgrade.timer
|
|
|
|
# install packages
|
|
echo "Starting packages installation"
|
|
sed -i -e "s/$deb_apt_default_repo/$deb_apt_repo/g" /etc/apt/sources.list
|
|
apt update
|
|
apt upgrade -y
|
|
# TODO define $additional-packages, depending on $use-case and $sbc
|
|
apt install -y vim tree tmux neofetch git
|
|
|
|
# add users
|
|
echo "Adding users"
|
|
useradd -U -G sudo -m -s /bin/bash $user
|
|
chmod 700 /home/$user
|
|
echo "Let's define a password for $user as we are about to run sudo with it. It can of course be changed after setup."
|
|
passwd $user
|
|
|
|
# get .sync scripts
|
|
echo "Getting and deploying sync configuration"
|
|
sudo -H -u $user mkdir $sync_directory_path
|
|
sudo -H -u $user git clone https://gitea.kto.black/adminconf/rcs-general.git $sync_directory_path/rcs-general
|
|
sudo -H -u $user $sync_directory_path/rcs-general/install.sh
|
|
sudo -H -u $user git clone https://gitea.kto.black/adminconf/conf-sync.git $sync_directory_path/conf-sync
|
|
sudo -H -u $user cp $sync_directory_path/conf-sync/variables.conf.template \
|
|
$sync_directory_path/conf-sync/variables.conf
|
|
sudo -H -u $user sed -i -e "s/\"desktop\"/\"server\"/g" $sync_directory_path/conf-sync/variables.conf
|
|
sudo -H -u $user $sync_directory_path/conf-sync/install.sh
|
|
|
|
# SSH config
|
|
echo "Getting SSH public key"
|
|
sudo -H -u $user mkdir /home/$user/.ssh
|
|
sudo -H -u $user wget -P /home/$user/.ssh $remote_pubkey_location/$remote_pubkey
|
|
sudo -H -u $user mv /home/$user/.ssh/$remote_pubkey /home/$user/.ssh/authorized_keys
|
|
echo "Editing OpenSSH daemon config..."
|
|
sed -i -e "s/#PasswordAuthentication yes/PasswordAuthentication no/g" /etc/ssh/sshd_config
|
|
sed -i -e "s/PermitRootLogin yes/PermitRootLogin no/g" /etc/ssh/sshd_config
|
|
|
|
# specific function for orangepizero
|
|
if [[ $default_hostname = 'orangepizero' ]]; then
|
|
echo "Setting CPU frequency to performance"
|
|
sed -i -e "s/GOVERNOR=ondemand/GOVERNOR=performance/g" /etc/default/cpufrequtils
|
|
fi
|
|
|
|
# Only run if the user is root
|
|
if [[ $USER != 'root' ]] ; then
|
|
echo "You must run this script as root!"
|
|
exit 1
|
|
fi
|
|
|
|
run_directory_path=$(pwd)
|
|
|
|
# Set parameters TODO replace by a variables.conf
|
|
fqdn='pi2.jab.kto.black'
|
|
keymap='fr'
|
|
timezone='Europe/Paris'
|
|
deb_apt_default_repo='deb.debian.org'
|
|
deb_apt_repo='ftp.fr.debian.org'
|
|
user='alex'
|
|
sync_directory_path="/home/$user/.sync"
|
|
systemd_units_path='/etc/systemd/system'
|
|
remote_pubkey_location='https://keys.kto.black'
|
|
remote_pubkey='home.pub'
|
|
|
|
echo ""
|
|
echo "We're all good here!"
|
|
echo "You should now:"
|
|
echo "* lock root account"
|
|
echo "* copy your SSH config file"
|
|
echo "* reboot the SBC"
|
|
echo "And perhaps:"
|
|
echo "* set a new password for $user"
|
|
echo "* set htop at your convenience"
|
|
echo "* remove password for sudo" # TODO we should automate that, with a flag
|
|
exit 0
|