119 lines
3.9 KiB
Bash
Executable File
119 lines
3.9 KiB
Bash
Executable File
#!/bin/bash
|
|
|
|
set -e
|
|
|
|
DISK="/dev/vda"
|
|
MOUNTOPTS="defaults,ssd,compress=zstd,autodefrag,noatime"
|
|
PACSTRAP_EXTRA_ARGS="-c"
|
|
### Switch to the script directory
|
|
cd "$(dirname "$0")"
|
|
DIRNAME="$(pwd)"
|
|
source scripts/functions
|
|
|
|
### Format disk
|
|
sgdisk --clear \
|
|
--new=1:0:+1024MiB --typecode=1:ef00 --change-name=1:EFI \
|
|
--new=2:0:0 --typecode=2:8309 --change-name=2:SYS \
|
|
"$DISK"
|
|
partprobe "$DISK"
|
|
|
|
### Create Luks partition
|
|
printf "%s\n" "root" | cryptsetup --batch-mode --verify-passphrase luksFormat /dev/disk/by-partlabel/SYS
|
|
printf "%s\n" "root" | cryptsetup open /dev/disk/by-partlabel/SYS rootfs
|
|
cryptsetup config /dev/disk/by-partlabel/SYS --label sys
|
|
cryptsetup --allow-discards --persistent refresh rootfs
|
|
|
|
### Create filesystem
|
|
mkfs.fat -F32 -n efi /dev/disk/by-partlabel/EFI
|
|
mkfs.btrfs -f --no-discard --label root /dev/mapper/rootfs
|
|
|
|
### Create btrfs subvolumes
|
|
mount -o $MOUNTOPTS /dev/mapper/rootfs /mnt
|
|
cd /mnt
|
|
btrfs subvolume create @
|
|
btrfs subvolume create @root
|
|
btrfs subvolume create @home
|
|
btrfs subvolume create @var
|
|
cd "$DIRNAME"
|
|
umount /mnt
|
|
|
|
### Mount volumes
|
|
mount --mkdir -o $MOUNTOPTS,subvol=@ /dev/mapper/rootfs /mnt
|
|
mount --mkdir -o $MOUNTOPTS,subvol=@root /dev/mapper/rootfs /mnt/root
|
|
mount --mkdir -o $MOUNTOPTS,subvol=@home /dev/mapper/rootfs /mnt/home
|
|
mount --mkdir -o $MOUNTOPTS,subvol=@var /dev/mapper/rootfs /mnt/var
|
|
mount --mkdir /dev/disk/by-partlabel/EFI /mnt/boot
|
|
|
|
### Init pacman
|
|
pacman-key --init
|
|
pacman-key --populate
|
|
pacman -Sy
|
|
|
|
sed -i "s|^#Color.*|Color|" /etc/pacman.conf
|
|
sed -i "s|^#ParallelDownloads.*|ParallelDownloads = 10|" /etc/pacman.conf
|
|
|
|
### Install base
|
|
pacstrap "$PACSTRAP_EXTRA_ARGS" -K /mnt \
|
|
base \
|
|
base-devel \
|
|
linux \
|
|
linux-firmware \
|
|
intel-ucode \
|
|
efibootmgr \
|
|
btrfs-progs \
|
|
neovim \
|
|
bash-completion \
|
|
openssh \
|
|
git
|
|
|
|
### Generate fstab
|
|
genfstab -U /mnt | sed "s/subvolid=[0-9]\{3\},//" > /mnt/etc/fstab
|
|
|
|
### Configure boot environnement
|
|
sed -i "/^HOOKS/s|block|block encrypt btrfs|" /mnt/etc/mkinitcpio.conf
|
|
sed -i "s|^BINARIES.*|BINARIES=\(btrfs\)|" /mnt/etc/mkinitcpio.conf
|
|
|
|
printf "cryptdevice=UUID=%s:rootfs root=UUID=%s rootflags=subvol=@ rw initrd=\\intel-ucode.img initrd=\\initramfs-linux.img loglevel=3 %s intel_iommu=on iommu=pt nvidia_drm.fbdev=1 nvidia_drm.modeset=1" \
|
|
"$(blkid --match-token PARTLABEL=SYS -s UUID -o value)" \
|
|
"$(blkid --match-token LABEL=root -s UUID -o value)" \
|
|
"$(_kernel_colors)" \
|
|
> /mnt/etc/kernel/cmdline
|
|
|
|
sed -i 's|^#default_uki.*|default_uki="/boot/arch-linux.efi"|' /mnt/etc/mkinitcpio.d/linux.preset
|
|
sed -i "s|^#default_options|default_options|" /mnt/etc/mkinitcpio.d/linux.preset
|
|
|
|
arch-chroot /mnt mkinitcpio -P
|
|
|
|
efibootmgr --create --disk $DISK --part 1 --label "Arch Linux" --loader 'arch-linux.efi'
|
|
|
|
### Configure installation
|
|
# Configure vi
|
|
cd /mnt/bin
|
|
ln -s nvim vi
|
|
cd "$DIRNAME"
|
|
|
|
# Configure login
|
|
sed -i 's|^root:.*|root:$y$j9T$BPO20nCgFZ8NuDn6LZ6KU0$681FWXbptNoLEbIKmyRtivt1NCpfPugq0hgtI8lsjCC:19916::::::|' /mnt/etc/shadow
|
|
printf "PermitRootLogin yes" > /mnt/etc/ssh/sshd_config.d/99-permitrootlogin.conf
|
|
|
|
# Configure network
|
|
cp network/00-wired.network /mnt/etc/systemd/network/00-wired.network
|
|
cp network/resolved.conf /mnt/etc/systemd/resolved.conf
|
|
cd /mnt/etc
|
|
ln -sf ../run/systemd/resolve/stub-resolv.conf resolv.conf
|
|
cd "$DIRNAME"
|
|
|
|
# Configure tty
|
|
mkdir -p /mnt/etc/systemd/system/getty@tty1.service.d/
|
|
cp links/tty/autologin.conf /mnt/etc/systemd/system/getty@tty1.service.d/override.conf
|
|
cp links/tty/bash.bashexports /mnt/etc/bash.bashexports
|
|
cp links/tty/bash.bashaliases /mnt/etc/bash.bashaliases
|
|
cp links/tty/bash.bashrc /mnt/etc/bash.bashrc
|
|
cp links/tty/inputrc /mnt/etc/inputrc
|
|
cp links/tty/issue /mnt/etc/issue
|
|
|
|
# Enable services
|
|
arch-chroot /mnt systemctl enable sshd.service systemd-networkd.service systemd-timesyncd.service systemd-resolved.service
|
|
|
|
echo "DONE !!! Dont forget to change passwords and deny PermitRootLogin on /etc/ssh/sshd_config.d/99-permitrootlogin.conf after installation"
|