#!/bin/bash echo "ce script ne doit pas être joué automatiquement" echo "les commandes sont à jouer manuellement, par copier/coller" exit 1 # Le script suppose que vous avez installé votre dedibox avec le partionnement par défaut. # UEFI p1 fait 6OOM, /boot p2 fait 600M, SWAP p3, / p4. # / doit être sur md127. Sinon adapter le script ! # Enfin un fstab est généré, grub et le kernel sont réinstallés. ROOT_PART=/dev/md127 export LC_ALL=C # disable swap swapoff -a cd /mnt # mount / mkdir root_in_ram rootfs home var usr log mount $ROOT_PART /mnt/rootfs/ # copy all the filesystem in ram mount -t tmpfs none /mnt/root_in_ram -o size=90% rsync -a /mnt/rootfs/ /mnt/root_in_ram/ # unount rootfs to recreate partitions umount /mnt/rootfs # stop soft raid mdadm --stop /dev/md{125..127} # Wipe all signatures for i in /dev/nvme?n?p?; do wipefs -a $i; done # NOTE: sleep 1 second between each command # to be able to copy/paste the whole bloc # Create a GPT label. (Removes all parts). parted -s /dev/nvme0n1 mklabel gpt sleep 1 # boot,esp GPT/UEFI *mandatory* parted -a minimal -s /dev/nvme0n1 mkpart primary 0M 600M sleep 1 parted -s /dev/nvme0n1 set 1 boot on parted -s /dev/nvme0n1 set 1 esp on sleep 1 # /boot parted -a minimal -s /dev/nvme0n1 mkpart primary ext4 600M 1200M sleep 1 parted -s /dev/nvme0n1 set 2 raid on sleep 1 # / parted -a minimal -s /dev/nvme0n1 mkpart primary ext4 1200M 2200M sleep 1 parted -s /dev/nvme0n1 set 3 raid on sleep 1 # /var parted -a minimal -s /dev/nvme0n1 mkpart primary ext4 2200M 12200M sleep 1 parted -s /dev/nvme0n1 set 4 raid on sleep 1 # /usr parted -a minimal -s /dev/nvme0n1 mkpart primary ext4 12200M 17200M sleep 1 parted -s /dev/nvme0n1 set 5 raid on sleep 1 # /tmp parted -a minimal -s /dev/nvme0n1 mkpart primary ext4 17200M 18200M sleep 1 parted -s /dev/nvme0n1 set 6 raid on sleep 1 # swap1 parted -a minimal -s /dev/nvme0n1 mkpart primary linux-swap 18200M 19200M sleep 1 # /home parted -a minimal -s /dev/nvme0n1 mkpart primary ext4 19200M 100% sleep 1 parted -s /dev/nvme0n1 set 8 raid on sleep 1 #Copy parts to nvme1n1 for i in /dev/nvme[123]n1; do sgdisk -R=${i} /dev/nvme0n1 sgdisk -G $i partprobe $i done # RAID1 for systems. for part in {2,3,4,5,6}; do mdadm --create /dev/md${part} --metadata=1.2 --level=raid1 --raid-devices=4 \ /dev/{nvme0n1p${part},nvme1n1p${part},nvme2n1p${part},nvme3n1p${part}} done # RAID5 for data. mdadm --create /dev/md8 --metadata=1.2 --level=raid5 --raid-devices=4 \ /dev/{nvme0n1p8,nvme1n1p8,nvme2n1p8,nvme3n1p8} # Make filesystems l=1 for i in /dev/nvme?n1p[7]; do mkswap -f -LSWAP${l} $i 1>/dev/null l=$((l+1)) done apt install dosfstools for i in /dev/nvme?n1p[1]; do mkfs.vfat $i 1>/dev/null done mkfs.ext4 -LBOOT /dev/md2 1>/dev/null mkfs.ext4 -LROOTFS /dev/md3 1>/dev/null mkfs.ext4 -LVAR /dev/md4 1>/dev/null mkfs.ext4 -LUSR /dev/md5 1>/dev/null mkfs.ext4 -LTMP /dev/md6 1>/dev/null mkfs.ext4 -LHOME /dev/md9 1>/dev/null # mount partitions mount -LROOTFS rootfs mount -LHOME home mount -LVAR var mount -LUSR usr # Copy data from RAM. rsync -a root_in_ram/home/ home/ rsync -a root_in_ram/var/ var/ rsync -a root_in_ram/usr/ usr/ rsync -a \ --exclude="home/**" \ --exclude="var/**" \ --exclude="usr/**" \ root_in_ram/ rootfs/ umount home var usr # Generate fstab. cat < rootfs/etc/fstab LABEL=ROOTFS / ext4 errors=remount-ro 0 1 LABEL=BOOT /boot ext4 defaults 0 2 /dev/nvme0n1p1 /boot/efi vfat defaults 0 2 LABEL=HOME /home ext4 defaults 0 2 LABEL=TMP /tmp ext4 defaults 0 2 LABEL=USR /usr ext4 defaults 0 2 LABEL=VAR /var ext4 defaults 0 2 LABEL=SWAP1 none swap sw 0 0 LABEL=SWAP2 none swap sw 0 0 LABEL=SWAP3 none swap sw 0 0 LABEL=SWAP4 none swap sw 0 0 LABEL=SWAP5 none swap sw 0 0 LABEL=SWAP6 none swap sw 0 0 LABEL=SWAP7 none swap sw 0 0 LABEL=SWAP8 none swap sw 0 0 EOT # Chroot + reconfigure grub-pc mount -t proc none /mnt/rootfs/proc mount -o bind /dev /mnt/rootfs/dev mount -o bind /dev/pts /mnt/rootfs/dev/pts mount -t sysfs sys /mnt/rootfs/sys mount --bind /run /mnt/rootfs/run rm -rf /mnt/rootfs/boot/* chroot /mnt/rootfs/ bash export LC_ALL=C mount /boot mount /boot/efi mount /usr mount /var mount /tmp chmod 1777 /tmp # generate RAID configuration /usr/share/mdadm/mkconf > /etc/mdadm/mdadm.conf # purge des paquets de Grub et du noyau, pour réinitialiser complètement les config apt purge -y grub-common grub-efi-amd64 grub-efi-amd64-bin grub2-common for kernel_pkg in $(dpkg -l | grep linux-image | awk '{ print $2 }'); do apt purge -y $kernel_pkg; done # réinstallation des paquets # Note: bien installer Grub sur les 4 disques nvme[0123]n1 apt install -y grub-common grub-efi grub-efi-amd64 grub-efi-amd64-bin grub2-common linux-image-amd64 grub-install /dev/nvme0n1 update-grub dpkg-reconfigure grub-efi-amd64 # paquets utiles pour evolixisation par Ansible apt install -y sudo python python-apt # ajouter l'utilisateur dans le groupe sudo # ça facilite le passage d'Ansible (sans root) usermod -a -G sudo jlecour passwd jlecour # change root password passwd # permit root login via SSH with password sed -i 's/#PermitRootLogin prohibit-password/PermitRootLogin yes/' /etc/ssh/sshd_config exit echo "Evolix partitioning done... You can now reboot!"