#!/usr/bin/env sh # shellcheck shell=bash # shellcheck disable=SC2086 # nixos 默认的配置不会生成 /bin/bash，因此需要用 /usr/bin/env # alpine 默认没有 bash，因此 shebang 用 sh，再 exec 切换到 bash set -eE confhome=https://raw.githubusercontent.com/bin456789/reinstall/main confhome_cn=https://cnb.cool/bin456789/reinstall/-/git/raw/main # confhome_cn=https://www.ghproxy.cc/https://raw.githubusercontent.com/bin456789/reinstall/main # 用于判断 reinstall.sh 和 trans.sh 是否兼容 SCRIPT_VERSION=4BACD833-A585-23BA-6CBB-9AA4E08E0005 # 记录要用到的 windows 程序，运行时输出删除 \r WINDOWS_EXES='cmd powershell wmic reg diskpart netsh bcdedit mountvol' BOOT_ENTEY_START_MARK='### BEGIN reinstall.sh ###' BOOT_ENTEY_END_MARK='### END reinstall.sh ###' # 临时目录 # 不用 /tmp，因为 /tmp 挂载在内存的话，可能不够空间 tmp=/reinstall-tmp # 强制 linux 程序输出英文，防止 grep 不到想要的内容 # https://www.gnu.org/software/gettext/manual/html_node/The-LANGUAGE-variable.html export LC_ALL=C # 处理部分用户用 su 切换成 root 导致环境变量没 sbin 目录 # 也能处理 cygwin bash 没有添加 -l 运行 reinstall.sh # 不要漏了最后的 $PATH，否则会找不到 windows 系统程序例如 diskpart export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH # 如果不是 bash 的话，继续执行会有语法错误，因此在这里判断是否 bash if [ -z "$BASH" ] || # el 的 sh 是 bash 运行在 posix 模式，依然有 $BASH 和 $BASH_VERSION { [ -n "$BASH" ] && [ -n "$POSIXLY_CORRECT" ]; }; then if ! command -v bash >/dev/null; then if [ -f /etc/alpine-release ]; then if ! apk add bash; then echo "Error while install bash." >&2 exit 1 fi else echo "Please run this script with bash." >&2 exit 1 fi fi exec bash "$0" "$@" fi # 好像跟 trap SIGINT 有冲突 # 记录日志，过滤含有 password 的行 # exec > >(tee >(grep -iv password >>/reinstall.log)) 2>&1 THIS_SCRIPT=$(readlink -f "$0") trap 'trap_err $LINENO $?' ERR trap_err() { line_no=$1 ret_no=$2 error "Line $line_no return $ret_no" sed -n "$line_no"p "$THIS_SCRIPT" } is_in_windows() { [ "$(uname -o)" = Cygwin ] || [ "$(uname -o)" = Msys ] } if is_in_windows; then reinstall_____='.\reinstall.bat' else reinstall_____='sh reinstall.sh' fi usage_and_exit() { # kali 官网的 202x.x iso 安装后，apt 源是 kali-rolling # 微软商店的 wsl kali，apt 源是 kali-last-snapshot cat <&2 } warn() { local msg if [ "$1" = false ]; then shift msg=$* else msg="Warning: $*" fi echo_color_text '\e[33m' "$msg" >&2 } error() { echo_color_text '\e[31m' "***** ERROR *****" >&2 echo_color_text '\e[31m' "$*" >&2 } echo_color_text() { color="$1" shift plain="\e[0m" echo -e "$color$*$plain" } error_and_exit() { error "$@" exit 1 } show_dd_tips() { warn false '********** 提醒 Info **********' warn false '用户名/密码/公钥仅用于安装时登录 SSH 查看日志/救砖，不会应用到新系统。' warn false '镜像的用户名/密码/公钥不会被修改。' warn false warn false 'The Username/Password/Public Key is only for SSH login to view logs or rescue the system during installation, it will not be applied to the new system.' warn false 'The Username/Password/Public Key inside the image will NOT be modified.' warn false '**********************************' } show_fnos_tips() { warn false '********** 提醒 Info **********' warn false '用户名/密码/公钥仅用于安装时登录 SSH 查看日志/救砖，不会应用到新系统。' warn false '安装完成后，你需要尽快到 http://IP:5666 配置账号密码。' warn false '安装完成后，SSH 服务不会开启，你需要到 http://IP:5666 自行开启。' warn false warn false 'The Username/Password/Public Key is only for SSH login to view logs or rescue the system during installation, it will not be applied to the new system.' warn false 'After installation, you need to config the username and password on http://IP:5666 as soon as possible.' warn false 'After installation, SSH Service is disabled. You need to enable it from http://IP:5666.' warn false '**********************************' } show_url_in_args() { while [ $# -gt 0 ]; do case "$1" in [Hh][Tt][Tt][Pp][Ss]://* | [Hh][Tt][Tt][Pp]://* | [Mm][Aa][Gg][Nn][Ee][Tt]:*) echo "$1" ;; esac shift done } curl() { is_have_cmd curl || install_pkg curl # 显示 url show_url_in_args "$@" >&2 # 添加 -f, --fail，不然 404 退出码也为0 # 32位 cygwin 已停止更新，证书可能有问题，先添加 --insecure # centos 7 curl 不支持 --retry-connrefused --retry-all-errors # 因此手动 retry for i in $(seq 5); do if command curl --insecure --connect-timeout 10 -f "$@"; then return else ret=$? # 403 404 错误，或者达到重试次数 if [ $ret -eq 22 ] || [ $i -eq 5 ]; then return $ret fi sleep 1 fi done } mask2cidr() { local x=${1##*255.} set -- 0^^^128^192^224^240^248^252^254^ $(((${#1} - ${#x}) * 2)) ${x%%.*} x=${1%%"$3"*} echo $(($2 + (${#x} / 4))) } is_in_china() { [ "$force_cn" = 1 ] && return 0 if [ -z "$_loc" ]; then # www.cloudflare.com/dash.cloudflare.com 国内访问的是美国服务器，而且部分地区被墙 # 以下这些都是用 cf cdn 且开通了国内 cdn 节点 # www.visa.com.cn # www.garmin.com.cn # www.prologis.cn # www.autodesk.com.cn # www.keysight.com.cn if ! _loc=$(curl -L http://www.qualcomm.cn/cdn-cgi/trace | grep '^loc=' | cut -d= -f2 | grep .); then error_and_exit "Can not get location." fi echo "Location: $_loc" >&2 fi [ "$_loc" = CN ] } is_in_windows() { [ "$(uname -o)" = Cygwin ] || [ "$(uname -o)" = Msys ] } is_in_alpine() { [ -f /etc/alpine-release ] } is_use_cloud_image() { [ -n "$cloud_image" ] && [ "$cloud_image" = 1 ] } is_force_use_installer() { [ -n "$installer" ] && [ "$installer" = 1 ] } is_use_dd() { [ "$distro" = dd ] } is_boot_in_separate_partition() { mount | grep -q ' on /boot type ' } is_os_in_btrfs() { mount | grep -q ' on / type btrfs ' } is_os_in_subvol() { subvol=$(awk '($2=="/") { print $i }' /proc/mounts | grep -o 'subvol=[^ ]*' | cut -d= -f2) [ "$subvol" != / ] } get_os_part() { awk '($2=="/") { print $1 }' /proc/mounts } umount_all() { # windows defender 打开时，cygwin 运行 mount 很慢，但 cat /proc/mounts 很快 if mount_lists=$(mount | grep -w "on $1" | awk '{print $3}' | grep .); then # alpine 没有 -R if umount --help 2>&1 | grep -wq -- '-R'; then umount -R "$1" else echo "$mount_lists" | tac | xargs -n1 umount fi fi } cp_to_btrfs_root() { mount_dir=$tmp/reinstall-btrfs-root if ! grep -q $mount_dir /proc/mounts; then mkdir -p $mount_dir mount "$(get_os_part)" $mount_dir -t btrfs -o subvol=/ fi cp -rf "$@" "$mount_dir" } is_host_has_ipv4_and_ipv6() { host=$1 install_pkg dig # dig会显示cname结果，cname结果以.结尾，grep -v '\.$' 用于去除 cname 结果 res=$(dig +short $host A $host AAAA | grep -v '\.$') # 有.表示有ipv4地址，有:表示有ipv6地址 grep -q \. <<<$res && grep -q : <<<$res } is_netboot_xyz() { [ "$distro" = netboot.xyz ] } is_alpine_live() { [ "$distro" = alpine ] && [ "$hold" = 1 ] } is_have_initrd() { ! is_netboot_xyz } is_use_firmware() { # shellcheck disable=SC2154 [ "$nextos_distro" = debian ] && ! is_virt } is_digit() { [[ "$1" =~ ^[0-9]+$ ]] } is_port_valid() { is_digit "$1" && [ "$1" -ge 1 ] && [ "$1" -le 65535 ] } get_host_by_url() { cut -d/ -f3 <<<$1 } get_scheme_and_host_by_url() { cut -d/ -f1-3 <<<$1 } get_function() { declare -f "$1" } get_function_content() { declare -f "$1" | sed '1d;2d;$d' } insert_into_file() { local file=$1 local location=$2 local regex_to_find=$3 shift 3 if ! [ -f "$file" ]; then error_and_exit "File not found: $file" fi # 默认 grep -E if [ $# -eq 0 ]; then set -- -E fi line_num=$(grep "$@" -n "$regex_to_find" "$file" | cut -d: -f1) found_count=$(echo "$line_num" | wc -l) if [ ! "$found_count" -eq 1 ]; then return 1 fi case "$location" in before) line_num=$((line_num - 1)) ;; replace) sed -i "${line_num}d" "$file" line_num=$((line_num - 1)) ;; after) ;; *) return 1 ;; esac sed -i "${line_num}r /dev/stdin" "$file" } test_url() { test_url_real false "$@" } test_url_grace() { test_url_real true "$@" } test_url_real() { grace=$1 url=$2 expect_types=$3 var_to_eval=$4 info test url failed() { $grace && return 1 error_and_exit "$@" } tmp_file=$tmp/img-test # TODO: 好像无法识别 nixos 官方源的跳转 # 有的服务器不支持 range，curl会下载整个文件 # 所以用 head 限制 1M # 过滤 curl 23 错误（head 限制了大小） # 也可用 ulimit -f 但好像 cygwin 不支持 # ${PIPESTATUS[n]} 表示第n个管道的返回值 echo $url for i in $(seq 5 -1 0); do if command curl --insecure --connect-timeout 10 -Lfr 0-1048575 "$url" \ 1> >(exec head -c 1048576 >$tmp_file) \ 2> >(exec grep -v 'curl: (23)' >&2); then break else ret=$? msg="$url not accessible" case $ret in 22) # 403 404 # 这里的 failed 虽然返回 1，但是不会中断脚本，因此要手动 return failed "$msg" return "$ret" ;; 23) # 限制了空间 break ;; *) # 其他错误 if [ $i -eq 0 ]; then failed "$msg" return "$ret" fi ;; esac sleep 1 fi done # 如果要检查文件类型 if [ -n "$expect_types" ]; then install_pkg file real_type=$(file_enhanced $tmp_file) echo "File type: $real_type" # debian 9 ubuntu 16.04-20.04 可能会将 iso 识别成 raw for type in $expect_types $([ "$expect_types" = iso ] && echo raw); do if [[ ."$real_type" = *."$type" ]]; then # 如果要设置变量 if [ -n "$var_to_eval" ]; then IFS=. read -r "${var_to_eval?}" "${var_to_eval}_warp" <<<"$real_type" fi return fi done failed "$url Expected type: $expect_types Actually type: $real_type" fi } fix_file_type() { # gzip的mime有很多种写法 # centos7中显示为 x-gzip，在其他系统中显示为 gzip，可能还有其他 # 所以不用mime判断 # https://www.digipres.org/formats/sources/tika/formats/#application/gzip # centos 7 上的 file 显示 qcow2 的 mime 为 application/octet-stream # file debian-12-genericcloud-amd64.qcow2 # debian-12-genericcloud-amd64.qcow2: QEMU QCOW Image (v3), 2147483648 bytes # file --mime debian-12-genericcloud-amd64.qcow2 # debian-12-genericcloud-amd64.qcow2: application/octet-stream; charset=binary # --extension 不靠谱 # file -b /reinstall-tmp/img-test --mime-type # application/x-qemu-disk # file -b /reinstall-tmp/img-test --extension # ??? # 1. 删除,;# # DOS/MBR boot sector; partition 1: ... # gzip compressed data, was ... # # ISO 9660 CD-ROM filesystem data... (有些 file 版本开头输出有井号) # 2. 删除开头的空格 # 3. 删除无意义的单词 POSIX, Unicode, UTF-8, ASCII # POSIX tar archive (GNU) # Unicode text, UTF-8 text # UTF-8 Unicode text, with very long lines # ASCII text # 4. 下面两种都是 raw # DOS/MBR boot sector # x86 boot sector; partition 1: ... sed -E \ -e 's/[,;#]//g' \ -e 's/^[[:space:]]*//' \ -e 's/(POSIX|Unicode|UTF-8|ASCII)//gi' \ -e 's/^DOS\/MBR boot sector/raw/i' \ -e 's/^x86 boot sector/raw/i' \ -e 's/^Zstandard/zstd/i' \ -e 's/^UDF/iso/i' \ -e 's/^Windows imaging \(WIM\) image/wim/i' | awk '{print $1}' | to_lower } # 不用 file -z，因为 # 1. file -z 只能看透一层 # 2. alpine file -z 无法看透部分镜像（前1M），例如： # guajibao-win10-ent-ltsc-2021-x64-cn-efi.vhd.gz # guajibao-win7-sp1-ent-x64-cn-efi.vhd.gz # win7-ent-sp1-x64-cn-efi.vhd.gz # 还要注意 centos 7 没有 -Z 只有 -z file_enhanced() { file=$1 full_type= while true; do type="$(file -b $file | fix_file_type)" full_type="$type.$full_type" case "$type" in xz | gzip | zstd) install_pkg "$type" $type -dc <"$file" | head -c 1048576 >"$file.inside" mv -f "$file.inside" "$file" ;; tar) install_pkg "$type" # 隐藏 gzip: unexpected end of file 提醒 tar xf "$file" -O 2>/dev/null | head -c 1048576 >"$file.inside" mv -f "$file.inside" "$file" ;; *) break ;; esac done # shellcheck disable=SC2001 echo "$full_type" | sed 's/\.$//' } # trans.sh 有相同方法 add_community_repo_for_alpine() { local ver mirror # 先检查原来的 repo 是不是 edge 或者 latest-stable if grep -q "^http.*/edge/main$" /etc/apk/repositories; then ver=edge elif grep -q "^http.*/latest-stable/main$" /etc/apk/repositories; then ver=latest-stable else ver=v$(cut -d. -f1,2 >/etc/apk/repositories fi } is_in_container() { { is_have_cmd systemd-detect-virt && systemd-detect-virt -qc; } || [ -d /proc/vz ] || { [ -f /proc/1/environ ] && grep -q container=lxc /proc/1/environ; } } # 使用 | del_br ，但返回 del_br 之前返回值 run_with_del_cr() { if false; then # ash 不支持 PIPESTATUS[n] res=$("$@") && ret=0 || ret=$? echo "$res" | del_cr return $ret else "$@" | del_cr return ${PIPESTATUS[0]} fi } run_with_del_cr_template() { if get_function _$exe >/dev/null; then run_with_del_cr _$exe "$@" else run_with_del_cr command $exe "$@" fi } wmic() { if is_have_cmd wmic; then # 如果参数没有 GET，添加 GET，防止以下报错 # wmic memorychip /format:list # 此级别的开关异常。 has_get=false for i in "$@"; do # 如果参数有 GET if [ "$(to_upper <<<"$i")" = GET ]; then has_get=true break fi done # 输出为 /format:list 格式 if $has_get; then command wmic "$@" /format:list else command wmic "$@" get /format:list fi return fi # powershell wmi 默认参数 local namespace='root\cimv2' local class= local filter= local props= # namespace if [[ "$(to_upper <<<"$1")" = /NAMESPACE* ]]; then # 删除引号，删除 \\ namespace=$(cut -d: -f2 <<<"$1" | sed -e "s/[\"']//g" -e 's/\\\\//g') shift fi # class if [[ "$(to_upper <<<"$1")" = PATH ]]; then class=$2 shift 2 else # wmic alias list brief case "$(to_lower <<<"$1")" in nicconfig) class=Win32_NetworkAdapterConfiguration ;; memorychip) class=Win32_PhysicalMemory ;; *) class=Win32_$1 ;; esac shift fi # filter if [[ "$(to_upper <<<"$1")" = WHERE ]]; then filter=$2 shift 2 fi # props if [[ "$(to_upper <<<"$1")" = GET ]]; then props=$2 shift 2 fi if ! [ -f "$tmp/wmic.ps1" ]; then curl -Lo "$tmp/wmic.ps1" "$confhome/wmic.ps1" fi powershell -NoLogo -NoProfile -NonInteractive -ExecutionPolicy Bypass \ -File "$(cygpath -w "$tmp/wmic.ps1")" \ -Namespace "$namespace" \ -Class "$class" \ ${filter:+"-Filter"} ${filter:+"$filter"} \ ${props:+"-Properties"} ${props:+"$props"} } is_virt() { if [ -z "$_is_virt" ]; then if is_in_windows; then # https://github.com/systemd/systemd/blob/main/src/basic/virt.c # https://sources.debian.org/src/hw-detect/1.159/hw-detect.finish-install.d/08hw-detect/ vmstr='VMware|VirtualBox|VMW|Hyper-V|Bochs|QEMU|KVM|OpenStack|KubeVirt|innotek|Xen|HVM|Parallels|BHYVE|OVMF' vmstr+='|virt|Virtual|Virtualization' for name in ComputerSystem BIOS BaseBoard; do if wmic $name | grep -Eiw $vmstr; then _is_virt=true break fi done # 用运行 windows ，肯定够内存运行 alpine lts netboot # 何况还能停止 modloop # 没有风扇和温度信息，大概是虚拟机 # 阿里云 倚天710 arm 有温度传感器 # ovh KS-LE-3 没有风扇和温度信息？ if false && [ -z "$_is_virt" ] && ! wmic /namespace:'\\root\cimv2' PATH Win32_Fan 2>/dev/null | grep -q ^Name && ! wmic /namespace:'\\root\wmi' PATH MSAcpi_ThermalZoneTemperature 2>/dev/null | grep -q ^Name; then _is_virt=true fi else # aws t4g debian 11 # systemd-detect-virt: 为 none，即使装了dmidecode # virt-what: 未装 deidecode时结果为空，装了deidecode后结果为aws # 所以综合两个命令的结果来判断 if is_have_cmd systemd-detect-virt && systemd-detect-virt -v; then _is_virt=true fi if [ -z "$_is_virt" ]; then # debian 安装 virt-what 不会自动安装 dmidecode，因此结果有误 install_pkg dmidecode virt-what # virt-what 返回值始终是0，所以用是否有输出作为判断 if [ -n "$(virt-what)" ]; then _is_virt=true fi fi fi if [ -z "$_is_virt" ]; then _is_virt=false fi echo "VM: $_is_virt" fi $_is_virt } is_cpu_supports_x86_64_v3() { # 用 ld.so/cpuid/coreinfo.exe 更准确 # centos 7 /usr/lib64/ld-linux-x86-64.so.2 没有 --help # alpine gcompat /lib/ld-linux-x86-64.so.2 没有 --help # https://en.wikipedia.org/wiki/X86-64#Microarchitecture_levels # https://learn.microsoft.com/sysinternals/downloads/coreinfo # abm = popcnt + lzcnt # /proc/cpuinfo 不显示 lzcnt, 可用 abm 代替，但 cygwin 也不显示 abm # /proc/cpuinfo 不显示 osxsave, 故用 xsave 代替 # https://github.com/HenrikBengtsson/x86-64-level/blob/develop/x86-64-level # 在 32 位 cygwin 上也能正常识别 need_flags="avx avx2 bmi1 bmi2 f16c fma movbe xsave" had_flags=$(grep -m 1 ^flags /proc/cpuinfo | awk -F': ' '{print $2}') for flag in $need_flags; do if ! grep -qw $flag <<<"$had_flags"; then return 1 fi done } assert_cpu_supports_x86_64_v3() { if ! is_cpu_supports_x86_64_v3; then error_and_exit "Could not install $distro $releasever because the CPU does not support x86-64-v3." fi } get_http_log_url() { echo "http://IP$([ "${web_port:-80}" = 80 ] || echo :$web_port)$web_path" } # 判断语言字符是否合法，允许全名和缩写 is_valid_lang_chars() { [[ "$1" =~ ^[A-Za-z_-]+$ ]] } lang_convert() { local out_format=$1 local in=$lang if ! is_valid_lang_chars "$in"; then return fi # 如果是 fallback_ 开头的，先得到 fallback 后的 cc-cc if [[ "$out_format" = fallback_* ]]; then in=$(lang_convert_inner "$in" fallback_cc-cc) # 如果要输出 fallback_cc-cc ，直接输出 if [ "$out_format" = fallback_cc-cc ]; then printf '%s' "$in" return fi # 去除 fallback_ 前缀 out_format=${out_format#fallback_} fi # 尝试转换成目标格式 local out out=$(lang_convert_inner "$in" "$out_format") # 如果转换成功，则表示输入的语言在列表里面 if [ -n "$out" ]; then printf '%s' "$out" else # 如果没有，则手动截取 case "$out_format" in cc) cut -d- -f1 <<<"$in" ;; cc-cc) cut -d- -f1-2 <<<"$in" ;; cc-cc-cc) cut -d- -f1-3 <<<"$in" ;; esac fi } lang_convert_inner() { local in=$1 local out_format=$2 if ! is_valid_lang_chars "$in"; then return fi # 可能得到 / ，用 is_valid_lang_chars 过滤掉 local out if out=$( lang_table_with_head | sed 1d | to_lower | awk \ -v val="$in" \ -v c1="$(get_col_number cc)" \ -v c2="$(get_col_number cc-cc)" \ -v c3="$(get_col_number cc-cc-cc)" \ -v c4="$(get_col_number full_language)" \ -v cout="$(get_col_number "$out_format")" \ '$c1 == val || $c2 == val || $c3 == val || $c4 == val { print $cout }' ) && is_valid_lang_chars "$out"; then printf '%s' "$out" fi } get_col_number() { local col_name=$1 # 找出第一行，用 xargs -n 1 转成列，然后用 grep 找到行号，再用 cut 取出行号 lang_table_with_head | head -1 | xargs -n 1 | grep -Fxn "$col_name" | cut -d: -f1 } lang_table_with_head() { # 没有 gb mx 开头的镜像，列出它们作用是，用户输入时识别成 en-gb es-mx # ca 并非对应 fr-ca # pt 对应 pt-br，而不是 pt-pt # uk 对应乌克兰语而不是英国，如果用户输入 uk ，要识别成乌克兰 # 第 5 列是可回落的语言 cat <,\n,g' | # 使每个 占一行 grep -Ei '\.(iso|img)$' | # 找出是 iso 或 img 的行 sed -E 's,(.+),\2 \1,' # 提取文件名和链接 else sed -e 's,,\n,g' -e 's,,\n,g' | # 使每个镜像占一行 grep -Ei '\.(iso|img)' | # 找出是 iso 或 img 的行 sed -E 's,([^<]+).+$tmp/win.list get_windows_iso_link_inner fi } get_shortest_line() { awk '(NR == 1 || length($0) < length(shortest)) { shortest = $0 } END { print shortest }' } get_shortest_line_by_field() { local field=$1 awk "(NR == 1 || length(\$$field) < length(field)) { line = \$0; field = \$$field } END { print line }" } month_to_mm() { local month="${1,,}" # 转小写 local mon="${month:0:3}" # 取前三个字母 local i=0 for _mon in jan feb mar apr may jun jul aug sep oct nov dec; do i=$((i + 1)) if [ "$mon" = "$_mon" ]; then printf "%02d\n" "$i" return fi done return 1 } get_best_windows_iso_line() { local lines lines=$(cat) # 注意 # zh-cn_windows_server_2019_x64_dvd_19d65722.iso 2022-11-15 # cn_windows_server_2019_updated_april_2021_x64_dvd_a6dae187.iso 2021-04-20 # zh-cn 这种命名比 cn 新，可以通过此判断 # 我们已经在前面是先查找 cc-cc 格式，没找到才查找 cc 格式，因此在这里它们不会同时存在，无需处理 # 排除 debug 版 lines=$(echo "$lines" | grep -Ei -v '_(symbols|debug|debugging|checked)_') # 先选择 win10/11 大版本更新的 (version 26h1) 或者有 sp 版本的 (sp1, windows_8.1_with_update_) if grep_lines=$(grep -Ei "_(version_[0-9h]{4}|sp[1-9]|service_pack|with_update)_" <<<"$lines"); then lines=$grep_lines fi # 从 _version_26h1_ 字符串中选出最新的版本号 local latest_version= if latest_version=$(awk '{print $1}' <<<"$lines" | grep -Eio "_version_[0-9h]{4}_" | cut -d_ -f3 | sort -r | head -1 | grep .); then info "ISO Latest version" echo "$latest_version" >&2 lines=$(grep -Fi "_version_${latest_version}_" <<<"$lines") fi # 从 _updated_sep_2026_ 字符串中选出最新的日期 local latest_yyyymm= local latest_updated_keyword= if updated_keywords=$(awk '{print $1}' <<<"$lines" | grep -Eio '_updated_[a-z]+_[0-9]{4}_'); then for _updated_xxx_20xx_ in $updated_keywords; do IFS=_ read -r _ _ month yyyy <<<"$_updated_xxx_20xx_" # alpine 不支持这种写法 # yymm=$(date -d "$month 1 $year" "+%y%m") yyyymm="${yyyy}$(month_to_mm "$month")" if [ -z "$latest_yyyymm" ] || [ "$yyyymm" -gt "$latest_yyyymm" ]; then latest_yyyymm=$yyyymm latest_updated_keyword=$_updated_xxx_20xx_ fi done info "ISO Latest date" echo "${latest_yyyymm:0:4}-${latest_yyyymm:4:2}" >&2 lines=$(grep -Fi "$latest_updated_keyword" <<<"$lines") fi # 优先使用 vl if grep_lines=$(grep -Fi "_vl_" <<<"$lines"); then lines=$grep_lines fi # 最后按版本号倒序，选出第一行 echo "$lines" | sort -Vr | head -1 } get_windows_iso_link_inner() { regexs=() # msdn if [ -n "$label_msdn" ]; then if [ "$label_msdn" = _ ]; then label_msdn= fi for lang in $langs; do # en_windows_vista_sp2_x64_dvd_342267.iso # cn_windows_vista_with_sp2_x64_dvd_x15-36322.iso # en_windows_8_x64_dvd_915440.iso # en_windows_8.1_pro_vl_with_update_x64_dvd_6050880.iso # en_windows_8.1_with_update_x64_dvd_6051480.iso # en_windows_8.1_n_with_update_x64_dvd_6051677.iso # en-us_windows_10_iot_enterprise_version_22h2_arm64_dvd_39566b6b.iso # en-us_windows_11_consumer_editions_version_26h1_updated_july_2026_x64_dvd_f69a9a1e.iso # en-us_windows_server_2025_updated_july_2026_x64_dvd_4e6f5a42.iso local prefix= for i in ${lang} windows ${server} ${version} ${label_msdn}; do if [ -n "$i" ]; then prefix+="${i}_" fi done # 用于准确匹配，例如防止 2012 匹配到 2012 r2 # 首先匹配 label 后面紧接着这些关键字的 # 然后匹配 label 后面紧接着 x64/arm64 的 # 最后模糊匹配 regexs+=("${prefix}(version|vl|with|updated|sp[0-9])_.*${arch_win}.*\.(iso|img)") regexs+=("${prefix}${arch_win}.*\.(iso|img)") regexs+=("${prefix}.*${arch_win}.*\.(iso|img)") done fi # vlsc # SW_DVD5_Windows_Vista_Business_64BIT_Arabic_Full_Int_SP2_MLF_X15-40038.ISO # SW_DVD5_SA_Win_Vista_Enterprise_64BIT_Arabic_Full_Int_SP2_MLF_X15-40408.ISO # SW_DVD5_Win_10_IOT_Enterprise_2015_LTSB_64Bit_EMB_English_OEM_X20-20063.IMG # SW_DVD9_Win_Pro_10_22H2.15_Arm64_English_Pro_Ent_EDU_N_MLF_X23-67223.ISO # SWDVD9_WinSrvSTDCORE2025_24H2.16_64Bit_English_DC_STD_MLF_RTMUpdJan26_X24-26760.iso # 先判断 full_lang 是否为空 # 因为假如用户输入的 lang 不正确，full_lang 就为空，正则表达式就无法只匹配当前语言 for full_lang in $full_langs; do if [ -n "$label_vlsc" ] && [ -n "$full_lang" ]; then regexs+=("sw_?dvd[59]_(SA_)?win(dows)?_?${label_vlsc}_?${version}_.*${arch_win_vlsc}.*_${full_lang}.*\.(iso|img)") regexs+=("sw_?dvd[59]_(SA_)?win_?(dows)?${version}_${label_vlsc}_?.*${arch_win_vlsc}.*_${full_lang}.*\.(iso|img)") # LTSC 没有 windows 主版本号 # SW_DVD5_WIN_ENT_LTSB_10_2015_64BIT_Arabic_MLF_X20-26578.ISO # 将 ENT_LTSB_10_2015 视为 label # SW_DVD5_WIN_ENT_LTSB_2016_64BIT_Arabic_MLF_X21-07425.ISO # 将 ENT_LTSB_2016 视为 label if is_ltsc; then regexs+=("sw_?dvd[59]_(SA_)?win(dows)?_?${label_vlsc}_?.*${arch_win_vlsc}.*_${full_lang}.*\.(iso|img)") fi fi done # 查找 for regex in "${regexs[@]}"; do regex=${regex// /_} echo "looking for: $regex" >&2 local matched_lines if matched_lines=$(grep -Ei "^$regex " "$tmp/win.list"); then info "ISO Matched" cat -n <<<"$matched_lines" >&2 if line=$(echo "$matched_lines" | get_best_windows_iso_line | grep .) && iso=$(awk '{print $2}' <<<"$line" | grep .); then info "ISO Selected" echo " $line" >&2 return fi fi done error_and_exit "Could not find iso for this windows edition or language." } set_var() { # eval 不安全 # 仅 bash 可用 printf -v "$1" "%s" "$2" # 或者 # IFS= read -r "$1" <<<"$2" } setos() { local step=$1 local distro=$2 local releasever=$3 info set $step $distro $releasever set_osvar() { set_var "${step}_$1" "$2" } setos_netboot.xyz() { if is_efi; then if [ "$basearch" = aarch64 ]; then set_osvar efi https://boot.netboot.xyz/ipxe/netboot.xyz-arm64.efi else set_osvar efi https://boot.netboot.xyz/ipxe/netboot.xyz.efi fi else set_osvar vmlinuz https://boot.netboot.xyz/ipxe/netboot.xyz.lkrn fi } setos_alpine() { is_virt && flavour=virt || flavour=lts # 不要用https 因为甲骨文云arm initramfs阶段不会从硬件同步时钟，导致访问https出错 if is_in_china; then mirror=http://mirror.nju.edu.cn/alpine/v$releasever else mirror=http://dl-cdn.alpinelinux.org/alpine/v$releasever fi set_osvar vmlinuz "$mirror/releases/$basearch/netboot/vmlinuz-$flavour" set_osvar initrd "$mirror/releases/$basearch/netboot/initramfs-$flavour" set_osvar modloop "$mirror/releases/$basearch/netboot/modloop-$flavour" set_osvar repo "$mirror/main" } setos_debian() { is_debian_elts() { [ "$releasever" -le 11 ] } if [ "$releasever" -le 9 ] && [ "$basearch" = aarch64 ]; then error_and_exit "Debian $releasever ELTS does not support aarch64." fi # 用此标记要是否 elts, 用于安装后修改 elts/etls-cn 源 # shellcheck disable=SC2034 is_debian_elts && elts=1 || elts=0 case "$releasever" in 9) codename=stretch ;; 10) codename=buster ;; 11) codename=bullseye ;; 12) codename=bookworm ;; 13) codename=trixie ;; 14) codename=forky ;; 15) codename=duke ;; esac if ! is_use_cloud_image && is_debian_elts && is_in_china; then warn " Due to the lack of Debian Freexian ELTS instaler mirrors in China, the installation time may be longer. Continue? 由于没有 Debian Freexian ELTS 国内安装源，安装时间可能会比较长。 继续安装? " read -r -p '[y/N]: ' if ! [[ "$REPLY" = [Yy] ]]; then exit fi fi # udeb_mirror 安装时的源 # deb_mirror 安装后要修改成的源 if is_debian_elts; then if is_in_china; then # https://github.com/tuna/issues/issues/1999 # nju 也没同步 udeb_mirror=deb.freexian.com/extended-lts deb_mirror=mirror.nju.edu.cn/debian-elts initrd_mirror=mirror.nju.edu.cn/debian-archive/debian else # 按道理不应该用官方源，但找不到其他源 udeb_mirror=deb.freexian.com/extended-lts deb_mirror=deb.freexian.com/extended-lts initrd_mirror=archive.debian.org/debian fi else if is_in_china; then # ftp.cn.debian.org 不在国内还严重丢包 # https://www.itdog.cn/ping/ftp.cn.debian.org mirror=mirror.nju.edu.cn/debian else mirror=deb.debian.org/debian # fastly fi udeb_mirror=$mirror deb_mirror=$mirror initrd_mirror=$mirror fi # 云镜像和 firmware 下载源 if is_in_china; then cdimage_mirror=https://mirror.nju.edu.cn/debian-cdimage else cdimage_mirror=https://cdimage.debian.org/images # 在瑞典，不是 cdn # cloud.debian.org 同样在瑞典，不是 cdn fi # kernel if [ "$no_cloud_kernel" = 1 ]; then flavour= else is_virt && flavour=-cloud || flavour= # debian 10 云内核 vultr efi vnc 没有显示 # 现在改成手动 --no-cloud-kernel 规避 # [ "$releasever" -le 10 ] && flavour= # 甲骨文 arm64 cloud 内核 vnc 没有显示 [ "$basearch_alt" = arm64 ] && flavour= fi if is_use_cloud_image; then # cloud image if [ -z "$img" ]; then # https://salsa.debian.org/cloud-team/debian-cloud-images/-/tree/master/config_space/bookworm/files/etc/default/grub.d # cloud 包括各种奇怪的优化，例如不显示 grub 菜单 # 因此使用 nocloud if false; then is_virt && ci_type=genericcloud || ci_type=generic else ci_type=nocloud fi img=$cdimage_mirror/cloud/$codename/latest/debian-$releasever-$ci_type-$basearch_alt.qcow2 fi set_osvar img "$img" else # 传统安装 initrd_dir=dists/$codename/main/installer-$basearch_alt/current/images/netboot/debian-installer/$basearch_alt set_osvar udeb_mirror "$udeb_mirror" set_osvar vmlinuz "https://$initrd_mirror/$initrd_dir/linux" set_osvar initrd "https://$initrd_mirror/$initrd_dir/initrd.gz" set_osvar ks "$confhome/debian.cfg" set_osvar firmware "$cdimage_mirror/unofficial/non-free/firmware/$codename/current/firmware.cpio.gz" set_osvar codename "$codename" fi # 官方安装和云镜像都会用到的 set_osvar deb_mirror "$deb_mirror" set_osvar kernel "linux-image$flavour-$basearch_alt" } setos_kali() { if is_use_cloud_image; then : else # 传统安装 if is_in_china; then hostname=mirror.nju.edu.cn else # http.kali.org (geoip 重定向) 到 kali.download (cf) 或最近的站点 # 文档还说 which is guaranteed to be up-to-date # 但是目测有可能重定义到一个拉黑了部分 IP 的服务器 # 因此这里用 kali.download (cf) # https://www.kali.org/docs/community/kali-linux-mirrors/ # https://www.kali.org/docs/general-use/kali-apt-sources/ hostname=kali.download fi codename=kali-$releasever mirror=http://$hostname/kali/dists/$codename/main/installer-$basearch_alt/current/images/netboot/debian-installer/$basearch_alt is_virt && flavour=-cloud || flavour= set_osvar vmlinuz "$mirror/linux" set_osvar initrd "$mirror/initrd.gz" set_osvar ks "$confhome/debian.cfg" set_osvar deb_mirror "$hostname/kali" set_osvar udeb_mirror "$hostname/kali" set_osvar codename "$codename" set_osvar kernel "linux-image$flavour-$basearch_alt" # 缺少 firmware 下载 fi } setos_ubuntu() { case "$releasever" in 18.04) codename=bionic ;; 20.04) codename=focal ;; 22.04) codename=jammy ;; 24.04) codename=noble ;; 26.04) codename=resolute ;; 26.10) codename=stonking ;; esac if is_use_cloud_image; then # cloud image if [ -z "$img" ]; then if is_in_china; then # 有的源没有 releases 镜像 # https://mirrors.tuna.tsinghua.edu.cn/ubuntu-cloud-images/releases/ # https://unicom.mirrors.ustc.edu.cn/ubuntu-cloud-images/releases/ # https://mirror.nju.edu.cn/ubuntu-cloud-images/releases/ ci_mirror=https://mirror.nju.edu.cn/ubuntu-cloud-images else ci_mirror=https://cloud-images.ubuntu.com fi # 以下版本有 minimal 镜像 # amd64 所有 # arm64 24.04 和以上 is_have_minimal_image() { [ "$basearch_alt" = amd64 ] || [ "${releasever%.*}" -ge 24 ] } basearch_img=$basearch_alt if [ "$basearch_alt" = amd64 ] && [ "${releasever%.*}" -ge 26 ] && is_cpu_supports_x86_64_v3; then basearch_img=amd64v3 fi if [ "$minimal" = 1 ]; then if ! is_have_minimal_image; then error_and_exit "Minimal cloud image is not available for $releasever $basearch_alt." fi img=$ci_mirror/minimal/releases/$codename/release/ubuntu-$releasever-minimal-cloudimg-$basearch_img.img else # 用 codename 而不是 releasever，可减少一次跳转 img=$ci_mirror/releases/$codename/release/ubuntu-$releasever-server-cloudimg-$basearch_img.img fi fi set_osvar img "$img" else # 传统安装 if is_in_china; then case "$basearch" in "x86_64") mirror=https://mirror.nju.edu.cn/ubuntu-releases/$releasever ;; "aarch64") mirror=https://mirror.nju.edu.cn/ubuntu-cdimage/releases/$releasever/release ;; esac else case "$basearch" in "x86_64") mirror=https://releases.ubuntu.com/$releasever ;; "aarch64") mirror=https://cdimage.ubuntu.com/releases/$releasever/release ;; esac fi # iso filename=$(curl -L $mirror/ | grep -oP "ubuntu-$releasever.*?-live-server-$basearch_alt.iso" | sort -uV | tail -1 | grep .) iso=$mirror/$filename # 在 ubuntu 20.04 上，file 命令检测 ubuntu 22.04 iso 结果是 DOS/MBR boot sector test_url "$iso" iso set_osvar iso "$iso" # ks set_osvar ks "$confhome/deprecated/ubuntu.yaml" set_osvar minimal "$minimal" fi } setos_arch() { if [ "$basearch" = "x86_64" ]; then if is_in_china; then mirror=https://mirror.nju.edu.cn/archlinux else # https://archlinux.org/mirrorlist/all/ # 镜像源列表 # mirror=https://geo.mirror.pkgbuild.com # geoip mirror=https://fastly.mirror.pkgbuild.com # cdn fi else if is_in_china; then mirror=https://mirror.nju.edu.cn/archlinuxarm else # https 证书有问题 mirror=http://mirror.archlinuxarm.org # geoip fi fi if is_use_cloud_image; then # cloud image if [ -z "$img" ]; then img=$mirror/images/latest/Arch-Linux-x86_64-cloudimg.qcow2 fi set_osvar img "$img" else # 传统安装 case "$basearch" in x86_64) dir="core/os/$basearch" ;; aarch64) dir="$basearch/core" ;; esac test_url $mirror/$dir/core.db gzip set_osvar mirror "$mirror" fi } setos_nixos() { if is_in_china; then mirror=https://mirror.nju.edu.cn/nix-channels else # https://nixos.org/channels 没有 ipv6 # 且跳转到 https://channels.nixos.org mirror=https://channels.nixos.org fi if is_use_cloud_image; then : else # 传统安装 # 该服务器文件缓存 miss 时会响应 206 + Location 头 # 但 curl 这种情况不会重定向，所以添加 text 类型让它不要报错 test_url $mirror/nixos-$releasever/store-paths.xz 'xz text' set_osvar mirror "$mirror" fi } setos_gentoo() { if is_in_china; then mirror=https://mirror.nju.edu.cn/gentoo else mirror=https://distfiles.gentoo.org # cdn77 fi dir=releases/$basearch_alt/autobuilds if is_use_cloud_image; then if [ -z "$img" ]; then # 使用 systemd 且没有 cloud-init prefix=di-$basearch_alt-console filename=$(curl -L $mirror/$dir/latest-$prefix.txt | grep '.qcow2' | awk '{print $1}' | grep .) img=$mirror/$dir/$filename fi test_url "$img" 'qemu' else if [ -z "$img" ]; then prefix=stage3-$basearch_alt-systemd filename=$(curl -L $mirror/$dir/latest-$prefix.txt | grep '.tar.xz' | awk '{print $1}' | grep .) img=$mirror/$dir/$filename test_url "$img" 'tar.xz' fi fi set_osvar img "$img" } setos_opensuse() { # https://download.opensuse.org/ # curl 会跳转到最近的镜像源，但可能会被镜像源 block # aria2 会跳转使用 metalink # https://downloadcontent.opensuse.org # 德国 # https://downloadcontentcdn.opensuse.org # fastly cdn # 很多国内源缺少 aarch64 tumbleweed appliances # https://download.opensuse.org/ports/aarch64/tumbleweed/appliances/ # https://mirrors.ustc.edu.cn/opensuse/ports/aarch64/tumbleweed/appliances/ # https://mirrors.tuna.tsinghua.edu.cn/opensuse/ports/aarch64/tumbleweed/appliances/ if [ -z "$img" ]; then if is_in_china; then mirror=https://mirror.nju.edu.cn/opensuse else mirror=https://downloadcontentcdn.opensuse.org fi if [ "$releasever" = tumbleweed ]; then # tumbleweed if [ "$basearch" = aarch64 ]; then dir=ports/aarch64/tumbleweed/appliances else dir=tumbleweed/appliances fi file=openSUSE-Tumbleweed-Minimal-VM.$basearch-Cloud.qcow2 else # leap dir=distribution/leap/$releasever/appliances file=Leap-$releasever-Minimal-VM.$basearch-Cloud.qcow2 # file=Leap-$releasever-Minimal-VM.$basearch-kvm$(if [ "$basearch" = x86_64 ]; then echo '-and-xen'; fi).qcow2 # kvm 镜像里面没有 cloud-init # 但不够 Cloud 镜像通用? # https://src.opensuse.org/pool/kiwi-templates-Minimal/src/branch/factory/Minimal.kiwi # https://build.opensuse.org/projects/Virtualization:Appliances:Images:openSUSE-Tumbleweed/packages/kiwi-templates-Minimal/files/Minimal.kiwi fi img=$mirror/$dir/$file fi set_osvar img "$img" } setos_windows() { auto_find_iso=false if [ -z "$iso" ]; then auto_find_iso=true echo "iso url is not set. Attempting to find it automatically." find_windows_iso fi if [[ "$iso" = magnet:* ]]; then : # 不测试磁力链接 else local iso_is_tested=false local iso_is_direct_link=false if $auto_find_iso; then # 目前自动获取 iso 肯定不是直连，因此先关闭直连测试 if false && test_url_grace "$iso" iso 2>/dev/null; then iso_is_tested=true iso_is_direct_link=true elif [[ $(echo "$iso" | to_lower) =~ ^https://ntriver.org/drive\?.*\.(iso|img)$ ]]; then info "get direct link" local iso_name=${iso##*\?} local direct_link if direct_link=$(curl -L "https://ntriver.org/api/drive/generate-link?filename=$iso_name" | grep -oE '"url":"[^"]+"' | cut -d: -f2- | tr -d '"' | grep .); then echo "Direct link: $direct_link" >&2 iso="$direct_link" iso_is_direct_link=true else warn false "Failed to get direct link for $iso" fi fi # 需要用户输入直链的情况 if ! $iso_is_direct_link; then info "Set Direct link" # MobaXterm 不支持 # printf '\e]8;;http://example.com\e\\This is a link\e]8;;\e\\\n' # MobaXterm 不显示为超链接 # info false "请在浏览器中打开 $iso 获取直链并粘贴到这里。" # info false "Please open $iso in browser to get the direct link and paste it here." echo "请在浏览器中打开 $iso 获取直链并粘贴到这里。" echo "Please open $iso in browser to get the direct link and paste it here." IFS= read -r -p "Direct Link: " iso if [ -z "$iso" ]; then error_and_exit "ISO Link is empty." elif ! grep -Eiq '^https?://' <<<"$iso"; then error_and_exit "ISO Link is invalid." fi fi fi if ! $iso_is_tested; then test_url "$iso" iso fi # 判断 iso 架构是否兼容 # https://gitlab.com/libosinfo/osinfo-db/-/tree/main/data/os/microsoft.com?ref_type=heads # uupdump linux 下合成的标签是 ARM64，windows下合成的标签是 A64 if file -b "$tmp/img-test" | grep -Eq '_(A64|ARM64)'; then iso_arch=arm64 else iso_arch=x86_or_x64 fi if ! { { [ "$basearch" = x86_64 ] && [ "$iso_arch" = x86_or_x64 ]; } || { [ "$basearch" = aarch64 ] && [ "$iso_arch" = arm64 ]; } }; then warn " The current machine is $basearch, but it seems the ISO is for $iso_arch. Continue? 当前机器是 $basearch，但 ISO 似乎是 $iso_arch。继续安装?" read -r -p '[y/N]: ' if ! [[ "$REPLY" = [Yy] ]]; then exit fi fi fi [ -n "$boot_wim" ] && test_url "$boot_wim" 'wim' set_osvar iso "$iso" set_osvar boot_wim "$boot_wim" set_osvar image_name "$image_name" } # shellcheck disable=SC2154 setos_dd() { # raw 包含 vhd test_url $img 'raw raw.gzip raw.xz raw.zstd raw.tar.gzip raw.tar.xz raw.tar.zstd' img_type if is_efi; then install_pkg hexdump # openwrt 镜像 efi part type 不是 esp # 因此改成检测 fat? # https://downloads.openwrt.org/releases/23.05.3/targets/x86/64/openwrt-23.05.3-x86-64-generic-ext4-combined-efi.img.gz # od 在 coreutils 里面，好像要配合 tr 才能删除空格 # hexdump 在 util-linux / bsdmainutils 里面 # xxd 要单独安装，el 在 vim-common 里面 # xxd -l $((34 * 4096)) -ps -c 128 # 仅打印前34个扇区 * 4096字节（按最大的算） # 每行128字节 hexdump -n $((34 * 4096)) -e '128/1 "%02x" "\n"' -v "$tmp/img-test" >$tmp/img-test-hex if grep -q '^28732ac11ff8d211ba4b00a0c93ec93b' $tmp/img-test-hex; then echo 'DD: Image is EFI.' else echo 'DD: Image is not EFI.' warn ' The current machine uses EFI boot, but the DD image seems not an EFI image. Continue with DD? 当前机器使用 EFI 引导，但 DD 镜像可能不是 EFI 镜像。 继续 DD?' read -r -p '[y/N]: ' if [[ "$REPLY" = [Yy] ]]; then set_osvar confirmed_no_efi 1 else exit fi fi fi set_osvar img "$img" set_osvar img_type "$img_type" set_osvar img_type_warp "$img_type_warp" } setos_fnos() { # 系统盘大小 min=10 default=64 echo "请输入系统分区大小，最小 $min GB，但可能无法更新系统。建议 $default GB。" echo "Please input System Partition Size. Minimal is $min GB but may not be able to do system updates. Recommended is $default GB." while true; do IFS= read -r -p "Size in GB [$default]: " input input=${input:-$default} if ! { is_digit "$input" && [ "$input" -ge "$min" ]; }; then error "Invalid Size. Please Try again." else set_osvar fnos_part_size "${input}G" break fi done if [ -z "$iso" ]; then local download_page sign_page if [ "$FLYGOOS" = 1 ]; then download_page=https://fygonas.com/download # sign_page=https://fygonas.com/asset/download-sign else download_page=https://fnnas.com/download$([ "$basearch" = aarch64 ] && echo -arm || true) sign_page=https://fnnas.com/asset/download-sign fi # fnos_Mainland-PE_x86_1.2.0203_2149.iso # fnos_Mainland-PE_arm_1.1.31_armsr_1366.iso # fygoos_PE_x86_1.2.0203_2150.iso # fygoos_PE_arm_1.2.0007_armsr_1837.iso # 对于同一行有多个成功匹配，grep -m1 无效 iso=$(curl -L "$download_page" | grep -o 'https://[^"]*\.iso' | grep "$([ "$basearch" = aarch64 ] && echo _armsr_ || echo _x86_)" | head -1 | grep .) if [ -n "$sign_page" ]; then # curl 7.82.0+ # curl -L --json '{"url":"'$iso'"}' https://fnnas.com/asset/download-sign iso=$(curl -L \ -d '{"url":"'$iso'"}' \ -H 'Content-Type: application/json' \ "$sign_page" | grep -o 'https://[^"]*') fi fi test_url "$iso" iso set_osvar iso "$iso" } setos_aosc() { if [ -z "$img" ]; then if is_in_china; then mirror=https://mirror.nju.edu.cn/anthon/aosc-os else # 服务器在香港 mirror=https://releases.aosc.io fi dir=os-$basearch_alt/base file=$(curl -L $mirror/$dir/ | grep -oP 'aosc-os_base_.*?\.tar.xz' | sort -uV | tail -1 | grep .) img=$mirror/$dir/$file fi test_url "$img" 'tar.xz' set_osvar img "$img" } setos_centos_almalinux_rocky_fedora() { # el 10 需要 x86-64-v3，除了 almalinux if [ "$basearch" = x86_64 ] && { [ "$distro" = centos ] || [ "$distro" = rocky ]; } && [ "$releasever" -ge 10 ]; then assert_cpu_supports_x86_64_v3 fi elarch=$basearch if [ "$basearch" = x86_64 ] && [ "$distro" = almalinux ] && [ "$releasever" -ge 10 ] && ! is_cpu_supports_x86_64_v3; then elarch=x86_64_v2 fi if is_use_cloud_image; then # ci if [ -z "$img" ]; then if is_in_china; then case $distro in centos) ci_mirror="https://mirror.nju.edu.cn/centos-cloud/centos" ;; almalinux) ci_mirror="https://mirror.nju.edu.cn/almalinux/$releasever/cloud/$elarch/images" ;; rocky) ci_mirror="https://mirror.nju.edu.cn/rocky/$releasever/images/$elarch" ;; fedora) ci_mirror="https://mirror.nju.edu.cn/fedora/releases/$releasever/Cloud/$elarch/images" ;; esac else case $distro in centos) ci_mirror="https://cloud.centos.org/centos" ;; almalinux) ci_mirror="https://repo.almalinux.org/almalinux/$releasever/cloud/$elarch/images" ;; rocky) ci_mirror="https://download.rockylinux.org/pub/rocky/$releasever/images/$elarch" ;; fedora) ci_mirror="https://d2lzkl7pfhq30w.cloudfront.net/pub/fedora/linux/releases/$releasever/Cloud/$elarch/images" ;; esac fi case $distro in centos) case $releasever in 7) # CentOS-7-aarch64-GenericCloud.qcow2c 是旧版本 ver=-2211 img=$ci_mirror/$releasever/images/CentOS-$releasever-$elarch-GenericCloud$ver.qcow2c ;; *) img=$ci_mirror/$releasever-stream/$elarch/images/CentOS-Stream-GenericCloud-$releasever-latest.$elarch.qcow2 ;; esac ;; almalinux) img=$ci_mirror/AlmaLinux-$releasever-GenericCloud-latest.$elarch.qcow2 ;; rocky) img=$ci_mirror/Rocky-$releasever-GenericCloud-Base.latest.$elarch.qcow2 ;; fedora) # 不加 / 会跳转到 https://dl.fedoraproject.org，纯 ipv6 无法访问 # curl -L -6 https://d2lzkl7pfhq30w.cloudfront.net/pub/fedora/linux/releases/42/Cloud/x86_64/images # curl -L -6 https://d2lzkl7pfhq30w.cloudfront.net/pub/fedora/linux/releases/42/Cloud/x86_64/images/ filename=$(curl -L $ci_mirror/ | grep -oP "Fedora-Cloud-Base-Generic.*?.qcow2" | sort -uV | tail -1 | grep .) img=$ci_mirror/$filename ;; esac fi set_osvar img "$img" else # 传统安装 case $distro in centos) mirrorlist="https://mirrors.centos.org/mirrorlist?repo=centos-baseos-$releasever-stream&arch=$elarch" ;; almalinux) mirrorlist="https://mirrors.almalinux.org/mirrorlist/$releasever/baseos" ;; rocky) mirrorlist="https://mirrors.rockylinux.org/mirrorlist?arch=$elarch&repo=BaseOS-$releasever" ;; fedora) mirrorlist="https://mirrors.fedoraproject.org/mirrorlist?arch=$elarch&repo=fedora-$releasever" ;; esac # rocky/centos9 需要删除第一行注释， almalinux 需要替换链接里面的 $basearch for cur_mirror in $(curl -L $mirrorlist | sed "/^#/d" | sed "s,\$basearch,$elarch,"); do host=$(get_host_by_url $cur_mirror) if is_host_has_ipv4_and_ipv6 $host && test_url_grace ${cur_mirror}images/pxeboot/vmlinuz; then mirror=$cur_mirror break fi done if [ -z "$mirror" ]; then error_and_exit "All mirror failed." fi set_osvar mirrorlist "$mirrorlist" set_osvar ks "$confhome/deprecated/redhat.cfg" set_osvar vmlinuz "${mirror}images/pxeboot/vmlinuz" set_osvar initrd "${mirror}images/pxeboot/initrd.img" set_osvar squashfs "${mirror}images/install.img" test_url ${mirror}images/install.img 'squashfs' fi } setos_oracle() { # el 10 需要 x86-64-v3 if [ "$basearch" = x86_64 ] && [ "$releasever" -ge 10 ]; then assert_cpu_supports_x86_64_v3 fi if is_use_cloud_image; then # ci if [ -z "$img" ]; then install_pkg jq mirror=https://yum.oracle.com [ "$basearch" = aarch64 ] && template_prefix=ol${releasever}_${basearch}-cloud || template_prefix=ol${releasever} curl -Lo $tmp/oracle.json $mirror/templates/OracleLinux/$template_prefix-template.json dir=$(jq -r .base_url $tmp/oracle.json) file=$(jq -r .kvm.image $tmp/oracle.json) img=$mirror$dir/$file fi set_osvar img "$img" else : fi } setos_redhat() { if is_use_cloud_image; then # el 10 需要 x86-64-v3 if [ "$basearch" = x86_64 ] && [[ "$img" = *rhel-10* ]]; then assert_cpu_supports_x86_64_v3 fi set_osvar img "$img" else : fi } setos_opencloudos() { # https://mirrors.opencloudos.tech 不支持 ipv6 # mirrors.cloud.tencent.com 为公网与内网统一域名 # https://cloud.tencent.com/document/product/213/8623 if [ "$releasever" -ge 23 ]; then mirror=https://mirrors.cloud.tencent.com/opencloudos-stream/releases else mirror=https://mirrors.cloud.tencent.com/opencloudos fi if is_use_cloud_image; then # ci # https://opencloudos.org/api/v1/iso-releases/published if [ -z "$img" ]; then if [ "$releasever" -eq 9 ]; then dir=$releasever/images/qcow2/$basearch else dir=$releasever/images/$basearch fi file=$(curl -L $mirror/$dir/ | grep -oP 'OpenCloudOS.*?\.qcow2' | sort -uV | tail -1 | grep .) img=$mirror/$dir/$file fi set_osvar img "$img" else : fi } setos_anolis() { mirror=https://mirrors.openanolis.cn/anolis if is_use_cloud_image; then # ci if [ -z "$img" ]; then dir=$releasever/isos/GA/$basearch [ "$releasever" -ge 23 ] && filename='AnolisOS.*?\.qcow2' || filename='AnolisOS.*?-ANCK\.qcow2' file=$(curl -L $mirror/$dir/ | grep -oP "$filename" | sort -uV | tail -1 | grep .) img=$mirror/$dir/$file fi set_osvar img "$img" else : fi } setos_openeuler() { if is_in_china; then mirror=https://repo.openeuler.openatom.cn else mirror=https://repo.openeuler.org fi if is_use_cloud_image; then # ci if [ -z "$img" ]; then name=$(curl -L "$mirror/" | grep -oE "openEuler-$releasever(-LTS)?(-SP[0-9])?" | sort -uV | tail -1 | grep .) img=$mirror/$name/virtual_machine_img/$basearch/$name-$basearch.qcow2.xz fi set_osvar img "$img" else : fi } set_osvar distro "$distro" set_osvar releasever "$releasever" case "$distro" in centos | almalinux | rocky | fedora) setos_centos_almalinux_rocky_fedora ;; *) setos_$distro ;; esac # debian/kali <=256M 必须使用云内核，否则不够内存 if is_distro_like_debian && ! is_in_windows && [ "$ram_size" -le 256 ]; then exit_if_cant_use_cloud_kernel fi # 集中测试云镜像格式 if is_use_cloud_image && [ "$step" = finalos ]; then # shellcheck disable=SC2154 test_url $finalos_img 'qemu qemu.gzip qemu.xz qemu.zstd raw.xz' finalos_img_type fi } is_distro_like_redhat() { if [ -n "$1" ]; then _distro=$1 else _distro=$distro fi [ "$_distro" = redhat ] || [ "$_distro" = centos ] || [ "$_distro" = almalinux ] || [ "$_distro" = rocky ] || [ "$_distro" = fedora ] || [ "$_distro" = oracle ] } is_distro_like_debian() { if [ -n "$1" ]; then _distro=$1 else _distro=$distro fi [ "$_distro" = debian ] || [ "$_distro" = kali ] } get_latest_distro_releasever() { get_function_content verify_os_name | grep -wo "$1 [^'\"]*" | awk -F'|' '{print $NF}' } # 检查是否为正确的系统名 verify_os_name() { if [ -z "$*" ]; then usage_and_exit fi # 不要删除 centos 7 for os in \ 'centos 7|9|10' \ 'anolis 7|8|23' \ 'opencloudos 8|9|23' \ 'almalinux 8|9|10' \ 'rocky 8|9|10' \ 'oracle 8|9|10' \ 'fnos 1' \ 'fygoos 1' \ 'fedora 44|45' \ 'nixos 26.05' \ 'debian 9|10|11|12|13' \ 'opensuse 16.0|16.1|tumbleweed' \ 'alpine 3.21|3.22|3.23|3.24' \ 'openeuler 20.03|22.03|24.03|26.09' \ 'ubuntu 18.04|20.04|22.04|24.04|26.04|26.10' \ 'kali last-snapshot|rolling' \ 'redhat' \ 'arch' \ 'gentoo' \ 'aosc' \ 'windows' \ 'dd' \ 'netboot.xyz' \ 'reset'; do read -r ds vers <<<"$os" vers_=${vers//\./\\\.} finalos=$(echo "$@" | to_lower | sed -n -E "s,^($ds)[ :-]?(|$vers_)$,\1 \2,p") if [ -n "$finalos" ]; then read -r distro releasever <<<"$finalos" # fygoos to fnos if [ "$distro" = fygoos ]; then distro=fnos FLYGOOS=1 fi # 默认版本号 if [ -z "$releasever" ] && [ -n "$vers" ]; then releasever=$(awk -F '|' '{print $NF}' <<<"|$vers") fi return fi done error "Please specify a proper os" usage_and_exit } verify_os_args() { # 必备参数 case "$distro" in dd) [ -n "$img" ] || error_and_exit "dd need --img." ;; redhat) [ -n "$img" ] || error_and_exit "redhat need --img." ;; windows) [ -n "$image_name" ] || error_and_exit "Install Windows need --image-name." ;; esac # 用户名/密码/证书相关 case "$distro" in netboot.xyz) [ -z "$username" ] || error_and_exit "not support set username for $distro." [ -z "$password" ] || error_and_exit "not support set password for $distro." [ -z "$ssh_keys" ] || error_and_exit "not support set ssh key for $distro." ;; windows) [ -z "$ssh_keys" ] || error_and_exit "not support set ssh key for $distro." ;; esac # 不能同时使用证书和密码 if [ -n "$password" ] && [ -n "$ssh_keys" ]; then error_and_exit "Cannot set both password and ssh key." fi } get_cmd_path() { # arch 云镜像不带 which # command -v 包括脚本里面的方法 # ash 无效 type -f -p $1 } is_have_cmd() { get_cmd_path $1 >/dev/null 2>&1 } install_pkg() { is_in_windows && return find_pkg_mgr() { [ -n "$pkg_mgr" ] && return # 查找方法1: 通过 ID / ID_LIKE # 因为可能装了多种包管理器 if [ -f /etc/os-release ]; then # shellcheck source=/dev/null for id in $({ . /etc/os-release && echo $ID $ID_LIKE; }); do # https://github.com/chef/os_release case "$id" in fedora | centos | rhel) is_have_cmd dnf && pkg_mgr=dnf || pkg_mgr=yum ;; debian | ubuntu) pkg_mgr=apt-get ;; opensuse | suse) pkg_mgr=zypper ;; alpine) pkg_mgr=apk ;; arch) pkg_mgr=pacman ;; gentoo) pkg_mgr=emerge ;; nixos) pkg_mgr=nix-env ;; esac [ -n "$pkg_mgr" ] && return done fi # 查找方法 2 for mgr in dnf yum apt-get pacman zypper emerge apk nix-env; do is_have_cmd $mgr && pkg_mgr=$mgr && return done return 1 } cmd_to_pkg() { unset USE case $cmd in ar) case "$pkg_mgr" in *) pkg="binutils" ;; esac ;; xz) case "$pkg_mgr" in apt-get) pkg="xz-utils" ;; *) pkg="xz" ;; esac ;; lsblk | findmnt) case "$pkg_mgr" in apk) pkg="$cmd" ;; *) pkg="util-linux" ;; esac ;; lsmem) case "$pkg_mgr" in apk) pkg="util-linux-misc" ;; *) pkg="util-linux" ;; esac ;; fdisk) case "$pkg_mgr" in apt-get) pkg="fdisk" ;; apk) pkg="util-linux-misc" ;; *) pkg="util-linux" ;; esac ;; hexdump) case "$pkg_mgr" in apt-get) pkg="bsdmainutils" ;; *) pkg="util-linux" ;; esac ;; unsquashfs) case "$pkg_mgr" in zypper) pkg="squashfs" ;; emerge) pkg="squashfs-tools" && export USE="lzma" ;; *) pkg="squashfs-tools" ;; esac ;; nslookup | dig) case "$pkg_mgr" in apt-get) pkg="dnsutils" ;; pacman) pkg="bind" ;; apk | emerge) pkg="bind-tools" ;; yum | dnf | zypper) pkg="bind-utils" ;; esac ;; iconv) case "$pkg_mgr" in apk) pkg="musl-utils" ;; *) error_and_exit "Which GNU/Linux do not have iconv built-in?" ;; esac ;; *) pkg=$cmd ;; esac } # 系统 package名称 repo名称 # centos/alma/rocky/fedora epel-release epel # oracle linux oracle-epel-release ol9_developer_EPEL # opencloudos epol-release EPOL # alibaba cloud linux 3 epel-release/epel-aliyuncs-release(qcow2自带) epel # anolis 23 anolis-epao-release EPAO # anolis 8 # [root@localhost ~]# yum search *ep*-release | grep -v next # ========================== Name Matched: *ep*-release ========================== # anolis-epao-release.noarch : EPAO Packages for Anolis OS 8 repository configuration # epel-aliyuncs-release.noarch : Extra Packages for Enterprise Linux repository configuration # epel-release.noarch : Extra Packages for Enterprise Linux repository configuration (qcow2自带) check_is_need_epel() { is_need_epel() { case "$pkg" in dpkg) true ;; jq) is_have_cmd yum && ! is_have_cmd dnf ;; # el7/ol7 的 jq 在 epel 仓库 *) false ;; esac } get_epel_repo_name() { # el7 不支持 yum repolist --all，要使用 yum repolist all # el7 yum repolist 第一栏有 /x86_64 后缀，因此要去掉。而 el9 没有 $pkg_mgr repolist all | awk '{print $1}' | awk -F/ '{print $1}' | grep -Ei 'ep(el|ol|ao)$' } get_epel_pkg_name() { # el7 不支持 yum list --available，要使用 yum list available $pkg_mgr list available | grep -E '(.*-)?ep(el|ol|ao)-(.*-)?release' | awk '{print $1}' | cut -d. -f1 | grep -v next | head -1 } if is_need_epel; then if ! epel=$(get_epel_repo_name); then $pkg_mgr install -y "$(get_epel_pkg_name)" epel=$(get_epel_repo_name) fi enable_epel="--enablerepo=$epel" else enable_epel= fi } install_pkg_real() { text="$pkg" if [ "$pkg" != "$cmd" ]; then text+=" ($cmd)" fi echo "Installing package '$text'..." case $pkg_mgr in dnf) check_is_need_epel dnf install $enable_epel -y --setopt=install_weak_deps=False $pkg ;; yum) check_is_need_epel yum install $enable_epel -y $pkg ;; emerge) emerge --oneshot $pkg ;; pacman) pacman -Syu --noconfirm --needed $pkg ;; zypper) zypper install -y $pkg ;; apk) add_community_repo_for_alpine apk add $pkg ;; apt-get) [ -z "$apt_updated" ] && apt-get update && apt_updated=1 DEBIAN_FRONTEND=noninteractive apt-get install -y $pkg ;; nix-env) # 不指定 channel 会很慢，而且很占内存 [ -z "$nix_updated" ] && nix-channel --update && nix_updated=1 nix-env -iA nixos.$pkg ;; esac } is_need_reinstall() { local cmd=$1 # gentoo 默认编译的 unsquashfs 不支持 xz if [ "$cmd" = unsquashfs ] && is_have_cmd emerge && ! "$cmd" |& grep -wq xz; then echo "unsquashfs not supported xz. rebuilding." return 0 fi # busybox grep 不支持 -oP # busybox lsblk 不支持 -r -n --inverse # busybox fdisk 无法显示 mbr 分区表的 id if { [ "$cmd" = grep ] || [ "$cmd" = lsblk ] || [ "$cmd" = fdisk ]; } && is_have_cmd apk && "$cmd" --help |& grep -wq BusyBox; then return 0 fi return 1 } for cmd in "$@"; do if ! is_have_cmd $cmd || is_need_reinstall $cmd; then if ! find_pkg_mgr; then error_and_exit "Can't find compatible package manager. Please manually install $cmd." fi cmd_to_pkg install_pkg_real fi done >&2 } is_valid_ram_size() { is_digit "$1" && [ "$1" -gt 0 ] } check_ram() { ram_standard=$( case "$distro" in netboot.xyz) echo 0 ;; alpine | debian | kali | dd) echo 256 ;; arch | gentoo | aosc | nixos | windows) echo 512 ;; redhat | centos | almalinux | rocky | fedora | oracle | ubuntu | anolis | opencloudos | openeuler) echo 1024 ;; opensuse | fnos) echo -1 ;; # 没有安装模式 esac ) # 不用检查内存的情况 if [ "$ram_standard" -eq 0 ]; then return fi # 未测试 ram_cloud_image=256 has_cloud_image=$( case "$distro" in redhat | centos | almalinux | rocky | oracle | fedora | debian | ubuntu | opensuse | anolis | openeuler) echo true ;; netboot.xyz | alpine | dd | arch | gentoo | nixos | kali | windows) echo false ;; esac ) if is_in_windows; then ram_size=$(wmic memorychip get capacity | awk -F= '{sum+=$2} END {if(sum>0) print sum/1024/1024}') else # lsmem 最准确但 centos7 arm 和 archlinux arm 不能用，debian 9 util-linux 没有 lsmem # arm 24g dmidecode 显示少了128m # arm 24g lshw 显示 23GiB? # ec2 t4g arm alpine 用 lsmem 和 dmidecode 都无效，要用 lshw，但结果和free -m一致，其他平台则没问题 install_pkg lsmem ram_size=$(lsmem -b 2>/dev/null | grep 'Total online memory:' | awk '{ print $NF/1024/1024 }') if ! is_valid_ram_size "$ram_size"; then install_pkg dmidecode # centos 7 是 GB # alpine 是 GiB ram_size=$(dmidecode -t memory | grep -E "Size.*[GB|GiB|MiB|MB]" | awk '{if ($3=="GB" || $3=="GiB") s+=$2*1024; else s+=$2} END {if(s>0) print s}') fi if ! is_valid_ram_size "$ram_size"; then install_pkg lshw # 不能忽略 -i，alpine 显示的是 System memory ram_str=$(lshw -c memory -short | grep -i 'System Memory' | awk '{print $3}') ram_size=$(grep <<<$ram_str -o '[0-9]*') grep <<<$ram_str GiB && ram_size=$((ram_size * 1024)) fi fi # 用于兜底，不太准确 # cygwin 要装 procps-ng 才有 free 命令 if ! is_valid_ram_size "$ram_size"; then ram_size_k=$(grep '^MemTotal:' /proc/meminfo | awk '{print $2}') ram_size=$((ram_size_k / 1024 + 64 + 4)) fi if ! is_valid_ram_size "$ram_size"; then error_and_exit "Could not detect RAM size." fi # ram 足够就用普通方法安装，否则如果内存大于512就用 cloud image # TODO: 测试 256 384 内存 if ! is_use_cloud_image && [ $ram_size -lt $ram_standard ]; then if $has_cloud_image; then info "RAM < $ram_standard MB. Fallback to cloud image mode" cloud_image=1 else error_and_exit "Could not install $distro: RAM < $ram_standard MB." fi fi if is_use_cloud_image && [ $ram_size -lt $ram_cloud_image ]; then error_and_exit "Could not install $distro using cloud image: RAM < $ram_cloud_image MB." fi } is_efi() { if is_in_windows; then # bcdedit | grep -qi '^path.*\.efi' mountvol | grep -q -a 'EFI' else [ -d /sys/firmware/efi ] fi } is_grub_dir_linked() { # cloudcone 重装前/重装后(方法1) [ "$(readlink -f /boot/grub/grub.cfg)" = /boot/grub2/grub.cfg ] || [ "$(readlink -f /boot/grub2/grub.cfg)" = /boot/grub/grub.cfg ] || # cloudcone 重装后(方法2) { [ -f /boot/grub2/grub.cfg ] && [ "$(cat /boot/grub2/grub.cfg)" = 'chainloader (hd0)+1' ]; } } is_secure_boot_enabled() { if is_efi; then if is_in_windows; then reg query 'HKLM\SYSTEM\CurrentControlSet\Control\SecureBoot\State' /v UEFISecureBootEnabled 2>/dev/null | grep 0x1 else if dmesg | grep -i 'Secure boot enabled'; then return 0 fi install_pkg mokutil mokutil --sb-state 2>&1 | grep -i 'SecureBoot enabled' fi else return 1 fi } is_need_boot_vmlinuz() { ! { is_netboot_xyz && is_efi; } } # 只有 linux bios 是用本机的 grub/extlinux is_use_local_grub_extlinux() { is_need_boot_vmlinuz && ! is_in_windows && ! is_efi } is_use_local_grub() { is_use_local_grub_extlinux && is_mbr_using_grub } is_use_local_extlinux() { is_use_local_grub_extlinux && ! is_mbr_using_grub } # 软 raid 时 xda 可能不是引导盘，以后再修正 is_mbr_using_grub() { find_main_disk # 各发行版不一定自带 strings hexdump xxd od 命令 head -c 440 /dev/$xda | grep -a -iq 'GRUB' } to_upper() { tr '[:lower:]' '[:upper:]' } to_lower() { tr '[:upper:]' '[:lower:]' } del_cr() { # wmic/reg 换行符是 \r\r\n # wmic nicconfig where InterfaceIndex=$id get MACAddress,IPAddress,IPSubnet,DefaultIPGateway | hexdump -c sed -E 's/\r+$//' } del_empty_lines() { sed '/^[[:space:]]*$/d' } del_comment_lines() { sed '/^[[:space:]]*#/d' } trim() { # sed -E -e 's/^[[:space:]]+//' -e 's/[[:space:]]+$//' sed -e 's/^[[:space:]]*//' -e 's/[[:space:]]*$//' } assert_username_valid() { # https://learn.microsoft.com/windows-hardware/customize/desktop/unattend/microsoft-windows-shell-setup-useraccounts-localaccounts-localaccount-name # 不能为 none [ ] / \ : | < > + = ; , ? * % @ # 账号为空 if [ -z "$username" ]; then error_and_exit "Username: Can not be empty." fi # 账号为 none if [ "$(to_lower <<<"$username")" = none ]; then error_and_exit "Username: Can not be 'none'." fi # 账号包含非法字符 if grep -q '[][/\:|<>+=;,?*%@]' <<<"$username"; then error_and_exit "Username: Do not use any of the following characters: / \ [ ] : | < > + = ; , ? * % @" fi } # trans.sh 有同名方法 is_administrator_username() { username_in_lower=$(to_lower <<<"$1") # 如果输入以下用户名则忽略，并使用系统内置的 Administrator 账号 # 防止系统有两个不同语言的 Administrator 账号而造成困扰 for builtin_username in \ administrator \ administrador \ administrateur \ administratör \ администратор \ järjestelmänvalvoja \ rendszergazda; do if [ "$username_in_lower" = "$builtin_username" ]; then return 0 fi done return 1 } prompt_username() { echo >&2 info "prompt username" if [ "$distro" = windows ]; then default_username=administrator else default_username=root fi warn false "设置用户名，不填写则使用 $default_username" warn false "Set username, leave blank will use $default_username" IFS= read -r -p "Username: " username username="$(printf "%s" "$username" | trim)" if [ -z "$username" ]; then username=$default_username fi assert_username_valid } prompt_password() { echo >&2 info "prompt password" warn false "设置密码，不填写则使用随机密码" warn false "Set password, leave blank will use a random password" while true; do IFS= read -r -p "Password: " password if [ -n "$password" ]; then IFS= read -r -p "Retype password: " password_confirm if [ "$password" = "$password_confirm" ]; then break else error "Passwords don't match. Try again." fi else # 特殊字符列表 # https://learn.microsoft.com/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/hh994562(v=ws.11) # 有的机器运行 centos 7 ，用 /dev/random 产生 16 位密码，开启了 rngd 也要 5 秒，关闭了 rngd 则长期阻塞 chars=\''A-Za-z0-9~!@#$%^&*_=+`|(){}[]:;"<>,.?/-' password=$(tr -dc "$chars" >"$dir/password-plaintext" fi # sha512 # 以下系统均支持 sha512 密码，但是生成密码需要不同的工具 # 兼容性 openssl mkpasswd busybox python # centos 7 × 只有expect的 需要编译 √ # centos 8 √ 只有expect的 # debian 9 × √ # ubuntu 16 × √ # alpine √ 可能系统装了expect √ # cygwin √ # others √ # alpine if is_have_cmd busybox && busybox mkpasswd --help 2>&1 | grep -wq sha512; then crypted=$(printf '%s' "$password" | busybox mkpasswd -m sha512) # others elif install_pkg openssl && openssl passwd --help 2>&1 | grep -wq '\-6'; then crypted=$(printf '%s' "$password" | openssl passwd -6 -stdin) # debian 9 / ubuntu 16 elif is_have_cmd apt-get && install_pkg whois && mkpasswd -m help | grep -wq sha-512; then crypted=$(printf '%s' "$password" | mkpasswd -m sha-512 --stdin) # centos 7 # crypt.mksalt 是 python3 的 # 红帽把它 backport 到了 centos7 的 python2 上 # 在其它发行版的 python2 上运行会出错 elif is_have_cmd yum && is_have_cmd python2; then crypted=$(python2 -c "import crypt, sys; print(crypt.crypt(sys.argv[1], crypt.mksalt(crypt.METHOD_SHA512)))" "$password") else error_and_exit "Could not generate sha512 password." fi echo "$crypted" >"$dir/password-linux-sha512" # yescrypt # 旧系统不支持，先不管 if false; then if mkpasswd -m help | grep -wq yescrypt; then crypted=$(printf '%s' "$password" | mkpasswd -m yescrypt --stdin) echo "$crypted" >"$dir/password-linux-yescrypt" fi fi # windows if [ "$distro" = windows ]; then install_pkg iconv # 要分两行写，因为 echo "$(xxx)" 返回值始终为 0，出错也不会中断脚本 # grep . 为了保证脚本没有出错 base64=$(printf '%s' "${password}Password" | iconv -f UTF-8 -t UTF-16LE | base64 -w 0 | grep .) echo "$base64" >"$dir/password-windows-user-base64" base64=$(printf '%s' "${password}AdministratorPassword" | iconv -f UTF-8 -t UTF-16LE | base64 -w 0 | grep .) echo "$base64" >"$dir/password-windows-administrator-base64" fi } # 记录主硬盘 find_main_disk() { if [ -n "$main_disk" ]; then return fi if is_in_windows; then # TODO: # 已测试 vista # 测试 软raid # 测试 动态磁盘 # diskpart 命令结果 # 磁盘 ID: E5FDE61C # 磁盘 ID: {92CF6564-9B2E-4348-A3BD-D84E3507EBD7} main_disk=$(printf "%s\n%s" "select volume $c" "uniqueid disk" | diskpart | tail -1 | awk '{print $NF}' | sed 's,[{}],,g') else if [ -z "$xda" ]; then # centos7下测试 lsblk --inverse $mapper | grep -w disk grub2-probe -t disk / # 跨硬盘btrfs 只显示第一个硬盘 显示两个硬盘 # 跨硬盘lvm 显示两个硬盘 显示/dev/mapper/centos-root # 跨硬盘软raid 显示两个硬盘 显示/dev/md127 # 还有 findmnt # 理论上 /boot/efi /efi /boot 可以不在主硬盘上 # 因此只查找 / 分区 install_pkg lsblk # lvm 显示的是 /dev/mapper/xxx-yyy，再用第二条命令得到sda mapper=$(mount | awk '$3=="/" {print $1}' | grep .) xdas=$(lsblk -rn --inverse $mapper | grep -w disk | awk '{print $1}' | sort -u | grep .) # 注意 wc -l 的坑 # wc -l <<<"" 输出 1 # 检测主硬盘是否横跨多个磁盘 if [ "$(wc -l <<<"$xdas")" -eq 1 ]; then xda=$xdas else # vultr 官网新建数据盘时有写，部分地区的实例，不能从数据盘启动 # 实测 nvram 可写入数据盘的条目但不生效，手动安装 debian 到此硬盘，nvram 也不生效 # 从 bios 手动选择数据盘的 efi 文件才能启动 # 但是 nvram BootNext 数据盘的条目却可以生效 # vultr 从软 raid 0 debian 下用本脚本安装 debian ，进入 grub efi 时，无法识别系统分区 md1 的文件系统，也少了 hd1 # 但是从 bios 手动选择 reinstall 的 grub efi 时却可以识别 # 后期应该将 vmlinux/initrd 放到 efi/boot 分区 # Gemini 说: # 使用 efibootmgr 的 BootNext 时，固件走的是“快速路径”： # 它只初始化存放 EFI 引导文件（grubx64.efi）的那块硬盘（hd0），然后直接把控制权交给 GRUB。 # 因为 hd1 还没“醒”，GRUB 自然无法拼凑出完整的 md1 阵列，导致无法识别文件系统。 # 使用 nativedisk 可以强制 grub 识别所有硬盘? info false "Multiple disks found for root partition:" echo '-----' printf "%s\n" "$xdas" echo '-----' read -r -p "Select a disk to install: " xda if ! grep -Fqx "$xda" <<<"$xdas"; then error_and_exit "Invalid Input." fi fi fi info "Main disk: $xda" # 可以用 dd 找出 guid? # centos7 blkid lsblk 不显示 PTUUID # centos7 sfdisk 不显示 Disk identifier # alpine blkid 不显示 gpt 分区表的 PTUUID # 因此用 fdisk # Disk identifier: 0x36778223 # gnu fdisk + mbr # Disk identifier: D6B17C1A-FA1E-40A1-BDCB-0278A3ED9CFC # gnu fdisk + gpt # Disk identifier (GUID): d6b17c1a-fa1e-40a1-bdcb-0278a3ed9cfc # busybox fdisk + gpt # 不显示 Disk identifier # busybox fdisk + mbr # 获取 xda 的 id install_pkg fdisk main_disk=$(fdisk -l /dev/$xda | grep 'Disk identifier' | awk '{print $NF}' | sed 's/0x//') fi # 检查 id 格式是否正确 if ! grep -Eix '[0-9a-f]{8}' <<<"$main_disk" && ! grep -Eix '[0-9a-f-]{36}' <<<"$main_disk"; then error_and_exit "Disk ID is invalid: $main_disk" fi } is_found_ipv4_netconf() { [ -n "$ipv4_mac" ] && [ -n "$ipv4_addr" ] && [ -n "$ipv4_gateway" ] } is_found_ipv6_netconf() { [ -n "$ipv6_mac" ] && [ -n "$ipv6_addr" ] && [ -n "$ipv6_gateway" ] } # TODO: 单网卡多IP collect_netconf() { if is_in_windows; then convert_net_str_to_array() { config=$1 key=$2 var=$3 IFS=',' read -r -a "${var?}" <<<"$(grep "$key=" <<<"$config" | cut -d= -f2 | sed 's/[{}\"]//g')" } # 部分机器精简了 powershell # 所以不要用 powershell 获取网络信息 # ids=$(wmic nic where "PhysicalAdapter=true and MACAddress is not null and (PNPDeviceID like '%VEN_%&DEV_%' or PNPDeviceID like '%{F8615163-DF3E-46C5-913F-F2D2F965ED0E}%')" get InterfaceIndex | sed '1d') # 否 手动 0 0.0.0.0/0 19 192.168.1.1 # 否 手动 0 0.0.0.0/0 59 nekoray-tun # wmic nic: # 真实网卡 # AdapterType=以太网 802.3 # AdapterTypeId=0 # MACAddress=68:EC:C5:11:11:11 # PhysicalAdapter=TRUE # PNPDeviceID=PCI\VEN_8086&DEV_095A&SUBSYS_94108086&REV_61\4&295A4BD&1&00E0 # VPN tun 网卡，部分移动云电脑也有 # AdapterType= # AdapterTypeId= # MACAddress= # PhysicalAdapter=TRUE # PNPDeviceID=SWD\WINTUN\{6A460D48-FB76-6C3F-A47D-EF97D3DC6B0E} # VMware 网卡 # AdapterType=以太网 802.3 # AdapterTypeId=0 # MACAddress=00:50:56:C0:00:08 # PhysicalAdapter=TRUE # PNPDeviceID=ROOT\VMWARE\0001 for v in 4 6; do if [ "$v" = 4 ]; then # 或者 route print routes=$(netsh int ipv4 show route | awk '$4 == "0.0.0.0/0"') else routes=$(netsh int ipv6 show route | awk '$4 == "::/0"') fi if [ -z "$routes" ]; then continue fi while read -r route; do if false; then read -r _ _ _ _ id gateway <<<"$route" else id=$(awk '{print $5}' <<<"$route") gateway=$(awk '{print $6}' <<<"$route") fi config=$(wmic nicconfig where InterfaceIndex=$id get MACAddress,IPAddress,IPSubnet,DefaultIPGateway) # 排除 IP/子网/网关/MAC 为空的 if grep -q '=$' <<<"$config"; then continue fi mac_addr=$(grep "MACAddress=" <<<"$config" | cut -d= -f2 | to_lower) convert_net_str_to_array "$config" IPAddress ips convert_net_str_to_array "$config" IPSubnet subnets convert_net_str_to_array "$config" DefaultIPGateway gateways # IPv4 # shellcheck disable=SC2154 if [ "$v" = 4 ]; then for ((i = 0; i < ${#ips[@]}; i++)); do ip=${ips[i]} subnet=${subnets[i]} if [[ "$ip" = *.* ]]; then # ipcalc 依赖 perl，会使 cygwin 增加 ~50M # cidr=$(ipcalc -b "$ip/$subnet" | grep Netmask: | awk '{print $NF}') cidr=$(mask2cidr "$subnet") ipv4_addr="$ip/$cidr" ipv4_gateway="$gateway" ipv4_mac="$mac_addr" # 只取第一个 IP break fi done fi # IPv6 if [ "$v" = 6 ]; then ipv6_type_list=$(netsh interface ipv6 show address $id normal) for ((i = 0; i < ${#ips[@]}; i++)); do ip=${ips[i]} cidr=${subnets[i]} if [[ "$ip" = *:* ]]; then ipv6_type=$(grep "$ip" <<<"$ipv6_type_list" | awk '{print $1}') # Public 是 slaac # 还有类型 Temporary，不过有 Temporary 肯定还有 Public，因此不用 if [ "$ipv6_type" = Public ] || [ "$ipv6_type" = Dhcp ] || [ "$ipv6_type" = Manual ]; then ipv6_addr="$ip/$cidr" ipv6_gateway="$gateway" ipv6_mac="$mac_addr" # 只取第一个 IP break fi fi done fi # 网关 # shellcheck disable=SC2154 if false; then for gateway in "${gateways[@]}"; do if [ -n "$ipv4_addr" ] && [[ "$gateway" = *.* ]]; then ipv4_gateway="$gateway" elif [ -n "$ipv6_addr" ] && [[ "$gateway" = *:* ]]; then ipv6_gateway="$gateway" fi done fi # 如果通过本条 route 的网卡找到了 IP 则退出 routes 循环 if is_found_ipv${v}_netconf; then break fi done < <(echo "$routes") done else # linux # 通过默认网关得到默认网卡 # 多个默认路由下 # ip -6 route show default dev ens3 完全不显示 # ip -6 route show default # default proto static metric 1024 pref medium # nexthop via 2a01:1111:262:4940::2 dev ens3 weight 1 onlink # nexthop via fe80::5054:ff:fed4:5286 dev ens3 weight 1 # ip -6 route show default # default via 2602:1111:0:80::1 dev eth0 metric 1024 onlink pref medium # arch + vultr # ip -6 route show default # default nhid 4011550343 via fe80::fc00:5ff:fe3d:2714 dev enp1s0 proto ra metric 1024 expires 1504sec pref medium for v in 4 6; do if via_gateway_dev_ethx=$(ip -$v route show default | grep -Ewo 'via [^ ]+ dev [^ ]+' | head -1 | grep .); then read -r _ gateway _ ethx <<<"$via_gateway_dev_ethx" set_var ipv${v}_ethx "$ethx" # can_use_cloud_kernel 要用 set_var ipv${v}_mac "$(ip link show dev $ethx | grep link/ether | head -1 | awk '{print $2}')" set_var ipv${v}_gateway "$gateway" # 获取所有全局地址 all_addrs=$(ip -$v -o addr show scope global dev $ethx | grep -v temporary | awk '{print $4}') primary_addr=$(echo "$all_addrs" | head -1) # IPv6: 用 ip route get 让内核返回正确的源 IP，指定 dev 避免 tun/warp 干扰 if [ "$v" = 6 ] && [ -n "$primary_addr" ]; then route_src=$(ip -6 route get 2001:4860:4860::8888 dev "$ethx" 2>/dev/null | grep -oP 'src \K[^ ]+') if [ -n "$route_src" ]; then for addr in $all_addrs; do if [ "${addr%/*}" = "$route_src" ]; then primary_addr=$addr break fi done fi fi set_var ipv${v}_addr "$primary_addr" # extra_addrs: 除主地址外的所有地址 set_var ipv${v}_extra_addrs "$(echo "$all_addrs" | grep -Fxve "$primary_addr" | tr '\n' ',' | sed 's/,$//')" fi done fi if ! is_found_ipv4_netconf && ! is_found_ipv6_netconf; then error_and_exit "Can not get IP info." fi info "Network Info" echo "IPv4 MAC: $ipv4_mac" echo "IPv4 Address: $ipv4_addr" echo "IPv4 Gateway: $ipv4_gateway" echo "---" echo "IPv6 MAC: $ipv6_mac" echo "IPv6 Address: $ipv6_addr" echo "IPv6 Gateway: $ipv6_gateway" echo } get_efi_dir_in_windows() { # 挂载 if result=$(find /cygdrive/?/EFI/Microsoft/Boot/bootmgfw.efi 2>/dev/null); then # 已经挂载 x=$(echo $result | cut -d/ -f3) else # 找到空盘符并挂载 for x in {a..z}; do [ ! -e /cygdrive/$x ] && break done if ! mountvol $x: /s >&2; then error_and_exit "Can't mount efi partition in windows." fi fi echo "/cygdrive/$x" } add_efi_entry_in_windows() { info "Add efi entry in windows" local source=$1 # 文件夹命名为reinstall而不是grub，因为可能机器已经安装了grub，bcdedit名字同理 dist_dir="$(get_efi_dir_in_windows)/EFI/reinstall" efi_drive=$(echo "$dist_dir" | cut -d/ -f3) basename=$(basename $source) download_or_copy_file "$source" "$dist_dir/$basename" # 如果 {fwbootmgr} displayorder 为空 # 执行 bcdedit /copy '{bootmgr}' 会报错 # 例如 azure windows 2016 模板 # 要先设置默认的 {fwbootmgr} displayorder # https://github.com/hakuna-m/wubiuefi/issues/286 bcdedit /set '{fwbootmgr}' displayorder '{bootmgr}' /addfirst # 添加启动项 id=$(bcdedit /copy '{bootmgr}' /d "$(get_entry_name)" | grep -o '{.*}') bcdedit /set $id device partition=$efi_drive: bcdedit /set $id path \\EFI\\reinstall\\$basename bcdedit /set '{fwbootmgr}' bootsequence $id } get_maybe_efi_dirs_in_linux() { # 不从 fstab 查找，因为极端情况下可能只用 systemd mount # arch云镜像efi分区挂载在/efi，且使用 autofs，mount 命令会有两个 /efi 条目 install_pkg findmnt >&2 # 寻找 efi 分区，并输出根目录 # root_dirs=$(mount | awk '$5=="vfat" || $5=="autofs" {print $3}' | grep -Ex '/efi|/boot/efi|/boot' | sort -u) root_dirs=$(findmnt -t fat,vfat -n -o TARGET | grep -Ex '/efi|/boot/efi|/boot' | sort -u) efi_dirs=$( for dir in $root_dirs; do # 只显示有 efi 文件的 # -quit 表示找到第一个 *.efi 就立即退出 find if [ -d "$dir" ]; then find "$dir" -type f -iname "*.efi" -exec printf '%s\n' "$dir" \; -quit fi done ) if [ -z "$efi_dirs" ]; then error_and_exit "Can't find efi partition." fi echo "$efi_dirs" } get_disk_by_part() { dev_part=$1 install_pkg lsblk >&2 lsblk -rn --inverse "$dev_part" | grep -w disk | awk '{print $1}' } get_part_num_by_part() { dev_part=$1 grep -oE '[0-9]*$' <<<"$dev_part" } grep_efi_entry() { # efibootmgr # BootCurrent: 0002 # Timeout: 1 seconds # BootOrder: 0000,0002,0003,0001 # Boot0000* sles-secureboot # Boot0001* CD/DVD Rom # Boot0002* Hard Disk # Boot0003* sles-secureboot # MirroredPercentageAbove4G: 0.00 # MirrorMemoryBelow4GB: false # 根据文档，* 表示 active，也就是说有可能没有*(代表inactive) # https://manpages.debian.org/testing/efibootmgr/efibootmgr.8.en.html grep -E '^Boot[0-9a-fA-F]{4}' } # trans.sh 有同名方法 grep_efi_index() { awk '{print $1}' | sed -e 's/Boot//' -e 's/\*//' } download_or_copy_file() { local source=$1 local dist=$2 mkdir -p "$(dirname $dist)" if [[ "$source" = http* ]]; then curl -Lo "$dist" "$source" else cp -f "$source" "$dist" fi } add_efi_entry_in_linux() { local source=$1 info "Add efi entry in linux" install_pkg efibootmgr # 只取第一个 # 因为不用关心是否为 efi 分区，只要是 fat/vfat 格式的分区即可添加到引导 # 这里用了管道导致 get_maybe_efi_dirs_in_linux 里面的 error_and_exit 不生效 efi_part=$(get_maybe_efi_dirs_in_linux | head -1 | grep .) dist_dir=$efi_part/EFI/reinstall basename=$(basename $source) download_or_copy_file "$source" "$dist_dir/$basename" # 原系统可能不是用 grub 引导，因此不一定有 grub-probe if false; then grub_probe="$(command -v grub-probe grub2-probe | head -1)" dev_part="$("$grub_probe" -t device "$dist_dir")" else install_pkg findmnt # arch findmnt 会得到 # systemd-1 # /dev/sda2 dev_part=$(findmnt -T "$dist_dir" -no SOURCE | grep '^/dev/') fi set -- efibootmgr --create-only \ --disk "/dev/$(get_disk_by_part $dev_part)" \ --part "$(get_part_num_by_part $dev_part)" \ --label "$(get_entry_name)" \ --loader "\\EFI\\reinstall\\$basename" if ! res=$("$@"); then echo "Command: $*" echo "$res" error_and_exit "Could not add efi entry." fi id=$(echo "$res" | grep_efi_entry | tail -1 | grep_efi_index | grep .) efibootmgr --bootnext "$id" } get_grub_efi_filename() { case "$basearch" in x86_64) echo grubx64.efi ;; aarch64) echo grubaa64.efi ;; esac } install_grub_linux_efi() { info 'download grub efi' # fedora 39 的 efi 无法识别 opensuse tumbleweed 的 xfs efi_distro=fedora grub_efi=$(get_grub_efi_filename) # 不要用 download.opensuse.org 和 download.fedoraproject.org # 因为 ipv6 访问有时跳转到 ipv4 地址，造成 ipv6 only 机器无法下载 # 日韩机器有时得到国内镜像源，但镜像源屏蔽了国外 IP 导致连不上 # https://mirrors.bfsu.edu.cn/opensuse/ports/aarch64/tumbleweed/repo/oss/EFI/BOOT/grub.efi # fcix 经常 404 # https://mirror.fcix.net/opensuse/tumbleweed/repo/oss/EFI/BOOT/bootx64.efi # https://mirror.fcix.net/opensuse/tumbleweed/appliances/openSUSE-Tumbleweed-Minimal-VM.x86_64-Cloud.qcow2 # dl.fedoraproject.org 不支持 ipv6 if [ "$efi_distro" = fedora ]; then # fedora 43 efi 在 vultr 无法引导 debain 9/10 netboot fedora_ver=$(get_latest_distro_releasever fedora) if is_in_china; then mirror=https://mirror.nju.edu.cn/fedora else mirror=https://d2lzkl7pfhq30w.cloudfront.net/pub/fedora/linux fi curl -Lo $tmp/$grub_efi $mirror/releases/$fedora_ver/Everything/$basearch/os/EFI/BOOT/$grub_efi else if is_in_china; then mirror=https://mirror.nju.edu.cn/opensuse else mirror=https://downloadcontentcdn.opensuse.org fi [ "$basearch" = x86_64 ] && ports='' || ports=/ports/$basearch curl -Lo $tmp/$grub_efi $mirror$ports/tumbleweed/repo/oss/EFI/BOOT/grub.efi fi add_efi_entry_in_linux $tmp/$grub_efi } download_and_extract_apk() { local alpine_ver=$1 local package=$2 local extract_dir=$3 install_pkg tar xz is_in_china && mirror=http://mirror.nju.edu.cn/alpine || mirror=https://dl-cdn.alpinelinux.org/alpine package_apk=$(curl -L $mirror/v$alpine_ver/main/$basearch/ | grep -oP "$package-[^-]*-[^-]*\.apk" | sort -u) if ! [ "$(wc -l <<<"$package_apk")" -eq 1 ]; then error_and_exit "find no/multi apks." fi mkdir -p "$extract_dir" # 屏蔽警告 tar 2>&1 | grep -q BusyBox && tar_args= || tar_args=--warning=no-unknown-keyword curl -L "$mirror/v$alpine_ver/main/$basearch/$package_apk" | tar xz $tar_args -C "$extract_dir" } install_grub_win() { # 下载 grub info download grub # https://wuyou.net/forum.php?mod=viewthread&tid=449379&extra=page%3D1&page=2 # 2.14 # efi 正常 # bios 报错 ld.gold bug https://lists.gnu.org/archive/html/grub-devel/2026-01/msg00041.html # 替换成 alpine/arch 的模块后，出现 ntfs 读取 out of range 错误 # 2.12 # efi 报错 __stack_chk_guard https://lists.gnu.org/archive/html/bug-grub/2024-01/msg00002.html # 替换成 alpine/arch 的模块后，正常 # bios 正常 # 2.06 # 一切正常 # 要使用的 grub 版本 if is_efi; then local grub_ver=2.14 else local grub_ver=2.12 fi # grub 对应的 alpine 版本 case "$grub_ver" in 2.14) local alpine_ver=3.24 ;; 2.12) local alpine_ver=3.23 ;; 2.06) local alpine_ver=3.19 ;; esac # grub 架构名和对应的 alpine 包名 if is_efi; then local alpine_grub_pkg=grub-efi case "$basearch" in x86_64) local grub_arch=x86_64-efi ;; aarch64) local grub_arch=arm64-efi ;; esac else local alpine_grub_pkg=grub-bios local grub_arch=i386-pc fi # 是否需要从 alpine 获取/替换 grub 模块 # arm64-efi 要从 alpine 下载 grub 模块 local need_download_grub_module_from_alpine=false if [ "$grub_arch" = arm64-efi ]; then need_download_grub_module_from_alpine=true fi # ftpmirror.gnu.org 是 geoip 重定向，不是 cdn # 有可能重定义到一个拉黑了部分 IP 的服务器 # 换成 ftp.gnu.org? is_in_china && grub_url=https://mirror.nju.edu.cn/gnu/grub/grub-$grub_ver-for-windows.zip || grub_url=https://mirrors.kernel.org/gnu/grub/grub-$grub_ver-for-windows.zip curl -Lo $tmp/grub.zip $grub_url # unzip -qo $tmp/grub.zip 7z x $tmp/grub.zip -o$tmp -r -y -xr!i386-efi -xr!locale -xr!themes -bso0 grub_dir=$tmp/grub-$grub_ver-for-windows grub=$grub_dir/grub # 下载/替换 grub 模块 if $need_download_grub_module_from_alpine; then info 'download grub modules from alpine' download_and_extract_apk $alpine_ver $alpine_grub_pkg $tmp/grub-from-alpine cp -r $tmp/grub-from-alpine/usr/lib/grub/$grub_arch/ $grub_dir fi # 设置 grub 包含的模块 # 原系统是 windows，因此不需要 ext2 lvm xfs btrfs 模块 # vmlinuz/initramfs 不需要 grub 解压，因此不需要 lzopio xzio gzio zstd 模块 grub_modules="normal minicmd serial ls echo test cat reboot halt linux chain search all_video configfile" grub_modules+=" scsi part_msdos part_gpt fat ntfs ntfscomp" if ! is_efi; then grub_modules+=" biosdisk linux16" fi # 设置 grub prefix 为c盘根目录 # 运行 grub-probe 会改变cmd窗口字体 local prefix prefix=$($grub-probe -t drive $c: | sed 's|.*PhysicalDrive|(hd|' | del_cr)/ echo $prefix # 安装 grub if is_efi; then # efi info install grub for efi grub_efi=$(get_grub_efi_filename) $grub-mkimage -p $prefix -O $grub_arch -o "$(cygpath -w "$grub_dir/$grub_efi")" $grub_modules add_efi_entry_in_windows "$grub_dir/$grub_efi" else # bios info install grub for bios # bootmgr 加载 g2ldr 有大小限制 # 超过大小会报错 0xc000007b # 解决方法1 g2ldr.mbr + g2ldr # 解决方法2 生成少于64K的 g2ldr + 动态模块 if false; then # g2ldr.mbr # 部分国内机无法访问 ftp.cn.debian.org is_in_china && host=mirror.nju.edu.cn || host=deb.debian.org curl -LO http://$host/debian/tools/win32-loader/oldstable/win32-loader.exe 7z x win32-loader.exe 'g2ldr.mbr' -o$tmp/win32-loader -r -y -bso0 find $tmp/win32-loader -name 'g2ldr.mbr' -exec cp {} /cygdrive/$c/ \; # g2ldr # 配置文件 c:\grub.cfg $grub-mkimage -p "$prefix" -O $grub_arch -o "$(cygpath -w $grub_dir/core.img)" $grub_modules cat $grub_dir/$grub_arch/lnxboot.img $grub_dir/core.img >/cygdrive/$c/g2ldr else # grub-install 无法设置 prefix # 配置文件 c:\grub\grub.cfg $grub-install $c \ --target=$grub_arch \ --boot-directory=$c: \ --install-modules="$grub_modules" \ --themes= \ --fonts= \ --no-bootsector cat $grub_dir/$grub_arch/lnxboot.img /cygdrive/$c/grub/$grub_arch/core.img >/cygdrive/$c/g2ldr fi # 添加引导 # 脚本可能不是首次运行，所以先删除原来的 id='{1c41f649-1637-52f1-aea8-f96bfebeecc8}' bcdedit /enum all | grep -a $id && bcdedit /delete $id bcdedit /create $id /d "$(get_entry_name)" /application bootsector bcdedit /set $id device partition=$c: bcdedit /set $id path \\g2ldr bcdedit /displayorder $id /addlast bcdedit /bootsequence $id /addfirst fi } find_grub_extlinux_cfg() { dir=$1 filename=$2 keyword=$3 # 当 ln -s /boot/grub /boot/grub2 时 # find /boot/ 会自动忽略 /boot/grub2 里面的文件 cfgs=$( # 只要 $dir 存在 # 无论是否找到结果，返回值都是 0 find $dir \ -type f -name $filename \ -exec grep -E -l "$keyword" {} \; ) count="$(wc -l <<<"$cfgs")" if [ "$count" -eq 1 ]; then echo "$cfgs" else error_and_exit "Find $count $filename." fi } # 空格、&、用户输入的网址要加引号，否则 grub 无法正确识别 is_need_quote() { [[ "$1" = *' '* ]] || [[ "$1" = *'&'* ]] || [[ "$1" = http* ]] } # 转换 finalos_a=1 为 finalos.a=1 ，排除 finalos_mirrorlist build_finalos_cmdline() { if vars=$(compgen -v finalos_); then for key in $vars; do value=${!key} key=${key#finalos_} if [ -n "$value" ] && [ $key != "mirrorlist" ]; then is_need_quote "$value" && finalos_cmdline+=" finalos_$key='$value'" || finalos_cmdline+=" finalos_$key=$value" fi done fi } build_extra_cmdline() { # 使用 extra_xxx=yyy 而不是 extra.xxx=yyy # 因为 debian installer /lib/debian-installer-startup.d/S02module-params # 会将 extra.xxx=yyy 写入新系统的 /etc/modprobe.d/local.conf # https://answers.launchpad.net/ubuntu/+question/249456 # https://salsa.debian.org/installer-team/rootskel/-/blob/master/src/lib/debian-installer-startup.d/S02module-params?ref_type=heads for key in confhome hold force_boot_mode force_cn cloud_image no_cloud_kernel main_disk \ force_old_windows_setup no_auto_drivers no_lockout_threshold \ elts deb_mirror \ username ssh_port rdp_port web_port web_path allow_ping; do value=${!key} if [ -n "$value" ]; then is_need_quote "$value" && extra_cmdline+=" extra_$key='$value'" || extra_cmdline+=" extra_$key=$value" fi done # 指定最终安装系统的 mirrorlist，链接有&，在grub中是特殊字符，所以要加引号 if [ -n "$finalos_mirrorlist" ]; then extra_cmdline+=" extra_mirrorlist='$finalos_mirrorlist'" elif [ -n "$nextos_mirrorlist" ]; then extra_cmdline+=" extra_mirrorlist='$nextos_mirrorlist'" fi # cloudcone 特殊处理 if is_grub_dir_linked; then finalos_cmdline+=" extra_link_grub_dir=1" fi } echo_tmp_ttys() { if false; then curl -L $confhome/ttys.sh | sh -s "console=" else case "$basearch" in x86_64) echo "console=ttyS0,115200n8 console=tty0" ;; aarch64) echo "console=ttyS0,115200n8 console=ttyAMA0,115200n8 console=tty0" ;; esac fi } get_entry_name() { printf 'reinstall (' printf '%s' "$distro" [ -n "$releasever" ] && printf ' %s' "$releasever" [ "$distro" = alpine ] && [ "$hold" = 1 ] && printf ' Live OS' printf ')' } # shellcheck disable=SC2154 build_nextos_cmdline() { if [ $nextos_distro = alpine ]; then nextos_cmdline="alpine_repo=$nextos_repo modloop=$nextos_modloop" elif is_distro_like_debian $nextos_distro; then # 我们直接强制 di 优先显示到 串口，因此不需要设置分辨率 # 设置分辨率为800*600，防止分辨率过高 ssh screen attach 后无法全部显示 # iso 默认有 vga=788 # 如果要设置位数: video=800x600-16 nextos_cmdline="lowmem/low=1 auto=true priority=critical" # nextos_cmdline+=" vga=788 video=800x600" nextos_cmdline+=" url=$nextos_ks" nextos_cmdline+=" mirror/http/hostname=${nextos_udeb_mirror%/*}" nextos_cmdline+=" mirror/http/directory=/${nextos_udeb_mirror##*/}" nextos_cmdline+=" base-installer/kernel/image=$nextos_kernel" # elts 的 debian 不能用 security 源，否则安装过程会提示无法访问 if [ "$nextos_distro" = debian ] && is_debian_elts; then nextos_cmdline+=" apt-setup/services-select=" fi # kali 安装好后网卡是 eth0 这种格式，但安装时不是 if [ "$nextos_distro" = kali ]; then nextos_cmdline+=" net.ifnames=0" nextos_cmdline+=" simple-cdd/profiles=kali" fi elif is_distro_like_redhat $nextos_distro; then # redhat nextos_cmdline="root=live:$nextos_squashfs inst.ks=$nextos_ks" fi if is_distro_like_debian $nextos_distro; then if [ "$basearch" = "x86_64" ]; then : else # debian arm 在没有ttyAMA0的机器上（aws t4g），最少要设置一个tty才能启动 # 只设置tty0也行 nextos_cmdline+=" $(echo_tmp_ttys)" fi else nextos_cmdline+=" $(echo_tmp_ttys)" fi # nextos_cmdline+=" mem=256M" # nextos_cmdline+=" lowmem=+1" } build_cmdline() { # nextos build_nextos_cmdline # finalos # trans 需要 finalos_distro 识别是安装 alpine 还是其他系统 if [ "$distro" = alpine ]; then finalos_distro=alpine fi if [ -n "$finalos_distro" ]; then build_finalos_cmdline fi # extra build_extra_cmdline cmdline="$nextos_cmdline $finalos_cmdline $extra_cmdline" } # 脚本可能多次运行，先清理之前的残留 mkdir_clear() { local dir=$1 if [ -z "$dir" ] || [ "$dir" = / ]; then return fi # 再次运行时，有可能 mount 了 btrfs root，因此先要 umount_all # 但目前不需要 mount ，因此用不到 # umount_all "$dir" rm -rf "$dir" mkdir -p "$dir" } mod_inittab_for_screen() { # 如果串口不可写 # true >/dev/ttyS0 正常 # echo >/dev/ttyS0 报 IO 错误 # /etc/inittab # 主 tty 条目由 /usr/sbin/reopen-console 写入 # ttyAMA0::respawn:/sbin/debian-installer # 我们补充其它 tty 条目，让他们显示 screen 会话 # tty1::respawn:screen -x root/ -p 1 # 这里用 tty1 # 因为直接用 netinst.iso 启动，/etc/inittab 自动创建的是 tty1 而不是 tty0 for tty in tty1 ttyS0 ttyAMA0; do # 防止同时存在 tty0 tty1 if { [ "$tty" = tty0 ] || [ "$tty" = tty1 ]; } && grep -q "^tty[01]:" /etc/inittab; then continue fi # debian 9-11 没有 stty if ! grep -q "^$tty:" /etc/inittab && [ -c "/dev/$tty" ] && { stty -g -F "/dev/$tty" >/dev/null || echo >"/dev/$tty"; } 2>/dev/null; then echo "$tty::respawn:screen -x root/ -p 1" >>/etc/inittab fi done } # 通过优先使用串口，强制 di 使用小分辨率 # 防止 tty0 分辨率过大，内容同步到 ttyS0/ttyAMA0 后显示异常/乱码 force_serial_if_exists() { # 低版本环境没有 awk，改用 cut # 优先使用有 C 标识的 tty c_tty=$(cat /proc/consoles | grep -F '(EC' | cut -d' ' -f1) if ! { [ "$c_tty" = ttyAMA0 ] || [ "$c_tty" = ttyS0 ]; }; then # 如果不是串口，则忽略 c_tty= fi for tty in $c_tty ttyAMA0 ttyS0; do # shellcheck disable=SC2034 if [ -c "/dev/$tty" ] && { stty -g -F "/dev/$tty" >/dev/null || echo >"/dev/$tty"; } 2>/dev/null; then consoles=$tty preferred=$tty break fi done } mod_initrd_debian_kali() { # hack 1 # 允许设置 ipv4 onlink 网关 sed -Ei 's,&&( onlink=),||\1,' etc/udhcpc/default.script # hack 2 # 强制使用 screen # shellcheck disable=SC1003,SC2016 { echo 'if false && : \' | insert_into_file lib/debian-installer.d/S70menu before 'if [ -x "$bterm" ]' -F echo 'if true || : \' | insert_into_file lib/debian-installer.d/S70menu before 'if [ -x "$screen_bin" -a' -F } # debian 9 不在 reopen-console 处理 inittab # 暂时不管 # shellcheck disable=SC2016 if ! { [ "$distro" = debian ] && [ "$releasever" -le 9 ]; }; then get_function_content mod_inittab_for_screen | insert_into_file sbin/reopen-console before 'kill -HUP 1' -F # 如果主 tty 是 tty0，S40term-linux 会开启 utf-8，通过 screen 显示在甲骨文云控制台时会出现乱码 # 如果主 tty 是 ttyS0 ，S40term-linux 不会开启 utf-8 # https://salsa.debian.org/installer-team/rootskel/-/blob/master/src/usr/lib/debian-installer.d/S40term-linux?ref_type=heads # 可用以下方法强制 di 显示在 ttyS0，但 /proc/consoles 还是 tty0，S40term-linux 还是会打开 utf-8 # 因此还要设置 S40term-linux 或者通过 cmdline 强制 console=ttyS0 get_function_content force_serial_if_exists | insert_into_file sbin/reopen-console before 'if [ $PRESEEDING = 1 ]; then' -F # 在甲骨文 arm 上设置 console=tty0 console=ttyAMA0 console=ttyS0 # 预期 ttyS0 不存在，会把倒数第二个 tty设为主 tty，但实际上主 tty 是 tty0 # cat /proc/consoles 可查看哪个是主 tty，有 C 标识的就是主 tty # 因此在这里强制 S40term-linux 不使用 utf-8 # shellcheck disable=SC1003 echo 'if false && : \' | insert_into_file lib/debian-installer.d/S40term-linux before 'if [ -d /usr/lib/locale/C.UTF-8 ]; then' -F fi # hack 3 # 修改 /var/lib/dpkg/info/netcfg.postinst 运行我们的脚本 netcfg() { #!/bin/sh # shellcheck source=/dev/null . /usr/share/debconf/confmodule db_progress START 0 5 debian-installer/netcfg/title : get_ip_conf_cmd # 运行 trans.sh，保存配置 db_progress INFO base-installer/progress/netcfg # 添加 || exit ，可以在 debian installer 不兼容 /trans.sh 语法时强制报错 # exit 不带参数，返回值为 || 前面命令的返回值 sh /trans.sh || exit db_progress STEP 1 db_progress STOP } postinst=var/lib/dpkg/info/netcfg.postinst get_function_content netcfg >$postinst get_ip_conf_cmd | insert_into_file $postinst after ": get_ip_conf_cmd" # cat $postinst # hack 4 # 修改 udeb 依赖 # 直接覆盖 net-retriever，方便调试 # curl -Lo /usr/lib/debian-installer/retriever/net-retriever $confhome/net-retriever change_priority() { while IFS= read -r line; do if [[ "$line" = Package:* ]]; then package=$(echo "$line" | cut -d' ' -f2-) elif [[ "$line" = Priority:* ]]; then # shellcheck disable=SC2154 if [ "$line" = "Priority: standard" ]; then for p in $disabled_list; do if [ "$package" = "$p" ]; then line="Priority: optional" break fi done elif [[ "$package" = ata-modules* ]]; then # 改成强制安装 # 因为是 pata-modules sata-modules scsi-modules 的依赖 # 但我们没安装它们，也就不会自动安装 ata-modules line="Priority: standard" fi fi echo "$line" done } # shellcheck disable=SC2012 kver=$(ls -d lib/modules/* | awk -F/ '{print $NF}') net_retriever=usr/lib/debian-installer/retriever/net-retriever # shellcheck disable=SC2016 sed -i 's,>> "$1",| change_priority >> "$1",' $net_retriever insert_into_file $net_retriever after '#!/bin/sh' <$deb_list fi # 下载 deb/udeb deb_path=$(grep -F "/${package}_" "$deb_list") curl -Lo $tmp/tmp.deb http://$mirror/"$deb_path" if false; then # 使用 dpkg # cygwin 没有 dpkg install_pkg dpkg dpkg -x $tmp/tmp.deb $extract_dir else # 使用 ar tar xz # cygwin 需安装 binutils # centos7 ar 不支持 --output install_pkg ar tar xz (cd $tmp && ar x $tmp/tmp.deb) tar xf $tmp/data.tar.xz -C $extract_dir fi } cp_debian_kali_driver() { # debian 13 的 linux-image.deb 有 /usr/lib 没有 /lib # debian 13 的 scsi-modules.udeb 没有 /usr/lib 有 /lib local src_drivers_dir=$1/lib/modules/$kver/kernel/drivers if ! [ -d "$src_drivers_dir" ]; then local src_drivers_dir=$1/usr/lib/modules/$kver/kernel/drivers fi local extra_drivers=$2 # 各个版本的 debian/kali installer initrd 都有 /lib local dst_drivers_dir=$initrd_dir/lib/modules/$kver/kernel/drivers ( cd $src_drivers_dir for driver in $extra_drivers; do # debian 模块没有压缩 # kali 模块有压缩 # 因此要有 * if ! find $dst_drivers_dir -name "$driver.ko*" | grep -q .; then echo "adding driver: $driver" file=$(find . -name "$driver.ko*" | grep .) cp -fv --parents "$file" "$dst_drivers_dir" fi done ) } # 不用在 windows 判断是哪种硬盘控制器，因为 256M 运行 windows 只可能是 xp，而脚本本来就不支持 xp # 在 debian installer 中判断能否用云内核 create_can_use_cloud_kernel_sh can_use_cloud_kernel.sh # 下载 fix-eth-name 脚本 curl -LO "$confhome/fix-eth-name.sh" curl -LO "$confhome/fix-eth-name.service" # 有段时间 kali initrd 删除了原版 wget # 但 initrd 的 busybox wget 又不支持 https # 因此改成在这里下载 curl -LO "$confhome/get-xda.sh" curl -LO "$confhome/ttys.sh" if [ -n "$frpc_config" ]; then curl -LO "$confhome/get-frpc-url.sh" curl -LO "$confhome/frpc.service" fi # 可以节省一点内存？ echo 'export DEBCONF_DROP_TRANSLATIONS=1' | insert_into_file lib/debian-installer/menu before 'exec debconf' # 还原 kali netinst.iso 的 simple-cdd 机制 # 主要用于调用 kali.postinst 设置 zsh 为默认 shell # 但 mini.iso 又没有这种机制 # https://gitlab.com/kalilinux/build-scripts/kali-installer/-/raw/main/simple-cdd/profiles/kali.postinst?ref_type=heads # https://salsa.debian.org/debian/simple-cdd/-/blob/master/debian/14simple-cdd?ref_type=heads # https://http.kali.org/pool/main/s/simple-cdd/simple-cdd-profiles_0.6.9_all.udeb if [ "$distro" = kali ]; then # 但我们没有使用 iso，因此没有 kali.postinst，需要另外下载 mkdir -p cdrom/simple-cdd curl -Lo cdrom/simple-cdd/kali.postinst https://gitlab.com/kalilinux/build-scripts/kali-installer/-/raw/main/simple-cdd/profiles/kali.postinst?ref_type=heads chmod a+x cdrom/simple-cdd/kali.postinst # kali simple-cdd 阶段将 apt 源改成 deb822 格式 # 但是写死了 http://http.kali.org/kali/ 和 kali-rolling # 因此在这里改回去 # https://gitlab.com/kalilinux/build-scripts/kali-installer/-/raw/main/simple-cdd/profiles/kali.postinst?ref_type=heads sed -E -i \ -e "s|^URIs: http://http.kali.org/kali/$|URIs: http://$nextos_deb_mirror/|" \ -e "s|^Suites: kali-rolling$|Suites: $nextos_codename|" \ cdrom/simple-cdd/kali.postinst fi # 安装 kali-last-snapshot 时 # 要将以下几处的 kali-rolling 替换为 kali-last-snapshot # 注意系统安装后 /etc/apt/sources.list.d/kali.sources 依然是 kali-rolling # kali-linux-202x.x-installer-netinst-amd64.iso 安装后也是 kali-rolling # 而微软商店的 kali 的 kali.sources 是 kali-last-snapshot if [ "$distro" = kali ] && [ "$releasever" = last-snapshot ]; then sed -i "s/kali-rolling/kali-last-snapshot/" \ preseed.cfg \ etc/default-release \ etc/udebs-source fi if [ "$distro" = debian ] && is_debian_elts; then curl -Lo usr/share/keyrings/debian-archive-keyring.gpg https://deb.freexian.com/extended-lts/archive-key.gpg fi # 提前下载 sshd # 以便在配置下载源之前就可以启动 sshd mkdir_clear $tmp/sshd download_and_extract_deb udeb openssh-server-udeb $tmp/sshd cp -r $tmp/sshd/* . # 提前下载 fdisk # 因为 fdisk-udeb 包含 fdisk 和 sfdisk，提前下载可减少占用 mkdir_clear $tmp/fdisk download_and_extract_deb udeb fdisk-udeb $tmp/fdisk cp -f $tmp/fdisk/usr/sbin/fdisk usr/sbin/ # 下载 websocketd # debian 11+ 才有 websocketd if [ "$distro" = kali ] || { [ "$distro" = debian ] && [ "$releasever" -ge 11 ]; }; then mkdir_clear $tmp/websocketd download_and_extract_deb deb websocketd $tmp/websocketd cp -f $tmp/websocketd/usr/bin/websocketd usr/bin/ fi # 提前下载 pci-hyperv # udeb 没有这个模块 curl https://deb.debian.org/debian/dists/stable/main/Contents-udeb-amd64.gz | zcat | grep pci-hyperv # 缺少这个模块 azure 会找不到 nvme 硬盘 # kali 的 pci-hyperv/pci-hyperv-intf 已嵌入到内核，不需要下载 # 用到 pci-hyperv 才需要下载，因为 # 1. azure 普通网卡、scsi 硬盘不需要这个模块 # 2. 没有这个模块会缺少加速网卡，但还有 hyperv 合成网卡，可以正常上网 if { is_in_windows && wmic PATH Win32_PnPEntity where "DeviceID like 'VMBUS\\\\{44C4F61D-4444-4400-9D52-802E27EDE19F}\\\\%'" | grep -q . || [ -d /sys/module/pci_hyperv ]; } && # 可能在 host 或 controller 文件夹 ! ls lib/modules/$kver/kernel/drivers/pci/*/pci-hyperv.ko* >/dev/null 2>&1 && ! grep -Fq /pci-hyperv.ko lib/modules/$kver/modules.builtin; then mkdir_clear $tmp/linux-image-$kver download_and_extract_deb deb linux-image-$kver $tmp/linux-image-$kver cp_debian_kali_driver $tmp/linux-image-$kver pci-hyperv fi # >256M 或者当前系统是 windows if [ $ram_size -gt 256 ] || is_in_windows; then sed -i '/^pata-modules/d' $net_retriever sed -i '/^sata-modules/d' $net_retriever sed -i '/^scsi-modules/d' $net_retriever else # <=256M 极限优化 find_main_disk extra_drivers= for driver in $(get_disk_drivers $xda); do echo "using driver: $driver" case $driver in nvme) extra_drivers+=" nvme nvme-core" # debian 13+ / kali 有 nvme-auth 模块 # 添加后才能识别 nvme 硬盘 if grep -q nvme-auth lib/modules/$kver/modules.order; then extra_drivers+=" nvme-auth" fi ;; # xen 的横杠特别不同 xen_blkfront) extra_drivers+=" xen-blkfront" ;; xen_scsifront) extra_drivers+=" xen-scsifront" ;; virtio_blk | virtio_scsi | hv_storvsc | vmw_pvscsi) extra_drivers+=" $driver" ;; pata_legacy) sed -i '/^pata-modules/d' $net_retriever ;; # 属于 pata-modules ata_piix) sed -i '/^sata-modules/d' $net_retriever ;; # 属于 sata-modules ata_generic) ;; # 属于 ata-modules，不用处理，因为我们设置强制安装了 ata-modules esac done # extra drivers # xen 还需要以下两个？ # kernel/drivers/xen/xen-scsiback.ko # kernel/drivers/block/xen-blkback/xen-blkback.ko # udeb 没有这个模块 curl https://deb.debian.org/debian/dists/stable/main/Contents-udeb-amd64.gz | zcat | grep xen if [ -n "$extra_drivers" ]; then mkdir_clear $tmp/scsi download_and_extract_deb udeb scsi-modules-$kver-di $tmp/scsi cp_debian_kali_driver $tmp/scsi "$extra_drivers" fi fi # amd64) # level1=737 # MT=754108, qemu: -m 780 # level2=424 # MT=433340, qemu: -m 460 # min=316 # MT=322748, qemu: -m 350 # 将 use_level 2 9 修改为 use_level 1 # x86 use_level 2 会出现 No root file system is defined. # arm 即使 use_level 1 也会出现 No root file system is defined. sed -i 's/use_level=[29]/use_level=1/' lib/debian-installer-startup.d/S15lowmem # hack 3 # 修改 trans.sh # 1. 直接调用 create_ifupdown_config # shellcheck disable=SC2154 insert_into_file $initrd_dir/trans.sh after '^: main' < > # 5. debian 11/12 initrd 无法识别 < < ，注意可能分两行写 # 6. debian 11 initrd 无法识别 set -E # 7. debian 11 initrd 无法识别 trap ERR # 8. debian 9 initrd 无法识别 ${string//find/replace} # 9. debian 12 initrd 无法识别 . <( # 删除或注释，可能会导致空方法而报错，因此改为替换成'\n: #' replace='\n: #' sed -Ei \ -e "s/> >/$replace/" \ -e "s/< $1 $(get_function get_drivers) $(get_function get_net_drivers) $(get_function get_disk_drivers) $(get_function can_use_cloud_kernel) distro="$distro" releasever="$releasever" can_use_cloud_kernel "\$@" EOF } get_ip_conf_cmd() { collect_netconf >&2 is_in_china && is_in_china=true || is_in_china=false sh=/initrd-network.sh if is_found_ipv4_netconf && is_found_ipv6_netconf && [ "$ipv4_mac" = "$ipv6_mac" ]; then echo "'$sh' '$ipv4_mac' '$ipv4_addr' '$ipv4_gateway' '$ipv6_addr' '$ipv6_gateway' '$is_in_china' '$ipv6_extra_addrs'" else if is_found_ipv4_netconf; then echo "'$sh' '$ipv4_mac' '$ipv4_addr' '$ipv4_gateway' '' '' '$is_in_china' ''" fi if is_found_ipv6_netconf; then echo "'$sh' '$ipv6_mac' '' '' '$ipv6_addr' '$ipv6_gateway' '$is_in_china' '$ipv6_extra_addrs'" fi fi } is_need_web_viewer() { ! { [ "$distro" = netboot.xyz ] || is_alpine_live; } } mod_initrd_alpine() { # hack 1 v3.19 和之前的 virt 内核需添加 ipv6 模块 if virt_dir=$(ls -d $initrd_dir/lib/modules/*-virt 2>/dev/null); then ipv6_dir=$virt_dir/kernel/net/ipv6 if ! [ -f $ipv6_dir/ipv6.ko ] && ! grep -q ipv6 $initrd_dir/lib/modules/*/modules.builtin; then mkdir -p $ipv6_dir modloop_file=$tmp/modloop_file modloop_dir=$tmp/modloop_dir curl -Lo $modloop_file $nextos_modloop if is_in_windows; then # cygwin 没有 unsquashfs 7z e $modloop_file ipv6.ko -r -y -o$ipv6_dir else install_pkg unsquashfs mkdir_clear $modloop_dir unsquashfs -f -d $modloop_dir $modloop_file 'modules/*/kernel/net/ipv6/ipv6.ko' find $modloop_dir -name ipv6.ko -exec cp {} $ipv6_dir/ \; fi fi fi # hack 下载 dhcpcd # shellcheck disable=SC2154 download_and_extract_apk "$nextos_releasever" dhcpcd "$initrd_dir" sed -i -e '/^slaac private/s/^/#/' -e '/^#slaac hwaddr/s/^#//' $initrd_dir/etc/dhcpcd.conf # hack 2 /usr/share/udhcpc/default.script # 脚本被调用的顺序 # udhcpc: deconfig # udhcpc: bound # udhcpc6: deconfig # udhcpc6: bound # shellcheck disable=SC2329 udhcpc() { if [ "$1" = deconfig ]; then return fi if [ "$1" = bound ] && [ -n "$ipv6" ]; then # shellcheck disable=SC2154 ip -6 addr add "$ipv6" dev "$interface" ip link set dev "$interface" up return fi } get_function_content udhcpc | insert_into_file usr/share/udhcpc/default.script after 'deconfig\|renew\|bound' # 允许设置 ipv4 onlink 网关 sed -Ei 's,(0\.0\.0\.0\/0),"\1 onlink",' usr/share/udhcpc/default.script # hack 3 网络配置 # alpine 根据 MAC_ADDRESS 判断是否有网络 # https://github.com/alpinelinux/mkinitfs/blob/c4c0115f9aa5aa8884c923dc795b2638711bdf5c/initramfs-init.in#L914 insert_into_file init after 'configure_ip\(\)' <\$sysroot/etc/local.d/trans.start # wget --no-check-certificate -O \$sysroot/etc/local.d/trans.start $confhome/trans.sh cp /trans.sh \$sysroot/etc/local.d/trans.start chmod a+x \$sysroot/etc/local.d/trans.start ln -s /etc/init.d/local \$sysroot/etc/runlevels/default/ # 配置 + 自定义驱动 for dir in /configs /custom_drivers; do if [ -d \$dir ]; then cp -r \$dir \$sysroot/ rm -rf \$dir fi done EOF # 判断云镜像 debain 能否用云内核 if is_distro_like_debian || [ "$distro" = opensuse ]; then create_can_use_cloud_kernel_sh can_use_cloud_kernel.sh insert_into_file init before '^exec (/bin/busybox )?switch_root' <&2 || true) EOF } mod_initrd() { info "mod $nextos_distro initrd" install_pkg gzip cpio # 解压 # 先删除临时文件，避免之前运行中断有残留文件 initrd_dir=$tmp/initrd mkdir_clear $initrd_dir cd $initrd_dir # cygwin 下处理 debian initrd 时 # 解压/重新打包/删除 initrd 的 /dev/console /dev/null 都会报错 # cpio: dev/console: Cannot utime: Invalid argument # cpio: ./dev/console: Cannot stat: Bad address # 用 windows 文件管理器可删除 # 但同样运行 zcat /reinstall-initrd | cpio -idm # 打开 C:\cygwin\Cygwin.bat ，运行报错 # 打开桌面的 Cygwin 图标，运行就没问题 # shellcheck disable=SC2046 # nonmatching 是精确匹配路径 zcat /reinstall-initrd | cpio -idm \ $(is_in_windows && echo --nonmatching 'dev/console' --nonmatching 'dev/null') curl -Lo $initrd_dir/trans.sh $confhome/trans.sh if ! grep -iq "$SCRIPT_VERSION" $initrd_dir/trans.sh; then error_and_exit " This script is outdated, please download reinstall.sh again. 脚本有更新，请重新下载 reinstall.sh" fi curl -Lo $initrd_dir/initrd-network.sh $confhome/initrd-network.sh chmod a+x $initrd_dir/trans.sh $initrd_dir/initrd-network.sh # 保存配置 mkdir -p $initrd_dir/configs if [ -n "$ssh_keys" ]; then cat <<<"$ssh_keys" >$initrd_dir/configs/ssh_keys else save_password $initrd_dir/configs fi if [ -n "$frpc_config" ]; then cat "$frpc_config" >$initrd_dir/configs/frpc.conf fi # 收集 cloud-data 打包进 initrd if [ -n "$cloud_data" ]; then mkdir -p $initrd_dir/configs/cloud-data if [ -d "$cloud_data" ]; then # 本地目录：直接复制 cp "$cloud_data"/* $initrd_dir/configs/cloud-data/ else # URL：在 host 下载 for f in user-data meta-data network-config; do curl -fsSL "$cloud_data/$f" -o "$initrd_dir/configs/cloud-data/$f" 2>/dev/null || true done fi # 校验：至少要有 user-data [ -f $initrd_dir/configs/cloud-data/user-data ] || error_and_exit "--cloud-data must contain user-data" cloud_data_files=$(ls $initrd_dir/configs/cloud-data/ | tr '\n' ' ') fi if is_distro_like_debian $nextos_distro; then mod_initrd_debian_kali else mod_initrd_$nextos_distro fi # 添加自定义 windows 驱动 if [ "$distro" = windows ] && [ -n "$custom_infs" ]; then # shellcheck disable=SC1090 . <(curl -L $confhome/windows-driver-utils.sh) echo "$custom_infs" | while read -r inf; do parse_inf_and_cp_driever "$inf" "$initrd_dir/custom_drivers" "$basearch_alt" true done fi # alpine live 不精简 initrd # 因为不知道用户想干什么，可能会用到精简的文件 if is_virt && ! is_alpine_live; then remove_useless_initrd_files fi if [ "$hold" = 0 ]; then info 'hold 0' echo "Edit $tmp if needed." read -r -p 'Press Enter to continue...' fi # 重建 # 注意要用 cpio -H newc 不要用 cpio -c ，不同版本的 -c 作用不一样，很坑 # -c Use the old portable (ASCII) archive format # -c Identical to "-H newc", use the new (SVR4) # portable format.If you wish the old portable # (ASCII) archive format, use "-H odc" instead. find . | cpio --quiet -o -H newc -R 0:0 | gzip -1 >/reinstall-initrd cd - >/dev/null } remove_useless_initrd_files() { info "slim initrd" # 显示精简前的大小 du -sh . # 删除 initrd 里面没用的文件/驱动 rm -rf bin/brltty rm -rf etc/brltty rm -rf sbin/wpa_supplicant rm -rf usr/lib/libasound.so.* rm -rf usr/share/alsa ( cd lib/modules/*/kernel/drivers/net/ethernet/ for item in *; do case "$item" in # 甲骨文 arm 用自定义镜像支持设为 mlx5 vf 网卡，且不是 azure 那样显示两个网卡 # https://debian.pkgs.org/13/debian-main-amd64/linux-image-6.12.43+deb13-cloud-amd64_6.12.43-1_amd64.deb.html amazon | google | mellanox | realtek | pensando) ;; intel) ( cd "$item" for sub_item in *; do case "$sub_item" in # 有 e100.ko e1000文件夹 e1000e文件夹 e100* | lib* | *vf | idpf) ;; *) rm -rf $sub_item ;; esac done ) ;; *) rm -rf $item ;; esac done ) ( # 甲骨文 arm64 是 usb 键盘 # cat /proc/bus/input/devices cd lib/modules/*/kernel for item in \ net/mac80211 \ net/wireless \ net/bluetooth \ drivers/mtd \ drivers/ssb \ drivers/mfd \ drivers/bcma \ drivers/pcmcia \ drivers/parport \ drivers/platform \ drivers/staging \ drivers/net/usb \ drivers/net/bonding \ drivers/net/wireless \ drivers/input/rmi4 \ drivers/input/touchscreen \ drivers/bus/mhi \ drivers/char/pcmcia \ drivers/misc/cardreader; do rm -rf $item done ) # 显示精简后的大小 du -sh . } get_unix_path() { if is_in_windows; then # 输入的路径是 / 开头也没问题 cygpath -u "$1" else printf '%s' "$1" fi } init_basearch() { # 设置 basearch if is_in_windows; then # x86-based PC # x64-based PC # ARM-based PC # ARM64-based PC # 三种方法都不需要管理员运行 if false; then # 如果机器没有 wmic 则需要下载 wmic.ps1，但此时未判断国内外，还是用国外源 basearch=$(wmic ComputerSystem get SystemType | grep '=' | cut -d= -f2 | cut -d- -f1) elif true; then basearch=$(reg query "HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\Environment" /v PROCESSOR_ARCHITECTURE | grep . | tail -1 | awk '{print $NF}') else # 也可以用 basearch=$(cmd /c "if defined PROCESSOR_ARCHITEW6432 (echo %PROCESSOR_ARCHITEW6432%) else (echo %PROCESSOR_ARCHITECTURE%)") fi else # archlinux 云镜像没有 arch 命令 # https://en.wikipedia.org/wiki/Uname basearch=$(uname -m) fi # 统一架构名称，并强制 64 位 case "$(echo $basearch | to_lower)" in i?86 | x64 | x86* | amd64) basearch=x86_64 basearch_alt=amd64 ;; arm* | aarch64) basearch=aarch64 basearch_alt=arm64 ;; *) error_and_exit "Unsupported arch: $basearch" ;; esac } init_confhome() { # 设置 confhome # 未测试 if false && [[ "$confhome" = http*://raw.githubusercontent.com/* ]]; then repo=$(echo $confhome | cut -d/ -f4,5) branch=$(echo $confhome | cut -d/ -f6) # 避免脚本更新时，文件不同步造成错误 if [ -z "$commit" ]; then commit=$(curl -L https://api.github.com/repos/$repo/git/refs/heads/$branch | grep '"sha"' | grep -Eo '[0-9a-f]{40}') fi # shellcheck disable=SC2001 confhome=$(echo "$confhome" | sed "s/main$/$commit/") fi # 设置国内代理 # 要在使用 wmic 前设置，否则国内机器会从国外源下载 wmic.ps1 # gitee 不支持ipv6 # jsdelivr 有12小时缓存 # https://github.com/XIU2/UserScript/blob/master/GithubEnhanced-High-Speed-Download.user.js#L31 if is_in_china; then if [ -n "$confhome_cn" ]; then confhome=$confhome_cn elif [ -n "$github_proxy" ] && [[ "$confhome" = http*://raw.githubusercontent.com/* ]]; then confhome=${confhome/http:\/\//https:\/\/} confhome=${confhome/https:\/\/raw.githubusercontent.com/$github_proxy} fi fi } remove_exist_reinstall_efi_dir() { info "remove exist reinstall efi dir" local dir='' dirs='' if is_in_windows; then dirs=$(get_efi_dir_in_windows) else dirs=$(get_maybe_efi_dirs_in_linux) fi # 后期可能会将 reinstall-vmlinuz 和 reinstall-initrd 放到 efi 分区下 # 因此也删除它们 for dir in $dirs; do rm -f "$dir/reinstall-vmlinuz" rm -f "$dir/reinstall-initrd" done find $dirs -type f \ \( -ipath '*/EFI/reinstall/grubx64.efi' \ -o -ipath '*/EFI/reinstall/grubaa64.efi' \ -o -ipath '*/EFI/reinstall/netboot.xyz.efi' \ -o -ipath '*/EFI/reinstall/netboot.xyz-arm64.efi' \) | while IFS= read -r efi_file; do reinstall_dir=$(dirname "$efi_file") echo "removing $reinstall_dir" rm -rf "$reinstall_dir" done } # linux windows # bios /boot/grub*/custom.cfg /cygdrive/c/grub/grub.cfg # efi efi分区的/EFI/reinstall/grub.cfg /cygdrive/c/grub.cfg # efi文件夹 efi分区的/EFI/reinstall/ /cygdrive/a/EFI/reinstall/ init_bootloader_facts() { if is_in_windows; then # windows if is_efi; then _grub_cfg=/cygdrive/$c/grub.cfg else _grub_cfg=/cygdrive/$c/grub/grub.cfg fi target_cfg=$_grub_cfg else # linux if is_efi; then efi_dir=$(get_maybe_efi_dirs_in_linux | head -1) _grub_cfg=$efi_dir/EFI/reinstall/grub.cfg target_cfg=$_grub_cfg else if is_mbr_using_grub; then if is_have_cmd update-grub; then # alpine debian ubuntu _grub_cfg=$(grep -o '[^ ]*grub.cfg' "$(get_cmd_path update-grub)" | head -1) else # 找出主配置文件（含有menuentry|blscfg） # 有没有可能在 efi 目录? _grub_cfg=$(find_grub_extlinux_cfg '/boot/grub*' grub.cfg 'menuentry|blscfg') fi target_cfg=$(dirname $_grub_cfg)/custom.cfg if is_have_cmd grub2-mkconfig; then grub=grub2 elif is_have_cmd grub-mkconfig; then grub=grub else error_and_exit "grub not found" fi else # extlinux _extlinux_cfg=$(find_grub_extlinux_cfg /boot extlinux.conf LINUX) target_cfg=$_extlinux_cfg fi fi fi } # 重新生成 grub.cfg # 因为有些机子例如hython debian的grub.cfg少了40_custom 41_custom 部分 recreate_grub_or_extlinux_cfg() { # 没用到原机的 grub 和 extlinux # 因此不需要重新生成 grub.cfg 或 extlinux.conf if is_efi || is_in_windows; then return fi if is_mbr_using_grub; then info "recreate grub.cfg" # nixos 手动执行 grub-mkconfig -o /boot/grub/grub.cfg 会丢失系统启动条目 # 正确的方法是修改 configuration.nix 的 boot.loader.grub.extraEntries # 但是修改 configuration.nix 不是很好，因此改成修改 grub.cfg if [ -x /nix/var/nix/profiles/system/bin/switch-to-configuration ]; then # 生成 grub.cfg /nix/var/nix/profiles/system/bin/switch-to-configuration boot # 手动启用 41_custom nixos_grub_home="$(dirname "$(readlink -f "$(get_cmd_path grub-mkconfig)")")/.." $nixos_grub_home/etc/grub.d/41_custom >>"$(dirname "$target_cfg")/grub.cfg" elif is_have_cmd update-grub; then update-grub else $grub-mkconfig -o $target_cfg fi elif is_have_cmd update-extlinux; then # alpine 才有 update-extlinux info "recreate extlinux.conf" update-extlinux else error_and_exit "unsupported bootloader." fi } # 删除之前的 reinstall 启动项 remove_exist_reinstall() { info "remove exist reinstall" rm -f /reinstall-vmlinuz /reinstall-initrd rm -f /boot/reinstall-vmlinuz /boot/reinstall-initrd if is_in_windows; then rm -f /cygdrive/$c/reinstall-vmlinuz /cygdrive/$c/reinstall-initrd fi # 使用外部 grub 时，删除外部 grub.cfg if ! is_use_local_grub_extlinux; then rm -f "$target_cfg" fi if is_in_windows; then if is_efi; then # efi remove_exist_reinstall_efi_dir bcdedit /set '{fwbootmgr}' bootsequence '{bootmgr}' bcdedit /enum bootmgr | grep -a -B3 'reinstall' | awk '{print $2}' | grep '{.*}' | xargs -I {} cmd /c bcdedit /delete {} else # bios id='{1c41f649-1637-52f1-aea8-f96bfebeecc8}' if bcdedit /enum all | grep -a "$id"; then bcdedit /delete "$id" fi fi else if is_efi; then # efi # 题外话 # 1. 如果用本机的 grub，则 custom.cfg 可能在 efi 分区，也可能在 /boot 分区 # 2. 有可能没有 /boot 文件夹 # 如果 nixos 的 efi 挂载到 /efi，则不会生成 /boot 文件夹 # 3. find 不存在的路径会报错 remove_exist_reinstall_efi_dir install_pkg efibootmgr efibootmgr | grep -q 'BootNext:' && efibootmgr --quiet --delete-bootnext efibootmgr | grep_efi_entry | grep 'reinstall' | grep_efi_index | xargs -I {} efibootmgr --quiet --bootnum {} --delete-bootnum else # bios # 删除 reinstall 条目 if [ -f "$target_cfg" ]; then sed -i "/^$BOOT_ENTEY_START_MARK/,/^$BOOT_ENTEY_END_MARK/d" "$target_cfg" fi # 清除 next entry if is_use_local_grub; then $grub-editenv - unset next_entry elif is_use_local_extlinux; then extlinux --clear-once "$(dirname "$target_cfg")" fi # 重新创建 grub.cfg / extlinux.conf recreate_grub_or_extlinux_cfg fi fi } reset_and_exit() { from_ctrl_c=${1:-false} # info if $from_ctrl_c; then info "Caught Ctrl+C, reseting..." fi # 清除 remove_exist_reinstall rm -rf "$tmp" echo "reset done." # 退出 if $from_ctrl_c; then exit 1 else exit 0 fi } # 脚本入口 # windows 环境下的额外初始化 if is_in_windows; then # win系统盘 c=$(echo $SYSTEMDRIVE | cut -c1) # 64位系统 + 32位cmd/cygwin，需要添加 PATH，否则找不到64位系统程序，例如bcdedit sysnative=$(cygpath -u $WINDIR\\Sysnative) if [ -d $sysnative ]; then PATH=$PATH:$sysnative fi # 更改 windows 命令输出语言为英文 # chcp 会清屏 mode.com con cp select=437 >/dev/null # 为 windows 程序输出删除 cr for exe in $WINDOWS_EXES; do # 如果我们覆写了 wmic()，则先将 wmic() 重命名为 _wmic() if get_function $exe >/dev/null 2>&1; then eval "_$(get_function $exe)" fi # 使用以下方法重新生成 wmic() # 调用链：wmic() -> run_with_del_cr(wmic) -> _wmic() -> command wmic eval "$exe(){ $(get_function_content run_with_del_cr_template | sed "s/\$exe/$exe/g") }" done fi # 检查 root if is_in_windows; then # 64位系统 + 32位cmd/cygwin，运行 openfiles 报错：目标系统必须运行 32 位的操作系统 if ! fltmc >/dev/null 2>&1; then error_and_exit "Please run as administrator." fi else if [ "$EUID" -ne 0 ]; then error_and_exit "Please run as root." fi fi # 不支持 Live OS 下运行 if mount | grep -q 'tmpfs on / type tmpfs'; then error_and_exit "Can't run this script in Live OS." fi # 不支持容器虚拟化 if is_in_container; then error_and_exit "Not Supported OS in Container.\nPlease use https://github.com/LloydAsp/OsMutation" fi # 不支持安全启动 if is_secure_boot_enabled; then error_and_exit "Please disable secure boot first." fi # 整理参数 long_opts= for o in ci installer debug minimal no-cloud-kernel no-auto-drivers allow-ping force-cn help \ no-lockout no-lockout-threshold \ add-driver: \ hold: sleep: \ iso: \ image-name: \ bit: \ boot-wim: \ img: \ cloud-data: \ lang: \ user: username: \ passwd: password: \ ssh-port: \ ssh-key: public-key: \ rdp-port: \ web-port: http-port: \ allow-ping: \ commit: \ frpc-conf: frpc-config: \ target-disk: \ force-boot-mode: \ force-old-windows-setup:; do [ -n "$long_opts" ] && long_opts+=, long_opts+=$o done # 使用 getopt 解析参数 if ! ORIGINAL_OPTS=$(getopt -n $0 -o "h,x" --long "$long_opts" -- "$@"); then exit 1 fi # 第一遍扫描，验证要安装的系统和版本 eval set -- "$ORIGINAL_OPTS" while true; do case "$1" in -x | --debug) set -x shift ;; --) shift verify_os_name "$@" break ;; *) shift ;; esac done # 初始化重要变量 # wmic 随时会用到 # wmic 需要下载 wmic.ps1，需要从 confhome 得到，要先将 confhome 改成国内 # 而 wmic.ps1 又放在 $tmp 目录，因此要先创建临时目录 # 处理 --frpc-config 时会下载文件，因此在处理参数前就创建临时目录 mkdir_clear "$tmp" init_basearch init_confhome init_bootloader_facts if [ "$distro" = reset ]; then reset_and_exit fi # 安装必备组件 install_pkg curl grep # 第二遍扫描，处理参数 eval set -- "$ORIGINAL_OPTS" # shellcheck disable=SC2034 while true; do case "$1" in -x | --debug) # 第一遍扫描已处理 shift ;; -h | --help) usage_and_exit ;; --commit) commit=$2 shift 2 ;; --ci) cloud_image=1 unset installer shift ;; --installer) installer=1 unset cloud_image shift ;; --minimal) minimal=1 shift ;; --no-cloud-kernel) no_cloud_kernel=1 shift ;; --no-auto-drivers) no_auto_drivers=1 shift ;; --no-lockout | --no-lockout-threshold) no_lockout_threshold=1 shift ;; --allow-ping) allow_ping=1 shift ;; --force-cn) # 仅为了方便测试 force_cn=1 shift ;; --hold | --sleep) if ! { [ "$2" = 0 ] || [ "$2" = 1 ] || [ "$2" = 2 ]; }; then error_and_exit "Invalid $1 value: $2" fi hold=$2 shift 2 ;; --frpc-conf | --frpc-config) [ -n "$2" ] || error_and_exit "Need value for $1" case "$(to_lower <<<"$2")" in http://* | https://*) frpc_config_url=$2 frpc_config=$tmp/frpc.conf # 用 file 识别文件类型？ if ! curl -L "$frpc_config_url" -o "$frpc_config"; then error_and_exit "Can't get frpc config from $frpc_config_url" fi ;; *) # windows 路径转换 if ! { frpc_config=$(get_unix_path "$2") && [ -f "$frpc_config" ]; }; then error_and_exit "File not exists: $2" fi ;; esac # 转为绝对路径 frpc_config=$(readlink -f "$frpc_config") shift 2 ;; --force-boot-mode) if ! { [ "$2" = bios ] || [ "$2" = efi ]; }; then error_and_exit "Invalid $1 value: $2" fi force_boot_mode=$2 shift 2 ;; --user | --username) [ -n "$2" ] || error_and_exit "Need value for $1" username="$(printf "%s" "$2" | trim)" assert_username_valid shift 2 ;; --passwd | --password) [ -n "$2" ] || error_and_exit "Need value for $1" password=$2 shift 2 ;; --ssh-key | --public-key) ssh_key_error_and_exit() { error "$1" cat <=1g # el7 aarch64 >=1.5g # el8/9/fedora 任何架构 >=2g if is_netboot_xyz || { ! is_use_cloud_image && { [ "$distro" = "alpine" ] || is_distro_like_debian || { is_distro_like_redhat && [ $releasever -eq 7 ] && [ $ram_size -ge 1024 ] && [ $basearch = "x86_64" ]; } || { is_distro_like_redhat && [ $releasever -eq 7 ] && [ $ram_size -ge 1536 ] && [ $basearch = "aarch64" ]; } || { is_distro_like_redhat && [ $releasever -ge 8 ] && [ $ram_size -ge 2048 ]; } }; }; then setos nextos $distro $releasever else # alpine 作为中间系统时，使用最新版 alpine_ver_for_trans=$(get_latest_distro_releasever alpine) setos finalos $distro $releasever setos nextos alpine $alpine_ver_for_trans fi # 有的机器开启了 kexec，例如腾讯云轻量 debian，要禁用 if [ -f /etc/default/kexec ]; then sed -i 's/LOAD_KEXEC=true/LOAD_KEXEC=false/' /etc/default/kexec fi # 一切就绪，正式下载内核和添加引导项 # 先删除之前的启动项，再设置 trap # 暂时不用 trap，因为 bat 下无效 remove_exist_reinstall # trap 'reset_and_exit true' SIGINT # 下载 netboot.xyz / 内核 # shellcheck disable=SC2154 if is_netboot_xyz; then if is_efi; then if is_in_windows; then add_efi_entry_in_windows $nextos_efi else add_efi_entry_in_linux $nextos_efi fi else curl -Lo /reinstall-vmlinuz $nextos_vmlinuz fi else # 下载 nextos 内核 info download vmlnuz and initrd curl -Lo /reinstall-vmlinuz $nextos_vmlinuz curl -Lo /reinstall-initrd $nextos_initrd if is_use_firmware; then curl -Lo /reinstall-firmware $nextos_firmware fi fi # 修改 alpine debian kali initrd if [ "$nextos_distro" = alpine ] || is_distro_like_debian "$nextos_distro"; then mod_initrd fi # web 路径 if is_need_web_viewer; then web_path="/$(tr -dc "A-Za-z0-9" $target_cfg get_function_content load_grubenv_if_not_loaded >>$target_cfg # 原系统为 openeuler 云镜像，需要添加 --unrestricted，否则要输入密码 del_empty_lines <>$target_cfg # 设置重启引导项 if is_use_local_grub; then $grub-reboot "$(get_entry_name)" fi fi fi info 'info' echo "$distro $releasever" ssh_port=${ssh_port:-22} rdp_port=${rdp_port:-3389} web_port=${web_port:-80} if [ "$distro" = netboot.xyz ]; then : elif [ "$distro" = alpine ] && [ "$hold" = 1 ]; then info "Alpine Live OS" echo "Username: $username" if [ -n "$ssh_keys" ]; then echo "Public Key: $ssh_keys" else echo "Password: $password" fi echo "SSH Port: $ssh_port" elif [ "$distro" = fnos ]; then echo "Username: $username (During installation only)" if [ -n "$ssh_keys" ]; then echo "Public Key: $ssh_keys (During installation only)" else echo "Password: $password (During installation only)" fi echo "SSH Port: $ssh_port (During installation only)" echo "WEB: $(get_http_log_url) (During installation only)" echo show_fnos_tips elif [ "$distro" = windows ]; then if is_administrator_username "$username"; then echo "Username: $username (Might vary on Windows, depends on system language)" else echo "Username: $username" fi echo "Password: $password" echo "RDP Port: $rdp_port" echo "SSH Port: $ssh_port (During installation only)" echo "WEB: $(get_http_log_url) (During installation only)" elif [ "$distro" = dd ]; then echo "Username: $username (During installation only)" if [ -n "$ssh_keys" ]; then echo "Public Key: $ssh_keys (During installation only)" else echo "Password: $password (During installation only)" fi echo "SSH Port: $ssh_port (During installation only)" echo "WEB: $(get_http_log_url) (During installation only)" if [ -n "$cloud_data" ]; then echo "Cloud Data: $cloud_data" echo "Cloud Data Files: $cloud_data_files" else echo show_dd_tips fi else # 普通 linux echo "Username: $username" if [ -n "$ssh_keys" ]; then echo "Public Key: $ssh_keys" else echo "Password: $password" fi echo "SSH Port: $ssh_port" echo "WEB: $(get_http_log_url) (During installation only)" fi if is_in_windows; then echo echo 'You can run this command to reboot:' echo 'shutdown /r /t 0' fi echo if [ "$distro" = netboot.xyz ]; then warn false '********** 警告 Warning **********' warn false '重启后会进入 netboot.xyz。' warn false "如果要取消进入，请在重启前运行 \"$reinstall_____ reset\"。" warn false warn false 'Reboot will start netboot.xyz.' warn false "If you want to cancel entering, run \"$reinstall_____ reset\" before reboot." warn false '**********************************' elif [ "$distro" = alpine ] && [ "$hold" = 1 ]; then warn false '********** 警告 Warning **********' warn false '重启后会进入 Alpine Live OS。' warn false "如果要取消进入，请在重启前运行 \"$reinstall_____ reset\"。" warn false warn false 'Reboot will start Alpine Live OS.' warn false "If you want to cancel entering, run \"$reinstall_____ reset\" before reboot." warn false '**********************************' elif [ "$hold" = 1 ]; then warn false '********** 警告 Warning **********' warn false '重启后会进入安装环境，不会自动重装。' warn false "如果要取消进入，请在重启前运行 \"$reinstall_____ reset\"。" warn false warn false 'Reboot will start the installation environment, will not automatically reinstall.' warn false "If you want to cancel entering, run \"$reinstall_____ reset\" before reboot." warn false '**********************************' else warn false '********** 警告 Warning **********' warn false '重启后会自动开始重装。' warn false '这将清除主硬盘的所有数据，包括所有分区！！！' warn false "如果要取消重装，请在重启前运行 \"$reinstall_____ reset\"。" warn false warn false 'Reboot will start the automatic reinstallation.' warn false 'THIS WILL ERASE ALL DATA ON THE MAIN DISK, INCLUDING ALL PARTITIONS!!!' warn false "If you want to cancel the reinstallation, run \"$reinstall_____ reset\" before reboot." warn false '**********************************' fi echo