#!/usr/bin/env sh # shellcheck shell=bash # shellcheck disable=SC2086 # nixos 默认的配置不会生成 /bin/bash，因此需要用 /usr/bin/env # alpine 默认没有 bash，因此 shebang 用 sh，再 exec 切换到 bash set -eE confhome=https://raw.githubusercontent.com/bin456789/reinstall/main confhome_cn=https://p.52mp.wang/5 # confhome_cn=https://p.52mp.wang/5 # 用于判断 reinstall.sh 和 trans.sh 是否兼容 SCRIPT_VERSION=4BACD833-A585-23BA-6CBB-9AA4E08E0004 # 记录要用到的 windows 程序，运行时输出删除 \r WINDOWS_EXES='cmd powershell wmic reg diskpart netsh bcdedit mountvol' BOOT_ENTEY_START_MARK='### BEGIN reinstall.sh ###' BOOT_ENTEY_END_MARK='### END reinstall.sh ###' # 临时目录 # 不用 /tmp，因为 /tmp 挂载在内存的话，可能不够空间 tmp=/reinstall-tmp # 强制 linux 程序输出英文，防止 grep 不到想要的内容 # https://www.gnu.org/software/gettext/manual/html_node/The-LANGUAGE-variable.html export LC_ALL=C # 处理部分用户用 su 切换成 root 导致环境变量没 sbin 目录 # 也能处理 cygwin bash 没有添加 -l 运行 reinstall.sh # 不要漏了最后的 $PATH，否则会找不到 windows 系统程序例如 diskpart export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH # 如果不是 bash 的话，继续执行会有语法错误，因此在这里判断是否 bash if [ -z "$BASH" ] || # el 的 sh 是 bash 运行在 posix 模式，依然有 $BASH 和 $BASH_VERSION { [ -n "$BASH" ] && [ -n "$POSIXLY_CORRECT" ]; }; then if ! command -v bash >/dev/null; then if [ -f /etc/alpine-release ]; then if ! apk add bash; then echo "Error while install bash." >&2 exit 1 fi else echo "Please run this script with bash." >&2 exit 1 fi fi exec bash "$0" "$@" fi # 好像跟 trap SIGINT 有冲突 # 记录日志，过滤含有 password 的行 # exec > >(tee >(grep -iv password >>/reinstall.log)) 2>&1 THIS_SCRIPT=$(readlink -f "$0") trap 'trap_err $LINENO $?' ERR trap_err() { line_no=$1 ret_no=$2 error "Line $line_no return $ret_no" sed -n "$line_no"p "$THIS_SCRIPT" } is_in_windows() { [ "$(uname -o)" = Cygwin ] || [ "$(uname -o)" = Msys ] } if is_in_windows; then reinstall_____='.\reinstall.bat' else reinstall_____='sh reinstall.sh' fi usage_and_exit() { cat <&2 } warn() { local msg if [ "$1" = false ]; then shift msg=$* else msg="Warning: $*" fi echo_color_text '\e[33m' "$msg" >&2 } error() { echo_color_text '\e[31m' "***** ERROR *****" >&2 echo_color_text '\e[31m' "$*" >&2 } echo_color_text() { color="$1" shift plain="\e[0m" echo -e "$color$*$plain" } error_and_exit() { error "$@" exit 1 } show_dd_password_tips() { warn false " This password is only used for SSH access to view logs during the installation. Password of the image will NOT modify. 密码仅用于安装过程中通过 SSH 查看日志。 镜像的密码不会被修改。 " } show_url_in_args() { while [ $# -gt 0 ]; do case "$1" in [Hh][Tt][Tt][Pp][Ss]://* | [Hh][Tt][Tt][Pp]://* | [Mm][Aa][Gg][Nn][Ee][Tt]:*) echo "$1" ;; esac shift done } curl() { is_have_cmd curl || install_pkg curl # 显示 url show_url_in_args "$@" >&2 # 添加 -f, --fail，不然 404 退出码也为0 # 32位 cygwin 已停止更新，证书可能有问题，先添加 --insecure # centos 7 curl 不支持 --retry-connrefused --retry-all-errors # 因此手动 retry for i in $(seq 5); do if command curl --insecure --connect-timeout 10 -f "$@"; then return else ret=$? # 403 404 错误，或者达到重试次数 if [ $ret -eq 22 ] || [ $i -eq 5 ]; then return $ret fi sleep 1 fi done } mask2cidr() { local x=${1##*255.} set -- 0^^^128^192^224^240^248^252^254^ $(((${#1} - ${#x}) * 2)) ${x%%.*} x=${1%%"$3"*} echo $(($2 + (${#x} / 4))) } is_in_china() { [ "$force_cn" = 1 ] && return 0 if [ -z "$_loc" ]; then # www.cloudflare.com/dash.cloudflare.com 国内访问的是美国服务器，而且部分地区被墙 # 没有ipv6 www.visa.cn # 没有ipv6 www.bose.cn # 没有ipv6 www.garmin.com.cn # 备用 www.prologis.cn # 备用 www.autodesk.com.cn # 备用 www.keysight.com.cn if ! _loc=$(curl -L http://www.qualcomm.cn/cdn-cgi/trace | grep '^loc=' | cut -d= -f2 | grep .); then error_and_exit "Can not get location." fi echo "Location: $_loc" >&2 fi [ "$_loc" = CN ] } is_in_windows() { [ "$(uname -o)" = Cygwin ] || [ "$(uname -o)" = Msys ] } is_in_alpine() { [ -f /etc/alpine-release ] } is_use_cloud_image() { [ -n "$cloud_image" ] && [ "$cloud_image" = 1 ] } is_force_use_installer() { [ -n "$installer" ] && [ "$installer" = 1 ] } is_use_dd() { [ "$distro" = dd ] } is_boot_in_separate_partition() { mount | grep -q ' on /boot type ' } is_os_in_btrfs() { mount | grep -q ' on / type btrfs ' } is_os_in_subvol() { subvol=$(awk '($2=="/") { print $i }' /proc/mounts | grep -o 'subvol=[^ ]*' | cut -d= -f2) [ "$subvol" != / ] } get_os_part() { awk '($2=="/") { print $1 }' /proc/mounts } umount_all() { # windows defender 打开时，cygwin 运行 mount 很慢，但 cat /proc/mounts 很快 if mount_lists=$(mount | grep -w "on $1" | awk '{print $3}' | grep .); then # alpine 没有 -R if umount --help 2>&1 | grep -wq -- '-R'; then umount -R "$1" else echo "$mount_lists" | tac | xargs -n1 umount fi fi } cp_to_btrfs_root() { mount_dir=$tmp/reinstall-btrfs-root if ! grep -q $mount_dir /proc/mounts; then mkdir -p $mount_dir mount "$(get_os_part)" $mount_dir -t btrfs -o subvol=/ fi cp -rf "$@" "$mount_dir" } is_host_has_ipv4_and_ipv6() { host=$1 install_pkg dig # dig会显示cname结果，cname结果以.结尾，grep -v '\.$' 用于去除 cname 结果 res=$(dig +short $host A $host AAAA | grep -v '\.$') # 有.表示有ipv4地址，有:表示有ipv6地址 grep -q \. <<<$res && grep -q : <<<$res } is_netboot_xyz() { [ "$distro" = netboot.xyz ] } is_alpine_live() { [ "$distro" = alpine ] && [ "$hold" = 1 ] } is_have_initrd() { ! is_netboot_xyz } is_use_firmware() { # shellcheck disable=SC2154 [ "$nextos_distro" = debian ] && ! is_virt } is_digit() { [[ "$1" =~ ^[0-9]+$ ]] } is_port_valid() { is_digit "$1" && [ "$1" -ge 1 ] && [ "$1" -le 65535 ] } get_host_by_url() { cut -d/ -f3 <<<$1 } get_scheme_and_host_by_url() { cut -d/ -f1-3 <<<$1 } get_function() { declare -f "$1" } get_function_content() { declare -f "$1" | sed '1d;2d;$d' } insert_into_file() { local file=$1 local location=$2 local regex_to_find=$3 shift 3 if ! [ -f "$file" ]; then error_and_exit "File not found: $file" fi # 默认 grep -E if [ $# -eq 0 ]; then set -- -E fi line_num=$(grep "$@" -n "$regex_to_find" "$file" | cut -d: -f1) found_count=$(echo "$line_num" | wc -l) if [ ! "$found_count" -eq 1 ]; then return 1 fi case "$location" in before) line_num=$((line_num - 1)) ;; after) ;; *) return 1 ;; esac sed -i "${line_num}r /dev/stdin" "$file" } test_url() { test_url_real false "$@" } test_url_grace() { test_url_real true "$@" } test_url_real() { grace=$1 url=$2 expect_types=$3 var_to_eval=$4 info test url failed() { $grace && return 1 error_and_exit "$@" } tmp_file=$tmp/img-test # TODO: 好像无法识别 nixos 官方源的跳转 # 有的服务器不支持 range，curl会下载整个文件 # 所以用 head 限制 1M # 过滤 curl 23 错误（head 限制了大小） # 也可用 ulimit -f 但好像 cygwin 不支持 # ${PIPESTATUS[n]} 表示第n个管道的返回值 echo $url for i in $(seq 5 -1 0); do if command curl --insecure --connect-timeout 10 -Lfr 0-1048575 "$url" \ 1> >(exec head -c 1048576 >$tmp_file) \ 2> >(exec grep -v 'curl: (23)' >&2); then break else ret=$? msg="$url not accessible" case $ret in 22) # 403 404 # 这里的 failed 虽然返回 1，但是不会中断脚本，因此要手动 return failed "$msg" return "$ret" ;; 23) # 限制了空间 break ;; *) # 其他错误 if [ $i -eq 0 ]; then failed "$msg" return "$ret" fi ;; esac sleep 1 fi done # 如果要检查文件类型 if [ -n "$expect_types" ]; then install_pkg file real_type=$(file_enhanced $tmp_file) echo "File type: $real_type" # debian 9 ubuntu 16.04-20.04 可能会将 iso 识别成 raw for type in $expect_types $([ "$expect_types" = iso ] && echo raw); do if [[ ."$real_type" = *."$type" ]]; then # 如果要设置变量 if [ -n "$var_to_eval" ]; then IFS=. read -r "${var_to_eval?}" "${var_to_eval}_warp" <<<"$real_type" fi return fi done failed "$url Expected type: $expect_types Actually type: $real_type" fi } fix_file_type() { # gzip的mime有很多种写法 # centos7中显示为 x-gzip，在其他系统中显示为 gzip，可能还有其他 # 所以不用mime判断 # https://www.digipres.org/formats/sources/tika/formats/#application/gzip # centos 7 上的 file 显示 qcow2 的 mime 为 application/octet-stream # file debian-12-genericcloud-amd64.qcow2 # debian-12-genericcloud-amd64.qcow2: QEMU QCOW Image (v3), 2147483648 bytes # file --mime debian-12-genericcloud-amd64.qcow2 # debian-12-genericcloud-amd64.qcow2: application/octet-stream; charset=binary # --extension 不靠谱 # file -b /reinstall-tmp/img-test --mime-type # application/x-qemu-disk # file -b /reinstall-tmp/img-test --extension # ??? # 1. 删除,;# # DOS/MBR boot sector; partition 1: ... # gzip compressed data, was ... # # ISO 9660 CD-ROM filesystem data... (有些 file 版本开头输出有井号) # 2. 删除开头的空格 # 3. 删除无意义的单词 POSIX, Unicode, UTF-8, ASCII # POSIX tar archive (GNU) # Unicode text, UTF-8 text # UTF-8 Unicode text, with very long lines # ASCII text # 4. 下面两种都是 raw # DOS/MBR boot sector # x86 boot sector; partition 1: ... sed -E \ -e 's/[,;#]//g' \ -e 's/^[[:space:]]*//' \ -e 's/(POSIX|Unicode|UTF-8|ASCII)//gi' \ -e 's/^DOS\/MBR boot sector/raw/i' \ -e 's/^x86 boot sector/raw/i' \ -e 's/^Zstandard/zstd/i' \ -e 's/^UDF/iso/i' \ -e 's/^Windows imaging \(WIM\) image/wim/i' | awk '{print $1}' | to_lower } # 不用 file -z，因为 # 1. file -z 只能看透一层 # 2. alpine file -z 无法看透部分镜像（前1M），例如： # guajibao-win10-ent-ltsc-2021-x64-cn-efi.vhd.gz # guajibao-win7-sp1-ent-x64-cn-efi.vhd.gz # win7-ent-sp1-x64-cn-efi.vhd.gz # 还要注意 centos 7 没有 -Z 只有 -z file_enhanced() { file=$1 full_type= while true; do type="$(file -b $file | fix_file_type)" full_type="$type.$full_type" case "$type" in xz | gzip | zstd) install_pkg "$type" $type -dc <"$file" | head -c 1048576 >"$file.inside" mv -f "$file.inside" "$file" ;; tar) install_pkg "$type" # 隐藏 gzip: unexpected end of file 提醒 tar xf "$file" -O 2>/dev/null | head -c 1048576 >"$file.inside" mv -f "$file.inside" "$file" ;; *) break ;; esac done # shellcheck disable=SC2001 echo "$full_type" | sed 's/\.$//' } # trans.sh 有相同方法 add_community_repo_for_alpine() { local ver mirror # 先检查原来的 repo 是不是 edge 或者 latest-stable if grep -q "^http.*/edge/main$" /etc/apk/repositories; then ver=edge elif grep -q "^http.*/latest-stable/main$" /etc/apk/repositories; then ver=latest-stable else ver=v$(cut -d. -f1,2 >/etc/apk/repositories fi } is_in_container() { { is_have_cmd systemd-detect-virt && systemd-detect-virt -qc; } || [ -d /proc/vz ] || { [ -f /proc/1/environ ] && grep -q container=lxc /proc/1/environ; } } # 使用 | del_br ，但返回 del_br 之前返回值 run_with_del_cr() { if false; then # ash 不支持 PIPESTATUS[n] res=$("$@") && ret=0 || ret=$? echo "$res" | del_cr return $ret else "$@" | del_cr return ${PIPESTATUS[0]} fi } run_with_del_cr_template() { if get_function _$exe >/dev/null; then run_with_del_cr _$exe "$@" else run_with_del_cr command $exe "$@" fi } wmic() { if is_have_cmd wmic; then # 如果参数没有 GET，添加 GET，防止以下报错 # wmic memorychip /format:list # 此级别的开关异常。 has_get=false for i in "$@"; do # 如果参数有 GET if [ "$(to_upper <<<"$i")" = GET ]; then has_get=true break fi done # 输出为 /format:list 格式 if $has_get; then command wmic "$@" /format:list else command wmic "$@" get /format:list fi return fi # powershell wmi 默认参数 local namespace='root\cimv2' local class= local filter= local props= # namespace if [[ "$(to_upper <<<"$1")" = /NAMESPACE* ]]; then # 删除引号，删除 \\ namespace=$(cut -d: -f2 <<<"$1" | sed -e "s/[\"']//g" -e 's/\\\\//g') shift fi # class if [[ "$(to_upper <<<"$1")" = PATH ]]; then class=$2 shift 2 else # wmic alias list brief case "$(to_lower <<<"$1")" in nicconfig) class=Win32_NetworkAdapterConfiguration ;; memorychip) class=Win32_PhysicalMemory ;; *) class=Win32_$1 ;; esac shift fi # filter if [[ "$(to_upper <<<"$1")" = WHERE ]]; then filter=$2 shift 2 fi # props if [[ "$(to_upper <<<"$1")" = GET ]]; then props=$2 shift 2 fi if ! [ -f "$tmp/wmic.ps1" ]; then curl -Lo "$tmp/wmic.ps1" "$confhome/wmic.ps1" fi powershell -NoLogo -NoProfile -NonInteractive -ExecutionPolicy Bypass \ -File "$(cygpath -w "$tmp/wmic.ps1")" \ -Namespace "$namespace" \ -Class "$class" \ ${filter:+"-Filter"} ${filter:+"$filter"} \ ${props:+"-Properties"} ${props:+"$props"} } is_virt() { if [ -z "$_is_virt" ]; then if is_in_windows; then # https://github.com/systemd/systemd/blob/main/src/basic/virt.c # https://sources.debian.org/src/hw-detect/1.159/hw-detect.finish-install.d/08hw-detect/ vmstr='VMware|Virtual|Virtualization|VirtualBox|VMW|Hyper-V|Bochs|QEMU|KVM|OpenStack|KubeVirt|innotek|Xen|Parallels|BHYVE' for name in ComputerSystem BIOS BaseBoard; do if wmic $name | grep -Eiw $vmstr; then _is_virt=true break fi done # 用运行 windows ，肯定够内存运行 alpine lts netboot # 何况还能停止 modloop # 没有风扇和温度信息，大概是虚拟机 # 阿里云 倚天710 arm 有温度传感器 # ovh KS-LE-3 没有风扇和温度信息？ if false && [ -z "$_is_virt" ] && ! wmic /namespace:'\\root\cimv2' PATH Win32_Fan 2>/dev/null | grep -q ^Name && ! wmic /namespace:'\\root\wmi' PATH MSAcpi_ThermalZoneTemperature 2>/dev/null | grep -q ^Name; then _is_virt=true fi else # aws t4g debian 11 # systemd-detect-virt: 为 none，即使装了dmidecode # virt-what: 未装 deidecode时结果为空，装了deidecode后结果为aws # 所以综合两个命令的结果来判断 if is_have_cmd systemd-detect-virt && systemd-detect-virt -v; then _is_virt=true fi if [ -z "$_is_virt" ]; then # debian 安装 virt-what 不会自动安装 dmidecode，因此结果有误 install_pkg dmidecode virt-what # virt-what 返回值始终是0，所以用是否有输出作为判断 if [ -n "$(virt-what)" ]; then _is_virt=true fi fi fi if [ -z "$_is_virt" ]; then _is_virt=false fi echo "VM: $_is_virt" fi $_is_virt } is_cpu_supports_x86_64_v3() { # 用 ld.so/cpuid/coreinfo.exe 更准确 # centos 7 /usr/lib64/ld-linux-x86-64.so.2 没有 --help # alpine gcompat /lib/ld-linux-x86-64.so.2 没有 --help # https://en.wikipedia.org/wiki/X86-64#Microarchitecture_levels # https://learn.microsoft.com/sysinternals/downloads/coreinfo # abm = popcnt + lzcnt # /proc/cpuinfo 不显示 lzcnt, 可用 abm 代替，但 cygwin 也不显示 abm # /proc/cpuinfo 不显示 osxsave, 故用 xsave 代替 need_flags="avx avx2 bmi1 bmi2 f16c fma movbe xsave" had_flags=$(grep -m 1 ^flags /proc/cpuinfo | awk -F': ' '{print $2}') for flag in $need_flags; do if ! grep -qw $flag <<<"$had_flags"; then return 1 fi done } assert_cpu_supports_x86_64_v3() { if ! is_cpu_supports_x86_64_v3; then error_and_exit "Could not install $distro $releasever because the CPU does not support x86-64-v3." fi } # 判断语言字符是否合法，允许全名和缩写 is_valid_lang_chars() { [[ "$1" =~ ^[A-Za-z_-]+$ ]] } lang_convert() { local out_format=$1 local in=$lang if ! is_valid_lang_chars "$in"; then return fi # 如果是 fallback_ 开头的，先得到 fallback 后的 cc-cc if [[ "$out_format" = fallback_* ]]; then in=$(lang_convert_inner "$in" fallback_cc-cc) # 如果要输出 fallback_cc-cc ，直接输出 if [ "$out_format" = fallback_cc-cc ]; then printf '%s' "$in" return fi # 去除 fallback_ 前缀 out_format=${out_format#fallback_} fi # 尝试转换成目标格式 local out out=$(lang_convert_inner "$in" "$out_format") # 如果转换成功，则表示输入的语言在列表里面 if [ -n "$out" ]; then printf '%s' "$out" else # 如果没有，则手动截取 case "$out_format" in cc) cut -d- -f1 <<<"$in" ;; cc-cc) cut -d- -f1-2 <<<"$in" ;; cc-cc-cc) cut -d- -f1-3 <<<"$in" ;; esac fi } lang_convert_inner() { local in=$1 local out_format=$2 if ! is_valid_lang_chars "$in"; then return fi # 可能得到 / ，用 is_valid_lang_chars 过滤掉 local out if out=$( lang_map_with_head | sed 1d | to_lower | awk \ -v val="$in" \ -v c1="$(get_col_number cc)" \ -v c2="$(get_col_number cc-cc)" \ -v c3="$(get_col_number cc-cc-cc)" \ -v c4="$(get_col_number full_language)" \ -v cout="$(get_col_number "$out_format")" \ '$c1 == val || $c2 == val || $c3 == val || $c4 == val { print $cout }' ) && is_valid_lang_chars "$out"; then printf '%s' "$out" fi } get_col_number() { local col_name=$1 # 找出第一行，用 xargs -n 1 转成列，然后用 grep 找到行号，再用 cut 取出行号 lang_map_with_head | head -1 | xargs -n 1 | grep -Fxn "$col_name" | cut -d: -f1 } lang_map_with_head() { # 没有 gb mx 开头的镜像，列出它们作用是，用户输入时识别成 en-gb es-mx # ca 并非对应 fr-ca # pt 对应 pt-br，而不是 pt-pt # uk 对应乌克兰语而不是英国，如果用户输入 uk ，要识别成乌克兰 # 第 5 列是可回落的语言 cat <,\n,g' | # 使每个 占一行 grep -Ei '\.(iso|img)$' | # 找出是 iso 或 img 的行 sed -E 's,(.+),\2 \1,' # 提取文件名和链接 else sed -e 's,,\n,g' -e 's,,\n,g' | # 使每个镜像占一行 grep -Ei '\.(iso|img)' | # 找出是 iso 或 img 的行 sed -E 's,([^<]+).+$tmp/win.list get_windows_iso_link_inner fi } get_shortest_line() { awk '(NR == 1 || length($0) < length(shortest)) { shortest = $0 } END { print shortest }' } get_shortest_line_by_field() { local field=$1 awk "(NR == 1 || length(\$$field) < length(field)) { line = \$0; field = \$$field } END { print line }" } get_best_windows_iso_line() { local lines lines=$(cat) # 在所有符合的 iso 中 # 先选择 win10/11 大版本更新的 (version 26h1) 或者有 sp 版本的 (sp1, windows_8.1_with_update_) # 再选择有日期更新的 (updated_july_2026) # 再选择 vl # 再按版本号排序选择最新版 # 但是也有例外 # zh-cn_windows_server_2019_x64_dvd_19d65722.iso 2022-11-15 # cn_windows_server_2019_updated_april_2021_x64_dvd_a6dae187.iso 2021-04-20 for key in '(version|sp[0-9]|update)' 'updated' 'vl'; do if grep_lines=$(grep -E "_${key}_" <<<"$lines"); then lines=$grep_lines fi done echo "$lines" | sort -Vr | head -1 } get_windows_iso_link_inner() { regexs=() # msdn if [ -n "$label_msdn" ]; then if [ "$label_msdn" = _ ]; then label_msdn= fi for lang in $langs; do # en_windows_vista_sp2_x64_dvd_342267.iso # cn_windows_vista_with_sp2_x64_dvd_x15-36322.iso # en_windows_8_x64_dvd_915440.iso # en_windows_8.1_pro_vl_with_update_x64_dvd_6050880.iso # en_windows_8.1_with_update_x64_dvd_6051480.iso # en_windows_8.1_n_with_update_x64_dvd_6051677.iso # en-us_windows_10_iot_enterprise_version_22h2_arm64_dvd_39566b6b.iso # en-us_windows_11_consumer_editions_version_26h1_updated_july_2026_x64_dvd_f69a9a1e.iso # en-us_windows_server_2025_updated_july_2026_x64_dvd_4e6f5a42.iso local prefix= for i in ${lang} windows ${server} ${version} ${label_msdn}; do if [ -n "$i" ]; then prefix+="${i}_" fi done # 用于准确匹配，例如防止 2012 匹配到 2012 r2 # 首先匹配 label 后面紧接着这些关键字的 # 然后匹配 label 后面紧接着 x64/arm64 的 # 最后模糊匹配 regexs+=("${prefix}(version|vl|with|updated|sp[0-9])_.*${arch_win}.*\.(iso|img)") regexs+=("${prefix}${arch_win}.*\.(iso|img)") regexs+=("${prefix}.*${arch_win}.*\.(iso|img)") done fi # vlsc # SW_DVD5_Win_10_IOT_Enterprise_2015_LTSB_64Bit_EMB_English_OEM_X20-20063.IMG # SW_DVD9_Win_Pro_10_22H2.15_Arm64_English_Pro_Ent_EDU_N_MLF_X23-67223.ISO # SWDVD9_WinSrvSTDCORE2025_24H2.16_64Bit_English_DC_STD_MLF_RTMUpdJan26_X24-26760.iso # 先判断 full_lang 是否为空 # 因为假如用户输入的 lang 不正确，full_lang 就为空，正则表达式就无法只匹配当前语言 for full_lang in $full_langs; do if [ -n "$label_vlsc" ] && [ -n "$full_lang" ]; then regexs+=("sw_?dvd[59]_win_?${label_vlsc}_?${version}_.*${arch_win_vlsc}.*_${full_lang}.*.(iso|img)") regexs+=("sw_?dvd[59]_win_?${version}_${label_vlsc}_?.*${arch_win_vlsc}.*_${full_lang}.*.(iso|img)") # LTSC 没有 windows 主版本号 # SW_DVD5_WIN_ENT_LTSB_10_2015_64BIT_Arabic_MLF_X20-26578.ISO # 将 ENT_LTSB_10_2015 视为 label # SW_DVD5_WIN_ENT_LTSB_2016_64BIT_Arabic_MLF_X21-07425.ISO # 将 ENT_LTSB_2016 视为 label if is_ltsc; then regexs+=("sw_?dvd[59]_win_?${label_vlsc}_?.*${arch_win_vlsc}.*_${full_lang}.*.(iso|img)") fi fi done # 查找 for regex in "${regexs[@]}"; do regex=${regex// /_} echo "looking for: $regex" >&2 local matched_lines if matched_lines=$(grep -Ei "^$regex " "$tmp/win.list"); then info "ISO Matched" cat -n <<<"$matched_lines" >&2 if line=$(echo "$matched_lines" | get_best_windows_iso_line | grep .) && iso=$(awk '{print $2}' <<<"$line" | grep .); then info "ISO Selected" echo " $line" >&2 return fi fi done error_and_exit "Could not find iso for this windows edition or language." } set_var() { # eval 不安全 # 仅 bash 可用 printf -v "$1" "%s" "$2" # 或者 # IFS= read -r "$1" <<<"$2" } setos() { local step=$1 local distro=$2 local releasever=$3 info set $step $distro $releasever set_osvar() { set_var "${step}_$1" "$2" } setos_netboot.xyz() { if is_efi; then if [ "$basearch" = aarch64 ]; then set_osvar efi https://boot.netboot.xyz/ipxe/netboot.xyz-arm64.efi else set_osvar efi https://boot.netboot.xyz/ipxe/netboot.xyz.efi fi else set_osvar vmlinuz https://boot.netboot.xyz/ipxe/netboot.xyz.lkrn fi } setos_alpine() { is_virt && flavour=virt || flavour=lts # 不要用https 因为甲骨文云arm initramfs阶段不会从硬件同步时钟，导致访问https出错 if is_in_china; then mirror=http://mirror.nju.edu.cn/alpine/v$releasever else mirror=http://dl-cdn.alpinelinux.org/alpine/v$releasever fi set_osvar vmlinuz "$mirror/releases/$basearch/netboot/vmlinuz-$flavour" set_osvar initrd "$mirror/releases/$basearch/netboot/initramfs-$flavour" set_osvar modloop "$mirror/releases/$basearch/netboot/modloop-$flavour" set_osvar repo "$mirror/main" } setos_debian() { is_debian_elts() { [ "$releasever" -le 10 ] } if [ "$releasever" -le 9 ] && [ "$basearch" = aarch64 ]; then error_and_exit "Debian $releasever ELTS does not support aarch64." fi # 用此标记要是否 elts, 用于安装后修改 elts/etls-cn 源 # shellcheck disable=SC2034 is_debian_elts && elts=1 || elts=0 case "$releasever" in 9) codename=stretch ;; 10) codename=buster ;; 11) codename=bullseye ;; 12) codename=bookworm ;; 13) codename=trixie ;; 14) codename=forky ;; 15) codename=duke ;; esac if ! is_use_cloud_image && is_debian_elts && is_in_china; then warn " Due to the lack of Debian Freexian ELTS instaler mirrors in China, the installation time may be longer. Continue? 由于没有 Debian Freexian ELTS 国内安装源，安装时间可能会比较长。 继续安装? " read -r -p '[y/N]: ' if ! [[ "$REPLY" = [Yy] ]]; then exit fi fi # udeb_mirror 安装时的源 # deb_mirror 安装后要修改成的源 if is_debian_elts; then if is_in_china; then # https://github.com/tuna/issues/issues/1999 # nju 也没同步 udeb_mirror=deb.freexian.com/extended-lts deb_mirror=mirror.nju.edu.cn/debian-elts initrd_mirror=mirror.nju.edu.cn/debian-archive/debian else # 按道理不应该用官方源，但找不到其他源 udeb_mirror=deb.freexian.com/extended-lts deb_mirror=deb.freexian.com/extended-lts initrd_mirror=archive.debian.org/debian fi else if is_in_china; then # ftp.cn.debian.org 不在国内还严重丢包 # https://www.itdog.cn/ping/ftp.cn.debian.org mirror=mirror.nju.edu.cn/debian else mirror=deb.debian.org/debian # fastly fi udeb_mirror=$mirror deb_mirror=$mirror initrd_mirror=$mirror fi # 云镜像和 firmware 下载源 if is_in_china; then cdimage_mirror=https://mirror.nju.edu.cn/debian-cdimage else cdimage_mirror=https://cdimage.debian.org/images # 在瑞典，不是 cdn # cloud.debian.org 同样在瑞典，不是 cdn fi is_virt && flavour=-cloud || flavour= # debian 10 云内核 vultr efi vnc 没有显示 [ "$releasever" -le 10 ] && flavour= # 甲骨文 arm64 cloud 内核 vnc 没有显示 [ "$basearch_alt" = arm64 ] && flavour= if is_use_cloud_image; then # cloud image # https://salsa.debian.org/cloud-team/debian-cloud-images/-/tree/master/config_space/bookworm/files/etc/default/grub.d # cloud 包括各种奇怪的优化，例如不显示 grub 菜单 # 因此使用 nocloud if false; then is_virt && ci_type=genericcloud || ci_type=generic else ci_type=nocloud fi set_osvar img "$cdimage_mirror/cloud/$codename/latest/debian-$releasever-$ci_type-$basearch_alt.qcow2" else # 传统安装 initrd_dir=dists/$codename/main/installer-$basearch_alt/current/images/netboot/debian-installer/$basearch_alt set_osvar udeb_mirror "$udeb_mirror" set_osvar vmlinuz "https://$initrd_mirror/$initrd_dir/linux" set_osvar initrd "https://$initrd_mirror/$initrd_dir/initrd.gz" set_osvar ks "$confhome/debian.cfg" set_osvar firmware "$cdimage_mirror/unofficial/non-free/firmware/$codename/current/firmware.cpio.gz" set_osvar codename "$codename" fi # 官方安装和云镜像都会用到的 set_osvar deb_mirror "$deb_mirror" set_osvar kernel "linux-image$flavour-$basearch_alt" } setos_kali() { if is_use_cloud_image; then : else # 传统安装 if is_in_china; then hostname=mirror.nju.edu.cn else # http.kali.org (geoip 重定向) 到 kali.download (cf) 或最近的站点 # 文档还说 which is guaranteed to be up-to-date # 但是目测有可能重定义到一个拉黑了部分 IP 的服务器 # 因此这里用 kali.download (cf) # https://www.kali.org/docs/community/kali-linux-mirrors/ # https://www.kali.org/docs/general-use/kali-apt-sources/ hostname=kali.download fi codename=kali-rolling mirror=http://$hostname/kali/dists/$codename/main/installer-$basearch_alt/current/images/netboot/debian-installer/$basearch_alt is_virt && flavour=-cloud || flavour= set_osvar vmlinuz "$mirror/linux" set_osvar initrd "$mirror/initrd.gz" set_osvar ks "$confhome/debian.cfg" set_osvar deb_mirror "$hostname/kali" set_osvar udeb_mirror "$hostname/kali" set_osvar codename "$codename" set_osvar kernel "linux-image$flavour-$basearch_alt" # 缺少 firmware 下载 fi } setos_ubuntu() { case "$releasever" in 18.04) codename=bionic ;; 20.04) codename=focal ;; 22.04) codename=jammy ;; 24.04) codename=noble ;; 26.04) codename=resolute ;; esac if is_use_cloud_image; then # cloud image if is_in_china; then # 有的源没有 releases 镜像 # https://mirrors.tuna.tsinghua.edu.cn/ubuntu-cloud-images/releases/ # https://unicom.mirrors.ustc.edu.cn/ubuntu-cloud-images/releases/ # https://mirror.nju.edu.cn/ubuntu-cloud-images/releases/ # mirrors.cloud.tencent.com ci_mirror=https://mirror.nju.edu.cn/ubuntu-cloud-images else ci_mirror=https://cloud-images.ubuntu.com fi # 以下版本有 minimal 镜像 # amd64 所有 # arm64 24.04 和以上 is_have_minimal_image() { [ "$basearch_alt" = amd64 ] || [ "${releasever%.*}" -ge 24 ] } basearch_img=$basearch_alt if [ "$basearch_alt" = amd64 ] && [ "${releasever%.*}" -ge 26 ] && is_cpu_supports_x86_64_v3; then basearch_img=amd64v3 fi if [ "$minimal" = 1 ]; then if ! is_have_minimal_image; then error_and_exit "Minimal cloud image is not available for $releasever $basearch_alt." fi set_osvar img "$ci_mirror/minimal/releases/$codename/release/ubuntu-$releasever-minimal-cloudimg-$basearch_img.img" else # 用 codename 而不是 releasever，可减少一次跳转 set_osvar img "$ci_mirror/releases/$codename/release/ubuntu-$releasever-server-cloudimg-$basearch_img.img" fi else # 传统安装 if is_in_china; then case "$basearch" in "x86_64") mirror=https://mirror.nju.edu.cn/ubuntu-releases/$releasever ;; "aarch64") mirror=https://mirror.nju.edu.cn/ubuntu-cdimage/releases/$releasever/release ;; esac else case "$basearch" in "x86_64") mirror=https://releases.ubuntu.com/$releasever ;; "aarch64") mirror=https://cdimage.ubuntu.com/releases/$releasever/release ;; esac fi # iso filename=$(curl -L $mirror/ | grep -oP "ubuntu-$releasever.*?-live-server-$basearch_alt.iso" | sort -uV | tail -1 | grep .) iso=$mirror/$filename # 在 ubuntu 20.04 上，file 命令检测 ubuntu 22.04 iso 结果是 DOS/MBR boot sector test_url "$iso" iso set_osvar iso "$iso" # ks set_osvar ks "$confhome/deprecated/ubuntu.yaml" set_osvar minimal "$minimal" fi } setos_arch() { if [ "$basearch" = "x86_64" ]; then if is_in_china; then mirror=https://mirror.nju.edu.cn/archlinux else mirror=https://geo.mirror.pkgbuild.com # geoip fi else if is_in_china; then mirror=https://mirror.nju.edu.cn/archlinuxarm else # https 证书有问题 mirror=http://mirror.archlinuxarm.org # geoip fi fi if is_use_cloud_image; then # cloud image set_osvar img "$mirror/images/latest/Arch-Linux-x86_64-cloudimg.qcow2" else # 传统安装 case "$basearch" in x86_64) dir="core/os/$basearch" ;; aarch64) dir="$basearch/core" ;; esac test_url $mirror/$dir/core.db gzip set_osvar mirror "$mirror" fi } setos_nixos() { if is_in_china; then mirror=https://mirror.nju.edu.cn/nix-channels else mirror=https://nixos.org/channels fi if is_use_cloud_image; then : else # 传统安装 # 该服务器文件缓存 miss 时会响应 206 + Location 头 # 但 curl 这种情况不会重定向，所以添加 text 类型让它不要报错 test_url $mirror/nixos-$releasever/store-paths.xz 'xz text' set_osvar mirror "$mirror" fi } setos_gentoo() { if is_in_china; then mirror=https://mirror.nju.edu.cn/gentoo else mirror=https://distfiles.gentoo.org # cdn77 fi dir=releases/$basearch_alt/autobuilds if is_use_cloud_image; then # 使用 systemd 且没有 cloud-init prefix=di-$basearch_alt-console filename=$(curl -L $mirror/$dir/latest-$prefix.txt | grep '.qcow2' | awk '{print $1}' | grep .) file=$mirror/$dir/$filename test_url "$file" 'qemu' set_osvar img "$file" else prefix=stage3-$basearch_alt-systemd filename=$(curl -L $mirror/$dir/latest-$prefix.txt | grep '.tar.xz' | awk '{print $1}' | grep .) file=$mirror/$dir/$filename test_url "$file" 'tar.xz' set_osvar img "$file" fi } setos_opensuse() { # https://download.opensuse.org/ # curl 会跳转到最近的镜像源，但可能会被镜像源 block # aria2 会跳转使用 metalink # https://downloadcontent.opensuse.org # 德国 # https://downloadcontentcdn.opensuse.org # fastly cdn # 很多国内源缺少 aarch64 tumbleweed appliances # https://download.opensuse.org/ports/aarch64/tumbleweed/appliances/ # https://mirrors.ustc.edu.cn/opensuse/ports/aarch64/tumbleweed/appliances/ # https://mirrors.tuna.tsinghua.edu.cn/opensuse/ports/aarch64/tumbleweed/appliances/ if is_in_china; then mirror=https://mirror.nju.edu.cn/opensuse else mirror=https://downloadcontentcdn.opensuse.org fi if [ "$releasever" = tumbleweed ]; then # tumbleweed if [ "$basearch" = aarch64 ]; then dir=ports/aarch64/tumbleweed/appliances else dir=tumbleweed/appliances fi file=openSUSE-Tumbleweed-Minimal-VM.$basearch-Cloud.qcow2 else # leap dir=distribution/leap/$releasever/appliances case "$releasever" in 16.0) file=Leap-$releasever-Minimal-VM.$basearch-Cloud.qcow2 ;; # 16.0) file=Leap-$releasever-Minimal-VM.$basearch-kvm$(if [ "$basearch" = x86_64 ]; then echo '-and-xen'; fi).qcow2 ;; esac # https://src.opensuse.org/openSUSE/Leap-Images/src/branch/leap-16.0/kiwi-templates-Minimal/Minimal.kiwi # https://build.opensuse.org/projects/Virtualization:Appliances:Images:openSUSE-Tumbleweed/packages/kiwi-templates-Minimal/files/Minimal.kiwi # 有专门的kvm镜像，openSUSE-Leap-15.5-Minimal-VM.x86_64-kvm-and-xen.qcow2，里面没有cloud-init # file=openSUSE-Leap-15.5-Minimal-VM.x86_64-kvm-and-xen.qcow2 fi set_osvar img "$mirror/$dir/$file" } setos_windows() { auto_find_iso=false if [ -z "$iso" ]; then auto_find_iso=true # 查找时将 windows longhorn serverdatacenter 改成 windows server 2008 serverdatacenter image_name=${image_name/windows longhorn server/windows server 2008 server} echo "iso url is not set. Attempting to find it automatically." find_windows_iso fi # 将上面的 windows server 2008 serverdatacenter 改回 windows longhorn serverdatacenter # 也能纠正用户输入了 windows server 2008 serverdatacenter # 注意 windows server 2008 r2 serverdatacenter 不用改 image_name=${image_name/windows server 2008 server/windows longhorn server} if [[ "$iso" = magnet:* ]]; then : # 不测试磁力链接 else iso_is_tested=false if $auto_find_iso; then # 目前自动获取 iso 肯定不是直连，因此先关闭直连测试 if false && test_url_grace "$iso" iso 2>/dev/null; then iso_is_tested=true else # 需要用户输入 massgrave.dev 直链 info "Set Direct link" # MobaXterm 不支持 # printf '\e]8;;http://example.com\e\\This is a link\e]8;;\e\\\n' # MobaXterm 不显示为超链接 # info false "请在浏览器中打开 $iso 获取直链并粘贴到这里。" # info false "Please open $iso in browser to get the direct link and paste it here." echo "请在浏览器中打开 $iso 获取直链并粘贴到这里。" echo "Please open $iso in browser to get the direct link and paste it here." IFS= read -r -p "Direct Link: " iso if [ -z "$iso" ]; then error_and_exit "ISO Link is empty." elif ! grep -Eiq '^https?://' <<<"$iso"; then error_and_exit "ISO Link is invalid." fi fi fi if ! $iso_is_tested; then test_url "$iso" iso fi # 判断 iso 架构是否兼容 # https://gitlab.com/libosinfo/osinfo-db/-/tree/main/data/os/microsoft.com?ref_type=heads # uupdump linux 下合成的标签是 ARM64，windows下合成的标签是 A64 if file -b "$tmp/img-test" | grep -Eq '_(A64|ARM64)'; then iso_arch=arm64 else iso_arch=x86_or_x64 fi if ! { { [ "$basearch" = x86_64 ] && [ "$iso_arch" = x86_or_x64 ]; } || { [ "$basearch" = aarch64 ] && [ "$iso_arch" = arm64 ]; } }; then warn " The current machine is $basearch, but it seems the ISO is for $iso_arch. Continue? 当前机器是 $basearch，但 ISO 似乎是 $iso_arch。继续安装?" read -r -p '[y/N]: ' if ! [[ "$REPLY" = [Yy] ]]; then exit fi fi fi [ -n "$boot_wim" ] && test_url "$boot_wim" 'wim' set_osvar iso "$iso" set_osvar boot_wim "$boot_wim" set_osvar image_name "$image_name" } # shellcheck disable=SC2154 setos_dd() { # raw 包含 vhd test_url $img 'raw raw.gzip raw.xz raw.zstd raw.tar.gzip raw.tar.xz raw.tar.zstd' img_type if is_efi; then install_pkg hexdump # openwrt 镜像 efi part type 不是 esp # 因此改成检测 fat? # https://downloads.openwrt.org/releases/23.05.3/targets/x86/64/openwrt-23.05.3-x86-64-generic-ext4-combined-efi.img.gz # od 在 coreutils 里面，好像要配合 tr 才能删除空格 # hexdump 在 util-linux / bsdmainutils 里面 # xxd 要单独安装，el 在 vim-common 里面 # xxd -l $((34 * 4096)) -ps -c 128 # 仅打印前34个扇区 * 4096字节（按最大的算） # 每行128字节 hexdump -n $((34 * 4096)) -e '128/1 "%02x" "\n"' -v "$tmp/img-test" >$tmp/img-test-hex if grep -q '^28732ac11ff8d211ba4b00a0c93ec93b' $tmp/img-test-hex; then echo 'DD: Image is EFI.' else echo 'DD: Image is not EFI.' warn ' The current machine uses EFI boot, but the DD image seems not an EFI image. Continue with DD? 当前机器使用 EFI 引导，但 DD 镜像可能不是 EFI 镜像。 继续 DD?' read -r -p '[y/N]: ' if [[ "$REPLY" = [Yy] ]]; then set_osvar confirmed_no_efi 1 else exit fi fi fi set_osvar img "$img" set_osvar img_type "$img_type" set_osvar img_type_warp "$img_type_warp" } setos_fnos() { # 系统盘大小 min=8 default=8 echo "请输入系统分区大小，最小 $min GB，但可能无法更新系统。" echo "Please input System Partition Size. Minimal is $min GB but may not be able to do system updates." while true; do IFS= read -r -p "Size in GB [$default]: " input input=${input:-$default} if ! { is_digit "$input" && [ "$input" -ge "$min" ]; }; then error "Invalid Size. Please Try again." else set_osvar fnos_part_size "${input}G" break fi done if [ -z "$iso" ]; then local download_page sign_page if [ "$FLYGOOS" = 1 ]; then download_page=https://fygonas.com/download # sign_page=https://fygonas.com/asset/download-sign else download_page=https://fnnas.com/download$([ "$basearch" = aarch64 ] && echo -arm || true) sign_page=https://fnnas.com/asset/download-sign fi # fnos_Mainland-PE_x86_1.2.0203_2149.iso # fnos_Mainland-PE_arm_1.1.31_armsr_1366.iso # fygoos_PE_x86_1.2.0203_2150.iso # fygoos_PE_arm_1.2.0007_armsr_1837.iso # 对于同一行有多个成功匹配，grep -m1 无效 iso=$(curl -L "$download_page" | grep -o 'https://[^"]*\.iso' | grep "$([ "$basearch" = aarch64 ] && echo _armsr_ || echo _x86_)" | head -1 | grep .) if [ -n "$sign_page" ]; then # curl 7.82.0+ # curl -L --json '{"url":"'$iso'"}' https://fnnas.com/asset/download-sign iso=$(curl -L \ -d '{"url":"'$iso'"}' \ -H 'Content-Type: application/json' \ "$sign_page" | grep -o 'https://[^"]*') fi fi test_url "$iso" iso set_osvar iso "$iso" } setos_aosc() { if is_in_china; then mirror=https://mirror.nju.edu.cn/anthon/aosc-os else # 服务器在香港 mirror=https://releases.aosc.io fi dir=os-$basearch_alt/base file=$(curl -L $mirror/$dir/ | grep -oP 'aosc-os_base_.*?\.tar.xz' | sort -uV | tail -1 | grep .) img=$mirror/$dir/$file test_url $img 'tar.xz' set_osvar img "$img" } setos_centos_almalinux_rocky_fedora() { # el 10 需要 x86-64-v3，除了 almalinux if [ "$basearch" = x86_64 ] && { [ "$distro" = centos ] || [ "$distro" = rocky ]; } && [ "$releasever" -ge 10 ]; then assert_cpu_supports_x86_64_v3 fi elarch=$basearch if [ "$basearch" = x86_64 ] && [ "$distro" = almalinux ] && [ "$releasever" -ge 10 ] && ! is_cpu_supports_x86_64_v3; then elarch=x86_64_v2 fi if is_use_cloud_image; then # ci if is_in_china; then case $distro in centos) ci_mirror="https://mirror.nju.edu.cn/centos-cloud/centos" ;; almalinux) ci_mirror="https://mirror.nju.edu.cn/almalinux/$releasever/cloud/$elarch/images" ;; rocky) ci_mirror="https://mirror.nju.edu.cn/rocky/$releasever/images/$elarch" ;; fedora) ci_mirror="https://mirror.nju.edu.cn/fedora/releases/$releasever/Cloud/$elarch/images" ;; esac else case $distro in centos) ci_mirror="https://cloud.centos.org/centos" ;; almalinux) ci_mirror="https://repo.almalinux.org/almalinux/$releasever/cloud/$elarch/images" ;; rocky) ci_mirror="https://download.rockylinux.org/pub/rocky/$releasever/images/$elarch" ;; fedora) ci_mirror="https://d2lzkl7pfhq30w.cloudfront.net/pub/fedora/linux/releases/$releasever/Cloud/$elarch/images" ;; esac fi case $distro in centos) case $releasever in 7) # CentOS-7-aarch64-GenericCloud.qcow2c 是旧版本 ver=-2211 ci_image=$ci_mirror/$releasever/images/CentOS-$releasever-$elarch-GenericCloud$ver.qcow2c ;; *) # 有 bios 和 efi 镜像 # https://cloud.centos.org/centos/10-stream/x86_64/images/CentOS-Stream-GenericCloud-10-latest.x86_64.qcow2 # https://cloud.centos.org/centos/10-stream/x86_64/images/CentOS-Stream-GenericCloud-x86_64-10-latest.x86_64.qcow2 [ "$elarch" = x86_64 ] && ci_image=$ci_mirror/$releasever-stream/$elarch/images/CentOS-Stream-GenericCloud-x86_64-$releasever-latest.$elarch.qcow2 || ci_image=$ci_mirror/$releasever-stream/$elarch/images/CentOS-Stream-GenericCloud-$releasever-latest.$elarch.qcow2 ;; esac ;; almalinux) ci_image=$ci_mirror/AlmaLinux-$releasever-GenericCloud-latest.$elarch.qcow2 ;; rocky) ci_image=$ci_mirror/Rocky-$releasever-GenericCloud-Base.latest.$elarch.qcow2 ;; fedora) # 不加 / 会跳转到 https://dl.fedoraproject.org，纯 ipv6 无法访问 # curl -L -6 https://d2lzkl7pfhq30w.cloudfront.net/pub/fedora/linux/releases/42/Cloud/x86_64/images # curl -L -6 https://d2lzkl7pfhq30w.cloudfront.net/pub/fedora/linux/releases/42/Cloud/x86_64/images/ filename=$(curl -L $ci_mirror/ | grep -oP "Fedora-Cloud-Base-Generic.*?.qcow2" | sort -uV | tail -1 | grep .) ci_image=$ci_mirror/$filename ;; esac set_osvar img "$ci_image" else # 传统安装 case $distro in centos) mirrorlist="https://mirrors.centos.org/mirrorlist?repo=centos-baseos-$releasever-stream&arch=$elarch" ;; almalinux) mirrorlist="https://mirrors.almalinux.org/mirrorlist/$releasever/baseos" ;; rocky) mirrorlist="https://mirrors.rockylinux.org/mirrorlist?arch=$elarch&repo=BaseOS-$releasever" ;; fedora) mirrorlist="https://mirrors.fedoraproject.org/mirrorlist?arch=$elarch&repo=fedora-$releasever" ;; esac # rocky/centos9 需要删除第一行注释， almalinux 需要替换链接里面的 $basearch for cur_mirror in $(curl -L $mirrorlist | sed "/^#/d" | sed "s,\$basearch,$elarch,"); do host=$(get_host_by_url $cur_mirror) if is_host_has_ipv4_and_ipv6 $host && test_url_grace ${cur_mirror}images/pxeboot/vmlinuz; then mirror=$cur_mirror break fi done if [ -z "$mirror" ]; then error_and_exit "All mirror failed." fi set_osvar mirrorlist "$mirrorlist" set_osvar ks "$confhome/deprecated/redhat.cfg" set_osvar vmlinuz "${mirror}images/pxeboot/vmlinuz" set_osvar initrd "${mirror}images/pxeboot/initrd.img" set_osvar squashfs "${mirror}images/install.img" test_url ${mirror}images/install.img 'squashfs' fi } setos_oracle() { # el 10 需要 x86-64-v3 if [ "$basearch" = x86_64 ] && [ "$releasever" -ge 10 ]; then assert_cpu_supports_x86_64_v3 fi if is_use_cloud_image; then # ci install_pkg jq mirror=https://yum.oracle.com [ "$basearch" = aarch64 ] && template_prefix=ol${releasever}_${basearch}-cloud || template_prefix=ol${releasever} curl -Lo $tmp/oracle.json $mirror/templates/OracleLinux/$template_prefix-template.json dir=$(jq -r .base_url $tmp/oracle.json) file=$(jq -r .kvm.image $tmp/oracle.json) ci_image=$mirror$dir/$file set_osvar img "$ci_image" else : fi } setos_redhat() { if is_use_cloud_image; then # el 10 需要 x86-64-v3 if [ "$basearch" = x86_64 ] && [[ "$img" = *rhel-10* ]]; then assert_cpu_supports_x86_64_v3 fi set_osvar img "$img" else : fi } setos_opencloudos() { # https://mirrors.opencloudos.tech 不支持 ipv6 # https://mirrors.cloud.tencent.com 没有 stream if [ "$releasever" -ge 23 ]; then mirror=https://mirrors.opencloudos.tech/opencloudos-stream/releases else mirror=https://mirrors.cloud.tencent.com/opencloudos fi if is_use_cloud_image; then # ci if [ "$releasever" -eq 9 ]; then dir=$releasever/images/qcow2/$basearch else dir=$releasever/images/$basearch fi file=$(curl -L $mirror/$dir/ | grep -oP 'OpenCloudOS.*?\.qcow2' | sort -uV | tail -1 | grep .) set_osvar img "$mirror/$dir/$file" else : fi } setos_anolis() { mirror=https://mirrors.openanolis.cn/anolis if is_use_cloud_image; then # ci dir=$releasever/isos/GA/$basearch [ "$releasever" -ge 23 ] && filename='AnolisOS.*?\.qcow2' || filename='AnolisOS.*?-ANCK\.qcow2' file=$(curl -L $mirror/$dir/ | grep -oP "$filename" | sort -uV | tail -1 | grep .) set_osvar img "$mirror/$dir/$file" else : fi } setos_openeuler() { if is_in_china; then mirror=https://repo.openeuler.openatom.cn else mirror=https://repo.openeuler.org fi if is_use_cloud_image; then # ci name=$(curl -L "$mirror/" | grep -oE "openEuler-$releasever(-LTS)?(-SP[0-9])?" | sort -uV | tail -1 | grep .) set_osvar img "$mirror/$name/virtual_machine_img/$basearch/$name-$basearch.qcow2.xz" else : fi } set_osvar distro "$distro" set_osvar releasever "$releasever" case "$distro" in centos | almalinux | rocky | fedora) setos_centos_almalinux_rocky_fedora ;; *) setos_$distro ;; esac # debian/kali <=256M 必须使用云内核，否则不够内存 if is_distro_like_debian && ! is_in_windows && [ "$ram_size" -le 256 ]; then exit_if_cant_use_cloud_kernel fi # 集中测试云镜像格式 if is_use_cloud_image && [ "$step" = finalos ]; then # shellcheck disable=SC2154 test_url $finalos_img 'qemu qemu.gzip qemu.xz qemu.zstd raw.xz' finalos_img_type fi } is_distro_like_redhat() { if [ -n "$1" ]; then _distro=$1 else _distro=$distro fi [ "$_distro" = redhat ] || [ "$_distro" = centos ] || [ "$_distro" = almalinux ] || [ "$_distro" = rocky ] || [ "$_distro" = fedora ] || [ "$_distro" = oracle ] } is_distro_like_debian() { if [ -n "$1" ]; then _distro=$1 else _distro=$distro fi [ "$_distro" = debian ] || [ "$_distro" = kali ] } get_latest_distro_releasever() { get_function_content verify_os_name | grep -wo "$1 [^'\"]*" | awk -F'|' '{print $NF}' } # 检查是否为正确的系统名 verify_os_name() { if [ -z "$*" ]; then usage_and_exit fi # 不要删除 centos 7 for os in \ 'centos 7|9|10' \ 'anolis 7|8|23' \ 'opencloudos 8|9|23' \ 'almalinux 8|9|10' \ 'rocky 8|9|10' \ 'oracle 8|9|10' \ 'fnos 1' \ 'fygoos 1' \ 'fedora 43|44' \ 'nixos 26.05' \ 'debian 9|10|11|12|13' \ 'opensuse 16.0|tumbleweed' \ 'alpine 3.21|3.22|3.23|3.24' \ 'openeuler 20.03|22.03|24.03' \ 'ubuntu 18.04|20.04|22.04|24.04|26.04' \ 'redhat' \ 'kali' \ 'arch' \ 'gentoo' \ 'aosc' \ 'windows' \ 'dd' \ 'netboot.xyz' \ 'reset'; do read -r ds vers <<<"$os" vers_=${vers//\./\\\.} finalos=$(echo "$@" | to_lower | sed -n -E "s,^($ds)[ :-]?(|$vers_)$,\1 \2,p") if [ -n "$finalos" ]; then read -r distro releasever <<<"$finalos" # fygoos to fnos if [ "$distro" = fygoos ]; then distro=fnos FLYGOOS=1 fi # 默认版本号 if [ -z "$releasever" ] && [ -n "$vers" ]; then releasever=$(awk -F '|' '{print $NF}' <<<"|$vers") fi return fi done error "Please specify a proper os" usage_and_exit } verify_os_args() { # 必备参数 case "$distro" in dd) [ -n "$img" ] || error_and_exit "dd need --img." ;; redhat) [ -n "$img" ] || error_and_exit "redhat need --img." ;; windows) [ -n "$image_name" ] || error_and_exit "Install Windows need --image-name." ;; esac # 用户名/密码/证书相关 case "$distro" in netboot.xyz) [ -z "$username" ] || error_and_exit "not support set username for $distro." [ -z "$password" ] || error_and_exit "not support set password for $distro." [ -z "$ssh_keys" ] || error_and_exit "not support set ssh key for $distro." ;; windows) [ -z "$ssh_keys" ] || error_and_exit "not support set ssh key for $distro." ;; esac # 不能同时使用证书和密码 if [ -n "$password" ] && [ -n "$ssh_keys" ]; then error_and_exit "Cannot set both password and ssh key." fi } get_cmd_path() { # arch 云镜像不带 which # command -v 包括脚本里面的方法 # ash 无效 type -f -p $1 } is_have_cmd() { get_cmd_path $1 >/dev/null 2>&1 } install_pkg() { is_in_windows && return find_pkg_mgr() { [ -n "$pkg_mgr" ] && return # 查找方法1: 通过 ID / ID_LIKE # 因为可能装了多种包管理器 if [ -f /etc/os-release ]; then # shellcheck source=/dev/null for id in $({ . /etc/os-release && echo $ID $ID_LIKE; }); do # https://github.com/chef/os_release case "$id" in fedora | centos | rhel) is_have_cmd dnf && pkg_mgr=dnf || pkg_mgr=yum ;; debian | ubuntu) pkg_mgr=apt-get ;; opensuse | suse) pkg_mgr=zypper ;; alpine) pkg_mgr=apk ;; arch) pkg_mgr=pacman ;; gentoo) pkg_mgr=emerge ;; nixos) pkg_mgr=nix-env ;; esac [ -n "$pkg_mgr" ] && return done fi # 查找方法 2 for mgr in dnf yum apt-get pacman zypper emerge apk nix-env; do is_have_cmd $mgr && pkg_mgr=$mgr && return done return 1 } cmd_to_pkg() { unset USE case $cmd in ar) case "$pkg_mgr" in *) pkg="binutils" ;; esac ;; xz) case "$pkg_mgr" in apt-get) pkg="xz-utils" ;; *) pkg="xz" ;; esac ;; lsblk | findmnt) case "$pkg_mgr" in apk) pkg="$cmd" ;; *) pkg="util-linux" ;; esac ;; lsmem) case "$pkg_mgr" in apk) pkg="util-linux-misc" ;; *) pkg="util-linux" ;; esac ;; fdisk) case "$pkg_mgr" in apt-get) pkg="fdisk" ;; apk) pkg="util-linux-misc" ;; *) pkg="util-linux" ;; esac ;; hexdump) case "$pkg_mgr" in apt-get) pkg="bsdmainutils" ;; *) pkg="util-linux" ;; esac ;; unsquashfs) case "$pkg_mgr" in zypper) pkg="squashfs" ;; emerge) pkg="squashfs-tools" && export USE="lzma" ;; *) pkg="squashfs-tools" ;; esac ;; nslookup | dig) case "$pkg_mgr" in apt-get) pkg="dnsutils" ;; pacman) pkg="bind" ;; apk | emerge) pkg="bind-tools" ;; yum | dnf | zypper) pkg="bind-utils" ;; esac ;; iconv) case "$pkg_mgr" in apk) pkg="musl-utils" ;; *) error_and_exit "Which GNU/Linux do not have iconv built-in?" ;; esac ;; *) pkg=$cmd ;; esac } # 系统 package名称 repo名称 # centos/alma/rocky/fedora epel-release epel # oracle linux oracle-epel-release ol9_developer_EPEL # opencloudos epol-release EPOL # alibaba cloud linux 3 epel-release/epel-aliyuncs-release(qcow2自带) epel # anolis 23 anolis-epao-release EPAO # anolis 8 # [root@localhost ~]# yum search *ep*-release | grep -v next # ========================== Name Matched: *ep*-release ========================== # anolis-epao-release.noarch : EPAO Packages for Anolis OS 8 repository configuration # epel-aliyuncs-release.noarch : Extra Packages for Enterprise Linux repository configuration # epel-release.noarch : Extra Packages for Enterprise Linux repository configuration (qcow2自带) check_is_need_epel() { is_need_epel() { case "$pkg" in dpkg) true ;; jq) is_have_cmd yum && ! is_have_cmd dnf ;; # el7/ol7 的 jq 在 epel 仓库 *) false ;; esac } get_epel_repo_name() { # el7 不支持 yum repolist --all，要使用 yum repolist all # el7 yum repolist 第一栏有 /x86_64 后缀，因此要去掉。而 el9 没有 $pkg_mgr repolist all | awk '{print $1}' | awk -F/ '{print $1}' | grep -Ei 'ep(el|ol|ao)$' } get_epel_pkg_name() { # el7 不支持 yum list --available，要使用 yum list available $pkg_mgr list available | grep -E '(.*-)?ep(el|ol|ao)-(.*-)?release' | awk '{print $1}' | cut -d. -f1 | grep -v next | head -1 } if is_need_epel; then if ! epel=$(get_epel_repo_name); then $pkg_mgr install -y "$(get_epel_pkg_name)" epel=$(get_epel_repo_name) fi enable_epel="--enablerepo=$epel" else enable_epel= fi } install_pkg_real() { text="$pkg" if [ "$pkg" != "$cmd" ]; then text+=" ($cmd)" fi echo "Installing package '$text'..." case $pkg_mgr in dnf) check_is_need_epel dnf install $enable_epel -y --setopt=install_weak_deps=False $pkg ;; yum) check_is_need_epel yum install $enable_epel -y $pkg ;; emerge) emerge --oneshot $pkg ;; pacman) pacman -Syu --noconfirm --needed $pkg ;; zypper) zypper install -y $pkg ;; apk) add_community_repo_for_alpine apk add $pkg ;; apt-get) [ -z "$apt_updated" ] && apt-get update && apt_updated=1 DEBIAN_FRONTEND=noninteractive apt-get install -y $pkg ;; nix-env) # 不指定 channel 会很慢，而且很占内存 [ -z "$nix_updated" ] && nix-channel --update && nix_updated=1 nix-env -iA nixos.$pkg ;; esac } is_need_reinstall() { local cmd=$1 # gentoo 默认编译的 unsquashfs 不支持 xz if [ "$cmd" = unsquashfs ] && is_have_cmd emerge && ! "$cmd" |& grep -wq xz; then echo "unsquashfs not supported xz. rebuilding." return 0 fi # busybox grep 不支持 -oP # busybox lsblk 不支持 -r -n --inverse # busybox fdisk 无法显示 mbr 分区表的 id if { [ "$cmd" = grep ] || [ "$cmd" = lsblk ] || [ "$cmd" = fdisk ]; } && is_have_cmd apk && "$cmd" --help |& grep -wq BusyBox; then return 0 fi return 1 } for cmd in "$@"; do if ! is_have_cmd $cmd || is_need_reinstall $cmd; then if ! find_pkg_mgr; then error_and_exit "Can't find compatible package manager. Please manually install $cmd." fi cmd_to_pkg install_pkg_real fi done >&2 } is_valid_ram_size() { is_digit "$1" && [ "$1" -gt 0 ] } check_ram() { ram_standard=$( case "$distro" in netboot.xyz) echo 0 ;; alpine | debian | kali | dd) echo 256 ;; arch | gentoo | aosc | nixos | windows) echo 512 ;; redhat | centos | almalinux | rocky | fedora | oracle | ubuntu | anolis | opencloudos | openeuler) echo 1024 ;; opensuse | fnos) echo -1 ;; # 没有安装模式 esac ) # 不用检查内存的情况 if [ "$ram_standard" -eq 0 ]; then return fi # 未测试 ram_cloud_image=256 has_cloud_image=$( case "$distro" in redhat | centos | almalinux | rocky | oracle | fedora | debian | ubuntu | opensuse | anolis | openeuler) echo true ;; netboot.xyz | alpine | dd | arch | gentoo | nixos | kali | windows) echo false ;; esac ) if is_in_windows; then ram_size=$(wmic memorychip get capacity | awk -F= '{sum+=$2} END {if(sum>0) print sum/1024/1024}') else # lsmem最准确但 centos7 arm 和 alpine 不能用，debian 9 util-linux 没有 lsmem # arm 24g dmidecode 显示少了128m # arm 24g lshw 显示23BiB # ec2 t4g arm alpine 用 lsmem 和 dmidecode 都无效，要用 lshw，但结果和free -m一致，其他平台则没问题 install_pkg lsmem ram_size=$(lsmem -b 2>/dev/null | grep 'Total online memory:' | awk '{ print $NF/1024/1024 }') if ! is_valid_ram_size "$ram_size"; then install_pkg dmidecode ram_size=$(dmidecode -t 17 | grep "Size.*[GM]B" | awk '{if ($3=="GB") s+=$2*1024; else s+=$2} END {if(s>0) print s}') fi if ! is_valid_ram_size "$ram_size"; then install_pkg lshw # 不能忽略 -i，alpine 显示的是 System memory ram_str=$(lshw -c memory -short | grep -i 'System Memory' | awk '{print $3}') ram_size=$(grep <<<$ram_str -o '[0-9]*') grep <<<$ram_str GiB && ram_size=$((ram_size * 1024)) fi fi # 用于兜底，不太准确 # cygwin 要装 procps-ng 才有 free 命令 if ! is_valid_ram_size "$ram_size"; then ram_size_k=$(grep '^MemTotal:' /proc/meminfo | awk '{print $2}') ram_size=$((ram_size_k / 1024 + 64 + 4)) fi if ! is_valid_ram_size "$ram_size"; then error_and_exit "Could not detect RAM size." fi # ram 足够就用普通方法安装，否则如果内存大于512就用 cloud image # TODO: 测试 256 384 内存 if ! is_use_cloud_image && [ $ram_size -lt $ram_standard ]; then if $has_cloud_image; then info "RAM < $ram_standard MB. Fallback to cloud image mode" cloud_image=1 else error_and_exit "Could not install $distro: RAM < $ram_standard MB." fi fi if is_use_cloud_image && [ $ram_size -lt $ram_cloud_image ]; then error_and_exit "Could not install $distro using cloud image: RAM < $ram_cloud_image MB." fi } is_efi() { if is_in_windows; then # bcdedit | grep -qi '^path.*\.efi' mountvol | grep -q -a 'EFI' else [ -d /sys/firmware/efi ] fi } is_grub_dir_linked() { # cloudcone 重装前/重装后(方法1) [ "$(readlink -f /boot/grub/grub.cfg)" = /boot/grub2/grub.cfg ] || [ "$(readlink -f /boot/grub2/grub.cfg)" = /boot/grub/grub.cfg ] || # cloudcone 重装后(方法2) { [ -f /boot/grub2/grub.cfg ] && [ "$(cat /boot/grub2/grub.cfg)" = 'chainloader (hd0)+1' ]; } } is_secure_boot_enabled() { if is_efi; then if is_in_windows; then reg query 'HKLM\SYSTEM\CurrentControlSet\Control\SecureBoot\State' /v UEFISecureBootEnabled 2>/dev/null | grep 0x1 else if dmesg | grep -i 'Secure boot enabled'; then return 0 fi install_pkg mokutil mokutil --sb-state 2>&1 | grep -i 'SecureBoot enabled' fi else return 1 fi } is_need_boot_vmlinuz() { ! { is_netboot_xyz && is_efi; } } # 只有 linux bios 是用本机的 grub/extlinux is_use_local_grub_extlinux() { is_need_boot_vmlinuz && ! is_in_windows && ! is_efi } is_use_local_grub() { is_use_local_grub_extlinux && is_mbr_using_grub } is_use_local_extlinux() { is_use_local_grub_extlinux && ! is_mbr_using_grub } # 软 raid 时 xda 可能不是引导盘，以后再修正 is_mbr_using_grub() { find_main_disk # 各发行版不一定自带 strings hexdump xxd od 命令 head -c 440 /dev/$xda | grep -a -iq 'GRUB' } to_upper() { tr '[:lower:]' '[:upper:]' } to_lower() { tr '[:upper:]' '[:lower:]' } del_cr() { # wmic/reg 换行符是 \r\r\n # wmic nicconfig where InterfaceIndex=$id get MACAddress,IPAddress,IPSubnet,DefaultIPGateway | hexdump -c sed -E 's/\r+$//' } del_empty_lines() { sed '/^[[:space:]]*$/d' } del_comment_lines() { sed '/^[[:space:]]*#/d' } trim() { # sed -E -e 's/^[[:space:]]+//' -e 's/[[:space:]]+$//' sed -e 's/^[[:space:]]*//' -e 's/[[:space:]]*$//' } assert_username_valid() { # https://learn.microsoft.com/windows-hardware/customize/desktop/unattend/microsoft-windows-shell-setup-useraccounts-localaccounts-localaccount-name # 不能为 none [ ] / \ : | < > + = ; , ? * % @ # 账号为空 if [ -z "$username" ]; then error_and_exit "Username: Can not be empty." fi # 账号为 none if [ "$(to_lower <<<"$username")" = none ]; then error_and_exit "Username: Can not be 'none'." fi # 账号包含非法字符 if grep -q '[][/\:|<>+=;,?*%@]' <<<"$username"; then error_and_exit "Username: Do not use any of the following characters: / \ [ ] : | < > + = ; , ? * % @" fi } # trans.sh 有同名方法 is_administrator_username() { username_in_lower=$(to_lower <<<"$1") # 如果输入以下用户名则忽略，并使用系统内置的 Administrator 账号 # 防止系统有两个不同语言的 Administrator 账号而造成困扰 for builtin_username in \ administrator \ administrador \ administrateur \ administratör \ администратор \ järjestelmänvalvoja \ rendszergazda; do if [ "$username_in_lower" = "$builtin_username" ]; then return 0 fi done return 1 } prompt_username() { info "prompt username" if [ "$distro" = windows ]; then default_username=administrator else default_username=root fi warn false "Set username, leave blank to use $default_username" warn false "设置用户名，不填写则使用 $default_username" IFS= read -r -p "Username: " username username="$(printf "%s" "$username" | trim)" if [ -z "$username" ]; then username=$default_username fi assert_username_valid } prompt_password() { info "prompt password" warn false "Set password, leave blank to use a random password." warn false "设置密码，不填写则使用随机密码" while true; do IFS= read -r -p "Password: " password if [ -n "$password" ]; then IFS= read -r -p "Retype password: " password_confirm if [ "$password" = "$password_confirm" ]; then break else error "Passwords don't match. Try again." fi else # 特殊字符列表 # https://learn.microsoft.com/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/hh994562(v=ws.11) # 有的机器运行 centos 7 ，用 /dev/random 产生 16 位密码，开启了 rngd 也要 5 秒，关闭了 rngd 则长期阻塞 chars=\''A-Za-z0-9~!@#$%^&*_=+`|(){}[]:;"<>,.?/-' password=$(tr -dc "$chars" >"$dir/password-plaintext" fi # sha512 # 以下系统均支持 sha512 密码，但是生成密码需要不同的工具 # 兼容性 openssl mkpasswd busybox python # centos 7 × 只有expect的 需要编译 √ # centos 8 √ 只有expect的 # debian 9 × √ # ubuntu 16 × √ # alpine √ 可能系统装了expect √ # cygwin √ # others √ # alpine if is_have_cmd busybox && busybox mkpasswd --help 2>&1 | grep -wq sha512; then crypted=$(printf '%s' "$password" | busybox mkpasswd -m sha512) # others elif install_pkg openssl && openssl passwd --help 2>&1 | grep -wq '\-6'; then crypted=$(printf '%s' "$password" | openssl passwd -6 -stdin) # debian 9 / ubuntu 16 elif is_have_cmd apt-get && install_pkg whois && mkpasswd -m help | grep -wq sha-512; then crypted=$(printf '%s' "$password" | mkpasswd -m sha-512 --stdin) # centos 7 # crypt.mksalt 是 python3 的 # 红帽把它 backport 到了 centos7 的 python2 上 # 在其它发行版的 python2 上运行会出错 elif is_have_cmd yum && is_have_cmd python2; then crypted=$(python2 -c "import crypt, sys; print(crypt.crypt(sys.argv[1], crypt.mksalt(crypt.METHOD_SHA512)))" "$password") else error_and_exit "Could not generate sha512 password." fi echo "$crypted" >"$dir/password-linux-sha512" # yescrypt # 旧系统不支持，先不管 if false; then if mkpasswd -m help | grep -wq yescrypt; then crypted=$(printf '%s' "$password" | mkpasswd -m yescrypt --stdin) echo "$crypted" >"$dir/password-linux-yescrypt" fi fi # windows if [ "$distro" = windows ] || [ "$distro" = dd ]; then install_pkg iconv # 要分两行写，因为 echo "$(xxx)" 返回值始终为 0，出错也不会中断脚本 # grep . 为了保证脚本没有出错 base64=$(printf '%s' "${password}Password" | iconv -f UTF-8 -t UTF-16LE | base64 -w 0 | grep .) echo "$base64" >"$dir/password-windows-user-base64" base64=$(printf '%s' "${password}AdministratorPassword" | iconv -f UTF-8 -t UTF-16LE | base64 -w 0 | grep .) echo "$base64" >"$dir/password-windows-administrator-base64" fi } # 记录主硬盘 find_main_disk() { if [ -n "$main_disk" ]; then return fi if is_in_windows; then # TODO: # 已测试 vista # 测试 软raid # 测试 动态磁盘 # diskpart 命令结果 # 磁盘 ID: E5FDE61C # 磁盘 ID: {92CF6564-9B2E-4348-A3BD-D84E3507EBD7} main_disk=$(printf "%s\n%s" "select volume $c" "uniqueid disk" | diskpart | tail -1 | awk '{print $NF}' | sed 's,[{}],,g') else if [ -z "$xda" ]; then # centos7下测试 lsblk --inverse $mapper | grep -w disk grub2-probe -t disk / # 跨硬盘btrfs 只显示第一个硬盘 显示两个硬盘 # 跨硬盘lvm 显示两个硬盘 显示/dev/mapper/centos-root # 跨硬盘软raid 显示两个硬盘 显示/dev/md127 # 还有 findmnt # 理论上 /boot/efi /efi /boot 可以不在主硬盘上 # 因此只查找 / 分区 install_pkg lsblk # lvm 显示的是 /dev/mapper/xxx-yyy，再用第二条命令得到sda mapper=$(mount | awk '$3=="/" {print $1}' | grep .) xdas=$(lsblk -rn --inverse $mapper | grep -w disk | awk '{print $1}' | sort -u | grep .) # 注意 wc -l 的坑 # wc -l <<<"" 输出 1 # 检测主硬盘是否横跨多个磁盘 if [ "$(wc -l <<<"$xdas")" -eq 1 ]; then xda=$xdas else # vultr 官网新建数据盘时有写，部分地区的实例，不能从数据盘启动 # 实测 nvram 可写入数据盘的条目但不生效，手动安装 debian 到此硬盘，nvram 也不生效 # 从 bios 手动选择数据盘的 efi 文件才能启动 # 但是 nvram BootNext 数据盘的条目却可以生效 # vultr 从软 raid 0 debian 下用本脚本安装 debian ，进入 grub efi 时，无法识别系统分区 md1 的文件系统，也少了 hd1 # 但是从 bios 手动选择 reinstall 的 grub efi 时却可以识别 # 后期应该将 vmlinux/initrd 放到 efi/boot 分区 # Gemini 说: # 使用 efibootmgr 的 BootNext 时，固件走的是“快速路径”： # 它只初始化存放 EFI 引导文件（grubx64.efi）的那块硬盘（hd0），然后直接把控制权交给 GRUB。 # 因为 hd1 还没“醒”，GRUB 自然无法拼凑出完整的 md1 阵列，导致无法识别文件系统。 # 使用 nativedisk 可以强制 grub 识别所有硬盘? info false "Multiple disks found for root partition:" echo '-----' printf "%s\n" "$xdas" echo '-----' read -r -p "Select a disk to install: " xda if ! grep -Fqx "$xda" <<<"$xdas"; then error_and_exit "Invalid Input." fi fi fi info "Main disk: $xda" # 可以用 dd 找出 guid? # centos7 blkid lsblk 不显示 PTUUID # centos7 sfdisk 不显示 Disk identifier # alpine blkid 不显示 gpt 分区表的 PTUUID # 因此用 fdisk # Disk identifier: 0x36778223 # gnu fdisk + mbr # Disk identifier: D6B17C1A-FA1E-40A1-BDCB-0278A3ED9CFC # gnu fdisk + gpt # Disk identifier (GUID): d6b17c1a-fa1e-40a1-bdcb-0278a3ed9cfc # busybox fdisk + gpt # 不显示 Disk identifier # busybox fdisk + mbr # 获取 xda 的 id install_pkg fdisk main_disk=$(fdisk -l /dev/$xda | grep 'Disk identifier' | awk '{print $NF}' | sed 's/0x//') fi # 检查 id 格式是否正确 if ! grep -Eix '[0-9a-f]{8}' <<<"$main_disk" && ! grep -Eix '[0-9a-f-]{36}' <<<"$main_disk"; then error_and_exit "Disk ID is invalid: $main_disk" fi } is_found_ipv4_netconf() { [ -n "$ipv4_mac" ] && [ -n "$ipv4_addr" ] && [ -n "$ipv4_gateway" ] } is_found_ipv6_netconf() { [ -n "$ipv6_mac" ] && [ -n "$ipv6_addr" ] && [ -n "$ipv6_gateway" ] } # TODO: 单网卡多IP collect_netconf() { if is_in_windows; then convert_net_str_to_array() { config=$1 key=$2 var=$3 IFS=',' read -r -a "${var?}" <<<"$(grep "$key=" <<<"$config" | cut -d= -f2 | sed 's/[{}\"]//g')" } # 部分机器精简了 powershell # 所以不要用 powershell 获取网络信息 # ids=$(wmic nic where "PhysicalAdapter=true and MACAddress is not null and (PNPDeviceID like '%VEN_%&DEV_%' or PNPDeviceID like '%{F8615163-DF3E-46C5-913F-F2D2F965ED0E}%')" get InterfaceIndex | sed '1d') # 否 手动 0 0.0.0.0/0 19 192.168.1.1 # 否 手动 0 0.0.0.0/0 59 nekoray-tun # wmic nic: # 真实网卡 # AdapterType=以太网 802.3 # AdapterTypeId=0 # MACAddress=68:EC:C5:11:11:11 # PhysicalAdapter=TRUE # PNPDeviceID=PCI\VEN_8086&DEV_095A&SUBSYS_94108086&REV_61\4&295A4BD&1&00E0 # VPN tun 网卡，部分移动云电脑也有 # AdapterType= # AdapterTypeId= # MACAddress= # PhysicalAdapter=TRUE # PNPDeviceID=SWD\WINTUN\{6A460D48-FB76-6C3F-A47D-EF97D3DC6B0E} # VMware 网卡 # AdapterType=以太网 802.3 # AdapterTypeId=0 # MACAddress=00:50:56:C0:00:08 # PhysicalAdapter=TRUE # PNPDeviceID=ROOT\VMWARE\0001 for v in 4 6; do if [ "$v" = 4 ]; then # 或者 route print routes=$(netsh int ipv4 show route | awk '$4 == "0.0.0.0/0"') else routes=$(netsh int ipv6 show route | awk '$4 == "::/0"') fi if [ -z "$routes" ]; then continue fi while read -r route; do if false; then read -r _ _ _ _ id gateway <<<"$route" else id=$(awk '{print $5}' <<<"$route") gateway=$(awk '{print $6}' <<<"$route") fi config=$(wmic nicconfig where InterfaceIndex=$id get MACAddress,IPAddress,IPSubnet,DefaultIPGateway) # 排除 IP/子网/网关/MAC 为空的 if grep -q '=$' <<<"$config"; then continue fi mac_addr=$(grep "MACAddress=" <<<"$config" | cut -d= -f2 | to_lower) convert_net_str_to_array "$config" IPAddress ips convert_net_str_to_array "$config" IPSubnet subnets convert_net_str_to_array "$config" DefaultIPGateway gateways # IPv4 # shellcheck disable=SC2154 if [ "$v" = 4 ]; then for ((i = 0; i < ${#ips[@]}; i++)); do ip=${ips[i]} subnet=${subnets[i]} if [[ "$ip" = *.* ]]; then # ipcalc 依赖 perl，会使 cygwin 增加 ~50M # cidr=$(ipcalc -b "$ip/$subnet" | grep Netmask: | awk '{print $NF}') cidr=$(mask2cidr "$subnet") ipv4_addr="$ip/$cidr" ipv4_gateway="$gateway" ipv4_mac="$mac_addr" # 只取第一个 IP break fi done fi # IPv6 if [ "$v" = 6 ]; then ipv6_type_list=$(netsh interface ipv6 show address $id normal) for ((i = 0; i < ${#ips[@]}; i++)); do ip=${ips[i]} cidr=${subnets[i]} if [[ "$ip" = *:* ]]; then ipv6_type=$(grep "$ip" <<<"$ipv6_type_list" | awk '{print $1}') # Public 是 slaac # 还有类型 Temporary，不过有 Temporary 肯定还有 Public，因此不用 if [ "$ipv6_type" = Public ] || [ "$ipv6_type" = Dhcp ] || [ "$ipv6_type" = Manual ]; then ipv6_addr="$ip/$cidr" ipv6_gateway="$gateway" ipv6_mac="$mac_addr" # 只取第一个 IP break fi fi done fi # 网关 # shellcheck disable=SC2154 if false; then for gateway in "${gateways[@]}"; do if [ -n "$ipv4_addr" ] && [[ "$gateway" = *.* ]]; then ipv4_gateway="$gateway" elif [ -n "$ipv6_addr" ] && [[ "$gateway" = *:* ]]; then ipv6_gateway="$gateway" fi done fi # 如果通过本条 route 的网卡找到了 IP 则退出 routes 循环 if is_found_ipv${v}_netconf; then break fi done < <(echo "$routes") done else # linux # 通过默认网关得到默认网卡 # 多个默认路由下 # ip -6 route show default dev ens3 完全不显示 # ip -6 route show default # default proto static metric 1024 pref medium # nexthop via 2a01:1111:262:4940::2 dev ens3 weight 1 onlink # nexthop via fe80::5054:ff:fed4:5286 dev ens3 weight 1 # ip -6 route show default # default via 2602:1111:0:80::1 dev eth0 metric 1024 onlink pref medium # arch + vultr # ip -6 route show default # default nhid 4011550343 via fe80::fc00:5ff:fe3d:2714 dev enp1s0 proto ra metric 1024 expires 1504sec pref medium for v in 4 6; do if via_gateway_dev_ethx=$(ip -$v route show default | grep -Ewo 'via [^ ]+ dev [^ ]+' | head -1 | grep .); then read -r _ gateway _ ethx <<<"$via_gateway_dev_ethx" set_var ipv${v}_ethx "$ethx" # can_use_cloud_kernel 要用 set_var ipv${v}_mac "$(ip link show dev $ethx | grep link/ether | head -1 | awk '{print $2}')" set_var ipv${v}_gateway "$gateway" # 获取所有全局地址 all_addrs=$(ip -$v -o addr show scope global dev $ethx | grep -v temporary | awk '{print $4}') primary_addr=$(echo "$all_addrs" | head -1) # IPv6: 用 ip route get 让内核返回正确的源 IP，指定 dev 避免 tun/warp 干扰 if [ "$v" = 6 ] && [ -n "$primary_addr" ]; then route_src=$(ip -6 route get 2001:4860:4860::8888 dev "$ethx" 2>/dev/null | grep -oP 'src \K[^ ]+') if [ -n "$route_src" ]; then for addr in $all_addrs; do if [ "${addr%/*}" = "$route_src" ]; then primary_addr=$addr break fi done fi fi set_var ipv${v}_addr "$primary_addr" # extra_addrs: 除主地址外的所有地址 set_var ipv${v}_extra_addrs "$(echo "$all_addrs" | grep -Fxve "$primary_addr" | tr '\n' ',' | sed 's/,$//')" fi done fi if ! is_found_ipv4_netconf && ! is_found_ipv6_netconf; then error_and_exit "Can not get IP info." fi info "Network Info" echo "IPv4 MAC: $ipv4_mac" echo "IPv4 Address: $ipv4_addr" echo "IPv4 Gateway: $ipv4_gateway" echo "---" echo "IPv6 MAC: $ipv6_mac" echo "IPv6 Address: $ipv6_addr" echo "IPv6 Gateway: $ipv6_gateway" echo } get_efi_dir_in_windows() { # 挂载 if result=$(find /cygdrive/?/EFI/Microsoft/Boot/bootmgfw.efi 2>/dev/null); then # 已经挂载 x=$(echo $result | cut -d/ -f3) else # 找到空盘符并挂载 for x in {a..z}; do [ ! -e /cygdrive/$x ] && break done if ! mountvol $x: /s >&2; then error_and_exit "Can't mount efi partition in windows." fi fi echo "/cygdrive/$x" } add_efi_entry_in_windows() { info "Add efi entry in windows" local source=$1 # 文件夹命名为reinstall而不是grub，因为可能机器已经安装了grub，bcdedit名字同理 dist_dir="$(get_efi_dir_in_windows)/EFI/reinstall" efi_drive=$(echo "$dist_dir" | cut -d/ -f3) basename=$(basename $source) download_or_copy_file "$source" "$dist_dir/$basename" # 如果 {fwbootmgr} displayorder 为空 # 执行 bcdedit /copy '{bootmgr}' 会报错 # 例如 azure windows 2016 模板 # 要先设置默认的 {fwbootmgr} displayorder # https://github.com/hakuna-m/wubiuefi/issues/286 bcdedit /set '{fwbootmgr}' displayorder '{bootmgr}' /addfirst # 添加启动项 id=$(bcdedit /copy '{bootmgr}' /d "$(get_entry_name)" | grep -o '{.*}') bcdedit /set $id device partition=$efi_drive: bcdedit /set $id path \\EFI\\reinstall\\$basename bcdedit /set '{fwbootmgr}' bootsequence $id } get_maybe_efi_dirs_in_linux() { # 不从 fstab 查找，因为极端情况下可能只用 systemd mount # arch云镜像efi分区挂载在/efi，且使用 autofs，mount 命令会有两个 /efi 条目 install_pkg findmnt >&2 # 寻找 efi 分区，并输出根目录 # root_dirs=$(mount | awk '$5=="vfat" || $5=="autofs" {print $3}' | grep -Ex '/efi|/boot/efi|/boot' | sort -u) root_dirs=$(findmnt -t fat,vfat -n -o TARGET | grep -Ex '/efi|/boot/efi|/boot' | sort -u) efi_dirs=$( for dir in $root_dirs; do # 只显示有 efi 文件的 # -quit 表示找到第一个 *.efi 就立即退出 find if [ -d "$dir" ]; then find "$dir" -type f -iname "*.efi" -exec printf '%s\n' "$dir" \; -quit fi done ) if [ -z "$efi_dirs" ]; then error_and_exit "Can't find efi partition." fi echo "$efi_dirs" } get_disk_by_part() { dev_part=$1 install_pkg lsblk >&2 lsblk -rn --inverse "$dev_part" | grep -w disk | awk '{print $1}' } get_part_num_by_part() { dev_part=$1 grep -oE '[0-9]*$' <<<"$dev_part" } grep_efi_entry() { # efibootmgr # BootCurrent: 0002 # Timeout: 1 seconds # BootOrder: 0000,0002,0003,0001 # Boot0000* sles-secureboot # Boot0001* CD/DVD Rom # Boot0002* Hard Disk # Boot0003* sles-secureboot # MirroredPercentageAbove4G: 0.00 # MirrorMemoryBelow4GB: false # 根据文档，* 表示 active，也就是说有可能没有*(代表inactive) # https://manpages.debian.org/testing/efibootmgr/efibootmgr.8.en.html grep -E '^Boot[0-9a-fA-F]{4}' } # trans.sh 有同名方法 grep_efi_index() { awk '{print $1}' | sed -e 's/Boot//' -e 's/\*//' } download_or_copy_file() { local source=$1 local dist=$2 mkdir -p "$(dirname $dist)" if [[ "$source" = http* ]]; then curl -Lo "$dist" "$source" else cp -f "$source" "$dist" fi } add_efi_entry_in_linux() { local source=$1 info "Add efi entry in linux" install_pkg efibootmgr # 只取第一个 # 因为不用关心是否为 efi 分区，只要是 fat/vfat 格式的分区即可添加到引导 # 这里用了管道导致 get_maybe_efi_dirs_in_linux 里面的 error_and_exit 不生效 efi_part=$(get_maybe_efi_dirs_in_linux | head -1 | grep .) dist_dir=$efi_part/EFI/reinstall basename=$(basename $source) download_or_copy_file "$source" "$dist_dir/$basename" # 原系统可能不是用 grub 引导，因此不一定有 grub-probe if false; then grub_probe="$(command -v grub-probe grub2-probe | head -1)" dev_part="$("$grub_probe" -t device "$dist_dir")" else install_pkg findmnt # arch findmnt 会得到 # systemd-1 # /dev/sda2 dev_part=$(findmnt -T "$dist_dir" -no SOURCE | grep '^/dev/') fi set -- efibootmgr --create-only \ --disk "/dev/$(get_disk_by_part $dev_part)" \ --part "$(get_part_num_by_part $dev_part)" \ --label "$(get_entry_name)" \ --loader "\\EFI\\reinstall\\$basename" if ! res=$("$@"); then echo "Command: $*" echo "$res" error_and_exit "Could not add efi entry." fi id=$(echo "$res" | grep_efi_entry | tail -1 | grep_efi_index | grep .) efibootmgr --bootnext "$id" } get_grub_efi_filename() { case "$basearch" in x86_64) echo grubx64.efi ;; aarch64) echo grubaa64.efi ;; esac } install_grub_linux_efi() { info 'download grub efi' # fedora 39 的 efi 无法识别 opensuse tumbleweed 的 xfs efi_distro=fedora grub_efi=$(get_grub_efi_filename) # 不要用 download.opensuse.org 和 download.fedoraproject.org # 因为 ipv6 访问有时跳转到 ipv4 地址，造成 ipv6 only 机器无法下载 # 日韩机器有时得到国内镜像源，但镜像源屏蔽了国外 IP 导致连不上 # https://mirrors.bfsu.edu.cn/opensuse/ports/aarch64/tumbleweed/repo/oss/EFI/BOOT/grub.efi # fcix 经常 404 # https://mirror.fcix.net/opensuse/tumbleweed/repo/oss/EFI/BOOT/bootx64.efi # https://mirror.fcix.net/opensuse/tumbleweed/appliances/openSUSE-Tumbleweed-Minimal-VM.x86_64-Cloud.qcow2 # dl.fedoraproject.org 不支持 ipv6 if [ "$efi_distro" = fedora ]; then # fedora 43 efi 在 vultr 无法引导 debain 9/10 netboot fedora_ver=$(get_latest_distro_releasever fedora) if is_in_china; then mirror=https://mirror.nju.edu.cn/fedora else mirror=https://d2lzkl7pfhq30w.cloudfront.net/pub/fedora/linux fi curl -Lo $tmp/$grub_efi $mirror/releases/$fedora_ver/Everything/$basearch/os/EFI/BOOT/$grub_efi else if is_in_china; then mirror=https://mirror.nju.edu.cn/opensuse else mirror=https://downloadcontentcdn.opensuse.org fi [ "$basearch" = x86_64 ] && ports='' || ports=/ports/$basearch curl -Lo $tmp/$grub_efi $mirror$ports/tumbleweed/repo/oss/EFI/BOOT/grub.efi fi add_efi_entry_in_linux $tmp/$grub_efi } download_and_extract_apk() { local alpine_ver=$1 local package=$2 local extract_dir=$3 install_pkg tar xz is_in_china && mirror=http://mirror.nju.edu.cn/alpine || mirror=https://dl-cdn.alpinelinux.org/alpine package_apk=$(curl -L $mirror/v$alpine_ver/main/$basearch/ | grep -oP "$package-[^-]*-[^-]*\.apk" | sort -u) if ! [ "$(wc -l <<<"$package_apk")" -eq 1 ]; then error_and_exit "find no/multi apks." fi mkdir -p "$extract_dir" # 屏蔽警告 tar 2>&1 | grep -q BusyBox && tar_args= || tar_args=--warning=no-unknown-keyword curl -L "$mirror/v$alpine_ver/main/$basearch/$package_apk" | tar xz $tar_args -C "$extract_dir" } install_grub_win() { # 下载 grub info download grub # https://wuyou.net/forum.php?mod=viewthread&tid=449379&extra=page%3D1&page=2 # 2.14 # efi 正常 # bios 报错 ld.gold bug https://lists.gnu.org/archive/html/grub-devel/2026-01/msg00041.html # 替换成 alpine/arch 的模块后，出现 ntfs 读取 out of range 错误 # 2.12 # efi 报错 __stack_chk_guard https://lists.gnu.org/archive/html/bug-grub/2024-01/msg00002.html # 替换成 alpine/arch 的模块后，正常 # bios 正常 # 2.06 # 一切正常 # 要使用的 grub 版本 if is_efi; then local grub_ver=2.14 else local grub_ver=2.12 fi # grub 对应的 alpine 版本 case "$grub_ver" in 2.06) local alpine_ver=3.19 ;; 2.12) local alpine_ver=3.23 ;; 2.14) local alpine_ver=3.24 ;; esac # grub 架构名和对应的 alpine 包名 if is_efi; then local alpine_grub_pkg=grub-efi case "$basearch" in x86_64) local grub_arch=x86_64-efi ;; aarch64) local grub_arch=arm64-efi ;; esac else local alpine_grub_pkg=grub-bios local grub_arch=i386-pc fi # 是否需要从 alpine 获取/替换 grub 模块 # arm64-efi 要从 alpine 下载 grub 模块 local need_download_grub_module_from_alpine=false if [ "$grub_arch" = arm64-efi ]; then need_download_grub_module_from_alpine=true fi # ftpmirror.gnu.org 是 geoip 重定向，不是 cdn # 有可能重定义到一个拉黑了部分 IP 的服务器 # 换成 ftp.gnu.org? is_in_china && grub_url=https://mirror.nju.edu.cn/gnu/grub/grub-$grub_ver-for-windows.zip || grub_url=https://mirrors.kernel.org/gnu/grub/grub-$grub_ver-for-windows.zip curl -Lo $tmp/grub.zip $grub_url # unzip -qo $tmp/grub.zip 7z x $tmp/grub.zip -o$tmp -r -y -xr!i386-efi -xr!locale -xr!themes -bso0 grub_dir=$tmp/grub-$grub_ver-for-windows grub=$grub_dir/grub # 下载/替换 grub 模块 if $need_download_grub_module_from_alpine; then info 'download grub modules from alpine' download_and_extract_apk $alpine_ver $alpine_grub_pkg $tmp/grub-from-alpine cp -r $tmp/grub-from-alpine/usr/lib/grub/$grub_arch/ $grub_dir fi # 设置 grub 包含的模块 # 原系统是 windows，因此不需要 ext2 lvm xfs btrfs grub_modules+=" normal minicmd serial ls echo test cat reboot halt linux chain search all_video configfile" grub_modules+=" scsi part_msdos part_gpt fat ntfs ntfscomp lzopio xzio gzio zstd" if ! is_efi; then grub_modules+=" biosdisk linux16" fi # 设置 grub prefix 为c盘根目录 # 运行 grub-probe 会改变cmd窗口字体 local prefix prefix=$($grub-probe -t drive $c: | sed 's|.*PhysicalDrive|(hd|' | del_cr)/ echo $prefix # 安装 grub if is_efi; then # efi info install grub for efi grub_efi=$(get_grub_efi_filename) $grub-mkimage -p $prefix -O $grub_arch -o "$(cygpath -w "$grub_dir/$grub_efi")" $grub_modules add_efi_entry_in_windows "$grub_dir/$grub_efi" else # bios info install grub for bios # bootmgr 加载 g2ldr 有大小限制 # 超过大小会报错 0xc000007b # 解决方法1 g2ldr.mbr + g2ldr # 解决方法2 生成少于64K的 g2ldr + 动态模块 if false; then # g2ldr.mbr # 部分国内机无法访问 ftp.cn.debian.org is_in_china && host=mirror.nju.edu.cn || host=deb.debian.org curl -LO http://$host/debian/tools/win32-loader/oldstable/win32-loader.exe 7z x win32-loader.exe 'g2ldr.mbr' -o$tmp/win32-loader -r -y -bso0 find $tmp/win32-loader -name 'g2ldr.mbr' -exec cp {} /cygdrive/$c/ \; # g2ldr # 配置文件 c:\grub.cfg $grub-mkimage -p "$prefix" -O $grub_arch -o "$(cygpath -w $grub_dir/core.img)" $grub_modules cat $grub_dir/$grub_arch/lnxboot.img $grub_dir/core.img >/cygdrive/$c/g2ldr else # grub-install 无法设置 prefix # 配置文件 c:\grub\grub.cfg $grub-install $c \ --target=$grub_arch \ --boot-directory=$c: \ --install-modules="$grub_modules" \ --themes= \ --fonts= \ --no-bootsector cat $grub_dir/$grub_arch/lnxboot.img /cygdrive/$c/grub/$grub_arch/core.img >/cygdrive/$c/g2ldr fi # 添加引导 # 脚本可能不是首次运行，所以先删除原来的 id='{1c41f649-1637-52f1-aea8-f96bfebeecc8}' bcdedit /enum all | grep -a $id && bcdedit /delete $id bcdedit /create $id /d "$(get_entry_name)" /application bootsector bcdedit /set $id device partition=$c: bcdedit /set $id path \\g2ldr bcdedit /displayorder $id /addlast bcdedit /bootsequence $id /addfirst fi } find_grub_extlinux_cfg() { dir=$1 filename=$2 keyword=$3 # 当 ln -s /boot/grub /boot/grub2 时 # find /boot/ 会自动忽略 /boot/grub2 里面的文件 cfgs=$( # 只要 $dir 存在 # 无论是否找到结果，返回值都是 0 find $dir \ -type f -name $filename \ -exec grep -E -l "$keyword" {} \; ) count="$(wc -l <<<"$cfgs")" if [ "$count" -eq 1 ]; then echo "$cfgs" else error_and_exit "Find $count $filename." fi } # 空格、&、用户输入的网址要加引号，否则 grub 无法正确识别 is_need_quote() { [[ "$1" = *' '* ]] || [[ "$1" = *'&'* ]] || [[ "$1" = http* ]] } # 转换 finalos_a=1 为 finalos.a=1 ，排除 finalos_mirrorlist build_finalos_cmdline() { if vars=$(compgen -v finalos_); then for key in $vars; do value=${!key} key=${key#finalos_} if [ -n "$value" ] && [ $key != "mirrorlist" ]; then is_need_quote "$value" && finalos_cmdline+=" finalos_$key='$value'" || finalos_cmdline+=" finalos_$key=$value" fi done fi } build_extra_cmdline() { # 使用 extra_xxx=yyy 而不是 extra.xxx=yyy # 因为 debian installer /lib/debian-installer-startup.d/S02module-params # 会将 extra.xxx=yyy 写入新系统的 /etc/modprobe.d/local.conf # https://answers.launchpad.net/ubuntu/+question/249456 # https://salsa.debian.org/installer-team/rootskel/-/blob/master/src/lib/debian-installer-startup.d/S02module-params?ref_type=heads for key in confhome hold force_boot_mode force_cn force_old_windows_setup cloud_image main_disk \ elts deb_mirror \ username ssh_port rdp_port web_port allow_ping; do value=${!key} if [ -n "$value" ]; then is_need_quote "$value" && extra_cmdline+=" extra_$key='$value'" || extra_cmdline+=" extra_$key=$value" fi done # 指定最终安装系统的 mirrorlist，链接有&，在grub中是特殊字符，所以要加引号 if [ -n "$finalos_mirrorlist" ]; then extra_cmdline+=" extra_mirrorlist='$finalos_mirrorlist'" elif [ -n "$nextos_mirrorlist" ]; then extra_cmdline+=" extra_mirrorlist='$nextos_mirrorlist'" fi # cloudcone 特殊处理 if is_grub_dir_linked; then finalos_cmdline+=" extra_link_grub_dir=1" fi } echo_tmp_ttys() { if false; then curl -L $confhome/ttys.sh | sh -s "console=" else case "$basearch" in x86_64) echo "console=ttyS0,115200n8 console=tty0" ;; aarch64) echo "console=ttyS0,115200n8 console=ttyAMA0,115200n8 console=tty0" ;; esac fi } get_entry_name() { printf 'reinstall (' printf '%s' "$distro" [ -n "$releasever" ] && printf ' %s' "$releasever" [ "$distro" = alpine ] && [ "$hold" = 1 ] && printf ' Live OS' printf ')' } # shellcheck disable=SC2154 build_nextos_cmdline() { if [ $nextos_distro = alpine ]; then nextos_cmdline="alpine_repo=$nextos_repo modloop=$nextos_modloop" elif is_distro_like_debian $nextos_distro; then # 设置分辨率为800*600，防止分辨率过高 ssh screen attach 后无法全部显示 # iso 默认有 vga=788 # 如果要设置位数: video=800x600-16 nextos_cmdline="lowmem/low=1 auto=true priority=critical" # nextos_cmdline+=" vga=788 video=800x600" nextos_cmdline+=" url=$nextos_ks" nextos_cmdline+=" mirror/http/hostname=${nextos_udeb_mirror%/*}" nextos_cmdline+=" mirror/http/directory=/${nextos_udeb_mirror##*/}" nextos_cmdline+=" base-installer/kernel/image=$nextos_kernel" # elts 的 debian 不能用 security 源，否则安装过程会提示无法访问 if [ "$nextos_distro" = debian ] && is_debian_elts; then nextos_cmdline+=" apt-setup/services-select=" fi # kali 安装好后网卡是 eth0 这种格式，但安装时不是 if [ "$nextos_distro" = kali ]; then nextos_cmdline+=" net.ifnames=0" nextos_cmdline+=" simple-cdd/profiles=kali" fi elif is_distro_like_redhat $nextos_distro; then # redhat nextos_cmdline="root=live:$nextos_squashfs inst.ks=$nextos_ks" fi if is_distro_like_debian $nextos_distro; then if [ "$basearch" = "x86_64" ]; then # debian installer 好像第一个 tty 是主 tty # 设置ttyS0,tty0,安装界面还是显示在ttyS0 : else # debian arm 在没有ttyAMA0的机器上（aws t4g），最少要设置一个tty才能启动 # 只设置tty0也行，但安装过程ttyS0没有显示 nextos_cmdline+=" $(echo_tmp_ttys)" fi else nextos_cmdline+=" $(echo_tmp_ttys)" fi # nextos_cmdline+=" mem=256M" # nextos_cmdline+=" lowmem=+1" } build_cmdline() { # nextos build_nextos_cmdline # finalos # trans 需要 finalos_distro 识别是安装 alpine 还是其他系统 if [ "$distro" = alpine ]; then finalos_distro=alpine fi if [ -n "$finalos_distro" ]; then build_finalos_cmdline fi # extra build_extra_cmdline cmdline="$nextos_cmdline $finalos_cmdline $extra_cmdline" } # 脚本可能多次运行，先清理之前的残留 mkdir_clear() { local dir=$1 if [ -z "$dir" ] || [ "$dir" = / ]; then return fi # 再次运行时，有可能 mount 了 btrfs root，因此先要 umount_all # 但目前不需要 mount ，因此用不到 # umount_all "$dir" rm -rf "$dir" mkdir -p "$dir" } mod_initrd_debian_kali() { # hack 1 # 允许设置 ipv4 onlink 网关 sed -Ei 's,&&( onlink=),||\1,' etc/udhcpc/default.script # hack 2 # 强制使用 screen # shellcheck disable=SC1003,SC2016 { echo 'if false && : \' | insert_into_file lib/debian-installer.d/S70menu before 'if [ -x "$bterm" ]' -F echo 'if true || : \' | insert_into_file lib/debian-installer.d/S70menu before 'if [ -x "$screen_bin" -a' -F } # hack 3 # 修改 /var/lib/dpkg/info/netcfg.postinst 运行我们的脚本 netcfg() { #!/bin/sh # shellcheck source=/dev/null . /usr/share/debconf/confmodule db_progress START 0 5 debian-installer/netcfg/title : get_ip_conf_cmd # 运行 trans.sh，保存配置 db_progress INFO base-installer/progress/netcfg # 添加 || exit ，可以在 debian installer 不兼容 /trans.sh 语法时强制报错 # exit 不带参数，返回值为 || 前面命令的返回值 sh /trans.sh || exit db_progress STEP 1 db_progress STOP } postinst=var/lib/dpkg/info/netcfg.postinst get_function_content netcfg >$postinst get_ip_conf_cmd | insert_into_file $postinst after ": get_ip_conf_cmd" # cat $postinst # hack 4 # 修改 udeb 依赖 # 直接覆盖 net-retriever，方便调试 # curl -Lo /usr/lib/debian-installer/retriever/net-retriever $confhome/net-retriever change_priority() { while IFS= read -r line; do if [[ "$line" = Package:* ]]; then package=$(echo "$line" | cut -d' ' -f2-) elif [[ "$line" = Priority:* ]]; then # shellcheck disable=SC2154 if [ "$line" = "Priority: standard" ]; then for p in $disabled_list; do if [ "$package" = "$p" ]; then line="Priority: optional" break fi done elif [[ "$package" = ata-modules* ]]; then # 改成强制安装 # 因为是 pata-modules sata-modules scsi-modules 的依赖 # 但我们没安装它们，也就不会自动安装 ata-modules line="Priority: standard" fi fi echo "$line" done } # shellcheck disable=SC2012 kver=$(ls -d lib/modules/* | awk -F/ '{print $NF}') net_retriever=usr/lib/debian-installer/retriever/net-retriever # shellcheck disable=SC2016 sed -i 's,>> "$1",| change_priority >> "$1",' $net_retriever insert_into_file $net_retriever after '#!/bin/sh' <$deb_list fi # 下载 deb/udeb deb_path=$(grep -F "/${package}_" "$deb_list") curl -Lo $tmp/tmp.deb http://$mirror/"$deb_path" if false; then # 使用 dpkg # cygwin 没有 dpkg install_pkg dpkg dpkg -x $tmp/tmp.deb $extract_dir else # 使用 ar tar xz # cygwin 需安装 binutils # centos7 ar 不支持 --output install_pkg ar tar xz (cd $tmp && ar x $tmp/tmp.deb) tar xf $tmp/data.tar.xz -C $extract_dir fi } cp_debian_kali_driver() { # debian 13 的 linux-image.deb 有 /usr/lib 没有 /lib # debian 13 的 scsi-modules.udeb 没有 /usr/lib 有 /lib local src_drivers_dir=$1/lib/modules/$kver/kernel/drivers if ! [ -d "$src_drivers_dir" ]; then local src_drivers_dir=$1/usr/lib/modules/$kver/kernel/drivers fi local extra_drivers=$2 # 各个版本的 debian/kali installer initrd 都有 /lib local dst_drivers_dir=$initrd_dir/lib/modules/$kver/kernel/drivers ( cd $src_drivers_dir for driver in $extra_drivers; do # debian 模块没有压缩 # kali 模块有压缩 # 因此要有 * if ! find $dst_drivers_dir -name "$driver.ko*" | grep -q .; then echo "adding driver: $driver" file=$(find . -name "$driver.ko*" | grep .) cp -fv --parents "$file" "$dst_drivers_dir" fi done ) } # 不用在 windows 判断是哪种硬盘控制器，因为 256M 运行 windows 只可能是 xp，而脚本本来就不支持 xp # 在 debian installer 中判断能否用云内核 create_can_use_cloud_kernel_sh can_use_cloud_kernel.sh # 下载 fix-eth-name 脚本 curl -LO "$confhome/fix-eth-name.sh" curl -LO "$confhome/fix-eth-name.service" # 有段时间 kali initrd 删除了原版 wget # 但 initrd 的 busybox wget 又不支持 https # 因此改成在这里下载 curl -LO "$confhome/get-xda.sh" curl -LO "$confhome/ttys.sh" if [ -n "$frpc_config" ]; then curl -LO "$confhome/get-frpc-url.sh" curl -LO "$confhome/frpc.service" fi # 可以节省一点内存？ echo 'export DEBCONF_DROP_TRANSLATIONS=1' | insert_into_file lib/debian-installer/menu before 'exec debconf' # 还原 kali netinst.iso 的 simple-cdd 机制 # 主要用于调用 kali.postinst 设置 zsh 为默认 shell # 但 mini.iso 又没有这种机制 # https://gitlab.com/kalilinux/build-scripts/kali-live/-/raw/main/kali-config/common/includes.installer/kali-finish-install?ref_type=heads # https://salsa.debian.org/debian/simple-cdd/-/blob/master/debian/14simple-cdd?ref_type=heads # https://http.kali.org/pool/main/s/simple-cdd/simple-cdd-profiles_0.6.9_all.udeb if [ "$distro" = kali ]; then # 但我们没有使用 iso，因此没有 kali.postinst，需要另外下载 mkdir -p cdrom/simple-cdd curl -Lo cdrom/simple-cdd/kali.postinst https://gitlab.com/kalilinux/build-scripts/kali-live/-/raw/main/kali-config/common/includes.installer/kali-finish-install?ref_type=heads chmod a+x cdrom/simple-cdd/kali.postinst fi if [ "$distro" = debian ] && is_debian_elts; then curl -Lo usr/share/keyrings/debian-archive-keyring.gpg https://deb.freexian.com/extended-lts/archive-key.gpg fi # 提前下载 sshd # 以便在配置下载源之前就可以启动 sshd mkdir_clear $tmp/sshd download_and_extract_deb udeb openssh-server-udeb $tmp/sshd cp -r $tmp/sshd/* . # 提前下载 fdisk # 因为 fdisk-udeb 包含 fdisk 和 sfdisk，提前下载可减少占用 mkdir_clear $tmp/fdisk download_and_extract_deb udeb fdisk-udeb $tmp/fdisk cp -f $tmp/fdisk/usr/sbin/fdisk usr/sbin/ # 下载 websocketd # debian 11+ 才有 websocketd if [ "$distro" = kali ] || { [ "$distro" = debian ] && [ "$releasever" -ge 11 ]; }; then mkdir_clear $tmp/websocketd download_and_extract_deb deb websocketd $tmp/websocketd cp -f $tmp/websocketd/usr/bin/websocketd usr/bin/ fi # 提前下载 pci-hyperv # udeb 没有这个模块 curl https://deb.debian.org/debian/dists/stable/main/Contents-udeb-amd64.gz | zcat | grep pci-hyperv # 缺少这个模块 azure 会找不到 nvme 硬盘 # kali 的 pci-hyperv/pci-hyperv-intf 已嵌入到内核，不需要下载 # 用到 pci-hyperv 才需要下载，因为 # 1. azure 普通网卡、scsi 硬盘不需要这个模块 # 2. 没有这个模块会缺少加速网卡，但还有 hyperv 合成网卡，可以正常上网 if { is_in_windows && wmic PATH Win32_PnPEntity where "DeviceID like 'VMBUS\\\\{44C4F61D-4444-4400-9D52-802E27EDE19F}\\\\%'" | grep -q . || [ -d /sys/module/pci_hyperv ]; } && # 可能在 host 或 controller 文件夹 ! ls lib/modules/$kver/kernel/drivers/pci/*/pci-hyperv.ko* >/dev/null 2>&1 && ! grep -Fq /pci-hyperv.ko lib/modules/$kver/modules.builtin; then mkdir_clear $tmp/linux-image-$kver download_and_extract_deb deb linux-image-$kver $tmp/linux-image-$kver cp_debian_kali_driver $tmp/linux-image-$kver pci-hyperv fi # >256M 或者当前系统是 windows if [ $ram_size -gt 256 ] || is_in_windows; then sed -i '/^pata-modules/d' $net_retriever sed -i '/^sata-modules/d' $net_retriever sed -i '/^scsi-modules/d' $net_retriever else # <=256M 极限优化 find_main_disk extra_drivers= for driver in $(get_disk_drivers $xda); do echo "using driver: $driver" case $driver in nvme) extra_drivers+=" nvme nvme-core" # debian 13+ / kali 有 nvme-auth 模块 # 添加后才能识别 nvme 硬盘 if grep -q nvme-auth lib/modules/$kver/modules.order; then extra_drivers+=" nvme-auth" fi ;; # xen 的横杠特别不同 xen_blkfront) extra_drivers+=" xen-blkfront" ;; xen_scsifront) extra_drivers+=" xen-scsifront" ;; virtio_blk | virtio_scsi | hv_storvsc | vmw_pvscsi) extra_drivers+=" $driver" ;; pata_legacy) sed -i '/^pata-modules/d' $net_retriever ;; # 属于 pata-modules ata_piix) sed -i '/^sata-modules/d' $net_retriever ;; # 属于 sata-modules ata_generic) ;; # 属于 ata-modules，不用处理，因为我们设置强制安装了 ata-modules esac done # extra drivers # xen 还需要以下两个？ # kernel/drivers/xen/xen-scsiback.ko # kernel/drivers/block/xen-blkback/xen-blkback.ko # udeb 没有这个模块 curl https://deb.debian.org/debian/dists/stable/main/Contents-udeb-amd64.gz | zcat | grep xen if [ -n "$extra_drivers" ]; then mkdir_clear $tmp/scsi download_and_extract_deb udeb scsi-modules-$kver-di $tmp/scsi cp_debian_kali_driver $tmp/scsi "$extra_drivers" fi fi # amd64) # level1=737 # MT=754108, qemu: -m 780 # level2=424 # MT=433340, qemu: -m 460 # min=316 # MT=322748, qemu: -m 350 # 将 use_level 2 9 修改为 use_level 1 # x86 use_level 2 会出现 No root file system is defined. # arm 即使 use_level 1 也会出现 No root file system is defined. sed -i 's/use_level=[29]/use_level=1/' lib/debian-installer-startup.d/S15lowmem # hack 3 # 修改 trans.sh # 1. 直接调用 create_ifupdown_config # shellcheck disable=SC2154 insert_into_file $initrd_dir/trans.sh after '^: main' < > # 5. debian 11/12 initrd 无法识别 < < ，注意可能分两行写 # 6. debian 11 initrd 无法识别 set -E # 7. debian 11 initrd 无法识别 trap ERR # 8. debian 9 initrd 无法识别 ${string//find/replace} # 9. debian 12 initrd 无法识别 . <( # 删除或注释，可能会导致空方法而报错，因此改为替换成'\n: #' replace='\n: #' sed -Ei \ -e "s/> >/$replace/" \ -e "s/< $1 $(get_function get_drivers) $(get_function get_net_drivers) $(get_function get_disk_drivers) $(get_function can_use_cloud_kernel) can_use_cloud_kernel "\$@" EOF } get_ip_conf_cmd() { collect_netconf >&2 is_in_china && is_in_china=true || is_in_china=false sh=/initrd-network.sh if is_found_ipv4_netconf && is_found_ipv6_netconf && [ "$ipv4_mac" = "$ipv6_mac" ]; then echo "'$sh' '$ipv4_mac' '$ipv4_addr' '$ipv4_gateway' '$ipv6_addr' '$ipv6_gateway' '$is_in_china' '$ipv6_extra_addrs'" else if is_found_ipv4_netconf; then echo "'$sh' '$ipv4_mac' '$ipv4_addr' '$ipv4_gateway' '' '' '$is_in_china' ''" fi if is_found_ipv6_netconf; then echo "'$sh' '$ipv6_mac' '' '' '$ipv6_addr' '$ipv6_gateway' '$is_in_china' '$ipv6_extra_addrs'" fi fi } mod_initrd_alpine() { # hack 1 v3.19 和之前的 virt 内核需添加 ipv6 模块 if virt_dir=$(ls -d $initrd_dir/lib/modules/*-virt 2>/dev/null); then ipv6_dir=$virt_dir/kernel/net/ipv6 if ! [ -f $ipv6_dir/ipv6.ko ] && ! grep -q ipv6 $initrd_dir/lib/modules/*/modules.builtin; then mkdir -p $ipv6_dir modloop_file=$tmp/modloop_file modloop_dir=$tmp/modloop_dir curl -Lo $modloop_file $nextos_modloop if is_in_windows; then # cygwin 没有 unsquashfs 7z e $modloop_file ipv6.ko -r -y -o$ipv6_dir else install_pkg unsquashfs mkdir_clear $modloop_dir unsquashfs -f -d $modloop_dir $modloop_file 'modules/*/kernel/net/ipv6/ipv6.ko' find $modloop_dir -name ipv6.ko -exec cp {} $ipv6_dir/ \; fi fi fi # hack 下载 dhcpcd # shellcheck disable=SC2154 download_and_extract_apk "$nextos_releasever" dhcpcd "$initrd_dir" sed -i -e '/^slaac private/s/^/#/' -e '/^#slaac hwaddr/s/^#//' $initrd_dir/etc/dhcpcd.conf # hack 2 /usr/share/udhcpc/default.script # 脚本被调用的顺序 # udhcpc: deconfig # udhcpc: bound # udhcpc6: deconfig # udhcpc6: bound # shellcheck disable=SC2329 udhcpc() { if [ "$1" = deconfig ]; then return fi if [ "$1" = bound ] && [ -n "$ipv6" ]; then # shellcheck disable=SC2154 ip -6 addr add "$ipv6" dev "$interface" ip link set dev "$interface" up return fi } get_function_content udhcpc | insert_into_file usr/share/udhcpc/default.script after 'deconfig\|renew\|bound' # 允许设置 ipv4 onlink 网关 sed -Ei 's,(0\.0\.0\.0\/0),"\1 onlink",' usr/share/udhcpc/default.script # hack 3 网络配置 # alpine 根据 MAC_ADDRESS 判断是否有网络 # https://github.com/alpinelinux/mkinitfs/blob/c4c0115f9aa5aa8884c923dc795b2638711bdf5c/initramfs-init.in#L914 insert_into_file init after 'configure_ip\(\)' <\$sysroot/etc/local.d/trans.start # wget --no-check-certificate -O \$sysroot/etc/local.d/trans.start $confhome/trans.sh cp /trans.sh \$sysroot/etc/local.d/trans.start chmod a+x \$sysroot/etc/local.d/trans.start ln -s /etc/init.d/local \$sysroot/etc/runlevels/default/ # 配置 + 自定义驱动 for dir in /configs /custom_drivers; do if [ -d \$dir ]; then cp -r \$dir \$sysroot/ rm -rf \$dir fi done EOF # 判断云镜像 debain 能否用云内核 if is_distro_like_debian; then create_can_use_cloud_kernel_sh can_use_cloud_kernel.sh insert_into_file init before '^exec (/bin/busybox )?switch_root' <$initrd_dir/configs/ssh_keys else save_password $initrd_dir/configs fi if [ -n "$frpc_config" ]; then cat "$frpc_config" >$initrd_dir/configs/frpc.conf fi # 收集 cloud-data 打包进 initrd if [ -n "$cloud_data" ]; then mkdir -p $initrd_dir/configs/cloud-data if [ -d "$cloud_data" ]; then # 本地目录：直接复制 cp "$cloud_data"/* $initrd_dir/configs/cloud-data/ else # URL：在 host 下载 for f in user-data meta-data network-config; do curl -fsSL "$cloud_data/$f" -o "$initrd_dir/configs/cloud-data/$f" 2>/dev/null || true done fi # 校验：至少要有 user-data [ -f $initrd_dir/configs/cloud-data/user-data ] || error_and_exit "--cloud-data must contain user-data" cloud_data_files=$(ls $initrd_dir/configs/cloud-data/ | tr '\n' ' ') fi if is_distro_like_debian $nextos_distro; then mod_initrd_debian_kali else mod_initrd_$nextos_distro fi # 添加自定义 windows 驱动 if [ "$distro" = windows ] && [ -n "$custom_infs" ]; then # shellcheck disable=SC1090 . <(curl -L $confhome/windows-driver-utils.sh) echo "$custom_infs" | while read -r inf; do parse_inf_and_cp_driever "$inf" "$initrd_dir/custom_drivers" "$basearch_alt" true done fi # alpine live 不精简 initrd # 因为不知道用户想干什么，可能会用到精简的文件 if is_virt && ! is_alpine_live; then remove_useless_initrd_files fi if [ "$hold" = 0 ]; then info 'hold 0' echo "Edit $tmp if needed." read -r -p 'Press Enter to continue...' fi # 重建 # 注意要用 cpio -H newc 不要用 cpio -c ，不同版本的 -c 作用不一样，很坑 # -c Use the old portable (ASCII) archive format # -c Identical to "-H newc", use the new (SVR4) # portable format.If you wish the old portable # (ASCII) archive format, use "-H odc" instead. find . | cpio --quiet -o -H newc -R 0:0 | gzip -1 >/reinstall-initrd cd - >/dev/null } remove_useless_initrd_files() { info "slim initrd" # 显示精简前的大小 du -sh . # 删除 initrd 里面没用的文件/驱动 rm -rf bin/brltty rm -rf etc/brltty rm -rf sbin/wpa_supplicant rm -rf usr/lib/libasound.so.* rm -rf usr/share/alsa ( cd lib/modules/*/kernel/drivers/net/ethernet/ for item in *; do case "$item" in # 甲骨文 arm 用自定义镜像支持设为 mlx5 vf 网卡，且不是 azure 那样显示两个网卡 # https://debian.pkgs.org/13/debian-main-amd64/linux-image-6.12.43+deb13-cloud-amd64_6.12.43-1_amd64.deb.html amazon | google | mellanox | realtek | pensando) ;; intel) ( cd "$item" for sub_item in *; do case "$sub_item" in # 有 e100.ko e1000文件夹 e1000e文件夹 e100* | lib* | *vf | idpf) ;; *) rm -rf $sub_item ;; esac done ) ;; *) rm -rf $item ;; esac done ) ( cd lib/modules/*/kernel for item in \ net/mac80211 \ net/wireless \ net/bluetooth \ drivers/hid \ drivers/mtd \ drivers/usb \ drivers/ssb \ drivers/mfd \ drivers/bcma \ drivers/pcmcia \ drivers/parport \ drivers/platform \ drivers/staging \ drivers/net/usb \ drivers/net/bonding \ drivers/net/wireless \ drivers/input/rmi4 \ drivers/input/keyboard \ drivers/input/touchscreen \ drivers/bus/mhi \ drivers/char/pcmcia \ drivers/misc/cardreader; do rm -rf $item done ) # 显示精简后的大小 du -sh . } get_unix_path() { if is_in_windows; then # 输入的路径是 / 开头也没问题 cygpath -u "$1" else printf '%s' "$1" fi } init_basearch() { # 设置 basearch if is_in_windows; then # x86-based PC # x64-based PC # ARM-based PC # ARM64-based PC # 三种方法都不需要管理员运行 if false; then # 如果机器没有 wmic 则需要下载 wmic.ps1，但此时未判断国内外，还是用国外源 basearch=$(wmic ComputerSystem get SystemType | grep '=' | cut -d= -f2 | cut -d- -f1) elif true; then basearch=$(reg query "HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\Environment" /v PROCESSOR_ARCHITECTURE | grep . | tail -1 | awk '{print $NF}') else # 也可以用 basearch=$(cmd /c "if defined PROCESSOR_ARCHITEW6432 (echo %PROCESSOR_ARCHITEW6432%) else (echo %PROCESSOR_ARCHITECTURE%)") fi else # archlinux 云镜像没有 arch 命令 # https://en.wikipedia.org/wiki/Uname basearch=$(uname -m) fi # 统一架构名称，并强制 64 位 case "$(echo $basearch | to_lower)" in i?86 | x64 | x86* | amd64) basearch=x86_64 basearch_alt=amd64 ;; arm* | aarch64) basearch=aarch64 basearch_alt=arm64 ;; *) error_and_exit "Unsupported arch: $basearch" ;; esac } init_confhome() { # 设置 confhome # 未测试 if false && [[ "$confhome" = http*://raw.githubusercontent.com/* ]]; then repo=$(echo $confhome | cut -d/ -f4,5) branch=$(echo $confhome | cut -d/ -f6) # 避免脚本更新时，文件不同步造成错误 if [ -z "$commit" ]; then commit=$(curl -L https://api.github.com/repos/$repo/git/refs/heads/$branch | grep '"sha"' | grep -Eo '[0-9a-f]{40}') fi # shellcheck disable=SC2001 confhome=$(echo "$confhome" | sed "s/main$/$commit/") fi # 设置国内代理 # 要在使用 wmic 前设置，否则国内机器会从国外源下载 wmic.ps1 # gitee 不支持ipv6 # jsdelivr 有12小时缓存 # https://github.com/XIU2/UserScript/blob/master/GithubEnhanced-High-Speed-Download.user.js#L31 if is_in_china; then if [ -n "$confhome_cn" ]; then confhome=$confhome_cn elif [ -n "$github_proxy" ] && [[ "$confhome" = http*://raw.githubusercontent.com/* ]]; then confhome=${confhome/http:\/\//https:\/\/} confhome=${confhome/https:\/\/raw.githubusercontent.com/$github_proxy} fi fi } remove_exist_reinstall_efi_dir() { info "remove exist reinstall efi dir" local dir='' dirs='' if is_in_windows; then dirs=$(get_efi_dir_in_windows) else dirs=$(get_maybe_efi_dirs_in_linux) fi # 后期可能会将 reinstall-vmlinuz 和 reinstall-initrd 放到 efi 分区下 # 因此也删除它们 for dir in $dirs; do rm -f "$dir/reinstall-vmlinuz" rm -f "$dir/reinstall-initrd" done find $dirs -type f \ \( -ipath '*/EFI/reinstall/grubx64.efi' \ -o -ipath '*/EFI/reinstall/grubaa64.efi' \ -o -ipath '*/EFI/reinstall/netboot.xyz.efi' \ -o -ipath '*/EFI/reinstall/netboot.xyz-arm64.efi' \) | while IFS= read -r efi_file; do reinstall_dir=$(dirname "$efi_file") echo "removing $reinstall_dir" rm -rf "$reinstall_dir" done } # linux windows # bios /boot/grub*/custom.cfg /cygdrive/c/grub/grub.cfg # efi efi分区的/EFI/reinstall/grub.cfg /cygdrive/c/grub.cfg # efi文件夹 efi分区的/EFI/reinstall/ /cygdrive/a/EFI/reinstall/ init_bootloader_facts() { if is_in_windows; then # windows if is_efi; then _grub_cfg=/cygdrive/$c/grub.cfg else _grub_cfg=/cygdrive/$c/grub/grub.cfg fi target_cfg=$_grub_cfg else # linux if is_efi; then efi_dir=$(get_maybe_efi_dirs_in_linux | head -1) _grub_cfg=$efi_dir/EFI/reinstall/grub.cfg target_cfg=$_grub_cfg else if is_mbr_using_grub; then if is_have_cmd update-grub; then # alpine debian ubuntu _grub_cfg=$(grep -o '[^ ]*grub.cfg' "$(get_cmd_path update-grub)" | head -1) else # 找出主配置文件（含有menuentry|blscfg） # 有没有可能在 efi 目录? _grub_cfg=$(find_grub_extlinux_cfg '/boot/grub*' grub.cfg 'menuentry|blscfg') fi target_cfg=$(dirname $_grub_cfg)/custom.cfg if is_have_cmd grub2-mkconfig; then grub=grub2 elif is_have_cmd grub-mkconfig; then grub=grub else error_and_exit "grub not found" fi else # extlinux _extlinux_cfg=$(find_grub_extlinux_cfg /boot extlinux.conf LINUX) target_cfg=$_extlinux_cfg fi fi fi } # 重新生成 grub.cfg # 因为有些机子例如hython debian的grub.cfg少了40_custom 41_custom 部分 recreate_grub_or_extlinux_cfg() { # 没用到原机的 grub 和 extlinux # 因此不需要重新生成 grub.cfg 或 extlinux.conf if is_efi || is_in_windows; then return fi if is_mbr_using_grub; then info "recreate grub.cfg" # nixos 手动执行 grub-mkconfig -o /boot/grub/grub.cfg 会丢失系统启动条目 # 正确的方法是修改 configuration.nix 的 boot.loader.grub.extraEntries # 但是修改 configuration.nix 不是很好，因此改成修改 grub.cfg if [ -x /nix/var/nix/profiles/system/bin/switch-to-configuration ]; then # 生成 grub.cfg /nix/var/nix/profiles/system/bin/switch-to-configuration boot # 手动启用 41_custom nixos_grub_home="$(dirname "$(readlink -f "$(get_cmd_path grub-mkconfig)")")/.." $nixos_grub_home/etc/grub.d/41_custom >>"$(dirname "$target_cfg")/grub.cfg" elif is_have_cmd update-grub; then update-grub else $grub-mkconfig -o $target_cfg fi elif is_have_cmd update-extlinux; then # alpine 才有 update-extlinux info "recreate extlinux.conf" update-extlinux else error_and_exit "unsupported bootloader." fi } # 删除之前的 reinstall 启动项 remove_exist_reinstall() { info "remove exist reinstall" rm -f /reinstall-vmlinuz /reinstall-initrd rm -f /boot/reinstall-vmlinuz /boot/reinstall-initrd if is_in_windows; then rm -f /cygdrive/$c/reinstall-vmlinuz /cygdrive/$c/reinstall-initrd fi # 使用外部 grub 时，删除外部 grub.cfg if ! is_use_local_grub_extlinux; then rm -f "$target_cfg" fi if is_in_windows; then if is_efi; then # efi remove_exist_reinstall_efi_dir bcdedit /set '{fwbootmgr}' bootsequence '{bootmgr}' bcdedit /enum bootmgr | grep -a -B3 'reinstall' | awk '{print $2}' | grep '{.*}' | xargs -I {} cmd /c bcdedit /delete {} else # bios id='{1c41f649-1637-52f1-aea8-f96bfebeecc8}' if bcdedit /enum all | grep -a "$id"; then bcdedit /delete "$id" fi fi else if is_efi; then # efi # 题外话 # 1. 如果用本机的 grub，则 custom.cfg 可能在 efi 分区，也可能在 /boot 分区 # 2. 有可能没有 /boot 文件夹 # 如果 nixos 的 efi 挂载到 /efi，则不会生成 /boot 文件夹 # 3. find 不存在的路径会报错 remove_exist_reinstall_efi_dir install_pkg efibootmgr efibootmgr | grep -q 'BootNext:' && efibootmgr --quiet --delete-bootnext efibootmgr | grep_efi_entry | grep 'reinstall' | grep_efi_index | xargs -I {} efibootmgr --quiet --bootnum {} --delete-bootnum else # bios # 删除 reinstall 条目 if [ -f "$target_cfg" ]; then sed -i "/^$BOOT_ENTEY_START_MARK/,/^$BOOT_ENTEY_END_MARK/d" "$target_cfg" fi # 清除 next entry if is_use_local_grub; then $grub-editenv - unset next_entry elif is_use_local_extlinux; then extlinux --clear-once "$(dirname "$target_cfg")" fi # 重新创建 grub.cfg / extlinux.conf recreate_grub_or_extlinux_cfg fi fi } reset_and_exit() { from_ctrl_c=${1:-false} # info if $from_ctrl_c; then info "Caught Ctrl+C, reseting..." fi # 清除 remove_exist_reinstall rm -rf "$tmp" echo "reset done." # 退出 if $from_ctrl_c; then exit 1 else exit 0 fi } # 脚本入口 # windows 环境下的额外初始化 if is_in_windows; then # win系统盘 c=$(echo $SYSTEMDRIVE | cut -c1) # 64位系统 + 32位cmd/cygwin，需要添加 PATH，否则找不到64位系统程序，例如bcdedit sysnative=$(cygpath -u $WINDIR\\Sysnative) if [ -d $sysnative ]; then PATH=$PATH:$sysnative fi # 更改 windows 命令输出语言为英文 # chcp 会清屏 mode.com con cp select=437 >/dev/null # 为 windows 程序输出删除 cr for exe in $WINDOWS_EXES; do # 如果我们覆写了 wmic()，则先将 wmic() 重命名为 _wmic() if get_function $exe >/dev/null 2>&1; then eval "_$(get_function $exe)" fi # 使用以下方法重新生成 wmic() # 调用链：wmic() -> run_with_del_cr(wmic) -> _wmic() -> command wmic eval "$exe(){ $(get_function_content run_with_del_cr_template | sed "s/\$exe/$exe/g") }" done fi # 检查 root if is_in_windows; then # 64位系统 + 32位cmd/cygwin，运行 openfiles 报错：目标系统必须运行 32 位的操作系统 if ! fltmc >/dev/null 2>&1; then error_and_exit "Please run as administrator." fi else if [ "$EUID" -ne 0 ]; then error_and_exit "Please run as root." fi fi # 不支持 Live OS 下运行 if mount | grep -q 'tmpfs on / type tmpfs'; then error_and_exit "Can't run this script in Live OS." fi # 不支持容器虚拟化 if is_in_container; then error_and_exit "Not Supported OS in Container.\nPlease use https://github.com/LloydAsp/OsMutation" fi # 不支持安全启动 if is_secure_boot_enabled; then error_and_exit "Please disable secure boot first." fi # 整理参数 long_opts= for o in ci installer debug minimal allow-ping force-cn help \ add-driver: \ hold: sleep: \ iso: \ image-name: \ boot-wim: \ img: \ cloud-data: \ lang: \ user: username: \ passwd: password: \ ssh-port: \ ssh-key: public-key: \ rdp-port: \ web-port: http-port: \ allow-ping: \ commit: \ frpc-conf: frpc-config: \ target-disk: \ force-boot-mode: \ force-old-windows-setup:; do [ -n "$long_opts" ] && long_opts+=, long_opts+=$o done # 使用 getopt 解析参数 if ! ORIGINAL_OPTS=$(getopt -n $0 -o "h,x" --long "$long_opts" -- "$@"); then exit 1 fi # 第一遍扫描，验证要安装的系统和版本 eval set -- "$ORIGINAL_OPTS" while true; do case "$1" in -x | --debug) set -x shift ;; --) shift verify_os_name "$@" break ;; *) shift ;; esac done # 初始化重要变量 # wmic 随时会用到 # wmic 需要下载 wmic.ps1，需要从 confhome 得到，要先将 confhome 改成国内 # 而 wmic.ps1 又放在 $tmp 目录，因此要先创建临时目录 # 处理 --frpc-config 时会下载文件，因此在处理参数前就创建临时目录 mkdir_clear "$tmp" init_basearch init_confhome init_bootloader_facts if [ "$distro" = reset ]; then reset_and_exit fi # 安装必备组件 install_pkg curl grep # 第二遍扫描，处理参数 eval set -- "$ORIGINAL_OPTS" # shellcheck disable=SC2034 while true; do case "$1" in -x | --debug) # 第一遍扫描已处理 shift ;; -h | --help) usage_and_exit ;; --commit) commit=$2 shift 2 ;; --ci) cloud_image=1 unset installer shift ;; --installer) installer=1 unset cloud_image shift ;; --minimal) minimal=1 shift ;; --allow-ping) allow_ping=1 shift ;; --force-cn) # 仅为了方便测试 force_cn=1 shift ;; --hold | --sleep) if ! { [ "$2" = 0 ] || [ "$2" = 1 ] || [ "$2" = 2 ]; }; then error_and_exit "Invalid $1 value: $2" fi hold=$2 shift 2 ;; --frpc-conf | --frpc-config) [ -n "$2" ] || error_and_exit "Need value for $1" case "$(to_lower <<<"$2")" in http://* | https://*) frpc_config_url=$2 frpc_config=$tmp/frpc.conf # 用 file 识别文件类型？ if ! curl -L "$frpc_config_url" -o "$frpc_config"; then error_and_exit "Can't get frpc config from $frpc_config_url" fi ;; *) # windows 路径转换 if ! { frpc_config=$(get_unix_path "$2") && [ -f "$frpc_config" ]; }; then error_and_exit "File not exists: $2" fi ;; esac # 转为绝对路径 frpc_config=$(readlink -f "$frpc_config") shift 2 ;; --force-boot-mode) if ! { [ "$2" = bios ] || [ "$2" = efi ]; }; then error_and_exit "Invalid $1 value: $2" fi force_boot_mode=$2 shift 2 ;; --user | --username) [ -n "$2" ] || error_and_exit "Need value for $1" username="$(printf "%s" "$2" | trim)" assert_username_valid shift 2 ;; --passwd | --password) [ -n "$2" ] || error_and_exit "Need value for $1" password=$2 shift 2 ;; --ssh-key | --public-key) ssh_key_error_and_exit() { error "$1" cat <=1g # el7 aarch64 >=1.5g # el8/9/fedora 任何架构 >=2g if is_netboot_xyz || { ! is_use_cloud_image && { [ "$distro" = "alpine" ] || is_distro_like_debian || { is_distro_like_redhat && [ $releasever -eq 7 ] && [ $ram_size -ge 1024 ] && [ $basearch = "x86_64" ]; } || { is_distro_like_redhat && [ $releasever -eq 7 ] && [ $ram_size -ge 1536 ] && [ $basearch = "aarch64" ]; } || { is_distro_like_redhat && [ $releasever -ge 8 ] && [ $ram_size -ge 2048 ]; } }; }; then setos nextos $distro $releasever else # alpine 作为中间系统时，使用最新版 alpine_ver_for_trans=$(get_latest_distro_releasever alpine) setos finalos $distro $releasever setos nextos alpine $alpine_ver_for_trans fi # 有的机器开启了 kexec，例如腾讯云轻量 debian，要禁用 if [ -f /etc/default/kexec ]; then sed -i 's/LOAD_KEXEC=true/LOAD_KEXEC=false/' /etc/default/kexec fi # 一切就绪，正式下载内核和添加引导项 # 先删除之前的启动项，再设置 trap # 暂时不用 trap，因为 bat 下无效 remove_exist_reinstall # trap 'reset_and_exit true' SIGINT # 下载 netboot.xyz / 内核 # shellcheck disable=SC2154 if is_netboot_xyz; then if is_efi; then if is_in_windows; then add_efi_entry_in_windows $nextos_efi else add_efi_entry_in_linux $nextos_efi fi else curl -Lo /reinstall-vmlinuz $nextos_vmlinuz fi else # 下载 nextos 内核 info download vmlnuz and initrd curl -Lo /reinstall-vmlinuz $nextos_vmlinuz curl -Lo /reinstall-initrd $nextos_initrd if is_use_firmware; then curl -Lo /reinstall-firmware $nextos_firmware fi fi # 修改 alpine debian kali initrd if [ "$nextos_distro" = alpine ] || is_distro_like_debian "$nextos_distro"; then mod_initrd fi # 将内核/netboot.xyz.lkrn 放到正确的位置 if false && is_need_boot_vmlinuz; then if is_in_windows; then cp -f /reinstall-vmlinuz /cygdrive/$c/ is_have_initrd && cp -f /reinstall-initrd /cygdrive/$c/ else if is_os_in_btrfs && is_os_in_subvol; then cp_to_btrfs_root /reinstall-vmlinuz is_have_initrd && cp_to_btrfs_root /reinstall-initrd fi fi fi # 需要使用 vmlinuz/initrd 引导的情况 if is_need_boot_vmlinuz; then # win 使用外部 grub if is_in_windows; then install_grub_win else # linux efi 使用外部 grub，因为 # 1. 原系统 grub 可能没有去除 aarch64 内核 magic number 校验 # 2. 原系统可能不是用 grub if is_efi; then install_grub_linux_efi fi fi # 找到 /reinstall-vmlinuz /reinstall-initrd 的绝对路径 if is_in_windows; then # dir=/cygwin/ dir=$(cygpath -m / | cut -d: -f2-)/ else # extlinux + 单独的 boot 分区 # 把内核文件放在 extlinux.conf 所在的目录 if is_use_local_extlinux && is_boot_in_separate_partition; then dir= else # 获取当前系统根目录在 btrfs 中的绝对路径 if is_os_in_btrfs; then # btrfs subvolume show / # 输出可能是 / 或 root 或 @/.snapshots/1/snapshot dir=$(btrfs subvolume show / | head -1) if ! [ "$dir" = / ]; then dir="/$dir/" fi else dir=/ fi fi fi vmlinuz=${dir}reinstall-vmlinuz initrd=${dir}reinstall-initrd firmware=${dir}reinstall-firmware # 设置 linux initrd 命令 if is_use_local_extlinux; then linux_cmd=LINUX initrd_cmd=INITRD else if is_netboot_xyz; then linux_cmd=linux16 initrd_cmd=initrd16 else linux_cmd=linux initrd_cmd=initrd fi fi # 设置 cmdlind initrds if ! is_netboot_xyz; then find_main_disk build_cmdline initrds="$initrd" if is_use_firmware; then initrds+=" $firmware" fi fi if is_use_local_extlinux; then info extlinux echo "$target_cfg" extlinux_dir="$(dirname "$target_cfg")" # 不起作用 # 好像跟 extlinux --once 有冲突 sed -i "/^MENU HIDDEN/d" "$target_cfg" sed -i "/^TIMEOUT /d" "$target_cfg" del_empty_lines <$target_cfg get_function_content load_grubenv_if_not_loaded >>$target_cfg # 原系统为 openeuler 云镜像，需要添加 --unrestricted，否则要输入密码 del_empty_lines <>$target_cfg # 设置重启引导项 if is_use_local_grub; then $grub-reboot "$(get_entry_name)" fi fi fi info 'info' echo "$distro $releasever" ssh_port=${ssh_port:-22} rdp_port=${rdp_port:-3389} web_port=${web_port:-80} if [ "$distro" = netboot.xyz ]; then : elif [ "$distro" = alpine ] && [ "$hold" = 1 ]; then info "Alpine Live OS" echo "Username: $username" if [ -n "$ssh_keys" ]; then echo "Public Key: $ssh_keys" else echo "Password: $password" fi echo "SSH Port: $ssh_port" elif [ "$distro" = fnos ]; then info "While Install (View Logs)" echo "Username: $username" if [ -n "$ssh_keys" ]; then echo "Public Key: $ssh_keys" else echo "Password: $password" fi echo "SSH Port: $ssh_port" echo "WEB Port: $web_port" info "After Install" echo "安装后不会开启 SSH 服务。" echo "你需要尽快到 http://IP:5666 配置账号密码。" echo echo "SSH Service is disabled after installation." echo "You need to config the username and password on http://IP:5666 as soon as possible." elif [ "$distro" = windows ]; then info "While Install (View Logs)" echo "Username: $username" echo "Password: $password" echo "SSH Port: $ssh_port" echo "WEB Port: $web_port" info "After Install" if is_administrator_username "$username"; then echo "Username: $username (Depends on Windows iso's language)" else echo "Username: $username" fi echo "Password: $password" echo "RDP Port: $rdp_port" elif [ "$distro" = dd ]; then info "While Install (View Logs)" echo "Username: $username" if [ -n "$ssh_keys" ]; then echo "Public Key: $ssh_keys" else echo "Password: $password" fi echo "SSH Port: $ssh_port" echo "WEB Port: $web_port" info "After Install" if [ -n "$cloud_data" ]; then echo "Cloud Data: $cloud_data" echo "Cloud Data Files: $cloud_data_files" else echo "Username: [Depends on image]" echo "Public Key: [Depends on image]" echo "Password: [Depends on image]" echo "SSH Port: [Depends on image]" fi else # 普通 linux info "While Install (View Logs)" echo "Username: $username" if [ -n "$ssh_keys" ]; then echo "Public Key: $ssh_keys" else echo "Password: $password" fi echo "SSH Port: $ssh_port" echo "WEB Port: $web_port" info "After Install" echo "Username: $username" if [ -n "$ssh_keys" ]; then echo "Public Key: $ssh_keys" else echo "Password: $password" fi echo "SSH Port: $ssh_port" fi if is_in_windows; then echo echo 'You can run this command to reboot:' echo 'shutdown /r /t 0' fi echo if [ "$distro" = netboot.xyz ]; then echo '重启后进入 netboot.xyz。' echo "或者现在运行 \"$reinstall_____ reset\" 以清除该引导项。" echo echo 'Reboot to start netboot.xyz.' echo "Or run \"$reinstall_____ reset\" now to clear this boot entry." echo elif [ "$distro" = alpine ] && [ "$hold" = 1 ]; then echo '重启后进入 Alpine Live OS。' echo "或者现在运行 \"$reinstall_____ reset\" 以清除该引导项。" echo echo 'Reboot to start Alpine Live OS.' echo "Or run \"$reinstall_____ reset\" now to clear this boot entry." echo else warn false '警告：重装会清除主硬盘的所有数据，包括所有分区！' echo '重启后开始重装。' echo "或者现在运行 \"$reinstall_____ reset\" 以取消重装。" echo warn false 'Warning: Reinstalling will erase all data on the main disk, including all partitions!' echo 'Reboot to start the reinstallation.' echo "Or run \"$reinstall_____ reset\" now to cancel the reinstallation." fi echo