#!/bin/bash # # .---. . . # | | | # |--- .--. .-. .-. .-.| .-. .--.--. |.-. .-. .--. .-. # | | (.-' (.-' ( | ( )| | | | )( )| | (.-' # ' ' --' --' -' - -' ' ' -' -' -' ' - --' # # Freedom in the Cloud # # Based on bin/freedombox-customize from freedom-maker # # License # ======= # # This program is free software: you can redistribute it and/or modify # it under the terms of the GNU Affero General Public License as published by # the Free Software Foundation, either version 3 of the License, or # (at your option) any later version. # # This program is distributed in the hope that it will be useful, # but WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # GNU Affero General Public License for more details. # # You should have received a copy of the GNU Affero General Public License # along with this program. If not, see . set -e set -x PROJECT_NAME='freedombone' LOCAL_NAME=${PROJECT_NAME} INSTALL_DIR=/root/build COMPLETION_FILE=$HOME/${PROJECT_NAME}-completed.txt PROJECT_REPO="https://github.com/bashrc/${PROJECT_NAME}" VARIANT='full' # username created by default within a debian image GENERIC_IMAGE_USERNAME='fbone' export TEXTDOMAIN=${PROJECT_NAME}-image-customise export TEXTDOMAINDIR="/usr/share/locale" # Whether to minimise the number of decisions during interactive install MINIMAL_INSTALL="yes" MY_USERNAME='debian' MY_PASSWORD="${PROJECT_NAME}" # Minimum number of characters in a password MINIMUM_PASSWORD_LENGTH=10 # IP address of the router (gateway) ROUTER_IP_ADDRESS="192.168.1.254" # The fixed IP address of the Beaglebone Black on your local network BOX_IP_ADDRESS="192.168.1.55" # DNS NAMESERVER1='213.73.91.35' NAMESERVER2='85.214.20.141' # optional configuration file containing freedombone settings CONFIG_FILENAME= # Optional ssh public key to allow SSH_PUBKEY="no" # Whether this is a generic image for mass redistribution on the interwebs GENERIC_IMAGE="no" # default SSH port SSH_PORT=2222 # for mesh installs TRACKER_PORT=6969 # Whether sites are accessible only within a Tor browser ONION_ONLY="no" # Whether to only install debian and nothing else DEBIAN_INSTALL_ONLY="no" # wifi settings WIFI_INTERFACE='wlan0' WIFI_SSID= WIFI_TYPE='wpa2-psk' WIFI_PASSPHRASE= WIFI_HOTSPOT='no' WIFI_NETWORKS_FILE=~/${PROJECT_NAME}-wifi.cfg # Whether to install non-free wifi drivers for the mesh client INSECURE='no' # optional desktop background image for mesh MESH_DESKTOP_BACKGROUND_IMAGE=/usr/local/share/${PROJECT_NAME}_mesh_initial_background.png # The browser application to use BROWSER=midori MESH_INSTALL_DIR=/var/lib # for mesh installs whether to delete all data and generate # a new identity at every shutdown/boot AMNESIC='no' # Whether this is a dedicated gnusocial or postactiv instance SOCIALINSTANCE= # defines the initial keyboard layout KEYBOARD_MAP='gb' # Strings used for setting the username MESH_TITLE=$"Freedombone Mesh" MESH_SET_USERNAME=$"Welcome to the Freedombone mesh.\n\nThe first thing you will need to do is set a username so that other peers can find you." # Whether to enable zeronet on the mesh ENABLE_ZERONET= MESH_TEXT_EDITOR='pluma' PATH=/usr/local/bin:/usr/local/sbin:/usr/bin:/usr/sbin:/bin:/sbin function configure_backports { echo "deb http://${DEBIAN_REPO}/debian/ ${DEBIAN_VERSION}-backports main" >> $rootdir/etc/apt/sources.list } function configure_contrib_repo { if ! grep -q "contrib" $rootdir/etc/apt/sources.list; then chroot "$rootdir" /bin/sed -i "s| main| main contrib|g" /etc/apt/sources.list fi } enable_eatmydata_override() { chroot $rootdir apt-get install -y eatmydata if [ -x $rootdir/usr/bin/eatmydata ] && \ [ ! -f $rootdir/etc/apt/apt.conf.d/95debian-edu-install-dpkg-eatmydata ]; then echo $"info: Adding apt config to call dpkg via eatmydata" printf "#!/bin/sh\nexec eatmydata dpkg \"\$@\"\n" \ > $rootdir/var/tmp/dpkg-eatmydata chmod 755 $rootdir/var/tmp/dpkg-eatmydata cat > $rootdir/etc/apt/apt.conf.d/95debian-edu-install-dpkg-eatmydata < etc/apt/sources.list deb $NEW_MIRROR $SUITE $COMPONENTS deb-src $NEW_MIRROR $SUITE $COMPONENTS #deb http://security.debian.org/ $SUITE/updates main #deb-src http://security.debian.org/ $SUITE/updates main EOF } configure_networking() { chroot "$rootdir" apt-get -yq install resolvconf if [[ "$MACHINE" == "beaglebonewifi" ]]; then # Allow networking over USB in order to configure the # wifi login settings echo '# This file describes the network interfaces available on your system' > $rootdir/etc/network/interfaces echo '# and how to activate them. For more information, see interfaces(5).' >> $rootdir/etc/network/interfaces echo 'source /etc/network/interfaces.d/*' >> $rootdir/etc/network/interfaces echo 'iface usb0 inet static' >> $rootdir/etc/network/interfaces.d/usb echo ' address 192.168.7.2' >> $rootdir/etc/network/interfaces.d/usb echo ' netmask 255.255.255.252' >> $rootdir/etc/network/interfaces.d/usb echo ' network 192.168.7.0' >> $rootdir/etc/network/interfaces.d/usb echo ' gateway 192.168.7.1' >> $rootdir/etc/network/interfaces.d/usb return fi if [[ $DEBIAN_INSTALL_ONLY != "no" ]]; then return fi if [[ $GENERIC_IMAGE == "no" ]]; then echo '# This file describes the network interfaces available on your system' > $rootdir/etc/network/interfaces echo '# and how to activate them. For more information, see interfaces(5).' >> $rootdir/etc/network/interfaces echo 'source /etc/network/interfaces.d/*' >> $rootdir/etc/network/interfaces echo "auto eth0 iface eth0 inet static address $BOX_IP_ADDRESS netmask 255.255.255.0 gateway $ROUTER_IP_ADDRESS" > $rootdir/etc/network/interfaces.d/static hexarray=( 1 2 3 4 5 6 7 8 9 0 a b c d e f ) a=${hexarray[$RANDOM%16]}${hexarray[$RANDOM%16]} b=${hexarray[$RANDOM%16]}${hexarray[$RANDOM%16]} c=${hexarray[$RANDOM%16]}${hexarray[$RANDOM%16]} d=${hexarray[$RANDOM%16]}${hexarray[$RANDOM%16]} e=${hexarray[$RANDOM%16]}${hexarray[$RANDOM%16]} echo "hwaddress ether de:$a:$b:$c:$d:$e" > $rootdir/etc/network/interfaces.d/macaddress fi # configure DNS resolvconf=$rootdir/etc/resolvconf/resolv.conf.d/head echo 'domain localdomain' > $resolvconf echo 'search localdomain' >> $resolvconf echo "nameserver $NAMESERVER1" >> $resolvconf echo "nameserver $NAMESERVER2" >> $resolvconf echo "nameserver $NAMESERVER3" >> $resolvconf echo "nameserver $NAMESERVER4" >> $resolvconf echo "nameserver $NAMESERVER5" >> $resolvconf echo "nameserver $NAMESERVER6" >> $resolvconf chroot "$rootdir" resolvconf -u if [[ $VARIANT != "meshclient" && $VARIANT != "meshusb" ]]; then # change the motd to show further install instructions echo $" .---. . . | | | |--- .--. .-. .-. .-.| .-. .--.--. |.-. .-. .--. .-. | | (.-' (.-' ( | ( )| | | | )( )| | (.-' ' ' --' --' -' - -' ' ' -' -' -' ' - --' Initial base install Your system is not yet installed. To complete the process run the following commands, then enter your details. sudo su ${PROJECT_NAME} menuconfig " > $rootdir/etc/motd else echo $" .---. . . | | | |--- .--. .-. .-. .-.| .-. .--.--. |.-. .-. .--. .-. | | (.-' (.-' ( | ( )| | | | )( )| | (.-' ' ' --' --' -' - -' ' ' -' -' -' ' - --' Freedom in the Mesh " > $rootdir/etc/motd fi } configure_ssh() { if [[ $VARIANT == "mesh"* ]]; then return fi sed -i "s/Port .*/Port ${SSH_PORT}/g" $rootdir/etc/ssh/sshd_config sed -i "s/#Port ${SSH_PORT}/Port ${SSH_PORT}/g" $rootdir/etc/ssh/sshd_config if [[ "$SSH_PUBKEY" != "no" ]]; then if [ ! -d $rootdir/home/$MY_USERNAME/.ssh ]; then mkdir $rootdir/home/$MY_USERNAME/.ssh fi echo "$SSH_PUBKEY" > $rootdir/home/$MY_USERNAME/.ssh/authorized_keys chroot $rootdir /bin/chown -R $MY_USERNAME:$MY_USERNAME /home/$MY_USERNAME/.ssh sed -i 's|PasswordAuthentication.*|PasswordAuthentication no|g' $rootdir/etc/ssh/sshd_config sed -i 's|#PasswordAuthentication no|PasswordAuthentication no|g' $rootdir/etc/ssh/sshd_config echo $"Using ssh public key:" echo $SSH_PUBKEY echo $'Password ssh authentication turned off' fi } create_generic_image() { if [[ $DEBIAN_INSTALL_ONLY != "no" ]]; then return fi if [[ $GENERIC_IMAGE == "no" ]]; then return fi if [ $CONFIG_FILENAME ]; then if [[ "$CONFIG_FILENAME" == *"mesh.cfg"* ]]; then VARIANT="mesh" fi fi # Don't install any configuration. This will be a base system if [[ $VARIANT != "mesh"* ]]; then CONFIG_FILENAME= else touch $rootdir/root/.initial_mesh_setup fi # Stick with the existing login for mesh clients if [[ $VARIANT == "meshclient" || $VARIANT == "meshusb" ]]; then return fi # The presence of this file indicates that the initial # setup has not yet been completed touch $rootdir/home/$MY_USERNAME/.initial_setup chroot $rootdir /bin/chown $MY_USERNAME:$MY_USERNAME /home/$MY_USERNAME/.initial_setup touch $rootdir/root/.initial_setup cat >> $rootdir/home/$MY_USERNAME/.bashrc <> $rootdir/root/.bashrc echo "SSH_PORT=${SSH_PORT}" >> $rootdir/root/.bashrc echo '# initial setup of the system' >> $rootdir/root/.bashrc echo 'if [ -f ~/.initial_setup ]; then' >> $rootdir/root/.bashrc echo ' if [ -f ~/login.txt ]; then' >> $rootdir/root/.bashrc echo ' NEW_USER_PASSWORD=$(printf `cat ~/login.txt`)' >> $rootdir/root/.bashrc echo ' else' >> $rootdir/root/.bashrc echo ' ENTROPY=$(cat /proc/sys/kernel/random/entropy_avail)' >> $rootdir/root/.bashrc echo ' if [ $ENTROPY -lt 500 ]; then' >> $rootdir/root/.bashrc ENTROPY_MESSAGE1=$'Initial setup process' ENTROPY_MESSAGE2=$'Password Generation' ENTROPY_MESSAGE3=$'WARNING: The entropy available on this system is too low to generate a password.\n\nThe installation process cannot continue.' echo " dialog --backtitle \"${ENTROPY_MESSAGE1}\" --title \"${ENTROPY_MESSAGE2}\" --msgbox \"${ENTROPY_MESSAGE3}\" 8 50" >> $rootdir/root/.bashrc echo ' exit' >> $rootdir/root/.bashrc echo ' fi' >> $rootdir/root/.bashrc echo -n ' NEW_USER_PASSWORD=$(openssl rand -base64 32 | tr -dc A-Za-z0-9 | head -c ' >> $rootdir/root/.bashrc echo "${DEFAULT_PASSWORD_LENGTH})" >> $rootdir/root/.bashrc echo ' fi' >> $rootdir/root/.bashrc echo ' echo "${NEW_USER_PASSWORD}" > ~/login.txt' >> $rootdir/root/.bashrc echo ' clear' >> $rootdir/root/.bashrc echo ' echo ""' >> $rootdir/root/.bashrc NEW_LOGIN_PASSWORD_MESSAGE1=$'Your new login password is:' NEW_LOGIN_PASSWORD_MESSAGE2=$'Use it whenever you wish to ssh into this system.' NEW_LOGIN_PASSWORD_MESSAGE3=$'IMPORTANT: Please take a moment to enter the above password into a\npassword manager or write it down somewhere.' PRESS_KEY_MESSAGE=$'Press any key to continue...' echo " echo \"${NEW_LOGIN_PASSWORD_MESSAGE1}\"" >> $rootdir/root/.bashrc echo ' echo ""' >> $rootdir/root/.bashrc echo ' echo " ${NEW_USER_PASSWORD}"' >> $rootdir/root/.bashrc echo ' echo ""' >> $rootdir/root/.bashrc echo " echo \"${NEW_LOGIN_PASSWORD_MESSAGE2}\"" >> $rootdir/root/.bashrc echo ' echo ""' >> $rootdir/root/.bashrc echo " echo \"${NEW_LOGIN_PASSWORD_MESSAGE3}\"" >> $rootdir/root/.bashrc echo ' echo ""' >> $rootdir/root/.bashrc echo " read -n1 -r -p \"${PRESS_KEY_MESSAGE}\" key" >> $rootdir/root/.bashrc # change the password for the admin user echo -n " echo \"${MY_USERNAME}:" >> $rootdir/root/.bashrc echo '$(printf `cat ~/login.txt`)"|chpasswd' >> $rootdir/root/.bashrc # update before continuing echo " cd /root/${PROJECT_NAME}" >> $rootdir/root/.bashrc echo " git stash" >> $rootdir/root/.bashrc echo " git pull" >> $rootdir/root/.bashrc echo " git checkout stretch" >> $rootdir/root/.bashrc echo " make install" >> $rootdir/root/.bashrc if [[ $VARIANT != "mesh"* && $VARIANT != "usb" ]]; then if [[ "$SOCIALINSTANCE" == "gnusocial" ]]; then echo " ${PROJECT_NAME} menuconfig-gnusocial" >> $rootdir/root/.bashrc else if [[ "$SOCIALINSTANCE" == "postactiv" ]]; then echo " ${PROJECT_NAME} menuconfig-postactiv" >> $rootdir/root/.bashrc else if [[ $ONION_ONLY == "no" ]]; then if [[ $MINIMAL_INSTALL == "no" ]]; then echo " ${PROJECT_NAME} menuconfig-full" >> $rootdir/root/.bashrc else echo " ${PROJECT_NAME} menuconfig" >> $rootdir/root/.bashrc fi else echo " ${PROJECT_NAME} menuconfig-onion" >> $rootdir/root/.bashrc fi fi fi else echo " echo ''" >> $rootdir/root/.bashrc fi echo ' if [ "$?" = "0" ]; then' >> $rootdir/root/.bashrc echo " if [ -f ~/${PROJECT_NAME}-completed.txt ]; then" >> $rootdir/root/.bashrc echo " # Check that the initial setup really did complete" >> $rootdir/root/.bashrc echo " if grep -q 'tripwire' ~/${PROJECT_NAME}-completed.txt; then" >> $rootdir/root/.bashrc # Remove the initial setup files echo ' rm /root/.initial_setup' >> $rootdir/root/.bashrc echo ' rm /home/fbone/.initial_setup' >> $rootdir/root/.bashrc echo " touch /root/.remove_${GENERIC_IMAGE_USERNAME}" >> $rootdir/root/.bashrc echo ' shred -zu ~/login.txt' >> $rootdir/root/.bashrc if [[ $VARIANT != "mesh"* && $VARIANT != "usb" ]]; then echo ' SSH_ONION_HOSTNAME=$(cat /var/lib/tor/hidden_service_ssh/hostname)' >> $rootdir/root/.bashrc echo ' if [ ${#SSH_ONION_HOSTNAME} -lt 2 ]; then' >> $rootdir/root/.bashrc echo ' exit 62392' >> $rootdir/root/.bashrc echo ' fi' >> $rootdir/root/.bashrc fi echo " if [ -f /root/${PROJECT_NAME}-wifi.cfg ]; then" >> $rootdir/root/.bashrc echo " echo '[Unit]' > /etc/systemd/system/wifistart.service" >> $rootdir/root/.bashrc echo " echo 'Description=WifiStartup (Start wifi networking)' >> /etc/systemd/system/wifistart.service" >> $rootdir/root/.bashrc echo " echo 'After=syslog.target' >> /etc/systemd/system/wifistart.service" >> $rootdir/root/.bashrc echo " echo 'After=network.target' >> /etc/systemd/system/wifistart.service" >> $rootdir/root/.bashrc echo " echo 'After=remote-fs.target' >> /etc/systemd/system/wifistart.service" >> $rootdir/root/.bashrc echo " echo '' >> /etc/systemd/system/wifistart.service" >> $rootdir/root/.bashrc echo " echo '[Service]' >> /etc/systemd/system/wifistart.service" >> $rootdir/root/.bashrc echo " echo 'Type=simple' >> /etc/systemd/system/wifistart.service" >> $rootdir/root/.bashrc echo " echo 'User=root' >> /etc/systemd/system/wifistart.service" >> $rootdir/root/.bashrc echo " echo 'Group=root' >> /etc/systemd/system/wifistart.service" >> $rootdir/root/.bashrc echo " echo 'WorkingDirectory=/root' >> /etc/systemd/system/wifistart.service" >> $rootdir/root/.bashrc echo " echo 'ExecStart=/usr/local/bin/freedombone-wifi --wait 5 2> /dev/null' >> /etc/systemd/system/wifistart.service" >> $rootdir/root/.bashrc echo " echo '' >> /etc/systemd/system/wifistart.service" >> $rootdir/root/.bashrc echo " echo '[Install]' >> /etc/systemd/system/wifistart.service" >> $rootdir/root/.bashrc echo " echo 'WantedBy=multi-user.target' >> /etc/systemd/system/wifistart.service" >> $rootdir/root/.bashrc echo " systemctl enable wifistart" >> $rootdir/root/.bashrc echo " systemctl daemon-reload" >> $rootdir/root/.bashrc echo ' fi' >> $rootdir/root/.bashrc echo ' systemctl reboot -i' >> $rootdir/root/.bashrc echo ' fi' >> $rootdir/root/.bashrc echo ' fi' >> $rootdir/root/.bashrc echo ' else' >> $rootdir/root/.bashrc echo ' key=' >> $rootdir/root/.bashrc echo ' while [[ $key != "x" ]]; do' >> $rootdir/root/.bashrc INSTALL_FAIL_MESSAGE=$"Install failed. Press x to continue..." echo " read -n1 -r -p \"${INSTALL_FAIL_MESSAGE}\" key" >> $rootdir/root/.bashrc echo ' done' >> $rootdir/root/.bashrc echo ' fi' >> $rootdir/root/.bashrc echo ' exit' >> $rootdir/root/.bashrc echo 'else' >> $rootdir/root/.bashrc echo ' # Remove default account after install' >> $rootdir/root/.bashrc echo " if [ -f /root/.remove_${GENERIC_IMAGE_USERNAME} ]; then" >> $rootdir/root/.bashrc echo " if [ -d /home/${GENERIC_IMAGE_USERNAME} ]; then" >> $rootdir/root/.bashrc echo " userdel -r ${GENERIC_IMAGE_USERNAME}" >> $rootdir/root/.bashrc echo " if [ -d /home/${GENERIC_IMAGE_USERNAME} ]; then" >> $rootdir/root/.bashrc echo " rm -rf /home/${GENERIC_IMAGE_USERNAME}" >> $rootdir/root/.bashrc echo " rm /root/.remove_${GENERIC_IMAGE_USERNAME}" >> $rootdir/root/.bashrc echo ' fi' >> $rootdir/root/.bashrc echo ' fi' >> $rootdir/root/.bashrc echo ' fi' >> $rootdir/root/.bashrc echo 'fi' >> $rootdir/root/.bashrc } continue_installation() { # If a configuration file exists then run with it # otherwise the interactive installer can be used # This is equivalent to installing freedombox-setup on freedombox if [ $CONFIG_FILENAME ]; then if [ ${#CONFIG_FILENAME} -gt 2 ]; then cp $CONFIG_FILENAME $rootdir/root/$PROJECT_NAME.cfg cat $rootdir/root/$PROJECT_NAME.cfg chroot "$rootdir" su -c "$PROJECT_NAME -c /root/$PROJECT_NAME.cfg" - root fi fi } atheros_wifi() { if [[ "$MACHINE" == "beaglebonewifi" ]]; then return fi firmware_filename="open-ath9k-htc-firmware_1.3-1_all.deb" firmware_hash='5fea58ffefdf0ef15b504db7fbe3bc078c03e0d927bba64085e4b6f2546102f5' firmware_url="http://us.archive.trisquel.info/trisquel/pool/main/o/open-ath9k-htc-firmware/$firmware_filename" firmware_tempfile="/tmp/$firmware_filename" wget "$firmware_url" -O "$rootdir$firmware_tempfile" downloaded_firmware_hash=$(sha256sum "$rootdir$firmware_tempfile" | awk -F ' ' '{print $1}') if [[ "$downloaded_firmware_hash" == "$firmware_hash" ]]; then chroot "$rootdir" dpkg -i "$firmware_tempfile" else echo 'WARNING: Atheros Wifi firmware hash does not match. The driver has not been installed.' fi } configure_wifi() { if [[ $VARIANT == "mesh"* ]]; then return fi if [ -f $WIFI_NETWORKS_FILE ]; then chroot "$rootdir" ${PROJECT_NAME}-wifi --networks $WIFI_NETWORKS_FILE return fi if [[ $WIFI_TYPE != 'none' ]]; then if [ ${#WIFI_PASSPHRASE} -lt 2 ]; then return fi chroot "$rootdir" ${PROJECT_NAME}-wifi -s $WIFI_SSID -t $WIFI_TYPE -p $WIFI_PASSPHRASE --hotspot $WIFI_HOTSPOT else chroot "$rootdir" ${PROJECT_NAME}-wifi -s $WIFI_SSID -t $WIFI_TYPE --hotspot $WIFI_HOTSPOT fi } ############################################################################## # Mesh networking ############################################################################## # for mesh installs TRACKER_PORT=6969 WIFI_CHANNEL=2 # B.A.T.M.A.N settings BATMAN_CELLID='02:BA:00:00:03:01' WIFI_SSID='mesh' # To avoid confusions these are obtained from the main project file #TOXID_REPO= #TOX_PORT= #TOXCORE_REPO= #TOXIC_REPO= #TOXCORE_COMMIT= #TOXIC_COMMIT= # These are some default nodes, but you can replace them with trusted nodes # as you prefer. See https://wiki.tox.im/Nodes #TOX_NODES= #TOX_NODES=( # '192.254.75.102,2607:5600:284::2,33445,951C88B7E75C867418ACDB5D273821372BB5BD652740BCDF623A4FA293E75D2F,Tox RELENG,US' # '144.76.60.215,2a01:4f8:191:64d6::1,33445,04119E835DF3E78BACF0F84235B300546AF8B936F035185E2A8E9E0A67C8924F,sonOfRa,DE' #) # To avoid confusions these are obtained from the main project file ZERONET_REPO= ZERONET_COMMIT= ZERONET_PORT= ZERONET_BLOG_REPO= ZERONET_BLOG_COMMIT= ZERONET_MAIL_REPO= ZERONET_MAIL_COMMIT= ZERONET_FORUM_REPO= ZERONET_FORUM_COMMIT= ZERONET_ID_REPO= ZERONET_ID_COMMIT= # Directory where source code is downloaded and compiled INSTALL_DIR=$HOME/build INSTALLING_MESH= PATCHWORK_REPO="https://github.com/ssbc/patchwork" PATCHWORK_COMMIT='60111a9e3385d65be0d17aa0d15fd20e5fb311ce' FERMENT_REPO="https://github.com/LolaShare/ferment" FERMENT_COMMIT='6e0e434114cd4cc652a03f6dcc6ddcec007b0058' install_patchwork() { if [[ $VARIANT != "meshclient" ]]; then return fi get_npm_arch git clone $PATCHWORK_REPO $rootdir/etc/patchwork if [ ! -d $rootdir/etc/patchwork ]; then exit 7823520 fi cd $rootdir/etc/patchwork git checkout $PATCHWORK_COMMIT -b $PATCHWORK_COMMIT cat < $rootdir/usr/bin/install_patchwork #!/bin/bash cd /etc/patchwork npm install --arch=$NPM_ARCH --build-from-source npm install --arch=$NPM_ARCH --save-dev electron-rebuild ./node_modules/.bin/electron-rebuild npm install --arch=$NPM_ARCH git-ssb EOF chroot "$rootdir" /bin/chmod +x /usr/bin/install_patchwork chroot "$rootdir" /usr/bin/install_patchwork rm $rootdir/usr/bin/install_patchwork echo '#!/bin/bash' > $rootdir/usr/bin/start_patchwork echo 'cd /etc/patchwork' >> $rootdir/usr/bin/start_patchwork echo 'npm start' >> $rootdir/usr/bin/start_patchwork chmod +x $rootdir/usr/bin/start_patchwork # Copy icon to an accesible location cp $rootdir/root/$PROJECT_NAME/img/icon_patchwork.png $rootdir/etc/patchwork/icon_patchwork.png } install_ferment() { if [[ $VARIANT != "meshclient" ]]; then return fi get_npm_arch git clone $FERMENT_REPO $rootdir/etc/ferment if [ ! -d $rootdir/etc/ferment ]; then exit 5239465 fi cd $rootdir/etc/ferment git checkout $FERMENT_COMMIT -b $FERMENT_COMMIT cat < $rootdir/usr/bin/install_ferment #!/bin/bash cd /etc/ferment npm install --arch=$NPM_ARCH --build-from-source npm install --arch=$NPM_ARCH --save-dev electron-rebuild ./node_modules/.bin/electron-rebuild npm install --arch=$NPM_ARCH git-ssb EOF chroot "$rootdir" /bin/chmod +x /usr/bin/install_ferment chroot "$rootdir" /usr/bin/install_ferment rm $rootdir/usr/bin/install_ferment echo '#!/bin/bash' > $rootdir/usr/bin/start_ferment echo 'cd /etc/ferment' >> $rootdir/usr/bin/start_ferment echo 'npm start' >> $rootdir/usr/bin/start_ferment chmod +x $rootdir/usr/bin/start_ferment # Copy icon to an accesible location cp $rootdir/root/$PROJECT_NAME/img/icon_ferment.png $rootdir/etc/patchwork/icon_ferment.png } mesh_shutdown_script() { echo '[Unit]' > $rootdir/etc/systemd/system/meshshutdown.service echo 'Description=Shuts down the mesh' >> $rootdir/etc/systemd/system/meshshutdown.service echo 'Before=shutdown.target' >> $rootdir/etc/systemd/system/meshshutdown.service echo '' >> $rootdir/etc/systemd/system/meshshutdown.service echo '[Service]' >> $rootdir/etc/systemd/system/meshshutdown.service echo 'ExecStart=/bin/true' >> $rootdir/etc/systemd/system/meshshutdown.service echo 'ExecStop=/bin/bash /usr/local/bin/batman stop' >> $rootdir/etc/systemd/system/meshshutdown.service echo 'RemainAfterExit=yes' >> $rootdir/etc/systemd/system/meshshutdown.service echo '' >> $rootdir/etc/systemd/system/meshshutdown.service echo '[Install]' >> $rootdir/etc/systemd/system/meshshutdown.service echo 'WantedBy=multi-user.target' >> $rootdir/etc/systemd/system/meshshutdown.service chroot "$rootdir" systemctl enable meshshutdown } initialise_mesh() { if [[ $VARIANT != "mesh"* ]]; then return fi if [[ $DEBIAN_INSTALL_ONLY != "no" ]]; then return fi if [[ $INSECURE == $'yes' ]]; then echo '*********************************************************' echo $'WARNING: non-free wifi drivers are being installed.' echo $' This may compromise the security of your system.' echo '*********************************************************' # enable non-free repo if ! grep -q "non-free" $rootdir/etc/apt/sources.list; then chroot "$rootdir" /bin/sed -i "s| main| main non-free|g" /etc/apt/sources.list fi chroot "$rootdir" apt-get update # install proprietary wifi drivers # see https://wiki.debian.org/iwlwifi chroot "$rootdir" apt-get -yq install firmware-iwlwifi firmware-b43-installer firmware-brcm80211 firmware-realtek fi INSTALLING_MESH=1 chroot "$rootdir" apt-get -yq install apt-transport-https # install tor as a possible way of routing traffic between internet gateways chroot "$rootdir" apt-get -yq install tor configure_firewall install_avahi install_batman mesh_shutdown_script install_vpn install_tomb #install_tahoelafs #install_librevault install_patchwork mesh_install_scuttlebot #install_ferment install_ipfs install_tox install_web_server install_pelican mesh_install_cryptpad if [ $ENABLE_ZERONET ]; then install_zeronet fi MESH_SERVICE='mesh-setup.service' MESH_SETUP_DAEMON=$rootdir/etc/systemd/system/$MESH_SERVICE MESH_STARTUP_PARAMS="${MY_USERNAME}" if [[ $AMNESIC != 'no' ]]; then MESH_STARTUP_PARAMS="${MY_USERNAME} amnesic" fi echo '[Unit]' > $MESH_SETUP_DAEMON echo 'Description=Initial mesh router configuration' >> $MESH_SETUP_DAEMON echo 'After=syslog.target' >> $MESH_SETUP_DAEMON echo 'After=network.target' >> $MESH_SETUP_DAEMON echo '' >> $MESH_SETUP_DAEMON echo '[Service]' >> $MESH_SETUP_DAEMON echo 'Type=simple' >> $MESH_SETUP_DAEMON echo 'User=root' >> $MESH_SETUP_DAEMON echo 'Group=root' >> $MESH_SETUP_DAEMON echo 'WorkingDirectory=/root' >> $MESH_SETUP_DAEMON echo "ExecStart=/usr/local/bin/${PROJECT_NAME}-image-mesh ${MESH_STARTUP_PARAMS} > /var/log/mesh-setup.log" >> $MESH_SETUP_DAEMON echo '' >> $MESH_SETUP_DAEMON echo 'TimeoutSec=99999' >> $MESH_SETUP_DAEMON echo '' >> $MESH_SETUP_DAEMON echo '[Install]' >> $MESH_SETUP_DAEMON echo 'WantedBy=multi-user.target' >> $MESH_SETUP_DAEMON chmod +x $MESH_SETUP_DAEMON chroot "$rootdir" systemctl enable $MESH_SERVICE } # User interface for USB drive installs ###################################### function mesh_client_startup_applications { if [ ! -d $rootdir/home/$MY_USERNAME/Desktop ]; then mkdir -p $rootdir/home/$MY_USERNAME/Desktop fi if [ ! -d $rootdir/home/$MY_USERNAME/.config/autostart ]; then mkdir -p $rootdir/home/$MY_USERNAME/.config/autostart chroot "$rootdir" /bin/chown -R $MY_USERNAME:$MY_USERNAME /home/$MY_USERNAME/.config fi START_DESKTOP=$rootdir/home/$MY_USERNAME/mesh-desktop.sh FIRST_BOOT=/home/$MY_USERNAME/.first_boot TAHOE_COMMAND="cd /var/lib/tahoelafs && venv/bin/tahoe" echo '#!/bin/bash' > $START_DESKTOP echo "setxkbmap ${KEYBOARD_MAP}" > $START_DESKTOP echo 'dconf write /org/mate/caja/desktop/volumes-visible false' >> $START_DESKTOP echo 'dconf write /org/mate/caja/desktop/computer-icon-visible false' >> $START_DESKTOP echo 'dconf write /org/mate/caja/desktop/home-icon-visible false' >> $START_DESKTOP echo 'dconf write /org/mate/caja/desktop/network-icon-visible false' >> $START_DESKTOP echo 'dconf write /org/mate/caja/desktop/trash-icon-visible false' >> $START_DESKTOP echo 'dconf write /org/mate/caja/desktop/volumes-visible false' >> $START_DESKTOP echo 'dconf write /org/mate/desktop/media-handling/automount-open false' >> $START_DESKTOP echo 'dconf write /org/mate/screensaver/lock-enabled false' >> $START_DESKTOP echo 'dconf write /org/mate/power-manager/lock-keyring-suspend false' >> $START_DESKTOP echo 'dconf write /org/mate/power-manager/lock-suspend false' >> $START_DESKTOP echo 'dconf write /org/mate/power-manager/lock-use-screensaver false' >> $START_DESKTOP echo 'dconf write /org/mate/power-manager/lock-blank-screen false' >> $START_DESKTOP echo 'dconf write /org/mate/power-manager/lock-hibernate false' >> $START_DESKTOP echo 'dconf write /org/mate/power-manager/lock-keyring-hibernate false' >> $START_DESKTOP echo 'dconf write /org/mate/desktop/peripherals/touchpad/scroll-method 2' >> $START_DESKTOP echo "touch /home/$MY_USERNAME/.dbus/Xdbus" >> $START_DESKTOP echo "chmod 600 /home/$MY_USERNAME/.dbus/Xdbus" >> $START_DESKTOP echo "env | grep DBUS_SESSION_BUS_ADDRESS > /home/$MY_USERNAME/.dbus/Xdbus" >> $START_DESKTOP echo "echo 'export DBUS_SESSION_BUS_ADDRESS' >> /home/$MY_USERNAME/.dbus/Xdbus" >> $START_DESKTOP echo '' >> $START_DESKTOP echo "amixer set 'Master' unmute" >> $START_DESKTOP echo "amixer set 'Master' 50%" >> $START_DESKTOP echo '' >> $START_DESKTOP echo '' >> $START_DESKTOP echo "if [ ! -f $FIRST_BOOT ]; then" >> $START_DESKTOP echo ' if [ -d /var/lib/tahoelafs ]; then' >> $START_DESKTOP echo " $TAHOE_COMMAND start" >> $START_DESKTOP echo ' fi' >> $START_DESKTOP echo ' exit 0' >> $START_DESKTOP echo 'fi' >> $START_DESKTOP echo '' >> $START_DESKTOP echo 'INITIAL_TOX_USERNAME=""' >> $START_DESKTOP echo 'while [ ${#INITIAL_TOX_USERNAME} -eq 0 ]; do' >> $START_DESKTOP echo " data=\$(zenity --forms --title=\"$MESH_TITLE\" --text=\"$MESH_SET_USERNAME\" --separator=\",\" --add-entry=\"Username\")" >> $START_DESKTOP echo ' accepted=$?' >> $START_DESKTOP echo ' if ((accepted == 0)); then' >> $START_DESKTOP echo " INITIAL_TOX_USERNAME=\$(awk -F, '{print \$1}' <<<\$data)" >> $START_DESKTOP echo ' fi' >> $START_DESKTOP echo 'done' >> $START_DESKTOP echo '' >> $START_DESKTOP echo 'toxid --setuser "$INITIAL_TOX_USERNAME"' >> $START_DESKTOP echo '' >> $START_DESKTOP echo "if [ -f /home/$MY_USERNAME/.tahoe/tahoe.cfg ]; then" >> $START_DESKTOP echo " sed -i 's|nickname =.*|nickname = \$INITIAL_TOX_USERNAME|g' /home/$MY_USERNAME/.tahoe/tahoe.cfg" >> $START_DESKTOP echo " $TAHOE_COMMAND restart" >> $START_DESKTOP echo 'fi' >> $START_DESKTOP echo '' >> $START_DESKTOP echo "rm -f $FIRST_BOOT" >> $START_DESKTOP echo '' >> $START_DESKTOP echo 'exit 0' >> $START_DESKTOP chmod +x $START_DESKTOP START_DESKTOP2=$rootdir/home/$MY_USERNAME/.config/autostart/mesh-start.desktop echo '[Desktop Entry]' > $START_DESKTOP2 echo 'Type=Application' >> $START_DESKTOP2 echo 'Name=Mesh start desktop script' >> $START_DESKTOP2 echo "Exec=bash -c '~/mesh-desktop.sh'" >> $START_DESKTOP2 echo 'X-GNOME-Autostart-enabled=true' >> $START_DESKTOP2 chmod +x $START_DESKTOP2 } function mesh_desktop_icons { if [ ! -d $rootdir/home/$MY_USERNAME/Desktop ]; then mkdir -p $rootdir/home/$MY_USERNAME/Desktop fi # Terminal #echo '[Desktop Entry]' > $rootdir/home/$MY_USERNAME/Desktop/terminal.desktop #echo 'Name=MATE Terminal' >> $rootdir/home/$MY_USERNAME/Desktop/terminal.desktop #echo 'Type=Application' >> $rootdir/home/$MY_USERNAME/Desktop/terminal.desktop #echo 'Comment=Use the command line' >> $rootdir/home/$MY_USERNAME/Desktop/terminal.desktop #echo 'TryExec=mate-terminal' >> $rootdir/home/$MY_USERNAME/Desktop/terminal.desktop #echo 'Exec=mate-terminal' >> $rootdir/home/$MY_USERNAME/Desktop/terminal.desktop #echo 'Icon=terminal' >> $rootdir/home/$MY_USERNAME/Desktop/terminal.desktop #echo 'StartupNotify=true' >> $rootdir/home/$MY_USERNAME/Desktop/terminal.desktop chroot "$rootdir" /bin/chown -R $MY_USERNAME:$MY_USERNAME /home/$MY_USERNAME/Desktop } function configure_user_interface { if [[ $VARIANT != "meshclient" && $VARIANT != "meshusb" && $VARIANT != "usb" ]]; then return fi # desktop chroot "$rootdir" apt-get -yq install mate-desktop-environment # tool to change desktop settings from command line chroot "$rootdir" apt-get -yq install dconf-cli dconf-gsettings-backend dbus dbus-x11 # for tomb chroot "$rootdir" apt-get -yq install pinentry-gtk2 # for tox video chroot "$rootdir" apt-get -yq install ffmpeg cheese v4l-utils # to provide notifications chroot "$rootdir" apt-get -yq install libnotify-bin # for video/audio chroot "$rootdir" apt-get -yq install libtheora-bin libvorbis-dev v4l-utils # a sane editor chroot "$rootdir" apt-get -yq install emacs # for wifi monitoring chroot "$rootdir" apt-get -yq install horst # for sound level control chroot "$rootdir" apt-get -yq install alsa-utils pavucontrol # to play various media types chroot "$rootdir" apt-get -yq install vlc # android adb to allow phones to be connected and for example transfer photos/documents chroot "$rootdir" apt-get -yq install android-tools-adb # USB cloning tool chroot "$rootdir" apt-get -yq install gnome-multi-writer # clipboard chroot "$rootdir" apt-get -yq install xclip # audio recording chroot "$rootdir" apt-get -yq install audacity # for gtk dialog entry chroot "$rootdir" apt-get -yq install zenity # Produce a text file on the desktop listing users on the mesh cat < $rootdir/usr/bin/list-tox-users #!/bin/bash ethernet_connected=\$(cat /sys/class/net/eth0/carrier) users_list=\$(lstox | awk -F ' ' '{\$1=""; print \$0}' | sed -e 's/^[[:space:]]*//' | sort -d | uniq) if [ \${#users_list} -eq 0 ]; then no_of_users=0 else no_of_users=\$(echo "\$users_list" | wc -l) fi if [ \$no_of_users -gt 0 ]; then echo "\$users_list" > /tmp/Users.txt chown $MY_USERNAME:$MY_USERNAME /tmp/Users.txt echo 'showing_users=\$(ps aux | grep $MESH_TEXT_EDITOR | grep "Users.txt")' > /home/$MY_USERNAME/showusers echo 'if [ \${#showing_users} -eq 0 ]; then' >> /home/$MY_USERNAME/showusers echo ' $MESH_TEXT_EDITOR /tmp/Users.txt' >> /home/$MY_USERNAME/showusers echo 'fi' >> /home/$MY_USERNAME/showusers echo 'exit 0' >> /home/$MY_USERNAME/showusers chmod +x /home/$MY_USERNAME/showusers chown $MY_USERNAME:$MY_USERNAME /home/$MY_USERNAME/showusers echo '[Desktop Entry]' > /home/$MY_USERNAME/Desktop/Users.desktop if [ \$no_of_users -lt 2 ]; then echo "Name=\$no_of_users Other User" >> /home/$MY_USERNAME/Desktop/Users.desktop else echo "Name=\$no_of_users Other Users" >> /home/$MY_USERNAME/Desktop/Users.desktop fi echo 'Type=Application' >> /home/$MY_USERNAME/Desktop/Users.desktop echo 'Comment=List of users' >> /home/$MY_USERNAME/Desktop/Users.desktop echo 'Comment[el]=Κατάλογος χρηστών' >> /home/$MY_USERNAME/Desktop/Users.desktop echo 'Comment[ar]=قائمة المستخدمين' >> /home/$MY_USERNAME/Desktop/Users.desktop echo "Comment[ca]=Llista d'usuaris" >> /home/$MY_USERNAME/Desktop/Users.desktop echo 'Comment[hi]=उपयोगकर्ताओं की सूची' >> /home/$MY_USERNAME/Desktop/Users.desktop echo 'Comment[fr]=Liste des utilisateurs' >> /home/$MY_USERNAME/Desktop/Users.desktop echo 'Comment[de]=Liste der Benutzer' >> /home/$MY_USERNAME/Desktop/Users.desktop echo 'Comment[es]=Lista de usuarios' >> /home/$MY_USERNAME/Desktop/Users.desktop echo 'Comment[it]=Elenco degli utenti' >> /home/$MY_USERNAME/Desktop/Users.desktop echo 'Comment[ru]=Список пользователей' >> /home/$MY_USERNAME/Desktop/Users.desktop echo 'Comment[zh]=用户列表' >> /home/$MY_USERNAME/Desktop/Users.desktop echo 'Exec=bash /home/$MY_USERNAME/showusers' >> /home/$MY_USERNAME/Desktop/Users.desktop echo 'Icon=/usr/share/$PROJECT_NAME/avatars/icon_users.png' >> /home/$MY_USERNAME/Desktop/Users.desktop echo 'StartupNotify=false' >> /home/$MY_USERNAME/Desktop/Users.desktop chmod +x /home/$MY_USERNAME/Desktop/Users.desktop chown $MY_USERNAME:$MY_USERNAME /home/$MY_USERNAME/Desktop/Users.desktop if [ ! -f /home/$MY_USERNAME/.cryptpad.desktop ]; then if [ ! -f /home/$MY_USERNAME/Desktop/cryptpad.desktop ]; then echo '[Desktop Entry]' > /home/$MY_USERNAME/Desktop/cryptpad.desktop echo 'Name=CryptPad' >> /home/$MY_USERNAME/Desktop/cryptpad.desktop echo 'Type=Application' >> /home/$MY_USERNAME/Desktop/cryptpad.desktop echo 'Comment=Realtime collaborative editing of documents' >> /home/$MY_USERNAME/Desktop/cryptpad.desktop echo 'Comment[el]=Συνεργατική επεξεργασία εγγράφων σε πραγματικό χρόνο' >> /home/$MY_USERNAME/Desktop/cryptpad.desktop echo 'Comment[ar]=في الوقت الحقيقي التحرير التعاوني للوثائق' >> /home/$MY_USERNAME/Desktop/cryptpad.desktop echo 'Comment[ca]=Edició col·laborativa en temps real de documents' >> /home/$MY_USERNAME/Desktop/cryptpad.desktop echo 'Comment[hi]=दस्तावेज़ों का रीयलटाइम सहयोगी संपादन' >> /home/$MY_USERNAME/Desktop/cryptpad.desktop echo 'Comment[fr]=Edition collaborative en temps réel de documents' >> /home/$MY_USERNAME/Desktop/cryptpad.desktop echo 'Comment[de]=Kollaboratives Echtzeit-Editing von Dokumenten' >> /home/$MY_USERNAME/Desktop/cryptpad.desktop echo 'Comment[es]=Edición colaborativa en tiempo real de documentos' >> /home/$MY_USERNAME/Desktop/cryptpad.desktop echo 'Comment[it]=Editing collaborativo di documenti in tempo reale' >> /home/$MY_USERNAME/Desktop/cryptpad.desktop echo 'Comment[ru]=Совместное редактирование документов в режиме реального времени' >> /home/$MY_USERNAME/Desktop/cryptpad.desktop echo 'Comment[zh]=实时协同编辑文件' >> /home/$MY_USERNAME/Desktop/cryptpad.desktop echo "Exec=$BROWSER http://\${HOSTNAME}.local" >> /home/$MY_USERNAME/Desktop/cryptpad.desktop echo "Icon=/usr/share/$PROJECT_NAME/avatars/icon_cryptpad.png" >> /home/$MY_USERNAME/Desktop/cryptpad.desktop echo 'Terminal=false' >> /home/$MY_USERNAME/Desktop/cryptpad.desktop echo 'Categories=Application;' >> /home/$MY_USERNAME/Desktop/cryptpad.desktop chmod +x /home/$MY_USERNAME/Desktop/cryptpad.desktop chown $MY_USERNAME:$MY_USERNAME /home/$MY_USERNAME/Desktop/cryptpad.desktop else if ! grep -q "\${HOSTNAME}.local" /home/$MY_USERNAME/Desktop/cryptpad.desktop; then sed -i "s|Exec=.*|Exec=$BROWSER http://\${HOSTNAME}.local|g" /home/$MY_USERNAME/Desktop/cryptpad.desktop fi fi fi if [ ! -f /home/$MY_USERNAME/Desktop/social.desktop ]; then echo '[Desktop Entry]' > /home/$MY_USERNAME/Desktop/social.desktop echo 'Name=Social' >> /home/$MY_USERNAME/Desktop/social.desktop echo 'Name[el]=Κοινωνικός' >> /home/$MY_USERNAME/Desktop/social.desktop echo 'Name[ar]=اجتماعي' >> /home/$MY_USERNAME/Desktop/social.desktop echo 'Name[ca]=Social' >> /home/$MY_USERNAME/Desktop/social.desktop echo 'Name[hi]=सामाजिक' >> /home/$MY_USERNAME/Desktop/social.desktop echo 'Name[fr]=Social' >> /home/$MY_USERNAME/Desktop/social.desktop echo 'Name[de]=Soziale' >> /home/$MY_USERNAME/Desktop/social.desktop echo 'Name[es]=Social' >> /home/$MY_USERNAME/Desktop/social.desktop echo 'Name[it]=Sociale' >> /home/$MY_USERNAME/Desktop/social.desktop echo 'Name[ru]=Социальное' >> /home/$MY_USERNAME/Desktop/social.desktop echo 'Name[zh]=社会' >> /home/$MY_USERNAME/Desktop/social.desktop echo 'Type=Application' >> /home/$MY_USERNAME/Desktop/social.desktop echo "Comment=A decentralized messaging and sharing app built on top of Secure Scuttlebutt" >> /home/$MY_USERNAME/Desktop/social.desktop echo "Comment[el]=Μια αποκεντρωμένη εφαρμογή ανταλλαγής μηνυμάτων και κοινής χρήσης που είναι ενσωματωμένη στην κορυφή του Secure Scuttlebutt" >> /home/$MY_USERNAME/Desktop/social.desktop echo "Comment[ar]=والرسائل اللامركزية وتبادل التطبيق بنيت على رأس سكوتليبوت الآمنة (سب)" >> /home/$MY_USERNAME/Desktop/social.desktop echo "Comment[ca]=Una aplicació de missatgeria i distribució descentralitzada integrada a Secure Scuttlebutt" >> /home/$MY_USERNAME/Desktop/social.desktop echo "Comment[hi]=सिक्योर स्कूटलबट (एसएसबी) के शीर्ष पर निर्मित एक विकेन्द्रीकृत संदेश और साझाकरण ऐप" >> /home/$MY_USERNAME/Desktop/social.desktop echo "Comment[fr]=Une application de messagerie et de partage décentralisée basée sur Secure Scuttlebutt" >> /home/$MY_USERNAME/Desktop/social.desktop echo "Comment[de]=Eine dezentralisierte Messaging- und Sharing-App, die auf Secure Scuttlebutt basiert" >> /home/$MY_USERNAME/Desktop/social.desktop echo "Comment[es]=Una aplicación de mensajería y uso compartido descentralizada construida sobre Secure Scuttlebutt" >> /home/$MY_USERNAME/Desktop/social.desktop echo "Comment[it]=Un'applicazione decentralizzata di messaggistica e condivisione costruita sulla base di Secure Shuttlebutt" >> /home/$MY_USERNAME/Desktop/social.desktop echo "Comment[ru]=Децентрализованное приложение для обмена сообщениями и совместного использования, построенное на основе Secure Scuttlebutt" >> /home/$MY_USERNAME/Desktop/social.desktop echo "Comment[zh]=安全Scuttlebutt之上构建的分散式消息和共享应用程序" >> /home/$MY_USERNAME/Desktop/social.desktop echo 'Exec=bash /usr/bin/start_patchwork' >> /home/$MY_USERNAME/Desktop/social.desktop echo "Icon=/usr/share/$PROJECT_NAME/avatars/icon_social.png" >> /home/$MY_USERNAME/Desktop/social.desktop echo 'Terminal=false' >> /home/$MY_USERNAME/Desktop/social.desktop echo 'Categories=Application;' >> /home/$MY_USERNAME/Desktop/social.desktop chmod +x /home/$MY_USERNAME/Desktop/social.desktop chown $MY_USERNAME:$MY_USERNAME /home/$MY_USERNAME/Desktop/social.desktop fi #if [ ! -f /home/$MY_USERNAME/Desktop/audio.desktop ]; then # echo '[Desktop Entry]' > /home/$MY_USERNAME/Desktop/audio.desktop # echo 'Name=Audio/Music' >> /home/$MY_USERNAME/Desktop/audio.desktop # echo 'Type=Application' >> /home/$MY_USERNAME/Desktop/audio.desktop # echo 'Comment=Audio publishing and streaming' >> /home/$MY_USERNAME/Desktop/audio.desktop # echo 'Exec=bash /usr/bin/start_ferment' >> /home/$MY_USERNAME/Desktop/audio.desktop # echo "Icon=/etc/patchwork/icon_ferment.png" >> /home/$MY_USERNAME/Desktop/audio.desktop # echo 'Terminal=false' >> /home/$MY_USERNAME/Desktop/audio.desktop # echo 'Categories=Application;' >> /home/$MY_USERNAME/Desktop/audio.desktop # chmod +x /home/$MY_USERNAME/Desktop/audio.desktop # chown $MY_USERNAME:$MY_USERNAME /home/$MY_USERNAME/Desktop/audio.desktop #fi if [ ! -f /home/$MY_USERNAME/Desktop/vpn.desktop ]; then echo '[Desktop Entry]' > /home/$MY_USERNAME/Desktop/vpn.desktop echo 'Type=Application' >> /home/$MY_USERNAME/Desktop/vpn.desktop echo 'Name=Connect Meshes' >> /home/$MY_USERNAME/Desktop/vpn.desktop echo 'Name[el]=Συνδέστε τα μάτια' >> /home/$MY_USERNAME/Desktop/vpn.desktop echo 'Name[ar]=ربط مشيس' >> /home/$MY_USERNAME/Desktop/vpn.desktop echo 'Name[ca]=Connecteu malles' >> /home/$MY_USERNAME/Desktop/vpn.desktop echo 'Name[hi]=कनेक्ट मेशेस' >> /home/$MY_USERNAME/Desktop/vpn.desktop echo 'Name[fr]=Connecter les maillages' >> /home/$MY_USERNAME/Desktop/vpn.desktop echo 'Name[de]=Netze verbinden' >> /home/$MY_USERNAME/Desktop/vpn.desktop echo 'Name[es]=Conectar Mallas' >> /home/$MY_USERNAME/Desktop/vpn.desktop echo 'Name[it]=Collegare le maglie' >> /home/$MY_USERNAME/Desktop/vpn.desktop echo 'Name[ru]=Подключить сетки' >> /home/$MY_USERNAME/Desktop/vpn.desktop echo 'Name[zh]=连接网格' >> /home/$MY_USERNAME/Desktop/vpn.desktop echo 'Comment=Connect to another mesh network via the internet' >> /home/$MY_USERNAME/Desktop/vpn.desktop echo 'Comment[el]=Συνδεθείτε σε άλλο δίκτυο ματιών μέσω του Διαδικτύου' >> /home/$MY_USERNAME/Desktop/vpn.desktop echo 'Comment[ar]=الاتصال بشبكة شبكة أخرى عبر الإنترنت' >> /home/$MY_USERNAME/Desktop/vpn.desktop echo "Comment[ca]=Connecteu-vos a una altra xarxa de malla a través d'Internet" >> /home/$MY_USERNAME/Desktop/vpn.desktop echo 'Comment[hi]=इंटरनेट के माध्यम से किसी अन्य जाल नेटवर्क से कनेक्ट करें' >> /home/$MY_USERNAME/Desktop/vpn.desktop echo 'Comment[fr]=Connectez-vous à un autre réseau maillé via Internet' >> /home/$MY_USERNAME/Desktop/vpn.desktop echo 'Comment[de]=Verbindung mit einem anderen Mesh-Netzwerk über das Internet' >> /home/$MY_USERNAME/Desktop/vpn.desktop echo 'Comment[es]=Conéctese a otra red en malla a través de Internet' >> /home/$MY_USERNAME/Desktop/vpn.desktop echo "Comment[it]=Collegarsi ad un'altra rete di maglie via internet" >> /home/$MY_USERNAME/Desktop/vpn.desktop echo 'Comment[ru]=Подключение к другой сети с сетью через Интернет' >> /home/$MY_USERNAME/Desktop/vpn.desktop echo 'Comment[zh]=通过互联网连接到另一个网状网络' >> /home/$MY_USERNAME/Desktop/vpn.desktop echo 'Exec=mate-terminal --full-screen -e /usr/local/bin/${PROJECT_NAME}-mesh-connect' >> /home/$MY_USERNAME/Desktop/vpn.desktop echo 'Icon=/usr/share/$PROJECT_NAME/avatars/icon_connect.png' >> /home/$MY_USERNAME/Desktop/vpn.desktop echo 'StartupNotify=false' >> /home/$MY_USERNAME/Desktop/vpn.desktop chmod +x /home/$MY_USERNAME/Desktop/vpn.desktop chown $MY_USERNAME:$MY_USERNAME /home/$MY_USERNAME/Desktop/vpn.desktop fi if [ -f /tmp/.ipfs-users ]; then echo '[Desktop Entry]' > /home/$MY_USERNAME/Desktop/sites.desktop echo 'Type=Application' >> /home/$MY_USERNAME/Desktop/sites.desktop echo "Name=Visit a site" >> /home/$MY_USERNAME/Desktop/sites.desktop echo "Name[el]=Επισκεφθείτε έναν ιστότοπο" >> /home/$MY_USERNAME/Desktop/sites.desktop echo "Name[ar]=انتقل إلى موقع" >> /home/$MY_USERNAME/Desktop/sites.desktop echo "Name[ca]=Visiteu un lloc" >> /home/$MY_USERNAME/Desktop/sites.desktop echo "Name[hi]=किसी साइट पर जाएं" >> /home/$MY_USERNAME/Desktop/sites.desktop echo "Name[fr]=Visitez un site" >> /home/$MY_USERNAME/Desktop/sites.desktop echo "Name[de]=Besuchen Sie eine Website" >> /home/$MY_USERNAME/Desktop/sites.desktop echo "Name[es]=Visita un sitio" >> /home/$MY_USERNAME/Desktop/sites.desktop echo "Name[it]=Visita un sito" >> /home/$MY_USERNAME/Desktop/sites.desktop echo "Name[ru]=Посетите сайт" >> /home/$MY_USERNAME/Desktop/sites.desktop echo "Name[zh]=访问网站" >> /home/$MY_USERNAME/Desktop/sites.desktop echo 'Comment=Visit a site' >> /home/$MY_USERNAME/Desktop/sites.desktop echo "Comment[el]=Επισκεφθείτε έναν ιστότοπο" >> /home/$MY_USERNAME/Desktop/sites.desktop echo "Comment[ar]=انتقل إلى موقع" >> /home/$MY_USERNAME/Desktop/sites.desktop echo "Commant[ca]=Visiteu un lloc" >> /home/$MY_USERNAME/Desktop/sites.desktop echo "Comment[hi]=किसी साइट पर जाएं" >> /home/$MY_USERNAME/Desktop/sites.desktop echo "Comment[fr]=Visitez un site" >> /home/$MY_USERNAME/Desktop/sites.desktop echo "Comment[de]=Besuchen Sie eine Website" >> /home/$MY_USERNAME/Desktop/sites.desktop echo "Comment[es]=Visita un sitio" >> /home/$MY_USERNAME/Desktop/sites.desktop echo "Comment[it]=Visita un sito" >> /home/$MY_USERNAME/Desktop/sites.desktop echo "Comment[ru]=Посетите сайт" >> /home/$MY_USERNAME/Desktop/sites.desktop echo "Comment[zh]=访问网站" >> /home/$MY_USERNAME/Desktop/sites.desktop echo 'Exec=mate-terminal --full-screen -e /usr/local/bin/${PROJECT_NAME}-mesh-visit-site' >> /home/$MY_USERNAME/Desktop/sites.desktop echo 'Icon=/usr/share/$PROJECT_NAME/avatars/icon_sites.png' >> /home/$MY_USERNAME/Desktop/sites.desktop echo 'StartupNotify=false' >> /home/$MY_USERNAME/Desktop/sites.desktop chmod +x /home/$MY_USERNAME/Desktop/sites.desktop chown $MY_USERNAME:$MY_USERNAME /home/$MY_USERNAME/Desktop/sites.desktop echo '[Desktop Entry]' > /home/$MY_USERNAME/Desktop/blog.desktop echo 'Type=Application' >> /home/$MY_USERNAME/Desktop/blog.desktop echo "Name=Blog" >> /home/$MY_USERNAME/Desktop/blog.desktop echo "Name[el]=Blog" >> /home/$MY_USERNAME/Desktop/blog.desktop echo "Name[ar]=مدونة" >> /home/$MY_USERNAME/Desktop/blog.desktop echo "Name[ca]=Blog" >> /home/$MY_USERNAME/Desktop/blog.desktop echo "Name[hi]=ब्लॉग" >> /home/$MY_USERNAME/Desktop/blog.desktop echo "Name[fr]=Blog" >> /home/$MY_USERNAME/Desktop/blog.desktop echo "Name[de]=Blog" >> /home/$MY_USERNAME/Desktop/blog.desktop echo "Name[es]=Blog" >> /home/$MY_USERNAME/Desktop/blog.desktop echo "Name[it]=Blog" >> /home/$MY_USERNAME/Desktop/blog.desktop echo "Name[ru]=Блог" >> /home/$MY_USERNAME/Desktop/blog.desktop echo "Name[zh]=博客" >> /home/$MY_USERNAME/Desktop/blog.desktop echo 'Comment=View or create blog entries' >> /home/$MY_USERNAME/Desktop/blog.desktop echo 'Comment[el]=Προβολή ή δημιουργία καταχωρήσεων ιστολογίου' >> /home/$MY_USERNAME/Desktop/blog.desktop echo 'Comment[ar]=عرض إدخالات المدونة أو إنشائها' >> /home/$MY_USERNAME/Desktop/blog.desktop echo 'Comment[ca]=Permet visualitzar o crear entrades de bloc' >> /home/$MY_USERNAME/Desktop/blog.desktop echo 'Comment[hi]=ब्लॉग प्रविष्टियों देखें या बनाएं' >> /home/$MY_USERNAME/Desktop/blog.desktop echo 'Comment[fr]=Afficher ou créer des entrées de blog' >> /home/$MY_USERNAME/Desktop/blog.desktop echo 'Comment[de]=Blog-Einträge anzeigen oder erstellen' >> /home/$MY_USERNAME/Desktop/blog.desktop echo 'Comment[es]=Ver o crear entradas de blog' >> /home/$MY_USERNAME/Desktop/blog.desktop echo 'Comment[it]=Visualizza o crea voci di blog' >> /home/$MY_USERNAME/Desktop/blog.desktop echo 'Comment[ru]=Просмотр или создание записей в блоге' >> /home/$MY_USERNAME/Desktop/blog.desktop echo 'Comment[zh]=查看或创建博客条目' >> /home/$MY_USERNAME/Desktop/blog.desktop echo 'Exec=mate-terminal --full-screen -e /usr/local/bin/${PROJECT_NAME}-mesh-blog' >> /home/$MY_USERNAME/Desktop/blog.desktop echo 'Icon=/usr/share/$PROJECT_NAME/avatars/icon_blog.png' >> /home/$MY_USERNAME/Desktop/blog.desktop echo 'StartupNotify=false' >> /home/$MY_USERNAME/Desktop/blog.desktop chmod +x /home/$MY_USERNAME/Desktop/blog.desktop chown $MY_USERNAME:$MY_USERNAME /home/$MY_USERNAME/Desktop/blog.desktop fi if [ ! -f /home/$MY_USERNAME/runtox ]; then echo 'qtox_running=\$(ps aux | grep qtox | grep data)' > /home/$MY_USERNAME/runtox echo 'if [ \${#qtox_running} -eq 0 ]; then' >> /home/$MY_USERNAME/runtox echo ' bash -c "qtox -p data"' >> /home/$MY_USERNAME/runtox echo 'fi' >> /home/$MY_USERNAME/runtox echo 'exit 0' >> /home/$MY_USERNAME/runtox chmod +x /home/$MY_USERNAME/runtox chown $MY_USERNAME:$MY_USERNAME /home/$MY_USERNAME/runtox fi if [ ! -f /home/$MY_USERNAME/Desktop/tox.desktop ]; then echo '[Desktop Entry]' > /home/$MY_USERNAME/Desktop/tox.desktop echo 'Name=Chat' >> /home/$MY_USERNAME/Desktop/tox.desktop echo 'Name[el]=Κουβέντα' >> /home/$MY_USERNAME/Desktop/tox.desktop echo 'Name[ar]=دردشة' >> /home/$MY_USERNAME/Desktop/tox.desktop echo 'Name[ca]=Xat' >> /home/$MY_USERNAME/Desktop/tox.desktop echo 'Name[hi]=बातचीत' >> /home/$MY_USERNAME/Desktop/tox.desktop echo 'Name[fr]=Bavarder' >> /home/$MY_USERNAME/Desktop/tox.desktop echo 'Name[de]=Chat' >> /home/$MY_USERNAME/Desktop/tox.desktop echo 'Name[es]=Charla' >> /home/$MY_USERNAME/Desktop/tox.desktop echo 'Name[it]=Chiacchierare' >> /home/$MY_USERNAME/Desktop/tox.desktop echo 'Name[ru]=чат' >> /home/$MY_USERNAME/Desktop/tox.desktop echo 'Name[zh]=聊' >> /home/$MY_USERNAME/Desktop/tox.desktop echo 'Type=Application' >> /home/$MY_USERNAME/Desktop/tox.desktop echo 'Comment=Chat, Voice and Video' >> /home/$MY_USERNAME/Desktop/tox.desktop echo 'Comment[el]=Συνομιλία, Φωνή και βίντεο' >> /home/$MY_USERNAME/Desktop/tox.desktop echo 'Comment[ar]=دردشة، صوت والفيديو' >> /home/$MY_USERNAME/Desktop/tox.desktop echo 'Comment[ca]=Xat, veu i vídeo' >> /home/$MY_USERNAME/Desktop/tox.desktop echo 'Comment[hi]=चैट, वॉयस और वीडियो' >> /home/$MY_USERNAME/Desktop/tox.desktop echo 'Comment[fr]=Chat, voix et vidéo' >> /home/$MY_USERNAME/Desktop/tox.desktop echo 'Comment[de]=Chat, Sprache und Video' >> /home/$MY_USERNAME/Desktop/tox.desktop echo 'Comment[es]=Chat, voz y video' >> /home/$MY_USERNAME/Desktop/tox.desktop echo 'Comment[it]=Chat, voce e video' >> /home/$MY_USERNAME/Desktop/tox.desktop echo 'Comment[ru]=Чат, голос и видео' >> /home/$MY_USERNAME/Desktop/tox.desktop echo 'Comment[zh]=聊天，语音和视频' >> /home/$MY_USERNAME/Desktop/tox.desktop echo 'Exec=bash /home/$MY_USERNAME/runtox' >> /home/$MY_USERNAME/Desktop/tox.desktop echo "Icon=/usr/share/$PROJECT_NAME/avatars/icon_chat.png" >> /home/$MY_USERNAME/Desktop/tox.desktop echo 'StartupNotify=true' >> /home/$MY_USERNAME/Desktop/tox.desktop chmod +x /home/$MY_USERNAME/Desktop/tox.desktop chown $MY_USERNAME:$MY_USERNAME /home/$MY_USERNAME/Desktop/tox.desktop fi # If ethernet is connected then add the invite icon to help enable # SSB nat traversal if [[ "\$ethernet_connected" != "0" ]]; then if [ ! -f /home/$MY_USERNAME/Desktop/invite.desktop ]; then echo '[Desktop Entry]' > /home/$MY_USERNAME/Desktop/invite.desktop echo 'Version=1.0' >> /home/$MY_USERNAME/Desktop/invite.desktop echo 'Name=Create Invite' >> /home/$MY_USERNAME/Desktop/invite.desktop echo 'Name[el]=Δημιουργία πρόσκλησης' >> /home/$MY_USERNAME/Desktop/invite.desktop echo 'Name[ar]=إنشاء دعوة' >> /home/$MY_USERNAME/Desktop/invite.desktop echo 'Name[ca]=Crea una invitació' >> /home/$MY_USERNAME/Desktop/invite.desktop echo 'Name[hi]=आमंत्रण बनाएं' >> /home/$MY_USERNAME/Desktop/invite.desktop echo 'Name[fr]=Créer une invitation' >> /home/$MY_USERNAME/Desktop/invite.desktop echo 'Name[de]=Einladung erstellen' >> /home/$MY_USERNAME/Desktop/invite.desktop echo 'Name[es]=Crear invitación' >> /home/$MY_USERNAME/Desktop/invite.desktop echo 'Name[it]=Crea Invita' >> /home/$MY_USERNAME/Desktop/invite.desktop echo 'Name[ru]=Создать приглашение' >> /home/$MY_USERNAME/Desktop/invite.desktop echo 'Name[zh]=创建邀请' >> /home/$MY_USERNAME/Desktop/invite.desktop echo 'Type=Application' >> /home/$MY_USERNAME/Desktop/invite.desktop echo 'Comment=Create an invite for Patchwork' >> /home/$MY_USERNAME/Desktop/invite.desktop echo 'Comment[el]=Δημιουργήστε μια πρόσκληση για το Patchwork' >> /home/$MY_USERNAME/Desktop/invite.desktop echo 'Comment[ar]=إنشاء دعوة ل باتشورك' >> /home/$MY_USERNAME/Desktop/invite.desktop echo 'Comment[ca]=Crea una invitació per Patchwork' >> /home/$MY_USERNAME/Desktop/invite.desktop echo 'Comment[hi]=पैचवर्क के लिए एक आमंत्रण बनाएं' >> /home/$MY_USERNAME/Desktop/invite.desktop echo 'Comment[fr]=Créer une invitation pour Patchwork' >> /home/$MY_USERNAME/Desktop/invite.desktop echo 'Comment[de]=Erstellen Sie eine Einladung für Patchwork' >> /home/$MY_USERNAME/Desktop/invite.desktop echo 'Comment[es]=Crear una invitación para Patchwork' >> /home/$MY_USERNAME/Desktop/invite.desktop echo 'Comment[it]=Crea un invito per patchwork' >> /home/$MY_USERNAME/Desktop/invite.desktop echo 'Comment[ru]=Создать приглашение на лоскутное одеяло' >> /home/$MY_USERNAME/Desktop/invite.desktop echo 'Comment[zh]=为拼拼创建邀请' >> /home/$MY_USERNAME/Desktop/invite.desktop echo 'Exec=mate-terminal -e freedombone-mesh-invite' >> /home/$MY_USERNAME/Desktop/invite.desktop echo 'Icon=/usr/share/$PROJECT_NAME/avatars/icon_invite.png' >> /home/$MY_USERNAME/Desktop/invite.desktop echo 'Terminal=false' >> /home/$MY_USERNAME/Desktop/invite.desktop echo 'Categories=Application;' >> /home/$MY_USERNAME/Desktop/invite.desktop chmod +x /home/$MY_USERNAME/Desktop/invite.desktop fi else if [ -f /home/$MY_USERNAME/Desktop/invite.desktop ]; then rm /home/$MY_USERNAME/Desktop/invite.desktop fi fi else if [ -f /tmp/Users.txt ]; then rm /tmp/Users.txt rm /home/$MY_USERNAME/Desktop/Users.desktop if [ -f /home/$MY_USERNAME/Desktop/Users.desktop ]; then rm /home/$MY_USERNAME/Desktop/Users.desktop fi if [ -f /home/$MY_USERNAME/Desktop/sites.desktop ]; then rm /home/$MY_USERNAME/Desktop/sites.desktop fi if [ -f /home/$MY_USERNAME/Desktop/blog.desktop ]; then rm /home/$MY_USERNAME/Desktop/blog.desktop fi if [ -f /home/$MY_USERNAME/Desktop/tox.desktop ]; then rm /home/$MY_USERNAME/Desktop/tox.desktop fi pkill qtox fi # If there is no ethernet then remove the invite icon if [[ "\$ethernet_connected" == "0" ]]; then if [ -f /home/$MY_USERNAME/Desktop/invite.desktop ]; then rm /home/$MY_USERNAME/Desktop/invite.desktop fi fi fi EOF chroot "$rootdir" /bin/chown $MY_USERNAME:$MY_USERNAME /usr/bin/list-tox-users chroot "$rootdir" /bin/chmod +x /usr/bin/list-tox-users echo "* * * * * $MY_USERNAME bash -c /usr/bin/list-tox-users > /dev/null" >> $rootdir/etc/crontab if [[ $VARIANT != "usb" ]]; then # log in automatically chroot "$rootdir" apt-get -y install nodm xinit echo 'NODM_ENABLED=true' > /etc/default/nodm echo "NODM_USER=$MY_USERNAME" >> /etc/default/nodm chroot "$rootdir" mkdir /etc/systemd/system/getty@tty1.service.d echo '[Service]' > $rootdir/etc/systemd/system/getty@tty1.service.d/override.conf echo 'ExecStart=' >> $rootdir/etc/systemd/system/getty@tty1.service.d/override.conf echo 'ExecStart=-/sbin/agetty --autologin fbone --noclear %I $TERM' >> $rootdir/etc/systemd/system/getty@tty1.service.d/override.conf echo '[[ -z $DISPLAY && $XDG_VTNR -eq 1 ]] && exec startx' >> $rootdir/home/$MY_USERNAME/.profile chroot "$rootdir" systemctl set-default multi-user.target mesh_client_startup_applications mesh_desktop_icons # Different desktop background for amnesic if [[ $AMNESIC != 'no' ]]; then MESH_DESKTOP_BACKGROUND_IMAGE=/usr/local/share/${PROJECT_NAME}_mesh_amnesic_background.png fi # change the desktop background if [ $MESH_DESKTOP_BACKGROUND_IMAGE ]; then if [ -f $MESH_DESKTOP_BACKGROUND_IMAGE ]; then if [ -d $rootdir/usr/share/images/desktop-base ]; then cp $MESH_DESKTOP_BACKGROUND_IMAGE $rootdir/usr/share/images/desktop-base/${PROJECT_NAME}_mesh_background.png chroot "$rootdir" /bin/rm /usr/share/images/desktop-base/desktop-background chroot "$rootdir" ln -s /usr/share/images/desktop-base/${PROJECT_NAME}_mesh_background.png /usr/share/images/desktop-base/desktop-background fi fi fi else chroot "$rootdir" apt-get -yq install lightdm fi # browser chroot "$rootdir" apt-get -yq install $BROWSER # help mkdir -p $rootdir/home/${MY_USERNAME}/help/images cd $rootdir/root/${PROJECT_NAME}/website ./deploy.sh EN $rootdir/home/${MY_USERNAME}/help chroot "$rootdir" /bin/chown -R ${MY_USERNAME}:${MY_USERNAME} /home/${MY_USERNAME}/help # Tox user interface enable_tox_repo mesh_tox_qtox # copy the default qtox ini file if [ ! -d ${rootdir}/home/${MY_USERNAME}/.config/tox ]; then mkdir ${rootdir}/home/${MY_USERNAME}/.config/tox cp /usr/local/bin/${PROJECT_NAME}-config-qtox ${rootdir}/home/${MY_USERNAME}/.config/tox/qtox.ini chroot "$rootdir" /bin/chown -R ${MY_USERNAME}:${MY_USERNAME} /home/${MY_USERNAME}/.config fi if [[ $VARIANT == "usb" ]]; then # tor chroot "$rootdir" apt-get -yq install tor # xmpp client chroot "$rootdir" echo "deb ftp://ftp.gajim.org/debian unstable main" > /etc/apt/sources.list.d/gajim.list chroot "$rootdir" apt-get update chroot "$rootdir" apt-get -yq install gajim-dev-keyring chroot "$rootdir" apt-get -yq install git python-dev python-pip gajim-nightly chroot "$rootdir" mkdir /home/$GENERIC_IMAGE_USERNAME/.local/share/gajim/plugins -p chroot "$rootdir" git clone https://github.com/omemo/gajim-omemo /home/$GENERIC_IMAGE_USERNAME/.local/share/gajim/plugins/gajim-omemo chroot "$rootdir" pip install protobuf==2.6.1, python-axolotl==0.1.35 chroot "$rootdir" /bin/chown -R $GENERIC_IMAGE_USERNAME:$GENERIC_IMAGE_USERNAME /home/$GENERIC_IMAGE_USERNAME/.local # IRC client chroot "$rootdir" apt-get -yq install hexchat profanity fi } ############################################################################## # setup_utils ############################################################################## function image_install_inadyn { if [ $INSTALLING_MESH ]; then return fi if [ ! -d $rootdir/root/build ]; then mkdir -p $rootdir/root/build fi chroot "$rootdir" apt-get -yq install build-essential curl libgnutls28-dev automake1.11 libconfuse-dev if [ -d /repos/inadyn ]; then mkdir $rootdir/root/build/inadyn cp -r -p /repos/inadyn/. $rootdir/root/build/inadyn cd $rootdir/root/build/inadyn git pull else git clone $INADYN_REPO $rootdir/root/build/inadyn fi if [ ! -d $rootdir/root/build/inadyn ]; then echo 'Failed to clone inadyn' exit 728252 fi cd $rootdir/root/build/inadyn git checkout $INADYN_COMMIT -b $INADYN_COMMIT cd $rootdir/root/build/inadyn echo '#!/bin/bash' > $rootdir/root/build/build_inadyn.sh echo 'cd ~/build/inadyn' >> $rootdir/root/build/build_inadyn.sh echo '#./autogen.sh' >> $rootdir/root/build/build_inadyn.sh echo './configure' >> $rootdir/root/build/build_inadyn.sh echo 'USE_OPENSSL=1 make' >> $rootdir/root/build/build_inadyn.sh echo 'make install' >> $rootdir/root/build/build_inadyn.sh chmod +x $rootdir/root/build/build_inadyn.sh chroot "$rootdir" /root/build/build_inadyn.sh if [ ! -f $rootdir/usr/local/sbin/inadyn ]; then echo 'Failed to build inadyn' exit 6209356 fi # create a configuration file echo 'background' > $rootdir/etc/inadyn.conf echo 'verbose 1' >> $rootdir/etc/inadyn.conf echo 'period 300' >> $rootdir/etc/inadyn.conf echo 'startup-delay 60' >> $rootdir/etc/inadyn.conf echo 'cache-dir /run/inadyn' >> $rootdir/etc/inadyn.conf echo 'logfile /dev/null' >> $rootdir/etc/inadyn.conf chmod 600 $rootdir/etc/inadyn.conf echo '[Unit]' > $rootdir/etc/systemd/system/inadyn.service echo 'Description=inadyn (DynDNS updater)' >> $rootdir/etc/systemd/system/inadyn.service echo 'After=network.target' >> $rootdir/etc/systemd/system/inadyn.service echo '' >> $rootdir/etc/systemd/system/inadyn.service echo '[Service]' >> $rootdir/etc/systemd/system/inadyn.service echo 'ExecStart=/usr/local/sbin/inadyn --config /etc/inadyn.conf' >> $rootdir/etc/systemd/system/inadyn.service echo 'Restart=always' >> $rootdir/etc/systemd/system/inadyn.service echo 'Type=forking' >> $rootdir/etc/systemd/system/inadyn.service echo '' >> $rootdir/etc/systemd/system/inadyn.service echo '[Install]' >> $rootdir/etc/systemd/system/inadyn.service echo 'WantedBy=multi-user.target' >> $rootdir/etc/systemd/system/inadyn.service chroot "$rootdir" systemctl enable inadyn echo "inadyn commit:$INADYN_COMMIT" >> $rootdir/root/freedombone-completed.txt } function image_setup_utils { if [ $INSTALLING_MESH ]; then return fi chroot "$rootdir" apt-get -yq install apt-transport-https chroot "$rootdir" apt-get -yq remove --purge apache2-bin* chroot "$rootdir" apt-get -yq dist-upgrade chroot "$rootdir" apt-get -yq install ca-certificates chroot "$rootdir" apt-get -yq install apt-utils if [[ $ARCHITECTURE == 'amd64' ]]; then chroot "$rootdir" apt-get -yq install linux-image-amd64 fi if [[ $ARCHITECTURE == 'qemu'* || $ARCHITECTURE == 'amd64' || $ARCHITECTURE == 'x86_64' || $ARCHITECTURE == 'i686' || $ARCHITECTURE == 'i386' ]]; then chroot "$rootdir" apt-get -yq install grub2 lvm2 fi chroot "$rootdir" apt-get -yq install locales locales-all debconf SYSCTL_FILE=$rootdir/etc/sysctl.conf if [ ! -f $SYSCTL_FILE ]; then touch $SYSCTL_FILE fi cp $SYSCTL_FILE $rootdir/root/sysctl.conf chown $CURR_USER:$CURR_GROUP $rootdir/root/sysctl.conf if ! grep -q "tcp_challenge_ack_limit" $rootdir/root/sysctl.conf; then echo 'net.ipv4.tcp_challenge_ack_limit = 999999999' >> $rootdir/root/sysctl.conf else sed -i 's|net.ipv4.tcp_challenge_ack_limit.*|net.ipv4.tcp_challenge_ack_limit = 999999999|g' $rootdir/root/sysctl.conf fi cp $rootdir/root/sysctl.conf $SYSCTL_FILE rm $rootdir/root/sysctl.conf # all the packages chroot "$rootdir" apt-get -yq install cryptsetup libgfshare-bin duplicity sshpass wget chroot "$rootdir" apt-get -yq install avahi-daemon avahi-utils avahi-discover chroot "$rootdir" apt-get -yq install connect-proxy openssh-server chroot "$rootdir" apt-get -yq install sudo git dialog build-essential avahi-daemon avahi-utils chroot "$rootdir" apt-get -yq install avahi-discover avahi-autoipd iptables dnsutils net-tools chroot "$rootdir" apt-get -yq install network-manager iputils-ping libnss-mdns libnss-myhostname chroot "$rootdir" apt-get -yq install libnss-gw-name nano man ntp locales locales-all debconf chroot "$rootdir" apt-get -yq install wireless-tools wpasupplicant usbutils cryptsetup zsh chroot "$rootdir" apt-get -yq install pinentry-curses eatmydata iotop bc hostapd haveged chroot "$rootdir" apt-get -yq install cpulimit screen elinks libpam-cracklib chroot "$rootdir" apt-get -yq install vim-common python3 unattended-upgrades # Tor and ssh over tor chroot "$rootdir" apt-get -yq install tor connect-proxy chroot "$rootdir" connect-proxy sed -i 's|#Log notice file.*|Log notice file /dev/null|g' $rootdir/etc/tor/torrc sed -i 's|Log notice file.*|Log notice file /dev/null|g' $rootdir/etc/tor/torrc sed -i "s|#AccountingMax.*|AccountingMax $TOR_MAX_TRAFFIC_PER_DAY_GB GBytes|g" $rootdir/etc/tor/torrc sed -i "s|AccountingMax.*|AccountingMax $TOR_MAX_TRAFFIC_PER_DAY_GB GBytes|g" $rootdir/etc/tor/torrc if ! grep -q 'Host *.onion' $rootdir/root/.ssh/config; then if [ ! -d $rootdir/root/.ssh ]; then mkdir $rootdir/root/.ssh fi echo 'Host *.onion' >> $rootdir/root/.ssh/config echo 'ProxyCommand connect -R remote -5 -S 127.0.0.1:9050 %h %p' >> $rootdir/root/.ssh/config fi if ! grep -q 'Host *.onion' $rootdir/etc/skel/.ssh/config; then if [ ! -d $rootdir/etc/skel/.ssh ]; then mkdir $rootdir/etc/skel/.ssh fi echo 'Host *.onion' >> $rootdir/etc/skel/.ssh/config echo 'ProxyCommand connect -R remote -5 -S 127.0.0.1:9050 %h %p' >> $rootdir/etc/skel/.ssh/config fi # Install golang chroot "$rootdir" adduser --disabled-login --gecos 'go' go GOARCH= if [[ $ARCHITECTURE == *"386" || $ARCHITECTURE == *"686" ]]; then GOARCH=386 fi if [[ $ARCHITECTURE == *"amd64" || $ARCHITECTURE == "x86_64" ]]; then GOARCH=amd64 fi if [[ $ARCHITECTURE == *"arm"* ]]; then GOARCH=armv6l fi if [[ $ARCHITECTURE == *"aarch"* || $ARCHITECTURE == *"arm64"* ]]; then GOARCH=arm64 fi if [ ! $GOARCH ]; then echo $'System architecture was not specified when installing Go' exit 6734378 fi GO_SOURCE=https://storage.googleapis.com/golang/go${GO_VERSION}.linux-${GOARCH}.tar.gz if [ ! -d ${rootdir}/root/build ]; then mkdir -p $rootdir/root/build fi cd $rootdir/root/build wget ${GO_SOURCE} if [ ! -f ${rootdir}/root/build/go${GO_VERSION}.linux-${GOARCH}.tar.gz ]; then exit 26524 fi chroot "$rootdir" tar -C /home/go -xzf ${INSTALL_DIR}/go${GO_VERSION}.linux-${GOARCH}.tar.gz if [ ! -d ${rootdir}/home/go/go/bin ]; then echo 'Go binary not installed' exit 763562 fi mv ${rootdir}/home/go/go ${rootdir}/home/go/go${GO_VERSION} echo "export GOROOT=/home/go" >> ${rootdir}/root/.bashrc echo "export GOROOT=/home/go" >> ${rootdir}/etc/skel/.bashrc echo "export GOROOT=/home/go" >> ${rootdir}/home/go/.bashrc echo "export GOPATH=\$GOROOT/go${GO_VERSION}/bin" >> ${rootdir}/root/.bashrc echo "export GOPATH=\$GOROOT/go${GO_VERSION}/bin" >> ${rootdir}/etc/skel/.bashrc echo "export GOPATH=\$GOROOT/go${GO_VERSION}/bin" >> ${rootdir}/home/go/.bashrc echo 'export PATH=$PATH:$GOPATH' >> ${rootdir}/root/.bashrc echo 'export PATH=$PATH:$GOPATH' >> ${rootdir}/etc/skel/.bashrc echo 'export PATH=$PATH:$GOPATH' >> ${rootdir}/home/go/.bashrc chroot "$rootdir" chown -R go:go /home/go cp ${rootdir}/home/go/go${GO_VERSION}/bin/* ${rootdir}/usr/bin # Tomb chroot "$rootdir" apt-get -yq install zsh pinentry-curses git clone $TOMB_REPO $rootdir/root/build/tomb cd $rootdir/root/build/tomb git checkout $TOMB_COMMIT -b $TOMB_COMMIT chroot "$rootdir" cd /root/build/tomb && make install echo "tomb commit:$TOMB_COMMIT" >> $rootdir/root/freedombone-completed.txt if ! grep -q '* hard maxsyslogins' $rootdir/etc/security/limits.conf; then echo '* hard maxsyslogins 10' >> $rootdir/etc/security/limits.conf else sed -i 's|hard maxsyslogins.*|hard maxsyslogins 10|g' $rootdir/etc/security/limits.conf fi # Max logins for each user if ! grep -q '* hard maxlogins' $rootdir/etc/security/limits.conf; then echo '* hard maxlogins 2' >> $rootdir/etc/security/limits.conf else sed -i 's|hard maxlogins.*|hard maxlogins 2|g' $rootdir/etc/security/limits.conf fi # Email chroot "$rootdir" apt-get -yq remove postfix chroot "$rootdir" apt-get -yq install exim4 exim4-daemon-heavy sasl2-bin swaks libnet-ssleay-perl procmail chroot "$rootdir" apt-get -yq install spamassassin chroot "$rootdir" apt-get -yq install dovecot-imapd #backup chroot "$rootdir" apt-get -yq install duplicity gnupg # monkeysphere #chroot "$rootdir" apt-get -yq install monkeysphere msva-perl # encrypting email chroot "$rootdir" apt-get -yq install libmail-gnupg-perl git clone $GPGIT_REPO $rootdir/root/build/gpgit cd $rootdir/root/build/gpgit git checkout $GPGIT_COMMIT -b $GPGIT_COMMIT cp $rootdir/root/build/gpgit/gpgit.pl $rootdir/usr/bin echo "gpgit commit:$GPGIT_COMMIT" >> $rootdir/root/freedombone-completed.txt # email client chroot "$rootdir" apt-get -yq install lynx abook urlview mutt git clone $CLEANUP_MAILDIR_REPO $rootdir/root/build/cleanup-maildir cd $rootdir/root/build/cleanup-maildir git checkout $CLEANUP_MAILDIR_COMMIT -b $CLEANUP_MAILDIR_COMMIT cp $rootdir/root/build/cleanup-maildir/cleanup-maildir $rootdir/usr/bin echo "cleanup-maildir commit:$CLEANUP_MAILDIR_COMMIT" >> $rootdir/root/freedombone-completed.txt # web server chroot "$rootdir" apt-get -yq remove --purge apache2 chroot "$rootdir" apt-get -yq install nginx php-fpm git clone $NGINX_ENSITE_REPO $rootdir/root/build/nginx_ensite cd $rootdir/root/build/nginx_ensite git checkout $NGINX_ENSITE_COMMIT -b $NGINX_ENSITE_COMMIT echo "nginx-ensite commit:$NGINX_ENSITE_COMMIT" >> $rootdir/root/freedombone-completed.txt chroot "$rootdir" cd /root/build/nginx_ensite && make install if [ ! -f $rootdir/etc/pam.d/nginx ]; then echo '#%PAM-1.0' > $rootdir/etc/pam.d/nginx echo '@include common-auth' >> $rootdir/etc/pam.d/nginx echo '@include common-account' >> $rootdir/etc/pam.d/nginx echo '@include common-session' >> $rootdir/etc/pam.d/nginx fi chroot "$rootdir" apt-get -yq install tripwire # filesystem optimisations #sed -i 's|btrfs subvol=@|btrfs defaults,subvol=@,compress=lzo,ssd|g' $rootdir/etc/fstab } function image_install_nodejs { mesh_install_nodejs #echo 'install_nodejs' >> ${rootdir}/root/${PROJECT_NAME}-completed.txt } function image_preinstall_repos { if [[ $VARIANT == "mesh"* ]]; then return fi if [ ! -d $rootdir/repos ]; then mkdir $rootdir/repos fi git clone $CMAKE_REPO $rootdir/repos/cmake git clone $INADYN_REPO $rootdir/repos/inadyn git clone $TOMB_REPO $rootdir/repos/tomb if [[ $SOCIALINSTANCE == "pleroma" ]]; then git clone $PLEROMA_REPO $rootdir/repos/pleroma #git clone $QVITTER_THEME_REPO $rootdir/repos/qvitter git clone $PLEROMA_FRONTEND_REPO $rootdir/repos/pleroma-fe return fi if [[ $SOCIALINSTANCE == "gnusocial" ]]; then git clone $GNUSOCIAL_REPO $rootdir/repos/gnusocial git clone $GNUSOCIAL_MARKDOWN_REPO $rootdir/repos/gnusocial-markdown #git clone $QVITTER_THEME_REPO $rootdir/repos/qvitter git clone $PLEROMA_FRONTEND_REPO $rootdir/repos/pleroma-fe return fi if [[ $SOCIALINSTANCE == "postactiv" ]]; then git clone $GNUSOCIAL_MARKDOWN_REPO $rootdir/repos/gnusocial-markdown #git clone $QVITTER_THEME_REPO $rootdir/repos/qvitter git clone $PLEROMA_FRONTEND_REPO $rootdir/repos/pleroma-fe #git clone $POSTACTIV_REPO $rootdir/repos/postactiv return fi git clone $CRYPTPAD_REPO $rootdir/repos/cryptpad git clone $DOKUWIKI_REPO $rootdir/repos/dokuwiki git clone $ETHERPAD_REPO $rootdir/repos/etherpad git clone $FRIENDICA_REPO $rootdir/repos/friendica git clone $GNUSOCIAL_REPO $rootdir/repos/gnusocial git clone $PLEROMA_REPO $rootdir/repos/pleroma git clone $GNUSOCIAL_MARKDOWN_REPO $rootdir/repos/gnusocial-markdown #git clone $QVITTER_THEME_REPO $rootdir/repos/qvitter git clone $PLEROMA_FRONTEND_REPO $rootdir/repos/pleroma-fe #git clone $POSTACTIV_REPO $rootdir/repos/postactiv git clone $SHARINGS_REPO $rootdir/repos/sharings git clone $HTMLY_REPO $rootdir/repos/htmly git clone $HUBZILLA_REPO $rootdir/repos/hubzilla git clone $HUBZILLA_ADDONS_REPO $rootdir/repos/hubzilla-addons git clone $KOEL_REPO $rootdir/repos/koel #git clone $LIBREVAULT_REPO $rootdir/repos/librevault git clone $LYCHEE_REPO $rootdir/repos/lychee git clone $MAILPILE_REPO $rootdir/repos/mailpile git clone $MATRIX_REPO $rootdir/repos/matrix git clone $MEDIAGOBLIN_REPO $rootdir/repos/mediagoblin #git clone $MOVIM_REPO $rootdir/repos/movim git clone $NEXTCLOUD_REPO $rootdir/repos/nextcloud git clone $PIHOLE_REPO $rootdir/repos/pihole git clone $PROFANITY_REPO $rootdir/repos/profanity git clone $LIBMESODE_REPO $rootdir/repos/libmesode git clone $PROFANITY_OMEMO_PLUGIN_REPO $rootdir/repos/profanity-omemo git clone $RSS_READER_REPO $rootdir/repos/rss git clone $RSS_MOBILE_READER_REPO $rootdir/repos/rss-mobile git clone $SEARX_REPO $rootdir/repos/searx git clone $TOXCORE_REPO $rootdir/repos/toxcore git clone $TOXID_REPO $rootdir/repos/toxid git clone $TOXIC_REPO $rootdir/repos/toxic git clone $TURTL_REPO $rootdir/repos/turtl git clone $KANBOARD_REPO $rootdir/repos/kanboard git clone $KEYSERVER_WEB_REPO $rootdir/repos/keyserverweb #git clone $WEKAN_REPO $rootdir/repos/wekan #git clone $FLOW_ROUTER_REPO $rootdir/repos/flowrouter #git clone $METEOR_USERACCOUNTS_REPO $rootdir/repos/meteoruseraccounts #git clone $METEOR_REPO $rootdir/repos/meteor #git clone $ZERONET_REPO $rootdir/repos/zeronet #git clone $QTOX_REPO $rootdir/repos/qtox } ############################################################################## # Set to true/false to control if eatmydata is used during build use_eatmydata=true rootdir="$1" fmdir="$(pwd)" image="$fmdir"/"$2" cd "$rootdir" echo info: building $MACHINE for $ARCHITECTURE export DEBIAN_FRONTEND=noninteractive DEBCONF_NONINTERACTIVE_SEEN=true export LC_ALL=C LANGUAGE=C LANG=C # Override libpam-tmpdir setting during build, as the directories # are not created yet. export TMP=/tmp/ TMPDIR=/tmp/ if [ ! $MY_USERNAME ]; then echo $'No username was specified' exit 52825 fi username=$MY_USERNAME echo $"warning: creating initial user $username with well known password!" password=$MY_PASSWORD chroot "$rootdir" /usr/bin/env -i \ HOME=/root \ PATH=/usr/local/bin:/usr/local/sbin:/usr/bin:/usr/sbin:/bin:/sbin echo "export PATH=/usr/local/bin:/usr/local/sbin:/usr/bin:/usr/sbin:/bin:/sbin:" >> $rootdir/root/.bashrc chroot "$rootdir" adduser --gecos $username --disabled-password $username echo $username:$password | chroot "$rootdir" /usr/sbin/chpasswd chroot "$rootdir" adduser $username sudo if [ ! $DEBIAN_REPO ]; then DEBIAN_REPO='ftp.de.debian.org' fi if [ ! $DEBIAN_VERSION ]; then DEBIAN_VERSION='stretch' fi set_apt_sources $BUILD_MIRROR chroot "$rootdir" apt-get clean chroot "$rootdir" /bin/rm -rf /var/lib/apt/lists/* chroot "$rootdir" apt-get clean set_apt_sources $MIRROR configure_backports configure_contrib_repo chroot "$rootdir" apt-get update chroot "$rootdir" apt-get install -y apt-utils cat > $rootdir/usr/sbin/policy-rc.d <' > $rootdir/etc/avahi/services/ssh.service echo '' >> $rootdir/etc/avahi/services/ssh.service echo '' >> $rootdir/etc/avahi/services/ssh.service echo ' %h SSH' >> $rootdir/etc/avahi/services/ssh.service echo ' ' >> $rootdir/etc/avahi/services/ssh.service echo ' _ssh._tcp' >> $rootdir/etc/avahi/services/ssh.service echo " $SSH_PORT" >> $rootdir/etc/avahi/services/ssh.service echo ' ' >> $rootdir/etc/avahi/services/ssh.service echo '' >> $rootdir/etc/avahi/services/ssh.service # Ensure that the avahi daemon keeps running WATCHDOG_SCRIPT_NAME="keepon" echo '#!/bin/bash' > $rootdir/usr/bin/$WATCHDOG_SCRIPT_NAME echo 'LOGFILE=/var/log/keepon.log' >> $rootdir/usr/bin/$WATCHDOG_SCRIPT_NAME echo 'CURRENT_DATE=$(date)' >> $rootdir/usr/bin/$WATCHDOG_SCRIPT_NAME echo '' >> $rootdir/usr/bin/$WATCHDOG_SCRIPT_NAME echo "# keep avahi-daemon daemon running" >> $rootdir/usr/bin/$WATCHDOG_SCRIPT_NAME echo "RUNNING=$(pgrep avahi-daemon > /dev/null && echo Running)" >> $rootdir/usr/bin/$WATCHDOG_SCRIPT_NAME echo 'if [ ! $RUNNING ]; then' >> $rootdir/usr/bin/$WATCHDOG_SCRIPT_NAME echo " systemctl start avahi-daemon" >> $rootdir/usr/bin/$WATCHDOG_SCRIPT_NAME echo ' echo -n $CURRENT_DATE >> $LOGFILE' >> $rootdir/usr/bin/$WATCHDOG_SCRIPT_NAME echo " echo \"avahi-daemon daemon restarted\" >> \$LOGFILE" >> $rootdir/usr/bin/$WATCHDOG_SCRIPT_NAME echo 'fi' >> $rootdir/usr/bin/$WATCHDOG_SCRIPT_NAME echo "# End of avahi-daemon" >> $rootdir/usr/bin/$WATCHDOG_SCRIPT_NAME chmod +x $rootdir/usr/bin/$WATCHDOG_SCRIPT_NAME echo "*/1 * * * * root /usr/bin/$WATCHDOG_SCRIPT_NAME" >> $rootdir/etc/crontab chroot "$rootdir" /bin/bash -x <&1 | \ tee $rootdir/var/log/${PROJECT_NAME}-image-hardware-setup.log rm $rootdir/usr/sbin/policy-rc.d # Set up HRNG for systems known to have one # Otherwise install haveged if [[ "$MACHINE" != "beaglebone"* ]]; then # With some VMs, the hardware cycles counter is emulated and deterministic, # and thus predictible, so havege should not be used if [[ "$MACHINE" != "qemu"* ]]; then chroot $rootdir apt-get -yq install haveged fi else chroot $rootdir apt-get -yq install rng-tools sed -i 's|#HRNGDEVICE=/dev/hwrng|HRNGDEVICE=/dev/hwrng|g' $rootdir/etc/default/rng-tools fi # copy u-boot to beginning of image case "$MACHINE" in beaglebone) dd if=$rootdir/usr/lib/u-boot/am335x_boneblack/MLO of="$image" \ count=1 seek=1 conv=notrunc bs=128k dd if=$rootdir/usr/lib/u-boot/am335x_boneblack/u-boot.img of="$image" \ count=2 seek=1 conv=notrunc bs=384k ;; beaglebonewifi) touch $rootdir/root/.wifi-only dd if=$rootdir/usr/lib/u-boot/am335x_boneblack/MLO of="$image" \ count=1 seek=1 conv=notrunc bs=128k dd if=$rootdir/usr/lib/u-boot/am335x_boneblack/u-boot.img of="$image" \ count=2 seek=1 conv=notrunc bs=384k ;; cubieboard2) dd if=$rootdir/usr/lib/u-boot/Cubieboard2/u-boot-sunxi-with-spl.bin of="$image" \ seek=8 conv=notrunc bs=1k ;; a20-olinuxino-lime) dd if=$rootdir/usr/lib/u-boot/A20-OLinuXino-Lime/u-boot-sunxi-with-spl.bin \ of="$image" seek=8 conv=notrunc bs=1k ;; esac if $use_eatmydata ; then disable_eatmydata_override fi configure_ssh configure_networking admin_user_sudo create_generic_image atheros_wifi continue_installation image_install_nodejs initialise_mesh configure_wifi configure_user_interface image_setup_utils image_install_inadyn image_preinstall_repos # remove downloaded packages chroot $rootdir apt-get -y autoremove chroot $rootdir apt-get clean cd / echo $"info: killing leftover processes in chroot" fuser -mvk $rootdir/. || true exit 0