mirror of
https://github.com/terem42/zfs-hetzner-vm.git
synced 2025-12-22 23:08:36 +00:00
Compare commits
10 Commits
| Author | SHA1 | Date | |
|---|---|---|---|
|
ac21852e9a | ||
|
|
784ee5fe96 | ||
|
|
8858afa4a3 | ||
|
|
d11cae2671 | ||
|
|
373f77fa73 | ||
|
|
587d3a1f4f | ||
|
|
556157ed33 | ||
|
|
56e36a0987 | ||
|
|
d5b4bf3034 | ||
|
|
f79b735143 |
14
README.md
14
README.md
@@ -2,7 +2,7 @@
|
||||
|
||||
[](https://github.com/terem42/zfs-hetzner-vm/actions/workflows/shellcheck.yml)
|
||||
|
||||
Scripts to install Debian 10, 11, 12 or Ubuntu 18 LTS, 20 LTS, 22 LTS with ZFS root on Hetzner root servers (virtual and dedicated).<br/>
|
||||
Scripts to install Debian 10, 11, 12, 13 or Ubuntu 18 LTS, 20 LTS, 22 LTS, 24 LTS with ZFS root on Hetzner root servers (virtual and dedicated).
|
||||
__WARNING:__ all data on the disk will be destroyed.
|
||||
|
||||
## How to use:
|
||||
@@ -30,6 +30,12 @@ Debian 12 minimal setup with SSH server
|
||||
wget -qO- https://raw.githubusercontent.com/terem42/zfs-hetzner-vm/master/hetzner-debian12-zfs-setup.sh | bash -
|
||||
````
|
||||
|
||||
Debian 13 minimal setup with SSH server
|
||||
|
||||
````bash
|
||||
wget -qO- https://raw.githubusercontent.com/terem42/zfs-hetzner-vm/master/hetzner-debian13-zfs-setup.sh | bash -
|
||||
````
|
||||
|
||||
Ubuntu 18.04 LTS minimal setup with SSH server
|
||||
|
||||
````bash
|
||||
@@ -48,6 +54,12 @@ Ubuntu 22 LTS minimal setup with SSH server
|
||||
wget -qO- https://raw.githubusercontent.com/terem42/zfs-hetzner-vm/master/hetzner-ubuntu22-zfs-setup.sh | bash -
|
||||
````
|
||||
|
||||
Ubuntu 24 LTS minimal setup with SSH server
|
||||
|
||||
````bash
|
||||
wget -qO- https://raw.githubusercontent.com/terem42/zfs-hetzner-vm/master/hetzner-ubuntu24-zfs-setup.sh | bash -
|
||||
````
|
||||
|
||||
Answer script questions about desired hostname and ZFS ARC cache size.
|
||||
|
||||
To cope with network failures its higly recommended to run the commands above inside screen console, type `man screen` for more info.
|
||||
|
||||
@@ -399,7 +399,7 @@ function determine_kernel_variant {
|
||||
}
|
||||
|
||||
function chroot_execute {
|
||||
chroot $c_zfs_mount_dir bash -c "$1"
|
||||
chroot $c_zfs_mount_dir bash -c "DEBIAN_FRONTEND=noninteractive $1"
|
||||
}
|
||||
|
||||
function unmount_and_export_fs {
|
||||
@@ -750,8 +750,10 @@ chroot_execute "echo options zfs zfs_arc_max=$((v_zfs_arc_max_mb * 1024 * 1024))
|
||||
|
||||
echo "======= setting up grub =========="
|
||||
chroot_execute "echo 'grub-pc grub-pc/install_devices_empty boolean true' | debconf-set-selections"
|
||||
chroot_execute "DEBIAN_FRONTEND=noninteractive apt install --yes grub-pc"
|
||||
chroot_execute "grub-install ${v_selected_disks[0]}"
|
||||
chroot_execute "apt install --yes grub-pc"
|
||||
for disk in ${v_selected_disks[@]}; do
|
||||
chroot_execute "grub-install $disk"
|
||||
done
|
||||
|
||||
chroot_execute "sed -i 's/#GRUB_TERMINAL=console/GRUB_TERMINAL=console/g' /etc/default/grub"
|
||||
chroot_execute "sed -i 's|GRUB_CMDLINE_LINUX_DEFAULT=.*|GRUB_CMDLINE_LINUX_DEFAULT=\"net.ifnames=0\"|' /etc/default/grub"
|
||||
|
||||
@@ -400,7 +400,7 @@ function determine_kernel_variant {
|
||||
}
|
||||
|
||||
function chroot_execute {
|
||||
chroot $c_zfs_mount_dir bash -c "$1"
|
||||
chroot $c_zfs_mount_dir bash -c "DEBIAN_FRONTEND=noninteractive $1"
|
||||
}
|
||||
|
||||
function unmount_and_export_fs {
|
||||
@@ -754,9 +754,11 @@ chroot_execute "echo options zfs zfs_arc_max=$((v_zfs_arc_max_mb * 1024 * 1024))
|
||||
|
||||
echo "======= setting up grub =========="
|
||||
chroot_execute "echo 'grub-pc grub-pc/install_devices_empty boolean true' | debconf-set-selections"
|
||||
chroot_execute "DEBIAN_FRONTEND=noninteractive apt install --yes grub-legacy"
|
||||
chroot_execute "DEBIAN_FRONTEND=noninteractive apt install --yes grub-pc"
|
||||
chroot_execute "grub-install --recheck ${v_selected_disks[0]}"
|
||||
chroot_execute "apt install --yes grub-legacy"
|
||||
chroot_execute "apt install --yes grub-pc"
|
||||
for disk in ${v_selected_disks[@]}; do
|
||||
chroot_execute "grub-install --recheck $disk"
|
||||
done
|
||||
|
||||
chroot_execute "sed -i 's/#GRUB_TERMINAL=console/GRUB_TERMINAL=console/g' /etc/default/grub"
|
||||
chroot_execute "sed -i 's|GRUB_CMDLINE_LINUX_DEFAULT=.*|GRUB_CMDLINE_LINUX_DEFAULT=\"net.ifnames=0\"|' /etc/default/grub"
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
|
||||
: <<'end_header_info'
|
||||
(c) Andrey Prokopenko job@terem.fr
|
||||
fully automatic script to install Debian 11 with ZFS root on Hetzner VPS
|
||||
fully automatic script to install Debian 12 with ZFS root on Hetzner VPS
|
||||
WARNING: all data on the disk will be destroyed
|
||||
How to use: add SSH key to the rescue console, set it OS to linux64, then press "mount rescue and power cycle" button
|
||||
Next, connect via SSH to console, and run the script
|
||||
@@ -18,6 +18,7 @@ set -o pipefail
|
||||
set -o nounset
|
||||
|
||||
export TMPDIR=/tmp
|
||||
export DEBIAN_FRONTEND=noninteractive
|
||||
|
||||
# Variables
|
||||
v_bpool_name=
|
||||
@@ -49,6 +50,7 @@ c_log_dir=$(dirname "$(mktemp)")/zfs-hetzner-vm
|
||||
c_install_log=$c_log_dir/install.log
|
||||
c_lsb_release_log=$c_log_dir/lsb_release.log
|
||||
c_disks_log=$c_log_dir/disks.log
|
||||
c_efimode_enabled="$(if [[ -d /sys/firmware/efi/efivars ]]; then echo 1; else echo 0; fi)"
|
||||
|
||||
function activate_debug {
|
||||
mkdir -p "$c_log_dir"
|
||||
@@ -107,7 +109,7 @@ function display_intro_banner {
|
||||
print_step_info_header
|
||||
|
||||
local dialog_message='Hello!
|
||||
This script will prepare the ZFS pools, then install and configure minimal Debian 11 with ZFS root on Hetzner hosting VPS instance
|
||||
This script will prepare the ZFS pools, then install and configure minimal Debian 12 with ZFS root on Hetzner hosting VPS instance
|
||||
The script with minimal changes may be used on any other hosting provider supporting KVM virtualization and offering Debian-based rescue system.
|
||||
In order to stop the procedure, hit Esc twice during dialogs (excluding yes/no ones), or Ctrl+C while any operation is running.
|
||||
'
|
||||
@@ -400,7 +402,7 @@ function determine_kernel_variant {
|
||||
}
|
||||
|
||||
function chroot_execute {
|
||||
chroot $c_zfs_mount_dir bash -c "$1"
|
||||
chroot $c_zfs_mount_dir bash -c "DEBIAN_FRONTEND=noninteractive $1"
|
||||
}
|
||||
|
||||
function unmount_and_export_fs {
|
||||
@@ -490,8 +492,12 @@ clear
|
||||
|
||||
echo "===========remove unused kernels in rescue system========="
|
||||
for kver in $(find /lib/modules/* -maxdepth 0 -type d | grep -v "$(uname -r)" | cut -s -d "/" -f 4); do
|
||||
if dpkg -l "linux-headers-$kver" 2>/dev/null | grep -q "^ii"; then
|
||||
apt purge --yes "linux-headers-$kver"
|
||||
fi
|
||||
if dpkg -l "linux-image-$kver" 2>/dev/null | grep -q "^ii"; then
|
||||
apt purge --yes "linux-image-$kver"
|
||||
fi
|
||||
done
|
||||
|
||||
echo "======= installing zfs on rescue system =========="
|
||||
@@ -505,7 +511,7 @@ echo "======= installing zfs on rescue system =========="
|
||||
echo -e "deb http://deb.debian.org/debian/ testing main contrib non-free\ndeb http://deb.debian.org/debian/ testing main contrib non-free\n" >/etc/apt/sources.list.d/bookworm-testing.list
|
||||
echo -e "Package: src:zfs-linux\nPin: release n=testing\nPin-Priority: 990\n" > /etc/apt/preferences.d/90_zfs
|
||||
apt update
|
||||
apt install -t testing --yes zfs-dkms zfsutils-linux
|
||||
apt install -t testing --yes -o Dpkg::Options::="--force-confdef" -o Dpkg::Options::="--force-confold" zfs-dkms zfsutils-linux
|
||||
rm /etc/apt/sources.list.d/bookworm-testing.list
|
||||
rm /etc/apt/preferences.d/90_zfs
|
||||
apt update
|
||||
@@ -522,7 +528,11 @@ echo "======= partitioning the disk =========="
|
||||
|
||||
for selected_disk in "${v_selected_disks[@]}"; do
|
||||
wipefs --all --force "$selected_disk"
|
||||
if (( c_efimode_enabled == 1 )); then
|
||||
sgdisk -a1 -n1:24K:+1G -t1:EF00 "$selected_disk" # EFI partition
|
||||
else
|
||||
sgdisk -a1 -n1:24K:+1000K -t1:EF02 "$selected_disk"
|
||||
fi
|
||||
sgdisk -n2:0:+2G -t2:BF01 "$selected_disk" # Boot pool
|
||||
sgdisk -n3:0:"$tail_space_parameter" -t3:BF01 "$selected_disk" # Root pool
|
||||
done
|
||||
@@ -553,13 +563,15 @@ echo "======= create zfs pools and datasets =========="
|
||||
|
||||
# shellcheck disable=SC2086
|
||||
zpool create \
|
||||
$v_bpool_tweaks -O canmount=off -O devices=off \
|
||||
-m none \
|
||||
-o cachefile=/etc/zpool.cache \
|
||||
-o compatibility=grub2 \
|
||||
-O mountpoint=/boot -R $c_zfs_mount_dir -f \
|
||||
$v_bpool_name $pools_mirror_option "${bpool_disks_partitions[@]}"
|
||||
|
||||
# shellcheck disable=SC2086
|
||||
echo -n "$v_passphrase" | zpool create \
|
||||
-m none \
|
||||
$v_rpool_tweaks \
|
||||
-o cachefile=/etc/zpool.cache \
|
||||
"${encryption_options[@]}" \
|
||||
@@ -606,6 +618,16 @@ if [[ $v_swap_size -gt 0 ]]; then
|
||||
mkswap -f "/dev/zvol/$v_rpool_name/swap"
|
||||
fi
|
||||
|
||||
if (( c_efimode_enabled == 1 )); then
|
||||
echo "======= create filesystem on EFI partition(s) =========="
|
||||
|
||||
for selected_disk in "${v_selected_disks[@]}"; do
|
||||
mkfs.fat -F32 "${selected_disk}-part1"
|
||||
done
|
||||
mkdir -p "$c_zfs_mount_dir/boot/efi"
|
||||
mount "${v_selected_disks[0]}-part1" "$c_zfs_mount_dir/boot/efi"
|
||||
fi
|
||||
|
||||
echo "======= setting up initial system packages =========="
|
||||
debootstrap --arch=amd64 bookworm "$c_zfs_mount_dir" "$c_deb_packages_repo"
|
||||
|
||||
@@ -694,7 +716,6 @@ console-setup console-setup/fontsize-text47 select 8x16
|
||||
console-setup console-setup/codesetcode string Lat15
|
||||
tzdata tzdata/Areas select Europe
|
||||
tzdata tzdata/Zones/Europe select Vienna
|
||||
grub-pc grub-pc/install_devices_empty boolean true
|
||||
CONF'
|
||||
|
||||
chroot_execute "dpkg-reconfigure locales -f noninteractive"
|
||||
@@ -752,10 +773,22 @@ echo "========setting up zfs module parameters========"
|
||||
chroot_execute "echo options zfs zfs_arc_max=$((v_zfs_arc_max_mb * 1024 * 1024)) >> /etc/modprobe.d/zfs.conf"
|
||||
|
||||
echo "======= setting up grub =========="
|
||||
chroot_execute "echo 'grub-pc grub-pc/install_devices_empty boolean true' | debconf-set-selections"
|
||||
chroot_execute "DEBIAN_FRONTEND=noninteractive apt install --yes grub-legacy"
|
||||
chroot_execute "DEBIAN_FRONTEND=noninteractive apt install --yes grub-pc"
|
||||
chroot_execute "grub-install --recheck ${v_selected_disks[0]}"
|
||||
if (( c_efimode_enabled == 1 )); then
|
||||
chroot_execute "apt install --yes grub-efi-amd64"
|
||||
else
|
||||
chroot_execute "echo 'grub-pc grub-pc/install_devices_empty boolean true' | debconf-set-selections"
|
||||
chroot_execute "apt install --yes grub-legacy"
|
||||
chroot_execute "apt install --yes grub-pc"
|
||||
fi
|
||||
|
||||
if (( c_efimode_enabled == 1 )); then
|
||||
#chroot_execute grub-probe /boot
|
||||
chroot_execute grub-install --target=x86_64-efi --efi-directory=/boot/efi --bootloader-id=debian --recheck
|
||||
else
|
||||
for disk in ${v_selected_disks[@]}; do
|
||||
chroot_execute "grub-install --recheck $disk"
|
||||
done
|
||||
fi
|
||||
|
||||
chroot_execute "sed -i 's/#GRUB_TERMINAL=console/GRUB_TERMINAL=console/g' /etc/default/grub"
|
||||
chroot_execute "sed -i 's|GRUB_CMDLINE_LINUX_DEFAULT=.*|GRUB_CMDLINE_LINUX_DEFAULT=\"net.ifnames=0\"|' /etc/default/grub"
|
||||
@@ -853,6 +886,10 @@ else
|
||||
fi
|
||||
|
||||
echo "======= setting mountpoints =========="
|
||||
if (( c_efimode_enabled == 1 )); then
|
||||
umount "$c_zfs_mount_dir/boot/efi"
|
||||
fi
|
||||
|
||||
chroot_execute "zfs set mountpoint=legacy $v_bpool_name/BOOT/debian"
|
||||
chroot_execute "echo $v_bpool_name/BOOT/debian /boot zfs nodev,relatime,x-systemd.requires=zfs-mount.service,x-systemd.device-timeout=10 0 0 > /etc/fstab"
|
||||
|
||||
|
||||
951
hetzner-debian13-zfs-setup.sh
Normal file
951
hetzner-debian13-zfs-setup.sh
Normal file
@@ -0,0 +1,951 @@
|
||||
#!/bin/bash
|
||||
|
||||
: <<'end_header_info'
|
||||
(c) Andrey Prokopenko job@terem.fr
|
||||
fully automatic script to install Debian 13 with ZFS root on Hetzner VPS
|
||||
WARNING: all data on the disk will be destroyed
|
||||
How to use: add SSH key to the rescue console, then press "mount rescue and power cycle" button
|
||||
Next, connect via SSH to console, and run the script
|
||||
Answer script questions about desired hostname and ZFS ARC cache size
|
||||
To cope with network failures its higly recommended to run the script inside screen console
|
||||
screen -dmS zfs
|
||||
screen -r zfs
|
||||
To detach from screen console, hit Ctrl-d then a
|
||||
end_header_info
|
||||
|
||||
set -euo pipefail
|
||||
|
||||
# ---- Configuration ----
|
||||
SYSTEM_HOSTNAME=""
|
||||
ROOT_PASSWORD=""
|
||||
ZFS_POOL=""
|
||||
DEBIAN_CODENAME="trixie" # Debian 13
|
||||
TARGET="/mnt/debian"
|
||||
|
||||
ZBM_BIOS_URL="https://github.com/zbm-dev/zfsbootmenu/releases/download/v3.0.1/zfsbootmenu-release-x86_64-v3.0.1-linux6.1.tar.gz"
|
||||
ZBM_EFI_URL="https://github.com/zbm-dev/zfsbootmenu/releases/download/v3.0.1/zfsbootmenu-release-x86_64-v3.0.1-linux6.1.EFI"
|
||||
|
||||
MAIN_BOOT="/main_boot"
|
||||
|
||||
# Hetzner mirrors for Debian
|
||||
MIRROR_SITE="https://mirror.hetzner.com"
|
||||
MIRROR_MAIN="deb ${MIRROR_SITE}/debian/packages ${DEBIAN_CODENAME} main contrib non-free non-free-firmware"
|
||||
MIRROR_UPDATES="deb ${MIRROR_SITE}/debian/packages ${DEBIAN_CODENAME}-updates main contrib non-free non-free-firmware"
|
||||
MIRROR_SECURITY="deb ${MIRROR_SITE}/debian/security ${DEBIAN_CODENAME}-security main contrib non-free non-free-firmware"
|
||||
|
||||
# Global variables
|
||||
INSTALL_DISK=""
|
||||
EFI_MODE=false
|
||||
BOOT_LABEL=""
|
||||
BOOT_TYPE=""
|
||||
BOOT_PART=""
|
||||
ZFS_PART=""
|
||||
|
||||
# ---- User Input Functions ----
|
||||
function setup_whiptail_colors {
|
||||
# Green text on black background - classic terminal theme
|
||||
export NEWT_COLORS='
|
||||
root=green,black
|
||||
window=green,black
|
||||
shadow=green,black
|
||||
border=green,black
|
||||
title=green,black
|
||||
textbox=green,black
|
||||
button=black,green
|
||||
listbox=green,black
|
||||
actlistbox=black,green
|
||||
actsellistbox=black,green
|
||||
checkbox=green,black
|
||||
actcheckbox=black,green
|
||||
entry=green,black
|
||||
label=green,black
|
||||
'
|
||||
}
|
||||
|
||||
function check_whiptail {
|
||||
if ! command -v whiptail &> /dev/null; then
|
||||
echo "Installing whiptail..."
|
||||
apt update
|
||||
apt install -y whiptail
|
||||
fi
|
||||
setup_whiptail_colors
|
||||
}
|
||||
|
||||
function get_hostname {
|
||||
while true; do
|
||||
SYSTEM_HOSTNAME=$(whiptail \
|
||||
--title " System Hostname " \
|
||||
--inputbox "\nEnter the hostname for the new system:" \
|
||||
10 60 "zfs-debian" \
|
||||
3>&1 1>&2 2>&3)
|
||||
|
||||
local exit_status=$?
|
||||
if [ $exit_status -ne 0 ]; then
|
||||
echo "Installation cancelled by user."
|
||||
exit 1
|
||||
fi
|
||||
|
||||
# Validate hostname
|
||||
if [[ "$SYSTEM_HOSTNAME" =~ ^[a-zA-Z0-9][a-zA-Z0-9-]*[a-zA-Z0-9]$ ]] && [[ ${#SYSTEM_HOSTNAME} -le 63 ]]; then
|
||||
break
|
||||
else
|
||||
whiptail \
|
||||
--title " Invalid Hostname " \
|
||||
--msgbox "Invalid hostname. Please use only letters, numbers, and hyphens. Must start and end with alphanumeric character. Maximum 63 characters." \
|
||||
12 60
|
||||
fi
|
||||
done
|
||||
}
|
||||
|
||||
function get_zfs_pool_name {
|
||||
while true; do
|
||||
ZFS_POOL=$(whiptail \
|
||||
--title " ZFS Pool Name " \
|
||||
--inputbox "\nEnter the name for the ZFS pool:" \
|
||||
10 60 "rpool" \
|
||||
3>&1 1>&2 2>&3)
|
||||
|
||||
local exit_status=$?
|
||||
if [ $exit_status -ne 0 ]; then
|
||||
echo "Installation cancelled by user."
|
||||
exit 1
|
||||
fi
|
||||
|
||||
# Validate ZFS pool name
|
||||
if [[ "$ZFS_POOL" =~ ^[a-zA-Z][a-zA-Z0-9_-]*$ ]] && [[ ${#ZFS_POOL} -le 255 ]]; then
|
||||
break
|
||||
else
|
||||
whiptail \
|
||||
--title " Invalid Pool Name " \
|
||||
--msgbox "Invalid ZFS pool name. Must start with a letter and contain only letters, numbers, hyphens, and underscores. Maximum 255 characters." \
|
||||
12 60
|
||||
fi
|
||||
done
|
||||
}
|
||||
|
||||
function get_root_password {
|
||||
while true; do
|
||||
# Get first password input
|
||||
local password1
|
||||
local password2
|
||||
|
||||
password1=$(whiptail \
|
||||
--title " Root Password " \
|
||||
--passwordbox "\nEnter root password (input hidden):" \
|
||||
10 60 \
|
||||
3>&1 1>&2 2>&3)
|
||||
|
||||
local exit_status=$?
|
||||
if [ $exit_status -ne 0 ]; then
|
||||
echo "Installation cancelled by user."
|
||||
exit 1
|
||||
fi
|
||||
|
||||
# Get password confirmation
|
||||
password2=$(whiptail \
|
||||
--title " Confirm Root Password " \
|
||||
--passwordbox "\nConfirm root password (input hidden):" \
|
||||
10 60 \
|
||||
3>&1 1>&2 2>&3)
|
||||
|
||||
exit_status=$?
|
||||
if [ $exit_status -ne 0 ]; then
|
||||
echo "Installation cancelled by user."
|
||||
exit 1
|
||||
fi
|
||||
|
||||
# Check if passwords match
|
||||
if [ "$password1" = "$password2" ]; then
|
||||
if [ -n "$password1" ]; then
|
||||
ROOT_PASSWORD="$password1"
|
||||
break
|
||||
else
|
||||
whiptail \
|
||||
--title " Empty Password " \
|
||||
--msgbox "Password cannot be empty. Please enter a password." \
|
||||
10 50
|
||||
fi
|
||||
else
|
||||
whiptail \
|
||||
--title " Password Mismatch " \
|
||||
--msgbox "Passwords do not match. Please try again." \
|
||||
10 50
|
||||
fi
|
||||
done
|
||||
}
|
||||
|
||||
function show_summary_and_confirm {
|
||||
local summary="Please review the installation settings:
|
||||
|
||||
Hostname: $SYSTEM_HOSTNAME
|
||||
ZFS Pool: $ZFS_POOL
|
||||
Debian Version: $DEBIAN_CODENAME (13)
|
||||
Target: $TARGET
|
||||
Boot Mode: $([ "$EFI_MODE" = true ] && echo "EFI" || echo "BIOS")
|
||||
Install Disk: $INSTALL_DISK
|
||||
|
||||
*** WARNING: This will DESTROY ALL DATA on $INSTALL_DISK! ***
|
||||
|
||||
Do you want to continue with the installation?"
|
||||
|
||||
if whiptail \
|
||||
--title " Installation Summary " \
|
||||
--yesno "$summary" \
|
||||
18 60; then
|
||||
# User confirmed - just continue silently
|
||||
echo "User confirmed installation. Starting now..."
|
||||
else
|
||||
echo "Installation cancelled by user."
|
||||
exit 1
|
||||
fi
|
||||
}
|
||||
|
||||
function get_user_input {
|
||||
echo "======= Gathering Installation Parameters =========="
|
||||
check_whiptail
|
||||
|
||||
# Show welcome message
|
||||
whiptail \
|
||||
--title " ZFS Debian Installer " \
|
||||
--msgbox "Welcome to the ZFS Debian Installer for Hetzner Cloud.\n\nThis script will install Debian 13 with ZFS root on your server." \
|
||||
12 60
|
||||
|
||||
# Get user inputs
|
||||
get_hostname
|
||||
get_zfs_pool_name
|
||||
get_root_password
|
||||
}
|
||||
|
||||
# ---- System Detection Functions ----
|
||||
function detect_efi {
|
||||
echo "======= Detecting EFI support =========="
|
||||
|
||||
if [ -d /sys/firmware/efi ]; then
|
||||
echo "✓ EFI firmware detected"
|
||||
EFI_MODE=true
|
||||
BOOT_LABEL="EFI"
|
||||
BOOT_TYPE="ef00"
|
||||
else
|
||||
echo "✓ Legacy BIOS mode detected"
|
||||
EFI_MODE=false
|
||||
BOOT_LABEL="boot"
|
||||
BOOT_TYPE="8300"
|
||||
fi
|
||||
}
|
||||
|
||||
function find_install_disk {
|
||||
echo "======= Finding install disk =========="
|
||||
|
||||
local candidate_disks=()
|
||||
|
||||
# Use lsblk to find all unmounted, writable disks
|
||||
while IFS= read -r disk; do
|
||||
[[ -n "$disk" ]] && candidate_disks+=("$disk")
|
||||
done < <(lsblk -npo NAME,TYPE,RO,MOUNTPOINT | awk '
|
||||
$2 == "disk" && $3 == "0" && $4 == "" {print $1}
|
||||
')
|
||||
|
||||
if [[ ${#candidate_disks[@]} -eq 0 ]]; then
|
||||
echo "No suitable installation disks found" >&2
|
||||
echo "Looking for: unmounted, writable disks without partitions in use" >&2
|
||||
exit 1
|
||||
fi
|
||||
|
||||
INSTALL_DISK="${candidate_disks[0]}"
|
||||
echo "Using installation disk: $INSTALL_DISK"
|
||||
|
||||
# Show all available disks for verification
|
||||
echo "All available disks:"
|
||||
lsblk -o NAME,SIZE,TYPE,MOUNTPOINT,RO | grep -v loop
|
||||
}
|
||||
|
||||
# ---- Rescue System Preparation Functions ----
|
||||
function remove_unused_kernels {
|
||||
echo "=========== Removing unused kernels in rescue system =========="
|
||||
for kver in $(find /lib/modules/* -maxdepth 0 -type d \
|
||||
| grep -v "$(uname -r)" \
|
||||
| cut -s -d "/" -f 4); do
|
||||
|
||||
for pkg in "linux-headers-$kver" "linux-image-$kver"; do
|
||||
if dpkg -l "$pkg" 2>/dev/null | grep -q '^ii'; then
|
||||
echo "Purging $pkg ..."
|
||||
apt purge --yes "$pkg"
|
||||
else
|
||||
echo "Package $pkg not installed, skipping."
|
||||
fi
|
||||
done
|
||||
done
|
||||
}
|
||||
|
||||
function install_zfs_on_rescue_system {
|
||||
echo "======= Installing ZFS on rescue system =========="
|
||||
echo "zfs-dkms zfs-dkms/note-incompatible-licenses note true" | debconf-set-selections
|
||||
# Enable backports for newer ZFS version
|
||||
echo "deb http://mirror.hetzner.com/debian/packages bookworm-backports main contrib" > /etc/apt/sources.list.d/backports.list
|
||||
apt update
|
||||
apt -t bookworm-backports install -y zfsutils-linux
|
||||
}
|
||||
|
||||
# ---- Disk Partitioning Functions ----
|
||||
function partition_disk {
|
||||
echo "======= Partitioning disk =========="
|
||||
sgdisk -Z "$INSTALL_DISK"
|
||||
|
||||
if [ "$EFI_MODE" = true ]; then
|
||||
echo "Creating EFI partition layout"
|
||||
# EFI System Partition (ESP) - 64MB is plenty for ZFSBootMenu
|
||||
sgdisk -n1:1M:+128M -t1:ef00 -c1:"EFI" "$INSTALL_DISK"
|
||||
# ZFS partition
|
||||
sgdisk -n2:0:0 -t2:bf00 -c2:"zfs" "$INSTALL_DISK"
|
||||
else
|
||||
echo "Creating BIOS partition layout"
|
||||
# /boot partition - 64MB is also sufficient for BIOS ZFSBootMenu
|
||||
sgdisk -n1:1M:+128M -t1:8300 -c1:"boot" "$INSTALL_DISK"
|
||||
# ZFS partition
|
||||
sgdisk -n2:0:0 -t2:bf00 -c2:"zfs" "$INSTALL_DISK"
|
||||
# Set legacy BIOS bootable flag
|
||||
sgdisk -A 1:set:2 "$INSTALL_DISK"
|
||||
fi
|
||||
|
||||
partprobe "$INSTALL_DISK" || true
|
||||
udevadm settle
|
||||
|
||||
# Set partition variables based on mode
|
||||
if [ "$EFI_MODE" = true ]; then
|
||||
BOOT_PART="$(blkid -t PARTLABEL='EFI' -o device)"
|
||||
ZFS_PART="$(blkid -t PARTLABEL='zfs' -o device)"
|
||||
# Format ESP as FAT32
|
||||
mkfs.fat -F 32 -n EFI "$BOOT_PART"
|
||||
else
|
||||
BOOT_PART="$(blkid -t PARTLABEL='boot' -o device)"
|
||||
ZFS_PART="$(blkid -t PARTLABEL='zfs' -o device)"
|
||||
mkfs.ext4 -F -L boot "$BOOT_PART"
|
||||
fi
|
||||
}
|
||||
|
||||
# ---- ZFS Pool and Dataset Functions ----
|
||||
function create_zfs_pool {
|
||||
echo "======= Creating ZFS pool =========="
|
||||
# Clean up any existing ZFS binaries in PATH
|
||||
rm -f "$(which zfs)" 2>/dev/null || true
|
||||
rm -f "$(which zpool)" 2>/dev/null || true
|
||||
|
||||
export PATH=/usr/sbin:$PATH
|
||||
modprobe zfs
|
||||
|
||||
zpool create -f -o ashift=12 \
|
||||
-o cachefile="/etc/zfs/zpool.cache" \
|
||||
-O compression=lz4 \
|
||||
-O acltype=posixacl \
|
||||
-O xattr=sa \
|
||||
-O mountpoint=none \
|
||||
"$ZFS_POOL" "$ZFS_PART"
|
||||
|
||||
zfs create -o mountpoint=none "$ZFS_POOL/ROOT"
|
||||
zfs create -o mountpoint=legacy "$ZFS_POOL/ROOT/debian"
|
||||
|
||||
echo "======= Assigning $ZFS_POOL/ROOT/debian dataset as bootable =========="
|
||||
zpool set bootfs="$ZFS_POOL/ROOT/debian" "$ZFS_POOL"
|
||||
zpool set cachefile="/etc/zfs/zpool.cache" "$ZFS_POOL"
|
||||
}
|
||||
|
||||
function create_additional_zfs_datasets {
|
||||
echo "======= Creating additional ZFS datasets with TEMPORARY mountpoints =========="
|
||||
|
||||
# Ensure parent datasets are created first
|
||||
zfs create -o mountpoint=none "$ZFS_POOL/ROOT/debian/var"
|
||||
zfs create -o mountpoint=none "$ZFS_POOL/ROOT/debian/var/cache"
|
||||
|
||||
# Create leaf datasets with temporary mountpoints under $TARGET
|
||||
zfs create -o com.sun:auto-snapshot=false -o mountpoint="$TARGET/tmp" "$ZFS_POOL/ROOT/debian/tmp"
|
||||
zfs set devices=off "$ZFS_POOL/ROOT/debian/tmp"
|
||||
|
||||
zfs create -o com.sun:auto-snapshot=false -o mountpoint="$TARGET/var/tmp" "$ZFS_POOL/ROOT/debian/var/tmp"
|
||||
zfs set devices=off "$ZFS_POOL/ROOT/debian/var/tmp"
|
||||
|
||||
zfs create -o mountpoint="$TARGET/var/log" "$ZFS_POOL/ROOT/debian/var/log"
|
||||
zfs set atime=off "$ZFS_POOL/ROOT/debian/var/log"
|
||||
|
||||
zfs create -o com.sun:auto-snapshot=false -o mountpoint="$TARGET/var/cache/apt" "$ZFS_POOL/ROOT/debian/var/cache/apt"
|
||||
zfs set atime=off "$ZFS_POOL/ROOT/debian/var/cache/apt"
|
||||
|
||||
# Create home dataset separately
|
||||
zfs create -o mountpoint="$TARGET/home" "$ZFS_POOL/home"
|
||||
|
||||
# Mount all datasets
|
||||
zfs mount -a
|
||||
|
||||
# Set permissions on the actual ZFS datasets
|
||||
echo "Setting permissions on ZFS datasets..."
|
||||
chmod 1777 "$TARGET/tmp"
|
||||
chmod 1777 "$TARGET/var/tmp"
|
||||
echo "✓ Temp directory permissions set (1777)"
|
||||
}
|
||||
|
||||
function set_final_mountpoints {
|
||||
echo "======= Setting final mountpoints =========="
|
||||
|
||||
# Leaf datasets - actual system mountpoints
|
||||
zfs set mountpoint=/tmp "$ZFS_POOL/ROOT/debian/tmp"
|
||||
zfs set mountpoint=/var/tmp "$ZFS_POOL/ROOT/debian/var/tmp"
|
||||
zfs set mountpoint=/var/log "$ZFS_POOL/ROOT/debian/var/log"
|
||||
zfs set mountpoint=/var/cache/apt "$ZFS_POOL/ROOT/debian/var/cache/apt"
|
||||
|
||||
# Home dataset - separate from OS
|
||||
zfs set mountpoint=/home "$ZFS_POOL/home"
|
||||
echo ""
|
||||
echo "Detailed dataset listing:"
|
||||
zfs list -o name,mountpoint -r "$ZFS_POOL"
|
||||
}
|
||||
|
||||
# ---- System Bootstrap Functions ----
|
||||
function bootstrap_debian_system {
|
||||
echo "======= Bootstrapping Debian to temporary directory =========="
|
||||
|
||||
# Install debootstrap if not available
|
||||
if ! command -v debootstrap &> /dev/null; then
|
||||
echo "Installing debootstrap..."
|
||||
apt update
|
||||
apt install -y debootstrap
|
||||
fi
|
||||
|
||||
#echo "======= Copying staged system to ZFS datasets =========="
|
||||
# Mount root dataset for copying
|
||||
mkdir -p "$TARGET"
|
||||
mount -t zfs "$ZFS_POOL/ROOT/debian" "$TARGET"
|
||||
|
||||
create_additional_zfs_datasets
|
||||
|
||||
# Bootstrap Debian 13 (Trixie) - include dbus to satisfy systemd-resolved dependency
|
||||
debootstrap \
|
||||
--components=main,contrib,non-free,non-free-firmware \
|
||||
--include=initramfs-tools,dbus,locales,debconf-i18n,apt-utils,keyboard-configuration,console-setup,kbd,zstd,systemd-resolved,systemd-timesyncd \
|
||||
"$DEBIAN_CODENAME" \
|
||||
"$TARGET" \
|
||||
"$MIRROR_SITE/debian/packages"
|
||||
|
||||
}
|
||||
|
||||
function setup_chroot_environment {
|
||||
echo "======= Mounting virtual filesystems for chroot =========="
|
||||
mount -t proc proc "$TARGET/proc"
|
||||
mount -t sysfs sysfs "$TARGET/sys"
|
||||
|
||||
# Only mount specific tmpfs directories, not the entire /run
|
||||
mkdir -p "$TARGET/run/lock" "$TARGET/run/shm"
|
||||
mount -t tmpfs tmpfs "$TARGET/run/lock"
|
||||
mount -t tmpfs tmpfs "$TARGET/run/shm"
|
||||
mount -t tmpfs tmpfs "$TARGET/tmp"
|
||||
|
||||
mount --bind /dev "$TARGET/dev"
|
||||
mount --bind /dev/pts "$TARGET/dev/pts"
|
||||
}
|
||||
|
||||
# ---- System Configuration Functions ----
|
||||
function configure_basic_system {
|
||||
echo "======= Configuring basic system settings =========="
|
||||
chroot "$TARGET" /bin/bash <<EOF
|
||||
set -euo pipefail
|
||||
|
||||
# Set hostname from variable
|
||||
echo "$SYSTEM_HOSTNAME" > /etc/hostname
|
||||
|
||||
# Configure timezone (Vienna)
|
||||
echo "Europe/Vienna" > /etc/timezone
|
||||
ln -sf /usr/share/zoneinfo/Europe/Vienna /etc/localtime
|
||||
|
||||
# Generate locales
|
||||
cat > /etc/locale.gen <<'LOCALES'
|
||||
en_US.UTF-8 UTF-8
|
||||
de_AT.UTF-8 UTF-8
|
||||
fr_FR.UTF-8 UTF-8
|
||||
ru_RU.UTF-8 UTF-8
|
||||
LOCALES
|
||||
|
||||
locale-gen
|
||||
|
||||
# Set default locale
|
||||
update-locale LANG=en_US.UTF-8 LC_ALL=en_US.UTF-8
|
||||
|
||||
# Configure keyboard for German and US with Alt+Shift toggle
|
||||
cat > /etc/default/keyboard <<'KEYBOARD'
|
||||
# KEYBOARD CONFIGURATION FILE
|
||||
|
||||
# Consult the keyboard(5) manual page.
|
||||
|
||||
XKBMODEL="pc105"
|
||||
XKBLAYOUT="de,ru"
|
||||
XKBVARIANT=","
|
||||
XKBOPTIONS="grp:ctrl_shift_toggle"
|
||||
|
||||
BACKSPACE="guess"
|
||||
KEYBOARD
|
||||
|
||||
# Apply keyboard configuration to console
|
||||
setupcon --force
|
||||
|
||||
# Update /etc/hosts with the hostname
|
||||
echo "127.0.0.1 localhost" > /etc/hosts
|
||||
echo "127.0.1.1 $SYSTEM_HOSTNAME" >> /etc/hosts
|
||||
echo "::1 localhost ip6-localhost ip6-loopback" >> /etc/hosts
|
||||
echo "ff02::1 ip6-allnodes" >> /etc/hosts
|
||||
echo "ff02::2 ip6-allrouters" >> /etc/hosts
|
||||
|
||||
# Set proper permissions for ZFS datasets
|
||||
chmod 1777 /tmp
|
||||
chmod 1777 /var/tmp
|
||||
EOF
|
||||
|
||||
echo "======= Configuration Summary ======="
|
||||
chroot "$TARGET" /bin/bash <<'EOF'
|
||||
echo "Hostname: $(cat /etc/hostname)"
|
||||
echo "Timezone: $(cat /etc/timezone)"
|
||||
echo "Current time: $(date)"
|
||||
echo "Default locale: $(grep LANG /etc/default/locale)"
|
||||
echo "Available locales:"
|
||||
locale -a | grep -E "(en_US|de_AT|fr_FR|ru_RU)"
|
||||
echo "Keyboard layout: $(grep XKBLAYOUT /etc/default/keyboard)"
|
||||
EOF
|
||||
}
|
||||
|
||||
function install_system_packages {
|
||||
echo "======= Installing ZFS and essential packages in chroot =========="
|
||||
chroot "$TARGET" /bin/bash <<'EOF'
|
||||
set -euo pipefail
|
||||
|
||||
# Configure sources.list for Debian 13
|
||||
cat > /etc/apt/sources.list <<'SOURCES'
|
||||
deb https://mirror.hetzner.com/debian/packages trixie main contrib non-free non-free-firmware
|
||||
deb https://mirror.hetzner.com/debian/packages trixie-updates main contrib non-free non-free-firmware
|
||||
deb https://mirror.hetzner.com/debian/security trixie-security main contrib non-free non-free-firmware
|
||||
deb https://mirror.hetzner.com/debian/packages trixie-backports main contrib non-free non-free-firmware
|
||||
SOURCES
|
||||
|
||||
# Update package lists
|
||||
apt update
|
||||
|
||||
# Install kernel
|
||||
apt install -y --no-install-recommends linux-image-cloud-amd64 linux-headers-cloud-amd64
|
||||
|
||||
# Install essential packages
|
||||
apt install -y curl nano htop net-tools ssh \
|
||||
apt-transport-https ca-certificates gnupg dirmngr \
|
||||
firmware-linux-free apparmor
|
||||
|
||||
echo "zfs-dkms zfs-dkms/note-incompatible-licenses note true" | debconf-set-selections
|
||||
|
||||
apt install -y -t trixie-backports zfsutils-linux zfs-initramfs zfs-dkms
|
||||
|
||||
# Get the actual kernel version installed in the chroot
|
||||
KERNEL_VERSION=$(ls /lib/modules/ | head -n1)
|
||||
echo "Detected kernel version: $KERNEL_VERSION"
|
||||
|
||||
# Verify ZFS module is available in the chroot filesystem
|
||||
echo "=== Verifying ZFS module in chroot ==="
|
||||
if find "/lib/modules/$KERNEL_VERSION" -name "*zfs*" -type f | grep -q .; then
|
||||
echo "✓ ZFS module files found in /lib/modules/$KERNEL_VERSION/"
|
||||
find "/lib/modules/$KERNEL_VERSION" -name "*zfs*" -type f
|
||||
else
|
||||
echo "✗ ZFS module files not found - attempting DKMS rebuild"
|
||||
dkms autoinstall -k "$KERNEL_VERSION" || true
|
||||
depmod -a "$KERNEL_VERSION"
|
||||
|
||||
# Check again after DKMS rebuild
|
||||
if find "/lib/modules/$KERNEL_VERSION" -name "*zfs*" -type f | grep -q .; then
|
||||
echo "✓ ZFS module files found after DKMS rebuild"
|
||||
else
|
||||
echo "✗ ZFS module files still not found - this may cause boot issues"
|
||||
fi
|
||||
fi
|
||||
|
||||
# Ensure ZFS module is included in initramfs
|
||||
echo "zfs" >> /etc/initramfs-tools/modules
|
||||
|
||||
# Generate initramfs with ZFS support
|
||||
update-initramfs -u -k all
|
||||
|
||||
# Verify kernel installation
|
||||
echo "Installed kernel packages:"
|
||||
dpkg -l | grep linux-image
|
||||
echo "Kernel version:"
|
||||
ls /lib/modules/
|
||||
echo "Kernel files in ZFS dataset:"
|
||||
ls -la /boot/vmlinuz* /boot/initrd.img* 2>/dev/null || echo "No kernel files found"
|
||||
EOF
|
||||
}
|
||||
|
||||
function verify_initramfs {
|
||||
echo "======= Verifying initramfs contents =========="
|
||||
chroot "$TARGET" /bin/bash <<'EOF'
|
||||
set -euo pipefail
|
||||
|
||||
echo "=== Checking initramfs for ZFS components ==="
|
||||
for initrd in /boot/initrd.img-*; do
|
||||
if [ -f "$initrd" ]; then
|
||||
echo "Checking: $initrd"
|
||||
lsinitramfs "$initrd" | grep -E "(zfs|pool|dataset|spl)" | head -10 || echo "No ZFS components found (this might be normal for first check)"
|
||||
echo "---"
|
||||
fi
|
||||
done
|
||||
|
||||
echo "=== Checking ZFS module files on disk ==="
|
||||
KERNEL_VERSION=$(ls /lib/modules/ | head -n1)
|
||||
find "/lib/modules/$KERNEL_VERSION" -name "*zfs*" -type f
|
||||
|
||||
echo "=== Testing ZFS commands ==="
|
||||
which zpool && zpool --version || echo "zpool not found"
|
||||
which zfs && zfs --version || echo "zfs not found"
|
||||
|
||||
echo "=== Checking DKMS status ==="
|
||||
dkms status || echo "DKMS not available"
|
||||
|
||||
echo "=== Checking if ZFS tools are properly installed ==="
|
||||
dpkg -l | grep -E "(zfs|spl)"
|
||||
|
||||
EOF
|
||||
}
|
||||
|
||||
function configure_ssh {
|
||||
echo "======= Setting up OpenSSH =========="
|
||||
mkdir -p "$TARGET/root/.ssh/"
|
||||
cp /root/.ssh/authorized_keys "$TARGET/root/.ssh/authorized_keys"
|
||||
sed -i 's/#PasswordAuthentication yes/PasswordAuthentication no/g' "$TARGET/etc/ssh/sshd_config"
|
||||
sed -i 's/#PubkeyAuthentication yes/PubkeyAuthentication yes/g' "$TARGET/etc/ssh/sshd_config"
|
||||
|
||||
chroot "$TARGET" /bin/bash <<'EOF'
|
||||
rm /etc/ssh/ssh_host_*
|
||||
dpkg-reconfigure openssh-server -f noninteractive
|
||||
EOF
|
||||
}
|
||||
|
||||
function set_root_credentials {
|
||||
echo "======= Setting root password =========="
|
||||
chroot "$TARGET" /bin/bash -c "echo root:$(printf "%q" "$ROOT_PASSWORD") | chpasswd"
|
||||
|
||||
echo "============ Setting up root prompt ============"
|
||||
cat > "$TARGET/root/.bashrc" <<CONF
|
||||
export PS1='\[\033[01;31m\]\u\[\033[01;33m\]@\[\033[01;32m\]\h \[\033[01;33m\]\w \[\033[01;35m\]\$ \[\033[00m\]'
|
||||
umask 022
|
||||
export LS_OPTIONS='--color=auto -h'
|
||||
eval "\$(dircolors)"
|
||||
CONF
|
||||
}
|
||||
|
||||
# ---- Bootloader Functions ----
|
||||
function setup_efi_boot {
|
||||
echo "======= Setting up EFI boot =========="
|
||||
|
||||
# Mount EFI System Partition
|
||||
mkdir -p "$MAIN_BOOT"
|
||||
mount "$BOOT_PART" "$MAIN_BOOT"
|
||||
|
||||
# Create EFI directory structure
|
||||
mkdir -p "$MAIN_BOOT/EFI/Boot"
|
||||
|
||||
# Download ZFSBootMenu EFI binary
|
||||
echo "Downloading ZFSBootMenu EFI binary from: $ZBM_EFI_URL"
|
||||
curl -L "$ZBM_EFI_URL" -o "$MAIN_BOOT/EFI/Boot/bootx64.efi"
|
||||
}
|
||||
|
||||
function setup_bios_boot {
|
||||
echo "======= Setting up BIOS boot =========="
|
||||
|
||||
# Mount boot partition
|
||||
mkdir -p "$MAIN_BOOT"
|
||||
mount "$BOOT_PART" "$MAIN_BOOT"
|
||||
|
||||
# Install extlinux in rescue system if needed
|
||||
if ! command -v extlinux &> /dev/null; then
|
||||
echo "Installing extlinux in rescue system..."
|
||||
apt update
|
||||
apt install -y extlinux
|
||||
fi
|
||||
|
||||
# Install extlinux
|
||||
extlinux --install "$MAIN_BOOT"
|
||||
|
||||
# Create extlinux configuration
|
||||
cat > "$MAIN_BOOT/extlinux.conf" << 'EOF'
|
||||
DEFAULT zfsbootmenu
|
||||
PROMPT 0
|
||||
TIMEOUT 0
|
||||
|
||||
LABEL zfsbootmenu
|
||||
LINUX /zfsbootmenu/vmlinuz-bootmenu
|
||||
INITRD /zfsbootmenu/initramfs-bootmenu.img
|
||||
APPEND ro quiet
|
||||
EOF
|
||||
|
||||
echo "Generated extlinux.conf:"
|
||||
cat "$MAIN_BOOT/extlinux.conf"
|
||||
|
||||
# Download and install ZFSBootMenu for BIOS
|
||||
local TEMP_ZBM=$(mktemp -d)
|
||||
echo "Downloading ZFSBootMenu for BIOS from: $ZBM_BIOS_URL"
|
||||
curl -L "$ZBM_BIOS_URL" -o "$TEMP_ZBM/zbm.tar.gz"
|
||||
tar -xz -C "$TEMP_ZBM" -f "$TEMP_ZBM/zbm.tar.gz" --strip-components=1
|
||||
|
||||
# Copy ZFSBootMenu to boot partition
|
||||
mkdir -p "$MAIN_BOOT/zfsbootmenu"
|
||||
cp "$TEMP_ZBM"/vmlinuz* "$MAIN_BOOT/zfsbootmenu/"
|
||||
cp "$TEMP_ZBM"/initramfs* "$MAIN_BOOT/zfsbootmenu/"
|
||||
|
||||
# Clean up
|
||||
rm -rf "$TEMP_ZBM"
|
||||
|
||||
echo "ZFSBootMenu files copied to boot partition:"
|
||||
ls -la "$MAIN_BOOT/zfsbootmenu/"
|
||||
|
||||
# Install MBR and set boot flag
|
||||
dd bs=440 conv=notrunc count=1 if="/usr/lib/EXTLINUX/gptmbr.bin" of="$INSTALL_DISK"
|
||||
parted "$INSTALL_DISK" set 1 boot on
|
||||
|
||||
echo "BIOS boot setup complete"
|
||||
}
|
||||
|
||||
function configure_bootloader {
|
||||
echo "======= Setting up boot based on firmware type =========="
|
||||
if [ "$EFI_MODE" = true ]; then
|
||||
setup_efi_boot
|
||||
else
|
||||
setup_bios_boot
|
||||
fi
|
||||
|
||||
echo "======= Configuring ZFSBootMenu for auto-detection =========="
|
||||
zfs set org.zfsbootmenu:commandline="ro quiet" "$ZFS_POOL/ROOT/debian"
|
||||
|
||||
echo "Boot configuration:"
|
||||
zfs get org.zfsbootmenu:commandline "$ZFS_POOL/ROOT/debian"
|
||||
}
|
||||
|
||||
# ---- System Services Functions ----
|
||||
function configure_system_services {
|
||||
echo "======= Configuring ZFS cachefile in chrooted system =========="
|
||||
mkdir -p "$TARGET/etc/zfs"
|
||||
cp /etc/zfs/zpool.cache "$TARGET/etc/zfs/zpool.cache"
|
||||
|
||||
echo "Cachefile status:"
|
||||
zpool get cachefile "$ZFS_POOL"
|
||||
ls -la "$TARGET/etc/zfs/zpool.cache" && echo "✓ Cachefile ready" || echo "✗ Cachefile failed"
|
||||
|
||||
echo "======= Enabling essential system services =========="
|
||||
chroot "$TARGET" /bin/bash <<'EOF'
|
||||
set -euo pipefail
|
||||
|
||||
systemctl enable systemd-resolved
|
||||
systemctl enable systemd-timesyncd
|
||||
systemctl enable systemd-networkd
|
||||
|
||||
systemctl enable zfs-import-cache
|
||||
systemctl enable zfs-mount
|
||||
|
||||
systemctl enable ssh
|
||||
systemctl enable apt-daily.timer
|
||||
|
||||
echo "Enabled services:"
|
||||
systemctl list-unit-files | grep enabled
|
||||
EOF
|
||||
}
|
||||
|
||||
function configure_networking {
|
||||
echo "======= Configuring systemd-networkd for Hetzner Cloud =========="
|
||||
|
||||
# Create systemd-networkd configuration for all ethernet interfaces
|
||||
mkdir -p "$TARGET/etc/systemd/network"
|
||||
|
||||
cat > "$TARGET/etc/systemd/network/10-hetzner.network" <<'EOF'
|
||||
[Match]
|
||||
Name=ens* enp* eth*
|
||||
|
||||
[Network]
|
||||
DHCP=yes
|
||||
IPv6PrivacyExtensions=yes
|
||||
|
||||
[DHCP]
|
||||
RouteMetric=100
|
||||
UseDNS=yes
|
||||
UseDomains=yes
|
||||
|
||||
[DHCPv4]
|
||||
RouteMetric=100
|
||||
UseDNS=yes
|
||||
UseDomains=yes
|
||||
|
||||
[IPv6AcceptRA]
|
||||
RouteMetric=100
|
||||
EOF
|
||||
|
||||
echo "systemd-networkd configuration:"
|
||||
cat "$TARGET/etc/systemd/network/10-hetzner.network"
|
||||
echo ""
|
||||
}
|
||||
|
||||
# ---- Cleanup and Finalization Functions ----
|
||||
function unmount_all_datasets_and_partitions {
|
||||
echo "======= Unmounting all datasets =========="
|
||||
|
||||
# First, unmount virtual filesystems that might be using the datasets
|
||||
echo "Unmounting virtual filesystems..."
|
||||
for dir in dev/pts dev tmp run/lock run/shm run sys proc; do
|
||||
if mountpoint -q "$TARGET/$dir"; then
|
||||
echo "Unmounting $TARGET/$dir"
|
||||
umount "$TARGET/$dir" 2>/dev/null || true
|
||||
fi
|
||||
done
|
||||
|
||||
# Give it a moment
|
||||
sleep 2
|
||||
|
||||
# Try to unmount boot partition first
|
||||
if mountpoint -q "$MAIN_BOOT"; then
|
||||
echo "Unmounting boot partition from $MAIN_BOOT"
|
||||
umount "$MAIN_BOOT" 2>/dev/null || true
|
||||
fi
|
||||
|
||||
# Unmount ZFS datasets
|
||||
echo "Unmounting ZFS datasets..."
|
||||
zfs umount -a 2>/dev/null || true
|
||||
|
||||
# Wait for unmounts to complete
|
||||
sleep 2
|
||||
|
||||
# If root dataset is still mounted, try lazy unmount
|
||||
if mountpoint -q "$TARGET"; then
|
||||
echo "Attempting lazy unmount of $TARGET"
|
||||
umount -l "$TARGET" 2>/dev/null || true
|
||||
fi
|
||||
|
||||
# Force unmount any stubborn ZFS datasets
|
||||
if zfs get mounted -r "$ZFS_POOL" 2>/dev/null | grep -q "yes"; then
|
||||
echo "Forcing unmount of remaining ZFS datasets..."
|
||||
zfs umount -a -f 2>/dev/null || true
|
||||
fi
|
||||
|
||||
# Final verification and force unmount if still mounted
|
||||
if mountpoint -q "$TARGET"; then
|
||||
echo "WARNING: $TARGET is still mounted! Attempting final cleanup..."
|
||||
# Use fuser to find what's using the mount
|
||||
if command -v fuser &> /dev/null; then
|
||||
fuser -mv "$TARGET" 2>/dev/null || true
|
||||
fi
|
||||
# Force lazy unmount as last resort
|
||||
umount -l "$TARGET" 2>/dev/null || true
|
||||
fi
|
||||
|
||||
# Final ZFS unmount check
|
||||
local mounted_count=0
|
||||
mounted_count=$(zfs get mounted -r "$ZFS_POOL" 2>/dev/null | grep -c "yes" || true)
|
||||
|
||||
if [ "$mounted_count" -gt 0 ]; then
|
||||
echo "WARNING: $mounted_count dataset(s) still mounted:"
|
||||
zfs get mounted -r "$ZFS_POOL" 2>/dev/null | grep "yes" || true
|
||||
else
|
||||
echo "✓ All ZFS datasets successfully unmounted"
|
||||
fi
|
||||
|
||||
# Verify $TARGET is unmounted
|
||||
if mountpoint -q "$TARGET"; then
|
||||
echo "WARNING: $TARGET is still mounted but continuing..."
|
||||
else
|
||||
echo "✓ $TARGET successfully unmounted"
|
||||
fi
|
||||
|
||||
# Verify $MAIN_BOOT is unmounted
|
||||
if mountpoint -q "$MAIN_BOOT"; then
|
||||
echo "WARNING: $MAIN_BOOT is still mounted!"
|
||||
else
|
||||
echo "✓ $MAIN_BOOT successfully unmounted"
|
||||
fi
|
||||
}
|
||||
|
||||
function unmount_chroot_environment {
|
||||
echo "======= Unmounting virtual filesystems =========="
|
||||
# Unmount virtual filesystems first
|
||||
for dir in dev/pts dev tmp run sys proc; do
|
||||
if mountpoint -q "$TARGET/$dir"; then
|
||||
echo "Unmounting $TARGET/$dir"
|
||||
umount "$TARGET/$dir" 2>/dev/null || true
|
||||
fi
|
||||
done
|
||||
}
|
||||
|
||||
function export_zfs_pool {
|
||||
echo "======= Exporting ZFS pool =========="
|
||||
# Export the pool to ensure clean state
|
||||
zpool export "$ZFS_POOL"
|
||||
echo "✓ ZFS pool '$ZFS_POOL' exported successfully"
|
||||
}
|
||||
|
||||
function show_final_instructions {
|
||||
echo ""
|
||||
echo "=========================================="
|
||||
echo " INSTALLATION COMPLETE! "
|
||||
echo "=========================================="
|
||||
echo ""
|
||||
echo "System Information:"
|
||||
echo " Hostname: $SYSTEM_HOSTNAME"
|
||||
echo " ZFS Pool: $ZFS_POOL"
|
||||
echo " Boot Mode: $([ "$EFI_MODE" = true ] && echo "EFI" || echo "BIOS")"
|
||||
echo " Debian Version: $DEBIAN_CODENAME"
|
||||
echo " Networking: systemd-networkd + systemd-resolved"
|
||||
echo ""
|
||||
echo "=========================================="
|
||||
echo "Rebooting..."
|
||||
}
|
||||
|
||||
# ---- Main Installation Flow ----
|
||||
function main {
|
||||
echo "Starting ZFS Debian 13 installation on Hetzner..."
|
||||
|
||||
# Get user input first
|
||||
get_user_input
|
||||
|
||||
# System detection
|
||||
detect_efi
|
||||
find_install_disk
|
||||
|
||||
# Show summary and get confirmation
|
||||
show_summary_and_confirm
|
||||
|
||||
# Rescue system preparation
|
||||
remove_unused_kernels
|
||||
install_zfs_on_rescue_system
|
||||
|
||||
# Disk partitioning
|
||||
partition_disk
|
||||
|
||||
# ZFS setup
|
||||
create_zfs_pool
|
||||
|
||||
# System installation
|
||||
bootstrap_debian_system
|
||||
setup_chroot_environment
|
||||
configure_basic_system
|
||||
install_system_packages
|
||||
|
||||
verify_initramfs
|
||||
configure_ssh
|
||||
set_root_credentials
|
||||
|
||||
# System configuration
|
||||
configure_system_services
|
||||
configure_networking
|
||||
|
||||
# Bootloader configuration
|
||||
configure_bootloader
|
||||
|
||||
# Finalization
|
||||
unmount_chroot_environment
|
||||
|
||||
unmount_all_datasets_and_partitions
|
||||
set_final_mountpoints
|
||||
export_zfs_pool
|
||||
|
||||
# Completion
|
||||
show_final_instructions
|
||||
|
||||
reboot
|
||||
}
|
||||
|
||||
# Run main function
|
||||
main
|
||||
@@ -366,7 +366,7 @@ function determine_kernel_variant {
|
||||
}
|
||||
|
||||
function chroot_execute {
|
||||
chroot $c_zfs_mount_dir bash -c "$1"
|
||||
chroot $c_zfs_mount_dir bash -c "DEBIAN_FRONTEND=noninteractive $1"
|
||||
}
|
||||
|
||||
function unmount_and_export_fs {
|
||||
@@ -685,10 +685,10 @@ chroot_execute "rm -f /etc/localtime /etc/timezone"
|
||||
chroot_execute "dpkg-reconfigure tzdata -f noninteractive "
|
||||
|
||||
echo "======= installing latest kernel============="
|
||||
chroot_execute "DEBIAN_FRONTEND=noninteractive apt install --yes linux-headers${v_kernel_variant}-hwe-18.04 linux-image${v_kernel_variant}-hwe-18.04"
|
||||
chroot_execute "apt install --yes linux-headers${v_kernel_variant}-hwe-18.04 linux-image${v_kernel_variant}-hwe-18.04"
|
||||
if [[ $v_kernel_variant == "-virtual" ]]; then
|
||||
# linux-image-extra is only available for virtual hosts
|
||||
chroot_execute "DEBIAN_FRONTEND=noninteractive apt install --yes linux-image-extra-virtual-hwe-18.04"
|
||||
chroot_execute "apt install --yes linux-image-extra-virtual-hwe-18.04"
|
||||
fi
|
||||
|
||||
echo "======= installing aux packages =========="
|
||||
@@ -736,8 +736,10 @@ chroot_execute "echo options zfs zfs_arc_max=$((v_zfs_arc_max_mb * 1024 * 1024))
|
||||
|
||||
echo "======= setting up grub =========="
|
||||
chroot_execute "echo 'grub-pc grub-pc/install_devices_empty boolean true' | debconf-set-selections"
|
||||
chroot_execute "DEBIAN_FRONTEND=noninteractive apt install --yes grub-pc"
|
||||
chroot_execute "grub-install ${v_selected_disks[0]}"
|
||||
chroot_execute "apt install --yes grub-pc"
|
||||
for disk in ${v_selected_disks[@]}; do
|
||||
chroot_execute "grub-install $disk"
|
||||
done
|
||||
|
||||
chroot_execute "sed -i 's/#GRUB_TERMINAL=console/GRUB_TERMINAL=console/g' /etc/default/grub"
|
||||
chroot_execute "sed -i 's|GRUB_CMDLINE_LINUX_DEFAULT=.*|GRUB_CMDLINE_LINUX_DEFAULT=\"net.ifnames=0\"|' /etc/default/grub"
|
||||
|
||||
@@ -366,7 +366,7 @@ function determine_kernel_variant {
|
||||
}
|
||||
|
||||
function chroot_execute {
|
||||
chroot $c_zfs_mount_dir bash -c "$1"
|
||||
chroot $c_zfs_mount_dir bash -c "DEBIAN_FRONTEND=noninteractive $1"
|
||||
}
|
||||
|
||||
function unmount_and_export_fs {
|
||||
@@ -685,10 +685,10 @@ chroot_execute "rm -f /etc/localtime /etc/timezone"
|
||||
chroot_execute "dpkg-reconfigure tzdata -f noninteractive "
|
||||
|
||||
echo "======= installing latest kernel============="
|
||||
chroot_execute "DEBIAN_FRONTEND=noninteractive apt install --yes linux-headers${v_kernel_variant} linux-image${v_kernel_variant}"
|
||||
chroot_execute "apt install --yes linux-headers${v_kernel_variant} linux-image${v_kernel_variant}"
|
||||
if [[ $v_kernel_variant == "-virtual" ]]; then
|
||||
# linux-image-extra is only available for virtual hosts
|
||||
chroot_execute "DEBIAN_FRONTEND=noninteractive apt install --yes linux-image-extra-virtual"
|
||||
chroot_execute "apt install --yes linux-image-extra-virtual"
|
||||
fi
|
||||
|
||||
|
||||
@@ -737,8 +737,10 @@ chroot_execute "echo options zfs zfs_arc_max=$((v_zfs_arc_max_mb * 1024 * 1024))
|
||||
|
||||
echo "======= setting up grub =========="
|
||||
chroot_execute "echo 'grub-pc grub-pc/install_devices_empty boolean true' | debconf-set-selections"
|
||||
chroot_execute "DEBIAN_FRONTEND=noninteractive apt install --yes grub-pc"
|
||||
chroot_execute "grub-install ${v_selected_disks[0]}"
|
||||
chroot_execute "apt install --yes grub-pc"
|
||||
for disk in ${v_selected_disks[@]}; do
|
||||
chroot_execute "grub-install $disk"
|
||||
done
|
||||
|
||||
chroot_execute "sed -i 's/#GRUB_TERMINAL=console/GRUB_TERMINAL=console/g' /etc/default/grub"
|
||||
chroot_execute "sed -i 's|GRUB_CMDLINE_LINUX_DEFAULT=.*|GRUB_CMDLINE_LINUX_DEFAULT=\"net.ifnames=0\"|' /etc/default/grub"
|
||||
|
||||
@@ -366,7 +366,7 @@ function determine_kernel_variant {
|
||||
}
|
||||
|
||||
function chroot_execute {
|
||||
chroot $c_zfs_mount_dir bash -c "$1"
|
||||
chroot $c_zfs_mount_dir bash -c "DEBIAN_FRONTEND=noninteractive $1"
|
||||
}
|
||||
|
||||
function unmount_and_export_fs {
|
||||
@@ -685,10 +685,10 @@ chroot_execute "rm -f /etc/localtime /etc/timezone"
|
||||
chroot_execute "dpkg-reconfigure tzdata -f noninteractive "
|
||||
|
||||
echo "======= installing latest kernel============="
|
||||
chroot_execute "DEBIAN_FRONTEND=noninteractive apt install --yes linux-headers${v_kernel_variant} linux-image${v_kernel_variant}"
|
||||
chroot_execute "apt install --yes linux-headers${v_kernel_variant} linux-image${v_kernel_variant}"
|
||||
if [[ $v_kernel_variant == "-virtual" ]]; then
|
||||
# linux-image-extra is only available for virtual hosts
|
||||
chroot_execute "DEBIAN_FRONTEND=noninteractive apt install --yes linux-image-extra-virtual"
|
||||
chroot_execute "apt install --yes linux-image-extra-virtual"
|
||||
fi
|
||||
|
||||
|
||||
@@ -737,8 +737,10 @@ chroot_execute "echo options zfs zfs_arc_max=$((v_zfs_arc_max_mb * 1024 * 1024))
|
||||
|
||||
echo "======= setting up grub =========="
|
||||
chroot_execute "echo 'grub-pc grub-pc/install_devices_empty boolean true' | debconf-set-selections"
|
||||
chroot_execute "DEBIAN_FRONTEND=noninteractive apt install --yes grub-pc"
|
||||
chroot_execute "grub-install ${v_selected_disks[0]}"
|
||||
chroot_execute "apt install --yes grub-pc"
|
||||
for disk in ${v_selected_disks[@]}; do
|
||||
chroot_execute "grub-install $disk"
|
||||
done
|
||||
|
||||
chroot_execute "sed -i 's/#GRUB_TERMINAL=console/GRUB_TERMINAL=console/g' /etc/default/grub"
|
||||
chroot_execute "sed -i 's|GRUB_CMDLINE_LINUX_DEFAULT=.*|GRUB_CMDLINE_LINUX_DEFAULT=\"net.ifnames=0\"|' /etc/default/grub"
|
||||
|
||||
973
hetzner-ubuntu24-zfs-setup.sh
Normal file
973
hetzner-ubuntu24-zfs-setup.sh
Normal file
@@ -0,0 +1,973 @@
|
||||
#!/bin/bash
|
||||
|
||||
: <<'end_header_info'
|
||||
(c) Andrey Prokopenko job@terem.fr
|
||||
fully automatic script to install Ubuntu 24 with ZFS root on Hetzner VPS
|
||||
WARNING: all data on the disk will be destroyed
|
||||
How to use: add SSH key to the rescue console, then press "mount rescue and power cycle" button
|
||||
Next, connect via SSH to console, and run the script
|
||||
Answer script questions about desired hostname and ZFS ARC cache size
|
||||
To cope with network failures its higly recommended to run the script inside screen console
|
||||
screen -dmS zfs
|
||||
screen -r zfs
|
||||
To detach from screen console, hit Ctrl-d then a
|
||||
end_header_info
|
||||
|
||||
set -euo pipefail
|
||||
|
||||
# ---- Configuration ----
|
||||
# These will be set by user input
|
||||
SYSTEM_HOSTNAME=""
|
||||
ROOT_PASSWORD=""
|
||||
ZFS_POOL=""
|
||||
UBUNTU_CODENAME="noble" # Ubuntu 24.04
|
||||
TARGET="/mnt/ubuntu"
|
||||
|
||||
ZBM_BIOS_URL="https://github.com/zbm-dev/zfsbootmenu/releases/download/v3.0.1/zfsbootmenu-release-x86_64-v3.0.1-linux6.1.tar.gz"
|
||||
ZBM_EFI_URL="https://github.com/zbm-dev/zfsbootmenu/releases/download/v3.0.1/zfsbootmenu-release-x86_64-v3.0.1-linux6.1.EFI"
|
||||
|
||||
MAIN_BOOT="/main_boot"
|
||||
|
||||
# Hetzner mirrors
|
||||
MIRROR_SITE="https://mirror.hetzner.com"
|
||||
MIRROR_MAIN="deb ${MIRROR_SITE}/ubuntu/packages ${UBUNTU_CODENAME} main restricted universe multiverse"
|
||||
MIRROR_UPDATES="deb ${MIRROR_SITE}/ubuntu/packages ${UBUNTU_CODENAME}-updates main restricted universe multiverse"
|
||||
MIRROR_BACKPORTS="deb ${MIRROR_SITE}/ubuntu/packages ${UBUNTU_CODENAME}-backports main restricted universe multiverse"
|
||||
MIRROR_SECURITY="deb ${MIRROR_SITE}/ubuntu/security ${UBUNTU_CODENAME}-security main restricted universe multiverse"
|
||||
|
||||
# Global variables
|
||||
INSTALL_DISK=""
|
||||
EFI_MODE=false
|
||||
BOOT_LABEL=""
|
||||
BOOT_TYPE=""
|
||||
BOOT_PART=""
|
||||
ZFS_PART=""
|
||||
|
||||
# ---- User Input Functions ----
|
||||
function setup_whiptail_colors {
|
||||
# Green text on black background - classic terminal theme
|
||||
export NEWT_COLORS='
|
||||
root=green,black
|
||||
window=green,black
|
||||
shadow=green,black
|
||||
border=green,black
|
||||
title=green,black
|
||||
textbox=green,black
|
||||
button=black,green
|
||||
listbox=green,black
|
||||
actlistbox=black,green
|
||||
actsellistbox=black,green
|
||||
checkbox=green,black
|
||||
actcheckbox=black,green
|
||||
entry=green,black
|
||||
label=green,black
|
||||
'
|
||||
}
|
||||
|
||||
function check_whiptail {
|
||||
if ! command -v whiptail &> /dev/null; then
|
||||
echo "Installing whiptail..."
|
||||
apt update
|
||||
apt install -y whiptail
|
||||
fi
|
||||
setup_whiptail_colors
|
||||
}
|
||||
|
||||
|
||||
function get_hostname {
|
||||
while true; do
|
||||
SYSTEM_HOSTNAME=$(whiptail \
|
||||
--title "System Hostname" \
|
||||
--inputbox "Enter the hostname for the new system:" \
|
||||
10 60 "zfs-ubuntu" \
|
||||
3>&1 1>&2 2>&3)
|
||||
|
||||
local exit_status=$?
|
||||
if [ $exit_status -ne 0 ]; then
|
||||
whiptail --title "Cancelled" --msgbox "Installation cancelled by user." 10 50
|
||||
exit 1
|
||||
fi
|
||||
|
||||
# Validate hostname
|
||||
if [[ "$SYSTEM_HOSTNAME" =~ ^[a-zA-Z0-9][a-zA-Z0-9-]*[a-zA-Z0-9]$ ]] && [[ ${#SYSTEM_HOSTNAME} -le 63 ]]; then
|
||||
break
|
||||
else
|
||||
whiptail \
|
||||
--title "Invalid Hostname" \
|
||||
--msgbox "Invalid hostname. Please use only letters, numbers, and hyphens. Must start and end with alphanumeric character. Maximum 63 characters." \
|
||||
12 60
|
||||
fi
|
||||
done
|
||||
}
|
||||
|
||||
function get_zfs_pool_name {
|
||||
while true; do
|
||||
ZFS_POOL=$(whiptail \
|
||||
--title "ZFS Pool Name" \
|
||||
--inputbox "Enter the name for the ZFS pool:" \
|
||||
10 60 "rpool" \
|
||||
3>&1 1>&2 2>&3)
|
||||
|
||||
local exit_status=$?
|
||||
if [ $exit_status -ne 0 ]; then
|
||||
whiptail --title "Cancelled" --msgbox "Installation cancelled by user." 10 50
|
||||
exit 1
|
||||
fi
|
||||
|
||||
# Validate ZFS pool name
|
||||
if [[ "$ZFS_POOL" =~ ^[a-zA-Z][a-zA-Z0-9_-]*$ ]] && [[ ${#ZFS_POOL} -le 255 ]]; then
|
||||
break
|
||||
else
|
||||
whiptail \
|
||||
--title "Invalid Pool Name" \
|
||||
--msgbox "Invalid ZFS pool name. Must start with a letter and contain only letters, numbers, hyphens, and underscores. Maximum 255 characters." \
|
||||
12 60
|
||||
fi
|
||||
done
|
||||
}
|
||||
|
||||
function get_root_password {
|
||||
while true; do
|
||||
# Get first password input
|
||||
local password1
|
||||
local password2
|
||||
|
||||
password1=$(whiptail \
|
||||
--title "Root Password" \
|
||||
--passwordbox "Enter root password (input hidden):" \
|
||||
10 60 \
|
||||
3>&1 1>&2 2>&3)
|
||||
|
||||
local exit_status=$?
|
||||
if [ $exit_status -ne 0 ]; then
|
||||
whiptail --title "Cancelled" --msgbox "Installation cancelled by user." 10 50
|
||||
exit 1
|
||||
fi
|
||||
|
||||
# Get password confirmation
|
||||
password2=$(whiptail \
|
||||
--title "Confirm Root Password" \
|
||||
--passwordbox "Confirm root password (input hidden):" \
|
||||
10 60 \
|
||||
3>&1 1>&2 2>&3)
|
||||
|
||||
exit_status=$?
|
||||
if [ $exit_status -ne 0 ]; then
|
||||
whiptail --title "Cancelled" --msgbox "Installation cancelled by user." 10 50
|
||||
exit 1
|
||||
fi
|
||||
|
||||
# Check if passwords match
|
||||
if [ "$password1" = "$password2" ]; then
|
||||
if [ -n "$password1" ]; then
|
||||
ROOT_PASSWORD="$password1"
|
||||
break
|
||||
else
|
||||
whiptail \
|
||||
--title "Empty Password" \
|
||||
--msgbox "Password cannot be empty. Please enter a password." \
|
||||
10 50
|
||||
fi
|
||||
else
|
||||
whiptail \
|
||||
--title "Password Mismatch" \
|
||||
--msgbox "Passwords do not match. Please try again." \
|
||||
10 50
|
||||
fi
|
||||
done
|
||||
}
|
||||
|
||||
function show_summary_and_confirm {
|
||||
local summary="Please review the installation settings:
|
||||
|
||||
Hostname: $SYSTEM_HOSTNAME
|
||||
ZFS Pool: $ZFS_POOL
|
||||
Ubuntu Version: $UBUNTU_CODENAME (24.04)
|
||||
Target: $TARGET
|
||||
Boot Mode: $([ "$EFI_MODE" = true ] && echo "EFI" || echo "BIOS")
|
||||
Install Disk: $INSTALL_DISK
|
||||
|
||||
*** WARNING: This will DESTROY ALL DATA on $INSTALL_DISK! ***
|
||||
|
||||
Do you want to continue with the installation?"
|
||||
|
||||
if whiptail \
|
||||
--title " Installation Summary " \
|
||||
--yesno "$summary" \
|
||||
18 60; then
|
||||
# User confirmed - just continue silently
|
||||
echo "User confirmed installation. Starting now..."
|
||||
else
|
||||
echo "Installation cancelled by user."
|
||||
exit 1
|
||||
fi
|
||||
}
|
||||
|
||||
function get_user_input {
|
||||
echo "======= Gathering Installation Parameters =========="
|
||||
check_whiptail
|
||||
|
||||
# Show welcome message
|
||||
whiptail \
|
||||
--title "ZFS Ubuntu Installer" \
|
||||
--msgbox "Welcome to the ZFS Ubuntu Installer for Hetzner Cloud.\n\nThis script will install Ubuntu 24.04 with ZFS root on your server." \
|
||||
12 60
|
||||
|
||||
# Get user inputs
|
||||
get_hostname
|
||||
get_zfs_pool_name
|
||||
get_root_password
|
||||
}
|
||||
|
||||
# ---- System Detection Functions ----
|
||||
function detect_efi {
|
||||
echo "======= Detecting EFI support =========="
|
||||
|
||||
if [ -d /sys/firmware/efi ]; then
|
||||
echo "✓ EFI firmware detected"
|
||||
EFI_MODE=true
|
||||
BOOT_LABEL="EFI"
|
||||
BOOT_TYPE="ef00"
|
||||
else
|
||||
echo "✓ Legacy BIOS mode detected"
|
||||
EFI_MODE=false
|
||||
BOOT_LABEL="boot"
|
||||
BOOT_TYPE="8300"
|
||||
fi
|
||||
}
|
||||
|
||||
function find_install_disk {
|
||||
echo "======= Finding install disk =========="
|
||||
|
||||
local candidate_disks=()
|
||||
|
||||
# Use lsblk to find all unmounted, writable disks
|
||||
while IFS= read -r disk; do
|
||||
[[ -n "$disk" ]] && candidate_disks+=("$disk")
|
||||
done < <(lsblk -npo NAME,TYPE,RO,MOUNTPOINT | awk '
|
||||
$2 == "disk" && $3 == "0" && $4 == "" {print $1}
|
||||
')
|
||||
|
||||
if [[ ${#candidate_disks[@]} -eq 0 ]]; then
|
||||
echo "No suitable installation disks found" >&2
|
||||
echo "Looking for: unmounted, writable disks without partitions in use" >&2
|
||||
exit 1
|
||||
fi
|
||||
|
||||
INSTALL_DISK="${candidate_disks[0]}"
|
||||
echo "Using installation disk: $INSTALL_DISK"
|
||||
|
||||
# Show all available disks for verification
|
||||
echo "All available disks:"
|
||||
lsblk -o NAME,SIZE,TYPE,MOUNTPOINT,RO | grep -v loop
|
||||
}
|
||||
|
||||
# ---- Rescue System Preparation Functions ----
|
||||
function remove_unused_kernels {
|
||||
echo "=========== Removing unused kernels in rescue system =========="
|
||||
for kver in $(find /lib/modules/* -maxdepth 0 -type d \
|
||||
| grep -v "$(uname -r)" \
|
||||
| cut -s -d "/" -f 4); do
|
||||
|
||||
for pkg in "linux-headers-$kver" "linux-image-$kver"; do
|
||||
if dpkg -l "$pkg" 2>/dev/null | grep -q '^ii'; then
|
||||
echo "Purging $pkg ..."
|
||||
apt purge --yes "$pkg"
|
||||
else
|
||||
echo "Package $pkg not installed, skipping."
|
||||
fi
|
||||
done
|
||||
done
|
||||
}
|
||||
|
||||
function install_zfs_on_rescue_system {
|
||||
echo "======= Installing ZFS on rescue system =========="
|
||||
echo "zfs-dkms zfs-dkms/note-incompatible-licenses note true" | debconf-set-selections
|
||||
# Enable Hetzner bookworm-backports
|
||||
sed -i 's/^# deb http:\/\/mirror.hetzner.com\/debian\/packages bookworm-backports/deb http:\/\/mirror.hetzner.com\/debian\/packages bookworm-backports/' /etc/apt/sources.list
|
||||
apt update
|
||||
apt -t bookworm-backports install -y zfsutils-linux
|
||||
}
|
||||
|
||||
# ---- Disk Partitioning Functions ----
|
||||
function partition_disk {
|
||||
echo "======= Partitioning disk =========="
|
||||
sgdisk -Z "$INSTALL_DISK"
|
||||
|
||||
if [ "$EFI_MODE" = true ]; then
|
||||
echo "Creating EFI partition layout"
|
||||
# EFI System Partition (ESP) - 64MB is plenty for ZFSBootMenu
|
||||
sgdisk -n1:1M:+128M -t1:ef00 -c1:"EFI" "$INSTALL_DISK"
|
||||
# ZFS partition
|
||||
sgdisk -n2:0:0 -t2:bf00 -c2:"zfs" "$INSTALL_DISK"
|
||||
else
|
||||
echo "Creating BIOS partition layout"
|
||||
# /boot partition - 64MB is also sufficient for BIOS ZFSBootMenu
|
||||
sgdisk -n1:1M:+128M -t1:8300 -c1:"boot" "$INSTALL_DISK"
|
||||
# ZFS partition
|
||||
sgdisk -n2:0:0 -t2:bf00 -c2:"zfs" "$INSTALL_DISK"
|
||||
# Set legacy BIOS bootable flag
|
||||
sgdisk -A 1:set:2 "$INSTALL_DISK"
|
||||
fi
|
||||
|
||||
partprobe "$INSTALL_DISK" || true
|
||||
udevadm settle
|
||||
|
||||
# Set partition variables based on mode
|
||||
if [ "$EFI_MODE" = true ]; then
|
||||
BOOT_PART="$(blkid -t PARTLABEL='EFI' -o device)"
|
||||
ZFS_PART="$(blkid -t PARTLABEL='zfs' -o device)"
|
||||
# Format ESP as FAT32
|
||||
mkfs.fat -F 32 -n EFI "$BOOT_PART"
|
||||
else
|
||||
BOOT_PART="$(blkid -t PARTLABEL='boot' -o device)"
|
||||
ZFS_PART="$(blkid -t PARTLABEL='zfs' -o device)"
|
||||
mkfs.ext4 -F -L boot "$BOOT_PART"
|
||||
fi
|
||||
}
|
||||
|
||||
# ---- ZFS Pool and Dataset Functions ----
|
||||
function create_zfs_pool {
|
||||
echo "======= Creating ZFS pool =========="
|
||||
# Clean up any existing ZFS binaries in PATH
|
||||
rm -f "$(which zfs)" 2>/dev/null || true
|
||||
rm -f "$(which zpool)" 2>/dev/null || true
|
||||
|
||||
export PATH=/usr/sbin:$PATH
|
||||
modprobe zfs
|
||||
|
||||
zpool create -f -o ashift=12 \
|
||||
-o cachefile="/etc/zfs/zpool.cache" \
|
||||
-O compression=lz4 \
|
||||
-O acltype=posixacl \
|
||||
-O xattr=sa \
|
||||
-O mountpoint=none \
|
||||
"$ZFS_POOL" "$ZFS_PART"
|
||||
|
||||
zfs create -o mountpoint=none "$ZFS_POOL/ROOT"
|
||||
zfs create -o mountpoint=legacy "$ZFS_POOL/ROOT/ubuntu"
|
||||
|
||||
echo "======= Assigning $ZFS_POOL/ROOT/ubuntu dataset as bootable =========="
|
||||
zpool set bootfs="$ZFS_POOL/ROOT/ubuntu" "$ZFS_POOL"
|
||||
zpool set cachefile="/etc/zfs/zpool.cache" "$ZFS_POOL"
|
||||
}
|
||||
|
||||
function create_additional_zfs_datasets {
|
||||
echo "======= Creating additional ZFS datasets with TEMPORARY mountpoints =========="
|
||||
|
||||
# Ensure parent datasets are created first
|
||||
zfs create -o mountpoint=none "$ZFS_POOL/ROOT/ubuntu/var"
|
||||
zfs create -o mountpoint=none "$ZFS_POOL/ROOT/ubuntu/var/cache"
|
||||
|
||||
# Create leaf datasets with temporary mountpoints under $TARGET
|
||||
zfs create -o com.sun:auto-snapshot=false -o mountpoint="$TARGET/tmp" "$ZFS_POOL/ROOT/ubuntu/tmp"
|
||||
zfs set devices=off "$ZFS_POOL/ROOT/ubuntu/tmp"
|
||||
|
||||
zfs create -o com.sun:auto-snapshot=false -o mountpoint="$TARGET/var/tmp" "$ZFS_POOL/ROOT/ubuntu/var/tmp"
|
||||
zfs set devices=off "$ZFS_POOL/ROOT/ubuntu/var/tmp"
|
||||
|
||||
zfs create -o mountpoint="$TARGET/var/log" "$ZFS_POOL/ROOT/ubuntu/var/log"
|
||||
zfs set atime=off "$ZFS_POOL/ROOT/ubuntu/var/log"
|
||||
|
||||
zfs create -o com.sun:auto-snapshot=false -o mountpoint="$TARGET/var/cache/apt" "$ZFS_POOL/ROOT/ubuntu/var/cache/apt"
|
||||
zfs set atime=off "$ZFS_POOL/ROOT/ubuntu/var/cache/apt"
|
||||
|
||||
# Create home dataset separately
|
||||
zfs create -o mountpoint="$TARGET/home" "$ZFS_POOL/home"
|
||||
|
||||
# Mount all datasets
|
||||
zfs mount -a
|
||||
|
||||
# Set permissions on the actual ZFS datasets
|
||||
echo "Setting permissions on ZFS datasets..."
|
||||
chmod 1777 "$TARGET/tmp"
|
||||
chmod 1777 "$TARGET/var/tmp"
|
||||
echo "✓ Temp directory permissions set (1777)"
|
||||
}
|
||||
|
||||
function set_final_mountpoints {
|
||||
echo "======= Setting final mountpoints =========="
|
||||
|
||||
# Leaf datasets - actual system mountpoints
|
||||
zfs set mountpoint=/tmp "$ZFS_POOL/ROOT/ubuntu/tmp"
|
||||
zfs set mountpoint=/var/tmp "$ZFS_POOL/ROOT/ubuntu/var/tmp"
|
||||
zfs set mountpoint=/var/log "$ZFS_POOL/ROOT/ubuntu/var/log"
|
||||
zfs set mountpoint=/var/cache/apt "$ZFS_POOL/ROOT/ubuntu/var/cache/apt"
|
||||
|
||||
# Home dataset - separate from OS
|
||||
zfs set mountpoint=/home "$ZFS_POOL/home"
|
||||
echo ""
|
||||
echo "Detailed dataset listing:"
|
||||
zfs list -o name,mountpoint -r "$ZFS_POOL"
|
||||
}
|
||||
|
||||
# ---- System Bootstrap Functions ----
|
||||
function bootstrap_ubuntu_system {
|
||||
echo "======= Bootstrapping Ubuntu to temporary directory =========="
|
||||
local TEMP_STAGE=$(mktemp -d)
|
||||
echo "Created temporary staging directory: $TEMP_STAGE"
|
||||
|
||||
# Cleanup function for temp directory
|
||||
cleanup_temp_stage() {
|
||||
if [ -d "$TEMP_STAGE" ]; then
|
||||
echo "Cleaning up temporary staging directory..."
|
||||
rm -rf "$TEMP_STAGE"
|
||||
fi
|
||||
}
|
||||
|
||||
# Add trap to ensure cleanup on script exit
|
||||
trap cleanup_temp_stage EXIT
|
||||
|
||||
# Add Hetzner Ubuntu mirror as trusted
|
||||
echo "deb [trusted=yes] http://mirror.hetzner.com/ubuntu/packages noble main" > /etc/apt/sources.list.d/ubuntu-temp.list
|
||||
|
||||
# Update and download ubuntu-keyring without sandbox warning
|
||||
apt-get update
|
||||
apt-get -o APT::Sandbox::User=root download ubuntu-keyring
|
||||
|
||||
# Verify download was successful
|
||||
if [ ! -f ubuntu-keyring*.deb ]; then
|
||||
echo "ERROR: Failed to download ubuntu-keyring package"
|
||||
exit 1
|
||||
fi
|
||||
|
||||
# Extract the keyring
|
||||
dpkg-deb -x ubuntu-keyring*.deb /tmp/ubuntu-keyring-extract/
|
||||
mkdir -p /usr/share/keyrings
|
||||
cp /tmp/ubuntu-keyring-extract/usr/share/keyrings/ubuntu-archive-keyring.gpg /usr/share/keyrings/
|
||||
|
||||
echo "✓ Downloaded and extracted ubuntu-keyring package"
|
||||
|
||||
# Clean up - remove temporary repository and restore apt state
|
||||
rm -f /etc/apt/sources.list.d/ubuntu-temp.list
|
||||
apt update
|
||||
|
||||
# Clean up downloaded package
|
||||
rm -f ubuntu-keyring*.deb
|
||||
|
||||
apt install -y mmdebstrap
|
||||
|
||||
mmdebstrap --variant=debootstrap \
|
||||
--keyring=/usr/share/keyrings/ubuntu-archive-keyring.gpg \
|
||||
--include=systemd-resolved,locales,debconf-i18n,apt-utils,keyboard-configuration,console-setup,kbd,extlinux,initramfs-tools,zstd \
|
||||
"$UBUNTU_CODENAME" "$TEMP_STAGE" \
|
||||
"$MIRROR_MAIN" "$MIRROR_UPDATES" "$MIRROR_BACKPORTS" "$MIRROR_SECURITY"
|
||||
|
||||
echo "======= Copying staged system to ZFS datasets =========="
|
||||
# Mount root dataset for copying
|
||||
mkdir -p "$TARGET"
|
||||
mount -t zfs "$ZFS_POOL/ROOT/ubuntu" "$TARGET"
|
||||
|
||||
create_additional_zfs_datasets
|
||||
|
||||
# Use rsync to copy the entire system (this will populate all datasets)
|
||||
echo "Copying staged system to ZFS datasets..."
|
||||
rsync -aAX "$TEMP_STAGE/" "$TARGET/"
|
||||
|
||||
echo "Staged system copied successfully"
|
||||
echo "Source size: $(du -sh "$TEMP_STAGE")"
|
||||
echo "Target size: $(du -sh "$TARGET")"
|
||||
|
||||
# Clean up temp directory
|
||||
cleanup_temp_stage
|
||||
trap - EXIT
|
||||
}
|
||||
|
||||
function setup_chroot_environment {
|
||||
echo "======= Mounting virtual filesystems for chroot =========="
|
||||
mount -t proc proc "$TARGET/proc"
|
||||
mount -t sysfs sysfs "$TARGET/sys"
|
||||
mount -t tmpfs tmpfs "$TARGET/run"
|
||||
mount -t tmpfs tmpfs "$TARGET/tmp"
|
||||
mount --bind /dev "$TARGET/dev"
|
||||
mount --bind /dev/pts "$TARGET/dev/pts"
|
||||
|
||||
configure_dns_resolution
|
||||
}
|
||||
|
||||
function configure_dns_resolution {
|
||||
echo "======= Configuring DNS resolution =========="
|
||||
mkdir -p "$TARGET/run/systemd/resolve"
|
||||
|
||||
if command -v resolvectl >/dev/null 2>&1; then
|
||||
echo "Getting DNS from resolvectl..."
|
||||
|
||||
# First try Global DNS servers
|
||||
local DNS_SERVERS=$(resolvectl dns | awk '
|
||||
/^Global:/ {
|
||||
for(i=2; i<=NF; i++) print $i
|
||||
}
|
||||
' | head -3)
|
||||
|
||||
# If Global is empty, find first non-empty link
|
||||
if [ -z "$DNS_SERVERS" ]; then
|
||||
echo "No global DNS servers found, searching for first non-empty link..."
|
||||
DNS_SERVERS=$(resolvectl dns | awk '
|
||||
/^Link [0-9]+ / && NF > 3 {
|
||||
for(i=4; i<=NF; i++) print $i # Start from field 4 to skip the interface name
|
||||
exit # Stop after first non-empty link
|
||||
}
|
||||
')
|
||||
fi
|
||||
|
||||
if [ -n "$DNS_SERVERS" ]; then
|
||||
# Create resolv.conf with the DNS servers
|
||||
echo "$DNS_SERVERS" | while read -r dns; do
|
||||
echo "nameserver $dns"
|
||||
done > "$TARGET/run/systemd/resolve/stub-resolv.conf"
|
||||
echo "Using DNS servers: $(echo "$DNS_SERVERS" | tr '\n' ' ')"
|
||||
else
|
||||
echo "ERROR: No DNS servers found in resolvectl output"
|
||||
echo "resolvectl dns output:"
|
||||
resolvectl dns
|
||||
echo "Cannot continue without DNS configuration"
|
||||
exit 1
|
||||
fi
|
||||
else
|
||||
echo "ERROR: resolvectl command not found"
|
||||
echo "Cannot configure DNS without resolvectl"
|
||||
exit 1
|
||||
fi
|
||||
}
|
||||
|
||||
# ---- System Configuration Functions ----
|
||||
function configure_basic_system {
|
||||
echo "======= Configuring basic system settings =========="
|
||||
chroot "$TARGET" /bin/bash <<EOF
|
||||
set -euo pipefail
|
||||
|
||||
# Set hostname from variable
|
||||
echo "$SYSTEM_HOSTNAME" > /etc/hostname
|
||||
|
||||
# Configure timezone (Vienna)
|
||||
echo "Europe/Vienna" > /etc/timezone
|
||||
ln -sf /usr/share/zoneinfo/Europe/Vienna /etc/localtime
|
||||
|
||||
# Generate locales
|
||||
cat > /etc/locale.gen <<'LOCALES'
|
||||
en_US.UTF-8 UTF-8
|
||||
de_AT.UTF-8 UTF-8
|
||||
fr_FR.UTF-8 UTF-8
|
||||
ru_RU.UTF-8 UTF-8
|
||||
LOCALES
|
||||
|
||||
locale-gen
|
||||
|
||||
# Set default locale
|
||||
update-locale LANG=en_US.UTF-8 LC_ALL=en_US.UTF-8
|
||||
|
||||
# Configure keyboard for German and US with Alt+Shift toggle
|
||||
cat > /etc/default/keyboard <<'KEYBOARD'
|
||||
# KEYBOARD CONFIGURATION FILE
|
||||
|
||||
# Consult the keyboard(5) manual page.
|
||||
|
||||
XKBMODEL="pc105"
|
||||
XKBLAYOUT="de,ru"
|
||||
XKBVARIANT=","
|
||||
XKBOPTIONS="grp:ctrl_shift_toggle"
|
||||
|
||||
BACKSPACE="guess"
|
||||
KEYBOARD
|
||||
|
||||
# Apply keyboard configuration to console
|
||||
setupcon --force
|
||||
|
||||
# Update /etc/hosts with the hostname
|
||||
echo "127.0.0.1 localhost" > /etc/hosts
|
||||
echo "127.0.1.1 $SYSTEM_HOSTNAME" >> /etc/hosts
|
||||
echo "::1 localhost ip6-localhost ip6-loopback" >> /etc/hosts
|
||||
echo "ff02::1 ip6-allnodes" >> /etc/hosts
|
||||
echo "ff02::2 ip6-allrouters" >> /etc/hosts
|
||||
|
||||
# Set proper permissions for ZFS datasets
|
||||
chmod 1777 /tmp
|
||||
chmod 1777 /var/tmp
|
||||
EOF
|
||||
|
||||
echo "======= Configuration Summary ======="
|
||||
chroot "$TARGET" /bin/bash <<'EOF'
|
||||
echo "Hostname: $(cat /etc/hostname)"
|
||||
echo "Timezone: $(cat /etc/timezone)"
|
||||
echo "Current time: $(date)"
|
||||
echo "Default locale: $(grep LANG /etc/default/locale)"
|
||||
echo "Available locales:"
|
||||
locale -a | grep -E "(en_US|de_AT|fr_FR|ru_RU)"
|
||||
echo "Keyboard layout: $(grep XKBLAYOUT /etc/default/keyboard)"
|
||||
EOF
|
||||
}
|
||||
|
||||
function install_system_packages {
|
||||
echo "======= Installing ZFS and essential packages in chroot =========="
|
||||
chroot "$TARGET" /bin/bash <<'EOF'
|
||||
set -euo pipefail
|
||||
# Update package lists
|
||||
apt update
|
||||
|
||||
# Install generic kernel (creates files in ZFS dataset /boot)
|
||||
apt install -y --no-install-recommends linux-image-generic linux-headers-generic
|
||||
|
||||
# Install ZFS utilities and aux packages
|
||||
|
||||
echo "zfs-dkms zfs-dkms/note-incompatible-licenses note true" | debconf-set-selections
|
||||
|
||||
apt install -y zfs-dkms zfsutils-linux zfs-initramfs software-properties-common bash curl nano htop net-tools ssh
|
||||
|
||||
# Ensure ZFS module is included in initramfs
|
||||
echo "zfs" >> /etc/initramfs-tools/modules
|
||||
|
||||
# Generate initramfs with ZFS support
|
||||
update-initramfs -u -k all
|
||||
|
||||
# Verify kernel installation
|
||||
echo "Installed kernel packages:"
|
||||
dpkg -l | grep linux-image
|
||||
echo "Kernel version:"
|
||||
ls /lib/modules/
|
||||
echo "Kernel files in ZFS dataset:"
|
||||
ls -la /boot/vmlinuz* /boot/initrd.img* 2>/dev/null || echo "No kernel files found"
|
||||
EOF
|
||||
}
|
||||
|
||||
function configure_ssh {
|
||||
echo "======= Setting up OpenSSH =========="
|
||||
mkdir -p "$TARGET/root/.ssh/"
|
||||
cp /root/.ssh/authorized_keys "$TARGET/root/.ssh/authorized_keys"
|
||||
sed -i 's/#PasswordAuthentication yes/PasswordAuthentication no/g' "$TARGET/etc/ssh/sshd_config"
|
||||
sed -i 's/#PubkeyAuthentication yes/PubkeyAuthentication yes/g' "$TARGET/etc/ssh/sshd_config"
|
||||
|
||||
chroot "$TARGET" /bin/bash <<'EOF'
|
||||
rm /etc/ssh/ssh_host_*
|
||||
dpkg-reconfigure openssh-server -f noninteractive
|
||||
EOF
|
||||
}
|
||||
|
||||
function set_root_credentials {
|
||||
echo "======= Setting root password =========="
|
||||
chroot "$TARGET" /bin/bash -c "echo root:$(printf "%q" "$ROOT_PASSWORD") | chpasswd"
|
||||
|
||||
echo "============ Setting up root prompt ============"
|
||||
cat > "$TARGET/root/.bashrc" <<CONF
|
||||
export PS1='\[\033[01;31m\]\u\[\033[01;33m\]@\[\033[01;32m\]\h \[\033[01;33m\]\w \[\033[01;35m\]\$ \[\033[00m\]'
|
||||
umask 022
|
||||
export LS_OPTIONS='--color=auto -h'
|
||||
eval "\$(dircolors)"
|
||||
CONF
|
||||
}
|
||||
|
||||
# ---- Bootloader Functions ----
|
||||
function setup_efi_boot {
|
||||
echo "======= Setting up EFI boot =========="
|
||||
|
||||
# Mount EFI System Partition
|
||||
mkdir -p "$MAIN_BOOT"
|
||||
mount "$BOOT_PART" "$MAIN_BOOT"
|
||||
|
||||
# Create EFI directory structure
|
||||
mkdir -p "$MAIN_BOOT/EFI/Boot"
|
||||
|
||||
# Download ZFSBootMenu EFI binary
|
||||
echo "Downloading ZFSBootMenu EFI binary from: $ZBM_EFI_URL"
|
||||
curl -L "$ZBM_EFI_URL" -o "$MAIN_BOOT/EFI/Boot/bootx64.efi"
|
||||
}
|
||||
|
||||
function setup_bios_boot {
|
||||
echo "======= Setting up BIOS boot =========="
|
||||
|
||||
# Mount boot partition
|
||||
mkdir -p "$MAIN_BOOT"
|
||||
mount "$BOOT_PART" "$MAIN_BOOT"
|
||||
|
||||
# Install extlinux in rescue system if needed
|
||||
if ! command -v extlinux &> /dev/null; then
|
||||
echo "Installing extlinux in rescue system..."
|
||||
apt update
|
||||
apt install -y extlinux
|
||||
fi
|
||||
|
||||
# Install extlinux
|
||||
extlinux --install "$MAIN_BOOT"
|
||||
|
||||
# Create extlinux configuration
|
||||
cat > "$MAIN_BOOT/extlinux.conf" << 'EOF'
|
||||
DEFAULT zfsbootmenu
|
||||
PROMPT 0
|
||||
TIMEOUT 0
|
||||
|
||||
LABEL zfsbootmenu
|
||||
LINUX /zfsbootmenu/vmlinuz-bootmenu
|
||||
INITRD /zfsbootmenu/initramfs-bootmenu.img
|
||||
APPEND ro quiet
|
||||
EOF
|
||||
|
||||
echo "Generated extlinux.conf:"
|
||||
cat "$MAIN_BOOT/extlinux.conf"
|
||||
|
||||
# Download and install ZFSBootMenu for BIOS
|
||||
local TEMP_ZBM=$(mktemp -d)
|
||||
echo "Downloading ZFSBootMenu for BIOS from: $ZBM_BIOS_URL"
|
||||
curl -L "$ZBM_BIOS_URL" -o "$TEMP_ZBM/zbm.tar.gz"
|
||||
tar -xz -C "$TEMP_ZBM" -f "$TEMP_ZBM/zbm.tar.gz" --strip-components=1
|
||||
|
||||
# Copy ZFSBootMenu to boot partition
|
||||
mkdir -p "$MAIN_BOOT/zfsbootmenu"
|
||||
cp "$TEMP_ZBM"/vmlinuz* "$MAIN_BOOT/zfsbootmenu/"
|
||||
cp "$TEMP_ZBM"/initramfs* "$MAIN_BOOT/zfsbootmenu/"
|
||||
|
||||
# Clean up
|
||||
rm -rf "$TEMP_ZBM"
|
||||
|
||||
echo "ZFSBootMenu files copied to boot partition:"
|
||||
ls -la "$MAIN_BOOT/zfsbootmenu/"
|
||||
|
||||
# Install MBR and set boot flag
|
||||
dd bs=440 conv=notrunc count=1 if="$TARGET/usr/lib/EXTLINUX/gptmbr.bin" of="$INSTALL_DISK"
|
||||
parted "$INSTALL_DISK" set 1 boot on
|
||||
|
||||
echo "BIOS boot setup complete"
|
||||
}
|
||||
|
||||
function configure_bootloader {
|
||||
echo "======= Setting up boot based on firmware type =========="
|
||||
if [ "$EFI_MODE" = true ]; then
|
||||
setup_efi_boot
|
||||
else
|
||||
setup_bios_boot
|
||||
fi
|
||||
|
||||
echo "======= Configuring ZFSBootMenu for auto-detection =========="
|
||||
zfs set org.zfsbootmenu:commandline="ro quiet" "$ZFS_POOL/ROOT/ubuntu"
|
||||
|
||||
echo "Boot configuration:"
|
||||
zfs get org.zfsbootmenu:commandline "$ZFS_POOL/ROOT/ubuntu"
|
||||
}
|
||||
|
||||
# ---- System Services Functions ----
|
||||
function configure_system_services {
|
||||
echo "======= Configuring ZFS cachefile in chrooted system =========="
|
||||
mkdir -p "$TARGET/etc/zfs"
|
||||
cp /etc/zfs/zpool.cache "$TARGET/etc/zfs/zpool.cache"
|
||||
|
||||
echo "Cachefile status:"
|
||||
zpool get cachefile "$ZFS_POOL"
|
||||
ls -la "$TARGET/etc/zfs/zpool.cache" && echo "✓ Cachefile ready" || echo "✗ Cachefile failed"
|
||||
|
||||
echo "======= Enabling essential system services =========="
|
||||
chroot "$TARGET" /bin/bash <<'EOF'
|
||||
set -euo pipefail
|
||||
|
||||
systemctl enable systemd-resolved
|
||||
systemctl enable systemd-timesyncd
|
||||
|
||||
systemctl enable zfs-import-cache
|
||||
systemctl enable zfs-mount
|
||||
|
||||
systemctl enable ssh
|
||||
systemctl enable apt-daily.timer
|
||||
|
||||
echo "Enabled services:"
|
||||
systemctl list-unit-files | grep enabled
|
||||
EOF
|
||||
}
|
||||
|
||||
function configure_networking {
|
||||
echo "======= Configuring Netplan for Hetzner Cloud =========="
|
||||
chroot "$TARGET" /bin/bash <<'EOF'
|
||||
set -euo pipefail
|
||||
# Create Netplan configuration that matches all non-loopback interfaces
|
||||
cat > /etc/netplan/01-hetzner.yaml <<'EOL'
|
||||
network:
|
||||
version: 2
|
||||
renderer: networkd
|
||||
ethernets:
|
||||
all-interfaces:
|
||||
match:
|
||||
name: "!lo"
|
||||
dhcp4: true
|
||||
dhcp6: true
|
||||
dhcp4-overrides:
|
||||
use-dns: true
|
||||
use-hostname: true
|
||||
use-domains: true
|
||||
route-metric: 100
|
||||
dhcp6-overrides:
|
||||
use-dns: true
|
||||
use-hostname: true
|
||||
use-domains: true
|
||||
route-metric: 100
|
||||
critical: true
|
||||
EOL
|
||||
|
||||
# Set proper permissions - Netplan requires strict permissions (600)
|
||||
chmod 600 /etc/netplan/01-hetzner.yaml
|
||||
chown root:root /etc/netplan/01-hetzner.yaml
|
||||
|
||||
# Apply the Netplan configuration
|
||||
netplan generate
|
||||
echo "Netplan configuration created for all interfaces"
|
||||
EOF
|
||||
}
|
||||
|
||||
# ---- Cleanup and Finalization Functions ----
|
||||
function unmount_all_datasets_and_partitions {
|
||||
echo "======= Unmounting all datasets =========="
|
||||
|
||||
# First, unmount all auto-mounted ZFS datasets (tmp, var/tmp, var/log, etc.)
|
||||
echo "Unmounting auto-mounted ZFS datasets..."
|
||||
zfs umount -a 2>/dev/null || true
|
||||
|
||||
# Manually unmount the root legacy dataset from $TARGET
|
||||
if mountpoint -q "$TARGET"; then
|
||||
echo "Unmounting root dataset from $TARGET"
|
||||
umount "$TARGET" 2>/dev/null || true
|
||||
fi
|
||||
|
||||
# Manually unmount boot partition if mounted
|
||||
if mountpoint -q "$MAIN_BOOT"; then
|
||||
echo "Unmounting boot partition from $MAIN_BOOT"
|
||||
umount "$MAIN_BOOT" 2>/dev/null || true
|
||||
fi
|
||||
|
||||
# Wait for unmounts to complete
|
||||
sleep 1
|
||||
|
||||
# Force unmount any stubborn datasets
|
||||
if zfs get mounted -r "$ZFS_POOL" 2>/dev/null | grep -q "yes"; then
|
||||
echo "Forcing unmount of remaining ZFS datasets..."
|
||||
zfs umount -a -f 2>/dev/null || true
|
||||
fi
|
||||
|
||||
# Final verification
|
||||
local mounted_count=0
|
||||
mounted_count=$(zfs get mounted -r "$ZFS_POOL" 2>/dev/null | grep -c "yes" || true)
|
||||
|
||||
if [ "$mounted_count" -gt 0 ]; then
|
||||
echo "WARNING: $mounted_count dataset(s) still mounted after unmount attempt:"
|
||||
zfs get mounted -r "$ZFS_POOL" 2>/dev/null | grep "yes" || true
|
||||
else
|
||||
echo "✓ All ZFS datasets successfully unmounted"
|
||||
fi
|
||||
|
||||
# Verify $TARGET is unmounted
|
||||
if mountpoint -q "$TARGET"; then
|
||||
echo "WARNING: $TARGET is still mounted!"
|
||||
mount | grep "$TARGET" || true
|
||||
else
|
||||
echo "✓ $TARGET successfully unmounted"
|
||||
fi
|
||||
|
||||
# Verify $MAIN_BOOT is unmounted
|
||||
if mountpoint -q "$MAIN_BOOT"; then
|
||||
echo "WARNING: $MAIN_BOOT is still mounted!"
|
||||
mount | grep "$MAIN_BOOT" || true
|
||||
else
|
||||
echo "✓ $MAIN_BOOT successfully unmounted"
|
||||
fi
|
||||
}
|
||||
|
||||
function unmount_chroot_environment {
|
||||
echo "======= Unmounting virtual filesystems =========="
|
||||
# Unmount virtual filesystems first
|
||||
for dir in dev/pts dev tmp run sys proc; do
|
||||
if mountpoint -q "$TARGET/$dir"; then
|
||||
echo "Unmounting $TARGET/$dir"
|
||||
umount "$TARGET/$dir" 2>/dev/null || true
|
||||
fi
|
||||
done
|
||||
}
|
||||
|
||||
function finalize_system_resolved {
|
||||
echo "======= Setting systemd-resolved configuration for final boot =========="
|
||||
# This must be done while $TARGET is still mounted
|
||||
mkdir -p "$TARGET/run/systemd/resolve"
|
||||
cat > "$TARGET/run/systemd/resolve/stub-resolv.conf" << 'EOF'
|
||||
nameserver 127.0.0.53
|
||||
options edns0 trust-ad
|
||||
search .
|
||||
EOF
|
||||
echo "✓ systemd-resolved configuration set"
|
||||
}
|
||||
|
||||
function export_zfs_pool {
|
||||
echo "======= Exporting ZFS pool =========="
|
||||
zpool export "$ZFS_POOL" 2>/dev/null || true
|
||||
|
||||
# Verify everything is unmounted
|
||||
if mountpoint -q "$TARGET"; then
|
||||
echo "WARNING: $TARGET is still mounted!"
|
||||
mount | grep "$TARGET"
|
||||
else
|
||||
echo "✓ All filesystems successfully unmounted"
|
||||
fi
|
||||
}
|
||||
|
||||
function show_final_instructions {
|
||||
echo ""
|
||||
echo "=========================================="
|
||||
echo " INSTALLATION COMPLETE! "
|
||||
echo "=========================================="
|
||||
echo ""
|
||||
echo "System Information:"
|
||||
echo " Hostname: $SYSTEM_HOSTNAME"
|
||||
echo " ZFS Pool: $ZFS_POOL"
|
||||
echo " Boot Mode: $([ "$EFI_MODE" = true ] && echo "EFI" || echo "BIOS")"
|
||||
echo " Ubuntu Version: $UBUNTU_CODENAME"
|
||||
echo " Networking: systemd-networkd + systemd-resolved"
|
||||
echo ""
|
||||
echo "=========================================="
|
||||
echo "Rebooting..."
|
||||
}
|
||||
|
||||
# ---- Main Execution Function ----
|
||||
function main {
|
||||
echo "Starting ZFS Ubuntu installation on Hetzner Cloud..."
|
||||
|
||||
# Phase 0: User input
|
||||
get_user_input
|
||||
|
||||
# Phase 1: System detection and preparation
|
||||
detect_efi
|
||||
find_install_disk
|
||||
|
||||
# Show summary and get final confirmation
|
||||
show_summary_and_confirm
|
||||
|
||||
remove_unused_kernels
|
||||
install_zfs_on_rescue_system
|
||||
|
||||
# Phase 2: Disk partitioning and ZFS setup
|
||||
partition_disk
|
||||
create_zfs_pool
|
||||
|
||||
# Phase 3: System bootstrap
|
||||
bootstrap_ubuntu_system
|
||||
setup_chroot_environment
|
||||
|
||||
# Phase 4: System configuration
|
||||
configure_basic_system
|
||||
install_system_packages
|
||||
configure_ssh
|
||||
set_root_credentials
|
||||
configure_system_services
|
||||
configure_networking
|
||||
|
||||
# Phase 5: Bootloader setup
|
||||
configure_bootloader
|
||||
|
||||
# Phase 6: Cleanup and finalization
|
||||
unmount_chroot_environment
|
||||
finalize_system_resolved
|
||||
unmount_all_datasets_and_partitions
|
||||
|
||||
# Phase 7: Final mountpoints and export
|
||||
set_final_mountpoints
|
||||
|
||||
export_zfs_pool
|
||||
|
||||
show_final_instructions
|
||||
|
||||
reboot
|
||||
}
|
||||
|
||||
# Execute main function
|
||||
main "$@"
|
||||
Reference in New Issue
Block a user