70_boot-configuration.sh

#! /usr/bin/env sh

PROGRESS_PERCENTAGE=70
DIALOG_STEP_TITLE="Boot configuration"

show_info_box "$DIALOG_STEP_TITLE" $PROGRESS_PERCENTAGE "Now the boot configuration will be setup."

header_file_name=$(basename $LUKS_ROOT_HEADER_FILE)
mv $LUKS_ROOT_HEADER_FILE /mnt/key_storage \
  | show_progress_box "$DIALOG_STEP_TITLE" $PROGRESS_PERCENTAGE "Moving LUKS header file to the key storage partition ..."
chmod 400 /mnt/key_storage/$header_file_name
PROGRESS_PERCENTAGE=$(( PROGRESS_PERCENTAGE + 1 ))

key_file_name=$(basename $LUKS_ROOT_KEY_FILE)
mv $LUKS_ROOT_KEY_FILE /mnt/key_storage \
  | show_progress_box "$DIALOG_STEP_TITLE" $PROGRESS_PERCENTAGE "Moving LUKS key file to the key storage partition ..."
chmod 400 /mnt/key_storage/$key_file_name
PROGRESS_PERCENTAGE=$(( PROGRESS_PERCENTAGE + 1 ))

genfstab -U -p /mnt > /mnt/etc/fstab \
  | show_progress_box "$DIALOG_STEP_TITLE" $PROGRESS_PERCENTAGE "Generating fstab ..."
PROGRESS_PERCENTAGE=$(( PROGRESS_PERCENTAGE + 1 ))



# Custom encrypt hook
show_info_box "$DIALOG_STEP_TITLE" $PROGRESS_PERCENTAGE "Next I will silently setup a custom encryption hook to open the main partition with the key file at boot time."

key_storage_device_id=$(ls -lth /dev/disk/by-uuid | grep -iP "$(basename $KEY_STORAGE_PARTITION)" | awk '{print $9}')
# TODO As long as we do not use a partition here, we have to use the device path
root_device_id=$ENCRYPTION_PARTITION
cat << EOF > /mnt/etc/initcpio/hooks/detachedheader
#!/usr/bin/ash

run_hook() {
    modprobe -a -q dm-crypt >/dev/null 2>&1
    #modprobe loop
    [ "${quiet}" = "y" ] && CSQUIET=">/dev/null"

    while [ ! -L '/dev/disk/by-uuid/$key_storage_device_id' ]; do
     echo 'Waiting for USB'
     sleep 2
    done

    cryptsetup open /dev/disk/by-uuid/$key_storage_device_id $LUKS_KEY_STORAGE_DEVICE_NAME
    mkdir -p /mnt
    mount /dev/mapper/$LUKS_KEY_STORAGE_VOLUME_GROUP_NAME-key_storage /mnt
    cryptsetup --header /mnt/$header_file_name --key-file=/mnt/$key_file_name --keyfile-size=$ENCRYPTION_KEYSIZE open $root_device_id $LUKS_DEVICE_NAME
    umount /mnt
}
EOF

cp /mnt/usr/lib/initcpio/install/encrypt /mnt/etc/initcpio/install/detachedheader
PROGRESS_PERCENTAGE=$(( PROGRESS_PERCENTAGE + 1 ))





sed --in-place 's/^HOOKS=.*/HOOKS="base udev keyboard autodetect modconf block keymap detachedheader lvm2 filesystems fsck"/g' /mnt/etc/mkinitcpio.conf
arch-chroot /mnt mkinitcpio --preset linux \
  | show_progress_box "$DIALOG_STEP_TITLE" $PROGRESS_PERCENTAGE "Makeing initramfs ..."
PROGRESS_PERCENTAGE=$(( PROGRESS_PERCENTAGE + 1 ))



mkdir --parent /mnt/boot/loader/entries

cat <<EOF > /mnt/boot/loader/loader.conf
default arch
timeout 0
editor  no
console-mode max
EOF

lang_code_prefix="$(echo $LANG | sed --regexp-extended --quiet 's/^(.*)_.*/\1/p')"
cat <<EOF > /mnt/boot/loader/entries/arch.conf
title    Arch Linux
linux    /vmlinuz-linux
initrd   /intel-ucode.img
initrd   /initramfs-linux.img
options  cryptdevice=${root_device_id}:$LUKS_VOLUME_GROUP_NAME root=/dev/mapper/${LUKS_VOLUME_GROUP_NAME}-root resume=/dev/mapper/${LUKS_VOLUME_GROUP_NAME}-swap lang=${lang_code_prefix} locale=${LANG} pcie_aspm=off
EOF

# Auto update boot stuff
# Ensure directory exists first
mkdir --parent /mnt/etc/pacman.d/hooks
cat <<EOF > /mnt/etc/pacman.d/hooks/systemd-boot.hook
[Trigger]
Type = Package
Operation = Upgrade
Target = systemd

[Action]
Description = Updating systemd-boot
When = PostTransaction
Exec = /usr/bin/bootctl update
EOF


arch-chroot /mnt bootctl install \
  | show_progress_box "$DIALOG_STEP_TITLE" $PROGRESS_PERCENTAGE "Creating systemd bootloader configs ..."
PROGRESS_PERCENTAGE=$(( PROGRESS_PERCENTAGE + 1 ))


##### -----> GRUB SETUP
# Enable booting from LUKS encrypted devices
sed --in-place \
    --expression="s/^#GRUB_ENABLE_CRYPTODISK/GRUB_ENABLE_CRYPTODISK/g" \
    /mnt/etc/default/grub

arch-chroot /mnt grub-install --target=x86_64-efi --efi-directory=/efi --bootloader-id=GRUB \
  | show_progress_box "$DIALOG_STEP_TITLE" $PROGRESS_PERCENTAGE "Installing GRUB bootloader ..."
PROGRESS_PERCENTAGE=$(( PROGRESS_PERCENTAGE + 1 ))

arch-chroot /mnt grub-mkconfig -o /boot/grub/grub.cfg \
  | show_progress_box "$DIALOG_STEP_TITLE" $PROGRESS_PERCENTAGE "Generating GRUB bootloader config ..."
PROGRESS_PERCENTAGE=$(( PROGRESS_PERCENTAGE + 1 ))

# vim: set tabstop=2 softtabstop=0 expandtab shiftwidth=2 number: