David Heinemeier HanssonandClaude Fable 5
679edce2e3
OEM mode installs the entire system but defers user creation to first boot, where the runtime's omarchy-oem-setup asks for the owner and lands them in the already-installed system — and the same machinery arms omarchy-reset-computer. The configurator's install-mode step gains an OEM choice, which required moving the user step after mode selection (OEM skips it entirely). Autoinstall rigs select OEM with an `oem` marker file on the cidata drive, which also replaces the user_credentials.json requirement. In the orchestrator, OEM swaps the user phases for a stage_oem_state phase: it stashes the bundled Node tarball (every install, for offline factory resets), arms omarchy-oem-setup.service in the target, and on encrypted installs stages the throwaway LUKS passphrase — generated by InstallContext when the input carries none — with a keyfile embedded in the UKI so boot auto-unlocks until first-boot setup re-keys to the owner's password. The install fails with a clear error if the bundled runtime lacks OEM support. Every install now also ends with a read-only @factory snapshot of @ at the btrfs top level — outside snapper's reach — which is what makes omarchy-reset-computer a true factory reset. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
61 lines
2.2 KiB
Bash
Executable File
61 lines
2.2 KiB
Bash
Executable File
#!/bin/bash
|
|
#
|
|
# Autoinstall: a drive labeled cidata (the cloud-init NoCloud label, so Proxmox,
|
|
# libvirt and Packer all know how to attach one) carrying the configurator's own
|
|
# output files stands in for the wizard. Copy those files into /root and
|
|
# everything downstream runs the ordinary path against ordinary inputs.
|
|
#
|
|
# Exits 0 when an autoinstall drive was loaded and the configurator can be
|
|
# skipped. The required pair is the same one the orchestrator treats as
|
|
# mandatory; the rest are optional there too, so don't be stricter here.
|
|
# Anything less than the pair means this isn't an autoinstall drive, and the
|
|
# caller falls back to the wizard.
|
|
#
|
|
# An `oem` marker file stands in for user_credentials.json: OEM installs defer
|
|
# user creation to first boot, so imaging rigs ship no credentials at all.
|
|
#
|
|
# The optional argument prefixes every path the script touches; tests use it to
|
|
# run against a sandbox instead of the live system.
|
|
|
|
set -uo pipefail
|
|
|
|
root=${1:-}
|
|
by_label=$root/dev/disk/by-label
|
|
dest=$root/root
|
|
mnt=$root/run/cidata
|
|
|
|
# The by-label symlinks come from udev, and on a fast boot this can run before
|
|
# device enumeration has finished. Wait for the queue to drain instead of
|
|
# racing it and silently dropping a headless install into the wizard.
|
|
udevadm settle 2>/dev/null || true
|
|
|
|
device=""
|
|
for label in cidata CIDATA; do
|
|
[[ -e $by_label/$label ]] && { device=$by_label/$label; break; }
|
|
done
|
|
[[ -n $device ]] || exit 1
|
|
|
|
mkdir -p "$mnt"
|
|
mount -o ro "$device" "$mnt" || exit 1
|
|
|
|
loaded=1
|
|
if [[ -f $mnt/user_configuration.json ]] && [[ -f $mnt/user_credentials.json || -f $mnt/oem ]]; then
|
|
files=("$mnt"/user_configuration.json)
|
|
for file in user_credentials.json oem user_full_name.txt user_email_address.txt user_encrypt_installation.txt authorized_keys tailscale_authkey; do
|
|
[[ -f $mnt/$file ]] && files+=("$mnt/$file")
|
|
done
|
|
if cp "${files[@]}" "$dest"/; then
|
|
loaded=0
|
|
else
|
|
# A partial copy must not leave files behind: the wizard cleans up only
|
|
# what it writes itself, so a half-copied authorized_keys would leak into
|
|
# the interactive install that follows.
|
|
for file in "${files[@]}"; do
|
|
rm -f "$dest/${file##*/}"
|
|
done
|
|
fi
|
|
fi
|
|
|
|
umount "$mnt"
|
|
exit $loaded
|