David Heinemeier HanssonandClaude Fable 5
8aee09cb29
Codex xhigh round 2: - Strip account authentication fields (!users, !root-password, root_enc_password, auth_config account entries) from the archinstall config in OEM mode, not just user_credentials — a combined/legacy config could otherwise have archinstall create a provisioning account before OOBE. - Clear stale OEM inputs (oem marker, credentials, optional files) from /root before copying a cidata drive, so a retried install in the same live session can't force a fresh drive back into OEM mode or reuse an old LUKS passphrase. - The test harness waits for the OEM pending flag to clear before saving the base image, so it never snapshots a half-finalized first boot; it also handles the deliberately skipped mode picker on blank disks built against a pre-OEM runtime. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
71 lines
2.7 KiB
Bash
Executable File
71 lines
2.7 KiB
Bash
Executable File
#!/bin/bash
|
|
#
|
|
# Autoinstall: a drive labeled cidata (the cloud-init NoCloud label, so Proxmox,
|
|
# libvirt and Packer all know how to attach one) carrying the configurator's own
|
|
# output files stands in for the wizard. Copy those files into /root and
|
|
# everything downstream runs the ordinary path against ordinary inputs.
|
|
#
|
|
# Exits 0 when an autoinstall drive was loaded and the configurator can be
|
|
# skipped. The required pair is the same one the orchestrator treats as
|
|
# mandatory; the rest are optional there too, so don't be stricter here.
|
|
# Anything less than the pair means this isn't an autoinstall drive, and the
|
|
# caller falls back to the wizard.
|
|
#
|
|
# An `oem` marker file stands in for user_credentials.json: OEM installs defer
|
|
# user creation to first boot, so imaging rigs ship no credentials at all.
|
|
#
|
|
# The optional argument prefixes every path the script touches; tests use it to
|
|
# run against a sandbox instead of the live system.
|
|
|
|
set -uo pipefail
|
|
|
|
root=${1:-}
|
|
by_label=$root/dev/disk/by-label
|
|
dest=$root/root
|
|
mnt=$root/run/cidata
|
|
|
|
# The by-label symlinks come from udev, and on a fast boot this can run before
|
|
# device enumeration has finished. Wait for the queue to drain instead of
|
|
# racing it and silently dropping a headless install into the wizard.
|
|
udevadm settle 2>/dev/null || true
|
|
|
|
device=""
|
|
for label in cidata CIDATA; do
|
|
[[ -e $by_label/$label ]] && { device=$by_label/$label; break; }
|
|
done
|
|
[[ -n $device ]] || exit 1
|
|
|
|
mkdir -p "$mnt"
|
|
mount -o ro "$device" "$mnt" || exit 1
|
|
|
|
# Clear any inputs a previous load in this live session left in /root before
|
|
# copying the current drive: a stale `oem` marker or credentials file would
|
|
# otherwise force a fresh drive's config back into OEM mode or hand it an old
|
|
# LUKS passphrase. The interactive wizard writes these same names, but a
|
|
# cidata load always precedes it, so nothing of the user's is discarded here.
|
|
optional_inputs=(user_credentials.json oem user_full_name.txt user_email_address.txt user_encrypt_installation.txt authorized_keys tailscale_authkey)
|
|
for file in user_configuration.json "${optional_inputs[@]}"; do
|
|
rm -f "$dest/$file"
|
|
done
|
|
|
|
loaded=1
|
|
if [[ -f $mnt/user_configuration.json ]] && [[ -f $mnt/user_credentials.json || -f $mnt/oem ]]; then
|
|
files=("$mnt"/user_configuration.json)
|
|
for file in "${optional_inputs[@]}"; do
|
|
[[ -f $mnt/$file ]] && files+=("$mnt/$file")
|
|
done
|
|
if cp "${files[@]}" "$dest"/; then
|
|
loaded=0
|
|
else
|
|
# A partial copy must not leave files behind: the wizard cleans up only
|
|
# what it writes itself, so a half-copied authorized_keys would leak into
|
|
# the interactive install that follows.
|
|
for file in "${files[@]}"; do
|
|
rm -f "$dest/${file##*/}"
|
|
done
|
|
fi
|
|
fi
|
|
|
|
umount "$mnt"
|
|
exit $loaded
|