getch 0.1.2 → 0.1.9

data/lib/getch/gentoo/sources.rb

@@ -1,75 +1,110 @@
+# frozen_string_literal: true
+
+require 'cmdline'
+
 module Getch
   module Gentoo
     class Sources
       def initialize
         @lsmod = `lsmod`.chomp
-        @filesystem = Getch.class_fs::Deps.new()
+        @class_fs = Getch::select_fs
+        @filesystem = @class_fs::Deps.new
       end
 
-      def build_others
-        virtualbox_guest
-        qemu_guest
-        install_wifi
-        install_audio
+      def bask
+        puts ' ==> Hardening kernel...'
+        #Getch::Bask.new('10_kspp.config').cp
+        Getch::Bask.new('11-kspp-gcc.config').cp
+        Getch::Bask.new('12-kspp-x86_64.config').cp
+        #Getch::Bask.new('20-clipos.config').cp
+        #Getch::Bask.new('30-grsecurity.config').cp
+        #Getch::Bask.new('40-kconfig-hardened.config').cp
+        Getch::Bask.new('50-blacklist.config').cp
+        Getch::Bask.new('51-blacklist-madaidans.config').cp
+      end
+
+      def configs
+        gen_cmdline
+        grub_mkconfig unless Helpers.efi?
+      end
+
+      def gen_cmdline
+        cmdline = CmdLine::Kernel.new(workdir: "#{MOUNTPOINT}/etc/kernel")
+        cmdline.main
       end
 
-      def build_kspp
-        puts "Adding KSPP to the kernel source"
-        bask("-b -a systemd")
+      def grub_mkconfig
+        file = "#{MOUNTPOINT}/etc/kernel/install.d/90-mkconfig.install"
+        content = <<~SHELL
+#!/usr/bin/env sh
+set -o errexit
+grub-mkconfig -o /boot/grub/grub.cfg
+exit 0
+SHELL
+        File.write file, content
+        File.chmod 0755, file
       end
 
       def make
-        if DEFAULT_OPTIONS[:fs] == 'lvm' || DEFAULT_OPTIONS[:fs] == 'zfs' || DEFAULT_OPTIONS[:encrypt]
+        if Getch::OPTIONS[:fs] == 'lvm' ||
+            Getch::OPTIONS[:fs] == 'zfs' ||
+            Getch::OPTIONS[:encrypt]
           @filesystem.make
         else
           make_kernel
         end
       end
 
+      def load_modules
+        install_wifi
+        flash_mod
+      end
+
       private
 
       def make_kernel
-        puts "Compiling kernel sources"
-        cmd = "make -j$(nproc) && make modules_install && make install"
-        Getch::Make.new(cmd).run!
+        puts 'Compiling kernel sources'
+        Getch::Emerge.new('sys-kernel/gentoo-kernel').pkg!
         is_kernel = Dir.glob("#{MOUNTPOINT}/boot/vmlinuz-*")
-        raise "No kernel installed, compiling source fail..." if is_kernel == []
-      end
-
-      def virtualbox_guest
-        systemd=`systemd-detect-virt`.chomp
-        return if ! ismatch?('vmwgfx') || systemd.match(/none/)
-        bask("-a virtualbox-guest")
-        Getch::Emerge.new("app-emulation/virtualbox-guest-additions").pkg!
-      end
-
-      def qemu_guest
-        bask("-a kvm-host") if ismatch?('kvm')
-        bask("-a kvm-guest") if ismatch?('virtio')
+        raise 'No kernel installed, compiling source fail...' if is_kernel == []
       end
 
       def ismatch?(arg)
         @lsmod.match?(/#{arg}/)
       end
 
-      def bask(cmd)
-        Getch::Bask.new(cmd).run!
-      end
-
       def install_wifi
-        return if ! ismatch?('cfg80211')
-        bask("-a wifi")
+        return unless ismatch?('cfg80211')
+
         wifi_drivers
-        Getch::Emerge.new("net-wireless/iw wpa_supplicant net-wireless/iwd").pkg!
+        Getch::Emerge.new('net-wireless/iwd').pkg!
+      end
+
+      def wifi_drivers
+        conf = "#{MOUNTPOINT}/etc/modules-load.d/wifi.conf"
+        File.delete(conf) if File.exist? conf
+
+        module_load('iwlmvm', conf)
+        module_load('ath9k', conf)
       end
 
-      def install_audio
-        return if ! ismatch?('snd_pcm')
-        bask("-a sound")
+      def flash_mod
+        conf = "#{MOUNTPOINT}/etc/modules-load.d/usb.conf"
+        File.delete(conf) if File.exist? conf
+
+        module_load('ehci_pci', conf)
+        module_load('rtsx_pci_sdmmc', conf)
+        module_load('sdhci_pci', conf)
+        module_load('uas', conf)
+        module_load('uhci_hcd', conf)
+        module_load('xhci_pci', conf)
       end
 
-      def wifi_drivers
-        bask("-a ath9k-driver") if ismatch?('ath9k')
+      def module_load(name, file)
+        return unless name
+        return unless ismatch?(name)
+
+        File.write(file, "#{name}\n", mode: 'a')
       end
     end
   end

data/lib/getch/gentoo/stage.rb

@@ -1,12 +1,13 @@
+# frozen_string_literal: true
+
 require 'open-uri'
 require 'open3'
 
 module Getch
   module Gentoo
     class Stage
-
       def initialize
-        @mirror = "https://mirrors.soeasyto.com/distfiles.gentoo.org"
+        @mirror = 'https://mirrors.soeasyto.com/distfiles.gentoo.org'
         @release = release
         @stage_file="stage3-amd64-systemd-#{@release}.tar.xz"
       end
@@ -29,16 +30,16 @@ module Getch
         Dir.chdir(MOUNTPOINT)
         return if File.exist?(@stage_file)
         puts "Download the last #{@stage_file}, please wait..."
-        Helpers::get_file_online(@mirror + "/releases/amd64/autobuilds/" + file, @stage_file)
+        Helpers.get_file_online(@mirror + '/releases/amd64/autobuilds/' + file, @stage_file)
       end
 
       def control_files
-        puts "Download the DIGESTS"
-        Helpers::get_file_online(@mirror + "/releases/amd64/autobuilds/" + file + ".DIGESTS", "#{@stage_file}.DIGESTS")
-        puts "Download the DIGESTS.asc"
-        Helpers::get_file_online(@mirror + "/releases/amd64/autobuilds/" + file + ".DIGESTS.asc", "#{@stage_file}.DIGESTS.asc")
+        puts 'Download the DIGESTS'
+        Helpers.get_file_online(@mirror + '/releases/amd64/autobuilds/' + file + '.DIGESTS', "#{@stage_file}.DIGESTS")
+        puts 'Download the DIGESTS.asc'
+        Helpers.get_file_online(@mirror + '/releases/amd64/autobuilds/' + file + '.DIGESTS.asc', "#{@stage_file}.DIGESTS.asc")
         puts "Download the CONTENTS.gz"
-        Helpers::get_file_online(@mirror + "/releases/amd64/autobuilds/" + file + ".CONTENTS.gz", "#{@stage_file}.CONTENTS.gz")
+        Helpers.get_file_online(@mirror + '/releases/amd64/autobuilds/' + file + '.CONTENTS.gz', "#{@stage_file}.CONTENTS.gz")
       end
 
       def checksum
@@ -46,7 +47,7 @@ module Getch
         command = "awk '/SHA512 HASH/{getline;print}' #{@stage_file}.DIGESTS.asc | sha512sum --check"
         _, stderr, status = Open3.capture3(command)
         if status.success? then
-          puts "Checksum is ok"
+          puts 'Checksum is ok'
           decompress
           cleaning
         else
@@ -55,7 +56,7 @@ module Getch
         end
       end
 
-      private 
+      private
 
       # https://wiki.gentoo.org/wiki/Handbook:AMD64/Installation/Stage
       def decompress
@@ -65,9 +66,7 @@ module Getch
       end
 
       def cleaning
-        Dir.glob("stage3-amd64-systemd*").each do |f|
-          File.delete(f)
-        end
+        Dir.glob('stage3-amd64-systemd*').each { |f| File.delete(f) }
       end
     end
   end

data/lib/getch/gentoo/use.rb

@@ -0,0 +1,39 @@
+# frozen_string_literal: true
+
+module Getch
+  module Gentoo
+    class Use
+      def initialize(pkg = nil)
+        @use_dir = "#{MOUNTPOINT}/etc/portage/package.use"
+        @pkg = pkg
+        @file = @pkg ? @pkg.match(/[\w]+$/) : nil
+        @make = "#{MOUNTPOINT}/etc/portage/make.conf"
+      end
+
+      def add(*flags)
+        @flags = flags.join(' ')
+        write
+      end
+
+      def add_global(*flags)
+        @flags = flags
+        write_global
+      end
+
+      private
+
+      def write
+        content = "#{@pkg} #{@flags}\n"
+        File.write("#{@use_dir}/#{@file}", content, mode: 'w')
+      end
+
+      def write_global
+        list = []
+        @flags.each { |f| list << f unless Helpers.grep?(@make, /#{f}/) }
+        use = list.join(' ')
+        line = "USE=\"${USE} #{use}\"\n"
+        File.write(@make, line, mode: 'a')
+      end
+    end
+  end
+end

data/lib/getch/gentoo/use_flag.rb

@@ -0,0 +1,89 @@
+# frozen_string_literal: true
+
+module Getch
+  module Gentoo
+    class UseFlag
+      def initialize
+        @efi = Helpers.efi?
+      end
+
+      def apply
+        systemd
+        pam
+        kernel
+        kmod
+        grub
+        zfs
+        lvm
+        cryptsetup
+      end
+
+      private
+
+      def systemd
+        flags = []
+        use = Getch::Gentoo::Use.new('sys-apps/systemd')
+        flags << 'dns-over-tls'
+        flags << 'gnuefi' if @efi
+        use.add(flags)
+      end
+
+      def pam
+        flags = []
+        use = Getch::Gentoo::Use.new('sys-auth/pambase')
+        flags << '-passwdqc'
+        flags << 'pwquality'
+        flags << 'sha512'
+        use.add(flags)
+      end
+
+      def kernel
+        use = Getch::Gentoo::Use.new('sys-kernel/gentoo-kernel')
+        use.add('hardened')
+      end
+
+      def kmod
+        use = Getch::Gentoo::Use.new('sys-apps/kmod')
+        use.add('zstd', 'lzma')
+      end
+
+      def grub
+        return if @efi
+
+        flags = []
+        use = Getch::Gentoo::Use.new('sys-boot/grub')
+        flags << '-grub_platforms_efi-64'
+        flags << 'libzfs' if Getch::OPTIONS[:fs] == 'zfs'
+        flags << 'device-mapper' if Getch::OPTIONS[:fs] == 'lvm'
+        use.add(flags)
+      end
+
+      def zfs
+        return unless Getch::OPTIONS[:fs] == 'zfs'
+
+        use = Getch::Gentoo::Use.new('sys-fs/zfs-kmod')
+        use.add('rootfs')
+        use = Getch::Gentoo::Use.new('sys-fs/zfs')
+        use.add('rootfs')
+
+        # https://wiki.gentoo.org/wiki/Project:Distribution_Kernel
+        use = Getch::Gentoo::Use.new
+        use.add_global('dist-kernel')
+      end
+
+      def lvm
+        return unless Getch::OPTIONS[:fs] == 'lvm'
+
+        use = Getch::Gentoo::Use.new
+        use.add_global('lvm', 'device-mapper')
+      end
+
+      def cryptsetup
+        return unless Getch::OPTIONS[:encrypt]
+
+        use = Getch::Gentoo::Use.new
+        use.add_global('cryptsetup')
+      end
+    end
+  end
+end

data/lib/getch/gentoo.rb

@@ -1,65 +1,83 @@
-require 'open-uri'
-require 'open3'
+# frozen_string_literal: true
+
 require_relative 'gentoo/stage'
 require_relative 'gentoo/config'
 require_relative 'gentoo/chroot'
+require_relative 'gentoo/bootloader'
 require_relative 'gentoo/sources'
 require_relative 'gentoo/boot'
+require_relative 'gentoo/use'
+require_relative 'gentoo/use_flag'
 
 module Getch
   module Gentoo
-    class << self
-      def new
-        @state = Getch::States.new()
+    class Main
+      def initialize
+        @state = Getch::States.new
       end
 
       def stage3
         return if STATES[:gentoo_base]
-        new
-        stage = Getch::Gentoo::Stage.new()
+
+        stage = Getch::Gentoo::Stage.new
         stage.get_stage3
         stage.control_files
         stage.checksum
         @state.stage3
       end
 
-      def config(options)
+      def config
         return if STATES[:gentoo_config]
-        new
-        config = Getch::Gentoo::Config.new()
+
+        config = Getch::Gentoo::Config.new
         config.portage
         config.portage_fs
+        config.portage_bashrc
         config.repo
         config.network
-        config.systemd(options)
+        config.systemd
         config.hostname
         @state.config
       end
 
       def chroot
-        chroot = Getch::Gentoo::Chroot.new()
+        return if STATES[:gentoo_update]
+
+        chroot = Getch::Gentoo::Chroot.new
         chroot.update
         chroot.cpuflags
         chroot.systemd
+
+        flags = Getch::Gentoo::UseFlag.new
+        flags.apply
+
         chroot.world
-        return if STATES[:gentoo_kernel]
-        chroot.kernel
-        chroot.kernel_deps
+        chroot.kernel_license
         chroot.install_pkgs
+        @state.update
+      end
+
+      def bootloader
+        return if STATES[:gentoo_bootloader]
+
+        bootloader = Getch::Gentoo::Bootloader.new
+        bootloader.start
+        @state.bootloader
       end
 
       def kernel
         return if STATES[:gentoo_kernel]
-        source = Getch::Gentoo::Sources.new()
-        new
-        source.build_kspp
-        source.build_others
+
+        source = Getch::Gentoo::Sources.new
+        source.bask
+        source.configs
         source.make
+        source.load_modules
         @state.kernel
       end
 
-      def boot(options)
-        boot = Getch::Gentoo::Boot.new(options)
+      def boot
+        boot = Getch::Gentoo::Boot.new
         boot.start
       end
     end

data/lib/getch/guard.rb

@@ -0,0 +1,71 @@
+# frozen_string_literal: true
+
+class InvalidDisk < StandardError
+end
+
+class InvalidFormat < StandardError
+end
+
+class InvalidZone < StandardError
+end
+
+class InvalidKeymap < StandardError
+end
+
+module Getch
+  module Guard
+    def self.disk(name)
+      raise InvalidDisk, 'No disk.' unless name
+      raise InvalidDisk, "Bad device name #{name}." unless name.match(/^sd[a-z]{1}$/)
+      raise InvalidDisk, "Disk /dev/#{name} no found." unless File.exist? "/dev/#{name}"
+
+      name
+    rescue InvalidDisk => e
+      puts "#{e.class} => #{e}"
+      exit 1
+    end
+
+    def self.format(name)
+      raise InvalidFormat, 'No format specified.' unless name
+      raise InvalidFormat, "Format #{name} not yet available." if name.match(/btrfs/)
+      raise InvalidFormat, "Format #{name} not supported." unless name.match(/zfs|lvm|ext4/)
+
+      name
+    rescue InvalidFormat => e
+      puts "#{e.class} => #{e}"
+      exit 1
+    end
+
+    def self.zone(name)
+      raise InvalidZone, 'No zoneinfo specified.' unless name
+      raise InvalidZone, 'Directory /usr/share/zoneinfo/ no found on this system...' unless Dir.exist? '/usr/share/zoneinfo/'
+      raise InvalidZone, "Zoneinfo #{name} is no found in /usr/share/zoneinfo/." unless File.exist? "/usr/share/zoneinfo/#{name}"
+
+      name
+    rescue InvalidZone => e
+      puts "#{e.class} => #{e}"
+      exit 1
+    end
+
+    def self.keymap(name)
+      raise InvalidKeymap, 'No keymap specified.' unless name
+
+      key = []
+
+      if Dir.exist? '/usr/share/keymaps'
+        key = Dir.glob("/usr/share/keymaps/**/#{name}.map.gz")
+      elsif Dir.exist? '/usr/share/kbd/keymaps'
+        key = Dir.glob("/usr/share/kbd/keymaps/**/#{name}.map.gz")
+      else
+        raise InvalidKeymap, 'No directory found for keymap.'
+      end
+
+      raise InvalidKeymap, "Keymap #{name} no found." if key == []
+
+      name
+    rescue InvalidKeymap => e
+      puts "#{e.class} => #{e}"
+      exit 1
+    end
+  end
+end