getch 0.1.6 → 0.1.9

data/lib/getch/gentoo/sources.rb

@@ -1,3 +1,7 @@
+# frozen_string_literal: true
+
+require 'cmdline'
+
 module Getch
   module Gentoo
     class Sources
@@ -7,18 +11,38 @@ module Getch
         @filesystem = @class_fs::Deps.new
       end
 
-      def build_others
-        cryptsetup
-        virtualbox_guest
-        qemu_guest
-        install_wifi
-        install_audio
-        flash_mod
+      def bask
+        puts ' ==> Hardening kernel...'
+        #Getch::Bask.new('10_kspp.config').cp
+        Getch::Bask.new('11-kspp-gcc.config').cp
+        Getch::Bask.new('12-kspp-x86_64.config').cp
+        #Getch::Bask.new('20-clipos.config').cp
+        #Getch::Bask.new('30-grsecurity.config').cp
+        #Getch::Bask.new('40-kconfig-hardened.config').cp
+        Getch::Bask.new('50-blacklist.config').cp
+        Getch::Bask.new('51-blacklist-madaidans.config').cp
       end
 
-      def build_kspp
-        puts "Adding KSPP to the kernel source"
-        bask("-b -a systemd")
+      def configs
+        gen_cmdline
+        grub_mkconfig unless Helpers.efi?
+      end
+
+      def gen_cmdline
+        cmdline = CmdLine::Kernel.new(workdir: "#{MOUNTPOINT}/etc/kernel")
+        cmdline.main
+      end
+
+      def grub_mkconfig
+        file = "#{MOUNTPOINT}/etc/kernel/install.d/90-mkconfig.install"
+        content = <<~SHELL
+#!/usr/bin/env sh
+set -o errexit
+grub-mkconfig -o /boot/grub/grub.cfg
+exit 0
+SHELL
+        File.write file, content
+        File.chmod 0755, file
       end
 
       def make
@@ -31,90 +55,55 @@ module Getch
         end
       end
 
-      def firewall
-        bask("-a iptables")
-        Getch::Emerge.new("net-firewall/iptables").pkg!
+      def load_modules
+        install_wifi
+        flash_mod
       end
 
       private
 
       def make_kernel
-        puts "Compiling kernel sources"
-        cmd = "make -j$(nproc) && make modules_install && make install"
-        Getch::Make.new(cmd).run!
+        puts 'Compiling kernel sources'
+        Getch::Emerge.new('sys-kernel/gentoo-kernel').pkg!
         is_kernel = Dir.glob("#{MOUNTPOINT}/boot/vmlinuz-*")
-        raise "No kernel installed, compiling source fail..." if is_kernel == []
-      end
-
-      def cryptsetup
-        return unless Getch::OPTIONS[:encrypt]
-        make_conf = "#{MOUNTPOINT}/etc/portage/make.conf"
-
-        puts "Adding support for cryptsetup."
-        bask("-a cryptsetup")
-        Getch::Chroot.new("euse -E cryptsetup").run! unless Helpers::grep?(make_conf, /cryptsetup/)
-        Getch::Emerge.new("sys-fs/cryptsetup").pkg!
-      end
-
-      def virtualbox_guest
-        systemd=`systemd-detect-virt`.chomp
-        return if ! ismatch?('vmwgfx') || systemd.match(/none/)
-        bask("-a virtualbox-guest")
-        Getch::Emerge.new("app-emulation/virtualbox-guest-additions").pkg!
-      end
-
-      def qemu_guest
-        bask("-a kvm-host") if ismatch?('kvm')
-        bask("-a kvm-guest") if ismatch?('virtio')
+        raise 'No kernel installed, compiling source fail...' if is_kernel == []
       end
 
       def ismatch?(arg)
         @lsmod.match?(/#{arg}/)
       end
 
-      def bask(cmd)
-        Getch::Bask.new(cmd).run!
-      end
-
       def install_wifi
-        return if ! ismatch?('cfg80211')
-        bask("-a wifi")
-        wifi_drivers
-        Getch::Emerge.new("net-wireless/iw wpa_supplicant net-wireless/iwd").pkg!
-      end
+        return unless ismatch?('cfg80211')
 
-      def install_audio
-        return if ! ismatch?('snd_pcm')
-        bask("-a sound")
+        wifi_drivers
+        Getch::Emerge.new('net-wireless/iwd').pkg!
       end
 
       def wifi_drivers
         conf = "#{MOUNTPOINT}/etc/modules-load.d/wifi.conf"
-        File.delete(conf) if File.exists? conf
-
-        if ismatch?('ath9k')
-          bask("-a ath9k-driver")
-        end
+        File.delete(conf) if File.exist? conf
 
-        module_load("iwlmvm", conf)
-        module_load("ath9k", conf)
+        module_load('iwlmvm', conf)
+        module_load('ath9k', conf)
       end
 
       def flash_mod
         conf = "#{MOUNTPOINT}/etc/modules-load.d/usb.conf"
-        File.delete(conf) if File.exists? conf
-
-        module_load("ehci_pci", conf)
-        module_load("rtsx_pci_sdmmc", conf)
-        module_load("sdhci_pci", conf)
-        module_load("uas", conf)
-        module_load("uhci_hcd", conf)
-        module_load("xhci_pci", conf)
+        File.delete(conf) if File.exist? conf
+
+        module_load('ehci_pci', conf)
+        module_load('rtsx_pci_sdmmc', conf)
+        module_load('sdhci_pci', conf)
+        module_load('uas', conf)
+        module_load('uhci_hcd', conf)
+        module_load('xhci_pci', conf)
       end
 
       def module_load(name, file)
         return unless name
         return unless ismatch?(name)
+
         File.write(file, "#{name}\n", mode: 'a')
       end
     end

data/lib/getch/gentoo/stage.rb

@@ -1,3 +1,5 @@
+# frozen_string_literal: true
+
 require 'open-uri'
 require 'open3'
 
@@ -5,7 +7,7 @@ module Getch
   module Gentoo
     class Stage
       def initialize
-        @mirror = "https://mirrors.soeasyto.com/distfiles.gentoo.org"
+        @mirror = 'https://mirrors.soeasyto.com/distfiles.gentoo.org'
         @release = release
         @stage_file="stage3-amd64-systemd-#{@release}.tar.xz"
       end
@@ -28,16 +30,16 @@ module Getch
         Dir.chdir(MOUNTPOINT)
         return if File.exist?(@stage_file)
         puts "Download the last #{@stage_file}, please wait..."
-        Helpers::get_file_online(@mirror + "/releases/amd64/autobuilds/" + file, @stage_file)
+        Helpers.get_file_online(@mirror + '/releases/amd64/autobuilds/' + file, @stage_file)
       end
 
       def control_files
-        puts "Download the DIGESTS"
-        Helpers::get_file_online(@mirror + "/releases/amd64/autobuilds/" + file + ".DIGESTS", "#{@stage_file}.DIGESTS")
-        puts "Download the DIGESTS.asc"
-        Helpers::get_file_online(@mirror + "/releases/amd64/autobuilds/" + file + ".DIGESTS.asc", "#{@stage_file}.DIGESTS.asc")
+        puts 'Download the DIGESTS'
+        Helpers.get_file_online(@mirror + '/releases/amd64/autobuilds/' + file + '.DIGESTS', "#{@stage_file}.DIGESTS")
+        puts 'Download the DIGESTS.asc'
+        Helpers.get_file_online(@mirror + '/releases/amd64/autobuilds/' + file + '.DIGESTS.asc', "#{@stage_file}.DIGESTS.asc")
         puts "Download the CONTENTS.gz"
-        Helpers::get_file_online(@mirror + "/releases/amd64/autobuilds/" + file + ".CONTENTS.gz", "#{@stage_file}.CONTENTS.gz")
+        Helpers.get_file_online(@mirror + '/releases/amd64/autobuilds/' + file + '.CONTENTS.gz', "#{@stage_file}.CONTENTS.gz")
       end
 
       def checksum
@@ -45,7 +47,7 @@ module Getch
         command = "awk '/SHA512 HASH/{getline;print}' #{@stage_file}.DIGESTS.asc | sha512sum --check"
         _, stderr, status = Open3.capture3(command)
         if status.success? then
-          puts "Checksum is ok"
+          puts 'Checksum is ok'
           decompress
           cleaning
         else
@@ -54,7 +56,7 @@ module Getch
         end
       end
 
-      private 
+      private
 
       # https://wiki.gentoo.org/wiki/Handbook:AMD64/Installation/Stage
       def decompress
@@ -64,9 +66,7 @@ module Getch
       end
 
       def cleaning
-        Dir.glob("stage3-amd64-systemd*").each do |f|
-          File.delete(f)
-        end
+        Dir.glob('stage3-amd64-systemd*').each { |f| File.delete(f) }
       end
     end
   end

data/lib/getch/gentoo/use.rb

@@ -1,3 +1,5 @@
+# frozen_string_literal: true
+
 module Getch
   module Gentoo
     class Use
@@ -27,13 +29,7 @@ module Getch
 
       def write_global
         list = []
-
-        @flags.each { |f|
-          unless Helpers::grep?(@make, /#{f}/)
-            list << f
-          end
-        }
-
+        @flags.each { |f| list << f unless Helpers.grep?(@make, /#{f}/) }
         use = list.join(' ')
         line = "USE=\"${USE} #{use}\"\n"
         File.write(@make, line, mode: 'a')

data/lib/getch/gentoo/use_flag.rb

@@ -1,63 +1,89 @@
-# lib/use_flag.rb
+# frozen_string_literal: true
 
-module Getch::Gentoo
-  class UseFlag
-    def initialize
-      @efi = Helpers::efi?
-    end
+module Getch
+  module Gentoo
+    class UseFlag
+      def initialize
+        @efi = Helpers.efi?
+      end
 
-    def apply
-      systemd
-      kmod
-      grub
-      zfs
-      lvm
-      cryptsetup
-    end
+      def apply
+        systemd
+        pam
+        kernel
+        kmod
+        grub
+        zfs
+        lvm
+        cryptsetup
+      end
 
-    private
+      private
 
-    def systemd
-      flags = []
-      use = Getch::Gentoo::Use.new('sys-apps/systemd')
-      flags << 'dns-over-tls'
-      flags << 'gnuefi' if @efi
-      use.add(flags)
-    end
+      def systemd
+        flags = []
+        use = Getch::Gentoo::Use.new('sys-apps/systemd')
+        flags << 'dns-over-tls'
+        flags << 'gnuefi' if @efi
+        use.add(flags)
+      end
 
-    def kmod
-      use = Getch::Gentoo::Use.new('sys-apps/kmod')
-      use.add('zstd', 'lzma')
-    end
+      def pam
+        flags = []
+        use = Getch::Gentoo::Use.new('sys-auth/pambase')
+        flags << '-passwdqc'
+        flags << 'pwquality'
+        flags << 'sha512'
+        use.add(flags)
+      end
 
-    def grub
-      return if @efi
-      flags = []
-      use = Getch::Gentoo::Use.new('sys-boot/grub')
-      flags << '-grub_platforms_efi-64'
-      flags << 'libzfs' if Getch::OPTIONS[:fs] == 'zfs'
-      flags << 'device-mapper' if Getch::OPTIONS[:fs] == 'lvm'
-      use.add(flags)
-    end
+      def kernel
+        use = Getch::Gentoo::Use.new('sys-kernel/gentoo-kernel')
+        use.add('hardened')
+      end
 
-    def zfs
-      return unless Getch::OPTIONS[:fs] == 'zfs'
-      use = Getch::Gentoo::Use.new('sys-fs/zfs-kmod')
-      use.add('rootfs')
-      use = Getch::Gentoo::Use.new('sys-fs/zfs')
-      use.add('rootfs')
-    end
+      def kmod
+        use = Getch::Gentoo::Use.new('sys-apps/kmod')
+        use.add('zstd', 'lzma')
+      end
 
-    def lvm
-      return unless Getch::OPTIONS[:fs] == 'lvm'
-      use = Getch::Gentoo::Use.new
-      use.add_global('lvm', 'device-mapper')
-    end
+      def grub
+        return if @efi
+
+        flags = []
+        use = Getch::Gentoo::Use.new('sys-boot/grub')
+        flags << '-grub_platforms_efi-64'
+        flags << 'libzfs' if Getch::OPTIONS[:fs] == 'zfs'
+        flags << 'device-mapper' if Getch::OPTIONS[:fs] == 'lvm'
+        use.add(flags)
+      end
+
+      def zfs
+        return unless Getch::OPTIONS[:fs] == 'zfs'
+
+        use = Getch::Gentoo::Use.new('sys-fs/zfs-kmod')
+        use.add('rootfs')
+        use = Getch::Gentoo::Use.new('sys-fs/zfs')
+        use.add('rootfs')
+
+        # https://wiki.gentoo.org/wiki/Project:Distribution_Kernel
+        use = Getch::Gentoo::Use.new
+        use.add_global('dist-kernel')
+      end
+
+      def lvm
+        return unless Getch::OPTIONS[:fs] == 'lvm'
+
+        use = Getch::Gentoo::Use.new
+        use.add_global('lvm', 'device-mapper')
+      end
+
+      def cryptsetup
+        return unless Getch::OPTIONS[:encrypt]
 
-    def cryptsetup
-      return unless Getch::OPTIONS[:encrypt]
-      use = Getch::Gentoo::Use.new
-      use.add_global('cryptsetup')
+        use = Getch::Gentoo::Use.new
+        use.add_global('cryptsetup')
+      end
     end
   end
 end

data/lib/getch/gentoo.rb

@@ -1,6 +1,9 @@
+# frozen_string_literal: true
+
 require_relative 'gentoo/stage'
 require_relative 'gentoo/config'
 require_relative 'gentoo/chroot'
+require_relative 'gentoo/bootloader'
 require_relative 'gentoo/sources'
 require_relative 'gentoo/boot'
 require_relative 'gentoo/use'
@@ -10,11 +13,12 @@ module Getch
   module Gentoo
     class Main
       def initialize
-        @state = Getch::States.new()
+        @state = Getch::States.new
       end
 
       def stage3
         return if STATES[:gentoo_base]
+
         stage = Getch::Gentoo::Stage.new
         stage.get_stage3
         stage.control_files
@@ -24,6 +28,7 @@ module Getch
 
       def config
         return if STATES[:gentoo_config]
+
         config = Getch::Gentoo::Config.new
         config.portage
         config.portage_fs
@@ -36,6 +41,8 @@ module Getch
       end
 
       def chroot
+        return if STATES[:gentoo_update]
+
         chroot = Getch::Gentoo::Chroot.new
         chroot.update
         chroot.cpuflags
@@ -45,20 +52,27 @@ module Getch
         flags.apply
 
         chroot.world
-        return if STATES[:gentoo_kernel]
-        chroot.kernel
-        chroot.kernel_deps
+        chroot.kernel_license
         chroot.install_pkgs
-        chroot.kernel_link
+        @state.update
+      end
+
+      def bootloader
+        return if STATES[:gentoo_bootloader]
+
+        bootloader = Getch::Gentoo::Bootloader.new
+        bootloader.start
+        @state.bootloader
       end
 
       def kernel
         return if STATES[:gentoo_kernel]
+
         source = Getch::Gentoo::Sources.new
-        source.build_kspp
-        source.build_others
-        source.firewall
+        source.bask
+        source.configs
         source.make
+        source.load_modules
         @state.kernel
       end
 

data/lib/getch/guard.rb

@@ -1,3 +1,5 @@
+# frozen_string_literal: true
+
 class InvalidDisk < StandardError
 end
 
@@ -10,55 +12,60 @@ end
 class InvalidKeymap < StandardError
 end
 
-module Getch::Guard
-  def self.disk(name)
-    raise InvalidDisk, "No disk." unless name
-    raise InvalidDisk, "Bad device name #{name}." unless name.match(/^sd[a-z]{1}$/)
-    raise InvalidDisk, "Disk /dev/#{name} no found." unless File.exist? "/dev/#{name}"
-    name
-  rescue InvalidDisk => e
-    puts "#{e.class} => #{e}"
-    exit 1
-  end
+module Getch
+  module Guard
+    def self.disk(name)
+      raise InvalidDisk, 'No disk.' unless name
+      raise InvalidDisk, "Bad device name #{name}." unless name.match(/^sd[a-z]{1}$/)
+      raise InvalidDisk, "Disk /dev/#{name} no found." unless File.exist? "/dev/#{name}"
 
-  def self.format(name)
-    raise InvalidFormat, "No format specified." unless name
-    raise InvalidFormat, "Format #{name} not yet available." if name.match(/btrfs/)
-    raise InvalidFormat, "Format #{name} not supported." unless name.match(/zfs|lvm|ext4/)
-    name
-  rescue InvalidFormat => e
-    puts "#{e.class} => #{e}"
-    exit 1
-  end
+      name
+    rescue InvalidDisk => e
+      puts "#{e.class} => #{e}"
+      exit 1
+    end
 
-  def self.zone(name)
-    raise InvalidZone, "No zoneinfo specified." unless name
-    raise InvalidZone, "Directory /usr/share/zoneinfo/ no found on this system..." unless Dir.exist? "/usr/share/zoneinfo/"
-    raise InvalidZone, "Zoneinfo #{name} is no found in /usr/share/zoneinfo/." unless File.exist? "/usr/share/zoneinfo/#{name}"
-    name
-  rescue InvalidZone => e
-    puts "#{e.class} => #{e}"
-    exit 1
-  end
+    def self.format(name)
+      raise InvalidFormat, 'No format specified.' unless name
+      raise InvalidFormat, "Format #{name} not yet available." if name.match(/btrfs/)
+      raise InvalidFormat, "Format #{name} not supported." unless name.match(/zfs|lvm|ext4/)
 
-  def self.keymap(name)
-    raise InvalidKeymap, "No keymap specified." unless name
-    key = []
+      name
+    rescue InvalidFormat => e
+      puts "#{e.class} => #{e}"
+      exit 1
+    end
 
-    if Dir.exist? '/usr/share/keymaps'
-      key = Dir.glob("/usr/share/keymaps/**/#{name}.map.gz")
-    elsif Dir.exist? '/usr/share/kbd/keymaps'
-      key = Dir.glob("/usr/share/kbd/keymaps/**/#{name}.map.gz")
-    else
-      raise InvalidKeymap, "No directory found for keymap."
+    def self.zone(name)
+      raise InvalidZone, 'No zoneinfo specified.' unless name
+      raise InvalidZone, 'Directory /usr/share/zoneinfo/ no found on this system...' unless Dir.exist? '/usr/share/zoneinfo/'
+      raise InvalidZone, "Zoneinfo #{name} is no found in /usr/share/zoneinfo/." unless File.exist? "/usr/share/zoneinfo/#{name}"
+
+      name
+    rescue InvalidZone => e
+      puts "#{e.class} => #{e}"
+      exit 1
     end
 
-    if key == []
-      raise InvalidKeymap, "Keymap #{name} no found."
+    def self.keymap(name)
+      raise InvalidKeymap, 'No keymap specified.' unless name
+
+      key = []
+
+      if Dir.exist? '/usr/share/keymaps'
+        key = Dir.glob("/usr/share/keymaps/**/#{name}.map.gz")
+      elsif Dir.exist? '/usr/share/kbd/keymaps'
+        key = Dir.glob("/usr/share/kbd/keymaps/**/#{name}.map.gz")
+      else
+        raise InvalidKeymap, 'No directory found for keymap.'
+      end
+
+      raise InvalidKeymap, "Keymap #{name} no found." if key == []
+
+      name
+    rescue InvalidKeymap => e
+      puts "#{e.class} => #{e}"
+      exit 1
     end
-    name
-  rescue InvalidKeymap => e
-    puts "#{e.class} => #{e}"
-    exit 1
   end
 end