warding 0.2.6 → 1.0.2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/.github/workflows/default.yml +35 -0
- data/README.md +41 -38
- data/bin/warding +5 -1
- data/debug/debug.sh +11 -0
- data/debug/quick-install.sh +7 -0
- data/lib/warding.rb +268 -257
- data/lib/warding/version.rb +1 -1
- metadata +6 -3
checksums.yaml
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
---
|
|
2
2
|
SHA256:
|
|
3
|
-
metadata.gz:
|
|
4
|
-
data.tar.gz:
|
|
3
|
+
metadata.gz: b01d39b579dc6b923df3efb9e24b577cfa395a5b0c8af10132a6ef57f4f36316
|
|
4
|
+
data.tar.gz: 874ad35327459572601cfab840a1c56697ae800288752764fa031ea4bf916136
|
|
5
5
|
SHA512:
|
|
6
|
-
metadata.gz:
|
|
7
|
-
data.tar.gz:
|
|
6
|
+
metadata.gz: 02b9d08406cc56ebf1c7475bfe7a99bc1957d07344c7881f194fb77fa3e83d15bd36b1e6af481c0277fe8b9cabab0ee9b140930f9ea4b554c19c923ef3693918
|
|
7
|
+
data.tar.gz: f0f3b24627977fa16f82f3e0b6773e4062e755f1f13eee13f9a44f5e9451574a0955e899de682a64b66f6f56bf744dd3411ab02dadd9b53af585f25afa175c2c
|
|
@@ -0,0 +1,35 @@
|
|
|
1
|
+
name: Ruby Gem
|
|
2
|
+
on:
|
|
3
|
+
release:
|
|
4
|
+
types: [created]
|
|
5
|
+
jobs:
|
|
6
|
+
build:
|
|
7
|
+
name: Build/Publish
|
|
8
|
+
runs-on: ubuntu-latest
|
|
9
|
+
steps:
|
|
10
|
+
- uses: actions/checkout@v2
|
|
11
|
+
- name: Set up Ruby 2.6
|
|
12
|
+
uses: actions/setup-ruby@v1
|
|
13
|
+
with:
|
|
14
|
+
ruby-version: 2.6.x
|
|
15
|
+
- name: Publish to GPR
|
|
16
|
+
run: |
|
|
17
|
+
mkdir -p $HOME/.gem
|
|
18
|
+
touch $HOME/.gem/credentials
|
|
19
|
+
chmod 0600 $HOME/.gem/credentials
|
|
20
|
+
printf -- "---\n:github: ${GEM_HOST_API_KEY}\n" > $HOME/.gem/credentials
|
|
21
|
+
gem build *.gemspec
|
|
22
|
+
gem push --KEY github --host https://rubygems.pkg.github.com/${OWNER} *.gem
|
|
23
|
+
env:
|
|
24
|
+
GEM_HOST_API_KEY: "Bearer ${{secrets.GITHUB_TOKEN}}"
|
|
25
|
+
OWNER: ${{ github.repository_owner }}
|
|
26
|
+
- name: Publish to RubyGems
|
|
27
|
+
run: |
|
|
28
|
+
mkdir -p $HOME/.gem
|
|
29
|
+
touch $HOME/.gem/credentials
|
|
30
|
+
chmod 0600 $HOME/.gem/credentials
|
|
31
|
+
printf -- "---\n:rubygems_api_key: ${GEM_HOST_API_KEY}\n" > $HOME/.gem/credentials
|
|
32
|
+
gem build *.gemspec
|
|
33
|
+
gem push *.gem
|
|
34
|
+
env:
|
|
35
|
+
GEM_HOST_API_KEY: "Bearer ${{secrets.RUBYGEMS_AUTH_TOKEN}}"
|
data/README.md
CHANGED
|
@@ -1,38 +1,41 @@
|
|
|
1
|
-
# Warding [](https://badge.fury.io/rb/warding)
|
|
2
|
-
|
|
3
|
-
> Custom Arch Linux installer designed for security assessments and pentesting.
|
|
4
|
-
|
|
5
|
-
## Installation
|
|
6
|
-
|
|
7
|
-
Install warding by using the `gem install` command.
|
|
8
|
-
|
|
9
|
-
```bash
|
|
10
|
-
gem install warding
|
|
11
|
-
```
|
|
12
|
-
|
|
13
|
-
|
|
14
|
-
|
|
15
|
-
|
|
16
|
-
|
|
17
|
-
|
|
18
|
-
|
|
19
|
-
|
|
20
|
-
|
|
21
|
-
|
|
22
|
-
|
|
23
|
-
|
|
24
|
-
|
|
25
|
-
|
|
26
|
-
|
|
27
|
-
|
|
28
|
-
|
|
29
|
-
|
|
30
|
-
|
|
31
|
-
|
|
32
|
-
|
|
33
|
-
|
|
34
|
-
|
|
35
|
-
|
|
36
|
-
|
|
37
|
-
|
|
38
|
-
|
|
1
|
+
# Warding [](https://badge.fury.io/rb/warding)
|
|
2
|
+
|
|
3
|
+
> Custom Arch Linux installer designed for security assessments and pentesting.
|
|
4
|
+
|
|
5
|
+
## Installation
|
|
6
|
+
|
|
7
|
+
Install warding by using the `gem install` command.
|
|
8
|
+
|
|
9
|
+
```bash
|
|
10
|
+
gem install warding
|
|
11
|
+
```
|
|
12
|
+
|
|
13
|
+
Or use the quick install method:
|
|
14
|
+
|
|
15
|
+
```bash
|
|
16
|
+
wget -qO- https://raw.githubusercontent.com/marlospomin/warding/master/debug/quick-install.sh | sh
|
|
17
|
+
```
|
|
18
|
+
|
|
19
|
+
## Usage
|
|
20
|
+
|
|
21
|
+
1. Download Arch Linux.
|
|
22
|
+
2. Boot the live ISO.
|
|
23
|
+
3. Install warding either from source or with the gem command.
|
|
24
|
+
4. Run the binary executable `warding` and fill in the prompts.
|
|
25
|
+
5. Enjoy.
|
|
26
|
+
|
|
27
|
+
## Debug
|
|
28
|
+
|
|
29
|
+
To install the latest version (debug) of warding follow the steps below:
|
|
30
|
+
|
|
31
|
+
```bash
|
|
32
|
+
wget -qO- https://raw.githubusercontent.com/marlospomin/warding/master/debug/debug.sh | sh
|
|
33
|
+
```
|
|
34
|
+
|
|
35
|
+
## Contributing
|
|
36
|
+
|
|
37
|
+
Bug reports and pull requests are welcome on GitHub at https://github.com/marlospomin/warding.
|
|
38
|
+
|
|
39
|
+
## License
|
|
40
|
+
|
|
41
|
+
The gem is available as open source under the terms of the [MIT License](https://opensource.org/licenses/MIT).
|
data/bin/warding
CHANGED
data/debug/debug.sh
ADDED
|
@@ -0,0 +1,11 @@
|
|
|
1
|
+
#!/bin/bash
|
|
2
|
+
|
|
3
|
+
pacman -S git ruby glibc libxcrypt --noconfirm
|
|
4
|
+
git clone https://github.com/marlospomin/warding
|
|
5
|
+
cd warding
|
|
6
|
+
pacman -R man-pages --noconfirm
|
|
7
|
+
gem install bundle rake
|
|
8
|
+
export PATH="`ruby -e 'puts Gem.user_dir'`/bin:$PATH"
|
|
9
|
+
bundle
|
|
10
|
+
rake install
|
|
11
|
+
warding
|
data/lib/warding.rb
CHANGED
|
@@ -1,257 +1,268 @@
|
|
|
1
|
-
# frozen_string_literal: true
|
|
2
|
-
|
|
3
|
-
require "warding/version"
|
|
4
|
-
require "tty-prompt"
|
|
5
|
-
|
|
6
|
-
module Warding
|
|
7
|
-
class Error < StandardError; end
|
|
8
|
-
|
|
9
|
-
class Installer
|
|
10
|
-
@@prompt = TTY::Prompt.new
|
|
11
|
-
|
|
12
|
-
def banner
|
|
13
|
-
puts <<~'EOF'
|
|
14
|
-
|
|
15
|
-
( ( (
|
|
16
|
-
)\))( ' ) ( )\ ) ( ( (
|
|
17
|
-
((_)()\ ) ( /( )( (()/( )\ ( )\))(
|
|
18
|
-
_(())\_)() )(_)) (()\ ((_)) ((_) )\ ) ((_))\
|
|
19
|
-
\ \((_)/ /((_)_ ((_) _| | (_) _(_/( (()(_)
|
|
20
|
-
\ \/\/ / / _` | | '_| / _` | | | | ' \)) / _` |
|
|
21
|
-
\_/\_/ \__,_| |_| \__,_| |_| |_||_| \__, |
|
|
22
|
-
|___/
|
|
23
|
-
|
|
24
|
-
EOF
|
|
25
|
-
end
|
|
26
|
-
|
|
27
|
-
def check
|
|
28
|
-
unless `uname -a`.include?("archiso")
|
|
29
|
-
@@prompt.error("Exiting...")
|
|
30
|
-
@@prompt.warn("Warding can only be installed from within the live ISO context!")
|
|
31
|
-
exit!
|
|
32
|
-
end
|
|
33
|
-
|
|
34
|
-
unless `[ -d /sys/firmware/efi ] && echo true`.include?("true")
|
|
35
|
-
@@prompt.error("UEFI/EFI must be enabled to install warding")
|
|
36
|
-
exit!
|
|
37
|
-
end
|
|
38
|
-
end
|
|
39
|
-
|
|
40
|
-
def gather
|
|
41
|
-
locales_list = %w[
|
|
42
|
-
keymaps_list = %w[us uk br en fr de zh ru it es]
|
|
43
|
-
|
|
44
|
-
parsed_input = @@prompt.collect do
|
|
45
|
-
key(:update_mirrors).yes?("Update mirrorlist?")
|
|
46
|
-
key(:system_language).select("Pick the desired system language:", locales_list)
|
|
47
|
-
key(:keyboard_keymap).select("Pick your keyboard layout:", keymaps_list)
|
|
48
|
-
|
|
49
|
-
unless @@prompt.yes?("Set timezone automatically?", default: true)
|
|
50
|
-
key(:update_timezone).ask("Enter timezone:", required: true)
|
|
51
|
-
end
|
|
52
|
-
|
|
53
|
-
key(:root_password).mask("Insert new root password:",
|
|
54
|
-
|
|
55
|
-
key(:system_settings) do
|
|
56
|
-
|
|
57
|
-
|
|
58
|
-
|
|
59
|
-
)
|
|
60
|
-
|
|
61
|
-
|
|
62
|
-
|
|
63
|
-
|
|
64
|
-
|
|
65
|
-
|
|
66
|
-
|
|
67
|
-
|
|
68
|
-
|
|
69
|
-
|
|
70
|
-
|
|
71
|
-
|
|
72
|
-
|
|
73
|
-
|
|
74
|
-
|
|
75
|
-
|
|
76
|
-
|
|
77
|
-
|
|
78
|
-
|
|
79
|
-
|
|
80
|
-
|
|
81
|
-
|
|
82
|
-
|
|
83
|
-
|
|
84
|
-
|
|
85
|
-
|
|
86
|
-
|
|
87
|
-
|
|
88
|
-
|
|
89
|
-
|
|
90
|
-
|
|
91
|
-
|
|
92
|
-
|
|
93
|
-
|
|
94
|
-
|
|
95
|
-
|
|
96
|
-
|
|
97
|
-
|
|
98
|
-
|
|
99
|
-
|
|
100
|
-
|
|
101
|
-
|
|
102
|
-
|
|
103
|
-
|
|
104
|
-
|
|
105
|
-
|
|
106
|
-
|
|
107
|
-
|
|
108
|
-
|
|
109
|
-
|
|
110
|
-
|
|
111
|
-
|
|
112
|
-
|
|
113
|
-
|
|
114
|
-
|
|
115
|
-
|
|
116
|
-
|
|
117
|
-
|
|
118
|
-
|
|
119
|
-
|
|
120
|
-
|
|
121
|
-
|
|
122
|
-
|
|
123
|
-
|
|
124
|
-
|
|
125
|
-
`
|
|
126
|
-
`
|
|
127
|
-
|
|
128
|
-
|
|
129
|
-
|
|
130
|
-
|
|
131
|
-
|
|
132
|
-
|
|
133
|
-
`
|
|
134
|
-
|
|
135
|
-
|
|
136
|
-
|
|
137
|
-
|
|
138
|
-
|
|
139
|
-
|
|
140
|
-
|
|
141
|
-
|
|
142
|
-
`
|
|
143
|
-
|
|
144
|
-
|
|
145
|
-
|
|
146
|
-
|
|
147
|
-
|
|
148
|
-
|
|
149
|
-
|
|
150
|
-
|
|
151
|
-
|
|
152
|
-
|
|
153
|
-
|
|
154
|
-
|
|
155
|
-
|
|
156
|
-
|
|
157
|
-
|
|
158
|
-
|
|
159
|
-
`
|
|
160
|
-
|
|
161
|
-
|
|
162
|
-
|
|
163
|
-
|
|
164
|
-
|
|
165
|
-
|
|
166
|
-
|
|
167
|
-
|
|
168
|
-
|
|
169
|
-
|
|
170
|
-
`arch-chroot /mnt
|
|
171
|
-
|
|
172
|
-
`
|
|
173
|
-
|
|
174
|
-
|
|
175
|
-
|
|
176
|
-
|
|
177
|
-
|
|
178
|
-
`
|
|
179
|
-
|
|
180
|
-
|
|
181
|
-
|
|
182
|
-
|
|
183
|
-
|
|
184
|
-
|
|
185
|
-
|
|
186
|
-
|
|
187
|
-
|
|
188
|
-
|
|
189
|
-
|
|
190
|
-
|
|
191
|
-
|
|
192
|
-
|
|
193
|
-
|
|
194
|
-
|
|
195
|
-
|
|
196
|
-
|
|
197
|
-
|
|
198
|
-
|
|
199
|
-
|
|
200
|
-
|
|
201
|
-
`arch-chroot /mnt
|
|
202
|
-
|
|
203
|
-
`arch-chroot /mnt
|
|
204
|
-
|
|
205
|
-
|
|
206
|
-
`
|
|
207
|
-
|
|
208
|
-
`
|
|
209
|
-
|
|
210
|
-
`
|
|
211
|
-
`
|
|
212
|
-
`
|
|
213
|
-
|
|
214
|
-
|
|
215
|
-
|
|
216
|
-
|
|
217
|
-
|
|
218
|
-
|
|
219
|
-
|
|
220
|
-
|
|
221
|
-
|
|
222
|
-
|
|
223
|
-
|
|
224
|
-
|
|
225
|
-
|
|
226
|
-
|
|
227
|
-
|
|
228
|
-
|
|
229
|
-
|
|
230
|
-
|
|
231
|
-
|
|
232
|
-
|
|
233
|
-
|
|
234
|
-
|
|
235
|
-
|
|
236
|
-
|
|
237
|
-
|
|
238
|
-
|
|
239
|
-
|
|
240
|
-
|
|
241
|
-
|
|
242
|
-
|
|
243
|
-
|
|
244
|
-
|
|
245
|
-
|
|
246
|
-
|
|
247
|
-
|
|
248
|
-
|
|
249
|
-
|
|
250
|
-
|
|
251
|
-
|
|
252
|
-
|
|
253
|
-
|
|
254
|
-
|
|
255
|
-
|
|
256
|
-
|
|
257
|
-
|
|
1
|
+
# frozen_string_literal: true
|
|
2
|
+
|
|
3
|
+
require "warding/version"
|
|
4
|
+
require "tty-prompt"
|
|
5
|
+
|
|
6
|
+
module Warding
|
|
7
|
+
class Error < StandardError; end
|
|
8
|
+
|
|
9
|
+
class Installer
|
|
10
|
+
@@prompt = TTY::Prompt.new
|
|
11
|
+
|
|
12
|
+
def banner
|
|
13
|
+
puts <<~'EOF'
|
|
14
|
+
|
|
15
|
+
( ( (
|
|
16
|
+
)\))( ' ) ( )\ ) ( ( (
|
|
17
|
+
((_)()\ ) ( /( )( (()/( )\ ( )\))(
|
|
18
|
+
_(())\_)() )(_)) (()\ ((_)) ((_) )\ ) ((_))\
|
|
19
|
+
\ \((_)/ /((_)_ ((_) _| | (_) _(_/( (()(_)
|
|
20
|
+
\ \/\/ / / _` | | '_| / _` | | | | ' \)) / _` |
|
|
21
|
+
\_/\_/ \__,_| |_| \__,_| |_| |_||_| \__, |
|
|
22
|
+
|___/
|
|
23
|
+
|
|
24
|
+
EOF
|
|
25
|
+
end
|
|
26
|
+
|
|
27
|
+
def check
|
|
28
|
+
unless `uname -a`.include?("archiso")
|
|
29
|
+
@@prompt.error("Exiting...")
|
|
30
|
+
@@prompt.warn("Warding can only be installed from within the live ISO context!")
|
|
31
|
+
exit!
|
|
32
|
+
end
|
|
33
|
+
|
|
34
|
+
unless `[ -d /sys/firmware/efi ] && echo true`.include?("true")
|
|
35
|
+
@@prompt.error("UEFI/EFI must be enabled to install warding.")
|
|
36
|
+
exit!
|
|
37
|
+
end
|
|
38
|
+
end
|
|
39
|
+
|
|
40
|
+
def gather
|
|
41
|
+
locales_list = %w[en_US es_ES pt_BR ru_RU fr_FR it_IT de_DE ja_JP ko_KR zh_CN]
|
|
42
|
+
keymaps_list = %w[us uk br en fr de zh ru it es]
|
|
43
|
+
|
|
44
|
+
parsed_input = @@prompt.collect do
|
|
45
|
+
key(:update_mirrors).yes?("Update mirrorlist?")
|
|
46
|
+
key(:system_language).select("Pick the desired system language:", locales_list)
|
|
47
|
+
key(:keyboard_keymap).select("Pick your keyboard layout:", keymaps_list)
|
|
48
|
+
|
|
49
|
+
unless @@prompt.yes?("Set timezone automatically?", default: true)
|
|
50
|
+
key(:update_timezone).ask("Enter timezone:", required: true)
|
|
51
|
+
end
|
|
52
|
+
|
|
53
|
+
key(:root_password).mask("Insert new root password:", default: "warding")
|
|
54
|
+
|
|
55
|
+
key(:system_settings) do
|
|
56
|
+
key(:boot_size).slider("Boot drive partition size (MiB):", min: 512, max: 4096, default: 1024, step: 128)
|
|
57
|
+
key(:swap_size).slider("Swap partition size (MiB):", min: 1024, max: 8192, default: 2048, step: 256)
|
|
58
|
+
|
|
59
|
+
if key(:encrypted).yes?("Enable encryption?", default: false)
|
|
60
|
+
key(:encryption_settings) do
|
|
61
|
+
key(:encryption_key).mask("Insert the encryption key:", required: true)
|
|
62
|
+
end
|
|
63
|
+
end
|
|
64
|
+
end
|
|
65
|
+
|
|
66
|
+
key(:desktop_environment).select("Select your desktop environment:", %w[plasma gnome i3 none])
|
|
67
|
+
end
|
|
68
|
+
|
|
69
|
+
parsed_input
|
|
70
|
+
end
|
|
71
|
+
|
|
72
|
+
def install(data, encrypted = false)
|
|
73
|
+
if @@prompt.yes?("Confirm settings and continue?")
|
|
74
|
+
|
|
75
|
+
@@prompt.say("Installing, please wait...")
|
|
76
|
+
|
|
77
|
+
def setup_mirrors
|
|
78
|
+
# update mirrorlist
|
|
79
|
+
`reflector --latest 100 --sort rate --save /etc/pacman.d/mirrorlist`
|
|
80
|
+
end
|
|
81
|
+
|
|
82
|
+
def setup_timezone(timezone = false)
|
|
83
|
+
# set clock
|
|
84
|
+
`timedatectl set-ntp true`
|
|
85
|
+
# set timezone
|
|
86
|
+
if timezone
|
|
87
|
+
`timedatectl set-timezone #{timezone}`
|
|
88
|
+
else
|
|
89
|
+
`timedatectl set-timezone "$(curl -s https://ipapi.co/timezone)"`
|
|
90
|
+
end
|
|
91
|
+
end
|
|
92
|
+
|
|
93
|
+
def setup_partitions(boot_size)
|
|
94
|
+
# create partitions
|
|
95
|
+
`parted -s -a optimal /dev/sda \
|
|
96
|
+
mklabel gpt \
|
|
97
|
+
mkpart primary fat32 0% #{boot_size}Mib \
|
|
98
|
+
set 1 esp on \
|
|
99
|
+
mkpart primary ext4 #{boot_size}Mib 100% \
|
|
100
|
+
set 2 lvm on
|
|
101
|
+
`
|
|
102
|
+
end
|
|
103
|
+
|
|
104
|
+
def setup_lvm(swap_size, key = false)
|
|
105
|
+
# setup encryption
|
|
106
|
+
if key
|
|
107
|
+
# create an encrypted volume
|
|
108
|
+
`echo "#{key}" | cryptsetup -q luksFormat --type luks2 --cipher aes-xts-plain64 --key-size 512 /dev/sda2`
|
|
109
|
+
# open the volume
|
|
110
|
+
`echo "#{key}" | cryptsetup open /dev/sda2 cryptlvm -`
|
|
111
|
+
# setup lvm
|
|
112
|
+
`pvcreate /dev/mapper/cryptlvm`
|
|
113
|
+
# create virtual group
|
|
114
|
+
`vgcreate vg0 /dev/mapper/cryptlvm`
|
|
115
|
+
else
|
|
116
|
+
# create physical volume
|
|
117
|
+
`pvcreate /dev/sda2`
|
|
118
|
+
# create virtual group
|
|
119
|
+
`vgcreate vg0 /dev/sda2`
|
|
120
|
+
end
|
|
121
|
+
# create logical volumes
|
|
122
|
+
`lvcreate -L #{swap_size}Mib vg0 -n swap`
|
|
123
|
+
`lvcreate -l 100%FREE vg0 -n root`
|
|
124
|
+
# make and mount rootfs
|
|
125
|
+
`mkfs.ext4 -q /dev/vg0/root`
|
|
126
|
+
`mount /dev/vg0/root /mnt`
|
|
127
|
+
# make and mount boot partition
|
|
128
|
+
`mkfs.fat -F32 /dev/sda1`
|
|
129
|
+
`mkdir /mnt/boot`
|
|
130
|
+
`mount /dev/sda1 /mnt/boot`
|
|
131
|
+
# setup swap
|
|
132
|
+
`mkswap /dev/vg0/swap`
|
|
133
|
+
`swapon /dev/vg0/swap`
|
|
134
|
+
end
|
|
135
|
+
|
|
136
|
+
def setup_packages
|
|
137
|
+
# update packages list
|
|
138
|
+
`pacman -Syy`
|
|
139
|
+
# install base system
|
|
140
|
+
`pacstrap /mnt base base-devel linux linux-firmware linux-headers lvm2 mkinitcpio dmidecode smbclient reflector networkmanager go cronie man-db nano vi fuse wget openbsd-netcat dhcpcd samba openssh openvpn unzip vim git zsh`
|
|
141
|
+
# generate fstab
|
|
142
|
+
`genfstab -U /mnt >> /mnt/etc/fstab`
|
|
143
|
+
end
|
|
144
|
+
|
|
145
|
+
def setup_chroot(lang, keymap, password = "warding", encrypted = false)
|
|
146
|
+
# set timezone
|
|
147
|
+
`arch-chroot /mnt ln -sf /usr/share/zoneinfo/"$(curl -s https://ipapi.co/timezone)" /etc/localtime`
|
|
148
|
+
# update clock
|
|
149
|
+
`arch-chroot /mnt hwclock --systohc`
|
|
150
|
+
# set locale
|
|
151
|
+
`echo "#{lang}.UTF-8 UTF-8" > /mnt/etc/locale.gen`
|
|
152
|
+
`arch-chroot /mnt locale-gen`
|
|
153
|
+
`echo "LANG=#{lang}.UTF-8" > /mnt/etc/locale.conf`
|
|
154
|
+
# set keymap
|
|
155
|
+
`echo "KEYMAP=#{keymap}" > /mnt/etc/vconsole.conf`
|
|
156
|
+
# update hostname
|
|
157
|
+
`echo "warding" > /mnt/etc/hostname`
|
|
158
|
+
# update hosts
|
|
159
|
+
`echo "127.0.0.1 localhost\n::1 localhost\n127.0.1.1 warding.localdomain warding" > /mnt/etc/hosts`
|
|
160
|
+
# update root password
|
|
161
|
+
`echo -e "#{password}\n#{password}" | arch-chroot /mnt passwd`
|
|
162
|
+
# update hooks
|
|
163
|
+
if encrypted
|
|
164
|
+
`sed -i "/^HOOK/s/modconf/keyboard keymap modconf/" /mnt/etc/mkinitcpio.conf`
|
|
165
|
+
`sed -i "/^HOOK/s/filesystems/encrypt lvm2 filesystems/" /mnt/etc/mkinitcpio.conf`
|
|
166
|
+
else
|
|
167
|
+
`sed -i "/^HOOK/s/filesystems/lvm2 filesystems/" /mnt/etc/mkinitcpio.conf`
|
|
168
|
+
end
|
|
169
|
+
# recompile initramfs
|
|
170
|
+
`arch-chroot /mnt mkinitcpio -P`
|
|
171
|
+
# add intel microcode
|
|
172
|
+
`arch-chroot /mnt pacman -S amd-ucode --noconfirm`
|
|
173
|
+
end
|
|
174
|
+
|
|
175
|
+
def setup_bootloader(encrypted = false)
|
|
176
|
+
# setup systemd-boot
|
|
177
|
+
`arch-chroot /mnt bootctl install`
|
|
178
|
+
`echo "title Warding Linux
|
|
179
|
+
linux /vmlinuz-linux
|
|
180
|
+
initrd /amd-ucode.img
|
|
181
|
+
initrd /initramfs-linux.img" > /mnt/boot/loader/entries/warding.conf`
|
|
182
|
+
if encrypted
|
|
183
|
+
`echo "options cryptdevice=UUID=$(blkid -s UUID -o value /dev/sda2):cryptlvm:allow-discards root=/dev/vg0/root quiet rw" >> /mnt/boot/loader/entries/warding.conf`
|
|
184
|
+
else
|
|
185
|
+
`echo "options root=/dev/vg0/root rw" >> /mnt/boot/loader/entries/warding.conf`
|
|
186
|
+
end
|
|
187
|
+
end
|
|
188
|
+
|
|
189
|
+
def setup_usability
|
|
190
|
+
# enable internet
|
|
191
|
+
`arch-chroot /mnt systemctl -q enable NetworkManager`
|
|
192
|
+
# add cron jobs
|
|
193
|
+
`echo "#!/bin/bash\nreflector --latest 100 --sort rate --save /etc/pacman.d/mirrorlist" > /mnt/etc/cron.weekly/mirrorlist; chmod +x /mnt/etc/cron.weekly/mirrorlist`
|
|
194
|
+
`echo "#!/bin/bash\npacman -Sy" > /mnt/etc/cron.weekly/pacman-sync; chmod +x /mnt/etc/cron.weekly/pacman-sync`
|
|
195
|
+
`echo "#!/bin/bash\npacman -Syu --noconfirm" > /mnt/etc/cron.monthly/system-upgrade; chmod +x /mnt/etc/cron.monthly/system-upgrade`
|
|
196
|
+
# enable cron jobs
|
|
197
|
+
`arch-chroot /mnt systemctl -q enable cronie`
|
|
198
|
+
# change default shell
|
|
199
|
+
`arch-chroot /mnt chsh -s /usr/bin/zsh`
|
|
200
|
+
# setup wordlists
|
|
201
|
+
`arch-chroot /mnt mkdir -p /usr/share/wordlists`
|
|
202
|
+
`arch-chroot /mnt curl -s https://github.com/danielmiessler/SecLists/blob/master/Discovery/Web-Content/raft-large-directories-lowercase.txt -O --output-dir /usr/share/wordlists`
|
|
203
|
+
`arch-chroot /mnt curl -s https://github.com/danielmiessler/SecLists/blob/master/Discovery/Web-Content/common.txt -O --output-dir /usr/share/wordlists`
|
|
204
|
+
`arch-chroot /mnt curl -s https://github.com/danielmiessler/SecLists/raw/master/Passwords/Leaked-Databases/rockyou.txt.tar.gz -O --output-dir /usr/share/wordlists`
|
|
205
|
+
# setup drivers
|
|
206
|
+
`arch-chroot /mnt pacman -S alsa-utils alsa-plugins alsa-lib --noc`
|
|
207
|
+
# update package list
|
|
208
|
+
`arch-chroot /mnt pacman -Syy`
|
|
209
|
+
# user creation --fix
|
|
210
|
+
`arch-chroot /mnt useradd -m -g wheel -s /bin/zsh ward`
|
|
211
|
+
`sed -i '85 s/# %wheel ALL=(ALL) NOPASSWD: ALL/%wheel ALL=(ALL) NOPASSWD: ALL/g' /mnt/etc/sudoers`
|
|
212
|
+
`arch-chroot /mnt sudo -u ward sh -c "cd /home/ward; git clone https://aur.archlinux.org/yay.git; cd yay; makepkg -si --noconfirm"`
|
|
213
|
+
`arch-chroot /mnt sudo -u ward sh -c "$(curl -fsSL https://raw.githubusercontent.com/ohmyzsh/ohmyzsh/master/tools/install.sh)" "" --unattended`
|
|
214
|
+
# check if on VM
|
|
215
|
+
if `arch-chroot /mnt dmidecode -s system-manufacturer`.include?("VMware, Inc.")
|
|
216
|
+
# install and enable VMware utils
|
|
217
|
+
`arch-chroot /mnt pacman -S open-vm-tools --noconfirm`
|
|
218
|
+
`arch-chroot /mnt systemctl -q enable vmtoolsd`
|
|
219
|
+
end
|
|
220
|
+
end
|
|
221
|
+
|
|
222
|
+
def setup_visuals(theme)
|
|
223
|
+
case theme
|
|
224
|
+
when "plasma"
|
|
225
|
+
# install packages
|
|
226
|
+
`arch-chroot /mnt pacman -S xorg-server plasma-meta gtkmm konsole sddm kvantum-qt5 --noc -q`
|
|
227
|
+
# create conf dir
|
|
228
|
+
`mkdir -p /mnt/etc/sddm.conf.d`
|
|
229
|
+
# fix theme
|
|
230
|
+
`echo "[Theme]\nCurrent=breeze" > /mnt/etc/sddm.conf.d/theme.conf`
|
|
231
|
+
# enable autologin
|
|
232
|
+
`echo "[Autologin]\nUser=ward\nSession=plasma" > /mnt/etc/sddm.conf.d/autologin.conf`
|
|
233
|
+
# enable sddm
|
|
234
|
+
`arch-chroot /mnt systemctl -q enable sddm`
|
|
235
|
+
when "gnome"
|
|
236
|
+
# install packages
|
|
237
|
+
`arch-chroot /mnt pacman -S xf86-video-intel gtkmm gnome --noc`
|
|
238
|
+
# enable gdm
|
|
239
|
+
`arch-chroot /mnt systemctl -q enable gdm`
|
|
240
|
+
when "i3"
|
|
241
|
+
# install packages
|
|
242
|
+
`arch-chroot /mnt pacman -S lightdm lightdm-gtk-greeter xorg-server xorg-apps xorg-xinit i3-wm --noc`
|
|
243
|
+
# enable lightdm
|
|
244
|
+
`arch-chroot /mnt systemctl -q enable lightdm`
|
|
245
|
+
else
|
|
246
|
+
nil
|
|
247
|
+
end
|
|
248
|
+
end
|
|
249
|
+
|
|
250
|
+
def finish
|
|
251
|
+
`umount -R /mnt`
|
|
252
|
+
`reboot`
|
|
253
|
+
end
|
|
254
|
+
|
|
255
|
+
setup_mirrors if data[:update_mirrors]
|
|
256
|
+
data[:update_timezone] ? setup_timezone(data[:update_timezone]) : setup_timezone
|
|
257
|
+
setup_partitions(data[:system_settings][:boot_size])
|
|
258
|
+
data[:system_settings][:encrypted] ? setup_lvm(data[:system_settings][:swap_size], data[:system_settings][:encryption_settings][:encryption_key]) : setup_lvm(data[:system_settings][:swap_size])
|
|
259
|
+
setup_packages
|
|
260
|
+
data[:system_settings][:encrypted] ? setup_chroot(data[:system_language], data[:keyboard_keymap], data[:root_password], true) : setup_chroot(data[:system_language], data[:keyboard_keymap], data[:root_password])
|
|
261
|
+
data[:system_settings][:encrypted] ? setup_bootloader(true) : setup_bootloader
|
|
262
|
+
setup_usability
|
|
263
|
+
setup_visuals(data[:desktop_environment])
|
|
264
|
+
finish
|
|
265
|
+
end
|
|
266
|
+
end
|
|
267
|
+
end
|
|
268
|
+
end
|
data/lib/warding/version.rb
CHANGED
metadata
CHANGED
|
@@ -1,14 +1,14 @@
|
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
|
2
2
|
name: warding
|
|
3
3
|
version: !ruby/object:Gem::Version
|
|
4
|
-
version: 0.2
|
|
4
|
+
version: 1.0.2
|
|
5
5
|
platform: ruby
|
|
6
6
|
authors:
|
|
7
7
|
- Marlos Pomin
|
|
8
8
|
autorequire:
|
|
9
9
|
bindir: bin
|
|
10
10
|
cert_chain: []
|
|
11
|
-
date:
|
|
11
|
+
date: 2021-08-01 00:00:00.000000000 Z
|
|
12
12
|
dependencies:
|
|
13
13
|
- !ruby/object:Gem::Dependency
|
|
14
14
|
name: tty-prompt
|
|
@@ -32,6 +32,7 @@ executables:
|
|
|
32
32
|
extensions: []
|
|
33
33
|
extra_rdoc_files: []
|
|
34
34
|
files:
|
|
35
|
+
- ".github/workflows/default.yml"
|
|
35
36
|
- ".gitignore"
|
|
36
37
|
- ".rubocop.yml"
|
|
37
38
|
- Gemfile
|
|
@@ -40,6 +41,8 @@ files:
|
|
|
40
41
|
- README.md
|
|
41
42
|
- Rakefile
|
|
42
43
|
- bin/warding
|
|
44
|
+
- debug/debug.sh
|
|
45
|
+
- debug/quick-install.sh
|
|
43
46
|
- lib/warding.rb
|
|
44
47
|
- lib/warding/version.rb
|
|
45
48
|
- warding.gemspec
|
|
@@ -65,7 +68,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
|
|
|
65
68
|
- !ruby/object:Gem::Version
|
|
66
69
|
version: '0'
|
|
67
70
|
requirements: []
|
|
68
|
-
rubygems_version: 3.
|
|
71
|
+
rubygems_version: 3.1.2
|
|
69
72
|
signing_key:
|
|
70
73
|
specification_version: 4
|
|
71
74
|
summary: Warding Linux installer.
|