penguins-eggs 25.10.19 → 25.10.23

package/dist/classes/ovary.d/luks-home-support.d.ts

@@ -1,12 +0,0 @@
-/**
- * ./src/classes/ovary.d/luks-home-support.ts
- * penguins-eggs v.25.10.x / ecmascript 2020
- * author: Piero Proietti
- * email: piero.proietti@gmail.com
- * license: MIT
- */
-import Ovary from '../ovary.js';
-/**
- * Installa i file necessari per sbloccare home.img LUKS durante il boot
- */
-export declare function installHomecryptSupport(this: Ovary, squashfsRoot: string, homeImgPath: string): void;

package/dist/classes/ovary.d/luks-home-support.js

@@ -1,75 +0,0 @@
-/**
- * ./src/classes/ovary.d/luks-home-support.ts
- * penguins-eggs v.25.10.x / ecmascript 2020
- * author: Piero Proietti
- * email: piero.proietti@gmail.com
- * license: MIT
- */
-// packages
-import fs from 'fs';
-import path from 'path';
-import { fileURLToPath } from 'url';
-import { dirname } from 'path';
-import Utils from '../utils.js';
-const __filename = fileURLToPath(import.meta.url);
-const __dirname = dirname(__filename);
-/**
- * Installa i file necessari per sbloccare home.img LUKS durante il boot
- */
-export function installHomecryptSupport(squashfsRoot, homeImgPath) {
-    Utils.warning('installing encrypted home support...');
-    // console.log("squashfsRoot:", squashfsRoot)
-    // console.log("homeImgPath:", homeImgPath)
-    // Leggi il template bash
-    const templatePath = path.join(__dirname, '../../../scripts/mount-encrypted-home.sh');
-    let bashScript = fs.readFileSync(templatePath, 'utf8');
-    // Sostituisci il placeholder con il path reale
-    bashScript = bashScript.replace('__HOME_IMG_PATH__', homeImgPath);
-    // Systemd service
-    const systemdService = `[Unit]
-Description=Unlock and mount encrypted home.img
-DefaultDependencies=no
-After=systemd-udev-settle.service local-fs-pre.target
-Before=local-fs.target display-manager.service
-ConditionPathExists=${homeImgPath}
-
-[Service]
-Type=oneshot
-RemainAfterExit=yes
-StandardInput=tty
-StandardOutput=journal+console
-StandardError=journal+console
-TTYPath=/dev/console
-TTYReset=yes
-TTYVHangup=yes
-ExecStart=/usr/local/bin/mount-encrypted-home.sh
-ExecStop=/bin/bash -c 'umount /home && cryptsetup close live-home'
-
-[Install]
-WantedBy=local-fs.target
-`;
-    // Percorsi di destinazione
-    const scriptPath = path.join(squashfsRoot, 'usr/local/bin/mount-encrypted-home.sh');
-    const servicePath = path.join(squashfsRoot, 'etc/systemd/system/mount-encrypted-home.service');
-    const symlinkDir = path.join(squashfsRoot, 'etc/systemd/system/local-fs.target.wants');
-    const symlinkPath = path.join(symlinkDir, 'mount-encrypted-home.service');
-    // Crea le directory necessarie
-    fs.mkdirSync(path.dirname(scriptPath), { recursive: true });
-    fs.mkdirSync(path.dirname(servicePath), { recursive: true });
-    fs.mkdirSync(symlinkDir, { recursive: true });
-    // Scrivi lo script
-    fs.writeFileSync(scriptPath, bashScript);
-    fs.chmodSync(scriptPath, 0o755);
-    // console.log(`✓ Created: ${scriptPath}`)
-    // Scrivi il service
-    fs.writeFileSync(servicePath, systemdService);
-    // console.log(`✓ Created: ${servicePath}`)
-    // Crea il symlink per abilitare il service
-    if (fs.existsSync(symlinkPath)) {
-        fs.unlinkSync(symlinkPath);
-    }
-    fs.symlinkSync('../mount-encrypted-home.service', symlinkPath);
-    // console.log(`✓ Enabled: mount-encrypted-home.service`)
-    // console.log('Encrypted home support installed successfully')
-    // console.log('Logs will be available at: /var/log/mount-encrypted-home.log')
-}

package/dist/classes/ovary.d/luks-home.d.ts

@@ -1,15 +0,0 @@
-/**
- * ./src/classes/ovary.d/luks-home.ts
- * penguins-eggs v.25.10.x / ecmascript 2020
- * author: Piero Proietti
- * email: piero.proietti@gmail.com
- * license: MIT
- */
-import Ovary from '../ovary.js';
-/**
- * luksHome()
- *
- * create a container LUKS with the entire
- * filesystem.squashfs
- */
-export declare function luksHome(this: Ovary, clone?: boolean, homecrypt?: boolean): Promise<void>;

package/dist/classes/ovary.d/luks-home.js

@@ -1,140 +0,0 @@
-/**
- * ./src/classes/ovary.d/luks-home.ts
- * penguins-eggs v.25.10.x / ecmascript 2020
- * author: Piero Proietti
- * email: piero.proietti@gmail.com
- * license: MIT
- */
-// packages
-import fs from 'fs';
-import { spawn } from 'node:child_process';
-import Utils from '../utils.js';
-import { exec } from '../../lib/utils.js';
-/**
- * luksHome()
- *
- * create a container LUKS with the entire
- * filesystem.squashfs
- */
-export async function luksHome(clone = false, homecrypt = false) {
-    try {
-        /**
-         * this.luksName = 'home.img';
-         * this.luksFile = `/tmp/${luksName}`
-         * this.luksDevice = `/dev/mapper/${luksName}`
-         * this.luksMappedName = this.luksName
-         * this.luksMountpoint = `/tmp/mnt/${luksName}`
-         * this.luksPassword = 'evolution'
-         */
-        console.log();
-        console.log('====================================');
-        console.log(` Creating ${this.luksName}`);
-        console.log('====================================');
-        // Utils.warning('1. Calculation of space requirements...')
-        let sizeString = (await exec('du -sb --exclude=/home/eggs /home', { capture: true })).data.trim().split(/\s+/)[0];
-        let size = Number.parseInt(sizeString, 10);
-        // const fsOverhead = Math.max(size * 0.1, 100 * 1024 * 1024)
-        // const luksSize = size + fsOverhead + (size * 0.2) // +20% di sicurezza
-        const luksSize = Math.ceil(size * 2);
-        Utils.warning(`homes size: ${bytesToGB(size)}`);
-        Utils.warning(`partition LUKS ${this.luksFile} size: ${bytesToGB(luksSize)}`);
-        Utils.warning(`creating partition LUKS: ${this.luksFile}`);
-        await executeCommand('truncate', ['--size', `${luksSize}`, this.luksFile]);
-        Utils.warning(`formatting ${this.luksFile} as a LUKS volume...`);
-        await executeCommand('cryptsetup', ['--batch-mode', 'luksFormat', this.luksFile], `${this.luksPassword}\n`);
-        this.luksUuid = (await exec(`cryptsetup luksUUID ${this.luksFile}`, { capture: true, echo: false })).data.trim();
-        Utils.warning(`LUKS uuid: ${this.luksUuid}`);
-        Utils.warning(`opening the LUKS volume. It will be mapped to ${this.luksDevice}`);
-        await executeCommand('cryptsetup', ['luksOpen', this.luksFile, this.luksMappedName], `${this.luksPassword}\n`);
-        Utils.warning(`formatting c ext4 `);
-        await exec(`mkfs.ext4 -L live-home ${this.luksDevice}`, this.echo);
-        Utils.warning(`mounting ${this.luksDevice} on ${this.luksMountpoint}`);
-        if (fs.existsSync(this.luksMountpoint)) {
-            if (!Utils.isMountpoint(this.luksMountpoint)) {
-                await exec(`rm -rf ${this.luksMountpoint}`, this.echo);
-            }
-            else {
-                throw new Error(`${this.luksMountpoint} is already mounted, process will abort!`);
-            }
-        }
-        await exec(`mkdir -p ${this.luksMountpoint}`, this.echo);
-        await exec(`mount /dev/mapper/${this.luksName} ${this.luksMountpoint}`, this.echo);
-        Utils.warning(`copying /home on  ${this.luksMountpoint}`);
-        await exec(`rsync -ah --exclude='eggs' /home/ ${this.luksMountpoint}`, this.echo);
-        Utils.warning(`saving user accounts info...`);
-        // Crea directory per backup system files
-        await exec(`mkdir -p ${this.luksMountpoint}/.system-backup`, this.echo);
-        // Filtra solo utenti con UID >= 1000
-        await exec(`awk -F: '$3 >= 1000 {print}' /etc/passwd > ${this.luksMountpoint}/.system-backup/passwd`, this.echo);
-        await exec(`awk -F: '$3 >= 1000 {print}' /etc/shadow > ${this.luksMountpoint}/.system-backup/shadow`, this.echo);
-        // Per i gruppi: salva TUTTI (non filtrare per GID)
-        // Gli utenti possono appartenere a gruppi di sistema (sudo, audio, video, etc.)
-        await exec(`cp /etc/group ${this.luksMountpoint}/.system-backup/group`, this.echo);
-        await exec(`cp /etc/gshadow ${this.luksMountpoint}/.system-backup/gshadow`, this.echo);
-        Utils.warning(`unmount ${this.luksDevice}`);
-        await exec(`umount ${this.luksMountpoint}`, this.echo);
-        Utils.warning(`closing LUKS volume ${this.luksMappedName}.`);
-        await executeCommand('cryptsetup', ['close', this.luksMappedName]);
-        Utils.warning(`moving ${this.luksName}  to (ISO)/live/.`);
-        await exec(`mv ${this.luksFile} ${this.settings.iso_work}/live`, this.echo);
-        Utils.warning('encryption process successfully completed!');
-        /**
-         * YOU MUST! unlink the key on production
-         */
-        // fs.unlinkSync(`${this.settings.iso_work}/live/home.key`)
-    }
-    catch (error) {
-        if (error instanceof Error) {
-            Utils.error(`ERROR: ${error.message}`);
-        }
-        else {
-            Utils.error(`An unknown error has occurred.`);
-        }
-        Utils.warning('Cleaning performed following the error...');
-        if (fs.existsSync(this.luksMountpoint)) {
-            await exec(`umount -lf ${this.luksMountpoint}`).catch(() => { });
-        }
-        if (fs.existsSync(this.luksDevice)) {
-            await executeCommand('cryptsetup', ['luksClose', this.luksName]).catch(() => { });
-        }
-        await Utils.pressKeyToExit();
-        process.exit(1);
-    }
-}
-/**
- * Funzione helper per eseguire comandi esterni in modo asincrono,
- * gestendo lo standard input per passare le password.
- * Restituisce una Promise che si risolve al successo o si rigetta in caso di errore.
- */
-function executeCommand(command, args, stdinData) {
-    return new Promise((resolve, reject) => {
-        // Se passiamo dati a stdin, dobbiamo usare 'pipe'. Altrimenti, 'inherit'.
-        const stdioConfig = stdinData ? ['pipe', 'inherit', 'inherit'] : 'inherit';
-        const process = spawn(command, args, { stdio: stdioConfig });
-        // Se fornito, scriviamo i dati (es. la password) nello stdin del processo.
-        if (stdinData && process.stdin) {
-            process.stdin.write(stdinData);
-            process.stdin.end();
-        }
-        process.on('error', (err) => {
-            reject(new Error(`Error starting command "${command}": ${err.message}`));
-        });
-        process.on('close', (code) => {
-            if (code === 0) {
-                resolve(); // Success
-            }
-            else {
-                reject(new Error(`Command "${command} ${args.join(' ')}" ended with error code ${code}`));
-            }
-        });
-    });
-}
-/**
- * Converte bytes in gigabytes per la visualizzazione.
- */
-function bytesToGB(bytes) {
-    if (bytes === 0)
-        return '0.00 GB';
-    const gigabytes = bytes / (1024 * 1024 * 1024);
-    return gigabytes.toFixed(2) + ' GB';
-}

package/dist/classes/ovary.d/luks-root-bootstrap-builder.d.ts

@@ -1,11 +0,0 @@
-/**
- * luks-root-bootstrap-builder.ts
- *
- * Crea un filesystem.squashfs bootstrap completo con Debian
- * per sbloccare il sistema principale cifrato
- */
-import Ovary from '../ovary.js';
-/**
- * Crea il filesystem bootstrap completo
- */
-export declare function createBootstrapFilesystem(this: Ovary, outputSquashfs: string): Promise<void>;

package/dist/classes/ovary.d/luks-root-bootstrap-builder.js

@@ -1,45 +0,0 @@
-/**
- * luks-root-bootstrap-builder.ts
- *
- * Crea un filesystem.squashfs bootstrap completo con Debian
- * per sbloccare il sistema principale cifrato
- */
-import fs from 'fs';
-import path from 'path';
-import Utils from '../utils.js';
-import { exec } from '../../lib/utils.js';
-const __dirname = path.dirname(new URL(import.meta.url).pathname);
-/**
- * Crea il filesystem bootstrap completo
- */
-export async function createBootstrapFilesystem(outputSquashfs) {
-    Utils.warning('Creating full Debian bootstrap filesystem...');
-    Utils.warning('This will take several minutes...');
-    const scriptsDir = path.join(__dirname, '../../../scripts');
-    const createScript = path.join(scriptsDir, 'luks-root-bootstrap-create.sh');
-    const unlockScript = path.join(scriptsDir, 'luks-root-unlock.sh');
-    // Verifica che gli script esistano
-    if (!fs.existsSync(createScript)) {
-        throw new Error(`Build script not found: ${createScript}`);
-    }
-    if (!fs.existsSync(unlockScript)) {
-        throw new Error(`Unlock script not found: ${unlockScript}`);
-    }
-    try {
-        // Esegui lo script di creazione bash
-        Utils.warning('Executing bootstrap creation script...');
-        await exec(`bash ${createScript} ${outputSquashfs} ${unlockScript}`, { echo: true });
-        // Verifica che il file sia stato creato
-        if (!fs.existsSync(outputSquashfs)) {
-            throw new Error('Bootstrap filesystem was not created');
-        }
-        const stats = fs.statSync(outputSquashfs);
-        const sizeMB = (stats.size / 1024 / 1024).toFixed(2);
-        Utils.success(`✓ Bootstrap filesystem created: ${sizeMB} MB`);
-        Utils.success('  Full Debian system with systemd and encrypted root unlock');
-    }
-    catch (error) {
-        Utils.error(`Failed to create bootstrap filesystem: ${error}`);
-        throw error;
-    }
-}

package/dist/classes/ovary.d/luks-root.d.ts

@@ -1,15 +0,0 @@
-/**
- * ./src/classes/ovary.d/encrypt-live-fs.ts
- * penguins-eggs v.25.10.x / ecmascript 2020
- * author: Piero Proietti
- * email: piero.proietti@gmail.com
- * license: MIT
- */
-import Ovary from '../ovary.js';
-/**
- * luksRoot()
- *
- * create a container LUKS with the entire
- * filesystem.squashfs
- */
-export declare function luksRoot(this: Ovary): Promise<void>;

package/dist/classes/ovary.d/luks-root.js

@@ -1,126 +0,0 @@
-/**
- * ./src/classes/ovary.d/encrypt-live-fs.ts
- * penguins-eggs v.25.10.x / ecmascript 2020
- * author: Piero Proietti
- * email: piero.proietti@gmail.com
- * license: MIT
- */
-// packages
-import fs from 'fs';
-import { spawn } from 'node:child_process';
-import Utils from '../utils.js';
-import { exec } from '../../lib/utils.js';
-/**
- * luksRoot()
- *
- * create a container LUKS with the entire
- * filesystem.squashfs
- */
-export async function luksRoot() {
-    // filesystem.squashfs.real
-    const live_fs = `${this.settings.iso_work}live/filesystem.squashfs.real`;
-    try {
-        /**
-         * this.luksName = 'luks.img';
-         * this.luksFile = `/tmp/${luksName}`
-         * this.luksDevice = `/dev/mapper/${luksName}`
-         * this.luksMappedName = this.luksName
-         * this.luksMountpoint = `/tmp/mnt/${luksName}`
-         * this.luksPassword = 'evolution'
-         */
-        console.log();
-        console.log('====================================');
-        console.log(` Creating ${this.luksName}`);
-        console.log('====================================');
-        // Utils.warning('1. Calculation of space requirements...')
-        const sizeString = (await exec(`unsquashfs -s ${live_fs} | grep "Filesystem size" | sed -e 's/.*size //' -e 's/ .*//'`, { capture: true, echo: false })).data;
-        let size = Number.parseInt(sizeString); // Dimensione in Byte
-        // Add overhead * 1.20
-        const luksSize = Math.ceil(size * 1.20);
-        Utils.warning(`filesystem.squashfs size: ${bytesToGB(size)}`);
-        Utils.warning(`partition LUKS ${this.luksFile} size: ${bytesToGB(luksSize)}`);
-        Utils.warning(`creating partition LUKS: ${this.luksFile}`);
-        await executeCommand('truncate', ['--size', `${luksSize}`, this.luksFile]);
-        Utils.warning(`formatting ${this.luksFile} as a LUKS volume...`);
-        await executeCommand('cryptsetup', ['--batch-mode', 'luksFormat', this.luksFile], `${this.luksPassword}\n`);
-        this.luksUuid = (await exec(`cryptsetup luksUUID ${this.luksFile}`, { capture: true, echo: false })).data.trim();
-        Utils.warning(`LUKS uuid: ${this.luksUuid}`);
-        Utils.warning(`opening the LUKS volume. It will be mapped to ${this.luksDevice}`);
-        await executeCommand('cryptsetup', ['luksOpen', this.luksFile, this.luksMappedName], `${this.luksPassword}\n`);
-        Utils.warning(`formatting ext4`);
-        await exec(`mkfs.ext4 -L live-root ${this.luksDevice}`, this.echo);
-        Utils.warning(`mounting ${this.luksDevice} on ${this.luksMountpoint}`);
-        if (fs.existsSync(this.luksMountpoint)) {
-            if (!Utils.isMountpoint(this.luksMountpoint)) {
-                await exec(`rm -rf ${this.luksMountpoint}`, this.echo);
-            }
-            else {
-                throw new Error(`${this.luksMountpoint} is already mounted, process will abort!`);
-            }
-        }
-        await exec(`mkdir -p ${this.luksMountpoint}`, this.echo);
-        await exec(`mount /dev/mapper/${this.luksName} ${this.luksMountpoint}`, this.echo);
-        Utils.warning(`moving ${live_fs} ${this.luksMountpoint}/filesystem.squashfs`);
-        await exec(`mv  ${live_fs} ${this.luksMountpoint}/filesystem.squashfs`, this.echo);
-        Utils.warning(`unmount ${this.luksMountpoint} `);
-        await exec(`umount ${this.luksMountpoint}`, this.echo);
-        Utils.warning(`closing LUKS volume ${this.luksFile}.`);
-        await executeCommand('cryptsetup', ['close', this.luksMappedName]);
-        Utils.warning(`moving ${this.luksMappedName} on (ISO)/live.`);
-        await exec(`mv ${this.luksFile} ${this.settings.iso_work}/live`, this.echo);
-    }
-    catch (error) {
-        if (error instanceof Error) {
-            Utils.error(`ERROR: ${error.message}`);
-        }
-        else {
-            Utils.error(`An unknown error has occurred.`);
-        }
-        Utils.warning('Cleaning performed following the error...');
-        if (fs.existsSync(this.luksMountpoint)) {
-            await exec(`umount -lf ${this.luksMountpoint}`).catch(() => { });
-        }
-        if (fs.existsSync(this.luksDevice)) {
-            await executeCommand('cryptsetup', ['luksClose', this.luksName]).catch(() => { });
-        }
-        await Utils.pressKeyToExit();
-        process.exit(1);
-    }
-}
-/**
- * Funzione helper per eseguire comandi esterni in modo asincrono,
- * gestendo lo standard input per passare le password.
- * Restituisce una Promise che si risolve al successo o si rigetta in caso di errore.
- */
-function executeCommand(command, args, stdinData) {
-    return new Promise((resolve, reject) => {
-        // Se passiamo dati a stdin, dobbiamo usare 'pipe'. Altrimenti, 'inherit'.
-        const stdioConfig = stdinData ? ['pipe', 'inherit', 'inherit'] : 'inherit';
-        const process = spawn(command, args, { stdio: stdioConfig });
-        // Se fornito, scriviamo i dati (es. la password) nello stdin del processo.
-        if (stdinData && process.stdin) {
-            process.stdin.write(stdinData);
-            process.stdin.end();
-        }
-        process.on('error', (err) => {
-            reject(new Error(`Error starting command "${command}": ${err.message}`));
-        });
-        process.on('close', (code) => {
-            if (code === 0) {
-                resolve(); // Success
-            }
-            else {
-                reject(new Error(`Command "${command} ${args.join(' ')}" ended with error code ${code}`));
-            }
-        });
-    });
-}
-/**
- * Converte bytes in gigabytes per la visualizzazione.
- */
-function bytesToGB(bytes) {
-    if (bytes === 0)
-        return '0.00 GB';
-    const gigabytes = bytes / (1024 * 1024 * 1024);
-    return gigabytes.toFixed(2) + ' GB';
-}

package/dist/classes/ovary.d/make-dot-disk.d.ts

@@ -1,12 +0,0 @@
-/**
- * ./src/classes/ovary.d/produce.ts
- * penguins-eggs v.25.7.x / ecmascript 2020
- * author: Piero Proietti
- * email: piero.proietti@gmail.com
- * license: MIT
- */
-import Ovary from './../ovary.js';
-/**
-   * makeDotDisk
-   */
-export declare function makeDotDisk(this: Ovary, info?: string, mksquashfs?: string, mkisofs?: string): void;

package/dist/classes/ovary.d/make-dot-disk.js

@@ -1,62 +0,0 @@
-/**
- * ./src/classes/ovary.d/produce.ts
- * penguins-eggs v.25.7.x / ecmascript 2020
- * author: Piero Proietti
- * email: piero.proietti@gmail.com
- * license: MIT
- */
-// packages
-import fs from 'node:fs';
-import shx from 'shelljs';
-import path from 'path';
-// interfaces
-// libraries
-// classes
-import Utils from './../utils.js';
-// _dirname
-const __dirname = path.dirname(new URL(import.meta.url).pathname);
-/**
-   * makeDotDisk
-   */
-export function makeDotDisk(info = '', mksquashfs = '', mkisofs = '') {
-    const dotDisk = this.settings.iso_work + '.disk';
-    if (fs.existsSync(dotDisk)) {
-        shx.rm('-rf', dotDisk);
-    }
-    shx.mkdir('-p', dotDisk);
-    /**
-     * write volid .disk/info
-     * Required
-     */
-    let volidContent = this.settings.isoFilename;
-    fs.writeFileSync(path.join(dotDisk, 'info'), volidContent, 'utf-8');
-    /**
-     * A readme now replace the old .disk/info
-     */
-    let readme = ``;
-    readme += `# penguins_eggs\n`;
-    readme += `\n`;
-    readme += `Volinfo: ${this.volid}\n`;
-    readme += `Image created at: ${Utils.formatDate(new Date())} using penguins_eggs v. ${Utils.getPackageVersion()})\n`;
-    readme += `repo: [penguins-eggs](https://github.com/penguins-eggs)\n`;
-    readme += `blog: [penguins-eggs.net](https://penguins-eggs.net)\n`;
-    readme += `author: [Piero Proietti](mailto://piero.proietti@gmail.com)\n`;
-    fs.writeFileSync(path.join(dotDisk, 'README.md'), readme, 'utf-8');
-    /**
-     * write mksquashfs as .disk/mksquashfs
-     */
-    fs.writeFileSync(path.join(dotDisk, 'mksquashfs'), mksquashfs, 'utf-8');
-    /**
-     * write mkisofs as .disk/mkisofs
-     */
-    fs.writeFileSync(path.join(dotDisk, 'mkisofs'), mkisofs, 'utf-8');
-    /**
-     * touch uuid as file name on .disk/id
-     *
-     * This is a DEBIAN standard
-     */
-    if (this.uuid && this.uuid.trim() !== '') {
-        shx.mkdir(path.join(dotDisk, 'id'));
-        shx.touch(path.join(dotDisk, 'id', this.uuid));
-    }
-}

package/dist/classes/ovary.d/make-efi.d.ts

@@ -1,14 +0,0 @@
-/**
- * ./src/classes/ovary.d/make-efi.ts
- * penguins-eggs v.25.7.x / ecmascript 2020
- * author: Piero Proietti
- * email: piero.proietti@gmail.com
- * license: MIT
- */
-import Ovary from '../ovary.js';
-/**
- *
- * @param this
- * @param theme
- */
-export declare function makeEfi(this: Ovary, theme?: string): Promise<void>;