karaolidis/nix
1
1
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Review shell scripts

Browse Source 
Signed-off-by: Nikolaos Karaolidis <nick@karaolidis.com>
This commit is contained in:
Nick Karaolidis
2025-01-22 14:07:22 +00:00
parent 8f94687b2b
commit bcbda92c46
27 changed files with 273 additions and 259 deletions
Download Patch File Download Diff File Expand all files Collapse all files

40
hosts/common/configs/system/backup/backup.sh
View File

@@ -1,4 +1,4 @@
if [[ "${EUID}" -ne 0 ]]; then
if [[ "$EUID" -ne 0 ]]; then
echo "Please run the script as root."
exit 1
fi
@@ -10,11 +10,11 @@ usage() {
cleanup() {
if [ -d "/persist.bak" ]; then btrfs -q subvolume delete "/persist.bak"; fi
if [ -n "${backup_location}" ]; then rm -f "${backup_location}.tmp"; fi
if [ -n "$backup_location" ]; then rm -f "$backup_location.tmp"; fi
if [ -n "${mount_location}" ]; then
if mount | grep -q "${mount_location}"; then umount "${mount_location}"; fi
if [ -d "${mount_location}" ]; then rmdir "${mount_location}"; fi
if [ -n "$mount_location" ]; then
if mount | grep -q "$mount_location"; then umount "$mount_location"; fi
if [ -d "$mount_location" ]; then rmdir "$mount_location"; fi
fi
}
@@ -25,40 +25,40 @@ mount_location=""
trap cleanup EXIT
while getopts "m:b:" opt; do
case "${opt}" in
m) partition="${OPTARG}" ;;
b) backup_location="${OPTARG}" ;;
case "$opt" in
m) partition="$OPTARG" ;;
b) backup_location="$OPTARG" ;;
*) usage ;;
esac
done
if [ -n "${partition}" ]; then
if [ -n "$partition" ]; then
mount_location=$(mktemp -d /mnt/backup.XXXXXX)
echo "Mounting ${partition} at ${mount_location}..."
mount "${partition}" "${mount_location}"
echo "Mounting $partition at $mount_location..."
mount "$partition" "$mount_location"
fi
if [ -z "${mount_location}" ]; then
if [[ "${backup_location}" != /* ]]; then
backup_location="$(realpath "${backup_location}")"
if [ -z "$mount_location" ]; then
if [[ "$backup_location" != /* ]]; then
backup_location="$(realpath "$backup_location")"
fi
else
if [[ "${backup_location}" = /* ]]; then
if [[ "$backup_location" = /* ]]; then
echo "Error: When a partition is mounted, backup_location must be relative."
exit 1
fi
backup_location="$(realpath "${mount_location}/${backup_location}")"
backup_location="$(realpath "$mount_location/$backup_location")"
fi
backup_location="${backup_location}/$(hostname)-$(date +%Y-%m-%d-%H-%M-%S).btrfs.gz"
backup_location="$backup_location/$(hostname)-$(date +%Y-%m-%d-%H-%M-%S).btrfs.gz"
echo "Creating /persist snapshot..."
btrfs -q subvolume snapshot -r "/persist" "/persist.bak"
echo "Creating backup at ${backup_location}..."
btrfs -q send "/persist.bak" | gzip > "${backup_location}.tmp"
echo "Creating backup at $backup_location..."
btrfs -q send "/persist.bak" | gzip > "$backup_location.tmp"
mv "${backup_location}.tmp" "${backup_location}"
mv "$backup_location.tmp" "$backup_location"
echo "Backup completed successfully!"

18
hosts/common/configs/system/impermanence/scripts/start.sh
View File

@@ -1,19 +1,19 @@
echo "Starting impermanence mount with source: ${source}, target: ${target}, path: ${path}."
echo "Starting impermanence mount with source: $source, target: $target, path: $path."
source_current="${source}"
target_current="${target}"
source_current="$source"
target_current="$target"
IFS='/' read -ra path_parts <<< "${path}"
IFS='/' read -ra path_parts <<< "$path"
unset "path_parts[-1]"
for part in "${path_parts[@]}"; do
source_current="${source_current}/${part}"
target_current="${target_current}/${part}"
source_current="$source_current/$part"
target_current="$target_current/$part"
if [[ ! -d "${source_current}" ]]; then
if [[ ! -d "$source_current" ]]; then
break
fi
read -r mode owner group <<< "$(stat -c '%a %u %g' "${source_current}")"
install -d -m "${mode}" -o "${owner}" -g "${group}" "${target_current}"
read -r mode owner group <<< "$(stat -c '%a %u %g' "$source_current")"
install -d -m "$mode" -o "$owner" -g "$group" "$target_current"
done

34
hosts/common/configs/system/impermanence/scripts/stop.sh
View File

@@ -1,38 +1,38 @@
echo "Stopping impermanence mount with source: ${source}, target: ${target}, path: ${path}."
echo "Stopping impermanence mount with source: $source, target: $target, path: $path."
source_current="${source}"
target_current="${target}"
source_current="$source"
target_current="$target"
IFS='/' read -ra path_parts <<< "${path}"
IFS='/' read -ra path_parts <<< "$path"
unset "path_parts[-1]"
for part in "${path_parts[@]}"; do
source_current="${source_current}/${part}"
target_current="${target_current}/${part}"
source_current="$source_current/$part"
target_current="$target_current/$part"
if [[ ! -d "${target_current}" ]]; then
if [[ ! -d "$target_current" ]]; then
break
fi
if [[ -d "${source_current}" ]]; then
if [[ -d "$source_current" ]]; then
continue
fi
read -r mode owner group <<< "$(stat -c '%a %u %g' "${target_current}")"
install -d -m "${mode}" -o "${owner}" -g "${group}" "${source_current}"
read -r mode owner group <<< "$(stat -c '%a %u %g' "$target_current")"
install -d -m "$mode" -o "$owner" -g "$group" "$source_current"
done
source=$(realpath -m "${source}/${path}")
target=$(realpath -m "${target}/${path}")
source=$(realpath -m "$source/$path")
target=$(realpath -m "$target/$path")
if [[ ! -e "${target}" ]] || { [[ -d "${target}" ]] && [[ -z "$(ls -A "${target}")" ]]; } || { [[ -f "${target}" ]] && [[ ! -s "${target}" ]]; }; then
if [[ ! -e "$target" ]] || { [[ -d "$target" ]] && [[ -z "$(ls -A "$target")" ]]; } || { [[ -f "$target" ]] && [[ ! -s "$target" ]]; }; then
exit 0
fi
if [[ -e "${source}" ]]; then
>&2 echo "Error: Source ${source} already exists. Cannot move ${target} to ${source}."
if [[ -e "$source" ]]; then
>&2 echo "Error: Source $source already exists. Cannot move $target to $source."
exit 1
fi
echo "Moving target ${target} to source ${source}."
mv "${target}" "${source}"
echo "Moving target $target to source $source."
mv "$target" "$source"

4
hosts/common/configs/system/impermanence/scripts/wipe.sh
View File

@@ -17,11 +17,11 @@ mount "/dev/mapper/$DEVICE" /mnt/btrfs
if [[ -e /mnt/btrfs/@ ]]; then
mkdir -p /mnt/btrfs/@.bak
timestamp=$(date --date="@$(stat -c %Y /mnt/btrfs/@)" "+%Y-%m-%d_%H:%M:%S")
mv /mnt/btrfs/@ "/mnt/btrfs/@.bak/${timestamp}"
mv /mnt/btrfs/@ "/mnt/btrfs/@.bak/$timestamp"
fi
find /mnt/btrfs/@.bak/ -maxdepth 1 -mtime +14 | while IFS= read -r i; do
delete_subvolume_recursively "${i}"
delete_subvolume_recursively "$i"
done
btrfs subvolume create /mnt/btrfs/@

2
hosts/common/configs/system/nix-cleanup/cleanup.sh
View File

@@ -27,7 +27,7 @@ mount "/dev/mapper/$DEVICE" /mnt/btrfs
if [[ -e /mnt/btrfs/@.bak ]]; then
if [[ -n "$(ls -A /mnt/btrfs/@.bak)" ]]; then
for i in /mnt/btrfs/@.bak/*; do
delete_subvolume_recursively "${i}"
delete_subvolume_recursively "$i"
done
else
echo "/mnt/btrfs/@.bak is empty. Nothing to delete."

15
hosts/common/configs/system/nix-install/install.completion.zsh
View File

@@ -1,6 +1,5 @@
_nix-install_completion() {
local -a options
options=(
local options=(
'1:flake:_directories'
'-m[Mode: 'install' or 'repair']:mode:(install repair)'
'-h[Host to configure]:host:($(_list_hosts))'
@@ -11,16 +10,16 @@ _nix-install_completion() {
)
_list_hosts() {
flake="$(realpath ${words[2]})"
if [[ -f "${flake}/flake.nix" ]]; then
nix flake show --quiet --json "${flake}" 2>/dev/null | jq -r '.nixosConfigurations | keys[]'
local flake="$(realpath ${words[2]})"
if [[ -f "$flake/flake.nix" ]]; then
nix flake show --quiet --json "$flake" 2>/dev/null | jq -r '.nixosConfigurations | keys[]'
fi
}
_list_keys() {
flake="$(realpath ${words[2]})"
if [[ -d "${flake}/secrets" ]]; then
find "${flake}/secrets" -type f -name 'key.txt' | sed -E 's|^.*/secrets/([^/]+)/key.txt$|\1|' | sort -u
local flake="$(realpath ${words[2]})"
if [[ -d "$flake/secrets" ]]; then
find "$flake/secrets" -type f -name 'key.txt' | sed -E 's|^.*/secrets/([^/]+)/key.txt$|\1|' | sort -u
fi
}

81
hosts/common/configs/system/nix-install/install.sh
View File

@@ -13,7 +13,7 @@ usage() {
}
check_root() {
if [[ "${EUID}" -ne 0 ]]; then
if [[ "$EUID" -ne 0 ]]; then
echo "Please run the script as root."
exit 1
fi
@@ -27,41 +27,41 @@ check_network() {
}
check_flake() {
if [[ ! -f "${flake}/flake.nix" ]]; then
echo "flake.nix not found in ${flake}."
if [[ ! -f "$flake/flake.nix" ]]; then
echo "flake.nix not found in $flake."
exit 1
fi
}
check_host() {
if ! nix flake show --quiet --json "${flake}" 2>/dev/null | jq -e ".nixosConfigurations[\"${host}\"]" &>/dev/null; then
echo "Host '${host}' not found in flake."
if ! nix flake show --quiet --json "$flake" 2>/dev/null | jq -e ".nixosConfigurations[\"$host\"]" &>/dev/null; then
echo "Host '$host' not found in flake."
exit 1
fi
}
check_key() {
if [[ -n "${key}" ]] && [[ ! -f "${flake}/secrets/${key}/key.txt" ]]; then
echo "Key '${key}' not found."
if [[ -n "$key" ]] && [[ ! -f "$flake/secrets/$key/key.txt" ]]; then
echo "Key '$key' not found."
exit 1
fi
}
set_password_file() {
if [[ -n "${password_file}" ]]; then
if [[ ! -f "${password_file}" ]]; then
echo "LUKS key file '${password_file}' not found."
if [[ -n "$password_file" ]]; then
if [[ ! -f "$password_file" ]]; then
echo "LUKS key file '$password_file' not found."
exit 1
fi
ln -sf "${password_file}" /tmp/installer.key
ln -sf "$password_file" /tmp/installer.key
else
echo "Enter password for LUKS encryption:"
IFS= read -r -s password
echo "Enter password again to confirm: "
IFS= read -r -s password_check
[ "${password}" != "${password_check}" ]
echo -n "${password}" > /tmp/installer.key
[ "$password" != "$password_check" ]
echo -n "$password" > /tmp/installer.key
unset password password_check
fi
}
@@ -69,35 +69,34 @@ set_password_file() {
prepare_disk() {
local disko_mode="$1"
root=$(mktemp -d /mnt/install.XXXXXX)
disko -m "${disko_mode}" --yes-wipe-all-disks --root-mountpoint "${root}" "${flake}/hosts/${host}/format.nix" --arg device "\"${device}\""
disko -m "$disko_mode" --yes-wipe-all-disks --root-mountpoint "$root" "$flake/hosts/$host/format.nix" --arg device "\"$device\""
}
copy_keys() {
mkdir -p "${root}/persist/etc/ssh"
cp "${flake}/hosts/${host}/secrets/ssh_host_ed25519_key" "${root}/persist/etc/ssh/ssh_host_ed25519_key"
mkdir -p "$root/persist/etc/ssh"
cp "$flake/hosts/$host/secrets/ssh_host_ed25519_key" "$root/persist/etc/ssh/ssh_host_ed25519_key"
for path in "${flake}/hosts/${host}/users"/*; do
if [[ -z "${key}" ]]; then
for path in "$flake/hosts/$host/users"/*; do
if [[ -z "$key" ]]; then
continue
fi
user=$(basename "${path}")
mkdir -p "${root}/persist/home/${user}/.config/sops-nix"
cp "${flake}/secrets/${key}/key.txt" "${root}/persist/home/${user}/.config/sops-nix/key.txt"
uid=$(cat "${flake}/hosts/${host}/users/${user}/uid")
gid=100
chown -R "${uid}:${gid}" "${root}/persist/home/${user}"
local user
user=$(basename "$path")
mkdir -p "$root/persist/home/$user/.config/sops-nix"
cp "$flake/secrets/$key/key.txt" "$root/persist/home/$user/.config/sops-nix/key.txt"
chown -R "$(cat "$flake/hosts/$host/users/$user/uid"):100" "$root/persist/home/$user"
done
}
install() {
nixos-install --root "${root}" --flake "${flake}#${host}" --no-root-passwd
nixos-install --root "$root" --flake "$flake#$host" --no-root-passwd
}
copy_config() {
echo "Copying configuration..."
rm -rf "${root}/persist/etc/nixos"
cp -r "${flake}" "${root}/persist/etc/nixos"
rm -rf "$root/persist/etc/nixos"
cp -r "$flake" "$root/persist/etc/nixos"
}
finish() {
@@ -109,8 +108,8 @@ finish() {
cleanup() {
rm -f /tmp/installer.key
if [[ -n "${host}" && -n "${device}" ]]; then disko -m "unmount" "${flake}/hosts/${host}/format.nix" --arg device "\"${device}\""; fi
if [[ -d "${root}" ]]; then rmdir "${root}"; fi
if [[ -n "$host" && -n "$device" ]]; then disko -m "unmount" "$flake/hosts/$host/format.nix" --arg device "\"$device\""; fi
if [[ -d "$root" ]]; then rmdir "$root"; fi
}
check_root
@@ -132,18 +131,18 @@ copy_config_flag="false"
reboot_flag="false"
while getopts "m:h:k:p:cr" opt; do
case "${opt}" in
m) mode="${OPTARG}" ;;
h) host="${OPTARG}" ;;
k) key="${OPTARG}" ;;
p) password_file="${OPTARG}" ;;
case "$opt" in
m) mode="$OPTARG" ;;
h) host="$OPTARG" ;;
k) key="$OPTARG" ;;
p) password_file="$OPTARG" ;;
c) copy_config_flag="true" ;;
r) reboot_flag="true" ;;
*) usage ;;
esac
done
if [[ -z "${mode}" || -z "${host}" ]]; then
if [[ -z "$mode" || -z "$host" ]]; then
usage
fi
@@ -151,23 +150,23 @@ check_host
check_key
until set_password_file; do echo "Passwords did not match, please try again."; done
device=$(grep -oP '(?<=device = ")[^"]+' "${flake}/hosts/${host}/default.nix")
device=$(grep -oP '(?<=device = ")[^"]+' "$flake/hosts/$host/default.nix")
case "${mode}" in
case "$mode" in
install)
prepare_disk "destroy,format,mount"
copy_keys
install
if [[ "${copy_config_flag}" == "true" ]]; then copy_config; fi
if [[ "${reboot_flag}" == "true" ]]; then finish; fi
if [[ "$copy_config_flag" == "true" ]]; then copy_config; fi
if [[ "$reboot_flag" == "true" ]]; then finish; fi
;;
repair)
prepare_disk "mount"
install
if [[ "${reboot_flag}" == "true" ]]; then finish; fi
if [[ "$reboot_flag" == "true" ]]; then finish; fi
;;
*)
echo "Invalid mode: ${mode}"
echo "Invalid mode: $mode"
usage
;;
esac

2
hosts/common/configs/system/timezone/timezone.sh
View File

@@ -1,7 +1,7 @@
case "$2" in
connectivity-change)
if timezone=$(curl --fail https://ipapi.co/timezone); then
timedatectl set-timezone "${timezone}"
timedatectl set-timezone "$timezone"
fi
;;
esac