echo " (comapatible with immudex only iso images)";
echo " --nuke - write 0 to 1st megabyte of disk";
echo "Usage:";
- echo " $ create_media [--i386-efi] [--nuke] <usb_disk> [iso_image]";
+ echo " $ immudex-create-media [--i386-efi] [--nuke] <usb_disk> [iso_image]";
}
if [ "$1" ] && [ "$1" = "--i386-efi" ]; then target="i386-efi"; shift; fi
if [ "$mapperDeviceList" ]; then
for dmDevice in $mapperDeviceList; do
- if sudo cryptsetup status /dev/mapper/${dmDevice} > /dev/null 2>&1; then
+ if cryptsetup status /dev/mapper/${dmDevice} > /dev/null 2>&1; then
mountPoint=$(df --output=source,target /dev/mapper/${dmDevice} | tail -n 1 | awk '{printf $2}');
device=$(sudo cryptsetup status /dev/mapper/${dmDevice} | grep "device" | awk '{printf $2}');
if [ "$mountPoint" ] && [ "$mountPoint" != "/dev" ]; then
else
index=0;
fi
- sudo cryptsetup open $1 immudex-crypt${index};
- sudo mkdir -p /media/${USER}/immudex-crypt${index};
+ cryptsetup open $1 immudex-crypt${index};
+ mkdir -p /media/${USER}/immudex-crypt${index};
dmDevice=$(ls -l /dev/mapper/immudex-crypt${index} | awk '{printf $10}' | cut -d "/" -f 2);
if ! $(sudo file -s /dev/${dmDevice} | grep -q 'ext4'); then
echo "Could not determine filesystem of unlocked device.";
echo -n "Format this device to ext4? (y/n): "
read format;
if [ "$format" = "y" ]; then
- sudo mkfs.ext4 /dev/mapper/immudex-crypt${index};
+ mkfs.ext4 /dev/mapper/immudex-crypt${index};
else
echo "Refuse to mount.";
- sudo cryptsetup close immudex-crypt${index};
+ cryptsetup close immudex-crypt${index};
exit 1;
fi
fi
- sudo mount /dev/mapper/immudex-crypt${index} /media/${USER}/immudex-crypt${index};
+ mount /dev/mapper/immudex-crypt${index} /media/${USER}/immudex-crypt${index};
if [ ! -e /ic${index} ]; then
- sudo ln -s /media/${USER}/immudex-crypt${index} /ic${index};
+ ln -s /media/${USER}/immudex-crypt${index} /ic${index};
fi
fi
else
cryptfsName=$1;
fi
- if sudo cryptsetup status /dev/mapper/${cryptfsName} > /dev/null 2>&1; then
+ if cryptsetup status /dev/mapper/${cryptfsName} > /dev/null 2>&1; then
mountPoint=$(df --output=source,target /dev/mapper/${cryptfsName} | tail -1 | awk '{printf $2}');
if [ "$mountPoint" ] && [ "$mountPoint" != "/dev" ]; then
- sudo umount -R $mountPoint;
- sudo cryptsetup close ${cryptfsName};
+ umount -R $mountPoint;
+ cryptsetup close ${cryptfsName};
else
- sudo cryptsetup close ${cryptfsName};
+ cryptsetup close ${cryptfsName};
fi
else
echo "Given devices isn't opened crypt device or it was closed before";
function create() {
if [ $# -lt 1 ]; then help; exit 1;
else
- sudo cryptsetup -y -v luksFormat $1;
+ cryptsetup -y -v luksFormat $1;
fi
}
echo "User $USER is already owner of $mountPoint";
fi
else
- sudo chown ${USER}:${USER} $mountPoint;
+ chown ${USER}:${USER} $mountPoint;
fi
fi
}
if hostnamectl > /dev/null 2>&1; then
hName="$(hostnamectl | grep 'Chassis' | cut -d ":" -f 2 | awk '{printf $1}')-${bootID}";
else
- hName="$(sudo dmidecode -s chassis-type | head -1 | tr [A-Z] [a-z])-${bootID}";
+ hName="$(dmidecode -s chassis-type | head -1 | tr [A-Z] [a-z])-${bootID}";
fi
-sudo hostnamectl set-hostname $hName;
-sudo sed -i "s/immudex/${hName}/g" /etc/hosts;
+hostnamectl set-hostname $hName;
+sed -i "s/immudex/${hName}/g" /etc/hosts;
echo $hName | sudo tee /etc/hostname > /dev/null;
originDisk=$disk;
if [ ! "$disk" ]; then exit 1; fi
- sudo dd if=/dev/zero bs=1M of=/dev/$disk count=1 2> /dev/null
+ dd if=/dev/zero bs=1M of=/dev/$disk count=1 2> /dev/null
- sudo parted /dev/$disk mklabel msdos > /dev/null 2>&1;
- sudo parted /dev/$disk mkpart primary 1 101M > /dev/null 2>&1;
- sudo parted /dev/$disk set 1 boot on > /dev/null 2>&1;
- sudo parted /dev/$disk mkpart primary 101M 3G > /dev/null 2>&1;
+ parted /dev/$disk mklabel msdos > /dev/null 2>&1;
+ parted /dev/$disk mkpart primary 1 101M > /dev/null 2>&1;
+ parted /dev/$disk set 1 boot on > /dev/null 2>&1;
+ parted /dev/$disk mkpart primary 101M 3G > /dev/null 2>&1;
if $(echo $disk | egrep -qo "mmc|nvme"); then disk="${disk}p"; fi
#formatting
- sudo mkfs.vfat -F32 /dev/${disk}1 > /dev/null 2>&1;
- sudo mkfs.ext4 /dev/${disk}2 > /dev/null 2>&1;
+ mkfs.vfat -F32 /dev/${disk}1 > /dev/null 2>&1;
+ mkfs.ext4 /dev/${disk}2 > /dev/null 2>&1;
#Setting label for partition
- sudo e2label /dev/${disk}2 "immudex" > /dev/null 2>&1;
+ e2label /dev/${disk}2 "immudex" > /dev/null 2>&1;
#mount root partition
- sudo mount /dev/${disk}2 /media > /dev/null 2>&1;
+ mount /dev/${disk}2 /media > /dev/null 2>&1;
#creating directories for efi partition
- sudo mkdir -p /media/boot/efi > /dev/null 2>&1;
+ mkdir -p /media/boot/efi > /dev/null 2>&1;
#mount efi partition
- sudo mount /dev/${disk}1 /media/boot/efi > /dev/null 2>&1;
+ mount /dev/${disk}1 /media/boot/efi > /dev/null 2>&1;
#mount iso image in /mnt directory
#sudo mount /dev/sr0 /mnt > /dev/null 2>&1;
#copying whole iso image to the second partition
- sudo cp -rvv /run/live/medium/* /media > /dev/null 2>&1;
+ cp -rvv /run/live/medium/* /media > /dev/null 2>&1;
- sudo sed -i '/set\ timeout=/ s/30/5/' /media/boot/grub/grub.cfg;
- sudo sed -i 's/bootfrom=removable //g' /media/boot/grub/grub.cfg;
+ sed -i '/set\ timeout=/ s/30/5/' /media/boot/grub/grub.cfg;
+ sed -i 's/bootfrom=removable //g' /media/boot/grub/grub.cfg;
#removing unnecessary directories from second partition
- sudo rm -rf /media/isolinux > /dev/null 2>&1;
- sudo rm -rf /media/EFI > /dev/null 2>&1;
+ rm -rf /media/isolinux > /dev/null 2>&1;
+ rm -rf /media/EFI > /dev/null 2>&1;
#GRUB Installation
if [ -f /usr/lib/live/mount/medium/EFI/BOOT/BOOTIA32.EFI ]; then
else
target="x86_64-efi";
fi
- sudo grub-install --target=${target} --root-directory=/media --boot-directory=/media/boot --efi-directory=/media/boot/efi --bootloader-id=debian --removable > /dev/null 2>&1;
+ grub-install --target=${target} --root-directory=/media --boot-directory=/media/boot --efi-directory=/media/boot/efi --bootloader-id=debian --removable > /dev/null 2>&1;
#Adding entry to EFI Firmware
- sudo efibootmgr -c -d /dev/${originDisk} -p 1 -L "Debian" -l '\EFI\BOOT\grubx64.efi' > /dev/null 2>&1;
+ efibootmgr -c -d /dev/${originDisk} -p 1 -L "Debian" -l '\EFI\BOOT\grubx64.efi' > /dev/null 2>&1;
#Umount all mounted filesystems
- sudo umount -R /media > /dev/null 2>&1;
+ umount -R /media > /dev/null 2>&1;
if [ $? -eq 0 ]; then echo -e "[ ${GREEN}OK${ENDCOLOR} ]"; fi
disk=$(selectDisk);
if [ ! "$disk" ]; then exit 1; fi
- sudo dd if=/dev/zero bs=1M of=/dev/$disk count=1 2> /dev/null
+ dd if=/dev/zero bs=1M of=/dev/$disk count=1 2> /dev/null
- sudo parted /dev/$disk mklabel msdos > /dev/null 2>&1;
- sudo parted /dev/$disk mkpart primary 1 3G > /dev/null 2>&1;
- sudo parted /dev/$disk set 1 boot on > /dev/null 2>&1;
+ parted /dev/$disk mklabel msdos > /dev/null 2>&1;
+ parted /dev/$disk mkpart primary 1 3G > /dev/null 2>&1;
+ parted /dev/$disk set 1 boot on > /dev/null 2>&1;
if $(echo $disk | egrep -qo "mmc|nvme"); then disk="${disk}p"; fi
#formatting
- sudo mkfs.ext4 /dev/${disk}1 > /dev/null 2>&1;
+ mkfs.ext4 /dev/${disk}1 > /dev/null 2>&1;
#Setting label for partition is necessary for extlinux bootloader
- sudo e2label /dev/${disk}1 "immudex" > /dev/null 2>&1;
+ e2label /dev/${disk}1 "immudex" > /dev/null 2>&1;
#mount partition in /media directory
- sudo mount /dev/${disk}1 /media > /dev/null 2>&1;
+ mount /dev/${disk}1 /media > /dev/null 2>&1;
#Creating directory for extlinux
- sudo mkdir /media/extlinux > /dev/null 2>&1;
+ mkdir /media/extlinux > /dev/null 2>&1;
#Instalation extlinux files in abovementioned directory
- sudo extlinux --install /media/extlinux > /dev/null 2>&1;
+ extlinux --install /media/extlinux > /dev/null 2>&1;
#mount iso image in /mnt directory
#sudo mount /dev/sr0 /mnt > /dev/null 2>&1;
#copying live directory from iso image to partition
- sudo cp -rvv /run/live/medium/live /media > /dev/null; 2>&1;
+ cp -rvv /run/live/medium/live /media > /dev/null; 2>&1;
#installation extlinux MBR on first sector of hard drive (whole device)
- sudo dd if=/usr/lib/EXTLINUX/mbr.bin of=/dev/${disk} > /dev/null 2>&1;
+ dd if=/usr/lib/EXTLINUX/mbr.bin of=/dev/${disk} > /dev/null 2>&1;
#creating extlinux configuration file
cat > extlinux.conf <<EOF
kernel /live/vmlinuz
append quiet initrd=/live/initrd boot=live overlay-size=25% apparmor=1 security=apparmor
EOF
- sudo cp extlinux.conf /media/extlinux > /dev/null 2>&1;
+ cp extlinux.conf /media/extlinux > /dev/null 2>&1;
rm extlinux.conf;
#Unmounting filesystems
- sudo umount /media > /dev/null 2>&1;
+ umount /media > /dev/null 2>&1;
if [ $? -eq 0 ]; then echo -e "[ ${GREEN}OK${ENDCOLOR} ]"; fi
fi
if [ "$mapperDeviceList" ]; then
for dmDevice in $mapperDeviceList; do
- if sudo cryptsetup status /dev/mapper/${dmDevice} > /dev/null 2>&1; then
+ if cryptsetup status /dev/mapper/${dmDevice} > /dev/null 2>&1; then
mountPoint=$(df --output=source,target /dev/mapper/${dmDevice} | tail -n 1 | awk '{printf $2}');
if [ "$mountPoint" ]; then
if $(sudo lsof $mountPoint > /dev/null 2>&1); then
notify-send "Padlock" "The /dev/mapper/${dmDevice} cannot be unmount, because there are opened file or running proceses." --icon=dialog-error;
else
- sudo umount $mountPoint;
+ umount $mountPoint;
if [ $? -ne 0 ]; then
notify-send "Padlock" "The /dev/mapper/${dmDevice} cannot be unmount, because there are other filesystem is mounted in." --icon=dialog-error;
fi
- sudo cryptsetup close /dev/mapper/${dmDevice};
+ cryptsetup close /dev/mapper/${dmDevice};
fi
else
- sudo cryptsetup close /dev/mapper/${dmDevice};
+ cryptsetup close /dev/mapper/${dmDevice};
fi
fi
done
check_distro_commit --print;
fi
elif [ "$1" ] && [ "$1" = "--upgrade" ]; then
- part=$(sudo blkid | grep 'LABEL="immudex"' | awk '{printf $1}' | cut -d ":" -f 1);
- if sudo mount | grep -q "$part"; then
+ part=$(blkid | grep 'LABEL="immudex"' | awk '{printf $1}' | cut -d ":" -f 1);
+ if mount | grep -q "$part"; then
echo -n "Mounting iso image...";
- sudo mount $2 /mnt > /dev/null 2>&1;
+ mount $2 /mnt > /dev/null 2>&1;
if [ $? -eq 0 ]; then echo -e "[ ${GREEN}OK${ENDCOLOR} ]"; fi
- mountPointList=$(sudo mount | grep "$part" | awk '{printf $3" "}');
+ mountPointList=$(mount | grep "$part" | awk '{printf $3" "}');
for mountPoint in $mountPointList; do
echo -n "Unlocking $mountPoint ...";
- sudo mount $part $mountPoint -o remount,rw > /dev/null 2>&1;
+ mount $part $mountPoint -o remount,rw > /dev/null 2>&1;
if [ $? -eq 0 ]; then
echo -e "[ ${GREEN}OK${ENDCOLOR} ]";
else
fi
done
echo "Copying immudex files to the disk...";
- sudo cp -vv /mnt/live/* ${mountPoint}/live;
+ cp -vv /mnt/live/* ${mountPoint}/live;
else
echo "Mounting immudex partition...";
- sudo mount $part /mnt >> /dev/null 2>&1;
+ mount $part /mnt >> /dev/null 2>&1;
if [ $? -eq 0 ]; then echo -e "[ ${GREEN}OK${ENDCOLOR} ]"; fi
echo "Copying immudex files to the disk...";
- sudo cp -vv /run/live/medium/live/* /mnt/live;
+ cp -vv /run/live/medium/live/* /mnt/live;
fi
if [ $? -eq 0 ]; then
echo -e "Copying immudex files to the disk...[ ${GREEN}OK${ENDCOLOR} ]";