53 lines
1.4 KiB
Bash
Executable File
53 lines
1.4 KiB
Bash
Executable File
#!/bin/bash -e
|
|
|
|
if [ "${PUBKEY_ONLY_SSH}" = "1" ]; then
|
|
sed -i -Ee 's/^#?[[:blank:]]*PubkeyAuthentication[[:blank:]]*no[[:blank:]]*$/PubkeyAuthentication yes/
|
|
s/^#?[[:blank:]]*PasswordAuthentication[[:blank:]]*yes[[:blank:]]*$/PasswordAuthentication no/' "${ROOTFS_DIR}"/etc/ssh/sshd_config
|
|
fi
|
|
|
|
on_chroot << EOF
|
|
if [ "${ENABLE_SSH}" == "1" ]; then
|
|
systemctl enable ssh
|
|
else
|
|
systemctl disable ssh
|
|
fi
|
|
EOF
|
|
|
|
if [ "${USE_QEMU}" = "1" ]; then
|
|
echo "enter QEMU mode"
|
|
install -m 644 files/90-qemu.rules "${ROOTFS_DIR}/etc/udev/rules.d/"
|
|
echo "leaving QEMU mode"
|
|
fi
|
|
|
|
on_chroot <<- EOF
|
|
if [ "${PLATFORM}" == "rpi" ]; then
|
|
systemctl enable rpi-resize
|
|
fi
|
|
|
|
for GRP in input spi i2c gpio; do
|
|
groupadd -f -r "\$GRP"
|
|
done
|
|
EOF
|
|
|
|
on_chroot << EOF
|
|
setupcon --force --save-only -v
|
|
EOF
|
|
|
|
# Set root password to locked
|
|
on_chroot << EOF
|
|
usermod --pass='*' root
|
|
#usermod --shell /bin/zsh root
|
|
EOF
|
|
|
|
rm -f "${ROOTFS_DIR}/etc/ssh/"ssh_host_*_key*
|
|
|
|
sed -i 's/^FONTFACE=.*/FONTFACE=""/;s/^FONTSIZE=.*/FONTSIZE=""/' "${ROOTFS_DIR}/etc/default/console-setup"
|
|
sed -i "s/PLACEHOLDER//" "${ROOTFS_DIR}/etc/default/keyboard"
|
|
on_chroot << EOF
|
|
DEBIAN_FRONTEND=noninteractive dpkg-reconfigure keyboard-configuration console-setup
|
|
EOF
|
|
|
|
if [ -e "${ROOTFS_DIR}/etc/avahi/avahi-daemon.conf" ]; then
|
|
sed -i 's/^#\?publish-workstation=.*/publish-workstation=yes/' "${ROOTFS_DIR}/etc/avahi/avahi-daemon.conf"
|
|
fi
|