1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
|
#!/bin/ksh
# $OpenBSD: install.sh,v 1.167 2009/04/13 02:22:12 krw Exp $
# $NetBSD: install.sh,v 1.5.2.8 1996/08/27 18:15:05 gwr Exp $
#
# Copyright (c) 1997-2009 Todd Miller, Theo de Raadt, Ken Westerback
# All rights reserved.
#
# Redistribution and use in source and binary forms, with or without
# modification, are permitted provided that the following conditions
# are met:
# 1. Redistributions of source code must retain the above copyright
# notice, this list of conditions and the following disclaimer.
# 2. Redistributions in binary form must reproduce the above copyright
# notice, this list of conditions and the following disclaimer in the
# documentation and/or other materials provided with the distribution.
#
# THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR
# IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
# OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
# IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT,
# INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
# NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
# DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
# THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
# (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
# THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
#
# Copyright (c) 1996 The NetBSD Foundation, Inc.
# All rights reserved.
#
# This code is derived from software contributed to The NetBSD Foundation
# by Jason R. Thorpe.
#
# Redistribution and use in source and binary forms, with or without
# modification, are permitted provided that the following conditions
# are met:
# 1. Redistributions of source code must retain the above copyright
# notice, this list of conditions and the following disclaimer.
# 2. Redistributions in binary form must reproduce the above copyright
# notice, this list of conditions and the following disclaimer in the
# documentation and/or other materials provided with the distribution.
#
# THIS SOFTWARE IS PROVIDED BY THE NETBSD FOUNDATION, INC. AND CONTRIBUTORS
# ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED
# TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
# PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE
# LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
# CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
# SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
# INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
# CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
# ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
# POSSIBILITY OF SUCH DAMAGE.
#
# OpenBSD installation script.
# In a perfect world, this would be a nice C program, with a reasonable
# user interface.
# The name of the file holding the list of configured filesystems.
FILESYSTEMS=/tmp/filesystems
# The name of the file holding the list of non-default configured swap devices.
SWAPLIST=/tmp/swaplist
# install.sub needs to know the MODE
MODE=install
# include common subroutines and initialization code
. install.sub
# If /etc/fstab already exists, skip disk initialization.
if [ ! -f /etc/fstab ]; then
DISK=
_DKDEVS=$DKDEVS
while :; do
_DKDEVS=`rmel "$DISK" $_DKDEVS`
# Always do ROOTDISK first, and repeat until
# it is configured acceptably.
if isin $ROOTDISK $_DKDEVS; then
resp=$ROOTDISK
rm -f /tmp/fstab
# Make sure empty files exist so we don't have to
# keep checking for their existence before grep'ing.
cat /dev/null >$FILESYSTEMS
cat /dev/null >$SWAPLIST
else
# Force the user to think and type in a disk name by
# making 'done' the default choice.
ask_which "disk" "do you wish to initialize" "$_DKDEVS" done "No more disks to initialize"
[[ $resp == done ]] && break
fi
DISK=$resp
makedev $DISK || continue
# Deal with disklabels, including editing the root disklabel
# and labeling additional disks. This is machine-dependent since
# some platforms may not be able to provide this functionality.
# /tmp/fstab.$DISK is created here with 'disklabel -f'.
rm -f /tmp/*.$DISK
AUTOROOT=n
md_prep_disklabel $DISK
# Get the lists of BSD and swap partitions.
unset _partitions _psizes _mount_points
_i=0
disklabel $DISK 2>&1 | sed -ne '/^ *[a-p]: /p' >/tmp/disklabel.$DISK
while read _dev _size _offset _type _rest; do
_pp=${DISK}${_dev%:}
if [[ $_pp == $ROOTDEV ]]; then
echo "$ROOTDEV /" >$FILESYSTEMS
continue
elif [[ $_pp == $SWAPDEV || $_type == swap ]]; then
echo "$_pp" >>$SWAPLIST
continue
elif [[ $_type != *BSD ]]; then
continue
fi
_partitions[$_i]=$_pp
_psizes[$_i]=$_size
# Set _mount_points[$_i].
if [[ -f /tmp/fstab.$DISK ]]; then
while read _pp _mp _rest; do
[[ $_pp == "/dev/${_partitions[$_i]}" ]] || continue
# Ignore mount points that have already been specified.
[[ -n $(grep " $_mp\$" $FILESYSTEMS) ]] && break
isin $_mp ${_mount_points[*]} && break
# Ignore '/' for any partition but ROOTDEV. Check just
# in case ROOTDEV isn't first partition processed.
[[ $_mp == '/' ]] && break
# Otherwise, record user specified mount point.
_mount_points[$_i]=$_mp
done </tmp/fstab.$DISK
fi
: $(( _i += 1 ))
done </tmp/disklabel.$DISK
if [[ $DISK == $ROOTDISK && -z $(grep "^$ROOTDEV /$" $FILESYSTEMS) ]]; then
echo "ERROR: No root partition ($ROOTDEV)."
DISK=
continue
fi
# If there are no BSD partitions go on to next disk.
[[ ${#_partitions[*]} -gt 0 ]] || continue
# Now prompt the user for the mount points.
_i=0
while :; do
_pp=${_partitions[$_i]}
_mp=${_mount_points[$_i]}
_size=$(stdsize ${_psizes[$_i]})
if [[ $AUTOROOT == y ]]; then
# No need to disturb the user.
resp=""
else
# Get the mount point from the user.
ask "Mount point for $_pp ($_size)? (or 'none' or 'done')" "$_mp"
fi
case $resp in
"") ;;
none) _mp=
;;
done) break
;;
/*) set -- $(grep " $resp\$" $FILESYSTEMS)
_pp=$1
if [[ -z $_pp ]]; then
# Mount point wasn't specified on a
# previous disk. Has it been specified
# on this one?
_j=0
for _pp in ${_partitions[*]} ""; do
if [[ $_i -ne $_j ]]; then
[[ $resp == ${_mount_points[$_j]} ]] && break
fi
: $(( _j += 1 ))
done
fi
if [[ -n $_pp ]]; then
echo "Invalid response: $_pp is already being mounted at $resp."
continue
fi
_mp=$resp
;;
*) echo "Invalid response: mount point must be an absolute path!"
continue
;;
esac
_mount_points[$_i]=$_mp
: $(( _i += 1))
if [[ $_i -ge ${#_partitions[*]} ]]; then
[[ $AUTOROOT == y ]] && break
_i=0
fi
done
# Append mount information to $FILESYSTEMS
_i=0
for _pp in ${_partitions[*]}; do
_mp=${_mount_points[$_i]}
[ "$_mp" ] && echo "$_pp $_mp" >>$FILESYSTEMS
: $(( _i += 1 ))
done
done
if [[ $AUTOROOT == n ]]; then
cat <<__EOT
OpenBSD filesystems:
$(<$FILESYSTEMS)
The next step *DESTROYS* all existing data on these partitions!
__EOT
ask_yn "Are you really sure that you're ready to proceed?"
[[ $resp == n ]] && { echo "Ok, try again later." ; exit ; }
fi
# Read $FILESYSTEMS, creating a new filesystem on each listed
# partition and saving the partition and mount point information
# for subsequent sorting by mount point.
_i=0
unset _partitions _mount_points
while read _pp _mp; do
_OPT=
[[ $_mp == / ]] && _OPT=$MDROOTFSOPT
newfs -q $_OPT /dev/r$_pp
_partitions[$_i]=$_pp
_mount_points[$_i]=$_mp
: $(( _i += 1 ))
done <$FILESYSTEMS
# Write fstab entries to /tmp/fstab in mount point alphabetic
# order to enforce a rational mount order.
for _mp in `bsort ${_mount_points[*]}`; do
_i=0
for _pp in ${_partitions[*]}; do
if [ "$_mp" = "${_mount_points[$_i]}" ]; then
echo -n "/dev/$_pp $_mp ffs rw"
# Only '/' is neither nodev nor nosuid. i.e.
# it can obviously *always* contain devices or
# setuid programs.
#
# Every other mounted filesystem is nodev. If
# the user chooses to mount /dev as a separate
# filesystem, then on the user's head be it.
#
# The only directories that install puts suid
# binaries into (as of 3.2) are:
#
# /sbin
# /usr/bin
# /usr/sbin
# /usr/libexec
# /usr/libexec/auth
# /usr/X11R6/bin
#
# and ports and users can do who knows what
# to /usr/local and sub directories thereof.
#
# So try to ensure that only filesystems that
# are mounted at or above these directories
# can contain suid programs. In the case of
# /usr/libexec, give blanket permission for
# subdirectories.
if [[ $_mp == / ]]; then
# / can hold devices and suid programs.
echo " 1 1"
else
# No devices anywhere but /.
echo -n ",nodev"
case $_mp in
# A few directories are allowed suid.
/sbin|/usr) ;;
/usr/bin|/usr/sbin) ;;
/usr/libexec|/usr/libexec/*) ;;
/usr/local|/usr/local/*) ;;
/usr/X11R6|/usr/X11R6/bin) ;;
# But all others are not.
*) echo -n ",nosuid" ;;
esac
echo " 1 2"
fi
fi
: $(( _i += 1 ))
done
done >>/tmp/fstab
# Append all non-default swap devices to fstab.
while read _dev; do
[[ $_dev == $SWAPDEV ]] || \
echo "/dev/$_dev none swap sw 0 0" >>/tmp/fstab
done <$SWAPLIST
munge_fstab
fi
mount_fs "-o async"
# Set hostname.
#
# Use existing hostname (short form) as the default value because we could
# be restarting an install.
#
# Don't ask for, but don't discard, domain information provided by the user.
#
# Only apply the new value if the new short form name differs from the existing
# one. This preserves any existing domain information in the hostname.
ask_until "\nSystem hostname? (short form, e.g. 'foo')" "$(hostname -s)"
[[ ${resp%%.*} != $(hostname -s) ]] && hostname $resp
THESETS="$THESETS site$VERSION-$(hostname -s).tgz"
# Remove existing network configuration files in /tmp to ensure they don't leak
# onto the installed system in the case of a restarted install. Any information
# contained within them should be accessible via ifconfig, hostname, route,
# etc, or from resolv.conf.shadow.
( cd /tmp; rm -f host* my* resolv.conf resolv.conf.tail dhclient.* )
ask_yn "Configure the network?" yes
[[ $resp == y ]] && donetconfig
_oifs=$IFS
IFS=
while :; do
askpass "Password for root account? (will not echo)"
_password=$resp
askpass "Password for root account? (again)"
# N.B.: Need quotes around $resp and $_password to preserve leading
# or trailing spaces.
[[ "$resp" == "$_password" ]] && break
echo "Passwords do not match, try again."
done
IFS=$_oifs
install_sets
# Remount all filesystems in /etc/fstab with the options from /etc/fstab, i.e.
# without any options such as async which may have been used in the first
# mount.
while read _dev _mp _fstype _opt _rest; do
mount -u -o $_opt $_dev $_mp || exit
done </etc/fstab
# Ensure an enabled console has the correct speed in /etc/ttys.
sed -e "/^console.*on.*secure.*$/s/std\.[0-9]*/std.$(stty speed)/" \
/mnt/etc/ttys >/tmp/ttys
# Move ttys back in case questions() needs to massage it more.
mv /tmp/ttys /mnt/etc/ttys
# Handle questions...
questions
echo -n "Saving configuration files..."
# Save any leases obtained during install.
( cd /var/db
[ -f dhclient.leases ] && mv dhclient.leases /mnt/var/db/. )
# Move configuration files from /tmp to /mnt/etc.
( cd /tmp
hostname >myname
# Append entries to installed hosts file, changing '1.2.3.4 hostname'
# to '1.2.3.4 hostname.$FQDN hostname'. Leave untouched lines containing
# domain information or aliases. These are lines the user added/changed
# manually. Note we may have no hosts file if no interfaces were configured.
if [[ -f hosts ]]; then
_dn=$(get_fqdn)
while read _addr _hn _aliases; do
if [[ -n $_aliases || $_hn != ${_hn%%.*} || -z $_dn ]]; then
echo "$_addr\t$_hn $_aliases"
else
echo "$_addr\t$_hn.$_dn $_hn"
fi
done <hosts >>/mnt/etc/hosts
rm hosts
fi
# Append dhclient.conf to installed dhclient.conf.
_f=dhclient.conf
[[ -f $_f ]] && { cat $_f >>/mnt/etc/$_f ; rm $_f ; }
# Possible files: fstab hostname.* kbdtype mygate myname ttys
# boot.conf resolv.conf sysctl.conf resolv.conf.tail
# Save only non-empty (-s) regular (-f) files.
for _f in fstab hostname* kbdtype my* ttys *.conf *.tail; do
[[ -f $_f && -s $_f ]] && mv $_f /mnt/etc/.
done )
_encr=`/mnt/usr/bin/encrypt -b 8 -- "$_password"`
echo "1,s@^root::@root:${_encr}:@
w
q" | /mnt/bin/ed /mnt/etc/master.passwd 2>/dev/null
/mnt/usr/sbin/pwd_mkdb -p -d /mnt/etc /etc/master.passwd
echo -n "done.\nGenerating initial host.random file..."
( cd /mnt/var/db
/mnt/bin/dd if=/mnt/dev/urandom of=host.random bs=1024 count=64 >/dev/null 2>&1
chmod 600 host.random >/dev/null 2>&1 )
echo "done."
set_timezone
# Perform final steps common to both an install and an upgrade.
finish_up
|