Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
https://github.com/kyaulabs/aarch
Automated Arch Linux is a template-based automated installer for Arch Linux.
https://github.com/kyaulabs/aarch
arch-linux archlinux automated bash bash-script hardened hardened-image hardened-linux-scripts linux shell-script shell-script-linux-installer
Last synced: 13 days ago
JSON representation
Automated Arch Linux is a template-based automated installer for Arch Linux.
- Host: GitHub
- URL: https://github.com/kyaulabs/aarch
- Owner: kyaulabs
- License: agpl-3.0
- Created: 2021-05-14T05:05:14.000Z (over 3 years ago)
- Default Branch: master
- Last Pushed: 2024-07-21T11:59:45.000Z (4 months ago)
- Last Synced: 2024-07-30T16:59:55.569Z (4 months ago)
- Topics: arch-linux, archlinux, automated, bash, bash-script, hardened, hardened-image, hardened-linux-scripts, linux, shell-script, shell-script-linux-installer
- Language: Shell
- Homepage:
- Size: 291 KB
- Stars: 1
- Watchers: 3
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- Contributing: CONTRIBUTING.md
- License: LICENSE
- Code of conduct: CODE_OF_CONDUCT.md
- Codeowners: .github/CODEOWNERS
- Security: SECURITY.md
Awesome Lists containing this project
README
https://kyaulabs.com/
[](CODE_OF_CONDUCT.md) [](https://semver.org) [](LICENSE) [](https://github.com/zricethezav/gitleaks) [](../../actions)
## Disclaimer
I personally use Arch Linux everywhere and with the frequency at which I was doing reinstallations increasing, eventually I needed a better solution. What started as a hardening script that was run post-installation has merged into the fully automated installation script that you see before you.
```
🚧 WARNING
This repository is provided for archival/educational purposes, I am not responsible for any data loss or
damage that may ensue.
```
* [Introduction](#introduction)
* [Configuration](#configuration)
* [Custom ARCHISO](#custom-archiso)
* [Existing ARCHISO](#existing-archiso)
* [Usage](#usage)
* [Attribution](#attribution)
## Introduction
AArch or Automated Arch Linux is a template-based automated installer for Arch
Linux. This script is the convergence of my
[Arch Linux Installation](https://kyau.net/wiki/ArchLinux:Installation) along
with my
[Hardening Arch Linux (HAL)](https://kyau.net/wiki/ArchLinux:Security) articles
on my personal wiki.
## Configuration
Before you can start `aarch`, a `moduli` must be generated. This will take a
considerable amount of time depending on your CPU, if this is being executed
inside of a virtualized environment it is recommended that you use `haveged`.
```bash
ssh-keygen -M generate -O bits=4096 moduli.c
ssh-keygen -M screen -f moduli.c moduli
rm moduli.c
```
After the `moduli` has been generated the `example.aa` file can be edited for
a fully automated installation. This file can be named anything you like as long
as it retains it's extension (eg. machine.aa). Without a template file you will
instead be asked to input all of the information to the console when running
`aarch`.
Boot up the machine and/or vm with an ARCHISO image.
### Custom ARCHISO
Next decide if you want the script baked into an ISO or if you just want to
`scp` the script to the installation environment everytime. If you choose to
build your own ARCHISO it will help to follow these guidelines:
* Use `releng` as your base template.
* Add the `git` and `wget` packages to the `packages.x86_64` file so that it
will be installed an usable in the installation environment.
* Revert to traditional interface names with `ln -s /dev/null airootfs/etc/udev/rules.d/80-net-setup-link.rules`
* `aarch`, `erase_hdd`, `firstboot.txt` and `moduli` must be placed into in the `airootfs/root`
directory prior to building.
* Include an `.aa` template file in the `airootfs/root` directory for script
automation.
* Also include an wanted packages from the `pkg` directory.
* Modify the `profiledef.sh` script to make sure `aarch`, `erase_hdd` and any
packages you included have `0:0:755` setting, this sets user:group:permissions.
* Modify the `airootfs/root/.zlogin` script to enable the `sshd.service` on boot
by adding `systemctl enable --now sshd.service`. Then set a root password with
the command `chpasswd <<< "root:moo"`, with 'moo' being the password.
Instructions for building your own image can be found
[here](https://wiki.archlinux.org/index.php/Archiso).
### Existing ARCHISO
If instead you choose not to bake the script into an ISO, simply boot an
existing ARCHISO, use the `E` key to edit the kernel commandline at the bootloader
menu, adding `net.ifnames=0` to boot with traditional network interface names.
The ARCHISO will automatically log you into the root account, install `git` and
`wget`.
```shell
pacman -Syy git wget
```
Then modify the root password and enable sshd, finally checking the assigned IP.
```shell
passwd
systemctl start sshd
ip a
```
Finally SCP over to the machine `aarch`, `erase_hdd`, `firstboot.txt`, `moduli`
and an `.aa` template.
## Usage
In order to run `aarch` properly you will need all of the following files in
the home directory of the root user in the livecd environment for the machine
or virtual machine you are trying to install.
```shell
aarch erase_hdd firstboot.txt moduli
```
*In addition it also pays to have an `.aa` template.*
To run, simply execute the script.
```shell
./aarch
```
This will read the first `.aa` template found in the current directory. If no
template is found it will prompt the user to input the configuration through
the console.
*Absolute automation can be achieved by adding `aarch` to the `.bashrc` of the
root user on the ISO in addition to including a pre-filled in `.aa` template.*
## Attribution
* [ArchWiki](https://wiki.archlinux.org/)
* [Arch Linux Installation](https://kyau.net/wiki/ArchLinux:Installation)
* [Hardening Arch Linux (HAL)](https://kyau.net/wiki/ArchLinux:Security)
* [Mozilla SSL Configuration Generator](https://ssl-config.mozilla.org/)