mirror of
https://github.com/stornic56/debianito-post-install.git
synced 2026-10-31 13:08:06 +00:00
9a96dff6ea
- Verified the repository backup rc in migrate.sh. `_persistent_backup_repos()` now aborts before any destructive step when the tar archive is missing or corrupt, removing the invalid backup itself. - Verified the restore rc in migrate.sh. `_restore_backup()` now reports failure instead of printing a green "Backup restored" message, and its caller distinguishes a restored backup from a failed restore. - Made the upgrade phases fail honestly. `apt upgrade` and `apt full-upgrade` now abort with `apt --fix-broken install` + `dpkg --configure -a` instructions instead of reporting "completed successfully" over a partially-upgraded system. - Made repository source writes atomic. Both writers tee into a `.tmp` file and move into place, and the `/etc/apt/sources.list` removal now happens after the write. - Corrected the SID warning text in migrate.sh to reflect that security fixes arrive via package uploads rather than a nonexistent sid-security suite. - Added exit-path cleanup traps for the temp `.deb` files: `trap 'rm -f "$deb_path"' RETURN` in `heroic.sh`and `tools.sh`. - Tightened Heroic download handling: the API fetch uses `curl -fsS --connect-timeout 10 --max-time 30`, the download uses `curl -fsSL --max-time 300`, and the `.deb` is validated with both `dpkg-deb --info` and `dpkg-deb --contents`; `sudo apt install` is guarded with `if !` before the temporary file is deleted. - Tightened the OpenRGB install path: the Codeberg API fetch uses `curl -fsS --connect-timeout 10 --max-time 30` and the download `curl -fsSL --max-time 300`, with the same dual `dpkg-deb` integrity check as the Heroic fallback. - Guarded the OpenRGB post-install side effects: the script now aborts after removing the failed `.deb` if `sudo apt install` returns non-zero, so `modprobe i2c-dev`, `/etc/modules`, the `i2c` group membership, `udevadm`, and the `setcap` step no longer run when the package is absent.
218 lines
7.9 KiB
Bash
218 lines
7.9 KiB
Bash
#!/usr/bin/env bash
|
|
# legacy.sh — Bullseye: hardware detection, NVIDIA legacy drivers, lightweight gaming
|
|
# License GPL v3
|
|
|
|
BULLSEYE_USE_ARCHIVE=false
|
|
BULLSEYE_USE_ARCHIVE_CHECKED=false
|
|
|
|
check_bullseye_archive_phase() {
|
|
$BULLSEYE_USE_ARCHIVE_CHECKED && return
|
|
BULLSEYE_USE_ARCHIVE_CHECKED=true
|
|
|
|
local current_year
|
|
local current_month
|
|
current_year=$(date +%Y)
|
|
current_month=$(date +%-m)
|
|
|
|
if [ "$current_year" -gt 2026 ] ||
|
|
{ [ "$current_year" -eq 2026 ] && [ "$current_month" -ge 9 ]; }; then
|
|
BULLSEYE_USE_ARCHIVE=true
|
|
fi
|
|
|
|
if $BULLSEYE_USE_ARCHIVE; then
|
|
# Idempotency guard: skip when sources.list already points to the archive
|
|
grep -q 'archive.debian.org' /etc/apt/sources.list 2>/dev/null && return 0
|
|
|
|
_msg "Debian 11 — Archive Phase" \
|
|
"Bullseye LTS support ended on 31 Aug 2026.\n\n\
|
|
The script can switch APT sources to archive.debian.org.\n\
|
|
No security updates will be available." 12 60
|
|
|
|
if ! _confirm "Debian 11 — Archive Phase" \
|
|
"Rewrite /etc/apt/sources.list to use archive.debian.org?\n\n\
|
|
A timestamped backup will be created before the change." 12 60; then
|
|
echo "Archive phase: keeping the current repository configuration."
|
|
return 0
|
|
fi
|
|
|
|
# Timestamped backup before rewriting (same convention as firmware.sh / gpu.sh)
|
|
if [ -f /etc/apt/sources.list ]; then
|
|
sudo cp /etc/apt/sources.list "/etc/apt/sources.list.backup.$(date +%Y%m%d_%H%M%S)"
|
|
fi
|
|
|
|
echo "Writing archive.debian.org sources..."
|
|
sudo tee /etc/apt/sources.list >/dev/null <<'EOF'
|
|
deb http://archive.debian.org/debian bullseye main contrib non-free
|
|
#deb http://archive.debian.org/debian-security bullseye-security main contrib non-free
|
|
# deb http://archive.debian.org/debian bullseye-updates main contrib non-free
|
|
# deb http://archive.debian.org/debian bullseye-backports main contrib non-free
|
|
EOF
|
|
|
|
# Refresh package lists; may fail on EOL archives (expired Release files)
|
|
echo "Running apt-get update (failures are expected on EOL archives)..."
|
|
sudo apt-get update || true
|
|
fi
|
|
}
|
|
|
|
# ---------------------------------------------------------------------------
|
|
# NVIDIA driver installer for Bullseye (Kepler → 470, Fermi → 390)
|
|
# ---------------------------------------------------------------------------
|
|
install_nvidia_bullseye() {
|
|
echo -e "${YELLOW}NVIDIA GPU detected (Bullseye mode).${NC}"
|
|
|
|
local is_fermi
|
|
is_fermi=$(is_nvidia_fermi)
|
|
|
|
local nv_pkg=""
|
|
local gpu_gen=""
|
|
|
|
if [ "$is_fermi" = "true" ]; then
|
|
nv_pkg="nvidia-legacy-390xx-driver"
|
|
gpu_gen="Fermi"
|
|
else
|
|
# Bullseye: cualquier otra NVIDIA (Kepler incl.) → nvidia-driver (470)
|
|
nv_pkg="nvidia-driver"
|
|
gpu_gen="NVIDIA"
|
|
fi
|
|
|
|
local nv_ver
|
|
nv_ver=$(apt-cache policy "$nv_pkg" 2>/dev/null | awk 'NR==3 {print $2; exit}')
|
|
|
|
local msg="Source: Debian Bullseye Stable\n"
|
|
msg+="Driver: ${gpu_gen} — ${nv_pkg} ${nv_ver:-unknown}\n"
|
|
msg+="[+] firmware-misc-nonfree\n"
|
|
msg+="[+] nvidia-settings\n\n"
|
|
msg+="Instalar driver NVIDIA?"
|
|
|
|
if ! _confirm "NVIDIA — Bullseye" "$msg" 14 70; then
|
|
echo "Omitiendo driver NVIDIA."
|
|
NVIDIA_DRIVER_MODE=""
|
|
return 0
|
|
fi
|
|
|
|
_run_cmd "NVIDIA" \
|
|
"sudo apt install -y $nv_pkg firmware-misc-nonfree nvidia-settings" \
|
|
"Instalando driver NVIDIA ${gpu_gen}..."
|
|
|
|
local i386_active=false
|
|
dpkg --print-foreign-architectures | grep -q i386 && i386_active=true
|
|
if $i386_active; then
|
|
local nv32_pkg="${nv_pkg}:i386"
|
|
local nv32_ver
|
|
nv32_ver=$(apt-cache policy "$nv32_pkg" 2>/dev/null | awk 'NR==3 {print $2; exit}')
|
|
if [ -n "$nv32_ver" ] && [ "$nv32_ver" != "(none)" ]; then
|
|
echo "Installing 32-bit compatibility for ${nv_pkg}..."
|
|
_run_cmd "NVIDIA 32-bit" "sudo apt install -y $nv32_pkg" \
|
|
"Installing NVIDIA 32-bit libraries..."
|
|
else
|
|
echo "No 32-bit compatibility package available for ${nv_pkg} on Bullseye."
|
|
fi
|
|
fi
|
|
|
|
NVIDIA_DRIVER_MODE="stable"
|
|
echo -e "${GREEN}Driver NVIDIA ${nv_pkg} instalado. Requiere reinicio.${NC}"
|
|
|
|
echo ""
|
|
echo "──────────────────────────────────────────────"
|
|
echo "Verifying DKMS module compilation:"
|
|
if command -v dkms &>/dev/null; then
|
|
dkms status 2>/dev/null | grep nvidia || echo "(no nvidia DKMS module found)"
|
|
else
|
|
echo "(dkms not installed)"
|
|
fi
|
|
echo ""
|
|
echo "If the line ends with 'installed' → module is OK."
|
|
echo "Otherwise check: dmesg | grep nvidia"
|
|
echo "──────────────────────────────────────────────"
|
|
}
|
|
|
|
# ---------------------------------------------------------------------------
|
|
# Lightweight Gaming for Bullseye — sin Steam, sin Heroic
|
|
# 32-bit Mesa/NVIDIA + gamemode + mangohud + goverlay + lutris
|
|
# ---------------------------------------------------------------------------
|
|
install_gaming_bullseye() {
|
|
# Hardware state is detected on demand; GPU_TYPE is
|
|
# consulted below for the 32-bit driver choice.
|
|
_ensure_state_detected
|
|
|
|
echo -e "${YELLOW}Gaming setup (Bullseye)...${NC}"
|
|
|
|
local choices
|
|
choices=$(_checklist "Gaming Setup — Bullseye" \
|
|
"Check [*] the packages you want installed/updated on your system.\n" $TUI_ALTO $TUI_ANCHO $TUI_ALTO_LISTA \
|
|
"i386" "Enable 32-bit (i386) architecture" ON \
|
|
"steam" "Steam (requires 32-bit support)" ON \
|
|
"mangohud" "Performance overlay (Vulkan/OpenGL)" ON \
|
|
"gamemode" "Game performance optimization" OFF \
|
|
"goverlay" "MangoHud config GUI" ON \
|
|
"java" "Minecraft Java Runtime" OFF \
|
|
"lutris" "Lutris + Wine (requires 32-bit support)" OFF \
|
|
"retroarch" "RetroArch Emulator Frontend" OFF)
|
|
|
|
if [ -z "$choices" ]; then
|
|
echo "No gaming packages selected."
|
|
_pause
|
|
return
|
|
fi
|
|
|
|
local cleaned
|
|
cleaned=$(echo "$choices" | tr -d '"')
|
|
|
|
local need_32bit=false
|
|
# BH-004: Convert to array to avoid word splitting and injection.
|
|
local -a _pkgs=()
|
|
while IFS= read -r _pkg; do
|
|
[ -n "$_pkg" ] && _pkgs+=("$_pkg")
|
|
done < <(echo "$cleaned" | tr ' ' '\n')
|
|
for p in "${_pkgs[@]}"; do
|
|
case $p in steam | lutris) need_32bit=true ;; esac
|
|
done
|
|
echo "$cleaned" | grep -qw i386 && need_32bit=true
|
|
|
|
local install_list
|
|
install_list=$(echo "$cleaned" | tr ' ' '\n' | grep -v '^i386$' | tr '\n' ' ')
|
|
install_list=${install_list% }
|
|
|
|
if $need_32bit && ! dpkg --print-foreign-architectures 2>/dev/null | grep -q i386; then
|
|
echo -e "${YELLOW}Enabling i386 architecture...${NC}"
|
|
sudo dpkg --add-architecture i386
|
|
_ensure_apt_updated
|
|
fi
|
|
|
|
if $need_32bit; then
|
|
echo "Installing 32-bit graphics drivers..."
|
|
if [ "$GPU_TYPE" = "nvidia" ]; then
|
|
_install_nvidia_32bit
|
|
else
|
|
_install_mesa_32bit
|
|
fi
|
|
fi
|
|
|
|
# BH-004: Convert to array to avoid word splitting and injection.
|
|
local -a _install_pkgs=()
|
|
while IFS= read -r _pkg; do
|
|
[ -n "$_pkg" ] && _install_pkgs+=("$_pkg")
|
|
done < <(echo "$install_list" | tr ' ' '\n')
|
|
for pkg in "${_install_pkgs[@]}"; do
|
|
case $pkg in
|
|
steam)
|
|
if ensure_contrib_repo; then
|
|
install_steam
|
|
else
|
|
echo -e "${YELLOW}Skipping Steam installation (contrib repository not enabled).${NC}"
|
|
fi
|
|
;;
|
|
java) install_minecraft_java ;;
|
|
mangohud) install_mangohud ;;
|
|
gamemode) install_gamemode ;;
|
|
goverlay) install_goverlay ;;
|
|
lutris) install_lutris ;;
|
|
retroarch) install_retroarch ;;
|
|
*) _run_install "$pkg" ;;
|
|
esac
|
|
done
|
|
|
|
echo -e "${GREEN}Gaming setup complete.${NC}"
|
|
_pause
|
|
}
|