mirror of
https://github.com/stornic56/debianito-post-install.git
synced 2026-07-16 05:49:49 +00:00
stornic56
a91b0caa25
- Fixed script crashes from `whiptail` Cancel/Esc under `set -e`. Added `_menu()`, `_checklist()` and `_inputbox()` wrappers with `|| true` to prevent premature exits. - Resolved startup failures by using defaults instead of relying on unset variables with `set -u`. - Hardened sudoers management — `_validate_sudoers()` writes to temp file, validates with `visudo -cf`, only copies if successful. - Replaced `eval` in `_run_cmd` with safer `bash -c` execution. Swap Management Module (`modules/swap.sh`) - New standalone module with 9 internal functions and `manage_swap()` entry point. - Btrfs CoW detection — applies `chattr +C` before swapfile creation to prevent mkswap rejection on Btrfs. - Dynamic swappiness configuration — reads current system value instead of hardcoding 60, pre-fills inputbox with existing setting. - Uses `/run/lock/debianito-swap.lock` for early init compatibility (added as option 9 in main menu). Repository & Branch Migration (`modules/repos/migrate.sh`) - Handles branch migration from stable (11/12) to Testing or SID with 5-screen UX flow. - Persistent backup system — creates timestamped tar.gz backups of `/etc/apt/sources.list*`, auto-restores on apt update failure. - SID guardrails — installs `apt-listbugs` and `apt-listchanges` before upgrade to warn about critical bugs in unstable packages. - Dynamic menu options based on Debian version (SID shows only 1-2-3 Exit, non-SID includes backports + branch migration). - New `_components_enabled()` helper detects current contrib/non-free state. Gaming Module Overhaul - Unified gaming checklist — merged i386 toggle into single prompt with lazy evaluation instead of separate pre-check. - Lazy 32-bit architecture enablement — only enables i386 when needed (steam/lutris/i386 selected) and installs graphics drivers if `need_32bit=true`. - New `_install_nvidia_32bit()` helper with proper driver detection, version pinning, and legacy/tesla variant handling. Heroic & OpenRGB Downloads - Heroic — fetches latest release from GitHub API using `jq` to extract amd64.deb URL, validates with `dpkg-deb --info`. - OpenRGB — downloads from Codeberg Gitea API with SHA256 verification when available, fallback to `dpkg-deb` validation. - Dynamic codename detection — now detects Bookworm vs Trixie at runtime instead of hardcoded static values for .deb download URLs. |Other Improvements - Renumbered main menu: 8=ZRAM, 9=Swap Management, 10=Extras, 11=Boot Rescue, 12=Exit. - Improved `detect_storage()` — excludes loop/CD-ROM devices via `lsblk -e 7,11`, explicitly skips zram, detects USB/SD via `/sys/block/$name/removable`. - Standardized SCROLL_HINT across all files with centralized readonly variable.
76 lines
2.3 KiB
Bash
76 lines
2.3 KiB
Bash
#!/usr/bin/env bash
|
|
# rescue.sh — UEFI boot repair and system rescue utilities
|
|
|
|
_rescue_boot_sb() {
|
|
echo -e "${YELLOW}UEFI Secure Boot repair...${NC}"
|
|
|
|
if [ ! -d /sys/firmware/efi ]; then
|
|
echo -e "${RED}Not a UEFI system. Skipping.${NC}"
|
|
_pause
|
|
return
|
|
fi
|
|
|
|
local sb_state
|
|
sb_state=$(mokutil --sb-state 2>/dev/null)
|
|
if ! echo "$sb_state" | grep -qi "enabled"; then
|
|
echo -e "${YELLOW}Secure Boot is not enabled. No refirm needed.${NC}"
|
|
_pause
|
|
return
|
|
fi
|
|
|
|
if ! _confirm "Secure Boot Repair" \
|
|
"Secure Boot is enabled.\n\nReinstall and refirm shim-signed + GRUB?\n\nThis fixes boot issues where Debian is skipped\nin UEFI after kernel/driver changes."; then
|
|
echo "Skipped."
|
|
_pause
|
|
return
|
|
fi
|
|
|
|
local efi_dir="/boot/efi"
|
|
[ ! -d "$efi_dir" ] && efi_dir="/boot"
|
|
|
|
_run_cmd "Refirm" \
|
|
"sudo apt install --reinstall -y shim-signed grub-efi-amd64-signed linux-image-amd64" \
|
|
"Reinstalling signed boot packages..."
|
|
_run_cmd "GRUB Install" \
|
|
"sudo grub-install --target=x86_64-efi --efi-directory=$efi_dir --bootloader-id=debian --recheck" \
|
|
"Reinstalling GRUB to EFI partition..."
|
|
_run_cmd "GRUB Config" \
|
|
"sudo update-grub" \
|
|
"Regenerating GRUB configuration..."
|
|
|
|
echo -e "${GREEN}Boot repair complete. Reboot to verify.${NC}"
|
|
_pause
|
|
}
|
|
|
|
_rescue_initramfs() {
|
|
if ! _confirm "Initramfs" "Regenerate initramfs for all kernels?\n\nFixes boot issues caused by missing drivers\nor corrupted initrd images."; then
|
|
echo "Skipped."
|
|
_pause
|
|
return
|
|
fi
|
|
_run_cmd "Initramfs" "sudo update-initramfs -u -k all" "Regenerating initramfs for all kernels..."
|
|
echo -e "${GREEN}Initramfs regenerated.${NC}"
|
|
_pause
|
|
}
|
|
|
|
rescue_boot() {
|
|
while true; do
|
|
local choice
|
|
choice=$(_menu "Boot Rescue & Repair" \
|
|
"Select a rescue operation${SCROLL_HINT}:" \
|
|
$TUI_ALTO $TUI_ANCHO $TUI_ALTO_LISTA \
|
|
"1" "Refirm Secure Boot (shim + GRUB)" \
|
|
"2" "Regenerate initramfs (all kernels)" \
|
|
"3" "Return to main menu")
|
|
|
|
[ -z "$choice" ] && return
|
|
clear
|
|
|
|
case "$choice" in
|
|
1) _rescue_boot_sb ;;
|
|
2) _rescue_initramfs ;;
|
|
3) return ;;
|
|
esac
|
|
done
|
|
}
|