#!/bin/sh -e
-# move backup to /var
-if [ -d /home/martin/backup ] && [ ! -d /var/backups/martin ]; then
- cp -a /home/martin/backup /var/backups/martin
- rm -rf /home/martin/backup
-fi
-
-# install already shipped debs
-[ -e /mirror ] || ln -s /home/ubuntu-mirror /mirror
-mount -o loop /home/martin/download/ubuntu/gutsy-alternate-amd64.iso /cdrom
-apt-cdrom -m add
-DEBIAN_FRONTEND=noninteractive apt-get -y install build-essential fakeroot devscripts postfix openssh-server bzr
+# need bzr and postfix for the setup below
+DEBIAN_FRONTEND=noninteractive apt-get -y install --no-install-recommends postfix openssh-server bzr python-paramiko apt-cacher-ng eatmydata
# root's ssh stuff
-if [ ! -d /root/ssh ]; then
+if [ ! -d /root/.ssh ] && [ -d /home/martin/.ssh ]; then
mkdir -p /root/.ssh
chmod 700 /root/.ssh
- cp /home/martin/.ssh/id_dsa* /home/martin/.ssh/known_hosts /home/martin/.ssh/config /root/.ssh/
+ cp /home/martin/.ssh/id_rsa* /home/martin/.ssh/known_hosts /home/martin/.ssh/config /root/.ssh/
fi
# restore /etc bzr branch, rescue the files we do not want to restore
# completely
cd /etc
if [ ! -d /etc/.bzr ]; then
- for i in passwd group shadow fstab; do
- cp $i $i.originst
- done
- bzr get bzr+ssh://martin@piware.de/home/martin/backup/desktop-etc /desktop-etc
- cp -av /desktop-etc/* /etc/
- cp -av /desktop-etc/.bzr/ /etc/
- rm -rf /desktop-etc
+ [ -e /backup-etc ] || bzr branch bzr+ssh://martin@piware.de/home/martin/backup/`hostname`-etc /backup-etc
+ cp -av /backup-etc/* /etc/
+ cp -av /backup-etc/.bzr/ /etc/
+ rm -rf /backup-etc
chmod 600 /etc/ssh/ssh_*_key
+ chmod 700 /etc/ssl/private
+ chmod 640 /etc/ssl/private/ssl-cert-*
+ chown root:ssl-cert /etc/ssl/private/ssl-cert*
+ echo "none /tmp tmpfs defaults 0 0" >> /etc/fstab
fi
-# only restore dchroot part into fstab
-grep -A 200 "^# dchroots" fstab >> fstab.originst
-mv fstab.originst fstab
-
-# only restore the human users from passwd/group
-for i in passwd group; do
- perl -naF: -e 'print if $F[2] > 1000 && $F[2] < 60000' $i >> $i.originst
- mv $i.originst $i
-done
-
-# only restore some passwords from shadow
-egrep 'martin|netti|test|joe' shadow >> shadow.originst
-mv shadow.originst shadow
-
# update postfix for new configuration
newaliases
/etc/init.d/postfix restart
-# copy apt cache
-if [ -d /home/aptcache ]; then
- find /home/aptcache/ -name "*.deb" -exec cp '{}' /var/cache/apt/archives/ \;
- rm -rf /home/aptcache
-fi
-
-# other setup
-dpkg -i /home/martin/download/libdvdcss2_*deb || true
-locale-gen ru_RU ru_RU.UTF-8
-
-# cronjob goo
-killall apt-get || true
-
# remove packages that we do not need
-apt-get remove --purge -y --auto-remove hplip brltty bluez-cups gnome-accessibility-themes gnome-mag gnome-orca onboard tomboy ttf-arabeyes ttf-arphic-ukai ttf-arphic-uming ttf-baekmuk ttf-gentium ttf-indic-fonts ttf-kochi-gothic ttf-kochi-mincho ttf-lao ttf-malayalam-fonts ttf-mgopen ttf-thai-tlwg
-
-rm /etc/rcS.d/*pcmcia* /etc/rcS.d/*ppp*
-
-# cronjob goo
-killall apt-get || true
+killall apt-get || true # cronjob goo
+apt-get install -y linux-signed-image-generic
+apt-get purge -y --auto-remove hplip hplip-data printer-driver-hpcups brltty bluez-cups gnome-accessibility-themes gnome-orca onboard thunderbird deja-dup gnome-screensaver linux-headers-generic linux-generic || true
# install packages from network sources
-apt-get update -o Acquire::Http::No-Cache=true
-
-DEBIAN_FRONTEND=noninteractive apt-get install -y --force-yes vim bzrtools bzr-svn python-paramiko patchutils offlineimap wipe gnome-gpg diffstat dchroot gtimelog rsnapshot jigdo-file libtool devhelp python-doc manpages-dev gstreamer0.10-plugins-ugly gstreamer0.10-plugins-bad gstreamer0.10-plugins-bad-multiverse gstreamer0.10-plugins-ugly-multiverse gstreamer0.10-ffmpeg weechat weechat-plugins weechat-scripts dpatch wdiff dhcp3-server grep-dctrl ccache subversion listadmin quilt apache2 python-dev cryptsetup mutt editmoin lintian ia32-libs easytag latex-beamer python-gtk2-doc
-apt-get -y build-dep postgresql-8.2 gnome-volume-manager hal cupsys apport restricted-manager
-
-umount /cdrom
-
-# other setup
-ln -s /mirror /var/www/mirror
-ifdown eth1
-ifup eth1
-/etc/init.d/dhcp3-server restart
-patch /usr/bin/gtimelog ~martin/archiv/gtimelog.wednesday.patch
+killall apt-get || true
+apt-get update
+
+DEBIAN_FRONTEND=noninteractive eatmydata apt-get install --no-install-recommends -y --force-yes vim patchutils offlineimap diffstat gtimelog devhelp python3-doc manpages-dev weechat weechat-plugins weechat-scripts python-notify2 listadmin quilt mutt editmoin lintian ubuntu-dev-tools dput easytag texlive-lang-german texlive-latex-extra powertop qemu-kvm qemu-utils bzr-buildpackage git build-essential fakeroot devscripts libglib2.0-doc git-buildpackage d-feet libnotify-bin pastebinit lptools openvpn pdfjam sbuild schroot exiv2 gstreamer1.0-plugins-ugly gstreamer1.0-libav valgrind calibre autopkgtest
+eatmydata apt-get install -y lxc lxd pandoc lmodern texlive-fonts-recommended pep8 pyflakes pssh network-manager-openvpn-gnome i3-wm i3status
+
+# have schroot use tmpfs
+rmdir /var/lib/schroot/unpack /var/lib/schroot/union/overlay/
+ln -s /tmp /var/lib/schroot/unpack
+ln -s /tmp /var/lib/schroot/union/overlay
+
+# set up users
+echo "Setting up users"
+adduser martin sbuild
+if ! getent passwd joe > /dev/null; then
+ adduser --gecos "Joe" --encrypt-home joe
+ adduser joe audio
+ adduser joe video
+fi
# crontabs
crontab -u martin - <<EOF
projects / bin.git / blobdiff