rice.sh (7061B)
1 #!/bin/sh 2 set -e 3 WORKDIRECTORY=$PWD 4 5 if [ "$(id -u)" -ne 0 ] 6 then printf "The script has to be run as root.\n" 7 exit 8 fi 9 10 if [ -x "$(command -v doas)" ]; then 11 PERMUSER=$DOAS_USER 12 evalcommand="doas -u $PERMUSER" 13 cp /etc/doas.conf /etc/doas.bak 14 echo "permit nopass :wheel" > /etc/doas.conf 15 echo "permit nopass root" >> /etc/doas.conf 16 else 17 PERMUSER=$SUDO_USER 18 evalcommand="sudo -u $PERMUSER" 19 echo "%wheel ALL=(ALL) NOPASSWD: ALL 20 Defaults:%wheel,root runcwd=*" >/etc/sudoers.d/temp 21 fi 22 23 run_as_user() { 24 $evalcommand "$@" 25 } 26 27 usermod -aG seat $PERMUSER 28 29 DEPLIST="`sed -e 's/#.*$//' -e '/^$/d' dependencies.txt | tr '\n' ' '`" 30 pacman -Sy --noconfirm 31 pacman -S $DEPLIST --noconfirm --needed 32 33 run_as_user cp -r "$WORKDIRECTORY"/.config /home/"$PERMUSER" 34 run_as_user cp -r "$WORKDIRECTORY"/.local /home/"$PERMUSER" 35 run_as_user cp -a "$WORKDIRECTORY"/.zprofile /home/"$PERMUSER" 36 37 run_as_user mkdir -p /home/"$PERMUSER"/.config/git 38 run_as_user touch /home/"$PERMUSER"/.config/git/config 39 run_as_user mkdir -p /home/"$PERMUSER"/.config/npm 40 run_as_user touch /home/"$PERMUSER"/.config/npm/npmrc 41 run_as_user mkdir -p /home/"$PERMUSER"/.cache/zsh 42 run_as_user mkdir -p /home/"$PERMUSER"/.config/mpd/playlists 43 run_as_user mkdir -p /home/"$PERMUSER"/.local/share/themes 44 run_as_user mkdir -p /home/"$PERMUSER"/.local/share/icons 45 46 cd "$WORKDIRECTORY" || exit 47 run_as_user git clone https://github.com/zdharma-continuum/fast-syntax-highlighting 48 mkdir -p /usr/share/zsh/plugins 49 cp -rf fast-syntax-highlighting /usr/share/zsh/plugins 50 cd "$WORKDIRECTORY" 51 52 run_as_user mkdir -p /home/"$PERMUSER"/.ssh 53 run_as_user mkdir -p /home/"$PERMUSER"/.gnupg 54 run_as_user touch /home/"$PERMUSER"/.gnupg/gpg-agent.conf 55 56 cat <<EOL >> /home/$PERMUSER/.gnupg/gpg-agent.conf 57 enable-ssh-support 58 pinentry-program /usr/bin/pinentry-gnome3 59 default-cache-ttl 34560000 60 max-cache-ttl 34560000 61 EOL 62 63 cat <<EOL >> /home/$PERMUSER/.config/npm/npmrc 64 prefix=\${XDG_DATA_HOME}/npm 65 cache=\${XDG_CACHE_HOME}/npm 66 init-module=\${XDG_CONFIG_HOME}/npm/config/npm-init.js 67 logs-dir=\${XDG_STATE_HOME}/npm/logs 68 EOL 69 70 run_as_user find /home/"$PERMUSER"/.gnupg -type f -exec chmod 600 {} \; 71 run_as_user find /home/"$PERMUSER"/.gnupg -type d -exec chmod 700 {} \; 72 run_as_user find /home/"$PERMUSER"/.ssh -type f -exec chmod 600 {} \; 73 run_as_user find /home/"$PERMUSER"/.ssh -type d -exec chmod 700 {} \; 74 75 chsh -s /bin/zsh "$PERMUSER" 76 77 # Make pacman colorful, concurrent downloads and Pacman eye-candy. 78 grep -q "ILoveCandy" /etc/pacman.conf || sed -i "/#VerbosePkgLists/a ILoveCandy" /etc/pacman.conf 79 sed -Ei "s/^#(ParallelDownloads).*/\1 = 5/;/^#Color$/s/#//" /etc/pacman.conf 80 81 # Disable Pacman sandbox since kernel doesn't support landlock (only for custom kernels from my artix script) 82 # sed -Ei "s/^#(DisableSandbox).*/\1/" /etc/pacman.conf 83 84 # Use all cores for compilation. 85 sed -i "s/-j2/-j$(nproc)/;/^#MAKEFLAGS/s/^#//" /etc/makepkg.conf 86 87 if [ -x "$(command -v doas)" ]; then 88 # Use doas for Pacman authentification 89 sed -i 's/#PACMAN_AUTH=.*$/PACMAN_AUTH=(doas)/' /etc/makepkg.conf 90 fi 91 92 cat <<EOL >> /usr/share/libalpm/hooks/statusbar.hook 93 [Trigger] 94 Operation = Upgrade 95 Type = Package 96 Target = * 97 98 [Action] 99 Description = Updating statusbar... 100 When = PostTransaction 101 Exec = /usr/bin/pkill -RTMIN+8 i3blocks 102 EOL 103 104 cat <<EOL >> /etc/pacman.d/hooks/sing-box.hook 105 [Trigger] 106 Type = Package 107 Operation = Install 108 Operation = Upgrade 109 Target = sing-box 110 111 [Action] 112 Description = Setting rights for sing-box... 113 When = PostTransaction 114 Exec = /usr/bin/setcap cap_net_admin=ep /usr/sbin/sing-box 115 EOL 116 117 run_as_user git clone https://aur.archlinux.org/paru.git 118 cd paru 119 run_as_user makepkg -csi --noconfirm 120 cd "$WORKDIRECTORY" 121 DEPLIST="`sed -e 's/#.*$//' -e '/^$/d' aurdeps.txt | tr '\n' ' '`" 122 run_as_user paru --sudo doas -S $DEPLIST --noconfirm 123 run_as_user dbus-launch gsettings set org.gnome.desktop.interface gtk-theme "Nordic" 124 run_as_user dbus-launch gsettings set org.gnome.desktop.wm.preferences theme "Nordic" 125 run_as_user dbus-launch gsettings set org.gnome.desktop.wm.preferences button-layout 'appmenu' 126 run_as_user dbus-launch gsettings set org.gnome.desktop.interface font-name "Sans 11" 127 cd .. 128 rm -rf swaydots 129 rm -rf paru 130 rm -rf go 131 132 dinitctl enable cronie 133 echo "*/30 * * * * export DBUS_SESSION_BUS_ADDRESS=\$(rg --null-data \"DBUS_SESSION_BUS_ADDRESS\" \"/proc/\$(pgrep -x swaybar)/environ\" | sed 's/DBUS_SESSION_BUS_ADDRESS=//'); /home/$PERMUSER/.local/bin/cron/newsup 134 */30 * * * * export DBUS_SESSION_BUS_ADDRESS=\$(rg --null-data \"DBUS_SESSION_BUS_ADDRESS\" \"/proc/\$(pgrep -x swaybar)/environ\" | sed 's/DBUS_SESSION_BUS_ADDRESS=//'); /home/$PERMUSER/.local/bin/cron/checkup 135 */10 * * * * export DBUS_SESSION_BUS_ADDRESS=\$(rg --null-data \"DBUS_SESSION_BUS_ADDRESS\" \"/proc/\$(pgrep -x swaybar)/environ\" | sed 's/DBUS_SESSION_BUS_ADDRESS=//'); /home/$PERMUSER/.local/bin/cron/mailup" | run_as_user crontab - 136 137 run_as_user git clone https://git.awy.one/mutt-wizard /home/"$PERMUSER"/mutt-wizard 138 cd /home/"$PERMUSER"/mutt-wizard 139 make install 140 141 cd /home/"$PERMUSER" 142 run_as_user git clone https://git.awy.one/autofox 143 cd autofox 144 run_as_user ./configure_firefox.sh 145 cd /home/"$PERMUSER" 146 147 run_as_user git clone https://git.awy.one/mew 148 cd /home/"$PERMUSER"/mew 149 make install 150 cd /home/"$PERMUSER" 151 152 rm -rf autofox 153 rm -rf mutt-wizard 154 rm -rf mew 155 156 # MPV 157 thumbfastlua_url=https://raw.githubusercontent.com/po5/thumbfast/refs/heads/master/thumbfast.lua 158 thumbfastconf_url=https://raw.githubusercontent.com/po5/thumbfast/refs/heads/master/thumbfast.conf 159 sponsorblock_url=https://codeberg.org/jouni/mpv_sponsorblock_minimal/raw/branch/master/sponsorblock_minimal.lua 160 config_dir="/home/$PERMUSER/.config/mpv" 161 scriptopts_dir="$config_dir/script-opts" 162 163 run_as_user mkdir -p "$config_dir/scripts" 164 run_as_user mkdir -p $scriptopts_dir || echo "Couldn't create: $scriptopts_dir" 165 166 # thumbfast 167 run_as_user curl -Ls -o "$config_dir/scripts/thumbfast.lua" $thumbfastlua_url || echo "Couldn't download: $thumbfastlua_url" 168 run_as_user curl -Ls -o "$scriptopts_dir/thumbfast.conf" $thumbfastconf_url || echo "Couldn't download: $thumbfastconf_url" 169 sed -Ei "s/(network).*/\1=yes/" "$scriptopts_dir/thumbfast.conf" 170 171 # sponsorblock 172 run_as_user curl -Ls -o "$config_dir/scripts/sponsorblock_minimal.lua" $sponsorblock_url || echo "Couldn't download: $sponsorblock_url" 173 174 # necessary symlinks (pass for mutt-wizard and bemenu for tessen) 175 ln -s /bin/gopass /bin/pass 176 ln -s /usr/local/bin/mew /bin/bemenu 177 178 # pam 179 sed -i '/auth[[:space:]]*include[[:space:]]*system-local-login/a auth optional pam_gnome_keyring.so' /etc/pam.d/login 180 sed -i '/session[[:space:]]*include[[:space:]]*system-local-login/a session optional pam_gnome_keyring.so auto_start' /etc/pam.d/login 181 echo "password optional pam_gnome_keyring.so" >> /etc/pam.d/passwd 182 183 yes | run_as_user paru --sudo doas -Scc 184 rm -rf /home/"$PERMUSER"/.cargo 185 186 if [ -x "$(command -v doas)" ]; then 187 rm /etc/doas.conf 188 mv /etc/doas.bak /etc/doas.conf 189 else 190 rm /etc/sudoers.d/temp 191 fi 192 193 chown -R $PERMUSER:wheel /home/$PERMUSER 194 195 # cleanup 196 rm -rf /home/$PERMUSER/.cache/go-build 197 198 echo "Your linux is riced!"