190 lines
6.3 KiB
Bash
190 lines
6.3 KiB
Bash
|
#!/usr/bin/env bash
|
||
|
|
#-------------------------------------------------------------------------------------------------------------
|
||
|
|
# Copyright (c) Microsoft Corporation. All rights reserved.
|
||
|
|
# Licensed under the MIT License. See https://go.microsoft.com/fwlink/?linkid=2090316 for license information.
|
||
|
|
#-------------------------------------------------------------------------------------------------------------
|
||
|
|
|
||
|
|
# Syntax: ./common-debian.sh [install zsh flag] [username] [user UID] [user GID] [upgrade packages flag]
|
||
|
|
|
||
|
|
INSTALL_ZSH=${1:-"true"}
|
||
|
|
USERNAME=${2:-"vscode"}
|
||
|
|
USER_UID=${3:-1000}
|
||
|
|
USER_GID=${4:-1000}
|
||
|
|
UPGRADE_PACKAGES=${5:-"true"}
|
||
|
|
|
||
|
|
set -e
|
||
|
|
|
||
|
|
if [ "$(id -u)" -ne 0 ]; then
|
||
|
|
echo -e 'Script must be run a root. Use sudo, su, or add "USER root" to your Dockerfile before running this script.'
|
||
|
|
exit 1
|
||
|
|
fi
|
||
|
|
|
||
|
|
# Treat a user name of "none" as root
|
||
|
|
if [ "${USERNAME}" = "none" ] || [ "${USERNAME}" = "root" ]; then
|
||
|
|
USERNAME=root
|
||
|
|
USER_UID=0
|
||
|
|
USER_GID=0
|
||
|
|
fi
|
||
|
|
|
||
|
|
# Load markers to see which steps have already run
|
||
|
|
MARKER_FILE="/usr/local/etc/vscode-dev-containers/common"
|
||
|
|
if [ -f "${MARKER_FILE}" ]; then
|
||
|
|
echo "Marker file found:"
|
||
|
|
cat "${MARKER_FILE}"
|
||
|
|
source "${MARKER_FILE}"
|
||
|
|
fi
|
||
|
|
|
||
|
|
# Ensure apt is in non-interactive to avoid prompts
|
||
|
|
export DEBIAN_FRONTEND=noninteractive
|
||
|
|
|
||
|
|
# Function to call apt-get if needed
|
||
|
|
apt-get-update-if-needed()
|
||
|
|
{
|
||
|
|
if [ ! -d "/var/lib/apt/lists" ] || [ "$(ls /var/lib/apt/lists/ | wc -l)" = "0" ]; then
|
||
|
|
echo "Running apt-get update..."
|
||
|
|
apt-get update
|
||
|
|
else
|
||
|
|
echo "Skipping apt-get update."
|
||
|
|
fi
|
||
|
|
}
|
||
|
|
|
||
|
|
# Run install apt-utils to avoid debconf warning then verify presence of other common developer tools and dependencies
|
||
|
|
if [ "${PACKAGES_ALREADY_INSTALLED}" != "true" ]; then
|
||
|
|
apt-get-update-if-needed
|
||
|
|
|
||
|
|
PACKAGE_LIST="apt-utils \
|
||
|
|
git \
|
||
|
|
openssh-client \
|
||
|
|
less \
|
||
|
|
iproute2 \
|
||
|
|
procps \
|
||
|
|
curl \
|
||
|
|
wget \
|
||
|
|
unzip \
|
||
|
|
zip \
|
||
|
|
nano \
|
||
|
|
jq \
|
||
|
|
lsb-release \
|
||
|
|
ca-certificates \
|
||
|
|
apt-transport-https \
|
||
|
|
dialog \
|
||
|
|
gnupg2 \
|
||
|
|
libc6 \
|
||
|
|
libgcc1 \
|
||
|
|
libgssapi-krb5-2 \
|
||
|
|
libicu[0-9][0-9] \
|
||
|
|
liblttng-ust0 \
|
||
|
|
libstdc++6 \
|
||
|
|
zlib1g \
|
||
|
|
locales \
|
||
|
|
sudo"
|
||
|
|
|
||
|
|
# Install libssl1.1 if available
|
||
|
|
if [[ ! -z $(apt-cache --names-only search ^libssl1.1$) ]]; then
|
||
|
|
PACKAGE_LIST="${PACKAGE_LIST} libssl1.1"
|
||
|
|
fi
|
||
|
|
|
||
|
|
# Install appropriate version of libssl1.0.x if available
|
||
|
|
LIBSSL=$(dpkg-query -f '${db:Status-Abbrev}\t${binary:Package}\n' -W 'libssl1\.0\.?' 2>&1 || echo '')
|
||
|
|
if [ "$(echo "$LIBSSL" | grep -o 'libssl1\.0\.[0-9]:' | uniq | sort | wc -l)" -eq 0 ]; then
|
||
|
|
if [[ ! -z $(apt-cache --names-only search ^libssl1.0.2$) ]]; then
|
||
|
|
# Debian 9
|
||
|
|
PACKAGE_LIST="${PACKAGE_LIST} libssl1.0.2"
|
||
|
|
elif [[ ! -z $(apt-cache --names-only search ^libssl1.0.0$) ]]; then
|
||
|
|
# Ubuntu 18.04, 16.04, earlier
|
||
|
|
PACKAGE_LIST="${PACKAGE_LIST} libssl1.0.0"
|
||
|
|
fi
|
||
|
|
fi
|
||
|
|
|
||
|
|
echo "Packages to verify are installed: ${PACKAGE_LIST}"
|
||
|
|
apt-get -y install --no-install-recommends ${PACKAGE_LIST} 2> >( grep -v 'debconf: delaying package configuration, since apt-utils is not installed' >&2 )
|
||
|
|
|
||
|
|
PACKAGES_ALREADY_INSTALLED="true"
|
||
|
|
fi
|
||
|
|
|
||
|
|
# Get to latest versions of all packages
|
||
|
|
if [ "${UPGRADE_PACKAGES}" = "true" ]; then
|
||
|
|
apt-get-update-if-needed
|
||
|
|
apt-get -y upgrade --no-install-recommends
|
||
|
|
apt-get autoremove -y
|
||
|
|
fi
|
||
|
|
|
||
|
|
# Ensure at least the en_US.UTF-8 UTF-8 locale is available.
|
||
|
|
# Common need for both applications and things like the agnoster ZSH theme.
|
||
|
|
if [ "${LOCALE_ALREADY_SET}" != "true" ]; then
|
||
|
|
echo "en_US.UTF-8 UTF-8" >> /etc/locale.gen
|
||
|
|
locale-gen
|
||
|
|
LOCALE_ALREADY_SET="true"
|
||
|
|
fi
|
||
|
|
|
||
|
|
# Create or update a non-root user to match UID/GID - see https://aka.ms/vscode-remote/containers/non-root-user.
|
||
|
|
if id -u $USERNAME > /dev/null 2>&1; then
|
||
|
|
# User exists, update if needed
|
||
|
|
if [ "$USER_GID" != "$(id -G $USERNAME)" ]; then
|
||
|
|
groupmod --gid $USER_GID $USERNAME
|
||
|
|
usermod --gid $USER_GID $USERNAME
|
||
|
|
fi
|
||
|
|
if [ "$USER_UID" != "$(id -u $USERNAME)" ]; then
|
||
|
|
usermod --uid $USER_UID $USERNAME
|
||
|
|
fi
|
||
|
|
else
|
||
|
|
# Create user
|
||
|
|
groupadd --gid $USER_GID $USERNAME
|
||
|
|
useradd -s /bin/bash --uid $USER_UID --gid $USER_GID -m $USERNAME
|
||
|
|
fi
|
||
|
|
|
||
|
|
# Add add sudo support for non-root user
|
||
|
|
if [ "${USERNAME}" != "root" ] && [ "${EXISTING_NON_ROOT_USER}" != "${USERNAME}" ]; then
|
||
|
|
echo $USERNAME ALL=\(root\) NOPASSWD:ALL > /etc/sudoers.d/$USERNAME
|
||
|
|
chmod 0440 /etc/sudoers.d/$USERNAME
|
||
|
|
EXISTING_NON_ROOT_USER="${USERNAME}"
|
||
|
|
fi
|
||
|
|
|
||
|
|
# .bashrc/.zshrc snippet
|
||
|
|
RC_SNIPPET="$(cat << EOF
|
||
|
|
export USER=\$(whoami)
|
||
|
|
|
||
|
|
export PATH=\$PATH:\$HOME/.local/bin
|
||
|
|
|
||
|
|
if [[ \$(which code-insiders 2>&1) && ! \$(which code 2>&1) ]]; then
|
||
|
|
alias code=code-insiders
|
||
|
|
fi
|
||
|
|
EOF
|
||
|
|
)"
|
||
|
|
|
||
|
|
# Ensure ~/.local/bin is in the PATH for root and non-root users for bash. (zsh is later)
|
||
|
|
if [ "${RC_SNIPPET_ALREADY_ADDED}" != "true" ]; then
|
||
|
|
echo "${RC_SNIPPET}" | tee -a /root/.bashrc >> /etc/skel/.bashrc
|
||
|
|
if [ "${USERNAME}" != "root" ]; then
|
||
|
|
echo "${RC_SNIPPET}" >> /home/$USERNAME/.bashrc
|
||
|
|
chown $USER_UID:$USER_GID /home/$USERNAME/.bashrc
|
||
|
|
fi
|
||
|
|
RC_SNIPPET_ALREADY_ADDED="true"
|
||
|
|
fi
|
||
|
|
|
||
|
|
# Optionally install and configure zsh
|
||
|
|
if [ "${INSTALL_ZSH}" = "true" ] && [ ! -d "/root/.oh-my-zsh" ] && [ "${ZSH_ALREADY_INSTALLED}" != "true" ]; then
|
||
|
|
apt-get-update-if-needed
|
||
|
|
apt-get install -y zsh
|
||
|
|
curl -fsSLo- https://raw.github.com/ohmyzsh/ohmyzsh/master/tools/install.sh | bash 2>&1
|
||
|
|
echo -e "${RC_SNIPPET}\nDEFAULT_USER=\$USER\nprompt_context(){}" >> /root/.zshrc
|
||
|
|
cp -fR /root/.oh-my-zsh /etc/skel
|
||
|
|
cp -f /root/.zshrc /etc/skel
|
||
|
|
sed -i -e "s/\/root\/.oh-my-zsh/\/home\/\$(whoami)\/.oh-my-zsh/g" /etc/skel/.zshrc
|
||
|
|
if [ "${USERNAME}" != "root" ]; then
|
||
|
|
cp -fR /etc/skel/.oh-my-zsh /etc/skel/.zshrc /home/$USERNAME
|
||
|
|
chown -R $USER_UID:$USER_GID /home/$USERNAME/.oh-my-zsh /home/$USERNAME/.zshrc
|
||
|
|
fi
|
||
|
|
ZSH_ALREADY_INSTALLED="true"
|
||
|
|
fi
|
||
|
|
|
||
|
|
# Write marker file
|
||
|
|
mkdir -p "$(dirname "${MARKER_FILE}")"
|
||
|
|
echo -e "\
|
||
|
|
PACKAGES_ALREADY_INSTALLED=${PACKAGES_ALREADY_INSTALLED}\n\
|
||
|
|
LOCALE_ALREADY_SET=${LOCALE_ALREADY_SET}\n\
|
||
|
|
EXISTING_NON_ROOT_USER=${EXISTING_NON_ROOT_USER}\n\
|
||
|
|
RC_SNIPPET_ALREADY_ADDED=${RC_SNIPPET_ALREADY_ADDED}\n\
|
||
|
|
ZSH_ALREADY_INSTALLED=${ZSH_ALREADY_INSTALLED}" > "${MARKER_FILE}"
|
||
|
|
|
||
|
|
echo "Done!"
|