]> git.ipfire.org Git - thirdparty/systemd.git/blame - src/firstboot/firstboot.c
random-util: change high_quality_required bool parameter into a flags parameter
[thirdparty/systemd.git] / src / firstboot / firstboot.c
CommitLineData
53e1b683 1/* SPDX-License-Identifier: LGPL-2.1+ */
418b9be5 2
418b9be5 3#include <fcntl.h>
418b9be5 4#include <getopt.h>
3f6fd1ba 5#include <unistd.h>
418b9be5 6
545cdb90 7#if HAVE_CRYPT_H
9f555bba
BE
8/* libxcrypt is a replacement for glibc's libcrypt, and libcrypt might be
9 * removed from glibc at some point. As part of the removal, defines for
10 * crypt(3) are dropped from unistd.h, and we must include crypt.h instead.
11 *
12 * Newer versions of glibc (v2.0+) already ship crypt.h with a definition
13 * of crypt(3) as well, so we simply include it if it is present. MariaDB,
14 * MySQL, PostgreSQL, Perl and some other wide-spread packages do it the
15 * same way since ages without any problems.
16 */
17# include <crypt.h>
18#endif
19
dccca82b
LP
20#include "sd-id128.h"
21
b5efdb8a 22#include "alloc-util.h"
3f6fd1ba 23#include "ask-password-api.h"
418b9be5 24#include "copy.h"
6bedfcbb 25#include "fd-util.h"
3f6fd1ba 26#include "fileio.h"
f4f15635 27#include "fs-util.h"
3f6fd1ba
LP
28#include "hostname-util.h"
29#include "locale-util.h"
418b9be5 30#include "mkdir.h"
d58ad743 31#include "os-util.h"
6bedfcbb 32#include "parse-util.h"
418b9be5 33#include "path-util.h"
f582cbca 34#include "proc-cmdline.h"
3df3e884 35#include "random-util.h"
6bedfcbb 36#include "string-util.h"
3f6fd1ba 37#include "strv.h"
288a74cc 38#include "terminal-util.h"
3f6fd1ba 39#include "time-util.h"
affb60b1 40#include "umask-util.h"
e929bee0 41#include "user-util.h"
418b9be5
LP
42
43static char *arg_root = NULL;
44static char *arg_locale = NULL; /* $LANG */
ed457f13 45static char *arg_keymap = NULL;
418b9be5
LP
46static char *arg_locale_messages = NULL; /* $LC_MESSAGES */
47static char *arg_timezone = NULL;
48static char *arg_hostname = NULL;
49static sd_id128_t arg_machine_id = {};
50static char *arg_root_password = NULL;
51static bool arg_prompt_locale = false;
ed457f13 52static bool arg_prompt_keymap = false;
418b9be5
LP
53static bool arg_prompt_timezone = false;
54static bool arg_prompt_hostname = false;
55static bool arg_prompt_root_password = false;
56static bool arg_copy_locale = false;
ed457f13 57static bool arg_copy_keymap = false;
418b9be5
LP
58static bool arg_copy_timezone = false;
59static bool arg_copy_root_password = false;
60
418b9be5
LP
61static bool press_any_key(void) {
62 char k = 0;
63 bool need_nl = true;
64
65 printf("-- Press any key to proceed --");
66 fflush(stdout);
67
94956f8f 68 (void) read_one_char(stdin, &k, USEC_INFINITY, &need_nl);
418b9be5
LP
69
70 if (need_nl)
71 putchar('\n');
72
73 return k != 'q';
74}
75
76static void print_welcome(void) {
77 _cleanup_free_ char *pretty_name = NULL;
418b9be5
LP
78 static bool done = false;
79 int r;
80
81 if (done)
82 return;
83
d58ad743
LP
84 r = parse_os_release(arg_root, "PRETTY_NAME", &pretty_name, NULL);
85 if (r < 0)
86 log_full_errno(r == -ENOENT ? LOG_DEBUG : LOG_WARNING, r,
87 "Failed to read os-release file, ignoring: %m");
418b9be5
LP
88
89 printf("\nWelcome to your new installation of %s!\nPlease configure a few basic system settings:\n\n",
90 isempty(pretty_name) ? "Linux" : pretty_name);
91
92 press_any_key();
93
94 done = true;
95}
96
97static int show_menu(char **x, unsigned n_columns, unsigned width, unsigned percentage) {
418b9be5 98 unsigned break_lines, break_modulo;
da6053d0 99 size_t n, per_column, i, j;
418b9be5
LP
100
101 assert(n_columns > 0);
102
103 n = strv_length(x);
be6b0c21 104 per_column = DIV_ROUND_UP(n, n_columns);
418b9be5
LP
105
106 break_lines = lines();
107 if (break_lines > 2)
108 break_lines--;
109
110 /* The first page gets two extra lines, since we want to show
111 * a title */
112 break_modulo = break_lines;
113 if (break_modulo > 3)
114 break_modulo -= 3;
115
116 for (i = 0; i < per_column; i++) {
117
118 for (j = 0; j < n_columns; j ++) {
119 _cleanup_free_ char *e = NULL;
120
121 if (j * per_column + i >= n)
122 break;
123
124 e = ellipsize(x[j * per_column + i], width, percentage);
125 if (!e)
126 return log_oom();
127
da6053d0 128 printf("%4zu) %-*s", j * per_column + i + 1, width, e);
418b9be5
LP
129 }
130
131 putchar('\n');
132
133 /* on the first screen we reserve 2 extra lines for the title */
134 if (i % break_lines == break_modulo) {
135 if (!press_any_key())
136 return 0;
137 }
138 }
139
140 return 0;
141}
142
143static int prompt_loop(const char *text, char **l, bool (*is_valid)(const char *name), char **ret) {
144 int r;
145
146 assert(text);
147 assert(is_valid);
148 assert(ret);
149
150 for (;;) {
151 _cleanup_free_ char *p = NULL;
152 unsigned u;
153
323b7dc9 154 r = ask_string(&p, "%s %s (empty to skip): ", special_glyph(TRIANGULAR_BULLET), text);
23bbb0de
MS
155 if (r < 0)
156 return log_error_errno(r, "Failed to query user: %m");
418b9be5
LP
157
158 if (isempty(p)) {
159 log_warning("No data entered, skipping.");
160 return 0;
161 }
162
163 r = safe_atou(p, &u);
164 if (r >= 0) {
165 char *c;
166
167 if (u <= 0 || u > strv_length(l)) {
168 log_error("Specified entry number out of range.");
169 continue;
170 }
171
172 log_info("Selected '%s'.", l[u-1]);
173
174 c = strdup(l[u-1]);
175 if (!c)
176 return log_oom();
177
178 free(*ret);
179 *ret = c;
180 return 0;
181 }
182
183 if (!is_valid(p)) {
184 log_error("Entered data invalid.");
185 continue;
186 }
187
188 free(*ret);
189 *ret = p;
190 p = 0;
191 return 0;
192 }
193}
194
195static int prompt_locale(void) {
196 _cleanup_strv_free_ char **locales = NULL;
197 int r;
198
199 if (arg_locale || arg_locale_messages)
200 return 0;
201
202 if (!arg_prompt_locale)
203 return 0;
204
205 r = get_locales(&locales);
23bbb0de
MS
206 if (r < 0)
207 return log_error_errno(r, "Cannot query locales list: %m");
418b9be5
LP
208
209 print_welcome();
210
211 printf("\nAvailable Locales:\n\n");
212 r = show_menu(locales, 3, 22, 60);
213 if (r < 0)
214 return r;
215
216 putchar('\n');
217
218 r = prompt_loop("Please enter system locale name or number", locales, locale_is_valid, &arg_locale);
219 if (r < 0)
220 return r;
221
222 if (isempty(arg_locale))
223 return 0;
224
225 r = prompt_loop("Please enter system message locale name or number", locales, locale_is_valid, &arg_locale_messages);
226 if (r < 0)
227 return r;
228
229 return 0;
230}
231
232static int process_locale(void) {
233 const char *etc_localeconf;
234 char* locales[3];
235 unsigned i = 0;
236 int r;
237
1d13f648 238 etc_localeconf = prefix_roota(arg_root, "/etc/locale.conf");
b3cd687d 239 if (laccess(etc_localeconf, F_OK) >= 0)
418b9be5
LP
240 return 0;
241
242 if (arg_copy_locale && arg_root) {
243
244 mkdir_parents(etc_localeconf, 0755);
1c876927 245 r = copy_file("/etc/locale.conf", etc_localeconf, 0, 0644, 0, COPY_REFLINK);
418b9be5 246 if (r != -ENOENT) {
23bbb0de
MS
247 if (r < 0)
248 return log_error_errno(r, "Failed to copy %s: %m", etc_localeconf);
418b9be5
LP
249
250 log_info("%s copied.", etc_localeconf);
251 return 0;
252 }
253 }
254
255 r = prompt_locale();
256 if (r < 0)
257 return r;
258
259 if (!isempty(arg_locale))
63c372cb 260 locales[i++] = strjoina("LANG=", arg_locale);
418b9be5 261 if (!isempty(arg_locale_messages) && !streq(arg_locale_messages, arg_locale))
63c372cb 262 locales[i++] = strjoina("LC_MESSAGES=", arg_locale_messages);
418b9be5
LP
263
264 if (i == 0)
265 return 0;
266
267 locales[i] = NULL;
268
269 mkdir_parents(etc_localeconf, 0755);
270 r = write_env_file(etc_localeconf, locales);
23bbb0de
MS
271 if (r < 0)
272 return log_error_errno(r, "Failed to write %s: %m", etc_localeconf);
418b9be5
LP
273
274 log_info("%s written.", etc_localeconf);
275 return 0;
276}
277
ed457f13
TB
278static int prompt_keymap(void) {
279 _cleanup_strv_free_ char **kmaps = NULL;
280 int r;
281
282 if (arg_keymap)
283 return 0;
284
285 if (!arg_prompt_keymap)
286 return 0;
287
288 r = get_keymaps(&kmaps);
289 if (r == -ENOENT) /* no keymaps installed */
290 return r;
291 if (r < 0)
292 return log_error_errno(r, "Failed to read keymaps: %m");
293
294 print_welcome();
295
296 printf("\nAvailable keymaps:\n\n");
297 r = show_menu(kmaps, 3, 22, 60);
298 if (r < 0)
299 return r;
300
301 putchar('\n');
302
8700b4da
ZJS
303 return prompt_loop("Please enter system keymap name or number",
304 kmaps, keymap_is_valid, &arg_keymap);
ed457f13
TB
305}
306
307static int process_keymap(void) {
308 const char *etc_vconsoleconf;
309 char **keymap;
310 int r;
311
312 etc_vconsoleconf = prefix_roota(arg_root, "/etc/vconsole.conf");
313 if (laccess(etc_vconsoleconf, F_OK) >= 0)
314 return 0;
315
316 if (arg_copy_keymap && arg_root) {
317
318 mkdir_parents(etc_vconsoleconf, 0755);
319 r = copy_file("/etc/vconsole.conf", etc_vconsoleconf, 0, 0644, 0, COPY_REFLINK);
320 if (r != -ENOENT) {
321 if (r < 0)
322 return log_error_errno(r, "Failed to copy %s: %m", etc_vconsoleconf);
323
324 log_info("%s copied.", etc_vconsoleconf);
325 return 0;
326 }
327 }
328
329 r = prompt_keymap();
330 if (r == -ENOENT)
331 return 0; /* don't fail if no keymaps are installed */
332 if (r < 0)
333 return r;
334
a7353b4d 335 if (isempty(arg_keymap))
ed457f13
TB
336 return 0;
337
a7353b4d
YW
338 keymap = STRV_MAKE(strjoina("KEYMAP=", arg_keymap));
339
340 r = mkdir_parents(etc_vconsoleconf, 0755);
341 if (r < 0)
342 return log_error_errno(r, "Failed to create the parent directory of %s: %m", etc_vconsoleconf);
343
ed457f13
TB
344 r = write_env_file(etc_vconsoleconf, keymap);
345 if (r < 0)
346 return log_error_errno(r, "Failed to write %s: %m", etc_vconsoleconf);
347
348 log_info("%s written.", etc_vconsoleconf);
349 return 0;
350}
351
089fb865
MG
352static bool timezone_is_valid_log_error(const char *name) {
353 return timezone_is_valid(name, LOG_ERR);
354}
355
418b9be5
LP
356static int prompt_timezone(void) {
357 _cleanup_strv_free_ char **zones = NULL;
358 int r;
359
360 if (arg_timezone)
361 return 0;
362
363 if (!arg_prompt_timezone)
364 return 0;
365
366 r = get_timezones(&zones);
23bbb0de
MS
367 if (r < 0)
368 return log_error_errno(r, "Cannot query timezone list: %m");
418b9be5
LP
369
370 print_welcome();
371
372 printf("\nAvailable Time Zones:\n\n");
373 r = show_menu(zones, 3, 22, 30);
374 if (r < 0)
375 return r;
376
377 putchar('\n');
378
089fb865 379 r = prompt_loop("Please enter timezone name or number", zones, timezone_is_valid_log_error, &arg_timezone);
418b9be5
LP
380 if (r < 0)
381 return r;
382
383 return 0;
384}
385
386static int process_timezone(void) {
387 const char *etc_localtime, *e;
388 int r;
389
1d13f648 390 etc_localtime = prefix_roota(arg_root, "/etc/localtime");
b3cd687d 391 if (laccess(etc_localtime, F_OK) >= 0)
418b9be5
LP
392 return 0;
393
394 if (arg_copy_timezone && arg_root) {
395 _cleanup_free_ char *p = NULL;
396
397 r = readlink_malloc("/etc/localtime", &p);
398 if (r != -ENOENT) {
23bbb0de
MS
399 if (r < 0)
400 return log_error_errno(r, "Failed to read host timezone: %m");
418b9be5
LP
401
402 mkdir_parents(etc_localtime, 0755);
4a62c710
MS
403 if (symlink(p, etc_localtime) < 0)
404 return log_error_errno(errno, "Failed to create %s symlink: %m", etc_localtime);
418b9be5
LP
405
406 log_info("%s copied.", etc_localtime);
407 return 0;
408 }
409 }
410
411 r = prompt_timezone();
412 if (r < 0)
413 return r;
414
415 if (isempty(arg_timezone))
416 return 0;
417
63c372cb 418 e = strjoina("../usr/share/zoneinfo/", arg_timezone);
418b9be5
LP
419
420 mkdir_parents(etc_localtime, 0755);
4a62c710
MS
421 if (symlink(e, etc_localtime) < 0)
422 return log_error_errno(errno, "Failed to create %s symlink: %m", etc_localtime);
418b9be5
LP
423
424 log_info("%s written", etc_localtime);
425 return 0;
426}
427
428static int prompt_hostname(void) {
429 int r;
430
431 if (arg_hostname)
432 return 0;
433
434 if (!arg_prompt_hostname)
435 return 0;
436
437 print_welcome();
438 putchar('\n');
439
440 for (;;) {
441 _cleanup_free_ char *h = NULL;
442
323b7dc9 443 r = ask_string(&h, "%s Please enter hostname for new system (empty to skip): ", special_glyph(TRIANGULAR_BULLET));
23bbb0de
MS
444 if (r < 0)
445 return log_error_errno(r, "Failed to query hostname: %m");
418b9be5
LP
446
447 if (isempty(h)) {
448 log_warning("No hostname entered, skipping.");
449 break;
450 }
451
34ad6090 452 if (!hostname_is_valid(h, true)) {
418b9be5
LP
453 log_error("Specified hostname invalid.");
454 continue;
455 }
456
34ad6090 457 /* Get rid of the trailing dot that we allow, but don't want to see */
ae691c1d 458 arg_hostname = hostname_cleanup(h);
418b9be5
LP
459 h = NULL;
460 break;
461 }
462
463 return 0;
464}
465
466static int process_hostname(void) {
467 const char *etc_hostname;
468 int r;
469
1d13f648 470 etc_hostname = prefix_roota(arg_root, "/etc/hostname");
b3cd687d 471 if (laccess(etc_hostname, F_OK) >= 0)
418b9be5
LP
472 return 0;
473
474 r = prompt_hostname();
475 if (r < 0)
476 return r;
477
478 if (isempty(arg_hostname))
479 return 0;
480
481 mkdir_parents(etc_hostname, 0755);
0675e94a
AJ
482 r = write_string_file(etc_hostname, arg_hostname,
483 WRITE_STRING_FILE_CREATE | WRITE_STRING_FILE_SYNC);
23bbb0de
MS
484 if (r < 0)
485 return log_error_errno(r, "Failed to write %s: %m", etc_hostname);
418b9be5
LP
486
487 log_info("%s written.", etc_hostname);
488 return 0;
489}
490
491static int process_machine_id(void) {
492 const char *etc_machine_id;
493 char id[SD_ID128_STRING_MAX];
494 int r;
495
1d13f648 496 etc_machine_id = prefix_roota(arg_root, "/etc/machine-id");
b3cd687d 497 if (laccess(etc_machine_id, F_OK) >= 0)
418b9be5
LP
498 return 0;
499
3bbaff3e 500 if (sd_id128_is_null(arg_machine_id))
418b9be5
LP
501 return 0;
502
503 mkdir_parents(etc_machine_id, 0755);
0675e94a
AJ
504 r = write_string_file(etc_machine_id, sd_id128_to_string(arg_machine_id, id),
505 WRITE_STRING_FILE_CREATE | WRITE_STRING_FILE_SYNC);
23bbb0de
MS
506 if (r < 0)
507 return log_error_errno(r, "Failed to write machine id: %m");
418b9be5
LP
508
509 log_info("%s written.", etc_machine_id);
510 return 0;
511}
512
513static int prompt_root_password(void) {
514 const char *msg1, *msg2, *etc_shadow;
515 int r;
516
517 if (arg_root_password)
518 return 0;
519
520 if (!arg_prompt_root_password)
521 return 0;
522
1d13f648 523 etc_shadow = prefix_roota(arg_root, "/etc/shadow");
b3cd687d 524 if (laccess(etc_shadow, F_OK) >= 0)
418b9be5
LP
525 return 0;
526
527 print_welcome();
528 putchar('\n');
529
323b7dc9
ZJS
530 msg1 = strjoina(special_glyph(TRIANGULAR_BULLET), " Please enter a new root password (empty to skip): ");
531 msg2 = strjoina(special_glyph(TRIANGULAR_BULLET), " Please enter new root password again: ");
418b9be5
LP
532
533 for (;;) {
c7b7d74e 534 _cleanup_strv_free_erase_ char **a = NULL, **b = NULL;
418b9be5 535
daa55720 536 r = ask_password_tty(-1, msg1, NULL, 0, 0, NULL, &a);
23bbb0de
MS
537 if (r < 0)
538 return log_error_errno(r, "Failed to query root password: %m");
c7b7d74e
XF
539 if (strv_length(a) != 1) {
540 log_warning("Received multiple passwords, where we expected one.");
541 return -EINVAL;
542 }
418b9be5 543
c7b7d74e 544 if (isempty(*a)) {
418b9be5
LP
545 log_warning("No password entered, skipping.");
546 break;
547 }
548
daa55720 549 r = ask_password_tty(-1, msg2, NULL, 0, 0, NULL, &b);
ab84f5b9 550 if (r < 0)
00843602 551 return log_error_errno(r, "Failed to query root password: %m");
418b9be5 552
c7b7d74e 553 if (!streq(*a, *b)) {
418b9be5 554 log_error("Entered passwords did not match, please try again.");
418b9be5
LP
555 continue;
556 }
557
c7b7d74e 558 arg_root_password = TAKE_PTR(*a);
418b9be5
LP
559 break;
560 }
561
562 return 0;
563}
564
565static int write_root_shadow(const char *path, const struct spwd *p) {
566 _cleanup_fclose_ FILE *f = NULL;
100d5f6e
FB
567 int r;
568
418b9be5
LP
569 assert(path);
570 assert(p);
571
3250929b
LP
572 RUN_WITH_UMASK(0777)
573 f = fopen(path, "wex");
418b9be5
LP
574 if (!f)
575 return -errno;
576
100d5f6e
FB
577 r = putspent_sane(p, f);
578 if (r < 0)
579 return r;
418b9be5 580
0675e94a 581 return fflush_sync_and_check(f);
418b9be5
LP
582}
583
584static int process_root_password(void) {
585
586 static const char table[] =
587 "abcdefghijklmnopqrstuvwxyz"
588 "ABCDEFGHIJKLMNOPQRSTUVWXYZ"
589 "0123456789"
590 "./";
591
592 struct spwd item = {
593 .sp_namp = (char*) "root",
ad525df8
IS
594 .sp_min = -1,
595 .sp_max = -1,
596 .sp_warn = -1,
418b9be5
LP
597 .sp_inact = -1,
598 .sp_expire = -1,
599 .sp_flag = (unsigned long) -1, /* this appears to be what everybody does ... */
600 };
45035609
LP
601
602 _cleanup_close_ int lock = -1;
418b9be5
LP
603 char salt[3+16+1+1];
604 uint8_t raw[16];
605 unsigned i;
606 char *j;
607
608 const char *etc_shadow;
609 int r;
610
1d13f648 611 etc_shadow = prefix_roota(arg_root, "/etc/shadow");
b3cd687d 612 if (laccess(etc_shadow, F_OK) >= 0)
418b9be5
LP
613 return 0;
614
45035609
LP
615 mkdir_parents(etc_shadow, 0755);
616
e929bee0 617 lock = take_etc_passwd_lock(arg_root);
45035609 618 if (lock < 0)
db260eed 619 return log_error_errno(lock, "Failed to take a lock: %m");
45035609 620
418b9be5
LP
621 if (arg_copy_root_password && arg_root) {
622 struct spwd *p;
623
624 errno = 0;
625 p = getspnam("root");
626 if (p || errno != ENOENT) {
627 if (!p) {
628 if (!errno)
629 errno = EIO;
630
e1427b13 631 return log_error_errno(errno, "Failed to find shadow entry for root: %m");
418b9be5
LP
632 }
633
634 r = write_root_shadow(etc_shadow, p);
23bbb0de
MS
635 if (r < 0)
636 return log_error_errno(r, "Failed to write %s: %m", etc_shadow);
418b9be5
LP
637
638 log_info("%s copied.", etc_shadow);
639 return 0;
640 }
641 }
642
643 r = prompt_root_password();
644 if (r < 0)
645 return r;
646
647 if (!arg_root_password)
648 return 0;
649
94d457e8 650 r = genuine_random_bytes(raw, 16, 0);
23bbb0de
MS
651 if (r < 0)
652 return log_error_errno(r, "Failed to get salt: %m");
418b9be5
LP
653
654 /* We only bother with SHA512 hashed passwords, the rest is legacy, and we don't do legacy. */
655 assert_cc(sizeof(table) == 64 + 1);
656 j = stpcpy(salt, "$6$");
657 for (i = 0; i < 16; i++)
658 j[i] = table[raw[i] & 63];
659 j[i++] = '$';
660 j[i] = 0;
661
662 errno = 0;
663 item.sp_pwdp = crypt(arg_root_password, salt);
664 if (!item.sp_pwdp) {
665 if (!errno)
4546c341 666 errno = EINVAL;
418b9be5 667
e1427b13 668 return log_error_errno(errno, "Failed to encrypt password: %m");
418b9be5
LP
669 }
670
671 item.sp_lstchg = (long) (now(CLOCK_REALTIME) / USEC_PER_DAY);
672
673 r = write_root_shadow(etc_shadow, &item);
23bbb0de
MS
674 if (r < 0)
675 return log_error_errno(r, "Failed to write %s: %m", etc_shadow);
418b9be5
LP
676
677 log_info("%s written.", etc_shadow);
678 return 0;
679}
680
37ec0fdd
LP
681static int help(void) {
682 _cleanup_free_ char *link = NULL;
683 int r;
684
685 r = terminal_urlify_man("systemd-firstboot", "1", &link);
686 if (r < 0)
687 return log_oom();
688
418b9be5
LP
689 printf("%s [OPTIONS...]\n\n"
690 "Configures basic settings of the system.\n\n"
691 " -h --help Show this help\n"
692 " --version Show package version\n"
693 " --root=PATH Operate on an alternate filesystem root\n"
694 " --locale=LOCALE Set primary locale (LANG=)\n"
695 " --locale-messages=LOCALE Set message locale (LC_MESSAGES=)\n"
ed457f13 696 " --keymap=KEYMAP Set keymap\n"
418b9be5
LP
697 " --timezone=TIMEZONE Set timezone\n"
698 " --hostname=NAME Set host name\n"
699 " --machine-ID=ID Set machine ID\n"
700 " --root-password=PASSWORD Set root password\n"
701 " --root-password-file=FILE Set root password from file\n"
702 " --prompt-locale Prompt the user for locale settings\n"
ed457f13 703 " --prompt-keymap Prompt the user for keymap settings\n"
418b9be5
LP
704 " --prompt-timezone Prompt the user for timezone\n"
705 " --prompt-hostname Prompt the user for hostname\n"
706 " --prompt-root-password Prompt the user for root password\n"
b57b0625 707 " --prompt Prompt for all of the above\n"
418b9be5 708 " --copy-locale Copy locale from host\n"
ed457f13 709 " --copy-keymap Copy keymap from host\n"
418b9be5
LP
710 " --copy-timezone Copy timezone from host\n"
711 " --copy-root-password Copy root password from host\n"
ed457f13 712 " --copy Copy locale, keymap, timezone, root password\n"
601185b4 713 " --setup-machine-id Generate a new random machine ID\n"
37ec0fdd
LP
714 "\nSee the %s for details.\n"
715 , program_invocation_short_name
716 , link
717 );
718
719 return 0;
418b9be5
LP
720}
721
722static int parse_argv(int argc, char *argv[]) {
723
724 enum {
725 ARG_VERSION = 0x100,
726 ARG_ROOT,
727 ARG_LOCALE,
728 ARG_LOCALE_MESSAGES,
ed457f13 729 ARG_KEYMAP,
418b9be5
LP
730 ARG_TIMEZONE,
731 ARG_HOSTNAME,
732 ARG_MACHINE_ID,
733 ARG_ROOT_PASSWORD,
734 ARG_ROOT_PASSWORD_FILE,
735 ARG_PROMPT,
736 ARG_PROMPT_LOCALE,
ed457f13 737 ARG_PROMPT_KEYMAP,
418b9be5
LP
738 ARG_PROMPT_TIMEZONE,
739 ARG_PROMPT_HOSTNAME,
740 ARG_PROMPT_ROOT_PASSWORD,
741 ARG_COPY,
742 ARG_COPY_LOCALE,
ed457f13 743 ARG_COPY_KEYMAP,
418b9be5
LP
744 ARG_COPY_TIMEZONE,
745 ARG_COPY_ROOT_PASSWORD,
746 ARG_SETUP_MACHINE_ID,
747 };
748
749 static const struct option options[] = {
750 { "help", no_argument, NULL, 'h' },
751 { "version", no_argument, NULL, ARG_VERSION },
752 { "root", required_argument, NULL, ARG_ROOT },
753 { "locale", required_argument, NULL, ARG_LOCALE },
754 { "locale-messages", required_argument, NULL, ARG_LOCALE_MESSAGES },
ed457f13 755 { "keymap", required_argument, NULL, ARG_KEYMAP },
418b9be5
LP
756 { "timezone", required_argument, NULL, ARG_TIMEZONE },
757 { "hostname", required_argument, NULL, ARG_HOSTNAME },
758 { "machine-id", required_argument, NULL, ARG_MACHINE_ID },
759 { "root-password", required_argument, NULL, ARG_ROOT_PASSWORD },
760 { "root-password-file", required_argument, NULL, ARG_ROOT_PASSWORD_FILE },
761 { "prompt", no_argument, NULL, ARG_PROMPT },
762 { "prompt-locale", no_argument, NULL, ARG_PROMPT_LOCALE },
ed457f13 763 { "prompt-keymap", no_argument, NULL, ARG_PROMPT_KEYMAP },
418b9be5
LP
764 { "prompt-timezone", no_argument, NULL, ARG_PROMPT_TIMEZONE },
765 { "prompt-hostname", no_argument, NULL, ARG_PROMPT_HOSTNAME },
766 { "prompt-root-password", no_argument, NULL, ARG_PROMPT_ROOT_PASSWORD },
767 { "copy", no_argument, NULL, ARG_COPY },
768 { "copy-locale", no_argument, NULL, ARG_COPY_LOCALE },
ed457f13 769 { "copy-keymap", no_argument, NULL, ARG_COPY_KEYMAP },
418b9be5
LP
770 { "copy-timezone", no_argument, NULL, ARG_COPY_TIMEZONE },
771 { "copy-root-password", no_argument, NULL, ARG_COPY_ROOT_PASSWORD },
772 { "setup-machine-id", no_argument, NULL, ARG_SETUP_MACHINE_ID },
773 {}
774 };
775
776 int r, c;
777
778 assert(argc >= 0);
779 assert(argv);
780
601185b4 781 while ((c = getopt_long(argc, argv, "h", options, NULL)) >= 0)
418b9be5
LP
782
783 switch (c) {
784
785 case 'h':
37ec0fdd 786 return help();
418b9be5
LP
787
788 case ARG_VERSION:
3f6fd1ba 789 return version();
418b9be5
LP
790
791 case ARG_ROOT:
0f03c2a4 792 r = parse_path_argument_and_warn(optarg, true, &arg_root);
0f474365 793 if (r < 0)
0f03c2a4 794 return r;
418b9be5
LP
795 break;
796
797 case ARG_LOCALE:
798 if (!locale_is_valid(optarg)) {
799 log_error("Locale %s is not valid.", optarg);
800 return -EINVAL;
801 }
802
2fc09a9c
DM
803 r = free_and_strdup(&arg_locale, optarg);
804 if (r < 0)
418b9be5
LP
805 return log_oom();
806
807 break;
808
809 case ARG_LOCALE_MESSAGES:
810 if (!locale_is_valid(optarg)) {
811 log_error("Locale %s is not valid.", optarg);
812 return -EINVAL;
813 }
814
2fc09a9c
DM
815 r = free_and_strdup(&arg_locale_messages, optarg);
816 if (r < 0)
418b9be5
LP
817 return log_oom();
818
819 break;
820
ed457f13
TB
821 case ARG_KEYMAP:
822 if (!keymap_is_valid(optarg)) {
823 log_error("Keymap %s is not valid.", optarg);
824 return -EINVAL;
825 }
826
827 r = free_and_strdup(&arg_keymap, optarg);
828 if (r < 0)
829 return log_oom();
830
831 break;
832
418b9be5 833 case ARG_TIMEZONE:
089fb865 834 if (!timezone_is_valid(optarg, LOG_ERR)) {
418b9be5
LP
835 log_error("Timezone %s is not valid.", optarg);
836 return -EINVAL;
837 }
838
2fc09a9c
DM
839 r = free_and_strdup(&arg_timezone, optarg);
840 if (r < 0)
418b9be5
LP
841 return log_oom();
842
843 break;
844
845 case ARG_ROOT_PASSWORD:
2fc09a9c
DM
846 r = free_and_strdup(&arg_root_password, optarg);
847 if (r < 0)
418b9be5 848 return log_oom();
418b9be5
LP
849 break;
850
851 case ARG_ROOT_PASSWORD_FILE:
0da16248 852 arg_root_password = mfree(arg_root_password);
418b9be5
LP
853
854 r = read_one_line_file(optarg, &arg_root_password);
23bbb0de
MS
855 if (r < 0)
856 return log_error_errno(r, "Failed to read %s: %m", optarg);
418b9be5
LP
857
858 break;
859
860 case ARG_HOSTNAME:
34ad6090 861 if (!hostname_is_valid(optarg, true)) {
418b9be5
LP
862 log_error("Host name %s is not valid.", optarg);
863 return -EINVAL;
864 }
865
ae691c1d 866 hostname_cleanup(optarg);
2fc09a9c
DM
867 r = free_and_strdup(&arg_hostname, optarg);
868 if (r < 0)
418b9be5
LP
869 return log_oom();
870
871 break;
872
873 case ARG_MACHINE_ID:
874 if (sd_id128_from_string(optarg, &arg_machine_id) < 0) {
875 log_error("Failed to parse machine id %s.", optarg);
876 return -EINVAL;
877 }
878
879 break;
880
881 case ARG_PROMPT:
ed457f13 882 arg_prompt_locale = arg_prompt_keymap = arg_prompt_timezone = arg_prompt_hostname = arg_prompt_root_password = true;
418b9be5
LP
883 break;
884
885 case ARG_PROMPT_LOCALE:
886 arg_prompt_locale = true;
887 break;
888
ed457f13
TB
889 case ARG_PROMPT_KEYMAP:
890 arg_prompt_keymap = true;
891 break;
892
418b9be5
LP
893 case ARG_PROMPT_TIMEZONE:
894 arg_prompt_timezone = true;
895 break;
896
897 case ARG_PROMPT_HOSTNAME:
898 arg_prompt_hostname = true;
899 break;
900
901 case ARG_PROMPT_ROOT_PASSWORD:
902 arg_prompt_root_password = true;
903 break;
904
905 case ARG_COPY:
ed457f13 906 arg_copy_locale = arg_copy_keymap = arg_copy_timezone = arg_copy_root_password = true;
e926f647 907 break;
418b9be5
LP
908
909 case ARG_COPY_LOCALE:
910 arg_copy_locale = true;
911 break;
912
ed457f13
TB
913 case ARG_COPY_KEYMAP:
914 arg_copy_keymap = true;
915 break;
916
418b9be5
LP
917 case ARG_COPY_TIMEZONE:
918 arg_copy_timezone = true;
919 break;
920
921 case ARG_COPY_ROOT_PASSWORD:
922 arg_copy_root_password = true;
923 break;
924
925 case ARG_SETUP_MACHINE_ID:
926
927 r = sd_id128_randomize(&arg_machine_id);
23bbb0de
MS
928 if (r < 0)
929 return log_error_errno(r, "Failed to generate randomized machine ID: %m");
418b9be5
LP
930
931 break;
932
933 case '?':
934 return -EINVAL;
935
936 default:
937 assert_not_reached("Unhandled option");
938 }
418b9be5
LP
939
940 return 1;
941}
942
943int main(int argc, char *argv[]) {
1d84ad94 944 bool enabled;
418b9be5
LP
945 int r;
946
947 r = parse_argv(argc, argv);
948 if (r <= 0)
949 goto finish;
950
951 log_set_target(LOG_TARGET_AUTO);
952 log_parse_environment();
953 log_open();
954
955 umask(0022);
956
1d84ad94
LP
957 r = proc_cmdline_get_bool("systemd.firstboot", &enabled);
958 if (r < 0) {
0cab6f7d 959 log_error_errno(r, "Failed to parse systemd.firstboot= kernel command line argument, ignoring: %m");
1d84ad94
LP
960 goto finish;
961 }
962 if (r > 0 && !enabled) {
963 r = 0; /* disabled */
964 goto finish;
f582cbca
LP
965 }
966
418b9be5
LP
967 r = process_locale();
968 if (r < 0)
969 goto finish;
970
ed457f13
TB
971 r = process_keymap();
972 if (r < 0)
973 goto finish;
974
418b9be5
LP
975 r = process_timezone();
976 if (r < 0)
977 goto finish;
978
979 r = process_hostname();
980 if (r < 0)
981 goto finish;
982
983 r = process_machine_id();
984 if (r < 0)
985 goto finish;
986
987 r = process_root_password();
988 if (r < 0)
989 goto finish;
990
991finish:
992 free(arg_root);
993 free(arg_locale);
994 free(arg_locale_messages);
ed457f13 995 free(arg_keymap);
418b9be5
LP
996 free(arg_timezone);
997 free(arg_hostname);
1602b008 998 string_erase(arg_root_password);
418b9be5
LP
999 free(arg_root_password);
1000
1001 return r < 0 ? EXIT_FAILURE : EXIT_SUCCESS;
1002}