28allday
19fd794b6b
Single-script builder (nosignal.sh) that turns a stock Arch Linux ISO into a fully-offline installer for a themed Hyprland + caelestia (Quickshell) desktop: matching SDDM greeter, Btrfs/Limine bootable snapshots, chwd-style GPU detection, and a curated "os updates" layer (keybind cheatsheet, settings panels, system polish, on-box management skill). See README.md. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
39 lines
2 KiB
Bash
Executable file
39 lines
2 KiB
Bash
Executable file
#!/bin/sh
|
|
# install-sudo-timed-nopasswd.sh — idempotent. REQUIRES ROOT.
|
|
#
|
|
# Installs the time-boxed passwordless-sudo ("sudoless") feature:
|
|
# 1. /usr/local/bin/nosignal-sudo-toggle (enable/disable/status CLI)
|
|
# 2. nosignal-sudoless-boot-clean.service (enabled) (reboot safety net)
|
|
# 3. patches caelestia ServicesPage to show the toggle (via patch-servicespage.sh)
|
|
#
|
|
# Does NOT enable sudoless — that's a deliberate user action via the toggle.
|
|
set -eu
|
|
|
|
SELF_DIR=$(CDPATH= cd -- "$(dirname -- "$0")" && pwd)
|
|
[ "$(id -u)" -eq 0 ] || { echo "must run as root (writes /usr/local/bin + systemd)" >&2; exit 1; }
|
|
|
|
# 1. CLI
|
|
install -m 0755 "$SELF_DIR/nosignal-sudo-toggle" /usr/local/bin/nosignal-sudo-toggle
|
|
echo ":: installed /usr/local/bin/nosignal-sudo-toggle"
|
|
|
|
# 2. boot-time safety net
|
|
install -m 0644 "$SELF_DIR/nosignal-sudoless-boot-clean.service" \
|
|
/etc/systemd/system/nosignal-sudoless-boot-clean.service
|
|
# daemon-reload is a no-op (and errors) in an install chroot with no running
|
|
# manager — never let it abort the install. `enable` works offline (it only
|
|
# creates the wants/ symlink), so the service is armed on the booted system.
|
|
systemctl daemon-reload >/dev/null 2>&1 || true
|
|
systemctl enable nosignal-sudoless-boot-clean.service >/dev/null 2>&1 || true
|
|
echo ":: installed + enabled nosignal-sudoless-boot-clean.service"
|
|
|
|
# 3. panel toggle (caelestia ServicesPage). Non-fatal if the shell isn't present.
|
|
# Skipped when NOSIGNAL_SKIP_SHELL_PATCH is set — the NoSignal builder bakes
|
|
# SudoToggleRow into the pinned nosignal-shell fork, so the patch is redundant
|
|
# there. Migrations of old stock-caelestia boxes leave it unset and patch.
|
|
if [ -n "${NOSIGNAL_SKIP_SHELL_PATCH:-}" ]; then
|
|
echo ":: skipping ServicesPage patch (NOSIGNAL_SKIP_SHELL_PATCH — fork bakes the toggle)"
|
|
elif [ -x "$SELF_DIR/patch-servicespage.sh" ]; then
|
|
sh "$SELF_DIR/patch-servicespage.sh" || echo "WARNING: ServicesPage patch failed (CLI still usable from a terminal)" >&2
|
|
fi
|
|
|
|
echo ":: done. Toggle it in Settings -> Services, or: sudo nosignal-sudo-toggle enable"
|