baece04bba
Changed sudo configuration to allow NOPASSWD for specific commands only: - pacman -Syu --noconfirm (system update) - rm -rf /var/lib/pacman/db.lck (unlock pacman) - poweroff (shutdown) - reboot (reboot) This is more secure than allowing all commands without password.
83 lines
4.3 KiB
Bash
Executable File
83 lines
4.3 KiB
Bash
Executable File
#!/bin/zsh
|
|
pacman -Syuu --noconfirm base-devel archiso docker git nodejs bc
|
|
git clone https://gitlab.archlinux.org/archlinux/archiso
|
|
cp -rf ./cfg/profiledef.sh /usr/share/archiso/configs/releng/
|
|
cp -rf ./cfg/profiledef.sh ./archiso/configs/releng/profiledef.sh
|
|
cp -rf ./cfg/profiledef.sh ./archiso/configs/baseline/profiledef.sh
|
|
cp -rf ./scpt/mkarchiso ./archiso/archiso/mkarchiso
|
|
./archiso/archiso/mkarchiso -v -o ./ ./archiso/configs/releng/
|
|
tar xf aios-bootstrap*.tar.gz
|
|
mkdir -p root.x86_64/var/lib/machines/arch
|
|
pacstrap -c root.x86_64/var/lib/machines/arch base
|
|
echo -e 'Server = http://mirrors.cat.net/archlinux/$repo/os/$arch
|
|
Server = https://geo.mirror.pkgbuild.com/$repo/os/$arch' >> ./root.x86_64/var/lib/machines/arch/etc/pacman.d/mirrorlist
|
|
sed -i s/CheckSpace/#CheckeSpace/ root.x86_64/var/lib/machines/arch/etc/pacman.conf
|
|
arch-chroot root.x86_64/var/lib/machines/arch /bin/sh -c 'pacman-key --init'
|
|
arch-chroot root.x86_64/var/lib/machines/arch /bin/sh -c 'pacman-key --populate archlinux'
|
|
arch-chroot root.x86_64/var/lib/machines/arch /bin/sh -c 'pacman -Syu --noconfirm base base-devel linux vim git zsh rust openssh openssl jq go nodejs npm docker podman bc sqlite'
|
|
arch-chroot root.x86_64/var/lib/machines/arch /bin/sh -c 'mkdir -p /etc/containers/registries.conf.d'
|
|
arch-chroot root.x86_64/var/lib/machines/arch /bin/sh -c 'curl -sL -o /etc/containers/registries.conf.d/ai.conf https://git.syui.ai/ai/os/raw/branch/main/cfg/ai.conf'
|
|
arch-chroot root.x86_64/var/lib/machines/arch /bin/sh -c 'chsh -s /bin/zsh'
|
|
|
|
# Install Claude Code
|
|
arch-chroot root.x86_64/var/lib/machines/arch /bin/sh -c 'npm i -g @anthropic-ai/claude-code'
|
|
|
|
# Copy os-release
|
|
cp -rf ./cfg/os-release root.x86_64/var/lib/machines/arch/etc/os-release
|
|
|
|
# Create default user 'ai'
|
|
arch-chroot root.x86_64/var/lib/machines/arch /bin/sh -c 'useradd -m -G wheel -s /bin/zsh ai'
|
|
arch-chroot root.x86_64/var/lib/machines/arch /bin/sh -c 'echo "ai:root" | chpasswd'
|
|
|
|
# Enable wheel group for sudo (specific commands without password)
|
|
arch-chroot root.x86_64/var/lib/machines/arch /bin/sh -c 'echo "%wheel ALL=(ALL:ALL) NOPASSWD: /usr/bin/pacman -Syu --noconfirm, /usr/bin/rm -rf /var/lib/pacman/db.lck, /usr/bin/poweroff, /usr/bin/reboot" >> /etc/sudoers'
|
|
|
|
# Setup auto-login for user 'ai'
|
|
arch-chroot root.x86_64/var/lib/machines/arch /bin/sh -c 'mkdir -p /etc/systemd/system/getty@tty1.service.d'
|
|
cat > root.x86_64/var/lib/machines/arch/etc/systemd/system/getty@tty1.service.d/override.conf <<'EOF'
|
|
[Service]
|
|
ExecStart=
|
|
ExecStart=-/usr/bin/agetty --autologin ai --noclear %I $TERM
|
|
EOF
|
|
|
|
# Copy .zshrc for root
|
|
cp -rf ./cfg/zshrc root.x86_64/var/lib/machines/arch/root/.zshrc
|
|
|
|
# Copy .zshrc for user 'ai'
|
|
cp -rf ./cfg/zshrc root.x86_64/var/lib/machines/arch/home/ai/.zshrc
|
|
arch-chroot root.x86_64/var/lib/machines/arch /bin/sh -c 'chown ai:ai /home/ai/.zshrc'
|
|
|
|
# Install aigpt (AI memory system)
|
|
arch-chroot root.x86_64/var/lib/machines/arch /bin/sh -c 'git clone https://git.syui.ai/ai/gpt && cd gpt && cargo build --release && cp -rf ./target/release/aigpt /bin/'
|
|
|
|
# Setup Claude Code MCP configuration
|
|
arch-chroot root.x86_64/var/lib/machines/arch /bin/sh -c 'mkdir -p ~/.config/claude'
|
|
cat > root.x86_64/var/lib/machines/arch/root/.config/claude/claude_desktop_config.json <<'EOF'
|
|
{
|
|
"mcpServers": {
|
|
"aigpt": {
|
|
"command": "aigpt",
|
|
"args": ["server", "--enable-layer4"]
|
|
}
|
|
}
|
|
}
|
|
EOF
|
|
|
|
# Install ai/bot (optional, for backward compatibility)
|
|
arch-chroot root.x86_64/var/lib/machines/arch /bin/sh -c 'git clone https://git.syui.ai/ai/bot && cd bot && cargo build && cp -rf ./target/debug/ai /bin/ && ai ai'
|
|
|
|
# Create config directory
|
|
arch-chroot root.x86_64/var/lib/machines/arch /bin/sh -c 'mkdir -p /root/.config/syui/ai/gpt'
|
|
|
|
# Copy MCP and aios configuration
|
|
cp -rf ./cfg/mcp.json root.x86_64/var/lib/machines/arch/root/.config/syui/ai/mcp.json
|
|
cp -rf ./cfg/config.toml root.x86_64/var/lib/machines/arch/root/.config/syui/ai/config.toml
|
|
|
|
# Initialize aigpt database with WAL mode
|
|
arch-chroot root.x86_64/var/lib/machines/arch /bin/sh -c 'aigpt server --enable-layer4 &'
|
|
sleep 2
|
|
arch-chroot root.x86_64/var/lib/machines/arch /bin/sh -c 'pkill aigpt'
|
|
arch-chroot root.x86_64/var/lib/machines/arch /bin/sh -c 'if command -v sqlite3 &>/dev/null; then sqlite3 /root/.config/syui/ai/gpt/memory.db "PRAGMA journal_mode=WAL; PRAGMA synchronous=NORMAL;"; fi'
|
|
|
|
tar -zcvf aios-bootstrap.tar.gz root.x86_64/
|