====== Debian preseed ======

Le preseed permet de faire une installation automatisée sans intervention. L'équivalent Windows est l'installation unattended. L'installation se base sur un fichier de réponse, par facilité on le nommera preseed.cfg. Ce fichier doit etre passé en paramètre aux instructions de démarrage ou intégré dans l'image d'installation. Vu qu'il existe déjà plein de script shell pour réaliser une image ISO preseed je vais me baser sur un déjà fait que je vais juste adapter à mon usage, notamment pour générer une image pour machine UEFI avec xorriso.

Source originale: [[https://framagit.org/fiat-tux/hat-softwares/preseed-creator/-/blob/main/preseed-creator?ref_type=heads|https://framagit.org/fiat-tux/hat-softwares/preseed-creator/-/blob/main/preseed-creator?ref_type=heads]]

ma modification:
<code>

#!/bin/bash

#
# Update to work with UEFI boot with xorriso
# @beemoon.fr
#

#Proxies
#export http_proxy=""
#export https_proxy=""

function usage {
    cat <<EOF
Preseed Creator (c) Luc Didry 2017, GNU GPLv3
preseed-creator [options]
    Options:
        -i <image.iso>              ISO image to preseed. If not provided, the script will download and use the latest Debian amd64 netinst ISO image
        -o <preseeded_image.iso>    output preseeded ISO image. Default to debian-preseed.iso
        -p <preseed_file.cfg>       preseed file. If not provided, the script will put "d-i debian-installer/locale string fr_FR" in the preseed.cfg file
        -w <directory>              directory used to work on ISO image files. Default is a temporary folder in /tmp
        -t <int>                    timeout before the installer starts.
                                    0 disables the timeout, the installer will not start itself, you’ll need to start it manually.
                                    Default is 0
        -x                          Use xorriso instead of genisoimage, to create an iso-hybrid
        -d                          download the latest Debian amd64 netinst ISO image in the current folder and exit
        -g                          download the latest Debian stable example preseed file into preseed_example.cfg and exit
        -v                          activate verbose mode
        -h                          print this help and exit
EOF
    exit
}

function get_env_vars {
    if [[ -e /etc/environment |]]; then
        [[ $VERBOSE == 1 |]] && echo 'Getting env vars from /etc/environment'
        while read -r line; do
            if [[ ${line:0:1} != '#' |]]; then
                export "${line?}"
            fi
        done </etc/environment
    fi
}

function download_latest_iso {
    ONLY_DOWNLOAD=$1
    if [[ $ONLY_DOWNLOAD == 1 |]]; then
        [[ $VERBOSE == 0 |]] && echo -ne 'Getting Debian GPG keys                     [========>                     ](25%)\r'
    else
        [[ $VERBOSE == 0 |]] && echo -ne 'Getting Debian GPG keys                     [>                             ](0%)\r'
    fi
    if [[ $VERBOSE == 1 |]]; then
        echo "Getting Debian GPG keys"
    fi
    for i in F41D30342F3546695F65C66942468F4009EA8AC3 DF9B9C49EAA9298432589D76DA87E80D6294BE9B 10460DAD76165AD81FBC0CE9988021A964E6EA7D; do
        [[ $VERBOSE == 1 |]] && echo "Checking key $i"
        if ! (gpg --list-keys $i> /dev/null 2>&1); then
            [[ $VERBOSE == 1 |]] && echo "Key $i not in keyring, getting it from keyring.debian.org"
            gpg --keyserver keyring.debian.org --recv-keys 0x$i> /dev/null 2>&1
        fi
    done

    if [[ $ONLY_DOWNLOAD == 1 |]]; then
        [[ $VERBOSE == 0 |]] && echo -ne 'Downloading latest Debian amd64 netinst ISO [==============>               ](50%)\r'
    else
        [[ $VERBOSE == 0 |]] && echo -ne 'Downloading latest Debian amd64 netinst ISO [===>                          ](10%)\r'
    fi
    [[ $VERBOSE == 1 |]] && echo "Parsing https://cdimage.debian.org/debian-cd/current/amd64/iso-cd/ to fetch the latest netinst ISO file"
    LATEST=$(wget -q -O - https://cdimage.debian.org/debian-cd/current/amd64/iso-cd/ | grep "netinst.iso" | grep -v "debian-mac" | grep -v "debian-edu" | sed -e 's@.*a href="\([^"]*\)".*@\1@')
    [[ $VERBOSE == 1 |]] && echo "The latest netinst ISO file is $LATEST"
    wget "$WGETOPT" https://cdimage.debian.org/debian-cd/current/amd64/iso-cd/"$LATEST" -O debian-netinst-latest.iso

    wget "$WGETOPT" https://cdimage.debian.org/debian-cd/current/amd64/iso-cd/SHA512SUMS -O SHA512SUMS
    wget "$WGETOPT" https://cdimage.debian.org/debian-cd/current/amd64/iso-cd/SHA512SUMS.sign -O SHA512SUMS.sign

    if [[ $ONLY_DOWNLOAD == 1 |]]; then
        [[ $VERBOSE == 0 |]] && echo -ne 'Verifying GPG signature                     [======================>       ](75%)\r'
    else
        [[ $VERBOSE == 0 |]] && echo -ne 'Verifying GPG signature                     [======>                       ](20%)\r'
    fi

    [[ $VERBOSE == 1 |]] && echo "Verifying GPG signature"
    if ! (gpg --verify SHA512SUMS.sign SHA512SUMS> /dev/null 2>&1); then
        echo "Bad SHA512SUMS GPG signature. Aborting."
        exit 1
    fi

    if [[ $ONLY_DOWNLOAD == 1 |]]; then
        [[ $VERBOSE == 0 |]] && echo -ne 'Veryfying sha512sum                         [=============================>](100%)\r'
    else
        [[ $VERBOSE == 0 |]] && echo -ne 'Veryfying sha512sum                         [=========>                    ](30%)\r'
    fi
    [[ $VERBOSE == 1 |]] && echo "Fixing SHA512SUMS file"
    sed -e "s@${LATEST}@debian-netinst-latest.iso@" -i SHA512SUMS

    [[ $VERBOSE == 1 |]] && echo "Veryfying the sha512sum of the ISO file"
    if ! (sha512sum --ignore-missing -c SHA512SUMS> /dev/null 2>&1); then
        echo "Bad ISO checksum. Aborting."
        exit 2
    fi

    if [[ $ONLY_DOWNLOAD == 1 |]]; then
        exit 0
    fi
}

INPUT=""
PRESEED=""
MYPWD=$(pwd)
OUTPUT=""
XORRISO=""
VERBOSE=""
WGETOPT="-q"
TMPDIR=""
DOWNLOAD_NETINST=""
DOWNLOAD_PRESEED=""
TIMEOUT=

while getopts ":i:o:p:t:xdgvw:h" opt; do
    case $opt in
        i)
            INPUT=$OPTARG
            ;;
        o)
            OUTPUT=$OPTARG
            ;;
        p)
            PRESEED=$OPTARG
            ;;
        x)
            XORRISO='yes'
            ;;
        d)
            DOWNLOAD_NETINST='yes'
            ;;
        g)
            DOWNLOAD_PRESEED='yes'
            ;;
        v)
            VERBOSE=$VERBOSE
            WGETOPT=""
            ;;
        w)
            TMPDIR=$OPTARG
            if [[ ! -e $TMPDIR |]]; then
                mkdir -p "$TMPDIR" || (echo "Unable to create $TMPDIR. Aborting." && exit 3)
            elif [[ ! -d $TMPDIR |]]; then
                echo "$TMPDIR is not a directory. Aborting."
                exit 4
            fi
            ;;
        t)
            TIMEOUT=$OPTARG
            re='^[0-9]+$'
            if ! [[ $TIMEOUT =~ $re |]] ; then
               echo "Error: the timeout argument is not a positive integer"
               exit 21
            fi
            ;;
        h)
            usage
            ;;
        \?)
            echo "Invalid option: -$OPTARG">&2
            usage
            ;;
    esac
done

get_env_vars

if [[ -n $DOWNLOAD_NETINST |]]; then
    echo "Downloading latest Debian amd64 netinst ISO image"
    download_latest_iso 1
fi
if [[ -n $DOWNLOAD_PRESEED |]]; then
    echo "Downloading latest Debian stable example preseed file into preseed_example.cfg"
    if [[ $VERBOSE == 0 |]]; then
        WGETOPT=""
    fi
    wget "$WGETOPT" https://www.debian.org/releases/stable/example-preseed.txt -O preseed_example.cfg
    echo "Done"
    exit
fi
if [[ -z $TMPDIR |]]; then
    TMPDIR=$(mktemp -p /tmp -d preseed-creator.XXXXXXXXXXX)
fi
cd "$TMPDIR" || (echo "Unable to go to $TMPDIR. Aborting." && exit 5)

if [[ -n $PRESEED |]]; then
    if [[ ${PRESEED:0:1} != / |]]; then
        PRESEED="${MYPWD}/${PRESEED}"
    fi
    if [[ ! -e $PRESEED |]]; then
        echo "$PRESEED does not exists. Aborting."
        exit 6
    fi
    if [[ ! -r $PRESEED |]]; then
        echo "$PRESEED is not readable. Aborting."
        exit 7
    fi
fi

if [[ -n $OUTPUT |]]; then
    if [[ ${OUTPUT:0:1} != / |]]; then
        OUTPUT="${MYPWD}/${OUTPUT}"
    fi
else
    OUTPUT="${MYPWD}/debian-preseed.iso"
fi

if [[ -z $INPUT |]]; then
    echo "No ISO image provided, will download the latest Debian amd64 netinst ISO image"
    download_latest_iso 0

    INPUT="debian-netinst-latest.iso"
else
    if [[ ${INPUT:0:1} != / |]]; then
        INPUT="${MYPWD}/${INPUT}"
    fi
    if [[ ! -e $INPUT |]]; then
        echo "$INPUT does not exists. Aborting."
        exit 8
    fi
    if [[ ! -r $INPUT |]]; then
        echo "$INPUT is not readable. Aborting."
        exit 9
    fi
fi

# Extract ISO
[[ $VERBOSE == 0 |]] && echo -ne 'Mounting ISO image                          [===========>                  ](40%)\r'
[[ $VERBOSE == 1 |]] && echo "Mounting ISO image $INPUT"
mkdir loopdir -p
if ! (mount -o loop "$INPUT" loopdir> /dev/null 2>&1); then
    echo "Error while mounting the ISO image. Aborting."
    exit 10
fi

mkdir cd
[[ $VERBOSE == 0 |]] && echo -ne 'Extracting ISO image                        [==============>               ](50%)\r'
[[ $VERBOSE == 1 |]] && echo "Extracting ISO image"
rsync -a -H --exclude=TRANS.TBL loopdir/ cd
[[ $VERBOSE == 0 |]] && echo -ne 'Umounting ISO image                         [=================>            ](60%)\r'
[[ $VERBOSE == 1 |]] && echo "Umounting ISO image"
umount loopdir

# Add preseed file to initrd
[[ $VERBOSE == 0 |]] && echo -ne 'Hacking initrd                              [====================>         ](70%)\r'
[[ $VERBOSE == 1 |]] && echo -e "Hacking initrd\nGetting initrd.gz content"
mkdir irmod -p
(
    cd irmod || exit 11
    if ! (gzip -d <../cd/install.amd/initrd.gz | cpio --extract --make-directories --no-absolute-filenames 2> /dev/null); then
        echo "Error while getting ../cd/install.amd/initrd.gz content. Aborting."
        exit 12
    fi

    [[ $VERBOSE == 0 |]] && echo -ne 'Disabling menu graphic installer              [=======================>      ](80%)\r'
    [[ $VERBOSE == 1 |]] && echo "Disabling menu graphic installer"
    if ! (sed -i 's/include gtk.cfg//g' ../cd/isolinux/menu.cfg 2> /dev/null); then
        echo "Error while disabling graphic menu installer in ../cd/isolinux/isolinux.cfg. Aborting."
        exit 13
    fi
    if ! (sed '33,37d' ../cd/boot/grub/grub.cfg>../cd/boot/grub/grubNew.cfg 2> /dev/null); then
        echo "Error while disabling graphic menu installer in ../cd/boot/grub/grub.cfg. Aborting."
        exit 13
    fi
    rm -f ../cd/boot/grub/grub.cfg> /dev/null
    mv ../cd/boot/grub/grubNew.cfg ../cd/boot/grub/grub.cfg> /dev/null

    [[ $VERBOSE == 1 |]] && echo "Disabling speech synthesis installer"
    if ! (sed -i 's/include spkgtk.cfg//g' ../cd/isolinux/menu.cfg 2> /dev/null); then
        echo "Error while disabling speech synthesis installer in ../cd/isolinux/isolinux.cfg. Aborting."
        exit 14
    fi

    if [[ $TIMEOUT -gt 0 |]]; then
        [[ $VERBOSE == 1 |]] && echo "Disabling timeout in prompt.cfg"
        if ! (sed -i "s/timeout 0/timeout $TIMEOUT/g" ../cd/isolinux/prompt.cfg 2> /dev/null); then
            echo "Error while disabling timeout in ../cd/isolinux/prompt.cfg. Aborting."
            exit 15
        fi

        [[ $VERBOSE == 1 |]] && echo "Disabling timeout in isolinux.cfg"
        if ! (sed -i "s/timeout 0/timeout $TIMEOUT/g" ../cd/isolinux/isolinux.cfg 2> /dev/null); then
            echo "Error while disabling timeout in ../cd/isolinux/isolinux.cfg. Aborting."
            exit 16
        fi

        [[ $VERBOSE == 1 |]] && echo "Disabling timeout in grub.cfg"
        if ! (echo set timeout=$TIMEOUT>>../cd/boot/grub/grub.cfg 2> /dev/null); then
            echo "Error while disabling timeout in ../cd/boot/grub/grub.cfg. Aborting."
            exit 16
        fi
    fi

    if [[ -z $PRESEED |]]; then
        [[ $VERBOSE == 1 |]] && echo "Creating a simple preseed.cfg file"
        echo "d-i debian-installer/locale string fr_FR"> preseed.cfg
    else
        cp "$PRESEED" preseed.cfg
    fi
    [[ $VERBOSE == 1 |]] && echo "Putting new content into initrd.gz"
    if ! (find . | cpio -H newc --create 2> /dev/null | gzip -9> ../cd/install.amd/initrd.gz 2> /dev/null); then
        echo "Error while putting new content into ../cd/install.amd/initrd.gz. Aborting."
        exit 17
    fi
)

rm -rf irmod/

#Modify GRUB file boot/grub/grub.cfg
[[ $VERBOSE == 0 |]] && echo -ne 'Fixing md5sums                              [========================>     ](85%)\r'
[[ $VERBOSE == 1 |]] && echo "Fixing md5sums"
read -ra files <<(find cd/ -follow -type f 2> /dev/null)
if ! (md5sum "${files[0]}"> md5sum.txt 2> /dev/null); then
    echo "Error while fixing md5sums. Aborting."
    exit 18
fi

#Create new ISO presseded
[[ $VERBOSE == 0 |]] && echo -ne 'Creating preseeded ISO image                [==========================>   ](90%)\r'
[[ $VERBOSE == 1 |]] && echo "Creating preseeded ISO image"
if [[ -z $XORRISO |]]; then
    echo "Gen ISO with genisoimage - legacy boot only"
    if ! (genisoimage -o "$OUTPUT" -r -J -no-emul-boot -boot-load-size 4 -boot-info-table -b isolinux/isolinux.bin -c isolinux/boot.cat ./cd> /dev/null 2>&1); then
        echo "Error while creating the preseeded ISO image with genisoimage. Aborting."
        exit 19
    fi
else
    echo "Gen ISO with xorriso"
    if ! (xorriso -as mkisofs \
                  -quiet \
                  -o "$OUTPUT" \
                  -c isolinux/boot.cat \
                  -b isolinux/isolinux.bin \
                  -no-emul-boot -boot-load-size 4 -boot-info-table \
                  -eltorito-alt-boot \
                  -e boot/grub/efi.img \
                  -no-emul-boot -isohybrid-gpt-basdat -isohybrid-apm-hfsplus \
                  ./cd /dev/null 2> "$1"); then
        echo "Error while creating the preseeded ISO image with xorriso. Aborting."
        exit 20
    fi
fi

echo "$TMPDIR"
rm -rf "$TMPDIR"
sleep 10

[[ $VERBOSE == 0 |]] && echo -ne 'Preseeded ISO image created                 [==============================](100%)\r'
[[ $VERBOSE == 1 |]] && echo "Preseeded ISO image created"
echo -e "\nYour preseeded ISO image is located at $OUTPUT"

xorriso -indev $INPUT -report_system_area as_mkisofs
xorriso -indev $OUTPUT -report_system_area as_mkisofs

</code>

mon preseed.cfg (adaptez les comptes et leur mdp) :
<code>

#_preseed_V1
#### Contents of the preconfiguration file (for bookworm)

### Localization
d-i debian-installer/locale string fr_FR.UTF-8
d-i debian-installer/language string fr
d-i debian-installer/country string FR

# Keyboard
d-i keyboard-configuration/layoutcode string fr
d-i keyboard-configuration/xkb-keymap select French
d-i keyboard-configuration/model select pc105
d-i console-keymaps-at/keymap select fr-latin9
d-i debian-installer/keymap string fr-latin9

### Network configuration
d-i netcfg/choose_interface select auto

## Désactive le DHCP
#d-i netcfg/disable_autoconfig boolean true

## Si pas d'IP depuis DHCP alors passage en statique
d-i netcfg/dhcp_failed note
d-i netcfg/dhcp_options select Configure network manually

## Config statique du reseau
d-i netcfg/get_ipaddress string 192.168.200.3
d-i netcfg/get_netmask string 255.255.255.0
d-i netcfg/get_gateway string 192.168.200.1
d-i netcfg/get_nameservers string 192.168.200.100
d-i netcfg/confirm_static boolean true

# Any hostname and domain names
d-i netcfg/get_hostname string pc-deb12
d-i netcfg/get_domain string beemoon.fr
d-i netcfg/hostname pc-deb12

# If non-free firmware is needed for the network or other hardware
d-i hw-detect/load_firmware boolean true

### Mirror settings
d-i mirror/country string manual
d-i mirror/http/hostname string ftp.fr.debian.org
d-i mirror/http/directory string /debian
d-i mirror/http/proxy string

### Account setup
d-i passwd/root-login boolean true
d-i passwd/root-password password monSuperMdp2024$!
d-i passwd/root-password-again password monSuperMdp2024$!

# Alternatively, to skip creation of a normal user account.
d-i passwd/make-user boolean true
d-i passwd/user-fullname string beemoon1
d-i passwd/username string beemoon1
d-i passwd/user-password password monMegaSuperMdp2!?*
d-i passwd/user-password-again password monMegaSuperMdp2!?*

### Clock and time zone setup
d-i clock-setup/utc boolean true
d-i time/zone string Europe/Paris
d-i clock-setup/ntp boolean true
d-i clock-setup/ntp-server string ntp.beemoon.fr

### Partitioning
d-i partman-auto/method string regular
d-i partman-auto-lvm/guided_size string max
d-i partman-lvm/device_remove_lvm boolean true
d-i partman-md/device_remove_md boolean true
d-i partman-lvm/confirm boolean true
d-i partman-lvm/confirm_nooverwrite boolean true

# all files in one partition
d-i partman-auto/choose_recipe select atomic

# This makes partman automatically partition without confirmation
d-i partman-partitioning/confirm_write_new_label boolean true
d-i partman/choose_partition select finish
d-i partman/confirm boolean true
d-i partman/confirm_nooverwrite boolean true

# Force UEFI booting
d-i partman-efi/non_efi_system boolean true
d-i partman-partitioning/choose_label select gpt
d-i partman-partitioning/default_label string gpt

# This makes partman automatically partition without confirmation.
d-i partman-md/confirm boolean true
d-i partman-partitioning/confirm_write_new_label boolean true
d-i partman/choose_partition select finish
d-i partman/confirm boolean true
d-i partman/confirm_nooverwrite boolean true

### Apt setup
d-i apt-setup/cdrom/set-first boolean false
d-i apt-setup/non-free-firmware boolean true

### Package selection
tasksel tasksel/first multiselect standard
d-i pkgsel/include string openssh-server build-essential

# Sending reports helps the project determine what software is most
# popular and should be included on the first CD/DVD.
popularity-contest popularity-contest/participate boolean false

### Boot loader installation
d-i grub-installer/only_debian boolean true
d-i grub-installer/with_other_os boolean true
d-i grub-installer/bootdev  string default
d-i grub-installer/only_debian boolean false
d-i grub-installer/with_other_os boolean false

### Finishing up the installation
d-i finish-install/reboot_in_progress note
d-i cdrom-detect/eject boolean true

</code>

Si vous n'avez pas besoin du mode UEFI pas besoin de spécifier l'option -x. L'avantage de cette option c'est que l'image générée fonctionnera à la fois sur les bios Legacy et UEFI.

Une fois le script sur votre machine et si besoin après modification des droits pour l'éxécuter, il faut lancer la ciommande suivante:

<code>
sudo ./preseedCreator.sh -x -d -o debian12_preseed.iso -p preseed.cfg -t 1 -v

</code>

Si vous avez déjà téléchargé une image debian de base (-i) et que vous vous voulez spécifier un répertoire de travail (-w)

<code>
sudo ./preseedCreator.sh -x -i debian-12.7.0-amd64-netinst.iso -o debian12_preseed.iso -p preseed.cfg -w preseed -t 1 -v

</code>

Voilà plus qu'à mettre l'ISO généré sur clé/disque USB ou le monté sur une mchine virtuelle.