code.delx.au - refind/blob - refind-install

   1 #!/bin/bash
   2 #
   3 # Linux/MacOS X script to install rEFInd
   4 #
   5 # Usage:
   6 #
   7 # ./refind-install [options]
   8 #
   9 # options include:
  10 #    "--notesp" to install to the OS X root filesystem rather than to the ESP.
  11 #           This option may not be used under Linux.
  12 #    "--usedefault {devicefile}" to install as default
  13 #           (/EFI/BOOT/BOOTX64.EFI and similar) to the specified device
  14 #           (/dev/sdd1 or whatever) without registering with the NVRAM.
  15 #    "--ownhfs {devicefile}" to install to an HFS+ volume that's NOT currently
  16 #           an OS X boot volume.
  17 #    "--root {dir}" to specify installation using the specified directory
  18 #           as the system's root
  19 #    "--alldrivers" to install all drivers along with regular files
  20 #    "--nodrivers" to suppress driver installation (default in Linux is
  21 #           driver used on /boot; --nodrivers is OS X default)
  22 #    "--shim {shimfile}" to install a shim.efi file for Secure Boot
  23 #    "--preloader" is synonymous with "--shim"
  24 #    "--localkeys" to re-sign x86-64 binaries with a locally-generated key
  25 #    "--keepname" to keep refind_x64.efi name as such even when using shim
  26 #    "--yes" to assume a "yes" response to all prompts
  27 #
  28 # The "esp" option is valid only on Mac OS X; it causes
  29 # installation to the EFI System Partition (ESP) rather than
  30 # to the current OS X boot partition. Under Linux, this script
  31 # installs to the ESP by default.
  32 #
  33 # This program is copyright (c) 2012-2015 by Roderick W. Smith
  34 # It is released under the terms of the GNU GPL, version 3,
  35 # a copy of which should be included in the file COPYING.txt.
  36 #
  37 # Revision history:
  38 #
  39 # 0.9.3   -- Enable running under OS X's recovery system & add warning about
  40 #            SIP & brief instructions on how to deal with it if SIP is
  41 #            detected to be enabled.
  42 # 0.9.2   -- Added --keepname option.
  43 # 0.8.7   -- Better detection of Secure Boot mode & fixed errors when copying
  44 #            Shim & MokManager files over themselves; fixed bug that caused
  45 #            inappropriate installation to EFI/BOOT/bootx64.efi
  46 # 0.8.6   -- Fixed bugs that caused misidentification of ESP on disks with
  47 #            partition numbers over 10 on OS X and misidentification of mount
  48 #            point if already-mounted ESP had space in path.
  49 # 0.8.5   -- Refinement/cleanup of new OS X ESP-as-default policy
  50 # 0.8.4   -- OS X default changed to install to ESP under /EFI/BOOT
  51 # 0.7.9   -- Fixed bug that caused errors if dmraid utility not installed
  52 # 0.7.7   -- Fixed bug that created mangled refind_linux.conf file; added ability
  53 #            to locate and mount ESP on Linux, if it's not mounted
  54 # 0.7.6   -- Added --ownhfs {device-filename} option
  55 # 0.7.5   -- Fixed bug when installing to ESP on recent versions of OS X
  56 # 0.7.2   -- Fixed code that could be confused by use of autofs to mount the ESP
  57 # 0.7.0   -- Added support for the new Btrfs driver
  58 # 0.6.12  -- Added support for PreLoader as well as for shim
  59 # 0.6.11  -- Improvements in script's ability to handle directories with spaces
  60 #            in their names
  61 # 0.6.9   -- Install gptsync on Macs
  62 # 0.6.8   -- Bug fix: ESP scan now uses "uniq".
  63 # 0.6.6   -- Bug fix: Upgrade drivers when installed to EFI/BOOT. Also enable
  64 #            copying shim.efi and MokManager.efi over themselves.
  65 # 0.6.4   -- Copies ext2 driver rather than ext4 driver for ext2/3fs
  66 # 0.6.3   -- Support for detecting rEFInd in EFI/BOOT and EFI/Microsoft/Boot
  67 #            directories & for installing to EFI/BOOT in BIOS mode
  68 # 0.6.2-1 -- Added --yes option & tweaked key-copying for use with RPM install script
  69 # 0.6.1   -- Added --root option; minor bug fixes
  70 # 0.6.0   -- Changed --drivers to --alldrivers and added --nodrivers option;
  71 #            changed default driver installation behavior in Linux to install
  72 #            the driver needed to read /boot (if available)
  73 # 0.5.1.2 -- Fixed bug that caused failure to generate refind_linux.conf file
  74 # 0.5.1.1 -- Fixed bug that caused script failure under OS X
  75 # 0.5.1   -- Added --shim & --localkeys options & create sample refind_linux.conf
  76 #            in /boot
  77 # 0.5.0   -- Added --usedefault & --drivers options & changed "esp" option to "--esp"
  78 # 0.4.5   -- Fixed check for rEFItBlesser in OS X
  79 # 0.4.2   -- Added notice about BIOS-based OSes & made NVRAM changes in Linux smarter
  80 # 0.4.1   -- Added check for rEFItBlesser in OS X
  81 # 0.3.3.1 -- Fixed OS X 10.7 bug; also works as make target
  82 # 0.3.2.1 -- Check for presence of source files; aborts if not present
  83 # 0.3.2   -- Initial version
  84 #
  85 # Note: install.sh version numbers match those of the rEFInd package
  86 # with which they first appeared.
  87
  88 RootDir="/"
  89 TargetDir=/EFI/refind
  90 LocalKeysBase="refind_local"
  91 ShimSource="none"
  92 ShimType="none"
  93 KeepName=0
  94 TargetShim="default"
  95 TargetX64="refind_x64.efi"
  96 TargetIA32="refind_ia32.efi"
  97 LocalKeys=0
  98 DeleteRefindDir=0
  99 AlwaysYes=0
 100
 101 #
 102 # Functions used by both OS X and Linux....
 103 #
 104
 105 GetParams() {
 106    InstallToEspOnMac=1
 107    # Install the driver required to read Linux /boot, if it's available
 108    # Note: Under OS X, this will be installed only if a Linux partition
 109    # is detected, in which case the ext4fs driver will be installed.
 110    InstallDrivers="boot"
 111    while [[ $# -gt 0 ]]; do
 112       case $1 in
 113          --notesp) InstallToEspOnMac=0
 114               ;;
 115          --ownhfs) OwnHfs=1
 116               InstallToEspOnMac=0
 117               TargetPart="$2"
 118               TargetDir=/System/Library/CoreServices
 119               shift
 120               ;;
 121          --usedefault) TargetDir=/EFI/BOOT
 122               TargetPart="$2"
 123               TargetX64="bootx64.efi"
 124               TargetIA32="bootia32.efi"
 125               shift
 126               ;;
 127          --root) RootDir="$2"
 128               InstallToEspOnMac=0
 129               shift
 130               ;;
 131          --localkeys) LocalKeys=1
 132               ;;
 133          --shim | --preloader) ShimSource="$2"
 134               ShimType=`basename $ShimSource`
 135               shift
 136               ;;
 137          --keepname) KeepName=1
 138               ;;
 139          --drivers | --alldrivers) InstallDrivers="all"
 140               ;;
 141          --nodrivers) InstallDrivers="none"
 142               ;;
 143          --yes) AlwaysYes=1
 144               ;;
 145          * ) echo "Usage: $0 [--notesp | --usedefault {device-file} | --root {dir} |"
 146              echo "                     --ownhfs {device-file} ] [--keepname]"
 147              echo "                  [--nodrivers | --alldrivers]"
 148              echo "                  [--localkeys] [--keepname] [--yes]"
 149              exit 1
 150       esac
 151       shift
 152    done
 153    if [[ "$InstallToEspOnMac" == 0 && "$RootDir" == '/' && "$TargetDir" == '/EFI/BOOT' ]] ; then
 154       echo "You may use --notesp OR --usedefault, but not both! Aborting!"
 155       exit 1
 156    fi
 157    if [[ "$RootDir" != '/' && "$TargetDir" == '/EFI/BOOT' ]] ; then
 158       echo "You may use --root OR --usedefault, but not both! Aborting!"
 159       exit 1
 160    fi
 161    if [[ "$TargetDir" != '/System/Library/CoreServices' && "$OwnHfs" == '1' ]] ; then
 162       echo "If you use --ownhfs, you may NOT use --usedefault! Aborting!"
 163       exit 1
 164    fi
 165    if [[ "$KeepName" == 1 && "$ShimSource" == "none" ]] ; then
 166       echo "The --keepname option is meaningful only in conjunction with --shim"
 167       echo "or --preloader! Aborting!"
 168       exit 1
 169    fi
 170    if [[ "$KeepName" == 1 && "$OSTYPE" != "linux-gnu" ]] ; then
 171       echo "The --keepname option is valid only under Linux! Aborting!"
 172       exit 1
 173    fi
 174    if [[ "$KeepName" == 1 && "$TargetDir" != "/EFI/BOOT" ]] ; then
 175       echo "The --keepname option is incompatible with --usedefault! Aborting!"
 176       exit 1
 177    fi
 178    RLConfFile="$RootDir/boot/refind_linux.conf"
 179    EtcKeysDir="$RootDir/etc/refind.d/keys"
 180 } # GetParams()
 181
 182 # Get a yes/no response from the user and place it in the YesNo variable.
 183 # If the AlwaysYes variable is set to 1, skip the user input and set "Y"
 184 # in the YesNo variable.
 185 ReadYesNo() {
 186    if [[ $AlwaysYes == 1 ]] ; then
 187       YesNo="Y"
 188       echo "Y"
 189    else
 190       read YesNo
 191    fi
 192 }
 193
 194 # Abort if the rEFInd files can't be found.
 195 # Also sets $ConfFile to point to the configuration file,
 196 # $IconsDir to point to the icons directory, and
 197 # $ShimSource to the source of the shim.efi file (if necessary).
 198 CheckForFiles() {
 199    # Note: This check is satisfied if EITHER the 32- or the 64-bit version
 200    # is found, even on the wrong platform. This is because the platform
 201    # hasn't yet been determined. This could obviously be improved, but it
 202    # would mean restructuring lots more code....
 203    if [[ ! -f "$RefindDir/refind_ia32.efi" && ! -f "$RefindDir/refind_x64.efi" ]] ; then
 204       echo "The rEFInd binary file is missing! Aborting installation!"
 205       exit 1
 206    fi
 207
 208    if [[ -f "$RefindDir/refind.conf-sample" ]] ; then
 209       ConfFile="$RefindDir/refind.conf-sample"
 210    elif [[ -f "$ThisDir/refind.conf-sample" ]] ; then
 211       ConfFile="$ThisDir/refind.conf-sample"
 212    else
 213       echo "The sample configuration file is missing! Aborting installation!"
 214       exit 1
 215    fi
 216
 217    if [[ -d "$RefindDir/icons" ]] ; then
 218       IconsDir="$RefindDir/icons"
 219    elif [[ -d "$ThisDir/icons" ]] ; then
 220       IconsDir="$ThisDir/icons"
 221    else
 222       echo "The icons directory is missing! Aborting installation!"
 223       exit 1
 224    fi
 225
 226    echo "ShimSource is $ShimSource"
 227    if [[ "$ShimSource" != "none" ]] ; then
 228       if [[ -f "$ShimSource" ]] ; then
 229          if [[ $ShimType == "shimx64.efi" || $ShimType == "shim.efi" ]] ; then
 230             TargetX64="grubx64.efi"
 231             MokManagerSource=`dirname "$ShimSource"`/MokManager.efi
 232          elif [[ $ShimType == "preloader.efi" || $ShimType == "PreLoader.efi" ]] ; then
 233             TargetX64="loader.efi"
 234             MokManagerSource=`dirname "$ShimSource"`/HashTool.efi
 235          else
 236             echo "Unknown shim/PreBootloader filename: $ShimType!"
 237             echo "Known filenames are shimx64.efi, shim.efi, and PreLoader.efi. Aborting!"
 238             exit 1
 239          fi
 240       else
 241          echo "The specified shim/PreBootloader file, $ShimSource, doesn't exist!"
 242          echo "Aborting installation!"
 243          exit 1
 244       fi
 245    fi
 246 } # CheckForFiles()
 247
 248 # Helper for CopyRefindFiles; copies shim files (including MokManager, if it's
 249 # available) to target.
 250 CopyShimFiles() {
 251    local inode1=`ls -i "$ShimSource" 2> /dev/null | cut -f 1 -d " "`
 252    local inode2=`ls -i "$InstallDir/$TargetDir/$TargetShim" 2> /dev/null | cut -f 1 -d " "`
 253    if [[ $inode1 != $inode2 ]] ; then
 254       cp -fb "$ShimSource" "$InstallDir/$TargetDir/$TargetShim"
 255       if [[ $? != 0 ]] ; then
 256          Problems=1
 257       fi
 258    fi
 259    inode1=`ls -i "$MokManagerSource" 2> /dev/null | cut -f 1 -d " "`
 260    local TargetMMName=`basename $MokManagerSource`
 261    inode2=`ls -i "$InstallDir/$TargetDir/$TargetMMName" 2> /dev/null | cut -f 1 -d " "`
 262    if [[ $inode1 != $inode2 ]] ; then
 263       if [[ -f "$MokManagerSource" ]] ; then
 264          cp -fb "$MokManagerSource" "$InstallDir/$TargetDir/"
 265       fi
 266       if [[ $? != 0 ]] ; then
 267          Problems=1
 268       fi
 269    fi
 270 } # CopyShimFiles()
 271
 272 # Copy the public keys to the installation medium
 273 CopyKeys() {
 274    if [[ $LocalKeys == 1 ]] ; then
 275       mkdir -p "$InstallDir/$TargetDir/keys/"
 276       cp "$EtcKeysDir/$LocalKeysBase.cer" "$InstallDir/$TargetDir/keys/"
 277       cp "$EtcKeysDir/$LocalKeysBase.crt" "$InstallDir/$TargetDir/keys/"
 278    fi
 279 } # CopyKeys()
 280
 281 # Set varaibles for installation in EFI/BOOT directory
 282 SetVarsForBoot() {
 283    TargetDir="/EFI/BOOT"
 284    if [[ $ShimSource == "none" ]] ; then
 285       TargetX64="bootx64.efi"
 286       TargetIA32="bootia32.efi"
 287    else
 288       if [[ $ShimType == "shim.efi" || $ShimType == "shimx64.efi" ]] ; then
 289          TargetX64="grubx64.efi"
 290       elif [[ $ShimType == "preloader.efi" || $ShimType == "PreLoader.efi" ]] ; then
 291          TargetX64="loader.efi"
 292       else
 293          echo "Unknown shim/PreBootloader type: $ShimType"
 294          echo "Aborting!"
 295          exit 1
 296       fi
 297       TargetIA32="bootia32.efi"
 298       TargetShim="bootx64.efi"
 299    fi
 300    if [[ $KeepName == 1 ]] ; then
 301       echo "Installation is to /EFI/BOOT, which is incompatible with --keepname! Aborting!"
 302       exit 1
 303    fi
 304 } # SetVarsForBoot()
 305
 306 # Set variables for installation in EFI/Microsoft/Boot directory
 307 SetVarsForMsBoot() {
 308    TargetDir="/EFI/Microsoft/Boot"
 309    if [[ $ShimSource == "none" ]] ; then
 310       TargetX64="bootmgfw.efi"
 311       TargetIA32="bootmgfw.efi"
 312    else
 313       if [[ $ShimType == "shim.efi" || $ShimType == "shimx64.efi" ]] ; then
 314          TargetX64="grubx64.efi"
 315       elif [[ $ShimType == "preloader.efi" || $ShimType == "PreLoader.efi" ]] ; then
 316          TargetX64="loader.efi"
 317       else
 318          echo "Unknown shim/PreBootloader type: $ShimType"
 319          echo "Aborting!"
 320          exit 1
 321       fi
 322       TargetShim="bootmgfw.efi"
 323    fi
 324    if [[ $KeepName == 1 ]] ; then
 325       echo "Installation is to /EFI/Microsoft/Boot, which is incompatible with --keepname!"
 326       echo "Aborting!"
 327       exit 1
 328    fi
 329 } # SetVarsForMsBoot()
 330
 331 # TargetDir defaults to /EFI/refind; however, this function adjusts it as follows:
 332 # - If an existing refind.conf is available in /EFI/BOOT or /EFI/Microsoft/Boot,
 333 #   install to that directory under the suitable name; but DO NOT do this if
 334 #   refind.conf is also in /EFI/refind.
 335 # - If booted in BIOS mode and the ESP lacks any other EFI files, install to
 336 #   /EFI/BOOT
 337 # - If booted in BIOS mode and there's no refind.conf file and there is a
 338 #   /EFI/Microsoft/Boot/bootmgfw.efi file, move it down one level and
 339 #   install under that name, "hijacking" the Windows boot loader filename
 340 DetermineTargetDir() {
 341    Upgrade=0
 342
 343    if [[ -f $InstallDir/EFI/BOOT/refind.conf && ! -f $InstallDir/EFI/refind/refind.conf ]] ; then
 344       SetVarsForBoot
 345       Upgrade=1
 346    fi
 347    if [[ -f $InstallDir/EFI/Microsoft/Boot/refind.conf && ! -f $InstallDir/EFI/refind/refind.conf ]] ; then
 348       SetVarsForMsBoot
 349       Upgrade=1
 350    fi
 351    if [[ -f $InstallDir/EFI/refind/refind.conf ]] ; then
 352       TargetDir="/EFI/refind"
 353       if [[ $ShimSource == "none" || $KeepName == 1 ]] ; then
 354          TargetX64="refind_x64.efi"
 355          TargetIA32="refind_ia32.efi"
 356       fi
 357       Upgrade=1
 358    fi
 359    if [[ $Upgrade == 1 ]] ; then
 360       echo "Found rEFInd installation in $InstallDir$TargetDir; upgrading it."
 361    fi
 362
 363    if [[ ! -d /sys/firmware/efi && ! $OSTYPE == darwin* && $Upgrade == 0 ]] ; then     # BIOS-mode
 364       FoundEfiFiles=`find "$InstallDir/EFI/BOOT" -name "*.efi" 2> /dev/null`
 365       FoundConfFiles=`find "$InstallDir" -name "refind\.conf" 2> /dev/null`
 366       if [[ ! -n "$FoundConfFiles" && -f "$InstallDir/EFI/Microsoft/Boot/bootmgfw.efi" ]] ; then
 367          mv -n "$InstallDir/EFI/Microsoft/Boot/bootmgfw.efi" "$InstallDir/EFI/Microsoft" &> /dev/null
 368          SetVarsForMsBoot
 369          echo "Running in BIOS mode with a suspected Windows installation; moving boot loader"
 370          echo "files so as to install to $InstallDir$TargetDir."
 371       elif [[ ! -n "$FoundEfiFiles" ]] ; then  # In BIOS mode and no default loader; install as default loader
 372          SetVarsForBoot
 373          echo "Running in BIOS mode with no existing default boot loader; installing to"
 374          echo $InstallDir$TargetDir
 375       else
 376          echo "Running in BIOS mode with an existing default boot loader; backing it up and"
 377          echo "installing rEFInd in its place."
 378          if [[ -d "$InstallDir/EFI/BOOT-rEFIndBackup" ]] ; then
 379             echo ""
 380             echo "Caution: An existing backup of a default boot loader exists! If the current"
 381             echo "default boot loader and the backup are different boot loaders, the current"
 382             echo "one will become inaccessible."
 383             echo ""
 384             echo -n "Do you want to proceed with installation (Y/N)? "
 385             ReadYesNo
 386             if [[ $YesNo == "Y" || $YesNo == "y" ]] ; then
 387                echo "OK; continuing with the installation..."
 388             else
 389                exit 0
 390             fi
 391          fi
 392          mv -n "$InstallDir/EFI/BOOT" "$InstallDir/EFI/BOOT-rEFIndBackup"
 393          SetVarsForBoot
 394       fi
 395    fi # BIOS-mode
 396 } # DetermineTargetDir()
 397
 398 # Determine (or guess) the filesystem used on the Linux /boot filesystem.
 399 # Store the result in the BootFS global variable.
 400 SetBootFS() {
 401    local Blkid
 402
 403    BootFS=""
 404    case "$OSTYPE" in
 405       linux-gnu)
 406            if command -v blkid 2>/dev/null; then
 407               BootPart=`df /boot | grep dev | cut -f 1 -d " "`
 408               BootFS=`blkid -o export $BootPart 2> /dev/null | grep TYPE= | cut -f 2 -d =`
 409            fi
 410            ;;
 411       darwin*)
 412            # 0FC63DAF-8483-4772-8E79-3D69D8477DE4 = Linux filesystem
 413            # BC13C2FF-59E6-4262-A352-B275FD6F7172 = Freedesktop $boot partition
 414            # 933AC7E1-2EB4-4F13-B844-0E14E2AEF915 = Freedesktop Linux /home
 415            # E6D6D379-F507-44C2-A23C-238F2A3DF928 = Linux LVM
 416            # A19D880F-05FC-4D3B-A006-743F0F84911E = Linux RAID
 417            # 0657FD6D-A4AB-43C4-84E5-0933C84B4F4F = Linux swap
 418            Temp=$(diskutil list | grep -i '0FC63DAF-8483-4772-8E79-3D69D8477DE4\|BC13C2FF-59E6-4262-A352-B275FD6F7172\|933AC7E1-2EB4-4F13-B844-0E14E2AEF915\|E6D6D379-F507-44C2-A23C-238F2A3DF928\|A19D880F-05FC-4D3B-A006-743F0F84911E\|0657FD6D-A4AB-43C4-84E5-0933C84B4F4F\|Linux')
 419            BootFS=""
 420            if [[ -n $Temp ]] ; then
 421               echo "Found suspected Linux partition(s); installing ext4fs driver."
 422               BootFS="ext4"
 423            fi
 424            ;;
 425    esac
 426 } # SetBootFS()
 427
 428 # Copy drivers from $RefindDir/drivers_$1 to $InstallDir/$TargetDir/drivers_$1,
 429 # honoring the $InstallDrivers condition. Must be passed a suitable
 430 # architecture code (ia32 or x64).
 431 CopyDrivers() {
 432    if [[ $InstallDrivers == "all" ]] ; then
 433       mkdir -p "$InstallDir/$TargetDir/drivers_$1"
 434       cp "$ThisDir"/drivers_$1/*_$1.efi "$InstallDir/$TargetDir/drivers_$1/" 2> /dev/null
 435       cp "$RefindDir"/drivers_$1/*_$1.efi "$InstallDir/$TargetDir/drivers_$1/" 2> /dev/null
 436    elif [[ "$InstallDrivers" == "boot" ]] ; then
 437       SetBootFS
 438       DriverType=""
 439       case $BootFS in
 440          ext2 | ext3) DriverType="ext2"
 441               # Could use ext4, but that can create unwanted entries from symbolic
 442               # links in / to /boot/vmlinuz if a separate /boot partition is used.
 443               ;;
 444          ext4) DriverType="ext4"
 445               ;;
 446          reiserfs) DriverType="reiserfs"
 447               ;;
 448          btrfs) DriverType="btrfs"
 449               ;;
 450          hfsplus) DriverType="hfs"
 451               ;;
 452          ntfs) DriverType="ntfs"
 453               ;;
 454          *) BootFS=""
 455       esac
 456       if [[ -n $BootFS ]] ; then
 457          echo "Installing driver for $BootFS (${DriverType}_$1.efi)"
 458          mkdir -p "$InstallDir/$TargetDir/drivers_$1"
 459          cp "$ThisDir/drivers_$1/${DriverType}_$1.efi" "$InstallDir/$TargetDir/drivers_$1/" 2> /dev/null
 460          cp "$RefindDir/drivers_$1/${DriverType}_$1.efi" "$InstallDir/$TargetDir/drivers_$1"/ 2> /dev/null
 461       fi
 462    fi
 463 } # CopyDrivers()
 464
 465 # Copy tools (currently only gptsync, and that only on Macs) to the EFI/tools
 466 # directory on the ESP. Must be passed a suitable architecture code (ia32
 467 # or x64).
 468 CopyTools() {
 469    mkdir -p "$InstallDir/EFI/tools"
 470    if [[ $OSTYPE == darwin* ]] ; then
 471       cp -f "$RefindDir/tools_$1/gptsync_$1.efi" "$InstallDir/EFI/tools/"
 472       if [[ -f "$InstallDir/EFI/tools/gptsync.efi" ]] ; then
 473          mv "$InstallDir/EFI/tools/gptsync.efi" "$InstallDir/EFI/tools/gptsync.efi-disabled"
 474          echo "Found old gptsync.efi; disabling it by renaming it to gptsync.efi-disabled"
 475       fi
 476    fi
 477 } # CopyTools()
 478
 479 # Copy the rEFInd files to the ESP or OS X root partition.
 480 # Sets Problems=1 if any critical commands fail.
 481 CopyRefindFiles() {
 482    mkdir -p "$InstallDir/$TargetDir"
 483    if [[ "$TargetDir" == '/EFI/BOOT' ]] ; then
 484       cp "$RefindDir/refind_ia32.efi" "$InstallDir/$TargetDir/$TargetIA32" 2> /dev/null
 485       if [[ $? != 0 ]] ; then
 486          echo "Note: IA32 (x86) binary not installed!"
 487       fi
 488       cp "$RefindDir/refind_x64.efi" "$InstallDir/$TargetDir/$TargetX64" 2> /dev/null
 489       if [[ $? != 0 ]] ; then
 490          Problems=1
 491       fi
 492       if [[ "$ShimSource" != "none" ]] ; then
 493          TargetShim="bootx64.efi"
 494          CopyShimFiles
 495       fi
 496       if [[ $InstallDrivers == "all" ]] ; then
 497          cp -r "$RefindDir"/drivers_* "$InstallDir/$TargetDir/" 2> /dev/null
 498          cp -r "$ThisDir"/drivers_* "$InstallDir/$TargetDir/" 2> /dev/null
 499       elif [[ $Upgrade == 1 || $InstallToEspOnMac == 1 ]] ; then
 500          if [[ $Platform == 'EFI64' ]] ; then
 501             CopyDrivers x64
 502             CopyTools x64
 503          else
 504             CopyDrivers ia32
 505             CopyTools ia32
 506          fi
 507       fi
 508       Refind=""
 509       if [[ $Platform == 'EFI64' ]] ; then
 510          Refind='bootx64.efi'
 511       elif [[ $Platform == 'EFI32' ]] ; then
 512          Refind='bootia32.efi'
 513       fi
 514       CopyKeys
 515    elif [[ $Platform == 'EFI64' || $TargetDir == "/EFI/Microsoft/Boot" ]] ; then
 516       cp "$RefindDir/refind_x64.efi" "$InstallDir/$TargetDir/$TargetX64"
 517       if [[ $? != 0 ]] ; then
 518          Problems=1
 519       fi
 520       CopyDrivers x64
 521       CopyTools x64
 522       Refind="refind_x64.efi"
 523       CopyKeys
 524       if [[ "$ShimSource" != "none" ]] ; then
 525          if [[ "$TargetShim" == "default" ]] ; then
 526             TargetShim=`basename "$ShimSource"`
 527          fi
 528          CopyShimFiles
 529          Refind="$TargetShim"
 530          if [[ $LocalKeys == 0 ]] ; then
 531             echo "Storing copies of rEFInd Secure Boot public keys in $EtcKeysDir"
 532             mkdir -p "$EtcKeysDir"
 533             cp "$ThisDir/keys/refind.cer" "$EtcKeysDir" 2> /dev/null
 534             cp "$ThisDir/keys/refind.crt" "$EtcKeysDir" 2> /dev/null
 535          fi
 536       fi
 537       if [[ "$TargetDir" == '/System/Library/CoreServices' ]] ; then
 538          SetupMacHfs $TargetX64
 539       fi
 540    elif [[ $Platform == 'EFI32' ]] ; then
 541       cp "$RefindDir/refind_ia32.efi" "$InstallDir/$TargetDir/$TargetIA32"
 542       if [[ $? != 0 ]] ; then
 543          Problems=1
 544       fi
 545       CopyDrivers ia32
 546       CopyTools ia32
 547       Refind="refind_ia32.efi"
 548       if [[ "$TargetDir" == '/System/Library/CoreServices' ]] ; then
 549          SetupMacHfs $TargetIA32
 550       fi
 551    else
 552       echo "Unknown platform! Aborting!"
 553       exit 1
 554    fi
 555    echo "Copied rEFInd binary files"
 556    echo ""
 557    if [[ -d "$InstallDir/$TargetDir/icons" ]] ; then
 558       rm -rf "$InstallDir/$TargetDir/icons-backup" &> /dev/null
 559       mv -f "$InstallDir/$TargetDir/icons" "$InstallDir/$TargetDir/icons-backup"
 560       echo "Notice: Backed up existing icons directory as icons-backup."
 561    fi
 562    cp -r "$IconsDir" "$InstallDir/$TargetDir"
 563    if [[ $? != 0 ]] ; then
 564       Problems=1
 565    fi
 566    mkdir -p "$InstallDir/$TargetDir/keys"
 567    cp -rf "$ThisDir"/keys/*.[cd]er "$InstallDir/$TargetDir/keys/" 2> /dev/null
 568    cp -rf "$EtcKeysDir"/*.[cd]er "$InstallDir/$TargetDir/keys/" 2> /dev/null
 569    if [[ -f "$InstallDir/$TargetDir/refind.conf" ]] ; then
 570       echo "Existing refind.conf file found; copying sample file as refind.conf-sample"
 571       echo "to avoid overwriting your customizations."
 572       echo ""
 573       cp -f "$ConfFile" "$InstallDir/$TargetDir"
 574       if [[ $? != 0 ]] ; then
 575          Problems=1
 576       fi
 577    else
 578       echo "Copying sample configuration file as refind.conf; edit this file to configure"
 579       echo "rEFInd."
 580       echo ""
 581       cp -f "$ConfFile" "$InstallDir/$TargetDir/refind.conf"
 582       if [[ $? != 0 ]] ; then
 583          Problems=1
 584       fi
 585    fi
 586    if [[ $DeleteRefindDir == 1 ]] ; then
 587       echo "Deleting the temporary directory $RefindDir"
 588       rm -r "$RefindDir"
 589    fi
 590 } # CopyRefindFiles()
 591
 592 # Mount the partition the user specified with the --usedefault or --ownhfs option
 593 MountDefaultTarget() {
 594    InstallDir=/tmp/refind_install
 595    mkdir -p "$InstallDir"
 596    UnmountEsp=1
 597    if [[ $OSTYPE == darwin* ]] ; then
 598       if [[ $OwnHfs == '1' ]] ; then
 599          Temp=`diskutil info "$TargetPart" | grep "Mount Point"`
 600          InstallDir=`echo $Temp | cut -f 3-30 -d ' '`
 601          if [[ $InstallDir == '' ]] ; then
 602             InstallDir=/tmp/refind_install
 603             mount -t hfs "$TargetPart" "$InstallDir"
 604          else
 605             UnmountEsp=0
 606          fi
 607       else
 608          mount -t msdos "$TargetPart" "$InstallDir"
 609       fi
 610    elif [[ $OSTYPE == linux-gnu ]] ; then
 611       mount -t vfat "$TargetPart" "$InstallDir"
 612    fi
 613    if [[ $? != 0 ]] ; then
 614       echo "Couldn't mount $TargetPart ! Aborting!"
 615       rmdir "$InstallDir"
 616       exit 1
 617    fi
 618 } # MountDefaultTarget()
 619
 620 #
 621 # A series of OS X support functions....
 622 #
 623
 624 # Mount the ESP at /Volumes/ESP or determine its current mount
 625 # point.
 626 # Sets InstallDir to the ESP mount point
 627 # Sets UnmountEsp if we mounted it
 628 MountOSXESP() {
 629    # Identify the ESP. Note: This returns the FIRST ESP found;
 630    # if the system has multiple disks, this could be wrong!
 631    Temp=$(mount | sed -n -E "/^(\/dev\/disk[0-9]+s[0-9]+) on \/ \(.*$/s//\1/p")
 632    if [ $Temp ]; then
 633       Temp=$(diskutil list | grep " EFI " | grep -o 'disk.*' | head -n 1)
 634       if [ -z $Temp ]; then
 635          echo "Warning: root device doesn't have an EFI partition"
 636       fi
 637    else
 638       echo "Warning: root device could not be found"
 639    fi
 640    if [ -z $Temp ]; then
 641       Temp=$(diskutil list | sed -n -E '/^ *[0-9]+:[ ]+EFI EFI[ ]+[0-9.]+ [A-Z]+[ ]+(disk[0-9]+s[0-9]+)$/ { s//\1/p
 642              q
 643          }' )
 644
 645       if [ -z $Temp ]; then
 646          echo "Could not find an EFI partition. Aborting!"
 647          exit 1
 648       fi
 649    fi
 650    Esp=/dev/`echo $Temp`
 651    # If the ESP is mounted, use its current mount point....
 652    Temp=`df -P | grep "$Esp "`
 653    InstallDir=`echo $Temp | cut -f 6- -d ' '`
 654    if [[ "$InstallDir" == '' ]] ; then
 655       mkdir /Volumes/ESP &> /dev/null
 656       mount -t msdos "$Esp" /Volumes/ESP
 657       # Some systems have HFS+ "ESPs." They shouldn't, but they do. If this is
 658       # detected, mount it as such and set appropriate options.
 659       if [[ $? != 0 ]] ; then
 660          mount -t hfs "$Esp" /Volumes/Esp
 661          OwnHfs=1
 662          InstallToEspOnMac=0
 663          if [[ $? != 0 ]] ; then
 664             echo "Unable to mount ESP! Aborting!\n"
 665             exit 1
 666          fi
 667       fi
 668       UnmountEsp=1
 669       InstallDir="/Volumes/ESP"
 670    fi
 671 } # MountOSXESP()
 672
 673 # Set up for booting from Mac HFS+ volume that boots rEFInd in MJG's way
 674 # (http://mjg59.dreamwidth.org/7468.html)
 675 # Must be passed the original rEFInd binary filename (without a path).
 676 SetupMacHfs() {
 677    if [[ -s "$InstallDir/mach_kernel" ]] ; then
 678       echo "Attempt to install rEFInd to a partition with a /mach_kernel file! Aborting!"
 679       exit 1
 680    fi
 681    cp -n "$InstallDir/$TargetDir/boot.efi" "$InstallDir/$TargetDir/boot.efi-backup" &> /dev/null
 682    ln -f "$InstallDir/$TargetDir/$1" "$InstallDir/$TargetDir/boot.efi"
 683    touch "$InstallDir/mach_kernel"
 684    rm "$InstallDir/$TargetDir/SystemVersion.plist" &> /dev/null
 685    cat - << ENDOFHERE >> "$InstallDir/$TargetDir/SystemVersion.plist"
 686 <xml version="1.0" encoding="UTF-8"?>
 687 <plist version="1.0">
 688 <dict>
 689         <key>ProductBuildVersion</key>
 690         <string></string>
 691         <key>ProductName</key>
 692         <string>rEFInd</string>
 693         <key>ProductVersion</key>
 694         <string>0.9.2</string>
 695 </dict>
 696 </plist>
 697 ENDOFHERE
 698 } # SetupMacHfs()
 699
 700 CheckForSIP() {
 701    if [[ -x "/usr/bin/csrutil" ]] ; then
 702       local OKToInstall=`/usr/bin/csrutil status | grep "Protection status: enabled (Custom Configuration\|Apple Internal)"`
 703       if [[ -z "$OKToInstall" ]] ; then
 704          echo
 705          echo "**** ALERT: SIP ENABLED! ****"
 706          echo
 707          if [[ "$Upgrade" == "1" ]] ; then
 708             echo "You are attempting to upgrade an existing installation, but it appears that"
 709             echo "System Integrity Protection (SIP) is enabled. If rEFInd is working now, then"
 710             echo "this is fine; you can upgrade your existing rEFInd. If rEFInd is not working,"
 711             echo "though, re-installing from this boot will not help. To re-enable rEFInd, you"
 712             echo "must re-install it from a Recovery system or from another OS. To enter the"
 713             echo "Recovery system and re-install rEFInd:"
 714          else
 715             echo "rEFInd cannot be installed because System Integrity Protection (SIP) seems"
 716             echo "to be enabled! You must install rEFInd from your Recovery installation or"
 717             echo "from another OS. To install from the Recovery system:"
 718          fi
 719          echo
 720          echo "  1. Reboot"
 721          echo "  2. Hold down Command+R as the chime sounds"
 722          echo "  3. When the OS has booted, select Utilities->Terminal"
 723          echo "  4. Change to this directory with the 'cd' command; it will probably be under"
 724          if [[ "`pwd | cut -b 1-8`" == "/Volumes" ]] ; then
 725             echo "     `pwd`"
 726          else
 727             local RootName=`diskutil info -plist / | grep -A 1 VolumeName | grep string | cut -d \> -f 2 | cut -d \< -f 1`
 728             echo "     /Volumes/$RootName`pwd`"
 729          fi
 730          echo "  5. Re-run this script."
 731          echo
 732          if [[ "$Upgrade" != "1" ]] ; then
 733             echo "If you believe SIP is NOT enabled, you may attempt an installation anyhow,"
 734             echo "but it may fail."
 735             echo
 736          fi
 737          echo "For more on this subject, see http://www.rodsbooks.com/refind/sip.html"
 738          echo
 739          echo -n "Do you want to attempt installation (Y/N)? "
 740          ReadYesNo
 741          if [[ $YesNo == "N" || $YesNo == "n" ]] ; then
 742             echo "Exiting!"
 743             exit
 744          fi
 745       fi # csrutil status suggests OK to install
 746    fi # csrutil exists
 747 } # CheckForSIP()
 748
 749 # Control the OS X installation.
 750 # Sets Problems=1 if problems found during the installation.
 751 InstallOnOSX() {
 752    echo "Installing rEFInd on OS X...."
 753    if [[ "$InstallToEspOnMac" == "1" ]] ; then
 754       MountOSXESP
 755    elif [[ "$TargetDir" == "/EFI/BOOT" || "$OwnHfs" == '1' ]] ; then
 756       MountDefaultTarget
 757    else
 758       InstallDir="$RootDir/"
 759    fi
 760    echo "Installing rEFInd to the partition mounted at $InstallDir"
 761    DetermineTargetDir
 762    CheckForSIP
 763    Platform=`ioreg -l -p IODeviceTree | grep firmware-abi | cut -d "\"" -f 4`
 764    CopyRefindFiles
 765    cp "$ThisDir/mountesp" /usr/local/bin
 766    if [[ $InstallToEspOnMac == "1" ]] ; then
 767       bless --mount "$InstallDir" --setBoot --file "$InstallDir/$TargetDir/$Refind" --shortform
 768    elif [[ "$TargetDir" != "/EFI/BOOT" ]] ; then
 769       bless --setBoot --folder "$InstallDir/$TargetDir" --file "$InstallDir/$TargetDir/$Refind"
 770    fi
 771    if [[ $? != 0 ]] ; then
 772       Problems=1
 773    fi
 774    if [[ -f /Library/StartupItems/rEFItBlesser || -d /Library/StartupItems/rEFItBlesser ]] ; then
 775       echo
 776       echo "/Library/StartupItems/rEFItBlesser found!"
 777       echo "This program is part of rEFIt, and will cause rEFInd to fail to work after"
 778       echo -n "its first boot. Do you want to remove rEFItBlesser (Y/N)? "
 779       ReadYesNo
 780       if [[ $YesNo == "Y" || $YesNo == "y" ]] ; then
 781          echo "Deleting /Library/StartupItems/rEFItBlesser..."
 782          rm -r /Library/StartupItems/rEFItBlesser
 783       else
 784          echo "Not deleting rEFItBlesser."
 785       fi
 786    fi
 787    echo
 788    echo "WARNING: If you have an Advanced Format disk, *DO NOT* attempt to check the"
 789    echo "bless status with 'bless --info', since this is known to cause disk corruption"
 790    echo "on some systems!!"
 791    echo
 792 } # InstallOnOSX()
 793
 794
 795 #
 796 # Now a series of Linux support functions....
 797 #
 798
 799 # Check for evidence that we're running in Secure Boot mode. If so, and if
 800 # appropriate options haven't been set, warn the user and offer to abort.
 801 # If we're NOT in Secure Boot mode but the user HAS specified the --shim
 802 # or --localkeys option, warn the user and offer to abort.
 803 CheckSecureBoot() {
 804    local IsSecureBoot
 805    if [[ -f /sys/firmware/efi/vars/SecureBoot-8be4df61-93ca-11d2-aa0d-00e098032b8c/data ]] ; then
 806       IsSecureBoot=`od -An -t u1 /sys/firmware/efi/vars/SecureBoot-8be4df61-93ca-11d2-aa0d-00e098032b8c/data | tr -d '[[:space:]]'`
 807    else
 808       IsSecureBoot="0"
 809    fi
 810    if [[ $IsSecureBoot == "1" && "$TargetDir" != '/EFI/BOOT' && "$ShimSource" == "none" ]] ; then
 811       echo ""
 812       echo "CAUTION: Your computer appears to be booted with Secure Boot, but you haven't"
 813       echo "specified a valid shim.efi file source. Chances are you should re-run with"
 814       echo "the --shim option. You can read more about this topic at"
 815       echo "http://www.rodsbooks.com/refind/secureboot.html."
 816       echo ""
 817       echo -n "Do you want to proceed with installation (Y/N)? "
 818       ReadYesNo
 819       if [[ $YesNo == "Y" || $YesNo == "y" ]] ; then
 820          echo "OK; continuing with the installation..."
 821       else
 822          exit 0
 823       fi
 824    fi
 825
 826    if [[ "$ShimSource" != "none" && ! $IsSecureBoot == "1" ]] ; then
 827       echo ""
 828       echo "You've specified installing using a shim.efi file, but your computer does not"
 829       echo "appear to be running in Secure Boot mode. Although installing in this way"
 830       echo "should work, it's unnecessarily complex. You may continue, but unless you"
 831       echo "plan to enable Secure Boot, you should consider stopping and omitting the"
 832       echo "--shim option. You can read more about this topic at"
 833       echo "http://www.rodsbooks.com/refind/secureboot.html."
 834       echo ""
 835       echo -n "Do you want to proceed with installation (Y/N)? "
 836       ReadYesNo
 837       if [[ $YesNo == "Y" || $YesNo == "y" ]] ; then
 838          echo "OK; continuing with the installation..."
 839       else
 840          exit 0
 841       fi
 842    fi
 843
 844    if [[ $LocalKeys != 0 && ! $IsSecureBoot == "1" ]] ; then
 845       echo ""
 846       echo "You've specified re-signing your rEFInd binaries with locally-generated keys,"
 847       echo "but your computer does not appear to be running in Secure Boot mode. The"
 848       echo "keys you generate will be useless unless you enable Secure Boot. You may"
 849       echo "proceed with this installation, but before you do so, you may want to read"
 850       echo "more about it at http://www.rodsbooks.com/refind/secureboot.html."
 851       echo ""
 852       echo -n "Do you want to proceed with installation (Y/N)? "
 853       ReadYesNo
 854       if [[ $YesNo == "Y" || $YesNo == "y" ]] ; then
 855          echo "OK; continuing with the installation..."
 856       else
 857          exit 0
 858       fi
 859    fi
 860
 861 } # CheckSecureBoot()
 862
 863 # Check for the presence of locally-generated keys from a previous installation in
 864 # $EtcKeysDir (/etc/refind.d/keys). If they're not present, generate them using
 865 # openssl.
 866 GenerateKeys() {
 867    PrivateKey="$EtcKeysDir/$LocalKeysBase.key"
 868    CertKey="$EtcKeysDir/$LocalKeysBase.crt"
 869    DerKey="$EtcKeysDir/$LocalKeysBase.cer"
 870    OpenSSL=`which openssl 2> /dev/null`
 871
 872    # Do the work only if one or more of the necessary keys is missing
 873    # TODO: Technically, we don't need the DerKey; but if it's missing and openssl
 874    # is also missing, this will fail. This could be improved.
 875    if [[ ! -f "$PrivateKey" || ! -f "$CertKey" || ! -f "$DerKey" ]] ; then
 876       echo "Generating a fresh set of local keys...."
 877       mkdir -p "$EtcKeysDir"
 878       chmod 0700 "$EtcKeysDir"
 879       if [[ ! -x "$OpenSSL" ]] ; then
 880          echo "Can't find openssl, which is required to create your private signing keys!"
 881          echo "Aborting!"
 882          exit 1
 883       fi
 884       if [[ -f "$PrivateKey" ]] ; then
 885          echo "Backing up existing $PrivateKey"
 886          cp -f "$PrivateKey" "$PrivateKey.backup" 2> /dev/null
 887       fi
 888       if [[ -f "$CertKey" ]] ; then
 889          echo "Backing up existing $CertKey"
 890          cp -f "$CertKey" "$CertKey.backup" 2> /dev/null
 891       fi
 892       if [[ -f "$DerKey" ]] ; then
 893          echo "Backing up existing $DerKey"
 894          cp -f "$DerKey" "$DerKey.backup" 2> /dev/null
 895       fi
 896       "$OpenSSL" req -new -x509 -newkey rsa:2048 -keyout "$PrivateKey" -out "$CertKey" \
 897                      -nodes -days 3650 -subj "/CN=Locally-generated rEFInd key/"
 898       "$OpenSSL" x509 -in "$CertKey" -out "$DerKey" -outform DER
 899       chmod 0600 "$PrivateKey"
 900    else
 901       echo "Using existing local keys...."
 902    fi
 903 }
 904
 905 # Sign a single binary. Requires parameters:
 906 #   $1 = source file
 907 #   $2 = destination file
 908 # Also assumes that the SBSign, PESign, UseSBSign, UsePESign, and various key variables are set
 909 # appropriately.
 910 # Aborts script on error
 911 SignOneBinary() {
 912    $SBSign --key "$PrivateKey" --cert "$CertKey" --output "$2" "$1"
 913    if [[ $? != 0 ]] ; then
 914       echo "Problem signing the binary $1! Aborting!"
 915       exit 1
 916    fi
 917 }
 918
 919 # Re-sign the x86-64 binaries with a locally-generated key, First look for appropriate
 920 # key files in $EtcKeysDir. If they're present, use them to re-sign the binaries. If
 921 # not, try to generate new keys and store them in $EtcKeysDir.
 922 ReSignBinaries() {
 923    SBSign=`which sbsign 2> /dev/null`
 924    echo "Found sbsign at $SBSign"
 925    TempDir="/tmp/refind_local"
 926    if [[ ! -x "$SBSign" ]] ; then
 927       echo "Can't find sbsign, which is required to sign rEFInd with your own keys!"
 928       echo "Aborting!"
 929       exit 1
 930    fi
 931    GenerateKeys
 932    mkdir -p "$TempDir/drivers_x64"
 933    cp "$RefindDir/refind.conf-sample $TempDir" 2> /dev/null
 934    cp "$ThisDir/refind.conf-sample $TempDir" 2> /dev/null
 935    cp "$RefindDir/refind_ia32.efi $TempDir" 2> /dev/null
 936    cp -a "$RefindDir/drivers_ia32 $TempDir" 2> /dev/null
 937    cp -a "$ThisDir/drivers_ia32 $TempDir" 2> /dev/null
 938    SignOneBinary "$RefindDir/refind_x64.efi" "$TempDir/refind_x64.efi"
 939    SaveIFS=$IFS
 940    IFS=$(echo -en "\n\b")
 941    for Driver in `ls "$RefindDir"/drivers_x64/*.efi "$ThisDir"/drivers_x64/*.efi 2> /dev/null` ; do
 942       TempName=`basename "$Driver"`
 943       SignOneBinary "$Driver" "$TempDir/drivers_x64/$TempName"
 944    done
 945    IFS=$SaveIFS
 946    RefindDir="$TempDir"
 947    DeleteRefindDir=1
 948 } # ReSignBinaries()
 949
 950 # Locate and mount an ESP, if possible, based on parted output.
 951 # Should be called only if /boot/efi is NOT an acceptable ESP.
 952 # Sets InstallDir to the mounted ESP's path ($RootDir/boot/efi)
 953 # and EspFilesystem the filesystem (always "vfat")
 954 FindLinuxESP() {
 955    echo "The ESP doesn't seem to be mounted! Trying to find it...."
 956    local Drive
 957    local PartNum
 958    local TableType
 959    local DmStatus
 960    local SkipIt
 961    local Dmraid
 962    for Drive in `ls /dev/[sh]d?` ; do
 963       SkipIt=0
 964       Dmraid=`which dmraid 2> /dev/null`
 965       if [ -x "$Dmraid" ] ; then
 966          DmStatus=`dmraid -r | grep $Drive`
 967          if [ -n "$DmStatus" ] ; then
 968             echo "$Drive seems to be part of a RAID array; skipping!"
 969             SkipIt=1
 970          fi
 971       fi
 972       TableType=`parted $Drive print -m -s 2>/dev/null | awk -F: '$1 == "'$Drive'" { print $6 }'`
 973       if [[ $TableType == 'gpt' && $SkipIt == 0 ]] ; then # read only GPT disks that aren't part of dmraid array
 974          PartNum=`LANG=C parted $Drive print -m -s 2>/dev/null | awk -F: '$7 ~ "(^boot| boot)" { print $1 }' | head -n 1`
 975          if [ "$PartNum" -eq "$PartNum" ] 2> /dev/null ; then
 976             InstallDir="$RootDir/boot/efi"
 977             mkdir -p $InstallDir
 978             mount $Drive$PartNum $InstallDir
 979             EspFilesystem=`grep "$Drive$PartNum.*/boot/efi" /etc/mtab | uniq | grep -v autofs | cut -d " " -f 3`
 980             if [[ $EspFilesystem != 'vfat' ]] ; then
 981                umount $InstallDir
 982             else
 983                echo "Mounting ESP at $InstallDir"
 984                break;
 985             fi
 986          fi # $PartNum -eq $PartNum
 987       fi # TableType
 988    done
 989 } # FindLinuxESP()
 990
 991 # Identifies the ESP's location (/boot or /boot/efi, or these locations under
 992 # the directory specified by --root); aborts if the ESP isn't mounted at
 993 # either location.
 994 # Sets InstallDir to the ESP mount point.
 995 FindMountedESP() {
 996    mount /boot &> /dev/null
 997    mount /boot/efi &> /dev/null
 998    EspLine=`df "$RootDir/boot/efi" 2> /dev/null | grep boot/efi`
 999    if [[ ! -n "$EspLine" ]] ; then
1000       EspLine=`df "$RootDir"/boot | grep boot`
1001    fi
1002    InstallDir=`echo $EspLine | cut -d " " -f 6`
1003
1004    if [[ -n "$InstallDir" ]] ; then
1005       EspFilesystem=`grep -w "$InstallDir" /etc/mtab | uniq | grep -v autofs | cut -d " " -f 3`
1006    fi
1007    if [[ $EspFilesystem != 'vfat' ]] ; then
1008       FindLinuxESP
1009    fi
1010    if [[ $EspFilesystem != 'vfat' ]] ; then
1011       echo "$RootDir/$InstallDir doesn't seem to be on a VFAT filesystem. The ESP must be"
1012       echo "mounted at $RootDir/boot or $RootDir/boot/efi and it must be VFAT! Aborting!"
1013       exit 1
1014    fi
1015    echo "ESP was found at $InstallDir using $EspFilesystem"
1016 } # FindMountedESP
1017
1018 # Uses efibootmgr to add an entry for rEFInd to the EFI's NVRAM.
1019 # If this fails, sets Problems=1
1020 AddBootEntry() {
1021    local PartNum
1022    Efibootmgr=`which efibootmgr 2> /dev/null`
1023    if [[ "$Efibootmgr" ]] ; then
1024       InstallDisk=`grep "$InstallDir" /etc/mtab | cut -d " " -f 1 | cut -c 1-8`
1025       PartNum=`grep "$InstallDir" /etc/mtab | cut -d " " -f 1 | cut -c 9-10`
1026       EntryFilename="$TargetDir/$Refind"
1027       EfiEntryFilename=`echo ${EntryFilename//\//\\\}`
1028       EfiEntryFilename2=`echo ${EfiEntryFilename} | sed s/\\\\\\\\/\\\\\\\\\\\\\\\\/g`
1029       ExistingEntry=`"$Efibootmgr" -v | grep -i "$EfiEntryFilename2"`
1030
1031       if [[ "$ExistingEntry" ]] ; then
1032          ExistingEntryBootNum=`echo "$ExistingEntry" | cut -c 5-8`
1033          FirstBoot=`"$Efibootmgr" | grep BootOrder | cut -c 12-15`
1034          if [[ "$ExistingEntryBootNum" != "$FirstBoot" ]] ; then
1035             echo "An existing rEFInd boot entry exists, but isn't set as the default boot"
1036             echo "manager. The boot order is being adjusted to make rEFInd the default boot"
1037             echo "manager. If this is NOT what you want, you should use efibootmgr to"
1038             echo "manually adjust your EFI's boot order."
1039          fi
1040          "$Efibootmgr" -b $ExistingEntryBootNum -B &> /dev/null
1041       fi
1042
1043       echo "Installing it!"
1044       if [[ "$KeepName" == 0 ]] ; then
1045          "$Efibootmgr" -c -l "$EfiEntryFilename" -L "rEFInd Boot Manager" -d $InstallDisk -p $PartNum &> /dev/null
1046       else
1047          "$Efibootmgr" -c -l "$EfiEntryFilename" -L "rEFInd Boot Manager" -d $InstallDisk -p $PartNum \
1048                        -u "$TargetShim $TargetX64" &> /dev/null
1049       fi
1050       if [[ $? != 0 ]] ; then
1051          EfibootmgrProblems=1
1052          Problems=1
1053       fi
1054
1055    else # efibootmgr not found
1056       EfibootmgrProblems=1
1057       Problems=1
1058    fi
1059
1060    if [[ $EfibootmgrProblems ]] ; then
1061       echo
1062       echo "ALERT: There were problems running the efibootmgr program! You may need to"
1063       echo "rename the $Refind binary to the default name (EFI/boot/bootx64.efi"
1064       echo "on x86-64 systems or EFI/boot/bootia32.efi on x86 systems) to have it run!"
1065       echo
1066    else
1067       echo "rEFInd has been set as the default boot manager."
1068    fi
1069 } # AddBootEntry()
1070
1071 # Create a minimal/sample refind_linux.conf file in /boot.
1072 GenerateRefindLinuxConf() {
1073    if [[ -f "$RLConfFile" ]] ; then
1074       echo "Existing $RLConfFile found; not overwriting."
1075    else
1076       echo "Creating $RLConfFile; edit it to adjust kernel options."
1077       if [[ -f "$RootDir/etc/default/grub" ]] ; then
1078          # We want the default options used by the distribution, stored here....
1079          source "$RootDir/etc/default/grub"
1080          echo "Setting default boot options based on $RootDir/etc/default/grub"
1081       fi
1082       RootFS=`df "$RootDir" | grep dev | cut -f 1 -d " "`
1083       StartOfDevname=`echo "$RootFS" | cut -b 1-7`
1084       if [[ "$StartOfDevname" == "/dev/sd" || "$StartOfDevName" == "/dev/hd" ]] ; then
1085          # Identify root filesystem by UUID rather than by device node, if possible
1086          Uuid=`blkid -o export -s UUID "$RootFS" 2> /dev/null | grep UUID=`
1087          if [[ -n $Uuid ]] ; then
1088             RootFS="$Uuid"
1089          fi
1090       fi
1091       DefaultOptions="$GRUB_CMDLINE_LINUX $GRUB_CMDLINE_LINUX_DEFAULT"
1092       echo "\"Boot with standard options\"        \"ro root=$RootFS $DefaultOptions \"" > $RLConfFile
1093       echo "\"Boot to single-user mode\"          \"ro root=$RootFS $DefaultOptions single\"" >> $RLConfFile
1094       echo "\"Boot with minimal options\"         \"ro root=$RootFS\"" >> $RLConfFile
1095    fi
1096 }
1097
1098 # Controls rEFInd installation under Linux.
1099 # Sets Problems=1 if something goes wrong.
1100 InstallOnLinux() {
1101    if [[ "$TargetDir" == "/System/Library/CoreServices" ]] ; then
1102       echo "You may not use the --ownhfs option under Linux! Aborting!"
1103       exit 1
1104    fi
1105    echo "Installing rEFInd on Linux...."
1106    modprobe efivars &> /dev/null
1107    if [[ $TargetDir == "/EFI/BOOT" ]] ; then
1108       MountDefaultTarget
1109    else
1110       FindMountedESP
1111       DetermineTargetDir
1112    fi
1113    CpuType=`uname -m`
1114    if [[ $CpuType == 'x86_64' ]] ; then
1115       Platform="EFI64"
1116    elif [[ ($CpuType == 'i386' || $CpuType == 'i486' || $CpuType == 'i586' || $CpuType == 'i686') ]] ; then
1117       Platform="EFI32"
1118       # If we're in EFI mode, do some sanity checks, and alert the user or even
1119       # abort. Not in BIOS mode, though, since that could be used on an emergency
1120       # disc to try to recover a troubled Linux installation.
1121       if [[ -d /sys/firmware/efi ]] ; then
1122          if [[ "$ShimSource" != "none" && "$TargetDir" != "/BOOT/EFI" ]] ; then
1123             echo ""
1124             echo "CAUTION: shim does not currently supports 32-bit systems, so you should not"
1125             echo "use the --shim option to install on such systems. Aborting!"
1126             echo ""
1127             exit 1
1128          fi
1129          echo
1130          echo "CAUTION: This Linux installation uses a 32-bit kernel. 32-bit EFI-based"
1131          echo "computers are VERY RARE. If you've installed a 32-bit version of Linux"
1132          echo "on a 64-bit computer, you should manually install the 64-bit version of"
1133          echo "rEFInd. If you're installing on a Mac, you should do so from OS X. If"
1134          echo "you're positive you want to continue with this installation, answer 'Y'"
1135          echo "to the following question..."
1136          echo
1137          echo -n "Are you sure you want to continue (Y/N)? "
1138          ReadYesNo
1139          if [[ $YesNo == "Y" || $YesNo == "y" ]] ; then
1140             echo "OK; continuing with the installation..."
1141          else
1142             exit 0
1143          fi
1144       fi # in EFI mode
1145    else
1146       echo "Unknown CPU type '$CpuType'; aborting!"
1147       exit 1
1148    fi
1149
1150    if [[ $LocalKeys == 1 ]] ; then
1151       ReSignBinaries
1152    fi
1153
1154    CheckSecureBoot
1155    CopyRefindFiles
1156    if [[ "$TargetDir" != "/EFI/BOOT" && "$TargetDir" != "/EFI/Microsoft/Boot" ]] ; then
1157       AddBootEntry
1158       GenerateRefindLinuxConf
1159    fi
1160 } # InstallOnLinux()
1161
1162 #
1163 # The main part of the script. Sets a few environment variables,
1164 # performs a few startup checks, and then calls functions to
1165 # install under OS X or Linux, depending on the detected platform.
1166 #
1167 GetParams "$@"
1168 ThisDir="$( cd -P "${BASH_SOURCE%/*}" && pwd )"
1169 RefindDir="$ThisDir/refind"
1170 if [[ $UID != 0 ]] ; then
1171    echo "Not running as root; attempting to elevate privileges via sudo...."
1172    sudo "$BASH_SOURCE" "$@"
1173    if [[ $? != 0 ]] ; then
1174       echo "This script must be run as root (or using sudo). Exiting!"
1175       exit 1
1176    else
1177       exit 0
1178    fi
1179 fi
1180 CheckForFiles
1181 case "$OSTYPE" in
1182    darwin*)
1183         if [[ "$ShimSource" != "none" ]] ; then
1184            echo "The --shim option is not supported on OS X! Exiting!"
1185            exit 1
1186         fi
1187         if [[ "$LocalKeys" != 0 ]] ; then
1188            echo "The --localkeys option is not supported on OS X! Exiting!"
1189            exit 1
1190         fi
1191         InstallOnOSX $1
1192         ;;
1193    linux-gnu)
1194         InstallOnLinux
1195         ;;
1196    *)
1197         echo "Running on unknown OS; aborting!"
1198         if [[ "$InstallToEspOnMac" == 0 ]] ; then
1199            echo "The --notesp option is not supported on Linux! Exiting!"
1200            exit 1
1201         fi
1202 esac
1203
1204 if [[ $Problems ]] ; then
1205    echo
1206    echo "ALERT:"
1207    echo "Installation has completed, but problems were detected. Review the output for"
1208    echo "error messages and take corrective measures as necessary. You may need to"
1209    echo "re-run this script or install manually before rEFInd will work."
1210    echo
1211 else
1212    echo
1213    echo "Installation has completed successfully."
1214    echo
1215 fi
1216
1217 if [[ $UnmountEsp == '1' ]] ; then
1218    echo "Unmounting install dir"
1219    umount $InstallDir
1220 fi
1221
1222 if [[ "$InstallDir" == /tmp/refind_install ]] ; then
1223 #   sleep 5
1224    rmdir "$InstallDir"
1225 fi