code.delx.au - refind/blob - install.sh

   1 #!/bin/bash
   2 #
   3 # Linux/MacOS X script to install rEFInd
   4 #
   5 # Usage:
   6 #
   7 # ./install.sh [options]
   8 #
   9 # options include:
  10 #    "--notesp" to install to the OS X root filesystem rather than to the ESP.
  11 #           This option may not be used under Linux.
  12 #    "--usedefault {devicefile}" to install as default
  13 #           (/EFI/BOOT/BOOTX64.EFI and similar) to the specified device
  14 #           (/dev/sdd1 or whatever) without registering with the NVRAM.
  15 #    "--ownhfs {devicefile}" to install to an HFS+ volume that's NOT currently
  16 #           an OS X boot volume.
  17 #    "--root {dir}" to specify installation using the specified directory
  18 #           as the system's root
  19 #    "--alldrivers" to install all drivers along with regular files
  20 #    "--nodrivers" to suppress driver installation (default in Linux is
  21 #           driver used on /boot; --nodrivers is OS X default)
  22 #    "--shim {shimfile}" to install a shim.efi file for Secure Boot
  23 #    "--preloader" is synonymous with "--shim"
  24 #    "--localkeys" to re-sign x86-64 binaries with a locally-generated key
  25 #    "--yes" to assume a "yes" response to all prompts
  26 #
  27 # The "esp" option is valid only on Mac OS X; it causes
  28 # installation to the EFI System Partition (ESP) rather than
  29 # to the current OS X boot partition. Under Linux, this script
  30 # installs to the ESP by default.
  31 #
  32 # This program is copyright (c) 2012-2015 by Roderick W. Smith
  33 # It is released under the terms of the GNU GPL, version 3,
  34 # a copy of which should be included in the file COPYING.txt.
  35 #
  36 # Revision history:
  37 #
  38 # 0.8.6   -- Fixed bugs that caused misidentification of ESP on disks with
  39 #            partition numbers over 10 on OS X and misidentification of mount
  40 #            point if already-mounted ESP had space in path.
  41 # 0.8.5   -- Refinement/cleanup of new OS X ESP-as-default policy
  42 # 0.8.4   -- OS X default changed to install to ESP under /EFI/BOOT
  43 # 0.7.9   -- Fixed bug that caused errors if dmraid utility not installed
  44 # 0.7.7   -- Fixed bug that created mangled refind_linux.conf file; added ability
  45 #            to locate and mount ESP on Linux, if it's not mounted
  46 # 0.7.6   -- Added --ownhfs {device-filename} option
  47 # 0.7.5   -- Fixed bug when installing to ESP on recent versions of OS X
  48 # 0.7.2   -- Fixed code that could be confused by use of autofs to mount the ESP
  49 # 0.7.0   -- Added support for the new Btrfs driver
  50 # 0.6.12  -- Added support for PreLoader as well as for shim
  51 # 0.6.11  -- Improvements in script's ability to handle directories with spaces
  52 #            in their names
  53 # 0.6.9   -- Install gptsync on Macs
  54 # 0.6.8   -- Bug fix: ESP scan now uses "uniq".
  55 # 0.6.6   -- Bug fix: Upgrade drivers when installed to EFI/BOOT. Also enable
  56 #            copying shim.efi and MokManager.efi over themselves.
  57 # 0.6.4   -- Copies ext2 driver rather than ext4 driver for ext2/3fs
  58 # 0.6.3   -- Support for detecting rEFInd in EFI/BOOT and EFI/Microsoft/Boot
  59 #            directories & for installing to EFI/BOOT in BIOS mode
  60 # 0.6.2-1 -- Added --yes option & tweaked key-copying for use with RPM install script
  61 # 0.6.1   -- Added --root option; minor bug fixes
  62 # 0.6.0   -- Changed --drivers to --alldrivers and added --nodrivers option;
  63 #            changed default driver installation behavior in Linux to install
  64 #            the driver needed to read /boot (if available)
  65 # 0.5.1.2 -- Fixed bug that caused failure to generate refind_linux.conf file
  66 # 0.5.1.1 -- Fixed bug that caused script failure under OS X
  67 # 0.5.1   -- Added --shim & --localkeys options & create sample refind_linux.conf
  68 #            in /boot
  69 # 0.5.0   -- Added --usedefault & --drivers options & changed "esp" option to "--esp"
  70 # 0.4.5   -- Fixed check for rEFItBlesser in OS X
  71 # 0.4.2   -- Added notice about BIOS-based OSes & made NVRAM changes in Linux smarter
  72 # 0.4.1   -- Added check for rEFItBlesser in OS X
  73 # 0.3.3.1 -- Fixed OS X 10.7 bug; also works as make target
  74 # 0.3.2.1 -- Check for presence of source files; aborts if not present
  75 # 0.3.2   -- Initial version
  76 #
  77 # Note: install.sh version numbers match those of the rEFInd package
  78 # with which they first appeared.
  79
  80 RootDir="/"
  81 TargetDir=/EFI/refind
  82 LocalKeysBase="refind_local"
  83 ShimSource="none"
  84 ShimType="none"
  85 TargetShim="default"
  86 TargetX64="refind_x64.efi"
  87 TargetIA32="refind_ia32.efi"
  88 LocalKeys=0
  89 DeleteRefindDir=0
  90 AlwaysYes=0
  91
  92 #
  93 # Functions used by both OS X and Linux....
  94 #
  95
  96 GetParams() {
  97    InstallToEspOnMac=1
  98    # Install the driver required to read Linux /boot, if it's available
  99    # Note: Under OS X, this will be installed only if a Linux partition
 100    # is detected, in which case the ext4fs driver will be installed.
 101    InstallDrivers="boot"
 102    while [[ $# -gt 0 ]]; do
 103       case $1 in
 104          --notesp) InstallToEspOnMac=0
 105               ;;
 106          --ownhfs) OwnHfs=1
 107               InstallToEspOnMac=0
 108               TargetPart="$2"
 109               TargetDir=/System/Library/CoreServices
 110               shift
 111               ;;
 112          --usedefault) TargetDir=/EFI/BOOT
 113               TargetPart="$2"
 114               TargetX64="bootx64.efi"
 115               TargetIA32="bootia32.efi"
 116               shift
 117               ;;
 118          --root) RootDir="$2"
 119               InstallToEspOnMac=0
 120               shift
 121               ;;
 122          --localkeys) LocalKeys=1
 123               ;;
 124          --shim | --preloader) ShimSource="$2"
 125               ShimType=`basename $ShimSource`
 126               shift
 127               ;;
 128          --drivers | --alldrivers) InstallDrivers="all"
 129               ;;
 130          --nodrivers) InstallDrivers="none"
 131               ;;
 132          --yes) AlwaysYes=1
 133               ;;
 134          * ) echo "Usage: $0 [--notesp | --usedefault {device-file} | --root {dir} |"
 135              echo "                     --ownhfs {device-file} ]"
 136              echo "                  [--nodrivers | --alldrivers] [--shim {shim-filename}]"
 137              echo "                  [--localkeys] [--yes]"
 138              exit 1
 139       esac
 140       shift
 141    done
 142    if [[ "$InstallToEspOnMac" == 0 && "$RootDir" == '/' && "$TargetDir" == '/EFI/BOOT' ]] ; then
 143       echo "You may use --notesp OR --usedefault, but not both! Aborting!"
 144       exit 1
 145    fi
 146    if [[ "$RootDir" != '/' && "$TargetDir" == '/EFI/BOOT' ]] ; then
 147       echo "You may use --root OR --usedefault, but not both! Aborting!"
 148       exit 1
 149    fi
 150    if [[ "$TargetDir" != '/System/Library/CoreServices' && "$OwnHfs" == '1' ]] ; then
 151       echo "If you use --ownhfs, you may NOT use --usedefault! Aborting!"
 152       exit 1
 153    fi
 154    RLConfFile="$RootDir/boot/refind_linux.conf"
 155    EtcKeysDir="$RootDir/etc/refind.d/keys"
 156 } # GetParams()
 157
 158 # Get a yes/no response from the user and place it in the YesNo variable.
 159 # If the AlwaysYes variable is set to 1, skip the user input and set "Y"
 160 # in the YesNo variable.
 161 ReadYesNo() {
 162    if [[ $AlwaysYes == 1 ]] ; then
 163       YesNo="Y"
 164       echo "Y"
 165    else
 166       read YesNo
 167    fi
 168 }
 169
 170 # Abort if the rEFInd files can't be found.
 171 # Also sets $ConfFile to point to the configuration file,
 172 # $IconsDir to point to the icons directory, and
 173 # $ShimSource to the source of the shim.efi file (if necessary).
 174 CheckForFiles() {
 175    # Note: This check is satisfied if EITHER the 32- or the 64-bit version
 176    # is found, even on the wrong platform. This is because the platform
 177    # hasn't yet been determined. This could obviously be improved, but it
 178    # would mean restructuring lots more code....
 179    if [[ ! -f "$RefindDir/refind_ia32.efi" && ! -f "$RefindDir/refind_x64.efi" ]] ; then
 180       echo "The rEFInd binary file is missing! Aborting installation!"
 181       exit 1
 182    fi
 183
 184    if [[ -f "$RefindDir/refind.conf-sample" ]] ; then
 185       ConfFile="$RefindDir/refind.conf-sample"
 186    elif [[ -f "$ThisDir/refind.conf-sample" ]] ; then
 187       ConfFile="$ThisDir/refind.conf-sample"
 188    else
 189       echo "The sample configuration file is missing! Aborting installation!"
 190       exit 1
 191    fi
 192
 193    if [[ -d "$RefindDir/icons" ]] ; then
 194       IconsDir="$RefindDir/icons"
 195    elif [[ -d "$ThisDir/icons" ]] ; then
 196       IconsDir="$ThisDir/icons"
 197    else
 198       echo "The icons directory is missing! Aborting installation!"
 199       exit 1
 200    fi
 201
 202    if [[ "$ShimSource" != "none" ]] ; then
 203       if [[ -f "$ShimSource" ]] ; then
 204          if [[ $ShimType == "shimx64.efi" || $ShimType == "shim.efi" ]] ; then
 205             TargetX64="grubx64.efi"
 206             MokManagerSource=`dirname "$ShimSource"`/MokManager.efi
 207          elif [[ $ShimType == "preloader.efi" || $ShimType == "PreLoader.efi" ]] ; then
 208             TargetX64="loader.efi"
 209             MokManagerSource=`dirname "$ShimSource"`/HashTool.efi
 210          else
 211             echo "Unknown shim/PreBootloader filename: $ShimType!"
 212             echo "Known filenames are shimx64.efi, shim.efi, and PreLoader.efi. Aborting!"
 213             exit 1
 214          fi
 215       else
 216          echo "The specified shim/PreBootloader file, $ShimSource, doesn't exist!"
 217          echo "Aborting installation!"
 218          exit 1
 219       fi
 220    fi
 221 } # CheckForFiles()
 222
 223 # Helper for CopyRefindFiles; copies shim files (including MokManager, if it's
 224 # available) to target.
 225 CopyShimFiles() {
 226    cp -fb "$ShimSource" "$InstallDir/$TargetDir/$TargetShim"
 227    if [[ $? != 0 ]] ; then
 228       Problems=1
 229    fi
 230    if [[ -f "$MokManagerSource" ]] ; then
 231       cp -fb "$MokManagerSource" "$InstallDir/$TargetDir/"
 232    fi
 233    if [[ $? != 0 ]] ; then
 234       Problems=1
 235    fi
 236 } # CopyShimFiles()
 237
 238 # Copy the public keys to the installation medium
 239 CopyKeys() {
 240    if [[ $LocalKeys == 1 ]] ; then
 241       mkdir -p "$InstallDir/$TargetDir/keys/"
 242       cp "$EtcKeysDir/$LocalKeysBase.cer" "$InstallDir/$TargetDir/keys/"
 243       cp "$EtcKeysDir/$LocalKeysBase.crt" "$InstallDir/$TargetDir/keys/"
 244    fi
 245 } # CopyKeys()
 246
 247 # Set varaibles for installation in EFI/BOOT directory
 248 SetVarsForBoot() {
 249    TargetDir="/EFI/BOOT"
 250    if [[ $ShimSource == "none" ]] ; then
 251       TargetX64="bootx64.efi"
 252       TargetIA32="bootia32.efi"
 253    else
 254       if [[ $ShimType == "shim.efi" || $ShimType == "shimx64.efi" ]] ; then
 255          TargetX64="grubx64.efi"
 256       elif [[ $ShimType == "preloader.efi" || $ShimType == "PreLoader.efi" ]] ; then
 257          TargetX64="loader.efi"
 258       else
 259          echo "Unknown shim/PreBootloader type: $ShimType"
 260          echo "Aborting!"
 261          exit 1
 262       fi
 263       TargetIA32="bootia32.efi"
 264       TargetShim="bootx64.efi"
 265    fi
 266 } # SetVarsForBoot()
 267
 268 # Set variables for installation in EFI/Microsoft/Boot directory
 269 SetVarsForMsBoot() {
 270    TargetDir="/EFI/Microsoft/Boot"
 271    if [[ $ShimSource == "none" ]] ; then
 272       TargetX64="bootmgfw.efi"
 273    else
 274       if [[ $ShimType == "shim.efi" || $ShimType == "shimx64.efi" ]] ; then
 275          TargetX64="grubx64.efi"
 276       elif [[ $ShimType == "preloader.efi" || $ShimType == "PreLoader.efi" ]] ; then
 277          TargetX64="loader.efi"
 278       else
 279          echo "Unknown shim/PreBootloader type: $ShimType"
 280          echo "Aborting!"
 281          exit 1
 282       fi
 283       TargetShim="bootmgfw.efi"
 284    fi
 285 } # SetVarsForMsBoot()
 286
 287 # TargetDir defaults to /EFI/refind; however, this function adjusts it as follows:
 288 # - If an existing refind.conf is available in /EFI/BOOT or /EFI/Microsoft/Boot,
 289 #   install to that directory under the suitable name; but DO NOT do this if
 290 #   refind.conf is also in /EFI/refind.
 291 # - If booted in BIOS mode and the ESP lacks any other EFI files, install to
 292 #   /EFI/BOOT
 293 # - If booted in BIOS mode and there's no refind.conf file and there is a
 294 #   /EFI/Microsoft/Boot/bootmgfw.efi file, move it down one level and
 295 #   install under that name, "hijacking" the Windows boot loader filename
 296 DetermineTargetDir() {
 297    Upgrade=0
 298
 299    if [[ -f $InstallDir/EFI/BOOT/refind.conf ]] ; then
 300       SetVarsForBoot
 301       Upgrade=1
 302    fi
 303    if [[ -f $InstallDir/EFI/Microsoft/Boot/refind.conf ]] ; then
 304       SetVarsForMsBoot
 305       Upgrade=1
 306    fi
 307    if [[ -f $InstallDir/EFI/refind/refind.conf ]] ; then
 308       TargetDir="/EFI/refind"
 309       if [[ "$OSName" == 'Darwin' ]] ; then
 310          TargetX64="refind_x64.efi"
 311          TargetIA32="refind_ia32.efi"
 312       fi
 313       Upgrade=1
 314    fi
 315    if [[ $Upgrade == 1 ]] ; then
 316       echo "Found rEFInd installation in $InstallDir$TargetDir; upgrading it."
 317    fi
 318
 319    if [[ ! -d /sys/firmware/efi && ! $OSName == 'Darwin' && $Upgrade == 0 ]] ; then     # BIOS-mode
 320       FoundEfiFiles=`find "$InstallDir/EFI/BOOT" -name "*.efi" 2> /dev/null`
 321       FoundConfFiles=`find "$InstallDir" -name "refind\.conf" 2> /dev/null`
 322       if [[ ! -n "$FoundConfFiles" && -f "$InstallDir/EFI/Microsoft/Boot/bootmgfw.efi" ]] ; then
 323          mv -n "$InstallDir/EFI/Microsoft/Boot/bootmgfw.efi" "$InstallDir/EFI/Microsoft" &> /dev/null
 324          SetVarsForMsBoot
 325          echo "Running in BIOS mode with a suspected Windows installation; moving boot loader"
 326          echo "files so as to install to $InstallDir$TargetDir."
 327       elif [[ ! -n "$FoundEfiFiles" ]] ; then  # In BIOS mode and no default loader; install as default loader
 328          SetVarsForBoot
 329          echo "Running in BIOS mode with no existing default boot loader; installing to"
 330          echo $InstallDir$TargetDir
 331       else
 332          echo "Running in BIOS mode with an existing default boot loader; backing it up and"
 333          echo "installing rEFInd in its place."
 334          if [[ -d "$InstallDir/EFI/BOOT-rEFIndBackup" ]] ; then
 335             echo ""
 336             echo "Caution: An existing backup of a default boot loader exists! If the current"
 337             echo "default boot loader and the backup are different boot loaders, the current"
 338             echo "one will become inaccessible."
 339             echo ""
 340             echo -n "Do you want to proceed with installation (Y/N)? "
 341             ReadYesNo
 342             if [[ $YesNo == "Y" || $YesNo == "y" ]] ; then
 343                echo "OK; continuing with the installation..."
 344             else
 345                exit 0
 346             fi
 347          fi
 348          mv -n "$InstallDir/EFI/BOOT" "$InstallDir/EFI/BOOT-rEFIndBackup"
 349          SetVarsForBoot
 350       fi
 351    fi # BIOS-mode
 352 } # DetermineTargetDir()
 353
 354 # Determine (or guess) the filesystem used on the Linux /boot filesystem.
 355 # Store the result in the BootFS global variable.
 356 SetBootFS() {
 357    local Blkid
 358
 359    Blkid=`which blkid 2> /dev/null`
 360    BootFS=""
 361    if [[ $OSName == 'Linux' && -x "$Blkid" ]] ; then
 362       BootPart=`df /boot | grep dev | cut -f 1 -d " "`
 363       BootFS=`$Blkid -o export $BootPart 2> /dev/null | grep TYPE= | cut -f 2 -d =`
 364    fi
 365    if [[ $OSName == 'Darwin' ]] ; then
 366       # 0FC63DAF-8483-4772-8E79-3D69D8477DE4 = Linux filesystem
 367       # BC13C2FF-59E6-4262-A352-B275FD6F7172 = Freedesktop $boot partition
 368       # 933AC7E1-2EB4-4F13-B844-0E14E2AEF915 = Freedesktop Linux /home
 369       # E6D6D379-F507-44C2-A23C-238F2A3DF928 = Linux LVM
 370       # A19D880F-05FC-4D3B-A006-743F0F84911E = Linux RAID
 371       # 0657FD6D-A4AB-43C4-84E5-0933C84B4F4F = Linux swap
 372       Temp=$(diskutil list | grep -i '0FC63DAF-8483-4772-8E79-3D69D8477DE4\|BC13C2FF-59E6-4262-A352-B275FD6F7172\|933AC7E1-2EB4-4F13-B844-0E14E2AEF915\|E6D6D379-F507-44C2-A23C-238F2A3DF928\|A19D880F-05FC-4D3B-A006-743F0F84911E\|0657FD6D-A4AB-43C4-84E5-0933C84B4F4F\|Linux')
 373       BootFS=""
 374       if [[ -n $Temp ]] ; then
 375          echo "Found suspected Linux partition(s); installing ext4fs driver."
 376          BootFS="ext4"
 377       fi
 378    fi
 379 } # SetBootFS()
 380
 381 # Copy drivers from $RefindDir/drivers_$1 to $InstallDir/$TargetDir/drivers_$1,
 382 # honoring the $InstallDrivers condition. Must be passed a suitable
 383 # architecture code (ia32 or x64).
 384 CopyDrivers() {
 385    if [[ $InstallDrivers == "all" ]] ; then
 386       mkdir -p "$InstallDir/$TargetDir/drivers_$1"
 387       cp "$ThisDir"/drivers_$1/*_$1.efi "$InstallDir/$TargetDir/drivers_$1/" 2> /dev/null
 388       cp "$RefindDir"/drivers_$1/*_$1.efi "$InstallDir/$TargetDir/drivers_$1/" 2> /dev/null
 389    elif [[ "$InstallDrivers" == "boot" ]] ; then
 390       SetBootFS
 391       DriverType=""
 392       case $BootFS in
 393          ext2 | ext3) DriverType="ext2"
 394               # Could use ext4, but that can create unwanted entries from symbolic
 395               # links in / to /boot/vmlinuz if a separate /boot partition is used.
 396               ;;
 397          ext4) DriverType="ext4"
 398               ;;
 399          reiserfs) DriverType="reiserfs"
 400               ;;
 401          btrfs) DriverType="btrfs"
 402               ;;
 403          hfsplus) DriverType="hfs"
 404               ;;
 405          ntfs) DriverType="ntfs"
 406               ;;
 407          *) BootFS=""
 408       esac
 409       if [[ -n $BootFS ]] ; then
 410          echo "Installing driver for $BootFS (${DriverType}_$1.efi)"
 411          mkdir -p "$InstallDir/$TargetDir/drivers_$1"
 412          cp "$ThisDir/drivers_$1/${DriverType}_$1.efi" "$InstallDir/$TargetDir/drivers_$1/" 2> /dev/null
 413          cp "$RefindDir/drivers_$1/${DriverType}_$1.efi" "$InstallDir/$TargetDir/drivers_$1"/ 2> /dev/null
 414       fi
 415    fi
 416 } # CopyDrivers()
 417
 418 # Copy tools (currently only gptsync, and that only on Macs) to the EFI/tools
 419 # directory on the ESP. Must be passed a suitable architecture code (ia32
 420 # or x64).
 421 CopyTools() {
 422    mkdir -p "$InstallDir/EFI/tools"
 423    if [[ $OSName == 'Darwin' ]] ; then
 424       cp -f "$RefindDir/tools_$1/gptsync_$1.efi" "$InstallDir/EFI/tools/"
 425       if [[ -f "$InstallDir/EFI/tools/gptsync.efi" ]] ; then
 426          mv "$InstallDir/EFI/tools/gptsync.efi" "$InstallDir/EFI/tools/gptsync.efi-disabled"
 427          echo "Found old gptsync.efi; disabling it by renaming it to gptsync.efi-disabled"
 428       fi
 429    fi
 430 } # CopyTools()
 431
 432 # Copy the rEFInd files to the ESP or OS X root partition.
 433 # Sets Problems=1 if any critical commands fail.
 434 CopyRefindFiles() {
 435    mkdir -p "$InstallDir/$TargetDir"
 436    if [[ "$TargetDir" == '/EFI/BOOT' ]] ; then
 437       cp "$RefindDir/refind_ia32.efi" "$InstallDir/$TargetDir/$TargetIA32" 2> /dev/null
 438       if [[ $? != 0 ]] ; then
 439          echo "Note: IA32 (x86) binary not installed!"
 440       fi
 441       cp "$RefindDir/refind_x64.efi" "$InstallDir/$TargetDir/$TargetX64" 2> /dev/null
 442       if [[ $? != 0 ]] ; then
 443          Problems=1
 444       fi
 445       if [[ "$ShimSource" != "none" ]] ; then
 446          TargetShim="bootx64.efi"
 447          CopyShimFiles
 448       fi
 449       if [[ $InstallDrivers == "all" ]] ; then
 450          cp -r "$RefindDir"/drivers_* "$InstallDir/$TargetDir/" 2> /dev/null
 451          cp -r "$ThisDir"/drivers_* "$InstallDir/$TargetDir/" 2> /dev/null
 452       elif [[ $Upgrade == 1 || $InstallToEspOnMac == 1 ]] ; then
 453          if [[ $Platform == 'EFI64' ]] ; then
 454             CopyDrivers x64
 455             CopyTools x64
 456          else
 457             CopyDrivers ia32
 458             CopyTools ia32
 459          fi
 460       fi
 461       Refind=""
 462       if [[ $Platform == 'EFI64' ]] ; then
 463          Refind='bootx64.efi'
 464       elif [[ $Platform == 'EFI32' ]] ; then
 465          Refind='bootia32.efi'
 466       fi
 467       CopyKeys
 468    elif [[ $Platform == 'EFI64' || $TargetDir == "/EFI/Microsoft/Boot" ]] ; then
 469       cp "$RefindDir/refind_x64.efi" "$InstallDir/$TargetDir/$TargetX64"
 470       if [[ $? != 0 ]] ; then
 471          Problems=1
 472       fi
 473       CopyDrivers x64
 474       CopyTools x64
 475       Refind="refind_x64.efi"
 476       CopyKeys
 477       if [[ "$ShimSource" != "none" ]] ; then
 478          if [[ "$TargetShim" == "default" ]] ; then
 479             TargetShim=`basename "$ShimSource"`
 480          fi
 481          CopyShimFiles
 482          Refind="$TargetShim"
 483          if [[ $LocalKeys == 0 ]] ; then
 484             echo "Storing copies of rEFInd Secure Boot public keys in $EtcKeysDir"
 485             mkdir -p "$EtcKeysDir"
 486             cp "$ThisDir/keys/refind.cer" "$EtcKeysDir" 2> /dev/null
 487             cp "$ThisDir/keys/refind.crt" "$EtcKeysDir" 2> /dev/null
 488          fi
 489       fi
 490       if [[ "$TargetDir" == '/System/Library/CoreServices' ]] ; then
 491          SetupMacHfs $TargetX64
 492       fi
 493    elif [[ $Platform == 'EFI32' ]] ; then
 494       cp "$RefindDir/refind_ia32.efi" "$InstallDir/$TargetDir/$TargetIA32"
 495       if [[ $? != 0 ]] ; then
 496          Problems=1
 497       fi
 498       CopyDrivers ia32
 499       CopyTools ia32
 500       Refind="refind_ia32.efi"
 501       if [[ "$TargetDir" == '/System/Library/CoreServices' ]] ; then
 502          SetupMacHfs $TargetIA32
 503       fi
 504    else
 505       echo "Unknown platform! Aborting!"
 506       exit 1
 507    fi
 508    echo "Copied rEFInd binary files"
 509    echo ""
 510    if [[ -d "$InstallDir/$TargetDir/icons" ]] ; then
 511       rm -rf "$InstallDir/$TargetDir/icons-backup" &> /dev/null
 512       mv -f "$InstallDir/$TargetDir/icons" "$InstallDir/$TargetDir/icons-backup"
 513       echo "Notice: Backed up existing icons directory as icons-backup."
 514    fi
 515    cp -r "$IconsDir" "$InstallDir/$TargetDir"
 516    if [[ $? != 0 ]] ; then
 517       Problems=1
 518    fi
 519    mkdir -p "$InstallDir/$TargetDir/keys"
 520    cp -rf "$ThisDir"/keys/*.[cd]er "$InstallDir/$TargetDir/keys/" 2> /dev/null
 521    cp -rf "$EtcKeysDir"/*.[cd]er "$InstallDir/$TargetDir/keys/" 2> /dev/null
 522    if [[ -f "$InstallDir/$TargetDir/refind.conf" ]] ; then
 523       echo "Existing refind.conf file found; copying sample file as refind.conf-sample"
 524       echo "to avoid overwriting your customizations."
 525       echo ""
 526       cp -f "$ConfFile" "$InstallDir/$TargetDir"
 527       if [[ $? != 0 ]] ; then
 528          Problems=1
 529       fi
 530    else
 531       echo "Copying sample configuration file as refind.conf; edit this file to configure"
 532       echo "rEFInd."
 533       echo ""
 534       cp -f "$ConfFile" "$InstallDir/$TargetDir/refind.conf"
 535       if [[ $? != 0 ]] ; then
 536          Problems=1
 537       fi
 538    fi
 539    if [[ $DeleteRefindDir == 1 ]] ; then
 540       echo "Deleting the temporary directory $RefindDir"
 541       rm -r "$RefindDir"
 542    fi
 543 } # CopyRefindFiles()
 544
 545 # Mount the partition the user specified with the --usedefault or --ownhfs option
 546 MountDefaultTarget() {
 547    InstallDir=/tmp/refind_install
 548    mkdir -p "$InstallDir"
 549    UnmountEsp=1
 550    if [[ $OSName == 'Darwin' ]] ; then
 551       if [[ $OwnHfs == '1' ]] ; then
 552          Temp=`diskutil info "$TargetPart" | grep "Mount Point"`
 553          InstallDir=`echo $Temp | cut -f 3-30 -d ' '`
 554          if [[ $InstallDir == '' ]] ; then
 555             InstallDir=/tmp/refind_install
 556             mount -t hfs "$TargetPart" "$InstallDir"
 557          else
 558             UnmountEsp=0
 559          fi
 560       else
 561          mount -t msdos "$TargetPart" "$InstallDir"
 562       fi
 563    elif [[ $OSName == 'Linux' ]] ; then
 564       mount -t vfat "$TargetPart" "$InstallDir"
 565    fi
 566    if [[ $? != 0 ]] ; then
 567       echo "Couldn't mount $TargetPart ! Aborting!"
 568       rmdir "$InstallDir"
 569       exit 1
 570    fi
 571 } # MountDefaultTarget()
 572
 573 #
 574 # A series of OS X support functions....
 575 #
 576
 577 # Mount the ESP at /Volumes/ESP or determine its current mount
 578 # point.
 579 # Sets InstallDir to the ESP mount point
 580 # Sets UnmountEsp if we mounted it
 581 MountOSXESP() {
 582    # Identify the ESP. Note: This returns the FIRST ESP found;
 583    # if the system has multiple disks, this could be wrong!
 584    Temp=$(mount | sed -n -E "/^(\/dev\/disk[0-9]+s[0-9]+) on \/ \(.*$/s//\1/p")
 585    if [ $Temp ]; then
 586       Temp=$(diskutil list | grep " EFI " | grep -o 'disk.*' | head -n 1)
 587       if [ -z $Temp ]; then
 588          echo "Warning: root device doesn't have an EFI partition"
 589       fi
 590    else
 591       echo "Warning: root device could not be found"
 592    fi
 593    if [ -z $Temp ]; then
 594       Temp=$(diskutil list | sed -n -E '/^ *[0-9]+:[ ]+EFI EFI[ ]+[0-9.]+ [A-Z]+[ ]+(disk[0-9]+s[0-9]+)$/ { s//\1/p
 595              q
 596          }' )
 597
 598       if [ -z $Temp ]; then
 599          echo "Could not find an EFI partition. Aborting!"
 600          exit 1
 601       fi
 602    fi
 603    Esp=/dev/`echo $Temp`
 604    # If the ESP is mounted, use its current mount point....
 605    Temp=`df -P | grep "$Esp "`
 606    InstallDir=`echo $Temp | cut -f 6- -d ' '`
 607    if [[ "$InstallDir" == '' ]] ; then
 608       mkdir /Volumes/ESP &> /dev/null
 609       mount -t msdos "$Esp" /Volumes/ESP
 610       # Some systems have HFS+ "ESPs." They shouldn't, but they do. If this is
 611       # detected, mount it as such and set appropriate options.
 612       if [[ $? != 0 ]] ; then
 613          mount -t hfs "$Esp" /Volumes/Esp
 614          OwnHfs=1
 615          InstallToEspOnMac=0
 616          if [[ $? != 0 ]] ; then
 617             echo "Unable to mount ESP! Aborting!\n"
 618             exit 1
 619          fi
 620       fi
 621       UnmountEsp=1
 622       InstallDir="/Volumes/ESP"
 623    fi
 624 } # MountOSXESP()
 625
 626 # Set up for booting from Mac HFS+ volume that boots rEFInd in MJG's way
 627 # (http://mjg59.dreamwidth.org/7468.html)
 628 # Must be passed the original rEFInd binary filename (without a path).
 629 SetupMacHfs() {
 630    if [[ -s "$InstallDir/mach_kernel" ]] ; then
 631       echo "Attempt to install rEFInd to a partition with a /mach_kernel file! Aborting!"
 632       exit 1
 633    fi
 634    cp -n "$InstallDir/$TargetDir/boot.efi" "$InstallDir/$TargetDir/boot.efi-backup" &> /dev/null
 635    ln -f "$InstallDir/$TargetDir/$1" "$InstallDir/$TargetDir/boot.efi"
 636    touch "$InstallDir/mach_kernel"
 637    rm "$InstallDir/$TargetDir/SystemVersion.plist" &> /dev/null
 638    cat - << ENDOFHERE >> "$InstallDir/$TargetDir/SystemVersion.plist"
 639 <xml version="1.0" encoding="UTF-8"?>
 640 <plist version="1.0">
 641 <dict>
 642         <key>ProductBuildVersion</key>
 643         <string></string>
 644         <key>ProductName</key>
 645         <string>rEFInd</string>
 646         <key>ProductVersion</key>
 647         <string>0.8.5</string>
 648 </dict>
 649 </plist>
 650 ENDOFHERE
 651 } # SetupMacHfs()
 652
 653 # Control the OS X installation.
 654 # Sets Problems=1 if problems found during the installation.
 655 InstallOnOSX() {
 656    echo "Installing rEFInd on OS X...."
 657    if [[ "$InstallToEspOnMac" == "1" ]] ; then
 658       MountOSXESP
 659    elif [[ "$TargetDir" == "/EFI/BOOT" || "$OwnHfs" == '1' ]] ; then
 660       MountDefaultTarget
 661    else
 662       InstallDir="$RootDir/"
 663    fi
 664    echo "Installing rEFInd to the partition mounted at $InstallDir"
 665    DetermineTargetDir
 666    Platform=`ioreg -l -p IODeviceTree | grep firmware-abi | cut -d "\"" -f 4`
 667    CopyRefindFiles
 668    if [[ $InstallToEspOnMac == "1" ]] ; then
 669       bless --mount "$InstallDir" --setBoot --file "$InstallDir/$TargetDir/$Refind" --shortform
 670    elif [[ "$TargetDir" != "/EFI/BOOT" ]] ; then
 671       bless --setBoot --folder "$InstallDir/$TargetDir" --file "$InstallDir/$TargetDir/$Refind"
 672    fi
 673    if [[ $? != 0 ]] ; then
 674       Problems=1
 675    fi
 676    if [[ -f /Library/StartupItems/rEFItBlesser || -d /Library/StartupItems/rEFItBlesser ]] ; then
 677       echo
 678       echo "/Library/StartupItems/rEFItBlesser found!"
 679       echo "This program is part of rEFIt, and will cause rEFInd to fail to work after"
 680       echo -n "its first boot. Do you want to remove rEFItBlesser (Y/N)? "
 681       ReadYesNo
 682       if [[ $YesNo == "Y" || $YesNo == "y" ]] ; then
 683          echo "Deleting /Library/StartupItems/rEFItBlesser..."
 684          rm -r /Library/StartupItems/rEFItBlesser
 685       else
 686          echo "Not deleting rEFItBlesser."
 687       fi
 688    fi
 689    echo
 690    echo "WARNING: If you have an Advanced Format disk, *DO NOT* attempt to check the"
 691    echo "bless status with 'bless --info', since this is known to cause disk corruption"
 692    echo "on some systems!!"
 693    echo
 694 } # InstallOnOSX()
 695
 696
 697 #
 698 # Now a series of Linux support functions....
 699 #
 700
 701 # Check for evidence that we're running in Secure Boot mode. If so, and if
 702 # appropriate options haven't been set, warn the user and offer to abort.
 703 # If we're NOT in Secure Boot mode but the user HAS specified the --shim
 704 # or --localkeys option, warn the user and offer to abort.
 705 #
 706 # FIXME: Although I checked the presence (and lack thereof) of the
 707 # /sys/firmware/efi/vars/SecureBoot* files on my Secure Boot test system
 708 # before releasing this script, I've since found that they are at least
 709 # sometimes present when Secure Boot is absent. This means that the first
 710 # test can produce false alarms. A better test is highly desirable.
 711 CheckSecureBoot() {
 712    VarFile=`ls -d /sys/firmware/efi/vars/SecureBoot* 2> /dev/null`
 713    if [[ -n "$VarFile" && "$TargetDir" != '/EFI/BOOT' && "$ShimSource" == "none" ]] ; then
 714       echo ""
 715       echo "CAUTION: Your computer appears to support Secure Boot, but you haven't"
 716       echo "specified a valid shim.efi file source. If you've disabled Secure Boot and"
 717       echo "intend to leave it disabled, this is fine; but if Secure Boot is active, the"
 718       echo "resulting installation won't boot. You can read more about this topic at"
 719       echo "http://www.rodsbooks.com/refind/secureboot.html."
 720       echo ""
 721       echo -n "Do you want to proceed with installation (Y/N)? "
 722       ReadYesNo
 723       if [[ $YesNo == "Y" || $YesNo == "y" ]] ; then
 724          echo "OK; continuing with the installation..."
 725       else
 726          exit 0
 727       fi
 728    fi
 729
 730    if [[ "$ShimSource" != "none" && ! -n "$VarFile" ]] ; then
 731       echo ""
 732       echo "You've specified installing using a shim.efi file, but your computer does not"
 733       echo "appear to be running in Secure Boot mode. Although installing in this way"
 734       echo "should work, it's unnecessarily complex. You may continue, but unless you"
 735       echo "plan to enable Secure Boot, you should consider stopping and omitting the"
 736       echo "--shim option. You can read more about this topic at"
 737       echo "http://www.rodsbooks.com/refind/secureboot.html."
 738       echo ""
 739       echo -n "Do you want to proceed with installation (Y/N)? "
 740       ReadYesNo
 741       if [[ $YesNo == "Y" || $YesNo == "y" ]] ; then
 742          echo "OK; continuing with the installation..."
 743       else
 744          exit 0
 745       fi
 746    fi
 747
 748    if [[ $LocalKeys != 0 && ! -n "$VarFile" ]] ; then
 749       echo ""
 750       echo "You've specified re-signing your rEFInd binaries with locally-generated keys,"
 751       echo "but your computer does not appear to be running in Secure Boot mode. The"
 752       echo "keys you generate will be useless unless you enable Secure Boot. You may"
 753       echo "proceed with this installation, but before you do so, you may want to read"
 754       echo "more about it at http://www.rodsbooks.com/refind/secureboot.html."
 755       echo ""
 756       echo -n "Do you want to proceed with installation (Y/N)? "
 757       ReadYesNo
 758       if [[ $YesNo == "Y" || $YesNo == "y" ]] ; then
 759          echo "OK; continuing with the installation..."
 760       else
 761          exit 0
 762       fi
 763    fi
 764
 765 } # CheckSecureBoot()
 766
 767 # Check for the presence of locally-generated keys from a previous installation in
 768 # $EtcKeysDir (/etc/refind.d/keys). If they're not present, generate them using
 769 # openssl.
 770 GenerateKeys() {
 771    PrivateKey="$EtcKeysDir/$LocalKeysBase.key"
 772    CertKey="$EtcKeysDir/$LocalKeysBase.crt"
 773    DerKey="$EtcKeysDir/$LocalKeysBase.cer"
 774    OpenSSL=`which openssl 2> /dev/null`
 775
 776    # Do the work only if one or more of the necessary keys is missing
 777    # TODO: Technically, we don't need the DerKey; but if it's missing and openssl
 778    # is also missing, this will fail. This could be improved.
 779    if [[ ! -f "$PrivateKey" || ! -f "$CertKey" || ! -f "$DerKey" ]] ; then
 780       echo "Generating a fresh set of local keys...."
 781       mkdir -p "$EtcKeysDir"
 782       chmod 0700 "$EtcKeysDir"
 783       if [[ ! -x "$OpenSSL" ]] ; then
 784          echo "Can't find openssl, which is required to create your private signing keys!"
 785          echo "Aborting!"
 786          exit 1
 787       fi
 788       if [[ -f "$PrivateKey" ]] ; then
 789          echo "Backing up existing $PrivateKey"
 790          cp -f "$PrivateKey" "$PrivateKey.backup" 2> /dev/null
 791       fi
 792       if [[ -f "$CertKey" ]] ; then
 793          echo "Backing up existing $CertKey"
 794          cp -f "$CertKey" "$CertKey.backup" 2> /dev/null
 795       fi
 796       if [[ -f "$DerKey" ]] ; then
 797          echo "Backing up existing $DerKey"
 798          cp -f "$DerKey" "$DerKey.backup" 2> /dev/null
 799       fi
 800       "$OpenSSL" req -new -x509 -newkey rsa:2048 -keyout "$PrivateKey" -out "$CertKey" \
 801                      -nodes -days 3650 -subj "/CN=Locally-generated rEFInd key/"
 802       "$OpenSSL" x509 -in "$CertKey" -out "$DerKey" -outform DER
 803       chmod 0600 "$PrivateKey"
 804    else
 805       echo "Using existing local keys...."
 806    fi
 807 }
 808
 809 # Sign a single binary. Requires parameters:
 810 #   $1 = source file
 811 #   $2 = destination file
 812 # Also assumes that the SBSign, PESign, UseSBSign, UsePESign, and various key variables are set
 813 # appropriately.
 814 # Aborts script on error
 815 SignOneBinary() {
 816    $SBSign --key "$PrivateKey" --cert "$CertKey" --output "$2" "$1"
 817    if [[ $? != 0 ]] ; then
 818       echo "Problem signing the binary $1! Aborting!"
 819       exit 1
 820    fi
 821 }
 822
 823 # Re-sign the x86-64 binaries with a locally-generated key, First look for appropriate
 824 # key files in $EtcKeysDir. If they're present, use them to re-sign the binaries. If
 825 # not, try to generate new keys and store them in $EtcKeysDir.
 826 ReSignBinaries() {
 827    SBSign=`which sbsign 2> /dev/null`
 828    echo "Found sbsign at $SBSign"
 829    TempDir="/tmp/refind_local"
 830    if [[ ! -x "$SBSign" ]] ; then
 831       echo "Can't find sbsign, which is required to sign rEFInd with your own keys!"
 832       echo "Aborting!"
 833       exit 1
 834    fi
 835    GenerateKeys
 836    mkdir -p "$TempDir/drivers_x64"
 837    cp "$RefindDir/refind.conf-sample $TempDir" 2> /dev/null
 838    cp "$ThisDir/refind.conf-sample $TempDir" 2> /dev/null
 839    cp "$RefindDir/refind_ia32.efi $TempDir" 2> /dev/null
 840    cp -a "$RefindDir/drivers_ia32 $TempDir" 2> /dev/null
 841    cp -a "$ThisDir/drivers_ia32 $TempDir" 2> /dev/null
 842    SignOneBinary "$RefindDir/refind_x64.efi" "$TempDir/refind_x64.efi"
 843    SaveIFS=$IFS
 844    IFS=$(echo -en "\n\b")
 845    for Driver in `ls "$RefindDir"/drivers_x64/*.efi "$ThisDir"/drivers_x64/*.efi 2> /dev/null` ; do
 846       TempName=`basename "$Driver"`
 847       SignOneBinary "$Driver" "$TempDir/drivers_x64/$TempName"
 848    done
 849    IFS=$SaveIFS
 850    RefindDir="$TempDir"
 851    DeleteRefindDir=1
 852 } # ReSignBinaries()
 853
 854 # Locate and mount an ESP, if possible, based on parted output.
 855 # Should be called only if /boot/efi is NOT an acceptable ESP.
 856 # Sets InstallDir to the mounted ESP's path ($RootDir/boot/efi)
 857 # and EspFilesystem the filesystem (always "vfat")
 858 FindLinuxESP() {
 859    echo "The ESP doesn't seem to be mounted! Trying to find it...."
 860    local Drive
 861    local PartNum
 862    local TableType
 863    local DmStatus
 864    local SkipIt
 865    local Dmraid
 866    for Drive in `ls /dev/[sh]d?` ; do
 867       SkipIt=0
 868       Dmraid=`which dmraid 2> /dev/null`
 869       if [ -x "$Dmraid" ] ; then
 870          DmStatus=`dmraid -r | grep $Drive`
 871          if [ -n "$DmStatus" ] ; then
 872             echo "$Drive seems to be part of a RAID array; skipping!"
 873             SkipIt=1
 874          fi
 875       fi
 876       TableType=`parted $Drive print -m -s 2>/dev/null | awk -F: '$1 == "'$Drive'" { print $6 }'`
 877       if [[ $TableType == 'gpt' && $SkipIt == 0 ]] ; then # read only GPT disks that aren't part of dmraid array
 878          PartNum=`LANG=C parted $Drive print -m -s 2>/dev/null | awk -F: '$7 ~ "(^boot| boot)" { print $1 }' | head -n 1`
 879          if [ "$PartNum" -eq "$PartNum" ] 2> /dev/null ; then
 880             InstallDir="$RootDir/boot/efi"
 881             mkdir -p $InstallDir
 882             mount $Drive$PartNum $InstallDir
 883             EspFilesystem=`grep "$Drive$PartNum.*/boot/efi" /etc/mtab | uniq | grep -v autofs | cut -d " " -f 3`
 884             if [[ $EspFilesystem != 'vfat' ]] ; then
 885                umount $InstallDir
 886             else
 887                echo "Mounting ESP at $InstallDir"
 888                break;
 889             fi
 890          fi # $PartNum -eq $PartNum
 891       fi # TableType
 892    done
 893 } # FindLinuxESP()
 894
 895 # Identifies the ESP's location (/boot or /boot/efi, or these locations under
 896 # the directory specified by --root); aborts if the ESP isn't mounted at
 897 # either location.
 898 # Sets InstallDir to the ESP mount point.
 899 FindMountedESP() {
 900    mount /boot &> /dev/null
 901    mount /boot/efi &> /dev/null
 902    EspLine=`df "$RootDir/boot/efi" 2> /dev/null | grep boot/efi`
 903    if [[ ! -n "$EspLine" ]] ; then
 904       EspLine=`df "$RootDir"/boot | grep boot`
 905    fi
 906    InstallDir=`echo $EspLine | cut -d " " -f 6`
 907
 908    if [[ -n "$InstallDir" ]] ; then
 909       EspFilesystem=`grep -w "$InstallDir" /etc/mtab | uniq | grep -v autofs | cut -d " " -f 3`
 910    fi
 911    if [[ $EspFilesystem != 'vfat' ]] ; then
 912       FindLinuxESP
 913    fi
 914    if [[ $EspFilesystem != 'vfat' ]] ; then
 915       echo "$RootDir/$InstallDir doesn't seem to be on a VFAT filesystem. The ESP must be"
 916       echo "mounted at $RootDir/boot or $RootDir/boot/efi and it must be VFAT! Aborting!"
 917       exit 1
 918    fi
 919    echo "ESP was found at $InstallDir using $EspFilesystem"
 920 } # FindMountedESP
 921
 922 # Uses efibootmgr to add an entry for rEFInd to the EFI's NVRAM.
 923 # If this fails, sets Problems=1
 924 AddBootEntry() {
 925    local PartNum
 926    InstallIt="0"
 927    Efibootmgr=`which efibootmgr 2> /dev/null`
 928    if [[ "$Efibootmgr" ]] ; then
 929       InstallDisk=`grep "$InstallDir" /etc/mtab | cut -d " " -f 1 | cut -c 1-8`
 930       PartNum=`grep "$InstallDir" /etc/mtab | cut -d " " -f 1 | cut -c 9-10`
 931       EntryFilename="$TargetDir/$Refind"
 932       EfiEntryFilename=`echo ${EntryFilename//\//\\\}`
 933       EfiEntryFilename2=`echo ${EfiEntryFilename} | sed s/\\\\\\\\/\\\\\\\\\\\\\\\\/g`
 934       ExistingEntry=`"$Efibootmgr" -v | grep -i "$EfiEntryFilename2"`
 935
 936       if [[ "$ExistingEntry" ]] ; then
 937          ExistingEntryBootNum=`echo "$ExistingEntry" | cut -c 5-8`
 938          FirstBoot=`"$Efibootmgr" | grep BootOrder | cut -c 12-15`
 939          if [[ "$ExistingEntryBootNum" != "$FirstBoot" ]] ; then
 940             echo "An existing rEFInd boot entry exists, but isn't set as the default boot"
 941             echo "manager. The boot order is being adjusted to make rEFInd the default boot"
 942             echo "manager. If this is NOT what you want, you should use efibootmgr to"
 943             echo "manually adjust your EFI's boot order."
 944             "$Efibootmgr" -b $ExistingEntryBootNum -B &> /dev/null
 945             InstallIt="1"
 946          fi
 947       else
 948          InstallIt="1"
 949       fi
 950
 951       if [[ $InstallIt == "1" ]] ; then
 952          echo "Installing it!"
 953          "$Efibootmgr" -c -l "$EfiEntryFilename" -L "rEFInd Boot Manager" -d $InstallDisk -p $PartNum &> /dev/null
 954          if [[ $? != 0 ]] ; then
 955             EfibootmgrProblems=1
 956             Problems=1
 957          fi
 958       fi
 959
 960    else # efibootmgr not found
 961       EfibootmgrProblems=1
 962       Problems=1
 963    fi
 964
 965    if [[ $EfibootmgrProblems ]] ; then
 966       echo
 967       echo "ALERT: There were problems running the efibootmgr program! You may need to"
 968       echo "rename the $Refind binary to the default name (EFI/boot/bootx64.efi"
 969       echo "on x86-64 systems or EFI/boot/bootia32.efi on x86 systems) to have it run!"
 970       echo
 971    else
 972       echo "rEFInd has been set as the default boot manager."
 973    fi
 974 } # AddBootEntry()
 975
 976 # Create a minimal/sample refind_linux.conf file in /boot.
 977 GenerateRefindLinuxConf() {
 978    if [[ -f "$RLConfFile" ]] ; then
 979       echo "Existing $RLConfFile found; not overwriting."
 980    else
 981       echo "Creating $RLConfFile; edit it to adjust kernel options."
 982       if [[ -f "$RootDir/etc/default/grub" ]] ; then
 983          # We want the default options used by the distribution, stored here....
 984          source "$RootDir/etc/default/grub"
 985          echo "Setting default boot options based on $RootDir/etc/default/grub"
 986       fi
 987       RootFS=`df "$RootDir" | grep dev | cut -f 1 -d " "`
 988       StartOfDevname=`echo "$RootFS" | cut -b 1-7`
 989       if [[ "$StartOfDevname" == "/dev/sd" || "$StartOfDevName" == "/dev/hd" ]] ; then
 990          # Identify root filesystem by UUID rather than by device node, if possible
 991          Uuid=`blkid -o export -s UUID "$RootFS" 2> /dev/null | grep UUID=`
 992          if [[ -n $Uuid ]] ; then
 993             RootFS="$Uuid"
 994          fi
 995       fi
 996       DefaultOptions="$GRUB_CMDLINE_LINUX $GRUB_CMDLINE_LINUX_DEFAULT"
 997       echo "\"Boot with standard options\"        \"ro root=$RootFS $DefaultOptions \"" > $RLConfFile
 998       echo "\"Boot to single-user mode\"          \"ro root=$RootFS $DefaultOptions single\"" >> $RLConfFile
 999       echo "\"Boot with minimal options\"         \"ro root=$RootFS\"" >> $RLConfFile
1000    fi
1001 }
1002
1003 # Controls rEFInd installation under Linux.
1004 # Sets Problems=1 if something goes wrong.
1005 InstallOnLinux() {
1006    if [[ "$TargetDir" == "/System/Library/CoreServices" ]] ; then
1007       echo "You may not use the --ownhfs option under Linux! Aborting!"
1008       exit 1
1009    fi
1010    echo "Installing rEFInd on Linux...."
1011    modprobe efivars &> /dev/null
1012    if [[ $TargetDir == "/EFI/BOOT" ]] ; then
1013       MountDefaultTarget
1014    else
1015       FindMountedESP
1016       DetermineTargetDir
1017    fi
1018    CpuType=`uname -m`
1019    if [[ $CpuType == 'x86_64' ]] ; then
1020       Platform="EFI64"
1021    elif [[ ($CpuType == 'i386' || $CpuType == 'i486' || $CpuType == 'i586' || $CpuType == 'i686') ]] ; then
1022       Platform="EFI32"
1023       # If we're in EFI mode, do some sanity checks, and alert the user or even
1024       # abort. Not in BIOS mode, though, since that could be used on an emergency
1025       # disc to try to recover a troubled Linux installation.
1026       if [[ -d /sys/firmware/efi ]] ; then
1027          if [[ "$ShimSource" != "none" && "$TargetDir" != "/BOOT/EFI" ]] ; then
1028             echo ""
1029             echo "CAUTION: shim does not currently supports 32-bit systems, so you should not"
1030             echo "use the --shim option to install on such systems. Aborting!"
1031             echo ""
1032             exit 1
1033          fi
1034          echo
1035          echo "CAUTION: This Linux installation uses a 32-bit kernel. 32-bit EFI-based"
1036          echo "computers are VERY RARE. If you've installed a 32-bit version of Linux"
1037          echo "on a 64-bit computer, you should manually install the 64-bit version of"
1038          echo "rEFInd. If you're installing on a Mac, you should do so from OS X. If"
1039          echo "you're positive you want to continue with this installation, answer 'Y'"
1040          echo "to the following question..."
1041          echo
1042          echo -n "Are you sure you want to continue (Y/N)? "
1043          ReadYesNo
1044          if [[ $YesNo == "Y" || $YesNo == "y" ]] ; then
1045             echo "OK; continuing with the installation..."
1046          else
1047             exit 0
1048          fi
1049       fi # in EFI mode
1050    else
1051       echo "Unknown CPU type '$CpuType'; aborting!"
1052       exit 1
1053    fi
1054
1055    if [[ $LocalKeys == 1 ]] ; then
1056       ReSignBinaries
1057    fi
1058
1059    CheckSecureBoot
1060    CopyRefindFiles
1061    if [[ "$TargetDir" != "/EFI/BOOT" && "$TargetDir" != "/EFI/Microsoft/Boot" ]] ; then
1062       AddBootEntry
1063       GenerateRefindLinuxConf
1064    fi
1065 } # InstallOnLinux()
1066
1067 #
1068 # The main part of the script. Sets a few environment variables,
1069 # performs a few startup checks, and then calls functions to
1070 # install under OS X or Linux, depending on the detected platform.
1071 #
1072 OSName=`uname -s`
1073 GetParams "$@"
1074 ThisDir="$( cd -P "$( dirname "${BASH_SOURCE[0]}" )" && pwd )"
1075 RefindDir="$ThisDir/refind"
1076 ThisScript="$ThisDir/`basename $0`"
1077 if [[ `whoami` != "root" ]] ; then
1078    echo "Not running as root; attempting to elevate privileges via sudo...."
1079    sudo "$ThisScript" "$@"
1080    if [[ $? != 0 ]] ; then
1081       echo "This script must be run as root (or using sudo). Exiting!"
1082       exit 1
1083    else
1084       exit 0
1085    fi
1086 fi
1087 CheckForFiles
1088 if [[ $OSName == 'Darwin' ]] ; then
1089    if [[ "$ShimSource" != "none" ]] ; then
1090       echo "The --shim option is not supported on OS X! Exiting!"
1091       exit 1
1092    fi
1093    if [[ "$LocalKeys" != 0 ]] ; then
1094       echo "The --localkeys option is not supported on OS X! Exiting!"
1095       exit 1
1096    fi
1097    InstallOnOSX $1
1098 elif [[ $OSName == 'Linux' ]] ; then
1099    InstallOnLinux
1100 else
1101    echo "Running on unknown OS; aborting!"
1102    if [[ "$InstallToEspOnMac" == 0 ]] ; then
1103       echo "The --notesp option is not supported on Linux! Exiting!"
1104       exit 1
1105    fi
1106 fi
1107
1108 if [[ $Problems ]] ; then
1109    echo
1110    echo "ALERT:"
1111    echo "Installation has completed, but problems were detected. Review the output for"
1112    echo "error messages and take corrective measures as necessary. You may need to"
1113    echo "re-run this script or install manually before rEFInd will work."
1114    echo
1115 else
1116    echo
1117    echo "Installation has completed successfully."
1118    echo
1119 fi
1120
1121 if [[ $UnmountEsp == '1' ]] ; then
1122    echo "Unmounting install dir"
1123    umount $InstallDir
1124 fi
1125
1126 if [[ "$InstallDir" == /tmp/refind_install ]] ; then
1127 #   sleep 5
1128    rmdir "$InstallDir"
1129 fi