code.delx.au - refind/blob - refind-install

   1 #!/bin/bash
   2 #
   3 # Linux/MacOS X script to install rEFInd
   4 #
   5 # Usage:
   6 #
   7 # ./refind-install [options]
   8 #
   9 # options include:
  10 #    "--notesp" to install to the OS X root filesystem rather than to the ESP.
  11 #           This option may not be used under Linux.
  12 #    "--usedefault {devicefile}" to install as default
  13 #           (/EFI/BOOT/BOOTX64.EFI and similar) to the specified device
  14 #           (/dev/sdd1 or whatever) without registering with the NVRAM.
  15 #    "--ownhfs {devicefile}" to install to an HFS+ volume that's NOT currently
  16 #           an OS X boot volume.
  17 #    "--root {dir}" to specify installation using the specified directory
  18 #           as the system's root
  19 #    "--alldrivers" to install all drivers along with regular files
  20 #    "--nodrivers" to suppress driver installation (default in Linux is
  21 #           driver used on /boot; --nodrivers is OS X default)
  22 #    "--shim {shimfile}" to install a shim.efi file for Secure Boot
  23 #    "--preloader" is synonymous with "--shim"
  24 #    "--localkeys" to re-sign x86-64 binaries with a locally-generated key
  25 #    "--keepname" to keep refind_x64.efi name as such even when using shim
  26 #    "--yes" to assume a "yes" response to all prompts
  27 #
  28 # The "esp" option is valid only on Mac OS X; it causes
  29 # installation to the EFI System Partition (ESP) rather than
  30 # to the current OS X boot partition. Under Linux, this script
  31 # installs to the ESP by default.
  32 #
  33 # This program is copyright (c) 2012-2015 by Roderick W. Smith
  34 #
  35 # This program is licensed under the terms of the GNU GPL, version 3,
  36 # or (at your option) any later version.
  37 # You should have received a copy of the GNU General Public License
  38 # along with this program. If not, see <http://www.gnu.org/licenses/>.
  39
  40 # Revision history:
  41 #
  42 # 0.10.1  -- Improve extraction of default kernel options from /proc/cmdline.
  43 #            Add support for AMD64 (aka AARCH64, aa64) platform.
  44 # 0.10.0  -- Enable running under OS X's recovery system & add warning about
  45 #            SIP & brief instructions on how to deal with it if SIP is
  46 #            detected to be enabled. Also change way refind_linux.conf default
  47 #            options are found; use /proc/cmdline as base.
  48 # 0.9.2   -- Added --keepname option.
  49 # 0.8.7   -- Better detection of Secure Boot mode & fixed errors when copying
  50 #            Shim & MokManager files over themselves; fixed bug that caused
  51 #            inappropriate installation to EFI/BOOT/bootx64.efi
  52 # 0.8.6   -- Fixed bugs that caused misidentification of ESP on disks with
  53 #            partition numbers over 10 on OS X and misidentification of mount
  54 #            point if already-mounted ESP had space in path.
  55 # 0.8.5   -- Refinement/cleanup of new OS X ESP-as-default policy
  56 # 0.8.4   -- OS X default changed to install to ESP under /EFI/BOOT
  57 # 0.7.9   -- Fixed bug that caused errors if dmraid utility not installed
  58 # 0.7.7   -- Fixed bug that created mangled refind_linux.conf file; added ability
  59 #            to locate and mount ESP on Linux, if it's not mounted
  60 # 0.7.6   -- Added --ownhfs {device-filename} option
  61 # 0.7.5   -- Fixed bug when installing to ESP on recent versions of OS X
  62 # 0.7.2   -- Fixed code that could be confused by use of autofs to mount the ESP
  63 # 0.7.0   -- Added support for the new Btrfs driver
  64 # 0.6.12  -- Added support for PreLoader as well as for shim
  65 # 0.6.11  -- Improvements in script's ability to handle directories with spaces
  66 #            in their names
  67 # 0.6.9   -- Install gptsync on Macs
  68 # 0.6.8   -- Bug fix: ESP scan now uses "uniq".
  69 # 0.6.6   -- Bug fix: Upgrade drivers when installed to EFI/BOOT. Also enable
  70 #            copying shim.efi and MokManager.efi over themselves.
  71 # 0.6.4   -- Copies ext2 driver rather than ext4 driver for ext2/3fs
  72 # 0.6.3   -- Support for detecting rEFInd in EFI/BOOT and EFI/Microsoft/Boot
  73 #            directories & for installing to EFI/BOOT in BIOS mode
  74 # 0.6.2-1 -- Added --yes option & tweaked key-copying for use with RPM install script
  75 # 0.6.1   -- Added --root option; minor bug fixes
  76 # 0.6.0   -- Changed --drivers to --alldrivers and added --nodrivers option;
  77 #            changed default driver installation behavior in Linux to install
  78 #            the driver needed to read /boot (if available)
  79 # 0.5.1.2 -- Fixed bug that caused failure to generate refind_linux.conf file
  80 # 0.5.1.1 -- Fixed bug that caused script failure under OS X
  81 # 0.5.1   -- Added --shim & --localkeys options & create sample refind_linux.conf
  82 #            in /boot
  83 # 0.5.0   -- Added --usedefault & --drivers options & changed "esp" option to "--esp"
  84 # 0.4.5   -- Fixed check for rEFItBlesser in OS X
  85 # 0.4.2   -- Added notice about BIOS-based OSes & made NVRAM changes in Linux smarter
  86 # 0.4.1   -- Added check for rEFItBlesser in OS X
  87 # 0.3.3.1 -- Fixed OS X 10.7 bug; also works as make target
  88 # 0.3.2.1 -- Check for presence of source files; aborts if not present
  89 # 0.3.2   -- Initial version
  90 #
  91 # Note: install.sh version numbers match those of the rEFInd package
  92 # with which they first appeared.
  93
  94 RootDir="/"
  95 TargetDir=/EFI/refind
  96 LocalKeysBase="refind_local"
  97 ShimSource="none"
  98 ShimType="none"
  99 KeepName=0
 100 TargetShim="default"
 101 TargetX64="refind_x64.efi"
 102 TargetIA32="refind_ia32.efi"
 103 LocalKeys=0
 104 DeleteRefindDir=0
 105 AlwaysYes=0
 106
 107 #
 108 # Functions used by both OS X and Linux....
 109 #
 110
 111 GetParams() {
 112    InstallToEspOnMac=1
 113    # Install the driver required to read Linux /boot, if it's available
 114    # Note: Under OS X, this will be installed only if a Linux partition
 115    # is detected, in which case the ext4fs driver will be installed.
 116    InstallDrivers="boot"
 117    while [[ $# -gt 0 ]]; do
 118       case $1 in
 119          --notesp) InstallToEspOnMac=0
 120               ;;
 121          --ownhfs) OwnHfs=1
 122               InstallToEspOnMac=0
 123               TargetPart="$2"
 124               TargetDir=/System/Library/CoreServices
 125               shift
 126               ;;
 127          --usedefault) TargetDir=/EFI/BOOT
 128               TargetPart="$2"
 129               TargetX64="bootx64.efi"
 130               TargetIA32="bootia32.efi"
 131               shift
 132               ;;
 133          --root) RootDir="$2"
 134               InstallToEspOnMac=0
 135               shift
 136               ;;
 137          --localkeys) LocalKeys=1
 138               ;;
 139          --shim | --preloader) ShimSource="$2"
 140               ShimType=`basename $ShimSource`
 141               shift
 142               ;;
 143          --keepname) KeepName=1
 144               ;;
 145          --drivers | --alldrivers) InstallDrivers="all"
 146               ;;
 147          --nodrivers) InstallDrivers="none"
 148               ;;
 149          --yes) AlwaysYes=1
 150               ;;
 151          * ) echo "Usage: $0 [--notesp | --usedefault {device-file} | --root {dir} |"
 152              echo "                     --ownhfs {device-file} ] [--keepname]"
 153              echo "                  [--nodrivers | --alldrivers]"
 154              echo "                  [--localkeys] [--keepname] [--yes]"
 155              exit 1
 156       esac
 157       shift
 158    done
 159    if [[ "$InstallToEspOnMac" == 0 && "$RootDir" == '/' && "$TargetDir" == '/EFI/BOOT' ]] ; then
 160       echo "You may use --notesp OR --usedefault, but not both! Aborting!"
 161       exit 1
 162    fi
 163    if [[ "$RootDir" != '/' && "$TargetDir" == '/EFI/BOOT' ]] ; then
 164       echo "You may use --root OR --usedefault, but not both! Aborting!"
 165       exit 1
 166    fi
 167    if [[ "$TargetDir" != '/System/Library/CoreServices' && "$OwnHfs" == '1' ]] ; then
 168       echo "If you use --ownhfs, you may NOT use --usedefault! Aborting!"
 169       exit 1
 170    fi
 171    if [[ "$KeepName" == 1 && "$ShimSource" == "none" ]] ; then
 172       echo "The --keepname option is meaningful only in conjunction with --shim"
 173       echo "or --preloader! Aborting!"
 174       exit 1
 175    fi
 176    if [[ "$KeepName" == 1 && "$OSTYPE" != "linux" && "$OSTYPE" != "linux-gnu" ]] ; then
 177       echo "The --keepname option is valid only under Linux! Aborting!"
 178       exit 1
 179    fi
 180    if [[ "$KeepName" == 1 && "$TargetDir" == "/EFI/BOOT" ]] ; then
 181       echo "The --keepname option is incompatible with --usedefault! Aborting!"
 182       exit 1
 183    fi
 184    RLConfFile="$RootDir/boot/refind_linux.conf"
 185    EtcKeysDir="$RootDir/etc/refind.d/keys"
 186 } # GetParams()
 187
 188 # Get a yes/no response from the user and place it in the YesNo variable.
 189 # If the AlwaysYes variable is set to 1, skip the user input and set "Y"
 190 # in the YesNo variable.
 191 ReadYesNo() {
 192    if [[ $AlwaysYes == 1 ]] ; then
 193       YesNo="Y"
 194       echo "Y"
 195    else
 196       read YesNo
 197    fi
 198 }
 199
 200 # Determine what CPU type and EFI bit depth we're using.
 201 # Sets Platform global variable to lowercase EFI platform code (currently
 202 # "x64", "ia32", or "aa64") -- the same code used in filenames.
 203 DeterminePlatform() {
 204    local CpuType
 205    case "$OSTYPE" in
 206    darwin*)
 207       CpuType=`ioreg -l -p IODeviceTree | grep firmware-abi | cut -d "\"" -f 4`
 208       if [[ "$CpuType" == EFI32 ]] ; then
 209          Platform="ia32"
 210       else
 211          Platform="x64"
 212       fi
 213       ;;
 214    linux*)
 215       CpuType=`uname -m`
 216       case "$CpuType" in
 217       aarch64)
 218          Platform="aa64"
 219          ;;
 220       x86_64)
 221          Platform="x64"
 222          ;;
 223       i?86)
 224          Platform="ia32"
 225          # If we're in EFI mode, do some sanity checks, and alert the user or even
 226          # abort. Not in BIOS mode, though, since that could be used on an emergency
 227          # disc to try to recover a troubled Linux installation.
 228          if [[ -d /sys/firmware/efi ]] ; then
 229             if [[ "$ShimSource" != "none" && "$TargetDir" != "/BOOT/EFI" ]] ; then
 230                echo ""
 231                echo "CAUTION: shim does not currently supports 32-bit systems, so you should not"
 232                echo "use the --shim option to install on such systems. Aborting!"
 233                echo ""
 234                exit 1
 235             fi
 236             echo
 237             echo "CAUTION: This Linux installation uses a 32-bit kernel. 32-bit EFI-based"
 238             echo "computers are VERY RARE. If you've installed a 32-bit version of Linux"
 239             echo "on a 64-bit computer, you should manually install the 64-bit version of"
 240             echo "rEFInd. If you're positive you want to continue with this installation,"
 241             echo "answer 'Y' to the following question..."
 242             echo
 243             echo -n "Are you sure you want to continue (Y/N)? "
 244             ReadYesNo
 245             if [[ $YesNo == "Y" || $YesNo == "y" ]] ; then
 246                echo "OK; continuing with the installation..."
 247             else
 248                exit 0
 249             fi
 250          fi # In EFI mode
 251          ;;
 252       *)
 253          echo "Unknown CPU type '$CpuType'; aborting!"
 254          exit 1
 255          ;;
 256       esac # case "$CpuType"....
 257       ;;
 258    *)
 259       echo "Unknown OS; aborting!"
 260       exit 1
 261       ;;
 262    esac # case "$OSTYPE"....
 263 } # DeterminePlatform()
 264
 265 # Abort if the rEFInd files can't be found.
 266 # Also sets $ConfFile to point to the configuration file,
 267 # $IconsDir to point to the icons directory,
 268 # $ShimSource to the source of the shim.efi file (if necessary),
 269 # $ThisDir to point to the directory in which this script resides,
 270 # and $RefindDir to point to where the rEFInd binaries live
 271 CheckForFiles() {
 272    # Note: $ThisDir points to real (not symlinked) script home on Linux,
 273    # enabling creating a symlink in /usr/sbin (or wherever); but on OS X,
 274    # "readlink" doesn't do the same thing as under Linux, so the script
 275    # must not be a symlink under OS X.
 276    case "$OSTYPE" in
 277       darwin*)
 278            ThisDir="$( cd -P "${BASH_SOURCE%/*}" && pwd )"
 279            ;;
 280       linux*)
 281            ThisDir="$(dirname "$(readlink -f "$0")")"
 282            ;;
 283    esac
 284    RefindDir="$ThisDir/refind"
 285
 286    if [[ ! -f "$RefindDir/refind_$Platform.efi" ]] ; then
 287       echo "The rEFInd binary file is missing! Aborting installation!"
 288       exit 1
 289    fi
 290
 291    if [[ -f "$RefindDir/refind.conf-sample" ]] ; then
 292       ConfFile="$RefindDir/refind.conf-sample"
 293    elif [[ -f "$ThisDir/refind.conf-sample" ]] ; then
 294       ConfFile="$ThisDir/refind.conf-sample"
 295    else
 296       echo "The sample configuration file is missing! Aborting installation!"
 297       exit 1
 298    fi
 299
 300    if [[ -d "$RefindDir/icons" ]] ; then
 301       IconsDir="$RefindDir/icons"
 302    elif [[ -d "$ThisDir/icons" ]] ; then
 303       IconsDir="$ThisDir/icons"
 304    else
 305       echo "The icons directory is missing! Aborting installation!"
 306       exit 1
 307    fi
 308
 309    echo "ShimSource is $ShimSource"
 310    if [[ "$ShimSource" != "none" ]] ; then
 311       if [[ -f "$ShimSource" ]] ; then
 312          if [[ $ShimType == "shimx64.efi" || $ShimType == "shim.efi" ]] ; then
 313             TargetX64="grubx64.efi"
 314             TargetAARCH64="grubaa64.efi"
 315             MokManagerSource=`dirname "$ShimSource"`/MokManager.efi
 316          elif [[ $ShimType == "preloader.efi" || $ShimType == "PreLoader.efi" ]] ; then
 317             TargetX64="loader.efi"
 318             MokManagerSource=`dirname "$ShimSource"`/HashTool.efi
 319          else
 320             echo "Unknown shim/PreBootloader filename: $ShimType!"
 321             echo "Known filenames are shimx64.efi, shim.efi, and PreLoader.efi. Aborting!"
 322             exit 1
 323          fi
 324       else
 325          echo "The specified shim/PreBootloader file, $ShimSource, doesn't exist!"
 326          echo "Aborting installation!"
 327          exit 1
 328       fi
 329    fi
 330 } # CheckForFiles()
 331
 332 # Helper for CopyRefindFiles; copies shim files (including MokManager, if it's
 333 # available) to target.
 334 CopyShimFiles() {
 335    local inode1=`ls -i "$ShimSource" 2> /dev/null | cut -f 1 -d " "`
 336    local inode2=`ls -i "$InstallDir/$TargetDir/$TargetShim" 2> /dev/null | cut -f 1 -d " "`
 337    if [[ $inode1 != $inode2 ]] ; then
 338       cp -fb "$ShimSource" "$InstallDir/$TargetDir/$TargetShim"
 339       if [[ $? != 0 ]] ; then
 340          Problems=1
 341       fi
 342    fi
 343    inode1=`ls -i "$MokManagerSource" 2> /dev/null | cut -f 1 -d " "`
 344    local TargetMMName=`basename $MokManagerSource`
 345    inode2=`ls -i "$InstallDir/$TargetDir/$TargetMMName" 2> /dev/null | cut -f 1 -d " "`
 346    if [[ $inode1 != $inode2 ]] ; then
 347       if [[ -f "$MokManagerSource" ]] ; then
 348          cp -fb "$MokManagerSource" "$InstallDir/$TargetDir/"
 349       fi
 350       if [[ $? != 0 ]] ; then
 351          Problems=1
 352       fi
 353    fi
 354 } # CopyShimFiles()
 355
 356 # Copy the public keys to the installation medium
 357 CopyKeys() {
 358    if [[ $LocalKeys == 1 ]] ; then
 359       mkdir -p "$InstallDir/$TargetDir/keys/"
 360       cp "$EtcKeysDir/$LocalKeysBase.cer" "$InstallDir/$TargetDir/keys/"
 361       cp "$EtcKeysDir/$LocalKeysBase.crt" "$InstallDir/$TargetDir/keys/"
 362    fi
 363 } # CopyKeys()
 364
 365 # Set varaibles for installation in EFI/BOOT directory
 366 SetVarsForBoot() {
 367    TargetDir="/EFI/BOOT"
 368    if [[ $ShimSource == "none" ]] ; then
 369       TargetX64="bootx64.efi"
 370       TargetIA32="bootia32.efi"
 371       TargetAARCH64="bootaa64.efi"
 372    else
 373       if [[ $ShimType == "shim.efi" || $ShimType == "shimx64.efi" || $ShimType = "shimaa64.efi" ]] ; then
 374          TargetX64="grubx64.efi"
 375          TargetAARCH64="grubaa64.efi"
 376       elif [[ $ShimType == "preloader.efi" || $ShimType == "PreLoader.efi" ]] ; then
 377          TargetX64="loader.efi"
 378       else
 379          echo "Unknown shim/PreBootloader type: $ShimType"
 380          echo "Aborting!"
 381          exit 1
 382       fi
 383       TargetIA32="bootia32.efi"
 384       TargetShim="boot$Platform.efi"
 385    fi
 386    if [[ $KeepName == 1 ]] ; then
 387       echo "Installation is to /EFI/BOOT, which is incompatible with --keepname! Aborting!"
 388       exit 1
 389    fi
 390 } # SetVarsForBoot()
 391
 392 # Set variables for installation in EFI/Microsoft/Boot directory
 393 SetVarsForMsBoot() {
 394    TargetDir="/EFI/Microsoft/Boot"
 395    if [[ $ShimSource == "none" ]] ; then
 396       TargetX64="bootmgfw.efi"
 397       TargetIA32="bootmgfw.efi"
 398       TargetAARCH64="bootmgfw.efi"
 399    else
 400       if [[ $ShimType == "shim.efi" || $ShimType == "shimx64.efi" || $ShimType == "shimaa64.efi" ]] ; then
 401          TargetX64="grubx64.efi"
 402          TargetAARCH64="grubaa64.efi"
 403       elif [[ $ShimType == "preloader.efi" || $ShimType == "PreLoader.efi" ]] ; then
 404          TargetX64="loader.efi"
 405       else
 406          echo "Unknown shim/PreBootloader type: $ShimType"
 407          echo "Aborting!"
 408          exit 1
 409       fi
 410       TargetShim="bootmgfw.efi"
 411    fi
 412    if [[ $KeepName == 1 ]] ; then
 413       echo "Installation is to /EFI/Microsoft/Boot, which is incompatible with --keepname!"
 414       echo "Aborting!"
 415       exit 1
 416    fi
 417 } # SetVarsForMsBoot()
 418
 419 # TargetDir defaults to /EFI/refind; however, this function adjusts it as follows:
 420 # - If an existing refind.conf is available in /EFI/BOOT or /EFI/Microsoft/Boot,
 421 #   install to that directory under the suitable name; but DO NOT do this if
 422 #   refind.conf is also in /EFI/refind.
 423 # - If booted in BIOS mode and the ESP lacks any other EFI files, install to
 424 #   /EFI/BOOT
 425 # - If booted in BIOS mode and there's no refind.conf file and there is a
 426 #   /EFI/Microsoft/Boot/bootmgfw.efi file, move it down one level and
 427 #   install under that name, "hijacking" the Windows boot loader filename
 428 DetermineTargetDir() {
 429    Upgrade=0
 430
 431    if [[ -f $InstallDir/EFI/BOOT/refind.conf && ! -f $InstallDir/EFI/refind/refind.conf ]] ; then
 432       SetVarsForBoot
 433       Upgrade=1
 434    fi
 435    if [[ -f $InstallDir/EFI/Microsoft/Boot/refind.conf && ! -f $InstallDir/EFI/refind/refind.conf ]] ; then
 436       SetVarsForMsBoot
 437       Upgrade=1
 438    fi
 439    if [[ -f $InstallDir/EFI/refind/refind.conf ]] ; then
 440       TargetDir="/EFI/refind"
 441       if [[ $ShimSource == "none" || $KeepName == 1 ]] ; then
 442          TargetX64="refind_x64.efi"
 443          TargetIA32="refind_ia32.efi"
 444          TargetAARCH64="refind_aa64.efi"
 445       fi
 446       Upgrade=1
 447    fi
 448    if [[ $Upgrade == 1 ]] ; then
 449       echo "Found rEFInd installation in $InstallDir$TargetDir; upgrading it."
 450    fi
 451
 452    if [[ ! -d /sys/firmware/efi && ! $OSTYPE == darwin* && $Upgrade == 0 ]] ; then     # BIOS-mode
 453       FoundEfiFiles=`find "$InstallDir/EFI/BOOT" -name "*.efi" 2> /dev/null`
 454       FoundConfFiles=`find "$InstallDir" -name "refind\.conf" 2> /dev/null`
 455       if [[ ! -n "$FoundConfFiles" && -f "$InstallDir/EFI/Microsoft/Boot/bootmgfw.efi" ]] ; then
 456          mv -n "$InstallDir/EFI/Microsoft/Boot/bootmgfw.efi" "$InstallDir/EFI/Microsoft" &> /dev/null
 457          SetVarsForMsBoot
 458          echo "Running in BIOS mode with a suspected Windows installation; moving boot loader"
 459          echo "files so as to install to $InstallDir$TargetDir."
 460       elif [[ ! -n "$FoundEfiFiles" ]] ; then  # In BIOS mode and no default loader; install as default loader
 461          SetVarsForBoot
 462          echo "Running in BIOS mode with no existing default boot loader; installing to"
 463          echo $InstallDir$TargetDir
 464       else
 465          echo "Running in BIOS mode with an existing default boot loader; backing it up and"
 466          echo "installing rEFInd in its place."
 467          if [[ -d "$InstallDir/EFI/BOOT-rEFIndBackup" ]] ; then
 468             echo ""
 469             echo "Caution: An existing backup of a default boot loader exists! If the current"
 470             echo "default boot loader and the backup are different boot loaders, the current"
 471             echo "one will become inaccessible."
 472             echo ""
 473             echo -n "Do you want to proceed with installation (Y/N)? "
 474             ReadYesNo
 475             if [[ $YesNo == "Y" || $YesNo == "y" ]] ; then
 476                echo "OK; continuing with the installation..."
 477             else
 478                exit 0
 479             fi
 480          fi
 481          mv -n "$InstallDir/EFI/BOOT" "$InstallDir/EFI/BOOT-rEFIndBackup"
 482          SetVarsForBoot
 483       fi
 484    fi # BIOS-mode
 485 } # DetermineTargetDir()
 486
 487 # Determine (or guess) the filesystem used on the Linux /boot filesystem.
 488 # Store the result in the BootFS global variable.
 489 SetBootFS() {
 490    BootFS=""
 491    case "$OSTYPE" in
 492       linux*)
 493            if command -v blkid &>/dev/null; then
 494               BootPart=`df $RootDir/boot | grep dev | cut -f 1 -d " "`
 495               BootFS=`blkid -o export $BootPart 2> /dev/null | grep TYPE= | cut -f 2 -d =`
 496            fi
 497            ;;
 498       darwin*)
 499            # 0FC63DAF-8483-4772-8E79-3D69D8477DE4 = Linux filesystem
 500            # BC13C2FF-59E6-4262-A352-B275FD6F7172 = Freedesktop $boot partition
 501            # 933AC7E1-2EB4-4F13-B844-0E14E2AEF915 = Freedesktop Linux /home
 502            # E6D6D379-F507-44C2-A23C-238F2A3DF928 = Linux LVM
 503            # A19D880F-05FC-4D3B-A006-743F0F84911E = Linux RAID
 504            # 0657FD6D-A4AB-43C4-84E5-0933C84B4F4F = Linux swap
 505            Temp=$(diskutil list | grep -i '0FC63DAF-8483-4772-8E79-3D69D8477DE4\|BC13C2FF-59E6-4262-A352-B275FD6F7172\|933AC7E1-2EB4-4F13-B844-0E14E2AEF915\|E6D6D379-F507-44C2-A23C-238F2A3DF928\|A19D880F-05FC-4D3B-A006-743F0F84911E\|0657FD6D-A4AB-43C4-84E5-0933C84B4F4F\|Linux')
 506            BootFS=""
 507            if [[ -n $Temp ]] ; then
 508               echo "Found suspected Linux partition(s); installing ext4fs driver."
 509               BootFS="ext4"
 510            fi
 511            ;;
 512    esac
 513 } # SetBootFS()
 514
 515 # Copy drivers from $RefindDir/drivers_$1 to $InstallDir/$TargetDir/drivers_$1,
 516 # honoring the $InstallDrivers condition. Must be passed a suitable
 517 # architecture code (ia32 or x64).
 518 CopyDrivers() {
 519    if [[ $InstallDrivers == "all" ]] ; then
 520       mkdir -p "$InstallDir/$TargetDir/drivers_$1"
 521       cp "$ThisDir"/drivers_$1/*_$1.efi "$InstallDir/$TargetDir/drivers_$1/" 2> /dev/null
 522       cp "$RefindDir"/drivers_$1/*_$1.efi "$InstallDir/$TargetDir/drivers_$1/" 2> /dev/null
 523    elif [[ "$InstallDrivers" == "boot" ]] ; then
 524       SetBootFS
 525       DriverType=""
 526       case $BootFS in
 527          ext2 | ext3) DriverType="ext2"
 528               # Could use ext4, but that can create unwanted entries from symbolic
 529               # links in / to /boot/vmlinuz if a separate /boot partition is used.
 530               ;;
 531          ext4) DriverType="ext4"
 532               ;;
 533          reiserfs) DriverType="reiserfs"
 534               ;;
 535          btrfs) DriverType="btrfs"
 536               ;;
 537          hfsplus) DriverType="hfs"
 538               ;;
 539          ntfs) DriverType="ntfs"
 540               ;;
 541          *) BootFS=""
 542       esac
 543       if [[ -n $BootFS ]] ; then
 544          echo "Installing driver for $BootFS (${DriverType}_$1.efi)"
 545          mkdir -p "$InstallDir/$TargetDir/drivers_$1"
 546          cp "$ThisDir/drivers_$1/${DriverType}_$1.efi" "$InstallDir/$TargetDir/drivers_$1/" 2> /dev/null
 547          cp "$RefindDir/drivers_$1/${DriverType}_$1.efi" "$InstallDir/$TargetDir/drivers_$1"/ 2> /dev/null
 548       fi
 549    fi
 550 } # CopyDrivers()
 551
 552 # Copy tools (currently only gptsync, and that only on Macs) to the EFI/tools
 553 # directory on the ESP. Must be passed a suitable architecture code (ia32
 554 # or x64).
 555 CopyTools() {
 556    mkdir -p "$InstallDir/EFI/tools"
 557    if [[ $OSTYPE == darwin* ]] ; then
 558       cp -f "$RefindDir/tools_$1/gptsync_$1.efi" "$InstallDir/EFI/tools/"
 559       if [[ -f "$InstallDir/EFI/tools/gptsync.efi" ]] ; then
 560          mv "$InstallDir/EFI/tools/gptsync.efi" "$InstallDir/EFI/tools/gptsync.efi-disabled"
 561          echo "Found old gptsync.efi; disabling it by renaming it to gptsync.efi-disabled"
 562       fi
 563    fi
 564 } # CopyTools()
 565
 566 # Copy the rEFInd files to the ESP or OS X root partition.
 567 # Sets Problems=1 if any critical commands fail.
 568 CopyRefindFiles() {
 569    mkdir -p "$InstallDir/$TargetDir"
 570    if [[ "$TargetDir" == '/EFI/BOOT' ]] ; then
 571       cp "$RefindDir/refind_ia32.efi" "$InstallDir/$TargetDir/$TargetIA32" 2> /dev/null
 572       if [[ $? != 0 ]] ; then
 573          echo "Note: IA32 (x86) binary not installed!"
 574       fi
 575       cp "$RefindDir/refind_x64.efi" "$InstallDir/$TargetDir/$TargetX64" 2> /dev/null
 576       if [[ $? != 0 ]] ; then
 577          Problems=1
 578       fi
 579       cp "$RefindDir/refind_aa64.efi" "$InstallDir/$TargetDir/$TargetAARCH64" 2> /dev/null
 580       if [[ $? != 0 && $Platform == "aa64" ]] ; then
 581          Problems=1
 582       fi
 583       if [[ "$ShimSource" != "none" ]] ; then
 584          TargetShim="bootx64.efi"
 585          CopyShimFiles
 586       fi
 587       if [[ $InstallDrivers == "all" ]] ; then
 588          cp -r "$RefindDir"/drivers_* "$InstallDir/$TargetDir/" 2> /dev/null
 589          cp -r "$ThisDir"/drivers_* "$InstallDir/$TargetDir/" 2> /dev/null
 590       elif [[ $Upgrade == 1 || $InstallToEspOnMac == 1 ]] ; then
 591          CopyDrivers "$Platform"
 592          CopyTools "$Platform"
 593       fi
 594       Refind="boot$Platform.efi"
 595       CopyKeys
 596    elif [[ $Platform == 'x64' || $TargetDir == "/EFI/Microsoft/Boot" ]] ; then
 597       cp "$RefindDir/refind_x64.efi" "$InstallDir/$TargetDir/$TargetX64"
 598       if [[ $? != 0 ]] ; then
 599          Problems=1
 600       fi
 601       CopyDrivers x64
 602       CopyTools x64
 603       Refind="refind_x64.efi"
 604       CopyKeys
 605       if [[ "$ShimSource" != "none" ]] ; then
 606          if [[ "$TargetShim" == "default" ]] ; then
 607             TargetShim=`basename "$ShimSource"`
 608          fi
 609          CopyShimFiles
 610          Refind="$TargetShim"
 611          if [[ $LocalKeys == 0 ]] ; then
 612             echo "Storing copies of rEFInd Secure Boot public keys in $EtcKeysDir"
 613             mkdir -p "$EtcKeysDir"
 614             cp "$ThisDir/keys/refind.cer" "$EtcKeysDir" 2> /dev/null
 615             cp "$ThisDir/keys/refind.crt" "$EtcKeysDir" 2> /dev/null
 616          fi
 617       fi
 618       if [[ "$TargetDir" == '/System/Library/CoreServices' ]] ; then
 619          SetupMacHfs $TargetX64
 620       fi
 621    elif [[ $Platform == 'ia32' || $Platform == 'aa64' ]] ; then
 622       if [[ $Platform == 'ia32' ]] ; then
 623          cp "$RefindDir/refind_ia32.efi" "$InstallDir/$TargetDir/$TargetIA32"
 624          if [[ $? != 0 ]] ; then
 625             Problems=1
 626          fi
 627       else
 628          cp "$RefindDir/refind_aa64.efi" "$InstallDir/$TargetDir/$TargetAARCH64"
 629          if [[ $? != 0 ]] ; then
 630             Problems=1
 631          fi
 632       fi
 633       CopyDrivers $Platform
 634       CopyTools $Platform
 635       Refind="refind_$Platform.efi"
 636       if [[ "$TargetDir" == '/System/Library/CoreServices' ]] ; then
 637          SetupMacHfs $TargetIA32
 638       fi
 639    else
 640       echo "Unknown platform! Aborting!"
 641       exit 1
 642    fi
 643    echo "Copied rEFInd binary files"
 644    echo ""
 645    if [[ -d "$InstallDir/$TargetDir/icons" ]] ; then
 646       rm -rf "$InstallDir/$TargetDir/icons-backup" &> /dev/null
 647       mv -f "$InstallDir/$TargetDir/icons" "$InstallDir/$TargetDir/icons-backup"
 648       echo "Notice: Backed up existing icons directory as icons-backup."
 649    fi
 650    cp -r "$IconsDir" "$InstallDir/$TargetDir"
 651    if [[ $? != 0 ]] ; then
 652       Problems=1
 653    fi
 654    mkdir -p "$InstallDir/$TargetDir/keys"
 655    cp -rf "$ThisDir"/keys/*.[cd]er "$InstallDir/$TargetDir/keys/" 2> /dev/null
 656    cp -rf "$EtcKeysDir"/*.[cd]er "$InstallDir/$TargetDir/keys/" 2> /dev/null
 657    if [[ -f "$InstallDir/$TargetDir/refind.conf" ]] ; then
 658       echo "Existing refind.conf file found; copying sample file as refind.conf-sample"
 659       echo "to avoid overwriting your customizations."
 660       echo ""
 661       cp -f "$ConfFile" "$InstallDir/$TargetDir"
 662       if [[ $? != 0 ]] ; then
 663          Problems=1
 664       fi
 665    else
 666       echo "Copying sample configuration file as refind.conf; edit this file to configure"
 667       echo "rEFInd."
 668       echo ""
 669       cp -f "$ConfFile" "$InstallDir/$TargetDir/refind.conf"
 670       if [[ $? != 0 ]] ; then
 671          Problems=1
 672       fi
 673    fi
 674    if [[ $DeleteRefindDir == 1 ]] ; then
 675       echo "Deleting the temporary directory $RefindDir"
 676       rm -r "$RefindDir"
 677    fi
 678 } # CopyRefindFiles()
 679
 680 # Mount the partition the user specified with the --usedefault or --ownhfs option
 681 MountDefaultTarget() {
 682    InstallDir=/tmp/refind_install
 683    mkdir -p "$InstallDir"
 684    UnmountEsp=1
 685    if [[ $OSTYPE == darwin* ]] ; then
 686       if [[ $OwnHfs == '1' ]] ; then
 687          Temp=`diskutil info "$TargetPart" | grep "Mount Point"`
 688          InstallDir=`echo $Temp | cut -f 3-30 -d ' '`
 689          if [[ $InstallDir == '' ]] ; then
 690             InstallDir=/tmp/refind_install
 691             mount -t hfs "$TargetPart" "$InstallDir"
 692          else
 693             UnmountEsp=0
 694          fi
 695       else
 696          mount -t msdos "$TargetPart" "$InstallDir"
 697       fi
 698    elif [[ $OSTYPE == linux* ]] ; then
 699       mount -t vfat "$TargetPart" "$InstallDir"
 700    fi
 701    if [[ $? != 0 ]] ; then
 702       echo "Couldn't mount $TargetPart ! Aborting!"
 703       rmdir "$InstallDir"
 704       exit 1
 705    fi
 706 } # MountDefaultTarget()
 707
 708 #
 709 # A series of OS X support functions....
 710 #
 711
 712 # Mount the ESP at /Volumes/ESP or determine its current mount
 713 # point.
 714 # Sets InstallDir to the ESP mount point
 715 # Sets UnmountEsp if we mounted it
 716 MountOSXESP() {
 717    # Identify the ESP. Note: This returns the FIRST ESP found;
 718    # if the system has multiple disks, this could be wrong!
 719    Temp=$(mount | sed -n -E "/^(\/dev\/disk[0-9]+s[0-9]+) on \/ \(.*$/s//\1/p")
 720    if [ $Temp ]; then
 721       Temp=$(diskutil list | grep " EFI " | grep -o 'disk.*' | head -n 1)
 722       if [ -z $Temp ]; then
 723          echo "Warning: root device doesn't have an EFI partition"
 724       fi
 725    else
 726       echo "Warning: root device could not be found"
 727    fi
 728    if [ -z $Temp ]; then
 729       Temp=$(diskutil list | sed -n -E '/^ *[0-9]+:[ ]+EFI EFI[ ]+[0-9.]+ [A-Z]+[ ]+(disk[0-9]+s[0-9]+)$/ { s//\1/p
 730              q
 731          }' )
 732
 733       if [ -z $Temp ]; then
 734          echo "Could not find an EFI partition. Aborting!"
 735          exit 1
 736       fi
 737    fi
 738    Esp=/dev/`echo $Temp`
 739    # If the ESP is mounted, use its current mount point....
 740    Temp=`df -P | grep "$Esp "`
 741    InstallDir=`echo $Temp | cut -f 6- -d ' '`
 742    if [[ "$InstallDir" == '' ]] ; then
 743       mkdir /Volumes/ESP &> /dev/null
 744       mount -t msdos "$Esp" /Volumes/ESP
 745       # Some systems have HFS+ "ESPs." They shouldn't, but they do. If this is
 746       # detected, mount it as such and set appropriate options.
 747       if [[ $? != 0 ]] ; then
 748          mount -t hfs "$Esp" /Volumes/Esp
 749          OwnHfs=1
 750          InstallToEspOnMac=0
 751          if [[ $? != 0 ]] ; then
 752             echo "Unable to mount ESP! Aborting!\n"
 753             exit 1
 754          fi
 755       fi
 756       UnmountEsp=1
 757       InstallDir="/Volumes/ESP"
 758    fi
 759 } # MountOSXESP()
 760
 761 # Set up for booting from Mac HFS+ volume that boots rEFInd in MJG's way
 762 # (http://mjg59.dreamwidth.org/7468.html)
 763 # Must be passed the original rEFInd binary filename (without a path).
 764 SetupMacHfs() {
 765    if [[ -s "$InstallDir/mach_kernel" ]] ; then
 766       echo "Attempt to install rEFInd to a partition with a /mach_kernel file! Aborting!"
 767       exit 1
 768    fi
 769    cp -n "$InstallDir/$TargetDir/boot.efi" "$InstallDir/$TargetDir/boot.efi-backup" &> /dev/null
 770    ln -f "$InstallDir/$TargetDir/$1" "$InstallDir/$TargetDir/boot.efi"
 771    touch "$InstallDir/mach_kernel"
 772    rm "$InstallDir/$TargetDir/SystemVersion.plist" &> /dev/null
 773    cat - << ENDOFHERE >> "$InstallDir/$TargetDir/SystemVersion.plist"
 774 <xml version="1.0" encoding="UTF-8"?>
 775 <plist version="1.0">
 776 <dict>
 777         <key>ProductBuildVersion</key>
 778         <string></string>
 779         <key>ProductName</key>
 780         <string>rEFInd</string>
 781         <key>ProductVersion</key>
 782         <string>0.10.0</string>
 783 </dict>
 784 </plist>
 785 ENDOFHERE
 786 } # SetupMacHfs()
 787
 788 CheckForSIP() {
 789    if [[ -x "/usr/bin/csrutil" ]] ; then
 790       local OKToInstall=`/usr/bin/csrutil status | \
 791                          grep "Protection status: disabled\|enabled (Apple Internal)\|NVRAM Protections: disabled"`
 792       if [[ -z "$OKToInstall" ]] ; then
 793          echo
 794          echo "**** ALERT: SIP ENABLED! ****"
 795          echo
 796          if [[ "$Upgrade" == "1" ]] ; then
 797             echo "You are attempting to upgrade an existing installation, but it appears that"
 798             echo "System Integrity Protection (SIP) is enabled. If rEFInd is working now, then"
 799             echo "this is fine; you can upgrade your existing rEFInd. If rEFInd is not working,"
 800             echo "though, re-installing from this boot will not help. To re-enable rEFInd, you"
 801             echo "must re-install it from a Recovery system or from another OS. To enter the"
 802             echo "Recovery system and re-install rEFInd:"
 803          else
 804             echo "rEFInd cannot be installed because System Integrity Protection (SIP) seems"
 805             echo "to be enabled! You must install rEFInd from your Recovery installation or"
 806             echo "from another OS. To install from the Recovery system:"
 807          fi
 808          echo
 809          echo "  1. Reboot"
 810          echo "  2. Hold down Command+R as the chime sounds"
 811          echo "  3. When the OS has booted, select Utilities->Terminal"
 812          echo "  4. Change to this directory with the 'cd' command; it will probably be under"
 813          if [[ "`pwd | cut -b 1-8`" == "/Volumes" ]] ; then
 814             echo "     `pwd`"
 815          else
 816             local RootName=`diskutil info -plist / | grep -A 1 VolumeName | grep string | cut -d \> -f 2 | cut -d \< -f 1`
 817             echo "     /Volumes/$RootName`pwd`"
 818          fi
 819          echo "  5. Re-run this script."
 820          echo
 821          if [[ "$Upgrade" != "1" ]] ; then
 822             echo "If you believe SIP is NOT enabled, you may attempt an installation anyhow,"
 823             echo "but it may fail."
 824             echo
 825          fi
 826          echo "For more on this subject, see http://www.rodsbooks.com/refind/sip.html"
 827          echo
 828          echo -n "Do you want to attempt installation (Y/N)? "
 829          ReadYesNo
 830          if [[ $YesNo == "N" || $YesNo == "n" ]] ; then
 831             echo "Exiting!"
 832             exit
 833          fi
 834       fi # csrutil status suggests OK to install
 835    fi # csrutil exists
 836 } # CheckForSIP()
 837
 838 # Control the OS X installation.
 839 # Sets Problems=1 if problems found during the installation.
 840 InstallOnOSX() {
 841    echo "Installing rEFInd on OS X...."
 842    if [[ "$InstallToEspOnMac" == "1" ]] ; then
 843       MountOSXESP
 844    elif [[ "$TargetDir" == "/EFI/BOOT" || "$OwnHfs" == '1' ]] ; then
 845       MountDefaultTarget
 846    else
 847       InstallDir="$RootDir/"
 848    fi
 849    echo "Installing rEFInd to the partition mounted at $InstallDir"
 850    DetermineTargetDir
 851    CheckForSIP
 852    CopyRefindFiles
 853    cp "$ThisDir/mountesp" /usr/local/bin &> /dev/null
 854    if [[ $InstallToEspOnMac == "1" ]] ; then
 855       bless --mount "$InstallDir" --setBoot --file "$InstallDir/$TargetDir/$Refind" --shortform
 856    elif [[ "$TargetDir" != "/EFI/BOOT" ]] ; then
 857       bless --setBoot --folder "$InstallDir/$TargetDir" --file "$InstallDir/$TargetDir/$Refind"
 858    fi
 859    if [[ $? != 0 ]] ; then
 860       Problems=1
 861    fi
 862    if [[ -f /Library/StartupItems/rEFItBlesser || -d /Library/StartupItems/rEFItBlesser ]] ; then
 863       echo
 864       echo "/Library/StartupItems/rEFItBlesser found!"
 865       echo "This program is part of rEFIt, and will cause rEFInd to fail to work after"
 866       echo -n "its first boot. Do you want to remove rEFItBlesser (Y/N)? "
 867       ReadYesNo
 868       if [[ $YesNo == "Y" || $YesNo == "y" ]] ; then
 869          echo "Deleting /Library/StartupItems/rEFItBlesser..."
 870          rm -r /Library/StartupItems/rEFItBlesser
 871       else
 872          echo "Not deleting rEFItBlesser."
 873       fi
 874    fi
 875 } # InstallOnOSX()
 876
 877
 878 #
 879 # Now a series of Linux support functions....
 880 #
 881
 882 # Check for evidence that we're running in Secure Boot mode. If so, and if
 883 # appropriate options haven't been set, warn the user and offer to abort.
 884 # If we're NOT in Secure Boot mode but the user HAS specified the --shim
 885 # or --localkeys option, warn the user and offer to abort.
 886 CheckSecureBoot() {
 887    local IsSecureBoot
 888    if [[ -f /sys/firmware/efi/vars/SecureBoot-8be4df61-93ca-11d2-aa0d-00e098032b8c/data ]] ; then
 889       IsSecureBoot=`od -An -t u1 /sys/firmware/efi/vars/SecureBoot-8be4df61-93ca-11d2-aa0d-00e098032b8c/data | tr -d '[[:space:]]'`
 890    else
 891       IsSecureBoot="0"
 892    fi
 893    if [[ $IsSecureBoot == "1" && "$TargetDir" != '/EFI/BOOT' && "$ShimSource" == "none" ]] ; then
 894       echo ""
 895       echo "CAUTION: Your computer appears to be booted with Secure Boot, but you haven't"
 896       echo "specified a valid shim.efi file source. Chances are you should re-run with"
 897       echo "the --shim option. You can read more about this topic at"
 898       echo "http://www.rodsbooks.com/refind/secureboot.html."
 899       echo ""
 900       echo -n "Do you want to proceed with installation (Y/N)? "
 901       ReadYesNo
 902       if [[ $YesNo == "Y" || $YesNo == "y" ]] ; then
 903          echo "OK; continuing with the installation..."
 904       else
 905          exit 0
 906       fi
 907    fi
 908
 909    if [[ "$ShimSource" != "none" && ! $IsSecureBoot == "1" ]] ; then
 910       echo ""
 911       echo "You've specified installing using a shim.efi file, but your computer does not"
 912       echo "appear to be running in Secure Boot mode. Although installing in this way"
 913       echo "should work, it's unnecessarily complex. You may continue, but unless you"
 914       echo "plan to enable Secure Boot, you should consider stopping and omitting the"
 915       echo "--shim option. You can read more about this topic at"
 916       echo "http://www.rodsbooks.com/refind/secureboot.html."
 917       echo ""
 918       echo -n "Do you want to proceed with installation (Y/N)? "
 919       ReadYesNo
 920       if [[ $YesNo == "Y" || $YesNo == "y" ]] ; then
 921          echo "OK; continuing with the installation..."
 922       else
 923          exit 0
 924       fi
 925    fi
 926
 927    if [[ $LocalKeys != 0 && ! $IsSecureBoot == "1" ]] ; then
 928       echo ""
 929       echo "You've specified re-signing your rEFInd binaries with locally-generated keys,"
 930       echo "but your computer does not appear to be running in Secure Boot mode. The"
 931       echo "keys you generate will be useless unless you enable Secure Boot. You may"
 932       echo "proceed with this installation, but before you do so, you may want to read"
 933       echo "more about it at http://www.rodsbooks.com/refind/secureboot.html."
 934       echo ""
 935       echo -n "Do you want to proceed with installation (Y/N)? "
 936       ReadYesNo
 937       if [[ $YesNo == "Y" || $YesNo == "y" ]] ; then
 938          echo "OK; continuing with the installation..."
 939       else
 940          exit 0
 941       fi
 942    fi
 943
 944 } # CheckSecureBoot()
 945
 946 # Check for the presence of locally-generated keys from a previous installation in
 947 # $EtcKeysDir (/etc/refind.d/keys). If they're not present, generate them using
 948 # openssl.
 949 GenerateKeys() {
 950    PrivateKey="$EtcKeysDir/$LocalKeysBase.key"
 951    CertKey="$EtcKeysDir/$LocalKeysBase.crt"
 952    DerKey="$EtcKeysDir/$LocalKeysBase.cer"
 953    OpenSSL=`which openssl 2> /dev/null`
 954
 955    # Do the work only if one or more of the necessary keys is missing
 956    # TODO: Technically, we don't need the DerKey; but if it's missing and openssl
 957    # is also missing, this will fail. This could be improved.
 958    if [[ ! -f "$PrivateKey" || ! -f "$CertKey" || ! -f "$DerKey" ]] ; then
 959       echo "Generating a fresh set of local keys...."
 960       mkdir -p "$EtcKeysDir"
 961       chmod 0700 "$EtcKeysDir"
 962       if [[ ! -x "$OpenSSL" ]] ; then
 963          echo "Can't find openssl, which is required to create your private signing keys!"
 964          echo "Aborting!"
 965          exit 1
 966       fi
 967       if [[ -f "$PrivateKey" ]] ; then
 968          echo "Backing up existing $PrivateKey"
 969          cp -f "$PrivateKey" "$PrivateKey.backup" 2> /dev/null
 970       fi
 971       if [[ -f "$CertKey" ]] ; then
 972          echo "Backing up existing $CertKey"
 973          cp -f "$CertKey" "$CertKey.backup" 2> /dev/null
 974       fi
 975       if [[ -f "$DerKey" ]] ; then
 976          echo "Backing up existing $DerKey"
 977          cp -f "$DerKey" "$DerKey.backup" 2> /dev/null
 978       fi
 979       "$OpenSSL" req -new -x509 -newkey rsa:2048 -keyout "$PrivateKey" -out "$CertKey" \
 980                      -nodes -days 3650 -subj "/CN=Locally-generated rEFInd key/"
 981       "$OpenSSL" x509 -in "$CertKey" -out "$DerKey" -outform DER
 982       chmod 0600 "$PrivateKey"
 983    else
 984       echo "Using existing local keys...."
 985    fi
 986 }
 987
 988 # Sign a single binary. Requires parameters:
 989 #   $1 = source file
 990 #   $2 = destination file
 991 # Also assumes that the SBSign, PESign, UseSBSign, UsePESign, and various key variables are set
 992 # appropriately.
 993 # Aborts script on error
 994 SignOneBinary() {
 995    $SBSign --key "$PrivateKey" --cert "$CertKey" --output "$2" "$1"
 996    if [[ $? != 0 ]] ; then
 997       echo "Problem signing the binary $1! Aborting!"
 998       exit 1
 999    fi
1000 }
1001
1002 # Re-sign the x86-64 binaries with a locally-generated key, First look for appropriate
1003 # key files in $EtcKeysDir. If they're present, use them to re-sign the binaries. If
1004 # not, try to generate new keys and store them in $EtcKeysDir.
1005 ReSignBinaries() {
1006    SBSign=`which sbsign 2> /dev/null`
1007    echo "Found sbsign at $SBSign"
1008    TempDir="/tmp/refind_local"
1009    if [[ ! -x "$SBSign" ]] ; then
1010       echo "Can't find sbsign, which is required to sign rEFInd with your own keys!"
1011       echo "Aborting!"
1012       exit 1
1013    fi
1014    GenerateKeys
1015    mkdir -p "$TempDir/drivers_$Platform"
1016    cp "$RefindDir/refind.conf-sample $TempDir" 2> /dev/null
1017    cp "$ThisDir/refind.conf-sample $TempDir" 2> /dev/null
1018    cp "$RefindDir/refind_ia32.efi $TempDir" 2> /dev/null
1019    cp -a "$RefindDir/drivers_ia32 $TempDir" 2> /dev/null
1020    cp -a "$ThisDir/drivers_ia32 $TempDir" 2> /dev/null
1021    SignOneBinary "$RefindDir/refind_$Platform.efi" "$TempDir/refind_$Platform.efi"
1022    SaveIFS=$IFS
1023    IFS=$(echo -en "\n\b")
1024    for Driver in `ls "$RefindDir"/drivers_$Platform/*.efi "$ThisDir"/drivers_$Platform/*.efi 2> /dev/null` ; do
1025       TempName=`basename "$Driver"`
1026       SignOneBinary "$Driver" "$TempDir/drivers_$Platform/$TempName"
1027    done
1028    IFS=$SaveIFS
1029    RefindDir="$TempDir"
1030    DeleteRefindDir=1
1031 } # ReSignBinaries()
1032
1033 # Locate and mount an ESP, if possible, based on parted output.
1034 # Should be called only if /boot/efi is NOT an acceptable ESP.
1035 # Sets InstallDir to the mounted ESP's path ($RootDir/boot/efi)
1036 # and EspFilesystem the filesystem (always "vfat")
1037 FindLinuxESP() {
1038    echo "The ESP doesn't seem to be mounted! Trying to find it...."
1039    local Drive
1040    local PartNum
1041    local TableType
1042    local DmStatus
1043    local SkipIt
1044    local Dmraid
1045    for Drive in `ls /dev/[sh]d?` ; do
1046       SkipIt=0
1047       Dmraid=`which dmraid 2> /dev/null`
1048       if [ -x "$Dmraid" ] ; then
1049          DmStatus=`dmraid -r | grep $Drive`
1050          if [ -n "$DmStatus" ] ; then
1051             echo "$Drive seems to be part of a RAID array; skipping!"
1052             SkipIt=1
1053          fi
1054       fi
1055       TableType=`parted $Drive print -m -s 2>/dev/null | awk -F: '$1 == "'$Drive'" { print $6 }'`
1056       if [[ $TableType == 'gpt' && $SkipIt == 0 ]] ; then # read only GPT disks that aren't part of dmraid array
1057          PartNum=`LANG=C parted $Drive print -m -s 2>/dev/null | awk -F: '$7 ~ "(^boot| boot)" { print $1 }' | head -n 1`
1058          if [ "$PartNum" -eq "$PartNum" ] 2> /dev/null ; then
1059             InstallDir="$RootDir/boot/efi"
1060             mkdir -p $InstallDir
1061             mount $Drive$PartNum $InstallDir
1062             EspFilesystem=`grep "$Drive$PartNum.*/boot/efi" /etc/mtab | uniq | grep -v autofs | cut -d " " -f 3`
1063             if [[ $EspFilesystem != 'vfat' ]] ; then
1064                umount $InstallDir
1065             else
1066                echo "Mounting ESP at $InstallDir"
1067                break;
1068             fi
1069          fi # $PartNum -eq $PartNum
1070       fi # TableType
1071    done
1072 } # FindLinuxESP()
1073
1074 # Identifies the ESP's location (/boot or /boot/efi, or these locations under
1075 # the directory specified by --root); aborts if the ESP isn't mounted at
1076 # either location.
1077 # Sets InstallDir to the ESP mount point.
1078 FindMountedESP() {
1079    mount /boot &> /dev/null
1080    mount /boot/efi &> /dev/null
1081    EspLine=`df "$RootDir/boot/efi" 2> /dev/null | grep boot/efi`
1082    if [[ ! -n "$EspLine" ]] ; then
1083       EspLine=`df "$RootDir"/boot | grep boot`
1084    fi
1085    InstallDir=`echo $EspLine | cut -d " " -f 6`
1086
1087    if [[ -n "$InstallDir" ]] ; then
1088       EspFilesystem=`grep -w "$InstallDir" /etc/mtab | uniq | grep -v autofs | cut -d " " -f 3`
1089    fi
1090    if [[ $EspFilesystem != 'vfat' ]] ; then
1091       FindLinuxESP
1092    fi
1093    if [[ $EspFilesystem != 'vfat' ]] ; then
1094       echo "$RootDir/$InstallDir doesn't seem to be on a VFAT filesystem. The ESP must be"
1095       echo "mounted at $RootDir/boot or $RootDir/boot/efi and it must be VFAT! Aborting!"
1096       exit 1
1097    fi
1098    echo "ESP was found at $InstallDir using $EspFilesystem"
1099 } # FindMountedESP
1100
1101 # Uses efibootmgr to add an entry for rEFInd to the EFI's NVRAM.
1102 # If this fails, sets Problems=1
1103 AddBootEntry() {
1104    local PartNum
1105    Efibootmgr=`which efibootmgr 2> /dev/null`
1106    if [[ "$Efibootmgr" ]] ; then
1107       InstallDisk=`grep "$InstallDir" /etc/mtab | cut -d " " -f 1 | cut -c 1-8`
1108       PartNum=`grep "$InstallDir" /etc/mtab | cut -d " " -f 1 | cut -c 9-10`
1109       EntryFilename="$TargetDir/$Refind"
1110       EfiEntryFilename=`echo ${EntryFilename//\//\\\}`
1111       EfiEntryFilename2=`echo ${EfiEntryFilename} | sed s/\\\\\\\\/\\\\\\\\\\\\\\\\/g`
1112       ExistingEntry=`"$Efibootmgr" -v | grep -i "$EfiEntryFilename2"`
1113
1114       if [[ "$ExistingEntry" ]] ; then
1115          ExistingEntryBootNum=`echo "$ExistingEntry" | cut -c 5-8`
1116          FirstBoot=`"$Efibootmgr" | grep BootOrder | cut -c 12-15`
1117          if [[ "$ExistingEntryBootNum" != "$FirstBoot" ]] ; then
1118             echo "An existing rEFInd boot entry exists, but isn't set as the default boot"
1119             echo "manager. The boot order is being adjusted to make rEFInd the default boot"
1120             echo "manager. If this is NOT what you want, you should use efibootmgr to"
1121             echo "manually adjust your EFI's boot order."
1122          fi
1123          "$Efibootmgr" -b $ExistingEntryBootNum -B &> /dev/null
1124       fi
1125
1126       echo "Installing it!"
1127       if [[ "$KeepName" == 0 ]] ; then
1128          "$Efibootmgr" -c -l "$EfiEntryFilename" -L "rEFInd Boot Manager" -d $InstallDisk -p $PartNum &> /dev/null
1129       else
1130          "$Efibootmgr" -c -l "$EfiEntryFilename" -L "rEFInd Boot Manager" -d $InstallDisk -p $PartNum \
1131                        -u "$TargetShim $TargetX64" &> /dev/null
1132       fi
1133       if [[ $? != 0 ]] ; then
1134          EfibootmgrProblems=1
1135          Problems=1
1136       fi
1137
1138    else # efibootmgr not found
1139       EfibootmgrProblems=1
1140       Problems=1
1141    fi
1142
1143    if [[ $EfibootmgrProblems ]] ; then
1144       echo
1145       echo "ALERT: There were problems running the efibootmgr program! You may need to"
1146       echo "rename the $Refind binary to the default name (EFI/BOOT/bootx64.efi"
1147       echo "on x86-64 systems, EFI/BOOT/bootia32.efi on x86 systems, or"
1148       echo "EFI/BOOT/bootaa64.efi on ARM64 systems) to have it run!"
1149       echo
1150    else
1151       echo "rEFInd has been set as the default boot manager."
1152    fi
1153 } # AddBootEntry()
1154
1155 # Create a minimal/sample refind_linux.conf file in /boot.
1156 GenerateRefindLinuxConf() {
1157    if [[ -f "$RLConfFile" ]] ; then
1158       echo "Existing $RLConfFile found; not overwriting."
1159    else
1160       echo "Creating $RLConfFile; edit it to adjust kernel options."
1161       RootFS=`df "$RootDir" | grep dev | cut -f 1 -d " "`
1162       StartOfDevname=`echo "$RootFS" | cut -b 1-7`
1163       if [[ "$StartOfDevname" == "/dev/sd" || "$StartOfDevName" == "/dev/hd" ]] ; then
1164          # Identify root filesystem by UUID rather than by device node, if possible
1165          Uuid=`blkid -o export -s UUID "$RootFS" 2> /dev/null | grep UUID=`
1166          if [[ -n $Uuid ]] ; then
1167             RootFS="$Uuid"
1168          fi
1169       fi
1170       if [[ $RootDir == "/" ]] ; then
1171          local FirstCmdlineOption=`cat /proc/cmdline | cut -d ' ' -f 1`
1172          if [[ "$FirstCmdlineOption" =~ (vmlinuz|bzImage|kernel) ]] ; then
1173             DefaultOptions=`cat /proc/cmdline | cut -d ' ' -f 2- | sed 's/\S*initrd=\S*//g' | sed 's/ *$//' | sed 's/^ *//'`
1174          else
1175             DefaultOptions=`cat /proc/cmdline | sed 's/\S*initrd=\S*//g' | sed 's/ *$//' | sed 's/^ *//'`
1176          fi
1177       else
1178          if [[ -f "$RootDir/etc/default/grub" ]] ; then
1179             # We want the default options used by the distribution, stored here....
1180             source "$RootDir/etc/default/grub"
1181             echo "Setting default boot options based on $RootDir/etc/default/grub"
1182          fi
1183          DefaultOptions="ro root=$RootFS $GRUB_CMDLINE_LINUX $GRUB_CMDLINE_LINUX_DEFAULT"
1184       fi
1185       echo "\"Boot with standard options\"  \"$DefaultOptions\"" > $RLConfFile
1186       echo "\"Boot to single-user mode\"    \"$DefaultOptions single\"" >> $RLConfFile
1187       echo "\"Boot with minimal options\"   \"ro root=$RootFS\"" >> $RLConfFile
1188    fi
1189 }
1190
1191 # Controls rEFInd installation under Linux.
1192 # Sets Problems=1 if something goes wrong.
1193 InstallOnLinux() {
1194    if [[ "$TargetDir" == "/System/Library/CoreServices" ]] ; then
1195       echo "You may not use the --ownhfs option under Linux! Aborting!"
1196       exit 1
1197    fi
1198    echo "Installing rEFInd on Linux...."
1199    modprobe efivars &> /dev/null
1200    if [[ $TargetDir == "/EFI/BOOT" ]] ; then
1201       MountDefaultTarget
1202    else
1203       FindMountedESP
1204       DetermineTargetDir
1205    fi
1206
1207    if [[ $LocalKeys == 1 ]] ; then
1208       ReSignBinaries
1209    fi
1210
1211    CheckSecureBoot
1212    CopyRefindFiles
1213    if [[ "$TargetDir" != "/EFI/BOOT" && "$TargetDir" != "/EFI/Microsoft/Boot" ]] ; then
1214       AddBootEntry
1215       GenerateRefindLinuxConf
1216    fi
1217 } # InstallOnLinux()
1218
1219 #
1220 # The main part of the script. Sets a few environment variables,
1221 # performs a few startup checks, and then calls functions to
1222 # install under OS X or Linux, depending on the detected platform.
1223 #
1224 GetParams "$@"
1225 if [[ $UID != 0 ]] ; then
1226    echo "Not running as root; attempting to elevate privileges via sudo...."
1227    sudo "$BASH_SOURCE" "$@"
1228    if [[ $? != 0 ]] ; then
1229       echo "This script must be run as root (or using sudo). Exiting!"
1230       exit 1
1231    else
1232       exit 0
1233    fi
1234 fi
1235 DeterminePlatform
1236 CheckForFiles
1237 case "$OSTYPE" in
1238    darwin*)
1239         if [[ "$ShimSource" != "none" ]] ; then
1240            echo "The --shim option is not supported on OS X! Exiting!"
1241            exit 1
1242         fi
1243         if [[ "$LocalKeys" != 0 ]] ; then
1244            echo "The --localkeys option is not supported on OS X! Exiting!"
1245            exit 1
1246         fi
1247         InstallOnOSX $1
1248         ;;
1249    linux*)
1250         InstallOnLinux
1251         ;;
1252    *)
1253         echo "Running on unknown OS; aborting!"
1254         if [[ "$InstallToEspOnMac" == 0 ]] ; then
1255            echo "The --notesp option is not supported on Linux! Exiting!"
1256            exit 1
1257         fi
1258 esac
1259
1260 if [[ $Problems ]] ; then
1261    echo
1262    echo "ALERT:"
1263    echo "Installation has completed, but problems were detected. Review the output for"
1264    echo "error messages and take corrective measures as necessary. You may need to"
1265    echo "re-run this script or install manually before rEFInd will work."
1266    echo
1267 else
1268    echo
1269    echo "Installation has completed successfully."
1270    echo
1271 fi
1272
1273 if [[ $UnmountEsp == '1' ]] ; then
1274    echo "Unmounting install dir"
1275    case "$OSTYPE" in
1276    darwin*)
1277       diskutil unmount $InstallDir
1278       ;;
1279    *)
1280       umount $InstallDir
1281       ;;
1282    esac
1283 fi
1284
1285 if [[ "$InstallDir" == /tmp/refind_install ]] ; then
1286 #   sleep 5
1287    rmdir "$InstallDir"
1288 fi