finish_gentoo_deployment_systemd

#here a gentoo install from ubuntu live system in a kvm VM.

sudo su
export DEBIAN_FRONTEND=noninteractive
setxkbmap de

#maybe it destroy too much.
blkdiscard /dev/vda
sgdisk --zap-all /dev/vda

sgdisk -n1:0:+100M -c 1:"EFI System Partition" -t 1:ef00 /dev/vda
sgdisk -n2:0:+2G -c 2:"Swap Partition" -t 2:8200 /dev/vda
sgdisk -n3:0:0 -c 3:"Linux /" -t 3:8300 /dev/vda

mkfs.vfat -F 32 /dev/vda1
mkswap /dev/vda2
swapon /dev/vda2
mkfs.xfs /dev/vda3

mkdir --parents /mnt/gentoo
mount /dev/vda3 /mnt/gentoo
mkdir -p /mnt/gentoo/tmp
chmod 1777 /mnt/gentoo/tmp

#IMPORTANT - need to check the file as required! maybe URL is outdated.
wget -c https://mirror.leaseweb.com/gentoo/releases/amd64/autobuilds/current-stage3-amd64-systemd/stage3-amd64-desktop-systemd-20230723T170155Z.tar.xz -O /root/stage3.tar.xz
tar --numeric-owner --xattrs -xvJpf /root/stage3.tar.xz -C /mnt/gentoo

rm /root/stage3.tar.xz

cat > /mnt/gentoo/etc/portage/make.conf << MAKECONF
COMMON_FLAGS="-march=native -O2 -pipe"
CFLAGS="${COMMON_FLAGS}"
CXXFLAGS="${COMMON_FLAGS}"
FCFLAGS="${COMMON_FLAGS}"
FFLAGS="${COMMON_FLAGS}"

### PORTAGE OPTS ###
MAKEOPTS="-j2 -l2"
PORTAGE_NICENESS="1"
EMERGE_DEFAULT_OPTS="--jobs=2 --with-bdeps y --complete-graph-if-new-use y"
FEATURES="candy fixlafiles unmerge-orphans parallel-fetch parallel-install"

USE="systemd kvm qemu spice iscsi ssh fuse acl networkmanager dbus script tools pkcs11 mount -elogind"

ACCEPT_LICENSE="*"

PORTDIR="/var/db/repos/gentoo"
DISTDIR="/var/cache/distfiles"
PKGDIR="/var/cache/binpkgs"

LC_MESSAGES=C

GRUB_PLATFORMS="emu efi-32 efi-64 pc"
#GRUB_PLATFORMS="efi-64"
MAKECONF

echo "DESKTOP-`cat /dev/urandom | tr -dc 'a-zA-Z0-9' | fold -w 9 | head -n 1`" > /mnt/gentoo/etc/hostname

cat > /mnt/gentoo/etc/resolv.conf << NETWORK
nameserver 127.0.0.53
options edns0 trust-ad
search martin.ads
NETWORK

mount --types proc /proc /mnt/gentoo/proc
mount --rbind /sys /mnt/gentoo/sys
mount --make-rslave /mnt/gentoo/sys
mount --rbind /dev /mnt/gentoo/dev
mount --make-rslave /mnt/gentoo/dev
mount --bind /run /mnt/gentoo/run
mount --make-slave /mnt/gentoo/run

test -L /dev/shm && rm /dev/shm && mkdir /dev/shm
mount --types tmpfs --options nosuid,nodev,noexec shm /dev/shm
chmod 1777 /dev/shm /run/shm

chroot /mnt/gentoo /bin/env -i TERM=$TERM /bin/bash

source /etc/profile
export PS1="(chroot) $PS1"

mount /dev/vda1 /boot


emerge-webrsync

## IMPORTANT! need to double check here. Profile 21 is default/linux/amd64/17.1/systemd (stable)
#eselect profile list
#eselect profile set 21

prof=`eselect profile list|grep systemd|grep stable|grep -v desktop|awk -F" " '{print $1}'|sed 's/\[//'|sed 's/\]//'|head -n 1`
eselect profile set "$prof"



##QEMU / KVM SETUP

cat > /etc/portage/package.use/qemu-kvm << QEMU
app-emulation/qemu QEMU_SOFTMMU_TARGETS: arm x86_64 sparc QEMU_USER_TARGETS: x86_64
app-emulation/qemu usbredir
app-emulation/libvirt pcap virt-network numa fuse macvtap vepa qemu
QEMU




emerge  --verbose --update --deep --newuse @world


emerge -v --autounmask-write --ask --newuse --deep \
app-portage/cpuid2cpuflags sys-boot/grub app-editors/vim net-misc/wget net-wireless/wpa_supplicant app-emulation/libvirt \
sys-kernel/linux-firmware sys-kernel/gentoo-sources sys-kernel/genkernel sys-fs/e2fsprogs sys-fs/dosfstools net-dns/dnsmasq \
sys-apps/pciutils sys-fs/xfsprogs app-arch/dump sys-fs/xfsdump net-misc/networkmanager sys-apps/mlocate sys-boot/grub sys-boot/os-prober



#dispatch-conf on error and repeat

echo "*/* $(cpuid2cpuflags)" > /etc/portage/package.use/00cpu-flags

ln -sf ../usr/share/zoneinfo/Europe/Brussels /etc/localtime

cat > /etc/locale.gen << LANGGEN
en_US ISO-8859-1
en_US.UTF-8 UTF-8
de_DE ISO-8859-1
de_DE.UTF-8 UTF-8
LANGGEN

locale-gen

qcat > /etc/env.d/02locale << LANGGENB
LANG="de_DE.UTF-8"
LC_COLLATE="C.UTF-8"
LANGGENB

eselect locale set 6

cat >> /etc/conf.d/keymaps << KEYM
keymap="de"
extended_keymaps=""
windowkeys= "YES"
dumpkeys_charset=""
fix_euro="NO"
KEYM

env-update && source /etc/profile && export PS1="(chroot) ${PS1}"


eselect kernel set 1


##Gentoo - systemd specifics
ln -sf /proc/self/mounts /etc/mtab

mkdir -p /etc/modules-load.d

genkernel --virtio --install --loglevel 5 --module-rebuild all

emerge --ask --changed-use --deep @world

echo /dev/disk/by-uuid/$(blkid -s UUID -o value /dev/vda1) /boot vfat defaults,noatime 0 2 > /etc/fstab
echo /dev/disk/by-uuid/$(blkid -s UUID -o value /dev/vda2) none swap sw 0 0 >> /etc/fstab
echo /dev/disk/by-uuid/$(blkid -s UUID -o value /dev/vda3) / xfs noatime 0 1 >> /etc/fstab




cat >> /etc/conf.d/net << NETWORKB
dns_domain_lo="WORKGROUP"
NETWORKB

#emerge  net-misc/dhcpcd
#systemctl enable dhcpcd
#systemctl start dhcpcd

#on error maybe "dispatch-conf"

systemctl enable NetworkManager

#enable weak passwords
cat >  /etc/security/passwdqc.conf  << PASS
#min=disabled,24,11,8,7
#passphrase=3
#match=4
#similar=deny
#enforce=everyone

min=1,1,1,1,1
max=72
passphrase=0
match=0
similar=permit
random=47
enforce=none
retry=3
PASS

echo 'root:p@ssw0rd'|chpasswd
useradd -m -G users,wheel,kvm,video,audio -s /bin/bash serveradmin
echo 'serveradmin:p@ssw0rd'|chpasswd


systemctl enable sshd

#cat >> /etc/inittab << INITFILE
# SERIAL CONSOLES
#s0:12345:respawn:/sbin/agetty 9600 ttyS0 vt100
#s1:12345:respawn:/sbin/agetty 9600 ttyS1 vt100
#INITFILE

systemctl enable getty@tty1.service

cat > /etc/libvirt/libvirtd.conf << LIBVIRT
auth_unix_ro = "none"
auth_unix_rw = "none"
unix_sock_group = "wheel"
unix_sock_ro_perms = "0777"
unix_sock_rw_perms = "0770"
LIBVIRT



mkdir -p /etc/tools/


cat > /etc/tools/update << UPDATESCRIPT
emerge --sync
emerge -avDuU @world
glsa-check -t affected
UPDATESCRIPT

chmod +x /etc/tools/update
ln -sfn /etc/tools/update /bin/update


grub-install --target=x86_64-efi --efi-directory=/boot --removable


grub-mkconfig -o /boot/grub/grub.cfg

#more systemd specifics
systemd-firstboot --prompt --setup-machine-id

emerge -avDuN @world
emerge --depclean


exit
cd
umount -l /mnt/gentoo/dev{/shm,/pts,}
mount -R /mnt/gentoo
reboot