mirror of
https://github.com/Start9Labs/start-os.git
synced 2026-03-26 02:11:53 +00:00
65eb520cca
* disable apt and add script for persisting apt pkgs * fix typo * exit 1 on fake-apt * readd fake-apt after upgrade * fix typo * remove finicky protection * fix build
94 lines
3.5 KiB
Bash
Executable File
94 lines
3.5 KiB
Bash
Executable File
#!/bin/sh
|
|
|
|
set -e
|
|
|
|
# install dependencies
|
|
/usr/bin/apt update
|
|
/usr/bin/apt install --no-install-recommends -y xserver-xorg x11-xserver-utils xinit firefox-esr matchbox-window-manager libnss3-tools
|
|
|
|
# create kiosk script
|
|
cat > /home/start9/kiosk.sh << 'EOF'
|
|
#!/bin/sh
|
|
PROFILE=$(mktemp -d)
|
|
if [ -f /usr/local/share/ca-certificates/embassy-root-ca.crt ]; then
|
|
certutil -A -n "Embassy Local Root CA" -t "TCu,Cuw,Tuw" -i /usr/local/share/ca-certificates/embassy-root-ca.crt -d $PROFILE
|
|
fi
|
|
cat >> $PROFILE/prefs.js << EOT
|
|
user_pref("network.proxy.autoconfig_url", "file:///usr/lib/embassy/proxy.pac");
|
|
user_pref("network.proxy.socks_remote_dns", true);
|
|
user_pref("network.proxy.type", 2);
|
|
user_pref("dom.securecontext.allowlist_onions", true);
|
|
user_pref("dom.securecontext.whitelist_onions", true);
|
|
user_pref("signon.rememberSignons", false);
|
|
user_pref("extensions.activeThemeID", "firefox-compact-dark@mozilla.org");
|
|
user_pref("browser.theme.content-theme", 0);
|
|
user_pref("browser.theme.toolbar-theme", 0);
|
|
user_pref("datareporting.policy.firstRunURL", "");
|
|
user_pref("browser.safebrowsing.malware.enabled", false);
|
|
user_pref("browser.safebrowsing.phishing.enabled", false);
|
|
user_pref("datareporting.healthreport.service.enabled", false);
|
|
user_pref("datareporting.healthreport.uploadEnabled", false);
|
|
user_pref("datareporting.policy.dataSubmissionEnabled", false);
|
|
user_pref("datareporting.policy.dataSubmissionEnabled", false);
|
|
user_pref("browser.crashReports.unsubmittedCheck.autoSubmit2", false);
|
|
user_pref("browser.ping-centre.telemetry", false);
|
|
user_pref("browser.onboarding.enabled", false);
|
|
user_pref("toolkit.telemetry.archive.enabled", false);
|
|
user_pref("toolkit.telemetry.bhrPing.enabled", false);
|
|
user_pref("toolkit.telemetry.enabled", false);
|
|
user_pref("toolkit.telemetry.firstShutdownPing.enabled", false);
|
|
user_pref("toolkit.telemetry.newProfilePing.enabled", false);
|
|
user_pref("toolkit.telemetry.reportingpolicy.firstRun", false);
|
|
user_pref("toolkit.telemetry.shutdownPingSender.enabled", false);
|
|
user_pref("toolkit.telemetry.unified", false);
|
|
user_pref("toolkit.telemetry.updatePing.enabled", false);
|
|
user_pref("toolkit.telemetry.cachedClientID", "");
|
|
user_pref("experiments.enabled", false);
|
|
user_pref("experiments.activeExperiment", false);
|
|
user_pref("experiments.supported", false);
|
|
user_pref("network.allow-experiments", false);
|
|
user_pref("extensions.shield-recipe-client.enabled", false);
|
|
user_pref("extensions.shield-recipe-client.user_id", "");
|
|
user_pref("extensions.shield-recipe-client.api_url", "");
|
|
user_pref("app.normandy.enabled", false);
|
|
user_pref("app.normandy.api_url", "");
|
|
user_pref("app.shield.optoutstudies.enabled", true);
|
|
EOT
|
|
while ! curl "http://localhost" > /dev/null; do
|
|
sleep 1
|
|
done
|
|
while ! /usr/lib/embassy/scripts/check-monitor; do
|
|
sleep 15
|
|
done
|
|
(
|
|
while /usr/lib/embassy/scripts/check-monitor; do
|
|
sleep 15
|
|
done
|
|
killall firefox-esr
|
|
) &
|
|
matchbox-window-manager -use_titlebar no &
|
|
firefox-esr http://localhost --profile $PROFILE
|
|
rm -rf $PROFILE
|
|
EOF
|
|
chmod +x /home/start9/kiosk.sh
|
|
|
|
# use kiosk if tty (not pts)
|
|
if ! grep -q 'kiosk' /home/start9/.profile; then
|
|
cat >> /home/start9/.profile << 'EOF'
|
|
# Use kiosk for TTY
|
|
if [[ "$(tty)" =~ ^/dev/tty ]]; then
|
|
exec startx "$HOME/kiosk.sh"
|
|
fi
|
|
EOF
|
|
fi
|
|
|
|
# enable autologin
|
|
mkdir -p /etc/systemd/system/getty@tty1.service.d
|
|
cat > /etc/systemd/system/getty@tty1.service.d/autologin.conf << 'EOF'
|
|
[Service]
|
|
ExecStart=
|
|
ExecStart=-/sbin/agetty --autologin start9 --noclear %I $TERM
|
|
EOF
|
|
ln -fs /etc/systemd/system/autologin@.service /etc/systemd/system/getty.target.wants/getty@tty1.service
|
|
|