code.delx.au - refind/blob - refind-install

   1 #!/bin/bash
   2 #
   3 # Linux/MacOS X script to install rEFInd
   4 #
   5 # Usage:
   6 #
   7 # ./refind-install [options]
   8 #
   9 # options include:
  10 #    "--notesp" to install to the OS X root filesystem rather than to the ESP.
  11 #           This option may not be used under Linux.
  12 #    "--usedefault {devicefile}" to install as default
  13 #           (/EFI/BOOT/BOOTX64.EFI and similar) to the specified device
  14 #           (/dev/sdd1 or whatever) without registering with the NVRAM.
  15 #    "--ownhfs {devicefile}" to install to an HFS+ volume that's NOT currently
  16 #           an OS X boot volume.
  17 #    "--root {dir}" to specify installation using the specified directory
  18 #           as the system's root
  19 #    "--alldrivers" to install all drivers along with regular files
  20 #    "--nodrivers" to suppress driver installation (default in Linux is
  21 #           driver used on /boot; --nodrivers is OS X default)
  22 #    "--shim {shimfile}" to install a shim.efi file for Secure Boot
  23 #    "--preloader" is synonymous with "--shim"
  24 #    "--localkeys" to re-sign x86-64 binaries with a locally-generated key
  25 #    "--keepname" to keep refind_x64.efi name as such even when using shim
  26 #    "--yes" to assume a "yes" response to all prompts
  27 #
  28 # The "esp" option is valid only on Mac OS X; it causes
  29 # installation to the EFI System Partition (ESP) rather than
  30 # to the current OS X boot partition. Under Linux, this script
  31 # installs to the ESP by default.
  32 #
  33 # This program is copyright (c) 2012-2015 by Roderick W. Smith
  34 # It is released under the terms of the GNU GPL, version 3,
  35 # a copy of which should be included in the file COPYING.txt.
  36 #
  37 # Revision history:
  38 #
  39 # 0.9.3   -- Enable running under OS X's recovery system & add warning about
  40 #            SIP & brief instructions on how to deal with it if SIP is
  41 #            detected to be enabled.
  42 # 0.9.2   -- Added --keepname option.
  43 # 0.8.7   -- Better detection of Secure Boot mode & fixed errors when copying
  44 #            Shim & MokManager files over themselves; fixed bug that caused
  45 #            inappropriate installation to EFI/BOOT/bootx64.efi
  46 # 0.8.6   -- Fixed bugs that caused misidentification of ESP on disks with
  47 #            partition numbers over 10 on OS X and misidentification of mount
  48 #            point if already-mounted ESP had space in path.
  49 # 0.8.5   -- Refinement/cleanup of new OS X ESP-as-default policy
  50 # 0.8.4   -- OS X default changed to install to ESP under /EFI/BOOT
  51 # 0.7.9   -- Fixed bug that caused errors if dmraid utility not installed
  52 # 0.7.7   -- Fixed bug that created mangled refind_linux.conf file; added ability
  53 #            to locate and mount ESP on Linux, if it's not mounted
  54 # 0.7.6   -- Added --ownhfs {device-filename} option
  55 # 0.7.5   -- Fixed bug when installing to ESP on recent versions of OS X
  56 # 0.7.2   -- Fixed code that could be confused by use of autofs to mount the ESP
  57 # 0.7.0   -- Added support for the new Btrfs driver
  58 # 0.6.12  -- Added support for PreLoader as well as for shim
  59 # 0.6.11  -- Improvements in script's ability to handle directories with spaces
  60 #            in their names
  61 # 0.6.9   -- Install gptsync on Macs
  62 # 0.6.8   -- Bug fix: ESP scan now uses "uniq".
  63 # 0.6.6   -- Bug fix: Upgrade drivers when installed to EFI/BOOT. Also enable
  64 #            copying shim.efi and MokManager.efi over themselves.
  65 # 0.6.4   -- Copies ext2 driver rather than ext4 driver for ext2/3fs
  66 # 0.6.3   -- Support for detecting rEFInd in EFI/BOOT and EFI/Microsoft/Boot
  67 #            directories & for installing to EFI/BOOT in BIOS mode
  68 # 0.6.2-1 -- Added --yes option & tweaked key-copying for use with RPM install script
  69 # 0.6.1   -- Added --root option; minor bug fixes
  70 # 0.6.0   -- Changed --drivers to --alldrivers and added --nodrivers option;
  71 #            changed default driver installation behavior in Linux to install
  72 #            the driver needed to read /boot (if available)
  73 # 0.5.1.2 -- Fixed bug that caused failure to generate refind_linux.conf file
  74 # 0.5.1.1 -- Fixed bug that caused script failure under OS X
  75 # 0.5.1   -- Added --shim & --localkeys options & create sample refind_linux.conf
  76 #            in /boot
  77 # 0.5.0   -- Added --usedefault & --drivers options & changed "esp" option to "--esp"
  78 # 0.4.5   -- Fixed check for rEFItBlesser in OS X
  79 # 0.4.2   -- Added notice about BIOS-based OSes & made NVRAM changes in Linux smarter
  80 # 0.4.1   -- Added check for rEFItBlesser in OS X
  81 # 0.3.3.1 -- Fixed OS X 10.7 bug; also works as make target
  82 # 0.3.2.1 -- Check for presence of source files; aborts if not present
  83 # 0.3.2   -- Initial version
  84 #
  85 # Note: install.sh version numbers match those of the rEFInd package
  86 # with which they first appeared.
  87
  88 RootDir="/"
  89 TargetDir=/EFI/refind
  90 LocalKeysBase="refind_local"
  91 ShimSource="none"
  92 ShimType="none"
  93 KeepName=0
  94 TargetShim="default"
  95 TargetX64="refind_x64.efi"
  96 TargetIA32="refind_ia32.efi"
  97 LocalKeys=0
  98 DeleteRefindDir=0
  99 AlwaysYes=0
 100
 101 #
 102 # Functions used by both OS X and Linux....
 103 #
 104
 105 GetParams() {
 106    InstallToEspOnMac=1
 107    # Install the driver required to read Linux /boot, if it's available
 108    # Note: Under OS X, this will be installed only if a Linux partition
 109    # is detected, in which case the ext4fs driver will be installed.
 110    InstallDrivers="boot"
 111    while [[ $# -gt 0 ]]; do
 112       case $1 in
 113          --notesp) InstallToEspOnMac=0
 114               ;;
 115          --ownhfs) OwnHfs=1
 116               InstallToEspOnMac=0
 117               TargetPart="$2"
 118               TargetDir=/System/Library/CoreServices
 119               shift
 120               ;;
 121          --usedefault) TargetDir=/EFI/BOOT
 122               TargetPart="$2"
 123               TargetX64="bootx64.efi"
 124               TargetIA32="bootia32.efi"
 125               shift
 126               ;;
 127          --root) RootDir="$2"
 128               InstallToEspOnMac=0
 129               shift
 130               ;;
 131          --localkeys) LocalKeys=1
 132               ;;
 133          --shim | --preloader) ShimSource="$2"
 134               ShimType=`basename $ShimSource`
 135               shift
 136               ;;
 137          --keepname) KeepName=1
 138               ;;
 139          --drivers | --alldrivers) InstallDrivers="all"
 140               ;;
 141          --nodrivers) InstallDrivers="none"
 142               ;;
 143          --yes) AlwaysYes=1
 144               ;;
 145          * ) echo "Usage: $0 [--notesp | --usedefault {device-file} | --root {dir} |"
 146              echo "                     --ownhfs {device-file} ] [--keepname]"
 147              echo "                  [--nodrivers | --alldrivers]"
 148              echo "                  [--localkeys] [--keepname] [--yes]"
 149              exit 1
 150       esac
 151       shift
 152    done
 153    if [[ "$InstallToEspOnMac" == 0 && "$RootDir" == '/' && "$TargetDir" == '/EFI/BOOT' ]] ; then
 154       echo "You may use --notesp OR --usedefault, but not both! Aborting!"
 155       exit 1
 156    fi
 157    if [[ "$RootDir" != '/' && "$TargetDir" == '/EFI/BOOT' ]] ; then
 158       echo "You may use --root OR --usedefault, but not both! Aborting!"
 159       exit 1
 160    fi
 161    if [[ "$TargetDir" != '/System/Library/CoreServices' && "$OwnHfs" == '1' ]] ; then
 162       echo "If you use --ownhfs, you may NOT use --usedefault! Aborting!"
 163       exit 1
 164    fi
 165    if [[ "$KeepName" == 1 && "$ShimSource" == "none" ]] ; then
 166       echo "The --keepname option is meaningful only in conjunction with --shim"
 167       echo "or --preloader! Aborting!"
 168       exit 1
 169    fi
 170    if [[ "$KeepName" == 1 && ("$OSTYPE" != "linux" && "$OSTYPE" != "linux-gnu") ]] ; then
 171       echo "The --keepname option is valid only under Linux! Aborting!"
 172       exit 1
 173    fi
 174    if [[ "$KeepName" == 1 && "$TargetDir" == "/EFI/BOOT" ]] ; then
 175       echo "The --keepname option is incompatible with --usedefault! Aborting!"
 176       exit 1
 177    fi
 178    RLConfFile="$RootDir/boot/refind_linux.conf"
 179    EtcKeysDir="$RootDir/etc/refind.d/keys"
 180 } # GetParams()
 181
 182 # Get a yes/no response from the user and place it in the YesNo variable.
 183 # If the AlwaysYes variable is set to 1, skip the user input and set "Y"
 184 # in the YesNo variable.
 185 ReadYesNo() {
 186    if [[ $AlwaysYes == 1 ]] ; then
 187       YesNo="Y"
 188       echo "Y"
 189    else
 190       read YesNo
 191    fi
 192 }
 193
 194 # Abort if the rEFInd files can't be found.
 195 # Also sets $ConfFile to point to the configuration file,
 196 # $IconsDir to point to the icons directory, and
 197 # $ShimSource to the source of the shim.efi file (if necessary).
 198 CheckForFiles() {
 199    # Note: This check is satisfied if EITHER the 32- or the 64-bit version
 200    # is found, even on the wrong platform. This is because the platform
 201    # hasn't yet been determined. This could obviously be improved, but it
 202    # would mean restructuring lots more code....
 203    if [[ ! -f "$RefindDir/refind_ia32.efi" && ! -f "$RefindDir/refind_x64.efi" ]] ; then
 204       echo "The rEFInd binary file is missing! Aborting installation!"
 205       exit 1
 206    fi
 207
 208    if [[ -f "$RefindDir/refind.conf-sample" ]] ; then
 209       ConfFile="$RefindDir/refind.conf-sample"
 210    elif [[ -f "$ThisDir/refind.conf-sample" ]] ; then
 211       ConfFile="$ThisDir/refind.conf-sample"
 212    else
 213       echo "The sample configuration file is missing! Aborting installation!"
 214       exit 1
 215    fi
 216
 217    if [[ -d "$RefindDir/icons" ]] ; then
 218       IconsDir="$RefindDir/icons"
 219    elif [[ -d "$ThisDir/icons" ]] ; then
 220       IconsDir="$ThisDir/icons"
 221    else
 222       echo "The icons directory is missing! Aborting installation!"
 223       exit 1
 224    fi
 225
 226    echo "ShimSource is $ShimSource"
 227    if [[ "$ShimSource" != "none" ]] ; then
 228       if [[ -f "$ShimSource" ]] ; then
 229          if [[ $ShimType == "shimx64.efi" || $ShimType == "shim.efi" ]] ; then
 230             TargetX64="grubx64.efi"
 231             MokManagerSource=`dirname "$ShimSource"`/MokManager.efi
 232          elif [[ $ShimType == "preloader.efi" || $ShimType == "PreLoader.efi" ]] ; then
 233             TargetX64="loader.efi"
 234             MokManagerSource=`dirname "$ShimSource"`/HashTool.efi
 235          else
 236             echo "Unknown shim/PreBootloader filename: $ShimType!"
 237             echo "Known filenames are shimx64.efi, shim.efi, and PreLoader.efi. Aborting!"
 238             exit 1
 239          fi
 240       else
 241          echo "The specified shim/PreBootloader file, $ShimSource, doesn't exist!"
 242          echo "Aborting installation!"
 243          exit 1
 244       fi
 245    fi
 246 } # CheckForFiles()
 247
 248 # Helper for CopyRefindFiles; copies shim files (including MokManager, if it's
 249 # available) to target.
 250 CopyShimFiles() {
 251    local inode1=`ls -i "$ShimSource" 2> /dev/null | cut -f 1 -d " "`
 252    local inode2=`ls -i "$InstallDir/$TargetDir/$TargetShim" 2> /dev/null | cut -f 1 -d " "`
 253    if [[ $inode1 != $inode2 ]] ; then
 254       cp -fb "$ShimSource" "$InstallDir/$TargetDir/$TargetShim"
 255       if [[ $? != 0 ]] ; then
 256          Problems=1
 257       fi
 258    fi
 259    inode1=`ls -i "$MokManagerSource" 2> /dev/null | cut -f 1 -d " "`
 260    local TargetMMName=`basename $MokManagerSource`
 261    inode2=`ls -i "$InstallDir/$TargetDir/$TargetMMName" 2> /dev/null | cut -f 1 -d " "`
 262    if [[ $inode1 != $inode2 ]] ; then
 263       if [[ -f "$MokManagerSource" ]] ; then
 264          cp -fb "$MokManagerSource" "$InstallDir/$TargetDir/"
 265       fi
 266       if [[ $? != 0 ]] ; then
 267          Problems=1
 268       fi
 269    fi
 270 } # CopyShimFiles()
 271
 272 # Copy the public keys to the installation medium
 273 CopyKeys() {
 274    if [[ $LocalKeys == 1 ]] ; then
 275       mkdir -p "$InstallDir/$TargetDir/keys/"
 276       cp "$EtcKeysDir/$LocalKeysBase.cer" "$InstallDir/$TargetDir/keys/"
 277       cp "$EtcKeysDir/$LocalKeysBase.crt" "$InstallDir/$TargetDir/keys/"
 278    fi
 279 } # CopyKeys()
 280
 281 # Set varaibles for installation in EFI/BOOT directory
 282 SetVarsForBoot() {
 283    TargetDir="/EFI/BOOT"
 284    if [[ $ShimSource == "none" ]] ; then
 285       TargetX64="bootx64.efi"
 286       TargetIA32="bootia32.efi"
 287    else
 288       if [[ $ShimType == "shim.efi" || $ShimType == "shimx64.efi" ]] ; then
 289          TargetX64="grubx64.efi"
 290       elif [[ $ShimType == "preloader.efi" || $ShimType == "PreLoader.efi" ]] ; then
 291          TargetX64="loader.efi"
 292       else
 293          echo "Unknown shim/PreBootloader type: $ShimType"
 294          echo "Aborting!"
 295          exit 1
 296       fi
 297       TargetIA32="bootia32.efi"
 298       TargetShim="bootx64.efi"
 299    fi
 300    if [[ $KeepName == 1 ]] ; then
 301       echo "Installation is to /EFI/BOOT, which is incompatible with --keepname! Aborting!"
 302       exit 1
 303    fi
 304 } # SetVarsForBoot()
 305
 306 # Set variables for installation in EFI/Microsoft/Boot directory
 307 SetVarsForMsBoot() {
 308    TargetDir="/EFI/Microsoft/Boot"
 309    if [[ $ShimSource == "none" ]] ; then
 310       TargetX64="bootmgfw.efi"
 311       TargetIA32="bootmgfw.efi"
 312    else
 313       if [[ $ShimType == "shim.efi" || $ShimType == "shimx64.efi" ]] ; then
 314          TargetX64="grubx64.efi"
 315       elif [[ $ShimType == "preloader.efi" || $ShimType == "PreLoader.efi" ]] ; then
 316          TargetX64="loader.efi"
 317       else
 318          echo "Unknown shim/PreBootloader type: $ShimType"
 319          echo "Aborting!"
 320          exit 1
 321       fi
 322       TargetShim="bootmgfw.efi"
 323    fi
 324    if [[ $KeepName == 1 ]] ; then
 325       echo "Installation is to /EFI/Microsoft/Boot, which is incompatible with --keepname!"
 326       echo "Aborting!"
 327       exit 1
 328    fi
 329 } # SetVarsForMsBoot()
 330
 331 # TargetDir defaults to /EFI/refind; however, this function adjusts it as follows:
 332 # - If an existing refind.conf is available in /EFI/BOOT or /EFI/Microsoft/Boot,
 333 #   install to that directory under the suitable name; but DO NOT do this if
 334 #   refind.conf is also in /EFI/refind.
 335 # - If booted in BIOS mode and the ESP lacks any other EFI files, install to
 336 #   /EFI/BOOT
 337 # - If booted in BIOS mode and there's no refind.conf file and there is a
 338 #   /EFI/Microsoft/Boot/bootmgfw.efi file, move it down one level and
 339 #   install under that name, "hijacking" the Windows boot loader filename
 340 DetermineTargetDir() {
 341    Upgrade=0
 342
 343    if [[ -f $InstallDir/EFI/BOOT/refind.conf && ! -f $InstallDir/EFI/refind/refind.conf ]] ; then
 344       SetVarsForBoot
 345       Upgrade=1
 346    fi
 347    if [[ -f $InstallDir/EFI/Microsoft/Boot/refind.conf && ! -f $InstallDir/EFI/refind/refind.conf ]] ; then
 348       SetVarsForMsBoot
 349       Upgrade=1
 350    fi
 351    if [[ -f $InstallDir/EFI/refind/refind.conf ]] ; then
 352       TargetDir="/EFI/refind"
 353       if [[ $ShimSource == "none" || $KeepName == 1 ]] ; then
 354          TargetX64="refind_x64.efi"
 355          TargetIA32="refind_ia32.efi"
 356       fi
 357       Upgrade=1
 358    fi
 359    if [[ $Upgrade == 1 ]] ; then
 360       echo "Found rEFInd installation in $InstallDir$TargetDir; upgrading it."
 361    fi
 362
 363    if [[ ! -d /sys/firmware/efi && ! $OSTYPE == darwin* && $Upgrade == 0 ]] ; then     # BIOS-mode
 364       FoundEfiFiles=`find "$InstallDir/EFI/BOOT" -name "*.efi" 2> /dev/null`
 365       FoundConfFiles=`find "$InstallDir" -name "refind\.conf" 2> /dev/null`
 366       if [[ ! -n "$FoundConfFiles" && -f "$InstallDir/EFI/Microsoft/Boot/bootmgfw.efi" ]] ; then
 367          mv -n "$InstallDir/EFI/Microsoft/Boot/bootmgfw.efi" "$InstallDir/EFI/Microsoft" &> /dev/null
 368          SetVarsForMsBoot
 369          echo "Running in BIOS mode with a suspected Windows installation; moving boot loader"
 370          echo "files so as to install to $InstallDir$TargetDir."
 371       elif [[ ! -n "$FoundEfiFiles" ]] ; then  # In BIOS mode and no default loader; install as default loader
 372          SetVarsForBoot
 373          echo "Running in BIOS mode with no existing default boot loader; installing to"
 374          echo $InstallDir$TargetDir
 375       else
 376          echo "Running in BIOS mode with an existing default boot loader; backing it up and"
 377          echo "installing rEFInd in its place."
 378          if [[ -d "$InstallDir/EFI/BOOT-rEFIndBackup" ]] ; then
 379             echo ""
 380             echo "Caution: An existing backup of a default boot loader exists! If the current"
 381             echo "default boot loader and the backup are different boot loaders, the current"
 382             echo "one will become inaccessible."
 383             echo ""
 384             echo -n "Do you want to proceed with installation (Y/N)? "
 385             ReadYesNo
 386             if [[ $YesNo == "Y" || $YesNo == "y" ]] ; then
 387                echo "OK; continuing with the installation..."
 388             else
 389                exit 0
 390             fi
 391          fi
 392          mv -n "$InstallDir/EFI/BOOT" "$InstallDir/EFI/BOOT-rEFIndBackup"
 393          SetVarsForBoot
 394       fi
 395    fi # BIOS-mode
 396 } # DetermineTargetDir()
 397
 398 # Determine (or guess) the filesystem used on the Linux /boot filesystem.
 399 # Store the result in the BootFS global variable.
 400 SetBootFS() {
 401    BootFS=""
 402    case "$OSTYPE" in
 403       linux*)
 404            if command -v blkid &>/dev/null; then
 405               BootPart=`df $RootDir/boot | grep dev | cut -f 1 -d " "`
 406               BootFS=`blkid -o export $BootPart 2> /dev/null | grep TYPE= | cut -f 2 -d =`
 407            fi
 408            ;;
 409       darwin*)
 410            # 0FC63DAF-8483-4772-8E79-3D69D8477DE4 = Linux filesystem
 411            # BC13C2FF-59E6-4262-A352-B275FD6F7172 = Freedesktop $boot partition
 412            # 933AC7E1-2EB4-4F13-B844-0E14E2AEF915 = Freedesktop Linux /home
 413            # E6D6D379-F507-44C2-A23C-238F2A3DF928 = Linux LVM
 414            # A19D880F-05FC-4D3B-A006-743F0F84911E = Linux RAID
 415            # 0657FD6D-A4AB-43C4-84E5-0933C84B4F4F = Linux swap
 416            Temp=$(diskutil list | grep -i '0FC63DAF-8483-4772-8E79-3D69D8477DE4\|BC13C2FF-59E6-4262-A352-B275FD6F7172\|933AC7E1-2EB4-4F13-B844-0E14E2AEF915\|E6D6D379-F507-44C2-A23C-238F2A3DF928\|A19D880F-05FC-4D3B-A006-743F0F84911E\|0657FD6D-A4AB-43C4-84E5-0933C84B4F4F\|Linux')
 417            BootFS=""
 418            if [[ -n $Temp ]] ; then
 419               echo "Found suspected Linux partition(s); installing ext4fs driver."
 420               BootFS="ext4"
 421            fi
 422            ;;
 423    esac
 424 } # SetBootFS()
 425
 426 # Copy drivers from $RefindDir/drivers_$1 to $InstallDir/$TargetDir/drivers_$1,
 427 # honoring the $InstallDrivers condition. Must be passed a suitable
 428 # architecture code (ia32 or x64).
 429 CopyDrivers() {
 430    if [[ $InstallDrivers == "all" ]] ; then
 431       mkdir -p "$InstallDir/$TargetDir/drivers_$1"
 432       cp "$ThisDir"/drivers_$1/*_$1.efi "$InstallDir/$TargetDir/drivers_$1/" 2> /dev/null
 433       cp "$RefindDir"/drivers_$1/*_$1.efi "$InstallDir/$TargetDir/drivers_$1/" 2> /dev/null
 434    elif [[ "$InstallDrivers" == "boot" ]] ; then
 435       SetBootFS
 436       DriverType=""
 437       case $BootFS in
 438          ext2 | ext3) DriverType="ext2"
 439               # Could use ext4, but that can create unwanted entries from symbolic
 440               # links in / to /boot/vmlinuz if a separate /boot partition is used.
 441               ;;
 442          ext4) DriverType="ext4"
 443               ;;
 444          reiserfs) DriverType="reiserfs"
 445               ;;
 446          btrfs) DriverType="btrfs"
 447               ;;
 448          hfsplus) DriverType="hfs"
 449               ;;
 450          ntfs) DriverType="ntfs"
 451               ;;
 452          *) BootFS=""
 453       esac
 454       if [[ -n $BootFS ]] ; then
 455          echo "Installing driver for $BootFS (${DriverType}_$1.efi)"
 456          mkdir -p "$InstallDir/$TargetDir/drivers_$1"
 457          cp "$ThisDir/drivers_$1/${DriverType}_$1.efi" "$InstallDir/$TargetDir/drivers_$1/" 2> /dev/null
 458          cp "$RefindDir/drivers_$1/${DriverType}_$1.efi" "$InstallDir/$TargetDir/drivers_$1"/ 2> /dev/null
 459       fi
 460    fi
 461 } # CopyDrivers()
 462
 463 # Copy tools (currently only gptsync, and that only on Macs) to the EFI/tools
 464 # directory on the ESP. Must be passed a suitable architecture code (ia32
 465 # or x64).
 466 CopyTools() {
 467    mkdir -p "$InstallDir/EFI/tools"
 468    if [[ $OSTYPE == darwin* ]] ; then
 469       cp -f "$RefindDir/tools_$1/gptsync_$1.efi" "$InstallDir/EFI/tools/"
 470       if [[ -f "$InstallDir/EFI/tools/gptsync.efi" ]] ; then
 471          mv "$InstallDir/EFI/tools/gptsync.efi" "$InstallDir/EFI/tools/gptsync.efi-disabled"
 472          echo "Found old gptsync.efi; disabling it by renaming it to gptsync.efi-disabled"
 473       fi
 474    fi
 475 } # CopyTools()
 476
 477 # Copy the rEFInd files to the ESP or OS X root partition.
 478 # Sets Problems=1 if any critical commands fail.
 479 CopyRefindFiles() {
 480    mkdir -p "$InstallDir/$TargetDir"
 481    if [[ "$TargetDir" == '/EFI/BOOT' ]] ; then
 482       cp "$RefindDir/refind_ia32.efi" "$InstallDir/$TargetDir/$TargetIA32" 2> /dev/null
 483       if [[ $? != 0 ]] ; then
 484          echo "Note: IA32 (x86) binary not installed!"
 485       fi
 486       cp "$RefindDir/refind_x64.efi" "$InstallDir/$TargetDir/$TargetX64" 2> /dev/null
 487       if [[ $? != 0 ]] ; then
 488          Problems=1
 489       fi
 490       if [[ "$ShimSource" != "none" ]] ; then
 491          TargetShim="bootx64.efi"
 492          CopyShimFiles
 493       fi
 494       if [[ $InstallDrivers == "all" ]] ; then
 495          cp -r "$RefindDir"/drivers_* "$InstallDir/$TargetDir/" 2> /dev/null
 496          cp -r "$ThisDir"/drivers_* "$InstallDir/$TargetDir/" 2> /dev/null
 497       elif [[ $Upgrade == 1 || $InstallToEspOnMac == 1 ]] ; then
 498          if [[ $Platform == 'EFI64' ]] ; then
 499             CopyDrivers x64
 500             CopyTools x64
 501          else
 502             CopyDrivers ia32
 503             CopyTools ia32
 504          fi
 505       fi
 506       Refind=""
 507       if [[ $Platform == 'EFI64' ]] ; then
 508          Refind='bootx64.efi'
 509       elif [[ $Platform == 'EFI32' ]] ; then
 510          Refind='bootia32.efi'
 511       fi
 512       CopyKeys
 513    elif [[ $Platform == 'EFI64' || $TargetDir == "/EFI/Microsoft/Boot" ]] ; then
 514       cp "$RefindDir/refind_x64.efi" "$InstallDir/$TargetDir/$TargetX64"
 515       if [[ $? != 0 ]] ; then
 516          Problems=1
 517       fi
 518       CopyDrivers x64
 519       CopyTools x64
 520       Refind="refind_x64.efi"
 521       CopyKeys
 522       if [[ "$ShimSource" != "none" ]] ; then
 523          if [[ "$TargetShim" == "default" ]] ; then
 524             TargetShim=`basename "$ShimSource"`
 525          fi
 526          CopyShimFiles
 527          Refind="$TargetShim"
 528          if [[ $LocalKeys == 0 ]] ; then
 529             echo "Storing copies of rEFInd Secure Boot public keys in $EtcKeysDir"
 530             mkdir -p "$EtcKeysDir"
 531             cp "$ThisDir/keys/refind.cer" "$EtcKeysDir" 2> /dev/null
 532             cp "$ThisDir/keys/refind.crt" "$EtcKeysDir" 2> /dev/null
 533          fi
 534       fi
 535       if [[ "$TargetDir" == '/System/Library/CoreServices' ]] ; then
 536          SetupMacHfs $TargetX64
 537       fi
 538    elif [[ $Platform == 'EFI32' ]] ; then
 539       cp "$RefindDir/refind_ia32.efi" "$InstallDir/$TargetDir/$TargetIA32"
 540       if [[ $? != 0 ]] ; then
 541          Problems=1
 542       fi
 543       CopyDrivers ia32
 544       CopyTools ia32
 545       Refind="refind_ia32.efi"
 546       if [[ "$TargetDir" == '/System/Library/CoreServices' ]] ; then
 547          SetupMacHfs $TargetIA32
 548       fi
 549    else
 550       echo "Unknown platform! Aborting!"
 551       exit 1
 552    fi
 553    echo "Copied rEFInd binary files"
 554    echo ""
 555    if [[ -d "$InstallDir/$TargetDir/icons" ]] ; then
 556       rm -rf "$InstallDir/$TargetDir/icons-backup" &> /dev/null
 557       mv -f "$InstallDir/$TargetDir/icons" "$InstallDir/$TargetDir/icons-backup"
 558       echo "Notice: Backed up existing icons directory as icons-backup."
 559    fi
 560    cp -r "$IconsDir" "$InstallDir/$TargetDir"
 561    if [[ $? != 0 ]] ; then
 562       Problems=1
 563    fi
 564    mkdir -p "$InstallDir/$TargetDir/keys"
 565    cp -rf "$ThisDir"/keys/*.[cd]er "$InstallDir/$TargetDir/keys/" 2> /dev/null
 566    cp -rf "$EtcKeysDir"/*.[cd]er "$InstallDir/$TargetDir/keys/" 2> /dev/null
 567    if [[ -f "$InstallDir/$TargetDir/refind.conf" ]] ; then
 568       echo "Existing refind.conf file found; copying sample file as refind.conf-sample"
 569       echo "to avoid overwriting your customizations."
 570       echo ""
 571       cp -f "$ConfFile" "$InstallDir/$TargetDir"
 572       if [[ $? != 0 ]] ; then
 573          Problems=1
 574       fi
 575    else
 576       echo "Copying sample configuration file as refind.conf; edit this file to configure"
 577       echo "rEFInd."
 578       echo ""
 579       cp -f "$ConfFile" "$InstallDir/$TargetDir/refind.conf"
 580       if [[ $? != 0 ]] ; then
 581          Problems=1
 582       fi
 583    fi
 584    if [[ $DeleteRefindDir == 1 ]] ; then
 585       echo "Deleting the temporary directory $RefindDir"
 586       rm -r "$RefindDir"
 587    fi
 588 } # CopyRefindFiles()
 589
 590 # Mount the partition the user specified with the --usedefault or --ownhfs option
 591 MountDefaultTarget() {
 592    InstallDir=/tmp/refind_install
 593    mkdir -p "$InstallDir"
 594    UnmountEsp=1
 595    if [[ $OSTYPE == darwin* ]] ; then
 596       if [[ $OwnHfs == '1' ]] ; then
 597          Temp=`diskutil info "$TargetPart" | grep "Mount Point"`
 598          InstallDir=`echo $Temp | cut -f 3-30 -d ' '`
 599          if [[ $InstallDir == '' ]] ; then
 600             InstallDir=/tmp/refind_install
 601             mount -t hfs "$TargetPart" "$InstallDir"
 602          else
 603             UnmountEsp=0
 604          fi
 605       else
 606          mount -t msdos "$TargetPart" "$InstallDir"
 607       fi
 608    elif [[ $OSTYPE == linux* ]] ; then
 609       mount -t vfat "$TargetPart" "$InstallDir"
 610    fi
 611    if [[ $? != 0 ]] ; then
 612       echo "Couldn't mount $TargetPart ! Aborting!"
 613       rmdir "$InstallDir"
 614       exit 1
 615    fi
 616 } # MountDefaultTarget()
 617
 618 #
 619 # A series of OS X support functions....
 620 #
 621
 622 # Mount the ESP at /Volumes/ESP or determine its current mount
 623 # point.
 624 # Sets InstallDir to the ESP mount point
 625 # Sets UnmountEsp if we mounted it
 626 MountOSXESP() {
 627    # Identify the ESP. Note: This returns the FIRST ESP found;
 628    # if the system has multiple disks, this could be wrong!
 629    Temp=$(mount | sed -n -E "/^(\/dev\/disk[0-9]+s[0-9]+) on \/ \(.*$/s//\1/p")
 630    if [ $Temp ]; then
 631       Temp=$(diskutil list | grep " EFI " | grep -o 'disk.*' | head -n 1)
 632       if [ -z $Temp ]; then
 633          echo "Warning: root device doesn't have an EFI partition"
 634       fi
 635    else
 636       echo "Warning: root device could not be found"
 637    fi
 638    if [ -z $Temp ]; then
 639       Temp=$(diskutil list | sed -n -E '/^ *[0-9]+:[ ]+EFI EFI[ ]+[0-9.]+ [A-Z]+[ ]+(disk[0-9]+s[0-9]+)$/ { s//\1/p
 640              q
 641          }' )
 642
 643       if [ -z $Temp ]; then
 644          echo "Could not find an EFI partition. Aborting!"
 645          exit 1
 646       fi
 647    fi
 648    Esp=/dev/`echo $Temp`
 649    # If the ESP is mounted, use its current mount point....
 650    Temp=`df -P | grep "$Esp "`
 651    InstallDir=`echo $Temp | cut -f 6- -d ' '`
 652    if [[ "$InstallDir" == '' ]] ; then
 653       mkdir /Volumes/ESP &> /dev/null
 654       mount -t msdos "$Esp" /Volumes/ESP
 655       # Some systems have HFS+ "ESPs." They shouldn't, but they do. If this is
 656       # detected, mount it as such and set appropriate options.
 657       if [[ $? != 0 ]] ; then
 658          mount -t hfs "$Esp" /Volumes/Esp
 659          OwnHfs=1
 660          InstallToEspOnMac=0
 661          if [[ $? != 0 ]] ; then
 662             echo "Unable to mount ESP! Aborting!\n"
 663             exit 1
 664          fi
 665       fi
 666       UnmountEsp=1
 667       InstallDir="/Volumes/ESP"
 668    fi
 669 } # MountOSXESP()
 670
 671 # Set up for booting from Mac HFS+ volume that boots rEFInd in MJG's way
 672 # (http://mjg59.dreamwidth.org/7468.html)
 673 # Must be passed the original rEFInd binary filename (without a path).
 674 SetupMacHfs() {
 675    if [[ -s "$InstallDir/mach_kernel" ]] ; then
 676       echo "Attempt to install rEFInd to a partition with a /mach_kernel file! Aborting!"
 677       exit 1
 678    fi
 679    cp -n "$InstallDir/$TargetDir/boot.efi" "$InstallDir/$TargetDir/boot.efi-backup" &> /dev/null
 680    ln -f "$InstallDir/$TargetDir/$1" "$InstallDir/$TargetDir/boot.efi"
 681    touch "$InstallDir/mach_kernel"
 682    rm "$InstallDir/$TargetDir/SystemVersion.plist" &> /dev/null
 683    cat - << ENDOFHERE >> "$InstallDir/$TargetDir/SystemVersion.plist"
 684 <xml version="1.0" encoding="UTF-8"?>
 685 <plist version="1.0">
 686 <dict>
 687         <key>ProductBuildVersion</key>
 688         <string></string>
 689         <key>ProductName</key>
 690         <string>rEFInd</string>
 691         <key>ProductVersion</key>
 692         <string>0.9.2</string>
 693 </dict>
 694 </plist>
 695 ENDOFHERE
 696 } # SetupMacHfs()
 697
 698 CheckForSIP() {
 699    if [[ -x "/usr/bin/csrutil" ]] ; then
 700       local OKToInstall=`/usr/bin/csrutil status | grep "Protection status: enabled (Custom Configuration\|Apple Internal)"`
 701       if [[ -z "$OKToInstall" ]] ; then
 702          echo
 703          echo "**** ALERT: SIP ENABLED! ****"
 704          echo
 705          if [[ "$Upgrade" == "1" ]] ; then
 706             echo "You are attempting to upgrade an existing installation, but it appears that"
 707             echo "System Integrity Protection (SIP) is enabled. If rEFInd is working now, then"
 708             echo "this is fine; you can upgrade your existing rEFInd. If rEFInd is not working,"
 709             echo "though, re-installing from this boot will not help. To re-enable rEFInd, you"
 710             echo "must re-install it from a Recovery system or from another OS. To enter the"
 711             echo "Recovery system and re-install rEFInd:"
 712          else
 713             echo "rEFInd cannot be installed because System Integrity Protection (SIP) seems"
 714             echo "to be enabled! You must install rEFInd from your Recovery installation or"
 715             echo "from another OS. To install from the Recovery system:"
 716          fi
 717          echo
 718          echo "  1. Reboot"
 719          echo "  2. Hold down Command+R as the chime sounds"
 720          echo "  3. When the OS has booted, select Utilities->Terminal"
 721          echo "  4. Change to this directory with the 'cd' command; it will probably be under"
 722          if [[ "`pwd | cut -b 1-8`" == "/Volumes" ]] ; then
 723             echo "     `pwd`"
 724          else
 725             local RootName=`diskutil info -plist / | grep -A 1 VolumeName | grep string | cut -d \> -f 2 | cut -d \< -f 1`
 726             echo "     /Volumes/$RootName`pwd`"
 727          fi
 728          echo "  5. Re-run this script."
 729          echo
 730          if [[ "$Upgrade" != "1" ]] ; then
 731             echo "If you believe SIP is NOT enabled, you may attempt an installation anyhow,"
 732             echo "but it may fail."
 733             echo
 734          fi
 735          echo "For more on this subject, see http://www.rodsbooks.com/refind/sip.html"
 736          echo
 737          echo -n "Do you want to attempt installation (Y/N)? "
 738          ReadYesNo
 739          if [[ $YesNo == "N" || $YesNo == "n" ]] ; then
 740             echo "Exiting!"
 741             exit
 742          fi
 743       fi # csrutil status suggests OK to install
 744    fi # csrutil exists
 745 } # CheckForSIP()
 746
 747 # Control the OS X installation.
 748 # Sets Problems=1 if problems found during the installation.
 749 InstallOnOSX() {
 750    echo "Installing rEFInd on OS X...."
 751    if [[ "$InstallToEspOnMac" == "1" ]] ; then
 752       MountOSXESP
 753    elif [[ "$TargetDir" == "/EFI/BOOT" || "$OwnHfs" == '1' ]] ; then
 754       MountDefaultTarget
 755    else
 756       InstallDir="$RootDir/"
 757    fi
 758    echo "Installing rEFInd to the partition mounted at $InstallDir"
 759    DetermineTargetDir
 760    CheckForSIP
 761    Platform=`ioreg -l -p IODeviceTree | grep firmware-abi | cut -d "\"" -f 4`
 762    CopyRefindFiles
 763    cp "$ThisDir/mountesp" /usr/local/bin
 764    if [[ $InstallToEspOnMac == "1" ]] ; then
 765       bless --mount "$InstallDir" --setBoot --file "$InstallDir/$TargetDir/$Refind" --shortform
 766    elif [[ "$TargetDir" != "/EFI/BOOT" ]] ; then
 767       bless --setBoot --folder "$InstallDir/$TargetDir" --file "$InstallDir/$TargetDir/$Refind"
 768    fi
 769    if [[ $? != 0 ]] ; then
 770       Problems=1
 771    fi
 772    if [[ -f /Library/StartupItems/rEFItBlesser || -d /Library/StartupItems/rEFItBlesser ]] ; then
 773       echo
 774       echo "/Library/StartupItems/rEFItBlesser found!"
 775       echo "This program is part of rEFIt, and will cause rEFInd to fail to work after"
 776       echo -n "its first boot. Do you want to remove rEFItBlesser (Y/N)? "
 777       ReadYesNo
 778       if [[ $YesNo == "Y" || $YesNo == "y" ]] ; then
 779          echo "Deleting /Library/StartupItems/rEFItBlesser..."
 780          rm -r /Library/StartupItems/rEFItBlesser
 781       else
 782          echo "Not deleting rEFItBlesser."
 783       fi
 784    fi
 785    echo
 786    echo "WARNING: If you have an Advanced Format disk, *DO NOT* attempt to check the"
 787    echo "bless status with 'bless --info', since this is known to cause disk corruption"
 788    echo "on some systems!!"
 789    echo
 790 } # InstallOnOSX()
 791
 792
 793 #
 794 # Now a series of Linux support functions....
 795 #
 796
 797 # Check for evidence that we're running in Secure Boot mode. If so, and if
 798 # appropriate options haven't been set, warn the user and offer to abort.
 799 # If we're NOT in Secure Boot mode but the user HAS specified the --shim
 800 # or --localkeys option, warn the user and offer to abort.
 801 CheckSecureBoot() {
 802    local IsSecureBoot
 803    if [[ -f /sys/firmware/efi/vars/SecureBoot-8be4df61-93ca-11d2-aa0d-00e098032b8c/data ]] ; then
 804       IsSecureBoot=`od -An -t u1 /sys/firmware/efi/vars/SecureBoot-8be4df61-93ca-11d2-aa0d-00e098032b8c/data | tr -d '[[:space:]]'`
 805    else
 806       IsSecureBoot="0"
 807    fi
 808    if [[ $IsSecureBoot == "1" && "$TargetDir" != '/EFI/BOOT' && "$ShimSource" == "none" ]] ; then
 809       echo ""
 810       echo "CAUTION: Your computer appears to be booted with Secure Boot, but you haven't"
 811       echo "specified a valid shim.efi file source. Chances are you should re-run with"
 812       echo "the --shim option. You can read more about this topic at"
 813       echo "http://www.rodsbooks.com/refind/secureboot.html."
 814       echo ""
 815       echo -n "Do you want to proceed with installation (Y/N)? "
 816       ReadYesNo
 817       if [[ $YesNo == "Y" || $YesNo == "y" ]] ; then
 818          echo "OK; continuing with the installation..."
 819       else
 820          exit 0
 821       fi
 822    fi
 823
 824    if [[ "$ShimSource" != "none" && ! $IsSecureBoot == "1" ]] ; then
 825       echo ""
 826       echo "You've specified installing using a shim.efi file, but your computer does not"
 827       echo "appear to be running in Secure Boot mode. Although installing in this way"
 828       echo "should work, it's unnecessarily complex. You may continue, but unless you"
 829       echo "plan to enable Secure Boot, you should consider stopping and omitting the"
 830       echo "--shim option. You can read more about this topic at"
 831       echo "http://www.rodsbooks.com/refind/secureboot.html."
 832       echo ""
 833       echo -n "Do you want to proceed with installation (Y/N)? "
 834       ReadYesNo
 835       if [[ $YesNo == "Y" || $YesNo == "y" ]] ; then
 836          echo "OK; continuing with the installation..."
 837       else
 838          exit 0
 839       fi
 840    fi
 841
 842    if [[ $LocalKeys != 0 && ! $IsSecureBoot == "1" ]] ; then
 843       echo ""
 844       echo "You've specified re-signing your rEFInd binaries with locally-generated keys,"
 845       echo "but your computer does not appear to be running in Secure Boot mode. The"
 846       echo "keys you generate will be useless unless you enable Secure Boot. You may"
 847       echo "proceed with this installation, but before you do so, you may want to read"
 848       echo "more about it at http://www.rodsbooks.com/refind/secureboot.html."
 849       echo ""
 850       echo -n "Do you want to proceed with installation (Y/N)? "
 851       ReadYesNo
 852       if [[ $YesNo == "Y" || $YesNo == "y" ]] ; then
 853          echo "OK; continuing with the installation..."
 854       else
 855          exit 0
 856       fi
 857    fi
 858
 859 } # CheckSecureBoot()
 860
 861 # Check for the presence of locally-generated keys from a previous installation in
 862 # $EtcKeysDir (/etc/refind.d/keys). If they're not present, generate them using
 863 # openssl.
 864 GenerateKeys() {
 865    PrivateKey="$EtcKeysDir/$LocalKeysBase.key"
 866    CertKey="$EtcKeysDir/$LocalKeysBase.crt"
 867    DerKey="$EtcKeysDir/$LocalKeysBase.cer"
 868    OpenSSL=`which openssl 2> /dev/null`
 869
 870    # Do the work only if one or more of the necessary keys is missing
 871    # TODO: Technically, we don't need the DerKey; but if it's missing and openssl
 872    # is also missing, this will fail. This could be improved.
 873    if [[ ! -f "$PrivateKey" || ! -f "$CertKey" || ! -f "$DerKey" ]] ; then
 874       echo "Generating a fresh set of local keys...."
 875       mkdir -p "$EtcKeysDir"
 876       chmod 0700 "$EtcKeysDir"
 877       if [[ ! -x "$OpenSSL" ]] ; then
 878          echo "Can't find openssl, which is required to create your private signing keys!"
 879          echo "Aborting!"
 880          exit 1
 881       fi
 882       if [[ -f "$PrivateKey" ]] ; then
 883          echo "Backing up existing $PrivateKey"
 884          cp -f "$PrivateKey" "$PrivateKey.backup" 2> /dev/null
 885       fi
 886       if [[ -f "$CertKey" ]] ; then
 887          echo "Backing up existing $CertKey"
 888          cp -f "$CertKey" "$CertKey.backup" 2> /dev/null
 889       fi
 890       if [[ -f "$DerKey" ]] ; then
 891          echo "Backing up existing $DerKey"
 892          cp -f "$DerKey" "$DerKey.backup" 2> /dev/null
 893       fi
 894       "$OpenSSL" req -new -x509 -newkey rsa:2048 -keyout "$PrivateKey" -out "$CertKey" \
 895                      -nodes -days 3650 -subj "/CN=Locally-generated rEFInd key/"
 896       "$OpenSSL" x509 -in "$CertKey" -out "$DerKey" -outform DER
 897       chmod 0600 "$PrivateKey"
 898    else
 899       echo "Using existing local keys...."
 900    fi
 901 }
 902
 903 # Sign a single binary. Requires parameters:
 904 #   $1 = source file
 905 #   $2 = destination file
 906 # Also assumes that the SBSign, PESign, UseSBSign, UsePESign, and various key variables are set
 907 # appropriately.
 908 # Aborts script on error
 909 SignOneBinary() {
 910    $SBSign --key "$PrivateKey" --cert "$CertKey" --output "$2" "$1"
 911    if [[ $? != 0 ]] ; then
 912       echo "Problem signing the binary $1! Aborting!"
 913       exit 1
 914    fi
 915 }
 916
 917 # Re-sign the x86-64 binaries with a locally-generated key, First look for appropriate
 918 # key files in $EtcKeysDir. If they're present, use them to re-sign the binaries. If
 919 # not, try to generate new keys and store them in $EtcKeysDir.
 920 ReSignBinaries() {
 921    SBSign=`which sbsign 2> /dev/null`
 922    echo "Found sbsign at $SBSign"
 923    TempDir="/tmp/refind_local"
 924    if [[ ! -x "$SBSign" ]] ; then
 925       echo "Can't find sbsign, which is required to sign rEFInd with your own keys!"
 926       echo "Aborting!"
 927       exit 1
 928    fi
 929    GenerateKeys
 930    mkdir -p "$TempDir/drivers_x64"
 931    cp "$RefindDir/refind.conf-sample $TempDir" 2> /dev/null
 932    cp "$ThisDir/refind.conf-sample $TempDir" 2> /dev/null
 933    cp "$RefindDir/refind_ia32.efi $TempDir" 2> /dev/null
 934    cp -a "$RefindDir/drivers_ia32 $TempDir" 2> /dev/null
 935    cp -a "$ThisDir/drivers_ia32 $TempDir" 2> /dev/null
 936    SignOneBinary "$RefindDir/refind_x64.efi" "$TempDir/refind_x64.efi"
 937    SaveIFS=$IFS
 938    IFS=$(echo -en "\n\b")
 939    for Driver in `ls "$RefindDir"/drivers_x64/*.efi "$ThisDir"/drivers_x64/*.efi 2> /dev/null` ; do
 940       TempName=`basename "$Driver"`
 941       SignOneBinary "$Driver" "$TempDir/drivers_x64/$TempName"
 942    done
 943    IFS=$SaveIFS
 944    RefindDir="$TempDir"
 945    DeleteRefindDir=1
 946 } # ReSignBinaries()
 947
 948 # Locate and mount an ESP, if possible, based on parted output.
 949 # Should be called only if /boot/efi is NOT an acceptable ESP.
 950 # Sets InstallDir to the mounted ESP's path ($RootDir/boot/efi)
 951 # and EspFilesystem the filesystem (always "vfat")
 952 FindLinuxESP() {
 953    echo "The ESP doesn't seem to be mounted! Trying to find it...."
 954    local Drive
 955    local PartNum
 956    local TableType
 957    local DmStatus
 958    local SkipIt
 959    local Dmraid
 960    for Drive in `ls /dev/[sh]d?` ; do
 961       SkipIt=0
 962       Dmraid=`which dmraid 2> /dev/null`
 963       if [ -x "$Dmraid" ] ; then
 964          DmStatus=`dmraid -r | grep $Drive`
 965          if [ -n "$DmStatus" ] ; then
 966             echo "$Drive seems to be part of a RAID array; skipping!"
 967             SkipIt=1
 968          fi
 969       fi
 970       TableType=`parted $Drive print -m -s 2>/dev/null | awk -F: '$1 == "'$Drive'" { print $6 }'`
 971       if [[ $TableType == 'gpt' && $SkipIt == 0 ]] ; then # read only GPT disks that aren't part of dmraid array
 972          PartNum=`LANG=C parted $Drive print -m -s 2>/dev/null | awk -F: '$7 ~ "(^boot| boot)" { print $1 }' | head -n 1`
 973          if [ "$PartNum" -eq "$PartNum" ] 2> /dev/null ; then
 974             InstallDir="$RootDir/boot/efi"
 975             mkdir -p $InstallDir
 976             mount $Drive$PartNum $InstallDir
 977             EspFilesystem=`grep "$Drive$PartNum.*/boot/efi" /etc/mtab | uniq | grep -v autofs | cut -d " " -f 3`
 978             if [[ $EspFilesystem != 'vfat' ]] ; then
 979                umount $InstallDir
 980             else
 981                echo "Mounting ESP at $InstallDir"
 982                break;
 983             fi
 984          fi # $PartNum -eq $PartNum
 985       fi # TableType
 986    done
 987 } # FindLinuxESP()
 988
 989 # Identifies the ESP's location (/boot or /boot/efi, or these locations under
 990 # the directory specified by --root); aborts if the ESP isn't mounted at
 991 # either location.
 992 # Sets InstallDir to the ESP mount point.
 993 FindMountedESP() {
 994    mount /boot &> /dev/null
 995    mount /boot/efi &> /dev/null
 996    EspLine=`df "$RootDir/boot/efi" 2> /dev/null | grep boot/efi`
 997    if [[ ! -n "$EspLine" ]] ; then
 998       EspLine=`df "$RootDir"/boot | grep boot`
 999    fi
1000    InstallDir=`echo $EspLine | cut -d " " -f 6`
1001
1002    if [[ -n "$InstallDir" ]] ; then
1003       EspFilesystem=`grep -w "$InstallDir" /etc/mtab | uniq | grep -v autofs | cut -d " " -f 3`
1004    fi
1005    if [[ $EspFilesystem != 'vfat' ]] ; then
1006       FindLinuxESP
1007    fi
1008    if [[ $EspFilesystem != 'vfat' ]] ; then
1009       echo "$RootDir/$InstallDir doesn't seem to be on a VFAT filesystem. The ESP must be"
1010       echo "mounted at $RootDir/boot or $RootDir/boot/efi and it must be VFAT! Aborting!"
1011       exit 1
1012    fi
1013    echo "ESP was found at $InstallDir using $EspFilesystem"
1014 } # FindMountedESP
1015
1016 # Uses efibootmgr to add an entry for rEFInd to the EFI's NVRAM.
1017 # If this fails, sets Problems=1
1018 AddBootEntry() {
1019    local PartNum
1020    Efibootmgr=`which efibootmgr 2> /dev/null`
1021    if [[ "$Efibootmgr" ]] ; then
1022       InstallDisk=`grep "$InstallDir" /etc/mtab | cut -d " " -f 1 | cut -c 1-8`
1023       PartNum=`grep "$InstallDir" /etc/mtab | cut -d " " -f 1 | cut -c 9-10`
1024       EntryFilename="$TargetDir/$Refind"
1025       EfiEntryFilename=`echo ${EntryFilename//\//\\\}`
1026       EfiEntryFilename2=`echo ${EfiEntryFilename} | sed s/\\\\\\\\/\\\\\\\\\\\\\\\\/g`
1027       ExistingEntry=`"$Efibootmgr" -v | grep -i "$EfiEntryFilename2"`
1028
1029       if [[ "$ExistingEntry" ]] ; then
1030          ExistingEntryBootNum=`echo "$ExistingEntry" | cut -c 5-8`
1031          FirstBoot=`"$Efibootmgr" | grep BootOrder | cut -c 12-15`
1032          if [[ "$ExistingEntryBootNum" != "$FirstBoot" ]] ; then
1033             echo "An existing rEFInd boot entry exists, but isn't set as the default boot"
1034             echo "manager. The boot order is being adjusted to make rEFInd the default boot"
1035             echo "manager. If this is NOT what you want, you should use efibootmgr to"
1036             echo "manually adjust your EFI's boot order."
1037          fi
1038          "$Efibootmgr" -b $ExistingEntryBootNum -B &> /dev/null
1039       fi
1040
1041       echo "Installing it!"
1042       if [[ "$KeepName" == 0 ]] ; then
1043          "$Efibootmgr" -c -l "$EfiEntryFilename" -L "rEFInd Boot Manager" -d $InstallDisk -p $PartNum &> /dev/null
1044       else
1045          "$Efibootmgr" -c -l "$EfiEntryFilename" -L "rEFInd Boot Manager" -d $InstallDisk -p $PartNum \
1046                        -u "$TargetShim $TargetX64" &> /dev/null
1047       fi
1048       if [[ $? != 0 ]] ; then
1049          EfibootmgrProblems=1
1050          Problems=1
1051       fi
1052
1053    else # efibootmgr not found
1054       EfibootmgrProblems=1
1055       Problems=1
1056    fi
1057
1058    if [[ $EfibootmgrProblems ]] ; then
1059       echo
1060       echo "ALERT: There were problems running the efibootmgr program! You may need to"
1061       echo "rename the $Refind binary to the default name (EFI/boot/bootx64.efi"
1062       echo "on x86-64 systems or EFI/boot/bootia32.efi on x86 systems) to have it run!"
1063       echo
1064    else
1065       echo "rEFInd has been set as the default boot manager."
1066    fi
1067 } # AddBootEntry()
1068
1069 # Create a minimal/sample refind_linux.conf file in /boot.
1070 GenerateRefindLinuxConf() {
1071    if [[ -f "$RLConfFile" ]] ; then
1072       echo "Existing $RLConfFile found; not overwriting."
1073    else
1074       echo "Creating $RLConfFile; edit it to adjust kernel options."
1075       RootFS=`df "$RootDir" | grep dev | cut -f 1 -d " "`
1076       echo "RootFS starts as $RootFS"
1077       StartOfDevname=`echo "$RootFS" | cut -b 1-7`
1078       if [[ "$StartOfDevname" == "/dev/sd" || "$StartOfDevName" == "/dev/hd" ]] ; then
1079          # Identify root filesystem by UUID rather than by device node, if possible
1080          Uuid=`blkid -o export -s UUID "$RootFS" 2> /dev/null | grep UUID=`
1081          if [[ -n $Uuid ]] ; then
1082             RootFS="$Uuid"
1083             echo "Uuid is $Uuid"
1084             echo "Adjusting RootFS to $RootFS"
1085          fi
1086       fi
1087       if [[ $RootDir == "/" ]] ; then
1088          DefaultOptions=`cat /proc/cmdline | cut -d ' ' -f 2- | sed 's/$/ /' | sed 's/initrd=.* //g' | sed 's/ *$//'`
1089       else
1090          if [[ -f "$RootDir/etc/default/grub" ]] ; then
1091             # We want the default options used by the distribution, stored here....
1092             source "$RootDir/etc/default/grub"
1093             echo "Setting default boot options based on $RootDir/etc/default/grub"
1094          fi
1095          DefaultOptions="ro root=$RootFS $GRUB_CMDLINE_LINUX $GRUB_CMDLINE_LINUX_DEFAULT"
1096       fi
1097       echo "\"Boot with standard options\"  \"$DefaultOptions\"" > $RLConfFile
1098       echo "\"Boot to single-user mode\"    \"$DefaultOptions single\"" >> $RLConfFile
1099       echo "\"Boot with minimal options\"   \"ro root=$RootFS\"" >> $RLConfFile
1100    fi
1101 }
1102
1103 # Controls rEFInd installation under Linux.
1104 # Sets Problems=1 if something goes wrong.
1105 InstallOnLinux() {
1106    if [[ "$TargetDir" == "/System/Library/CoreServices" ]] ; then
1107       echo "You may not use the --ownhfs option under Linux! Aborting!"
1108       exit 1
1109    fi
1110    echo "Installing rEFInd on Linux...."
1111    modprobe efivars &> /dev/null
1112    if [[ $TargetDir == "/EFI/BOOT" ]] ; then
1113       MountDefaultTarget
1114    else
1115       FindMountedESP
1116       DetermineTargetDir
1117    fi
1118    CpuType=`uname -m`
1119    if [[ $CpuType == 'x86_64' ]] ; then
1120       Platform="EFI64"
1121    elif [[ ($CpuType == 'i386' || $CpuType == 'i486' || $CpuType == 'i586' || $CpuType == 'i686') ]] ; then
1122       Platform="EFI32"
1123       # If we're in EFI mode, do some sanity checks, and alert the user or even
1124       # abort. Not in BIOS mode, though, since that could be used on an emergency
1125       # disc to try to recover a troubled Linux installation.
1126       if [[ -d /sys/firmware/efi ]] ; then
1127          if [[ "$ShimSource" != "none" && "$TargetDir" != "/BOOT/EFI" ]] ; then
1128             echo ""
1129             echo "CAUTION: shim does not currently supports 32-bit systems, so you should not"
1130             echo "use the --shim option to install on such systems. Aborting!"
1131             echo ""
1132             exit 1
1133          fi
1134          echo
1135          echo "CAUTION: This Linux installation uses a 32-bit kernel. 32-bit EFI-based"
1136          echo "computers are VERY RARE. If you've installed a 32-bit version of Linux"
1137          echo "on a 64-bit computer, you should manually install the 64-bit version of"
1138          echo "rEFInd. If you're installing on a Mac, you should do so from OS X. If"
1139          echo "you're positive you want to continue with this installation, answer 'Y'"
1140          echo "to the following question..."
1141          echo
1142          echo -n "Are you sure you want to continue (Y/N)? "
1143          ReadYesNo
1144          if [[ $YesNo == "Y" || $YesNo == "y" ]] ; then
1145             echo "OK; continuing with the installation..."
1146          else
1147             exit 0
1148          fi
1149       fi # in EFI mode
1150    else
1151       echo "Unknown CPU type '$CpuType'; aborting!"
1152       exit 1
1153    fi
1154
1155    if [[ $LocalKeys == 1 ]] ; then
1156       ReSignBinaries
1157    fi
1158
1159    CheckSecureBoot
1160    CopyRefindFiles
1161    if [[ "$TargetDir" != "/EFI/BOOT" && "$TargetDir" != "/EFI/Microsoft/Boot" ]] ; then
1162       AddBootEntry
1163       GenerateRefindLinuxConf
1164    fi
1165 } # InstallOnLinux()
1166
1167 #
1168 # The main part of the script. Sets a few environment variables,
1169 # performs a few startup checks, and then calls functions to
1170 # install under OS X or Linux, depending on the detected platform.
1171 #
1172 GetParams "$@"
1173 ThisDir="$( cd -P "${BASH_SOURCE%/*}" && pwd )"
1174 RefindDir="$ThisDir/refind"
1175 if [[ $UID != 0 ]] ; then
1176    echo "Not running as root; attempting to elevate privileges via sudo...."
1177    sudo "$BASH_SOURCE" "$@"
1178    if [[ $? != 0 ]] ; then
1179       echo "This script must be run as root (or using sudo). Exiting!"
1180       exit 1
1181    else
1182       exit 0
1183    fi
1184 fi
1185 CheckForFiles
1186 case "$OSTYPE" in
1187    darwin*)
1188         if [[ "$ShimSource" != "none" ]] ; then
1189            echo "The --shim option is not supported on OS X! Exiting!"
1190            exit 1
1191         fi
1192         if [[ "$LocalKeys" != 0 ]] ; then
1193            echo "The --localkeys option is not supported on OS X! Exiting!"
1194            exit 1
1195         fi
1196         InstallOnOSX $1
1197         ;;
1198    linux*)
1199         InstallOnLinux
1200         ;;
1201    *)
1202         echo "Running on unknown OS; aborting!"
1203         if [[ "$InstallToEspOnMac" == 0 ]] ; then
1204            echo "The --notesp option is not supported on Linux! Exiting!"
1205            exit 1
1206         fi
1207 esac
1208
1209 if [[ $Problems ]] ; then
1210    echo
1211    echo "ALERT:"
1212    echo "Installation has completed, but problems were detected. Review the output for"
1213    echo "error messages and take corrective measures as necessary. You may need to"
1214    echo "re-run this script or install manually before rEFInd will work."
1215    echo
1216 else
1217    echo
1218    echo "Installation has completed successfully."
1219    echo
1220 fi
1221
1222 if [[ $UnmountEsp == '1' ]] ; then
1223    echo "Unmounting install dir"
1224    umount $InstallDir
1225 fi
1226
1227 if [[ "$InstallDir" == /tmp/refind_install ]] ; then
1228 #   sleep 5
1229    rmdir "$InstallDir"
1230 fi