code.delx.au - refind/blob - refind-install

   1 #!/bin/bash
   2 #
   3 # Linux/MacOS X script to install rEFInd
   4 #
   5 # Usage:
   6 #
   7 # ./refind-install [options]
   8 #
   9 # options include:
  10 #    "--notesp" to install to the OS X root filesystem rather than to the ESP.
  11 #           This option may not be used under Linux.
  12 #    "--usedefault {devicefile}" to install as default
  13 #           (/EFI/BOOT/BOOTX64.EFI and similar) to the specified device
  14 #           (/dev/sdd1 or whatever) without registering with the NVRAM.
  15 #    "--ownhfs {devicefile}" to install to an HFS+ volume that's NOT currently
  16 #           an OS X boot volume.
  17 #    "--root {dir}" to specify installation using the specified directory
  18 #           as the system's root
  19 #    "--alldrivers" to install all drivers along with regular files
  20 #    "--nodrivers" to suppress driver installation (default in Linux is
  21 #           driver used on /boot; --nodrivers is OS X default)
  22 #    "--shim {shimfile}" to install a shim.efi file for Secure Boot
  23 #    "--preloader" is synonymous with "--shim"
  24 #    "--localkeys" to re-sign x86-64 binaries with a locally-generated key
  25 #    "--keepname" to keep refind_x64.efi name as such even when using shim
  26 #    "--yes" to assume a "yes" response to all prompts
  27 #
  28 # The "esp" option is valid only on Mac OS X; it causes
  29 # installation to the EFI System Partition (ESP) rather than
  30 # to the current OS X boot partition. Under Linux, this script
  31 # installs to the ESP by default.
  32 #
  33 # This program is copyright (c) 2012-2015 by Roderick W. Smith
  34 # It is released under the terms of the GNU GPL, version 3,
  35 # a copy of which should be included in the file COPYING.txt.
  36 #
  37 # Revision history:
  38 #
  39 # 0.10.0  -- Enable running under OS X's recovery system & add warning about
  40 #            SIP & brief instructions on how to deal with it if SIP is
  41 #            detected to be enabled. Also change way refind_linux.conf default
  42 #            options are found; use /proc/cmdline as base.
  43 # 0.9.2   -- Added --keepname option.
  44 # 0.8.7   -- Better detection of Secure Boot mode & fixed errors when copying
  45 #            Shim & MokManager files over themselves; fixed bug that caused
  46 #            inappropriate installation to EFI/BOOT/bootx64.efi
  47 # 0.8.6   -- Fixed bugs that caused misidentification of ESP on disks with
  48 #            partition numbers over 10 on OS X and misidentification of mount
  49 #            point if already-mounted ESP had space in path.
  50 # 0.8.5   -- Refinement/cleanup of new OS X ESP-as-default policy
  51 # 0.8.4   -- OS X default changed to install to ESP under /EFI/BOOT
  52 # 0.7.9   -- Fixed bug that caused errors if dmraid utility not installed
  53 # 0.7.7   -- Fixed bug that created mangled refind_linux.conf file; added ability
  54 #            to locate and mount ESP on Linux, if it's not mounted
  55 # 0.7.6   -- Added --ownhfs {device-filename} option
  56 # 0.7.5   -- Fixed bug when installing to ESP on recent versions of OS X
  57 # 0.7.2   -- Fixed code that could be confused by use of autofs to mount the ESP
  58 # 0.7.0   -- Added support for the new Btrfs driver
  59 # 0.6.12  -- Added support for PreLoader as well as for shim
  60 # 0.6.11  -- Improvements in script's ability to handle directories with spaces
  61 #            in their names
  62 # 0.6.9   -- Install gptsync on Macs
  63 # 0.6.8   -- Bug fix: ESP scan now uses "uniq".
  64 # 0.6.6   -- Bug fix: Upgrade drivers when installed to EFI/BOOT. Also enable
  65 #            copying shim.efi and MokManager.efi over themselves.
  66 # 0.6.4   -- Copies ext2 driver rather than ext4 driver for ext2/3fs
  67 # 0.6.3   -- Support for detecting rEFInd in EFI/BOOT and EFI/Microsoft/Boot
  68 #            directories & for installing to EFI/BOOT in BIOS mode
  69 # 0.6.2-1 -- Added --yes option & tweaked key-copying for use with RPM install script
  70 # 0.6.1   -- Added --root option; minor bug fixes
  71 # 0.6.0   -- Changed --drivers to --alldrivers and added --nodrivers option;
  72 #            changed default driver installation behavior in Linux to install
  73 #            the driver needed to read /boot (if available)
  74 # 0.5.1.2 -- Fixed bug that caused failure to generate refind_linux.conf file
  75 # 0.5.1.1 -- Fixed bug that caused script failure under OS X
  76 # 0.5.1   -- Added --shim & --localkeys options & create sample refind_linux.conf
  77 #            in /boot
  78 # 0.5.0   -- Added --usedefault & --drivers options & changed "esp" option to "--esp"
  79 # 0.4.5   -- Fixed check for rEFItBlesser in OS X
  80 # 0.4.2   -- Added notice about BIOS-based OSes & made NVRAM changes in Linux smarter
  81 # 0.4.1   -- Added check for rEFItBlesser in OS X
  82 # 0.3.3.1 -- Fixed OS X 10.7 bug; also works as make target
  83 # 0.3.2.1 -- Check for presence of source files; aborts if not present
  84 # 0.3.2   -- Initial version
  85 #
  86 # Note: install.sh version numbers match those of the rEFInd package
  87 # with which they first appeared.
  88
  89 RootDir="/"
  90 TargetDir=/EFI/refind
  91 LocalKeysBase="refind_local"
  92 ShimSource="none"
  93 ShimType="none"
  94 KeepName=0
  95 TargetShim="default"
  96 TargetX64="refind_x64.efi"
  97 TargetIA32="refind_ia32.efi"
  98 LocalKeys=0
  99 DeleteRefindDir=0
 100 AlwaysYes=0
 101
 102 #
 103 # Functions used by both OS X and Linux....
 104 #
 105
 106 GetParams() {
 107    InstallToEspOnMac=1
 108    # Install the driver required to read Linux /boot, if it's available
 109    # Note: Under OS X, this will be installed only if a Linux partition
 110    # is detected, in which case the ext4fs driver will be installed.
 111    InstallDrivers="boot"
 112    while [[ $# -gt 0 ]]; do
 113       case $1 in
 114          --notesp) InstallToEspOnMac=0
 115               ;;
 116          --ownhfs) OwnHfs=1
 117               InstallToEspOnMac=0
 118               TargetPart="$2"
 119               TargetDir=/System/Library/CoreServices
 120               shift
 121               ;;
 122          --usedefault) TargetDir=/EFI/BOOT
 123               TargetPart="$2"
 124               TargetX64="bootx64.efi"
 125               TargetIA32="bootia32.efi"
 126               shift
 127               ;;
 128          --root) RootDir="$2"
 129               InstallToEspOnMac=0
 130               shift
 131               ;;
 132          --localkeys) LocalKeys=1
 133               ;;
 134          --shim | --preloader) ShimSource="$2"
 135               ShimType=`basename $ShimSource`
 136               shift
 137               ;;
 138          --keepname) KeepName=1
 139               ;;
 140          --drivers | --alldrivers) InstallDrivers="all"
 141               ;;
 142          --nodrivers) InstallDrivers="none"
 143               ;;
 144          --yes) AlwaysYes=1
 145               ;;
 146          * ) echo "Usage: $0 [--notesp | --usedefault {device-file} | --root {dir} |"
 147              echo "                     --ownhfs {device-file} ] [--keepname]"
 148              echo "                  [--nodrivers | --alldrivers]"
 149              echo "                  [--localkeys] [--keepname] [--yes]"
 150              exit 1
 151       esac
 152       shift
 153    done
 154    if [[ "$InstallToEspOnMac" == 0 && "$RootDir" == '/' && "$TargetDir" == '/EFI/BOOT' ]] ; then
 155       echo "You may use --notesp OR --usedefault, but not both! Aborting!"
 156       exit 1
 157    fi
 158    if [[ "$RootDir" != '/' && "$TargetDir" == '/EFI/BOOT' ]] ; then
 159       echo "You may use --root OR --usedefault, but not both! Aborting!"
 160       exit 1
 161    fi
 162    if [[ "$TargetDir" != '/System/Library/CoreServices' && "$OwnHfs" == '1' ]] ; then
 163       echo "If you use --ownhfs, you may NOT use --usedefault! Aborting!"
 164       exit 1
 165    fi
 166    if [[ "$KeepName" == 1 && "$ShimSource" == "none" ]] ; then
 167       echo "The --keepname option is meaningful only in conjunction with --shim"
 168       echo "or --preloader! Aborting!"
 169       exit 1
 170    fi
 171    if [[ "$KeepName" == 1 && "$OSTYPE" != "linux" && "$OSTYPE" != "linux-gnu" ]] ; then
 172       echo "The --keepname option is valid only under Linux! Aborting!"
 173       exit 1
 174    fi
 175    if [[ "$KeepName" == 1 && "$TargetDir" == "/EFI/BOOT" ]] ; then
 176       echo "The --keepname option is incompatible with --usedefault! Aborting!"
 177       exit 1
 178    fi
 179    RLConfFile="$RootDir/boot/refind_linux.conf"
 180    EtcKeysDir="$RootDir/etc/refind.d/keys"
 181 } # GetParams()
 182
 183 # Get a yes/no response from the user and place it in the YesNo variable.
 184 # If the AlwaysYes variable is set to 1, skip the user input and set "Y"
 185 # in the YesNo variable.
 186 ReadYesNo() {
 187    if [[ $AlwaysYes == 1 ]] ; then
 188       YesNo="Y"
 189       echo "Y"
 190    else
 191       read YesNo
 192    fi
 193 }
 194
 195 # Abort if the rEFInd files can't be found.
 196 # Also sets $ConfFile to point to the configuration file,
 197 # $IconsDir to point to the icons directory, and
 198 # $ShimSource to the source of the shim.efi file (if necessary).
 199 CheckForFiles() {
 200    # Note: This check is satisfied if EITHER the 32- or the 64-bit version
 201    # is found, even on the wrong platform. This is because the platform
 202    # hasn't yet been determined. This could obviously be improved, but it
 203    # would mean restructuring lots more code....
 204    if [[ ! -f "$RefindDir/refind_ia32.efi" && ! -f "$RefindDir/refind_x64.efi" ]] ; then
 205       echo "The rEFInd binary file is missing! Aborting installation!"
 206       exit 1
 207    fi
 208
 209    if [[ -f "$RefindDir/refind.conf-sample" ]] ; then
 210       ConfFile="$RefindDir/refind.conf-sample"
 211    elif [[ -f "$ThisDir/refind.conf-sample" ]] ; then
 212       ConfFile="$ThisDir/refind.conf-sample"
 213    else
 214       echo "The sample configuration file is missing! Aborting installation!"
 215       exit 1
 216    fi
 217
 218    if [[ -d "$RefindDir/icons" ]] ; then
 219       IconsDir="$RefindDir/icons"
 220    elif [[ -d "$ThisDir/icons" ]] ; then
 221       IconsDir="$ThisDir/icons"
 222    else
 223       echo "The icons directory is missing! Aborting installation!"
 224       exit 1
 225    fi
 226
 227    echo "ShimSource is $ShimSource"
 228    if [[ "$ShimSource" != "none" ]] ; then
 229       if [[ -f "$ShimSource" ]] ; then
 230          if [[ $ShimType == "shimx64.efi" || $ShimType == "shim.efi" ]] ; then
 231             TargetX64="grubx64.efi"
 232             MokManagerSource=`dirname "$ShimSource"`/MokManager.efi
 233          elif [[ $ShimType == "preloader.efi" || $ShimType == "PreLoader.efi" ]] ; then
 234             TargetX64="loader.efi"
 235             MokManagerSource=`dirname "$ShimSource"`/HashTool.efi
 236          else
 237             echo "Unknown shim/PreBootloader filename: $ShimType!"
 238             echo "Known filenames are shimx64.efi, shim.efi, and PreLoader.efi. Aborting!"
 239             exit 1
 240          fi
 241       else
 242          echo "The specified shim/PreBootloader file, $ShimSource, doesn't exist!"
 243          echo "Aborting installation!"
 244          exit 1
 245       fi
 246    fi
 247 } # CheckForFiles()
 248
 249 # Helper for CopyRefindFiles; copies shim files (including MokManager, if it's
 250 # available) to target.
 251 CopyShimFiles() {
 252    local inode1=`ls -i "$ShimSource" 2> /dev/null | cut -f 1 -d " "`
 253    local inode2=`ls -i "$InstallDir/$TargetDir/$TargetShim" 2> /dev/null | cut -f 1 -d " "`
 254    if [[ $inode1 != $inode2 ]] ; then
 255       cp -fb "$ShimSource" "$InstallDir/$TargetDir/$TargetShim"
 256       if [[ $? != 0 ]] ; then
 257          Problems=1
 258       fi
 259    fi
 260    inode1=`ls -i "$MokManagerSource" 2> /dev/null | cut -f 1 -d " "`
 261    local TargetMMName=`basename $MokManagerSource`
 262    inode2=`ls -i "$InstallDir/$TargetDir/$TargetMMName" 2> /dev/null | cut -f 1 -d " "`
 263    if [[ $inode1 != $inode2 ]] ; then
 264       if [[ -f "$MokManagerSource" ]] ; then
 265          cp -fb "$MokManagerSource" "$InstallDir/$TargetDir/"
 266       fi
 267       if [[ $? != 0 ]] ; then
 268          Problems=1
 269       fi
 270    fi
 271 } # CopyShimFiles()
 272
 273 # Copy the public keys to the installation medium
 274 CopyKeys() {
 275    if [[ $LocalKeys == 1 ]] ; then
 276       mkdir -p "$InstallDir/$TargetDir/keys/"
 277       cp "$EtcKeysDir/$LocalKeysBase.cer" "$InstallDir/$TargetDir/keys/"
 278       cp "$EtcKeysDir/$LocalKeysBase.crt" "$InstallDir/$TargetDir/keys/"
 279    fi
 280 } # CopyKeys()
 281
 282 # Set varaibles for installation in EFI/BOOT directory
 283 SetVarsForBoot() {
 284    TargetDir="/EFI/BOOT"
 285    if [[ $ShimSource == "none" ]] ; then
 286       TargetX64="bootx64.efi"
 287       TargetIA32="bootia32.efi"
 288    else
 289       if [[ $ShimType == "shim.efi" || $ShimType == "shimx64.efi" ]] ; then
 290          TargetX64="grubx64.efi"
 291       elif [[ $ShimType == "preloader.efi" || $ShimType == "PreLoader.efi" ]] ; then
 292          TargetX64="loader.efi"
 293       else
 294          echo "Unknown shim/PreBootloader type: $ShimType"
 295          echo "Aborting!"
 296          exit 1
 297       fi
 298       TargetIA32="bootia32.efi"
 299       TargetShim="bootx64.efi"
 300    fi
 301    if [[ $KeepName == 1 ]] ; then
 302       echo "Installation is to /EFI/BOOT, which is incompatible with --keepname! Aborting!"
 303       exit 1
 304    fi
 305 } # SetVarsForBoot()
 306
 307 # Set variables for installation in EFI/Microsoft/Boot directory
 308 SetVarsForMsBoot() {
 309    TargetDir="/EFI/Microsoft/Boot"
 310    if [[ $ShimSource == "none" ]] ; then
 311       TargetX64="bootmgfw.efi"
 312       TargetIA32="bootmgfw.efi"
 313    else
 314       if [[ $ShimType == "shim.efi" || $ShimType == "shimx64.efi" ]] ; then
 315          TargetX64="grubx64.efi"
 316       elif [[ $ShimType == "preloader.efi" || $ShimType == "PreLoader.efi" ]] ; then
 317          TargetX64="loader.efi"
 318       else
 319          echo "Unknown shim/PreBootloader type: $ShimType"
 320          echo "Aborting!"
 321          exit 1
 322       fi
 323       TargetShim="bootmgfw.efi"
 324    fi
 325    if [[ $KeepName == 1 ]] ; then
 326       echo "Installation is to /EFI/Microsoft/Boot, which is incompatible with --keepname!"
 327       echo "Aborting!"
 328       exit 1
 329    fi
 330 } # SetVarsForMsBoot()
 331
 332 # TargetDir defaults to /EFI/refind; however, this function adjusts it as follows:
 333 # - If an existing refind.conf is available in /EFI/BOOT or /EFI/Microsoft/Boot,
 334 #   install to that directory under the suitable name; but DO NOT do this if
 335 #   refind.conf is also in /EFI/refind.
 336 # - If booted in BIOS mode and the ESP lacks any other EFI files, install to
 337 #   /EFI/BOOT
 338 # - If booted in BIOS mode and there's no refind.conf file and there is a
 339 #   /EFI/Microsoft/Boot/bootmgfw.efi file, move it down one level and
 340 #   install under that name, "hijacking" the Windows boot loader filename
 341 DetermineTargetDir() {
 342    Upgrade=0
 343
 344    if [[ -f $InstallDir/EFI/BOOT/refind.conf && ! -f $InstallDir/EFI/refind/refind.conf ]] ; then
 345       SetVarsForBoot
 346       Upgrade=1
 347    fi
 348    if [[ -f $InstallDir/EFI/Microsoft/Boot/refind.conf && ! -f $InstallDir/EFI/refind/refind.conf ]] ; then
 349       SetVarsForMsBoot
 350       Upgrade=1
 351    fi
 352    if [[ -f $InstallDir/EFI/refind/refind.conf ]] ; then
 353       TargetDir="/EFI/refind"
 354       if [[ $ShimSource == "none" || $KeepName == 1 ]] ; then
 355          TargetX64="refind_x64.efi"
 356          TargetIA32="refind_ia32.efi"
 357       fi
 358       Upgrade=1
 359    fi
 360    if [[ $Upgrade == 1 ]] ; then
 361       echo "Found rEFInd installation in $InstallDir$TargetDir; upgrading it."
 362    fi
 363
 364    if [[ ! -d /sys/firmware/efi && ! $OSTYPE == darwin* && $Upgrade == 0 ]] ; then     # BIOS-mode
 365       FoundEfiFiles=`find "$InstallDir/EFI/BOOT" -name "*.efi" 2> /dev/null`
 366       FoundConfFiles=`find "$InstallDir" -name "refind\.conf" 2> /dev/null`
 367       if [[ ! -n "$FoundConfFiles" && -f "$InstallDir/EFI/Microsoft/Boot/bootmgfw.efi" ]] ; then
 368          mv -n "$InstallDir/EFI/Microsoft/Boot/bootmgfw.efi" "$InstallDir/EFI/Microsoft" &> /dev/null
 369          SetVarsForMsBoot
 370          echo "Running in BIOS mode with a suspected Windows installation; moving boot loader"
 371          echo "files so as to install to $InstallDir$TargetDir."
 372       elif [[ ! -n "$FoundEfiFiles" ]] ; then  # In BIOS mode and no default loader; install as default loader
 373          SetVarsForBoot
 374          echo "Running in BIOS mode with no existing default boot loader; installing to"
 375          echo $InstallDir$TargetDir
 376       else
 377          echo "Running in BIOS mode with an existing default boot loader; backing it up and"
 378          echo "installing rEFInd in its place."
 379          if [[ -d "$InstallDir/EFI/BOOT-rEFIndBackup" ]] ; then
 380             echo ""
 381             echo "Caution: An existing backup of a default boot loader exists! If the current"
 382             echo "default boot loader and the backup are different boot loaders, the current"
 383             echo "one will become inaccessible."
 384             echo ""
 385             echo -n "Do you want to proceed with installation (Y/N)? "
 386             ReadYesNo
 387             if [[ $YesNo == "Y" || $YesNo == "y" ]] ; then
 388                echo "OK; continuing with the installation..."
 389             else
 390                exit 0
 391             fi
 392          fi
 393          mv -n "$InstallDir/EFI/BOOT" "$InstallDir/EFI/BOOT-rEFIndBackup"
 394          SetVarsForBoot
 395       fi
 396    fi # BIOS-mode
 397 } # DetermineTargetDir()
 398
 399 # Determine (or guess) the filesystem used on the Linux /boot filesystem.
 400 # Store the result in the BootFS global variable.
 401 SetBootFS() {
 402    BootFS=""
 403    case "$OSTYPE" in
 404       linux*)
 405            if command -v blkid &>/dev/null; then
 406               BootPart=`df $RootDir/boot | grep dev | cut -f 1 -d " "`
 407               BootFS=`blkid -o export $BootPart 2> /dev/null | grep TYPE= | cut -f 2 -d =`
 408            fi
 409            ;;
 410       darwin*)
 411            # 0FC63DAF-8483-4772-8E79-3D69D8477DE4 = Linux filesystem
 412            # BC13C2FF-59E6-4262-A352-B275FD6F7172 = Freedesktop $boot partition
 413            # 933AC7E1-2EB4-4F13-B844-0E14E2AEF915 = Freedesktop Linux /home
 414            # E6D6D379-F507-44C2-A23C-238F2A3DF928 = Linux LVM
 415            # A19D880F-05FC-4D3B-A006-743F0F84911E = Linux RAID
 416            # 0657FD6D-A4AB-43C4-84E5-0933C84B4F4F = Linux swap
 417            Temp=$(diskutil list | grep -i '0FC63DAF-8483-4772-8E79-3D69D8477DE4\|BC13C2FF-59E6-4262-A352-B275FD6F7172\|933AC7E1-2EB4-4F13-B844-0E14E2AEF915\|E6D6D379-F507-44C2-A23C-238F2A3DF928\|A19D880F-05FC-4D3B-A006-743F0F84911E\|0657FD6D-A4AB-43C4-84E5-0933C84B4F4F\|Linux')
 418            BootFS=""
 419            if [[ -n $Temp ]] ; then
 420               echo "Found suspected Linux partition(s); installing ext4fs driver."
 421               BootFS="ext4"
 422            fi
 423            ;;
 424    esac
 425 } # SetBootFS()
 426
 427 # Copy drivers from $RefindDir/drivers_$1 to $InstallDir/$TargetDir/drivers_$1,
 428 # honoring the $InstallDrivers condition. Must be passed a suitable
 429 # architecture code (ia32 or x64).
 430 CopyDrivers() {
 431    if [[ $InstallDrivers == "all" ]] ; then
 432       mkdir -p "$InstallDir/$TargetDir/drivers_$1"
 433       cp "$ThisDir"/drivers_$1/*_$1.efi "$InstallDir/$TargetDir/drivers_$1/" 2> /dev/null
 434       cp "$RefindDir"/drivers_$1/*_$1.efi "$InstallDir/$TargetDir/drivers_$1/" 2> /dev/null
 435    elif [[ "$InstallDrivers" == "boot" ]] ; then
 436       SetBootFS
 437       DriverType=""
 438       case $BootFS in
 439          ext2 | ext3) DriverType="ext2"
 440               # Could use ext4, but that can create unwanted entries from symbolic
 441               # links in / to /boot/vmlinuz if a separate /boot partition is used.
 442               ;;
 443          ext4) DriverType="ext4"
 444               ;;
 445          reiserfs) DriverType="reiserfs"
 446               ;;
 447          btrfs) DriverType="btrfs"
 448               ;;
 449          hfsplus) DriverType="hfs"
 450               ;;
 451          ntfs) DriverType="ntfs"
 452               ;;
 453          *) BootFS=""
 454       esac
 455       if [[ -n $BootFS ]] ; then
 456          echo "Installing driver for $BootFS (${DriverType}_$1.efi)"
 457          mkdir -p "$InstallDir/$TargetDir/drivers_$1"
 458          cp "$ThisDir/drivers_$1/${DriverType}_$1.efi" "$InstallDir/$TargetDir/drivers_$1/" 2> /dev/null
 459          cp "$RefindDir/drivers_$1/${DriverType}_$1.efi" "$InstallDir/$TargetDir/drivers_$1"/ 2> /dev/null
 460       fi
 461    fi
 462 } # CopyDrivers()
 463
 464 # Copy tools (currently only gptsync, and that only on Macs) to the EFI/tools
 465 # directory on the ESP. Must be passed a suitable architecture code (ia32
 466 # or x64).
 467 CopyTools() {
 468    mkdir -p "$InstallDir/EFI/tools"
 469    if [[ $OSTYPE == darwin* ]] ; then
 470       cp -f "$RefindDir/tools_$1/gptsync_$1.efi" "$InstallDir/EFI/tools/"
 471       if [[ -f "$InstallDir/EFI/tools/gptsync.efi" ]] ; then
 472          mv "$InstallDir/EFI/tools/gptsync.efi" "$InstallDir/EFI/tools/gptsync.efi-disabled"
 473          echo "Found old gptsync.efi; disabling it by renaming it to gptsync.efi-disabled"
 474       fi
 475    fi
 476 } # CopyTools()
 477
 478 # Copy the rEFInd files to the ESP or OS X root partition.
 479 # Sets Problems=1 if any critical commands fail.
 480 CopyRefindFiles() {
 481    mkdir -p "$InstallDir/$TargetDir"
 482    if [[ "$TargetDir" == '/EFI/BOOT' ]] ; then
 483       cp "$RefindDir/refind_ia32.efi" "$InstallDir/$TargetDir/$TargetIA32" 2> /dev/null
 484       if [[ $? != 0 ]] ; then
 485          echo "Note: IA32 (x86) binary not installed!"
 486       fi
 487       cp "$RefindDir/refind_x64.efi" "$InstallDir/$TargetDir/$TargetX64" 2> /dev/null
 488       if [[ $? != 0 ]] ; then
 489          Problems=1
 490       fi
 491       if [[ "$ShimSource" != "none" ]] ; then
 492          TargetShim="bootx64.efi"
 493          CopyShimFiles
 494       fi
 495       if [[ $InstallDrivers == "all" ]] ; then
 496          cp -r "$RefindDir"/drivers_* "$InstallDir/$TargetDir/" 2> /dev/null
 497          cp -r "$ThisDir"/drivers_* "$InstallDir/$TargetDir/" 2> /dev/null
 498       elif [[ $Upgrade == 1 || $InstallToEspOnMac == 1 ]] ; then
 499          if [[ $Platform == 'EFI64' ]] ; then
 500             CopyDrivers x64
 501             CopyTools x64
 502          else
 503             CopyDrivers ia32
 504             CopyTools ia32
 505          fi
 506       fi
 507       Refind=""
 508       if [[ $Platform == 'EFI64' ]] ; then
 509          Refind='bootx64.efi'
 510       elif [[ $Platform == 'EFI32' ]] ; then
 511          Refind='bootia32.efi'
 512       fi
 513       CopyKeys
 514    elif [[ $Platform == 'EFI64' || $TargetDir == "/EFI/Microsoft/Boot" ]] ; then
 515       cp "$RefindDir/refind_x64.efi" "$InstallDir/$TargetDir/$TargetX64"
 516       if [[ $? != 0 ]] ; then
 517          Problems=1
 518       fi
 519       CopyDrivers x64
 520       CopyTools x64
 521       Refind="refind_x64.efi"
 522       CopyKeys
 523       if [[ "$ShimSource" != "none" ]] ; then
 524          if [[ "$TargetShim" == "default" ]] ; then
 525             TargetShim=`basename "$ShimSource"`
 526          fi
 527          CopyShimFiles
 528          Refind="$TargetShim"
 529          if [[ $LocalKeys == 0 ]] ; then
 530             echo "Storing copies of rEFInd Secure Boot public keys in $EtcKeysDir"
 531             mkdir -p "$EtcKeysDir"
 532             cp "$ThisDir/keys/refind.cer" "$EtcKeysDir" 2> /dev/null
 533             cp "$ThisDir/keys/refind.crt" "$EtcKeysDir" 2> /dev/null
 534          fi
 535       fi
 536       if [[ "$TargetDir" == '/System/Library/CoreServices' ]] ; then
 537          SetupMacHfs $TargetX64
 538       fi
 539    elif [[ $Platform == 'EFI32' ]] ; then
 540       cp "$RefindDir/refind_ia32.efi" "$InstallDir/$TargetDir/$TargetIA32"
 541       if [[ $? != 0 ]] ; then
 542          Problems=1
 543       fi
 544       CopyDrivers ia32
 545       CopyTools ia32
 546       Refind="refind_ia32.efi"
 547       if [[ "$TargetDir" == '/System/Library/CoreServices' ]] ; then
 548          SetupMacHfs $TargetIA32
 549       fi
 550    else
 551       echo "Unknown platform! Aborting!"
 552       exit 1
 553    fi
 554    echo "Copied rEFInd binary files"
 555    echo ""
 556    if [[ -d "$InstallDir/$TargetDir/icons" ]] ; then
 557       rm -rf "$InstallDir/$TargetDir/icons-backup" &> /dev/null
 558       mv -f "$InstallDir/$TargetDir/icons" "$InstallDir/$TargetDir/icons-backup"
 559       echo "Notice: Backed up existing icons directory as icons-backup."
 560    fi
 561    cp -r "$IconsDir" "$InstallDir/$TargetDir"
 562    if [[ $? != 0 ]] ; then
 563       Problems=1
 564    fi
 565    mkdir -p "$InstallDir/$TargetDir/keys"
 566    cp -rf "$ThisDir"/keys/*.[cd]er "$InstallDir/$TargetDir/keys/" 2> /dev/null
 567    cp -rf "$EtcKeysDir"/*.[cd]er "$InstallDir/$TargetDir/keys/" 2> /dev/null
 568    if [[ -f "$InstallDir/$TargetDir/refind.conf" ]] ; then
 569       echo "Existing refind.conf file found; copying sample file as refind.conf-sample"
 570       echo "to avoid overwriting your customizations."
 571       echo ""
 572       cp -f "$ConfFile" "$InstallDir/$TargetDir"
 573       if [[ $? != 0 ]] ; then
 574          Problems=1
 575       fi
 576    else
 577       echo "Copying sample configuration file as refind.conf; edit this file to configure"
 578       echo "rEFInd."
 579       echo ""
 580       cp -f "$ConfFile" "$InstallDir/$TargetDir/refind.conf"
 581       if [[ $? != 0 ]] ; then
 582          Problems=1
 583       fi
 584    fi
 585    if [[ $DeleteRefindDir == 1 ]] ; then
 586       echo "Deleting the temporary directory $RefindDir"
 587       rm -r "$RefindDir"
 588    fi
 589 } # CopyRefindFiles()
 590
 591 # Mount the partition the user specified with the --usedefault or --ownhfs option
 592 MountDefaultTarget() {
 593    InstallDir=/tmp/refind_install
 594    mkdir -p "$InstallDir"
 595    UnmountEsp=1
 596    if [[ $OSTYPE == darwin* ]] ; then
 597       if [[ $OwnHfs == '1' ]] ; then
 598          Temp=`diskutil info "$TargetPart" | grep "Mount Point"`
 599          InstallDir=`echo $Temp | cut -f 3-30 -d ' '`
 600          if [[ $InstallDir == '' ]] ; then
 601             InstallDir=/tmp/refind_install
 602             mount -t hfs "$TargetPart" "$InstallDir"
 603          else
 604             UnmountEsp=0
 605          fi
 606       else
 607          mount -t msdos "$TargetPart" "$InstallDir"
 608       fi
 609    elif [[ $OSTYPE == linux* ]] ; then
 610       mount -t vfat "$TargetPart" "$InstallDir"
 611    fi
 612    if [[ $? != 0 ]] ; then
 613       echo "Couldn't mount $TargetPart ! Aborting!"
 614       rmdir "$InstallDir"
 615       exit 1
 616    fi
 617 } # MountDefaultTarget()
 618
 619 #
 620 # A series of OS X support functions....
 621 #
 622
 623 # Mount the ESP at /Volumes/ESP or determine its current mount
 624 # point.
 625 # Sets InstallDir to the ESP mount point
 626 # Sets UnmountEsp if we mounted it
 627 MountOSXESP() {
 628    # Identify the ESP. Note: This returns the FIRST ESP found;
 629    # if the system has multiple disks, this could be wrong!
 630    Temp=$(mount | sed -n -E "/^(\/dev\/disk[0-9]+s[0-9]+) on \/ \(.*$/s//\1/p")
 631    if [ $Temp ]; then
 632       Temp=$(diskutil list | grep " EFI " | grep -o 'disk.*' | head -n 1)
 633       if [ -z $Temp ]; then
 634          echo "Warning: root device doesn't have an EFI partition"
 635       fi
 636    else
 637       echo "Warning: root device could not be found"
 638    fi
 639    if [ -z $Temp ]; then
 640       Temp=$(diskutil list | sed -n -E '/^ *[0-9]+:[ ]+EFI EFI[ ]+[0-9.]+ [A-Z]+[ ]+(disk[0-9]+s[0-9]+)$/ { s//\1/p
 641              q
 642          }' )
 643
 644       if [ -z $Temp ]; then
 645          echo "Could not find an EFI partition. Aborting!"
 646          exit 1
 647       fi
 648    fi
 649    Esp=/dev/`echo $Temp`
 650    # If the ESP is mounted, use its current mount point....
 651    Temp=`df -P | grep "$Esp "`
 652    InstallDir=`echo $Temp | cut -f 6- -d ' '`
 653    if [[ "$InstallDir" == '' ]] ; then
 654       mkdir /Volumes/ESP &> /dev/null
 655       mount -t msdos "$Esp" /Volumes/ESP
 656       # Some systems have HFS+ "ESPs." They shouldn't, but they do. If this is
 657       # detected, mount it as such and set appropriate options.
 658       if [[ $? != 0 ]] ; then
 659          mount -t hfs "$Esp" /Volumes/Esp
 660          OwnHfs=1
 661          InstallToEspOnMac=0
 662          if [[ $? != 0 ]] ; then
 663             echo "Unable to mount ESP! Aborting!\n"
 664             exit 1
 665          fi
 666       fi
 667       UnmountEsp=1
 668       InstallDir="/Volumes/ESP"
 669    fi
 670 } # MountOSXESP()
 671
 672 # Set up for booting from Mac HFS+ volume that boots rEFInd in MJG's way
 673 # (http://mjg59.dreamwidth.org/7468.html)
 674 # Must be passed the original rEFInd binary filename (without a path).
 675 SetupMacHfs() {
 676    if [[ -s "$InstallDir/mach_kernel" ]] ; then
 677       echo "Attempt to install rEFInd to a partition with a /mach_kernel file! Aborting!"
 678       exit 1
 679    fi
 680    cp -n "$InstallDir/$TargetDir/boot.efi" "$InstallDir/$TargetDir/boot.efi-backup" &> /dev/null
 681    ln -f "$InstallDir/$TargetDir/$1" "$InstallDir/$TargetDir/boot.efi"
 682    touch "$InstallDir/mach_kernel"
 683    rm "$InstallDir/$TargetDir/SystemVersion.plist" &> /dev/null
 684    cat - << ENDOFHERE >> "$InstallDir/$TargetDir/SystemVersion.plist"
 685 <xml version="1.0" encoding="UTF-8"?>
 686 <plist version="1.0">
 687 <dict>
 688         <key>ProductBuildVersion</key>
 689         <string></string>
 690         <key>ProductName</key>
 691         <string>rEFInd</string>
 692         <key>ProductVersion</key>
 693         <string>0.9.2</string>
 694 </dict>
 695 </plist>
 696 ENDOFHERE
 697 } # SetupMacHfs()
 698
 699 CheckForSIP() {
 700    if [[ -x "/usr/bin/csrutil" ]] ; then
 701       local OKToInstall=`/usr/bin/csrutil status | \
 702                          grep "Protection status: disabled\|enabled (Apple Internal)\|NVRAM Protections: disabled"`
 703       if [[ -z "$OKToInstall" ]] ; then
 704          echo
 705          echo "**** ALERT: SIP ENABLED! ****"
 706          echo
 707          if [[ "$Upgrade" == "1" ]] ; then
 708             echo "You are attempting to upgrade an existing installation, but it appears that"
 709             echo "System Integrity Protection (SIP) is enabled. If rEFInd is working now, then"
 710             echo "this is fine; you can upgrade your existing rEFInd. If rEFInd is not working,"
 711             echo "though, re-installing from this boot will not help. To re-enable rEFInd, you"
 712             echo "must re-install it from a Recovery system or from another OS. To enter the"
 713             echo "Recovery system and re-install rEFInd:"
 714          else
 715             echo "rEFInd cannot be installed because System Integrity Protection (SIP) seems"
 716             echo "to be enabled! You must install rEFInd from your Recovery installation or"
 717             echo "from another OS. To install from the Recovery system:"
 718          fi
 719          echo
 720          echo "  1. Reboot"
 721          echo "  2. Hold down Command+R as the chime sounds"
 722          echo "  3. When the OS has booted, select Utilities->Terminal"
 723          echo "  4. Change to this directory with the 'cd' command; it will probably be under"
 724          if [[ "`pwd | cut -b 1-8`" == "/Volumes" ]] ; then
 725             echo "     `pwd`"
 726          else
 727             local RootName=`diskutil info -plist / | grep -A 1 VolumeName | grep string | cut -d \> -f 2 | cut -d \< -f 1`
 728             echo "     /Volumes/$RootName`pwd`"
 729          fi
 730          echo "  5. Re-run this script."
 731          echo
 732          if [[ "$Upgrade" != "1" ]] ; then
 733             echo "If you believe SIP is NOT enabled, you may attempt an installation anyhow,"
 734             echo "but it may fail."
 735             echo
 736          fi
 737          echo "For more on this subject, see http://www.rodsbooks.com/refind/sip.html"
 738          echo
 739          echo -n "Do you want to attempt installation (Y/N)? "
 740          ReadYesNo
 741          if [[ $YesNo == "N" || $YesNo == "n" ]] ; then
 742             echo "Exiting!"
 743             exit
 744          fi
 745       fi # csrutil status suggests OK to install
 746    fi # csrutil exists
 747 } # CheckForSIP()
 748
 749 # Control the OS X installation.
 750 # Sets Problems=1 if problems found during the installation.
 751 InstallOnOSX() {
 752    echo "Installing rEFInd on OS X...."
 753    if [[ "$InstallToEspOnMac" == "1" ]] ; then
 754       MountOSXESP
 755    elif [[ "$TargetDir" == "/EFI/BOOT" || "$OwnHfs" == '1' ]] ; then
 756       MountDefaultTarget
 757    else
 758       InstallDir="$RootDir/"
 759    fi
 760    echo "Installing rEFInd to the partition mounted at $InstallDir"
 761    DetermineTargetDir
 762    CheckForSIP
 763    Platform=`ioreg -l -p IODeviceTree | grep firmware-abi | cut -d "\"" -f 4`
 764    CopyRefindFiles
 765    cp "$ThisDir/mountesp" /usr/local/bin &> /dev/null
 766    if [[ $InstallToEspOnMac == "1" ]] ; then
 767       bless --mount "$InstallDir" --setBoot --file "$InstallDir/$TargetDir/$Refind" --shortform
 768    elif [[ "$TargetDir" != "/EFI/BOOT" ]] ; then
 769       bless --setBoot --folder "$InstallDir/$TargetDir" --file "$InstallDir/$TargetDir/$Refind"
 770    fi
 771    if [[ $? != 0 ]] ; then
 772       Problems=1
 773    fi
 774    if [[ -f /Library/StartupItems/rEFItBlesser || -d /Library/StartupItems/rEFItBlesser ]] ; then
 775       echo
 776       echo "/Library/StartupItems/rEFItBlesser found!"
 777       echo "This program is part of rEFIt, and will cause rEFInd to fail to work after"
 778       echo -n "its first boot. Do you want to remove rEFItBlesser (Y/N)? "
 779       ReadYesNo
 780       if [[ $YesNo == "Y" || $YesNo == "y" ]] ; then
 781          echo "Deleting /Library/StartupItems/rEFItBlesser..."
 782          rm -r /Library/StartupItems/rEFItBlesser
 783       else
 784          echo "Not deleting rEFItBlesser."
 785       fi
 786    fi
 787    echo
 788    echo "WARNING: If you have an Advanced Format disk, *DO NOT* attempt to check the"
 789    echo "bless status with 'bless --info', since this is known to cause disk corruption"
 790    echo "on some systems!!"
 791    echo
 792 } # InstallOnOSX()
 793
 794
 795 #
 796 # Now a series of Linux support functions....
 797 #
 798
 799 # Check for evidence that we're running in Secure Boot mode. If so, and if
 800 # appropriate options haven't been set, warn the user and offer to abort.
 801 # If we're NOT in Secure Boot mode but the user HAS specified the --shim
 802 # or --localkeys option, warn the user and offer to abort.
 803 CheckSecureBoot() {
 804    local IsSecureBoot
 805    if [[ -f /sys/firmware/efi/vars/SecureBoot-8be4df61-93ca-11d2-aa0d-00e098032b8c/data ]] ; then
 806       IsSecureBoot=`od -An -t u1 /sys/firmware/efi/vars/SecureBoot-8be4df61-93ca-11d2-aa0d-00e098032b8c/data | tr -d '[[:space:]]'`
 807    else
 808       IsSecureBoot="0"
 809    fi
 810    if [[ $IsSecureBoot == "1" && "$TargetDir" != '/EFI/BOOT' && "$ShimSource" == "none" ]] ; then
 811       echo ""
 812       echo "CAUTION: Your computer appears to be booted with Secure Boot, but you haven't"
 813       echo "specified a valid shim.efi file source. Chances are you should re-run with"
 814       echo "the --shim option. You can read more about this topic at"
 815       echo "http://www.rodsbooks.com/refind/secureboot.html."
 816       echo ""
 817       echo -n "Do you want to proceed with installation (Y/N)? "
 818       ReadYesNo
 819       if [[ $YesNo == "Y" || $YesNo == "y" ]] ; then
 820          echo "OK; continuing with the installation..."
 821       else
 822          exit 0
 823       fi
 824    fi
 825
 826    if [[ "$ShimSource" != "none" && ! $IsSecureBoot == "1" ]] ; then
 827       echo ""
 828       echo "You've specified installing using a shim.efi file, but your computer does not"
 829       echo "appear to be running in Secure Boot mode. Although installing in this way"
 830       echo "should work, it's unnecessarily complex. You may continue, but unless you"
 831       echo "plan to enable Secure Boot, you should consider stopping and omitting the"
 832       echo "--shim option. You can read more about this topic at"
 833       echo "http://www.rodsbooks.com/refind/secureboot.html."
 834       echo ""
 835       echo -n "Do you want to proceed with installation (Y/N)? "
 836       ReadYesNo
 837       if [[ $YesNo == "Y" || $YesNo == "y" ]] ; then
 838          echo "OK; continuing with the installation..."
 839       else
 840          exit 0
 841       fi
 842    fi
 843
 844    if [[ $LocalKeys != 0 && ! $IsSecureBoot == "1" ]] ; then
 845       echo ""
 846       echo "You've specified re-signing your rEFInd binaries with locally-generated keys,"
 847       echo "but your computer does not appear to be running in Secure Boot mode. The"
 848       echo "keys you generate will be useless unless you enable Secure Boot. You may"
 849       echo "proceed with this installation, but before you do so, you may want to read"
 850       echo "more about it at http://www.rodsbooks.com/refind/secureboot.html."
 851       echo ""
 852       echo -n "Do you want to proceed with installation (Y/N)? "
 853       ReadYesNo
 854       if [[ $YesNo == "Y" || $YesNo == "y" ]] ; then
 855          echo "OK; continuing with the installation..."
 856       else
 857          exit 0
 858       fi
 859    fi
 860
 861 } # CheckSecureBoot()
 862
 863 # Check for the presence of locally-generated keys from a previous installation in
 864 # $EtcKeysDir (/etc/refind.d/keys). If they're not present, generate them using
 865 # openssl.
 866 GenerateKeys() {
 867    PrivateKey="$EtcKeysDir/$LocalKeysBase.key"
 868    CertKey="$EtcKeysDir/$LocalKeysBase.crt"
 869    DerKey="$EtcKeysDir/$LocalKeysBase.cer"
 870    OpenSSL=`which openssl 2> /dev/null`
 871
 872    # Do the work only if one or more of the necessary keys is missing
 873    # TODO: Technically, we don't need the DerKey; but if it's missing and openssl
 874    # is also missing, this will fail. This could be improved.
 875    if [[ ! -f "$PrivateKey" || ! -f "$CertKey" || ! -f "$DerKey" ]] ; then
 876       echo "Generating a fresh set of local keys...."
 877       mkdir -p "$EtcKeysDir"
 878       chmod 0700 "$EtcKeysDir"
 879       if [[ ! -x "$OpenSSL" ]] ; then
 880          echo "Can't find openssl, which is required to create your private signing keys!"
 881          echo "Aborting!"
 882          exit 1
 883       fi
 884       if [[ -f "$PrivateKey" ]] ; then
 885          echo "Backing up existing $PrivateKey"
 886          cp -f "$PrivateKey" "$PrivateKey.backup" 2> /dev/null
 887       fi
 888       if [[ -f "$CertKey" ]] ; then
 889          echo "Backing up existing $CertKey"
 890          cp -f "$CertKey" "$CertKey.backup" 2> /dev/null
 891       fi
 892       if [[ -f "$DerKey" ]] ; then
 893          echo "Backing up existing $DerKey"
 894          cp -f "$DerKey" "$DerKey.backup" 2> /dev/null
 895       fi
 896       "$OpenSSL" req -new -x509 -newkey rsa:2048 -keyout "$PrivateKey" -out "$CertKey" \
 897                      -nodes -days 3650 -subj "/CN=Locally-generated rEFInd key/"
 898       "$OpenSSL" x509 -in "$CertKey" -out "$DerKey" -outform DER
 899       chmod 0600 "$PrivateKey"
 900    else
 901       echo "Using existing local keys...."
 902    fi
 903 }
 904
 905 # Sign a single binary. Requires parameters:
 906 #   $1 = source file
 907 #   $2 = destination file
 908 # Also assumes that the SBSign, PESign, UseSBSign, UsePESign, and various key variables are set
 909 # appropriately.
 910 # Aborts script on error
 911 SignOneBinary() {
 912    $SBSign --key "$PrivateKey" --cert "$CertKey" --output "$2" "$1"
 913    if [[ $? != 0 ]] ; then
 914       echo "Problem signing the binary $1! Aborting!"
 915       exit 1
 916    fi
 917 }
 918
 919 # Re-sign the x86-64 binaries with a locally-generated key, First look for appropriate
 920 # key files in $EtcKeysDir. If they're present, use them to re-sign the binaries. If
 921 # not, try to generate new keys and store them in $EtcKeysDir.
 922 ReSignBinaries() {
 923    SBSign=`which sbsign 2> /dev/null`
 924    echo "Found sbsign at $SBSign"
 925    TempDir="/tmp/refind_local"
 926    if [[ ! -x "$SBSign" ]] ; then
 927       echo "Can't find sbsign, which is required to sign rEFInd with your own keys!"
 928       echo "Aborting!"
 929       exit 1
 930    fi
 931    GenerateKeys
 932    mkdir -p "$TempDir/drivers_x64"
 933    cp "$RefindDir/refind.conf-sample $TempDir" 2> /dev/null
 934    cp "$ThisDir/refind.conf-sample $TempDir" 2> /dev/null
 935    cp "$RefindDir/refind_ia32.efi $TempDir" 2> /dev/null
 936    cp -a "$RefindDir/drivers_ia32 $TempDir" 2> /dev/null
 937    cp -a "$ThisDir/drivers_ia32 $TempDir" 2> /dev/null
 938    SignOneBinary "$RefindDir/refind_x64.efi" "$TempDir/refind_x64.efi"
 939    SaveIFS=$IFS
 940    IFS=$(echo -en "\n\b")
 941    for Driver in `ls "$RefindDir"/drivers_x64/*.efi "$ThisDir"/drivers_x64/*.efi 2> /dev/null` ; do
 942       TempName=`basename "$Driver"`
 943       SignOneBinary "$Driver" "$TempDir/drivers_x64/$TempName"
 944    done
 945    IFS=$SaveIFS
 946    RefindDir="$TempDir"
 947    DeleteRefindDir=1
 948 } # ReSignBinaries()
 949
 950 # Locate and mount an ESP, if possible, based on parted output.
 951 # Should be called only if /boot/efi is NOT an acceptable ESP.
 952 # Sets InstallDir to the mounted ESP's path ($RootDir/boot/efi)
 953 # and EspFilesystem the filesystem (always "vfat")
 954 FindLinuxESP() {
 955    echo "The ESP doesn't seem to be mounted! Trying to find it...."
 956    local Drive
 957    local PartNum
 958    local TableType
 959    local DmStatus
 960    local SkipIt
 961    local Dmraid
 962    for Drive in `ls /dev/[sh]d?` ; do
 963       SkipIt=0
 964       Dmraid=`which dmraid 2> /dev/null`
 965       if [ -x "$Dmraid" ] ; then
 966          DmStatus=`dmraid -r | grep $Drive`
 967          if [ -n "$DmStatus" ] ; then
 968             echo "$Drive seems to be part of a RAID array; skipping!"
 969             SkipIt=1
 970          fi
 971       fi
 972       TableType=`parted $Drive print -m -s 2>/dev/null | awk -F: '$1 == "'$Drive'" { print $6 }'`
 973       if [[ $TableType == 'gpt' && $SkipIt == 0 ]] ; then # read only GPT disks that aren't part of dmraid array
 974          PartNum=`LANG=C parted $Drive print -m -s 2>/dev/null | awk -F: '$7 ~ "(^boot| boot)" { print $1 }' | head -n 1`
 975          if [ "$PartNum" -eq "$PartNum" ] 2> /dev/null ; then
 976             InstallDir="$RootDir/boot/efi"
 977             mkdir -p $InstallDir
 978             mount $Drive$PartNum $InstallDir
 979             EspFilesystem=`grep "$Drive$PartNum.*/boot/efi" /etc/mtab | uniq | grep -v autofs | cut -d " " -f 3`
 980             if [[ $EspFilesystem != 'vfat' ]] ; then
 981                umount $InstallDir
 982             else
 983                echo "Mounting ESP at $InstallDir"
 984                break;
 985             fi
 986          fi # $PartNum -eq $PartNum
 987       fi # TableType
 988    done
 989 } # FindLinuxESP()
 990
 991 # Identifies the ESP's location (/boot or /boot/efi, or these locations under
 992 # the directory specified by --root); aborts if the ESP isn't mounted at
 993 # either location.
 994 # Sets InstallDir to the ESP mount point.
 995 FindMountedESP() {
 996    mount /boot &> /dev/null
 997    mount /boot/efi &> /dev/null
 998    EspLine=`df "$RootDir/boot/efi" 2> /dev/null | grep boot/efi`
 999    if [[ ! -n "$EspLine" ]] ; then
1000       EspLine=`df "$RootDir"/boot | grep boot`
1001    fi
1002    InstallDir=`echo $EspLine | cut -d " " -f 6`
1003
1004    if [[ -n "$InstallDir" ]] ; then
1005       EspFilesystem=`grep -w "$InstallDir" /etc/mtab | uniq | grep -v autofs | cut -d " " -f 3`
1006    fi
1007    if [[ $EspFilesystem != 'vfat' ]] ; then
1008       FindLinuxESP
1009    fi
1010    if [[ $EspFilesystem != 'vfat' ]] ; then
1011       echo "$RootDir/$InstallDir doesn't seem to be on a VFAT filesystem. The ESP must be"
1012       echo "mounted at $RootDir/boot or $RootDir/boot/efi and it must be VFAT! Aborting!"
1013       exit 1
1014    fi
1015    echo "ESP was found at $InstallDir using $EspFilesystem"
1016 } # FindMountedESP
1017
1018 # Uses efibootmgr to add an entry for rEFInd to the EFI's NVRAM.
1019 # If this fails, sets Problems=1
1020 AddBootEntry() {
1021    local PartNum
1022    Efibootmgr=`which efibootmgr 2> /dev/null`
1023    if [[ "$Efibootmgr" ]] ; then
1024       InstallDisk=`grep "$InstallDir" /etc/mtab | cut -d " " -f 1 | cut -c 1-8`
1025       PartNum=`grep "$InstallDir" /etc/mtab | cut -d " " -f 1 | cut -c 9-10`
1026       EntryFilename="$TargetDir/$Refind"
1027       EfiEntryFilename=`echo ${EntryFilename//\//\\\}`
1028       EfiEntryFilename2=`echo ${EfiEntryFilename} | sed s/\\\\\\\\/\\\\\\\\\\\\\\\\/g`
1029       ExistingEntry=`"$Efibootmgr" -v | grep -i "$EfiEntryFilename2"`
1030
1031       if [[ "$ExistingEntry" ]] ; then
1032          ExistingEntryBootNum=`echo "$ExistingEntry" | cut -c 5-8`
1033          FirstBoot=`"$Efibootmgr" | grep BootOrder | cut -c 12-15`
1034          if [[ "$ExistingEntryBootNum" != "$FirstBoot" ]] ; then
1035             echo "An existing rEFInd boot entry exists, but isn't set as the default boot"
1036             echo "manager. The boot order is being adjusted to make rEFInd the default boot"
1037             echo "manager. If this is NOT what you want, you should use efibootmgr to"
1038             echo "manually adjust your EFI's boot order."
1039          fi
1040          "$Efibootmgr" -b $ExistingEntryBootNum -B &> /dev/null
1041       fi
1042
1043       echo "Installing it!"
1044       if [[ "$KeepName" == 0 ]] ; then
1045          "$Efibootmgr" -c -l "$EfiEntryFilename" -L "rEFInd Boot Manager" -d $InstallDisk -p $PartNum &> /dev/null
1046       else
1047          "$Efibootmgr" -c -l "$EfiEntryFilename" -L "rEFInd Boot Manager" -d $InstallDisk -p $PartNum \
1048                        -u "$TargetShim $TargetX64" &> /dev/null
1049       fi
1050       if [[ $? != 0 ]] ; then
1051          EfibootmgrProblems=1
1052          Problems=1
1053       fi
1054
1055    else # efibootmgr not found
1056       EfibootmgrProblems=1
1057       Problems=1
1058    fi
1059
1060    if [[ $EfibootmgrProblems ]] ; then
1061       echo
1062       echo "ALERT: There were problems running the efibootmgr program! You may need to"
1063       echo "rename the $Refind binary to the default name (EFI/boot/bootx64.efi"
1064       echo "on x86-64 systems or EFI/boot/bootia32.efi on x86 systems) to have it run!"
1065       echo
1066    else
1067       echo "rEFInd has been set as the default boot manager."
1068    fi
1069 } # AddBootEntry()
1070
1071 # Create a minimal/sample refind_linux.conf file in /boot.
1072 GenerateRefindLinuxConf() {
1073    if [[ -f "$RLConfFile" ]] ; then
1074       echo "Existing $RLConfFile found; not overwriting."
1075    else
1076       echo "Creating $RLConfFile; edit it to adjust kernel options."
1077       RootFS=`df "$RootDir" | grep dev | cut -f 1 -d " "`
1078       StartOfDevname=`echo "$RootFS" | cut -b 1-7`
1079       if [[ "$StartOfDevname" == "/dev/sd" || "$StartOfDevName" == "/dev/hd" ]] ; then
1080          # Identify root filesystem by UUID rather than by device node, if possible
1081          Uuid=`blkid -o export -s UUID "$RootFS" 2> /dev/null | grep UUID=`
1082          if [[ -n $Uuid ]] ; then
1083             RootFS="$Uuid"
1084          fi
1085       fi
1086       if [[ $RootDir == "/" ]] ; then
1087          DefaultOptions=`cat /proc/cmdline | cut -d ' ' -f 2- | sed 's/$/ /' | sed 's/initrd=.* //g' | sed 's/ *$//'`
1088       else
1089          if [[ -f "$RootDir/etc/default/grub" ]] ; then
1090             # We want the default options used by the distribution, stored here....
1091             source "$RootDir/etc/default/grub"
1092             echo "Setting default boot options based on $RootDir/etc/default/grub"
1093          fi
1094          DefaultOptions="ro root=$RootFS $GRUB_CMDLINE_LINUX $GRUB_CMDLINE_LINUX_DEFAULT"
1095       fi
1096       echo "\"Boot with standard options\"  \"$DefaultOptions\"" > $RLConfFile
1097       echo "\"Boot to single-user mode\"    \"$DefaultOptions single\"" >> $RLConfFile
1098       echo "\"Boot with minimal options\"   \"ro root=$RootFS\"" >> $RLConfFile
1099    fi
1100 }
1101
1102 # Controls rEFInd installation under Linux.
1103 # Sets Problems=1 if something goes wrong.
1104 InstallOnLinux() {
1105    if [[ "$TargetDir" == "/System/Library/CoreServices" ]] ; then
1106       echo "You may not use the --ownhfs option under Linux! Aborting!"
1107       exit 1
1108    fi
1109    echo "Installing rEFInd on Linux...."
1110    modprobe efivars &> /dev/null
1111    if [[ $TargetDir == "/EFI/BOOT" ]] ; then
1112       MountDefaultTarget
1113    else
1114       FindMountedESP
1115       DetermineTargetDir
1116    fi
1117    CpuType=`uname -m`
1118    if [[ $CpuType == 'x86_64' ]] ; then
1119       Platform="EFI64"
1120    elif [[ ($CpuType == 'i386' || $CpuType == 'i486' || $CpuType == 'i586' || $CpuType == 'i686') ]] ; then
1121       Platform="EFI32"
1122       # If we're in EFI mode, do some sanity checks, and alert the user or even
1123       # abort. Not in BIOS mode, though, since that could be used on an emergency
1124       # disc to try to recover a troubled Linux installation.
1125       if [[ -d /sys/firmware/efi ]] ; then
1126          if [[ "$ShimSource" != "none" && "$TargetDir" != "/BOOT/EFI" ]] ; then
1127             echo ""
1128             echo "CAUTION: shim does not currently supports 32-bit systems, so you should not"
1129             echo "use the --shim option to install on such systems. Aborting!"
1130             echo ""
1131             exit 1
1132          fi
1133          echo
1134          echo "CAUTION: This Linux installation uses a 32-bit kernel. 32-bit EFI-based"
1135          echo "computers are VERY RARE. If you've installed a 32-bit version of Linux"
1136          echo "on a 64-bit computer, you should manually install the 64-bit version of"
1137          echo "rEFInd. If you're installing on a Mac, you should do so from OS X. If"
1138          echo "you're positive you want to continue with this installation, answer 'Y'"
1139          echo "to the following question..."
1140          echo
1141          echo -n "Are you sure you want to continue (Y/N)? "
1142          ReadYesNo
1143          if [[ $YesNo == "Y" || $YesNo == "y" ]] ; then
1144             echo "OK; continuing with the installation..."
1145          else
1146             exit 0
1147          fi
1148       fi # in EFI mode
1149    else
1150       echo "Unknown CPU type '$CpuType'; aborting!"
1151       exit 1
1152    fi
1153
1154    if [[ $LocalKeys == 1 ]] ; then
1155       ReSignBinaries
1156    fi
1157
1158    CheckSecureBoot
1159    CopyRefindFiles
1160    if [[ "$TargetDir" != "/EFI/BOOT" && "$TargetDir" != "/EFI/Microsoft/Boot" ]] ; then
1161       AddBootEntry
1162       GenerateRefindLinuxConf
1163    fi
1164 } # InstallOnLinux()
1165
1166 #
1167 # The main part of the script. Sets a few environment variables,
1168 # performs a few startup checks, and then calls functions to
1169 # install under OS X or Linux, depending on the detected platform.
1170 #
1171 GetParams "$@"
1172 ThisDir="$( cd -P "${BASH_SOURCE%/*}" && pwd )"
1173 RefindDir="$ThisDir/refind"
1174 if [[ $UID != 0 ]] ; then
1175    echo "Not running as root; attempting to elevate privileges via sudo...."
1176    sudo "$BASH_SOURCE" "$@"
1177    if [[ $? != 0 ]] ; then
1178       echo "This script must be run as root (or using sudo). Exiting!"
1179       exit 1
1180    else
1181       exit 0
1182    fi
1183 fi
1184 CheckForFiles
1185 case "$OSTYPE" in
1186    darwin*)
1187         if [[ "$ShimSource" != "none" ]] ; then
1188            echo "The --shim option is not supported on OS X! Exiting!"
1189            exit 1
1190         fi
1191         if [[ "$LocalKeys" != 0 ]] ; then
1192            echo "The --localkeys option is not supported on OS X! Exiting!"
1193            exit 1
1194         fi
1195         InstallOnOSX $1
1196         ;;
1197    linux*)
1198         InstallOnLinux
1199         ;;
1200    *)
1201         echo "Running on unknown OS; aborting!"
1202         if [[ "$InstallToEspOnMac" == 0 ]] ; then
1203            echo "The --notesp option is not supported on Linux! Exiting!"
1204            exit 1
1205         fi
1206 esac
1207
1208 if [[ $Problems ]] ; then
1209    echo
1210    echo "ALERT:"
1211    echo "Installation has completed, but problems were detected. Review the output for"
1212    echo "error messages and take corrective measures as necessary. You may need to"
1213    echo "re-run this script or install manually before rEFInd will work."
1214    echo
1215 else
1216    echo
1217    echo "Installation has completed successfully."
1218    echo
1219 fi
1220
1221 if [[ $UnmountEsp == '1' ]] ; then
1222    echo "Unmounting install dir"
1223    case "$OSTYPE" in
1224    darwin*)
1225       diskutil unmount $InstallDir
1226       ;;
1227    *)
1228       umount $InstallDir
1229       ;;
1230    esac
1231 fi
1232
1233 if [[ "$InstallDir" == /tmp/refind_install ]] ; then
1234 #   sleep 5
1235    rmdir "$InstallDir"
1236 fi