code.delx.au - refind/blob - refind-install

   1 #!/bin/bash
   2 #
   3 # Linux/MacOS X script to install rEFInd
   4 #
   5 # Usage:
   6 #
   7 # ./refind-install [options]
   8 #
   9 # options include:
  10 #    "--notesp" to install to the OS X root filesystem rather than to the ESP.
  11 #           This option may not be used under Linux.
  12 #    "--usedefault {devicefile}" to install as default
  13 #           (/EFI/BOOT/BOOTX64.EFI and similar) to the specified device
  14 #           (/dev/sdd1 or whatever) without registering with the NVRAM.
  15 #    "--ownhfs {devicefile}" to install to an HFS+ volume that's NOT currently
  16 #           an OS X boot volume.
  17 #    "--root {dir}" to specify installation using the specified directory
  18 #           as the system's root
  19 #    "--alldrivers" to install all drivers along with regular files
  20 #    "--nodrivers" to suppress driver installation (default in Linux is
  21 #           driver used on /boot; --nodrivers is OS X default)
  22 #    "--shim {shimfile}" to install a shim.efi file for Secure Boot
  23 #    "--preloader" is synonymous with "--shim"
  24 #    "--localkeys" to re-sign x86-64 binaries with a locally-generated key
  25 #    "--keepname" to keep refind_x64.efi name as such even when using shim
  26 #    "--yes" to assume a "yes" response to all prompts
  27 #
  28 # The "esp" option is valid only on Mac OS X; it causes
  29 # installation to the EFI System Partition (ESP) rather than
  30 # to the current OS X boot partition. Under Linux, this script
  31 # installs to the ESP by default.
  32 #
  33 # This program is copyright (c) 2012-2015 by Roderick W. Smith
  34 # It is released under the terms of the GNU GPL, version 3,
  35 # a copy of which should be included in the file COPYING.txt.
  36 #
  37 # Revision history:
  38 #
  39 # 0.9.3   -- Enable running under OS X's recovery system & add warning about
  40 #            SIP & brief instructions on how to deal with it if SIP is
  41 #            detected to be enabled.
  42 # 0.9.2   -- Added --keepname option.
  43 # 0.8.7   -- Better detection of Secure Boot mode & fixed errors when copying
  44 #            Shim & MokManager files over themselves; fixed bug that caused
  45 #            inappropriate installation to EFI/BOOT/bootx64.efi
  46 # 0.8.6   -- Fixed bugs that caused misidentification of ESP on disks with
  47 #            partition numbers over 10 on OS X and misidentification of mount
  48 #            point if already-mounted ESP had space in path.
  49 # 0.8.5   -- Refinement/cleanup of new OS X ESP-as-default policy
  50 # 0.8.4   -- OS X default changed to install to ESP under /EFI/BOOT
  51 # 0.7.9   -- Fixed bug that caused errors if dmraid utility not installed
  52 # 0.7.7   -- Fixed bug that created mangled refind_linux.conf file; added ability
  53 #            to locate and mount ESP on Linux, if it's not mounted
  54 # 0.7.6   -- Added --ownhfs {device-filename} option
  55 # 0.7.5   -- Fixed bug when installing to ESP on recent versions of OS X
  56 # 0.7.2   -- Fixed code that could be confused by use of autofs to mount the ESP
  57 # 0.7.0   -- Added support for the new Btrfs driver
  58 # 0.6.12  -- Added support for PreLoader as well as for shim
  59 # 0.6.11  -- Improvements in script's ability to handle directories with spaces
  60 #            in their names
  61 # 0.6.9   -- Install gptsync on Macs
  62 # 0.6.8   -- Bug fix: ESP scan now uses "uniq".
  63 # 0.6.6   -- Bug fix: Upgrade drivers when installed to EFI/BOOT. Also enable
  64 #            copying shim.efi and MokManager.efi over themselves.
  65 # 0.6.4   -- Copies ext2 driver rather than ext4 driver for ext2/3fs
  66 # 0.6.3   -- Support for detecting rEFInd in EFI/BOOT and EFI/Microsoft/Boot
  67 #            directories & for installing to EFI/BOOT in BIOS mode
  68 # 0.6.2-1 -- Added --yes option & tweaked key-copying for use with RPM install script
  69 # 0.6.1   -- Added --root option; minor bug fixes
  70 # 0.6.0   -- Changed --drivers to --alldrivers and added --nodrivers option;
  71 #            changed default driver installation behavior in Linux to install
  72 #            the driver needed to read /boot (if available)
  73 # 0.5.1.2 -- Fixed bug that caused failure to generate refind_linux.conf file
  74 # 0.5.1.1 -- Fixed bug that caused script failure under OS X
  75 # 0.5.1   -- Added --shim & --localkeys options & create sample refind_linux.conf
  76 #            in /boot
  77 # 0.5.0   -- Added --usedefault & --drivers options & changed "esp" option to "--esp"
  78 # 0.4.5   -- Fixed check for rEFItBlesser in OS X
  79 # 0.4.2   -- Added notice about BIOS-based OSes & made NVRAM changes in Linux smarter
  80 # 0.4.1   -- Added check for rEFItBlesser in OS X
  81 # 0.3.3.1 -- Fixed OS X 10.7 bug; also works as make target
  82 # 0.3.2.1 -- Check for presence of source files; aborts if not present
  83 # 0.3.2   -- Initial version
  84 #
  85 # Note: install.sh version numbers match those of the rEFInd package
  86 # with which they first appeared.
  87
  88 RootDir="/"
  89 TargetDir=/EFI/refind
  90 LocalKeysBase="refind_local"
  91 ShimSource="none"
  92 ShimType="none"
  93 KeepName=0
  94 TargetShim="default"
  95 TargetX64="refind_x64.efi"
  96 TargetIA32="refind_ia32.efi"
  97 LocalKeys=0
  98 DeleteRefindDir=0
  99 AlwaysYes=0
 100
 101 #
 102 # Functions used by both OS X and Linux....
 103 #
 104
 105 GetParams() {
 106    InstallToEspOnMac=1
 107    # Install the driver required to read Linux /boot, if it's available
 108    # Note: Under OS X, this will be installed only if a Linux partition
 109    # is detected, in which case the ext4fs driver will be installed.
 110    InstallDrivers="boot"
 111    while [[ $# -gt 0 ]]; do
 112       case $1 in
 113          --notesp) InstallToEspOnMac=0
 114               ;;
 115          --ownhfs) OwnHfs=1
 116               InstallToEspOnMac=0
 117               TargetPart="$2"
 118               TargetDir=/System/Library/CoreServices
 119               shift
 120               ;;
 121          --usedefault) TargetDir=/EFI/BOOT
 122               TargetPart="$2"
 123               TargetX64="bootx64.efi"
 124               TargetIA32="bootia32.efi"
 125               shift
 126               ;;
 127          --root) RootDir="$2"
 128               InstallToEspOnMac=0
 129               shift
 130               ;;
 131          --localkeys) LocalKeys=1
 132               ;;
 133          --shim | --preloader) ShimSource="$2"
 134               ShimType=`basename $ShimSource`
 135               shift
 136               ;;
 137          --keepname) KeepName=1
 138               ;;
 139          --drivers | --alldrivers) InstallDrivers="all"
 140               ;;
 141          --nodrivers) InstallDrivers="none"
 142               ;;
 143          --yes) AlwaysYes=1
 144               ;;
 145          * ) echo "Usage: $0 [--notesp | --usedefault {device-file} | --root {dir} |"
 146              echo "                     --ownhfs {device-file} ] [--keepname]"
 147              echo "                  [--nodrivers | --alldrivers]"
 148              echo "                  [--localkeys] [--keepname] [--yes]"
 149              exit 1
 150       esac
 151       shift
 152    done
 153    if [[ "$InstallToEspOnMac" == 0 && "$RootDir" == '/' && "$TargetDir" == '/EFI/BOOT' ]] ; then
 154       echo "You may use --notesp OR --usedefault, but not both! Aborting!"
 155       exit 1
 156    fi
 157    if [[ "$RootDir" != '/' && "$TargetDir" == '/EFI/BOOT' ]] ; then
 158       echo "You may use --root OR --usedefault, but not both! Aborting!"
 159       exit 1
 160    fi
 161    if [[ "$TargetDir" != '/System/Library/CoreServices' && "$OwnHfs" == '1' ]] ; then
 162       echo "If you use --ownhfs, you may NOT use --usedefault! Aborting!"
 163       exit 1
 164    fi
 165    if [[ "$KeepName" == 1 && "$ShimSource" == "none" ]] ; then
 166       echo "The --keepname option is meaningful only in conjunction with --shim"
 167       echo "or --preloader! Aborting!"
 168       exit 1
 169    fi
 170    if [[ "$KeepName" == 1 && "$OSTYPE" != "linux-gnu" ]] ; then
 171       echo "The --keepname option is valid only under Linux! Aborting!"
 172       exit 1
 173    fi
 174    if [[ "$KeepName" == 1 && "$TargetDir" != "/EFI/BOOT" ]] ; then
 175       echo "The --keepname option is incompatible with --usedefault! Aborting!"
 176       exit 1
 177    fi
 178    RLConfFile="$RootDir/boot/refind_linux.conf"
 179    EtcKeysDir="$RootDir/etc/refind.d/keys"
 180 } # GetParams()
 181
 182 # Get a yes/no response from the user and place it in the YesNo variable.
 183 # If the AlwaysYes variable is set to 1, skip the user input and set "Y"
 184 # in the YesNo variable.
 185 ReadYesNo() {
 186    if [[ $AlwaysYes == 1 ]] ; then
 187       YesNo="Y"
 188       echo "Y"
 189    else
 190       read YesNo
 191    fi
 192 }
 193
 194 # Abort if the rEFInd files can't be found.
 195 # Also sets $ConfFile to point to the configuration file,
 196 # $IconsDir to point to the icons directory, and
 197 # $ShimSource to the source of the shim.efi file (if necessary).
 198 CheckForFiles() {
 199    # Note: This check is satisfied if EITHER the 32- or the 64-bit version
 200    # is found, even on the wrong platform. This is because the platform
 201    # hasn't yet been determined. This could obviously be improved, but it
 202    # would mean restructuring lots more code....
 203    if [[ ! -f "$RefindDir/refind_ia32.efi" && ! -f "$RefindDir/refind_x64.efi" ]] ; then
 204       echo "The rEFInd binary file is missing! Aborting installation!"
 205       exit 1
 206    fi
 207
 208    if [[ -f "$RefindDir/refind.conf-sample" ]] ; then
 209       ConfFile="$RefindDir/refind.conf-sample"
 210    elif [[ -f "$ThisDir/refind.conf-sample" ]] ; then
 211       ConfFile="$ThisDir/refind.conf-sample"
 212    else
 213       echo "The sample configuration file is missing! Aborting installation!"
 214       exit 1
 215    fi
 216
 217    if [[ -d "$RefindDir/icons" ]] ; then
 218       IconsDir="$RefindDir/icons"
 219    elif [[ -d "$ThisDir/icons" ]] ; then
 220       IconsDir="$ThisDir/icons"
 221    else
 222       echo "The icons directory is missing! Aborting installation!"
 223       exit 1
 224    fi
 225
 226    echo "ShimSource is $ShimSource"
 227    if [[ "$ShimSource" != "none" ]] ; then
 228       if [[ -f "$ShimSource" ]] ; then
 229          if [[ $ShimType == "shimx64.efi" || $ShimType == "shim.efi" ]] ; then
 230             TargetX64="grubx64.efi"
 231             MokManagerSource=`dirname "$ShimSource"`/MokManager.efi
 232          elif [[ $ShimType == "preloader.efi" || $ShimType == "PreLoader.efi" ]] ; then
 233             TargetX64="loader.efi"
 234             MokManagerSource=`dirname "$ShimSource"`/HashTool.efi
 235          else
 236             echo "Unknown shim/PreBootloader filename: $ShimType!"
 237             echo "Known filenames are shimx64.efi, shim.efi, and PreLoader.efi. Aborting!"
 238             exit 1
 239          fi
 240       else
 241          echo "The specified shim/PreBootloader file, $ShimSource, doesn't exist!"
 242          echo "Aborting installation!"
 243          exit 1
 244       fi
 245    fi
 246 } # CheckForFiles()
 247
 248 # Helper for CopyRefindFiles; copies shim files (including MokManager, if it's
 249 # available) to target.
 250 CopyShimFiles() {
 251    local inode1=`ls -i "$ShimSource" 2> /dev/null | cut -f 1 -d " "`
 252    local inode2=`ls -i "$InstallDir/$TargetDir/$TargetShim" 2> /dev/null | cut -f 1 -d " "`
 253    if [[ $inode1 != $inode2 ]] ; then
 254       cp -fb "$ShimSource" "$InstallDir/$TargetDir/$TargetShim"
 255       if [[ $? != 0 ]] ; then
 256          Problems=1
 257       fi
 258    fi
 259    inode1=`ls -i "$MokManagerSource" 2> /dev/null | cut -f 1 -d " "`
 260    local TargetMMName=`basename $MokManagerSource`
 261    inode2=`ls -i "$InstallDir/$TargetDir/$TargetMMName" 2> /dev/null | cut -f 1 -d " "`
 262    if [[ $inode1 != $inode2 ]] ; then
 263       if [[ -f "$MokManagerSource" ]] ; then
 264          cp -fb "$MokManagerSource" "$InstallDir/$TargetDir/"
 265       fi
 266       if [[ $? != 0 ]] ; then
 267          Problems=1
 268       fi
 269    fi
 270 } # CopyShimFiles()
 271
 272 # Copy the public keys to the installation medium
 273 CopyKeys() {
 274    if [[ $LocalKeys == 1 ]] ; then
 275       mkdir -p "$InstallDir/$TargetDir/keys/"
 276       cp "$EtcKeysDir/$LocalKeysBase.cer" "$InstallDir/$TargetDir/keys/"
 277       cp "$EtcKeysDir/$LocalKeysBase.crt" "$InstallDir/$TargetDir/keys/"
 278    fi
 279 } # CopyKeys()
 280
 281 # Set varaibles for installation in EFI/BOOT directory
 282 SetVarsForBoot() {
 283    TargetDir="/EFI/BOOT"
 284    if [[ $ShimSource == "none" ]] ; then
 285       TargetX64="bootx64.efi"
 286       TargetIA32="bootia32.efi"
 287    else
 288       if [[ $ShimType == "shim.efi" || $ShimType == "shimx64.efi" ]] ; then
 289          TargetX64="grubx64.efi"
 290       elif [[ $ShimType == "preloader.efi" || $ShimType == "PreLoader.efi" ]] ; then
 291          TargetX64="loader.efi"
 292       else
 293          echo "Unknown shim/PreBootloader type: $ShimType"
 294          echo "Aborting!"
 295          exit 1
 296       fi
 297       TargetIA32="bootia32.efi"
 298       TargetShim="bootx64.efi"
 299    fi
 300    if [[ $KeepName == 1 ]] ; then
 301       echo "Installation is to /EFI/BOOT, which is incompatible with --keepname! Aborting!"
 302       exit 1
 303    fi
 304 } # SetVarsForBoot()
 305
 306 # Set variables for installation in EFI/Microsoft/Boot directory
 307 SetVarsForMsBoot() {
 308    TargetDir="/EFI/Microsoft/Boot"
 309    if [[ $ShimSource == "none" ]] ; then
 310       TargetX64="bootmgfw.efi"
 311       TargetIA32="bootmgfw.efi"
 312    else
 313       if [[ $ShimType == "shim.efi" || $ShimType == "shimx64.efi" ]] ; then
 314          TargetX64="grubx64.efi"
 315       elif [[ $ShimType == "preloader.efi" || $ShimType == "PreLoader.efi" ]] ; then
 316          TargetX64="loader.efi"
 317       else
 318          echo "Unknown shim/PreBootloader type: $ShimType"
 319          echo "Aborting!"
 320          exit 1
 321       fi
 322       TargetShim="bootmgfw.efi"
 323    fi
 324    if [[ $KeepName == 1 ]] ; then
 325       echo "Installation is to /EFI/Microsoft/Boot, which is incompatible with --keepname!"
 326       echo "Aborting!"
 327       exit 1
 328    fi
 329 } # SetVarsForMsBoot()
 330
 331 # TargetDir defaults to /EFI/refind; however, this function adjusts it as follows:
 332 # - If an existing refind.conf is available in /EFI/BOOT or /EFI/Microsoft/Boot,
 333 #   install to that directory under the suitable name; but DO NOT do this if
 334 #   refind.conf is also in /EFI/refind.
 335 # - If booted in BIOS mode and the ESP lacks any other EFI files, install to
 336 #   /EFI/BOOT
 337 # - If booted in BIOS mode and there's no refind.conf file and there is a
 338 #   /EFI/Microsoft/Boot/bootmgfw.efi file, move it down one level and
 339 #   install under that name, "hijacking" the Windows boot loader filename
 340 DetermineTargetDir() {
 341    Upgrade=0
 342
 343    if [[ -f $InstallDir/EFI/BOOT/refind.conf && ! -f $InstallDir/EFI/refind/refind.conf ]] ; then
 344       SetVarsForBoot
 345       Upgrade=1
 346    fi
 347    if [[ -f $InstallDir/EFI/Microsoft/Boot/refind.conf && ! -f $InstallDir/EFI/refind/refind.conf ]] ; then
 348       SetVarsForMsBoot
 349       Upgrade=1
 350    fi
 351    if [[ -f $InstallDir/EFI/refind/refind.conf ]] ; then
 352       TargetDir="/EFI/refind"
 353       if [[ $ShimSource == "none" || $KeepName == 1 ]] ; then
 354          TargetX64="refind_x64.efi"
 355          TargetIA32="refind_ia32.efi"
 356       fi
 357       Upgrade=1
 358    fi
 359    if [[ $Upgrade == 1 ]] ; then
 360       echo "Found rEFInd installation in $InstallDir$TargetDir; upgrading it."
 361    fi
 362
 363    if [[ ! -d /sys/firmware/efi && ! $OSTYPE == darwin* && $Upgrade == 0 ]] ; then     # BIOS-mode
 364       FoundEfiFiles=`find "$InstallDir/EFI/BOOT" -name "*.efi" 2> /dev/null`
 365       FoundConfFiles=`find "$InstallDir" -name "refind\.conf" 2> /dev/null`
 366       if [[ ! -n "$FoundConfFiles" && -f "$InstallDir/EFI/Microsoft/Boot/bootmgfw.efi" ]] ; then
 367          mv -n "$InstallDir/EFI/Microsoft/Boot/bootmgfw.efi" "$InstallDir/EFI/Microsoft" &> /dev/null
 368          SetVarsForMsBoot
 369          echo "Running in BIOS mode with a suspected Windows installation; moving boot loader"
 370          echo "files so as to install to $InstallDir$TargetDir."
 371       elif [[ ! -n "$FoundEfiFiles" ]] ; then  # In BIOS mode and no default loader; install as default loader
 372          SetVarsForBoot
 373          echo "Running in BIOS mode with no existing default boot loader; installing to"
 374          echo $InstallDir$TargetDir
 375       else
 376          echo "Running in BIOS mode with an existing default boot loader; backing it up and"
 377          echo "installing rEFInd in its place."
 378          if [[ -d "$InstallDir/EFI/BOOT-rEFIndBackup" ]] ; then
 379             echo ""
 380             echo "Caution: An existing backup of a default boot loader exists! If the current"
 381             echo "default boot loader and the backup are different boot loaders, the current"
 382             echo "one will become inaccessible."
 383             echo ""
 384             echo -n "Do you want to proceed with installation (Y/N)? "
 385             ReadYesNo
 386             if [[ $YesNo == "Y" || $YesNo == "y" ]] ; then
 387                echo "OK; continuing with the installation..."
 388             else
 389                exit 0
 390             fi
 391          fi
 392          mv -n "$InstallDir/EFI/BOOT" "$InstallDir/EFI/BOOT-rEFIndBackup"
 393          SetVarsForBoot
 394       fi
 395    fi # BIOS-mode
 396 } # DetermineTargetDir()
 397
 398 # Determine (or guess) the filesystem used on the Linux /boot filesystem.
 399 # Store the result in the BootFS global variable.
 400 SetBootFS() {
 401    local Blkid
 402
 403    BootFS=""
 404    case "$OSTYPE" in
 405       linux-gnu)
 406            if command -v blkid 2>/dev/null; then
 407               BootPart=`df /boot | grep dev | cut -f 1 -d " "`
 408               BootFS=`blkid -o export $BootPart 2> /dev/null | grep TYPE= | cut -f 2 -d =`
 409            fi
 410            ;;
 411       darwin*)
 412            # 0FC63DAF-8483-4772-8E79-3D69D8477DE4 = Linux filesystem
 413            # BC13C2FF-59E6-4262-A352-B275FD6F7172 = Freedesktop $boot partition
 414            # 933AC7E1-2EB4-4F13-B844-0E14E2AEF915 = Freedesktop Linux /home
 415            # E6D6D379-F507-44C2-A23C-238F2A3DF928 = Linux LVM
 416            # A19D880F-05FC-4D3B-A006-743F0F84911E = Linux RAID
 417            # 0657FD6D-A4AB-43C4-84E5-0933C84B4F4F = Linux swap
 418            Temp=$(diskutil list | grep -i '0FC63DAF-8483-4772-8E79-3D69D8477DE4\|BC13C2FF-59E6-4262-A352-B275FD6F7172\|933AC7E1-2EB4-4F13-B844-0E14E2AEF915\|E6D6D379-F507-44C2-A23C-238F2A3DF928\|A19D880F-05FC-4D3B-A006-743F0F84911E\|0657FD6D-A4AB-43C4-84E5-0933C84B4F4F\|Linux')
 419            BootFS=""
 420            if [[ -n $Temp ]] ; then
 421               echo "Found suspected Linux partition(s); installing ext4fs driver."
 422               BootFS="ext4"
 423            fi
 424            ;;
 425    esac
 426 } # SetBootFS()
 427
 428 # Copy drivers from $RefindDir/drivers_$1 to $InstallDir/$TargetDir/drivers_$1,
 429 # honoring the $InstallDrivers condition. Must be passed a suitable
 430 # architecture code (ia32 or x64).
 431 CopyDrivers() {
 432    if [[ $InstallDrivers == "all" ]] ; then
 433       mkdir -p "$InstallDir/$TargetDir/drivers_$1"
 434       cp "$ThisDir"/drivers_$1/*_$1.efi "$InstallDir/$TargetDir/drivers_$1/" 2> /dev/null
 435       cp "$RefindDir"/drivers_$1/*_$1.efi "$InstallDir/$TargetDir/drivers_$1/" 2> /dev/null
 436    elif [[ "$InstallDrivers" == "boot" ]] ; then
 437       SetBootFS
 438       DriverType=""
 439       case $BootFS in
 440          ext2 | ext3) DriverType="ext2"
 441               # Could use ext4, but that can create unwanted entries from symbolic
 442               # links in / to /boot/vmlinuz if a separate /boot partition is used.
 443               ;;
 444          ext4) DriverType="ext4"
 445               ;;
 446          reiserfs) DriverType="reiserfs"
 447               ;;
 448          btrfs) DriverType="btrfs"
 449               ;;
 450          hfsplus) DriverType="hfs"
 451               ;;
 452          ntfs) DriverType="ntfs"
 453               ;;
 454          *) BootFS=""
 455       esac
 456       if [[ -n $BootFS ]] ; then
 457          echo "Installing driver for $BootFS (${DriverType}_$1.efi)"
 458          mkdir -p "$InstallDir/$TargetDir/drivers_$1"
 459          cp "$ThisDir/drivers_$1/${DriverType}_$1.efi" "$InstallDir/$TargetDir/drivers_$1/" 2> /dev/null
 460          cp "$RefindDir/drivers_$1/${DriverType}_$1.efi" "$InstallDir/$TargetDir/drivers_$1"/ 2> /dev/null
 461       fi
 462    fi
 463 } # CopyDrivers()
 464
 465 # Copy tools (currently only gptsync, and that only on Macs) to the EFI/tools
 466 # directory on the ESP. Must be passed a suitable architecture code (ia32
 467 # or x64).
 468 CopyTools() {
 469    mkdir -p "$InstallDir/EFI/tools"
 470    if [[ $OSTYPE == darwin* ]] ; then
 471       cp -f "$RefindDir/tools_$1/gptsync_$1.efi" "$InstallDir/EFI/tools/"
 472       if [[ -f "$InstallDir/EFI/tools/gptsync.efi" ]] ; then
 473          mv "$InstallDir/EFI/tools/gptsync.efi" "$InstallDir/EFI/tools/gptsync.efi-disabled"
 474          echo "Found old gptsync.efi; disabling it by renaming it to gptsync.efi-disabled"
 475       fi
 476    fi
 477 } # CopyTools()
 478
 479 # Copy the rEFInd files to the ESP or OS X root partition.
 480 # Sets Problems=1 if any critical commands fail.
 481 CopyRefindFiles() {
 482    mkdir -p "$InstallDir/$TargetDir"
 483    if [[ "$TargetDir" == '/EFI/BOOT' ]] ; then
 484       cp "$RefindDir/refind_ia32.efi" "$InstallDir/$TargetDir/$TargetIA32" 2> /dev/null
 485       if [[ $? != 0 ]] ; then
 486          echo "Note: IA32 (x86) binary not installed!"
 487       fi
 488       cp "$RefindDir/refind_x64.efi" "$InstallDir/$TargetDir/$TargetX64" 2> /dev/null
 489       if [[ $? != 0 ]] ; then
 490          Problems=1
 491       fi
 492       if [[ "$ShimSource" != "none" ]] ; then
 493          TargetShim="bootx64.efi"
 494          CopyShimFiles
 495       fi
 496       if [[ $InstallDrivers == "all" ]] ; then
 497          cp -r "$RefindDir"/drivers_* "$InstallDir/$TargetDir/" 2> /dev/null
 498          cp -r "$ThisDir"/drivers_* "$InstallDir/$TargetDir/" 2> /dev/null
 499       elif [[ $Upgrade == 1 || $InstallToEspOnMac == 1 ]] ; then
 500          if [[ $Platform == 'EFI64' ]] ; then
 501             CopyDrivers x64
 502             CopyTools x64
 503          else
 504             CopyDrivers ia32
 505             CopyTools ia32
 506          fi
 507       fi
 508       Refind=""
 509       if [[ $Platform == 'EFI64' ]] ; then
 510          Refind='bootx64.efi'
 511       elif [[ $Platform == 'EFI32' ]] ; then
 512          Refind='bootia32.efi'
 513       fi
 514       CopyKeys
 515    elif [[ $Platform == 'EFI64' || $TargetDir == "/EFI/Microsoft/Boot" ]] ; then
 516       cp "$RefindDir/refind_x64.efi" "$InstallDir/$TargetDir/$TargetX64"
 517       if [[ $? != 0 ]] ; then
 518          Problems=1
 519       fi
 520       CopyDrivers x64
 521       CopyTools x64
 522       Refind="refind_x64.efi"
 523       CopyKeys
 524       if [[ "$ShimSource" != "none" ]] ; then
 525          if [[ "$TargetShim" == "default" ]] ; then
 526             TargetShim=`basename "$ShimSource"`
 527          fi
 528          CopyShimFiles
 529          Refind="$TargetShim"
 530          if [[ $LocalKeys == 0 ]] ; then
 531             echo "Storing copies of rEFInd Secure Boot public keys in $EtcKeysDir"
 532             mkdir -p "$EtcKeysDir"
 533             cp "$ThisDir/keys/refind.cer" "$EtcKeysDir" 2> /dev/null
 534             cp "$ThisDir/keys/refind.crt" "$EtcKeysDir" 2> /dev/null
 535          fi
 536       fi
 537       if [[ "$TargetDir" == '/System/Library/CoreServices' ]] ; then
 538          SetupMacHfs $TargetX64
 539       fi
 540    elif [[ $Platform == 'EFI32' ]] ; then
 541       cp "$RefindDir/refind_ia32.efi" "$InstallDir/$TargetDir/$TargetIA32"
 542       if [[ $? != 0 ]] ; then
 543          Problems=1
 544       fi
 545       CopyDrivers ia32
 546       CopyTools ia32
 547       Refind="refind_ia32.efi"
 548       if [[ "$TargetDir" == '/System/Library/CoreServices' ]] ; then
 549          SetupMacHfs $TargetIA32
 550       fi
 551    else
 552       echo "Unknown platform! Aborting!"
 553       exit 1
 554    fi
 555    echo "Copied rEFInd binary files"
 556    echo ""
 557    if [[ -d "$InstallDir/$TargetDir/icons" ]] ; then
 558       rm -rf "$InstallDir/$TargetDir/icons-backup" &> /dev/null
 559       mv -f "$InstallDir/$TargetDir/icons" "$InstallDir/$TargetDir/icons-backup"
 560       echo "Notice: Backed up existing icons directory as icons-backup."
 561    fi
 562    cp -r "$IconsDir" "$InstallDir/$TargetDir"
 563    if [[ $? != 0 ]] ; then
 564       Problems=1
 565    fi
 566    mkdir -p "$InstallDir/$TargetDir/keys"
 567    cp -rf "$ThisDir"/keys/*.[cd]er "$InstallDir/$TargetDir/keys/" 2> /dev/null
 568    cp -rf "$EtcKeysDir"/*.[cd]er "$InstallDir/$TargetDir/keys/" 2> /dev/null
 569    if [[ -f "$InstallDir/$TargetDir/refind.conf" ]] ; then
 570       echo "Existing refind.conf file found; copying sample file as refind.conf-sample"
 571       echo "to avoid overwriting your customizations."
 572       echo ""
 573       cp -f "$ConfFile" "$InstallDir/$TargetDir"
 574       if [[ $? != 0 ]] ; then
 575          Problems=1
 576       fi
 577    else
 578       echo "Copying sample configuration file as refind.conf; edit this file to configure"
 579       echo "rEFInd."
 580       echo ""
 581       cp -f "$ConfFile" "$InstallDir/$TargetDir/refind.conf"
 582       if [[ $? != 0 ]] ; then
 583          Problems=1
 584       fi
 585    fi
 586    if [[ $DeleteRefindDir == 1 ]] ; then
 587       echo "Deleting the temporary directory $RefindDir"
 588       rm -r "$RefindDir"
 589    fi
 590 } # CopyRefindFiles()
 591
 592 # Mount the partition the user specified with the --usedefault or --ownhfs option
 593 MountDefaultTarget() {
 594    InstallDir=/tmp/refind_install
 595    mkdir -p "$InstallDir"
 596    UnmountEsp=1
 597    if [[ $OSTYPE == darwin* ]] ; then
 598       if [[ $OwnHfs == '1' ]] ; then
 599          Temp=`diskutil info "$TargetPart" | grep "Mount Point"`
 600          InstallDir=`echo $Temp | cut -f 3-30 -d ' '`
 601          if [[ $InstallDir == '' ]] ; then
 602             InstallDir=/tmp/refind_install
 603             mount -t hfs "$TargetPart" "$InstallDir"
 604          else
 605             UnmountEsp=0
 606          fi
 607       else
 608          mount -t msdos "$TargetPart" "$InstallDir"
 609       fi
 610    elif [[ $OSTYPE == linux-gnu ]] ; then
 611       mount -t vfat "$TargetPart" "$InstallDir"
 612    fi
 613    if [[ $? != 0 ]] ; then
 614       echo "Couldn't mount $TargetPart ! Aborting!"
 615       rmdir "$InstallDir"
 616       exit 1
 617    fi
 618 } # MountDefaultTarget()
 619
 620 #
 621 # A series of OS X support functions....
 622 #
 623
 624 # Mount the ESP at /Volumes/ESP or determine its current mount
 625 # point.
 626 # Sets InstallDir to the ESP mount point
 627 # Sets UnmountEsp if we mounted it
 628 MountOSXESP() {
 629    # Identify the ESP. Note: This returns the FIRST ESP found;
 630    # if the system has multiple disks, this could be wrong!
 631    Temp=$(mount | sed -n -E "/^(\/dev\/disk[0-9]+s[0-9]+) on \/ \(.*$/s//\1/p")
 632    if [ $Temp ]; then
 633       Temp=$(diskutil list | grep " EFI " | grep -o 'disk.*' | head -n 1)
 634       if [ -z $Temp ]; then
 635          echo "Warning: root device doesn't have an EFI partition"
 636       fi
 637    else
 638       echo "Warning: root device could not be found"
 639    fi
 640    if [ -z $Temp ]; then
 641       Temp=$(diskutil list | sed -n -E '/^ *[0-9]+:[ ]+EFI EFI[ ]+[0-9.]+ [A-Z]+[ ]+(disk[0-9]+s[0-9]+)$/ { s//\1/p
 642              q
 643          }' )
 644
 645       if [ -z $Temp ]; then
 646          echo "Could not find an EFI partition. Aborting!"
 647          exit 1
 648       fi
 649    fi
 650    Esp=/dev/`echo $Temp`
 651    # If the ESP is mounted, use its current mount point....
 652    Temp=`df -P | grep "$Esp "`
 653    InstallDir=`echo $Temp | cut -f 6- -d ' '`
 654    if [[ "$InstallDir" == '' ]] ; then
 655       mkdir /Volumes/ESP &> /dev/null
 656       mount -t msdos "$Esp" /Volumes/ESP
 657       # Some systems have HFS+ "ESPs." They shouldn't, but they do. If this is
 658       # detected, mount it as such and set appropriate options.
 659       if [[ $? != 0 ]] ; then
 660          mount -t hfs "$Esp" /Volumes/Esp
 661          OwnHfs=1
 662          InstallToEspOnMac=0
 663          if [[ $? != 0 ]] ; then
 664             echo "Unable to mount ESP! Aborting!\n"
 665             exit 1
 666          fi
 667       fi
 668       UnmountEsp=1
 669       InstallDir="/Volumes/ESP"
 670    fi
 671 } # MountOSXESP()
 672
 673 # Set up for booting from Mac HFS+ volume that boots rEFInd in MJG's way
 674 # (http://mjg59.dreamwidth.org/7468.html)
 675 # Must be passed the original rEFInd binary filename (without a path).
 676 SetupMacHfs() {
 677    if [[ -s "$InstallDir/mach_kernel" ]] ; then
 678       echo "Attempt to install rEFInd to a partition with a /mach_kernel file! Aborting!"
 679       exit 1
 680    fi
 681    cp -n "$InstallDir/$TargetDir/boot.efi" "$InstallDir/$TargetDir/boot.efi-backup" &> /dev/null
 682    ln -f "$InstallDir/$TargetDir/$1" "$InstallDir/$TargetDir/boot.efi"
 683    touch "$InstallDir/mach_kernel"
 684    rm "$InstallDir/$TargetDir/SystemVersion.plist" &> /dev/null
 685    cat - << ENDOFHERE >> "$InstallDir/$TargetDir/SystemVersion.plist"
 686 <xml version="1.0" encoding="UTF-8"?>
 687 <plist version="1.0">
 688 <dict>
 689         <key>ProductBuildVersion</key>
 690         <string></string>
 691         <key>ProductName</key>
 692         <string>rEFInd</string>
 693         <key>ProductVersion</key>
 694         <string>0.9.2</string>
 695 </dict>
 696 </plist>
 697 ENDOFHERE
 698 } # SetupMacHfs()
 699
 700 CheckForSIP() {
 701    if [[ -x "/usr/bin/csrutil" ]] ; then
 702       local OKToInstall=`/usr/bin/csrutil status | grep "Protection status: enabled (Custom Configuration\|Apple Internal)"`
 703       if [[ -z "$OKToInstall" ]] ; then
 704          echo
 705          echo "**** ALERT: SIP ENABLED! ****"
 706          echo
 707          if [[ "$Upgrade" == "1" ]] ; then
 708             echo "You are attempting to upgrade an existing installation, but it appears that"
 709             echo "System Integrity Protection (SIP) is enabled. If rEFInd is working now, then"
 710             echo "this is fine; you can upgrade your existing rEFInd. If rEFInd is not working,"
 711             echo "though, re-installing from this boot will not help. To re-enable rEFInd, you"
 712             echo "must re-install it from a Recovery system or from another OS. To enter the"
 713             echo "Recovery system and re-install rEFInd:"
 714          else
 715             echo "rEFInd cannot be installed because System Integrity Protection (SIP) seems"
 716             echo "to be enabled! You must install rEFInd from your Recovery installation or"
 717             echo "from another OS. To install from the Recovery system:"
 718          fi
 719          echo
 720          echo "  1. Reboot"
 721          echo "  2. Hold down Command+R as the chime sounds"
 722          echo "  3. When the OS has booted, select Utilities->Terminal"
 723          echo "  4. Change to this directory with the 'cd' command; it will probably be under"
 724          if [[ "`pwd | cut -b 1-8`" == "/Volumes" ]] ; then
 725             echo "     `pwd`"
 726          else
 727             local RootName=`diskutil info -plist / | grep -A 1 VolumeName | grep string | cut -d \> -f 2 | cut -d \< -f 1`
 728             echo "     /Volumes/$RootName`pwd`"
 729          fi
 730          echo "  5. Re-run this script."
 731          echo
 732          if [[ "$Upgrade" != "1" ]] ; then
 733             echo "If you believe SIP is NOT enabled, you may attempt an installation anyhow,"
 734             echo "but it may fail."
 735             echo
 736          fi
 737          echo "For more on this subject, see http://www.rodsbooks.com/refind/sip.html"
 738          echo
 739          echo -n "Do you want to attempt installation (Y/N)? "
 740          ReadYesNo
 741          if [[ $YesNo == "N" || $YesNo == "n" ]] ; then
 742             echo "Exiting!"
 743             exit
 744          fi
 745       fi # csrutil status suggests OK to install
 746    fi # csrutil exists
 747 } # CheckForSIP()
 748
 749 # Control the OS X installation.
 750 # Sets Problems=1 if problems found during the installation.
 751 InstallOnOSX() {
 752    echo "Installing rEFInd on OS X...."
 753    if [[ "$InstallToEspOnMac" == "1" ]] ; then
 754       MountOSXESP
 755    elif [[ "$TargetDir" == "/EFI/BOOT" || "$OwnHfs" == '1' ]] ; then
 756       MountDefaultTarget
 757    else
 758       InstallDir="$RootDir/"
 759    fi
 760    echo "Installing rEFInd to the partition mounted at $InstallDir"
 761    DetermineTargetDir
 762    CheckForSIP
 763    Platform=`ioreg -l -p IODeviceTree | grep firmware-abi | cut -d "\"" -f 4`
 764    CopyRefindFiles
 765    if [[ $InstallToEspOnMac == "1" ]] ; then
 766       bless --mount "$InstallDir" --setBoot --file "$InstallDir/$TargetDir/$Refind" --shortform
 767    elif [[ "$TargetDir" != "/EFI/BOOT" ]] ; then
 768       bless --setBoot --folder "$InstallDir/$TargetDir" --file "$InstallDir/$TargetDir/$Refind"
 769    fi
 770    if [[ $? != 0 ]] ; then
 771       Problems=1
 772    fi
 773    if [[ -f /Library/StartupItems/rEFItBlesser || -d /Library/StartupItems/rEFItBlesser ]] ; then
 774       echo
 775       echo "/Library/StartupItems/rEFItBlesser found!"
 776       echo "This program is part of rEFIt, and will cause rEFInd to fail to work after"
 777       echo -n "its first boot. Do you want to remove rEFItBlesser (Y/N)? "
 778       ReadYesNo
 779       if [[ $YesNo == "Y" || $YesNo == "y" ]] ; then
 780          echo "Deleting /Library/StartupItems/rEFItBlesser..."
 781          rm -r /Library/StartupItems/rEFItBlesser
 782       else
 783          echo "Not deleting rEFItBlesser."
 784       fi
 785    fi
 786    echo
 787    echo "WARNING: If you have an Advanced Format disk, *DO NOT* attempt to check the"
 788    echo "bless status with 'bless --info', since this is known to cause disk corruption"
 789    echo "on some systems!!"
 790    echo
 791 } # InstallOnOSX()
 792
 793
 794 #
 795 # Now a series of Linux support functions....
 796 #
 797
 798 # Check for evidence that we're running in Secure Boot mode. If so, and if
 799 # appropriate options haven't been set, warn the user and offer to abort.
 800 # If we're NOT in Secure Boot mode but the user HAS specified the --shim
 801 # or --localkeys option, warn the user and offer to abort.
 802 CheckSecureBoot() {
 803    local IsSecureBoot
 804    if [[ -f /sys/firmware/efi/vars/SecureBoot-8be4df61-93ca-11d2-aa0d-00e098032b8c/data ]] ; then
 805       IsSecureBoot=`od -An -t u1 /sys/firmware/efi/vars/SecureBoot-8be4df61-93ca-11d2-aa0d-00e098032b8c/data | tr -d '[[:space:]]'`
 806    else
 807       IsSecureBoot="0"
 808    fi
 809    if [[ $IsSecureBoot == "1" && "$TargetDir" != '/EFI/BOOT' && "$ShimSource" == "none" ]] ; then
 810       echo ""
 811       echo "CAUTION: Your computer appears to be booted with Secure Boot, but you haven't"
 812       echo "specified a valid shim.efi file source. Chances are you should re-run with"
 813       echo "the --shim option. You can read more about this topic at"
 814       echo "http://www.rodsbooks.com/refind/secureboot.html."
 815       echo ""
 816       echo -n "Do you want to proceed with installation (Y/N)? "
 817       ReadYesNo
 818       if [[ $YesNo == "Y" || $YesNo == "y" ]] ; then
 819          echo "OK; continuing with the installation..."
 820       else
 821          exit 0
 822       fi
 823    fi
 824
 825    if [[ "$ShimSource" != "none" && ! $IsSecureBoot == "1" ]] ; then
 826       echo ""
 827       echo "You've specified installing using a shim.efi file, but your computer does not"
 828       echo "appear to be running in Secure Boot mode. Although installing in this way"
 829       echo "should work, it's unnecessarily complex. You may continue, but unless you"
 830       echo "plan to enable Secure Boot, you should consider stopping and omitting the"
 831       echo "--shim option. You can read more about this topic at"
 832       echo "http://www.rodsbooks.com/refind/secureboot.html."
 833       echo ""
 834       echo -n "Do you want to proceed with installation (Y/N)? "
 835       ReadYesNo
 836       if [[ $YesNo == "Y" || $YesNo == "y" ]] ; then
 837          echo "OK; continuing with the installation..."
 838       else
 839          exit 0
 840       fi
 841    fi
 842
 843    if [[ $LocalKeys != 0 && ! $IsSecureBoot == "1" ]] ; then
 844       echo ""
 845       echo "You've specified re-signing your rEFInd binaries with locally-generated keys,"
 846       echo "but your computer does not appear to be running in Secure Boot mode. The"
 847       echo "keys you generate will be useless unless you enable Secure Boot. You may"
 848       echo "proceed with this installation, but before you do so, you may want to read"
 849       echo "more about it at http://www.rodsbooks.com/refind/secureboot.html."
 850       echo ""
 851       echo -n "Do you want to proceed with installation (Y/N)? "
 852       ReadYesNo
 853       if [[ $YesNo == "Y" || $YesNo == "y" ]] ; then
 854          echo "OK; continuing with the installation..."
 855       else
 856          exit 0
 857       fi
 858    fi
 859
 860 } # CheckSecureBoot()
 861
 862 # Check for the presence of locally-generated keys from a previous installation in
 863 # $EtcKeysDir (/etc/refind.d/keys). If they're not present, generate them using
 864 # openssl.
 865 GenerateKeys() {
 866    PrivateKey="$EtcKeysDir/$LocalKeysBase.key"
 867    CertKey="$EtcKeysDir/$LocalKeysBase.crt"
 868    DerKey="$EtcKeysDir/$LocalKeysBase.cer"
 869    OpenSSL=`which openssl 2> /dev/null`
 870
 871    # Do the work only if one or more of the necessary keys is missing
 872    # TODO: Technically, we don't need the DerKey; but if it's missing and openssl
 873    # is also missing, this will fail. This could be improved.
 874    if [[ ! -f "$PrivateKey" || ! -f "$CertKey" || ! -f "$DerKey" ]] ; then
 875       echo "Generating a fresh set of local keys...."
 876       mkdir -p "$EtcKeysDir"
 877       chmod 0700 "$EtcKeysDir"
 878       if [[ ! -x "$OpenSSL" ]] ; then
 879          echo "Can't find openssl, which is required to create your private signing keys!"
 880          echo "Aborting!"
 881          exit 1
 882       fi
 883       if [[ -f "$PrivateKey" ]] ; then
 884          echo "Backing up existing $PrivateKey"
 885          cp -f "$PrivateKey" "$PrivateKey.backup" 2> /dev/null
 886       fi
 887       if [[ -f "$CertKey" ]] ; then
 888          echo "Backing up existing $CertKey"
 889          cp -f "$CertKey" "$CertKey.backup" 2> /dev/null
 890       fi
 891       if [[ -f "$DerKey" ]] ; then
 892          echo "Backing up existing $DerKey"
 893          cp -f "$DerKey" "$DerKey.backup" 2> /dev/null
 894       fi
 895       "$OpenSSL" req -new -x509 -newkey rsa:2048 -keyout "$PrivateKey" -out "$CertKey" \
 896                      -nodes -days 3650 -subj "/CN=Locally-generated rEFInd key/"
 897       "$OpenSSL" x509 -in "$CertKey" -out "$DerKey" -outform DER
 898       chmod 0600 "$PrivateKey"
 899    else
 900       echo "Using existing local keys...."
 901    fi
 902 }
 903
 904 # Sign a single binary. Requires parameters:
 905 #   $1 = source file
 906 #   $2 = destination file
 907 # Also assumes that the SBSign, PESign, UseSBSign, UsePESign, and various key variables are set
 908 # appropriately.
 909 # Aborts script on error
 910 SignOneBinary() {
 911    $SBSign --key "$PrivateKey" --cert "$CertKey" --output "$2" "$1"
 912    if [[ $? != 0 ]] ; then
 913       echo "Problem signing the binary $1! Aborting!"
 914       exit 1
 915    fi
 916 }
 917
 918 # Re-sign the x86-64 binaries with a locally-generated key, First look for appropriate
 919 # key files in $EtcKeysDir. If they're present, use them to re-sign the binaries. If
 920 # not, try to generate new keys and store them in $EtcKeysDir.
 921 ReSignBinaries() {
 922    SBSign=`which sbsign 2> /dev/null`
 923    echo "Found sbsign at $SBSign"
 924    TempDir="/tmp/refind_local"
 925    if [[ ! -x "$SBSign" ]] ; then
 926       echo "Can't find sbsign, which is required to sign rEFInd with your own keys!"
 927       echo "Aborting!"
 928       exit 1
 929    fi
 930    GenerateKeys
 931    mkdir -p "$TempDir/drivers_x64"
 932    cp "$RefindDir/refind.conf-sample $TempDir" 2> /dev/null
 933    cp "$ThisDir/refind.conf-sample $TempDir" 2> /dev/null
 934    cp "$RefindDir/refind_ia32.efi $TempDir" 2> /dev/null
 935    cp -a "$RefindDir/drivers_ia32 $TempDir" 2> /dev/null
 936    cp -a "$ThisDir/drivers_ia32 $TempDir" 2> /dev/null
 937    SignOneBinary "$RefindDir/refind_x64.efi" "$TempDir/refind_x64.efi"
 938    SaveIFS=$IFS
 939    IFS=$(echo -en "\n\b")
 940    for Driver in `ls "$RefindDir"/drivers_x64/*.efi "$ThisDir"/drivers_x64/*.efi 2> /dev/null` ; do
 941       TempName=`basename "$Driver"`
 942       SignOneBinary "$Driver" "$TempDir/drivers_x64/$TempName"
 943    done
 944    IFS=$SaveIFS
 945    RefindDir="$TempDir"
 946    DeleteRefindDir=1
 947 } # ReSignBinaries()
 948
 949 # Locate and mount an ESP, if possible, based on parted output.
 950 # Should be called only if /boot/efi is NOT an acceptable ESP.
 951 # Sets InstallDir to the mounted ESP's path ($RootDir/boot/efi)
 952 # and EspFilesystem the filesystem (always "vfat")
 953 FindLinuxESP() {
 954    echo "The ESP doesn't seem to be mounted! Trying to find it...."
 955    local Drive
 956    local PartNum
 957    local TableType
 958    local DmStatus
 959    local SkipIt
 960    local Dmraid
 961    for Drive in `ls /dev/[sh]d?` ; do
 962       SkipIt=0
 963       Dmraid=`which dmraid 2> /dev/null`
 964       if [ -x "$Dmraid" ] ; then
 965          DmStatus=`dmraid -r | grep $Drive`
 966          if [ -n "$DmStatus" ] ; then
 967             echo "$Drive seems to be part of a RAID array; skipping!"
 968             SkipIt=1
 969          fi
 970       fi
 971       TableType=`parted $Drive print -m -s 2>/dev/null | awk -F: '$1 == "'$Drive'" { print $6 }'`
 972       if [[ $TableType == 'gpt' && $SkipIt == 0 ]] ; then # read only GPT disks that aren't part of dmraid array
 973          PartNum=`LANG=C parted $Drive print -m -s 2>/dev/null | awk -F: '$7 ~ "(^boot| boot)" { print $1 }' | head -n 1`
 974          if [ "$PartNum" -eq "$PartNum" ] 2> /dev/null ; then
 975             InstallDir="$RootDir/boot/efi"
 976             mkdir -p $InstallDir
 977             mount $Drive$PartNum $InstallDir
 978             EspFilesystem=`grep "$Drive$PartNum.*/boot/efi" /etc/mtab | uniq | grep -v autofs | cut -d " " -f 3`
 979             if [[ $EspFilesystem != 'vfat' ]] ; then
 980                umount $InstallDir
 981             else
 982                echo "Mounting ESP at $InstallDir"
 983                break;
 984             fi
 985          fi # $PartNum -eq $PartNum
 986       fi # TableType
 987    done
 988 } # FindLinuxESP()
 989
 990 # Identifies the ESP's location (/boot or /boot/efi, or these locations under
 991 # the directory specified by --root); aborts if the ESP isn't mounted at
 992 # either location.
 993 # Sets InstallDir to the ESP mount point.
 994 FindMountedESP() {
 995    mount /boot &> /dev/null
 996    mount /boot/efi &> /dev/null
 997    EspLine=`df "$RootDir/boot/efi" 2> /dev/null | grep boot/efi`
 998    if [[ ! -n "$EspLine" ]] ; then
 999       EspLine=`df "$RootDir"/boot | grep boot`
1000    fi
1001    InstallDir=`echo $EspLine | cut -d " " -f 6`
1002
1003    if [[ -n "$InstallDir" ]] ; then
1004       EspFilesystem=`grep -w "$InstallDir" /etc/mtab | uniq | grep -v autofs | cut -d " " -f 3`
1005    fi
1006    if [[ $EspFilesystem != 'vfat' ]] ; then
1007       FindLinuxESP
1008    fi
1009    if [[ $EspFilesystem != 'vfat' ]] ; then
1010       echo "$RootDir/$InstallDir doesn't seem to be on a VFAT filesystem. The ESP must be"
1011       echo "mounted at $RootDir/boot or $RootDir/boot/efi and it must be VFAT! Aborting!"
1012       exit 1
1013    fi
1014    echo "ESP was found at $InstallDir using $EspFilesystem"
1015 } # FindMountedESP
1016
1017 # Uses efibootmgr to add an entry for rEFInd to the EFI's NVRAM.
1018 # If this fails, sets Problems=1
1019 AddBootEntry() {
1020    local PartNum
1021    Efibootmgr=`which efibootmgr 2> /dev/null`
1022    if [[ "$Efibootmgr" ]] ; then
1023       InstallDisk=`grep "$InstallDir" /etc/mtab | cut -d " " -f 1 | cut -c 1-8`
1024       PartNum=`grep "$InstallDir" /etc/mtab | cut -d " " -f 1 | cut -c 9-10`
1025       EntryFilename="$TargetDir/$Refind"
1026       EfiEntryFilename=`echo ${EntryFilename//\//\\\}`
1027       EfiEntryFilename2=`echo ${EfiEntryFilename} | sed s/\\\\\\\\/\\\\\\\\\\\\\\\\/g`
1028       ExistingEntry=`"$Efibootmgr" -v | grep -i "$EfiEntryFilename2"`
1029
1030       if [[ "$ExistingEntry" ]] ; then
1031          ExistingEntryBootNum=`echo "$ExistingEntry" | cut -c 5-8`
1032          FirstBoot=`"$Efibootmgr" | grep BootOrder | cut -c 12-15`
1033          if [[ "$ExistingEntryBootNum" != "$FirstBoot" ]] ; then
1034             echo "An existing rEFInd boot entry exists, but isn't set as the default boot"
1035             echo "manager. The boot order is being adjusted to make rEFInd the default boot"
1036             echo "manager. If this is NOT what you want, you should use efibootmgr to"
1037             echo "manually adjust your EFI's boot order."
1038          fi
1039          "$Efibootmgr" -b $ExistingEntryBootNum -B &> /dev/null
1040       fi
1041
1042       echo "Installing it!"
1043       if [[ "$KeepName" == 0 ]] ; then
1044          "$Efibootmgr" -c -l "$EfiEntryFilename" -L "rEFInd Boot Manager" -d $InstallDisk -p $PartNum &> /dev/null
1045       else
1046          "$Efibootmgr" -c -l "$EfiEntryFilename" -L "rEFInd Boot Manager" -d $InstallDisk -p $PartNum \
1047                        -u "$TargetShim $TargetX64" &> /dev/null
1048       fi
1049       if [[ $? != 0 ]] ; then
1050          EfibootmgrProblems=1
1051          Problems=1
1052       fi
1053
1054    else # efibootmgr not found
1055       EfibootmgrProblems=1
1056       Problems=1
1057    fi
1058
1059    if [[ $EfibootmgrProblems ]] ; then
1060       echo
1061       echo "ALERT: There were problems running the efibootmgr program! You may need to"
1062       echo "rename the $Refind binary to the default name (EFI/boot/bootx64.efi"
1063       echo "on x86-64 systems or EFI/boot/bootia32.efi on x86 systems) to have it run!"
1064       echo
1065    else
1066       echo "rEFInd has been set as the default boot manager."
1067    fi
1068 } # AddBootEntry()
1069
1070 # Create a minimal/sample refind_linux.conf file in /boot.
1071 GenerateRefindLinuxConf() {
1072    if [[ -f "$RLConfFile" ]] ; then
1073       echo "Existing $RLConfFile found; not overwriting."
1074    else
1075       echo "Creating $RLConfFile; edit it to adjust kernel options."
1076       if [[ -f "$RootDir/etc/default/grub" ]] ; then
1077          # We want the default options used by the distribution, stored here....
1078          source "$RootDir/etc/default/grub"
1079          echo "Setting default boot options based on $RootDir/etc/default/grub"
1080       fi
1081       RootFS=`df "$RootDir" | grep dev | cut -f 1 -d " "`
1082       StartOfDevname=`echo "$RootFS" | cut -b 1-7`
1083       if [[ "$StartOfDevname" == "/dev/sd" || "$StartOfDevName" == "/dev/hd" ]] ; then
1084          # Identify root filesystem by UUID rather than by device node, if possible
1085          Uuid=`blkid -o export -s UUID "$RootFS" 2> /dev/null | grep UUID=`
1086          if [[ -n $Uuid ]] ; then
1087             RootFS="$Uuid"
1088          fi
1089       fi
1090       DefaultOptions="$GRUB_CMDLINE_LINUX $GRUB_CMDLINE_LINUX_DEFAULT"
1091       echo "\"Boot with standard options\"        \"ro root=$RootFS $DefaultOptions \"" > $RLConfFile
1092       echo "\"Boot to single-user mode\"          \"ro root=$RootFS $DefaultOptions single\"" >> $RLConfFile
1093       echo "\"Boot with minimal options\"         \"ro root=$RootFS\"" >> $RLConfFile
1094    fi
1095 }
1096
1097 # Controls rEFInd installation under Linux.
1098 # Sets Problems=1 if something goes wrong.
1099 InstallOnLinux() {
1100    if [[ "$TargetDir" == "/System/Library/CoreServices" ]] ; then
1101       echo "You may not use the --ownhfs option under Linux! Aborting!"
1102       exit 1
1103    fi
1104    echo "Installing rEFInd on Linux...."
1105    modprobe efivars &> /dev/null
1106    if [[ $TargetDir == "/EFI/BOOT" ]] ; then
1107       MountDefaultTarget
1108    else
1109       FindMountedESP
1110       DetermineTargetDir
1111    fi
1112    CpuType=`uname -m`
1113    if [[ $CpuType == 'x86_64' ]] ; then
1114       Platform="EFI64"
1115    elif [[ ($CpuType == 'i386' || $CpuType == 'i486' || $CpuType == 'i586' || $CpuType == 'i686') ]] ; then
1116       Platform="EFI32"
1117       # If we're in EFI mode, do some sanity checks, and alert the user or even
1118       # abort. Not in BIOS mode, though, since that could be used on an emergency
1119       # disc to try to recover a troubled Linux installation.
1120       if [[ -d /sys/firmware/efi ]] ; then
1121          if [[ "$ShimSource" != "none" && "$TargetDir" != "/BOOT/EFI" ]] ; then
1122             echo ""
1123             echo "CAUTION: shim does not currently supports 32-bit systems, so you should not"
1124             echo "use the --shim option to install on such systems. Aborting!"
1125             echo ""
1126             exit 1
1127          fi
1128          echo
1129          echo "CAUTION: This Linux installation uses a 32-bit kernel. 32-bit EFI-based"
1130          echo "computers are VERY RARE. If you've installed a 32-bit version of Linux"
1131          echo "on a 64-bit computer, you should manually install the 64-bit version of"
1132          echo "rEFInd. If you're installing on a Mac, you should do so from OS X. If"
1133          echo "you're positive you want to continue with this installation, answer 'Y'"
1134          echo "to the following question..."
1135          echo
1136          echo -n "Are you sure you want to continue (Y/N)? "
1137          ReadYesNo
1138          if [[ $YesNo == "Y" || $YesNo == "y" ]] ; then
1139             echo "OK; continuing with the installation..."
1140          else
1141             exit 0
1142          fi
1143       fi # in EFI mode
1144    else
1145       echo "Unknown CPU type '$CpuType'; aborting!"
1146       exit 1
1147    fi
1148
1149    if [[ $LocalKeys == 1 ]] ; then
1150       ReSignBinaries
1151    fi
1152
1153    CheckSecureBoot
1154    CopyRefindFiles
1155    if [[ "$TargetDir" != "/EFI/BOOT" && "$TargetDir" != "/EFI/Microsoft/Boot" ]] ; then
1156       AddBootEntry
1157       GenerateRefindLinuxConf
1158    fi
1159 } # InstallOnLinux()
1160
1161 #
1162 # The main part of the script. Sets a few environment variables,
1163 # performs a few startup checks, and then calls functions to
1164 # install under OS X or Linux, depending on the detected platform.
1165 #
1166 GetParams "$@"
1167 ThisDir="$( cd -P "${BASH_SOURCE%/*}" && pwd )"
1168 RefindDir="$ThisDir/refind"
1169 if [[ $UID != 0 ]] ; then
1170    echo "Not running as root; attempting to elevate privileges via sudo...."
1171    sudo "$BASH_SOURCE" "$@"
1172    if [[ $? != 0 ]] ; then
1173       echo "This script must be run as root (or using sudo). Exiting!"
1174       exit 1
1175    else
1176       exit 0
1177    fi
1178 fi
1179 CheckForFiles
1180 case "$OSTYPE" in
1181    darwin*)
1182         if [[ "$ShimSource" != "none" ]] ; then
1183            echo "The --shim option is not supported on OS X! Exiting!"
1184            exit 1
1185         fi
1186         if [[ "$LocalKeys" != 0 ]] ; then
1187            echo "The --localkeys option is not supported on OS X! Exiting!"
1188            exit 1
1189         fi
1190         InstallOnOSX $1
1191         ;;
1192    linux-gnu)
1193         InstallOnLinux
1194         ;;
1195    *)
1196         echo "Running on unknown OS; aborting!"
1197         if [[ "$InstallToEspOnMac" == 0 ]] ; then
1198            echo "The --notesp option is not supported on Linux! Exiting!"
1199            exit 1
1200         fi
1201 esac
1202
1203 if [[ $Problems ]] ; then
1204    echo
1205    echo "ALERT:"
1206    echo "Installation has completed, but problems were detected. Review the output for"
1207    echo "error messages and take corrective measures as necessary. You may need to"
1208    echo "re-run this script or install manually before rEFInd will work."
1209    echo
1210 else
1211    echo
1212    echo "Installation has completed successfully."
1213    echo
1214 fi
1215
1216 if [[ $UnmountEsp == '1' ]] ; then
1217    echo "Unmounting install dir"
1218    umount $InstallDir
1219 fi
1220
1221 if [[ "$InstallDir" == /tmp/refind_install ]] ; then
1222 #   sleep 5
1223    rmdir "$InstallDir"
1224 fi