code.delx.au - refind/blob - refind-install

   1 #!/bin/bash
   2 #
   3 # Linux/MacOS X script to install rEFInd
   4 #
   5 # Usage:
   6 #
   7 # ./refind-install [options]
   8 #
   9 # options include:
  10 #    "--notesp" to install to the OS X root filesystem rather than to the ESP.
  11 #           This option may not be used under Linux.
  12 #    "--usedefault {devicefile}" to install as default
  13 #           (/EFI/BOOT/BOOTX64.EFI and similar) to the specified device
  14 #           (/dev/sdd1 or whatever) without registering with the NVRAM.
  15 #    "--ownhfs {devicefile}" to install to an HFS+ volume that's NOT currently
  16 #           an OS X boot volume.
  17 #    "--root {dir}" to specify installation using the specified directory
  18 #           as the system's root
  19 #    "--alldrivers" to install all drivers along with regular files
  20 #    "--nodrivers" to suppress driver installation (default in Linux is
  21 #           driver used on /boot; --nodrivers is OS X default)
  22 #    "--shim {shimfile}" to install a shim.efi file for Secure Boot
  23 #    "--preloader" is synonymous with "--shim"
  24 #    "--localkeys" to re-sign x86-64 binaries with a locally-generated key
  25 #    "--keepname" to keep refind_x64.efi name as such even when using shim
  26 #    "--yes" to assume a "yes" response to all prompts
  27 #
  28 # The "esp" option is valid only on Mac OS X; it causes
  29 # installation to the EFI System Partition (ESP) rather than
  30 # to the current OS X boot partition. Under Linux, this script
  31 # installs to the ESP by default.
  32 #
  33 # This program is copyright (c) 2012-2015 by Roderick W. Smith
  34 # It is released under the terms of the GNU GPL, version 3,
  35 # a copy of which should be included in the file COPYING.txt.
  36 #
  37 # Revision history:
  38 #
  39 # 0.10.0  -- Enable running under OS X's recovery system & add warning about
  40 #            SIP & brief instructions on how to deal with it if SIP is
  41 #            detected to be enabled. Also change way refind_linux.conf default
  42 #            options are found; use /proc/cmdline as base.
  43 # 0.9.2   -- Added --keepname option.
  44 # 0.8.7   -- Better detection of Secure Boot mode & fixed errors when copying
  45 #            Shim & MokManager files over themselves; fixed bug that caused
  46 #            inappropriate installation to EFI/BOOT/bootx64.efi
  47 # 0.8.6   -- Fixed bugs that caused misidentification of ESP on disks with
  48 #            partition numbers over 10 on OS X and misidentification of mount
  49 #            point if already-mounted ESP had space in path.
  50 # 0.8.5   -- Refinement/cleanup of new OS X ESP-as-default policy
  51 # 0.8.4   -- OS X default changed to install to ESP under /EFI/BOOT
  52 # 0.7.9   -- Fixed bug that caused errors if dmraid utility not installed
  53 # 0.7.7   -- Fixed bug that created mangled refind_linux.conf file; added ability
  54 #            to locate and mount ESP on Linux, if it's not mounted
  55 # 0.7.6   -- Added --ownhfs {device-filename} option
  56 # 0.7.5   -- Fixed bug when installing to ESP on recent versions of OS X
  57 # 0.7.2   -- Fixed code that could be confused by use of autofs to mount the ESP
  58 # 0.7.0   -- Added support for the new Btrfs driver
  59 # 0.6.12  -- Added support for PreLoader as well as for shim
  60 # 0.6.11  -- Improvements in script's ability to handle directories with spaces
  61 #            in their names
  62 # 0.6.9   -- Install gptsync on Macs
  63 # 0.6.8   -- Bug fix: ESP scan now uses "uniq".
  64 # 0.6.6   -- Bug fix: Upgrade drivers when installed to EFI/BOOT. Also enable
  65 #            copying shim.efi and MokManager.efi over themselves.
  66 # 0.6.4   -- Copies ext2 driver rather than ext4 driver for ext2/3fs
  67 # 0.6.3   -- Support for detecting rEFInd in EFI/BOOT and EFI/Microsoft/Boot
  68 #            directories & for installing to EFI/BOOT in BIOS mode
  69 # 0.6.2-1 -- Added --yes option & tweaked key-copying for use with RPM install script
  70 # 0.6.1   -- Added --root option; minor bug fixes
  71 # 0.6.0   -- Changed --drivers to --alldrivers and added --nodrivers option;
  72 #            changed default driver installation behavior in Linux to install
  73 #            the driver needed to read /boot (if available)
  74 # 0.5.1.2 -- Fixed bug that caused failure to generate refind_linux.conf file
  75 # 0.5.1.1 -- Fixed bug that caused script failure under OS X
  76 # 0.5.1   -- Added --shim & --localkeys options & create sample refind_linux.conf
  77 #            in /boot
  78 # 0.5.0   -- Added --usedefault & --drivers options & changed "esp" option to "--esp"
  79 # 0.4.5   -- Fixed check for rEFItBlesser in OS X
  80 # 0.4.2   -- Added notice about BIOS-based OSes & made NVRAM changes in Linux smarter
  81 # 0.4.1   -- Added check for rEFItBlesser in OS X
  82 # 0.3.3.1 -- Fixed OS X 10.7 bug; also works as make target
  83 # 0.3.2.1 -- Check for presence of source files; aborts if not present
  84 # 0.3.2   -- Initial version
  85 #
  86 # Note: install.sh version numbers match those of the rEFInd package
  87 # with which they first appeared.
  88
  89 RootDir="/"
  90 TargetDir=/EFI/refind
  91 LocalKeysBase="refind_local"
  92 ShimSource="none"
  93 ShimType="none"
  94 KeepName=0
  95 TargetShim="default"
  96 TargetX64="refind_x64.efi"
  97 TargetIA32="refind_ia32.efi"
  98 LocalKeys=0
  99 DeleteRefindDir=0
 100 AlwaysYes=0
 101
 102 #
 103 # Functions used by both OS X and Linux....
 104 #
 105
 106 GetParams() {
 107    InstallToEspOnMac=1
 108    # Install the driver required to read Linux /boot, if it's available
 109    # Note: Under OS X, this will be installed only if a Linux partition
 110    # is detected, in which case the ext4fs driver will be installed.
 111    InstallDrivers="boot"
 112    while [[ $# -gt 0 ]]; do
 113       case $1 in
 114          --notesp) InstallToEspOnMac=0
 115               ;;
 116          --ownhfs) OwnHfs=1
 117               InstallToEspOnMac=0
 118               TargetPart="$2"
 119               TargetDir=/System/Library/CoreServices
 120               shift
 121               ;;
 122          --usedefault) TargetDir=/EFI/BOOT
 123               TargetPart="$2"
 124               TargetX64="bootx64.efi"
 125               TargetIA32="bootia32.efi"
 126               shift
 127               ;;
 128          --root) RootDir="$2"
 129               InstallToEspOnMac=0
 130               shift
 131               ;;
 132          --localkeys) LocalKeys=1
 133               ;;
 134          --shim | --preloader) ShimSource="$2"
 135               ShimType=`basename $ShimSource`
 136               shift
 137               ;;
 138          --keepname) KeepName=1
 139               ;;
 140          --drivers | --alldrivers) InstallDrivers="all"
 141               ;;
 142          --nodrivers) InstallDrivers="none"
 143               ;;
 144          --yes) AlwaysYes=1
 145               ;;
 146          * ) echo "Usage: $0 [--notesp | --usedefault {device-file} | --root {dir} |"
 147              echo "                     --ownhfs {device-file} ] [--keepname]"
 148              echo "                  [--nodrivers | --alldrivers]"
 149              echo "                  [--localkeys] [--keepname] [--yes]"
 150              exit 1
 151       esac
 152       shift
 153    done
 154    if [[ "$InstallToEspOnMac" == 0 && "$RootDir" == '/' && "$TargetDir" == '/EFI/BOOT' ]] ; then
 155       echo "You may use --notesp OR --usedefault, but not both! Aborting!"
 156       exit 1
 157    fi
 158    if [[ "$RootDir" != '/' && "$TargetDir" == '/EFI/BOOT' ]] ; then
 159       echo "You may use --root OR --usedefault, but not both! Aborting!"
 160       exit 1
 161    fi
 162    if [[ "$TargetDir" != '/System/Library/CoreServices' && "$OwnHfs" == '1' ]] ; then
 163       echo "If you use --ownhfs, you may NOT use --usedefault! Aborting!"
 164       exit 1
 165    fi
 166    if [[ "$KeepName" == 1 && "$ShimSource" == "none" ]] ; then
 167       echo "The --keepname option is meaningful only in conjunction with --shim"
 168       echo "or --preloader! Aborting!"
 169       exit 1
 170    fi
 171    if [[ "$KeepName" == 1 && "$OSTYPE" != "linux" && "$OSTYPE" != "linux-gnu" ]] ; then
 172       echo "The --keepname option is valid only under Linux! Aborting!"
 173       exit 1
 174    fi
 175    if [[ "$KeepName" == 1 && "$TargetDir" == "/EFI/BOOT" ]] ; then
 176       echo "The --keepname option is incompatible with --usedefault! Aborting!"
 177       exit 1
 178    fi
 179    RLConfFile="$RootDir/boot/refind_linux.conf"
 180    EtcKeysDir="$RootDir/etc/refind.d/keys"
 181 } # GetParams()
 182
 183 # Get a yes/no response from the user and place it in the YesNo variable.
 184 # If the AlwaysYes variable is set to 1, skip the user input and set "Y"
 185 # in the YesNo variable.
 186 ReadYesNo() {
 187    if [[ $AlwaysYes == 1 ]] ; then
 188       YesNo="Y"
 189       echo "Y"
 190    else
 191       read YesNo
 192    fi
 193 }
 194
 195 # Abort if the rEFInd files can't be found.
 196 # Also sets $ConfFile to point to the configuration file,
 197 # $IconsDir to point to the icons directory, and
 198 # $ShimSource to the source of the shim.efi file (if necessary).
 199 CheckForFiles() {
 200    # Note: This check is satisfied if EITHER the 32- or the 64-bit version
 201    # is found, even on the wrong platform. This is because the platform
 202    # hasn't yet been determined. This could obviously be improved, but it
 203    # would mean restructuring lots more code....
 204    if [[ ! -f "$RefindDir/refind_ia32.efi" && ! -f "$RefindDir/refind_x64.efi" ]] ; then
 205       echo "The rEFInd binary file is missing! Aborting installation!"
 206       exit 1
 207    fi
 208
 209    if [[ -f "$RefindDir/refind.conf-sample" ]] ; then
 210       ConfFile="$RefindDir/refind.conf-sample"
 211    elif [[ -f "$ThisDir/refind.conf-sample" ]] ; then
 212       ConfFile="$ThisDir/refind.conf-sample"
 213    else
 214       echo "The sample configuration file is missing! Aborting installation!"
 215       exit 1
 216    fi
 217
 218    if [[ -d "$RefindDir/icons" ]] ; then
 219       IconsDir="$RefindDir/icons"
 220    elif [[ -d "$ThisDir/icons" ]] ; then
 221       IconsDir="$ThisDir/icons"
 222    else
 223       echo "The icons directory is missing! Aborting installation!"
 224       exit 1
 225    fi
 226
 227    echo "ShimSource is $ShimSource"
 228    if [[ "$ShimSource" != "none" ]] ; then
 229       if [[ -f "$ShimSource" ]] ; then
 230          if [[ $ShimType == "shimx64.efi" || $ShimType == "shim.efi" ]] ; then
 231             TargetX64="grubx64.efi"
 232             MokManagerSource=`dirname "$ShimSource"`/MokManager.efi
 233          elif [[ $ShimType == "preloader.efi" || $ShimType == "PreLoader.efi" ]] ; then
 234             TargetX64="loader.efi"
 235             MokManagerSource=`dirname "$ShimSource"`/HashTool.efi
 236          else
 237             echo "Unknown shim/PreBootloader filename: $ShimType!"
 238             echo "Known filenames are shimx64.efi, shim.efi, and PreLoader.efi. Aborting!"
 239             exit 1
 240          fi
 241       else
 242          echo "The specified shim/PreBootloader file, $ShimSource, doesn't exist!"
 243          echo "Aborting installation!"
 244          exit 1
 245       fi
 246    fi
 247 } # CheckForFiles()
 248
 249 # Helper for CopyRefindFiles; copies shim files (including MokManager, if it's
 250 # available) to target.
 251 CopyShimFiles() {
 252    local inode1=`ls -i "$ShimSource" 2> /dev/null | cut -f 1 -d " "`
 253    local inode2=`ls -i "$InstallDir/$TargetDir/$TargetShim" 2> /dev/null | cut -f 1 -d " "`
 254    if [[ $inode1 != $inode2 ]] ; then
 255       cp -fb "$ShimSource" "$InstallDir/$TargetDir/$TargetShim"
 256       if [[ $? != 0 ]] ; then
 257          Problems=1
 258       fi
 259    fi
 260    inode1=`ls -i "$MokManagerSource" 2> /dev/null | cut -f 1 -d " "`
 261    local TargetMMName=`basename $MokManagerSource`
 262    inode2=`ls -i "$InstallDir/$TargetDir/$TargetMMName" 2> /dev/null | cut -f 1 -d " "`
 263    if [[ $inode1 != $inode2 ]] ; then
 264       if [[ -f "$MokManagerSource" ]] ; then
 265          cp -fb "$MokManagerSource" "$InstallDir/$TargetDir/"
 266       fi
 267       if [[ $? != 0 ]] ; then
 268          Problems=1
 269       fi
 270    fi
 271 } # CopyShimFiles()
 272
 273 # Copy the public keys to the installation medium
 274 CopyKeys() {
 275    if [[ $LocalKeys == 1 ]] ; then
 276       mkdir -p "$InstallDir/$TargetDir/keys/"
 277       cp "$EtcKeysDir/$LocalKeysBase.cer" "$InstallDir/$TargetDir/keys/"
 278       cp "$EtcKeysDir/$LocalKeysBase.crt" "$InstallDir/$TargetDir/keys/"
 279    fi
 280 } # CopyKeys()
 281
 282 # Set varaibles for installation in EFI/BOOT directory
 283 SetVarsForBoot() {
 284    TargetDir="/EFI/BOOT"
 285    if [[ $ShimSource == "none" ]] ; then
 286       TargetX64="bootx64.efi"
 287       TargetIA32="bootia32.efi"
 288    else
 289       if [[ $ShimType == "shim.efi" || $ShimType == "shimx64.efi" ]] ; then
 290          TargetX64="grubx64.efi"
 291       elif [[ $ShimType == "preloader.efi" || $ShimType == "PreLoader.efi" ]] ; then
 292          TargetX64="loader.efi"
 293       else
 294          echo "Unknown shim/PreBootloader type: $ShimType"
 295          echo "Aborting!"
 296          exit 1
 297       fi
 298       TargetIA32="bootia32.efi"
 299       TargetShim="bootx64.efi"
 300    fi
 301    if [[ $KeepName == 1 ]] ; then
 302       echo "Installation is to /EFI/BOOT, which is incompatible with --keepname! Aborting!"
 303       exit 1
 304    fi
 305 } # SetVarsForBoot()
 306
 307 # Set variables for installation in EFI/Microsoft/Boot directory
 308 SetVarsForMsBoot() {
 309    TargetDir="/EFI/Microsoft/Boot"
 310    if [[ $ShimSource == "none" ]] ; then
 311       TargetX64="bootmgfw.efi"
 312       TargetIA32="bootmgfw.efi"
 313    else
 314       if [[ $ShimType == "shim.efi" || $ShimType == "shimx64.efi" ]] ; then
 315          TargetX64="grubx64.efi"
 316       elif [[ $ShimType == "preloader.efi" || $ShimType == "PreLoader.efi" ]] ; then
 317          TargetX64="loader.efi"
 318       else
 319          echo "Unknown shim/PreBootloader type: $ShimType"
 320          echo "Aborting!"
 321          exit 1
 322       fi
 323       TargetShim="bootmgfw.efi"
 324    fi
 325    if [[ $KeepName == 1 ]] ; then
 326       echo "Installation is to /EFI/Microsoft/Boot, which is incompatible with --keepname!"
 327       echo "Aborting!"
 328       exit 1
 329    fi
 330 } # SetVarsForMsBoot()
 331
 332 # TargetDir defaults to /EFI/refind; however, this function adjusts it as follows:
 333 # - If an existing refind.conf is available in /EFI/BOOT or /EFI/Microsoft/Boot,
 334 #   install to that directory under the suitable name; but DO NOT do this if
 335 #   refind.conf is also in /EFI/refind.
 336 # - If booted in BIOS mode and the ESP lacks any other EFI files, install to
 337 #   /EFI/BOOT
 338 # - If booted in BIOS mode and there's no refind.conf file and there is a
 339 #   /EFI/Microsoft/Boot/bootmgfw.efi file, move it down one level and
 340 #   install under that name, "hijacking" the Windows boot loader filename
 341 DetermineTargetDir() {
 342    Upgrade=0
 343
 344    if [[ -f $InstallDir/EFI/BOOT/refind.conf && ! -f $InstallDir/EFI/refind/refind.conf ]] ; then
 345       SetVarsForBoot
 346       Upgrade=1
 347    fi
 348    if [[ -f $InstallDir/EFI/Microsoft/Boot/refind.conf && ! -f $InstallDir/EFI/refind/refind.conf ]] ; then
 349       SetVarsForMsBoot
 350       Upgrade=1
 351    fi
 352    if [[ -f $InstallDir/EFI/refind/refind.conf ]] ; then
 353       TargetDir="/EFI/refind"
 354       if [[ $ShimSource == "none" || $KeepName == 1 ]] ; then
 355          TargetX64="refind_x64.efi"
 356          TargetIA32="refind_ia32.efi"
 357       fi
 358       Upgrade=1
 359    fi
 360    if [[ $Upgrade == 1 ]] ; then
 361       echo "Found rEFInd installation in $InstallDir$TargetDir; upgrading it."
 362    fi
 363
 364    if [[ ! -d /sys/firmware/efi && ! $OSTYPE == darwin* && $Upgrade == 0 ]] ; then     # BIOS-mode
 365       FoundEfiFiles=`find "$InstallDir/EFI/BOOT" -name "*.efi" 2> /dev/null`
 366       FoundConfFiles=`find "$InstallDir" -name "refind\.conf" 2> /dev/null`
 367       if [[ ! -n "$FoundConfFiles" && -f "$InstallDir/EFI/Microsoft/Boot/bootmgfw.efi" ]] ; then
 368          mv -n "$InstallDir/EFI/Microsoft/Boot/bootmgfw.efi" "$InstallDir/EFI/Microsoft" &> /dev/null
 369          SetVarsForMsBoot
 370          echo "Running in BIOS mode with a suspected Windows installation; moving boot loader"
 371          echo "files so as to install to $InstallDir$TargetDir."
 372       elif [[ ! -n "$FoundEfiFiles" ]] ; then  # In BIOS mode and no default loader; install as default loader
 373          SetVarsForBoot
 374          echo "Running in BIOS mode with no existing default boot loader; installing to"
 375          echo $InstallDir$TargetDir
 376       else
 377          echo "Running in BIOS mode with an existing default boot loader; backing it up and"
 378          echo "installing rEFInd in its place."
 379          if [[ -d "$InstallDir/EFI/BOOT-rEFIndBackup" ]] ; then
 380             echo ""
 381             echo "Caution: An existing backup of a default boot loader exists! If the current"
 382             echo "default boot loader and the backup are different boot loaders, the current"
 383             echo "one will become inaccessible."
 384             echo ""
 385             echo -n "Do you want to proceed with installation (Y/N)? "
 386             ReadYesNo
 387             if [[ $YesNo == "Y" || $YesNo == "y" ]] ; then
 388                echo "OK; continuing with the installation..."
 389             else
 390                exit 0
 391             fi
 392          fi
 393          mv -n "$InstallDir/EFI/BOOT" "$InstallDir/EFI/BOOT-rEFIndBackup"
 394          SetVarsForBoot
 395       fi
 396    fi # BIOS-mode
 397 } # DetermineTargetDir()
 398
 399 # Determine (or guess) the filesystem used on the Linux /boot filesystem.
 400 # Store the result in the BootFS global variable.
 401 SetBootFS() {
 402    BootFS=""
 403    case "$OSTYPE" in
 404       linux*)
 405            if command -v blkid &>/dev/null; then
 406               BootPart=`df $RootDir/boot | grep dev | cut -f 1 -d " "`
 407               BootFS=`blkid -o export $BootPart 2> /dev/null | grep TYPE= | cut -f 2 -d =`
 408            fi
 409            ;;
 410       darwin*)
 411            # 0FC63DAF-8483-4772-8E79-3D69D8477DE4 = Linux filesystem
 412            # BC13C2FF-59E6-4262-A352-B275FD6F7172 = Freedesktop $boot partition
 413            # 933AC7E1-2EB4-4F13-B844-0E14E2AEF915 = Freedesktop Linux /home
 414            # E6D6D379-F507-44C2-A23C-238F2A3DF928 = Linux LVM
 415            # A19D880F-05FC-4D3B-A006-743F0F84911E = Linux RAID
 416            # 0657FD6D-A4AB-43C4-84E5-0933C84B4F4F = Linux swap
 417            Temp=$(diskutil list | grep -i '0FC63DAF-8483-4772-8E79-3D69D8477DE4\|BC13C2FF-59E6-4262-A352-B275FD6F7172\|933AC7E1-2EB4-4F13-B844-0E14E2AEF915\|E6D6D379-F507-44C2-A23C-238F2A3DF928\|A19D880F-05FC-4D3B-A006-743F0F84911E\|0657FD6D-A4AB-43C4-84E5-0933C84B4F4F\|Linux')
 418            BootFS=""
 419            if [[ -n $Temp ]] ; then
 420               echo "Found suspected Linux partition(s); installing ext4fs driver."
 421               BootFS="ext4"
 422            fi
 423            ;;
 424    esac
 425 } # SetBootFS()
 426
 427 # Copy drivers from $RefindDir/drivers_$1 to $InstallDir/$TargetDir/drivers_$1,
 428 # honoring the $InstallDrivers condition. Must be passed a suitable
 429 # architecture code (ia32 or x64).
 430 CopyDrivers() {
 431    if [[ $InstallDrivers == "all" ]] ; then
 432       mkdir -p "$InstallDir/$TargetDir/drivers_$1"
 433       cp "$ThisDir"/drivers_$1/*_$1.efi "$InstallDir/$TargetDir/drivers_$1/" 2> /dev/null
 434       cp "$RefindDir"/drivers_$1/*_$1.efi "$InstallDir/$TargetDir/drivers_$1/" 2> /dev/null
 435    elif [[ "$InstallDrivers" == "boot" ]] ; then
 436       SetBootFS
 437       DriverType=""
 438       case $BootFS in
 439          ext2 | ext3) DriverType="ext2"
 440               # Could use ext4, but that can create unwanted entries from symbolic
 441               # links in / to /boot/vmlinuz if a separate /boot partition is used.
 442               ;;
 443          ext4) DriverType="ext4"
 444               ;;
 445          reiserfs) DriverType="reiserfs"
 446               ;;
 447          btrfs) DriverType="btrfs"
 448               ;;
 449          hfsplus) DriverType="hfs"
 450               ;;
 451          ntfs) DriverType="ntfs"
 452               ;;
 453          *) BootFS=""
 454       esac
 455       if [[ -n $BootFS ]] ; then
 456          echo "Installing driver for $BootFS (${DriverType}_$1.efi)"
 457          mkdir -p "$InstallDir/$TargetDir/drivers_$1"
 458          cp "$ThisDir/drivers_$1/${DriverType}_$1.efi" "$InstallDir/$TargetDir/drivers_$1/" 2> /dev/null
 459          cp "$RefindDir/drivers_$1/${DriverType}_$1.efi" "$InstallDir/$TargetDir/drivers_$1"/ 2> /dev/null
 460       fi
 461    fi
 462 } # CopyDrivers()
 463
 464 # Copy tools (currently only gptsync, and that only on Macs) to the EFI/tools
 465 # directory on the ESP. Must be passed a suitable architecture code (ia32
 466 # or x64).
 467 CopyTools() {
 468    mkdir -p "$InstallDir/EFI/tools"
 469    if [[ $OSTYPE == darwin* ]] ; then
 470       cp -f "$RefindDir/tools_$1/gptsync_$1.efi" "$InstallDir/EFI/tools/"
 471       if [[ -f "$InstallDir/EFI/tools/gptsync.efi" ]] ; then
 472          mv "$InstallDir/EFI/tools/gptsync.efi" "$InstallDir/EFI/tools/gptsync.efi-disabled"
 473          echo "Found old gptsync.efi; disabling it by renaming it to gptsync.efi-disabled"
 474       fi
 475    fi
 476 } # CopyTools()
 477
 478 # Copy the rEFInd files to the ESP or OS X root partition.
 479 # Sets Problems=1 if any critical commands fail.
 480 CopyRefindFiles() {
 481    mkdir -p "$InstallDir/$TargetDir"
 482    if [[ "$TargetDir" == '/EFI/BOOT' ]] ; then
 483       cp "$RefindDir/refind_ia32.efi" "$InstallDir/$TargetDir/$TargetIA32" 2> /dev/null
 484       if [[ $? != 0 ]] ; then
 485          echo "Note: IA32 (x86) binary not installed!"
 486       fi
 487       cp "$RefindDir/refind_x64.efi" "$InstallDir/$TargetDir/$TargetX64" 2> /dev/null
 488       if [[ $? != 0 ]] ; then
 489          Problems=1
 490       fi
 491       if [[ "$ShimSource" != "none" ]] ; then
 492          TargetShim="bootx64.efi"
 493          CopyShimFiles
 494       fi
 495       if [[ $InstallDrivers == "all" ]] ; then
 496          cp -r "$RefindDir"/drivers_* "$InstallDir/$TargetDir/" 2> /dev/null
 497          cp -r "$ThisDir"/drivers_* "$InstallDir/$TargetDir/" 2> /dev/null
 498       elif [[ $Upgrade == 1 || $InstallToEspOnMac == 1 ]] ; then
 499          if [[ $Platform == 'EFI64' ]] ; then
 500             CopyDrivers x64
 501             CopyTools x64
 502          else
 503             CopyDrivers ia32
 504             CopyTools ia32
 505          fi
 506       fi
 507       Refind=""
 508       if [[ $Platform == 'EFI64' ]] ; then
 509          Refind='bootx64.efi'
 510       elif [[ $Platform == 'EFI32' ]] ; then
 511          Refind='bootia32.efi'
 512       fi
 513       CopyKeys
 514    elif [[ $Platform == 'EFI64' || $TargetDir == "/EFI/Microsoft/Boot" ]] ; then
 515       cp "$RefindDir/refind_x64.efi" "$InstallDir/$TargetDir/$TargetX64"
 516       if [[ $? != 0 ]] ; then
 517          Problems=1
 518       fi
 519       CopyDrivers x64
 520       CopyTools x64
 521       Refind="refind_x64.efi"
 522       CopyKeys
 523       if [[ "$ShimSource" != "none" ]] ; then
 524          if [[ "$TargetShim" == "default" ]] ; then
 525             TargetShim=`basename "$ShimSource"`
 526          fi
 527          CopyShimFiles
 528          Refind="$TargetShim"
 529          if [[ $LocalKeys == 0 ]] ; then
 530             echo "Storing copies of rEFInd Secure Boot public keys in $EtcKeysDir"
 531             mkdir -p "$EtcKeysDir"
 532             cp "$ThisDir/keys/refind.cer" "$EtcKeysDir" 2> /dev/null
 533             cp "$ThisDir/keys/refind.crt" "$EtcKeysDir" 2> /dev/null
 534          fi
 535       fi
 536       if [[ "$TargetDir" == '/System/Library/CoreServices' ]] ; then
 537          SetupMacHfs $TargetX64
 538       fi
 539    elif [[ $Platform == 'EFI32' ]] ; then
 540       cp "$RefindDir/refind_ia32.efi" "$InstallDir/$TargetDir/$TargetIA32"
 541       if [[ $? != 0 ]] ; then
 542          Problems=1
 543       fi
 544       CopyDrivers ia32
 545       CopyTools ia32
 546       Refind="refind_ia32.efi"
 547       if [[ "$TargetDir" == '/System/Library/CoreServices' ]] ; then
 548          SetupMacHfs $TargetIA32
 549       fi
 550    else
 551       echo "Unknown platform! Aborting!"
 552       exit 1
 553    fi
 554    echo "Copied rEFInd binary files"
 555    echo ""
 556    if [[ -d "$InstallDir/$TargetDir/icons" ]] ; then
 557       rm -rf "$InstallDir/$TargetDir/icons-backup" &> /dev/null
 558       mv -f "$InstallDir/$TargetDir/icons" "$InstallDir/$TargetDir/icons-backup"
 559       echo "Notice: Backed up existing icons directory as icons-backup."
 560    fi
 561    cp -r "$IconsDir" "$InstallDir/$TargetDir"
 562    if [[ $? != 0 ]] ; then
 563       Problems=1
 564    fi
 565    mkdir -p "$InstallDir/$TargetDir/keys"
 566    cp -rf "$ThisDir"/keys/*.[cd]er "$InstallDir/$TargetDir/keys/" 2> /dev/null
 567    cp -rf "$EtcKeysDir"/*.[cd]er "$InstallDir/$TargetDir/keys/" 2> /dev/null
 568    if [[ -f "$InstallDir/$TargetDir/refind.conf" ]] ; then
 569       echo "Existing refind.conf file found; copying sample file as refind.conf-sample"
 570       echo "to avoid overwriting your customizations."
 571       echo ""
 572       cp -f "$ConfFile" "$InstallDir/$TargetDir"
 573       if [[ $? != 0 ]] ; then
 574          Problems=1
 575       fi
 576    else
 577       echo "Copying sample configuration file as refind.conf; edit this file to configure"
 578       echo "rEFInd."
 579       echo ""
 580       cp -f "$ConfFile" "$InstallDir/$TargetDir/refind.conf"
 581       if [[ $? != 0 ]] ; then
 582          Problems=1
 583       fi
 584    fi
 585    if [[ $DeleteRefindDir == 1 ]] ; then
 586       echo "Deleting the temporary directory $RefindDir"
 587       rm -r "$RefindDir"
 588    fi
 589 } # CopyRefindFiles()
 590
 591 # Mount the partition the user specified with the --usedefault or --ownhfs option
 592 MountDefaultTarget() {
 593    InstallDir=/tmp/refind_install
 594    mkdir -p "$InstallDir"
 595    UnmountEsp=1
 596    if [[ $OSTYPE == darwin* ]] ; then
 597       if [[ $OwnHfs == '1' ]] ; then
 598          Temp=`diskutil info "$TargetPart" | grep "Mount Point"`
 599          InstallDir=`echo $Temp | cut -f 3-30 -d ' '`
 600          if [[ $InstallDir == '' ]] ; then
 601             InstallDir=/tmp/refind_install
 602             mount -t hfs "$TargetPart" "$InstallDir"
 603          else
 604             UnmountEsp=0
 605          fi
 606       else
 607          mount -t msdos "$TargetPart" "$InstallDir"
 608       fi
 609    elif [[ $OSTYPE == linux* ]] ; then
 610       mount -t vfat "$TargetPart" "$InstallDir"
 611    fi
 612    if [[ $? != 0 ]] ; then
 613       echo "Couldn't mount $TargetPart ! Aborting!"
 614       rmdir "$InstallDir"
 615       exit 1
 616    fi
 617 } # MountDefaultTarget()
 618
 619 #
 620 # A series of OS X support functions....
 621 #
 622
 623 # Mount the ESP at /Volumes/ESP or determine its current mount
 624 # point.
 625 # Sets InstallDir to the ESP mount point
 626 # Sets UnmountEsp if we mounted it
 627 MountOSXESP() {
 628    # Identify the ESP. Note: This returns the FIRST ESP found;
 629    # if the system has multiple disks, this could be wrong!
 630    Temp=$(mount | sed -n -E "/^(\/dev\/disk[0-9]+s[0-9]+) on \/ \(.*$/s//\1/p")
 631    if [ $Temp ]; then
 632       Temp=$(diskutil list | grep " EFI " | grep -o 'disk.*' | head -n 1)
 633       if [ -z $Temp ]; then
 634          echo "Warning: root device doesn't have an EFI partition"
 635       fi
 636    else
 637       echo "Warning: root device could not be found"
 638    fi
 639    if [ -z $Temp ]; then
 640       Temp=$(diskutil list | sed -n -E '/^ *[0-9]+:[ ]+EFI EFI[ ]+[0-9.]+ [A-Z]+[ ]+(disk[0-9]+s[0-9]+)$/ { s//\1/p
 641              q
 642          }' )
 643
 644       if [ -z $Temp ]; then
 645          echo "Could not find an EFI partition. Aborting!"
 646          exit 1
 647       fi
 648    fi
 649    Esp=/dev/`echo $Temp`
 650    # If the ESP is mounted, use its current mount point....
 651    Temp=`df -P | grep "$Esp "`
 652    InstallDir=`echo $Temp | cut -f 6- -d ' '`
 653    if [[ "$InstallDir" == '' ]] ; then
 654       mkdir /Volumes/ESP &> /dev/null
 655       mount -t msdos "$Esp" /Volumes/ESP
 656       # Some systems have HFS+ "ESPs." They shouldn't, but they do. If this is
 657       # detected, mount it as such and set appropriate options.
 658       if [[ $? != 0 ]] ; then
 659          mount -t hfs "$Esp" /Volumes/Esp
 660          OwnHfs=1
 661          InstallToEspOnMac=0
 662          if [[ $? != 0 ]] ; then
 663             echo "Unable to mount ESP! Aborting!\n"
 664             exit 1
 665          fi
 666       fi
 667       UnmountEsp=1
 668       InstallDir="/Volumes/ESP"
 669    fi
 670 } # MountOSXESP()
 671
 672 # Set up for booting from Mac HFS+ volume that boots rEFInd in MJG's way
 673 # (http://mjg59.dreamwidth.org/7468.html)
 674 # Must be passed the original rEFInd binary filename (without a path).
 675 SetupMacHfs() {
 676    if [[ -s "$InstallDir/mach_kernel" ]] ; then
 677       echo "Attempt to install rEFInd to a partition with a /mach_kernel file! Aborting!"
 678       exit 1
 679    fi
 680    cp -n "$InstallDir/$TargetDir/boot.efi" "$InstallDir/$TargetDir/boot.efi-backup" &> /dev/null
 681    ln -f "$InstallDir/$TargetDir/$1" "$InstallDir/$TargetDir/boot.efi"
 682    touch "$InstallDir/mach_kernel"
 683    rm "$InstallDir/$TargetDir/SystemVersion.plist" &> /dev/null
 684    cat - << ENDOFHERE >> "$InstallDir/$TargetDir/SystemVersion.plist"
 685 <xml version="1.0" encoding="UTF-8"?>
 686 <plist version="1.0">
 687 <dict>
 688         <key>ProductBuildVersion</key>
 689         <string></string>
 690         <key>ProductName</key>
 691         <string>rEFInd</string>
 692         <key>ProductVersion</key>
 693         <string>0.9.2</string>
 694 </dict>
 695 </plist>
 696 ENDOFHERE
 697 } # SetupMacHfs()
 698
 699 CheckForSIP() {
 700    if [[ -x "/usr/bin/csrutil" ]] ; then
 701       local OKToInstall=`/usr/bin/csrutil status | grep "Protection status: enabled (Custom Configuration\|Apple Internal)"`
 702       if [[ -z "$OKToInstall" ]] ; then
 703          echo
 704          echo "**** ALERT: SIP ENABLED! ****"
 705          echo
 706          if [[ "$Upgrade" == "1" ]] ; then
 707             echo "You are attempting to upgrade an existing installation, but it appears that"
 708             echo "System Integrity Protection (SIP) is enabled. If rEFInd is working now, then"
 709             echo "this is fine; you can upgrade your existing rEFInd. If rEFInd is not working,"
 710             echo "though, re-installing from this boot will not help. To re-enable rEFInd, you"
 711             echo "must re-install it from a Recovery system or from another OS. To enter the"
 712             echo "Recovery system and re-install rEFInd:"
 713          else
 714             echo "rEFInd cannot be installed because System Integrity Protection (SIP) seems"
 715             echo "to be enabled! You must install rEFInd from your Recovery installation or"
 716             echo "from another OS. To install from the Recovery system:"
 717          fi
 718          echo
 719          echo "  1. Reboot"
 720          echo "  2. Hold down Command+R as the chime sounds"
 721          echo "  3. When the OS has booted, select Utilities->Terminal"
 722          echo "  4. Change to this directory with the 'cd' command; it will probably be under"
 723          if [[ "`pwd | cut -b 1-8`" == "/Volumes" ]] ; then
 724             echo "     `pwd`"
 725          else
 726             local RootName=`diskutil info -plist / | grep -A 1 VolumeName | grep string | cut -d \> -f 2 | cut -d \< -f 1`
 727             echo "     /Volumes/$RootName`pwd`"
 728          fi
 729          echo "  5. Re-run this script."
 730          echo
 731          if [[ "$Upgrade" != "1" ]] ; then
 732             echo "If you believe SIP is NOT enabled, you may attempt an installation anyhow,"
 733             echo "but it may fail."
 734             echo
 735          fi
 736          echo "For more on this subject, see http://www.rodsbooks.com/refind/sip.html"
 737          echo
 738          echo -n "Do you want to attempt installation (Y/N)? "
 739          ReadYesNo
 740          if [[ $YesNo == "N" || $YesNo == "n" ]] ; then
 741             echo "Exiting!"
 742             exit
 743          fi
 744       fi # csrutil status suggests OK to install
 745    fi # csrutil exists
 746 } # CheckForSIP()
 747
 748 # Control the OS X installation.
 749 # Sets Problems=1 if problems found during the installation.
 750 InstallOnOSX() {
 751    echo "Installing rEFInd on OS X...."
 752    if [[ "$InstallToEspOnMac" == "1" ]] ; then
 753       MountOSXESP
 754    elif [[ "$TargetDir" == "/EFI/BOOT" || "$OwnHfs" == '1' ]] ; then
 755       MountDefaultTarget
 756    else
 757       InstallDir="$RootDir/"
 758    fi
 759    echo "Installing rEFInd to the partition mounted at $InstallDir"
 760    DetermineTargetDir
 761    CheckForSIP
 762    Platform=`ioreg -l -p IODeviceTree | grep firmware-abi | cut -d "\"" -f 4`
 763    CopyRefindFiles
 764    cp "$ThisDir/mountesp" /usr/local/bin
 765    if [[ $InstallToEspOnMac == "1" ]] ; then
 766       bless --mount "$InstallDir" --setBoot --file "$InstallDir/$TargetDir/$Refind" --shortform
 767    elif [[ "$TargetDir" != "/EFI/BOOT" ]] ; then
 768       bless --setBoot --folder "$InstallDir/$TargetDir" --file "$InstallDir/$TargetDir/$Refind"
 769    fi
 770    if [[ $? != 0 ]] ; then
 771       Problems=1
 772    fi
 773    if [[ -f /Library/StartupItems/rEFItBlesser || -d /Library/StartupItems/rEFItBlesser ]] ; then
 774       echo
 775       echo "/Library/StartupItems/rEFItBlesser found!"
 776       echo "This program is part of rEFIt, and will cause rEFInd to fail to work after"
 777       echo -n "its first boot. Do you want to remove rEFItBlesser (Y/N)? "
 778       ReadYesNo
 779       if [[ $YesNo == "Y" || $YesNo == "y" ]] ; then
 780          echo "Deleting /Library/StartupItems/rEFItBlesser..."
 781          rm -r /Library/StartupItems/rEFItBlesser
 782       else
 783          echo "Not deleting rEFItBlesser."
 784       fi
 785    fi
 786    echo
 787    echo "WARNING: If you have an Advanced Format disk, *DO NOT* attempt to check the"
 788    echo "bless status with 'bless --info', since this is known to cause disk corruption"
 789    echo "on some systems!!"
 790    echo
 791 } # InstallOnOSX()
 792
 793
 794 #
 795 # Now a series of Linux support functions....
 796 #
 797
 798 # Check for evidence that we're running in Secure Boot mode. If so, and if
 799 # appropriate options haven't been set, warn the user and offer to abort.
 800 # If we're NOT in Secure Boot mode but the user HAS specified the --shim
 801 # or --localkeys option, warn the user and offer to abort.
 802 CheckSecureBoot() {
 803    local IsSecureBoot
 804    if [[ -f /sys/firmware/efi/vars/SecureBoot-8be4df61-93ca-11d2-aa0d-00e098032b8c/data ]] ; then
 805       IsSecureBoot=`od -An -t u1 /sys/firmware/efi/vars/SecureBoot-8be4df61-93ca-11d2-aa0d-00e098032b8c/data | tr -d '[[:space:]]'`
 806    else
 807       IsSecureBoot="0"
 808    fi
 809    if [[ $IsSecureBoot == "1" && "$TargetDir" != '/EFI/BOOT' && "$ShimSource" == "none" ]] ; then
 810       echo ""
 811       echo "CAUTION: Your computer appears to be booted with Secure Boot, but you haven't"
 812       echo "specified a valid shim.efi file source. Chances are you should re-run with"
 813       echo "the --shim option. You can read more about this topic at"
 814       echo "http://www.rodsbooks.com/refind/secureboot.html."
 815       echo ""
 816       echo -n "Do you want to proceed with installation (Y/N)? "
 817       ReadYesNo
 818       if [[ $YesNo == "Y" || $YesNo == "y" ]] ; then
 819          echo "OK; continuing with the installation..."
 820       else
 821          exit 0
 822       fi
 823    fi
 824
 825    if [[ "$ShimSource" != "none" && ! $IsSecureBoot == "1" ]] ; then
 826       echo ""
 827       echo "You've specified installing using a shim.efi file, but your computer does not"
 828       echo "appear to be running in Secure Boot mode. Although installing in this way"
 829       echo "should work, it's unnecessarily complex. You may continue, but unless you"
 830       echo "plan to enable Secure Boot, you should consider stopping and omitting the"
 831       echo "--shim option. You can read more about this topic at"
 832       echo "http://www.rodsbooks.com/refind/secureboot.html."
 833       echo ""
 834       echo -n "Do you want to proceed with installation (Y/N)? "
 835       ReadYesNo
 836       if [[ $YesNo == "Y" || $YesNo == "y" ]] ; then
 837          echo "OK; continuing with the installation..."
 838       else
 839          exit 0
 840       fi
 841    fi
 842
 843    if [[ $LocalKeys != 0 && ! $IsSecureBoot == "1" ]] ; then
 844       echo ""
 845       echo "You've specified re-signing your rEFInd binaries with locally-generated keys,"
 846       echo "but your computer does not appear to be running in Secure Boot mode. The"
 847       echo "keys you generate will be useless unless you enable Secure Boot. You may"
 848       echo "proceed with this installation, but before you do so, you may want to read"
 849       echo "more about it at http://www.rodsbooks.com/refind/secureboot.html."
 850       echo ""
 851       echo -n "Do you want to proceed with installation (Y/N)? "
 852       ReadYesNo
 853       if [[ $YesNo == "Y" || $YesNo == "y" ]] ; then
 854          echo "OK; continuing with the installation..."
 855       else
 856          exit 0
 857       fi
 858    fi
 859
 860 } # CheckSecureBoot()
 861
 862 # Check for the presence of locally-generated keys from a previous installation in
 863 # $EtcKeysDir (/etc/refind.d/keys). If they're not present, generate them using
 864 # openssl.
 865 GenerateKeys() {
 866    PrivateKey="$EtcKeysDir/$LocalKeysBase.key"
 867    CertKey="$EtcKeysDir/$LocalKeysBase.crt"
 868    DerKey="$EtcKeysDir/$LocalKeysBase.cer"
 869    OpenSSL=`which openssl 2> /dev/null`
 870
 871    # Do the work only if one or more of the necessary keys is missing
 872    # TODO: Technically, we don't need the DerKey; but if it's missing and openssl
 873    # is also missing, this will fail. This could be improved.
 874    if [[ ! -f "$PrivateKey" || ! -f "$CertKey" || ! -f "$DerKey" ]] ; then
 875       echo "Generating a fresh set of local keys...."
 876       mkdir -p "$EtcKeysDir"
 877       chmod 0700 "$EtcKeysDir"
 878       if [[ ! -x "$OpenSSL" ]] ; then
 879          echo "Can't find openssl, which is required to create your private signing keys!"
 880          echo "Aborting!"
 881          exit 1
 882       fi
 883       if [[ -f "$PrivateKey" ]] ; then
 884          echo "Backing up existing $PrivateKey"
 885          cp -f "$PrivateKey" "$PrivateKey.backup" 2> /dev/null
 886       fi
 887       if [[ -f "$CertKey" ]] ; then
 888          echo "Backing up existing $CertKey"
 889          cp -f "$CertKey" "$CertKey.backup" 2> /dev/null
 890       fi
 891       if [[ -f "$DerKey" ]] ; then
 892          echo "Backing up existing $DerKey"
 893          cp -f "$DerKey" "$DerKey.backup" 2> /dev/null
 894       fi
 895       "$OpenSSL" req -new -x509 -newkey rsa:2048 -keyout "$PrivateKey" -out "$CertKey" \
 896                      -nodes -days 3650 -subj "/CN=Locally-generated rEFInd key/"
 897       "$OpenSSL" x509 -in "$CertKey" -out "$DerKey" -outform DER
 898       chmod 0600 "$PrivateKey"
 899    else
 900       echo "Using existing local keys...."
 901    fi
 902 }
 903
 904 # Sign a single binary. Requires parameters:
 905 #   $1 = source file
 906 #   $2 = destination file
 907 # Also assumes that the SBSign, PESign, UseSBSign, UsePESign, and various key variables are set
 908 # appropriately.
 909 # Aborts script on error
 910 SignOneBinary() {
 911    $SBSign --key "$PrivateKey" --cert "$CertKey" --output "$2" "$1"
 912    if [[ $? != 0 ]] ; then
 913       echo "Problem signing the binary $1! Aborting!"
 914       exit 1
 915    fi
 916 }
 917
 918 # Re-sign the x86-64 binaries with a locally-generated key, First look for appropriate
 919 # key files in $EtcKeysDir. If they're present, use them to re-sign the binaries. If
 920 # not, try to generate new keys and store them in $EtcKeysDir.
 921 ReSignBinaries() {
 922    SBSign=`which sbsign 2> /dev/null`
 923    echo "Found sbsign at $SBSign"
 924    TempDir="/tmp/refind_local"
 925    if [[ ! -x "$SBSign" ]] ; then
 926       echo "Can't find sbsign, which is required to sign rEFInd with your own keys!"
 927       echo "Aborting!"
 928       exit 1
 929    fi
 930    GenerateKeys
 931    mkdir -p "$TempDir/drivers_x64"
 932    cp "$RefindDir/refind.conf-sample $TempDir" 2> /dev/null
 933    cp "$ThisDir/refind.conf-sample $TempDir" 2> /dev/null
 934    cp "$RefindDir/refind_ia32.efi $TempDir" 2> /dev/null
 935    cp -a "$RefindDir/drivers_ia32 $TempDir" 2> /dev/null
 936    cp -a "$ThisDir/drivers_ia32 $TempDir" 2> /dev/null
 937    SignOneBinary "$RefindDir/refind_x64.efi" "$TempDir/refind_x64.efi"
 938    SaveIFS=$IFS
 939    IFS=$(echo -en "\n\b")
 940    for Driver in `ls "$RefindDir"/drivers_x64/*.efi "$ThisDir"/drivers_x64/*.efi 2> /dev/null` ; do
 941       TempName=`basename "$Driver"`
 942       SignOneBinary "$Driver" "$TempDir/drivers_x64/$TempName"
 943    done
 944    IFS=$SaveIFS
 945    RefindDir="$TempDir"
 946    DeleteRefindDir=1
 947 } # ReSignBinaries()
 948
 949 # Locate and mount an ESP, if possible, based on parted output.
 950 # Should be called only if /boot/efi is NOT an acceptable ESP.
 951 # Sets InstallDir to the mounted ESP's path ($RootDir/boot/efi)
 952 # and EspFilesystem the filesystem (always "vfat")
 953 FindLinuxESP() {
 954    echo "The ESP doesn't seem to be mounted! Trying to find it...."
 955    local Drive
 956    local PartNum
 957    local TableType
 958    local DmStatus
 959    local SkipIt
 960    local Dmraid
 961    for Drive in `ls /dev/[sh]d?` ; do
 962       SkipIt=0
 963       Dmraid=`which dmraid 2> /dev/null`
 964       if [ -x "$Dmraid" ] ; then
 965          DmStatus=`dmraid -r | grep $Drive`
 966          if [ -n "$DmStatus" ] ; then
 967             echo "$Drive seems to be part of a RAID array; skipping!"
 968             SkipIt=1
 969          fi
 970       fi
 971       TableType=`parted $Drive print -m -s 2>/dev/null | awk -F: '$1 == "'$Drive'" { print $6 }'`
 972       if [[ $TableType == 'gpt' && $SkipIt == 0 ]] ; then # read only GPT disks that aren't part of dmraid array
 973          PartNum=`LANG=C parted $Drive print -m -s 2>/dev/null | awk -F: '$7 ~ "(^boot| boot)" { print $1 }' | head -n 1`
 974          if [ "$PartNum" -eq "$PartNum" ] 2> /dev/null ; then
 975             InstallDir="$RootDir/boot/efi"
 976             mkdir -p $InstallDir
 977             mount $Drive$PartNum $InstallDir
 978             EspFilesystem=`grep "$Drive$PartNum.*/boot/efi" /etc/mtab | uniq | grep -v autofs | cut -d " " -f 3`
 979             if [[ $EspFilesystem != 'vfat' ]] ; then
 980                umount $InstallDir
 981             else
 982                echo "Mounting ESP at $InstallDir"
 983                break;
 984             fi
 985          fi # $PartNum -eq $PartNum
 986       fi # TableType
 987    done
 988 } # FindLinuxESP()
 989
 990 # Identifies the ESP's location (/boot or /boot/efi, or these locations under
 991 # the directory specified by --root); aborts if the ESP isn't mounted at
 992 # either location.
 993 # Sets InstallDir to the ESP mount point.
 994 FindMountedESP() {
 995    mount /boot &> /dev/null
 996    mount /boot/efi &> /dev/null
 997    EspLine=`df "$RootDir/boot/efi" 2> /dev/null | grep boot/efi`
 998    if [[ ! -n "$EspLine" ]] ; then
 999       EspLine=`df "$RootDir"/boot | grep boot`
1000    fi
1001    InstallDir=`echo $EspLine | cut -d " " -f 6`
1002
1003    if [[ -n "$InstallDir" ]] ; then
1004       EspFilesystem=`grep -w "$InstallDir" /etc/mtab | uniq | grep -v autofs | cut -d " " -f 3`
1005    fi
1006    if [[ $EspFilesystem != 'vfat' ]] ; then
1007       FindLinuxESP
1008    fi
1009    if [[ $EspFilesystem != 'vfat' ]] ; then
1010       echo "$RootDir/$InstallDir doesn't seem to be on a VFAT filesystem. The ESP must be"
1011       echo "mounted at $RootDir/boot or $RootDir/boot/efi and it must be VFAT! Aborting!"
1012       exit 1
1013    fi
1014    echo "ESP was found at $InstallDir using $EspFilesystem"
1015 } # FindMountedESP
1016
1017 # Uses efibootmgr to add an entry for rEFInd to the EFI's NVRAM.
1018 # If this fails, sets Problems=1
1019 AddBootEntry() {
1020    local PartNum
1021    Efibootmgr=`which efibootmgr 2> /dev/null`
1022    if [[ "$Efibootmgr" ]] ; then
1023       InstallDisk=`grep "$InstallDir" /etc/mtab | cut -d " " -f 1 | cut -c 1-8`
1024       PartNum=`grep "$InstallDir" /etc/mtab | cut -d " " -f 1 | cut -c 9-10`
1025       EntryFilename="$TargetDir/$Refind"
1026       EfiEntryFilename=`echo ${EntryFilename//\//\\\}`
1027       EfiEntryFilename2=`echo ${EfiEntryFilename} | sed s/\\\\\\\\/\\\\\\\\\\\\\\\\/g`
1028       ExistingEntry=`"$Efibootmgr" -v | grep -i "$EfiEntryFilename2"`
1029
1030       if [[ "$ExistingEntry" ]] ; then
1031          ExistingEntryBootNum=`echo "$ExistingEntry" | cut -c 5-8`
1032          FirstBoot=`"$Efibootmgr" | grep BootOrder | cut -c 12-15`
1033          if [[ "$ExistingEntryBootNum" != "$FirstBoot" ]] ; then
1034             echo "An existing rEFInd boot entry exists, but isn't set as the default boot"
1035             echo "manager. The boot order is being adjusted to make rEFInd the default boot"
1036             echo "manager. If this is NOT what you want, you should use efibootmgr to"
1037             echo "manually adjust your EFI's boot order."
1038          fi
1039          "$Efibootmgr" -b $ExistingEntryBootNum -B &> /dev/null
1040       fi
1041
1042       echo "Installing it!"
1043       if [[ "$KeepName" == 0 ]] ; then
1044          "$Efibootmgr" -c -l "$EfiEntryFilename" -L "rEFInd Boot Manager" -d $InstallDisk -p $PartNum &> /dev/null
1045       else
1046          "$Efibootmgr" -c -l "$EfiEntryFilename" -L "rEFInd Boot Manager" -d $InstallDisk -p $PartNum \
1047                        -u "$TargetShim $TargetX64" &> /dev/null
1048       fi
1049       if [[ $? != 0 ]] ; then
1050          EfibootmgrProblems=1
1051          Problems=1
1052       fi
1053
1054    else # efibootmgr not found
1055       EfibootmgrProblems=1
1056       Problems=1
1057    fi
1058
1059    if [[ $EfibootmgrProblems ]] ; then
1060       echo
1061       echo "ALERT: There were problems running the efibootmgr program! You may need to"
1062       echo "rename the $Refind binary to the default name (EFI/boot/bootx64.efi"
1063       echo "on x86-64 systems or EFI/boot/bootia32.efi on x86 systems) to have it run!"
1064       echo
1065    else
1066       echo "rEFInd has been set as the default boot manager."
1067    fi
1068 } # AddBootEntry()
1069
1070 # Create a minimal/sample refind_linux.conf file in /boot.
1071 GenerateRefindLinuxConf() {
1072    if [[ -f "$RLConfFile" ]] ; then
1073       echo "Existing $RLConfFile found; not overwriting."
1074    else
1075       echo "Creating $RLConfFile; edit it to adjust kernel options."
1076       RootFS=`df "$RootDir" | grep dev | cut -f 1 -d " "`
1077       StartOfDevname=`echo "$RootFS" | cut -b 1-7`
1078       if [[ "$StartOfDevname" == "/dev/sd" || "$StartOfDevName" == "/dev/hd" ]] ; then
1079          # Identify root filesystem by UUID rather than by device node, if possible
1080          Uuid=`blkid -o export -s UUID "$RootFS" 2> /dev/null | grep UUID=`
1081          if [[ -n $Uuid ]] ; then
1082             RootFS="$Uuid"
1083          fi
1084       fi
1085       if [[ $RootDir == "/" ]] ; then
1086          DefaultOptions=`cat /proc/cmdline | cut -d ' ' -f 2- | sed 's/$/ /' | sed 's/initrd=.* //g' | sed 's/ *$//'`
1087       else
1088          if [[ -f "$RootDir/etc/default/grub" ]] ; then
1089             # We want the default options used by the distribution, stored here....
1090             source "$RootDir/etc/default/grub"
1091             echo "Setting default boot options based on $RootDir/etc/default/grub"
1092          fi
1093          DefaultOptions="ro root=$RootFS $GRUB_CMDLINE_LINUX $GRUB_CMDLINE_LINUX_DEFAULT"
1094       fi
1095       echo "\"Boot with standard options\"  \"$DefaultOptions\"" > $RLConfFile
1096       echo "\"Boot to single-user mode\"    \"$DefaultOptions single\"" >> $RLConfFile
1097       echo "\"Boot with minimal options\"   \"ro root=$RootFS\"" >> $RLConfFile
1098    fi
1099 }
1100
1101 # Controls rEFInd installation under Linux.
1102 # Sets Problems=1 if something goes wrong.
1103 InstallOnLinux() {
1104    if [[ "$TargetDir" == "/System/Library/CoreServices" ]] ; then
1105       echo "You may not use the --ownhfs option under Linux! Aborting!"
1106       exit 1
1107    fi
1108    echo "Installing rEFInd on Linux...."
1109    modprobe efivars &> /dev/null
1110    if [[ $TargetDir == "/EFI/BOOT" ]] ; then
1111       MountDefaultTarget
1112    else
1113       FindMountedESP
1114       DetermineTargetDir
1115    fi
1116    CpuType=`uname -m`
1117    if [[ $CpuType == 'x86_64' ]] ; then
1118       Platform="EFI64"
1119    elif [[ ($CpuType == 'i386' || $CpuType == 'i486' || $CpuType == 'i586' || $CpuType == 'i686') ]] ; then
1120       Platform="EFI32"
1121       # If we're in EFI mode, do some sanity checks, and alert the user or even
1122       # abort. Not in BIOS mode, though, since that could be used on an emergency
1123       # disc to try to recover a troubled Linux installation.
1124       if [[ -d /sys/firmware/efi ]] ; then
1125          if [[ "$ShimSource" != "none" && "$TargetDir" != "/BOOT/EFI" ]] ; then
1126             echo ""
1127             echo "CAUTION: shim does not currently supports 32-bit systems, so you should not"
1128             echo "use the --shim option to install on such systems. Aborting!"
1129             echo ""
1130             exit 1
1131          fi
1132          echo
1133          echo "CAUTION: This Linux installation uses a 32-bit kernel. 32-bit EFI-based"
1134          echo "computers are VERY RARE. If you've installed a 32-bit version of Linux"
1135          echo "on a 64-bit computer, you should manually install the 64-bit version of"
1136          echo "rEFInd. If you're installing on a Mac, you should do so from OS X. If"
1137          echo "you're positive you want to continue with this installation, answer 'Y'"
1138          echo "to the following question..."
1139          echo
1140          echo -n "Are you sure you want to continue (Y/N)? "
1141          ReadYesNo
1142          if [[ $YesNo == "Y" || $YesNo == "y" ]] ; then
1143             echo "OK; continuing with the installation..."
1144          else
1145             exit 0
1146          fi
1147       fi # in EFI mode
1148    else
1149       echo "Unknown CPU type '$CpuType'; aborting!"
1150       exit 1
1151    fi
1152
1153    if [[ $LocalKeys == 1 ]] ; then
1154       ReSignBinaries
1155    fi
1156
1157    CheckSecureBoot
1158    CopyRefindFiles
1159    if [[ "$TargetDir" != "/EFI/BOOT" && "$TargetDir" != "/EFI/Microsoft/Boot" ]] ; then
1160       AddBootEntry
1161       GenerateRefindLinuxConf
1162    fi
1163 } # InstallOnLinux()
1164
1165 #
1166 # The main part of the script. Sets a few environment variables,
1167 # performs a few startup checks, and then calls functions to
1168 # install under OS X or Linux, depending on the detected platform.
1169 #
1170 GetParams "$@"
1171 ThisDir="$( cd -P "${BASH_SOURCE%/*}" && pwd )"
1172 RefindDir="$ThisDir/refind"
1173 if [[ $UID != 0 ]] ; then
1174    echo "Not running as root; attempting to elevate privileges via sudo...."
1175    sudo "$BASH_SOURCE" "$@"
1176    if [[ $? != 0 ]] ; then
1177       echo "This script must be run as root (or using sudo). Exiting!"
1178       exit 1
1179    else
1180       exit 0
1181    fi
1182 fi
1183 CheckForFiles
1184 case "$OSTYPE" in
1185    darwin*)
1186         if [[ "$ShimSource" != "none" ]] ; then
1187            echo "The --shim option is not supported on OS X! Exiting!"
1188            exit 1
1189         fi
1190         if [[ "$LocalKeys" != 0 ]] ; then
1191            echo "The --localkeys option is not supported on OS X! Exiting!"
1192            exit 1
1193         fi
1194         InstallOnOSX $1
1195         ;;
1196    linux*)
1197         InstallOnLinux
1198         ;;
1199    *)
1200         echo "Running on unknown OS; aborting!"
1201         if [[ "$InstallToEspOnMac" == 0 ]] ; then
1202            echo "The --notesp option is not supported on Linux! Exiting!"
1203            exit 1
1204         fi
1205 esac
1206
1207 if [[ $Problems ]] ; then
1208    echo
1209    echo "ALERT:"
1210    echo "Installation has completed, but problems were detected. Review the output for"
1211    echo "error messages and take corrective measures as necessary. You may need to"
1212    echo "re-run this script or install manually before rEFInd will work."
1213    echo
1214 else
1215    echo
1216    echo "Installation has completed successfully."
1217    echo
1218 fi
1219
1220 if [[ $UnmountEsp == '1' ]] ; then
1221    echo "Unmounting install dir"
1222    umount $InstallDir
1223 fi
1224
1225 if [[ "$InstallDir" == /tmp/refind_install ]] ; then
1226 #   sleep 5
1227    rmdir "$InstallDir"
1228 fi