#!/bin/bash

set -ex

# uncomment for better debug messages
#set -x
#exec > /tmp/mk-classic-rootfs.sh.log
#exec 2>&1

# tests/nested/manual/fde-on-classic/mk-image.sh (PR:12102)
prepare_classic_rootfs() {
    set -x
    local DESTDIR="$1"
    local ROLE="$2"

    if [ "$ROLE" = "" ]; then
        echo "internal error: prepare_classic_rootfs called without 'ROLE'"
        exit 1
    fi

    # Create basic devices to be able to install packages
    [ -e "$DESTDIR"/dev/null ] || sudo mknod -m 666 "$DESTDIR"/dev/null c 1 3
    [ -e "$DESTDIR"/dev/zero ] || sudo mknod -m 666 "$DESTDIR"/dev/zero c 1 5
    [ -e "$DESTDIR"/dev/random ] || sudo mknod -m 666 "$DESTDIR"/dev/random c 1 8
    [ -e "$DESTDIR"/dev/urandom ] || sudo mknod -m 666 "$DESTDIR"/dev/urandom c 1 9

    if [ "$ROLE" = spread ]; then
    # ensure the proxy and resolv configuration is set inside the chroot
        if [ "${SNAPD_USE_PROXY:-}" = true ]; then
            cp /etc/resolv.conf "$DESTDIR"/etc/resolv.conf
            cp /etc/environment "$DESTDIR"/etc/environment
        else
            echo "nameserver 8.8.8.8" | sudo tee -a "$DESTDIR"/etc/resolv.conf
        fi

        # install additional packages
        sudo chroot "$DESTDIR" /usr/bin/sh -c "DEBIAN_FRONTEND=noninteractive apt update"
        local pkgs="snapd ssh openssh-server sudo iproute2 iputils-ping isc-dhcp-client netplan.io vim-tiny kmod cloud-init cryptsetup systemd-timesyncd"
        sudo chroot "$DESTDIR" /usr/bin/sh -c \
             "DEBIAN_FRONTEND=noninteractive apt install --no-install-recommends -y $pkgs"
        # netplan config
        cat <<'EOF' | sudo tee "$DESTDIR"/etc/netplan/00-ethernet.yaml
network:
  ethernets:
    any:
      match:
        name: e*
      dhcp4: true
  version: 2
EOF
        # set password for root user
        sudo chroot "$DESTDIR" /usr/bin/sh -c 'echo root:root | chpasswd'
        sudo mkdir -p "$DESTDIR/etc/ssh"
        sudo tee -a "$DESTDIR/etc/ssh/sshd_config" <<'EOF'
PermitRootLogin yes
PasswordAuthentication yes
EOF

	# install the current in-development version of snapd when available,
	# this will give us seeding support
	#
	# TODO: find a better way to do this?
	GOPATH="${GOPATH:-/var/lib/snapd}"
	package=$(find "$GOPATH" -maxdepth 1 -name "snapd_*.deb")
	if [ -e "$package"  ]; then
            cp "$package" "$DESTDIR"/var/cache/apt/archives
            sudo chroot "$DESTDIR" /usr/bin/sh -c \
		 "DEBIAN_FRONTEND=noninteractive apt install -y /var/cache/apt/archives/$(basename "$package")"
	fi
    fi

    # ensure we can login.
    sudo chroot "$DESTDIR" /usr/sbin/adduser --disabled-password --gecos "" user1
    # since when booting into recovery mode, we import users from the host
    # system that are in the sudo and admin groups, we make sure to add our user
    # to the sudo group.
    sudo chroot "$DESTDIR" /usr/sbin/adduser user1 sudo
    printf "ubuntu\nubuntu\n" | sudo chroot "$DESTDIR" /usr/bin/passwd user1
    echo "user1 ALL=(ALL) NOPASSWD:ALL" | sudo tee -a "$DESTDIR"/etc/sudoers

    # ensure that we have a mount point for the bind mount below
    sudo mkdir -p "$DESTDIR"/boot/grub
    # This is done by the the-modeenv script that is called by the
    # populate-writable service from initramfs on UC20+, but we don't
    # run it on classic.
    sudo tee -a "$DESTDIR/etc/fstab" <<'EOF'
/run/mnt/ubuntu-boot/EFI/ubuntu /boot/grub none bind
EOF
}

# get target dir from user
DST="$1"
if [ ! -d "$DST" ]; then
    echo "target dir $DST is not a directory"
    exit 1
fi

# This script is either used as part of an installer image which will have
# a "base.squashfs". Here very little additional setup is needed or as part
# of a spread test in which case the installer needs to prepare the system
# to be used from spread. The "ROLE" var will be set accordingly so that
# the "prepare_classic_rootfs" knows what to do.
ROLE=""
if [ -f /cdrom/casper/base.squashfs ]; then
    sudo unsquashfs -f -d "$DST" /cdrom/casper/base.squashfs
    # TODO: find out why the squashfs is preseeded
    /usr/lib/snapd/snap-preseed --reset "$DST"
    ROLE=installer
else
    BASETAR=ubuntu-base.tar.gz
    # important to use "-q" to avoid journalctl suppressing  log output
    release=$(lsb_release -r -s)
    case "$release" in
        22.04)
            pointrel=.4
            ;;
        24.04)
            pointrel=.3
            ;;
        *)
            pointrel=
            ;;
    esac
    wget -q -c http://cdimage.ubuntu.com/ubuntu-base/releases/"$release"/release/ubuntu-base-"$release""$pointrel"-base-amd64.tar.gz -O "$BASETAR"
    sudo tar -C "$DST" -xf "$BASETAR"
    ROLE=spread
fi

# create minimal rootfs
prepare_classic_rootfs "$DST" "$ROLE"
