mirror of
https://github.com/TommyTran732/Kernel-Module-Blacklist.git
synced 2025-02-22 20:49:14 +01:00
114 lines
3.0 KiB
Bash
Executable File
114 lines
3.0 KiB
Bash
Executable File
#!/bin/bash
|
|
|
|
# Copyright (C) 2024 Thien Tran
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License"); you may not
|
|
# use this file except in compliance with the License. You may obtain a copy of
|
|
# the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
|
|
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
|
|
# License for the specific language governing permissions and limitations under
|
|
# the License.
|
|
|
|
set -eu
|
|
|
|
output(){
|
|
printf '\e[1;34m%-6s\e[m\n' "${@}"
|
|
}
|
|
|
|
dataset_selection() {
|
|
output 'Which dataset do you want to generate the kmod blacklist for?'
|
|
output '1) VPS'
|
|
output '2) Bare Metal Servers'
|
|
output '3) Workstation'
|
|
output 'Insert the number of your selection:'
|
|
read -r choice
|
|
case $choice in
|
|
1 ) dataset='vps'
|
|
;;
|
|
2 ) dataset='server'
|
|
;;
|
|
3 ) dataset='workstation'
|
|
;;
|
|
* ) output 'You did not enter a valid selection.'
|
|
dataset_selection
|
|
esac
|
|
}
|
|
|
|
dataset_selection
|
|
|
|
# Combine all sample data for available
|
|
sort -u sample-data/"${dataset}"/available/* > blacklist.txt
|
|
|
|
# Combine all sample data for necessary
|
|
sort -u sample-data/"${dataset}"/necessary/* > necessary.txt
|
|
|
|
# Remove blacklisted modules from the necessary list
|
|
|
|
while read -r KMOD; do
|
|
sed -i "s/^${KMOD}.*//gm" necessary.txt
|
|
done < kmod-blacklist-start
|
|
|
|
while read -r KMOD; do
|
|
sed -i "s/.*${KMOD}.*//gm" necessary.txt
|
|
done < kmod-blacklist-all
|
|
|
|
# Create the list to blacklist
|
|
while read -r KMOD; do
|
|
sed -i "s/^${KMOD}$//gm" blacklist.txt
|
|
done < necessary.txt
|
|
|
|
# Remove whitelisted modules from the blacklist
|
|
|
|
while read -r KMOD; do
|
|
sed -i "s/^${KMOD}.*//gm" blacklist.txt
|
|
done < kmod-whitelist-start
|
|
|
|
while read -r KMOD; do
|
|
sed -i "s/.*${KMOD}.*//gm" blacklist.txt
|
|
done < kmod-whitelist-all
|
|
|
|
# Only apply vendor whitelist for non VPS installations
|
|
if [ "${dataset}" != 'vps' ]; then
|
|
while read -r KMOD; do
|
|
sed -i "s/^${KMOD}.*//gm" blacklist.txt
|
|
done < kmod-whitelist-bare-metal-start
|
|
|
|
while read -r KMOD; do
|
|
sed -i "s/.*${KMOD}.*//gm" blacklist.txt
|
|
done < kmod-whitelist-bare-metal-all
|
|
fi
|
|
|
|
# Apply whitelist for workstation
|
|
if [ "${dataset}" = 'workstation' ]; then
|
|
while read -r KMOD; do
|
|
sed -i "s/^${KMOD}.*//gm" blacklist.txt
|
|
done < kmod-whitelist-workstation-start
|
|
|
|
while read -r KMOD; do
|
|
sed -i "s/.*${KMOD}.*//gm" blacklist.txt
|
|
done < kmod-whitelist-workstation-all
|
|
fi
|
|
|
|
# Reapply blacklists that got removed by the whitelist section
|
|
while read -r KMOD; do
|
|
echo "${KMOD}" >> blacklist.txt
|
|
done < kmod-blacklist-reapply
|
|
|
|
# Delete empty lines
|
|
sed -i '/^$/d' blacklist.txt
|
|
|
|
# Delete old files
|
|
rm -f etc/modprobe.d/"${dataset}"-blacklist.conf
|
|
|
|
# Create final blacklist config
|
|
while read -r KMOD; do
|
|
echo "install ${KMOD} /bin/false" >> etc/modprobe.d/"${dataset}"-blacklist.conf
|
|
done < blacklist.txt
|
|
|
|
# Cleanup
|
|
rm necessary.txt blacklist.txt |