Kernel-Module-Blacklist/generate-kmod-blacklist-aggregate.sh
Tommy cc5ff2abeb
Split hardware vendor whitelist & whitelist wmi
Signed-off-by: Tommy <contact@tommytran.io>
2024-06-03 12:06:02 -07:00

95 lines
2.5 KiB
Bash
Executable File

#!/bin/bash
# Copyright (C) 2024 Thien Tran
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may not
# use this file except in compliance with the License. You may obtain a copy of
# the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations under
# the License.
output(){
echo -e '\e[36m'"$1"'\e[0m';
}
dataset_selection() {
output 'Which dataset do you want to generate the kmod blacklist for?'
output '1) VPS'
output '2) Bare Metal Servers'
output '3) Workstation'
output 'Insert the number of your selection:'
read -r choice
case $choice in
1 ) dataset='vps'
;;
2 ) dataset='server'
;;
3 ) dataset='workstation'
;;
* ) output 'You did not enter a valid selection.'
dataset_selection
esac
}
dataset_selection
# Combine all sample data for available
sort -u sample-data/"${dataset}"/available/* > blacklist.txt
# Combine all sample data for necessary
sort -u sample-data/vps/necessary/* > necessary.txt
# Remove blacklisted modules from the necessary list
while read -r KMOD; do
sed -i "s/^${KMOD}.*//gm" necessary.txt
done < kmod-blacklist-start
while read -r KMOD; do
sed -i "s/.*${KMOD}.*//gm" necessary.txt
done < kmod-blacklist-all
# Create the list to blacklist
while read -r KMOD; do
sed -i "s/^${KMOD}$//gm" blacklist.txt
done < necessary.txt
# Remove whitelisted modules from the blacklist
while read -r KMOD; do
sed -i "s/^${KMOD}.*//gm" blacklist.txt
done < kmod-whitelist-start
while read -r KMOD; do
sed -i "s/.*${KMOD}.*//gm" blacklist.txt
done < kmod-whitelist-all
if [ "${dataset}" != 'vps' ]; then
while read -r KMOD; do
sed -i "s/^${KMOD}.*//gm" blacklist.txt
done < kmod-whitelist-hw-vendors-start
while read -r KMOD; do
sed -i "s/.*${KMOD}.*//gm" blacklist.txt
done < kmod-whitelist-hw-vendors-all
fi
# Delete empty lines
sed -i '/^$/d' blacklist.txt
# Delete old files
rm -f etc/modprobe.d/"${dataset}"-blacklist.conf
# Create final blacklist config
while read -r KMOD; do
echo "install ${KMOD} /bin/false" >> etc/modprobe.d/"${dataset}"-blacklist.conf
done < blacklist.txt
# Cleanup
rm necessary.txt blacklist.txt