factory_reset

#!/bin/bash

set -eu -o pipefail

if [[ $(/usr/bin/id -u) -ne 0 ]]; then
  echo "This needs to run as root"
  exit 99
fi

OPT_RESET=""
OPT_COPY_PI_PASS=""
OPT_COPY_ROOT_PASS=""
OPT_COPY_WIFI=""
OPT_DEBUG=""
OPT_BOOT_RECOVERY=""
OPT_BOOT_ROOT=""
OPT_NO_REBOOT=""

    GREENFG=$(tput setaf 2      2>/dev/null )
    GREENBG=$(tput setab 2      2>/dev/null )
     BLUEFG=$(tput setaf 4      2>/dev/null )
     BLUEBG=$(tput setab 4      2>/dev/null )
LIME_YELLOW=$(tput setaf 190    2>/dev/null )
POWDER_BLUE=$(tput setaf 153    2>/dev/null )
   ORANGEFG=$(tput setaf 3      2>/dev/null )
   ORANGEBG=$(tput setab 3      2>/dev/null )
  MAGENTAFG=$(tput setaf 5      2>/dev/null )
  MAGENTABG=$(tput setab 5      2>/dev/null )
     CYANFG=$(tput setaf 6      2>/dev/null )
     CYANBG=$(tput setab 6      2>/dev/null )
      RESET=$(tput sgr0         2>/dev/null )

usage()
{
cat << EOF
usage: $0 options
Calling this script causes the rPi to reboot and factory reset. All data is lost

OPTIONS:
   --reset                 set this option to proceed with reset,
                           otherwise script will exit and do nothing
                           (mutually exclusive with --boot-to-recovery )

   --copy-pi-password      during the reset, preserve the pi user password

   --copy-root-password    during the reset, preserve the root password

   --copy-wifi             preserve the current wifi settings

   --copy-all              preserve pi, root and wifi settings

ADVANCED OPTIONS:

   --no-reboot             do everything, but don't reboot at the end, to allow
                           for inspection

POSSIBLY BROKEN OPTIONS:

   --debug                 enable debugging verbosity

   --boot-to-recovery      don't initiate reest, just reboot into the recovery
                           partition (mutually exclusive with --reset)

   --boot-to-root          boot back to rootfs (without reset)
                           this only makes any sense when in recovery

EOF

}

for ((i=1; i<=$#; i++))
do
  # echo "arg is  \"${!i}\""
  ARG="${!i}"

  case $ARG in
    --reset)
      OPT_RESET=1
    ;;

    --copy-pi-password)
      OPT_COPY_PI_PASS=1
    ;;

    --copy-root-password)
      OPT_COPY_ROOT_PASS=1
    ;;

    --copy-wifi)
      OPT_COPY_WIFI=1
    ;;

    --copy-all)
      OPT_COPY_PI_PASS=1
      OPT_COPY_ROOT_PASS=1
      OPT_COPY_WIFI=1
    ;;

    --debug)
      OPT_DEBUG=1
    ;;

    --boot-to-recovery)
      OPT_BOOT_RECOVERY=1
    ;;

    --boot-to-root)
      OPT_BOOT_ROOT=1
    ;;

    --no-reboot)
      OPT_NO_REBOOT=1
    ;;

    *)
    echo “unrecognised option: $ARG”
    echo
    usage
    exit 1

  esac
done

if [ "${OPT_RESET}" -a "${OPT_BOOT_RECOVERY}" ] ; then
    echo "${MAGENTAFG} only set one of --boot-to-recovery and --reset ${RESET}"
    echo
    usage
    exit 1
fi

if [ ! "${OPT_RESET}" ] && [ ! "${OPT_BOOT_RECOVERY}" ] &&
  [ ! "${OPT_BOOT_ROOT}" ] ; then
    echo "${ORANGEFG}set only one of --boot-to-recovery, --boot-to-root or --reset ${RESET}"
    echo
    usage
    exit 1
fi

if [ -b "/dev/mmcblk0" ]; then
  DEVICE="/dev/mmcblk0p"
elif [ -b "/dev/sda" ]; then
  DEVICE="/dev/sda"
fi

if [ -z "${DEVICE}" ]; then
  echo "${MAGENTAFG} expected /dev/mmcblk (SD card) or /dev/sda (USB disk) ${RESET}"
  echo
  exit 1
fi

ROOT_PART_PARTUUID=$(blkid -s PARTUUID -o value \
      /dev/disk/by-label/rootfs)
ROOT_PART_UUID=$(blkid -s UUID -o value \
      /dev/disk/by-label/rootfs)
RECOVERY_PART_PARTUUID=$(blkid -s PARTUUID -o value \
      /dev/disk/by-label/recoveryfs)
RECOVERY_PART_UUID=$(blkid -s UUID -o value \
      /dev/disk/by-label/recoveryfs)
P1_UUID="$(blkid -o value -s UUID ${DEVICE}1)"
P2_UUID="$(blkid -o value -s UUID ${DEVICE}2)"
P3_UUID="$(blkid -o value -s UUID ${DEVICE}3)"
P1_PARTUUID="$(blkid -o value -s PARTUUID ${DEVICE}1)"
P2_PARTUUID="$(blkid -o value -s PARTUUID ${DEVICE}2)"
P3_PARTUUID="$(blkid -o value -s PARTUUID ${DEVICE}3)"
mkdir -p /mnt/recoveryfs
mkdir -p /mnt/rootfs

echo "factory restore script - resetting"

sleep 2

if [ "${OPT_BOOT_ROOT}" ] ; then
  echo "booting to rootfs"

    mount /dev/disk/by-label/rootfs /mnt/rootfs  || \
      { [ $? -eq 32 ] && echo "already mounted" || \
          { echo "some other error" ;  exit 99 ;}  }

    fstab_file=/mnt/rootfs/etc/fstab


    # @TODO this is repeated in a bunch of places, put in libs somewhere?
    # check that /boot device mount was a partuuid
    if egrep '^PARTUUID=' "$fstab_file" | grep '/boot' ; then
      echo "${ORANGEFG}/boot was a PARTUUID${RESET}"
      sed -i -E "s|^PARTUUID=([^[:space:]]+)[[:space:]]+/boot([[:space:]]+)(.*)|PARTUUID=${P1_PARTUUID}      /boot     \3|" "$fstab_file"
      fixed_boot=1
    fi

    # check that /boot device mount was a uuid
    if egrep '^UUID=' "$fstab_file" | grep '/boot' ; then
      echo "${ORANGEFG}/boot was a UUID${RESET}"
      sed -i -E "s|^UUID=([^[:space:]]+)[[:space:]]+/boot([[:space:]]+)(.*)|UUID=${P1_UUID}      /boot     \3|" "$fstab_file"
      fixed_boot=1
    fi

    # check that / device mount was a partuuid
    if egrep '^PARTUUID=' "$fstab_file" | egrep '[[:space:]]/[[:space:]]' ; then
      echo "/ was a PARTUUID"
      sed -i -E "s|^PARTUUID=([^[:space:]]+)[[:space:]]+/([[:space:]]+)(.*)|PARTUUID=${P3_PARTUUID}      /     \3|" "$fstab_file"
      fixed_root=1
    fi

    # check that / device mount was a uuid
    if egrep '^UUID=' "$fstab_file" | egrep '[[:space:]]/[[:space:]]' ; then
      echo "/ was a UUID"
      sed -i -E "s|^UUID=([^[:space:]]+)[[:space:]]+/([[:space:]]+)(.*)|UUID=${P3_UUID}      /     \3|" "$fstab_file"
      fixed_root=1
    fi


  if grep 'root=PARTUUID' /boot/cmdline.txt; then
    sed -i -E "s|(root=PARTUUID)=([^[:space:]]+)|root=PARTUUID=$ROOT_PART_PARTUUID|" \
          /boot/cmdline.txt
  elif grep 'root=UUID' /boot/cmdline.txt; then
    sed -i -E "s|(root=UUID)=([^[:space:]]+)|root=UUID=$ROOT_PART_UUID|" \
          /boot/cmdline.txt
  else
    echo "unable to find UUID or PARTUUID in cmdline.txt"
    echo "current cmdline.txt is"
    cat /boot/cmdline.txt
    exit 99
  fi

  # sed -i "s/init=[^[:space:]]*//"  /boot/cmdline.txt

  if [ ! "${OPT_NO_REBOOT}" ] ; then
    umount -f /mnt/rootfs || true
    cat /boot/cmdline.txt
    echo "rebooting in 10..."
    sleep 10
    reboot
  fi

  exit 0
fi

if [ "${OPT_BOOT_RECOVERY}" ] || [ "${OPT_RESET}" ] ; then
  echo "booting to recoveryfs"

    mount /dev/disk/by-label/recoveryfs /mnt/recoveryfs  || \
      { [ $? -eq 32 ] && echo "already mounted" || \
          { echo "some other error" ;  exit 99 ;}  }

    P1_UUID="$(blkid -o value -s UUID ${DEVICE}1)"
    P2_UUID="$(blkid -o value -s UUID ${DEVICE}2)"
    P1_PARTUUID="$(blkid -o value -s PARTUUID ${DEVICE}1)"
    P2_PARTUUID="$(blkid -o value -s PARTUUID ${DEVICE}2)"

    fstab_file=/mnt/recoveryfs/etc/fstab

    # @TODO this is repeated in a bunch of places, put in libs somewhere?
    # check that /boot device mount was a partuuid
    if egrep '^PARTUUID=' "$fstab_file" | grep '/boot' ; then
      echo "${ORANGEFG}/boot was a PARTUUID${RESET}"
      sed -i -E "s|^PARTUUID=([^[:space:]]+)[[:space:]]+/boot([[:space:]]+)(.*)|PARTUUID=${P1_PARTUUID}      /boot     \3|" "$fstab_file"
      fixed_boot=1
    fi

    # check that /boot device mount was a uuid
    if egrep '^UUID=' "$fstab_file" | grep '/boot' ; then
      echo "${ORANGEFG}/boot was a UUID${RESET}"
      sed -i -E "s|^UUID=([^[:space:]]+)[[:space:]]+/boot([[:space:]]+)(.*)|UUID=${P1_UUID}      /boot     \3|" "$fstab_file"
      fixed_boot=1
    fi

    # check that / device mount was a partuuid
    if egrep '^PARTUUID=' "$fstab_file" | egrep '[[:space:]]/[[:space:]]' ; then
      echo "/ was a PARTUUID"
      sed -i -E "s|^PARTUUID=([^[:space:]]+)[[:space:]]+/([[:space:]]+)(.*)|PARTUUID=${P2_PARTUUID}      /     \3|" "$fstab_file"
      fixed_root=1
    fi

    # check that / device mount was a uuid
    if egrep '^UUID=' "$fstab_file" | egrep '[[:space:]]/[[:space:]]' ; then
      echo "/ was a UUID"
      sed -i -E "s|^UUID=([^[:space:]]+)[[:space:]]+/([[:space:]]+)(.*)|UUID=${P2_UUID}      /     \3|" "$fstab_file"
      fixed_root=1
    fi

  [ ! "${OPT_NO_REBOOT}" ] && umount -f /mnt/recoveryfs || true

fi

if [ "${OPT_BOOT_RECOVERY}" ] || [ "${OPT_RESET}" ] ; then

  echo "show current cmdline.txt"
  cat /boot/cmdline.txt
  echo ""

  if grep 'root=PARTUUID' /boot/cmdline.txt; then
    sed -i -E "s|(root=PARTUUID)=([^[:space:]]+)|root=PARTUUID=$RECOVERY_PART_PARTUUID|" \
          /boot/cmdline.txt
  elif grep 'root=UUID' /boot/cmdline.txt; then
    sed -i -E "s|(root=UUID)=([^[:space:]]+)|root=UUID=$RECOVERY_PART_UUID|" \
          /boot/cmdline.txt
  else
    echo "unable to find UUID or PARTUUID in cmdline.txt"
    echo "current cmdline.txt is"
    cat /boot/cmdline.txt
    exit 99
  fi

fi

if [ "${OPT_BOOT_RECOVERY}" ] ; then
    echo "rebooting to recovery - not resetting"

    cat /boot/cmdline.txt
    touch /boot/ssh

    if [ ! "${OPT_NO_REBOOT}" ] ; then
      umount -f /mnt/rootfs || true
      cat /boot/cmdline.txt
      echo "rebooting in 10..."
      sleep 10
      reboot
    fi

    exit 0
fi


if [ "${OPT_RESET}" ] ; then
    echo "resetting"

    # remove init option if we are still pre-resize mode. this would have to
    # be done manually from raspi-config after this...
    sed -i "s/init=[^[:space:]]*//g"  /boot/cmdline.txt

    # add resize init script to end of boot option
    echo "$(cat /boot/cmdline.txt) init=/usr/lib/raspi-config/init_restore.sh" > /boot/cmdline.txt_tmp
    cp -f /boot/cmdline.txt_tmp /boot/cmdline.txt

    echo "show current cmdline.txt"
    cat /boot/cmdline.txt
    echo ""

    [[ "${OPT_COPY_PI_PASS}" ]] && {
      echo "copy pi pass is set"
      cat /etc/shadow | egrep '^pi' | awk -F: '{print $2}' > /boot/restore_pi_pass
      echo "value of pi pass"
      cat /boot/restore_pi_pass
    }

    [[ "${OPT_COPY_ROOT_PASS}" ]] && {
      echo "copy root pass is set"
      cat /etc/shadow | egrep '^root' | awk -F: '{print $2}' > /boot/restore_root_pass
      echo "value of root pass"
      cat /boot/restore_root_pass
    }

    [[ "${OPT_COPY_WIFI}" ]] && {
      echo "copy wifi settings is set"
      if [ -f /etc/wpa_supplicant/wpa_supplicant.conf ] ; then
        echo "wpa file exists"
        cp /etc/wpa_supplicant/wpa_supplicant.conf \
            /boot/wpa_supplicant.conf

        echo "current contents of wpa_supplicant in /boot"
        cat /boot/wpa_supplicant.conf
      fi
    }

cat <<EOF
OPT_COPY_PI_PASS=${OPT_COPY_PI_PASS}
OPT_COPY_ROOT_PASS=${OPT_COPY_ROOT_PASS}
OPT_COPY_WIFI=${OPT_COPY_WIFI}
EOF


    if [ ! "${OPT_NO_REBOOT}" ] ; then
      cat /boot/cmdline.txt
      echo "rebooting in 10..."
      sleep 10
      reboot
    fi
fi