forked from grahampugh/erase-install
-
Notifications
You must be signed in to change notification settings - Fork 0
/
Copy patherase-install.sh
executable file
·2898 lines (2647 loc) · 132 KB
/
erase-install.sh
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
989
990
991
992
993
994
995
996
997
998
999
1000
#!/bin/bash
# shellcheck disable=SC2001
# this is to use sed in the case statements
# shellcheck disable=SC2034
# this is due to the dynamic variable assignments used in the localization strings
:<<DOC
==============================================================================
erase-install.sh
==============================================================================
by Graham Pugh
WARNING. This is a self-destruct script. Do not try it out on your own device!
See README.md and the GitHub repo's Wiki for details on use.
It is recommended to use the package installer of this script. It contains
swiftDialog and mist, which are required for most of the use-cases of this script.
This script can, however, also be run standalone.
It will download and install swiftDialog if needed and not found.
It will also download mist if it is not found.
Suppress the downloads with the --no-curl option.
Requirements:
- macOS 12.4+
- macOS 10.13.4+ (for --erase option)
- macOS 10.15+ (for --fetch-full-installer option, and for mist)
- macOS 11+ (for dialogs)
- Device file system is APFS
DOC
# =============================================================================
# Variables
# =============================================================================
# script name
script_name="erase-install"
pkg_label="com.github.grahampugh.erase-install"
# Version of this script
version="28.0"
# Directory in which to place the macOS installer. Overridden with --path
installer_directory="/Applications"
# Default working directory (may be overridden by the --workdir parameter)
workdir="/Library/Management/erase-install"
# Default logdir
logdir="/Library/Management/erase-install/log"
# mist tool
mist_bin="/usr/local/bin/mist"
mist_export_file="$workdir/mist-list.json"
# URL for downloading dialog (with tag version)
# This ensures a compatible dialog is used if not using the package installer
mist_download_url="https://github.com/ninxsoft/mist-cli/releases/download/v1.10/mist-cli.1.10.pkg"
# swiftDialog tool
dialog_app="/Library/Application Support/Dialog/Dialog.app"
dialog_bin="/usr/local/bin/dialog"
dialog_log="/var/tmp/dialog.log"
dialog_output="/var/tmp/dialog.json"
# swiftDialog icons
# dialog_dl_icon="/System/Library/CoreServices/CoreTypes.bundle/Contents/Resources/SidebarDownloadsFolder.icns"
# dialog_dl_icon="/System/Library/CoreServices/CoreTypes.bundle/Contents/Resources/GenericNetworkIcon.icns"
# dialog_dl_icon="SF=applelogo,colour=gray"
dialog_dl_icon="/System/Library/PrivateFrameworks/SoftwareUpdate.framework/Versions/A/Resources/SoftwareUpdate.icns"
# dialog_confirmation_icon="/System/Library/CoreServices/CoreTypes.bundle/Contents/Resources/AlertStopIcon.icns"
dialog_confirmation_icon="/System/Applications/System Settings.app"
dialog_warning_icon="SF=xmark.circle,colour=red"
# URL for downloading dialog (with tag version)
# This ensures a compatible dialog is used if not using the package installer
dialog_download_url="https://github.com/bartreardon/swiftDialog/releases/download/v2.0.1/dialog-2.0.1-3814.pkg"
# default app and package names for mist
default_downloaded_app_name="Install %NAME%.app"
default_downloaded_pkg_name="InstallAssistant-%VERSION%-%BUILD%.pkg"
default_downloaded_pkg_id="com.apple.InstallAssistant.%VERSION%.%BUILD%.pkg"
# =============================================================================
# Functions
# functions are listed alphabetically
# =============================================================================
# -----------------------------------------------------------------------------
# Open a dialog window to ask for the user's username and password.
# This is required on Apple Silicon Mac
# -----------------------------------------------------------------------------
ask_for_credentials() {
# set the dialog command arguments
get_default_dialog_args "utility"
dialog_args=("${default_dialog_args[@]}")
dialog_args+=(
"--title"
"${dialog_window_title}"
"--icon"
"${dialog_confirmation_icon}"
"--overlayicon"
"SF=person.badge.key.fill,colour=grey"
"--iconsize"
"128"
"--textfield"
"Username,prompt=$current_user"
"--textfield"
"Password,secure"
"--button1text"
"Continue"
)
if [[ "$erase" == "yes" ]]; then
dialog_args+=(
"--message"
"${!dialog_erase_credentials}"
)
else
dialog_args+=(
"--message"
"${!dialog_reinstall_credentials}"
)
fi
if [[ $max_password_attempts != "infinite" ]]; then
dialog_args+=("-2")
fi
# run the dialog command
"$dialog_bin" "${dialog_args[@]}" > "$dialog_output"
}
# -----------------------------------------------------------------------------
# Download dialog if not present and not --silent mode
# -----------------------------------------------------------------------------
check_for_dialog_app() {
if [[ -d "$dialog_app" && -f "$dialog_bin" ]]; then
writelog "[check_for_dialog_app] dialog is installed ($dialog_app)"
else
if [[ ! $no_curl ]]; then
writelog "[check_for_dialog_app] Downloading dialog..."
if /usr/bin/curl -L "$dialog_download_url" -o "$workdir/dialog.pkg" ; then
if ! installer -pkg "$workdir/dialog.pkg" -target / ; then
writelog "[check_for_dialog_app] dialog installation failed"
fi
else
writelog "[check_for_dialog_app] dialog download failed"
fi
fi
# check it did actually get downloaded
if [[ -d "$dialog_app" && -f "$dialog_bin" ]]; then
writelog "[check_for_dialog_app] dialog is installed"
# quit an existing window
writelog "[check_for_dialog_app] Sending to dialog: quit:"
echo "quit:" >> "$dialog_log"
else
writelog "[check_for_dialog_app] Could not download dialog."
fi
fi
}
# -----------------------------------------------------------------------------
# Download mist if not present and not --silent mode
# -----------------------------------------------------------------------------
check_for_mist() {
if [[ -f "$mist_bin" ]]; then
writelog "[check_for_mist] mist is installed ($mist_bin)"
else
if [[ ! $no_curl ]]; then
writelog "[check_for_mist] Downloading mist-cli..."
if /usr/bin/curl -L "$mist_download_url" -o "$workdir/mist-cli.pkg" ; then
if ! installer -pkg "$workdir/mist-cli.pkg" -target / ; then
writelog "[check_for_mist] mist installation failed"
fi
else
writelog "[check_for_mist] mist download failed"
fi
fi
# check it did actually get downloaded
if [[ -f "$mist_bin" ]]; then
writelog "[check_for_mist] mist is installed"
else
writelog "[check_for_mist] Could not download dialog."
fi
fi
}
# -----------------------------------------------------------------------------
# Determine if the amount of free and purgable drive space is sufficient for
# the upgrade to take place.
# The JavaScript osascript is used to give us the purgeable space as this is
# not available via any shell commands (Thanks to Pico).
# However, this does not work at the login window, so then we have to fall
# back to using df -h, which will not include purgeable space.
# -----------------------------------------------------------------------------
check_free_space() {
free_disk_space=$(osascript -l 'JavaScript' -e "ObjC.import('Foundation'); var freeSpaceBytesRef=Ref(); $.NSURL.fileURLWithPath('/').getResourceValueForKeyError(freeSpaceBytesRef, 'NSURLVolumeAvailableCapacityForImportantUsageKey', null); Math.round(ObjC.unwrap(freeSpaceBytesRef[0]) / 1000000000)")
if [[ ! "$free_disk_space" ]] || [[ "$free_disk_space" == 0 ]]; then
# fall back to df -h if the above fails
free_disk_space=$(df -Pk . | column -t | sed 1d | awk '{print $4}' | xargs -I{} expr {} / 1000000)
fi
# if there isn't enough space, then we show a failure message to the user
if [[ $free_disk_space -ge $min_drive_space ]]; then
writelog "[check_free_space] OK - $free_disk_space GB free/purgeable disk space detected"
elif [[ ! $silent ]]; then
writelog "[check_free_space] ERROR - $free_disk_space GB free/purgeable disk space detected"
echo
exit 1
else
writelog "[check_free_space] ERROR - $free_disk_space GB free/purgeable disk space detected"
# set the dialog command arguments
get_default_dialog_args "utility"
dialog_args=("${default_dialog_args[@]}")
dialog_args+=(
"--title"
"${!dialog_window_title}"
"--icon"
"${dialog_confirmation_icon}"
"--iconsize"
"128"
"--overlayicon"
"SF=externaldrive.fill.badge.exclamationmark,colour=red"
"--message"
"${!dialog_check_desc}"
"--button1text"
"${!dialog_cancel_button}"
)
# run the dialog command
"$dialog_bin" "${dialog_args[@]}"
exit 1
fi
}
# -----------------------------------------------------------------------------
# Check the installer validity.
# The Build number in the app Info.plist is often older than the advertised
# build number, so it's not a great check for checking the validity of the installer
# if we are running --erase, where we might want to be using the same build.
# Since macOS 11, the actual build number is found in the SharedSupport.dmg in
# com_apple_MobileAsset_MacSoftwareUpdate.xml.
# For older OSs we include a fallback to the older, less accurate
# Info.plist file.
# -----------------------------------------------------------------------------
check_installer_is_valid() {
writelog "[check_installer_is_valid] Checking validity of $cached_installer_app."
# first ensure that an installer is not still mounted from a previous run as it might
# interfere with the check
[[ -d "/Volumes/Shared Support" ]] && diskutil unmount force "/Volumes/Shared Support"
# now attempt to mount the installer and grab the build number from
# com_apple_MobileAsset_MacSoftwareUpdate.xml
if [[ -f "$cached_installer_app/Contents/SharedSupport/SharedSupport.dmg" ]]; then
if hdiutil attach -quiet -noverify -nobrowse "$cached_installer_app/Contents/SharedSupport/SharedSupport.dmg" ; then
writelog "[check_installer_is_valid] Mounting $cached_installer_app/Contents/SharedSupport/SharedSupport.dmg"
sleep 1
build_xml="/Volumes/Shared Support/com_apple_MobileAsset_MacSoftwareUpdate/com_apple_MobileAsset_MacSoftwareUpdate.xml"
if [[ -f "$build_xml" ]]; then
writelog "[check_installer_is_valid] Using Build value from com_apple_MobileAsset_MacSoftwareUpdate.xml"
installer_build=$(/usr/libexec/PlistBuddy -c "Print :Assets:0:Build" "$build_xml")
sleep 1
diskutil unmount force "/Volumes/Shared Support"
else
writelog "[check_installer_is_valid] ERROR: com_apple_MobileAsset_MacSoftwareUpdate.xml not found. Check the mount point at /Volumes/Shared Support"
fi
else
writelog "[check_installer_is_valid] Mounting SharedSupport.dmg failed"
fi
else
# if that fails, fallback to the method for 10.15 or less, which is less accurate
writelog "[check_installer_is_valid] Using DTSDKBuild value from Info.plist"
if [[ -f "$cached_installer_app/Contents/Info.plist" ]]; then
installer_build=$( /usr/bin/defaults read "$cached_installer_app/Contents/Info.plist" DTSDKBuild )
else
writelog "[check_installer_is_valid] Installer Info.plist could not be found!"
fi
fi
# bail out if we did not obtain a build number
if [[ $installer_build ]]; then
# compare the local system's build number with that of the installer app
compare_build_versions "$system_build" "$installer_build"
if [[ $first_build_major_newer == "yes" || $first_build_minor_newer == "yes" ]]; then
writelog "[check_installer_is_valid] Installer: $installer_build < System: $system_build : invalid build."
invalid_installer_found="yes"
elif [[ $first_build_patch_newer == "yes" ]]; then
writelog "[check_installer_is_valid] Installer: $installer_build < System: $system_build : build might work but if it fails, please obtain a newer installer."
warning_issued="yes"
invalid_installer_found="no"
else
writelog "[check_installer_is_valid] Installer: $installer_build >= System: $system_build : valid build."
invalid_installer_found="no"
fi
else
writelog "[check_installer_is_valid] Build of existing installer could not be found, so it is assumed to be invalid."
invalid_installer_found="yes"
fi
working_macos_app="$cached_installer_app"
}
# -----------------------------------------------------------------------------
# Check the validity of an installer pkg.
# packages generated by mist using this script have the name
# InstallAssistant-VERSION-BUILD.pkg
# Extracting an actual version from the package is slow as the entire package
# must be unpackaged to read the PackageInfo file, so we just grab it from the
# filename instead, as mist already did the check.
# -----------------------------------------------------------------------------
check_installer_pkg_is_valid() {
writelog "[check_installer_pkg_is_valid] Checking validity of $cached_installer_pkg."
installer_pkg_build=$( basename "$cached_installer_pkg" | sed 's|.pkg||' | cut -d'-' -f 3 )
# compare the local system's build number with that of InstallAssistant.pkg
compare_build_versions "$system_build" "$installer_pkg_build"
if [[ $first_build_newer == "yes" ]]; then
writelog "[check_installer_pkg_is_valid] Installer: $installer_pkg_build < System: $system_build : invalid build."
working_installer_pkg="$cached_installer_pkg"
invalid_installer_found="yes"
else
writelog "[check_installer_pkg_is_valid] Installer: $installer_pkg_build >= System: $system_build : valid build."
working_installer_pkg="$cached_installer_pkg"
invalid_installer_found="no"
fi
}
# -----------------------------------------------------------------------------
# Check that a newer installer is available.
# Used with --update.
# This requires mist, so we first check if this is on the system and download
# if not.
# We are using mist to list all available installers, with
# options for different catalogs and seeds, and whether to include betas or
# not.
# -----------------------------------------------------------------------------
check_newer_available() {
# Download mist if not present
check_for_mist
# now clear the variables and build the download command
mist_args=()
mist_args+=("list")
mist_args+=("installer")
if [[ $prechosen_version ]]; then
writelog "[check_newer_available] Checking that selected version $prechosen_version is available"
mist_args+=("$prechosen_version")
elif [[ $prechosen_os ]]; then
writelog "[check_newer_available] Restricting to selected OS $prechosen_os"
mist_args+=("$prechosen_os")
fi
mist_args+=("--compatible")
mist_args+=("--latest")
# set alternative catalog if selected
if [[ $catalogurl ]]; then
writelog "[check_newer_available] Non-standard catalog URL selected"
mist_args+=("--catalog-url")
mist_args+=("$catalogurl")
elif [[ $catalog ]]; then
darwin_version=$(get_darwin_from_os_version "$catalog")
get_catalog
writelog "[check_newer_available] Non-default catalog selected (darwin version $darwin_version)"
mist_args+=("--catalog-url")
mist_args+=("${catalogs[$darwin_version]}")
fi
# include betas if selected
if [[ $beta == "yes" ]]; then
writelog "[check_newer_available] Beta versions included"
mist_args+=("--include-betas")
fi
# run mist with --list and then interrogate the plist
if ! "$mist_bin" "${mist_args[@]}" ; then
newer_build_found="no"
if [[ -f "$mist_export_file" ]]; then
available_build=$( ljt 0.build "$mist_export_file" 2>/dev/null )
if [[ "$available_build" ]]; then
echo "Comparing latest build found ($available_build) with cached installer build ($installer_build)"
compare_build_versions "$available_build" "$installer_build"
if [[ "$first_build_newer" == "yes" ]]; then
newer_build_found="yes"
fi
fi
else
writelog "[check_newer_available] ERROR reading output from mist, cannot continue"
exit 1
fi
if [[ "$newer_build_found" == "no" ]]; then
writelog "[check_newer_available] No newer builds found"
fi
else
writelog "[check_newer_available] ERROR running mist, cannot continue"
exit 1
fi
}
# -----------------------------------------------------------------------------
# Check that the password entered matches the actual password.
# The password is required on Apple Silicon Mac (Thanks to Dan Snelson).
# -----------------------------------------------------------------------------
check_password() {
user="$1"
password="$2"
password_matches=$( /usr/bin/dscl /Search -authonly "$user" "$password" )
if [[ -z "$password_matches" ]]; then
writelog "[check_password] Success: the password entered is the correct login password for $user."
password_check="pass"
else
writelog "[check_password] ERROR: The password entered is NOT the login password for $user."
password_check="fail"
/usr/bin/afplay "/System/Library/Sounds/Basso.aiff"
fi
}
# -----------------------------------------------------------------------------
# Check if device is on battery or AC power.
# If not, and our power_wait_timer is above 1, allow user to connect to power
# for the specified time period.
# Acknowledgements: https://github.com/kc9wwh/macOSUpgrade/blob/master/macOSUpgrade.sh
# -----------------------------------------------------------------------------
check_power_status() {
# default power_wait_timer to 60 seconds
if [[ ! $power_wait_timer ]]; then
power_wait_timer=60
fi
if /usr/bin/pmset -g ps | /usr/bin/grep "AC Power" > /dev/null ; then
writelog "[check_power_status] OK - AC power detected"
elif [[ $silent ]]; then
writelog "[wait_for_power] ERROR - No AC power detected, cannot continue."
echo
exit 1
else
writelog "[check_power_status] WARNING - No AC power detected"
# set the dialog command arguments
get_default_dialog_args "utility"
dialog_args=("${default_dialog_args[@]}")
# original icon: ${dialog_confirmation_icon}
dialog_args+=(
"--title"
"${!dialog_power_title}"
"--icon"
"${dialog_confirmation_icon}"
"--overlayicon"
"SF=powerplug.fill,colour=red"
"--iconsize"
"128"
"--message"
"${!dialog_power_desc}"
"--timer"
"${power_wait_timer}"
)
# run the dialog command
"$dialog_bin" "${dialog_args[@]}" & sleep 0.1
# now count down while checking for power
while [[ "$power_wait_timer" -gt 0 ]]; do
if /usr/bin/pmset -g ps | /usr/bin/grep "AC Power" > /dev/null ; then
writelog "[check_power_status] OK - AC power detected"
# quit dialog
writelog "[check_power_status] Sending to dialog: quit:"
/bin/echo "quit:" >> "$dialog_log"
return
fi
sleep 1
((power_wait_timer--))
done
# quit dialog
writelog "[check_power_status] Sending to dialog: quit:"
/bin/echo "quit:" >> "$dialog_log"
# set the dialog command arguments
get_default_dialog_args "utility"
dialog_args=("${default_dialog_args[@]}")
dialog_args+=(
"--title"
"${!dialog_power_title}"
"--icon"
"${dialog_confirmation_icon}"
"--iconsize"
"128"
"--overlayicon"
"SF=powerplug.fill,colour=red"
"--message"
"${!dialog_nopower_desc}"
)
# run the dialog command
"$dialog_bin" "${dialog_args[@]}"
writelog "[wait_for_power] ERROR - No AC power detected after waiting for ${power_wait_timer}, cannot continue."
echo
exit 1
fi
}
# -----------------------------------------------------------------------------
# Compare build numbers.
# This compares build numbers based on the convention of XXAY(YYY)b, where
# - XX is the Darwin number
# - A is the build letter, where A typically relates to XX.0, B to XX.1, etc.
# - Y(YYY) is a minor build number which can be anything from 1 to a four-
# digit number. Typically any 4-digit number refers to a beta, or a forked
# build which sometimes occurs when new Mac models are relased.
# - b is a lower-case letter reserved for beta builds.
#
# Darwin numbers are as follows:
# - macOS 10.14 - Darwin no. 18
# - macOS 10.15 - Darwin no. 19
# - macOS 11 - Darwin no. 20
# - macOS 12 - Darwin no. 21
# - macOS 13 - Darwin no. 22
#
# This function determines if the OS, minor version or patch versions match.
# -----------------------------------------------------------------------------
compare_build_versions() {
first_build="$1"
second_build="$2"
first_build_darwin=${first_build:0:2}
second_build_darwin=${second_build:0:2}
first_build_letter=${first_build:2:1}
second_build_letter=${second_build:2:1}
first_build_minor=${first_build:3}
second_build_minor=${second_build:3}
first_build_minor_no=${first_build_minor//[!0-9]/}
second_build_minor_no=${second_build_minor//[!0-9]/}
first_build_minor_beta=${first_build_minor//[0-9]/}
second_build_minor_beta=${second_build_minor//[0-9]/}
builds_match="no"
versions_match="no"
os_matches="no"
writelog "[compare_build_versions] Comparing (1) $first_build with (2) $second_build"
if [[ "$first_build" == "$second_build" ]]; then
writelog "[compare_build_versions] $first_build = $second_build"
builds_match="yes"
versions_match="yes"
os_matches="yes"
return
elif [[ $first_build_darwin -gt $second_build_darwin ]]; then
writelog "[compare_build_versions] $first_build > $second_build"
first_build_newer="yes"
first_build_major_newer="yes"
return
elif [[ $first_build_letter > $second_build_letter && $first_build_darwin -eq $second_build_darwin ]]; then
writelog "[compare_build_versions] $first_build > $second_build"
first_build_newer="yes"
first_build_minor_newer="yes"
os_matches="yes"
return
elif [[ ! $first_build_minor_beta && $second_build_minor_beta && $first_build_letter == "$second_build_letter" && $first_build_darwin -eq $second_build_darwin ]]; then
writelog "[compare_build_versions] $first_build > $second_build (production > beta)"
first_build_newer="yes"
first_build_patch_newer="yes"
versions_match="yes"
os_matches="yes"
return
elif [[ ! $first_build_minor_beta && ! $second_build_minor_beta && $first_build_minor_no -lt 1000 && $second_build_minor_no -lt 1000 && $first_build_minor_no -gt $second_build_minor_no && $first_build_letter == "$second_build_letter" && $first_build_darwin -eq $second_build_darwin ]]; then
writelog "[compare_build_versions] $first_build > $second_build"
first_build_newer="yes"
first_build_patch_newer="yes"
versions_match="yes"
os_matches="yes"
return
elif [[ ! $first_build_minor_beta && ! $second_build_minor_beta && $first_build_minor_no -ge 1000 && $second_build_minor_no -ge 1000 && $first_build_minor_no -gt $second_build_minor_no && $first_build_letter == "$second_build_letter" && $first_build_darwin -eq $second_build_darwin ]]; then
writelog "[compare_build_versions] $first_build > $second_build (both betas)"
first_build_newer="yes"
first_build_patch_newer="yes"
versions_match="yes"
os_matches="yes"
return
elif [[ $first_build_minor_beta && $second_build_minor_beta && $first_build_minor_no -ge 1000 && $second_build_minor_no -ge 1000 && $first_build_minor_no -gt $second_build_minor_no && $first_build_letter == "$second_build_letter" && $first_build_darwin -eq $second_build_darwin ]]; then
writelog "[compare_build_versions] $first_build > $second_build (both betas)"
first_build_patch_newer="yes"
first_build_newer="yes"
versions_match="yes"
os_matches="yes"
return
fi
}
# -----------------------------------------------------------------------------
# Confirmation dialogue.
# Called when --confirm option is used.
# Not used in --silent mode.
# -----------------------------------------------------------------------------
confirm() {
# options
if [[ "$erase" == "yes" ]]; then
local dialog_title="${!dialog_erase_title}"
local dialog_message="${!dialog_erase_confirmation_desc}"
else
local dialog_title="${!dialog_reinstall_title}"
local dialog_message="${!dialog_reinstall_confirmation_desc}"
fi
# set the dialog command arguments
get_default_dialog_args "utility"
dialog_args=("${default_dialog_args[@]}")
dialog_args+=(
"--title"
"$dialog_title"
"--icon"
"${dialog_confirmation_icon}"
"--iconsize"
"128"
"--overlayicon"
"SF=person.fill.checkmark,colour=red"
"--message"
"$dialog_message"
"--button1text"
"${!dialog_confirmation_button}"
"--button2text"
"${!dialog_cancel_button}"
)
# run the dialog command
"$dialog_bin" "${dialog_args[@]}"
confirmation=$?
if [[ "$confirmation" == "2" ]]; then
writelog "[$script_name] User DECLINED erase-install or reinstall"
exit 0
elif [[ "$confirmation" == "0" ]]; then
writelog "[$script_name] User CONFIRMED erase-install or reinstall"
else
writelog "[$script_name] User FAILED to confirm erase-install or reinstall"
exit 1
fi
}
# -----------------------------------------------------------------------------
# Create a LaunchDaemon that removes the working directory after a reboot.
# This is used with the --cleanup-after-use option.
# -----------------------------------------------------------------------------
create_launchdaemon_to_remove_workdir () {
# Name of LaunchDaemon
plist_label="com.github.grahampugh.erase-install.remove"
launch_daemon="/Library/LaunchDaemons/$plist_label.plist"
# Create the plist
/usr/bin/defaults write "$launch_daemon" Label -string "$plist_label"
/usr/bin/defaults write "$launch_daemon" ProgramArguments -array \
-string /bin/rm \
-string -Rf \
-string "$workdir" \
-string "$launch_daemon"
/usr/bin/defaults write "$launch_daemon" RunAtLoad -boolean yes
/usr/bin/defaults write "$launch_daemon" LaunchOnlyOnce -boolean yes
/usr/sbin/chown root:wheel "$launch_daemon"
/bin/chmod 644 "$launch_daemon"
}
# -----------------------------------------------------------------------------
# Create a pipe
# -----------------------------------------------------------------------------
create_pipe() {
local pipe_name=${1}
local pipe_file
pipe_file=$( /usr/bin/mktemp -u -t "$pipe_name" || exit 12 )
/usr/bin/mkfifo -m go-rw "$pipe_file" || exit 13
echo "$pipe_file"
return 0
}
# -----------------------------------------------------------------------------
# Show progress information in DEPNotify while the installer is being
# downloaded or prepared, or during reboot-delay, thanks to @andredb90.
# -----------------------------------------------------------------------------
dialog_progress() {
last_progress_value=0
current_progress_value=0
# initialise progress messages
writelog "Sending to dialog: progresstext:"
/bin/echo "progresstext: " >> "$dialog_log"
/bin/echo "progress: 0" >> "$dialog_log"
if [[ "$1" == "startosinstall" ]]; then
# Wait for the preparing process to start and set the progress bar to 100 steps
until grep -q "Preparing: \d" "$LOG_FILE" ; do
sleep 2
done
/bin/echo "progress: 0" >> "$dialog_log"
# Until at least 100% is reached, calculate the preparing progress and move the bar accordingly
until [[ $current_progress_value -ge 100 ]]; do
until [[ $current_progress_value -gt $last_progress_value ]]; do
current_progress_value=$(tail -1 "$LOG_FILE" | awk 'END{print substr($NF, 1, length($NF)-3)}')
sleep 2
done
/bin/echo "progress: $current_progress_value" >> "$dialog_log"
last_progress_value=$current_progress_value
done
elif [[ "$1" == "mist" ]]; then
# Wait for a search message to appear
until grep -q "SEARCH" "$LOG_FILE" ; do
sleep 1
done
writelog "Sending to dialog: progresstext: Searching for a valid macOS installer..."
/bin/echo "progresstext: Searching for a valid macOS installer..." >> "$dialog_log"
# Wait for a Found message to appear
until grep -q "Found \[" "$LOG_FILE" ; do
sleep 1
done
dialog_found_installer=$(/usr/bin/grep "Found \[" "$LOG_FILE" | sed 's/.*Found \[.*\] //' | sed 's/ \[.*\]//')
writelog "Sending to dialog: progresstext: Found $dialog_found_installer"
/bin/echo "progresstext: Found $dialog_found_installer" >> "$dialog_log"
# Wait for the download to start and set the progress bar to 100 steps
until grep -q "DOWNLOAD" "$LOG_FILE" ; do
sleep 2
done
writelog "Sending to dialog: progresstext: Downloading $dialog_found_installer"
/bin/echo "progresstext: Downloading $dialog_found_installer" >> "$dialog_log"
/bin/echo "progress: 0" >> "$dialog_log"
# Wait for the InstallAssistant package to start downloading
until grep -q "InstallAssistant.pkg" "$LOG_FILE" ; do
sleep 2
done
/bin/echo "progress: 0" >> "$dialog_log"
sleep 2
until [[ $current_progress_value -gt 100 ]]; do
until [[ $current_progress_value -gt $last_progress_value ]]; do
progress_from_mist=$(grep "InstallAssistant" "$LOG_FILE" | tail -1 | cut -d'(' -f2 | cut -d')' -f1)
current_progress_value=$(cut -d. -f1 <<< "$progress_from_mist" | sed 's|^0||')
sleep 2
done
/bin/echo "progresstext: Downloading $dialog_found_installer ($current_progress_value%)" >> "$dialog_log"
/bin/echo "progress: $current_progress_value" >> "$dialog_log"
last_progress_value=$current_progress_value
done
# if the percentage reaches or goes over 100, show that we are finishing up
writelog "Sending to dialog: progress: complete"
/bin/echo "progresstext: Preparing downloaded macOS installer" >> "$dialog_log"
writelog "Sending to dialog: progresstext: Preparing downloaded macOS installer"
/bin/echo "progress: complete" >> "$dialog_log"
elif [[ "$1" == "fetch-full-installer" ]]; then
writelog "Sending to dialog: progresstext: Searching for a valid macOS installer..."
/bin/echo "progresstext: Searching for a valid macOS installer..." >> "$dialog_log"
# Wait for the download to start and set the progress bar to 100 steps
until grep -q "Installing:" "$LOG_FILE" ; do
sleep 2
done
writelog "Sending to dialog: progresstext: Downloading $dialog_found_installer"
/bin/echo "progresstext: Downloading $dialog_found_installer" >> "$dialog_log"
/bin/echo "progress: 0" >> "$dialog_log"
# Until at least 100% is reached, calculate the downloading progress and move the bar accordingly
until [[ "$current_progress_value" -ge 100 ]]; do
until [ "$current_progress_value" -gt "$last_progress_value" ]; do
current_progress_value=$(tail -1 "$LOG_FILE" | awk 'END{print substr($NF, 1, length($NF)-3)}')
sleep 2
done
/bin/echo "progresstext: Downloading $dialog_found_installer ($current_progress_value%)" >> "$dialog_log"
/bin/echo "progress: $current_progress_value" >> "$dialog_log"
last_progress_value=$current_progress_value
done
# if the percentage reaches or goes over 100, show that we are finishing up
writelog "Sending to dialog: progresstext: Preparing downloaded macOS installer"
/bin/echo "progresstext: Preparing downloaded macOS installer" >> "$dialog_log"
writelog "Sending to dialog: progress: complete"
/bin/echo "progress: complete" >> "$dialog_log"
elif [[ "$1" == "reboot-delay" ]]; then
# Countdown seconds to reboot (a bit shorter than rebootdelay)
countdown=$((rebootdelay-2))
/bin/echo "progress: $countdown" >> "$dialog_log"
until [ "$countdown" -eq 0 ]; do
sleep 1
current_progress_value=$countdown
/bin/echo "progresstext: Computer will be restarted in $countdown seconds" >> "$dialog_log"
/bin/echo "progress: $countdown" >> "$dialog_log"
countdown=$((countdown-1))
done
fi
}
# -----------------------------------------------------------------------------
# Search for an existing downloaded installer.
# This checks first for a DMG or sparseimage in the working directory, then
# for an Install macOS X.app in the /Applications folder, and then for an
# InstallAssistant.pkg in the working directory.
# Note that multiple installers left around on the device can cause unexpected
# results.
# -----------------------------------------------------------------------------
find_existing_installer() {
# First let's see if this script has been run before and left an installer
cached_installer_app=$( find "$installer_directory" -maxdepth 1 -name "Install macOS*.app" -type d -print -quit 2>/dev/null )
cached_installer_app_in_workdir=$( find "$workdir" -maxdepth 1 -name "Install macOS*.app" -type d -print -quit 2>/dev/null )
cached_installer_pkg=$( find "$workdir" -maxdepth 1 -name "InstallAssistant*.pkg" -type f -print -quit 2>/dev/null )
cached_dmg=$( find "$workdir" -maxdepth 1 -name "*.dmg" -type f -print -quit 2>/dev/null )
cached_sparseimage=$( find "$workdir" -maxdepth 1 -name "*.sparseimage" -type f -print -quit 2>/dev/null )
if [[ -d "$cached_installer_app" ]]; then
writelog "[find_existing_installer] Installer found at $cached_installer_app."
app_is_in_applications_folder="yes"
check_installer_is_valid
elif [[ -d "$cached_installer_app_in_workdir" ]]; then
cached_installer_app="$cached_installer_app_in_workdir"
writelog "[find_existing_installer] Installer found at $cached_installer_app."
check_installer_is_valid
elif [[ -f "$cached_installer_pkg" ]]; then
writelog "[find_existing_installer] InstallAssistant package found at $cached_installer_pkg."
check_installer_pkg_is_valid
elif [[ -f "$cached_dmg" ]]; then
writelog "[find_existing_installer] Installer image found at $cached_dmg."
hdiutil attach -quiet -noverify -nobrowse "$cached_dmg"
cached_installer_app=$( find '/Volumes/'*macOS*/*.app -maxdepth 1 -type d -print -quit 2>/dev/null )
check_installer_is_valid
elif [[ -f "$cached_sparseimage" ]]; then
writelog "[find_existing_installer] Installer sparse image found at $cached_sparseimage."
hdiutil attach -quiet -noverify -nobrowse "$cached_sparseimage"
cached_installer_app=$( find '/Volumes/'*macOS*/Applications/*.app -maxdepth 1 -type d -print -quit 2>/dev/null )
check_installer_is_valid
else
writelog "[find_existing_installer] No valid installer found."
if [[ $clear_cache == "yes" ]]; then
exit
fi
fi
}
# -----------------------------------------------------------------------------
# Look for packages to install during the startosinstall run.
# The default location is: $workdir/extras
# This location can be overridden with the --extras option.
# -----------------------------------------------------------------------------
find_extra_packages() {
# set install_package_list to blank.
install_package_list=()
for file in "$extras_directory"/*.pkg; do
if [[ $file != *"/*.pkg" ]]; then
writelog "[find_extra_installers] Additional package to install: $file"
install_package_list+=("--installpackage")
install_package_list+=("$file")
fi
done
}
# -----------------------------------------------------------------------------
# Things to carry out when the script exits
# -----------------------------------------------------------------------------
finish() {
local exit_code=$?
# if we promoted the user then we should demote it again
if [[ $promoted_user ]]; then
/usr/sbin/dseditgroup -o edit -d "$promoted_user" admin
writelog "[finish] User $promoted_user was demoted back to standard user"
fi
# remove pipe files
[[ -e "${pipe_input}" ]] && /bin/rm -f "${pipe_input}"
[[ -e "${pipe_output}" ]] && /bin/rm -f "${pipe_output}"
# kill caffeinate
kill_process "caffeinate"
# kill any dialogs if startosinstall quits without rebooting the machine (exit code > 0)
if [[ $test_run == "yes" || $exit_code -gt 0 ]]; then
writelog "[finish] quitting dialog"
/bin/echo "quit:" >> "$dialog_log"
fi
# set final exit code and quit, but do not call finish() again
writelog "[finish] Script exit code: $exit_code"
(exit $exit_code)
}
# -----------------------------------------------------------------------------
# Determine the Darwin number from the macOS version.
# -----------------------------------------------------------------------------
get_darwin_from_os_version() {
# convert a macOS major version to a darwin version
os_version="$1"
if [[ "${os_version:0:2}" == "10" ]]; then
darwin_version=${os_version:3:2}
darwin_version=$((darwin_version+4))
else
darwin_version=${os_version:0:2}
darwin_version=$((darwin_version+9))
fi
echo "$darwin_version"
}
# -----------------------------------------------------------------------------
# Get a password from keychain
# This is NOT a recommended method for production workflows for obvious security reasons.
# Use at your own risk!!
# -----------------------------------------------------------------------------
read_from_keychain() {
# expects entries from the command line for keychain name, password, service name for the user and service name for the password
writelog "[read_from_keychain] Attempting to unlock keychain..."
if security unlock-keychain -p "$kc_pass" "$kc"; then
writelog "[read_from_keychain] Unlocked keychain..."
account_shortname=$(security find-generic-password -s "$kc_service" -g "$kc" 2>&1 | grep "acct" | cut -d \" -f 4)
[[ $account_shortname ]] && writelog "[read_from_keychain] Obtained user $account_shortname..."
account_password=$(security find-generic-password -s "$kc_service" -g "$kc" 2>&1 | grep "password" | cut -d \" -f 2)
[[ $account_password ]] && writelog "[read_from_keychain] Obtained password..."
else
writelog "[read_from_keychain] Could not unlock keychain. Continuing..."
fi
}
# -----------------------------------------------------------------------------
# Set catalog URLs.
# This provides a shortcut way of obtaining different catalog URLs for different
# systems.
# -----------------------------------------------------------------------------
get_catalog() {
catalogs[17]="https://swscan.apple.com/content/catalogs/others/index-10.13-10.12-10.11-10.10-10.9-mountainlion-lion-snowleopard-leopard.merged-1.sucatalog"
catalogs[18]="https://swscan.apple.com/content/catalogs/others/index-10.14-10.13-10.12-10.11-10.10-10.9-mountainlion-lion-snowleopard-leopard.merged-1.sucatalog"
catalogs[19]="https://swscan.apple.com/content/catalogs/others/index-10.15-10.14-10.13-10.12-10.11-10.10-10.9-mountainlion-lion-snowleopard-leopard.merged-1.sucatalog"
catalogs[20]="https://swscan.apple.com/content/catalogs/others/index-10.16-10.15-10.14-10.13-10.12-10.11-10.10-10.9-mountainlion-lion-snowleopard-leopard.merged-1.sucatalog"
catalogs[21]="https://swscan.apple.com/content/catalogs/others/index-12-10.16-10.15-10.14-10.13-10.12-10.11-10.10-10.9-mountainlion-lion-snowleopard-leopard.merged-1.sucatalog"
catalogs[22]="https://swscan.apple.com/content/catalogs/others/index-13-12-10.16-10.15-10.14-10.13-10.12-10.11-10.10-10.9-mountainlion-lion-snowleopard-leopard.merged-1.sucatalog"
}
# -----------------------------------------------------------------------------
# Default dialog arguments
# -----------------------------------------------------------------------------
get_default_dialog_args() {
# set the dialog command arguments
# $1 - window type
default_dialog_args=(
"--ontop"
"--json"
"--ignorednd"
"--position"
"centre"
"--quitkey"
"c"
)
if [[ "$1" == "fullscreen" ]]; then
writelog "[get_default_dialog_args] Invoking fullscreen dialog"
default_dialog_args+=(
"--blurscreen"
"--width"
"50%"
"--height"
"50%"
"--button1disabled"
"--centreicon"
"--titlefont"
"size=32"
"--messagefont"
"size=24"
"--alignment"
"centre"
)
elif [[ "$1" == "utility" ]]; then
writelog "[get_default_dialog_args] Invoking utility dialog"
default_dialog_args+=(
"--moveable"
"--width"
"600"
"--height"
"300"
"--titlefont"
"size=20"
"--messagefont"
"size=14"
"--alignment"
"left"
)
fi
}
# -----------------------------------------------------------------------------
# Run mist list to get some required output for automation
# This requires mist, so we first check if it is on the system and download them if not.
# -----------------------------------------------------------------------------
get_mist_list() {
# Download mist if not present
check_for_mist
mist_args=()
mist_args+=("list")
mist_args+=("installer")
mist_args+=("--compatible")
mist_args+=("--export")
mist_args+=("$mist_export_file")
# set alternative catalog if selected
if [[ $catalogurl ]]; then
writelog "[get_mist_list] Non-standard catalog URL selected"
mist_args+=("--catalog-url")