added usage instructions and updated design decisions, fixed root password

bootstrap-bullseye.sh

@@ -3,10 +3,20 @@
 # Interactive installation steps for Debian Bullseye from GRML using debootstrap
 
 # Design decisions
-# - Add a small file-based swap partition as safety net
+# - Fokus on a simple setup, primarly for VMs
+# - One disk, one partion, swap-file in the same partion as safety net
 # - Use systemd whereever possible (network, ntp, cron, journald logging)
-# - One partion on /dev/vda
 # - Minimal number of packages & cloud kernel
+# - grub-pc, not efi
+# - random root and admin user password generation
+
+# Usage
+# Boot grml and clone repo
+# cp config.sh.template config.sh                    # copy template
+# vi config.sh                                       # update installation variables
+# bootstrap-bullseye.sh install                      # start installation
+# !! Note down the admin passwords and reboot
+# sudo /installer/bootstrap-bullseye.sh postinstall  # run postinstall in the new system
 
 # Variables
 mnt="/mnt/root"  # mountpoint for the new root filesystem
@@ -23,6 +33,7 @@ netNTP="pool.ntp.org"
 
 [ -f ./config.sh ] && source config.sh
 
+
 # Setup network in grml
 grmlnetwork(){
 ip link show # list interfaces
@@ -56,7 +67,6 @@ dd if=/dev/zero of=$swapfile bs=1M count=1024 status=progress # create 1GB  file
 chmod 600 $swapfile #restric permissions
 mkswap $swapfile #format file
 
-
 #----------
 # Bootstrap -- pkg: debootstrap
 # Remark: Debootstrap does not install recommands!! 
@@ -104,6 +114,7 @@ $0 bootloader
 
 }
 
+
 #----------
 # Function executed within chroot
 install2(){
@@ -123,13 +134,15 @@ apt-get upgrade --yes
 apt-get autoremove --yes
 apt-get clean --yes
 
-# Setup users
+# Setup users and passwords
 pass=`pwgen --capitalize --numerals --ambiguous 12 1`
 useradd admin --create-home --shell /bin/bash
 echo "admin:$pass" | chpasswd
-echo 'root:sa'     | chpasswd
 usermod -a -G sudo admin
 echo -e "\e[1;33;4;44mPassword for the user admin: $pass\e[0m"
+pass=`pwgen --capitalize --numerals --ambiguous 12 1`
+echo 'root:$pass'     | chpasswd
+echo -e "\e[1;33;4;44mPassword for the user root: $pass\e[0m"
 
 # Harden SSHD
 echo AllowUsers admin >> /etc/ssh/sshd_config
@@ -192,8 +205,6 @@ journalctl --boot --priority=3 --no-pager
 EOL
 chmod 755 /etc/update-motd.d/15-boot-errors
 
-
-
 # Leave chroot
 exit
 }
@@ -249,7 +260,7 @@ case $1 in
     postinstall
     ;;
   unmount)
-    echo "Unmount chroot"
+    echo "Unmount chroot, e.g. in case installation fails"
     unmount
     ;;
   *)