#!/bin/sh
export PATH=/sbin:/bin:/usr/sbin:/usr/bin
busybox --install -s
insmod /lib/modules/ide-core.ko
insmod /lib/modules/ide-gd_mod.ko
insmod /lib/modules/ide-pci-generic.ko
insmod /lib/modules/piix.ko
insmod /lib/modules/mbcache.ko
insmod /lib/modules/jbd.ko
insmod /lib/modules/ext2.ko
insmod /lib/modules/ext3.ko
insmod /lib/modules/dm-mod.ko
insmod /lib/modules/dm-crypt.ko
insmod /lib/modules/aes_generic.ko
insmod /lib/modules/sha256_generic.ko
insmod /lib/modules/cbc.ko
mkdir /proc /sys
mount -t proc none /proc
mount -t sysfs none /sys
mknod /dev/hda b 3 0
mknod /dev/hdb b 3 64
mknod /dev/random c 1 8
mknod /dev/urandom c 1 9
mkdir /mirror
mount -o ro -t ext3 /dev/hdb /mirror
mkdir /target
mke2fs -F /dev/hda
mount /dev/hda /target
debootstrap --arch=i386 squeeze /target file:///mirror/debian
sed -i -e 's/Value: Dialog/Value: Noninteractive/' /target/var/cache/debconf/config.dat
mkdir /target/var/mirror
mount -o move /mirror /target/var/mirror
mount -o move /proc /target/proc
mount -o move /sys /target/sys
echo "deb file:///var/mirror/debian squeeze main" > /target/etc/apt/sources.list
echo temp > /target/etc/hostname
chroot /target apt-get update
mv /target/sbin/start-stop-daemon /target/sbin/start-stop-daemon.orig
ln /target/bin/true /target/sbin/start-stop-daemon
chroot /target apt-get -y install tcpdump iceweasel less icedove menu wmaker vim openssh-client nodm x11-xserver-utils xterm pidgin tor ifupdown
mv /target/sbin/start-stop-daemon.orig /target/sbin/start-stop-daemon
mkdir /target/home/user
chown 1000:1000 /target/home/user
echo "user:x:1000:1000:,,,:/home/user:/bin/bash" >> /target/etc/passwd
sed -i -e '/root/d' /target/etc/shadow
echo 'root:$1$yLCsKbjQ$ad1Vr/PHJ2VccnNUxkNxt.:14350:0:99999:7:::' >> /target/etc/shadow
insmod /lib/modules/8390.ko
insmod /lib/modules/ne2k-pci.ko
insmod /lib/modules/psmouse.ko
cat << "X" > /target/etc/network/interfaces
auto lo
iface lo inet loopback

auto eth0
iface eth0 inet dhcp
	post-up echo "nameserver 127.0.0.1" > /etc/resolv.conf
X
cat << "X" >> /target/etc/tor/torrc
AutomapHostsOnResolve 1
TransPort 9040
DNSPort 53
X
cat << "X" > /target/etc/init.d/iptables
case "$1" in
	start|restart)
		echo -n "Starting simple ipv4/ipv6 firewall"
		iptables -t filter -F
		iptables -t nat -F
		iptables -t mangle -F

		iptables -P FORWARD DROP
		iptables -P INPUT DROP
		iptables -P OUTPUT DROP

		iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
		iptables -A INPUT -i lo -j ACCEPT

		iptables -A FORWARD -j LOG
		
		iptables -t nat -A OUTPUT \
				-m owner --uid-owner debian-tor -j RETURN
		iptables -t nat -A OUTPUT -d 127.0.0.1 -j RETURN
		iptables -t nat -A OUTPUT \
				-p udp --dport 53 -j REDIRECT --to-ports 53
		iptables -t nat -A OUTPUT -p tcp \
				-m state --state NEW -j REDIRECT --to-ports 9040

		iptables -A OUTPUT \
				-m state --state ESTABLISHED,RELATED -j ACCEPT
		iptables -A OUTPUT -d 127.0.0.1 -j ACCEPT
		iptables -A OUTPUT -m owner --uid-owner debian-tor -j ACCEPT
		iptables -A OUTPUT -j REJECT

		echo "."
		;;
	stop)
		echo -n "Stopping simple ipv4 firewall"
		iptables -t filter -F
		iptables -t nat -F
		iptables -t mangle -F

		iptables -P FORWARD DROP
		iptables -P INPUT DROP
		iptables -P OUTPUT DROP
		echo "."
		;;
	*)
		echo "Usage blah bla"
		exit 1
esac

exit 0
X
chmod a+x /target/etc/init.d/iptables
cat << "X" > /target/etc/X11/xorg.conf
Section "Monitor"
	Identifier "Configured Monitor"
	HorizSync 28-61
	VertRefresh 48-60
EndSection

Section "Screen"
	Identifier "Default Screen Section"
	Monitor	"Configured Monitor"
	Subsection "Display"
		Depth 24
		Modes "1024x768"
	EndSubSection
EndSection
X
cd /target/etc/rcS.d
ln -s ../init.d/iptables S37iptables
cd /
sed -i -e 's/NODM_ENABLED=false/NODM_ENABLED=true/' /target/etc/default/nodm
sed -i -e 's/NODM_USER=root/NODM_USER=user/' /target/etc/default/nodm
cd /target
tar -xvzf /modules.tar.gz 
cd /
exec run-init /target /sbin/init 2 < /target/dev/console > /target/dev/console