Files
Fedora-PIS/postinstall.sh
T
2026-10-06 19:40:19 -07:00

677 lines
24 KiB
Bash

#!/bin/bash
# Post install script for Fedora
# Author: Jacob Schantli
# Version: 1.1
# Make a pipeline fail if any command in it fails. Without this,
# `curl ... | bash` reports success even when the download fails.
set -o pipefail
# Steps that failed during this run (shown in the summary at the end)
FAILED_STEPS=()
# -----------------------------------------------------------------------------
# Global Configuration
# -----------------------------------------------------------------------------
DNF_PACKAGES=(
"gnome-tweaks"
"steam"
"lutris"
"btop"
"fastfetch"
"distrobox"
"pipx"
"bash-completion"
"tar"
"bat"
"tree"
"unzip"
"git"
"fzf"
"mpv"
"fuse"
"fuse-libs"
"nodejs"
)
FLATPAK_PACKAGES=(
"com.github.tchx84.Flatseal"
"net.nokyan.Resources"
"com.mattjakeman.ExtensionManager"
"io.github.realmazharhussain.GdmSettings"
"com.ranfdev.DistroShelf"
"it.mijorus.gearlever"
"io.github.fastrizwaan.WineZGUI"
"com.vysp3r.ProtonPlus"
"io.missioncenter.MissionCenter"
"io.github.peazip.PeaZip"
#"app.devsuite.Ptyxis"
"re.sonny.Junction"
#"com.github.rafostar.Clapper"
"io.github.flattool.Ignition"
"io.github.swordpuffin.rewaita"
"page.tesk.Refine"
#"io.gitlab.adhami3310.Converter"
"com.usebottles.bottles"
"com.bambulab.BambuStudio"
"com.collaboraoffice.Office"
"io.github.kolunmi.Bazaar"
"com.fastmail.Fastmail"
)
GNOME_EXTENSIONS=(
"dhruva@narkagni"
"app-grid-wizard@mirzadeh.pro"
"appindicatorsupport@rgcjonas.gmail.com"
"blur-my-shell@aunetx"
"caffeine@patapon.info"
"dynamic-music-pill@andbal"
"gnome-fuzzy-app-search@gnome-shell-extensions.Czarlie.gitlab.com"
#"IP-Finder@linxgem33.com"
#"lan-ip-address@mrhuber.com"
#"update-extension@purejava.org"
"user-theme@gnome-shell-extensions.gcampax.github.com"
"gnome-wallpaper-engine@gjs.com.zip"
)
# -----------------------------------------------------------------------------
# Helper Functions
# -----------------------------------------------------------------------------
# Colors for output
GREEN='\033[0;32m'
RED='\033[0;31m'
YELLOW='\033[1;33m'
NC='\033[0m' # No Color
log_info() {
echo -e "${GREEN}[INFO]${NC} $1"
}
log_error() {
echo -e "${RED}[ERROR]${NC} $1"
}
log_warn() {
echo -e "${YELLOW}[WARN]${NC} $1"
}
command_exists() {
command -v "$1" >/dev/null 2>&1
}
# Check if the last command was successful
check_status() {
local status=$?
if [ $status -eq 0 ]; then
log_info "$1 successful."
else
log_error "$1 failed."
FAILED_STEPS+=("$1")
# If the second argument is "critical", exit the script
if [ "$2" == "critical" ]; then
log_error "Critical error encountered. Exiting."
exit 1
fi
fi
}
# Append text to a file if it doesn't already exist
append_to_file_if_missing() {
local file="$1"
local text="$2"
local description="$3"
local use_sudo="$4"
if grep -Fq "$text" "$file"; then
log_warn "$description already exists in $file. Skipping."
else
if [ "$use_sudo" == "true" ]; then
echo "$text" | sudo tee -a "$file" > /dev/null
else
echo "$text" >> "$file"
fi
log_info "Added $description to $file."
fi
}
# -----------------------------------------------------------------------------
# Installation Functions
# -----------------------------------------------------------------------------
optimize_dnf() {
log_info "----------------------------------------------------"
log_info "Modifying /etc/dnf/dnf.conf for faster downloads."
log_info "----------------------------------------------------"
DNF_CONF="/etc/dnf/dnf.conf"
if [ -f "$DNF_CONF" ]; then
append_to_file_if_missing "$DNF_CONF" "max_parallel_downloads=10" "max_parallel_downloads" "true"
append_to_file_if_missing "$DNF_CONF" "defaultyes=True" "defaultyes" "true"
append_to_file_if_missing "$DNF_CONF" "keepcache=True" "keepcache" "true"
else
log_error "$DNF_CONF not found!"
fi
sleep 1
}
install_fonts() {
log_info "----------------------------------------------------"
log_info "Installing Microsoft Core Fonts and Meslo Nerd Font."
log_info "----------------------------------------------------"
log_info "Updating system and installing prerequisites..."
sudo dnf upgrade --refresh -y
check_status "System upgrade" "critical"
sudo dnf install -y curl cabextract xorg-x11-font-utils fontconfig wget unzip
check_status "Prerequisites installation" "critical"
log_info "Installing Microsoft Core Fonts..."
if rpm -q msttcore-fonts-installer > /dev/null 2>&1; then
log_warn "Microsoft Core Fonts already installed."
else
sudo rpm -i https://downloads.sourceforge.net/project/mscorefonts2/rpms/msttcore-fonts-installer-2.6-1.noarch.rpm
check_status "Microsoft Core Fonts installation" "non-critical"
fi
log_info "Installing Meslo Nerd Font..."
FONT_NAME="MesloLGS Nerd Font Mono"
# Redirect instead of `grep -q` so fc-list isn't killed by SIGPIPE (pipefail)
if fc-list :family | grep -i "$FONT_NAME" > /dev/null; then
log_info "Font '$FONT_NAME' is already installed."
else
log_info "Installing font '$FONT_NAME'..."
FONT_URL="https://github.com/ryanoasis/nerd-fonts/releases/latest/download/Meslo.zip"
FONT_DIR="$HOME/.local/share/fonts"
TEMP_DIR=$(mktemp -d)
wget -q -O "$TEMP_DIR/Meslo.zip" "$FONT_URL" \
&& unzip -q "$TEMP_DIR/Meslo.zip" -d "$TEMP_DIR" \
&& mkdir -p "$FONT_DIR/$FONT_NAME" \
&& mv "$TEMP_DIR"/*.ttf "$FONT_DIR/$FONT_NAME/" \
&& fc-cache -f "$FONT_DIR"
check_status "Meslo Nerd Font installation" "non-critical"
rm -rf "$TEMP_DIR"
fi
}
install_repos() {
log_info "----------------------------------------------------"
log_info "Adding RPM Fusion repositories."
log_info "----------------------------------------------------"
sudo dnf install -y \
"https://mirrors.rpmfusion.org/free/fedora/rpmfusion-free-release-$(rpm -E %fedora).noarch.rpm" \
"https://mirrors.rpmfusion.org/nonfree/fedora/rpmfusion-nonfree-release-$(rpm -E %fedora).noarch.rpm"
check_status "RPM Fusion repositories installation" "non-critical"
}
install_software() {
log_info "----------------------------------------------------"
log_info "Installing most used software."
log_info "----------------------------------------------------"
log_info "Installing DNF packages..."
sudo dnf install -y "${DNF_PACKAGES[@]}"
check_status "DNF packages installation" "non-critical"
# Ensure flatpak is set up
if ! command -v flatpak &> /dev/null; then
log_info "Flatpak not found. Installing..."
sudo dnf install -y flatpak
fi
log_info "Adding Flathub remote..."
flatpak remote-add --if-not-exists flathub https://flathub.org/repo/flathub.flatpakrepo
check_status "Flathub remote add" "non-critical"
log_info "Installing Flatpak packages..."
# One transaction is much faster (single dependency resolution, shared
# runtimes downloaded once). If it fails, retry one-by-one so a single
# bad app ID doesn't block the rest.
if flatpak install flathub -y "${FLATPAK_PACKAGES[@]}"; then
log_info "Flatpak packages installation successful."
else
log_warn "Batch Flatpak install failed. Retrying apps individually..."
for app in "${FLATPAK_PACKAGES[@]}"; do
log_info "Installing $app..."
flatpak install flathub -y "$app"
check_status "Flatpak $app" "non-critical"
done
fi
log_info "----------------------------------------------------"
log_info "Installing Homebrew"
log_info "----------------------------------------------------"
# Install Homebrew (also detect it when it isn't on PATH yet)
if command_exists brew || [ -x "/home/linuxbrew/.linuxbrew/bin/brew" ]; then
log_info "Homebrew already installed."
else
log_info "Installing Homebrew..."
# Download first so a failed download isn't reported as success.
# NONINTERACTIVE=1 avoids prompts during brew install.
BREW_INSTALLER=$(curl -fsSL https://raw.githubusercontent.com/Homebrew/install/HEAD/install.sh) \
&& NONINTERACTIVE=1 /bin/bash -c "$BREW_INSTALLER"
check_status "Homebrew installation" "non-critical"
# Add brew to path for the current session
if [ -d "/home/linuxbrew/.linuxbrew/bin" ]; then
eval "$(/home/linuxbrew/.linuxbrew/bin/brew shellenv)"
elif [ -d "$HOME/.linuxbrew/bin" ]; then
eval "$($HOME/.linuxbrew/bin/brew shellenv)"
fi
fi
}
install_discord() {
log_info "----------------------------------------------------"
log_info "Installing Discord"
log_info "----------------------------------------------------"
if rpm -q discord > /dev/null 2>&1; then
log_info "Discord already installed."
else
log_info "Downloading and installing Discord..."
sudo dnf install -y "https://discord.com/api/download?platform=linux&format=rpm"
check_status "Discord installation" "non-critical"
fi
}
install_1password() {
log_info "----------------------------------------------------"
log_info "Installing 1Password"
log_info "----------------------------------------------------"
if rpm -q 1password > /dev/null 2>&1; then
log_info "1Password already installed."
else
log_info "Downloading and installing 1Password..."
sudo dnf install -y https://downloads.1password.com/linux/rpm/stable/x86_64/1password-latest.rpm
check_status "1Password installation" "non-critical"
fi
}
install_PIA() {
log_info "----------------------------------------------------"
log_info "Installing Private Internet Access (PIA)"
log_info "----------------------------------------------------"
if [ -d "/opt/piavpn" ]; then
log_info "PIA is already installed."
else
log_info "Downloading and installing PIA..."
PIA_URL=$(curl -s https://www.privateinternetaccess.com/download/linux-vpn | grep -oP 'https://[^\"]+pia-linux-[0-9\.\-]+\.run' | head -n 1)
if [ -n "$PIA_URL" ]; then
wget -qO /tmp/pia-linux.run "$PIA_URL"
chmod +x /tmp/pia-linux.run
# Run the installer as the current user, letting it prompt for sudo/pkexec if needed
/tmp/pia-linux.run --quiet --accept
rm /tmp/pia-linux.run
check_status "PIA installation" "non-critical"
else
log_error "Failed to fetch PIA download URL."
FAILED_STEPS+=("PIA installation")
fi
fi
}
install_cachyos() {
log_info "----------------------------------------------------"
log_info "Installing CachyOS kernel"
log_info "----------------------------------------------------"
# kernel-cachyos is built for x86-64-v3 CPUs. Ask before installing it on
# an older CPU, where the new (default) boot entry may not start.
if ! /lib64/ld-linux-x86-64.so.2 --help 2>/dev/null | grep 'x86-64-v3 (supported' > /dev/null; then
log_warn "Your CPU does not appear to support x86-64-v3, which kernel-cachyos targets."
read -p "Install the CachyOS kernel anyway? [y/N]: " reply
if [[ ! "$reply" =~ ^[Yy]$ ]]; then
log_info "Skipping CachyOS kernel."
return
fi
fi
sudo dnf copr enable -y bieszczaders/kernel-cachyos
check_status "Enabling CachyOS Copr" "non-critical"
sudo dnf install -y kernel-cachyos kernel-cachyos-devel-matched
check_status "CachyOS Kernel installation" "non-critical"
log_info "Installing CachyOS addons"
sudo dnf copr enable -y bieszczaders/kernel-cachyos-addons
check_status "Enabling CachyOS Addons Copr" "non-critical"
sudo dnf swap -y zram-generator-defaults cachyos-settings
sudo dracut -f
sudo dnf -y install scx-scheds scx-tools scx-manager ananicy-cpp
check_status "CachyOS addons installation" "non-critical"
}
install_p03() {
log_info "----------------------------------------------------"
log_info "Installing P03 kernel"
log_info "----------------------------------------------------"
# The default kernel-p03 build needs x86-64-v3 and won't boot on older
# CPUs. Those get the x86-64-v2 build (kernel-p03-gcc) instead.
if /lib64/ld-linux-x86-64.so.2 --help 2>/dev/null | grep 'x86-64-v3 (supported' > /dev/null; then
P03_PACKAGE="kernel-p03"
else
log_warn "CPU lacks x86-64-v3 support. Installing the x86-64-v2 build (kernel-p03-gcc)."
P03_PACKAGE="kernel-p03-gcc"
fi
sudo dnf copr enable -y catpieleaf/kernel-p03
check_status "Enabling P03 Copr" "non-critical"
sudo dnf install -y "$P03_PACKAGE"
check_status "P03 kernel installation" "non-critical"
# P03 signs itself with a locally generated key. With Secure Boot on, that
# key must be enrolled or the kernel won't boot.
if mokutil --sb-state 2>/dev/null | grep -i 'SecureBoot enabled' > /dev/null; then
log_info "Secure Boot is enabled. Enrolling the P03 signing key..."
log_info "Pick a one-time password. On the next boot, choose 'Enroll MOK' and enter it."
sudo mokutil --import /etc/kernel/certs/p03-kernel/mok.der
check_status "P03 Secure Boot key enrollment" "non-critical"
fi
if rpm -q kernel-cachyos > /dev/null 2>&1; then
log_warn "The CachyOS kernel is also installed. The newest kernel usually boots by default;"
log_warn "pick the other one from the boot menu if needed."
fi
log_warn "P03 uses the PRJC scheduler, so sched_ext schedulers (scx-scheds) likely won't work on it."
}
install_linuxtoys() {
log_info "----------------------------------------------------"
log_info "Installing LinuxToys"
log_info "----------------------------------------------------"
curl -fsSL https://linux.toys/install.sh | bash
check_status "LinuxToys installation" "non-critical"
}
install_shell_env() {
log_info "----------------------------------------------------"
log_info "Installing Shell Environment (Starship, FZF, Zoxide, MyBash)"
log_info "----------------------------------------------------"
# Install Starship
if command_exists starship; then
log_info "Starship already installed."
else
log_info "Installing Starship..."
# -y skips the installer's confirmation prompt
curl -sSL https://starship.rs/install.sh | sudo sh -s -- -y
check_status "Starship installation" "non-critical"
fi
# Install FZF (Fallback if not installed via DNF)
if ! command_exists fzf; then
log_info "Installing FZF via git..."
git clone --depth 1 https://github.com/junegunn/fzf.git ~/.fzf
~/.fzf/install --all
fi
# Install Zoxide
if command_exists zoxide; then
log_info "Zoxide already installed."
else
log_info "Installing Zoxide..."
curl -sSL https://raw.githubusercontent.com/ajeetdsouza/zoxide/main/install.sh | sh
check_status "Zoxide installation" "non-critical"
fi
# Clone MyBash
log_info "Cloning MyBash configuration..."
GITPATH="$HOME/.local/share/mybash"
if [ -d "$GITPATH" ]; then
rm -rf "$GITPATH"
fi
mkdir -p "$HOME/.local/share"
if git clone https://gitea.schantli.ca/jschantli/mybash.git "$GITPATH"; then
log_info "MyBash cloned successfully."
# Link Config
log_info "Linking configuration files..."
OLD_BASHRC="$HOME/.bashrc"
# Check if .bashrc exists in the cloned repo
if [ -f "$GITPATH/.bashrc" ]; then
if [ -e "$OLD_BASHRC" ] && [ ! -e "$HOME/.bashrc.bak" ]; then
log_info "Backing up .bashrc to .bashrc.bak..."
mv "$OLD_BASHRC" "$HOME/.bashrc.bak"
fi
log_info "Linking new .bashrc..."
ln -svf "$GITPATH/.bashrc" "$HOME/.bashrc"
# Ensure Starship is initialized in the new .bashrc
if ! grep -q "starship init bash" "$HOME/.bashrc"; then
log_warn ".bashrc does not contain starship init. Appending it..."
echo 'eval "$(starship init bash)"' >> "$HOME/.bashrc"
fi
else
log_error "$GITPATH/.bashrc not found! Skipping .bashrc linking."
fi
# Check if starship.toml exists in the cloned repo
if [ -f "$GITPATH/starship.toml" ]; then
log_info "Linking starship.toml..."
mkdir -p "$HOME/.config"
ln -svf "$GITPATH/starship.toml" "$HOME/.config/starship.toml"
else
log_warn "$GITPATH/starship.toml not found! Skipping Starship config linking."
fi
# Check if config.jsonc exists in the cloned repo
if [ -f "$GITPATH/config.jsonc" ]; then
log_info "Linking config.jsonc..."
mkdir -p "$HOME/.config/fastfetch/"
ln -svf "$GITPATH/config.jsonc" "$HOME/.config/fastfetch/config.jsonc"
else
log_warn "$GITPATH/config.jsonc not found! Skipping fastfetch config linking."
fi
check_status "Linking config files" "non-critical"
else
log_error "Failed to clone MyBash repository. Skipping shell configuration."
fi
}
install_topgrade() {
log_info "----------------------------------------------------"
log_info "Installing Topgrade"
log_info "----------------------------------------------------"
if command_exists topgrade; then
log_info "Topgrade already installed."
return
fi
sudo dnf copr enable -y lilay/topgrade
check_status "Enabling Topgrade" "non-critical"
sudo dnf install -y topgrade
check_status "Topgrade installation" "non-critical"
}
install_gnome_extensions() {
log_info "----------------------------------------------------"
log_info "Installing GNOME extensions"
log_info "----------------------------------------------------"
# Ensure pipx is installed and path is set
if ! command -v pipx &> /dev/null; then
log_info "pipx not found. Installing..."
sudo dnf install -y pipx
pipx ensurepath
fi
# Install gnome-extensions-cli
log_info "Installing gnome-extensions-cli..."
pipx install gnome-extensions-cli --system-site-packages
check_status "gnome-extensions-cli installation" "non-critical"
# Define the tool path explicitly to avoid 'pipx run' overhead/warnings
EXTENSION_TOOL="$HOME/.local/bin/gnome-extensions-cli"
log_info "Installing GNOME extensions..."
log_info "NOTE: A popup may appear asking you to confirm installation for each extension."
log_info "If the extension is already installed, no popup will appear."
for extension in "${GNOME_EXTENSIONS[@]}"; do
log_info "Processing $extension..."
# Install (using the direct binary path)
"$EXTENSION_TOOL" install "$extension"
check_status "GNOME Extension $extension" "non-critical"
# Attempt to enable the extension (in case it's installed but disabled)
log_info "Ensuring $extension is enabled..."
gnome-extensions enable "$extension"
# Prompt user to press Enter to continue
read -p "Press Enter to continue (if a popup appeared, confirm it first)..."
done
}
install_antigravity() {
log_info "----------------------------------------------------"
log_info "Installing Antigravity App, IDE, and CLI"
log_info "----------------------------------------------------"
log_info "Installing Antigravity CLI..."
curl -fsSL https://antigravity.google/cli/install.sh | bash
check_status "Antigravity CLI installation" "non-critical"
log_info "Installing Antigravity App and IDE..."
# Community installer (opensnap). It downloads Google's official tarballs
# into /opt and adds launchers. It needs python3, and nautilus-python
# enables its "Open in Antigravity IDE" entry in Files.
sudo dnf install -y python3 nautilus-python
INSTALLER_URL="https://opensnap.github.io/antigravity/install.sh"
curl -fsSL "$INSTALLER_URL" | sudo -E env ANTIGRAVITY_LINUX_INSTALLER_URL="$INSTALLER_URL" bash -s -- --all
check_status "Antigravity App and IDE installation" "non-critical"
}
# -----------------------------------------------------------------------------
# Main Menu
# -----------------------------------------------------------------------------
show_menu() {
clear
echo "===================================================="
echo " Fedora Post-Install Script - Main Menu"
echo "===================================================="
echo "1. Install Everything (Recommended)"
echo "2. Install Everything (No CachyOS Kernel)"
echo "3. Optimize DNF"
echo "4. Install Fonts"
echo "5. Add Repositories (RPM Fusion)"
echo "6. Install Software (DNF & Flatpak)"
echo "7. Install CachyOS Kernel"
echo "8. Install LinuxToys"
echo "9. Install Shell Environment (Starship, MyBash)"
echo "10. Install GNOME Extensions"
echo "11. Install Discord"
echo "12. Install 1Password"
echo "13. Install Private Internet Access (PIA)"
echo "14. Install Topgrade"
echo "15. Install Antigravity App, IDE, and CLI"
echo "16. Install P03 Kernel (experimental, not in Install Everything)"
echo "0. Exit"
echo "===================================================="
read -p "Enter your choice [0-16]: " choice
}
# Run every installation step. Pass "skip_kernel" to leave out CachyOS.
run_all() {
optimize_dnf
install_fonts
install_repos
install_software
install_discord
install_1password
install_PIA
install_topgrade
if [ "$1" != "skip_kernel" ]; then
install_cachyos
fi
install_linuxtoys
install_shell_env
install_gnome_extensions
install_antigravity
}
# Show which steps failed during this run, if any
print_summary() {
log_info "----------------------------------------------------"
if [ ${#FAILED_STEPS[@]} -eq 0 ]; then
log_info "Post-install script completed successfully!"
else
log_warn "Post-install script finished with ${#FAILED_STEPS[@]} failed step(s):"
for step in "${FAILED_STEPS[@]}"; do
log_warn " - $step"
done
fi
log_info "Please restart your shell or run 'source ~/.bashrc' to see the changes."
log_info "----------------------------------------------------"
}
# -----------------------------------------------------------------------------
# Main Execution
# -----------------------------------------------------------------------------
log_info "Starting Post-install script for Fedora..."
sleep 2
# Ensure sudo permissions are available upfront
sudo -v
while true; do sudo -n true; sleep 60; kill -0 "$$" || exit; done 2>/dev/null &
while true; do
show_menu
case $choice in
1)
run_all
break
;;
2)
run_all skip_kernel
break
;;
3) optimize_dnf ;;
4) install_fonts ;;
5) install_repos ;;
6) install_software ;;
7) install_cachyos ;;
8) install_linuxtoys ;;
9) install_shell_env ;;
10) install_gnome_extensions ;;
11) install_discord ;;
12) install_1password ;;
13) install_PIA ;;
14) install_topgrade ;;
15) install_antigravity ;;
16) install_p03 ;;
0)
log_info "Exiting..."
print_summary
exit 0
;;
*)
log_error "Invalid option. Please try again."
sleep 2
;;
esac
if [ "$choice" != "1" ] && [ "$choice" != "2" ]; then
read -p "Press Enter to return to the main menu..."
fi
done
print_summary