blob: 2164443e2cc69fe459dc935d8f848fd76fc3b3ef (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
|
#!/bin/bash -e
if [ "${ROOTFS_RO}" = "1" ] ; then
install -v -m 644 files/fstab-rootfs_ro "${ROOTFS_DIR}/etc/fstab"
fi
install -m 644 files/overlay_mount.service "${ROOTFS_DIR}/lib/systemd/system/"
install -m 755 files/overlay_mount "${ROOTFS_DIR}/etc/init.d/"
install -m 755 files/resize2fs_once "${ROOTFS_DIR}/etc/init.d/"
install -d "${ROOTFS_DIR}/etc/systemd/system/rc-local.service.d"
install -m 644 files/ttyoutput.conf "${ROOTFS_DIR}/etc/systemd/system/rc-local.service.d/"
install -m 644 files/50raspi "${ROOTFS_DIR}/etc/apt/apt.conf.d/"
install -m 644 files/console-setup "${ROOTFS_DIR}/etc/default/"
install -m 755 files/rc.local "${ROOTFS_DIR}/etc/"
if [ -n "${PUBKEY_SSH_FIRST_USER}" ]; then
install -v -m 0700 -o 1000 -g 1000 -d "${ROOTFS_DIR}"/home/"${FIRST_USER_NAME}"/.ssh
echo "${PUBKEY_SSH_FIRST_USER}" >"${ROOTFS_DIR}"/home/"${FIRST_USER_NAME}"/.ssh/authorized_keys
chown 1000:1000 "${ROOTFS_DIR}"/home/"${FIRST_USER_NAME}"/.ssh/authorized_keys
chmod 0600 "${ROOTFS_DIR}"/home/"${FIRST_USER_NAME}"/.ssh/authorized_keys
fi
if [ "${PUBKEY_ONLY_SSH}" = "1" ]; then
sed -i -Ee 's/^#?[[:blank:]]*PubkeyAuthentication[[:blank:]]*no[[:blank:]]*$/PubkeyAuthentication yes/
s/^#?[[:blank:]]*PasswordAuthentication[[:blank:]]*yes[[:blank:]]*$/PasswordAuthentication no/' "${ROOTFS_DIR}"/etc/ssh/sshd_config
fi
on_chroot << EOF
systemctl disable hwclock.sh
systemctl disable nfs-common
systemctl mask nfs-common
systemctl disable rpcbind
systemctl mask rpcbind
if [ "\${ENABLE_SSH}" == "1" ]; then
systemctl enable ssh
else
systemctl disable ssh
fi
if [ "${ROOTFS_RO}" = "1" ] ; then
systemctl disable regenerate_ssh_host_keys
systemctl mask regenerate_ssh_host_keys
else
systemctl enable regenerate_ssh_host_keys
fi
if [ "${ROOTFS_RO}" = "1" ] ; then
sed -i -e 's/^D \/tmp/#D \/tmp/g' /usr/lib/tmpfiles.d/tmp.conf
systemctl unmask overlay_mount
systemctl enable overlay_mount
else
systemctl disable overlay_mount
systemctl mask overlay_mount
fi
# Setup unique system folder /boot/sys_arm64_000
mkdir -p /boot/sys_arm64_000
find /boot -maxdepth 1 -name \*.dtb -exec mv \{\} /boot/sys_arm64_000/ \;
find /boot -maxdepth 1 -name kernel\*.img -exec mv \{\} /boot/sys_arm64_000/ \;
for i in /boot/COPYING.linux /boot/LICENCE.broadcom \
/boot/issue.txt /boot/rootfs.img ; do
if [ -f "\${i}" ]; then
mv "\${i}" /boot/sys_arm64_000/
fi
done
if [ -d /boot/overlays ] ; then
mv /boot/overlays /boot/sys_arm64_000/
fi
for i in /boot/config.txt /boot/cmdline.txt /boot/initrd.img ; do
if [ -f "\${i}" ]; then
mv "\${i}" /boot/sys_arm64_000/\`basename \${i}\`.orig
fi
done
if [ "${ROOTFS_RO}" = "1" ] ; then
systemctl disable resize2fs_once
systemctl mask resize2fs_once
systemctl disable apt-daily
systemctl mask apt-daily
systemctl disable apt-daily.timer
systemctl mask apt-daily.timer
systemctl disable apt-daily-upgrade.timer
systemctl mask apt-daily-upgrade.timer
systemctl disable logrotate.timer
systemctl mask logrotate.time
systemctl disable man-db.timer
systemctl mask man-db.timer
sed -i -e 's/#Storage=auto/Storage=volatile/g;s/#Compress=yes/Compress=yes/g;s/#RuntimeMaxUse=/RuntimeMaxUse=1M/g;s/#ForwardToSyslog=yes/ForwardToSyslog=no/g;s/#ForwardToWall=yes/ForwardToWall=no/g' /etc/systemd/journald.conf
sed -i -e 's/MODULES=most/MODULES=dep/g;s/BUSYBOX=auto/BUSYBOX=y/g;s/COMPRESS=gzip/COMPRESS=lzop/g' /etc/initramfs-tools/initramfs.conf
echo "squashfs" >> /etc/modules
echo "squashfs" >> /etc/initramfs-tools/modules
else
systemctl enable resize2fs_once
fi
EOF
if [ "${ROOTFS_RO}" = "1" ] ; then
install -m 644 files/boot/config-rootfs_ro.txt "${ROOTFS_DIR}/boot/"
install -m 644 files/boot/config-rootfs_ro.txt "${ROOTFS_DIR}/boot/sys_arm64_000/"
install -m 644 files/boot/sys_arm64_000/cmdline-rootfs_ro.txt "${ROOTFS_DIR}/boot/sys_arm64_000/cmdline.txt"
install -m 755 files/initramfs/loop_rootfs "${ROOTFS_DIR}/etc/initramfs-tools/scripts/init-premount/"
install -m 755 files/initramfs/fsck_custom "${ROOTFS_DIR}/etc/initramfs-tools/hooks/"
install -m 755 files/initramfs/extra_execs "${ROOTFS_DIR}/etc/initramfs-tools/hooks/"
else
install -m 644 files/boot/config-rootfs_rw.txt "${ROOTFS_DIR}/boot/"
install -m 644 files/boot/config-rootfs_rw.txt "${ROOTFS_DIR}/boot/sys_arm64_000/"
install -m 644 files/boot/sys_arm64_000/cmdline-rootfs_rw.txt "${ROOTFS_DIR}/boot/sys_arm64_000/cmdline.txt"
fi
if [ "${USE_QEMU}" = "1" ]; then
echo "enter QEMU mode"
install -m 644 files/90-qemu.rules "${ROOTFS_DIR}/etc/udev/rules.d/"
echo "leaving QEMU mode"
fi
on_chroot <<EOF
for GRP in input spi i2c gpio; do
groupadd -f -r "\$GRP"
done
for GRP in adm dialout cdrom audio users sudo video games plugdev input gpio spi i2c netdev; do
adduser $FIRST_USER_NAME \$GRP
done
setupcon --force --save-only -v
usermod --pass='*' root
if [ "${ROOTFS_RO}" = "1" ] ; then
KVERSION=\$(ls /lib/modules/ | tail -n 1)
echo "mkinitramfs for kernel version: \${KVERSION}"
/usr/sbin/mkinitramfs -o /boot/sys_arm64_000/initrd.img \${KVERSION}
mkdir -p /data/sdcard
find /boot/ -maxdepth 1 -type f \
-exec cp -d --preserve=all \{\} /data/sdcard/ \;
cp -a /boot/sys_arm64_000 /data/sdcard/
fi
EOF
if [ "${ROOTFS_RO}" != "1" ] ; then
rm -f "${ROOTFS_DIR}/etc/ssh/"ssh_host_*_key*
fi
|
