15-rpi-config.sh
269 lines
| 10.0 KiB
| application/x-sh
|
BashLexer
/ bootstrap.d / 15-rpi-config.sh
drtyhlpr
|
r128 | # | ||
# Setup RPi2/3 config and cmdline | ||||
# | ||||
# Load utility functions | ||||
. ./functions.sh | ||||
Unknown
|
r524 | if [ -n "$RPI_FIRMWARE_DIR" ] && [ -d "$RPI_FIRMWARE_DIR" ] ; then | ||
# Install boot binaries from local directory | ||||
cp "${RPI_FIRMWARE_DIR}"/boot/bootcode.bin "${BOOT_DIR}"/bootcode.bin | ||||
cp "${RPI_FIRMWARE_DIR}"/boot/fixup.dat "${BOOT_DIR}"/fixup.dat | ||||
cp "${RPI_FIRMWARE_DIR}"/boot/fixup_cd.dat "${BOOT_DIR}"/fixup_cd.dat | ||||
cp "${RPI_FIRMWARE_DIR}"/boot/fixup_x.dat "${BOOT_DIR}"/fixup_x.dat | ||||
cp "${RPI_FIRMWARE_DIR}"/boot/start.elf "${BOOT_DIR}"/start.elf | ||||
cp "${RPI_FIRMWARE_DIR}"/boot/start_cd.elf "${BOOT_DIR}"/start_cd.elf | ||||
cp "${RPI_FIRMWARE_DIR}"/boot/start_x.elf "${BOOT_DIR}"/start_x.elf | ||||
else | ||||
# Create temporary directory for boot binaries | ||||
temp_dir=$(as_nobody mktemp -d) | ||||
drtyhlpr
|
r142 | |||
Unknown
|
r524 | # Install latest boot binaries from raspberry/firmware github | ||
as_nobody wget -q -O "${temp_dir}/bootcode.bin" "${FIRMWARE_URL}/bootcode.bin" | ||||
as_nobody wget -q -O "${temp_dir}/fixup.dat" "${FIRMWARE_URL}/fixup.dat" | ||||
as_nobody wget -q -O "${temp_dir}/fixup_cd.dat" "${FIRMWARE_URL}/fixup_cd.dat" | ||||
as_nobody wget -q -O "${temp_dir}/fixup_x.dat" "${FIRMWARE_URL}/fixup_x.dat" | ||||
as_nobody wget -q -O "${temp_dir}/start.elf" "${FIRMWARE_URL}/start.elf" | ||||
as_nobody wget -q -O "${temp_dir}/start_cd.elf" "${FIRMWARE_URL}/start_cd.elf" | ||||
as_nobody wget -q -O "${temp_dir}/start_x.elf" "${FIRMWARE_URL}/start_x.elf" | ||||
drtyhlpr
|
r142 | |||
Unknown
|
r524 | # Move downloaded boot binaries | ||
mv "${temp_dir}/"* "${BOOT_DIR}/" | ||||
drtyhlpr
|
r142 | |||
Unknown
|
r524 | # Remove temporary directory for boot binaries | ||
rm -fr "${temp_dir}" | ||||
drtyhlpr
|
r142 | |||
Unknown
|
r524 | # Set permissions of the boot binaries | ||
chown -R root:root "${BOOT_DIR}" | ||||
chmod -R 600 "${BOOT_DIR}" | ||||
fi | ||||
drtyhlpr
|
r128 | |||
# Setup firmware boot cmdline | ||||
burnbabyburn
|
r327 | if [ "$ENABLE_UBOOTUSB" = true ] ; then | ||
Unknown
|
r523 | CMDLINE="dwc_otg.lpm_enable=0 root=/dev/sda2 rootfstype=ext4 rootflags=commit=100,data=writeback elevator=deadline rootwait init=/bin/systemd" | ||
drtyhlpr
|
r128 | else | ||
burnbabyburn
|
r327 | if [ "$ENABLE_SPLITFS" = true ] ; then | ||
Unknown
|
r523 | CMDLINE="dwc_otg.lpm_enable=0 root=/dev/sda1 rootfstype=ext4 rootflags=commit=100,data=writeback elevator=deadline rootwait init=/bin/systemd" | ||
burnbabyburn
|
r327 | else | ||
Unknown
|
r523 | CMDLINE="dwc_otg.lpm_enable=0 root=/dev/mmcblk0p2 rootfstype=ext4 rootflags=commit=100,data=writeback elevator=deadline rootwait init=/bin/systemd" | ||
burnbabyburn
|
r327 | fi | ||
drtyhlpr
|
r128 | fi | ||
# Add encrypted root partition to cmdline.txt | ||||
if [ "$ENABLE_CRYPTFS" = true ] ; then | ||||
if [ "$ENABLE_SPLITFS" = true ] ; then | ||||
burnbabyburn
|
r312 | CMDLINE=$(echo "${CMDLINE}" | sed "s/sda1/mapper\/${CRYPTFS_MAPPING} cryptdevice=\/dev\/sda1:${CRYPTFS_MAPPING}/") | ||
drtyhlpr
|
r128 | else | ||
burnbabyburn
|
r327 | if [ "$ENABLE_UBOOTUSB" = true ] ; then | ||
CMDLINE=$(echo "${CMDLINE}" | sed "s/sda2/mapper\/${CRYPTFS_MAPPING} cryptdevice=\/dev\/sda2:${CRYPTFS_MAPPING}/") | ||||
else | ||||
CMDLINE=$(echo "${CMDLINE}" | sed "s/mmcblk0p2/mapper\/${CRYPTFS_MAPPING} cryptdevice=\/dev\/mmcblk0p2:${CRYPTFS_MAPPING}/") | ||||
burnbabyburn
|
r330 | fi | ||
drtyhlpr
|
r128 | fi | ||
fi | ||||
Unknown
|
r494 | # Enable Kernel messages on standard output | ||
Unknown
|
r469 | if [ "$ENABLE_PRINTK" = true ] ; then | ||
install_readonly files/sysctl.d/83-rpi-printk.conf "${ETC_DIR}/sysctl.d/83-rpi-printk.conf" | ||||
fi | ||||
# Install udev rule for serial alias - serial0 = console serial1=bluetooth | ||||
install_readonly files/etc/99-com.rules "${LIB_DIR}/udev/rules.d/99-com.rules" | ||||
# Remove IPv6 networking support | ||||
if [ "$ENABLE_IPV6" = false ] ; then | ||||
CMDLINE="${CMDLINE} ipv6.disable=1" | ||||
fi | ||||
# Automatically assign predictable network interface names | ||||
if [ "$ENABLE_IFNAMES" = false ] ; then | ||||
CMDLINE="${CMDLINE} net.ifnames=0" | ||||
else | ||||
CMDLINE="${CMDLINE} net.ifnames=1" | ||||
fi | ||||
# Install firmware config | ||||
install_readonly files/boot/config.txt "${BOOT_DIR}/config.txt" | ||||
Unknown
|
r494 | # Locks CPU frequency at maximum | ||
Unknown
|
r443 | if [ "$ENABLE_TURBO" = true ] ; then | ||
echo "force_turbo=1" >> "${BOOT_DIR}/config.txt" | ||||
Unknown
|
r458 | # helps to avoid sdcard corruption when force_turbo is enabled. | ||
echo "boot_delay=1" >> "${BOOT_DIR}/config.txt" | ||||
Unknown
|
r443 | fi | ||
if [ "$RPI_MODEL" = 0 ] || [ "$RPI_MODEL" = 3 ] || [ "$RPI_MODEL" = 3P ] ; then | ||||
burnbabyburn
|
r504 | |||
Unknown
|
r443 | # Bluetooth enabled | ||
if [ "$ENABLE_BLUETOOTH" = true ] ; then | ||||
# Create temporary directory for Bluetooth sources | ||||
temp_dir=$(as_nobody mktemp -d) | ||||
# Fetch Bluetooth sources | ||||
as_nobody git -C "${temp_dir}" clone "${BLUETOOTH_URL}" | ||||
# Copy downloaded sources | ||||
mv "${temp_dir}/pi-bluetooth" "${R}/tmp/" | ||||
# Bluetooth firmware from arch aur https://aur.archlinux.org/packages/pi-bluetooth/ | ||||
as_nobody wget -q -O "${R}/tmp/pi-bluetooth/LICENCE.broadcom_bcm43xx" https://aur.archlinux.org/cgit/aur.git/plain/LICENCE.broadcom_bcm43xx?h=pi-bluetooth | ||||
as_nobody wget -q -O "${R}/tmp/pi-bluetooth/BCM43430A1.hcd" https://aur.archlinux.org/cgit/aur.git/plain/BCM43430A1.hcd?h=pi-bluetooth | ||||
# Set permissions | ||||
chown -R root:root "${R}/tmp/pi-bluetooth" | ||||
# Install tools | ||||
install_readonly "${R}/tmp/pi-bluetooth/usr/bin/btuart" "${R}/usr/bin/btuart" | ||||
install_readonly "${R}/tmp/pi-bluetooth/usr/bin/bthelper" "${R}/usr/bin/bthelper" | ||||
burnbabyburn
|
r504 | |||
Unknown
|
r483 | # make scripts executable | ||
Unknown
|
r480 | chmod +x "${R}/usr/bin/bthelper" | ||
chmod +x "${R}/usr/bin/btuart" | ||||
Unknown
|
r443 | |||
# Install bluetooth udev rule | ||||
install_readonly "${R}/tmp/pi-bluetooth/lib/udev/rules.d/90-pi-bluetooth.rules" "${LIB_DIR}/udev/rules.d/90-pi-bluetooth.rules" | ||||
# Install Firmware Flash file and apropiate licence | ||||
Unknown
|
r446 | mkdir -p "$BLUETOOTH_FIRMWARE_DIR" | ||
install_readonly "${R}/tmp/pi-bluetooth/LICENCE.broadcom_bcm43xx" "${BLUETOOTH_FIRMWARE_DIR}/LICENCE.broadcom_bcm43xx" | ||||
install_readonly "${R}/tmp/pi-bluetooth/BCM43430A1.hcd" "${BLUETOOTH_FIRMWARE_DIR}/LICENCE.broadcom_bcm43xx" | ||||
Unknown
|
r443 | install_readonly "${R}/tmp/pi-bluetooth/debian/pi-bluetooth.bthelper@.service" "${ETC_DIR}/systemd/system/pi-bluetooth.bthelper@.service" | ||
install_readonly "${R}/tmp/pi-bluetooth/debian/pi-bluetooth.hciuart.service" "${ETC_DIR}/systemd/system/pi-bluetooth.hciuart.service" | ||||
burnbabyburn
|
r504 | |||
Unknown
|
r476 | # Remove temporary directories | ||
Unknown
|
r443 | rm -fr "${temp_dir}" | ||
Unknown
|
r476 | rm -fr "${R}"/tmp/pi-bluetooth | ||
burnbabyburn
|
r504 | |||
Unknown
|
r443 | # Switch Pi3 Bluetooth function to use the mini-UART (ttyS0) and restore UART0/ttyAMA0 over GPIOs 14 & 15. Slow Bluetooth and slow cpu. Use /dev/ttyS0 instead of /dev/ttyAMA0 | ||
if [ "$ENABLE_MINIUART_OVERLAY" = true ] ; then | ||||
# set overlay to swap ttyAMA0 and ttyS0 | ||||
echo "dtoverlay=pi3-miniuart-bt" >> "${BOOT_DIR}/config.txt" | ||||
# if force_turbo didn't lock cpu at high speed, lock it at low speed (XOR logic) or miniuart will be broken | ||||
if [ "$ENABLE_TURBO" = false ] ; then | ||||
echo "core_freq=250" >> "${BOOT_DIR}/config.txt" | ||||
fi | ||||
fi | ||||
burnbabyburn
|
r504 | |||
Unknown
|
r469 | # Activate services | ||
chroot_exec systemctl enable pi-bluetooth.hciuart.service | ||||
burnbabyburn
|
r504 | |||
Unknown
|
r443 | else # if ENABLE_BLUETOOTH = false | ||
# set overlay to disable bluetooth | ||||
echo "dtoverlay=pi3-disable-bt" >> "${BOOT_DIR}/config.txt" | ||||
fi # ENABLE_BLUETOOTH end | ||||
fi | ||||
# may need sudo systemctl disable hciuart | ||||
if [ "$ENABLE_CONSOLE" = true ] ; then | ||||
Unknown
|
r449 | echo "enable_uart=1" >> "${BOOT_DIR}/config.txt" | ||
Unknown
|
r443 | # add string to cmdline | ||
CMDLINE="${CMDLINE} console=serial0,115200" | ||||
burnbabyburn
|
r504 | |||
Unknown
|
r443 | # Enable serial console systemd style | ||
Unknown
|
r524 | chroot_exec systemctl enable serial-getty\@serial0.service | ||
Unknown
|
r443 | else | ||
echo "enable_uart=0" >> "${BOOT_DIR}/config.txt" | ||||
Unknown
|
r460 | fi | ||
if [ "$ENABLE_SYSTEMDSWAP" = true ] ; then | ||||
# Create temporary directory for systemd-swap sources | ||||
temp_dir=$(as_nobody mktemp -d) | ||||
# Fetch systemd-swap sources | ||||
Unknown
|
r495 | as_nobody git -C "${temp_dir}" clone "${SYSTEMDSWAP_URL}" | ||
Unknown
|
r460 | |||
# Copy downloaded systemd-swap sources | ||||
mv "${temp_dir}/systemd-swap" "${R}/tmp/" | ||||
# Change into downloaded src dir | ||||
cd "${R}/tmp/systemd-swap" || exit | ||||
burnbabyburn
|
r504 | |||
Unknown
|
r460 | # Build package | ||
Unknown
|
r510 | bash ./package.sh debian | ||
Unknown
|
r512 | |||
# Change back into script root dir | ||||
cd "${WORKDIR}" || exit | ||||
# Set permissions of the systemd-swap sources | ||||
chown -R root:root "${R}/tmp/systemd-swap" | ||||
burnbabyburn
|
r504 | |||
Unknown
|
r519 | # Install package - IMPROVE AND MAKE IT POSSIBLE WITHOUT VERSION NR. | ||
Unknown
|
r514 | chroot_exec dpkg -i /tmp/systemd-swap/systemd-swap_4.0.1_any.deb | ||
burnbabyburn
|
r504 | |||
Unknown
|
r460 | # Enable service | ||
chroot_exec systemctl enable systemd-swap | ||||
Unknown
|
r512 | |||
# Remove temporary directory for systemd-swap sources | ||||
rm -fr "${temp_dir}" | ||||
Unknown
|
r494 | else | ||
# Enable ZSWAP in cmdline if systemd-swap is not used | ||||
if [ "$KERNEL_ZSWAP" = true ] ; then | ||||
burnbabyburn
|
r504 | CMDLINE="${CMDLINE} zswap.enabled=1 zswap.max_pool_percent=25 zswap.compressor=lz4" | ||
Unknown
|
r494 | fi | ||
Unknown
|
r460 | fi | ||
Unknown
|
r499 | if [ "$KERNEL_SECURITY" = true ] ; then | ||
CMDLINE="${CMDLINE} apparmor=1 security=apparmor" | ||||
fi | ||||
Unknown
|
r460 | |||
drtyhlpr
|
r128 | # Install firmware boot cmdline | ||
echo "${CMDLINE}" > "${BOOT_DIR}/cmdline.txt" | ||||
# Setup minimal GPU memory allocation size: 16MB (no X) | ||||
if [ "$ENABLE_MINGPU" = true ] ; then | ||||
echo "gpu_mem=16" >> "${BOOT_DIR}/config.txt" | ||||
fi | ||||
# Setup boot with initramfs | ||||
if [ "$ENABLE_INITRAMFS" = true ] ; then | ||||
echo "initramfs initramfs-${KERNEL_VERSION} followkernel" >> "${BOOT_DIR}/config.txt" | ||||
fi | ||||
# Create firmware configuration and cmdline symlinks | ||||
ln -sf firmware/config.txt "${R}/boot/config.txt" | ||||
ln -sf firmware/cmdline.txt "${R}/boot/cmdline.txt" | ||||
# Install and setup kernel modules to load at boot | ||||
Unknown
|
r357 | mkdir -p "${LIB_DIR}/modules-load.d/" | ||
install_readonly files/modules/rpi2.conf "${LIB_DIR}/modules-load.d/rpi2.conf" | ||||
drtyhlpr
|
r128 | |||
# Load hardware random module at boot | ||||
if [ "$ENABLE_HWRANDOM" = true ] && [ "$BUILD_KERNEL" = false ] ; then | ||||
Unknown
|
r357 | sed -i "s/^# bcm2708_rng/bcm2708_rng/" "${LIB_DIR}/modules-load.d/rpi2.conf" | ||
drtyhlpr
|
r128 | fi | ||
# Load sound module at boot | ||||
if [ "$ENABLE_SOUND" = true ] ; then | ||||
Unknown
|
r357 | sed -i "s/^# snd_bcm2835/snd_bcm2835/" "${LIB_DIR}/modules-load.d/rpi2.conf" | ||
drtyhlpr
|
r142 | else | ||
echo "dtparam=audio=off" >> "${BOOT_DIR}/config.txt" | ||||
drtyhlpr
|
r128 | fi | ||
# Enable I2C interface | ||||
if [ "$ENABLE_I2C" = true ] ; then | ||||
echo "dtparam=i2c_arm=on" >> "${BOOT_DIR}/config.txt" | ||||
Unknown
|
r357 | sed -i "s/^# i2c-bcm2708/i2c-bcm2708/" "${LIB_DIR}/modules-load.d/rpi2.conf" | ||
sed -i "s/^# i2c-dev/i2c-dev/" "${LIB_DIR}/modules-load.d/rpi2.conf" | ||||
drtyhlpr
|
r128 | fi | ||
# Enable SPI interface | ||||
if [ "$ENABLE_SPI" = true ] ; then | ||||
echo "dtparam=spi=on" >> "${BOOT_DIR}/config.txt" | ||||
Unknown
|
r357 | echo "spi-bcm2708" >> "${LIB_DIR}/modules-load.d/rpi2.conf" | ||
Unknown
|
r274 | if [ "$RPI_MODEL" = 3 ] || [ "$RPI_MODEL" = 3P ]; then | ||
Unknown
|
r357 | sed -i "s/spi-bcm2708/spi-bcm2835/" "${LIB_DIR}/modules-load.d/rpi2.conf" | ||
drtyhlpr
|
r128 | fi | ||
fi | ||||
drtyhlpr
|
r130 | # Disable RPi2/3 under-voltage warnings | ||
burnbabyburn
|
r312 | if [ -n "$DISABLE_UNDERVOLT_WARNINGS" ] ; then | ||
drtyhlpr
|
r130 | echo "avoid_warnings=${DISABLE_UNDERVOLT_WARNINGS}" >> "${BOOT_DIR}/config.txt" | ||
fi | ||||
drtyhlpr
|
r128 | # Install kernel modules blacklist | ||
mkdir -p "${ETC_DIR}/modprobe.d/" | ||||
install_readonly files/modules/raspi-blacklist.conf "${ETC_DIR}/modprobe.d/raspi-blacklist.conf" | ||||
# Install sysctl.d configuration files | ||||
install_readonly files/sysctl.d/81-rpi-vm.conf "${ETC_DIR}/sysctl.d/81-rpi-vm.conf" | ||||