##// END OF EJS Templates
Raspi2-3_GenImage
RSS

Cloner depuis https://github.com/drtyhlpr/rpi23-gen-image.git

kernel features + nexmon monitor mode wlan patch(kali-kernel) with RPI3,RPI3B+ firmware patch...
kernel features + nexmon monitor mode wlan patch(kali-kernel) with RPI3,RPI3B+ firmware patch - ENABLE_NEXMON to use raspberry pi kali kernel sources which include patched nl80211 driver. Needed to crosscompile nexmon. Firmware for RPI3 and RPI3B+ is patched in the process to enable moniotor mode and injection. - Support for precompiled kernel. RPI3 64bit kernel from sakaki and a multi kernel (supporting all RPI models) from hyperiotOS. Needs further testing! - start.elf isn't supplied from precompiled kernel so always install them - ENABLE_SYSTEMDSWAP enables swapping service supporting new KERNEL_ZSWAP feature and also manages swap files - KERNEL_SECURITY activates apparmor, keyring,str/mem cpy protection, audit funcionality, integrity checks - KERNEL_ZSWAP enables compressed swap kernel feature. -KERNEL_VIRT enables virtualisation on RPI2,3,3P -KERNEL_BPF enables bpf syscall (supress journald warning message) - KERNEL_NF enable netfilter firewall (iptables-legacy is not default anymore) - KERNEL_DEFAULT_GOV set default cpu governor
Unknown - - Load All Authors

Fichier de la dernière révision:

r502:3d4e292749a1
r502:3d4e292749a1
Show More
15-rpi-config.sh
270 lines | 10.0 KiB | application/x-sh | BashLexer
/ bootstrap.d / 15-rpi-config.sh
Historique | Source | Brut |Copy content |Copy permalink
drtyhlpr
Updated: Moved RPi2/3 related configs to new file 14-rpi-config.sh
 r128 #
# Setup RPi2/3 config and cmdline
#
# Load utility functions
. ./functions.sh
Unknown
kernel features + nexmon monitor mode wlan patch(kali-kernel) with RPI3,RPI3B+ firmware patch...
 r502 if [ -n "$RPI_FIRMWARE_DIR" ] && [ -d "$RPI_FIRMWARE_DIR" ] ; then
# Install boot binaries from local directory
cp "${RPI_FIRMWARE_DIR}"/boot/bootcode.bin "${BOOT_DIR}"/bootcode.bin
cp "${RPI_FIRMWARE_DIR}"/boot/fixup.dat "${BOOT_DIR}"/fixup.dat
cp "${RPI_FIRMWARE_DIR}"/boot/fixup_cd.dat "${BOOT_DIR}"/fixup_cd.dat
cp "${RPI_FIRMWARE_DIR}"/boot/fixup_x.dat "${BOOT_DIR}"/fixup_x.dat
cp "${RPI_FIRMWARE_DIR}"/boot/start.elf "${BOOT_DIR}"/start.elf
cp "${RPI_FIRMWARE_DIR}"/boot/start_cd.elf "${BOOT_DIR}"/start_cd.elf
cp "${RPI_FIRMWARE_DIR}"/boot/start_x.elf "${BOOT_DIR}"/start_x.elf
else
# Create temporary directory for boot binaries
temp_dir=$(as_nobody mktemp -d)
# Install latest boot binaries from raspberry/firmware github
as_nobody wget -q -O "${temp_dir}/bootcode.bin" "${FIRMWARE_URL}/bootcode.bin"
as_nobody wget -q -O "${temp_dir}/fixup.dat" "${FIRMWARE_URL}/fixup.dat"
as_nobody wget -q -O "${temp_dir}/fixup_cd.dat" "${FIRMWARE_URL}/fixup_cd.dat"
as_nobody wget -q -O "${temp_dir}/fixup_x.dat" "${FIRMWARE_URL}/fixup_x.dat"
as_nobody wget -q -O "${temp_dir}/start.elf" "${FIRMWARE_URL}/start.elf"
as_nobody wget -q -O "${temp_dir}/start_cd.elf" "${FIRMWARE_URL}/start_cd.elf"
as_nobody wget -q -O "${temp_dir}/start_x.elf" "${FIRMWARE_URL}/start_x.elf"
# Move downloaded boot binaries
mv "${temp_dir}/"* "${BOOT_DIR}/"
# Remove temporary directory for boot binaries
rm -fr "${temp_dir}"
# Set permissions of the boot binaries
chown -R root:root "${BOOT_DIR}"
chmod -R 600 "${BOOT_DIR}"
drtyhlpr
Updated: Moved RPi2/3 related configs to new file 14-rpi-config.sh
 r128 fi
# Setup firmware boot cmdline
if [ "$ENABLE_SPLITFS" = true ] ; then
Unknown
its bin/sh again...
 r384 CMDLINE="dwc_otg.lpm_enable=0 root=/dev/sda1 rootfstype=ext4 rootflags=commit=100,data=writeback elevator=deadline rootwait console=tty1 init=/bin/systemd"
drtyhlpr
Updated: Moved RPi2/3 related configs to new file 14-rpi-config.sh
 r128 else
Unknown
its bin/sh again...
 r384 CMDLINE="dwc_otg.lpm_enable=0 root=/dev/mmcblk0p2 rootfstype=ext4 rootflags=commit=100,data=writeback elevator=deadline rootwait console=tty1 init=/bin/systemd"
drtyhlpr
Updated: Moved RPi2/3 related configs to new file 14-rpi-config.sh
 r128 fi
# Add encrypted root partition to cmdline.txt
if [ "$ENABLE_CRYPTFS" = true ] ; then
if [ "$ENABLE_SPLITFS" = true ] ; then
Unknown
https://www.shellcheck.net/...
 r336 CMDLINE=$(echo "${CMDLINE}" | sed "s/sda1/mapper\/${CRYPTFS_MAPPING} cryptdevice=\/dev\/sda1:${CRYPTFS_MAPPING}/")
drtyhlpr
Updated: Moved RPi2/3 related configs to new file 14-rpi-config.sh
 r128 else
Unknown
https://www.shellcheck.net/...
 r336 CMDLINE=$(echo "${CMDLINE}" | sed "s/mmcblk0p2/mapper\/${CRYPTFS_MAPPING} cryptdevice=\/dev\/mmcblk0p2:${CRYPTFS_MAPPING}/")
drtyhlpr
Updated: Moved RPi2/3 related configs to new file 14-rpi-config.sh
 r128 fi
fi
Unknown
kernel features + nexmon monitor mode wlan patch(kali-kernel) with RPI3,RPI3B+ firmware patch...
 r502 # Enable Kernel messages on standard output
Unknown
Bluetooth and serial...
 r451 if [ "$ENABLE_PRINTK" = true ] ; then
install_readonly files/sysctl.d/83-rpi-printk.conf "${ETC_DIR}/sysctl.d/83-rpi-printk.conf"
fi
Unknown
kernel features + nexmon monitor mode wlan patch(kali-kernel) with RPI3,RPI3B+ firmware patch...
 r502 # Install udev rule for serial alias - serial0 = console serial1=bluetooth
Unknown
Bluetooth and serial...
 r451 install_readonly files/etc/99-com.rules "${LIB_DIR}/udev/rules.d/99-com.rules"
Unknown
kernel features + nexmon monitor mode wlan patch(kali-kernel) with RPI3,RPI3B+ firmware patch...
 r502 # Remove IPv6 networking support
if [ "$ENABLE_IPV6" = false ] ; then
CMDLINE="${CMDLINE} ipv6.disable=1"
fi
# Automatically assign predictable network interface names
if [ "$ENABLE_IFNAMES" = false ] ; then
CMDLINE="${CMDLINE} net.ifnames=0"
else
CMDLINE="${CMDLINE} net.ifnames=1"
fi
# Install firmware config
install_readonly files/boot/config.txt "${BOOT_DIR}/config.txt"
# Locks CPU frequency at maximum
if [ "$ENABLE_TURBO" = true ] ; then
echo "force_turbo=1" >> "${BOOT_DIR}/config.txt"
# helps to avoid sdcard corruption when force_turbo is enabled.
echo "boot_delay=1" >> "${BOOT_DIR}/config.txt"
fi
Unknown
Bluetooth and serial...
 r451 if [ "$RPI_MODEL" = 0 ] || [ "$RPI_MODEL" = 3 ] || [ "$RPI_MODEL" = 3P ] ; then
# RPI0,3,3P Use default ttyS0 (mini-UART)as serial interface
SET_SERIAL="ttyS0"
# Bluetooth enabled
if [ "$ENABLE_BLUETOOTH" = true ] ; then
# Create temporary directory for Bluetooth sources
temp_dir=$(as_nobody mktemp -d)
# Fetch Bluetooth sources
as_nobody git -C "${temp_dir}" clone "${BLUETOOTH_URL}"
# Copy downloaded sources
mv "${temp_dir}/pi-bluetooth" "${R}/tmp/"
# Bluetooth firmware from arch aur https://aur.archlinux.org/packages/pi-bluetooth/
as_nobody wget -q -O "${R}/tmp/pi-bluetooth/LICENCE.broadcom_bcm43xx" https://aur.archlinux.org/cgit/aur.git/plain/LICENCE.broadcom_bcm43xx?h=pi-bluetooth
as_nobody wget -q -O "${R}/tmp/pi-bluetooth/BCM43430A1.hcd" https://aur.archlinux.org/cgit/aur.git/plain/BCM43430A1.hcd?h=pi-bluetooth
# Set permissions
chown -R root:root "${R}/tmp/pi-bluetooth"
# Install tools
install_readonly "${R}/tmp/pi-bluetooth/usr/bin/btuart" "${R}/usr/bin/btuart"
install_readonly "${R}/tmp/pi-bluetooth/usr/bin/bthelper" "${R}/usr/bin/bthelper"
# Install bluetooth udev rule
install_readonly "${R}/tmp/pi-bluetooth/lib/udev/rules.d/90-pi-bluetooth.rules" "${LIB_DIR}/udev/rules.d/90-pi-bluetooth.rules"
# Install Firmware Flash file and apropiate licence
mkdir -p "$BLUETOOTH_FIRMWARE_DIR"
install_readonly "${R}/tmp/pi-bluetooth/LICENCE.broadcom_bcm43xx" "${BLUETOOTH_FIRMWARE_DIR}/LICENCE.broadcom_bcm43xx"
install_readonly "${R}/tmp/pi-bluetooth/BCM43430A1.hcd" "${BLUETOOTH_FIRMWARE_DIR}/LICENCE.broadcom_bcm43xx"
install_readonly "${R}/tmp/pi-bluetooth/debian/pi-bluetooth.bthelper@.service" "${ETC_DIR}/systemd/system/pi-bluetooth.bthelper@.service"
install_readonly "${R}/tmp/pi-bluetooth/debian/pi-bluetooth.hciuart.service" "${ETC_DIR}/systemd/system/pi-bluetooth.hciuart.service"
# Remove temporary directory
rm -fr "${temp_dir}"
# Switch Pi3 Bluetooth function to use the mini-UART (ttyS0) and restore UART0/ttyAMA0 over GPIOs 14 & 15. Slow Bluetooth and slow cpu. Use /dev/ttyS0 instead of /dev/ttyAMA0
if [ "$ENABLE_MINIUART_OVERLAY" = true ] ; then
SET_SERIAL="ttyAMA0"
# set overlay to swap ttyAMA0 and ttyS0
echo "dtoverlay=pi3-miniuart-bt" >> "${BOOT_DIR}/config.txt"
# if force_turbo didn't lock cpu at high speed, lock it at low speed (XOR logic) or miniuart will be broken
if [ "$ENABLE_TURBO" = false ] ; then
echo "core_freq=250" >> "${BOOT_DIR}/config.txt"
fi
# Activate services
chroot_exec systemctl enable pi-bluetooth.hciuart.service
#chroot_exec systemctl enable pi-bluetooth.bthelper@.service
else
chroot_exec systemctl enable pi-bluetooth.hciuart.service
#chroot_exec systemctl enable pi-bluetooth.bthelper@.service
fi
else # if ENABLE_BLUETOOTH = false
# set overlay to disable bluetooth
echo "dtoverlay=pi3-disable-bt" >> "${BOOT_DIR}/config.txt"
fi # ENABLE_BLUETOOTH end
else
# RPI1,1P,2 Use default ttyAMA0 (full UART) as serial interface
SET_SERIAL="ttyAMA0"
fi
# may need sudo systemctl disable hciuart
drtyhlpr
Updated: Moved RPi2/3 related configs to new file 14-rpi-config.sh
 r128 if [ "$ENABLE_CONSOLE" = true ] ; then
Unknown
Bluetooth and serial...
 r451 echo "enable_uart=1" >> "${BOOT_DIR}/config.txt"
# add string to cmdline
CMDLINE="${CMDLINE} console=serial0,115200"
# Enable serial console systemd style
chroot_exec systemctl enable serial-getty\@"$SET_SERIAL".service
else
echo "enable_uart=0" >> "${BOOT_DIR}/config.txt"
# disable serial console systemd style
chroot_exec systemctl disable serial-getty\@"$SET_SERIAL".service
drtyhlpr
Updated: Moved RPi2/3 related configs to new file 14-rpi-config.sh
 r128 fi
Unknown
kernel features + nexmon monitor mode wlan patch(kali-kernel) with RPI3,RPI3B+ firmware patch...
 r502 if [ "$ENABLE_SYSTEMDSWAP" = true ] ; then
# Create temporary directory for systemd-swap sources
temp_dir=$(as_nobody mktemp -d)
drtyhlpr
Updated: Moved RPi2/3 related configs to new file 14-rpi-config.sh
 r128
Unknown
kernel features + nexmon monitor mode wlan patch(kali-kernel) with RPI3,RPI3B+ firmware patch...
 r502 # Fetch systemd-swap sources
as_nobody git -C "${temp_dir}" clone "${SYSTEMDSWAP_URL}"
# Copy downloaded systemd-swap sources
mv "${temp_dir}/systemd-swap" "${R}/tmp/"
# Set permissions of the systemd-swap sources
chown -R root:root "${R}/tmp/systemd-swap"
# Remove temporary directory for systemd-swap sources
rm -fr "${temp_dir}"
# Change into downloaded src dir
cd "${R}/tmp/systemd-swap" || exit
# Build package
. ./package.sh debian
# Install package
chroot_exec dpkg -i /tmp/systemd-swap/systemd-swap-*any.deb
# Enable service
chroot_exec systemctl enable systemd-swap
# Change back into script root dir
cd "${WORKDIR}" || exit
drtyhlpr
Updated: Moved RPi2/3 related configs to new file 14-rpi-config.sh
 r128 else
Unknown
kernel features + nexmon monitor mode wlan patch(kali-kernel) with RPI3,RPI3B+ firmware patch...
 r502 # Enable ZSWAP in cmdline if systemd-swap is not used
if [ "$KERNEL_ZSWAP" = true ] ; then
CMDLINE="${CMDLINE} zswap.enabled=1 zswap.max_pool_percent=25 zswap.compressor=lz4"
fi
drtyhlpr
Updated: Moved RPi2/3 related configs to new file 14-rpi-config.sh
 r128 fi
Unknown
kernel features + nexmon monitor mode wlan patch(kali-kernel) with RPI3,RPI3B+ firmware patch...
 r502 if [ "$KERNEL_SECURITY" = true ] ; then
CMDLINE="${CMDLINE} apparmor=1 security=apparmor"
fi
drtyhlpr
Updated: Moved RPi2/3 related configs to new file 14-rpi-config.sh
 r128
# Install firmware boot cmdline
echo "${CMDLINE}" > "${BOOT_DIR}/cmdline.txt"
# Setup minimal GPU memory allocation size: 16MB (no X)
if [ "$ENABLE_MINGPU" = true ] ; then
echo "gpu_mem=16" >> "${BOOT_DIR}/config.txt"
fi
# Setup boot with initramfs
if [ "$ENABLE_INITRAMFS" = true ] ; then
echo "initramfs initramfs-${KERNEL_VERSION} followkernel" >> "${BOOT_DIR}/config.txt"
fi
# Create firmware configuration and cmdline symlinks
ln -sf firmware/config.txt "${R}/boot/config.txt"
ln -sf firmware/cmdline.txt "${R}/boot/cmdline.txt"
# Install and setup kernel modules to load at boot
Unknown
add bluetooth firmware and systemd service...
 r368 mkdir -p "${LIB_DIR}/modules-load.d/"
install_readonly files/modules/rpi2.conf "${LIB_DIR}/modules-load.d/rpi2.conf"
drtyhlpr
Updated: Moved RPi2/3 related configs to new file 14-rpi-config.sh
 r128
# Load hardware random module at boot
if [ "$ENABLE_HWRANDOM" = true ] && [ "$BUILD_KERNEL" = false ] ; then
Unknown
add bluetooth firmware and systemd service...
 r368 sed -i "s/^# bcm2708_rng/bcm2708_rng/" "${LIB_DIR}/modules-load.d/rpi2.conf"
drtyhlpr
Updated: Moved RPi2/3 related configs to new file 14-rpi-config.sh
 r128 fi
# Load sound module at boot
if [ "$ENABLE_SOUND" = true ] ; then
Unknown
add bluetooth firmware and systemd service...
 r368 sed -i "s/^# snd_bcm2835/snd_bcm2835/" "${LIB_DIR}/modules-load.d/rpi2.conf"
drtyhlpr
Updated: Dropping privileges, chroot compiler install, dropbear sshd config
 r142 else
echo "dtparam=audio=off" >> "${BOOT_DIR}/config.txt"
drtyhlpr
Updated: Moved RPi2/3 related configs to new file 14-rpi-config.sh
 r128 fi
# Enable I2C interface
if [ "$ENABLE_I2C" = true ] ; then
echo "dtparam=i2c_arm=on" >> "${BOOT_DIR}/config.txt"
Unknown
add bluetooth firmware and systemd service...
 r368 sed -i "s/^# i2c-bcm2708/i2c-bcm2708/" "${LIB_DIR}/modules-load.d/rpi2.conf"
sed -i "s/^# i2c-dev/i2c-dev/" "${LIB_DIR}/modules-load.d/rpi2.conf"
drtyhlpr
Updated: Moved RPi2/3 related configs to new file 14-rpi-config.sh
 r128 fi
# Enable SPI interface
if [ "$ENABLE_SPI" = true ] ; then
echo "dtparam=spi=on" >> "${BOOT_DIR}/config.txt"
Unknown
add bluetooth firmware and systemd service...
 r368 echo "spi-bcm2708" >> "${LIB_DIR}/modules-load.d/rpi2.conf"
Unknown
Fixing SPI on RPI 3B+
 r274 if [ "$RPI_MODEL" = 3 ] || [ "$RPI_MODEL" = 3P ]; then
Unknown
add bluetooth firmware and systemd service...
 r368 sed -i "s/spi-bcm2708/spi-bcm2835/" "${LIB_DIR}/modules-load.d/rpi2.conf"
drtyhlpr
Updated: Moved RPi2/3 related configs to new file 14-rpi-config.sh
 r128 fi
fi
drtyhlpr
Added: Disable RPi2/3 under-volt warnings (from michaelfranzl PR)
 r130 # Disable RPi2/3 under-voltage warnings
Unknown
https://www.shellcheck.net/...
 r336 if [ -n "$DISABLE_UNDERVOLT_WARNINGS" ] ; then
drtyhlpr
Added: Disable RPi2/3 under-volt warnings (from michaelfranzl PR)
 r130 echo "avoid_warnings=${DISABLE_UNDERVOLT_WARNINGS}" >> "${BOOT_DIR}/config.txt"
fi
drtyhlpr
Updated: Moved RPi2/3 related configs to new file 14-rpi-config.sh
 r128 # Install kernel modules blacklist
mkdir -p "${ETC_DIR}/modprobe.d/"
install_readonly files/modules/raspi-blacklist.conf "${ETC_DIR}/modprobe.d/raspi-blacklist.conf"
# Install sysctl.d configuration files
install_readonly files/sysctl.d/81-rpi-vm.conf "${ETC_DIR}/sysctl.d/81-rpi-vm.conf"