Raspi2-3_GenImage Files · functions.sh · Collaboration Tremplin des Sciences

kernel features + nexmon monitor mode wlan patch(kali-kernel) with RPI3,RPI3B+ firmware patch...

kernel features + nexmon monitor mode wlan patch(kali-kernel) with RPI3,RPI3B+ firmware patch - ENABLE_NEXMON to use raspberry pi kali kernel sources which include patched nl80211 driver. Needed to crosscompile nexmon. Firmware for RPI3 and RPI3B+ is patched in the process to enable moniotor mode and injection. - Support for precompiled kernel. RPI3 64bit kernel from sakaki and a multi kernel (supporting all RPI models) from hyperiotOS. Needs further testing! - start.elf isn't supplied from precompiled kernel so always install them - ENABLE_SYSTEMDSWAP enables swapping service supporting new KERNEL_ZSWAP feature and also manages swap files - KERNEL_SECURITY activates apparmor, keyring,str/mem cpy protection, audit funcionality, integrity checks - KERNEL_ZSWAP enables compressed swap kernel feature. -KERNEL_VIRT enables virtualisation on RPI2,3,3P -KERNEL_BPF enables bpf syscall (supress journald warning message) - KERNEL_NF enable netfilter firewall (iptables-legacy is not default anymore) - KERNEL_DEFAULT_GOV set default cpu governor

Unknown - - Load All Authors

Fichier de la dernière révision:

r420:0a810af45a73


                r502:3d4e292749a1

Download file

             functions.sh
        
                    77 lines
            
             | 2.1 KiB
            
                | application/x-sh
            
             |
                BashLexer
            
             / functions.sh
          
                    Historique
                
                 |
                  Source
                 | Brut
                 |Copy content
                 |Copy permalink

        drtyhlpr
    
Added Raspberry Pi 3 model support

              r94
            
      # This file contains utility functions used by rpi23-gen-image.sh

        Jan Wagner
    
spliting more files, fix-uboot, fix-fbturbo, fix-locale

              r67
            
        Filip Pytloun
    
Refactor: split bootstrap actions and allow custom

              r56
            
      cleanup (){

        set +x

        set +e

        Jan Wagner
    
spliting more files, fix-uboot, fix-fbturbo, fix-locale

              r67
            
        # Identify and kill all processes still using files

        Filip Pytloun
    
Enhance cleanup by killing processes running in endpoint

              r59
            
        echo "killing processes using mount point ..."

        Jan Wagner
    
fix: ENABLE_CRYPTFS -> UBOOT, SPLITFS, EXPANDROOT - cleanup

              r82
            
        fuser -k "${R}"

        Filip Pytloun
    
Enhance cleanup by killing processes running in endpoint

              r59
            
        sleep 3

        Jan Wagner
    
fix: ENABLE_CRYPTFS -> UBOOT, SPLITFS, EXPANDROOT - cleanup

              r82
            
        fuser -9 -k -v "${R}"

        Jan Wagner
    
spliting more files, fix-uboot, fix-fbturbo, fix-locale

              r67
            
        Jan Wagner
    
shred-fix

              r78
            
        # Clean up temporary .password file

        if [ -r ".password" ] ; then

          shred -zu .password

        fi

        Jan Wagner
    
spliting more files, fix-uboot, fix-fbturbo, fix-locale

              r67
            
        # Clean up all temporary mount points

        Filip Pytloun
    
Refactor: split bootstrap actions and allow custom

              r56
            
        echo "removing temporary mount points ..."

        Jan Wagner
    
fix: ENABLE_CRYPTFS -> UBOOT, SPLITFS, EXPANDROOT - cleanup

              r82
            
        umount -l "${R}/proc" 2> /dev/null

        umount -l "${R}/sys" 2> /dev/null

        umount -l "${R}/dev/pts" 2> /dev/null

        Filip Pytloun
    
Refactor: split bootstrap actions and allow custom

              r56
            
        umount "$BUILDDIR/mount/boot/firmware" 2> /dev/null

        umount "$BUILDDIR/mount" 2> /dev/null

        Jan Wagner
    
Added: ENABLE_CRYPTFS - encrypted rootfs, use-latest-bootloader, cp-cleanup

              r77
            
        cryptsetup close "${CRYPTFS_MAPPING}" 2> /dev/null

        Vincent Knecht
    
Added ENABLE_SPLITFS option to produce distinct /boot/firmware and root images

              r66
            
        losetup -d "$ROOT_LOOP" 2> /dev/null

        losetup -d "$FRMW_LOOP" 2> /dev/null

        Filip Pytloun
    
Refactor: split bootstrap actions and allow custom

              r56
            
        trap - 0 1 2 3 6

      }

      chroot_exec() {

        # Exec command in chroot

        Unknown
    
fixes...

              r420
            
        LANG=C LC_ALL=C DEBIAN_FRONTEND=noninteractive chroot "${R}" "$@"

        Filip Pytloun
    
Refactor: split bootstrap actions and allow custom

              r56
            
      }

        Jan Wagner
    
spliting more files, fix-uboot, fix-fbturbo, fix-locale

              r67
            
        Petter Reinholdtsen
    
Introduce as_nobody() function to make it easier to control how it is done....

              r174
            
      as_nobody() {

        # Exec command as user nobody

        Unknown
    
fixes...

              r420
            
        sudo -E -u nobody LANG=C LC_ALL=C "$@"

        Petter Reinholdtsen
    
Introduce as_nobody() function to make it easier to control how it is done....

              r174
            
      }

        Jan Wagner
    
spliting more files, fix-uboot, fix-fbturbo, fix-locale

              r67
            
      install_readonly() {

        # Install file with user read-only permissions

        Unknown
    
fixes...

              r420
            
        install -o root -g root -m 644 "$@"

        Jan Wagner
    
spliting more files, fix-uboot, fix-fbturbo, fix-locale

              r67
            
      }

      install_exec() {

        # Install file with root exec permissions

        Unknown
    
fixes...

              r420
            
        install -o root -g root -m 744 "$@"

        Jan Wagner
    
spliting more files, fix-uboot, fix-fbturbo, fix-locale

              r67
            
      }

        drtyhlpr
    
Added: Configuration template file support (testing)

              r117
            
      use_template () {

        # Test if configuration template file exists

        if [ ! -r "./templates/${CONFIG_TEMPLATE}" ] ; then

          echo "error: configuration template ${CONFIG_TEMPLATE} not found"

          exit 1

        fi

        # Load template configuration parameters

        . "./templates/${CONFIG_TEMPLATE}"

      }

        drtyhlpr
    
Updated: Dropping privileges, chroot compiler install, dropbear sshd config

              r142
            
      chroot_install_cc() {

        # Install c/c++ build environment inside the chroot

        if [ -z "${COMPILER_PACKAGES}" ] ; then

          COMPILER_PACKAGES=$(chroot_exec apt-get -s install g++ make bc | grep "^Inst " | awk -v ORS=" " '{ print $2 }')

        Unknown
    
its bin/sh again...

              r384
            
      	# Install COMPILER_PACKAGES in chroot

        Unknown
    
fixes...

              r420
            
          chroot_exec apt-get -q -y --allow-unauthenticated --no-install-recommends install "${COMPILER_PACKAGES}"

        drtyhlpr
    
Updated: Dropping privileges, chroot compiler install, dropbear sshd config

              r142
            
        fi

      }

      chroot_remove_cc() {

        # Remove c/c++ build environment from the chroot

        Unknown
    
fixes...

              r420
            
        if [ -n "${COMPILER_PACKAGES}" ] ; then

          chroot_exec apt-get -qq -y --auto-remove purge "${COMPILER_PACKAGES}"

        drtyhlpr
    
Updated: Dropping privileges, chroot compiler install, dropbear sshd config

              r142
            
          COMPILER_PACKAGES=""

        fi

      }

	Site-wide shortcuts
/	Use quick search box
g h	Goto home page
g g	Goto my private gists page
g G	Goto my public gists page
g 0-9	Goto bookmarked items from 0-9
n r	New repository page
n g	New gist page

	Dépôts
g s	Goto summary page
g c	Goto changelog page
g f	Goto files page
g F	Goto files page with file search activated
g p	Goto pull requests page
g o	Goto repository settings
g O	Goto repository access permissions settings
t s	Toggle sidebar on some pages

drtyhlpr Added Raspberry Pi 3 model support	r94	# This file contains utility functions used by rpi23-gen-image.sh
Jan Wagner spliting more files, fix-uboot, fix-fbturbo, fix-locale	r67
Filip Pytloun Refactor: split bootstrap actions and allow custom	r56	cleanup (){
		set +x
		set +e
Jan Wagner spliting more files, fix-uboot, fix-fbturbo, fix-locale	r67
		# Identify and kill all processes still using files
Filip Pytloun Enhance cleanup by killing processes running in endpoint	r59	echo "killing processes using mount point ..."
Jan Wagner fix: ENABLE_CRYPTFS -> UBOOT, SPLITFS, EXPANDROOT - cleanup	r82	fuser -k "${R}"
Filip Pytloun Enhance cleanup by killing processes running in endpoint	r59	sleep 3
Jan Wagner fix: ENABLE_CRYPTFS -> UBOOT, SPLITFS, EXPANDROOT - cleanup	r82	fuser -9 -k -v "${R}"
Jan Wagner spliting more files, fix-uboot, fix-fbturbo, fix-locale	r67
Jan Wagner shred-fix	r78	# Clean up temporary .password file
		if [ -r ".password" ] ; then
		shred -zu .password
		fi

Jan Wagner spliting more files, fix-uboot, fix-fbturbo, fix-locale	r67	# Clean up all temporary mount points
Filip Pytloun Refactor: split bootstrap actions and allow custom	r56	echo "removing temporary mount points ..."
Jan Wagner fix: ENABLE_CRYPTFS -> UBOOT, SPLITFS, EXPANDROOT - cleanup	r82	umount -l "${R}/proc" 2> /dev/null
		umount -l "${R}/sys" 2> /dev/null
		umount -l "${R}/dev/pts" 2> /dev/null
Filip Pytloun Refactor: split bootstrap actions and allow custom	r56	umount "$BUILDDIR/mount/boot/firmware" 2> /dev/null
		umount "$BUILDDIR/mount" 2> /dev/null
Jan Wagner Added: ENABLE_CRYPTFS - encrypted rootfs, use-latest-bootloader, cp-cleanup	r77	cryptsetup close "${CRYPTFS_MAPPING}" 2> /dev/null
Vincent Knecht Added ENABLE_SPLITFS option to produce distinct /boot/firmware and root images	r66	losetup -d "$ROOT_LOOP" 2> /dev/null
		losetup -d "$FRMW_LOOP" 2> /dev/null
Filip Pytloun Refactor: split bootstrap actions and allow custom	r56	trap - 0 1 2 3 6
		}

		chroot_exec() {
		# Exec command in chroot
Unknown fixes...	r420	LANG=C LC_ALL=C DEBIAN_FRONTEND=noninteractive chroot "${R}" "$@"
Filip Pytloun Refactor: split bootstrap actions and allow custom	r56	}
Jan Wagner spliting more files, fix-uboot, fix-fbturbo, fix-locale	r67
Petter Reinholdtsen Introduce as_nobody() function to make it easier to control how it is done....	r174	as_nobody() {
		# Exec command as user nobody
Unknown fixes...	r420	sudo -E -u nobody LANG=C LC_ALL=C "$@"
Petter Reinholdtsen Introduce as_nobody() function to make it easier to control how it is done....	r174	}

Jan Wagner spliting more files, fix-uboot, fix-fbturbo, fix-locale	r67	install_readonly() {
		# Install file with user read-only permissions
Unknown fixes...	r420	install -o root -g root -m 644 "$@"
Jan Wagner spliting more files, fix-uboot, fix-fbturbo, fix-locale	r67	}

		install_exec() {
		# Install file with root exec permissions
Unknown fixes...	r420	install -o root -g root -m 744 "$@"
Jan Wagner spliting more files, fix-uboot, fix-fbturbo, fix-locale	r67	}
drtyhlpr Added: Configuration template file support (testing)	r117
		use_template () {
		# Test if configuration template file exists
		if [ ! -r "./templates/${CONFIG_TEMPLATE}" ] ; then
		echo "error: configuration template ${CONFIG_TEMPLATE} not found"
		exit 1
		fi

		# Load template configuration parameters
		. "./templates/${CONFIG_TEMPLATE}"
		}
drtyhlpr Updated: Dropping privileges, chroot compiler install, dropbear sshd config	r142
		chroot_install_cc() {
		# Install c/c++ build environment inside the chroot
		if [ -z "${COMPILER_PACKAGES}" ] ; then
		COMPILER_PACKAGES=$(chroot_exec apt-get -s install g++ make bc \| grep "^Inst " \| awk -v ORS=" " '{ print $2 }')
Unknown its bin/sh again...	r384	# Install COMPILER_PACKAGES in chroot
Unknown fixes...	r420	chroot_exec apt-get -q -y --allow-unauthenticated --no-install-recommends install "${COMPILER_PACKAGES}"
drtyhlpr Updated: Dropping privileges, chroot compiler install, dropbear sshd config	r142	fi
		}

		chroot_remove_cc() {
		# Remove c/c++ build environment from the chroot
Unknown fixes...	r420	if [ -n "${COMPILER_PACKAGES}" ] ; then
		chroot_exec apt-get -qq -y --auto-remove purge "${COMPILER_PACKAGES}"
drtyhlpr Updated: Dropping privileges, chroot compiler install, dropbear sshd config	r142	COMPILER_PACKAGES=""
		fi
		}