##// END OF EJS Templates
add dropbear
Unknown -
r447:0958808353fc
parent child
Show More
@@ -0,0 +1,45
1 #!/bin/sh
2
3 PREREQ="dropbear"
4
5 prereqs() {
6 echo "$PREREQ"
7 }
8
9 case "$1" in
10 prereqs)
11 prereqs
12 exit 0
13 ;;
14 esac
15
16 . "${CONFDIR}/initramfs.conf"
17 . /usr/share/initramfs-tools/hook-functions
18
19 if [ "${DROPBEAR}" != "n" ] && [ -r "/etc/crypttab" ] ; then
20 cat > "${DESTDIR}/bin/unlock" << EOF
21 #!/bin/sh
22 if PATH=/lib/unlock:/bin:/sbin /scripts/local-top/cryptroot; then
23 kill \`ps | grep cryptroot | grep -v "grep" | awk '{print \$1}'\`
24 # following line kill the remote shell right after the passphrase has
25 # been entered.
26 kill -9 \`ps | grep "\-sh" | grep -v "grep" | awk '{print \$1}'\`
27 exit 0
28 fi
29 exit 1
30 EOF
31
32 chmod 755 "${DESTDIR}/bin/unlock"
33
34 mkdir -p "${DESTDIR}/lib/unlock"
35 cat > "${DESTDIR}/lib/unlock/plymouth" << EOF
36 #!/bin/sh
37 [ "\$1" == "--ping" ] && exit 1
38 /bin/plymouth "\$@"
39 EOF
40
41 chmod 755 "${DESTDIR}/lib/unlock/plymouth"
42
43 echo To unlock root-partition run "unlock" >> ${DESTDIR}/etc/motd
44
45 fi No newline at end of file
@@ -1,519 +1,525
1 # rpi23-gen-image
1 # rpi23-gen-image
2 ## Introduction
2 ## Introduction
3 `rpi23-gen-image.sh` is an advanced Debian Linux bootstrapping shell script for generating Debian OS images for Raspberry Pi 2 (RPi2) and Raspberry Pi 3 (RPi3) computers. The script at this time supports the bootstrapping of the Debian (armhf) releases `stretch` and `buster`. Raspberry Pi 3 images are generated for 32-bit mode only. Raspberry Pi 3 64-bit images can be generated using custom configuration parameters (```templates/rpi3-stretch-arm64-4.14.y```).
3 `rpi23-gen-image.sh` is an advanced Debian Linux bootstrapping shell script for generating Debian OS images for Raspberry Pi 2 (RPi2) and Raspberry Pi 3 (RPi3) computers. The script at this time supports the bootstrapping of the Debian (armhf) releases `stretch` and `buster`. Raspberry Pi 3 images are generated for 32-bit mode only. Raspberry Pi 3 64-bit images can be generated using custom configuration parameters (```templates/rpi3-stretch-arm64-4.14.y```).
4
4
5 ## Build dependencies
5 ## Build dependencies
6 The following list of Debian packages must be installed on the build system because they are essentially required for the bootstrapping process. The script will check if all required packages are installed and missing packages will be installed automatically if confirmed by the user.
6 The following list of Debian packages must be installed on the build system because they are essentially required for the bootstrapping process. The script will check if all required packages are installed and missing packages will be installed automatically if confirmed by the user.
7
7
8 ```debootstrap debian-archive-keyring qemu-user-static binfmt-support dosfstools rsync bmap-tools whois git bc psmisc dbus sudo```
8 ```debootstrap debian-archive-keyring qemu-user-static binfmt-support dosfstools rsync bmap-tools whois git bc psmisc dbus sudo```
9
9
10 It is recommended to configure the `rpi23-gen-image.sh` script to build and install the latest Raspberry Pi Linux kernel. For the RPi3 this is mandatory. Kernel compilation and linking will be performed on the build system using an ARM (armhf) cross-compiler toolchain.
10 It is recommended to configure the `rpi23-gen-image.sh` script to build and install the latest Raspberry Pi Linux kernel. For the RPi3 this is mandatory. Kernel compilation and linking will be performed on the build system using an ARM (armhf) cross-compiler toolchain.
11
11
12 The script has been tested using the default `crossbuild-essential-armhf` toolchain meta package on Debian Linux `stretch` build systems. Please check the [Debian CrossToolchains Wiki](https://wiki.debian.org/CrossToolchains) for further information.
12 The script has been tested using the default `crossbuild-essential-armhf` toolchain meta package on Debian Linux `stretch` build systems. Please check the [Debian CrossToolchains Wiki](https://wiki.debian.org/CrossToolchains) for further information.
13
13
14 ## Command-line parameters
14 ## Command-line parameters
15 The script accepts certain command-line parameters to enable or disable specific OS features, services and configuration settings. These parameters are passed to the `rpi23-gen-image.sh` script via (simple) shell-variables. Unlike environment shell-variables (simple) shell-variables are defined at the beginning of the command-line call of the `rpi23-gen-image.sh` script.
15 The script accepts certain command-line parameters to enable or disable specific OS features, services and configuration settings. These parameters are passed to the `rpi23-gen-image.sh` script via (simple) shell-variables. Unlike environment shell-variables (simple) shell-variables are defined at the beginning of the command-line call of the `rpi23-gen-image.sh` script.
16
16
17 ##### Command-line examples:
17 ##### Command-line examples:
18 ```shell
18 ```shell
19 ENABLE_UBOOT=true ./rpi23-gen-image.sh
19 ENABLE_UBOOT=true ./rpi23-gen-image.sh
20 ENABLE_CONSOLE=false ENABLE_IPV6=false ./rpi23-gen-image.sh
20 ENABLE_CONSOLE=false ENABLE_IPV6=false ./rpi23-gen-image.sh
21 ENABLE_WM=xfce4 ENABLE_FBTURBO=true ENABLE_MINBASE=true ./rpi23-gen-image.sh
21 ENABLE_WM=xfce4 ENABLE_FBTURBO=true ENABLE_MINBASE=true ./rpi23-gen-image.sh
22 ENABLE_HARDNET=true ENABLE_IPTABLES=true /rpi23-gen-image.sh
22 ENABLE_HARDNET=true ENABLE_IPTABLES=true /rpi23-gen-image.sh
23 APT_SERVER=ftp.de.debian.org APT_PROXY="http://127.0.0.1:3142/" ./rpi23-gen-image.sh
23 APT_SERVER=ftp.de.debian.org APT_PROXY="http://127.0.0.1:3142/" ./rpi23-gen-image.sh
24 ENABLE_MINBASE=true ./rpi23-gen-image.sh
24 ENABLE_MINBASE=true ./rpi23-gen-image.sh
25 BUILD_KERNEL=true ENABLE_MINBASE=true ENABLE_IPV6=false ./rpi23-gen-image.sh
25 BUILD_KERNEL=true ENABLE_MINBASE=true ENABLE_IPV6=false ./rpi23-gen-image.sh
26 BUILD_KERNEL=true KERNELSRC_DIR=/tmp/linux ./rpi23-gen-image.sh
26 BUILD_KERNEL=true KERNELSRC_DIR=/tmp/linux ./rpi23-gen-image.sh
27 ENABLE_MINBASE=true ENABLE_REDUCE=true ENABLE_MINGPU=true BUILD_KERNEL=true ./rpi23-gen-image.sh
27 ENABLE_MINBASE=true ENABLE_REDUCE=true ENABLE_MINGPU=true BUILD_KERNEL=true ./rpi23-gen-image.sh
28 ENABLE_CRYPTFS=true CRYPTFS_PASSWORD=changeme EXPANDROOT=false ENABLE_MINBASE=true ENABLE_REDUCE=true ENABLE_MINGPU=true BUILD_KERNEL=true ./rpi23-gen-image.sh
28 ENABLE_CRYPTFS=true CRYPTFS_PASSWORD=changeme EXPANDROOT=false ENABLE_MINBASE=true ENABLE_REDUCE=true ENABLE_MINGPU=true BUILD_KERNEL=true ./rpi23-gen-image.sh
29 RELEASE=stretch BUILD_KERNEL=true ./rpi23-gen-image.sh
29 RELEASE=stretch BUILD_KERNEL=true ./rpi23-gen-image.sh
30 RPI_MODEL=3 ENABLE_WIRELESS=true ENABLE_MINBASE=true BUILD_KERNEL=true ./rpi23-gen-image.sh
30 RPI_MODEL=3 ENABLE_WIRELESS=true ENABLE_MINBASE=true BUILD_KERNEL=true ./rpi23-gen-image.sh
31 RELEASE=stretch RPI_MODEL=3 ENABLE_WIRELESS=true ENABLE_MINBASE=true BUILD_KERNEL=true ./rpi23-gen-image.sh
31 RELEASE=stretch RPI_MODEL=3 ENABLE_WIRELESS=true ENABLE_MINBASE=true BUILD_KERNEL=true ./rpi23-gen-image.sh
32 ```
32 ```
33
33
34 ## Configuration template files
34 ## Configuration template files
35 To avoid long lists of command-line parameters and to help to store the favourite parameter configurations the `rpi23-gen-image.sh` script supports so called configuration template files (`CONFIG_TEMPLATE`=template). These are simple text files located in the `./templates` directory that contain the list of configuration parameters that will be used. New configuration template files can be added to the `./templates` directory.
35 To avoid long lists of command-line parameters and to help to store the favourite parameter configurations the `rpi23-gen-image.sh` script supports so called configuration template files (`CONFIG_TEMPLATE`=template). These are simple text files located in the `./templates` directory that contain the list of configuration parameters that will be used. New configuration template files can be added to the `./templates` directory.
36
36
37 ##### Command-line examples:
37 ##### Command-line examples:
38 ```shell
38 ```shell
39 CONFIG_TEMPLATE=rpi3stretch ./rpi23-gen-image.sh
39 CONFIG_TEMPLATE=rpi3stretch ./rpi23-gen-image.sh
40 CONFIG_TEMPLATE=rpi2stretch ./rpi23-gen-image.sh
40 CONFIG_TEMPLATE=rpi2stretch ./rpi23-gen-image.sh
41 ```
41 ```
42
42
43 ## Supported parameters and settings
43 ## Supported parameters and settings
44 #### APT settings:
44 #### APT settings:
45 ##### `APT_SERVER`="ftp.debian.org/debian"
45 ##### `APT_SERVER`="ftp.debian.org/debian"
46 Set Debian packages server address. Choose a server from the list of Debian worldwide [mirror sites](https://www.debian.org/mirror/list). Using a nearby server will probably speed-up all required downloads within the bootstrapping process.
46 Set Debian packages server address. Choose a server from the list of Debian worldwide [mirror sites](https://www.debian.org/mirror/list). Using a nearby server will probably speed-up all required downloads within the bootstrapping process.
47
47
48 ##### `APT_PROXY`=""
48 ##### `APT_PROXY`=""
49 Set Proxy server address. Using a local Proxy-Cache like `apt-cacher-ng` will speed-up the bootstrapping process because all required Debian packages will only be downloaded from the Debian mirror site once. If `apt-cacher-ng` is running on default `http://127.0.0.1:3142` it is autodetected and you don't need to set this.
49 Set Proxy server address. Using a local Proxy-Cache like `apt-cacher-ng` will speed-up the bootstrapping process because all required Debian packages will only be downloaded from the Debian mirror site once. If `apt-cacher-ng` is running on default `http://127.0.0.1:3142` it is autodetected and you don't need to set this.
50
50
51 ##### `APT_INCLUDES`=""
51 ##### `APT_INCLUDES`=""
52 A comma separated list of additional packages to be installed by debootstrap during bootstrapping.
52 A comma separated list of additional packages to be installed by debootstrap during bootstrapping.
53
53
54 ##### `APT_INCLUDES_LATE`=""
54 ##### `APT_INCLUDES_LATE`=""
55 A comma separated list of additional packages to be installed by apt after bootstrapping and after APT sources are set up. This is useful for packages with pre-depends, which debootstrap do not handle well.
55 A comma separated list of additional packages to be installed by apt after bootstrapping and after APT sources are set up. This is useful for packages with pre-depends, which debootstrap do not handle well.
56
56
57 ---
57 ---
58
58
59 #### General system settings:
59 #### General system settings:
60 ##### `SET_ARCH`=32
60 ##### `SET_ARCH`=32
61 Set Architecture to default 32bit. If you want to to compile 64bit (RPI3 or RPI3+) set it to `64`. This option will set every needed crosscompiler or boeard specific option for a successful build.
61 Set Architecture to default 32bit. If you want to to compile 64bit (RPI3 or RPI3+) set it to `64`. This option will set every needed crosscompiler or boeard specific option for a successful build.
62 If you want to change e.g. cross-compiler -> Templates always override defaults
62 If you want to change e.g. cross-compiler -> Templates always override defaults
63
63
64 ##### `RPI_MODEL`=2
64 ##### `RPI_MODEL`=2
65 Specifiy the target Raspberry Pi hardware model. The script at this time supports the following Raspberry Pi models:
65 Specifiy the target Raspberry Pi hardware model. The script at this time supports the following Raspberry Pi models:
66 `0` = Used for Raspberry Pi 0 and Raspberry Pi 0 W
66 - `0` = Used for Raspberry Pi 0 and Raspberry Pi 0 W
67 `1` = Used for Pi 1 model A and B
67 - `1` = Used for Pi 1 model A and B
68 `1P` = Used for Pi 1 model B+ and A+
68 - `1P` = Used for Pi 1 model B+ and A+
69 `2` = Used for Pi 2 model B
69 - `2` = Used for Pi 2 model B
70 `3` = Used for Pi 3 model B
70 - `3` = Used for Pi 3 model B
71 `3P` = Used for Pi 3 model B+
71 - `3P` = Used for Pi 3 model B+
72 `BUILD_KERNEL`=true will automatically be set if the Raspberry Pi model `3` or `3P` is used.
72 - `BUILD_KERNEL`=true will automatically be set if the Raspberry Pi model `3` or `3P` is used.
73
73
74 ##### `RELEASE`="buster"
74 ##### `RELEASE`="buster"
75 Set the desired Debian release name. The script at this time supports the bootstrapping of the Debian releases `stretch` and `buster`.
75 Set the desired Debian release name. The script at this time supports the bootstrapping of the Debian releases `stretch` and `buster`.
76
76
77 ##### `RELEASE_ARCH`="armhf"
77 ##### `RELEASE_ARCH`="armhf"
78 Set the desired Debian release architecture.
78 Set the desired Debian release architecture.
79
79
80 ##### `HOSTNAME`="rpi$RPI_MODEL-$RELEASE"
80 ##### `HOSTNAME`="rpi$RPI_MODEL-$RELEASE"
81 Set system host name. It's recommended that the host name is unique in the corresponding subnet.
81 Set system host name. It's recommended that the host name is unique in the corresponding subnet.
82
82
83 ##### `PASSWORD`="raspberry"
83 ##### `PASSWORD`="raspberry"
84 Set system `root` password. It's **STRONGLY** recommended that you choose a custom password.
84 Set system `root` password. It's **STRONGLY** recommended that you choose a custom password.
85
85
86 ##### `USER_PASSWORD`="raspberry"
86 ##### `USER_PASSWORD`="raspberry"
87 Set password for the created non-root user `USER_NAME`=pi. Ignored if `ENABLE_USER`=false. It's **STRONGLY** recommended that you choose a custom password.
87 Set password for the created non-root user `USER_NAME`=pi. Ignored if `ENABLE_USER`=false. It's **STRONGLY** recommended that you choose a custom password.
88
88
89 ##### `DEFLOCAL`="en_US.UTF-8"
89 ##### `DEFLOCAL`="en_US.UTF-8"
90 Set default system locale. This setting can also be changed inside the running OS using the `dpkg-reconfigure locales` command. Please note that on using this parameter the script will automatically install the required packages `locales`, `keyboard-configuration` and `console-setup`.
90 Set default system locale. This setting can also be changed inside the running OS using the `dpkg-reconfigure locales` command. Please note that on using this parameter the script will automatically install the required packages `locales`, `keyboard-configuration` and `console-setup`.
91
91
92 ##### `TIMEZONE`="Europe/Berlin"
92 ##### `TIMEZONE`="Europe/Berlin"
93 Set default system timezone. All available timezones can be found in the `/usr/share/zoneinfo/` directory. This setting can also be changed inside the running OS using the `dpkg-reconfigure tzdata` command.
93 Set default system timezone. All available timezones can be found in the `/usr/share/zoneinfo/` directory. This setting can also be changed inside the running OS using the `dpkg-reconfigure tzdata` command.
94
94
95 ##### `EXPANDROOT`=true
95 ##### `EXPANDROOT`=true
96 Expand the root partition and filesystem automatically on first boot.
96 Expand the root partition and filesystem automatically on first boot.
97
97
98 ##### `ENABLE_QEMU`=false
98 ##### `ENABLE_QEMU`=false
99 Generate kernel (`vexpress_defconfig`), file system image (`qcow2`) and DTB files that can be used for QEMU full system emulation (`vexpress-A15`). The output files are stored in the `$(pwd)/images/qemu` directory. You can find more information about running the generated image in the QEMU section of this readme file.
99 Generate kernel (`vexpress_defconfig`), file system image (`qcow2`) and DTB files that can be used for QEMU full system emulation (`vexpress-A15`). The output files are stored in the `$(pwd)/images/qemu` directory. You can find more information about running the generated image in the QEMU section of this readme file.
100
100
101 ---
101 ---
102
102
103 #### Keyboard settings:
103 #### Keyboard settings:
104 These options are used to configure keyboard layout in `/etc/default/keyboard` for console and Xorg. These settings can also be changed inside the running OS using the `dpkg-reconfigure keyboard-configuration` command.
104 These options are used to configure keyboard layout in `/etc/default/keyboard` for console and Xorg. These settings can also be changed inside the running OS using the `dpkg-reconfigure keyboard-configuration` command.
105
105
106 ##### `XKB_MODEL`=""
106 ##### `XKB_MODEL`=""
107 Set the name of the model of your keyboard type.
107 Set the name of the model of your keyboard type.
108
108
109 ##### `XKB_LAYOUT`=""
109 ##### `XKB_LAYOUT`=""
110 Set the supported keyboard layout(s).
110 Set the supported keyboard layout(s).
111
111
112 ##### `XKB_VARIANT`=""
112 ##### `XKB_VARIANT`=""
113 Set the supported variant(s) of the keyboard layout(s).
113 Set the supported variant(s) of the keyboard layout(s).
114
114
115 ##### `XKB_OPTIONS`=""
115 ##### `XKB_OPTIONS`=""
116 Set extra xkb configuration options.
116 Set extra xkb configuration options.
117
117
118 ---
118 ---
119
119
120 #### Networking settings (DHCP):
120 #### Networking settings (DHCP):
121 This parameter is used to set up networking auto configuration in `/etc/systemd/network/eth.network`. The default location of network configuration files in the Debian `stretch` release was changed to `/lib/systemd/network`.`
121 This parameter is used to set up networking auto configuration in `/etc/systemd/network/eth.network`. The default location of network configuration files in the Debian `stretch` release was changed to `/lib/systemd/network`.`
122
122
123 ##### `ENABLE_DHCP`=true
123 ##### `ENABLE_DHCP`=true
124 Set the system to use DHCP. This requires an DHCP server.
124 Set the system to use DHCP. This requires an DHCP server.
125
125
126 ---
126 ---
127
127
128 #### Networking settings (static):
128 #### Networking settings (static):
129 These parameters are used to set up a static networking configuration in `/etc/systemd/network/eth.network`. The following static networking parameters are only supported if `ENABLE_DHCP` was set to `false`. The default location of network configuration files in the Debian `stretch` release was changed to `/lib/systemd/network`.
129 These parameters are used to set up a static networking configuration in `/etc/systemd/network/eth.network`. The following static networking parameters are only supported if `ENABLE_DHCP` was set to `false`. The default location of network configuration files in the Debian `stretch` release was changed to `/lib/systemd/network`.
130
130
131 ##### `NET_ADDRESS`=""
131 ##### `NET_ADDRESS`=""
132 Set a static IPv4 or IPv6 address and its prefix, separated by "/", eg. "192.169.0.3/24".
132 Set a static IPv4 or IPv6 address and its prefix, separated by "/", eg. "192.169.0.3/24".
133
133
134 ##### `NET_GATEWAY`=""
134 ##### `NET_GATEWAY`=""
135 Set the IP address for the default gateway.
135 Set the IP address for the default gateway.
136
136
137 ##### `NET_DNS_1`=""
137 ##### `NET_DNS_1`=""
138 Set the IP address for the first DNS server.
138 Set the IP address for the first DNS server.
139
139
140 ##### `NET_DNS_2`=""
140 ##### `NET_DNS_2`=""
141 Set the IP address for the second DNS server.
141 Set the IP address for the second DNS server.
142
142
143 ##### `NET_DNS_DOMAINS`=""
143 ##### `NET_DNS_DOMAINS`=""
144 Set the default DNS search domains to use for non fully qualified host names.
144 Set the default DNS search domains to use for non fully qualified host names.
145
145
146 ##### `NET_NTP_1`=""
146 ##### `NET_NTP_1`=""
147 Set the IP address for the first NTP server.
147 Set the IP address for the first NTP server.
148
148
149 ##### `NET_NTP_2`=""
149 ##### `NET_NTP_2`=""
150 Set the IP address for the second NTP server.
150 Set the IP address for the second NTP server.
151
151
152 ---
152 ---
153
153
154 #### Basic system features:
154 #### Basic system features:
155 ##### `ENABLE_CONSOLE`=true
155 ##### `ENABLE_CONSOLE`=true
156 Enable serial console interface. Recommended if no monitor or keyboard is connected to the RPi2/3. In case of problems fe. if the network (auto) configuration failed - the serial console can be used to access the system. On RPI `0` `3` `3P` the CPU speed is locked at lowest speed.
156 Enable serial console interface. Recommended if no monitor or keyboard is connected to the RPi2/3. In case of problems fe. if the network (auto) configuration failed - the serial console can be used to access the system. On RPI `0` `3` `3P` the CPU speed is locked at lowest speed.
157
157
158 ##### `ENABLE_PRINTK`=false
158 ##### `ENABLE_PRINTK`=false
159 Enables printing kernel messages to konsole. printk is `3 4 1 3` as in raspbian.
159 Enables printing kernel messages to konsole. printk is `3 4 1 3` as in raspbian.
160
160
161 ##### `ENABLE_BLUETOOTH`=false
161 ##### `ENABLE_BLUETOOTH`=false
162 Enable onboard Bluetooth interface on the RPi0/3/3P. See: https://spellfoundry.com/2016/05/29/configuring-gpio-serial-port-raspbian-jessie-including-pi-3/
162 Enable onboard Bluetooth interface on the RPi0/3/3P. See: https://spellfoundry.com/2016/05/29/configuring-gpio-serial-port-raspbian-jessie-including-pi-3/
163
163
164 ##### `ENABLE_MINIUART_OVERLAY`=false
164 ##### `ENABLE_MINIUART_OVERLAY`=false
165 Enable Bluetooth to use this. Adds overlay to swap UART0 with UART1. Enabling (slower) Bluetooth and full speed serial console. - RPI `0` `3` `3P` have a fast `hardware UART0` (ttyAMA0) and a `mini UART1` (ttyS0)! RPI `1` `1P` `2` only have a `hardware UART0`. `UART0` is considered better, because is faster and more stable than `mini UART1`. By default the Bluetooth modem is mapped to the `hardware UART0` and `mini UART` is used for console. The `mini UART` is a problem for the serial console, because its baudrate depends on the cpu frequency, which is changing on runtime. Resulting in a volatile baudrate and thus in an unusable serial console.
165 Enable Bluetooth to use this. Adds overlay to swap UART0 with UART1. Enabling (slower) Bluetooth and full speed serial console. - RPI `0` `3` `3P` have a fast `hardware UART0` (ttyAMA0) and a `mini UART1` (ttyS0)! RPI `1` `1P` `2` only have a `hardware UART0`. `UART0` is considered better, because is faster and more stable than `mini UART1`. By default the Bluetooth modem is mapped to the `hardware UART0` and `mini UART` is used for console. The `mini UART` is a problem for the serial console, because its baudrate depends on the cpu frequency, which is changing on runtime. Resulting in a volatile baudrate and thus in an unusable serial console.
166
166
167 ##### `ENABLE_TURBO`=false
167 ##### `ENABLE_TURBO`=false
168 Enable Turbo mode. This setting locks cpu at highest frequency. As setting ENABLE_CONSOLE=true locks RPI to lowest CPU speed, this is can be used additionally to lock cpu hat max speed. Need a good power supply and probably cooling for the Raspberry PI.
168 Enable Turbo mode. This setting locks cpu at highest frequency. As setting ENABLE_CONSOLE=true locks RPI to lowest CPU speed, this is can be used additionally to lock cpu hat max speed. Need a good power supply and probably cooling for the Raspberry PI.
169
169
170 ##### `ENABLE_I2C`=false
170 ##### `ENABLE_I2C`=false
171 Enable I2C interface on the RPi2/3. Please check the [RPi2/3 pinout diagrams](https://elinux.org/RPi_Low-level_peripherals) to connect the right GPIO pins.
171 Enable I2C interface on the RPi2/3. Please check the [RPi2/3 pinout diagrams](https://elinux.org/RPi_Low-level_peripherals) to connect the right GPIO pins.
172
172
173 ##### `ENABLE_SPI`=false
173 ##### `ENABLE_SPI`=false
174 Enable SPI interface on the RPi2/3. Please check the [RPi2/3 pinout diagrams](https://elinux.org/RPi_Low-level_peripherals) to connect the right GPIO pins.
174 Enable SPI interface on the RPi2/3. Please check the [RPi2/3 pinout diagrams](https://elinux.org/RPi_Low-level_peripherals) to connect the right GPIO pins.
175
175
176 ##### `ENABLE_IPV6`=true
176 ##### `ENABLE_IPV6`=true
177 Enable IPv6 support. The network interface configuration is managed via systemd-networkd.
177 Enable IPv6 support. The network interface configuration is managed via systemd-networkd.
178
178
179 ##### `ENABLE_SSHD`=true
179 ##### `ENABLE_SSHD`=true
180 Install and enable OpenSSH service. The default configuration of the service doesn't allow `root` to login. Please use the user `pi` instead and `su -` or `sudo` to execute commands as root.
180 Install and enable OpenSSH service. The default configuration of the service doesn't allow `root` to login. Please use the user `pi` instead and `su -` or `sudo` to execute commands as root.
181
181
182 ##### `ENABLE_NONFREE`=false
182 ##### `ENABLE_NONFREE`=false
183 Allow the installation of non-free Debian packages that do not comply with the DFSG. This is required to install closed-source firmware binary blobs.
183 Allow the installation of non-free Debian packages that do not comply with the DFSG. This is required to install closed-source firmware binary blobs.
184
184
185 ##### `ENABLE_WIRELESS`=false
185 ##### `ENABLE_WIRELESS`=false
186 Download and install the [closed-source firmware binary blob](https://github.com/RPi-Distro/firmware-nonfree/raw/master/brcm) that is required to run the internal wireless interface of the Raspberry Pi model `3`. This parameter is ignored if the specified `RPI_MODEL` is not `3`.
186 Download and install the [closed-source firmware binary blob](https://github.com/RPi-Distro/firmware-nonfree/raw/master/brcm) that is required to run the internal wireless interface of the Raspberry Pi model `3`. This parameter is ignored if the specified `RPI_MODEL` is not `3`.
187
187
188 ##### `ENABLE_RSYSLOG`=true
188 ##### `ENABLE_RSYSLOG`=true
189 If set to false, disable and uninstall rsyslog (so logs will be available only in journal files)
189 If set to false, disable and uninstall rsyslog (so logs will be available only in journal files)
190
190
191 ##### `ENABLE_SOUND`=true
191 ##### `ENABLE_SOUND`=true
192 Enable sound hardware and install Advanced Linux Sound Architecture.
192 Enable sound hardware and install Advanced Linux Sound Architecture.
193
193
194 ##### `ENABLE_HWRANDOM`=true
194 ##### `ENABLE_HWRANDOM`=true
195 Enable Hardware Random Number Generator. Strong random numbers are important for most network based communications that use encryption. It's recommended to be enabled.
195 Enable Hardware Random Number Generator. Strong random numbers are important for most network based communications that use encryption. It's recommended to be enabled.
196
196
197 ##### `ENABLE_MINGPU`=false
197 ##### `ENABLE_MINGPU`=false
198 Minimize the amount of shared memory reserved for the GPU. It doesn't seem to be possible to fully disable the GPU.
198 Minimize the amount of shared memory reserved for the GPU. It doesn't seem to be possible to fully disable the GPU.
199
199
200 ##### `ENABLE_DBUS`=true
200 ##### `ENABLE_DBUS`=true
201 Install and enable D-Bus message bus. Please note that systemd should work without D-bus but it's recommended to be enabled.
201 Install and enable D-Bus message bus. Please note that systemd should work without D-bus but it's recommended to be enabled.
202
202
203 ##### `ENABLE_XORG`=false
203 ##### `ENABLE_XORG`=false
204 Install Xorg open-source X Window System.
204 Install Xorg open-source X Window System.
205
205
206 ##### `ENABLE_WM`=""
206 ##### `ENABLE_WM`=""
207 Install a user defined window manager for the X Window System. To make sure all X related package dependencies are getting installed `ENABLE_XORG` will automatically get enabled if `ENABLE_WM` is used. The `rpi23-gen-image.sh` script has been tested with the following list of window managers: `blackbox`, `openbox`, `fluxbox`, `jwm`, `dwm`, `xfce4`, `awesome`.
207 Install a user defined window manager for the X Window System. To make sure all X related package dependencies are getting installed `ENABLE_XORG` will automatically get enabled if `ENABLE_WM` is used. The `rpi23-gen-image.sh` script has been tested with the following list of window managers: `blackbox`, `openbox`, `fluxbox`, `jwm`, `dwm`, `xfce4`, `awesome`.
208
208
209 ##### `ENABLE_SYSVINIT`=false
209 ##### `ENABLE_SYSVINIT`=false
210 Support for halt,init,poweroff,reboot,runlevel,shutdown,telinit commands
210 Support for halt,init,poweroff,reboot,runlevel,shutdown,telinit commands
211
211
212 ---
212 ---
213
213
214 #### Advanced system features:
214 #### Advanced system features:
215 ##### `ENABLE_MINBASE`=false
215 ##### `ENABLE_MINBASE`=false
216 Use debootstrap script variant `minbase` which only includes essential packages and apt. This will reduce the disk usage by about 65 MB.
216 Use debootstrap script variant `minbase` which only includes essential packages and apt. This will reduce the disk usage by about 65 MB.
217
217
218 ##### `ENABLE_REDUCE`=false
218 ##### `ENABLE_REDUCE`=false
219 Reduce the disk space usage by deleting packages and files. See `REDUCE_*` parameters for detailed information.
219 Reduce the disk space usage by deleting packages and files. See `REDUCE_*` parameters for detailed information.
220
220
221 ##### `ENABLE_UBOOT`=false
221 ##### `ENABLE_UBOOT`=false
222 Replace the default RPi2/3 second stage bootloader (bootcode.bin) with [U-Boot bootloader](https://git.denx.de/?p=u-boot.git;a=summary). U-Boot can boot images via the network using the BOOTP/TFTP protocol.
222 Replace the default RPi2/3 second stage bootloader (bootcode.bin) with [U-Boot bootloader](https://git.denx.de/?p=u-boot.git;a=summary). U-Boot can boot images via the network using the BOOTP/TFTP protocol.
223
223
224 ##### `UBOOTSRC_DIR`=""
224 ##### `UBOOTSRC_DIR`=""
225 Path to a directory (`u-boot`) of [U-Boot bootloader sources](https://git.denx.de/?p=u-boot.git;a=summary) that will be copied, configured, build and installed inside the chroot.
225 Path to a directory (`u-boot`) of [U-Boot bootloader sources](https://git.denx.de/?p=u-boot.git;a=summary) that will be copied, configured, build and installed inside the chroot.
226
226
227 ##### `ENABLE_FBTURBO`=false
227 ##### `ENABLE_FBTURBO`=false
228 Install and enable the [hardware accelerated Xorg video driver](https://github.com/ssvb/xf86-video-fbturbo) `fbturbo`. Please note that this driver is currently limited to hardware accelerated window moving and scrolling.
228 Install and enable the [hardware accelerated Xorg video driver](https://github.com/ssvb/xf86-video-fbturbo) `fbturbo`. Please note that this driver is currently limited to hardware accelerated window moving and scrolling.
229
229
230 ##### `FBTURBOSRC_DIR`=""
230 ##### `FBTURBOSRC_DIR`=""
231 Path to a directory (`xf86-video-fbturbo`) of [hardware accelerated Xorg video driver sources](https://github.com/ssvb/xf86-video-fbturbo) that will be copied, configured, build and installed inside the chroot.
231 Path to a directory (`xf86-video-fbturbo`) of [hardware accelerated Xorg video driver sources](https://github.com/ssvb/xf86-video-fbturbo) that will be copied, configured, build and installed inside the chroot.
232
232
233 ##### `ENABLE_VIDEOCORE`=false
233 ##### `ENABLE_VIDEOCORE`=false
234 Install and enable the [Source code for ARM side libraries for interfacing to Raspberry Pi GPU](https://github.com/raspberrypi/userland) `vcgencmd`. Please note that this driver is currently limited to hardware accelerated window moving and scrolling.
234 Install and enable the [Source code for ARM side libraries for interfacing to Raspberry Pi GPU](https://github.com/raspberrypi/userland) `vcgencmd`. Please note that this driver is currently limited to hardware accelerated window moving and scrolling.
235
235
236 ##### `VIDEOCORESRC_DIR`=""
236 ##### `VIDEOCORESRC_DIR`=""
237 Path to a directory (`userland`) of [Source code for a C-based firmware patching framework for Broadcom/Cypress WiFi chips that enables you to write your own firmware patches, for example, to enable monitor mode with radiotap headers and frame injection](https://github.com/seemoo-lab/nexmon.git) that will be copied, configured, build and installed inside the chroot.
237 Path to a directory (`userland`) of [Source code for a C-based firmware patching framework for Broadcom/Cypress WiFi chips that enables you to write your own firmware patches, for example, to enable monitor mode with radiotap headers and frame injection](https://github.com/seemoo-lab/nexmon.git) that will be copied, configured, build and installed inside the chroot.
238
238
239 ##### `ENABLE_NEXMON`=false
239 ##### `ENABLE_NEXMON`=false
240 Install and enable the [Source code for a C-based firmware patching framework for Broadcom/Cypress WiFi chips that enables you to write your own firmware patches, for example, to enable monitor mode with radiotap headers and frame injection](https://github.com/seemoo-lab/nexmon.git).
240 Install and enable the [Source code for a C-based firmware patching framework for Broadcom/Cypress WiFi chips that enables you to write your own firmware patches, for example, to enable monitor mode with radiotap headers and frame injection](https://github.com/seemoo-lab/nexmon.git).
241
241
242 ##### `NEXMON_DIR`=""
242 ##### `NEXMON_DIR`=""
243 Path to a directory (`nexmon`) of [Source code for ARM side libraries for interfacing to Raspberry Pi GPU](https://github.com/raspberrypi/userland) that will be copied, configured, build and installed inside the chroot.
243 Path to a directory (`nexmon`) of [Source code for ARM side libraries for interfacing to Raspberry Pi GPU](https://github.com/raspberrypi/userland) that will be copied, configured, build and installed inside the chroot.
244
244
245 ##### `ENABLE_IPTABLES`=false
245 ##### `ENABLE_IPTABLES`=false
246 Enable iptables IPv4/IPv6 firewall. Simplified ruleset: Allow all outgoing connections. Block all incoming connections except to OpenSSH service.
246 Enable iptables IPv4/IPv6 firewall. Simplified ruleset: Allow all outgoing connections. Block all incoming connections except to OpenSSH service.
247
247
248 ##### `ENABLE_USER`=true
248 ##### `ENABLE_USER`=true
249 Create non-root user with password `USER_PASSWORD`=raspberry. Unless overridden with `USER_NAME`=user, username will be `pi`.
249 Create non-root user with password `USER_PASSWORD`=raspberry. Unless overridden with `USER_NAME`=user, username will be `pi`.
250
250
251 ##### `USER_NAME`=pi
251 ##### `USER_NAME`=pi
252 Non-root user to create. Ignored if `ENABLE_USER`=false
252 Non-root user to create. Ignored if `ENABLE_USER`=false
253
253
254 ##### `ENABLE_ROOT`=false
254 ##### `ENABLE_ROOT`=false
255 Set root user password so root login will be enabled
255 Set root user password so root login will be enabled
256
256
257 ##### `ENABLE_HARDNET`=false
257 ##### `ENABLE_HARDNET`=false
258 Enable IPv4/IPv6 network stack hardening settings.
258 Enable IPv4/IPv6 network stack hardening settings.
259
259
260 ##### `ENABLE_SPLITFS`=false
260 ##### `ENABLE_SPLITFS`=false
261 Enable having root partition on an USB drive by creating two image files: one for the `/boot/firmware` mount point, and another for `/`.
261 Enable having root partition on an USB drive by creating two image files: one for the `/boot/firmware` mount point, and another for `/`.
262
262
263 ##### `CHROOT_SCRIPTS`=""
263 ##### `CHROOT_SCRIPTS`=""
264 Path to a directory with scripts that should be run in the chroot before the image is finally built. Every executable file in this directory is run in lexicographical order.
264 Path to a directory with scripts that should be run in the chroot before the image is finally built. Every executable file in this directory is run in lexicographical order.
265
265
266 ##### `ENABLE_INITRAMFS`=false
266 ##### `ENABLE_INITRAMFS`=false
267 Create an initramfs that that will be loaded during the Linux startup process. `ENABLE_INITRAMFS` will automatically get enabled if `ENABLE_CRYPTFS`=true. This parameter will be ignored if `BUILD_KERNEL`=false.
267 Create an initramfs that that will be loaded during the Linux startup process. `ENABLE_INITRAMFS` will automatically get enabled if `ENABLE_CRYPTFS`=true. This parameter will be ignored if `BUILD_KERNEL`=false.
268
268
269 ##### `ENABLE_IFNAMES`=true
269 ##### `ENABLE_IFNAMES`=true
270 Enable automatic assignment of predictable, stable network interface names for all local Ethernet, WLAN interfaces. This might create complex and long interface names.
270 Enable automatic assignment of predictable, stable network interface names for all local Ethernet, WLAN interfaces. This might create complex and long interface names.
271
271
272 ##### `DISABLE_UNDERVOLT_WARNINGS`=
272 ##### `DISABLE_UNDERVOLT_WARNINGS`=
273 Disable RPi2/3 under-voltage warnings and overlays. Setting the parameter to `1` will disable the warning overlay. Setting it to `2` will additionally allow RPi2/3 turbo mode when low-voltage is present.
273 Disable RPi2/3 under-voltage warnings and overlays. Setting the parameter to `1` will disable the warning overlay. Setting it to `2` will additionally allow RPi2/3 turbo mode when low-voltage is present.
274
274
275 ---
275 ---
276
276
277 #### SSH settings:
277 #### SSH settings:
278 ##### `SSH_ENABLE_ROOT`=false
278 ##### `SSH_ENABLE_ROOT`=false
279 Enable password root login via SSH. This may be a security risk with default password, use only in trusted environments. `ENABLE_ROOT` must be set to `true`.
279 Enable password root login via SSH. This may be a security risk with default password, use only in trusted environments. `ENABLE_ROOT` must be set to `true`.
280
280
281 ##### `SSH_DISABLE_PASSWORD_AUTH`=false
281 ##### `SSH_DISABLE_PASSWORD_AUTH`=false
282 Disable password based SSH authentication. Only public key based SSH (v2) authentication will be supported.
282 Disable password based SSH authentication. Only public key based SSH (v2) authentication will be supported.
283
283
284 ##### `SSH_LIMIT_USERS`=false
284 ##### `SSH_LIMIT_USERS`=false
285 Limit the users that are allowed to login via SSH. Only allow user `USER_NAME`=pi and root if `SSH_ENABLE_ROOT`=true to login. This parameter will be ignored if `dropbear` SSH is used (`REDUCE_SSHD`=true).
285 Limit the users that are allowed to login via SSH. Only allow user `USER_NAME`=pi and root if `SSH_ENABLE_ROOT`=true to login. This parameter will be ignored if `dropbear` SSH is used (`REDUCE_SSHD`=true).
286
286
287 ##### `SSH_ROOT_PUB_KEY`=""
287 ##### `SSH_ROOT_PUB_KEY`=""
288 Add SSH (v2) public key(s) from specified file to `authorized_keys` file to enable public key based SSH (v2) authentication of user `root`. The specified file can also contain multiple SSH (v2) public keys. SSH protocol version 1 is not supported. `ENABLE_ROOT` **and** `SSH_ENABLE_ROOT` must be set to `true`.
288 Add SSH (v2) public key(s) from specified file to `authorized_keys` file to enable public key based SSH (v2) authentication of user `root`. The specified file can also contain multiple SSH (v2) public keys. SSH protocol version 1 is not supported. `ENABLE_ROOT` **and** `SSH_ENABLE_ROOT` must be set to `true`.
289
289
290 ##### `SSH_USER_PUB_KEY`=""
290 ##### `SSH_USER_PUB_KEY`=""
291 Add SSH (v2) public key(s) from specified file to `authorized_keys` file to enable public key based SSH (v2) authentication of user `USER_NAME`=pi. The specified file can also contain multiple SSH (v2) public keys. SSH protocol version 1 is not supported.
291 Add SSH (v2) public key(s) from specified file to `authorized_keys` file to enable public key based SSH (v2) authentication of user `USER_NAME`=pi. The specified file can also contain multiple SSH (v2) public keys. SSH protocol version 1 is not supported.
292
292
293 ---
293 ---
294
294
295 #### Kernel compilation:
295 #### Kernel compilation:
296 ##### `BUILD_KERNEL`=true
296 ##### `BUILD_KERNEL`=true
297 Build and install the latest RPi2/3 Linux kernel. Currently only the default RPi2/3 kernel configuration is used.
297 Build and install the latest RPi2/3 Linux kernel. Currently only the default RPi2/3 kernel configuration is used.
298
298
299 ##### `CROSS_COMPILE`="arm-linux-gnueabihf-"
299 ##### `CROSS_COMPILE`="arm-linux-gnueabihf-"
300 This sets the cross compile enviornment for the compiler.
300 This sets the cross compile enviornment for the compiler.
301
301
302 ##### `KERNEL_ARCH`="arm"
302 ##### `KERNEL_ARCH`="arm"
303 This sets the kernel architecture for the compiler.
303 This sets the kernel architecture for the compiler.
304
304
305 ##### `KERNEL_IMAGE`="kernel7.img"
305 ##### `KERNEL_IMAGE`="kernel7.img"
306 Name of the image file in the boot partition. If not set, `KERNEL_IMAGE` will be set to "kernel8.img" automatically if building for arm64.
306 Name of the image file in the boot partition. If not set, `KERNEL_IMAGE` will be set to "kernel8.img" automatically if building for arm64.
307
307
308 ##### `KERNEL_BRANCH`=""
308 ##### `KERNEL_BRANCH`=""
309 Name of the requested branch from the GIT location for the RPi Kernel. Default is using the current default branch from the GIT site.
309 Name of the requested branch from the GIT location for the RPi Kernel. Default is using the current default branch from the GIT site.
310
310
311 ##### `QEMU_BINARY`="/usr/bin/qemu-arm-static"
311 ##### `QEMU_BINARY`="/usr/bin/qemu-arm-static"
312 Sets the QEMU enviornment for the Debian archive. If not set, `QEMU_BINARY` will be set to "/usr/bin/qemu-aarch64-static" automatically if building for arm64.
312 Sets the QEMU enviornment for the Debian archive. If not set, `QEMU_BINARY` will be set to "/usr/bin/qemu-aarch64-static" automatically if building for arm64.
313
313
314 ##### `KERNEL_DEFCONFIG`="bcm2709_defconfig"
314 ##### `KERNEL_DEFCONFIG`="bcm2709_defconfig"
315 Sets the default config for kernel compiling. If not set, `KERNEL_DEFCONFIG` will be set to "bcmrpi3\_defconfig" automatically if building for arm64.
315 Sets the default config for kernel compiling. If not set, `KERNEL_DEFCONFIG` will be set to "bcmrpi3\_defconfig" automatically if building for arm64.
316
316
317 ##### `KERNEL_REDUCE`=false
317 ##### `KERNEL_REDUCE`=false
318 Reduce the size of the generated kernel by removing unwanted device, network and filesystem drivers (experimental).
318 Reduce the size of the generated kernel by removing unwanted device, network and filesystem drivers (experimental).
319
319
320 ##### `KERNEL_THREADS`=1
320 ##### `KERNEL_THREADS`=1
321 Number of parallel kernel building threads. If the parameter is left untouched the script will automatically determine the number of CPU cores to set the number of parallel threads to speed the kernel compilation.
321 Number of parallel kernel building threads. If the parameter is left untouched the script will automatically determine the number of CPU cores to set the number of parallel threads to speed the kernel compilation.
322
322
323 ##### `KERNEL_HEADERS`=true
323 ##### `KERNEL_HEADERS`=true
324 Install kernel headers with built kernel.
324 Install kernel headers with built kernel.
325
325
326 ##### `KERNEL_MENUCONFIG`=false
326 ##### `KERNEL_MENUCONFIG`=false
327 Start `make menuconfig` interactive menu-driven kernel configuration. The script will continue after `make menuconfig` was terminated.
327 Start `make menuconfig` interactive menu-driven kernel configuration. The script will continue after `make menuconfig` was terminated.
328
328
329 ##### `KERNEL_OLDDEFCONFIG`=false
329 ##### `KERNEL_OLDDEFCONFIG`=false
330 Run `make olddefconfig` to automatically set all new kernel configuration options to their recommended default values.
330 Run `make olddefconfig` to automatically set all new kernel configuration options to their recommended default values.
331
331
332 ##### `KERNEL_CCACHE`=false
332 ##### `KERNEL_CCACHE`=false
333 Compile the kernel using ccache. This speeds up kernel recompilation by caching previous compilations and detecting when the same compilation is being done again.
333 Compile the kernel using ccache. This speeds up kernel recompilation by caching previous compilations and detecting when the same compilation is being done again.
334
334
335 ##### `KERNEL_REMOVESRC`=true
335 ##### `KERNEL_REMOVESRC`=true
336 Remove all kernel sources from the generated OS image after it was built and installed.
336 Remove all kernel sources from the generated OS image after it was built and installed.
337
337
338 ##### `KERNELSRC_DIR`=""
338 ##### `KERNELSRC_DIR`=""
339 Path to a directory (`linux`) of [RaspberryPi Linux kernel sources](https://github.com/raspberrypi/linux) that will be copied, configured, build and installed inside the chroot.
339 Path to a directory (`linux`) of [RaspberryPi Linux kernel sources](https://github.com/raspberrypi/linux) that will be copied, configured, build and installed inside the chroot.
340
340
341 ##### `KERNELSRC_CLEAN`=false
341 ##### `KERNELSRC_CLEAN`=false
342 Clean the existing kernel sources directory `KERNELSRC_DIR` (using `make mrproper`) after it was copied to the chroot and before the compilation of the kernel has started. This parameter will be ignored if no `KERNELSRC_DIR` was specified or if `KERNELSRC_PREBUILT`=true.
342 Clean the existing kernel sources directory `KERNELSRC_DIR` (using `make mrproper`) after it was copied to the chroot and before the compilation of the kernel has started. This parameter will be ignored if no `KERNELSRC_DIR` was specified or if `KERNELSRC_PREBUILT`=true.
343
343
344 ##### `KERNELSRC_CONFIG`=true
344 ##### `KERNELSRC_CONFIG`=true
345 Run `make bcm2709_defconfig` (and optional `make menuconfig`) to configure the kernel sources before building. This parameter is automatically set to `true` if no existing kernel sources directory was specified using `KERNELSRC_DIR`. This parameter is ignored if `KERNELSRC_PREBUILT`=true.
345 Run `make bcm2709_defconfig` (and optional `make menuconfig`) to configure the kernel sources before building. This parameter is automatically set to `true` if no existing kernel sources directory was specified using `KERNELSRC_DIR`. This parameter is ignored if `KERNELSRC_PREBUILT`=true.
346
346
347 ##### `KERNELSRC_USRCONFIG`=""
347 ##### `KERNELSRC_USRCONFIG`=""
348 Copy own config file to kernel `.config`. If `KERNEL_MENUCONFIG`=true then running after copy.
348 Copy own config file to kernel `.config`. If `KERNEL_MENUCONFIG`=true then running after copy.
349
349
350 ##### `KERNELSRC_PREBUILT`=false
350 ##### `KERNELSRC_PREBUILT`=false
351 With this parameter set to true the script expects the existing kernel sources directory to be already successfully cross-compiled. The parameters `KERNELSRC_CLEAN`, `KERNELSRC_CONFIG`, `KERNELSRC_USRCONFIG` and `KERNEL_MENUCONFIG` are ignored and no kernel compilation tasks are performed.
351 With this parameter set to true the script expects the existing kernel sources directory to be already successfully cross-compiled. The parameters `KERNELSRC_CLEAN`, `KERNELSRC_CONFIG`, `KERNELSRC_USRCONFIG` and `KERNEL_MENUCONFIG` are ignored and no kernel compilation tasks are performed.
352
352
353 ##### `RPI_FIRMWARE_DIR`=""
353 ##### `RPI_FIRMWARE_DIR`=""
354 The directory (`firmware`) containing a local copy of the firmware from the [RaspberryPi firmware project](https://github.com/raspberrypi/firmware). Default is to download the latest firmware directly from the project.
354 The directory (`firmware`) containing a local copy of the firmware from the [RaspberryPi firmware project](https://github.com/raspberrypi/firmware). Default is to download the latest firmware directly from the project.
355
355
356 ##### `KERNEL_NF`=false
356 ##### `KERNEL_NF`=false
357 Enable Netfilter modules as kernel modules
357 Enable Netfilter modules as kernel modules
358
358
359 ##### `KERNEL_VIRT`=false
359 ##### `KERNEL_VIRT`=false
360 Enable Kernel KVM support (/dev/kvm)
360 Enable Kernel KVM support (/dev/kvm)
361
361
362 ##### `KERNEL_ZSWAP`=false
362 ##### `KERNEL_ZSWAP`=false
363 Enable Kernel Zswap support. Best use on high RAM load and mediocre CPU load usecases
363 Enable Kernel Zswap support. Best use on high RAM load and mediocre CPU load usecases
364
364
365 ##### `KERNEL_BPF`=true
365 ##### `KERNEL_BPF`=true
366 Allow attaching eBPF programs to a cgroup using the bpf syscall (CONFIG_BPF_SYSCALL CONFIG_CGROUP_BPF) [systemd compilations about it - File /lib/systemd/system/systemd-journald.server:36 configures an IP firewall (IPAddressDeny=all), but the local system does not support BPF/cgroup based firewalls]
366 Allow attaching eBPF programs to a cgroup using the bpf syscall (CONFIG_BPF_SYSCALL CONFIG_CGROUP_BPF) [systemd compilations about it - File /lib/systemd/system/systemd-journald.server:36 configures an IP firewall (IPAddressDeny=all), but the local system does not support BPF/cgroup based firewalls]
367
367
368 ---
368 ---
369
369
370 #### Reduce disk usage:
370 #### Reduce disk usage:
371 The following list of parameters is ignored if `ENABLE_REDUCE`=false.
371 The following list of parameters is ignored if `ENABLE_REDUCE`=false.
372
372
373 ##### `REDUCE_APT`=true
373 ##### `REDUCE_APT`=true
374 Configure APT to use compressed package repository lists and no package caching files.
374 Configure APT to use compressed package repository lists and no package caching files.
375
375
376 ##### `REDUCE_DOC`=true
376 ##### `REDUCE_DOC`=true
377 Remove all doc files (harsh). Configure APT to not include doc files on future `apt-get` package installations.
377 Remove all doc files (harsh). Configure APT to not include doc files on future `apt-get` package installations.
378
378
379 ##### `REDUCE_MAN`=true
379 ##### `REDUCE_MAN`=true
380 Remove all man pages and info files (harsh). Configure APT to not include man pages on future `apt-get` package installations.
380 Remove all man pages and info files (harsh). Configure APT to not include man pages on future `apt-get` package installations.
381
381
382 ##### `REDUCE_VIM`=false
382 ##### `REDUCE_VIM`=false
383 Replace `vim-tiny` package by `levee` a tiny vim clone.
383 Replace `vim-tiny` package by `levee` a tiny vim clone.
384
384
385 ##### `REDUCE_BASH`=false
385 ##### `REDUCE_BASH`=false
386 Remove `bash` package and switch to `dash` shell (experimental).
386 Remove `bash` package and switch to `dash` shell (experimental).
387
387
388 ##### `REDUCE_HWDB`=true
388 ##### `REDUCE_HWDB`=true
389 Remove PCI related hwdb files (experimental).
389 Remove PCI related hwdb files (experimental).
390
390
391 ##### `REDUCE_SSHD`=true
391 ##### `REDUCE_SSHD`=true
392 Replace `openssh-server` with `dropbear`.
392 Replace `openssh-server` with `dropbear`.
393
393
394 ##### `REDUCE_LOCALE`=true
394 ##### `REDUCE_LOCALE`=true
395 Remove all `locale` translation files.
395 Remove all `locale` translation files.
396
396
397 ---
397 ---
398
398
399 #### Encrypted root partition:
399 #### Encrypted root partition:
400 ##### `ENABLE_CRYPTFS`=false
400 ##### `ENABLE_CRYPTFS`=false
401 Enable full system encryption with dm-crypt. Setup a fully LUKS encrypted root partition (aes-xts-plain64:sha512) and generate required initramfs. The /boot directory will not be encrypted. This parameter will be ignored if `BUILD_KERNEL`=false. `ENABLE_CRYPTFS` is experimental. SSH-to-initramfs is currently not supported but will be soon - feel free to help.
401 Enable full system encryption with dm-crypt. Setup a fully LUKS encrypted root partition (aes-xts-plain64:sha512) and generate required initramfs. The /boot directory will not be encrypted. This parameter will be ignored if `BUILD_KERNEL`=false. `ENABLE_CRYPTFS` is experimental. SSH-to-initramfs is currently not supported but will be soon - feel free to help.
402
402
403 ##### `CRYPTFS_PASSWORD`=""
403 ##### `CRYPTFS_PASSWORD`=""
404 Set password of the encrypted root partition. This parameter is mandatory if `ENABLE_CRYPTFS`=true.
404 Set password of the encrypted root partition. This parameter is mandatory if `ENABLE_CRYPTFS`=true.
405
405
406 ##### `CRYPTFS_MAPPING`="secure"
406 ##### `CRYPTFS_MAPPING`="secure"
407 Set name of dm-crypt managed device-mapper mapping.
407 Set name of dm-crypt managed device-mapper mapping.
408
408
409 ##### `CRYPTFS_CIPHER`="aes-xts-plain64:sha512"
409 ##### `CRYPTFS_CIPHER`="aes-xts-plain64:sha512"
410 Set cipher specification string. `aes-xts*` ciphers are strongly recommended.
410 Set cipher specification string. `aes-xts*` ciphers are strongly recommended.
411
411
412 ##### `CRYPTFS_XTSKEYSIZE`=512
412 ##### `CRYPTFS_XTSKEYSIZE`=512
413 Sets key size in bits. The argument has to be a multiple of 8.
413 Sets key size in bits. The argument has to be a multiple of 8.
414
414
415 ##### `CRYPTFS_DROPBEAR`=false
416 Enable Dropbear Initramfs support
417
418 ##### `CRYPTFS_DROPBEAR_PUBKEY`=""
419 Provide path to dropbear Public RSA-OpenSSH Key
420
415 ---
421 ---
416
422
417 #### Build settings:
423 #### Build settings:
418 ##### `BASEDIR`=$(pwd)/images/${RELEASE}
424 ##### `BASEDIR`=$(pwd)/images/${RELEASE}
419 Set a path to a working directory used by the script to generate an image.
425 Set a path to a working directory used by the script to generate an image.
420
426
421 ##### `IMAGE_NAME`=${BASEDIR}/${DATE}-${KERNEL_ARCH}-${KERNEL_BRANCH}-rpi${RPI_MODEL}-${RELEASE}-${RELEASE_ARCH}
427 ##### `IMAGE_NAME`=${BASEDIR}/${DATE}-${KERNEL_ARCH}-${KERNEL_BRANCH}-rpi${RPI_MODEL}-${RELEASE}-${RELEASE_ARCH}
422 Set a filename for the output file(s). Note: the script will create $IMAGE_NAME.img if `ENABLE_SPLITFS`=false or $IMAGE_NAME-frmw.img and $IMAGE_NAME-root.img if `ENABLE_SPLITFS`=true. Note 2: If the KERNEL_BRANCH is not set, the word "CURRENT" is used.
428 Set a filename for the output file(s). Note: the script will create $IMAGE_NAME.img if `ENABLE_SPLITFS`=false or $IMAGE_NAME-frmw.img and $IMAGE_NAME-root.img if `ENABLE_SPLITFS`=true. Note 2: If the KERNEL_BRANCH is not set, the word "CURRENT" is used.
423
429
424 ## Understanding the script
430 ## Understanding the script
425 The functions of this script that are required for the different stages of the bootstrapping are split up into single files located inside the `bootstrap.d` directory. During the bootstrapping every script in this directory gets executed in lexicographical order:
431 The functions of this script that are required for the different stages of the bootstrapping are split up into single files located inside the `bootstrap.d` directory. During the bootstrapping every script in this directory gets executed in lexicographical order:
426
432
427 | Script | Description |
433 | Script | Description |
428 | --- | --- |
434 | --- | --- |
429 | `10-bootstrap.sh` | Debootstrap basic system |
435 | `10-bootstrap.sh` | Debootstrap basic system |
430 | `11-apt.sh` | Setup APT repositories |
436 | `11-apt.sh` | Setup APT repositories |
431 | `12-locale.sh` | Setup Locales and keyboard settings |
437 | `12-locale.sh` | Setup Locales and keyboard settings |
432 | `13-kernel.sh` | Build and install RPi2/3 Kernel |
438 | `13-kernel.sh` | Build and install RPi2/3 Kernel |
433 | `14-fstab.sh` | Setup fstab and initramfs |
439 | `14-fstab.sh` | Setup fstab and initramfs |
434 | `15-rpi-config.sh` | Setup RPi2/3 config and cmdline |
440 | `15-rpi-config.sh` | Setup RPi2/3 config and cmdline |
435 | `20-networking.sh` | Setup Networking |
441 | `20-networking.sh` | Setup Networking |
436 | `21-firewall.sh` | Setup Firewall |
442 | `21-firewall.sh` | Setup Firewall |
437 | `30-security.sh` | Setup Users and Security settings |
443 | `30-security.sh` | Setup Users and Security settings |
438 | `31-logging.sh` | Setup Logging |
444 | `31-logging.sh` | Setup Logging |
439 | `32-sshd.sh` | Setup SSH and public keys |
445 | `32-sshd.sh` | Setup SSH and public keys |
440 | `41-uboot.sh` | Build and Setup U-Boot |
446 | `41-uboot.sh` | Build and Setup U-Boot |
441 | `42-fbturbo.sh` | Build and Setup fbturbo Xorg driver |
447 | `42-fbturbo.sh` | Build and Setup fbturbo Xorg driver |
442 | `50-firstboot.sh` | First boot actions |
448 | `50-firstboot.sh` | First boot actions |
443 | `99-reduce.sh` | Reduce the disk space usage |
449 | `99-reduce.sh` | Reduce the disk space usage |
444
450
445 All the required configuration files that will be copied to the generated OS image are located inside the `files` directory. It is not recommended to modify these configuration files manually.
451 All the required configuration files that will be copied to the generated OS image are located inside the `files` directory. It is not recommended to modify these configuration files manually.
446
452
447 | Directory | Description |
453 | Directory | Description |
448 | --- | --- |
454 | --- | --- |
449 | `apt` | APT management configuration files |
455 | `apt` | APT management configuration files |
450 | `boot` | Boot and RPi2/3 configuration files |
456 | `boot` | Boot and RPi2/3 configuration files |
451 | `dpkg` | Package Manager configuration |
457 | `dpkg` | Package Manager configuration |
452 | `etc` | Configuration files and rc scripts |
458 | `etc` | Configuration files and rc scripts |
453 | `firstboot` | Scripts that get executed on first boot |
459 | `firstboot` | Scripts that get executed on first boot |
454 | `initramfs` | Initramfs scripts |
460 | `initramfs` | Initramfs scripts |
455 | `iptables` | Firewall configuration files |
461 | `iptables` | Firewall configuration files |
456 | `locales` | Locales configuration |
462 | `locales` | Locales configuration |
457 | `modules` | Kernel Modules configuration |
463 | `modules` | Kernel Modules configuration |
458 | `mount` | Fstab configuration |
464 | `mount` | Fstab configuration |
459 | `network` | Networking configuration files |
465 | `network` | Networking configuration files |
460 | `sysctl.d` | Swapping and Network Hardening configuration |
466 | `sysctl.d` | Swapping and Network Hardening configuration |
461 | `xorg` | fbturbo Xorg driver configuration |
467 | `xorg` | fbturbo Xorg driver configuration |
462
468
463 ## Custom packages and scripts
469 ## Custom packages and scripts
464 Debian custom packages, i.e. those not in the debian repositories, can be installed by placing them in the `packages` directory. They are installed immediately after packages from the repositories are installed. Any dependencies listed in the custom packages will be downloaded automatically from the repositories. Do not list these custom packages in `APT_INCLUDES`.
470 Debian custom packages, i.e. those not in the debian repositories, can be installed by placing them in the `packages` directory. They are installed immediately after packages from the repositories are installed. Any dependencies listed in the custom packages will be downloaded automatically from the repositories. Do not list these custom packages in `APT_INCLUDES`.
465
471
466 Scripts in the custom.d directory will be executed after all other installation is complete but before the image is created.
472 Scripts in the custom.d directory will be executed after all other installation is complete but before the image is created.
467
473
468 ## Logging of the bootstrapping process
474 ## Logging of the bootstrapping process
469 All information related to the bootstrapping process and the commands executed by the `rpi23-gen-image.sh` script can easily be saved into a logfile. The common shell command `script` can be used for this purpose:
475 All information related to the bootstrapping process and the commands executed by the `rpi23-gen-image.sh` script can easily be saved into a logfile. The common shell command `script` can be used for this purpose:
470
476
471 ```shell
477 ```shell
472 script -c 'APT_SERVER=ftp.de.debian.org ./rpi23-gen-image.sh' ./build.log
478 script -c 'APT_SERVER=ftp.de.debian.org ./rpi23-gen-image.sh' ./build.log
473 ```
479 ```
474
480
475 ## Flashing the image file
481 ## Flashing the image file
476 After the image file was successfully created by the `rpi23-gen-image.sh` script it can be copied to the microSD card that will be used by the RPi2/3 computer. This can be performed by using the tools `bmaptool` or `dd`. Using `bmaptool` will probably speed-up the copy process because `bmaptool` copies more wisely than `dd`.
482 After the image file was successfully created by the `rpi23-gen-image.sh` script it can be copied to the microSD card that will be used by the RPi2/3 computer. This can be performed by using the tools `bmaptool` or `dd`. Using `bmaptool` will probably speed-up the copy process because `bmaptool` copies more wisely than `dd`.
477
483
478 ##### Flashing examples:
484 ##### Flashing examples:
479 ```shell
485 ```shell
480 bmaptool copy ./images/buster/2017-01-23-rpi3-buster.img /dev/mmcblk0
486 bmaptool copy ./images/buster/2017-01-23-rpi3-buster.img /dev/mmcblk0
481 dd bs=4M if=./images/buster/2017-01-23-rpi3-buster.img of=/dev/mmcblk0
487 dd bs=4M if=./images/buster/2017-01-23-rpi3-buster.img of=/dev/mmcblk0
482 ```
488 ```
483 If you have set `ENABLE_SPLITFS`, copy the `-frmw` image on the microSD card, then the `-root` one on the USB drive:
489 If you have set `ENABLE_SPLITFS`, copy the `-frmw` image on the microSD card, then the `-root` one on the USB drive:
484 ```shell
490 ```shell
485 bmaptool copy ./images/buster/2017-01-23-rpi3-buster-frmw.img /dev/mmcblk0
491 bmaptool copy ./images/buster/2017-01-23-rpi3-buster-frmw.img /dev/mmcblk0
486 bmaptool copy ./images/buster/2017-01-23-rpi3-buster-root.img /dev/sdc
492 bmaptool copy ./images/buster/2017-01-23-rpi3-buster-root.img /dev/sdc
487 ```
493 ```
488
494
489 ## QEMU emulation
495 ## QEMU emulation
490 Start QEMU full system emulation:
496 Start QEMU full system emulation:
491 ```shell
497 ```shell
492 qemu-system-arm -m 2048M -M vexpress-a15 -cpu cortex-a15 -kernel kernel7.img -no-reboot -dtb vexpress-v2p-ca15_a7.dtb -sd ${IMAGE_NAME}.qcow2 -append "root=/dev/mmcblk0p2 rw rootfstype=ext4 console=tty1"
498 qemu-system-arm -m 2048M -M vexpress-a15 -cpu cortex-a15 -kernel kernel7.img -no-reboot -dtb vexpress-v2p-ca15_a7.dtb -sd ${IMAGE_NAME}.qcow2 -append "root=/dev/mmcblk0p2 rw rootfstype=ext4 console=tty1"
493 ```
499 ```
494
500
495 Start QEMU full system emulation and output to console:
501 Start QEMU full system emulation and output to console:
496 ```shell
502 ```shell
497 qemu-system-arm -m 2048M -M vexpress-a15 -cpu cortex-a15 -kernel kernel7.img -no-reboot -dtb vexpress-v2p-ca15_a7.dtb -sd ${IMAGE_NAME}.qcow2 -append "root=/dev/mmcblk0p2 rw rootfstype=ext4 console=ttyAMA0,115200 init=/bin/systemd" -serial stdio
503 qemu-system-arm -m 2048M -M vexpress-a15 -cpu cortex-a15 -kernel kernel7.img -no-reboot -dtb vexpress-v2p-ca15_a7.dtb -sd ${IMAGE_NAME}.qcow2 -append "root=/dev/mmcblk0p2 rw rootfstype=ext4 console=ttyAMA0,115200 init=/bin/systemd" -serial stdio
498 ```
504 ```
499
505
500 Start QEMU full system emulation with SMP and output to console:
506 Start QEMU full system emulation with SMP and output to console:
501 ```shell
507 ```shell
502 qemu-system-arm -m 2048M -M vexpress-a15 -cpu cortex-a15 -smp cpus=2,maxcpus=2 -kernel kernel7.img -no-reboot -dtb vexpress-v2p-ca15_a7.dtb -sd ${IMAGE_NAME}.qcow2 -append "root=/dev/mmcblk0p2 rw rootfstype=ext4 console=ttyAMA0,115200 init=/bin/systemd" -serial stdio
508 qemu-system-arm -m 2048M -M vexpress-a15 -cpu cortex-a15 -smp cpus=2,maxcpus=2 -kernel kernel7.img -no-reboot -dtb vexpress-v2p-ca15_a7.dtb -sd ${IMAGE_NAME}.qcow2 -append "root=/dev/mmcblk0p2 rw rootfstype=ext4 console=ttyAMA0,115200 init=/bin/systemd" -serial stdio
503 ```
509 ```
504
510
505 Start QEMU full system emulation with cryptfs, initramfs and output to console:
511 Start QEMU full system emulation with cryptfs, initramfs and output to console:
506 ```shell
512 ```shell
507 qemu-system-arm -m 2048M -M vexpress-a15 -cpu cortex-a15 -kernel kernel7.img -no-reboot -dtb vexpress-v2p-ca15_a7.dtb -sd ${IMAGE_NAME}.qcow2 -initrd "initramfs-${KERNEL_VERSION}" -append "root=/dev/mapper/secure cryptdevice=/dev/mmcblk0p2:secure rw rootfstype=ext4 console=ttyAMA0,115200 init=/bin/systemd" -serial stdio
513 qemu-system-arm -m 2048M -M vexpress-a15 -cpu cortex-a15 -kernel kernel7.img -no-reboot -dtb vexpress-v2p-ca15_a7.dtb -sd ${IMAGE_NAME}.qcow2 -initrd "initramfs-${KERNEL_VERSION}" -append "root=/dev/mapper/secure cryptdevice=/dev/mmcblk0p2:secure rw rootfstype=ext4 console=ttyAMA0,115200 init=/bin/systemd" -serial stdio
508 ```
514 ```
509
515
510 ## External links and references
516 ## External links and references
511 * [Debian worldwide mirror sites](https://www.debian.org/mirror/list)
517 * [Debian worldwide mirror sites](https://www.debian.org/mirror/list)
512 * [Debian Raspberry Pi 2 Wiki](https://wiki.debian.org/RaspberryPi2)
518 * [Debian Raspberry Pi 2 Wiki](https://wiki.debian.org/RaspberryPi2)
513 * [Debian CrossToolchains Wiki](https://wiki.debian.org/CrossToolchains)
519 * [Debian CrossToolchains Wiki](https://wiki.debian.org/CrossToolchains)
514 * [Official Raspberry Pi Firmware on github](https://github.com/raspberrypi/firmware)
520 * [Official Raspberry Pi Firmware on github](https://github.com/raspberrypi/firmware)
515 * [Official Raspberry Pi Kernel on github](https://github.com/raspberrypi/linux)
521 * [Official Raspberry Pi Kernel on github](https://github.com/raspberrypi/linux)
516 * [U-BOOT git repository](https://git.denx.de/?p=u-boot.git;a=summary)
522 * [U-BOOT git repository](https://git.denx.de/?p=u-boot.git;a=summary)
517 * [Xorg DDX driver fbturbo](https://github.com/ssvb/xf86-video-fbturbo)
523 * [Xorg DDX driver fbturbo](https://github.com/ssvb/xf86-video-fbturbo)
518 * [RPi3 Wireless interface firmware](https://github.com/RPi-Distro/firmware-nonfree/tree/master/brcm80211/brcm)
524 * [RPi3 Wireless interface firmware](https://github.com/RPi-Distro/firmware-nonfree/tree/master/brcm80211/brcm)
519 * [Collabora RPi2 Kernel precompiled](https://repositories.collabora.co.uk/debian/)
525 * [Collabora RPi2 Kernel precompiled](https://repositories.collabora.co.uk/debian/)
@@ -1,64 +1,95
1 #
1 #
2 # Setup fstab and initramfs
2 # Setup fstab and initramfs
3 #
3 #
4
4
5 # Load utility functions
5 # Load utility functions
6 . ./functions.sh
6 . ./functions.sh
7
7
8 # Install and setup fstab
8 # Install and setup fstab
9 install_readonly files/mount/fstab "${ETC_DIR}/fstab"
9 install_readonly files/mount/fstab "${ETC_DIR}/fstab"
10
10
11 if [ "$ENABLE_UBOOTUSB" = true ] ; then
11 if [ "$ENABLE_UBOOTUSB" = true ] ; then
12 sed -i "s/mmcblk0p1/sda1/" "${ETC_DIR}/fstab"
12 sed -i "s/mmcblk0p1/sda1/" "${ETC_DIR}/fstab"
13 sed -i "s/mmcblk0p2/sda2/" "${ETC_DIR}/fstab"
13 sed -i "s/mmcblk0p2/sda2/" "${ETC_DIR}/fstab"
14 fi
14 fi
15
15
16 # Add usb/sda disk root partition to fstab
16 # Add usb/sda disk root partition to fstab
17 if [ "$ENABLE_SPLITFS" = true ] && [ "$ENABLE_CRYPTFS" = false ] ; then
17 if [ "$ENABLE_SPLITFS" = true ] && [ "$ENABLE_CRYPTFS" = false ] ; then
18 sed -i "s/mmcblk0p2/sda1/" "${ETC_DIR}/fstab"
18 sed -i "s/mmcblk0p2/sda1/" "${ETC_DIR}/fstab"
19 fi
19 fi
20
20
21 # Add encrypted root partition to fstab and crypttab
21 # Add encrypted root partition to fstab and crypttab
22 if [ "$ENABLE_CRYPTFS" = true ] ; then
22 if [ "$ENABLE_CRYPTFS" = true ] ; then
23 # Replace fstab root partition with encrypted partition mapping
23 # Replace fstab root partition with encrypted partition mapping
24 sed -i "s/mmcblk0p2/mapper\/${CRYPTFS_MAPPING}/" "${ETC_DIR}/fstab"
24 sed -i "s/mmcblk0p2/mapper\/${CRYPTFS_MAPPING}/" "${ETC_DIR}/fstab"
25
25
26 # Add encrypted partition to crypttab and fstab
26 # Add encrypted partition to crypttab and fstab
27 install_readonly files/mount/crypttab "${ETC_DIR}/crypttab"
27 install_readonly files/mount/crypttab "${ETC_DIR}/crypttab"
28 echo "${CRYPTFS_MAPPING} /dev/mmcblk0p2 none luks,initramfs" >> "${ETC_DIR}/crypttab"
28 echo "${CRYPTFS_MAPPING} /dev/mmcblk0p2 none luks,initramfs" >> "${ETC_DIR}/crypttab"
29
29
30 if [ "$ENABLE_SPLITFS" = true ] ; then
30 if [ "$ENABLE_SPLITFS" = true ] ; then
31 # Add usb/sda disk to crypttab
31 # Add usb/sda disk to crypttab
32 sed -i "s/mmcblk0p2/sda1/" "${ETC_DIR}/crypttab"
32 sed -i "s/mmcblk0p2/sda1/" "${ETC_DIR}/crypttab"
33 fi
33 fi
34 fi
34 fi
35
35
36 # Generate initramfs file
36 # Generate initramfs file
37 if [ "$BUILD_KERNEL" = true ] && [ "$ENABLE_INITRAMFS" = true ] ; then
37 if [ "$BUILD_KERNEL" = true ] && [ "$ENABLE_INITRAMFS" = true ] ; then
38 if [ "$ENABLE_CRYPTFS" = true ] ; then
38 if [ "$ENABLE_CRYPTFS" = true ] ; then
39 # Include initramfs scripts to auto expand encrypted root partition
39 # Include initramfs scripts to auto expand encrypted root partition
40 if [ "$EXPANDROOT" = true ] ; then
40 if [ "$EXPANDROOT" = true ] ; then
41 install_exec files/initramfs/expand_encrypted_rootfs "${ETC_DIR}/initramfs-tools/scripts/init-premount/expand_encrypted_rootfs"
41 install_exec files/initramfs/expand_encrypted_rootfs "${ETC_DIR}/initramfs-tools/scripts/init-premount/expand_encrypted_rootfs"
42 install_exec files/initramfs/expand-premount "${ETC_DIR}/initramfs-tools/scripts/local-premount/expand-premount"
42 install_exec files/initramfs/expand-premount "${ETC_DIR}/initramfs-tools/scripts/local-premount/expand-premount"
43 install_exec files/initramfs/expand-tools "${ETC_DIR}/initramfs-tools/hooks/expand-tools"
43 install_exec files/initramfs/expand-tools "${ETC_DIR}/initramfs-tools/hooks/expand-tools"
44 fi
44 fi
45
45
46 if [ "$CRYPTFS_DROPBEAR" = true ]; then
47 if [ -n "$CRYPTFS_DROPBEAR_PUBKEY" ] && [ -f "$CRYPTFS_DROPBEAR_PUBKEY" ] ; then
48 install_readonly "${CRYPTFS_DROPBEAR_PUBKEY}" "${ETC_DIR}/dropbear-initramfs/id_rsa.pub"
49 cat /etc/dropbear-initramfs/id_rsa.pub >> /etc/dropbear-initramfs/authorized_keys
50 else
51 # Create key
52 chroot_exec /usr/bin/dropbearkey -t rsa -f /etc/dropbear-initramfs/id_rsa.dropbear
53
54 # Convert dropbear key to openssh key
55 chroot_exec /usr/lib/dropbear/dropbearconvert dropbear openssh /etc/dropbear-initramfs/id_rsa.dropbear /etc/dropbear-initramfs/id_rsa
56
57 # Get Public Key Part
58 touch /etc/dropbear-initramfs/id_rsa.pub
59 chroot_exec /usr/bin/dropbearkey -y -f /etc/dropbear-initramfs/id_rsa.dropbear | chroot_exec tee /etc/dropbear-initramfs/id_rsa.pub
60
61 # Delete unwanted lines
62 sed -i '/Public/d' "${ETC_DIR}"/dropbear-initramfs/id_rsa.pub
63 sed -i '/Fingerprint/d' "${ETC_DIR}"/dropbear-initramfs/id_rsa.pub
64
65 # Trust the new key
66 touch "${ETC_DIR}"/dropbear-initramfs/authorized_keys
67 cat "${ETC_DIR}"/dropbear-initramfs/id_rsa.pub | chroot_exec tee -a "${ETC_DIR}"/dropbear-initramfs/authorized_keys
68
69 # Save Keys - convert with putty from rsa/openssh to puttkey
70 cp -f "${ETC_DIR}"/dropbear-initramfs/id_rsa "${BASEDIR}"/dropbear_initramfs_key.rsa
71
72 #Get unlock script
73 install_exec files/initramfs/crypt_unlock.sh "${ETC_DIR}/initramfs-tools/hooks/crypt_unlock.sh"
74 fi
75 else
46 # Disable SSHD inside initramfs
76 # Disable SSHD inside initramfs
47 printf "#\n# DROPBEAR: [ y | n ]\n#\n\nDROPBEAR=n\n" >> "${ETC_DIR}/initramfs-tools/initramfs.conf"
77 printf "#\n# DROPBEAR: [ y | n ]\n#\n\nDROPBEAR=n\n" >> "${ETC_DIR}/initramfs-tools/initramfs.conf"
78 fi
48
79
49 # Add cryptsetup modules to initramfs
80 # Add cryptsetup modules to initramfs
50 printf "#\n# CRYPTSETUP: [ y | n ]\n#\n\nCRYPTSETUP=y\n" >> "${ETC_DIR}/initramfs-tools/conf-hook"
81 printf "#\n# CRYPTSETUP: [ y | n ]\n#\n\nCRYPTSETUP=y\n" >> "${ETC_DIR}/initramfs-tools/conf-hook"
51
82
52 # Dummy mapping required by mkinitramfs
83 # Dummy mapping required by mkinitramfs
53 echo "0 1 crypt $(echo "${CRYPTFS_CIPHER}" | cut -d ':' -f 1) ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff 0 7:0 4096" | chroot_exec dmsetup create "${CRYPTFS_MAPPING}"
84 echo "0 1 crypt $(echo "${CRYPTFS_CIPHER}" | cut -d ':' -f 1) ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff 0 7:0 4096" | chroot_exec dmsetup create "${CRYPTFS_MAPPING}"
54
85
55 # Generate initramfs with encrypted root partition support
86 # Generate initramfs with encrypted root partition support
56 chroot_exec mkinitramfs -o "/boot/firmware/initramfs-${KERNEL_VERSION}" "${KERNEL_VERSION}"
87 chroot_exec mkinitramfs -o "/boot/firmware/initramfs-${KERNEL_VERSION}" "${KERNEL_VERSION}"
57
88
58 # Remove dummy mapping
89 # Remove dummy mapping
59 chroot_exec cryptsetup close "${CRYPTFS_MAPPING}"
90 chroot_exec cryptsetup close "${CRYPTFS_MAPPING}"
60 else
91 else
61 # Generate initramfs without encrypted root partition support
92 # Generate initramfs without encrypted root partition support
62 chroot_exec mkinitramfs -o "/boot/firmware/initramfs-${KERNEL_VERSION}" "${KERNEL_VERSION}"
93 chroot_exec mkinitramfs -o "/boot/firmware/initramfs-${KERNEL_VERSION}" "${KERNEL_VERSION}"
63 fi
94 fi
64 fi
95 fi
@@ -1,833 +1,842
1 #!/bin/sh
1 #!/bin/sh
2 ########################################################################
2 ########################################################################
3 # rpi23-gen-image.sh 2015-2017
3 # rpi23-gen-image.sh 2015-2017
4 #
4 #
5 # Advanced Debian "stretch" and "buster" bootstrap script for RPi2/3
5 # Advanced Debian "stretch" and "buster" bootstrap script for RPi2/3
6 #
6 #
7 # This program is free software; you can redistribute it and/or
7 # This program is free software; you can redistribute it and/or
8 # modify it under the terms of the GNU General Public License
8 # modify it under the terms of the GNU General Public License
9 # as published by the Free Software Foundation; either version 2
9 # as published by the Free Software Foundation; either version 2
10 # of the License, or (at your option) any later version.
10 # of the License, or (at your option) any later version.
11 #
11 #
12 # Copyright (C) 2015 Jan Wagner <mail@jwagner.eu>
12 # Copyright (C) 2015 Jan Wagner <mail@jwagner.eu>
13 #
13 #
14 # Big thanks for patches and enhancements by 20+ github contributors!
14 # Big thanks for patches and enhancements by 20+ github contributors!
15 ########################################################################
15 ########################################################################
16
16
17 # Are we running as root?
17 # Are we running as root?
18 if [ "$(id -u)" -ne "0" ] ; then
18 if [ "$(id -u)" -ne "0" ] ; then
19 echo "error: this script must be executed with root privileges!"
19 echo "error: this script must be executed with root privileges!"
20 exit 1
20 exit 1
21 fi
21 fi
22
22
23 # Check if ./functions.sh script exists
23 # Check if ./functions.sh script exists
24 if [ ! -r "./functions.sh" ] ; then
24 if [ ! -r "./functions.sh" ] ; then
25 echo "error: './functions.sh' required script not found!"
25 echo "error: './functions.sh' required script not found!"
26 exit 1
26 exit 1
27 fi
27 fi
28
28
29 # Load utility functions
29 # Load utility functions
30 . ./functions.sh
30 . ./functions.sh
31
31
32 # Load parameters from configuration template file
32 # Load parameters from configuration template file
33 if [ -n "$CONFIG_TEMPLATE" ] ; then
33 if [ -n "$CONFIG_TEMPLATE" ] ; then
34 use_template
34 use_template
35 fi
35 fi
36
36
37 # Introduce settings
37 # Introduce settings
38 set -e
38 set -e
39 echo -n -e "\n#\n# RPi2/3 Bootstrap Settings\n#\n"
39 echo -n -e "\n#\n# RPi2/3 Bootstrap Settings\n#\n"
40 set -x
40 set -x
41
41
42 # Raspberry Pi model configuration
42 # Raspberry Pi model configuration
43 RPI_MODEL=${RPI_MODEL:=2}
43 RPI_MODEL=${RPI_MODEL:=2}
44
44
45 # Debian release
45 # Debian release
46 RELEASE=${RELEASE:=buster}
46 RELEASE=${RELEASE:=buster}
47
47
48 # Kernel Branch
48 # Kernel Branch
49 KERNEL_BRANCH=${KERNEL_BRANCH:=""}
49 KERNEL_BRANCH=${KERNEL_BRANCH:=""}
50
50
51 # URLs
51 # URLs
52 KERNEL_URL=${KERNEL_URL:=https://github.com/raspberrypi/linux}
52 KERNEL_URL=${KERNEL_URL:=https://github.com/raspberrypi/linux}
53 FIRMWARE_URL=${FIRMWARE_URL:=https://github.com/raspberrypi/firmware/raw/master/boot}
53 FIRMWARE_URL=${FIRMWARE_URL:=https://github.com/raspberrypi/firmware/raw/master/boot}
54 WLAN_FIRMWARE_URL=${WLAN_FIRMWARE_URL:=https://github.com/RPi-Distro/firmware-nonfree/raw/master/brcm}
54 WLAN_FIRMWARE_URL=${WLAN_FIRMWARE_URL:=https://github.com/RPi-Distro/firmware-nonfree/raw/master/brcm}
55 COLLABORA_URL=${COLLABORA_URL:=https://repositories.collabora.co.uk/debian}
55 COLLABORA_URL=${COLLABORA_URL:=https://repositories.collabora.co.uk/debian}
56 FBTURBO_URL=${FBTURBO_URL:=https://github.com/ssvb/xf86-video-fbturbo.git}
56 FBTURBO_URL=${FBTURBO_URL:=https://github.com/ssvb/xf86-video-fbturbo.git}
57 UBOOT_URL=${UBOOT_URL:=https://git.denx.de/u-boot.git}
57 UBOOT_URL=${UBOOT_URL:=https://git.denx.de/u-boot.git}
58 VIDEOCORE_URL=${VIDEOCORE_URL:=https://github.com/raspberrypi/userland}
58 VIDEOCORE_URL=${VIDEOCORE_URL:=https://github.com/raspberrypi/userland}
59 #BIS= Kernel has KVM and zswap enabled
59 #BIS= Kernel has KVM and zswap enabled
60 RPI3_64_BIS_KERNEL_URL=${RPI3_64_BIS_KERNEL_URL:=https://github.com/sakaki-/bcmrpi3-kernel-bis/releases/download/4.14.80.20181113/bcmrpi3-kernel-bis-4.14.80.20181113.tar.xz}
60 RPI3_64_BIS_KERNEL_URL=${RPI3_64_BIS_KERNEL_URL:=https://github.com/sakaki-/bcmrpi3-kernel-bis/releases/download/4.14.80.20181113/bcmrpi3-kernel-bis-4.14.80.20181113.tar.xz}
61 #default bcmrpi3_defconfig target kernel
61 #default bcmrpi3_defconfig target kernel
62 RPI3_64_DEF_KERNEL_URL=${RPI3_64_DEF_KERNEL_URL:=https://github.com/sakaki-/bcmrpi3-kernel/releases/download/4.14.80.20181113/bcmrpi3-kernel-4.14.80.20181113.tar.xz}
62 RPI3_64_DEF_KERNEL_URL=${RPI3_64_DEF_KERNEL_URL:=https://github.com/sakaki-/bcmrpi3-kernel/releases/download/4.14.80.20181113/bcmrpi3-kernel-4.14.80.20181113.tar.xz}
63 #enhanced kernel
63 #enhanced kernel
64 RPI3_64_KERNEL_URL=${RPI3_64_KERNEL_URL:=$RPI3_64_BIS_KERNEL_URL}
64 RPI3_64_KERNEL_URL=${RPI3_64_KERNEL_URL:=$RPI3_64_BIS_KERNEL_URL}
65 BLUETOOTH_URL=${BLUETOOTH_URL:=https://github.com/RPi-Distro/pi-bluetooth.git}
65 BLUETOOTH_URL=${BLUETOOTH_URL:=https://github.com/RPi-Distro/pi-bluetooth.git}
66 NEXMON_URL=${NEXMON_URL:=https://github.com/seemoo-lab/nexmon.git}
66 NEXMON_URL=${NEXMON_URL:=https://github.com/seemoo-lab/nexmon.git}
67
67
68 # Build directories
68 # Build directories
69 WORKDIR=$(pwd)
69 WORKDIR=$(pwd)
70 BASEDIR=${BASEDIR:=${WORKDIR}/images/${RELEASE}}
70 BASEDIR=${BASEDIR:=${WORKDIR}/images/${RELEASE}}
71 BUILDDIR="${BASEDIR}/build"
71 BUILDDIR="${BASEDIR}/build"
72
72
73 # Chroot directories
73 # Chroot directories
74 R="${BUILDDIR}/chroot"
74 R="${BUILDDIR}/chroot"
75 ETC_DIR="${R}/etc"
75 ETC_DIR="${R}/etc"
76 LIB_DIR="${R}/lib"
76 LIB_DIR="${R}/lib"
77 BOOT_DIR="${R}/boot/firmware"
77 BOOT_DIR="${R}/boot/firmware"
78 KERNEL_DIR="${R}/usr/src/linux"
78 KERNEL_DIR="${R}/usr/src/linux"
79 WLAN_FIRMWARE_DIR="${LIB_DIR}/firmware/brcm"
79 WLAN_FIRMWARE_DIR="${LIB_DIR}/firmware/brcm"
80 BLUETOOTH_FIRMWARE_DIR="${ETC_DIR}/firmware/bt"
80 BLUETOOTH_FIRMWARE_DIR="${ETC_DIR}/firmware/bt"
81
81
82 # Firmware directory: Blank if download from github
82 # Firmware directory: Blank if download from github
83 RPI_FIRMWARE_DIR=${RPI_FIRMWARE_DIR:=""}
83 RPI_FIRMWARE_DIR=${RPI_FIRMWARE_DIR:=""}
84
84
85 # General settings
85 # General settings
86 SET_ARCH=${SET_ARCH:=32}
86 SET_ARCH=${SET_ARCH:=32}
87 HOSTNAME=${HOSTNAME:=rpi${RPI_MODEL}-${RELEASE}}
87 HOSTNAME=${HOSTNAME:=rpi${RPI_MODEL}-${RELEASE}}
88 PASSWORD=${PASSWORD:=raspberry}
88 PASSWORD=${PASSWORD:=raspberry}
89 USER_PASSWORD=${USER_PASSWORD:=raspberry}
89 USER_PASSWORD=${USER_PASSWORD:=raspberry}
90 DEFLOCAL=${DEFLOCAL:="en_US.UTF-8"}
90 DEFLOCAL=${DEFLOCAL:="en_US.UTF-8"}
91 TIMEZONE=${TIMEZONE:="Europe/Berlin"}
91 TIMEZONE=${TIMEZONE:="Europe/Berlin"}
92 EXPANDROOT=${EXPANDROOT:=true}
92 EXPANDROOT=${EXPANDROOT:=true}
93
93
94 # Keyboard settings
94 # Keyboard settings
95 XKB_MODEL=${XKB_MODEL:=""}
95 XKB_MODEL=${XKB_MODEL:=""}
96 XKB_LAYOUT=${XKB_LAYOUT:=""}
96 XKB_LAYOUT=${XKB_LAYOUT:=""}
97 XKB_VARIANT=${XKB_VARIANT:=""}
97 XKB_VARIANT=${XKB_VARIANT:=""}
98 XKB_OPTIONS=${XKB_OPTIONS:=""}
98 XKB_OPTIONS=${XKB_OPTIONS:=""}
99
99
100 # Network settings (DHCP)
100 # Network settings (DHCP)
101 ENABLE_DHCP=${ENABLE_DHCP:=true}
101 ENABLE_DHCP=${ENABLE_DHCP:=true}
102
102
103 # Network settings (static)
103 # Network settings (static)
104 NET_ADDRESS=${NET_ADDRESS:=""}
104 NET_ADDRESS=${NET_ADDRESS:=""}
105 NET_GATEWAY=${NET_GATEWAY:=""}
105 NET_GATEWAY=${NET_GATEWAY:=""}
106 NET_DNS_1=${NET_DNS_1:=""}
106 NET_DNS_1=${NET_DNS_1:=""}
107 NET_DNS_2=${NET_DNS_2:=""}
107 NET_DNS_2=${NET_DNS_2:=""}
108 NET_DNS_DOMAINS=${NET_DNS_DOMAINS:=""}
108 NET_DNS_DOMAINS=${NET_DNS_DOMAINS:=""}
109 NET_NTP_1=${NET_NTP_1:=""}
109 NET_NTP_1=${NET_NTP_1:=""}
110 NET_NTP_2=${NET_NTP_2:=""}
110 NET_NTP_2=${NET_NTP_2:=""}
111
111
112 # APT settings
112 # APT settings
113 APT_PROXY=${APT_PROXY:=""}
113 APT_PROXY=${APT_PROXY:=""}
114 APT_SERVER=${APT_SERVER:="ftp.debian.org"}
114 APT_SERVER=${APT_SERVER:="ftp.debian.org"}
115
115
116 # Feature settings
116 # Feature settings
117 ENABLE_PRINTK=${ENABLE_PRINTK:=false}
117 ENABLE_PRINTK=${ENABLE_PRINTK:=false}
118 ENABLE_BLUETOOTH=${ENABLE_BLUETOOTH:=false}
118 ENABLE_BLUETOOTH=${ENABLE_BLUETOOTH:=false}
119 ENABLE_MINIUART_OVERLAY=${ENABLE_MINIUART_OVERLAY:=false}
119 ENABLE_MINIUART_OVERLAY=${ENABLE_MINIUART_OVERLAY:=false}
120 ENABLE_CONSOLE=${ENABLE_CONSOLE:=true}
120 ENABLE_CONSOLE=${ENABLE_CONSOLE:=true}
121 ENABLE_I2C=${ENABLE_I2C:=false}
121 ENABLE_I2C=${ENABLE_I2C:=false}
122 ENABLE_SPI=${ENABLE_SPI:=false}
122 ENABLE_SPI=${ENABLE_SPI:=false}
123 ENABLE_IPV6=${ENABLE_IPV6:=true}
123 ENABLE_IPV6=${ENABLE_IPV6:=true}
124 ENABLE_SSHD=${ENABLE_SSHD:=true}
124 ENABLE_SSHD=${ENABLE_SSHD:=true}
125 ENABLE_NONFREE=${ENABLE_NONFREE:=false}
125 ENABLE_NONFREE=${ENABLE_NONFREE:=false}
126 ENABLE_WIRELESS=${ENABLE_WIRELESS:=false}
126 ENABLE_WIRELESS=${ENABLE_WIRELESS:=false}
127 ENABLE_SOUND=${ENABLE_SOUND:=true}
127 ENABLE_SOUND=${ENABLE_SOUND:=true}
128 ENABLE_DBUS=${ENABLE_DBUS:=true}
128 ENABLE_DBUS=${ENABLE_DBUS:=true}
129 ENABLE_HWRANDOM=${ENABLE_HWRANDOM:=true}
129 ENABLE_HWRANDOM=${ENABLE_HWRANDOM:=true}
130 ENABLE_MINGPU=${ENABLE_MINGPU:=false}
130 ENABLE_MINGPU=${ENABLE_MINGPU:=false}
131 ENABLE_XORG=${ENABLE_XORG:=false}
131 ENABLE_XORG=${ENABLE_XORG:=false}
132 ENABLE_WM=${ENABLE_WM:=""}
132 ENABLE_WM=${ENABLE_WM:=""}
133 ENABLE_RSYSLOG=${ENABLE_RSYSLOG:=true}
133 ENABLE_RSYSLOG=${ENABLE_RSYSLOG:=true}
134 ENABLE_USER=${ENABLE_USER:=true}
134 ENABLE_USER=${ENABLE_USER:=true}
135 USER_NAME=${USER_NAME:="pi"}
135 USER_NAME=${USER_NAME:="pi"}
136 ENABLE_ROOT=${ENABLE_ROOT:=false}
136 ENABLE_ROOT=${ENABLE_ROOT:=false}
137 ENABLE_QEMU=${ENABLE_QEMU:=false}
137 ENABLE_QEMU=${ENABLE_QEMU:=false}
138 ENABLE_SYSVINIT=${ENABLE_SYSVINIT:=false}
138 ENABLE_SYSVINIT=${ENABLE_SYSVINIT:=false}
139
139
140 # SSH settings
140 # SSH settings
141 SSH_ENABLE_ROOT=${SSH_ENABLE_ROOT:=false}
141 SSH_ENABLE_ROOT=${SSH_ENABLE_ROOT:=false}
142 SSH_DISABLE_PASSWORD_AUTH=${SSH_DISABLE_PASSWORD_AUTH:=false}
142 SSH_DISABLE_PASSWORD_AUTH=${SSH_DISABLE_PASSWORD_AUTH:=false}
143 SSH_LIMIT_USERS=${SSH_LIMIT_USERS:=false}
143 SSH_LIMIT_USERS=${SSH_LIMIT_USERS:=false}
144 SSH_ROOT_PUB_KEY=${SSH_ROOT_PUB_KEY:=""}
144 SSH_ROOT_PUB_KEY=${SSH_ROOT_PUB_KEY:=""}
145 SSH_USER_PUB_KEY=${SSH_USER_PUB_KEY:=""}
145 SSH_USER_PUB_KEY=${SSH_USER_PUB_KEY:=""}
146
146
147 # Advanced settings
147 # Advanced settings
148 ENABLE_MINBASE=${ENABLE_MINBASE:=false}
148 ENABLE_MINBASE=${ENABLE_MINBASE:=false}
149 ENABLE_REDUCE=${ENABLE_REDUCE:=false}
149 ENABLE_REDUCE=${ENABLE_REDUCE:=false}
150 ENABLE_UBOOT=${ENABLE_UBOOT:=false}
150 ENABLE_UBOOT=${ENABLE_UBOOT:=false}
151 UBOOTSRC_DIR=${UBOOTSRC_DIR:=""}
151 UBOOTSRC_DIR=${UBOOTSRC_DIR:=""}
152 ENABLE_UBOOTUSB=${ENABLE_UBOOTUSB=false}
152 ENABLE_UBOOTUSB=${ENABLE_UBOOTUSB=false}
153 ENABLE_FBTURBO=${ENABLE_FBTURBO:=false}
153 ENABLE_FBTURBO=${ENABLE_FBTURBO:=false}
154 ENABLE_VIDEOCORE=${ENABLE_VIDEOCORE:=false}
154 ENABLE_VIDEOCORE=${ENABLE_VIDEOCORE:=false}
155 ENABLE_NEXMON=${ENABLE_NEXMON:="false"}
155 ENABLE_NEXMON=${ENABLE_NEXMON:="false"}
156 VIDEOCORESRC_DIR=${VIDEOCORESRC_DIR:=""}
156 VIDEOCORESRC_DIR=${VIDEOCORESRC_DIR:=""}
157 FBTURBOSRC_DIR=${FBTURBOSRC_DIR:=""}
157 FBTURBOSRC_DIR=${FBTURBOSRC_DIR:=""}
158 NEXMON_DIR=${NEXMON_DIR:=""}
158 NEXMON_DIR=${NEXMON_DIR:=""}
159 ENABLE_HARDNET=${ENABLE_HARDNET:=false}
159 ENABLE_HARDNET=${ENABLE_HARDNET:=false}
160 ENABLE_IPTABLES=${ENABLE_IPTABLES:=false}
160 ENABLE_IPTABLES=${ENABLE_IPTABLES:=false}
161 ENABLE_SPLITFS=${ENABLE_SPLITFS:=false}
161 ENABLE_SPLITFS=${ENABLE_SPLITFS:=false}
162 ENABLE_INITRAMFS=${ENABLE_INITRAMFS:=false}
162 ENABLE_INITRAMFS=${ENABLE_INITRAMFS:=false}
163 ENABLE_IFNAMES=${ENABLE_IFNAMES:=true}
163 ENABLE_IFNAMES=${ENABLE_IFNAMES:=true}
164 DISABLE_UNDERVOLT_WARNINGS=${DISABLE_UNDERVOLT_WARNINGS:=}
164 DISABLE_UNDERVOLT_WARNINGS=${DISABLE_UNDERVOLT_WARNINGS:=}
165
165
166 # Kernel compilation settings
166 # Kernel compilation settings
167 BUILD_KERNEL=${BUILD_KERNEL:=true}
167 BUILD_KERNEL=${BUILD_KERNEL:=true}
168 KERNEL_REDUCE=${KERNEL_REDUCE:=false}
168 KERNEL_REDUCE=${KERNEL_REDUCE:=false}
169 KERNEL_THREADS=${KERNEL_THREADS:=1}
169 KERNEL_THREADS=${KERNEL_THREADS:=1}
170 KERNEL_HEADERS=${KERNEL_HEADERS:=true}
170 KERNEL_HEADERS=${KERNEL_HEADERS:=true}
171 KERNEL_MENUCONFIG=${KERNEL_MENUCONFIG:=false}
171 KERNEL_MENUCONFIG=${KERNEL_MENUCONFIG:=false}
172 KERNEL_REMOVESRC=${KERNEL_REMOVESRC:=true}
172 KERNEL_REMOVESRC=${KERNEL_REMOVESRC:=true}
173 KERNEL_OLDDEFCONFIG=${KERNEL_OLDDEFCONFIG:=false}
173 KERNEL_OLDDEFCONFIG=${KERNEL_OLDDEFCONFIG:=false}
174 KERNEL_CCACHE=${KERNEL_CCACHE:=false}
174 KERNEL_CCACHE=${KERNEL_CCACHE:=false}
175 KERNEL_ZSWAP=${KERNEL_ZSWAP:=false}
175 KERNEL_ZSWAP=${KERNEL_ZSWAP:=false}
176 KERNEL_VIRT=${KERNEL_VIRT:=false}
176 KERNEL_VIRT=${KERNEL_VIRT:=false}
177 KERNEL_BPF=${KERNEL_BPF:=false}
177 KERNEL_BPF=${KERNEL_BPF:=false}
178
178
179 # Kernel compilation from source directory settings
179 # Kernel compilation from source directory settings
180 KERNELSRC_DIR=${KERNELSRC_DIR:=""}
180 KERNELSRC_DIR=${KERNELSRC_DIR:=""}
181 KERNELSRC_CLEAN=${KERNELSRC_CLEAN:=false}
181 KERNELSRC_CLEAN=${KERNELSRC_CLEAN:=false}
182 KERNELSRC_CONFIG=${KERNELSRC_CONFIG:=true}
182 KERNELSRC_CONFIG=${KERNELSRC_CONFIG:=true}
183 KERNELSRC_PREBUILT=${KERNELSRC_PREBUILT:=false}
183 KERNELSRC_PREBUILT=${KERNELSRC_PREBUILT:=false}
184
184
185 # Reduce disk usage settings
185 # Reduce disk usage settings
186 REDUCE_APT=${REDUCE_APT:=true}
186 REDUCE_APT=${REDUCE_APT:=true}
187 REDUCE_DOC=${REDUCE_DOC:=true}
187 REDUCE_DOC=${REDUCE_DOC:=true}
188 REDUCE_MAN=${REDUCE_MAN:=true}
188 REDUCE_MAN=${REDUCE_MAN:=true}
189 REDUCE_VIM=${REDUCE_VIM:=false}
189 REDUCE_VIM=${REDUCE_VIM:=false}
190 REDUCE_BASH=${REDUCE_BASH:=false}
190 REDUCE_BASH=${REDUCE_BASH:=false}
191 REDUCE_HWDB=${REDUCE_HWDB:=true}
191 REDUCE_HWDB=${REDUCE_HWDB:=true}
192 REDUCE_SSHD=${REDUCE_SSHD:=true}
192 REDUCE_SSHD=${REDUCE_SSHD:=true}
193 REDUCE_LOCALE=${REDUCE_LOCALE:=true}
193 REDUCE_LOCALE=${REDUCE_LOCALE:=true}
194
194
195 # Encrypted filesystem settings
195 # Encrypted filesystem settings
196 ENABLE_CRYPTFS=${ENABLE_CRYPTFS:=false}
196 ENABLE_CRYPTFS=${ENABLE_CRYPTFS:=false}
197 CRYPTFS_PASSWORD=${CRYPTFS_PASSWORD:=""}
197 CRYPTFS_PASSWORD=${CRYPTFS_PASSWORD:=""}
198 CRYPTFS_MAPPING=${CRYPTFS_MAPPING:="secure"}
198 CRYPTFS_MAPPING=${CRYPTFS_MAPPING:="secure"}
199 CRYPTFS_CIPHER=${CRYPTFS_CIPHER:="aes-xts-plain64:sha512"}
199 CRYPTFS_CIPHER=${CRYPTFS_CIPHER:="aes-xts-plain64:sha512"}
200 CRYPTFS_XTSKEYSIZE=${CRYPTFS_XTSKEYSIZE:=512}
200 CRYPTFS_XTSKEYSIZE=${CRYPTFS_XTSKEYSIZE:=512}
201 #Dropbear-initramfs supports unlocking encrypted filesystem via SSH on bootup
202 CRYPTFS_DROPBEAR=${CRYPTFS_DROPBEAR:=true}
203 #Provide your own Dropbear Public RSA-OpenSSH Key otherwise it will be generated
204 CRYPTFS_DROPBEAR_PUBKEY=${CRYPTFS_DROPBEAR_PUBKEY:=""}
201
205
202 # Chroot scripts directory
206 # Chroot scripts directory
203 CHROOT_SCRIPTS=${CHROOT_SCRIPTS:=""}
207 CHROOT_SCRIPTS=${CHROOT_SCRIPTS:=""}
204
208
205 # Packages required in the chroot build environment
209 # Packages required in the chroot build environment
206 APT_INCLUDES=${APT_INCLUDES:=""}
210 APT_INCLUDES=${APT_INCLUDES:=""}
207 APT_INCLUDES="${APT_INCLUDES},apt-transport-https,apt-utils,ca-certificates,debian-archive-keyring,dialog,sudo,systemd,sysvinit-utils,locales,keyboard-configuration,console-setup,libnss-systemd"
211 APT_INCLUDES="${APT_INCLUDES},apt-transport-https,apt-utils,ca-certificates,debian-archive-keyring,dialog,sudo,systemd,sysvinit-utils,locales,keyboard-configuration,console-setup,libnss-systemd"
208
212
209 #Packages to exclude from chroot build environment
213 #Packages to exclude from chroot build environment
210 APT_EXCLUDES=${APT_EXCLUDES:=""}
214 APT_EXCLUDES=${APT_EXCLUDES:=""}
211
215
212 # Packages required for bootstrapping
216 # Packages required for bootstrapping
213 REQUIRED_PACKAGES="debootstrap debian-archive-keyring qemu-user-static binfmt-support dosfstools rsync bmap-tools whois git bc psmisc dbus sudo netselect-apt"
217 REQUIRED_PACKAGES="debootstrap debian-archive-keyring qemu-user-static binfmt-support dosfstools rsync bmap-tools whois git bc psmisc dbus sudo netselect-apt"
214 MISSING_PACKAGES=""
218 MISSING_PACKAGES=""
215
219
216 # Packages installed for c/c++ build environment in chroot (keep empty)
220 # Packages installed for c/c++ build environment in chroot (keep empty)
217 COMPILER_PACKAGES=""
221 COMPILER_PACKAGES=""
218
222
219 set +x
223 set +x
220
224
221 #Check if apt-cacher-ng has port 3142 open and set APT_PROXY
225 #Check if apt-cacher-ng has port 3142 open and set APT_PROXY
222 APT_CACHER_RUNNING=$(lsof -i :3142 | grep apt-cacher-ng | cut -d ' ' -f3 | uniq)
226 APT_CACHER_RUNNING=$(lsof -i :3142 | grep apt-cacher-ng | cut -d ' ' -f3 | uniq)
223 if [ -n "${APT_CACHER_RUNNING}" ] ; then
227 if [ -n "${APT_CACHER_RUNNING}" ] ; then
224 APT_PROXY=http://127.0.0.1:3142/
228 APT_PROXY=http://127.0.0.1:3142/
225 fi
229 fi
226
230
227 #netselect-apt does not know buster yet
231 #netselect-apt does not know buster yet
228 if [ "$RELEASE" = "buster" ] ; then
232 if [ "$RELEASE" = "buster" ] ; then
229 RLS=testing
233 RLS=testing
230 else
234 else
231 RLS="$RELEASE"
235 RLS="$RELEASE"
232 fi
236 fi
233
237
234 if [ -f "$(pwd)/files/apt/sources.list" ] ; then
238 if [ -f "$(pwd)/files/apt/sources.list" ] ; then
235 rm "$(pwd)/files/apt/sources.list"
239 rm "$(pwd)/files/apt/sources.list"
236 fi
240 fi
237
241
238 if [ "$ENABLE_NONFREE" = true ] ; then
242 if [ "$ENABLE_NONFREE" = true ] ; then
239 netselect-apt --arch "$RELEASE_ARCH" --tests 10 --sources --nonfree --outfile "$(pwd)/files/apt/sources.list" -d "$RLS"
243 netselect-apt --arch "$RELEASE_ARCH" --tests 10 --sources --nonfree --outfile "$(pwd)/files/apt/sources.list" -d "$RLS"
240 else
244 else
241 netselect-apt --arch "$RELEASE_ARCH" --tests 10 --sources --outfile "$(pwd)/files/apt/sources.list" -d "$RLS"
245 netselect-apt --arch "$RELEASE_ARCH" --tests 10 --sources --outfile "$(pwd)/files/apt/sources.list" -d "$RLS"
242 fi
246 fi
243
247
244 #sed and cut the result string so we can use it as APT_SERVER
248 #sed and cut the result string so we can use it as APT_SERVER
245 APT_SERVER=$(grep -m 1 http files/apt/sources.list | sed "s|http://| |g" | cut -d ' ' -f 3 | sed 's|/$|''|')
249 APT_SERVER=$(grep -m 1 http files/apt/sources.list | sed "s|http://| |g" | cut -d ' ' -f 3 | sed 's|/$|''|')
246
250
247 #make script easier and more stable to use with convenient setup switch. Just setup SET_ARCH and RPI_MODEL and your good to go!
251 #make script easier and more stable to use with convenient setup switch. Just setup SET_ARCH and RPI_MODEL and your good to go!
248 if [ -n "$SET_ARCH" ] ; then
252 if [ -n "$SET_ARCH" ] ; then
249 # 64 bit configuration
253 # 64 bit configuration
250 if [ "$SET_ARCH" = 64 ] ; then
254 if [ "$SET_ARCH" = 64 ] ; then
251 # General 64 bit depended settings
255 # General 64 bit depended settings
252 QEMU_BINARY=${QEMU_BINARY:=/usr/bin/qemu-aarch64-static}
256 QEMU_BINARY=${QEMU_BINARY:=/usr/bin/qemu-aarch64-static}
253 KERNEL_ARCH=${KERNEL_ARCH:=arm64}
257 KERNEL_ARCH=${KERNEL_ARCH:=arm64}
254 KERNEL_BIN_IMAGE=${KERNEL_BIN_IMAGE:="Image"}
258 KERNEL_BIN_IMAGE=${KERNEL_BIN_IMAGE:="Image"}
255
259
256 # Board specific settings
260 # Board specific settings
257 if [ "$RPI_MODEL" = 3 ] || [ "$RPI_MODEL" = 3P ] ; then
261 if [ "$RPI_MODEL" = 3 ] || [ "$RPI_MODEL" = 3P ] ; then
258 REQUIRED_PACKAGES="${REQUIRED_PACKAGES} crossbuild-essential-arm64"
262 REQUIRED_PACKAGES="${REQUIRED_PACKAGES} crossbuild-essential-arm64"
259 KERNEL_DEFCONFIG=${KERNEL_DEFCONFIG:=bcmrpi3_defconfig}
263 KERNEL_DEFCONFIG=${KERNEL_DEFCONFIG:=bcmrpi3_defconfig}
260 RELEASE_ARCH=${RELEASE_ARCH:=arm64}
264 RELEASE_ARCH=${RELEASE_ARCH:=arm64}
261 KERNEL_IMAGE=${KERNEL_IMAGE:=kernel8.img}
265 KERNEL_IMAGE=${KERNEL_IMAGE:=kernel8.img}
262 CROSS_COMPILE=${CROSS_COMPILE:=aarch64-linux-gnu-}
266 CROSS_COMPILE=${CROSS_COMPILE:=aarch64-linux-gnu-}
263 else
267 else
264 echo "error: Only Raspberry PI 3 and 3B+ support 64 bit"
268 echo "error: Only Raspberry PI 3 and 3B+ support 64 bit"
265 exit 1
269 exit 1
266 fi
270 fi
267 fi
271 fi
268
272
269 # 32 bit configuration
273 # 32 bit configuration
270 if [ "$SET_ARCH" = 32 ] ; then
274 if [ "$SET_ARCH" = 32 ] ; then
271 # General 32 bit dependend settings
275 # General 32 bit dependend settings
272 QEMU_BINARY=${QEMU_BINARY:=/usr/bin/qemu-arm-static}
276 QEMU_BINARY=${QEMU_BINARY:=/usr/bin/qemu-arm-static}
273 KERNEL_ARCH=${KERNEL_ARCH:=arm}
277 KERNEL_ARCH=${KERNEL_ARCH:=arm}
274 KERNEL_BIN_IMAGE=${KERNEL_BIN_IMAGE:="zImage"}
278 KERNEL_BIN_IMAGE=${KERNEL_BIN_IMAGE:="zImage"}
275
279
276 # Hardware specific settings
280 # Hardware specific settings
277 if [ "$RPI_MODEL" = 0 ] || [ "$RPI_MODEL" = 1 ] || [ "$RPI_MODEL" = 1P ] ; then
281 if [ "$RPI_MODEL" = 0 ] || [ "$RPI_MODEL" = 1 ] || [ "$RPI_MODEL" = 1P ] ; then
278 REQUIRED_PACKAGES="${REQUIRED_PACKAGES} crossbuild-essential-armel"
282 REQUIRED_PACKAGES="${REQUIRED_PACKAGES} crossbuild-essential-armel"
279 KERNEL_DEFCONFIG=${KERNEL_DEFCONFIG:=bcmrpi_defconfig}
283 KERNEL_DEFCONFIG=${KERNEL_DEFCONFIG:=bcmrpi_defconfig}
280 RELEASE_ARCH=${RELEASE_ARCH:=armel}
284 RELEASE_ARCH=${RELEASE_ARCH:=armel}
281 KERNEL_IMAGE=${KERNEL_IMAGE:=kernel.img}
285 KERNEL_IMAGE=${KERNEL_IMAGE:=kernel.img}
282 CROSS_COMPILE=${CROSS_COMPILE:=arm-linux-gnueabi-}
286 CROSS_COMPILE=${CROSS_COMPILE:=arm-linux-gnueabi-}
283 fi
287 fi
284
288
285 # Hardware specific settings
289 # Hardware specific settings
286 if [ "$RPI_MODEL" = 2 ] || [ "$RPI_MODEL" = 3 ] || [ "$RPI_MODEL" = 3P ] ; then
290 if [ "$RPI_MODEL" = 2 ] || [ "$RPI_MODEL" = 3 ] || [ "$RPI_MODEL" = 3P ] ; then
287 REQUIRED_PACKAGES="${REQUIRED_PACKAGES} crossbuild-essential-armhf"
291 REQUIRED_PACKAGES="${REQUIRED_PACKAGES} crossbuild-essential-armhf"
288 KERNEL_DEFCONFIG=${KERNEL_DEFCONFIG:=bcm2709_defconfig}
292 KERNEL_DEFCONFIG=${KERNEL_DEFCONFIG:=bcm2709_defconfig}
289 RELEASE_ARCH=${RELEASE_ARCH:=armhf}
293 RELEASE_ARCH=${RELEASE_ARCH:=armhf}
290 KERNEL_IMAGE=${KERNEL_IMAGE:=kernel7.img}
294 KERNEL_IMAGE=${KERNEL_IMAGE:=kernel7.img}
291 CROSS_COMPILE=${CROSS_COMPILE:=arm-linux-gnueabihf-}
295 CROSS_COMPILE=${CROSS_COMPILE:=arm-linux-gnueabihf-}
292 fi
296 fi
293 fi
297 fi
294 #SET_ARCH not set
298 #SET_ARCH not set
295 else
299 else
296 echo "error: Please set '32' or '64' as value for SET_ARCH"
300 echo "error: Please set '32' or '64' as value for SET_ARCH"
297 exit 1
301 exit 1
298 fi
302 fi
299 # Device specific configuration and U-Boot configuration
303 # Device specific configuration and U-Boot configuration
300 case "$RPI_MODEL" in
304 case "$RPI_MODEL" in
301 0)
305 0)
302 DTB_FILE=${DTB_FILE:=bcm2708-rpi-0-w.dtb}
306 DTB_FILE=${DTB_FILE:=bcm2708-rpi-0-w.dtb}
303 UBOOT_CONFIG=${UBOOT_CONFIG:=rpi_defconfig}
307 UBOOT_CONFIG=${UBOOT_CONFIG:=rpi_defconfig}
304 ;;
308 ;;
305 1)
309 1)
306 DTB_FILE=${DTB_FILE:=bcm2708-rpi-b.dtb}
310 DTB_FILE=${DTB_FILE:=bcm2708-rpi-b.dtb}
307 UBOOT_CONFIG=${UBOOT_CONFIG:=rpi_defconfig}
311 UBOOT_CONFIG=${UBOOT_CONFIG:=rpi_defconfig}
308 ;;
312 ;;
309 1P)
313 1P)
310 DTB_FILE=${DTB_FILE:=bcm2708-rpi-b-plus.dtb}
314 DTB_FILE=${DTB_FILE:=bcm2708-rpi-b-plus.dtb}
311 UBOOT_CONFIG=${UBOOT_CONFIG:=rpi_defconfig}
315 UBOOT_CONFIG=${UBOOT_CONFIG:=rpi_defconfig}
312 ;;
316 ;;
313 2)
317 2)
314 DTB_FILE=${DTB_FILE:=bcm2709-rpi-2-b.dtb}
318 DTB_FILE=${DTB_FILE:=bcm2709-rpi-2-b.dtb}
315 UBOOT_CONFIG=${UBOOT_CONFIG:=rpi_2_defconfig}
319 UBOOT_CONFIG=${UBOOT_CONFIG:=rpi_2_defconfig}
316 ;;
320 ;;
317 3)
321 3)
318 DTB_FILE=${DTB_FILE:=bcm2710-rpi-3-b.dtb}
322 DTB_FILE=${DTB_FILE:=bcm2710-rpi-3-b.dtb}
319 UBOOT_CONFIG=${UBOOT_CONFIG:=rpi_3_defconfig}
323 UBOOT_CONFIG=${UBOOT_CONFIG:=rpi_3_defconfig}
320 ;;
324 ;;
321 3P)
325 3P)
322 DTB_FILE=${DTB_FILE:=bcm2710-rpi-3-b.dtb}
326 DTB_FILE=${DTB_FILE:=bcm2710-rpi-3-b.dtb}
323 UBOOT_CONFIG=${UBOOT_CONFIG:=rpi_3_defconfig}
327 UBOOT_CONFIG=${UBOOT_CONFIG:=rpi_3_defconfig}
324 ;;
328 ;;
325 *)
329 *)
326 echo "error: Raspberry Pi model $RPI_MODEL is not supported!"
330 echo "error: Raspberry Pi model $RPI_MODEL is not supported!"
327 exit 1
331 exit 1
328 ;;
332 ;;
329 esac
333 esac
330
334
331 # Raspberry PI 0,3,3P with Bluetooth and Wifi onboard
335 # Raspberry PI 0,3,3P with Bluetooth and Wifi onboard
332 if [ "$RPI_MODEL" = 0 ] || [ "$RPI_MODEL" = 3 ] || [ "$RPI_MODEL" = 3P ] ; then
336 if [ "$RPI_MODEL" = 0 ] || [ "$RPI_MODEL" = 3 ] || [ "$RPI_MODEL" = 3P ] ; then
333 # Include bluetooth packages on supported boards
337 # Include bluetooth packages on supported boards
334 if [ "$ENABLE_BLUETOOTH" = true ] && [ "$ENABLE_CONSOLE" = false ]; then
338 if [ "$ENABLE_BLUETOOTH" = true ] && [ "$ENABLE_CONSOLE" = false ]; then
335 APT_INCLUDES="${APT_INCLUDES},bluetooth,bluez"
339 APT_INCLUDES="${APT_INCLUDES},bluetooth,bluez"
336 fi
340 fi
337 else # Raspberry PI 1,1P,2 without Wifi and bluetooth onboard
341 else # Raspberry PI 1,1P,2 without Wifi and bluetooth onboard
338 # Check if the internal wireless interface is not supported by the RPi model
342 # Check if the internal wireless interface is not supported by the RPi model
339 if [ "$ENABLE_WIRELESS" = true ] || [ "$ENABLE_BLUETOOTH" = true ]; then
343 if [ "$ENABLE_WIRELESS" = true ] || [ "$ENABLE_BLUETOOTH" = true ]; then
340 echo "error: The selected Raspberry Pi model has no integrated interface for wireless or bluetooth"
344 echo "error: The selected Raspberry Pi model has no integrated interface for wireless or bluetooth"
341 exit 1
345 exit 1
342 fi
346 fi
343 fi
347 fi
344
348
345 # Prepare date string for default image file name
349 # Prepare date string for default image file name
346 DATE="$(date +%Y-%m-%d)"
350 DATE="$(date +%Y-%m-%d)"
347 if [ -z "$KERNEL_BRANCH" ] ; then
351 if [ -z "$KERNEL_BRANCH" ] ; then
348 IMAGE_NAME=${IMAGE_NAME:=${BASEDIR}/${DATE}-${KERNEL_ARCH}-CURRENT-rpi${RPI_MODEL}-${RELEASE}-${RELEASE_ARCH}}
352 IMAGE_NAME=${IMAGE_NAME:=${BASEDIR}/${DATE}-${KERNEL_ARCH}-CURRENT-rpi${RPI_MODEL}-${RELEASE}-${RELEASE_ARCH}}
349 else
353 else
350 IMAGE_NAME=${IMAGE_NAME:=${BASEDIR}/${DATE}-${KERNEL_ARCH}-${KERNEL_BRANCH}-rpi${RPI_MODEL}-${RELEASE}-${RELEASE_ARCH}}
354 IMAGE_NAME=${IMAGE_NAME:=${BASEDIR}/${DATE}-${KERNEL_ARCH}-${KERNEL_BRANCH}-rpi${RPI_MODEL}-${RELEASE}-${RELEASE_ARCH}}
351 fi
355 fi
352
356
353 # Check if DISABLE_UNDERVOLT_WARNINGS parameter value is supported
357 # Check if DISABLE_UNDERVOLT_WARNINGS parameter value is supported
354 if [ -n "$DISABLE_UNDERVOLT_WARNINGS" ] ; then
358 if [ -n "$DISABLE_UNDERVOLT_WARNINGS" ] ; then
355 if [ "$DISABLE_UNDERVOLT_WARNINGS" != 1 ] && [ "$DISABLE_UNDERVOLT_WARNINGS" != 2 ] ; then
359 if [ "$DISABLE_UNDERVOLT_WARNINGS" != 1 ] && [ "$DISABLE_UNDERVOLT_WARNINGS" != 2 ] ; then
356 echo "error: DISABLE_UNDERVOLT_WARNINGS=${DISABLE_UNDERVOLT_WARNINGS} is not supported"
360 echo "error: DISABLE_UNDERVOLT_WARNINGS=${DISABLE_UNDERVOLT_WARNINGS} is not supported"
357 exit 1
361 exit 1
358 fi
362 fi
359 fi
363 fi
360
364
361 # Add cmake to compile videocore sources
365 # Add cmake to compile videocore sources
362 if [ "$ENABLE_VIDEOCORE" = true ] ; then
366 if [ "$ENABLE_VIDEOCORE" = true ] ; then
363 REQUIRED_PACKAGES="${REQUIRED_PACKAGES} cmake"
367 REQUIRED_PACKAGES="${REQUIRED_PACKAGES} cmake"
364 fi
368 fi
365
369
366 # Add libncurses5 to enable kernel menuconfig
370 # Add libncurses5 to enable kernel menuconfig
367 if [ "$KERNEL_MENUCONFIG" = true ] ; then
371 if [ "$KERNEL_MENUCONFIG" = true ] ; then
368 REQUIRED_PACKAGES="${REQUIRED_PACKAGES} libncurses-dev"
372 REQUIRED_PACKAGES="${REQUIRED_PACKAGES} libncurses-dev"
369 fi
373 fi
370
374
371 # Add ccache compiler cache for (faster) kernel cross (re)compilation
375 # Add ccache compiler cache for (faster) kernel cross (re)compilation
372 if [ "$KERNEL_CCACHE" = true ] ; then
376 if [ "$KERNEL_CCACHE" = true ] ; then
373 REQUIRED_PACKAGES="${REQUIRED_PACKAGES} ccache"
377 REQUIRED_PACKAGES="${REQUIRED_PACKAGES} ccache"
374 fi
378 fi
375
379
376 # Add cryptsetup package to enable filesystem encryption
380 # Add cryptsetup package to enable filesystem encryption
377 if [ "$ENABLE_CRYPTFS" = true ] && [ "$BUILD_KERNEL" = true ] ; then
381 if [ "$ENABLE_CRYPTFS" = true ] && [ "$BUILD_KERNEL" = true ] ; then
378 REQUIRED_PACKAGES="${REQUIRED_PACKAGES} cryptsetup"
382 REQUIRED_PACKAGES="${REQUIRED_PACKAGES} cryptsetup"
379 APT_INCLUDES="${APT_INCLUDES},cryptsetup,busybox,console-setup"
383 APT_INCLUDES="${APT_INCLUDES},cryptsetup,busybox,console-setup"
380
384
385 #If cryptfs,dropbear and initramfs are enabled include dropbear-initramfs package
386 if [ "$CRYPTFS_DROPBEAR" = true ] && [ "$ENABLE_INITRAMFS" = true ]; then
387 APT_INCLUDES="${APT_INCLUDES},dropbear-initramfs"
388 fi
389
381 if [ -z "$CRYPTFS_PASSWORD" ] ; then
390 if [ -z "$CRYPTFS_PASSWORD" ] ; then
382 echo "error: no password defined (CRYPTFS_PASSWORD)!"
391 echo "error: no password defined (CRYPTFS_PASSWORD)!"
383 exit 1
392 exit 1
384 fi
393 fi
385 ENABLE_INITRAMFS=true
394 ENABLE_INITRAMFS=true
386 fi
395 fi
387
396
388 # Add initramfs generation tools
397 # Add initramfs generation tools
389 if [ "$ENABLE_INITRAMFS" = true ] && [ "$BUILD_KERNEL" = true ] ; then
398 if [ "$ENABLE_INITRAMFS" = true ] && [ "$BUILD_KERNEL" = true ] ; then
390 APT_INCLUDES="${APT_INCLUDES},initramfs-tools"
399 APT_INCLUDES="${APT_INCLUDES},initramfs-tools"
391 fi
400 fi
392
401
393 # Add device-tree-compiler required for building the U-Boot bootloader
402 # Add device-tree-compiler required for building the U-Boot bootloader
394 if [ "$ENABLE_UBOOT" = true ] ; then
403 if [ "$ENABLE_UBOOT" = true ] ; then
395 APT_INCLUDES="${APT_INCLUDES},device-tree-compiler,bison,flex,bc"
404 APT_INCLUDES="${APT_INCLUDES},device-tree-compiler,bison,flex,bc"
396 else
405 else
397 if [ "$ENABLE_UBOOTUSB" = true ] ; then
406 if [ "$ENABLE_UBOOTUSB" = true ] ; then
398 echo "error: Enabling UBOOTUSB requires u-boot to be enabled"
407 echo "error: Enabling UBOOTUSB requires u-boot to be enabled"
399 exit 1
408 exit 1
400 fi
409 fi
401 fi
410 fi
402
411
403 # Check if root SSH (v2) public key file exists
412 # Check if root SSH (v2) public key file exists
404 if [ -n "$SSH_ROOT_PUB_KEY" ] ; then
413 if [ -n "$SSH_ROOT_PUB_KEY" ] ; then
405 if [ ! -f "$SSH_ROOT_PUB_KEY" ] ; then
414 if [ ! -f "$SSH_ROOT_PUB_KEY" ] ; then
406 echo "error: '$SSH_ROOT_PUB_KEY' specified SSH public key file not found (SSH_ROOT_PUB_KEY)!"
415 echo "error: '$SSH_ROOT_PUB_KEY' specified SSH public key file not found (SSH_ROOT_PUB_KEY)!"
407 exit 1
416 exit 1
408 fi
417 fi
409 fi
418 fi
410
419
411 # Check if $USER_NAME SSH (v2) public key file exists
420 # Check if $USER_NAME SSH (v2) public key file exists
412 if [ -n "$SSH_USER_PUB_KEY" ] ; then
421 if [ -n "$SSH_USER_PUB_KEY" ] ; then
413 if [ ! -f "$SSH_USER_PUB_KEY" ] ; then
422 if [ ! -f "$SSH_USER_PUB_KEY" ] ; then
414 echo "error: '$SSH_USER_PUB_KEY' specified SSH public key file not found (SSH_USER_PUB_KEY)!"
423 echo "error: '$SSH_USER_PUB_KEY' specified SSH public key file not found (SSH_USER_PUB_KEY)!"
415 exit 1
424 exit 1
416 fi
425 fi
417 fi
426 fi
418
427
419 # Check if all required packages are installed on the build system
428 # Check if all required packages are installed on the build system
420 for package in $REQUIRED_PACKAGES ; do
429 for package in $REQUIRED_PACKAGES ; do
421 if [ "$(dpkg-query -W -f='${Status}' "$package")" != "install ok installed" ] ; then
430 if [ "$(dpkg-query -W -f='${Status}' "$package")" != "install ok installed" ] ; then
422 MISSING_PACKAGES="${MISSING_PACKAGES} $package"
431 MISSING_PACKAGES="${MISSING_PACKAGES} $package"
423 fi
432 fi
424 done
433 done
425
434
426 # If there are missing packages ask confirmation for install, or exit
435 # If there are missing packages ask confirmation for install, or exit
427 if [ -n "$MISSING_PACKAGES" ] ; then
436 if [ -n "$MISSING_PACKAGES" ] ; then
428 echo "the following packages needed by this script are not installed:"
437 echo "the following packages needed by this script are not installed:"
429 echo "$MISSING_PACKAGES"
438 echo "$MISSING_PACKAGES"
430
439
431 printf "\ndo you want to install the missing packages right now? [y/n] "
440 printf "\ndo you want to install the missing packages right now? [y/n] "
432 read -r confirm
441 read -r confirm
433 [ "$confirm" != "y" ] && exit 1
442 [ "$confirm" != "y" ] && exit 1
434
443
435 # Make sure all missing required packages are installed
444 # Make sure all missing required packages are installed
436 apt-get -qq -y install "${MISSING_PACKAGES}"
445 apt-get -qq -y install "${MISSING_PACKAGES}"
437 fi
446 fi
438
447
439 # Check if ./bootstrap.d directory exists
448 # Check if ./bootstrap.d directory exists
440 if [ ! -d "./bootstrap.d/" ] ; then
449 if [ ! -d "./bootstrap.d/" ] ; then
441 echo "error: './bootstrap.d' required directory not found!"
450 echo "error: './bootstrap.d' required directory not found!"
442 exit 1
451 exit 1
443 fi
452 fi
444
453
445 # Check if ./files directory exists
454 # Check if ./files directory exists
446 if [ ! -d "./files/" ] ; then
455 if [ ! -d "./files/" ] ; then
447 echo "error: './files' required directory not found!"
456 echo "error: './files' required directory not found!"
448 exit 1
457 exit 1
449 fi
458 fi
450
459
451 # Check if specified KERNELSRC_DIR directory exists
460 # Check if specified KERNELSRC_DIR directory exists
452 if [ -n "$KERNELSRC_DIR" ] && [ ! -d "$KERNELSRC_DIR" ] ; then
461 if [ -n "$KERNELSRC_DIR" ] && [ ! -d "$KERNELSRC_DIR" ] ; then
453 echo "error: '${KERNELSRC_DIR}' specified directory not found (KERNELSRC_DIR)!"
462 echo "error: '${KERNELSRC_DIR}' specified directory not found (KERNELSRC_DIR)!"
454 exit 1
463 exit 1
455 fi
464 fi
456
465
457 # Check if specified UBOOTSRC_DIR directory exists
466 # Check if specified UBOOTSRC_DIR directory exists
458 if [ -n "$UBOOTSRC_DIR" ] && [ ! -d "$UBOOTSRC_DIR" ] ; then
467 if [ -n "$UBOOTSRC_DIR" ] && [ ! -d "$UBOOTSRC_DIR" ] ; then
459 echo "error: '${UBOOTSRC_DIR}' specified directory not found (UBOOTSRC_DIR)!"
468 echo "error: '${UBOOTSRC_DIR}' specified directory not found (UBOOTSRC_DIR)!"
460 exit 1
469 exit 1
461 fi
470 fi
462
471
463 # Check if specified VIDEOCORESRC_DIR directory exists
472 # Check if specified VIDEOCORESRC_DIR directory exists
464 if [ -n "$VIDEOCORESRC_DIR" ] && [ ! -d "$VIDEOCORESRC_DIR" ] ; then
473 if [ -n "$VIDEOCORESRC_DIR" ] && [ ! -d "$VIDEOCORESRC_DIR" ] ; then
465 echo "error: '${VIDEOCORESRC_DIR}' specified directory not found (VIDEOCORESRC_DIR)!"
474 echo "error: '${VIDEOCORESRC_DIR}' specified directory not found (VIDEOCORESRC_DIR)!"
466 exit 1
475 exit 1
467 fi
476 fi
468
477
469 # Check if specified FBTURBOSRC_DIR directory exists
478 # Check if specified FBTURBOSRC_DIR directory exists
470 if [ -n "$FBTURBOSRC_DIR" ] && [ ! -d "$FBTURBOSRC_DIR" ] ; then
479 if [ -n "$FBTURBOSRC_DIR" ] && [ ! -d "$FBTURBOSRC_DIR" ] ; then
471 echo "error: '${FBTURBOSRC_DIR}' specified directory not found (FBTURBOSRC_DIR)!"
480 echo "error: '${FBTURBOSRC_DIR}' specified directory not found (FBTURBOSRC_DIR)!"
472 exit 1
481 exit 1
473 fi
482 fi
474
483
475 # Check if specified FBTURBOSRC_DIR directory exists
484 # Check if specified NEXMON_DIR directory exists
476 if [ -n "$NEXMON_DIR" ] && [ ! -d "$NEXMON_DIR" ] ; then
485 if [ -n "$NEXMON_DIR" ] && [ ! -d "$NEXMON_DIR" ] ; then
477 echo "error: '${NEXMON_DIR}' specified directory not found (NEXMON_DIR)!"
486 echo "error: '${NEXMON_DIR}' specified directory not found (NEXMON_DIR)!"
478 exit 1
487 exit 1
479 fi
488 fi
480
489
481 # Check if specified CHROOT_SCRIPTS directory exists
490 # Check if specified CHROOT_SCRIPTS directory exists
482 if [ -n "$CHROOT_SCRIPTS" ] && [ ! -d "$CHROOT_SCRIPTS" ] ; then
491 if [ -n "$CHROOT_SCRIPTS" ] && [ ! -d "$CHROOT_SCRIPTS" ] ; then
483 echo "error: ${CHROOT_SCRIPTS} specified directory not found (CHROOT_SCRIPTS)!"
492 echo "error: ${CHROOT_SCRIPTS} specified directory not found (CHROOT_SCRIPTS)!"
484 exit 1
493 exit 1
485 fi
494 fi
486
495
487 # Check if specified device mapping already exists (will be used by cryptsetup)
496 # Check if specified device mapping already exists (will be used by cryptsetup)
488 if [ -r "/dev/mapping/${CRYPTFS_MAPPING}" ] ; then
497 if [ -r "/dev/mapping/${CRYPTFS_MAPPING}" ] ; then
489 echo "error: mapping /dev/mapping/${CRYPTFS_MAPPING} already exists, not proceeding"
498 echo "error: mapping /dev/mapping/${CRYPTFS_MAPPING} already exists, not proceeding"
490 exit 1
499 exit 1
491 fi
500 fi
492
501
493 # Don't clobber an old build
502 # Don't clobber an old build
494 if [ -e "$BUILDDIR" ] ; then
503 if [ -e "$BUILDDIR" ] ; then
495 echo "error: directory ${BUILDDIR} already exists, not proceeding"
504 echo "error: directory ${BUILDDIR} already exists, not proceeding"
496 exit 1
505 exit 1
497 fi
506 fi
498
507
499 # Setup chroot directory
508 # Setup chroot directory
500 mkdir -p "${R}"
509 mkdir -p "${R}"
501
510
502 # Check if build directory has enough of free disk space >512MB
511 # Check if build directory has enough of free disk space >512MB
503 if [ "$(df --output=avail "${BUILDDIR}" | sed "1d")" -le "524288" ] ; then
512 if [ "$(df --output=avail "${BUILDDIR}" | sed "1d")" -le "524288" ] ; then
504 echo "error: ${BUILDDIR} not enough space left to generate the output image!"
513 echo "error: ${BUILDDIR} not enough space left to generate the output image!"
505 exit 1
514 exit 1
506 fi
515 fi
507
516
508 set -x
517 set -x
509
518
510 # Call "cleanup" function on various signals and errors
519 # Call "cleanup" function on various signals and errors
511 trap cleanup 0 1 2 3 6
520 trap cleanup 0 1 2 3 6
512
521
513 # Add required packages for the minbase installation
522 # Add required packages for the minbase installation
514 if [ "$ENABLE_MINBASE" = true ] ; then
523 if [ "$ENABLE_MINBASE" = true ] ; then
515 APT_INCLUDES="${APT_INCLUDES},vim-tiny,netbase,net-tools,ifupdown"
524 APT_INCLUDES="${APT_INCLUDES},vim-tiny,netbase,net-tools,ifupdown"
516 fi
525 fi
517
526
518 # Add parted package, required to get partprobe utility
527 # Add parted package, required to get partprobe utility
519 if [ "$EXPANDROOT" = true ] ; then
528 if [ "$EXPANDROOT" = true ] ; then
520 APT_INCLUDES="${APT_INCLUDES},parted"
529 APT_INCLUDES="${APT_INCLUDES},parted"
521 fi
530 fi
522
531
523 # Add dbus package, recommended if using systemd
532 # Add dbus package, recommended if using systemd
524 if [ "$ENABLE_DBUS" = true ] ; then
533 if [ "$ENABLE_DBUS" = true ] ; then
525 APT_INCLUDES="${APT_INCLUDES},dbus"
534 APT_INCLUDES="${APT_INCLUDES},dbus"
526 fi
535 fi
527
536
528 # Add iptables IPv4/IPv6 package
537 # Add iptables IPv4/IPv6 package
529 if [ "$ENABLE_IPTABLES" = true ] ; then
538 if [ "$ENABLE_IPTABLES" = true ] ; then
530 APT_INCLUDES="${APT_INCLUDES},iptables,iptables-persistent"
539 APT_INCLUDES="${APT_INCLUDES},iptables,iptables-persistent"
531 fi
540 fi
532
541
533 # Add openssh server package
542 # Add openssh server package
534 if [ "$ENABLE_SSHD" = true ] ; then
543 if [ "$ENABLE_SSHD" = true ] ; then
535 APT_INCLUDES="${APT_INCLUDES},openssh-server"
544 APT_INCLUDES="${APT_INCLUDES},openssh-server"
536 fi
545 fi
537
546
538 # Add alsa-utils package
547 # Add alsa-utils package
539 if [ "$ENABLE_SOUND" = true ] ; then
548 if [ "$ENABLE_SOUND" = true ] ; then
540 APT_INCLUDES="${APT_INCLUDES},alsa-utils"
549 APT_INCLUDES="${APT_INCLUDES},alsa-utils"
541 fi
550 fi
542
551
543 # Add rng-tools package
552 # Add rng-tools package
544 if [ "$ENABLE_HWRANDOM" = true ] ; then
553 if [ "$ENABLE_HWRANDOM" = true ] ; then
545 APT_INCLUDES="${APT_INCLUDES},rng-tools"
554 APT_INCLUDES="${APT_INCLUDES},rng-tools"
546 fi
555 fi
547
556
548 # Add fbturbo video driver
557 # Add fbturbo video driver
549 if [ "$ENABLE_FBTURBO" = true ] ; then
558 if [ "$ENABLE_FBTURBO" = true ] ; then
550 # Enable xorg package dependencies
559 # Enable xorg package dependencies
551 ENABLE_XORG=true
560 ENABLE_XORG=true
552 fi
561 fi
553
562
554 # Add user defined window manager package
563 # Add user defined window manager package
555 if [ -n "$ENABLE_WM" ] ; then
564 if [ -n "$ENABLE_WM" ] ; then
556 APT_INCLUDES="${APT_INCLUDES},${ENABLE_WM}"
565 APT_INCLUDES="${APT_INCLUDES},${ENABLE_WM}"
557
566
558 # Enable xorg package dependencies
567 # Enable xorg package dependencies
559 ENABLE_XORG=true
568 ENABLE_XORG=true
560 fi
569 fi
561
570
562 # Add xorg package
571 # Add xorg package
563 if [ "$ENABLE_XORG" = true ] ; then
572 if [ "$ENABLE_XORG" = true ] ; then
564 APT_INCLUDES="${APT_INCLUDES},xorg,dbus-x11"
573 APT_INCLUDES="${APT_INCLUDES},xorg,dbus-x11"
565 fi
574 fi
566
575
567 # Replace selected packages with smaller clones
576 # Replace selected packages with smaller clones
568 if [ "$ENABLE_REDUCE" = true ] ; then
577 if [ "$ENABLE_REDUCE" = true ] ; then
569 # Add levee package instead of vim-tiny
578 # Add levee package instead of vim-tiny
570 if [ "$REDUCE_VIM" = true ] ; then
579 if [ "$REDUCE_VIM" = true ] ; then
571 APT_INCLUDES="$(echo ${APT_INCLUDES} | sed "s/vim-tiny/levee/")"
580 APT_INCLUDES="$(echo ${APT_INCLUDES} | sed "s/vim-tiny/levee/")"
572 fi
581 fi
573
582
574 # Add dropbear package instead of openssh-server
583 # Add dropbear package instead of openssh-server
575 if [ "$REDUCE_SSHD" = true ] ; then
584 if [ "$REDUCE_SSHD" = true ] ; then
576 APT_INCLUDES="$(echo "${APT_INCLUDES}" | sed "s/openssh-server/dropbear/")"
585 APT_INCLUDES="$(echo "${APT_INCLUDES}" | sed "s/openssh-server/dropbear/")"
577 fi
586 fi
578 fi
587 fi
579
588
580 # Configure systemd-sysv exclude to make halt/reboot/shutdown scripts available
589 # Configure systemd-sysv exclude to make halt/reboot/shutdown scripts available
581 if [ "$ENABLE_SYSVINIT" = false ] ; then
590 if [ "$ENABLE_SYSVINIT" = false ] ; then
582 APT_EXCLUDES="--exclude=${APT_EXCLUDES},init,systemd-sysv"
591 APT_EXCLUDES="--exclude=${APT_EXCLUDES},init,systemd-sysv"
583 fi
592 fi
584
593
585 # Configure kernel sources if no KERNELSRC_DIR
594 # Configure kernel sources if no KERNELSRC_DIR
586 if [ "$BUILD_KERNEL" = true ] && [ -z "$KERNELSRC_DIR" ] ; then
595 if [ "$BUILD_KERNEL" = true ] && [ -z "$KERNELSRC_DIR" ] ; then
587 KERNELSRC_CONFIG=true
596 KERNELSRC_CONFIG=true
588 fi
597 fi
589
598
590 # Configure reduced kernel
599 # Configure reduced kernel
591 if [ "$KERNEL_REDUCE" = true ] ; then
600 if [ "$KERNEL_REDUCE" = true ] ; then
592 KERNELSRC_CONFIG=false
601 KERNELSRC_CONFIG=false
593 fi
602 fi
594
603
595 # Configure qemu compatible kernel
604 # Configure qemu compatible kernel
596 if [ "$ENABLE_QEMU" = true ] ; then
605 if [ "$ENABLE_QEMU" = true ] ; then
597 DTB_FILE=vexpress-v2p-ca15_a7.dtb
606 DTB_FILE=vexpress-v2p-ca15_a7.dtb
598 UBOOT_CONFIG=vexpress_ca15_tc2_defconfig
607 UBOOT_CONFIG=vexpress_ca15_tc2_defconfig
599 KERNEL_DEFCONFIG="vexpress_defconfig"
608 KERNEL_DEFCONFIG="vexpress_defconfig"
600 if [ "$KERNEL_MENUCONFIG" = false ] ; then
609 if [ "$KERNEL_MENUCONFIG" = false ] ; then
601 KERNEL_OLDDEFCONFIG=true
610 KERNEL_OLDDEFCONFIG=true
602 fi
611 fi
603 fi
612 fi
604
613
605 # Execute bootstrap scripts
614 # Execute bootstrap scripts
606 for SCRIPT in bootstrap.d/*.sh; do
615 for SCRIPT in bootstrap.d/*.sh; do
607 head -n 3 "$SCRIPT"
616 head -n 3 "$SCRIPT"
608 . "$SCRIPT"
617 . "$SCRIPT"
609 done
618 done
610
619
611 ## Execute custom bootstrap scripts
620 ## Execute custom bootstrap scripts
612 if [ -d "custom.d" ] ; then
621 if [ -d "custom.d" ] ; then
613 for SCRIPT in custom.d/*.sh; do
622 for SCRIPT in custom.d/*.sh; do
614 . "$SCRIPT"
623 . "$SCRIPT"
615 done
624 done
616 fi
625 fi
617
626
618 # Execute custom scripts inside the chroot
627 # Execute custom scripts inside the chroot
619 if [ -n "$CHROOT_SCRIPTS" ] && [ -d "$CHROOT_SCRIPTS" ] ; then
628 if [ -n "$CHROOT_SCRIPTS" ] && [ -d "$CHROOT_SCRIPTS" ] ; then
620 cp -r "${CHROOT_SCRIPTS}" "${R}/chroot_scripts"
629 cp -r "${CHROOT_SCRIPTS}" "${R}/chroot_scripts"
621 chroot_exec /bin/bash -x <<'EOF'
630 chroot_exec /bin/bash -x <<'EOF'
622 for SCRIPT in /chroot_scripts/* ; do
631 for SCRIPT in /chroot_scripts/* ; do
623 if [ -f $SCRIPT -a -x $SCRIPT ] ; then
632 if [ -f $SCRIPT -a -x $SCRIPT ] ; then
624 $SCRIPT
633 $SCRIPT
625 fi
634 fi
626 done
635 done
627 EOF
636 EOF
628 rm -rf "${R}/chroot_scripts"
637 rm -rf "${R}/chroot_scripts"
629 fi
638 fi
630
639
631 # Remove c/c++ build environment from the chroot
640 # Remove c/c++ build environment from the chroot
632 chroot_remove_cc
641 chroot_remove_cc
633
642
634 # Generate required machine-id
643 # Generate required machine-id
635 MACHINE_ID=$(dbus-uuidgen)
644 MACHINE_ID=$(dbus-uuidgen)
636 echo -n "${MACHINE_ID}" > "${R}/var/lib/dbus/machine-id"
645 echo -n "${MACHINE_ID}" > "${R}/var/lib/dbus/machine-id"
637 echo -n "${MACHINE_ID}" > "${ETC_DIR}/machine-id"
646 echo -n "${MACHINE_ID}" > "${ETC_DIR}/machine-id"
638
647
639 # APT Cleanup
648 # APT Cleanup
640 chroot_exec apt-get -y clean
649 chroot_exec apt-get -y clean
641 chroot_exec apt-get -y autoclean
650 chroot_exec apt-get -y autoclean
642 chroot_exec apt-get -y autoremove
651 chroot_exec apt-get -y autoremove
643
652
644 # Unmount mounted filesystems
653 # Unmount mounted filesystems
645 umount -l "${R}/proc"
654 umount -l "${R}/proc"
646 umount -l "${R}/sys"
655 umount -l "${R}/sys"
647
656
648 # Clean up directories
657 # Clean up directories
649 rm -rf "${R}/run/*"
658 rm -rf "${R}/run/*"
650 rm -rf "${R}/tmp/*"
659 rm -rf "${R}/tmp/*"
651
660
652 # Clean up files
661 # Clean up files
653 rm -f "${ETC_DIR}/ssh/ssh_host_*"
662 rm -f "${ETC_DIR}/ssh/ssh_host_*"
654 rm -f "${ETC_DIR}/dropbear/dropbear_*"
663 rm -f "${ETC_DIR}/dropbear/dropbear_*"
655 rm -f "${ETC_DIR}/apt/sources.list.save"
664 rm -f "${ETC_DIR}/apt/sources.list.save"
656 rm -f "${ETC_DIR}/resolvconf/resolv.conf.d/original"
665 rm -f "${ETC_DIR}/resolvconf/resolv.conf.d/original"
657 rm -f "${ETC_DIR}/*-"
666 rm -f "${ETC_DIR}/*-"
658 rm -f "${ETC_DIR}/apt/apt.conf.d/10proxy"
667 rm -f "${ETC_DIR}/apt/apt.conf.d/10proxy"
659 rm -f "${ETC_DIR}/resolv.conf"
668 rm -f "${ETC_DIR}/resolv.conf"
660 rm -f "${R}/root/.bash_history"
669 rm -f "${R}/root/.bash_history"
661 rm -f "${R}/var/lib/urandom/random-seed"
670 rm -f "${R}/var/lib/urandom/random-seed"
662 rm -f "${R}/initrd.img"
671 rm -f "${R}/initrd.img"
663 rm -f "${R}/vmlinuz"
672 rm -f "${R}/vmlinuz"
664 rm -f "${R}${QEMU_BINARY}"
673 rm -f "${R}${QEMU_BINARY}"
665
674
666 if [ "$ENABLE_QEMU" = true ] ; then
675 if [ "$ENABLE_QEMU" = true ] ; then
667 # Setup QEMU directory
676 # Setup QEMU directory
668 mkdir "${BASEDIR}/qemu"
677 mkdir "${BASEDIR}/qemu"
669
678
670 # Copy kernel image to QEMU directory
679 # Copy kernel image to QEMU directory
671 install_readonly "${BOOT_DIR}/${KERNEL_IMAGE}" "${BASEDIR}/qemu/${KERNEL_IMAGE}"
680 install_readonly "${BOOT_DIR}/${KERNEL_IMAGE}" "${BASEDIR}/qemu/${KERNEL_IMAGE}"
672
681
673 # Copy kernel config to QEMU directory
682 # Copy kernel config to QEMU directory
674 install_readonly "${R}/boot/config-${KERNEL_VERSION}" "${BASEDIR}/qemu/config-${KERNEL_VERSION}"
683 install_readonly "${R}/boot/config-${KERNEL_VERSION}" "${BASEDIR}/qemu/config-${KERNEL_VERSION}"
675
684
676 # Copy kernel dtbs to QEMU directory
685 # Copy kernel dtbs to QEMU directory
677 for dtb in "${BOOT_DIR}/"*.dtb ; do
686 for dtb in "${BOOT_DIR}/"*.dtb ; do
678 if [ -f "${dtb}" ] ; then
687 if [ -f "${dtb}" ] ; then
679 install_readonly "${dtb}" "${BASEDIR}/qemu/"
688 install_readonly "${dtb}" "${BASEDIR}/qemu/"
680 fi
689 fi
681 done
690 done
682
691
683 # Copy kernel overlays to QEMU directory
692 # Copy kernel overlays to QEMU directory
684 if [ -d "${BOOT_DIR}/overlays" ] ; then
693 if [ -d "${BOOT_DIR}/overlays" ] ; then
685 # Setup overlays dtbs directory
694 # Setup overlays dtbs directory
686 mkdir "${BASEDIR}/qemu/overlays"
695 mkdir "${BASEDIR}/qemu/overlays"
687
696
688 for dtb in "${BOOT_DIR}/overlays/"*.dtb ; do
697 for dtb in "${BOOT_DIR}/overlays/"*.dtb ; do
689 if [ -f "${dtb}" ] ; then
698 if [ -f "${dtb}" ] ; then
690 install_readonly "${dtb}" "${BASEDIR}/qemu/overlays/"
699 install_readonly "${dtb}" "${BASEDIR}/qemu/overlays/"
691 fi
700 fi
692 done
701 done
693 fi
702 fi
694
703
695 # Copy u-boot files to QEMU directory
704 # Copy u-boot files to QEMU directory
696 if [ "$ENABLE_UBOOT" = true ] ; then
705 if [ "$ENABLE_UBOOT" = true ] ; then
697 if [ -f "${BOOT_DIR}/u-boot.bin" ] ; then
706 if [ -f "${BOOT_DIR}/u-boot.bin" ] ; then
698 install_readonly "${BOOT_DIR}/u-boot.bin" "${BASEDIR}/qemu/u-boot.bin"
707 install_readonly "${BOOT_DIR}/u-boot.bin" "${BASEDIR}/qemu/u-boot.bin"
699 fi
708 fi
700 if [ -f "${BOOT_DIR}/uboot.mkimage" ] ; then
709 if [ -f "${BOOT_DIR}/uboot.mkimage" ] ; then
701 install_readonly "${BOOT_DIR}/uboot.mkimage" "${BASEDIR}/qemu/uboot.mkimage"
710 install_readonly "${BOOT_DIR}/uboot.mkimage" "${BASEDIR}/qemu/uboot.mkimage"
702 fi
711 fi
703 if [ -f "${BOOT_DIR}/boot.scr" ] ; then
712 if [ -f "${BOOT_DIR}/boot.scr" ] ; then
704 install_readonly "${BOOT_DIR}/boot.scr" "${BASEDIR}/qemu/boot.scr"
713 install_readonly "${BOOT_DIR}/boot.scr" "${BASEDIR}/qemu/boot.scr"
705 fi
714 fi
706 fi
715 fi
707
716
708 # Copy initramfs to QEMU directory
717 # Copy initramfs to QEMU directory
709 if [ -f "${BOOT_DIR}/initramfs-${KERNEL_VERSION}" ] ; then
718 if [ -f "${BOOT_DIR}/initramfs-${KERNEL_VERSION}" ] ; then
710 install_readonly "${BOOT_DIR}/initramfs-${KERNEL_VERSION}" "${BASEDIR}/qemu/initramfs-${KERNEL_VERSION}"
719 install_readonly "${BOOT_DIR}/initramfs-${KERNEL_VERSION}" "${BASEDIR}/qemu/initramfs-${KERNEL_VERSION}"
711 fi
720 fi
712 fi
721 fi
713
722
714 # Calculate size of the chroot directory in KB
723 # Calculate size of the chroot directory in KB
715 CHROOT_SIZE=$(expr "$(du -s "${R}" | awk '{ print $1 }')")
724 CHROOT_SIZE=$(expr "$(du -s "${R}" | awk '{ print $1 }')")
716
725
717 # Calculate the amount of needed 512 Byte sectors
726 # Calculate the amount of needed 512 Byte sectors
718 TABLE_SECTORS=$(expr 1 \* 1024 \* 1024 \/ 512)
727 TABLE_SECTORS=$(expr 1 \* 1024 \* 1024 \/ 512)
719 FRMW_SECTORS=$(expr 64 \* 1024 \* 1024 \/ 512)
728 FRMW_SECTORS=$(expr 64 \* 1024 \* 1024 \/ 512)
720 ROOT_OFFSET=$(expr "${TABLE_SECTORS}" + "${FRMW_SECTORS}")
729 ROOT_OFFSET=$(expr "${TABLE_SECTORS}" + "${FRMW_SECTORS}")
721
730
722 # The root partition is EXT4
731 # The root partition is EXT4
723 # This means more space than the actual used space of the chroot is used.
732 # This means more space than the actual used space of the chroot is used.
724 # As overhead for journaling and reserved blocks 35% are added.
733 # As overhead for journaling and reserved blocks 35% are added.
725 ROOT_SECTORS=$(expr "$(expr "${CHROOT_SIZE}" + "${CHROOT_SIZE}" \/ 100 \* 35)" \* 1024 \/ 512)
734 ROOT_SECTORS=$(expr "$(expr "${CHROOT_SIZE}" + "${CHROOT_SIZE}" \/ 100 \* 35)" \* 1024 \/ 512)
726
735
727 # Calculate required image size in 512 Byte sectors
736 # Calculate required image size in 512 Byte sectors
728 IMAGE_SECTORS=$(expr "${TABLE_SECTORS}" + "${FRMW_SECTORS}" + "${ROOT_SECTORS}")
737 IMAGE_SECTORS=$(expr "${TABLE_SECTORS}" + "${FRMW_SECTORS}" + "${ROOT_SECTORS}")
729
738
730 # Prepare image file
739 # Prepare image file
731 if [ "$ENABLE_SPLITFS" = true ] ; then
740 if [ "$ENABLE_SPLITFS" = true ] ; then
732 dd if=/dev/zero of="$IMAGE_NAME-frmw.img" bs=512 count="${TABLE_SECTORS}"
741 dd if=/dev/zero of="$IMAGE_NAME-frmw.img" bs=512 count="${TABLE_SECTORS}"
733 dd if=/dev/zero of="$IMAGE_NAME-frmw.img" bs=512 count=0 seek="${FRMW_SECTORS}"
742 dd if=/dev/zero of="$IMAGE_NAME-frmw.img" bs=512 count=0 seek="${FRMW_SECTORS}"
734 dd if=/dev/zero of="$IMAGE_NAME-root.img" bs=512 count="${TABLE_SECTORS}"
743 dd if=/dev/zero of="$IMAGE_NAME-root.img" bs=512 count="${TABLE_SECTORS}"
735 dd if=/dev/zero of="$IMAGE_NAME-root.img" bs=512 count=0 seek="${ROOT_SECTORS}"
744 dd if=/dev/zero of="$IMAGE_NAME-root.img" bs=512 count=0 seek="${ROOT_SECTORS}"
736
745
737 # Write firmware/boot partition tables
746 # Write firmware/boot partition tables
738 sfdisk -q -L -uS -f "$IMAGE_NAME-frmw.img" 2> /dev/null <<EOM
747 sfdisk -q -L -uS -f "$IMAGE_NAME-frmw.img" 2> /dev/null <<EOM
739 ${TABLE_SECTORS},${FRMW_SECTORS},c,*
748 ${TABLE_SECTORS},${FRMW_SECTORS},c,*
740 EOM
749 EOM
741
750
742 # Write root partition table
751 # Write root partition table
743 sfdisk -q -L -uS -f "$IMAGE_NAME-root.img" 2> /dev/null <<EOM
752 sfdisk -q -L -uS -f "$IMAGE_NAME-root.img" 2> /dev/null <<EOM
744 ${TABLE_SECTORS},${ROOT_SECTORS},83
753 ${TABLE_SECTORS},${ROOT_SECTORS},83
745 EOM
754 EOM
746
755
747 # Setup temporary loop devices
756 # Setup temporary loop devices
748 FRMW_LOOP="$(losetup -o 1M --sizelimit 64M -f --show "$IMAGE_NAME"-frmw.img)"
757 FRMW_LOOP="$(losetup -o 1M --sizelimit 64M -f --show "$IMAGE_NAME"-frmw.img)"
749 ROOT_LOOP="$(losetup -o 1M -f --show "$IMAGE_NAME"-root.img)"
758 ROOT_LOOP="$(losetup -o 1M -f --show "$IMAGE_NAME"-root.img)"
750 else # ENABLE_SPLITFS=false
759 else # ENABLE_SPLITFS=false
751 dd if=/dev/zero of="$IMAGE_NAME.img" bs=512 count="${TABLE_SECTORS}"
760 dd if=/dev/zero of="$IMAGE_NAME.img" bs=512 count="${TABLE_SECTORS}"
752 dd if=/dev/zero of="$IMAGE_NAME.img" bs=512 count=0 seek="${IMAGE_SECTORS}"
761 dd if=/dev/zero of="$IMAGE_NAME.img" bs=512 count=0 seek="${IMAGE_SECTORS}"
753
762
754 # Write partition table
763 # Write partition table
755 sfdisk -q -L -uS -f "$IMAGE_NAME.img" 2> /dev/null <<EOM
764 sfdisk -q -L -uS -f "$IMAGE_NAME.img" 2> /dev/null <<EOM
756 ${TABLE_SECTORS},${FRMW_SECTORS},c,*
765 ${TABLE_SECTORS},${FRMW_SECTORS},c,*
757 ${ROOT_OFFSET},${ROOT_SECTORS},83
766 ${ROOT_OFFSET},${ROOT_SECTORS},83
758 EOM
767 EOM
759
768
760 # Setup temporary loop devices
769 # Setup temporary loop devices
761 FRMW_LOOP="$(losetup -o 1M --sizelimit 64M -f --show "$IMAGE_NAME".img)"
770 FRMW_LOOP="$(losetup -o 1M --sizelimit 64M -f --show "$IMAGE_NAME".img)"
762 ROOT_LOOP="$(losetup -o 65M -f --show "$IMAGE_NAME".img)"
771 ROOT_LOOP="$(losetup -o 65M -f --show "$IMAGE_NAME".img)"
763 fi
772 fi
764
773
765 if [ "$ENABLE_CRYPTFS" = true ] ; then
774 if [ "$ENABLE_CRYPTFS" = true ] ; then
766 # Create dummy ext4 fs
775 # Create dummy ext4 fs
767 mkfs.ext4 "$ROOT_LOOP"
776 mkfs.ext4 "$ROOT_LOOP"
768
777
769 # Setup password keyfile
778 # Setup password keyfile
770 touch .password
779 touch .password
771 chmod 600 .password
780 chmod 600 .password
772 echo -n ${CRYPTFS_PASSWORD} > .password
781 echo -n ${CRYPTFS_PASSWORD} > .password
773
782
774 # Initialize encrypted partition
783 # Initialize encrypted partition
775 echo "YES" | cryptsetup luksFormat "${ROOT_LOOP}" -c "${CRYPTFS_CIPHER}" -s "${CRYPTFS_XTSKEYSIZE}" .password
784 echo "YES" | cryptsetup luksFormat "${ROOT_LOOP}" -c "${CRYPTFS_CIPHER}" -s "${CRYPTFS_XTSKEYSIZE}" .password
776
785
777 # Open encrypted partition and setup mapping
786 # Open encrypted partition and setup mapping
778 cryptsetup luksOpen "${ROOT_LOOP}" -d .password "${CRYPTFS_MAPPING}"
787 cryptsetup luksOpen "${ROOT_LOOP}" -d .password "${CRYPTFS_MAPPING}"
779
788
780 # Secure delete password keyfile
789 # Secure delete password keyfile
781 shred -zu .password
790 shred -zu .password
782
791
783 # Update temporary loop device
792 # Update temporary loop device
784 ROOT_LOOP="/dev/mapper/${CRYPTFS_MAPPING}"
793 ROOT_LOOP="/dev/mapper/${CRYPTFS_MAPPING}"
785
794
786 # Wipe encrypted partition (encryption cipher is used for randomness)
795 # Wipe encrypted partition (encryption cipher is used for randomness)
787 dd if=/dev/zero of="${ROOT_LOOP}" bs=512 count="$(blockdev --getsz "${ROOT_LOOP}")"
796 dd if=/dev/zero of="${ROOT_LOOP}" bs=512 count="$(blockdev --getsz "${ROOT_LOOP}")"
788 fi
797 fi
789
798
790 # Build filesystems
799 # Build filesystems
791 mkfs.vfat "$FRMW_LOOP"
800 mkfs.vfat "$FRMW_LOOP"
792 mkfs.ext4 "$ROOT_LOOP"
801 mkfs.ext4 "$ROOT_LOOP"
793
802
794 # Mount the temporary loop devices
803 # Mount the temporary loop devices
795 mkdir -p "$BUILDDIR/mount"
804 mkdir -p "$BUILDDIR/mount"
796 mount "$ROOT_LOOP" "$BUILDDIR/mount"
805 mount "$ROOT_LOOP" "$BUILDDIR/mount"
797
806
798 mkdir -p "$BUILDDIR/mount/boot/firmware"
807 mkdir -p "$BUILDDIR/mount/boot/firmware"
799 mount "$FRMW_LOOP" "$BUILDDIR/mount/boot/firmware"
808 mount "$FRMW_LOOP" "$BUILDDIR/mount/boot/firmware"
800
809
801 # Copy all files from the chroot to the loop device mount point directory
810 # Copy all files from the chroot to the loop device mount point directory
802 rsync -a "${R}/" "$BUILDDIR/mount/"
811 rsync -a "${R}/" "$BUILDDIR/mount/"
803
812
804 # Unmount all temporary loop devices and mount points
813 # Unmount all temporary loop devices and mount points
805 cleanup
814 cleanup
806
815
807 # Create block map file(s) of image(s)
816 # Create block map file(s) of image(s)
808 if [ "$ENABLE_SPLITFS" = true ] ; then
817 if [ "$ENABLE_SPLITFS" = true ] ; then
809 # Create block map files for "bmaptool"
818 # Create block map files for "bmaptool"
810 bmaptool create -o "$IMAGE_NAME-frmw.bmap" "$IMAGE_NAME-frmw.img"
819 bmaptool create -o "$IMAGE_NAME-frmw.bmap" "$IMAGE_NAME-frmw.img"
811 bmaptool create -o "$IMAGE_NAME-root.bmap" "$IMAGE_NAME-root.img"
820 bmaptool create -o "$IMAGE_NAME-root.bmap" "$IMAGE_NAME-root.img"
812
821
813 # Image was successfully created
822 # Image was successfully created
814 echo "$IMAGE_NAME-frmw.img ($(expr \( "${TABLE_SECTORS}" + "${FRMW_SECTORS}" \) \* 512 \/ 1024 \/ 1024)M)" ": successfully created"
823 echo "$IMAGE_NAME-frmw.img ($(expr \( "${TABLE_SECTORS}" + "${FRMW_SECTORS}" \) \* 512 \/ 1024 \/ 1024)M)" ": successfully created"
815 echo "$IMAGE_NAME-root.img ($(expr \( "${TABLE_SECTORS}" + "${ROOT_SECTORS}" \) \* 512 \/ 1024 \/ 1024)M)" ": successfully created"
824 echo "$IMAGE_NAME-root.img ($(expr \( "${TABLE_SECTORS}" + "${ROOT_SECTORS}" \) \* 512 \/ 1024 \/ 1024)M)" ": successfully created"
816 else
825 else
817 # Create block map file for "bmaptool"
826 # Create block map file for "bmaptool"
818 bmaptool create -o "$IMAGE_NAME.bmap" "$IMAGE_NAME.img"
827 bmaptool create -o "$IMAGE_NAME.bmap" "$IMAGE_NAME.img"
819
828
820 # Image was successfully created
829 # Image was successfully created
821 echo "$IMAGE_NAME.img ($(expr \( "${TABLE_SECTORS}" + "${FRMW_SECTORS}" + "${ROOT_SECTORS}" \) \* 512 \/ 1024 \/ 1024)M)" ": successfully created"
830 echo "$IMAGE_NAME.img ($(expr \( "${TABLE_SECTORS}" + "${FRMW_SECTORS}" + "${ROOT_SECTORS}" \) \* 512 \/ 1024 \/ 1024)M)" ": successfully created"
822
831
823 # Create qemu qcow2 image
832 # Create qemu qcow2 image
824 if [ "$ENABLE_QEMU" = true ] ; then
833 if [ "$ENABLE_QEMU" = true ] ; then
825 QEMU_IMAGE=${QEMU_IMAGE:=${BASEDIR}/qemu/${DATE}-${KERNEL_ARCH}-CURRENT-rpi${RPI_MODEL}-${RELEASE}-${RELEASE_ARCH}}
834 QEMU_IMAGE=${QEMU_IMAGE:=${BASEDIR}/qemu/${DATE}-${KERNEL_ARCH}-CURRENT-rpi${RPI_MODEL}-${RELEASE}-${RELEASE_ARCH}}
826 QEMU_SIZE=16G
835 QEMU_SIZE=16G
827
836
828 qemu-img convert -f raw -O qcow2 "$IMAGE_NAME".img "$QEMU_IMAGE".qcow2
837 qemu-img convert -f raw -O qcow2 "$IMAGE_NAME".img "$QEMU_IMAGE".qcow2
829 qemu-img resize "$QEMU_IMAGE".qcow2 $QEMU_SIZE
838 qemu-img resize "$QEMU_IMAGE".qcow2 $QEMU_SIZE
830
839
831 echo "$QEMU_IMAGE.qcow2 ($QEMU_SIZE)" ": successfully created"
840 echo "$QEMU_IMAGE.qcow2 ($QEMU_SIZE)" ": successfully created"
832 fi
841 fi
833 fi
842 fi
General Comments 0
Vous devez vous connecter pour laisser un commentaire. Se connecter maintenant