| @@ -1,310 +1,314 | |||
|
|
1 | 1 | # |
|
|
2 | 2 | # Build and Setup RPi2/3 Kernel |
|
|
3 | 3 | # |
|
|
4 | 4 | |
|
|
5 | 5 | # Load utility functions |
|
|
6 | 6 | . ./functions.sh |
|
|
7 | 7 | |
|
|
8 | 8 | # Fetch and build latest raspberry kernel |
|
|
9 | 9 | if [ "$BUILD_KERNEL" = true ] ; then |
|
|
10 | 10 | # Setup source directory |
|
|
11 | 11 | mkdir -p "${R}/usr/src" |
|
|
12 | 12 | |
|
|
13 | 13 | # Copy existing kernel sources into chroot directory |
|
|
14 | 14 | if [ -n "$KERNELSRC_DIR" ] && [ -d "$KERNELSRC_DIR" ] ; then |
|
|
15 | 15 | # Copy kernel sources |
|
|
16 | 16 | cp -r "${KERNELSRC_DIR}" "${R}/usr/src" |
|
|
17 | 17 | |
|
|
18 | 18 | # Clean the kernel sources |
|
|
19 | 19 | if [ "$KERNELSRC_CLEAN" = true ] && [ "$KERNELSRC_PREBUILT" = false ] ; then |
|
|
20 | 20 | make -C "${KERNEL_DIR}" ARCH="${KERNEL_ARCH}" CROSS_COMPILE="${CROSS_COMPILE}" mrproper |
|
|
21 | 21 | fi |
|
|
22 | 22 | else # KERNELSRC_DIR="" |
|
|
23 | 23 | # Fetch current raspberrypi kernel sources |
|
|
24 | 24 | git -C "${R}/usr/src" clone --depth=1 "${KERNEL_URL}" |
|
|
25 | 25 | fi |
|
|
26 | 26 | |
|
|
27 | 27 | # Calculate optimal number of kernel building threads |
|
|
28 | 28 | if [ "$KERNEL_THREADS" = "1" ] && [ -r /proc/cpuinfo ] ; then |
|
|
29 | 29 | KERNEL_THREADS=$(grep -c processor /proc/cpuinfo) |
|
|
30 | 30 | fi |
|
|
31 | 31 | |
|
|
32 | 32 | # Configure and build kernel |
|
|
33 | 33 | if [ "$KERNELSRC_PREBUILT" = false ] ; then |
|
|
34 | 34 | # Remove device, network and filesystem drivers from kernel configuration |
|
|
35 | 35 | if [ "$KERNEL_REDUCE" = true ] ; then |
|
|
36 | 36 | make -C "${KERNEL_DIR}" ARCH="${KERNEL_ARCH}" CROSS_COMPILE="${CROSS_COMPILE}" "${KERNEL_DEFCONFIG}" |
|
|
37 | 37 | sed -i\ |
|
|
38 | 38 | -e "s/\(^CONFIG_SND.*\=\).*/\1n/"\ |
|
|
39 | 39 | -e "s/\(^CONFIG_SOUND.*\=\).*/\1n/"\ |
|
|
40 | 40 | -e "s/\(^CONFIG_AC97.*\=\).*/\1n/"\ |
|
|
41 | 41 | -e "s/\(^CONFIG_VIDEO_.*\=\).*/\1n/"\ |
|
|
42 | 42 | -e "s/\(^CONFIG_MEDIA_TUNER.*\=\).*/\1n/"\ |
|
|
43 | 43 | -e "s/\(^CONFIG_DVB.*\=\)[ym]/\1n/"\ |
|
|
44 | 44 | -e "s/\(^CONFIG_REISERFS.*\=\).*/\1n/"\ |
|
|
45 | 45 | -e "s/\(^CONFIG_JFS.*\=\).*/\1n/"\ |
|
|
46 | 46 | -e "s/\(^CONFIG_XFS.*\=\).*/\1n/"\ |
|
|
47 | 47 | -e "s/\(^CONFIG_GFS2.*\=\).*/\1n/"\ |
|
|
48 | 48 | -e "s/\(^CONFIG_OCFS2.*\=\).*/\1n/"\ |
|
|
49 | 49 | -e "s/\(^CONFIG_BTRFS.*\=\).*/\1n/"\ |
|
|
50 | 50 | -e "s/\(^CONFIG_HFS.*\=\).*/\1n/"\ |
|
|
51 | 51 | -e "s/\(^CONFIG_JFFS2.*\=\)[ym]/\1n/"\ |
|
|
52 | 52 | -e "s/\(^CONFIG_UBIFS.*\=\).*/\1n/"\ |
|
|
53 | 53 | -e "s/\(^CONFIG_SQUASHFS.*\=\)[ym]/\1n/"\ |
|
|
54 | 54 | -e "s/\(^CONFIG_W1.*\=\)[ym]/\1n/"\ |
|
|
55 | 55 | -e "s/\(^CONFIG_HAMRADIO.*\=\).*/\1n/"\ |
|
|
56 | 56 | -e "s/\(^CONFIG_CAN.*\=\).*/\1n/"\ |
|
|
57 | 57 | -e "s/\(^CONFIG_IRDA.*\=\).*/\1n/"\ |
|
|
58 | 58 | -e "s/\(^CONFIG_BT_.*\=\).*/\1n/"\ |
|
|
59 | 59 | -e "s/\(^CONFIG_WIMAX.*\=\)[ym]/\1n/"\ |
|
|
60 | 60 | -e "s/\(^CONFIG_6LOWPAN.*\=\).*/\1n/"\ |
|
|
61 | 61 | -e "s/\(^CONFIG_IEEE802154.*\=\).*/\1n/"\ |
|
|
62 | 62 | -e "s/\(^CONFIG_NFC.*\=\).*/\1n/"\ |
|
|
63 | 63 | -e "s/\(^CONFIG_FB_TFT=.*\=\).*/\1n/"\ |
|
|
64 | 64 | -e "s/\(^CONFIG_TOUCHSCREEN.*\=\).*/\1n/"\ |
|
|
65 | 65 | -e "s/\(^CONFIG_USB_GSPCA_.*\=\).*/\1n/"\ |
|
|
66 | 66 | -e "s/\(^CONFIG_DRM.*\=\).*/\1n/"\ |
|
|
67 | 67 | "${KERNEL_DIR}/.config" |
|
|
68 | 68 | fi |
|
|
69 | 69 | |
|
|
70 | 70 | if [ "$KERNELSRC_CONFIG" = true ] ; then |
|
|
71 | 71 | # Load default raspberry kernel configuration |
|
|
72 | 72 | make -C "${KERNEL_DIR}" ARCH="${KERNEL_ARCH}" CROSS_COMPILE="${CROSS_COMPILE}" "${KERNEL_DEFCONFIG}" |
|
|
73 | 73 | |
|
|
74 | 74 | if [ ! -z "$KERNELSRC_USRCONFIG" ] ; then |
|
|
75 | 75 | cp $KERNELSRC_USRCONFIG ${KERNEL_DIR}/.config |
|
|
76 | 76 | fi |
|
|
77 | 77 | |
|
|
78 | 78 | # Start menu-driven kernel configuration (interactive) |
|
|
79 | 79 | if [ "$KERNEL_MENUCONFIG" = true ] ; then |
|
|
80 | 80 | make -C "${KERNEL_DIR}" ARCH="${KERNEL_ARCH}" CROSS_COMPILE="${CROSS_COMPILE}" menuconfig |
|
|
81 | 81 | fi |
|
|
82 | 82 | fi |
|
|
83 | 83 | |
|
|
84 | 84 | # Cross compile kernel and modules |
|
|
85 | 85 | make -C "${KERNEL_DIR}" -j${KERNEL_THREADS} ARCH="${KERNEL_ARCH}" CROSS_COMPILE="${CROSS_COMPILE}" zImage modules dtbs |
|
|
86 | 86 | fi |
|
|
87 | 87 | |
|
|
88 | 88 | # Check if kernel compilation was successful |
|
|
89 | 89 | if [ ! -r "${KERNEL_DIR}/arch/${KERNEL_ARCH}/boot/zImage" ] ; then |
|
|
90 | 90 | echo "error: kernel compilation failed! (zImage not found)" |
|
|
91 | 91 | cleanup |
|
|
92 | 92 | exit 1 |
|
|
93 | 93 | fi |
|
|
94 | 94 | |
|
|
95 | 95 | # Install kernel modules |
|
|
96 | 96 | if [ "$ENABLE_REDUCE" = true ] ; then |
|
|
97 | 97 | make -C "${KERNEL_DIR}" ARCH="${KERNEL_ARCH}" CROSS_COMPILE="${CROSS_COMPILE}" INSTALL_MOD_STRIP=1 INSTALL_MOD_PATH=../../.. modules_install |
|
|
98 | 98 | else |
|
|
99 | 99 | make -C "${KERNEL_DIR}" ARCH="${KERNEL_ARCH}" CROSS_COMPILE="${CROSS_COMPILE}" INSTALL_MOD_PATH=../../.. modules_install |
|
|
100 | 100 | |
|
|
101 | 101 | # Install kernel firmware |
|
|
102 | 102 | make -C "${KERNEL_DIR}" ARCH="${KERNEL_ARCH}" CROSS_COMPILE="${CROSS_COMPILE}" INSTALL_FW_PATH=../../../lib firmware_install |
|
|
103 | 103 | fi |
|
|
104 | 104 | |
|
|
105 | 105 | # Install kernel headers |
|
|
106 | 106 | if [ "$KERNEL_HEADERS" = true ] && [ "$KERNEL_REDUCE" = false ] ; then |
|
|
107 | 107 | make -C "${KERNEL_DIR}" ARCH="${KERNEL_ARCH}" CROSS_COMPILE="${CROSS_COMPILE}" INSTALL_HDR_PATH=../.. headers_install |
|
|
108 | 108 | fi |
|
|
109 | 109 | |
|
|
110 | 110 | # Prepare boot (firmware) directory |
|
|
111 | 111 | mkdir "${BOOT_DIR}" |
|
|
112 | 112 | |
|
|
113 | 113 | # Get kernel release version |
|
|
114 | 114 | KERNEL_VERSION=`cat "${KERNEL_DIR}/include/config/kernel.release"` |
|
|
115 | 115 | |
|
|
116 | 116 | # Copy kernel configuration file to the boot directory |
|
|
117 | 117 | install_readonly "${KERNEL_DIR}/.config" "${R}/boot/config-${KERNEL_VERSION}" |
|
|
118 | 118 | |
|
|
119 | 119 | # Copy dts and dtb device tree sources and binaries |
|
|
120 | 120 | mkdir "${BOOT_DIR}/overlays" |
|
|
121 | 121 | install_readonly "${KERNEL_DIR}/arch/${KERNEL_ARCH}/boot/dts/"*.dtb "${BOOT_DIR}/" |
|
|
122 | 122 | install_readonly "${KERNEL_DIR}/arch/${KERNEL_ARCH}/boot/dts/overlays/"*.dtb* "${BOOT_DIR}/overlays/" |
|
|
123 | 123 | install_readonly "${KERNEL_DIR}/arch/${KERNEL_ARCH}/boot/dts/overlays/README" "${BOOT_DIR}/overlays/README" |
|
|
124 | 124 | |
|
|
125 | 125 | if [ "$ENABLE_UBOOT" = false ] ; then |
|
|
126 | 126 | # Convert and copy zImage kernel to the boot directory |
|
|
127 | 127 | "${KERNEL_DIR}/scripts/mkknlimg" "${KERNEL_DIR}/arch/${KERNEL_ARCH}/boot/zImage" "${BOOT_DIR}/${KERNEL_IMAGE}" |
|
|
128 | 128 | else |
|
|
129 | 129 | # Copy zImage kernel to the boot directory |
|
|
130 | 130 | install_readonly "${KERNEL_DIR}/arch/${KERNEL_ARCH}/boot/zImage" "${BOOT_DIR}/${KERNEL_IMAGE}" |
|
|
131 | 131 | fi |
|
|
132 | 132 | |
|
|
133 | 133 | # Remove kernel sources |
|
|
134 | 134 | if [ "$KERNEL_REMOVESRC" = true ] ; then |
|
|
135 | 135 | rm -fr "${KERNEL_DIR}" |
|
|
136 | else | |
|
|
137 | make -C "${KERNEL_DIR}" ARCH="${KERNEL_ARCH}" CROSS_COMPILE="${CROSS_COMPILE}" mrproper | |
|
|
138 | make -C "${KERNEL_DIR}" ARCH="${KERNEL_ARCH}" CROSS_COMPILE="${CROSS_COMPILE}" oldconfig | |
|
|
139 | make -C "${KERNEL_DIR}" ARCH="${KERNEL_ARCH}" CROSS_COMPILE="${CROSS_COMPILE}" modules_prepare | |
|
|
136 | 140 | fi |
|
|
137 | 141 | |
|
|
138 | 142 | if [ -n "$RPI_FIRMWARE_DIR" ] && [ -d "$RPI_FIRMWARE_DIR" ] ; then |
|
|
139 | 143 | # Install boot binaries from local directory |
|
|
140 | 144 | cp ${RPI_FIRMWARE_DIR}/boot/bootcode.bin ${BOOT_DIR}/bootcode.bin |
|
|
141 | 145 | cp ${RPI_FIRMWARE_DIR}/boot/fixup.dat ${BOOT_DIR}/fixup.dat |
|
|
142 | 146 | cp ${RPI_FIRMWARE_DIR}/boot/fixup_cd.dat ${BOOT_DIR}/fixup_cd.dat |
|
|
143 | 147 | cp ${RPI_FIRMWARE_DIR}/boot/fixup_x.dat ${BOOT_DIR}/fixup_x.dat |
|
|
144 | 148 | cp ${RPI_FIRMWARE_DIR}/boot/start.elf ${BOOT_DIR}/start.elf |
|
|
145 | 149 | cp ${RPI_FIRMWARE_DIR}/boot/start_cd.elf ${BOOT_DIR}/start_cd.elf |
|
|
146 | 150 | cp ${RPI_FIRMWARE_DIR}/boot/start_x.elf ${BOOT_DIR}/start_x.elf |
|
|
147 | 151 | else |
|
|
148 | 152 | # Install latest boot binaries from raspberry/firmware github |
|
|
149 | 153 | wget -q -O "${BOOT_DIR}/bootcode.bin" "${FIRMWARE_URL}/bootcode.bin" |
|
|
150 | 154 | wget -q -O "${BOOT_DIR}/fixup.dat" "${FIRMWARE_URL}/fixup.dat" |
|
|
151 | 155 | wget -q -O "${BOOT_DIR}/fixup_cd.dat" "${FIRMWARE_URL}/fixup_cd.dat" |
|
|
152 | 156 | wget -q -O "${BOOT_DIR}/fixup_x.dat" "${FIRMWARE_URL}/fixup_x.dat" |
|
|
153 | 157 | wget -q -O "${BOOT_DIR}/start.elf" "${FIRMWARE_URL}/start.elf" |
|
|
154 | 158 | wget -q -O "${BOOT_DIR}/start_cd.elf" "${FIRMWARE_URL}/start_cd.elf" |
|
|
155 | 159 | wget -q -O "${BOOT_DIR}/start_x.elf" "${FIRMWARE_URL}/start_x.elf" |
|
|
156 | 160 | fi |
|
|
157 | 161 | |
|
|
158 | 162 | else # BUILD_KERNEL=false |
|
|
159 | 163 | # Kernel installation |
|
|
160 | 164 | chroot_exec apt-get -qq -y --no-install-recommends install linux-image-"${COLLABORA_KERNEL}" raspberrypi-bootloader-nokernel |
|
|
161 | 165 | |
|
|
162 | 166 | # Install flash-kernel last so it doesn't try (and fail) to detect the platform in the chroot |
|
|
163 | 167 | chroot_exec apt-get -qq -y install flash-kernel |
|
|
164 | 168 | |
|
|
165 | 169 | # Check if kernel installation was successful |
|
|
166 | 170 | VMLINUZ="$(ls -1 ${R}/boot/vmlinuz-* | sort | tail -n 1)" |
|
|
167 | 171 | if [ -z "$VMLINUZ" ] ; then |
|
|
168 | 172 | echo "error: kernel installation failed! (/boot/vmlinuz-* not found)" |
|
|
169 | 173 | cleanup |
|
|
170 | 174 | exit 1 |
|
|
171 | 175 | fi |
|
|
172 | 176 | # Copy vmlinuz kernel to the boot directory |
|
|
173 | 177 | install_readonly "${VMLINUZ}" "${BOOT_DIR}/${KERNEL_IMAGE}" |
|
|
174 | 178 | fi |
|
|
175 | 179 | |
|
|
176 | 180 | # Setup firmware boot cmdline |
|
|
177 | 181 | if [ "$ENABLE_SPLITFS" = true ] ; then |
|
|
178 | 182 | CMDLINE="dwc_otg.lpm_enable=0 root=/dev/sda1 rootfstype=ext4 rootflags=commit=100,data=writeback elevator=deadline rootwait console=tty1" |
|
|
179 | 183 | else |
|
|
180 | 184 | CMDLINE="dwc_otg.lpm_enable=0 root=/dev/mmcblk0p2 rootfstype=ext4 rootflags=commit=100,data=writeback elevator=deadline rootwait console=tty1" |
|
|
181 | 185 | fi |
|
|
182 | 186 | |
|
|
183 | 187 | # Add encrypted root partition to cmdline.txt |
|
|
184 | 188 | if [ "$ENABLE_CRYPTFS" = true ] ; then |
|
|
185 | 189 | if [ "$ENABLE_SPLITFS" = true ] ; then |
|
|
186 | 190 | CMDLINE=$(echo ${CMDLINE} | sed "s/sda1/mapper\/${CRYPTFS_MAPPING} cryptdevice=\/dev\/sda1:${CRYPTFS_MAPPING}/") |
|
|
187 | 191 | else |
|
|
188 | 192 | CMDLINE=$(echo ${CMDLINE} | sed "s/mmcblk0p2/mapper\/${CRYPTFS_MAPPING} cryptdevice=\/dev\/mmcblk0p2:${CRYPTFS_MAPPING}/") |
|
|
189 | 193 | fi |
|
|
190 | 194 | fi |
|
|
191 | 195 | |
|
|
192 | 196 | # Add serial console support |
|
|
193 | 197 | if [ "$ENABLE_CONSOLE" = true ] ; then |
|
|
194 | 198 | CMDLINE="${CMDLINE} console=ttyAMA0,115200 kgdboc=ttyAMA0,115200" |
|
|
195 | 199 | fi |
|
|
196 | 200 | |
|
|
197 | 201 | # Remove IPv6 networking support |
|
|
198 | 202 | if [ "$ENABLE_IPV6" = false ] ; then |
|
|
199 | 203 | CMDLINE="${CMDLINE} ipv6.disable=1" |
|
|
200 | 204 | fi |
|
|
201 | 205 | |
|
|
202 | 206 | # Automatically assign predictable network interface names |
|
|
203 | 207 | if [ "$ENABLE_IFNAMES" = false ] ; then |
|
|
204 | 208 | CMDLINE="${CMDLINE} net.ifnames=0" |
|
|
205 | 209 | else |
|
|
206 | 210 | CMDLINE="${CMDLINE} net.ifnames=1" |
|
|
207 | 211 | fi |
|
|
208 | 212 | |
|
|
209 | 213 | # Set init to systemd if required by Debian release |
|
|
210 | 214 | if [ "$RELEASE" = "stretch" ] ; then |
|
|
211 | 215 | CMDLINE="${CMDLINE} init=/bin/systemd" |
|
|
212 | 216 | fi |
|
|
213 | 217 | |
|
|
214 | 218 | # Install firmware boot cmdline |
|
|
215 | 219 | echo "${CMDLINE}" > "${BOOT_DIR}/cmdline.txt" |
|
|
216 | 220 | |
|
|
217 | 221 | # Install firmware config |
|
|
218 | 222 | install_readonly files/boot/config.txt "${BOOT_DIR}/config.txt" |
|
|
219 | 223 | |
|
|
220 | 224 | # Setup minimal GPU memory allocation size: 16MB (no X) |
|
|
221 | 225 | if [ "$ENABLE_MINGPU" = true ] ; then |
|
|
222 | 226 | echo "gpu_mem=16" >> "${BOOT_DIR}/config.txt" |
|
|
223 | 227 | fi |
|
|
224 | 228 | |
|
|
225 | 229 | # Setup boot with initramfs |
|
|
226 | 230 | if [ "$ENABLE_INITRAMFS" = true ] ; then |
|
|
227 | 231 | echo "initramfs initramfs-${KERNEL_VERSION} followkernel" >> "${BOOT_DIR}/config.txt" |
|
|
228 | 232 | fi |
|
|
229 | 233 | |
|
|
230 | 234 | # Disable RPi3 Bluetooth and restore ttyAMA0 serial device |
|
|
231 | 235 | if [ "$RPI_MODEL" = 3 ] ; then |
|
|
232 | 236 | if [ "$ENABLE_CONSOLE" = true ] ; then |
|
|
233 | 237 | echo "dtoverlay=pi3-miniuart-bt" >> "${BOOT_DIR}/config.txt" |
|
|
234 | 238 | fi |
|
|
235 | 239 | fi |
|
|
236 | 240 | |
|
|
237 | 241 | # Create firmware configuration and cmdline symlinks |
|
|
238 | 242 | ln -sf firmware/config.txt "${R}/boot/config.txt" |
|
|
239 | 243 | ln -sf firmware/cmdline.txt "${R}/boot/cmdline.txt" |
|
|
240 | 244 | |
|
|
241 | 245 | # Install and setup kernel modules to load at boot |
|
|
242 | 246 | mkdir -p "${R}/lib/modules-load.d/" |
|
|
243 | 247 | install_readonly files/modules/rpi2.conf "${R}/lib/modules-load.d/rpi2.conf" |
|
|
244 | 248 | |
|
|
245 | 249 | # Load hardware random module at boot |
|
|
246 | 250 | if [ "$ENABLE_HWRANDOM" = true ] && [ "$BUILD_KERNEL" = false ] ; then |
|
|
247 | 251 | sed -i "s/^# bcm2708_rng/bcm2708_rng/" "${R}/lib/modules-load.d/rpi2.conf" |
|
|
248 | 252 | fi |
|
|
249 | 253 | |
|
|
250 | 254 | # Load sound module at boot |
|
|
251 | 255 | if [ "$ENABLE_SOUND" = true ] ; then |
|
|
252 | 256 | sed -i "s/^# snd_bcm2835/snd_bcm2835/" "${R}/lib/modules-load.d/rpi2.conf" |
|
|
253 | 257 | fi |
|
|
254 | 258 | |
|
|
255 | 259 | # Install kernel modules blacklist |
|
|
256 | 260 | mkdir -p "${ETC_DIR}/modprobe.d/" |
|
|
257 | 261 | install_readonly files/modules/raspi-blacklist.conf "${ETC_DIR}/modprobe.d/raspi-blacklist.conf" |
|
|
258 | 262 | |
|
|
259 | 263 | # Install and setup fstab |
|
|
260 | 264 | install_readonly files/mount/fstab "${ETC_DIR}/fstab" |
|
|
261 | 265 | |
|
|
262 | 266 | # Add usb/sda disk root partition to fstab |
|
|
263 | 267 | if [ "$ENABLE_SPLITFS" = true ] && [ "$ENABLE_CRYPTFS" = false ] ; then |
|
|
264 | 268 | sed -i "s/mmcblk0p2/sda1/" "${ETC_DIR}/fstab" |
|
|
265 | 269 | fi |
|
|
266 | 270 | |
|
|
267 | 271 | # Add encrypted root partition to fstab and crypttab |
|
|
268 | 272 | if [ "$ENABLE_CRYPTFS" = true ] ; then |
|
|
269 | 273 | # Replace fstab root partition with encrypted partition mapping |
|
|
270 | 274 | sed -i "s/mmcblk0p2/mapper\/${CRYPTFS_MAPPING}/" "${ETC_DIR}/fstab" |
|
|
271 | 275 | |
|
|
272 | 276 | # Add encrypted partition to crypttab and fstab |
|
|
273 | 277 | install_readonly files/mount/crypttab "${ETC_DIR}/crypttab" |
|
|
274 | 278 | echo "${CRYPTFS_MAPPING} /dev/mmcblk0p2 none luks" >> "${ETC_DIR}/crypttab" |
|
|
275 | 279 | |
|
|
276 | 280 | if [ "$ENABLE_SPLITFS" = true ] ; then |
|
|
277 | 281 | # Add usb/sda disk to crypttab |
|
|
278 | 282 | sed -i "s/mmcblk0p2/sda1/" "${ETC_DIR}/crypttab" |
|
|
279 | 283 | fi |
|
|
280 | 284 | fi |
|
|
281 | 285 | |
|
|
282 | 286 | # Generate initramfs file |
|
|
283 | 287 | if [ "$ENABLE_INITRAMFS" = true ] ; then |
|
|
284 | 288 | if [ "$ENABLE_CRYPTFS" = true ] ; then |
|
|
285 | 289 | # Include initramfs scripts to auto expand encrypted root partition |
|
|
286 | 290 | if [ "$EXPANDROOT" = true ] ; then |
|
|
287 | 291 | install_exec files/initramfs/expand_encrypted_rootfs "${ETC_DIR}/initramfs-tools/scripts/init-premount/expand_encrypted_rootfs" |
|
|
288 | 292 | install_exec files/initramfs/expand-premount "${ETC_DIR}/initramfs-tools/scripts/local-premount/expand-premount" |
|
|
289 | 293 | install_exec files/initramfs/expand-tools "${ETC_DIR}/initramfs-tools/hooks/expand-tools" |
|
|
290 | 294 | fi |
|
|
291 | 295 | |
|
|
292 | 296 | # Disable SSHD inside initramfs |
|
|
293 | 297 | printf "#\n# DROPBEAR: [ y | n ]\n#\n\nDROPBEAR=n\n" >> "${ETC_DIR}/initramfs-tools/initramfs.conf" |
|
|
294 | 298 | |
|
|
295 | 299 | # Dummy mapping required by mkinitramfs |
|
|
296 | 300 | echo "0 1 crypt $(echo ${CRYPTFS_CIPHER} | cut -d ':' -f 1) ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff 0 7:0 4096" | chroot_exec dmsetup create "${CRYPTFS_MAPPING}" |
|
|
297 | 301 | |
|
|
298 | 302 | # Generate initramfs with encrypted root partition support |
|
|
299 | 303 | chroot_exec mkinitramfs -o "/boot/firmware/initramfs-${KERNEL_VERSION}" "${KERNEL_VERSION}" |
|
|
300 | 304 | |
|
|
301 | 305 | # Remove dummy mapping |
|
|
302 | 306 | chroot_exec cryptsetup close "${CRYPTFS_MAPPING}" |
|
|
303 | 307 | else |
|
|
304 | 308 | # Generate initramfs without encrypted root partition support |
|
|
305 | 309 | chroot_exec mkinitramfs -o "/boot/firmware/initramfs-${KERNEL_VERSION}" "${KERNEL_VERSION}" |
|
|
306 | 310 | fi |
|
|
307 | 311 | fi |
|
|
308 | 312 | |
|
|
309 | 313 | # Install sysctl.d configuration files |
|
|
310 | 314 | install_readonly files/sysctl.d/81-rpi-vm.conf "${ETC_DIR}/sysctl.d/81-rpi-vm.conf" |
General Comments 0
Vous devez vous connecter pour laisser un commentaire.
Se connecter maintenant
