##// END OF EJS Templates
Raspi2-3_GenImage
RSS

Cloner depuis https://github.com/drtyhlpr/rpi23-gen-image.git

Merge branch 'master' of http://depot.tremplin.ens-lyon.fr/Raspi2-3_GenImage into masterGV
vidal -
r763:6919c816101d Fusion
parent child
Show More
Show file before | Show file after | Hide comments
1 NO CONTENT: new file 100644, binary diff hidden
Show file before | Show file after | Hide comments
@@ -0,0 +1,22
1 ## Templates used at IFÉ ENS de Lyon for "Tremplin des sciences" project
2
3 These templates have been used to create Raspberry Pi images for the
4 project "Climate and meteorolgy springboard for teaching sciences".
5 These images are tuned andused as explained in the
6 [blog](http://blog.climatetmeteo.fr/GerardVidal/) (mostly in french
7 but under translation).
8
9 The aim is to share with teachers a Raspberry Pi3 binary image providing software resources to use commercial weatherstations or DIY weathersystems made with various sensors. The following images have been built :
10
11 * raspife2-stretch Debian stretch image for raspi 2
12 * raspife3-jessie Debian jessie image for raspi 3
13 * raspife3-stretch Debian stretch image for raspi 3
14 * raspife3W-stretch Debian stretch image for raspi 3 with single IPAddress and weewx service
15 * raspife3-buster Debian buster image for raspi 3
16
17 In these images language ichoosen is french and can easily be changed.
18 Pathes and other variables are the ones that have been used during
19 execution and personnal data are replaced by "*******", change the
20 values according to your needs.
21
22
Show file before | Show file after | Hide comments
@@ -0,0 +1,106
1 # Configuration file raspi3 Buster IFÉ 2017/11/01
2 #
3 APT_SERVER=debian.mirrors.ovh.net
4 APT_INCLUDES=""
5 APT_INCLUDES_LATE=""
6 APT_INCLUDES_LATE="gnupg,firmware-linux-nonfree,firmware-linux,dh-autoreconf,\
7 gettext,build-essential,git,cmake,libjson-c-dev,unzip,usbutils,\
8 bison,libboost-all-dev,automake,autoconf,autogen,libtool,libtool-bin,\
9 pkg-config,checkinstall,menulibre,libnotify-bin,pandoc,\
10 python3,python3-dev,python3-pypandoc,python3-scipy,python3-tk,python3-pandocfilters,\
11 python3-geopy,python3-pip,\
12 python,python-dev,python-pypandoc,python-scipy,python-tk,python-pandocfilters,\
13 python-geopy,python-pip,python-tk,pandoc,\
14 python-configobj,python-cheetah,python-imaging,python-serial,python-usb,\
15 pcre2-utils,libpcre++-dev,libpcre2-dev,libjpeg-dev,i2c-tools,python-smbus,policykit-1,\
16 pmount,ntpdate,ntp,rsync,\
17 texlive,texlive-xetex,nginx-extras,ffmpeg,wicd,wicd-gtk,console-data,keyboard-configuration,\
18 libqtwebkit-dev,libqt5webkit5-dev,\
19 libudev-dev,libzzip-dev,zlib1g-dev,libcanberra-gtk-module,libnss-myhostname,libfreetype6-dev,libpng16-16,\
20 nmap,libltdl-dev,dbus-user-session,debian-archive-keyring,\
21 xutils-dev,lxsession,openbox-lxde-session,lxde,x11proto-randr-dev,lxrandr,\
22 tightvncserver,geany,geany-plugin-py,firefox-esr,firefox-esr-l10n-fr,jed"
23 #ca-certificates-java,icedtea-plugin,icedtea-netx,\
24 #openjdk-8-jdk,openjdk-8-jre,openjdk-8-jre-headless,\
25 #openjdk-9-jdk,openjdk-9-jre,openjdk-9-jre-headless"
26 #----------------------
27 RPI_MODEL=3
28 RELEASE=buster
29 RELEASE_ARCH="armhf"
30 HOSTNAME="raspife3"
31 PASSWORD="AChanger1$"
32 USER_PASSWORD="AChanger1$"
33 DEFLOCAL="fr_FR.UTF-8"
34 TIMEZONE="Europe/Paris"
35 EXPANDROOT=false
36 #-----------------------
37 XKB_MODEL="pc105"
38 XKB_LAYOUT="fr"
39 XKB_VARIANT="latin9"
40 XKB_OPTIONS=""
41 #------------------------
42 ENABLE_DHCP=true
43 #------------------------
44 ENABLE_CONSOLE=false
45 ENABLE_I2C=true
46 ENABLE_SPI=true
47 ENABLE_IPV6=true
48 ENABLE_SSHD=true
49 ENABLE_NONFREE=true
50 ENABLE_WIRELESS=true
51 ENABLE_RSYSLOG=true
52 ENABLE_SOUND=true
53 ENABLE_HWRANDOM=true
54 ENABLE_MINGPU=true
55 ENABLE_DBUS=true
56 ENABLE_XORG=true
57 ENABLE_WM="lxdm"
58 #------------------------
59 ENABLE_MINBASE=false
60 ENABLE_REDUCE=false
61 ENABLE_UBOOT=false
62 ENABLE_FBTURBO=true
63 ENABLE_IPTABLES=false
64 ENABLE_USER=true
65 USER_NAME=ens-ife
66 ENABLE_ROOT=true
67 ENABLE_HARDNET=true
68 ENABLE_INITRAMFS=true
69 ENABLE_IFNAMES=true
70 #------------------------
71 ENABLE_ROOT_SSH=false
72 SSH_LIMIT_USERS=false
73 SSH_ROOT_PUB_KEY="/home/vidal/.ssh/authorized_keys"
74 SSH_USER_PUB_KEY="/home/vidal/.ssh/authorized_keys"
75 #------------------------
76 BUILD_KERNEL=true
77 KERNEL_ARCH=arm64
78 RELEASE_ARCH=arm64
79 CROSS_COMPILE=aarch64-linux-gnu-
80 QEMU_BINARY=/usr/bin/qemu-aarch64-static
81 KERNEL_DEFCONFIG=bcmrpi3_defconfig
82 KERNEL_BIN_IMAGE=Image
83 KERNEL_IMAGE="kernel10.img"
84 KERNEL_BRANCH=rpi-4.13.y
85 KERNEL_REDUCE=false
86 KERNEL_HEADERS=true
87 KERNEL_REMOVESRC=true
88 KERNELSRC_CLEAN=true
89 KERNELSRC_CONFIG=true
90 #------------------------
91 REDUCE_APT=false
92 REDUCE_DOC=true
93 REDUCE_MAN=false
94 REDUCE_HWDB=true
95 REDUCE_BASH=false
96 REDUCE_SSHD=false
97 REDUCE_LOCALE=false
98 #-------------------------
99 ENABLE_CRYPTFS=false
100 #-------------------------
101 BASEDIR=/data/RpiGenImage/Images/${RELEASE}
102 #BASEDIR=/media/vidal/ExternGV/Nano-Ordinateurs/RaspberryPi/RpiGenImage/Images/${RELEASE}
103 DATE=`date +%Y-%m-%d`
104 IMAGE_NAME=${BASEDIR}/${DATE}-rpi${RPI_MODEL}-${RELEASE}
105
106
Show file before | Show file after | Hide comments
@@ -0,0 +1,148
1 #
2 # Configuration file raspi3 Buster IFÉ 2020/11/01
3 #
4 #---------------------
5 #--- APT settings ----
6 #---------------------
7 APT_SERVER=ftp.fr.debian.org
8 APT_INCLUDES="jed terminator nginx curl wget htop"
9 APT_INCLUDES_LATE="pcre2-utils libpcre3-dev \
10 openjdk-11-jdk openjdk-11-jre openjdk-11-jdk-headless openjdk-11-jre-headless \
11 libpython3-all-dev bison byacc python-pip python3-pip python-pkgconfig python3-pkgconfig \
12 python3-netcdf4 python-netcdf4 python-libxml2 libxslt1-dev python-libxslt1 \
13 libxml2 libjavascriptcoregtk-4.0-dev \
14 libffi-dev screen sqlite3 libsqlite3-dev liblua5.3-dev doxygen libftdi-dev \
15 libconfuse-dev libcereal-dev libopenblas-dev libnetcdf-dev libhdf5-dev \
16 git lxdm pcmanfm-qt libffi-dev tightvncserver \
17 libssl-dev python-openssl python3-openssl libcrypto++-dev \
18 mate-backgrounds gnome-backgrounds \
19 fcgiwrap automake libtool libboost1.67-dev \
20 php-fpm libfcgi-dev php7.3-mysql icedtea-netx \
21 tigervnc-standalone-server tigervnc-common \
22 docker.io openvswitch-switch wireshark imagemagick tk tcllib util-linux \
23 xfonts-base fonts-liberation gsfonts libxfont-dev libfontenc-dev \
24 ttf-mscorefonts-installer xfonts-100dpi xfonts-75dpi xfonts-base \
25 xfonts-utils"
26 #-------------------------------
27 #--- General System Settings ---
28 #-------------------------------
29 SET_ARCH=32
30 RPI_MODEL=3
31 RELEASE="buster"
32 HOSTNAME="raspife3"
33 DEFLOCAL="fr_FR.UTF-8"
34 TIMEZONE="Europe/Paris"
35 EXPANDROOT=false
36 #---------------------
37 #--- User Settings ---
38 #---------------------
39 ENABLE_ROOT=false
40 ROOT_PASSWORD="Achanger1$"
41 ENABLE_USER=true
42 USER_NAME=ens-ife
43 USER_PASSWORD="AChanger1$"
44 #-------------------------
45 #--- Keyboard Settings ---
46 #-------------------------
47 XKB_MODEL="pc105"
48 XKB_LAYOUT="fr"
49 XKB_VARIANT="latin9"
50 XKB_OPTIONS=""
51 #------------------------
52 #--- Network Settings ---
53 #------------------------
54 ENABLE_IPV6=true
55 ENABLE_WIRELESS=true
56 ENABLE_IPTABLES=false
57 ENABLE_IFNAMES=true
58 ENABLE_HARDNET=true
59 ENABLE_ETH_DHCP=true
60 ENABLE_WIFI_DHCP=true
61 NET_WIFI_SSID=MobileClimatEtMeteo
62 NET_WIFI_PSK=ClimatEtMeteo
63 #---------------------
64 #--- Basic features---
65 #---------------------
66 ENABLE_CONSOLE=false
67 ENABLE_BLUETOOTH=false
68 ENABLE_MINIUART_OVERLAY=false
69 ENABLE_TURBO=false
70 ENABLE_I2C=true
71 ENABLE_SPI=true
72 SSH_ENABLE=true
73 ENABLE_NONFREE=true
74 ENABLE_RSYSLOG=true
75 ENABLE_SOUND=true
76 ENABLE_HWRANDOM=true
77 ENABLE_MINGPU=true
78 ENABLE_XORG=true
79 ENABLE_WM="lxqt"
80 ENABLE_SYSVINIT=true
81 ENABLE_SPLASH=true
82 ENABLE_LOGO=true
83 ENABLE_SILENT_BOOT=false
84 #--------------------------------
85 #--- Advanced System features ---
86 #--------------------------------
87 ENABLE_DPHYSSWAP=false
88 ENABLE_QEMU=false
89 ENABLE_MINBASE=false
90 ENABLE_SPLITFS=false
91 ENABLE_INITRAMFS=true
92 ENABLE_DBUS=true
93 ENABLE_USBBOOT=false
94 ENABLE_UBOOT=false
95 ENABLE_FBTURBO=true
96 ENABLE_VIDEOCORE=true
97 ENABLE_NEXMON=false
98 #--------------------
99 #--- ssh settings ---
100 #--------------------
101 SSH_ENABLE_ROOT=false
102 SSH_DISABLE_PASSWORD_AUTH=false
103 SSH_LIMIT_USERS=false
104 SSH_ROOT_PUB_KEY="/home/vidal/.ssh/authorized_keys"
105 SSH_USER_PUB_KEY="/home/vidal/.ssh/authorized_keys"
106 #-----------------------
107 #--- Kernel settings ---
108 #-----------------------
109 BUILD_KERNEL=true
110 KERNEL_BRANCH=rpi-4.19.y
111 KERNEL_REDUCE=false
112 KERNEL_HEADERS=true
113 KERNEL_MENUCONFIG=false
114 KERNEL_CCACHE=true
115 KERNEL_REMOVESRC=true
116 KERNELSRC_CLEAN=true
117 KERNELSRC_CONFIG=true
118 KERNEL_DEFAULT_GOV=ondemand
119 KERNEL_VIRT=false
120 KERNEL_SECURITY=false
121 KERNEL_DHKEY=true
122 #------------------------
123 #--- Reduce disk usage --
124 #------------------------
125 ENABLE_REDUCE=false
126 REDUCE_APT=false
127 REDUCE_DOC=true
128 REDUCE_MAN=false
129 REDUCE_VIM=false
130 REDUCE_BASH=false
131 REDUCE_HWDB=false
132 REDUCE_BASH=false
133 REDUCE_SSHD=false
134 REDUCE_LOCALE=false
135 REDUCE_KERNEL=false
136 #--------------------------------
137 #--- Encrypted root partition ---
138 #--------------------------------
139 ENABLE_CRYPTFS=false
140 #----------------------
141 #--- Build settings ---
142 #----------------------
143 BASEDIR=/data/RpiGenImage/Images/${RELEASE}
144 #BASEDIR=/media/*******/*********/Nano-Ordinateurs/RaspberryPi/RpiGenImage/Images/${RELEASE}
145 DATE=`date +%Y-%m-%d`
146 IMAGE_NAME=${BASEDIR}/${DATE}-rpi${RPI_MODEL}-${RELEASE}
147
148
Show file before | Show file after | Hide comments
@@ -0,0 +1,148
1 #
2 # Configuration file raspi3 Buster IFÉ 2020/11/01
3 #
4 #---------------------
5 #--- APT settings ----
6 #---------------------
7 APT_SERVER=ftp.fr.debian.org
8 APT_INCLUDES="jed terminator nginx curl wget htop"
9 APT_INCLUDES_LATE="pcre2-utils libpcre3-dev \
10 openjdk-11-jdk openjdk-11-jre openjdk-11-jdk-headless openjdk-11-jre-headless \
11 libpython3-all-dev bison byacc python-pip python3-pip python-pkgconfig python3-pkgconfig \
12 python3-netcdf4 python-netcdf4 python-libxml2 libxslt1-dev python-libxslt1 \
13 libxml2 libjavascriptcoregtk-4.0-dev \
14 libffi-dev screen sqlite3 libsqlite3-dev liblua5.3-dev doxygen libftdi-dev \
15 libconfuse-dev libcereal-dev libopenblas-dev libnetcdf-dev libhdf5-dev \
16 git lxdm pcmanfm-qt libffi-dev tightvncserver \
17 libssl-dev python-openssl python3-openssl libcrypto++-dev \
18 mate-backgrounds gnome-backgrounds \
19 fcgiwrap automake libtool libboost1.67-dev \
20 php-fpm libfcgi-dev php7.3-mysql icedtea-netx \
21 tigervnc-standalone-server tigervnc-common \
22 docker.io openvswitch-switch wireshark imagemagick tk tcllib util-linux \
23 xfonts-base fonts-liberation gsfonts libxfont-dev libfontenc-dev \
24 ttf-mscorefonts-installer xfonts-100dpi xfonts-75dpi xfonts-base \
25 xfonts-utils"
26 #-------------------------------
27 #--- General System Settings ---
28 #-------------------------------
29 SET_ARCH=32
30 RPI_MODEL=3P
31 RELEASE="buster"
32 HOSTNAME="raspife3P"
33 DEFLOCAL="fr_FR.UTF-8"
34 TIMEZONE="Europe/Paris"
35 EXPANDROOT=false
36 #---------------------
37 #--- User Settings ---
38 #---------------------
39 ENABLE_ROOT=false
40 ROOT_PASSWORD="Achanger1$"
41 ENABLE_USER=true
42 USER_NAME=ens-ife
43 USER_PASSWORD="AChanger1$"
44 #-------------------------
45 #--- Keyboard Settings ---
46 #-------------------------
47 XKB_MODEL="pc105"
48 XKB_LAYOUT="fr"
49 XKB_VARIANT="latin9"
50 XKB_OPTIONS=""
51 #------------------------
52 #--- Network Settings ---
53 #------------------------
54 ENABLE_IPV6=true
55 ENABLE_WIRELESS=true
56 ENABLE_IPTABLES=false
57 ENABLE_IFNAMES=true
58 ENABLE_HARDNET=true
59 ENABLE_ETH_DHCP=true
60 ENABLE_WIFI_DHCP=true
61 NET_WIFI_SSID=MobileClimatEtMeteo
62 NET_WIFI_PSK=ClimatEtMeteo
63 #---------------------
64 #--- Basic features---
65 #---------------------
66 ENABLE_CONSOLE=false
67 ENABLE_BLUETOOTH=false
68 ENABLE_MINIUART_OVERLAY=false
69 ENABLE_TURBO=false
70 ENABLE_I2C=true
71 ENABLE_SPI=true
72 SSH_ENABLE=true
73 ENABLE_NONFREE=true
74 ENABLE_RSYSLOG=true
75 ENABLE_SOUND=true
76 ENABLE_HWRANDOM=true
77 ENABLE_MINGPU=true
78 ENABLE_XORG=true
79 ENABLE_WM="lxqt"
80 ENABLE_SYSVINIT=true
81 ENABLE_SPLASH=true
82 ENABLE_LOGO=true
83 ENABLE_SILENT_BOOT=false
84 #--------------------------------
85 #--- Advanced System features ---
86 #--------------------------------
87 ENABLE_DPHYSSWAP=false
88 ENABLE_QEMU=false
89 ENABLE_MINBASE=false
90 ENABLE_SPLITFS=false
91 ENABLE_INITRAMFS=true
92 ENABLE_DBUS=true
93 ENABLE_USBBOOT=false
94 ENABLE_UBOOT=false
95 ENABLE_FBTURBO=true
96 ENABLE_VIDEOCORE=true
97 ENABLE_NEXMON=false
98 #--------------------
99 #--- ssh settings ---
100 #--------------------
101 SSH_ENABLE_ROOT=false
102 SSH_DISABLE_PASSWORD_AUTH=false
103 SSH_LIMIT_USERS=false
104 SSH_ROOT_PUB_KEY="/home/vidal/.ssh/authorized_keys"
105 SSH_USER_PUB_KEY="/home/vidal/.ssh/authorized_keys"
106 #-----------------------
107 #--- Kernel settings ---
108 #-----------------------
109 BUILD_KERNEL=true
110 KERNEL_BRANCH=rpi-4.19.y
111 KERNEL_REDUCE=false
112 KERNEL_HEADERS=true
113 KERNEL_MENUCONFIG=false
114 KERNEL_CCACHE=true
115 KERNEL_REMOVESRC=true
116 KERNELSRC_CLEAN=true
117 KERNELSRC_CONFIG=true
118 KERNEL_DEFAULT_GOV=ondemand
119 KERNEL_VIRT=false
120 KERNEL_SECURITY=false
121 KERNEL_DHKEY=true
122 #------------------------
123 #--- Reduce disk usage --
124 #------------------------
125 ENABLE_REDUCE=false
126 REDUCE_APT=false
127 REDUCE_DOC=true
128 REDUCE_MAN=false
129 REDUCE_VIM=false
130 REDUCE_BASH=false
131 REDUCE_HWDB=false
132 REDUCE_BASH=false
133 REDUCE_SSHD=false
134 REDUCE_LOCALE=false
135 REDUCE_KERNEL=false
136 #--------------------------------
137 #--- Encrypted root partition ---
138 #--------------------------------
139 ENABLE_CRYPTFS=false
140 #----------------------
141 #--- Build settings ---
142 #----------------------
143 BASEDIR=/data/RpiGenImage/Images/${RELEASE}
144 #BASEDIR=/media/*******/*********/Nano-Ordinateurs/RaspberryPi/RpiGenImage/Images/${RELEASE}
145 DATE=`date +%Y-%m-%d`
146 IMAGE_NAME=${BASEDIR}/${DATE}-rpi${RPI_MODEL}-${RELEASE}
147
148
Show file before | Show file after | Hide comments
@@ -0,0 +1,89
1 # Configuration file raspi3 Stretch Weewx IFÉ 2017/07/26
2 #
3 APT_SERVER=ftp.fr.debian.org
4 APT_INCLUDES="debian-archive-keyring,debian-keyring,automake,autoconf,autogen,gawk,gnupg,gnupg2,\
5 build-essential,git,cmake,libjson-c-dev,unzip,\
6 bison,libboost-all-dev,libtool,libtool-bin,pkg-config,checkinstall,libnotify-bin,pandoc,\
7 python3,python3-dev,python,python-dev,python-configobj,python-cheetah,python-mysqldb\
8 python-imaging,python-serial,python-usb,python-tk,python3-tk,python3-scipy,\
9 python-pypandoc,python3-pypandoc,python-pandocfilters,python3-pandocfilters,\
10 python-geopy,python3-geopy,python-pip,python3-pip,python-smbus,\
11 libudev-dev,libzzip-dev,zlib1g-dev,libnss-myhostname,libpng16-16,nmap,\
12 libltdl-dev,usbutils,pmount,ntpdate,texlive,texlive-xetex,nginx-extras,policykit-1,\
13 openjdk-8-jdk-headless,openjdk-8-jre-headless,\
14 pcre2-utils,libpcre++-dev,libpcre2-dev,libjpeg-dev,i2c-tools"
15 #----------------------
16 RPI_MODEL=3
17 RELEASE="stretch"
18 HOSTNAME="raspwife3"
19 PASSWORD="************"
20 USER_PASSWORD="************"
21 DEFLOCAL="fr_FR.UTF-8"
22 TIMEZONE="Europe/Paris"
23 EXPANDROOT=false
24 #-----------------------
25 XKB_MODEL="pc105"
26 XKB_LAYOUT="fr"
27 XKB_VARIANT="latin9"
28 XKB_OPTIONS=""
29 #------------------------
30 ENABLE_DHCP=false
31 NET_ADDRESS="192.168.***.***/24"
32 NET_GATEWAY="192.168.***.1"
33 NET_DNS_1="192.168.***.1"
34 NET_DNS_2="8.8.8.8"
35 #------------------------
36 ENABLE_CONSOLE=false
37 ENABLE_I2C=true
38 ENABLE_SPI=true
39 ENABLE_IPV6=true
40 ENABLE_SSHD=true
41 ENABLE_NONFREE=true
42 ENABLE_WIRELESS=true
43 ENABLE_RSYSLOG=true
44 ENABLE_SOUND=true
45 ENABLE_HWRANDOM=true
46 ENABLE_MINGPU=true
47 ENABLE_DBUS=true
48 ENABLE_XORG=false
49 ENABLE_WM=""
50 #------------------------
51 ENABLE_MINBASE=false
52 ENABLE_REDUCE=false
53 ENABLE_UBOOT=false
54 ENABLE_FBTURBO=false
55 ENABLE_IPTABLES=false
56 ENABLE_USER=true
57 USER_NAME=ens-ife
58 ENABLE_ROOT=true
59 ENABLE_HARDNET=true
60 ENABLE_INITRAMFS=true
61 ENABLE_IFNAMES=true
62 #------------------------
63 ENABLE_ROOT_SSH=false
64 SSH_LIMIT_USERS=false
65 SSH_ROOT_PUB_KEY="/home/*******/.ssh/authorized_keys"
66 SSH_USER_PUB_KEY="/home/*******/.ssh/authorized_keys"
67 #------------------------
68 BUILD_KERNEL=true
69 KERNEL_REDUCE=false
70 KERNEL_HEADERS=true
71 KERNEL_REMOVESRC=true
72 KERNELSRC_CLEAN=true
73 KERNELSRC_CONFIG=true
74 #------------------------
75 REDUCE_APT=false
76 REDUCE_DOC=true
77 REDUCE_MAN=false
78 REDUCE_HWDB=true
79 REDUCE_BASH=false
80 REDUCE_SSHD=false
81 REDUCE_LOCALE=false
82 #-------------------------
83 ENABLE_CRYPTFS=false
84 #-------------------------
85 BASEDIR=/data/RpiGenImage/Images/${RELEASE}
86 DATE=`date +%Y-%m-%d`
87 IMAGE_NAME=${BASEDIR}/${DATE}-rpiw${RPI_MODEL}-${RELEASE}
88
89
Show file before | Show file after | Hide comments
@@ -0,0 +1,148
1 #
2 # Configuration file raspi3 Buster IFÉ 2020/11/01
3 #
4 #---------------------
5 #--- APT settings ----
6 #---------------------
7 APT_SERVER=ftp.fr.debian.org
8 APT_INCLUDES="jed terminator nginx curl wget htop"
9 APT_INCLUDES_LATE="pcre2-utils libpcre3-dev \
10 openjdk-11-jdk openjdk-11-jre openjdk-11-jdk-headless openjdk-11-jre-headless \
11 libpython3-all-dev bison byacc python-pip python3-pip python-pkgconfig python3-pkgconfig \
12 python3-netcdf4 python-netcdf4 python-libxml2 libxslt1-dev python-libxslt1 \
13 libxml2 libjavascriptcoregtk-4.0-dev \
14 libffi-dev screen sqlite3 libsqlite3-dev liblua5.3-dev doxygen libftdi-dev \
15 libconfuse-dev libcereal-dev libopenblas-dev libnetcdf-dev libhdf5-dev \
16 git lxdm pcmanfm-qt libffi-dev tightvncserver \
17 libssl-dev python-openssl python3-openssl libcrypto++-dev \
18 mate-backgrounds gnome-backgrounds \
19 fcgiwrap automake libtool libboost1.67-dev \
20 php-fpm libfcgi-dev php7.3-mysql icedtea-netx \
21 tigervnc-standalone-server tigervnc-common \
22 docker.io openvswitch-switch wireshark imagemagick tk tcllib util-linux \
23 xfonts-base fonts-liberation gsfonts libxfont-dev libfontenc-dev \
24 ttf-mscorefonts-installer xfonts-100dpi xfonts-75dpi xfonts-base \
25 xfonts-utils"
26 #-------------------------------
27 #--- General System Settings ---
28 #-------------------------------
29 SET_ARCH=32
30 RPI_MODEL=4
31 RELEASE="buster"
32 HOSTNAME="raspife4"
33 DEFLOCAL="fr_FR.UTF-8"
34 TIMEZONE="Europe/Paris"
35 EXPANDROOT=false
36 #---------------------
37 #--- User Settings ---
38 #---------------------
39 ENABLE_ROOT=false
40 ROOT_PASSWORD="Achanger1$"
41 ENABLE_USER=true
42 USER_NAME=ens-ife
43 USER_PASSWORD="AChanger1$"
44 #-------------------------
45 #--- Keyboard Settings ---
46 #-------------------------
47 XKB_MODEL="pc105"
48 XKB_LAYOUT="fr"
49 XKB_VARIANT="latin9"
50 XKB_OPTIONS=""
51 #------------------------
52 #--- Network Settings ---
53 #------------------------
54 ENABLE_IPV6=true
55 ENABLE_WIRELESS=true
56 ENABLE_IPTABLES=false
57 ENABLE_IFNAMES=true
58 ENABLE_HARDNET=true
59 ENABLE_ETH_DHCP=true
60 ENABLE_WIFI_DHCP=true
61 NET_WIFI_SSID=MobileClimatEtMeteo
62 NET_WIFI_PSK=ClimatEtMeteo
63 #---------------------
64 #--- Basic features---
65 #---------------------
66 ENABLE_CONSOLE=false
67 ENABLE_BLUETOOTH=false
68 ENABLE_MINIUART_OVERLAY=false
69 ENABLE_TURBO=false
70 ENABLE_I2C=true
71 ENABLE_SPI=true
72 SSH_ENABLE=true
73 ENABLE_NONFREE=true
74 ENABLE_RSYSLOG=true
75 ENABLE_SOUND=true
76 ENABLE_HWRANDOM=true
77 ENABLE_MINGPU=true
78 ENABLE_XORG=true
79 ENABLE_WM="lxqt"
80 ENABLE_SYSVINIT=true
81 ENABLE_SPLASH=true
82 ENABLE_LOGO=true
83 ENABLE_SILENT_BOOT=false
84 #--------------------------------
85 #--- Advanced System features ---
86 #--------------------------------
87 ENABLE_DPHYSSWAP=false
88 ENABLE_QEMU=false
89 ENABLE_MINBASE=false
90 ENABLE_SPLITFS=false
91 ENABLE_INITRAMFS=true
92 ENABLE_DBUS=true
93 ENABLE_USBBOOT=false
94 ENABLE_UBOOT=false
95 ENABLE_FBTURBO=true
96 ENABLE_VIDEOCORE=true
97 ENABLE_NEXMON=false
98 #--------------------
99 #--- ssh settings ---
100 #--------------------
101 SSH_ENABLE_ROOT=false
102 SSH_DISABLE_PASSWORD_AUTH=false
103 SSH_LIMIT_USERS=false
104 SSH_ROOT_PUB_KEY="/home/vidal/.ssh/authorized_keys"
105 SSH_USER_PUB_KEY="/home/vidal/.ssh/authorized_keys"
106 #-----------------------
107 #--- Kernel settings ---
108 #-----------------------
109 BUILD_KERNEL=true
110 KERNEL_BRANCH=rpi-4.19.y
111 KERNEL_REDUCE=false
112 KERNEL_HEADERS=true
113 KERNEL_MENUCONFIG=false
114 KERNEL_CCACHE=true
115 KERNEL_REMOVESRC=true
116 KERNELSRC_CLEAN=true
117 KERNELSRC_CONFIG=true
118 KERNEL_DEFAULT_GOV=ondemand
119 KERNEL_VIRT=false
120 KERNEL_SECURITY=false
121 KERNEL_DHKEY=true
122 #------------------------
123 #--- Reduce disk usage --
124 #------------------------
125 ENABLE_REDUCE=false
126 REDUCE_APT=false
127 REDUCE_DOC=true
128 REDUCE_MAN=false
129 REDUCE_VIM=false
130 REDUCE_BASH=false
131 REDUCE_HWDB=false
132 REDUCE_BASH=false
133 REDUCE_SSHD=false
134 REDUCE_LOCALE=false
135 REDUCE_KERNEL=false
136 #--------------------------------
137 #--- Encrypted root partition ---
138 #--------------------------------
139 ENABLE_CRYPTFS=false
140 #----------------------
141 #--- Build settings ---
142 #----------------------
143 BASEDIR=/data/RpiGenImage/Images/${RELEASE}
144 #BASEDIR=/media/*******/*********/Nano-Ordinateurs/RaspberryPi/RpiGenImage/Images/${RELEASE}
145 DATE=`date +%Y-%m-%d`
146 IMAGE_NAME=${BASEDIR}/${DATE}-rpi${RPI_MODEL}-${RELEASE}
147
148
Show file before | Show file after | Hide comments
@@ -1,6 +1,6
1 1 images
2 2 custom.d
3 packages
4 3 *.swp
5 4 *.bak
6 5 *.log
6 *~ No newline at end of file
Show file before | Show file after | Hide comments
@@ -1,404 +1,406
1 1 # rpi23-gen-image
2 2 ## Introduction
3 3 `rpi23-gen-image.sh` is an advanced Debian Linux bootstrapping shell script for generating Debian OS images for all Raspberry Pi computers. The script at this time supports the bootstrapping of the Debian (armhf/armel) releases `stretch` and `buster`. Raspberry Pi 0/1/2/3/4 images are generated for 32-bit mode only. Raspberry Pi 3 supports 64-bit images that can be generated using custom configuration parameters (```templates/rpi3-stretch-arm64-4.14.y```).
4 4
5
6
5 7 ## Build dependencies
6 8 The following list of Debian packages must be installed on the build system because they are essentially required for the bootstrapping process. The script will check if all required packages are installed and missing packages will be installed automatically if confirmed by the user.
7 9
8 10 ```debootstrap debian-archive-keyring qemu-user-static binfmt-support dosfstools rsync bmap-tools whois git bc psmisc dbus sudo```
9 11
10 12 It is recommended to configure the `rpi23-gen-image.sh` script to build and install the latest Raspberry Pi Linux kernel. For the Raspberry 3 this is mandatory. Kernel compilation and linking will be performed on the build system using an ARM (armhf/armel/aarch64) cross-compiler toolchain.
11 13
12 14 The script has been tested using the default `crossbuild-essential-armhf` and `crossbuild-essential-armel` toolchain meta packages on Debian Linux `stretch` build systems. Please check the [Debian CrossToolchains Wiki](https://wiki.debian.org/CrossToolchains) for further information.
13 15
14 16 ## Command-line parameters
15 17 The script accepts certain command-line parameters to enable or disable specific OS features, services and configuration settings. These parameters are passed to the `rpi23-gen-image.sh` script via (simple) shell-variables. Unlike environment shell-variables (simple) shell-variables are defined at the beginning of the command-line call of the `rpi23-gen-image.sh` script.
16 18
17 19 ##### Command-line examples:
18 20 ```shell
19 21 ENABLE_UBOOT=true ./rpi23-gen-image.sh
20 22 ENABLE_CONSOLE=false ENABLE_IPV6=false ./rpi23-gen-image.sh
21 23 ENABLE_WM=xfce4 ENABLE_FBTURBO=true ENABLE_MINBASE=true ./rpi23-gen-image.sh
22 24 ENABLE_HARDNET=true ENABLE_IPTABLES=true /rpi23-gen-image.sh
23 25 APT_SERVER=ftp.de.debian.org APT_PROXY="http://127.0.0.1:3142/" ./rpi23-gen-image.sh
24 26 ENABLE_MINBASE=true ./rpi23-gen-image.sh
25 27 BUILD_KERNEL=true ENABLE_MINBASE=true ENABLE_IPV6=false ./rpi23-gen-image.sh
26 28 BUILD_KERNEL=true KERNELSRC_DIR=/tmp/linux ./rpi23-gen-image.sh
27 29 ENABLE_MINBASE=true ENABLE_REDUCE=true ENABLE_MINGPU=true BUILD_KERNEL=true ./rpi23-gen-image.sh
28 30 ENABLE_CRYPTFS=true CRYPTFS_PASSWORD=changeme EXPANDROOT=false ENABLE_MINBASE=true ENABLE_REDUCE=true ENABLE_MINGPU=true BUILD_KERNEL=true ./rpi23-gen-image.sh
29 31 RELEASE=buster BUILD_KERNEL=true ./rpi23-gen-image.sh
30 32 RPI_MODEL=3 ENABLE_WIRELESS=true ENABLE_MINBASE=true BUILD_KERNEL=true ./rpi23-gen-image.sh
31 33 RELEASE=buster RPI_MODEL=3 ENABLE_WIRELESS=true ENABLE_MINBASE=true BUILD_KERNEL=true ./rpi23-gen-image.sh
32 34 ```
33 35
34 36 ## Configuration template files
35 37 To avoid long lists of command-line parameters and to help to store the favourite parameter configurations the `rpi23-gen-image.sh` script supports so called configuration template files (`CONFIG_TEMPLATE`=template). These are simple text files located in the `./templates` directory that contain the list of configuration parameters that will be used. New configuration template files can be added to the `./templates` directory.
36 38
37 39 ##### Command-line examples:
38 40 ```shell
39 41 CONFIG_TEMPLATE=rpi3stretch ./rpi23-gen-image.sh
40 42 CONFIG_TEMPLATE=rpi2stretch ./rpi23-gen-image.sh
41 43 ```
42 44
43 45 ## Working with the your template:
44 46 * **A Pipe ("|") represents a logical OR**
45 47 * **A valuetype of boolean represents the options true or false**
46 48 * **Values without a default are required if you want do use that feature. It is possible that not every feature has a (working) sanity check.**
47 49 * **If it's not working as expected, search your option in all the files in this repository (With e.g.grep or notepad++).**
48 50 * **Check if your missing a required option while looking at the code**
49 51
50 52 ## Supported parameters and settings
51 53
52 54 #### APT settings:
53 55 |Option|Value|default value|value format|desciption|
54 56 |---|---|---|---|---|
55 57 |APT_SERVER|string|ftp.debian.org|`URL`|Set Debian packages server address. Choose a server from the list of Debian worldwide [mirror sites](https://www.debian.org/mirror/list). Using a nearby server will probably speed-up all required downloads within the bootstrapping process.|
56 58 |APT_PROXY|string||`URL`|Set Proxy server address. Using a local Proxy-Cache like `apt-cacher-ng` will speed-up the bootstrapping process because all required Debian packages will only be downloaded from the Debian mirror site once. If `apt-cacher-ng` is running on default `http://127.0.0.1:3142` it is autodetected and you don't need to set this.|
57 59 |KEEP_APT_PROXY|boolean|false|`true`\|`false`|true=Keep the APT_PROXY settings used in the bootsrapping process in the generated image|
58 60 |APT_INCLUDES|string list||`packageA`,`packageB`,...|A comma-separated list of additional packages to be installed by debootstrap during bootstrapping.|
59 61 |APT_INCLUDES_LATE|string list||`packageA`,`packageB`,...|A comma-separated list of additional packages to be installed by apt after bootstrapping and after APT sources are set up. This is useful for packages with pre-depends, which debootstrap do not handle well.|
60 62 |APT_EXCLUDES|string list||`packageA`,`packageB`,...|A comma-separated list of packages to exclude. Use carefully|
61 63 ---
62 64
63 65 #### General system settings:
64 66 |Option|Value|default value|value format|desciption|
65 67 |---|---|---|---|---|
66 68 |SET_ARCH|integer|32|`32`\|`64`|Set Architecture to default 32bit. If you want to compile 64-bit (RPI3/RPI3+/RPI4) set it to `64`. This option will set every needed cross-compiler or board specific option for a successful build.|
67 69 |RPI_MODEL|string|3P|`0`\|`1`\|`1P`\|`2`\|`3`\|`3P`\|`4`|Set Architecture. This option will set most build options accordingly. Specify the target Raspberry Pi hardware model.|
68 70 |RELEASE|string|buster|`jessie`\|`buster`\|`stretch`<br>\|`bullseye`\|`testing`\|`stable`<br>\|`oldstable`|Set the desired Debian release name. The script at this time supports the bootstrapping of the Debian releases `stretch` and `buster`.|
69 71 |HOSTNAME|string|RPI_MODEL-RELEASE(e.g. RPI3-buster)|`SomeImageName.img`|Set system hostname. It's recommended that the hostname is unique in the corresponding subnet.|
70 72 |DEFLOCAL|string|en_US.UTF-8|`Locale.Charset`|Set default system locale. This setting can also be changed inside the running OS using the `dpkg-reconfigure locales` command. Please note that on using this parameter the script will automatically install the required packages `locales`, `keyboard-configuration` and `console-setup`.|
71 73 |TIMEZONE|string|Europe/Berlin|`Timezone`|Set default system timezone. All available timezones can be found in the `/usr/share/zoneinfo/` directory. This setting can also be changed inside the running OS using the `dpkg-reconfigure tzdata` command.|
72 74 |EXPANDROOT|boolean|true|`true`\|`false`|true=Expand the root partition and filesystem automatically on first boot|
73 75
74 76 ---
75 77
76 78 #### User settings:
77 79 |Option|Value|default value|desciption|
78 80 |---|---|---|---|
79 81 |ENABLE_ROOT|boolean|false|true=root login if ROOT_PASSWORD is set|
80 82 |ROOT_PASSWORD|string|raspberry|Set password for `root` user. It's **STRONGLY** recommended that you choose a custom password.|
81 83 |ENABLE_USER|boolean|true|true=Create non-root user with password `USER_PASSWORD` and username `USER_NAME`|
82 84 |USER_NAME|string|pi|Set username for non-root user, if `ENABLE_USER` is true|
83 85 |USER_PASSWORD|string|raspberry|Set password for non-root user, if `ENABLE_USER` is true. It's **STRONGLY** recommended that you choose a custom password.|
84 86
85 87 ---
86 88
87 89 #### Keyboard settings:
88 90
89 91 These options are used to configure keyboard layout in `/etc/default/keyboard` for console and Xorg. These settings can also be changed inside the running OS using the `dpkg-reconfigure keyboard-configuration` command.
90 92
91 93 |Option|Value|default value|value format|desciption|
92 94 |---|---|---|---|---|
93 95 |XKB_MODEL|string||`pc104`|Set the name of the model of your keyboard type|
94 96 |XKB_LAYOUT|string||`us`|Set the supported keyboard layout(s)|
95 97 |XKB_VARIANT|string||`basic`|Set the supported variant(s) of the keyboard layout(s)|
96 98 |XKB_OPTIONS|string||`grp:alt_shift_toggle`|Set extra xkb configuration options|
97 99
98 100 ---
99 101
100 102 #### Networking settings:
101 103 ethernet setting go to `/etc/systemd/network/eth0.network`.
102 104 wifi settings go to `/etc/systemd/network/wlan0.network`.
103 105
104 106 The default location of network configuration files in the Debian `stretch` release was changed to `/lib/systemd/network`.`
105 107
106 108 |Option|Value|default value|desciption|
107 109 |---|---|---|---|
108 110 |ENABLE_IPV6|boolean|true|true=Enable IPv6 support via systemd-networkd|
109 111 |ENABLE_WIRELESS|boolean|false|true=Download and install the [closed-source firmware binary blob](https://github.com/RPi-Distro/firmware-nonfree/raw/master/brcm) that is required to run the internal wireless interface of the Raspberry Pi model `3`. This parameter is ignored if the specified `RPI_MODEL` is not `0`,`3`,`3P`,`4`|
110 112 |ENABLE_IPTABLES|boolean|false|true=Enable iptables IPv4/IPv6 firewall. Simplified ruleset: Allow all outgoing connections. Block all incoming connections except to OpenSSH service.|
111 113 |ENABLE_HARDNET|boolean|false|true=Enable IPv4/IPv6 network stack hardening settings|
112 114 |ENABLE_IFNAMES|boolean|true|true=creates complex and long interface names like e.g. encx8945924. Enable automatic assignment of predictable, stable network interface names for all NICs|
113 115
114 116 ---
115 117
116 118 #### Networking settings (DHCP):
117 119
118 120
119 121 |Option|Value|default value|desciption|
120 122 |---|---|---|---|
121 123 |ENABLE_ETH_DHCP|boolean|true|Set the system to use DHCP on wired interface. This requires an DHCP server|
122 124 |ENABLE_WIFI_DHCP|boolean|true|Set the system to use DHCP on wifi interface. This requires an DHCP server. Requires ENABLE_WIRELESS|
123 125
124 126 ---
125 127
126 128 #### Networking settings (ethernet static):
127 129 The following static networking parameters are only supported if `ENABLE_ETH_DHCP` was set to `false`.
128 130
129 131 |Option|Value|value format|desciption|
130 132 |---|---|---|---|
131 133 |NET_ETH_ADDRESS|string|`CIDR`|static IPv4 or IPv6 address and its prefix, separated by "/", eg. "192.169.0.3/24"|
132 134 |NET_ETH_GATEWAY|string|`IP`|default gateway|
133 135 |NET_ETH_DNS_1|string|`IP`|first DNS server|
134 136 |NET_ETH_DNS_2|string|`IP`|second DNS server|
135 137 |NET_ETH_DNS_DOMAINS|string|`example.local`|default DNS search domains to use for non fully qualified hostnames|
136 138 |NET_ETH_NTP_1|string|`IP`|first NTP server|
137 139 |NET_ETH_NTP_2|string|`IP`|second NTP server|
138 140
139 141 ---
140 142
141 143 #### Networking settings (WIFI):
142 144
143 145 |Option|Value|value format|desciption|
144 146 |---|---|---|---|
145 147 |NET_WIFI_SSID|string|`yourwifiname`|WIFI SSID|
146 148 |NET_WIFI_PSK|string|`yourwifikeytojoinnetwork`|WPA/WPA2 PSK|
147 149
148 150 ---
149 151
150 152 #### Networking settings (WIFI static):
151 153 The following static networking parameters are only supported if `ENABLE_WIFI_DHCP` was set to `false`.
152 154
153 155 |Option|Value|value format|desciption|
154 156 |---|---|---|---|
155 157 |NET_WIFI_ADDRESS|string|`CIDR`|static IPv4 or IPv6 address and its prefix, separated by "/", eg. "192.169.0.3/24"|
156 158 |NET_WIFI_GATEWAY|string|`IP`|default gateway|
157 159 |NET_WIFI_DNS_1|string|`IP`|first DNS server|
158 160 |NET_WIFI_DNS_2|string|`IP`|second DNS server|
159 161 |NET_WIFI_DNS_DOMAINS|string|`example.local`|default DNS search domains to use for non fully qualified hostnames|
160 162 |NET_WIFI_NTP_1|string|`IP`|first NTP server|
161 163 |NET_WIFI_NTP_2|string|`IP`|second NTP server|
162 164
163 165 ---
164 166
165 167 #### Basic system features:
166 168
167 169 |Option|Value|default value|value format|desciption|
168 170 |---|---|---|---|---|
169 171 |ENABLE_CONSOLE|boolean|false|`true`\|`false`|true=Enable serial console interface.Recommended if no monitor or keyboard is connected to the RPi2/3. In case of problems fe. if the network (auto) configuration failed - the serial console can be used to access the system. On RPI `0` `3` `3P` the CPU speed is locked at lowest speed.|
170 172 |ENABLE_PRINTK|boolean|false|`true`\|`false`|true=Enables printing kernel messages to konsole. printk is `3 4 1 3` as in raspbian|
171 173 |ENABLE_BLUETOOTH|boolean|false|`true`\|`false`|true=Enable onboard Bluetooth interface on the RPi0/3/3P. See: [Configuring the GPIO serial port on Raspbian jessie and stretch](https://spellfoundry.com/2016/05/29/configuring-gpio-serial-port-raspbian-jessie-including-pi-3/)|
172 174 |ENABLE_MINIUART_OVERLAY|boolean|false|`true`\|`false`|true=Enable Bluetooth to use this. Adds overlay to swap UART0 with UART1. Enabling (slower) Bluetooth and full speed serial console. - RPI `0` `3` `3P` have a fast `hardware UART0` (ttyAMA0) and a `mini UART1` (ttyS0)! RPI `1` `1P` `2` only have a `hardware UART0`. `UART0` is considered better, because is faster and more stable than `mini UART1`. By default the Bluetooth modem is mapped to the `hardware UART0` and `mini UART` is used for console. The `mini UART` is a problem for the serial console, because its baudrate depends on the CPU frequency, which is changing on runtime. Resulting in a volatile baudrate and thus in an unusable serial console.|
173 175 |ENABLE_TURBO|boolean|false|`true`\|`false`|true=Enable Turbo mode. This setting locks cpu at the highest frequency. As setting ENABLE_CONSOLE=true locks RPI to lowest CPU speed, this is can be used additionally to lock cpu hat max speed. Need a good power supply and probably cooling for the Raspberry PI|
174 176 |ENABLE_I2C|boolean|true|`true`\|`false`|true=Enable I2C interface on the RPi 0/1/2/3. Please check the [RPi 0/1/2/3 pinout diagrams](https://elinux.org/RPi_Low-level_peripherals) to connect the right GPIO pins|
175 177 |ENABLE_SPI|boolean|true|`true`\|`false`|true=Enable SPI interface on the RPi 0/1/2/3. Please check the [RPi 0/1/2/3 pinout diagrams](https://elinux.org/RPi_Low-level_peripherals) to connect the right GPIO pins|
176 178 |SSH_ENABLE|boolean|true|`true`\|`false`|Install and enable OpenSSH service. The default configuration of the service doesn't allow `root` to login. Please use the user `pi` instead and `su -` or `sudo` to execute commands as root|
177 179 |ENABLE_NONFREE|boolean|false|`true`\|`false`|true=enable non-free\|false=disable non free. Edits /etc/apt/sources.list in your resulting image|
178 180 |ENABLE_RSYSLOG|boolean|false|`true`\|`false`|true=keep rsyslog\|false=remove rsyslog. If rsyslog is removed (false), logs will be available only in journal files)|
179 181 |ENABLE_SOUND|boolean|false|`true`\|`false`|true=Enable sound\|false=Disable sound|
180 182 |ENABLE_HWRANDOM|boolean|true|`true`\|`false`|true=Enable Hardware Random Number Generator(RNG)\|false=Disable Hardware RNG\|Strong random numbers are important for most network-based communications that use encryption. It's recommended to be enabled|
181 183 |ENABLE_MINGPU|boolean|false|`true`\|`false`|true=GPU 16MB RAM\|false=64MB RAM\|Minimize the amount of shared memory reserved for the GPU. It doesn't seem to be possible to fully disable the GPU. Also removes start.elf,fixup.dat,start_x.elf,fixup_x.dat form /boot|
182 184 |ENABLE_XORG|boolean|false|`true`\|`false`|true=Install Xorg X Window System|\false=install no Xorg|
183 185 |ENABLE_WM|string||`blackbox`, `openbox`, `fluxbox`,<br> `jwm`, `dwm`, `xfce4`, `awesome`|Install a user-defined window manager for the X Window System. To make sure all X related package dependencies are getting installed `ENABLE_XORG` will automatically set true if `ENABLE_WM` is used|
184 186 |ENABLE_SYSVINIT|boolean|false|`true`\|`false`|true=Support for halt,init,poweroff,reboot,runlevel,shutdown,init commands\|false=use systemd commands|
185 187 |ENABLE_SPLASH|boolean|true|`true`\|`false`|true=Enable default Raspberry Pi boot up rainbow splash screen|
186 188 |ENABLE_LOGO|boolean|true|`true`\|`false`|true=Enable default Raspberry Pi console logo (image of four raspberries in the top left corner)|
187 189 |ENABLE_SILENT_BOOT|boolean|false|`true`\|`false`|true=Set the verbosity of console messages shown during boot up to a strict minimum|
188 190 |DISABLE_UNDERVOLT_WARNINGS|integer||`1`\|`2`|Unset to keep default behaviour. Setting the parameter to `1` will disable the warning overlay. Setting it to `2` will additionally allow RPi2/3 turbo mode when low-voltage is present|
189 191
190 192 ---
191 193
192 194 #### Advanced system features:
193 195
194 196 |Option|Value|default value|value format|desciption|
195 197 |---|---|---|---|---|
196 198 |ENABLE_DPHYSSWAP|boolean|true|`true`\|`false`|Enable swap. The size of the swapfile is chosen relative to the size of the root partition. It'll use the `dphys-swapfile` package for that|
197 199 |ENABLE_SYSTEMDSWAP|boolean|false|`true`\|`false`|Enables [Systemd-swap service](https://github.com/Nefelim4ag/systemd-swap). Usefull if `KERNEL_ZSWAP` is enabled|
198 200 |ENABLE_QEMU|boolean|false|`true`\|`false`|Generate kernel (`vexpress_defconfig`), file system image (`qcow2`) and DTB files that can be used for QEMU full system emulation (`vexpress-A15`). The output files are stored in the `$(pwd)/images/qemu` directory. You can find more information about running the generated image in the QEMU section of this readme file|
199 201 |QEMU_BINARY|string||`FullPathToQemuBinaryFile`|Sets the QEMU enviornment for the Debian archive. **Set by RPI_MODEL**|
200 202 |ENABLE_KEYGEN|boolean|false|`true`\|`false`|Recover your lost codec license|
201 203 |ENABLE_MINBASE|boolean|false|`true`\|`false`|Use debootstrap script variant `minbase` which only includes essential packages and apt. This will reduce the disk usage by about 65 MB|
202 204 |ENABLE_SPLITFS|boolean|false|`true`\|`false`|Enable having root partition on an USB drive by creating two image files: one for the `/boot/firmware` mount point, and another for `/`|
203 205 |ENABLE_INITRAMFS|boolean|false|`true`\|`false`|Create an initramfs that that will be loaded during the Linux startup process. `ENABLE_INITRAMFS` will automatically get enabled if `ENABLE_CRYPTFS`=true. This parameter will be ignored if `BUILD_KERNEL`=false|
204 206 |ENABLE_DBUS|boolean|true|`true`\|`false`|Install and enable D-Bus message bus. Please note that systemd should work without D-bus but it's recommended to be enabled|
205 207 |ENABLE_USBBOOT|boolean|false|`true`\|`false`|true=prepare image for usbboot. use with `ENABLE_SPLTFS`=true|
206 208 |CHROOT_SCRIPTS|string||`FullPathToScriptFolder`|Full path to a directory with scripts that should be run in the chroot before the image is finally built. Every executable file in this directory is run in lexicographical order|
207 209 |ENABLE_UBOOT|boolean|false|`true`\|`false`|Replace the default RPi 0/1/2/3 second stage bootloader (bootcode.bin) with [U-Boot bootloader](https://git.denx.de/?p=u-boot.git;a=summary). U-Boot can boot images via the network using the BOOTP/TFTP protocol. RPI4 needs tbd|
208 210 |UBOOTSRC_DIR|string||`FullPathToUBootFolder`|Full path to a directory named `u-boot` of [U-Boot bootloader sources](https://git.denx.de/?p=u-boot.git;a=summary) that will be copied, configured, build and installed inside the chroot|
209 211 |ENABLE_FBTURBO|boolean|false|`true`\|`false`|Install and enable the [hardware accelerated Xorg video driver](https://github.com/ssvb/xf86-video-fbturbo) `fbturbo`. Please note that this driver is currently limited to hardware accelerated window moving and scrolling|
210 212 |ENABLE_GR_ACCEL|boolean|false|`true`\|`false`|Install and enable [one of the 3D graphics accelerators for Raspi4](https://www.raspberrypi.org/documentation/configuration/config-txt/video.md) `vc4-fkms-v3d`. Not compatible with `fbturbo` mutually excluded and installed for Raspberry4 only|
211 213 |FBTURBOSRC_DIR|string||`FullPathToFbTurboFolder`|Full path to a directory named `xf86-video-fbturbo` of [hardware accelerated Xorg video driver sources](https://github.com/ssvb/xf86-video-fbturbo) that will be copied, configured, build and installed inside the chroot|
212 214 |ENABLE_VIDEOCORE|boolean|false|`true`\|`false`|Install and enable the [ARM side libraries for interfacing to Raspberry Pi GPU](https://github.com/raspberrypi/userland) `vcgencmd`. Please note that this driver is currently limited to hardware accelerated window moving and scrolling|
213 215 |VIDEOCORESRC_DIR|string||`FullPathToVideoSrcFolder`|Full path to a directory named `userland` of [ARM side libraries for interfacing to Raspberry Pi GPU](https://github.com/raspberrypi/userland) that will be copied, configured, build and installed inside the chroot|
214 216 |ENABLE_NEXMON|boolean|false|`true`\|`false`|Install and enable the source code for a C-based firmware patching framework for Broadcom/Cypress WiFi chips that enables you to write your own firmware patches, for example, to enable monitor mode with radiotap headers and frame injection](https://github.com/seemoo-lab/nexmon.git)|
215 217 |NEXMONSRC_DIR|string||`FullPathToNexmonFolder`|Full path to a directory named `nexmon` of [Source code for ARM side libraries for interfacing to Raspberry Pi GPU](https://github.com/raspberrypi/userland) that will be copied, configured, build and installed inside the chroot|
216 218
217 219 ---
218 220
219 221 #### SSH settings:
220 222
221 223 |Option|Value|default value|value format|desciption|
222 224 |---|---|---|---|---|
223 225 |SSH_ENABLE_ROOT|boolean|false|`true`\|`false`|Enable password-based root login via SSH. This may be a security risk with the default password set, use only in trusted environments. `ENABLE_ROOT` must be set to `true`|
224 226 |SSH_DISABLE_PASSWORD_AUTH|boolean|false|`true`\|`false`|Disable password-based SSH authentication. Only public key based SSH (v2) authentication will be supported|
225 227 |SSH_LIMIT_USERS|boolean|false|`true`\|`false`|Limit the users that are allowed to login via SSH. Only allow user `USER_NAME`=pi and root if `SSH_ENABLE_ROOT`=true to login. This parameter will be ignored if `dropbear` SSH is used (`REDUCE_SSHD`=true)|
226 228 |SSH_ROOT_PUB_KEY|string||`PathToYourROOT`<br>`RSAPublicKeyFile`|Full path to file. Add SSH (v2) public key(s) from specified file to `authorized_keys` file to enable public key based SSH (v2) authentication of user `root`. The specified file can also contain multiple SSH (v2) public keys. SSH protocol version 1 is not supported. `ENABLE_ROOT` **and** `SSH_ENABLE_ROOT` must be set to `true`|
227 229 |SSH_USER_PUB_KEY|string||`PathToYourUSER`<br>`RSAPublicKeyFile`|Full path to file. Add SSH (v2) public key(s) from specified file to `authorized_keys` file to enable public key based SSH (v2) authentication of user `USER_NAME`=pi. The specified file can also contain multiple SSH (v2) public keys. SSH protocol version 1 is not supported|
228 230
229 231 ---
230 232
231 233 #### Kernel settings:
232 234
233 235 |Option|Value|default value|value format|desciption|
234 236 |---|---|---|---|---|
235 237 |BUILD_KERNEL||true|`true`\|`false`|Build and install the latest RPi 0/1/2/3/4 Linux kernel. The default RPi 0/1/2/3/ kernel configuration is used most of the time. ENABLE_NEXMON - Changes Kernel Source to [https://github.com/Re4son/](Kali Linux Kernel) Precompiled 32bit kernel for RPI0/1/2/3 by [https://github.com/hypriot/](hypriot) Precompiled 64bit kernel for RPI3/4 by [https://github.com/sakaki-/](sakaki)|
236 238 |CROSS_COMPILE|string|||This sets the cross-compile environment for the compiler. Set by RPI_MODEL|
237 239 |KERNEL_ARCH|string|||This sets the kernel architecture for the compiler. Set by RPI_MODEL|
238 240 |KERNEL_IMAGE|string|||Name of the image file in the boot partition. Set by RPI_MODEL|
239 241 |KERNEL_BRANCH|string|||Name of the requested branch from the GIT location for the RPi Kernel. Default is using the current default branch from the GIT site|
240 242 |KERNEL_DEFCONFIG|string|||Sets the default config for kernel compiling. Set by RPI_MODEL|
241 243 |KERNEL_THREADS|integer|1|`1`\|`2`\|`3`\|...|Number of threads to build the kernel. If not set, the script will automatically determine the maximum number of CPU cores to speed up kernel compilation|
242 244 |KERNEL_HEADERS|boolean|true|`true`\|`false`|Install kernel headers with the built kernel|
243 245 |KERNEL_MENUCONFIG|boolean|false|`true`\|`false`|Start `make menuconfig` interactive menu-driven kernel configuration. The script will continue after `make menuconfig` was terminated|
244 246 |KERNEL_OLDDEFCONFIG|boolean|false|`true`\|`false`|Run `make olddefconfig` to automatically set all new kernel configuration options to their recommended default values|
245 247 |KERNEL_CCACHE|boolean|false|`true`\|`false`|Compile the kernel using ccache. This speeds up kernel recompilation by caching previous compilations and detecting when the same compilation is being done again|
246 248 |KERNEL_REMOVESRC|boolean|true|`true`\|`false`|Remove all kernel sources from the generated OS image after it was built and installed|
247 249 |KERNELSRC_DIR|string||`FullPathToKernelSrcDir`|Full path to a directory named `linux` of [RaspberryPi Linux kernel sources](https://github.com/raspberrypi/linux) that will be copied, configured, build and installed inside the chroot|
248 250 |KERNELSRC_CLEAN|boolean|false|`true`\|`false`|Clean the existing kernel sources directory `KERNELSRC_DIR` (using `make mrproper`) after it was copied to the chroot and before the compilation of the kernel has started. This parameter will be ignored if no `KERNELSRC_DIR` was specified or if `KERNELSRC_PREBUILT`=true|
249 251 |KERNELSRC_CONFIG|boolean|true|`true`\|`false`|true=enable custom kernel options. This parameter is automatically set to `true` if no existing kernel sources directory was specified using `KERNELSRC_DIR`. This parameter is ignored if `KERNELSRC_PREBUILT`=true|
250 252 |KERNELSRC_USRCONFIG|string||`FullPathToUserKernel.config`|Copy own config file to kernel `.config`. If `KERNEL_MENUCONFIG`=true then running after copy|
251 253 |KERNELSRC_PREBUILT|boolean|false|`true`\|`false`|With this parameter set to true the script expects the existing kernel sources directory to be already successfully cross-compiled. The parameters `KERNELSRC_CLEAN`, `KERNELSRC_CONFIG`, `KERNELSRC_USRCONFIG` and `KERNEL_MENUCONFIG` are ignored and no kernel compilation tasks are performed|
252 254 |RPI_FIRMWARE_DIR|string||`FullPathToFolder`|Full path to a directory named `firmware`, containing a local copy of the firmware from the [RaspberryPi firmware project](https://github.com/raspberrypi/firmware). Default is to download the latest firmware directly from the project|
253 255 |KERNEL_DEFAULT_GOV|string|ondemand|`performance`\|`powersave`<br>\|`userspace`\|`ondemand`<br>\|`conservative`\|`schedutil`|Set the default cpu governor at kernel compilation|
254 256 |KERNEL_NF|boolean|false|`true`\|`false`|Enable Netfilter modules as kernel modules. You want that for iptables|
255 257 |KERNEL_VIRT|boolean|false|`true`\|`false`|Enable Kernel KVM support (/dev/kvm)|
256 258 |KERNEL_ZSWAP|boolean|false|`true`\|`false`|Enable Kernel Zswap support. Best use on high RAM load and mediocre CPU load usecases|
257 259 |KERNEL_BPF|boolean|true|`true`\|`false`|Allow attaching eBPF programs to a cgroup using the bpf syscall (CONFIG_BPF_SYSCALL CONFIG_CGROUP_BPF) [systemd wants it - File /lib/systemd/system/systemd-journald.server:36 configures an IP firewall (IPAddressDeny=all), but the local system does not support BPF/cgroup based firewalls]|
258 260 |KERNEL_SECURITY|boolean|false|`true`\|`false`|Enables Apparmor, integrity subsystem, auditing|
259 261 |KERNEL_BTRFS|boolean|false|`true`\|`false`|enable btrfs kernel support|
260 262 |KERNEL_POEHAT|boolean|false|`true`\|`false`|enable Enable RPI POE HAT fan kernel support|
261 263 |KERNEL_NSPAWN|boolean|false|`true`\|`false`|Enable per-interface network priority control - for systemd-nspawn|
262 264 |KERNEL_DHKEY|boolean|true|`true`\|`false`|Diffie-Hellman operations on retained keys - required for >keyutils-1.6|
263 265
264 266 ---
265 267
266 268 #### Reduce disk usage:
267 269 The following list of parameters is ignored if `ENABLE_REDUCE`=false.
268 270
269 271 |Option|Value|default value|value format|desciption|
270 272 |---|---|---|---|---|
271 273 |ENABLE_REDUCE|boolean|false|`true`\|`false`|Reduce the disk space usage by deleting packages and files. See `REDUCE_*` parameters for detailed information|
272 274 |REDUCE_APT|boolean|true|`true`\|`false`|Configure APT to use compressed package repository lists and no package caching files|
273 275 |REDUCE_DOC|boolean|false|`true`\|`false`|Remove all doc files (harsh). Configure APT to not include doc files on future `apt-get` package installations|
274 276 |REDUCE_MAN|boolean|false|`true`\|`false`|Remove all man pages and info files (harsh). Configure APT to not include man pages on future `apt-get` package installations|
275 277 |REDUCE_VIM|boolean|false|`true`\|`false`|Replace `vim-tiny` package by `levee` a tiny vim clone|
276 278 |REDUCE_BASH|boolean|false|`true`\|`false`|Remove `bash` package and switch to `dash` shell (experimental)|
277 279 |REDUCE_HWDB|boolean|false|`true`\|`false`|Remove PCI related hwdb files (experimental)|
278 280 |REDUCE_SSHD|boolean|false|`true`\|`false`|Replace `openssh-server` with `dropbear`|
279 281 |REDUCE_LOCALE|boolean|false|`true`\|`false`|Remove all `locale` translation files|
280 282 |REDUCE_KERNEL|boolean|false|`true`\|`false`|Reduce the size of the generated kernel by removing unwanted devices, network and filesystem drivers (experimental)|
281 283 ---
282 284
283 285 #### Encrypted root partition:
284 286 #### On first boot, you will be asked to enter you password several time
285 287 #### See cryptsetup options for a more information about opttion values(https://wiki.archlinux.org/index.php/Dm-crypt/Device_encryption)
286 288
287 289 |Option|Value|default value|value format|desciption|
288 290 |---|---|---|---|---|
289 291 |ENABLE_CRYPTFS|boolean|false|`true`\|`false`|Enable full system encryption with dm-crypt. Setup a fully LUKS encrypted root partition (aes-xts-plain64:sha512) and generate required initramfs. The /boot directory will not be encrypted. This parameter will be ignored if `BUILD_KERNEL`=false. `ENABLE_CRYPTFS` is experimental|
290 292 |CRYPTFS_PASSWORD|string||`YourPasswordToUnlockCrypto`|Set password of the encrypted root partition. This parameter is mandatory if `ENABLE_CRYPTFS`=true|
291 293 |CRYPTFS_MAPPING|string|secure|`YourDevMNapperName`|crypsetup device-mapper name|
292 294 |CRYPTFS_CIPHER|string|aes-xts-plain64|`aes-cbc-essiv:sha256`|cryptsetup cipher `aes-xts*` ciphers are strongly recommended|
293 295 |CRYPTFS_HASH|string|sha256|`sha256`\|`sha512`|cryptsetup hash algorithm|
294 296 |CRYPTFS_XTSKEYSIZE|integer|256|`256`\|`512`||Sets key size in bits. The argument has to be a multiple of 8|
295 297 |CRYPTFS_DROPBEAR|boolean|false|`true`\|`false`|true=Enable Dropbear Initramfs support\|false=disable dropbear|
296 298 |CRYPTFS_DROPBEAR_PUBKEY|string||`PathToYourPublicDropbearKeyFile`|Full path to dropbear Public RSA-OpenSSH Key|
297 299
298 300 ---
299 301
300 302 #### Build settings:
301 303 |Option|Value|default value|value format|desciption|
302 304 |---|---|---|---|---|
303 305 |BASEDIR|string||`FullPathToScriptRootDir`|If unset start from scriptroot or set to Full path to rpi123-gen-image directory|
304 306 |IMAGE_NAME|string||`YourImageName`|if unset creates a name after this template: rpi`RPI_MODEL`-`RELEASE`-`RELEASE_ARCH`|
305 307
306 308 ---
307 309
308 310 ## Understanding the script
309 311 The functions of this script that are required for the different stages of the bootstrapping are split up into single files located inside the `bootstrap.d` directory. During the bootstrapping every script in this directory gets executed in lexicographical order:
310 312
311 313 | Script | Description |
312 314 | --- | --- |
313 315 | `10-bootstrap.sh` | Debootstrap basic system |
314 316 | `11-apt.sh` | Setup APT repositories |
315 317 | `12-locale.sh` | Setup Locales and keyboard settings |
316 318 | `13-kernel.sh` | Build and install RPi 0/1/2/3 Kernel |
317 319 | `14-fstab.sh` | Setup fstab and initramfs |
318 320 | `15-rpi-config.sh` | Setup RPi 0/1/2/3 config and cmdline |
319 321 | `20-networking.sh` | Setup Networking |
320 322 | `21-firewall.sh` | Setup Firewall |
321 323 | `30-security.sh` | Setup Users and Security settings |
322 324 | `31-logging.sh` | Setup Logging |
323 325 | `32-sshd.sh` | Setup SSH and public keys |
324 326 | `41-uboot.sh` | Build and Setup U-Boot |
325 327 | `42-fbturbo.sh` | Build and Setup fbturbo Xorg driver |
326 328 | `43-videocore.sh` | Build and Setup videocore libraries |
327 329 | `50-firstboot.sh` | First boot actions |
328 330 | `99-reduce.sh` | Reduce the disk space usage |
329 331
330 332 All the required configuration files that will be copied to the generated OS image are located inside the `files` directory. It is not recommended to modify these configuration files manually.
331 333
332 334 | Directory | Description |
333 335 | --- | --- |
334 336 | `apt` | APT management configuration files |
335 337 | `boot` | Boot and RPi 0/1/2/3 configuration files |
336 338 | `dpkg` | Package Manager configuration |
337 339 | `etc` | Configuration files and rc scripts |
338 340 | `firstboot` | Scripts that get executed on first boot |
339 341 | `initramfs` | Initramfs scripts |
340 342 | `iptables` | Firewall configuration files |
341 343 | `locales` | Locales configuration |
342 344 | `modules` | Kernel Modules configuration |
343 345 | `mount` | Fstab configuration |
344 346 | `network` | Networking configuration files |
345 347 | `sysctl.d` | Swapping and Network Hardening configuration |
346 348 | `xorg` | fbturbo Xorg driver configuration |
347 349
348 350 ## Custom packages and scripts
349 351 Debian custom packages, i.e. those not in the debian repositories, can be installed by placing them in the `packages` directory. They are installed immediately after packages from the repositories are installed. Any dependencies listed in the custom packages will be downloaded automatically from the repositories. Do not list these custom packages in `APT_INCLUDES`.
350 352
351 353 Scripts in the custom.d directory will be executed after all other installation is complete but before the image is created.
352 354
353 355 ## Logging of the bootstrapping process
354 356 All information related to the bootstrapping process and the commands executed by the `rpi23-gen-image.sh` script can easily be saved into a logfile. The common shell command `script` can be used for this purpose:
355 357
356 358 ```shell
357 359 script -c 'APT_SERVER=ftp.de.debian.org ./rpi23-gen-image.sh' ./build.log
358 360 ```
359 361
360 362 ## Flashing the image file
361 363 After the image file was successfully created by the `rpi23-gen-image.sh` script it can be copied to the microSD card that will be used by the RPi 0/1/2/3 computer. This can be performed by using the tools `bmaptool` or `dd`. Using `bmaptool` will probably speed-up the copy process because `bmaptool` copies more wisely than `dd`.
362 364
363 365 ##### Flashing examples:
364 366 ```shell
365 367 bmaptool copy ./images/buster/2017-01-23-rpi3-buster.img /dev/mmcblk0
366 368 dd bs=4M if=./images/buster/2017-01-23-rpi3-buster.img of=/dev/mmcblk0
367 369 ```
368 370 If you have set `ENABLE_SPLITFS`, copy the `-frmw` image on the microSD card, then the `-root` one on the USB drive:
369 371 ```shell
370 372 bmaptool copy ./images/buster/2017-01-23-rpi3-buster-frmw.img /dev/mmcblk0
371 373 bmaptool copy ./images/buster/2017-01-23-rpi3-buster-root.img /dev/sdc
372 374 ```
373 375
374 376 ## QEMU emulation
375 377 Start QEMU full system emulation:
376 378 ```shell
377 379 qemu-system-arm -m 2048M -M vexpress-a15 -cpu cortex-a15 -kernel kernel7.img -no-reboot -dtb vexpress-v2p-ca15_a7.dtb -sd ${IMAGE_NAME}.qcow2 -append "root=/dev/mmcblk0p2 rw rootfstype=ext4 console=tty1"
378 380 ```
379 381
380 382 Start QEMU full system emulation and output to console:
381 383 ```shell
382 384 qemu-system-arm -m 2048M -M vexpress-a15 -cpu cortex-a15 -kernel kernel7.img -no-reboot -dtb vexpress-v2p-ca15_a7.dtb -sd ${IMAGE_NAME}.qcow2 -append "root=/dev/mmcblk0p2 rw rootfstype=ext4 console=ttyAMA0,115200 init=/bin/systemd" -serial stdio
383 385 ```
384 386
385 387 Start QEMU full system emulation with SMP and output to console:
386 388 ```shell
387 389 qemu-system-arm -m 2048M -M vexpress-a15 -cpu cortex-a15 -smp cpus=2,maxcpus=2 -kernel kernel7.img -no-reboot -dtb vexpress-v2p-ca15_a7.dtb -sd ${IMAGE_NAME}.qcow2 -append "root=/dev/mmcblk0p2 rw rootfstype=ext4 console=ttyAMA0,115200 init=/bin/systemd" -serial stdio
388 390 ```
389 391
390 392 Start QEMU full system emulation with cryptfs, initramfs and output to console:
391 393 ```shell
392 394 qemu-system-arm -m 2048M -M vexpress-a15 -cpu cortex-a15 -kernel kernel7.img -no-reboot -dtb vexpress-v2p-ca15_a7.dtb -sd ${IMAGE_NAME}.qcow2 -initrd "initramfs-${KERNEL_VERSION}" -append "root=/dev/mapper/secure cryptdevice=/dev/mmcblk0p2:secure rw rootfstype=ext4 console=ttyAMA0,115200 init=/bin/systemd" -serial stdio
393 395 ```
394 396
395 397 ## External links and references
396 398 * [Debian worldwide mirror sites](https://www.debian.org/mirror/list)
397 399 * [Debian Raspberry Pi 2 Wiki](https://wiki.debian.org/RaspberryPi2)
398 400 * [Debian CrossToolchains Wiki](https://wiki.debian.org/CrossToolchains)
399 401 * [Official Raspberry Pi Firmware on github](https://github.com/raspberrypi/firmware)
400 402 * [Official Raspberry Pi Kernel on github](https://github.com/raspberrypi/linux)
401 403 * [U-BOOT git repository](https://git.denx.de/?p=u-boot.git;a=summary)
402 404 * [Xorg DDX driver fbturbo](https://github.com/ssvb/xf86-video-fbturbo)
403 405 * [RPi3 Wireless interface firmware](https://github.com/RPi-Distro/firmware-nonfree/tree/master/brcm)
404 406 * [Collabora RPi2 Kernel precompiled](https://repositories.collabora.co.uk/debian/)
Show file before | Show file after | Hide comments
1 NO CONTENT: file was removed
General Comments 0
Vous devez vous connecter pour laisser un commentaire. Se connecter maintenant