Raspi2-3_GenImage Commit - r243:8733d467a134 · Collaboration Tremplin des Sciences

1

#!/bin/sh

1

#!/bin/sh

2

3

########################################################################

3

########################################################################

4

# rpi23-gen-image.sh 2015-2017

4

# rpi23-gen-image.sh 2015-2017

5

#

5

#

6

# Advanced Debian "jessie", "stretch" and "buster" bootstrap script for RPi2/3

6

# Advanced Debian "jessie", "stretch" and "buster" bootstrap script for RPi2/3

7

#

7

#

8

# This program is free software; you can redistribute it and/or

8

# This program is free software; you can redistribute it and/or

9

# modify it under the terms of the GNU General Public License

9

# modify it under the terms of the GNU General Public License

10

# as published by the Free Software Foundation; either version 2

10

# as published by the Free Software Foundation; either version 2

11

# of the License, or (at your option) any later version.

11

# of the License, or (at your option) any later version.

12

#

12

#

13

14

#

14

#

15

# Big thanks for patches and enhancements by 20+ github contributors!

15

# Big thanks for patches and enhancements by 20+ github contributors!

16

########################################################################

16

########################################################################

17

18

# Are we running as root?

18

# Are we running as root?

19

if [ "$(id -u)" -ne "0" ] ; then

19

if [ "$(id -u)" -ne "0" ] ; then

20

echo "error: this script must be executed with root privileges!"

20

echo "error: this script must be executed with root privileges!"

21

exit 1

21

exit 1

22

fi

22

fi

23

24

# Check if ./functions.sh script exists

24

# Check if ./functions.sh script exists

25

if [ ! -r "./functions.sh" ] ; then

25

if [ ! -r "./functions.sh" ] ; then

26

echo "error: './functions.sh' required script not found!"

26

echo "error: './functions.sh' required script not found!"

27

exit 1

27

exit 1

28

fi

28

fi

29

30

# Load utility functions

30

# Load utility functions

31

. ./functions.sh

31

. ./functions.sh

32

33

# Load parameters from configuration template file

33

# Load parameters from configuration template file

34

if [ ! -z "$CONFIG_TEMPLATE" ] ; then

34

if [ ! -z "$CONFIG_TEMPLATE" ] ; then

35

use_template

35

use_template

36

fi

36

fi

37

38

# Introduce settings

38

# Introduce settings

39

set -e

39

set -e

40

echo -n -e "\n#\n# RPi2/3 Bootstrap Settings\n#\n"

40

echo -n -e "\n#\n# RPi2/3 Bootstrap Settings\n#\n"

41

set -x

41

set -x

42

43

# Raspberry Pi model configuration

43

# Raspberry Pi model configuration

44

RPI_MODEL=${RPI_MODEL:=2}

44

RPI_MODEL=${RPI_MODEL:=2}

45

RPI2_DTB_FILE=${RPI2_DTB_FILE:=bcm2709-rpi-2-b.dtb}

45

RPI2_DTB_FILE=${RPI2_DTB_FILE:=bcm2709-rpi-2-b.dtb}

46

RPI2_UBOOT_CONFIG=${RPI2_UBOOT_CONFIG:=rpi_2_defconfig}

46

RPI2_UBOOT_CONFIG=${RPI2_UBOOT_CONFIG:=rpi_2_defconfig}

47

RPI3_DTB_FILE=${RPI3_DTB_FILE:=bcm2710-rpi-3-b.dtb}

47

RPI3_DTB_FILE=${RPI3_DTB_FILE:=bcm2710-rpi-3-b.dtb}

48

RPI3_UBOOT_CONFIG=${RPI3_UBOOT_CONFIG:=rpi_3_32b_defconfig}

48

RPI3_UBOOT_CONFIG=${RPI3_UBOOT_CONFIG:=rpi_3_32b_defconfig}

49

50

# Debian release

50

# Debian release

51

RELEASE=${RELEASE:=jessie}

51

RELEASE=${RELEASE:=jessie}

52

KERNEL_ARCH=${KERNEL_ARCH:=arm}

52

KERNEL_ARCH=${KERNEL_ARCH:=arm}

53

RELEASE_ARCH=${RELEASE_ARCH:=armhf}

53

RELEASE_ARCH=${RELEASE_ARCH:=armhf}

54

CROSS_COMPILE=${CROSS_COMPILE:=arm-linux-gnueabihf-}

54

CROSS_COMPILE=${CROSS_COMPILE:=arm-linux-gnueabihf-}

55

COLLABORA_KERNEL=${COLLABORA_KERNEL:=3.18.0-trunk-rpi2}

55

COLLABORA_KERNEL=${COLLABORA_KERNEL:=3.18.0-trunk-rpi2}

56

if [ "$KERNEL_ARCH" = "arm64" ] ; then

56

if [ "$KERNEL_ARCH" = "arm64" ] ; then

57

KERNEL_DEFCONFIG=${KERNEL_DEFCONFIG:=bcmrpi3_defconfig}

57

KERNEL_DEFCONFIG=${KERNEL_DEFCONFIG:=bcmrpi3_defconfig}

58

KERNEL_IMAGE=${KERNEL_IMAGE:=kernel8.img}

58

KERNEL_IMAGE=${KERNEL_IMAGE:=kernel8.img}

59

else

59

else

60

KERNEL_DEFCONFIG=${KERNEL_DEFCONFIG:=bcm2709_defconfig}

60

KERNEL_DEFCONFIG=${KERNEL_DEFCONFIG:=bcm2709_defconfig}

61

KERNEL_IMAGE=${KERNEL_IMAGE:=kernel7.img}

61

KERNEL_IMAGE=${KERNEL_IMAGE:=kernel7.img}

62

fi

62

fi

63

if [ "$RELEASE_ARCH" = "arm64" ] ; then

63

if [ "$RELEASE_ARCH" = "arm64" ] ; then

64

QEMU_BINARY=${QEMU_BINARY:=/usr/bin/qemu-aarch64-static}

64

QEMU_BINARY=${QEMU_BINARY:=/usr/bin/qemu-aarch64-static}

65

else

65

else

66

QEMU_BINARY=${QEMU_BINARY:=/usr/bin/qemu-arm-static}

66

QEMU_BINARY=${QEMU_BINARY:=/usr/bin/qemu-arm-static}

67

fi

67

fi

68

KERNEL_BRANCH=${KERNEL_BRANCH:=""}

68

KERNEL_BRANCH=${KERNEL_BRANCH:=""}

69

70

# URLs

70

# URLs

71

KERNEL_URL=${KERNEL_URL:=https://github.com/raspberrypi/linux}

71

KERNEL_URL=${KERNEL_URL:=https://github.com/raspberrypi/linux}

72

FIRMWARE_URL=${FIRMWARE_URL:=https://github.com/raspberrypi/firmware/raw/master/boot}

72

FIRMWARE_URL=${FIRMWARE_URL:=https://github.com/raspberrypi/firmware/raw/master/boot}

73

WLAN_FIRMWARE_URL=${WLAN_FIRMWARE_URL:=https://github.com/RPi-Distro/firmware-nonfree/raw/master/brcm}

73

WLAN_FIRMWARE_URL=${WLAN_FIRMWARE_URL:=https://github.com/RPi-Distro/firmware-nonfree/raw/master/brcm}

74

COLLABORA_URL=${COLLABORA_URL:=https://repositories.collabora.co.uk/debian}

74

COLLABORA_URL=${COLLABORA_URL:=https://repositories.collabora.co.uk/debian}

75

FBTURBO_URL=${FBTURBO_URL:=https://github.com/ssvb/xf86-video-fbturbo.git}

75

FBTURBO_URL=${FBTURBO_URL:=https://github.com/ssvb/xf86-video-fbturbo.git}

76

UBOOT_URL=${UBOOT_URL:=git://git.denx.de/u-boot.git}

76

UBOOT_URL=${UBOOT_URL:=git://git.denx.de/u-boot.git}

77

78

# Build directories

78

# Build directories

79

BASEDIR=${BASEDIR:=$(pwd)/images/${RELEASE}}

79

BASEDIR=${BASEDIR:=$(pwd)/images/${RELEASE}}

80

BUILDDIR="${BASEDIR}/build"

80

BUILDDIR="${BASEDIR}/build"

81

82

# Prepare date string for default image file name

82

# Prepare date string for default image file name

83

DATE="$(date +%Y-%m-%d)"

83

DATE="$(date +%Y-%m-%d)"

84

if [ -z "$KERNEL_BRANCH" ] ; then

84

if [ -z "$KERNEL_BRANCH" ] ; then

85

IMAGE_NAME=${IMAGE_NAME:=${BASEDIR}/${DATE}-${KERNEL_ARCH}-CURRENT-rpi${RPI_MODEL}-${RELEASE}-${RELEASE_ARCH}}

85

IMAGE_NAME=${IMAGE_NAME:=${BASEDIR}/${DATE}-${KERNEL_ARCH}-CURRENT-rpi${RPI_MODEL}-${RELEASE}-${RELEASE_ARCH}}

86

else

86

else

87

IMAGE_NAME=${IMAGE_NAME:=${BASEDIR}/${DATE}-${KERNEL_ARCH}-${KERNEL_BRANCH}-rpi${RPI_MODEL}-${RELEASE}-${RELEASE_ARCH}}

87

IMAGE_NAME=${IMAGE_NAME:=${BASEDIR}/${DATE}-${KERNEL_ARCH}-${KERNEL_BRANCH}-rpi${RPI_MODEL}-${RELEASE}-${RELEASE_ARCH}}

88

fi

88

fi

89

90

# Chroot directories

90

# Chroot directories

91

R="${BUILDDIR}/chroot"

91

R="${BUILDDIR}/chroot"

92

ETC_DIR="${R}/etc"

92

ETC_DIR="${R}/etc"

93

LIB_DIR="${R}/lib"

93

LIB_DIR="${R}/lib"

94

BOOT_DIR="${R}/boot/firmware"

94

BOOT_DIR="${R}/boot/firmware"

95

KERNEL_DIR="${R}/usr/src/linux"

95

KERNEL_DIR="${R}/usr/src/linux"

96

WLAN_FIRMWARE_DIR="${R}/lib/firmware/brcm"

96

WLAN_FIRMWARE_DIR="${R}/lib/firmware/brcm"

97

98

# Firmware directory: Blank if download from github

98

# Firmware directory: Blank if download from github

99

RPI_FIRMWARE_DIR=${RPI_FIRMWARE_DIR:=""}

99

RPI_FIRMWARE_DIR=${RPI_FIRMWARE_DIR:=""}

100

101

# General settings

101

# General settings

102

HOSTNAME=${HOSTNAME:=rpi${RPI_MODEL}-${RELEASE}}

102

HOSTNAME=${HOSTNAME:=rpi${RPI_MODEL}-${RELEASE}}

103

PASSWORD=${PASSWORD:=raspberry}

103

PASSWORD=${PASSWORD:=raspberry}

104

USER_PASSWORD=${USER_PASSWORD:=raspberry}

104

USER_PASSWORD=${USER_PASSWORD:=raspberry}

105

DEFLOCAL=${DEFLOCAL:="en_US.UTF-8"}

105

DEFLOCAL=${DEFLOCAL:="en_US.UTF-8"}

106

TIMEZONE=${TIMEZONE:="Europe/Berlin"}

106

TIMEZONE=${TIMEZONE:="Europe/Berlin"}

107

EXPANDROOT=${EXPANDROOT:=true}

107

EXPANDROOT=${EXPANDROOT:=true}

108

109

# Keyboard settings

109

# Keyboard settings

110

XKB_MODEL=${XKB_MODEL:=""}

110

XKB_MODEL=${XKB_MODEL:=""}

111

XKB_LAYOUT=${XKB_LAYOUT:=""}

111

XKB_LAYOUT=${XKB_LAYOUT:=""}

112

XKB_VARIANT=${XKB_VARIANT:=""}

112

XKB_VARIANT=${XKB_VARIANT:=""}

113

XKB_OPTIONS=${XKB_OPTIONS:=""}

113

XKB_OPTIONS=${XKB_OPTIONS:=""}

114

115

# Network settings (DHCP)

115

# Network settings (DHCP)

116

ENABLE_DHCP=${ENABLE_DHCP:=true}

116

ENABLE_DHCP=${ENABLE_DHCP:=true}

117

118

# Network settings (static)

118

# Network settings (static)

119

NET_ADDRESS=${NET_ADDRESS:=""}

119

NET_ADDRESS=${NET_ADDRESS:=""}

120

NET_GATEWAY=${NET_GATEWAY:=""}

120

NET_GATEWAY=${NET_GATEWAY:=""}

121

NET_DNS_1=${NET_DNS_1:=""}

121

NET_DNS_1=${NET_DNS_1:=""}

122

NET_DNS_2=${NET_DNS_2:=""}

122

NET_DNS_2=${NET_DNS_2:=""}

123

NET_DNS_DOMAINS=${NET_DNS_DOMAINS:=""}

123

NET_DNS_DOMAINS=${NET_DNS_DOMAINS:=""}

124

NET_NTP_1=${NET_NTP_1:=""}

124

NET_NTP_1=${NET_NTP_1:=""}

125

NET_NTP_2=${NET_NTP_2:=""}

125

NET_NTP_2=${NET_NTP_2:=""}

126

127

# APT settings

127

# APT settings

128

APT_PROXY=${APT_PROXY:=""}

128

APT_PROXY=${APT_PROXY:=""}

129

APT_SERVER=${APT_SERVER:="ftp.debian.org"}

129

APT_SERVER=${APT_SERVER:="ftp.debian.org"}

130

131

# Feature settings

131

# Feature settings

132

ENABLE_CONSOLE=${ENABLE_CONSOLE:=true}

132

ENABLE_CONSOLE=${ENABLE_CONSOLE:=true}

133

ENABLE_I2C=${ENABLE_I2C:=false}

133

ENABLE_I2C=${ENABLE_I2C:=false}

134

ENABLE_SPI=${ENABLE_SPI:=false}

134

ENABLE_SPI=${ENABLE_SPI:=false}

135

ENABLE_IPV6=${ENABLE_IPV6:=true}

135

ENABLE_IPV6=${ENABLE_IPV6:=true}

136

ENABLE_SSHD=${ENABLE_SSHD:=true}

136

ENABLE_SSHD=${ENABLE_SSHD:=true}

137

ENABLE_NONFREE=${ENABLE_NONFREE:=false}

137

ENABLE_NONFREE=${ENABLE_NONFREE:=false}

138

ENABLE_WIRELESS=${ENABLE_WIRELESS:=false}

138

ENABLE_WIRELESS=${ENABLE_WIRELESS:=false}

139

ENABLE_SOUND=${ENABLE_SOUND:=true}

139

ENABLE_SOUND=${ENABLE_SOUND:=true}

140

ENABLE_DBUS=${ENABLE_DBUS:=true}

140

ENABLE_DBUS=${ENABLE_DBUS:=true}

141

ENABLE_HWRANDOM=${ENABLE_HWRANDOM:=true}

141

ENABLE_HWRANDOM=${ENABLE_HWRANDOM:=true}

142

ENABLE_MINGPU=${ENABLE_MINGPU:=false}

142

ENABLE_MINGPU=${ENABLE_MINGPU:=false}

143

ENABLE_XORG=${ENABLE_XORG:=false}

143

ENABLE_XORG=${ENABLE_XORG:=false}

144

ENABLE_WM=${ENABLE_WM:=""}

144

ENABLE_WM=${ENABLE_WM:=""}

145

ENABLE_RSYSLOG=${ENABLE_RSYSLOG:=true}

145

ENABLE_RSYSLOG=${ENABLE_RSYSLOG:=true}

146

ENABLE_USER=${ENABLE_USER:=true}

146

ENABLE_USER=${ENABLE_USER:=true}

147

USER_NAME=${USER_NAME:="pi"}

147

USER_NAME=${USER_NAME:="pi"}

148

ENABLE_ROOT=${ENABLE_ROOT:=false}

148

ENABLE_ROOT=${ENABLE_ROOT:=false}

149

150

# SSH settings

150

# SSH settings

151

SSH_ENABLE_ROOT=${SSH_ENABLE_ROOT:=false}

151

SSH_ENABLE_ROOT=${SSH_ENABLE_ROOT:=false}

152

SSH_DISABLE_PASSWORD_AUTH=${SSH_DISABLE_PASSWORD_AUTH:=false}

152

SSH_DISABLE_PASSWORD_AUTH=${SSH_DISABLE_PASSWORD_AUTH:=false}

153

SSH_LIMIT_USERS=${SSH_LIMIT_USERS:=false}

153

SSH_LIMIT_USERS=${SSH_LIMIT_USERS:=false}

154

SSH_ROOT_PUB_KEY=${SSH_ROOT_PUB_KEY:=""}

154

SSH_ROOT_PUB_KEY=${SSH_ROOT_PUB_KEY:=""}

155

SSH_USER_PUB_KEY=${SSH_USER_PUB_KEY:=""}

155

SSH_USER_PUB_KEY=${SSH_USER_PUB_KEY:=""}

156

157

# Advanced settings

157

# Advanced settings

158

ENABLE_MINBASE=${ENABLE_MINBASE:=false}

158

ENABLE_MINBASE=${ENABLE_MINBASE:=false}

159

ENABLE_REDUCE=${ENABLE_REDUCE:=false}

159

ENABLE_REDUCE=${ENABLE_REDUCE:=false}

160

ENABLE_UBOOT=${ENABLE_UBOOT:=false}

160

ENABLE_UBOOT=${ENABLE_UBOOT:=false}

161

UBOOTSRC_DIR=${UBOOTSRC_DIR:=""}

161

UBOOTSRC_DIR=${UBOOTSRC_DIR:=""}

162

ENABLE_FBTURBO=${ENABLE_FBTURBO:=false}

162

ENABLE_FBTURBO=${ENABLE_FBTURBO:=false}

163

FBTURBOSRC_DIR=${FBTURBOSRC_DIR:=""}

163

FBTURBOSRC_DIR=${FBTURBOSRC_DIR:=""}

164

ENABLE_HARDNET=${ENABLE_HARDNET:=false}

164

ENABLE_HARDNET=${ENABLE_HARDNET:=false}

165

ENABLE_IPTABLES=${ENABLE_IPTABLES:=false}

165

ENABLE_IPTABLES=${ENABLE_IPTABLES:=false}

166

ENABLE_SPLITFS=${ENABLE_SPLITFS:=false}

166

ENABLE_SPLITFS=${ENABLE_SPLITFS:=false}

167

ENABLE_INITRAMFS=${ENABLE_INITRAMFS:=false}

167

ENABLE_INITRAMFS=${ENABLE_INITRAMFS:=false}

168

ENABLE_IFNAMES=${ENABLE_IFNAMES:=true}

168

ENABLE_IFNAMES=${ENABLE_IFNAMES:=true}

169

DISABLE_UNDERVOLT_WARNINGS=${DISABLE_UNDERVOLT_WARNINGS:=}

169

DISABLE_UNDERVOLT_WARNINGS=${DISABLE_UNDERVOLT_WARNINGS:=}

170

171

# Kernel compilation settings

171

# Kernel compilation settings

172

BUILD_KERNEL=${BUILD_KERNEL:=false}

172

BUILD_KERNEL=${BUILD_KERNEL:=false}

173

KERNEL_REDUCE=${KERNEL_REDUCE:=false}

173

KERNEL_REDUCE=${KERNEL_REDUCE:=false}

174

KERNEL_THREADS=${KERNEL_THREADS:=1}

174

KERNEL_THREADS=${KERNEL_THREADS:=1}

175

KERNEL_HEADERS=${KERNEL_HEADERS:=true}

175

KERNEL_HEADERS=${KERNEL_HEADERS:=true}

176

KERNEL_MENUCONFIG=${KERNEL_MENUCONFIG:=false}

176

KERNEL_MENUCONFIG=${KERNEL_MENUCONFIG:=false}

177

KERNEL_REMOVESRC=${KERNEL_REMOVESRC:=true}

177

KERNEL_REMOVESRC=${KERNEL_REMOVESRC:=true}

178

if [ "$KERNEL_ARCH" = "arm64" ] ; then

178

if [ "$KERNEL_ARCH" = "arm64" ] ; then

179

KERNEL_BIN_IMAGE=${KERNEL_BIN_IMAGE:="Image"}

179

KERNEL_BIN_IMAGE=${KERNEL_BIN_IMAGE:="Image"}

180

else

180

else

181

KERNEL_BIN_IMAGE=${KERNEL_BIN_IMAGE:="zImage"}

181

KERNEL_BIN_IMAGE=${KERNEL_BIN_IMAGE:="zImage"}

182

fi

182

fi

183

184

# Kernel compilation from source directory settings

184

# Kernel compilation from source directory settings

185

KERNELSRC_DIR=${KERNELSRC_DIR:=""}

185

KERNELSRC_DIR=${KERNELSRC_DIR:=""}

186

KERNELSRC_CLEAN=${KERNELSRC_CLEAN:=false}

186

KERNELSRC_CLEAN=${KERNELSRC_CLEAN:=false}

187

KERNELSRC_CONFIG=${KERNELSRC_CONFIG:=true}

187

KERNELSRC_CONFIG=${KERNELSRC_CONFIG:=true}

188

KERNELSRC_PREBUILT=${KERNELSRC_PREBUILT:=false}

188

KERNELSRC_PREBUILT=${KERNELSRC_PREBUILT:=false}

189

190

# Reduce disk usage settings

190

# Reduce disk usage settings

191

REDUCE_APT=${REDUCE_APT:=true}

191

REDUCE_APT=${REDUCE_APT:=true}

192

REDUCE_DOC=${REDUCE_DOC:=true}

192

REDUCE_DOC=${REDUCE_DOC:=true}

193

REDUCE_MAN=${REDUCE_MAN:=true}

193

REDUCE_MAN=${REDUCE_MAN:=true}

194

REDUCE_VIM=${REDUCE_VIM:=false}

194

REDUCE_VIM=${REDUCE_VIM:=false}

195

REDUCE_BASH=${REDUCE_BASH:=false}

195

REDUCE_BASH=${REDUCE_BASH:=false}

196

REDUCE_HWDB=${REDUCE_HWDB:=true}

196

REDUCE_HWDB=${REDUCE_HWDB:=true}

197

REDUCE_SSHD=${REDUCE_SSHD:=true}

197

REDUCE_SSHD=${REDUCE_SSHD:=true}

198

REDUCE_LOCALE=${REDUCE_LOCALE:=true}

198

REDUCE_LOCALE=${REDUCE_LOCALE:=true}

199

200

# Encrypted filesystem settings

200

# Encrypted filesystem settings

201

ENABLE_CRYPTFS=${ENABLE_CRYPTFS:=false}

201

ENABLE_CRYPTFS=${ENABLE_CRYPTFS:=false}

202

CRYPTFS_PASSWORD=${CRYPTFS_PASSWORD:=""}

202

CRYPTFS_PASSWORD=${CRYPTFS_PASSWORD:=""}

203

CRYPTFS_MAPPING=${CRYPTFS_MAPPING:="secure"}

203

CRYPTFS_MAPPING=${CRYPTFS_MAPPING:="secure"}

204

CRYPTFS_CIPHER=${CRYPTFS_CIPHER:="aes-xts-plain64:sha512"}

204

CRYPTFS_CIPHER=${CRYPTFS_CIPHER:="aes-xts-plain64:sha512"}

205

CRYPTFS_XTSKEYSIZE=${CRYPTFS_XTSKEYSIZE:=512}

205

CRYPTFS_XTSKEYSIZE=${CRYPTFS_XTSKEYSIZE:=512}

206

207

# Stop the Crypto Wars

207

# Stop the Crypto Wars

208

DISABLE_FBI=${DISABLE_FBI:=false}

208

DISABLE_FBI=${DISABLE_FBI:=false}

209

210

# Chroot scripts directory

210

# Chroot scripts directory

211

CHROOT_SCRIPTS=${CHROOT_SCRIPTS:=""}

211

CHROOT_SCRIPTS=${CHROOT_SCRIPTS:=""}

212

213

# Packages required in the chroot build environment

213

# Packages required in the chroot build environment

214

APT_INCLUDES=${APT_INCLUDES:=""}

214

APT_INCLUDES=${APT_INCLUDES:=""}

215

APT_INCLUDES="${APT_INCLUDES},apt-transport-https,apt-utils,ca-certificates,debian-archive-keyring,dialog,sudo,systemd,sysvinit-utils"

215

APT_INCLUDES="${APT_INCLUDES},apt-transport-https,apt-utils,ca-certificates,debian-archive-keyring,dialog,sudo,systemd,sysvinit-utils"

216

217

# Packages required for bootstrapping

217

# Packages required for bootstrapping

218

REQUIRED_PACKAGES="debootstrap debian-archive-keyring qemu-user-static binfmt-support dosfstools rsync bmap-tools whois git bc psmisc dbus sudo"

218

REQUIRED_PACKAGES="debootstrap debian-archive-keyring qemu-user-static binfmt-support dosfstools rsync bmap-tools whois git bc psmisc dbus sudo"

219

MISSING_PACKAGES=""

219

MISSING_PACKAGES=""

220

221

# Packages installed for c/c++ build environment in chroot (keep empty)

221

# Packages installed for c/c++ build environment in chroot (keep empty)

222

COMPILER_PACKAGES=""

222

COMPILER_PACKAGES=""

223

224

set +x

224

set +x

225

226

# Set Raspberry Pi model specific configuration

226

# Set Raspberry Pi model specific configuration

227

if [ "$RPI_MODEL" = 2 ] ; then

227

if [ "$RPI_MODEL" = 2 ] ; then

228

DTB_FILE=${RPI2_DTB_FILE}

228

DTB_FILE=${RPI2_DTB_FILE}

229

UBOOT_CONFIG=${RPI2_UBOOT_CONFIG}

229

UBOOT_CONFIG=${RPI2_UBOOT_CONFIG}

230

elif [ "$RPI_MODEL" = 3 ] ; then

230

elif [ "$RPI_MODEL" = 3 ] ; then

231

DTB_FILE=${RPI3_DTB_FILE}

231

DTB_FILE=${RPI3_DTB_FILE}

232

UBOOT_CONFIG=${RPI3_UBOOT_CONFIG}

232

UBOOT_CONFIG=${RPI3_UBOOT_CONFIG}

233

BUILD_KERNEL=true

233

BUILD_KERNEL=true

234

else

234

else

235

echo "error: Raspberry Pi model ${RPI_MODEL} is not supported!"

235

echo "error: Raspberry Pi model ${RPI_MODEL} is not supported!"

236

exit 1

236

exit 1

237

fi

237

fi

238

239

# Check if the internal wireless interface is supported by the RPi model

239

# Check if the internal wireless interface is supported by the RPi model

240

if [ "$ENABLE_WIRELESS" = true ] && [ "$RPI_MODEL" != 3 ] ; then

240

if [ "$ENABLE_WIRELESS" = true ] && [ "$RPI_MODEL" != 3 ] ; then

241

echo "error: The selected Raspberry Pi model has no internal wireless interface"

241

echo "error: The selected Raspberry Pi model has no internal wireless interface"

242

exit 1

242

exit 1

243

fi

243

fi

244

245

# Check if DISABLE_UNDERVOLT_WARNINGS parameter value is supported

245

# Check if DISABLE_UNDERVOLT_WARNINGS parameter value is supported

246

if [ ! -z "$DISABLE_UNDERVOLT_WARNINGS" ] ; then

246

if [ ! -z "$DISABLE_UNDERVOLT_WARNINGS" ] ; then

247

if [ "$DISABLE_UNDERVOLT_WARNINGS" != 1 ] && [ "$DISABLE_UNDERVOLT_WARNINGS" != 2 ] ; then

247

if [ "$DISABLE_UNDERVOLT_WARNINGS" != 1 ] && [ "$DISABLE_UNDERVOLT_WARNINGS" != 2 ] ; then

248

echo "error: DISABLE_UNDERVOLT_WARNINGS=${DISABLE_UNDERVOLT_WARNINGS} is not supported"

248

echo "error: DISABLE_UNDERVOLT_WARNINGS=${DISABLE_UNDERVOLT_WARNINGS} is not supported"

249

exit 1

249

exit 1

250

fi

250

fi

251

fi

251

fi

252

253

# Build RPi2/3 Linux kernel if required by Debian release

253

# Build RPi2/3 Linux kernel if required by Debian release

254

if [ "$RELEASE" = "stretch" ] || [ "$RELEASE" = "buster" ] ; then

254

if [ "$RELEASE" = "stretch" ] || [ "$RELEASE" = "buster" ] ; then

255

BUILD_KERNEL=true

255

BUILD_KERNEL=true

256

fi

256

fi

257

258

# Add packages required for kernel cross compilation

258

# Add packages required for kernel cross compilation

259

if [ "$BUILD_KERNEL" = true ] ; then

259

if [ "$BUILD_KERNEL" = true ] ; then

260

if [ "$KERNEL_ARCH" = "arm" ] ; then

260

if [ "$KERNEL_ARCH" = "arm" ] ; then

261

REQUIRED_PACKAGES="${REQUIRED_PACKAGES} crossbuild-essential-armhf"

261

REQUIRED_PACKAGES="${REQUIRED_PACKAGES} crossbuild-essential-armhf"

262

else

262

else

263

REQUIRED_PACKAGES="${REQUIRED_PACKAGES} crossbuild-essential-arm64"

263

REQUIRED_PACKAGES="${REQUIRED_PACKAGES} crossbuild-essential-arm64"

264

fi

264

fi

265

fi

265

fi

266

267

# Add libncurses5 to enable kernel menuconfig

267

# Add libncurses5 to enable kernel menuconfig

268

if [ "$KERNEL_MENUCONFIG" = true ] ; then

268

if [ "$KERNEL_MENUCONFIG" = true ] ; then

269

REQUIRED_PACKAGES="${REQUIRED_PACKAGES} libncurses5-dev"

269

REQUIRED_PACKAGES="${REQUIRED_PACKAGES} libncurses5-dev"

270

fi

270

fi

271

272

# Stop the Crypto Wars

272

# Stop the Crypto Wars

273

if [ "$DISABLE_FBI" = true ] ; then

273

if [ "$DISABLE_FBI" = true ] ; then

274

ENABLE_CRYPTFS=true

274

ENABLE_CRYPTFS=true

275

fi

275

fi

276

277

# Add cryptsetup package to enable filesystem encryption

277

# Add cryptsetup package to enable filesystem encryption

278

if [ "$ENABLE_CRYPTFS" = true ] && [ "$BUILD_KERNEL" = true ] ; then

278

if [ "$ENABLE_CRYPTFS" = true ] && [ "$BUILD_KERNEL" = true ] ; then

279

REQUIRED_PACKAGES="${REQUIRED_PACKAGES} cryptsetup"

279

REQUIRED_PACKAGES="${REQUIRED_PACKAGES} cryptsetup"

280

APT_INCLUDES="${APT_INCLUDES},cryptsetup"

280

APT_INCLUDES="${APT_INCLUDES},cryptsetup"

281

282

if [ -z "$CRYPTFS_PASSWORD" ] ; then

282

if [ -z "$CRYPTFS_PASSWORD" ] ; then

283

echo "error: no password defined (CRYPTFS_PASSWORD)!"

283

echo "error: no password defined (CRYPTFS_PASSWORD)!"

284

exit 1

284

exit 1

285

fi

285

fi

286

ENABLE_INITRAMFS=true

286

ENABLE_INITRAMFS=true

287

fi

287

fi

288

289

# Add initramfs generation tools

289

# Add initramfs generation tools

290

if [ "$ENABLE_INITRAMFS" = true ] && [ "$BUILD_KERNEL" = true ] ; then

290

if [ "$ENABLE_INITRAMFS" = true ] && [ "$BUILD_KERNEL" = true ] ; then

291

APT_INCLUDES="${APT_INCLUDES},initramfs-tools"

291

APT_INCLUDES="${APT_INCLUDES},initramfs-tools"

292

fi

292

fi

293

294

# Add device-tree-compiler required for building the U-Boot bootloader

294

# Add device-tree-compiler required for building the U-Boot bootloader

295

if [ "$ENABLE_UBOOT" = true ] ; then

295

if [ "$ENABLE_UBOOT" = true ] ; then

296

APT_INCLUDES="${APT_INCLUDES},device-tree-compiler"

296

APT_INCLUDES="${APT_INCLUDES},device-tree-compiler"

297

fi

297

fi

298

299

# Check if root SSH (v2) public key file exists

299

# Check if root SSH (v2) public key file exists

300

if [ ! -z "$SSH_ROOT_PUB_KEY" ] ; then

300

if [ ! -z "$SSH_ROOT_PUB_KEY" ] ; then

301

if [ ! -f "$SSH_ROOT_PUB_KEY" ] ; then

301

if [ ! -f "$SSH_ROOT_PUB_KEY" ] ; then

302

echo "error: '$SSH_ROOT_PUB_KEY' specified SSH public key file not found (SSH_ROOT_PUB_KEY)!"

302

echo "error: '$SSH_ROOT_PUB_KEY' specified SSH public key file not found (SSH_ROOT_PUB_KEY)!"

303

exit 1

303

exit 1

304

fi

304

fi

305

fi

305

fi

306

307

# Check if $USER_NAME SSH (v2) public key file exists

307

# Check if $USER_NAME SSH (v2) public key file exists

308

if [ ! -z "$SSH_USER_PUB_KEY" ] ; then

308

if [ ! -z "$SSH_USER_PUB_KEY" ] ; then

309

if [ ! -f "$SSH_USER_PUB_KEY" ] ; then

309

if [ ! -f "$SSH_USER_PUB_KEY" ] ; then

310

echo "error: '$SSH_USER_PUB_KEY' specified SSH public key file not found (SSH_USER_PUB_KEY)!"

310

echo "error: '$SSH_USER_PUB_KEY' specified SSH public key file not found (SSH_USER_PUB_KEY)!"

311

exit 1

311

exit 1

312

fi

312

fi

313

fi

313

fi

314

315

# Check if all required packages are installed on the build system

315

# Check if all required packages are installed on the build system

316

for package in $REQUIRED_PACKAGES ; do

316

for package in $REQUIRED_PACKAGES ; do

317

if [ "`dpkg-query -W -f='${Status}' $package`" != "install ok installed" ] ; then

317

if [ "`dpkg-query -W -f='${Status}' $package`" != "install ok installed" ] ; then

318

MISSING_PACKAGES="${MISSING_PACKAGES} $package"

318

MISSING_PACKAGES="${MISSING_PACKAGES} $package"

319

fi

319

fi

320

done

320

done

321

322

# If there are missing packages ask confirmation for install, or exit

322

# If there are missing packages ask confirmation for install, or exit

323

if [ -n "$MISSING_PACKAGES" ] ; then

323

if [ -n "$MISSING_PACKAGES" ] ; then

324

echo "the following packages needed by this script are not installed:"

324

echo "the following packages needed by this script are not installed:"

325

echo "$MISSING_PACKAGES"

325

echo "$MISSING_PACKAGES"

326

327

echo -n "\ndo you want to install the missing packages right now? [y/n] "

327

echo -n "\ndo you want to install the missing packages right now? [y/n] "

328

read confirm

328

read confirm

329

[ "$confirm" != "y" ] && exit 1

329

[ "$confirm" != "y" ] && exit 1

330

331

# Make sure all missing required packages are installed

331

# Make sure all missing required packages are installed

332

apt-get -qq -y install ${MISSING_PACKAGES}

332

apt-get -qq -y install ${MISSING_PACKAGES}

333

fi

333

fi

334

335

# Check if ./bootstrap.d directory exists

335

# Check if ./bootstrap.d directory exists

336

if [ ! -d "./bootstrap.d/" ] ; then

336

if [ ! -d "./bootstrap.d/" ] ; then

337

echo "error: './bootstrap.d' required directory not found!"

337

echo "error: './bootstrap.d' required directory not found!"

338

exit 1

338

exit 1

339

fi

339

fi

340

341

# Check if ./files directory exists

341

# Check if ./files directory exists

342

if [ ! -d "./files/" ] ; then

342

if [ ! -d "./files/" ] ; then

343

echo "error: './files' required directory not found!"

343

echo "error: './files' required directory not found!"

344

exit 1

344

exit 1

345

fi

345

fi

346

347

# Check if specified KERNELSRC_DIR directory exists

347

# Check if specified KERNELSRC_DIR directory exists

348

if [ -n "$KERNELSRC_DIR" ] && [ ! -d "$KERNELSRC_DIR" ] ; then

348

if [ -n "$KERNELSRC_DIR" ] && [ ! -d "$KERNELSRC_DIR" ] ; then

349

echo "error: '${KERNELSRC_DIR}' specified directory not found (KERNELSRC_DIR)!"

349

echo "error: '${KERNELSRC_DIR}' specified directory not found (KERNELSRC_DIR)!"

350

exit 1

350

exit 1

351

fi

351

fi

352

353

# Check if specified UBOOTSRC_DIR directory exists

353

# Check if specified UBOOTSRC_DIR directory exists

354

if [ -n "$UBOOTSRC_DIR" ] && [ ! -d "$UBOOTSRC_DIR" ] ; then

354

if [ -n "$UBOOTSRC_DIR" ] && [ ! -d "$UBOOTSRC_DIR" ] ; then

355

echo "error: '${UBOOTSRC_DIR}' specified directory not found (UBOOTSRC_DIR)!"

355

echo "error: '${UBOOTSRC_DIR}' specified directory not found (UBOOTSRC_DIR)!"

356

exit 1

356

exit 1

357

fi

357

fi

358

359

# Check if specified FBTURBOSRC_DIR directory exists

359

# Check if specified FBTURBOSRC_DIR directory exists

360

if [ -n "$FBTURBOSRC_DIR" ] && [ ! -d "$FBTURBOSRC_DIR" ] ; then

360

if [ -n "$FBTURBOSRC_DIR" ] && [ ! -d "$FBTURBOSRC_DIR" ] ; then

361

echo "error: '${FBTURBOSRC_DIR}' specified directory not found (FBTURBOSRC_DIR)!"

361

echo "error: '${FBTURBOSRC_DIR}' specified directory not found (FBTURBOSRC_DIR)!"

362

exit 1

362

exit 1

363

fi

363

fi

364

365

# Check if specified CHROOT_SCRIPTS directory exists

365

# Check if specified CHROOT_SCRIPTS directory exists

366

if [ -n "$CHROOT_SCRIPTS" ] && [ ! -d "$CHROOT_SCRIPTS" ] ; then

366

if [ -n "$CHROOT_SCRIPTS" ] && [ ! -d "$CHROOT_SCRIPTS" ] ; then

367

echo "error: ${CHROOT_SCRIPTS} specified directory not found (CHROOT_SCRIPTS)!"

367

echo "error: ${CHROOT_SCRIPTS} specified directory not found (CHROOT_SCRIPTS)!"

368

exit 1

368

exit 1

369

fi

369

fi

370

371

# Check if specified device mapping already exists (will be used by cryptsetup)

371

# Check if specified device mapping already exists (will be used by cryptsetup)

372

if [ -r "/dev/mapping/${CRYPTFS_MAPPING}" ] ; then

372

if [ -r "/dev/mapping/${CRYPTFS_MAPPING}" ] ; then

373

echo "error: mapping /dev/mapping/${CRYPTFS_MAPPING} already exists, not proceeding"

373

echo "error: mapping /dev/mapping/${CRYPTFS_MAPPING} already exists, not proceeding"

374

exit 1

374

exit 1

375

fi

375

fi

376

377

# Don't clobber an old build

377

# Don't clobber an old build

378

if [ -e "$BUILDDIR" ] ; then

378

if [ -e "$BUILDDIR" ] ; then

379

echo "error: directory ${BUILDDIR} already exists, not proceeding"

379

echo "error: directory ${BUILDDIR} already exists, not proceeding"

380

exit 1

380

exit 1

381

fi

381

fi

382

383

# Setup chroot directory

383

# Setup chroot directory

384

mkdir -p "${R}"

384

mkdir -p "${R}"

385

386

# Check if build directory has enough of free disk space >512MB

386

# Check if build directory has enough of free disk space >512MB

387

if [ "$(df --output=avail ${BUILDDIR} | sed "1d")" -le "524288" ] ; then

387

if [ "$(df --output=avail ${BUILDDIR} | sed "1d")" -le "524288" ] ; then

388

echo "error: ${BUILDDIR} not enough space left to generate the output image!"

388

echo "error: ${BUILDDIR} not enough space left to generate the output image!"

389

exit 1

389

exit 1

390

fi

390

fi

391

392

set -x

392

set -x

393

394

# Call "cleanup" function on various signals and errors

394

# Call "cleanup" function on various signals and errors

395

trap cleanup 0 1 2 3 6

395

trap cleanup 0 1 2 3 6

396

397

# Add required packages for the minbase installation

397

# Add required packages for the minbase installation

398

if [ "$ENABLE_MINBASE" = true ] ; then

398

if [ "$ENABLE_MINBASE" = true ] ; then

399

APT_INCLUDES="${APT_INCLUDES},vim-tiny,netbase,net-tools,ifupdown"

399

APT_INCLUDES="${APT_INCLUDES},vim-tiny,netbase,net-tools,ifupdown"

400

fi

400

fi

401

402

# Add required locales packages

402

# Add required locales packages

403

if [ "$DEFLOCAL" != "en_US.UTF-8" ] ; then

403

if [ "$DEFLOCAL" != "en_US.UTF-8" ] ; then

404

APT_INCLUDES="${APT_INCLUDES},locales,keyboard-configuration,console-setup"

404

APT_INCLUDES="${APT_INCLUDES},locales,keyboard-configuration,console-setup"

405

fi

405

fi

406

407

# Add parted package, required to get partprobe utility

407

# Add parted package, required to get partprobe utility

408

if [ "$EXPANDROOT" = true ] ; then

408

if [ "$EXPANDROOT" = true ] ; then

409

APT_INCLUDES="${APT_INCLUDES},parted"

409

APT_INCLUDES="${APT_INCLUDES},parted"

410

fi

410

fi

411

412

# Add dbus package, recommended if using systemd

412

# Add dbus package, recommended if using systemd

413

if [ "$ENABLE_DBUS" = true ] ; then

413

if [ "$ENABLE_DBUS" = true ] ; then

414

APT_INCLUDES="${APT_INCLUDES},dbus"

414

APT_INCLUDES="${APT_INCLUDES},dbus"

415

fi

415

fi

416

417

# Add iptables IPv4/IPv6 package

417

# Add iptables IPv4/IPv6 package

418

if [ "$ENABLE_IPTABLES" = true ] ; then

418

if [ "$ENABLE_IPTABLES" = true ] ; then

419

APT_INCLUDES="${APT_INCLUDES},iptables"

419

APT_INCLUDES="${APT_INCLUDES},iptables"

420

fi

420

fi

421

422

# Add openssh server package

422

# Add openssh server package

423

if [ "$ENABLE_SSHD" = true ] ; then

423

if [ "$ENABLE_SSHD" = true ] ; then

424

APT_INCLUDES="${APT_INCLUDES},openssh-server"

424

APT_INCLUDES="${APT_INCLUDES},openssh-server"

425

fi

425

fi

426

427

# Add alsa-utils package

427

# Add alsa-utils package

428

if [ "$ENABLE_SOUND" = true ] ; then

428

if [ "$ENABLE_SOUND" = true ] ; then

429

APT_INCLUDES="${APT_INCLUDES},alsa-utils"

429

APT_INCLUDES="${APT_INCLUDES},alsa-utils"

430

fi

430

fi

431

432

# Add rng-tools package

432

# Add rng-tools package

433

if [ "$ENABLE_HWRANDOM" = true ] ; then

433

if [ "$ENABLE_HWRANDOM" = true ] ; then

434

APT_INCLUDES="${APT_INCLUDES},rng-tools"

434

APT_INCLUDES="${APT_INCLUDES},rng-tools"

435

fi

435

fi

436

437

# Add fbturbo video driver

437

# Add fbturbo video driver

438

if [ "$ENABLE_FBTURBO" = true ] ; then

438

if [ "$ENABLE_FBTURBO" = true ] ; then

439

# Enable xorg package dependencies

439

# Enable xorg package dependencies

440

ENABLE_XORG=true

440

ENABLE_XORG=true

441

fi

441

fi

442

443

# Add user defined window manager package

443

# Add user defined window manager package

444

if [ -n "$ENABLE_WM" ] ; then

444

if [ -n "$ENABLE_WM" ] ; then

445

APT_INCLUDES="${APT_INCLUDES},${ENABLE_WM}"

445

APT_INCLUDES="${APT_INCLUDES},${ENABLE_WM}"

446

447

# Enable xorg package dependencies

447

# Enable xorg package dependencies

448

ENABLE_XORG=true

448

ENABLE_XORG=true

449

fi

449

fi

450

451

# Add xorg package

451

# Add xorg package

452

if [ "$ENABLE_XORG" = true ] ; then

452

if [ "$ENABLE_XORG" = true ] ; then

453

APT_INCLUDES="${APT_INCLUDES},xorg,dbus-x11"

453

APT_INCLUDES="${APT_INCLUDES},xorg,dbus-x11"

454

fi

454

fi

455

456

# Replace selected packages with smaller clones

456

# Replace selected packages with smaller clones

457

if [ "$ENABLE_REDUCE" = true ] ; then

457

if [ "$ENABLE_REDUCE" = true ] ; then

458

# Add levee package instead of vim-tiny

458

# Add levee package instead of vim-tiny

459

if [ "$REDUCE_VIM" = true ] ; then

459

if [ "$REDUCE_VIM" = true ] ; then

460

APT_INCLUDES="$(echo ${APT_INCLUDES} | sed "s/vim-tiny/levee/")"

460

APT_INCLUDES="$(echo ${APT_INCLUDES} | sed "s/vim-tiny/levee/")"

461

fi

461

fi

462

463

# Add dropbear package instead of openssh-server

463

# Add dropbear package instead of openssh-server

464

if [ "$REDUCE_SSHD" = true ] ; then

464

if [ "$REDUCE_SSHD" = true ] ; then

465

APT_INCLUDES="$(echo ${APT_INCLUDES} | sed "s/openssh-server/dropbear/")"

465

APT_INCLUDES="$(echo ${APT_INCLUDES} | sed "s/openssh-server/dropbear/")"

466

fi

466

fi

467

fi

467

fi

468

469

if [ "$RELEASE" != "jessie" ] ; then

470

APT_INCLUDES="${APT_INCLUDES},libnss-systemd"

471

fi

472

469

# Configure kernel sources if no KERNELSRC_DIR

473

# Configure kernel sources if no KERNELSRC_DIR

470

if [ "$BUILD_KERNEL" = true ] && [ -z "$KERNELSRC_DIR" ] ; then

474

if [ "$BUILD_KERNEL" = true ] && [ -z "$KERNELSRC_DIR" ] ; then

471

KERNELSRC_CONFIG=true

475

KERNELSRC_CONFIG=true

472

fi

476

fi

473

477

474

# Configure reduced kernel

478

# Configure reduced kernel

475

if [ "$KERNEL_REDUCE" = true ] ; then

479

if [ "$KERNEL_REDUCE" = true ] ; then

476

KERNELSRC_CONFIG=false

480

KERNELSRC_CONFIG=false

477

fi

481

fi

478

482

479

# Execute bootstrap scripts

483

# Execute bootstrap scripts

480

for SCRIPT in bootstrap.d/*.sh; do

484

for SCRIPT in bootstrap.d/*.sh; do

481

head -n 3 "$SCRIPT"

485

head -n 3 "$SCRIPT"

482

. "$SCRIPT"

486

. "$SCRIPT"

483

done

487

done

484

488

485

## Execute custom bootstrap scripts

489

## Execute custom bootstrap scripts

486

if [ -d "custom.d" ] ; then

490

if [ -d "custom.d" ] ; then

487

for SCRIPT in custom.d/*.sh; do

491

for SCRIPT in custom.d/*.sh; do

488

. "$SCRIPT"

492

. "$SCRIPT"

489

done

493

done

490

fi

494

fi

491

495

492

# Execute custom scripts inside the chroot

496

# Execute custom scripts inside the chroot

493

if [ -n "$CHROOT_SCRIPTS" ] && [ -d "$CHROOT_SCRIPTS" ] ; then

497

if [ -n "$CHROOT_SCRIPTS" ] && [ -d "$CHROOT_SCRIPTS" ] ; then

494

cp -r "${CHROOT_SCRIPTS}" "${R}/chroot_scripts"

498

cp -r "${CHROOT_SCRIPTS}" "${R}/chroot_scripts"

495

chroot_exec /bin/bash -x <<'EOF'

499

chroot_exec /bin/bash -x <<'EOF'

496

for SCRIPT in /chroot_scripts/* ; do

500

for SCRIPT in /chroot_scripts/* ; do

497

if [ -f $SCRIPT -a -x $SCRIPT ] ; then

501

if [ -f $SCRIPT -a -x $SCRIPT ] ; then

498

$SCRIPT

502

$SCRIPT

499

fi

503

fi

500

done

504

done

501

EOF

505

EOF

502

rm -rf "${R}/chroot_scripts"

506

rm -rf "${R}/chroot_scripts"

503

fi

507

fi

504

508

505

# Remove c/c++ build environment from the chroot

509

# Remove c/c++ build environment from the chroot

506

chroot_remove_cc

510

chroot_remove_cc

507

511

508

# Remove apt-utils

512

# Remove apt-utils

509

if [ "$RELEASE" = "jessie" ] ; then

513

if [ "$RELEASE" = "jessie" ] ; then

510

chroot_exec apt-get purge -qq -y --force-yes apt-utils

514

chroot_exec apt-get purge -qq -y --force-yes apt-utils

511

fi

515

fi

512

516

513

# Generate required machine-id

517

# Generate required machine-id

514

MACHINE_ID=$(dbus-uuidgen)

518

MACHINE_ID=$(dbus-uuidgen)

515

echo -n "${MACHINE_ID}" > "${R}/var/lib/dbus/machine-id"

519

echo -n "${MACHINE_ID}" > "${R}/var/lib/dbus/machine-id"

516

echo -n "${MACHINE_ID}" > "${ETC_DIR}/machine-id"

520

echo -n "${MACHINE_ID}" > "${ETC_DIR}/machine-id"

517

521

518

# APT Cleanup

522

# APT Cleanup

519

chroot_exec apt-get -y clean

523

chroot_exec apt-get -y clean

520

chroot_exec apt-get -y autoclean

524

chroot_exec apt-get -y autoclean

521

chroot_exec apt-get -y autoremove

525

chroot_exec apt-get -y autoremove

522

526

523

# Unmount mounted filesystems

527

# Unmount mounted filesystems

524

umount -l "${R}/proc"

528

umount -l "${R}/proc"

525

umount -l "${R}/sys"

529

umount -l "${R}/sys"

526

530

527

# Clean up directories

531

# Clean up directories

528

rm -rf "${R}/run/*"

532

rm -rf "${R}/run/*"

529

rm -rf "${R}/tmp/*"

533

rm -rf "${R}/tmp/*"

530

534

531

# Clean up files

535

# Clean up files

532

rm -f "${ETC_DIR}/ssh/ssh_host_*"

536

rm -f "${ETC_DIR}/ssh/ssh_host_*"

533

rm -f "${ETC_DIR}/dropbear/dropbear_*"

537

rm -f "${ETC_DIR}/dropbear/dropbear_*"

534

rm -f "${ETC_DIR}/apt/sources.list.save"

538

rm -f "${ETC_DIR}/apt/sources.list.save"

535

rm -f "${ETC_DIR}/resolvconf/resolv.conf.d/original"

539

rm -f "${ETC_DIR}/resolvconf/resolv.conf.d/original"

536

rm -f "${ETC_DIR}/*-"

540

rm -f "${ETC_DIR}/*-"

537

rm -f "${ETC_DIR}/apt/apt.conf.d/10proxy"

541

rm -f "${ETC_DIR}/apt/apt.conf.d/10proxy"

538

rm -f "${ETC_DIR}/resolv.conf"

542

rm -f "${ETC_DIR}/resolv.conf"

539

rm -f "${R}/root/.bash_history"

543

rm -f "${R}/root/.bash_history"

540

rm -f "${R}/var/lib/urandom/random-seed"

544

rm -f "${R}/var/lib/urandom/random-seed"

541

rm -f "${R}/initrd.img"

545

rm -f "${R}/initrd.img"

542

rm -f "${R}/vmlinuz"

546

rm -f "${R}/vmlinuz"

543

rm -f "${R}${QEMU_BINARY}"

547

rm -f "${R}${QEMU_BINARY}"

544

548

545

# Calculate size of the chroot directory in KB

549

# Calculate size of the chroot directory in KB

546

CHROOT_SIZE=$(expr `du -s "${R}" | awk '{ print $1 }'`)

550

CHROOT_SIZE=$(expr `du -s "${R}" | awk '{ print $1 }'`)

547

551

548

# Calculate the amount of needed 512 Byte sectors

552

# Calculate the amount of needed 512 Byte sectors

549

TABLE_SECTORS=$(expr 1 \* 1024 \* 1024 \/ 512)

553

TABLE_SECTORS=$(expr 1 \* 1024 \* 1024 \/ 512)

550

FRMW_SECTORS=$(expr 64 \* 1024 \* 1024 \/ 512)

554

FRMW_SECTORS=$(expr 64 \* 1024 \* 1024 \/ 512)

551

ROOT_OFFSET=$(expr ${TABLE_SECTORS} + ${FRMW_SECTORS})

555

ROOT_OFFSET=$(expr ${TABLE_SECTORS} + ${FRMW_SECTORS})

552

556

553

# The root partition is EXT4

557

# The root partition is EXT4

554

# This means more space than the actual used space of the chroot is used.

558

# This means more space than the actual used space of the chroot is used.

555

# As overhead for journaling and reserved blocks 25% are added.

559

# As overhead for journaling and reserved blocks 35% are added.

556

ROOT_SECTORS=$(expr $(expr ${CHROOT_SIZE} + ${CHROOT_SIZE} \/ 100 \* 25) \* 1024 \/ 512)

560

ROOT_SECTORS=$(expr $(expr ${CHROOT_SIZE} + ${CHROOT_SIZE} \/ 100 \* 35) \* 1024 \/ 512)

557

561

558

# Calculate required image size in 512 Byte sectors

562

# Calculate required image size in 512 Byte sectors

559

IMAGE_SECTORS=$(expr ${TABLE_SECTORS} + ${FRMW_SECTORS} + ${ROOT_SECTORS})

563

IMAGE_SECTORS=$(expr ${TABLE_SECTORS} + ${FRMW_SECTORS} + ${ROOT_SECTORS})

560

564

561

# Prepare image file

565

# Prepare image file

562

if [ "$ENABLE_SPLITFS" = true ] ; then

566

if [ "$ENABLE_SPLITFS" = true ] ; then

563

dd if=/dev/zero of="$IMAGE_NAME-frmw.img" bs=512 count=${TABLE_SECTORS}

567

dd if=/dev/zero of="$IMAGE_NAME-frmw.img" bs=512 count=${TABLE_SECTORS}

564

dd if=/dev/zero of="$IMAGE_NAME-frmw.img" bs=512 count=0 seek=${FRMW_SECTORS}

568

dd if=/dev/zero of="$IMAGE_NAME-frmw.img" bs=512 count=0 seek=${FRMW_SECTORS}

565

dd if=/dev/zero of="$IMAGE_NAME-root.img" bs=512 count=${TABLE_SECTORS}

569

dd if=/dev/zero of="$IMAGE_NAME-root.img" bs=512 count=${TABLE_SECTORS}

566

dd if=/dev/zero of="$IMAGE_NAME-root.img" bs=512 count=0 seek=${ROOT_SECTORS}

570

dd if=/dev/zero of="$IMAGE_NAME-root.img" bs=512 count=0 seek=${ROOT_SECTORS}

567

571

568

# Write firmware/boot partition tables

572

# Write firmware/boot partition tables

569

sfdisk -q -L -uS -f "$IMAGE_NAME-frmw.img" 2> /dev/null <<EOM

573

sfdisk -q -L -uS -f "$IMAGE_NAME-frmw.img" 2> /dev/null <<EOM

570

${TABLE_SECTORS},${FRMW_SECTORS},c,*

574

${TABLE_SECTORS},${FRMW_SECTORS},c,*

571

EOM

575

EOM

572

576

573

# Write root partition table

577

# Write root partition table

574

sfdisk -q -L -uS -f "$IMAGE_NAME-root.img" 2> /dev/null <<EOM

578

sfdisk -q -L -uS -f "$IMAGE_NAME-root.img" 2> /dev/null <<EOM

575

${TABLE_SECTORS},${ROOT_SECTORS},83

579

${TABLE_SECTORS},${ROOT_SECTORS},83

576

EOM

580

EOM

577

581

578

# Setup temporary loop devices

582

# Setup temporary loop devices

579

FRMW_LOOP="$(losetup -o 1M --sizelimit 64M -f --show $IMAGE_NAME-frmw.img)"

583

FRMW_LOOP="$(losetup -o 1M --sizelimit 64M -f --show $IMAGE_NAME-frmw.img)"

580

ROOT_LOOP="$(losetup -o 1M -f --show $IMAGE_NAME-root.img)"

584

ROOT_LOOP="$(losetup -o 1M -f --show $IMAGE_NAME-root.img)"

581

else # ENABLE_SPLITFS=false

585

else # ENABLE_SPLITFS=false

582

dd if=/dev/zero of="$IMAGE_NAME.img" bs=512 count=${TABLE_SECTORS}

586

dd if=/dev/zero of="$IMAGE_NAME.img" bs=512 count=${TABLE_SECTORS}

583

dd if=/dev/zero of="$IMAGE_NAME.img" bs=512 count=0 seek=${IMAGE_SECTORS}

587

dd if=/dev/zero of="$IMAGE_NAME.img" bs=512 count=0 seek=${IMAGE_SECTORS}

584

588

585

# Write partition table

589

# Write partition table

586

sfdisk -q -L -uS -f "$IMAGE_NAME.img" 2> /dev/null <<EOM

590

sfdisk -q -L -uS -f "$IMAGE_NAME.img" 2> /dev/null <<EOM

587

${TABLE_SECTORS},${FRMW_SECTORS},c,*

591

${TABLE_SECTORS},${FRMW_SECTORS},c,*

588

${ROOT_OFFSET},${ROOT_SECTORS},83

592

${ROOT_OFFSET},${ROOT_SECTORS},83

589

EOM

593

EOM

590

594

591

# Setup temporary loop devices

595

# Setup temporary loop devices

592

FRMW_LOOP="$(losetup -o 1M --sizelimit 64M -f --show $IMAGE_NAME.img)"

596

FRMW_LOOP="$(losetup -o 1M --sizelimit 64M -f --show $IMAGE_NAME.img)"

593

ROOT_LOOP="$(losetup -o 65M -f --show $IMAGE_NAME.img)"

597

ROOT_LOOP="$(losetup -o 65M -f --show $IMAGE_NAME.img)"

594

fi

598

fi

595

599

596

if [ "$ENABLE_CRYPTFS" = true ] ; then

600

if [ "$ENABLE_CRYPTFS" = true ] ; then

597

# Create dummy ext4 fs

601

# Create dummy ext4 fs

598

mkfs.ext4 "$ROOT_LOOP"

602

mkfs.ext4 "$ROOT_LOOP"

599

603

600

# Setup password keyfile

604

# Setup password keyfile

601

touch .password

605

touch .password

602

chmod 600 .password

606

chmod 600 .password

603

echo -n ${CRYPTFS_PASSWORD} > .password

607

echo -n ${CRYPTFS_PASSWORD} > .password

604

608

605

# Initialize encrypted partition

609

# Initialize encrypted partition

606

echo "YES" | cryptsetup luksFormat "${ROOT_LOOP}" -c "${CRYPTFS_CIPHER}" -s "${CRYPTFS_XTSKEYSIZE}" .password

610

echo "YES" | cryptsetup luksFormat "${ROOT_LOOP}" -c "${CRYPTFS_CIPHER}" -s "${CRYPTFS_XTSKEYSIZE}" .password

607

611

608

# Open encrypted partition and setup mapping

612

# Open encrypted partition and setup mapping

609

cryptsetup luksOpen "${ROOT_LOOP}" -d .password "${CRYPTFS_MAPPING}"

613

cryptsetup luksOpen "${ROOT_LOOP}" -d .password "${CRYPTFS_MAPPING}"

610

614

611

# Secure delete password keyfile

615

# Secure delete password keyfile

612

shred -zu .password

616

shred -zu .password

613

617

614

# Update temporary loop device

618

# Update temporary loop device

615

ROOT_LOOP="/dev/mapper/${CRYPTFS_MAPPING}"

619

ROOT_LOOP="/dev/mapper/${CRYPTFS_MAPPING}"

616

620

617

# Wipe encrypted partition (encryption cipher is used for randomness)

621

# Wipe encrypted partition (encryption cipher is used for randomness)

618

dd if=/dev/zero of="${ROOT_LOOP}" bs=512 count=$(blockdev --getsz "${ROOT_LOOP}")

622

dd if=/dev/zero of="${ROOT_LOOP}" bs=512 count=$(blockdev --getsz "${ROOT_LOOP}")

619

fi

623

fi

620

624

621

# Build filesystems

625

# Build filesystems

622

mkfs.vfat "$FRMW_LOOP"

626

mkfs.vfat "$FRMW_LOOP"

623

mkfs.ext4 "$ROOT_LOOP"

627

mkfs.ext4 "$ROOT_LOOP"

624

628

625

# Mount the temporary loop devices

629

# Mount the temporary loop devices

626

mkdir -p "$BUILDDIR/mount"

630

mkdir -p "$BUILDDIR/mount"

627

mount "$ROOT_LOOP" "$BUILDDIR/mount"

631

mount "$ROOT_LOOP" "$BUILDDIR/mount"

628

632

629

mkdir -p "$BUILDDIR/mount/boot/firmware"

633

mkdir -p "$BUILDDIR/mount/boot/firmware"

630

mount "$FRMW_LOOP" "$BUILDDIR/mount/boot/firmware"

634

mount "$FRMW_LOOP" "$BUILDDIR/mount/boot/firmware"

631

635

632

# Copy all files from the chroot to the loop device mount point directory

636

# Copy all files from the chroot to the loop device mount point directory

633

rsync -a "${R}/" "$BUILDDIR/mount/"

637

rsync -a "${R}/" "$BUILDDIR/mount/"

634

638

635

# Unmount all temporary loop devices and mount points

639

# Unmount all temporary loop devices and mount points

636

cleanup

640

cleanup

637

641

638

# Create block map file(s) of image(s)

642

# Create block map file(s) of image(s)

639

if [ "$ENABLE_SPLITFS" = true ] ; then

643

if [ "$ENABLE_SPLITFS" = true ] ; then

640

# Create block map files for "bmaptool"

644

# Create block map files for "bmaptool"

641

bmaptool create -o "$IMAGE_NAME-frmw.bmap" "$IMAGE_NAME-frmw.img"

645

bmaptool create -o "$IMAGE_NAME-frmw.bmap" "$IMAGE_NAME-frmw.img"

642

bmaptool create -o "$IMAGE_NAME-root.bmap" "$IMAGE_NAME-root.img"

646

bmaptool create -o "$IMAGE_NAME-root.bmap" "$IMAGE_NAME-root.img"

643

647

644

# Image was successfully created

648

# Image was successfully created

645

echo "$IMAGE_NAME-frmw.img ($(expr $ ${TABLE_SECTORS} + ${FRMW_SECTORS} $ \* 512 \/ 1024 \/ 1024)M)" ": successfully created"

649

echo "$IMAGE_NAME-frmw.img ($(expr $ ${TABLE_SECTORS} + ${FRMW_SECTORS} $ \* 512 \/ 1024 \/ 1024)M)" ": successfully created"

646

echo "$IMAGE_NAME-root.img ($(expr $ ${TABLE_SECTORS} + ${ROOT_SECTORS} $ \* 512 \/ 1024 \/ 1024)M)" ": successfully created"

650

echo "$IMAGE_NAME-root.img ($(expr $ ${TABLE_SECTORS} + ${ROOT_SECTORS} $ \* 512 \/ 1024 \/ 1024)M)" ": successfully created"

647

else

651

else

648

# Create block map file for "bmaptool"

652

# Create block map file for "bmaptool"

649

bmaptool create -o "$IMAGE_NAME.bmap" "$IMAGE_NAME.img"

653

bmaptool create -o "$IMAGE_NAME.bmap" "$IMAGE_NAME.img"

650

654

651

# Image was successfully created

655

# Image was successfully created

652

echo "$IMAGE_NAME.img ($(expr $ ${TABLE_SECTORS} + ${FRMW_SECTORS} + ${ROOT_SECTORS} $ \* 512 \/ 1024 \/ 1024)M)" ": successfully created"

656

echo "$IMAGE_NAME.img ($(expr $ ${TABLE_SECTORS} + ${FRMW_SECTORS} + ${ROOT_SECTORS} $ \* 512 \/ 1024 \/ 1024)M)" ": successfully created"

653

fi

657

fi

	Site-wide shortcuts
/	Use quick search box
g h	Goto home page
g g	Goto my private gists page
g G	Goto my public gists page
g 0-9	Goto bookmarked items from 0-9
n r	New repository page
n g	New gist page

	Dépôts
g s	Goto summary page
g c	Goto changelog page
g f	Goto files page
g F	Goto files page with file search activated
g p	Goto pull requests page
g o	Goto repository settings
g O	Goto repository access permissions settings
t s	Toggle sidebar on some pages

             #
             # Setup Firewall
             #
             # Load utility functions
             . ./functions.sh
             if [ "$ENABLE_IPTABLES" = true ] ; then
               # Create iptables configuration directory
               mkdir -p "${ETC_DIR}/iptables"
               # Install iptables systemd service
               install_readonly files/iptables/iptables.service "${ETC_DIR}/systemd/system/iptables.service"
               # Install flush-table script called by iptables service
               install_exec files/iptables/flush-iptables.sh "${ETC_DIR}/iptables/flush-iptables.sh"
               # Install iptables rule file
               install_readonly files/iptables/iptables.rules "${ETC_DIR}/iptables/iptables.rules"
               # Reload systemd configuration and enable iptables service
               chroot_exec systemctl daemon-reload
               chroot_exec systemctl enable iptables.service
               if [ "$ENABLE_IPV6" = true ] ; then
                 # Install ip6tables systemd service
                 install_readonly files/iptables/ip6tables.service "${ETC_DIR}/systemd/system/ip6tables.service"
                 # Install ip6tables file
                 install_exec files/iptables/flush-ip6tables.sh "${ETC_DIR}/iptables/flush-ip6tables.sh"
                 install_readonly files/iptables/ip6tables.rules "${ETC_DIR}/iptables/ip6tables.rules"
                 # Reload systemd configuration and enable iptables service
                 chroot_exec systemctl daemon-reload
                 chroot_exec systemctl enable ip6tables.service
               fi
-            fi
+              if [ "$ENABLE_SSHD" = false ] ; then
-            if [ "$ENABLE_SSHD" = false ] ; then
+               # Remove SSHD related iptables rules
-             # Remove SSHD related iptables rules
+               sed -i "/^#/! {/SSH/ s/^/# /}" "${ETC_DIR}/iptables/iptables.rules" 2> /dev/null
-             sed -i "/^#/! {/SSH/ s/^/# /}" "${ETC_DIR}/iptables/iptables.rules" 2> /dev/null
+               sed -i "/^#/! {/SSH/ s/^/# /}" "${ETC_DIR}/iptables/ip6tables.rules" 2> /dev/null
-             sed -i "/^#/! {/SSH/ s/^/# /}" "${ETC_DIR}/iptables/ip6tables.rules" 2> /dev/null
+              fi
             fi

             #!/bin/sh
             ########################################################################
             # rpi23-gen-image.sh					       2015-2017
             #
             # Advanced Debian "jessie", "stretch" and "buster" bootstrap script for RPi2/3
             #
             # This program is free software; you can redistribute it and/or
             # modify it under the terms of the GNU General Public License
             # as published by the Free Software Foundation; either version 2
             # of the License, or (at your option) any later version.
             #
             # Copyright (C) 2015 Jan Wagner <mail@jwagner.eu>
             #
             # Big thanks for patches and enhancements by 20+ github contributors!
             ########################################################################
             # Are we running as root?
             if [ "$(id -u)" -ne "0" ] ; then
               echo "error: this script must be executed with root privileges!"
               exit 1
             fi
             # Check if ./functions.sh script exists
             if [ ! -r "./functions.sh" ] ; then
               echo "error: './functions.sh' required script not found!"
               exit 1
             fi
             # Load utility functions
             . ./functions.sh
             # Load parameters from configuration template file
             if [ ! -z "$CONFIG_TEMPLATE" ] ; then
               use_template
             fi
             # Introduce settings
             set -e
             echo -n -e "\n#\n# RPi2/3 Bootstrap Settings\n#\n"
             set -x
             # Raspberry Pi model configuration
             RPI_MODEL=${RPI_MODEL:=2}
             RPI2_DTB_FILE=${RPI2_DTB_FILE:=bcm2709-rpi-2-b.dtb}
             RPI2_UBOOT_CONFIG=${RPI2_UBOOT_CONFIG:=rpi_2_defconfig}
             RPI3_DTB_FILE=${RPI3_DTB_FILE:=bcm2710-rpi-3-b.dtb}
             RPI3_UBOOT_CONFIG=${RPI3_UBOOT_CONFIG:=rpi_3_32b_defconfig}
             # Debian release
             RELEASE=${RELEASE:=jessie}
             KERNEL_ARCH=${KERNEL_ARCH:=arm}
             RELEASE_ARCH=${RELEASE_ARCH:=armhf}
             CROSS_COMPILE=${CROSS_COMPILE:=arm-linux-gnueabihf-}
             COLLABORA_KERNEL=${COLLABORA_KERNEL:=3.18.0-trunk-rpi2}
             if [ "$KERNEL_ARCH" = "arm64" ] ; then
               KERNEL_DEFCONFIG=${KERNEL_DEFCONFIG:=bcmrpi3_defconfig}
               KERNEL_IMAGE=${KERNEL_IMAGE:=kernel8.img}
             else
               KERNEL_DEFCONFIG=${KERNEL_DEFCONFIG:=bcm2709_defconfig}
               KERNEL_IMAGE=${KERNEL_IMAGE:=kernel7.img}
             fi
             if [ "$RELEASE_ARCH" = "arm64" ] ; then
               QEMU_BINARY=${QEMU_BINARY:=/usr/bin/qemu-aarch64-static}
             else
               QEMU_BINARY=${QEMU_BINARY:=/usr/bin/qemu-arm-static}
             fi
             KERNEL_BRANCH=${KERNEL_BRANCH:=""}
             # URLs
             KERNEL_URL=${KERNEL_URL:=https://github.com/raspberrypi/linux}
             FIRMWARE_URL=${FIRMWARE_URL:=https://github.com/raspberrypi/firmware/raw/master/boot}
             WLAN_FIRMWARE_URL=${WLAN_FIRMWARE_URL:=https://github.com/RPi-Distro/firmware-nonfree/raw/master/brcm}
             COLLABORA_URL=${COLLABORA_URL:=https://repositories.collabora.co.uk/debian}
             FBTURBO_URL=${FBTURBO_URL:=https://github.com/ssvb/xf86-video-fbturbo.git}
             UBOOT_URL=${UBOOT_URL:=git://git.denx.de/u-boot.git}
             # Build directories
             BASEDIR=${BASEDIR:=$(pwd)/images/${RELEASE}}
             BUILDDIR="${BASEDIR}/build"
             # Prepare date string for default image file name
             DATE="$(date +%Y-%m-%d)"
             if [ -z "$KERNEL_BRANCH" ] ; then
               IMAGE_NAME=${IMAGE_NAME:=${BASEDIR}/${DATE}-${KERNEL_ARCH}-CURRENT-rpi${RPI_MODEL}-${RELEASE}-${RELEASE_ARCH}}
             else
               IMAGE_NAME=${IMAGE_NAME:=${BASEDIR}/${DATE}-${KERNEL_ARCH}-${KERNEL_BRANCH}-rpi${RPI_MODEL}-${RELEASE}-${RELEASE_ARCH}}
             fi
             # Chroot directories
             R="${BUILDDIR}/chroot"
             ETC_DIR="${R}/etc"
             LIB_DIR="${R}/lib"
             BOOT_DIR="${R}/boot/firmware"
             KERNEL_DIR="${R}/usr/src/linux"
             WLAN_FIRMWARE_DIR="${R}/lib/firmware/brcm"
             # Firmware directory: Blank if download from github
             RPI_FIRMWARE_DIR=${RPI_FIRMWARE_DIR:=""}
             # General settings
             HOSTNAME=${HOSTNAME:=rpi${RPI_MODEL}-${RELEASE}}
             PASSWORD=${PASSWORD:=raspberry}
             USER_PASSWORD=${USER_PASSWORD:=raspberry}
             DEFLOCAL=${DEFLOCAL:="en_US.UTF-8"}
             TIMEZONE=${TIMEZONE:="Europe/Berlin"}
             EXPANDROOT=${EXPANDROOT:=true}
             # Keyboard settings
             XKB_MODEL=${XKB_MODEL:=""}
             XKB_LAYOUT=${XKB_LAYOUT:=""}
             XKB_VARIANT=${XKB_VARIANT:=""}
             XKB_OPTIONS=${XKB_OPTIONS:=""}
             # Network settings (DHCP)
             ENABLE_DHCP=${ENABLE_DHCP:=true}
             # Network settings (static)
             NET_ADDRESS=${NET_ADDRESS:=""}
             NET_GATEWAY=${NET_GATEWAY:=""}
             NET_DNS_1=${NET_DNS_1:=""}
             NET_DNS_2=${NET_DNS_2:=""}
             NET_DNS_DOMAINS=${NET_DNS_DOMAINS:=""}
             NET_NTP_1=${NET_NTP_1:=""}
             NET_NTP_2=${NET_NTP_2:=""}
             # APT settings
             APT_PROXY=${APT_PROXY:=""}
             APT_SERVER=${APT_SERVER:="ftp.debian.org"}
             # Feature settings
             ENABLE_CONSOLE=${ENABLE_CONSOLE:=true}
             ENABLE_I2C=${ENABLE_I2C:=false}
             ENABLE_SPI=${ENABLE_SPI:=false}
             ENABLE_IPV6=${ENABLE_IPV6:=true}
             ENABLE_SSHD=${ENABLE_SSHD:=true}
             ENABLE_NONFREE=${ENABLE_NONFREE:=false}
             ENABLE_WIRELESS=${ENABLE_WIRELESS:=false}
             ENABLE_SOUND=${ENABLE_SOUND:=true}
             ENABLE_DBUS=${ENABLE_DBUS:=true}
             ENABLE_HWRANDOM=${ENABLE_HWRANDOM:=true}
             ENABLE_MINGPU=${ENABLE_MINGPU:=false}
             ENABLE_XORG=${ENABLE_XORG:=false}
             ENABLE_WM=${ENABLE_WM:=""}
             ENABLE_RSYSLOG=${ENABLE_RSYSLOG:=true}
             ENABLE_USER=${ENABLE_USER:=true}
             USER_NAME=${USER_NAME:="pi"}
             ENABLE_ROOT=${ENABLE_ROOT:=false}
             # SSH settings
             SSH_ENABLE_ROOT=${SSH_ENABLE_ROOT:=false}
             SSH_DISABLE_PASSWORD_AUTH=${SSH_DISABLE_PASSWORD_AUTH:=false}
             SSH_LIMIT_USERS=${SSH_LIMIT_USERS:=false}
             SSH_ROOT_PUB_KEY=${SSH_ROOT_PUB_KEY:=""}
             SSH_USER_PUB_KEY=${SSH_USER_PUB_KEY:=""}
             # Advanced settings
             ENABLE_MINBASE=${ENABLE_MINBASE:=false}
             ENABLE_REDUCE=${ENABLE_REDUCE:=false}
             ENABLE_UBOOT=${ENABLE_UBOOT:=false}
             UBOOTSRC_DIR=${UBOOTSRC_DIR:=""}
             ENABLE_FBTURBO=${ENABLE_FBTURBO:=false}
             FBTURBOSRC_DIR=${FBTURBOSRC_DIR:=""}
             ENABLE_HARDNET=${ENABLE_HARDNET:=false}
             ENABLE_IPTABLES=${ENABLE_IPTABLES:=false}
             ENABLE_SPLITFS=${ENABLE_SPLITFS:=false}
             ENABLE_INITRAMFS=${ENABLE_INITRAMFS:=false}
             ENABLE_IFNAMES=${ENABLE_IFNAMES:=true}
             DISABLE_UNDERVOLT_WARNINGS=${DISABLE_UNDERVOLT_WARNINGS:=}
             # Kernel compilation settings
             BUILD_KERNEL=${BUILD_KERNEL:=false}
             KERNEL_REDUCE=${KERNEL_REDUCE:=false}
             KERNEL_THREADS=${KERNEL_THREADS:=1}
             KERNEL_HEADERS=${KERNEL_HEADERS:=true}
             KERNEL_MENUCONFIG=${KERNEL_MENUCONFIG:=false}
             KERNEL_REMOVESRC=${KERNEL_REMOVESRC:=true}
             if [ "$KERNEL_ARCH" = "arm64" ] ; then
               KERNEL_BIN_IMAGE=${KERNEL_BIN_IMAGE:="Image"}
             else
               KERNEL_BIN_IMAGE=${KERNEL_BIN_IMAGE:="zImage"}
             fi
             # Kernel compilation from source directory settings
             KERNELSRC_DIR=${KERNELSRC_DIR:=""}
             KERNELSRC_CLEAN=${KERNELSRC_CLEAN:=false}
             KERNELSRC_CONFIG=${KERNELSRC_CONFIG:=true}
             KERNELSRC_PREBUILT=${KERNELSRC_PREBUILT:=false}
             # Reduce disk usage settings
             REDUCE_APT=${REDUCE_APT:=true}
             REDUCE_DOC=${REDUCE_DOC:=true}
             REDUCE_MAN=${REDUCE_MAN:=true}
             REDUCE_VIM=${REDUCE_VIM:=false}
             REDUCE_BASH=${REDUCE_BASH:=false}
             REDUCE_HWDB=${REDUCE_HWDB:=true}
             REDUCE_SSHD=${REDUCE_SSHD:=true}
             REDUCE_LOCALE=${REDUCE_LOCALE:=true}
             # Encrypted filesystem settings
             ENABLE_CRYPTFS=${ENABLE_CRYPTFS:=false}
             CRYPTFS_PASSWORD=${CRYPTFS_PASSWORD:=""}
             CRYPTFS_MAPPING=${CRYPTFS_MAPPING:="secure"}
             CRYPTFS_CIPHER=${CRYPTFS_CIPHER:="aes-xts-plain64:sha512"}
             CRYPTFS_XTSKEYSIZE=${CRYPTFS_XTSKEYSIZE:=512}
             # Stop the Crypto Wars
             DISABLE_FBI=${DISABLE_FBI:=false}
             # Chroot scripts directory
             CHROOT_SCRIPTS=${CHROOT_SCRIPTS:=""}
             # Packages required in the chroot build environment
             APT_INCLUDES=${APT_INCLUDES:=""}
             APT_INCLUDES="${APT_INCLUDES},apt-transport-https,apt-utils,ca-certificates,debian-archive-keyring,dialog,sudo,systemd,sysvinit-utils"
             # Packages required for bootstrapping
             REQUIRED_PACKAGES="debootstrap debian-archive-keyring qemu-user-static binfmt-support dosfstools rsync bmap-tools whois git bc psmisc dbus sudo"
             MISSING_PACKAGES=""
             # Packages installed for c/c++ build environment in chroot (keep empty)
             COMPILER_PACKAGES=""
             set +x
             # Set Raspberry Pi model specific configuration
             if [ "$RPI_MODEL" = 2 ] ; then
               DTB_FILE=${RPI2_DTB_FILE}
               UBOOT_CONFIG=${RPI2_UBOOT_CONFIG}
             elif [ "$RPI_MODEL" = 3 ] ; then
               DTB_FILE=${RPI3_DTB_FILE}
               UBOOT_CONFIG=${RPI3_UBOOT_CONFIG}
               BUILD_KERNEL=true
             else
               echo "error: Raspberry Pi model ${RPI_MODEL} is not supported!"
               exit 1
             fi
             # Check if the internal wireless interface is supported by the RPi model
             if [ "$ENABLE_WIRELESS" = true ] && [ "$RPI_MODEL" != 3 ] ; then
               echo "error: The selected Raspberry Pi model has no internal wireless interface"
               exit 1
             fi
             # Check if DISABLE_UNDERVOLT_WARNINGS parameter value is supported
             if [ ! -z "$DISABLE_UNDERVOLT_WARNINGS" ] ; then
               if [ "$DISABLE_UNDERVOLT_WARNINGS" != 1 ] && [ "$DISABLE_UNDERVOLT_WARNINGS" != 2 ] ; then
                 echo "error: DISABLE_UNDERVOLT_WARNINGS=${DISABLE_UNDERVOLT_WARNINGS} is not supported"
                 exit 1
               fi
             fi
             # Build RPi2/3 Linux kernel if required by Debian release
             if [ "$RELEASE" = "stretch" ]  || [ "$RELEASE" = "buster" ] ; then
               BUILD_KERNEL=true
             fi
             # Add packages required for kernel cross compilation
             if [ "$BUILD_KERNEL" = true ] ; then
               if [ "$KERNEL_ARCH" = "arm" ] ; then
                 REQUIRED_PACKAGES="${REQUIRED_PACKAGES} crossbuild-essential-armhf"
               else
                 REQUIRED_PACKAGES="${REQUIRED_PACKAGES} crossbuild-essential-arm64"
               fi
             fi
             # Add libncurses5 to enable kernel menuconfig
             if [ "$KERNEL_MENUCONFIG" = true ] ; then
               REQUIRED_PACKAGES="${REQUIRED_PACKAGES} libncurses5-dev"
             fi
             # Stop the Crypto Wars
             if [ "$DISABLE_FBI" = true ] ; then
               ENABLE_CRYPTFS=true
             fi
             # Add cryptsetup package to enable filesystem encryption
             if [ "$ENABLE_CRYPTFS" = true ]  && [ "$BUILD_KERNEL" = true ] ; then
               REQUIRED_PACKAGES="${REQUIRED_PACKAGES} cryptsetup"
               APT_INCLUDES="${APT_INCLUDES},cryptsetup"
               if [ -z "$CRYPTFS_PASSWORD" ] ; then
                 echo "error: no password defined (CRYPTFS_PASSWORD)!"
                 exit 1
               fi
               ENABLE_INITRAMFS=true
             fi
             # Add initramfs generation tools
             if [ "$ENABLE_INITRAMFS" = true ] && [ "$BUILD_KERNEL" = true ] ; then
               APT_INCLUDES="${APT_INCLUDES},initramfs-tools"
             fi
             # Add device-tree-compiler required for building the U-Boot bootloader
             if [ "$ENABLE_UBOOT" = true ] ; then
               APT_INCLUDES="${APT_INCLUDES},device-tree-compiler"
             fi
             # Check if root SSH (v2) public key file exists
             if [ ! -z "$SSH_ROOT_PUB_KEY" ] ; then
               if [ ! -f "$SSH_ROOT_PUB_KEY" ] ; then
                 echo "error: '$SSH_ROOT_PUB_KEY' specified SSH public key file not found (SSH_ROOT_PUB_KEY)!"
                 exit 1
               fi
             fi
             # Check if $USER_NAME SSH (v2) public key file exists
             if [ ! -z "$SSH_USER_PUB_KEY" ] ; then
               if [ ! -f "$SSH_USER_PUB_KEY" ] ; then
                 echo "error: '$SSH_USER_PUB_KEY' specified SSH public key file not found (SSH_USER_PUB_KEY)!"
                 exit 1
               fi
             fi
             # Check if all required packages are installed on the build system
             for package in $REQUIRED_PACKAGES ; do
               if [ "`dpkg-query -W -f='${Status}' $package`" != "install ok installed" ] ; then
                 MISSING_PACKAGES="${MISSING_PACKAGES} $package"
               fi
             done
             # If there are missing packages ask confirmation for install, or exit
             if [ -n "$MISSING_PACKAGES" ] ; then
               echo "the following packages needed by this script are not installed:"
               echo "$MISSING_PACKAGES"
               echo -n "\ndo you want to install the missing packages right now? [y/n] "
               read confirm
               [ "$confirm" != "y" ] && exit 1
               # Make sure all missing required packages are installed
               apt-get -qq -y install ${MISSING_PACKAGES}
             fi
             # Check if ./bootstrap.d directory exists
             if [ ! -d "./bootstrap.d/" ] ; then
               echo "error: './bootstrap.d' required directory not found!"
               exit 1
             fi
             # Check if ./files directory exists
             if [ ! -d "./files/" ] ; then
               echo "error: './files' required directory not found!"
               exit 1
             fi
             # Check if specified KERNELSRC_DIR directory exists
             if [ -n "$KERNELSRC_DIR" ] && [ ! -d "$KERNELSRC_DIR" ] ; then
               echo "error: '${KERNELSRC_DIR}' specified directory not found (KERNELSRC_DIR)!"
               exit 1
             fi
             # Check if specified UBOOTSRC_DIR directory exists
             if [ -n "$UBOOTSRC_DIR" ] && [ ! -d "$UBOOTSRC_DIR" ] ; then
               echo "error: '${UBOOTSRC_DIR}' specified directory not found (UBOOTSRC_DIR)!"
               exit 1
             fi
             # Check if specified FBTURBOSRC_DIR directory exists
             if [ -n "$FBTURBOSRC_DIR" ] && [ ! -d "$FBTURBOSRC_DIR" ] ; then
               echo "error: '${FBTURBOSRC_DIR}' specified directory not found (FBTURBOSRC_DIR)!"
               exit 1
             fi
             # Check if specified CHROOT_SCRIPTS directory exists
             if [ -n "$CHROOT_SCRIPTS" ] && [ ! -d "$CHROOT_SCRIPTS" ] ; then
                echo "error: ${CHROOT_SCRIPTS} specified directory not found (CHROOT_SCRIPTS)!"
                exit 1
             fi
             # Check if specified device mapping already exists (will be used by cryptsetup)
             if [ -r "/dev/mapping/${CRYPTFS_MAPPING}" ] ; then
               echo "error: mapping /dev/mapping/${CRYPTFS_MAPPING} already exists, not proceeding"
               exit 1
             fi
             # Don't clobber an old build
             if [ -e "$BUILDDIR" ] ; then
               echo "error: directory ${BUILDDIR} already exists, not proceeding"
               exit 1
             fi
             # Setup chroot directory
             mkdir -p "${R}"
             # Check if build directory has enough of free disk space >512MB
             if [ "$(df --output=avail ${BUILDDIR} | sed "1d")" -le "524288" ] ; then
               echo "error: ${BUILDDIR} not enough space left to generate the output image!"
               exit 1
             fi
             set -x
             # Call "cleanup" function on various signals and errors
             trap cleanup 0 1 2 3 6
             # Add required packages for the minbase installation
             if [ "$ENABLE_MINBASE" = true ] ; then
               APT_INCLUDES="${APT_INCLUDES},vim-tiny,netbase,net-tools,ifupdown"
             fi
             # Add required locales packages
             if [ "$DEFLOCAL" != "en_US.UTF-8" ] ; then
               APT_INCLUDES="${APT_INCLUDES},locales,keyboard-configuration,console-setup"
             fi
             # Add parted package, required to get partprobe utility
             if [ "$EXPANDROOT" = true ] ; then
               APT_INCLUDES="${APT_INCLUDES},parted"
             fi
             # Add dbus package, recommended if using systemd
             if [ "$ENABLE_DBUS" = true ] ; then
               APT_INCLUDES="${APT_INCLUDES},dbus"
             fi
             # Add iptables IPv4/IPv6 package
             if [ "$ENABLE_IPTABLES" = true ] ; then
               APT_INCLUDES="${APT_INCLUDES},iptables"
             fi
             # Add openssh server package
             if [ "$ENABLE_SSHD" = true ] ; then
               APT_INCLUDES="${APT_INCLUDES},openssh-server"
             fi
             # Add alsa-utils package
             if [ "$ENABLE_SOUND" = true ] ; then
               APT_INCLUDES="${APT_INCLUDES},alsa-utils"
             fi
             # Add rng-tools package
             if [ "$ENABLE_HWRANDOM" = true ] ; then
               APT_INCLUDES="${APT_INCLUDES},rng-tools"
             fi
             # Add fbturbo video driver
             if [ "$ENABLE_FBTURBO" = true ] ; then
               # Enable xorg package dependencies
               ENABLE_XORG=true
             fi
             # Add user defined window manager package
             if [ -n "$ENABLE_WM" ] ; then
               APT_INCLUDES="${APT_INCLUDES},${ENABLE_WM}"
               # Enable xorg package dependencies
               ENABLE_XORG=true
             fi
             # Add xorg package
             if [ "$ENABLE_XORG" = true ] ; then
               APT_INCLUDES="${APT_INCLUDES},xorg,dbus-x11"
             fi
             # Replace selected packages with smaller clones
             if [ "$ENABLE_REDUCE" = true ] ; then
               # Add levee package instead of vim-tiny
               if [ "$REDUCE_VIM" = true ] ; then
                 APT_INCLUDES="$(echo ${APT_INCLUDES} | sed "s/vim-tiny/levee/")"
               fi
               # Add dropbear package instead of openssh-server
               if [ "$REDUCE_SSHD" = true ] ; then
                 APT_INCLUDES="$(echo ${APT_INCLUDES} | sed "s/openssh-server/dropbear/")"
               fi
             fi
+            if [ "$RELEASE" != "jessie" ] ; then
+              APT_INCLUDES="${APT_INCLUDES},libnss-systemd"
+            fi
             # Configure kernel sources if no KERNELSRC_DIR
             if [ "$BUILD_KERNEL" = true ] && [ -z "$KERNELSRC_DIR" ] ; then
               KERNELSRC_CONFIG=true
             fi
             # Configure reduced kernel
             if [ "$KERNEL_REDUCE" = true ] ; then
               KERNELSRC_CONFIG=false
             fi
             # Execute bootstrap scripts
             for SCRIPT in bootstrap.d/*.sh; do
               head -n 3 "$SCRIPT"
               . "$SCRIPT"
             done
             ## Execute custom bootstrap scripts
             if [ -d "custom.d" ] ; then
               for SCRIPT in custom.d/*.sh; do
                 . "$SCRIPT"
               done
             fi
             # Execute custom scripts inside the chroot
             if [ -n "$CHROOT_SCRIPTS" ] && [ -d "$CHROOT_SCRIPTS" ] ; then
               cp -r "${CHROOT_SCRIPTS}" "${R}/chroot_scripts"
               chroot_exec /bin/bash -x <<'EOF'
             for SCRIPT in /chroot_scripts/* ; do
               if [ -f $SCRIPT -a -x $SCRIPT ] ; then
                 $SCRIPT
               fi
             done
             EOF
               rm -rf "${R}/chroot_scripts"
             fi
             # Remove c/c++ build environment from the chroot
             chroot_remove_cc
             # Remove apt-utils
             if [ "$RELEASE" = "jessie" ] ; then
               chroot_exec apt-get purge -qq -y --force-yes apt-utils
             fi
             # Generate required machine-id
             MACHINE_ID=$(dbus-uuidgen)
             echo -n "${MACHINE_ID}" > "${R}/var/lib/dbus/machine-id"
             echo -n "${MACHINE_ID}" > "${ETC_DIR}/machine-id"
             # APT Cleanup
             chroot_exec apt-get -y clean
             chroot_exec apt-get -y autoclean
             chroot_exec apt-get -y autoremove
             # Unmount mounted filesystems
             umount -l "${R}/proc"
             umount -l "${R}/sys"
             # Clean up directories
             rm -rf "${R}/run/*"
             rm -rf "${R}/tmp/*"
             # Clean up files
             rm -f "${ETC_DIR}/ssh/ssh_host_*"
             rm -f "${ETC_DIR}/dropbear/dropbear_*"
             rm -f "${ETC_DIR}/apt/sources.list.save"
             rm -f "${ETC_DIR}/resolvconf/resolv.conf.d/original"
             rm -f "${ETC_DIR}/*-"
             rm -f "${ETC_DIR}/apt/apt.conf.d/10proxy"
             rm -f "${ETC_DIR}/resolv.conf"
             rm -f "${R}/root/.bash_history"
             rm -f "${R}/var/lib/urandom/random-seed"
             rm -f "${R}/initrd.img"
             rm -f "${R}/vmlinuz"
             rm -f "${R}${QEMU_BINARY}"
             # Calculate size of the chroot directory in KB
             CHROOT_SIZE=$(expr `du -s "${R}" | awk '{ print $1 }'`)
             # Calculate the amount of needed 512 Byte sectors
             TABLE_SECTORS=$(expr 1 \* 1024 \* 1024 \/ 512)
             FRMW_SECTORS=$(expr 64 \* 1024 \* 1024 \/ 512)
             ROOT_OFFSET=$(expr ${TABLE_SECTORS} + ${FRMW_SECTORS})
             # The root partition is EXT4
             # This means more space than the actual used space of the chroot is used.
-            # As overhead for journaling and reserved blocks 25% are added.
+            # As overhead for journaling and reserved blocks 35% are added.
-            ROOT_SECTORS=$(expr $(expr ${CHROOT_SIZE} + ${CHROOT_SIZE} \/ 100 \* 25) \* 1024 \/ 512)
+            ROOT_SECTORS=$(expr $(expr ${CHROOT_SIZE} + ${CHROOT_SIZE} \/ 100 \* 35) \* 1024 \/ 512)
             # Calculate required image size in 512 Byte sectors
             IMAGE_SECTORS=$(expr ${TABLE_SECTORS} + ${FRMW_SECTORS} + ${ROOT_SECTORS})
             # Prepare image file
             if [ "$ENABLE_SPLITFS" = true ] ; then
               dd if=/dev/zero of="$IMAGE_NAME-frmw.img" bs=512 count=${TABLE_SECTORS}
               dd if=/dev/zero of="$IMAGE_NAME-frmw.img" bs=512 count=0 seek=${FRMW_SECTORS}
               dd if=/dev/zero of="$IMAGE_NAME-root.img" bs=512 count=${TABLE_SECTORS}
               dd if=/dev/zero of="$IMAGE_NAME-root.img" bs=512 count=0 seek=${ROOT_SECTORS}
               # Write firmware/boot partition tables
               sfdisk -q -L -uS -f "$IMAGE_NAME-frmw.img" 2> /dev/null <<EOM
             ${TABLE_SECTORS},${FRMW_SECTORS},c,*
             EOM
               # Write root partition table
               sfdisk -q -L -uS -f "$IMAGE_NAME-root.img" 2> /dev/null <<EOM
             ${TABLE_SECTORS},${ROOT_SECTORS},83
             EOM
               # Setup temporary loop devices
               FRMW_LOOP="$(losetup -o 1M --sizelimit 64M -f --show $IMAGE_NAME-frmw.img)"
               ROOT_LOOP="$(losetup -o 1M -f --show $IMAGE_NAME-root.img)"
             else # ENABLE_SPLITFS=false
               dd if=/dev/zero of="$IMAGE_NAME.img" bs=512 count=${TABLE_SECTORS}
               dd if=/dev/zero of="$IMAGE_NAME.img" bs=512 count=0 seek=${IMAGE_SECTORS}
               # Write partition table
               sfdisk -q -L -uS -f "$IMAGE_NAME.img" 2> /dev/null <<EOM
             ${TABLE_SECTORS},${FRMW_SECTORS},c,*
             ${ROOT_OFFSET},${ROOT_SECTORS},83
             EOM
               # Setup temporary loop devices
               FRMW_LOOP="$(losetup -o 1M --sizelimit 64M -f --show $IMAGE_NAME.img)"
               ROOT_LOOP="$(losetup -o 65M -f --show $IMAGE_NAME.img)"
             fi
             if [ "$ENABLE_CRYPTFS" = true ] ; then
               # Create dummy ext4 fs
               mkfs.ext4 "$ROOT_LOOP"
               # Setup password keyfile
               touch .password
               chmod 600 .password
               echo -n ${CRYPTFS_PASSWORD} > .password
               # Initialize encrypted partition
               echo "YES" | cryptsetup luksFormat "${ROOT_LOOP}" -c "${CRYPTFS_CIPHER}" -s "${CRYPTFS_XTSKEYSIZE}" .password
               # Open encrypted partition and setup mapping
               cryptsetup luksOpen "${ROOT_LOOP}" -d .password "${CRYPTFS_MAPPING}"
               # Secure delete password keyfile
               shred -zu .password
               # Update temporary loop device
               ROOT_LOOP="/dev/mapper/${CRYPTFS_MAPPING}"
               # Wipe encrypted partition (encryption cipher is used for randomness)
               dd if=/dev/zero of="${ROOT_LOOP}" bs=512 count=$(blockdev --getsz "${ROOT_LOOP}")
             fi
             # Build filesystems
             mkfs.vfat "$FRMW_LOOP"
             mkfs.ext4 "$ROOT_LOOP"
             # Mount the temporary loop devices
             mkdir -p "$BUILDDIR/mount"
             mount "$ROOT_LOOP" "$BUILDDIR/mount"
             mkdir -p "$BUILDDIR/mount/boot/firmware"
             mount "$FRMW_LOOP" "$BUILDDIR/mount/boot/firmware"
             # Copy all files from the chroot to the loop device mount point directory
             rsync -a "${R}/" "$BUILDDIR/mount/"
             # Unmount all temporary loop devices and mount points
             cleanup
             # Create block map file(s) of image(s)
             if [ "$ENABLE_SPLITFS" = true ] ; then
               # Create block map files for "bmaptool"
               bmaptool create -o "$IMAGE_NAME-frmw.bmap" "$IMAGE_NAME-frmw.img"
               bmaptool create -o "$IMAGE_NAME-root.bmap" "$IMAGE_NAME-root.img"
               # Image was successfully created
               echo "$IMAGE_NAME-frmw.img ($(expr \( ${TABLE_SECTORS} + ${FRMW_SECTORS} \) \* 512 \/ 1024 \/ 1024)M)" ": successfully created"
               echo "$IMAGE_NAME-root.img ($(expr \( ${TABLE_SECTORS} + ${ROOT_SECTORS} \) \* 512 \/ 1024 \/ 1024)M)" ": successfully created"
             else
               # Create block map file for "bmaptool"
               bmaptool create -o "$IMAGE_NAME.bmap" "$IMAGE_NAME.img"
               # Image was successfully created
               echo "$IMAGE_NAME.img ($(expr \( ${TABLE_SECTORS} + ${FRMW_SECTORS} + ${ROOT_SECTORS} \) \* 512 \/ 1024 \/ 1024)M)" ": successfully created"
             fi