| @@ -1,289 +1,290 | |||||
| 1 | # |
|
1 | # | |
| 2 | # Setup RPi2/3 config and cmdline |
|
2 | # Setup RPi2/3 config and cmdline | |
| 3 | # |
|
3 | # | |
| 4 |
|
4 | |||
| 5 | # Load utility functions |
|
5 | # Load utility functions | |
| 6 | . ./functions.sh |
|
6 | . ./functions.sh | |
| 7 |
|
7 | |||
| 8 | if [ -n "$RPI_FIRMWARE_DIR" ] && [ -d "$RPI_FIRMWARE_DIR" ] ; then |
|
8 | if [ -n "$RPI_FIRMWARE_DIR" ] && [ -d "$RPI_FIRMWARE_DIR" ] ; then | |
| 9 | # Install boot binaries from local directory |
|
9 | # Install boot binaries from local directory | |
| 10 | cp "${RPI_FIRMWARE_DIR}"/boot/bootcode.bin "${BOOT_DIR}"/bootcode.bin |
|
10 | cp "${RPI_FIRMWARE_DIR}"/boot/bootcode.bin "${BOOT_DIR}"/bootcode.bin | |
| 11 | cp "${RPI_FIRMWARE_DIR}"/boot/fixup.dat "${BOOT_DIR}"/fixup.dat |
|
11 | cp "${RPI_FIRMWARE_DIR}"/boot/fixup.dat "${BOOT_DIR}"/fixup.dat | |
| 12 | cp "${RPI_FIRMWARE_DIR}"/boot/fixup_cd.dat "${BOOT_DIR}"/fixup_cd.dat |
|
12 | cp "${RPI_FIRMWARE_DIR}"/boot/fixup_cd.dat "${BOOT_DIR}"/fixup_cd.dat | |
| 13 | cp "${RPI_FIRMWARE_DIR}"/boot/fixup_x.dat "${BOOT_DIR}"/fixup_x.dat |
|
13 | cp "${RPI_FIRMWARE_DIR}"/boot/fixup_x.dat "${BOOT_DIR}"/fixup_x.dat | |
| 14 | cp "${RPI_FIRMWARE_DIR}"/boot/start.elf "${BOOT_DIR}"/start.elf |
|
14 | cp "${RPI_FIRMWARE_DIR}"/boot/start.elf "${BOOT_DIR}"/start.elf | |
| 15 | cp "${RPI_FIRMWARE_DIR}"/boot/start_cd.elf "${BOOT_DIR}"/start_cd.elf |
|
15 | cp "${RPI_FIRMWARE_DIR}"/boot/start_cd.elf "${BOOT_DIR}"/start_cd.elf | |
| 16 | cp "${RPI_FIRMWARE_DIR}"/boot/start_x.elf "${BOOT_DIR}"/start_x.elf |
|
16 | cp "${RPI_FIRMWARE_DIR}"/boot/start_x.elf "${BOOT_DIR}"/start_x.elf | |
| 17 | else |
|
17 | else | |
| 18 | # Create temporary directory for boot binaries |
|
18 | # Create temporary directory for boot binaries | |
| 19 | temp_dir=$(as_nobody mktemp -d) |
|
19 | temp_dir=$(as_nobody mktemp -d) | |
| 20 |
|
20 | |||
| 21 | # Install latest boot binaries from raspberry/firmware github |
|
21 | # Install latest boot binaries from raspberry/firmware github | |
| 22 | as_nobody wget -q -O "${temp_dir}/bootcode.bin" "${FIRMWARE_URL}/bootcode.bin" |
|
22 | as_nobody wget -q -O "${temp_dir}/bootcode.bin" "${FIRMWARE_URL}/bootcode.bin" | |
| 23 | as_nobody wget -q -O "${temp_dir}/fixup.dat" "${FIRMWARE_URL}/fixup.dat" |
|
23 | as_nobody wget -q -O "${temp_dir}/fixup.dat" "${FIRMWARE_URL}/fixup.dat" | |
| 24 | as_nobody wget -q -O "${temp_dir}/fixup_cd.dat" "${FIRMWARE_URL}/fixup_cd.dat" |
|
24 | as_nobody wget -q -O "${temp_dir}/fixup_cd.dat" "${FIRMWARE_URL}/fixup_cd.dat" | |
| 25 | as_nobody wget -q -O "${temp_dir}/fixup_x.dat" "${FIRMWARE_URL}/fixup_x.dat" |
|
25 | as_nobody wget -q -O "${temp_dir}/fixup_x.dat" "${FIRMWARE_URL}/fixup_x.dat" | |
| 26 | as_nobody wget -q -O "${temp_dir}/start.elf" "${FIRMWARE_URL}/start.elf" |
|
26 | as_nobody wget -q -O "${temp_dir}/start.elf" "${FIRMWARE_URL}/start.elf" | |
| 27 | as_nobody wget -q -O "${temp_dir}/start_cd.elf" "${FIRMWARE_URL}/start_cd.elf" |
|
27 | as_nobody wget -q -O "${temp_dir}/start_cd.elf" "${FIRMWARE_URL}/start_cd.elf" | |
| 28 | as_nobody wget -q -O "${temp_dir}/start_x.elf" "${FIRMWARE_URL}/start_x.elf" |
|
28 | as_nobody wget -q -O "${temp_dir}/start_x.elf" "${FIRMWARE_URL}/start_x.elf" | |
| 29 |
|
29 | |||
| 30 | # Move downloaded boot binaries |
|
30 | # Move downloaded boot binaries | |
| 31 | mv "${temp_dir}/"* "${BOOT_DIR}/" |
|
31 | mv "${temp_dir}/"* "${BOOT_DIR}/" | |
| 32 |
|
32 | |||
| 33 | # Remove temporary directory for boot binaries |
|
33 | # Remove temporary directory for boot binaries | |
| 34 | rm -fr "${temp_dir}" |
|
34 | rm -fr "${temp_dir}" | |
| 35 |
|
35 | |||
| 36 | # Set permissions of the boot binaries |
|
36 | # Set permissions of the boot binaries | |
| 37 | chown -R root:root "${BOOT_DIR}" |
|
37 | chown -R root:root "${BOOT_DIR}" | |
| 38 | chmod -R 600 "${BOOT_DIR}" |
|
38 | chmod -R 600 "${BOOT_DIR}" | |
| 39 | fi |
|
39 | fi | |
| 40 |
|
40 | |||
| 41 | if [ "$ENABLE_KEYGEN" = true ] ; then |
|
41 | if [ "$ENABLE_KEYGEN" = true ] ; then | |
| 42 |
|
42 | |||
| 43 | # go to chroot/boot/ |
|
43 | # go to chroot/boot/ | |
| 44 | cd "${BOOT_DIR}/" || exit |
|
44 | cd "${BOOT_DIR}/" || exit | |
| 45 |
|
45 | |||
| 46 | # Make a copy of start.elf |
|
46 | # Make a copy of start.elf | |
| 47 | cp start.elf start.elf_backup |
|
47 | cp start.elf start.elf_backup | |
| 48 |
|
48 | |||
| 49 | # Remove codec licence checks - thx go to https://github.com/nucular/raspi-keygen - if ENABLE_VIDEOCORE is true, you can check codec status https://elinux.org/RPI_vcgencmd_usage |
|
49 | # Remove codec licence checks - thx go to https://github.com/nucular/raspi-keygen - if ENABLE_VIDEOCORE is true, you can check codec status https://elinux.org/RPI_vcgencmd_usage | |
| 50 | perl -pne 's/\x47\xE9362H\x3C\x18/\x47\xE9362H\x3C\x1F/g' < start.elf_backup > start.elf |
|
50 | perl -pne 's/\x47\xE9362H\x3C\x18/\x47\xE9362H\x3C\x1F/g' < start.elf_backup > start.elf | |
| 51 |
|
51 | |||
| 52 | # Back to base dir |
|
52 | # Back to base dir | |
| 53 | cd "${WORKDIR}" || exit |
|
53 | cd "${WORKDIR}" || exit | |
| 54 | fi |
|
54 | fi | |
| 55 |
|
55 | |||
| 56 | # Setup firmware boot cmdline |
|
56 | # Setup firmware boot cmdline | |
| 57 | if [ "$ENABLE_USBBOOT" = true ] ; then |
|
57 | if [ "$ENABLE_USBBOOT" = true ] ; then | |
| 58 | CMDLINE="dwc_otg.lpm_enable=0 root=/dev/sda2 rootfstype=ext4 rootflags=commit=100,data=writeback elevator=deadline console=tty1 rootwait init=/bin/systemd" |
|
58 | CMDLINE="dwc_otg.lpm_enable=0 root=/dev/sda2 rootfstype=ext4 rootflags=commit=100,data=writeback elevator=deadline console=tty1 rootwait init=/bin/systemd" | |
| 59 | else |
|
59 | else | |
| 60 | if [ "$ENABLE_SPLITFS" = true ] ; then |
|
60 | if [ "$ENABLE_SPLITFS" = true ] ; then | |
| 61 | CMDLINE="dwc_otg.lpm_enable=0 root=/dev/sda1 rootfstype=ext4 rootflags=commit=100,data=writeback elevator=deadline console=tty1 rootwait init=/bin/systemd" |
|
61 | CMDLINE="dwc_otg.lpm_enable=0 root=/dev/sda1 rootfstype=ext4 rootflags=commit=100,data=writeback elevator=deadline console=tty1 rootwait init=/bin/systemd" | |
| 62 | else |
|
62 | else | |
| 63 | CMDLINE="dwc_otg.lpm_enable=0 root=/dev/mmcblk0p2 rootfstype=ext4 rootflags=commit=100,data=writeback elevator=deadline console=tty1 rootwait init=/bin/systemd" |
|
63 | CMDLINE="dwc_otg.lpm_enable=0 root=/dev/mmcblk0p2 rootfstype=ext4 rootflags=commit=100,data=writeback elevator=deadline console=tty1 rootwait init=/bin/systemd" | |
| 64 | fi |
|
64 | fi | |
| 65 | fi |
|
65 | fi | |
| 66 |
|
66 | |||
| 67 | # Add encrypted root partition to cmdline.txt |
|
67 | # Add encrypted root partition to cmdline.txt | |
| 68 | if [ "$ENABLE_CRYPTFS" = true ] ; then |
|
68 | if [ "$ENABLE_CRYPTFS" = true ] ; then | |
| 69 | if [ "$ENABLE_SPLITFS" = true ] ; then |
|
69 | if [ "$ENABLE_SPLITFS" = true ] ; then | |
| 70 | CMDLINE=$(echo "${CMDLINE}" | sed "s/sda1/mapper\/${CRYPTFS_MAPPING} cryptdevice=\/dev\/sda1:${CRYPTFS_MAPPING}/") |
|
70 | CMDLINE=$(echo "${CMDLINE}" | sed "s/sda1/mapper\/${CRYPTFS_MAPPING} cryptdevice=\/dev\/sda1:${CRYPTFS_MAPPING}/") | |
| 71 | else |
|
71 | else | |
| 72 | if [ "$ENABLE_USBBOOT" = true ] ; then |
|
72 | if [ "$ENABLE_USBBOOT" = true ] ; then | |
| 73 | CMDLINE=$(echo "${CMDLINE}" | sed "s/sda2/mapper\/${CRYPTFS_MAPPING} cryptdevice=\/dev\/sda2:${CRYPTFS_MAPPING}/") |
|
73 | CMDLINE=$(echo "${CMDLINE}" | sed "s/sda2/mapper\/${CRYPTFS_MAPPING} cryptdevice=\/dev\/sda2:${CRYPTFS_MAPPING}/") | |
| 74 | else |
|
74 | else | |
| 75 | CMDLINE=$(echo "${CMDLINE}" | sed "s/mmcblk0p2/mapper\/${CRYPTFS_MAPPING} cryptdevice=\/dev\/mmcblk0p2:${CRYPTFS_MAPPING}/") |
|
75 | CMDLINE=$(echo "${CMDLINE}" | sed "s/mmcblk0p2/mapper\/${CRYPTFS_MAPPING} cryptdevice=\/dev\/mmcblk0p2:${CRYPTFS_MAPPING}/") | |
| 76 | fi |
|
76 | fi | |
| 77 | fi |
|
77 | fi | |
| 78 | fi |
|
78 | fi | |
| 79 |
|
79 | |||
| 80 | # Enable Kernel messages on standard output |
|
80 | # Enable Kernel messages on standard output | |
| 81 | if [ "$ENABLE_PRINTK" = true ] ; then |
|
81 | if [ "$ENABLE_PRINTK" = true ] ; then | |
| 82 | install_readonly files/sysctl.d/83-rpi-printk.conf "${ETC_DIR}/sysctl.d/83-rpi-printk.conf" |
|
82 | install_readonly files/sysctl.d/83-rpi-printk.conf "${ETC_DIR}/sysctl.d/83-rpi-printk.conf" | |
| 83 | fi |
|
83 | fi | |
| 84 |
|
84 | |||
| 85 | # Enable Kernel messages on standard output |
|
85 | # Enable Kernel messages on standard output | |
| 86 | if [ "$KERNEL_SECURITY" = true ] ; then |
|
86 | if [ "$KERNEL_SECURITY" = true ] ; then | |
| 87 | install_readonly files/sysctl.d/84-rpi-ASLR.conf "${ETC_DIR}/sysctl.d/84-rpi-ASLR.conf" |
|
87 | install_readonly files/sysctl.d/84-rpi-ASLR.conf "${ETC_DIR}/sysctl.d/84-rpi-ASLR.conf" | |
| 88 | fi |
|
88 | fi | |
| 89 |
|
89 | |||
| 90 | # Install udev rule for serial alias - serial0 = console serial1=bluetooth |
|
90 | # Install udev rule for serial alias - serial0 = console serial1=bluetooth | |
| 91 | install_readonly files/etc/99-com.rules "${LIB_DIR}/udev/rules.d/99-com.rules" |
|
91 | install_readonly files/etc/99-com.rules "${LIB_DIR}/udev/rules.d/99-com.rules" | |
| 92 |
|
92 | |||
| 93 | # Remove IPv6 networking support |
|
93 | # Remove IPv6 networking support | |
| 94 | if [ "$ENABLE_IPV6" = false ] ; then |
|
94 | if [ "$ENABLE_IPV6" = false ] ; then | |
| 95 | CMDLINE="${CMDLINE} ipv6.disable=1" |
|
95 | CMDLINE="${CMDLINE} ipv6.disable=1" | |
| 96 | fi |
|
96 | fi | |
| 97 |
|
97 | |||
| 98 | # Automatically assign predictable network interface names |
|
98 | # Automatically assign predictable network interface names | |
| 99 | if [ "$ENABLE_IFNAMES" = false ] ; then |
|
99 | if [ "$ENABLE_IFNAMES" = false ] ; then | |
| 100 | CMDLINE="${CMDLINE} net.ifnames=0" |
|
100 | CMDLINE="${CMDLINE} net.ifnames=0" | |
| 101 | else |
|
101 | else | |
| 102 | CMDLINE="${CMDLINE} net.ifnames=1" |
|
102 | CMDLINE="${CMDLINE} net.ifnames=1" | |
| 103 | fi |
|
103 | fi | |
| 104 |
|
104 | |||
| 105 | # Install firmware config |
|
105 | # Install firmware config | |
| 106 | install_readonly files/boot/config.txt "${BOOT_DIR}/config.txt" |
|
106 | install_readonly files/boot/config.txt "${BOOT_DIR}/config.txt" | |
| 107 |
|
107 | |||
| 108 | # Locks CPU frequency at maximum |
|
108 | # Locks CPU frequency at maximum | |
| 109 | if [ "$ENABLE_TURBO" = true ] ; then |
|
109 | if [ "$ENABLE_TURBO" = true ] ; then | |
| 110 | echo "force_turbo=1" >> "${BOOT_DIR}/config.txt" |
|
110 | echo "force_turbo=1" >> "${BOOT_DIR}/config.txt" | |
| 111 | # helps to avoid sdcard corruption when force_turbo is enabled. |
|
111 | # helps to avoid sdcard corruption when force_turbo is enabled. | |
| 112 | echo "boot_delay=1" >> "${BOOT_DIR}/config.txt" |
|
112 | echo "boot_delay=1" >> "${BOOT_DIR}/config.txt" | |
| 113 | fi |
|
113 | fi | |
| 114 |
|
114 | |||
| 115 | if [ "$RPI_MODEL" = 0 ] || [ "$RPI_MODEL" = 3 ] || [ "$RPI_MODEL" = 3P ] ; then |
|
115 | if [ "$RPI_MODEL" = 0 ] || [ "$RPI_MODEL" = 3 ] || [ "$RPI_MODEL" = 3P ] ; then | |
| 116 |
|
116 | |||
| 117 | # Bluetooth enabled |
|
117 | # Bluetooth enabled | |
| 118 | if [ "$ENABLE_BLUETOOTH" = true ] ; then |
|
118 | if [ "$ENABLE_BLUETOOTH" = true ] ; then | |
| 119 | # Create temporary directory for Bluetooth sources |
|
119 | # Create temporary directory for Bluetooth sources | |
| 120 | temp_dir=$(as_nobody mktemp -d) |
|
120 | temp_dir=$(as_nobody mktemp -d) | |
| 121 |
|
121 | |||
| 122 | # Fetch Bluetooth sources |
|
122 | # Fetch Bluetooth sources | |
| 123 | as_nobody git -C "${temp_dir}" clone "${BLUETOOTH_URL}" |
|
123 | as_nobody git -C "${temp_dir}" clone "${BLUETOOTH_URL}" | |
| 124 |
|
124 | |||
| 125 | # Copy downloaded sources |
|
125 | # Copy downloaded sources | |
| 126 | mv "${temp_dir}/pi-bluetooth" "${R}/tmp/" |
|
126 | mv "${temp_dir}/pi-bluetooth" "${R}/tmp/" | |
| 127 |
|
127 | |||
| 128 | # Bluetooth firmware from arch aur https://aur.archlinux.org/packages/pi-bluetooth/ |
|
128 | # Bluetooth firmware from arch aur https://aur.archlinux.org/packages/pi-bluetooth/ | |
| 129 | as_nobody wget -q -O "${R}/tmp/pi-bluetooth/LICENCE.broadcom_bcm43xx" https://aur.archlinux.org/cgit/aur.git/plain/LICENCE.broadcom_bcm43xx?h=pi-bluetooth |
|
129 | as_nobody wget -q -O "${R}/tmp/pi-bluetooth/LICENCE.broadcom_bcm43xx" https://aur.archlinux.org/cgit/aur.git/plain/LICENCE.broadcom_bcm43xx?h=pi-bluetooth | |
| 130 | as_nobody wget -q -O "${R}/tmp/pi-bluetooth/BCM43430A1.hcd" https://aur.archlinux.org/cgit/aur.git/plain/BCM43430A1.hcd?h=pi-bluetooth |
|
130 | as_nobody wget -q -O "${R}/tmp/pi-bluetooth/BCM43430A1.hcd" https://aur.archlinux.org/cgit/aur.git/plain/BCM43430A1.hcd?h=pi-bluetooth | |
| 131 |
|
131 | |||
| 132 | # Set permissions |
|
132 | # Set permissions | |
| 133 | chown -R root:root "${R}/tmp/pi-bluetooth" |
|
133 | chown -R root:root "${R}/tmp/pi-bluetooth" | |
| 134 |
|
134 | |||
| 135 | # Install tools |
|
135 | # Install tools | |
| 136 | install_readonly "${R}/tmp/pi-bluetooth/usr/bin/btuart" "${R}/usr/bin/btuart" |
|
136 | install_readonly "${R}/tmp/pi-bluetooth/usr/bin/btuart" "${R}/usr/bin/btuart" | |
| 137 | install_readonly "${R}/tmp/pi-bluetooth/usr/bin/bthelper" "${R}/usr/bin/bthelper" |
|
137 | install_readonly "${R}/tmp/pi-bluetooth/usr/bin/bthelper" "${R}/usr/bin/bthelper" | |
| 138 |
|
138 | |||
| 139 | # make scripts executable |
|
139 | # make scripts executable | |
| 140 | chmod +x "${R}/usr/bin/bthelper" |
|
140 | chmod +x "${R}/usr/bin/bthelper" | |
| 141 | chmod +x "${R}/usr/bin/btuart" |
|
141 | chmod +x "${R}/usr/bin/btuart" | |
| 142 |
|
142 | |||
| 143 | # Install bluetooth udev rule |
|
143 | # Install bluetooth udev rule | |
| 144 | install_readonly "${R}/tmp/pi-bluetooth/lib/udev/rules.d/90-pi-bluetooth.rules" "${LIB_DIR}/udev/rules.d/90-pi-bluetooth.rules" |
|
144 | install_readonly "${R}/tmp/pi-bluetooth/lib/udev/rules.d/90-pi-bluetooth.rules" "${LIB_DIR}/udev/rules.d/90-pi-bluetooth.rules" | |
| 145 |
|
145 | |||
| 146 | # Install Firmware Flash file and apropiate licence |
|
146 | # Install Firmware Flash file and apropiate licence | |
| 147 | mkdir -p "$BLUETOOTH_FIRMWARE_DIR" |
|
147 | mkdir -p "$BLUETOOTH_FIRMWARE_DIR" | |
| 148 | install_readonly "${R}/tmp/pi-bluetooth/LICENCE.broadcom_bcm43xx" "${BLUETOOTH_FIRMWARE_DIR}/LICENCE.broadcom_bcm43xx" |
|
148 | install_readonly "${R}/tmp/pi-bluetooth/LICENCE.broadcom_bcm43xx" "${BLUETOOTH_FIRMWARE_DIR}/LICENCE.broadcom_bcm43xx" | |
| 149 | install_readonly "${R}/tmp/pi-bluetooth/BCM43430A1.hcd" "${BLUETOOTH_FIRMWARE_DIR}/LICENCE.broadcom_bcm43xx" |
|
149 | install_readonly "${R}/tmp/pi-bluetooth/BCM43430A1.hcd" "${BLUETOOTH_FIRMWARE_DIR}/LICENCE.broadcom_bcm43xx" | |
| 150 | install_readonly "${R}/tmp/pi-bluetooth/debian/pi-bluetooth.bthelper@.service" "${ETC_DIR}/systemd/system/pi-bluetooth.bthelper@.service" |
|
150 | install_readonly "${R}/tmp/pi-bluetooth/debian/pi-bluetooth.bthelper@.service" "${ETC_DIR}/systemd/system/pi-bluetooth.bthelper@.service" | |
| 151 | install_readonly "${R}/tmp/pi-bluetooth/debian/pi-bluetooth.hciuart.service" "${ETC_DIR}/systemd/system/pi-bluetooth.hciuart.service" |
|
151 | install_readonly "${R}/tmp/pi-bluetooth/debian/pi-bluetooth.hciuart.service" "${ETC_DIR}/systemd/system/pi-bluetooth.hciuart.service" | |
| 152 |
|
152 | |||
| 153 | # Remove temporary directories |
|
153 | # Remove temporary directories | |
| 154 | rm -fr "${temp_dir}" |
|
154 | rm -fr "${temp_dir}" | |
| 155 | rm -fr "${R}"/tmp/pi-bluetooth |
|
155 | rm -fr "${R}"/tmp/pi-bluetooth | |
| 156 |
|
156 | |||
| 157 | # Switch Pi3 Bluetooth function to use the mini-UART (ttyS0) and restore UART0/ttyAMA0 over GPIOs 14 & 15. Slow Bluetooth and slow cpu. Use /dev/ttyS0 instead of /dev/ttyAMA0 |
|
157 | # Switch Pi3 Bluetooth function to use the mini-UART (ttyS0) and restore UART0/ttyAMA0 over GPIOs 14 & 15. Slow Bluetooth and slow cpu. Use /dev/ttyS0 instead of /dev/ttyAMA0 | |
| 158 | if [ "$ENABLE_MINIUART_OVERLAY" = true ] ; then |
|
158 | if [ "$ENABLE_MINIUART_OVERLAY" = true ] ; then | |
| 159 |
|
||||
| 160 | # set overlay to swap ttyAMA0 and ttyS0 |
|
159 | # set overlay to swap ttyAMA0 and ttyS0 | |
| 161 | echo "dtoverlay=pi3-miniuart-bt" >> "${BOOT_DIR}/config.txt" |
|
160 | echo "dtoverlay=pi3-miniuart-bt" >> "${BOOT_DIR}/config.txt" | |
| 162 |
|
||||
| 163 | # if force_turbo didn't lock cpu at high speed, lock it at low speed (XOR logic) or miniuart will be broken |
|
|||
| 164 | if [ "$ENABLE_TURBO" = false ] ; then |
|
|||
| 165 | echo "core_freq=250" >> "${BOOT_DIR}/config.txt" |
|
|||
| 166 | fi |
|
|||
| 167 | fi |
|
161 | fi | |
| 168 |
|
162 | |||
| 169 | # Activate services |
|
163 | # Activate services | |
| 170 | chroot_exec systemctl enable pi-bluetooth.hciuart.service |
|
164 | chroot_exec systemctl enable pi-bluetooth.hciuart.service | |
| 171 |
|
165 | |||
| 172 | else # if ENABLE_BLUETOOTH = false |
|
166 | else # if ENABLE_BLUETOOTH = false | |
| 173 | # set overlay to disable bluetooth |
|
167 | # set overlay to disable bluetooth | |
| 174 | echo "dtoverlay=pi3-disable-bt" >> "${BOOT_DIR}/config.txt" |
|
168 | echo "dtoverlay=pi3-disable-bt" >> "${BOOT_DIR}/config.txt" | |
| 175 | fi # ENABLE_BLUETOOTH end |
|
169 | fi # ENABLE_BLUETOOTH end | |
| 176 | fi |
|
170 | fi | |
| 177 |
|
171 | |||
| 178 | # may need sudo systemctl disable hciuart |
|
172 | # may need sudo systemctl disable hciuart | |
| 179 | if [ "$ENABLE_CONSOLE" = true ] ; then |
|
173 | if [ "$ENABLE_CONSOLE" = true ] ; then | |
| 180 | echo "enable_uart=1" >> "${BOOT_DIR}/config.txt" |
|
174 | echo "enable_uart=1" >> "${BOOT_DIR}/config.txt" | |
| 181 | # add string to cmdline |
|
175 | # add string to cmdline | |
| 182 | CMDLINE="${CMDLINE} console=serial0,115200" |
|
176 | CMDLINE="${CMDLINE} console=serial0,115200" | |
|
|
177 | ||||
|
|
178 | if [ "$RPI_MODEL" = 3 ] || [ "$RPI_MODEL" = 3P ]; then | |||
|
|
179 | # if force_turbo didn't lock cpu at high speed, lock it at low speed (XOR logic) or miniuart will be broken | |||
|
|
180 | if [ "$ENABLE_TURBO" = false ] ; then | |||
|
|
181 | echo "core_freq=250" >> "${BOOT_DIR}/config.txt" | |||
|
|
182 | fi | |||
|
|
183 | fi | |||
| 183 |
|
184 | |||
| 184 | # Enable serial console systemd style |
|
185 | # Enable serial console systemd style | |
| 185 | chroot_exec systemctl enable serial-getty@serial0.service |
|
186 | chroot_exec systemctl enable serial-getty@serial0.service | |
| 186 | else |
|
187 | else | |
| 187 | echo "enable_uart=0" >> "${BOOT_DIR}/config.txt" |
|
188 | echo "enable_uart=0" >> "${BOOT_DIR}/config.txt" | |
| 188 | fi |
|
189 | fi | |
| 189 |
|
190 | |||
| 190 | if [ "$ENABLE_SYSTEMDSWAP" = true ] ; then |
|
191 | if [ "$ENABLE_SYSTEMDSWAP" = true ] ; then | |
| 191 | # Create temporary directory for systemd-swap sources |
|
192 | # Create temporary directory for systemd-swap sources | |
| 192 | temp_dir=$(as_nobody mktemp -d) |
|
193 | temp_dir=$(as_nobody mktemp -d) | |
| 193 |
|
194 | |||
| 194 | # Fetch systemd-swap sources |
|
195 | # Fetch systemd-swap sources | |
| 195 | as_nobody git -C "${temp_dir}" clone "${SYSTEMDSWAP_URL}" |
|
196 | as_nobody git -C "${temp_dir}" clone "${SYSTEMDSWAP_URL}" | |
| 196 |
|
197 | |||
| 197 | # Copy downloaded systemd-swap sources |
|
198 | # Copy downloaded systemd-swap sources | |
| 198 | mv "${temp_dir}/systemd-swap" "${R}/tmp/" |
|
199 | mv "${temp_dir}/systemd-swap" "${R}/tmp/" | |
| 199 |
|
200 | |||
| 200 | # Change into downloaded src dir |
|
201 | # Change into downloaded src dir | |
| 201 | cd "${R}/tmp/systemd-swap" || exit |
|
202 | cd "${R}/tmp/systemd-swap" || exit | |
| 202 |
|
203 | |||
| 203 | # Build package |
|
204 | # Build package | |
| 204 | bash ./package.sh debian |
|
205 | bash ./package.sh debian | |
| 205 |
|
206 | |||
| 206 | # Change back into script root dir |
|
207 | # Change back into script root dir | |
| 207 | cd "${WORKDIR}" || exit |
|
208 | cd "${WORKDIR}" || exit | |
| 208 |
|
209 | |||
| 209 | # Set permissions of the systemd-swap sources |
|
210 | # Set permissions of the systemd-swap sources | |
| 210 | chown -R root:root "${R}/tmp/systemd-swap" |
|
211 | chown -R root:root "${R}/tmp/systemd-swap" | |
| 211 |
|
212 | |||
| 212 | # Install package - IMPROVE AND MAKE IT POSSIBLE WITHOUT VERSION NR. |
|
213 | # Install package - IMPROVE AND MAKE IT POSSIBLE WITHOUT VERSION NR. | |
| 213 | chroot_exec dpkg -i /tmp/systemd-swap/systemd-swap_4.0.1_any.deb |
|
214 | chroot_exec dpkg -i /tmp/systemd-swap/systemd-swap_4.0.1_any.deb | |
| 214 |
|
215 | |||
| 215 | # Enable service |
|
216 | # Enable service | |
| 216 | chroot_exec systemctl enable systemd-swap |
|
217 | chroot_exec systemctl enable systemd-swap | |
| 217 |
|
218 | |||
| 218 | # Remove temporary directory for systemd-swap sources |
|
219 | # Remove temporary directory for systemd-swap sources | |
| 219 | rm -fr "${temp_dir}" |
|
220 | rm -fr "${temp_dir}" | |
| 220 | else |
|
221 | else | |
| 221 | # Enable ZSWAP in cmdline if systemd-swap is not used |
|
222 | # Enable ZSWAP in cmdline if systemd-swap is not used | |
| 222 | if [ "$KERNEL_ZSWAP" = true ] ; then |
|
223 | if [ "$KERNEL_ZSWAP" = true ] ; then | |
| 223 | CMDLINE="${CMDLINE} zswap.enabled=1 zswap.max_pool_percent=25 zswap.compressor=lz4" |
|
224 | CMDLINE="${CMDLINE} zswap.enabled=1 zswap.max_pool_percent=25 zswap.compressor=lz4" | |
| 224 | fi |
|
225 | fi | |
| 225 | fi |
|
226 | fi | |
| 226 | if [ "$KERNEL_SECURITY" = true ] ; then |
|
227 | if [ "$KERNEL_SECURITY" = true ] ; then | |
| 227 | CMDLINE="${CMDLINE} apparmor=1 security=apparmor" |
|
228 | CMDLINE="${CMDLINE} apparmor=1 security=apparmor" | |
| 228 | fi |
|
229 | fi | |
| 229 |
|
230 | |||
| 230 | # Install firmware boot cmdline |
|
231 | # Install firmware boot cmdline | |
| 231 | echo "${CMDLINE}" > "${BOOT_DIR}/cmdline.txt" |
|
232 | echo "${CMDLINE}" > "${BOOT_DIR}/cmdline.txt" | |
| 232 |
|
233 | |||
| 233 | # Setup minimal GPU memory allocation size: 16MB (no X) |
|
234 | # Setup minimal GPU memory allocation size: 16MB (no X) | |
| 234 | if [ "$ENABLE_MINGPU" = true ] ; then |
|
235 | if [ "$ENABLE_MINGPU" = true ] ; then | |
| 235 | echo "gpu_mem=16" >> "${BOOT_DIR}/config.txt" |
|
236 | echo "gpu_mem=16" >> "${BOOT_DIR}/config.txt" | |
| 236 | fi |
|
237 | fi | |
| 237 |
|
238 | |||
| 238 | # Setup boot with initramfs |
|
239 | # Setup boot with initramfs | |
| 239 | if [ "$ENABLE_INITRAMFS" = true ] ; then |
|
240 | if [ "$ENABLE_INITRAMFS" = true ] ; then | |
| 240 | echo "initramfs initramfs-${KERNEL_VERSION} followkernel" >> "${BOOT_DIR}/config.txt" |
|
241 | echo "initramfs initramfs-${KERNEL_VERSION} followkernel" >> "${BOOT_DIR}/config.txt" | |
| 241 | fi |
|
242 | fi | |
| 242 |
|
243 | |||
| 243 | # Create firmware configuration and cmdline symlinks |
|
244 | # Create firmware configuration and cmdline symlinks | |
| 244 | ln -sf firmware/config.txt "${R}/boot/config.txt" |
|
245 | ln -sf firmware/config.txt "${R}/boot/config.txt" | |
| 245 | ln -sf firmware/cmdline.txt "${R}/boot/cmdline.txt" |
|
246 | ln -sf firmware/cmdline.txt "${R}/boot/cmdline.txt" | |
| 246 |
|
247 | |||
| 247 | # Install and setup kernel modules to load at boot |
|
248 | # Install and setup kernel modules to load at boot | |
| 248 | mkdir -p "${LIB_DIR}/modules-load.d/" |
|
249 | mkdir -p "${LIB_DIR}/modules-load.d/" | |
| 249 | install_readonly files/modules/rpi2.conf "${LIB_DIR}/modules-load.d/rpi2.conf" |
|
250 | install_readonly files/modules/rpi2.conf "${LIB_DIR}/modules-load.d/rpi2.conf" | |
| 250 |
|
251 | |||
| 251 | # Load hardware random module at boot |
|
252 | # Load hardware random module at boot | |
| 252 | if [ "$ENABLE_HWRANDOM" = true ] && [ "$BUILD_KERNEL" = false ] ; then |
|
253 | if [ "$ENABLE_HWRANDOM" = true ] && [ "$BUILD_KERNEL" = false ] ; then | |
| 253 | sed -i "s/^# bcm2708_rng/bcm2708_rng/" "${LIB_DIR}/modules-load.d/rpi2.conf" |
|
254 | sed -i "s/^# bcm2708_rng/bcm2708_rng/" "${LIB_DIR}/modules-load.d/rpi2.conf" | |
| 254 | fi |
|
255 | fi | |
| 255 |
|
256 | |||
| 256 | # Load sound module at boot |
|
257 | # Load sound module at boot | |
| 257 | if [ "$ENABLE_SOUND" = true ] ; then |
|
258 | if [ "$ENABLE_SOUND" = true ] ; then | |
| 258 | sed -i "s/^# snd_bcm2835/snd_bcm2835/" "${LIB_DIR}/modules-load.d/rpi2.conf" |
|
259 | sed -i "s/^# snd_bcm2835/snd_bcm2835/" "${LIB_DIR}/modules-load.d/rpi2.conf" | |
| 259 | else |
|
260 | else | |
| 260 | echo "dtparam=audio=off" >> "${BOOT_DIR}/config.txt" |
|
261 | echo "dtparam=audio=off" >> "${BOOT_DIR}/config.txt" | |
| 261 | fi |
|
262 | fi | |
| 262 |
|
263 | |||
| 263 | # Enable I2C interface |
|
264 | # Enable I2C interface | |
| 264 | if [ "$ENABLE_I2C" = true ] ; then |
|
265 | if [ "$ENABLE_I2C" = true ] ; then | |
| 265 | echo "dtparam=i2c_arm=on" >> "${BOOT_DIR}/config.txt" |
|
266 | echo "dtparam=i2c_arm=on" >> "${BOOT_DIR}/config.txt" | |
| 266 | sed -i "s/^# i2c-bcm2708/i2c-bcm2708/" "${LIB_DIR}/modules-load.d/rpi2.conf" |
|
267 | sed -i "s/^# i2c-bcm2708/i2c-bcm2708/" "${LIB_DIR}/modules-load.d/rpi2.conf" | |
| 267 | sed -i "s/^# i2c-dev/i2c-dev/" "${LIB_DIR}/modules-load.d/rpi2.conf" |
|
268 | sed -i "s/^# i2c-dev/i2c-dev/" "${LIB_DIR}/modules-load.d/rpi2.conf" | |
| 268 | fi |
|
269 | fi | |
| 269 |
|
270 | |||
| 270 | # Enable SPI interface |
|
271 | # Enable SPI interface | |
| 271 | if [ "$ENABLE_SPI" = true ] ; then |
|
272 | if [ "$ENABLE_SPI" = true ] ; then | |
| 272 | echo "dtparam=spi=on" >> "${BOOT_DIR}/config.txt" |
|
273 | echo "dtparam=spi=on" >> "${BOOT_DIR}/config.txt" | |
| 273 | echo "spi-bcm2708" >> "${LIB_DIR}/modules-load.d/rpi2.conf" |
|
274 | echo "spi-bcm2708" >> "${LIB_DIR}/modules-load.d/rpi2.conf" | |
| 274 | if [ "$RPI_MODEL" = 3 ] || [ "$RPI_MODEL" = 3P ]; then |
|
275 | if [ "$RPI_MODEL" = 3 ] || [ "$RPI_MODEL" = 3P ]; then | |
| 275 | sed -i "s/spi-bcm2708/spi-bcm2835/" "${LIB_DIR}/modules-load.d/rpi2.conf" |
|
276 | sed -i "s/spi-bcm2708/spi-bcm2835/" "${LIB_DIR}/modules-load.d/rpi2.conf" | |
| 276 | fi |
|
277 | fi | |
| 277 | fi |
|
278 | fi | |
| 278 |
|
279 | |||
| 279 | # Disable RPi2/3 under-voltage warnings |
|
280 | # Disable RPi2/3 under-voltage warnings | |
| 280 | if [ -n "$DISABLE_UNDERVOLT_WARNINGS" ] ; then |
|
281 | if [ -n "$DISABLE_UNDERVOLT_WARNINGS" ] ; then | |
| 281 | echo "avoid_warnings=${DISABLE_UNDERVOLT_WARNINGS}" >> "${BOOT_DIR}/config.txt" |
|
282 | echo "avoid_warnings=${DISABLE_UNDERVOLT_WARNINGS}" >> "${BOOT_DIR}/config.txt" | |
| 282 | fi |
|
283 | fi | |
| 283 |
|
284 | |||
| 284 | # Install kernel modules blacklist |
|
285 | # Install kernel modules blacklist | |
| 285 | mkdir -p "${ETC_DIR}/modprobe.d/" |
|
286 | mkdir -p "${ETC_DIR}/modprobe.d/" | |
| 286 | install_readonly files/modules/raspi-blacklist.conf "${ETC_DIR}/modprobe.d/raspi-blacklist.conf" |
|
287 | install_readonly files/modules/raspi-blacklist.conf "${ETC_DIR}/modprobe.d/raspi-blacklist.conf" | |
| 287 |
|
288 | |||
| 288 | # Install sysctl.d configuration files |
|
289 | # Install sysctl.d configuration files | |
| 289 | install_readonly files/sysctl.d/81-rpi-vm.conf "${ETC_DIR}/sysctl.d/81-rpi-vm.conf" |
|
290 | install_readonly files/sysctl.d/81-rpi-vm.conf "${ETC_DIR}/sysctl.d/81-rpi-vm.conf" | |
General Comments 0
Vous devez vous connecter pour laisser un commentaire.
Se connecter maintenant
