Raspi2-3_GenImage Commit - r204:a8639039065a · Collaboration Tremplin des Sciences

1

#!/bin/sh

1

#!/bin/sh

2

3

########################################################################

3

########################################################################

4

# rpi23-gen-image.sh 2015-2017

4

# rpi23-gen-image.sh 2015-2017

5

#

5

#

6

# Advanced Debian "jessie" and "stretch" bootstrap script for RPi2/3

6

# Advanced Debian "jessie" and "stretch" bootstrap script for RPi2/3

7

#

7

#

8

# This program is free software; you can redistribute it and/or

8

# This program is free software; you can redistribute it and/or

9

# modify it under the terms of the GNU General Public License

9

# modify it under the terms of the GNU General Public License

10

# as published by the Free Software Foundation; either version 2

10

# as published by the Free Software Foundation; either version 2

11

# of the License, or (at your option) any later version.

11

# of the License, or (at your option) any later version.

12

#

12

#

13

14

#

14

#

15

# Big thanks for patches and enhancements by 10+ github contributors!

15

# Big thanks for patches and enhancements by 10+ github contributors!

16

########################################################################

16

########################################################################

17

18

# Are we running as root?

18

# Are we running as root?

19

if [ "$(id -u)" -ne "0" ] ; then

19

if [ "$(id -u)" -ne "0" ] ; then

20

echo "error: this script must be executed with root privileges!"

20

echo "error: this script must be executed with root privileges!"

21

exit 1

21

exit 1

22

fi

22

fi

23

24

# Check if ./functions.sh script exists

24

# Check if ./functions.sh script exists

25

if [ ! -r "./functions.sh" ] ; then

25

if [ ! -r "./functions.sh" ] ; then

26

echo "error: './functions.sh' required script not found!"

26

echo "error: './functions.sh' required script not found!"

27

exit 1

27

exit 1

28

fi

28

fi

29

30

# Load utility functions

30

# Load utility functions

31

. ./functions.sh

31

. ./functions.sh

32

33

# Load parameters from configuration template file

33

# Load parameters from configuration template file

34

if [ ! -z "$CONFIG_TEMPLATE" ] ; then

34

if [ ! -z "$CONFIG_TEMPLATE" ] ; then

35

use_template

35

use_template

36

fi

36

fi

37

38

# Introduce settings

38

# Introduce settings

39

set -e

39

set -e

40

echo -n -e "\n#\n# RPi2/3 Bootstrap Settings\n#\n"

40

echo -n -e "\n#\n# RPi2/3 Bootstrap Settings\n#\n"

41

set -x

41

set -x

42

43

# Raspberry Pi model configuration

43

# Raspberry Pi model configuration

44

RPI_MODEL=${RPI_MODEL:=2}

44

RPI_MODEL=${RPI_MODEL:=2}

45

RPI2_DTB_FILE=${RPI2_DTB_FILE:=bcm2709-rpi-2-b.dtb}

45

RPI2_DTB_FILE=${RPI2_DTB_FILE:=bcm2709-rpi-2-b.dtb}

46

RPI2_UBOOT_CONFIG=${RPI2_UBOOT_CONFIG:=rpi_2_defconfig}

46

RPI2_UBOOT_CONFIG=${RPI2_UBOOT_CONFIG:=rpi_2_defconfig}

47

RPI3_DTB_FILE=${RPI3_DTB_FILE:=bcm2710-rpi-3-b.dtb}

47

RPI3_DTB_FILE=${RPI3_DTB_FILE:=bcm2710-rpi-3-b.dtb}

48

RPI3_UBOOT_CONFIG=${RPI3_UBOOT_CONFIG:=rpi_3_32b_defconfig}

48

RPI3_UBOOT_CONFIG=${RPI3_UBOOT_CONFIG:=rpi_3_32b_defconfig}

49

50

# Debian release

50

# Debian release

51

RELEASE=${RELEASE:=jessie}

51

RELEASE=${RELEASE:=jessie}

52

KERNEL_ARCH=${KERNEL_ARCH:=arm}

52

KERNEL_ARCH=${KERNEL_ARCH:=arm}

53

RELEASE_ARCH=${RELEASE_ARCH:=armhf}

53

RELEASE_ARCH=${RELEASE_ARCH:=armhf}

54

CROSS_COMPILE=${CROSS_COMPILE:=arm-linux-gnueabihf-}

54

CROSS_COMPILE=${CROSS_COMPILE:=arm-linux-gnueabihf-}

55

COLLABORA_KERNEL=${COLLABORA_KERNEL:=3.18.0-trunk-rpi2}

55

COLLABORA_KERNEL=${COLLABORA_KERNEL:=3.18.0-trunk-rpi2}

56

if [ "$KERNEL_ARCH" = "arm64" ] ; then

56

if [ "$KERNEL_ARCH" = "arm64" ] ; then

57

KERNEL_DEFCONFIG=${KERNEL_DEFCONFIG:=bcmrpi3_defconfig}

57

KERNEL_DEFCONFIG=${KERNEL_DEFCONFIG:=bcmrpi3_defconfig}

58

KERNEL_IMAGE=${KERNEL_IMAGE:=kernel8.img}

58

KERNEL_IMAGE=${KERNEL_IMAGE:=kernel8.img}

59

else

59

else

60

KERNEL_DEFCONFIG=${KERNEL_DEFCONFIG:=bcm2709_defconfig}

60

KERNEL_DEFCONFIG=${KERNEL_DEFCONFIG:=bcm2709_defconfig}

61

KERNEL_IMAGE=${KERNEL_IMAGE:=kernel7.img}

61

KERNEL_IMAGE=${KERNEL_IMAGE:=kernel7.img}

62

fi

62

fi

63

if [ "$RELEASE_ARCH" = "arm64" ] ; then

63

if [ "$RELEASE_ARCH" = "arm64" ] ; then

64

QEMU_BINARY=${QEMU_BINARY:=/usr/bin/qemu-aarch64-static}

64

QEMU_BINARY=${QEMU_BINARY:=/usr/bin/qemu-aarch64-static}

65

else

65

else

66

QEMU_BINARY=${QEMU_BINARY:=/usr/bin/qemu-arm-static}

66

QEMU_BINARY=${QEMU_BINARY:=/usr/bin/qemu-arm-static}

67

fi

67

fi

68

KERNEL_BRANCH=${KERNEL_BRANCH:=""}

68

KERNEL_BRANCH=${KERNEL_BRANCH:=""}

69

70

# URLs

70

# URLs

71

KERNEL_URL=${KERNEL_URL:=https://github.com/raspberrypi/linux}

71

KERNEL_URL=${KERNEL_URL:=https://github.com/raspberrypi/linux}

72

FIRMWARE_URL=${FIRMWARE_URL:=https://github.com/raspberrypi/firmware/raw/master/boot}

72

FIRMWARE_URL=${FIRMWARE_URL:=https://github.com/raspberrypi/firmware/raw/master/boot}

73

WLAN_FIRMWARE_URL=${WLAN_FIRMWARE_URL:=https://github.com/RPi-Distro/firmware-nonfree/raw/master/brcm80211/brcm}

73

WLAN_FIRMWARE_URL=${WLAN_FIRMWARE_URL:=https://github.com/RPi-Distro/firmware-nonfree/raw/master/brcm80211/brcm}

74

COLLABORA_URL=${COLLABORA_URL:=https://repositories.collabora.co.uk/debian}

74

COLLABORA_URL=${COLLABORA_URL:=https://repositories.collabora.co.uk/debian}

75

FBTURBO_URL=${FBTURBO_URL:=https://github.com/ssvb/xf86-video-fbturbo.git}

75

FBTURBO_URL=${FBTURBO_URL:=https://github.com/ssvb/xf86-video-fbturbo.git}

76

UBOOT_URL=${UBOOT_URL:=git://git.denx.de/u-boot.git}

76

UBOOT_URL=${UBOOT_URL:=git://git.denx.de/u-boot.git}

77

78

# Build directories

78

# Build directories

79

BASEDIR=${BASEDIR:=$(pwd)/images/${RELEASE}}

79

BASEDIR=${BASEDIR:=$(pwd)/images/${RELEASE}}

80

BUILDDIR="${BASEDIR}/build"

80

BUILDDIR="${BASEDIR}/build"

81

82

# Prepare date string for default image file name

82

# Prepare date string for default image file name

83

DATE="$(date +%Y-%m-%d)"

83

DATE="$(date +%Y-%m-%d)"

84

if [ -z "$KERNEL_BRANCH" ] ; then

84

if [ -z "$KERNEL_BRANCH" ] ; then

85

IMAGE_NAME=${IMAGE_NAME:=${BASEDIR}/${DATE}-${KERNEL_ARCH}-CURRENT-rpi${RPI_MODEL}-${RELEASE}-${RELEASE_ARCH}}

85

IMAGE_NAME=${IMAGE_NAME:=${BASEDIR}/${DATE}-${KERNEL_ARCH}-CURRENT-rpi${RPI_MODEL}-${RELEASE}-${RELEASE_ARCH}}

86

else

86

else

87

IMAGE_NAME=${IMAGE_NAME:=${BASEDIR}/${DATE}-${KERNEL_ARCH}-${KERNEL_BRANCH}-rpi${RPI_MODEL}-${RELEASE}-${RELEASE_ARCH}}

87

IMAGE_NAME=${IMAGE_NAME:=${BASEDIR}/${DATE}-${KERNEL_ARCH}-${KERNEL_BRANCH}-rpi${RPI_MODEL}-${RELEASE}-${RELEASE_ARCH}}

88

fi

88

fi

89

90

# Chroot directories

90

# Chroot directories

91

R="${BUILDDIR}/chroot"

91

R="${BUILDDIR}/chroot"

92

ETC_DIR="${R}/etc"

92

ETC_DIR="${R}/etc"

93

LIB_DIR="${R}/lib"

93

LIB_DIR="${R}/lib"

94

BOOT_DIR="${R}/boot/firmware"

94

BOOT_DIR="${R}/boot/firmware"

95

KERNEL_DIR="${R}/usr/src/linux"

95

KERNEL_DIR="${R}/usr/src/linux"

96

WLAN_FIRMWARE_DIR="${R}/lib/firmware/brcm"

96

WLAN_FIRMWARE_DIR="${R}/lib/firmware/brcm"

97

98

# Firmware directory: Blank if download from github

98

# Firmware directory: Blank if download from github

99

RPI_FIRMWARE_DIR=${RPI_FIRMWARE_DIR:=""}

99

RPI_FIRMWARE_DIR=${RPI_FIRMWARE_DIR:=""}

100

101

# General settings

101

# General settings

102

HOSTNAME=${HOSTNAME:=rpi${RPI_MODEL}-${RELEASE}}

102

HOSTNAME=${HOSTNAME:=rpi${RPI_MODEL}-${RELEASE}}

103

PASSWORD=${PASSWORD:=raspberry}

103

PASSWORD=${PASSWORD:=raspberry}

104

USER_PASSWORD=${USER_PASSWORD:=raspberry}

104

USER_PASSWORD=${USER_PASSWORD:=raspberry}

105

DEFLOCAL=${DEFLOCAL:="en_US.UTF-8"}

105

DEFLOCAL=${DEFLOCAL:="en_US.UTF-8"}

106

TIMEZONE=${TIMEZONE:="Europe/Berlin"}

106

TIMEZONE=${TIMEZONE:="Europe/Berlin"}

107

EXPANDROOT=${EXPANDROOT:=true}

107

EXPANDROOT=${EXPANDROOT:=true}

108

109

# Keyboard settings

109

# Keyboard settings

110

XKB_MODEL=${XKB_MODEL:=""}

110

XKB_MODEL=${XKB_MODEL:=""}

111

XKB_LAYOUT=${XKB_LAYOUT:=""}

111

XKB_LAYOUT=${XKB_LAYOUT:=""}

112

XKB_VARIANT=${XKB_VARIANT:=""}

112

XKB_VARIANT=${XKB_VARIANT:=""}

113

XKB_OPTIONS=${XKB_OPTIONS:=""}

113

XKB_OPTIONS=${XKB_OPTIONS:=""}

114

115

# Network settings (DHCP)

115

# Network settings (DHCP)

116

ENABLE_DHCP=${ENABLE_DHCP:=true}

116

ENABLE_DHCP=${ENABLE_DHCP:=true}

117

118

# Network settings (static)

118

# Network settings (static)

119

NET_ADDRESS=${NET_ADDRESS:=""}

119

NET_ADDRESS=${NET_ADDRESS:=""}

120

NET_GATEWAY=${NET_GATEWAY:=""}

120

NET_GATEWAY=${NET_GATEWAY:=""}

121

NET_DNS_1=${NET_DNS_1:=""}

121

NET_DNS_1=${NET_DNS_1:=""}

122

NET_DNS_2=${NET_DNS_2:=""}

122

NET_DNS_2=${NET_DNS_2:=""}

123

NET_DNS_DOMAINS=${NET_DNS_DOMAINS:=""}

123

NET_DNS_DOMAINS=${NET_DNS_DOMAINS:=""}

124

NET_NTP_1=${NET_NTP_1:=""}

124

NET_NTP_1=${NET_NTP_1:=""}

125

NET_NTP_2=${NET_NTP_2:=""}

125

NET_NTP_2=${NET_NTP_2:=""}

126

127

# APT settings

127

# APT settings

128

APT_PROXY=${APT_PROXY:=""}

128

APT_PROXY=${APT_PROXY:=""}

129

APT_SERVER=${APT_SERVER:="ftp.debian.org"}

129

APT_SERVER=${APT_SERVER:="ftp.debian.org"}

130

131

# Feature settings

131

# Feature settings

132

ENABLE_CONSOLE=${ENABLE_CONSOLE:=true}

132

ENABLE_CONSOLE=${ENABLE_CONSOLE:=true}

133

ENABLE_I2C=${ENABLE_I2C:=false}

133

ENABLE_I2C=${ENABLE_I2C:=false}

134

ENABLE_SPI=${ENABLE_SPI:=false}

134

ENABLE_SPI=${ENABLE_SPI:=false}

135

ENABLE_IPV6=${ENABLE_IPV6:=true}

135

ENABLE_IPV6=${ENABLE_IPV6:=true}

136

ENABLE_SSHD=${ENABLE_SSHD:=true}

136

ENABLE_SSHD=${ENABLE_SSHD:=true}

137

ENABLE_NONFREE=${ENABLE_NONFREE:=false}

137

ENABLE_NONFREE=${ENABLE_NONFREE:=false}

138

ENABLE_WIRELESS=${ENABLE_WIRELESS:=false}

138

ENABLE_WIRELESS=${ENABLE_WIRELESS:=false}

139

ENABLE_SOUND=${ENABLE_SOUND:=true}

139

ENABLE_SOUND=${ENABLE_SOUND:=true}

140

ENABLE_DBUS=${ENABLE_DBUS:=true}

140

ENABLE_DBUS=${ENABLE_DBUS:=true}

141

ENABLE_HWRANDOM=${ENABLE_HWRANDOM:=true}

141

ENABLE_HWRANDOM=${ENABLE_HWRANDOM:=true}

142

ENABLE_MINGPU=${ENABLE_MINGPU:=false}

142

ENABLE_MINGPU=${ENABLE_MINGPU:=false}

143

ENABLE_XORG=${ENABLE_XORG:=false}

143

ENABLE_XORG=${ENABLE_XORG:=false}

144

ENABLE_WM=${ENABLE_WM:=""}

144

ENABLE_WM=${ENABLE_WM:=""}

145

ENABLE_RSYSLOG=${ENABLE_RSYSLOG:=true}

145

ENABLE_RSYSLOG=${ENABLE_RSYSLOG:=true}

146

ENABLE_USER=${ENABLE_USER:=true}

146

ENABLE_USER=${ENABLE_USER:=true}

147

USER_NAME=${USER_NAME:="pi"}

147

USER_NAME=${USER_NAME:="pi"}

148

ENABLE_ROOT=${ENABLE_ROOT:=false}

148

ENABLE_ROOT=${ENABLE_ROOT:=false}

149

150

# SSH settings

150

# SSH settings

151

SSH_ENABLE_ROOT=${SSH_ENABLE_ROOT:=false}

151

SSH_ENABLE_ROOT=${SSH_ENABLE_ROOT:=false}

152

SSH_DISABLE_PASSWORD_AUTH=${SSH_DISABLE_PASSWORD_AUTH:=false}

152

SSH_DISABLE_PASSWORD_AUTH=${SSH_DISABLE_PASSWORD_AUTH:=false}

153

SSH_LIMIT_USERS=${SSH_LIMIT_USERS:=false}

153

SSH_LIMIT_USERS=${SSH_LIMIT_USERS:=false}

154

SSH_ROOT_PUB_KEY=${SSH_ROOT_PUB_KEY:=""}

154

SSH_ROOT_PUB_KEY=${SSH_ROOT_PUB_KEY:=""}

155

SSH_USER_PUB_KEY=${SSH_USER_PUB_KEY:=""}

155

SSH_USER_PUB_KEY=${SSH_USER_PUB_KEY:=""}

156

157

# Advanced settings

157

# Advanced settings

158

ENABLE_MINBASE=${ENABLE_MINBASE:=false}

158

ENABLE_MINBASE=${ENABLE_MINBASE:=false}

159

ENABLE_REDUCE=${ENABLE_REDUCE:=false}

159

ENABLE_REDUCE=${ENABLE_REDUCE:=false}

160

ENABLE_UBOOT=${ENABLE_UBOOT:=false}

160

ENABLE_UBOOT=${ENABLE_UBOOT:=false}

161

UBOOTSRC_DIR=${UBOOTSRC_DIR:=""}

161

UBOOTSRC_DIR=${UBOOTSRC_DIR:=""}

162

ENABLE_FBTURBO=${ENABLE_FBTURBO:=false}

162

ENABLE_FBTURBO=${ENABLE_FBTURBO:=false}

163

FBTURBOSRC_DIR=${FBTURBOSRC_DIR:=""}

163

FBTURBOSRC_DIR=${FBTURBOSRC_DIR:=""}

164

ENABLE_HARDNET=${ENABLE_HARDNET:=false}

164

ENABLE_HARDNET=${ENABLE_HARDNET:=false}

165

ENABLE_IPTABLES=${ENABLE_IPTABLES:=false}

165

ENABLE_IPTABLES=${ENABLE_IPTABLES:=false}

166

ENABLE_SPLITFS=${ENABLE_SPLITFS:=false}

166

ENABLE_SPLITFS=${ENABLE_SPLITFS:=false}

167

ENABLE_INITRAMFS=${ENABLE_INITRAMFS:=false}

167

ENABLE_INITRAMFS=${ENABLE_INITRAMFS:=false}

168

ENABLE_IFNAMES=${ENABLE_IFNAMES:=true}

168

ENABLE_IFNAMES=${ENABLE_IFNAMES:=true}

169

DISABLE_UNDERVOLT_WARNINGS=${DISABLE_UNDERVOLT_WARNINGS:=}

169

DISABLE_UNDERVOLT_WARNINGS=${DISABLE_UNDERVOLT_WARNINGS:=}

170

171

# Kernel compilation settings

171

# Kernel compilation settings

172

BUILD_KERNEL=${BUILD_KERNEL:=false}

172

BUILD_KERNEL=${BUILD_KERNEL:=false}

173

KERNEL_REDUCE=${KERNEL_REDUCE:=false}

173

KERNEL_REDUCE=${KERNEL_REDUCE:=false}

174

KERNEL_THREADS=${KERNEL_THREADS:=1}

174

KERNEL_THREADS=${KERNEL_THREADS:=1}

175

KERNEL_HEADERS=${KERNEL_HEADERS:=true}

175

KERNEL_HEADERS=${KERNEL_HEADERS:=true}

176

KERNEL_MENUCONFIG=${KERNEL_MENUCONFIG:=false}

176

KERNEL_MENUCONFIG=${KERNEL_MENUCONFIG:=false}

177

KERNEL_REMOVESRC=${KERNEL_REMOVESRC:=true}

177

KERNEL_REMOVESRC=${KERNEL_REMOVESRC:=true}

178

if [ "$KERNEL_ARCH" = "arm64" ] ; then

178

if [ "$KERNEL_ARCH" = "arm64" ] ; then

179

KERNEL_BIN_IMAGE=${KERNEL_BIN_IMAGE:="Image"}

179

KERNEL_BIN_IMAGE=${KERNEL_BIN_IMAGE:="Image"}

180

else

180

else

181

KERNEL_BIN_IMAGE=${KERNEL_BIN_IMAGE:="zImage"}

181

KERNEL_BIN_IMAGE=${KERNEL_BIN_IMAGE:="zImage"}

182

fi

182

fi

183

184

# Kernel compilation from source directory settings

184

# Kernel compilation from source directory settings

185

KERNELSRC_DIR=${KERNELSRC_DIR:=""}

185

KERNELSRC_DIR=${KERNELSRC_DIR:=""}

186

KERNELSRC_CLEAN=${KERNELSRC_CLEAN:=false}

186

KERNELSRC_CLEAN=${KERNELSRC_CLEAN:=false}

187

KERNELSRC_CONFIG=${KERNELSRC_CONFIG:=true}

187

KERNELSRC_CONFIG=${KERNELSRC_CONFIG:=true}

188

KERNELSRC_PREBUILT=${KERNELSRC_PREBUILT:=false}

188

KERNELSRC_PREBUILT=${KERNELSRC_PREBUILT:=false}

189

190

# Reduce disk usage settings

190

# Reduce disk usage settings

191

REDUCE_APT=${REDUCE_APT:=true}

191

REDUCE_APT=${REDUCE_APT:=true}

192

REDUCE_DOC=${REDUCE_DOC:=true}

192

REDUCE_DOC=${REDUCE_DOC:=true}

193

REDUCE_MAN=${REDUCE_MAN:=true}

193

REDUCE_MAN=${REDUCE_MAN:=true}

194

REDUCE_VIM=${REDUCE_VIM:=false}

194

REDUCE_VIM=${REDUCE_VIM:=false}

195

REDUCE_BASH=${REDUCE_BASH:=false}

195

REDUCE_BASH=${REDUCE_BASH:=false}

196

REDUCE_HWDB=${REDUCE_HWDB:=true}

196

REDUCE_HWDB=${REDUCE_HWDB:=true}

197

REDUCE_SSHD=${REDUCE_SSHD:=true}

197

REDUCE_SSHD=${REDUCE_SSHD:=true}

198

REDUCE_LOCALE=${REDUCE_LOCALE:=true}

198

REDUCE_LOCALE=${REDUCE_LOCALE:=true}

199

200

# Encrypted filesystem settings

200

# Encrypted filesystem settings

201

ENABLE_CRYPTFS=${ENABLE_CRYPTFS:=false}

201

ENABLE_CRYPTFS=${ENABLE_CRYPTFS:=false}

202

CRYPTFS_PASSWORD=${CRYPTFS_PASSWORD:=""}

202

CRYPTFS_PASSWORD=${CRYPTFS_PASSWORD:=""}

203

CRYPTFS_MAPPING=${CRYPTFS_MAPPING:="secure"}

203

CRYPTFS_MAPPING=${CRYPTFS_MAPPING:="secure"}

204

CRYPTFS_CIPHER=${CRYPTFS_CIPHER:="aes-xts-plain64:sha512"}

204

CRYPTFS_CIPHER=${CRYPTFS_CIPHER:="aes-xts-plain64:sha512"}

205

CRYPTFS_XTSKEYSIZE=${CRYPTFS_XTSKEYSIZE:=512}

205

CRYPTFS_XTSKEYSIZE=${CRYPTFS_XTSKEYSIZE:=512}

206

207

# Stop the Crypto Wars

207

# Stop the Crypto Wars

208

DISABLE_FBI=${DISABLE_FBI:=false}

208

DISABLE_FBI=${DISABLE_FBI:=false}

209

210

# Chroot scripts directory

210

# Chroot scripts directory

211

CHROOT_SCRIPTS=${CHROOT_SCRIPTS:=""}

211

CHROOT_SCRIPTS=${CHROOT_SCRIPTS:=""}

212

213

# Packages required in the chroot build environment

213

# Packages required in the chroot build environment

214

APT_INCLUDES=${APT_INCLUDES:=""}

214

APT_INCLUDES=${APT_INCLUDES:=""}

215

# apt-transport-https has been removed from repositories

216

# this induces qemu error 383 which does not prevent building an image

217

if [ "$RELEASE" = "buster" ] ; then

218

APT_INCLUDES="${APT_INCLUDES},apt-utils,ca-certificates,debian-archive-keyring,dialog,sudo,systemd,sysvinit-utils"

219

else

215

APT_INCLUDES="${APT_INCLUDES},apt-transport-https,apt-utils,ca-certificates,debian-archive-keyring,dialog,sudo,systemd,sysvinit-utils"

220

APT_INCLUDES="${APT_INCLUDES},apt-transport-https,apt-utils,ca-certificates,debian-archive-keyring,dialog,sudo,systemd,sysvinit-utils"

216

221

fi

217

# Packages required for bootstrapping

222

# Packages required for bootstrapping

218

REQUIRED_PACKAGES="debootstrap debian-archive-keyring qemu-user-static binfmt-support dosfstools rsync bmap-tools whois git bc psmisc dbus sudo"

223

REQUIRED_PACKAGES="debootstrap debian-archive-keyring qemu-user-static binfmt-support dosfstools rsync bmap-tools whois git bc psmisc dbus sudo"

219

MISSING_PACKAGES=""

224

MISSING_PACKAGES=""

220

225

221

# Packages installed for c/c++ build environment in chroot (keep empty)

226

# Packages installed for c/c++ build environment in chroot (keep empty)

222

COMPILER_PACKAGES=""

227

COMPILER_PACKAGES=""

223

228

224

set +x

229

set +x

225

230

226

# Set Raspberry Pi model specific configuration

231

# Set Raspberry Pi model specific configuration

227

if [ "$RPI_MODEL" = 2 ] ; then

232

if [ "$RPI_MODEL" = 2 ] ; then

228

DTB_FILE=${RPI2_DTB_FILE}

233

DTB_FILE=${RPI2_DTB_FILE}

229

UBOOT_CONFIG=${RPI2_UBOOT_CONFIG}

234

UBOOT_CONFIG=${RPI2_UBOOT_CONFIG}

230

elif [ "$RPI_MODEL" = 3 ] ; then

235

elif [ "$RPI_MODEL" = 3 ] ; then

231

DTB_FILE=${RPI3_DTB_FILE}

236

DTB_FILE=${RPI3_DTB_FILE}

232

UBOOT_CONFIG=${RPI3_UBOOT_CONFIG}

237

UBOOT_CONFIG=${RPI3_UBOOT_CONFIG}

233

BUILD_KERNEL=true

238

BUILD_KERNEL=true

234

else

239

else

235

echo "error: Raspberry Pi model ${RPI_MODEL} is not supported!"

240

echo "error: Raspberry Pi model ${RPI_MODEL} is not supported!"

236

exit 1

241

exit 1

237

fi

242

fi

238

243

239

# Check if the internal wireless interface is supported by the RPi model

244

# Check if the internal wireless interface is supported by the RPi model

240

if [ "$ENABLE_WIRELESS" = true ] && [ "$RPI_MODEL" != 3 ] ; then

245

if [ "$ENABLE_WIRELESS" = true ] && [ "$RPI_MODEL" != 3 ] ; then

241

echo "error: The selected Raspberry Pi model has no internal wireless interface"

246

echo "error: The selected Raspberry Pi model has no internal wireless interface"

242

exit 1

247

exit 1

243

fi

248

fi

244

249

245

# Check if DISABLE_UNDERVOLT_WARNINGS parameter value is supported

250

# Check if DISABLE_UNDERVOLT_WARNINGS parameter value is supported

246

if [ ! -z "$DISABLE_UNDERVOLT_WARNINGS" ] ; then

251

if [ ! -z "$DISABLE_UNDERVOLT_WARNINGS" ] ; then

247

if [ "$DISABLE_UNDERVOLT_WARNINGS" != 1 ] && [ "$DISABLE_UNDERVOLT_WARNINGS" != 2 ] ; then

252

if [ "$DISABLE_UNDERVOLT_WARNINGS" != 1 ] && [ "$DISABLE_UNDERVOLT_WARNINGS" != 2 ] ; then

248

echo "error: DISABLE_UNDERVOLT_WARNINGS=${DISABLE_UNDERVOLT_WARNINGS} is not supported"

253

echo "error: DISABLE_UNDERVOLT_WARNINGS=${DISABLE_UNDERVOLT_WARNINGS} is not supported"

249

exit 1

254

exit 1

250

fi

255

fi

251

fi

256

fi

252

257

253

# Build RPi2/3 Linux kernel if required by Debian release

258

# Build RPi2/3 Linux kernel if required by Debian release

254

if [ "$RELEASE" = "stretch" ] ; then

259

if [ "$RELEASE" = "stretch" ] ; then

255

BUILD_KERNEL=true

260

BUILD_KERNEL=true

256

fi

261

fi

257

262

258

# Add packages required for kernel cross compilation

263

# Add packages required for kernel cross compilation

259

if [ "$BUILD_KERNEL" = true ] ; then

264

if [ "$BUILD_KERNEL" = true ] ; then

260

if [ "$KERNEL_ARCH" = "arm" ] ; then

265

if [ "$KERNEL_ARCH" = "arm" ] ; then

261

REQUIRED_PACKAGES="${REQUIRED_PACKAGES} crossbuild-essential-armhf"

266

REQUIRED_PACKAGES="${REQUIRED_PACKAGES} crossbuild-essential-armhf"

262

else

267

else

263

REQUIRED_PACKAGES="${REQUIRED_PACKAGES} crossbuild-essential-arm64"

268

REQUIRED_PACKAGES="${REQUIRED_PACKAGES} crossbuild-essential-arm64"

264

fi

269

fi

265

fi

270

fi

266

271

267

# Add libncurses5 to enable kernel menuconfig

272

# Add libncurses5 to enable kernel menuconfig

268

if [ "$KERNEL_MENUCONFIG" = true ] ; then

273

if [ "$KERNEL_MENUCONFIG" = true ] ; then

269

REQUIRED_PACKAGES="${REQUIRED_PACKAGES} libncurses5-dev"

274

REQUIRED_PACKAGES="${REQUIRED_PACKAGES} libncurses5-dev"

270

fi

275

fi

271

276

272

# Stop the Crypto Wars

277

# Stop the Crypto Wars

273

if [ "$DISABLE_FBI" = true ] ; then

278

if [ "$DISABLE_FBI" = true ] ; then

274

ENABLE_CRYPTFS=true

279

ENABLE_CRYPTFS=true

275

fi

280

fi

276

281

277

# Add cryptsetup package to enable filesystem encryption

282

# Add cryptsetup package to enable filesystem encryption

278

if [ "$ENABLE_CRYPTFS" = true ] && [ "$BUILD_KERNEL" = true ] ; then

283

if [ "$ENABLE_CRYPTFS" = true ] && [ "$BUILD_KERNEL" = true ] ; then

279

REQUIRED_PACKAGES="${REQUIRED_PACKAGES} cryptsetup"

284

REQUIRED_PACKAGES="${REQUIRED_PACKAGES} cryptsetup"

280

APT_INCLUDES="${APT_INCLUDES},cryptsetup"

285

APT_INCLUDES="${APT_INCLUDES},cryptsetup"

281

286

282

if [ -z "$CRYPTFS_PASSWORD" ] ; then

287

if [ -z "$CRYPTFS_PASSWORD" ] ; then

283

echo "error: no password defined (CRYPTFS_PASSWORD)!"

288

echo "error: no password defined (CRYPTFS_PASSWORD)!"

284

exit 1

289

exit 1

285

fi

290

fi

286

ENABLE_INITRAMFS=true

291

ENABLE_INITRAMFS=true

287

fi

292

fi

288

293

289

# Add initramfs generation tools

294

# Add initramfs generation tools

290

if [ "$ENABLE_INITRAMFS" = true ] && [ "$BUILD_KERNEL" = true ] ; then

295

if [ "$ENABLE_INITRAMFS" = true ] && [ "$BUILD_KERNEL" = true ] ; then

291

APT_INCLUDES="${APT_INCLUDES},initramfs-tools"

296

APT_INCLUDES="${APT_INCLUDES},initramfs-tools"

292

fi

297

fi

293

298

294

# Add device-tree-compiler required for building the U-Boot bootloader

299

# Add device-tree-compiler required for building the U-Boot bootloader

295

if [ "$ENABLE_UBOOT" = true ] ; then

300

if [ "$ENABLE_UBOOT" = true ] ; then

296

APT_INCLUDES="${APT_INCLUDES},device-tree-compiler"

301

APT_INCLUDES="${APT_INCLUDES},device-tree-compiler"

297

fi

302

fi

298

303

299

# Check if root SSH (v2) public key file exists

304

# Check if root SSH (v2) public key file exists

300

if [ ! -z "$SSH_ROOT_PUB_KEY" ] ; then

305

if [ ! -z "$SSH_ROOT_PUB_KEY" ] ; then

301

if [ ! -f "$SSH_ROOT_PUB_KEY" ] ; then

306

if [ ! -f "$SSH_ROOT_PUB_KEY" ] ; then

302

echo "error: '$SSH_ROOT_PUB_KEY' specified SSH public key file not found (SSH_ROOT_PUB_KEY)!"

307

echo "error: '$SSH_ROOT_PUB_KEY' specified SSH public key file not found (SSH_ROOT_PUB_KEY)!"

303

exit 1

308

exit 1

304

fi

309

fi

305

fi

310

fi

306

311

307

# Check if $USER_NAME SSH (v2) public key file exists

312

# Check if $USER_NAME SSH (v2) public key file exists

308

if [ ! -z "$SSH_USER_PUB_KEY" ] ; then

313

if [ ! -z "$SSH_USER_PUB_KEY" ] ; then

309

if [ ! -f "$SSH_USER_PUB_KEY" ] ; then

314

if [ ! -f "$SSH_USER_PUB_KEY" ] ; then

310

echo "error: '$SSH_USER_PUB_KEY' specified SSH public key file not found (SSH_USER_PUB_KEY)!"

315

echo "error: '$SSH_USER_PUB_KEY' specified SSH public key file not found (SSH_USER_PUB_KEY)!"

311

exit 1

316

exit 1

312

fi

317

fi

313

fi

318

fi

314

319

315

# Check if all required packages are installed on the build system

320

# Check if all required packages are installed on the build system

316

for package in $REQUIRED_PACKAGES ; do

321

for package in $REQUIRED_PACKAGES ; do

317

if [ "`dpkg-query -W -f='${Status}' $package`" != "install ok installed" ] ; then

322

if [ "`dpkg-query -W -f='${Status}' $package`" != "install ok installed" ] ; then

318

MISSING_PACKAGES="${MISSING_PACKAGES} $package"

323

MISSING_PACKAGES="${MISSING_PACKAGES} $package"

319

fi

324

fi

320

done

325

done

321

326

322

# If there are missing packages ask confirmation for install, or exit

327

# If there are missing packages ask confirmation for install, or exit

323

if [ -n "$MISSING_PACKAGES" ] ; then

328

if [ -n "$MISSING_PACKAGES" ] ; then

324

echo "the following packages needed by this script are not installed:"

329

echo "the following packages needed by this script are not installed:"

325

echo "$MISSING_PACKAGES"

330

echo "$MISSING_PACKAGES"

326

331

327

echo -n "\ndo you want to install the missing packages right now? [y/n] "

332

echo -n "\ndo you want to install the missing packages right now? [y/n] "

328

read confirm

333

read confirm

329

[ "$confirm" != "y" ] && exit 1

334

[ "$confirm" != "y" ] && exit 1

330

335

331

# Make sure all missing required packages are installed

336

# Make sure all missing required packages are installed

332

apt-get -qq -y install ${MISSING_PACKAGES}

337

apt-get -qq -y install ${MISSING_PACKAGES}

333

fi

338

fi

334

339

335

# Check if ./bootstrap.d directory exists

340

# Check if ./bootstrap.d directory exists

336

if [ ! -d "./bootstrap.d/" ] ; then

341

if [ ! -d "./bootstrap.d/" ] ; then

337

echo "error: './bootstrap.d' required directory not found!"

342

echo "error: './bootstrap.d' required directory not found!"

338

exit 1

343

exit 1

339

fi

344

fi

340

345

341

# Check if ./files directory exists

346

# Check if ./files directory exists

342

if [ ! -d "./files/" ] ; then

347

if [ ! -d "./files/" ] ; then

343

echo "error: './files' required directory not found!"

348

echo "error: './files' required directory not found!"

344

exit 1

349

exit 1

345

fi

350

fi

346

351

347

# Check if specified KERNELSRC_DIR directory exists

352

# Check if specified KERNELSRC_DIR directory exists

348

if [ -n "$KERNELSRC_DIR" ] && [ ! -d "$KERNELSRC_DIR" ] ; then

353

if [ -n "$KERNELSRC_DIR" ] && [ ! -d "$KERNELSRC_DIR" ] ; then

349

echo "error: '${KERNELSRC_DIR}' specified directory not found (KERNELSRC_DIR)!"

354

echo "error: '${KERNELSRC_DIR}' specified directory not found (KERNELSRC_DIR)!"

350

exit 1

355

exit 1

351

fi

356

fi

352

357

353

# Check if specified UBOOTSRC_DIR directory exists

358

# Check if specified UBOOTSRC_DIR directory exists

354

if [ -n "$UBOOTSRC_DIR" ] && [ ! -d "$UBOOTSRC_DIR" ] ; then

359

if [ -n "$UBOOTSRC_DIR" ] && [ ! -d "$UBOOTSRC_DIR" ] ; then

355

echo "error: '${UBOOTSRC_DIR}' specified directory not found (UBOOTSRC_DIR)!"

360

echo "error: '${UBOOTSRC_DIR}' specified directory not found (UBOOTSRC_DIR)!"

356

exit 1

361

exit 1

357

fi

362

fi

358

363

359

# Check if specified FBTURBOSRC_DIR directory exists

364

# Check if specified FBTURBOSRC_DIR directory exists

360

if [ -n "$FBTURBOSRC_DIR" ] && [ ! -d "$FBTURBOSRC_DIR" ] ; then

365

if [ -n "$FBTURBOSRC_DIR" ] && [ ! -d "$FBTURBOSRC_DIR" ] ; then

361

echo "error: '${FBTURBOSRC_DIR}' specified directory not found (FBTURBOSRC_DIR)!"

366

echo "error: '${FBTURBOSRC_DIR}' specified directory not found (FBTURBOSRC_DIR)!"

362

exit 1

367

exit 1

363

fi

368

fi

364

369

365

# Check if specified CHROOT_SCRIPTS directory exists

370

# Check if specified CHROOT_SCRIPTS directory exists

366

if [ -n "$CHROOT_SCRIPTS" ] && [ ! -d "$CHROOT_SCRIPTS" ] ; then

371

if [ -n "$CHROOT_SCRIPTS" ] && [ ! -d "$CHROOT_SCRIPTS" ] ; then

367

echo "error: ${CHROOT_SCRIPTS} specified directory not found (CHROOT_SCRIPTS)!"

372

echo "error: ${CHROOT_SCRIPTS} specified directory not found (CHROOT_SCRIPTS)!"

368

exit 1

373

exit 1

369

fi

374

fi

370

375

371

# Check if specified device mapping already exists (will be used by cryptsetup)

376

# Check if specified device mapping already exists (will be used by cryptsetup)

372

if [ -r "/dev/mapping/${CRYPTFS_MAPPING}" ] ; then

377

if [ -r "/dev/mapping/${CRYPTFS_MAPPING}" ] ; then

373

echo "error: mapping /dev/mapping/${CRYPTFS_MAPPING} already exists, not proceeding"

378

echo "error: mapping /dev/mapping/${CRYPTFS_MAPPING} already exists, not proceeding"

374

exit 1

379

exit 1

375

fi

380

fi

376

381

377

# Don't clobber an old build

382

# Don't clobber an old build

378

if [ -e "$BUILDDIR" ] ; then

383

if [ -e "$BUILDDIR" ] ; then

379

echo "error: directory ${BUILDDIR} already exists, not proceeding"

384

echo "error: directory ${BUILDDIR} already exists, not proceeding"

380

exit 1

385

exit 1

381

fi

386

fi

382

387

383

# Setup chroot directory

388

# Setup chroot directory

384

mkdir -p "${R}"

389

mkdir -p "${R}"

385

390

386

# Check if build directory has enough of free disk space >512MB

391

# Check if build directory has enough of free disk space >512MB

387

if [ "$(df --output=avail ${BUILDDIR} | sed "1d")" -le "524288" ] ; then

392

if [ "$(df --output=avail ${BUILDDIR} | sed "1d")" -le "524288" ] ; then

388

echo "error: ${BUILDDIR} not enough space left to generate the output image!"

393

echo "error: ${BUILDDIR} not enough space left to generate the output image!"

389

exit 1

394

exit 1

390

fi

395

fi

391

396

392

set -x

397

set -x

393

398

394

# Call "cleanup" function on various signals and errors

399

# Call "cleanup" function on various signals and errors

395

trap cleanup 0 1 2 3 6

400

trap cleanup 0 1 2 3 6

396

401

397

# Add required packages for the minbase installation

402

# Add required packages for the minbase installation

398

if [ "$ENABLE_MINBASE" = true ] ; then

403

if [ "$ENABLE_MINBASE" = true ] ; then

399

APT_INCLUDES="${APT_INCLUDES},vim-tiny,netbase,net-tools,ifupdown"

404

APT_INCLUDES="${APT_INCLUDES},vim-tiny,netbase,net-tools,ifupdown"

400

fi

405

fi

401

406

402

# Add required locales packages

407

# Add required locales packages

403

if [ "$DEFLOCAL" != "en_US.UTF-8" ] ; then

408

if [ "$DEFLOCAL" != "en_US.UTF-8" ] ; then

404

APT_INCLUDES="${APT_INCLUDES},locales,keyboard-configuration,console-setup"

409

APT_INCLUDES="${APT_INCLUDES},locales,keyboard-configuration,console-setup"

405

fi

410

fi

406

411

407

# Add parted package, required to get partprobe utility

412

# Add parted package, required to get partprobe utility

408

if [ "$EXPANDROOT" = true ] ; then

413

if [ "$EXPANDROOT" = true ] ; then

409

APT_INCLUDES="${APT_INCLUDES},parted"

414

APT_INCLUDES="${APT_INCLUDES},parted"

410

fi

415

fi

411

416

412

# Add dbus package, recommended if using systemd

417

# Add dbus package, recommended if using systemd

413

if [ "$ENABLE_DBUS" = true ] ; then

418

if [ "$ENABLE_DBUS" = true ] ; then

414

APT_INCLUDES="${APT_INCLUDES},dbus"

419

APT_INCLUDES="${APT_INCLUDES},dbus"

415

fi

420

fi

416

421

417

# Add iptables IPv4/IPv6 package

422

# Add iptables IPv4/IPv6 package

418

if [ "$ENABLE_IPTABLES" = true ] ; then

423

if [ "$ENABLE_IPTABLES" = true ] ; then

419

APT_INCLUDES="${APT_INCLUDES},iptables"

424

APT_INCLUDES="${APT_INCLUDES},iptables"

420

fi

425

fi

421

426

422

# Add openssh server package

427

# Add openssh server package

423

if [ "$ENABLE_SSHD" = true ] ; then

428

if [ "$ENABLE_SSHD" = true ] ; then

424

APT_INCLUDES="${APT_INCLUDES},openssh-server"

429

APT_INCLUDES="${APT_INCLUDES},openssh-server"

425

fi

430

fi

426

431

427

# Add alsa-utils package

432

# Add alsa-utils package

428

if [ "$ENABLE_SOUND" = true ] ; then

433

if [ "$ENABLE_SOUND" = true ] ; then

429

APT_INCLUDES="${APT_INCLUDES},alsa-utils"

434

APT_INCLUDES="${APT_INCLUDES},alsa-utils"

430

fi

435

fi

431

436

432

# Add rng-tools package

437

# Add rng-tools package

433

if [ "$ENABLE_HWRANDOM" = true ] ; then

438

if [ "$ENABLE_HWRANDOM" = true ] ; then

434

APT_INCLUDES="${APT_INCLUDES},rng-tools"

439

APT_INCLUDES="${APT_INCLUDES},rng-tools"

435

fi

440

fi

436

441

437

# Add fbturbo video driver

442

# Add fbturbo video driver

438

if [ "$ENABLE_FBTURBO" = true ] ; then

443

if [ "$ENABLE_FBTURBO" = true ] ; then

439

# Enable xorg package dependencies

444

# Enable xorg package dependencies

440

ENABLE_XORG=true

445

ENABLE_XORG=true

441

fi

446

fi

442

447

443

# Add user defined window manager package

448

# Add user defined window manager package

444

if [ -n "$ENABLE_WM" ] ; then

449

if [ -n "$ENABLE_WM" ] ; then

445

APT_INCLUDES="${APT_INCLUDES},${ENABLE_WM}"

450

APT_INCLUDES="${APT_INCLUDES},${ENABLE_WM}"

446

451

447

# Enable xorg package dependencies

452

# Enable xorg package dependencies

448

ENABLE_XORG=true

453

ENABLE_XORG=true

449

fi

454

fi

450

455

451

# Add xorg package

456

# Add xorg package

452

if [ "$ENABLE_XORG" = true ] ; then

457

if [ "$ENABLE_XORG" = true ] ; then

453

APT_INCLUDES="${APT_INCLUDES},xorg"

458

APT_INCLUDES="${APT_INCLUDES},xorg"

454

fi

459

fi

455

460

456

# Replace selected packages with smaller clones

461

# Replace selected packages with smaller clones

457

if [ "$ENABLE_REDUCE" = true ] ; then

462

if [ "$ENABLE_REDUCE" = true ] ; then

458

# Add levee package instead of vim-tiny

463

# Add levee package instead of vim-tiny

459

if [ "$REDUCE_VIM" = true ] ; then

464

if [ "$REDUCE_VIM" = true ] ; then

460

APT_INCLUDES="$(echo ${APT_INCLUDES} | sed "s/vim-tiny/levee/")"

465

APT_INCLUDES="$(echo ${APT_INCLUDES} | sed "s/vim-tiny/levee/")"

461

fi

466

fi

462

467

463

# Add dropbear package instead of openssh-server

468

# Add dropbear package instead of openssh-server

464

if [ "$REDUCE_SSHD" = true ] ; then

469

if [ "$REDUCE_SSHD" = true ] ; then

465

APT_INCLUDES="$(echo ${APT_INCLUDES} | sed "s/openssh-server/dropbear/")"

470

APT_INCLUDES="$(echo ${APT_INCLUDES} | sed "s/openssh-server/dropbear/")"

466

fi

471

fi

467

fi

472

fi

468

473

469

# Configure kernel sources if no KERNELSRC_DIR

474

# Configure kernel sources if no KERNELSRC_DIR

470

if [ "$BUILD_KERNEL" = true ] && [ -z "$KERNELSRC_DIR" ] ; then

475

if [ "$BUILD_KERNEL" = true ] && [ -z "$KERNELSRC_DIR" ] ; then

471

KERNELSRC_CONFIG=true

476

KERNELSRC_CONFIG=true

472

fi

477

fi

473

478

474

# Configure reduced kernel

479

# Configure reduced kernel

475

if [ "$KERNEL_REDUCE" = true ] ; then

480

if [ "$KERNEL_REDUCE" = true ] ; then

476

KERNELSRC_CONFIG=false

481

KERNELSRC_CONFIG=false

477

fi

482

fi

478

483

479

# Execute bootstrap scripts

484

# Execute bootstrap scripts

480

for SCRIPT in bootstrap.d/*.sh; do

485

for SCRIPT in bootstrap.d/*.sh; do

481

head -n 3 "$SCRIPT"

486

head -n 3 "$SCRIPT"

482

. "$SCRIPT"

487

. "$SCRIPT"

483

done

488

done

484

489

485

## Execute custom bootstrap scripts

490

## Execute custom bootstrap scripts

486

if [ -d "custom.d" ] ; then

491

if [ -d "custom.d" ] ; then

487

for SCRIPT in custom.d/*.sh; do

492

for SCRIPT in custom.d/*.sh; do

488

. "$SCRIPT"

493

. "$SCRIPT"

489

done

494

done

490

fi

495

fi

491

496

492

# Execute custom scripts inside the chroot

497

# Execute custom scripts inside the chroot

493

if [ -n "$CHROOT_SCRIPTS" ] && [ -d "$CHROOT_SCRIPTS" ] ; then

498

if [ -n "$CHROOT_SCRIPTS" ] && [ -d "$CHROOT_SCRIPTS" ] ; then

494

cp -r "${CHROOT_SCRIPTS}" "${R}/chroot_scripts"

499

cp -r "${CHROOT_SCRIPTS}" "${R}/chroot_scripts"

495

chroot_exec /bin/bash -x <<'EOF'

500

chroot_exec /bin/bash -x <<'EOF'

496

for SCRIPT in /chroot_scripts/* ; do

501

for SCRIPT in /chroot_scripts/* ; do

497

if [ -f $SCRIPT -a -x $SCRIPT ] ; then

502

if [ -f $SCRIPT -a -x $SCRIPT ] ; then

498

$SCRIPT

503

$SCRIPT

499

fi

504

fi

500

done

505

done

501

EOF

506

EOF

502

rm -rf "${R}/chroot_scripts"

507

rm -rf "${R}/chroot_scripts"

503

fi

508

fi

504

509

505

# Remove c/c++ build environment from the chroot

510

# Remove c/c++ build environment from the chroot

506

chroot_remove_cc

511

chroot_remove_cc

507

512

508

# Remove apt-utils

513

# Remove apt-utils

509

if [ "$RELEASE" = "jessie" ] ; then

514

if [ "$RELEASE" = "jessie" ] ; then

510

chroot_exec apt-get purge -qq -y --force-yes apt-utils

515

chroot_exec apt-get purge -qq -y --force-yes apt-utils

511

fi

516

fi

512

517

513

# Generate required machine-id

518

# Generate required machine-id

514

MACHINE_ID=$(dbus-uuidgen)

519

MACHINE_ID=$(dbus-uuidgen)

515

echo -n "${MACHINE_ID}" > "${R}/var/lib/dbus/machine-id"

520

echo -n "${MACHINE_ID}" > "${R}/var/lib/dbus/machine-id"

516

echo -n "${MACHINE_ID}" > "${ETC_DIR}/machine-id"

521

echo -n "${MACHINE_ID}" > "${ETC_DIR}/machine-id"

517

522

518

# APT Cleanup

523

# APT Cleanup

519

chroot_exec apt-get -y clean

524

chroot_exec apt-get -y clean

520

chroot_exec apt-get -y autoclean

525

chroot_exec apt-get -y autoclean

521

chroot_exec apt-get -y autoremove

526

chroot_exec apt-get -y autoremove

522

527

523

# Unmount mounted filesystems

528

# Unmount mounted filesystems

524

umount -l "${R}/proc"

529

umount -l "${R}/proc"

525

umount -l "${R}/sys"

530

umount -l "${R}/sys"

526

531

527

# Clean up directories

532

# Clean up directories

528

rm -rf "${R}/run/*"

533

rm -rf "${R}/run/*"

529

rm -rf "${R}/tmp/*"

534

rm -rf "${R}/tmp/*"

530

535

531

# Clean up files

536

# Clean up files

532

rm -f "${ETC_DIR}/ssh/ssh_host_*"

537

rm -f "${ETC_DIR}/ssh/ssh_host_*"

533

rm -f "${ETC_DIR}/dropbear/dropbear_*"

538

rm -f "${ETC_DIR}/dropbear/dropbear_*"

534

rm -f "${ETC_DIR}/apt/sources.list.save"

539

rm -f "${ETC_DIR}/apt/sources.list.save"

535

rm -f "${ETC_DIR}/resolvconf/resolv.conf.d/original"

540

rm -f "${ETC_DIR}/resolvconf/resolv.conf.d/original"

536

rm -f "${ETC_DIR}/*-"

541

rm -f "${ETC_DIR}/*-"

537

rm -f "${ETC_DIR}/apt/apt.conf.d/10proxy"

542

rm -f "${ETC_DIR}/apt/apt.conf.d/10proxy"

538

rm -f "${ETC_DIR}/resolv.conf"

543

rm -f "${ETC_DIR}/resolv.conf"

539

rm -f "${R}/root/.bash_history"

544

rm -f "${R}/root/.bash_history"

540

rm -f "${R}/var/lib/urandom/random-seed"

545

rm -f "${R}/var/lib/urandom/random-seed"

541

rm -f "${R}/initrd.img"

546

rm -f "${R}/initrd.img"

542

rm -f "${R}/vmlinuz"

547

rm -f "${R}/vmlinuz"

543

rm -f "${R}${QEMU_BINARY}"

548

rm -f "${R}${QEMU_BINARY}"

544

549

545

# Calculate size of the chroot directory in KB

550

# Calculate size of the chroot directory in KB

546

CHROOT_SIZE=$(expr `du -s "${R}" | awk '{ print $1 }'`)

551

CHROOT_SIZE=$(expr `du -s "${R}" | awk '{ print $1 }'`)

547

552

548

# Calculate the amount of needed 512 Byte sectors

553

# Calculate the amount of needed 512 Byte sectors

549

TABLE_SECTORS=$(expr 1 \* 1024 \* 1024 \/ 512)

554

TABLE_SECTORS=$(expr 1 \* 1024 \* 1024 \/ 512)

550

FRMW_SECTORS=$(expr 64 \* 1024 \* 1024 \/ 512)

555

FRMW_SECTORS=$(expr 64 \* 1024 \* 1024 \/ 512)

551

ROOT_OFFSET=$(expr ${TABLE_SECTORS} + ${FRMW_SECTORS})

556

ROOT_OFFSET=$(expr ${TABLE_SECTORS} + ${FRMW_SECTORS})

552

557

553

# The root partition is EXT4

558

# The root partition is EXT4

554

# This means more space than the actual used space of the chroot is used.

559

# This means more space than the actual used space of the chroot is used.

555

# As overhead for journaling and reserved blocks 25% are added.

560

# As overhead for journaling and reserved blocks 25% are added.

556

ROOT_SECTORS=$(expr $(expr ${CHROOT_SIZE} + ${CHROOT_SIZE} \/ 100 \* 25) \* 1024 \/ 512)

561

ROOT_SECTORS=$(expr $(expr ${CHROOT_SIZE} + ${CHROOT_SIZE} \/ 100 \* 25) \* 1024 \/ 512)

557

562

558

# Calculate required image size in 512 Byte sectors

563

# Calculate required image size in 512 Byte sectors

559

IMAGE_SECTORS=$(expr ${TABLE_SECTORS} + ${FRMW_SECTORS} + ${ROOT_SECTORS})

564

IMAGE_SECTORS=$(expr ${TABLE_SECTORS} + ${FRMW_SECTORS} + ${ROOT_SECTORS})

560

565

561

# Prepare image file

566

# Prepare image file

562

if [ "$ENABLE_SPLITFS" = true ] ; then

567

if [ "$ENABLE_SPLITFS" = true ] ; then

563

dd if=/dev/zero of="$IMAGE_NAME-frmw.img" bs=512 count=${TABLE_SECTORS}

568

dd if=/dev/zero of="$IMAGE_NAME-frmw.img" bs=512 count=${TABLE_SECTORS}

564

dd if=/dev/zero of="$IMAGE_NAME-frmw.img" bs=512 count=0 seek=${FRMW_SECTORS}

569

dd if=/dev/zero of="$IMAGE_NAME-frmw.img" bs=512 count=0 seek=${FRMW_SECTORS}

565

dd if=/dev/zero of="$IMAGE_NAME-root.img" bs=512 count=${TABLE_SECTORS}

570

dd if=/dev/zero of="$IMAGE_NAME-root.img" bs=512 count=${TABLE_SECTORS}

566

dd if=/dev/zero of="$IMAGE_NAME-root.img" bs=512 count=0 seek=${ROOT_SECTORS}

571

dd if=/dev/zero of="$IMAGE_NAME-root.img" bs=512 count=0 seek=${ROOT_SECTORS}

567

572

568

# Write firmware/boot partition tables

573

# Write firmware/boot partition tables

569

sfdisk -q -L -uS -f "$IMAGE_NAME-frmw.img" 2> /dev/null <<EOM

574

sfdisk -q -L -uS -f "$IMAGE_NAME-frmw.img" 2> /dev/null <<EOM

570

${TABLE_SECTORS},${FRMW_SECTORS},c,*

575

${TABLE_SECTORS},${FRMW_SECTORS},c,*

571

EOM

576

EOM

572

577

573

# Write root partition table

578

# Write root partition table

574

sfdisk -q -L -uS -f "$IMAGE_NAME-root.img" 2> /dev/null <<EOM

579

sfdisk -q -L -uS -f "$IMAGE_NAME-root.img" 2> /dev/null <<EOM

575

${TABLE_SECTORS},${ROOT_SECTORS},83

580

${TABLE_SECTORS},${ROOT_SECTORS},83

576

EOM

581

EOM

577

582

578

# Setup temporary loop devices

583

# Setup temporary loop devices

579

FRMW_LOOP="$(losetup -o 1M --sizelimit 64M -f --show $IMAGE_NAME-frmw.img)"

584

FRMW_LOOP="$(losetup -o 1M --sizelimit 64M -f --show $IMAGE_NAME-frmw.img)"

580

ROOT_LOOP="$(losetup -o 1M -f --show $IMAGE_NAME-root.img)"

585

ROOT_LOOP="$(losetup -o 1M -f --show $IMAGE_NAME-root.img)"

581

else # ENABLE_SPLITFS=false

586

else # ENABLE_SPLITFS=false

582

dd if=/dev/zero of="$IMAGE_NAME.img" bs=512 count=${TABLE_SECTORS}

587

dd if=/dev/zero of="$IMAGE_NAME.img" bs=512 count=${TABLE_SECTORS}

583

dd if=/dev/zero of="$IMAGE_NAME.img" bs=512 count=0 seek=${IMAGE_SECTORS}

588

dd if=/dev/zero of="$IMAGE_NAME.img" bs=512 count=0 seek=${IMAGE_SECTORS}

584

589

585

# Write partition table

590

# Write partition table

586

sfdisk -q -L -uS -f "$IMAGE_NAME.img" 2> /dev/null <<EOM

591

sfdisk -q -L -uS -f "$IMAGE_NAME.img" 2> /dev/null <<EOM

587

${TABLE_SECTORS},${FRMW_SECTORS},c,*

592

${TABLE_SECTORS},${FRMW_SECTORS},c,*

588

${ROOT_OFFSET},${ROOT_SECTORS},83

593

${ROOT_OFFSET},${ROOT_SECTORS},83

589

EOM

594

EOM

590

595

591

# Setup temporary loop devices

596

# Setup temporary loop devices

592

FRMW_LOOP="$(losetup -o 1M --sizelimit 64M -f --show $IMAGE_NAME.img)"

597

FRMW_LOOP="$(losetup -o 1M --sizelimit 64M -f --show $IMAGE_NAME.img)"

593

ROOT_LOOP="$(losetup -o 65M -f --show $IMAGE_NAME.img)"

598

ROOT_LOOP="$(losetup -o 65M -f --show $IMAGE_NAME.img)"

594

fi

599

fi

595

600

596

if [ "$ENABLE_CRYPTFS" = true ] ; then

601

if [ "$ENABLE_CRYPTFS" = true ] ; then

597

# Create dummy ext4 fs

602

# Create dummy ext4 fs

598

mkfs.ext4 "$ROOT_LOOP"

603

mkfs.ext4 "$ROOT_LOOP"

599

604

600

# Setup password keyfile

605

# Setup password keyfile

601

touch .password

606

touch .password

602

chmod 600 .password

607

chmod 600 .password

603

echo -n ${CRYPTFS_PASSWORD} > .password

608

echo -n ${CRYPTFS_PASSWORD} > .password

604

609

605

# Initialize encrypted partition

610

# Initialize encrypted partition

606

echo "YES" | cryptsetup luksFormat "${ROOT_LOOP}" -c "${CRYPTFS_CIPHER}" -s "${CRYPTFS_XTSKEYSIZE}" .password

611

echo "YES" | cryptsetup luksFormat "${ROOT_LOOP}" -c "${CRYPTFS_CIPHER}" -s "${CRYPTFS_XTSKEYSIZE}" .password

607

612

608

# Open encrypted partition and setup mapping

613

# Open encrypted partition and setup mapping

609

cryptsetup luksOpen "${ROOT_LOOP}" -d .password "${CRYPTFS_MAPPING}"

614

cryptsetup luksOpen "${ROOT_LOOP}" -d .password "${CRYPTFS_MAPPING}"

610

615

611

# Secure delete password keyfile

616

# Secure delete password keyfile

612

shred -zu .password

617

shred -zu .password

613

618

614

# Update temporary loop device

619

# Update temporary loop device

615

ROOT_LOOP="/dev/mapper/${CRYPTFS_MAPPING}"

620

ROOT_LOOP="/dev/mapper/${CRYPTFS_MAPPING}"

616

621

617

# Wipe encrypted partition (encryption cipher is used for randomness)

622

# Wipe encrypted partition (encryption cipher is used for randomness)

618

dd if=/dev/zero of="${ROOT_LOOP}" bs=512 count=$(blockdev --getsz "${ROOT_LOOP}")

623

dd if=/dev/zero of="${ROOT_LOOP}" bs=512 count=$(blockdev --getsz "${ROOT_LOOP}")

619

fi

624

fi

620

625

621

# Build filesystems

626

# Build filesystems

622

mkfs.vfat "$FRMW_LOOP"

627

mkfs.vfat "$FRMW_LOOP"

623

mkfs.ext4 "$ROOT_LOOP"

628

mkfs.ext4 "$ROOT_LOOP"

624

629

625

# Mount the temporary loop devices

630

# Mount the temporary loop devices

626

mkdir -p "$BUILDDIR/mount"

631

mkdir -p "$BUILDDIR/mount"

627

mount "$ROOT_LOOP" "$BUILDDIR/mount"

632

mount "$ROOT_LOOP" "$BUILDDIR/mount"

628

633

629

mkdir -p "$BUILDDIR/mount/boot/firmware"

634

mkdir -p "$BUILDDIR/mount/boot/firmware"

630

mount "$FRMW_LOOP" "$BUILDDIR/mount/boot/firmware"

635

mount "$FRMW_LOOP" "$BUILDDIR/mount/boot/firmware"

631

636

632

# Copy all files from the chroot to the loop device mount point directory

637

# Copy all files from the chroot to the loop device mount point directory

633

rsync -a "${R}/" "$BUILDDIR/mount/"

638

rsync -a "${R}/" "$BUILDDIR/mount/"

634

639

635

# Unmount all temporary loop devices and mount points

640

# Unmount all temporary loop devices and mount points

636

cleanup

641

cleanup

637

642

638

# Create block map file(s) of image(s)

643

# Create block map file(s) of image(s)

639

if [ "$ENABLE_SPLITFS" = true ] ; then

644

if [ "$ENABLE_SPLITFS" = true ] ; then

640

# Create block map files for "bmaptool"

645

# Create block map files for "bmaptool"

641

bmaptool create -o "$IMAGE_NAME-frmw.bmap" "$IMAGE_NAME-frmw.img"

646

bmaptool create -o "$IMAGE_NAME-frmw.bmap" "$IMAGE_NAME-frmw.img"

642

bmaptool create -o "$IMAGE_NAME-root.bmap" "$IMAGE_NAME-root.img"

647

bmaptool create -o "$IMAGE_NAME-root.bmap" "$IMAGE_NAME-root.img"

643

648

644

# Image was successfully created

649

# Image was successfully created

645

echo "$IMAGE_NAME-frmw.img ($(expr $ ${TABLE_SECTORS} + ${FRMW_SECTORS} $ \* 512 \/ 1024 \/ 1024)M)" ": successfully created"

650

echo "$IMAGE_NAME-frmw.img ($(expr $ ${TABLE_SECTORS} + ${FRMW_SECTORS} $ \* 512 \/ 1024 \/ 1024)M)" ": successfully created"

646

echo "$IMAGE_NAME-root.img ($(expr $ ${TABLE_SECTORS} + ${ROOT_SECTORS} $ \* 512 \/ 1024 \/ 1024)M)" ": successfully created"

651

echo "$IMAGE_NAME-root.img ($(expr $ ${TABLE_SECTORS} + ${ROOT_SECTORS} $ \* 512 \/ 1024 \/ 1024)M)" ": successfully created"

647

else

652

else

648

# Create block map file for "bmaptool"

653

# Create block map file for "bmaptool"

649

bmaptool create -o "$IMAGE_NAME.bmap" "$IMAGE_NAME.img"

654

bmaptool create -o "$IMAGE_NAME.bmap" "$IMAGE_NAME.img"

650

655

651

# Image was successfully created

656

# Image was successfully created

652

echo "$IMAGE_NAME.img ($(expr $ ${TABLE_SECTORS} + ${FRMW_SECTORS} + ${ROOT_SECTORS} $ \* 512 \/ 1024 \/ 1024)M)" ": successfully created"

657

echo "$IMAGE_NAME.img ($(expr $ ${TABLE_SECTORS} + ${FRMW_SECTORS} + ${ROOT_SECTORS} $ \* 512 \/ 1024 \/ 1024)M)" ": successfully created"

653

fi

658

fi

	Site-wide shortcuts
/	Use quick search box
g h	Goto home page
g g	Goto my private gists page
g G	Goto my public gists page
g 0-9	Goto bookmarked items from 0-9
n r	New repository page
n g	New gist page

	Dépôts
g s	Goto summary page
g c	Goto changelog page
g f	Goto files page
g F	Goto files page with file search activated
g p	Goto pull requests page
g o	Goto repository settings
g O	Goto repository access permissions settings
t s	Toggle sidebar on some pages

             #
             # Build and Setup RPi2/3 Kernel
             #
             # Load utility functions
             . ./functions.sh
             # Fetch and build latest raspberry kernel
             if [ "$BUILD_KERNEL" = true ] ; then
               # Setup source directory
               mkdir -p "${R}/usr/src/linux"
               # Copy existing kernel sources into chroot directory
               if [ -n "$KERNELSRC_DIR" ] && [ -d "$KERNELSRC_DIR" ] ; then
                 # Copy kernel sources
-                cp -r "${KERNELSRC_DIR}/*" "${R}/usr/src/linux"
+                cp -r "${KERNELSRC_DIR}/"* "${R}/usr/src/linux"
                 # Clean the kernel sources
                 if [ "$KERNELSRC_CLEAN" = true ] && [ "$KERNELSRC_PREBUILT" = false ] ; then
                   make -C "${KERNEL_DIR}" ARCH="${KERNEL_ARCH}" CROSS_COMPILE="${CROSS_COMPILE}" mrproper
                 fi
               else # KERNELSRC_DIR=""
                 # Create temporary directory for kernel sources
                 temp_dir=$(as_nobody mktemp -d)
                 # Fetch current RPi2/3 kernel sources
                 if [ -z "${KERNEL_BRANCH}" ] ; then
-                  as_nobody -u nobody git -C "${temp_dir}" clone --depth=1 "${KERNEL_URL}" linux
+                  as_nobody git -C "${temp_dir}" clone --depth=1 "${KERNEL_URL}" linux
                 else
-                  as_nobody -u nobody git -C "${temp_dir}" clone --depth=1 --branch "${KERNEL_BRANCH}" "${KERNEL_URL}" linux
+                  as_nobody git -C "${temp_dir}" clone --depth=1 --branch "${KERNEL_BRANCH}" "${KERNEL_URL}" linux
                fi
                 # Copy downloaded kernel sources
-                mv "${temp_dir}/linux/*" "${R}/usr/src/linux/"
+                cp -r "${temp_dir}/linux/"* "${R}/usr/src/linux/"
                 # Remove temporary directory for kernel sources
                 rm -fr "${temp_dir}"
                 # Set permissions of the kernel sources
                 chown -R root:root "${R}/usr/src"
               fi
               # Calculate optimal number of kernel building threads
               if [ "$KERNEL_THREADS" = "1" ] && [ -r /proc/cpuinfo ] ; then
                 KERNEL_THREADS=$(grep -c processor /proc/cpuinfo)
               fi
               # Configure and build kernel
               if [ "$KERNELSRC_PREBUILT" = false ] ; then
                 # Remove device, network and filesystem drivers from kernel configuration
                 if [ "$KERNEL_REDUCE" = true ] ; then
                   make -C "${KERNEL_DIR}" ARCH="${KERNEL_ARCH}" CROSS_COMPILE="${CROSS_COMPILE}" "${KERNEL_DEFCONFIG}"
                   sed -i\
                   -e "s/\(^CONFIG_SND.*\=\).*/\1n/"\
                   -e "s/\(^CONFIG_SOUND.*\=\).*/\1n/"\
                   -e "s/\(^CONFIG_AC97.*\=\).*/\1n/"\
                   -e "s/\(^CONFIG_VIDEO_.*\=\).*/\1n/"\
                   -e "s/\(^CONFIG_MEDIA_TUNER.*\=\).*/\1n/"\
                   -e "s/\(^CONFIG_DVB.*\=\)[ym]/\1n/"\
                   -e "s/\(^CONFIG_REISERFS.*\=\).*/\1n/"\
                   -e "s/\(^CONFIG_JFS.*\=\).*/\1n/"\
                   -e "s/\(^CONFIG_XFS.*\=\).*/\1n/"\
                   -e "s/\(^CONFIG_GFS2.*\=\).*/\1n/"\
                   -e "s/\(^CONFIG_OCFS2.*\=\).*/\1n/"\
                   -e "s/\(^CONFIG_BTRFS.*\=\).*/\1n/"\
                   -e "s/\(^CONFIG_HFS.*\=\).*/\1n/"\
                   -e "s/\(^CONFIG_JFFS2.*\=\)[ym]/\1n/"\
                   -e "s/\(^CONFIG_UBIFS.*\=\).*/\1n/"\
                   -e "s/\(^CONFIG_SQUASHFS.*\=\)[ym]/\1n/"\
                   -e "s/\(^CONFIG_W1.*\=\)[ym]/\1n/"\
                   -e "s/\(^CONFIG_HAMRADIO.*\=\).*/\1n/"\
                   -e "s/\(^CONFIG_CAN.*\=\).*/\1n/"\
                   -e "s/\(^CONFIG_IRDA.*\=\).*/\1n/"\
                   -e "s/\(^CONFIG_BT_.*\=\).*/\1n/"\
                   -e "s/\(^CONFIG_WIMAX.*\=\)[ym]/\1n/"\
                   -e "s/\(^CONFIG_6LOWPAN.*\=\).*/\1n/"\
                   -e "s/\(^CONFIG_IEEE802154.*\=\).*/\1n/"\
                   -e "s/\(^CONFIG_NFC.*\=\).*/\1n/"\
                   -e "s/\(^CONFIG_FB_TFT=.*\=\).*/\1n/"\
                   -e "s/\(^CONFIG_TOUCHSCREEN.*\=\).*/\1n/"\
                   -e "s/\(^CONFIG_USB_GSPCA_.*\=\).*/\1n/"\
                   -e "s/\(^CONFIG_DRM.*\=\).*/\1n/"\
                   "${KERNEL_DIR}/.config"
                 fi
                 if [ "$KERNELSRC_CONFIG" = true ] ; then
                   # Load default raspberry kernel configuration
                   make -C "${KERNEL_DIR}" ARCH="${KERNEL_ARCH}" CROSS_COMPILE="${CROSS_COMPILE}" "${KERNEL_DEFCONFIG}"
                   if [ ! -z "$KERNELSRC_USRCONFIG" ] ; then
                     cp $KERNELSRC_USRCONFIG ${KERNEL_DIR}/.config
                   fi
                   # Start menu-driven kernel configuration (interactive)
                   if [ "$KERNEL_MENUCONFIG" = true ] ; then
                     make -C "${KERNEL_DIR}" ARCH="${KERNEL_ARCH}" CROSS_COMPILE="${CROSS_COMPILE}" menuconfig
                   fi
                 fi
                 # Cross compile kernel and modules
                 make -C "${KERNEL_DIR}" -j${KERNEL_THREADS} ARCH="${KERNEL_ARCH}" CROSS_COMPILE="${CROSS_COMPILE}" "${KERNEL_BIN_IMAGE}" modules dtbs
               fi
               # Check if kernel compilation was successful
               if [ ! -r "${KERNEL_DIR}/arch/${KERNEL_ARCH}/boot/${KERNEL_BIN_IMAGE}" ] ; then
                 echo "error: kernel compilation failed! (kernel image not found)"
                 cleanup
                 exit 1
               fi
               # Install kernel modules
               if [ "$ENABLE_REDUCE" = true ] ; then
                 make -C "${KERNEL_DIR}" ARCH="${KERNEL_ARCH}" CROSS_COMPILE="${CROSS_COMPILE}" INSTALL_MOD_STRIP=1 INSTALL_MOD_PATH=../../.. modules_install
               else
                 make -C "${KERNEL_DIR}" ARCH="${KERNEL_ARCH}" CROSS_COMPILE="${CROSS_COMPILE}" INSTALL_MOD_PATH=../../.. modules_install
                 # Install kernel firmware
                 make -C "${KERNEL_DIR}" ARCH="${KERNEL_ARCH}" CROSS_COMPILE="${CROSS_COMPILE}" INSTALL_FW_PATH=../../../lib firmware_install
               fi
               # Install kernel headers
               if [ "$KERNEL_HEADERS" = true ] && [ "$KERNEL_REDUCE" = false ] ; then
                 make -C "${KERNEL_DIR}" ARCH="${KERNEL_ARCH}" CROSS_COMPILE="${CROSS_COMPILE}" INSTALL_HDR_PATH=../.. headers_install
               fi
               # Prepare boot (firmware) directory
               mkdir "${BOOT_DIR}"
               # Get kernel release version
               KERNEL_VERSION=`cat "${KERNEL_DIR}/include/config/kernel.release"`
               # Copy kernel configuration file to the boot directory
               install_readonly "${KERNEL_DIR}/.config" "${R}/boot/config-${KERNEL_VERSION}"
               # Copy dts and dtb device tree sources and binaries
               mkdir "${BOOT_DIR}/overlays"
               # Ensure the proper .dtb is located
               if [ "$KERNEL_ARCH" = "arm" ] ; then
                 install_readonly "${KERNEL_DIR}/arch/${KERNEL_ARCH}/boot/dts/"*.dtb "${BOOT_DIR}/"
               else
                 install_readonly "${KERNEL_DIR}/arch/${KERNEL_ARCH}/boot/dts/broadcom/"*.dtb "${BOOT_DIR}/"
               fi
               install_readonly "${KERNEL_DIR}/arch/${KERNEL_ARCH}/boot/dts/overlays/"*.dtb* "${BOOT_DIR}/overlays/"
               install_readonly "${KERNEL_DIR}/arch/${KERNEL_ARCH}/boot/dts/overlays/README" "${BOOT_DIR}/overlays/README"
               if [ "$ENABLE_UBOOT" = false ] ; then
                 # Convert and copy kernel image to the boot directory
                 "${KERNEL_DIR}/scripts/mkknlimg" "${KERNEL_DIR}/arch/${KERNEL_ARCH}/boot/${KERNEL_BIN_IMAGE}" "${BOOT_DIR}/${KERNEL_IMAGE}"
               else
                 # Copy kernel image to the boot directory
                 install_readonly "${KERNEL_DIR}/arch/${KERNEL_ARCH}/boot/${KERNEL_BIN_IMAGE}" "${BOOT_DIR}/${KERNEL_IMAGE}"
               fi
               # Remove kernel sources
               if [ "$KERNEL_REMOVESRC" = true ] ; then
                 rm -fr "${KERNEL_DIR}"
               else
                 make -C "${KERNEL_DIR}" ARCH="${KERNEL_ARCH}" CROSS_COMPILE="${CROSS_COMPILE}" modules_prepare
                 # Create symlinks for kernel modules
                 chroot_exec ln -sf /usr/src/linux "/lib/modules/${KERNEL_VERSION}/build"
                 chroot_exec ln -sf /usr/src/linux "/lib/modules/${KERNEL_VERSION}/source"
               fi
             else # BUILD_KERNEL=false
               # Kernel installation
               chroot_exec apt-get -qq -y --no-install-recommends install linux-image-"${COLLABORA_KERNEL}" raspberrypi-bootloader-nokernel
               # Install flash-kernel last so it doesn't try (and fail) to detect the platform in the chroot
               chroot_exec apt-get -qq -y install flash-kernel
               # Check if kernel installation was successful
               VMLINUZ="$(ls -1 ${R}/boot/vmlinuz-* | sort | tail -n 1)"
               if [ -z "$VMLINUZ" ] ; then
                 echo "error: kernel installation failed! (/boot/vmlinuz-* not found)"
                 cleanup
                 exit 1
               fi
               # Copy vmlinuz kernel to the boot directory
               install_readonly "${VMLINUZ}" "${BOOT_DIR}/${KERNEL_IMAGE}"
             fi

             #!/bin/sh
             ########################################################################
             # rpi23-gen-image.sh					       2015-2017
             #
             # Advanced Debian "jessie" and "stretch"  bootstrap script for RPi2/3
             #
             # This program is free software; you can redistribute it and/or
             # modify it under the terms of the GNU General Public License
             # as published by the Free Software Foundation; either version 2
             # of the License, or (at your option) any later version.
             #
             # Copyright (C) 2015 Jan Wagner <mail@jwagner.eu>
             #
             # Big thanks for patches and enhancements by 10+ github contributors!
             ########################################################################
             # Are we running as root?
             if [ "$(id -u)" -ne "0" ] ; then
               echo "error: this script must be executed with root privileges!"
               exit 1
             fi
             # Check if ./functions.sh script exists
             if [ ! -r "./functions.sh" ] ; then
               echo "error: './functions.sh' required script not found!"
               exit 1
             fi
             # Load utility functions
             . ./functions.sh
             # Load parameters from configuration template file
             if [ ! -z "$CONFIG_TEMPLATE" ] ; then
               use_template
             fi
             # Introduce settings
             set -e
             echo -n -e "\n#\n# RPi2/3 Bootstrap Settings\n#\n"
             set -x
             # Raspberry Pi model configuration
             RPI_MODEL=${RPI_MODEL:=2}
             RPI2_DTB_FILE=${RPI2_DTB_FILE:=bcm2709-rpi-2-b.dtb}
             RPI2_UBOOT_CONFIG=${RPI2_UBOOT_CONFIG:=rpi_2_defconfig}
             RPI3_DTB_FILE=${RPI3_DTB_FILE:=bcm2710-rpi-3-b.dtb}
             RPI3_UBOOT_CONFIG=${RPI3_UBOOT_CONFIG:=rpi_3_32b_defconfig}
             # Debian release
             RELEASE=${RELEASE:=jessie}
             KERNEL_ARCH=${KERNEL_ARCH:=arm}
             RELEASE_ARCH=${RELEASE_ARCH:=armhf}
             CROSS_COMPILE=${CROSS_COMPILE:=arm-linux-gnueabihf-}
             COLLABORA_KERNEL=${COLLABORA_KERNEL:=3.18.0-trunk-rpi2}
             if [ "$KERNEL_ARCH" = "arm64" ] ; then
               KERNEL_DEFCONFIG=${KERNEL_DEFCONFIG:=bcmrpi3_defconfig}
               KERNEL_IMAGE=${KERNEL_IMAGE:=kernel8.img}
             else
               KERNEL_DEFCONFIG=${KERNEL_DEFCONFIG:=bcm2709_defconfig}
               KERNEL_IMAGE=${KERNEL_IMAGE:=kernel7.img}
             fi
             if [ "$RELEASE_ARCH" = "arm64" ] ; then
               QEMU_BINARY=${QEMU_BINARY:=/usr/bin/qemu-aarch64-static}
             else
               QEMU_BINARY=${QEMU_BINARY:=/usr/bin/qemu-arm-static}
             fi
             KERNEL_BRANCH=${KERNEL_BRANCH:=""}
             # URLs
             KERNEL_URL=${KERNEL_URL:=https://github.com/raspberrypi/linux}
             FIRMWARE_URL=${FIRMWARE_URL:=https://github.com/raspberrypi/firmware/raw/master/boot}
             WLAN_FIRMWARE_URL=${WLAN_FIRMWARE_URL:=https://github.com/RPi-Distro/firmware-nonfree/raw/master/brcm80211/brcm}
             COLLABORA_URL=${COLLABORA_URL:=https://repositories.collabora.co.uk/debian}
             FBTURBO_URL=${FBTURBO_URL:=https://github.com/ssvb/xf86-video-fbturbo.git}
             UBOOT_URL=${UBOOT_URL:=git://git.denx.de/u-boot.git}
             # Build directories
             BASEDIR=${BASEDIR:=$(pwd)/images/${RELEASE}}
             BUILDDIR="${BASEDIR}/build"
             # Prepare date string for default image file name
             DATE="$(date +%Y-%m-%d)"
             if [ -z "$KERNEL_BRANCH" ] ; then
               IMAGE_NAME=${IMAGE_NAME:=${BASEDIR}/${DATE}-${KERNEL_ARCH}-CURRENT-rpi${RPI_MODEL}-${RELEASE}-${RELEASE_ARCH}}
             else
               IMAGE_NAME=${IMAGE_NAME:=${BASEDIR}/${DATE}-${KERNEL_ARCH}-${KERNEL_BRANCH}-rpi${RPI_MODEL}-${RELEASE}-${RELEASE_ARCH}}
             fi
             # Chroot directories
             R="${BUILDDIR}/chroot"
             ETC_DIR="${R}/etc"
             LIB_DIR="${R}/lib"
             BOOT_DIR="${R}/boot/firmware"
             KERNEL_DIR="${R}/usr/src/linux"
             WLAN_FIRMWARE_DIR="${R}/lib/firmware/brcm"
             # Firmware directory: Blank if download from github
             RPI_FIRMWARE_DIR=${RPI_FIRMWARE_DIR:=""}
             # General settings
             HOSTNAME=${HOSTNAME:=rpi${RPI_MODEL}-${RELEASE}}
             PASSWORD=${PASSWORD:=raspberry}
             USER_PASSWORD=${USER_PASSWORD:=raspberry}
             DEFLOCAL=${DEFLOCAL:="en_US.UTF-8"}
             TIMEZONE=${TIMEZONE:="Europe/Berlin"}
             EXPANDROOT=${EXPANDROOT:=true}
             # Keyboard settings
             XKB_MODEL=${XKB_MODEL:=""}
             XKB_LAYOUT=${XKB_LAYOUT:=""}
             XKB_VARIANT=${XKB_VARIANT:=""}
             XKB_OPTIONS=${XKB_OPTIONS:=""}
             # Network settings (DHCP)
             ENABLE_DHCP=${ENABLE_DHCP:=true}
             # Network settings (static)
             NET_ADDRESS=${NET_ADDRESS:=""}
             NET_GATEWAY=${NET_GATEWAY:=""}
             NET_DNS_1=${NET_DNS_1:=""}
             NET_DNS_2=${NET_DNS_2:=""}
             NET_DNS_DOMAINS=${NET_DNS_DOMAINS:=""}
             NET_NTP_1=${NET_NTP_1:=""}
             NET_NTP_2=${NET_NTP_2:=""}
             # APT settings
             APT_PROXY=${APT_PROXY:=""}
             APT_SERVER=${APT_SERVER:="ftp.debian.org"}
             # Feature settings
             ENABLE_CONSOLE=${ENABLE_CONSOLE:=true}
             ENABLE_I2C=${ENABLE_I2C:=false}
             ENABLE_SPI=${ENABLE_SPI:=false}
             ENABLE_IPV6=${ENABLE_IPV6:=true}
             ENABLE_SSHD=${ENABLE_SSHD:=true}
             ENABLE_NONFREE=${ENABLE_NONFREE:=false}
             ENABLE_WIRELESS=${ENABLE_WIRELESS:=false}
             ENABLE_SOUND=${ENABLE_SOUND:=true}
             ENABLE_DBUS=${ENABLE_DBUS:=true}
             ENABLE_HWRANDOM=${ENABLE_HWRANDOM:=true}
             ENABLE_MINGPU=${ENABLE_MINGPU:=false}
             ENABLE_XORG=${ENABLE_XORG:=false}
             ENABLE_WM=${ENABLE_WM:=""}
             ENABLE_RSYSLOG=${ENABLE_RSYSLOG:=true}
             ENABLE_USER=${ENABLE_USER:=true}
             USER_NAME=${USER_NAME:="pi"}
             ENABLE_ROOT=${ENABLE_ROOT:=false}
             # SSH settings
             SSH_ENABLE_ROOT=${SSH_ENABLE_ROOT:=false}
             SSH_DISABLE_PASSWORD_AUTH=${SSH_DISABLE_PASSWORD_AUTH:=false}
             SSH_LIMIT_USERS=${SSH_LIMIT_USERS:=false}
             SSH_ROOT_PUB_KEY=${SSH_ROOT_PUB_KEY:=""}
             SSH_USER_PUB_KEY=${SSH_USER_PUB_KEY:=""}
             # Advanced settings
             ENABLE_MINBASE=${ENABLE_MINBASE:=false}
             ENABLE_REDUCE=${ENABLE_REDUCE:=false}
             ENABLE_UBOOT=${ENABLE_UBOOT:=false}
             UBOOTSRC_DIR=${UBOOTSRC_DIR:=""}
             ENABLE_FBTURBO=${ENABLE_FBTURBO:=false}
             FBTURBOSRC_DIR=${FBTURBOSRC_DIR:=""}
             ENABLE_HARDNET=${ENABLE_HARDNET:=false}
             ENABLE_IPTABLES=${ENABLE_IPTABLES:=false}
             ENABLE_SPLITFS=${ENABLE_SPLITFS:=false}
             ENABLE_INITRAMFS=${ENABLE_INITRAMFS:=false}
             ENABLE_IFNAMES=${ENABLE_IFNAMES:=true}
             DISABLE_UNDERVOLT_WARNINGS=${DISABLE_UNDERVOLT_WARNINGS:=}
             # Kernel compilation settings
             BUILD_KERNEL=${BUILD_KERNEL:=false}
             KERNEL_REDUCE=${KERNEL_REDUCE:=false}
             KERNEL_THREADS=${KERNEL_THREADS:=1}
             KERNEL_HEADERS=${KERNEL_HEADERS:=true}
             KERNEL_MENUCONFIG=${KERNEL_MENUCONFIG:=false}
             KERNEL_REMOVESRC=${KERNEL_REMOVESRC:=true}
             if [ "$KERNEL_ARCH" = "arm64" ] ; then
               KERNEL_BIN_IMAGE=${KERNEL_BIN_IMAGE:="Image"}
             else
               KERNEL_BIN_IMAGE=${KERNEL_BIN_IMAGE:="zImage"}
             fi
             # Kernel compilation from source directory settings
             KERNELSRC_DIR=${KERNELSRC_DIR:=""}
             KERNELSRC_CLEAN=${KERNELSRC_CLEAN:=false}
             KERNELSRC_CONFIG=${KERNELSRC_CONFIG:=true}
             KERNELSRC_PREBUILT=${KERNELSRC_PREBUILT:=false}
             # Reduce disk usage settings
             REDUCE_APT=${REDUCE_APT:=true}
             REDUCE_DOC=${REDUCE_DOC:=true}
             REDUCE_MAN=${REDUCE_MAN:=true}
             REDUCE_VIM=${REDUCE_VIM:=false}
             REDUCE_BASH=${REDUCE_BASH:=false}
             REDUCE_HWDB=${REDUCE_HWDB:=true}
             REDUCE_SSHD=${REDUCE_SSHD:=true}
             REDUCE_LOCALE=${REDUCE_LOCALE:=true}
             # Encrypted filesystem settings
             ENABLE_CRYPTFS=${ENABLE_CRYPTFS:=false}
             CRYPTFS_PASSWORD=${CRYPTFS_PASSWORD:=""}
             CRYPTFS_MAPPING=${CRYPTFS_MAPPING:="secure"}
             CRYPTFS_CIPHER=${CRYPTFS_CIPHER:="aes-xts-plain64:sha512"}
             CRYPTFS_XTSKEYSIZE=${CRYPTFS_XTSKEYSIZE:=512}
             # Stop the Crypto Wars
             DISABLE_FBI=${DISABLE_FBI:=false}
             # Chroot scripts directory
             CHROOT_SCRIPTS=${CHROOT_SCRIPTS:=""}
             # Packages required in the chroot build environment
             APT_INCLUDES=${APT_INCLUDES:=""}
+            # apt-transport-https has been removed from repositories
+            # this induces qemu error 383 which does not prevent building an image
+            if [ "$RELEASE" = "buster" ] ; then
+              APT_INCLUDES="${APT_INCLUDES},apt-utils,ca-certificates,debian-archive-keyring,dialog,sudo,systemd,sysvinit-utils"
+            else
               APT_INCLUDES="${APT_INCLUDES},apt-transport-https,apt-utils,ca-certificates,debian-archive-keyring,dialog,sudo,systemd,sysvinit-utils"
+            fi
             # Packages required for bootstrapping
             REQUIRED_PACKAGES="debootstrap debian-archive-keyring qemu-user-static binfmt-support dosfstools rsync bmap-tools whois git bc psmisc dbus sudo"
             MISSING_PACKAGES=""
             # Packages installed for c/c++ build environment in chroot (keep empty)
             COMPILER_PACKAGES=""
             set +x
             # Set Raspberry Pi model specific configuration
             if [ "$RPI_MODEL" = 2 ] ; then
               DTB_FILE=${RPI2_DTB_FILE}
               UBOOT_CONFIG=${RPI2_UBOOT_CONFIG}
             elif [ "$RPI_MODEL" = 3 ] ; then
               DTB_FILE=${RPI3_DTB_FILE}
               UBOOT_CONFIG=${RPI3_UBOOT_CONFIG}
               BUILD_KERNEL=true
             else
               echo "error: Raspberry Pi model ${RPI_MODEL} is not supported!"
               exit 1
             fi
             # Check if the internal wireless interface is supported by the RPi model
             if [ "$ENABLE_WIRELESS" = true ] && [ "$RPI_MODEL" != 3 ] ; then
               echo "error: The selected Raspberry Pi model has no internal wireless interface"
               exit 1
             fi
             # Check if DISABLE_UNDERVOLT_WARNINGS parameter value is supported
             if [ ! -z "$DISABLE_UNDERVOLT_WARNINGS" ] ; then
               if [ "$DISABLE_UNDERVOLT_WARNINGS" != 1 ] && [ "$DISABLE_UNDERVOLT_WARNINGS" != 2 ] ; then
                 echo "error: DISABLE_UNDERVOLT_WARNINGS=${DISABLE_UNDERVOLT_WARNINGS} is not supported"
                 exit 1
               fi
             fi
             # Build RPi2/3 Linux kernel if required by Debian release
             if [ "$RELEASE" = "stretch" ] ; then
               BUILD_KERNEL=true
             fi
             # Add packages required for kernel cross compilation
             if [ "$BUILD_KERNEL" = true ] ; then
               if [ "$KERNEL_ARCH" = "arm" ] ; then
                 REQUIRED_PACKAGES="${REQUIRED_PACKAGES} crossbuild-essential-armhf"
               else
                 REQUIRED_PACKAGES="${REQUIRED_PACKAGES} crossbuild-essential-arm64"
               fi
             fi
             # Add libncurses5 to enable kernel menuconfig
             if [ "$KERNEL_MENUCONFIG" = true ] ; then
               REQUIRED_PACKAGES="${REQUIRED_PACKAGES} libncurses5-dev"
             fi
             # Stop the Crypto Wars
             if [ "$DISABLE_FBI" = true ] ; then
               ENABLE_CRYPTFS=true
             fi
             # Add cryptsetup package to enable filesystem encryption
             if [ "$ENABLE_CRYPTFS" = true ]  && [ "$BUILD_KERNEL" = true ] ; then
               REQUIRED_PACKAGES="${REQUIRED_PACKAGES} cryptsetup"
               APT_INCLUDES="${APT_INCLUDES},cryptsetup"
               if [ -z "$CRYPTFS_PASSWORD" ] ; then
                 echo "error: no password defined (CRYPTFS_PASSWORD)!"
                 exit 1
               fi
               ENABLE_INITRAMFS=true
             fi
             # Add initramfs generation tools
             if [ "$ENABLE_INITRAMFS" = true ] && [ "$BUILD_KERNEL" = true ] ; then
               APT_INCLUDES="${APT_INCLUDES},initramfs-tools"
             fi
             # Add device-tree-compiler required for building the U-Boot bootloader
             if [ "$ENABLE_UBOOT" = true ] ; then
               APT_INCLUDES="${APT_INCLUDES},device-tree-compiler"
             fi
             # Check if root SSH (v2) public key file exists
             if [ ! -z "$SSH_ROOT_PUB_KEY" ] ; then
               if [ ! -f "$SSH_ROOT_PUB_KEY" ] ; then
                 echo "error: '$SSH_ROOT_PUB_KEY' specified SSH public key file not found (SSH_ROOT_PUB_KEY)!"
                 exit 1
               fi
             fi
             # Check if $USER_NAME SSH (v2) public key file exists
             if [ ! -z "$SSH_USER_PUB_KEY" ] ; then
               if [ ! -f "$SSH_USER_PUB_KEY" ] ; then
                 echo "error: '$SSH_USER_PUB_KEY' specified SSH public key file not found (SSH_USER_PUB_KEY)!"
                 exit 1
               fi
             fi
             # Check if all required packages are installed on the build system
             for package in $REQUIRED_PACKAGES ; do
               if [ "`dpkg-query -W -f='${Status}' $package`" != "install ok installed" ] ; then
                 MISSING_PACKAGES="${MISSING_PACKAGES} $package"
               fi
             done
             # If there are missing packages ask confirmation for install, or exit
             if [ -n "$MISSING_PACKAGES" ] ; then
               echo "the following packages needed by this script are not installed:"
               echo "$MISSING_PACKAGES"
               echo -n "\ndo you want to install the missing packages right now? [y/n] "
               read confirm
               [ "$confirm" != "y" ] && exit 1
               # Make sure all missing required packages are installed
               apt-get -qq -y install ${MISSING_PACKAGES}
             fi
             # Check if ./bootstrap.d directory exists
             if [ ! -d "./bootstrap.d/" ] ; then
               echo "error: './bootstrap.d' required directory not found!"
               exit 1
             fi
             # Check if ./files directory exists
             if [ ! -d "./files/" ] ; then
               echo "error: './files' required directory not found!"
               exit 1
             fi
             # Check if specified KERNELSRC_DIR directory exists
             if [ -n "$KERNELSRC_DIR" ] && [ ! -d "$KERNELSRC_DIR" ] ; then
               echo "error: '${KERNELSRC_DIR}' specified directory not found (KERNELSRC_DIR)!"
               exit 1
             fi
             # Check if specified UBOOTSRC_DIR directory exists
             if [ -n "$UBOOTSRC_DIR" ] && [ ! -d "$UBOOTSRC_DIR" ] ; then
               echo "error: '${UBOOTSRC_DIR}' specified directory not found (UBOOTSRC_DIR)!"
               exit 1
             fi
             # Check if specified FBTURBOSRC_DIR directory exists
             if [ -n "$FBTURBOSRC_DIR" ] && [ ! -d "$FBTURBOSRC_DIR" ] ; then
               echo "error: '${FBTURBOSRC_DIR}' specified directory not found (FBTURBOSRC_DIR)!"
               exit 1
             fi
             # Check if specified CHROOT_SCRIPTS directory exists
             if [ -n "$CHROOT_SCRIPTS" ] && [ ! -d "$CHROOT_SCRIPTS" ] ; then
                echo "error: ${CHROOT_SCRIPTS} specified directory not found (CHROOT_SCRIPTS)!"
                exit 1
             fi
             # Check if specified device mapping already exists (will be used by cryptsetup)
             if [ -r "/dev/mapping/${CRYPTFS_MAPPING}" ] ; then
               echo "error: mapping /dev/mapping/${CRYPTFS_MAPPING} already exists, not proceeding"
               exit 1
             fi
             # Don't clobber an old build
             if [ -e "$BUILDDIR" ] ; then
               echo "error: directory ${BUILDDIR} already exists, not proceeding"
               exit 1
             fi
             # Setup chroot directory
             mkdir -p "${R}"
             # Check if build directory has enough of free disk space >512MB
             if [ "$(df --output=avail ${BUILDDIR} | sed "1d")" -le "524288" ] ; then
               echo "error: ${BUILDDIR} not enough space left to generate the output image!"
               exit 1
             fi
             set -x
             # Call "cleanup" function on various signals and errors
             trap cleanup 0 1 2 3 6
             # Add required packages for the minbase installation
             if [ "$ENABLE_MINBASE" = true ] ; then
               APT_INCLUDES="${APT_INCLUDES},vim-tiny,netbase,net-tools,ifupdown"
             fi
             # Add required locales packages
             if [ "$DEFLOCAL" != "en_US.UTF-8" ] ; then
               APT_INCLUDES="${APT_INCLUDES},locales,keyboard-configuration,console-setup"
             fi
             # Add parted package, required to get partprobe utility
             if [ "$EXPANDROOT" = true ] ; then
               APT_INCLUDES="${APT_INCLUDES},parted"
             fi
             # Add dbus package, recommended if using systemd
             if [ "$ENABLE_DBUS" = true ] ; then
               APT_INCLUDES="${APT_INCLUDES},dbus"
             fi
             # Add iptables IPv4/IPv6 package
             if [ "$ENABLE_IPTABLES" = true ] ; then
               APT_INCLUDES="${APT_INCLUDES},iptables"
             fi
             # Add openssh server package
             if [ "$ENABLE_SSHD" = true ] ; then
               APT_INCLUDES="${APT_INCLUDES},openssh-server"
             fi
             # Add alsa-utils package
             if [ "$ENABLE_SOUND" = true ] ; then
               APT_INCLUDES="${APT_INCLUDES},alsa-utils"
             fi
             # Add rng-tools package
             if [ "$ENABLE_HWRANDOM" = true ] ; then
               APT_INCLUDES="${APT_INCLUDES},rng-tools"
             fi
             # Add fbturbo video driver
             if [ "$ENABLE_FBTURBO" = true ] ; then
               # Enable xorg package dependencies
               ENABLE_XORG=true
             fi
             # Add user defined window manager package
             if [ -n "$ENABLE_WM" ] ; then
               APT_INCLUDES="${APT_INCLUDES},${ENABLE_WM}"
               # Enable xorg package dependencies
               ENABLE_XORG=true
             fi
             # Add xorg package
             if [ "$ENABLE_XORG" = true ] ; then
               APT_INCLUDES="${APT_INCLUDES},xorg"
             fi
             # Replace selected packages with smaller clones
             if [ "$ENABLE_REDUCE" = true ] ; then
               # Add levee package instead of vim-tiny
               if [ "$REDUCE_VIM" = true ] ; then
                 APT_INCLUDES="$(echo ${APT_INCLUDES} | sed "s/vim-tiny/levee/")"
               fi
               # Add dropbear package instead of openssh-server
               if [ "$REDUCE_SSHD" = true ] ; then
                 APT_INCLUDES="$(echo ${APT_INCLUDES} | sed "s/openssh-server/dropbear/")"
               fi
             fi
             # Configure kernel sources if no KERNELSRC_DIR
             if [ "$BUILD_KERNEL" = true ] && [ -z "$KERNELSRC_DIR" ] ; then
               KERNELSRC_CONFIG=true
             fi
             # Configure reduced kernel
             if [ "$KERNEL_REDUCE" = true ] ; then
               KERNELSRC_CONFIG=false
             fi
             # Execute bootstrap scripts
             for SCRIPT in bootstrap.d/*.sh; do
               head -n 3 "$SCRIPT"
               . "$SCRIPT"
             done
             ## Execute custom bootstrap scripts
             if [ -d "custom.d" ] ; then
               for SCRIPT in custom.d/*.sh; do
                 . "$SCRIPT"
               done
             fi
             # Execute custom scripts inside the chroot
             if [ -n "$CHROOT_SCRIPTS" ] && [ -d "$CHROOT_SCRIPTS" ] ; then
               cp -r "${CHROOT_SCRIPTS}" "${R}/chroot_scripts"
               chroot_exec /bin/bash -x <<'EOF'
             for SCRIPT in /chroot_scripts/* ; do
               if [ -f $SCRIPT -a -x $SCRIPT ] ; then
                 $SCRIPT
               fi
             done
             EOF
               rm -rf "${R}/chroot_scripts"
             fi
             # Remove c/c++ build environment from the chroot
             chroot_remove_cc
             # Remove apt-utils
             if [ "$RELEASE" = "jessie" ] ; then
               chroot_exec apt-get purge -qq -y --force-yes apt-utils
             fi
             # Generate required machine-id
             MACHINE_ID=$(dbus-uuidgen)
             echo -n "${MACHINE_ID}" > "${R}/var/lib/dbus/machine-id"
             echo -n "${MACHINE_ID}" > "${ETC_DIR}/machine-id"
             # APT Cleanup
             chroot_exec apt-get -y clean
             chroot_exec apt-get -y autoclean
             chroot_exec apt-get -y autoremove
             # Unmount mounted filesystems
             umount -l "${R}/proc"
             umount -l "${R}/sys"
             # Clean up directories
             rm -rf "${R}/run/*"
             rm -rf "${R}/tmp/*"
             # Clean up files
             rm -f "${ETC_DIR}/ssh/ssh_host_*"
             rm -f "${ETC_DIR}/dropbear/dropbear_*"
             rm -f "${ETC_DIR}/apt/sources.list.save"
             rm -f "${ETC_DIR}/resolvconf/resolv.conf.d/original"
             rm -f "${ETC_DIR}/*-"
             rm -f "${ETC_DIR}/apt/apt.conf.d/10proxy"
             rm -f "${ETC_DIR}/resolv.conf"
             rm -f "${R}/root/.bash_history"
             rm -f "${R}/var/lib/urandom/random-seed"
             rm -f "${R}/initrd.img"
             rm -f "${R}/vmlinuz"
             rm -f "${R}${QEMU_BINARY}"
             # Calculate size of the chroot directory in KB
             CHROOT_SIZE=$(expr `du -s "${R}" | awk '{ print $1 }'`)
             # Calculate the amount of needed 512 Byte sectors
             TABLE_SECTORS=$(expr 1 \* 1024 \* 1024 \/ 512)
             FRMW_SECTORS=$(expr 64 \* 1024 \* 1024 \/ 512)
             ROOT_OFFSET=$(expr ${TABLE_SECTORS} + ${FRMW_SECTORS})
             # The root partition is EXT4
             # This means more space than the actual used space of the chroot is used.
             # As overhead for journaling and reserved blocks 25% are added.
             ROOT_SECTORS=$(expr $(expr ${CHROOT_SIZE} + ${CHROOT_SIZE} \/ 100 \* 25) \* 1024 \/ 512)
             # Calculate required image size in 512 Byte sectors
             IMAGE_SECTORS=$(expr ${TABLE_SECTORS} + ${FRMW_SECTORS} + ${ROOT_SECTORS})
             # Prepare image file
             if [ "$ENABLE_SPLITFS" = true ] ; then
               dd if=/dev/zero of="$IMAGE_NAME-frmw.img" bs=512 count=${TABLE_SECTORS}
               dd if=/dev/zero of="$IMAGE_NAME-frmw.img" bs=512 count=0 seek=${FRMW_SECTORS}
               dd if=/dev/zero of="$IMAGE_NAME-root.img" bs=512 count=${TABLE_SECTORS}
               dd if=/dev/zero of="$IMAGE_NAME-root.img" bs=512 count=0 seek=${ROOT_SECTORS}
               # Write firmware/boot partition tables
               sfdisk -q -L -uS -f "$IMAGE_NAME-frmw.img" 2> /dev/null <<EOM
             ${TABLE_SECTORS},${FRMW_SECTORS},c,*
             EOM
               # Write root partition table
               sfdisk -q -L -uS -f "$IMAGE_NAME-root.img" 2> /dev/null <<EOM
             ${TABLE_SECTORS},${ROOT_SECTORS},83
             EOM
               # Setup temporary loop devices
               FRMW_LOOP="$(losetup -o 1M --sizelimit 64M -f --show $IMAGE_NAME-frmw.img)"
               ROOT_LOOP="$(losetup -o 1M -f --show $IMAGE_NAME-root.img)"
             else # ENABLE_SPLITFS=false
               dd if=/dev/zero of="$IMAGE_NAME.img" bs=512 count=${TABLE_SECTORS}
               dd if=/dev/zero of="$IMAGE_NAME.img" bs=512 count=0 seek=${IMAGE_SECTORS}
               # Write partition table
               sfdisk -q -L -uS -f "$IMAGE_NAME.img" 2> /dev/null <<EOM
             ${TABLE_SECTORS},${FRMW_SECTORS},c,*
             ${ROOT_OFFSET},${ROOT_SECTORS},83
             EOM
               # Setup temporary loop devices
               FRMW_LOOP="$(losetup -o 1M --sizelimit 64M -f --show $IMAGE_NAME.img)"
               ROOT_LOOP="$(losetup -o 65M -f --show $IMAGE_NAME.img)"
             fi
             if [ "$ENABLE_CRYPTFS" = true ] ; then
               # Create dummy ext4 fs
               mkfs.ext4 "$ROOT_LOOP"
               # Setup password keyfile
               touch .password
               chmod 600 .password
               echo -n ${CRYPTFS_PASSWORD} > .password
               # Initialize encrypted partition
               echo "YES" | cryptsetup luksFormat "${ROOT_LOOP}" -c "${CRYPTFS_CIPHER}" -s "${CRYPTFS_XTSKEYSIZE}" .password
               # Open encrypted partition and setup mapping
               cryptsetup luksOpen "${ROOT_LOOP}" -d .password "${CRYPTFS_MAPPING}"
               # Secure delete password keyfile
               shred -zu .password
               # Update temporary loop device
               ROOT_LOOP="/dev/mapper/${CRYPTFS_MAPPING}"
               # Wipe encrypted partition (encryption cipher is used for randomness)
               dd if=/dev/zero of="${ROOT_LOOP}" bs=512 count=$(blockdev --getsz "${ROOT_LOOP}")
             fi
             # Build filesystems
             mkfs.vfat "$FRMW_LOOP"
             mkfs.ext4 "$ROOT_LOOP"
             # Mount the temporary loop devices
             mkdir -p "$BUILDDIR/mount"
             mount "$ROOT_LOOP" "$BUILDDIR/mount"
             mkdir -p "$BUILDDIR/mount/boot/firmware"
             mount "$FRMW_LOOP" "$BUILDDIR/mount/boot/firmware"
             # Copy all files from the chroot to the loop device mount point directory
             rsync -a "${R}/" "$BUILDDIR/mount/"
             # Unmount all temporary loop devices and mount points
             cleanup
             # Create block map file(s) of image(s)
             if [ "$ENABLE_SPLITFS" = true ] ; then
               # Create block map files for "bmaptool"
               bmaptool create -o "$IMAGE_NAME-frmw.bmap" "$IMAGE_NAME-frmw.img"
               bmaptool create -o "$IMAGE_NAME-root.bmap" "$IMAGE_NAME-root.img"
               # Image was successfully created
               echo "$IMAGE_NAME-frmw.img ($(expr \( ${TABLE_SECTORS} + ${FRMW_SECTORS} \) \* 512 \/ 1024 \/ 1024)M)" ": successfully created"
               echo "$IMAGE_NAME-root.img ($(expr \( ${TABLE_SECTORS} + ${ROOT_SECTORS} \) \* 512 \/ 1024 \/ 1024)M)" ": successfully created"
             else
               # Create block map file for "bmaptool"
               bmaptool create -o "$IMAGE_NAME.bmap" "$IMAGE_NAME.img"
               # Image was successfully created
               echo "$IMAGE_NAME.img ($(expr \( ${TABLE_SECTORS} + ${FRMW_SECTORS} + ${ROOT_SECTORS} \) \* 512 \/ 1024 \/ 1024)M)" ": successfully created"
             fi

             # Configuration file raspi3 Buster IFÉ 2017/11/01
             #
-            APT_SERVER=ftp.fr.debian.org
+            APT_SERVER=debian.mirrors.ovh.net
-            APT_INCLUDES="gnupg,firmware-linux-nonfree,firmware-linux,dh-autoreconf,\
+            APT_INCLUDES=""
+            APT_INCLUDES_LATE=""
+            APT_INCLUDES_LATE="gnupg,firmware-linux-nonfree,firmware-linux,dh-autoreconf,\
             gettext,build-essential,git,cmake,libjson-c-dev,unzip,usbutils,\
             bison,libboost-all-dev,automake,autoconf,autogen,libtool,libtool-bin,\
             pkg-config,checkinstall,menulibre,libnotify-bin,pandoc,\
             python3,python3-dev,python3-pypandoc,python3-scipy,python3-tk,python3-pandocfilters,\
             python3-geopy,python3-pip,\
             python,python-dev,python-pypandoc,python-scipy,python-tk,python-pandocfilters,\
             python-geopy,python-pip,python-tk,pandoc,\
             python-configobj,python-cheetah,python-imaging,python-serial,python-usb,\
-            pcre2-utils,libpcre++-dev,libpcre2-dev,libjpeg-dev,jed,i2c-tools,python-smbus,policykit-1,\
+            pcre2-utils,libpcre++-dev,libpcre2-dev,libjpeg-dev,i2c-tools,python-smbus,policykit-1,\
-            pmount,ntpdate,ntp,\
+            pmount,ntpdate,ntp,rsync,\
             texlive,texlive-xetex,nginx-extras,ffmpeg,wicd,wicd-gtk,console-data,keyboard-configuration,\
-            icedtea-8-plugin,openjdk-8-jdk,openjdk-8-jre,openjdk-8-jre-headless,libqtwebkit-dev,libqt5webkit5-dev,\
+            libqtwebkit-dev,libqt5webkit5-dev,\
             libudev-dev,libzzip-dev,zlib1g-dev,libcanberra-gtk-module,libnss-myhostname,libfreetype6-dev,libpng16-16,\
-            nmap,libltdl-dev,dbus-user-session,debian-archive-keyring"
+            nmap,libltdl-dev,dbus-user-session,debian-archive-keyring,\
-            APT_INCLUDES_LATE="xutils-dev,lxsession,openbox-lxde-session,lxde,x11proto-randr-dev,lxrandr,\
+            xutils-dev,lxsession,openbox-lxde-session,lxde,x11proto-randr-dev,lxrandr,\
-            tightvncserver,geany,geany-plugin-py,firefox-esr,firefox-esr-l10n-fr"
+            tightvncserver,geany,geany-plugin-py,firefox-esr,firefox-esr-l10n-fr,jed"
+            #ca-certificates-java,icedtea-plugin,icedtea-netx,\
+            #openjdk-8-jdk,openjdk-8-jre,openjdk-8-jre-headless,\
+            #openjdk-9-jdk,openjdk-9-jre,openjdk-9-jre-headless"
             #----------------------
             RPI_MODEL=3
             RELEASE="buster"
             RELEASE_ARCH="armhf"
             HOSTNAME="raspife3"
             PASSWORD="AChanger1$"
             USER_PASSWORD="AChanger1$"
             DEFLOCAL="fr_FR.UTF-8"
             TIMEZONE="Europe/Paris"
             EXPANDROOT=false
             #-----------------------
             XKB_MODEL="pc105"
             XKB_LAYOUT="fr"
             XKB_VARIANT="latin9"
             XKB_OPTIONS=""
             #------------------------
             ENABLE_DHCP=true
             #------------------------
             ENABLE_CONSOLE=false
             ENABLE_I2C=true
             ENABLE_SPI=true
             ENABLE_IPV6=true
             ENABLE_SSHD=true
             ENABLE_NONFREE=true
             ENABLE_WIRELESS=true
             ENABLE_RSYSLOG=true
             ENABLE_SOUND=true
             ENABLE_HWRANDOM=true
             ENABLE_MINGPU=true
             ENABLE_DBUS=true
             ENABLE_XORG=true
             ENABLE_WM="lxdm"
             #------------------------
             ENABLE_MINBASE=false
             ENABLE_REDUCE=false
             ENABLE_UBOOT=false
             ENABLE_FBTURBO=true
             ENABLE_IPTABLES=false
             ENABLE_USER=true
             USER_NAME=ens-ife
             ENABLE_ROOT=true
             ENABLE_HARDNET=true
             ENABLE_INITRAMFS=true
             ENABLE_IFNAMES=true
             #------------------------
             ENABLE_ROOT_SSH=false
             SSH_LIMIT_USERS=false
             SSH_ROOT_PUB_KEY="/home/vidal/.ssh/authorized_keys"
             SSH_USER_PUB_KEY="/home/vidal/.ssh/authorized_keys"
             #------------------------
             BUILD_KERNEL=true
             KERNEL_IMAGE="kernel10.img"
             KERNEL_BRANCH=rpi-4.13.y
             KERNEL_REDUCE=false
             KERNEL_HEADERS=true
             KERNEL_REMOVESRC=true
             KERNELSRC_CLEAN=true
             KERNELSRC_CONFIG=true
             #------------------------
             REDUCE_APT=false
             REDUCE_DOC=true
             REDUCE_MAN=false
             REDUCE_HWDB=true
             REDUCE_BASH=false
             REDUCE_SSHD=false
             REDUCE_LOCALE=false
             #-------------------------
             ENABLE_CRYPTFS=false
             #-------------------------
             BASEDIR=/data/RpiGenImage/Images/${RELEASE}
             #BASEDIR=/media/vidal/ExternGV/Nano-Ordinateurs/RaspberryPi/RpiGenImage/Images/${RELEASE}
             DATE=`date +%Y-%m-%d`
             IMAGE_NAME=${BASEDIR}/${DATE}-rpi${RPI_MODEL}-${RELEASE}