forked from brl/citadel
Not used anymore
This commit is contained in:
parent
f9c9514f96
commit
aafe29e2dd
@ -1,99 +0,0 @@
|
|||||||
|
|
||||||
# How to make rootfs writable
|
|
||||||
|
|
||||||
1. Open Citadel terminal
|
|
||||||
|
|
||||||
2. Su to root
|
|
||||||
|
|
||||||
$ su
|
|
||||||
|
|
||||||
3. Remount root as read-write
|
|
||||||
|
|
||||||
# mount -o remount,rw /
|
|
||||||
|
|
||||||
# How to change timezone
|
|
||||||
|
|
||||||
1. Make rootfs writable
|
|
||||||
|
|
||||||
2. Run Setting application in Gnome, change timezone in Details -> Date & Time
|
|
||||||
|
|
||||||
# How to change Gnome lock screen passwd
|
|
||||||
|
|
||||||
1. Open Citadel terminal
|
|
||||||
|
|
||||||
2. Generate new password with openssl
|
|
||||||
|
|
||||||
$ openssl passwd
|
|
||||||
Password:
|
|
||||||
Verifying - Password:
|
|
||||||
sGYyWXqDuh64g
|
|
||||||
|
|
||||||
3. Su to root
|
|
||||||
|
|
||||||
$ su
|
|
||||||
|
|
||||||
4. Make rootfs writable
|
|
||||||
|
|
||||||
# mount -o remount,rw /
|
|
||||||
|
|
||||||
5. Copy new password hash into /etc/shadow
|
|
||||||
|
|
||||||
# vim /etc/shadow
|
|
||||||
|
|
||||||
# How to install image update
|
|
||||||
|
|
||||||
1. Open Citadel terminal
|
|
||||||
|
|
||||||
2. Su to root
|
|
||||||
|
|
||||||
3. Determine if current boot is from rootfsA or rootfsB. Make sure you don't overwrite the currently mounted rootfs partition!
|
|
||||||
|
|
||||||
# findmnt /
|
|
||||||
TARGET SOURCE FSTYPE OPTIONS
|
|
||||||
/ /dev/mapper/citadel-rootfsA ext2 rw,relatime,errors=continue,user_xattr
|
|
||||||
|
|
||||||
4. Locate the rootfs update image you want to install
|
|
||||||
|
|
||||||
# file /storage/user-data/primary-home/citadel-image-intel-corei7-64.ext2
|
|
||||||
/storage/user-data/primary-home/citadel-image-intel-corei7-64.ext2: Linux rev 1.0 ext2 filesystem data, UUID=d9dd20e9-9286-4c60-9dc3-37c68e36481c (large files)
|
|
||||||
|
|
||||||
5. Write to the correct partition with dd command.
|
|
||||||
|
|
||||||
# dd if=/storage/user-data/primary-home/citadel-image-intel-corei7-64.ext2 of=/dev/mapper/citadel-rootfsB bs=4M
|
|
||||||
255+1 records in
|
|
||||||
255+1 records out
|
|
||||||
1071823872 bytes (1.1 GB, 1022 MiB) copied, 3.01726 s, 355 MB/s
|
|
||||||
|
|
||||||
6. Sync just to be sure everything is flushed to disk, then reboot into new image.
|
|
||||||
|
|
||||||
# sync
|
|
||||||
# reboot
|
|
||||||
|
|
||||||
# How to have hardware graphics acceleration for applications
|
|
||||||
|
|
||||||
1. Open Citadel terminal
|
|
||||||
|
|
||||||
2. Su to root
|
|
||||||
|
|
||||||
3. Make rootfs writable
|
|
||||||
|
|
||||||
# mount -o remount,rw /
|
|
||||||
|
|
||||||
4. Enable /dev/dri/renderD128 bind mount in primary.nspawn file
|
|
||||||
|
|
||||||
# vim /etc/systemd/nspawn/primary.nspawn
|
|
||||||
|
|
||||||
# How to use Qemu?
|
|
||||||
|
|
||||||
1. Open Citadel terminal
|
|
||||||
|
|
||||||
2. Su to root
|
|
||||||
|
|
||||||
3. Make rootfs writable
|
|
||||||
|
|
||||||
# mount -o remount,rw /
|
|
||||||
|
|
||||||
4. Enable /dev/kvm bind mount in primary.nspawn file
|
|
||||||
|
|
||||||
# vim /etc/systemd/nspawn/primary.nspawn
|
|
||||||
|
|
||||||
@ -1,70 +0,0 @@
|
|||||||
#!/bin/bash
|
|
||||||
|
|
||||||
SCRIPT=$(realpath ${BASH_SOURCE})
|
|
||||||
IMAGES=$(realpath $(dirname ${SCRIPT})/../build/images/)
|
|
||||||
|
|
||||||
image_file() {
|
|
||||||
local fname=$(readlink -f ${IMAGES}/${1})
|
|
||||||
if [[ ! -f ${fname} ]]; then
|
|
||||||
>&2 printf "File ${fname} does not exist\n"
|
|
||||||
exit 1
|
|
||||||
fi
|
|
||||||
printf $fname
|
|
||||||
}
|
|
||||||
|
|
||||||
|
|
||||||
EFIBOOT=$(image_file systemd-bootx64.efi)
|
|
||||||
KERNEL=$(image_file bzImage)
|
|
||||||
ROOTFS=$(image_file citadel-image-intel-corei7-64.ext2)
|
|
||||||
APPIMG_ROOTFS=$(image_file ../appimg/appimg-rootfs.tar.xz)
|
|
||||||
HOWTO=$(image_file ../../docs/howto.md)
|
|
||||||
INSTALL_SH=$(image_file ../../scripts/install.sh)
|
|
||||||
|
|
||||||
KERNEL_CMDLINE="add_efi_memmap intel_iommu=off cryptomgr.notests rcupdate.rcu_expedited=1 rcu_nocbs=0-64 tsc=reliable no_timer_check noreplace-smp i915.fastboot=1 quiet splash"
|
|
||||||
|
|
||||||
INSTALLPACK=/tmp/installpack
|
|
||||||
BOOTPATH=${INSTALLPACK}/boot
|
|
||||||
|
|
||||||
make_loader_conf() {
|
|
||||||
echo "default bootA"
|
|
||||||
echo "timeout 5"
|
|
||||||
}
|
|
||||||
|
|
||||||
make_boot_conf() {
|
|
||||||
echo "title Subgraph OS (Citadel) [Root Partition ${1}]"
|
|
||||||
echo "linux /bzImage"
|
|
||||||
echo "options LABEL=Boot root=/dev/mapper/citadel-rootfs${1} ${KERNEL_CMDLINE}"
|
|
||||||
}
|
|
||||||
|
|
||||||
setup_boot() {
|
|
||||||
mkdir -p ${BOOTPATH}/EFI/BOOT
|
|
||||||
mkdir -p ${BOOTPATH}/loader/entries
|
|
||||||
cp ${EFIBOOT} ${BOOTPATH}/EFI/BOOT/bootx64.efi
|
|
||||||
cp ${KERNEL} ${BOOTPATH}/bzImage
|
|
||||||
make_loader_conf > ${BOOTPATH}/loader/loader.conf
|
|
||||||
make_boot_conf 'A' > ${BOOTPATH}/loader/entries/bootA.conf
|
|
||||||
make_boot_conf 'B' > ${BOOTPATH}/loader/entries/bootB.conf
|
|
||||||
}
|
|
||||||
|
|
||||||
|
|
||||||
rm -rf /tmp/installpack
|
|
||||||
mkdir -p /tmp/installpack/components
|
|
||||||
setup_boot
|
|
||||||
cp ${ROOTFS} /tmp/installpack/components/citadel-image-rootfs.ext2
|
|
||||||
cp ${APPIMG_ROOTFS} /tmp/installpack/components/
|
|
||||||
cp ${HOWTO} /tmp/installpack/components/
|
|
||||||
cp ${INSTALL_SH} /tmp/installpack
|
|
||||||
chmod +x /tmp/installpack/install.sh
|
|
||||||
|
|
||||||
(
|
|
||||||
echo "Date : $(date)"
|
|
||||||
echo "Git : $(git rev-parse HEAD)"
|
|
||||||
pushd /tmp/installpack > /dev/null
|
|
||||||
echo
|
|
||||||
echo " $(sha256sum components/citadel-image-rootfs.ext2)"
|
|
||||||
echo " $(sha256sum components/appimg-rootfs.tar.xz)"
|
|
||||||
popd > /dev/null
|
|
||||||
) > /tmp/installpack/build.info
|
|
||||||
|
|
||||||
tar -C /tmp -cvf installpack.tar installpack
|
|
||||||
#rm -rf /tmp/installpack
|
|
||||||
@ -1,189 +0,0 @@
|
|||||||
#!/bin/bash
|
|
||||||
|
|
||||||
set -e
|
|
||||||
set -u
|
|
||||||
|
|
||||||
blkdev_info() {
|
|
||||||
local model=$(< /sys/block/${1}/device/model)
|
|
||||||
local size=$(printf "%sG" $(( $(</sys/block/${1}/size) >> 21 )))
|
|
||||||
printf " Device: /dev/${1}\n"
|
|
||||||
printf " Size: ${size}\n"
|
|
||||||
printf " Model: ${model}\n"
|
|
||||||
}
|
|
||||||
|
|
||||||
errormsg() {
|
|
||||||
printf "Failed: ${1}\n"
|
|
||||||
exit 1
|
|
||||||
}
|
|
||||||
|
|
||||||
info() {
|
|
||||||
printf "[+] ${1}\n"
|
|
||||||
}
|
|
||||||
|
|
||||||
passphrase=""
|
|
||||||
|
|
||||||
ask_passphrase() {
|
|
||||||
local p1 p2
|
|
||||||
for i in {1..3}
|
|
||||||
do
|
|
||||||
read -s -p "Enter passphrase for disk encryption: " p1
|
|
||||||
echo
|
|
||||||
read -s -p " Confirm passphrase: " p2
|
|
||||||
echo
|
|
||||||
|
|
||||||
if [[ ${p1} != ${p2} ]]; then
|
|
||||||
printf "THe passphrases did not match\n"
|
|
||||||
elif [[ -z ${p1} ]] ; then
|
|
||||||
printf "Passphrase cannot be empty\n"
|
|
||||||
else
|
|
||||||
passphrase=${p1}
|
|
||||||
return
|
|
||||||
fi
|
|
||||||
done
|
|
||||||
errormsg "Too many attempts, Unable to set disk encryption passphrase"
|
|
||||||
}
|
|
||||||
|
|
||||||
confirm_device() {
|
|
||||||
if [[ ! -b ${1} ]]; then
|
|
||||||
errormsg "No block device '${1}' found"
|
|
||||||
fi
|
|
||||||
|
|
||||||
local base=$(basename ${1})
|
|
||||||
|
|
||||||
if [[ ! -e /sys/block/${base}/device ]]; then
|
|
||||||
errormsg "Unable to find device path /sys/block/${base}/device"
|
|
||||||
fi
|
|
||||||
|
|
||||||
printf "Are you sure you want to overwrite this device\n\n%s\n\n" "$(blkdev_info ${base})"
|
|
||||||
read -p "Type YES (uppercase) to continue: " confirm
|
|
||||||
if [[ ${confirm} != "YES" ]]; then
|
|
||||||
echo "Install not confirmed, exiting."
|
|
||||||
exit 1
|
|
||||||
fi
|
|
||||||
}
|
|
||||||
|
|
||||||
LUKS_UUID="683a17fc-4457-42cc-a946-cde67195a101"
|
|
||||||
|
|
||||||
partition_device() {
|
|
||||||
local PARTED="parted -a optimal ${1}"
|
|
||||||
${PARTED} -s mklabel gpt
|
|
||||||
${PARTED} mkpart boot fat32 0% 512MiB
|
|
||||||
${PARTED} set 1 boot on
|
|
||||||
${PARTED} mkpart data ext4 512MiB 100%
|
|
||||||
${PARTED} set 2 lvm on
|
|
||||||
}
|
|
||||||
|
|
||||||
setup_luks() {
|
|
||||||
# /dev/sdb2
|
|
||||||
local TARGET_LVM=${1}2
|
|
||||||
printf "${passphrase}" | cryptsetup -q --uuid=${LUKS_UUID} luksFormat ${TARGET_LVM} -
|
|
||||||
printf "${passphrase}" | cryptsetup open --type luks --key-file - ${TARGET_LVM} luks-install
|
|
||||||
}
|
|
||||||
|
|
||||||
setup_lvm() {
|
|
||||||
pvcreate -ff --yes /dev/mapper/luks-install
|
|
||||||
vgcreate --yes citadel /dev/mapper/luks-install
|
|
||||||
lvcreate --yes --size 2g --name rootfsA citadel
|
|
||||||
lvcreate --yes --size 2g --name rootfsB citadel
|
|
||||||
lvcreate --yes --extents 100%VG --name storage citadel
|
|
||||||
}
|
|
||||||
|
|
||||||
setup_disk() {
|
|
||||||
[[ $# -ne 1 ]] && usage
|
|
||||||
confirm_device ${1}
|
|
||||||
ask_passphrase
|
|
||||||
|
|
||||||
info "Deactivating device ${1}"
|
|
||||||
blkdeactivate ${1} >> install.log 2>&1
|
|
||||||
|
|
||||||
info "Partitioning device ${1}"
|
|
||||||
partition_device ${1} >> install.log 2>&1
|
|
||||||
|
|
||||||
info "Setting up LUKS disk encryption on partition ${1}2"
|
|
||||||
setup_luks ${1} >> install.log 2>&1
|
|
||||||
|
|
||||||
info "Creating LVM volumes inside LUKS volume"
|
|
||||||
setup_lvm >> install.log 2>&1
|
|
||||||
|
|
||||||
info "Creating vfat filesystem on EFI system partition ${1}1"
|
|
||||||
mkfs.vfat -F 32 ${1}1 >> install.log 2>&1
|
|
||||||
|
|
||||||
info "Creating btrfs filesystem on storage volume"
|
|
||||||
mkfs.btrfs /dev/mapper/citadel-storage >> install.log 2>&1
|
|
||||||
|
|
||||||
lsblk -o NAME,SIZE,TYPE,FSTYPE ${1} >> install.log
|
|
||||||
|
|
||||||
}
|
|
||||||
|
|
||||||
unmount_disk() {
|
|
||||||
info "Closing LVM volumes"
|
|
||||||
vgchange -an citadel >> install.log 2>&1
|
|
||||||
info "Closing LUKS volume"
|
|
||||||
cryptsetup luksClose luks-install
|
|
||||||
}
|
|
||||||
|
|
||||||
install() {
|
|
||||||
local MNT="install-mnt"
|
|
||||||
mkdir -p install-mnt
|
|
||||||
info "Mounting EFI system partition ${1}1"
|
|
||||||
mount ${1}1 install-mnt
|
|
||||||
info "Installing boot tree to EFI system partition"
|
|
||||||
cp -R boot/* install-mnt
|
|
||||||
info "Unmounting EFI system partition"
|
|
||||||
umount ${1}1
|
|
||||||
|
|
||||||
local PRIMARY_APPIMG="${MNT}/appimg"
|
|
||||||
local PRIMARY_HOME="${MNT}/user-data/primary-home"
|
|
||||||
local PRIMARY_REALM="${MNT}/realms/realm-main"
|
|
||||||
|
|
||||||
info "Mounting storage partition"
|
|
||||||
mount /dev/mapper/citadel-storage ${MNT}
|
|
||||||
|
|
||||||
mkdir -p ${PRIMARY_APPIMG}
|
|
||||||
info "Creating new btrfs subvolume for base appimg"
|
|
||||||
btrfs subvolume create ${MNT}/appimg/base.appimg
|
|
||||||
|
|
||||||
info "Installing base appimg tree"
|
|
||||||
tar -C ${PRIMARY_APPIMG}/base.appimg -xf components/appimg-rootfs.tar.xz
|
|
||||||
|
|
||||||
mkdir -p ${PRIMARY_HOME}
|
|
||||||
cp components/howto.md ${PRIMARY_HOME}
|
|
||||||
cp ${PRIMARY_APPIMG}/base.appimg/home/user/{.bashrc,.profile} ${PRIMARY_HOME}
|
|
||||||
chown -R 1000:1000 ${PRIMARY_HOME}
|
|
||||||
|
|
||||||
info "Creating main realm"
|
|
||||||
mkdir -p ${PRIMARY_REALM}
|
|
||||||
btrfs subvolume snapshot ${PRIMARY_APPIMG}/base.appimg ${PRIMARY_REALM}/rootfs
|
|
||||||
ln -s realm-main ${MNT}/realms/default.realm
|
|
||||||
ln -s /storage/user-data/primary-home ${PRIMARY_REALM}/home
|
|
||||||
|
|
||||||
info "Creating shared directory"
|
|
||||||
mkdir ${MNT}/realms/Shared
|
|
||||||
chown 1000:1000 ${MNT}/realms/Shared
|
|
||||||
|
|
||||||
info "Unmounting storage partition"
|
|
||||||
umount /dev/mapper/citadel-storage
|
|
||||||
|
|
||||||
info "Writing citadel image to rootfsA partition"
|
|
||||||
dd if=components/citadel-image-rootfs.ext2 of=/dev/mapper/citadel-rootfsA bs=4M >> install.log 2>&1
|
|
||||||
|
|
||||||
#info "Writing citadel image to rootfsB partition"
|
|
||||||
#dd if=components/citadel-image-rootfs.ext2 of=/dev/mapper/citadel-rootfsB bs=4M >> install.log 2>&1
|
|
||||||
}
|
|
||||||
|
|
||||||
usage() {
|
|
||||||
printf "Usage:\n"
|
|
||||||
printf "\t\t./install.sh [<block device>]\n\n"
|
|
||||||
exit 1
|
|
||||||
}
|
|
||||||
|
|
||||||
|
|
||||||
if [[ $# -eq 0 ]]; then
|
|
||||||
usage
|
|
||||||
fi
|
|
||||||
|
|
||||||
setup_disk ${1}
|
|
||||||
install ${1}
|
|
||||||
unmount_disk
|
|
||||||
sync
|
|
||||||
info "Install completed successfully"
|
|
||||||
Loading…
Reference in New Issue
Block a user