forked from brl/citadel
installer is good now
This commit is contained in:
parent
d915542a01
commit
dcc7d6007e
99
docs/howto.md
Normal file
99
docs/howto.md
Normal file
@ -0,0 +1,99 @@
|
|||||||
|
|
||||||
|
# How to make rootfs writable
|
||||||
|
|
||||||
|
1. Open Citadel terminal
|
||||||
|
|
||||||
|
2. Su to root
|
||||||
|
|
||||||
|
$ su
|
||||||
|
|
||||||
|
3. Remount root as read-write
|
||||||
|
|
||||||
|
# mount -o remount,rw /
|
||||||
|
|
||||||
|
# How to change timezone
|
||||||
|
|
||||||
|
1. Make rootfs writable
|
||||||
|
|
||||||
|
2. Run Setting application in Gnome, change timezone in Details -> Date & Time
|
||||||
|
|
||||||
|
# How to change Gnome lock screen passwd
|
||||||
|
|
||||||
|
1. Open Citadel terminal
|
||||||
|
|
||||||
|
2. Generate new password with openssl
|
||||||
|
|
||||||
|
$ openssl passwd
|
||||||
|
Password:
|
||||||
|
Verifying - Password:
|
||||||
|
sGYyWXqDuh64g
|
||||||
|
|
||||||
|
3. Su to root
|
||||||
|
|
||||||
|
$ su
|
||||||
|
|
||||||
|
4. Make rootfs writable
|
||||||
|
|
||||||
|
# mount -o remount,rw /
|
||||||
|
|
||||||
|
5. Copy new password hash into /etc/shadow
|
||||||
|
|
||||||
|
# vim /etc/shadow
|
||||||
|
|
||||||
|
# How to install image update
|
||||||
|
|
||||||
|
1. Open Citadel terminal
|
||||||
|
|
||||||
|
2. Su to root
|
||||||
|
|
||||||
|
3. Determine if current boot is from rootfsA or rootfsB. Make sure you don't overwrite the currently mounted rootfs partition!
|
||||||
|
|
||||||
|
# findmnt /
|
||||||
|
TARGET SOURCE FSTYPE OPTIONS
|
||||||
|
/ /dev/mapper/citadel-rootfsA ext2 rw,relatime,errors=continue,user_xattr
|
||||||
|
|
||||||
|
4. Locate the rootfs update image you want to install
|
||||||
|
|
||||||
|
# file /storage/user-data/primary-home/citadel-image-intel-corei7-64.ext2
|
||||||
|
/storage/user-data/primary-home/citadel-image-intel-corei7-64.ext2: Linux rev 1.0 ext2 filesystem data, UUID=d9dd20e9-9286-4c60-9dc3-37c68e36481c (large files)
|
||||||
|
|
||||||
|
5. Write to the correct partition with dd command.
|
||||||
|
|
||||||
|
# dd if=/storage/user-data/primary-home/citadel-image-intel-corei7-64.ext2 of=/dev/mapper/citadel-rootfsB bs=4M
|
||||||
|
255+1 records in
|
||||||
|
255+1 records out
|
||||||
|
1071823872 bytes (1.1 GB, 1022 MiB) copied, 3.01726 s, 355 MB/s
|
||||||
|
|
||||||
|
6. Sync just to be sure everything is flushed to disk, then reboot into new image.
|
||||||
|
|
||||||
|
# sync
|
||||||
|
# reboot
|
||||||
|
|
||||||
|
# How to have hardware graphics acceleration for applications
|
||||||
|
|
||||||
|
1. Open Citadel terminal
|
||||||
|
|
||||||
|
2. Su to root
|
||||||
|
|
||||||
|
3. Make rootfs writable
|
||||||
|
|
||||||
|
# mount -o remount,rw /
|
||||||
|
|
||||||
|
4. Enable /dev/dri/renderD128 bind mount in primary.nspawn file
|
||||||
|
|
||||||
|
# vim /etc/systemd/nspawn/primary.nspawn
|
||||||
|
|
||||||
|
# How to use Qemu?
|
||||||
|
|
||||||
|
1. Open Citadel terminal
|
||||||
|
|
||||||
|
2. Su to root
|
||||||
|
|
||||||
|
3. Make rootfs writable
|
||||||
|
|
||||||
|
# mount -o remount,rw /
|
||||||
|
|
||||||
|
4. Enable /dev/kvm bind mount in primary.nspawn file
|
||||||
|
|
||||||
|
# vim /etc/systemd/nspawn/primary.nspawn
|
||||||
|
|
||||||
59
scripts/create_install_pack
Executable file
59
scripts/create_install_pack
Executable file
@ -0,0 +1,59 @@
|
|||||||
|
#!/bin/bash
|
||||||
|
|
||||||
|
SCRIPT=$(realpath ${BASH_SOURCE})
|
||||||
|
IMAGES=$(realpath $(dirname ${SCRIPT})/../build/images/)
|
||||||
|
|
||||||
|
image_file() {
|
||||||
|
local fname=$(readlink -f ${IMAGES}/${1})
|
||||||
|
if [[ ! -f ${fname} ]]; then
|
||||||
|
>&2 printf "File ${fname} does not exist\n"
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
printf $fname
|
||||||
|
}
|
||||||
|
|
||||||
|
|
||||||
|
EFIBOOT=$(image_file systemd-bootx64.efi)
|
||||||
|
KERNEL=$(image_file bzImage)
|
||||||
|
ROOTFS=$(image_file citadel-image-intel-corei7-64.ext2)
|
||||||
|
USER_ROOTFS=$(image_file ../debootstrap/user-rootfs.tar.xz)
|
||||||
|
HOWTO=$(image_file ../../docs/howto.md)
|
||||||
|
INSTALL_SH=$(image_file ../../scripts/install.sh)
|
||||||
|
|
||||||
|
KERNEL_CMDLINE="add_efi_memmap intel_iommu=off cryptomgr.notests rcupdate.rcu_expedited=1 rcu_nocbs=0-64 tsc=reliable no_timer_check noreplace-smp i915.fastboot=1 quiet splash"
|
||||||
|
|
||||||
|
INSTALLPACK=/tmp/installpack
|
||||||
|
BOOTPATH=${INSTALLPACK}/boot
|
||||||
|
|
||||||
|
make_loader_conf() {
|
||||||
|
echo "default bootA"
|
||||||
|
echo "timeout 5"
|
||||||
|
}
|
||||||
|
|
||||||
|
make_boot_conf() {
|
||||||
|
echo "title Subgraph OS (Citadel) [Root Partition ${1}]"
|
||||||
|
echo "linux /bzImage"
|
||||||
|
echo "options LABEL=Boot root=/dev/mapper/citadel-rootfs${1} ${KERNEL_CMDLINE}"
|
||||||
|
}
|
||||||
|
|
||||||
|
setup_boot() {
|
||||||
|
mkdir -p ${BOOTPATH}/EFI/BOOT
|
||||||
|
mkdir -p ${BOOTPATH}/loader/entries
|
||||||
|
cp ${EFIBOOT} ${BOOTPATH}/EFI/BOOT/bootx64.efi
|
||||||
|
cp ${KERNEL} ${BOOTPATH}/bzImage
|
||||||
|
make_loader_conf > ${BOOTPATH}/loader/loader.conf
|
||||||
|
make_boot_conf 'A' > ${BOOTPATH}/loader/entries/bootA.conf
|
||||||
|
make_boot_conf 'B' > ${BOOTPATH}/loader/entries/bootB.conf
|
||||||
|
}
|
||||||
|
|
||||||
|
|
||||||
|
rm -rf /tmp/installpack
|
||||||
|
mkdir -p /tmp/installpack/components
|
||||||
|
setup_boot
|
||||||
|
cp ${ROOTFS} /tmp/installpack/components/citadel-image-rootfs.ext2
|
||||||
|
cp ${USER_ROOTFS} /tmp/installpack/components/
|
||||||
|
cp ${HOWTO} /tmp/installpack/components/
|
||||||
|
cp ${INSTALL_SH} /tmp/installpack
|
||||||
|
chmod +x /tmp/installpack/install.sh
|
||||||
|
|
||||||
|
tar -C /tmp -cvf installpack.tar installpack
|
||||||
178
scripts/install.sh
Executable file
178
scripts/install.sh
Executable file
@ -0,0 +1,178 @@
|
|||||||
|
#!/bin/bash
|
||||||
|
|
||||||
|
set -e
|
||||||
|
set -u
|
||||||
|
|
||||||
|
blkdev_info() {
|
||||||
|
local model=$(< /sys/block/${1}/device/model)
|
||||||
|
local size=$(printf "%sG" $(( $(</sys/block/${1}/size) >> 21 )))
|
||||||
|
printf " Device: /dev/${1}\n"
|
||||||
|
printf " Size: ${size}\n"
|
||||||
|
printf " Model: ${model}\n"
|
||||||
|
}
|
||||||
|
|
||||||
|
errormsg() {
|
||||||
|
printf "Failed: ${1}\n"
|
||||||
|
exit 1
|
||||||
|
}
|
||||||
|
|
||||||
|
info() {
|
||||||
|
printf "[+] ${1}\n"
|
||||||
|
}
|
||||||
|
|
||||||
|
passphrase=""
|
||||||
|
|
||||||
|
ask_passphrase() {
|
||||||
|
local p1 p2
|
||||||
|
for i in {1..3}
|
||||||
|
do
|
||||||
|
read -s -p "Enter passphrase for disk encryption: " p1
|
||||||
|
echo
|
||||||
|
read -s -p " Confirm passphrase: " p2
|
||||||
|
echo
|
||||||
|
|
||||||
|
if [[ ${p1} != ${p2} ]]; then
|
||||||
|
printf "THe passphrases did not match\n"
|
||||||
|
elif [[ -z ${p1} ]] ; then
|
||||||
|
printf "Passphrase cannot be empty\n"
|
||||||
|
else
|
||||||
|
passphrase=${p1}
|
||||||
|
return
|
||||||
|
fi
|
||||||
|
done
|
||||||
|
errormsg "Too many attempts, Unable to set disk encryption passphrase"
|
||||||
|
}
|
||||||
|
|
||||||
|
confirm_device() {
|
||||||
|
if [[ ! -b ${1} ]]; then
|
||||||
|
errormsg "No block device '${1}' found"
|
||||||
|
fi
|
||||||
|
|
||||||
|
local base=$(basename ${1})
|
||||||
|
|
||||||
|
if [[ ! -e /sys/block/${base}/device ]]; then
|
||||||
|
errormsg "Unable to find device path /sys/block/${base}/device"
|
||||||
|
fi
|
||||||
|
|
||||||
|
printf "Are you sure you want to overwrite this device\n\n%s\n\n" "$(blkdev_info ${base})"
|
||||||
|
read -p "Type YES (uppercase) to continue: " confirm
|
||||||
|
if [[ ${confirm} != "YES" ]]; then
|
||||||
|
echo "Install not confirmed, exiting."
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
}
|
||||||
|
|
||||||
|
LUKS_UUID="683a17fc-4457-42cc-a946-cde67195a101"
|
||||||
|
|
||||||
|
partition_device() {
|
||||||
|
local PARTED="parted -a optimal ${1}"
|
||||||
|
${PARTED} -s mklabel gpt
|
||||||
|
${PARTED} mkpart boot fat32 0% 512MiB
|
||||||
|
${PARTED} set 1 boot on
|
||||||
|
${PARTED} mkpart data ext4 512MiB 100%
|
||||||
|
${PARTED} set 2 lvm on
|
||||||
|
}
|
||||||
|
|
||||||
|
setup_luks() {
|
||||||
|
# /dev/sdb2
|
||||||
|
local TARGET_LVM=${1}2
|
||||||
|
printf "${passphrase}" | cryptsetup -q --uuid=${LUKS_UUID} luksFormat ${TARGET_LVM} -
|
||||||
|
printf "${passphrase}" | cryptsetup open --type luks --key-file - ${TARGET_LVM} luks-install
|
||||||
|
}
|
||||||
|
|
||||||
|
setup_lvm() {
|
||||||
|
pvcreate -ff --yes /dev/mapper/luks-install
|
||||||
|
vgcreate --yes citadel /dev/mapper/luks-install
|
||||||
|
lvcreate --yes --size 2g --name rootfsA citadel
|
||||||
|
lvcreate --yes --size 2g --name rootfsB citadel
|
||||||
|
lvcreate --yes --extents 100%VG --name storage citadel
|
||||||
|
}
|
||||||
|
|
||||||
|
setup_disk() {
|
||||||
|
[[ $# -ne 1 ]] && usage
|
||||||
|
confirm_device ${1}
|
||||||
|
ask_passphrase
|
||||||
|
|
||||||
|
info "Deactivating device ${1}"
|
||||||
|
blkdeactivate ${1} >> install.log 2>&1
|
||||||
|
|
||||||
|
info "Partitioning device ${1}"
|
||||||
|
partition_device ${1} >> install.log 2>&1
|
||||||
|
|
||||||
|
info "Setting up LUKS disk encryption on partition ${1}2"
|
||||||
|
setup_luks ${1} >> install.log 2>&1
|
||||||
|
|
||||||
|
info "Creating LVM volumes inside LUKS volume"
|
||||||
|
setup_lvm >> install.log 2>&1
|
||||||
|
|
||||||
|
info "Creating vfat filesystem on EFI system partition ${1}1"
|
||||||
|
mkfs.vfat -F 32 ${1}1 >> install.log 2>&1
|
||||||
|
|
||||||
|
info "Creating btrfs filesystem on storage volume"
|
||||||
|
mkfs.btrfs /dev/mapper/citadel-storage >> install.log 2>&1
|
||||||
|
|
||||||
|
lsblk -o NAME,SIZE,TYPE,FSTYPE ${1} >> install.log
|
||||||
|
|
||||||
|
}
|
||||||
|
|
||||||
|
unmount_disk() {
|
||||||
|
info "Closing LVM volumes"
|
||||||
|
vgchange -an citadel >> install.log 2>&1
|
||||||
|
info "Closing LUKS volume"
|
||||||
|
cryptsetup luksClose luks-install
|
||||||
|
}
|
||||||
|
|
||||||
|
install() {
|
||||||
|
local MNT="install-mnt"
|
||||||
|
mkdir -p install-mnt
|
||||||
|
info "Mounting EFI system partition ${1}1"
|
||||||
|
mount ${1}1 install-mnt
|
||||||
|
info "Installing boot tree to EFI system partition"
|
||||||
|
cp -R boot/* install-mnt
|
||||||
|
info "Unmounting EFI system partition"
|
||||||
|
umount ${1}1
|
||||||
|
|
||||||
|
local PRIMARY_HOME="${MNT}/user-data/primary-home"
|
||||||
|
local PRIMARY_ROOTFS="${MNT}/appimg/primary/rootfs"
|
||||||
|
|
||||||
|
info "Mounting storage partition"
|
||||||
|
mount /dev/mapper/citadel-storage ${MNT}
|
||||||
|
|
||||||
|
info "Installing base appimg tree"
|
||||||
|
mkdir -p ${PRIMARY_ROOTFS}
|
||||||
|
ln -s primary ${MNT}/appimg/default.appimg
|
||||||
|
tar -C ${PRIMARY_ROOTFS} -xf components/user-rootfs.tar.xz
|
||||||
|
|
||||||
|
mkdir -p ${PRIMARY_HOME}
|
||||||
|
cp components/howto.md ${PRIMARY_HOME}
|
||||||
|
cp ${PRIMARY_ROOTFS}/home/user/{.bashrc,.profile} ${PRIMARY_HOME}
|
||||||
|
chown -R 1000:1000 ${PRIMARY_HOME}
|
||||||
|
|
||||||
|
info "Unmounting storage partition"
|
||||||
|
umount /dev/mapper/citadel-storage
|
||||||
|
|
||||||
|
info "Writing citadel image to rootfsA partition"
|
||||||
|
dd if=components/citadel-image-rootfs.ext2 of=/dev/mapper/citadel-rootfsA bs=4M >> install.log 2>&1
|
||||||
|
|
||||||
|
#info "Writing citadel image to rootfsB partition"
|
||||||
|
#dd if=components/citadel-image-rootfs.ext2 of=/dev/mapper/citadel-rootfsB bs=4M >> install.log 2>&1
|
||||||
|
}
|
||||||
|
|
||||||
|
usage() {
|
||||||
|
printf "Usage:\n"
|
||||||
|
printf "\t\t./install.sh [<block device>]\n\n"
|
||||||
|
exit 1
|
||||||
|
}
|
||||||
|
|
||||||
|
|
||||||
|
if [[ $# -eq 0 ]]; then
|
||||||
|
usage
|
||||||
|
fi
|
||||||
|
|
||||||
|
setup_disk ${1}
|
||||||
|
install ${1}
|
||||||
|
unmount_disk
|
||||||
|
sync
|
||||||
|
info "Install completed successfully"
|
||||||
|
|
||||||
|
|
||||||
@ -1,147 +0,0 @@
|
|||||||
#!/bin/bash
|
|
||||||
|
|
||||||
# tips here https://github.com/systemd/systemd/issues/6381
|
|
||||||
|
|
||||||
set -u
|
|
||||||
set -e
|
|
||||||
#set -x
|
|
||||||
|
|
||||||
|
|
||||||
SCRIPT=$(realpath ${BASH_SOURCE})
|
|
||||||
IMAGES=$(realpath $(dirname ${SCRIPT})/../build/images/)
|
|
||||||
|
|
||||||
image_file() {
|
|
||||||
local fname=$(readlink -f ${IMAGES}/${1})
|
|
||||||
if [[ ! -f ${fname} ]]; then
|
|
||||||
>&2 printf "File ${fname} does not exist\n"
|
|
||||||
exit 1
|
|
||||||
fi
|
|
||||||
printf $fname
|
|
||||||
}
|
|
||||||
|
|
||||||
EFIBOOT=$(image_file systemd-bootx64.efi)
|
|
||||||
KERNEL=$(image_file bzImage)
|
|
||||||
ROOTFS=$(image_file citadel-image-intel-corei7-64.ext2)
|
|
||||||
|
|
||||||
UUID="683a17fc-4457-42cc-a946-cde67195a101"
|
|
||||||
|
|
||||||
|
|
||||||
KERNEL_CMDLINE="add_efi_memmap intel_iommu=off cryptomgr.notests rcupdate.rcu_expedited=1 rcu_nocbs=0-64 tsc=reliable no_timer_check noreplace-smp i915.fastboot=1 quiet splash"
|
|
||||||
|
|
||||||
MOUNT_PATH=/tmp/citadel-boot-mount
|
|
||||||
|
|
||||||
TARGET=/dev/sdb
|
|
||||||
TARGET_BOOT=${TARGET}1
|
|
||||||
TARGET_LVM=${TARGET}2
|
|
||||||
PARTED="parted -a optimal ${TARGET}"
|
|
||||||
|
|
||||||
is_mounted() {
|
|
||||||
echo "is mounted $1"
|
|
||||||
for mnt in $(awk '{print $1}' < /proc/self/mounts); do
|
|
||||||
[[ $mnt == $1 ]] && return 0
|
|
||||||
done
|
|
||||||
return 1
|
|
||||||
}
|
|
||||||
|
|
||||||
unmount_partition() {
|
|
||||||
echo "unmount partition $1"
|
|
||||||
if ! is_mounted $1 ; then
|
|
||||||
printf "$1 is not mounted\n"
|
|
||||||
return
|
|
||||||
fi
|
|
||||||
}
|
|
||||||
|
|
||||||
|
|
||||||
unmount_device() {
|
|
||||||
echo "unmount device"
|
|
||||||
for p in ${TARGET}*; do
|
|
||||||
is_mounted $p && unmount_partition $p
|
|
||||||
done
|
|
||||||
echo "done unmount device"
|
|
||||||
}
|
|
||||||
|
|
||||||
remove_volume() {
|
|
||||||
local vg
|
|
||||||
# find volume group name
|
|
||||||
vg=$(pvs --noheadings -o vg_name ${1})
|
|
||||||
# echo to strip whitespace
|
|
||||||
[[ -n $(echo -n ${vg}) ]] && vgremove ${vg}
|
|
||||||
pvremove ${1}
|
|
||||||
}
|
|
||||||
|
|
||||||
remove_volumes() {
|
|
||||||
echo "remove volumes"
|
|
||||||
for p in ${TARGET}*; do
|
|
||||||
pvs ${p} && remove_volume ${p}
|
|
||||||
done
|
|
||||||
return 0
|
|
||||||
}
|
|
||||||
|
|
||||||
partition_device() {
|
|
||||||
${PARTED} -s mklabel gpt
|
|
||||||
${PARTED} mkpart boot fat32 0% 512MiB
|
|
||||||
${PARTED} set 1 boot on
|
|
||||||
${PARTED} mkpart data ext4 512MiB 100%
|
|
||||||
${PARTED} set 2 lvm on
|
|
||||||
mkfs.vfat -F 32 ${TARGET_BOOT}
|
|
||||||
}
|
|
||||||
|
|
||||||
setup_luks() {
|
|
||||||
printf "subgraph" | cryptsetup -q --uuid=${UUID} luksFormat ${TARGET_LVM} -
|
|
||||||
printf "subgraph" | cryptsetup open --type luks --key-file - ${TARGET_LVM} e1
|
|
||||||
}
|
|
||||||
|
|
||||||
setup_lvm() {
|
|
||||||
pvcreate -ff --yes /dev/mapper/e1
|
|
||||||
vgcreate --yes citadel /dev/mapper/e1
|
|
||||||
#pvcreate -ff ${TARGET_LVM}
|
|
||||||
#vgcreate --yes citadel ${TARGET_LVM}
|
|
||||||
lvcreate --yes --size 2g --name rootfsA citadel
|
|
||||||
lvcreate --yes --size 2g --name rootfsB citadel
|
|
||||||
lvcreate --yes --extents 100%VG --name storage citadel
|
|
||||||
mkfs.ext4 /dev/mapper/citadel-storage
|
|
||||||
}
|
|
||||||
|
|
||||||
make_loader_conf() {
|
|
||||||
echo "default bootA"
|
|
||||||
echo "timeout 5"
|
|
||||||
}
|
|
||||||
|
|
||||||
make_boot_conf() {
|
|
||||||
echo "title Subgraph OS (Airwolf Edition) [Root Partition ${1}]"
|
|
||||||
echo "linux /bzImage"
|
|
||||||
echo "options LABEL=Boot root=/dev/mapper/citadel-rootfs${1} ${KERNEL_CMDLINE}"
|
|
||||||
}
|
|
||||||
|
|
||||||
setup_efi() {
|
|
||||||
mkdir -p ${MOUNT_PATH}
|
|
||||||
mount ${TARGET_BOOT} ${MOUNT_PATH}
|
|
||||||
mkdir -p ${MOUNT_PATH}/EFI/BOOT
|
|
||||||
mkdir -p ${MOUNT_PATH}/loader/entries
|
|
||||||
cp ${EFIBOOT} ${MOUNT_PATH}/EFI/BOOT/bootx64.efi
|
|
||||||
cp ${KERNEL} ${MOUNT_PATH}/bzImage
|
|
||||||
make_loader_conf > ${MOUNT_PATH}/loader/loader.conf
|
|
||||||
make_boot_conf 'A' > ${MOUNT_PATH}/loader/entries/bootA.conf
|
|
||||||
make_boot_conf 'B' > ${MOUNT_PATH}/loader/entries/bootB.conf
|
|
||||||
umount ${MOUNT_PATH}
|
|
||||||
rmdir ${MOUNT_PATH}
|
|
||||||
}
|
|
||||||
|
|
||||||
write_root() {
|
|
||||||
echo "writing rootfsA"
|
|
||||||
dd if=${ROOTFS} of=/dev/mapper/citadel-rootfsA bs=4M status=progress
|
|
||||||
sync
|
|
||||||
}
|
|
||||||
|
|
||||||
|
|
||||||
blkdeactivate -v ${TARGET}
|
|
||||||
unmount_device
|
|
||||||
remove_volumes
|
|
||||||
partition_device
|
|
||||||
setup_luks
|
|
||||||
setup_lvm
|
|
||||||
setup_efi
|
|
||||||
write_root
|
|
||||||
|
|
||||||
vgchange -a n citadel
|
|
||||||
cryptsetup close e1
|
|
||||||
Loading…
Reference in New Issue
Block a user