archiso 10.4 KB
Newer Older
1
#!/bin/ash
2
3
#
# SPDX-License-Identifier: GPL-3.0-or-later
4

5
# args: source, newroot, mountpoint
6
_mnt_dmsnapshot() {
7
    local img="${1}"
8
9
    local newroot="${2}"
    local mnt="${3}"
10
11
    local img_fullname="${img##*/}";
    local img_name="${img_fullname%%.*}"
12
    local dm_snap_name="${dm_snap_prefix}_${img_name}"
13
    local ro_dev ro_dev_size rw_dev
14

15
16
    ro_dev="$(losetup --find --show --read-only -- "${img}")"
    echo "${ro_dev}" >> /run/archiso/used_block_devices
17
    ro_dev_size="$(blockdev --getsz "${ro_dev}")"
18

19
20
    if [ "${cow_persistent}" = "P" ]; then
        if [ -f "/run/archiso/cowspace/${cow_directory}/${img_name}.cow" ]; then
21
            msg ":: Found '/run/archiso/cowspace/${cow_directory}/${img_name}.cow', using as persistent."
22
        else
23
            msg ":: Creating '/run/archiso/cowspace/${cow_directory}/${img_name}.cow' as persistent."
24
            truncate -s "${cow_spacesize}" "/run/archiso/cowspace/${cow_directory}/${img_name}.cow"
25
26
        fi
    else
27
        if [ -f "/run/archiso/cowspace/${cow_directory}/${img_name}.cow" ]; then
28
29
            msg ":: Found '/run/archiso/cowspace/${cow_directory}/${img_name}.cow' but non-persistent requested, removing."
            rm -f "/run/archiso/cowspace/${cow_directory}/${img_name}.cow"
30
        fi
31
        msg ":: Creating '/run/archiso/cowspace/${cow_directory}/${img_name}.cow' as non-persistent."
32
        truncate -s "${cow_spacesize}" "/run/archiso/cowspace/${cow_directory}/${img_name}.cow"
33
34
    fi

35
36
    rw_dev="$(losetup --find --show "/run/archiso/cowspace/${cow_directory}/${img_name}.cow")"
    echo "${rw_dev}" >> /run/archiso/used_block_devices
37

38
39
    dmsetup create "${dm_snap_name}" --table \
        "0 ${ro_dev_size} snapshot ${ro_dev} ${rw_dev} ${cow_persistent} ${cow_chunksize}"
40

41
    if [ "${cow_persistent}" != "P" ]; then
42
43
44
        rm -f "/run/archiso/cowspace/${cow_directory}/${img_name}.cow"
    fi

45
    _mnt_dev "/dev/mapper/${dm_snap_name}" "${newroot}${mnt}" "-w" "defaults"
46
    readlink -f "/dev/mapper/${dm_snap_name}" >> /run/archiso/used_block_devices
Simo Leone's avatar
Simo Leone committed
47
48
}

49
50
51
52
53
# args: source, newroot, mountpoint
_mnt_overlayfs() {
    local src="${1}"
    local newroot="${2}"
    local mnt="${3}"
54
55
56
57
    mkdir -p "/run/archiso/cowspace/${cow_directory}/upperdir" "/run/archiso/cowspace/${cow_directory}/workdir"
    mount -t overlay -o \
    "lowerdir=${src},upperdir=/run/archiso/cowspace/${cow_directory}/upperdir,workdir=/run/archiso/cowspace/${cow_directory}/workdir" \
    airootfs "${newroot}${mnt}"
58
59
60
}


61
# args: /path/to/image_file, mountpoint
62
63
64
_mnt_sfs() {
    local img="${1}"
    local mnt="${2}"
65
    local img_fullname="${img##*/}"
66
    local sfs_dev
67

68
69
    # shellcheck disable=SC2154
    # defined via initcpio's parse_cmdline()
70
    if [ "${copytoram}" = "y" ]; then
71
        msg -n ":: Copying squashfs image to RAM..."
Simon Wilper's avatar
Simon Wilper committed
72
73
74
75
76
77
78
79
80
81
82
83
84

        # in case we have pv use it to display copy progress feedback otherwise
        # fallback to using plain cp
        if [ -x /usr/bin/pv ]; then
            echo ""
            (pv "${img}" > "/run/archiso/copytoram/${img_fullname}")
            local rc=$?
        else
            (cp -- "${img}" "/run/archiso/copytoram/${img_fullname}")
            local rc=$?
        fi

        if [ $rc != 0 ]; then
85
            echo "ERROR: while copy '${img}' to '/run/archiso/copytoram/${img_fullname}'"
86
87
            launch_interactive_shell
        fi
Simon Wilper's avatar
Simon Wilper committed
88

89
        img="/run/archiso/copytoram/${img_fullname}"
90
        msg "done."
91
    fi
92
93
    sfs_dev="$(losetup --find --show --read-only -- "${img}")"
    echo "${sfs_dev}" >> /run/archiso/used_block_devices
94
    _mnt_dev "${sfs_dev}" "${mnt}" "-r" "defaults"
Simo Leone's avatar
Simo Leone committed
95
96
}

nl6720's avatar
nl6720 committed
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
# args: /path/to/image_file, mountpoint
_mnt_erofs() {
    local img="${1}"
    local mnt="${2}"
    local img_fullname="${img##*/}"
    local erofs_dev

    # shellcheck disable=SC2154
    # defined via initcpio's parse_cmdline()
    if [ "${copytoram}" = "y" ]; then
        msg -n ":: Copying EROFS image to RAM..."
        if ! cp -- "${img}" "/run/archiso/copytoram/${img_fullname}" ; then
            echo "ERROR: while copy '${img}' to '/run/archiso/copytoram/${img_fullname}'"
            launch_interactive_shell
        fi
        img="/run/archiso/copytoram/${img_fullname}"
        msg "done."
    fi
    erofs_dev="$(losetup --find --show --read-only -- "${img}")"
    echo "${erofs_dev}" >> /run/archiso/used_block_devices
    _mnt_dev "${erofs_dev}" "${mnt}" "-r" "defaults" "erofs"
}

120
# args: device, mountpoint, flags, opts
121
122
123
124
_mnt_dev() {
    local dev="${1}"
    local mnt="${2}"
    local flg="${3}"
125
    local opts="${4}"
nl6720's avatar
nl6720 committed
126
    local fstype="${5:-auto}"
127

128
129
    mkdir -p "${mnt}"

130
131
132
133
134
135
136
137
138
    msg ":: Mounting '${dev}' to '${mnt}'"

    while ! poll_device "${dev}" 30; do
        echo "ERROR: '${dev}' device did not show up after 30 seconds..."
        echo "   Falling back to interactive prompt"
        echo "   You can try to fix the problem manually, log out when you are finished"
        launch_interactive_shell
    done

nl6720's avatar
nl6720 committed
139
    if mount -t "${fstype}" -o "${opts}" "${flg}" "${dev}" "${mnt}"; then
140
        msg ":: Device '${dev}' mounted successfully."
141
    else
142
        echo "ERROR; Failed to mount '${dev}'"
143
144
145
146
147
148
        echo "   Falling back to interactive prompt"
        echo "   You can try to fix the problem manually, log out when you are finished"
        launch_interactive_shell
    fi
}

149
150
_verify_checksum() {
    local _status
151
    cd "/run/archiso/bootmnt/${archisobasedir}/${arch}" || exit 1
152
    sha512sum -c airootfs.sha512 > /tmp/checksum.log 2>&1
153
    _status=$?
154
155
    cd -- "${OLDPWD}" || exit 1
    return "${_status}"
156
157
}

158
159
_verify_signature() {
    local _status
nl6720's avatar
nl6720 committed
160
    local sigfile="${1}"
161
    cd "/run/archiso/bootmnt/${archisobasedir}/${arch}" || exit 1
nl6720's avatar
nl6720 committed
162
    gpg --homedir /gpg --status-fd 1 --verify "${sigfile}" 2>/dev/null | grep -qE '^\[GNUPG:\] GOODSIG'
163
    _status=$?
164
    cd -- "${OLDPWD}" || exit 1
165
166
167
    return ${_status}
}

168
run_hook() {
169
170
171
172
    [ -z "${arch}" ] && arch="$(uname -m)"
    [ -z "${copytoram_size}" ] && copytoram_size="75%"
    [ -z "${archisobasedir}" ] && archisobasedir="arch"
    [ -z "${dm_snap_prefix}" ] && dm_snap_prefix="arch"
173
174
    # shellcheck disable=SC2154
    # defined via initcpio's parse_cmdline()
175
176
    [ -z "${archisodevice}" ] && archisodevice="/dev/disk/by-label/${archisolabel}"
    [ -z "${cow_spacesize}" ] && cow_spacesize="256M"
177
178
    # shellcheck disable=SC2154
    # defined via initcpio's parse_cmdline()
179
    if [ -n "${cow_label}" ]; then
180
        cow_device="/dev/disk/by-label/${cow_label}"
181
182
183
        [ -z "${cow_persistent}" ] && cow_persistent="P"
    elif [ -n "${cow_device}" ]; then
        [ -z "${cow_persistent}" ] && cow_persistent="P"
184
185
186
187
    else
        cow_persistent="N"
    fi

188
189
190
    [ -z "${cow_flags}" ] && cow_flags="defaults"
    [ -z "${cow_directory}" ] && cow_directory="persistent_${archisolabel}/${arch}"
    [ -z "${cow_chunksize}" ] && cow_chunksize="8"
191

192
    # set mount handler for archiso
193
    export mount_handler="archiso_mount_handler"
194
195
}

196
197
198
# This function is called normally from init script, but it can be called
# as chain from other mount handlers.
# args: /path/to/newroot
199
archiso_mount_handler() {
200
    local newroot="${1}"
nl6720's avatar
nl6720 committed
201
    local sigfile
202

203
    if ! mountpoint -q "/run/archiso/bootmnt"; then
204
        _mnt_dev "${archisodevice}" "/run/archiso/bootmnt" "-r" "defaults"
205
206
        if [ "${copytoram}" != "y" ]; then
            readlink -f "${archisodevice}" >> /run/archiso/used_block_devices
207
208
209
        fi
    fi

210
211
    # shellcheck disable=SC2154
    # defined via initcpio's parse_cmdline()
212
213
    if [ "${checksum}" = "y" ]; then
        if [ -f "/run/archiso/bootmnt/${archisobasedir}/${arch}/airootfs.sha512" ]; then
214
215
216
217
218
            msg -n ":: Self-test requested, please wait..."
            if _verify_checksum; then
                msg "done. Checksum is OK, continue booting."
            else
                echo "ERROR: one or more files are corrupted"
219
                echo "see /tmp/checksum.log for details"
220
221
222
                launch_interactive_shell
            fi
        else
223
            echo "ERROR: checksum=y option specified but ${archisobasedir}/${arch}/airootfs.sha512 not found"
224
225
226
227
            launch_interactive_shell
        fi
    fi

228
229
    # shellcheck disable=SC2154
    # defined via initcpio's parse_cmdline()
230
231
    if [ "${verify}" = "y" ]; then
        if [ -f "/run/archiso/bootmnt/${archisobasedir}/${arch}/airootfs.sfs.sig" ]; then
nl6720's avatar
nl6720 committed
232
233
234
235
236
            sigfile="airootfs.sfs.sig"
        elif [ -f "/run/archiso/bootmnt/${archisobasedir}/${arch}/airootfs.erofs.sig" ]; then
            sigfile="airootfs.erofs.sig"
        fi
        if [ -n "${sigfile}" ]; then
237
            msg -n ":: Signature verification requested, please wait..."
nl6720's avatar
nl6720 committed
238
            if _verify_signature "${sigfile}"; then
239
240
241
242
243
244
                msg "done. Signature is OK, continue booting."
            else
                echo "ERROR: one or more files are corrupted"
                launch_interactive_shell
            fi
        else
nl6720's avatar
nl6720 committed
245
            echo "ERROR: verify=y option specified but GPG signature not found in ${archisobasedir}/${arch}/"
246
247
248
249
            launch_interactive_shell
        fi
    fi

250
    if [ "${copytoram}" = "y" ]; then
251
252
253
        msg ":: Mounting /run/archiso/copytoram (tmpfs) filesystem, size=${copytoram_size}"
        mkdir -p /run/archiso/copytoram
        mount -t tmpfs -o "size=${copytoram_size}",mode=0755 copytoram /run/archiso/copytoram
254
255
    fi

256
    if [ -n "${cow_device}" ]; then
257
        _mnt_dev "${cow_device}" "/run/archiso/cowspace" "-r" "${cow_flags}"
258
        readlink -f "${cow_device}" >> /run/archiso/used_block_devices
259
        mount -o remount,rw "/run/archiso/cowspace"
260
    else
261
        msg ":: Mounting /run/archiso/cowspace (tmpfs) filesystem, size=${cow_spacesize}..."
262
        mkdir -p /run/archiso/cowspace
263
        mount -t tmpfs -o "size=${cow_spacesize}",mode=0755 cowspace /run/archiso/cowspace
264
    fi
265
266
    mkdir -p "/run/archiso/cowspace/${cow_directory}"
    chmod 0700 "/run/archiso/cowspace/${cow_directory}"
267

nl6720's avatar
nl6720 committed
268
269
270
271
272
    if [ -f "/run/archiso/bootmnt/${archisobasedir}/${arch}/airootfs.sfs" ]; then
        _mnt_sfs "/run/archiso/bootmnt/${archisobasedir}/${arch}/airootfs.sfs" "/run/archiso/airootfs"
    elif [ -f "/run/archiso/bootmnt/${archisobasedir}/${arch}/airootfs.erofs" ]; then
        _mnt_erofs "/run/archiso/bootmnt/${archisobasedir}/${arch}/airootfs.erofs" "/run/archiso/airootfs"
    fi
273
274
    if [ -f "/run/archiso/airootfs/airootfs.img" ]; then
        _mnt_dmsnapshot "/run/archiso/airootfs/airootfs.img" "${newroot}" "/"
275
    else
276
        _mnt_overlayfs "/run/archiso/airootfs" "${newroot}" "/"
277
    fi
278

279
    if [ "${copytoram}" = "y" ]; then
280
        umount -d /run/archiso/bootmnt
281
        rmdir /run/archiso/bootmnt
Aaron Griffin's avatar
Aaron Griffin committed
282
283
    fi
}
Dan McGee's avatar
Dan McGee committed
284

285
# vim: set ft=sh: