1. 24 Aug, 2021 6 commits
  2. 15 Aug, 2021 2 commits
  3. 30 Jul, 2021 1 commit
  4. 29 Jul, 2021 1 commit
    • nl6720's avatar
      mkarchiso: improve functions and comments · 610ff2ac
      nl6720 authored
      * Merge _make_efi_dir_on_iso9660 into _make_bootmode_uefi-x64.systemd-boot.eltorito since it's specific to that boot mode.
      * Split off FAT image creation into _make_efibootimg, so it can be reused by other functions.
      * Add/improve comments to better document what the script does.
      610ff2ac
  5. 11 Jul, 2021 1 commit
  6. 02 Jul, 2021 2 commits
  7. 30 Jun, 2021 1 commit
    • David Runge's avatar
      archiso/mkarchiso: Generalize handling of ucodes · 19861e47
      David Runge authored
      archiso/mkarchiso:
      Generalize the handling of ucode files (e.g. copying, signing, size calculation) by introducing the global readonly
      array of expected ucode names instead of hardcoding them in various functions.
      When making use of ucode files in `_make_boot_on_iso9660()`, `_make_bootmode_uef-x86.systemd-boot.esp()` and
      `_sign_netboot_artifacts()` create a list of files that is guaranteed to contain existing files.
      
      Fixes #132
      19861e47
  8. 22 Jun, 2021 1 commit
  9. 18 Jun, 2021 1 commit
  10. 05 Jun, 2021 1 commit
  11. 01 Jun, 2021 1 commit
  12. 10 May, 2021 2 commits
    • David Runge's avatar
      mkarchiso: Also create package list for netboot · 6b11d7be
      David Runge authored
      archiso/mkarchiso:
      Change `_make_pkglist()` to also generate the package list when using the netboot build mode.
      6b11d7be
    • David Runge's avatar
      mkarchiso: Add buildmode to export netboot artifacts · d54bf635
      David Runge authored
      archiso/mkarchiso:
      Implement a buildmode to export artifacts required for netboot with IPXE.
      When providing the buildmode 'netboot' via profiledef.sh or the `-m` option, all targets necessary to create an ISO
      medium are built, but the components required for netboot are exported to the output dir.
      Optionally, it is possible to provide a set of certificates for codsigning using the `-c` option, where the first file
      is considered as the signer certificate and the second as the key.
      
      Add `_export_netboot_artifacts()` to copy build artifacts to the output directory.
      Add `_sign_netboot_artifacts()` to codesign the netboot artifacts in the work directory.
      Add `_validate_requirements_buildmode_netboot()` to check for openssl.
      Add `_build_iso_base()` to implement common function calls between the 'iso' and the 'netboot' buildmodes.
      Add `_build_buildmode_netboot()` to make use of `_build_iso_base()`, (optionally) `_sign_netboot_artifacts()` and
      `_export_netboot_artifacts()`.
      Change `_build_buildmode_iso()` to make use of `_build_iso_base()`.
      Add `-c` as an option to mkarchiso to read in a list of file names.
      Unify the output of `_usage()` by using the same definition style for lists of strings provided to options that accept
      them (e.g. `-c`, `-m`, `-p`).
      
      Closes #128
      d54bf635
  13. 09 May, 2021 1 commit
    • David Runge's avatar
      mkarchiso: Implement buildmodes that allow building bootstrap images · 2cac5396
      David Runge authored
      archiso/mkarchiso:
      Introduce a buildmodes array, that can be used to build towards more than one output artifact type.
      Add a buildmode for building a bootstrap image (a compressed file containing a very minimal Arch installation).
      The buildmodes can be set either using a `buildmodes` array in a `profiledef.sh` or by using the `-m` option flag to
      mkarchiso and providing a space delimited, quoted list.
      The 'iso' buildmode is always the default if no buildmodes are setup.
      Implement building a bootstrap image, when using the 'bootstrap' `buildmode`, which uses a profile's
      'bootstrap_packages.$arch' file to install packages using pacstrap and compressing it to a bootstrap image.
      The name of the output file is currently constructed from the `iso_name` value by appending `-bootstrap`.
      
      Replace the uses of `airootfs_dir` with the more generic `pacstrap_dir`, as the location denotes where pacstrap is
      being used.
      Replace uses of `img_name` with `image_name` and removing it from the global scope, so that it can be overridden per
      each buildmode.
      Rename `_cleanup_airootfs_dir()` to `_cleanup_pacstrap_dir()`.
      Make `_run_once()` more generic by prepending the state files with a string defined by `run_once_mode`.
      Add `_validate_requirements_buildmode_all()`, `_validate_requirements_buildmode_bootstrap()` and
      `_validate_requirements_buildmode_iso()` to validate the general requirements of the different buildmodes.
      Add `_build_bootstrap_image()` to generate the bootstrap image using bsdtar.
      Rename `_build_iso()` to `_build_iso_image()` to fit the naming of the respective bootstrap function.
      Extend `_read_profile()` to include the reading of bootstrap image specific packages from a file.
      Extend `_validate_options()` to include testing of the bootstrap packages and running of validation functions for all
      buildmodes.
      Change `_set_overrides()` to override the buildmodes if they are specified via the `-m` option flag.
      Change `_make_version()` to be used generically in all buildmodes.
      Change `_make_pkglist()` to be used generically in all buildmodes.
      Rename `_build_profile()` to `_build_buildmode_iso()` and set local variables that are specific to the buildmode, such
      as `image_name`, `pacstrap_dir`, `run_once_mode` , `buildmode_packages` and `buildmode_pkg_list`.
      Add `_build_buildmode_bootstrap()` and set local variables that are specific to the buildmode, such as `image_name`,
      `pacstrap_dir`, `run_once_mode` , `buildmode_packages` and `buildmode_pkg_list`.
      Add the `-m` option flag to the list of flags.
      
      Closes #127
      2cac5396
  14. 01 May, 2021 2 commits
    • David Runge's avatar
      Set more generic output for signatures · 42cdf867
      David Runge authored
      archiso/mkarchiso:
      Change the help output to reflect that the `-g` option is generically signing a rootfs (which may be e.g. squashfs or
      erofs).
      Change the output of `_mksignature()` to be more generic, as it signs any type of understood rootfs image (which may be
      e.g. squashfs or erofs).
      42cdf867
    • David Runge's avatar
      Force PGP signature file extension · cc735dbb
      David Runge authored
      archiso/mkarchiso:
      Force the file extension in use for the PGP signatures of the rootfs to always be .sig.
      When gnupg's 'armor' configuration option is used, the output otherwise defaults to using .asc.
      As the verification hook in mkinitcpio-archiso expects the .sig file extension, verifying the rootfs will fail in that
      scenario.
      cc735dbb
  15. 30 Apr, 2021 3 commits
  16. 07 Apr, 2021 2 commits
  17. 26 Mar, 2021 1 commit
  18. 21 Mar, 2021 1 commit
  19. 09 Mar, 2021 1 commit
    • nl6720's avatar
      Support EROFS · bc67933a
      nl6720 authored
      EROFS, like Squashfs, is a read-only file system. It can be used to store airootfs in an image file.
      Its advantage is the support for POSIX ACLs. EROFS downside is that currently it only supports LZ4 compression (LZMA support is not yet fully implemented).
      
      A difference from Squashfs is that, EROFS stores change time (ctime) not modification time (mtime). The reverse is true for Squashfs.
      
      Implements archlinux/archiso#59
      bc67933a
  20. 28 Jan, 2021 1 commit
  21. 26 Jan, 2021 1 commit
    • Christian Hesse's avatar
      mkarchiso: add version information · b30d1cad
      Christian Hesse authored
      To date the iso version was used for iso volume information and iso file name.
      In my custom builds I do use it a lot more:
      
      * Inside the root fs: The system knows about its own version. I use this to:
        -> report the version to a server (poor man's inventory)
        -> let the system update itself
      
      * On the iso fs: The files are served via rsync, running systems transfer
        version file first to check for available update.
      
      * A grub environment file on the iso fs: Booting the iso from grub allows
        to create cow directory per version:
      
          loopback loop archlinux.iso
          load_env -f (loop)/arch/grubenv
          linux (loop)/arch/boot/x86_64/vmlinuz-linux ... \
              cow_directory=archlinux/${VERSION} ...
      
      So let's just create these files.
      b30d1cad
  22. 23 Jan, 2021 1 commit
  23. 07 Jan, 2021 1 commit
  24. 30 Nov, 2020 4 commits
    • David Runge's avatar
      Fix issues with file ownerships/modes · c10004df
      David Runge authored
      archiso/mkarchiso:
      Make sure to always compare absolute paths in `_make_custom_airootfs()` (as `realpath` is used).
      Remove `echo` calls that prevent the setting of actual file ownerships and modes.
      
      configs/releng/profiledef.sh:
      Set file mode of /root/.automated_script.sh to 755.
      
      Fixes #82
      c10004df
    • nl6720's avatar
      Keep all SYSLINUX files in /syslinux · 863247d0
      nl6720 authored
      This gets rid of the duplicate ldlinux.c32 and the useless isolinux.cfg which only points to syslinux.cfg.
      
      Implements #46 .
      863247d0
    • nl6720's avatar
      Prevent path traversal outside of $airootfs_dir · 183ae527
      nl6720 authored
      183ae527
    • nl6720's avatar
      Allow specifying ownership and mode of custom airootfs files and directories · 42d9e4f9
      nl6720 authored
      profiledef.sh can now contain an associative array called file_permissions which can be used to set custom ownership and mode of custom airootfs files. The array's keys contain the path and the value is a colon separated list of owner UID, owner GID and access mode.
      For example:
      
          file_permissions=(
            ["/etc/shadow"]="0:0:400"
          )
      
      This means that mkarchiso now copies airootfs files (and directores) without permissions and anything that should be owned by a user other than root and/or if the mode should be something other than 644 for files and 755 for directories must to be listed in ${file_permission[@]} in profiledef.sh.
      
      Fixes #61 .
      42d9e4f9
  25. 18 Nov, 2020 1 commit
    • David Runge's avatar
      Fix evaluation bugs in mkarchiso · 3160db0e
      David Runge authored
      archiso/mkarchiso:
      Guard the call to `_mksignature()` in `_prepare_airootfs_image()` by an if statement.
      Using the `&&` logic leads to `_prepare_airootfs_image()` evaluating to false if `$gpg_key` is not set.
      
      Add `_msg_info()` calls to `_set_override()` which prevent the function from evaluating to false if no override is
      being done. Additionally this is great for debugging purposes.
      
      Add `_msg_info()` calls to `_read_profile()` (which is great for debugging purposes).
      
      Fixes #81
      3160db0e