ISC stopped maintaining dhclient since early 2022 and advises against its
use in production.

Since the cloud-init package no longer hard-depends on it, it can finally
be removed from the ISO.

By Julian
* origin/merge-requests/401:
  Remove the pacstrap directory early to lower the maximum size of the working directory

See merge request !401

If the `pacstrap` command fails, e.g. because of an invalid package name,
it is useful to see the error message even if verbose output is not
enabled.

Fixes #238

`DownloadUser = alpm` does not appear to be suitable for mkarchiso use
since there is no guarantee that `alpm` user has access to the working
directory.

Fixes #232
Fixes: 691c57fc ("Update pacman.conf for pacman 7")

Signed-off-by: David Runge <dvzrv@archlinux.org>

Adapt enabled services in both baseline and releng profiles to cope with
changes in cloud-init 24.3.

Related-to: archlinux/packaging/packages/cloud-init#3
Related-to: https://github.com/canonical/cloud-init/pull/5489
Fixes: #236


Signed-off-by: David Runge <dvzrv@archlinux.org>

Remove gnu-netcat from releng profile

Closes #234

See merge request !395

After adding openbsd-netcat to the list of dependencies for cloud-init,
we have to remove gnu-netcat from the releng profile, as both netcat
implementations conflict with one another.

Related-to: archlinux/packaging/packages/cloud-init#3
Fixes: #234


Signed-off-by: David Runge <dvzrv@archlinux.org>

Add new options from
https://gitlab.archlinux.org/archlinux/packaging/packages/pacman/-/blob/main/pacman.conf

By Tobias Powalowski
* origin/merge-requests/392:
  Update CHANGELOG.rst reflect remove of reiserfsprogs
  Remove reiserfsprogs (EOL)

See merge request !392

Despite usually preferring it, I somehow forgot about xz in
3b3984b4 ("mkarchiso: implement configurable bootstrap tarball compression")

These options are not compatible with multi-threaded compression and
actually increase the image file size.

With this change, the baseline profile's EROFS image file size is
reduced from 488 MiB to 398 MiB.
On my system, the compression time is reduced from about 2m6.274s to
1m59.410s when using erofs-utils built without multi-threaded
compression and to 0m27.883s when using erofs-utils built with
multi-threaded compression.

The UUID is never used for anything, since the file system resides in a
file. Instead of generating a reproducible UUID for it, use
`00000000-0000-0000-0000-000000000000` instead.

This shows the correct image file name in `_show_config` and simplifies
actions with the `image_name` in other functions.

* Do not run `tune2fs` on the image. The file system is not mounted, so
the default values for "Maximum mount count" (`tune2fs` option `-c`) and
"Check interval" (`tune2fs` option `-i`) are fine as is. With this change
the ext4 image is reproducible.
* Remove `E2FSPROGS_FAKE_TIME`. e2fsprogs 1.47.1 supports
`SOURCE_DATE_EPOCH` so setting this e2fsprogs specific variable is not needed
anymore.
See https://github.com/tytso/e2fsprogs/issues/131 for details.

By Dariusz Pelowski
* origin/merge-requests/386:
  .automated_script.sh: add proper HTTP status checking

See merge request !386

Dariusz Pelowski authored 10 months ago and nl6720 committed 10 months ago

When a download attempt fails with an HTTP error, the body of the failed
request will be written to the output file with a 0 exit status, causing the
execution of an error message as a script.

This issue is resolved by adding the --fail option to curl.

Co-authored-by: David Runge <dvzrv@archlinux.org>

configs/releng/packages.x86_64: Remove wezterm-terminfo

See merge request !384

The wezterm-terminfo package is replaced by the ncurses package.

Signed-off-by: David Runge <dvzrv@archlinux.org>

mkfs.fat selects FAT32 for file systems of at least 512 MiB size, but a
FAT32 file system can already be created at 36 MiB size (assuming 512
byte logical sector size).

Use higher compression for the initramfs.

Now that mkinitcpio moves the compressed kernel modules and firmware
files to the early uncompressed initramfs, we can compress the main
initramfs image slightly more without it increasing the built time too
much. This will increase the memory required for decompression from
9 MiB to 65 MiB (assuming the kernel's decompressor works the same as
the xz tool), but that should not be an issue for any system targeting
Arch.

This reduces the initramfs size by ~250 KiB, which will save ~500 KiB
for the whole ISO.

If the ISO exceeds the max size of a CD (900 MiB), the 300 KiB padding
needed for CDs can be removed.

Less than 1 MiB (but rounded up to one) is needed to account for file and
directory entries, especially when using FAT32. Otherwise the ISO build could stop with:

    Disk full

The rest of the increase is to allow more space for adding custom files
after the fact, i.e. when repacking the ISO. E.g. for the purposes of
adding a signed boot loader for Secure Boot or similar. See
https://wiki.archlinux.org/title/Unified_Extensible_Firmware_Interface/Secure_Boot#ISO_repacking

Use `OVMF_CODE.4m.fd` and `OVMF_VARS.4m.fd` instead of the old 2 MiB
`OVMF_CODE.fd` and `OVMF_VARS.fd`.

mkarchiso: do not place the pkglist.x86_64.txt file inside the bootstrap tarball's root.x86_64 directory

Keep it inside the archive, but separate from the `root.x86_64` directory
to avoid polluting it.

The existence of a ``early_cpio`` file is not enough since mkinitcpio can
and will place other files in the early uncompressed CPIO even when the
microcode hook is not used.

Fixes #231

While using GRUB as the UEFI boot loader has reduced the size of the ISO,
it has brought nothing but pain otherwise:

* We cannot use `gfxterm` since it is not visible on some hardware.
* GRUB has a a strange and nonsensical limitation where the EFI binary
  can be built with either support for shim or custom Secure Boot key
  support, but not both. This means you cannot repack the ISO to use
  shim + MOK since we currently use `--disable-shim-lock` to provide
  support for setups with custom keys.
* GRUB's EFI binary needs to be built with `grub-mkstandalone` instead
  of there being a ready made EFI binary in the package. This requires
  having grub installed on the host system which affects reproducibility.

This increases the size of the ISO since systemd-boot cannot boot files
from other volumes, i.e. the kernel and initramfs is duplicated in the
EFI system partition (the second partition made from `efiboot.img`).

Implements #227

`archisosearchuuid=` first searches for a matching UUID. If that fails,
then it mounts and looks for a `/boot/${archisosearchuuid}.uuid` file in
all detected block devices (in whatever order `blkid` lists them).

This implements "file system transposition" without relaying on boot
loader specific features and does not tie us to GRUB anymore.

Related to archlinux/mkinitcpio/mkinitcpio-archiso!48
Fixes #217

This simplifies boot loader configuration, but custom PXE setups will
be forced to update theirs.

Implements #226

The zstd tool has now been around for a while, so the availability of
it should not be a concern anymore.

Unlike gzip which was used until now, zstd offers higher compression
while still being faster (and multi-threaded).
The `--auto-threads=logical` option is used just so that there is some
difference between the releng and baseline profiles.

Everyone using the official Arch Linux bootstrap tarball (previously
`archlinux-bootstrap-YYYY.MM.DD-x86_64.tar.gz` or
`archlinux-bootstrap-x86_64.tar.gz`) will need to update their scripts
and etc. to use `archlinux-bootstrap-YYYY.MM.DD-x86_64.tar.zst` or
`archlinux-bootstrap-x86_64.tar.zst` instead.

Implements #130

`uefi-ia32.systemd-boot.eltorito` has the same requirements as
`uefi-ia32.systemd-boot.esp`, not the same as `uefi-x64.systemd-boot.esp`.

Fixes: 5e72546e ("mkarchiso: add uefi-ia32.systemd-boot.esp and uefi-ia32.systemd-boot.eltorito boot modes")