Commit Graph

32 Commits

Author SHA1 Message Date
John Lane
72c274924a Allow download automated script using TFTP 2023-12-07 21:00:27 +00:00
David Runge
6c5ab3d388
Use pcsclite for communicating with OpenPGP smartcards
As opgpcard uses pcsclite and gnupg is able to use it as well, switch
away from using gnupg's internal ccid driver.
2023-08-29 20:13:32 +02:00
nl6720
28a3a54c5f
Fix optional shellcheck warnings
Additionally fix a few code style issues found with shfmt.
2023-06-15 15:12:28 +03:00
Zig Globulin
f60525103d wait for networkd online before curl invocation
1) wait for network-online.target before invoking curl
   as there's no synchronization with network setup for this script
2) don't hide curl errors - it may be easier to debug the issues
3) add log and comments
2023-03-02 16:29:17 +02:00
nl6720
477294955a
configs/releng/airootfs/root/.zlogin: use grep -a to ensure /proc/cmdline is treated as text
This protects against the case where /proc/cmdline contains garbage triggering grep to think it is a binary.
See e.g. https://bugs.archlinux.org/task/76468 for an example.
2022-11-12 11:35:36 +02:00
Howard Hicks
679bfc8c9f Fixes failure to retry script download. Tested and verified the issue is resolved.
The curl --retry-connrefused option is used with not instead of the --retry <num> option to add an extra type of failure to retry on, without --retry <num> it does not retry at all even on a connection refused. 

https://man.archlinux.org/man/curl.1.en
2021-11-30 22:03:09 +00:00
David Runge
0664efcf3c
Allow redirects for scripts
configs/releng/airootfs/root/.automated_script.sh:
Add the `--location` curl parameter (see `man 1 curl`) to allow for curl to retrieve a remote script even if the source
is being redirected (e.g. moved permanently) when using the `script=` kernel commandline parameter.

Fixes #113
2021-03-29 19:26:27 +02:00
nl6720
f9a7b206a5
configs/releng: move locale-gen from customize_airootfs.sh to a pacman hook
This finally removes customize_airootfs.sh from releng.

Fixes https://gitlab.archlinux.org/archlinux/archiso/-/issues/21 .
2021-01-31 11:34:56 +02:00
nl6720
4f4047a3f8
configs/releng: move the mirror uncommenting sed command from customize_airootfs.sh to a pacman hook
After pacman-mirrorlist is installed, /etc/pacman.d/hooks/uncomment-mirrors.hook will run a sed command which uncomments all Server lines in /etc/pacman.d/mirrorlist.
This brings us another step closer to the complete removal of customize_airootfs.sh.

Related to https://gitlab.archlinux.org/archlinux/archiso/-/issues/21 .
2021-01-27 00:07:45 +02:00
Alexander Epaneshnikov
6a39300b0f implement accessibility support in archiso
this fixes #67
2020-10-29 12:30:37 +00:00
nl6720
e9f209efbf
Deprecate build.sh scripts and old mkarchiso commands
Replace build.sh scripts with calls to mkarchiso -B "profiledir" build_profile.

Fixes https://gitlab.archlinux.org/archlinux/archiso/-/issues/37 .
2020-08-17 21:33:20 +03:00
nl6720
0ada52d47f
releng: place custom sshd_config in airootfs
Properly track the file instead of modifying it on-the-fly with customize_airootfs.sh.
See https://gitlab.archlinux.org/archlinux/archiso/-/issues/21 .
2020-07-30 15:53:46 +03:00
David Runge
e264b44682
Add license and basic documentation
LICENSE:
Add GPL-3.0 license.

{{archiso,configs}/*,.editorconfig,.gitlab-ci.yml}:
Add SPDX license identifier.

Makefile:
Add SPDX license identifier.
Install the `run_archiso.sh` script as global executable `run_archiso`.
Use -D and -t flags to install to install files more generically (without a previous call to install the directory).

README.rst:
Add README outlining the project's scope, how to build images from the profiles and how to test.

AUTHORS.rst:
Add list of all direct contributors to the repository.

CONTRIBUTING.rst:
Add basic contribution guidelines, explaining the linter and the license in use.

Closes #7
Closes #3
2020-07-29 14:27:48 +02:00
nl6720
ba6b44f80a
Copy /etc/skel/ to user's home from build.sh instead of customize_airootfs.sh
Additionally copy the files to all custom user homes, not just root's.
2020-07-28 11:56:59 +03:00
nl6720
78fe656042
Deprecate customize_airootfs.sh
Show a deprecation notice if airootfs/root/customize_airootfs.sh is found.
2020-07-28 11:56:58 +03:00
nl6720
6689537563
Set root user's shell and password with custom /etc/passwd and /etc/shadow
Correct shadow file permissions from build.sh.
2020-07-20 13:39:41 +03:00
nl6720
550aca7124
Remove lynx usage in configs/releng/build.sh
/usr/local/bin/Installation_guide:
Add a convenience script which opens the installation guide in lynx.

/etc/motd:
Provide a message with minimal instructions for connecting to internet and inform about the Installation_guide convenience script.
2020-07-11 17:08:44 +03:00
nl6720
d5d0f78139
Use /usr/bin/env in shebangs 2020-07-11 16:31:18 +03:00
nl6720
d39e2ba41b
Keep /root permissions as 750
The filesystem package installs /root as 750 not 700.

Move chmod from customize_airootfs.sh to build.sh.
2020-07-11 16:30:25 +03:00
nl6720
ff926f72a1
Set timezone from outside chroot 2020-06-30 06:25:43 +03:00
nl6720
3720627e88
Enable systemd units with symlinks instead of doing it via systemctl in chroot 2020-06-30 06:25:43 +03:00
nl6720
d11737ffe8
Use drop-in files for journald and logind configuration 2020-06-30 06:25:43 +03:00
David Runge
9b49621f78
Removing wget in favor of curl
configs/releng/airootfs/root/.automated_script.sh:
Replacing wget with curl for the use-case of downloading a
pre-specified remote startup script (changing flags where needed).

configs/releng/packages.x86_64:
Removing wget from the list of installed packages, as
.automated_script.sh was the only reason for it being installed.

Closes #16
2020-06-23 21:38:39 +02:00
David Runge
0d67870667
Replacing dhcpcd with systemd-networkd and systemd-resolved
configs/releng/airootfs/etc/udev/rules.d/81-dhcpcd.rules:
Removing the udev rule for starting dhcpcd@.service on interfaces of the
form eth* and en*.

configs/releng/airootfs/etc/systemd/network/{ethernet,wireless}.network:
Adding default DHCP configurations for en*, eth*, wlp* and wlan*
interfaces.

configs/releng/airootfs/etc/resolv.conf:
Adding a symlink from /run/systemd/resolve/stub-resolv.conf to
/etc/resolv.conf (in airootfs).

configs/releng/airootfs/root/customize_airootfs.sh:
Adding systemd-networkd and systemd-resolved to the list of services
that are being enabled during airootfs customization.
2020-05-31 21:41:57 +02:00
David Runge
769fbecef3
Unsetting the root password
Due to changes in the filesystem package [1] the current /etc/passwd
does not allow login without an empty root password anymore.
This becomes apparent, when switching to another TTY than the one
autologin is activated for.

By running passwd -d root we unset the password.
In the future this should go to a custom /etc/passwd file.

[1] https://git.archlinux.org/svntogit/packages.git/commit/trunk?h=packages/filesystem&id=0320c909f3867d47576083e853543bab1705185b
2020-05-31 00:27:15 +02:00
David Runge
d50e57a243
Simplifying regex for script download
configs/releng/airootfs/root/.automated_script.sh:
Using only one regex to match http://, https:// or ftp:// endpoints.
2020-05-30 19:55:03 +02:00
Gerardo Exequiel Pozzi
217a05eb86 [configs/releng] Fix (again) sshd root login
Signed-off-by: Gerardo Exequiel Pozzi <vmlinuz386@gmail.com>
2015-09-11 21:06:55 -03:00
Gerardo Exequiel Pozzi
8e7601caae [configs/releng] Ignore Lid/Sus/Hib switch/keys by logind
Signed-off-by: Gerardo Exequiel Pozzi <vmlinuz386@gmail.com>
2015-08-11 21:45:33 -03:00
Gerardo Exequiel Pozzi
8de9b98cad [configs/releng] Set old behavior of sshd PermitRootLogin -> yes
Requested at FS#45563

Signed-off-by: Gerardo Exequiel Pozzi <vmlinuz386@gmail.com>
2015-07-09 14:09:53 -03:00
Gerardo Exequiel Pozzi
49bd7ce4bd [configs/releng] Remove unused 'arch' user
Signed-off-by: Gerardo Exequiel Pozzi <vmlinuz386@gmail.com>
2015-04-19 17:31:17 -03:00
Gerardo Exequiel Pozzi
01773d2b86 [configs/releng] Fix /root mode
Thanks Izumi Natsuka for reporting this.

Signed-off-by: Gerardo Exequiel Pozzi <vmlinuz386@gmail.com>
2014-07-28 11:41:46 -03:00
Gerardo Exequiel Pozzi
604b182af5 [archiso] Rename root-image to airootfs
Two purposes:
 * systemd filename friendly: "-" is used for "/" and must be escaped with "\x20"
 * ISO9660 filename friendly: "-" is replaced with "_"
2014-06-28 00:35:50 -03:00