272 lines
3.8 KiB
Bash
272 lines
3.8 KiB
Bash
#!/usr/bin/env bash
|
|
|
|
set -euo pipefail
|
|
|
|
# ==========================================
|
|
# EspOS OpenRC RootFS Builder
|
|
# Debian 13 Trixie + EspOS unstable
|
|
#
|
|
# Output:
|
|
# espos-openrc-rootfs.tar.xz
|
|
#
|
|
# No incluye:
|
|
# - live user
|
|
# - escritorio
|
|
# - instalador
|
|
# ==========================================
|
|
|
|
|
|
ARCH="amd64"
|
|
|
|
DEBIAN_SUITE="trixie"
|
|
DEBIAN_MIRROR="http://deb.debian.org/debian"
|
|
|
|
ESPOS_REPO="https://repo.elordenador.org"
|
|
ESPOS_SUITE="espos-unstable"
|
|
|
|
ROOTFS="$(pwd)/rootfs"
|
|
OUTPUT="espos-openrc-rootfs.tar.xz"
|
|
|
|
KEYRING_PACKAGE="espos-archive-keyring"
|
|
KEYRING_PATH="/usr/share/keyrings/espos-archive-keyring.gpg"
|
|
|
|
|
|
|
|
BASE_PACKAGES="
|
|
bash
|
|
coreutils
|
|
sudo
|
|
ca-certificates
|
|
locales
|
|
tzdata
|
|
curl
|
|
wget
|
|
openssh-server
|
|
openrc
|
|
dbus
|
|
elogind
|
|
init-system-helpers
|
|
"
|
|
|
|
|
|
|
|
ESPOS_PACKAGES="
|
|
base-files
|
|
espos-release
|
|
"
|
|
|
|
|
|
|
|
cleanup()
|
|
{
|
|
echo "[+] Cleaning mounts"
|
|
|
|
umount -lf "$ROOTFS/dev/pts" 2>/dev/null || true
|
|
umount -lf "$ROOTFS/dev" 2>/dev/null || true
|
|
umount -lf "$ROOTFS/proc" 2>/dev/null || true
|
|
umount -lf "$ROOTFS/sys" 2>/dev/null || true
|
|
}
|
|
|
|
|
|
trap cleanup EXIT
|
|
|
|
|
|
|
|
echo "[+] Removing old rootfs"
|
|
|
|
rm -rf "$ROOTFS"
|
|
|
|
|
|
|
|
echo "[+] Creating Debian ${DEBIAN_SUITE} minbase"
|
|
|
|
|
|
debootstrap \
|
|
--variant=minbase \
|
|
--arch="$ARCH" \
|
|
"$DEBIAN_SUITE" \
|
|
"$ROOTFS" \
|
|
"$DEBIAN_MIRROR"
|
|
|
|
|
|
|
|
echo "[+] Copying DNS"
|
|
|
|
cp /etc/resolv.conf "$ROOTFS/etc/resolv.conf"
|
|
|
|
|
|
|
|
echo "[+] Mounting virtual filesystems"
|
|
|
|
|
|
mount --bind /dev "$ROOTFS/dev"
|
|
mount --bind /dev/pts "$ROOTFS/dev/pts"
|
|
|
|
mount -t proc proc "$ROOTFS/proc"
|
|
mount -t sysfs sys "$ROOTFS/sys"
|
|
|
|
|
|
|
|
echo "[+] Installing ca-certificates first"
|
|
|
|
|
|
chroot "$ROOTFS" apt update
|
|
|
|
chroot "$ROOTFS" apt install -y \
|
|
ca-certificates
|
|
|
|
|
|
|
|
echo "[+] Blocking systemd packages"
|
|
|
|
|
|
cat > "$ROOTFS/etc/apt/preferences.d/no-systemd" <<EOF
|
|
Package: systemd systemd-sysv libsystemd0
|
|
Pin: release *
|
|
Pin-Priority: -1
|
|
EOF
|
|
|
|
|
|
|
|
echo "[+] Adding temporary EspOS repository"
|
|
|
|
|
|
cat > "$ROOTFS/etc/apt/sources.list.d/espos.list" <<EOF
|
|
deb [trusted=yes] ${ESPOS_REPO} ${ESPOS_SUITE} main
|
|
EOF
|
|
|
|
|
|
|
|
echo "[+] Copying local deb packages"
|
|
|
|
|
|
mkdir -p "$ROOTFS/tmp/packages"
|
|
|
|
|
|
cp ./*.deb "$ROOTFS/tmp/packages/" 2>/dev/null || true
|
|
|
|
|
|
|
|
echo "[+] Installing EspOS archive keyring"
|
|
|
|
|
|
if ls "$ROOTFS/tmp/packages/${KEYRING_PACKAGE}"*.deb >/dev/null 2>&1
|
|
then
|
|
|
|
chroot "$ROOTFS" dpkg -i \
|
|
/tmp/packages/${KEYRING_PACKAGE}*.deb
|
|
|
|
else
|
|
|
|
echo "[ERROR] Missing ${KEYRING_PACKAGE}.deb"
|
|
exit 1
|
|
|
|
fi
|
|
|
|
|
|
|
|
echo "[+] Switching EspOS repo to signed-by"
|
|
|
|
|
|
cat > "$ROOTFS/etc/apt/sources.list.d/espos.list" <<EOF
|
|
deb [signed-by=${KEYRING_PATH}] ${ESPOS_REPO} ${ESPOS_SUITE} main
|
|
EOF
|
|
|
|
|
|
|
|
echo "[+] Updating signed repositories"
|
|
|
|
|
|
chroot "$ROOTFS" apt update
|
|
|
|
|
|
|
|
echo "[+] Installing OpenRC base system"
|
|
|
|
|
|
chroot "$ROOTFS" apt install -y \
|
|
$BASE_PACKAGES
|
|
|
|
|
|
|
|
echo "[+] Installing EspOS packages"
|
|
|
|
|
|
chroot "$ROOTFS" apt install -y \
|
|
$ESPOS_PACKAGES
|
|
|
|
|
|
|
|
echo "[+] Removing remaining systemd packages"
|
|
|
|
|
|
chroot "$ROOTFS" apt purge -y \
|
|
systemd \
|
|
systemd-sysv \
|
|
systemd-timesyncd \
|
|
2>/dev/null || true
|
|
|
|
|
|
|
|
echo "[+] Configuring OpenRC init"
|
|
|
|
|
|
ln -sf /sbin/openrc-init "$ROOTFS/sbin/init"
|
|
|
|
|
|
|
|
echo "[+] Configuring hostname"
|
|
|
|
|
|
echo "espos" > "$ROOTFS/etc/hostname"
|
|
|
|
|
|
|
|
echo "[+] Generating locales"
|
|
|
|
|
|
chroot "$ROOTFS" bash -c "
|
|
echo 'en_US.UTF-8 UTF-8' > /etc/locale.gen
|
|
locale-gen
|
|
"
|
|
|
|
|
|
|
|
echo "[+] Enabling OpenRC base services"
|
|
|
|
|
|
chroot "$ROOTFS" rc-update add devfs sysinit || true
|
|
chroot "$ROOTFS" rc-update add procfs boot || true
|
|
chroot "$ROOTFS" rc-update add sysfs boot || true
|
|
|
|
|
|
|
|
echo "[+] Cleaning apt"
|
|
|
|
|
|
chroot "$ROOTFS" apt clean
|
|
|
|
|
|
rm -rf "$ROOTFS/var/lib/apt/lists/*"
|
|
|
|
rm -rf "$ROOTFS/tmp/*"
|
|
|
|
|
|
|
|
echo "[+] Creating rootfs archive"
|
|
|
|
|
|
tar \
|
|
--numeric-owner \
|
|
-C "$ROOTFS" \
|
|
-cJf "$OUTPUT" .
|
|
|
|
|
|
|
|
echo
|
|
echo "========================================"
|
|
echo " EspOS OpenRC rootfs created"
|
|
echo
|
|
echo " Output:"
|
|
echo " $OUTPUT"
|
|
echo "========================================" |