feat: assemble an installable Gentoo live image in an exported rootfs

2026-10-13 04:32:18 +03:00
parent 38914cf67f
commit 0f71430b8e
32 changed files with 874 additions and 10 deletions
@@ -0,0 +1,3 @@
+GRUB_DISTRIBUTOR="HydraOS"
+GRUB_TIMEOUT=5
+GRUB_CMDLINE_LINUX_DEFAULT="console=tty0 console=ttyS0,115200n8"
@@ -0,0 +1,3 @@
+hostonly="no"
+hostonly_cmdline="no"
+omit_dracutmodules+=" dmsquash-live "
@@ -0,0 +1,5 @@
+[terminal]
+vt = 1
+[default_session]
+command = "/usr/bin/agreety --cmd /usr/bin/hydra-session"
+user = "greetd"
@@ -0,0 +1,8 @@
+[terminal]
+vt = 1
+[default_session]
+command = "/usr/bin/agreety --cmd /usr/bin/hydra-session"
+user = "greetd"
+[initial_session]
+command = "/usr/bin/hydra-session"
+user = "hydra-live"
@@ -0,0 +1,5 @@
+network = "bridge"
+bridge = "hydrabr0"
+width = 1920
+height = 1080
+refresh_millihz = 144000
@@ -0,0 +1,11 @@
+interface=hydrabr0
+bind-dynamic
+except-interface=lo
+listen-address=10.203.0.1
+dhcp-range=10.203.0.20,10.203.0.254,255.255.255.0,12h
+dhcp-option=option:router,10.203.0.1
+dhcp-option=option:dns-server,10.203.0.1
+dhcp-leasefile=/var/lib/hydra/dnsmasq.leases
+resolv-file=/run/NetworkManager/resolv.conf
+domain-needed
+bogus-priv
@@ -0,0 +1 @@
+HydraOS live medium: changes to the host root are not persistent.
@@ -0,0 +1,7 @@
+[
+  "/etc/greetd/live.toml",
+  "/etc/sudoers.d/90-hydra-live",
+  "/etc/systemd/system/greetd.service.d/90-hydra-live.conf",
+  "/etc/systemd/system/getty@tty2.service.d/90-hydra-live.conf",
+  "/etc/systemd/system/serial-getty@ttyS0.service.d/90-hydra-live.conf"
+]
@@ -0,0 +1 @@
+LANG=en_US.UTF-8
@@ -0,0 +1,2 @@
+en_US.UTF-8 UTF-8
+ru_RU.UTF-8 UTF-8
@@ -0,0 +1,5 @@
+HydraOS: fullscreen VMs with an ordinary Gentoo host underneath.
+Live host changes are volatile. Use sudo hydra-install for the guarded installer.
+Use hydra --help, nmcli, or nmtui to configure VMs and network connections.
+Ctrl+Alt+F2 opens local recovery; return to the graphical session on Ctrl+Alt+F1.
+Guest bridge: 10.203.0.0/24. Routed LAN access requires a route on your LAN router.
@@ -0,0 +1,6 @@
+# Preserve the scoped bridge-helper permission after ordinary QEMU updates.
+post_pkg_postinst() {
+    if [[ ${CATEGORY}/${PN} == app-emulation/qemu ]]; then
+        "${EROOT}usr/libexec/hydra-bridge-permissions" || die "Hydra bridge permissions failed"
+    fi
+}
@@ -0,0 +1 @@
+allow hydrabr0
@@ -0,0 +1 @@
+%wheel ALL=(ALL:ALL) ALL
@@ -0,0 +1 @@
+hydra-live ALL=(ALL:ALL) NOPASSWD: ALL
@@ -0,0 +1 @@
+net.ipv4.ip_forward = 1
@@ -0,0 +1,3 @@
+[Login]
+KillUserProcesses=no
+UserStopDelaySec=infinity
@@ -0,0 +1,3 @@
+[Service]
+ExecStart=
+ExecStart=-/sbin/agetty --autologin hydra-live --noclear %I $TERM
@@ -0,0 +1,3 @@
+[Service]
+ExecStart=
+ExecStart=/usr/bin/greetd --config /etc/greetd/live.toml
@@ -0,0 +1,8 @@
+[Unit]
+Description=Restrict QEMU bridge helper to HydraOS VM users
+Before=greetd.service
+[Service]
+Type=oneshot
+ExecStart=/usr/libexec/hydra-bridge-permissions
+[Install]
+WantedBy=multi-user.target
@@ -0,0 +1,12 @@
+[Unit]
+Description=DHCP and DNS for HydraOS guests
+Requires=hydra-network.service
+PartOf=hydra-network.service
+After=hydra-network.service NetworkManager.service
+[Service]
+Type=simple
+StateDirectory=hydra
+ExecStart=/usr/sbin/dnsmasq --keep-in-foreground --conf-file=/etc/hydra/dnsmasq.conf
+Restart=on-failure
+[Install]
+WantedBy=multi-user.target
@@ -0,0 +1,12 @@
+[Unit]
+Description=HydraOS guest bridge and Internet NAT
+Requires=NetworkManager.service
+PartOf=NetworkManager.service
+After=NetworkManager.service
+Before=hydra-dnsmasq.service
+[Service]
+Type=oneshot
+RemainAfterExit=yes
+ExecStart=/usr/bin/hydra-network
+[Install]
+WantedBy=multi-user.target
@@ -0,0 +1,3 @@
+[Service]
+ExecStart=
+ExecStart=-/sbin/agetty --autologin hydra-live --noclear %I $TERM
@@ -0,0 +1,7 @@
+#!/bin/sh
+set -eu
+helper=/usr/libexec/qemu-bridge-helper
+[ -f "$helper" ] && [ ! -L "$helper" ]
+chown root:kvm "$helper"
+chmod 0750 "$helper"
+setcap cap_net_admin+ep "$helper"
				`@@ -0,0 +1 @@`
				`HydraOS live medium: changes to the host root are not persistent.`