34 lines
1.8 KiB
Bash
Executable File
34 lines
1.8 KiB
Bash
Executable File
#!/bin/bash
|
|
set -euo pipefail
|
|
if [[ $# != 1 || "$1" != /hydra-output/rootfs ]]; then
|
|
echo "configure-rootfs: expected the isolated /hydra-output/rootfs export" >&2
|
|
exit 1
|
|
fi
|
|
root=$1
|
|
python3 /hydra-source/hydra/image.py configure "$root" --source /hydra-source
|
|
# This is a separate rootfs inside the assembly container, never the host root.
|
|
mount --bind /dev "$root/dev"
|
|
mount -t proc proc "$root/proc"
|
|
mount --bind /sys "$root/sys"
|
|
trap 'umount "$root/sys" "$root/proc" "$root/dev"' EXIT
|
|
for group in wheel kvm video render audio; do
|
|
chroot "$root" getent group "$group" >/dev/null || chroot "$root" groupadd -r "$group"
|
|
done
|
|
if ! chroot "$root" getent passwd hydra-live >/dev/null; then
|
|
chroot "$root" useradd --uid 1000 --create-home --home-dir /home/hydra-live --shell /bin/bash --groups wheel,kvm,video,render,audio hydra-live
|
|
fi
|
|
chroot "$root" usermod --lock hydra-live
|
|
chroot "$root" usermod --lock root
|
|
chroot "$root" locale-gen
|
|
ln -snf /usr/share/zoneinfo/Europe/Moscow "$root/etc/localtime"
|
|
# Enable the ordinary per-user sound services without starting a user manager.
|
|
python3 /hydra-source/hydra/image.py audio "$root"
|
|
# Set rootfs permissions now; capabilities are regenerated in the boot namespace.
|
|
chroot "$root" chown root:kvm /usr/libexec/qemu-bridge-helper
|
|
chroot "$root" chmod 0750 /usr/libexec/qemu-bridge-helper
|
|
chroot "$root" visudo --check
|
|
systemctl --root="$root" enable NetworkManager.service greetd.service hydra-network.service hydra-dnsmasq.service hydra-bridge-permissions.service getty@tty2.service serial-getty@ttyS0.service
|
|
systemctl --root="$root" set-default graphical.target
|
|
kernel=$(python3 /hydra-source/hydra/image.py kernel "$root")
|
|
chroot "$root" dracut --force --no-hostonly --no-hostonly-cmdline --conf /etc/hydra/live-mode/dracut.conf --confdir /etc/hydra/live-mode/dracut.conf.d --add dmsquash-live /boot/initramfs-live.img "$kernel"
|