Clayton Craft
3f4c42c462
This ensures that sysusers conf changes are always applied when booting an update. This is functionally the same as what we do in mutable pmos, where apk runs systemd.trigger that runs sd-sysusers if new sysusers conf is added/modified on an existing install. Fixes #4829 Signed-off-by: Clayton Craft <craftyguy@postmarketos.org> Part-of: <https://gitlab.postmarketos.org/postmarketOS/pmaports/-/merge_requests/9374>
273 lines
14 KiB
Bash
273 lines
14 KiB
Bash
maintainer="Clayton Craft <clayton@craftyguy.net>"
|
|
pkgname=postmarketos-duranium
|
|
pkgver=15
|
|
pkgrel=0
|
|
pkgdesc="Configuration for building and booting immutable postmarketOS images"
|
|
url="https://wiki.postmarketos.org/wiki/Duranium_(Immutable_postmarketOS)"
|
|
# check: no tests
|
|
# fhs: allow installing into /usr/local
|
|
options="!check !fhs"
|
|
depends="
|
|
coreutils
|
|
coldbrew
|
|
e2fsprogs
|
|
erofs-utils
|
|
f0rmz
|
|
postmarketos-base
|
|
!postmarketos-base-apk
|
|
postmarketos-base-systemd
|
|
shadow
|
|
shadow-subids
|
|
systemd-efistub
|
|
tar
|
|
"
|
|
# x86: f0rmz
|
|
# armhf: linux-stable, systemd
|
|
# ppc64le s390x: EFI
|
|
arch="noarch !x86 !armhf !ppc64le !s390x"
|
|
license="GPL-3.0-or-later"
|
|
subpackages="
|
|
$pkgname-initramfs
|
|
$pkgname-sysext-dev-tools:sysext_dev_tools
|
|
$pkgname-sysext-waydroid:sysext_waydroid
|
|
"
|
|
|
|
_source644="
|
|
etc/crypttab
|
|
usr/lib/modprobe.d/no-firmware.conf
|
|
usr/lib/repart.d/00-esp.conf
|
|
usr/lib/repart.d/10-usr-verity.conf
|
|
usr/lib/repart.d/11-usr.conf
|
|
usr/lib/repart.d/20-usr-verity.conf
|
|
usr/lib/repart.d/21-usr.conf
|
|
usr/lib/repart.d/30-root.conf
|
|
usr/lib/systemd/confext.conf
|
|
usr/lib/systemd/initrd-preset/80-duranium.preset
|
|
usr/lib/systemd/system-preset/80-duranium.preset
|
|
usr/lib/systemd/system/duranium-firstboot.service
|
|
usr/lib/systemd/system/getty@.service.d/wait-firstboot.conf
|
|
usr/lib/systemd/system/initramfs-buffyboard.service
|
|
usr/lib/systemd/system/initramfs-telnetd.service
|
|
usr/lib/systemd/system/initramfs-unudhcpd.service
|
|
usr/lib/systemd/system/initramfs-usb-gadget.service
|
|
usr/lib/systemd/system/systemd-confext.service.d/mutable.conf
|
|
usr/lib/systemd/system/systemd-cryptsetup@.service.d/factory-reset-ordering.conf
|
|
usr/lib/systemd/system/systemd-sysusers.service.d/always-run.conf
|
|
usr/lib/systemd/system/unl0kr-agent.path.d/plymouth-handoff.conf
|
|
usr/lib/systemd/system/unl0kr-agent.service.d/conflicts-console.conf
|
|
usr/lib/systemd/system/unl0kr-agent.service.d/plymouth-handoff.conf
|
|
usr/lib/sysupdate.d/10-usr-verity.transfer
|
|
usr/lib/sysupdate.d/11-usr.transfer
|
|
usr/lib/sysupdate.d/20-uki.transfer
|
|
usr/lib/sysupdate.d/50-dev-tools-sysext.transfer
|
|
usr/lib/sysupdate.d/50-waydroid-sysext.transfer
|
|
usr/lib/sysupdate.d/51-dev-tools-confext.transfer
|
|
usr/lib/sysupdate.d/51-waydroid-confext.transfer
|
|
usr/lib/sysupdate.d/dev-tools.feature
|
|
usr/lib/sysupdate.d/waydroid.feature
|
|
usr/lib/sysusers.d/10-pmos-user.conf
|
|
usr/lib/tmpfiles.d/duranium.conf
|
|
usr/lib/udev/rules.d/90-udisks-ignore-verity-hack.rules
|
|
usr/lib/udev/rules.d/98-mark-subpartitions-workaround.rules
|
|
usr/share/duranium/f0rmz-firstboot.conf
|
|
"
|
|
|
|
_source755="
|
|
usr/bin/duranium-set-channel
|
|
etc/profile.d/99-local-bin.sh
|
|
usr/libexec/duranium/first-boot
|
|
usr/libexec/duranium/usb-gadget-setup
|
|
usr/local/sbin/apk
|
|
"
|
|
|
|
# Avoid filename based checksum conflicts by including the whole path:
|
|
# https://gitlab.alpinelinux.org/alpine/abuild/-/issues/10013
|
|
flatpath() {
|
|
local i
|
|
for i in $@; do
|
|
echo "rootfs-$i" | sed s./.-.g
|
|
done
|
|
}
|
|
source="
|
|
$(flatpath $_source440 $_source600 $_source644 $_source755)
|
|
dev-gpt-auto-root-no-timeout.conf
|
|
"
|
|
|
|
package() {
|
|
for i in $_source644; do
|
|
install -Dm644 "$srcdir/$(flatpath "$i")" "$pkgdir/$i"
|
|
done
|
|
for i in $_source755; do
|
|
install -Dm755 "$srcdir/$(flatpath "$i")" "$pkgdir/$i"
|
|
done
|
|
}
|
|
|
|
initramfs() {
|
|
# musl-utils: for ldconfig.service
|
|
# scanelf: for ldconfig.service
|
|
# util-linux-login: for sulogin in emergency/debug shell
|
|
depends="
|
|
buffyboard
|
|
busybox-extras
|
|
device-mapper
|
|
device-mapper-udev
|
|
e2fsprogs
|
|
kmod
|
|
musl-utils
|
|
postmarketos-bootsplash
|
|
scanelf
|
|
unl0kr-agent
|
|
unudhcpd
|
|
util-linux-login
|
|
"
|
|
|
|
amove etc/crypttab
|
|
amove usr/lib/modprobe.d/no-firmware.conf
|
|
amove usr/lib/systemd/initrd-preset/80-duranium.preset
|
|
amove usr/lib/systemd/system/initramfs-buffyboard.service
|
|
amove usr/lib/systemd/system/initramfs-telnetd.service
|
|
amove usr/lib/systemd/system/initramfs-unudhcpd.service
|
|
amove usr/lib/systemd/system/initramfs-usb-gadget.service
|
|
amove usr/lib/systemd/system/systemd-cryptsetup@.service.d/factory-reset-ordering.conf
|
|
amove usr/lib/systemd/system/unl0kr-agent.path.d/plymouth-handoff.conf
|
|
amove usr/lib/systemd/system/unl0kr-agent.service.d/conflicts-console.conf
|
|
amove usr/lib/systemd/system/unl0kr-agent.service.d/plymouth-handoff.conf
|
|
amove usr/lib/udev/rules.d/98-mark-subpartitions-workaround.rules
|
|
|
|
amove usr/libexec/duranium/usb-gadget-setup
|
|
|
|
# mask plymouth password agent, since we use unl0kr for prompting
|
|
mkdir -p "$subpkgdir/etc/systemd/system"
|
|
ln -s /dev/null "$subpkgdir/etc/systemd/system/systemd-ask-password-plymouth.path"
|
|
|
|
# normally this would be just another flatpath file but trying to get abuild
|
|
# to work with a file that has \ in the name is torture.
|
|
install -Dm644 "$srcdir"/dev-gpt-auto-root-no-timeout.conf \
|
|
"$subpkgdir"/usr/lib/systemd/system/dev-gpt\\x2dauto\\x2droot.device.d/no-timeout.conf
|
|
}
|
|
|
|
sysext_dev_tools() {
|
|
description="meta package for Duranium Developer Tools system extension"
|
|
depends=""
|
|
|
|
# android development
|
|
depends="
|
|
$depends
|
|
android-tools
|
|
android-udev-rules
|
|
"
|
|
|
|
# containers for toolchains, etc
|
|
depends="
|
|
$depends
|
|
devpod
|
|
distrobox
|
|
podman
|
|
"
|
|
|
|
# mkosi for building duranium, other distro images
|
|
depends="
|
|
$depends
|
|
apk-tools
|
|
mkosi
|
|
"
|
|
|
|
# support for running VMs / platform emulation
|
|
depends="
|
|
$depends
|
|
libvirt-client
|
|
libvirt-common-drivers
|
|
libvirt-daemon
|
|
libvirt-qemu
|
|
qemu
|
|
qemu-aarch64
|
|
qemu-arm
|
|
qemu-i386
|
|
qemu-img
|
|
qemu-loongarch64
|
|
qemu-modules
|
|
qemu-ppc64le
|
|
qemu-riscv64
|
|
qemu-system-aarch64
|
|
qemu-system-arm
|
|
qemu-system-i386
|
|
qemu-system-loongarch64
|
|
qemu-system-ppc64
|
|
qemu-system-riscv64
|
|
qemu-system-x86_64
|
|
qemu-x86_64
|
|
"
|
|
|
|
case "$CARCH" in
|
|
x86_64|riscv64)
|
|
depends="$depends ovmf" ;;
|
|
aarch64)
|
|
depends="$depends aavmf" ;;
|
|
loongarch64)
|
|
depends="$depends edk2-loongarch64" ;;
|
|
esac
|
|
|
|
# /usr/local/sbin takes precedence over /usr/sbin in PATH, and we want this to
|
|
# get ahead of the real apk binary
|
|
amove usr/local/sbin/apk
|
|
}
|
|
|
|
sysext_waydroid() {
|
|
description="meta package for Duranium waydroid system extension"
|
|
depends="
|
|
waydroid
|
|
waydroid-nftrules
|
|
"
|
|
|
|
mkdir -p "$subpkgdir"/etc/nftables.d
|
|
# "manually" enable the rule for now, see:
|
|
# https://gitlab.postmarketos.org/postmarketOS/pmaports/-/merge_requests/7791
|
|
ln -s /usr/share/nftables.avail/51_waydroid.nft "$subpkgdir"/etc/nftables.d/
|
|
}
|
|
|
|
sha512sums="
|
|
ac441c8a690b89a92c2d7db37145e54d918bb9838a45cf76d20de82d46848a80477a8035d9cbaa39fb6ea4747c2762789f71736aa11a78e3adcca0c339dc5677 rootfs-etc-crypttab
|
|
ce3f39aa5ed95065306a42bbab6b405bcb90446e206c25509bda64ed2866d80d5168ac225baeb2a50a66e17cbb9b32f26b4a5ec1e042b5f0bf40f6907f4e4d82 rootfs-usr-lib-modprobe.d-no-firmware.conf
|
|
b0f320f2ea81c29fa9030abac998e725e098c74bb2ffb76ee2711da4c88615ad46a0e5359b98198648879551781580a0128b57a2ef1ca6a3e03448b01f533065 rootfs-usr-lib-repart.d-00-esp.conf
|
|
b2076a208e389605b8c5d3ad7ae2413c70b303a90f94ca7e330cc02b7a2ae6602b78d7b8d95ed22d1326ebcac5549f41c41dd752a259e625e0641b5499800628 rootfs-usr-lib-repart.d-10-usr-verity.conf
|
|
191113460d1329ebd1b247ce2d84666812180b1bebc3599e19c8745a3eb3ebcee338981002de1af23832a76888caeb92fa829d9ab9d9547bc719e464440fc4f7 rootfs-usr-lib-repart.d-11-usr.conf
|
|
730aa98894ec4586d5a97b2faed5ec30ae6679b9ebf4e6dd7e1d4f039279691040232ba30d0f88b4a2696131618b17753d0d8262b88d4ff6f1f120cbd0d22acd rootfs-usr-lib-repart.d-20-usr-verity.conf
|
|
d88e87fb22b8efdc2617e8a3d52102032ce2b0dbde0e7d40a8d7679f507acc9cea271faa7004f96611631dfa0351cd5175dc1574f907176c9e4ebc5561b9a6d6 rootfs-usr-lib-repart.d-21-usr.conf
|
|
84036b008042766e89bc02ecb7d77b52f80973a385a21faa1fbb2348ff0c216c302e29bd52c6cb40e5e547ad58aa955e06a9e94bd2ca0c512903a200f44c9a63 rootfs-usr-lib-repart.d-30-root.conf
|
|
16984590f17c25be2f45444d8035c8c3a9035e3f52219a3e57e5bab93325acf0fdd50e03cd8a99da44c2adf4fd6234da73de63393582bff456bb128501da6211 rootfs-usr-lib-systemd-confext.conf
|
|
d7c12e2d5d5dbf437f3b76ce50bd7ce129c866007f978bcf1fb43e0ac2aa86a7d6f5d0138da0483f054b9dfc1c37d6ecd1b9c43deeaa989c6e303164c2c1b1bf rootfs-usr-lib-systemd-initrd-preset-80-duranium.preset
|
|
cd106f732dcbe2251136ad33fb24d08dc96aad2f9a2c9da27ed60e113c61cfac0ca51907388f0112b5b0d7285164f18a0068bfb7d0941a0cac040e7becc48c63 rootfs-usr-lib-systemd-system-preset-80-duranium.preset
|
|
09dd75ce4d6790af5156fadea0b948b13a5f36ab1162c45b4a58a5c6b4061d6871610cc3384252422b28bfd7836b95cd7ca857277113abacc0083ecdd6cfff1f rootfs-usr-lib-systemd-system-duranium-firstboot.service
|
|
16fc787401e1fbbd1421257781270d2be6cb879ab9cc99412044df25af72c5525567f7b7f1066f022c0b7e03dd33c62f2d871fed9e9121ed309564c207795c38 rootfs-usr-lib-systemd-system-getty@.service.d-wait-firstboot.conf
|
|
786a057e3f1eab37773b5255a5abde060b6bc6f42fd2cdaa82ce678263db6177ca30b49decb795293a4a0ccaf02346684acd0469cc8222898c43768376f2218d rootfs-usr-lib-systemd-system-initramfs-buffyboard.service
|
|
4f303c5d7cb7054e8bb6e109aa3f4337098b19a6b5a8c6b0b1e1033889d8b1f85a87a0086b67f6f9c62fc93aeca0c59e50def12fff33b79fb7819657b5b820ec rootfs-usr-lib-systemd-system-initramfs-telnetd.service
|
|
7620e15cebb92c06a662bea095122793b8928b37c8b73fb060f2c882ac9c40419cc3e9eacafab2d04f8089a6fd32c1aa46f9247c54ee60adca87a796262bc37a rootfs-usr-lib-systemd-system-initramfs-unudhcpd.service
|
|
9c0eb915c09fc3d8de3a1a486f3e2202be05b11ba924d13349a70d93355ca0c72fe2417504e4b7e0c74aa1bb7f5ae77e3497f09dd67e48c0b8f2432f382f2f38 rootfs-usr-lib-systemd-system-initramfs-usb-gadget.service
|
|
16c5f02640b527470ee4060dab0a3e0491ff751d631c30f2ce83858c1cf81f0980b687e9473f74fc96185356cb63bcf14008d3891f0c98ac105aee9711cdf9f5 rootfs-usr-lib-systemd-system-systemd-confext.service.d-mutable.conf
|
|
101b1af9f26fe57f8be1f0353d8146724aaad4c80e790b85559e0d7ce10a1b9169429b112fc17dafde4902e26617ced00b3540a3999c50b606f3ff7564759464 rootfs-usr-lib-systemd-system-systemd-cryptsetup@.service.d-factory-reset-ordering.conf
|
|
1fd63cc21b444de6300761dc94bada9282635c6fbb61bafb12a4ac2b182125386c2cde6f781326bb632451f203118bb22b13ba442d5197a9493ac55c95c34de6 rootfs-usr-lib-systemd-system-systemd-sysusers.service.d-always-run.conf
|
|
612e50282c0ceb7676d8e62853e99bd693103fc59098d8ac91173538ff1c3fa8b69d3eebeaa6390df7c8f9cc62fddae1ca2d35d07d97e60b40b660bc62bf049b rootfs-usr-lib-systemd-system-unl0kr-agent.path.d-plymouth-handoff.conf
|
|
b1aa826b83fbb5d606b5dc37a4db67a7233519e0ac953325395dd7f3b7e303d206f6297e51a749d07ee173ccbc4ccf055e92888e38345783d4f4c7687a6a9870 rootfs-usr-lib-systemd-system-unl0kr-agent.service.d-conflicts-console.conf
|
|
017fe2d6298842b24498000c98e851b441da4edf91cadf2bfc0542a46364f105eda9a5ca772c87e7bd4749e101833fdb43604081b7ab26ebea426559f9de418e rootfs-usr-lib-systemd-system-unl0kr-agent.service.d-plymouth-handoff.conf
|
|
32e12f098b1be89980c1b93020d7959dc45bc4371c5ac8f55406f80589b0c6ca1c8744e32a6594c985b56e551e98d8dbf6efb2c701c3ac5c681367ae81ee7560 rootfs-usr-lib-sysupdate.d-10-usr-verity.transfer
|
|
177d975fb333f5703627cf389f32c6168903098734bf66feecf3b9b03a1cbb13239f3807d7a6cea5b26f0ee36c50a422b933732e3b9a6a4cac7def6bed57be59 rootfs-usr-lib-sysupdate.d-11-usr.transfer
|
|
20ade84789d3c2846f21de10a6979e8fde0ac08b5ac2b1dc3c9555b94f37778821c71e7c59a4c9e7394f65deb805ee1eccdbf11792b2d4386c9cd6d0b52ae01c rootfs-usr-lib-sysupdate.d-20-uki.transfer
|
|
4699b75e545ccf3b539f9fb418841106f69879e5bcc9faef6918296d0c89b2fec5e3f85c7742acf4b6b5b6eb91006d38375041b78263913fd41bebab4746dee3 rootfs-usr-lib-sysupdate.d-50-dev-tools-sysext.transfer
|
|
6d3a24bfe7df2026b2bdab55eca2acd3342875fa574f3b1fc546d47b0cd5ad882641371549c70146d39d2b8fd2eae0af9326c50ec53dab7566fd7322cd6d3274 rootfs-usr-lib-sysupdate.d-50-waydroid-sysext.transfer
|
|
fe0a3a0be13d4b4a8d632859cc54f95d69021f1f100debe5565beb55d909fff8bbf2f0bd561e27c67540356fb7f16bc41eab68830ab6a72fcd6d39e6c01afebb rootfs-usr-lib-sysupdate.d-51-dev-tools-confext.transfer
|
|
17119d215669bbaf5c12b30d03bb1beed9b154c087dcb4fc02fc2e74c981d0f6a5cf8cac586b9e133ee5097e66faaa0c2c5708054c7b8b2392c10c230ae2236b rootfs-usr-lib-sysupdate.d-51-waydroid-confext.transfer
|
|
89a7bddc6ebe2fd4a41355bbdc7418382e96f10d4e9e9748405f534a549bc64280f543fae16c4aa60f30830f3679d94a87357c941dff83f5134eb5ac4b654706 rootfs-usr-lib-sysupdate.d-dev-tools.feature
|
|
e7626be41123e8be466a0377fb84c857cd9cd0725094498c6148208c1862d17499b7a4e3e7279689c24ad4abd1e868fbf1216f75867425b3f3a607e622ca2beb rootfs-usr-lib-sysupdate.d-waydroid.feature
|
|
fa1c3dd727fd20d16d18695d58dd10ec335d64ece00152346c84ae750ed5ade8faf5ba11747135d79972dd1a3f4f1ab496ae9425ebcf7232a4203ca9396fa7e0 rootfs-usr-lib-sysusers.d-10-pmos-user.conf
|
|
fc4bf2b78e25b3f04add2ef7fbcfe70f24f8a865526ea817252a6bc4585755d40873909c4a1eb37acc86f93424f7de0bc2add29265eb2e5df69764ae0018fd76 rootfs-usr-lib-tmpfiles.d-duranium.conf
|
|
a51fa1cf454169183ff086c70a777eb3d23f2f70c8e75ec27f96d06fd964c354621736901b8a53e42dcf3e5e891ced8c0ea06b793d910fbdff8c5c3bea8dc7b9 rootfs-usr-lib-udev-rules.d-90-udisks-ignore-verity-hack.rules
|
|
f34f2835f61c24f9477bb97410c40825843c9b0dac7664b2cd3d3d8316e3838b48517c4991718c10cc32905680eb98c5b17169b62264c773c60f4a6442953230 rootfs-usr-lib-udev-rules.d-98-mark-subpartitions-workaround.rules
|
|
7f2b98edc7b485129ea862c5c852422e8996ffe0a2bdae3160b6c94667b4e345a1792164e3143d58cb1a51c3c6981381ad7610d709aba210bb61a0c883455476 rootfs-usr-share-duranium-f0rmz-firstboot.conf
|
|
619368ffc9dd1fd9c0f662c0bb8f407a6514c8b12611511d715f705874e3be24201b5046e631c476bd70d661ca45576df8fb10aa86cf11a7de9a79289b7a7806 rootfs-usr-bin-duranium-set-channel
|
|
765797421f9123cdcf85e1496d01884cce1c8c304d15369b7eee32a8fc5abcd860dc5856c0d493f1cd3c6ad2a0ccdc4d6ba7d2ae356f0fc824dc16cdb84ebf37 rootfs-etc-profile.d-99-local-bin.sh
|
|
2b9ed56b379d2392fd00919def8ab0cb1d9c50452bb9a6ce802eb458e41be542dd2f878cdd3c5c86f34fa40c1ee1d9d78a4bb9b9cc9c6e165c1d372fa7e50e35 rootfs-usr-libexec-duranium-first-boot
|
|
9912109374399bf6df4d45c05baff5b3c424e05380b81b2be5b55e28e95f07bda71b5a4f7345a40498c1b11df465a9f4410e740d119ab98543ce28b75c53eb0f rootfs-usr-libexec-duranium-usb-gadget-setup
|
|
a18931c21df72984f4b09b49b192ecb2ee203caff3303a306633cad03ee2dc4750763d8177ea107e445f64b337233138b963f7755da0dbd8ff3a543f0b64793f rootfs-usr-local-sbin-apk
|
|
ca5b767d4bbc5857c2282124fee3082fafaca8e735ab2077112060e67a37afdb521c28c81fc3b548f114e857aaa702169ee77fab8b7b37c44b5233c83a94afd4 dev-gpt-auto-root-no-timeout.conf
|
|
"
|