You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
155 lines
6.8 KiB
155 lines
6.8 KiB
#!/bin/sh
|
|
# vim: set ts=4 sw=4 sts=4 et :
|
|
|
|
# ------------------------------------------------------------------------------
|
|
# Source external scripts
|
|
# ------------------------------------------------------------------------------
|
|
. ${SCRIPTSDIR}/vars.sh
|
|
. ./umount_kill.sh >/dev/null
|
|
|
|
# ------------------------------------------------------------------------------
|
|
# Configurations
|
|
# ------------------------------------------------------------------------------
|
|
if [ "${VERBOSE}" -ge 2 -o "${DEBUG}" == "1" ]; then
|
|
set -x
|
|
else
|
|
set -e
|
|
fi
|
|
|
|
# ------------------------------------------------------------------------------
|
|
# If .prepared_groups has not been completed, don't continue
|
|
# ------------------------------------------------------------------------------
|
|
if ! [ -f "${INSTALLDIR}/tmp/.prepared_groups" ]; then
|
|
error "prepared_groups installataion has not completed!... Exiting"
|
|
exit 1
|
|
fi
|
|
|
|
# ------------------------------------------------------------------------------
|
|
# Mount system mount points
|
|
# ------------------------------------------------------------------------------
|
|
for fs in /dev /dev/pts /proc /sys; do mount -B $fs "${INSTALLDIR}/$fs"; done
|
|
mount -t tmpfs none "${INSTALLDIR}/run"
|
|
|
|
# ------------------------------------------------------------------------------
|
|
# Execute any template flavor or sub flavor 'pre' scripts
|
|
# ------------------------------------------------------------------------------
|
|
buildStep "$0" "pre"
|
|
|
|
# ------------------------------------------------------------------------------
|
|
# Install Qubes Packages
|
|
# ------------------------------------------------------------------------------
|
|
if ! [ -f "${INSTALLDIR}/tmp/.prepared_qubes" ]; then
|
|
debug "Installing qbues modules"
|
|
|
|
# --------------------------------------------------------------------------
|
|
# Set up a temporary policy-rc.d to prevent apt from starting services
|
|
# on package installation
|
|
# --------------------------------------------------------------------------
|
|
cat > "${INSTALLCHROOT}/usr/sbin/policy-rc.d" <<EOF
|
|
#!/bin/sh
|
|
return 101 # Action forbidden by policy
|
|
EOF
|
|
chmod 755 ${INSTALLCHROOT}/usr/sbin/policy-rc.d
|
|
|
|
# --------------------------------------------------------------------------
|
|
# Generate locales
|
|
# --------------------------------------------------------------------------
|
|
debug "Generate locales"
|
|
echo "en_US.UTF-8 UTF-8" >> "${INSTALLDIR}/etc/locale.gen"
|
|
chroot "${INSTALLDIR}" locale-gen
|
|
chroot "${INSTALLDIR}" update-locale LANG=en_US.UTF-8
|
|
|
|
# --------------------------------------------------------------------------
|
|
# Link mtab
|
|
# --------------------------------------------------------------------------
|
|
rm -f "${INSTALLDIR}/etc/mtab"
|
|
ln -s "../proc/self/mounts" "${INSTALLDIR}/etc/mtab"
|
|
|
|
# --------------------------------------------------------------------------
|
|
# Start of Qubes package installation
|
|
# --------------------------------------------------------------------------
|
|
debug "Installing qubes packages"
|
|
export CUSTOMREPO="${PWD}/yum_repo_qubes/${DIST}"
|
|
|
|
# --------------------------------------------------------------------------
|
|
# Install keyrings
|
|
# --------------------------------------------------------------------------
|
|
if ! [ -e "${CACHEDIR}/repo-secring.gpg" ]; then
|
|
mkdir -p "${CACHEDIR}"
|
|
gpg --gen-key --batch <<EOF
|
|
Key-Type: RSA
|
|
Key-Length: 1024
|
|
Key-Usage: sign
|
|
Name-Real: Qubes builder
|
|
Expire-Date: 0
|
|
%pubring ${CACHEDIR}/repo-pubring.gpg
|
|
%secring ${CACHEDIR}/repo-secring.gpg
|
|
%commit
|
|
EOF
|
|
fi
|
|
gpg -abs --no-default-keyring \
|
|
--secret-keyring "${CACHEDIR}/repo-secring.gpg" \
|
|
--keyring "${CACHEDIR}/repo-pubring.gpg" \
|
|
-o "${CUSTOMREPO}/dists/${DIST}/Release.gpg" \
|
|
"${CUSTOMREPO}/dists/${DIST}/Release"
|
|
cp "${CACHEDIR}/repo-pubring.gpg" "${INSTALLDIR}/etc/apt/trusted.gpg.d/qubes-builder.gpg"
|
|
|
|
# --------------------------------------------------------------------------
|
|
# Mount local qubes_repo
|
|
# --------------------------------------------------------------------------
|
|
mkdir -p "${INSTALLDIR}/tmp/qubes_repo"
|
|
mount --bind "${CUSTOMREPO}" "${INSTALLDIR}/tmp/qubes_repo"
|
|
|
|
# --------------------------------------------------------------------------
|
|
# Include qubes repo for apt
|
|
# --------------------------------------------------------------------------
|
|
cat > "${INSTALLDIR}/etc/apt/sources.list.d/qubes-builder.list" <<EOF
|
|
deb file:/tmp/qubes_repo ${DEBIANVERSION} main
|
|
EOF
|
|
|
|
# --------------------------------------------------------------------------
|
|
# Update system; exit is not successful
|
|
# --------------------------------------------------------------------------
|
|
chroot "${INSTALLDIR}" apt-get update || { umount_kill "${INSTALLDIR}"; exit 1; }
|
|
|
|
# --------------------------------------------------------------------------
|
|
# Install Qubes packages
|
|
# --------------------------------------------------------------------------
|
|
DEBIAN_FRONTEND=noninteractive DEBCONF_NONINTERACTIVE_SEEN=true \
|
|
chroot "${INSTALLDIR}" apt-get ${APT_GET_OPTIONS} install $(cat ${SCRIPTSDIR}/packages_qubes.list) || \
|
|
{ umount_kill "${INSTALLDIR}"; exit 1; }
|
|
|
|
# --------------------------------------------------------------------------
|
|
# Remove Qubes Builder repo from sources.list.d
|
|
# --------------------------------------------------------------------------
|
|
umount_kill "${INSTALLDIR}/tmp/qubes_repo"
|
|
rm -f "${INSTALLDIR}/etc/apt/sources.list.d/qubes-builder.list"
|
|
chroot "${INSTALLDIR}" apt-get update || exit 1
|
|
|
|
# --------------------------------------------------------------------------
|
|
# Remove temporary policy layer so services can start normally in the
|
|
# deployed template.
|
|
# --------------------------------------------------------------------------
|
|
rm -f "${INSTALLDIR}/usr/sbin/policy-rc.d"
|
|
|
|
# --------------------------------------------------------------------------
|
|
# Copy extra files to installation directory. Contains:
|
|
# - font fixes for display issues
|
|
# --------------------------------------------------------------------------
|
|
copyTree "qubes-files" "${SCRIPTSDIR}" "${INSTALLDIR}"
|
|
|
|
touch "${INSTALLDIR}/tmp/.prepared_qubes"
|
|
fi
|
|
|
|
# ------------------------------------------------------------------------------
|
|
# Execute any template flavor or sub flavor 'post' scripts
|
|
# ------------------------------------------------------------------------------
|
|
buildStep "$0" "post"
|
|
|
|
# ------------------------------------------------------------------------------
|
|
# Kill all processes and umount all mounts within ${INSTALLDIR}, but not
|
|
# ${INSTALLDIR} itself (extra '/' prevents ${INSTALLDIR} from being umounted itself)
|
|
# ------------------------------------------------------------------------------
|
|
umount_kill "${INSTALLDIR}/" || :
|
|
|