seb annotate seb @ rev 11

More security, -e to emulate iso
author Christophe Lincoln <pankso@slitaz.org>
date Mon Mar 06 19:06:12 2017 +0100 (2017-03-06)
parents a4fa34b33e9e
children ac5daac524c9
rev   line source
pankso@7 1 #!/bin/sh
pankso@7 2 #
pankso@7 3 # SEB - SliTaz Embedded Builder - Back to the roots with SliTaz in
pankso@7 4 # only a few MB. Please read the README file for more information.
pankso@7 5 #
pankso@7 6 # Copyright (C) 2017 SliTaz GNU/Linux - BSD License
pankso@7 7 # Author: Christophe Lincoln <pankso@slitaz.org>
pankso@7 8 #
pankso@7 9 . /lib/libtaz.sh
pankso@7 10 unset status get_cols separator colorize boldify
pankso@7 11
pankso@7 12 # --iso --work --linux can be set in config file or from cmdline
pankso@7 13 [ -f "build.conf" ] && . build.conf
pankso@7 14
pankso@7 15 [ "$work" ] || work="$(pwd)"
pankso@7 16 [ "$iso" ] || iso="seb-os-$(date '+%Y%m%d').iso"
pankso@7 17 [ "$linux" ] || linux="/boot/vmlinuz-$(uname -r)"
pankso@7 18
pankso@7 19 rootfs="$work/rootfs"
pankso@7 20 rootiso="$work/rootiso"
pankso@7 21 sebfs="$work/sebfs"
pankso@7 22 sebpkgs="$work/sebpkgs"
pankso@7 23 cache="$work/cache"
pankso@7 24 vdisk="$work/sebhome.img"
pankso@7 25 qemu_opts="-m 512"
pankso@7 26
pankso@7 27 tools="/usr/share/seb/tools"
pankso@7 28 initfs="/usr/share/seb/initfs"
pankso@7 29 packages="/usr/share/seb/packages"
pankso@7 30
pankso@7 31 # Working from source tree
pankso@7 32 [ -d "tools" ] && tools="$(pwd)/tools"
pankso@7 33 [ -d "initfs" ] && initfs="$(pwd)/initfs"
pankso@7 34 [ -d "packages" ] && packages="$(pwd)/packages"
pankso@7 35
pankso@7 36 # Source libseb.sh (overwrite libtaz.sh function)
pankso@7 37 if [ -f "$PWD/libseb.sh" ]; then
pankso@7 38 libseb="$PWD/libseb.sh"
pankso@7 39 . ${libseb}
pankso@7 40 else
pankso@7 41 if ! . /lib/libseb.sh; then
pankso@7 42 echo "Can't source any: libseb.sh"; exit 1
pankso@7 43 fi
pankso@7 44 libseb="/lib/libseb.sh"
pankso@7 45 fi
pankso@7 46 debug "work=$work"
pankso@7 47
pankso@7 48 #
pankso@7 49 # Functions
pankso@7 50 #
pankso@7 51
pankso@7 52 help() {
pankso@7 53 cat << EOT
pankso@7 54
pankso@7 55 $(colorize 35 "SliTaz Embedded Builder")
pankso@7 56
pankso@7 57 $(boldify "Usage:") $(basename $0) [command] [--opts]
pankso@7 58
pankso@7 59 $(boldify "Commands:")
pankso@7 60 -h help Display this short built-in help
pankso@7 61 -i init Creat base files to customize
pankso@7 62 -b build Generate a distribution (initramfs & iso)
pankso@7 63 -p packages Handle packages: --list --add
pankso@7 64 -g geniso Re-generate the ISO image
pankso@7 65 -c clean Remove all SEB generated files
pankso@7 66 -l lsfs List all files in rootfs (-type f)
pankso@7 67 -v vdisk Create, mount or unmount a virtual disk
pankso@7 68 -e emu Emulate ISO image with Qemu
pankso@7 69 env Print current seb environment
pankso@7 70
pankso@7 71 $(boldify "Options:")
pankso@7 72 --work= Path to build directory
pankso@7 73 --iso= Specify SliTaz Embedded ISO image name
pankso@7 74 --linux= Path to a custom Linux kernel
pankso@7 75 --all Clean all files including sebfs
pankso@7 76 --emu Emulate ISO image after build
pankso@7 77 --check Check a virtual disk image
pankso@7 78
pankso@7 79 EOT
pankso@7 80 }
pankso@7 81
pankso@7 82 # Initial files who can be modified via sebfs/
pankso@7 83 init() {
pankso@7 84 mkdir -p ${sebfs} ${sebpkgs}
pankso@7 85 cp -rf ${initfs}/* ${sebfs}
pankso@7 86 }
pankso@7 87
pankso@7 88 geniso() {
pankso@7 89 echo -n "Generating ISO image: ${iso}"
pankso@7 90 cd ${work}
pankso@7 91 genisoimage -R -o ${iso} \
pankso@7 92 -b boot/isolinux/isolinux.bin \
pankso@7 93 -c boot/isolinux/boot.cat -no-emul-boot -boot-load-size 4 \
pankso@7 94 -V "SliTaz Embedded" -input-charset iso8859-1 \
pankso@7 95 -boot-info-table rootiso 2> /dev/null; check
pankso@7 96 echo -n "Checking ISO image size..."
pankso@7 97 info 035 $(du -mhs $iso | awk '{print $1}')
pankso@7 98 }
pankso@7 99
pankso@7 100 emulate() {
pankso@7 101 if [ -x "/usr/bin/qemu" ]; then
pankso@7 102 echo "qemu $qemu_opts -cdrom $1"
pankso@7 103 if [ -f "$vdisk" ]; then
pankso@7 104 hda="-hda $vdisk"
pankso@7 105 umount ${vdisk} 2>/dev/null
pankso@7 106 fi
pankso@7 107 qemu ${qemu_opts} ${hda} -cdrom ${1}
pankso@7 108 else
pankso@7 109 echo $(echo "Please install:") $(boldify qemu); exit 0
pankso@7 110 fi
pankso@7 111 }
pankso@7 112
pankso@7 113 # Install files in the rootfs with same path than on the build host
pankso@7 114 # Usage: install_files "/file/1" "/lib/lib.so*" "/file/N"
pankso@7 115 install_files() {
pankso@7 116 for file in ${@} ; do
pankso@7 117 path=$(dirname $file)
pankso@7 118 echo -n "Installing: $file"
pankso@7 119 cp -a ${file} ${rootfs}${path} && check
pankso@7 120 done
pankso@7 121 }
pankso@7 122
pankso@7 123 # Populate /dev + 'mdev -s' on boot
pankso@7 124 create_dev_files() {
pankso@7 125 echo -n "Populating: /dev"
pankso@7 126 mkdir -p ${rootfs}/dev/pts ${rootfs}/dev/shm
pankso@7 127 cd ${rootfs}/dev
pankso@7 128 mknod -m 0666 null c 1 3
pankso@7 129 mknod -m 0622 console c 5 1
pankso@7 130 mknod -m 0666 tty c 5 0
pankso@7 131 for i in 0 1 2; do
pankso@7 132 mknod -m 0666 tty$i c 4 $i
pankso@7 133 done; check
pankso@7 134 }
pankso@7 135
pankso@7 136 # Configuration files for /etc not generate by init to keep initfs/sebfs
pankso@7 137 # filesytems minimals
pankso@7 138 create_etc_files() {
pankso@7 139 echo -n "Creating config files in: /etc"
pankso@7 140 (echo "127.0.0.1 localhost seb" > ${rootfs}/etc/hosts
pankso@7 141 echo "localnet 127.0.0.1" > ${rootfs}/etc/networks
pankso@7 142 echo "order hosts,bind" > ${rootfs}/etc/host.conf
pankso@7 143 echo "multi on" >> ${rootfs}/etc/host.conf
pankso@7 144 # Users & passwd
pankso@7 145 echo "root:x:0:0:root:/root:/bin/sh" > ${rootfs}/etc/passwd
pankso@7 146 echo "root::13525:0:99999:7:::" > ${rootfs}/etc/shadow
pankso@7 147 cat > ${rootfs}/etc/group << EOT
pankso@7 148 root:x:0:
pankso@7 149 www:x:80:
pankso@7 150 EOT
pankso@7 151 cat > ${rootfs}/etc/gshadow << EOT
pankso@7 152 root:*::
pankso@7 153 www:!::
pankso@7 154 EOT
pankso@7 155 chmod 640 ${rootfs}/etc/*shadow)
pankso@7 156 cat > ${rootfs}/etc/nsswitch.conf << EOT
pankso@7 157 # /etc/nsswitch.conf: GNU Name Service Switch config.
pankso@7 158 #
pankso@7 159
pankso@7 160 passwd: files
pankso@7 161 group: files
pankso@7 162 shadow: files
pankso@7 163
pankso@7 164 hosts: files dns
pankso@7 165 networks: files
pankso@7 166 EOT
pankso@7 167 check
pankso@7 168 }
pankso@7 169
pankso@7 170 build() {
pankso@7 171 title "Starting SliTaz Embedded builder"
pankso@7 172
pankso@7 173 # Build environment
pankso@7 174 rm -rf ${rootfs} ${rootiso}
pankso@7 175 mkdir -p ${rootfs} ${rootiso}/boot/isolinux
pankso@7 176
pankso@7 177 # FSH Tree
pankso@7 178 echo -n "Populating: filesystem"
pankso@7 179 for d in bin dev etc lib root run home proc media sbin sys \
pankso@10 180 usr/bin usr/sbin usr/share var/log var/cache var/lib var/run
pankso@7 181 do
pankso@7 182 mkdir -p ${rootfs}/${d}
pankso@7 183 done
pankso@7 184 install -d -m 1777 ${rootfs}/tmp; check
pankso@7 185
pankso@7 186 # /etc + /dev
pankso@7 187 create_etc_files
pankso@7 188 create_dev_files
pankso@7 189
pankso@7 190 # Initial sebfs from initfs: files can be modified
pankso@7 191 [ ! -d "$sebfs" ] && init
pankso@7 192
pankso@7 193 # GNU libc before chroot /bin/busybox --install + name resolution
pankso@7 194 for lib in /lib/libm[-.]* /lib/libc[-.]* /lib/ld-* /lib/libpthread*; do
pankso@7 195 echo -n "Installing: $lib"
pankso@7 196 cp -a ${lib} ${rootfs}/lib && check
pankso@7 197 done
pankso@7 198 install_files "/lib/libnss_dns*" "/lib/libnss_file*" "/lib/libresolv*"
pankso@7 199
pankso@7 200 # Busybox applets
pankso@7 201 action "Installing: busybox"
pankso@7 202 cp -a /bin/busybox ${rootfs}/bin
pankso@7 203 chroot ${rootfs} /bin/busybox --install -s; check
pankso@7 204
pankso@7 205 # Busybox configs
pankso@7 206 echo -n "Installing: busybox configs"
pankso@7 207 cp -r /usr/share/udhcpc ${rootfs}/usr/share
pankso@7 208 cp -f /etc/udhcpd.conf ${rootfs}/etc
pankso@7 209 cp -f /etc/httpd.conf ${rootfs}/etc
pankso@7 210 check
pankso@7 211
pankso@7 212 # Busybox keymap
pankso@7 213 echo -n "Dumping : keymap"
pankso@7 214 mkdir -p ${rootfs}/usr/share/kmap
pankso@7 215 dumpkmap > ${rootfs}/usr/share/kmap/default; check
pankso@7 216
pankso@7 217 # Kilo editor (20K) with syntax highlight and search (Thanks Paul :-)
pankso@7 218 action "Installing: kilo text editor"
pankso@7 219 cp -a ${tools}/kilo ${rootfs}/usr/bin; check
pankso@7 220
pankso@7 221 # Ncursesw && dialog for sebos and additional tools
pankso@10 222 install_files "/lib/libncursesw.so*" "/lib/libtinfo.so*"
pankso@7 223 mkdir -p ${rootfs}/usr/share/terminfo/l
pankso@7 224 cp /usr/share/terminfo/l/linux ${rootfs}/usr/share/terminfo/l
pankso@10 225 install_files "/usr/bin/dialog" "/etc/dialogrc"
pankso@7 226
pankso@7 227 # /lib/libseb.sh & sebos config tool
pankso@7 228 echo -n "Installing: /lib/libseb.sh"
pankso@7 229 cp ${libseb} ${rootfs}/lib; check
pankso@7 230 action "Installing: sebos config tool"
pankso@7 231 cp ${tools}/sebos ${rootfs}/usr/bin; check
pankso@7 232
pankso@7 233 # httphelper.sh for amazing CGI/Shell functions
pankso@7 234 mkdir -p ${rootfs}/usr/lib/slitaz
pankso@7 235 cp /usr/lib/slitaz/httphelper.sh ${rootfs}/usr/lib/slitaz
pankso@7 236
pankso@7 237 # Packages TODO: handle deps
pankso@7 238 touch ${rootfs}/var/lib/packages
pankso@7 239 for pkg in $(ls $sebpkgs); do
pankso@7 240 echo -n $(colorize 035 "Installing package:"); info 036 "$pkg"
pankso@10 241 . ${sebpkgs}/${pkg}
pankso@7 242 seb_install; echo "$pkg|$desc" >> ${rootfs}/var/lib/packages
pankso@7 243 done
pankso@7 244
pankso@7 245 # Custom files NOW
pankso@7 246 if [ -d "$sebfs" ]; then
pankso@7 247 echo -n "Copying custom files from sebfs..."
pankso@7 248 cp -rf ${sebfs}/* ${rootfs}; check
pankso@7 249 fi
pankso@7 250
pankso@7 251 # COPYING
pankso@7 252 mkdir -p ${rootfs}/usr/share/licenses
pankso@7 253 cat > ${rootfs}/usr/share/licenses/COPYING << EOT
pankso@7 254 Copyright (c) 2007-$(date '+%Y') SliTaz GNU/Linux
pankso@7 255
pankso@7 256 SliTaz is free software; you can redistribute it and/or modify it under
pankso@7 257 the terms of the GNU General Public License as published by the Free
pankso@7 258 Software Foundation; either version 3 of the License, or (at your option)
pankso@7 259 any later version.
pankso@7 260
pankso@7 261 SliTaz is distributed in the hope that it will be useful, but WITHOUT ANY
pankso@7 262 WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS
pankso@7 263 FOR A PARTICULAR PURPOSE. See the GNU General Public License for details.
pankso@7 264
pankso@7 265 EOT
pankso@7 266
pankso@7 267 # Build date
pankso@7 268 cat >> ${rootfs}/etc/seb.conf << EOT
pankso@7 269
pankso@7 270 # Seb-OS Build date
pankso@7 271 build_date="$(date '+%Y%m%d')"
pankso@7 272
pankso@7 273 # Seb-OS/SliTaz release string
pankso@7 274 seb_os_release="$(cat /etc/slitaz-release)"
pankso@7 275
pankso@7 276 EOT
pankso@7 277
pankso@7 278 # Security check
pankso@11 279 chown -R 0.0 ${rootfs}
pankso@7 280 chmod 0600 ${rootfs}/etc/busybox.conf
pankso@7 281
pankso@7 282 # Rootfs archive
pankso@7 283 action "Creating the initramfs..."
pankso@7 284 cd ${rootfs}
pankso@7 285 find . -print | cpio -o -H newc | lzma e -si -so \
pankso@7 286 > ${rootiso}/boot/rootfs.gz 2>/dev/null
pankso@7 287 check
pankso@7 288
pankso@7 289 # Linux Kernel
pankso@7 290 echo -n "Copying the Linux kernel..."
pankso@7 291 cp ${linux} ${rootiso}/boot/bzImage; check
pankso@7 292
pankso@7 293 # Bootloader
pankso@7 294 echo -n "Copying the bootloader (isolinux)..."
pankso@7 295 cp ${tools}/isolinux.bin ${rootiso}/boot/isolinux; check
pankso@7 296
pankso@7 297 echo -n "Creating bootloader configs..."
pankso@7 298 cat > ${rootiso}/boot/isolinux/isolinux.cfg << EOF
pankso@7 299 display display.txt
pankso@7 300 default seb
pankso@7 301 label seb
pankso@7 302 kernel /boot/bzImage
pankso@7 303 append initrd=/boot/rootfs.gz rw root=/dev/null rdinit=/sbin/init
pankso@7 304 implicit 0
pankso@7 305 prompt 1
pankso@7 306 timeout 40
pankso@7 307 EOF
pankso@7 308 cat > ${rootiso}/boot/isolinux/display.txt << EOF
pankso@7 309
pankso@7 310 ____ _ _ _ _ ___ _
pankso@7 311 / ___| \ | | | | | / / | (_)_ __ _ ___ __
pankso@7 312 | | _| \| | | | |/ /| | | | '_ \| | | \ \/ /
pankso@7 313 | |_| | |\ | |_| / / | |___| | | | | |_| |> <
pankso@7 314 \____|_| \_|\___/_/ |_____|_|_| |_|\__,_/_/\_\
pankso@7 315
pankso@7 316 SliTaz Embedded OS - Press <ENTER> to boot
pankso@7 317 www.slitaz.org
pankso@7 318
pankso@7 319
pankso@7 320 EOF
pankso@7 321 check
pankso@7 322
pankso@7 323 echo -n "Checking rootfs size..."
pankso@7 324 info 035 $(du -mhs $rootfs | awk '{print $1}')
pankso@7 325 echo -n "Installed files in rootfs..."
pankso@7 326 info 036 $(find ${rootfs} -type f | wc -l)
pankso@7 327
pankso@7 328 # ISO image
pankso@7 329 geniso; footer
pankso@7 330 }
pankso@7 331
pankso@7 332 # Handle seb packages
pankso@7 333 packages_handler() {
pankso@7 334
pankso@7 335 # List avalaible packages
pankso@7 336 if [ ! "$1" ]; then
pankso@7 337 title "Seb packages"
pankso@7 338 for pkg in $(ls ${packages}); do
pankso@7 339 . ${packages}/${pkg}
pankso@7 340 echo -n "$(colorize 036 $pkg)"; indent 20 "$desc"
pankso@7 341 unset desc deps
pankso@7 342 done
pankso@7 343 footer && exit 0
pankso@7 344 fi
pankso@7 345
pankso@7 346 # Add package(s)
pankso@7 347 if [ "$add" ]; then
pankso@7 348 for pkg in ${@}; do
pankso@7 349 case "$pkg" in
pankso@7 350 --*) continue ;;
pankso@7 351 *)
pankso@7 352 if [ -f "$packages/$pkg" ]; then
pankso@7 353 echo -n "Addind package: $pkg"
pankso@7 354 mkdir -p ${sebpkgs}
pankso@7 355 cp -f ${packages}/${pkg} ${sebpkgs}; check
pankso@7 356 else
pankso@7 357 echo "Can't find package: $package/$pkg"
pankso@7 358 fi ;;
pankso@7 359 esac
pankso@7 360 done
pankso@7 361 fi
pankso@7 362 }
pankso@7 363
pankso@7 364 # Handle vdisk: create, check, mount, umount
pankso@7 365 vdisk_hanler() {
pankso@7 366 title "SEB Virtual disk"
pankso@7 367 vsize=40960
pankso@7 368 root=${vdisk%.img}
pankso@7 369
pankso@7 370 # Info or create
pankso@7 371 if [ -f "$vdisk" ]; then
pankso@7 372 echo -n "Virtual disk: $vdisk"
pankso@7 373 info 035 "$(du -mhs $vdisk | awk '{print $1}')"
pankso@7 374 else
pankso@7 375 echo "Creating virtual disk image..."
pankso@7 376 dd if=/dev/zero of=${vdisk} bs=1k count=${vsize}
pankso@7 377 action "Creating ext3 filesystem..."; echo
pankso@7 378 mkfs.ext3 -L "SebOShome" ${vdisk}
pankso@7 379 fi
pankso@7 380
pankso@7 381 # Check
pankso@7 382 if [ "$check" ]; then
pankso@7 383 echo "Umounting vdisk before: e2fsck -p"
pankso@7 384 umount ${vdisk} >/dev/null
pankso@7 385 e2fsck -p ${vdisk}
pankso@7 386 fi
pankso@7 387
pankso@7 388 # Action: mount/unmount
pankso@7 389 if ! mount | grep -q "^$vdisk"; then
pankso@7 390 echo -n "Mounting virtual disk..."; mkdir -p ${root}
pankso@7 391 mount -o loop -t ext3 ${vdisk} ${root}; status
pankso@7 392 else
pankso@7 393 echo -n "Unmounting virtual disk..."
pankso@7 394 umount ${vdisk}; status; sleep 1
pankso@7 395 fi; footer
pankso@7 396 }
pankso@7 397
pankso@7 398 #
pankso@7 399 # Commands
pankso@7 400 #
pankso@7 401
pankso@7 402 case "$1" in
pankso@7 403
pankso@7 404 -i|init)
pankso@7 405 rootfs="$sebfs"
pankso@7 406 echo -n "Creating files in: ${rootfs}"
pankso@7 407 init; check ;;
pankso@7 408
pankso@7 409 -b|build)
pankso@7 410 check_root
pankso@7 411 build
pankso@7 412 [ "$emu" ] && emulate ${work}/${iso} ;;
pankso@7 413
pankso@7 414 -g|geniso)
pankso@7 415 check_root
pankso@7 416 geniso ;;
pankso@7 417
pankso@7 418 -c|clean)
pankso@7 419 check_root
pankso@7 420 echo -n "Cleaning: ${work}"
pankso@7 421 [ "$all" ] && rm -rf ${sebfs} ${cache}
pankso@7 422 rm -rf ${rootfs}* ${rootiso} ${work}/*.iso
pankso@7 423 check ;;
pankso@7 424
pankso@7 425 -p|package*)
pankso@7 426 shift
pankso@7 427 packages_handler "$@" ;;
pankso@7 428
pankso@7 429 -v|vdisk)
pankso@7 430 vdisk_hanler ;;
pankso@7 431
pankso@7 432 -l|lsfs)
pankso@7 433 title "Listing: $rootfs"
pankso@7 434 cd ${rootfs}; find . -type f | sed s'/^.//'g
pankso@7 435 footer "Rootfs files: $(find . -type f | wc -l)" ;;
pankso@7 436
pankso@11 437 -e|emu)
pankso@7 438 title "Emulating: $iso"
pankso@7 439 emulate ${work}/${iso}
pankso@7 440 footer ;;
pankso@7 441
pankso@7 442 env)
pankso@7 443 title "SEB environment"
pankso@7 444 cat << EOT
pankso@7 445 work=$work
pankso@7 446 rootfs=$rootfs
pankso@7 447 rootiso=$rootiso
pankso@7 448 sebfs=$sebfs
pankso@7 449 sebpkgs=$sebpkgs
pankso@7 450 cache=$cache
pankso@7 451 vdisk=$vdisk
pankso@7 452 tools=$tools
pankso@7 453 initfs=$initfs
pankso@7 454 packages=$packages
pankso@7 455 iso=$iso
pankso@7 456 linux=$linux
pankso@7 457 EOT
pankso@7 458 footer ;;
pankso@7 459
pankso@7 460 -t|testsuite)
pankso@7 461 # Development purpose
pankso@7 462 ${tools}/libseb.sh ;;
pankso@7 463
pankso@7 464 *) help ;;
pankso@7 465
pankso@7 466 esac && exit 0