- Arch-releng - lists.archlinux.org

[arch-releng] [PATCH] [configs/releng] Add sha256sums for TianoCore efi downloads
by Daniel Edgecumbe 20 Apr '20

20 Apr '20

We should be integrity checking these downloads. This will also aid in future reproducibility efforts as the build will bomb out early in case of failure. Signed-off-by: Daniel Edgecumbe <git(a)esotericnonsense.com> --- configs/releng/build.sh | 9 +++++++-- 1 file changed, 7 insertions(+), 2 deletions(-) diff --git a/configs/releng/build.sh b/configs/releng/build.sh index 659e8de..857e01d 100755 --- a/configs/releng/build.sh +++ b/configs/releng/build.sh @@ -168,9 +168,14 @@ make_efi() { ${script_path}/efiboot/loader/entries/archiso-x86_64-usb.conf > ${work_dir}/iso/loader/entries/archiso-x86_64.conf # EFI Shell 2.0 for UEFI 2.3+ - curl -o ${work_dir}/iso/EFI/shellx64_v2.efi https://raw.githubusercontent.com/tianocore/edk2/UDK2018/ShellBinPkg/UefiSh… + echo "Downloading shellx64_v2.efi..." + curl -sSo ${work_dir}/iso/EFI/shellx64_v2.efi https://raw.githubusercontent.com/tianocore/edk2/UDK2018/ShellBinPkg/UefiSh… + echo "04c89f19efee2a22660fd4650ff9add88e962d102b1b713e535f4e32a07c5185 ${work_dir}/iso/EFI/shellx64_v2.efi" | sha256sum -c > /dev/null + # EFI Shell 1.0 for non UEFI 2.3+ - curl -o ${work_dir}/iso/EFI/shellx64_v1.efi https://raw.githubusercontent.com/tianocore/edk2/UDK2018/EdkShellBinPkg/Ful… + echo "Downloading shellx64_v1.efi..." + curl -sSo ${work_dir}/iso/EFI/shellx64_v1.efi https://raw.githubusercontent.com/tianocore/edk2/UDK2018/EdkShellBinPkg/Ful… + echo "ea5e763a8a5f9733dbf7c33ffa16a19e078c6af635b51d8457bc377a22106a8c ${work_dir}/iso/EFI/shellx64_v1.efi" | sha256sum -c > /dev/null } # Prepare efiboot.img::/EFI for "El Torito" EFI boot mode -- 2.23.0

5 4

[arch-releng] [archiso] [PATCH] Remove unsigned PreLoader.efi and HashTool.efi
by nl6720 17 Apr '20

17 Apr '20

In 908370a17e6f9e64b38e9763db9357f0020ed1d9 the deprecated prebootloader package was replaced with the efitools package that does not contain signed EFI binaries. The unsigned EFI binaries serve no purpose other than taking up space. Fixes FS#59487 . Signed-off-by: nl6720 <nl6720(a)gmail.com> --- configs/releng/build.sh | 12 +++--------- 1 file changed, 3 insertions(+), 9 deletions(-) diff --git a/configs/releng/build.sh b/configs/releng/build.sh index 659e8de..805e305 100755 --- a/configs/releng/build.sh +++ b/configs/releng/build.sh @@ -61,7 +61,7 @@ make_pacman_conf() { # Base installation, plus needed packages (airootfs) make_basefs() { mkarchiso ${verbose} -w "${work_dir}/x86_64" -C "${work_dir}/pacman.conf" -D "${install_dir}" init - mkarchiso ${verbose} -w "${work_dir}/x86_64" -C "${work_dir}/pacman.conf" -D "${install_dir}" -p "haveged intel-ucode amd-ucode memtest86+ mkinitcpio-nfs-utils nbd zsh efitools" install + mkarchiso ${verbose} -w "${work_dir}/x86_64" -C "${work_dir}/pacman.conf" -D "${install_dir}" -p "haveged intel-ucode amd-ucode memtest86+ mkinitcpio-nfs-utils nbd zsh" install } # Additional packages (airootfs) @@ -153,10 +153,7 @@ make_isolinux() { # Prepare /EFI make_efi() { mkdir -p ${work_dir}/iso/EFI/boot - cp ${work_dir}/x86_64/airootfs/usr/share/efitools/efi/PreLoader.efi ${work_dir}/iso/EFI/boot/bootx64.efi - cp ${work_dir}/x86_64/airootfs/usr/share/efitools/efi/HashTool.efi ${work_dir}/iso/EFI/boot/ - - cp ${work_dir}/x86_64/airootfs/usr/lib/systemd/boot/efi/systemd-bootx64.efi ${work_dir}/iso/EFI/boot/loader.efi + cp ${work_dir}/x86_64/airootfs/usr/lib/systemd/boot/efi/systemd-bootx64.efi ${work_dir}/iso/EFI/boot/bootx64.efi mkdir -p ${work_dir}/iso/loader/entries cp ${script_path}/efiboot/loader/loader.conf ${work_dir}/iso/loader/ @@ -190,10 +187,7 @@ make_efiboot() { cp ${work_dir}/iso/${install_dir}/boot/amd_ucode.img ${work_dir}/efiboot/EFI/archiso/amd_ucode.img mkdir -p ${work_dir}/efiboot/EFI/boot - cp ${work_dir}/x86_64/airootfs/usr/share/efitools/efi/PreLoader.efi ${work_dir}/efiboot/EFI/boot/bootx64.efi - cp ${work_dir}/x86_64/airootfs/usr/share/efitools/efi/HashTool.efi ${work_dir}/efiboot/EFI/boot/ - - cp ${work_dir}/x86_64/airootfs/usr/lib/systemd/boot/efi/systemd-bootx64.efi ${work_dir}/efiboot/EFI/boot/loader.efi + cp ${work_dir}/x86_64/airootfs/usr/lib/systemd/boot/efi/systemd-bootx64.efi ${work_dir}/efiboot/EFI/boot/bootx64.efi mkdir -p ${work_dir}/efiboot/loader/entries cp ${script_path}/efiboot/loader/loader.conf ${work_dir}/efiboot/loader/ -- 2.26.1

1 0

[arch-releng] [archiso] [PATCH] Update default boot menu entry matching in loader.conf for changes in systemd 245
by nl6720 12 Apr '20

12 Apr '20

systemd 245 doesn't auto-append the '.conf' extension when matching the default boot entry, thus making the alphabetically last one (uefi-shell-v2-x86_64.conf) into the default. Restore "Arch Linux archiso x86_64 {CD,USB}" as the default boot entry. See https://github.com/systemd/systemd/issues/15068 . --- configs/releng/efiboot/loader/loader.conf | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/configs/releng/efiboot/loader/loader.conf b/configs/releng/efiboot/loader/loader.conf index 62c4a83..9a0049c 100644 --- a/configs/releng/efiboot/loader/loader.conf +++ b/configs/releng/efiboot/loader/loader.conf @@ -1,2 +1,2 @@ timeout 3 -default archiso-x86_64 +default archiso-x86_64.conf -- 2.26.0

1 1

[arch-releng] [PATCH] fix systemd-boot default entry selection
by Alexander Epaneshnikov 27 Mar '20

27 Mar '20

in systemd 245 https://github.com/systemd/systemd/commit/6cd12ebcfe459466257ea63022a32515d… --- configs/releng/efiboot/loader/loader.conf | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/configs/releng/efiboot/loader/loader.conf b/configs/releng/efiboot/loader/loader.conf index 62c4a83..9a0049c 100644 --- a/configs/releng/efiboot/loader/loader.conf +++ b/configs/releng/efiboot/loader/loader.conf @@ -1,2 +1,2 @@ timeout 3 -default archiso-x86_64 +default archiso-x86_64.conf -- 2.26.0

1 0

[arch-releng] compression-specific options
by Christian Hesse 13 Jan '20

13 Jan '20

Hello everybody, mksquashfs supports different options depending on what compression is used. I would like to configure these, for example -Xcompression-level for zstd. Any idea how to add this to mkarchiso in a non-ugly way? :-p -- main(a){char*c=/* Schoene Gruesse */"B?IJj;MEH" "CX:;",b;for(a/* Best regards my address: */=0;b=c[a++];) putchar(b-1/(/* Chris cc -ox -xc - && ./x */b/42*2-3)*42);}

1 0

[arch-releng] [PATCH 1/1] allow to set squashfs block size
by Christian Hesse 13 Jan '20

13 Jan '20

From: Christian Hesse <mail(a)eworm.de> This allows to set squashfs block size. Increasing block size may reduce image size, but add extra I/O and cpu penalty. Signed-off-by: Christian Hesse <mail(a)eworm.de> --- archiso/mkarchiso | 14 +++++++++----- 1 file changed, 9 insertions(+), 5 deletions(-) diff --git a/archiso/mkarchiso b/archiso/mkarchiso index 567a5af..5c7bc4a 100755 --- a/archiso/mkarchiso +++ b/archiso/mkarchiso @@ -18,6 +18,7 @@ work_dir="work" out_dir="out" sfs_mode="sfs" sfs_comp="xz" +sfs_block_size="128K" gpg_key= # Show an INFO message @@ -95,6 +96,8 @@ _usage () echo " Default: ${sfs_mode}" echo " -c <comp_type> Set SquashFS compression type (gzip, lzma, lzo, xz, zstd)" echo " Default: '${sfs_comp}'" + echo " -b <block_size> Set SquashFS block size" + echo " Default: '${sfs_block_size}'" echo " -v Enable verbose output" echo " -h This message" echo " commands:" @@ -223,9 +226,9 @@ _mkairootfs_img () { mkdir -p "${work_dir}/iso/${install_dir}/${arch}" _msg_info "Creating SquashFS image, this may take some time..." if [[ "${quiet}" = "y" ]]; then - mksquashfs "${work_dir}/airootfs.img" "${work_dir}/iso/${install_dir}/${arch}/airootfs.sfs" -noappend -comp "${sfs_comp}" -no-progress &> /dev/null + mksquashfs "${work_dir}/airootfs.img" "${work_dir}/iso/${install_dir}/${arch}/airootfs.sfs" -noappend -comp "${sfs_comp}" -b "${sfs_block_size}" -no-progress &> /dev/null else - mksquashfs "${work_dir}/airootfs.img" "${work_dir}/iso/${install_dir}/${arch}/airootfs.sfs" -noappend -comp "${sfs_comp}" -no-progress + mksquashfs "${work_dir}/airootfs.img" "${work_dir}/iso/${install_dir}/${arch}/airootfs.sfs" -noappend -comp "${sfs_comp}" -b "${sfs_block_size}" -no-progress fi _msg_info "Done!" rm ${work_dir}/airootfs.img @@ -240,9 +243,9 @@ _mkairootfs_sfs () { mkdir -p "${work_dir}/iso/${install_dir}/${arch}" _msg_info "Creating SquashFS image, this may take some time..." if [[ "${quiet}" = "y" ]]; then - mksquashfs "${work_dir}/airootfs" "${work_dir}/iso/${install_dir}/${arch}/airootfs.sfs" -noappend -comp "${sfs_comp}" -no-progress &> /dev/null + mksquashfs "${work_dir}/airootfs" "${work_dir}/iso/${install_dir}/${arch}/airootfs.sfs" -noappend -comp "${sfs_comp}" -b "${sfs_block_size}" -no-progress &> /dev/null else - mksquashfs "${work_dir}/airootfs" "${work_dir}/iso/${install_dir}/${arch}/airootfs.sfs" -noappend -comp "${sfs_comp}" -no-progress + mksquashfs "${work_dir}/airootfs" "${work_dir}/iso/${install_dir}/${arch}/airootfs.sfs" -noappend -comp "${sfs_comp}" -b "${sfs_block_size}" -no-progress fi _msg_info "Done!" } @@ -369,7 +372,7 @@ fi umask 0022 -while getopts 'p:r:C:L:P:A:D:w:o:s:c:g:vh' arg; do +while getopts 'p:r:C:L:P:A:D:w:o:s:c:b:g:vh' arg; do case "${arg}" in p) pkg_list="${pkg_list} ${OPTARG}" ;; r) run_cmd="${OPTARG}" ;; @@ -382,6 +385,7 @@ while getopts 'p:r:C:L:P:A:D:w:o:s:c:g:vh' arg; do o) out_dir="${OPTARG}" ;; s) sfs_mode="${OPTARG}" ;; c) sfs_comp="${OPTARG}" ;; + b) sfs_block_size="${OPTARG}" ;; g) gpg_key="${OPTARG}" ;; v) quiet="n" ;; h|?) _usage 0 ;;

1 0

[arch-releng] Base packages and linux kernel
by Mr Green 06 Nov '19

06 Nov '19

Hi, Why not simply add packages to make_basefs functions rather than adding a new function for kernel? Missing (from old base meta package) can simply be added to package list. Mr Green

1 0

[arch-releng] base and adding in linux kernel.
by Mr Green 06 Nov '19

06 Nov '19

Hi, Rather than adding another function to build script why not simpl

1 0

[arch-releng] [PATCH 0/1] Fix the baseline build script
by Daniel Edgecumbe 02 Nov '19

02 Nov '19

The base-meta change removed a dependency that the baseline iso relied on. As such, it now fails to build, expecting mkinitcpio to be present. This change allows the construction of a functioning ISO which can be used to bootstrap a system. We may also wish to include an editor in the ISO, though it is technically possible to get by without. Daniel Edgecumbe (1): configs/baseline: Install the linux kernel package configs/baseline/build.sh | 6 ++++++ 1 file changed, 6 insertions(+) -- 2.23.0

1 1

[arch-releng] ipxe.lkrn BIOS TLS issue
by Anindya Mukherjee 18 Oct '19

18 Oct '19

Hi, I prepared a USB netboot image following the netboot wiki: https://wiki.archlinux.org/index.php/Netboot The ipxe.lkrn is from: https://www.archlinux.org/static/netboo … 7b45a.lkrn<https://www.archlinux.org/static/netboot/ipxe.08268867b45a.lkrn> The system is BIOS based. The ipxe.lkrn image boots successfully but when it tries to access https://www.archlinux.org/releng/netboot/archlinux.ipxe it fails with "Operation not permitted". IPXE shows the error url http://ipxe.org/410de13c which points to a TLS issue (Fatal alert). Not sure how to proceed. The networking seems to be working fine. Typing route at the ipxe prompt shows an ip address has been assigned. Is there a certificate issue with ipxe.lkrn? Thanks!

2 5