ffc7e5c71a
- Pin linux-lts to exact KERNEL_PKG_VERSION=6.12.76-r0 in build and ISO package list - Add build-time verification that compiled kernel version matches pin (fails loudly) - Fix bee-audit-debug → bee-audit in genapkovl OpenRC registration (service was never starting) - Add AUDIT_VERSION=0.1.0 to VERSIONS (was undefined, bee-release had empty fields) - Pin linux-lts-dev version in second apk add in build-nvidia-module.sh - Add /root/.profile to overlay so /usr/local/bin is in PATH for SSH sessions - Remove "DEBUG MODE" from motd - Fix smoketest: grep for slog "audit output written" instead of non-existent "audit completed" - Document no-internet constraint in system-overview and runtime-flows - Remove redundant genapkovl copy to /var/tmp (now found via ~/.mkimage/) Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
107 lines
2.5 KiB
Bash
Executable File
107 lines
2.5 KiB
Bash
Executable File
#!/bin/sh -e
|
|
HOSTNAME="$1"
|
|
[ -n "$HOSTNAME" ] || { echo "usage: $0 hostname"; exit 1; }
|
|
OVERLAY="${BEE_OVERLAY_DIR}"
|
|
[ -n "$OVERLAY" ] || { echo "ERROR: BEE_OVERLAY_DIR not set"; exit 1; }
|
|
|
|
cleanup() { rm -rf "$tmp"; }
|
|
tmp="$(mktemp -d)"
|
|
trap cleanup EXIT
|
|
|
|
makefile() { OWNER="$1" PERMS="$2" FILENAME="$3"; cat > "$FILENAME"; chown "$OWNER" "$FILENAME"; chmod "$PERMS" "$FILENAME"; }
|
|
rc_add() { mkdir -p "$tmp/etc/runlevels/$2"; ln -sf /etc/init.d/"$1" "$tmp/etc/runlevels/$2/$1"; }
|
|
|
|
mkdir -p "$tmp/etc"
|
|
makefile root:root 0644 "$tmp/etc/hostname" <<EOF
|
|
$HOSTNAME
|
|
EOF
|
|
|
|
# Empty interfaces file — prevents ifupdown from erroring, bee-network handles DHCP
|
|
mkdir -p "$tmp/etc/network"
|
|
makefile root:root 0644 "$tmp/etc/network/interfaces" <<EOF
|
|
auto lo
|
|
iface lo inet loopback
|
|
EOF
|
|
|
|
mkdir -p "$tmp/etc/apk"
|
|
makefile root:root 0644 "$tmp/etc/apk/world" <<EOF
|
|
alpine-base
|
|
dmidecode
|
|
smartmontools
|
|
nvme-cli
|
|
pciutils
|
|
ipmitool
|
|
util-linux
|
|
lsblk
|
|
e2fsprogs
|
|
lshw
|
|
dropbear
|
|
libqrencode-tools
|
|
tzdata
|
|
ca-certificates
|
|
strace
|
|
procps
|
|
lsof
|
|
file
|
|
less
|
|
vim
|
|
dialog
|
|
EOF
|
|
|
|
rc_add devfs sysinit
|
|
rc_add dmesg sysinit
|
|
rc_add mdev sysinit
|
|
rc_add hwdrivers sysinit
|
|
rc_add modloop sysinit
|
|
|
|
rc_add hwclock boot
|
|
rc_add modules boot
|
|
rc_add sysctl boot
|
|
rc_add hostname boot
|
|
rc_add bootmisc boot
|
|
rc_add syslog boot
|
|
|
|
rc_add mount-ro shutdown
|
|
rc_add killprocs shutdown
|
|
rc_add savecache shutdown
|
|
|
|
rc_add bee-sshsetup default
|
|
rc_add bee-network default
|
|
rc_add dropbear default
|
|
rc_add bee-nvidia default
|
|
rc_add bee-audit default
|
|
|
|
if [ -d "$OVERLAY/etc" ]; then
|
|
cp -r "$OVERLAY/etc/." "$tmp/etc/"
|
|
chmod +x "$tmp/etc/init.d/"* 2>/dev/null || true
|
|
[ -n "$BEE_BUILD_INFO" ] && sed -i "s/%%BUILD_INFO%%/${BEE_BUILD_INFO}/" "$tmp/etc/motd" 2>/dev/null || true
|
|
fi
|
|
|
|
mkdir -p "$tmp/usr"
|
|
if [ -d "$OVERLAY/usr" ]; then
|
|
cp -r "$OVERLAY/usr/." "$tmp/usr/"
|
|
chmod +x "$tmp/usr/local/bin/"* 2>/dev/null || true
|
|
fi
|
|
|
|
if [ -d "$OVERLAY/root" ]; then
|
|
mkdir -p "$tmp/root"
|
|
cp -r "$OVERLAY/root/." "$tmp/root/"
|
|
chmod 700 "$tmp/root/.ssh" 2>/dev/null || true
|
|
chmod 600 "$tmp/root/.ssh/authorized_keys" 2>/dev/null || true
|
|
fi
|
|
|
|
if [ -d "$OVERLAY/lib" ]; then
|
|
mkdir -p "$tmp/lib"
|
|
cp -r "$OVERLAY/lib/." "$tmp/lib/"
|
|
fi
|
|
|
|
mkdir -p "$tmp/etc/dropbear" "$tmp/etc/conf.d"
|
|
# -R: auto-generate host keys if missing
|
|
# no dependency on networking service — bee-network handles DHCP independently
|
|
makefile root:root 0644 "$tmp/etc/conf.d/dropbear" <<EOF
|
|
DROPBEAR_OPTS="-R -B"
|
|
EOF
|
|
|
|
|
|
tar -c -C "$tmp" etc usr root lib 2>/dev/null | gzip -9n > "$HOSTNAME.apkovl.tar.gz"
|