Tobias Brunner
7ec0101250
A recent gettext release (0.25 via Homebrew) installs the M4 macros in a different location (<prefix>/share/gettext/m4 instead of <prefix>/share/aclocal). According to the commit messages to avoid "bad interactions between autoreconf and autopoint". Since we only depend on gettext for that macro and this move makes it complicated, we can also just integrate the macro from gnulib directly (which gettext 0.18+ relies on anyway).
172 lines
5.1 KiB
Bash
Executable File
172 lines
5.1 KiB
Bash
Executable File
#!/bin/bash
|
|
|
|
echo "Building base image"
|
|
|
|
DIR=$(dirname `readlink -f $0`)
|
|
. $DIR/../testing.conf
|
|
. $DIR/function.sh
|
|
|
|
[ `id -u` -eq 0 ] || die "You must be root to run $0"
|
|
running_any $STRONGSWANHOSTS && die "Please stop test environment before running $0"
|
|
|
|
check_commands debootstrap mkfs.ext3 blockdev qemu-img qemu-nbd sfdisk
|
|
|
|
# package includes/excludes
|
|
INC=automake,autoconf,libtool,bison,flex,gperf,pkg-config,less,locales
|
|
INC=$INC,build-essential,libgmp-dev,libldap2-dev,libcurl4-openssl-dev,ethtool
|
|
INC=$INC,libxml2-dev,libtspi-dev,libsqlite3-dev,openssh-server,tcpdump,psmisc
|
|
INC=$INC,openssl,vim,sqlite3,conntrack,gdb,cmake,libltdl-dev,wget,gnupg,man-db
|
|
INC=$INC,libboost-thread-dev,libboost-system-dev,git,iperf3,htop,valgrind,strace
|
|
INC=$INC,gnat,gprbuild,acpid,acpi-support-base,libldns-dev,libunbound-dev
|
|
INC=$INC,dnsutils,libsoup2.4-dev,ca-certificates,unzip,libsystemd-dev
|
|
INC=$INC,python3,python3-setuptools,python3-build,python3-dev,python3-daemon,python3-venv,
|
|
INC=$INC,apt-transport-https,libjson-c-dev,libxslt1-dev,libapache2-mod-wsgi-py3
|
|
INC=$INC,libxerces-c-dev,rsyslog,ncat,socat
|
|
case "$BASEIMGSUITE" in
|
|
buster)
|
|
INC=$INC,iptables-dev
|
|
;;
|
|
*)
|
|
INC=$INC,libiptc-dev
|
|
;;
|
|
esac
|
|
case "$BASEIMGSUITE" in
|
|
buster)
|
|
INC=$INC,libahven7-dev,libxmlada-schema8-dev,libgmpada8-dev
|
|
INC=$INC,libalog4-dev,dbus-user-session
|
|
;;
|
|
bullseye)
|
|
INC=$INC,libahven9-dev,libxmlada-schema10-dev,libgmpada10-dev
|
|
INC=$INC,libalog6-dev,dbus-user-session
|
|
# workaround for dependency issue gdb -> libsource-highlight4v5 -> virtual
|
|
# package (libboost-regex1.74.0-icu67), which debootstrap can't resolve (#878961)
|
|
INC=$INC,libboost-regex1.74.0
|
|
;;
|
|
bookworm)
|
|
INC=$INC,libahven11-dev,libxmlada-schema12-dev,libgmpada12-dev
|
|
INC=$INC,libalog8-dev,dbus-user-session
|
|
# workaround for dependency issue gdb -> libsource-highlight4v5 -> virtual
|
|
# package (libboost-regex1.74.0-icu67), which debootstrap can't resolve (#878961)
|
|
INC=$INC,libboost-regex1.74.0
|
|
;;
|
|
*)
|
|
echo_warn "Package list for '$BASEIMGSUITE' might has to be updated"
|
|
;;
|
|
esac
|
|
SERVICES="apache2 dbus isc-dhcp-server slapd bind9 freeradius"
|
|
INC=$INC,${SERVICES// /,}
|
|
# packages to install via APT, for SWIMA tests
|
|
APT1="libgcrypt20-dev traceroute iptables"
|
|
APT="tmux"
|
|
# additional services to disable
|
|
case "$BASEIMGSUITE" in
|
|
bookworm)
|
|
;;
|
|
*)
|
|
SERVICES="$SERVICES systemd-timesyncd"
|
|
;;
|
|
esac
|
|
|
|
CACHEDIR=$BUILDDIR/cache
|
|
APTCACHE=$LOOPDIR/var/cache/apt/archives
|
|
|
|
mkdir -p $LOOPDIR
|
|
mkdir -p $CACHEDIR
|
|
mkdir -p $IMGDIR
|
|
rm -f $BASEIMG
|
|
|
|
echo "`date`, building $BASEIMG" >>$LOGFILE
|
|
|
|
load_qemu_nbd
|
|
|
|
log_action "Creating base image $BASEIMG"
|
|
execute "qemu-img create -f $IMGEXT $BASEIMG ${BASEIMGSIZE}M"
|
|
|
|
log_action "Connecting image to NBD device $NBDEV"
|
|
execute "qemu-nbd -c $NBDEV $BASEIMG"
|
|
do_on_exit qemu-nbd -d $NBDEV
|
|
|
|
log_action "Partitioning disk"
|
|
sfdisk /dev/nbd0 >>$LOGFILE 2>&1 << EOF
|
|
;
|
|
EOF
|
|
if [ $? != 0 ]
|
|
then
|
|
log_status 1
|
|
exit 1
|
|
else
|
|
log_status 0
|
|
fi
|
|
blockdev --rereadpt $NBDEV
|
|
|
|
log_action "Creating ext3 filesystem"
|
|
execute "mkfs.ext3 $NBDPARTITION"
|
|
|
|
log_action "Mounting $NBDPARTITION to $LOOPDIR"
|
|
execute "mount $NBDPARTITION $LOOPDIR"
|
|
do_on_exit graceful_umount $LOOPDIR
|
|
|
|
log_action "Using $CACHEDIR as archive for apt"
|
|
mkdir -p $APTCACHE
|
|
execute "mount -o bind $CACHEDIR $APTCACHE"
|
|
do_on_exit graceful_umount $APTCACHE
|
|
|
|
log_action "Running debootstrap ($BASEIMGSUITE, $BASEIMGARCH)"
|
|
execute "debootstrap --arch=$BASEIMGARCH --include=$INC $BASEIMGSUITE $LOOPDIR $BASEIMGMIRROR"
|
|
|
|
execute "mount -t proc none $LOOPDIR/proc" 0
|
|
do_on_exit graceful_umount $LOOPDIR/proc
|
|
|
|
log_action "Generating locales"
|
|
cat > $LOOPDIR/etc/locale.gen << EOF
|
|
de_CH.UTF-8 UTF-8
|
|
en_US.UTF-8 UTF-8
|
|
EOF
|
|
execute_chroot "locale-gen"
|
|
|
|
log_action "Downloading signing key for custom apt repo"
|
|
execute_chroot "wget -q $BASEIMGEXTKEY -O /tmp/key"
|
|
log_action "Installing signing key for custom apt repo"
|
|
execute_chroot "apt-key add /tmp/key"
|
|
|
|
log_action "Enabling custom apt repo"
|
|
cat > $LOOPDIR/etc/apt/sources.list.d/strongswan.list << EOF
|
|
deb $BASEIMGEXTREPO $BASEIMGSUITE main
|
|
EOF
|
|
log_status $?
|
|
|
|
log_action "Prioritize custom apt repo"
|
|
cat > $LOOPDIR/etc/apt/preferences.d/strongswan.pref << EOF
|
|
Package: *
|
|
Pin: origin "$BASEIMGEXTREPOHOST"
|
|
Pin-Priority: 1001
|
|
EOF
|
|
log_status $?
|
|
|
|
log_action "Update package sources"
|
|
execute_chroot "apt-get update"
|
|
log_action "Install packages via APT"
|
|
execute_chroot "apt-get -y install $APT1"
|
|
log_action "Move history.log to history.log.1"
|
|
execute_chroot "mv /var/log/apt/history.log /var/log/apt/history.log.1"
|
|
log_action "Compress history.log.1 to history.log.1.gz"
|
|
execute_chroot "gzip /var/log/apt/history.log.1"
|
|
log_action "Install more packages via APT"
|
|
execute_chroot "apt-get -y install $APT"
|
|
log_action "Install packages from custom repo"
|
|
execute_chroot "apt-get -y upgrade"
|
|
|
|
for service in $SERVICES
|
|
do
|
|
log_action "Disabling service $service"
|
|
execute_chroot "systemctl disable $service"
|
|
done
|
|
|
|
log_action "Switching from iptables-nft to iptables-legacy"
|
|
execute_chroot "update-alternatives --set iptables /usr/sbin/iptables-legacy" 0
|
|
execute_chroot "update-alternatives --set ip6tables /usr/sbin/ip6tables-legacy" 0
|
|
log_status 0
|
|
|
|
log_action "Disabling root password"
|
|
execute_chroot "passwd -d root"
|