223 lines
7.9 KiB
Bash
223 lines
7.9 KiB
Bash
|
#!/bin/bash
|
||
|
|
#================
|
||
|
|
# FILE : config.sh
|
||
|
|
#----------------
|
||
|
|
# PROJECT : openSUSE KIWI Image System
|
||
|
|
# COPYRIGHT : (c) 2006,2007,2008,2017 SUSE Linux GmbH. All rights reserved
|
||
|
|
# :
|
||
|
|
# AUTHOR : Marcus Schaefer <ms@suse.de>, Stephan Kulow <coolo@suse.de>, Fabian Vogt <fvogt@suse.com>
|
||
|
|
# :
|
||
|
|
# LICENSE : BSD
|
||
|
|
#======================================
|
||
|
|
# Functions...
|
||
|
|
#--------------------------------------
|
||
|
|
test -f /.kconfig && . /.kconfig
|
||
|
|
test -f /.profile && . /.profile
|
||
|
|
|
||
|
|
set -euxo pipefail
|
||
|
|
|
||
|
|
#pl=$(rpmqpack | grep release-livecd-)
|
||
|
|
|
||
|
|
|
||
|
|
# Get the flavor from the installed (openSUSE|Leap)-release-livecd- RPM
|
||
|
|
# as <censored> kiwi does not make the flavor accessible
|
||
|
|
#desktop=$(echo "$pl" | awk -F- '{ print $4 }' | tr A-Z a-z)
|
||
|
|
desktop="gnome" # hardcode it as we don't have (release-livecd* package
|
||
|
|
|
||
|
|
# Not needed, but required by suse-module-tools (bsc#1116665)
|
||
|
|
rpm -q binutils && rpm -e --nodeps binutils
|
||
|
|
# Not needed, but required by dracut-kiwi-live -> cdrkit-cdrtools-compat
|
||
|
|
rpm -q wodim && rpm -e --nodeps wodim
|
||
|
|
# Actually a hack: xrdb requires this, but on livecds it's not used
|
||
|
|
rpm -qa | grep "^cpp" | xargs -r rpm -e --nodeps
|
||
|
|
rpm -qa | grep "^libisl" | xargs -r rpm -e
|
||
|
|
|
||
|
|
# GTK 3 hard-requires this for some reason. The only GTK3 application is Firefox,
|
||
|
|
# which has its own icons and we have breeze for the rest.
|
||
|
|
[ "$desktop" = "kde" ] && rpm -e --nodeps adwaita-icon-theme
|
||
|
|
|
||
|
|
# Workaround until dropped from xfce4-branding-openSUSE
|
||
|
|
[ "$desktop" = "x11" -o "$desktop" = "xfce" ] && rpm -e --nodeps noto-coloremoji-fonts
|
||
|
|
|
||
|
|
#--------------------------------------
|
||
|
|
# enable and disable services
|
||
|
|
|
||
|
|
for i in langset NetworkManager firewalld; do
|
||
|
|
systemctl -f enable $i
|
||
|
|
done
|
||
|
|
|
||
|
|
for i in sshd cron wicked purge-kernels; do
|
||
|
|
systemctl -f disable $i
|
||
|
|
done
|
||
|
|
|
||
|
|
echo '# multipath needs to be excluded from dracut as it breaks os-prober' > /etc/dracut.conf.d/no-multipath.conf
|
||
|
|
echo 'omit_dracutmodules+=" multipath "' >> /etc/dracut.conf.d/no-multipath.conf
|
||
|
|
|
||
|
|
# Stronger compression for the initrd
|
||
|
|
echo 'compress="xz -4 --check=crc32 --memlimit-compress=50%"' >> /etc/dracut.conf.d/less-storage.conf
|
||
|
|
|
||
|
|
if [ "$desktop" = "x11" ] || [ "$desktop" = "xfce" ]; then
|
||
|
|
# Forcibly exclude networking support
|
||
|
|
sed -i 's/echo network rootfs-block/echo rootfs-block/' /usr/lib/dracut/modules.d/90kiwi-live/module-setup.sh
|
||
|
|
echo 'omit_dracutmodules+=" network "' >> /etc/dracut.conf.d/no-network.conf
|
||
|
|
|
||
|
|
# This only needs to be able to boot the live cd
|
||
|
|
echo 'omit_dracutmodules+=" bcache crypt lvm mdraid lunmask "' >> /etc/dracut.conf.d/less-storage.conf
|
||
|
|
|
||
|
|
# Unnecessary modules in the initrd
|
||
|
|
echo 'omit_drivers+=" cifs ocfs2 "' >> /etc/dracut.conf.d/less-storage.conf
|
||
|
|
|
||
|
|
# Work around https://github.com/OSInside/kiwi/issues/1751
|
||
|
|
sed -i '/omit_dracutmodules=/d' /usr/bin/dracut
|
||
|
|
fi
|
||
|
|
|
||
|
|
if [ "$desktop" = "x11" ]; then
|
||
|
|
# Only used for X11 acceleration on vmwgfx, saves ~47MiB
|
||
|
|
rpm -e --nodeps Mesa-gallium
|
||
|
|
|
||
|
|
# Surely that specific font isn't necessary
|
||
|
|
rpm -e --nodeps google-poppins-fonts
|
||
|
|
|
||
|
|
# Generated on boot if missing
|
||
|
|
rm /etc/udev/hwdb.bin
|
||
|
|
fi
|
||
|
|
|
||
|
|
cd /
|
||
|
|
|
||
|
|
# Import keys for installation
|
||
|
|
touch /installkey.gpg
|
||
|
|
gpg --batch --homedir /root/.gnupg --no-default-keyring --ignore-time-conflict --ignore-valid-from --keyring /installkey.gpg --import /usr/lib/rpm/gnupg/keys/*
|
||
|
|
mkdir -p /pubkeys
|
||
|
|
for i in /usr/lib/rpm/gnupg/keys/*.asc ; do
|
||
|
|
rpm --import $i || true
|
||
|
|
ln -s "$i" "/pubkeys/${i##*/}.key"
|
||
|
|
done
|
||
|
|
|
||
|
|
# Craft license.tar.gz used by YaST
|
||
|
|
EULA_DIR=/etc/YaST2/licenses/base
|
||
|
|
[ -d "${EULA_DIR}" ] || EULA_DIR=/usr/share/licenses/product/base
|
||
|
|
(cd "${EULA_DIR}"; tar -cvzf /license.tar.gz *)
|
||
|
|
|
||
|
|
# Remove some large locales to save space
|
||
|
|
rm -rf /usr/{lib,share}/locale/{ca,cs,da,ja,fi,hu,id,ko,nl,pl,tr,ru,sk,sr,sv,uk,vi,cmn_TW,zh}*
|
||
|
|
rm -rf /usr/share/qt5/translations/*_{ca,cs,da,ja,fi,hu,id,ko,nl,pl,tr,ru,sk,sr,sv,uk,vi,cmn_TW,zh}*
|
||
|
|
zypper --non-interactive rm yast2-trans-{uk,sv,ru,ja,da,cs,sr,vi} || :
|
||
|
|
|
||
|
|
# Some packages really exaggerate here
|
||
|
|
rm -rf /usr/share/doc/packages/*
|
||
|
|
|
||
|
|
# Save more than 200 MiB by removing this, not very useful for lives
|
||
|
|
rm -rf /lib/firmware/{liquidio,netronome,qed,mrvl,mellanox,qcom,cypress,dpaa2,bnx2x,cxgb4}
|
||
|
|
|
||
|
|
# The gems are unpackaged already, no need to store them twice
|
||
|
|
rm -rf /usr/lib*/ruby/gems/*/cache/
|
||
|
|
|
||
|
|
# Not needed, boo#1166406
|
||
|
|
rm -f /boot/vmlinux*.[gx]z
|
||
|
|
rm -f /lib/modules/*/vmlinux*.[gx]z
|
||
|
|
|
||
|
|
# Decompress kernel modules, better for squashfs (boo#1192457)
|
||
|
|
find /lib/modules/*/kernel -name '*.ko.xz' -exec xz -d {} +
|
||
|
|
find /lib/modules/*/kernel -name '*.ko.zst' -exec zstd --rm -d {} +
|
||
|
|
depmod $(basename /lib/modules/*)
|
||
|
|
|
||
|
|
# Install README.BETA where expected by YaST
|
||
|
|
cp /usr/lib/skelcd/CD1/README.BETA / || :
|
||
|
|
zypper --non-interactive rm -u skelcd-openSUSE || :
|
||
|
|
|
||
|
|
# Remove the zypper locks needed for a slimmer system
|
||
|
|
zypper rl $(seq 1 $(zypper ll | wc -l))
|
||
|
|
|
||
|
|
# Create fstab if it doesn't exist (Work around boo#1185815)
|
||
|
|
>>/etc/fstab
|
||
|
|
|
||
|
|
chkstat --system --set
|
||
|
|
|
||
|
|
ln -s /usr/lib/systemd/system/graphical.target /etc/systemd/system/default.target
|
||
|
|
baseUpdateSysConfig /etc/sysconfig/keyboard YAST_KEYBOARD "english-us,pc104"
|
||
|
|
baseUpdateSysConfig /etc/sysconfig/keyboard COMPOSETABLE "clear latin1.add"
|
||
|
|
baseUpdateSysConfig /etc/sysconfig/language RC_LANG ""
|
||
|
|
|
||
|
|
baseUpdateSysConfig /etc/sysconfig/console CONSOLE_FONT "eurlatgr.psfu"
|
||
|
|
baseUpdateSysConfig /etc/sysconfig/console CONSOLE_SCREENMAP trivial
|
||
|
|
baseUpdateSysConfig /etc/sysconfig/console CONSOLE_MAGIC "(K"
|
||
|
|
baseUpdateSysConfig /etc/sysconfig/console CONSOLE_ENCODING "UTF-8"
|
||
|
|
|
||
|
|
[ "$desktop" = "gnome" ] && displaymanager=gdm
|
||
|
|
[ "$desktop" = "kde" ] && displaymanager=sddm
|
||
|
|
[ "$desktop" = "xfce" ] && displaymanager=lightdm
|
||
|
|
[ "$desktop" = "x11" ] && displaymanager=lightdm
|
||
|
|
baseUpdateSysConfig /etc/sysconfig/displaymanager DISPLAYMANAGER $displaymanager
|
||
|
|
|
||
|
|
# boo#1039756
|
||
|
|
[ "$desktop" = "gnome" ] && baseUpdateSysConfig /etc/sysconfig/windowmanager DEFAULT_WM gnome
|
||
|
|
|
||
|
|
# Disable journal write to disk in live mode, bug 950999
|
||
|
|
echo "Storage=volatile" >> /etc/systemd/journald.conf
|
||
|
|
|
||
|
|
# Remove generated files (boo#1098535)
|
||
|
|
rm -rf /var/cache/zypp/* /var/lib/zypp/AnonymousUniqueId /var/lib/systemd/random-seed
|
||
|
|
|
||
|
|
cat >/etc/systemd/system/fixupbootloader.service <<EOF
|
||
|
|
# boo#1155545 - LOADER_TYPE has to be nil for the upgrade to work properly.
|
||
|
|
# Kiwi does not allow changing the file directly, so do it in this ugly way.
|
||
|
|
[Unit]
|
||
|
|
Description=Remove LOADER_TYPE from /etc/sysconfig/bootloader
|
||
|
|
Before=systemd-user-sessions.service
|
||
|
|
|
||
|
|
[Service]
|
||
|
|
Type=oneshot
|
||
|
|
ExecStart=/usr/bin/gawk -i inplace '!/^LOADER_TYPE=/' /etc/sysconfig/bootloader
|
||
|
|
|
||
|
|
[Install]
|
||
|
|
WantedBy=multi-user.target
|
||
|
|
EOF
|
||
|
|
|
||
|
|
systemctl -f enable fixupbootloader.service
|
||
|
|
|
||
|
|
#======================================
|
||
|
|
# Configure SelfInstall specifics
|
||
|
|
#--------------------------------------
|
||
|
|
if [[ "$kiwi_profiles" == *"SelfInstall"* ]]; then
|
||
|
|
cat > /etc/systemd/system/selfinstallreboot.service <<-EOF
|
||
|
|
[Unit]
|
||
|
|
Description=SelfInstall Image Reboot after Firstboot (to ensure ignition and such runs)
|
||
|
|
After=systemd-machine-id-commit.service
|
||
|
|
Before=jeos-firstboot.service
|
||
|
|
|
||
|
|
[Service]
|
||
|
|
Type=oneshot
|
||
|
|
ExecStart=rm /etc/systemd/system/selfinstallreboot.service
|
||
|
|
ExecStart=rm /etc/systemd/system/default.target.wants/selfinstallreboot.service
|
||
|
|
ExecStart=systemctl --no-block reboot
|
||
|
|
|
||
|
|
[Install]
|
||
|
|
WantedBy=default.target
|
||
|
|
EOF
|
||
|
|
ln -s /etc/systemd/system/selfinstallreboot.service /etc/systemd/system/default.target.wants/selfinstallreboot.service
|
||
|
|
fi
|
||
|
|
|
||
|
|
#======================================
|
||
|
|
# gnome-initial-setup
|
||
|
|
#--------------------------------------
|
||
|
|
if [[ "$kiwi_profiles" == *"SelfInstall"* ]]; then
|
||
|
|
cat > /etc/gdm/custom.conf <<-EOF
|
||
|
|
[daemon]
|
||
|
|
InitialSetupEnable=True
|
||
|
|
EOF
|
||
|
|
|
||
|
|
# Allow newly created user to use sudo
|
||
|
|
|
||
|
|
cat > /etc/sudoers <<-EOF
|
||
|
|
Defaults always_set_home
|
||
|
|
Defaults secure_path="/usr/sbin:/usr/bin:/sbin:/bin:/usr/local/bin:/usr/local/sbin"
|
||
|
|
Defaults env_reset
|
||
|
|
Defaults env_keep = "LANG LC_ADDRESS LC_CTYPE LC_COLLATE LC_IDENTIFICATION LC_MEASUREMENT LC_MESSAGES LC_MONETARY LC_NAME LC_NUMERIC LC_PAPER LC_TELEPHONE LC_TIME LC_ALL LANGUAGE LINGUAS XDG_SESSION_COOKIE"
|
||
|
|
Defaults !insults
|
||
|
|
root ALL=(ALL:ALL) ALL
|
||
|
|
%wheel ALL=(ALL:ALL) ALL
|
||
|
|
@includedir /etc/sudoers.d
|
||
|
|
EOF
|
||
|
|
fi
|
||
|
|
|