Send patches - preferably formatted by git format-patch - to patches at archlinux32 dot org.
summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2024-03-30configs/*/profiledef.sh: set bootstrap_tarball_compressionnl6720
* bootstrap will use .tar.zst with `zstd -c -T0 --long -19`, * releng will retain .tar.gz with `gzip -cn9` for now. This will later be changed as part of https://gitlab.archlinux.org/archlinux/archiso/-/issues/130.
2024-03-30mkarchiso: implement configurable bootstrap tarball compressionnl6720
profiledef.sh gains a new option `bootstrap_tarball_compression` which is a bash array containing the compression program and its arguments. Related to https://gitlab.archlinux.org/archlinux/archiso/-/issues/130.
2024-03-30.gitignore: add more ignored filesnl6720
* more tarball matching, * `network-config` used by cloud-init, * anything starting with `codesigning`.
2024-03-26mkarchiso: skip including external microcode images if the initramfs file ↵nl6720
contains early_cpio The early uncompressed CPIO archive containing microcode update files can be part of the initramfs file. To avoid wasting space, first check if the initramfs file contains `early_cpio` and only copy external microcode initramfs images if it does not.
2024-03-24mkarchiso: move /boot/grub/YYYY-mm-dd-HH-MM-SS-00.uuid to ↵nl6720
/boot/YYYY-mm-dd-HH-MM-SS-00.uuid Once mkinitcpio-archiso implements searching for the file in early userspace, this file's use will not be limited to just GRUB. Related to https://gitlab.archlinux.org/archlinux/archiso/-/issues/217
2024-02-20Revert "mkarchiso: unset LANGUAGE"nl6720
Starting with glibc 2.39, LC_ALL=C.UTF-8 overrides LANGUAGE, just like LC_ALL=C. See https://sourceware.org/bugzilla/show_bug.cgi?id=16621 for details. This reverts commit 6ac22309530f3aa07a2b638ccde419a3a509f50c.
2024-02-17Makefile: build and install the mkarchiso(1) man pagenl6720
rst2man from python-docutils is required to convert the man page from reStructuredText.
2024-02-07Add man page for mkarchisonl6720
2024-01-24Add changelog for 75nl6720
2024-01-20configs/releng/profiledef.sh: replace "CD" with "DVD" in iso_applicationnl6720
Starting with kernel 6.7, the releng ISO exceeds 900 MiB which is the maximum size of a CD. Adjust the description to say "DVD" instead. Closes https://gitlab.archlinux.org/archlinux/archiso/-/issues/144
2024-01-18mkarchiso: update memtest86+ license file locationnl6720
The licenses package does not ship `/usr/share/licenses/common/GPL2/license.txt` anymore, which results in: /usr/share/licenses/common/GPL2/license.txt': No such file or directory Use its replacement, `/usr/share/licenses/spdx/GPL-2.0-only.txt` instead. Fixes https://gitlab.archlinux.org/archlinux/archiso/-/issues/225
2024-01-05configs/releng/packages.x86_64: explicitly add ldnsnl6720
Currently the ldns package is pulled in as a dependency of openssh, but that dependency may be gone in the future. See https://gitlab.archlinux.org/archlinux/packaging/packages/openssh/-/issues/2 Explicitly include ldns to ensure the live environment will continue to have `drill`.
2023-12-21Add changelog for 74 and update AUTHORS.rstnl6720
2023-12-21mkarchiso: place prepared systemd-boot configuration in work directorynl6720
Keep the prepared `.conf` files in `work_dir` to avoid having to run them through `sed` twice. This makes sure the FAT image size calculation is more correct and also simplifies copying the files m to both ISO 9660 and the FAT image since the the whole `loader` directory can copied instead of copying individual files.
2023-12-21mkarchiso: add missing replacement for ARCHISO_UUID in ↵nl6720
/loader/entries/*.conf on ISO 9660 Fixes: 094afd169a0ff871eb7a6b37d68a9b9bcb7195e4 ("mkarchiso: support %ARCHISO_UUID% variable in boot loader configuration")
2023-12-09configs/*/airootfs/etc/systemd/network/: add RequiredForOnline=routablenl6720
By default systemd-networkd-wait-online.service considers a network connection to be "online" when it has reached the "degraded" state (see networkctl(1) for the definitions). Since "degraded" does not ensure there's a routable address, let's change the connection's requirement to "routable" instead. This gives a better chance that the network really is online when network-online.target is reached.
2023-12-08Merge remote-tracking branch 'origin/merge-requests/355'nl6720
By John Lane * origin/merge-requests/355: update changelog Allow download automated script using TFTP See merge request https://gitlab.archlinux.org/archlinux/archiso/-/merge_requests/355
2023-12-07update changelogJohn Lane
2023-12-07Allow download automated script using TFTPJohn Lane
2023-12-07Merge remote-tracking branch 'origin/merge-requests/353'nl6720
By Anton Hvornum * origin/merge-requests/353: Ensured the correct CA key and CA certificate is used during signing process. It's been working based on default assumptions from the openssl configuration, but it's worth being explicit when doing these operations. Also removed a redundant -sha256 See merge request https://gitlab.archlinux.org/archlinux/archiso/-/merge_requests/353
2023-12-07Ensured the correct CA key and CA certificate is used during signing ↵Anton Hvornum
process. It's been working based on default assumptions from the openssl configuration, but it's worth being explicit when doing these operations. Also removed a redundant -sha256
2023-12-07.gitlab/ci/build_archiso.sh: do not use "default" as the gpg Key-Typenl6720
GnuPG changed their default from RSA to ECC, so Key-Length not a thing it supports. Instead it asks for the Key-Curve. Avoid using the default and hardcode ed25519 (which is the current GnuPG default).
2023-12-01Merge remote-tracking branch 'origin/merge-requests/351'nl6720
By kojq su * origin/merge-requests/351: add bcachefs-tools See merge request https://gitlab.archlinux.org/archlinux/archiso/-/merge_requests/351
2023-12-01add bcachefs-toolskojq su
2023-09-29Add changelog for 73nl6720
2023-09-29Add configs/baseline/airootfs/etc/localtimenl6720
Make sure the ISO can be booted successfully without triggering questions from systemd-firstboot. Fixes https://gitlab.archlinux.org/archlinux/archiso/-/issues/205 Fixes: 6e1be91961967a6485901ac431f6f6b06675b750 ("archiso/mkarchiso: write "uninitialized" to /etc/machine-id")
2023-09-28mkarchiso: always create /boot/grub/grubenv and /boot/grub/loopback.cfgnl6720
Even if GRUB is not used as a boot loader for the ISO, create a `/boot/grub/grubenv` file in the ISO 9660 file system. If a `loopback.cfg` file exists in the profile's `grub` directory, copy it to `/boot/grub/loopback.cfg` on the ISO. This ensures the funtionality will not be lost if the used boot loaders are changed.
2023-09-28Add configs/*/grub/loopback.cfgnl6720
See https://www.supergrubdisk.org/wiki/Loopback.cfg for details. Only `${iso_path}` is guaranteed, so we need to search for the volume, on which the ISO file resides, ourselves. Implements https://gitlab.archlinux.org/archlinux/archiso/-/issues/165
2023-09-28configs/*/grub/grub.cfg: do not hardcode the architecture and platformnl6720
Construct a human readable platform identifier from GRUB's built-in variables and use it in menu item descriptions. Only add the menu entries for the additional tools (UEFI shell, Memtest86+) if the files exist. Modify baseline's `grub.cfg` to closer match releng.
2023-09-28configs/releng/grub/grub.cfg: play init tune at the endnl6720
Move the `play` command to the end of the file so it plays after the menu entries are shown and ready.
2023-09-28configs/*/grub/grub.cfg: rearrange module loadingnl6720
* Do not manually load modules that will get loaded by invoking a command. * Explicitly load serial modules. * Move `insmod all_video` after the font is loaded.
2023-09-24mkarchiso: add uefi-ia32.systemd-boot.esp and ↵nl6720
uefi-ia32.systemd-boot.eltorito boot modes The systemd 254.2-1 package ships with IA32 systemd-boot, so it is possible to use for booting on IA32 UEFI. Perhaps they will be useful in the future. At least for now, the baseline and releng profiles are not changed to use them. When the issues and headaches caused with GRUB reach a critical point, then we will switch.
2023-09-24configs/releng/packages.x86_64: add boltnl6720
bolt can be used to list and authorize Thunderbolt and USB4 devices. Inspired by https://bbs.archlinux.org/viewtopic.php?id=288731 where a user needed to install the package in the live environment.
2023-08-29Add changelog for 72nl6720
2023-08-29Use pcsclite for communicating with OpenPGP smartcardsDavid Runge
As opgpcard uses pcsclite and gnupg is able to use it as well, switch away from using gnupg's internal ccid driver.
2023-08-29Add sequoia-sq and openpgp-card-tools to releng profileDavid Runge
2023-08-26/etc/ssh/sshd_config.d/10-archiso.conf: keep only the modified optionsnl6720
The only changes we make to the default are to enable root login via a password. While `PasswordAuthentication yes` is the default, let's set it explicitly to avoid potential issues in the future.
2023-08-26Move custom sshd_config to /etc/ssh/sshd_config.d/nl6720
openssh 9.4p1-2 changed /etc/ssh/sshd_config to add support for drop-in files in /etc/ssh/sshd_config.d/. Using drop-in files avoids needing to keep up with changes to the default /etc/ssh/sshd_config.
2023-08-26configs/releng/packages.x86_64: add tpm2-toolsnl6720
The tools are useful for clearing, creating and reading keys and etc. on the TPM.
2023-08-21Remove qemu-headless from list of dependencies in GitLab CIDavid Runge
Remove qemu-headless since it is no longer needed to build the project and is also no longer provided by qemu-base.
2023-08-11Set IPv6PrivacyExtensions=yes in global systemd-netorkd configurationnl6720
Since systemd 245, IPv6PrivacyExtensions can be set not just per connection, but also globally for all connection with a configuration file in /etc/systemd/network.conf.d/.
2023-08-05configs/releng/airootfs/etc/systemd/system/etc-pacman.d-gnupg.mount: use ↵nl6720
tmpfs with noswap option Since tmpfs has a `noswap` option, use it instead of ramfs. Unlike ramfs, tmpfs has a limit to its size. This reverts commit 09b0428128700f37bd465eb54c6e45f69c17617d ("configs/releng/airootfs/etc/systemd/system/etc-pacman.d-gnupg.mount: use ramfs").
2023-08-02.gitlab/ci/build_archiso.sh: create a valid code signing certificatenl6720
Make sure the certificate has a extendedKeyUsage section with codeSigning per the iPXE requirements. Fixes #195
2023-08-02.gitlab/ci/build_archiso.sh: improve CI codesigning certificatenl6720
Adjust subject name to more closely match what's used in create_ephemeral_pgp_key. Reduce the certificate validity to two days. These are just temporary certificates, they will not be used anywhere. Fixes #196
2023-06-21configs/*/airootfs/etc/mkinitcpio.conf.d/archiso.conf: remove comments and ↵nl6720
unused options Set only the custom values for HOOKS and COMPRESSION.
2023-06-21configs/: move custom mkinitcpio.conf files to /etc/mkinitcpio.conf.d/nl6720
This allows to retain a pristine /etc/mkinitcpio.conf in the rootfs.
2023-06-15Fix optional shellcheck warningsnl6720
Additionally fix a few code style issues found with shfmt.
2023-06-15.shellcheckrc: enable optional checksnl6720
* Suggest explicitly using -n in `[ $var ]`. https://www.shellcheck.net/wiki/SC2243 & https://www.shellcheck.net/wiki/SC2244 * Suggest 'command -v' instead of 'which'. https://www.shellcheck.net/wiki/SC2230 * Suggest quoting variables without metacharacters. https://www.shellcheck.net/wiki/SC2248 * Require [[ and warn about [ in Bash/Ksh. https://www.shellcheck.net/wiki/SC2292
2023-06-15mkarchiso: prevent interference from xorriso startup filesnl6720
Options set in xorriso startup files (~/.xorrisorc) could interfere with the xorriso command run by mkarchiso. For example, if ~root/.xorrisorc contains -dummy on, then the ISO file will be empty. Pass -no_rc as the first option to xorriso to prevent interference and unintended behavior. Fixes #153.
2023-06-01mkarchiso: run _cms_sign_artifact only oncenl6720
Since `_build_buildmode_netboot` runs `_build_iso_base` which runs `_prepare_airootfs_image`, the call to `_cms_sign_artifact` in `_build_buildmode_netboot` can be removed. Fixes #197

Copyright © 2002-2022 Judd Vinet and Aaron Griffin. Copyright © 2022 Erich Eckner.
The Arch Linux name and logo are recognized trademarks. Some rights reserved. The registered trademark Linux® is used pursuant to a sublicense from LMI, the exclusive licensee of Linus Torvalds, owner of the mark on a world-wide basis.