Send patches - preferably formatted by git format-patch - to patches at archlinux32 dot org.
summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2023-08-29Use pcsclite for communicating with OpenPGP smartcardsDavid Runge
As opgpcard uses pcsclite and gnupg is able to use it as well, switch away from using gnupg's internal ccid driver.
2023-08-29Add sequoia-sq and openpgp-card-tools to releng profileDavid Runge
2023-08-26/etc/ssh/sshd_config.d/10-archiso.conf: keep only the modified optionsnl6720
The only changes we make to the default are to enable root login via a password. While `PasswordAuthentication yes` is the default, let's set it explicitly to avoid potential issues in the future.
2023-08-26Move custom sshd_config to /etc/ssh/sshd_config.d/nl6720
openssh 9.4p1-2 changed /etc/ssh/sshd_config to add support for drop-in files in /etc/ssh/sshd_config.d/. Using drop-in files avoids needing to keep up with changes to the default /etc/ssh/sshd_config.
2023-08-26configs/releng/packages.x86_64: add tpm2-toolsnl6720
The tools are useful for clearing, creating and reading keys and etc. on the TPM.
2023-08-21Remove qemu-headless from list of dependencies in GitLab CIDavid Runge
Remove qemu-headless since it is no longer needed to build the project and is also no longer provided by qemu-base.
2023-08-11Set IPv6PrivacyExtensions=yes in global systemd-netorkd configurationnl6720
Since systemd 245, IPv6PrivacyExtensions can be set not just per connection, but also globally for all connection with a configuration file in /etc/systemd/network.conf.d/.
2023-08-05configs/releng/airootfs/etc/systemd/system/etc-pacman.d-gnupg.mount: use ↵nl6720
tmpfs with noswap option Since tmpfs has a `noswap` option, use it instead of ramfs. Unlike ramfs, tmpfs has a limit to its size. This reverts commit 09b0428128700f37bd465eb54c6e45f69c17617d ("configs/releng/airootfs/etc/systemd/system/etc-pacman.d-gnupg.mount: use ramfs").
2023-08-02.gitlab/ci/build_archiso.sh: create a valid code signing certificatenl6720
Make sure the certificate has a extendedKeyUsage section with codeSigning per the iPXE requirements. Fixes #195
2023-08-02.gitlab/ci/build_archiso.sh: improve CI codesigning certificatenl6720
Adjust subject name to more closely match what's used in create_ephemeral_pgp_key. Reduce the certificate validity to two days. These are just temporary certificates, they will not be used anywhere. Fixes #196
2023-06-21configs/*/airootfs/etc/mkinitcpio.conf.d/archiso.conf: remove comments and ↵nl6720
unused options Set only the custom values for HOOKS and COMPRESSION.
2023-06-21configs/: move custom mkinitcpio.conf files to /etc/mkinitcpio.conf.d/nl6720
This allows to retain a pristine /etc/mkinitcpio.conf in the rootfs.
2023-06-15Fix optional shellcheck warningsnl6720
Additionally fix a few code style issues found with shfmt.
2023-06-15.shellcheckrc: enable optional checksnl6720
* Suggest explicitly using -n in `[ $var ]`. https://www.shellcheck.net/wiki/SC2243 & https://www.shellcheck.net/wiki/SC2244 * Suggest 'command -v' instead of 'which'. https://www.shellcheck.net/wiki/SC2230 * Suggest quoting variables without metacharacters. https://www.shellcheck.net/wiki/SC2248 * Require [[ and warn about [ in Bash/Ksh. https://www.shellcheck.net/wiki/SC2292
2023-06-15mkarchiso: prevent interference from xorriso startup filesnl6720
Options set in xorriso startup files (~/.xorrisorc) could interfere with the xorriso command run by mkarchiso. For example, if ~root/.xorrisorc contains -dummy on, then the ISO file will be empty. Pass -no_rc as the first option to xorriso to prevent interference and unintended behavior. Fixes #153.
2023-06-01mkarchiso: run _cms_sign_artifact only oncenl6720
Since `_build_buildmode_netboot` runs `_build_iso_base` which runs `_prepare_airootfs_image`, the call to `_cms_sign_artifact` in `_build_buildmode_netboot` can be removed. Fixes #197
2023-05-28Add changelog for 71 and update AUTHORS.rstnl6720
2023-05-25Update configs/{baseline,releng}/pacman.confnl6720
Update pacman.conf to match the one shipped with pacman 6.0.2-7. The community repository is gone. See https://archlinux.org/news/git-migration-completed/
2023-05-25Merge remote-tracking branch 'origin/merge-requests/330'nl6720
By Sorin Pânca * origin/merge-requests/330: Add support for mDNS. See merge request https://gitlab.archlinux.org/archlinux/archiso/-/merge_requests/330
2023-05-22Add support for mDNS.Sorin Pânca
2023-05-17mkarchiso: add a -r option to delete the working directorynl6720
`-r` will instruct to delete the working directory at the end of a `mkarchiso` run. If the specified directory already exists, then it will not be deleted and instead produce a warning. Implements #211
2023-05-17Merge remote-tracking branch 'origin/merge-requests/327'nl6720
By 2hexed * origin/merge-requests/327: Update mkarchiso Fixed a little typo in install_dir's description See merge request https://gitlab.archlinux.org/archlinux/archiso/-/merge_requests/327
2023-05-17Update mkarchiso2hexed
2023-05-17CHANGELOG.rst: remove stray git conflict markernl6720
Fixes 8cc0e9e5b09d504a50701a825f0ab9992ed73b6f
2023-05-17configs/releng/packages.x86_64: add more terminfo packagesnl6720
Add foot-terminfo and wezterm-terminfo packages to allow using their terminfo entries for installations via SSH.
2023-05-17README.profile.rst: document %ARCHISO_UUID% and %ARCHISO_SEARCH_FILENAME%nl6720
While their values are not affected by `profiledef.sh` variables, there is no other place to document these *identifiers*.
2023-05-17mkarchiso: read SOURCE_DATE_EPOCH from file earlynl6720
When restarting an interrupted build, SOURCE_DATE_EPOCH needs to be available before `profiledef.sh` is read, since it may reference it. Fixes 7c6f266ec94e3eff23466ed8d0c45e4bee0ddae4
2023-05-17Use UUIDs in all boot loader configuration filesnl6720
Relying on the volume UUID instead of its LABEL avoids collisions of multiple ISOs created in the same month. Fixes #202
2023-05-17mkarchiso: support %ARCHISO_UUID% variable in boot loader configurationnl6720
It will be replaced with the ISO's modification date in UTC, i.e. its "UUID". This allows to replace `archisolabel=%ARCHISO_LABEL%` with `archisodevice=UUID=%ARCHISO_UUID%` in boot loader configurations. Related to #202
2023-05-17Merge remote-tracking branch 'origin/merge-requests/325'nl6720
By shivanandvp * origin/merge-requests/325: mkarchiso: Fix the cp command arguments to retain mkarchiso's behavior prior to the GNU Coreutils update. Fixes Issue #214 See merge request https://gitlab.archlinux.org/archlinux/archiso/-/merge_requests/325
2023-05-17mkarchiso: Fix the cp command arguments to retain mkarchiso's behavior prior ↵shivanandvp
to the GNU Coreutils update. Fixes Issue #214
2023-05-17Merge remote-tracking branch 'origin/merge-requests/322'nl6720
By Antonio V * origin/merge-requests/322: Fixed subdirectories copy from grub/ to the ISO Subdirectories from grub/ are copied to the ISO Fixes https://gitlab.archlinux.org/archlinux/archiso/-/issues/215 See merge request https://gitlab.archlinux.org/archlinux/archiso/-/merge_requests/322
2023-05-16Merge branch 'd3vil0per-master-patch-56859' into 'master'David Runge
Added classes for Memtest86+ and UEFI Shell menuentries See merge request archlinux/archiso!323
2023-05-14Added classes for Memtest86+ and UEFI Shell menuentriesAntonio V
2023-05-14Fixed subdirectories copy from grub/ to the ISOAntonio V
2023-05-14Added classes for Memtest86+ and UEFI Shell menuentriesAntonio V
2023-05-14Subdirectories from grub/ are copied to the ISOAntonio V
2023-05-13Merge remote-tracking branch 'origin/merge-requests/235'nl6720
By Zig Globulin * origin/merge-requests/235: wait for networkd online before curl invocation See merge request https://gitlab.archlinux.org/archlinux/archiso/-/merge_requests/235
2023-03-17configs/baseline/profiledef.sh: compress morenl6720
* Use LZMA extreme compression level, * enable experimental compressed fragments feature to create a smaller image, * enable experimental data deduplication. This decreases the baseline profile's `airootfs.erofs` size by about ~16 MiB.
2023-03-02wait for networkd online before curl invocationZig Globulin
1) wait for network-online.target before invoking curl as there's no synchronization with network setup for this script 2) don't hide curl errors - it may be easier to debug the issues 3) add log and comments
2023-02-27Add changelog for 70nl6720
2023-02-27Add changelog entry for terminal_output fixDavid Runge
2023-02-27Use console as grub's terminal_outputDavid Runge
configs/{baseline,releng}/grub/grub.cfg: Use `console` as grub's `terminal_output`, as with `gfxterm` only a blank screen is shown on some hardware. Fixes #212
2023-02-24configs/*/grub/grub.cfg: replace /dev/disk/by-uuid/ with UUID=nl6720
Use the shorter and more nicer looking `UUID=` *tags* instead of the `/dev/disk/by-uuid/` paths. This requires mkinitcpio-archiso v68. Related to #202
2023-02-24README.transfer.rst: update instructionsnl6720
Convert the file to reStructuredText markup. Fixes #39. Rewrite the instructions where possible or otherwise update them. E.g. fix the changed boot loader paths, etc. The "Manual formatting (BIOS only)", previosly "PC-BIOS (ISOHYBRID-MBR)", method is not tested and it is not clear if it still even works.
2023-02-24Rename docs/README.transfer to docs/README.transfer.rstnl6720
2023-02-24Move SYSLINUX directory from /syslinux/ to /boot/syslinux/nl6720
This allows to reduce the number of top-level directories by one and matches with the GRUB directory move. Most boot loader related things will now be in the /boot/ directory. Fixes #207
2023-02-24Move the .uuid file to /boot/grub/YYYY-mm-dd-HH-MM-SS-00.uuidnl6720
To prevent the file from being accidentally missed when someone copies the ISO's contents, let's not place it in a directory that starts with a dot. Since all GRUB related files are in /boot/grub/, put it there too. Instead of using a more unique UUID for the file name, use `YYYY-mm-dd-HH-MM-SS-00.uuid` which matches the ISO's modification date in UTC,i.e. its "UUID". If multiple ISOs would be generated in the exact same second, the ISO 9660 modification date (i.e. its "UUID") would be the same, so there would be not way to distinguish between the volumes anyway. This also makes the file look less suspicious to the casual glance.
2023-02-24mkarchiso: write grubenv in _make_common_bootmode_grub_cfgnl6720
Add all variables that we replace with values in configuration files. Keep `${isofs_dir}/${install_dir}/grubenv` with fewer variables for backwards compatibility. It will be removed in the future.
2023-02-22configs/*/grub/grub.cfg: reuse ARCHISO_HINT and ARCHISO_UUID passed from the ↵nl6720
embedded grub.cfg The `grub.cfg` embedded in the GRUB binaries already sets `ARCHISO_HINT` and `ARCHISO_UUID` in most cases. To avoid performing the same searches multiple times, use the existing variables.

Copyright © 2002-2022 Judd Vinet and Aaron Griffin. Copyright © 2022 Erich Eckner.
The Arch Linux name and logo are recognized trademarks. Some rights reserved. The registered trademark Linux® is used pursuant to a sublicense from LMI, the exclusive licensee of Linus Torvalds, owner of the mark on a world-wide basis.