First commit

mkiso

@@ -0,0 +1,158 @@
+#!/usr/bin/env bash
+set -e
+
+# Insert SSH keys here
+sshkeys=''
+
+# Fill in iso output directory
+isopath=
+
+# Exit if run without sudo
+if [ ${EUID} -ne 0 ]
+then
+    echo "Please run as root"
+    exit 1
+fi
+
+# Exit if directory doesn't exist
+if ! [ -d ${isopath}/ ]
+then
+    echo "ISO output path isn't specified"
+    exit 1
+fi
+
+# Create work directory
+workdir=$(mktemp -d)
+cd ${workdir}/
+
+clear
+
+# Download latest releng profile
+echo "$(tput setaf 4)$(tput bold):: Downloading necessary files$(tput sgr0)"
+curl --fail -s https://git.myvelabs.com/mirrors/archiso/archive/master.tar.gz | tar xz -C .
+rsync -a ./archiso/configs/releng ./ --exclude '*reflector*'
+rm -r ./archiso/
+
+# Tweak releng profile
+# Create directories
+mkdir -p ./releng/airootfs/var/lib/iwd
+mkdir -p ./releng/airootfs/etc/wireguard
+
+# Download essential arch scripts
+curl --fail -s -L https://git.myvelabs.app/lab/archlinux/raw/branch/master/installer.sh >./releng/airootfs/usr/local/bin/installer
+curl --fail -s -L https://git.myvelabs.app/lab/archlinux/raw/branch/master/recover.sh >./releng/airootfs/usr/local/bin/recover
+
+# IWD connector
+curl --fail -s -L https://git.myvelabs.app/lab/archiso/raw/branch/master/iwd-connect >./releng/airootfs/usr/local/bin/iwd-connect
+
+# ~/.zshrc
+curl --fail -s -L https://git.myvelabs.app/lab/archiso/raw/branch/master/zshrc >./releng/airootfs/root/.zshrc
+
+# Copy mirrorlist
+cp /etc/pacman.d/mirrorlist ./releng/airootfs/etc/pacman.d/
+
+# Custom pacman.conf
+sed -i \
+  -e '/Color/c\Color' \
+  -e '/ParallelDownloads/c\ParallelDownloads = 10' \
+  ./releng/pacman.conf
+
+# SSH
+echo 'PasswordAuthentication no
+AuthenticationMethods publickey' >./releng/airootfs/etc/ssh/sshd_config.d/zz-archiso.conf
+mkdir -p ./releng/airootfs/root/.ssh
+echo "${sshkeys}" >./releng/airootfs/root/.ssh/authorized_keys
+
+# Remove livecd
+find ./releng/ -type f -iname "*livecd*" -exec rm -r -f {} \;
+
+# Modify packages.x86_64
+echo 'bash-completion
+yubikey-personalization
+yubikey-full-disk-encryption
+wireguard-tools' >>./releng/packages.x86_64
+sed -i 's/^livecd-sounds/#&/' ./releng/packages.x86_64
+
+# # permissions for profiledef.sh
+sed -i '/livecd-sound/d' ./releng/profiledef.sh
+sed -i 's#^)$#  ["/usr/local/bin/recover"]="0:0:755"\
+  ["/usr/local/bin/installer"]="0:0:755"\
+  ["/usr/local/bin/iwd-connect"]="0:0:755"\
+  ["/var/lib/iwd"]="0:0:0700"\
+  ["/etc/wireguard/"]="0:0:0700"\
+&#' ./releng/profiledef.sh
+
+# Tweak /etc/motd
+sed -i 's/iwctl/iwd-connect/' ./releng/airootfs/etc/motd
+
+# Show IP address at login
+sed -i 's#\[Service\]#&\
+ExecStartPre=/bin/sh -c '\''sed -i 1q /etc/issue; echo >> /etc/issue; if ping -q -c 1 -W 3 1.1.1.1 >/dev/null; then sed -i "/Arch Linux/a Local IP: $(ip r | awk "{print \\$(NF-2);exit}")" /etc/issue; fi'\''#' ./releng/airootfs/etc/systemd/system/getty@tty1.service.d/autologin.conf
+
+# Bootloader modifications
+# Systemd-boot
+sed -i 's/beep on/#&/' ./releng/efiboot/loader/loader.conf
+sed -i 's/timeout 15/timeout 5/' ./releng/efiboot/loader/loader.conf
+mv ./releng/efiboot/loader/entries/02-archiso-x86_64-speech-linux.conf ./releng/efiboot/loader/entries/02-archiso-x86_64-ram-linux.conf
+sed -i 's/) with speech/, Copy to RAM)/' ./releng/efiboot/loader/entries/02-archiso-x86_64-ram-linux.conf
+sed -i 's/accessibility=on/copytoram/' ./releng/efiboot/loader/entries/02-archiso-x86_64-ram-linux.conf
+
+# Grub
+sed -i 's/timeout=15/timeout=5/' ./releng/grub/grub.cfg
+sed -i 's/play 600 988 1 1319 4/#&/' ./releng/grub/grub.cfg
+sed -i 's/with speakup screen reader/Copy to RAM/' ./releng/grub/grub.cfg
+sed -i 's/timeout=15/timeout=5/' ./releng/grub/loopback.cfg
+sed -i 's/with speakup screen reader/Copy to RAM/' ./releng/grub/loopback.cfg
+sed -i 's/archlinux-accessibility/archlinux-copy-to-ram/' ./releng/grub/grub.cfg
+sed -i 's/accessibility=on/copytoram/' ./releng/grub/grub.cfg
+
+# Syslinux
+sed -i 's/TIMEOUT 150/TIMEOUT 50/' ./releng/syslinux/archiso_sys.cfg
+sed -i 's/# Accessibility/# Copy to RAM/' ./releng/syslinux/archiso_sys-linux.cfg
+sed -i 's/arch64speech/arch64ram/' ./releng/syslinux/archiso_sys-linux.cfg
+sed -i 's/speakup screen reader/Copy to RAM option/' ./releng/syslinux/archiso_sys-linux.cfg
+sed -i 's/ with speech feedback//' ./releng/syslinux/archiso_sys-linux.cfg
+sed -i 's/) with ^speech/, Copy to RAM)/' ./releng/syslinux/archiso_sys-linux.cfg
+sed -i 's/accessibility=on/copytoram/' ./releng/syslinux/archiso_sys-linux.cfg
+
+# vconsole.conf
+echo 'KEYMAP=us
+FONT=ter-224n' >./releng/airootfs/etc/vconsole.conf
+
+# Install ZFS
+case ${1} in
+    zfs)
+        cat >>./releng/pacman.conf <<'zfs'
+
+[archzfs]
+Server = https://archzfs.com/$repo/$arch
+zfs
+        mkdir -p ./releng/airootfs/usr/share/pacman/keyrings
+        curl --fail -s -L https://git.myvelabs.app/lab/archiso/raw/branch/master/zfs/archzfs-trusted >./releng/airootfs/usr/share/pacman/keyrings/archzfs-trusted
+        curl --fail -s -L https://git.myvelabs.app/lab/archiso/raw/branch/master/zfs/archzfs.gpg >./releng/airootfs/usr/share/pacman/keyrings/archzfs.gpg
+        echo 'archzfs-linux' >>./releng/packages.x86_64
+        ;;
+esac
+
+# Custom pacman.conf
+sed -e '/^#\|^$\|IgnorePkg/d' \
+    -e "/^\[core\]$\|^\[extra\]$\|^\[archzfs\]$/a\\
+CacheServer = https://pacman.myvelabs.com" \
+    /etc/pacman.conf >./releng/airootfs/etc/pacman.conf
+
+# Begin mkarchiso
+if mkarchiso -v -w ./workdir -o ./output ./releng -r
+then
+    case ${1} in
+        zfs)
+            rename -- "archlinux" "archzfs" ./output/*
+            ;;
+        *)
+            rename -- ".iso" "${version}.iso" ./output/*
+            ;;
+    esac
+
+    mv ./output/*.iso ${isopath}/
+    cd ~
+    rm -r -f /tmp/tmp.*/
+fi