Commit Graph

48 Commits

Author SHA1 Message Date
Franco Fichtner 86c0bd3fcc build: sign uncompressed images instead of compressed ones; closes #386
Best of both worlds: let the checksums be a quick way to verify the
download but offer full integrity using the signatures for the uncompressed
images in case the uncompress is buggy.
2023-11-20 11:08:37 +01:00
Franco Fichtner 84aefa59b0 config: support UEFI in serial images, off by default for now; closes #138
While here switch images to UFS2.
2021-01-07 15:58:47 +01:00
Franco Fichtner 378b321ef2 build/nano: noatime as per forum mention 2020-03-17 08:50:14 +01:00
Franco Fichtner af7a5ac7cc nano: well, these go to 400000 2019-05-16 14:50:45 +02:00
Franco Fichtner 0657a0ae47 build/nano: increase free inode count by 250k
PR: https://forum.opnsense.org/index.php?topic=12639.0
2019-05-13 05:58:04 +02:00
Franco Fichtner 2fb26bf14e build/nano: disable TRIM by default
PR: https://github.com/opnsense/core/issues/2357
2018-04-14 19:05:42 +02:00
Franco Fichtner 73087ffce2 build: revert some changes to serial/nano 2017-10-10 15:55:35 +02:00
Franco Fichtner 34cd5f0be9 build: flip args
PR: 3f85f895e3 (commitcomment-24399640)
2017-09-19 11:48:22 +02:00
Franco Fichtner 3f85f895e3 build/arm: sensible changes, some consolidation in other images 2017-09-05 06:14:01 +02:00
Franco Fichtner c56ebd53c9 build/arm: finish cross-building image, assorted cleanups 2017-09-03 12:36:50 +02:00
Franco Fichtner b721d322ab build: write nano like serial, refactor LABEL handling 2017-08-31 07:55:35 +02:00
Franco Fichtner 0798736ee8 build/nano: small tweaks, label with "_" doesn't work here 2017-08-21 08:57:28 +02:00
Franco Fichtner 3bf08a3cef build/nano: annotate Nano variety in root label 2017-07-29 21:11:11 +02:00
Franco Fichtner d78e69138a build: add image signatures via openssl digest 2017-07-24 09:07:23 +02:00
Franco Fichtner df43aa9126 build: fix argument scrubbing, remove obsolete gettext-tools from core 2017-04-27 19:14:36 +02:00
Franco Fichtner c2a36b5418 build/nano: 3.5G fits, but leaves no room for growfs...
So: shink the partition again, saving a bit more in the final
images.  We get that space back anyway.  :)
2016-12-05 00:00:50 +01:00
Franco Fichtner f81bf3d296 build/nano: brave early tester said too big for some SD cards
Let's tone this down considerably, we have growfs to fix this
afterwards anyway.
2016-12-03 22:17:51 +01:00
Franco Fichtner 54fa4c1dc7 build/nano: complete revamp leaving NanoBSD behind
Images are clamped to just under 4G with a single slice
in a hybrid manner of vm/serial images.  This should
provide wide compatibility and fit any 4G card, and can
then be expanded to whatever we really have using growfs.

Smaller images are possible too, but not recommended due
to the fact that firmware upgrades need to be downloaded
and extracted.  We could make 2G the new default, but
future size requirements and a steady 4G image seem like
a more favourable goal in the long term.
2016-12-02 21:24:10 +01:00
Franco Fichtner 078288e85e Revert "build/nano: try UFS2"
This reverts commit 811b421432.
2016-11-30 22:22:51 +01:00
Franco Fichtner 5213355727 build: split nano and serial configs
Serial is better off being serial-only, while we keep nano in a
split mode for now...

PR: https://github.com/opnsense/core/issues/1101
2016-08-02 23:58:37 +02:00
Franco Fichtner 20517931c8 build: introduce PRODUCT_ARCH for cross-building 2016-07-17 15:47:49 +02:00
Franco Fichtner f4f7723881 build: migrate serial handling used by nano and serial image
Can now set SPEED=115200 during the build step for maximum flexibility.
2016-05-23 22:06:57 +02:00
Franco Fichtner 7576ae0816 build: remember image progress 2016-05-21 11:54:42 +02:00
Franco Fichtner 9aa9108ae5 build: stagify remaining pieces
This will not taint the build system except for the final
sets and image dirs.  Helps in keeping the build system
clean and that it's easier to inspect the build step.

While there, expand chroot to take a subdir argument as
some build steps need the STAGEDIR root for more than a
single purpose.
2016-05-21 10:43:10 +02:00
Franco Fichtner 3ca6d0cd5d build: add extras.conf with per-type hook, idea by @lattera; closes #30 2016-05-05 17:33:56 +02:00
Franco Fichtner c0f3dbb3fa build: self-awareness for all scripts, needed for #30 2016-05-05 17:11:45 +02:00
Franco Fichtner 811b421432 build/nano: try UFS2 2016-04-02 22:09:18 +02:00
Franco Fichtner ed1ba8be37 build: source SERIAL_* variables from common 2016-03-30 18:25:43 +02:00
Franco Fichtner 4b9bde5a90 build: add setup_entropy idea by @lattera the FreeBSD way 2016-02-04 21:55:29 +01:00
Franco Fichtner 23fda3eec1 build: make images behave a little more like the rest of the system
Build only one at a time by cleaning up the old one individually.
While there, update the README to reflect reality.
2016-01-20 17:45:36 +01:00
Franco Fichtner e093cc884c build: allow type to be overridden; fixes #19
Building has gotten pretty complicated with the introduction
of opnsense-devel pacakges, which will be further complicated
by doing opnsense-stable soon enough...

This needs more smarts, but for now the README works again.
This only affects image builds.
2015-09-09 15:58:42 +02:00
Franco Fichtner 5882708366 nano: switch to generic so that space is allocated more cautiously 2015-08-19 08:25:25 +02:00
Franco Fichtner d336a8b6cc nano: disable MBR integrity check 2015-08-13 15:37:25 +02:00
Franco Fichtner aca6c42a29 nano: expand to 4GB 2015-08-13 09:25:00 +02:00
Franco Fichtner 7609ad116d build: time spent in vain, images don't adapt to boot settings 2015-05-23 12:57:59 +02:00
Franco Fichtner 93940239b2 build: using -P did not go as expected, revert to working state 2015-05-22 19:06:04 +02:00
Franco Fichtner 1ae0487e3d build: scrub it like you mean it
common.sh eats up the arguments via getopts, but on return to the parent
script the arguments are restored.  To adapt the argument scrubbing to
the actual number of arguments eaten we'll sprinkle a bit of arcane shell
magic around and hope for the best.
2015-05-16 12:50:50 +02:00
Franco Fichtner 35068a9393 build: remove execution bits, not meant to be handled manually 2015-05-16 12:39:09 +02:00
Franco Fichtner 1a0793ea6f build: nope vt(4); boot serial via probe; moar style 2015-05-07 14:07:03 +02:00
Franco Fichtner 4cd200bf9b build: use vt(4) in all images; gonna be a default anyway 2015-05-07 11:55:08 +02:00
Franco Fichtner 020d1eac63 build: always bootstrap target directories 2015-05-07 08:37:22 +02:00
Franco Fichtner da79c50876 build: softcode PRODUCT_NAME where we can 2015-05-07 08:11:21 +02:00
Franco Fichtner bc26671c13 build: serial images are serial-only now; fixes #6 2015-05-06 23:34:34 +02:00
Franco Fichtner d20d609c4e build: don't hardcode repo flavour link anymore
Not competely sane, but we're getting there step by step.
2015-05-06 20:48:16 +02:00
Franco Fichtner 6dfb52d265 build: CONFIG_XML should be general knowledge *salutes*
Also enables `use_mfs_tmpvar' by default on the NanoBSD images.
2015-04-27 22:40:14 +02:00
Franco Fichtner 348acea6ca build/nano: easier to pass all vars as args to function 2015-04-23 20:57:50 +02:00
Franco Fichtner d6c042d3fe build/nano: upon further reflection a second slice does no harm 2015-04-23 20:47:48 +02:00
Franco Fichtner 5aadb13689 build/nano: first pass for embedded images; fixes #5
Builds an image that loads in bhyve, but might still need some more
tweaking.  We don't have two slices.  I am not sure if they'll be
back soon.  Not sure if these images are ready for release as well,
but at least now we have the script for providing initial snapshots.
2015-04-23 18:48:57 +02:00