Raspi-image-spec/raspi3.yaml

140 lines
4.7 KiB
YAML
Raw Normal View History

2017-10-08 21:18:48 +01:00
# See https://wiki.debian.org/RaspberryPi3 for known issues and more details.
steps:
- mkimg: "{{ output }}"
size: 1500M
- mklabel: msdos
device: "{{ output }}"
- mkpart: primary
fs-type: 'fat32'
device: "{{ output }}"
start: 0%
end: 20%
part-tag: boot-part
- mkpart: primary
device: "{{ output }}"
start: 20%
end: 100%
part-tag: root-part
- mkfs: vfat
partition: boot-part
label: raspiboot
2017-10-08 21:18:48 +01:00
- mkfs: ext4
partition: root-part
label: raspiroot
2017-10-08 21:18:48 +01:00
- mount: root-part
fs-tag: root-fs
- mount: boot-part
mount-on: root-fs
dirname: '/boot/firmware'
fs-tag: boot-fs
# We need to use Debian buster (currently testing) instead of Debian stretch
# (currently stable) for:
#
# linux ≥ 4.14
2017-10-08 21:18:48 +01:00
# Which includes the sdhost driver for faster SD card access and making the
# WiFi chip available, and has the WiFi driver enabled.
2017-10-08 21:18:48 +01:00
#
# raspi3-firmware ≥ 1.20171201-1
2017-10-08 21:18:48 +01:00
# Which includes a recent enough firmware version to correctly pass the MAC
# address to the kernel. This is a regression with Linux ≥ 4.12, see
# https://github.com/raspberrypi/firmware/issues/846
# Also, this package contains a Raspberry Pi 3-specific firmware file
# required by the WiFi driver.
2017-10-08 21:18:48 +01:00
- qemu-debootstrap: buster
mirror: http://deb.debian.org/debian
2017-10-08 21:18:48 +01:00
target: root-fs
arch: arm64
components:
- main
- contrib
- non-free
# TODO(https://bugs.debian.org/877855): remove this workaround once
# debootstrap is fixed
- chroot: root-fs
shell: |
echo 'deb http://deb.debian.org/debian buster main contrib non-free' > /etc/apt/sources.list
2017-10-08 21:18:48 +01:00
apt-get update
- apt: install
packages:
- ssh
- parted
2017-10-08 21:18:48 +01:00
- dosfstools
# Contains /lib/firmware/brcm/brcmfmac43430-sdio.bin (required for WiFi).
- firmware-brcm80211
- wireless-tools
- wpasupplicant
fs-tag: root-fs
# TODO: install raspi3-firmware and linux-image-arm64 from buster once they
# migrated in sufficiently recent versions.
- chroot: root-fs
shell: |
echo 'deb http://deb.debian.org/debian unstable main contrib non-free' >> /etc/apt/sources.list
echo 'deb http://deb.debian.org/debian experimental main contrib non-free' >> /etc/apt/sources.list
2017-10-08 21:18:48 +01:00
echo 'APT::Default-Release "buster";' > /etc/apt/apt.conf.d/08default-release
apt-get update
apt-get -y --no-show-progress -t unstable install raspi3-firmware
apt-get -y --no-show-progress -t experimental install linux-image-4.18.0-rc5-arm64-unsigned
2017-10-08 21:18:48 +01:00
- shell: |
echo "rpi3" > "${ROOT?}/etc/hostname"
# '..VyaTFxP8kT6' is crypt.crypt('raspberry', '..')
sed -i 's,root:[^:]*,root:..VyaTFxP8kT6,' "${ROOT?}/etc/shadow"
sed -i 's,#PermitRootLogin prohibit-password,PermitRootLogin yes,g' "${ROOT?}/etc/ssh/sshd_config"
install -m 644 -o root -g root fstab "${ROOT?}/etc/fstab"
install -m 644 -o root -g root eth0 "${ROOT?}/etc/network/interfaces.d/eth0"
mkdir -p "${ROOT?}/etc/iptables"
install -m 644 -o root -g root rules.v4 "${ROOT?}/etc/iptables/rules.v4"
install -m 644 -o root -g root rules.v6 "${ROOT?}/etc/iptables/rules.v6"
2018-01-04 08:04:20 +00:00
install -m 755 -o root -g root rpi3-resizerootfs "${ROOT?}/usr/sbin/rpi3-resizerootfs"
2017-10-08 21:18:48 +01:00
install -m 644 -o root -g root rpi3-resizerootfs.service "${ROOT?}/etc/systemd/system"
mkdir -p "${ROOT?}/etc/systemd/system/systemd-remount-fs.service.requires/"
ln -s /etc/systemd/system/rpi3-resizerootfs.service "${ROOT?}/etc/systemd/system/systemd-remount-fs.service.requires/rpi3-resizerootfs.service"
install -m 644 -o root -g root rpi3-generate-ssh-host-keys.service "${ROOT?}/etc/systemd/system"
mkdir -p "${ROOT?}/etc/systemd/system/multi-user.target.requires/"
ln -s /etc/systemd/system/rpi3-generate-ssh-host-keys.service "${ROOT?}/etc/systemd/system/multi-user.target.requires/rpi3-generate-ssh-host-keys.service"
rm -f ${ROOT?}/etc/ssh/ssh_host_*_key*
cat >> "${ROOT?}/etc/motd" <<'EOT'
Please change the root password by running passwd
EOT
root-fs: root-fs
# Clean up archive cache (likely not useful) and lists (likely outdated) to
# reduce image size by several hundred megabytes.
- chroot: root-fs
shell: |
apt-get clean
rm -rf /var/lib/apt/lists
# Modify the kernel commandline we take from the firmware to boot from
# the partition labeled raspiroot instead of forcing it to mmcblk0p2
- chroot: root-fs
shell: |
sed -i 's/.dev.mmcblk0p2/LABEL=raspiroot/' /boot/firmware/cmdline.txt
2017-10-08 21:18:48 +01:00
# TODO(https://github.com/larswirzenius/vmdb2/issues/24): remove once vmdb
# clears /etc/resolv.conf on its own.
- shell: |
rm "${ROOT?}/etc/resolv.conf"
root-fs: root-fs